Function at 0x10047900
Capabilities:
Create process on windows
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10087067
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x148
mov eax, dword [0x100b8180]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor esi, esi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x80], 0x440e8000
mov dword [ebp - 0x7c], 0x43340000
mov dword [ebp - 0x2c], 0x9cb1d2d3
mov dword [ebp - 0x28], 0x909f939a
mov dword [ebp - 0x24], 0x8f8990b4
mov word [ebp - 0x20], pe_nt_image_headers32
call fcn.100494d0
lea edx, [ebp - 0x80]
mov ecx, eax
call fcn.1003b950
test al, al
je 0x10047a01
xor edi, edi
cmp dword [0x100bb5bc], esi
jle 0x100479fc
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x7c], esi
nop dword [eax + eax]
mov ecx, dword [0x100d9758]
add ecx, esi
cmp dword [ecx + 0x14], 0xf
jbe 0x100479b0
mov ecx, dword [ecx]
lea eax, [ebp - 0x80]
xor dl, dl
push eax
push ecx
call fcn.1003b4a0
add esp, 8
test al, al
je 0x100479ed
mov eax, dword [0x100d9758]
add eax, esi
cmp eax, 0x100b8f5c
je 0x100479e8
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
jbe 0x100479dc
mov eax, dword [eax]
push ecx
push eax
mov ecx, 0x100b8f5c
call fcn.1004c590
call fcn.10047250
inc edi
add esi, 0x18
cmp edi, dword [0x100bb5bc]
jl 0x100479a0
mov esi, dword [ebp - 0x18]
call fcn.1003bc70
mov eax, dword [0x100bb5a0]
mov dword [ebp - 0x7c], eax
mov eax, dword [eax + 0x19ac]
lea edi, [eax + 0x184]
mov dword [ebp - 0x18], eax
mov dword [eax + 0x170], 0x43fd0000
mov ecx, dword [edi]
mov eax, dword [edi + 4]
cmp ecx, eax
jne 0x10047a4c
inc ecx
test eax, eax
je 0x10047a3a
cdq
sub eax, edx
sar eax, 1
add eax, dword [edi + 4]
jmp 0x10047a3f
mov eax, 8
cmp eax, ecx
cmovg ecx, eax
push ecx
mov ecx, edi
call fcn.100220f0
mov edx, dword [edi]
mov ecx, dword [edi + 8]
mov eax, dword [ebp - 0x18]
movaps xmm1, xmmword [0x100b17f0]
mov dword [ebp - 0x1c], 0xcdcac7eb
movd xmm0, dword [ebp - 0x1c]
mov eax, dword [eax + 0x170]
mov dword [ecx + edx*4], eax
mov ecx, 0x100b8f5c
mov eax, dword [ebp - 0x7c]
inc dword [edi]
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
and dword [eax + 0x1a68], 0xfffffffe
mov eax, dword [0x100b8f70]
cmp eax, 0xf
psrad xmm0, 0x18
cmova ecx, dword [0x100b8f5c]
xorps xmm0, xmm1
movaps xmmword [ebp - 0x60], xmm1
movaps xmm1, xmmword [0x100b0820]
lea edx, [eax + 1]
lea eax, [ebp - 0x28]
mov word [ebp - 0x18], 0
push eax
push 0x10031df0
push 0x40000
lea eax, [ebp - 0x80]
movaps xmmword [ebp - 0x150], xmm1
andps xmm0, xmm1
mov dword [ebp - 0x28], 0x100b8f5c
push eax
push edx
packuswb xmm0, xmm0
xor edx, edx
packuswb xmm0, xmm0
push ecx
lea ecx, [ebp - 0x1c]
movd dword [ebp - 0x1c], xmm0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
call fcn.10038790
add esp, 0x18
call fcn.1001b930
mov dword [ebp - 0x80], 0x43090000
xor ecx, ecx
mov dword [ebp - 0x7c], 0x41c80000
mov dword [ebp - 0x1c], 0xc9c3d6f0
mov dword [ebp - 0x18], 0x100cfdd
mov al, cl
sub al, 0x5b
xor byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 6
jb 0x10047b32
push 0
lea edx, [ebp - 0x80]
mov byte [ebp - 0x15], 0
lea ecx, [ebp - 0x1c]
call fcn.10032d70
add esp, 4
test al, al
je 0x10047b5d
call fcn.10047250
mov ecx, dword [0x100bb5a0]
mov eax, dword [ecx + 0x19ac]
mov byte [eax + 0x7c], 1
mov edx, dword [ecx + 0x19ac]
cmp byte [edx + 0x7f], 0
jne 0x10047bc5
movss xmm1, dword [ecx + 0x1560]
addss xmm1, dword [edx + 0xd0]
movss xmm0, dword [edx + 0xd4]
movss dword [edx + 0xc8], xmm1
movss dword [edx + 0xcc], xmm0
mov eax, dword [edx + 0xf0]
mov ecx, dword [edx + 0xf4]
mov dword [edx + 0xe8], eax
mov eax, dword [edx + 0xfc]
mov dword [edx + 0xec], ecx
mov dword [edx + 0xf8], eax
mov dword [ebp - 0x1c], 0xcdd1c7f6
lea edx, [ebp - 0x80]
movd xmm0, dword [ebp - 0x1c]
lea ecx, [ebp - 0x1c]
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
push 0
xorps xmm0, xmmword [ebp - 0x60]
andps xmm0, xmmword [ebp - 0x150]
packuswb xmm0, xmm0
packuswb xmm0, xmm0
mov dword [ebp - 0x80], 0x43090000
mov dword [ebp - 0x7c], 0x41c80000
mov word [ebp - 0x18], 0
movd dword [ebp - 0x1c], xmm0
call fcn.10032d70
add esp, 4
test al, al
je 0x10048878
push 0x13
push str.C:gamesnusConfigs
mov byte [ebp - 0x18], 0
lea ecx, [ebp - 0x34]
push dword [ebp - 0x18]
call fcn.10053480
add esp, 0xc
or esi, 1
mov dword [ebp - 4], 0
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0x100b90f0
call fcn.10046f10
cmp dword [ebp - 0x1c], 0
jne 0x10049488
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x20]
cmp ecx, 7
jbe 0x10047ca9
mov edx, dword [ebp - 0x34]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10047c9f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10049494
push ecx
push edx
call fcn.1005cded
add esp, 8
push ecx
lea ecx, [ebp - 0x34]
call fcn.1004da70
add esp, 4
mov edi, eax
mov dword [ebp - 4], 1
cmp dword [edi + 0x14], 0xf
jbe 0x10047cc6
mov edi, dword [edi]
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x130], 0x100b02d8
call fcn.1004d3b0
mov byte [ebp - 4], 2
or esi, 2
mov eax, dword [ebp - 0x130]
push 0
mov dword [ebp - 0x7c], esi
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x134], eax
lea ecx, [ebp - 0x130]
mov eax, dword [ebp - 0x130]
