Function at 0x401015
Capabilities:
Create directory
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3e980
call fcn.00407ca0
push edi
mov al, byte [0xf0e6d4]
mov byte [ebp - 0x99cc], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x99cb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e6d8]
mov byte [ebp - 0xaa78], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xaa77]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e6dc]
mov byte [ebp - 0xa2a0], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xa29f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e6e0]
mov byte [ebp - 0xbb38], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xbb37]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e6e4]
mov byte [ebp - 0xb350], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xb34f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e6e8]
mov byte [ebp - 0xcb20], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xcb1f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e6ec]
mov byte [ebp - 0xc33c], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xc33b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e6f0]
mov byte [ebp - 0x3e978], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x3e977]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e6f4]
mov byte [ebp - 0x3e040], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x3e03f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e6f8]
mov byte [ebp - 0x27f0], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x27ef]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e6fc]
mov byte [ebp - 0x3008], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x3007]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e700]
mov byte [ebp - 0x16c8], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x16c7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e704]
mov byte [ebp - 0x1eac], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x1eab]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e708]
mov byte [ebp - 0x8e8], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x8e7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e70c]
mov byte [ebp - 0x91fc], dl
xor eax, eax
mov dword [ebp - 0x91fb], eax
mov dword [ebp - 0x91f7], eax
mov dword [ebp - 0x91f3], eax
mov byte [ebp - 0x91ef], al
mov cl, byte [0xf0e710]
mov byte [ebp - 0x3d870], cl
mov ecx, 0xc34f
xor eax, eax
lea edi, [ebp - 0x3d86f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e714]
mov byte [ebp - 0x91ec], dl
mov ecx, 0x1869
xor eax, eax
lea edi, [ebp - 0x91eb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e718]
mov byte [ebp - 0x118], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x117]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e71c]
mov byte [ebp - 0x3e1a8], cl
mov ecx, 0x59
xor eax, eax
lea edi, [ebp - 0x3e1a7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0xa2a8], 0
mov dword [ebp - 0xab80], 0
mov dword [ebp - 0xb368], 0
mov dword [ebp - 0xa2a4], 0
mov dl, byte [0xf0e720]
mov byte [ebp - 0x2020], dl
mov ecx, 0x59
xor eax, eax
lea edi, [ebp - 0x201f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e724]
mov byte [ebp - 0x9f0], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x9ef]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e728]
mov byte [ebp - 0xab7c], cl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0xab7b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e72c]
mov byte [ebp - 0x9ad0], dl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x9acf]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e730]
mov byte [ebp - 0xef8], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0xef7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e734]
mov byte [ebp - 0xbb6c], cl
mov ecx, 9
xor eax, eax
lea edi, [ebp - 0xbb6b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e738]
mov byte [ebp - 0xb364], dl
xor eax, eax
mov dword [ebp - 0xb363], eax
mov dword [ebp - 0xb35f], eax
mov dword [ebp - 0xb35b], eax
mov dword [ebp - 0xb357], eax
mov word [ebp - 0xb353], ax
mov byte [ebp - 0xb351], al
mov cl, byte [0xf0e73c]
mov byte [ebp - 0xc350], cl
xor edx, edx
mov dword [ebp - 0xc34f], edx
mov dword [ebp - 0xc34b], edx
mov dword [ebp - 0xc347], edx
mov word [ebp - 0xc343], dx
mov al, byte [0xf0e740]
mov byte [ebp - 0x14], al
xor ecx, ecx
mov dword [ebp - 0x13], ecx
mov dword [ebp - 0xf], ecx
mov dword [ebp - 0xb], ecx
mov word [ebp - 7], cx
mov dl, byte [0xf0e744]
mov byte [ebp - 0xdf4], dl
xor eax, eax
mov dword [ebp - 0xdf3], eax
mov dword [ebp - 0xdef], eax
mov dword [ebp - 0xdeb], eax
mov word [ebp - 0xde7], ax
mov cl, byte [0xf0e748]
mov byte [ebp - 0xcb30], cl
xor edx, edx
mov dword [ebp - 0xcb2f], edx
mov dword [ebp - 0xcb2b], edx
mov dword [ebp - 0xcb27], edx
