Function at 0x401015
Capabilities:
Create directory
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3ea24
call fcn.00408b70
push edi
mov al, byte [0xf0f73c]
mov byte [ebp - 0x9a70], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x9a6f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0f740]
mov byte [ebp - 0xab1c], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xab1b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0f744]
mov byte [ebp - 0xa344], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xa343]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0f748]
mov byte [ebp - 0xbbdc], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xbbdb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0f74c]
mov byte [ebp - 0xb3f4], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xb3f3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0f750]
mov byte [ebp - 0xcbc4], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xcbc3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0f754]
mov byte [ebp - 0xc3e0], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xc3df]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0f758]
mov byte [ebp - 0x3ea1c], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x3ea1b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0f75c]
mov byte [ebp - 0x3e0e4], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x3e0e3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0f760]
mov byte [ebp - 0x2874], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x2873]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0f764]
mov byte [ebp - 0x3090], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x308f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0f768]
mov byte [ebp - 0x1704], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x1703]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0f76c]
mov byte [ebp - 0x1f0c], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x1f0b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0f770]
mov byte [ebp - 0x904], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x903]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0f774]
mov byte [ebp - 0x92a0], dl
xor eax, eax
mov dword [ebp - 0x929f], eax
mov dword [ebp - 0x929b], eax
mov dword [ebp - 0x9297], eax
mov byte [ebp - 0x9293], al
mov cl, byte [0xf0f778]
mov byte [ebp - 0x3d914], cl
mov ecx, 0xc34f
xor eax, eax
lea edi, [ebp - 0x3d913]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0f77c]
mov byte [ebp - 0x9290], dl
mov ecx, 0x1869
xor eax, eax
lea edi, [ebp - 0x928f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0f780]
mov byte [ebp - 0x134], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x133]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0f784]
mov byte [ebp - 0x3e24c], cl
mov ecx, 0x59
xor eax, eax
lea edi, [ebp - 0x3e24b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0xa34c], 0
mov dword [ebp - 0xac24], 0
mov dword [ebp - 0xb40c], 0
mov dword [ebp - 0xa348], 0
mov dl, byte [0xf0f788]
mov byte [ebp - 0x20a4], dl
mov ecx, 0x59
xor eax, eax
lea edi, [ebp - 0x20a3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0f78c]
mov byte [ebp - 0xa0c], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0xa0b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0f790]
mov byte [ebp - 0xac20], cl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0xac1f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0f794]
mov byte [ebp - 0x9b74], dl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x9b73]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0f798]
mov byte [ebp - 0xf34], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0xf33]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0f79c]
mov byte [ebp - 0xbc10], cl
mov ecx, 9
xor eax, eax
lea edi, [ebp - 0xbc0f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0f7a0]
mov byte [ebp - 0xb408], dl
xor eax, eax
mov dword [ebp - 0xb407], eax
mov dword [ebp - 0xb403], eax
mov dword [ebp - 0xb3ff], eax
mov dword [ebp - 0xb3fb], eax
mov word [ebp - 0xb3f7], ax
mov byte [ebp - 0xb3f5], al
mov cl, byte [0xf0f7a4]
mov byte [ebp - 0xc3f4], cl
xor edx, edx
mov dword [ebp - 0xc3f3], edx
mov dword [ebp - 0xc3ef], edx
mov dword [ebp - 0xc3eb], edx
mov word [ebp - 0xc3e7], dx
mov al, byte [0xf0f7a8]
mov byte [ebp - 0x30], al
xor ecx, ecx
mov dword [ebp - 0x2f], ecx
mov dword [ebp - 0x2b], ecx
mov dword [ebp - 0x27], ecx
mov word [ebp - 0x23], cx
mov dl, byte [0xf0f7ac]
mov byte [ebp - 0xe30], dl
xor eax, eax
mov dword [ebp - 0xe2f], eax
mov dword [ebp - 0xe2b], eax
mov dword [ebp - 0xe27], eax
mov word [ebp - 0xe23], ax
mov cl, byte [0xf0f7b0]
mov byte [ebp - 0xcbd4], cl
xor edx, edx
mov dword [ebp - 0xcbd3], edx
mov dword [ebp - 0xcbcf], edx
mov dword [ebp - 0xcbcb], edx
mov word [ebp - 0xcbc7], dx
mov al, byte [0xf0f7b4]
mov byte [ebp - 0xe20], al
mov ecx, 7
xor eax, eax
lea edi, [ebp - 0xe1f]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov cl, byte [0xf0f7b8]
mov byte [ebp - 0x173c], cl
mov ecx, 7
xor eax, eax
lea edi, [ebp - 0x173b]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov dl, byte [0xf0f7bc]
