Function at 0x4dd1b06e
Capabilities:
Create thread

Disassembly:
mov al, byte [ebp - 0x61]
test al, al
je 0x4dd29b82
mov ecx, dword [ebx + 0x48]
mov edx, dword [ebp - 0xb4]
add ecx, 0x14
push ecx
mov ecx, dword [ebp - 0x7c]
push edx
push 0
push 0
call fcn.4dd1be06
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x78], eax
call fcn.4dd1a10a
test eax, eax
jne 0x4dd1a26e
mov eax, dword [ebp - 0xb0]
cmp eax, 0xffffffff
jne 0x4dd29a6e
mov esi, dword [ebp + 8]
cmp esi, 2
je 0x4dd2ee8b
cmp esi, 3
jne 0x4dd2eea9
mov edx, dword [ebx + 0x48]
mov ecx, dword [ebp - 0x74]
push 1
mov dword [edx + 0x28], esi
call fcn.4dd1bad6
mov ecx, dword [ebx + 0x48]
mov dl, 1
call fcn.4dd1bb09
mov eax, dword [ebx + 0x48]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4dd1a1aa
test byte [ebp + 0xc], 0x60
jne 0x4dd1b6f6
mov edx, dword [ebp - 0x98]
mov ecx, dword [ebx + 0x48]
mov eax, dword [edx + 0xc]
mov dword [ecx + 0x34], eax
mov al, byte [ebp - 0x69]
mov ecx, dword [ebp - 0x98]
xor esi, esi
test al, al
mov dword [ecx + 0xc], esi
jne 0x4dd1b701
mov edx, dword [ebp - 0x98]
mov byte [edx + 0x10], 0
mov eax, dword [ebx + 0x48]
push eax
call fcn.4dd1a2be
add esp, 4
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x78], eax
call fcn.4dd1a10a
test eax, eax
jne 0x4dd1a26e
mov byte [ebx + 0x55], 1
test edi, edi
mov ecx, dword [ebx + 0x48]
mov edx, dword [ecx + 0x18]
mov eax, dword [ebp - 0x84]
mov dword [eax], edx
je 0x4dd1a21f
mov al, byte [ebp - 0x61]
test al, al
je 0x4dd1a21f
mov ecx, dword [ebx + 0x48]
mov edx, dword [ecx + 0x14]
mov dword [edi], edx
mov al, byte [ebp - 0x69]
test al, al
jne 0x4dd1a239
test edi, edi
je 0x4dd306db
mov al, byte [ebp - 0x61]
test al, al
je 0x4dd306db
mov edx, dword [ebx + 0x48]
mov eax, dword [edx + 0x14]
mov ecx, dword [ebp - 0x88]
mov edx, dword [ebp + 0x28]
push ecx
mov ecx, dword [ebp - 0x70]
push edx
push 0
mov dword [ebx + 0x58], eax
call fcn.4dd1a5ad
lea edx, [ebp - 0x84]
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x84], eax
call fcn.4dd1a10a
mov eax, dword [ebp - 0x90]
test eax, eax
jl 0x4dd1b797
mov al, byte [ebx + 0x55]
test al, al
je 0x4dd30710
lea ecx, [ebx + 0x64]
call fcn.4dd13c49
mov eax, dword [ebx]
push ebx
call dword [eax + 0x2c]
mov esi, dword [ebp - 0x90]
lea ecx, [ebp - 0xac]
call fcn.4dd113b5
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
pop ebx
call fcn.4dd11321
mov esp, ebp
pop ebp
ret 0x30
mov al, byte [ebp + 0xc]
and al, 0x10
mov dword [edi + 0x44], esi
mov byte [ebp - 0x69], al
jne 0x4dd1b32c
call fcn.4dd11340
mov ecx, dword [eax + 0x14]
test ecx, ecx
mov esi, 0x4dd116cc
jne 0x4dd1b38e
mov al, byte [ebp - 0x80]
test al, al
jne 0x4dd1ab8b
mov ecx, ebx
call fcn.4dd1a7cc
test eax, eax
mov dword [ebp - 0x90], eax
jl 0x4dd1b405
mov edx, dword [ebx + 0x60]
mov eax, dword [ebx + 0x5c]
lea edi, [ebx + 0x60]
push 1
lea esi, [ebx + 0x5c]
push edx
push eax
call fcn.4dd13e35
mov al, byte [ebp - 0x80]