mov word [ebp - 0xcb23], dx
mov dword [ebp - 0x8ec], 0
mov al, byte [0xf0e74c]
mov byte [ebp - 0xde4], al
mov ecx, 0xf9
xor eax, eax
lea edi, [ebp - 0xde3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0xbb44], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x2838], 0
mov dword [ebp - 0x1eb8], 0
mov dword [ebp - 0x16dc], 0
mov dword [ebp - 0x9fc], 0
mov dword [ebp - 0x16d8], 0
mov dword [ebp - 0x9f8], 0
mov dword [ebp - 0x16d4], 0
mov dword [ebp - 0x1eb4], 0
mov dword [ebp - 0xbb40], 0
mov dword [ebp - 0xc340], 0
mov dword [ebp - 0xbb3c], 0
mov dword [ebp - 0x16d0], 0
mov dword [0xf0e2ac], 0x93b
mov dword [ebp - 0x27f8], 0
push 0x104
push 0xf0b760
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0xa2a8], eax
mov ecx, dword [ebp + 8]
push ecx
push 0xf08e48
call fcn.00407ae0
add esp, 8
push 0xf0b760
call fcn.00407bd0
add esp, 4
mov dword [ebp - 0xa2a8], eax
jmp 0x401509
mov edx, dword [ebp - 0xa2a8]
sub edx, 1
mov dword [ebp - 0xa2a8], edx
cmp dword [ebp - 0xa2a8], 1
jle 0x40155c
push 1
mov eax, dword [ebp - 0xa2a8]
push eax
push 0xf0b760
call fcn.0040689c
add esp, 0xc
push eax
call fcn.00406838
add esp, 4
cmp eax, 0x5c
jne 0x40155a
mov ecx, dword [ebp - 0xa2a8]
push ecx
push 0xf0b760
call fcn.004069d8
add esp, 8
push eax
push 0xf0cae8
call fcn.00407ae0
add esp, 8
jmp 0x40155c
jmp 0x4014fa
push str.___3898747
push 0xf0e26c
call fcn.00407ae0
add esp, 8
push 0x53
call fcn.004067dc
add esp, 4
push eax
push 0xf0e260
call fcn.00407ae0
add esp, 8
push 0x6d
call fcn.004067dc
add esp, 4
push eax
push 0xf0e260
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
push 0xf0e260
call fcn.00407af0
add esp, 8
push 0x6b
call fcn.004067dc
add esp, 4
push eax
push 0xf0e260
call fcn.00407af0
add esp, 8
push 0x53
call fcn.004067dc
add esp, 4
push eax
push 0xf0e260
call fcn.00407af0
add esp, 8
push 0x61
call fcn.004067dc
add esp, 4
push eax
push 0xf0e260
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
push 0xf0e260
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
push 0xf0e260
call fcn.00407af0
add esp, 8
push 0x76
call fcn.004067dc
add esp, 4
push eax
push 0xf0e260
call fcn.00407af0
add esp, 8
push 0x61
call fcn.004067dc
add esp, 4
push eax
push 0xf0e260
call fcn.00407af0
add esp, 8
mov dword [ebp - 0xa2a8], 1
jmp 0x401679
mov edx, dword [ebp - 0xa2a8]
add edx, 1
mov dword [ebp - 0xa2a8], edx
cmp dword [ebp - 0xa2a8], 0xb
jge 0x4016b0
push 1
mov eax, dword [ebp - 0xa2a8]
push eax
push 0xf0e260
call fcn.0040689c
add esp, 0xc
push eax
call fcn.00406838
add esp, 4
mov ecx, dword [ebp - 0xa2a8]
mov dword [ecx*4 + 0x40fd8c], eax
jmp 0x40166a
push 1
call fcn.00406c83
add esp, 4
mov dword [ebp - 0xa2a8], eax
mov edx, dword [ebp - 0xa2a8]
push edx
push 0x40f03c
push 0xf0e1e4
call fcn.00407a8c
add esp, 0xc
push 5
push 0xf0e1e4
call fcn.00406a2e
add esp, 8
push eax
push 0xf0e20c
call fcn.00407ae0
add esp, 8
fild dword [ebp - 0xa2a8]
sub esp, 8
fstp qword [esp]
call fcn.00406855
add esp, 8
push eax
push 0xf0e1e4
call fcn.00407ae0
add esp, 8
push 5
push 0xf0e1e4
call fcn.00406a2e
add esp, 8
push eax
push 0xf0e234
call fcn.00407ae0
add esp, 8
mov dword [ebp - 0xa2a8], 0
mov dword [0xf0e2ac], 0xe97
push 0xf0e750
push 0xf077a4
call fcn.00407ae0
add esp, 8
push 0xf0e754
lea eax, [ebp - 0x9f0]
push eax
call fcn.00407ae0
add esp, 8
push 0xf077a4
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov dword [ebp - 0x27f8], eax
mov ecx, dword [ebp - 0x27f8]
push ecx
push 0xf077a4
call fcn.004069d8
add esp, 8
push eax
push 0xf077a4
call fcn.00407ae0
add esp, 8
push 0x72
call fcn.004067dc
add esp, 4
push eax
push 0x65
call fcn.004067dc
add esp, 4
push eax
push 0x64
call fcn.004067dc
add esp, 4
push eax
push 0x6c
call fcn.004067dc
add esp, 4
push eax
push 0x6f
call fcn.004067dc
add esp, 4
push eax
push 0x66
call fcn.004067dc
add esp, 4
push eax
push 0x61
call fcn.004067dc
add esp, 4
push eax
push 0xf077a4
push 0x40f040
push 0xf079ac
call fcn.00407a8c
add esp, 0x28
push 0
push 0xf079ac
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0xa2a8], eax
push 0x70
call fcn.004067dc
add esp, 4
push eax
push 0x6d
call fcn.004067dc
add esp, 4
push eax
push 0x74
call fcn.004067dc
add esp, 4
push eax
push 0x78
call fcn.004067dc
add esp, 4
push eax
push 0xf077a4
push 0x40f054
push 0xf078a8
call fcn.00407a8c
add esp, 0x1c
push 0
push 0xf078a8
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0xa2a8], eax
mov dword [ebp - 0xa2a8], 0
push 0x2e
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xc350]
push edx
call fcn.00407ae0
add esp, 8
push 0x62
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xc350]
push eax
call fcn.00407af0
add esp, 8
push 0x61
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xc350]
push ecx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xc350]
push edx
