Function at 0x443cfc
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe4c
push esi
push edi
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x74], eax
mov eax, 0x53ab48
call fcn.0050f344
mov word [ebp - 0x60], 8
lea eax, [ebp - 4]
call fcn.00401d1c
inc dword [ebp - 0x54]
xor edx, edx
mov word [ebp - 0x60], 0x14
mov dword [ebp - 0xa8], edx
mov ecx, dword [ebp - 0x78]
cmp ecx, 0x45
ja case.default.0x443d45
jmp dword [ecx*4 + 0x443d4c]
mov byte [0x54af0c], 0
mov edx, dword [ebp - 0x7c]
add edx, 5
mov eax, dword [ebp - 0x74]
call fcn.00426790
mov ecx, dword [0x54f518]
dec ecx
je 0x443e8a
dec ecx
je 0x443eb8
jmp 0x443f90
mov eax, dword [ebp - 0x74]
cmp dword [eax + 0x3100], 3
je 0x443ea9
mov edx, dword [ebp - 0x74]
cmp dword [edx + 0x2928c], 0
jne 0x443ea9
cmp dword [0x54aefc], 0
mov dword [ebp - 0xa8], 1
jmp 0x443f90
mov byte [0x54eb18], 0
push 0xcc0020
push 0
push 0
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + 0x2f8]
mov eax, dword [eax + 0x160]
call fcn.004c8e28
push eax
push 0x258
push 0x320
push 0
push 0
mov edx, dword [ebp - 0x74]
mov eax, dword [edx + 0x408]
call fcn.004cd3cc
call fcn.004c8e28
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [0x54a9f0]
push 1
mov ecx, 0x53a8c6
mov edx, 0x53a8af
mov eax, dword [eax]
call fcn.0051ab5c
dec eax
jne 0x443f26
mov byte [0x54ff3c], 1
push 0xcc0020
push 0
push 0
mov edx, dword [ebp - 0x74]
mov eax, dword [edx + 0x408]
call fcn.004cd3cc
call fcn.004c8e28
push eax
mov edx, dword [ebp - 0x74]
mov eax, dword [edx + 0x408]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + 0x408]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + 0x2f8]
mov eax, dword [eax + 0x160]
call fcn.004c8e28
push eax
call sub.gdi32.dll_BitBlt
mov dword [ebp - 0xa8], 1
mov byte [0x54eb18], 1
xor edx, edx
mov dword [0x54f518], edx
jmp case.default.0x443d45
mov ecx, dword [ebp - 0x7c]
add ecx, 7
push ecx
call fcn.00408de8
pop ecx
mov edx, eax
mov eax, dword [ebp - 0x74]
call fcn.0043d118
jmp case.default.0x443d45
mov ecx, dword [ebp - 0x7c]
xor eax, eax
add ecx, 4
lea esi, [ebp - 0xf4]
mov edi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x74]
cmp dword [eax + 0x3118], 0
je 0x444068
xor eax, eax
lea edi, [ebp - 0xf4]
or ecx, 0xffffffff
lea esi, [ebp - 0x134]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [ebp - 0x134]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x53a8cb
push eax
call fcn.0050efd8
add esp, 8
lea edx, [ebp - 0x134]
mov eax, dword [ebp - 0x74]
call fcn.0043cf64
test al, al
je 0x444068
xor eax, eax
lea edi, [ebp - 0x134]
or ecx, 0xffffffff
lea esi, [ebp - 0xf4]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0xf4]
push eax
mov edx, dword [ebp - 0x74]
add edx, 0x263c0
push edx
call fcn.0050efd8
add esp, 8
push 0x53a8cd
mov ecx, dword [ebp - 0x74]
add ecx, 0x263c0
push ecx
call fcn.0050efd8
add esp, 8
lea edx, [ebp - 0xf4]
mov eax, dword [ebp - 0x74]
call fcn.0043ce88
xor eax, eax
lea edi, [ebp - 0xf4]
or ecx, 0xffffffff
mov esi, 0x54f428
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, 0x54b1a4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x54eb14]
lea edi, [ebp - 0xf4]
mov byte [eax + 0x54b1a4], 0x40
inc dword [0x54eb14]
xor eax, eax
add edx, dword [0x54eb14]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edx
xchg edi, esi
mov edx, ecx
mov eax, edi
shr ecx, 2
lea eax, [ebp - 0xf4]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push eax
call fcn.0050f014
pop ecx
add eax, dword [0x54eb14]
mov dword [0x54eb14], eax
mov eax, dword [ebp - 0x74]
call fcn.00442998
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 4
call fcn.00442964
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 6
call fcn.00427380
jmp case.default.0x443d45
xor edx, edx
mov dword [ebp - 0x80], edx
mov ecx, dword [ebp - 0x7c]
movsx eax, byte [ecx + 7]
cmp eax, 0x20
jne 0x4441a0
mov word [ebp - 0x60], 0x20
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 8]
add edx, 8
call fcn.0051ac20
inc dword [ebp - 0x54]
mov edx, dword [eax]
mov eax, dword [ebp - 0x74]
call fcn.0043ae48
mov dword [ebp - 0x80], eax
dec dword [ebp - 0x54]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0051ad80
cmp dword [ebp - 0x80], 0
jne 0x4441b8
mov eax, dword [ebp - 0x74]
call fcn.0043dbd4
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.0043db80
mov byte [0x54eb19], 1
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x74]
call fcn.00437d7c
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov eax, dword [ebp - 0x74]
call fcn.0043dbd4
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.0043db80
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 0xa
