Function at 0x6113b0
Capabilities:
Get file size
Parse pe header
Read file on windows
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x69d7a7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x160
push ebp
push esi
push 0x24
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0xc], esi
test esi, esi
mov dword [esp + 0x170], 0
je 0x61142b
lea eax, [esp + 0xb]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0xa]
lea edx, [esp + 9]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x178], 1
call fcn.0061c460
mov byte [esp + 0x170], 2
mov dword [esi], 0x6a985c
mov byte [esp + 0x170], 0
jmp 0x61142d
xor esi, esi
or ebp, 0xffffffff
push 0x24
mov dword [esp + 0x174], ebp
mov dword [0x8186e8], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0xc], esi
test esi, esi
mov dword [esp + 0x170], 3
je 0x61149b
lea eax, [esp + 9]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0xa]
lea edx, [esp + 0xb]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x178], 4
call fcn.0061c670
mov byte [esp + 0x170], 5
mov dword [esi], 0x6a9858
mov byte [esp + 0x170], 3
jmp 0x61149d
xor esi, esi
push ebx
mov dword [esp + 0x174], ebp
push 0x24
mov dword [0x8186ec], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
mov ebx, 6
test esi, esi
mov dword [esp + 0x174], ebx
je 0x611509
lea eax, [esp + 0xd]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0xe]
lea edx, [esp + 0xf]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x17c], 7
call fcn.0061c890
mov byte [esp + 0x174], 8
mov dword [esi], 0x6a9854
mov byte [esp + 0x174], bl
jmp 0x61150b
xor esi, esi
mov dword [esp + 0x174], ebp
push 0x24
mov dword [0x8186f0], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
mov ebx, 9
test esi, esi
mov dword [esp + 0x174], ebx
je 0x611576
lea eax, [esp + 0xd]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0xe]
lea edx, [esp + 0xf]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x17c], 0xa
call fcn.0061cab0
mov byte [esp + 0x174], 0xb
mov dword [esi], 0x6a9850
mov byte [esp + 0x174], bl
jmp 0x611578
xor esi, esi
mov dword [esp + 0x174], ebp
push 0x24
mov dword [0x818758], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
mov ebx, 0xc
test esi, esi
mov dword [esp + 0x174], ebx
je 0x6115e3
lea eax, [esp + 0xd]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0xe]
lea edx, [esp + 0xf]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x17c], 0xd
call fcn.0061ccd0
mov byte [esp + 0x174], 0xe
mov dword [esi], 0x6a984c
mov byte [esp + 0x174], bl
jmp 0x6115e5
xor esi, esi
push edi
mov dword [esp + 0x178], ebp
mov dword [0x8186f4], esi
mov edi, 0x8186f8
mov ebx, 0xf
push 0x24
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
test esi, esi
mov dword [esp + 0x178], ebx
je 0x611656
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x10
call fcn.0061cef0
mov byte [esp + 0x178], 0x11
mov dword [esi], 0x6a9848
mov byte [esp + 0x178], bl
jmp 0x611658
xor esi, esi
mov dword [esp + 0x178], ebp
mov dword [edi], esi
add edi, 4
cmp edi, 0x818758
jl 0x6115fd
push 0x24
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov ebx, 0x12
test esi, esi
mov dword [esp + 0x178], ebx
je 0x6116ca
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x13
call fcn.0061cab0
mov byte [esp + 0x178], 0x14
mov dword [esi], 0x6a9850
mov byte [esp + 0x178], bl
jmp 0x6116cc
xor esi, esi
mov dword [esp + 0x178], ebp
push 0x24
mov dword [0x81875c], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov ebx, 0x15
test esi, esi
mov dword [esp + 0x178], ebx
je 0x611737
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x16
call fcn.0061d110
mov byte [esp + 0x178], 0x17
mov dword [esi], 0x6a9844
mov byte [esp + 0x178], bl
jmp 0x611739
xor esi, esi
mov dword [esp + 0x178], ebp
push 0x24
mov dword [0x818760], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov ebx, 0x18
test esi, esi
mov dword [esp + 0x178], ebx
je 0x6117a4
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x19
call fcn.0061d330
mov byte [esp + 0x178], 0x1a
mov dword [esi], 0x6a9840
mov byte [esp + 0x178], bl
jmp 0x6117a6
xor esi, esi
mov dword [esp + 0x178], ebp
push 0x24
mov dword [0x818764], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov ebx, 0x1b
test esi, esi
mov dword [esp + 0x178], ebx
je 0x611811
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x1c
call fcn.0061d540
mov byte [esp + 0x178], 0x1d
mov dword [esi], 0x6a983c
mov byte [esp + 0x178], bl
jmp 0x611813
xor esi, esi
mov dword [esp + 0x178], ebp
push 0x24
mov dword [0x8186e4], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov ebx, 0x1e
test esi, esi
mov dword [esp + 0x178], ebx
je 0x61187e
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x1f
call fcn.0061d750
mov byte [esp + 0x178], 0x20
mov dword [esi], 0x6a9838
mov byte [esp + 0x178], bl
jmp 0x611880
xor esi, esi
mov dword [esp + 0x178], ebp
push 0x24
mov dword [0x818768], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov ebx, 0x21
test esi, esi
mov dword [esp + 0x178], ebx
je 0x6118eb
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x22
call fcn.0061d960
mov byte [esp + 0x178], 0x23
mov dword [esi], 0x6a9834
mov byte [esp + 0x178], bl
jmp 0x6118ed
xor esi, esi
mov dword [esp + 0x178], ebp
push 0x24
mov dword [0x81876c], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