call fcn.00407af0
add esp, 8
push 0x2e
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00407ae0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x14]
push ecx
call fcn.00407af0
add esp, 8
push 0x78
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x14]
push edx
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00407af0
add esp, 8
lea ecx, [ebp - 0xc350]
push ecx
push 4
call fcn.0040647e
add esp, 4
push eax
push 0x40f060
push 0xf078a8
push 0x40f064
push 0xf0dfdc
call fcn.00407a8c
add esp, 0x18
lea edx, [ebp - 0xc350]
push edx
push 5
call fcn.0040647e
add esp, 4
push eax
push 0x40f070
push 0xf078a8
push 0x40f074
push 0xf0e0e0
call fcn.00407a8c
add esp, 0x18
lea eax, [ebp - 0xc350]
push eax
push 1
call fcn.0040647e
add esp, 4
push eax
push 0x40f080
push 0xf078a8
push str._s_s_s_s
push 0xf07ac0
call fcn.00407a8c
add esp, 0x18
push 0xf07ac0
push 0xf0a1d0
call fcn.00407ae0
add esp, 8
push 0xf0e758
lea ecx, [ebp - 0x118]
push ecx
call fcn.00407ae0
add esp, 8
lea edx, [ebp - 0x14]
push edx
push 2
call fcn.0040647e
add esp, 4
push eax
push 0x40f090
lea eax, [ebp - 0x118]
push eax
call fcn.00407a8c
add esp, 0x10
lea ecx, [ebp - 0x118]
push ecx
push 0x40f098
push 0xf078a8
push str._s_s_s
push 0xf0a2d4
call fcn.00407a8c
add esp, 0x14
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x9ad0]
push edx
call fcn.00407ae0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x9ad0]
push eax
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x9ad0]
push edx
call fcn.00407af0
add esp, 8
push 0x7a
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x9ad0]
push eax
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407af0
add esp, 8
push 0x6d
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x9ad0]
push edx
call fcn.00407af0
add esp, 8
push 0x70
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x9ad0]
push eax
call fcn.00407af0
add esp, 8
push 0x3d
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xef8]
push edx
call fcn.00407ae0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xef8]
push eax
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xef8]
push ecx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xef8]
push edx
call fcn.00407af0
add esp, 8
push 0x4d
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xef8]
push eax
call fcn.00407af0
add esp, 8
push 0x59
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xef8]
push ecx
call fcn.00407af0
add esp, 8
push 0x46
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xef8]
push edx
call fcn.00407af0
add esp, 8
push 0x49
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xef8]
push eax
call fcn.00407af0
add esp, 8
push 0x4c
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xef8]
push ecx
call fcn.00407af0
add esp, 8
push 0x45
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xef8]
push edx
call fcn.00407af0
add esp, 8
push 0x53
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xef8]
push eax
call fcn.00407af0
add esp, 8
push 0x3d
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xef8]
push ecx
call fcn.00407af0
add esp, 8
push 0xf078a8
lea edx, [ebp - 0x9ad0]
push edx
push 0x40f0a4
lea eax, [ebp - 0x9f0]
push eax
call fcn.00407a8c
add esp, 0x10
push 0xf079ac
lea ecx, [ebp - 0xef8]
push ecx
push 0x40f0ac
lea edx, [ebp - 0xab7c]
push edx
call fcn.00407a8c
add esp, 0x10
mov dword [0xf0e2ac], 0x8aeb
mov eax, dword [0xf0e2ac]
imul eax, eax, 3
mov dword [0xf0e2ac], eax
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407ae0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x9ad0]
push edx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x9ad0]
push eax
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407af0
add esp, 8
push 0x62
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x9ad0]
push edx
call fcn.00407af0
add esp, 8
push 0x66
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x9ad0]
push eax
call fcn.00407af0
add esp, 8
push 0x63
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x9ad0]
push edx
call fcn.00407af0
add esp, 8
push 0x63
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x9ad0]
push eax
call fcn.00407af0
add esp, 8
push 0x3d
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407af0
add esp, 8
push 0x61
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xbb6c]
push edx
call fcn.00407ae0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xbb6c]
push eax
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xbb6c]
push ecx
call fcn.00407af0
add esp, 8
push 0x72
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xbb6c]
push edx
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xbb6c]
push eax
call fcn.00407af0
add esp, 8
push 0x62
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xbb6c]
push ecx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xbb6c]
