Function at 0x4d9bb4
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff6dc
mov eax, 0x58ec74
push ebx
push esi
push edi
call fcn.0054e578
mov word [ebp - 0x100], 8
xor edx, edx
lea eax, [ebp - 0x18]
mov dword [ebp - 4], edx
inc dword [ebp - 0xf4]
mov word [ebp - 0x100], 0x14
mov word [ebp - 0x100], 0x20
mov edx, dword [ebp + 0xc]
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x18]
lea eax, [ebp - 4]
call fcn.0055c54c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0055c51c
cmp dword [ebp - 4], 0
je 0x4d9c2d
mov ecx, dword [ebp - 4]
mov eax, dword [ecx - 4]
jmp 0x4d9c2f
xor eax, eax
dec eax
jge 0x4d9c8d
mov word [ebp - 0x100], 0x2c
mov edx, str.M2_error_1
lea eax, [ebp - 0x1c]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0x38
mov edx, str._XXXDATA_ERROR0_EXXXDATA_
lea eax, [ebp - 0x20]
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x20]
lea eax, [ebp - 4]
call fcn.0055c6d0
test eax, eax
lea eax, [ebp - 0x20]
setg cl
and ecx, 1
mov edx, 2
push ecx
dec dword [ebp - 0xf4]
call fcn.0055c51c
pop ecx
test cl, cl
je 0x4d9d30
mov word [ebp - 0x100], 0x44
mov edx, 0x58dfb9
lea eax, [ebp - 0x24]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0x50
mov edx, str._XXXDATA_ERROR1_EXXXDATA_
lea eax, [ebp - 0x28]
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x28]
lea eax, [ebp - 4]
call fcn.0055c6d0
test eax, eax
lea eax, [ebp - 0x28]
setg cl
and ecx, 1
mov edx, 2
push ecx
dec dword [ebp - 0xf4]
call fcn.0055c51c
pop ecx
test cl, cl
je 0x4d9dd3
mov word [ebp - 0x100], 0x5c
mov edx, 0x58dfe3
lea eax, [ebp - 0x2c]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0x68
mov edx, str._XXXDATA_ERROR2_EXXXDATA_
lea eax, [ebp - 0x30]
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x30]
lea eax, [ebp - 4]
call fcn.0055c6d0
test eax, eax
lea eax, [ebp - 0x30]
setg cl
and ecx, 1
mov edx, 2
push ecx
dec dword [ebp - 0xf4]
call fcn.0055c51c
pop ecx
test cl, cl
je 0x4d9e76
mov word [ebp - 0x100], 0x74
mov edx, 0x58e03b
lea eax, [ebp - 0x34]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0x80
mov edx, str._XXXDATA_ERROR3_EXXXDATA_
lea eax, [ebp - 0x38]
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x38]
lea eax, [ebp - 4]
call fcn.0055c6d0
test eax, eax
lea eax, [ebp - 0x38]
setg cl
and ecx, 1
mov edx, 2
push ecx
dec dword [ebp - 0xf4]
call fcn.0055c51c
pop ecx
test cl, cl
je 0x4d9f19
mov word [ebp - 0x100], 0x8c
mov edx, 0x58e067
lea eax, [ebp - 0x3c]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0x98
mov edx, str._XXXDATA_ERROR4_EXXXDATA_
lea eax, [ebp - 0x40]
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x40]
lea eax, [ebp - 4]
call fcn.0055c6d0
test eax, eax
lea eax, [ebp - 0x40]
setg cl
and ecx, 1
mov edx, 2
push ecx
dec dword [ebp - 0xf4]
call fcn.0055c51c
pop ecx
test cl, cl
je 0x4d9fbc
mov word [ebp - 0x100], 0xa4
mov edx, 0x58e097
lea eax, [ebp - 0x44]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0xb0
mov edx, str._XXXDATA_ERROR5_EXXXDATA_
lea eax, [ebp - 0x48]
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x48]
lea eax, [ebp - 4]
call fcn.0055c6d0
test eax, eax
lea eax, [ebp - 0x48]
setg cl
and ecx, 1
mov edx, 2
push ecx
dec dword [ebp - 0xf4]
call fcn.0055c51c
pop ecx
test cl, cl
je 0x4da05f
mov word [ebp - 0x100], 0xbc
mov edx, 0x58e0d1
lea eax, [ebp - 0x4c]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0xc8
mov edx, str._XXXDATA_
lea eax, [ebp - 0x50]
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x50]
