Function at 0x42b8ca
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov dword [ebp - 4], ecx
mov ecx, 0x48a6100
call fcn.00411430
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
push ecx
mov ecx, 0x4792b78
call fcn.00474a40
movzx edx, al
test edx, edx
je case.0x42b3ce.3
push 0xffffffffffffffff
mov ecx, 0x4792b78
call fcn.004741a0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0x90
ja case.0x42b3ce.3
mov edx, dword [ebp - 0x30]
movzx eax, byte [edx + 0x42c0b0]
jmp dword [eax*4 + 0x42c024]
mov ecx, dword [ebp - 4]
call fcn.0042a9b0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov ecx, dword [ebp - 4]
call fcn.004278b0
jmp case.0x42b3ce.3
mov ecx, dword [ebp - 4]
call fcn.0042a9b0
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], 0
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42b3ce.3
mov ecx, dword [ebp - 4]
call fcn.0042a9b0
mov eax, dword [ebp - 4]
mov dword [eax + 0x14], 4
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x24], 1
mov edx, dword [ebp - 4]
mov dword [edx + 0x30], 0
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42b3ce.3
mov ecx, dword [ebp - 4]
call fcn.0042a9b0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x24], 2
mov eax, dword [ebp - 4]
mov dword [eax + 0x30], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42b3ce.3
mov ecx, dword [ebp - 4]
call fcn.0042a9b0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x24], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x30], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42b3ce.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9a4]
sub edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9a4], edx
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xc9a4], 0
jl 0x42b4ff
push 1
mov ecx, dword [ebp - 4]
call fcn.00430290
mov ecx, 0x50a8e78
call fcn.00458f70
jmp case.0x42b3ce.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9a4]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9a4], eax
push 1
mov ecx, dword [ebp - 4]
call fcn.00430290
mov ecx, 0x50a8e78
call fcn.00458f70
jmp case.0x42b3ce.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9a8]
sub eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9a8], eax
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9a8], 0
jl 0x42b567
push 1
mov ecx, dword [ebp - 4]
call fcn.00430670
mov ecx, 0x50a8e78
call fcn.00458f70
jmp case.0x42b3ce.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc9a8]
add ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9a8], ecx
push 1
mov ecx, dword [ebp - 4]
call fcn.00430670
mov ecx, 0x50a8e78
call fcn.00458f70
jmp case.0x42b3ce.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc9ac]
sub ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9ac], ecx
mov eax, dword [ebp - 4]
cmp dword [eax + 0xc9ac], 0
jl 0x42b5cf
push 1
mov ecx, dword [ebp - 4]
call fcn.00430970
mov ecx, 0x50a8e78
call fcn.00458f70
jmp case.0x42b3ce.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9ac]
add edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9ac], edx
push 1
mov ecx, dword [ebp - 4]
call fcn.00430970
mov ecx, 0x50a8e78
call fcn.00458f70
jmp case.0x42b3ce.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9b0]
sub edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9b0], edx
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xc9b0], 0
jl 0x42b637
push 1
mov ecx, dword [ebp - 4]
call fcn.00430c90
mov ecx, 0x50a8e78
call fcn.00458f70
jmp case.0x42b3ce.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9b0]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9b0], eax
push 1
mov ecx, dword [ebp - 4]
call fcn.00430c90
mov ecx, 0x50a8e78
call fcn.00458f70
jmp case.0x42b3ce.3
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], 0
push 0
mov ecx, 0x489e1d0
call fcn.00463a90
mov ecx, dword [ebp - 4]
call fcn.0042a9b0
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42b3ce.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, 0x574acd8
call fcn.00492dc0
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x42b6da
jmp case.0x42b3ce.3
mov edx, 0x64
imul eax, edx, 0
mov ecx, dword [ebp - 0x24]
lea edx, [ecx + eax + 0x104]
push edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc664], 0
mov edx, dword [ebp - 4]
xorps xmm0, xmm0
movss dword [edx + 0xc670], xmm0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042c240
mov edx, dword [ebp - 4]
fstp dword [edx + 0xc674]
push 0x8fe
mov ecx, 0x4926138
call fcn.00415e00
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x2e8], 0
jne 0x42b755
jmp case.0x42b3ce.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
push ecx
movss xmm0, dword [ecx + 0xc674]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 0x2e8]
mov ecx, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x2e8]
mov eax, dword [edx + 0x5c]
call eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9b8], 0
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9bc], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9c0], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
mov ecx, dword [ebp - 4]
call fcn.00430f80
mov ecx, dword [ebp - 4]
