Function at 0x448120
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe54
push esi
push edi
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x68], eax
mov eax, 0x52fec4
call fcn.00503ebc
mov word [ebp - 0x54], 8
lea eax, [ebp - 4]
call fcn.00401d04
inc dword [ebp - 0x48]
xor edx, edx
mov word [ebp - 0x54], 0x14
mov dword [ebp - 0x9c], edx
mov ecx, dword [ebp - 0x6c]
cmp ecx, 0x42
ja case.default.0x448169
jmp dword [ecx*4 + 0x448170]
mov byte [0x53d878], 0
mov edx, dword [ebp - 0x70]
add edx, 5
mov eax, dword [ebp - 0x68]
call fcn.004224dc
mov ecx, dword [0x541e84]
dec ecx
je 0x4482a2
dec ecx
je 0x4482d0
jmp 0x4483a8
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x2fac], 3
je 0x4482c1
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x28d18], 0
jne 0x4482c1
cmp dword [0x53d868], 0
mov dword [ebp - 0x9c], 1
jmp 0x4483a8
mov byte [0x541484], 0
push 0xcc0020
push 0
push 0
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x2f8]
mov eax, dword [eax + 0x160]
call fcn.004bd910
push eax
push 0x258
push 0x320
push 0
push 0
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x3e0]
call fcn.004c1eb4
call fcn.004bd910
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [0x53d35c]
push 1
mov ecx, 0x52fc95
mov edx, 0x52fc7e
mov eax, dword [eax]
call fcn.0050f6d4
dec eax
jne 0x44833e
mov byte [0x5428a8], 1
push 0xcc0020
push 0
push 0
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x3e0]
call fcn.004c1eb4
call fcn.004bd910
push eax
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x3e0]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x3e0]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x2f8]
mov eax, dword [eax + 0x160]
call fcn.004bd910
push eax
call sub.gdi32.dll_BitBlt
mov dword [ebp - 0x9c], 1
mov byte [0x541484], 1
xor edx, edx
mov dword [0x541e84], edx
jmp case.default.0x448169
mov ecx, dword [ebp - 0x70]
add ecx, 7
push ecx
call fcn.00408540
pop ecx
mov edx, eax
mov eax, dword [ebp - 0x68]
call fcn.00439c50
jmp case.default.0x448169
mov ecx, dword [ebp - 0x70]
xor eax, eax
add ecx, 4
lea esi, [ebp - 0xec]
mov edi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x2fc4], 0
je 0x448480
xor eax, eax
lea edi, [ebp - 0xec]
or ecx, 0xffffffff
lea esi, [ebp - 0x12c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [ebp - 0x12c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x52fc9a
push eax
call fcn.00503b50
add esp, 8
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0x68]
call fcn.00439a9c
test al, al
je 0x448480
xor eax, eax
lea edi, [ebp - 0x12c]
or ecx, 0xffffffff
lea esi, [ebp - 0xec]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0xec]
push eax
mov edx, dword [ebp - 0x68]
add edx, 0x2626c
push edx
call fcn.00503b50
add esp, 8
push 0x52fc9c
mov ecx, dword [ebp - 0x68]
add ecx, 0x2626c
push ecx
call fcn.00503b50
add esp, 8
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 0x68]
call fcn.004399c0
xor eax, eax
lea edi, [ebp - 0xec]
or ecx, 0xffffffff
mov esi, 0x541d94
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, 0x53db10
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x541480]
lea edi, [ebp - 0xec]
mov byte [eax + 0x53db10], 0x40
inc dword [0x541480]
xor eax, eax
add edx, dword [0x541480]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edx
xchg edi, esi
mov edx, ecx
mov eax, edi
shr ecx, 2
lea eax, [ebp - 0xec]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push eax
call fcn.00503b8c
pop ecx
add eax, dword [0x541480]
mov dword [0x541480], eax
mov eax, dword [ebp - 0x68]
call fcn.00446df0
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 4
call fcn.00446dbc
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 6
call fcn.0042330c
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.0043a728
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
cmp dword [0x541e74], 3
jne 0x4485aa
mov eax, dword [ebp - 0x68]
call fcn.00432e90
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.00425908
mov edx, dword [ebp - 0x68]
mov byte [edx + 0x6b74], 0
mov byte [0x541485], 1
mov eax, dword [ebp - 0x68]
call fcn.00433edc
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.0043a728
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 0xa
call fcn.004352f8
mov eax, dword [ebp - 0x68]
call fcn.00435a68
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
cmp byte [edx + 7], 0
je 0x448618
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 8
call fcn.004363cc
jmp 0x448626
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 7