test esi, esi
mov dword [esp + 0x178], 0x24
je 0x611958
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x25
call fcn.0061db70
mov byte [esp + 0x178], 0x26
mov dword [esi], 0x6a9830
mov byte [esp + 0x178], 0x24
jmp 0x61195a
xor esi, esi
mov dword [esp + 0x178], ebp
push 0x24
mov dword [0x818770], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov ebx, 0x27
test esi, esi
mov dword [esp + 0x178], ebx
je 0x6119c5
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x28
call fcn.0061dd80
mov byte [esp + 0x178], 0x29
mov dword [esi], 0x6a982c
mov byte [esp + 0x178], bl
jmp 0x6119c7
xor esi, esi
mov dword [esp + 0x178], ebp
push 0x24
mov dword [0x818774], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov ebx, 0x2a
test esi, esi
mov dword [esp + 0x178], ebx
je 0x611a32
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x2b
call fcn.0061df90
mov byte [esp + 0x178], 0x2c
mov dword [esi], 0x6a9828
mov byte [esp + 0x178], bl
jmp 0x611a34
xor esi, esi
mov dword [esp + 0x178], ebp
push 0x24
mov dword [0x818778], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov ebx, 0x2d
test esi, esi
mov dword [esp + 0x178], ebx
je 0x611a9f
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x2e
call fcn.0061e1a0
mov byte [esp + 0x178], 0x2f
mov dword [esi], 0x6a9824
mov byte [esp + 0x178], bl
jmp 0x611aa1
xor esi, esi
mov dword [esp + 0x178], ebp
push 0x24
mov dword [0x81877c], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov ebx, 0x30
test esi, esi
mov dword [esp + 0x178], ebx
je 0x611b0c
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x31
call fcn.0061e3b0
mov byte [esp + 0x178], 0x32
mov dword [esi], 0x6a9820
mov byte [esp + 0x178], bl
jmp 0x611b0e
xor esi, esi
mov dword [esp + 0x178], ebp
push 0x24
mov dword [0x818780], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov ebx, 0x33
test esi, esi
mov dword [esp + 0x178], ebx
je 0x611b79
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x34
call fcn.0061e5c0
mov byte [esp + 0x178], 0x35
mov dword [esi], 0x6a981c
mov byte [esp + 0x178], bl
jmp 0x611b7b
xor esi, esi
mov dword [esp + 0x178], ebp
push 0x24
mov dword [0x818784], esi
call fcn.00673b05
mov esi, eax
add esp, 4
mov dword [esp + 0x14], esi
mov ebx, 0x36
test esi, esi
mov dword [esp + 0x178], ebx
je 0x611be6
lea eax, [esp + 0x11]
lea ecx, [esi + 4]
push eax
call fcn.00590890
lea ecx, [esp + 0x12]
lea edx, [esp + 0x13]
push ecx
push edx
lea ecx, [esi + 0x14]
mov byte [esp + 0x180], 0x37
call fcn.0061e7d0
mov byte [esp + 0x178], 0x38
mov dword [esi], 0x6a9818
mov byte [esp + 0x178], bl
jmp 0x611be8
xor esi, esi
mov al, byte [esp + 0x11]
mov dword [esp + 0x178], ebp
push 0
lea ecx, [esp + 0x64]
mov dword [0x818788], esi
mov byte [esp + 0x64], al
call fcn.004031c0
mov edi, 0x6d8e00
mov ecx, ebp
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x6d8e00
lea ecx, [esp + 0x68]
call fcn.004083a0
mov edi, 0x6d8df8
mov ecx, ebp
xor eax, eax
mov dword [esp + 0x178], 0x39
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x6d8df8
lea ecx, [esp + 0x68]
call fcn.004083a0
mov cl, byte [esp + 0x11]
push 0
mov byte [esp + 0x44], cl
lea ecx, [esp + 0x44]
call fcn.004031c0
lea edx, [esp + 0x60]
lea eax, [esp + 0x18]
push edx
push 0x6d8dec
push eax
mov byte [esp + 0x184], 0x3a
call fcn.004dbb40
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x3b
push ecx
push 0
push eax
lea ecx, [esp + 0x4c]
call fcn.00402fc0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x611cba
mov esi, 0x6a3560
mov dl, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0x30], dl
call fcn.004031c0
mov edi, esi
mov ecx, ebp
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x34]
call fcn.004083a0
mov eax, dword [0x8186e8]
mov ebx, dword [sym.imp.kernel32.dll_CloseHandle]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x34]
test eax, eax
mov byte [esp + 0x178], 0x3c
jne 0x611d09
xor eax, eax
jmp 0x611ec8
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x611d16
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x611d58
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x611d43
mov eax, 0x6a3560
push eax
push 0x6d40b4
call fcn.0044a330
add esp, 8
xor eax, eax
jmp 0x611ec8
lea ecx, [esp + 0x2c]
push 0x6d40ac
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
lea eax, [esp + 0x3c]
mov byte [esp + 0x178], 0x3d
push eax
push ebp
mov dword [esp + 0x44], 0
call dword [sym.imp.kernel32.dll_GetFileSize]
mov edi, eax
test edi, edi
ja 0x611dc4
push ebp
call ebx
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x611da1
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x3c
push 1
call fcn.004031c0
xor eax, eax
jmp 0x611ec8
push edi
call fcn.00673b05
add esp, 4
lea ecx, [esp + 0x28]
mov esi, eax
mov dword [esp + 0x28], 0
push 0
push ecx
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_ReadFile]
push ebp
call ebx
push 0x1608
push 0x6081
push 0x816
push edi
push esi
call fcn.0044f670
mov eax, dword [esp + 0x30]
add esp, 0x14
test eax, eax
jne 0x611e10
mov eax, 0x6a3560
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
lea edx, [esp + 0x28]
push 0
push edx
mov ebp, eax
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_WriteFile]
push ebp
call ebx
push esi
call fcn.006713a0
mov eax, dword [esp + 0x20]
add esp, 4
test eax, eax