call fcn.0042f300
push 1
mov ecx, 0x64
imul edx, ecx, 0
mov eax, dword [ebp - 0x24]
lea ecx, [eax + edx + 0x104]
push ecx
mov ecx, 0x574acd8
call fcn.00492cf0
push eax
mov ecx, dword [ebp - 4]
call fcn.0042e7d0
jmp case.0x42b3ce.3
push str.w000001a
mov ecx, dword [ebp - 4]
call fcn.0042f450
mov edx, dword [ebp - 4]
mov dword [edx + 0x1cd8], 0x52
jmp case.0x42b3ce.3
mov ecx, dword [ebp - 4]
call fcn.0042f3e0
mov eax, dword [ebp - 4]
mov dword [eax + 0x1cd8], 0x53
jmp case.0x42b3ce.3
push ecx
movss xmm0, dword [0x4c7d84]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432360
jmp case.0x42b3ce.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432360
jmp case.0x42b3ce.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432450
jmp case.0x42b3ce.3
push ecx
movss xmm0, dword [0x4c7d84]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432450
jmp case.0x42b3ce.3
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9c0], 1
jmp case.0x42b3ce.3
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9c0], 0
jmp case.0x42b3ce.3
call fcn.00414cf0
test eax, eax
jne 0x42b8eb
push 1
push 0
push 0
push 0x4d16e8
push str.explore
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x42b3ce.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x55
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
push edx
mov ecx, dword [ebp - 4]
call fcn.0042c3b0
jmp case.0x42b3ce.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x5a
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x3c]
add eax, dword [edx + 0xc9b0]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042f920
jmp case.0x42b3ce.3
push 0x8ff
mov ecx, 0x4926138
call fcn.00415e00
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
cmp dword [ecx + 0x1d8], 0
je 0x42b965
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 0x1d8]
push eax
mov ecx, 0x50a87e0
call fcn.004711e0
push 0x8ff
mov ecx, 0x4926138
call fcn.00440910
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], 0
jmp 0x42b98d
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0xa
jge 0x42b9b3
mov edx, dword [ebp - 0x14]
add edx, 0x6e
push edx
mov ecx, 0x4792b78
call fcn.00474f10
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
mov dword [edx + ecx*4 + 0xc684], eax
jmp 0x42b984
mov ecx, 0x50a8e78
call fcn.00459230
mov ecx, 0x4792b78
call fcn.00472630
push 0x73
mov ecx, 0x4926138
call fcn.00446820
push 0x79
mov ecx, 0x4926138
call fcn.00446820
push 0x47
mov ecx, 0x4926138
call fcn.00446820
mov eax, dword [ebp - 4]
mov dword [eax + 0x14], 0xb
jmp case.0x42b3ce.3
mov ecx, dword [ebp - 4]
call fcn.0042c150
jmp case.0x42b3ce.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
push edx
mov ecx, 0x574acd8
call fcn.00492dc0
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x42ba29
jmp case.0x42b3ce.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x3c
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x40]
add eax, dword [edx + 0xc9a8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc664], eax
push 1
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0xc664], 0x64
mov ecx, dword [ebp - 0x28]
lea edx, [ecx + eax + 0x104]
push edx
mov ecx, 0x574acd8
call fcn.00492cf0
push eax
mov ecx, dword [ebp - 4]
call fcn.0042e7d0
mov eax, dword [ebp - 4]
imul ecx, dword [eax + 0xc664], 0x64
mov edx, dword [ebp - 0x28]
lea eax, [edx + ecx + 0x104]
push eax
mov ecx, dword [ebp - 4]
add ecx, 0xc59c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.0x42b3ce.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
sub eax, 0x5f
mov dword [ebp - 0x44], eax
push 1
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x44]
add edx, dword [ecx + 0xc9ac]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042edc0
jmp case.0x42b3ce.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
push eax
mov ecx, 0x574acd8
call fcn.00492dc0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x42baf2
jmp case.0x42b3ce.3
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x18], 0
jmp 0x42bb0b
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0xa
jge 0x42bb3e
mov edx, dword [ebp - 0x18]
add edx, 0x6e
push edx
mov ecx, 0x4792b78
call fcn.00474f10
mov ecx, dword [ebp - 4]
imul edx, dword [ecx + 0x1ccc], 0x28
mov ecx, dword [ebp - 8]
lea edx, [ecx + edx + 0x7e9e4]
mov ecx, dword [ebp - 0x18]
mov dword [edx + ecx*4], eax
jmp 0x42bb02
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1cd0]
mov dword [ecx + eax*4 + 0x7ee94], edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
mov ecx, dword [ebp - 8]
add ecx, 0x7ef0c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1cd4]
mov dword [ecx + eax*4 + 0x7efd4], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc664]
mov dword [edx + ecx*4 + 0x7f04c], eax
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0xc670]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov eax, dword [ebp - 8]
mov dword [eax + ecx*4 + 0x7f0c4], edx
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0xc674]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov eax, dword [ebp - 8]
mov dword [eax + ecx*4 + 0x7f13c], edx
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0xc9b8]
