Function at 0x42e81d
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x572616
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1b784
call fcn.0054c740
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1b784], ecx
lea eax, [ebp - 0x1a688]
push eax
mov ecx, dword [ebp - 0x1b784]
call fcn.00426972
lea ecx, [ebp - 0x6468]
push ecx
call fcn.00529440
add esp, 4
push str.UFD_MP_spareSort.Txt
lea edx, [ebp - 0x6468]
push edx
call fcn.0054bea0
add esp, 8
mov dword [ebp - 0x1aaa8], 0x10000000
mov dword [ebp - 0x1aaac], 0
mov dword [ebp - 0x1af54], 0
mov dword [ebp - 0x1aa9c], 0
push 0x4000
push 0
lea eax, [ebp - 0x1a674]
push eax
call fcn.0054bf90
add esp, 0xc
push 0x10000
push 0
lea ecx, [ebp - 0x16670]
push ecx
call fcn.0054bf90
add esp, 0xc
mov ecx, dword [ebp - 0x1b784]
call fcn.00426df4
mov edx, dword [ebp - 0x1b784]
mov dword [edx + 0x60], eax
mov eax, dword [ebp - 0x1b784]
cmp dword [eax + 0x60], 0
jne 0x42e8fc
xor eax, eax
jmp 0x42fdab
push 0x46d
mov ecx, dword [ebp - 0x1b784]
call fcn.005654d4
mov dword [ebp - 0x16674], eax
push 0x64
push 0
mov ecx, dword [ebp - 0x16674]
call fcn.00411940
push 0
mov ecx, dword [ebp - 0x16674]
call fcn.00411a50
cmp dword [0x673ea0], 8
jl 0x42f15e
cmp dword [0x673ea0], 0xd
jg 0x42f15e
push 0
push 0x200
lea ecx, [ebp - 0x6668]
push ecx
mov edx, dword [ebp - 0x1b784]
mov eax, dword [edx + 0x6c]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x78]
push edx
mov eax, dword [ebp - 0x1b784]
mov ecx, dword [eax + 0x74]
push ecx
mov edx, dword [0x67aaa8]
push edx
call fcn.0051a525
add esp, 0x1c
lea eax, [ebp - 0x1af4c]
push eax
lea ecx, [ebp - 0x6668]
push ecx
call fcn.0051d0f3
add esp, 8
push 0x10
lea edx, [ebp - 0x4264]
push edx
push 0x3f0
mov ecx, dword [ebp - 0x1b784]
call fcn.005654d4
mov ecx, eax
call fcn.005656a4
lea eax, [ebp - 0x4264]
push eax
call fcn.00529529
add esp, 4
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x1b784]
call fcn.0042df1f
test eax, eax
je 0x42e9ec
cmp dword [0x5dffac], 1
jl 0x42e9ec
cmp dword [0x5dffa8], 1
jge 0x42ea12
push 0
push 0
push str.Cant_Get_CardMode
mov ecx, dword [ebp - 0x1b784]
call fcn.00564245
mov ecx, dword [ebp - 0x1b784]
call fcn.00427253
xor eax, eax
jmp 0x42fdab
cmp dword [ebp + 8], 0
jne 0x42ea22
mov dword [0x5dffac], 1
mov ecx, dword [0x5dffa8]
imul ecx, dword [0x5dffac]
shl ecx, 4
cmp ecx, dword [ebp - 0x1aaa8]
jge 0x42ea50
mov edx, dword [0x5dffa8]
imul edx, dword [0x5dffac]
shl edx, 4
mov dword [ebp - 0x1aaa8], edx
cmp dword [ebp + 8], 2
je 0x42ea60
cmp dword [ebp + 8], 0
jne 0x42eeb6
mov eax, dword [ebp - 0x1aaa8]
push eax
call fcn.0054cfd4
add esp, 4
mov dword [ebp - 0x666c], eax
mov dword [ebp - 4], 0
mov dword [ebp - 0x1aaa0], 0
jmp 0x42ea97
mov ecx, dword [ebp - 0x1aaa0]
add ecx, 1
mov dword [ebp - 0x1aaa0], ecx
mov edx, dword [ebp - 0x1aaa0]
cmp edx, dword [0x5dffac]
jge 0x42ed5f
mov ecx, dword [0x5dffa8]
shl ecx, 4
mov eax, dword [ebp - 0x1aaa8]
cdq
idiv ecx
cmp eax, dword [ebp - 0x1aaa0]
jg 0x42eac8
jmp 0x42ed5f
mov dword [ebp - 0x1aaa4], 0
jmp 0x42eae3
mov edx, dword [ebp - 0x1aaa4]
add edx, 1
mov dword [ebp - 0x1aaa4], edx
