Function at 0x43f704
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe54
push esi
push edi
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x68], eax
mov eax, 0x52e5d8
call fcn.00503ebc
mov word [ebp - 0x54], 8
lea eax, [ebp - 4]
call fcn.00401d04
inc dword [ebp - 0x48]
xor edx, edx
mov word [ebp - 0x54], 0x14
mov dword [ebp - 0x9c], edx
mov ecx, dword [ebp - 0x6c]
cmp ecx, 0x42
ja case.default.0x43f74d
jmp dword [ecx*4 + 0x43f754]
mov byte [0x53d878], 0
mov edx, dword [ebp - 0x70]
add edx, 5
mov eax, dword [ebp - 0x68]
call fcn.004224dc
mov ecx, dword [0x541e84]
dec ecx
je 0x43f886
dec ecx
je 0x43f8b4
jmp 0x43f98c
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x2fac], 3
je 0x43f8a5
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x28d18], 0
jne 0x43f8a5
cmp dword [0x53d868], 0
mov dword [ebp - 0x9c], 1
jmp 0x43f98c
mov byte [0x541484], 0
push 0xcc0020
push 0
push 0
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x2f8]
mov eax, dword [eax + 0x160]
call fcn.004bd910
push eax
push 0x258
push 0x320
push 0
push 0
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x3e0]
call fcn.004c1eb4
call fcn.004bd910
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [0x53d35c]
push 1
mov ecx, 0x52e3a9
mov edx, 0x52e392
mov eax, dword [eax]
call fcn.0050f6d4
dec eax
jne 0x43f922
mov byte [0x5428a8], 1
push 0xcc0020
push 0
push 0
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x3e0]
call fcn.004c1eb4
call fcn.004bd910
push eax
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x3e0]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x3e0]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x2f8]
mov eax, dword [eax + 0x160]
call fcn.004bd910
push eax
call sub.gdi32.dll_BitBlt
mov dword [ebp - 0x9c], 1
mov byte [0x541484], 1
xor edx, edx
mov dword [0x541e84], edx
jmp case.default.0x43f74d
mov ecx, dword [ebp - 0x70]
add ecx, 7
push ecx
call fcn.00408540
pop ecx
mov edx, eax
mov eax, dword [ebp - 0x68]
call fcn.00439c50
jmp case.default.0x43f74d
mov ecx, dword [ebp - 0x70]
xor eax, eax
add ecx, 4
lea esi, [ebp - 0xec]
mov edi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x2fc4], 0
je 0x43fa64
xor eax, eax
lea edi, [ebp - 0xec]
or ecx, 0xffffffff
lea esi, [ebp - 0x12c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [ebp - 0x12c]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push 0x52e3ae
push eax
call fcn.00503b50
add esp, 8
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0x68]
call fcn.00439a9c
test al, al
je 0x43fa64
xor eax, eax
lea edi, [ebp - 0x12c]
or ecx, 0xffffffff
lea esi, [ebp - 0xec]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea eax, [ebp - 0xec]
push eax
mov edx, dword [ebp - 0x68]
add edx, 0x2626c
push edx
call fcn.00503b50
add esp, 8
push 0x52e3b0
mov ecx, dword [ebp - 0x68]
add ecx, 0x2626c
push ecx
call fcn.00503b50
add esp, 8
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 0x68]
call fcn.004399c0
xor eax, eax
lea edi, [ebp - 0xec]
or ecx, 0xffffffff
mov esi, 0x541d94
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, 0x53db10
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x541480]
lea edi, [ebp - 0xec]
mov byte [eax + 0x53db10], 0x40
inc dword [0x541480]
xor eax, eax
add edx, dword [0x541480]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edx
xchg edi, esi
mov edx, ecx
mov eax, edi
shr ecx, 2
lea eax, [ebp - 0xec]
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push eax
call fcn.00503b8c
pop ecx
add eax, dword [0x541480]
mov dword [0x541480], eax
mov eax, dword [ebp - 0x68]
call fcn.0043e3d4
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 4
call fcn.0043e3a0
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 6
call fcn.0042330c
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.0043a728
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
cmp dword [0x541e74], 3
jne 0x43fb8e
mov eax, dword [ebp - 0x68]
call fcn.00432e90
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.00425908
mov edx, dword [ebp - 0x68]
mov byte [edx + 0x6b74], 0
mov byte [0x541485], 1
mov eax, dword [ebp - 0x68]
call fcn.00433edc
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.0043a728
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 0xa
call fcn.004352f8
mov eax, dword [ebp - 0x68]
call fcn.00435a68
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
cmp byte [edx + 7], 0
je 0x43fbfc
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 8
call fcn.004363cc
jmp 0x43fc0a
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 7
call fcn.004363cc
