Function at 0x435f70
Capabilities:
Enumerate files on windows
Set current directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6933bf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x7d0
mov eax, dword [0x6ce36c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
mov dword [ebp - 0x604], ecx
mov dword [ebp - 0x600], 0
push 0x69c636
lea ecx, [ebp - 0x4c]
call fcn.0049cab0
mov dword [ebp - 4], 0
push 0x69c637
lea ecx, [ebp - 0x30]
call fcn.0049cab0
mov byte [ebp - 4], 1
push 2
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
and ecx, 0xf00
cmp ecx, 0x100
je 0x4360a8
push 2
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
and eax, 0xf00
cmp eax, 0x600
je 0x4360a8
push 2
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
and edx, 0xf00
cmp edx, 0x800
je 0x4360a8
push 2
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
and ecx, 0xf00
cmp ecx, 0x900
je 0x4360a8
push 2
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
and eax, 0xf00
cmp eax, 0xa00
je 0x4360a8
push 2
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
and edx, 0xf00
cmp edx, 0xb00
jne 0x4361a9
push 2
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
and ecx, 0x10
jne 0x436125
push 0
push 1
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x29c]
push ecx
mov ecx, dword [ebp - 0x604]
call fcn.00460270
mov dword [ebp - 0x608], eax
mov edx, dword [ebp - 0x608]
mov dword [ebp - 0x60c], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x60c]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x29c]
call fcn.0049caf0
jmp 0x4361a9
push 2
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
and edx, 0x10
je 0x4361a9
push 0
push 1
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x604]
call fcn.00460190
push eax
lea edx, [ebp - 0x2b8]
push edx
mov ecx, dword [ebp - 0x604]
call fcn.00460270
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x614], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x614]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2b8]
call fcn.0049caf0
push 2
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
and eax, 0xf
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], 3
ja case.default.0x4361da
mov ecx, dword [ebp - 0x618]
jmp dword [ecx*4 + 0x4381dc]
push 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2bc], esp
push 0x69c638
call fcn.0049cab0
mov dword [ebp - 0x61c], eax
mov edx, dword [ebp - 0x61c]
mov dword [ebp - 0x620], edx
mov byte [ebp - 4], 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2c0], esp
push 0x69c639
call fcn.0049cab0
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x628], eax
mov byte [ebp - 4], 5
push 0
push 0
mov ecx, dword [ebp - 0x604]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x18]
push ecx
mov edx, dword [ebp - 0x604]
mov eax, dword [edx + 0x14]
push eax
push 0
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
add ecx, 0x14
call fcn.0049d4e0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x2c4], esp
push eax
call fcn.0049ca60
mov dword [ebp - 0x62c], eax
lea edx, [ebp - 0x2e0]
push edx
mov byte [ebp - 4], 1
call fcn.00409190
add esp, 0x70
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x634], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x634]
push ecx
lea ecx, [ebp - 0x30]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2e0]
call fcn.0049caf0
jmp case.default.0x4361da
push 0
push 3
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x2fc]
push ecx
mov ecx, dword [ebp - 0x604]
call fcn.00460270
mov dword [ebp - 0x638], eax
mov edx, dword [ebp - 0x638]
mov dword [ebp - 0x63c], edx
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x63c]
push eax
lea ecx, [ebp - 0x30]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2fc]
call fcn.0049caf0
jmp case.default.0x4361da
push 3
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
push edx
mov ecx, 0x6f4ac8
call fcn.0041b200
movzx eax, al
test eax, eax
je 0x4363ca
push 0
push 3
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x604]
call fcn.00460190
push eax
lea eax, [ebp - 0x318]
push eax
mov ecx, dword [ebp - 0x604]
call fcn.00460270
mov dword [ebp - 0x640], eax
mov ecx, dword [ebp - 0x640]
mov dword [ebp - 0x644], ecx
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x644]
push edx
lea ecx, [ebp - 0x30]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x318]
call fcn.0049caf0
jmp 0x436428
push 0
push 3
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x334]
push edx
mov ecx, dword [ebp - 0x604]
call fcn.00460270
mov dword [ebp - 0x648], eax
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x64c], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x64c]
push ecx
lea ecx, [ebp - 0x30]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x334]
call fcn.0049caf0
jmp case.default.0x4361da
cmp dword [0x6f4304], 0
je 0x436463
mov byte [ebp - 0x335], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.0049caf0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.0049caf0
mov al, byte [ebp - 0x335]
jmp 0x4381c3
mov dword [0x6f4304], 1
mov dword [0x6f548c], 1
mov edx, dword [0x6f544c]
imul edx, dword [0x6ce228]
push edx
call fcn.0050ffc0
add esp, 4
mov eax, dword [0x6f579c]
mov cl, byte [eax]
mov byte [ebp - 0x650], cl
cmp byte [ebp - 0x650], 0
je 0x4364a5
jmp 0x4364b1
