Function at 0x5734f0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x22
push 0
push 0
dec ecx
jne 0x5734f8
push ebx
push esi
push edi
mov edi, edx
mov esi, eax
xor eax, eax
push ebp
push 0x575edc
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [edi + 0x48]
mov eax, esi
call fcn.0057347c
test al, al
je case.0x5737a8.646
mov ecx, dword [edi + 0x48]
mov eax, ecx
cmp eax, 0x2d3
jg 0x573847
je 0x574d5d
cmp eax, 0x19e
jg 0x5736be
je 0x574392
cmp eax, 0x155
jge 0x573619
cmp eax, 0xd3
jg 0x5735c1
je 0x573c04
cmp eax, 0xb5
jge 0x573595
sub eax, 0x6e
je 0x573b35
sub eax, 0xa
je 0x573b54
sub eax, 0x14
je 0x573b60
sub eax, 0xa
je 0x573b95
jmp case.0x5737a8.646
add eax, 0xffffff4b
sub eax, 4
jb 0x573ba1
sub eax, 0x11
je 0x573bb5
dec eax
je 0x573bc1
sub eax, 7
je 0x573bd1
jmp case.0x5737a8.646
cmp eax, 0xf0
jg 0x5735f6
je 0x573c82
sub eax, 0xd4
je 0x573c12
add eax, 0xfffffff8
sub eax, 2
jb 0x573c20
add eax, 0xfffffff7
sub eax, 3
jb 0x573c35
jmp case.0x5737a8.646
sub eax, 0x12d
je 0x573c8e
dec eax
je 0x573cb4
add eax, 0xffffffe3
sub eax, 4
jb 0x573ce9
jmp case.0x5737a8.646
cmp eax, 0x192
jg 0x57367d
je 0x573eee
cmp eax, 0x169
jg 0x57365d
je 0x573e24
add eax, 0xfffffeab
sub eax, 6
jb 0x573d02
sub eax, 2
jb 0x573d1d
dec eax
je 0x573d55
dec eax
je 0x573dd2
jmp case.0x5737a8.646
sub eax, 0x16a
je 0x573e69
dec eax
je 0x573e8c
sub eax, 0x26
je case.0x57368b.403
jmp case.0x5737a8.646
add eax, 0xfffffe6d
cmp eax, 0xa
ja case.0x5737a8.646
jmp dword [eax*4 + 0x573692]
cmp eax, 0x278
jg 0x57378d
je 0x57495c
cmp eax, 0x1b3
jg 0x573735
je 0x57486c
add eax, 0xfffffe61
cmp eax, 0x10
ja case.0x5737a8.646
jmp dword [eax*4 + 0x5736f1]
cmp eax, 0x1f7
jg 0x573765
je 0x5748d3
add eax, 0xfffffe47
sub eax, 3
jb 0x5748a1
sub eax, 0x39
je 0x5748b9
dec eax
je 0x5748c7
jmp case.0x5737a8.646
add eax, 0xfffffda6
sub eax, 3
jb 0x5748e1
add eax, 0xfffffffa
sub eax, 8
jb 0x574938
sub eax, 0xc
je 0x574950
jmp case.0x5737a8.646
cmp eax, 0x297
jg 0x5737f7
je 0x574aa9
add eax, 0xfffffd7b
cmp eax, 0x11
ja case.0x5737a8.646
jmp dword [eax*4 + 0x5737af]
cmp eax, 0x2c0
jg 0x573824
je 0x574ce4
sub eax, 0x298
je 0x574c3d
sub eax, 0x26
je 0x574c73
dec eax
je 0x574ca6
jmp case.0x5737a8.646
sub eax, 0x2c1
je 0x574d24
sub eax, 0xf
je 0x574d36
dec eax
sub eax, 2
jb 0x574d48
jmp case.0x5737a8.646
cmp eax, 0x579
jg 0x5739c7
je 0x575654
cmp eax, 0x450
jg 0x57391c
je 0x575392
cmp eax, 0x33e
jg 0x5738cd
je 0x574eee
cmp eax, 0x2ef
jg 0x5738ad
je 0x574e75
add eax, 0xfffffd25
sub eax, 3
jb 0x574d96
sub eax, 7
je 0x574daf
dec eax
je 0x574df1
dec eax
je 0x574e33
jmp case.0x5737a8.646
sub eax, 0x321
je 0x574eb4
sub eax, 9
je 0x574ecc
dec eax
je 0x574edd
jmp case.0x5737a8.646
cmp eax, 0x410
jg 0x5738fe
je 0x5750b7
sub eax, 0x348
je 0x574efe
sub eax, 0xa
je 0x574f44
sub eax, 0x97
je 0x57507a
jmp case.0x5737a8.646
sub eax, 0x44d
je 0x5750c3
dec eax
je 0x575210
dec eax
je 0x5752db
jmp case.0x5737a8.646
cmp eax, 0x520
jg 0x573974
je 0x57562a
cmp eax, 0x4b4
jg 0x573954
je 0x5754ba
sub eax, 0x4b1
je 0x5753f0
dec eax
je 0x575400
dec eax
je 0x575436
jmp case.0x5737a8.646
sub eax, 0x515
je 0x5754cd
dec eax
je 0x5754e8
sub eax, 9
je 0x575600
jmp case.0x5737a8.646
cmp eax, 0x53c
jg 0x5739a4
je 0x575538
sub eax, 0x528
je 0x5755d5
dec eax
je 0x57551b
add eax, 0xfffffff6
sub eax, 4
jb 0x5755ee
jmp case.0x5737a8.646
sub eax, 0x546
je 0x575551
dec eax
je 0x57555f
add eax, 0xfffffff6
sub eax, 3
jb 0x575595
jmp case.0x5737a8.646
cmp eax, 0x8fe
jg 0x573a8d
je 0x575c07
cmp eax, 0x70a
jg 0x573a40
je 0x5757d6
cmp eax, 0x6a6
jg 0x573a20
je 0x575736
sub eax, 0x57a
je 0x57566d
dec eax
sub eax, 2
jb 0x5756a5
sub eax, 0xc4
je 0x575718
sub eax, 0x64
je 0x575728
jmp case.0x5737a8.646
sub eax, 0x6a7
je 0x575744
dec eax
je 0x575754
sub eax, 0x61
je 0x57576a
jmp case.0x5737a8.646
cmp eax, 0x835
jg 0x573a6d
je 0x5758b9
sub eax, 0x76d
je 0x575e0d
dec eax
je 0x575e1c
sub eax, 0x62
je 0x57589f
jmp case.0x5737a8.646
sub eax, 0x899
je 0x57591c
dec eax
je 0x575b6c
sub eax, 0x63
je 0x575bf1
jmp case.0x5737a8.646
cmp eax, 0x966
jg 0x573ae5
je 0x575cd6
cmp eax, 0x962
jg 0x573ac7
je 0x575c66
sub eax, 0x8ff
je 0x575c24
dec eax
je 0x575c38
sub eax, 0x61
je 0x575c4a
jmp case.0x5737a8.646
sub eax, 0x963
je 0x575c82
dec eax
je 0x575c9e
dec eax
je 0x575cba
jmp case.0x5737a8.646
cmp eax, 0x96a
jg 0x573b10
je 0x575daa
sub eax, 0x967
je 0x575cf2
dec eax
je 0x575d0e
dec eax
je 0x575d2a
jmp case.0x5737a8.646
sub eax, 0x96b
je 0x575dc6
add eax, 0xffffffa5
sub eax, 7
jb 0x575ded
sub eax, 0x5c
je 0x575e04
jmp case.0x5737a8.646
push 1
mov eax, dword [esi + 0x9c0]
cmp eax, dword [esi + 0x610]
sete cl
mov edx, esi
mov eax, esi
call fcn.0057d090
jmp case.0x5737a8.646
mov eax, esi
call fcn.0057251c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x574]
cmp byte [eax + 0x3c], 0
je case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
cmp dword [eax + 0x414], 0
je case.0x5737a8.646
mov edx, dword [esi + 0x36c]
mov eax, esi
call fcn.005734f0
jmp case.0x5737a8.646
mov eax, esi
call fcn.00491608
jmp case.0x5737a8.646
mov edx, ecx
sub edx, 0xb5
mov eax, esi
call fcn.00573354
jmp case.0x5737a8.646
mov eax, esi
call fcn.00572038
jmp case.0x5737a8.646
xor ecx, ecx
xor edx, edx
mov eax, esi
call fcn.005718e8
jmp case.0x5737a8.646
mov eax, dword [esi + 0x85c]
cmp byte [eax + 0x57], 0
jne case.0x5737a8.646
mov dl, 1
call fcn.00474b4c
mov dl, 1
mov eax, esi
call fcn.0057b424
mov eax, dword [esi + 0x874]
mov edx, dword [eax]
call dword [edx + 0xc4]
jmp case.0x5737a8.646
mov dl, 1
mov eax, esi
call fcn.0057b9a4
jmp case.0x5737a8.646
xor edx, edx
mov eax, esi
call fcn.0057b9a4
jmp case.0x5737a8.646
cmp ecx, 0xdd
sete dl
mov eax, esi
call fcn.00571200
jmp case.0x5737a8.646
mov ebx, dword [esi + 0x9f0]
mov eax, dword [ebx + 0x414]
push eax
mov al, 0xe9
sub al, byte [edi + 0x48]
push eax
mov eax, ebx
call fcn.0045d074
mov eax, dword [eax + 0x10]
mov edx, dword [esi + 0x9f0]
cmp eax, dword [edx + 0x40c]
sete al
push eax
mov eax, dword [esi + 0x9f0]
call fcn.0045d074
