Function at 0x75573c
Capabilities:
Get common file path
Get disk information
Get program files directory
Get session user name
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x101
push 0
push 0
dec ecx
jne 0x755744
push ebx
push esi
push edi
lea eax, [ebp - 0x298]
mov edx, dword [0x41c09c]
call fcn.0040aea8
xor eax, eax
push ebp
push 0x758722
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0x29c], 0x103
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x29c]
call fcn.0040a7d0
lea eax, [ebp - 0x29c]
push eax
mov eax, dword [ebp - 8]
call fcn.0040a644
push eax
call sub.advapi32.dll_GetUserNameW
push 0x7d0640
mov ecx, dword [ebp - 0x29c]
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040aa18
push 0x208
lea eax, [ebp - 0x4f0]
push eax
call sub.kernel32.dll_GetWindowsDirectoryW
lea eax, [ebp - 0x4f4]
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
mov eax, dword [ebp - 0x4f4]
lea edx, [ebp - 4]
call fcn.00425128
mov eax, 0x7d0644
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
lea edx, [ebp - 0x4f8]
mov eax, dword [0x7d0644]
call fcn.0042c3c4
mov edx, dword [ebp - 0x4f8]
mov eax, 0x7d0644
call fcn.00409ef0
push 0x208
lea eax, [ebp - 0x4f0]
push eax
call sub.kernel32.dll_GetSystemDirectoryW
mov eax, 0x7d0648
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
lea edx, [ebp - 0x4fc]
mov eax, dword [0x7d0648]
call fcn.0042c3c4
mov edx, dword [ebp - 0x4fc]
mov eax, 0x7d0648
call fcn.00409ef0
lea eax, [ebp - 0x4f0]
push eax
push 0
push 0
push 0x1a
push 0
call sub.shell32.dll_SHGetFolderPathW
mov eax, 0x7d0650
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
lea eax, [ebp - 0x4f0]
push eax
push 0
push 0
push 0x1c
push 0
call sub.shell32.dll_SHGetFolderPathW
mov eax, 0x7d0654
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
lea eax, [ebp - 0x4f0]
push eax
push 0
push 0
push 0x26
push 0
call sub.shell32.dll_SHGetFolderPathW
mov eax, 0x7d0658
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
lea eax, [ebp - 0x4f0]
push eax
push 0
push 0
push 0x2b
push 0
call sub.shell32.dll_SHGetFolderPathW
mov eax, 0x7d065c
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
lea eax, [ebp - 0x4f0]
push eax
push 0
push 0
push 5
push 0
call sub.shell32.dll_SHGetFolderPathW
mov eax, 0x7d066c
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
lea eax, [ebp - 0x4f0]
push eax
push 0
push 0
push 8
push 0
call sub.shell32.dll_SHGetFolderPathW
mov eax, 0x7d0664
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
lea edx, [ebp - 0x500]
mov eax, dword [0x7d0650]
call fcn.0042c3c4
mov edx, dword [ebp - 0x500]
mov eax, 0x7d0650
call fcn.00409ef0
lea edx, [ebp - 0x504]
mov eax, dword [0x7d0654]
call fcn.0042c3c4
mov edx, dword [ebp - 0x504]
mov eax, 0x7d0654
call fcn.00409ef0
lea edx, [ebp - 0x508]
mov eax, dword [0x7d0658]
call fcn.0042c3c4
mov edx, dword [ebp - 0x508]
mov eax, 0x7d0658
call fcn.00409ef0
lea edx, [ebp - 0x50c]
mov eax, dword [0x7d065c]
call fcn.0042c3c4
mov edx, dword [ebp - 0x50c]
mov eax, 0x7d065c
call fcn.00409ef0
lea edx, [ebp - 0x510]
mov eax, dword [0x7d066c]
call fcn.0042c3c4
mov edx, dword [ebp - 0x510]
mov eax, 0x7d066c
call fcn.00409ef0
lea edx, [ebp - 0x514]
mov eax, dword [0x7d0664]
call fcn.0042c3c4
mov edx, dword [ebp - 0x514]
mov eax, 0x7d0664
call fcn.00409ef0
mov eax, 0x7d0668
mov ecx, 0x75873c
mov edx, dword [0x7d0650]
call fcn.0040a8a8
push dword [ebp - 4]
push 0x75877c
push dword [0x7d0640]
lea eax, [ebp - 0x51c]
mov edx, 3
call fcn.0040a930
mov eax, dword [ebp - 0x51c]
lea edx, [ebp - 0x518]
call fcn.0042c3c4
mov edx, dword [ebp - 0x518]
mov eax, 0x7d064c
call fcn.00409ef0
lea edx, [ebp - 0x520]
mov eax, dword [0x7d0658]
call fcn.00423490
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x2b8], eax
mov ecx, 1
mov edx, dword [ebp - 0x2b8]
mov eax, 0x758798
call fcn.0040ab74
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0
jle 0x755ab6
mov byte [0x7d063c], 1
jmp 0x755abd
mov byte [0x7d063c], 0
lea eax, [ebp - 0x4f0]
push eax
push 0
push 0
push 0x10
push 0
call sub.shell32.dll_SHGetFolderPathW
mov eax, 0x7d0660
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
lea edx, [ebp - 0x524]
mov eax, dword [0x7d0660]
call fcn.0042385c
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x2c0]
test eax, eax
je 0x755b11
sub eax, 4
mov eax, dword [eax]
test eax, eax
jne 0x755b40
lea eax, [ebp - 0x528]
push eax
mov ecx, 0x7587b0
mov edx, 0x7587cc
mov eax, 0x80000001
call fcn.005b8330
mov edx, dword [ebp - 0x528]
mov eax, 0x7d0660
call fcn.00409ef0
lea edx, [ebp - 0x52c]
mov eax, dword [0x7d0660]
call fcn.0042385c
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2c4]
test eax, eax
je 0x755b6b
sub eax, 4
mov eax, dword [eax]
test eax, eax
jne 0x755b84
mov eax, 0x7d0660
mov ecx, 0x75885c
mov edx, dword [0x7d064c]
call fcn.0040a8a8
lea edx, [ebp - 0x530]
mov eax, dword [0x7d0660]
call fcn.0042c3c4
mov edx, dword [ebp - 0x530]
mov eax, 0x7d0660
call fcn.00409ef0
mov ecx, 1
mov edx, dword [0x7d0660]
mov eax, dword [ebp - 4]
call fcn.0040ab74
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 1
je 0x755bd9
mov eax, 0x7d0660
mov ecx, dword [0x7d0660]
mov edx, dword [ebp - 4]
call fcn.0040a8a8
push dword [0x7d0650]
push 0x75887c
push 0x7588a0
mov eax, 0x7d0678
mov edx, 3
call fcn.0040a930
push dword [0x7d0650]
push 0x75887c
push 0x7588b8
mov eax, 0x7d067c
mov edx, 3
call fcn.0040a930
lea eax, [ebp - 8]
mov edx, 0x7588d0
call fcn.00409f38
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.00424aec
test al, al
je 0x755c46
mov eax, 0x7d0674
mov ecx, 0x75887c
mov edx, dword [ebp - 8]
call fcn.0040a8a8
jmp 0x755c5b
mov eax, 0x7d0674
mov ecx, 0x75887c
mov edx, dword [0x7d066c]
call fcn.0040a8a8
mov dl, 1
mov eax, dword [0x7d0678]
call fcn.00424aec
test al, al
jne 0x755c75
mov eax, dword [0x7d0678]
call fcn.00424b94
mov dl, 1
mov eax, dword [0x7d067c]
call fcn.00424aec
test al, al
jne 0x755c8f
mov eax, dword [0x7d067c]
call fcn.00424b94
mov dl, 1
mov eax, dword [0x7d0674]
call fcn.00424aec
test al, al
jne 0x755ca9
mov eax, dword [0x7d0674]
call fcn.00424b94
lea eax, [ebp - 0x4f0]
push eax
push 0
push 0
push 0x20
push 0
call sub.shell32.dll_SHGetFolderPathW
lea eax, [ebp - 0x534]
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
mov eax, dword [ebp - 0x534]
lea edx, [ebp - 8]
call fcn.0042c3c4
lea eax, [ebp - 0x538]