add ecx, dword [eax + 4]
lea eax, [ebp - 0x12c]
push eax
call fcn.1004d540
mov dword [ebp - 4], 4
mov eax, dword [ebp - 0x130]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x134], eax
lea ecx, [ebp - 0x12c]
call fcn.1004cf70
push ecx
push 2
push edi
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 5
call fcn.1004ceb0
test eax, eax
jne 0x10047da2
mov eax, dword [ebp - 0x130]
lea ecx, [ebp - 0x130]
push 0
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10045260
mov eax, dword [ebp - 0x130]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x134], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x10047e01
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10047df7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10049499
push ecx
push edx
call fcn.1005cded
add esp, 8
movzx eax, byte [0x100d95fa]
lea ecx, [ebp - 0x130]
push eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d95d8]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d95f8]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d95d0]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d95fb]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d95fc]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d95f9]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d95e0]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d95f0]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d95e8]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d95dc]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d95d4]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d95e4]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d95ec]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
add esp, 4
lea ecx, [ebp - 0x130]
push dword [0x100d95f4]
call fcn.1004a9d0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9626]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d961c]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9624]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9600]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9625]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9608]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9627]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d9604]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d960c]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d9614]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
add esp, 4
lea ecx, [ebp - 0x130]
push dword [0x100d9620]
call fcn.1004a9d0
push eax
call fcn.1004db40
add esp, 4
lea ecx, [ebp - 0x130]
push dword [0x100d9610]
call fcn.1004a9d0
push eax
call fcn.1004db40
add esp, 4
lea ecx, [ebp - 0x130]
push dword [0x100d9618]
call fcn.1004a9d0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9640]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9641]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
add esp, 4
lea ecx, [ebp - 0x130]
push dword [0x100d963c]
call fcn.1004a9d0
push eax
call fcn.1004db40
add esp, 4
lea ecx, [ebp - 0x130]
push dword [0x100d9638]
call fcn.1004a9d0
push eax
call fcn.1004db40
add esp, 4
lea ecx, [ebp - 0x130]
push dword [0x100d9704]
call fcn.1004a9d0
push eax
call fcn.1004db40
add esp, 4
lea ecx, [ebp - 0x130]
push dword [0x100d9700]
call fcn.1004a9d0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9708]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9651]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d965c]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9650]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9668]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d9654]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d9660]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
add esp, 4
lea ecx, [ebp - 0x130]
push dword [0x100d9658]
call fcn.1004a9d0
push eax
call fcn.1004db40
add esp, 4
lea ecx, [ebp - 0x130]
push dword [0x100d9664]
call fcn.1004a9d0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9698]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9671]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d96ac]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d966c]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9684]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d96c6]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d96d8]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d96c0]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d96ec]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d969c]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96a0]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96a4]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96a8]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d9674]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d9678]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d967c]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d9680]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96b0]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96b4]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96b8]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96bc]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d9688]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d968c]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d9690]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d9694]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96c8]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96cc]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96d0]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96d4]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96dc]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96e0]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96e4]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