mov edx, dword [eax + 0x24]
mov ecx, dword [ebx + 0x3cc]
mov eax, esi
call fcn.0058122c
jmp case.0x5737a8.646
mov eax, esi
call fcn.0057320c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x360]
cmp byte [eax + 0x57], 0
je 0x573ca6
mov eax, esi
call fcn.0057b404
jmp case.0x5737a8.646
xor edx, edx
mov eax, esi
call fcn.0057b424
jmp case.0x5737a8.646
mov eax, dword [esi + 0x664]
cmp byte [eax + 0x57], 0
je 0x573ccc
xor edx, edx
call fcn.00474b4c
jmp case.0x5737a8.646
mov dl, 1
call fcn.00474b4c
mov eax, dword [esi + 0x664]
mov edx, dword [esi + 0x4c]
sub edx, dword [eax + 0x4c]
call fcn.004743c0
jmp case.0x5737a8.646
mov dl, byte [edi + 0x48]
sub dl, 0x4b
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x128]
jmp case.0x5737a8.646
mov edx, ecx
sub edx, 0x155
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x134]
jmp case.0x5737a8.646
cmp ecx, 0x15b
sete al
mov edx, dword [esi + 0x9ec]
mov byte [edx + 0x3c8], al
mov eax, dword [esi + 0x9ec]
mov edx, dword [eax]
call dword [edx + 0x13c]
mov edx, eax
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x134]
jmp case.0x5737a8.646
mov ebx, dword [esi + 0x9ec]
mov eax, dword [ebx + 0xc]
sub eax, 0xa
je 0x573d96
sub eax, 2
jne case.0x5737a8.646
mov eax, ebx
call fcn.0045d074
mov eax, dword [eax + 0x10]
mov edx, dword [0x59232c]
cmp eax, dword [edx]
je case.0x5737a8.646
mov edx, dword [esi + 0x9ec]
mov eax, esi
call fcn.0056f608
jmp case.0x5737a8.646
mov eax, ebx
call fcn.0045d074
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x1c]
mov eax, dword [ebx + 0x420]
call fcn.004d2644
mov eax, esi
call fcn.0047b544
push eax
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0x420]
call fcn.004d27c0
pop edx
call fcn.00514278
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0xc]
sub eax, 0xa
je 0x573dfb
sub eax, 2
jne case.0x5737a8.646
mov edx, dword [esi + 0x9f0]
mov eax, esi
call fcn.00576a7c
jmp case.0x5737a8.646
lea edx, [ebp - 8]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
mov eax, dword [ebp - 8]
push eax
mov eax, esi
call fcn.0047b544
mov edx, eax
pop eax
call fcn.00514200
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
cmp dword [eax + 0xc], 0xa
jne 0x573e46
mov eax, dword [esi + 0x638]
mov dl, byte [eax + 0x57]
xor dl, 1
call fcn.00474b4c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x418]
mov eax, dword [eax + 0x1c]
mov cl, byte [eax + 0x57]
xor cl, 1
xor edx, edx
mov eax, esi
call fcn.00567e38
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x418]
mov eax, dword [eax + 4]
mov cl, byte [eax + 0x57]
xor cl, 1
mov dl, 1
mov eax, esi
call fcn.00567e38
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x418]
mov eax, dword [eax + 0x14]
mov cl, byte [eax + 0x57]
xor cl, 1
mov dl, 2
mov eax, esi
call fcn.00567e38
jmp case.0x5737a8.646
push 0
push 0
mov ecx, dword [esi + 0x9ec]
mov edx, dword [esi + 0x9e8]
mov eax, esi
call fcn.00578b94
cmp dword [edi + 0x48], 0x193
jne case.0x5737a8.646
push 0
push 2
push 0x461
mov eax, dword [0x59254c]
mov eax, dword [eax]
push eax
call sub.user32.dll_PostMessageA
jmp case.0x5737a8.646
push 0
push 0
mov ecx, dword [esi + 0x9ec]
mov edx, dword [esi + 0x9e8]
mov eax, esi
call fcn.0057814c
jmp case.0x5737a8.646
push 1
push 0
lea eax, [ebp - 4]
push eax
mov eax, esi
call fcn.0047b544
xor ecx, ecx
mov edx, 0x575ef8
call fcn.00514108
cmp dword [ebp - 4], 0
je case.0x5737a8.646
push 0
mov eax, dword [ebp - 4]
push eax
push 0
xor ecx, ecx
mov edx, dword [esi + 0x9f0]
mov eax, esi
call fcn.005785d8
jmp case.0x5737a8.646
lea eax, [ebp - 4]
call fcn.00404d04
lea ecx, [ebp - 4]
mov edx, 0x575f1c
mov eax, 0x575f30
call fcn.004c9fb8
test al, al
je case.0x5737a8.646
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0xc]
mov ebx, dword [esi + 0x9ec]
mov edx, dword [ebx + 0x414]
mov eax, dword [esi + 0x9f8]
call fcn.0055a784
mov eax, dword [ebp - 0xc]
push eax
push 0
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00498c64
mov eax, dword [ebp - 0x10]
push eax
lea edx, [ebp - 0x14]
mov eax, dword [esi + 0x634]
mov ecx, dword [eax]
call dword [ecx + 0x140]
mov eax, dword [ebp - 0x14]
push eax
push 2
push 0
push 0xbff00000
push 0
push 0
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.00498bd8
mov edx, dword [ebp - 0x18]
mov eax, dword [ebx + 0x414]
mov cl, byte [eax + 0x64]
mov eax, dword [esi + 0x9e8]
call fcn.00500ab0
push 0
push 8
push 0x461
mov eax, dword [0x59254c]
mov eax, dword [eax]
push eax
call sub.user32.dll_PostMessageA
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0xc]
sub eax, 0xa
je 0x57410b
sub eax, 2
jne case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
call fcn.0045d074
call fcn.0045968c
mov edx, eax
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x464]
call fcn.0041aca0
push dword [eax + 0xc]
push dword [eax + 8]
mov edx, dword [0x592318]
mov edx, dword [edx]
mov eax, dword [esi + 0x9f8]
call fcn.00557144
test al, al
jne 0x5740af
push 0x10
push 0x575f40
push 0x575f50
mov eax, dword [esi + 0x9f0]
call fcn.0045d074
push dword [eax + 0x24]
push 0x575f84
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.004050a0
mov eax, dword [ebp - 0x1c]
call fcn.004051e0
push eax
mov eax, esi
call fcn.0047b544
push eax
call sub.user32.dll_MessageBoxA
jmp case.0x5737a8.646
lea edx, [ebp - 0x20]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
lea eax, [ebp - 0x20]
push eax
mov eax, dword [esi + 0x9ec]
call fcn.0045d074
mov edx, dword [eax + 0x24]
pop eax
call fcn.00404fe8
mov eax, dword [ebp - 0x20]
push eax
mov eax, dword [esi + 0x9ec]
call fcn.0045d074
mov ecx, dword [eax + 0x24]
mov edx, dword [0x592318]
mov edx, dword [edx]
lea eax, [ebp - 0x24]
call fcn.0040502c
mov ecx, dword [ebp - 0x24]
mov dl, 0xf
mov eax, esi
call fcn.005778f4
jmp case.0x5737a8.646
push 0
lea edx, [ebp - 0x28]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
lea eax, [ebp - 0x28]
push eax
mov eax, dword [esi + 0x9ec]
call fcn.0045d074
mov edx, dword [eax + 0x24]
pop eax
call fcn.00404fe8
mov edx, dword [ebp - 0x28]
