Function at 0x4d20b0
Capabilities:
Create process on windows
Read file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x9bb8]
mov eax, 0x9bb8
call fcn.00530230
push 0xffffffffffffffff
push 0x552fe0
mov eax, dword fs:[0]
push eax
sub esp, 0x8c
mov eax, dword [0x58cb30]
xor eax, ebp
mov dword [ebp + 0x9bb4], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0x1018
push 0
lea eax, [ebp + 0x62dc]
push eax
call fcn.00532770
add esp, 0xc
cmp byte [0x5943f4], 0
je 0x4d212d
push 0x800
lea eax, [ebp + 0x62dc]
push eax
mov ecx, 0x5c3bd0
call fcn.004099c0
jmp 0x4d221c
lea ecx, [ebp + 0x9b18]
call fcn.004bdb30
mov dword [ebp - 4], 0
push 1
lea eax, [ebp + 0x9b18]
push eax
mov ecx, 0x5c6810
call fcn.0045d3c0
mov eax, dword [ebp + 0x9b2c]
test eax, eax
jne 0x4d21a1
push 0x65
call fcn.004b7300
mov esi, eax
push 0x14c
call fcn.004b7300
push 0x30
push esi
push eax
push dword [0x5933dc]
call fcn.004feae0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x9b18]
test eax, eax
je 0x4d32c0
push eax
call fcn.0053867f
add esp, 4
jmp 0x4d32c0
cmp eax, 1
jne 0x4d21c3
push 0
push 0x800
lea eax, [ebp + 0x62dc]
push eax
lea ecx, [ebp + 0x9b18]
call fcn.004bdd20
test al, al
jne 0x4d2202
push 0x800
lea eax, [ebp + 0x52dc]
push eax
mov ecx, 0x5c6810
call fcn.0045d220
lea eax, [ebp + 0x52dc]
push eax
call fcn.004a3770
cmp word [eax], 0
jne 0x4d21f0
mov eax, str.report.
push 0x800
push eax
lea eax, [ebp + 0x62dc]
push eax
call fcn.004bdae0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0x9b18]
test eax, eax
je 0x4d221c
push eax
call fcn.0053867f
add esp, 4
cmp byte [0x5943f4], 0
mov eax, str.InterfaceReportArc
jne 0x4d222f
mov eax, str.InterfaceReportFile
push 0
push str.OutFormat
push eax
call fcn.004cffa0
test eax, eax
sete bl
mov dword [ebp + 0x72e0], 0
test eax, eax
mov eax, 0x56943c
je 0x4d2259
mov eax, 0x569444
push 0x800
push eax
lea eax, [ebp + 0x62dc]
push eax
call fcn.004a3820
push 0x800
lea eax, [ebp + 0x62dc]
push eax
push eax
mov ecx, 0x5c6810
call fcn.0045dd10
xor esi, esi
lea eax, [ebp + 0x62dc]
push eax
call fcn.00491350
test al, al
je 0x4d2303
test esi, esi
je 0x4d22ab
push 0x800
push 0
lea eax, [ebp + 0x62dc]
push eax
call fcn.004a3820
push esi
push 0x56944c
push 0xa
lea eax, [ebp + 0x9ba0]
push eax
call fcn.00404ce0
add esp, 0x10
push 0x800
lea eax, [ebp + 0x9ba0]
push eax
lea eax, [ebp + 0x62dc]
push eax
call fcn.004a3820
test bl, bl
mov eax, 0x56943c
jne 0x4d22e8
mov eax, 0x569444
push 0x800
push eax
lea eax, [ebp + 0x62dc]
push eax
call fcn.004a3820
inc esi
cmp esi, 0x3e8
jl 0x4d2284
lea eax, [ebp + 0x62dc]
push eax
push 0x4d3800
push dword [0x5933dc]
push str.REPORT
push dword [0x5d3758]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
test eax, eax
je 0x4d32c0
push 0x800
lea eax, [ebp + 0x62dc]
push eax
push eax
mov ecx, 0x5c6810
call fcn.0045dd10
cmp dword [ebp + 0x72e0], 0
sete bh
mov byte [ebp - 0x12], bh
