Function at 0x40eb90
Capabilities:
Execute command

Disassembly:
push esi
push ebx
sub esp, 0x34
cmp dword [0x4bf018], 1
je 0x40f491
cmp dword [0x4bf018], 2
je 0x40f2c3
cmp dword [0x4bf018], 3
jne 0x40ef86
cmp dword [0x50b3c8], 0x3e7
jg 0x40eed8
cmp dword [0x4bf018], 6
jne 0x40efa3
cmp dword [0x50b3c8], 0x3e7
jg 0x40f61f
cmp dword [0x4bf018], 9
jne 0x40ecbb
cmp dword [0x50b3c8], 0x270f
jle 0x40eda6
mov dword [esp], 0x4c1044
lea ebx, [esp + 0x18]
call sub.msvcrt.dll_system
mov dword [esp], 0x4c22dc
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x20]
cmp eax, esi
je 0x40ec49
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp], 0x4c2389
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x40ec84
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], str.pause
add dword [0x4bf018], 1
add dword [0x4bf010], 8
add dword [0x4bf00c], 0x14
mov dword [0x50b3c8], 0
call sub.msvcrt.dll_system
mov dword [esp], 0x4c1044
call sub.msvcrt.dll_system
cmp dword [0x4bf018], 0xa
jne 0x40ed8d
cmp dword [0x50b3c8], 0x270f
jle 0x40eda6
mov dword [esp], 0x4c1044
lea ebx, [esp + 0x18]
call sub.msvcrt.dll_system
mov dword [esp], 0x4c22dc
mov ecx, ebx
call fcn.00401490
push esi
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x20]
cmp eax, esi
je 0x40ed1b
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp], 0x4c239f
mov ecx, ebx
call fcn.00401490
push ecx
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x40ed56
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], str.pause
add dword [0x4bf018], 1
add dword [0x4bf010], 5
add dword [0x4bf00c], 0xf
mov dword [0x50b3c8], 0
call sub.msvcrt.dll_system
mov dword [esp], 0x4c1044
call sub.msvcrt.dll_system
cmp dword [0x4bf018], 0xa
jle 0x40eda6
cmp dword [0x50b3c8], 0x270f
jg 0x40f565
mov dword [esp], 0x4c1044
call sub.msvcrt.dll_system
mov dword [esp + 8], 0x1c
mov dword [esp + 4], 0x4c23ca
mov dword [esp], 0x4c0800
call fcn.004af3b0
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp + 8], 0x18
mov dword [esp + 4], 0x4c23e7
mov dword [esp], 0x4c0800
call fcn.004af3b0
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp + 4], 0x4c2400
mov dword [esp], 0x4c0800
call fcn.004b2630
mov eax, dword [0x4bf014]
cmp eax, 0x61a8
jg 0x40ee35
mov edx, 0x61a8
sub edx, dword [0x4bf010]
cmp eax, edx
jle 0x40f414
mov dword [esp + 8], 4
mov dword [esp + 4], str.100_
mov dword [esp], 0x4c0800
call fcn.004af3b0
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp], 0x50b3ac
mov ecx, 0x4c0620
call fcn.00477ce0
mov eax, dword [0x4bf014]
sub esp, 4
cmp eax, 0x61a8
jg 0x40ee90
mov edx, 0x61a8
sub edx, dword [0x4bf010]
cmp eax, edx
jle 0x40f38d
mov dword [esp + 8], 0x12
mov dword [esp + 4], 0x4c2426
mov dword [esp], 0x4c0800
call fcn.004af3b0
mov dword [esp], 0x4c0800
call fcn.004b01d0
add dword [0x4bf014], 0xf4240
add dword [0x4bf00c], 0x1f4
mov dword [esp], str.pause
call sub.msvcrt.dll_system
mov dword [esp], 0x4c1044
lea ebx, [esp + 0x18]
call sub.msvcrt.dll_system
mov dword [esp], 0x4c22dc
mov ecx, ebx
call fcn.00401490
push edx
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x20]
cmp eax, esi
je 0x40ef1b
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp], 0x4c2339
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x40ef56
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], str.pause
add dword [0x4bf018], 1
add dword [0x4bf00c], 5
mov dword [0x50b3c8], 0
call sub.msvcrt.dll_system
mov dword [esp], 0x4c1044
call sub.msvcrt.dll_system
cmp dword [0x4bf018], 4
jne 0x40f1f3
cmp dword [0x50b3c8], 0x3e7
jg 0x40f13e
cmp dword [0x4bf018], 7
jne 0x40f06e
cmp dword [0x50b3c8], 0x3e7
jle 0x40ecbb
mov dword [esp], 0x4c1044
lea ebx, [esp + 0x18]
call sub.msvcrt.dll_system