mov ecx, dword [ebp - 8]
mov edx, 0x7588fc
call fcn.0040a8a8
mov edx, dword [ebp - 0x538]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x7588fc
push dword [0x7d0654]
push 0x758914
lea eax, [ebp - 0x53c]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x53c]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x7588fc
push dword [0x7d0654]
push 0x75897c
lea eax, [ebp - 0x540]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x540]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x7588fc
push dword [0x7d0654]
push 0x7589ec
lea eax, [ebp - 0x544]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x544]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x7588fc
push dword [0x7d0654]
push 0x758a68
lea eax, [ebp - 0x548]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x548]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x4f0]
push eax
push 0
push 0
push 0x22
push 0
call sub.shell32.dll_SHGetFolderPathW
lea eax, [ebp - 0x54c]
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
mov eax, dword [ebp - 0x54c]
lea edx, [ebp - 8]
call fcn.0042c3c4
lea eax, [ebp - 0x550]
mov ecx, dword [ebp - 8]
mov edx, 0x7588fc
call fcn.0040a8a8
mov edx, dword [ebp - 0x550]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x4f0]
push eax
push 0
push 0
push 0x21
push 0
call sub.shell32.dll_SHGetFolderPathW
lea eax, [ebp - 0x554]
lea edx, [ebp - 0x4f0]
mov ecx, 0x104
call fcn.0040a6f8
mov eax, dword [ebp - 0x554]
lea edx, [ebp - 8]
call fcn.0042c3c4
lea eax, [ebp - 0x558]
mov ecx, 0x758aa4
mov edx, dword [ebp - 8]
call fcn.0040a8a8
mov eax, dword [ebp - 0x558]
mov dl, 1
call fcn.00424aec
test al, al
je 0x755e88
lea eax, [ebp - 8]
mov edx, 0x758ab8
call fcn.0040a850
lea eax, [ebp - 0x55c]
mov ecx, dword [ebp - 8]
mov edx, 0x7588fc
call fcn.0040a8a8
mov edx, dword [ebp - 0x55c]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x7588fc
push dword [0x7d064c]
push 0x758ad0
lea eax, [ebp - 0x560]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x560]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x7588fc
push dword [0x7d064c]
push 0x758b44
lea eax, [ebp - 0x564]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x564]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x7588fc
push dword [0x7d0654]
push 0x758bc0
lea eax, [ebp - 0x568]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x568]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, 0x7d06b0
mov ecx, 0x758c0c
mov edx, dword [0x7d0650]
call fcn.0040a8a8
lea eax, [ebp - 0x56c]
mov ecx, 0x758c3c
mov edx, dword [0x7d06b0]
call fcn.0040a8a8
mov ecx, dword [ebp - 0x56c]
mov dl, 1
mov eax, dword [0x4e0400]
call fcn.004e423c
mov dword [ebp - 0x2a4], eax
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov dword [ebp - 0x2a8], eax
mov edx, dword [ebp - 0x2a8]
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov eax, dword [ebp - 0x2a8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x7561e0
mov eax, dword [ebp - 0x2a8]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x7561e0
inc eax
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2a0], 0
push 0
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x570]
mov edx, dword [ebp - 0x2a0]
mov eax, dword [ebp - 0x2a8]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov edx, dword [ebp - 0x570]
mov ecx, 0x758c64
mov eax, dword [ebp - 0x2a4]
mov ebx, dword [eax]
call dword [ebx + 8]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x756018
sub eax, 4
mov eax, dword [eax]
test eax, eax
je 0x7561ce
movzx eax, byte [0x758c70]
push eax
lea eax, [ebp - 0x574]
push eax
mov ecx, 0x758c80
mov edx, 0x758c90
mov eax, dword [ebp - 0x20]
call fcn.0042c810
mov edx, dword [ebp - 0x574]
lea eax, [ebp - 0x20]
call fcn.00409f38
push dword [0x7d06b0]
push dword [ebp - 0x20]
push 0x758c80
lea eax, [ebp - 0x578]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x578]
mov eax, dword [0x7d06c4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov esi, 1
mov ebx, 0x7c7810
push 0x758ca0
push dword [0x7d0654]
push 0x758c0c
push dword [ebp - 0x20]
push 0x758c80
push dword [ebx]
push 0x758c80
lea eax, [ebp - 0x57c]
mov edx, 7
call fcn.0040a930
mov edx, dword [ebp - 0x57c]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc esi
add ebx, 4
cmp esi, 7
jne 0x756087
push 0x758ca0
push dword [0x7d06b0]
push dword [ebp - 0x20]
push 0x758cb8
lea eax, [ebp - 0x580]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x580]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x758ca0
push dword [0x7d06b0]
push dword [ebp - 0x20]
push 0x758cec
lea eax, [ebp - 0x584]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x584]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x758ca0
push dword [0x7d06b0]
push dword [ebp - 0x20]
push 0x758d1c
lea eax, [ebp - 0x588]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x588]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x758ca0
push dword [0x7d06b0]
push dword [ebp - 0x20]
push 0x758d54
lea eax, [ebp - 0x58c]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x58c]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x758ca0
push dword [0x7d06b0]
push dword [ebp - 0x20]
push 0x758d80
lea eax, [ebp - 0x590]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x590]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc dword [ebp - 0x2a0]
dec dword [ebp - 0x2b4]
jne 0x755fd9
mov eax, dword [ebp - 0x2a4]
call fcn.00407e28
mov eax, dword [ebp - 0x2a8]
call fcn.00407e28
mov eax, 0x7d06b4
mov ecx, 0x758db8
mov edx, dword [0x7d0654]
call fcn.0040a8a8
push 0x758df8
push dword [0x7d06b4]
push 0x758e10
lea eax, [ebp - 0x594]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x594]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x758df8
push dword [0x7d06b4]
push 0x758e38
lea eax, [ebp - 0x598]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x598]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x59c]
mov ecx, 0x758e64
mov edx, dword [0x7d06b4]
call fcn.0040a8a8
mov eax, dword [ebp - 0x59c]
lea ecx, [ebp - 0x298]
mov edx, 0x1ff
call fcn.00424e18
test eax, eax
jne 0x7562e6
push 0x758df8
push dword [0x7d06b4]
push dword [ebp - 0x284]
lea eax, [ebp - 0x5a0]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x5a0]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x298]
call fcn.00424e68
test eax, eax
je 0x75629b