push edx
call fcn.00407af0
add esp, 8
push 0x2b
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xbb6c]
push eax
call fcn.00407af0
add esp, 8
push 0x68
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xbb6c]
push ecx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xbb6c]
push edx
call fcn.00407af0
add esp, 8
push 0xf078a8
lea eax, [ebp - 0xbb6c]
push eax
push 0x40f0b4
lea ecx, [ebp - 0x3e1a8]
push ecx
call fcn.00407a8c
add esp, 0x10
push 0xd
call fcn.004067dc
add esp, 4
push eax
push 0xf0de74
call fcn.00407ae0
add esp, 8
push 0xa
call fcn.004067dc
add esp, 4
push eax
push 0xf0de74
call fcn.00407af0
add esp, 8
lea edx, [ebp - 0x3e1a8]
push edx
push 0xf0de74
call fcn.00407af0
add esp, 8
push 0xd
call fcn.004067dc
add esp, 4
push eax
push 0xf0de74
call fcn.00407af0
add esp, 8
push 0xa
call fcn.004067dc
add esp, 4
push eax
push 0xf0de74
call fcn.00407af0
add esp, 8
push 0xf0e75c
push 0xf0a3d8
call fcn.00407ae0
add esp, 8
push 0x30
call fcn.004067dc
add esp, 4
push eax
push 0x2f
call fcn.004067dc
add esp, 4
push eax
push 0x20
call fcn.004067dc
add esp, 4
push eax
push 0x54
call fcn.004067dc
add esp, 4
push eax
push 0x46
call fcn.004067dc
add esp, 4
push eax
push 0x49
call fcn.004067dc
add esp, 4
push eax
push 0x48
call fcn.004067dc
add esp, 4
push eax
push 0x53
call fcn.004067dc
add esp, 4
push eax
push str._s_s_s_s_s_s_s_s
lea eax, [ebp - 0xb364]
push eax
call fcn.00407a8c
add esp, 0x28
push 0x40
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xdf4]
push ecx
call fcn.00407ae0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xdf4]
push edx
call fcn.00407af0
add esp, 8
push 0x63
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xdf4]
push eax
call fcn.00407af0
add esp, 8
push 0x68
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xdf4]
push ecx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xdf4]
push edx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xdf4]
push eax
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xdf4]
push ecx
call fcn.00407af0
add esp, 8
push 0x66
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xdf4]
push edx
call fcn.00407af0
add esp, 8
push 0x66
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xdf4]
push eax
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xcb30]
push ecx
call fcn.00407ae0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xcb30]
push edx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xcb30]
push eax
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xcb30]
push ecx
call fcn.00407af0
add esp, 8
push 0x63
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xcb30]
push edx
call fcn.00407af0
add esp, 8
push 0x6d
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xcb30]
push eax
call fcn.00407af0
add esp, 8
push 0x64
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xcb30]
push ecx
call fcn.00407af0
add esp, 8
push 0x6c
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xcb30]
push edx
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xcb30]
push eax
call fcn.00407af0
add esp, 8
push 0x6e
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xcb30]
push ecx
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xcb30]
push edx
call fcn.00407af0
add esp, 8
push 0x3d
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xcb30]
push eax
call fcn.00407af0
add esp, 8
push 0xa
call fcn.004067dc
add esp, 4
push eax
push 0xd
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xb364]
push ecx
push 0xa
call fcn.004067dc
add esp, 4
push eax
push 0xd
call fcn.004067dc
add esp, 4
push eax
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0xcb30]
push eax
push 0xa
call fcn.004067dc
add esp, 4
push eax
push 0xd
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x118]
push ecx
lea edx, [ebp - 0x9ad0]
push edx
push 0xa
call fcn.004067dc
add esp, 4
push eax
push 0xd
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xab7c]
push eax
push 0xa
call fcn.004067dc
add esp, 4
push eax
push 0xd
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x9f0]
push ecx
push 0xa
call fcn.004067dc
add esp, 4
push eax
push 0xd
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xdf4]
push edx
push str._s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s
push 0xf0a3d8
call fcn.00407a8c
add esp, 0x58
mov eax, dword [ebp + 8]
push eax
push 0x20
call fcn.004067dc
add esp, 4
push eax
push 0x22
call fcn.004067dc
add esp, 4
push eax
push 0xf0b760
push 0x22
call fcn.004067dc
add esp, 4
push eax
push 0x40f0fc
push 0xf07ac0
call fcn.00407a8c
add esp, 0x1c
mov dword [0xf0e2ac], 0x368b23
mov ecx, dword [0xf0e2ac]
sub ecx, 0xeb
mov dword [0xf0e2ac], ecx
push 0xf0a1d0
push 0x20
call fcn.004067dc
add esp, 4
push eax
push 0x6c
call fcn.004067dc
add esp, 4
push eax
push 0x65