mov cl, 1
mov eax, esi
call fcn.0056fd3c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0xc]
sub eax, 0xa
je 0x574245
sub eax, 2
jne case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
call fcn.0045d074
call fcn.0045968c
mov edx, eax
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x464]
call fcn.0041aca0
push dword [eax + 0xc]
push dword [eax + 8]
mov edx, dword [0x592318]
mov edx, dword [edx]
mov eax, dword [esi + 0x9f8]
call fcn.00557144
test al, al
jne 0x5741e9
push 0x10
push 0x575f40
push 0x575f50
mov eax, dword [esi + 0x9f0]
call fcn.0045d074
push dword [eax + 0x24]
push 0x575f9c
lea eax, [ebp - 0x2c]
mov edx, 3
call fcn.004050a0
mov eax, dword [ebp - 0x2c]
call fcn.004051e0
push eax
mov eax, esi
call fcn.0047b544
push eax
call sub.user32.dll_MessageBoxA
jmp case.0x5737a8.646
lea edx, [ebp - 0x30]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
lea eax, [ebp - 0x30]
push eax
mov eax, dword [esi + 0x9ec]
call fcn.0045d074
mov edx, dword [eax + 0x24]
pop eax
call fcn.00404fe8
mov eax, dword [ebp - 0x30]
push eax
mov eax, dword [esi + 0x9ec]
call fcn.0045d074
mov ecx, dword [eax + 0x24]
mov edx, dword [0x592318]
mov edx, dword [edx]
lea eax, [ebp - 0x34]
call fcn.0040502c
mov ecx, dword [ebp - 0x34]
mov dl, 0x10
mov eax, esi
call fcn.005778f4
jmp case.0x5737a8.646
push 0
lea edx, [ebp - 0x38]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
lea eax, [ebp - 0x38]
push eax
mov eax, dword [esi + 0x9ec]
call fcn.0045d074
mov edx, dword [eax + 0x24]
pop eax
call fcn.00404fe8
mov edx, dword [ebp - 0x38]
xor ecx, ecx
mov eax, esi
call fcn.0056fd3c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0xc]
sub eax, 0xa
je 0x574299
sub eax, 2
je 0x5742db
jmp case.0x5737a8.646
push 1
push 0
lea eax, [ebp - 4]
push eax
mov eax, esi
call fcn.0047b544
xor ecx, ecx
mov edx, 0x575ef8
call fcn.00514108
cmp dword [ebp - 4], 0
je case.0x5737a8.646
mov eax, dword [ebp - 4]
push eax
push 1
mov ecx, 1
mov edx, dword [esi + 0x9ec]
mov eax, esi
call fcn.0056f48c
jmp case.0x5737a8.646
lea eax, [ebp - 4]
mov edx, dword [esi + 0x9f0]
mov edx, dword [edx + 0x3cc]
call fcn.00404d9c
lea ecx, [ebp - 4]
mov edx, 0x575fb4
mov eax, 0x575fd0
call fcn.004c9fb8
test al, al
je case.0x5737a8.646
mov eax, dword [ebp - 4]
mov edx, dword [esi + 0x9f0]
mov edx, dword [edx + 0x3cc]
call fcn.0040512c
je case.0x5737a8.646
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 4]
call fcn.004986c4
mov eax, dword [ebp - 0x3c]
push eax
mov ecx, dword [esi + 0x9f0]
mov dl, 9
mov eax, esi
call fcn.0056ef68
jmp case.0x5737a8.646
lea edx, [ebp - 0x40]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
mov eax, dword [ebp - 0x40]
push eax
lea edx, [ebp - 0x44]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
lea eax, [ebp - 0x44]
push eax
mov eax, dword [esi + 0x9ec]
call fcn.0045d074
mov edx, dword [eax + 0x24]
pop eax
call fcn.00404fe8
mov eax, dword [ebp - 0x44]
pop edx
call fcn.004987d4
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
call fcn.0045c950
test al, al
jne 0x574435
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0xc]
sub eax, 0xa
je 0x5743bd
sub eax, 2
je 0x57441f
jmp case.0x5737a8.646
mov eax, dword [esi + 0x634]
mov byte [eax + 0x5f0], 0
mov eax, dword [0x59263c]
mov eax, dword [eax]
cmp byte [eax + 0xc2], 0
je 0x5743ed
push 0
xor ecx, ecx
mov edx, dword [esi + 0x9ec]
mov eax, esi
call fcn.0056f2e4
jmp 0x574400
push 0
push 1
xor ecx, ecx
mov edx, dword [esi + 0x9ec]
mov eax, esi
call fcn.0056f48c
xor edx, edx
mov eax, dword [esi + 0x634]
call fcn.0050e664
mov eax, dword [esi + 0x634]
mov byte [eax + 0x5f0], 1
jmp case.0x5737a8.646
push 0
mov ecx, dword [esi + 0x9f0]
mov dl, 6
mov eax, esi
call fcn.0056ef68
jmp case.0x5737a8.646
push 0
push 0x2e
push pe_nt_image_headers32
mov eax, dword [esi + 0x9ec]
call fcn.0047b544
push eax
call sub.user32.dll_SendMessageA
jmp case.0x5737a8.646
mov edx, dword [esi + 0x9f0]
mov eax, esi
call fcn.00572478
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0xc]
sub eax, 0xa
je 0x57447e
sub eax, 2
je 0x5744ac
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
call fcn.0045d074
mov edx, dword [eax + 0x24]
lea eax, [esi + 0x8dc]
call fcn.00404d58
mov eax, dword [esi + 0x9ec]
call fcn.0045d074
call fcn.00459308
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
call fcn.0045d074
mov edx, dword [eax + 0x24]
lea eax, [esi + 0x8dc]
call fcn.00404d58
mov eax, dword [esi + 0x9ec]
call fcn.0045d074
call fcn.00459308
jmp case.0x5737a8.646
lea ecx, [ebp - 4]
mov edx, 0x575fe4
mov eax, 0x575ffc
call fcn.004c9fb8
test al, al
je case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0xc]
sub eax, 0xa
je 0x574510
sub eax, 2
je 0x5745b1
jmp case.0x5737a8.646
lea edx, [ebp - 0x48]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
lea eax, [ebp - 0x48]
mov edx, dword [ebp - 4]
call fcn.00404fe8
mov eax, dword [ebp - 0x48]
call fcn.004d9574
lea edx, [ebp - 0x4c]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
lea eax, [ebp - 0x4c]
mov edx, dword [ebp - 4]
call fcn.00404fe8
mov eax, dword [ebp - 0x4c]
call fcn.00498774
test al, al
je case.0x5737a8.646
mov eax, dword [0x59263c]
mov eax, dword [eax]
cmp byte [eax + 0xf4], 0
je case.0x5737a8.646
lea edx, [ebp - 0x54]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
lea eax, [ebp - 0x54]
mov edx, dword [ebp - 4]
call fcn.00404fe8
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x50]
call fcn.004986c4
mov edx, dword [ebp - 0x50]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x144]
jmp case.0x5737a8.646
lea edx, [ebp - 0x58]
mov eax, dword [0x59263c]
mov eax, dword [eax]
movzx eax, byte [eax + 0xf4]
call fcn.00409a00
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [esi + 0x9f0]
mov edx, dword [eax + 0x3cc]
lea eax, [ebp - 0x5c]
mov ecx, dword [ebp - 4]
call fcn.0040502c
mov ecx, dword [ebp - 0x5c]
mov dl, 0xc
mov eax, esi
call fcn.005778f4
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0xc]
sub eax, 0xa
je 0x57460f