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov byte [ebp - 0x1ac], 0
mov dword [ebp - 0x78], 8
mov eax, dword [ebp - 0x70]
xor ecx, ecx
mov dword [0x53d604], ecx
lea edx, [eax + 8]
mov dword [ebp - 0xa4], edx
mov ecx, dword [ebp - 0xa4]
cmp byte [ecx], 0
je 0x43fcb6
mov eax, dword [ebp - 0xa4]
movsx edx, byte [eax]
cmp edx, 0x20
jne 0x43fc5f
mov ecx, dword [ebp - 0xa4]
mov byte [ecx], 0
jmp 0x43fcb6
mov eax, dword [ebp - 0xa4]
movsx edx, byte [eax]
cmp edx, 0x3a
jne 0x43fca4
mov ecx, dword [ebp - 0xa4]
lea esi, [ebp - 0x1ac]
mov byte [ecx], 0
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x70]
inc eax
mov edi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x43fcb6
inc dword [ebp - 0x78]
inc dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0x80
jl 0x43fc3b
push 0x1e
mov eax, dword [ebp - 0x70]
add eax, 7
push eax
push 0x541ca4
call fcn.00503d68
add esp, 0xc
mov eax, dword [ebp - 0x68]
call fcn.0041d1e4
mov edx, dword [ebp - 0x70]
add edx, 7
mov ecx, 1
mov eax, dword [ebp - 0x68]
call fcn.0045f15c
cmp byte [ebp - 0x1ac], 0
je 0x43fcfe
lea edx, [ebp - 0x1ac]
mov eax, dword [ebp - 0x68]
call fcn.0043e3a0
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
cmp byte [0x54293e], 0
je 0x43fd1d
mov byte [0x541e80], 1
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 5
call fcn.00423a2c
mov edx, eax
mov eax, dword [ebp - 0x68]
call fcn.00425908
mov word [ebp - 0x54], 0x20
mov edx, 0x541cfe
lea eax, [ebp - 8]
call fcn.0050f7a0
mov edx, eax
inc dword [ebp - 0x48]
mov eax, dword [ebp - 0x68]
add eax, 0x2fab8
call fcn.0050f930
dec dword [ebp - 0x48]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0050f900
mov eax, dword [ebp - 0x68]
mov ecx, dword [0x541488]
mov dword [eax + 0x2fabc], ecx
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov ecx, dword [edx + 0x43c]
mov dword [eax + 0x2fac0], ecx
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 6
call fcn.00437848
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 4
call fcn.00437d30
test al, al
je 0x43ff45
mov dword [ebp - 0x78], 4
mov edx, dword [ebp - 0x70]
lea ecx, [edx + 4]
mov dword [ebp - 0xa4], ecx
mov eax, dword [ebp - 0xa4]
movsx edx, byte [eax]
cmp edx, 0x29
je 0x43fe06
mov ecx, dword [ebp - 0xa4]
cmp byte [ecx], 0
je 0x43fe06
inc dword [ebp - 0x78]
inc dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0xc8
jl 0x43fddb
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], 0xc8
jge 0x43ff45
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x78]
mov cl, byte [eax + edx]
mov byte [ebp - 0x95], cl
movsx eax, byte [ebp - 0x95]
cmp eax, 0x2a
je 0x43fe4d
movsx edx, byte [ebp - 0x95]
cmp edx, 0x40
je 0x43fe4d
movsx ecx, byte [ebp - 0x95]
cmp ecx, 0x21
jne 0x43fef5
xor eax, eax
mov dword [ebp - 0x7c], eax
mov edx, dword [ebp - 0x70]
mov ecx, edx
mov dword [ebp - 0xac], ecx
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x78]
lea ecx, [eax + edx]
mov dword [ebp - 0xa8], ecx
mov eax, dword [ebp - 0xa8]
mov dl, byte [eax]
mov byte [ebp - 0x95], dl
inc dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xac]
mov al, byte [ebp - 0x95]
mov byte [ecx], al
cmp byte [ebp - 0x95], 0
jne 0x43febd
mov eax, 2
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x48]
call fcn.0050f900
pop eax
mov edx, dword [ebp - 0x64]
mov dword fs:[0], edx
jmp 0x441573
inc dword [ebp - 0x7c]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x7c], 0xc8
jl 0x43fe6c
mov eax, 1
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x48]
call fcn.0050f900
pop eax
mov edx, dword [ebp - 0x64]
mov dword fs:[0], edx
jmp 0x441573
movsx ecx, byte [ebp - 0x95]
cmp ecx, 0x20
je 0x43ff35
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, dword [ebp - 0x78]
call fcn.0043e3a0
mov eax, 1
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x48]
call fcn.0050f900
pop eax
mov edx, dword [ebp - 0x64]
mov dword fs:[0], edx
jmp 0x441573
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], 0xc8
jl 0x43fe16
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 7
call fcn.0042918c
jmp case.default.0x43f74d
mov byte [ebp - 0x1ac], 0
mov dword [ebp - 0x78], 7
mov ecx, dword [ebp - 0x70]
lea eax, [ecx + 7]
mov dword [ebp - 0xa4], eax
mov edx, dword [ebp - 0xa4]
cmp byte [edx], 0
je 0x43fff9
mov ecx, dword [ebp - 0xa4]
movsx eax, byte [ecx]
cmp eax, 0x20
jne 0x43ffa5
mov edx, dword [ebp - 0xa4]
mov byte [edx], 0
jmp 0x43fff9
mov ecx, dword [ebp - 0xa4]
movsx eax, byte [ecx]
cmp eax, 0x3a
jne 0x43ffea
mov edx, dword [ebp - 0xa4]
xor eax, eax
lea esi, [ebp - 0x1ac]
mov byte [edx], 0
mov ecx, dword [ebp - 0x78]