add esp, 4
movss xmm1, dword [0x100d96e8]
lea ecx, [ebp - 0x130]
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96f0]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96f4]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96f8]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movss xmm1, dword [0x100d96fc]
lea ecx, [ebp - 0x130]
add esp, 4
call fcn.1004a7f0
push eax
call fcn.1004db40
movzx eax, byte [0x100d966e]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d966f]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d9670]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d966d]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d96c5]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d96c4]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d96c3]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d96c2]
add esp, 4
push eax
lea ecx, [ebp - 0x130]
call fcn.1004aba0
push eax
call fcn.1004db40
movzx eax, byte [0x100d96c1]
lea ecx, [ebp - 0x130]
add esp, 4
push eax
call fcn.1004aba0
push eax
call fcn.1004db40
add esp, 4
lea ecx, [ebp - 0x12c]
call fcn.1004c350
test eax, eax
jne 0x100487f3
mov eax, dword [ebp - 0x130]
lea ecx, [ebp - 0x130]
push 0
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10045260
call fcn.10047250
mov eax, dword [ebp - 0x130]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x134], eax
lea ecx, [ebp - 0x12c]
call fcn.1004a2b0
mov eax, dword [ebp - 0x130]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x130]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x134], eax
lea eax, [ebp - 0xc8]
mov dword [ebp - 4], 8
push eax
mov dword [ebp - 0xc8], vtable.std::ios_base.0
call fcn.1005b0e4
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x100bb5a0]
mov eax, dword [ecx + 0x19ac]
mov byte [eax + 0x7c], 1
mov edx, dword [ecx + 0x19ac]
cmp byte [edx + 0x7f], 0
jne 0x100488e0
movss xmm1, dword [ecx + 0x1560]
addss xmm1, dword [edx + 0xd0]
movss xmm0, dword [edx + 0xd4]
movss dword [edx + 0xc8], xmm1
movss dword [edx + 0xcc], xmm0
mov eax, dword [edx + 0xf0]
mov ecx, dword [edx + 0xf4]
mov dword [edx + 0xe8], eax
mov eax, dword [edx + 0xfc]
mov dword [edx + 0xec], ecx
mov dword [edx + 0xf8], eax
mov dword [ebp - 0x1c], 0xccc6c9e9
lea edx, [ebp - 0x80]
movd xmm0, dword [ebp - 0x1c]
lea ecx, [ebp - 0x1c]
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
push 0
xorps xmm0, xmmword [ebp - 0x60]
andps xmm0, xmmword [ebp - 0x150]
packuswb xmm0, xmm0
packuswb xmm0, xmm0
mov dword [ebp - 0x80], 0x43090000
mov dword [ebp - 0x7c], 0x41c80000
mov word [ebp - 0x18], 0
movd dword [ebp - 0x1c], xmm0
call fcn.10032d70
add esp, 4
test al, al
je 0x10049237
push 0x13
push str.C:gamesnusconfigs
mov byte [ebp - 0x18], 0
lea ecx, [ebp - 0x60]
push dword [ebp - 0x18]
call fcn.10053480
add esp, 0xc
or esi, 8
mov dword [ebp - 4], 9
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0x100b90f0
call fcn.10046f10
cmp dword [ebp - 0x1c], 0
jne 0x1004949e
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x100489c4
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x100489ba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100494aa
push ecx
push edx
call fcn.1005cded
add esp, 8
push ecx
lea ecx, [ebp - 0x60]
call fcn.1004da70
add esp, 4
mov edi, eax
mov dword [ebp - 4], 0xa
cmp dword [edi + 0x14], 0xf
jbe 0x100489e1
mov edi, dword [edi]
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x138], 0x100b0304
call fcn.1004d3b0
mov byte [ebp - 4], 0xb
xorps xmm0, xmm0
mov eax, dword [ebp - 0x138]
or esi, 0x10
push 0
mov dword [ebp - 0x7c], esi
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_istream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ebp + ecx - 0x13c], eax
lea ecx, [ebp - 0x138]
mov eax, dword [ebp - 0x138]
movlpd qword [ebp - 0x130], xmm0
add ecx, dword [eax + 4]
lea eax, [ebp - 0x128]
push eax
call fcn.1004d540
mov dword [ebp - 4], 0xd
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x13c], eax
lea ecx, [ebp - 0x128]
call fcn.1004cf70
push ecx
push 1
push edi
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0xe
call fcn.1004ceb0
test eax, eax
jne 0x10048ac8
mov eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x138]
push 0
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10045260
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x13c], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0xf
jbe 0x10048b27
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10048b1d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100494af
push ecx
push edx
call fcn.1005cded