mov eax, dword [ebp - 0x1aaa4]
cmp eax, dword [0x5dffa8]
jge 0x42ed55
push 0x10
push 0
lea ecx, [ebp - 0x1a698]
push ecx
call fcn.0054bf90
add esp, 0xc
mov byte [ebp - 0x1a698], 0xf0
mov byte [ebp - 0x1a697], 0xa
mov edx, 1
mov ecx, dword [0x5dffb0]
shl edx, cl
xor edx, 0xff
mov byte [ebp - 0x1a696], dl
cmp dword [ebp + 8], 0
je 0x42eb43
mov eax, dword [ebp - 0x1aaa0]
mov dword [ebp - 0x1b788], eax
jmp 0x42eb4c
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x1b788], ecx
mov dl, byte [ebp - 0x1b788]
mov byte [ebp - 0x1a695], dl
mov al, byte [ebp - 0x1aaa4]
mov byte [ebp - 0x1a694], al
mov ecx, dword [ebp - 0x1a67e]
and ecx, 0xffff
or ecx, 4
mov byte [ebp - 0x1a68f], cl
mov dl, byte [ebp - 0x1a67c]
mov byte [ebp - 0x1a68e], dl
mov eax, dword [0x5dffa0]
imul eax, dword [0x59f294]
mov byte [ebp - 0x1a68d], al
push 0x4200
push 0
lea ecx, [ebp - 0x4214]
push ecx
call fcn.0054bf90
add esp, 0xc
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x1aec5]
and edx, 0xff
test edx, edx
je 0x42ebe1
mov eax, dword [ebp - 0x1a695]
and eax, 0xff
cdq
idiv dword [ebp - 0x1aee0]
mov al, byte [eax + 0x59f2c8]
mov byte [ebp - 0x1a696], al
jmp 0x42ebff
mov eax, dword [ebp - 0x1a695]
and eax, 0xff
cdq
idiv dword [ebp - 0x1aee0]
mov cl, byte [eax + 0x59f2c0]
mov byte [ebp - 0x1a696], cl
jmp 0x42ec0e
mov dword [ebp - 4], 0
push 0
lea edx, [ebp - 0x1a698]
push edx
mov eax, dword [0x5dffa0]
imul eax, dword [0x59f294]
add eax, 1
shl eax, 9
push eax
lea ecx, [ebp - 0x4214]
push ecx
mov edx, dword [ebp - 0x1b784]
mov eax, dword [edx + 0x6c]
push eax
mov ecx, dword [ebp - 0x1b784]
mov dl, byte [ecx + 0x65]
push edx
mov eax, dword [ebp - 0x1b784]
mov cl, byte [eax + 0x64]
push ecx
mov edx, dword [ebp - 0x1b784]
mov eax, dword [edx + 0x68]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x78]
push edx
mov eax, dword [ebp - 0x1b784]
mov ecx, dword [eax + 0x74]
push ecx
mov edx, dword [ebp - 0x1b784]
mov eax, dword [edx + 0x5c]
push eax
call fcn.004c0e6e
add esp, 0x2c
mov dword [ebp - 0x1b78c], eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ebp - 0x1b78c]
mov dword [ecx + 0x60], edx
push 0x10
mov eax, dword [0x5dffa0]
imul eax, dword [0x59f294]
shl eax, 9
lea ecx, [ebp + eax - 0x4214]
push ecx
mov edx, dword [ebp - 0x1aaa0]
imul edx, dword [0x5dffa8]
add edx, dword [ebp - 0x1aaa4]
shl edx, 4
mov eax, dword [ebp - 0x666c]
add eax, edx
push eax
call fcn.0054c7e0
add esp, 0xc
push 3
mov ecx, dword [0x5dffa0]
imul ecx, dword [0x59f294]
shl ecx, 9
lea edx, [ebp + ecx - 0x4204]
push edx
mov eax, dword [ebp - 0x1aaa0]
imul eax, dword [0x5dffa8]
add eax, dword [ebp - 0x1aaa4]
shl eax, 4
mov ecx, dword [ebp - 0x666c]
lea edx, [ecx + eax + 5]
push edx
call fcn.0054c7e0
add esp, 0xc
mov ecx, dword [0x5dffa8]
imul ecx, dword [0x5dffac]
mov eax, dword [ebp - 0x1aaa0]
imul eax, dword [0x5dffa8]
add eax, dword [ebp - 0x1aaa4]
imul eax, eax, 0x64
cdq
idiv ecx
push eax
mov ecx, dword [ebp - 0x16674]
call fcn.00411a50
jmp 0x42ead4
call fcn.004ff6d8
jmp 0x42ea88
jmp 0x42ed7b
mov dword [ebp - 4], 0xffffffff
cmp dword [0x5dffa8], 0
jle 0x42edcc
mov edx, dword [ebp + 8]
neg edx