push 2
call fcn.00510040
add esp, 4
jmp 0x4364bb
push 0
call fcn.00510040
add esp, 4
push 3
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
push eax
mov ecx, dword [ebp - 0x604]
call fcn.00460190
cmp eax, 2
jge 0x4364ed
mov dword [ebp - 0x654], 2
jmp 0x436514
push 3
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x604]
call fcn.00460190
mov dword [ebp - 0x654], eax
cmp dword [ebp - 0x654], 0x1f4
jle 0x43652c
mov dword [ebp - 0x658], 0x1f4
jmp 0x436591
push 3
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x604]
call fcn.00460190
cmp eax, 2
jge 0x43655e
mov dword [ebp - 0x65c], 2
jmp 0x436585
push 3
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
push eax
mov ecx, dword [ebp - 0x604]
call fcn.00460190
mov dword [ebp - 0x65c], eax
mov ecx, dword [ebp - 0x65c]
mov dword [ebp - 0x658], ecx
push 0
push 0
push 2
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
and eax, 0x1000
neg eax
sbb eax, eax
neg eax
push eax
mov ecx, dword [ebp - 0x658]
push ecx
call fcn.004e4930
add esp, 0x10
mov edx, dword [ebp - 0x604]
mov dword [edx + 0x85c], eax
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x85c]
push ecx
call fcn.004e4a80
add esp, 4
push 2
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
and eax, 0x2000
je 0x43685b
lea ecx, [ebp - 0x6c]
call fcn.0049ca30
mov byte [ebp - 4], 0xa
push 2
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
and edx, 0x10
jne 0x43668f
push 0
push 1
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x354]
push edx
mov ecx, dword [ebp - 0x604]
call fcn.00460270
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x664], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x664]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0049cb10
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x354]
call fcn.0049caf0
jmp 0x436713
push 2
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
and eax, 0x10
je 0x436713
push 0
push 1
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x604]
call fcn.00460190
push eax
lea eax, [ebp - 0x370]
push eax
mov ecx, dword [ebp - 0x604]
call fcn.00460270
mov dword [ebp - 0x668], eax
mov ecx, dword [ebp - 0x668]
mov dword [ebp - 0x66c], ecx
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x66c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0049cb10
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x370]
call fcn.0049caf0
mov dword [ebp - 0x70], 0
push 0
push 0x69c63c
lea ecx, [ebp - 0x6c]
call fcn.0049ce20
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
cmp eax, dword [0x69d8fc]
je 0x43674c
push str._r_n_n_n_n_n_n_n_n
push 2
mov ecx, dword [ebp - 0x70]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0049cd00
jmp 0x43671a
push 3
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
push eax
mov ecx, dword [ebp - 0x604]
call fcn.00460190
mov dword [ebp - 0x50], eax
lea ecx, [ebp - 0x6c]
call fcn.0049cd90
cmp eax, dword [ebp - 0x50]
jle 0x4367e8
mov ecx, dword [ebp - 0x50]
sub ecx, 1
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0049cd70
push eax
call fcn.0044d480
add esp, 8
cmp eax, 1
jne 0x4367e8
mov edx, dword [ebp - 0x50]
sub edx, 1
push edx
push 0
lea eax, [ebp - 0x38c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0049ce80
mov dword [ebp - 0x670], eax
mov ecx, dword [ebp - 0x670]
mov dword [ebp - 0x674], ecx
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x674]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0049cb10
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x38c]
call fcn.0049caf0
jmp 0x436831
mov eax, dword [ebp - 0x50]
push eax
push 0
lea ecx, [ebp - 0x3a8]
push ecx
lea ecx, [ebp - 0x6c]
call fcn.0049ce80
mov dword [ebp - 0x678], eax
mov edx, dword [ebp - 0x678]
mov dword [ebp - 0x67c], edx
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x67c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.0049cb10
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x3a8]
call fcn.0049caf0
mov ecx, dword [ebp - 0x604]
mov edx, dword [ecx + 0x85c]
push edx
lea ecx, [ebp - 0x6c]
call fcn.0049cd70
push eax
call fcn.004de3b0
add esp, 8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6c]
call fcn.0049caf0
push 2
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
and ecx, 0x10
jne 0x436898
push 1
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov ecx, dword [ebp - 0x604]
mov edx, dword [eax]
mov dword [ecx + 0x860], edx
jmp 0x4368c5
push 1
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x604]
call fcn.00460190
mov edx, dword [ebp - 0x604]
mov dword [edx + 0x860], eax
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp - 0x604]
add ecx, 0x864
call fcn.0049cb10
push 0x69c642
lea ecx, [ebp - 0x4c]
call fcn.0049cb30
push 0x69c643
lea ecx, [ebp - 0x30]
call fcn.0049cb30
push 2
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
and edx, 0xf00
mov dword [ebp - 0x680], edx
cmp dword [ebp - 0x680], 0x700
jg 0x436997
cmp dword [ebp - 0x680], 0x700
je 0x437647
cmp dword [ebp - 0x680], 0x400
jg 0x436972
cmp dword [ebp - 0x680], 0x400
je 0x436f6d
cmp dword [ebp - 0x680], 0x200
je 0x4369ed
cmp dword [ebp - 0x680], 0x300
je 0x4369ed
jmp 0x437ff4
cmp dword [ebp - 0x680], 0x500
je 0x4371ee
cmp dword [ebp - 0x680], 0x600
je 0x437301
jmp 0x437ff4
cmp dword [ebp - 0x680], 0xa00
jg 0x4369d8