lea eax, [ebp - 4]
call fcn.0055c6d0
mov ebx, eax
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.0055c51c
mov word [ebp - 0x100], 0xd4
mov edx, str._EXXXDATA_
lea eax, [ebp - 0x54]
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x54]
lea eax, [ebp - 4]
call fcn.0055c6d0
mov esi, eax
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.0055c51c
test ebx, ebx
je 0x4da0e3
test esi, esi
jne 0x4da1e1
mov word [ebp - 0x100], 0xe0
mov edx, 0x58e102
lea eax, [ebp - 0x58]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.0055c51c
mov dl, 1
mov eax, dword [0x535998]
call fcn.004087f0
mov ebx, eax
mov edx, dword [ebp - 4]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x34]
lea eax, [ebp - 0x224]
push eax
push 0x104
call sub.KERNEL32.DLL_GetTempPathA
push str.error5.txt
lea edx, [ebp - 0x224]
push edx
call fcn.0054e1e8
mov word [ebp - 0x100], 0xec
add esp, 8
lea edx, [ebp - 0x224]
lea eax, [ebp - 0x5c]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov edx, dword [eax]
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x64]
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0055c51c
mov esi, ebx
mov dword [ebp - 0x64], esi
test esi, esi
je 0x4da1bc
mov eax, dword [esi]
mov dword [ebp - 0x60], eax
mov word [ebp - 0x100], 0x104
mov edx, 3
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x100], 0xf8
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
sub esi, ebx
add esi, 0xfffffff7
cmp esi, 1
jge 0x4da246
mov word [ebp - 0x100], 0x110
mov edx, str.error0
lea eax, [ebp - 0x68]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0x11c
xor eax, eax
xor edx, edx
mov dword [ebp - 8], eax
xor ecx, ecx
inc dword [ebp - 0xf4]
xor eax, eax
mov word [ebp - 0x100], 0x14
mov word [ebp - 0x100], 0x128
mov dword [ebp - 0xc], edx
lea edx, [ebp - 0x6c]
inc dword [ebp - 0xf4]
mov word [ebp - 0x100], 0x14
mov word [ebp - 0x100], 0x134
mov dword [ebp - 0x10], ecx
mov ecx, esi
inc dword [ebp - 0xf4]
mov word [ebp - 0x100], 0x14
mov word [ebp - 0x100], 0x140
mov dword [ebp - 0x6c], eax
push edx
inc dword [ebp - 0xf4]
lea edx, [ebx + 9]
lea eax, [ebp - 4]
call fcn.0055c88c
lea edx, [ebp - 0x6c]
lea eax, [ebp - 8]
call fcn.0055c54c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.0055c51c
mov word [ebp - 0x100], 0x14c
mov edx, str._XXQDATA_
lea eax, [ebp - 0x70]
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x70]
lea eax, [ebp - 4]
call fcn.0055c6d0
mov ebx, eax
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.0055c51c
mov word [ebp - 0x100], 0x158
mov edx, str._EXXQDATA_
lea eax, [ebp - 0x74]
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x74]
lea eax, [ebp - 4]
call fcn.0055c6d0
mov esi, eax
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.0055c51c
test ebx, ebx
je 0x4da364
test esi, esi
jne 0x4da3f8
mov word [ebp - 0x100], 0x164
mov edx, 0x58e137
lea eax, [ebp - 0x78]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
sub esi, ebx
add esi, 0xfffffff7
cmp esi, 1
jge 0x4da49a
mov word [ebp - 0x100], 0x170
mov edx, str.error02
lea eax, [ebp - 0x7c]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0x17c
xor eax, eax
lea edx, [ebp - 0x80]
mov dword [ebp - 0x80], eax
push edx
inc dword [ebp - 0xf4]
lea edx, [ebx + 9]
lea eax, [ebp - 4]
mov ecx, esi
call fcn.0055c88c
lea edx, [ebp - 0x80]
lea eax, [ebp - 0x10]
call fcn.0055c54c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x10]
push ecx
mov eax, dword [ebp - 8]
push eax
call fcn.004d91c8
