Function at 0x42af81
Capabilities:
Create process on windows

Disassembly:
push 0x7c
mov eax, 0x4bf3f1
call fcn.004943c6
mov esi, ecx
xor ebx, ebx
cmp dword [esi + 0x4c], ebx
je 0x42afa0
xor eax, eax
call fcn.0049449e
ret 4
lea edi, [esi + 0x598]
mov ecx, edi
call fcn.0040d59a
test al, al
jne 0x42af96
push edi
lea ecx, [ebp - 0x14]
call fcn.00472280
cmp byte [ebp - 0xd], 0xff
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x14]
jne 0x42afc9
mov eax, dword [ebp - 0x14]
push 0x4d39c8
push eax
call fcn.00493420
pop ecx
test eax, eax
lea eax, [esi + 0x15c]
pop ecx
push eax
lea eax, [ebp - 0x34]
jne 0x42aff8
push str._distcode
push eax
call fcn.00472c70
add esp, 0xc
mov byte [ebp - 4], 1
jmp 0x42b00a
push 0x4d47b0
push eax
call fcn.00472c70
add esp, 0xc
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x14]
call fcn.00472880
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.00472320
lea eax, [esi + 0x1a4]
push eax
lea eax, [ebp - 0x34]
push 0x4d47a8
push eax
call fcn.00472c70
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 3
call fcn.00472880
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.00472320
lea eax, [esi + 0x18c]
push eax
lea eax, [ebp - 0x34]
push str.li
push eax
call fcn.00472c70
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
call fcn.00472880
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], bl
call fcn.00472320
lea ecx, [ebp - 0x2c]
call fcn.00472090
mov eax, dword [esi + 0xb30]
mov byte [ebp - 4], 5
cmp eax, 1
jb 0x42b0c0
push eax
push 0x2c
lea eax, [ebp - 0x34]
push eax
lea ecx, [esi + 0x628]
call fcn.00472cc0
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.004723d0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 5
call fcn.00472320
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push str.cancelled
push eax
call fcn.00472c70
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 7
call fcn.00472880
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 5
call fcn.00472320
lea ecx, [ebp - 0x24]
call fcn.00472090
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.00472090
mov edi, dword [esi + 0x730]
mov byte [ebp - 4], 9
jmp 0x42b1e9
cmp dword [edi + 8], ebx
je 0x42b17a
lea ecx, [ebp - 0x24]
call fcn.0040d59a
test al, al
jne 0x42b150
push 0x4d3f6c
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00472c20
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xa
call fcn.004723d0
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 9
call fcn.00472320
push edi
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00472bd0
add esp, 0xc
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xb
call fcn.004723d0
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 9
call fcn.00472320
cmp dword [edi + 0xc], ebx
je 0x42b1e3
lea ecx, [ebp - 0x1c]
call fcn.0040d59a
test al, al
jne 0x42b1b9
push 0x4d3f6c
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.00472c20
add esp, 0xc
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xc
call fcn.004723d0
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 9
call fcn.00472320
push edi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00472bd0
add esp, 0xc
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0xd
call fcn.004723d0
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 9
call fcn.00472320
add edi, 0xd0
cmp edi, dword [esi + 0x734]
jne 0x42b111
lea ecx, [ebp - 0x24]
call fcn.0040d59a
mov esi, str.none
test al, al
je 0x42b20f
push esi
lea ecx, [ebp - 0x24]
call fcn.00472470
lea ecx, [ebp - 0x1c]
call fcn.0040d59a
test al, al
je 0x42b224
push esi
lea ecx, [ebp - 0x1c]
call fcn.00472470
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x3c]
push str.displayedoffer
push eax
call fcn.00472c70
push str.acceptedoffer
push eax
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 0xe
call fcn.00472c20
lea ecx, [ebp - 0x1c]
push ecx
push eax
lea eax, [ebp - 0x4c]
push eax
mov byte [ebp - 4], 0xf
call fcn.00472bd0
add esp, 0x24
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x10
call fcn.00472880
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00472320
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0xe
call fcn.00472320
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 9
call fcn.00472320
push dword [ebp + 8]
lea eax, [ebp - 0x4c]
push str.action
push eax
call fcn.00472c70
add esp, 0xc
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x11
call fcn.00472880
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 9
call fcn.00472320
push 0x38
lea eax, [ebp - 0x84]
push ebx
push eax
call fcn.00493d40
add esp, 0xc
cmp byte [ebp - 0xd], 0xff
mov dword [ebp - 0x88], 0x3c
mov dword [ebp - 0x84], 0x440
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], str.open
lea eax, [ebp - 0x14]
jne 0x42b2f8
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x78], eax
xor esi, esi
lea eax, [ebp - 0x88]
inc esi
push eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], esi
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
test eax, eax
je 0x42b357
push dword [ebp - 0x50]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 8
call fcn.00472320
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.00472320
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], bl
call fcn.00472320
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00472320
mov eax, esi
jmp 0x42af98
xor esi, esi
jmp 0x42b321