jne 0x611e54
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ecx, dword [esp + 0x14]
mov esi, eax
push esi
call fcn.006260f0
push esi
mov edi, eax
call ebx
test edi, edi
jne 0x611e9d
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x611e8f
mov eax, 0x6a3560
push eax
push 0x6d4088
call fcn.0044a330
add esp, 8
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x611eaa
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x3c
push 1
call fcn.004031c0
mov eax, edi
test eax, eax
push 1
lea ecx, [esp + 0x30]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x611f2c
lea eax, [esp + 0x40]
push 0x6d39a4
lea ecx, [esp + 0x1c]
push eax
push ecx
call fcn.00408440
add esp, 0xc
mov edx, dword [0x6a3564]
mov ecx, dword [esp + 0x180]
push edx
push 0
push eax
mov byte [esp + 0x184], 0x3e
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov edi, 0x6d8ddc
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x6d8ddc
lea ecx, [esp + 0x48]
call fcn.004083a0
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x611f57
mov esi, 0x6a3560
mov al, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0x30], al
call fcn.004031c0
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x34]
call fcn.004083a0
mov eax, dword [esp + 0x34]
mov ecx, dword [0x8186ec]
test eax, eax
mov byte [esp + 0x178], 0x3f
mov dword [esp + 0x3c], ecx
jne 0x611fa2
xor eax, eax
jmp 0x61216b
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x611faf
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x611ff1
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x611fdc
mov eax, 0x6a3560
push eax
push 0x6d40b4
call fcn.0044a330
add esp, 8
xor eax, eax
jmp 0x61216b
lea edx, [esp + 0x2c]
push 0x6d40ac
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.00408440
add esp, 0xc
lea ecx, [esp + 0x14]
mov byte [esp + 0x178], 0x40
push ecx
push ebp
mov dword [esp + 0x1c], 0
call dword [sym.imp.kernel32.dll_GetFileSize]
mov edi, eax
test edi, edi
ja 0x612061
push ebp
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x61203e
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x3f
push 1
call fcn.004031c0
xor eax, eax
jmp 0x61216b
push edi
call fcn.00673b05
add esp, 4
lea edx, [esp + 0x28]
mov esi, eax
mov dword [esp + 0x28], 0
push 0
push edx
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_ReadFile]
mov ebx, dword [sym.imp.kernel32.dll_CloseHandle]
push ebp
call ebx
push 0x1608
push 0x6081
push 0x816
push edi
push esi
call fcn.0044f670
mov eax, dword [esp + 0x30]
add esp, 0x14
test eax, eax
jne 0x6120b3
mov eax, 0x6a3560
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
lea eax, [esp + 0x28]
push 0
push eax
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_WriteFile]
push ebp
call ebx
push esi
call fcn.006713a0
mov eax, dword [esp + 0x20]
add esp, 4
test eax, eax
jne 0x6120f7
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ecx, dword [esp + 0x3c]
mov esi, eax
push esi
call fcn.006264d0
push esi
mov edi, eax
call ebx
test edi, edi
jne 0x612140
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x612132
mov eax, 0x6a3560
push eax
push 0x6d4088
call fcn.0044a330
add esp, 8
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x61214d
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x3f
push 1
call fcn.004031c0
mov eax, edi
test eax, eax
push 1
lea ecx, [esp + 0x30]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x6121cf
lea ecx, [esp + 0x40]
push 0x6d39a4
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x41
push ecx
mov ecx, dword [esp + 0x184]
push 0
push eax
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
lea edx, [esp + 0x60]
lea eax, [esp + 0x18]
push edx
push 0x6d8dd0
push eax
call fcn.004dbb40
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x42
push ecx
push 0
push eax
lea ecx, [esp + 0x4c]
call fcn.00402fc0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x612221
mov esi, 0x6a3560
mov dl, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0x30], dl
call fcn.004031c0
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x34]
call fcn.004083a0
mov eax, dword [0x8186f0]
mov byte [esp + 0x178], 0x43
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x61226b
xor eax, eax
jmp 0x612434
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x612278
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x6122ba
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x6122a5
mov eax, 0x6a3560
push eax
push 0x6d40b4
call fcn.0044a330
add esp, 8
xor eax, eax
jmp 0x612434
lea ecx, [esp + 0x2c]
push 0x6d40ac
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
lea eax, [esp + 0x14]
mov byte [esp + 0x178], 0x44
push eax
push ebp
mov dword [esp + 0x1c], 0
call dword [sym.imp.kernel32.dll_GetFileSize]
mov edi, eax
test edi, edi
ja 0x61232a
push ebp
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x612307
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x43
push 1
call fcn.004031c0
xor eax, eax
jmp 0x612434
push edi
call fcn.00673b05
add esp, 4
lea ecx, [esp + 0x28]
mov esi, eax
mov dword [esp + 0x28], 0
push 0
push ecx
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_ReadFile]
mov ebx, dword [sym.imp.kernel32.dll_CloseHandle]
push ebp
call ebx
push 0x1608
push 0x6081
push 0x816
push edi
push esi
call fcn.0044f670
mov eax, dword [esp + 0x30]