add esp, 8
mov esi, eax
cmp esi, 1
je 0x4da5cb
mov word [ebp - 0x100], 0x188
lea eax, [ebp - 0x84]
mov edx, esi
call fcn.0055c39c
inc dword [ebp - 0xf4]
mov edx, eax
xor eax, eax
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x88], eax
mov eax, 0x58e14d
inc dword [ebp - 0xf4]
call fcn.0055ca88
lea eax, [ebp - 0x88]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0x194
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x32c]
push edx
xor edx, edx
mov ecx, dword [ebp - 8]
push ecx
lea ecx, [ebp - 0x8c]
mov eax, dword [ebp + 8]
push eax
mov dword [ebp - 0x8c], edx
push ecx
inc dword [ebp - 0xf4]
call fcn.004db42c
add esp, 0x10
lea edx, [ebp - 0x8c]
lea eax, [ebp - 8]
call fcn.0055c54c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0055c51c
mov word [ebp - 0x100], 0x1a0
xor ecx, ecx
mov edx, str._SSSDATA_
mov dword [ebp - 0x14], ecx
lea eax, [ebp - 0x90]
inc dword [ebp - 0xf4]
mov word [ebp - 0x100], 0x14
mov word [ebp - 0x100], 0x1ac
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x90]
lea eax, [ebp - 4]
call fcn.0055c6d0
mov ebx, eax
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.0055c51c
mov word [ebp - 0x100], 0x1b8
mov edx, str._ESSSDATA_
lea eax, [ebp - 0x94]
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0x94]
lea eax, [ebp - 4]
call fcn.0055c6d0
mov esi, eax
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0055c51c
test ebx, ebx
je 0x4da6da
test esi, esi
jne 0x4da787
mov word [ebp - 0x100], 0x1c4
mov edx, 0x58e175
lea eax, [ebp - 0x98]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
sub esi, ebx
add esi, 0xfffffff7
cmp esi, 1
jge 0x4da842
mov word [ebp - 0x100], 0x1d0
mov edx, str.error03
lea eax, [ebp - 0x9c]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0x1dc
xor eax, eax
lea edx, [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
push edx
inc dword [ebp - 0xf4]
lea edx, [ebx + 9]
lea eax, [ebp - 4]
mov ecx, esi
call fcn.0055c88c
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x14]
call fcn.0055c54c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.0055c51c
mov word [ebp - 0x100], 0x1e8
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x32c]
push eax
xor eax, eax
mov edx, dword [ebp - 0x14]
push edx
lea edx, [ebp - 0xa4]
mov ecx, dword [ebp + 8]
push ecx
mov dword [ebp - 0xa4], eax
push edx
inc dword [ebp - 0xf4]
call fcn.004db4e8
add esp, 0x10
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x14]
call fcn.0055c54c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.0055c51c
push 8
cmp dword [ebp - 0x14], 0
je 0x4da8fa
mov ecx, dword [ebp - 0x14]
jmp 0x4da8ff
mov ecx, 0x58e18b
push ecx
lea eax, [ebp - 0x11c]
push eax
call fcn.0054e0d4
add esp, 0xc
lea edx, [ebp - 0x120]
lea eax, [ebp - 0x11c]
push 8
push edx
push eax
mov edx, dword [ebp + 8]
push edx
call fcn.004d9060
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x120]
inc ecx
add esp, 0x10
cmp ecx, dword [eax + 0x31c]
jge 0x4da9ee
mov word [ebp - 0x100], 0x1f4
mov edx, str.error04
lea eax, [ebp - 0xa8]
call fcn.0055c210
inc dword [ebp - 0xf4]
dec dword [ebx + 0x1881e800]
add al, 0
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x31c]
cmp edx, dword [ebp - 0x120]
jge 0x4dabce
mov word [ebp - 0x100], pe_nt_image_headers32
xor ecx, ecx
mov edx, 0x5a8ba8
mov dword [ebp - 0xac], ecx
lea eax, [ebp - 0xb0]
inc dword [ebp - 0xf4]
mov word [ebp - 0x100], 0x20c
mov word [ebp - 0x100], 0x218
call fcn.0055c210
inc dword [ebp - 0xf4]
