Function at 0x42a300
Capabilities:
Contain obfuscated stackstrings
Create directory
Create process on windows

Disassembly:
mov eax, 0x47901e
call fcn.004785ac
sub esp, 0x310
push ebx
push esi
xor ebx, ebx
push edi
inc ebx
push ebx
call fcn.0043c409
pop ecx
mov esi, eax
mov edi, 0x4e6624
push ebx
push esi
mov ecx, edi
mov byte [esi], 0xfc
call fcn.0042a8de
push esi
call fcn.0043c183
pop ecx
mov ecx, edi
call fcn.0042a04f
test al, al
je 0x42a4d0
push ebx
lea eax, [ebp - 0x11]
mov byte [ebp - 0x11], 0
push eax
mov ecx, edi
call fcn.0042a154
push ebx
lea eax, [ebp - 0x12]
mov byte [ebp - 0x12], 0
push eax
mov ecx, edi
call fcn.0042a154
and dword [ebp - 0x18], 0
lea eax, [ebp - 0x18]
push 4
push eax
mov ecx, edi
call fcn.0042a154
cmp byte [ebp - 0x11], 0xfc
jne 0x42a4d0
lea ecx, [ebp - 0x48]
call fcn.0042751c
and dword [ebp - 4], 0
lea ecx, [ebp - 0x60]
push str._LauncherTemp
mov edx, eax
call fcn.00437fce
pop ecx
mov ecx, eax
call fcn.004340b9
push eax
call fcn.0045ef03
pop ecx
lea ecx, [ebp - 0x60]
call fcn.0042883b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.0042883b
lea ecx, [ebp - 0x48]
call fcn.0042751c
push str.LauncherTempCSO2_Global_Launcher.exe
mov edx, eax
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0xd8]
call fcn.00437fce
pop ecx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.0042883b
lea ecx, [ebp - 0x60]
call fcn.0042751c
push str.LauncherTempCounterStrikeOnline2.exe
mov edx, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xf0]
call fcn.00437fce
pop ecx
push 6
pop ebx
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], bl
call fcn.0042883b
lea ecx, [ebp - 0x48]
call fcn.0042751c
push str.LauncherTempcopy_update.bat
mov edx, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x108]
call fcn.00437fce
pop ecx
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 9
call fcn.0042883b
push ecx
push ecx
push 0x20
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x26c]
call fcn.0043149c
mov byte [ebp - 4], 0xa
mov esi, dword [0x4e662c]
sub esi, dword [ebp - 0x18]
cmp esi, ebx
jbe 0x42a480
mov eax, dword [0x4e6634]
lea ecx, [ebp - 0x26c]
mov dl, byte [eax + ebx]
call fcn.00438912
inc ebx
cmp ebx, esi
jb 0x42a468
lea ecx, [ebp - 0x26c]
call fcn.00431ea9
lea ecx, [ebp - 0x26c]
call fcn.00431429
push ecx
push ecx
push 0x20
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x31c]
call fcn.0043149c
mov byte [ebp - 4], 0xb
jmp 0x42a4c0
mov eax, dword [0x4e6634]
mov dl, byte [eax + esi]
call fcn.00438912
inc esi
lea ecx, [ebp - 0x31c]
cmp esi, dword [0x4e662c]
jae 0x42a4df
jmp 0x42a4b2
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret
call fcn.00431ea9
lea ecx, [ebp - 0x31c]
call fcn.00431429
mov edx, 0x489f5c
lea ecx, [ebp - 0x60]
call fcn.00427452
mov esi, 0x48ed30
mov byte [ebp - 4], 0xc
push eax
mov edx, esi
lea ecx, [ebp - 0x48]
call fcn.00438051
pop ecx
push esi
mov edx, eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x30]
call fcn.00437fce
pop ecx
lea ecx, [ebp - 0x48]
call fcn.0042883b
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x10
call fcn.0042883b
push ecx
push ecx
push 2
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x1bc]
call fcn.0043149c
mov edx, str.timeout_2_n
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x1bc]
call fcn.00438aa1
mov edx, str.taskkill__IM_CSO2_Global_Launcher.exe_n
lea ecx, [ebp - 0x1bc]
call fcn.00438aa1
lea ecx, [ebp - 0x30]
call fcn.004340b5
dec eax
push eax
push 0
lea eax, [ebp - 0x90]
push eax
call fcn.00433e77
mov esi, eax
lea eax, [ebp - 0xd8]
mov byte [ebp - 4], 0x12
push eax
mov edx, str.copy__Y__
lea ecx, [ebp - 0x78]
call fcn.00438007
pop ecx
mov ebx, 0x48ed88
mov byte [ebp - 4], 0x13
push ebx
mov edx, eax
lea ecx, [ebp - 0x60]
call fcn.00437fce
pop ecx
push esi
mov edx, eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x48]
call fcn.00438d42
pop ecx
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1bc]
call fcn.00438e21
mov edx, str.CSO2_Global_Launcher_Temp.exe__n