add esp, 0x14
test eax, eax
jne 0x61237c
mov eax, 0x6a3560
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
lea edx, [esp + 0x28]
push 0
push edx
mov ebp, eax
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_WriteFile]
push ebp
call ebx
push esi
call fcn.006713a0
mov eax, dword [esp + 0x20]
add esp, 4
test eax, eax
jne 0x6123c0
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ecx, dword [esp + 0x3c]
mov esi, eax
push esi
call fcn.006268b0
push esi
mov edi, eax
call ebx
test edi, edi
jne 0x612409
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x6123fb
mov eax, 0x6a3560
push eax
push 0x6d4088
call fcn.0044a330
add esp, 8
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x612416
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x43
push 1
call fcn.004031c0
mov eax, edi
test eax, eax
push 1
lea ecx, [esp + 0x30]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x612498
lea eax, [esp + 0x40]
push 0x6d39a4
lea ecx, [esp + 0x1c]
push eax
push ecx
call fcn.00408440
add esp, 0xc
mov edx, dword [0x6a3564]
mov ecx, dword [esp + 0x180]
push edx
push 0
push eax
mov byte [esp + 0x184], 0x45
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov edi, 0x6d8db4
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x6d8db4
lea ecx, [esp + 0x48]
call fcn.004083a0
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x6124c3
mov esi, 0x6a3560
mov al, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0x30], al
call fcn.004031c0
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x34]
call fcn.004083a0
mov eax, dword [esp + 0x34]
mov ecx, dword [0x818758]
test eax, eax
mov byte [esp + 0x178], 0x46
mov dword [esp + 0x3c], ecx
jne 0x61250e
xor eax, eax
jmp 0x6126d7
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x61251b
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x61255d
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x612548
mov eax, 0x6a3560
push eax
push 0x6d40b4
call fcn.0044a330
add esp, 8
xor eax, eax
jmp 0x6126d7
lea edx, [esp + 0x2c]
push 0x6d40ac
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.00408440
add esp, 0xc
lea ecx, [esp + 0x14]
mov byte [esp + 0x178], 0x47
push ecx
push ebp
mov dword [esp + 0x1c], 0
call dword [sym.imp.kernel32.dll_GetFileSize]
mov edi, eax
test edi, edi
ja 0x6125cd
push ebp
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x6125aa
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x46
push 1
call fcn.004031c0
xor eax, eax
jmp 0x6126d7
push edi
call fcn.00673b05
add esp, 4
lea edx, [esp + 0x28]
mov esi, eax
mov dword [esp + 0x28], 0
push 0
push edx
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_ReadFile]
mov ebx, dword [sym.imp.kernel32.dll_CloseHandle]
push ebp
call ebx
push 0x1608
push 0x6081
push 0x816
push edi
push esi
call fcn.0044f670
mov eax, dword [esp + 0x30]
add esp, 0x14
test eax, eax
jne 0x61261f
mov eax, 0x6a3560
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
lea eax, [esp + 0x28]
push 0
push eax
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_WriteFile]
push ebp
call ebx
push esi
call fcn.006713a0
mov eax, dword [esp + 0x20]
add esp, 4
test eax, eax
jne 0x612663
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ecx, dword [esp + 0x3c]
mov esi, eax
push esi
call fcn.00626c90
push esi
mov edi, eax
call ebx
test edi, edi
jne 0x6126ac
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x61269e
mov eax, 0x6a3560
push eax
push 0x6d4088
call fcn.0044a330
add esp, 8
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x6126b9
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x46
push 1
call fcn.004031c0
mov eax, edi
test eax, eax
push 1
lea ecx, [esp + 0x30]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x61273b
lea ecx, [esp + 0x40]
push 0x6d39a4
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x48
push ecx
mov ecx, dword [esp + 0x184]
push 0
push eax
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
lea edx, [esp + 0x60]
lea eax, [esp + 0x18]
push edx
push 0x6d8da4
push eax
call fcn.004dbb40
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x49
push ecx
push 0
push eax
lea ecx, [esp + 0x4c]
call fcn.00402fc0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x61278d
mov esi, 0x6a3560
mov dl, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0x30], dl
call fcn.004031c0
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x34]
call fcn.004083a0
mov eax, dword [0x8186f4]
mov byte [esp + 0x178], 0x4a
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x6127d7
xor eax, eax
jmp 0x6129a0
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x6127e4
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x612826
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x612811
mov eax, 0x6a3560
push eax
push 0x6d40b4
call fcn.0044a330
add esp, 8
xor eax, eax
jmp 0x6129a0
lea ecx, [esp + 0x2c]
push 0x6d40ac
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
lea eax, [esp + 0x14]
mov byte [esp + 0x178], 0x4b
push eax
push ebp
mov dword [esp + 0x1c], 0
call dword [sym.imp.kernel32.dll_GetFileSize]
mov edi, eax
test edi, edi
ja 0x612896
push ebp
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x612873
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x4a
push 1
call fcn.004031c0
xor eax, eax
jmp 0x6129a0
push edi
call fcn.00673b05