call fcn.004067dc
add esp, 4
push eax
push 0x64
call fcn.004067dc
add esp, 4
push eax
push str._s_s_s_s_s
lea edx, [ebp - 0x2020]
push edx
call fcn.00407a8c
add esp, 0x1c
push 0xf077a4
lea eax, [ebp - 0xaa78]
push eax
call fcn.00407ae0
add esp, 8
lea ecx, [ebp - 0xaa78]
push ecx
lea edx, [ebp - 0xc33c]
push edx
call fcn.00407ae0
add esp, 8
lea eax, [ebp - 0xaa78]
push eax
lea ecx, [ebp - 0x3e040]
push ecx
call fcn.00407ae0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xaa78]
push edx
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xaa78]
push eax
call fcn.00407af0
add esp, 8
push 0x36
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xaa78]
push ecx
call fcn.00407af0
add esp, 8
push 0x34
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xaa78]
push edx
call fcn.00407af0
add esp, 8
push 0x2e
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xaa78]
push eax
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xaa78]
push ecx
call fcn.00407af0
add esp, 8
push 0x78
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xaa78]
push edx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xaa78]
push eax
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xc33c]
push ecx
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xc33c]
push edx
call fcn.00407af0
add esp, 8
push 0x36
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xc33c]
push eax
call fcn.00407af0
add esp, 8
push 0x34
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xc33c]
push ecx
call fcn.00407af0
add esp, 8
push 0x2e
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xc33c]
push edx
call fcn.00407af0
add esp, 8
push 0x62
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xc33c]
push eax
call fcn.00407af0
add esp, 8
push 0x61
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xc33c]
push ecx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xc33c]
push edx
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e040]
push eax
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e040]
push ecx
call fcn.00407af0
add esp, 8
push 0x36
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x3e040]
push edx
call fcn.00407af0
add esp, 8
push 0x34
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e040]
push eax
call fcn.00407af0
add esp, 8
push 0x2e
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e040]
push ecx
call fcn.00407af0
add esp, 8
push 0x66
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x3e040]
push edx
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e040]
push eax
call fcn.00407af0
add esp, 8
push 0x6c
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e040]
push ecx
call fcn.00407af0
add esp, 8
push 0x25
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xa2a0]
push edx
call fcn.00407ae0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xbb38]
push eax
call fcn.00407ae0
add esp, 8
push 0x63
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xbb38]
push ecx
call fcn.00407af0
add esp, 8
push 0x68
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xbb38]
push edx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xbb38]
push eax
call fcn.00407af0
add esp, 8
push 0x3a
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xbb38]
push ecx
call fcn.00407af0
add esp, 8
push 0x30
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xbb38]
push edx
call fcn.00407af0
add esp, 8
push 0x3e
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xbb38]
push eax
call fcn.00407af0
add esp, 8
lea ecx, [ebp - 0xbb38]
push ecx
lea edx, [ebp - 0xb350]
push edx
call fcn.00407ae0
add esp, 8
lea eax, [ebp - 0xaa78]
push eax
lea ecx, [ebp - 0xb350]
push ecx
call fcn.00407af0
add esp, 8
push 0x40f114
lea edx, [ebp - 0xaa78]
push edx
call fcn.00407a79
add esp, 8
mov dword [ebp - 0x27f4], eax
cmp dword [ebp - 0x27f4], 0
je 0x4027a0
push 0
push 0
mov eax, dword [ebp - 0x27f4]
push eax
call fcn.004079cd
add esp, 0xc
mov ecx, dword [ebp - 0x27f4]
mov edx, dword [ecx + 4]
sub edx, 1
mov eax, dword [ebp - 0x27f4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x27f4]
cmp dword [ecx + 4], 0
jl 0x402789
mov edx, dword [ebp - 0x27f4]
mov eax, dword [edx]
mov byte [eax], 0x30
mov ecx, 0x30
and ecx, 0xff
mov dword [ebp - 0x3e97c], ecx
mov edx, dword [ebp - 0x27f4]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp - 0x27f4]
mov dword [ecx], eax
jmp 0x4027a0
mov edx, dword [ebp - 0x27f4]
push edx
push 0x30
call fcn.004078b8
add esp, 8
mov dword [ebp - 0x3e97c], eax
mov eax, dword [ebp - 0x27f4]
push eax
call fcn.00407862
add esp, 4
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407ae0
add esp, 8
push 0x66
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x78
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x22
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
