Function at 0x42bd4a
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x58
mov dword [ebp - 4], ecx
mov ecx, 0x48a7100
call fcn.00411430
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
push ecx
mov ecx, 0x4793b78
call fcn.00475ac0
movzx edx, al
test edx, edx
je case.0x42b84e.3
push 0xffffffffffffffff
mov ecx, 0x4793b78
call fcn.00475220
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0x90
ja case.0x42b84e.3
mov edx, dword [ebp - 0x30]
movzx eax, byte [edx + 0x42c530]
jmp dword [eax*4 + 0x42c4a4]
mov ecx, dword [ebp - 4]
call fcn.0042ae30
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov ecx, dword [ebp - 4]
call fcn.00427d30
jmp case.0x42b84e.3
mov ecx, dword [ebp - 4]
call fcn.0042ae30
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], 0
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42b84e.3
mov ecx, dword [ebp - 4]
call fcn.0042ae30
mov eax, dword [ebp - 4]
mov dword [eax + 0x14], 4
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x24], 1
mov edx, dword [ebp - 4]
mov dword [edx + 0x30], 0
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42b84e.3
mov ecx, dword [ebp - 4]
call fcn.0042ae30
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x24], 2
mov eax, dword [ebp - 4]
mov dword [eax + 0x30], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42b84e.3
mov ecx, dword [ebp - 4]
call fcn.0042ae30
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x24], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x30], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
jmp case.0x42b84e.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9a4]
sub edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9a4], edx
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xc9a4], 0
jl 0x42b97f
push 1
mov ecx, dword [ebp - 4]
call fcn.004306f0
mov ecx, 0x50a9e78
call fcn.0045a010
jmp case.0x42b84e.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9a4]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9a4], eax
push 1
mov ecx, dword [ebp - 4]
call fcn.004306f0
mov ecx, 0x50a9e78
call fcn.0045a010
jmp case.0x42b84e.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9a8]
sub eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9a8], eax
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9a8], 0
jl 0x42b9e7
push 1
mov ecx, dword [ebp - 4]
call fcn.004309e0
mov ecx, 0x50a9e78
call fcn.0045a010
jmp case.0x42b84e.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc9a8]
add ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9a8], ecx
push 1
mov ecx, dword [ebp - 4]
call fcn.004309e0
mov ecx, 0x50a9e78
call fcn.0045a010
jmp case.0x42b84e.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0xc9ac]
sub ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9ac], ecx
mov eax, dword [ebp - 4]
cmp dword [eax + 0xc9ac], 0
jl 0x42ba4f
push 1
mov ecx, dword [ebp - 4]
call fcn.00430ce0
mov ecx, 0x50a9e78
call fcn.0045a010
jmp case.0x42b84e.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9ac]
add edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9ac], edx
push 1
mov ecx, dword [ebp - 4]
call fcn.00430ce0
mov ecx, 0x50a9e78
call fcn.0045a010
jmp case.0x42b84e.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xc9b0]
sub edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9b0], edx
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0xc9b0], 0
jl 0x42bab7
push 1
mov ecx, dword [ebp - 4]
call fcn.00431000
mov ecx, 0x50a9e78
call fcn.0045a010
jmp case.0x42b84e.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xc9b0]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9b0], eax
push 1
mov ecx, dword [ebp - 4]
call fcn.00431000
mov ecx, 0x50a9e78
call fcn.0045a010
jmp case.0x42b84e.3
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], 0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], 0
push 0
mov ecx, 0x489f1d0
call fcn.00464bb0
mov ecx, dword [ebp - 4]
call fcn.0042ae30
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42b84e.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, 0x574bcd8
