Function at 0x41ba77
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56fcb6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1c19c
call fcn.0054cd40
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c19c], ecx
lea eax, [ebp - 0x1a488]
push eax
mov ecx, dword [ebp - 0x1c19c]
call fcn.004169d9
lea ecx, [ebp - 0x6468]
push ecx
call fcn.0053534c
add esp, 4
push str.UFD_MP_spareSort.Txt
lea edx, [ebp - 0x6468]
push edx
call fcn.0054bed0
add esp, 8
mov dword [ebp - 0x1a8a8], 0x10000000
mov dword [ebp - 0x1a8ac], 0
mov dword [ebp - 0x1b96c], 0
mov dword [ebp - 0x1a89c], 0
push 0x4000
push 0
lea eax, [ebp - 0x1a474]
push eax
call fcn.0054bfb0
add esp, 0xc
push 0x10000
push 0
lea ecx, [ebp - 0x16470]
push ecx
call fcn.0054bfb0
add esp, 0xc
push 0x46d
mov ecx, dword [ebp - 0x1c19c]
call fcn.00564186
mov dword [ebp - 0x16474], eax
push 0x64
push 0
mov ecx, dword [ebp - 0x16474]
call fcn.00411180
push 0
mov ecx, dword [ebp - 0x16474]
call fcn.004111d0
mov edx, dword [ebp - 0x1c19c]
cmp dword [edx + 0x108], 8
jl 0x41c324
mov eax, dword [ebp - 0x1c19c]
cmp dword [eax + 0x108], 0xd
jg 0x41c324
lea ecx, [ebp - 0x1b964]
push ecx
mov edx, dword [ebp - 0x1c19c]
mov eax, dword [edx + 0x5c]
push eax
mov ecx, dword [ebp - 0x1c19c]
mov ecx, dword [ecx + 0x60]
call fcn.004cd4b3
mov edx, dword [ebp - 0x1c19c]
mov dword [edx + 0x110], eax
push 0x10
lea eax, [ebp - 0x4264]
push eax
push 0x3f0
mov ecx, dword [ebp - 0x1c19c]
call fcn.00564186
mov ecx, eax
call fcn.00564356
lea ecx, [ebp - 0x4264]
push ecx
call fcn.005353c2
add esp, 4
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x1c19c]
call fcn.0041e58b
test eax, eax
je 0x41bc05
cmp dword [0x5bdf50], 1
jl 0x41bc05
cmp dword [0x5bdf4c], 1
jge 0x41bc20
push 0
push 0
push str.Cant_Get_CardMode
mov ecx, dword [ebp - 0x1c19c]
call fcn.00563067
xor eax, eax
jmp 0x41cf18
cmp dword [ebp + 8], 0
jne 0x41bc30
mov dword [0x5bdf50], 1
mov edx, dword [0x5bdf4c]
imul edx, dword [0x5bdf50]
shl edx, 4
cmp edx, dword [ebp - 0x1a8a8]
jge 0x41bc5d
mov eax, dword [0x5bdf4c]
imul eax, dword [0x5bdf50]
shl eax, 4
mov dword [ebp - 0x1a8a8], eax
cmp dword [ebp + 8], 2
je 0x41bc6d
cmp dword [ebp + 8], 0
jne 0x41c09e
mov ecx, dword [ebp - 0x1a8a8]
push ecx
call fcn.0054cea3
add esp, 4
mov dword [ebp - 0x646c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x1a8a0], 0
jmp 0x41bca4
mov edx, dword [ebp - 0x1a8a0]
add edx, 1
mov dword [ebp - 0x1a8a0], edx
mov eax, dword [ebp - 0x1a8a0]
cmp eax, dword [0x5bdf50]
jge 0x41bf3b
mov ecx, dword [0x5bdf4c]
shl ecx, 4
mov eax, dword [ebp - 0x1a8a8]
cdq
idiv ecx
cmp eax, dword [ebp - 0x1a8a0]
jg 0x41bcd5
jmp 0x41bf3b
mov dword [ebp - 0x1a8a4], 0
jmp 0x41bcf0
mov edx, dword [ebp - 0x1a8a4]
add edx, 1
mov dword [ebp - 0x1a8a4], edx
mov eax, dword [ebp - 0x1a8a4]
cmp eax, dword [0x5bdf4c]
jge 0x41bf36
push 0x10
push 0
lea ecx, [ebp - 0x1a498]
push ecx
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x1a498], 0xf0
