Function at 0x42b1fa
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov dword [ebp - 4], ecx
mov ecx, 0x45d79a8
call fcn.00411450
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
push ecx
mov ecx, 0x44c4408
call fcn.00471ec0
movzx edx, al
test edx, edx
je case.0x42acfe.3
push 0xffffffffffffffff
mov ecx, 0x44c4408
call fcn.00471620
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0x90
ja case.0x42acfe.3
mov edx, dword [ebp - 0x30]
movzx eax, byte [edx + 0x42b9e0]
jmp dword [eax*4 + 0x42b954]
mov ecx, dword [ebp - 4]
call fcn.0042a380
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov ecx, dword [ebp - 4]
call fcn.004272a0
jmp case.0x42acfe.3
mov ecx, dword [ebp - 4]
call fcn.0042a380
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], 0
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42acfe.3
mov ecx, dword [ebp - 4]
call fcn.0042a380
mov eax, dword [ebp - 4]
mov dword [eax + 0x14], 4
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x24], 1
mov edx, dword [ebp - 4]
mov dword [edx + 0x30], 0
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42acfe.3
mov ecx, dword [ebp - 4]
call fcn.0042a380
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x24], 2
mov eax, dword [ebp - 4]
mov dword [eax + 0x30], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42acfe.3
mov ecx, dword [ebp - 4]
call fcn.0042a380
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x24], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x30], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42acfe.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9a4]
sub edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9a4], edx
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xc9a4], 0
jl 0x42ae2f
push 1
mov ecx, dword [ebp - 4]
call fcn.0042fb40
mov ecx, 0x4dd7660
call fcn.00457e80
jmp case.0x42acfe.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9a4]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9a4], eax
push 1
mov ecx, dword [ebp - 4]
call fcn.0042fb40
mov ecx, 0x4dd7660
call fcn.00457e80
jmp case.0x42acfe.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9a8]
sub eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9a8], eax
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9a8], 0
jl 0x42ae97
push 1
mov ecx, dword [ebp - 4]
call fcn.0042fe90
mov ecx, 0x4dd7660
call fcn.00457e80
jmp case.0x42acfe.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc9a8]
add ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9a8], ecx
push 1
mov ecx, dword [ebp - 4]
call fcn.0042fe90
mov ecx, 0x4dd7660
call fcn.00457e80
jmp case.0x42acfe.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc9ac]
sub ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9ac], ecx
mov eax, dword [ebp - 4]
cmp dword [eax + 0xc9ac], 0
jl 0x42aeff
push 1
mov ecx, dword [ebp - 4]
call fcn.00430150
mov ecx, 0x4dd7660
call fcn.00457e80
jmp case.0x42acfe.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9ac]
add edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9ac], edx
push 1
mov ecx, dword [ebp - 4]
call fcn.00430150
mov ecx, 0x4dd7660
call fcn.00457e80
jmp case.0x42acfe.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9b0]
sub edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9b0], edx
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xc9b0], 0
jl 0x42af67
push 1
mov ecx, dword [ebp - 4]
call fcn.00430430
mov ecx, 0x4dd7660
call fcn.00457e80
jmp case.0x42acfe.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9b0]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9b0], eax
push 1
mov ecx, dword [ebp - 4]
call fcn.00430430
mov ecx, 0x4dd7660
call fcn.00457e80
jmp case.0x42acfe.3
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], 0
push 0
mov ecx, 0x45cfa60
call fcn.00462ac0
mov ecx, dword [ebp - 4]
call fcn.0042a380
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42acfe.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, 0x54796a0
call fcn.0048f0e0
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x42b00a
jmp case.0x42acfe.3
mov edx, 0x64
imul eax, edx, 0
mov ecx, dword [ebp - 0x24]
lea edx, [ecx + eax + 0x104]
push edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc664], 0
mov edx, dword [ebp - 4]
xorps xmm0, xmm0
movss dword [edx + 0xc670], xmm0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042bb70
mov edx, dword [ebp - 4]
fstp dword [edx + 0xc674]
push 0x8fe
mov ecx, 0x4656e90
call fcn.00415ea0
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x2e8], 0
jne 0x42b085
jmp case.0x42acfe.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
push ecx
movss xmm0, dword [ecx + 0xc674]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 0x2e8]
mov ecx, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x2e8]
mov eax, dword [edx + 0x5c]
call eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9b8], 0
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9bc], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9c0], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
mov ecx, dword [ebp - 4]
call fcn.00430700
mov ecx, dword [ebp - 4]