mov dword [eax + edx*4 + 0x7f1b4], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xc9bc]
mov dword [ecx + eax*4 + 0x7f22c], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9c0]
mov dword [edx + ecx*4 + 0x7f2a4], eax
mov ecx, 0x48a6100
call fcn.0045b4d0
jmp case.0x42b3ce.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
cmp dword [eax + edx*4 + 0x7ee94], 0
jl 0x42bfb3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
cvtsi2ss xmm0, dword [eax + edx*4 + 0x7f0c4]
mov ecx, dword [ebp - 4]
movss dword [ecx + 0xc670], xmm0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
cvtsi2ss xmm0, dword [ecx + eax*4 + 0x7f13c]
mov edx, dword [ebp - 4]
movss dword [edx + 0xc674], xmm0
mov eax, dword [ebp - 4]
mov dword [eax + 0x1cd0], 0xffffffff
push 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
mov ecx, dword [eax + edx*4 + 0x7ee94]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042edc0
push 0x8fe
mov ecx, 0x4926138
call fcn.00415e00
mov dword [ebp - 0x1c], eax
mov ecx, 0x48a6100
call fcn.00411430
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
imul edx, dword [ecx + 0x1ccc], 0x28
mov eax, dword [ebp - 0x10]
lea ecx, [eax + edx + 0x7e9e4]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax]
mov dword [ebp - 0x4c], ecx
cvtsi2ss xmm0, dword [ebp - 0x4c]
divss xmm0, dword [0x4c7f8c]
mulss xmm0, dword [0x4c7d98]
addss xmm0, dword [0x4c7d70]
movss dword [ebp - 0x2c], xmm0
xorps xmm0, xmm0
comiss xmm0, dword [ebp - 0x2c]
jb 0x42bd52
movss xmm0, dword [0x4c7d4c]
movss dword [ebp - 0x2c], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, 0x574acd8
call fcn.0042a8f0
fstp dword [ebp - 0x50]
movss xmm0, dword [ebp - 0x50]
mulss xmm0, dword [ebp - 0x2c]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x2e8]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x2e8]
mov eax, dword [edx + 0x64]
call eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x7ef0c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x42bdcd
push 0
mov edx, dword [ebp - 0x10]
add edx, 0x7ef0c
push edx
mov ecx, 0x574acd8
call fcn.00492cf0
push eax
mov ecx, dword [ebp - 4]
call fcn.0042e7d0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7f1b4]
mov dword [edx + 0xc9b8], ecx
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9b8], 1
jne 0x42be0d
push ecx
movss xmm0, dword [0x4c7d84]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432360
jmp 0x42be1e
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432360
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7f22c]
mov dword [edx + 0xc9bc], ecx
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9bc], 1
jne 0x42be59
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432450
jmp 0x42be6f
push ecx
movss xmm0, dword [0x4c7d84]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00432450
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + ecx*4 + 0x7efd4]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042f920
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + edx*4 + 0x7f04c]
mov dword [eax + 0xc664], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7efd4]
mov dword [edx + 0x1cd4], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x7ef0c
push edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
mov ecx, dword [ebp - 4]
call fcn.00430f80
mov dword [ebp - 0xc], 0
mov dword [ebp - 0xc], 0
jmp 0x42bf0a
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0xa
jge 0x42bf4f
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0x1ccc], 0x28
mov ecx, dword [ebp - 0x10]
lea edx, [ecx + eax + 0x7e9e4]
mov eax, dword [ebp - 0xc]
mov ecx, dword [edx + eax*4]
push ecx
mov edx, dword [ebp - 0xc]
add edx, 0x6e
push edx
mov ecx, 0x4792b78
call fcn.004750a0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov dword [ecx + eax*4 + 0x19ac], 0xfffffed4
jmp 0x42bf01
mov dword [ebp - 0xc], 0
imul edx, dword [ebp - 0xc], 0xd8
mov eax, dword [ebp - 4]
cmp dword [eax + edx + 0x1da4], 0
jl 0x42bf81
mov ecx, dword [ebp - 0xc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042eb00
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x42bf56
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x2e8], 0
je 0x42bfa9
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x2e8]
mov eax, dword [ebp - 0x1c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x2e8]
mov eax, dword [edx + 0x10c]
call eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 9
jmp case.0x42b3ce.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
sub eax, 6
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], eax
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42b3ce.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x12
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0x30], 0xc
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 0xa
mov edx, dword [ebp - 0x58]
push edx
mov ecx, dword [ebp - 4]
call fcn.0042c3b0
mov eax, dword [ebp - 4]
mov dword [eax + 0x18], 0xffffffff
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x1c], 0xffffffff
mov edx, dword [ebp - 4]
mov dword [edx + 0x20], 0xffffffff
mov esp, ebp
pop ebp
ret