Function at 0x42b3aa
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov dword [ebp - 4], ecx
mov ecx, 0x47ce440
call fcn.00411450
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
push ecx
mov ecx, 0x46baea0
call fcn.00473430
movzx edx, al
test edx, edx
je case.0x42aeae.3
push 0xffffffffffffffff
mov ecx, 0x46baea0
call fcn.00472b90
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0x90
ja case.0x42aeae.3
mov edx, dword [ebp - 0x30]
movzx eax, byte [edx + 0x42bbc8]
jmp dword [eax*4 + 0x42bb3c]
mov ecx, dword [ebp - 4]
call fcn.0042a530
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov ecx, dword [ebp - 4]
call fcn.004273d0
jmp case.0x42aeae.3
mov ecx, dword [ebp - 4]
call fcn.0042a530
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], 0
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42aeae.3
mov ecx, dword [ebp - 4]
call fcn.0042a530
mov eax, dword [ebp - 4]
mov dword [eax + 0x14], 4
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x24], 1
mov edx, dword [ebp - 4]
mov dword [edx + 0x30], 0
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42aeae.3
mov ecx, dword [ebp - 4]
call fcn.0042a530
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x24], 2
mov eax, dword [ebp - 4]
mov dword [eax + 0x30], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42aeae.3
mov ecx, dword [ebp - 4]
call fcn.0042a530
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x24], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x30], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42aeae.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9a4]
sub edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9a4], edx
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xc9a4], 0
jl 0x42afdf
push 1
mov ecx, dword [ebp - 4]
call fcn.0042fce0
mov ecx, 0x4fceaf8
call fcn.00458a70
jmp case.0x42aeae.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9a4]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9a4], eax
push 1
mov ecx, dword [ebp - 4]
call fcn.0042fce0
mov ecx, 0x4fceaf8
call fcn.00458a70
jmp case.0x42aeae.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9a8]
sub eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9a8], eax
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9a8], 0
jl 0x42b047
push 1
mov ecx, dword [ebp - 4]
call fcn.00430070
mov ecx, 0x4fceaf8
call fcn.00458a70
jmp case.0x42aeae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc9a8]
add ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9a8], ecx
push 1
mov ecx, dword [ebp - 4]
call fcn.00430070
mov ecx, 0x4fceaf8
call fcn.00458a70
jmp case.0x42aeae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc9ac]
sub ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9ac], ecx
mov eax, dword [ebp - 4]
cmp dword [eax + 0xc9ac], 0
jl 0x42b0af
push 1
mov ecx, dword [ebp - 4]
call fcn.00430370
mov ecx, 0x4fceaf8
call fcn.00458a70
jmp case.0x42aeae.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9ac]
add edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9ac], edx
push 1
mov ecx, dword [ebp - 4]
call fcn.00430370
mov ecx, 0x4fceaf8
call fcn.00458a70
jmp case.0x42aeae.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9b0]
sub edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9b0], edx
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xc9b0], 0
jl 0x42b117
push 1
mov ecx, dword [ebp - 4]
call fcn.00430690
mov ecx, 0x4fceaf8
call fcn.00458a70
jmp case.0x42aeae.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9b0]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9b0], eax
push 1
mov ecx, dword [ebp - 4]
call fcn.00430690
mov ecx, 0x4fceaf8
call fcn.00458a70
jmp case.0x42aeae.3
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], 0
push 0
mov ecx, 0x47c64f8
call fcn.00463740
mov ecx, dword [ebp - 4]
call fcn.0042a530
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42aeae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, 0x5670958
call fcn.00491160
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x42b1ba
jmp case.0x42aeae.3
mov edx, 0x64
imul eax, edx, 0
mov ecx, dword [ebp - 0x24]
lea edx, [ecx + eax + 0x104]
push edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc664], 0
mov edx, dword [ebp - 4]
xorps xmm0, xmm0
movss dword [edx + 0xc670], xmm0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042bd50
mov edx, dword [ebp - 4]
fstp dword [edx + 0xc674]
push 0x8fe
mov ecx, 0x484d928
call fcn.00415e50
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x2e8], 0
jne 0x42b235
jmp case.0x42aeae.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
push ecx
movss xmm0, dword [ecx + 0xc674]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 0x2e8]
mov ecx, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x2e8]
mov eax, dword [edx + 0x5c]
call eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9b8], 0
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9bc], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9c0], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
mov ecx, dword [ebp - 4]
call fcn.00430980
mov ecx, dword [ebp - 4]
call fcn.0042ed70
push 1
mov ecx, 0x64
imul edx, ecx, 0
mov eax, dword [ebp - 0x24]