lea eax, [ebp - 0x298]
call fcn.00424e8c
xor eax, eax
mov dword [ebp - 0x2a0], eax
mov dl, 1
mov eax, dword [0x7d06b4]
call fcn.00424aec
test al, al
je 0x756585
cmp dword [ebp - 0x2a0], 0
jne 0x75631a
lea eax, [ebp - 0x20]
mov edx, 0x758e84
call fcn.00409f38
jmp 0x756348
push 0x758ea4
lea edx, [ebp - 0x5a4]
mov eax, dword [ebp - 0x2a0]
call fcn.0042419c
push dword [ebp - 0x5a4]
push 0x758c80
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.0040a930
lea eax, [ebp - 0x5a8]
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x7d06b4]
call fcn.0040a8a8
mov eax, dword [ebp - 0x5a8]
mov dl, 1
call fcn.00424aec
test al, al
je 0x756572
lea eax, [ebp - 0x5ac]
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x7d06b4]
call fcn.0040a8a8
mov edx, dword [ebp - 0x5ac]
mov eax, dword [0x7d06c8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov esi, 1
mov ebx, 0x7c77b0
push 0x758df8
push dword [0x7d06b4]
push dword [ebp - 0x20]
push dword [ebx]
push 0x758c80
lea eax, [ebp - 0x5b0]
mov edx, 5
call fcn.0040a930
mov edx, dword [ebp - 0x5b0]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc esi
add ebx, 4
cmp esi, 0xd
jne 0x75639f
mov esi, 1
mov ebx, 0x7c77e0
push 0x758df8
push dword [0x7d06b4]
push dword [ebp - 0x20]
push dword [ebx]
lea eax, [ebp - 0x5b4]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x5b4]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc esi
add ebx, 4
cmp esi, 0xd
jne 0x7563e7
push 0x758df8
push dword [0x7d06b4]
push dword [ebp - 0x20]
push 0x758ec4
lea eax, [ebp - 0x5b8]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x5b8]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x758df8
push dword [0x7d06b4]
push dword [ebp - 0x20]
push 0x758f20
lea eax, [ebp - 0x5bc]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x5bc]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x758df8
push dword [0x7d06b4]
push dword [ebp - 0x20]
push 0x758f44
lea eax, [ebp - 0x5c0]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x5c0]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x758df8
push dword [0x7d06b4]
push dword [ebp - 0x20]
push 0x758f60
lea eax, [ebp - 0x5c4]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x5c4]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push dword [0x7d06b4]
push dword [ebp - 0x20]
push 0x758e64
lea eax, [ebp - 0x5c8]
mov edx, 3
call fcn.0040a930
mov eax, dword [ebp - 0x5c8]
lea ecx, [ebp - 0x298]
mov edx, 0x1ff
call fcn.00424e18
test eax, eax
jne 0x756572
push 0x758df8
push dword [0x7d06b4]
push dword [ebp - 0x20]
push dword [ebp - 0x284]
lea eax, [ebp - 0x5cc]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x5cc]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x298]
call fcn.00424e68
test eax, eax
je 0x756524
lea eax, [ebp - 0x298]
call fcn.00424e8c
inc dword [ebp - 0x2a0]
cmp dword [ebp - 0x2a0], 0xa
jne 0x756302
mov eax, 0x7d06b8
mov ecx, 0x758f8c
mov edx, dword [0x7d0654]
call fcn.0040a8a8
push 0x758fc0
push dword [0x7d06b8]
push 0x758e10
lea eax, [ebp - 0x5d0]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x5d0]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x758fc0
push dword [0x7d06b8]
push 0x758e38
lea eax, [ebp - 0x5d4]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x5d4]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x5d8]
mov ecx, 0x758e64
mov edx, dword [0x7d06b8]
call fcn.0040a8a8
mov eax, dword [ebp - 0x5d8]
lea ecx, [ebp - 0x298]
mov edx, 0x1ff
call fcn.00424e18
test eax, eax
jne 0x756675
push 0x758fc0
push dword [0x7d06b8]
push dword [ebp - 0x284]
lea eax, [ebp - 0x5dc]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x5dc]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x298]
call fcn.00424e68
test eax, eax
je 0x75662a
lea eax, [ebp - 0x298]
call fcn.00424e8c
xor eax, eax
mov dword [ebp - 0x2a0], eax
mov dl, 1
mov eax, dword [0x7d06b8]
call fcn.00424aec
test al, al
je 0x756914
cmp dword [ebp - 0x2a0], 0
jne 0x7566a9
lea eax, [ebp - 0x20]
mov edx, 0x758e84
call fcn.00409f38
jmp 0x7566d7
push 0x758ea4
lea edx, [ebp - 0x5e0]
mov eax, dword [ebp - 0x2a0]
call fcn.0042419c
push dword [ebp - 0x5e0]
push 0x758c80
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.0040a930
lea eax, [ebp - 0x5e4]
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x7d06b8]
call fcn.0040a8a8
mov eax, dword [ebp - 0x5e4]
mov dl, 1
call fcn.00424aec
test al, al
je 0x756901
lea eax, [ebp - 0x5e8]
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x7d06b8]
call fcn.0040a8a8
mov edx, dword [ebp - 0x5e8]
mov eax, dword [0x7d06cc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov esi, 1
mov ebx, 0x7c77b0
push 0x758fc0
push dword [0x7d06b8]
push dword [ebp - 0x20]
push dword [ebx]
push 0x758c80
lea eax, [ebp - 0x5ec]
mov edx, 5
call fcn.0040a930
mov edx, dword [ebp - 0x5ec]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc esi
add ebx, 4
cmp esi, 0xd
jne 0x75672e
mov esi, 1
mov ebx, 0x7c77e0
push 0x758fc0
push dword [0x7d06b8]
push dword [ebp - 0x20]
push dword [ebx]
lea eax, [ebp - 0x5f0]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x5f0]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc esi
add ebx, 4
cmp esi, 0xd
jne 0x756776
push 0x758fc0
push dword [0x7d06b8]
push dword [ebp - 0x20]
push 0x758ec4
lea eax, [ebp - 0x5f4]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x5f4]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x758fc0
push dword [0x7d06b8]
push dword [ebp - 0x20]
push 0x758f20
lea eax, [ebp - 0x5f8]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x5f8]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x758fc0
push dword [0x7d06b8]
push dword [ebp - 0x20]
push 0x758f44
lea eax, [ebp - 0x5fc]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x5fc]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x758fc0
push dword [0x7d06b8]
push dword [ebp - 0x20]
push 0x758f60
lea eax, [ebp - 0x600]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x600]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push dword [0x7d06b8]
push dword [ebp - 0x20]
push 0x758e64
lea eax, [ebp - 0x604]
mov edx, 3
call fcn.0040a930
mov eax, dword [ebp - 0x604]
lea ecx, [ebp - 0x298]
mov edx, 0x1ff
call fcn.00424e18
test eax, eax
jne 0x756901
push 0x758fc0
push dword [0x7d06b8]
push dword [ebp - 0x20]
push dword [ebp - 0x284]
