Function at 0x1035a4
Capabilities:
Create process on windows
Get common file path
Set current directory

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x10f
push 0
push 0
dec ecx
jne 0x1035ac
push ecx
push ebx
push esi
push edi
mov ebx, edx
xor eax, eax
push ebp
push 0x10695c
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [ebx + 0x10120], 0
ja 0x10638b
call fcn.000ff54c
mov ax, word [ebx + 0x100fe]
call fcn.000fd61c
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x103638
lea eax, [ebp - 0x330]
call fcn.000feec0
lea eax, [ebp - 0x330]
push eax
lea edx, [ebp - 0x334]
mov eax, 0x106970
call fcn.00031d88
mov edx, dword [ebp - 0x334]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x330]
mov edx, dword [0x2a75b8]
call fcn.000fb018
jmp 0x10638b
lea eax, [ebp - 0x33c]
call fcn.000feec0
push dword [ebp - 0x33c]
lea edx, [ebp - 0x340]
mov eax, 0x106998
call fcn.00031d88
push dword [ebp - 0x340]
lea eax, [ebp - 0x344]
imul ebx, dword [ebp - 0x88], 0x4a
mov edx, dword [0x2a75d0]
lea edx, [edx + ebx*8 - 0x100]
call fcn.00013e70
push dword [ebp - 0x344]
lea eax, [ebp - 0x338]
mov edx, 3
call fcn.00013f8c
mov eax, dword [ebp - 0x338]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
xor eax, eax
push ebp
push 0x1036ce
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x2a75d0]
lea eax, [eax + ebx*8 - 0x250]
call fcn.00016330
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x1036d8
mov dword [ebp - 0x44], 0xffffffff
lea eax, [ebp - 0x74]
call fcn.00013c3c
mov dword [ebp - 0x48], 0xffffffff
lea eax, [ebp - 0x58]
call fcn.00014314
lea eax, [ebp - 0x90]
call fcn.00014314
lea eax, [ebp - 0x60]
call fcn.00014314
lea eax, [ebp - 0x3c]
call fcn.00014314
lea eax, [ebp - 0x64]
call fcn.00014314
lea eax, [ebp - 0x78]
call fcn.00014314
mov dword [ebp - 0x2c], 0xffffffff
lea eax, [ebp - 0x34]
call fcn.00014314
lea eax, [ebp - 0x70]
call fcn.00014314
lea eax, [ebp - 0x40]
call fcn.00013c3c
or esi, 0xffffffff
mov dword [ebp - 0x80], 0xffffffff
lea eax, [ebp - 0x20]
call fcn.00014314
lea eax, [ebp - 0x4c]
call fcn.00014314
lea eax, [ebp - 0x5c]
call fcn.00014314
lea eax, [ebp - 0x6c]
call fcn.00014314
lea eax, [ebp - 0x54]
call fcn.00014314
lea eax, [ebp - 0x84]
call fcn.00013c3c
mov eax, dword [0x2a75b8]
push eax
lea edx, [ebp - 0x348]
mov eax, dword [0x2a75bc]
call fcn.00035eb0
lea eax, [ebp - 0x348]
push eax
lea eax, [ebp - 0x34c]
imul ebx, dword [ebp - 0x88], 0x4a
mov edx, dword [0x2a75d0]
lea edx, [edx + ebx*8 - 0x100]
call fcn.00013e70
mov edx, dword [ebp - 0x34c]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x348]
lea ecx, [ebp - 0x74]
lea edx, [ebp - 0x40]
call fcn.000fef30
test al, al
jne 0x103cc1
lea eax, [ebp - 0x2c8]
xor ecx, ecx
mov edx, 0x200
call fcn.00012b94
mov eax, dword [0x2a96b8]
mov byte [eax], 0
call fcn.00012828
xor eax, eax
push ebp
push 0x1039c7
push dword fs:[eax]
mov dword fs:[eax], esp
lea edx, [ebp - 0x350]
mov eax, dword [0x2a75bc]
call fcn.00035eb0
lea eax, [ebp - 0x350]
push eax
lea eax, [ebp - 0x354]
mov edx, dword [0x2a75d0]
lea edx, [edx + ebx*8 - 0x100]
call fcn.00013e70
mov edx, dword [ebp - 0x354]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x350]
mov eax, dword [0x2a75d0]
lea eax, [eax + ebx*8 - 0x250]
call fcn.000161c6
mov eax, dword [0x2a75d0]
lea eax, [eax + ebx*8 - 0x250]
mov edx, 1
call fcn.000167c5
lea eax, [ebp - 0x35c]
call fcn.000feec0
push dword [ebp - 0x35c]
lea edx, [ebp - 0x360]
mov eax, 0x1069a4
call fcn.00031d88
push dword [ebp - 0x360]
lea eax, [ebp - 0x364]
mov edx, dword [0x2a75d0]
lea edx, [edx + ebx*8 - 0x100]
call fcn.00013e70
push dword [ebp - 0x364]
lea eax, [ebp - 0x358]
mov edx, 3
call fcn.00013f8c
mov eax, dword [ebp - 0x358]
mov edx, dword [0x2a75b8]
call fcn.000fb018
lea eax, [ebp - 0x36c]
call fcn.000feec0
push dword [ebp - 0x36c]
lea edx, [ebp - 0x370]
mov eax, 0x1069c8
call fcn.00031d88
push dword [ebp - 0x370]
mov eax, dword [0x2a75d0]
lea eax, [eax + ebx*8 - 0x250]
call fcn.00016500
lea edx, [ebp - 0x374]
call fcn.00033438
push dword [ebp - 0x374]
lea edx, [ebp - 0x378]
mov eax, 0x1069f8
call fcn.00031d88
push dword [ebp - 0x378]
lea eax, [ebp - 0x368]
mov edx, 4
call fcn.00013f8c
mov eax, dword [ebp - 0x368]
mov edx, dword [0x2a75b8]
call fcn.000fb018
xor eax, eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
mov eax, dword [0x2a75d0]
lea eax, [eax + ebx*8 - 0x250]
lea edx, [ebp - 0x2c8]
mov ecx, 0x200
call fcn.00016268
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x1039ce
xor eax, eax
push ebp
push 0x1039bc
push dword fs:[eax]
mov dword fs:[eax], esp
imul eax, dword [ebp - 0x88], 0x4a
mov edx, dword [0x2a75d0]
lea eax, [edx + eax*8 - 0x250]
call fcn.00016330
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x1039c6
ret
lea eax, [ebp - 0xc4]
mov edx, dword [0x2a75d0]
lea edx, [edx + ebx*8 - 0x100]
call fcn.00013e70
lea edx, [ebp - 0x3d0]
mov eax, 0x106a78
call fcn.00031d88
mov edx, dword [ebp - 0x3d0]
lea ecx, [ebp - 0xc0]
mov eax, dword [ebp - 0xc4]
call fcn.00033968
lea eax, [ebp - 0x3d8]
call fcn.000feec0
push dword [ebp - 0x3d8]
lea edx, [ebp - 0x3dc]
mov eax, 0x106a80
call fcn.00031d88
push dword [ebp - 0x3dc]
lea edx, [ebp - 0x3e0]
mov eax, dword [0x2a75a0]
call fcn.00033438
push dword [ebp - 0x3e0]
lea edx, [ebp - 0x3e4]
mov eax, 0x106a98
call fcn.00031d88
push dword [ebp - 0x3e4]
lea eax, [ebp - 0x3d4]
mov edx, 4
call fcn.00013f8c
mov eax, dword [ebp - 0x3d4]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
lea eax, [ebp - 0x3ec]
call fcn.000feec0
push dword [ebp - 0x3ec]
lea edx, [ebp - 0x3f0]
mov eax, 0x106a9c
call fcn.00031d88
push dword [ebp - 0x3f0]
push dword [ebp - 0x40]
lea edx, [ebp - 0x3f4]
mov eax, 0x106a98
call fcn.00031d88
push dword [ebp - 0x3f4]
lea eax, [ebp - 0x3e8]
mov edx, 4
call fcn.00013f8c
mov eax, dword [ebp - 0x3e8]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
lea eax, [ebp - 0x3fc]
call fcn.000feec0
push dword [ebp - 0x3fc]
lea edx, [ebp - 0x400]
mov eax, 0x106ab0
call fcn.00031d88
push dword [ebp - 0x400]
push dword [ebp - 0x74]
lea edx, [ebp - 0x404]
mov eax, 0x106a98
call fcn.00031d88
push dword [ebp - 0x404]
lea eax, [ebp - 0x3f8]
mov edx, 4
call fcn.00013f8c
mov eax, dword [ebp - 0x3f8]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x40]