mov byte [ebp - 0x1f3c], dl
mov ecx, 7
xor eax, eax
lea edi, [ebp - 0x1f3b]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov dword [ebp - 0x171c], 0
mov dword [ebp - 0x1f1c], 0
mov dword [ebp - 0x28c0], 0
mov dword [ebp - 0x908], 0
mov al, byte [0xf0f7c0]
mov byte [ebp - 0xe00], al
mov ecx, 0xf9
xor eax, eax
lea edi, [ebp - 0xdff]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0xbbe8], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x28bc], 0
mov cl, byte [0xf0f7c4]
mov byte [ebp - 0x1c], cl
mov ecx, 6
xor eax, eax
lea edi, [ebp - 0x1b]
rep stosd dword es:[edi], eax
mov dl, byte [0xf0f7c8]
mov byte [ebp - 0x30e8], dl
mov ecx, 6
xor eax, eax
lea edi, [ebp - 0x30e7]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x1f18], 0
mov dword [ebp - 0x1718], 0
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0x1714], 0
mov dword [ebp - 0xa14], 0
mov dword [ebp - 0x1710], 0
mov dword [ebp - 0x1f14], 0
mov dword [ebp - 0xbbe4], 0
mov dword [ebp - 0xc3e4], 0
mov dword [ebp - 0xbbe0], 0
mov dword [ebp - 0x170c], 0
mov dword [0xf0f310], 0x93b
mov dword [ebp - 0x287c], 0
push 0x104
push 0xf0c7b4
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0xa34c], eax
mov eax, dword [ebp + 8]
push eax
push 0xf09e9c
call fcn.004088d0
add esp, 8
push 0xf0c7b4
call fcn.00408aa0
add esp, 4
mov dword [ebp - 0xa34c], eax
jmp 0x4015aa
mov ecx, dword [ebp - 0xa34c]
sub ecx, 1
mov dword [ebp - 0xa34c], ecx
cmp dword [ebp - 0xa34c], 1
jle 0x4015fd
push 1
mov edx, dword [ebp - 0xa34c]
push edx
push 0xf0c7b4
call fcn.004075a3
add esp, 0xc
push eax
call fcn.0040753f
add esp, 4
cmp eax, 0x5c
jne 0x4015fb
mov eax, dword [ebp - 0xa34c]
push eax
push 0xf0c7b4
call fcn.004076df
add esp, 8
push eax
push 0xf0db3c
call fcn.004088d0
add esp, 8
jmp 0x4015fd
jmp 0x40159b
push str.____209086
push 0xf0f2d0
call fcn.004088d0
add esp, 8
push 0x41003c
push 0xf0f240
call fcn.004088d0
add esp, 8
push str.Kb54LnMfbn
push 0xf0f24c
call fcn.004088d0
add esp, 8
push 1
call fcn.0040798a
add esp, 4
mov dword [ebp - 0xa34c], eax
mov ecx, dword [ebp - 0xa34c]
push ecx
push 0x410054
push 0xf0f258
call fcn.00408a44
add esp, 0xc
push 5
push 0xf0f258
call fcn.00407735
add esp, 8
push eax
push 0xf0f280
call fcn.004088d0
add esp, 8
fild dword [ebp - 0xa34c]
sub esp, 8
fstp qword [esp]
call fcn.0040755c
add esp, 8
push eax
push 0xf0f258
call fcn.004088d0
add esp, 8
push 5
push 0xf0f258
call fcn.00407735
add esp, 8
push eax
push 0xf0f2a8
call fcn.004088d0
add esp, 8
push 0xf0f7cc
lea edx, [ebp - 0x30e8]
push edx
call fcn.004088d0
add esp, 8
mov dword [ebp - 0xa34c], 1
jmp 0x4016e7
mov eax, dword [ebp - 0xa34c]
add eax, 1
mov dword [ebp - 0xa34c], eax
cmp dword [ebp - 0xa34c], 6
jge 0x40174e
push 1
mov ecx, dword [ebp - 0xa34c]
push ecx
push 0xf0f2a8
call fcn.004075a3
add esp, 0xc
push eax
lea edx, [ebp - 0x1c]
push edx
call fcn.004088d0
add esp, 8
push 0x410058
lea eax, [ebp - 0x1c]
push eax
call fcn.004089c0
add esp, 8
test eax, eax
jne 0x401739
push 0x41005c
lea ecx, [ebp - 0x1c]
push ecx
call fcn.004088d0
add esp, 8
lea edx, [ebp - 0x1c]
push edx
lea eax, [ebp - 0x30e8]
push eax
call fcn.004088e0
add esp, 8
jmp 0x4016d8
lea ecx, [ebp - 0x30e8]
push ecx
push 0xf0f2a8
call fcn.004088d0
add esp, 8
push 0xf0f2a8
call fcn.00408843
add esp, 4
mov dword [ebp - 0x171c], eax
mov edx, dword [ebp - 0x171c]
imul edx, edx, 6
mov dword [ebp - 0x171c], edx
fild dword [ebp - 0x171c]
sub esp, 8
fstp qword [esp]
call fcn.0040755c
add esp, 8
push eax
lea eax, [ebp - 0xe20]
push eax
call fcn.004088d0
add esp, 8
lea ecx, [ebp - 0xe20]
push ecx
call fcn.00408274
add esp, 4
push eax
lea edx, [ebp - 0x173c]
push edx
call fcn.004088d0
add esp, 8
push 5
lea eax, [ebp - 0x173c]
push eax
call fcn.004076df
add esp, 8
push eax
lea ecx, [ebp - 0x1f3c]
push ecx
call fcn.004088d0
add esp, 8
lea edx, [ebp - 0x1f3c]
push edx
lea eax, [ebp - 0xe20]
push eax
call fcn.004088d0
add esp, 8
lea ecx, [ebp - 0x1f3c]
push ecx
lea edx, [ebp - 0xe20]
push edx
call fcn.004088e0
add esp, 8
lea eax, [ebp - 0xe20]
push eax
push 0xf0f240
call fcn.004088d0
add esp, 8
mov dword [ebp - 0xa34c], 1
jmp 0x401843
mov ecx, dword [ebp - 0xa34c]
add ecx, 1
mov dword [ebp - 0xa34c], ecx
cmp dword [ebp - 0xa34c], 0xb
jge 0x40187a
push 1
mov edx, dword [ebp - 0xa34c]
push edx
push 0xf0f240
call fcn.004075a3
add esp, 0xc
push eax
call fcn.0040753f
add esp, 4
mov ecx, dword [ebp - 0xa34c]
mov dword [ecx*4 + 0x410de0], eax
jmp 0x401834
mov dword [ebp - 0xa34c], 1
jmp 0x401895
mov edx, dword [ebp - 0xa34c]
add edx, 1
mov dword [ebp - 0xa34c], edx
cmp dword [ebp - 0xa34c], 0xb
jge 0x4018cc
push 1
mov eax, dword [ebp - 0xa34c]
push eax
push 0xf0f24c
call fcn.004075a3
add esp, 0xc
push eax
call fcn.0040753f
add esp, 4
mov ecx, dword [ebp - 0xa34c]
mov dword [ecx*4 + 0x410db0], eax
jmp 0x401886
mov dword [ebp - 0xa34c], 0
mov dword [0xf0f310], 0xe73
push 0xf0f7d0
push 0xf087f8
call fcn.004088d0
add esp, 8
push 0xf0f7d4
lea edx, [ebp - 0xa0c]
push edx
call fcn.004088d0
add esp, 8
push 0xf087f8
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov dword [ebp - 0x287c], eax