push 0x569464
lea eax, [ebp + 0x62dc]
push eax
call fcn.004928f0
mov edi, eax
mov dword [ebp - 0x18], edi
test edi, edi
jne 0x4d2382
lea eax, [ebp + 0x62dc]
push eax
mov ecx, 0x5d381c
call fcn.00487b90
jmp 0x4d32c0
push 0
push 0
push 0x558718
push 0xc
call fcn.00500d00
mov byte [ebp - 0x13], al
push 0x556
call fcn.004b7300
push eax
call fcn.004ff3f0
add esp, 4
cmp dword [ebp + 0x72e0], 1
jne 0x4d23ca
push edi
push 0xff
call fcn.00539357
push edi
push 0xfe
call fcn.00539357
add esp, 0x10
mov bl, 1
mov byte [ebp - 0x11], bl
xor esi, esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], esi
cmp byte [0x5943f4], 0
jne 0x4d23fb
cmp byte [ebp + 0x72ea], 0
jne 0x4d23ff
mov byte [ebp - 0x2c], 1
lea ecx, [ebp - 0x70]
call fcn.00459ca0
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x98]
call fcn.00459ca0
mov byte [ebp - 4], 4
cmp byte [0x5943f4], 0
je 0x4d245e
push 0x800
lea eax, [ebp + 0x52dc]
push eax
mov ecx, 0x5c3bd0
call fcn.004099c0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp + 0x52dc]
push eax
call fcn.004d1f50
mov bl, al
jmp 0x4d276b
lea ecx, [ebp + 0x9b18]
call fcn.004bdb30
mov byte [ebp - 4], 5
push 1
lea eax, [ebp + 0x9b18]
push eax
mov ecx, 0x5c6810
call fcn.0045d3c0
push 1
push 0
push 3
lea eax, [ebp + 0x9b18]
push eax
lea ecx, [ebp + 0x10f8]
call fcn.004b9840
mov byte [ebp - 4], 6
mov dword [ebp + 0x9abc], 0
mov dword [ebp + 0x9ac0], 0
mov dword [ebp + 0x9ac4], 0
mov dword [ebp + 0x9ac8], 0
mov dword [ebp + 0x9acc], 0
mov dword [ebp + 0x9ad0], 0
jmp 0x4d24e0
lea eax, [ebp + 0x8aac]
push eax
lea ecx, [ebp + 0x10f8]
call fcn.004ba530
test eax, eax
jne 0x4d2742
cmp byte [0x5943f6], al
jne 0x4d2742
call fcn.00463b70
cmp byte [ebp + 0x72ea], 0
je 0x4d26b0
push 0x10f8
push 0
lea eax, [ebp]
push eax
call fcn.00532770
add esp, 0xc
push 0x800
lea eax, [ebp + 0x8aac]
push eax
lea eax, [ebp]
push eax
call fcn.004bdae0
mov ecx, dword [ebp + 0x9aac]
mov eax, dword [ebp + 0x9ab0]
mov dword [ebp + 0x1088], ecx
mov dword [ebp + 0x108c], eax
mov dword [ebp + 0x1080], ecx
mov dword [ebp + 0x1084], eax
cmp byte [ebp + 0x72ee], 0
je 0x4d25bd
test dword [ebp + 0x9ab4], 0x800
je 0x4d25bd
call fcn.00495f30
test eax, eax
je 0x4d25bd
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp + 0x8aac]
push eax
call dword [sym.imp.KERNEL32.dll_GetCompressedFileSizeW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x4d25a4
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x4d25ba
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
add ecx, ebx
adc eax, 0
mov dword [ebp + 0x1088], ecx
mov dword [ebp + 0x108c], eax
mov bl, byte [ebp - 0x11]
mov eax, dword [ebp + 0x9ab4]
mov dword [ebp + 0x10a8], eax
lea eax, [ebp + 0x9ae4]
push eax
lea ecx, [ebp + 0x1090]
call fcn.004bf780
mov dword [ebp + 0x10ec], esi
inc esi
mov dword [ebp - 0x30], esi
inc dword [ebp - 0x48]
mov eax, dword [ebp + 0x1080]