call fcn.004391e4
mov eax, dword [ebp - 0x74]
call fcn.00439954
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
cmp byte [edx + 7], 0
je 0x444229
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 8
call fcn.0043a248
jmp 0x444237
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 7
call fcn.0043a248
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov byte [ebp - 0x1b4], 0
mov dword [ebp - 0x84], 8
mov eax, dword [ebp - 0x7c]
xor ecx, ecx
mov dword [0x54ac98], ecx
lea edx, [eax + 8]
mov dword [ebp - 0xac], edx
mov ecx, dword [ebp - 0xac]
cmp byte [ecx], 0
je 0x4442f3
mov eax, dword [ebp - 0xac]
movsx edx, byte [eax]
cmp edx, 0x20
jne 0x44428f
mov ecx, dword [ebp - 0xac]
mov byte [ecx], 0
jmp 0x4442f3
mov eax, dword [ebp - 0xac]
movsx edx, byte [eax]
cmp edx, 0x3a
jne 0x4442d7
mov ecx, dword [ebp - 0xac]
lea esi, [ebp - 0x1b4]
mov byte [ecx], 0
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x7c]
inc eax
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4442f3
inc dword [ebp - 0x84]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x84], 0x80
jl 0x44426b
push 0x1e
mov eax, dword [ebp - 0x7c]
add eax, 7
push eax
push 0x54f338
call fcn.0050f1f0
add esp, 0xc
mov eax, dword [ebp - 0x74]
call fcn.0041f168
mov edx, dword [ebp - 0x7c]
add edx, 7
mov ecx, 1
mov eax, dword [ebp - 0x74]
call fcn.00485cd4
cmp byte [ebp - 0x1b4], 0
je 0x44433b
lea edx, [ebp - 0x1b4]
mov eax, dword [ebp - 0x74]
call fcn.00442964
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
cmp byte [0x54ffd2], 0
je 0x44435a
mov byte [0x54f514], 1
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 5
call fcn.004279e4
mov edx, eax
mov eax, dword [ebp - 0x74]
call fcn.004299b0
mov word [ebp - 0x60], 0x2c
mov edx, 0x54f392
lea eax, [ebp - 0xc]
call fcn.0051ac20
mov edx, eax
inc dword [ebp - 0x54]
mov eax, dword [ebp - 0x74]
add eax, 0x3ea8c
call fcn.0051adb0
dec dword [ebp - 0x54]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0051ad80
mov eax, dword [ebp - 0x74]
mov ecx, dword [0x54eb1c]
mov dword [eax + 0x3ea90], ecx
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov ecx, dword [edx + 0x464]
mov dword [eax + 0x3ea94], ecx
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 6
call fcn.0043b7bc
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 4
call fcn.0043bca4
test al, al
je 0x4445a9
mov dword [ebp - 0x84], 4
mov edx, dword [ebp - 0x7c]
lea ecx, [edx + 4]
mov dword [ebp - 0xac], ecx
mov eax, dword [ebp - 0xac]
movsx edx, byte [eax]
cmp edx, 0x29
je 0x44444c
mov ecx, dword [ebp - 0xac]
cmp byte [ecx], 0
je 0x44444c
inc dword [ebp - 0x84]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x84], 0xc8
jl 0x44441b
inc dword [ebp - 0x84]
cmp dword [ebp - 0x84], 0xc8
jge 0x4445a9
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x84]
mov cl, byte [eax + edx]
mov byte [ebp - 0xa1], cl
movsx eax, byte [ebp - 0xa1]
cmp eax, 0x2a
je 0x44449c
movsx edx, byte [ebp - 0xa1]
cmp edx, 0x40
je 0x44449c
movsx ecx, byte [ebp - 0xa1]
cmp ecx, 0x21
jne 0x444550
xor eax, eax
mov dword [ebp - 0x88], eax
mov edx, dword [ebp - 0x7c]
mov ecx, edx
mov dword [ebp - 0xb4], ecx
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x84]
lea ecx, [eax + edx]
mov dword [ebp - 0xb0], ecx
mov eax, dword [ebp - 0xb0]
mov dl, byte [eax]
mov byte [ebp - 0xa1], dl
inc dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xb4]
mov al, byte [ebp - 0xa1]
mov byte [ecx], al
cmp byte [ebp - 0xa1], 0
jne 0x444512
mov eax, 2
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x54]
call fcn.0051ad80
pop eax
mov edx, dword [ebp - 0x70]
mov dword fs:[0], edx
jmp 0x445cfb
inc dword [ebp - 0x88]
inc dword [ebp - 0xb4]
cmp dword [ebp - 0x88], 0xc8
jl 0x4444c1
mov eax, 1
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x54]
call fcn.0051ad80
pop eax
mov edx, dword [ebp - 0x70]
mov dword fs:[0], edx
jmp 0x445cfb
movsx ecx, byte [ebp - 0xa1]
cmp ecx, 0x20
je 0x444593
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, dword [ebp - 0x84]
call fcn.00442964
mov eax, 1
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x54]
call fcn.0051ad80
pop eax
mov edx, dword [ebp - 0x70]
mov dword fs:[0], edx
jmp 0x445cfb
inc dword [ebp - 0x84]
cmp dword [ebp - 0x84], 0xc8
jl 0x444462
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 7
call fcn.0042d344
jmp case.default.0x443d45
mov byte [ebp - 0x1b4], 0
mov dword [ebp - 0x84], 7
mov ecx, dword [ebp - 0x7c]
lea eax, [ecx + 7]
mov dword [ebp - 0xac], eax
mov edx, dword [ebp - 0xac]
cmp byte [edx], 0
je 0x44466d
mov ecx, dword [ebp - 0xac]
movsx eax, byte [ecx]
cmp eax, 0x20