mov eax, dword [ebp - 0x287c]
push eax
push 0xf087f8
call fcn.004076df
add esp, 8
push eax
push 0xf087f8
call fcn.004088d0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
push 0x65
call fcn.004074e3
add esp, 4
push eax
push 0x6c
call fcn.004074e3
add esp, 4
push eax
push 0x69
call fcn.004074e3
add esp, 4
push eax
push 0x66
call fcn.004074e3
add esp, 4
push eax
push 0x79
call fcn.004074e3
add esp, 4
push eax
push 0x6d
call fcn.004074e3
add esp, 4
push eax
push 0xf087f8
push 0x410060
push 0xf08a00
call fcn.00408a44
add esp, 0x28
push 0
push 0xf08a00
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0xa34c], eax
push 0x79
call fcn.004074e3
add esp, 4
push eax
push 0x78
call fcn.004074e3
add esp, 4
push eax
push 0x77
call fcn.004074e3
add esp, 4
push eax
push 0xf087f8
push 0x410074
push 0xf088fc
call fcn.00408a44
add esp, 0x18
push 0
push 0xf088fc
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0xa34c], eax
mov dword [ebp - 0xa34c], 0
push 0x2e
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xc3f4]
push ecx
call fcn.004088d0
add esp, 8
push 0x62
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xc3f4]
push edx
call fcn.004088e0
add esp, 8
push 0x61
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xc3f4]
push eax
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xc3f4]
push ecx
call fcn.004088e0
add esp, 8
push 0x2e
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x30]
push edx
call fcn.004088d0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.004088e0
add esp, 8
push 0x78
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x30]
push edx
call fcn.004088e0
add esp, 8
lea eax, [ebp - 0xc3f4]
push eax
push 4
call fcn.00407185
add esp, 4
push eax
push 0x410080
push 0xf088fc
push 0x410084
push 0xf0f030
call fcn.00408a44
add esp, 0x18
lea ecx, [ebp - 0xc3f4]
push ecx
push 5
call fcn.00407185
add esp, 4
push eax
push 0x410090
push 0xf088fc
push 0x410094
push 0xf0f134
call fcn.00408a44
add esp, 0x18
lea edx, [ebp - 0xc3f4]
push edx
push 1
call fcn.00407185
add esp, 4
push eax
push 0x4100a0
push 0xf088fc
push str._s_s_s_s
push 0xf08b14
call fcn.00408a44
add esp, 0x18
push 0xf08b14
push 0xf0b224
call fcn.004088d0
add esp, 8
push 0xf0f7d8
lea eax, [ebp - 0x134]
push eax
call fcn.004088d0
add esp, 8
lea ecx, [ebp - 0x30]
push ecx
push 2
call fcn.00407185
add esp, 4
push eax
push 0x4100b0
lea edx, [ebp - 0x134]
push edx
call fcn.00408a44
add esp, 0x10
lea eax, [ebp - 0x134]
push eax
push 0x4100b8
push 0xf088fc
push str._s_s_s
push 0xf0b328
call fcn.00408a44
add esp, 0x14
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9b74]
push ecx
call fcn.004088d0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9b74]
push edx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9b74]
push eax
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9b74]
push ecx
call fcn.004088e0
add esp, 8
push 0x7a
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9b74]
push edx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9b74]
push eax
call fcn.004088e0
add esp, 8
push 0x6d
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9b74]
push ecx
call fcn.004088e0
add esp, 8
push 0x70
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9b74]
push edx
call fcn.004088e0
add esp, 8
push 0x3d
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9b74]
push eax
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xf34]
push ecx
call fcn.004088d0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xf34]
push edx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xf34]
push eax
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xf34]
push ecx
call fcn.004088e0
add esp, 8
push 0x4d
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xf34]
push edx
call fcn.004088e0
add esp, 8
push 0x59
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xf34]
push eax
call fcn.004088e0
add esp, 8
push 0x46
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xf34]
push ecx
call fcn.004088e0
add esp, 8
push 0x49
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xf34]
push edx
call fcn.004088e0
add esp, 8
push 0x4c
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xf34]
push eax
call fcn.004088e0
add esp, 8
push 0x45
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xf34]
push ecx
call fcn.004088e0
add esp, 8
push 0x53
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xf34]
push edx
call fcn.004088e0
add esp, 8
push 0x3d
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xf34]
push eax
call fcn.004088e0
add esp, 8
push 0xf088fc
lea ecx, [ebp - 0x9b74]
push ecx
push 0x4100c4
lea edx, [ebp - 0xa0c]
push edx
call fcn.00408a44
add esp, 0x10
push 0xf08a00
lea eax, [ebp - 0xf34]
push eax
push 0x4100cc
lea ecx, [ebp - 0xac20]
push ecx
call fcn.00408a44
add esp, 0x10
mov dword [0xf0f310], 0x8aeb
mov edx, dword [0xf0f310]
imul edx, edx, 3
mov dword [0xf0f310], edx
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9b74]
push eax
call fcn.004088d0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9b74]
push ecx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9b74]
push edx
