Function at 0x42bbaa
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov dword [ebp - 4], ecx
mov ecx, 0x51d1d50
call fcn.004114c0
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
push ecx
mov ecx, 0x50bf048
call fcn.00475a40
movzx edx, al
test edx, edx
je case.0x42b6ae.3
push 0xffffffffffffffff
mov ecx, 0x50bf048
call fcn.004751a0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0x90
ja case.0x42b6ae.3
mov edx, dword [ebp - 0x30]
movzx eax, byte [edx + 0x42c390]
jmp dword [eax*4 + 0x42c304]
mov ecx, dword [ebp - 4]
call fcn.0042acb0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov ecx, dword [ebp - 4]
call fcn.00427bf0
jmp case.0x42b6ae.3
mov ecx, dword [ebp - 4]
call fcn.0042acb0
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], 0
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42b6ae.3
mov ecx, dword [ebp - 4]
call fcn.0042acb0
mov eax, dword [ebp - 4]
mov dword [eax + 0x14], 4
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x24], 1
mov edx, dword [ebp - 4]
mov dword [edx + 0x30], 0
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42b6ae.3
mov ecx, dword [ebp - 4]
call fcn.0042acb0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x24], 2
mov eax, dword [ebp - 4]
mov dword [eax + 0x30], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42b6ae.3
mov ecx, dword [ebp - 4]
call fcn.0042acb0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x24], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x30], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42b6ae.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9a4]
sub edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9a4], edx
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xc9a4], 0
jl 0x42b7df
push 1
mov ecx, dword [ebp - 4]
call fcn.00430550
mov ecx, 0x59ca610
call fcn.004597e0
jmp case.0x42b6ae.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9a4]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9a4], eax
push 1
mov ecx, dword [ebp - 4]
call fcn.00430550
mov ecx, 0x59ca610
call fcn.004597e0
jmp case.0x42b6ae.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9a8]
sub eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9a8], eax
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9a8], 0
jl 0x42b847
push 1
mov ecx, dword [ebp - 4]
call fcn.004308e0
mov ecx, 0x59ca610
call fcn.004597e0
jmp case.0x42b6ae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc9a8]
add ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9a8], ecx
push 1
mov ecx, dword [ebp - 4]
call fcn.004308e0
mov ecx, 0x59ca610
call fcn.004597e0
jmp case.0x42b6ae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc9ac]
sub ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9ac], ecx
mov eax, dword [ebp - 4]
cmp dword [eax + 0xc9ac], 0
jl 0x42b8af
push 1
mov ecx, dword [ebp - 4]
call fcn.00430ba0
mov ecx, 0x59ca610
call fcn.004597e0
jmp case.0x42b6ae.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9ac]
add edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9ac], edx
push 1
mov ecx, dword [ebp - 4]
call fcn.00430ba0
mov ecx, 0x59ca610
call fcn.004597e0
jmp case.0x42b6ae.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9b0]
sub edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9b0], edx
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xc9b0], 0
jl 0x42b917
push 1
mov ecx, dword [ebp - 4]
call fcn.00430e80
mov ecx, 0x59ca610
call fcn.004597e0
jmp case.0x42b6ae.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9b0]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9b0], eax
push 1
mov ecx, dword [ebp - 4]
call fcn.00430e80
mov ecx, 0x59ca610
call fcn.004597e0
jmp case.0x42b6ae.3
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], 0
push 0
mov ecx, 0x51ca6a0
call fcn.004642f0
mov ecx, dword [ebp - 4]
call fcn.0042acb0
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42b6ae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, 0x606c470
call fcn.00496bf0
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x42b9ba
jmp case.0x42b6ae.3
mov edx, 0x64
imul eax, edx, 0
mov ecx, dword [ebp - 0x24]
lea edx, [ecx + eax + 0x104]
push edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc664], 0
mov edx, dword [ebp - 4]
xorps xmm0, xmm0
movss dword [edx + 0xc670], xmm0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042c520
mov edx, dword [ebp - 4]
fstp dword [edx + 0xc674]
push 0x8fe
mov ecx, 0x5252170
call fcn.004160d0
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x2e8], 0
jne 0x42ba35
jmp case.0x42b6ae.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
push ecx
movss xmm0, dword [ecx + 0xc674]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 0x2e8]
mov ecx, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x2e8]
mov eax, dword [edx + 0x5c]
call eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9b8], 0
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9bc], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9c0], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
mov ecx, dword [ebp - 4]
call fcn.00431130
mov ecx, dword [ebp - 4]