call fcn.000144c4
lea eax, [ebp - 0x34]
mov edx, dword [ebp - 0x74]
call fcn.000144c4
cmp dword [0x2a75a0], 1
jl 0x103e73
lea eax, [ebp - 0x34]
mov edx, dword [0x2a75c4]
call fcn.00014350
lea eax, [ebp - 0x28]
mov edx, dword [0x2a75b4]
call fcn.00014350
jmp 0x103ed6
lea eax, [ebp - 0x40c]
call fcn.000feec0
push dword [ebp - 0x40c]
push 0x106acc
lea edx, [ebp - 0x410]
mov eax, 0x106ad4
call fcn.00031d88
push dword [ebp - 0x410]
lea edx, [ebp - 0x414]
mov eax, dword [0x2a75a0]
call fcn.00033438
push dword [ebp - 0x414]
lea eax, [ebp - 0x408]
mov edx, 4
call fcn.00013f8c
mov eax, dword [ebp - 0x408]
mov edx, dword [0x2a75b8]
call fcn.000fb018
lea eax, [ebp - 0x41c]
call fcn.000feec0
push dword [ebp - 0x41c]
lea edx, [ebp - 0x420]
mov eax, 0x106a80
call fcn.00031d88
push dword [ebp - 0x420]
lea edx, [ebp - 0x424]
mov eax, dword [0x2a75a0]
call fcn.00033438
push dword [ebp - 0x424]
lea edx, [ebp - 0x428]
mov eax, 0x106a98
call fcn.00031d88
push dword [ebp - 0x428]
lea eax, [ebp - 0x418]
mov edx, 4
call fcn.00013f8c
mov eax, dword [ebp - 0x418]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
lea eax, [ebp - 0x434]
call fcn.000feec0
lea eax, [ebp - 0x434]
push eax
lea edx, [ebp - 0x438]
mov eax, 0x106af0
call fcn.00031d88
mov edx, dword [ebp - 0x438]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x434]
lea eax, [ebp - 0x430]
call fcn.000144c4
push dword [ebp - 0x430]
push dword [ebp - 0x28]
push 0x106b08
lea eax, [ebp - 0x42c]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x42c]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x444]
call fcn.000feec0
lea eax, [ebp - 0x444]
push eax
lea edx, [ebp - 0x448]
mov eax, 0x106b0c
call fcn.00031d88
mov edx, dword [ebp - 0x448]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x444]
lea eax, [ebp - 0x440]
call fcn.000144c4
push dword [ebp - 0x440]
push dword [ebp - 0x34]
push 0x106b08
lea eax, [ebp - 0x43c]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x43c]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
push 0
push 0
mov eax, dword [0x2a75a4]
push eax
mov eax, dword [0x2a75ac]
push eax
lea edx, [ebp - 0x44c]
mov eax, 0x106b20
call fcn.00031d88
mov eax, dword [ebp - 0x44c]
push eax
xor ecx, ecx
xor edx, edx
mov eax, dword [0x2a75b8]
call fcn.000f9844
xor ebx, ebx
mov eax, dword [0x2a75ac]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x104169
mov eax, dword [0x2a75ac]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edi, eax
mov eax, dword [0x2a75a4]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp edi, eax
jne 0x104169
mov eax, dword [0x2a75ac]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x104169
inc eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x450]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a75ac]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x450]
lea ecx, [ebp - 0x58]
lea edx, [ebp - 0x4c]
call fcn.0001e044
lea edx, [ebp - 0x454]
mov eax, dword [ebp - 0x4c]
call fcn.0001e660
mov eax, dword [ebp - 0x454]
push eax
lea edx, [ebp - 0x458]
mov eax, dword [ebp - 0x34]
call fcn.0001e660
mov edx, dword [ebp - 0x458]
pop eax
call fcn.00014660
jne 0x104157
inc ebx
cmp ebx, 1
jne 0x10414c
push dword [ebp - 0x58]
push 0x106b28
push dword [ebp - 0x4c]
lea eax, [ebp - 0x70]
mov edx, 3
call fcn.00014618
lea ecx, [ebp - 0x45c]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a75a4]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x45c]
call fcn.0002d2e0
mov esi, eax
jmp 0x104157
lea eax, [ebp - 0x70]
call fcn.00014314
or esi, 0xffffffff
inc dword [ebp - 0xb4]
dec dword [ebp - 0xc8]
jne 0x1040b1
cmp ebx, 1
jne 0x1042b4
lea eax, [ebp - 0x46c]
call fcn.000feec0
push dword [ebp - 0x46c]
lea edx, [ebp - 0x470]
mov eax, 0x106b2c
call fcn.00031d88
push dword [ebp - 0x470]
lea edx, [ebp - 0x474]
mov eax, ebx
call fcn.00033438
push dword [ebp - 0x474]
lea edx, [ebp - 0x478]
mov eax, 0x106b48
call fcn.00031d88
push dword [ebp - 0x478]
mov eax, dword [0x2a75ac]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x47c]
call fcn.00033438
push dword [ebp - 0x47c]
lea edx, [ebp - 0x480]
mov eax, 0x106b54
call fcn.00031d88
push dword [ebp - 0x480]
lea eax, [ebp - 0x468]
mov edx, 6
call fcn.00013f8c
mov edx, dword [ebp - 0x468]
lea eax, [ebp - 0x464]
call fcn.000144c4
push dword [ebp - 0x464]
push dword [ebp - 0x70]
lea edx, [ebp - 0x488]
mov eax, 0x106b58
call fcn.00031d88
mov edx, dword [ebp - 0x488]
lea eax, [ebp - 0x484]
call fcn.000144c4
lea eax, [ebp - 0x484]
push eax
lea edx, [ebp - 0x48c]
mov eax, esi
call fcn.0002d290
mov edx, dword [ebp - 0x48c]
pop eax
call fcn.00014554
push dword [ebp - 0x484]
lea eax, [ebp - 0x460]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x460]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x20]
mov edx, dword [ebp - 0x70]
call fcn.00014350
lea edx, [ebp - 0x84]
mov eax, dword [ebp - 0x20]
call fcn.0001de60
lea ecx, [ebp - 0x78]
lea edx, [ebp - 0x90]
mov eax, dword [ebp - 0x20]
call fcn.0002fa68
jmp 0x10436f
lea eax, [ebp - 0x494]
call fcn.000feec0
push dword [ebp - 0x494]
lea edx, [ebp - 0x498]
mov eax, 0x106b2c
call fcn.00031d88
push dword [ebp - 0x498]
lea edx, [ebp - 0x49c]
mov eax, ebx
call fcn.00033438
push dword [ebp - 0x49c]
lea edx, [ebp - 0x4a0]
mov eax, 0x106b48
call fcn.00031d88
push dword [ebp - 0x4a0]
mov eax, dword [0x2a75ac]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x4a4]
call fcn.00033438
push dword [ebp - 0x4a4]
lea edx, [ebp - 0x4a8]
mov eax, 0x106b54
call fcn.00031d88
push dword [ebp - 0x4a8]
push dword [ebp - 0x74]
lea edx, [ebp - 0x4ac]
mov eax, 0x106a98
call fcn.00031d88
push dword [ebp - 0x4ac]
lea eax, [ebp - 0x490]
mov edx, 8
call fcn.00013f8c
mov eax, dword [ebp - 0x490]
mov edx, dword [0x2a75b8]
call fcn.000fb0e0
mov dword [ebp - 0xa8], ebx
lea eax, [ebp - 0x4b4]
call fcn.000feec0
lea eax, [ebp - 0x4b4]
push eax
lea edx, [ebp - 0x4b8]
mov eax, 0x106b6c
call fcn.00031d88
mov edx, dword [ebp - 0x4b8]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x4b4]
lea eax, [ebp - 0x4b0]
call fcn.000144c4
mov eax, dword [ebp - 0x4b0]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x4c4]
call fcn.000feec0
lea eax, [ebp - 0x4c4]
push eax
lea edx, [ebp - 0x4c8]
mov eax, 0x106b80
call fcn.00031d88