add esp, 4
lea ecx, [esp + 0x28]
mov esi, eax
mov dword [esp + 0x28], 0
push 0
push ecx
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_ReadFile]
mov ebx, dword [sym.imp.kernel32.dll_CloseHandle]
push ebp
call ebx
push 0x1608
push 0x6081
push 0x816
push edi
push esi
call fcn.0044f670
mov eax, dword [esp + 0x30]
add esp, 0x14
test eax, eax
jne 0x6128e8
mov eax, 0x6a3560
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
lea edx, [esp + 0x28]
push 0
push edx
mov ebp, eax
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_WriteFile]
push ebp
call ebx
push esi
call fcn.006713a0
mov eax, dword [esp + 0x20]
add esp, 4
test eax, eax
jne 0x61292c
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ecx, dword [esp + 0x3c]
mov esi, eax
push esi
call fcn.006270d0
push esi
mov edi, eax
call ebx
test edi, edi
jne 0x612975
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x612967
mov eax, 0x6a3560
push eax
push 0x6d4088
call fcn.0044a330
add esp, 8
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x612982
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x4a
push 1
call fcn.004031c0
mov eax, edi
test eax, eax
push 1
lea ecx, [esp + 0x30]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x612a04
lea eax, [esp + 0x40]
push 0x6d39a4
lea ecx, [esp + 0x1c]
push eax
push ecx
call fcn.00408440
add esp, 0xc
mov edx, dword [0x6a3564]
mov ecx, dword [esp + 0x180]
push edx
push 0
push eax
mov byte [esp + 0x184], 0x4c
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
lea eax, [esp + 0x60]
lea ecx, [esp + 0x18]
push eax
push 0x6d8d94
push ecx
call fcn.004dbb40
add esp, 0xc
mov edx, dword [0x6a3564]
lea ecx, [esp + 0x40]
push edx
push 0
push eax
mov byte [esp + 0x184], 0x4d
call fcn.00402fc0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x612a56
mov esi, 0x6a3560
mov al, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0x30], al
call fcn.004031c0
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x34]
call fcn.004083a0
mov eax, dword [esp + 0x34]
mov ecx, dword [0x818768]
test eax, eax
mov byte [esp + 0x178], 0x4e
mov dword [esp + 0x3c], ecx
jne 0x612aa1
xor eax, eax
jmp 0x612c6a
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x612aae
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x612af0
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x612adb
mov eax, 0x6a3560
push eax
push 0x6d40b4
call fcn.0044a330
add esp, 8
xor eax, eax
jmp 0x612c6a
lea edx, [esp + 0x2c]
push 0x6d40ac
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.00408440
add esp, 0xc
lea ecx, [esp + 0x14]
mov byte [esp + 0x178], 0x4f
push ecx
push ebp
mov dword [esp + 0x1c], 0
call dword [sym.imp.kernel32.dll_GetFileSize]
mov edi, eax
test edi, edi
ja 0x612b60
push ebp
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x612b3d
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x4e
push 1
call fcn.004031c0
xor eax, eax
jmp 0x612c6a
push edi
call fcn.00673b05
add esp, 4
lea edx, [esp + 0x28]
mov esi, eax
mov dword [esp + 0x28], 0
push 0
push edx
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_ReadFile]
mov ebx, dword [sym.imp.kernel32.dll_CloseHandle]
push ebp
call ebx
push 0x1608
push 0x6081
push 0x816
push edi
push esi
call fcn.0044f670
mov eax, dword [esp + 0x30]
add esp, 0x14
test eax, eax
jne 0x612bb2
mov eax, 0x6a3560
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
lea eax, [esp + 0x28]
push 0
push eax
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_WriteFile]
push ebp
call ebx
push esi
call fcn.006713a0
mov eax, dword [esp + 0x20]
add esp, 4
test eax, eax
jne 0x612bf6
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ecx, dword [esp + 0x3c]
mov esi, eax
push esi
call fcn.006274c0
push esi
mov edi, eax
call ebx
test edi, edi
jne 0x612c3f
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x612c31
mov eax, 0x6a3560
push eax
push 0x6d4088
call fcn.0044a330
add esp, 8
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x612c4c
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x4e
push 1
call fcn.004031c0
mov eax, edi
test eax, eax
push 1
lea ecx, [esp + 0x30]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x612cce
lea ecx, [esp + 0x40]
push 0x6d39a4
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x50
push ecx
mov ecx, dword [esp + 0x184]
push 0
push eax
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
lea edx, [esp + 0x60]
lea eax, [esp + 0x18]
push edx
push 0x6d8d84
push eax
call fcn.004dbb40
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x51
push ecx
push 0
push eax
lea ecx, [esp + 0x4c]
call fcn.00402fc0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x612d20
mov esi, 0x6a3560
mov dl, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0x30], dl
call fcn.004031c0
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x34]
call fcn.004083a0
mov eax, dword [0x81876c]
mov byte [esp + 0x178], 0x52
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x34]
test eax, eax
jne 0x612d6a
xor eax, eax
jmp 0x612f33
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x612d77
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x612db9
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x612da4
mov eax, 0x6a3560
push eax
push 0x6d40b4
call fcn.0044a330
add esp, 8
xor eax, eax
jmp 0x612f33
lea ecx, [esp + 0x2c]