cmp dword [ebp - 0x680], 0xa00
je 0x437c18
cmp dword [ebp - 0x680], 0x800
je 0x4378fe
cmp dword [ebp - 0x680], 0x900
je 0x4379ea
jmp 0x437ff4
cmp dword [ebp - 0x680], 0xb00
je 0x437de7
jmp 0x437ff4
mov dword [ebp - 0x74], 0
push 0
push 0x69c644
lea ecx, [ebp - 0x30]
call fcn.0049ce20
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xffffffff
je 0x436a21
push 0x69c646
push 1
mov eax, dword [ebp - 0x74]
push eax
lea ecx, [ebp - 0x30]
call fcn.0049cd00
jmp 0x4369f4
push 2
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
and edx, 0xf00
cmp edx, 0x300
jne 0x436ee3
push 2
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
and ecx, 0xf
cmp ecx, 1
jne 0x436bc8
push 0
push 0x69c648
lea ecx, [ebp - 0x30]
call fcn.0049ce20
cmp eax, 0xffffffff
je 0x436adb
lea ecx, [ebp - 0x30]
call fcn.0049cd90
push eax
push 0
push 0x69c64c
lea ecx, [ebp - 0x30]
call fcn.0049ce20
add eax, 1
push eax
lea edx, [ebp - 0x3cc]
push edx
lea ecx, [ebp - 0x30]
call fcn.0049ce80
mov dword [ebp - 0x684], eax
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0x688], eax
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x600]
or ecx, 1
mov dword [ebp - 0x600], ecx
mov edx, dword [ebp - 0x688]
mov dword [ebp - 0x68c], edx
jmp 0x436b1f
push 0x69c64e
lea ecx, [ebp - 0x3e8]
call fcn.0049cab0
mov dword [ebp - 0x690], eax
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x694], eax
mov dword [ebp - 4], 0x10
mov ecx, dword [ebp - 0x600]
or ecx, 2
mov dword [ebp - 0x600], ecx
mov edx, dword [ebp - 0x694]
mov dword [ebp - 0x68c], edx
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x3b0], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3ac], esp
mov edx, dword [ebp - 0x3b0]
push edx
call fcn.0049ca60
mov dword [ebp - 0x698], eax
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x69c], eax
mov dword [ebp - 4], 0x11
push 3
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
push edx
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x604]
call fcn.004600a0
mov dword [ebp - 4], 0xf
mov eax, dword [ebp - 0x600]
and eax, 2
je 0x436ba4
and dword [ebp - 0x600], 0xfffffffd
lea ecx, [ebp - 0x3e8]
call fcn.0049caf0
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x600]
and ecx, 1
je 0x436bc8
and dword [ebp - 0x600], 0xfffffffe
lea ecx, [ebp - 0x3cc]
call fcn.0049caf0
push 2
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
and eax, 0xf
cmp eax, 2
jne 0x436ee3
push 3
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
push edx
mov ecx, 0x6f4ac8
call fcn.0041b200
movzx eax, al
test eax, eax
je 0x436d84
push 0
push 0x69c650
lea ecx, [ebp - 0x30]
call fcn.0049ce20
cmp eax, 0xffffffff
je 0x436c86
lea ecx, [ebp - 0x30]
call fcn.0049cd90
push eax
push 0
push 0x69c654
lea ecx, [ebp - 0x30]
call fcn.0049ce20
add eax, 1
push eax
lea ecx, [ebp - 0x40c]
push ecx
lea ecx, [ebp - 0x30]
call fcn.0049ce80
mov dword [ebp - 0x6a0], eax
mov edx, dword [ebp - 0x6a0]
mov dword [ebp - 0x6a4], edx
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x600]
or eax, 4
mov dword [ebp - 0x600], eax
mov ecx, dword [ebp - 0x6a4]
mov dword [ebp - 0x6a8], ecx
jmp 0x436cca
push 0x69c656
lea ecx, [ebp - 0x428]
call fcn.0049cab0
mov dword [ebp - 0x6ac], eax
mov edx, dword [ebp - 0x6ac]
mov dword [ebp - 0x6b0], edx
mov dword [ebp - 4], 0x13
mov eax, dword [ebp - 0x600]
or eax, 8
mov dword [ebp - 0x600], eax
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp - 0x6a8], ecx
mov edx, dword [ebp - 0x6a8]
mov dword [ebp - 0x3f0], edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x3ec], esp
mov eax, dword [ebp - 0x3f0]
push eax
call fcn.0049ca60
mov dword [ebp - 0x6b4], eax
mov ecx, dword [ebp - 0x6b4]
mov dword [ebp - 0x6b8], ecx
mov dword [ebp - 4], 0x14
push 3
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
push eax
mov ecx, dword [ebp - 0x604]
call fcn.00460190
push eax
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x604]
call fcn.004600a0
mov dword [ebp - 4], 0x12
mov ecx, dword [ebp - 0x600]
and ecx, 8
je 0x436d5b
and dword [ebp - 0x600], 0xfffffff7
lea ecx, [ebp - 0x428]
call fcn.0049caf0
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x600]
and edx, 4
je 0x436d7f
and dword [ebp - 0x600], 0xfffffffb
lea ecx, [ebp - 0x40c]
call fcn.0049caf0
jmp 0x436ee3
push 0
push 0x69c658
lea ecx, [ebp - 0x30]
call fcn.0049ce20
cmp eax, 0xffffffff
je 0x436df6
lea ecx, [ebp - 0x30]
call fcn.0049cd90
push eax
push 0
push 0x69c65c
lea ecx, [ebp - 0x30]
call fcn.0049ce20
add eax, 1
push eax
lea eax, [ebp - 0x44c]
push eax
lea ecx, [ebp - 0x30]
call fcn.0049ce80
mov dword [ebp - 0x6bc], eax
mov ecx, dword [ebp - 0x6bc]
mov dword [ebp - 0x6c0], ecx
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x600]
or edx, 0x10
mov dword [ebp - 0x600], edx
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x6c4], eax
jmp 0x436e3a
push 0x69c65e
lea ecx, [ebp - 0x468]
call fcn.0049cab0
mov dword [ebp - 0x6c8], eax
mov ecx, dword [ebp - 0x6c8]
mov dword [ebp - 0x6cc], ecx
mov dword [ebp - 4], 0x16
mov edx, dword [ebp - 0x600]
or edx, 0x20
mov dword [ebp - 0x600], edx
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x6c4], eax
mov ecx, dword [ebp - 0x6c4]
mov dword [ebp - 0x430], ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x42c], esp
mov edx, dword [ebp - 0x430]
