Function at 0x42c170
Capabilities:
Create process on windows

Disassembly:
mov eax, 0x1144
call fcn.004b17a0
mov eax, dword [esp + 0x114e]
push ebx
push ebp
push esi
and eax, 0xffff
xor ebx, ebx
xor esi, esi
cmp eax, 0x2b
push edi
mov ebp, ecx
jg 0x42c46f
je 0x42c431
cmp eax, 0x2a
ja case.0x42c492.49
xor ecx, ecx
mov cl, byte [eax + 0x42c840]
jmp dword [ecx*4 + 0x42c810]
push ebx
push 0xffff
push 1
mov ecx, ebp
call fcn.00454160
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
push 1
mov ecx, ebp
call fcn.0043fe00
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
push 1
mov ecx, ebp
call fcn.0043e7d0
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
push ebx
push 1
mov ecx, ebp
call fcn.004372e0
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
lea edi, [esp + 0x1160]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x50]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x400
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0x54]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0xd58]
push ecx
push 0x2c
push ebx
push edx
call fcn.00402750
lea eax, [esp + 0x568]
push 0x400
push eax
push 0x2c
lea ecx, [esp + 0x70]
push 1
push ecx
call fcn.00402750
add esp, 0x28
lea edx, [esp + 0x554]
lea eax, [esp + 0xd54]
lea ecx, [esp + 0x954]
push edx
push eax
push str._s:___s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea edx, [esp + 0x954]
push 1
push ebx
push ebx
push edx
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov esi, 1
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
push 1
mov ecx, ebp
call fcn.0043d640
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
push 1
mov ecx, ebp
call fcn.0043c310
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, 0x8000ffff
je 0x42c368
cmp eax, 0x8007000e
je 0x42c368
cmp eax, 0x80070057
je 0x42c368
lea eax, [esp + 0x450]
push 0x104
push eax
push str.readme.txt
call dword [sym.imp.KERNEL32.dll_GetLongPathNameA]
push 1
push 0xfe549c
lea ecx, [esp + 0x458]
push 0xfe549c
push ecx
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
call dword [sym.imp.ole32.dll_CoUninitialize]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x1144
ret 0x1008
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x1144
ret 0x1008
cmp byte [esp + 0x1160], bl
je 0x42c4bd
mov dword [ebp + 0x7a0f77], 1
push 1
jmp 0x42c4c4
cmp byte [esp + 0x1160], bl
je 0x42c3ac
mov dword [ebp + 0x7a0f7f], 1
push 1
jmp 0x42c3bf
mov dword [ebp + 0x7a0f7b], ebx
mov dword [ebp + 0x7a0f7f], ebx
mov dword [ebp + 0x7a0f83], ebx
push ebx
push 0x200102
mov ecx, ebp
call fcn.00420b40
mov esi, 1
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
cmp byte [esp + 0x1160], bl
je 0x42c3b2
mov edx, dword [esp + 0x1162]
mov eax, dword [esp + 0x1161]
push ebx
and edx, 0xffff
push ebx
and eax, 0xff
push edx
push eax
push ebx
lea ecx, [ebp + 0x5a6f20]
call fcn.0042e7e0
test eax, eax
je 0x42c423
mov dword [ebp + 0x7a0f7f], 1
push 1
jmp 0x42c3bf
mov dword [ebp + 0x7a0f83], 1
push 1
jmp 0x42c3bf
cmp byte [esp + 0x1160], bl
je 0x42c454
mov esi, 1
pop edi
mov eax, esi
mov byte [ebp + 0x5a7380], bl
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
mov esi, 1
pop edi
mov eax, esi
mov byte [ebp + 0x5a7380], 1
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
cmp eax, 0x46
jg 0x42c720
je 0x42c6bf
add eax, 0xffffffd4
cmp eax, 0x14
ja case.0x42c492.49
xor ecx, ecx
mov cl, byte [eax + 0x42c884]
jmp dword [ecx*4 + 0x42c86c]
mov eax, dword [esp + 0x1160]
and eax, 0xff
dec eax
je 0x42c4b5
dec eax
jne 0x42c4d0
cmp byte [ebp + 0x5a7343], bl
je 0x42c4d0
jmp 0x42c4bd
cmp byte [ebp + 0x5a7342], bl
je 0x42c4d0
mov dword [ebp + 0x7a0f77], ebx