call fcn.004363cc
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov byte [ebp - 0x1ac], 0
mov dword [ebp - 0x78], 8
mov eax, dword [ebp - 0x70]
xor ecx, ecx
mov dword [0x53d604], ecx
lea edx, [eax + 8]
mov dword [ebp - 0xa4], edx
mov ecx, dword [ebp - 0xa4]
cmp byte [ecx], 0
je 0x4486d2
mov eax, dword [ebp - 0xa4]
movsx edx, byte [eax]
cmp edx, 0x20
jne 0x44867b
mov ecx, dword [ebp - 0xa4]
mov byte [ecx], 0
jmp 0x4486d2
mov eax, dword [ebp - 0xa4]
movsx edx, byte [eax]
cmp edx, 0x3a
jne 0x4486c0
mov ecx, dword [ebp - 0xa4]
lea esi, [ebp - 0x1ac]
mov byte [ecx], 0
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x70]
inc eax
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4486d2
inc dword [ebp - 0x78]
inc dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0x80
jl 0x448657
push 0x1e
mov eax, dword [ebp - 0x70]
add eax, 7
push eax
push 0x541ca4
call fcn.00503d68
add esp, 0xc
mov eax, dword [ebp - 0x68]
call fcn.0041d1e4
mov edx, dword [ebp - 0x70]
add edx, 7
mov ecx, 1
mov eax, dword [ebp - 0x68]
call fcn.0045f15c
cmp byte [ebp - 0x1ac], 0
je 0x44871a
lea edx, [ebp - 0x1ac]
mov eax, dword [ebp - 0x68]
call fcn.00446dbc
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
cmp byte [0x54293e], 0
je 0x448739
mov byte [0x541e80], 1
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 5
call fcn.00423a2c
mov edx, eax
mov eax, dword [ebp - 0x68]
call fcn.00425908
mov word [ebp - 0x54], 0x20
mov edx, 0x541cfe
lea eax, [ebp - 8]
call fcn.0050f7a0
mov edx, eax
inc dword [ebp - 0x48]
mov eax, dword [ebp - 0x68]
add eax, 0x2fab8
call fcn.0050f930
dec dword [ebp - 0x48]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0050f900
mov eax, dword [ebp - 0x68]
mov ecx, dword [0x541488]
mov dword [eax + 0x2fabc], ecx
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov ecx, dword [edx + 0x43c]
mov dword [eax + 0x2fac0], ecx
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 6
call fcn.00437848
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 4
call fcn.00437d30
test al, al
je 0x448961
mov dword [ebp - 0x78], 4
mov edx, dword [ebp - 0x70]
lea ecx, [edx + 4]
mov dword [ebp - 0xa4], ecx
mov eax, dword [ebp - 0xa4]
movsx edx, byte [eax]
cmp edx, 0x29
je 0x448822
mov ecx, dword [ebp - 0xa4]
cmp byte [ecx], 0
je 0x448822
inc dword [ebp - 0x78]
inc dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0xc8
jl 0x4487f7
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], 0xc8
jge 0x448961
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x78]
mov cl, byte [eax + edx]
mov byte [ebp - 0x95], cl
movsx eax, byte [ebp - 0x95]
cmp eax, 0x2a
je 0x448869
movsx edx, byte [ebp - 0x95]
cmp edx, 0x40
je 0x448869
movsx ecx, byte [ebp - 0x95]
cmp ecx, 0x21
jne 0x448911
xor eax, eax
mov dword [ebp - 0x7c], eax
mov edx, dword [ebp - 0x70]
mov ecx, edx
mov dword [ebp - 0xac], ecx
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x78]
lea ecx, [eax + edx]
mov dword [ebp - 0xa8], ecx
mov eax, dword [ebp - 0xa8]
mov dl, byte [eax]
mov byte [ebp - 0x95], dl
inc dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xac]
mov al, byte [ebp - 0x95]
mov byte [ecx], al
cmp byte [ebp - 0x95], 0
jne 0x4488d9
mov eax, 2
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x48]
call fcn.0050f900
pop eax
mov edx, dword [ebp - 0x64]
mov dword fs:[0], edx
jmp 0x449f8f
inc dword [ebp - 0x7c]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x7c], 0xc8
jl 0x448888
mov eax, 1
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x48]
call fcn.0050f900
pop eax
mov edx, dword [ebp - 0x64]
mov dword fs:[0], edx
jmp 0x449f8f
movsx ecx, byte [ebp - 0x95]
cmp ecx, 0x20
je 0x448951
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, dword [ebp - 0x78]
call fcn.00446dbc
mov eax, 1
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x48]
call fcn.0050f900
pop eax
mov edx, dword [ebp - 0x64]
mov dword fs:[0], edx
jmp 0x449f8f
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], 0xc8
jl 0x448832
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 7
call fcn.0042918c
jmp case.default.0x448169
mov byte [ebp - 0x1ac], 0
mov dword [ebp - 0x78], 7
mov ecx, dword [ebp - 0x70]
lea eax, [ecx + 7]
mov dword [ebp - 0xa4], eax
mov edx, dword [ebp - 0xa4]
cmp byte [edx], 0
je 0x448a15
mov ecx, dword [ebp - 0xa4]
movsx eax, byte [ecx]
cmp eax, 0x20
jne 0x4489c1
mov edx, dword [ebp - 0xa4]
mov byte [edx], 0
jmp 0x448a15
mov ecx, dword [ebp - 0xa4]
movsx eax, byte [ecx]
cmp eax, 0x3a
jne 0x448a06