add esp, 8
push 0x100d95fa
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
call fcn.1004e000
push 0x100d95d8
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d95f8
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d95d0
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d95fb
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d95fc
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d95f9
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d95e0
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d95f0
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d95e8
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d95dc
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d95d4
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d95e4
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d95ec
lea ecx, [ebp - 0x138]
call fcn.1004dd40
mov eax, dword [0x100d95f4]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1004dea0
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x138]
push 0x100d9626
mov dword [0x100d95f4], eax
call fcn.1004e000
push 0x100d961c
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d9624
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d9600
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d9625
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d9608
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d9627
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d9604
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d960c
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d9614
lea ecx, [ebp - 0x138]
call fcn.1004dd40
mov eax, dword [0x100d9620]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1004dea0
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x138]
mov dword [0x100d9620], eax
mov eax, dword [0x100d9610]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1004dea0
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x138]
mov dword [0x100d9610], eax
mov eax, dword [0x100d9618]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1004dea0
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x138]
push 0x100d9640
mov dword [0x100d9618], eax
call fcn.1004e000
push 0x100d9641
lea ecx, [ebp - 0x138]
call fcn.1004e000
mov eax, dword [0x100d963c]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1004dea0
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x138]
mov dword [0x100d963c], eax
mov eax, dword [0x100d9638]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1004dea0
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x138]
mov dword [0x100d9638], eax
mov eax, dword [0x100d9704]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1004dea0
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x138]
mov dword [0x100d9704], eax
mov eax, dword [0x100d9700]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1004dea0
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x138]
push 0x100d9708
mov dword [0x100d9700], eax
call fcn.1004e000
push 0x100d9651
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d965c
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d9650
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d9668
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d9654
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d9660
lea ecx, [ebp - 0x138]
call fcn.1004dd40
mov eax, dword [0x100d9658]
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1004dea0
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x138]
mov dword [0x100d9658], eax
mov eax, dword [0x100d9664]
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push eax
call fcn.1004dea0
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x138]
push 0x100d9698
mov dword [0x100d9664], eax
call fcn.1004e000
push 0x100d9671
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d96ac
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d966c
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d9684
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d96c6
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d96d8
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d96c0
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d96ec
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d969c
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96a0
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96a4
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96a8
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d9674
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d9678
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d967c
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d9680
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96b0
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96b4
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96b8
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96bc
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d9688
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d968c
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d9690
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d9694
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96c8
