Function at 0x428c37
Capabilities:
Contain obfuscated stackstrings
Create directory
Create process on windows

Disassembly:
mov eax, 0x475e87
call fcn.004755ec
sub esp, 0x310
push ebx
push esi
xor ebx, ebx
push edi
inc ebx
push ebx
call fcn.00438b24
pop ecx
mov esi, eax
mov edi, 0x4e25e4
push ebx
push esi
mov ecx, edi
mov byte [esi], 0xfc
call fcn.00429205
push esi
call fcn.0043889e
pop ecx
mov ecx, edi
call fcn.00428986
test al, al
je 0x428e07
push ebx
lea eax, [ebp - 0x11]
mov byte [ebp - 0x11], 0
push eax
mov ecx, edi
call fcn.00428a8b
push ebx
lea eax, [ebp - 0x12]
mov byte [ebp - 0x12], 0
push eax
mov ecx, edi
call fcn.00428a8b
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x18]
push 4
push eax
mov ecx, edi
call fcn.00428a8b
cmp byte [ebp - 0x11], 0xfc
jne 0x428e07
lea ecx, [ebp - 0x48]
call fcn.00426047
and dword [ebp - 4], 0
lea ecx, [ebp - 0x60]
push str._LauncherTemp
mov edx, eax
call fcn.0043549e
pop ecx
mov ecx, eax
call fcn.00432a29
push eax
call fcn.0045c27d
pop ecx
lea ecx, [ebp - 0x60]
call fcn.0042715c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0042715c
lea ecx, [ebp - 0x48]
call fcn.00426047
push str.LauncherTempCSO2_Global_Launcher.exe
mov edx, eax
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0xd8]
call fcn.0043549e
pop ecx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.0042715c
lea ecx, [ebp - 0x60]
call fcn.00426047
push str.LauncherTempCounterStrikeOnline2.exe
mov edx, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xf0]
call fcn.0043549e
pop ecx
push 6
pop ebx
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], bl
call fcn.0042715c
lea ecx, [ebp - 0x48]
call fcn.00426047
push str.LauncherTempcopy_update.bat
mov edx, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x108]
call fcn.0043549e
pop ecx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 9
call fcn.0042715c
push ecx
push ecx
push 0x20
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x26c]
call fcn.00432241
mov byte [ebp - 4], 0xa
mov esi, dword [0x4e25ec]
sub esi, dword [ebp - 0x18]
cmp esi, ebx
jbe 0x428db7
mov eax, dword [0x4e25f4]
lea ecx, [ebp - 0x26c]
mov dl, byte [eax + ebx]
call fcn.0043585b
inc ebx
cmp ebx, esi
jb 0x428d9f
lea ecx, [ebp - 0x26c]
call fcn.00432280
lea ecx, [ebp - 0x26c]
call fcn.004321c4
push ecx
push ecx
push 0x20
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x31c]
call fcn.00432241
mov byte [ebp - 4], 0xb
jmp 0x428df7
mov eax, dword [0x4e25f4]
mov dl, byte [eax + esi]
call fcn.0043585b
inc esi
lea ecx, [ebp - 0x31c]
cmp esi, dword [0x4e25ec]
jae 0x428e16
jmp 0x428de9
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret
call fcn.00432280
lea ecx, [ebp - 0x31c]
call fcn.004321c4
mov edx, 0x486e9c
lea ecx, [ebp - 0x60]
call fcn.00425f7d
mov esi, 0x48bb40
mov byte [ebp - 4], 0xc
push eax
mov edx, esi
lea ecx, [ebp - 0x48]
call fcn.00435521
pop ecx
push esi
mov edx, eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x30]
call fcn.0043549e
pop ecx
lea ecx, [ebp - 0x48]
call fcn.0042715c
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x10
call fcn.0042715c
push ecx
push ecx
push 2
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x1bc]
call fcn.00432241
mov edx, str.timeout_1_n
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1bc]
call fcn.004356d6
lea ecx, [ebp - 0x30]
call fcn.00432a25
dec eax
push eax
push 0
lea eax, [ebp - 0x90]
push eax
call fcn.004327ea
mov esi, eax
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0x12
push eax
mov edx, str.copy__Y__
lea ecx, [ebp - 0x78]
call fcn.004354d7
pop ecx
mov ebx, 0x48bb70
mov byte [ebp - 4], 0x13
push ebx
mov edx, eax
lea ecx, [ebp - 0x60]
call fcn.0043549e
pop ecx
push esi
mov edx, eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x48]
call fcn.00435c58
pop ecx
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1bc]
call fcn.004359e7
mov edx, str.CSO2_Global_Launcher_Temp.exe__n