add ecx, dword [ebp - 0x70]
inc ecx
mov edi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x43fff9
inc dword [ebp - 0x78]
inc dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0x64
jl 0x43ff81
mov eax, dword [0x53d604]
mov edx, dword [0x54148c]
mov edi, 0x541ca4
mov dword [eax*4 + 0x53d830], edx
mov ecx, dword [0x53d604]
xor eax, eax
add ecx, ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
add ecx, 0x53d608
mov esi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x70]
movsx edx, byte [eax + 6]
cmp edx, 0x24
jne 0x4400c3
mov ecx, dword [ebp - 0x70]
movsx eax, byte [ecx + 7]
add eax, 0xffffffd0
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x440068
cmp dword [ebp - 0x74], 9
jle 0x44006d
xor edx, edx
mov dword [ebp - 0x74], edx
mov ecx, dword [ebp - 0x74]
xor eax, eax
shl ecx, 6
mov esi, 0x541ca4
add ecx, 0x53d88c
mov edi, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, 0x541ca4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 1
mov eax, dword [ebp - 0x68]
call fcn.0045f15c
cmp al, 1
jne 0x440112
mov eax, dword [ebp - 0x68]
call fcn.0041d1e4
inc dword [0x53d604]
jmp 0x440112
mov edx, dword [ebp - 0x70]
add edx, 6
mov ecx, 1
mov eax, dword [ebp - 0x68]
call fcn.0045f15c
cmp al, 1
jne 0x440112
mov edx, dword [ebp - 0x70]
xor eax, eax
add edx, 6
or ecx, 0xffffffff
mov edi, edx
mov esi, 0x541ca4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x68]
call fcn.0041d1e4
inc dword [0x53d604]
cmp byte [ebp - 0x1ac], 0
je 0x440129
lea edx, [ebp - 0x1ac]
mov eax, dword [ebp - 0x68]
call fcn.0043e3a0
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
cmp dword [0x53d604], 0
je 0x4401bb
dec dword [0x53d604]
mov ecx, 1
mov edx, dword [0x53d604]
mov eax, dword [ebp - 0x68]
add edx, edx
lea edx, [edx + edx*2]
lea edx, [edx + edx*4]
add edx, 0x53d608
call fcn.0045f15c
mov edx, dword [0x53d604]
xor eax, eax
add edx, edx
mov esi, 0x541ca4
lea edx, [edx + edx*2]
lea edx, [edx + edx*4]
add edx, 0x53d608
or ecx, 0xffffffff
mov edi, edx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x53d604]
mov edx, dword [eax*4 + 0x53d830]
mov dword [0x54148c], edx
mov byte [0x541485], 1
jmp 0x4401e0
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x28d18]
dec eax
je 0x4401cc
dec eax
je 0x4401d6
jmp 0x4401e0
mov eax, dword [ebp - 0x68]
call fcn.00410240
jmp 0x4401e0
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0041750c
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
xor edx, edx
mov ecx, dword [ebp - 0x70]
add ecx, 6
mov dword [0x541db4], edx
push ecx
call fcn.00408540
pop ecx
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x68]
xor edx, edx
mov dword [eax + 0x3040], 0xffffff
mov eax, dword [ebp - 0x68]
call fcn.00419864
mov edx, dword [ebp - 0x68]
mov ecx, dword [edx + 0x3204]
cmp ecx, dword [ebp - 0x74]
je 0x4402a0
mov eax, dword [ebp - 0x68]
call fcn.0043d8a0
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x3204], 0
jne 0x440271
mov ecx, dword [ebp - 0x68]
mov dword [ecx + 0x3204], 1
mov eax, dword [ebp - 0x68]
mov dword [eax + 0x28d1c], 2
mov eax, dword [ebp - 0x68]
call fcn.00423620
mov edx, 6
mov eax, dword [ebp - 0x68]
call fcn.00425908
jmp 0x4402a0
mov edx, dword [ebp - 0x68]
xor ecx, ecx
mov dword [edx + 0x3204], ecx
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.00445170
mov ecx, dword [ebp - 0x68]
mov edx, 6
mov dword [ecx + 0x28d1c], 1
mov eax, dword [ebp - 0x68]
call fcn.00425908
mov dword [ebp - 0x9c], 1
mov byte [0x541485], 1
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.0043a728
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0042f700
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
xor edx, edx
mov dword [ebp - 0x78], edx
mov ecx, dword [ebp - 0x68]
lea eax, [ecx + 0xfec]
mov dword [ebp - 0xa4], eax
mov edx, dword [ebp - 0xa4]
mov byte [edx], 0
inc dword [ebp - 0x78]
inc dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0x80
jl 0x4402f5
xor ecx, ecx
mov dword [ebp - 0x78], ecx
mov eax, dword [ebp - 0x68]
lea edx, [eax + 0xb0a]
mov dword [ebp - 0xa4], edx
mov ecx, dword [ebp - 0xa4]
mov byte [ecx], 0
inc dword [ebp - 0x78]
inc dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0x4e2
jl 0x440324
xor eax, eax
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x68]
lea ecx, [edx + 0x106c]
mov dword [ebp - 0xa4], ecx
mov eax, dword [ebp - 0xa4]
xor edx, edx
mov dword [eax], edx
inc dword [ebp - 0x78]
add dword [ebp - 0xa4], 4
cmp dword [ebp - 0x78], 0x3e8
jl 0x440353
mov edx, 0x52e3b2
mov eax, dword [ebp - 0x68]
call fcn.0044c3e0
jmp case.default.0x43f74d