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96cc
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96d0
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96d4
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96dc
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96e0
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96e4
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96e8
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96f0
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96f4
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96f8
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d96fc
lea ecx, [ebp - 0x138]
call fcn.1004dd40
push 0x100d966e
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d966f
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d9670
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d966d
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d96c5
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d96c4
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d96c3
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d96c2
lea ecx, [ebp - 0x138]
call fcn.1004e000
push 0x100d96c1
lea ecx, [ebp - 0x138]
call fcn.1004e000
lea ecx, [ebp - 0x128]
call fcn.1004c350
test eax, eax
jne 0x10049197
mov eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x138]
push 0
add ecx, dword [eax + 4]
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10045260
call fcn.10047250
mov eax, dword [0x100d9700]
sub eax, 0
je 0x100491b2
sub eax, 1
jne 0x100491b7
call fcn.10041f30
jmp 0x100491b7
call fcn.10042180
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x13c], eax
lea ecx, [ebp - 0x128]
call fcn.1004a2b0
mov eax, dword [ebp - 0x138]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_istream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x138]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ebp + ecx - 0x13c], eax
lea eax, [ebp - 0xc8]
mov dword [ebp - 4], 0x11
push eax
mov dword [ebp - 0xc8], vtable.std::ios_base.0
call fcn.1005b0e4
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x100bb5a0]
mov eax, dword [ecx + 0x19ac]
mov byte [eax + 0x7c], 1
mov edx, dword [ecx + 0x19ac]
cmp byte [edx + 0x7f], 0
jne 0x1004929f
movss xmm1, dword [ecx + 0x1560]
addss xmm1, dword [edx + 0xd0]
movss xmm0, dword [edx + 0xd4]
movss dword [edx + 0xc8], xmm1
movss dword [edx + 0xcc], xmm0
mov eax, dword [edx + 0xf0]
mov ecx, dword [edx + 0xf4]
mov dword [edx + 0xe8], eax
mov eax, dword [edx + 0xfc]
mov dword [edx + 0xec], ecx
mov dword [edx + 0xf8], eax
mov dword [ebp - 0x1c], 0x43090000
xor ecx, ecx
mov dword [ebp - 0x18], 0x41c80000
mov dword [ebp - 0x2c], 0xd1dbcdf3
mov dword [ebp - 0x28], 0xafad87e0
mov dword [ebp - 0x24], 0xb4a0a0
mov byte [ebp - 0x20], 1
mov al, cl
sub al, 0x44
xor byte [ebp + ecx - 0x2c], al
inc ecx
cmp ecx, 0xb
jb 0x100492c8
push 0
lea edx, [ebp - 0x1c]
mov byte [ebp - 0x20], 0
lea ecx, [ebp - 0x2c]
call fcn.10032d70
add esp, 4
test al, al
je 0x1004946a
push 0x13
push str.C:gamesnusConfigs
mov byte [ebp - 0x18], 0
lea ecx, [ebp - 0x60]
push dword [ebp - 0x18]
call fcn.10053480
add esp, 0xc
mov dword [ebp - 4], 0x12
lea edx, [ebp - 0x1c]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0x100b90f0
call fcn.10046f10
cmp dword [ebp - 0x1c], 0
jne 0x100494b4
mov ecx, dword [ebp - 0x4c]
cmp ecx, 7
jbe 0x1004936f
mov edx, dword [ebp - 0x60]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10049365
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100494c0
push ecx
push edx
call fcn.1005cded
add esp, 8
movaps xmm0, xmmword [0x100b1620]
mov ecx, 0x10
movaps xmm2, xmmword [ebp - 0x150]
movaps xmm1, xmmword [0x100b1870]
movd eax, xmm0
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x68], 0x716669
mov byte [ebp - 0x64], 1
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
movd xmm0, dword [ebp - 0x74]
andps xmm1, xmm2
punpcklbw xmm0, xmm0
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd dword [ebp - 0x78], xmm1
movaps xmm1, xmmword [0x100b1880]
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
movd xmm0, dword [ebp - 0x70]
andps xmm1, xmm2
punpcklbw xmm0, xmm0
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd dword [ebp - 0x74], xmm1
movaps xmm1, xmmword [0x100b18a0]
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
movd xmm0, dword [ebp - 0x6c]
andps xmm1, xmm2
punpcklbw xmm0, xmm0
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd dword [ebp - 0x70], xmm1
movaps xmm1, xmmword [0x100b18b0]
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd dword [ebp - 0x6c], xmm1
mov al, cl
sub al, 0x10
xor byte [ebp + ecx - 0x78], al
inc ecx
cmp ecx, 0x13
jb 0x10049444
push 1
push 0
push 0
lea eax, [ebp - 0x78]
mov byte [ebp - 0x64], 0
push eax
push 0
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.1005cac0
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea eax, [ebp - 0x34]
push eax
lea edx, [ebp - 0x1c]
call fcn.100463e0
call fcn.10067444
call fcn.10067444
lea eax, [ebp - 0x60]
push eax
lea edx, [ebp - 0x1c]
call fcn.100463e0
call fcn.10067444
call fcn.10067444
lea eax, [ebp - 0x60]
push eax
lea edx, [ebp - 0x1c]
call fcn.100463e0
call fcn.10067444
int3