add dword [ebp - 0x40], eax
mov eax, dword [ebp + 0x1084]
adc dword [ebp - 0x3c], eax
mov eax, dword [ebp + 0x1088]
add dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x108c]
adc dword [ebp - 0x34], eax
cmp byte [ebp + 0x72f0], 0
je 0x4d269a
push dword [ebp + 0x10a8]
call fcn.00491560
test al, al
jne 0x4d269a
lea ecx, [ebp + 0x529c]
call fcn.0048f110
mov byte [ebp - 4], 7
push 0
lea eax, [ebp + 0x8aac]
push eax
lea ecx, [ebp + 0x529c]
call fcn.0048f900
test al, al
je 0x4d268b
mov byte [ebp - 4], 8
push 0
push SysReAllocString
push SysReAllocString
push dword [0x5ae2c0]
push 0
lea eax, [ebp + 0x10b8]
push eax
lea eax, [ebp + 0x529c]
push eax
call fcn.004906b0
mov dword [ebp - 4], 7
mov dword [ebp + 0x10b4], 2
mov byte [ebp - 4], 6
lea ecx, [ebp + 0x529c]
call fcn.0048f160
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x70]
call fcn.0045a0b0
cmp byte [ebp - 0x4c], 0
jne 0x4d2740
cmp byte [0x5943f6], 0
jne 0x4d2740
cmp byte [ebp + 0x72e9], 0
je 0x4d24e0
cmp byte [ebp + 0x9ab8], 0
jne 0x4d24e0
push 2
push 0
lea eax, [ebp + 0x8aac]
push eax
mov ecx, 0x5c3bd0
call fcn.0040ab00
cmp eax, 1
jne 0x4d24e0
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp + 0x8aac]
push eax
call fcn.004d1f50
test al, al
je 0x4d2740
mov esi, dword [ebp - 0x30]
jmp 0x4d24e0
xor bl, bl
mov byte [ebp - 4], 5
lea ecx, [ebp + 0x10f8]
call fcn.004b9930
mov byte [ebp - 4], 4
mov eax, dword [ebp + 0x9b18]
test eax, eax
je 0x4d2768
push eax
call fcn.0053867f
add esp, 4
mov bh, byte [ebp - 0x12]
test bl, bl
je 0x4d3297
cmp dword [ebp + 0x72e4], 8
je 0x4d27a5
lea eax, [ebp + 0x62dc]
mov dword [0x5e0c04], eax
mov esi, dword [ebp - 0x6c]
push 0
lea ecx, [ebp - 0x70]
call fcn.0045a000
push 0x4d3f10
push 0x70
push esi
push eax
call fcn.0053ccf0
add esp, 0x10
test bh, bh
je 0x4d2844
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x20]
call fcn.004bf260
lea eax, [ebp + 0x9b90]
push eax
lea ecx, [ebp - 0x20]
call fcn.004beca0
push dword [ebp + 0x9ba0]
push dword [ebp + 0x9b9c]
push dword [ebp + 0x9b98]
push dword [ebp + 0x9b94]
push dword [ebp + 0x9b90]
push 0x568df0
push 0x32
lea eax, [ebp + 0x9b10]
push eax
call fcn.00404ce0
add esp, 0x20
lea eax, [ebp + 0x9b10]
push eax
push 0x55b
call fcn.004b7300
push eax
push 0x864
lea eax, [ebp + 0x5214]
push eax
call fcn.00404ce0
lea eax, [ebp + 0x5214]
push eax
push str._html__r_n_head__r_n_meta_http_equiv_Content_Type__content_text_html__charsetUTF_8____r_n_title__s__title__r_n__head__r_n_body__r_n_pre__r_n
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0x20
cmp byte [ebp + 0x72ec], 0
je 0x4d29ff
test bh, bh
je 0x4d2869
push 0x569574
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0xc
xor eax, eax
mov word [ebp + 0x60dc], ax
cmp byte [ebp + 0x72ef], al
je 0x4d28b6
lea esi, [ebp + 0x60dc]
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4d2883
sub esi, ecx
sar esi, 1
push 0x72
call fcn.004b7300