mov byte [0x53d878], 1
mov edx, dword [ebp - 0x70]
add edx, 5
mov eax, dword [ebp - 0x68]
call fcn.004224dc
jmp case.default.0x43f74d
mov ecx, dword [ebp - 0x68]
cmp dword [ecx + 0x3204], 0
jne case.default.0x43f74d
cmp byte [0x53d854], 0
je case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.00443368
jmp case.default.0x43f74d
cmp dword [0x541e74], 0
je 0x4403ea
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x27d24], 0
je 0x4403ea
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 9
call fcn.00437ff4
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov word [ebp - 0x54], 0x2c
mov edx, 0x52e3b7
lea eax, [ebp - 0xc]
call fcn.0050f7a0
inc dword [ebp - 0x48]
mov ecx, dword [eax]
mov dl, 1
mov eax, dword [0x480e58]
call fcn.00481540
mov ecx, dword [ebp - 0x68]
mov edx, 2
mov dword [ecx + 0x694], eax
lea eax, [ebp - 0xc]
dec dword [ebp - 0x48]
call fcn.0050f900
push 0
mov edx, 0x52e3ce
lea eax, [ebp - 0x14]
call fcn.0050f7a0
inc dword [ebp - 0x48]
mov edx, 0x52e3c9
mov ecx, dword [eax]
lea eax, [ebp - 0x10]
push ecx
mov word [ebp - 0x54], 0x38
call fcn.0050f7a0
inc dword [ebp - 0x48]
mov edx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x694]
pop ecx
call fcn.00481750
mov dword [0x5428b0], eax
dec dword [ebp - 0x48]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0050f900
dec dword [ebp - 0x48]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0050f900
inc dword [0x5428b0]
mov edx, 0x52e3d9
mov ecx, dword [0x5428b0]
lea eax, [ebp - 0x1c]
push ecx
call fcn.0050f7a0
inc dword [ebp - 0x48]
mov edx, 0x52e3d4
mov ecx, dword [eax]
lea eax, [ebp - 0x18]
push ecx
mov word [ebp - 0x54], 0x44
call fcn.0050f7a0
inc dword [ebp - 0x48]
mov edx, dword [eax]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x694]
pop ecx
call fcn.00481850
dec dword [ebp - 0x48]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0050f900
dec dword [ebp - 0x48]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0050f900
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x694]
call fcn.004958a0
mov edx, dword [0x5428b0]
mov ecx, dword [ebp - 0x68]
mov dword [ecx + 0x313c], edx
mov edx, 0x3e7
mov eax, dword [ebp - 0x68]
call fcn.00436af0
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.00432fb8
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 0xb
call fcn.00428ffc
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 7
call fcn.00439d78
jmp case.default.0x43f74d
mov ecx, dword [ebp - 0x70]
add ecx, 6
push ecx
call fcn.00408540
pop ecx
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl case.default.0x43f74d
cmp dword [ebp - 0x74], 0x13880
jg case.default.0x43f74d
mov ecx, dword [ebp - 0x74]
mov eax, 1
and ecx, 7
mov edx, dword [ebp - 0x74]
shl eax, cl
sar edx, 3
mov ecx, dword [ebp - 0x68]
movzx edx, byte [ecx + edx + 0x3f74]
and eax, edx
je 0x4405c0
mov byte [0x53d87a], 1
jmp case.default.0x43f74d
mov ecx, dword [ebp - 0x74]
mov al, 1
and ecx, 7
mov edx, dword [ebp - 0x74]
shl al, cl
sar edx, 3
mov ecx, dword [ebp - 0x68]
or byte [ecx + edx + 0x3f74], al
mov eax, dword [ebp - 0x68]
cmp byte [eax + 0x2636c], 0
je case.default.0x43f74d
mov byte [0x53d87a], 0
xor edx, edx
mov dword [0x541e74], edx
mov eax, dword [ebp - 0x68]
xor edx, edx
mov dword [eax + 0x309c], edx
mov edx, 1
mov eax, dword [ebp - 0x68]
call fcn.00445170
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 4
call fcn.00422e74
jmp case.default.0x43f74d
push 0xcc0020
push 0
push 0
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x2f8]
mov eax, dword [eax + 0x160]
call fcn.004bd910
push eax
push 0x258
push 0x320
push 0
push 0
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x3d8]
call fcn.004c1eb4
call fcn.004bd910
push eax
call sub.gdi32.dll_BitBlt
mov edx, dword [ebp - 0x68]
xor ecx, ecx
mov dword [edx + 0x3008], ecx
push 0xcc0020
push 0
push 0
mov eax, dword [ebp - 0x68]
mov eax, dword [eax + 0x3d8]
call fcn.004c1eb4
call fcn.004bd910
push eax
mov edx, dword [ebp - 0x68]
mov eax, dword [edx + 0x3d8]
mov edx, dword [eax]
call dword [edx + 0x20]
push eax
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x3d8]
mov edx, dword [eax]
call dword [edx + 0x2c]
push eax
push 0
push 0
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x3dc]
call fcn.004c1eb4
call fcn.004bd910
push eax
call sub.gdi32.dll_BitBlt
jmp case.default.0x43f74d
cmp dword [0x541e74], 0
jne case.default.0x43f74d
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x3014], 0
jne case.default.0x43f74d
mov ecx, dword [ebp - 0x70]
add ecx, 7
push ecx
call fcn.00408540
pop ecx