push edx
call fcn.0049ca60
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x6d4], eax
mov dword [ebp - 4], 0x17
push 3
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
push edx
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x604]
call fcn.004600a0
mov dword [ebp - 4], 0x15
mov eax, dword [ebp - 0x600]
and eax, 0x20
je 0x436ebf
and dword [ebp - 0x600], 0xffffffdf
lea ecx, [ebp - 0x468]
call fcn.0049caf0
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x600]
and ecx, 0x10
je 0x436ee3
and dword [ebp - 0x600], 0xffffffef
lea ecx, [ebp - 0x44c]
call fcn.0049caf0
push 0
push 0x69c660
lea ecx, [ebp - 0x30]
call fcn.0049ce20
cmp eax, 0xffffffff
je 0x436f0e
push 0
push 0x69c664
lea ecx, [ebp - 0x30]
call fcn.0049ce20
mov dword [ebp - 0x6d8], eax
jmp 0x436f1c
lea ecx, [ebp - 0x30]
call fcn.0049cd90
mov dword [ebp - 0x6d8], eax
mov edx, dword [ebp - 0x6d8]
push edx
push 0
lea eax, [ebp - 0x484]
push eax
lea ecx, [ebp - 0x30]
call fcn.0049ce80
mov dword [ebp - 0x6dc], eax
mov ecx, dword [ebp - 0x6dc]
mov dword [ebp - 0x6e0], ecx
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x6e0]
push edx
lea ecx, [ebp - 0x30]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x484]
call fcn.0049caf0
jmp 0x437ff4
push 0
lea ecx, [ebp - 0x30]
call fcn.0049cd70
push eax
call fcn.0044d480
add esp, 8
add eax, 1
mov dword [ebp - 0x78], eax
lea ecx, [ebp - 0x30]
call fcn.0049cd70
movsx eax, byte [eax]
cmp eax, 1
jne 0x436f9d
mov dword [ebp - 0x78], 2
lea ecx, [ebp - 0x30]
call fcn.0049cd90
cmp dword [ebp - 0x78], eax
jge 0x436fb5
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x6e4], ecx
jmp 0x436fc3
lea ecx, [ebp - 0x30]
call fcn.0049cd90
mov dword [ebp - 0x6e4], eax
mov edx, dword [ebp - 0x6e4]
mov dword [ebp - 0x78], edx
push 2
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
and ecx, 0xf
cmp ecx, 1
jne 0x437045
lea ecx, [ebp - 0x30]
call fcn.0049cd90
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x488], esp
push eax
mov eax, dword [ebp - 0x78]
push eax
push edx
lea ecx, [ebp - 0x30]
call fcn.0049ce80
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x6e8]
mov dword [ebp - 0x6ec], ecx
mov byte [ebp - 4], 0x19
push 3
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
push eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x604]
call fcn.004600a0
push 2
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
and edx, 0xf
cmp edx, 2
jne 0x4371a0
push 0
push 3
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x4a8]
push edx
mov ecx, dword [ebp - 0x604]
call fcn.00460270
mov dword [ebp - 0x6f0], eax
mov eax, dword [ebp - 0x6f0]
mov dword [ebp - 0x6f4], eax
mov byte [ebp - 4], 0x1a
push 0x69c668
mov ecx, dword [ebp - 0x6f4]
push ecx
call fcn.004bbe50
add esp, 8
mov byte [ebp - 0x489], al
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4a8]
call fcn.0049caf0
movzx edx, byte [ebp - 0x489]
test edx, edx
je 0x437144
lea ecx, [ebp - 0x30]
call fcn.0049cd90
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4ac], esp
push eax
mov edx, dword [ebp - 0x78]
push edx
push ecx
lea ecx, [ebp - 0x30]
call fcn.0049ce80
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0x6fc], eax
mov byte [ebp - 4], 0x1b
push 3
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
push edx
mov ecx, dword [ebp - 0x604]
call fcn.00460190
push eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x604]
call fcn.004600a0
jmp 0x4371a0
lea ecx, [ebp - 0x30]
call fcn.0049cd90
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4b0], esp
push eax
mov edx, dword [ebp - 0x78]
push edx
push ecx
lea ecx, [ebp - 0x30]
call fcn.0049ce80
mov dword [ebp - 0x700], eax
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x704], eax
mov byte [ebp - 4], 0x1c
push 3
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
push edx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x604]
call fcn.004600a0
mov eax, dword [ebp - 0x78]
push eax
push 0
lea ecx, [ebp - 0x4cc]
push ecx
lea ecx, [ebp - 0x30]
call fcn.0049ce80
mov dword [ebp - 0x708], eax
mov edx, dword [ebp - 0x708]
mov dword [ebp - 0x70c], edx
mov byte [ebp - 4], 0x1d
mov eax, dword [ebp - 0x70c]
push eax
lea ecx, [ebp - 0x30]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4cc]
call fcn.0049caf0
jmp 0x437ff4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4d0], esp
lea edx, [ebp - 0x30]
push edx
call fcn.0049ca60
mov dword [ebp - 0x710], eax
lea eax, [ebp - 0x4ec]
push eax
call fcn.0040db30
add esp, 0x20
mov dword [ebp - 0x714], eax
mov ecx, dword [ebp - 0x714]
mov dword [ebp - 0x718], ecx
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x718]
push edx
lea ecx, [ebp - 0x30]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x4ec]
call fcn.0049caf0
push 0
lea ecx, [ebp - 0x30]
call fcn.0049cd70
push eax
call fcn.004df480
add esp, 8
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x4372ef
lea ecx, [ebp - 0x30]
call fcn.0049cd70
push eax
call fcn.004df4c0
add esp, 4
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
add eax, 1
push eax
call fcn.004cb917
add esp, 4
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x80]
add ecx, 1
push ecx
push 0
mov edx, dword [ebp - 0x84]
push edx
call fcn.004cb810
add esp, 0xc
mov eax, dword [ebp - 0x7c]
push eax