lea edx, [ebp - 0xa2a0]
push edx
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x53
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x79
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x6d
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x52
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
lea edx, [ebp - 0xa2a0]
push edx
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x5c
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x53
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x79
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x6e
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x61
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x76
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x5c
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x22
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x63
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x68
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x3a
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x31
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x3e
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407ae0
add esp, 8
push 0x66
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x78
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x22
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
lea ecx, [ebp - 0xa2a0]
push ecx
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x53
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x79
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x6d
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x52
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
lea ecx, [ebp - 0xa2a0]
push ecx
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x5c
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x53
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x79
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x6e
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x61
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x76
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x5c
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x22
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x63
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x68
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x3a
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x31
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407af0
add esp, 8
push 0x3e
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x22
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
lea eax, [ebp - 0xaa78]
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407af0
add esp, 8
push 0x22
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407af0
add esp, 8
push 0x40
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xcb20]
push eax
call fcn.00407ae0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xcb20]
push ecx
call fcn.00407af0
add esp, 8
push 0x63
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xcb20]
push edx
call fcn.00407af0
add esp, 8
push 0x68
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xcb20]
push eax
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xcb20]
push ecx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xcb20]
push edx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xcb20]
push eax
call fcn.00407af0
add esp, 8
push 0x66
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xcb20]
push ecx
call fcn.00407af0
add esp, 8
push 0x66
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xcb20]
push edx
call fcn.00407af0
add esp, 8
push 0xd
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xcb20]
push eax
call fcn.00407af0
add esp, 8
push 0xa
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xcb20]
push ecx
call fcn.00407af0
add esp, 8
lea edx, [ebp - 0x99cc]
push edx
lea eax, [ebp - 0xcb20]
push eax
call fcn.00407af0
add esp, 8
push 0xd
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0xcb20]
push ecx
call fcn.00407af0
add esp, 8
push 0xa
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xcb20]
push edx
call fcn.00407af0
add esp, 8
push 0x22
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e978]
push eax
call fcn.00407ae0
add esp, 8
push 0x25
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e978]
push ecx
call fcn.00407af0
add esp, 8
push 0x53
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x3e978]
push edx
call fcn.00407af0
add esp, 8
push 0x79
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e978]
push eax
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e978]
push ecx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x3e978]
push edx
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e978]
push eax
call fcn.00407af0
add esp, 8
push 0x6d