lea eax, [ebp - 0x608]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x608]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x298]
call fcn.00424e68
test eax, eax
je 0x7568b3
lea eax, [ebp - 0x298]
call fcn.00424e8c
inc dword [ebp - 0x2a0]
cmp dword [ebp - 0x2a0], 0xa
jne 0x756691
mov eax, 0x7d06bc
mov ecx, 0x758fd8
mov edx, dword [0x7d064c]
call fcn.0040a8a8
mov dl, 1
mov eax, dword [0x7d06bc]
call fcn.00424aec
test al, al
je 0x756c89
push 0x759068
push dword [0x7d06bc]
push 0x759080
lea eax, [ebp - 0x60c]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x60c]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759068
push dword [0x7d06bc]
push 0x759098
lea eax, [ebp - 0x610]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x610]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759068
push dword [0x7d06bc]
push 0x7590d0
lea eax, [ebp - 0x614]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x614]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759068
push dword [0x7d06bc]
push 0x759128
lea eax, [ebp - 0x618]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x618]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759068
push dword [0x7d06bc]
push 0x759164
lea eax, [ebp - 0x61c]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x61c]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759068
push dword [0x7d06bc]
push 0x7591c8
lea eax, [ebp - 0x620]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x620]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x624]
mov ecx, 0x75921c
mov edx, dword [0x7d06bc]
call fcn.0040a8a8
mov eax, dword [ebp - 0x624]
lea ecx, [ebp - 0x298]
mov edx, 0x10
call fcn.00424e18
test eax, eax
jne 0x756c89
push dword [0x7d06bc]
push dword [ebp - 0x284]
push 0x759234
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040a930
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.00424aec
test al, al
je 0x756ae0
lea eax, [ebp - 0x628]
mov ecx, dword [ebp - 8]
mov edx, 0x759068
call fcn.0040a8a8
mov edx, dword [ebp - 0x628]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push dword [0x7d06bc]
push dword [ebp - 0x284]
push 0x759250
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040a930
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.00424aec
test al, al
je 0x756b2f
lea eax, [ebp - 0x62c]
mov ecx, dword [ebp - 8]
mov edx, 0x759068
call fcn.0040a8a8
mov edx, dword [ebp - 0x62c]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push dword [0x7d06bc]
push dword [ebp - 0x284]
push 0x759288
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040a930
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.00424aec
test al, al
je 0x756b7e
lea eax, [ebp - 0x630]
mov ecx, dword [ebp - 8]
mov edx, 0x759068
call fcn.0040a8a8
mov edx, dword [ebp - 0x630]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push dword [0x7d06bc]
push dword [ebp - 0x284]
push 0x7592e0
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040a930
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.00424aec
test al, al
je 0x756bcd
lea eax, [ebp - 0x634]
mov ecx, dword [ebp - 8]
mov edx, 0x759068
call fcn.0040a8a8
mov edx, dword [ebp - 0x634]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push dword [0x7d06bc]
push dword [ebp - 0x284]
push 0x75931c
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040a930
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.00424aec
test al, al
je 0x756c1c
lea eax, [ebp - 0x638]
mov ecx, dword [ebp - 8]
mov edx, 0x759068
call fcn.0040a8a8
mov edx, dword [ebp - 0x638]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push dword [0x7d06bc]
push dword [ebp - 0x284]
push 0x759358
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040a930
mov dl, 1
mov eax, dword [ebp - 8]
call fcn.00424aec
test al, al
je 0x756c6b
lea eax, [ebp - 0x63c]
mov ecx, dword [ebp - 8]
mov edx, 0x759068
call fcn.0040a8a8
mov edx, dword [ebp - 0x63c]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x298]
call fcn.00424e68
test eax, eax
je 0x756a91
lea eax, [ebp - 0x298]
call fcn.00424e8c
mov eax, 0x7d06c0
mov ecx, 0x7593b0
mov edx, dword [0x7d0654]
call fcn.0040a8a8
push 0x7593f0
push dword [0x7d06c0]
push 0x758e10
lea eax, [ebp - 0x640]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x640]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x7593f0
push dword [0x7d06c0]
push 0x758e38
lea eax, [ebp - 0x644]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x644]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x648]
mov ecx, 0x758e64
mov edx, dword [0x7d06c0]
call fcn.0040a8a8
mov eax, dword [ebp - 0x648]
lea ecx, [ebp - 0x298]
mov edx, 0x1ff
call fcn.00424e18
test eax, eax
jne 0x756d79
push 0x7593f0
push dword [0x7d06c0]
push dword [ebp - 0x284]
lea eax, [ebp - 0x64c]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x64c]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x298]
call fcn.00424e68
test eax, eax
je 0x756d2e
lea eax, [ebp - 0x298]
call fcn.00424e8c
xor eax, eax
mov dword [ebp - 0x2a0], eax
mov dl, 1
mov eax, dword [0x7d06c0]
call fcn.00424aec
test al, al
je 0x757018
cmp dword [ebp - 0x2a0], 0
jne 0x756dad
lea eax, [ebp - 0x20]
mov edx, 0x758e84
call fcn.00409f38
jmp 0x756ddb
push 0x758ea4
lea edx, [ebp - 0x650]
mov eax, dword [ebp - 0x2a0]
call fcn.0042419c
push dword [ebp - 0x650]
push 0x758c80
lea eax, [ebp - 0x20]
mov edx, 3
call fcn.0040a930
lea eax, [ebp - 0x654]
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x7d06c0]
call fcn.0040a8a8
mov eax, dword [ebp - 0x654]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757005
lea eax, [ebp - 0x658]
mov ecx, dword [ebp - 0x20]
mov edx, dword [0x7d06c0]
call fcn.0040a8a8
mov edx, dword [ebp - 0x658]
mov eax, dword [0x7d06d0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov esi, 1
mov ebx, 0x7c77b0
push 0x7593f0
push dword [0x7d06c0]
push dword [ebp - 0x20]
push dword [ebx]
push 0x758c80
lea eax, [ebp - 0x65c]
mov edx, 5
call fcn.0040a930
mov edx, dword [ebp - 0x65c]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc esi
add ebx, 4
cmp esi, 0xd
jne 0x756e32
mov esi, 1
mov ebx, 0x7c77e0
push 0x7593f0
push dword [0x7d06c0]
push dword [ebp - 0x20]
push dword [ebx]
lea eax, [ebp - 0x660]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x660]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc esi
add ebx, 4
cmp esi, 0xd
jne 0x756e7a