mov ecx, eax
call fcn.00438aa1
lea ecx, [ebp - 0x48]
call fcn.0042883b
lea ecx, [ebp - 0x60]
call fcn.0042883b
lea ecx, [ebp - 0x78]
call fcn.0042883b
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x11
call fcn.0042883b
lea ecx, [ebp - 0x30]
call fcn.004340b5
dec eax
push eax
push 0
lea eax, [ebp - 0xa8]
push eax
call fcn.00433e77
mov esi, eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x16
call fcn.004340b5
sub eax, 2
push eax
push 0
lea eax, [ebp - 0xc0]
push eax
call fcn.00433e77
mov edi, str.move__Y
mov byte [ebp - 4], 0x17
push eax
mov edx, edi
lea ecx, [ebp - 0x60]
call fcn.00438051
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x48]
mov edx, eax
mov dword [esp], str.CSO2_Global_Launcher_Temp.exe_
call fcn.00437fce
pop ecx
push esi
mov edx, eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x78]
call fcn.00438d42
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x90]
mov edx, eax
mov dword [esp], 0x48ed98
call fcn.00437fce
pop ecx
mov edx, eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x1bc]
call fcn.00438e21
lea ecx, [ebp - 0x90]
call fcn.0042883b
lea ecx, [ebp - 0x78]
call fcn.0042883b
lea ecx, [ebp - 0x48]
call fcn.0042883b
lea ecx, [ebp - 0x60]
call fcn.0042883b
lea ecx, [ebp - 0xc0]
call fcn.0042883b
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x11
call fcn.0042883b
lea ecx, [ebp - 0x30]
call fcn.004340b5
dec eax
push eax
push 0
lea eax, [ebp - 0x78]
push eax
call fcn.00433e77
mov esi, eax
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0x1c
push eax
mov edx, str.copy__Y__
lea ecx, [ebp - 0x90]
call fcn.00438007
pop ecx
push ebx
mov edx, eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xc0]
call fcn.00437fce
pop ecx
push esi
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xa8]
call fcn.00438d42
pop ecx
mov edx, eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x1bc]
call fcn.00438e21
mov edx, str.CounterStrikeOnline2_Temp.exe__n
mov ecx, eax
call fcn.00438aa1
lea ecx, [ebp - 0xa8]
call fcn.0042883b
lea ecx, [ebp - 0xc0]
call fcn.0042883b
lea ecx, [ebp - 0x90]
call fcn.0042883b
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0x11
call fcn.0042883b
lea ecx, [ebp - 0x30]
call fcn.004340b5
dec eax
xor ebx, ebx
push eax
push ebx
lea eax, [ebp - 0x60]
push eax
call fcn.00433e77
mov esi, eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x20
call fcn.004340b5
sub eax, 2
push eax
push ebx
lea eax, [ebp - 0x48]
push eax
call fcn.00433e77
push eax
mov edx, edi
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x78]
call fcn.00438051
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x90]
mov edx, eax
mov dword [esp], str.CounterStrikeOnline2_Temp.exe_
call fcn.00437fce
pop ecx
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xc0]
push esi
mov edx, eax
call fcn.00438d42
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0xa8]
mov edx, eax
mov dword [esp], str.CounterStrikeOnline2.exe__n
call fcn.00437fce
pop ecx
mov edx, eax
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1bc]
call fcn.00438e21
lea ecx, [ebp - 0xa8]
call fcn.0042883b
lea ecx, [ebp - 0xc0]
call fcn.0042883b
lea ecx, [ebp - 0x90]
call fcn.0042883b
lea ecx, [ebp - 0x78]
call fcn.0042883b
lea ecx, [ebp - 0x48]
call fcn.0042883b
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x11
call fcn.0042883b
lea ecx, [ebp - 0x30]
call fcn.004340b5
sub eax, 2
push eax
push ebx
lea eax, [ebp - 0xa8]
push eax
call fcn.00433e77
mov edx, eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x1bc]
call fcn.00438e21
mov edx, str.CSO2_Global_Launcher.exe__n
mov ecx, eax
call fcn.00438aa1
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x11
call fcn.0042883b
lea ecx, [ebp - 0x1bc]
call fcn.00431ea9
lea ecx, [ebp - 0x1bc]
call fcn.00431429
push ebx
push ebx
lea ecx, [ebp - 0x30]
call fcn.004340b9
push eax
lea ecx, [ebp - 0x108]
call fcn.004340b9
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push ebx
call fcn.0045c410
int3