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e978]
push ecx
call fcn.00407af0
add esp, 8
push 0x52
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x3e978]
push edx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e978]
push eax
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e978]
push ecx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x3e978]
push edx
call fcn.00407af0
add esp, 8
push 0x25
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e978]
push eax
call fcn.00407af0
add esp, 8
push 0x5c
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e978]
push ecx
call fcn.00407af0
add esp, 8
push 0x53
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x3e978]
push edx
call fcn.00407af0
add esp, 8
push 0x79
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e978]
push eax
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e978]
push ecx
call fcn.00407af0
add esp, 8
push 0x6e
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x3e978]
push edx
call fcn.00407af0
add esp, 8
push 0x61
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e978]
push eax
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e978]
push ecx
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x3e978]
push edx
call fcn.00407af0
add esp, 8
push 0x76
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e978]
push eax
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e978]
push ecx
call fcn.00407af0
add esp, 8
push 0x5c
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x3e978]
push edx
call fcn.00407af0
add esp, 8
push 0x63
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e978]
push eax
call fcn.00407af0
add esp, 8
push 0x6d
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e978]
push ecx
call fcn.00407af0
add esp, 8
push 0x64
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x3e978]
push edx
call fcn.00407af0
add esp, 8
push 0x2e
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e978]
push eax
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e978]
push ecx
call fcn.00407af0
add esp, 8
push 0x78
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x3e978]
push edx
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x3e978]
push eax
call fcn.00407af0
add esp, 8
push 0x22
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x3e978]
push ecx
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x27f0]
push edx
call fcn.00407ae0
add esp, 8
push 0x63
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x27f0]
push eax
call fcn.00407af0
add esp, 8
push 0x68
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x27f0]
push ecx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x27f0]
push edx
call fcn.00407af0
add esp, 8
push 0x3a
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x27f0]
push eax
call fcn.00407af0
add esp, 8
lea ecx, [ebp - 0x3e978]
push ecx
lea edx, [ebp - 0x27f0]
push edx
call fcn.00407af0
add esp, 8
push 0x3e
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x27f0]
push eax
call fcn.00407af0
add esp, 8
lea ecx, [ebp - 0x3e040]
push ecx
lea edx, [ebp - 0x27f0]
push edx
call fcn.00407af0
add esp, 8
lea eax, [ebp - 0x27f0]
push eax
lea ecx, [ebp - 0xcb20]
push ecx
call fcn.00407af0
add esp, 8
push 0xd
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0xcb20]
push edx
call fcn.00407af0
add esp, 8
push 0xa
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0xcb20]
push eax
call fcn.00407af0
add esp, 8
push 0x40f118
lea ecx, [ebp - 0xc33c]
push ecx
call fcn.00407a79
add esp, 8
mov dword [ebp - 0x9f4], eax
cmp dword [ebp - 0x9f4], 0
je 0x403664
mov edx, dword [ebp - 0x9f4]
push edx
lea eax, [ebp - 0xcb20]
push eax
call fcn.0040781f
add esp, 8
mov ecx, dword [ebp - 0x9f4]
push ecx
call fcn.00407862
add esp, 4
mov dword [ebp - 0x3044], 0x3c
lea edx, [ebp - 0xc33c]
mov dword [ebp - 0x3034], edx
mov dword [ebp - 0x3040], 0x40
mov dword [ebp - 0x303c], 0
mov dword [ebp - 0x3038], 0x40f11c
mov dword [ebp - 0x3030], 0xf0e760
mov dword [ebp - 0x302c], 0
mov dword [ebp - 0x3028], 0
mov dword [ebp - 0x3024], 0x1d
lea eax, [ebp - 0x3044]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x300c], 0
je 0x403709
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x300c]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 0x300c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00403c0a
mov dword [ebp - 0x2838], 0
push 0x40f124
lea eax, [ebp - 0x3e040]
push eax
call fcn.00407a79
add esp, 8
mov dword [ebp - 0x1eb0], eax
cmp dword [ebp - 0x1eb0], 0
je 0x403790
push 2
push 0
mov ecx, dword [ebp - 0x1eb0]
push ecx
call fcn.004079cd
add esp, 0xc
mov edx, dword [ebp - 0x1eb0]
push edx
call fcn.004076c7
add esp, 4
mov dword [ebp - 4], eax
push 0
push 1
mov eax, dword [ebp - 0x1eb0]
push eax
call fcn.004079cd
add esp, 0xc