mov byte [ebp - 0x1a497], 0xa
mov edx, 1
mov ecx, dword [0x5bdf54]
shl edx, cl
xor edx, 0xff
mov byte [ebp - 0x1a496], dl
cmp dword [ebp + 8], 0
je 0x41bd50
mov eax, dword [ebp - 0x1a8a0]
mov dword [ebp - 0x1c1a0], eax
jmp 0x41bd59
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x1c1a0], ecx
mov dl, byte [ebp - 0x1c1a0]
mov byte [ebp - 0x1a495], dl
mov al, byte [ebp - 0x1a8a4]
mov byte [ebp - 0x1a494], al
mov ecx, dword [ebp - 0x1a47e]
and ecx, 0xffff
or ecx, 4
mov byte [ebp - 0x1a48f], cl
mov dl, byte [ebp - 0x1a47c]
mov byte [ebp - 0x1a48e], dl
mov eax, dword [0x5bdf44]
imul eax, dword [0x590abc]
mov byte [ebp - 0x1a48d], al
push 0x4200
push 0
lea ecx, [ebp - 0x4214]
push ecx
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x1b8dc]
and edx, 0xff
test edx, edx
je 0x41bdee
mov eax, dword [ebp - 0x1a495]
and eax, 0xff
cdq
idiv dword [ebp - 0x1b8f8]
mov al, byte [eax + 0x590aec]
mov byte [ebp - 0x1a496], al
jmp 0x41be0c
mov eax, dword [ebp - 0x1a495]
and eax, 0xff
cdq
idiv dword [ebp - 0x1b8f8]
mov cl, byte [eax + 0x590ae4]
mov byte [ebp - 0x1a496], cl
jmp 0x41be1b
mov dword [ebp - 4], 0
push 0x12c
push 0
mov edx, dword [0x5bdf44]
imul edx, dword [0x590abc]
add edx, 1
shl edx, 9
push edx
lea eax, [ebp - 0x4214]
push eax
lea ecx, [ebp - 0x1a498]
push ecx
mov edx, dword [ebp - 0x1c19c]
mov eax, dword [edx + 0x5c]
push eax
mov ecx, dword [ebp - 0x1c19c]
mov ecx, dword [ecx + 0x60]
call fcn.004ccf8e
mov dword [ebp - 0x1c1a4], eax
mov edx, dword [ebp - 0x1c19c]
mov eax, dword [ebp - 0x1c1a4]
mov dword [edx + 0x110], eax
push 0x10
mov ecx, dword [0x5bdf44]
imul ecx, dword [0x590abc]
shl ecx, 9
lea edx, [ebp + ecx - 0x4214]
push edx
mov eax, dword [ebp - 0x1a8a0]
imul eax, dword [0x5bdf4c]
add eax, dword [ebp - 0x1a8a4]
shl eax, 4
mov ecx, dword [ebp - 0x646c]
add ecx, eax
push ecx
call fcn.0054c980
add esp, 0xc
push 3
mov edx, dword [0x5bdf44]
imul edx, dword [0x590abc]
shl edx, 9
lea eax, [ebp + edx - 0x4204]
push eax
mov ecx, dword [ebp - 0x1a8a0]
imul ecx, dword [0x5bdf4c]
add ecx, dword [ebp - 0x1a8a4]
shl ecx, 4
mov edx, dword [ebp - 0x646c]
lea eax, [edx + ecx + 5]
push eax
call fcn.0054c980
add esp, 0xc
mov ecx, dword [0x5bdf4c]
imul ecx, dword [0x5bdf50]
mov eax, dword [ebp - 0x1a8a0]
imul eax, dword [0x5bdf4c]
add eax, dword [ebp - 0x1a8a4]
imul eax, eax, 0x64
cdq
idiv ecx
push eax
mov ecx, dword [ebp - 0x16474]
call fcn.004111d0
jmp 0x41bce1
jmp 0x41bc95
jmp 0x41bf57
mov dword [ebp - 4], 0xffffffff
cmp dword [0x5bdf4c], 0
jle 0x41bfa8
mov edx, dword [ebp + 8]
neg edx
sbb edx, edx
not edx
and edx, dword [ebp - 0x14]
push edx
mov eax, dword [0x5bdf4c]
push eax
push 0x2000
lea ecx, [ebp - 0x6268]
push ecx
lea edx, [ebp - 0x6468]
push edx
mov eax, dword [ebp - 0x1a8a8]
push eax
mov ecx, dword [ebp - 0x646c]
push ecx
mov ecx, dword [ebp - 0x1c19c]
call fcn.0041d5b3
jmp 0x41bfe6
mov edx, dword [ebp + 8]
neg edx
sbb edx, edx
not edx
and edx, dword [ebp - 0x14]
push edx