call fcn.00493ac0
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x42bb5a
jmp case.0x42b84e.3
mov edx, 0x64
imul eax, edx, 0
mov ecx, dword [ebp - 0x24]
lea edx, [ecx + eax + 0x104]
push edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc664], 0
mov edx, dword [ebp - 4]
xorps xmm0, xmm0
movss dword [edx + 0xc670], xmm0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042c6c0
mov edx, dword [ebp - 4]
fstp dword [edx + 0xc674]
push 0x8fe
mov ecx, 0x4927138
call fcn.00415e00
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x2e8], 0
jne 0x42bbd5
jmp case.0x42b84e.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
push ecx
movss xmm0, dword [ecx + 0xc674]
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov edx, dword [ebp - 0x20]
mov eax, dword [edx + 0x2e8]
mov ecx, dword [ebp - 0x20]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x2e8]
mov eax, dword [edx + 0x5c]
call eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9b8], 0
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9bc], 1
mov eax, dword [ebp - 4]
mov dword [eax + 0xc9c0], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
mov ecx, dword [ebp - 4]
call fcn.00431310
mov ecx, dword [ebp - 4]
call fcn.0042f780
push 1
mov ecx, 0x64
imul edx, ecx, 0
mov eax, dword [ebp - 0x24]
lea ecx, [eax + edx + 0x104]
push ecx
mov ecx, 0x574bcd8
call fcn.004939f0
push eax
mov ecx, dword [ebp - 4]
call fcn.0042ec50
jmp case.0x42b84e.3
push str.w000001a
mov ecx, dword [ebp - 4]
call fcn.0042f8d0
mov edx, dword [ebp - 4]
mov dword [edx + 0x1cd8], 0x52
jmp case.0x42b84e.3
mov ecx, dword [ebp - 4]
call fcn.0042f860
mov eax, dword [ebp - 4]
mov dword [eax + 0x1cd8], 0x53
jmp case.0x42b84e.3
push ecx
movss xmm0, dword [0x4c9034]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.004326f0
jmp case.0x42b84e.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.004326f0
jmp case.0x42b84e.3
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.004327e0
jmp case.0x42b84e.3
push ecx
movss xmm0, dword [0x4c9034]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.004327e0
jmp case.0x42b84e.3
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc9c0], 1
jmp case.0x42b84e.3
mov edx, dword [ebp - 4]
mov dword [edx + 0xc9c0], 0
jmp case.0x42b84e.3
call fcn.00414cf0
test eax, eax
jne 0x42bd6b
push 1
push 0
push 0
push 0x4d26e8
push str.explore
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp case.0x42b84e.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x55
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
push edx
mov ecx, dword [ebp - 4]
call fcn.0042c830
jmp case.0x42b84e.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x5a
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x3c]
add eax, dword [edx + 0xc9b0]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042fda0
jmp case.0x42b84e.3
push 0x8ff
mov ecx, 0x4927138
call fcn.00415e00
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
cmp dword [ecx + 0x1d8], 0
je 0x42bde5
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 0x1d8]
push eax
mov ecx, 0x50a97e0
call fcn.00472260
push 0x8ff
mov ecx, 0x4927138
call fcn.004415e0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], 0
jmp 0x42be0d
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0xa
jge 0x42be33
mov edx, dword [ebp - 0x14]
add edx, 0x6e
push edx
mov ecx, 0x4793b78
call fcn.00475f90
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
mov dword [edx + ecx*4 + 0xc684], eax
jmp 0x42be04
mov ecx, 0x50a9e78
call fcn.0045a2d0
mov ecx, 0x4793b78
call fcn.004736b0
push 0x73
mov ecx, 0x4927138
call fcn.004474f0
push 0x79
mov ecx, 0x4927138
call fcn.004474f0
push 0x47
mov ecx, 0x4927138
call fcn.004474f0
mov eax, dword [ebp - 4]
mov dword [eax + 0x14], 0xb
jmp case.0x42b84e.3
mov ecx, dword [ebp - 4]
call fcn.0042c5d0
jmp case.0x42b84e.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
push edx
mov ecx, 0x574bcd8
call fcn.00493ac0