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0xac]
call fcn.0055c54c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0055c51c
push 1
push 0x58e19a
push 0x58e199
cmp dword [ebp - 0xac], 0
je 0x4daa86
mov ecx, dword [ebp - 0xac]
jmp 0x4daa8b
mov ecx, 0x58e19b
push ecx
push str.Open
mov eax, dword [ebp + 8]
call fcn.00527350
push eax
call sub.SHELL32.DLL_ShellExecuteA
mov word [ebp - 0x100], 0x224
mov edx, 0x5a8ba8
lea eax, [ebp - 0xb8]
call fcn.0055c210
push eax
inc dword [ebp - 0xf4]
mov edx, 0x58e19c
lea eax, [ebp - 0xb4]
call fcn.0055c210
inc dword [ebp - 0xf4]
xor edx, edx
mov dword [ebp - 0xbc], edx
lea ecx, [ebp - 0xbc]
inc dword [ebp - 0xf4]
pop edx
call fcn.0055c574
lea eax, [ebp - 0xbc]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x120]
mov dword [eax + 0x31c], edx
push 0xc8
call fcn.0054d784
pop ecx
mov ebx, eax
push 0xc8
push 0
push ebx
call fcn.0054e144
add esp, 0xc
lea eax, [esi - 0x10]
push eax
cmp dword [ebp - 0x14], 0
je 0x4dac09
mov edx, dword [ebp - 0x14]
jmp 0x4dac0e
mov edx, 0x58e1ed
add edx, 0x10
push edx
push ebx
call fcn.0054e0d4
add esp, 0xc
add esi, 0xfffffff0
xor eax, eax
cmp esi, eax
jle 0x4dac37
movsx edx, byte [ebx + eax]
cmp edx, 0x30
jl 0x4dac37
cmp edx, 0x5a
jg 0x4dac37
inc eax
cmp esi, eax
jg 0x4dac24
mov byte [ebx + eax], 0
mov eax, ebx
mov ecx, dword [sym.Project1.exe__PlayForm]
mov edx, dword [ecx]
mov dword [edx + 0xdc4], eax
xor eax, eax
mov word [ebp - 0x100], 0x230
mov dword [ebp - 0xc0], eax
lea edx, [ebp - 0xc0]
inc dword [ebp - 0xf4]
mov eax, dword [ebp + 8]
mov ebx, dword [eax + 0x2e0]
mov eax, ebx
call fcn.00521278
lea eax, [ebp - 0xc0]
xor edx, edx
mov dword [ebp - 0xc4], edx
lea edx, [ebp - 0xc4]
inc dword [ebp - 0xf4]
call fcn.0055c804
lea edx, [ebp - 0xc4]
mov eax, ebx
mov edx, dword [edx]
call fcn.005212a8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.0055c51c
mov word [ebp - 0x100], 0x23c
xor ecx, ecx
mov dword [ebp - 0xc8], ecx
lea edx, [ebp - 0xc8]
inc dword [ebp - 0xf4]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x2e0]
call fcn.00521278
cmp dword [ebp - 0xc8], 0
je 0x4dad0e
mov edx, dword [ebp - 0xc8]
jmp 0x4dad13
mov edx, 0x58e1ee
xor eax, eax
mov edi, edx
or ecx, 0xffffffff
lea esi, [ebp - 0x324]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, 2
and ecx, 3
lea eax, [ebp - 0xc8]
rep movsb byte es:[edi], byte [esi]
dec dword [ebp - 0xf4]
call fcn.0055c51c
mov word [ebp - 0x100], 0x248
mov word [ebp - 0x100], 0x254
cmp dword [ebp - 8], 0
je 0x4dad6b
mov ecx, dword [ebp - 8]
jmp 0x4dad70
mov ecx, 0x58e1ef
push ecx
xor edx, edx
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0xcc]
mov dword [ebp - 0xcc], edx
push eax
inc dword [ebp - 0xf4]
call fcn.004db5cc
add esp, 0xc
lea edx, [ebp - 0xcc]
lea eax, [ebp - 8]
call fcn.0055c54c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.0055c51c
cmp dword [ebp - 8], 0
je 0x4dadc1
mov esi, dword [ebp - 8]
jmp 0x4dadc6
mov esi, 0x58e1f0
push esi
call fcn.0054e278
pop ecx
mov edi, eax
lea eax, [edi - 5]
push eax
push esi
mov edx, dword [ebp + 8]
push edx
call fcn.004db66c
movzx ebx, ax
add esp, 0xc
lea eax, [edi + esi]
add eax, 0xfffffffb
lea edx, [ebp - 0x924]
push 5
push eax
push edx
call fcn.0054e0d4
mov byte [ebp - 0x91f], 0
mov word [ebp - 0x100], 0x260
add esp, 0xc
lea edx, [ebp - 0x924]
lea eax, [ebp - 0xd0]
call fcn.0055c210
mov edx, eax
inc dword [ebp - 0xf4]
lea eax, [ebp - 4]
call fcn.0055c54c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.0055c51c