push pe_nt_image_headers32
push 0x2000
lea eax, [ebp - 0x6268]
push eax
lea ecx, [ebp - 0x6468]
push ecx
mov edx, dword [ebp - 0x1a8a8]
push edx
mov eax, dword [ebp - 0x646c]
push eax
mov ecx, dword [ebp - 0x1c19c]
call fcn.0041d5b3
push 0
push 0
lea ecx, [ebp - 0x6268]
push ecx
mov ecx, dword [ebp - 0x1c19c]
call fcn.00563067
push 1
mov ecx, dword [ebp - 0x1c19c]
call fcn.005637eb
push 0
mov edx, dword [ebp - 0x1a8a8]
push edx
mov eax, dword [ebp - 0x646c]
push eax
mov ecx, dword [ebp - 0x1c19c]
add ecx, 0x64
call fcn.004266f3
push 1
push 1
push 1
push 1
mov ecx, dword [ebp - 0x1c19c]
add ecx, 0x64
call fcn.00424a33
push 0x105
push 0
push 0
mov ecx, dword [ebp - 0x1c19c]
add ecx, 0x64
call fcn.00411bd0
mov ecx, dword [ebp - 0x646c]
push ecx
call fcn.0054c543
add esp, 4
push 4
push 0x5bdf74
push str.Do_you_need_Open_the_Parsing_File__
mov ecx, dword [ebp - 0x1c19c]
call fcn.00563067
cmp eax, 6
jne 0x41c099
push 1
push 0
push 0
lea edx, [ebp - 0x6468]
push edx
push 0x590fe8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x41c31f
mov eax, dword [0x5bdf4c]
imul eax, dword [0x5bdf50]
shl eax, 4
push eax
call fcn.0054cea3
add esp, 4
mov dword [ebp - 0x646c], eax
mov dword [ebp - 0x1a8a0], 0
jmp 0x41c0d7
mov ecx, dword [ebp - 0x1a8a0]
add ecx, 1
mov dword [ebp - 0x1a8a0], ecx
mov edx, dword [ebp - 0x1a8a0]
cmp edx, dword [0x5bdf48]
jge 0x41c2b5
push 0x10
push 0
lea eax, [ebp - 0x1a498]
push eax
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x1a498], 0xf0
mov byte [ebp - 0x1a497], 0xa
mov edx, 1
mov ecx, dword [0x5bdf54]
shl edx, cl
xor edx, 0xff
mov byte [ebp - 0x1a496], dl
mov al, byte [ebp - 0x1a480]
mov byte [ebp - 0x1a495], al
mov cl, byte [ebp - 0x1a486]
mov byte [ebp - 0x1a494], cl
mov dl, byte [ebp - 0x1a8a0]
mov byte [ebp - 0x1a492], dl
mov eax, dword [ebp - 0x1a47e]
and eax, 0xffff
or al, 4
mov byte [ebp - 0x1a48f], al
mov cl, byte [ebp - 0x1a47c]
mov byte [ebp - 0x1a48e], cl
mov edx, dword [0x5bdf44]
imul edx, dword [0x590abc]
mov byte [ebp - 0x1a48d], dl
push 0x4200
push 0
lea eax, [ebp - 0x4214]
push eax
call fcn.0054bfb0
add esp, 0xc
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x1b8dc]
and ecx, 0xff
test ecx, ecx
je 0x41c1c6
mov eax, dword [ebp - 0x1a495]
and eax, 0xff
cdq
idiv dword [ebp - 0x1b8f8]
mov dl, byte [eax + 0x590aec]
mov byte [ebp - 0x1a496], dl
jmp 0x41c1e4
mov eax, dword [ebp - 0x1a495]
and eax, 0xff
cdq
idiv dword [ebp - 0x1b8f8]
mov al, byte [eax + 0x590ae4]
mov byte [ebp - 0x1a496], al
jmp 0x41c1f3
mov dword [ebp - 4], 0xffffffff
push 0x12c
push 0
mov ecx, dword [0x5bdf44]
imul ecx, dword [0x590abc]
add ecx, 1
shl ecx, 9
push ecx
lea edx, [ebp - 0x4214]
push edx
lea eax, [ebp - 0x1a498]
push eax
mov ecx, dword [ebp - 0x1c19c]
mov edx, dword [ecx + 0x5c]
push edx
mov eax, dword [ebp - 0x1c19c]
mov ecx, dword [eax + 0x60]
call fcn.004ccf8e
mov ecx, dword [ebp - 0x1c19c]
mov dword [ecx + 0x110], eax
push 0x10
mov edx, dword [0x5bdf44]