mov ecx, dword [ebp - 0x1eb0]
push ecx
mov edx, dword [ebp - 4]
sub edx, 3
push edx
lea eax, [ebp - 0x16c8]
push eax
call fcn.00407670
add esp, 0xc
mov ecx, dword [ebp - 0x1eb0]
push ecx
call fcn.00407862
add esp, 4
lea edx, [ebp - 0x16c8]
push edx
lea eax, [ebp - 0xde4]
push eax
call fcn.00407ae0
add esp, 8
push str.__C
lea ecx, [ebp - 0x8e8]
push ecx
call fcn.00407ae0
add esp, 8
push 0xf0a1d0
lea edx, [ebp - 0x8e8]
push edx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x8e8]
push eax
call fcn.00407af0
add esp, 8
push 0xf07ac0
lea ecx, [ebp - 0x8e8]
push ecx
call fcn.00407af0
add esp, 8
push 0x40f130
lea edx, [ebp - 0xaa78]
push edx
call fcn.00407a79
add esp, 8
mov dword [ebp - 0x16cc], eax
cmp dword [ebp - 0x16cc], 0
je 0x403b59
push 0
push 0
mov eax, dword [ebp - 0x16cc]
push eax
call fcn.004079cd
add esp, 0xc
mov ecx, dword [ebp - 0x16cc]
mov edx, dword [ecx + 4]
sub edx, 1
mov eax, dword [ebp - 0x16cc]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x16cc]
cmp dword [ecx + 4], 0
jl 0x403892
mov edx, dword [ebp - 0x16cc]
mov eax, dword [edx]
movsx ecx, byte [eax]
and ecx, 0xff
mov dword [ebp - 0x3e980], ecx
mov edx, dword [ebp - 0x16cc]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp - 0x16cc]
mov dword [ecx], eax
jmp 0x4038a7
mov edx, dword [ebp - 0x16cc]
push edx
call fcn.00407597
add esp, 4
mov dword [ebp - 0x3e980], eax
mov eax, dword [ebp - 0x3e980]
mov dword [ebp - 0x8ec], eax
cmp dword [ebp - 0x8ec], 0x31
jne 0x403a0a
cmp dword [0xf0e2b0], 0
jne 0x403965
mov dword [ebp - 0x2834], 0x3c
lea ecx, [ebp - 0xde4]
mov dword [ebp - 0x2824], ecx
mov dword [ebp - 0x2830], 0x40
mov dword [ebp - 0x282c], 0
mov dword [ebp - 0x2828], 0x40f134
lea edx, [ebp - 0x8e8]
mov dword [ebp - 0x2820], edx
mov dword [ebp - 0x281c], 0
mov dword [ebp - 0x2818], 0
mov dword [ebp - 0x2814], 0x1d
lea eax, [ebp - 0x2834]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x27fc], 0
je 0x403965
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x27fc]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, dword [ebp - 0x27fc]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0xf0e2b0], 6
jne 0x403a0a
mov dword [ebp - 0x2834], 0x3c
lea eax, [ebp - 0xde4]
mov dword [ebp - 0x2824], eax
mov dword [ebp - 0x2830], 0x40
mov dword [ebp - 0x282c], 0
mov dword [ebp - 0x2828], 0x40f13c
lea ecx, [ebp - 0x8e8]
mov dword [ebp - 0x2820], ecx
mov dword [ebp - 0x281c], 0
mov dword [ebp - 0x2818], 1
mov dword [ebp - 0x2814], 0x1d
lea edx, [ebp - 0x2834]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x27fc], 0
je 0x403a0a
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov eax, dword [ebp - 0x27fc]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x27fc]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x8ec], 0x30
jne 0x403b59
cmp dword [0xf0e2b0], 0
jne 0x403ab8
mov dword [ebp - 0x2834], 0x3c
mov dword [ebp - 0x2824], 0xf0a1d0
mov dword [ebp - 0x2830], 0x40
mov dword [ebp - 0x282c], 0
mov dword [ebp - 0x2828], 0x40f144
mov dword [ebp - 0x2820], 0xf07ac0
mov dword [ebp - 0x281c], 0
mov dword [ebp - 0x2818], 0
mov dword [ebp - 0x2814], 0x1d
lea edx, [ebp - 0x2834]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x27fc], 0
je 0x403ab8
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov eax, dword [ebp - 0x27fc]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x27fc]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0xf0e2b0], 6
jne 0x403b59
mov dword [ebp - 0x2834], 0x3c
mov dword [ebp - 0x2824], 0xf0a1d0
mov dword [ebp - 0x2830], 0x40
mov dword [ebp - 0x282c], 0
mov dword [ebp - 0x2828], str.open
mov dword [ebp - 0x2820], 0xf07ac0
mov dword [ebp - 0x281c], 0
mov dword [ebp - 0x2818], 1
mov dword [ebp - 0x2814], 0x1d
lea edx, [ebp - 0x2834]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x27fc], 0
je 0x403b59
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov eax, dword [ebp - 0x27fc]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x27fc]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x16cc]
push edx
call fcn.00407862
add esp, 4
cmp dword [0xf07ab8], 1
jne 0x403bba
mov dword [ebp - 0xa2a8], 0
jmp 0x403b8c
mov eax, dword [ebp - 0xa2a8]
add eax, 1
mov dword [ebp - 0xa2a8], eax
mov ecx, dword [0xf07abc]
sub ecx, 2
cmp dword [ebp - 0xa2a8], ecx
jge 0x403bba
mov edx, dword [ebp - 0xa2a8]
imul edx, edx, 0x3e8
add edx, 0x40fdbc
push edx
call fcn.0040756d
add esp, 4
jmp 0x403b7d
mov eax, dword [0xf07abc]
sub eax, 2
mov dword [ebp - 0xa2a8], eax
jmp 0x403bd9
mov ecx, dword [ebp - 0xa2a8]
add ecx, 1
mov dword [ebp - 0xa2a8], ecx
mov edx, dword [ebp - 0xa2a8]
cmp edx, dword [0xf07abc]
jge 0x403c03
mov eax, dword [ebp - 0xa2a8]
imul eax, eax, 0x3e8
add eax, 0x40fdbc
push eax
call fcn.0040756d
add esp, 4
jmp 0x403bca
xor eax, eax
pop edi
mov esp, ebp
pop ebp
ret