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x42bea9
jmp case.0x42b84e.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x3c
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x40]
add eax, dword [edx + 0xc9a8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xc664], eax
push 1
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0xc664], 0x64
mov ecx, dword [ebp - 0x28]
lea edx, [ecx + eax + 0x104]
push edx
mov ecx, 0x574bcd8
call fcn.004939f0
push eax
mov ecx, dword [ebp - 4]
call fcn.0042ec50
mov eax, dword [ebp - 4]
imul ecx, dword [eax + 0xc664], 0x64
mov edx, dword [ebp - 0x28]
lea eax, [edx + ecx + 0x104]
push eax
mov ecx, dword [ebp - 4]
add ecx, 0xc59c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
jmp case.0x42b84e.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
sub eax, 0x5f
mov dword [ebp - 0x44], eax
push 1
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x44]
add edx, dword [ecx + 0xc9ac]
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042f240
jmp case.0x42b84e.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
push eax
mov ecx, 0x574bcd8
call fcn.00493ac0
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x42bf72
jmp case.0x42b84e.3
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x18], 0
jmp 0x42bf8b
mov ecx, dword [ebp - 0x18]
add ecx, 1
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0xa
jge 0x42bfbe
mov edx, dword [ebp - 0x18]
add edx, 0x6e
push edx
mov ecx, 0x4793b78
call fcn.00475f90
mov ecx, dword [ebp - 4]
imul edx, dword [ecx + 0x1ccc], 0x28
mov ecx, dword [ebp - 8]
lea edx, [ecx + edx + 0x7e9e4]
mov ecx, dword [ebp - 0x18]
mov dword [edx + ecx*4], eax
jmp 0x42bf82
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1cd0]
mov dword [ecx + eax*4 + 0x7ee94], edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
mov ecx, dword [ebp - 8]
add ecx, 0x7ef0c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x1cd4]
mov dword [ecx + eax*4 + 0x7efd4], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc664]
mov dword [edx + ecx*4 + 0x7f04c], eax
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0xc670]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov eax, dword [ebp - 8]
mov dword [eax + ecx*4 + 0x7f0c4], edx
mov ecx, dword [ebp - 4]
cvttss2si edx, dword [ecx + 0xc674]
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov eax, dword [ebp - 8]
mov dword [eax + ecx*4 + 0x7f13c], edx
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov ecx, dword [ecx + 0xc9b8]
mov dword [eax + edx*4 + 0x7f1b4], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0xc9bc]
mov dword [ecx + eax*4 + 0x7f22c], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc9c0]
mov dword [edx + ecx*4 + 0x7f2a4], eax
mov ecx, 0x48a7100
call fcn.0045c5a0
jmp case.0x42b84e.3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
cmp dword [eax + edx*4 + 0x7ee94], 0
jl 0x42c433
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
cvtsi2ss xmm0, dword [eax + edx*4 + 0x7f0c4]
mov ecx, dword [ebp - 4]
movss dword [ecx + 0xc670], xmm0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
mov ecx, dword [ebp - 8]
cvtsi2ss xmm0, dword [ecx + eax*4 + 0x7f13c]
mov edx, dword [ebp - 4]
movss dword [edx + 0xc674], xmm0
mov eax, dword [ebp - 4]
mov dword [eax + 0x1cd0], 0xffffffff
push 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 8]
mov ecx, dword [eax + edx*4 + 0x7ee94]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1ccc]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042f240
push 0x8fe
mov ecx, 0x4927138
call fcn.00415e00
mov dword [ebp - 0x1c], eax
mov ecx, 0x48a7100
call fcn.00411430
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
imul edx, dword [ecx + 0x1ccc], 0x28
mov eax, dword [ebp - 0x10]
lea ecx, [eax + edx + 0x7e9e4]
mov edx, 4
imul eax, edx, 0
mov ecx, dword [ecx + eax]
mov dword [ebp - 0x4c], ecx
cvtsi2ss xmm0, dword [ebp - 0x4c]
divss xmm0, dword [0x4c9250]
mulss xmm0, dword [0x4c9048]
addss xmm0, dword [0x4c9020]
movss dword [ebp - 0x2c], xmm0