lea ecx, [eax + edx + 0x104]
push ecx
mov ecx, 0x5670958
call fcn.00491090
push eax
mov ecx, dword [ebp - 4]
call fcn.0042e240
jmp case.0x42aeae.3
push str.w000001a
mov ecx, dword [ebp - 4]
call fcn.0042eec0
mov edx, dword [ebp - 4]
mov dword [edx + 0x1cd8], 0x52
jmp case.0x42aeae.3
mov ecx, dword [ebp - 4]
call fcn.0042ee50
mov eax, dword [ebp - 4]
mov dword [eax + 0x1cd8], 0x53
jmp case.0x42aeae.3
push ecx
movss xmm0, dword [0x4c6e60]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431b80
jmp case.0x42aeae.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431b80
jmp case.0x42aeae.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431c70
jmp case.0x42aeae.3
push ecx
movss xmm0, dword [0x4c6e60]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431c70
jmp case.0x42aeae.3
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9c0], 1
jmp case.0x42aeae.3
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9c0], 0
jmp case.0x42aeae.3
call fcn.00414d60
test eax, eax
jne 0x42b3cb
push 1
push 0
push 0
push 0x4d06f0
push str.explore
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x42aeae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x55
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
push edx
mov ecx, dword [ebp - 4]
call fcn.0042bec0
jmp case.0x42aeae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x5a
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x3c]
add eax, dword [edx + 0xc9b0]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042f390
jmp case.0x42aeae.3
push 0x8ff
mov ecx, 0x484d928
call fcn.00415e50
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
cmp dword [ecx + 0x1d8], 0
je 0x42b445
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 0x1d8]
push eax
mov ecx, 0x4fce460
call fcn.0046fc70
push 0x8ff
mov ecx, 0x484d928
call fcn.004403f0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], 0
jmp 0x42b46d
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0xa
jge 0x42b493
mov edx, dword [ebp - 0x14]
add edx, 0x6e
push edx
mov ecx, 0x46baea0
call fcn.00473900
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
mov dword [edx + ecx*4 + 0xc684], eax
jmp 0x42b464
mov ecx, 0x4fceaf8
call fcn.00458d30
mov ecx, 0x46baea0
call fcn.00471020
push 0x73
mov ecx, 0x484d928
call fcn.00446300
push 0x79
mov ecx, 0x484d928
call fcn.00446300
push 0x47
mov ecx, 0x484d928
call fcn.00446300
mov eax, dword [ebp - 4]
mov dword [eax + 0x14], 0xb
jmp case.0x42aeae.3
mov ecx, dword [ebp - 4]
call fcn.0042bc60
jmp case.0x42aeae.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
push edx
mov ecx, 0x5670958
call fcn.00491160
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x42b509
jmp case.0x42aeae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x3c
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x40]
add eax, dword [edx + 0xc9a8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc664], eax
push 1
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0xc664], 0x64
mov ecx, dword [ebp - 0x28]
lea edx, [ecx + eax + 0x104]
push edx
mov ecx, 0x5670958
call fcn.00491090
push eax
mov ecx, dword [ebp - 4]
call fcn.0042e240
mov eax, dword [ebp - 4]
imul ecx, dword [eax + 0xc664], 0x64
mov edx, dword [ebp - 0x28]
lea eax, [edx + ecx + 0x104]
push eax
mov ecx, dword [ebp - 4]
add ecx, 0xc59c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9b8], 1
jne 0x42b59d
push ecx
movss xmm0, dword [0x4c6e60]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431b80
jmp 0x42b5ae
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431b80
jmp case.0x42aeae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x5f
mov dword [ebp - 0x44], ecx
push 1
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x44]
add eax, dword [edx + 0xc9ac]
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
push edx
mov ecx, dword [ebp - 4]
call fcn.0042e830
jmp case.0x42aeae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, 0x5670958
call fcn.00491160
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x42b607
jmp case.0x42aeae.3
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x18], 0
jmp 0x42b620
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], 0xa
jge 0x42b653
mov eax, dword [ebp - 0x18]
add eax, 0x6e
push eax
mov ecx, 0x46baea0
call fcn.00473900
mov ecx, dword [ebp - 4]
imul edx, dword [ecx + 0x1ccc], 0x28
mov ecx, dword [ebp - 8]
lea edx, [ecx + edx + 0x7e9e8]
mov ecx, dword [ebp - 0x18]
mov dword [edx + ecx*4], eax
jmp 0x42b617
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1cd0]
mov dword [ecx + eax*4 + 0x7ee98], edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
mov ecx, dword [ebp - 8]
add ecx, 0x7ef10
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1cd4]
mov dword [ecx + eax*4 + 0x7efd8], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc664]
mov dword [edx + ecx*4 + 0x7f050], eax
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0xc670]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov eax, dword [ebp - 8]
mov dword [eax + ecx*4 + 0x7f0c8], edx
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0xc674]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov eax, dword [ebp - 8]