sbb edx, edx
not edx
and edx, dword [ebp - 0x14]
push edx
mov eax, dword [0x5dffa8]
push eax
push 0x2000
lea ecx, [ebp - 0x6268]
push ecx
lea edx, [ebp - 0x6468]
push edx
mov eax, dword [ebp - 0x1aaa8]
push eax
mov ecx, dword [ebp - 0x666c]
push ecx
mov ecx, dword [ebp - 0x1b784]
call fcn.0042feb0
jmp 0x42ee0a
mov edx, dword [ebp + 8]
neg edx
sbb edx, edx
not edx
and edx, dword [ebp - 0x14]
push edx
push pe_nt_image_headers32
push 0x2000
lea eax, [ebp - 0x6268]
push eax
lea ecx, [ebp - 0x6468]
push ecx
mov edx, dword [ebp - 0x1aaa8]
push edx
mov eax, dword [ebp - 0x666c]
push eax
mov ecx, dword [ebp - 0x1b784]
call fcn.0042feb0
push 0
push 0
lea ecx, [ebp - 0x6268]
push ecx
mov ecx, dword [ebp - 0x1b784]
call fcn.00564245
push 1
mov ecx, dword [ebp - 0x1b784]
call fcn.00564b39
push 0
mov edx, dword [ebp - 0x1aaa8]
push edx
mov eax, dword [ebp - 0x666c]
push eax
mov ecx, 0x5dfef8
call fcn.0045b573
push 1
push 1
push 1
push 1
mov ecx, 0x5dfef8
call fcn.004598b3
push 0x105
push 0
push 0
mov ecx, 0x5dfef8
call fcn.00411670
mov ecx, dword [ebp - 0x666c]
push ecx
call fcn.0054ccb2
add esp, 4
push 4
push 0x5e0044
push str.Do_you_need_Open_the_Parsing_File__
mov ecx, dword [ebp - 0x1b784]
call fcn.00564245
cmp eax, 6
jne 0x42eeb1
push 1
push 0
push 0
lea edx, [ebp - 0x6468]
push edx
push 0x59fb9c
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x42f159
mov eax, dword [0x5dffa8]
imul eax, dword [0x5dffac]
shl eax, 4
push eax
call fcn.0054cfd4
add esp, 4
mov dword [ebp - 0x666c], eax
mov dword [ebp - 0x1aaa0], 0
jmp 0x42eeef
mov ecx, dword [ebp - 0x1aaa0]
add ecx, 1
mov dword [ebp - 0x1aaa0], ecx
mov edx, dword [ebp - 0x1aaa0]
cmp edx, dword [0x5dffa4]
jge 0x42f0fb
push 0x10
push 0
lea eax, [ebp - 0x1a698]
push eax
call fcn.0054bf90
add esp, 0xc
mov byte [ebp - 0x1a698], 0xf0
mov byte [ebp - 0x1a697], 0xa
mov edx, 1
mov ecx, dword [0x5dffb0]
shl edx, cl
xor edx, 0xff
mov byte [ebp - 0x1a696], dl
mov al, byte [ebp - 0x1a680]
mov byte [ebp - 0x1a695], al
mov cl, byte [ebp - 0x1a686]
mov byte [ebp - 0x1a694], cl
mov dl, byte [ebp - 0x1aaa0]
mov byte [ebp - 0x1a692], dl
mov eax, dword [ebp - 0x1a67e]
and eax, 0xffff
or al, 4
mov byte [ebp - 0x1a68f], al
mov cl, byte [ebp - 0x1a67c]
mov byte [ebp - 0x1a68e], cl
mov edx, dword [0x5dffa0]
imul edx, dword [0x59f294]
mov byte [ebp - 0x1a68d], dl
push 0x4200
push 0
lea eax, [ebp - 0x4214]
push eax
call fcn.0054bf90
add esp, 0xc
mov dword [ebp - 4], 4
mov ecx, dword [ebp - 0x1aec5]
and ecx, 0xff
test ecx, ecx
je 0x42efde
mov eax, dword [ebp - 0x1a695]
and eax, 0xff
cdq
idiv dword [ebp - 0x1aee0]
mov dl, byte [eax + 0x59f2c8]
mov byte [ebp - 0x1a696], dl
jmp 0x42effc
mov eax, dword [ebp - 0x1a695]
and eax, 0xff
cdq
idiv dword [ebp - 0x1aee0]
mov al, byte [eax + 0x59f2c0]
mov byte [ebp - 0x1a696], al
jmp 0x42f00b
mov dword [ebp - 4], 0xffffffff
push 0
lea ecx, [ebp - 0x1a698]
push ecx
mov edx, dword [0x5dffa0]
imul edx, dword [0x59f294]
add edx, 1
shl edx, 9
push edx
lea eax, [ebp - 0x4214]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x6c]
push edx
mov eax, dword [ebp - 0x1b784]
mov cl, byte [eax + 0x65]
