Function at 0x4fe6b4
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0
push 0
push 0
push ebx
push esi
push edi
mov edi, edx
mov esi, eax
xor eax, eax
push ebp
push 0x4ffa95
push dword fs:[eax]
mov dword fs:[eax], esp
xor ebx, ebx
lea eax, [ebp - 4]
mov edx, 0x4ffab0
call fcn.00404278
push dword [ebp - 4]
push 0x4ffae0
push 0x4ffb10
lea eax, [ebp - 4]
mov edx, 3
call fcn.00404560
push dword [ebp - 4]
lea edx, [ebp - 0xc]
mov eax, dword [0x559800]
mov eax, dword [eax]
call fcn.004917a8
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00409494
push dword [ebp - 8]
push 0x4ffb1c
lea eax, [ebp - 4]
mov edx, 3
call fcn.00404560
push 0x34
mov eax, dword [ebp - 4]
call fcn.004046a0
mov edx, eax
mov ecx, 0x4ffb28
mov eax, dword [0x559800]
mov eax, dword [eax]
call fcn.00491328
cmp eax, 6
jne 0x4fe754
call fcn.0053e9f0
mov eax, edi
mov edx, 0x4ffb44
call fcn.004045ec
je 0x4fe770
mov eax, edi
mov edx, 0x4ffb54
call fcn.004045ec
jne 0x4fe78d
call fcn.004d77a0
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffb64
call fcn.004045ec
jne 0x4fe7ad
call fcn.004ea708
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffb70
call fcn.004045ec
jne 0x4fe7e7
call fcn.004d7c24
push 0x7d0
call sub.kernel32.dll_Sleep_1
call fcn.004d7a54
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffb84
call fcn.004045ec
jne 0x4fe821
call fcn.004d7d40
push 0x7d0
call sub.kernel32.dll_Sleep_1
call fcn.004d7ca8
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffb98
call fcn.004045ec
jne 0x4fe84c
call fcn.004d7d9c
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffbb0
call fcn.004045ec
jne 0x4fe877
call fcn.004d7fb0
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffbc4
call fcn.004045ec
jne 0x4fe8a6
call fcn.004d81e8
push 0x12c
call sub.kernel32.dll_Sleep_1
call fcn.004d8080
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffbd4
call fcn.004045ec
jne 0x4fe8d1
call fcn.004d8264
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffbec
call fcn.004045ec
jne 0x4fe8f7
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffc00
call fcn.004045ec
jne 0x4fe91d
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffc10
call fcn.004045ec
jne 0x4fe948
call fcn.004d8478
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffc28
call fcn.004045ec
jne 0x4fe973
call fcn.004d854c
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffc40
call fcn.004045ec
jne 0x4fe99e
call fcn.004d8620
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffc58
call fcn.004045ec
jne 0x4fe9c9
call fcn.004d86f4
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffc70
call fcn.004045ec
jne 0x4fe9f4
call fcn.004d87c8
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffc88
call fcn.004045ec
jne 0x4fea1a
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffc9c
call fcn.004045ec
jne 0x4fea45
call fcn.004d889c
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffcb4
call fcn.004045ec
jne 0x4fea70
call fcn.004d8bb0
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffcc8
call fcn.004045ec
jne 0x4fea9b
call fcn.004d8c80
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffcd8
call fcn.004045ec
jne 0x4feac6
call fcn.004d9310
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffcf0
call fcn.004045ec
jne 0x4feaf1
call fcn.004d90c8
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffd00
call fcn.004045ec
jne 0x4feb1c
call fcn.004d9568
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffd14
call fcn.004045ec
jne 0x4feb47
call fcn.004d9764
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffd30
call fcn.004045ec
jne 0x4feb77
call fcn.004d98cc
call fcn.004d9834
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffd40
call fcn.004045ec
jne 0x4feba2
call fcn.004d9924
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffd54
call fcn.004045ec
jne 0x4febcd
call fcn.004d9b74
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffd68
call fcn.004045ec
jne 0x4febf8
call fcn.004d9da0
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffd80
call fcn.004045ec
jne 0x4fec22
mov eax, 0x4ffd94
call fcn.005405d8
call fcn.004da134
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffdac
call fcn.004045ec
jne 0x4fec42
call fcn.004da5ac
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffdc0
call fcn.004045ec
jne 0x4fec6d
call fcn.004da880
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffde0
call fcn.004045ec
jne 0x4fec8d
call fcn.004daa8c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffdf4
call fcn.004045ec
jne 0x4fecad
call fcn.004dadc0
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffe04
call fcn.004045ec
jne 0x4feccd
call fcn.004dafdc
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffe14
call fcn.004045ec
jne 0x4feced
call fcn.004db3d8
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffe24
call fcn.004045ec
jne 0x4fed0d
call fcn.004db5cc
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffe40
call fcn.004045ec
jne 0x4fed2d
call fcn.004db968
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffe54
call fcn.004045ec
jne 0x4fed4d
call fcn.004dbb60
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffe68
call fcn.004045ec
jne 0x4fed6d
call fcn.004dbdbc
