Function at 0x441b10
Capabilities:
Create process on windows

Disassembly:
enter 0x1298, 1
push ebx
push ecx
push edx
mov esi, dword [ebp + 0xc]
lea edi, [ebp - 0x108]
call fcn.00401940
mov dword [ebp - 8], esp
lea eax, [ebp - 0x258]
push eax
call fcn.00418270
mov word [ebp - 0x118], ax
lea ebx, [ebp - 0x118]
push ebx
call fcn.00408ce0
push 0x4d8b89
lea eax, [ebp - 0x258]
push eax
call fcn.00401e60
push 0x4d8b89
call fcn.00401210
call fcn.0041a4f0
push 0x4d8b89
push 0x5b
push 0x4c73ee
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x11
push 0x4c7449
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
lea eax, [ebp - 0x270]
push eax
lea ebx, [ebp - 0x26c]
push ebx
lea ecx, [ebp - 0x268]
push ecx
lea edx, [ebp - 0x274]
push edx
call fcn.00443b90
lea eax, [ebp - 0x278]
push eax
lea ebx, [ebp - 0x27c]
push ebx
lea ecx, [ebp - 0x280]
push ecx
lea edx, [ebp - 0x284]
push edx
call fcn.00443b10
push 0x4d8b89
mov esi, 0x4c745a
lea edi, [ebp - 0x484]
call fcn.00401b30
movzx eax, word [ebp - 0x274]
lea esi, [eax*4 + 0x4c89ca]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x384]
call fcn.00401b30
mov esi, 0x4c7461
call fcn.00401af0
mov ebx, edi
push ebx
push 0
call fcn.00420e50
movzx ecx, word [ebp - 0x268]
push ecx
push 2
call fcn.00443ad0
push 1
push 0x4c7464
push 0
call fcn.00421710
movzx eax, word [ebp - 0x26c]
lea ebx, [eax*4 + 0x4c89e2]
push ebx
push 0
call fcn.00420e50
push 1
push 0x4c7465
push 0
call fcn.00421710
movzx eax, word [ebp - 0x270]
push eax
push 4
call fcn.00443ad0
push 1
push 0x4c7466
push 0
call fcn.00421710
mov edi, dword [0x4c7467]
movzx eax, word [ebp - 0x278]
cdq
idiv edi
add eax, 0x30
mov dword [ebp - 0xc88], eax
lea esi, [ebp - 0xc88]
lea edi, [ebp - 0xd88]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0xc84]
call fcn.00401b30
mov ebx, dword [0x4c746b]
movzx eax, word [ebp - 0x278]
cdq
idiv ebx
add edx, 0x30
mov dword [ebp - 0xd8c], edx
lea esi, [ebp - 0xd8c]
lea edi, [ebp - 0xe8c]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0xc84]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xb84]
call fcn.00401b30
mov esi, 0x4c746f
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0xa84]
call fcn.00401b30
mov ebx, dword [0x4c7471]
movzx eax, word [ebp - 0x27c]
cdq
idiv ebx
add eax, 0x30
mov dword [ebp - 0xe90], eax
lea esi, [ebp - 0xe90]
lea edi, [ebp - 0xf90]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0xa84]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x984]
call fcn.00401b30
mov ebx, dword [0x4c7475]
movzx eax, word [ebp - 0x27c]
cdq
idiv ebx
add edx, 0x30
mov dword [ebp - 0xf94], edx
lea esi, [ebp - 0xf94]
lea edi, [ebp - 0x1094]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x984]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x884]
call fcn.00401b30
mov esi, 0x4c7479
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x784]
call fcn.00401b30
mov ebx, dword [0x4c747b]
movzx eax, word [ebp - 0x280]
cdq
idiv ebx
add eax, 0x30
mov dword [ebp - 0x1098], eax
lea esi, [ebp - 0x1098]
lea edi, [ebp - 0x1198]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x784]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x684]
call fcn.00401b30
mov ebx, dword [0x4c747f]
movzx eax, word [ebp - 0x280]
cdq
idiv ebx
add edx, 0x30
mov dword [ebp - 0x119c], edx
lea esi, [ebp - 0x119c]
lea edi, [ebp - 0x129c]
push 1
call fcn.00401d30
mov esi, edi
lea edi, [ebp - 0x684]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x584]
call fcn.00401b30
mov esi, 0x4c7483
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00420e50
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x2f
push 0x4c748a
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
mov esi, 0x4c74b9
lea edi, [ebp - 0x384]
call fcn.00401b30
lea eax, [ebp - 0x484]
push eax
lea ebx, [ebp - 0x108]
push ebx
call fcn.00419ee0
lea esi, [ebp - 0x484]
lea edi, [ebp - 0x384]
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00420e50
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
mov esi, 0x4c74be
lea edi, [ebp - 0x484]
call fcn.00401b30
lea eax, [ebp - 0x584]
push eax
push 0x4c74d7
call fcn.00443740
lea esi, [ebp - 0x584]
lea edi, [ebp - 0x484]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x384]
call fcn.00401b30
mov esi, 0x4c74f1
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00420e50
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x2c
push 0x4c74f4
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x20
push 0x4c7520
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x2b
push 0x4c7540
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1f
push 0x4c756b
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x3f
push 0x4c758a
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x5f
push 0x4c75c9
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x70
push 0x4c7628
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x7a
push 0x4c7698
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x43
push 0x4c7712
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0xe
push 0x4c7755
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x29
push 0x4c7763
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x22
push 0x4c778c
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x22
push 0x4c77ae
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x24
push 0x4c77d0
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1f
push 0x4c77f4
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x16
push 0x4c7813
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0xa
push 0x4c7829
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1d
push 0x4c7833
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1f
push 0x4c7850