mov edx, dword [ebp - 0x4c8]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x4c4]
lea eax, [ebp - 0x4c0]
call fcn.000144c4
push dword [ebp - 0x4c0]
push dword [ebp - 0x70]
push 0x106b08
lea eax, [ebp - 0x4bc]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x4bc]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x4d4]
call fcn.000feec0
lea eax, [ebp - 0x4d4]
push eax
lea edx, [ebp - 0x4d8]
mov eax, 0x106b8c
call fcn.00031d88
mov edx, dword [ebp - 0x4d8]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x4d4]
lea eax, [ebp - 0x4d0]
call fcn.000144c4
push dword [ebp - 0x4d0]
push dword [ebp - 0x60]
push 0x106b08
lea eax, [ebp - 0x4cc]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x4cc]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x4e4]
call fcn.000feec0
lea eax, [ebp - 0x4e4]
push eax
lea edx, [ebp - 0x4e8]
mov eax, 0x106b98
call fcn.00031d88
mov edx, dword [ebp - 0x4e8]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x4e4]
lea eax, [ebp - 0x4e0]
call fcn.000144c4
push dword [ebp - 0x4e0]
push dword [ebp - 0x6c]
push 0x106b08
lea eax, [ebp - 0x4dc]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x4dc]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x4f4]
call fcn.000feec0
lea eax, [ebp - 0x4f4]
push eax
lea edx, [ebp - 0x4f8]
mov eax, 0x106ba4
call fcn.00031d88
mov edx, dword [ebp - 0x4f8]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x4f4]
lea eax, [ebp - 0x4f0]
call fcn.000144c4
push dword [ebp - 0x4f0]
push dword [ebp - 0x20]
push 0x106b08
lea eax, [ebp - 0x4ec]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x4ec]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x504]
call fcn.000feec0
lea eax, [ebp - 0x504]
push eax
lea edx, [ebp - 0x508]
mov eax, 0x106bb0
call fcn.00031d88
mov edx, dword [ebp - 0x508]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x504]
lea eax, [ebp - 0x500]
call fcn.000144c4
push dword [ebp - 0x500]
push dword [ebp - 0x78]
push 0x106b28
push dword [ebp - 0x90]
push 0x106b08
lea eax, [ebp - 0x4fc]
mov edx, 5
call fcn.00014618
mov eax, dword [ebp - 0x4fc]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x514]
call fcn.000feec0
lea eax, [ebp - 0x514]
push eax
lea edx, [ebp - 0x518]
mov eax, 0x106b80
call fcn.00031d88
mov edx, dword [ebp - 0x518]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x514]
lea eax, [ebp - 0x510]
call fcn.000144c4
push dword [ebp - 0x510]
lea eax, [ebp - 0x51c]
mov edx, dword [ebp - 0x84]
call fcn.000144c4
push dword [ebp - 0x51c]
push 0x106b08
lea eax, [ebp - 0x50c]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x50c]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x524]
call fcn.000feec0
push dword [ebp - 0x524]
lea edx, [ebp - 0x528]
mov eax, 0x106bbc
call fcn.00031d88
push dword [ebp - 0x528]
push dword [ebp - 0x74]
lea edx, [ebp - 0x52c]
mov eax, 0x106a98
call fcn.00031d88
push dword [ebp - 0x52c]
lea eax, [ebp - 0x520]
mov edx, 4
call fcn.00013f8c
mov eax, dword [ebp - 0x520]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
lea eax, [ebp - 0x538]
call fcn.000feec0
lea eax, [ebp - 0x538]
push eax
lea edx, [ebp - 0x53c]
mov eax, 0x106bd0
call fcn.00031d88
mov edx, dword [ebp - 0x53c]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x538]
lea eax, [ebp - 0x534]
call fcn.000144c4
push dword [ebp - 0x534]
push dword [ebp - 0x34]
push 0x106b08
lea eax, [ebp - 0x530]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x530]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x544]
call fcn.000feec0
push dword [ebp - 0x544]
lea edx, [ebp - 0x548]
mov eax, 0x106be4
call fcn.00031d88
push dword [ebp - 0x548]
push dword [ebp - 0x40]
lea edx, [ebp - 0x54c]
mov eax, 0x106a98
call fcn.00031d88
push dword [ebp - 0x54c]
lea eax, [ebp - 0x540]
mov edx, 4
call fcn.00013f8c
mov eax, dword [ebp - 0x540]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
lea eax, [ebp - 0x558]
call fcn.000feec0
lea eax, [ebp - 0x558]
push eax
lea edx, [ebp - 0x55c]
mov eax, 0x106bf8
call fcn.00031d88
mov edx, dword [ebp - 0x55c]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x558]
lea eax, [ebp - 0x554]
call fcn.000144c4
push dword [ebp - 0x554]
push dword [ebp - 0x28]
push 0x106b08
lea eax, [ebp - 0x550]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x550]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x1c]
call fcn.00014314
lea eax, [ebp - 0x38]
call fcn.00014314
mov eax, dword [ebp - 0x20]
call fcn.00014548
test eax, eax
jle 0x104a32
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x80]
mov edx, dword [0x2a75b8]
mov eax, dword [ebp - 0x20]
call fcn.000fe3a8
lea eax, [ebp - 0x560]
call fcn.000feec0
lea eax, [ebp - 0x560]
push eax
lea edx, [ebp - 0x564]
mov eax, 0x106c0c
call fcn.00031d88
mov edx, dword [ebp - 0x564]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x560]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
lea eax, [ebp - 0x56c]
call fcn.000feec0
push dword [ebp - 0x56c]
lea edx, [ebp - 0x570]
mov eax, 0x106c24
call fcn.00031d88
push dword [ebp - 0x570]
lea edx, [ebp - 0x574]
mov eax, dword [ebp - 0x80]
call fcn.0002d1ec
push dword [ebp - 0x574]
lea eax, [ebp - 0x568]
mov edx, 3
call fcn.00013f8c
mov eax, dword [ebp - 0x568]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
lea eax, [ebp - 0x57c]
call fcn.000feec0
lea eax, [ebp - 0x57c]
push eax
lea edx, [ebp - 0x580]
mov eax, 0x106c3c
call fcn.00031d88
mov edx, dword [ebp - 0x580]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x57c]
lea eax, [ebp - 0x578]
call fcn.000144c4
lea eax, [ebp - 0x578]
mov edx, dword [ebp - 0x10]
call fcn.00014554
mov eax, dword [ebp - 0x578]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x588]
call fcn.000feec0
lea eax, [ebp - 0x588]
push eax
lea edx, [ebp - 0x58c]
mov eax, 0x106c54
call fcn.00031d88
mov edx, dword [ebp - 0x58c]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x588]
lea eax, [ebp - 0x584]
call fcn.000144c4
lea eax, [ebp - 0x584]
mov edx, dword [ebp - 0x1c]
call fcn.00014554
mov eax, dword [ebp - 0x584]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0x594]
call fcn.000feec0
lea eax, [ebp - 0x594]
push eax
lea edx, [ebp - 0x598]
mov eax, 0x106c6c
call fcn.00031d88
mov edx, dword [ebp - 0x598]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x594]
lea eax, [ebp - 0x590]