call fcn.0042f5e0
push 1
mov ecx, 0x64
imul edx, ecx, 0
mov eax, dword [ebp - 0x24]
lea ecx, [eax + edx + 0x104]
push ecx
mov ecx, 0x606c470
call fcn.00496b20
push eax
mov ecx, dword [ebp - 4]
call fcn.0042eab0
jmp case.0x42b6ae.3
push str.w000001a
mov ecx, dword [ebp - 4]
call fcn.0042f730
mov edx, dword [ebp - 4]
mov dword [edx + 0x1cd8], 0x52
jmp case.0x42b6ae.3
mov ecx, dword [ebp - 4]
call fcn.0042f6c0
mov eax, dword [ebp - 4]
mov dword [eax + 0x1cd8], 0x53
jmp case.0x42b6ae.3
push ecx
movss xmm0, dword [0x4d5d88]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432290
jmp case.0x42b6ae.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432290
jmp case.0x42b6ae.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432380
jmp case.0x42b6ae.3
push ecx
movss xmm0, dword [0x4d5d88]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432380
jmp case.0x42b6ae.3
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9c0], 1
jmp case.0x42b6ae.3
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9c0], 0
jmp case.0x42b6ae.3
call fcn.00414f50
test eax, eax
jne 0x42bbcb
push 1
push 0
push 0
push 0x4e09f8
push str.explore
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x42b6ae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x55
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
push edx
mov ecx, dword [ebp - 4]
call fcn.0042c690
jmp case.0x42b6ae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x5a
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x3c]
add eax, dword [edx + 0xc9b0]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042fc00
jmp case.0x42b6ae.3
push 0x8ff
mov ecx, 0x5252170
call fcn.004160d0
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
cmp dword [ecx + 0x1d8], 0
je 0x42bc45
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 0x1d8]
push eax
mov ecx, 0x59c9f58
call fcn.00472190
push 0x8ff
mov ecx, 0x5252170
call fcn.0043ff70
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], 0
jmp 0x42bc6d
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0xa
jge 0x42bc93
mov edx, dword [ebp - 0x14]
add edx, 0x6e
push edx
mov ecx, 0x50bf048
call fcn.00475f10
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
mov dword [edx + ecx*4 + 0xc684], eax
jmp 0x42bc64
mov ecx, 0x59ca610
call fcn.00459aa0
mov ecx, 0x50bf048
call fcn.00473630
push 0x73
mov ecx, 0x5252170
call fcn.00445e80
push 0x79
mov ecx, 0x5252170
call fcn.00445e80
push 0x47
mov ecx, 0x5252170
call fcn.00445e80
mov eax, dword [ebp - 4]
mov dword [eax + 0x14], 0xb
jmp case.0x42b6ae.3
mov ecx, dword [ebp - 4]
call fcn.0042c430
jmp case.0x42b6ae.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
push edx
mov ecx, 0x606c470
call fcn.00496bf0
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x42bd09
jmp case.0x42b6ae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x3c
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x40]
add eax, dword [edx + 0xc9a8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc664], eax
push 1
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0xc664], 0x64
mov ecx, dword [ebp - 0x28]
lea edx, [ecx + eax + 0x104]
push edx
mov ecx, 0x606c470
call fcn.00496b20
push eax
mov ecx, dword [ebp - 4]
call fcn.0042eab0
mov eax, dword [ebp - 4]
imul ecx, dword [eax + 0xc664], 0x64
mov edx, dword [ebp - 0x28]
lea eax, [edx + ecx + 0x104]
push eax
mov ecx, dword [ebp - 4]
add ecx, 0xc59c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.0x42b6ae.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
sub eax, 0x5f
mov dword [ebp - 0x44], eax
push 1
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x44]
add edx, dword [ecx + 0xc9ac]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042f0a0
jmp case.0x42b6ae.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
push eax
mov ecx, 0x606c470
call fcn.00496bf0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x42bdd2
jmp case.0x42b6ae.3
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x18], 0
jmp 0x42bdeb
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0xa
jge 0x42be1e
mov edx, dword [ebp - 0x18]
add edx, 0x6e
push edx
mov ecx, 0x50bf048
call fcn.00475f10
mov ecx, dword [ebp - 4]
imul edx, dword [ecx + 0x1ccc], 0x28
mov ecx, dword [ebp - 8]
lea edx, [ecx + edx + 0x7edcc]
mov ecx, dword [ebp - 0x18]
mov dword [edx + ecx*4], eax
jmp 0x42bde2
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1cd0]
mov dword [ecx + eax*4 + 0x7f27c], edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
mov ecx, dword [ebp - 8]
add ecx, 0x7f2f4
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1cd4]
mov dword [ecx + eax*4 + 0x7f3bc], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc664]
mov dword [edx + ecx*4 + 0x7f434], eax
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0xc670]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov eax, dword [ebp - 8]
mov dword [eax + ecx*4 + 0x7f4ac], edx
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0xc674]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov eax, dword [ebp - 8]
mov dword [eax + ecx*4 + 0x7f524], edx
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0xc9b8]