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0xa
push 0x4c786f
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x16
push 0x4c7879
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x20
push 0x4c788f
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x17
push 0x4c78af
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x28
push 0x4c78c6
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0xd
push 0x4c78ee
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x17
push 0x4c78fb
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x12
push 0x4c7912
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x22
push 0x4c7924
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1d
push 0x4c7946
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x19
push 0x4c7963
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x18
push 0x4c797c
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0xf
push 0x4c7994
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1c
push 0x4c79a3
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x24
push 0x4c79bf
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x18
push 0x4c79e3
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0xf
push 0x4c79fb
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1c
push 0x4c7a0a
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x13
push 0x4c7a26
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1a
push 0x4c7a39
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x22
push 0x4c7a53
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x13
push 0x4c7a75
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x13
push 0x4c7a88
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1a
push 0x4c7a9b
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x22
push 0x4c7ab5
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x10
push 0x4c7ad7
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x13
push 0x4c7ae7
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1a
push 0x4c7afa
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x22
push 0x4c7b14
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x10
push 0x4c7b36
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x13
push 0x4c7b46
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1a
push 0x4c7b59
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x22
push 0x4c7b73
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x10
push 0x4c7b95
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x13
push 0x4c7ba5
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1a
push 0x4c7bb8
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x22
push 0x4c7bd2
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x10
push 0x4c7bf4
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x13
push 0x4c7c04
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1a
push 0x4c7c17
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x22
push 0x4c7c31
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x10
push 0x4c7c53
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x13
push 0x4c7c63
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1a
push 0x4c7c76
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x22
push 0x4c7c90
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x10
push 0x4c7cb2
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x13
push 0x4c7cc2
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x20
push 0x4c7cd5
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x22
push 0x4c7cf5
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x10
push 0x4c7d17
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0xe
push 0x4c7d27
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1d
push 0x4c7d35
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x13
push 0x4c7d52
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x12
push 0x4c7d65
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x17
push 0x4c7d77
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x29
push 0x4c7d8e
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x10
push 0x4c7db7
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x15
push 0x4c7dc7
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x23
push 0x4c7ddc
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x2f
push 0x4c7dff
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x2a
push 0x4c7e2e
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1c
push 0x4c7e58
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x21
push 0x4c7e74
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x22
push 0x4c7e95
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 7
push 0x4c7eb7
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x2d
push 0x4c7ebe
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x18
push 0x4c7eeb
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x12
push 0x4c7f03
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x62
push 0x4c7f15
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1a
push 0x4c7f77
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x86
push 0x4c7f91
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x3a
push 0x4c8017
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x6a
push 0x4c8051
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 4
push 0x4c80bb
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x89
push 0x4c80bf
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x6a
push 0x4c8148
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x87
push 0x4c81b2
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0xdf
push 0x4c8239
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x46
push 0x4c8318
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x65