mov dword [esp], 0x4c22dc
mov ecx, ebx
call fcn.00401490
push edx
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x20]
cmp eax, esi
je 0x40f003
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp], 0x4c236c
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x40f03e
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], str.pause
add dword [0x4bf018], 1
add dword [0x4bf00c], 0xa
mov dword [0x50b3c8], 0
call sub.msvcrt.dll_system
mov dword [esp], 0x4c1044
call sub.msvcrt.dll_system
cmp dword [0x4bf018], 8
jne 0x40ebe9
cmp dword [0x50b3c8], 0x7cf
jle 0x40ed8d
mov dword [esp], 0x4c1044
lea ebx, [esp + 0x18]
call sub.msvcrt.dll_system
mov dword [esp], 0x4c22dc
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x20]
cmp eax, esi
je 0x40f0ce
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp], 0x4c237b
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x40f109
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], str.pause
add dword [0x4bf018], 1
add dword [0x4bf00c], 8
call sub.msvcrt.dll_system
mov dword [esp], 0x4c1044
mov dword [0x50b3c8], 0
call sub.msvcrt.dll_system
jmp 0x40ebe9
mov dword [esp], 0x4c1044
lea ebx, [esp + 0x18]
call sub.msvcrt.dll_system
mov dword [esp], 0x4c22dc
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x20]
cmp eax, esi
je 0x40f181
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp], 0x4c2347
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x40f1bc
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], str.pause
add dword [0x4bf018], 1
add dword [0x4bf00c], 5
add dword [0x50b3cc], 0x64
mov dword [0x50b3c8], 0
call sub.msvcrt.dll_system
mov dword [esp], 0x4c1044
call sub.msvcrt.dll_system
cmp dword [0x4bf018], 5
jne 0x40ebcc
cmp dword [0x50b3c8], 0x3e7
jle 0x40f06e
mov dword [esp], 0x4c1044
lea ebx, [esp + 0x18]
call sub.msvcrt.dll_system
mov dword [esp], 0x4c22dc
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x20]
cmp eax, esi
je 0x40f253
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp], 0x4c2339
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x40f28e
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], str.pause
add dword [0x4bf018], 1
add dword [0x4bf00c], 5
mov dword [0x50b3c8], 0
call sub.msvcrt.dll_system
mov dword [esp], 0x4c1044
call sub.msvcrt.dll_system
jmp 0x40ebcc
cmp dword [0x50b3c8], 0x3e7
jle 0x40f1f3
mov dword [esp], 0x4c1044
lea ebx, [esp + 0x18]
call sub.msvcrt.dll_system
mov dword [esp], 0x4c22dc
mov ecx, ebx
call fcn.00401490
push esi
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x20]
cmp eax, esi
je 0x40f316
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp], 0x4c2324
mov ecx, ebx
call fcn.00401490
push ecx
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x40f351
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], str.pause
add dword [0x4bf018], 1
add dword [0x4bf010], 1
add dword [0x4bf00c], 2
mov dword [0x50b3c8], 0
call sub.msvcrt.dll_system
mov dword [esp], 0x4c1044
call sub.msvcrt.dll_system
jmp 0x40ebaf
lea ecx, [eax - 0x64]
cmp edx, ecx
jl 0x40f748
lea ecx, [eax - 0x3e8]
cmp edx, ecx
jl 0x40f6d2
lea ecx, [eax - 0xbb8]
cmp edx, ecx
jl 0x40f7e1
lea ecx, [eax - 0x1388]
cmp edx, ecx
jl 0x40f82f
lea ecx, [eax - 0x1f40]
cmp edx, ecx
jl 0x40f793
sub eax, 0x2710
cmp edx, eax
jge 0x40eecc
mov dword [esp + 4], 0x4c2442
mov dword [esp], 0x4c0800
call fcn.004b2630
mov dword [0x4bf014], 1
mov dword [0x4bf00c], 1
mov dword [0x50b3c8], 0
jmp 0x40eecc
lea ecx, [eax - 0x64]
cmp edx, ecx
jl 0x40f766
lea ecx, [eax - 0x3e8]
cmp edx, ecx
jl 0x40f71b
lea ecx, [eax - 0xbb8]
cmp edx, ecx
jl 0x40f802
lea ecx, [eax - 0x1388]
cmp edx, ecx
jl 0x40f850
lea ecx, [eax - 0x1f40]
cmp edx, ecx
jl 0x40f7b4
sub eax, 0x2710