call fcn.000144c4
lea eax, [ebp - 0x590]
mov edx, dword [ebp - 0x38]
call fcn.00014554
mov eax, dword [ebp - 0x590]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea eax, [ebp - 0xa0]
call fcn.00014314
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x20]
call fcn.00109de0
mov edx, dword [0x2a75b8]
mov eax, dword [ebp - 0xa0]
call fcn.000fb1dc
cmp dword [ebp - 0xa8], 1
jne 0x104d5e
cmp esi, 0xffffffff
je 0x104a93
cmp dword [ebp - 0x2c], 0xffffffff
je 0x104a93
cmp esi, dword [ebp - 0x2c]
je 0x104a93
lea eax, [ebp - 0x59c]
call fcn.000feec0
lea eax, [ebp - 0x59c]
push eax
lea edx, [ebp - 0x5a0]
mov eax, 0x106c84
call fcn.00031d88
mov edx, dword [ebp - 0x5a0]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x59c]
mov edx, dword [0x2a75b8]
call fcn.000fb018
jmp 0x104c56
cmp esi, 0xffffffff
je 0x104ae7
cmp dword [ebp - 0x44], 0xffffffff
je 0x104ae7
cmp esi, dword [ebp - 0x44]
je 0x104ae7
lea eax, [ebp - 0x5a4]
call fcn.000feec0
lea eax, [ebp - 0x5a4]
push eax
lea edx, [ebp - 0x5a8]
mov eax, 0x106ca4
call fcn.00031d88
mov edx, dword [ebp - 0x5a8]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x5a4]
mov edx, dword [0x2a75b8]
call fcn.000fb018
jmp 0x104c56
cmp esi, 0xffffffff
je 0x104b3b
cmp dword [ebp - 0x80], 0xffffffff
je 0x104b3b
cmp esi, dword [ebp - 0x80]
je 0x104b3b
lea eax, [ebp - 0x5ac]
call fcn.000feec0
lea eax, [ebp - 0x5ac]
push eax
lea edx, [ebp - 0x5b0]
mov eax, 0x106cc4
call fcn.00031d88
mov edx, dword [ebp - 0x5b0]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x5ac]
mov edx, dword [0x2a75b8]
call fcn.000fb018
jmp 0x104c56
cmp dword [ebp - 0x2c], 0xffffffff
je 0x104b8b
cmp dword [ebp - 0x44], 0xffffffff
je 0x104b8b
lea eax, [ebp - 0x5b4]
call fcn.000feec0
lea eax, [ebp - 0x5b4]
push eax
lea edx, [ebp - 0x5b8]
mov eax, 0x106ce4
call fcn.00031d88
mov edx, dword [ebp - 0x5b8]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x5b4]
mov edx, dword [0x2a75b8]
call fcn.000fb018
jmp 0x104c56
cmp dword [ebp - 0x2c], 0xffffffff
je 0x104be0
cmp dword [ebp - 0x80], 0xffffffff
je 0x104be0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x80]
je 0x104be0
lea eax, [ebp - 0x5bc]
call fcn.000feec0
lea eax, [ebp - 0x5bc]
push eax
lea edx, [ebp - 0x5c0]
mov eax, 0x106d04
call fcn.00031d88
mov edx, dword [ebp - 0x5c0]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x5bc]
mov edx, dword [0x2a75b8]
call fcn.000fb018
jmp 0x104c56
cmp dword [ebp - 0x44], 0xffffffff
je 0x104c35
cmp dword [ebp - 0x80], 0xffffffff
je 0x104c35
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x80]
je 0x104c35
lea eax, [ebp - 0x5c4]
call fcn.000feec0
lea eax, [ebp - 0x5c4]
push eax
lea edx, [ebp - 0x5c8]
mov eax, 0x106d24
call fcn.00031d88
mov edx, dword [ebp - 0x5c8]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x5c4]
mov edx, dword [0x2a75b8]
call fcn.000fb018
jmp 0x104c56
cmp dword [ebp - 0x80], 0xffffffff
je 0x104c56
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x2c]
je 0x104c50
cmp esi, dword [ebp - 0x80]
je 0x104c50
mov eax, dword [ebp - 0x80]
cmp eax, dword [ebp - 0x44]
jne 0x104c56
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x5d0]
call fcn.000feec0
push dword [ebp - 0x5d0]
lea edx, [ebp - 0x5d4]
mov eax, 0x106d44
call fcn.00031d88
push dword [ebp - 0x5d4]
lea edx, [ebp - 0x5d8]
mov eax, dword [ebp - 0x48]
call fcn.0002d1ec
push dword [ebp - 0x5d8]
lea edx, [ebp - 0x5dc]
mov eax, 0x106d50
call fcn.00031d88
push dword [ebp - 0x5dc]
lea edx, [ebp - 0x5e0]
mov eax, esi
call fcn.0002d1ec
push dword [ebp - 0x5e0]
lea edx, [ebp - 0x5e4]
mov eax, 0x106d58
call fcn.00031d88
push dword [ebp - 0x5e4]
lea edx, [ebp - 0x5e8]
mov eax, dword [ebp - 0x2c]
call fcn.0002d1ec
push dword [ebp - 0x5e8]
lea edx, [ebp - 0x5ec]
mov eax, 0x106d60
call fcn.00031d88
push dword [ebp - 0x5ec]
lea edx, [ebp - 0x5f0]
mov eax, dword [ebp - 0x44]
call fcn.0002d1ec
push dword [ebp - 0x5f0]
lea edx, [ebp - 0x5f4]
mov eax, 0x106d68
call fcn.00031d88
push dword [ebp - 0x5f4]
lea edx, [ebp - 0x5f8]
mov eax, dword [ebp - 0x80]
call fcn.0002d1ec
push dword [ebp - 0x5f8]
lea eax, [ebp - 0x5cc]
mov edx, 0xb
call fcn.00013f8c
mov eax, dword [ebp - 0x5cc]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
jmp 0x104e09
mov dword [ebp - 0x48], 0xffffffff
lea eax, [ebp - 0x600]
call fcn.000feec0
lea eax, [ebp - 0x600]
push eax
lea edx, [ebp - 0x604]
mov eax, 0x106d70
call fcn.00031d88
mov edx, dword [ebp - 0x604]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x600]
lea eax, [ebp - 0x5fc]
call fcn.000144c4
push dword [ebp - 0x5fc]
push dword [ebp - 0x20]
lea edx, [ebp - 0x60c]
mov eax, 0x106d88
call fcn.00031d88
mov edx, dword [ebp - 0x60c]
lea eax, [ebp - 0x608]
call fcn.000144c4
push dword [ebp - 0x608]
lea eax, [ebp - 0xa0]
mov edx, 3
call fcn.00014618
mov edx, dword [0x2a75b8]
mov eax, dword [ebp - 0xa0]
call fcn.000fb120
push 1
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0xa0]
call fcn.000fd564
lea eax, [ebp - 0x618]
call fcn.000feec0
lea eax, [ebp - 0x618]
push eax
lea edx, [ebp - 0x61c]
mov eax, 0x106d98
call fcn.00031d88
mov edx, dword [ebp - 0x61c]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x618]
lea eax, [ebp - 0x614]
call fcn.000144c4
push dword [ebp - 0x614]
push dword [ebp - 0x20]
lea edx, [ebp - 0x620]
mov eax, dword [ebp - 0x48]
call fcn.0002d290
push dword [ebp - 0x620]
lea eax, [ebp - 0x628]
mov ecx, dword [ebp - 0xc4]
mov edx, 0x106db4
call fcn.00013f18
mov edx, dword [ebp - 0x628]
lea eax, [ebp - 0x624]
call fcn.000144c4
push dword [ebp - 0x624]
lea eax, [ebp - 0x610]
mov edx, 4
call fcn.00014618
mov eax, dword [ebp - 0x610]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
cmp byte [0x2a7594], 0
je 0x105585
lea eax, [ebp - 0x8c]
call fcn.000fdea4
mov eax, dword [ebp - 0x8c]
call fcn.00013ecc
cmp eax, 0xa
jl 0x104eee
mov eax, dword [ebp - 0x8c]
call fcn.00033724
test al, al
jne 0x104f98
lea edx, [ebp - 0x62c]
mov eax, 0x106db8
call fcn.00031d88
push dword [ebp - 0x62c]
lea eax, [ebp - 0x638]
call fcn.0002b6e4
mov eax, dword [ebp - 0x638]
lea edx, [ebp - 0x634]
call fcn.00035eb0
lea eax, [ebp - 0x634]
push eax
lea eax, [ebp - 0x63c]
call fcn.00027f5c
mov edx, dword [ebp - 0x63c]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x634]
lea edx, [ebp - 0x630]
call fcn.00035eb0
