Function at 0x4033d0
Capabilities:
Create process on windows

Disassembly:
mov eax, dword [esp + 0xc]
and eax, 0xffff
lea ecx, [eax - 0x1ff]
cmp ecx, 0xad
ja case.0x4033f3.565
xor edx, edx
mov dl, byte [ecx + 0x403660]
jmp dword [edx*4 + 0x403584]
jmp 0x403710
push 0
call fcn.00403e90
add esp, 4
ret
push 0
push 0
call fcn.00403850
add esp, 8
ret
push 1
push 0
call fcn.00403850
add esp, 8
ret
jmp 0x404380
push 0
call fcn.004043c0
add esp, 4
ret
jmp 0x404420
jmp 0x404440
jmp 0x404490
jmp 0x405390
jmp 0x4054b0
jmp 0x4044c0
jmp 0x412b90
jmp 0x4056b0
jmp 0x405750
jmp 0x4057d0
jmp 0x405890
jmp fcn.00402350
jmp fcn.00402320
jmp fcn.00419b40
jmp fcn.0041b990
jmp 0x405ca0
jmp 0x405bb0
jmp 0x405ad0
jmp 0x4221a0
jmp 0x422170
jmp 0x422200
jmp 0x4221d0
jmp 0x41baf0
jmp fcn.0041c210
jmp 0x41c720
jmp 0x41ca60
jmp 0x405c70
jmp 0x421540
jmp 0x41cda0
jmp 0x420cb0
push 1
call fcn.0041e450
add esp, 4
ret
jmp 0x405c30
push 0
call fcn.00414e20
push eax
call fcn.0041eab0
add esp, 8
ret
call fcn.00414e20
push eax
call fcn.0041f3b0
add esp, 4
ret
call fcn.00414e20
push eax
call fcn.0041f540
add esp, 4
ret
call fcn.00414e20
push eax
call fcn.0041f7d0
add esp, 4
ret
call fcn.00414e20
push eax
call fcn.0041fb00
add esp, 4
ret
call fcn.00414e20
push eax
call fcn.004200a0
add esp, 4
ret
call fcn.00414e20
push eax
call fcn.00420270
add esp, 4
ret
jmp 0x405940
jmp 0x405a90
jmp 0x405ab0
jmp fcn.00421750
jmp 0x4044a0
mov eax, dword [0x493740]
push eax
call fcn.0040dec0
add esp, 4
ret
jmp 0x405e90
jmp 0x405ed0
jmp 0x405f10
push eax
call fcn.004055d0
pop ecx
ret
sub esp, 0x204
push esi
push edi
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 9]
mov byte [esp + 8], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call fcn.004294c0
test al, al
je 0x4037bf
lea eax, [esp + 8]
push 0x104
push eax
or esi, 0xffffffff
or edi, 0xffffffff
call fcn.00429c20
lea ecx, [esp + 0x114]
push 0x100
lea edx, [esp + 0x14]
push ecx
push edx
call fcn.00437090
lea eax, [esp + 0x120]
push 0x44c250
push eax
call fcn.00438300
add esp, 0x1c
test eax, eax
jne 0x4037a7
call fcn.00429a20
cmp al, 0x2c
je 0x40379e
push 0x44c588
call fcn.00429820
add esp, 4
pop edi
pop esi
add esp, 0x204
ret
call fcn.00429a50
mov esi, eax
xor edi, edi
push edi
lea ecx, [esp + 0xc]
push esi
push ecx
call fcn.00401190
add esp, 0xc
pop edi
pop esi
add esp, 0x204
ret
push ebx
push 1
call fcn.0042a5a0
lea edx, [esp + 0x10]
push 0x104
push edx
call fcn.00419050
mov edi, 0x44c584
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x18]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x1000
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov eax, dword [0x493740]
mov ecx, ebx
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
push 0x44c480
lea ecx, [esp + 0x24]
push 0x44c470
push ecx
call fcn.0042a5b0
add esp, 0x20
test al, al
pop ebx
je 0x403846
lea edx, [esp + 8]
push edx
call fcn.00419090
push 0xffffffffffffffff
lea eax, [esp + 0x10]
push 0xffffffffffffffff
push eax
call fcn.00401190
add esp, 0x10
pop edi
pop esi
add esp, 0x204
ret
push 0
call fcn.00416110
add esp, 4
jmp fcn.00404390
call fcn.004294c0
test al, al
je 0x404432
call fcn.00417d00
test al, al
je 0x404437
jmp fcn.00417370
ret
sub esp, 0x104
call fcn.004294c0
test al, al
je 0x404472
lea eax, [esp]
push 0x104
push eax
call fcn.00429c20
lea ecx, [esp + 8]
push ecx
call fcn.00417b50
add esp, 0xc
add esp, 0x104