jne 0x44460c
mov edx, dword [ebp - 0xac]
mov byte [edx], 0
jmp 0x44466d
mov ecx, dword [ebp - 0xac]
movsx eax, byte [ecx]
cmp eax, 0x3a
jne 0x444654
mov edx, dword [ebp - 0xac]
xor eax, eax
lea esi, [ebp - 0x1b4]
mov byte [edx], 0
mov ecx, dword [ebp - 0x84]
add ecx, dword [ebp - 0x7c]
inc ecx
mov edi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x44466d
inc dword [ebp - 0x84]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x84], 0x64
jl 0x4445e8
mov eax, dword [0x54ac98]
mov edx, dword [0x54eb20]
mov edi, 0x54f338
mov dword [eax*4 + 0x54aec4], edx
mov ecx, dword [0x54ac98]
xor eax, eax
add ecx, ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
add ecx, 0x54ac9c
mov esi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x7c]
movsx edx, byte [eax + 6]
cmp edx, 0x24
jne 0x444737
mov ecx, dword [ebp - 0x7c]
movsx eax, byte [ecx + 7]
add eax, 0xffffffd0
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x4446dc
cmp dword [ebp - 0x80], 9
jle 0x4446e1
xor edx, edx
mov dword [ebp - 0x80], edx
mov ecx, dword [ebp - 0x80]
xor eax, eax
shl ecx, 6
mov esi, 0x54f338
add ecx, 0x54af20
mov edi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, 0x54f338
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 1
mov eax, dword [ebp - 0x74]
call fcn.00485cd4
cmp al, 1
jne 0x444786
mov eax, dword [ebp - 0x74]
call fcn.0041f168
inc dword [0x54ac98]
jmp 0x444786
mov edx, dword [ebp - 0x7c]
add edx, 6
mov ecx, 1
mov eax, dword [ebp - 0x74]
call fcn.00485cd4
cmp al, 1
jne 0x444786
mov edx, dword [ebp - 0x7c]
xor eax, eax
add edx, 6
or ecx, 0xffffffff
mov edi, edx
mov esi, 0x54f338
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x74]
call fcn.0041f168
inc dword [0x54ac98]
cmp byte [ebp - 0x1b4], 0
je 0x44479d
lea edx, [ebp - 0x1b4]
mov eax, dword [ebp - 0x74]
call fcn.00442964
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
cmp dword [0x54ac98], 0
je 0x44482f
dec dword [0x54ac98]
mov ecx, 1
mov edx, dword [0x54ac98]
mov eax, dword [ebp - 0x74]
add edx, edx
lea edx, [edx + edx*2]
lea edx, [edx + edx*4]
add edx, 0x54ac9c
call fcn.00485cd4
mov edx, dword [0x54ac98]
xor eax, eax
add edx, edx
mov esi, 0x54f338
lea edx, [edx + edx*2]
lea edx, [edx + edx*4]
add edx, 0x54ac9c
or ecx, 0xffffffff
mov edi, edx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x54ac98]
mov edx, dword [eax*4 + 0x54aec4]
mov dword [0x54eb20], edx
mov byte [0x54eb19], 1
jmp 0x444854
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + 0x2928c]
dec eax
je 0x444840
dec eax
je 0x44484a
jmp 0x444854
mov eax, dword [ebp - 0x74]
call fcn.00410cec
jmp 0x444854
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.00418224
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
xor edx, edx
mov ecx, dword [ebp - 0x7c]
add ecx, 6
mov dword [0x54f448], edx
push ecx
call fcn.00408de8
pop ecx
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x74]
xor edx, edx
mov dword [eax + 0x3194], 0xffffff
mov eax, dword [ebp - 0x74]
call fcn.0041b168
mov edx, dword [ebp - 0x74]
mov ecx, dword [edx + 0x3380]
cmp ecx, dword [ebp - 0x80]
je 0x444914
mov eax, dword [ebp - 0x74]
call fcn.00441d08
mov edx, dword [ebp - 0x74]
cmp dword [edx + 0x3380], 0
jne 0x4448e5
mov ecx, dword [ebp - 0x74]
mov dword [ecx + 0x3380], 1
mov eax, dword [ebp - 0x74]
mov dword [eax + 0x29290], 2
mov eax, dword [ebp - 0x74]
call fcn.00427694
mov edx, 6
mov eax, dword [ebp - 0x74]
call fcn.004299b0
jmp 0x444914
mov edx, dword [ebp - 0x74]
xor ecx, ecx
mov dword [edx + 0x3380], ecx
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.00471d40
mov ecx, dword [ebp - 0x74]
mov edx, 6
mov dword [ecx + 0x29290], 1
mov eax, dword [ebp - 0x74]
call fcn.004299b0
mov dword [ebp - 0xa8], 1
mov byte [0x54eb19], 1
jmp case.default.0x443d45
mov eax, dword [ebp - 0x74]
call fcn.0043dbd4
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.0043db80
mov edx, dword [ebp - 0x7c]
cmp byte [edx + 5], 0
je 0x444992
mov ecx, dword [ebp - 0x7c]
add ecx, 5
push ecx
call fcn.00408de8
pop ecx
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x63
jne 0x44499c
mov word [ebp - 0x60], 0x38
mov edx, 0x53a8cf
lea eax, [ebp - 0x10]
call fcn.0051ac20
inc dword [ebp - 0x54]
mov edx, dword [eax]
mov ecx, 1
mov eax, dword [ebp - 0x74]
call fcn.0043e298
dec dword [ebp - 0x54]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0051ad80
jmp 0x44499c
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.0043329c
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
xor ecx, ecx
mov dword [ebp - 0x84], ecx
mov eax, dword [ebp - 0x74]
lea edx, [eax + 0x1140]
mov dword [ebp - 0xac], edx
mov ecx, dword [ebp - 0xac]
