Function at 0x44d640
Capabilities:
Create process on windows

Disassembly:
enter 0x1830, 1
push ebx
push ecx
push edx
mov dword [ebp - 8], esp
mov edi, 0x4e6ab4
mov esi, 0x4cb0f4
push 0xf
call fcn.00401950
mov edi, 0x4e6ac4
mov esi, 0x4e6ab4
push 0xf
call fcn.00401950
mov edi, 0x4e6ad4
push 0xf
call fcn.00401950
mov edi, 0x4e6ae4
push 0xf
call fcn.00401950
mov byte [ebp - 0xb4], 1
lea eax, [ebp - 0x3fc]
push eax
push 0x30
call fcn.0041a720
mov edi, 0x4e6a78
lea esi, [ebp - 0x3fc]
push 0x30
call fcn.00401950
mov edi, 0x4e6a44
mov esi, 0x4e6a78
push 0x30
call fcn.00401950
push 0x4cb0fa
push 4
push 6
push 0x4d
push 0x13
push 0x4e
push 0
push 0
call fcn.0040cba0
mov eax, dword [0x4d91ad]
mov dword [ebp - 0x300], eax
push 1
push 4
push 6
sub esp, 8
mov esi, 0x4cb123
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4cb129
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d9628
lea edi, [ebp - 0x400]
call fcn.00401b30
mov esi, 0x4cb12f
call fcn.00401af0
mov eax, edi
push eax
push 0x4cb139
push 0x11
mov eax, dword [ebp - 0x300]
call fcn.0041f502
push 2
push 0x4a
push 9
sub esp, 8
mov esi, 0x4cb13f
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4cb145
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d9628
lea edi, [ebp - 0x400]
call fcn.00401b30
mov esi, 0x4cb14b
call fcn.00401af0
mov eax, edi
push eax
push 0x4cb153
push 0x15
mov eax, dword [ebp - 0x300]
call fcn.0041f502
push 3
push 0x4a
push 0xa
sub esp, 8
mov esi, 0x4cb15b
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
sub esp, 8
mov esi, 0x4cb161
mov edi, esp
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x4d9628
lea edi, [ebp - 0x400]
call fcn.00401b30
mov esi, 0x4cb167
call fcn.00401af0
mov eax, edi
push eax
push 0x4cb16f
push 0x15
mov eax, dword [ebp - 0x300]
call fcn.0041f502
mov eax, dword [ebp - 0x300]
mov word [eax + 0x903], 6
push 1
push 5
push 0xb
push dword [0x4cb177]
push 4
push 0x4cb17b
mov eax, dword [ebp - 0x300]
call fcn.0041f962
push 2
push 0x18
push 0xb
push dword [0x4cb187]
push 4
push 0x4cb18b
mov eax, dword [ebp - 0x300]
call fcn.0041f962
push 3
push 5
push 0x10
push dword [0x4cb19a]
push 3
push 0x4cb19e
mov eax, dword [ebp - 0x300]
call fcn.0041f962
mov edi, dword [ebp - 0x300]
mov word [edi + 0x8fd], 0xfffa
push 1
push 0x38
push 8
push 0x14
push 0x10
push 0
mov eax, dword [ebp - 0x300]
call fcn.00436202
mov edi, dword [ebp - 0x300]
mov word [edi + 0x8fd], 0
push 0x4cb19f
call fcn.0040f460
mov word [ebp - 0x2e8], ax
lea eax, [ebp - 0x10]
push eax
push 0x19
call fcn.004039f0
push 1
push 1
push 0
push 0x4cb1a9
push 0
mov eax, dword [ebp - 0x300]
call fcn.00436162
push eax
mov eax, dword [ebp - 0x300]
call fcn.00436112
mov word [ebp - 0x304], 0x31
mov word [ebp - 0x2f4], 0x32
inc word [ebp - 0x2f4]
mov ax, word [ebp - 0x2e8]
push eax
movsx eax, word [ebp - 0x2f4]
push eax
movzx eax, word [0x4e03f2]
push eax
push 0x4df2aa
push 1
push 1
call fcn.0040f390
cmp byte [0x4df37c], 0x41
jne 0x44d922
cmp byte [0x4df37d], 0x42
jne 0x44d922
push dword [ebp - 0x10]
push 0x4df2b2
call fcn.00401a00
push 1
movsx eax, word [ebp - 0x2f4]
push eax
push dword [ebp - 0x10]
push 0
mov eax, dword [ebp - 0x300]
call fcn.00436162
dec word [ebp - 0x304]
jne 0x44d8bc
lea eax, [ebp - 0x2e8]
push eax
call fcn.00408ce0
lea eax, [ebp - 0x10]
push eax
push 0x19
call fcn.004031c0
push 2
push 0x1e
push 0xc
push 0x10
push 0xa
push 0xf
push 0
mov eax, dword [ebp - 0x300]
call fcn.00440202
push 3
push 0x3b
push 0xc
push 0x10
push 0xa
push 0xf
push 0
mov eax, dword [ebp - 0x300]
call fcn.00440202
push 4
push 0x1e
push 0xe
push 0x10
push 0xa
push 0xf
push 0
mov eax, dword [ebp - 0x300]
call fcn.00440202
push 5
push 0x3b
push 0xe
push 0x10
push 0xa
push 0xf
push 0
mov eax, dword [ebp - 0x300]
call fcn.00440202
push 1
push 6
push 0xc
push 0x4cb1af
push 0
mov eax, dword [ebp - 0x300]
call fcn.00428132
push 2
push 6
push 0xd
push 0x4cb1ba
push 0
mov eax, dword [ebp - 0x300]
call fcn.00428132
push 3
push 6
push 0xe
push 0x4cb1c9
push 0
mov eax, dword [ebp - 0x300]
call fcn.00428132
push 0x13
push 8
push 0x4cb1d8
call fcn.004086e0
push 0x2e
push 8
push 0x4cb1df
call fcn.004086e0
push 5
push 9
push 0x4cb1e9
call fcn.004086e0
push 8
push 0xa
push 0x4cb1fe
call fcn.004086e0