mov dword [eax + edx*4 + 0x7f59c], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xc9bc]
mov dword [ecx + eax*4 + 0x7f614], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9c0]
mov dword [edx + ecx*4 + 0x7f68c], eax
mov ecx, 0x51d1d50
call fcn.0045bd30
jmp case.0x42b6ae.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
cmp dword [eax + edx*4 + 0x7f27c], 0
jl 0x42c293
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
cvtsi2ss xmm0, dword [eax + edx*4 + 0x7f4ac]
mov ecx, dword [ebp - 4]
movss dword [ecx + 0xc670], xmm0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
cvtsi2ss xmm0, dword [ecx + eax*4 + 0x7f524]
mov edx, dword [ebp - 4]
movss dword [edx + 0xc674], xmm0
mov eax, dword [ebp - 4]
mov dword [eax + 0x1cd0], 0xffffffff
push 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
mov ecx, dword [eax + edx*4 + 0x7f27c]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042f0a0
push 0x8fe
mov ecx, 0x5252170
call fcn.004160d0
mov dword [ebp - 0x1c], eax
mov ecx, 0x51d1d50
call fcn.004114c0
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
imul edx, dword [ecx + 0x1ccc], 0x28
mov eax, dword [ebp - 0x10]
lea ecx, [eax + edx + 0x7edcc]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax]
mov dword [ebp - 0x4c], ecx
cvtsi2ss xmm0, dword [ebp - 0x4c]
divss xmm0, dword [0x4d5fa0]
mulss xmm0, dword [0x4d5da0]
addss xmm0, dword [0x4d5d74]
movss dword [ebp - 0x2c], xmm0
xorps xmm0, xmm0
comiss xmm0, dword [ebp - 0x2c]
jb 0x42c032
movss xmm0, dword [0x4d5d50]
movss dword [ebp - 0x2c], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, 0x606c470
call fcn.0042abf0
fstp dword [ebp - 0x50]
movss xmm0, dword [ebp - 0x50]
mulss xmm0, dword [ebp - 0x2c]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x2e8]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x2e8]
mov eax, dword [edx + 0x64]
call eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x7f2f4
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x42c0ad
push 0
mov edx, dword [ebp - 0x10]
add edx, 0x7f2f4
push edx
mov ecx, 0x606c470
call fcn.00496b20
push eax
mov ecx, dword [ebp - 4]
call fcn.0042eab0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7f59c]
mov dword [edx + 0xc9b8], ecx
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9b8], 1
jne 0x42c0ed
push ecx
movss xmm0, dword [0x4d5d88]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432290
jmp 0x42c0fe
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432290
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7f614]
mov dword [edx + 0xc9bc], ecx
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9bc], 1
jne 0x42c139
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432380
jmp 0x42c14f
push ecx
movss xmm0, dword [0x4d5d88]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432380
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + ecx*4 + 0x7f3bc]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042fc00
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + edx*4 + 0x7f434]
mov dword [eax + 0xc664], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7f3bc]
mov dword [edx + 0x1cd4], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x7f2f4
push edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
mov ecx, dword [ebp - 4]
call fcn.00431130
mov dword [ebp - 0xc], 0
mov dword [ebp - 0xc], 0
jmp 0x42c1ea
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0xa
jge 0x42c22f
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0x1ccc], 0x28
mov ecx, dword [ebp - 0x10]
lea edx, [ecx + eax + 0x7edcc]
mov eax, dword [ebp - 0xc]
mov ecx, dword [edx + eax*4]
push ecx
mov edx, dword [ebp - 0xc]
add edx, 0x6e
push edx
mov ecx, 0x50bf048
call fcn.004760a0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov dword [ecx + eax*4 + 0x19ac], 0xfffffed4
jmp 0x42c1e1
mov dword [ebp - 0xc], 0
imul edx, dword [ebp - 0xc], 0xd8
mov eax, dword [ebp - 4]
cmp dword [eax + edx + 0x1da4], 0
jl 0x42c261
mov ecx, dword [ebp - 0xc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042ede0
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x42c236
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x2e8], 0
je 0x42c289
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x2e8]
mov eax, dword [ebp - 0x1c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x2e8]
mov eax, dword [edx + 0x10c]
call eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 9
jmp case.0x42b6ae.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
sub eax, 6
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], eax
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42b6ae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x12
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0x30], 0xc
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 0xa
mov edx, dword [ebp - 0x58]
push edx
mov ecx, dword [ebp - 4]
call fcn.0042c690
mov eax, dword [ebp - 4]
mov dword [eax + 0x18], 0xffffffff
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x1c], 0xffffffff
mov edx, dword [ebp - 4]
mov dword [edx + 0x20], 0xffffffff
mov esp, ebp
pop ebp
ret