cmp edx, eax
jge 0x40ee5d
mov dword [esp + 8], 2
mov dword [esp + 4], 0x4c2423
mov dword [esp], 0x4c0800
call fcn.004af3b0
mov dword [esp], 0x4c0800
call fcn.004b01d0
jmp 0x40ee5d
cmp dword [0x50b3c8], 0x3e7
jle 0x40ef86
mov dword [esp], 0x4c1044
lea ebx, [esp + 0x18]
call sub.msvcrt.dll_system
mov dword [esp], 0x4c22dc
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x20]
cmp eax, esi
je 0x40f4e4
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp], 0x4c2304
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x40f51f
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], str.pause
add dword [0x4bf018], 1
add dword [0x4bf010], 2
add dword [0x4bf00c], 5
add dword [0x50b3cc], 0x3e8
mov dword [0x50b3c8], 0
call sub.msvcrt.dll_system
mov dword [esp], 0x4c1044
call sub.msvcrt.dll_system
jmp 0x40eba2
mov dword [esp], 0x4c1044
lea ebx, [esp + 0x18]
call sub.msvcrt.dll_system
mov dword [esp], 0x4c22dc
mov ecx, ebx
call fcn.00401490
push edx
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x20]
cmp eax, esi
je 0x40f5a8
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp], 0x4c23b5
mov ecx, ebx
call fcn.00401490
push eax
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x40f5e3
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], str.pause
add dword [0x4bf018], 1
add dword [0x4bf010], 2
add dword [0x4bf00c], 2
mov dword [0x50b3c8], 0
call sub.msvcrt.dll_system
mov dword [esp], 0x4c1044
call sub.msvcrt.dll_system
jmp 0x40eda6
mov dword [esp], 0x4c1044
lea ebx, [esp + 0x18]
call sub.msvcrt.dll_system
mov dword [esp], 0x4c22dc
mov ecx, ebx
call fcn.00401490
push esi
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
lea esi, [esp + 0x20]
cmp eax, esi
je 0x40f662
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], 0x4c0800
call fcn.004b01d0
mov dword [esp], 0x4c235e
mov ecx, ebx
call fcn.00401490
push ecx
mov dword [esp + 4], 1
mov dword [esp], ebx
call fcn.00401520
mov eax, dword [esp + 0x18]
cmp eax, esi
je 0x40f69d
mov dword [esp], eax
call fcn.004b4c70
mov dword [esp], str.pause
add dword [0x4bf018], 1
add dword [0x4bf00c], 6
mov dword [0x50b3c8], 0
call sub.msvcrt.dll_system
mov dword [esp], 0x4c1044
call sub.msvcrt.dll_system
jmp 0x40efa3
call sub.msvcrt.dll_rand
mov ecx, 0x64
cdq
idiv ecx
mov dword [0x50b3a8], edx
cmp edx, 0x40
jg 0x40f3dd
mov dword [esp + 4], 0x4c2439
mov dword [esp], 0x4c0800
call fcn.004b2630
add dword [0x4bf014], 0xf4240
add dword [0x4bf00c], 0x1f4
jmp 0x40eecc
mov dword [esp + 8], 3
mov dword [esp + 4], 0x4c2414
mov dword [esp], 0x4c0800
call fcn.004af3b0
mov dword [esp], 0x4c0800
call fcn.004b01d0
jmp 0x40ee5d
call sub.msvcrt.dll_rand
mov ecx, 0x64
cdq
idiv ecx
mov dword [0x50b3a8], edx
cmp edx, 0x4f
jg 0x40f3dd
jmp 0x40f6ee
mov dword [esp + 8], 3
mov dword [esp + 4], 0x4c2410
mov dword [esp], 0x4c0800
call fcn.004af3b0
mov dword [esp], 0x4c0800
call fcn.004b01d0
jmp 0x40ee5d
call sub.msvcrt.dll_rand
mov ecx, 0x64
cdq
idiv ecx
mov dword [0x50b3a8], edx
cmp edx, 4
jg 0x40f3dd
jmp 0x40f6ee
mov dword [esp + 8], 2
mov dword [esp + 4], 0x4c2420
mov dword [esp], 0x4c0800
call fcn.004af3b0
mov dword [esp], 0x4c0800
call fcn.004b01d0
jmp 0x40ee5d
call sub.msvcrt.dll_rand
mov ecx, 0x64
cdq
idiv ecx
mov dword [0x50b3a8], edx
cmp edx, 0x27
jg 0x40f3dd
jmp 0x40f6ee
mov dword [esp + 8], 3
mov dword [esp + 4], 0x4c2418
mov dword [esp], 0x4c0800
call fcn.004af3b0
mov dword [esp], 0x4c0800
call fcn.004b01d0
jmp 0x40ee5d
call sub.msvcrt.dll_rand
mov ecx, 0x64
cdq
idiv ecx
mov dword [0x50b3a8], edx
cmp edx, 0x18
jg 0x40f3dd
jmp 0x40f6ee
mov dword [esp + 8], 3
mov dword [esp + 4], 0x4c241c
mov dword [esp], 0x4c0800
call fcn.004af3b0
mov dword [esp], 0x4c0800
call fcn.004b01d0
jmp 0x40ee5d