push ecx
mov edx, dword [ebp - 0x1b784]
mov al, byte [edx + 0x64]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x68]
push edx
mov eax, dword [ebp - 0x1b784]
mov ecx, dword [eax + 0x78]
push ecx
mov edx, dword [ebp - 0x1b784]
mov eax, dword [edx + 0x74]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x5c]
push edx
call fcn.004c0e6e
add esp, 0x2c
mov ecx, dword [ebp - 0x1b784]
mov dword [ecx + 0x60], eax
push 0x10
mov edx, dword [0x5dffa0]
imul edx, dword [0x59f294]
shl edx, 9
lea eax, [ebp + edx - 0x4214]
push eax
mov ecx, dword [ebp - 0x1aaa0]
shl ecx, 4
mov edx, dword [ebp - 0x666c]
add edx, ecx
push edx
call fcn.0054c7e0
add esp, 0xc
push 3
mov eax, dword [0x5dffa0]
imul eax, dword [0x59f294]
shl eax, 9
lea ecx, [ebp + eax - 0x4204]
push ecx
mov edx, dword [ebp - 0x1aaa0]
shl edx, 4
mov eax, dword [ebp - 0x666c]
lea ecx, [eax + edx + 5]
push ecx
call fcn.0054c7e0
add esp, 0xc
jmp 0x42eee0
push 1
mov ecx, dword [ebp - 0x1b784]
call fcn.00564b39
push 0
mov edx, dword [0x5dffa4]
shl edx, 4
push edx
mov eax, dword [ebp - 0x666c]
push eax
mov ecx, 0x5dfef8
call fcn.0045b573
push 1
push 1
push 1
push 1
mov ecx, 0x5dfef8
call fcn.004598b3
push 0x105
push 0
push 0
mov ecx, 0x5dfef8
call fcn.00411670
mov ecx, dword [ebp - 0x666c]
push ecx
call fcn.0054ccb2
add esp, 4
jmp 0x42fd8e
mov dword [ebp - 0x1af64], 0
mov dword [ebp - 0x1b36c], 0
mov dword [ebp - 0x1af5c], 0
mov dword [ebp - 0x1b370], 0
mov dword [ebp - 0x1af60], 0
push 0x10
lea edx, [ebp - 0x4264]
push edx
push 0x3ed
mov ecx, dword [ebp - 0x1b784]
call fcn.005654d4
mov ecx, eax
call fcn.005656a4
lea eax, [ebp - 0x4264]
push eax
call fcn.00529529
add esp, 4
mov dword [ebp - 0x1aaac], eax
mov ecx, dword [ebp - 0x1aaac]
shl ecx, 8
mov dword [ebp - 0x1aaac], ecx
push 0x10
lea edx, [ebp - 0x4264]
push edx
push 0x3f4
mov ecx, dword [ebp - 0x1b784]
call fcn.005654d4
mov ecx, eax
call fcn.005656a4
lea eax, [ebp - 0x4264]
push eax
call fcn.00529529
add esp, 4
mov ecx, dword [ebp - 0x1aaac]
add ecx, eax
mov dword [ebp - 0x1aaac], ecx
mov dword [ebp - 0x4268], 0
mov dword [ebp - 0x6670], 0
push 0x10
lea edx, [ebp - 0x4264]
push edx
push 0x3f0
mov ecx, dword [ebp - 0x1b784]
call fcn.005654d4
mov ecx, eax
call fcn.005656a4
lea eax, [ebp - 0x4264]
push eax
call fcn.00529529
add esp, 4
mov dword [ebp - 0x14], eax
push 0x10
push 0
lea ecx, [ebp - 0x1a698]
push ecx
call fcn.0054bf90
add esp, 0xc
mov byte [ebp - 0x1a698], 0xf0
mov byte [ebp - 0x1a697], 0x20
mov byte [ebp - 0x1a68d], 1
cmp dword [0x673ea0], 8
jl 0x42f298
cmp dword [0x673ea0], 0xd
jg 0x42f298
mov byte [ebp - 0x1a68c], 7
lea edx, [ebp - 0x1a698]
push edx
push 0x200
lea eax, [ebp - 0x4214]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x6c]
push edx
mov eax, dword [ebp - 0x1b784]
mov cl, byte [eax + 0x65]
push ecx
mov edx, dword [ebp - 0x1b784]
mov al, byte [edx + 0x64]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x68]
push edx
mov eax, dword [ebp - 0x1b784]
mov ecx, dword [eax + 0x78]
push ecx
mov edx, dword [ebp - 0x1b784]
mov eax, dword [edx + 0x74]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x5c]