push dword [ebp - 0x630]
push 0x106dc4
lea edx, [ebp - 0x640]
mov eax, 0x106dcc
call fcn.00031d88
push dword [ebp - 0x640]
lea edx, [ebp - 0x644]
mov eax, 0x106db8
call fcn.00031d88
push dword [ebp - 0x644]
lea eax, [ebp - 0x8c]
mov edx, 5
call fcn.00013f8c
jmp 0x105012
lea eax, [ebp - 0x648]
mov edx, dword [ebp - 0x8c]
mov dl, byte [edx]
call fcn.00013de4
mov eax, dword [ebp - 0x648]
push eax
lea edx, [ebp - 0x64c]
mov eax, 0x106db8
call fcn.00031d88
mov edx, dword [ebp - 0x64c]
pop eax
call fcn.00013fdc
je 0x105012
lea edx, [ebp - 0x650]
mov eax, 0x106db8
call fcn.00031d88
push dword [ebp - 0x650]
push dword [ebp - 0x8c]
lea edx, [ebp - 0x654]
mov eax, 0x106db8
call fcn.00031d88
push dword [ebp - 0x654]
lea eax, [ebp - 0x8c]
mov edx, 3
call fcn.00013f8c
lea eax, [ebp - 0x65c]
call fcn.000feec0
push dword [ebp - 0x65c]
lea edx, [ebp - 0x660]
mov eax, 0x106ddc
call fcn.00031d88
push dword [ebp - 0x660]
push dword [ebp - 0x8c]
lea eax, [ebp - 0x658]
mov edx, 3
call fcn.00013f8c
mov eax, dword [ebp - 0x658]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
lea edx, [ebp - 0x7c]
mov eax, dword [ebp - 0x8c]
call fcn.000339fc
mov eax, 0x400
call fcn.00019220
mov dword [ebp - 0x50], eax
xor eax, eax
push ebp
push 0x10557e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x50]
call fcn.000189b0
push eax
mov eax, dword [ebp - 0x50]
call fcn.00018998
push eax
call sub.kernel32.dll_GetCurrentDirectoryA
mov eax, dword [ebp - 0x7c]
call fcn.00014090
push eax
call sub.kernel32.dll_SetCurrentDirectoryA
lea eax, [ebp - 0x24]
mov edx, dword [ebp - 0x8c]
call fcn.00013cd4
lea eax, [ebp - 0x31c]
xor ecx, ecx
mov edx, 0x44
call fcn.00012b94
lea eax, [ebp - 0x2d8]
xor ecx, ecx
mov edx, 0x10
call fcn.00012b94
mov dword [ebp - 0x31c], 0x44
mov word [ebp - 0x2ec], 0
mov dword [ebp - 0x2f0], 1
lea edx, [ebp - 0x664]
mov eax, 0x106df0
call fcn.00031d88
mov edx, dword [ebp - 0x664]
lea eax, [ebp - 0x24]
call fcn.00013ed4
push dword [ebp - 0x24]
lea edx, [ebp - 0x668]
mov eax, 0x106e20
call fcn.00031d88
push dword [ebp - 0x668]
lea edx, [ebp - 0x66c]
mov eax, dword [0x2a75bc]
call fcn.00035eb0
push dword [ebp - 0x66c]
push dword [ebp - 0xc0]
lea edx, [ebp - 0x670]
mov eax, 0x106db8
call fcn.00031d88
push dword [ebp - 0x670]
lea eax, [ebp - 0x24]
mov edx, 5
call fcn.00013f8c
lea edx, [ebp - 0x674]
mov eax, 0x106e30
call fcn.00031d88
mov edx, dword [ebp - 0x674]
lea eax, [ebp - 0x24]
call fcn.00013ed4
push dword [ebp - 0x24]
lea edx, [ebp - 0x678]
mov eax, 0x106e5c
call fcn.00031d88
push dword [ebp - 0x678]
lea edx, [ebp - 0x67c]
mov eax, dword [0x2a75bc]
call fcn.00035eb0
push dword [ebp - 0x67c]
push dword [ebp - 0xc4]
lea edx, [ebp - 0x680]
mov eax, 0x106db8
call fcn.00031d88
push dword [ebp - 0x680]
lea eax, [ebp - 0x24]
mov edx, 5
call fcn.00013f8c
lea eax, [ebp - 0x688]
call fcn.000feec0
push dword [ebp - 0x688]
lea edx, [ebp - 0x68c]
mov eax, 0x106e64
call fcn.00031d88
push dword [ebp - 0x68c]
push dword [ebp - 0x24]
lea eax, [ebp - 0x684]
mov edx, 3
call fcn.00013f8c
mov eax, dword [ebp - 0x684]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
call sub.kernel32.dll_GetTickCount
mov ebx, eax
push 0
call sub.kernel32.dll_SetLastError
xor eax, eax
mov dword [ebp - 0x68], eax
xor eax, eax
push ebp
push 0x1054e9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x698]
call fcn.0002b6e4
mov eax, dword [ebp - 0x698]
lea edx, [ebp - 0x694]
call fcn.00035eb0
lea eax, [ebp - 0x694]
push eax
lea eax, [ebp - 0x69c]
call fcn.00027f5c
mov edx, dword [ebp - 0x69c]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x694]
lea edx, [ebp - 0x690]
call fcn.00035eb0
lea eax, [ebp - 0x690]
push eax
mov edx, 0x106dc4
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x690]
call fcn.00014090
push eax
push 0
push 0x40
push 0xffffffffffffffff
push 0
push 0
mov eax, dword [ebp - 0x24]
call fcn.00014090
push eax
push 0
call sub.kernel32.dll_CreateProcessA
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x10539f
call sub.kernel32.dll_GetLastError_1
mov ebx, eax
lea eax, [ebp - 0x6a4]
call fcn.000feec0
push dword [ebp - 0x6a4]
lea edx, [ebp - 0x6a8]
mov eax, 0x106e78
call fcn.00031d88
push dword [ebp - 0x6a8]
push dword [ebp - 0x8c]
lea edx, [ebp - 0x6ac]
mov eax, 0x106a98
call fcn.00031d88
push dword [ebp - 0x6ac]
lea eax, [ebp - 0x6a0]
mov edx, 4
call fcn.00013f8c
mov eax, dword [ebp - 0x6a0]
mov edx, dword [0x2a75b8]
call fcn.000fb018
lea eax, [ebp - 0x6b0]
call fcn.000feec0
lea eax, [ebp - 0x6b0]
push eax
lea edx, [ebp - 0x6b4]
mov eax, ebx
call fcn.0002b100
mov edx, dword [ebp - 0x6b4]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x6b0]
mov edx, dword [0x2a75b8]
call fcn.000fb018
jmp 0x1054d0
push 0x7530
mov eax, dword [ebp - 0x2d8]
push eax
call sub.user32.dll_WaitForInputIdle
mov dword [ebp - 0x68], eax
push 0x64
call sub.kernel32.dll_Sleep
lea eax, [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x2d8]
push eax
call sub.kernel32.dll_GetExitCodeProcess
cmp dword [ebp - 0x68], 0x103
jne 0x1053e6
call sub.kernel32.dll_GetTickCount
mov edx, ebx
call fcn.0002cde4
cmp eax, 0x7530
jbe 0x1053b3
cmp dword [ebp - 0x68], 0x103
jne 0x1054d0
lea eax, [ebp - 0x6bc]
call fcn.000feec0
push dword [ebp - 0x6bc]
push 0x106acc
lea edx, [ebp - 0x6c0]
mov eax, 0x106e94
call fcn.00031d88
push dword [ebp - 0x6c0]
lea eax, [ebp - 0x6b8]
mov edx, 3
call fcn.00013f8c
mov eax, dword [ebp - 0x6b8]
mov edx, dword [0x2a75b8]
call fcn.000fb0e0
call sub.kernel32.dll_GetTickCount
mov ebx, eax
push 0x64
call sub.kernel32.dll_Sleep
lea eax, [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x2d8]
push eax
call sub.kernel32.dll_GetExitCodeProcess
cmp dword [ebp - 0x68], 0x103
jne 0x10547a
call sub.kernel32.dll_GetTickCount
mov edx, ebx
call fcn.0002cde4
cmp eax, 0x7530
jbe 0x105447
cmp dword [ebp - 0x68], 0x103
jne 0x1054d0
lea eax, [ebp - 0x6c8]
call fcn.000feec0
push dword [ebp - 0x6c8]
push 0x106acc
lea edx, [ebp - 0x6cc]
mov eax, 0x106e94
call fcn.00031d88
push dword [ebp - 0x6cc]
lea eax, [ebp - 0x6c4]
mov edx, 3
call fcn.00013f8c
mov eax, dword [ebp - 0x6c4]
mov edx, dword [0x2a75b8]
call fcn.000fb018
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x1054f0
lea eax, [ebp - 0x2d8]
call fcn.00031d5c
ret
push dword [ebp - 0x78]