imul edx, dword [0x590abc]
shl edx, 9
lea eax, [ebp + edx - 0x4214]
push eax
mov ecx, dword [ebp - 0x1a8a0]
shl ecx, 4
mov edx, dword [ebp - 0x646c]
add edx, ecx
push edx
call fcn.0054c980
add esp, 0xc
push 3
mov eax, dword [0x5bdf44]
imul eax, dword [0x590abc]
shl eax, 9
lea ecx, [ebp + eax - 0x4204]
push ecx
mov edx, dword [ebp - 0x1a8a0]
shl edx, 4
mov eax, dword [ebp - 0x646c]
lea ecx, [eax + edx + 5]
push ecx
call fcn.0054c980
add esp, 0xc
jmp 0x41c0c8
push 1
mov ecx, dword [ebp - 0x1c19c]
call fcn.005637eb
push 0
mov edx, dword [0x5bdf48]
shl edx, 4
push edx
mov eax, dword [ebp - 0x646c]
push eax
mov ecx, dword [ebp - 0x1c19c]
add ecx, 0x64
call fcn.004266f3
push 1
push 1
push 1
push 1
mov ecx, dword [ebp - 0x1c19c]
add ecx, 0x64
call fcn.00424a33
push 0x105
push 0
push 0
mov ecx, dword [ebp - 0x1c19c]
add ecx, 0x64
call fcn.00411bd0
mov ecx, dword [ebp - 0x646c]
push ecx
call fcn.0054c543
add esp, 4
jmp 0x41cf06
mov dword [ebp - 0x1b97c], 0
mov dword [ebp - 0x1bd84], 0
mov dword [ebp - 0x1b974], 0
mov dword [ebp - 0x1bd88], 0
mov dword [ebp - 0x1b978], 0
push 0x10
lea edx, [ebp - 0x4264]
push edx
push 0x3ed
mov ecx, dword [ebp - 0x1c19c]
call fcn.00564186
mov ecx, eax
call fcn.00564356
lea eax, [ebp - 0x4264]
push eax
call fcn.005353c2
add esp, 4
mov dword [ebp - 0x1a8ac], eax
mov ecx, dword [ebp - 0x1a8ac]
shl ecx, 8
mov dword [ebp - 0x1a8ac], ecx
push 0x10
lea edx, [ebp - 0x4264]
push edx
push 0x3f4
mov ecx, dword [ebp - 0x1c19c]
call fcn.00564186
mov ecx, eax
call fcn.00564356
lea eax, [ebp - 0x4264]
push eax
call fcn.005353c2
add esp, 4
mov ecx, dword [ebp - 0x1a8ac]
add ecx, eax
mov dword [ebp - 0x1a8ac], ecx
mov dword [ebp - 0x4268], 0
mov dword [ebp - 0x6470], 0
push 0x10
lea edx, [ebp - 0x4264]
push edx
push 0x3f0
mov ecx, dword [ebp - 0x1c19c]
call fcn.00564186
mov ecx, eax
call fcn.00564356
lea eax, [ebp - 0x4264]
push eax
call fcn.005353c2
add esp, 4
mov dword [ebp - 0x14], eax
push 0x10
push 0
lea ecx, [ebp - 0x1a498]
push ecx
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x1a498], 0xf0
mov byte [ebp - 0x1a497], 0x20
mov byte [ebp - 0x1a48d], 1
mov edx, dword [ebp - 0x1c19c]
cmp dword [edx + 0x108], 8
jl 0x41c46a
mov eax, dword [ebp - 0x1c19c]
cmp dword [eax + 0x108], 0xd
jg 0x41c46a
mov byte [ebp - 0x1a48c], 7
push 0x12c
push 0
mov ecx, dword [ebp - 0x1a48d]
and ecx, 0xff
shl ecx, 9
push ecx
lea edx, [ebp - 0x4214]
push edx
lea eax, [ebp - 0x1a498]
push eax
mov ecx, dword [ebp - 0x1c19c]
mov edx, dword [ecx + 0x5c]
push edx
mov eax, dword [ebp - 0x1c19c]
mov ecx, dword [eax + 0x60]
call fcn.004ccf8e
mov ecx, dword [ebp - 0x1c19c]
mov dword [ecx + 0x110], eax
mov edx, dword [ebp - 0x4214]
and edx, 0xff
mov dword [ebp - 0x1b968], edx
mov dword [ebp - 0x1b968], 1
push 0
mov eax, dword [ebp - 0x1c19c]
mov ecx, dword [eax + 0x108]
push ecx
lea edx, [ebp - 0x4214]
push edx
mov ecx, dword [ebp - 0x1c19c]
call fcn.0041b860
mov dword [ebp - 0x1bd8c], eax
