Function at 0x43419c
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56ab5f
mov eax, dword fs:[0]
push eax
sub esp, 0x4f0
mov eax, dword [0x5f969c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4e0], ecx
movzx eax, word [ebp + 0xc]
push eax
movzx ecx, word [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x4e0]
call fcn.00435fc0
mov dword [ebp - 0x10], 1
movzx edx, word [ebp + 0xc]
cmp edx, 0xe141
jne 0x433622
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0xe141
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434540
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433622
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0xe140
jne 0x433667
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0xe140
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434570
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433667
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0xe101
jne 0x4336ac
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0xe101
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.004346d0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x4336ac
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8009
jne 0x4336f1
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8009
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434760
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x4336f1
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8007
jne 0x433736
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8007
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434610
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433736
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x800c
jne 0x43377b
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x800c
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434640
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x43377b
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x800d
jne 0x4337c0
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x800d
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434660
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x4337c0
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8012
jne 0x433805
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8012
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.004348b0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433805
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8014
jne 0x43384a
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8014
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.004348d0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x43384a
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8016
jne 0x43388f
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8016
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434960
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x43388f
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8018
jne 0x4338d4
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8018
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.004349f0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x4338d4
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x9c56
jne 0x433919
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x9c56
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434a30
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433919
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8073
jne 0x43395e
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8073
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434a50
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x43395e
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8022
jne 0x4339a3
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8022
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434a70
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x4339a3
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8026
jne 0x4339e8
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8026
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434a90
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x4339e8
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x802c
jne 0x433a2d
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x802c
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434ad0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433a2d
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x802d
jne 0x433a72
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x802d
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434b20
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433a72
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8033
jne 0x433ab7
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8033
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434b50
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433ab7
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8037
jne 0x433afc
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8037
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434b70
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433afc
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8043
jne 0x433b41
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8043
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434b90
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433b41
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8044
jne 0x433b86
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8044
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00435460
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433b86
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8045
jne 0x433bcb
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8045
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00435600
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433bcb
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8049
jne 0x433c10
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8049
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.004357a0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433c10
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x804a
jne 0x433c55
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x804a
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.004358d0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433c55
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x807c
jne 0x433c9a
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x807c
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434c40
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433c9a
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x804e
jne 0x433cdf
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x804e
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434cc0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433cdf
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x806b
jne 0x433d24
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x806b
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434ce0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433d24
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x806d
jne 0x433d69
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x806d
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434d00
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433d69
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8056
jne 0x433dae
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8056
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434d20