ret
push 0
call fcn.00417b50
add esp, 4
add esp, 0x104
ret
call fcn.004172f0
jmp fcn.00404390
mov eax, dword [0x493740]
push eax
call fcn.00411a90
add esp, 4
jmp fcn.00404390
push 0x44c7e0
call fcn.00401f40
push 0
call fcn.00404a40
add esp, 8
test eax, eax
jne 0x4044e1
push eax
call fcn.004044f0
add esp, 4
jmp fcn.00402030
sub esp, 0x304
mov ecx, 0x41
xor eax, eax
push edi
lea edi, [esp + 4]
rep stosd dword es:[edi], eax
call fcn.004294c0
test al, al
je 0x4053c7
lea eax, [esp + 4]
push 0x104
push eax
call fcn.00429c20
add esp, 8
pop edi
add esp, 0x304
ret
mov al, byte [esp + 4]
test al, al
jne 0x405413
push ebx
push esi
lea ecx, [esp + 0xc]
push 0x104
push ecx
call fcn.00419050
mov edi, 0x44c584
or ecx, 0xffffffff
xor eax, eax
add esp, 8
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0xc]
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop esi
pop ebx
push 0
call fcn.0042a5a0
mov eax, dword [0x493740]
lea ecx, [esp + 8]
push eax
push 0x44cdac
push 0x44cd94
push ecx
call fcn.0042a8c0
add esp, 0x14
test al, al
je 0x4054a1
lea edx, [esp + 4]
push edx
call fcn.00419090
lea eax, [esp + 8]
lea ecx, [esp + 0x10c]
push eax
push 0x44cd78
push ecx
call fcn.00437eec
lea edx, [esp + 0x118]
push edx
call fcn.00401f40
lea eax, [esp + 0x18]
push eax
call fcn.00404a40
add esp, 0x18
test eax, eax
jge 0x40548f
push 0x44cd54
call fcn.00401f90
add esp, 4
pop edi
add esp, 0x304
ret
push 0x44cd34
call fcn.00401db0
add esp, 4
call fcn.00402030
pop edi
add esp, 0x304
ret
sub esp, 0x304
mov ecx, 0x41
xor eax, eax
push edi
lea edi, [esp + 4]
rep stosd dword es:[edi], eax
call fcn.004294c0
test al, al
je 0x4054e7
lea eax, [esp + 4]
push 0x104
push eax
call fcn.00429c20
add esp, 8
pop edi
add esp, 0x304
ret
mov al, byte [esp + 4]
test al, al
jne 0x405533
push ebx
push esi
lea ecx, [esp + 0xc]
push 0x104
push ecx
call fcn.00419050
mov edi, 0x44c584
or ecx, 0xffffffff
xor eax, eax
add esp, 8
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0xc]
mov esi, edi
mov ebx, ecx
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, ebx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
pop esi
pop ebx
push 0
call fcn.0042a5a0
mov eax, dword [0x493740]
lea ecx, [esp + 8]
push eax
push 0x44ce20
push 0x44ce10
push ecx
call fcn.0042a8c0
add esp, 0x14
test al, al
je 0x4055c1
lea edx, [esp + 4]
push edx
call fcn.00419090
lea eax, [esp + 8]
lea ecx, [esp + 0x10c]
push eax
push 0x44c71c
push ecx
call fcn.00437eec
lea edx, [esp + 0x118]
push edx
call fcn.00401f40
lea eax, [esp + 0x18]
push eax
call fcn.004044f0
add esp, 0x18
test eax, eax
jge 0x4055af
push 0x44cdf0
call fcn.00401f90
add esp, 4
pop edi
add esp, 0x304
ret
push 0x44cdd0
call fcn.00401db0
add esp, 4
call fcn.00402030
pop edi
add esp, 0x304
ret
sub esp, 0x28
push edi
mov ecx, 8
xor eax, eax
lea edi, [esp + 0xc]
rep stosd dword es:[edi], eax
mov dword [esp + 0xc], CreateStatusWindowA
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x14], CreateStatusWindowA
mov dword [esp + 0x18], eax
mov dword [esp + 4], 0x10
mov dword [esp + 0x24], 0x458f70
mov dword [esp + 0x20], 0x44ce4c
call fcn.004294c0
test al, al
pop edi
je 0x405712
call fcn.00429a50
cdq
mov dword [0x458f70], eax
mov dword [0x458f74], edx
jmp 0x405731
mov ecx, dword [0x493740]
lea eax, [esp]
push 1
push eax
push 0x44ce3c
push ecx
call fcn.00429fe0
add esp, 0x10
test eax, eax
jne 0x405746