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov ecx, 0x1e
cdq
idiv ecx
mov edx, dword [ebp - 0x68]
mov dword [edx + 0x28d2c], eax
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x28d2c], 0
jne 0x440730
mov ecx, dword [ebp - 0x68]
mov dword [ecx + 0x28d2c], 0xffffffff
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.0043a728
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov edx, dword [ebp - 0x70]
add edx, 9
push edx
call fcn.00408540
pop ecx
mov edx, eax
mov eax, dword [ebp - 0x68]
call fcn.0043c888
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov ecx, dword [ebp - 0x70]
add ecx, 8
push ecx
call fcn.00408540
pop ecx
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x70]
shl eax, 6
add edx, 0xa
add eax, 0x53d88c
mov edi, edx
mov esi, eax
xor eax, eax
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 8
call fcn.00429370
jmp case.default.0x43f74d
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov edx, 1
mov eax, dword [ebp - 0x68]
call fcn.0042f700
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.0043e32c
mov dl, 1
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.00443580
jmp case.default.0x43f74d
xor edx, edx
mov dword [ebp - 0x78], edx
mov dword [ebp - 0xac], 0x53dacc
mov ecx, dword [ebp - 0x70]
lea eax, [ecx + 7]
mov dword [ebp - 0xa4], eax
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xac]
mov cl, byte [edx]
mov byte [eax], cl
mov edx, dword [ebp - 0xa4]
cmp byte [edx], 0
je 0x440871
inc dword [ebp - 0x78]
inc dword [ebp - 0xac]
inc dword [ebp - 0xa4]
cmp dword [ebp - 0x78], 0x3f
jl 0x440841
mov ecx, dword [ebp - 0x78]
mov byte [ecx + 0x53dacc], 0
jmp case.default.0x43f74d
mov eax, dword [0x541488]
mov edx, dword [ebp - 0x68]
mov dword [edx + 0x2fd4], eax
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 5
call fcn.004595f4
mov eax, dword [ebp - 0x68]
call fcn.0043a728
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 9
call fcn.0044a7b0
jmp case.default.0x43f74d
mov dl, 1
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov edx, dword [ebp - 0x70]
add edx, 6
xor ecx, ecx
mov eax, dword [ebp - 0x68]
call fcn.004474a8
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
movsx ecx, byte [edx + 5]
cmp ecx, 0x71
jne 0x44091a
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 7
call fcn.004085d4
jmp 0x44092a
mov edx, dword [ebp - 0x70]
add edx, 6
xor ecx, ecx
mov eax, dword [ebp - 0x68]
call fcn.0040778c
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
cmp dword [0x541e74], 0
je 0x44095d
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x27d24], 0
je 0x44095d
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov edx, dword [sym.mbl.exe__Form1]
mov ecx, dword [edx]
mov edx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx + 0x44]
mov dword [ebp - 0x94], eax
mov ecx, dword [edx]
mov eax, dword [ecx + 0x40]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x88], 0x14
mov dword [ebp - 0x8c], 0x32
mov dword [ebp - 0x78], 7
mov edx, dword [ebp - 0x70]
add edx, 7
push edx
call fcn.00408540
pop ecx
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x70]
lea eax, [ecx + 7]
mov dword [ebp - 0xac], eax
mov edx, dword [ebp - 0xac]
cmp byte [edx], 0
je 0x4409ff
mov ecx, dword [ebp - 0xac]
movsx eax, byte [ecx]
cmp eax, 0x2c
jne 0x4409f0
inc dword [ebp - 0xac]
inc dword [ebp - 0x78]
mov edx, dword [ebp - 0x78]
add edx, dword [ebp - 0x70]
push edx
call fcn.00408540
pop ecx
mov dword [ebp - 0x88], eax
jmp 0x4409ff
inc dword [ebp - 0x78]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x78], 0x32
jl 0x4409b9
mov ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x78]
lea edx, [ecx + eax]
mov dword [ebp - 0xac], edx
cmp dword [ebp - 0x78], 0x32
jge 0x440a5a
mov ecx, dword [ebp - 0xac]
cmp byte [ecx], 0
je 0x440a5a
mov eax, dword [ebp - 0xac]
movsx edx, byte [eax]
cmp edx, 0x2c
jne 0x440a4b
inc dword [ebp - 0xac]
inc dword [ebp - 0x78]
mov ecx, dword [ebp - 0x78]
add ecx, dword [ebp - 0x70]
push ecx
call fcn.00408540
pop ecx
mov dword [ebp - 0x8c], eax
jmp 0x440a5a
inc dword [ebp - 0x78]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x78], 0x32
jl 0x440a14
mov eax, dword [ebp - 0x68]
call fcn.00425c4c
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 0
jle 0x440cc3
mov ecx, dword [ebp - 0x84]
sub ecx, 1
jb 0x440a8a
je 0x440ac5
dec ecx
je 0x440b01
jmp case.default.0x440b12
test byte [ebp - 0x78], 2
je 0x440aaa
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x78]
mov eax, dword [sym.mbl.exe__Form1]
mov eax, dword [eax]
call fcn.004dc7e8
jmp case.default.0x440b12