mov eax, dword [ebp - 0x1bd8c]
and eax, 8
test eax, eax
je 0x41c50f
mov dword [ebp - 0x1a89c], 0x80
jmp 0x41c519
mov dword [ebp - 0x1a89c], 0x40
mov dword [ebp - 0x1a8a0], 0
jmp 0x41c534
mov ecx, dword [ebp - 0x1a8a0]
add ecx, 1
mov dword [ebp - 0x1a8a0], ecx
cmp dword [ebp - 0x1a8a0], 0x100
jae 0x41c553
mov edx, dword [ebp - 0x1a8a0]
mov dword [ebp + edx*4 - 0x1c18c], 0
jmp 0x41c525
mov dword [ebp - 0x1a8a0], 0
jmp 0x41c56e
mov eax, dword [ebp - 0x1a8a0]
add eax, 1
mov dword [ebp - 0x1a8a0], eax
cmp dword [ebp - 0x1a8a0], 0x100
jae 0x41c58d
mov ecx, dword [ebp - 0x1a8a0]
mov dword [ebp + ecx*4 - 0x1bd80], 0
jmp 0x41c55f
mov dword [ebp - 0x1a8a0], 0
jmp 0x41c5a8
mov edx, dword [ebp - 0x1a8a0]
add edx, 1
mov dword [ebp - 0x1a8a0], edx
mov eax, dword [ebp - 0x1a8a0]
cmp eax, dword [ebp - 0x1b968]
jge 0x41ca52
mov dword [ebp - 0x1a8a4], 0
jmp 0x41c5d5
mov ecx, dword [ebp - 0x1a8a4]
add ecx, 1
mov dword [ebp - 0x1a8a4], ecx
cmp dword [ebp - 0x1a8a4], 0x400
jge 0x41ca4d
push 0x10
push 0
lea edx, [ebp - 0x1a498]
push edx
call fcn.0054bfb0
add esp, 0xc
mov byte [ebp - 0x1a498], 0xf0
mov byte [ebp - 0x1a497], 0xa
cmp dword [ebp + 8], 0
je 0x41c68a
mov eax, dword [ebp - 0x1a8ac]
sar eax, 8
mov byte [ebp - 0x1a496], al
mov cl, byte [ebp - 0x1a8ac]
mov byte [ebp - 0x1a495], cl
mov dl, byte [ebp - 0x4268]
mov byte [ebp - 0x1a494], dl
mov byte [ebp - 0x1a493], 0
mov al, byte [ebp - 0x14]
mov byte [ebp - 0x1a492], al
cmp dword [ebp - 0x1a8a4], 0x200
jl 0x41c658
mov byte [ebp - 0x1a490], 0x40
jmp 0x41c65f
mov byte [ebp - 0x1a490], 0
mov byte [ebp - 0x1a48d], 2
mov ecx, dword [ebp - 0x4268]
add ecx, 1
mov dword [ebp - 0x4268], ecx
mov edx, dword [ebp - 0x4268]
cmp edx, dword [ebp - 0x1a89c]
jl 0x41c688
jmp 0x41ca4d
jmp 0x41c6c2
mov eax, dword [ebp - 0x1a8a4]
sar eax, 8
mov byte [ebp - 0x1a496], al
mov ecx, dword [ebp - 0x1a8a4]
and ecx, 0xff
mov byte [ebp - 0x1a495], cl
mov dl, byte [ebp - 0x14]
mov byte [ebp - 0x1a492], dl
mov byte [ebp - 0x1a490], 0
mov byte [ebp - 0x1a48d], 2
mov eax, dword [ebp - 0x1c19c]
cmp dword [eax + 0x108], 0
jl 0x41c749
mov ecx, dword [ebp - 0x1c19c]
cmp dword [ecx + 0x108], 7
jg 0x41c749
mov byte [ebp - 0x1a490], 3
push 0x12c
push 0
push 0x400
lea edx, [ebp - 0x4214]
push edx
lea eax, [ebp - 0x1a498]
push eax
mov ecx, dword [ebp - 0x1c19c]
mov edx, dword [ecx + 0x5c]
push edx
mov eax, dword [ebp - 0x1c19c]
mov ecx, dword [eax + 0x60]
call fcn.004ccf8e
mov ecx, dword [ebp - 0x1c19c]
mov dword [ecx + 0x110], eax
push 0x10
lea edx, [ebp - 0x4214]
push edx
mov eax, dword [ebp - 0x1a8a4]
shl eax, 4
lea ecx, [ebp + eax - 0x16470]
push ecx
call fcn.0054c980
add esp, 0xc
jmp 0x41c7a9
push 0x12c
push 0
push 0x400
lea edx, [ebp - 0x4214]
push edx
lea eax, [ebp - 0x1a498]
push eax
mov ecx, dword [ebp - 0x1c19c]
mov edx, dword [ecx + 0x5c]
push edx
mov eax, dword [ebp - 0x1c19c]
mov ecx, dword [eax + 0x60]
call fcn.004ccf8e
mov ecx, dword [ebp - 0x1c19c]
mov dword [ecx + 0x110], eax