call fcn.0042ebd0
push 1
mov ecx, 0x64
imul edx, ecx, 0
mov eax, dword [ebp - 0x24]
lea ecx, [eax + edx + 0x104]
push ecx
mov ecx, 0x54796a0
call fcn.0048f010
push eax
mov ecx, dword [ebp - 4]
call fcn.0042e0a0
jmp case.0x42acfe.3
push str.w000001a
mov ecx, dword [ebp - 4]
call fcn.0042ed20
mov edx, dword [ebp - 4]
mov dword [edx + 0x1cd8], 0x52
jmp case.0x42acfe.3
mov ecx, dword [ebp - 4]
call fcn.0042ecb0
mov eax, dword [ebp - 4]
mov dword [eax + 0x1cd8], 0x53
jmp case.0x42acfe.3
push ecx
movss xmm0, dword [0x4c4dd8]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431470
jmp case.0x42acfe.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431470
jmp case.0x42acfe.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431560
jmp case.0x42acfe.3
push ecx
movss xmm0, dword [0x4c4dd8]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431560
jmp case.0x42acfe.3
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9c0], 1
jmp case.0x42acfe.3
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9c0], 0
jmp case.0x42acfe.3
call fcn.00414dc0
test eax, eax
jne 0x42b21b
push 1
push 0
push 0
push 0x4ce6e8
push str.explore
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x42acfe.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x55
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
push edx
mov ecx, dword [ebp - 4]
call fcn.0042bce0
jmp case.0x42acfe.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x5a
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x3c]
add eax, dword [edx + 0xc9b0]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042f1f0
jmp case.0x42acfe.3
push 0x8ff
mov ecx, 0x4656e90
call fcn.00415ea0
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
cmp dword [ecx + 0x1d8], 0
je 0x42b295
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 0x1d8]
push eax
mov ecx, 0x4dd6fc8
call fcn.0046e640
push 0x8ff
mov ecx, 0x4656e90
call fcn.0043f330
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], 0
jmp 0x42b2bd
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0xa
jge 0x42b2e3
mov edx, dword [ebp - 0x14]
add edx, 0x6e
push edx
mov ecx, 0x44c4408
call fcn.00472390
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
mov dword [edx + ecx*4 + 0xc684], eax
jmp 0x42b2b4
mov ecx, 0x4dd7660
call fcn.00458140
mov ecx, 0x44c4408
call fcn.0046fab0
push 0x73
mov ecx, 0x4656e90
call fcn.00445180
push 0x79
mov ecx, 0x4656e90
call fcn.00445180
push 0x47
mov ecx, 0x4656e90
call fcn.00445180
mov eax, dword [ebp - 4]
mov dword [eax + 0x14], 0xb
jmp case.0x42acfe.3
mov ecx, dword [ebp - 4]
call fcn.0042ba80
jmp case.0x42acfe.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
push edx
mov ecx, 0x54796a0
call fcn.0048f0e0
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x42b359
jmp case.0x42acfe.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x3c
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x40]
add eax, dword [edx + 0xc9a8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc664], eax
push 1
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0xc664], 0x64
mov ecx, dword [ebp - 0x28]
lea edx, [ecx + eax + 0x104]
push edx
mov ecx, 0x54796a0
call fcn.0048f010
push eax
mov ecx, dword [ebp - 4]
call fcn.0042e0a0
mov eax, dword [ebp - 4]
imul ecx, dword [eax + 0xc664], 0x64
mov edx, dword [ebp - 0x28]
lea eax, [edx + ecx + 0x104]
push eax
mov ecx, dword [ebp - 4]
add ecx, 0xc59c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.0x42acfe.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
sub eax, 0x5f
mov dword [ebp - 0x44], eax
push 1
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x44]
add edx, dword [ecx + 0xc9ac]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042e690
jmp case.0x42acfe.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
push eax
mov ecx, 0x54796a0
call fcn.0048f0e0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x42b422
jmp case.0x42acfe.3
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x18], 0
jmp 0x42b43b
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0xa
jge 0x42b46e
mov edx, dword [ebp - 0x18]
add edx, 0x6e
push edx
mov ecx, 0x44c4408
call fcn.00472390
mov ecx, dword [ebp - 4]
imul edx, dword [ecx + 0x1ccc], 0x28
mov ecx, dword [ebp - 8]
lea edx, [ecx + edx + 0x7e9e8]
mov ecx, dword [ebp - 0x18]
mov dword [edx + ecx*4], eax
jmp 0x42b432
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1cd0]
mov dword [ecx + eax*4 + 0x7ee98], edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
mov ecx, dword [ebp - 8]
add ecx, 0x7ef10
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1cd4]
mov dword [ecx + eax*4 + 0x7efd8], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc664]
mov dword [edx + ecx*4 + 0x7f050], eax
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0xc670]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov eax, dword [ebp - 8]
mov dword [eax + ecx*4 + 0x7f0c8], edx
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0xc674]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov eax, dword [ebp - 8]
mov dword [eax + ecx*4 + 0x7f140], edx
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0xc9b8]