add esp, 0xc
test al, al
mov dword [esi], 0
mov dword [edi], 0
jne 0x4dd1abd3
mov eax, dword [ebx + 0x2c]
mov ecx, dword [eax]
push edi
push esi
push 0
push 0
push eax
call dword [ecx + 0xc]
test eax, eax
mov dword [ebp - 0x90], eax
jl 0x4dd1b415
mov esi, dword [ebx + 0x48]
test esi, esi
jne 0x4dd1b425
mov edx, dword [section..data]
push 0x48
push 0xa00000
push edx
call dword [sym.imp.MSDART.DLL_MpHeapAlloc]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x4dd29b08
xor eax, eax
mov ecx, 0x12
mov edi, esi
rep stosd dword es:[edi], eax
mov ecx, esi
call fcn.4dd159ae
mov ecx, 0x12
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
mov dword [esi + 0x1c], 2
mov dword [esi + 0x18], 0xffffffff
test esi, esi
mov dword [ebx + 0x48], esi
je 0x4dd1b44a
mov eax, dword [ebx + 0x48]
mov dword [eax], ebx
mov al, byte [ebp - 0x6a]
test al, al
jne 0x4dd1b47a
mov al, byte [ebp - 0x64]
test al, al
jne 0x4dd30521
mov al, byte [ebp - 0x62]
test al, al
jne 0x4dd1b4bb
mov eax, dword [ebp - 0xb4]
test eax, eax
je 0x4dd1ac70
mov edi, dword [eax + 0x100]
cmp edi, 0xffffffff
jne 0x4dd1ac79
mov eax, dword [ebp - 0x7c]
mov edi, dword [eax + 0xa4]
lea ecx, [ebp - 0x63]
push ecx
mov ecx, ebx
mov dword [ebp - 0xb0], edi
call fcn.4dd1b14a
test eax, eax
mov dword [ebp - 0x90], eax
jl 0x4dd1b4ca
mov al, byte [ebp - 0x63]
test al, al
je 0x4dd1aca6
mov eax, dword [ebx + 0x48]
or dword [eax + 0x1c], 4
mov al, byte [ebp + 0xc]
test al, 0x20
mov esi, dword [ebp + 0x18]
jne 0x4dd1b4da
test al, 0x40
jne 0x4dd1b4f5
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp + 0x28]
lea edx, [ebp - 0xc4]
push edx
push eax
push ecx
mov ecx, dword [ebp - 0x74]
add ecx, 0xb8
call fcn.4dd1b19f
test eax, eax
mov dword [ebp - 0x90], eax
jl 0x4dd1b510
mov ecx, dword [ebp - 0x7c]
call fcn.4dd19f55
test al, al
jne 0x4dd29aba
mov ecx, dword [ebp - 0xb4]
test ecx, ecx
je 0x4dd1ad10
mov edx, dword [ebx + 0x48]
mov eax, dword [ecx + 0x38c]
mov dword [edx + 0x2c], eax
lea eax, [edi + 1]
cmp eax, 4
ja case.0x4dd1ad18.0
jmp dword [eax*4 + 0x4dd1b7c8]
mov eax, dword [ebx + 0x48]
or dword [eax + 0x1c], 8
mov al, byte [ebp + 0x14]
test al, al
jne 0x4dd29b29
mov eax, dword [ebx + 0x48]
mov edx, dword [ebp - 0x80]
push 0
lea ecx, [eax + 0x3c]
push ecx
mov ecx, dword [ebp + 0x1c]
add eax, 0x38
push eax
mov eax, dword [ebp - 0xc4]
push edi
push edx
push eax
push 0
push ecx
push esi
mov ecx, ebx
call fcn.4dd1aa5a
lea ecx, [ebp - 0xac]
lea edx, [ebp - 0x68]
mov dword [ebp - 0x68], eax
call fcn.4dd1a10a
test eax, eax
jne 0x4dd1a26e
mov eax, dword [ebp + 0x20]
test eax, eax
mov edx, dword [ebp - 0xb0]
mov dword [ebp - 0xb0], edx
jne 0x4dd1b60a
mov edi, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x74]
mov esi, dword [ebp + 0x28]
push edi
add ecx, 0xb8
push esi
mov dword [ebp - 0x70], ecx
call fcn.4dd1b9b7
test eax, eax
mov dword [ebp - 0x90], eax
jl 0x4dd1b658
mov eax, dword [ebx + 0x48]
lea ecx, [eax + 8]
push ecx