push edx
call fcn.004bf692
add esp, 0x28
mov ecx, dword [ebp - 0x1b784]
mov dword [ecx + 0x60], eax
mov edx, dword [ebp - 0x4214]
and edx, 0xff
mov dword [ebp - 0x1af50], edx
mov dword [ebp - 0x1af50], 1
push 0
mov eax, dword [0x673ea0]
push eax
lea ecx, [ebp - 0x4214]
push ecx
call fcn.004bff59
add esp, 0xc
mov dword [ebp - 0x1b374], eax
mov edx, dword [ebp - 0x1b374]
and edx, 8
test edx, edx
je 0x42f354
mov dword [ebp - 0x1aa9c], 0x80
jmp 0x42f35e
mov dword [ebp - 0x1aa9c], 0x40
mov dword [ebp - 0x1aaa0], 0
jmp 0x42f379
mov eax, dword [ebp - 0x1aaa0]
add eax, 1
mov dword [ebp - 0x1aaa0], eax
cmp dword [ebp - 0x1aaa0], 0x100
jae 0x42f398
mov ecx, dword [ebp - 0x1aaa0]
mov dword [ebp + ecx*4 - 0x1b774], 0
jmp 0x42f36a
mov dword [ebp - 0x1aaa0], 0
jmp 0x42f3b3
mov edx, dword [ebp - 0x1aaa0]
add edx, 1
mov dword [ebp - 0x1aaa0], edx
cmp dword [ebp - 0x1aaa0], 0x100
jae 0x42f3d2
mov eax, dword [ebp - 0x1aaa0]
mov dword [ebp + eax*4 - 0x1b368], 0
jmp 0x42f3a4
mov dword [ebp - 0x1aaa0], 0
jmp 0x42f3ed
mov ecx, dword [ebp - 0x1aaa0]
add ecx, 1
mov dword [ebp - 0x1aaa0], ecx
mov edx, dword [ebp - 0x1aaa0]
cmp edx, dword [ebp - 0x1af50]
jge 0x42f8e8
mov dword [ebp - 0x1aaa4], 0
jmp 0x42f41a
mov eax, dword [ebp - 0x1aaa4]
add eax, 1
mov dword [ebp - 0x1aaa4], eax
cmp dword [ebp - 0x1aaa4], 0x400
jge 0x42f8e3
push 0x10
push 0
lea ecx, [ebp - 0x1a698]
push ecx
call fcn.0054bf90
add esp, 0xc
mov byte [ebp - 0x1a698], 0xf0
mov byte [ebp - 0x1a697], 0xa
cmp dword [ebp + 8], 0
je 0x42f4cf
mov edx, dword [ebp - 0x1aaac]
sar edx, 8
mov byte [ebp - 0x1a696], dl
mov al, byte [ebp - 0x1aaac]
mov byte [ebp - 0x1a695], al
mov cl, byte [ebp - 0x4268]
mov byte [ebp - 0x1a694], cl
mov byte [ebp - 0x1a693], 0
mov dl, byte [ebp - 0x14]
mov byte [ebp - 0x1a692], dl
cmp dword [ebp - 0x1aaa4], 0x200
jl 0x42f49d
mov byte [ebp - 0x1a690], 0x40
jmp 0x42f4a4
mov byte [ebp - 0x1a690], 0
mov byte [ebp - 0x1a68d], 2
mov eax, dword [ebp - 0x4268]
add eax, 1
mov dword [ebp - 0x4268], eax
mov ecx, dword [ebp - 0x4268]
cmp ecx, dword [ebp - 0x1aa9c]
jl 0x42f4cd
jmp 0x42f8e3
jmp 0x42f506
mov edx, dword [ebp - 0x1aaa4]
sar edx, 8
mov byte [ebp - 0x1a696], dl
mov eax, dword [ebp - 0x1aaa4]
and eax, 0xff
mov byte [ebp - 0x1a695], al
mov cl, byte [ebp - 0x14]
mov byte [ebp - 0x1a692], cl
mov byte [ebp - 0x1a690], 0
mov byte [ebp - 0x1a68d], 2
cmp dword [0x673ea0], 0
jl 0x42f5b8
cmp dword [0x673ea0], 7
jg 0x42f5b8
mov byte [ebp - 0x1a690], 3
lea edx, [ebp - 0x1a698]
push edx
push 0x400
lea eax, [ebp - 0x4214]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x6c]
push edx
mov eax, dword [ebp - 0x1b784]
mov cl, byte [eax + 0x65]
push ecx
mov edx, dword [ebp - 0x1b784]
mov al, byte [edx + 0x64]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x68]
push edx
mov eax, dword [ebp - 0x1b784]
mov ecx, dword [eax + 0x78]
push ecx
mov edx, dword [ebp - 0x1b784]
mov eax, dword [edx + 0x74]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x5c]
push edx
call fcn.004bf692
add esp, 0x28
mov ecx, dword [ebp - 0x1b784]
mov dword [ecx + 0x60], eax
push 0x10
lea edx, [ebp - 0x4214]
push edx