push 0x7593f0
push dword [0x7d06c0]
push dword [ebp - 0x20]
push 0x758ec4
lea eax, [ebp - 0x664]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x664]
mov eax, dword [0x7d06d4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x7593f0
push dword [0x7d06c0]
push dword [ebp - 0x20]
push 0x758f20
lea eax, [ebp - 0x668]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x668]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x7593f0
push dword [0x7d06c0]
push dword [ebp - 0x20]
push 0x758f44
lea eax, [ebp - 0x66c]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x66c]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x7593f0
push dword [0x7d06c0]
push dword [ebp - 0x20]
push 0x758f60
lea eax, [ebp - 0x670]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x670]
mov eax, dword [0x7d06dc]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push dword [0x7d06c0]
push dword [ebp - 0x20]
push 0x758e64
lea eax, [ebp - 0x674]
mov edx, 3
call fcn.0040a930
mov eax, dword [ebp - 0x674]
lea ecx, [ebp - 0x298]
mov edx, 0x1ff
call fcn.00424e18
test eax, eax
jne 0x757005
push 0x7593f0
push dword [0x7d06c0]
push dword [ebp - 0x20]
push dword [ebp - 0x284]
lea eax, [ebp - 0x678]
mov edx, 4
call fcn.0040a930
mov edx, dword [ebp - 0x678]
mov eax, dword [0x7d06d8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x298]
call fcn.00424e68
test eax, eax
je 0x756fb7
lea eax, [ebp - 0x298]
call fcn.00424e8c
inc dword [ebp - 0x2a0]
cmp dword [ebp - 0x2a0], 0xa
jne 0x756d95
lea edx, [ebp - 0x67c]
mov eax, 0x759408
call fcn.0042da10
mov eax, dword [ebp - 0x67c]
lea edx, [ebp - 8]
call fcn.00752558
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0
je 0x757059
mov eax, dword [ebp - 0x2cc]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0
jle 0x757080
lea edx, [ebp - 0x680]
mov eax, dword [ebp - 8]
call fcn.0042c3c4
mov edx, dword [ebp - 0x680]
mov eax, dword [0x7d06e4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x684]
mov ecx, 0x759080
mov edx, dword [0x7d0654]
call fcn.0040a8a8
mov eax, dword [ebp - 0x684]
mov dl, 1
call fcn.00424aec
test al, al
je 0x7570f7
lea eax, [ebp - 0x688]
mov ecx, 0x759080
mov edx, dword [0x7d0654]
call fcn.0040a8a8
mov edx, dword [ebp - 0x688]
mov eax, dword [0x7d06e4]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jge 0x7570f7
lea eax, [ebp - 0x68c]
mov ecx, 0x759080
mov edx, dword [0x7d0654]
call fcn.0040a8a8
mov edx, dword [ebp - 0x68c]
mov eax, dword [0x7d06e4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x690]
mov ecx, 0x759080
mov edx, dword [0x7d0644]
call fcn.0040a8a8
mov eax, dword [ebp - 0x690]
mov dl, 1
call fcn.00424aec
test al, al
je 0x75716e
lea eax, [ebp - 0x694]
mov ecx, 0x759080
mov edx, dword [0x7d0644]
call fcn.0040a8a8
mov edx, dword [ebp - 0x694]
mov eax, dword [0x7d06e4]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jge 0x75716e
lea eax, [ebp - 0x698]
mov ecx, 0x759080
mov edx, dword [0x7d0644]
call fcn.0040a8a8
mov edx, dword [ebp - 0x698]
mov eax, dword [0x7d06e4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov dl, 1
mov eax, 0x759420
call fcn.00424aec
test al, al
je 0x75718d
mov edx, 0x759420
mov eax, dword [0x7d06e4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x69c]
mov ecx, 0x759458
mov edx, dword [0x7d064c]
call fcn.0040a8a8
mov eax, dword [ebp - 0x69c]
mov dl, 1
call fcn.00424aec
test al, al
je 0x7571da
lea eax, [ebp - 0x6a0]
mov ecx, 0x759458
mov edx, dword [0x7d064c]
call fcn.0040a8a8
mov edx, dword [ebp - 0x6a0]
mov eax, dword [0x7d06e4]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea edx, [ebp - 8]
mov eax, 0x759494
call fcn.0042da10
mov ecx, 1
mov edx, dword [ebp - 8]
mov eax, 0x7594ac
call fcn.0040ab74
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0
jle 0x757274
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x2a0]
dec ecx
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0040aa18
lea eax, [ebp - 8]
mov ecx, dword [ebp - 0x2a0]
mov edx, 1
call fcn.0040aa60
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x75723f
sub eax, 4
mov eax, dword [eax]
test eax, eax
jle 0x757274
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x75724f
sub eax, 4
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
cmp word [edx + eax*2 - 2], 0x5c
je 0x757267
lea eax, [ebp - 0xc]
mov edx, 0x758c80
call fcn.0040a850
mov edx, dword [ebp - 0xc]
mov eax, dword [0x7d06e8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
cmp dword [ebp - 0x2a0], 0
jne 0x7571e7
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0
je 0x7572a4
mov eax, dword [ebp - 0x2d0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0
jle 0x75730c
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0
je 0x7572d0
mov eax, dword [ebp - 0x2d4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x2d4]
cmp word [eax + edx*2 - 2], 0x5c
je 0x7572ee
lea eax, [ebp - 8]
mov edx, 0x758c80
call fcn.0040a850
mov edx, dword [ebp - 8]
mov eax, dword [0x7d06e8]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jge 0x75730c
mov edx, dword [ebp - 8]
mov eax, dword [0x7d06e8]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
call sub.kernel32.dll_GetLogicalDrives
mov ebx, eax
xor eax, eax
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2a0]
cmp eax, 0x1f
ja 0x757329
bt ebx, eax
jae 0x7573d9
mov eax, dword [ebp - 0x2a0]
add eax, 0x41
cmp ax, 0x41
je 0x7573d9
lea eax, [ebp - 0x6a4]
mov edx, dword [ebp - 0x2a0]
add edx, 0x41
call fcn.0040a664
lea eax, [ebp - 0x6a4]
mov edx, 0x7594bc
call fcn.0040a850
mov eax, dword [ebp - 0x6a4]
call fcn.0040a644
push eax
call sub.kernel32.dll_GetDriveTypeW
cmp eax, 3
jne 0x7573d9
lea eax, [ebp - 0x6a8]
mov edx, dword [ebp - 0x2a0]
add edx, 0x41
call fcn.0040a664
mov edx, dword [ebp - 0x6a8]
mov eax, 0x7d0670
mov ecx, 0x7594d0
call fcn.0040a8a8
mov edx, dword [0x7d0670]
mov eax, dword [0x7d06ec]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jge 0x7573d9
mov dl, 1
mov eax, dword [0x7d0670]
call fcn.00424aec
test al, al
je 0x7573d9
mov edx, dword [0x7d0670]
mov eax, dword [0x7d06ec]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
inc dword [ebp - 0x2a0]
cmp dword [ebp - 0x2a0], 0x1a
jne 0x75731b
mov eax, 0x7d0670
mov ecx, 0x7594fc
mov edx, dword [ebp - 4]
call fcn.0040a8a8
mov edx, dword [0x7d0670]
mov eax, dword [0x7d06ec]
mov ecx, dword [eax]