push 0x6d40ac
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
lea eax, [esp + 0x14]
mov byte [esp + 0x178], 0x53
push eax
push ebp
mov dword [esp + 0x1c], 0
call dword [sym.imp.kernel32.dll_GetFileSize]
mov edi, eax
test edi, edi
ja 0x612e29
push ebp
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x612e06
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x52
push 1
call fcn.004031c0
xor eax, eax
jmp 0x612f33
push edi
call fcn.00673b05
add esp, 4
lea ecx, [esp + 0x28]
mov esi, eax
mov dword [esp + 0x28], 0
push 0
push ecx
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_ReadFile]
mov ebx, dword [sym.imp.kernel32.dll_CloseHandle]
push ebp
call ebx
push 0x1608
push 0x6081
push 0x816
push edi
push esi
call fcn.0044f670
mov eax, dword [esp + 0x30]
add esp, 0x14
test eax, eax
jne 0x612e7b
mov eax, 0x6a3560
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
lea edx, [esp + 0x28]
push 0
push edx
mov ebp, eax
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_WriteFile]
push ebp
call ebx
push esi
call fcn.006713a0
mov eax, dword [esp + 0x20]
add esp, 4
test eax, eax
jne 0x612ebf
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ecx, dword [esp + 0x3c]
mov esi, eax
push esi
call fcn.006278a0
push esi
mov edi, eax
call ebx
test edi, edi
jne 0x612f08
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x612efa
mov eax, 0x6a3560
push eax
push 0x6d4088
call fcn.0044a330
add esp, 8
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x612f15
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x52
push 1
call fcn.004031c0
mov eax, edi
test eax, eax
push 1
lea ecx, [esp + 0x30]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x612f97
lea eax, [esp + 0x40]
push 0x6d39a4
lea ecx, [esp + 0x1c]
push eax
push ecx
call fcn.00408440
add esp, 0xc
mov edx, dword [0x6a3564]
mov ecx, dword [esp + 0x180]
push edx
push 0
push eax
mov byte [esp + 0x184], 0x54
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
lea eax, [esp + 0x60]
lea ecx, [esp + 0x18]
push eax
push 0x6d8d70
push ecx
call fcn.004dbb40
add esp, 0xc
mov edx, dword [0x6a3564]
lea ecx, [esp + 0x40]
push edx
push 0
push eax
mov byte [esp + 0x184], 0x55
call fcn.00402fc0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x612fe9
mov esi, 0x6a3560
mov al, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0x30], al
call fcn.004031c0
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x34]
call fcn.004083a0
mov eax, dword [esp + 0x34]
mov ecx, dword [0x818770]
test eax, eax
mov byte [esp + 0x178], 0x56
mov dword [esp + 0x3c], ecx
jne 0x613034
xor eax, eax
jmp 0x6131fd
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x613041
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
cmp ebp, 0xffffffff
jne 0x613083
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x61306e
mov eax, 0x6a3560
push eax
push 0x6d40b4
call fcn.0044a330
add esp, 8
xor eax, eax
jmp 0x6131fd
lea edx, [esp + 0x2c]
push 0x6d40ac
lea eax, [esp + 0x1c]
push edx
push eax
call fcn.00408440
add esp, 0xc
lea ecx, [esp + 0x14]
mov byte [esp + 0x178], 0x57
push ecx
push ebp
mov dword [esp + 0x1c], 0
call dword [sym.imp.kernel32.dll_GetFileSize]
mov edi, eax
test edi, edi
ja 0x6130f3
push ebp
call dword [sym.imp.kernel32.dll_CloseHandle]
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x6130d0
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x56
push 1
call fcn.004031c0
xor eax, eax
jmp 0x6131fd
push edi
call fcn.00673b05
add esp, 4
lea edx, [esp + 0x28]
mov esi, eax
mov dword [esp + 0x28], 0
push 0
push edx
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_ReadFile]
mov ebx, dword [sym.imp.kernel32.dll_CloseHandle]
push ebp
call ebx
push 0x1608
push 0x6081
push 0x816
push edi
push esi
call fcn.0044f670
mov eax, dword [esp + 0x30]
add esp, 0x14
test eax, eax
jne 0x613145
mov eax, 0x6a3560
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ebp, eax
lea eax, [esp + 0x28]
push 0
push eax
push edi
push esi
push ebp
call dword [sym.imp.kernel32.dll_WriteFile]
push ebp
call ebx
push esi
call fcn.006713a0
mov eax, dword [esp + 0x20]
add esp, 4
test eax, eax
jne 0x613189
mov eax, 0x6a3560
push 0
push 0x80
push 3
push 0
push 0
push SysReAllocString
push eax
call dword [sym.imp.kernel32.dll_CreateFileA]
mov ecx, dword [esp + 0x3c]
mov esi, eax
push esi
call fcn.00627c80
push esi
mov edi, eax
call ebx
test edi, edi
jne 0x6131d2
mov eax, dword [esp + 0x30]
test eax, eax
jne 0x6131c4
mov eax, 0x6a3560
push eax
push 0x6d4088
call fcn.0044a330
add esp, 8
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x6131df
mov eax, 0x6a3560
push eax
call fcn.00674ba7
add esp, 4
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 0x56
push 1
call fcn.004031c0
mov eax, edi
test eax, eax
push 1
lea ecx, [esp + 0x30]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x613265
lea ecx, [esp + 0x40]
push 0x6d39a4
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov ebp, dword [esp + 0x180]
push ecx
push 0
push eax
mov ecx, ebp
mov byte [esp + 0x184], 0x58
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
jmp 0x61326c
mov ebp, dword [esp + 0x180]
lea edx, [esp + 0x60]
lea eax, [esp + 0x18]
push edx
push 0x6d8d60
push eax
call fcn.004dbb40
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x59
push ecx