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9b74]
push eax
call fcn.004088e0
add esp, 8
push 0x62
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9b74]
push ecx
call fcn.004088e0
add esp, 8
push 0x66
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9b74]
push edx
call fcn.004088e0
add esp, 8
push 0x63
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9b74]
push eax
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9b74]
push ecx
call fcn.004088e0
add esp, 8
push 0x63
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9b74]
push edx
call fcn.004088e0
add esp, 8
push 0x3d
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9b74]
push eax
call fcn.004088e0
add esp, 8
push 0x61
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xbc10]
push ecx
call fcn.004088d0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xbc10]
push edx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xbc10]
push eax
call fcn.004088e0
add esp, 8
push 0x72
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xbc10]
push ecx
call fcn.004088e0
add esp, 8
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xbc10]
push edx
call fcn.004088e0
add esp, 8
push 0x62
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xbc10]
push eax
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xbc10]
push ecx
call fcn.004088e0
add esp, 8
push 0x2b
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xbc10]
push edx
call fcn.004088e0
add esp, 8
push 0x68
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xbc10]
push eax
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xbc10]
push ecx
call fcn.004088e0
add esp, 8
push 0xf088fc
lea edx, [ebp - 0xbc10]
push edx
push 0x4100d4
lea eax, [ebp - 0x3e24c]
push eax
call fcn.00408a44
add esp, 0x10
push 0xd
call fcn.004074e3
add esp, 4
push eax
push 0xf0eec8
call fcn.004088d0
add esp, 8
push 0xa
call fcn.004074e3
add esp, 4
push eax
push 0xf0eec8
call fcn.004088e0
add esp, 8
lea ecx, [ebp - 0x3e24c]
push ecx
push 0xf0eec8
call fcn.004088e0
add esp, 8
push 0xd
call fcn.004074e3
add esp, 4
push eax
push 0xf0eec8
call fcn.004088e0
add esp, 8
push 0xa
call fcn.004074e3
add esp, 4
push eax
push 0xf0eec8
call fcn.004088e0
add esp, 8
push 0xf0f7dc
push 0xf0b42c
call fcn.004088d0
add esp, 8
push 0x30
call fcn.004074e3
add esp, 4
push eax
push 0x2f
call fcn.004074e3
add esp, 4
push eax
push 0x20
call fcn.004074e3
add esp, 4
push eax
push 0x54
call fcn.004074e3
add esp, 4
push eax
push 0x46
call fcn.004074e3
add esp, 4
push eax
push 0x49
call fcn.004074e3
add esp, 4
push eax
push 0x48
call fcn.004074e3
add esp, 4
push eax
push 0x53
call fcn.004074e3
add esp, 4
push eax
push str._s_s_s_s_s_s_s_s
lea edx, [ebp - 0xb408]
push edx
call fcn.00408a44
add esp, 0x28
push 0x40
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xe30]
push eax
call fcn.004088d0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xe30]
push ecx
call fcn.004088e0
add esp, 8
push 0x63
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xe30]
push edx
call fcn.004088e0
add esp, 8
push 0x68
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xe30]
push eax
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xe30]
push ecx
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xe30]
push edx
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xe30]
push eax
call fcn.004088e0
add esp, 8
push 0x66
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xe30]
push ecx
call fcn.004088e0
add esp, 8
push 0x66
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xe30]
push edx
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xcbd4]
push eax
call fcn.004088d0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xcbd4]
push ecx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xcbd4]
push edx
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xcbd4]
push eax
call fcn.004088e0
add esp, 8
push 0x63
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xcbd4]
push ecx
call fcn.004088e0
add esp, 8
push 0x6d
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xcbd4]
push edx
call fcn.004088e0
add esp, 8
push 0x64
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xcbd4]
push eax
call fcn.004088e0
add esp, 8
push 0x6c
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xcbd4]
push ecx
call fcn.004088e0
add esp, 8
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xcbd4]
push edx
call fcn.004088e0
add esp, 8
push 0x6e
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xcbd4]
push eax
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xcbd4]
push ecx
call fcn.004088e0
add esp, 8
push 0x3d
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xcbd4]
push edx
call fcn.004088e0
add esp, 8
push 0xa
call fcn.004074e3
add esp, 4
push eax
push 0xd
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xb408]
push eax
push 0xa
call fcn.004074e3
add esp, 4
push eax
push 0xd
call fcn.004074e3
add esp, 4
push eax
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0xcbd4]
push edx
push 0xa
call fcn.004074e3
add esp, 4
push eax
push 0xd
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x9b74]
push ecx
push 0xa