mov byte [ecx], 0
inc dword [ebp - 0x84]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x84], 0x80
jl 0x4449c2
xor eax, eax
mov dword [ebp - 0x84], eax
mov edx, dword [ebp - 0x74]
lea ecx, [edx + 0xc5e]
mov dword [ebp - 0xac], ecx
mov eax, dword [ebp - 0xac]
mov byte [eax], 0
inc dword [ebp - 0x84]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x84], 0x4e2
jl 0x4449fa
xor edx, edx
mov dword [ebp - 0x84], edx
mov ecx, dword [ebp - 0x74]
lea eax, [ecx + 0x11c0]
mov dword [ebp - 0xac], eax
mov edx, dword [ebp - 0xac]
xor ecx, ecx
mov dword [edx], ecx
inc dword [ebp - 0x84]
add dword [ebp - 0xac], 4
cmp dword [ebp - 0x84], 0x3e8
jl 0x444a32
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
mov edx, dword [eax + 0x40b8]
mov dword [ecx + 0x14e0], edx
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
mov edx, dword [eax + 0x40bc]
mov dword [ecx + 0x14e4], edx
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
mov edx, dword [eax + 0x40c0]
mov dword [ecx + 0x14e8], edx
mov edx, 0x53a8e8
mov eax, dword [ebp - 0x74]
call fcn.0047910c
jmp case.default.0x443d45
mov byte [0x54af0c], 1
mov edx, dword [ebp - 0x7c]
add edx, 5
mov eax, dword [ebp - 0x74]
call fcn.00426790
jmp case.default.0x443d45
mov ecx, dword [ebp - 0x74]
cmp dword [ecx + 0x3380], 0
jne case.default.0x443d45
cmp byte [0x54aee8], 0
je case.default.0x443d45
mov eax, dword [ebp - 0x74]
call fcn.0046fa94
jmp case.default.0x443d45
cmp dword [0x54f508], 0
je 0x444b05
mov edx, dword [ebp - 0x74]
cmp dword [edx + 0x27e7c], 0
je 0x444b05
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 9
call fcn.0043bf6c
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov word [ebp - 0x60], 0x44
mov edx, 0x53a8ed
lea eax, [ebp - 0x14]
call fcn.0051ac20
inc dword [ebp - 0x54]
mov ecx, dword [eax]
mov dl, 1
mov eax, dword [0x45622c]
call fcn.00456914
mov ecx, dword [ebp - 0x74]
mov edx, 2
mov dword [ecx + 0x6e8], eax
lea eax, [ebp - 0x14]
dec dword [ebp - 0x54]
call fcn.0051ad80
push 0
mov edx, 0x53a904
lea eax, [ebp - 0x1c]
call fcn.0051ac20
inc dword [ebp - 0x54]
mov edx, 0x53a8ff
mov ecx, dword [eax]
lea eax, [ebp - 0x18]
push ecx
mov word [ebp - 0x60], 0x50
call fcn.0051ac20
inc dword [ebp - 0x54]
mov edx, dword [eax]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x6e8]
pop ecx
call fcn.00456b24
mov dword [0x54ff44], eax
dec dword [ebp - 0x54]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0051ad80
inc dword [0x54ff44]
mov edx, 0x53a90f
mov ecx, dword [0x54ff44]
lea eax, [ebp - 0x24]
push ecx
call fcn.0051ac20
inc dword [ebp - 0x54]
mov edx, 0x53a90a
mov ecx, dword [eax]
lea eax, [ebp - 0x20]
push ecx
mov word [ebp - 0x60], 0x5c
call fcn.0051ac20
inc dword [ebp - 0x54]
mov edx, dword [eax]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x6e8]
pop ecx
call fcn.00456c24
dec dword [ebp - 0x54]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0051ad80
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + 0x6e8]
call fcn.0046ac74
mov edx, dword [0x54ff44]
mov ecx, dword [ebp - 0x74]
mov dword [ecx + 0x3290], edx
mov edx, 0x3e7
mov eax, dword [ebp - 0x74]
call fcn.0043aa64
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.00436b64
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 0xb
call fcn.0042d1c0
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 7
call fcn.0043d240
jmp case.default.0x443d45
mov ecx, dword [ebp - 0x7c]
add ecx, 6
push ecx
call fcn.00408de8
pop ecx
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl case.default.0x443d45
cmp dword [ebp - 0x80], 0x13880
jg case.default.0x443d45
mov ecx, dword [ebp - 0x80]
mov eax, 1
and ecx, 7
mov edx, dword [ebp - 0x80]
shl eax, cl
sar edx, 3
mov ecx, dword [ebp - 0x74]
movzx edx, byte [ecx + edx + 0x40c8]
and eax, edx
je 0x444cdb
mov byte [0x54af0e], 1
jmp case.default.0x443d45
mov ecx, dword [ebp - 0x80]
mov al, 1
and ecx, 7
mov edx, dword [ebp - 0x80]
shl al, cl
sar edx, 3
mov ecx, dword [ebp - 0x74]
or byte [ecx + edx + 0x40c8], al
mov eax, dword [ebp - 0x74]
cmp byte [eax + 0x264c0], 0
je case.default.0x443d45
mov byte [0x54af0e], 0
xor edx, edx
mov dword [0x54f508], edx
mov eax, dword [ebp - 0x74]
xor edx, edx
mov dword [eax + 0x31f0], edx
mov edx, 1
mov eax, dword [ebp - 0x74]
call fcn.00471d40
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 4
call fcn.004270d8
jmp case.default.0x443d45
push 0xcc0020
push 0
push 0
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + 0x2f8]
mov eax, dword [eax + 0x160]
call fcn.004c8e28
push eax
push 0x258
push 0x320
push 0
push 0
mov edx, dword [ebp - 0x74]
mov eax, dword [edx + 0x400]
call fcn.004cd3cc