sub eax, 2
je 0x5746de
jmp case.0x5737a8.646
lea edx, [ebp - 4]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
lea ecx, [ebp - 4]
mov edx, 0x575fe4
mov eax, 0x576014
call fcn.00437158
test al, al
je case.0x5737a8.646
cmp dword [ebp - 4], 0
je case.0x5737a8.646
mov eax, dword [ebp - 4]
call fcn.00498774
test al, al
jne 0x574682
push 0
push 0x576030
push dword [ebp - 4]
push 0x576048
lea eax, [ebp - 0x60]
mov edx, 3
call fcn.004050a0
mov eax, dword [ebp - 0x60]
mov cx, word [0x576060]
mov dl, 1
call fcn.0043703c
jmp case.0x5737a8.646
mov eax, dword [0x5924f8]
mov eax, dword [eax]
call fcn.00494bd8
lea edx, [ebp - 0x64]
mov eax, dword [ebp - 4]
call fcn.004986c4
mov eax, dword [ebp - 0x64]
push eax
lea edx, [ebp - 0x6c]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
mov eax, dword [ebp - 0x6c]
lea edx, [ebp - 0x68]
call fcn.004986c4
mov edx, dword [ebp - 0x68]
pop eax
call fcn.0040512c
je case.0x5737a8.646
mov edx, dword [ebp - 4]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x144]
jmp case.0x5737a8.646
lea eax, [ebp - 4]
mov edx, dword [esi + 0x9f0]
mov edx, dword [edx + 0x3cc]
call fcn.00404d9c
lea ecx, [ebp - 4]
mov edx, 0x575fe4
mov eax, 0x576014
call fcn.004c9fb8
test al, al
je case.0x5737a8.646
lea edx, [ebp - 0x70]
mov eax, dword [ebp - 4]
call fcn.004986c4
mov eax, dword [ebp - 0x70]
mov edx, dword [esi + 0x9f0]
mov edx, dword [edx + 0x3cc]
call fcn.0040512c
je case.0x5737a8.646
mov cx, 4
mov edx, dword [ebp - 4]
mov eax, esi
call fcn.00577990
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0xc]
sub eax, 0xa
je 0x574793
sub eax, 2
jne case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
cmp dword [eax + 0x414], 0
je case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
cmp byte [eax + 0x3a1], 0
jne case.0x5737a8.646
push 0
xor ecx, ecx
mov dl, 7
mov eax, esi
call fcn.005778f4
jmp case.0x5737a8.646
xor edx, edx
mov eax, dword [esi + 0x9ec]
call fcn.0050f190
jmp case.0x5737a8.646
mov edx, dword [esi + 0x9ec]
mov eax, esi
call fcn.00572404
jmp case.0x5737a8.646
mov ebx, dword [esi + 0x9ec]
cmp dword [ebx + 0xc], 0xa
jne 0x5747ef
lea edx, [ebp - 0x74]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x140]
mov edx, dword [ebp - 0x74]
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
mov eax, dword [eax + 0x28]
add eax, 0x10
call fcn.00404d58
jmp case.0x5737a8.646
mov ebx, dword [esi + 0x9f0]
mov eax, dword [ebx + 0x414]
mov eax, dword [eax + 0x28]
add eax, 0x14
mov edx, dword [ebx + 0x3cc]
call fcn.00404d58
jmp case.0x5737a8.646
mov ecx, esi
mov dl, 1
mov eax, dword [0x53794c]
call fcn.0048d440
mov ebx, eax
mov edx, dword [0x5925c0]
mov edx, dword [edx]
mov eax, dword [ebx + 0x2f8]
call fcn.00454190
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
cmp dword [ebx + 0x24c], 1
jne 0x574860
mov eax, esi
call fcn.00565b58
xor ecx, ecx
mov edx, 9
mov eax, dword [esi + 0x9f8]
call fcn.0055adec
mov eax, ebx
call fcn.00403e94
jmp case.0x5737a8.646
push 5
push 0
push 0
lea edx, [ebp - 0x78]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
mov eax, dword [ebp - 0x78]
call fcn.004051e0
push eax
push 0x576064
call sub.user32.dll_GetDesktopWindow
push eax
call sub.shell32.dll_ShellExecuteA
jmp case.0x5737a8.646
mov cl, byte [edi + 0x48]
sub cl, 0xb9
mov edx, dword [esi + 0x9ec]
mov eax, esi
call fcn.00572178
jmp case.0x5737a8.646
xor edx, edx
mov eax, esi
call fcn.0056f9ec
jmp case.0x5737a8.646
mov eax, esi
call fcn.005713f0
jmp case.0x5737a8.646
mov dl, 1
mov eax, esi
call fcn.0056f9ec
jmp case.0x5737a8.646
mov al, byte [edi + 0x48]
sub al, 0x5a
mov edx, dword [0x59263c]
mov edx, dword [edx]
mov byte [edx + 0x99], al
mov eax, dword [0x59263c]
mov eax, dword [eax]
movzx eax, byte [eax + 0x99]
mov edx, dword [0x5927d4]
mov eax, dword [edx + eax*4]
lea edx, [ebp - 0x7c]
call fcn.00409478
mov eax, dword [ebp - 0x7c]
push eax
mov eax, dword [esi + 0x664]
mov eax, dword [eax + 0x210]
mov edx, 3
call fcn.004d6ce0
pop edx
call fcn.004d6ac0
jmp case.0x5737a8.646
mov al, byte [edi + 0x48]
sub al, 0x63
mov edx, dword [0x59263c]
mov edx, dword [edx]
mov byte [edx + 0x9a], al
jmp case.0x5737a8.646
mov eax, esi
call fcn.00572748
jmp case.0x5737a8.646
mov eax, esi
call fcn.00572b0c
jmp case.0x5737a8.646
mov ecx, esi
mov dl, 1
mov eax, dword [0x538cec]
call fcn.0048d440
mov ebx, eax
mov eax, dword [esi + 0x9f8]
mov dword [ebx + 0x334], eax
mov eax, dword [esi + 0x9f0]
mov dword [ebx + 0x338], eax
mov edx, dword [0x5925c0]
mov edx, dword [edx]
mov eax, dword [ebx + 0x2f8]
call fcn.0045ce98
mov eax, dword [esi + 0x9f0]
mov edx, dword [eax + 0x3cc]
mov eax, dword [ebx + 0x310]
call fcn.00474c5c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
mov eax, dword [esi + 0x9f8]
xor edx, edx
mov dword [eax + 0xc8], edx
mov eax, ebx
call fcn.00403e94
jmp case.0x5737a8.646
mov eax, esi
call fcn.0057b634
jmp case.0x5737a8.646
mov ecx, esi
mov dl, 1
mov eax, dword [0x53968c]
call fcn.0048d440
mov ebx, eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
mov eax, ebx
call fcn.00403e94
jmp case.0x5737a8.646
mov ecx, esi
mov dl, 1
mov eax, dword [0x53bcf4]
call fcn.0048d440
mov ebx, eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
mov eax, ebx
call fcn.00403e94
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
cmp byte [eax + 0x64], 3
jne 0x574a6e
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
push eax
push 0
push 0x462
mov eax, esi
call fcn.0047b544
push eax
call sub.user32.dll_PostMessageA
jmp case.0x5737a8.646
push 0
xor ecx, ecx
mov dl, 0x1c
mov eax, esi
call fcn.005778f4
jmp case.0x5737a8.646
push 0
cmp ecx, 0x295
sete al
mov ecx, eax
xor edx, edx
mov eax, esi
call fcn.0057df40
jmp case.0x5737a8.646
mov dl, 1
mov eax, esi
call fcn.0057ec18
jmp case.0x5737a8.646
mov ecx, esi
mov dl, 1
mov eax, dword [0x51ff2c]
call fcn.0048d440
mov ebx, eax
mov edx, 0x576074
mov eax, ebx
call fcn.00474c5c
mov eax, dword [ebx + 0x304]
mov edx, 0x57608c
call fcn.00474c5c
mov eax, dword [ebx + 0x308]
mov edx, 0x5760a4