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffe80
call fcn.004045ec
jne 0x4fed97
mov eax, 0x4ffe94
call fcn.005405d8
call fcn.004dc0d4
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffeb0
call fcn.004045ec
jne 0x4fedb7
call fcn.004dc3ac
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffec4
call fcn.004045ec
jne 0x4feddc
call fcn.004dc840
call fcn.004dc7a4
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4ffed8
call fcn.004045ec
jne 0x4fee1b
mov eax, 0x4ffeec
call fcn.005405d8
mov eax, 0x4fff04
call fcn.005405d8
call fcn.004dcd54
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4fff1c
call fcn.004045ec
jne 0x4fee3b
call fcn.004dcfd4
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4fff34
call fcn.004045ec
jne 0x4fee65
mov eax, 0x4fff4c
call fcn.005405d8
call fcn.004dd1d0
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4fff64
call fcn.004045ec
jne 0x4fee85
call fcn.004dd518
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4fff74
call fcn.004045ec
jne 0x4feea5
call fcn.004dd5e4
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4fff98
call fcn.004045ec
jne 0x4feed0
call fcn.004dd840
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4fffa8
call fcn.004045ec
jne 0x4feef0
call fcn.004ddb54
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4fffc0
call fcn.004045ec
jne 0x4fef1a
mov eax, 0x4fffd4
call fcn.005405d8
call fcn.004ddec0
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x4fffec
call fcn.004045ec
jne 0x4fef3a
call fcn.004de12c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500000
call fcn.004045ec
jne 0x4fef65
call fcn.004de450
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500018
call fcn.004045ec
jne 0x4fef85
call fcn.004de6c4
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500034
call fcn.004045ec
jne 0x4fefba
mov eax, 0x500048
call fcn.005405d8
call fcn.004deb5c
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500060
call fcn.004045ec
jne 0x4fefda
call fcn.004deef4
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500070
call fcn.004045ec
jne 0x4feffa
call fcn.004df0b8
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500088
call fcn.004045ec
jne 0x4ff00f
call fcn.004df188
mov bl, 1
mov eax, edi
mov edx, 0x5000a0
call fcn.004045ec
jne 0x4ff03f
call fcn.004df2fc
call fcn.004df264
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5000b8
call fcn.004045ec
jne 0x4ff06a
call fcn.004df390
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5000cc
call fcn.004045ec
jne 0x4ff08a
call fcn.004df6ec
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5000e4
call fcn.004045ec
jne 0x4ff0aa
call fcn.004dbdbc
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5000f8
call fcn.004045ec
jne 0x4ff0ca
call fcn.004dfc78
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500110
call fcn.004045ec
jne 0x4ff0ea
call fcn.004dfe60
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500128
call fcn.004045ec
jne 0x4ff10a
call fcn.004e0048
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500144
call fcn.004045ec
jne 0x4ff13f
mov eax, 0x500158
call fcn.005405d8
call fcn.004e0244
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500174
call fcn.004045ec
jne 0x4ff15f
call fcn.004e0498
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500190
call fcn.004045ec
jne 0x4ff18a
call fcn.004e0790
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5001a4
call fcn.004045ec
jne 0x4ff1aa
call fcn.004e0b98
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5001c0
call fcn.004045ec
jne 0x4ff1d5
call fcn.004e0ef0
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5001d8
call fcn.004045ec
jne 0x4ff200
call fcn.004e1294
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5001f0
call fcn.004045ec
jne 0x4ff22b
call fcn.004e1490
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500204
call fcn.004045ec
jne 0x4ff24b
call fcn.004e1694
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500218
call fcn.004045ec
jne 0x4ff26b
call fcn.004e18a8
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x50022c
call fcn.004045ec
jne 0x4ff28b
call fcn.004e1be8
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500244
call fcn.004045ec
jne 0x4ff2bf
call fcn.004e2268
push 0x3e8
call sub.kernel32.dll_Sleep_1
call fcn.004e21d0
mov eax, dword [esi + 0x3a0]
call fcn.00540260
call fcn.004e23cc
mov bl, 1
mov eax, edi
mov edx, 0x50025c
call fcn.004045ec
jne 0x4ff2df
call fcn.004e24cc
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500278
call fcn.004045ec
jne 0x4ff2ff
call fcn.004e273c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x50028c
call fcn.004045ec
jne 0x4ff32a
call fcn.004e2998
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5002a4
call fcn.004045ec
jne 0x4ff35e
mov eax, 0x5002bc
call fcn.005405d8
mov eax, 0x5002d0
call fcn.005405d8
call fcn.004e2c00
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5002e8
call fcn.004045ec
jne 0x4ff383
call fcn.004e2f44
mov eax, dword [esi + 0x3a0]
call fcn.00540260
call fcn.004e23cc
mov bl, 1
mov eax, edi
mov edx, 0x5002f4
call fcn.004045ec
jne 0x4ff3a8
call fcn.004e3144
mov eax, dword [esi + 0x3a0]
call fcn.00540260
call fcn.004e23cc