call fcn.004074e3
add esp, 4
push eax
push 0xd
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xac20]
push edx
push 0xa
call fcn.004074e3
add esp, 4
push eax
push 0xd
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xa0c]
push eax
push 0xa
call fcn.004074e3
add esp, 4
push eax
push 0xd
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xe30]
push ecx
push str._s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s
push 0xf0b42c
call fcn.00408a44
add esp, 0x58
mov edx, dword [ebp + 8]
push edx
push 0x20
call fcn.004074e3
add esp, 4
push eax
push 0x22
call fcn.004074e3
add esp, 4
push eax
push 0xf0c7b4
push 0x22
call fcn.004074e3
add esp, 4
push eax
push 0x41011c
push 0xf08b14
call fcn.00408a44
add esp, 0x1c
mov dword [0xf0f310], 0x368b23
mov eax, dword [0xf0f310]
sub eax, 0xeb
mov dword [0xf0f310], eax
push 0xf0b224
push 0x20
call fcn.004074e3
add esp, 4
push eax
push 0x6c
call fcn.004074e3
add esp, 4
push eax
push 0x65
call fcn.004074e3
add esp, 4
push eax
push 0x64
call fcn.004074e3
add esp, 4
push eax
push str._s_s_s_s_s
lea ecx, [ebp - 0x20a4]
push ecx
call fcn.00408a44
add esp, 0x1c
push 0xf087f8
lea edx, [ebp - 0xab1c]
push edx
call fcn.004088d0
add esp, 8
lea eax, [ebp - 0xab1c]
push eax
lea ecx, [ebp - 0xc3e0]
push ecx
call fcn.004088d0
add esp, 8
lea edx, [ebp - 0xab1c]
push edx
lea eax, [ebp - 0x3e0e4]
push eax
call fcn.004088d0
add esp, 8
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xab1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xab1c]
push edx
call fcn.004088e0
add esp, 8
push 0x36
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xab1c]
push eax
call fcn.004088e0
add esp, 8
push 0x34
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xab1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x2e
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xab1c]
push edx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xab1c]
push eax
call fcn.004088e0
add esp, 8
push 0x78
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xab1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xab1c]
push edx
call fcn.004088e0
add esp, 8
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xc3e0]
push eax
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xc3e0]
push ecx
call fcn.004088e0
add esp, 8
push 0x36
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xc3e0]
push edx
call fcn.004088e0
add esp, 8
push 0x34
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xc3e0]
push eax
call fcn.004088e0
add esp, 8
push 0x2e
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xc3e0]
push ecx
call fcn.004088e0
add esp, 8
push 0x62
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xc3e0]
push edx
call fcn.004088e0
add esp, 8
push 0x61
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xc3e0]
push eax
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xc3e0]
push ecx
call fcn.004088e0
add esp, 8
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3e0e4]
push edx
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3e0e4]
push eax
call fcn.004088e0
add esp, 8
push 0x36
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x3e0e4]
push ecx
call fcn.004088e0
add esp, 8
push 0x34
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3e0e4]
push edx
call fcn.004088e0
add esp, 8
push 0x2e
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3e0e4]
push eax
call fcn.004088e0
add esp, 8
push 0x66
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x3e0e4]
push ecx
call fcn.004088e0
add esp, 8
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3e0e4]
push edx
call fcn.004088e0
add esp, 8
push 0x6c
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3e0e4]
push eax
call fcn.004088e0
add esp, 8
push 0x25
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xa344]
push ecx
call fcn.004088d0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xbbdc]
push edx
call fcn.004088d0
add esp, 8
push 0x63
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xbbdc]
push eax
call fcn.004088e0
add esp, 8
push 0x68
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xbbdc]
push ecx
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xbbdc]
push edx
call fcn.004088e0
add esp, 8
push 0x3a
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xbbdc]
push eax
call fcn.004088e0
add esp, 8
push 0x30
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xbbdc]
push ecx
call fcn.004088e0
add esp, 8
push 0x3e
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xbbdc]
push edx
call fcn.004088e0
add esp, 8
lea eax, [ebp - 0xbbdc]
push eax
lea ecx, [ebp - 0xb3f4]
push ecx
call fcn.004088d0
add esp, 8
lea edx, [ebp - 0xab1c]
push edx
lea eax, [ebp - 0xb3f4]
push eax
call fcn.004088e0
add esp, 8
push 0x410134
lea ecx, [ebp - 0xab1c]
push ecx
call fcn.00408830
add esp, 8
mov dword [ebp - 0x2878], eax
cmp dword [ebp - 0x2878], 0
je 0x40292a
push 0
push 0
mov edx, dword [ebp - 0x2878]
push edx
call fcn.00408784
add esp, 0xc
mov eax, dword [ebp - 0x2878]
mov ecx, dword [eax + 4]
sub ecx, 1
mov edx, dword [ebp - 0x2878]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x2878]
cmp dword [eax + 4], 0