mov edx, dword [0x458f74]
mov eax, dword [0x458f70]
push edx
push eax
call fcn.00403370
add esp, 8
add esp, 0x28
ret
call fcn.004294c0
test al, al
je 0x405786
call fcn.00429a50
mov dword [0x458f78], eax
call fcn.00429a20
cmp al, 0x2c
je 0x40577a
push 0x44c588
call fcn.00429820
add esp, 4
ret
call fcn.00429a50
mov dword [0x458f7c], eax
jmp 0x4057a3
push 0x458f7c
push 0x458f78
push 0x44c704
push 0
call fcn.00401530
add esp, 0x10
test al, al
je 0x4057cb
mov eax, dword [0x458f7c]
mov ecx, dword [0x458f78]
push eax
push ecx
call fcn.00414e20
push eax
call fcn.0042b9e0
push 0
call fcn.00402990
push eax
call fcn.00436fb0
add esp, 0x14
ret
sub esp, 0x80
push esi
call fcn.00414e20
push 0x44cee0
mov esi, eax
call fcn.00401f40
push esi
call fcn.0042b880
add esp, 8
push eax
push esi
call fcn.0042ba40
add esp, 4
push eax
lea eax, [esp + 0xc]
push 0x44ceb0
push eax
call fcn.00437eec
lea ecx, [esp + 0x14]
push ecx
call fcn.00401bf0
push 0
push 0x4010b0
push 2
push 2
push 0x40
push esi
call fcn.0042c2c0
push 0
call fcn.00402990
push eax
call fcn.00436fb0
push esi
call fcn.0042b880
add esp, 0x38
push eax
push esi
call fcn.0042ba40
add esp, 4
lea edx, [esp + 8]
push eax
push 0x44ce80
push edx
call fcn.00437eec
lea eax, [esp + 0x14]
push eax
call fcn.00401bf0
push 0x44ce5c
call fcn.00401f90
push 0
push 0
push 0x44c18c
call fcn.00431710
add esp, 0x24
pop esi
add esp, 0x80
ret
sub esp, 0x80
push esi
call fcn.00414e20
push 0x44cf70
mov esi, eax
call fcn.00401f40
push esi
call fcn.0042b880
add esp, 8
push eax
push esi
call fcn.0042ba40
add esp, 4
push eax
lea eax, [esp + 0xc]
push 0x44cf44
push eax
call fcn.00437eec
lea ecx, [esp + 0x14]
push ecx
call fcn.00401bf0
push 0
call fcn.00402990
push eax
call fcn.00436fb0
push esi
call fcn.0042b880
add esp, 0x20
push eax
push esi
call fcn.0042ba40
add esp, 4
lea edx, [esp + 8]
push eax
push 0x44cf18
push edx
call fcn.00437eec
lea eax, [esp + 0x14]
push eax
call fcn.00401bf0
push 0x44cefc
call fcn.00401f90
push 0
push 0
push 0x44c18c
call fcn.00431710
add esp, 0x24
pop esi
add esp, 0x80
ret
mov eax, dword [0x457eec]
sub esp, 0x48
test eax, eax
push esi
push edi
jne 0x4059ed
mov eax, dword [0x457ef0]
test eax, eax
jne 0x4059ed
call fcn.00413220
mov edi, eax
call fcn.004130b0
test eax, eax
jbe 0x4059de
test edi, edi
jbe 0x4059de
lea eax, [esp + 0xc]
lea ecx, [esp + 8]
push eax
push ecx
push 0
call fcn.00413240
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov dword [0x457eec], eax
mov esi, 1
add esp, 0xc
lea eax, [eax + edx - 1]
cmp edi, esi
mov dword [0x457ef0], eax
jbe 0x4059ed
lea ecx, [esp + 0xc]
lea edx, [esp + 8]
push ecx
push edx
push esi
call fcn.00413240
mov eax, dword [esp + 0x14]
mov edx, dword [0x457ef0]
add esp, 0xc
lea ecx, [eax - 1]
cmp ecx, edx
jne 0x4059ed
mov edx, dword [esp + 0xc]
inc esi
cmp esi, edi
lea eax, [eax + edx - 1]
mov dword [0x457ef0], eax
jb 0x4059a6
jmp 0x4059ed
call fcn.004130c0
mov dword [0x457eec], eax
mov dword [0x457ef0], eax
call fcn.004294c0
test al, al
je 0x405a28
call fcn.00429a50
mov dword [0x457eec], eax
call fcn.00429a20
cmp al, 0x2c
je 0x405a1c
push 0x44c588
call fcn.00429820
add esp, 4
pop edi
pop esi
add esp, 0x48
ret
call fcn.00429a50
mov dword [0x457ef0], eax
jmp 0x405a45
push 0x457ef0
push 0x457eec
push 0x44c704
push 0
call fcn.00401530
add esp, 0x10
test al, al
je 0x405a84
mov ecx, dword [0x457ef0]
mov edx, dword [0x457eec]