mov dword [eax + ecx*4 + 0x7f140], edx
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0xc9b8]
mov dword [eax + edx*4 + 0x7f1b8], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xc9bc]
mov dword [ecx + eax*4 + 0x7f230], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9c0]
mov dword [edx + ecx*4 + 0x7f2a8], eax
mov ecx, 0x47ce440
call fcn.0045aff0
jmp case.0x42aeae.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
cmp dword [eax + edx*4 + 0x7ee98], 0
jl 0x42bac8
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
cvtsi2ss xmm0, dword [eax + edx*4 + 0x7f0c8]
mov ecx, dword [ebp - 4]
movss dword [ecx + 0xc670], xmm0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
cvtsi2ss xmm0, dword [ecx + eax*4 + 0x7f140]
mov edx, dword [ebp - 4]
movss dword [edx + 0xc674], xmm0
mov eax, dword [ebp - 4]
mov dword [eax + 0x1cd0], 0xffffffff
push 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
mov ecx, dword [eax + edx*4 + 0x7ee98]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042e830
push 0x8fe
mov ecx, 0x484d928
call fcn.00415e50
mov dword [ebp - 0x1c], eax
mov ecx, 0x47ce440
call fcn.00411450
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
imul edx, dword [ecx + 0x1ccc], 0x28
mov eax, dword [ebp - 0x10]
lea ecx, [eax + edx + 0x7e9e8]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax]
mov dword [ebp - 0x4c], ecx
cvtsi2ss xmm0, dword [ebp - 0x4c]
divss xmm0, dword [0x4c707c]
mulss xmm0, dword [0x4c6e70]
addss xmm0, dword [0x4c6e50]
movss dword [ebp - 0x2c], xmm0
xorps xmm0, xmm0
comiss xmm0, dword [ebp - 0x2c]
jb 0x42b867
movss xmm0, dword [0x4c6e2c]
movss dword [ebp - 0x2c], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, 0x5670958
call fcn.0042a470
fstp dword [ebp - 0x50]
movss xmm0, dword [ebp - 0x50]
mulss xmm0, dword [ebp - 0x2c]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x2e8]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x2e8]
mov eax, dword [edx + 0x64]
call eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x7ef10
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x42b8e2
push 0
mov edx, dword [ebp - 0x10]
add edx, 0x7ef10
push edx
mov ecx, 0x5670958
call fcn.00491090
push eax
mov ecx, dword [ebp - 4]
call fcn.0042e240
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7f1b8]
mov dword [edx + 0xc9b8], ecx
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9b8], 1
jne 0x42b922
push ecx
movss xmm0, dword [0x4c6e60]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431b80
jmp 0x42b933
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431b80
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7f230]
mov dword [edx + 0xc9bc], ecx
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9bc], 1
jne 0x42b96e
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431c70
jmp 0x42b984
push ecx
movss xmm0, dword [0x4c6e60]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.00431c70
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + ecx*4 + 0x7efd8]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042f390
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + edx*4 + 0x7f050]
mov dword [eax + 0xc664], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7efd8]
mov dword [edx + 0x1cd4], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x7ef10
push edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
mov ecx, dword [ebp - 4]
call fcn.00430980
mov dword [ebp - 0xc], 0
mov dword [ebp - 0xc], 0
jmp 0x42ba1f
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0xa
jge 0x42ba64
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0x1ccc], 0x28
mov ecx, dword [ebp - 0x10]
lea edx, [ecx + eax + 0x7e9e8]
mov eax, dword [ebp - 0xc]
mov ecx, dword [edx + eax*4]
push ecx
mov edx, dword [ebp - 0xc]
add edx, 0x6e
push edx
mov ecx, 0x46baea0
call fcn.00473a90
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov dword [ecx + eax*4 + 0x19ac], 0xfffffed4
jmp 0x42ba16
mov dword [ebp - 0xc], 0
imul edx, dword [ebp - 0xc], 0xd8
mov eax, dword [ebp - 4]
cmp dword [eax + edx + 0x1da4], 0
jl 0x42ba96
mov ecx, dword [ebp - 0xc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042e570
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x42ba6b
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x2e8], 0
je 0x42babe
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x2e8]
mov eax, dword [ebp - 0x1c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x2e8]
mov eax, dword [edx + 0x10c]
call eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 9
jmp case.0x42aeae.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
sub eax, 6
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], eax
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42aeae.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x12
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0x30], 0xc
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 0xa
mov edx, dword [ebp - 0x58]
push edx
mov ecx, dword [ebp - 4]
call fcn.0042bec0
mov eax, dword [ebp - 4]
mov dword [eax + 0x18], 0xffffffff
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x1c], 0xffffffff
mov edx, dword [ebp - 4]
mov dword [edx + 0x20], 0xffffffff
mov esp, ebp
pop ebp
ret