call dword [ecx + 0x58]
test eax, eax
jge 0x757422
mov edx, dword [0x7d0670]
mov eax, dword [0x7d06ec]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
call sub.kernel32.dll_GetLogicalDrives
mov dword [ebp - 0x2a0], eax
mov eax, 0x7d0688
call fcn.00409b00
xor ebx, ebx
mov ecx, ebx
mov eax, 1
shl eax, cl
and eax, dword [ebp - 0x2a0]
je 0x7574b8
lea eax, [ebp - 0x6ac]
mov edx, ebx
add dx, 0x41
call fcn.0040a664
mov edx, dword [ebp - 0x6ac]
lea eax, [ebp - 0x24]
mov ecx, 0x759528
call fcn.0040a8a8
lea eax, [ebp - 0x6b0]
mov ecx, 0x758c80
mov edx, dword [ebp - 0x24]
call fcn.0040a8a8
mov eax, dword [ebp - 0x6b0]
call fcn.0040a644
push eax
call sub.kernel32.dll_GetDriveTypeW
cmp eax, 3
jne 0x7574b8
lea eax, [ebp - 0x6b4]
mov edx, ebx
add dx, 0x41
call fcn.0040a664
mov edx, dword [ebp - 0x6b4]
mov eax, 0x7d0688
call fcn.0040a850
inc ebx
cmp ebx, 0x1a
jne 0x757439
lea eax, [ebp - 0x14]
call fcn.00409b00
lea eax, [ebp - 0x18]
call fcn.00409b00
lea eax, [ebp - 0x10]
call fcn.00409b00
lea eax, [ebp - 0x6b8]
mov ecx, 0x759538
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x6b8]
mov dl, 1
call fcn.00424a54
test al, al
je 0x7576b7
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov dword [ebp - 0x2ac], eax
push 0x40
lea eax, [ebp - 0x6bc]
mov ecx, 0x759538
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov ecx, dword [ebp - 0x6bc]
mov dl, 1
mov eax, dword [0x47a5ec]
call fcn.004a2a04
mov dword [ebp - 0x2b0], eax
xor eax, eax
push ebp
push 0x757570
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [eax]
call dword [ecx + 0x74]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x75757a
mov eax, dword [ebp - 0x2b0]
call fcn.00407e28
mov eax, dword [ebp - 0x2ac]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0x7576ac
or esi, 0xffffffff
inc esi
lea ecx, [ebp - 0x6c4]
mov edx, esi
mov eax, dword [ebp - 0x2ac]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x6c4]
lea edx, [ebp - 0x6c0]
call fcn.004234e0
mov eax, dword [ebp - 0x6c0]
mov ecx, 1
mov edx, eax
mov eax, 0x759568
call fcn.0040ab74
mov ebx, eax
test ebx, ebx
jg 0x7575ed
mov eax, dword [ebp - 0x2ac]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp esi, eax
jne 0x75759b
mov eax, dword [ebp - 0x2ac]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
cmp esi, eax
je 0x7576ac
lea ecx, [ebp - 0x10]
mov edx, esi
mov eax, dword [ebp - 0x2ac]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x759588
call fcn.0040ab74
mov dword [ebp - 0x2d8], eax
lea eax, [ebp - 0x10]
mov ecx, dword [ebp - 0x2d8]
mov edx, 1
call fcn.0040aa60
mov ecx, 1
mov edx, dword [ebp - 0x10]
mov eax, 0x759598
call fcn.0040ab74
mov dword [ebp - 0x2dc], eax
lea eax, [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x2dc]
dec ecx
mov edx, 1
mov eax, dword [ebp - 0x10]
call fcn.0040aa18
push dword [0x7d0650]
push 0x7595a8
push dword [ebp - 0x10]
push 0x7595c4
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.0040a930
push dword [0x7d0650]
push 0x7595a8
push dword [ebp - 0x10]
push 0x7595e8
lea eax, [ebp - 0x18]
mov edx, 4
call fcn.0040a930
mov eax, dword [ebp - 0x2ac]
call fcn.00407e28
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0
je 0x7576da
mov eax, dword [ebp - 0x2e0]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0
jle 0x757714
mov dl, 1
mov eax, dword [ebp - 0x14]
call fcn.00424aec
test al, al
je 0x757714
lea eax, [ebp - 0x6c8]
mov ecx, dword [ebp - 0x14]
mov edx, 0x759638
call fcn.0040a8a8
mov edx, dword [ebp - 0x6c8]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0
je 0x757737
mov eax, dword [ebp - 0x2e4]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0
jle 0x757771
mov dl, 1
mov eax, dword [ebp - 0x18]
call fcn.00424aec
test al, al
je 0x757771
lea eax, [ebp - 0x6cc]
mov ecx, dword [ebp - 0x18]
mov edx, 0x759638
call fcn.0040a8a8
mov edx, dword [ebp - 0x6cc]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x6d0]
mov ecx, 0x759650
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x6d0]
mov dl, 1
call fcn.00424aec
test al, al
je 0x7577c8
push 0x759638
push dword [0x7d0650]
push 0x759650
lea eax, [ebp - 0x6d4]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x6d4]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x6d8]
mov ecx, 0x7596a4
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x6d8]
mov dl, 1
call fcn.00424aec
test al, al
je 0x75781f
push 0x759638
push dword [0x7d0650]
push 0x7596a4
lea eax, [ebp - 0x6dc]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x6dc]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x6e0]
mov ecx, 0x7596fc
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x6e0]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757876
push 0x759638
push dword [0x7d0650]
push 0x7596fc
lea eax, [ebp - 0x6e4]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x6e4]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x1c]
call fcn.00409b00
lea eax, [ebp - 0x6e8]
mov ecx, 0x75974c
mov edx, dword [0x7d0654]
call fcn.0040a8a8
mov eax, dword [ebp - 0x6e8]
lea ecx, [ebp - 0x298]
mov edx, 0x1ff
call fcn.00424e18
test eax, eax
jne 0x7578f9
mov eax, dword [ebp - 0x288]
and eax, 0x10
cmp eax, 0x10
jne 0x7578df
push dword [0x7d0654]
push 0x759794
push dword [ebp - 0x284]
push 0x758c80
lea eax, [ebp - 0x1c]
mov edx, 4
call fcn.0040a930
lea eax, [ebp - 0x298]
call fcn.00424e68
test eax, eax
je 0x7578ae
lea eax, [ebp - 0x298]
call fcn.00424e8c
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0
je 0x75791c
mov eax, dword [ebp - 0x2e8]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0
jle 0x757aa6
push 0x759638
push dword [ebp - 0x1c]
push 0x7597b4
lea eax, [ebp - 0x6ec]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x6ec]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759638
push dword [ebp - 0x1c]
push 0x7597d4
lea eax, [ebp - 0x6f0]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x6f0]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759638
push dword [ebp - 0x1c]
push 0x759830
lea eax, [ebp - 0x6f4]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x6f4]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759638
push dword [ebp - 0x1c]
push 0x759860
lea eax, [ebp - 0x6f8]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x6f8]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x6fc]
mov ecx, 0x759884
mov edx, dword [ebp - 0x1c]