mov ecx, dword [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x84]
push edx
call fcn.004df510
add esp, 0xc
mov eax, dword [ebp - 0x7c]
push eax
call fcn.004de6a0
add esp, 4
mov ecx, dword [ebp - 0x84]
push ecx
lea ecx, [ebp - 0x30]
call fcn.0049cb30
mov edx, dword [ebp - 0x84]
push edx
call fcn.004cb3f4
add esp, 4
jmp 0x4372fc
push str._NoFile_
lea ecx, [ebp - 0x30]
call fcn.0049cb30
jmp 0x437ff4
cmp dword [0x6f2368], 0
je 0x4373d3
push 0x69c67d
lea eax, [ebp - 0x30]
push eax
call fcn.004bbe50
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x4373d3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4f0], esp
push 0x69c67e
call fcn.0049cab0
mov dword [ebp - 0x71c], eax
mov edx, dword [ebp - 0x71c]
mov dword [ebp - 0x720], edx
mov byte [ebp - 4], 0x1f
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x4f4], esp
push eax
call fcn.0041b0d0
add esp, 4
mov dword [ebp - 0x724], eax
mov ecx, dword [ebp - 0x724]
mov dword [ebp - 0x728], ecx
mov byte [ebp - 4], 0x20
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4f8], esp
push 0x69c680
call fcn.0049cab0
mov dword [ebp - 0x72c], eax
mov byte [ebp - 4], 1
call fcn.0040ffb0
add esp, 0x54
mov byte [ebp - 0x4f9], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.0049caf0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.0049caf0
mov al, byte [ebp - 0x4f9]
jmp 0x4381c3
push 0
push 0x69c6d4
lea ecx, [ebp - 0x30]
call fcn.0049ce20
cmp eax, 0xffffffff
jne 0x4373ff
push 0
push 0x69c6d8
lea ecx, [ebp - 0x30]
call fcn.0049ce20
cmp eax, 0xffffffff
je 0x4374b1
cmp dword [0x6f2368], 0
je 0x437484
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x500], esp
push edx
call fcn.0041b0d0
add esp, 4
mov dword [ebp - 0x730], eax
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x734], eax
mov byte [ebp - 4], 0x21
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x504], esp
push 0x69c6dc
call fcn.0049cab0
mov dword [ebp - 0x738], eax
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x73c], ecx
mov byte [ebp - 4], 0x22
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x508], esp
push 0x69c710
call fcn.0049cab0
mov dword [ebp - 0x740], eax
mov byte [ebp - 4], 1
call fcn.0040ffb0
add esp, 0x54
mov byte [ebp - 0x509], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.0049caf0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.0049caf0
mov al, byte [ebp - 0x509]
jmp 0x4381c3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x510], esp
lea edx, [ebp - 0x30]
push edx
call fcn.0049ca60
mov dword [ebp - 0x744], eax
lea eax, [ebp - 0xa0]
push eax
call fcn.0040db30
add esp, 0x20
mov dword [ebp - 0x748], eax
mov byte [ebp - 4], 0x23
push 0x69c75c
lea ecx, [ebp - 0xa0]
call fcn.0049cd70
push eax
call fcn.004cad48
add esp, 8
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jne 0x437591
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x514], esp
lea edx, [ebp - 0xa0]
push edx
call fcn.0049ca60
mov dword [ebp - 0x74c], eax
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x750], eax
mov byte [ebp - 4], 0x24
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x518], esp
push 0x69c760
call fcn.0049cab0
mov dword [ebp - 0x754], eax
mov ecx, dword [ebp - 0x754]
mov dword [ebp - 0x758], ecx
mov byte [ebp - 4], 0x25
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x51c], esp
push 0x69c7a0
call fcn.0049cab0
mov dword [ebp - 0x75c], eax
mov byte [ebp - 4], 0x23
call fcn.0040ffb0
add esp, 0x54
jmp 0x43760b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x520], esp
lea edx, [ebp - 0x4c]
push edx
call fcn.0049ca60
mov dword [ebp - 0x760], eax
lea eax, [ebp - 0xc0]
push eax
call fcn.0040db30
add esp, 0x20
mov dword [ebp - 0x764], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0xa4]
push ecx
push 1
lea ecx, [ebp - 0xc0]
call fcn.0049cd90
push eax
lea ecx, [ebp - 0xc0]
call fcn.0049cd70
push eax
call fcn.004caf97
add esp, 0x10
mov edx, dword [ebp - 0xa4]
push edx
call fcn.004cb2aa
add esp, 4
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xc0]
call fcn.0049caf0
mov byte [ebp - 0x521], 1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xa0]
call fcn.0049caf0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.0049caf0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.0049caf0
mov al, byte [ebp - 0x521]
jmp 0x4381c3
lea ecx, [ebp - 0xe0]
call fcn.0049ca30
mov byte [ebp - 4], 0x27
mov byte [ebp - 0xc1], 1
push 0x6f4550
lea ecx, [ebp - 0xfc]
call fcn.0049ca60
mov byte [ebp - 4], 0x28
push 0x69c7d4
lea ecx, [ebp - 0xfc]
call fcn.0049cb70
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x528], esp
lea eax, [ebp - 0x30]
push eax
call fcn.0049ca60
mov dword [ebp - 0x768], eax
lea ecx, [ebp - 0x544]
push ecx
call fcn.0040db30
add esp, 0x20
mov dword [ebp - 0x76c], eax
mov edx, dword [ebp - 0x76c]
mov dword [ebp - 0x770], edx
mov byte [ebp - 4], 0x29
mov eax, dword [ebp - 0x770]
push eax
lea ecx, [ebp - 0xfc]
call fcn.0049cb50
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x544]
call fcn.0049caf0
push 0
push 0x69c7d8
lea ecx, [ebp - 0xfc]
call fcn.0049ce20
test eax, eax
je 0x437856
mov dword [ebp - 0x100], 0
mov ecx, dword [0x69d8fc]
push ecx
push 0x69c7dc
lea ecx, [ebp - 0xfc]
call fcn.0049ce50
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xffffffff
je 0x437746
push str._n.