push 0x19
push 0xc
push 0x4cb210
call fcn.004086e0
push 0x35
push 0xc
push 0x4cb215
call fcn.004086e0
push 0x19
push 0xe
push 0x4cb21b
call fcn.004086e0
push 0x36
push 0xe
push 0x4cb220
call fcn.004086e0
push 0xc
push 0x11
push 0x4cb225
call fcn.004086e0
push 7
push 0x12
push 0x4cb233
call fcn.004086e0
mov eax, dword [ebp - 0x300]
call fcn.0041c112
push 1
push 0x1a
push 9
push 0x30
push 1
call fcn.0041f130
push 2
push 0x1a
push 0xa
push 0x30
push 1
call fcn.0041f130
mov eax, dword [ebp - 0x300]
call fcn.0040b572
push 0x1a
push 8
push 0xb
call fcn.00408810
push 0x1a
push 0x11
push 0x30
call fcn.00408810
push 0x1a
push 0x12
push 6
call fcn.00408810
mov eax, dword [ebp - 0x300]
call fcn.00409192
mov al, byte [ebp - 0xb4]
push eax
push 1
mov eax, dword [ebp - 0x300]
call fcn.004278b2
lea eax, [ebp - 0x404]
push eax
push 0xf
call fcn.0041a720
mov esi, 0x4e6ab4
lea edi, [ebp - 0x404]
call fcn.00414a20
test al, al
je 0x44db1e
mov edi, esi
mov esi, 0x4cb246
push 0xf
call fcn.00401950
lea eax, [ebp - 0x504]
push eax
push 0xf
call fcn.0041a720
mov esi, 0x4e6ac4
lea edi, [ebp - 0x504]
call fcn.00414a20
test al, al
je 0x44db4e
mov edi, esi
mov esi, 0x4cb24c
push 0xf
call fcn.00401950
lea eax, [ebp - 0x604]
push eax
push 0xf
call fcn.0041a720
mov esi, 0x4e6ad4
lea edi, [ebp - 0x604]
call fcn.00414a20
test al, al
je 0x44db7e
mov edi, esi
mov esi, 0x4cb252
push 0xf
call fcn.00401950
lea eax, [ebp - 0x704]
push eax
push 0xf
call fcn.0041a720
mov esi, 0x4e6ae4
lea edi, [ebp - 0x704]
call fcn.00414a20
test al, al
je 0x44dbae
mov edi, esi
mov esi, 0x4cb258
push 0xf
call fcn.00401950
push 0x4e6ab4
push 2
call fcn.00440040
push 0x4e6ac4
push 3
push 1
call fcn.0043fea0
push 0x4e6ad4
push 4
push 0
call fcn.0043f080
push 0x4e6ae4
push 5
push 0
call fcn.0043e880
lea eax, [ebp - 0x804]
push eax
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x81c]
push eax
call fcn.00419bd0
lea eax, [ebp - 0x81c]
push eax
call fcn.0041a010
lea eax, [ebp - 0x810]
push eax
push 5
push 4
call fcn.00401cd0
lea esi, [ebp - 0x804]
mov edi, 0x4cb25e
call fcn.00430c60
test al, al
je 0x44dc45
push 0x1a
push 8
push 0x4cb263
call fcn.00404240
mov byte [ebp - 0xb8], 2
jmp 0x44dc5a
push 0x1a
push 8
push 0x4cb26f
call fcn.00404240
mov byte [ebp - 0xb8], 1
mov word [ebp - 0x2f4], 1
mov eax, dword [0x4d91ad]
mov dword [ebp - 0x820], eax
push 2
cmp word [ebp - 0x2f4], 1
sete al
push eax
mov eax, dword [ebp - 0x820]
call fcn.0041ec52
push 3
cmp word [ebp - 0x2f4], 2
sete al
push eax
mov eax, dword [ebp - 0x820]
call fcn.0041ec52
mov byte [ebp - 0x48], 1
movsx eax, word [ebp - 0x2f4]
cmp eax, 1
jne 0x44dcc4
push 0x1a
push 9
push 0x30
push 1
call fcn.0041aee0
mov byte [ebp - 0xc], al
jmp 0x44dcdb
cmp eax, 2
jne 0x44dcdb
push 0x1a
push 0xa
push 0x30
push 1
call fcn.0041aee0
mov byte [ebp - 0xc], al
mov al, byte [ebp - 0xc]
cmp al, 0x21
jne 0x44dd3b
movsx eax, word [0x4d91bd]
movzx ebx, byte [ebp - 0xb4]
test ebx, ebx
jl 0x44dcf6
cmp eax, ebx
je 0x44dd36
mov eax, dword [0x4d91ad]
mov dword [ebp - 0x824], eax
mov bl, byte [ebp - 0xb4]
push ebx
push 0
mov eax, dword [ebp - 0x824]
call fcn.004278b2
mov al, byte [0x4d91bd]
mov byte [ebp - 0xb4], al
mov al, byte [ebp - 0xb4]
push eax
push 1
mov eax, dword [ebp - 0x824]
call fcn.004278b2
jmp 0x44e3f4
cmp al, 0x23
jne 0x44e1c6
mov edi, dword [0x4d91ad]
mov dword [ebp - 0x828], edi
movsx eax, word [0x4d91c3]
cmp eax, 2
jne 0x44df10
lea ebx, [ebp - 0x928]
push ebx
push 2
push 0xf
mov eax, dword [ebp - 0x828]
call fcn.0043de12
mov edi, 0x4e6ab4
lea esi, [ebp - 0x928]
push 0xf
call fcn.00401950
push 2
push edi
mov eax, dword [ebp - 0x828]
call fcn.0043ef82
cmp ax, 0
jge 0x44dde2
lea eax, [ebp - 0x10]
push eax
push 0x10
call fcn.004039f0
push dword [ebp - 0x10]
push 0x4e6ab4
call fcn.00401a00
push 2
push 2
push 0x63
push dword [ebp - 0x10]
push 0
mov eax, dword [ebp - 0x828]
call fcn.00436162
push eax
mov eax, dword [ebp - 0x828]
call fcn.00436112
lea ebx, [ebp - 0x10]
push ebx
push 0x10
call fcn.004031c0
push 3
mov eax, dword [ebp - 0x828]
call fcn.0043fe52
push 4
mov eax, dword [ebp - 0x828]
call fcn.0043fe52
push 5
mov eax, dword [ebp - 0x828]
call fcn.0043fe52
push 2
mov eax, dword [ebp - 0x828]
call fcn.00431182
cmp eax, 0
jne 0x44de3a