xorps xmm0, xmm0
comiss xmm0, dword [ebp - 0x2c]
jb 0x42c1d2
movss xmm0, dword [0x4c8ffc]
movss dword [ebp - 0x2c], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, 0x574bcd8
call fcn.0042ad70
fstp dword [ebp - 0x50]
movss xmm0, dword [ebp - 0x50]
mulss xmm0, dword [ebp - 0x2c]
push ecx
movss dword [esp], xmm0
mov edx, dword [ebp - 0x1c]
mov eax, dword [edx + 0x2e8]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x2e8]
mov eax, dword [edx + 0x64]
call eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x7ef0c
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x42c24d
push 0
mov edx, dword [ebp - 0x10]
add edx, 0x7ef0c
push edx
mov ecx, 0x574bcd8
call fcn.004939f0
push eax
mov ecx, dword [ebp - 4]
call fcn.0042ec50
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7f1b4]
mov dword [edx + 0xc9b8], ecx
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9b8], 1
jne 0x42c28d
push ecx
movss xmm0, dword [0x4c9034]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.004326f0
jmp 0x42c29e
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.004326f0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7f22c]
mov dword [edx + 0xc9bc], ecx
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc9bc], 1
jne 0x42c2d9
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.004327e0
jmp 0x42c2ef
push ecx
movss xmm0, dword [0x4c9034]
movss dword [esp], xmm0
mov ecx, dword [ebp - 4]
call fcn.004327e0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + ecx*4 + 0x7efd4]
push eax
mov ecx, dword [ebp - 4]
call fcn.0042fda0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1ccc]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + edx*4 + 0x7f04c]
mov dword [eax + 0xc664], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1ccc]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + ecx*4 + 0x7efd4]
mov dword [edx + 0x1cd4], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x7ef0c
push edx
mov eax, dword [ebp - 4]
add eax, 0xc59c
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 4]
mov eax, dword [edx + 0x3c]
call eax
mov ecx, dword [ebp - 4]
call fcn.00431310
mov dword [ebp - 0xc], 0
mov dword [ebp - 0xc], 0
jmp 0x42c38a
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0xa
jge 0x42c3cf
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0x1ccc], 0x28
mov ecx, dword [ebp - 0x10]
lea edx, [ecx + eax + 0x7e9e4]
mov eax, dword [ebp - 0xc]
mov ecx, dword [edx + eax*4]
push ecx
mov edx, dword [ebp - 0xc]
add edx, 0x6e
push edx
mov ecx, 0x4793b78
call fcn.00476120
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 4]
mov dword [ecx + eax*4 + 0x19ac], 0xfffffed4
jmp 0x42c381
mov dword [ebp - 0xc], 0
imul edx, dword [ebp - 0xc], 0xd8
mov eax, dword [ebp - 4]
cmp dword [eax + edx + 0x1da4], 0
jl 0x42c401
mov ecx, dword [ebp - 0xc]
push ecx
mov ecx, dword [ebp - 4]
call fcn.0042ef80
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x42c3d6
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x2e8], 0
je 0x42c429
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x2e8]
mov eax, dword [ebp - 0x1c]
mov edx, dword [edx]
mov ecx, dword [eax + 0x2e8]
mov eax, dword [edx + 0x10c]
call eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 9
jmp case.0x42b84e.3
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x18]
sub eax, 6
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x30], eax
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 0x3c]
call edx
jmp case.0x42b84e.3
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x18]
sub ecx, 0x12
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 4]
imul eax, dword [edx + 0x30], 0xc
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x14], 0xa
mov edx, dword [ebp - 0x58]
push edx
mov ecx, dword [ebp - 4]
call fcn.0042c830
mov eax, dword [ebp - 4]
mov dword [eax + 0x18], 0xffffffff
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x1c], 0xffffffff
mov edx, dword [ebp - 4]
mov dword [edx + 0x20], 0xffffffff
mov esp, ebp
pop ebp
ret