push ecx
push edx
call fcn.00420450
mov ecx, dword [0x457eec]
mov esi, eax
mov eax, dword [0x457ef0]
lea edx, [esp + 0x18]
push eax
push ecx
push 0x44cf84
push edx
call fcn.00437eec
lea eax, [esp + 0x28]
push eax
push esi
call fcn.00401690
add esp, 0x20
pop edi
pop esi
add esp, 0x48
ret
call fcn.004207e0
push 0x44cfa0
push eax
call fcn.00401690
add esp, 8
ret
call fcn.00420a40
push 0x44cfc4
push eax
call fcn.00401690
add esp, 8
ret
sub esp, 0x78
push edi
mov ecx, 0x1c
xor eax, eax
lea edi, [esp + 0xc]
rep stosd dword es:[edi], eax
mov ecx, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 4], ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x60], eax
mov ecx, 0xa
mov dword [esp + 0x68], eax
lea eax, [esp + 4]
mov dword [esp + 0x64], ecx
mov dword [esp + 0x54], ecx
mov ecx, dword [0x493740]
push 3
push eax
push 0x44d00c
push ecx
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x34], 0x458f80
mov dword [esp + 0x30], 0x44d000
mov dword [esp + 0x44], 0x400
mov dword [esp + 0x4c], 0x100000
mov dword [esp + 0x5c], 0x44b110
mov dword [esp + 0x58], 0x44cff4
mov dword [esp + 0x6c], 1
mov dword [esp + 0x84], 0x44b118
mov dword [esp + 0x80], 0x44cfe8
call fcn.00429fe0
add esp, 0x10
test eax, eax
pop edi
jne 0x405ba9
mov edx, dword [0x44b118]
mov eax, dword [0x44b110]
mov ecx, dword [0x458f80]
push edx
push eax
push ecx
call fcn.00421bd0
add esp, 0xc
add esp, 0x78
ret
sub esp, 0x28
push edi
mov ecx, 8
xor eax, eax
lea edi, [esp + 0xc]
rep stosd dword es:[edi], eax
mov ecx, dword [0x493740]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], eax
lea eax, [esp + 4]
push 1
push eax
push 0x44d058
push ecx
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x14], 0x10
mov dword [esp + 0x34], 0x44b120
mov dword [esp + 0x30], 0x44d048
call fcn.00429fe0
add esp, 0x10
test eax, eax
pop edi
jne 0x405c27
mov edx, dword [0x44b120]
push edx
call fcn.004217b0
push 0x44d024
push eax
call fcn.00401690
add esp, 0xc
add esp, 0x28
ret
push esi
call fcn.00413510
mov esi, eax
call fcn.00413220
cmp esi, eax
pop esi
je 0x405c63
mov eax, dword [0x493740]
push 6
push 0x42124
push 0
push 0x44d06c
push eax
call fcn.00401b20
add esp, 0x14
cmp eax, 6
jne 0x405c6b
push 1
call fcn.0041d260
pop ecx
ret
mov eax, dword [0x493740]
push 6
push 0x42124
push 0
push 0x44d0c4
push eax
call fcn.00401b20
add esp, 0x14
cmp eax, 6
jne 0x405c96
jmp fcn.00421350
ret
sub esp, 0x520
lea eax, [esp + 0x20]
push eax
call fcn.00421f40
add esp, 4
test al, al
jne 0x405e87
cmp byte [esp + 0x20], 0x51
jne 0x405e6b
cmp byte [esp + 0x21], 0x52
jne 0x405e6b
cmp byte [esp + 0x22], 0x59
jne 0x405e6b
mov cl, byte [esp + 0x37]
push ebx
push esi
mov esi, dword [esp + 0x44]
push edi
mov edi, 1
shl edi, cl
lea ecx, [esp + 0x12c]
push 0x44d180
push ecx
and esi, 0xff
call fcn.00437eec
lea edx, [esp + 0x14]
push edi
push edx
call fcn.004077d0
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x13c]
push eax
push ecx
lea edx, [esp + 0x144]
push 0x44d170
push edx
call fcn.00437eec
add esp, 0x20
cmp esi, 1
mov eax, 0x458f88
je 0x405d42
mov eax, 0x44c1d8
push eax
lea eax, [esp + 0x130]
push esi
push eax
lea ecx, [esp + 0x138]
push 0x44d158
push ecx
call fcn.00437eec
add esp, 0x14
test esi, esi
jbe 0x405e41
cmp byte [esp + 0x2f], 2
jne 0x405ddf
cmp byte [esp + 0x6b], 3
jne 0x405ddf
test esi, esi
jbe 0x405e41
lea edi, [esp + esi*4 + 0x45]
xor edx, edx