mov edx, dword [ebp - 0x94]
sub edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7e8
jmp case.default.0x440b12
test byte [ebp - 0x78], 2
je 0x440ae6
mov edx, dword [ebp - 0x90]
add edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7c4
jmp case.default.0x440b12
mov edx, dword [ebp - 0x90]
sub edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7c4
jmp case.default.0x440b12
call fcn.00508884
and eax, 7
cmp eax, 7
ja case.default.0x440b12
jmp dword [eax*4 + 0x440b19]
mov edx, dword [ebp - 0x94]
sub edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7e8
mov edx, dword [sym.mbl.exe__Form1]
mov eax, dword [edx]
mov edx, dword [ebp - 0x90]
call fcn.004dc7c4
jmp case.default.0x440b12
mov edx, dword [ebp - 0x94]
sub edx, dword [ebp - 0x78]
mov eax, dword [sym.mbl.exe__Form1]
mov eax, dword [eax]
call fcn.004dc7e8
mov edx, dword [ebp - 0x90]
add edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7c4
jmp case.default.0x440b12
mov edx, dword [sym.mbl.exe__Form1]
mov eax, dword [edx]
mov edx, dword [ebp - 0x94]
call fcn.004dc7e8
mov edx, dword [ebp - 0x90]
add edx, dword [ebp - 0x78]
mov eax, dword [sym.mbl.exe__Form1]
mov eax, dword [eax]
call fcn.004dc7c4
jmp case.default.0x440b12
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7e8
mov edx, dword [ebp - 0x90]
add edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7c4
jmp case.default.0x440b12
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7e8
mov edx, dword [sym.mbl.exe__Form1]
mov eax, dword [edx]
mov edx, dword [ebp - 0x90]
call fcn.004dc7c4
jmp case.default.0x440b12
mov edx, dword [ebp - 0x94]
add edx, dword [ebp - 0x78]
mov eax, dword [sym.mbl.exe__Form1]
mov eax, dword [eax]
call fcn.004dc7e8
mov edx, dword [ebp - 0x90]
sub edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7c4
jmp case.default.0x440b12
mov edx, dword [sym.mbl.exe__Form1]
mov eax, dword [edx]
mov edx, dword [ebp - 0x94]
call fcn.004dc7e8
mov edx, dword [ebp - 0x90]
sub edx, dword [ebp - 0x78]
mov eax, dword [sym.mbl.exe__Form1]
mov eax, dword [eax]
call fcn.004dc7c4
jmp case.default.0x440b12
mov edx, dword [ebp - 0x94]
sub edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7e8
mov edx, dword [ebp - 0x90]
sub edx, dword [ebp - 0x78]
mov ecx, dword [sym.mbl.exe__Form1]
mov eax, dword [ecx]
call fcn.004dc7c4
mov edx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x68]
call fcn.00425c60
add eax, eax
sub dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jg 0x440a75
mov edx, dword [sym.mbl.exe__Form1]
mov eax, dword [edx]
mov edx, dword [ebp - 0x94]
call fcn.004dc7e8
mov ecx, dword [sym.mbl.exe__Form1]
mov edx, dword [ebp - 0x90]
mov eax, dword [ecx]
call fcn.004dc7c4
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x2fc4]
mov dword [ebp - 0x74], eax
mov edx, dword [ebp - 0x70]
cmp byte [edx + 5], 0
je 0x440d41
mov word [ebp - 0x54], 0x50
mov edx, dword [ebp - 0x70]
lea eax, [ebp - 0x20]
add edx, 6
call fcn.0050f7a0
inc dword [ebp - 0x48]
mov edx, dword [eax]
mov eax, dword [ebp - 0x68]
call fcn.00436ed4
mov dword [ebp - 0x74], eax
dec dword [ebp - 0x48]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0050f900
mov ecx, dword [0x54148c]
mov edx, dword [0x54148c]
mov dword [ebp - 0x84], ecx
mov cl, 0x7d
mov eax, dword [ebp - 0x68]
call fcn.0044157c
add eax, 2
mov dword [ebp - 0x80], eax
xor eax, eax
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x78]
cmp edx, dword [ebp - 0x74]
jg 0x440dbf
mov cl, 0x7b
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x68]
call fcn.0044157c
add eax, 2
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x84]
cmp ecx, dword [ebp - 0x80]
jle 0x440d9e
mov eax, dword [ebp - 0x80]
mov dword [0x54148c], eax
jmp 0x440dbf
mov edx, dword [ebp - 0x78]
cmp edx, dword [ebp - 0x74]
jne 0x440db4
mov ecx, dword [ebp - 0x84]
mov dword [0x54148c], ecx
jmp 0x440dbf
inc dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x74]
jle 0x440d70
mov byte [0x541485], 1
xor edx, edx
mov dword [ebp - 0x9c], edx
jmp case.default.0x43f74d
mov byte [0x541e81], 1
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov ecx, dword [sym.mbl.exe__Form2]
mov eax, dword [ecx]
mov edx, dword [eax]
call dword [edx + 0xe8]
mov eax, dword [ebp - 0x68]
add eax, 0x28bf4
call fcn.00403b0c
mov edx, eax
mov eax, 0x53d88c
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x440e65
test cl, cl
je 0x440e24
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x440e65
add eax, 2
add edx, 2
test cl, cl
jne 0x440e08
jne 0x440e65
mov eax, dword [ebp - 0x68]
add eax, 0x28bf8