mov eax, dword [ebp - 0x1aaa4]
shl eax, 4
lea ecx, [ebp + eax - 0x16670]
push ecx
call fcn.0054c7e0
add esp, 0xc
jmp 0x42f644
lea edx, [ebp - 0x1a698]
push edx
push 0x400
lea eax, [ebp - 0x4214]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x6c]
push edx
mov eax, dword [ebp - 0x1b784]
mov cl, byte [eax + 0x65]
push ecx
mov edx, dword [ebp - 0x1b784]
mov al, byte [edx + 0x64]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x68]
push edx
mov eax, dword [ebp - 0x1b784]
mov ecx, dword [eax + 0x78]
push ecx
mov edx, dword [ebp - 0x1b784]
mov eax, dword [edx + 0x74]
push eax
mov ecx, dword [ebp - 0x1b784]
mov edx, dword [ecx + 0x5c]
push edx
call fcn.004bf692
add esp, 0x28
mov ecx, dword [ebp - 0x1b784]
mov dword [ecx + 0x60], eax
push 0x10
lea edx, [ebp - 0x4014]
push edx
mov eax, dword [ebp - 0x1aaa4]
shl eax, 4
lea ecx, [ebp + eax - 0x16670]
push ecx
call fcn.0054c7e0
add esp, 0xc
cmp dword [ebp - 0x1aaa4], 0x3fa
jge case.0x42f841.4
cmp dword [0x673ea0], 0
jl 0x42f7eb
cmp dword [0x673ea0], 7
jg 0x42f7eb
mov edx, dword [ebp - 0x4014]
and edx, 0xff
and edx, 0xfc
cmp edx, 0x20
jne 0x42f6ba
mov eax, dword [ebp - 0x4014]
and eax, 0xff
and eax, 0xfc
mov ecx, dword [ebp - 0x4014]
and ecx, 0xff
and ecx, 0xfc
mov edx, dword [ebp + ecx*4 - 0x1b368]
add edx, 1
mov dword [ebp + eax*4 - 0x1b368], edx
jmp 0x42f6e2
mov eax, dword [ebp - 0x4014]
and eax, 0xff
mov ecx, dword [ebp - 0x4014]
and ecx, 0xff
mov edx, dword [ebp + ecx*4 - 0x1b368]
add edx, 1
mov dword [ebp + eax*4 - 0x1b368], edx
mov al, byte [ebp - 0x4014]
mov byte [ebp - 0x1b77c], al
mov ecx, dword [ebp - 0x4014]
and ecx, 0xff
and ecx, 0xf0
cmp ecx, 0xa0
jle 0x42f719
mov dl, byte [ebp - 0x1b77c]
and dl, 0xf
mov byte [ebp - 0x1b77c], dl
jmp 0x42f727
mov al, byte [ebp - 0x1b77c]
and al, 0xf0
mov byte [ebp - 0x1b77c], al
mov ecx, dword [ebp - 0x1b77c]
and ecx, 0xff
mov dword [ebp - 0x1b790], ecx
cmp dword [ebp - 0x1b790], 0x80
ja case.0x42f757.5
mov eax, dword [ebp - 0x1b790]
xor edx, edx
mov dl, byte [eax + 0x42fdd6]
jmp dword [edx*4 + 0x42fdbe]
mov ecx, dword [ebp - 0x1af64]
add ecx, 1
mov dword [ebp - 0x1af64], ecx
jmp case.0x42f757.5
mov edx, dword [ebp - 0x1b36c]
add edx, 1
mov dword [ebp - 0x1b36c], edx
mov al, byte [ebp - 0x4012]
mov byte [ebp - 0x1b778], al
mov ecx, dword [ebp - 0x1b778]
and ecx, 0xff
mov edx, dword [ebp - 0x1b778]
and edx, 0xff
mov eax, dword [ebp + edx*4 - 0x1b774]
add eax, 1
mov dword [ebp + ecx*4 - 0x1b774], eax
jmp case.0x42f757.5
mov ecx, dword [ebp - 0x1af5c]
add ecx, 1
mov dword [ebp - 0x1af5c], ecx
jmp case.0x42f757.5
mov edx, dword [ebp - 0x1b370]
add edx, 1
mov dword [ebp - 0x1b370], edx
jmp case.0x42f757.5
mov eax, dword [ebp - 0x1af60]
add eax, 1
mov dword [ebp - 0x1af60], eax
jmp case.0x42f841.4
mov ecx, dword [ebp - 0x4013]
and ecx, 0xff
mov edx, dword [ebp - 0x4013]
and edx, 0xff
mov eax, dword [ebp + edx*4 - 0x1b368]
add eax, 1
mov dword [ebp + ecx*4 - 0x1b368], eax
mov ecx, dword [ebp - 0x4013]
and ecx, 0xff
mov dword [ebp - 0x1b794], ecx
cmp dword [ebp - 0x1b794], 0x44
ja case.0x42f841.4
mov eax, dword [ebp - 0x1b794]
xor edx, edx
mov dl, byte [eax + 0x42fe6b]