push 0x10
lea edx, [ebp - 0x4014]
push edx
mov eax, dword [ebp - 0x1a8a4]
shl eax, 4
lea ecx, [ebp + eax - 0x16470]
push ecx
call fcn.0054c980
add esp, 0xc
cmp dword [ebp - 0x1a8a4], 0x3fa
jge case.0x41c9ac.4
mov edx, dword [ebp - 0x1c19c]
cmp dword [edx + 0x108], 0
jl 0x41c958
mov eax, dword [ebp - 0x1c19c]
cmp dword [eax + 0x108], 7
jg 0x41c958
mov ecx, dword [ebp - 0x4014]
and ecx, 0xff
and ecx, 0xfc
cmp ecx, 0x20
jne 0x41c82b
mov edx, dword [ebp - 0x4014]
and edx, 0xff
and edx, 0xfc
mov eax, dword [ebp - 0x4014]
and eax, 0xff
and eax, 0xfc
mov ecx, dword [ebp + eax*4 - 0x1bd80]
add ecx, 1
mov dword [ebp + edx*4 - 0x1bd80], ecx
jmp 0x41c853
mov edx, dword [ebp - 0x4014]
and edx, 0xff
mov eax, dword [ebp - 0x4014]
and eax, 0xff
mov ecx, dword [ebp + eax*4 - 0x1bd80]
add ecx, 1
mov dword [ebp + edx*4 - 0x1bd80], ecx
mov dl, byte [ebp - 0x4014]
mov byte [ebp - 0x1c194], dl
mov eax, dword [ebp - 0x4014]
and eax, 0xff
and eax, 0xf0
cmp eax, 0xa0
jle 0x41c887
mov cl, byte [ebp - 0x1c194]
and cl, 0xf
mov byte [ebp - 0x1c194], cl
jmp 0x41c896
mov dl, byte [ebp - 0x1c194]
and dl, 0xf0
mov byte [ebp - 0x1c194], dl
mov eax, dword [ebp - 0x1c194]
and eax, 0xff
mov dword [ebp - 0x1c1a8], eax
cmp dword [ebp - 0x1c1a8], 0x80
ja case.0x41c8c5.5
mov edx, dword [ebp - 0x1c1a8]
xor ecx, ecx
mov cl, byte [edx + 0x41cf43]
jmp dword [ecx*4 + 0x41cf2b]
mov eax, dword [ebp - 0x1b97c]
add eax, 1
mov dword [ebp - 0x1b97c], eax
jmp case.0x41c8c5.5
mov ecx, dword [ebp - 0x1bd84]
add ecx, 1
mov dword [ebp - 0x1bd84], ecx
mov dl, byte [ebp - 0x4012]
mov byte [ebp - 0x1c190], dl
mov eax, dword [ebp - 0x1c190]
and eax, 0xff
mov ecx, dword [ebp - 0x1c190]
and ecx, 0xff
mov edx, dword [ebp + ecx*4 - 0x1c18c]
add edx, 1
mov dword [ebp + eax*4 - 0x1c18c], edx
jmp case.0x41c8c5.5
mov eax, dword [ebp - 0x1b974]
add eax, 1
mov dword [ebp - 0x1b974], eax
jmp case.0x41c8c5.5
mov ecx, dword [ebp - 0x1bd88]
add ecx, 1
mov dword [ebp - 0x1bd88], ecx
jmp case.0x41c8c5.5
mov edx, dword [ebp - 0x1b978]
add edx, 1
mov dword [ebp - 0x1b978], edx
jmp case.0x41c9ac.4
mov eax, dword [ebp - 0x4013]
and eax, 0xff
mov ecx, dword [ebp - 0x4013]
and ecx, 0xff
mov edx, dword [ebp + ecx*4 - 0x1bd80]
add edx, 1
mov dword [ebp + eax*4 - 0x1bd80], edx
mov eax, dword [ebp - 0x4013]
and eax, 0xff
mov dword [ebp - 0x1c1ac], eax
cmp dword [ebp - 0x1c1ac], 0x44
ja case.0x41c9ac.4
mov edx, dword [ebp - 0x1c1ac]
xor ecx, ecx
mov cl, byte [edx + 0x41cfd8]
jmp dword [ecx*4 + 0x41cfc4]
mov eax, dword [ebp - 0x1b97c]
add eax, 1
mov dword [ebp - 0x1b97c], eax
jmp case.0x41c9ac.4
mov ecx, dword [ebp - 0x1bd84]
add ecx, 1
mov dword [ebp - 0x1bd84], ecx
mov dl, byte [ebp - 0x4012]
mov byte [ebp - 0x1c190], dl
mov eax, dword [ebp - 0x1c190]
and eax, 0xff
mov ecx, dword [ebp - 0x1c190]
and ecx, 0xff
mov edx, dword [ebp + ecx*4 - 0x1c18c]
add edx, 1
mov dword [ebp + eax*4 - 0x1c18c], edx
jmp case.0x41c9ac.4
mov eax, dword [ebp - 0x1b974]