mov edx, dword [ebp - 0xa4]
xor eax, eax
lea esi, [ebp - 0x1ac]
mov byte [edx], 0
mov ecx, dword [ebp - 0x78]
add ecx, dword [ebp - 0x70]
inc ecx
mov edi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x448a15
inc dword [ebp - 0x78]
inc dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0x64
jl 0x44899d
mov eax, dword [0x53d604]
mov edx, dword [0x54148c]
mov edi, 0x541ca4
mov dword [eax*4 + 0x53d830], edx
mov ecx, dword [0x53d604]
xor eax, eax
add ecx, ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
add ecx, 0x53d608
mov esi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x70]
movsx edx, byte [eax + 6]
cmp edx, 0x24
jne 0x448adf
mov ecx, dword [ebp - 0x70]
movsx eax, byte [ecx + 7]
add eax, 0xffffffd0
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x448a84
cmp dword [ebp - 0x74], 9
jle 0x448a89
xor edx, edx
mov dword [ebp - 0x74], edx
mov ecx, dword [ebp - 0x74]
xor eax, eax
shl ecx, 6
mov esi, 0x541ca4
add ecx, 0x53d88c
mov edi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, 0x541ca4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 1
mov eax, dword [ebp - 0x68]
call fcn.0045f15c
cmp al, 1
jne 0x448b2e
mov eax, dword [ebp - 0x68]
call fcn.0041d1e4
inc dword [0x53d604]
jmp 0x448b2e
mov edx, dword [ebp - 0x70]
add edx, 6
mov ecx, 1
mov eax, dword [ebp - 0x68]
call fcn.0045f15c
cmp al, 1
jne 0x448b2e
mov edx, dword [ebp - 0x70]
xor eax, eax
add edx, 6
or ecx, 0xffffffff
mov edi, edx
mov esi, 0x541ca4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x68]
call fcn.0041d1e4
inc dword [0x53d604]
cmp byte [ebp - 0x1ac], 0
je 0x448b45
lea edx, [ebp - 0x1ac]
mov eax, dword [ebp - 0x68]
call fcn.00446dbc
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
cmp dword [0x53d604], 0
je 0x448bd7
dec dword [0x53d604]
mov ecx, 1
mov edx, dword [0x53d604]
mov eax, dword [ebp - 0x68]
add edx, edx
lea edx, [edx + edx*2]
lea edx, [edx + edx*4]
add edx, 0x53d608
call fcn.0045f15c
mov edx, dword [0x53d604]
xor eax, eax
add edx, edx
mov esi, 0x541ca4
lea edx, [edx + edx*2]
lea edx, [edx + edx*4]
add edx, 0x53d608
or ecx, 0xffffffff
mov edi, edx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x53d604]
mov edx, dword [eax*4 + 0x53d830]
mov dword [0x54148c], edx
mov byte [0x541485], 1
jmp 0x448bfc
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x28d18]
dec eax
je 0x448be8
dec eax
je 0x448bf2
jmp 0x448bfc
mov eax, dword [ebp - 0x68]
call fcn.00410240
jmp 0x448bfc
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0041750c
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
xor edx, edx
mov ecx, dword [ebp - 0x70]
add ecx, 6
mov dword [0x541db4], edx
push ecx
call fcn.00408540
pop ecx
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x68]
xor edx, edx
mov dword [eax + 0x3040], 0xffffff
mov eax, dword [ebp - 0x68]
call fcn.00419864
mov edx, dword [ebp - 0x68]
mov ecx, dword [edx + 0x3204]
cmp ecx, dword [ebp - 0x74]
je 0x448cbc
mov eax, dword [ebp - 0x68]
call fcn.004462bc
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x3204], 0
jne 0x448c8d
mov ecx, dword [ebp - 0x68]
mov dword [ecx + 0x3204], 1
mov eax, dword [ebp - 0x68]
mov dword [eax + 0x28d1c], 2
mov eax, dword [ebp - 0x68]
call fcn.00423620
mov edx, 6
mov eax, dword [ebp - 0x68]
call fcn.00425908
jmp 0x448cbc
mov edx, dword [ebp - 0x68]
xor ecx, ecx
mov dword [edx + 0x3204], ecx
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0044db8c
mov ecx, dword [ebp - 0x68]
mov edx, 6
mov dword [ecx + 0x28d1c], 1
mov eax, dword [ebp - 0x68]
call fcn.00425908
mov dword [ebp - 0x9c], 1
mov byte [0x541485], 1
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.0043a728
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0042f700
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
xor edx, edx
mov dword [ebp - 0x78], edx
mov ecx, dword [ebp - 0x68]
lea eax, [ecx + 0xfec]
mov dword [ebp - 0xa4], eax
mov edx, dword [ebp - 0xa4]
mov byte [edx], 0
inc dword [ebp - 0x78]
inc dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0x80
jl 0x448d11
xor ecx, ecx
mov dword [ebp - 0x78], ecx
mov eax, dword [ebp - 0x68]
lea edx, [eax + 0xb0a]
mov dword [ebp - 0xa4], edx
mov ecx, dword [ebp - 0xa4]
mov byte [ecx], 0
inc dword [ebp - 0x78]
inc dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0x4e2
jl 0x448d40
xor eax, eax
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x68]
lea ecx, [edx + 0x106c]
mov dword [ebp - 0xa4], ecx
mov eax, dword [ebp - 0xa4]
xor edx, edx
mov dword [eax], edx
inc dword [ebp - 0x78]