push 1
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0xfc]
call fcn.0049cd00
jmp 0x437705
lea ecx, [ebp - 0xfc]
call fcn.0049cd70
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
je 0x437844
lea ecx, [ebp - 0xfc]
call fcn.0049cd70
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
lea eax, [ebp - 0x244]
push eax
push 0x69c7e4
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0xffffffff
je 0x437822
movzx ecx, byte [ebp - 0xc1]
test ecx, ecx
jne 0x4377b2
push 0x69c7e8
lea ecx, [ebp - 0xe0]
call fcn.0049cb70
push 0x69c7ec
lea edx, [ebp - 0x218]
push edx
call fcn.004cb990
add esp, 8
test eax, eax
je 0x4377e2
push 0x69c7f0
lea eax, [ebp - 0x218]
push eax
call fcn.004cb990
add esp, 8
test eax, eax
jne 0x4377e4
jmp 0x4377fd
lea ecx, [ebp - 0x218]
push ecx
lea ecx, [ebp - 0xe0]
call fcn.0049cb70
mov byte [ebp - 0xc1], 0
lea edx, [ebp - 0x244]
push edx
mov eax, dword [ebp - 0x248]
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
test eax, eax
jne 0x437797
mov ecx, dword [ebp - 0x248]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
lea edx, [ebp - 0xe0]
push edx
lea ecx, [ebp - 0x30]
call fcn.0049cb10
mov ecx, 0x6f4550
call fcn.0049cd70
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
jmp 0x437851
push 0x69c7f4
lea ecx, [ebp - 0x30]
call fcn.0049cb30
jmp 0x4378db
cmp dword [0x6f2368], 0
je 0x4378db
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x548], esp
push eax
call fcn.0041b0d0
add esp, 4
mov dword [ebp - 0x774], eax
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x778], ecx
mov byte [ebp - 4], 0x2a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x54c], esp
push 0x69c800
call fcn.0049cab0
mov dword [ebp - 0x77c], eax
mov edx, dword [ebp - 0x77c]
mov dword [ebp - 0x780], edx
mov byte [ebp - 4], 0x2b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x550], esp
push 0x69c824
call fcn.0049cab0
mov dword [ebp - 0x784], eax
mov byte [ebp - 4], 0x28
call fcn.0040ffb0
add esp, 0x54
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0xfc]
call fcn.0049caf0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xe0]
call fcn.0049caf0
jmp 0x437ff4
mov dword [ebp - 0x24c], 0
lea ecx, [ebp - 0x30]
call fcn.0049cd90
cmp eax, 1
jne 0x43798a
mov eax, dword [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0049cdf0
mov dword [ebp - 0x24c], eax
mov edx, dword [ebp - 0x24c]
cmp edx, dword [0x69d8fc]
je 0x437988
mov eax, dword [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0049cd70
push eax
call fcn.0044d480
add esp, 8
test eax, eax
jne 0x437977
push 0x69c85d
lea ecx, [ebp - 0x30]
call fcn.0049cd90
push eax
mov ecx, dword [ebp - 0x24c]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0049cd00
jmp 0x437986
mov edx, dword [ebp - 0x24c]
add edx, 1
mov dword [ebp - 0x24c], edx
jmp 0x437915
jmp 0x4379d8
lea ecx, [ebp - 0x30]
call fcn.0049cd90
cmp eax, 1
jle 0x4379d8
push 0
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0049cdf0
mov dword [ebp - 0x24c], eax
mov ecx, dword [ebp - 0x24c]
cmp ecx, dword [0x69d8fc]
je 0x4379d8
push 0x69c85e
lea ecx, [ebp - 0x30]
call fcn.0049cd90
push eax
mov edx, dword [ebp - 0x24c]
push edx
lea ecx, [ebp - 0x4c]
call fcn.0049cd00
jmp 0x437997
push 0x69c85f
lea ecx, [ebp - 0x30]
call fcn.0049cb30
jmp 0x437ff4
push 2
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
and ecx, 0xf00
cmp ecx, 0x900
jne 0x437c13
mov dword [ebp - 0x26c], 0
push 1
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x554], esp
push 0x69c860
call fcn.0049cab0
mov dword [ebp - 0x788], eax
mov edx, dword [ebp - 0x788]
mov dword [ebp - 0x78c], edx
mov byte [ebp - 4], 0x2c
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x558], esp
push 0x69c861
call fcn.0049cab0
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0x794], eax
mov byte [ebp - 4], 0x2d
push 0
push 0
mov ecx, dword [ebp - 0x604]
mov edx, dword [ecx + 0x10]
push edx
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x18]
push ecx
mov edx, dword [ebp - 0x604]
mov eax, dword [edx + 0x14]
push eax
push 1
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
add ecx, 0x14
call fcn.0049d4e0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x55c], esp
push eax
call fcn.0049ca60
mov dword [ebp - 0x798], eax
lea edx, [ebp - 0x268]
push edx