mov edi, 0x4e6ac4
mov esi, 0x4cb27b
push 0xf
call fcn.00401950
push edi
push 3
push 1
call fcn.0043fea0
jmp 0x44de4f
cmp eax, 1
jne 0x44de4f
push 0x4e6ac4
push 3
push 1
call fcn.0043fea0
push 3
mov eax, dword [ebp - 0x828]
call fcn.00431182
mov word [ebp - 0x2f8], ax
movsx ebx, ax
mov eax, ebx
cmp eax, 0
jne 0x44dea7
mov edi, 0x4e6ad4
mov esi, 0x4cb281
push 0xf
call fcn.00401950
push edi
push 4
push 0
call fcn.0043f080
mov edi, 0x4e6ae4
mov esi, 0x4cb287
push 0xf
call fcn.00401950
push edi
push 5
push 0
call fcn.0043e880
jmp 0x44df0b
cmp eax, 0x23
je 0x44deb5
cmp eax, 0x22
jne 0x44df0b
push 0x4e6ad4
push 4
mov al, byte [ebp - 0x2f8]
push eax
call fcn.0043f080
push 0x4e6ae4
push 5
mov al, byte [ebp - 0x2f8]
push eax
call fcn.0043e880
push 5
push 0
mov eax, dword [ebp - 0x828]
call fcn.0043f022
push 0x4e6ae4
push 5
mov al, byte [ebp - 0x2f8]
push eax
push 4
mov eax, dword [ebp - 0x828]
call fcn.00431182
push eax
call fcn.0043deb0
jmp 0x44e1c1
cmp eax, 3
jne 0x44e07e
lea ebx, [ebp - 0x928]
push ebx
push 3
push 0xf
mov eax, dword [ebp - 0x828]
call fcn.0043de12
mov edi, 0x4e6ac4
lea esi, [ebp - 0x928]
push 0xf
call fcn.00401950
push 3
push edi
mov eax, dword [ebp - 0x828]
call fcn.0043ef82
cmp ax, 0
jge 0x44dfa3
lea eax, [ebp - 0x10]
push eax
push 0x10
call fcn.004039f0
push dword [ebp - 0x10]
push 0x4e6ac4
call fcn.00401a00
push 3
push 0x63
push dword [ebp - 0x10]
push 0
mov eax, dword [ebp - 0x828]
call fcn.00436162
mov word [ebp - 0x2f8], ax
push 3
push eax
mov eax, dword [ebp - 0x828]
call fcn.00436112
lea ebx, [ebp - 0x10]
push ebx
push 0x10
call fcn.004031c0
push 4
mov eax, dword [ebp - 0x828]
call fcn.0043fe52
push 5
mov eax, dword [ebp - 0x828]
call fcn.0043fe52
push 3
mov eax, dword [ebp - 0x828]
call fcn.00431182
mov word [ebp - 0x2f8], ax
movsx ebx, ax
mov eax, ebx
cmp eax, 0
jne 0x44e015
mov edi, 0x4e6ad4
mov esi, 0x4cb28d
push 0xf
call fcn.00401950
push edi
push 4
push 0
call fcn.0043f080
mov edi, 0x4e6ae4
mov esi, 0x4cb293
push 0xf
call fcn.00401950
push edi
push 5
push 0
call fcn.0043e880
jmp 0x44e079
cmp eax, 0x23
je 0x44e023
cmp eax, 0x22
jne 0x44e079
push 0x4e6ad4
push 4
mov al, byte [ebp - 0x2f8]
push eax
call fcn.0043f080
push 0x4e6ae4
push 5
mov al, byte [ebp - 0x2f8]
push eax
call fcn.0043e880
push 5
push 0
mov eax, dword [ebp - 0x828]
call fcn.0043f022
push 0x4e6ae4
push 5
mov al, byte [ebp - 0x2f8]
push eax
push 4
mov eax, dword [ebp - 0x828]
call fcn.00431182
push eax
call fcn.0043deb0
jmp 0x44e1c1
cmp eax, 4
jne 0x44e192
lea ebx, [ebp - 0x928]
push ebx
push 4
push 0xf
mov eax, dword [ebp - 0x828]
call fcn.0043de12
mov edi, 0x4e6ad4
lea esi, [ebp - 0x928]
push 0xf
call fcn.00401950
mov esi, edi
mov edi, 0x4cb299
call fcn.004147b0
test al, al
je 0x44e124
push 4
push esi
mov eax, dword [ebp - 0x828]
call fcn.0043ef82
cmp ax, 0
jge 0x44e124
lea eax, [ebp - 0x10]
push eax
push 0x10
call fcn.004039f0
push dword [ebp - 0x10]
push 0x4e6ad4
call fcn.00401a00
push 4
push 0xfa
push dword [ebp - 0x10]
push 0
mov eax, dword [ebp - 0x828]
call fcn.00436162
mov word [ebp - 0x2f8], ax
push 4
push eax
mov eax, dword [ebp - 0x828]
call fcn.00436112
lea ebx, [ebp - 0x10]
push ebx
push 0x10
call fcn.004031c0
push 4
mov eax, dword [ebp - 0x828]
call fcn.00431182
mov word [ebp - 0x2f8], ax
movsx ebx, ax
mov eax, ebx
cmp eax, 0
jne 0x44e161
mov edi, 0x4e6ae4
mov esi, 0x4cb29a
push 0xf
call fcn.00401950
push edi
push 5
push 0
call fcn.0043e880
jmp 0x44e190
cmp eax, 0x23
je 0x44e16f
cmp eax, 0x22
jne 0x44e190
push 0x4e6ae4
push 5
mov al, byte [ebp - 0x2f8]
push eax
push 4
mov eax, dword [ebp - 0x828]
call fcn.00431182
push eax
call fcn.0043deb0
jmp 0x44e1c1
cmp eax, 5
jne 0x44e1c1
lea ebx, [ebp - 0x928]
push ebx
push 5
push 0xf
mov eax, dword [ebp - 0x828]
call fcn.0043de12
mov edi, 0x4e6ae4
lea esi, [ebp - 0x928]
push 0xf
call fcn.00401950
jmp 0x44e3f4
cmp al, 0x23
jne 0x44e1cf
jmp 0x44e3f4
cmp al, 0x2b
jne 0x44e1d8
jmp 0x44e3f4
push 0x4cb2a0
call fcn.0040f460
mov word [ebp - 0x2e8], ax
push 0x4cb2aa
call fcn.0040f460
mov word [ebp - 0x2f0], ax
lea ebx, [ebp - 0xc]
push ebx
mov ax, word [ebp - 0x2e8]
push eax
mov ax, word [ebp - 0x2f0]
push eax
push 0x1a
movsx eax, word [ebp - 0x2f4]
add eax, 8
push eax
push 0
push 0x4cb2b4
call fcn.00431420