call fcn.004c8e28
push eax
call sub.gdi32.dll_BitBlt
mov edx, dword [ebp - 0x74]
xor ecx, ecx
mov dword [edx + 0x315c], ecx
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 0x400]
call fcn.004cd3cc
call fcn.004c8e28
push eax
mov edx, dword [ebp - 0x74]
mov eax, dword [edx + 0x400]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + 0x400]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + 0x404]
call fcn.004cd3cc
call fcn.004c8e28
push eax
call sub.gdi32.dll_BitBlt
jmp case.default.0x443d45
cmp dword [0x54f508], 0
jne case.default.0x443d45
mov edx, dword [ebp - 0x74]
cmp dword [edx + 0x3168], 0
jne case.default.0x443d45
mov ecx, dword [ebp - 0x7c]
add ecx, 7
push ecx
call fcn.00408de8
pop ecx
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov ecx, 0x1e
cdq
idiv ecx
mov edx, dword [ebp - 0x74]
mov dword [edx + 0x292a0], eax
mov eax, dword [ebp - 0x74]
cmp dword [eax + 0x292a0], 0
jne 0x444e4b
mov ecx, dword [ebp - 0x74]
mov dword [ecx + 0x292a0], 0xffffffff
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov eax, dword [ebp - 0x74]
call fcn.0043dbd4
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.0043db80
mov edx, dword [ebp - 0x7c]
add edx, 9
push edx
call fcn.00408de8
pop ecx
mov edx, eax
mov eax, dword [ebp - 0x74]
call fcn.0044048c
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov ecx, dword [ebp - 0x7c]
add ecx, 8
push ecx
call fcn.00408de8
pop ecx
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov edx, dword [ebp - 0x7c]
shl eax, 6
add edx, 0xa
add eax, 0x54af20
mov edi, edx
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 8
call fcn.0042d528
jmp case.default.0x443d45
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.0043db80
mov edx, 1
mov eax, dword [ebp - 0x74]
call fcn.0043329c
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov eax, dword [ebp - 0x74]
call fcn.004428f0
mov dl, 1
mov eax, dword [ebp - 0x74]
call fcn.0043db80
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov eax, dword [ebp - 0x74]
call fcn.0046fcac
jmp case.default.0x443d45
xor edx, edx
mov dword [ebp - 0x84], edx
mov dword [ebp - 0xb4], 0x54b160
mov ecx, dword [ebp - 0x7c]
lea eax, [ecx + 7]
mov dword [ebp - 0xac], eax
mov edx, dword [ebp - 0xac]
mov eax, dword [ebp - 0xb4]
mov cl, byte [edx]
mov byte [eax], cl
mov edx, dword [ebp - 0xac]
cmp byte [edx], 0
je 0x444f95
inc dword [ebp - 0x84]
inc dword [ebp - 0xb4]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x84], 0x3f
jl 0x444f5f
mov ecx, dword [ebp - 0x84]
mov byte [ecx + 0x54b160], 0
jmp case.default.0x443d45
mov eax, dword [0x54eb1c]
mov edx, dword [ebp - 0x74]
mov dword [edx + 0x3128], eax
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 5
call fcn.0047da10
mov eax, dword [ebp - 0x74]
call fcn.0043dbd4
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.0043db80
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 9
call fcn.004774b8
jmp case.default.0x443d45
mov dl, 1
mov eax, dword [ebp - 0x74]
call fcn.0043db80
mov edx, dword [ebp - 0x7c]
add edx, 6
xor ecx, ecx
mov eax, dword [ebp - 0x74]
call fcn.004741b0
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
movsx ecx, byte [edx + 5]
cmp ecx, 0x71
jne 0x445041
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 7
call fcn.00408e7c
jmp 0x445051
mov edx, dword [ebp - 0x7c]
add edx, 6
xor ecx, ecx
mov eax, dword [ebp - 0x74]
call fcn.00408014
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
cmp dword [0x54f508], 0
je 0x445084
mov eax, dword [ebp - 0x74]
cmp dword [eax + 0x27e7c], 0
je 0x445084
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x94], 0x14
mov dword [ebp - 0x98], 0x32
mov dword [ebp - 0x84], 7
mov eax, dword [ebp - 0x7c]
add eax, 7
push eax
call fcn.00408de8
pop ecx
mov dword [ebp - 0x90], eax
mov edx, dword [ebp - 0x7c]
lea ecx, [edx + 7]
mov dword [ebp - 0xb4], ecx
mov eax, dword [ebp - 0xb4]
cmp byte [eax], 0
je 0x445123
mov edx, dword [ebp - 0xb4]
movsx ecx, byte [edx]
cmp ecx, 0x2c
jne 0x44510e
inc dword [ebp - 0xb4]
inc dword [ebp - 0x84]
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x7c]
push eax
call fcn.00408de8
pop ecx
mov dword [ebp - 0x94], eax
jmp 0x445123
inc dword [ebp - 0x84]
inc dword [ebp - 0xb4]
cmp dword [ebp - 0x84], 0x32
jl 0x4450d1
mov edx, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x84]
lea eax, [edx + ecx]
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0x84], 0x32
jge 0x445190
mov edx, dword [ebp - 0xb4]
cmp byte [edx], 0
je 0x445190
mov ecx, dword [ebp - 0xb4]
movsx eax, byte [ecx]
cmp eax, 0x2c
jne 0x44517b
inc dword [ebp - 0xb4]
inc dword [ebp - 0x84]