push eax
push str.___14s
push 0x100
lea eax, [ebp + 0x60dc]
lea eax, [eax + esi*2]
push eax
call fcn.00404ce0
add esp, 0x10
cmp byte [ebp + 0x72ed], 0
je 0x4d2903
lea esi, [ebp + 0x60dc]
lea ecx, [esi + 2]
jmp 0x4d28d0
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4d28d0
sub esi, ecx
sar esi, 1
push 0x6f
call fcn.004b7300
push eax
push str._12s
push 0x100
lea eax, [ebp + 0x60dc]
lea eax, [eax + esi*2]
push eax
call fcn.00404ce0
add esp, 0x10
cmp byte [ebp + 0x72ee], 0
je 0x4d2948
lea esi, [ebp + 0x60dc]
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4d2915
sub esi, ecx
sar esi, 1
push 0x71
call fcn.004b7300
push eax
push str._12s
push 0x100
lea eax, [ebp + 0x60dc]
lea eax, [eax + esi*2]
push eax
call fcn.00404ce0
add esp, 0x10
cmp byte [ebp + 0x72f0], 0
je 0x4d2993
lea esi, [ebp + 0x60dc]
lea ecx, [esi + 2]
lea ebx, [ebx]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4d2960
sub esi, ecx
sar esi, 1
push 0x78
call fcn.004b7300
push eax
push str._8s
push 0x100
lea eax, [ebp + 0x60dc]
lea eax, [eax + esi*2]
push eax
call fcn.00404ce0
add esp, 0x10
cmp word [ebp + 0x60dc], 0
jne 0x4d29b3
push 0x100
push 0x5695ac
lea eax, [ebp + 0x60dc]
push eax
call fcn.004bdae0
push 0x100
push 0x6e
call fcn.004b7300
push eax
lea eax, [ebp + 0x60dc]
push eax
call fcn.004bda80
lea eax, [ebp + 0x60dc]
push eax
push str._s_r_n_r_n
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0x10
test bh, bh
je 0x4d29ff
push 0x5695c4
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0xc
xor esi, esi
mov dword [ebp - 0x1c], esi
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x6c], eax
jbe 0x4d2db1
push eax
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x70]
call fcn.00459e70
cmp byte [ebp + 0x72eb], 0
je 0x4d2aec
mov eax, dword [ebp + 0x10f0]
cmp eax, esi
je 0x4d2aec
mov dword [ebp - 0x1c], eax
test bh, bh
je 0x4d2a55
push 0x569574
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0xc
push 0x5695d0
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0xc
mov eax, dword [ebp + 0x10f0]
test eax, eax
je 0x4d2aa6
dec eax
push eax
lea eax, [ebp + 0x51e4]
push eax
lea ecx, [ebp - 0x98]
call fcn.00459e70
mov esi, eax
push 0x28a
call fcn.004b7300
push esi
push eax
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0x10
jmp 0x4d2ac0
push 0x558
call fcn.004b7300
push eax
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0xc
test bh, bh
je 0x4d2ad8
push 0x5695c4
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0xc
push 0x55d234
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0xc
xor eax, eax
mov word [ebp + 0x72f4], ax
push dword [ebp + 0x10a8]
call fcn.00491560
mov bl, al
cmp byte [ebp + 0x72ef], 0
je 0x4d2b89
mov ecx, dword [ebp + 0x1090]
mov edx, dword [ebp + 0x1094]
mov dword [ebp + 0x9bac], ecx
mov dword [ebp + 0x9bb0], edx
lea eax, [ebp + 0x9b50]
push eax
lea ecx, [ebp + 0x9bac]
call fcn.004beca0