mov dword [ebp - 0x2c8], eax
lea ebx, [ebp - 0x2f0]
push ebx
call fcn.00408ce0
cmp dword [ebp - 0x2c8], 0
jle 0x44e3cc
mov ax, word [ebp - 0x2e8]
push eax
push dword [ebp - 0x2c8]
movzx ebx, word [0x4e03f4]
push ebx
push 0x4dfae6
push 1
push 1
call fcn.0040f390
cmp byte [0x4dfd32], 0x46
je 0x44e347
push 0x1a
movsx eax, word [ebp - 0x2f4]
add eax, 8
push eax
lea eax, [ebp - 0x928]
push eax
lea ebx, [ebp - 0xe28]
push ebx
push 0x4dff39
call fcn.00419ee0
lea esi, [ebp - 0xe28]
lea edi, [ebp - 0xd28]
call fcn.00401b30
mov esi, 0x4cb2bb
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xc28]
call fcn.00401b30
lea eax, [ebp - 0xf28]
push eax
push 0x4dff29
call fcn.00419ee0
lea esi, [ebp - 0xf28]
lea edi, [ebp - 0xc28]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xb28]
call fcn.00401b30
mov esi, 0x4cb2bd
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xa28]
call fcn.00401b30
lea eax, [ebp - 0x1028]
push eax
push 0x4dff49
call fcn.00419ee0
lea esi, [ebp - 0x1028]
lea edi, [ebp - 0xa28]
call fcn.00401af0
mov eax, edi
push eax
push 0x30
call fcn.0041a7a0
lea ebx, [ebp - 0x928]
push ebx
call fcn.00404240
jmp 0x44e3cc
push 0x1a
movsx eax, word [ebp - 0x2f4]
add eax, 8
push eax
lea eax, [ebp - 0x928]
push eax
lea ebx, [ebp - 0xc28]
push ebx
push 0x4dfbd3
call fcn.00419ee0
lea esi, [ebp - 0xc28]
lea edi, [ebp - 0xb28]
call fcn.00401b30
mov esi, 0x4cb2bf
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xa28]
call fcn.00401b30
lea eax, [ebp - 0xd28]
push eax
push 0x4dfbf7
call fcn.00419ee0
lea esi, [ebp - 0xd28]
lea edi, [ebp - 0xa28]
call fcn.00401af0
mov eax, edi
push eax
push 0x30
call fcn.0041a7a0
lea ebx, [ebp - 0x928]
push ebx
call fcn.00404240
lea eax, [ebp - 0x2e8]
push eax
call fcn.00408ce0
cmp byte [ebp - 0xc], 0x11
jne 0x44e3e0
jmp 0x44e3f4
lea eax, [ebp - 0x2f4]
push eax
mov bl, byte [ebp - 0xc]
push ebx
push 1
push 2
call fcn.0041a550
mov al, byte [ebp - 0x48]
test al, al
je 0x44dc63
mov esi, 0x4cb2c1
movzx eax, byte [ebp - 0xc]
push 0x1f0010
call fcn.0040148e
test al, al
je 0x44dc63
cmp byte [ebp - 0xc], 0x2b
je 0x44f680
mov eax, dword [0x4d91ad]
mov dword [ebp - 0x82c], eax
push 1
call fcn.00431182
mov word [ebp - 0x2f8], ax
lea ebx, [ebp - 0x92c]
push ebx
push 0x1a
push 9
push 0x30
call fcn.0041a470
mov edi, 0x4e6a44
lea esi, [ebp - 0x92c]
push 0x30
call fcn.00401950
mov eax, esi
push eax
push 0x1a
push 0xa
push 0x30
call fcn.0041a470
mov edi, 0x4e6a78
lea esi, [ebp - 0x92c]
push 0x30
call fcn.00401950
mov eax, 0
mov dword [ebp - 0x2c0], eax
push 2
mov eax, dword [ebp - 0x82c]
call fcn.00431182
test eax, eax
je 0x44e4c7
lea eax, [ebp - 0x92c]
push eax
push 2
push 0xf
mov eax, dword [ebp - 0x82c]
call fcn.0043dd02
mov edi, 0x4e6ab4
lea esi, [ebp - 0x92c]
push 0xf
call fcn.00401950
jmp 0x44e4e7
lea eax, [ebp - 0x92c]
push eax
push 0xf
call fcn.0041a720
mov edi, 0x4e6ab4
lea esi, [ebp - 0x92c]
push 0xf
call fcn.00401950
push 3
mov eax, dword [ebp - 0x82c]
call fcn.00431182
test eax, eax
je 0x44e522
lea eax, [ebp - 0x92c]
push eax
push 3
push 0xf
mov eax, dword [ebp - 0x82c]
call fcn.0043dd02
mov edi, 0x4e6ac4
lea esi, [ebp - 0x92c]
push 0xf
call fcn.00401950
jmp 0x44e542
lea eax, [ebp - 0x92c]
push eax
push 0xf
call fcn.0041a720
mov edi, 0x4e6ac4
lea esi, [ebp - 0x92c]
push 0xf
call fcn.00401950
push 4
mov eax, dword [ebp - 0x82c]
call fcn.00431182
test eax, eax
je 0x44e57d
lea eax, [ebp - 0x92c]
push eax
push 4
push 0xf
mov eax, dword [ebp - 0x82c]
call fcn.0043dd02
mov edi, 0x4e6ad4
lea esi, [ebp - 0x92c]
push 0xf
call fcn.00401950
jmp 0x44e59d
lea eax, [ebp - 0x92c]
push eax
push 0xf
call fcn.0041a720
mov edi, 0x4e6ad4
lea esi, [ebp - 0x92c]
push 0xf
call fcn.00401950
push 5
mov eax, dword [ebp - 0x82c]
call fcn.00431182
test eax, eax
je 0x44e5d8
lea eax, [ebp - 0x92c]
push eax
push 5
push 0xf
mov eax, dword [ebp - 0x82c]
call fcn.0043dd02
mov edi, 0x4e6ae4
lea esi, [ebp - 0x92c]
push 0xf
call fcn.00401950
jmp 0x44e5f8
lea eax, [ebp - 0x92c]
push eax
push 0xf
call fcn.0041a720
mov edi, 0x4e6ae4
lea esi, [ebp - 0x92c]
push 0xf
call fcn.00401950
movzx eax, byte [ebp - 0xb4]
cmp eax, 1
jne 0x44e619
push 0x4cb2c5
call fcn.0040f460
mov word [ebp - 0x2f0], ax
jmp 0x44e64b
cmp eax, 2
jne 0x44e633
push 0x4cb2cf