xor ebx, ebx
mov dh, byte [edi + 3]
mov bh, byte [edi + 1]
mov dl, byte [edi + 2]
mov bl, byte [edi]
shl edx, 8
lea eax, [esp + 0xc]
push edx
push eax
inc ebx
call fcn.004077d0
add esp, 8
cmp ebx, 1
mov eax, 0x458f88
je 0x405db3
mov eax, 0x44c1d8
lea ecx, [esp + 0xc]
lea edx, [esp + 0x12c]
push ecx
push eax
push ebx
push edx
lea eax, [esp + 0x13c]
push 0x44d13c
push eax
call fcn.00437eec
add esp, 0x18
sub edi, 4
dec esi
jne 0x405d83
jmp 0x405e41
test esi, esi
jbe 0x405e41
lea edi, [esp + 0x49]
xor ecx, ecx
xor ebx, ebx
mov ch, byte [edi + 3]
mov bh, byte [edi + 1]
mov cl, byte [edi + 2]
mov bl, byte [edi]
shl ecx, 8
lea edx, [esp + 0xc]
push ecx
push edx
inc ebx
call fcn.004077d0
add esp, 8
cmp ebx, 1
mov eax, 0x458f88
je 0x405e17
mov eax, 0x44c1d8
lea ecx, [esp + 0xc]
lea edx, [esp + 0x12c]
push ecx
push eax
push ebx
push edx
lea eax, [esp + 0x13c]
push 0x44d13c
push eax
call fcn.00437eec
add esp, 0x18
add edi, 4
dec esi
jne 0x405de7
mov edx, dword [0x493740]
push 1
push 0x42040
lea ecx, [esp + 0x134]
push 0
push ecx
push edx
call fcn.00401b20
add esp, 0x14
pop edi
pop esi
pop ebx
add esp, 0x520
ret
mov eax, dword [0x493740]
push 1
push 0x42040
push 0
push 0x44d114
push eax
call fcn.00401b20
add esp, 0x14
add esp, 0x520
ret
sub esp, 0x104
lea eax, [esp]
push 0x104
push eax
call fcn.00437130
add esp, 8
lea ecx, [esp]
push 3
push ecx
push 0
push 0x44d1a8
push 0x44b768
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
add esp, 0x104
ret
sub esp, 0x104
lea eax, [esp]
push 0x104
push eax
call fcn.00437130
add esp, 8
lea ecx, [esp]
push 3
push ecx
push 0
push 0x44d1cc
push 0x44b768
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
add esp, 0x104
ret
sub esp, 0x100
call fcn.004029f0
push eax
lea eax, [esp + 4]
push 0x44d1f0
push eax
call fcn.00437eec
mov edx, dword [0x493740]
lea ecx, [esp + 0xc]
push ecx
push edx
call fcn.00411090
add esp, 0x114
ret
sub esp, 0x228
push edi
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 5]
rep stosd dword es:[edi], eax
mov ecx, dword [0x44eee0]
push 0
stosw word es:[edi], ax
stosb byte es:[edi], al
mov eax, dword [0x44eedc]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
call fcn.0042a5a0
mov edx, dword [0x493740]
lea eax, [esp + 8]
push edx
push 0x44eeb4
push 0x44eea0
push eax
call fcn.0042a8c0
add esp, 0x14
test al, al
pop edi
je 0x412c3a
lea ecx, [esp]
lea edx, [esp + 0x104]
push ecx
push 0x44ee88
push edx
call fcn.00437eec
lea eax, [esp + 0x110]
push eax
call fcn.00401f40
lea ecx, [esp + 0x10]
push ecx
call fcn.00412c50
add esp, 0x14
test al, al
je 0x412c2d
push 0x44d210
call fcn.00401f90
add esp, 4
add esp, 0x228
ret
push 0x44d208
call fcn.00401f90
add esp, 4
add esp, 0x228
ret
sub esp, 0xc10
push esi
push 0x4519e4
call fcn.00401f40
add esp, 4
call fcn.00419b40
test al, al
jne 0x41bcbc
xor esi, esi
push esi
push 0x4519dc
call fcn.0041bce0
add esp, 8
call fcn.00401b90
test al, al
jne 0x41bb4f
push esi
push 0x451138
call fcn.00419fd0
add esp, 8
mov eax, dword [0x493750]
cmp eax, 3
je 0x41bb4f
push 0x4519c4
call fcn.00401c20
add esp, 4
call fcn.00401b90
test al, al
jne 0x41bcb5
push ebx
push ebp
push edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
call fcn.00413220
mov ebx, eax
call fcn.00413510
mov ebp, eax
call fcn.004134b0
mov edi, eax
mov eax, 0x458f88
cmp edi, 1
je 0x41bb8b
mov eax, 0x44c1d8
push eax
push edi
push ebx
push ebp