lea ecx, [ebp + 0x72f4]
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4d2b40
sub ecx, edx
sar ecx, 1
push dword [ebp + 0x9b60]
push dword [ebp + 0x9b5c]
push dword [ebp + 0x9b58]
push dword [ebp + 0x9b54]
push dword [ebp + 0x9b50]
push str._u__02u__02u__02u:_02u
push 0x1400
lea eax, [ebp + 0x72f4]
lea eax, [eax + ecx*2]
push eax
call fcn.00404ce0
add esp, 0x20
cmp byte [ebp + 0x72ed], 0
je 0x4d2c25
mov ecx, dword [ebp + 0x1080]
mov eax, dword [ebp + 0x1084]
cmp ecx, 0x7fffffff
jne 0x4d2bc3
cmp eax, ecx
jne 0x4d2bc3
push 0x1e
push 0x55cfcc
lea eax, [ebp + 0x9b38]
push eax
call fcn.004bdae0
jmp 0x4d2bd6
push 0xa
lea edx, [ebp + 0x9b38]
push edx
push eax
push ecx
call fcn.0053dce1
add esp, 0x10
lea esi, [ebp + 0x72f4]
lea ecx, [esi + 2]
nop
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4d2be0
sub esi, ecx
sar esi, 1
test bl, bl
je 0x4d2bff
push 0x573
call fcn.004b7300
jmp 0x4d2c05
lea eax, [ebp + 0x9b38]
push eax
push str._12s
mov eax, 0x1400
sub eax, esi
push eax
lea eax, [ebp + 0x72f4]
lea eax, [eax + esi*2]
push eax
call fcn.00404ce0
add esp, 0x10
cmp byte [ebp + 0x72ee], 0
je 0x4d2cc5
mov ecx, dword [ebp + 0x1088]
mov eax, dword [ebp + 0x108c]
cmp ecx, 0x7fffffff
jne 0x4d2c5f
cmp eax, ecx
jne 0x4d2c5f
push 0x1e
push 0x55cfcc
lea eax, [ebp + 0x9b38]
push eax
call fcn.004bdae0
jmp 0x4d2c72
push 0xa
lea edx, [ebp + 0x9b38]
push edx
push eax
push ecx
call fcn.0053dce1
add esp, 0x10
lea esi, [ebp + 0x72f4]
lea ecx, [esi + 2]
jmp 0x4d2c80
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4d2c80
sub esi, ecx
sar esi, 1
test bl, bl
je 0x4d2c9f
push 0x573
call fcn.004b7300
jmp 0x4d2ca5
lea eax, [ebp + 0x9b38]
push eax
push str._12s
mov eax, 0x1400
sub eax, esi
push eax
lea eax, [ebp + 0x72f4]
lea eax, [eax + esi*2]
push eax
call fcn.00404ce0
add esp, 0x10
cmp byte [ebp + 0x72f0], 0
je 0x4d2d6e
mov eax, dword [ebp + 0x10b4]
cmp eax, 3
jne 0x4d2cf8
push 0x41
lea eax, [ebp + 0x9af4]
push eax
push 0
push 0x20
lea eax, [ebp + 0x10b8]
push eax
call fcn.004bd170
jmp 0x4d2d40
cmp eax, 1
je 0x4d2d1c
cmp eax, 2
je 0x4d2d17
push 0x41
push 0x56960c
lea eax, [ebp + 0x9af4]
push eax
call fcn.004bdae0
jmp 0x4d2d40
cmp eax, 1
jne 0x4d2d23
mov eax, 0x55cfd0
jmp 0x4d2d28
mov eax, str._08X
push dword [ebp + 0x10b8]
push eax
push 0x41
lea eax, [ebp + 0x9af4]
push eax
call fcn.00404ce0
add esp, 0x10
push 0x1400
lea eax, [ebp + 0x9af4]
push eax
lea eax, [ebp + 0x72f4]
push eax
call fcn.004bda80
push 0x1400
push 0x569620
lea eax, [ebp + 0x72f4]
push eax
call fcn.004bda80
push 0x1400
lea eax, [ebp]
push eax
lea eax, [ebp + 0x72f4]
push eax
call fcn.004bda80
lea eax, [ebp + 0x72f4]
push eax
push str._s_r_n
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0x10
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp eax, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x1c]
jb 0x4d2a12
cmp byte [ebp + 0x72ec], 0
je 0x4d3101