add eax, 1
mov dword [ebp - 0x1b974], eax
jmp case.0x41c9ac.4
mov ecx, dword [ebp - 0x1bd88]
add ecx, 1
mov dword [ebp - 0x1bd88], ecx
push 1
lea edx, [ebp - 0x4004]
push edx
mov eax, dword [ebp - 0x1a8a4]
lea ecx, [ebp + eax - 0x1a898]
push ecx
call fcn.0054c980
add esp, 0xc
jmp 0x41c5c6
jmp 0x41c599
mov edx, dword [ebp - 0x1c19c]
cmp dword [edx + 0x108], 0
jl 0x41ca94
mov eax, dword [ebp - 0x1c19c]
cmp dword [eax + 0x108], 7
jg 0x41ca94
mov ecx, dword [ebp - 0x1bd84]
push ecx
mov edx, dword [ebp - 0x1b97c]
push edx
push str.0x00_t___d____r_n0x20_t___d____r_n
lea eax, [ebp - 0x6268]
push eax
call fcn.0054c45b
add esp, 0x10
jmp 0x41cab6
mov ecx, dword [ebp - 0x1bd84]
push ecx
mov edx, dword [ebp - 0x1b97c]
push edx
push str.0x00_t___d____r_n0x11_t___d____r_n
lea eax, [ebp - 0x6268]
push eax
call fcn.0054c45b
add esp, 0x10
push 0x591030
lea ecx, [ebp - 0x6268]
push ecx
call fcn.0054bed0
add esp, 8
mov dword [ebp - 0x1a8a0], 0
jmp 0x41cae5
mov edx, dword [ebp - 0x1a8a0]
add edx, 1
mov dword [ebp - 0x1a8a0], edx
cmp dword [ebp - 0x1a8a0], 0x100
jae 0x41cb42
mov eax, dword [ebp - 0x1a8a0]
cmp dword [ebp + eax*4 - 0x1c18c], 0
je 0x41cb40
mov ecx, dword [ebp - 0x1a8a0]
mov edx, dword [ebp + ecx*4 - 0x1c18c]
push edx
mov eax, dword [ebp - 0x1a8a0]
push eax
push 0x591034
lea ecx, [ebp - 0x4254]
push ecx
call fcn.0054c45b
add esp, 0x10
lea edx, [ebp - 0x4254]
push edx
lea eax, [ebp - 0x6268]
push eax
call fcn.0054bed0
add esp, 8
jmp 0x41cad6
push 0x59104c
lea ecx, [ebp - 0x6268]
push ecx
call fcn.0054bed0
add esp, 8
mov edx, dword [ebp - 0x1c19c]
cmp dword [edx + 0x108], 0
jl 0x41cb9f
mov eax, dword [ebp - 0x1c19c]
cmp dword [eax + 0x108], 7
jg 0x41cb9f
mov ecx, dword [ebp - 0x1b978]
push ecx
mov edx, dword [ebp - 0x1bd88]
push edx
mov eax, dword [ebp - 0x1b974]
push eax
push str.0x06_t___d___r_n0x40_t___d____r_n0x80_t___d____r_n
lea ecx, [ebp - 0x4254]
push ecx
call fcn.0054c45b
add esp, 0x14
jmp 0x41cbc1
mov edx, dword [ebp - 0x1bd88]
push edx
mov eax, dword [ebp - 0x1b974]
push eax
push str.0x41_t___d___r_n0x44_t___d____r_n
lea ecx, [ebp - 0x4254]
push ecx
call fcn.0054c45b
add esp, 0x10
lea edx, [ebp - 0x4254]
push edx
lea eax, [ebp - 0x6268]
push eax
call fcn.0054bed0
add esp, 8
push 0x2000
push 0
lea ecx, [ebp - 0x6268]
push ecx
call fcn.0054bfb0
add esp, 0xc
mov dword [ebp - 0x1a8a0], 0
jmp 0x41cc08
mov edx, dword [ebp - 0x1a8a0]
add edx, 1
mov dword [ebp - 0x1a8a0], edx
cmp dword [ebp - 0x1a8a0], 0x100
jae 0x41ccf1
mov eax, dword [ebp - 0x1a8a0]
cmp dword [ebp + eax*4 - 0x1bd80], 0
je 0x41ccec
mov ecx, dword [ebp - 0x1a8a0]
mov edx, dword [ebp + ecx*4 - 0x1bd80]
push edx
mov eax, dword [ebp - 0x1a8a0]
push eax
push str.0x_.2X___d__r_n
lea ecx, [ebp - 0x4254]
push ecx
call fcn.0054c45b
add esp, 0x10
lea edx, [ebp - 0x4254]
push edx
lea eax, [ebp - 0x6268]
push eax
call fcn.0054bed0
add esp, 8
cmp dword [ebp - 0x1a8a0], 0x11
jne 0x41ccec
mov dword [ebp - 0x1c198], 0