push 0x106ebc
push dword [ebp - 0x90]
push 0x106ebc
lea edx, [ebp - 0x6e0]
mov eax, dword [ebp - 0x28]
call fcn.0001f27c
push dword [ebp - 0x6e0]
lea edx, [ebp - 0x6e8]
mov eax, 0x106a34
call fcn.00031d88
mov edx, dword [ebp - 0x6e8]
lea eax, [ebp - 0x6e4]
call fcn.000144c4
lea eax, [ebp - 0x6e4]
push eax
call fcn.00034c74
add esp, 0xfffffff8
fstp qword [esp]
wait
lea eax, [ebp - 0x6f4]
call fcn.0010181c
mov edx, dword [ebp - 0x6f4]
lea eax, [ebp - 0x6f0]
call fcn.000144c4
mov eax, dword [ebp - 0x6f0]
lea edx, [ebp - 0x6ec]
call fcn.0001f27c
mov edx, dword [ebp - 0x6ec]
pop eax
call fcn.00014554
push dword [ebp - 0x6e4]
lea eax, [ebp - 0x98]
mov edx, 6
call fcn.00014618
lea eax, [ebp - 0x700]
call fcn.000feec0
lea eax, [ebp - 0x700]
push eax
lea edx, [ebp - 0x704]
mov eax, 0x106ec0
call fcn.00031d88
mov edx, dword [ebp - 0x704]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x700]
lea eax, [ebp - 0x6fc]
call fcn.000144c4
push dword [ebp - 0x6fc]
push dword [ebp - 0x98]
push 0x106b08
lea eax, [ebp - 0x6f8]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x6f8]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
lea edx, [ebp - 0x708]
mov eax, dword [ebp - 0x98]
call fcn.0001f454
mov edx, dword [ebp - 0x708]
lea eax, [ebp - 0xa4]
mov ecx, 0x106ed4
call fcn.000145b4
lea edx, [ebp - 0x70c]
mov eax, dword [ebp - 0x98]
call fcn.0001f454
mov edx, dword [ebp - 0x70c]
lea eax, [ebp - 0x9c]
mov ecx, 0x106ee0
call fcn.000145b4
cmp dword [ebp - 0xa8], 1
jne 0x105725
mov eax, dword [ebp - 0x20]
call fcn.00014548
test eax, eax
je 0x105725
cmp dword [ebp - 0x48], 0xffffffff
je 0x105725
mov eax, dword [ebp - 0x38]
call fcn.00014548
test eax, eax
je 0x105725
mov eax, dword [ebp - 0x38]
call fcn.0001d908
test al, al
jne 0x105850
lea eax, [ebp - 0x714]
call fcn.00030228
mov eax, dword [ebp - 0x714]
lea edx, [ebp - 0x710]
call fcn.0001d8bc
mov eax, dword [ebp - 0x710]
push eax
lea eax, [ebp - 0x71c]
call fcn.0002812c
mov edx, dword [ebp - 0x71c]
lea eax, [ebp - 0x718]
call fcn.000144c4
mov ecx, dword [ebp - 0x718]
lea eax, [ebp - 4]
pop edx
call fcn.000145b4
lea eax, [ebp - 0x724]
call fcn.000feec0
lea eax, [ebp - 0x724]
push eax
lea edx, [ebp - 0x728]
mov eax, 0x106d70
call fcn.00031d88
mov edx, dword [ebp - 0x728]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x724]
lea eax, [ebp - 0x720]
call fcn.000144c4
push dword [ebp - 0x720]
push dword [ebp - 0x20]
lea edx, [ebp - 0x734]
mov eax, 0x106eec
call fcn.00031d88
push dword [ebp - 0x734]
push 0x106f10
lea edx, [ebp - 0x738]
mov eax, 0x106f14
call fcn.00031d88
push dword [ebp - 0x738]
lea eax, [ebp - 0x730]
mov edx, 3
call fcn.00013f8c
mov edx, dword [ebp - 0x730]
lea eax, [ebp - 0x72c]
call fcn.000144c4
push dword [ebp - 0x72c]
push dword [ebp - 4]
lea eax, [ebp - 0xa0]
mov edx, 4
call fcn.00014618
mov edx, dword [0x2a75b8]
mov eax, dword [ebp - 0xa0]
call fcn.000fb120
push 2
xor ecx, ecx
mov edx, 2
mov eax, dword [ebp - 0xa0]
call fcn.000fd564
jmp 0x105a6c
lea eax, [ebp - 4]
call fcn.000ff3f8
mov eax, dword [ebp - 4]
call fcn.00014548
test eax, eax
je 0x1058ac
lea edx, [ebp - 0x73c]
mov eax, dword [ebp - 4]
call fcn.0001e5f8
mov eax, dword [ebp - 0x73c]
push eax
lea edx, [ebp - 0x744]
mov eax, dword [0x2a75b8]
call fcn.000ff348
mov eax, dword [ebp - 0x744]
lea edx, [ebp - 0x740]
call fcn.0001e5f8
mov edx, dword [ebp - 0x740]
pop eax
call fcn.00014660
jne 0x105a43
mov eax, dword [ebp - 0x1c]
call fcn.0001d908
test al, al
je 0x105927
lea edx, [ebp - 0x748]
mov eax, dword [ebp - 0x1c]
call fcn.0001d8bc
push dword [ebp - 0x748]
lea edx, [ebp - 0x750]
mov eax, dword [0x2a75b8]
call fcn.000fe138
mov eax, dword [ebp - 0x750]
lea edx, [ebp - 0x74c]
call fcn.0001d8bc
push dword [ebp - 0x74c]
lea eax, [ebp - 0x758]
call fcn.0002812c
mov edx, dword [ebp - 0x758]
lea eax, [ebp - 0x754]
call fcn.000144c4
push dword [ebp - 0x754]
lea eax, [ebp - 4]
mov edx, 3
call fcn.00014618
jmp 0x105a6c
lea eax, [ebp - 0x760]
call fcn.00030228
mov eax, dword [ebp - 0x760]
lea edx, [ebp - 0x75c]
call fcn.0001d8bc
mov eax, dword [ebp - 0x75c]
push eax
lea eax, [ebp - 0x768]
call fcn.0002812c
mov edx, dword [ebp - 0x768]
lea eax, [ebp - 0x764]
call fcn.000144c4
mov ecx, dword [ebp - 0x764]
lea eax, [ebp - 4]
pop edx
call fcn.000145b4
lea eax, [ebp - 0x774]
call fcn.000feec0
lea eax, [ebp - 0x774]
push eax
lea edx, [ebp - 0x778]
mov eax, 0x106d70
call fcn.00031d88
mov edx, dword [ebp - 0x778]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x774]
lea eax, [ebp - 0x770]
call fcn.000144c4
push dword [ebp - 0x770]
push dword [ebp - 0x20]
push 0x106f20
lea eax, [ebp - 0x76c]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x76c]
mov edx, dword [0x2a75b8]
call fcn.000fb120
lea eax, [ebp - 0x780]
call fcn.000feec0
lea eax, [ebp - 0x780]
push eax
lea edx, [ebp - 0x784]
mov eax, 0x106f3c
call fcn.00031d88
mov edx, dword [ebp - 0x784]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x780]
lea eax, [ebp - 0x77c]
call fcn.000144c4
lea eax, [ebp - 0x77c]
mov edx, dword [ebp - 4]
call fcn.00014554
mov eax, dword [ebp - 0x77c]
mov edx, dword [0x2a75b8]
call fcn.000fb120
jmp 0x105a6c
lea eax, [ebp - 0x788]
push eax
mov ecx, dword [0x2a75b8]
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 4]
call fcn.000feb0c
mov edx, dword [ebp - 0x788]
lea eax, [ebp - 4]
call fcn.00014350
mov eax, dword [ebp - 4]
call fcn.0001d908
test al, al
jne 0x105adc
lea eax, [ebp - 0x790]
call fcn.000feec0
mov edx, dword [ebp - 0x790]
lea eax, [ebp - 0x78c]
call fcn.000144c4
lea eax, [ebp - 0x78c]
push eax
lea edx, [ebp - 0x798]
mov eax, 0x106f48
call fcn.00031d88
mov eax, dword [ebp - 0x798]
lea ecx, [ebp - 0x794]
mov edx, dword [ebp - 4]
call fcn.000fd6a4
mov edx, dword [ebp - 0x794]
pop eax
call fcn.00014554
mov eax, dword [ebp - 0x78c]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
push 0
call sub.kernel32.dll_SetLastError
xor eax, eax
mov dword [ebp - 0x14], eax
xor eax, eax
push ebp
push 0x1062aa
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [ebp - 0x48], 0
jb 0x105be5
cmp dword [ebp - 0x48], 0xffffffff
je 0x105be5
lea eax, [ebp - 0x7a0]
call fcn.000feec0
push dword [ebp - 0x7a0]
lea edx, [ebp - 0x7a4]
mov eax, 0x106f4c
call fcn.00031d88
push dword [ebp - 0x7a4]
lea edx, [ebp - 0x7a8]