mov ecx, dword [ebp - 0x70]
add eax, 0xc
push eax
push esi
call fcn.4dd1b7e9
test eax, eax
mov dword [ebp - 0x90], eax
jl 0x4dd1b668
mov edx, dword [ebx + 0x48]
mov eax, dword [ebp - 0x74]
mov dword [edx + 0x10], edi
mov cl, byte [eax + 0x64]
test cl, cl
je 0x4dd1b678
mov eax, dword [ebx + 0x48]
mov cl, byte [eax + 8]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x74]
mov edx, dword [edx + 0x6c]
lea esi, [ebp - 0xbc]
push esi
mov byte [ebp - 0x68], cl
mov esi, dword [ebp - 0x68]
mov ecx, dword [ebx + 0x40]
push esi
push eax
push edx
mov dword [ebp - 0xbc], 0
mov byte [ebp - 0xb8], 7
call fcn.4dd1b82a
mov esi, eax
test esi, esi
jl 0x4dd1ae44
mov al, byte [ebp - 0xb8]
mov edx, dword [ebp - 0xbc]
and al, 4
neg al
mov ecx, ebx
sbb eax, eax
and eax, edx
push eax
call fcn.4dd1bd6d
mov esi, eax
lea ecx, [ebp - 0xbc]
call fcn.4dd11434
mov dword [ebp - 0x90], esi
test esi, esi
jl 0x4dd1b68c
mov esi, dword [ebp - 0x70]
mov ecx, esi
call fcn.4dd1ba1a
test eax, eax
mov dword [ebp - 0x90], eax
jl 0x4dd1b69c
mov eax, dword [ebp - 0x74]
mov cl, byte [eax + 0x66]
test cl, cl
jne 0x4dd1b6ac
mov ecx, dword [ebx + 0x48]
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp + 0x28]
add ecx, 4
push ecx
push edx
push eax
mov ecx, esi
call fcn.4dd1ba5c
test eax, eax
mov dword [ebp - 0x90], eax
jl 0x4dd1b6d3
jmp 0x4dd1b6e6
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc4
mov eax, dword [0x4dd78004]
mov edx, dword [ebp + 0x34]
push ebx
mov ebx, ecx
mov ecx, dword [ebp + 0x30]
push esi
mov esi, dword [ebp + 0x2c]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x84], ecx
push edi
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0xb8], esi
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x94], ebx
call fcn.4dd1134b
mov eax, dword [ebx + 0x10]
cmp ebx, eax
mov edi, dword [ebx + 0x40]
mov dword [ebp - 0x74], edi
je 0x4dd29ac4
jmp 0x4dd1b258
add eax, 0xfffffff4
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp + 0x10]
mov eax, ecx
mov edx, ecx
shr eax, 7
shr edx, 0xa
shr ecx, 0xb
and al, 1
and dl, 1
and cl, 1
test al, al
mov dword [ebp - 0xb0], 0xffffffff
mov byte [ebp - 0x63], 0
mov dword [ebp - 0x70], 0
mov byte [ebp - 0x62], al
mov byte [ebp - 0x6a], dl
mov byte [ebp - 0x64], cl
jne 0x4dd29ad0
test dl, dl
jne 0x4dd29ad0
test cl, cl
je 0x4dd1b265
jmp 0x4dd29ad0
mov eax, dword [ebx]
push ebx
call dword [eax + 0x28]
lea ecx, [ebx + 0x64]
call fcn.4dd13974
mov al, byte [ebp + 0x14]
test al, al
je 0x4dd1b294
jmp 0x4dd1b2ba
test eax, eax
jne 0x4dd1b0ce
jmp 0x4dd29ac4
mov dword [ebp - 0xb4], esi
mov byte [ebp - 0x61], 1
xor esi, esi
jmp 0x4dd1b127
test dl, dl
jne 0x4dd1b287
mov dword [ebp - 0xb4], esi
xor esi, esi
jmp 0x4dd1b127
xor esi, esi
mov dword [ebp - 0xb4], esi
jmp 0x4dd1b127
mov al, byte [ebp - 0x62]
test al, al
jne 0x4dd1b2ba
mov al, byte [ebp - 0x6a]
test al, al
jne 0x4dd1b2ba
mov al, byte [ebp - 0x64]
test al, al
jne 0x4dd1b2ba
test byte [ebp + 0xc], 0x10
jne 0x4dd1b2b4
cmp dword [ebp + 8], esi
je 0x4dd1b2ba
mov byte [ebp - 0x80], 0
jmp 0x4dd1b2f0
mov al, byte [ebp - 0x62]
test al, al
mov byte [ebp - 0x80], 1
je 0x4dd1b2f0
test byte [ebp + 0xc], 0x60
je 0x4dd1b2f0
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x90], 0x800a0bb9
call fcn.4dd15c30
test eax, eax
je 0x4dd1b2f0
cmp dword [ebp - 0x90], esi
jne 0x4dd1a287
mov al, byte [edi + 0x10c]
test al, al
je 0x4dd1ab49
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x90], 0x800a0e7f
call fcn.4dd15c30
test eax, eax
je 0x4dd1ab49
cmp dword [ebp - 0x90], esi
je 0x4dd1ab49
jmp 0x4dd1a287
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
lea edx, [ebp - 0xc0]
push edx
lea edx, [ebp - 0x68]
push edx
push 0xa9
push 0x4dd296f4
push eax
mov dword [ebp - 0x68], esi
mov dword [ebp - 0xc0], esi
call dword [ecx + 0xb8]
test eax, eax
jl 0x4dd1b367
test byte [ebp - 0xc0], 1
jne 0x4dd1ab5a
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x90], 0x800a0cb3
lea ecx, [ebp - 0xac]
mov dword [eax + 0x20], 0x2725
call fcn.4dd15c30
jmp 0x4dd29ae1
cmp dword [edi + 0x6c], 4
je 0x4dd1b3a2
mov al, byte [edi + 0x10f]
test al, al
je 0x4dd1ab6f
push 3
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], esi
call fcn.4dd1178b
push 0
lea ecx, [ebp - 0x2c]
call fcn.4dd186fa
xor ecx, ecx
mov cl, byte [ebp + 0xc]
add edi, 0x10e
push edi
shr ecx, 4
and ecx, 0xffffff01
push ecx
mov ecx, dword [ebp - 0x7c]
call fcn.4dd4511e
push 0
lea ecx, [ebp - 0x2c]
call fcn.4dd186e6
push eax
push 0
push 0x22
push 0x4dd117c8
mov ecx, ebx
call fcn.4dd1a72c
lea ecx, [ebp - 0x2c]
mov byte [edi], 1
mov dword [ebp - 0x2c], esi
call fcn.4dd116d5
jmp 0x4dd1ab6f
lea ecx, [ebp - 0xac]
call fcn.4dd15c30
jmp 0x4dd29aee
lea ecx, [ebp - 0xac]
call fcn.4dd15c30
jmp 0x4dd29afb
mov ecx, esi
call fcn.4dd159ae
mov ecx, 0x12
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
mov dword [esi + 0x1c], 2
mov dword [esi + 0x18], 0xffffffff
jmp 0x4dd1ac35
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x90], 0x8007000e
call fcn.4dd15c30
test eax, eax
je 0x4dd1ac35
mov eax, dword [ebp - 0x90]
test eax, eax
je 0x4dd1ac35
jmp 0x4dd1a27c
mov eax, dword [ebx + 0x48]
or dword [eax + 0x1c], 0x100
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x4dd1ad88
mov ecx, dword [ebx + 0x48]
mov dword [ecx + 0x44], eax
mov edx, dword [ebx + 0x48]
mov eax, dword [edx + 0x44]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
jmp 0x4dd1ad88
lea ecx, [ebp - 0xac]
call fcn.4dd15c30
test eax, eax
jmp 0x4dd29b36
mov eax, dword [ebx + 0x48]
or dword [eax + 0x1c], 0x80
jmp 0x4dd1ad88
lea ecx, [ebp - 0xac]
call fcn.4dd15c30
jmp 0x4dd29b0f
mov eax, dword [ebx + 0x48]
mov ecx, dword [eax + 0x1c]
or ecx, 0x20
or esi, 0x100000
mov dword [ebp - 0x70], 0x100000
jmp 0x4dd1b7dc
mov eax, dword [ebx + 0x48]
mov ecx, dword [eax + 0x1c]
or ecx, 0x40
or esi, 0x300000
mov dword [ebp - 0x70], 0x300000
jmp 0x4dd1b7dc
lea ecx, [ebp - 0xac]
call fcn.4dd15c30
jmp 0x4dd29b1c
mov al, byte [ecx + 0x279]
test al, al
je case.0x4dd1ad18.0
mov eax, dword [ebp - 0x70]
test eax, eax
je case.0x4dd1ad18.0
mov ecx, dword [0x4dd117cc]
mov eax, dword [0x4dd117c8]
push 0
push 0
mov dword [ebp - 0x10], ecx
lea edx, [ebp - 0x60]
push 0
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x1c], edx
mov edx, dword [0x4dd117d0]
mov dword [ebp - 0x14], eax
mov eax, dword [0x4dd117d4]
push ecx
push 0xc9
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], eax
mov dword [ebp - 0x18], 1
call fcn.4dd16975
mov eax, dword [ebp - 0x70]
add esp, 0x14
test eax, 0x200000
mov word [ebp - 0x3c], 3
mov dword [ebp - 0x34], 8
je 0x4dd1b59d
mov dword [ebp - 0x34], 0xe
push 0
lea edx, [ebp - 0x1c]
push edx
push 1
push 1
mov ecx, ebx
call fcn.4dd1a83d
jmp 0x4dd1ad58
mov eax, dword [ebx + 0x48]
mov ecx, dword [eax + 0x1c]
mov edx, dword [ebp + 0x1c]
or ecx, 1
mov dword [eax + 0x1c], ecx
mov eax, dword [ebx + 0x48]
mov dword [eax + 0x20], esi
mov al, byte [ebp + 0x14]
test al, al
mov ecx, dword [ebx + 0x48]
mov dword [ecx + 0x24], edx
jne case.0x4dd1ad18.0
mov eax, dword [ebx + 0x48]
mov edx, dword [ebp - 0x80]
push 0
lea ecx, [eax + 0x3c]
push ecx
add eax, 0x38
push eax
mov eax, dword [ebp - 0xc4]
push edi
push edx
mov ecx, esi
push eax
shr ecx, 0x18
and ecx, 0xffffff01
push ecx
push 0
push 0x1000
jmp 0x4dd1ad51
push 0
push 3
push eax
lea ecx, [ebp - 0x2c]
call fcn.4dd1871f
mov ecx, eax
call fcn.4dd186e6
push eax
push 0
push 0x49
push 0x4dd117c8
mov ecx, ebx
call fcn.4dd1a72c
lea edx, [ebp - 0x68]
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x68], eax
call fcn.4dd1a10a
lea ecx, [ebp - 0x2c]
mov esi, eax
mov dword [ebp - 0x2c], 0x4dd116cc
call fcn.4dd116d5
test esi, esi
jmp 0x4dd29b36
lea ecx, [ebp - 0xac]
call fcn.4dd15c30
jmp 0x4dd29b41
lea ecx, [ebp - 0xac]
call fcn.4dd15c30
jmp 0x4dd29b4e
mov ecx, ebx
call fcn.4dd53ec3
mov dword [ebp - 0x90], eax
test eax, eax
jmp 0x4dd1ae57
lea ecx, [ebp - 0xac]
call fcn.4dd15c30
jmp 0x4dd29b5b
lea ecx, [ebp - 0xac]
call fcn.4dd15c30
jmp 0x4dd29b68
push 1
mov ecx, ebx
call fcn.4dd1a6e3
test eax, eax
mov dword [ebp - 0x90], eax
jge 0x4dd1ae83
lea ecx, [ebp - 0xac]
call fcn.4dd15c30
jmp 0x4dd29b75
lea ecx, [ebp - 0xac]
call fcn.4dd15c30
test eax, eax
jne 0x4dd1a26e
mov edi, dword [ebp - 0x78]
test edi, edi
jne 0x4dd1a11a
jmp 0x4dd29b82
mov byte [eax + 0x294], dl
jmp 0x4dd1a1aa
mov edx, dword [ebx + 0x48]
mov byte [edx + 0x30], 1
mov eax, dword [ebx + 0x4c]
cmp eax, esi
je 0x4dd1b719
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebx + 0x4c], esi
mov ecx, dword [ebx + 0x48]
lea eax, [ebx + 0x50]
push eax
push esi
push ecx
push fcn.4dd1a2be
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, esi
mov dword [ebx + 0x4c], eax
jne 0x4dd1b788
mov edx, dword [ebx + 0x48]
mov esi, dword [edx + 0x34]
test esi, esi
je 0x4dd1b757
mov ecx, esi
call fcn.4dd76242
mov eax, dword [section..data]
push esi
push eax
call dword [sym.imp.MSDART.DLL_MpHeapFree]
add esp, 8
mov ecx, dword [ebp - 0x74]
push 0
call fcn.4dd1bad6
mov ecx, dword [ebx + 0x48]
xor dl, dl
call fcn.4dd1bb09
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x78], 0x80004005
call fcn.4dd1a10a
test eax, eax
jne 0x4dd1a26e
mov ecx, dword [ebp - 0x98]
mov byte [ecx + 0x10], 0
jmp 0x4dd1a1fe
mov ecx, dword [ebp - 0x74]
push 0
call fcn.4dd1bad6
mov ecx, dword [ebx + 0x48]
xor dl, dl
call fcn.4dd1bb09
mov eax, dword [ebx + 0x48]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4dd1b7bb
mov byte [eax + 0x294], dl
mov esi, dword [ebx + 0x48]
call fcn.4dd5173d
jmp 0x4dd1a27c
mov dword [eax + 0x1c], ecx
jmp 0x4dd1acbc
mov ecx, dword [ebx + 0x48]
mov edx, dword [ecx + 0x14]
mov dword [edx + 0x100], eax
jmp 0x4dd1a167
mov edi, 2
jmp 0x4dd1acfa
mov dword [ebp - 0x7c], 0
jmp 0x4dd1b0d4
test cl, cl
mov byte [ebp - 0x61], 0
je 0x4dd1b276
jmp 0x4dd1b287
test eax, eax
je 0x4dd1ab5a
jmp 0x4dd1a287
test eax, eax
je 0x4dd1ab8b
jmp 0x4dd1a287
test eax, eax
je 0x4dd1abd3
jmp 0x4dd1a287
xor esi, esi
jmp 0x4dd1ac2a
test eax, eax
je 0x4dd1ac98
jmp 0x4dd1a287
test eax, eax
je 0x4dd1acea
jmp 0x4dd1a287
test ecx, ecx
jne 0x4dd1b520
jmp case.0x4dd1ad18.0
je 0x4dd1ad88
jmp 0x4dd1a26e
test eax, eax
je 0x4dd1adb2
jmp 0x4dd1a26e
test eax, eax
je 0x4dd1add4
jmp 0x4dd1a26e
test eax, eax
je 0x4dd1ae5d
jmp 0x4dd1a26e
test eax, eax
je 0x4dd1ae75
jmp 0x4dd1a26e
test eax, eax
je 0x4dd1ae83
jmp 0x4dd1a26e
mov esi, dword [ebp + 8]
jmp 0x4dd1a17c
mov eax, dword [ebx + 0x48]
mov ecx, dword [eax + 0x14]
mov byte [ecx + 0x268], 0
mov edx, dword [ebx + 0x48]
mov eax, dword [edx + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
jmp 0x4dd1a17c
mov edx, dword [ebx + 0x48]
mov eax, dword [edx + 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
jmp 0x4dd1a17c
mov eax, dword [ebx + 0x48]
or dword [eax + 0x1c], 0x200
mov eax, dword [ebp - 0xb8]
test eax, eax
je 0x4dd30547
mov edx, dword [ebx + 0x48]
mov dword [edx + 0x40], eax
mov eax, dword [ebx + 0x48]
mov eax, dword [eax + 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebp + 0x1c]
push 1
lea edx, [eax + 0x3c]
push edx
mov edx, dword [ebp + 0x18]
add eax, 0x38
push eax
mov eax, dword [ebp - 0x80]
push 0xffffffffffffffff
push eax
push 0
push 0
push ecx
push edx
mov ecx, ebx
call fcn.4dd1aa5a
test eax, eax
mov dword [ebp - 0x90], eax
jge 0x4dd1ad88
jmp 0x4dd1b4a9
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp + 0x28]
push eax
push ecx
mov ecx, dword [ebp - 0x70]
push 1
mov byte [ebx + 0x55], 0
call fcn.4dd1a5ad
lea edx, [ebp - 0x84]
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x84], eax
call fcn.4dd1a10a
jmp 0x4dd1a26e
mov ecx, dword [ebx + 0x60]
mov edx, dword [ebx + 0x5c]
push 1
push ecx
push edx
call fcn.4dd13e35
add esp, 0xc
xor eax, eax
mov dword [ebx + 0x5c], eax
mov dword [ebx + 0x60], eax
jmp 0x4dd1a287