push 0
push eax
lea ecx, [esp + 0x4c]
call fcn.00402fc0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov esi, dword [esp + 0x44]
test esi, esi
jne 0x6132be
mov esi, 0x6a3560
mov dl, byte [esp + 0x11]
push 0
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1c], dl
call fcn.004031c0
mov edi, esi
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push esi
lea ecx, [esp + 0x20]
call fcn.004083a0
mov ecx, dword [0x81877c]
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x17c], 0x5a
call fcn.00618780
test eax, eax
push 1
lea ecx, [esp + 0x1c]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x61335f
lea ecx, [esp + 0x40]
push 0x6d39a4
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x5b
push ecx
push 0
push eax
mov ecx, ebp
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
lea edx, [esp + 0x60]
lea eax, [esp + 0x18]
push edx
push 0x6d8d54
push eax
call fcn.004dbb40
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x5c
push ecx
push 0
push eax
lea ecx, [esp + 0x4c]
call fcn.00402fc0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x6133b1
mov eax, 0x6a3560
lea edx, [esp + 0x11]
lea ecx, [esp + 0x18]
push edx
push eax
call fcn.004a64f0
mov ecx, dword [0x818774]
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x17c], 0x5d
call fcn.00617f80
test eax, eax
push 1
lea ecx, [esp + 0x1c]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x613437
lea ecx, [esp + 0x40]
push 0x6d39a4
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x5e
push ecx
push 0
push eax
mov ecx, ebp
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
lea edx, [esp + 0x60]
lea eax, [esp + 0x18]
push edx
push 0x6d8d40
push eax
call fcn.004dbb40
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x5f
push ecx
push 0
push eax
lea ecx, [esp + 0x4c]
call fcn.00402fc0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x613489
mov eax, 0x6a3560
lea edx, [esp + 0x11]
lea ecx, [esp + 0x18]
push edx
push eax
call fcn.004a64f0
mov ecx, dword [0x818780]
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x17c], 0x60
call fcn.00618b90
test eax, eax
push 1
lea ecx, [esp + 0x1c]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x61350f
lea ecx, [esp + 0x40]
push 0x6d39a4
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x61
push ecx
push 0
push eax
mov ecx, ebp
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov edi, 0x6d8d30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x6d8d30
lea ecx, [esp + 0x48]
call fcn.004083a0
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x61353a
mov eax, 0x6a3560
lea edx, [esp + 0x11]
lea ecx, [esp + 0x18]
push edx
push eax
call fcn.004a64f0
mov ecx, dword [0x818778]
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x17c], 0x62
call fcn.00618370
test eax, eax
push 1
lea ecx, [esp + 0x1c]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x6135c0
lea ecx, [esp + 0x40]
push 0x6d39a4
lea edx, [esp + 0x1c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x63
push ecx
push 0
push eax
mov ecx, ebp
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
xor ebp, ebp
mov esi, 0x8186f8
mov dl, byte [0x6dfe28]
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x71]
mov byte [esp + 0x70], dl
push ebp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x74]
push 0x6d8d1c
push eax
call fcn.0067429f
lea ecx, [esp + 0x6c]
lea edx, [esp + 0x7c]
push ecx
lea eax, [esp + 0x3c]
push edx
push eax
call fcn.004dbb40
add esp, 0x18
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x64
push ecx
push 0
push eax
lea ecx, [esp + 0x4c]
call fcn.00402fc0
push 1
lea ecx, [esp + 0x30]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x613643
mov eax, 0x6a3560
lea edx, [esp + 0x11]
lea ecx, [esp + 0x18]
push edx
push eax
call fcn.004a64f0
mov ecx, dword [esi]
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x17c], 0x65
call fcn.00616f80
test eax, eax
push 1
lea ecx, [esp + 0x1c]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x6136ca
lea ecx, [esp + 0x40]
push 0x6d39a4
lea edx, [esp + 0x54]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x66
push ecx
mov ecx, dword [esp + 0x184]
push 0
push eax
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
add esi, 4
inc ebp
cmp esi, 0x818758
jl 0x6135c7
or ebp, 0xffffffff
mov edi, 0x6d8d08
mov ecx, ebp
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x6d8d08
lea ecx, [esp + 0x48]
call fcn.004083a0
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x613707
mov eax, 0x6a3560
lea edx, [esp + 0x11]
lea ecx, [esp + 0x18]
push edx
push eax
call fcn.004a64f0
mov ecx, dword [0x81875c]
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x17c], 0x67
call fcn.00616b80
test eax, eax
push 1
lea ecx, [esp + 0x1c]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x613796
lea ecx, [esp + 0x40]
push 0x6d39a4
lea edx, [esp + 0x54]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov esi, dword [esp + 0x180]
push ecx
push 0
push eax
mov ecx, esi
mov byte [esp + 0x184], 0x68
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
jmp 0x61379d
mov esi, dword [esp + 0x180]
lea edx, [esp + 0x60]
lea eax, [esp + 0x50]
push edx
push 0x6d8cf0
push eax
call fcn.004dbb40
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x69
push ecx
push 0
push eax
lea ecx, [esp + 0x4c]
call fcn.00402fc0