call fcn.00403b0c
mov edx, eax
mov eax, 0x53d8cc
mov cl, byte [eax]
cmp cl, byte [edx]
jne 0x440e65
test cl, cl
je 0x440e56
mov cl, byte [eax + 1]
cmp cl, byte [edx + 1]
jne 0x440e65
add eax, 2
add edx, 2
test cl, cl
jne 0x440e3a
jne 0x440e65
mov edx, dword [ebp - 0x68]
xor eax, eax
mov dword [edx + 0x2fc4], eax
jmp 0x440e72
mov edx, dword [ebp - 0x68]
mov dword [edx + 0x2fc4], 1
mov dword [ebp - 0x9c], 1
mov byte [0x541e81], 0
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 5
call fcn.0042568c
mov dword [ebp - 0x9c], 1
mov byte [0x53d854], 0
jmp case.default.0x43f74d
mov dl, 1
mov eax, dword [ebp - 0x68]
call fcn.0043a6d4
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 8
call fcn.00409fc8
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
cmp dword [0x541e74], 0
je 0x440ef5
mov ecx, dword [ebp - 0x68]
cmp dword [ecx + 0x27d24], 0
je 0x440ef5
xor eax, eax
mov dword [ebp - 0x9c], eax
jmp case.default.0x43f74d
mov word [ebp - 0x54], 0x5c
lea eax, [ebp - 0x28]
call fcn.00401d04
push eax
lea eax, [ebp - 0x24]
inc dword [ebp - 0x48]
mov edx, dword [ebp - 0x70]
add edx, 4
call fcn.0050f7a0
inc dword [ebp - 0x48]
pop edx
call fcn.0050fb78
lea edx, [ebp - 0x28]
lea eax, [ebp - 4]
call fcn.0050f930
dec dword [ebp - 0x48]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0050f900
dec dword [ebp - 0x48]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0050f900
mov word [ebp - 0x54], 0x68
lea eax, [ebp - 0x2c]
call fcn.00401d04
push eax
lea eax, [ebp - 4]
inc dword [ebp - 0x48]
mov ecx, 3
mov edx, 1
call fcn.0050fc00
lea eax, [ebp - 0x2c]
push eax
mov edx, 0x52e3df
lea eax, [ebp - 0x30]
call fcn.0050f7a0
inc dword [ebp - 0x48]
lea edx, [ebp - 0x30]
pop eax
call fcn.0050f9e4
push eax
dec dword [ebp - 0x48]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0050f900
dec dword [ebp - 0x48]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0050f900
pop ecx
test cl, cl
je 0x441053
lea eax, [ebp - 4]
mov edx, 4
call fcn.00404bc4
mov cl, byte [eax]
add cl, 0xd0
mov byte [ebp - 0x95], cl
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x263c8], 0
jne 0x440fe5
cmp byte [ebp - 0x95], 0
je case.default.0x43f74d
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x263cc], 0
jne 0x440fff
movsx ecx, byte [ebp - 0x95]
dec ecx
je case.default.0x43f74d
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x263d0], 0
jne 0x44101b
movsx edx, byte [ebp - 0x95]
cmp edx, 2
je case.default.0x43f74d
mov ecx, dword [ebp - 0x68]
cmp dword [ecx + 0x263d4], 0
jne 0x441037
movsx eax, byte [ebp - 0x95]
cmp eax, 3
je case.default.0x43f74d
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x263d8], 0
jne 0x441053
movsx ecx, byte [ebp - 0x95]
cmp ecx, 4
je case.default.0x43f74d
mov ecx, 1
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x68]
call fcn.00410984
jmp case.default.0x43f74d
mov word [ebp - 0x54], 0x74
lea eax, [ebp - 0x38]
call fcn.00401d04
push eax
lea eax, [ebp - 0x34]
inc dword [ebp - 0x48]
mov edx, dword [ebp - 0x70]
add edx, 8
call fcn.0050f7a0
inc dword [ebp - 0x48]
pop edx
call fcn.0050fb78
lea edx, [ebp - 0x38]
lea eax, [ebp - 4]
call fcn.0050f930
dec dword [ebp - 0x48]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.0050f900
dec dword [ebp - 0x48]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0050f900
mov word [ebp - 0x54], 0x80
lea eax, [ebp - 0x3c]
call fcn.00401d04
push eax
lea eax, [ebp - 4]
inc dword [ebp - 0x48]
mov ecx, 3
mov edx, 1
call fcn.0050fc00
lea eax, [ebp - 0x3c]
push eax
mov edx, 0x52e3e3
lea eax, [ebp - 0x40]
call fcn.0050f7a0
inc dword [ebp - 0x48]
lea edx, [ebp - 0x40]
pop eax
call fcn.0050f9e4
push eax
dec dword [ebp - 0x48]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.0050f900
dec dword [ebp - 0x48]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0050f900
pop ecx
test cl, cl
je 0x441218
lea eax, [ebp - 4]
mov edx, 4
call fcn.00404bc4
mov cl, byte [eax]
add cl, 0xd0
mov byte [ebp - 0x95], cl
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x263c8], 0
jne 0x441158
cmp byte [ebp - 0x95], 0
je case.default.0x43f74d
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x263cc], 0
jne 0x441172
movsx ecx, byte [ebp - 0x95]
dec ecx
je case.default.0x43f74d
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x263d0], 0
jne 0x44118e
movsx edx, byte [ebp - 0x95]
cmp edx, 2
je case.default.0x43f74d
mov ecx, dword [ebp - 0x68]
cmp dword [ecx + 0x263d4], 0
jne 0x4411aa
movsx eax, byte [ebp - 0x95]
cmp eax, 3
je case.default.0x43f74d
mov edx, dword [ebp - 0x68]
cmp dword [edx + 0x263d8], 0
jne 0x4411c6