jmp dword [edx*4 + 0x42fe57]
mov ecx, dword [ebp - 0x1af64]
add ecx, 1
mov dword [ebp - 0x1af64], ecx
jmp case.0x42f841.4
mov edx, dword [ebp - 0x1b36c]
add edx, 1
mov dword [ebp - 0x1b36c], edx
mov al, byte [ebp - 0x4012]
mov byte [ebp - 0x1b778], al
mov ecx, dword [ebp - 0x1b778]
and ecx, 0xff
mov edx, dword [ebp - 0x1b778]
and edx, 0xff
mov eax, dword [ebp + edx*4 - 0x1b774]
add eax, 1
mov dword [ebp + ecx*4 - 0x1b774], eax
jmp case.0x42f841.4
mov ecx, dword [ebp - 0x1af5c]
add ecx, 1
mov dword [ebp - 0x1af5c], ecx
jmp case.0x42f841.4
mov edx, dword [ebp - 0x1b370]
add edx, 1
mov dword [ebp - 0x1b370], edx
push 1
lea eax, [ebp - 0x4004]
push eax
mov ecx, dword [ebp - 0x1aaa4]
lea edx, [ebp + ecx - 0x1aa98]
push edx
call fcn.0054c7e0
add esp, 0xc
jmp 0x42f40b
jmp 0x42f3de
cmp dword [0x673ea0], 0
jl 0x42f91e
cmp dword [0x673ea0], 7
jg 0x42f91e
mov eax, dword [ebp - 0x1b36c]
push eax
mov ecx, dword [ebp - 0x1af64]
push ecx
push str.0x00_t___d____r_n0x20_t___d____r_n
lea edx, [ebp - 0x6268]
push edx
call fcn.0054c6e3
add esp, 0x10
jmp 0x42f940
mov eax, dword [ebp - 0x1b36c]
push eax
mov ecx, dword [ebp - 0x1af64]
push ecx
push 0x59fbc4
lea edx, [ebp - 0x6268]
push edx
call fcn.0054c6e3
add esp, 0x10
push 0x59fbe4
lea eax, [ebp - 0x6268]
push eax
call fcn.0054bea0
add esp, 8
mov dword [ebp - 0x1aaa0], 0
jmp 0x42f96f
mov ecx, dword [ebp - 0x1aaa0]
add ecx, 1
mov dword [ebp - 0x1aaa0], ecx
cmp dword [ebp - 0x1aaa0], 0x100
jae 0x42f9cc
mov edx, dword [ebp - 0x1aaa0]
cmp dword [ebp + edx*4 - 0x1b774], 0
je 0x42f9ca
mov eax, dword [ebp - 0x1aaa0]
mov ecx, dword [ebp + eax*4 - 0x1b774]
push ecx
mov edx, dword [ebp - 0x1aaa0]
push edx
push 0x59fbe8
lea eax, [ebp - 0x4254]
push eax
call fcn.0054c6e3
add esp, 0x10
lea ecx, [ebp - 0x4254]
push ecx
lea edx, [ebp - 0x6268]
push edx
call fcn.0054bea0
add esp, 8
jmp 0x42f960
push 0x59fc00
lea eax, [ebp - 0x6268]
push eax
call fcn.0054bea0
add esp, 8
cmp dword [0x673ea0], 0
jl 0x42fa1d
cmp dword [0x673ea0], 7
jg 0x42fa1d
mov ecx, dword [ebp - 0x1af60]
push ecx
mov edx, dword [ebp - 0x1b370]
push edx
mov eax, dword [ebp - 0x1af5c]
push eax
push str.0x06_t___d___r_n0x40_t___d____r_n0x80_t___d____r_n
lea ecx, [ebp - 0x4254]
push ecx
call fcn.0054c6e3
add esp, 0x14
jmp 0x42fa3f
mov edx, dword [ebp - 0x1b370]
push edx
mov eax, dword [ebp - 0x1af5c]
push eax
push 0x59fc30
lea ecx, [ebp - 0x4254]
push ecx
call fcn.0054c6e3
add esp, 0x10
lea edx, [ebp - 0x4254]
push edx
lea eax, [ebp - 0x6268]
push eax
call fcn.0054bea0
add esp, 8
push 0x2000
push 0
lea ecx, [ebp - 0x6268]
push ecx
call fcn.0054bf90
add esp, 0xc
mov dword [ebp - 0x1aaa0], 0
jmp 0x42fa86
mov edx, dword [ebp - 0x1aaa0]
add edx, 1
mov dword [ebp - 0x1aaa0], edx
cmp dword [ebp - 0x1aaa0], 0x100
jae 0x42fb6f
mov eax, dword [ebp - 0x1aaa0]
cmp dword [ebp + eax*4 - 0x1b368], 0
je 0x42fb6a
mov ecx, dword [ebp - 0x1aaa0]
mov edx, dword [ebp + ecx*4 - 0x1b368]
push edx
mov eax, dword [ebp - 0x1aaa0]
push eax
push 0x59fc4c
lea ecx, [ebp - 0x4254]
push ecx
call fcn.0054c6e3
add esp, 0x10
lea edx, [ebp - 0x4254]
push edx
lea eax, [ebp - 0x6268]
