Function at 0x42d5a0
Capabilities:
Create process on windows
Get common file path
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xad4
mov eax, dword [0x43e004]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x43f9e0]
xorps xmm0, xmm0
push ebx
push esi
push edi
push 0x618
mov dword [ebp - 0xa5c], eax
lea eax, [ebp - 0xa50]
push 0
push eax
mov dword [ebp - 0xa54], 0
mov dword [ebp - 0xa6c], 0
movlpd qword [ebp - 0xa68], xmm0
call fcn.00407d30
add esp, 0xc
lea eax, [ebp - 0x230]
push 0x208
push 0
push eax
call fcn.00407d30
add esp, 0xc
lea eax, [ebp - 0x438]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x438]
push 0x43a704
push eax
call fcn.0040f36d
mov esi, eax
add esp, 8
test esi, esi
je 0x42da4d
push 2
push 0xffffffffffffffff
push 0xfffffffffffffff9
push esi
call fcn.00410712
push esi
call fcn.004100d5
add esp, 0x14
mov dword [ebp - 0xa74], edx
mov ebx, eax
lea eax, [ebp - 0xa54]
push esi
push 2
push 1
push eax
call fcn.004102fc
add esp, 0x10
cmp eax, 2
jne 0x42d9dd
push esi
push 1
lea eax, [ebp - 0xa6c]
push 1
push eax
call fcn.004102fc
add esp, 0x10
cmp eax, 1
jne 0x42d9dd
push esi
push 4
push eax
lea eax, [ebp - 0xa68]
push eax
call fcn.004102fc
add esp, 0x10
cmp eax, 4
jne 0x42d9dd
mov eax, 0xfffe
cmp word [ebp - 0xa54], ax
jne 0x42da4d
push 0
push dword [ebp - 0xa64]
push dword [ebp - 0xa68]
push esi
call fcn.00410712
sub ebx, dword [ebp - 0xa68]
push ebx
mov dword [ebp - 0xa74], ebx
call fcn.00412fa9
add esp, 0x14
mov dword [ebp - 0xa58], eax
test eax, eax
je 0x42da4d
push esi
push ebx
push 1
push eax
call fcn.004102fc
push esi
call fcn.0040ae9a
add esp, 0x14
lea eax, [ebp - 0x230]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
lea edi, [ebp - 0x230]
add edi, 0xfffffffe
nop dword [eax + eax]
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x42d730
mov ecx, 6
mov esi, str.sfmkdecd.exe
rep movsd dword es:[edi], dword [esi]
xor ebx, ebx
movsw word es:[edi], word [esi]
lea esi, [ebp - 0x230]
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x42d755
lea eax, [ebp - 0x230]
sub esi, ecx
push 0
push eax
sar esi, 1
call fcn.00409c60
add esp, 8
cmp eax, 0xffffffff
je 0x42d846
lea eax, [esi*2 - 8]
mov dword [ebp - 0xa70], eax
nop dword [eax + eax]
cmp eax, 0x208
jae 0x42da7f
xor ecx, ecx
mov word [ebp + eax - 0x230], cx
lea eax, [ebp - 0x24]
push 0xa
push eax
push ebx
call fcn.0040f24f
lea edx, [ebp - 0x24]
add esp, 0xc
mov esi, edx
nop dword [eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x42d7c0
lea edi, [ebp - 0x230]
sub edx, esi
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x42d7d6
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x230]
add ecx, 0xfffffffe
nop dword [eax]
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x42d800
mov eax, dword [str..exe]
inc ebx
mov dword [ecx], eax
mov eax, dword [0x43a72c]
mov dword [ecx + 4], eax
mov ax, word [0x43a730]
mov word [ecx + 8], ax
lea eax, [ebp - 0x230]
push 0
push eax
call fcn.00409c60
add esp, 8
cmp eax, 0xffffffff
mov eax, dword [ebp - 0xa70]
jne 0x42d790
lea eax, [ebp - 0x230]
push 0x43a734
push eax
call fcn.0040f36d
mov edi, dword [ebp - 0xa58]
mov esi, eax
add esp, 8
test esi, esi
je case.default.0x42d898
push esi
push dword [ebp - 0xa74]
push 1
push edi
call fcn.0040d029
push esi
call fcn.0040ae9a
add esp, 0x14
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov ecx, dword [ebp - 0xa5c]
dec ecx
cmp ecx, 4
ja case.default.0x42d898
jmp dword [ecx*4 + 0x42da84]
lea ecx, [ebp - 0x438]
push ecx
push eax
lea eax, [ebp - 0x230]
push eax
lea eax, [ebp - 0xa50]
push str.__s___I__d__F___s___D
push eax
call fcn.00401d40
add esp, 0x14
jmp 0x42d95c
push dword [0x43f994]
lea ecx, [ebp - 0x438]
push dword [0x43f990]
push ecx
push eax
lea eax, [ebp - 0x230]
push eax
push str.__s___I__d__F___s___S__I64d
jmp 0x42d94d
push dword [0x43f994]
lea ecx, [ebp - 0x438]
push dword [0x43f990]
push ecx
push eax
lea eax, [ebp - 0x230]
push eax
push str.__s___I__d__F___s___R__I64d
jmp 0x42d94d
push dword [0x43f994]
lea ecx, [ebp - 0x438]
push dword [0x43f990]
push ecx
push eax
lea eax, [ebp - 0x230]
push eax
push str.__s___I__d__F___s___U__I64d
jmp 0x42d94d
push dword [0x43f994]
lea ecx, [ebp - 0x438]
push dword [0x43f990]
push ecx
push eax
lea eax, [ebp - 0x230]
push eax
push str.__s___I__d__F___s___T__I64d
lea eax, [ebp - 0xa50]
push eax
call fcn.00401d40
add esp, 0x1c
lea eax, [ebp - 0xad0]
mov dword [ebp - 0xac0], 0x44
push eax
lea eax, [ebp - 0xac0]
xorps xmm0, xmm0
push eax
push 0
push 0
push 0x20
push 0
push 0
push 0
lea eax, [ebp - 0xa50]
movlpd qword [ebp - 0xabc], xmm0
push eax
push 0
movlpd qword [ebp - 0xab4], xmm0
movlpd qword [ebp - 0xaac], xmm0
movlpd qword [ebp - 0xaa4], xmm0
movlpd qword [ebp - 0xa9c], xmm0
movlpd qword [ebp - 0xa94], xmm0
movlpd qword [ebp - 0xa8c], xmm0
movlpd qword [ebp - 0xa84], xmm0
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
push edi
call fcn.0040facf
add esp, 4
jmp 0x42da4d
push 0x40
push str.fread
push 0x43fe18
mov dword [0x43fc0c], 0xd5
call fcn.0040bfa6
add esp, 0xc
mov dword [0x43fc08], 4
xor eax, eax
mov word [0x43fe96], ax
lea eax, [ebp - 0x438]
push 0x104
push eax
push 0x43fc10
call fcn.0040bfa6
add esp, 0xc
xor eax, eax
mov word [0x43fe16], ax
push 0x104
push str.C:JenkinsAE_build_workHibun_AE_Current_src_sfslfdec_sfmkcore.c
push 0x43fe98
call fcn.0040bfa6
add esp, 0xc
xor eax, eax
mov word [0x44009e], ax
lea eax, [ebp - 0x230]
push 0
push eax
call fcn.00409c60
add esp, 8
cmp eax, 0xffffffff
je 0x42da6e
lea ecx, [ebp - 0x230]
call fcn.00404bf0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00406bb3
mov esp, ebp
pop ebp
ret
call fcn.00406ce3
lahf
fadd dword [edx]
invalid