jl 0x402913
mov ecx, dword [ebp - 0x2878]
mov edx, dword [ecx]
mov byte [edx], 0x30
mov eax, 0x30
and eax, 0xff
mov dword [ebp - 0x3ea20], eax
mov ecx, dword [ebp - 0x2878]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0x2878]
mov dword [eax], edx
jmp 0x40292a
mov ecx, dword [ebp - 0x2878]
push ecx
push 0x30
call fcn.0040866f
add esp, 8
mov dword [ebp - 0x3ea20], eax
mov edx, dword [ebp - 0x2878]
push edx
call fcn.00408619
add esp, 4
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088d0
add esp, 8
push 0x66
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x78
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x22
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
lea ecx, [ebp - 0xa344]
push ecx
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x53
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x79
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x6d
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x52
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
lea ecx, [ebp - 0xa344]
push ecx
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x5c
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x53
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x79
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x6e
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x61
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x76
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x5c
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x22
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x63
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x68
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x3a
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x31
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x3e
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088d0
add esp, 8
push 0x66
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x78
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x22
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
lea eax, [ebp - 0xa344]
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x53
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x79
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x6d
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x52
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
lea eax, [ebp - 0xa344]
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x5c
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x53
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x79
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x6e
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x61
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x76
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x5c
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x22
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x63
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x68
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x3a
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x31
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x9a70]
push edx
call fcn.004088e0
add esp, 8
push 0x3e
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x22
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
lea edx, [ebp - 0xab1c]
push edx
lea eax, [ebp - 0x9a70]
push eax
call fcn.004088e0
add esp, 8
push 0x22
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x9a70]
push ecx
call fcn.004088e0
add esp, 8
push 0x40
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xcbc4]
push edx
call fcn.004088d0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xcbc4]
push eax
call fcn.004088e0
add esp, 8
push 0x63
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xcbc4]
push ecx
call fcn.004088e0
add esp, 8
push 0x68
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xcbc4]
push edx
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xcbc4]
push eax
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xcbc4]
push ecx
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xcbc4]
push edx
call fcn.004088e0
add esp, 8
push 0x66
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xcbc4]
push eax
call fcn.004088e0
add esp, 8
push 0x66
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xcbc4]
push ecx
call fcn.004088e0
add esp, 8
push 0xd
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xcbc4]
push edx
call fcn.004088e0
add esp, 8
push 0xa
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xcbc4]
push eax
call fcn.004088e0
add esp, 8
lea ecx, [ebp - 0x9a70]
push ecx
lea edx, [ebp - 0xcbc4]
push edx
call fcn.004088e0
add esp, 8
push 0xd
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0xcbc4]
push eax
call fcn.004088e0
add esp, 8
push 0xa
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xcbc4]
push ecx
call fcn.004088e0
add esp, 8
push 0x22
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3ea1c]
push edx
call fcn.004088d0
add esp, 8
push 0x25
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3ea1c]
push eax
call fcn.004088e0
add esp, 8
push 0x53