push 0x4c835e
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 4
push 0x4c83c3
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 5
push 0x4c83c7
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 5
push 0x4c83cc
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1c
push 0x4c83d1
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0xc1
push 0x4c83ed
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x3a
push 0x4c84ae
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x1c
push 0x4c84e8
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0xa
lea eax, [ebp - 0x124]
mov byte [eax], 0
push eax
push dword [ebp + 8]
push 0xa
call fcn.00414c90
add esp, 8
push 0x4d8b89
mov esi, 0x4c8504
lea edi, [ebp - 0x484]
call fcn.00401b30
lea eax, [ebp - 0x584]
push eax
lea ebx, [ebp - 0x124]
push ebx
call fcn.00419ee0
lea esi, [ebp - 0x584]
lea edi, [ebp - 0x484]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x384]
call fcn.00401b30
mov esi, 0x4c853a
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00420e50
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x20
push 0x4c854d
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 4
push 0x4c856d
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x20
push 0x4c8571
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 4
push 0x4c8591
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x75
push 0x4c8595
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x3a
push 0x4c860a
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0xa1
push 0x4c8644
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 4
push 0x4c86e5
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x3a
push 0x4c86e9
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x50
push 0x4c8723
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 4
push 0x4c8773
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 5
push 0x4c8777
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 5
push 0x4c877c
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 8
push 0x4c8781
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 6
push 0x4c8789
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x28
push 0x4c878f
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x28
push 0x4c87b7
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 6
push 0x4c87df
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 7
push 0x4c87e5
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 7
push 0x4c87ec
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x20
push 0x4c87f3
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x2a
push 0x4c8813
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x21
push 0x4c883d
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x14
push 0x4c885e
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x25
push 0x4c8872
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
call fcn.00401d90
call fcn.0041a4f0
push 0x4d8b89
call fcn.00443620
call fcn.0041a4f0
lea eax, [ebp - 0x244]
push eax
push 0x4c8897
call fcn.00401e60
lea ebx, [ebp - 0x244]
push ebx
push 1
call fcn.004435f0
call fcn.0041a4f0
lea eax, [ebp - 0x244]
push eax
call fcn.00443550
mov dword [ebp - 0x248], eax
mov edi, 0
mov dword [ebp - 0x24c], edi
mov eax, dword [ebp - 0x24c]
cmp dword [ebp - 0x248], eax
jle 0x442f97
inc dword [ebp - 0x24c]
lea eax, [ebp - 0x244]
push eax
lea ebx, [ebp - 0x110]
push ebx
push 1
push 0
call fcn.00443460
call fcn.0041a4f0
push 0x4d8b89
movzx eax, byte [ebp - 0x110]
push eax
push 0
call fcn.00443420
add esp, 4
call fcn.0041a4f0
jmp 0x442f49
lea ebx, [ebp - 0x244]
push ebx
call fcn.00401d90
call fcn.0041a4f0
push 0x4d8b89
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 0x20
push 0x4c88ac
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 1
push 0x4c88cc
push 0
call fcn.00421710
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
call fcn.00401d90
call fcn.0041a4f0
lea eax, [ebp - 0x264]
push eax
push 0x4c88cd
push dword [0x4c88ce]
call fcn.00443250
mov word [ebp - 0x118], ax
lea ebx, [ebp - 0x118]
push ebx
call fcn.00408ce0
push 0x4d8b89
lea eax, [ebp - 0x264]
push eax
call fcn.00401e60
push 0x4d8b89
call fcn.00401210
call fcn.0041a4f0
push 0x4d8b89
mov esi, 0x4c88d2
lea edi, [ebp - 0x784]
call fcn.00401b30
lea eax, [ebp - 0x884]
push eax
lea ebx, [ebp - 0x108]
push ebx
call fcn.00419ee0
lea esi, [ebp - 0x884]
lea edi, [ebp - 0x784]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x684]
call fcn.00401b30
mov esi, 0x4c890e
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x584]
call fcn.00401b30
mov esi, 0x4c892a
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x484]
call fcn.00401b30
lea esi, [ebp - 0x258]
call fcn.00401af0
mov esi, edi
lea edi, [ebp - 0x384]
call fcn.00401b30
mov esi, 0x4c895c
call fcn.00401af0
mov eax, edi
push eax
push 0
call fcn.00420e50
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 4
push 0x4c897d
push 0
call fcn.00421710
lea eax, [ebp - 0x258]
push eax
push 0
call fcn.00420e50
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
push 4
push 0x4c8981
push 0
call fcn.00421710
lea eax, [ebp - 0x264]
push eax
push 0
call fcn.00420e50
call fcn.00420d70
call fcn.0041a4f0
push 0x4d8b89
call fcn.00401d90
call fcn.0041a4f0
lea eax, [ebp - 0x114]
push eax
push 0x10
call fcn.004039f0
push dword [ebp - 0x114]
lea eax, [ebp - 0x264]
push eax
call fcn.00401a00
push 0
push dword [ebp - 0x114]
call sub.kernel32.dll_WinExec
lea eax, [ebp - 0x114]
push eax
push 0x10
call fcn.004031c0
mov dword [ebp - 0x288], 0x4b0
mov eax, 0
mov dword [ebp - 0x248], eax
inc dword [ebp - 0x248]
push 0xea60
call fcn.004431e0
dec dword [ebp - 0x288]
jne 0x4431b8
pop edx
pop ecx
pop ebx
leave
ret 8