Function at 0x406f80
Capabilities:
Get hostname
Get session user name

Disassembly:
sub esp, 0x1f8
push ebx
push ebp
push esi
push edi
xor edi, edi
xor esi, esi
call fcn.004081b0
call fcn.00408160
mov edx, eax
mov ebx, 1
cmp dx, di
mov dword [esp + 0x98], edx
jge 0x406fc0
mov ebp, dword [esp + 0x20c]
movsx eax, dx
mov dword [ebp + 0x94], eax
jmp 0x407c05
mov ebp, dword [esp + 0x20c]
mov dword [esp + 0x14], edi
mov ecx, 0x20
xor eax, eax
mov dword [ebp + 0x94], edi
lea edi, [esp + 0x18]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x18]
push 3
push ecx
push ebx
push edx
call fcn.00408940
add esp, 0x10
mov eax, dword [esp + 0x98]
lea edx, [esp + 0x18]
push 0
push edx
push eax
call fcn.00408960
add esp, 0xc
test eax, eax
jl 0x407bee
mov ecx, 0x32
xor eax, eax
lea edi, [esp + 0x140]
lea edx, [esp + 0x140]
rep stosd dword es:[edi], eax
mov cx, word [esp + 0x18]
push edx
mov word [esp + 0x144], cx
call fcn.0041571f
mov ecx, dword [ebp + 4]
add esp, 4
cmp ecx, 0x4d
ja case.0x40704f.14
xor edx, edx
mov dl, byte [ecx + 0x407c68]
jmp dword [edx*4 + 0x407c2c]
cmp eax, 7
jne 0x406fef
mov edx, dword [0x4ae788]
mov ecx, 5
lea esi, [esp + 0x42]
xor eax, eax
lea edi, [edx + 0x34b]
repe cmpsw word [esi], word es:[edi]
jne 0x406fef
mov ecx, 0x14
lea edi, [esp + 0xf0]
mov dword [esp + 0x9c], 0x28
rep stosd dword es:[edi], eax
cmp dword [edx + 0x3dc60], ebx
jne 0x4070b4
lea ecx, [esp + 0x9c]
lea edx, [esp + 0xf0]
push ecx
push edx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
jmp 0x4070ca
lea eax, [esp + 0x9c]
lea ecx, [esp + 0xf0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov al, byte [esp + 0xf0]
test al, al
jne 0x40710c
mov ecx, 0x14
xor eax, eax
lea edi, [esp + 0xf0]
lea edx, [esp + 0xf0]
rep stosd dword es:[edi], eax
mov edi, str.Standalone
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0xa
lea edi, [esp + 0xf0]
lea esi, [esp + 0x6a]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
jne 0x4074c1
mov dword [esp + 0x14], ebx
jmp 0x406fef
cmp eax, 9
jne 0x406fef
mov ecx, 0x14
xor eax, eax
lea edi, [esp + 0xa0]
mov dword [esp + 0x10], 0x28
rep stosd dword es:[edi], eax
mov eax, dword [0x4ae788]
cmp dword [eax + 0x3dc60], ebx
jne 0x407172
lea ecx, [esp + 0x10]
lea edx, [esp + 0xa0]
push ecx
push edx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
jmp 0x407185
lea eax, [esp + 0x10]
lea ecx, [esp + 0xa0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov al, byte [esp + 0xa0]
test al, al
jne 0x4071c7
mov ecx, 0x14
xor eax, eax
lea edi, [esp + 0xa0]
lea edx, [esp + 0xa0]
rep stosd dword es:[edi], eax
mov edi, str.Standalone
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0xa
lea edi, [esp + 0xa0]
lea esi, [esp + 0x6a]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
jne 0x407535
mov dword [esp + 0x14], ebx
jmp 0x406fef
test eax, eax
jne 0x406fef
mov eax, dword [0x4ae788]
mov ecx, 5
lea esi, [esp + 0x42]
xor edx, edx
lea edi, [eax + 0x34b]
repe cmpsw word [esi], word es:[edi]
je 0x406fef
mov ecx, 5
lea edi, [esp + 0x1a]
lea esi, [ebp + 8]
xor eax, eax
repe cmpsw word [esi], word es:[edi]
je 0x40758a
jmp 0x406fef
cmp eax, 0xb
je 0x40764a
cmp eax, 0x4d
je 0x40764a
cmp eax, ebx
jne 0x406fef
mov ecx, 3
lea edi, [esp + 0x1a]
lea esi, [ebp + 8]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
jne 0x406fef
mov edx, dword [ebp + 0x15]
lea ecx, [ebp + 0x15]
lea eax, [esp + 0x26]
cmp edx, dword [eax]
je 0x4075ea
jmp 0x406fef
cmp eax, 0xc
je 0x40770a
cmp eax, 0x4d
je 0x40770a
cmp eax, 2
jne 0x406fef