lea eax, [esp + 0x30]
push 0x45199c
push eax
call fcn.00437eec
add esp, 0x18
test edi, edi
jbe 0x41bbdf
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x18]
push ecx
push edx
push esi
call fcn.004134f0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
lea edx, [eax + ecx - 1]
lea ecx, [esp + 0x2c]
push edx
push eax
lea eax, [esp + 0x34]
push eax
push 0x45198c
push ecx
call fcn.00437eec
add esp, 0x20
inc esi
cmp esi, edi
jb 0x41bba5
lea edx, [esp + 0x20]
push edx
call fcn.00401bf0
add esp, 4
lea eax, [esp + 0x420]
xor esi, esi
mov dword [esp + 0x10], eax
test ebx, ebx
mov dword [esp + 0x14], ebp
jbe 0x41bc16
push esi
call fcn.004130f0
add esp, 4
mov byte [esp + esi + 0x420], al
inc esi
cmp esi, ebx
jb 0x41bc01
mov ecx, dword [0x493740]
push 0x82
push 0x4519e4
push 0x4519dc
push ecx
call fcn.00430580
lea edx, [esp + 0x20]
push edx
push 0x41bd40
call fcn.00430bb0
add esp, 0x18
call fcn.00401b90
pop edi
pop ebp
test al, al
pop ebx
jne 0x41bc96
call fcn.00422260
test al, al
je 0x41bc77
push 0x451964
call fcn.00401c20
add esp, 4
call fcn.00430910
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x451938
call fcn.00401db0
add esp, 4
call fcn.00430910
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x45191c
call fcn.00401c20
add esp, 4
call fcn.00430910
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x45191c
jmp 0x41bcc1
push 0x4518f0
call fcn.00401c20
add esp, 4
call fcn.00402030
pop esi
add esp, 0xc10
ret
sub esp, 0xc10
push esi
push 0x451dfc
call fcn.00401f40
add esp, 4
call fcn.00419b40
test al, al
jne 0x41c8ec
xor esi, esi
push esi
push 0x4519dc
call fcn.0041bce0
add esp, 8
call fcn.00401b90
test al, al
jne 0x41c77f
push esi
push 0x451138
call fcn.00419fd0
add esp, 8
mov eax, dword [0x493750]
cmp eax, 3
je 0x41c77f
push 0x4519c4
call fcn.00401c20
add esp, 4
call fcn.00401b90
test al, al
jne 0x41c8e5
push ebx
push ebp
push edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
call fcn.00413220
mov ebx, eax
call fcn.00413510
mov ebp, eax
call fcn.004134b0
mov edi, eax
mov eax, 0x458f88
cmp edi, 1
je 0x41c7bb
mov eax, 0x44c1d8
push eax
push edi
push ebx
push ebp
lea eax, [esp + 0x30]
push 0x45199c
push eax
call fcn.00437eec
add esp, 0x18
test edi, edi
jbe 0x41c80f
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x18]
push ecx
push edx
push esi
call fcn.004134f0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
lea edx, [eax + ecx - 1]
lea ecx, [esp + 0x2c]
push edx
push eax
lea eax, [esp + 0x34]
push eax
push 0x45198c
push ecx
call fcn.00437eec
add esp, 0x20
inc esi
cmp esi, edi
jb 0x41c7d5
lea edx, [esp + 0x20]
push edx
call fcn.00401bf0
add esp, 4
lea eax, [esp + 0x420]
xor esi, esi
mov dword [esp + 0x10], eax
test ebx, ebx
mov dword [esp + 0x14], ebp
jbe 0x41c846
push esi
call fcn.004130f0
add esp, 4
mov byte [esp + esi + 0x420], al
inc esi
cmp esi, ebx
jb 0x41c831
mov ecx, dword [0x493740]
push 0x82
push 0x451dfc
push 0x4519dc
push ecx
call fcn.00430580
lea edx, [esp + 0x20]
push edx
push 0x41c910
call fcn.00430bb0
add esp, 0x18
call fcn.00401b90
pop edi
pop ebp
test al, al
pop ebx
jne 0x41c8c6
call fcn.00422260
test al, al
je 0x41c8a7
push 0x451dd4
call fcn.00401c20
add esp, 4
call fcn.00430910
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x451938
call fcn.00401db0
add esp, 4
call fcn.00430910
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x451db8