add dword [ebp - 0xa4], 4
cmp dword [ebp - 0x78], 0x3e8
jl 0x448d6f
mov edx, 0x52fc9e
mov eax, dword [ebp - 0x68]
call fcn.00454dfc
jmp case.default.0x448169
mov byte [0x53d878], 1
mov edx, dword [ebp - 0x70]
add edx, 5
mov eax, dword [ebp - 0x68]
call fcn.004224dc
jmp case.default.0x448169
mov ecx, dword [ebp - 0x68]
cmp dword [ecx + 0x3204], 0
jne case.default.0x448169
cmp byte [0x53d854], 0
je case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.0044bd84
jmp case.default.0x448169
cmp dword [0x541e74], 0
je 0x448e06
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x27d24], 0
je 0x448e06
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 9
call fcn.00437ff4
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov word [ebp - 0x54], 0x2c
mov edx, 0x52fca3
lea eax, [ebp - 0xc]
call fcn.0050f7a0
inc dword [ebp - 0x48]
mov ecx, dword [eax]
mov dl, 1
mov eax, dword [0x480e58]
call fcn.00481540
mov ecx, dword [ebp - 0x68]
mov edx, 2
mov dword [ecx + 0x694], eax
lea eax, [ebp - 0xc]
dec dword [ebp - 0x48]
call fcn.0050f900
push 0
mov edx, 0x52fcba
lea eax, [ebp - 0x14]
call fcn.0050f7a0
inc dword [ebp - 0x48]
mov edx, 0x52fcb5
mov ecx, dword [eax]
lea eax, [ebp - 0x10]
push ecx
mov word [ebp - 0x54], 0x38
call fcn.0050f7a0
inc dword [ebp - 0x48]
mov edx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x694]
pop ecx
call fcn.00481750
mov dword [0x5428b0], eax
dec dword [ebp - 0x48]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0050f900
dec dword [ebp - 0x48]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0050f900
inc dword [0x5428b0]
mov edx, 0x52fcc5
mov ecx, dword [0x5428b0]
lea eax, [ebp - 0x1c]
push ecx
call fcn.0050f7a0
inc dword [ebp - 0x48]
mov edx, 0x52fcc0
mov ecx, dword [eax]
lea eax, [ebp - 0x18]
push ecx
mov word [ebp - 0x54], 0x44
call fcn.0050f7a0
inc dword [ebp - 0x48]
mov edx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x694]
pop ecx
call fcn.00481850
dec dword [ebp - 0x48]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0050f900
dec dword [ebp - 0x48]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0050f900
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x694]
call fcn.004958a0
mov edx, dword [0x5428b0]
mov ecx, dword [ebp - 0x68]
mov dword [ecx + 0x313c], edx
mov edx, 0x3e7
mov eax, dword [ebp - 0x68]
call fcn.00436af0
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.00432fb8
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 0xb
call fcn.00428ffc
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 7
call fcn.00439d78
jmp case.default.0x448169
mov ecx, dword [ebp - 0x70]
add ecx, 6
push ecx
call fcn.00408540
pop ecx
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl case.default.0x448169
cmp dword [ebp - 0x74], 0x13880
jg case.default.0x448169
mov ecx, dword [ebp - 0x74]
mov eax, 1
and ecx, 7
mov edx, dword [ebp - 0x74]
shl eax, cl
sar edx, 3
mov ecx, dword [ebp - 0x68]
movzx edx, byte [ecx + edx + 0x3f74]
and eax, edx
je 0x448fdc
mov byte [0x53d87a], 1
jmp case.default.0x448169
mov ecx, dword [ebp - 0x74]
mov al, 1
and ecx, 7
mov edx, dword [ebp - 0x74]
shl al, cl
sar edx, 3
mov ecx, dword [ebp - 0x68]
or byte [ecx + edx + 0x3f74], al
mov eax, dword [ebp - 0x68]
cmp byte [eax + 0x2636c], 0
je case.default.0x448169
mov byte [0x53d87a], 0
xor edx, edx
mov dword [0x541e74], edx
mov eax, dword [ebp - 0x68]
xor edx, edx
mov dword [eax + 0x309c], edx
mov edx, 1
mov eax, dword [ebp - 0x68]
call fcn.0044db8c
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 4
call fcn.00422e74
jmp case.default.0x448169
push 0xcc0020
push 0
push 0
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x2f8]
mov eax, dword [eax + 0x160]
call fcn.004bd910
push eax
push 0x258
push 0x320
push 0
push 0
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x3d8]
call fcn.004c1eb4
call fcn.004bd910
push eax
call sub.gdi32.dll_BitBlt
mov edx, dword [ebp - 0x68]
xor ecx, ecx
mov dword [edx + 0x3008], ecx
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x3d8]
call fcn.004c1eb4
call fcn.004bd910
push eax
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x3d8]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x3d8]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x3dc]
call fcn.004c1eb4
call fcn.004bd910
push eax
call sub.gdi32.dll_BitBlt
jmp case.default.0x448169
cmp dword [0x541e74], 0
jne case.default.0x448169
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x3014], 0
jne case.default.0x448169
mov ecx, dword [ebp - 0x70]
add ecx, 7