call fcn.00474c5c
mov eax, dword [ebx + 0x310]
xor edx, edx
call fcn.00474b4c
mov eax, dword [ebx + 0x30c]
xor edx, edx
call fcn.00474b4c
mov eax, dword [ebx + 0x2f8]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x64]
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
cmp dword [ebx + 0x24c], 1
jne 0x574c31
lea edx, [ebp - 0x80]
mov eax, dword [ebx + 0x31c]
call fcn.00474c2c
mov eax, dword [ebp - 0x80]
lea edx, [ebp - 4]
call fcn.0040a3d0
lea eax, [ebp - 4]
push eax
lea edx, [ebp - 0x84]
mov eax, dword [ebp - 4]
call fcn.0040a408
mov eax, dword [ebp - 0x84]
call fcn.00404fe0
push eax
mov eax, dword [ebp - 4]
call fcn.00404fe0
mov ecx, eax
pop eax
sub ecx, eax
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.00405240
push 0
push 0
lea edx, [ebp - 0x88]
mov eax, dword [0x5924f8]
mov eax, dword [eax]
call fcn.00495454
mov eax, dword [ebp - 0x88]
push eax
push 0
push 0x5760bc
lea edx, [ebp - 0x90]
mov eax, dword [ebx + 0x31c]
call fcn.00474c2c
push dword [ebp - 0x90]
push 0x5760d0
lea eax, [ebp - 0x8c]
mov edx, 3
call fcn.004050a0
mov eax, dword [ebp - 0x8c]
push eax
lea edx, [ebp - 0x94]
mov eax, dword [0x5924f8]
mov eax, dword [eax]
call fcn.00495454
mov eax, dword [ebp - 0x94]
push eax
lea edx, [ebp - 0xa0]
mov eax, dword [ebx + 0x314]
call fcn.00474c2c
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x9c]
call fcn.004986c4
push dword [ebp - 0x9c]
push dword [ebp - 4]
push 0x5760dc
lea eax, [ebp - 0x98]
mov edx, 3
call fcn.004050a0
mov eax, dword [ebp - 0x98]
pop edx
pop ecx
call fcn.00513f28
mov eax, ebx
call fcn.00403e94
jmp case.0x5737a8.646
lea eax, [ebp - 4]
call fcn.00404d04
lea ecx, [ebp - 4]
mov edx, 0x5760ec
mov eax, 0x576104
call fcn.004c9fb8
test al, al
je case.0x5737a8.646
mov eax, dword [ebp - 4]
push eax
xor ecx, ecx
xor edx, edx
mov eax, esi
call fcn.0057df40
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
mov ecx, dword [eax + 0x1c]
lea eax, [ebp - 0xa4]
mov edx, 0x57611c
call fcn.0040502c
mov edx, dword [ebp - 0xa4]
mov cl, 3
mov eax, esi
call fcn.0056d3c8
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0x414]
mov ebx, dword [eax + 0xa8]
mov eax, ebx
mov edx, dword [eax]
call dword [edx]
mov ecx, eax
mov edx, dword [ebx + 4]
lea eax, [ebp - 4]
call fcn.00404df4
mov eax, dword [ebp - 4]
call fcn.004051e0
push eax
call fcn.0043d014
pop edx
call fcn.0043cad8
jmp case.0x5737a8.646
push 0x576130
push 0x576168
lea edx, [ebp - 4]
mov ecx, 0x576180
mov eax, esi
call fcn.0051432c
test al, al
je case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0x414]
mov eax, dword [eax + 0xa8]
mov edx, dword [ebp - 4]
call fcn.0041de3c
jmp case.0x5737a8.646
mov edx, dword [esi + 0x9f0]
mov eax, esi
call fcn.005722c4
jmp case.0x5737a8.646
mov edx, dword [esi + 0x9ec]
mov eax, esi
call fcn.0057caac
jmp case.0x5737a8.646
cmp ecx, 0x2d1
sete dl
mov eax, esi
call fcn.0057673c
jmp case.0x5737a8.646
mov ebx, dword [esi + 0x9ec]
mov eax, dword [ebx + 0x3b0]
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebx + 0x3b4]
mov edx, dword [eax]
call dword [edx + 0x44]
lea eax, [ebx + 0x41c]
call fcn.00404d04
mov edx, dword [esi + 0x9ec]
mov eax, esi
call fcn.005766b4
jmp case.0x5737a8.646
mov dx, word [edi + 0x48]
sub dx, 0x2db
mov eax, dword [esi + 0x9f0]
call fcn.004d88b4
jmp case.0x5737a8.646
push 0
mov eax, dword [esi + 0x810]
mov al, byte [eax + 0x3c]
push eax
mov eax, dword [esi + 0x83c]
mov edx, dword [eax + 0x26c]
mov eax, esi
call fcn.00582b3c
push eax
mov eax, dword [esi + 0x610]
mov edx, dword [eax + 0x26c]
mov eax, esi
call fcn.00582b3c
mov edx, eax
mov eax, esi
pop ecx
call fcn.00582ba4
jmp case.0x5737a8.646
push 0
mov eax, dword [esi + 0x810]
mov al, byte [eax + 0x3c]
push eax
mov eax, dword [esi + 0x610]
mov edx, dword [eax + 0x26c]
mov eax, esi
call fcn.00582b3c
push eax
mov eax, dword [esi + 0x83c]
mov edx, dword [eax + 0x26c]
mov eax, esi
call fcn.00582b3c
mov edx, eax
mov eax, esi
pop ecx
call fcn.00582ba4
jmp case.0x5737a8.646
push 1
mov eax, dword [esi + 0x810]
mov al, byte [eax + 0x3c]
push eax
mov eax, dword [esi + 0x83c]
mov edx, dword [eax + 0x26c]
mov eax, esi
call fcn.00582b3c
push eax
mov eax, dword [esi + 0x610]
mov edx, dword [eax + 0x26c]
mov eax, esi
call fcn.00582b3c
mov edx, eax
mov eax, esi
pop ecx
call fcn.00582ba4
jmp case.0x5737a8.646
mov edx, dword [esi + 0x9f0]
cmp dword [edx + 0x414], 0
je case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
mov cx, word [eax + 0x48]
push ecx
mov ecx, dword [eax + 0x40]
mov ebx, dword [esi + 0x9f8]
mov ebx, dword [ebx + 0x44]
mov edx, dword [eax + 0x18]
mov eax, ebx
call fcn.004dac40
jmp case.0x5737a8.646
mov eax, dword [0x5924f8]
mov eax, dword [eax]
xor ecx, ecx
mov edx, 3
call fcn.0049544c
jmp case.0x5737a8.646
xor edx, edx
mov eax, 0x576190
call fcn.004987d4
jmp case.0x5737a8.646
xor edx, edx
mov eax, 0x5761b0
call fcn.004987d4
jmp case.0x5737a8.646
xor ecx, ecx
mov dl, 1
mov eax, esi
call fcn.00569534
jmp case.0x5737a8.646
mov ecx, esi
mov dl, 1
mov eax, dword [0x52b584]
call fcn.0048d440
mov ebx, eax
mov eax, dword [esi + 0x968]
mov dword [ebx + 0x310], eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
mov eax, dword [esi + 0x968]
cmp word [eax + 0x68], 0
jbe 0x574f38
mov eax, esi
call fcn.00569608
mov eax, ebx
call fcn.00403e94
jmp case.0x5737a8.646
mov ecx, esi
mov dl, 1
mov eax, dword [0x5336f0]
call fcn.0048d440
mov ebx, eax
mov eax, dword [esi + 0x968]
mov edx, dword [eax + 0x3c]
mov eax, dword [ebx + 0x328]
call fcn.00474c5c
mov eax, dword [esi + 0x968]
mov edx, dword [eax + 0x40]
mov eax, dword [ebx + 0x32c]
call fcn.00474c5c
mov eax, dword [esi + 0x968]
mov di, word [eax + 0x68]
cmp di, 0x2710
jne 0x574f9f
mov eax, dword [ebx + 0x334]
mov edx, 0x5761e0
call fcn.00474c5c
jmp 0x574fd7
cmp di, 0x3e8
jne 0x574fb8
mov eax, dword [ebx + 0x334]
mov edx, 0x576200
call fcn.00474c5c
jmp 0x574fd7
lea edx, [ebp - 0xa8]
movzx eax, di
call fcn.00409a00
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebx + 0x334]
call fcn.00474c5c