mov ecx, 3
lea edi, [esp + 0x1a]
lea esi, [ebp + 8]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x406fef
mov eax, dword [ebp + 0x15]
lea edx, [ebp + 0x15]
lea ecx, [esp + 0x26]
cmp eax, dword [ecx]
je 0x4076aa
jmp 0x406fef
cmp eax, 0xc
je 0x4077ca
cmp eax, 0x4d
je 0x4077ca
cmp eax, 3
jne 0x406fef
mov ecx, eax
lea edi, [esp + 0x1a]
lea esi, [ebp + 8]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
jne 0x406fef
mov edx, dword [ebp + 0x15]
lea ecx, [ebp + 0x15]
lea eax, [esp + 0x26]
cmp edx, dword [eax]
je 0x40776a
jmp 0x406fef
cmp eax, 0xd
je 0x40788a
cmp eax, 0x4d
je 0x40788a
cmp eax, 4
jne 0x406fef
mov ecx, 3
lea edi, [esp + 0x1a]
lea esi, [ebp + 8]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x406fef
mov eax, dword [ebp + 0x15]
lea edx, [ebp + 0x15]
lea ecx, [esp + 0x26]
cmp eax, dword [ecx]
je 0x40782a
jmp 0x406fef
cmp eax, 0xb
je 0x406fef
cmp eax, ebx
je 0x4078ea
cmp eax, 0x4d
je 0x4078ea
jmp 0x406fef
cmp eax, 0xc
je 0x406fef
cmp eax, 2
je 0x40794a
cmp eax, 3
je 0x40794a
cmp eax, 0x4d
je 0x40794a
jmp 0x406fef
cmp eax, 0xd
je 0x406fef
cmp eax, 4
je 0x4079aa
cmp eax, 0x4d
je 0x4079aa
jmp 0x406fef
cmp eax, 0x15
je 0x407a0a
cmp eax, 0x14
jne 0x406fef
mov ecx, 3
lea edi, [esp + 0x1a]
lea esi, [ebp + 8]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
jne 0x406fef
mov edx, dword [ebp + 0x15]
lea ecx, [ebp + 0x15]
lea eax, [esp + 0x26]
cmp edx, dword [eax]
je 0x407a6a
jmp 0x406fef
mov edx, dword [0x4ae788]
mov ecx, 5
lea esi, [esp + 0x42]
lea edi, [edx + 0x34b]
xor edx, edx
repe cmpsw word [esi], word es:[edi]
je 0x406fef
cmp eax, 0x14
je 0x407aca
cmp eax, 0x15
je 0x407aca
jmp 0x406fef
mov edx, dword [0x4ae788]
mov ecx, 5
lea esi, [esp + 0x42]
lea edi, [edx + 0x34b]
xor edx, edx
repe cmpsw word [esi], word es:[edi]
je 0x406fef
cmp eax, 0x16
je 0x407b2a
jmp 0x406fef
mov edx, dword [0x4ae788]
mov ecx, 5
lea esi, [esp + 0x42]
lea edi, [edx + 0x34b]
xor edx, edx
repe cmpsw word [esi], word es:[edi]
je 0x406fef
cmp eax, ebx
je 0x407b87
cmp eax, 2
je 0x407b87
cmp eax, 3
je 0x407b87
cmp eax, 4
je 0x407b87
cmp eax, 0xb
je 0x407b87
cmp eax, 0xc
je 0x407b87
cmp eax, 0xd
je 0x407b87
cmp eax, 0x4d
je 0x407b87
jmp 0x406fef
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov dword [esp + 0x10], eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edx, dword [esp + 0x10]
dec edi
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp + 0x65]
mov ecx, 0xa
lea esi, [esp + 0x6a]
rep movsd dword es:[edi], dword [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov dword [esp + 0x10], eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov edx, dword [esp + 0x10]
dec edi
jmp 0x407514
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov eax, dword [esp + 0x2e]
mov ecx, dword [esp + 0x32]
lea edx, [ebp + 0x28]
mov dword [ebp + 0x1f], eax
mov dword [ebp + 0x23], ecx
mov ecx, dword [esp + 0x36]
mov eax, edx
mov edi, 0x4207cc
mov dword [ebp + 0x94], ebx
mov dword [eax], ecx
mov ecx, dword [esp + 0x3a]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x3e]
mov dword [eax + 8], ecx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
mov edx, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x407bee
mov dword [ebp + 0x94], 0xffffffa8
movsx eax, word [esp + 0x98]
push eax
call fcn.00408850
mov esi, dword [esp + 0x18]
add esp, 4
xor edi, edi
call fcn.00408390
cmp esi, ebx
jne 0x407c1d
push ebp
call fcn.00407f40
add esp, 4
mov dword [ebp + 0x94], edi
pop edi
pop esi
pop ebp
xor ax, ax
pop ebx
add esp, 0x1f8
ret