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x7c]
push edx
call fcn.00408de8
pop ecx
mov dword [ebp - 0x98], eax
jmp 0x445190
inc dword [ebp - 0x84]
inc dword [ebp - 0xb4]
cmp dword [ebp - 0x84], 0x32
jl 0x44513e
mov eax, dword [ebp - 0x74]
call fcn.00429cf4
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 0
jle 0x4453b2
mov ecx, dword [ebp - 0x90]
sub ecx, 1
jb 0x4451ca
je 0x445211
dec ecx
je 0x445258
jmp case.default.0x445269
test byte [ebp - 0x84], 2
je 0x4451f2
mov ecx, dword [ebp - 0xa0]
add ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
jmp case.default.0x445269
mov ecx, dword [ebp - 0xa0]
sub ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
jmp case.default.0x445269
test byte [ebp - 0x84], 2
je 0x445239
mov edx, dword [ebp - 0x9c]
add edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
jmp case.default.0x445269
mov edx, dword [ebp - 0x9c]
sub edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
jmp case.default.0x445269
call fcn.00513d0c
and eax, 7
cmp eax, 7
ja case.default.0x445269
jmp dword [eax*4 + 0x445270]
mov ecx, dword [ebp - 0xa0]
sub ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
jmp case.default.0x445269
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 0x9c]
sub ecx, dword [ebp - 0x84]
add edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
jmp case.default.0x445269
mov edx, dword [ebp - 0x9c]
add edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
jmp case.default.0x445269
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 0x9c]
add ecx, dword [ebp - 0x84]
add edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
jmp case.default.0x445269
mov ecx, dword [ebp - 0xa0]
add ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
jmp case.default.0x445269
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 0x9c]
add ecx, dword [ebp - 0x84]
sub edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
jmp case.default.0x445269
mov edx, dword [ebp - 0x9c]
sub edx, dword [ebp - 0x84]
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
jmp case.default.0x445269
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 0x9c]
sub ecx, dword [ebp - 0x84]
sub edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
mov edx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x74]
call fcn.00429d08
add eax, eax
sub dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jg 0x4451b1
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.0042dd18
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + 0x3118]
mov dword [ebp - 0x80], eax
mov edx, dword [ebp - 0x7c]
cmp byte [edx + 5], 0
je 0x445416
mov word [ebp - 0x60], 0x68
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x28]
add edx, 6
call fcn.0051ac20
inc dword [ebp - 0x54]
mov edx, dword [eax]
mov eax, dword [ebp - 0x74]
call fcn.0043ae48
mov dword [ebp - 0x80], eax
dec dword [ebp - 0x54]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0051ad80
mov ecx, dword [0x54eb20]
mov edx, dword [0x54eb20]
mov dword [ebp - 0x90], ecx
mov cl, 0x7d
mov eax, dword [ebp - 0x74]
call fcn.00445d04
add eax, 2
mov dword [ebp - 0x8c], eax
xor eax, eax
mov dword [ebp - 0x84], eax
mov edx, dword [ebp - 0x84]
cmp edx, dword [ebp - 0x80]
jg 0x4454ac
mov cl, 0x7b
mov edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x74]
call fcn.00445d04
add eax, 2
mov dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0x90]
cmp ecx, dword [ebp - 0x8c]
jle 0x445482
mov eax, dword [ebp - 0x8c]
mov dword [0x54eb20], eax
jmp 0x4454ac
mov edx, dword [ebp - 0x84]
cmp edx, dword [ebp - 0x80]
jne 0x44549b
mov ecx, dword [ebp - 0x90]
mov dword [0x54eb20], ecx
jmp 0x4454ac
inc dword [ebp - 0x84]
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x80]
jle 0x44544e
mov byte [0x54eb19], 1
xor edx, edx
mov dword [ebp - 0xa8], edx
jmp case.default.0x443d45
mov byte [0x54f515], 1
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.0043db80
mov ecx, dword [sym.mbl.exe__Form2]
mov eax, dword [ecx]
mov edx, dword [eax]
call dword [edx + 0xe8]
mov eax, dword [ebp - 0x74]
add eax, 0x28d8c
call fcn.00403d8c
mov edx, eax
mov eax, 0x54af20
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x445552
test cl, cl
je 0x445511
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x445552
add eax, 2
add edx, 2
test cl, cl
jne 0x4454f5
jne 0x445552
mov eax, dword [ebp - 0x74]
add eax, 0x28d90
call fcn.00403d8c
mov edx, eax
mov eax, 0x54af60
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x445552
test cl, cl
je 0x445543
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x445552
add eax, 2
add edx, 2
test cl, cl
jne 0x445527
jne 0x445552