mov bl, 1
mov eax, edi
mov edx, 0x500308
call fcn.004045ec
jne 0x4ff3d3
call fcn.004e33c4
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500320
call fcn.004045ec
jne 0x4ff408
mov eax, 0x50033c
call fcn.005405d8
call fcn.004e369c
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500350
call fcn.004045ec
jne 0x4ff43d
mov eax, 0x500364
call fcn.005405d8
call fcn.004e38f8
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500378
call fcn.004045ec
jne 0x4ff472
call fcn.004e3d0c
call fcn.004e3c78
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
call fcn.004e3e8c
mov bl, 1
mov eax, edi
mov edx, 0x50038c
call fcn.004045ec
jne 0x4ff492
call fcn.004e404c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5003a8
call fcn.004045ec
jne 0x4ff4bd
call fcn.004e4364
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5003c4
call fcn.004045ec
jne 0x4ff4e8
call fcn.004e4884
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5003e0
call fcn.004045ec
jne 0x4ff51d
mov eax, 0x5003f4
call fcn.005405d8
call fcn.004e4ae0
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500404
call fcn.004045ec
jne 0x4ff53d
call fcn.004e4cf0
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x50041c
call fcn.004045ec
jne 0x4ff562
call fcn.005406ec
call fcn.004e4f00
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500434
call fcn.004045ec
jne 0x4ff577
call fcn.004e5248
mov bl, 1
mov eax, edi
mov edx, 0x500454
call fcn.004045ec
jne 0x4ff597
call fcn.004e5364
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x50046c
call fcn.004045ec
jne 0x4ff5c2
call fcn.004e56a0
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x50047c
call fcn.004045ec
jne 0x4ff5ed
call fcn.004e58b8
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500498
call fcn.004045ec
jne 0x4ff618
call fcn.004e5b7c
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5004ac
call fcn.004045ec
jne 0x4ff642
mov eax, 0x5004c4
call fcn.005405d8
call fcn.004e5e08
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5004dc
call fcn.004045ec
jne 0x4ff662
call fcn.004e6004
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5004ec
call fcn.004045ec
jne 0x4ff68d
call fcn.004e620c
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500504
call fcn.004045ec
jne 0x4ff6b8
call fcn.004e6494
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x50051c
call fcn.004045ec
jne 0x4ff6ed
mov eax, 0x500538
call fcn.005405d8
call fcn.004e66d4
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500550
call fcn.004045ec
jne 0x4ff718
call fcn.004e6a14
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500564
call fcn.004045ec
jne 0x4ff743
call fcn.004e6c8c
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x50057c
call fcn.004045ec
jne 0x4ff76e
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
call fcn.004e7188
mov bl, 1
mov eax, edi
mov edx, 0x500598
call fcn.004045ec
jne 0x4ff799
call fcn.004e75f0
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5005b0
call fcn.004045ec
jne 0x4ff7c4
call fcn.004e77f0
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5005c4
call fcn.004045ec
jne 0x4ff7ef
call fcn.004e7b1c
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5005dc
call fcn.004045ec
jne 0x4ff81a
call fcn.004e7d1c
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5005f0
call fcn.004045ec
jne 0x4ff84a
call fcn.004e7fe4
call fcn.004e7f54
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500600
call fcn.004045ec
jne 0x4ff875
call fcn.004e81cc
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500618
call fcn.004045ec
jne 0x4ff8a0
call fcn.004e841c
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500630
call fcn.004045ec
jne 0x4ff8cb
call fcn.004e8758
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500644
call fcn.004045ec
jne 0x4ff8f6
call fcn.004e89b4
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500658
call fcn.004045ec
jne 0x4ff926
call fcn.004e8ecc
call fcn.004e8dc0
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500668
call fcn.004045ec
jne 0x4ff956
call fcn.004e9194
call fcn.004e90e0
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500680
call fcn.004045ec
jne 0x4ff981
call fcn.004e9374
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x500690
call fcn.004045ec
jne 0x4ff9b3
call fcn.004e95a4
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov eax, esi
call fcn.004f68fc
mov bl, 1
mov eax, edi
mov edx, 0x5006a4
call fcn.004045ec
jne 0x4ff9de
call fcn.004e97fc
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5006bc
call fcn.004045ec
jne 0x4ffa1f
call fcn.005406ec
call fcn.004e9ee4
call fcn.004e9a40
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
push 0
push 0x5006cc
call sub.kernel32.dll_WinExec
mov bl, 1
mov eax, edi
mov edx, 0x5006e4
call fcn.004045ec
jne 0x4ffa4a
call fcn.004ea29c
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
mov eax, edi
mov edx, 0x5006fc
call fcn.004045ec
jne 0x4ffa75
call fcn.004ea4a8
mov eax, dword [esi + 0x3a0]
call fcn.0054008c
mov eax, dword [esi + 0x3a0]
call fcn.00540260
mov bl, 1
call fcn.0053ef14
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ffa9c
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404204
ret