push ecx
call fcn.00408540
pop ecx
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov ecx, 0x1e
cdq
idiv ecx
mov edx, dword [ebp - 0x68]
mov dword [edx + 0x28d2c], eax
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x28d2c], 0
jne 0x44914c
mov ecx, dword [ebp - 0x68]
mov dword [ecx + 0x28d2c], 0xffffffff
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.0043a728
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov edx, dword [ebp - 0x70]
add edx, 9
push edx
call fcn.00408540
pop ecx
mov edx, eax
mov eax, dword [ebp - 0x68]
call fcn.0043c888
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov ecx, dword [ebp - 0x70]
add ecx, 8
push ecx
call fcn.00408540
pop ecx
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x70]
shl eax, 6
add edx, 0xa
add eax, 0x53d88c
mov edi, edx
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 8
call fcn.00429370
jmp case.default.0x448169
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov edx, 1
mov eax, dword [ebp - 0x68]
call fcn.0042f700
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.00446d48
mov dl, 1
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.0044bf9c
jmp case.default.0x448169
xor edx, edx
mov dword [ebp - 0x78], edx
mov dword [ebp - 0xac], 0x53dacc
mov ecx, dword [ebp - 0x70]
lea eax, [ecx + 7]
mov dword [ebp - 0xa4], eax
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xac]
mov cl, byte [edx]
mov byte [eax], cl
mov edx, dword [ebp - 0xa4]
cmp byte [edx], 0
je 0x44928d
inc dword [ebp - 0x78]
inc dword [ebp - 0xac]
inc dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0x3f
jl 0x44925d
mov ecx, dword [ebp - 0x78]
mov byte [ecx + 0x53dacc], 0
jmp case.default.0x448169
mov eax, dword [0x541488]
mov edx, dword [ebp - 0x68]
mov dword [edx + 0x2fd4], eax
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 5
call fcn.004595f4
mov eax, dword [ebp - 0x68]
call fcn.0043a728
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 9
call fcn.004531cc
jmp case.default.0x448169
mov dl, 1
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov edx, dword [ebp - 0x70]
add edx, 6
xor ecx, ecx
mov eax, dword [ebp - 0x68]
call fcn.0044fec4
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
movsx ecx, byte [edx + 5]
cmp ecx, 0x71
jne 0x449336
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 7
call fcn.004085d4
jmp 0x449346
mov edx, dword [ebp - 0x70]
add edx, 6
xor ecx, ecx
mov eax, dword [ebp - 0x68]
call fcn.0040778c
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
cmp dword [0x541e74], 0
je 0x449379
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x27d24], 0
je 0x449379
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov edx, dword [sym.mbl.exe__Form1]
mov ecx, dword [edx]
mov edx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx + 0x44]
mov dword [ebp - 0x94], eax
mov ecx, dword [edx]
mov eax, dword [ecx + 0x40]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x88], 0x14
mov dword [ebp - 0x8c], 0x32
mov dword [ebp - 0x78], 7
mov edx, dword [ebp - 0x70]
add edx, 7
push edx
call fcn.00408540
pop ecx
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x70]
lea eax, [ecx + 7]
mov dword [ebp - 0xac], eax
mov edx, dword [ebp - 0xac]
cmp byte [edx], 0
je 0x44941b
mov ecx, dword [ebp - 0xac]
movsx eax, byte [ecx]
cmp eax, 0x2c
jne 0x44940c
inc dword [ebp - 0xac]
inc dword [ebp - 0x78]
mov edx, dword [ebp - 0x78]
add edx, dword [ebp - 0x70]
push edx
call fcn.00408540
pop ecx
mov dword [ebp - 0x88], eax
jmp 0x44941b
inc dword [ebp - 0x78]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x78], 0x32
jl 0x4493d5
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x78]
lea edx, [ecx + eax]
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0x78], 0x32
jge 0x449476
mov ecx, dword [ebp - 0xac]
cmp byte [ecx], 0
je 0x449476
mov eax, dword [ebp - 0xac]
movsx edx, byte [eax]
cmp edx, 0x2c
jne 0x449467
inc dword [ebp - 0xac]
inc dword [ebp - 0x78]
mov ecx, dword [ebp - 0x78]
add ecx, dword [ebp - 0x70]
push ecx
call fcn.00408540
pop ecx
mov dword [ebp - 0x8c], eax
jmp 0x449476
inc dword [ebp - 0x78]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x78], 0x32
jl 0x449430
mov eax, dword [ebp - 0x68]
call fcn.00425c4c
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 0
jle 0x4496df
mov ecx, dword [ebp - 0x84]
sub ecx, 1
jb 0x4494a6
je 0x4494e1
dec ecx
je 0x44951d
jmp case.default.0x44952e
test byte [ebp - 0x78], 2
je 0x4494c6
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x78]