mov dword [eax + edx*4 + 0x7f1b8], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xc9bc]
mov dword [ecx + eax*4 + 0x7f230], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9c0]
mov dword [edx + ecx*4 + 0x7f2a8], eax
mov ecx, 0x45d79a8
call fcn.0045a3e0
jmp case.0x42acfe.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
cmp dword [eax + edx*4 + 0x7ee98], 0
jl 0x42b8e3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
cvtsi2ss xmm0, dword [eax + edx*4 + 0x7f0c8]
mov ecx, dword [ebp - 4]
movss dword [ecx + 0xc670], xmm0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
cvtsi2ss xmm0, dword [ecx + eax*4 + 0x7f140]
mov edx, dword [ebp - 4]
movss dword [edx + 0xc674], xmm0
mov eax, dword [ebp - 4]
mov dword [eax + 0x1cd0], 0xffffffff
push 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
mov ecx, dword [eax + edx*4 + 0x7ee98]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042e690
push 0x8fe
mov ecx, 0x4656e90
call fcn.00415ea0
mov dword [ebp - 0x1c], eax
mov ecx, 0x45d79a8
call fcn.00411450
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
imul edx, dword [ecx + 0x1ccc], 0x28
mov eax, dword [ebp - 0x10]
lea ecx, [eax + edx + 0x7e9e8]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax]
mov dword [ebp - 0x4c], ecx
cvtsi2ss xmm0, dword [ebp - 0x4c]
divss xmm0, dword [0x4c4fec]
mulss xmm0, dword [0x4c4de8]
addss xmm0, dword [0x4c4dc8]
movss dword [ebp - 0x2c], xmm0
xorps xmm0, xmm0
comiss xmm0, dword [ebp - 0x2c]
jb 0x42b682
movss xmm0, dword [0x4c4da4]
movss dword [ebp - 0x2c], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, 0x54796a0
call fcn.0042a300
fstp dword [ebp - 0x50]
movss xmm0, dword [ebp - 0x50]
mulss xmm0, dword [ebp - 0x2c]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x2e8]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x2e8]
mov eax, dword [edx + 0x64]
call eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x7ef10
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x42b6fd
push 0
mov edx, dword [ebp - 0x10]
add edx, 0x7ef10
push edx
mov ecx, 0x54796a0
call fcn.0048f010
push eax
mov ecx, dword [ebp - 4]
call fcn.0042e0a0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7f1b8]
mov dword [edx + 0xc9b8], ecx
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9b8], 1
jne 0x42b73d
push ecx
movss xmm0, dword [0x4c4dd8]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431470
jmp 0x42b74e
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431470
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7f230]
mov dword [edx + 0xc9bc], ecx
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9bc], 1
jne 0x42b789
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431560
jmp 0x42b79f
push ecx
movss xmm0, dword [0x4c4dd8]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431560
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + ecx*4 + 0x7efd8]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042f1f0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + edx*4 + 0x7f050]
mov dword [eax + 0xc664], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7efd8]
mov dword [edx + 0x1cd4], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x7ef10
push edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
mov ecx, dword [ebp - 4]
call fcn.00430700
mov dword [ebp - 0xc], 0
mov dword [ebp - 0xc], 0
jmp 0x42b83a
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0xa
jge 0x42b87f
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0x1ccc], 0x28
mov ecx, dword [ebp - 0x10]
lea edx, [ecx + eax + 0x7e9e8]
mov eax, dword [ebp - 0xc]
mov ecx, dword [edx + eax*4]
push ecx
mov edx, dword [ebp - 0xc]
add edx, 0x6e
push edx
mov ecx, 0x44c4408
call fcn.00472520
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov dword [ecx + eax*4 + 0x19ac], 0xfffffed4
jmp 0x42b831
mov dword [ebp - 0xc], 0
imul edx, dword [ebp - 0xc], 0xd8
mov eax, dword [ebp - 4]
cmp dword [eax + edx + 0x1da4], 0
jl 0x42b8b1
mov ecx, dword [ebp - 0xc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042e3d0
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x42b886
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x2e8], 0
je 0x42b8d9
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x2e8]
mov eax, dword [ebp - 0x1c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x2e8]
mov eax, dword [edx + 0x10c]
call eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 9
jmp case.0x42acfe.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
sub eax, 6
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], eax
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42acfe.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x12
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0x30], 0xc
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 0xa
mov edx, dword [ebp - 0x58]
push edx
mov ecx, dword [ebp - 4]
call fcn.0042bce0
mov eax, dword [ebp - 4]
mov dword [eax + 0x18], 0xffffffff
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x1c], 0xffffffff
mov edx, dword [ebp - 4]
mov dword [edx + 0x20], 0xffffffff
mov esp, ebp
pop ebp
ret