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x3ea1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x79
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3ea1c]
push edx
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3ea1c]
push eax
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x3ea1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3ea1c]
push edx
call fcn.004088e0
add esp, 8
push 0x6d
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3ea1c]
push eax
call fcn.004088e0
add esp, 8
push 0x52
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x3ea1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3ea1c]
push edx
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3ea1c]
push eax
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x3ea1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x25
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3ea1c]
push edx
call fcn.004088e0
add esp, 8
push 0x5c
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3ea1c]
push eax
call fcn.004088e0
add esp, 8
push 0x53
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x3ea1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x79
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3ea1c]
push edx
call fcn.004088e0
add esp, 8
push 0x73
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3ea1c]
push eax
call fcn.004088e0
add esp, 8
push 0x6e
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x3ea1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x61
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3ea1c]
push edx
call fcn.004088e0
add esp, 8
push 0x74
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3ea1c]
push eax
call fcn.004088e0
add esp, 8
push 0x69
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x3ea1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x76
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3ea1c]
push edx
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3ea1c]
push eax
call fcn.004088e0
add esp, 8
push 0x5c
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x3ea1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x63
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3ea1c]
push edx
call fcn.004088e0
add esp, 8
push 0x6d
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3ea1c]
push eax
call fcn.004088e0
add esp, 8
push 0x64
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x3ea1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x2e
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3ea1c]
push edx
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3ea1c]
push eax
call fcn.004088e0
add esp, 8
push 0x78
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x3ea1c]
push ecx
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x3ea1c]
push edx
call fcn.004088e0
add esp, 8
push 0x22
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x3ea1c]
push eax
call fcn.004088e0
add esp, 8
push 0x65
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x2874]
push ecx
call fcn.004088d0
add esp, 8
push 0x63
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x2874]
push edx
call fcn.004088e0
add esp, 8
push 0x68
call fcn.004074e3
add esp, 4
push eax
lea eax, [ebp - 0x2874]
push eax
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0x2874]
push ecx
call fcn.004088e0
add esp, 8
push 0x3a
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x2874]
push edx
call fcn.004088e0
add esp, 8
lea eax, [ebp - 0x3ea1c]
push eax
lea ecx, [ebp - 0x2874]
push ecx
call fcn.004088e0
add esp, 8
push 0x3e
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x2874]
push edx
call fcn.004088e0
add esp, 8
lea eax, [ebp - 0x3e0e4]
push eax
lea ecx, [ebp - 0x2874]
push ecx
call fcn.004088e0
add esp, 8
lea edx, [ebp - 0x2874]
push edx
lea eax, [ebp - 0xcbc4]
push eax
call fcn.004088e0
add esp, 8
push 0xd
call fcn.004074e3
add esp, 4
push eax
lea ecx, [ebp - 0xcbc4]
push ecx
call fcn.004088e0
add esp, 8
push 0xa
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0xcbc4]
push edx
call fcn.004088e0
add esp, 8
push 0x410138
lea eax, [ebp - 0xc3e0]
push eax
call fcn.00408830
add esp, 8
mov dword [ebp - 0xa10], eax
cmp dword [ebp - 0xa10], 0
je 0x4037ee
mov ecx, dword [ebp - 0xa10]
push ecx
lea edx, [ebp - 0xcbc4]
push edx
call fcn.004085d6
add esp, 8
mov eax, dword [ebp - 0xa10]
push eax
call fcn.00408619
add esp, 4
mov dword [ebp - 0x30cc], 0x3c
lea ecx, [ebp - 0xc3e0]
mov dword [ebp - 0x30bc], ecx
mov dword [ebp - 0x30c8], 0x40
mov dword [ebp - 0x30c4], 0
mov dword [ebp - 0x30c0], 0x41013c
mov dword [ebp - 0x30b8], 0xf0f7e0
mov dword [ebp - 0x30b4], 0
mov dword [ebp - 0x30b0], 0
mov dword [ebp - 0x30ac], 0x1d
lea edx, [ebp - 0x30cc]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x3094], 0
je 0x403893
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov eax, dword [ebp - 0x3094]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x3094]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00403d94
mov dword [ebp - 0x28bc], 0
push 0x410144
lea edx, [ebp - 0x3e0e4]
push edx
call fcn.00408830
add esp, 8
mov dword [ebp - 0x1f10], eax
cmp dword [ebp - 0x1f10], 0