jmp 0x41cc8f
mov ecx, dword [ebp - 0x1c198]
add ecx, 1
mov dword [ebp - 0x1c198], ecx
cmp dword [ebp - 0x1c198], 0x100
jae 0x41ccec
mov edx, dword [ebp - 0x1c198]
cmp dword [ebp + edx*4 - 0x1c18c], 0
je 0x41ccea
mov eax, dword [ebp - 0x1c198]
mov ecx, dword [ebp + eax*4 - 0x1c18c]
push ecx
mov edx, dword [ebp - 0x1c198]
push edx
push str._____0x_.2X___.3d____r_n
lea eax, [ebp - 0x4254]
push eax
call fcn.0054c45b
add esp, 0x10
lea ecx, [ebp - 0x4254]
push ecx
lea edx, [ebp - 0x6268]
push edx
call fcn.0054bed0
add esp, 8
jmp 0x41cc80
jmp 0x41cbf9
lea eax, [ebp - 0x6468]
push eax
call fcn.0053534c
add esp, 4
push str.UFD_MP_spare.BIN
lea ecx, [ebp - 0x6468]
push ecx
call fcn.0054bed0
add esp, 8
push 0x5910d4
lea edx, [ebp - 0x6468]
push edx
call fcn.0054d3be
add esp, 8
mov dword [ebp - 0x1b970], eax
cmp dword [ebp - 0x1b970], 0
jne 0x41cd3e
xor eax, eax
jmp 0x41cf18
mov eax, dword [ebp - 0x1b970]
push eax
push 0x4000
push 1
lea ecx, [ebp - 0x16470]
push ecx
call fcn.0054d3d1
add esp, 0x10
mov dword [ebp - 0x1b980], eax
mov edx, dword [ebp - 0x1b970]
push edx
call fcn.0054d1f9
add esp, 4
lea eax, [ebp - 0x6468]
push eax
call fcn.0053534c
add esp, 4
push str.UFD_MPeccflag.bin
lea ecx, [ebp - 0x6468]
push ecx
call fcn.0054bed0
add esp, 8
push 0x5910ec
lea edx, [ebp - 0x6468]
push edx
call fcn.0054d3be
add esp, 8
mov dword [ebp - 0x1b970], eax
cmp dword [ebp - 0x1b970], 0
jne 0x41cdbd
xor eax, eax
jmp 0x41cf18
mov eax, dword [ebp - 0x1b970]
push eax
push 0x400
push 1
lea ecx, [ebp - 0x1a898]
push ecx
call fcn.0054d3d1
add esp, 0x10
mov dword [ebp - 0x1b980], eax
mov edx, dword [ebp - 0x1b970]
push edx
call fcn.0054d1f9
add esp, 4
cmp dword [ebp + 8], 0
jne 0x41ceb0
lea eax, [ebp - 0x6468]
push eax
call fcn.0053534c
add esp, 4
push str.UFD_MPSpareSort2.txt
lea ecx, [ebp - 0x6468]
push ecx
call fcn.0054bed0
add esp, 8
push 0x2000
lea edx, [ebp - 0x6268]
push edx
lea eax, [ebp - 0x6468]
push eax
push 0xffa0
lea ecx, [ebp - 0x16470]
push ecx
mov ecx, dword [ebp - 0x1c19c]
call fcn.0041d01d
lea edx, [ebp - 0x6468]
push edx
call fcn.0053534c
add esp, 4
push str.UFD_MPSpareSort.txt
lea eax, [ebp - 0x6468]
push eax
call fcn.0054bed0
add esp, 8
push 0
push pe_nt_image_headers32
push 0x2000
lea ecx, [ebp - 0x6268]
push ecx
lea edx, [ebp - 0x6468]
push edx
push 0xffa0
lea eax, [ebp - 0x16470]
push eax
mov ecx, dword [ebp - 0x1c19c]
call fcn.0041d5b3
push 0
push 0
lea ecx, [ebp - 0x6268]
push ecx
mov ecx, dword [ebp - 0x1c19c]
call fcn.00563067
push 1
mov ecx, dword [ebp - 0x1c19c]
call fcn.005637eb
push 0
push 0x4000
lea edx, [ebp - 0x16470]
push edx
mov ecx, dword [ebp - 0x1c19c]
add ecx, 0x64
call fcn.004266f3
push 1
push 1
push 1
push 1
mov ecx, dword [ebp - 0x1c19c]
add ecx, 0x64
call fcn.00424a33
push 0x105
push 0
push 0
mov ecx, dword [ebp - 0x1c19c]
add ecx, 0x64
call fcn.00411bd0
push 0
mov ecx, dword [ebp - 0x16474]
call fcn.004111d0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4