lea eax, [ebp - 4]
call fcn.0055c970
cmp ebx, eax
je 0x4daeff
mov word [ebp - 0x100], 0x26c
mov edx, 0x58e1f1
lea eax, [ebp - 0xd4]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
push 3
lea eax, [edi + esi]
add eax, 0xfffffff8
push eax
lea edx, [ebp - 0x924]
push edx
call fcn.0054e0d4
mov byte [ebp - 0x921], 0
mov word [ebp - 0x100], 0x278
add esp, 0xc
lea edx, [ebp - 0x924]
lea eax, [ebp - 0xd8]
call fcn.0055c210
mov edx, eax
inc dword [ebp - 0xf4]
lea eax, [ebp - 4]
call fcn.0055c54c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.0055c51c
lea eax, [ebp - 4]
call fcn.0055c970
mov ebx, eax
lea eax, [ebp - 0x924]
push ebx
push esi
push eax
call fcn.0054e0d4
mov byte [ebp + ebx - 0x924], 0
mov word [ebp - 0x100], 0x284
add esp, 0xc
lea edx, [ebp - 0x924]
lea eax, [ebp - 0xdc]
call fcn.0055c210
mov edx, eax
inc dword [ebp - 0xf4]
lea eax, [ebp - 8]
call fcn.0055c54c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.0055c51c
mov ecx, edi
lea eax, [ebx + esi]
sub ecx, ebx
lea edx, [ebp - 0x924]
add ecx, 0xfffffff8
push ecx
push eax
push edx
call fcn.0054e0d4
add esp, 0xc
sub edi, ebx
lea edx, [ebp - 0x924]
lea eax, [ebp - 0xe0]
mov byte [ebp + edi - 0x92c], 0
mov word [ebp - 0x100], 0x290
call fcn.0055c210
mov edx, eax
inc dword [ebp - 0xf4]
lea eax, [ebp - 0xc]
call fcn.0055c54c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.0055c51c
cmp dword [ebp - 8], 0
je 0x4db031
mov ecx, dword [ebp - 8]
jmp 0x4db036
mov ecx, 0x58e203
mov edi, ecx
xor eax, eax
or ecx, 0xffffffff
lea esi, [ebp - 0x424]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
cmp dword [ebp - 0xc], 0
je 0x4db066
mov eax, dword [ebp - 0xc]
jmp 0x4db06b
mov eax, 0x58e204
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
lea esi, [ebp - 0x524]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [sym.Project1.exe__PlayForm]
mov ebx, dword [eax]
push 0x15
push 0
lea esi, [ebx + 0x2cb4]
push esi
call fcn.0054e144
add esp, 0xc
lea edi, [ebx + 0x2db4]
push 0x100
push 0
push edi
call fcn.0054e144
add esp, 0xc
lea eax, [ebx + 0x2eb4]
push 0x100
push 0
push eax
call fcn.0054e144
add esp, 0xc
xor eax, eax
or ecx, 0xffffffff
push esi
push edi
lea edi, [ebp - 0x324]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
pop esi
push edi
mov esi, edi
xor eax, eax
lea edi, [ebp - 0x424]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop edi
add ebx, 0x2eb4
xor eax, eax
lea edi, [ebp - 0x524]
or ecx, 0xffffffff
mov esi, ebx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov word [ebp - 0x100], 0x14
jmp 0x4db220
mov edx, dword [sym.Project1.exe__PlayForm]
mov ecx, dword [edx]
push ecx
call fcn.004db6b4
pop ecx
cmp al, 1
jne 0x4db37d
mov eax, dword [sym.Project1.exe__PlayForm]
mov edx, dword [eax]
push edx
call fcn.0040b438
pop ecx
cmp al, 1
jne 0x4db2d0
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x320], 1
mov eax, dword [ebp + 8]
call fcn.005140e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0x2a8
mov edx, 0x58e20c
lea eax, [ebp - 0xe8]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
jmp 0x4db425
mov word [ebp - 0x100], 0x2b4
mov edx, 0x58e21e
lea eax, [ebp - 0xec]
call fcn.0055c210
inc dword [ebp - 0xf4]
mov eax, dword [eax]
call fcn.0051c1e8
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0055c51c
dec dword [ebp - 0xf4]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0055c51c
mov ecx, dword [ebp - 0x110]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret