Function at 0x42e100
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x501080
mov eax, dword fs:[0]
push eax
sub esp, 0xd0
mov eax, dword [0x5e0f00]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor edi, edi
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00493eb0
add esp, 8
mov dword [ebp - 4], edi
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov ecx, eax
cvttss2si eax, dword [ebp + 0x10]
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0x18], eax
cvttss2si eax, dword [ebp + 0x14]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push ecx
call dword [sym.imp.USER32.dll_ClientToScreen]
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov esi, eax
test esi, esi
je 0x42e3b2
push 0xffffffffffffffff
push 0x4a
call fcn.0041d020
add esp, 4
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.00493f50
add esp, 0xc
push 0xffffffffffffffff
push 0x52
mov byte [ebp - 4], 1
call fcn.0041d020
add esp, 4
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00493f50
add esp, 0xc
push 0xffffffffffffffff
push 0x53
mov byte [ebp - 4], 2
call fcn.0041d020
add esp, 4
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00493f50
add esp, 0xc
push 0xffffffffffffffff
push 0x54
mov byte [ebp - 4], 3
call fcn.0041d020
add esp, 4
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.00493f50
add esp, 0xc
cmp dword [ebp - 0x7c], 8
lea eax, [ebp - 0x90]
mov ebx, dword [sym.imp.USER32.dll_InsertMenuW]
cmovae eax, dword [ebp - 0x90]
push eax
push 0x7d0
push 0x400
push 0xffffffffffffffff
push esi
mov byte [ebp - 4], 4
call ebx
cmp byte [ebp + 0xc], 0
je 0x42e23b
cmp dword [ebp - 0x4c], 8
lea eax, [ebp - 0x60]
cmovae eax, dword [ebp - 0x60]
push eax
push 0x7d3
push 0x400
push 0xffffffffffffffff
push esi
call ebx
cmp dword [ebp - 0x64], 8
lea eax, [ebp - 0x78]
cmovae eax, dword [ebp - 0x78]
push eax
push 0x7d2
push 0x400
push 0xffffffffffffffff
push esi
call ebx
cmp dword [ebp - 0x34], 8
lea eax, [ebp - 0x48]
cmovae eax, dword [ebp - 0x48]
push eax
push 0x7d4
push 0x400
push 0xffffffffffffffff
push esi
call ebx
push 0
push dword [ebp - 0xd0]
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push 0x100
push esi
call dword [sym.imp.USER32.dll_TrackPopupMenuEx]
test eax, eax
jle 0x42e37f
cmp eax, 0x7d1
jne 0x42e37b
push 2
push 0
call dword [sym.imp.ole32.dll_CoInitializeEx]
test eax, eax
js 0x42e388
cmp dword [ebp - 0x1c], 8
lea eax, [ebp - 0x30]
xorps xmm0, xmm0
mov dword [ebp - 0xc4], 0
cmovae eax, dword [ebp - 0x30]
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0xcc]
push eax
movlpd qword [ebp - 0xb8], xmm0
movlpd qword [ebp - 0xac], xmm0
movlpd qword [ebp - 0xa4], xmm0
movlpd qword [ebp - 0x9c], xmm0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0xcc], 0x3c
mov dword [ebp - 0xb0], 5
mov dword [ebp - 0xc8], 0x10c
mov dword [ebp - 0xc0], str.properties
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x42e373
push 0x53a32c
mov dword [ebp - 0xdc], str.S:MightyGrep_src_app_win32.cpp
mov dword [ebp - 0xd8], str.ShowFileContextMenu
call dword [sym.imp.KERNEL32.dll_GetLastError]
movq xmm0, qword [ebp - 0xdc]
push eax
push 3
sub esp, 0xc
mov eax, esp
movq qword [eax], xmm0
mov dword [eax + 8], 0xac9
call fcn.004a4b70
add esp, 0x18
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x42e388
mov edi, eax
jmp 0x42e388
call fcn.00492f70
mov byte [eax + 0x61], 1
lea ecx, [ebp - 0x48]
call fcn.00421b80
lea ecx, [ebp - 0x60]
call fcn.00421b80
lea ecx, [ebp - 0x78]
call fcn.00421b80
lea ecx, [ebp - 0x90]
call fcn.00421b80
push esi
call dword [sym.imp.USER32.dll_DestroyMenu]
mov ecx, dword [ebp - 0x1c]
cmp ecx, 8
jb 0x42e3e8
mov edx, dword [ebp - 0x30]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42e3de
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42e406
push ecx
push edx
call fcn.004d36cd
add esp, 8
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004d3b35
mov esp, ebp
pop ebp
ret
call fcn.004d826f
int3