mov byte [ebp - 4], 1
call fcn.00409190
add esp, 0x70
mov dword [ebp - 0x79c], eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x30]
call fcn.0049cd90
cmp eax, 1
jne 0x437b86
mov eax, dword [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0049cdf0
mov dword [ebp - 0x26c], eax
mov edx, dword [ebp - 0x26c]
cmp edx, dword [0x69d8fc]
je 0x437b84
mov eax, dword [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0049cd70
push eax
call fcn.0044d480
add esp, 8
test eax, eax
jne 0x437b70
lea ecx, [ebp - 0x268]
call fcn.0049cd70
push eax
lea ecx, [ebp - 0x30]
call fcn.0049cd90
push eax
mov ecx, dword [ebp - 0x26c]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0049cd00
lea ecx, [ebp - 0x268]
call fcn.0049cd90
add eax, dword [ebp - 0x26c]
mov dword [ebp - 0x26c], eax
jmp 0x437b7f
mov edx, dword [ebp - 0x26c]
add edx, 1
mov dword [ebp - 0x26c], edx
jmp 0x437af0
jmp 0x437bf7
lea ecx, [ebp - 0x30]
call fcn.0049cd90
cmp eax, 1
jle 0x437bf7
mov eax, dword [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0049cdf0
mov dword [ebp - 0x26c], eax
mov edx, dword [ebp - 0x26c]
cmp edx, dword [0x69d8fc]
je 0x437bf7
lea ecx, [ebp - 0x268]
call fcn.0049cd70
push eax
lea ecx, [ebp - 0x30]
call fcn.0049cd90
push eax
mov eax, dword [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0049cd00
lea ecx, [ebp - 0x268]
call fcn.0049cd90
add eax, dword [ebp - 0x26c]
mov dword [ebp - 0x26c], eax
jmp 0x437b93
push 0x69c862
lea ecx, [ebp - 0x30]
call fcn.0049cb30
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x268]
call fcn.0049caf0
jmp 0x437ff4
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x270], 1
push 0
push 0x69c864
lea ecx, [ebp - 0x30]
call fcn.0049ce20
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0xffffffff
je 0x437c62
push 0x69c866
push 1
mov ecx, dword [ebp - 0x274]
push ecx
lea ecx, [ebp - 0x30]
call fcn.0049cd00
jmp 0x437c2c
mov dword [ebp - 0x274], 0
lea ecx, [ebp - 0x30]
call fcn.0049cd90
cmp eax, 1
jne 0x437d35
mov edx, dword [ebp - 0x274]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0049cdf0
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x274]
cmp ecx, dword [0x69d8fc]
je 0x437d30
mov edx, dword [ebp - 0x274]
push edx
lea ecx, [ebp - 0x4c]
call fcn.0049cd70
push eax
call fcn.0044d480
add esp, 8
test eax, eax
jne 0x437d1c
mov eax, dword [ebp - 0x274]
push eax
push 0
lea ecx, [ebp - 0x578]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0049ce80
mov dword [ebp - 0x7a0], eax
mov edx, dword [ebp - 0x7a0]
mov dword [ebp - 0x7a4], edx
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x7a4]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x578]
call fcn.0049caf0
mov dword [ebp - 0x270], 0
jmp 0x437d30
mov ecx, dword [ebp - 0x274]
add ecx, 1
mov dword [ebp - 0x274], ecx
jmp 0x437c7d
jmp 0x437dbf
lea ecx, [ebp - 0x30]
call fcn.0049cd90
cmp eax, 1
jle 0x437dbf
mov edx, dword [ebp - 0x274]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0049cdf0
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x274]
cmp ecx, dword [0x69d8fc]
je 0x437dbf
mov edx, dword [ebp - 0x274]
push edx
push 0
lea eax, [ebp - 0x594]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0049ce80
mov dword [ebp - 0x7a8], eax
mov ecx, dword [ebp - 0x7a8]
mov dword [ebp - 0x7ac], ecx
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x7ac]
push edx
lea ecx, [ebp - 0x4c]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x594]
call fcn.0049caf0
mov dword [ebp - 0x270], 0
cmp dword [ebp - 0x270], 0
je 0x437dd5
push 0x69c868
lea ecx, [ebp - 0x4c]
call fcn.0049cb30
push 0x69c875
lea ecx, [ebp - 0x30]
call fcn.0049cb30
jmp 0x437ff4
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 1
push 0
push 0x69c878
lea ecx, [ebp - 0x30]
call fcn.0049ce20
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0xffffffff
je 0x437e31
push 0x69c87a
push 1
mov eax, dword [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x30]
call fcn.0049cd00
jmp 0x437dfb
mov dword [ebp - 0x27c], 0
lea ecx, [ebp - 0x30]
call fcn.0049cd90
cmp eax, 1
jne 0x437f14
mov ecx, dword [ebp - 0x27c]
push ecx
lea edx, [ebp - 0x30]
push edx
lea ecx, [ebp - 0x4c]
call fcn.0049cdf0
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
cmp eax, dword [0x69d8fc]
je 0x437f0f