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x6137ef
mov eax, 0x6a3560
lea edx, [esp + 0x11]
lea ecx, [esp + 0x18]
push edx
push eax
call fcn.004a64f0
mov ecx, dword [0x818760]
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x17c], 0x6a
call fcn.00617380
test eax, eax
push 1
lea ecx, [esp + 0x1c]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x613875
lea ecx, [esp + 0x40]
push 0x6d39a4
lea edx, [esp + 0x54]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x6b
push ecx
push 0
push eax
mov ecx, esi
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov edi, 0x6d8cd8
mov ecx, ebp
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x6d8cd8
lea ecx, [esp + 0x48]
call fcn.004083a0
mov eax, dword [esp + 0x44]
test eax, eax
jne 0x61389f
mov eax, 0x6a3560
lea edx, [esp + 0x11]
lea ecx, [esp + 0x18]
push edx
push eax
call fcn.004a64f0
mov ecx, dword [0x818764]
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x17c], 0x6c
call fcn.00617780
test eax, eax
push 1
lea ecx, [esp + 0x1c]
sete bl
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
test bl, bl
je 0x613925
lea ecx, [esp + 0x40]
push 0x6d39a4
lea edx, [esp + 0x54]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x178], 0x6d
push ecx
push 0
push eax
mov ecx, esi
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0x17c], 0x3a
call fcn.004031c0
mov edi, 0x6d8ccc
mov ecx, ebp
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x6d8ccc
lea ecx, [esp + 0x48]
call fcn.004083a0
mov eax, dword [esp + 0x44]
pop edi
test eax, eax
jne 0x613950
mov eax, 0x6a3560
lea edx, [esp + 0xd]
lea ecx, [esp + 0x14]
push edx
push eax
call fcn.004a64f0
mov ecx, dword [0x8186e4]
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x178], 0x6e
call fcn.00617b90
test eax, eax
push 1
lea ecx, [esp + 0x18]
sete bl
mov byte [esp + 0x178], 0x3a
call fcn.004031c0
test bl, bl
je 0x6139d6
lea ecx, [esp + 0x3c]
push 0x6d39a4
lea edx, [esp + 0x50]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x174], 0x6f
push ecx
push 0
push eax
mov ecx, esi
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x50]
mov byte [esp + 0x178], 0x3a
call fcn.004031c0
lea edx, [esp + 0x5c]
lea eax, [esp + 0x4c]
push edx
push 0x6d8cbc
push eax
call fcn.004dbb40
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x174], 0x70
push ecx
push 0
push eax
lea ecx, [esp + 0x48]
call fcn.00402fc0
push 1
lea ecx, [esp + 0x50]
mov byte [esp + 0x178], 0x3a
call fcn.004031c0
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x613a28
mov eax, 0x6a3560
lea edx, [esp + 0xd]
lea ecx, [esp + 0x14]
push edx
push eax
call fcn.004a64f0
mov ecx, dword [0x818784]
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x178], 0x71
call fcn.00618f80
test eax, eax
push 1
lea ecx, [esp + 0x18]
sete bl
mov byte [esp + 0x178], 0x3a
call fcn.004031c0
test bl, bl
je 0x613aae
lea ecx, [esp + 0x3c]
push 0x6d39a4
lea edx, [esp + 0x50]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x174], 0x72
push ecx
push 0
push eax
mov ecx, esi
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x50]
mov byte [esp + 0x178], 0x3a
call fcn.004031c0
lea edx, [esp + 0x5c]
lea eax, [esp + 0x4c]
push edx
push 0x6d8ca8
push eax
call fcn.004dbb40
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x174], 0x73
push ecx
push 0
push eax
lea ecx, [esp + 0x48]
call fcn.00402fc0
push 1
lea ecx, [esp + 0x50]
mov byte [esp + 0x178], 0x3a
call fcn.004031c0
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x613b00
mov eax, 0x6a3560
lea edx, [esp + 0xd]
lea ecx, [esp + 0x14]
push edx
push eax
call fcn.004a64f0
mov ecx, dword [0x818788]
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x178], 0x74
call fcn.00619370
test eax, eax
push 1
lea ecx, [esp + 0x18]
sete bl
mov byte [esp + 0x178], 0x3a
call fcn.004031c0
test bl, bl
pop ebx
je 0x613b87
lea ecx, [esp + 0x38]
push 0x6d39a4
lea edx, [esp + 0x4c]
push ecx
push edx
call fcn.00408440
add esp, 0xc
mov ecx, dword [0x6a3564]
mov byte [esp + 0x170], 0x75
push ecx
push 0
push eax
mov ecx, esi
call fcn.0040f4d0
push 1
lea ecx, [esp + 0x4c]
mov byte [esp + 0x174], 0x3a
call fcn.004031c0
push 0x20
call fcn.00673b05
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x170], 0x76
je 0x613baa
mov ecx, eax
call fcn.005c0d10
jmp 0x613bac
xor eax, eax
mov byte [esp + 0x170], 0x3a
push 0x5c
mov dword [0x81878c], eax
call fcn.00673b05
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x170], 0x77
je 0x613bdc
mov ecx, eax
call fcn.0046fd60
jmp 0x613bde
xor eax, eax
mov byte [esp + 0x170], 0x3a
push 0xb48
mov dword [0x818790], eax
call fcn.00673b05
add esp, 4
mov dword [esp + 0xc], eax
test eax, eax
mov byte [esp + 0x170], 0x78
je 0x613c11
mov ecx, eax
call fcn.00465410
jmp 0x613c13
xor eax, eax
mov byte [esp + 0x170], 0x3a
mov dword [0x818794], eax
mov eax, dword [esi + 8]
mov byte [esp + 0x170], 0x39
test eax, eax
push 1
lea ecx, [esp + 0x3c]
je 0x613c65
call fcn.004031c0
push 1
lea ecx, [esp + 0x5c]
mov dword [esp + 0x174], ebp
call fcn.004031c0
pop esi
xor al, al
pop ebp
mov ecx, dword [esp + 0x160]
mov dword fs:[0], ecx
add esp, 0x16c
ret
call fcn.004031c0
push 1
lea ecx, [esp + 0x5c]
mov dword [esp + 0x174], ebp
call fcn.004031c0
mov ecx, dword [esp + 0x168]
pop esi
mov al, 1
pop ebp
mov dword fs:[0], ecx
add esp, 0x16c
ret