movsx ecx, byte [ebp - 0x95]
cmp ecx, 4
je case.default.0x43f74d
movsx eax, byte [ebp - 0x95]
cmp eax, 4
jne 0x441218
lea eax, [ebp - 4]
mov edx, 9
call fcn.00404bc4
mov cl, byte [eax]
lea eax, [ebp - 4]
add cl, 0xcf
mov edx, 0xb
mov byte [ebp - 0x95], cl
call fcn.00404bc4
mov dword [ebp - 0xa0], eax
movsx ecx, byte [ebp - 0x95]
mov dl, byte [eax]
mov eax, dword [ebp - 0x68]
add dl, byte [eax + ecx*4 + 0x263dc]
mov ecx, dword [ebp - 0xa0]
mov byte [ecx], dl
mov ecx, 2
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0x68]
call fcn.00410984
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.004118cc
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.004ccd10
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
xor edx, edx
mov dword [ebp - 0x78], edx
mov ecx, dword [ebp - 0x68]
lea eax, [ecx + 0xfec]
mov dword [ebp - 0xac], eax
mov edx, dword [ebp - 0xac]
mov byte [edx], 0
inc dword [ebp - 0x78]
inc dword [ebp - 0xac]
cmp dword [ebp - 0x78], 0x80
jl 0x441265
xor ecx, ecx
mov dword [ebp - 0x78], ecx
mov eax, dword [ebp - 0x68]
lea edx, [eax + 0x106c]
mov dword [ebp - 0xac], edx
mov ecx, dword [ebp - 0xac]
xor eax, eax
mov dword [ecx], eax
inc dword [ebp - 0x78]
add dword [ebp - 0xac], 4
cmp dword [ebp - 0x78], 0x3e8
jl 0x441294
xor eax, eax
or ecx, 0xffffffff
mov edi, 0x541cc2
mov esi, 0x541d58
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
xchg edi, esi
shr ecx, 2
mov eax, edi
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x3208], 2
je 0x44130a
mov edx, dword [ebp - 0x68]
mov dword [edx + 0x3208], 1
mov ecx, dword [ebp - 0x68]
xor eax, eax
mov dword [ecx + 0x320c], eax
mov edx, dword [ebp - 0x68]
mov dword [edx + 0x3210], eax
jmp case.default.0x43f74d
mov ecx, dword [ebp - 0x68]
xor eax, eax
mov dword [ecx + 0x3210], eax
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.0043d8a0
mov edx, dword [ebp - 0x70]
add edx, 8
push edx
call fcn.00408540
pop ecx
test eax, eax
je 0x44133f
mov byte [0x53d854], 1
jmp case.default.0x43f74d
mov byte [0x53d854], 0
jmp case.default.0x43f74d
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x28d18]
dec eax
je 0x44135c
dec eax
je 0x441366
jmp 0x441370
mov eax, dword [ebp - 0x68]
call fcn.00410240
jmp 0x441370
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0041750c
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 5
call fcn.0042cb6c
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.0042f0c4
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 8
call fcn.00429738
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.004145e4
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.0045934c
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
xor edx, edx
mov dword [ebp - 0x78], edx
jmp 0x441409
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x68]
call fcn.00436c60
inc dword [ebp - 0x78]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ecx + 0x26400]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0x78]
jg 0x4413fb
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
cmp dword [0x541e74], 0
je 0x44144f
mov ecx, dword [ebp - 0x68]
cmp dword [ecx + 0x27d24], 0
je 0x44144f
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 8
call fcn.00449a48
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov ecx, dword [ebp - 0x68]
cmp dword [ecx + 0x28d18], 0
je 0x44149d
mov eax, dword [ebp - 0x68]
mov edx, dword [eax + 0x28d18]
dec edx
je 0x441489
dec edx
je 0x441493
jmp 0x44149d
mov eax, dword [ebp - 0x68]
call fcn.00410240
jmp 0x44149d
xor edx, edx
mov eax, dword [ebp - 0x68]
call fcn.0041750c
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 7
call fcn.0044bd38
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 7
call fcn.0044c3e0
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
add edx, 9
call fcn.0044c810
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov ecx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x70]
add edx, 9
mov eax, dword [ebp - 0x68]
mov ecx, dword [ecx + 0x3ec]
call fcn.004444ec
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
mov eax, dword [ebp - 0x68]
call fcn.00460838
mov dword [ebp - 0x9c], 1
jmp case.default.0x43f74d
push 5
push 0
push 0
mov edx, dword [ebp - 0x70]
add edx, 5
push edx
push 0
mov eax, dword [ebp - 0x68]
call fcn.004e37c0
push eax
call sub.shell32.dll_ShellExecuteA
mov dword [ebp - 0x9c], 1
mov eax, dword [ebp - 0x9c]
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x48]
call fcn.0050f900
pop eax
mov edx, dword [ebp - 0x64]
mov dword fs:[0], edx
pop edi
pop esi
mov esp, ebp
pop ebp
ret