push ebx
push 0x200101
mov ecx, ebp
call fcn.00420b40
mov esi, 1
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
push ebx
mov ecx, ebp
call fcn.0041aca0
mov edx, dword [ebp + 0x7a105d]
mov esi, dword [esp + 0x1160]
mov edi, dword [esp + 0x1162]
lea eax, [esp + 0x50]
push 0x400
push eax
push 0x2c
lea ecx, [esp + 0x1170]
dec edx
push ebx
push ecx
mov dword [ebp + 0x7a1061], edx
call fcn.00402750
lea edx, [esp + 0x968]
push 0x400
push edx
push 0x2c
lea eax, [esp + 0x1184]
push 1
push eax
call fcn.00402750
lea ecx, [esp + 0xd7c]
push 0x400
push ecx
push 0x2c
lea edx, [esp + 0x1198]
push 2
push edx
call fcn.00402750
lea eax, [esp + 0x590]
push 0x400
push eax
push 0x2c
lea ecx, [esp + 0x11ac]
push 3
push ecx
call fcn.00402750
add esp, 0x50
lea edx, [esp + 0x10]
lea eax, [esp + 0x554]
push 0x40
push edx
push 0x400
push eax
push esi
call fcn.00426140
add esp, 0x14
test eax, eax
je 0x42c5b4
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebp
call fcn.00430510
test eax, eax
jne 0x42c5b4
mov esi, 1
and esi, 0xffff
push ebx
push esi
mov ecx, ebp
call fcn.004300f0
lea edx, [esp + 0x954]
lea eax, [esp + 0x50]
push edx
lea ecx, [esp + 0x558]
push eax
lea edx, [esp + 0x55c]
push ecx
lea eax, [esp + 0xd60]
push edx
lea ecx, [esp + 0xd64]
push eax
and edi, 0xffff
push ecx
push edi
mov ecx, ebp
call fcn.00442250
mov esi, 1
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
mov ecx, ebp
call fcn.00445f00
xor esi, esi
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
push ebx
mov ecx, ebp
call fcn.0041aca0
mov edx, dword [ebp + 0x7a105d]
lea eax, [esp + 0x50]
push 0x400
push eax
push 0x2c
lea ecx, [esp + 0x116c]
dec edx
push ebx
push ecx
mov dword [ebp + 0x7a1061], edx
call fcn.00402750
lea edx, [esp + 0x968]
push 0x400
push edx
push 0x2c
lea eax, [esp + 0x1180]
push 1
push eax
call fcn.00402750
add esp, 0x28
lea ecx, [esp + 0x954]
lea edx, [esp + 0x50]
push ecx
push edx
mov ecx, ebp
call fcn.00441770
xor esi, esi
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
push ebx
mov ecx, ebp
call fcn.0041aca0
mov ecx, ebp
call fcn.0044c800
xor esi, esi
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
lea edi, [esp + 0x116a]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x50]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, dword [esp + 0x1166]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x1162]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x1164]
push edx
and ecx, 0xffff
push eax
push ecx
mov ecx, ebp
call fcn.004427a0
mov esi, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
cmp eax, 0x65
jg 0x42c7cb
je 0x42c798
cmp eax, 0x50
je 0x42c763
cmp eax, 0x64
jne case.0x42c492.49
mov edx, dword [esp + 0x1160]
push ebx
and edx, 0xffff
mov ecx, ebp
push edx
call fcn.00454fd0
mov esi, 1
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
push ebx
mov ecx, ebp
call fcn.0041aca0
mov eax, dword [ebp + 0x7a105d]
lea ecx, [esp + 0x1160]
dec eax
push ecx
mov ecx, ebp
mov dword [ebp + 0x7a1061], eax
call fcn.0044d540
xor esi, esi
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
mov eax, dword [esp + 0x1160]
xor edx, edx
mov dx, word [ebp + 0x7a0f41]
and eax, 0xffff
push edx
push eax
mov ecx, ebp
call fcn.00455510
test eax, eax
je case.0x42c492.49
xor esi, esi
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
cmp eax, 0x66
je 0x42c7f6
cmp eax, 0x384
jne case.0x42c492.49
mov ecx, ebp
call fcn.0045f8a0
test eax, eax
jne case.0x42c492.49
mov esi, 1
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008
push ebx
mov ecx, ebp
call fcn.004563f0
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1144
ret 0x1008