call fcn.0040a8a8
mov eax, dword [ebp - 0x6fc]
lea ecx, [ebp - 0x298]
mov edx, 0x1ff
call fcn.00424e18
test eax, eax
jne 0x757aa6
mov eax, dword [ebp - 0x288]
and eax, 0x10
cmp eax, 0x10
jne 0x757a88
push dword [ebp - 0x1c]
push 0x7598b0
push dword [ebp - 0x284]
push 0x7598d4
lea eax, [ebp - 0x700]
mov edx, 4
call fcn.0040a930
mov eax, dword [ebp - 0x700]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757a88
push 0x759638
push dword [ebp - 0x1c]
push 0x7598b0
push dword [ebp - 0x284]
push 0x7595e8
lea eax, [ebp - 0x704]
mov edx, 5
call fcn.0040a930
mov edx, dword [ebp - 0x704]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x298]
call fcn.00424e68
test eax, eax
je 0x757a0e
lea eax, [ebp - 0x298]
call fcn.00424e8c
lea eax, [ebp - 0x708]
mov ecx, 0x759920
mov edx, dword [0x7d0658]
call fcn.0040a8a8
mov eax, dword [ebp - 0x708]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757afd
push 0x75995c
push dword [0x7d0658]
push 0x759920
lea eax, [ebp - 0x70c]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x70c]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x710]
mov ecx, 0x759974
mov edx, dword [0x7d0654]
call fcn.0040a8a8
mov eax, dword [ebp - 0x710]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757b54
push 0x75995c
push dword [0x7d0654]
push 0x759974
lea eax, [ebp - 0x714]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x714]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x718]
mov ecx, 0x7599e8
mov edx, dword [0x7d0654]
call fcn.0040a8a8
mov eax, dword [ebp - 0x718]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757bab
push 0x75995c
push dword [0x7d0654]
push 0x7599e8
lea eax, [ebp - 0x71c]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x71c]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x720]
mov ecx, 0x759a68
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x720]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757c02
push 0x75995c
push dword [0x7d0650]
push 0x759a68
lea eax, [ebp - 0x724]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x724]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x728]
mov ecx, 0x759aa4
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x728]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757c59
push 0x75995c
push dword [0x7d0650]
push 0x759aa4
lea eax, [ebp - 0x72c]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x72c]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x730]
mov ecx, 0x759ae4
mov edx, dword [0x7d066c]
call fcn.0040a8a8
mov eax, dword [ebp - 0x730]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757cb0
push 0x759b08
push dword [0x7d066c]
push 0x759ae4
lea eax, [ebp - 0x734]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x734]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x738]
mov ecx, 0x759b20
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x738]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757d07
push 0x759b08
push dword [0x7d0650]
push 0x759b20
lea eax, [ebp - 0x73c]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x73c]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x740]
mov ecx, 0x759b58
mov edx, dword [0x7d0654]
call fcn.0040a8a8
mov eax, dword [ebp - 0x740]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757d5e
push 0x759b08
push dword [0x7d0654]
push 0x759b58
lea eax, [ebp - 0x744]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x744]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x748]
mov ecx, 0x759b9c
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x748]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757db5
push 0x759bdc
push dword [0x7d0650]
push 0x759b9c
lea eax, [ebp - 0x74c]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x74c]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x750]
mov ecx, 0x759bf4
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x750]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757e70
push 0x759c14
push dword [0x7d0650]
push 0x759c2c
lea eax, [ebp - 0x754]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x754]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759c14
push dword [0x7d0650]
push 0x759c58
lea eax, [ebp - 0x758]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x758]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759c14
push dword [0x7d0650]
push 0x759c8c
lea eax, [ebp - 0x75c]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x75c]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x760]
mov ecx, 0x759cb8
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x760]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757ec7
push 0x759cdc
push dword [0x7d0650]
push 0x759cb8
lea eax, [ebp - 0x764]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x764]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x768]
mov ecx, 0x759cf4
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x768]
mov dl, 1
call fcn.00424aec
test al, al
je 0x757fb2
push 0x759d24
push dword [0x7d0650]
push 0x759d3c
lea eax, [ebp - 0x76c]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x76c]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759d24
push dword [0x7d0650]
push 0x759d78
lea eax, [ebp - 0x770]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x770]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759d24
push dword [0x7d0650]
push 0x759db8
lea eax, [ebp - 0x774]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x774]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759d24
push dword [0x7d0650]
push 0x759dfc
lea eax, [ebp - 0x778]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x778]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x77c]
mov ecx, 0x759e34
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x77c]
mov dl, 1
call fcn.00424aec
test al, al
je 0x75806d
push 0x759e50
push dword [0x7d0650]
push 0x759e68
lea eax, [ebp - 0x780]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x780]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759e50
push dword [0x7d0650]
push 0x759e90
lea eax, [ebp - 0x784]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x784]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759e50
push dword [0x7d0650]
push 0x759ebc
lea eax, [ebp - 0x788]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x788]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x78c]