mov edx, dword [ebp - 0x74]
xor eax, eax
mov dword [edx + 0x3118], eax
jmp 0x44555f
mov edx, dword [ebp - 0x74]
mov dword [edx + 0x3118], 1
mov dword [ebp - 0xa8], 1
mov byte [0x54f515], 0
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 5
call fcn.00429734
mov dword [ebp - 0xa8], 1
mov byte [0x54aee8], 0
jmp case.default.0x443d45
mov dl, 1
mov eax, dword [ebp - 0x74]
call fcn.0043db80
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 8
call fcn.0040abc4
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
cmp dword [0x54f508], 0
je 0x4455e2
mov ecx, dword [ebp - 0x74]
cmp dword [ecx + 0x27e7c], 0
je 0x4455e2
xor eax, eax
mov dword [ebp - 0xa8], eax
jmp case.default.0x443d45
mov word [ebp - 0x60], 0x74
lea eax, [ebp - 0x30]
call fcn.00401d1c
push eax
lea eax, [ebp - 0x2c]
inc dword [ebp - 0x54]
mov edx, dword [ebp - 0x7c]
add edx, 4
call fcn.0051ac20
inc dword [ebp - 0x54]
pop edx
call fcn.0051aff8
lea edx, [ebp - 0x30]
lea eax, [ebp - 4]
call fcn.0051adb0
dec dword [ebp - 0x54]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0051ad80
mov word [ebp - 0x60], 0x80
lea eax, [ebp - 0x34]
call fcn.00401d1c
push eax
lea eax, [ebp - 4]
inc dword [ebp - 0x54]
mov ecx, 3
mov edx, 1
call fcn.0051b080
lea eax, [ebp - 0x34]
push eax
mov edx, 0x53a915
lea eax, [ebp - 0x38]
call fcn.0051ac20
inc dword [ebp - 0x54]
lea edx, [ebp - 0x38]
pop eax
call fcn.0051ae64
push eax
dec dword [ebp - 0x54]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0051ad80
pop ecx
test cl, cl
je 0x445740
lea eax, [ebp - 4]
mov edx, 4
call fcn.00404f58
mov cl, byte [eax]
add cl, 0xd0
mov byte [ebp - 0xa1], cl
mov eax, dword [ebp - 0x74]
cmp dword [eax + 0x2651c], 0
jne 0x4456d2
cmp byte [ebp - 0xa1], 0
je case.default.0x443d45
mov edx, dword [ebp - 0x74]
cmp dword [edx + 0x26520], 0
jne 0x4456ec
movsx ecx, byte [ebp - 0xa1]
dec ecx
je case.default.0x443d45
mov eax, dword [ebp - 0x74]
cmp dword [eax + 0x26524], 0
jne 0x445708
movsx edx, byte [ebp - 0xa1]
cmp edx, 2
je case.default.0x443d45
mov ecx, dword [ebp - 0x74]
cmp dword [ecx + 0x26528], 0
jne 0x445724
movsx eax, byte [ebp - 0xa1]
cmp eax, 3
je case.default.0x443d45
mov edx, dword [ebp - 0x74]
cmp dword [edx + 0x2652c], 0
jne 0x445740
movsx ecx, byte [ebp - 0xa1]
cmp ecx, 4
je case.default.0x443d45
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x74]
call fcn.00411454
jmp case.default.0x443d45
mov word [ebp - 0x60], 0x8c
lea eax, [ebp - 0x40]
call fcn.00401d1c
push eax
lea eax, [ebp - 0x3c]
inc dword [ebp - 0x54]
mov edx, dword [ebp - 0x7c]
add edx, 8
call fcn.0051ac20
inc dword [ebp - 0x54]
pop edx
call fcn.0051aff8
lea edx, [ebp - 0x40]
lea eax, [ebp - 4]
call fcn.0051adb0
dec dword [ebp - 0x54]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0051ad80
mov word [ebp - 0x60], 0x98
lea eax, [ebp - 0x44]
call fcn.00401d1c
push eax
lea eax, [ebp - 4]
inc dword [ebp - 0x54]
mov ecx, 3
mov edx, 1
call fcn.0051b080
lea eax, [ebp - 0x44]
push eax
mov edx, 0x53a919
lea eax, [ebp - 0x48]
call fcn.0051ac20
inc dword [ebp - 0x54]
lea edx, [ebp - 0x48]
pop eax
call fcn.0051ae64
push eax
dec dword [ebp - 0x54]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.0051ad80
dec dword [ebp - 0x54]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.0051ad80
pop ecx
test cl, cl
je 0x4458b3
lea eax, [ebp - 4]
mov edx, 4
call fcn.00404f58
mov cl, byte [eax]
add cl, 0xd0
mov byte [ebp - 0xa1], cl
mov eax, dword [ebp - 0x74]
cmp dword [eax + 0x2651c], 0
jne 0x445845
cmp byte [ebp - 0xa1], 0
je case.default.0x443d45
mov edx, dword [ebp - 0x74]
cmp dword [edx + 0x26520], 0
jne 0x44585f
movsx ecx, byte [ebp - 0xa1]
dec ecx
je case.default.0x443d45
mov eax, dword [ebp - 0x74]
cmp dword [eax + 0x26524], 0
jne 0x44587b
movsx edx, byte [ebp - 0xa1]
cmp edx, 2
je case.default.0x443d45
mov ecx, dword [ebp - 0x74]
cmp dword [ecx + 0x26528], 0
jne 0x445897
movsx eax, byte [ebp - 0xa1]
cmp eax, 3
je case.default.0x443d45
mov edx, dword [ebp - 0x74]
cmp dword [edx + 0x2652c], 0
jne 0x4458b3
movsx ecx, byte [ebp - 0xa1]
cmp ecx, 4
je case.default.0x443d45
mov ecx, 2
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x74]
call fcn.00411454
jmp case.default.0x443d45
mov eax, dword [ebp - 0x74]
call fcn.004123a0
jmp case.default.0x443d45
mov eax, dword [ebp - 0x74]
call fcn.004d8228
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
xor edx, edx
mov dword [ebp - 0x84], edx
mov ecx, dword [ebp - 0x74]
lea eax, [ecx + 0x1140]
mov dword [ebp - 0xb4], eax
mov edx, dword [ebp - 0xb4]
mov byte [edx], 0
inc dword [ebp - 0x84]
inc dword [ebp - 0xb4]
cmp dword [ebp - 0x84], 0x80
jl 0x445903
xor ecx, ecx