mov eax, dword [sym.mbl.exe__Form1]
mov eax, dword [eax]
call fcn.004dc7e8
jmp case.default.0x44952e
mov edx, dword [ebp - 0x94]
sub edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7e8
jmp case.default.0x44952e
test byte [ebp - 0x78], 2
je 0x449502
mov edx, dword [ebp - 0x90]
add edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7c4
jmp case.default.0x44952e
mov edx, dword [ebp - 0x90]
sub edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7c4
jmp case.default.0x44952e
call fcn.00508884
and eax, 7
cmp eax, 7
ja case.default.0x44952e
jmp dword [eax*4 + 0x449535]
mov edx, dword [ebp - 0x94]
sub edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7e8
mov edx, dword [sym.mbl.exe__Form1]
mov eax, dword [edx]
mov edx, dword [ebp - 0x90]
call fcn.004dc7c4
jmp case.default.0x44952e
mov edx, dword [ebp - 0x94]
sub edx, dword [ebp - 0x78]
mov eax, dword [sym.mbl.exe__Form1]
mov eax, dword [eax]
call fcn.004dc7e8
mov edx, dword [ebp - 0x90]
add edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7c4
jmp case.default.0x44952e
mov edx, dword [sym.mbl.exe__Form1]
mov eax, dword [edx]
mov edx, dword [ebp - 0x94]
call fcn.004dc7e8
mov edx, dword [ebp - 0x90]
add edx, dword [ebp - 0x78]
mov eax, dword [sym.mbl.exe__Form1]
mov eax, dword [eax]
call fcn.004dc7c4
jmp case.default.0x44952e
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7e8
mov edx, dword [ebp - 0x90]
add edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7c4
jmp case.default.0x44952e
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7e8
mov edx, dword [sym.mbl.exe__Form1]
mov eax, dword [edx]
mov edx, dword [ebp - 0x90]
call fcn.004dc7c4
jmp case.default.0x44952e
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x78]
mov eax, dword [sym.mbl.exe__Form1]
mov eax, dword [eax]
call fcn.004dc7e8
mov edx, dword [ebp - 0x90]
sub edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7c4
jmp case.default.0x44952e
mov edx, dword [sym.mbl.exe__Form1]
mov eax, dword [edx]
mov edx, dword [ebp - 0x94]
call fcn.004dc7e8
mov edx, dword [ebp - 0x90]
sub edx, dword [ebp - 0x78]
mov eax, dword [sym.mbl.exe__Form1]
mov eax, dword [eax]
call fcn.004dc7c4
jmp case.default.0x44952e
mov edx, dword [ebp - 0x94]
sub edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7e8
mov edx, dword [ebp - 0x90]
sub edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7c4
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x68]
call fcn.00425c60
add eax, eax
sub dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jg 0x449491
mov edx, dword [sym.mbl.exe__Form1]
mov eax, dword [edx]
mov edx, dword [ebp - 0x94]
call fcn.004dc7e8
mov ecx, dword [sym.mbl.exe__Form1]
mov edx, dword [ebp - 0x90]
mov eax, dword [ecx]
call fcn.004dc7c4
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x2fc4]
mov dword [ebp - 0x74], eax
mov edx, dword [ebp - 0x70]
cmp byte [edx + 5], 0
je 0x44975d
mov word [ebp - 0x54], 0x50
mov edx, dword [ebp - 0x70]
lea eax, [ebp - 0x20]
add edx, 6
call fcn.0050f7a0
inc dword [ebp - 0x48]
mov edx, dword [eax]
mov eax, dword [ebp - 0x68]
call fcn.00436ed4
mov dword [ebp - 0x74], eax
dec dword [ebp - 0x48]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0050f900
mov ecx, dword [0x54148c]
mov edx, dword [0x54148c]
mov dword [ebp - 0x84], ecx
mov cl, 0x7d
mov eax, dword [ebp - 0x68]
call fcn.00449f98
add eax, 2
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x78]
cmp edx, dword [ebp - 0x74]
jg 0x4497db
mov cl, 0x7b
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x68]
call fcn.00449f98
add eax, 2
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x84]
cmp ecx, dword [ebp - 0x80]
jle 0x4497ba
mov eax, dword [ebp - 0x80]
mov dword [0x54148c], eax
jmp 0x4497db
mov edx, dword [ebp - 0x78]
cmp edx, dword [ebp - 0x74]
jne 0x4497d0
mov ecx, dword [ebp - 0x84]
mov dword [0x54148c], ecx
jmp 0x4497db
inc dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x74]
jle 0x44978c
mov byte [0x541485], 1
xor edx, edx
mov dword [ebp - 0x9c], edx
jmp case.default.0x448169
mov byte [0x541e81], 1
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov ecx, dword [sym.mbl.exe__Form2]
mov eax, dword [ecx]
mov edx, dword [eax]
call dword [edx + 0xe8]
mov eax, dword [ebp - 0x68]
add eax, 0x28bf4
call fcn.00403b0c
mov edx, eax
mov eax, 0x53d88c
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x449881
test cl, cl
je 0x449840
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x449881
add eax, 2
add edx, 2
test cl, cl