push 0xa
lea eax, [ebp + 0x9b38]
push eax
push dword [ebp - 0x3c]
push dword [ebp - 0x40]
call fcn.0053dce1
push 0xa
lea eax, [ebp + 0x9b78]
push eax
push dword [ebp - 0x34]
push dword [ebp - 0x38]
call fcn.0053dce1
add esp, 0x20
test bh, bh
je 0x4d2e01
push 0x569574
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0xc
push 0x569628
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0xc
xor eax, eax
mov word [ebp + 0x98f4], ax
mov word [ebp + 0x60dc], ax
cmp byte [ebp + 0x72ef], al
je 0x4d2eb0
lea esi, [ebp + 0x60dc]
lea ecx, [esi + 2]
lea ebx, [ebx]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4d2e40
sub esi, ecx
sar esi, 1
push 0x1ac
call fcn.004b7300
push eax
push str.___14s
push 0x100
lea eax, [ebp + 0x60dc]
lea eax, [eax + esi*2]
push eax
call fcn.00404ce0
add esp, 0x10
lea ecx, [ebp + 0x98f4]
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4d2e80
sub ecx, edx
sar ecx, 1
push 0x558718
push str.___14s
push 0x100
lea eax, [ebp + 0x98f4]
lea eax, [eax + ecx*2]
push eax
call fcn.00404ce0
add esp, 0x10
cmp byte [ebp + 0x72ed], 0
je 0x4d2f34
lea esi, [ebp + 0x60dc]
lea ecx, [esi + 2]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4d2ec6
sub esi, ecx
sar esi, 1
push 0x6f
call fcn.004b7300
push eax
push str._12s
push 0x100
lea eax, [ebp + 0x60dc]
lea eax, [eax + esi*2]
push eax
call fcn.00404ce0
add esp, 0x10
lea ecx, [ebp + 0x98f4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4d2f02
sub ecx, edx
sar ecx, 1
lea eax, [ebp + 0x9b38]
push eax
push str._12s
push 0x100
lea eax, [ebp + 0x98f4]
lea eax, [eax + ecx*2]
push eax
call fcn.00404ce0
add esp, 0x10
cmp byte [ebp + 0x72ee], 0
je 0x4d2fc2
lea esi, [ebp + 0x60dc]
lea ecx, [esi + 2]
lea ebx, [ebx]
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x4d2f50
sub esi, ecx
sar esi, 1
push 0x71
call fcn.004b7300
push eax
push str._12s
push 0x100
lea eax, [ebp + 0x60dc]
lea eax, [eax + esi*2]
push eax
call fcn.00404ce0
add esp, 0x10
lea ecx, [ebp + 0x98f4]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4d2f90
sub ecx, edx
sar ecx, 1
lea eax, [ebp + 0x9b78]
push eax
push str._12s
push 0x100
lea eax, [ebp + 0x98f4]
lea eax, [eax + ecx*2]
push eax
call fcn.00404ce0
add esp, 0x10
cmp byte [ebp + 0x72f0], 0
je 0x4d2ff7
push 0x100
push 0x569630
lea eax, [ebp + 0x60dc]
push eax
call fcn.004bda80
push 0x100
push 0x569630
lea eax, [ebp + 0x98f4]
push eax
call fcn.004bda80
cmp word [ebp + 0x60dc], 0
jne 0x4d302d
push 0x100
push 0x5695ac
lea eax, [ebp + 0x60dc]
push eax
call fcn.004bdae0
push 0x100
push 0x5695ac
lea eax, [ebp + 0x98f4]
push eax
call fcn.004bdae0
push 0x100
push 0x559
call fcn.004b7300
push eax
lea eax, [ebp + 0x60dc]
push eax
call fcn.004bda80
lea ecx, [ebp + 0x98f4]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4d3052
sub ecx, edx
sar ecx, 1
push dword [ebp - 0x48]
push 0x55b94c
mov eax, 0x100
sub eax, ecx
push eax