mov ecx, 0x759eec
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x78c]
mov dl, 1
call fcn.00424aec
test al, al
je 0x7580f4
push 0x759f0c
push dword [0x7d0650]
push 0x759f24
lea eax, [ebp - 0x790]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x790]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759f0c
push dword [0x7d0650]
push 0x759f50
lea eax, [ebp - 0x794]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x794]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x798]
mov ecx, 0x759f80
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x798]
mov dl, 1
call fcn.00424aec
test al, al
je 0x7581df
push 0x759fa0
push dword [0x7d0650]
push 0x759fb8
lea eax, [ebp - 0x79c]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x79c]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759fa0
push dword [0x7d0650]
push 0x759fe4
lea eax, [ebp - 0x7a0]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7a0]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759fa0
push dword [0x7d0650]
push 0x75a014
lea eax, [ebp - 0x7a4]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7a4]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x759fa0
push dword [0x7d0650]
push 0x75a048
lea eax, [ebp - 0x7a8]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7a8]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x7ac]
mov ecx, 0x75a070
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x7ac]
mov dl, 1
call fcn.00424aec
test al, al
je 0x7582ca
push 0x75a088
push dword [0x7d0650]
push 0x75a0a0
lea eax, [ebp - 0x7b0]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7b0]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x75a088
push dword [0x7d0650]
push 0x75a0c4
lea eax, [ebp - 0x7b4]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7b4]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x75a088
push dword [0x7d0650]
push 0x75a0f0
lea eax, [ebp - 0x7b8]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7b8]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x75a088
push dword [0x7d0650]
push 0x75a120
lea eax, [ebp - 0x7bc]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7bc]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x7c0]
mov ecx, 0x75a144
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x7c0]
mov dl, 1
call fcn.00424aec
test al, al
je 0x7583b5
push 0x75a160
push dword [0x7d0650]
push 0x75a178
lea eax, [ebp - 0x7c4]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7c4]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x75a160
push dword [0x7d0650]
push 0x75a1a0
lea eax, [ebp - 0x7c8]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7c8]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x75a160
push dword [0x7d0650]
push 0x75a1cc
lea eax, [ebp - 0x7cc]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7cc]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x75a160
push dword [0x7d0650]
push 0x75a1fc
lea eax, [ebp - 0x7d0]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7d0]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x7d4]
mov ecx, 0x75a220
mov edx, dword [0x7d0654]
call fcn.0040a8a8
mov eax, dword [ebp - 0x7d4]
mov dl, 1
call fcn.00424aec
test al, al
je 0x75840c
push 0x75a238
push dword [0x7d0654]
push 0x75a250
lea eax, [ebp - 0x7d8]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7d8]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x7dc]
mov ecx, 0x75a274
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x7dc]
mov dl, 1
call fcn.00424aec
test al, al
je 0x758527
push 0x75a290
push dword [0x7d0650]
push 0x75a2a8
lea eax, [ebp - 0x7e0]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7e0]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x75a290
push dword [0x7d0650]
push 0x75a2d0
lea eax, [ebp - 0x7e4]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7e4]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x75a290
push dword [0x7d0650]
push 0x75a300
lea eax, [ebp - 0x7e8]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7e8]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x75a290
push dword [0x7d0650]
push 0x75a334
lea eax, [ebp - 0x7ec]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7ec]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push 0x75a290
push dword [0x7d0650]
push 0x75a35c
lea eax, [ebp - 0x7f0]
mov edx, 3
call fcn.0040a930
mov edx, dword [ebp - 0x7f0]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x7f4]
mov ecx, 0x75a384
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x7f4]
mov dl, 1
call fcn.00424aec
test al, al
je 0x7586ae
lea eax, [ebp - 0x7f8]
mov ecx, 0x75a3a4
mov edx, dword [0x7d0650]
call fcn.0040a8a8
mov eax, dword [ebp - 0x7f8]
lea ecx, [ebp - 0x298]
mov edx, 0x1ff
call fcn.00424e18
test eax, eax
jne 0x7586ae
mov eax, dword [ebp - 0x288]
and eax, 0x10
cmp eax, 0x10
jne 0x758690
push dword [0x7d0650]
push 0x75a384
push dword [ebp - 0x284]
push 0x758c80
push 0x75a3c8
lea eax, [ebp - 0x7fc]
mov edx, 5
call fcn.0040a930
mov eax, dword [ebp - 0x7fc]
mov dl, 1
call fcn.00424aec
test al, al
je 0x758614
push 0x75a3f0
push dword [0x7d0650]
push 0x75a384
push dword [ebp - 0x284]
push 0x758c80
push 0x75a3c8
lea eax, [ebp - 0x800]
mov edx, 6
call fcn.0040a930
mov edx, dword [ebp - 0x800]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push dword [0x7d0650]
push 0x75a384
push dword [ebp - 0x284]
push 0x758c80
push 0x75a408
lea eax, [ebp - 0x804]
mov edx, 5
call fcn.0040a930
mov eax, dword [ebp - 0x804]
mov dl, 1
call fcn.00424aec
test al, al
je 0x758690
push 0x75a3f0
push dword [0x7d0650]
push 0x75a384
push dword [ebp - 0x284]
push 0x758c80
push 0x75a408
lea eax, [ebp - 0x808]
mov edx, 6
call fcn.0040a930
mov edx, dword [ebp - 0x808]
mov eax, dword [0x7d06e0]
mov ecx, dword [eax]
call dword [ecx + 0x3c]
lea eax, [ebp - 0x298]
call fcn.00424e68
test eax, eax
je 0x758586
lea eax, [ebp - 0x298]
call fcn.00424e8c
mov ecx, 0x75a430
mov edx, 0x75a458
mov eax, 0x80000001
call fcn.005b854c
mov byte [0x7d063e], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x758729
lea eax, [ebp - 0x808]
mov edx, 0x64
call fcn.00409b60
lea eax, [ebp - 0x678]
mov edx, 0x62
call fcn.00409b60
lea eax, [ebp - 8]
mov edx, 2
call fcn.00409b60
lea eax, [ebp - 0x298]
mov edx, dword [0x41c09c]
call fcn.0040b274
lea eax, [ebp - 0x24]
mov edx, 7
call fcn.00409b60
pop eax
jmp eax