jne 0x449824
jne 0x449881
mov eax, dword [ebp - 0x68]
add eax, 0x28bf8
call fcn.00403b0c
mov edx, eax
mov eax, 0x53d8cc
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x449881
test cl, cl
je 0x449872
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x449881
add eax, 2
add edx, 2
test cl, cl
jne 0x449856
jne 0x449881
mov edx, dword [ebp - 0x68]
xor eax, eax
mov dword [edx + 0x2fc4], eax
jmp 0x44988e
mov edx, dword [ebp - 0x68]
mov dword [edx + 0x2fc4], 1
mov dword [ebp - 0x9c], 1
mov byte [0x541e81], 0
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 5
call fcn.0042568c
mov dword [ebp - 0x9c], 1
mov byte [0x53d854], 0
jmp case.default.0x448169
mov dl, 1
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 8
call fcn.00409fc8
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
cmp dword [0x541e74], 0
je 0x449911
mov ecx, dword [ebp - 0x68]
cmp dword [ecx + 0x27d24], 0
je 0x449911
xor eax, eax
mov dword [ebp - 0x9c], eax
jmp case.default.0x448169
mov word [ebp - 0x54], 0x5c
lea eax, [ebp - 0x28]
call fcn.00401d04
push eax
lea eax, [ebp - 0x24]
inc dword [ebp - 0x48]
mov edx, dword [ebp - 0x70]
add edx, 4
call fcn.0050f7a0
inc dword [ebp - 0x48]
pop edx
call fcn.0050fb78
lea edx, [ebp - 0x28]
lea eax, [ebp - 4]
call fcn.0050f930
dec dword [ebp - 0x48]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0050f900
dec dword [ebp - 0x48]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0050f900
mov word [ebp - 0x54], 0x68
lea eax, [ebp - 0x2c]
call fcn.00401d04
push eax
lea eax, [ebp - 4]
inc dword [ebp - 0x48]
mov ecx, 3
mov edx, 1
call fcn.0050fc00
lea eax, [ebp - 0x2c]
push eax
mov edx, 0x52fccb
lea eax, [ebp - 0x30]
call fcn.0050f7a0
inc dword [ebp - 0x48]
lea edx, [ebp - 0x30]
pop eax
call fcn.0050f9e4
push eax
dec dword [ebp - 0x48]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0050f900
dec dword [ebp - 0x48]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0050f900
pop ecx
test cl, cl
je 0x449a6f
lea eax, [ebp - 4]
mov edx, 4
call fcn.00404bc4
mov cl, byte [eax]
add cl, 0xd0
mov byte [ebp - 0x95], cl
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x263c8], 0
jne 0x449a01
cmp byte [ebp - 0x95], 0
je case.default.0x448169
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x263cc], 0
jne 0x449a1b
movsx ecx, byte [ebp - 0x95]
dec ecx
je case.default.0x448169
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x263d0], 0
jne 0x449a37
movsx edx, byte [ebp - 0x95]
cmp edx, 2
je case.default.0x448169
mov ecx, dword [ebp - 0x68]
cmp dword [ecx + 0x263d4], 0
jne 0x449a53
movsx eax, byte [ebp - 0x95]
cmp eax, 3
je case.default.0x448169
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x263d8], 0
jne 0x449a6f
movsx ecx, byte [ebp - 0x95]
cmp ecx, 4
je case.default.0x448169
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x68]
call fcn.00410984
jmp case.default.0x448169
mov word [ebp - 0x54], 0x74
lea eax, [ebp - 0x38]
call fcn.00401d04
push eax
lea eax, [ebp - 0x34]
inc dword [ebp - 0x48]
mov edx, dword [ebp - 0x70]
add edx, 8
call fcn.0050f7a0
inc dword [ebp - 0x48]
pop edx
call fcn.0050fb78
lea edx, [ebp - 0x38]
lea eax, [ebp - 4]
call fcn.0050f930
dec dword [ebp - 0x48]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.0050f900
dec dword [ebp - 0x48]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0050f900
mov word [ebp - 0x54], 0x80
lea eax, [ebp - 0x3c]
call fcn.00401d04
push eax
lea eax, [ebp - 4]
inc dword [ebp - 0x48]
mov ecx, 3
mov edx, 1
call fcn.0050fc00
lea eax, [ebp - 0x3c]
push eax
mov edx, 0x52fccf
lea eax, [ebp - 0x40]
call fcn.0050f7a0
inc dword [ebp - 0x48]
lea edx, [ebp - 0x40]
pop eax
call fcn.0050f9e4
push eax
dec dword [ebp - 0x48]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.0050f900
dec dword [ebp - 0x48]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0050f900
pop ecx
test cl, cl
je 0x449c34
lea eax, [ebp - 4]
mov edx, 4
call fcn.00404bc4
mov cl, byte [eax]
add cl, 0xd0
mov byte [ebp - 0x95], cl
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x263c8], 0
jne 0x449b74
cmp byte [ebp - 0x95], 0
je case.default.0x448169
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x263cc], 0
jne 0x449b8e
movsx ecx, byte [ebp - 0x95]
dec ecx
je case.default.0x448169
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x263d0], 0
jne 0x449baa
movsx edx, byte [ebp - 0x95]
cmp edx, 2
je case.default.0x448169
mov ecx, dword [ebp - 0x68]
cmp dword [ecx + 0x263d4], 0
jne 0x449bc6
movsx eax, byte [ebp - 0x95]
cmp eax, 3