je 0x40391a
push 2
push 0
mov eax, dword [ebp - 0x1f10]
push eax
call fcn.00408784
add esp, 0xc
mov ecx, dword [ebp - 0x1f10]
push ecx
call fcn.0040847e
add esp, 4
mov dword [ebp - 0x20], eax
push 0
push 1
mov edx, dword [ebp - 0x1f10]
push edx
call fcn.00408784
add esp, 0xc
mov eax, dword [ebp - 0x1f10]
push eax
mov ecx, dword [ebp - 0x20]
sub ecx, 3
push ecx
lea edx, [ebp - 0x1704]
push edx
call fcn.00408427
add esp, 0xc
mov eax, dword [ebp - 0x1f10]
push eax
call fcn.00408619
add esp, 4
lea ecx, [ebp - 0x1704]
push ecx
lea edx, [ebp - 0xe00]
push edx
call fcn.004088d0
add esp, 8
push str.__C
lea eax, [ebp - 0x904]
push eax
call fcn.004088d0
add esp, 8
push 0xf0b224
lea ecx, [ebp - 0x904]
push ecx
call fcn.004088e0
add esp, 8
push 0x20
call fcn.004074e3
add esp, 4
push eax
lea edx, [ebp - 0x904]
push edx
call fcn.004088e0
add esp, 8
push 0xf08b14
lea eax, [ebp - 0x904]
push eax
call fcn.004088e0
add esp, 8
push 0x410150
lea ecx, [ebp - 0xab1c]
push ecx
call fcn.00408830
add esp, 8
mov dword [ebp - 0x1708], eax
cmp dword [ebp - 0x1708], 0
je 0x403ce2
push 0
push 0
mov edx, dword [ebp - 0x1708]
push edx
call fcn.00408784
add esp, 0xc
mov eax, dword [ebp - 0x1708]
mov ecx, dword [eax + 4]
sub ecx, 1
mov edx, dword [ebp - 0x1708]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x1708]
cmp dword [eax + 4], 0
jl 0x403a1b
mov ecx, dword [ebp - 0x1708]
mov edx, dword [ecx]
movsx eax, byte [edx]
and eax, 0xff
mov dword [ebp - 0x3ea24], eax
mov ecx, dword [ebp - 0x1708]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0x1708]
mov dword [eax], edx
jmp 0x403a30
mov ecx, dword [ebp - 0x1708]
push ecx
call fcn.0040834e
add esp, 4
mov dword [ebp - 0x3ea24], eax
mov edx, dword [ebp - 0x3ea24]
mov dword [ebp - 0x908], edx
cmp dword [ebp - 0x908], 0x31
jne 0x403b93
cmp dword [0xf0f314], 0
jne 0x403aee
mov dword [ebp - 0x28b8], 0x3c
lea eax, [ebp - 0xe00]
mov dword [ebp - 0x28a8], eax
mov dword [ebp - 0x28b4], 0x40
mov dword [ebp - 0x28b0], 0
mov dword [ebp - 0x28ac], 0x410154
lea ecx, [ebp - 0x904]
mov dword [ebp - 0x28a4], ecx
mov dword [ebp - 0x28a0], 0
mov dword [ebp - 0x289c], 0
mov dword [ebp - 0x2898], 0x1d
lea edx, [ebp - 0x28b8]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x2880], 0
je 0x403aee
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov eax, dword [ebp - 0x2880]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x2880]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0xf0f314], 6
jne 0x403b93
mov dword [ebp - 0x28b8], 0x3c
lea edx, [ebp - 0xe00]
mov dword [ebp - 0x28a8], edx
mov dword [ebp - 0x28b4], 0x40
mov dword [ebp - 0x28b0], 0
mov dword [ebp - 0x28ac], 0x41015c
lea eax, [ebp - 0x904]
mov dword [ebp - 0x28a4], eax
mov dword [ebp - 0x28a0], 0
mov dword [ebp - 0x289c], 1
mov dword [ebp - 0x2898], 0x1d
lea ecx, [ebp - 0x28b8]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x2880], 0
je 0x403b93
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov edx, dword [ebp - 0x2880]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x2880]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x908], 0x30
jne 0x403ce2
cmp dword [0xf0f314], 0
jne 0x403c41
mov dword [ebp - 0x28b8], 0x3c
mov dword [ebp - 0x28a8], 0xf0b224
mov dword [ebp - 0x28b4], 0x40
mov dword [ebp - 0x28b0], 0
mov dword [ebp - 0x28ac], 0x410164
mov dword [ebp - 0x28a4], 0xf08b14
mov dword [ebp - 0x28a0], 0
mov dword [ebp - 0x289c], 0
mov dword [ebp - 0x2898], 0x1d
lea ecx, [ebp - 0x28b8]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x2880], 0
je 0x403c41
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov edx, dword [ebp - 0x2880]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x2880]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0xf0f314], 6
jne 0x403ce2
mov dword [ebp - 0x28b8], 0x3c
mov dword [ebp - 0x28a8], 0xf0b224
mov dword [ebp - 0x28b4], 0x40
mov dword [ebp - 0x28b0], 0
mov dword [ebp - 0x28ac], str.open
mov dword [ebp - 0x28a4], 0xf08b14
mov dword [ebp - 0x28a0], 0
mov dword [ebp - 0x289c], 1
mov dword [ebp - 0x2898], 0x1d
lea ecx, [ebp - 0x28b8]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x2880], 0
je 0x403ce2
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov edx, dword [ebp - 0x2880]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x2880]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x1708]
push ecx
call fcn.00408619
add esp, 4
cmp dword [0xf08b0c], 1
jne 0x403d42
mov dword [ebp - 0xa34c], 0
jmp 0x403d15
mov edx, dword [ebp - 0xa34c]
add edx, 1
mov dword [ebp - 0xa34c], edx
mov eax, dword [0xf08b10]
sub eax, 2
cmp dword [ebp - 0xa34c], eax
jge 0x403d42
mov ecx, dword [ebp - 0xa34c]
imul ecx, ecx, 0x3e8
add ecx, 0x410e10
push ecx
call fcn.00408324
add esp, 4
jmp 0x403d06
mov edx, dword [0xf08b10]
sub edx, 2
mov dword [ebp - 0xa34c], edx
jmp 0x403d62
mov eax, dword [ebp - 0xa34c]
add eax, 1
mov dword [ebp - 0xa34c], eax
mov ecx, dword [ebp - 0xa34c]
cmp ecx, dword [0xf08b10]
jge 0x403d8d
mov edx, dword [ebp - 0xa34c]
imul edx, edx, 0x3e8
add edx, 0x410e10
push edx
call fcn.00408324
add esp, 4
jmp 0x403d53
xor eax, eax
pop edi
mov esp, ebp
pop ebp
ret