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433dae
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8054
jne 0x433df3
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8054
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434d50
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433df3
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8057
jne 0x433e38
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8057
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434d80
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433e38
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x805b
jne 0x433e7d
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x805b
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434db0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433e7d
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x805c
jne 0x433ec2
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x805c
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.004359e0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433ec2
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x801e
jne 0x433f07
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x801e
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434a10
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433f07
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8076
jne 0x433f4c
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8076
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434dd0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433f4c
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8082
jne 0x433f91
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8082
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434df0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433f91
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8083
jne 0x433fd6
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8083
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00434e70
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x433fd6
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x9c51
jne 0x43401b
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x9c51
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00435450
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x43401b
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8080
jne 0x434060
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8080
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00435d30
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x434060
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x8074
jne 0x4340a5
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x8074
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00435d90
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x4340a5
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x9ca4
jne 0x4340ea
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x9ca4
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00435db0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x4340ea
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
cmp edx, 0x9c58
jne 0x43412f
mov dword [ebp - 0x10], 1
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push 0x9c58
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp - 0x4e0]
call fcn.00435dd0
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
cmp dword [ebp - 0x10], 0
je 0x43412f
mov eax, 1
jmp 0x4344ec
movzx edx, word [ebp + 0xc]
mov dword [ebp - 0x4e4], edx
mov eax, dword [ebp - 0x4e4]
sub eax, 0x9ca5
mov dword [ebp - 0x4e4], eax
cmp dword [ebp - 0x4e4], 4
ja case.default.0x434159
mov ecx, dword [ebp - 0x4e4]
jmp dword [ecx*4 + 0x434508]
push 0
mov ecx, dword [ebp - 0x4e0]
call fcn.00435e10
jmp case.default.0x434159
push 1
mov ecx, dword [ebp - 0x4e0]
call fcn.00435e10
jmp case.default.0x434159
push 2
mov ecx, dword [ebp - 0x4e0]
call fcn.00435e10
jmp case.default.0x434159
push 3
mov ecx, dword [ebp - 0x4e0]
call fcn.00435e10
jmp case.default.0x434159
push 4
mov ecx, dword [ebp - 0x4e0]
call fcn.00435e10
movzx edx, word [ebp + 0xc]
mov dword [ebp - 0x4e8], edx
mov eax, dword [ebp - 0x4e8]
sub eax, 0x80e8
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 7
ja case.default.0x4341d7
mov ecx, dword [ebp - 0x4e8]
jmp dword [ecx*4 + 0x43451c]
mov dword [0x5fd224], 1
mov edx, dword [ebp - 0x4e0]
mov ecx, dword [edx + 4]
call fcn.0044a260
jmp case.default.0x4341d7
mov dword [0x5fd224], 0xffffffff
mov eax, dword [ebp - 0x4e0]
mov ecx, dword [eax + 4]
call fcn.0044a260
jmp case.default.0x4341d7
mov dword [0x5fd224], 0x3a8
mov ecx, dword [ebp - 0x4e0]
mov ecx, dword [ecx + 4]
call fcn.0044a260
jmp case.default.0x4341d7
mov dword [0x5fd224], 0x3b6
mov edx, dword [ebp - 0x4e0]
mov ecx, dword [edx + 4]
call fcn.0044a260
jmp case.default.0x4341d7
mov dword [0x5fd224], 0x3a4
mov eax, dword [ebp - 0x4e0]
mov ecx, dword [eax + 4]
call fcn.0044a260
jmp case.default.0x4341d7
mov dword [0x5fd224], 0x362
mov ecx, dword [ebp - 0x4e0]
mov ecx, dword [ecx + 4]
call fcn.0044a260
jmp case.default.0x4341d7
mov dword [0x5fd224], 0xcaed
mov edx, dword [ebp - 0x4e0]
mov ecx, dword [edx + 4]
call fcn.0044a260
jmp case.default.0x4341d7
mov dword [0x5fd224], 0xfde9
mov eax, dword [ebp - 0x4e0]
mov ecx, dword [eax + 4]
call fcn.0044a260
movzx ecx, word [ebp + 0xc]
mov dword [ebp - 0x4ec], ecx
cmp dword [ebp - 0x4ec], 0x80f0
je 0x4342e0
cmp dword [ebp - 0x4ec], 0x80f1
je 0x4343df
jmp 0x4344e2
push 0x104
lea edx, [ebp - 0x23c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x258]
call fcn.004061d0
mov dword [ebp - 4], 0
push 0xffffffffffffffff
push 0x57efa0
lea ecx, [ebp - 0x258]
call fcn.00436870
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x25c]
add ecx, 1
push ecx
push 0
lea edx, [ebp - 0x4c0]
push edx
lea ecx, [ebp - 0x258]
call fcn.00406270
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f4], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4f4]
push ecx
lea ecx, [ebp - 0x258]
call fcn.00407d20
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4c0]
call fcn.00406210
push 0x57efa4
lea edx, [ebp - 0x258]
push edx
lea eax, [ebp - 0x30]
push eax
call fcn.00437480
add esp, 0xc
mov byte [ebp - 4], 2
push 0
lea ecx, [ebp - 0x258]
call fcn.00406410
push eax
push 0
lea ecx, [ebp - 0x30]
call fcn.00406410
push eax
push 0x57efbc
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.00406210
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x258]
call fcn.00406210
jmp 0x4344e2
push 0x104
lea ecx, [ebp - 0x484]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x484]
push edx
lea ecx, [ebp - 0x4a0]
call fcn.004061d0
mov dword [ebp - 4], 3
push 0xffffffffffffffff
push 0x57efc8
lea ecx, [ebp - 0x4a0]
call fcn.00436870
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x4a4]
add eax, 1
push eax
push 0
lea ecx, [ebp - 0x4dc]
push ecx
lea ecx, [ebp - 0x4a0]
call fcn.00406270
mov dword [ebp - 0x4f8], eax
mov edx, dword [ebp - 0x4f8]
mov dword [ebp - 0x4fc], edx
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x4fc]
push eax
lea ecx, [ebp - 0x4a0]
call fcn.00407d20
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4dc]
call fcn.00406210
push 0x57efcc
lea ecx, [ebp - 0x4a0]
push ecx
lea edx, [ebp - 0x278]
push edx
call fcn.00437480
add esp, 0xc
mov byte [ebp - 4], 5
push 0
lea ecx, [ebp - 0x4a0]
call fcn.00406410
push eax
push 0
lea ecx, [ebp - 0x278]
call fcn.00406410
push eax
push 0x57efe8
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x278]
call fcn.00406210
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.00406210
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0053c85d
mov esp, ebp
pop ebp
ret 0x10