push eax
call fcn.0054bea0
add esp, 8
cmp dword [ebp - 0x1aaa0], 0x11
jne 0x42fb6a
mov dword [ebp - 0x1b780], 0
jmp 0x42fb0d
mov ecx, dword [ebp - 0x1b780]
add ecx, 1
mov dword [ebp - 0x1b780], ecx
cmp dword [ebp - 0x1b780], 0x100
jae 0x42fb6a
mov edx, dword [ebp - 0x1b780]
cmp dword [ebp + edx*4 - 0x1b774], 0
je 0x42fb68
mov eax, dword [ebp - 0x1b780]
mov ecx, dword [ebp + eax*4 - 0x1b774]
push ecx
mov edx, dword [ebp - 0x1b780]
push edx
push 0x59fc5c
lea eax, [ebp - 0x4254]
push eax
call fcn.0054c6e3
add esp, 0x10
lea ecx, [ebp - 0x4254]
push ecx
lea edx, [ebp - 0x6268]
push edx
call fcn.0054bea0
add esp, 8
jmp 0x42fafe
jmp 0x42fa77
lea eax, [ebp - 0x6468]
push eax
call fcn.00529440
add esp, 4
push str.UFD_MP_spare.BIN
lea ecx, [ebp - 0x6468]
push ecx
call fcn.0054bea0
add esp, 8
push 0x59fc88
lea edx, [ebp - 0x6468]
push edx
call fcn.0054cc9f
add esp, 8
mov dword [ebp - 0x1af58], eax
cmp dword [ebp - 0x1af58], 0
jne 0x42fbc7
mov ecx, dword [ebp - 0x1b784]
call fcn.00427253
xor eax, eax
jmp 0x42fdab
mov eax, dword [ebp - 0x1af58]
push eax
push 0x4000
push 1
lea ecx, [ebp - 0x16670]
push ecx
call fcn.0054e00a
add esp, 0x10
mov dword [ebp - 0x1af68], eax
mov edx, dword [ebp - 0x1af58]
push edx
call fcn.0054cbf2
add esp, 4
lea eax, [ebp - 0x6468]
push eax
call fcn.00529440
add esp, 4
push str.UFD_MPeccflag.bin
lea ecx, [ebp - 0x6468]
push ecx
call fcn.0054bea0
add esp, 8
push 0x59fca0
lea edx, [ebp - 0x6468]
push edx
call fcn.0054cc9f
add esp, 8
mov dword [ebp - 0x1af58], eax
cmp dword [ebp - 0x1af58], 0
jne 0x42fc51
mov ecx, dword [ebp - 0x1b784]
call fcn.00427253
xor eax, eax
jmp 0x42fdab
mov eax, dword [ebp - 0x1af58]
push eax
push 0x400
push 1
lea ecx, [ebp - 0x1aa98]
push ecx
call fcn.0054e00a
add esp, 0x10
mov dword [ebp - 0x1af68], eax
mov edx, dword [ebp - 0x1af58]
push edx
call fcn.0054cbf2
add esp, 4
cmp dword [ebp + 8], 0
jne 0x42fd44
lea eax, [ebp - 0x6468]
push eax
call fcn.00529440
add esp, 4
push str.UFD_MPSpareSort2.txt
lea ecx, [ebp - 0x6468]
push ecx
call fcn.0054bea0
add esp, 8
push 0x2000
lea edx, [ebp - 0x6268]
push edx
lea eax, [ebp - 0x6468]
push eax
push 0xffa0
lea ecx, [ebp - 0x16670]
push ecx
mov ecx, dword [ebp - 0x1b784]
call fcn.00430df4
lea edx, [ebp - 0x6468]
push edx
call fcn.00529440
add esp, 4
push str.UFD_MPSpareSort.txt
lea eax, [ebp - 0x6468]
push eax
call fcn.0054bea0
add esp, 8
push 0
push pe_nt_image_headers32
push 0x2000
lea ecx, [ebp - 0x6268]
push ecx
lea edx, [ebp - 0x6468]
push edx
push 0xffa0
lea eax, [ebp - 0x16670]
push eax
mov ecx, dword [ebp - 0x1b784]
call fcn.0042feb0
push 0
push 0
lea ecx, [ebp - 0x6268]
push ecx
mov ecx, dword [ebp - 0x1b784]
call fcn.00564245
push 1
mov ecx, dword [ebp - 0x1b784]
call fcn.00564b39
push 0
push 0x4000
lea edx, [ebp - 0x16670]
push edx
mov ecx, 0x5dfef8
call fcn.0045b573
push 1
push 1
push 1
push 1
mov ecx, 0x5dfef8
call fcn.004598b3
push 0x105
push 0
push 0
mov ecx, 0x5dfef8
call fcn.00411670
mov ecx, dword [ebp - 0x1b784]
call fcn.00427253
push 0
mov ecx, dword [ebp - 0x16674]
call fcn.00411a50
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4