je case.default.0x448169
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x263d8], 0
jne 0x449be2
movsx ecx, byte [ebp - 0x95]
cmp ecx, 4
je case.default.0x448169
movsx eax, byte [ebp - 0x95]
cmp eax, 4
jne 0x449c34
lea eax, [ebp - 4]
mov edx, 9
call fcn.00404bc4
mov cl, byte [eax]
lea eax, [ebp - 4]
add cl, 0xcf
mov edx, 0xb
mov byte [ebp - 0x95], cl
call fcn.00404bc4
mov dword [ebp - 0xa0], eax
movsx ecx, byte [ebp - 0x95]
mov dl, byte [eax]
mov eax, dword [ebp - 0x68]
add dl, byte [eax + ecx*4 + 0x263dc]
mov ecx, dword [ebp - 0xa0]
mov byte [ecx], dl
mov ecx, 2
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x68]
call fcn.00410984
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.004118cc
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.004ccd10
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
xor edx, edx
mov dword [ebp - 0x78], edx
mov ecx, dword [ebp - 0x68]
lea eax, [ecx + 0xfec]
mov dword [ebp - 0xac], eax
mov edx, dword [ebp - 0xac]
mov byte [edx], 0
inc dword [ebp - 0x78]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x78], 0x80
jl 0x449c81
xor ecx, ecx
mov dword [ebp - 0x78], ecx
mov eax, dword [ebp - 0x68]
lea edx, [eax + 0x106c]
mov dword [ebp - 0xac], edx
mov ecx, dword [ebp - 0xac]
xor eax, eax
mov dword [ecx], eax
inc dword [ebp - 0x78]
add dword [ebp - 0xac], 4
cmp dword [ebp - 0x78], 0x3e8
jl 0x449cb0
xor eax, eax
or ecx, 0xffffffff
mov edi, 0x541cc2
mov esi, 0x541d58
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x3208], 2
je 0x449d26
mov edx, dword [ebp - 0x68]
mov dword [edx + 0x3208], 1
mov ecx, dword [ebp - 0x68]
xor eax, eax
mov dword [ecx + 0x320c], eax
mov edx, dword [ebp - 0x68]
mov dword [edx + 0x3210], eax
jmp case.default.0x448169
mov ecx, dword [ebp - 0x68]
xor eax, eax
mov dword [ecx + 0x3210], eax
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.004462bc
mov edx, dword [ebp - 0x70]
add edx, 8
push edx
call fcn.00408540
pop ecx
test eax, eax
je 0x449d5b
mov byte [0x53d854], 1
jmp case.default.0x448169
mov byte [0x53d854], 0
jmp case.default.0x448169
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x28d18]
dec eax
je 0x449d78
dec eax
je 0x449d82
jmp 0x449d8c
mov eax, dword [ebp - 0x68]
call fcn.00410240
jmp 0x449d8c
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0041750c
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 5
call fcn.0042cb6c
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.0042f0c4
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 8
call fcn.00429738
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.004145e4
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.0045934c
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
xor edx, edx
mov dword [ebp - 0x78], edx
jmp 0x449e25
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x68]
call fcn.00436c60
inc dword [ebp - 0x78]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x26400]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x78]
jg 0x449e17
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
cmp dword [0x541e74], 0
je 0x449e6b
mov ecx, dword [ebp - 0x68]
cmp dword [ecx + 0x27d24], 0
je 0x449e6b
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 8
call fcn.00452464
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov ecx, dword [ebp - 0x68]
cmp dword [ecx + 0x28d18], 0
je 0x449eb9
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x28d18]
dec edx
je 0x449ea5
dec edx
je 0x449eaf
jmp 0x449eb9
mov eax, dword [ebp - 0x68]
call fcn.00410240
jmp 0x449eb9
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0041750c
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 7
call fcn.00454754
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 7
call fcn.00454dfc
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 9
call fcn.0045522c
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x70]
add edx, 9
mov eax, dword [ebp - 0x68]
mov ecx, dword [ecx + 0x3ec]
call fcn.0044cf08
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
mov eax, dword [ebp - 0x68]
call fcn.00460838
mov dword [ebp - 0x9c], 1
jmp case.default.0x448169
push 5
push 0
push 0
mov edx, dword [ebp - 0x70]
add edx, 5
push edx
push 0
mov eax, dword [ebp - 0x68]
call fcn.004e37c0
push eax
call sub.shell32.dll_ShellExecuteA
mov dword [ebp - 0x9c], 1
mov eax, dword [ebp - 0x9c]
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x48]
call fcn.0050f900
pop eax
mov edx, dword [ebp - 0x64]
mov dword fs:[0], edx
pop edi
pop esi
mov esp, ebp
pop ebp
ret