call fcn.00401c20
add esp, 4
call fcn.00430910
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x451db8
jmp 0x41c8f1
push 0x451d8c
call fcn.00401c20
add esp, 4
call fcn.00402030
pop esi
add esp, 0xc10
ret
sub esp, 0xc10
push esi
push 0x451e90
call fcn.00401f40
add esp, 4
call fcn.00419b40
test al, al
jne 0x41cc2c
xor esi, esi
push esi
push 0x4519dc
call fcn.0041bce0
add esp, 8
call fcn.00401b90
test al, al
jne 0x41cabf
push esi
push 0x451138
call fcn.00419fd0
add esp, 8
mov eax, dword [0x493750]
cmp eax, 3
je 0x41cabf
push 0x4519c4
call fcn.00401c20
add esp, 4
call fcn.00401b90
test al, al
jne 0x41cc25
push ebx
push ebp
push edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
call fcn.00413220
mov ebx, eax
call fcn.00413510
mov ebp, eax
call fcn.004134b0
mov edi, eax
mov eax, 0x458f88
cmp edi, 1
je 0x41cafb
mov eax, 0x44c1d8
push eax
push edi
push ebx
push ebp
lea eax, [esp + 0x30]
push 0x45199c
push eax
call fcn.00437eec
add esp, 0x18
test edi, edi
jbe 0x41cb4f
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x18]
push ecx
push edx
push esi
call fcn.004134f0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
lea edx, [eax + ecx - 1]
lea ecx, [esp + 0x2c]
push edx
push eax
lea eax, [esp + 0x34]
push eax
push 0x45198c
push ecx
call fcn.00437eec
add esp, 0x20
inc esi
cmp esi, edi
jb 0x41cb15
lea edx, [esp + 0x20]
push edx
call fcn.00401bf0
add esp, 4
lea eax, [esp + 0x420]
xor esi, esi
mov dword [esp + 0x10], eax
test ebx, ebx
mov dword [esp + 0x14], ebp
jbe 0x41cb86
push esi
call fcn.004130f0
add esp, 4
mov byte [esp + esi + 0x420], al
inc esi
cmp esi, ebx
jb 0x41cb71
mov ecx, dword [0x493740]
push 0x82
push 0x451e90
push 0x4519dc
push ecx
call fcn.00430580
lea edx, [esp + 0x20]
push edx
push 0x41cc50
call fcn.00430bb0
add esp, 0x18
call fcn.00401b90
pop edi
pop ebp
test al, al
pop ebx
jne 0x41cc06
call fcn.00422260
test al, al
je 0x41cbe7
push 0x451e68
call fcn.00401c20
add esp, 4
call fcn.00430910
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x451c50
call fcn.00401db0
add esp, 4
call fcn.00430910
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x451e48
call fcn.00401c20
add esp, 4
call fcn.00430910
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x451e48
jmp 0x41cc31
push 0x451e18
call fcn.00401c20
add esp, 4
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x451f44
call fcn.00401f40
add esp, 4
call fcn.00419b40
test al, al
jne 0x41ce2d
mov eax, dword [0x493740]
push 0x81
push 0x451f30
push 0x451f24
push eax
call fcn.00430580
push 0
push 0x41ce40
call fcn.00430bb0
add esp, 0x18
call fcn.00401b90
test al, al
jne 0x41ce19
call fcn.00422260
test al, al
je 0x41ce05
push 0x451f04
call fcn.00401c20
add esp, 4
call fcn.00430910
jmp 0x41ce3a
push 0x451ef4
call fcn.00401db0
add esp, 4
call fcn.00430910
jmp 0x41ce3a
push 0x451ed4
call fcn.00401c20
add esp, 4
call fcn.00430910
jmp 0x41ce3a
push 0x451eac
call fcn.00401c20
add esp, 4
jmp fcn.00402030
sub esp, 0xc10
push esi
push 0x453420
call fcn.00401f40
add esp, 4
call fcn.00419b40
test al, al
jne 0x420e8a
xor esi, esi
push esi
push 0x4519dc
call fcn.0041bce0
add esp, 8
call fcn.00401b90
test al, al
jne 0x420d0f
push esi
push 0x451138
call fcn.00419fd0
add esp, 8
mov eax, dword [0x493750]
cmp eax, 3
je 0x420d0f
push 0x4519c4
call fcn.00401c20
add esp, 4
call fcn.00401b90
test al, al
jne 0x420d1d
call fcn.0041e690