call fcn.0040f460
mov word [ebp - 0x2f0], ax
jmp 0x44e64b
cmp eax, 3
jne 0x44e64b
push 0x4cb2d9
call fcn.0040f460
mov word [ebp - 0x2f0], ax
push 0x4cb2e3
call fcn.0040f460
mov word [ebp - 0x2e8], ax
push 0x4cb2ed
call fcn.0040f460
mov word [ebp - 0x2ec], ax
mov bx, word [ebp - 0x2f0]
push ebx
call fcn.0042fed0
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0
jle 0x44f65c
mov ax, word [ebp - 0x2f0]
push eax
lea ebx, [ebp - 0x2c4]
push ebx
lea eax, [ebp - 0x44]
push eax
call fcn.0042e5d0
mov dword [ebp - 0x2c8], eax
test eax, eax
jle 0x44f657
mov bx, word [ebp - 0x2e8]
push ebx
push dword [ebp - 0x2c8]
movzx eax, word [0x4e03f6]
push eax
push 0x4df382
push 0
push 1
call fcn.0040f390
cmp byte [0x4df54b], 0x42
jne 0x44e743
cmp byte [ebp - 0xb4], 3
jne 0x44e716
cmp byte [ebp - 0x43], 0x42
jne 0x44e70c
movzx eax, byte [ebp - 0x42]
sub eax, 0x30
movzx ebx, byte [ebp - 0xb8]
test ebx, ebx
jl 0x44e703
cmp eax, ebx
jne 0x44e70c
mov eax, 1
jmp 0x44e711
mov eax, 0
mov byte [ebp - 0x48], al
jmp 0x44e741
cmp byte [ebp - 0x2f], 0x42
jne 0x44e739
movzx eax, byte [ebp - 0x2e]
sub eax, 0x30
movzx ebx, byte [ebp - 0xb8]
test ebx, ebx
jl 0x44e730
cmp eax, ebx
jne 0x44e739
mov eax, 1
jmp 0x44e73e
mov eax, 0
mov byte [ebp - 0x48], al
jmp 0x44e747
mov byte [ebp - 0x48], 0
mov al, byte [ebp - 0x48]
test al, al
je 0x44f63c
mov bl, byte [0x4df519]
test bl, bl
jne 0x44f63c
push 0x4e6ab4
push 0x4df44d
push 0xf
push 0xf
call fcn.00430d60
test al, al
je 0x44f63c
push 0x4e6ac4
push 0x4df42d
push 0xf
push 0xf
call fcn.00430d60
test al, al
je 0x44f63c
push 0x4e6ad4
push 0x4df40d
push 0xf
push 0xf
call fcn.00430d60
test al, al
je 0x44f63c
push 0x4e6ae4
push 0x4df41d
push 0xf
push 0xf
call fcn.00430d60
test al, al
je 0x44f63c
cmp word [ebp - 0x2f8], 0
je 0x44e7ec
movsx eax, word [ebp - 0x2f8]
movzx ebx, word [0x4df384]
test ebx, ebx
jl 0x44e7ea
cmp eax, ebx
jne 0x44e7f3
mov eax, 1
jmp 0x44e7f8
mov eax, 0
mov byte [ebp - 0x48], al
test al, al
je 0x44e9af
mov bx, word [ebp - 0x2ec]
push ebx
push dword [0x4df53f]
movzx eax, word [0x4e03f4]
push eax
push 0x4dfae6
push 1
push 1
call fcn.0040f390
lea eax, [ebp - 0x92c]
push eax
push 0x30
call fcn.0041a720
mov esi, 0x4e6a44
lea edi, [ebp - 0x92c]
call fcn.004147b0
test al, al
je 0x44e9af
cmp byte [0x4dfd32], 0x46
je 0x44e91e
lea eax, [ebp - 0xa2c]
push eax
lea ebx, [ebp - 0xf2c]
push ebx
push 0x4dff39
call fcn.00419ee0
lea esi, [ebp - 0xf2c]
lea edi, [ebp - 0xe2c]
call fcn.00401b30
mov esi, 0x4cb2f7
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xd2c]
call fcn.00401b30
lea eax, [ebp - 0x102c]
push eax
push 0x4dff29
call fcn.00419ee0
lea esi, [ebp - 0x102c]
lea edi, [ebp - 0xd2c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xc2c]
call fcn.00401b30
mov esi, 0x4cb2f9
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xb2c]
call fcn.00401b30
lea eax, [ebp - 0x112c]
push eax
push 0x4dff49
call fcn.00419ee0
lea esi, [ebp - 0x112c]
lea edi, [ebp - 0xb2c]
call fcn.00401af0
mov eax, edi
push eax
push 0x30
call fcn.0041a7a0
lea edi, [ebp - 0x7c]
lea esi, [ebp - 0xa2c]
push 0x30
call fcn.00401950
jmp 0x44e99a
lea eax, [ebp - 0xa2c]
push eax
lea ebx, [ebp - 0xd2c]
push ebx
push 0x4dfbd3
call fcn.00419ee0
lea esi, [ebp - 0xd2c]
lea edi, [ebp - 0xc2c]
call fcn.00401b30
mov esi, 0x4cb2fb
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xb2c]
call fcn.00401b30
lea eax, [ebp - 0xe2c]
push eax
push 0x4dfbf7
call fcn.00419ee0
lea esi, [ebp - 0xe2c]
lea edi, [ebp - 0xb2c]
call fcn.00401af0
mov eax, edi
push eax
push 0x30
call fcn.0041a7a0
lea edi, [ebp - 0x7c]
lea esi, [ebp - 0xa2c]
push 0x30
call fcn.00401950
push 0x4e6a44
lea eax, [ebp - 0x7c]
push eax
push 0x30
push 0x30
call fcn.00430d60
mov byte [ebp - 0x48], al
mov al, byte [ebp - 0x48]
test al, al
je 0x44f058
mov esi, 0x4dfae6
mov edi, 0x4dff6a
mov ecx, 0x120
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov ax, word [ebp - 0x2ec]
push eax
push dword [0x4df53b]
movzx ebx, word [0x4e03f4]
push ebx
push 0x4dfae6
push 1
push 1
call fcn.0040f390
lea ecx, [ebp - 0xa2c]
push ecx
push 0x30
call fcn.0041a720
mov esi, 0x4e6a78
lea edi, [ebp - 0xa2c]
call fcn.004147b0
test al, al
je 0x44eb7a
cmp byte [0x4dfd32], 0x46
je 0x44eae9
lea eax, [ebp - 0xb2c]
push eax
lea ebx, [ebp - 0x102c]
push ebx
push 0x4dff39
call fcn.00419ee0
lea esi, [ebp - 0x102c]
lea edi, [ebp - 0xf2c]
call fcn.00401b30
mov esi, 0x4cb2fd
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xe2c]
call fcn.00401b30
lea eax, [ebp - 0x112c]
push eax
push 0x4dff29
call fcn.00419ee0
lea esi, [ebp - 0x112c]
lea edi, [ebp - 0xe2c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xd2c]
call fcn.00401b30
mov esi, 0x4cb2ff
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xc2c]
call fcn.00401b30
lea eax, [ebp - 0x122c]
push eax
push 0x4dff49
call fcn.00419ee0
lea esi, [ebp - 0x122c]
lea edi, [ebp - 0xc2c]
call fcn.00401af0
mov eax, edi
push eax
push 0x30
call fcn.0041a7a0
lea edi, [ebp - 0x7c]
lea esi, [ebp - 0xb2c]
push 0x30
call fcn.00401950
jmp 0x44eb65
lea eax, [ebp - 0xb2c]
push eax
lea ebx, [ebp - 0xe2c]
push ebx
push 0x4dfbd3
call fcn.00419ee0
lea esi, [ebp - 0xe2c]
lea edi, [ebp - 0xd2c]
call fcn.00401b30
mov esi, 0x4cb301
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xc2c]
call fcn.00401b30
lea eax, [ebp - 0xf2c]
push eax
push 0x4dfbf7
call fcn.00419ee0
lea esi, [ebp - 0xf2c]
lea edi, [ebp - 0xc2c]
call fcn.00401af0
mov eax, edi
push eax
push 0x30
call fcn.0041a7a0
lea edi, [ebp - 0x7c]
lea esi, [ebp - 0xb2c]
push 0x30
call fcn.00401950
push 0x4e6a78
lea eax, [ebp - 0x7c]
push eax
push 0x30
push 0x30
call fcn.00430d60
mov byte [ebp - 0x48], al
mov al, byte [ebp - 0x48]
test al, al
je 0x44ebda
lea ebx, [ebp - 0xb2c]
push ebx
push 0x4dfee4
call fcn.00419ee0
lea esi, [ebp - 0xb2c]
mov edi, 0x4cb303
call fcn.004147b0
test al, al
jne 0x44ebcb
lea eax, [ebp - 0xc2c]
push eax
push 0x4dfef6
call fcn.00419ee0
lea esi, [ebp - 0xc2c]
mov edi, 0x4cb304
call fcn.004147b0
test al, al
je 0x44ebd2
mov eax, 1
jmp 0x44ebd7
mov eax, 0
mov byte [ebp - 0x48], al
mov al, byte [ebp - 0x48]
test al, al
je 0x44f058
cmp byte [0x4e01b6], 0x46
je 0x44ef29
cmp byte [0x4e01b6], 0x45
jne 0x44ed76
lea ebx, [ebp - 0xb2c]
push ebx
push 0x4e03cd
call fcn.00419ee0
lea esi, [ebp - 0xb2c]
mov edi, 0x4cb305
call fcn.004147b0
test al, al
je 0x44ed17
mov esi, 0x4cb306
lea edi, [ebp - 0xd2c]
call fcn.00401b30
lea eax, [ebp - 0xe2c]
push eax
push 0x4e03cd
call fcn.00419ee0
lea esi, [ebp - 0xe2c]
lea edi, [ebp - 0xd2c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xc2c]
call fcn.00401b30
mov esi, 0x4cb30d
call fcn.00401af0
lea edi, [ebp - 0x2bc]
lea esi, [ebp - 0xc2c]
call fcn.00401940
mov eax, esi
push eax
push 0x4e03ad
call fcn.00419ee0
lea esi, [ebp - 0xc2c]
mov edi, 0x4cb30f
call fcn.004147b0
test al, al
je 0x44ed15
lea esi, [ebp - 0x2bc]
lea edi, [ebp - 0xf2c]
call fcn.00401b30
mov esi, 0x4cb310
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xe2c]
call fcn.00401b30
lea eax, [ebp - 0x102c]
push eax
push 0x4e03ad
call fcn.00419ee0
lea esi, [ebp - 0x102c]
lea edi, [ebp - 0xe2c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xd2c]
call fcn.00401b30
mov esi, 0x4cb313
call fcn.00401af0
lea edi, [ebp - 0x2bc]
lea esi, [ebp - 0xd2c]
call fcn.00401940
jmp 0x44ed71
mov esi, 0x4cb315
lea edi, [ebp - 0xe2c]
call fcn.00401b30
lea eax, [ebp - 0xf2c]
push eax
push 0x4e03ad
call fcn.00419ee0
lea esi, [ebp - 0xf2c]
lea edi, [ebp - 0xe2c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xd2c]
call fcn.00401b30
mov esi, 0x4cb31c
call fcn.00401af0
lea edi, [ebp - 0x2bc]
lea esi, [ebp - 0xd2c]
call fcn.00401940
jmp 0x44ee63
mov esi, 0x4cb31e
lea edi, [ebp - 0xe2c]
call fcn.00401b30
lea ebx, [ebp - 0xf2c]
push ebx
push 0x4e03ad
call fcn.00419ee0
lea esi, [ebp - 0xf2c]
lea edi, [ebp - 0xe2c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xd2c]
call fcn.00401b30
mov esi, 0x4cb325
call fcn.00401af0
lea edi, [ebp - 0x2bc]
lea esi, [ebp - 0xd2c]
call fcn.00401940
mov eax, esi
push eax
push 0x4e03cd
call fcn.00419ee0
lea esi, [ebp - 0xd2c]
mov edi, 0x4cb327
call fcn.004147b0
test al, al
je 0x44ee63
lea esi, [ebp - 0x2bc]
lea edi, [ebp - 0x102c]
call fcn.00401b30
mov esi, 0x4cb328
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xf2c]
call fcn.00401b30
lea eax, [ebp - 0x112c]
push eax
push 0x4e03cd
call fcn.00419ee0
lea esi, [ebp - 0x112c]
lea edi, [ebp - 0xf2c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xe2c]
call fcn.00401b30
mov esi, 0x4cb32b
call fcn.00401af0
lea edi, [ebp - 0x2bc]
lea esi, [ebp - 0xe2c]
call fcn.00401940
cmp byte [ebp - 0xb8], 1
jne 0x44eec9
lea esi, [ebp - 0x2bc]
lea edi, [ebp - 0xf2c]
call fcn.00401b30
lea eax, [ebp - 0x102c]
push eax
push 0x4e03bd
call fcn.00419ee0
lea esi, [ebp - 0x102c]
lea edi, [ebp - 0xf2c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xe2c]
call fcn.00401b30
mov esi, 0x4cb32d
call fcn.00401af0
lea edi, [ebp - 0x2bc]
lea esi, [ebp - 0xe2c]
call fcn.00401940
jmp 0x44ef24
lea esi, [ebp - 0x2bc]
lea edi, [ebp - 0xf2c]
call fcn.00401b30
lea eax, [ebp - 0x102c]
push eax
push 0x4e03bd
call fcn.00419ee0
lea esi, [ebp - 0x102c]
lea edi, [ebp - 0xf2c]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xe2c]
call fcn.00401b30
mov esi, 0x4cb3a7
call fcn.00401af0
lea edi, [ebp - 0x2bc]
lea esi, [ebp - 0xe2c]
call fcn.00401940
jmp 0x44f058
lea ebx, [ebp - 0xe2c]
push ebx
push 0x4e0057
call fcn.00419ee0
lea edi, [ebp - 0x2bc]
lea esi, [ebp - 0xe2c]
call fcn.00401940
mov eax, esi
push eax
push 0x4e007b
call fcn.00419ee0
lea esi, [ebp - 0xe2c]
mov edi, 0x4cb428
call fcn.004147b0
test al, al
je 0x44efc7
lea esi, [ebp - 0x2bc]
lea edi, [ebp - 0x102c]
call fcn.00401b30
mov esi, 0x4cb429
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xf2c]
call fcn.00401b30
lea eax, [ebp - 0x112c]
push eax
push 0x4e007b
call fcn.00419ee0
lea esi, [ebp - 0x112c]
lea edi, [ebp - 0xf2c]
call fcn.00401af0
lea edi, [ebp - 0x2bc]
lea esi, [ebp - 0xf2c]
call fcn.00401940
cmp byte [ebp - 0xb8], 1
jne 0x44f015
lea eax, [ebp - 0x102c]
push eax
lea ebx, [ebp - 0x2bc]
push ebx
push 1
push 0x21
call fcn.00401cd0
lea esi, [ebp - 0x102c]
lea edi, [ebp - 0xf2c]
call fcn.00401b30
mov esi, 0x4cb42b
call fcn.00401af0
lea edi, [ebp - 0x2bc]
lea esi, [ebp - 0xf2c]
call fcn.00401940
jmp 0x44f058
lea eax, [ebp - 0x102c]
push eax
lea ebx, [ebp - 0x2bc]
push ebx
push 1
push 0x21
call fcn.00401cd0
lea esi, [ebp - 0x102c]
lea edi, [ebp - 0xf2c]
call fcn.00401b30
mov esi, 0x4cb4a5
call fcn.00401af0
lea edi, [ebp - 0x2bc]
lea esi, [ebp - 0xf2c]
call fcn.00401940
mov al, byte [ebp - 0x48]
test al, al
je 0x44f63c
inc dword [ebp - 0x2c0]
push 0x1a
push 0x11
push 0x4df4e4
call fcn.00404240
push 0x1a
push 0x12
fild dword [ebp - 0x2c0]
sub esp, 8
fstp qword [esp]
wait
push 6
push 0
call fcn.0041f0e0
lea edi, [ebp - 0x1bc]
mov esi, 0x4cb526
call fcn.00401940
lea eax, [ebp - 0xf2c]
push eax
push 0x4dfee4
call fcn.00419ee0
lea esi, [ebp - 0xf2c]
mov edi, 0x4cb527
call fcn.004147b0
test al, al
je 0x44f10a
lea esi, [ebp - 0x1bc]
lea edi, [ebp - 0x102c]
call fcn.00401b30
lea eax, [ebp - 0x112c]
push eax
push 0x4dfee4
call fcn.00419ee0
lea esi, [ebp - 0x112c]
lea edi, [ebp - 0x102c]
call fcn.00401af0
lea edi, [ebp - 0x1bc]
lea esi, [ebp - 0x102c]
call fcn.00401940
lea eax, [ebp - 0x102c]
push eax
push 0x4dfef6
call fcn.00419ee0
lea esi, [ebp - 0x102c]
mov edi, 0x4cb528
call fcn.004147b0
test al, al
je 0x44f1ad
lea esi, [ebp - 0x1bc]
mov edi, 0x4cb529
call fcn.004147b0
test al, al
je 0x44f169
lea edi, [ebp - 0x112c]
call fcn.00401b30
mov esi, 0x4cb52a
call fcn.00401af0
lea edi, [ebp - 0x1bc]
lea esi, [ebp - 0x112c]
call fcn.00401940
lea esi, [ebp - 0x1bc]
lea edi, [ebp - 0x112c]
call fcn.00401b30
lea eax, [ebp - 0x122c]
push eax
push 0x4dfef6
call fcn.00419ee0
lea esi, [ebp - 0x122c]
lea edi, [ebp - 0x112c]
call fcn.00401af0
lea edi, [ebp - 0x1bc]
lea esi, [ebp - 0x112c]
call fcn.00401940
movzx eax, byte [ebp - 0x2bc]
test eax, eax
jbe 0x44f311
mov byte [ebp - 0x1030], al
mov byte [ebp - 0xbc], 0
inc byte [ebp - 0xbc]
movzx eax, byte [ebp - 0xbc]
movzx ebx, byte [ebp + eax - 0x2bc]
mov ax, bx
cmp ax, 0xd0
jne 0x44f1fb
movzx eax, byte [ebp - 0xbc]
mov byte [ebp + eax - 0x2bc], 0x47
jmp 0x44f305
cmp ax, 0xdc
jne 0x44f215
movzx eax, byte [ebp - 0xbc]
mov byte [ebp + eax - 0x2bc], 0x55
jmp 0x44f305
cmp ax, 0xde
jne 0x44f22f
movzx eax, byte [ebp - 0xbc]
mov byte [ebp + eax - 0x2bc], 0x53
jmp 0x44f305
cmp ax, 0xdd
jne 0x44f249
movzx eax, byte [ebp - 0xbc]
mov byte [ebp + eax - 0x2bc], 0x49
jmp 0x44f305
cmp ax, 0xd6
jne 0x44f263
movzx eax, byte [ebp - 0xbc]
mov byte [ebp + eax - 0x2bc], 0x4f
jmp 0x44f305
cmp ax, 0xc7
jne 0x44f27d
movzx eax, byte [ebp - 0xbc]
mov byte [ebp + eax - 0x2bc], 0x43
jmp 0x44f305
cmp ax, 0xf0
jne 0x44f294
movzx eax, byte [ebp - 0xbc]
mov byte [ebp + eax - 0x2bc], 0x67
jmp 0x44f305
cmp ax, 0xfc
jne 0x44f2ab
movzx eax, byte [ebp - 0xbc]
mov byte [ebp + eax - 0x2bc], 0x75
jmp 0x44f305
cmp ax, 0xfe
jne 0x44f2c2
movzx eax, byte [ebp - 0xbc]
mov byte [ebp + eax - 0x2bc], 0x73
jmp 0x44f305
cmp ax, 0xfd
jne 0x44f2d9
movzx eax, byte [ebp - 0xbc]
mov byte [ebp + eax - 0x2bc], 0x69
jmp 0x44f305
cmp ax, 0xf6
jne 0x44f2f0
movzx eax, byte [ebp - 0xbc]
mov byte [ebp + eax - 0x2bc], 0x6f
jmp 0x44f305
cmp ax, 0xe7
jne 0x44f305
movzx eax, byte [ebp - 0xbc]
mov byte [ebp + eax - 0x2bc], 0x63
dec byte [ebp - 0x1030]
jne 0x44f1c9
lea eax, [ebp - 0x1130]
push eax
lea ebx, [ebp - 0x1bc]
push ebx
call fcn.00419ee0
lea esi, [ebp - 0x1130]
mov edi, 0x4cb52c
call fcn.004147b0
test al, al
je 0x44f350
lea eax, [ebp - 0x1bc]
push eax
lea ebx, [ebp - 0x2bc]
push ebx
call fcn.00450100
jmp 0x44f611
lea eax, [ebp - 0x1230]
push eax
push 0x4dfc99
call fcn.00419ee0
lea esi, [ebp - 0x1230]
mov edi, 0x4cb52d
call fcn.004147b0
test al, al
jne 0x44f39e
lea eax, [ebp - 0x1330]
push eax
push 0x4dfccc
call fcn.00419ee0
lea esi, [ebp - 0x1330]
mov edi, 0x4cb52e
call fcn.004147b0
test al, al
je 0x44f611
mov byte [ebp - 0x1334], 2
mov byte [ebp - 0xbc], 0
inc byte [ebp - 0xbc]
cmp byte [ebp - 0xbc], 1
jne 0x44f3e1
lea eax, [ebp - 0x1434]
push eax
push 0x4dfc99
call fcn.00419ee0
lea edi, [ebp - 0xb0]
lea esi, [ebp - 0x1434]
push 0x32
call fcn.00401950
jmp 0x44f405
lea eax, [ebp - 0x1434]
push eax
push 0x4dfccc
call fcn.00419ee0
lea edi, [ebp - 0xb0]
lea esi, [ebp - 0x1434]
push 0x32
call fcn.00401950
lea esi, [ebp - 0xb0]
mov edi, 0x4cb52f
call fcn.004147b0
test al, al
je 0x44f605
lea eax, [ebp - 0x2d4]
push eax
call fcn.00418270
mov word [ebp - 0x2e4], ax
lea ebx, [ebp - 0x2e4]
push ebx
call fcn.00408ce0
push 0x4d8b89
lea eax, [ebp - 0x2d4]
push eax
call fcn.00401e60
push 0x4d8b89
call fcn.00401210
call fcn.0041a4f0
push 0x32
lea eax, [ebp - 0xb0]
push eax
call fcn.0044f6a0
lea ebx, [ebp - 0x2e0]
push ebx
push 0x4cb530
push dword [0x4cb531]
call fcn.00443250
mov word [ebp - 0x2e4], ax
lea ebx, [ebp - 0x2e4]
push ebx
call fcn.00408ce0
push 0x4d8b89
lea eax, [ebp - 0x2e0]
push eax
call fcn.00401e60
push 0x4d8b89
call fcn.00401210
call fcn.0041a4f0
push 0x4d8b89
mov esi, 0x4cb535
lea edi, [ebp - 0x1834]
call fcn.00401b30
lea esi, [ebp - 0xb0]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1734]
call fcn.00401b30
mov esi, 0x4cb571
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1634]
call fcn.00401b30
mov esi, 0x4cb58d
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1534]
call fcn.00401b30
lea esi, [ebp - 0x2d4]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x1434]
call fcn.00401b30
mov esi, 0x4cb5bf
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00420e50
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 4
push 0x4cb5e0
push 0
call fcn.00421710
lea eax, [ebp - 0x2d4]
push eax
push 0
call fcn.00420e50
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 4
push 0x4cb5e4
push 0
call fcn.00421710
lea eax, [ebp - 0x2e0]
push eax
push 0
call fcn.00420e50
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
call fcn.00401d90
call fcn.0041a4f0
lea eax, [ebp - 0x10]
push eax
push 0x10
call fcn.004039f0
push dword [ebp - 0x10]
lea eax, [ebp - 0x2e0]
push eax
call fcn.00401a00
push 0
push dword [ebp - 0x10]
call sub.kernel32.dll_WinExec
lea eax, [ebp - 0x10]
push eax
push 0x10
call fcn.004031c0
mov word [ebp - 0x1338], 0x4b0
mov word [ebp - 0x2fc], 0
inc word [ebp - 0x2fc]
push 0xea60
call fcn.004431e0
dec word [ebp - 0x1338]
jne 0x44f5eb
dec byte [ebp - 0x1334]
jne 0x44f3ac
mov byte [0x4df519], 1
mov ax, word [ebp - 0x2e8]
push eax
push dword [ebp - 0x2c8]
movzx ebx, word [0x4e03f6]
push ebx
push 0x4df382
push 1
push 1
call fcn.00408d10
mov ax, word [ebp - 0x2e8]
push eax
push dword [ebp - 0x2c8]
movzx ebx, word [0x4e03f6]
push ebx
call fcn.00408de0
jmp 0x44e680
lea eax, [ebp - 0x2e8]
push eax
call fcn.00408ce0
lea ebx, [ebp - 0x2f0]
push ebx
call fcn.00408ce0
lea eax, [ebp - 0x2ec]
push eax
call fcn.00408ce0
call fcn.00402d80
cmp byte [ebp - 0xc], 0x2b
jne 0x44d6bc
pop edx
pop ecx
pop ebx
leave
ret