mov ecx, eax
call fcn.004356d6
lea ecx, [ebp - 0x48]
call fcn.0042715c
lea ecx, [ebp - 0x60]
call fcn.0042715c
lea ecx, [ebp - 0x78]
call fcn.0042715c
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x11
call fcn.0042715c
lea ecx, [ebp - 0x30]
call fcn.00432a25
dec eax
push eax
push 0
lea eax, [ebp - 0xa8]
push eax
call fcn.004327ea
mov esi, eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x16
call fcn.00432a25
sub eax, 2
push eax
push 0
lea eax, [ebp - 0xc0]
push eax
call fcn.004327ea
mov edi, str.move__Y
mov byte [ebp - 4], 0x17
push eax
mov edx, edi
lea ecx, [ebp - 0x60]
call fcn.00435521
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x48]
mov edx, eax
mov dword [esp], str.CSO2_Global_Launcher_Temp.exe_
call fcn.0043549e
pop ecx
push esi
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x78]
call fcn.00435c58
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x90]
mov edx, eax
mov dword [esp], 0x48bb80
call fcn.0043549e
pop ecx
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1bc]
call fcn.004359e7
lea ecx, [ebp - 0x90]
call fcn.0042715c
lea ecx, [ebp - 0x78]
call fcn.0042715c
lea ecx, [ebp - 0x48]
call fcn.0042715c
lea ecx, [ebp - 0x60]
call fcn.0042715c
lea ecx, [ebp - 0xc0]
call fcn.0042715c
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x11
call fcn.0042715c
lea ecx, [ebp - 0x30]
call fcn.00432a25
dec eax
push eax
push 0
lea eax, [ebp - 0x78]
push eax
call fcn.004327ea
mov esi, eax
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x1c
push eax
mov edx, str.copy__Y__
lea ecx, [ebp - 0x90]
call fcn.004354d7
pop ecx
push ebx
mov edx, eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xc0]
call fcn.0043549e
pop ecx
push esi
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xa8]
call fcn.00435c58
pop ecx
mov edx, eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x1bc]
call fcn.004359e7
mov edx, str.CounterStrikeOnline2_Temp.exe__n
mov ecx, eax
call fcn.004356d6
lea ecx, [ebp - 0xa8]
call fcn.0042715c
lea ecx, [ebp - 0xc0]
call fcn.0042715c
lea ecx, [ebp - 0x90]
call fcn.0042715c
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x11
call fcn.0042715c
lea ecx, [ebp - 0x30]
call fcn.00432a25
dec eax
xor ebx, ebx
push eax
push ebx
lea eax, [ebp - 0x60]
push eax
call fcn.004327ea
mov esi, eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.00432a25
sub eax, 2
push eax
push ebx
lea eax, [ebp - 0x48]
push eax
call fcn.004327ea
push eax
mov edx, edi
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x78]
call fcn.00435521
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x90]
mov edx, eax
mov dword [esp], str.CounterStrikeOnline2_Temp.exe_
call fcn.0043549e
pop ecx
push esi
mov edx, eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xc0]
call fcn.00435c58
mov byte [ebp - 4], 0x24
mov edx, eax
mov dword [esp], str.CounterStrikeOnline2.exe__n
lea ecx, [ebp - 0xa8]
call fcn.0043549e
pop ecx
mov edx, eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1bc]
call fcn.004359e7
lea ecx, [ebp - 0xa8]
call fcn.0042715c
lea ecx, [ebp - 0xc0]
call fcn.0042715c
lea ecx, [ebp - 0x90]
call fcn.0042715c
lea ecx, [ebp - 0x78]
call fcn.0042715c
lea ecx, [ebp - 0x48]
call fcn.0042715c
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x11
call fcn.0042715c
lea ecx, [ebp - 0x30]
call fcn.00432a25
sub eax, 2
push eax
push ebx
lea eax, [ebp - 0xa8]
push eax
call fcn.004327ea
mov edx, eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x1bc]
call fcn.004359e7
mov edx, str.CSO2_Global_Launcher.exe__n
mov ecx, eax
call fcn.004356d6
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x11
call fcn.0042715c
lea ecx, [ebp - 0x1bc]
call fcn.00432280
lea ecx, [ebp - 0x1bc]
call fcn.004321c4
push ebx
push ebx
lea ecx, [ebp - 0x30]
call fcn.00432a29
push eax
lea ecx, [ebp - 0x108]
call fcn.00432a29
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push ebx
call fcn.00459700
int3