lea eax, [ebp + 0x98f4]
lea eax, [eax + ecx*2]
push eax
call fcn.00404ce0
add esp, 0x10
cmp word [ebp + 0x60dc], 0x20
jne 0x4d30a5
cmp word [ebp + 0x60de], 0x20
jne 0x4d30a5
mov eax, 0x23
mov word [ebp + 0x60dc], ax
jmp 0x4d30aa
mov eax, 0x23
cmp word [ebp + 0x98f4], 0x20
jne 0x4d30c5
cmp word [ebp + 0x98f6], 0x20
jne 0x4d30c5
mov word [ebp + 0x98f4], ax
lea eax, [ebp + 0x98f4]
push eax
lea eax, [ebp + 0x60dc]
push eax
push str._s_r_n_s_r_n
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0x14
test bh, bh
je 0x4d3119
push 0x5695c4
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0xc
jmp 0x4d3105
test bh, bh
je 0x4d3119
push str.__pre__r_n__body__r_n__html__r_n
push dword [ebp + 0x72e0]
push edi
call fcn.004d3df0
add esp, 0xc
cmp byte [ebp + 0x72dd], 0
je 0x4d320b
push edi
call fcn.0053e053
push edi
call fcn.0053d2f9
push eax
call fcn.0053c4ac
add esp, 0xc
mov ebx, eax
cmp ebx, 0xffffffff
je 0x4d320b
mov byte [ebp - 4], 0xb
lea ecx, [ebx + 2]
push ecx
lea ecx, [ebp + 0x9ba4]
call fcn.00407180
mov byte [ebp - 4], 0xc
push 0
push 0
push edi
call fcn.0053ccab
add esp, 0xc
push edi
push ebx
push 1
mov esi, dword [ebp + 0x9ba4]
push esi
call fcn.0053c895
add esp, 0x10
mov byte [esi + ebx], 0
mov byte [esi + ebx + 1], 0
mov eax, dword [ebp + 0x72e0]
sub eax, 0
je 0x4d31c4
sub eax, 1
je 0x4d31bc
sub eax, 1
jne 0x4d31fa
push dword [ebp + 0x9ba8]
lea ecx, [ebp - 0x28]
call fcn.00463640
mov byte [ebp - 4], 0xd
push dword [ebp - 0x24]
mov ebx, dword [ebp - 0x28]
push ebx
push esi
call fcn.004c1480
jmp 0x4d31e3
push esi
call fcn.004638a0
jmp 0x4d31fa
push dword [ebp + 0x9ba8]
lea ecx, [ebp - 0x28]
call fcn.00463640
mov byte [ebp - 4], 0xe
push dword [ebp - 0x24]
mov ebx, dword [ebp - 0x28]
push ebx
push esi
call fcn.004c15f0
push ebx
call fcn.004638a0
mov byte [ebp - 4], 0xc
test ebx, ebx
je 0x4d31fa
push ebx
call fcn.0053867f
add esp, 4
mov byte [ebp - 4], 0xb
test esi, esi
je 0x4d320b
push esi
call fcn.0053867f
add esp, 4
mov dword [ebp - 4], 4
push edi
call fcn.005391cd
add esp, 4
cmp byte [ebp + 0x72dc], 0
je 0x4d326d
push 8
push 0
push 0
lea eax, [ebp + 0x62dc]
push eax
push str.print
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp eax, 0x20
ja 0x4d326d
lea eax, [ebp + 0x62dc]
push eax
call fcn.004d34c0
test al, al
jne 0x4d326d
lea eax, [ebp + 0x62dc]
push eax
push 0x557
call fcn.004b7300
push eax
call fcn.005037c0
add esp, 8
cmp byte [0x5943f4], 0
jne 0x4d3297
cmp word [ebp + 0x62dc], 0
je 0x4d3297
lea eax, [ebp + 0x62dc]
push eax
call fcn.004a3770
push eax
mov ecx, 0x5c6810
call fcn.00460c30
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x98]
call fcn.00459e00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.00459e00
cmp byte [ebp - 0x13], 0
je 0x4d32c0
call fcn.005015c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x9bb4]
xor ecx, ebp
call fcn.00530218
lea esp, [ebp + 0x9bb8]
pop ebp
ret