mov eax, dword [ebp - 0x48]
call fcn.0002d1ec
push dword [ebp - 0x7a8]
lea eax, [ebp - 0x79c]
mov edx, 3
call fcn.00013f8c
mov eax, dword [ebp - 0x79c]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
mov edx, dword [0x2a75b8]
mov eax, dword [ebp - 0x48]
call fcn.00101454
mov dword [ebp - 0x14], eax
call sub.kernel32.dll_GetLastError_1
mov ebx, eax
cmp dword [ebp - 0x14], 0
jne 0x105c24
lea eax, [ebp - 0x7b0]
call fcn.000feec0
push dword [ebp - 0x7b0]
lea edx, [ebp - 0x7b4]
mov eax, 0x106f60
call fcn.00031d88
push dword [ebp - 0x7b4]
lea edx, [ebp - 0x7b8]
mov eax, ebx
call fcn.0002b100
push dword [ebp - 0x7b8]
lea eax, [ebp - 0x7ac]
mov edx, 3
call fcn.00013f8c
mov eax, dword [ebp - 0x7ac]
mov edx, dword [0x2a75b8]
call fcn.000fb018
jmp 0x105c24
lea eax, [ebp - 0x7bc]
call fcn.000feec0
lea eax, [ebp - 0x7bc]
push eax
lea edx, [ebp - 0x7c0]
mov eax, 0x106f70
call fcn.00031d88
mov edx, dword [ebp - 0x7c0]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x7bc]
mov edx, dword [0x2a75b8]
call fcn.000fb018
cmp dword [ebp - 0xa8], 1
jne 0x105c3f
mov eax, dword [ebp - 0x20]
call fcn.00014548
test eax, eax
je 0x105c3f
cmp dword [ebp - 0x48], 0xffffffff
jne 0x105c79
cmp byte [0x2a7590], 0
je 0x105c5b
push ebp
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xc4]
call fcn.00101a6c
pop ecx
cmp byte [0x2a7594], 0
je 0x105cb1
push ebp
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0xc0]
call fcn.00101a6c
pop ecx
jmp 0x105cb1
cmp byte [0x2a7590], 0
je 0x105c95
push ebp
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xc4]
call fcn.00101d58
pop ecx
cmp byte [0x2a7594], 0
je 0x105cb1
push ebp
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0xc0]
call fcn.00101d58
pop ecx
lea eax, [ebp - 0x7c4]
call fcn.000feec0
lea eax, [ebp - 0x7c4]
push eax
lea edx, [ebp - 0x7c8]
mov eax, 0x106f8c
call fcn.00031d88
mov edx, dword [ebp - 0x7c8]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x7c4]
mov edx, dword [0x2a75b8]
call fcn.000fafd8
lea edx, [ebp - 0x7d0]
mov eax, dword [0x2a75bc]
call fcn.00035eb0
mov edx, dword [ebp - 0x7d0]
lea eax, [ebp - 0x7cc]
call fcn.000144c4
mov edx, dword [ebp - 0x7cc]
lea eax, [ebp - 0x94]
mov ecx, dword [ebp - 0x9c]
call fcn.000145b4
mov eax, dword [ebp - 0x94]
call fcn.0001d92c
test al, al
je 0x105df8
mov eax, dword [ebp - 0x94]
call fcn.00014538
push eax
call sub.kernel32.dll_DeleteFileW
test eax, eax
jne 0x105df8
call sub.kernel32.dll_GetLastError_1
mov ebx, eax
lea eax, [ebp - 0x7d8]
call fcn.000feec0
lea eax, [ebp - 0x7d8]
push eax
lea edx, [ebp - 0x7dc]
mov eax, 0x106fa4
call fcn.00031d88
mov edx, dword [ebp - 0x7dc]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x7d8]
lea eax, [ebp - 0x7d4]
call fcn.000144c4
lea eax, [ebp - 0x7d4]
mov edx, dword [ebp - 0x94]
call fcn.00014554
mov eax, dword [ebp - 0x7d4]
mov edx, dword [0x2a75b8]
call fcn.000fb2a4
lea eax, [ebp - 0x7e0]
call fcn.000feec0
lea eax, [ebp - 0x7e0]
push eax
lea edx, [ebp - 0x7e4]
mov eax, ebx
call fcn.0002b100
mov edx, dword [ebp - 0x7e4]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x7e0]
mov edx, dword [0x2a75b8]
call fcn.000fb018
lea edx, [ebp - 0x7ec]
mov eax, dword [0x2a75bc]
call fcn.00035eb0
mov edx, dword [ebp - 0x7ec]
lea eax, [ebp - 0x7e8]
call fcn.000144c4
mov edx, dword [ebp - 0x7e8]
lea eax, [ebp - 0x94]
mov ecx, dword [ebp - 0xa4]
call fcn.000145b4
mov eax, dword [ebp - 0x94]
call fcn.0001d92c
test al, al
je 0x105f00
mov eax, dword [ebp - 0x94]
call fcn.00014538
push eax
call sub.kernel32.dll_DeleteFileW
test eax, eax
jne 0x105f00
call sub.kernel32.dll_GetLastError_1
mov ebx, eax
lea eax, [ebp - 0x7f4]
call fcn.000feec0
lea eax, [ebp - 0x7f4]
push eax
lea edx, [ebp - 0x7f8]
mov eax, 0x106fa4
call fcn.00031d88
mov edx, dword [ebp - 0x7f8]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x7f4]
lea eax, [ebp - 0x7f0]
call fcn.000144c4
lea eax, [ebp - 0x7f0]
mov edx, dword [ebp - 0x94]
call fcn.00014554
mov eax, dword [ebp - 0x7f0]
mov edx, dword [0x2a75b8]
call fcn.000fb2a4
lea eax, [ebp - 0x7fc]
call fcn.000feec0
lea eax, [ebp - 0x7fc]
push eax
lea edx, [ebp - 0x800]
mov eax, ebx
call fcn.0002b100
mov edx, dword [ebp - 0x800]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x7fc]
mov edx, dword [0x2a75b8]
call fcn.000fb018
lea edx, [ebp - 0x804]
mov eax, dword [0x2a75bc]
call fcn.00035eb0
mov edx, dword [ebp - 0x804]
lea eax, [ebp - 0xb0]
mov ecx, dword [ebp - 0xc0]
call fcn.00013f18
mov eax, dword [ebp - 0xb0]
call fcn.00033724
test al, al
je 0x105fe4
mov eax, dword [ebp - 0xb0]
call fcn.00014090
push eax
call sub.kernel32.dll_DeleteFileA
test eax, eax
jne 0x105fe4
call sub.kernel32.dll_GetLastError_1
mov ebx, eax
lea eax, [ebp - 0x80c]
call fcn.000feec0
push dword [ebp - 0x80c]
lea edx, [ebp - 0x810]
mov eax, 0x106fa4
call fcn.00031d88
push dword [ebp - 0x810]
push dword [ebp - 0xb0]
lea eax, [ebp - 0x808]
mov edx, 3
call fcn.00013f8c
mov eax, dword [ebp - 0x808]
mov edx, dword [0x2a75b8]
call fcn.000fb018
lea eax, [ebp - 0x814]
call fcn.000feec0
lea eax, [ebp - 0x814]
push eax
lea edx, [ebp - 0x818]
mov eax, ebx
call fcn.0002b100
mov edx, dword [ebp - 0x818]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x814]
mov edx, dword [0x2a75b8]
call fcn.000fb018
lea edx, [ebp - 0x81c]
mov eax, dword [0x2a75bc]
call fcn.00035eb0
mov edx, dword [ebp - 0x81c]
lea eax, [ebp - 0xb0]
mov ecx, dword [ebp - 0xc4]
call fcn.00013f18
mov eax, dword [ebp - 0xb0]
call fcn.00033724
test al, al
je 0x106288
lea eax, [ebp - 0x94]
call fcn.0003083c
mov eax, dword [ebp - 0x94]
call fcn.0001d908
test al, al
jne 0x1060af
lea eax, [ebp - 0x94]
call fcn.000308c4
lea eax, [ebp - 0x824]
call fcn.000feec0
lea eax, [ebp - 0x824]
push eax
lea edx, [ebp - 0x828]
mov eax, 0x106a0c
call fcn.00031d88
mov edx, dword [ebp - 0x828]
pop eax
call fcn.00013ed4
mov edx, dword [ebp - 0x824]
lea eax, [ebp - 0x820]
call fcn.000144c4
lea eax, [ebp - 0x820]
mov edx, dword [ebp - 0x94]
call fcn.00014554
mov eax, dword [ebp - 0x820]
mov edx, dword [0x2a75b8]
call fcn.000fb1dc
mov eax, dword [ebp - 0x94]
call fcn.0010106c
lea eax, [ebp - 0x830]
call fcn.000307bc
mov eax, dword [ebp - 0x830]
lea edx, [ebp - 0x82c]
call fcn.00035eb0
push dword [ebp - 0x82c]
lea eax, [ebp - 0x834]
call fcn.000277dc