call fcn.00401b90
test al, al
jne 0x420e83
push ebx
push ebp
push edi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
call fcn.00413220
mov ebx, eax
call fcn.00413510
mov ebp, eax
call fcn.004134b0
mov edi, eax
mov eax, 0x458f88
cmp edi, 1
je 0x420d59
mov eax, 0x44c1d8
push eax
push edi
push ebx
push ebp
lea eax, [esp + 0x30]
push 0x45199c
push eax
call fcn.00437eec
add esp, 0x18
test edi, edi
jbe 0x420dad
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x18]
push ecx
push edx
push esi
call fcn.004134f0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
lea edx, [eax + ecx - 1]
lea ecx, [esp + 0x2c]
push edx
push eax
lea eax, [esp + 0x34]
push eax
push 0x45198c
push ecx
call fcn.00437eec
add esp, 0x20
inc esi
cmp esi, edi
jb 0x420d73
lea edx, [esp + 0x20]
push edx
call fcn.00401bf0
add esp, 4
lea eax, [esp + 0x420]
xor esi, esi
mov dword [esp + 0x10], eax
test ebx, ebx
mov dword [esp + 0x14], ebp
jbe 0x420de4
push esi
call fcn.004130f0
add esp, 4
mov byte [esp + esi + 0x420], al
inc esi
cmp esi, ebx
jb 0x420dcf
mov ecx, dword [0x493740]
push 0x82
push 0x453420
push 0x451f24
push ecx
call fcn.00430580
lea edx, [esp + 0x20]
push edx
push 0x420eb0
call fcn.00430bb0
add esp, 0x18
call fcn.00401b90
pop edi
pop ebp
test al, al
pop ebx
jne 0x420e64
call fcn.00422260
test al, al
je 0x420e45
push 0x453400
call fcn.00401c20
add esp, 4
call fcn.00430910
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x4533d8
call fcn.00401db0
add esp, 4
call fcn.00430910
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x4533bc
call fcn.00401c20
add esp, 4
call fcn.00430910
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x4533bc
jmp 0x420e8f
push 0x453394
call fcn.00401c20
add esp, 4
call fcn.00402030
pop esi
add esp, 0xc10
ret
push 0x4535e8
call fcn.00401f40
add esp, 4
call fcn.00421670
test al, al
je 0x421657
call fcn.0041b990
push 0
call fcn.004198d0
add esp, 4
test al, al
je 0x421645
call fcn.00413590
push 0
push 0x451138
mov dword [0x45ff98], eax
call fcn.00419fd0
push 0
push 0x4519dc
call fcn.0041bce0
add esp, 0x10
call fcn.00401b90
test al, al
jne 0x4215c5
push 0
push 0x451138
call fcn.00419fd0
add esp, 8
mov eax, dword [0x493750]
cmp eax, 3
je 0x4215c5
push 0x4519c4
call fcn.00401c20
add esp, 4
mov eax, dword [0x493740]
push 0x82
push 0x4535d4
push 0x4519dc
push eax
call fcn.00430580
add esp, 0x10
call fcn.00401b90
test al, al
jne 0x4215fa
push 0
push 0x4216a0
call fcn.00430bb0
add esp, 8
call fcn.00401b90
test al, al
jne 0x42162c
call fcn.00422260
test al, al
je 0x421613
push 0x4535b0
jmp 0x421631
push 0x453594
call fcn.00401db0
add esp, 4
call fcn.00430910
call fcn.00419b10
jmp 0x421652
push 0x45357c
call fcn.00401c20
add esp, 4
call fcn.00430910
call fcn.00419b10
jmp 0x421652
push 0x453558
call fcn.00401c20
add esp, 4
jmp fcn.00402030
push 0x4535b0
call fcn.00401f90
pop ecx
ret
push 0
call fcn.004198d0
add esp, 4
test al, al
je 0x422190
push 0
push 1
push 1
push 1
push 2
call fcn.0041d5f0
add esp, 0x14
ret
push 0
call fcn.004198d0
add esp, 4
test al, al
je 0x4221c0
push 1
push 0
push 0
push 1
push 2
call fcn.0041d5f0
add esp, 0x14
ret
push 0
call fcn.004198d0
add esp, 4
test al, al
je 0x4221f0
push 0
push 1
push 1
push 1
push 3
call fcn.0041d5f0
add esp, 0x14
ret
push 0
call fcn.004198d0
add esp, 4
test al, al
je 0x422220
push 1
push 0
push 0
push 1
push 3
call fcn.0041d5f0
add esp, 0x14
ret