lea ecx, [ebp - 0xac]
mov eax, dword [esi + 0x968]
lea edx, [eax + 0x54]
mov eax, dword [esi + 0x968]
call fcn.0051a258
mov edx, dword [ebp - 0xac]
mov eax, dword [ebx + 0x350]
call fcn.00474c5c
mov eax, dword [esi + 0x968]
cmp word [eax + 0x68], 0
jbe 0x575054
mov eax, dword [esi + 0x968]
movzx eax, word [eax + 0x6a]
add eax, 0x9923
mov dword [ebp - 0xb4], eax
fild dword [ebp - 0xb4]
add esp, 0xfffffff8
fstp qword [esp]
wait
lea edx, [ebp - 0xb0]
mov eax, 0x57621c
call fcn.0040c8c0
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebx + 0x33c]
call fcn.00474c5c
jmp 0x575064
mov eax, dword [ebx + 0x33c]
mov edx, 0x576230
call fcn.00474c5c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
mov eax, ebx
call fcn.00403e94
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
mov eax, dword [eax + 0xc]
sub eax, 0xa
je 0x575092
sub eax, 2
je 0x5750a2
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
call fcn.0050f73c
jmp case.0x5737a8.646
mov cx, 5
mov edx, 0x57623c
mov eax, esi
call fcn.00577990
jmp case.0x5737a8.646
mov eax, esi
call fcn.00571310
jmp case.0x5737a8.646
lea edx, [ebp - 0xb8]
mov eax, esi
call fcn.0057d6f8
mov eax, dword [ebp - 0xb8]
lea edx, [ebp - 4]
call fcn.004096f0
cmp dword [ebp - 4], 0
jne 0x5750f7
mov eax, dword [esi + 0x9f0]
cmp dword [eax + 0x414], 0
je case.0x5737a8.646
mov eax, dword [0x59263c]
mov eax, dword [eax]
cmp byte [eax + 0xf6], 0
je 0x575114
xor edx, edx
mov eax, dword [esi + 0x670]
call fcn.00474c5c
mov edx, dword [ebp - 4]
mov eax, 0x576248
call fcn.00405324
test eax, eax
jle 0x57519d
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 4]
call fcn.004094c8
mov edx, dword [ebp - 0xbc]
mov eax, 0x576254
call fcn.00405324
test eax, eax
jg 0x575169
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 4]
call fcn.004094c8
mov edx, dword [ebp - 0xc0]
mov eax, 0x576264
call fcn.00405324
test eax, eax
jle 0x575175
mov eax, esi
call fcn.0056b6a8
jmp case.0x5737a8.646
push 1
mov cl, 1
mov edx, dword [ebp - 4]
mov eax, esi
call fcn.0057c38c
test al, al
je case.0x5737a8.646
xor edx, edx
mov eax, dword [esi + 0x670]
call fcn.00474c5c
jmp case.0x5737a8.646
lea edx, [ebp - 0xc4]
mov eax, dword [esi + 0x834]
call fcn.00474c2c
mov eax, dword [ebp - 0xc4]
push eax
lea edx, [ebp - 0xc8]
mov eax, dword [esi + 0x7cc]
call fcn.00474c2c
mov eax, dword [ebp - 0xc8]
push eax
push 0
push 0
push 1
mov eax, dword [esi + 0x9f0]
cmp dword [eax + 0x414], 0
sete al
push eax
push 0
push 0
push 0
lea edx, [ebp - 0xcc]
mov eax, dword [esi + 0x8bc]
call fcn.00474c2c
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 4]
mov eax, esi
call fcn.00570a28
jmp case.0x5737a8.646
mov ecx, esi
mov dl, 1
mov eax, dword [0x536350]
call fcn.0048d440
mov ebx, eax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
cmp dword [ebx + 0x24c], 1
jne 0x5752cf
lea edx, [ebp - 0xd0]
mov eax, dword [ebx + 0x304]
call fcn.00474c2c
mov eax, dword [ebp - 0xd0]
push eax
lea edx, [ebp - 0xd4]
mov eax, dword [ebx + 0x310]
call fcn.00474c2c
mov eax, dword [ebp - 0xd4]
push eax
push 0
lea edx, [ebp - 0xd8]
mov eax, dword [ebx + 0x328]
call fcn.00474c2c
mov eax, dword [ebp - 0xd8]
push eax
push 2
push 1
mov eax, dword [ebx + 0x318]
mov edx, dword [eax]
call dword [edx + 0xcc]
push eax
push 0
push 0
lea edx, [ebp - 0xdc]
mov eax, dword [ebx + 0x300]
call fcn.00474c2c
mov eax, dword [ebp - 0xdc]
push eax
lea edx, [ebp - 0xe0]
mov eax, dword [ebx + 0x2f8]
call fcn.00474c2c
mov edx, dword [ebp - 0xe0]
mov eax, esi
pop ecx
call fcn.00570a28
mov eax, ebx
call fcn.00403e94
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9f8]
cmp byte [eax + 0xd9], 0
jne 0x575337
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
cmp byte [eax + 0xac], 0
je 0x575337
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
cmp byte [eax + 0xac], 3
jb 0x575337
mov eax, dword [0x59263c]
mov eax, dword [eax]
mov dl, 0xe
call fcn.0055bc60
test al, al
je 0x575337
xor edx, edx
mov al, 0xe
call fcn.0051bd18
test al, al
je case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
cmp dword [eax + 0x414], 0
je 0x575378
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
cmp dword [eax + 0x60], 0
je 0x575378
mov eax, dword [esi + 0x9f8]
call fcn.00555414
mov eax, dword [esi + 0x9f0]
mov ecx, dword [eax + 0x418]
xor edx, edx
mov eax, esi
call fcn.00570274
mov eax, dword [esi + 0x9f0]
mov edx, dword [eax + 0x414]
xor ecx, ecx
mov eax, esi
call fcn.0056d8e4
jmp case.0x5737a8.646
mov eax, esi
call fcn.00570948
test al, al
je case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x418]
cmp byte [eax + 0x24], 0
je 0x5753ca
mov eax, dword [esi + 0x9f0]
mov edx, dword [eax + 0x414]
mov cx, 1
mov eax, esi
call fcn.0056d8e4
push 0
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
push eax
push 0x44c
mov eax, dword [0x59231c]
mov eax, dword [eax]
push eax
call sub.user32.dll_PostMessageA
jmp case.0x5737a8.646
mov eax, dword [esi + 0x960]
call fcn.005120c8
jmp case.0x5737a8.646
push 0x576130
push 0x576278
lea edx, [ebp - 4]
mov ecx, 0x576180
mov eax, esi
call fcn.0051432c
test al, al
je case.0x5737a8.646
mov cl, 1
mov edx, dword [ebp - 4]
mov eax, dword [esi + 0x960]
call fcn.00512168
jmp case.0x5737a8.646
mov ecx, esi
mov dl, 1
mov eax, dword [0x433c3c]
call fcn.00435494
mov ebx, eax
mov eax, dword [esi + 0x960]
mov edx, dword [eax + 0x68]
mov eax, ebx
call fcn.004357d0
mov ax, word [0x576288]
mov word [ebx + 0x5d], ax
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x3c]
test al, al
je 0x5754ae
mov edx, dword [ebx + 0x58]
mov eax, dword [esi + 0x960]
call fcn.00474d20
mov eax, dword [esi + 0x960]
cmp dword [eax + 0xc], 0xc
jne 0x5754ae
lea edx, [ebp - 0xe4]
mov eax, dword [esi + 0x960]
mov eax, dword [eax + 0x68]
call fcn.0055ba4c
mov edx, dword [ebp - 0xe4]
mov eax, dword [0x59263c]
mov eax, dword [eax]
add eax, 0x24
call fcn.00404d58
mov eax, ebx
call fcn.00403e94
jmp case.0x5737a8.646
mov eax, dword [esi + 0x960]
mov edx, dword [eax]
call dword [edx + 0xdc]
jmp case.0x5737a8.646
push 0
push 3
push 0x461
mov eax, dword [0x59254c]
mov eax, dword [eax]
push eax
call sub.user32.dll_PostMessageA
jmp case.0x5737a8.646
mov eax, dword [0x59263c]
mov eax, dword [eax]
mov dl, 6
call fcn.0055bc60
test al, al
je 0x57550b
xor edx, edx
mov al, 6
call fcn.0051bd18
test al, al
je case.0x5737a8.646
mov eax, dword [esi + 0x9f8]
call fcn.00555414
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9e8]
call fcn.0045d074
mov edx, eax
mov eax, dword [esi + 0x9f8]
call fcn.005553d4
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9f8]
mov dl, byte [eax + 0x6d]
mov eax, dword [esi + 0x9e8]
call fcn.0050154c
jmp case.0x5737a8.646
xor edx, edx
mov eax, esi
call fcn.005696d0
jmp case.0x5737a8.646
push 0x576294
push 0x5762cc
lea edx, [ebp - 4]
mov ecx, 0x5762e4
mov eax, esi
call fcn.0051432c
test al, al
je case.0x5737a8.646
xor ecx, ecx
mov edx, dword [ebp - 4]
mov eax, dword [esi + 0x9e8]
call fcn.005019f0
jmp case.0x5737a8.646
cmp dword [edi + 0x48], 0x553
jne 0x5755c0
push 0x24
push 0x5762ec
push 0x5762fc
mov eax, esi
call fcn.0047b544
push eax
call sub.user32.dll_MessageBoxA
cmp eax, 6
jne case.0x5737a8.646
mov dl, 0x53
sub dl, byte [edi + 0x48]
mov eax, dword [esi + 0x9e8]
call fcn.005015b4
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9e8]
call fcn.0045d074
mov edx, eax
mov eax, esi
call fcn.00576c20
jmp case.0x5737a8.646
mov dl, byte [edi + 0x48]
sub dl, 0x33
mov eax, esi
call fcn.00581870
jmp case.0x5737a8.646
push 1
mov eax, dword [esi + 0x9e8]
call fcn.0045d074
call fcn.0045968c
push eax
push 0x461
mov eax, dword [0x59254c]
mov eax, dword [eax]
push eax
call sub.user32.dll_PostMessageA
jmp case.0x5737a8.646
push 2
mov eax, dword [esi + 0x9e8]
call fcn.0045d074
call fcn.0045968c
push eax
push 0x461
mov eax, dword [0x59254c]
mov eax, dword [eax]
push eax
call sub.user32.dll_PostMessageA
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9f4]
call fcn.0045d074
mov edx, eax
mov eax, esi
call fcn.00571b7c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9f4]
call fcn.0045d074
call fcn.0045968c
mov edx, eax
mov eax, dword [esi + 0x9f4]
call fcn.005505a4
push 0
push 6
push 0x461
mov eax, dword [0x59254c]
mov eax, dword [eax]
push eax
call sub.user32.dll_PostMessageA
jmp case.0x5737a8.646
push 0
push 0x576344
call sub.user32.dll_FindWindowA
test eax, eax
je 0x5756d3
push 0x10
push 0x575f40
push 0x576350
mov eax, esi
call fcn.0047b544
push eax
call sub.user32.dll_MessageBoxA
jmp case.0x5737a8.646
cmp dword [edi + 0x48], 0x57b
je 0x5756fe
push 0x24
push 0x5762ec
push 0x57638c
mov eax, esi
call fcn.0047b544
push eax
call sub.user32.dll_MessageBoxA
cmp eax, 6
jne case.0x5737a8.646
cmp dword [edi + 0x48], 0x57c
sete dl
mov eax, dword [esi + 0x9f4]
call fcn.00550a20
jmp case.0x5737a8.646
mov eax, dword [esi + 0x95c]
call fcn.00514b0c
jmp case.0x5737a8.646
xor edx, edx
mov eax, esi
call fcn.0057c880
jmp case.0x5737a8.646
mov dl, 1
mov eax, esi
call fcn.0057c880
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9e4]
call fcn.00536cf0
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9e4]
mov eax, dword [eax + 0x22c]
call fcn.00459914
jmp case.0x5737a8.646
mov eax, dword [esi + 0x7e8]
mov eax, dword [eax + 0x26c]
cmp eax, dword [esi + 0xa20]
jne 0x5757b4
mov eax, dword [esi + 0x96c]
call fcn.00502990
test al, al
je case.0x5737a8.646
mov eax, dword [esi + 0x9d0]
call fcn.00453098
mov ecx, dword [eax + 8]
mov edx, 6
mov eax, dword [esi + 0x9f8]
call fcn.0055adec
jmp case.0x5737a8.646
mov eax, dword [esi + 0xa30]
call fcn.00527330
xor ecx, ecx
mov edx, 7
mov eax, dword [esi + 0x9f8]
call fcn.0055adec
jmp case.0x5737a8.646
mov eax, dword [esi + 0x7e8]
mov eax, dword [eax + 0x26c]
cmp eax, dword [esi + 0xa20]
jne 0x575844
push 0
mov cx, word [0x5763ac]
mov dl, 3
mov eax, 0x5763b8
call fcn.0043703c
cmp eax, 7
je case.0x5737a8.646
mov eax, dword [esi + 0x9d0]
call fcn.00453098
mov edx, dword [eax + 8]
lea eax, [ebp - 4]
call fcn.00404d9c
mov edx, dword [ebp - 4]
mov eax, dword [esi + 0x96c]
call fcn.00502cbc
mov ecx, dword [ebp - 4]
mov edx, 4
mov eax, dword [esi + 0x9f8]
call fcn.0055adec
jmp case.0x5737a8.646
push 0
mov cx, word [0x5763ac]
mov dl, 3
mov eax, 0x5763e8
call fcn.0043703c
cmp eax, 6
jne case.0x5737a8.646
mov eax, dword [esi + 0x9f8]
mov eax, dword [eax + 0x44]
mov dl, 1
call fcn.004db23c
push 2
push 0
push 0x45f
mov eax, dword [0x59254c]
mov eax, dword [eax]
push eax
call sub.user32.dll_PostMessageA
xor ecx, ecx
mov edx, 5
mov eax, dword [esi + 0x9f8]
call fcn.0055adec
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9f0]
mov ecx, dword [eax + 0x418]
xor edx, edx
mov eax, esi
call fcn.0056fb54
jmp case.0x5737a8.646
lea eax, [ebp - 4]
mov edx, dword [edi + 0x38]
call fcn.00404d9c
cmp dword [ebp - 4], 0
je case.0x5737a8.646
lea edx, [ebp - 0xe8]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
mov edx, dword [ebp - 0xe8]
mov eax, dword [ebp - 4]
call fcn.0040512c
je case.0x5737a8.646
mov eax, dword [ebp - 4]
call fcn.00498774
test al, al
je case.0x5737a8.646
mov edx, dword [ebp - 4]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x144]
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
cmp dword [eax + 0xc], 0xa
jne 0x5759fc
lea edx, [ebp - 0xec]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
cmp dword [ebp - 0xec], 0
je case.0x5737a8.646
lea edx, [ebp - 0xf0]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
mov edx, dword [ebp - 0xf0]
mov eax, esi
call fcn.005733fc
test al, al
jne case.0x5737a8.646
push esi
push fcn.005734f0
push 0x835
lea edx, [ebp - 0xf8]
mov eax, dword [esi + 0x9ec]
mov ecx, dword [eax]
call dword [ecx + 0x140]
mov eax, dword [ebp - 0xf8]
lea edx, [ebp - 0xf4]
call fcn.00498590
mov edx, dword [ebp - 0xf4]
xor ecx, ecx
mov eax, esi
call fcn.00577aa4
mov edx, eax
mov eax, dword [esi + 0x978]
call fcn.004a3b08
mov eax, dword [esi + 0x978]
mov edx, dword [eax + 0x60]
dec edx
mov eax, dword [esi + 0x978]
call fcn.004a3ae8
xor edx, edx
call fcn.004a4e5c
mov eax, esi
call fcn.0057072c
xor ecx, ecx
mov edx, 0xa
mov eax, dword [esi + 0x9f8]
call fcn.0055adec
jmp case.0x5737a8.646
mov ecx, esi
mov dl, 1
mov eax, dword [0x51b1a8]
call fcn.0048d440
mov ebx, eax
mov eax, dword [esi + 0x9f0]
mov edx, dword [eax + 0x3cc]
mov eax, dword [ebx + 0x308]
call fcn.00474c5c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
cmp dword [ebx + 0x24c], 1
jne 0x575b60
lea edx, [ebp - 0xfc]
mov eax, dword [ebx + 0x2f8]
call fcn.00474c2c
push dword [ebp - 0xfc]
push 0x57641c
lea edx, [ebp - 0x100]
mov eax, dword [ebx + 0x314]
call fcn.00474c2c
push dword [ebp - 0x100]
push 0x57641c
lea edx, [ebp - 0x104]
mov eax, dword [ebx + 0x308]
call fcn.00474c2c
push dword [ebp - 0x104]
lea eax, [ebp - 4]
mov edx, 5
call fcn.004050a0
mov eax, dword [ebx + 0x308]
mov edx, dword [eax]
call dword [edx + 0x50]
test al, al
je 0x575b60
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
mov eax, dword [eax + 0x28]
push dword [eax + 0x2c]
push dword [ebp - 4]
push 0x576428
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
mov eax, dword [eax + 0x28]
add eax, 0x2c
mov edx, 3
call fcn.004050a0
push esi
push 0x5703e0
push 0
lea ecx, [ebp - 0x108]
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.00499344
mov eax, dword [ebp - 0x108]
push eax
lea ecx, [ebp - 0x10c]
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.00499244
mov edx, dword [ebp - 0x10c]
mov eax, esi
pop ecx
call fcn.00577aa4
mov edx, eax
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x418]
mov eax, dword [eax + 8]
call fcn.004a3b08
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x418]
mov eax, dword [eax + 8]
mov edx, dword [eax + 0x60]
dec edx
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x418]
mov eax, dword [eax + 8]
call fcn.004a3ae8
xor edx, edx
call fcn.004a4e5c
mov eax, ebx
call fcn.00403e94
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9ec]
cmp dword [eax + 0xc], 0xa
jne 0x575b84
mov eax, esi
call fcn.0057066c
jmp case.0x5737a8.646
mov ecx, esi
mov dl, 1
mov eax, dword [0x51b528]
call fcn.0048d440
mov ebx, eax
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
mov edx, dword [eax + 0x28]
mov eax, ebx
call fcn.0051b77c
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
cmp dword [ebx + 0x24c], 1
jne 0x575be5
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x418]
mov ecx, dword [eax + 8]
mov eax, dword [esi + 0x9f0]
mov eax, dword [eax + 0x414]
mov eax, dword [eax + 0x28]
mov edx, dword [eax + 0x2c]
mov eax, esi
call fcn.005704b8
mov eax, ebx
call fcn.00403e94
jmp case.0x5737a8.646
push 1
mov cl, byte [esi + 0x980]
mov edx, esi
mov eax, esi
call fcn.0057d090
jmp case.0x5737a8.646
mov eax, dword [esi + 0x97c]
push eax
push 0
mov cl, 1
mov dl, byte [esi + 0x980]
mov eax, esi
call fcn.00564e44
jmp case.0x5737a8.646
mov cl, 1
mov edx, dword [esi + 0x984]
mov eax, esi
call fcn.0056ee8c
jmp case.0x5737a8.646
mov edx, dword [esi + 0x984]
mov eax, esi
call fcn.0056ee04
jmp case.0x5737a8.646
mov eax, dword [esi + 0x994]
mov dl, byte [eax + 0x57]
xor dl, 1
mov eax, dword [esi + 0x994]
call fcn.00474b4c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x668]
mov dl, byte [eax + 0x57]
xor dl, 1
mov eax, dword [esi + 0x668]
call fcn.00474b4c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x7b8]
mov dl, byte [eax + 0x57]
xor dl, 1
mov eax, dword [esi + 0x7b8]
call fcn.00474b4c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x99c]
mov dl, byte [eax + 0x57]
xor dl, 1
mov eax, dword [esi + 0x99c]
call fcn.00474b4c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9a4]
mov dl, byte [eax + 0x57]
xor dl, 1
mov eax, dword [esi + 0x9a4]
call fcn.00474b4c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x998]
mov dl, byte [eax + 0x57]
xor dl, 1
mov eax, dword [esi + 0x998]
call fcn.00474b4c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9a0]
mov dl, byte [eax + 0x57]
xor dl, 1
mov eax, dword [esi + 0x9a0]
call fcn.00474b4c
jmp case.0x5737a8.646
mov eax, dword [esi + 0x9a8]
mov dl, byte [eax + 0x57]
xor dl, 1
mov eax, dword [esi + 0x9a8]
call fcn.00474b4c
jmp case.0x5737a8.646
mov ecx, esi
mov dl, 1
mov eax, dword [0x536dd8]
call fcn.0048d440
mov ebx, eax
mov edx, dword [esi + 0x990]
mov eax, ebx
call fcn.005373f0
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xec]
cmp dword [ebx + 0x24c], 1
jne 0x575da1
mov eax, dword [ebx + 0x324]
call fcn.004b74ec
mov eax, dword [ebx + 0x324]
mov eax, dword [eax + 0x2e4]
call fcn.004a3e10
lea edx, [ebp - 0x110]
mov eax, ebx
call fcn.00537660
mov ecx, dword [ebp - 0x110]
mov edx, dword [ebx + 0x324]
mov eax, esi
call fcn.005665f0
mov eax, dword [ebx + 0x324]
call fcn.004b74f8
mov eax, ebx
call fcn.00403e94
jmp case.0x5737a8.646
mov eax, dword [esi + 0x7b4]
mov dl, byte [eax + 0x211]
xor dl, 1
mov eax, dword [esi + 0x7b4]
call fcn.004af1f4
jmp case.0x5737a8.646
push 0x34
push 0x575f40
push 0x57642c
mov eax, esi
call fcn.0047b544
push eax
call sub.user32.dll_MessageBoxA
cmp eax, 6
jne case.0x5737a8.646
mov eax, esi
call fcn.0056678c
jmp case.0x5737a8.646
mov eax, ecx
sub eax, 0x9c4
cdq
xor eax, edx
sub eax, edx
mov edx, eax
mov eax, esi
call fcn.00576460
jmp case.0x5737a8.646
mov eax, esi
call fcn.00564d84
jmp case.0x5737a8.646
xor edx, edx
mov eax, dword [esi + 0x85c]
call fcn.00474b4c
jmp case.0x5737a8.646
mov eax, esi
call fcn.0057b934
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x575ee6
lea eax, [ebp - 0x110]
mov edx, 3
call fcn.00404d28
lea eax, [ebp - 0x104]
mov edx, 3
call fcn.00404d28
lea eax, [ebp - 0xf8]
mov edx, 6
call fcn.00404d28
lea eax, [ebp - 0xe0]
mov edx, 8
call fcn.00404d28
lea eax, [ebp - 0xc0]
mov edx, 3
call fcn.00404d28
lea eax, [ebp - 0xb0]
mov edx, 4
call fcn.00404d28
lea eax, [ebp - 0xa0]
call fcn.00404d04
lea eax, [ebp - 0x9c]
mov edx, 3
call fcn.00404d28
lea eax, [ebp - 0x90]
call fcn.00404d04
lea eax, [ebp - 0x8c]
mov edx, 3
call fcn.00404d28
lea eax, [ebp - 0x80]
call fcn.00404d04
lea eax, [ebp - 0x7c]
mov edx, 0x1f
call fcn.00404d28
ret