mov dword [ebp - 0x84], ecx
mov eax, dword [ebp - 0x74]
lea edx, [eax + 0x11c0]
mov dword [ebp - 0xb4], edx
mov ecx, dword [ebp - 0xb4]
xor eax, eax
mov dword [ecx], eax
inc dword [ebp - 0x84]
add dword [ebp - 0xb4], 4
cmp dword [ebp - 0x84], 0x3e8
jl 0x44593b
xor eax, eax
or ecx, 0xffffffff
mov edi, 0x54f356
mov esi, 0x54f3ec
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x74]
cmp dword [eax + 0x3384], 2
je 0x4459b7
mov edx, dword [ebp - 0x74]
mov dword [edx + 0x3384], 1
mov ecx, dword [ebp - 0x74]
xor eax, eax
mov dword [ecx + 0x3388], eax
mov edx, dword [ebp - 0x74]
mov dword [edx + 0x338c], eax
jmp case.default.0x443d45
mov ecx, dword [ebp - 0x74]
xor eax, eax
mov dword [ecx + 0x338c], eax
jmp case.default.0x443d45
mov eax, dword [ebp - 0x74]
call fcn.00441d08
mov edx, dword [ebp - 0x7c]
add edx, 8
push edx
call fcn.00408de8
pop ecx
test eax, eax
je 0x4459ec
mov byte [0x54aee8], 1
jmp case.default.0x443d45
mov byte [0x54aee8], 0
jmp case.default.0x443d45
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + 0x2928c]
dec eax
je 0x445a09
dec eax
je 0x445a13
jmp 0x445a1d
mov eax, dword [ebp - 0x74]
call fcn.00410cec
jmp 0x445a1d
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.00418224
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 5
call fcn.00432358
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 7
call fcn.0048e294
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 8
call fcn.0042d8f0
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov eax, dword [ebp - 0x74]
call fcn.004150d8
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov eax, dword [ebp - 0x74]
call fcn.0047d7e0
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
xor edx, edx
mov dword [ebp - 0x84], edx
jmp 0x445ac5
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x74]
call fcn.0043abd4
inc dword [ebp - 0x84]
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + 0x26554]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x84]
jg 0x445ab1
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
cmp dword [0x54f508], 0
je 0x445b0e
mov ecx, dword [ebp - 0x74]
cmp dword [ecx + 0x27e7c], 0
je 0x445b0e
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 8
call fcn.00476750
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov ecx, dword [ebp - 0x74]
cmp dword [ecx + 0x2928c], 0
je 0x445b5c
mov eax, dword [ebp - 0x74]
mov edx, dword [eax + 0x2928c]
dec edx
je 0x445b48
dec edx
je 0x445b52
jmp 0x445b5c
mov eax, dword [ebp - 0x74]
call fcn.00410cec
jmp 0x445b5c
xor edx, edx
mov eax, dword [ebp - 0x74]
call fcn.00418224
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 7
call fcn.00478a64
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 7
call fcn.0047910c
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 9
call fcn.0047953c
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov ecx, dword [ebp - 0x74]
mov edx, dword [ebp - 0x7c]
add edx, 9
mov eax, dword [ebp - 0x74]
mov ecx, dword [ecx + 0x414]
call fcn.004710bc
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov eax, dword [ebp - 0x74]
call fcn.00487a78
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
push 5
push 0
push 0
mov edx, dword [ebp - 0x7c]
add edx, 5
push edx
push 0
mov eax, dword [ebp - 0x74]
call fcn.004eec48
push eax
call sub.shell32.dll_ShellExecuteA
mov dword [ebp - 0xa8], 1
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x74]
add edx, 6
call fcn.004279e4
mov edx, eax
mov eax, dword [ebp - 0x74]
call fcn.004299b0
mov word [ebp - 0x60], 0xa4
mov edx, 0x54f392
lea eax, [ebp - 0x4c]
call fcn.0051ac20
mov edx, eax
inc dword [ebp - 0x54]
mov eax, dword [ebp - 0x74]
add eax, 0x3ea8c
call fcn.0051adb0
dec dword [ebp - 0x54]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.0051ad80
mov eax, dword [ebp - 0x74]
mov ecx, dword [0x54eb1c]
mov dword [eax + 0x3ea90], ecx
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov ecx, dword [edx + 0x464]
mov dword [eax + 0x3ea94], ecx
jmp case.default.0x443d45
mov edx, dword [ebp - 0x7c]
add edx, 8
push edx
call fcn.00408de8
pop ecx
mov ecx, dword [ebp - 0x74]
mov dword [ecx + 0x3140], eax
mov edx, 3
mov eax, dword [ebp - 0x74]
call fcn.004299b0
jmp case.default.0x443d45
mov ecx, dword [ebp - 0x7c]
add ecx, 8
push ecx
call fcn.00408de8
pop ecx
mov edx, dword [ebp - 0x74]
mov dword [edx + 0x3140], eax
mov edx, 0x53a91d
mov eax, dword [ebp - 0x74]
call fcn.00426790
mov eax, dword [ebp - 0xa8]
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x54]
call fcn.0051ad80
pop eax
mov edx, dword [ebp - 0x70]
mov dword fs:[0], edx
pop edi
pop esi
mov esp, ebp
pop ebp
ret