mov ecx, dword [ebp - 0x27c]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0049cd70
push eax
call fcn.0044d480
add esp, 8
test eax, eax
jne 0x437efb
lea ecx, [ebp - 0x4c]
call fcn.0049cd90
sub eax, dword [ebp - 0x27c]
push eax
mov edx, dword [ebp - 0x27c]
add edx, 1
push edx
lea eax, [ebp - 0x5b0]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0049ce80
mov dword [ebp - 0x7b0], eax
mov ecx, dword [ebp - 0x7b0]
mov dword [ebp - 0x7b4], ecx
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x7b4]
push edx
lea ecx, [ebp - 0x4c]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5b0]
call fcn.0049caf0
mov dword [ebp - 0x278], 0
jmp 0x437f0f
mov eax, dword [ebp - 0x27c]
add eax, 1
mov dword [ebp - 0x27c], eax
jmp 0x437e4c
jmp 0x437fd1
lea ecx, [ebp - 0x30]
call fcn.0049cd90
cmp eax, 1
jle 0x437fd1
mov ecx, dword [ebp - 0x27c]
push ecx
lea edx, [ebp - 0x30]
push edx
lea ecx, [ebp - 0x4c]
call fcn.0049cdf0
mov dword [ebp - 0x27c], eax
mov eax, dword [ebp - 0x27c]
cmp eax, dword [0x69d8fc]
je 0x437fd1
mov dword [ebp - 0x280], 1
lea ecx, [ebp - 0x4c]
call fcn.0049cd90
mov esi, eax
sub esi, dword [ebp - 0x27c]
lea ecx, [ebp - 0x30]
call fcn.0049cd90
sub esi, eax
push esi
lea ecx, [ebp - 0x30]
call fcn.0049cd90
add eax, dword [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x5cc]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0049ce80
mov dword [ebp - 0x7b8], eax
mov edx, dword [ebp - 0x7b8]
mov dword [ebp - 0x7bc], edx
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x7bc]
push eax
lea ecx, [ebp - 0x4c]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5cc]
call fcn.0049caf0
mov dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0
je 0x437fe7
push str.__NotFound__
lea ecx, [ebp - 0x4c]
call fcn.0049cb30
push 0x69c889
lea ecx, [ebp - 0x30]
call fcn.0049cb30
push 0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5d0], esp
push 0x69c88a
call fcn.0049cab0
mov dword [ebp - 0x7c0], eax
mov ecx, dword [ebp - 0x7c0]
mov dword [ebp - 0x7c4], ecx
mov byte [ebp - 4], 0x33
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5d4], esp
push 0x69c88b
call fcn.0049cab0
mov dword [ebp - 0x7c8], eax
mov edx, dword [ebp - 0x7c8]
mov dword [ebp - 0x7cc], edx
mov byte [ebp - 4], 0x34
push 0
push 0
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x10]
push ecx
mov edx, dword [ebp - 0x604]
mov eax, dword [edx + 0x18]
push eax
mov ecx, dword [ebp - 0x604]
mov edx, dword [ecx + 0x14]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5d8], esp
lea eax, [ebp - 0x30]
push eax
call fcn.0049ca60
mov dword [ebp - 0x7d0], eax
lea ecx, [ebp - 0x5f4]
push ecx
mov byte [ebp - 4], 1
call fcn.00409190
add esp, 0x70
mov dword [ebp - 0x7d4], eax
mov edx, dword [ebp - 0x7d4]
mov dword [ebp - 0x7d8], edx
mov byte [ebp - 4], 0x35
mov eax, dword [ebp - 0x7d8]
push eax
lea ecx, [ebp - 0x30]
call fcn.0049cb10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5f4]
call fcn.0049caf0
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0049cb50
mov dword [ebp - 0x10], 0
push 2
mov edx, dword [ebp - 0x604]
mov ecx, dword [edx + 0x88c]
call fcn.0049e800
mov eax, dword [eax]
and eax, 0x10
jne 0x438116
push 1
mov ecx, dword [ebp - 0x604]
mov ecx, dword [ecx + 0x88c]
call fcn.0049e800
mov edx, dword [eax]
mov dword [ebp - 0x10], edx
jmp 0x43813a
push 1
mov eax, dword [ebp - 0x604]
mov ecx, dword [eax + 0x88c]
call fcn.0049e800
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x604]
call fcn.00460190
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x10]
push edx
mov ecx, 0x6f4ac8
call fcn.0041b200
movzx eax, al
test eax, eax
je 0x438172
lea ecx, [ebp - 0x4c]
call fcn.0049cd70
push eax
call fcn.004cbdaf
add esp, 4
push eax
mov ecx, dword [ebp - 0x10]
push ecx
mov ecx, dword [ebp - 0x604]
call fcn.0045fea0
jmp 0x43819b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x5f8], esp
lea edx, [ebp - 0x4c]
push edx
call fcn.0049ca60
mov dword [ebp - 0x7dc], eax
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x604]
call fcn.004600a0
mov byte [ebp - 0x5f9], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x30]
call fcn.0049caf0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.0049caf0
mov al, byte [ebp - 0x5f9]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004cac87
mov esp, ebp
pop ebp
ret