push dword [ebp - 0x834]
lea edx, [ebp - 0x838]
mov eax, 0x106a34
call fcn.00031d88
push dword [ebp - 0x838]
push dword [ebp - 0xc4]
lea eax, [ebp - 0xb8]
mov edx, 4
call fcn.00013f8c
push 0xffffffffffffffff
mov eax, dword [ebp - 0xb8]
call fcn.00014090
push eax
mov eax, dword [ebp - 0xb0]
call fcn.00014090
mov ebx, eax
push ebx
call sub.kernel32.dll_CopyFileA
test eax, eax
jne 0x1061e9
call sub.kernel32.dll_GetLastError_1
mov ebx, eax
lea eax, [ebp - 0x840]
call fcn.000feec0
push dword [ebp - 0x840]
lea edx, [ebp - 0x844]
mov eax, 0x106fc0
call fcn.00031d88
push dword [ebp - 0x844]
push dword [ebp - 0xb0]
lea edx, [ebp - 0x848]
mov eax, 0x106a54
call fcn.00031d88
push dword [ebp - 0x848]
push dword [ebp - 0xb8]
lea eax, [ebp - 0x83c]
mov edx, 5
call fcn.00013f8c
mov eax, dword [ebp - 0x83c]
mov edx, dword [0x2a75b8]
call fcn.000fb018
lea eax, [ebp - 0x84c]
call fcn.000feec0
lea eax, [ebp - 0x84c]
push eax
lea edx, [ebp - 0x850]
mov eax, ebx
call fcn.0002b100
mov edx, dword [ebp - 0x850]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x84c]
mov edx, dword [0x2a75b8]
call fcn.000fb018
jmp 0x106288
push ebx
call sub.kernel32.dll_DeleteFileA
test eax, eax
jne 0x106288
call sub.kernel32.dll_GetLastError_1
mov ebx, eax
lea eax, [ebp - 0x858]
call fcn.000feec0
push dword [ebp - 0x858]
lea edx, [ebp - 0x85c]
mov eax, 0x106fdc
call fcn.00031d88
push dword [ebp - 0x85c]
push dword [ebp - 0xb0]
lea eax, [ebp - 0x854]
mov edx, 3
call fcn.00013f8c
mov eax, dword [ebp - 0x854]
mov edx, dword [0x2a75b8]
call fcn.000fb018
lea eax, [ebp - 0x860]
call fcn.000feec0
lea eax, [ebp - 0x860]
push eax
lea edx, [ebp - 0x864]
mov eax, ebx
call fcn.0002b100
mov edx, dword [ebp - 0x864]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x860]
mov edx, dword [0x2a75b8]
call fcn.000fb018
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x1062b1
cmp dword [ebp - 0x14], 0
je 0x1062a4
mov eax, dword [ebp - 0x14]
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
mov dword [ebp - 0x14], eax
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x106966
lea eax, [ebp - 0x87c]
call fcn.00013c3c
lea eax, [ebp - 0x878]
call fcn.00014314
lea eax, [ebp - 0x874]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x86c]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x864]
mov edx, 0x11
call fcn.00013c60
lea eax, [ebp - 0x820]
call fcn.00014314
lea eax, [ebp - 0x81c]
mov edx, 0xb
call fcn.00013c60
lea eax, [ebp - 0x7f0]
call fcn.00014314
lea eax, [ebp - 0x7ec]
call fcn.00013c3c
lea eax, [ebp - 0x7e8]
call fcn.00014314
lea eax, [ebp - 0x7e4]
mov edx, 4
call fcn.00013c60
lea eax, [ebp - 0x7d4]
call fcn.00014314
lea eax, [ebp - 0x7d0]
call fcn.00013c3c
lea eax, [ebp - 0x7cc]
call fcn.00014314
lea eax, [ebp - 0x7c8]
mov edx, 0xd
call fcn.00013c60
lea eax, [ebp - 0x794]
call fcn.00014314
lea eax, [ebp - 0x790]
call fcn.00013c3c
lea eax, [ebp - 0x78c]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x784]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x77c]
call fcn.00014314
lea eax, [ebp - 0x778]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x770]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x768]
call fcn.00013c3c
lea eax, [ebp - 0x764]
mov edx, 3
call fcn.0001432c
lea eax, [ebp - 0x758]
call fcn.00013c3c
lea eax, [ebp - 0x754]
mov edx, 7
call fcn.0001432c
lea eax, [ebp - 0x738]
mov edx, 3
call fcn.00013c60
lea eax, [ebp - 0x72c]
call fcn.00014314
lea eax, [ebp - 0x728]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x720]
call fcn.00014314
lea eax, [ebp - 0x71c]
call fcn.00013c3c
lea eax, [ebp - 0x718]
mov edx, 5
call fcn.0001432c
lea eax, [ebp - 0x704]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x6fc]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x6e4]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x6f4]
call fcn.00013c3c
lea eax, [ebp - 0x6f0]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x6e8]
call fcn.00013c3c
lea eax, [ebp - 0x6dc]
mov edx, 0x2e
call fcn.00013c60
lea eax, [ebp - 0x624]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x61c]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x614]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x60c]
call fcn.00013c3c
lea eax, [ebp - 0x608]
call fcn.00014314
lea eax, [ebp - 0x604]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x5fc]
call fcn.00014314
lea eax, [ebp - 0x5f8]
mov edx, 0x1a
call fcn.00013c60
lea eax, [ebp - 0x590]
call fcn.00014314
lea eax, [ebp - 0x58c]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x584]
call fcn.00014314
lea eax, [ebp - 0x580]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x578]
call fcn.00014314
lea eax, [ebp - 0x574]
mov edx, 6
call fcn.00013c60
lea eax, [ebp - 0x55c]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x554]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x54c]
mov edx, 6
call fcn.00013c60
lea eax, [ebp - 0x534]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x52c]
mov edx, 4
call fcn.00013c60
lea eax, [ebp - 0x51c]
call fcn.00014314
lea eax, [ebp - 0x518]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x510]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x508]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x500]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x4f8]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x4f0]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x4e8]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x4e0]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x4d8]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x4d0]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x4c8]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x4c0]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x4b8]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x4b0]
call fcn.00014314
lea eax, [ebp - 0x4ac]
mov edx, 8
call fcn.00013c60
lea eax, [ebp - 0x48c]
call fcn.00014314
lea eax, [ebp - 0x488]
call fcn.00013c3c
lea eax, [ebp - 0x484]
call fcn.00014314
lea eax, [ebp - 0x480]
mov edx, 7
call fcn.00013c60
lea eax, [ebp - 0x464]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x45c]
call fcn.00013c3c
lea eax, [ebp - 0x458]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x450]
mov edx, 4
call fcn.00013c60
lea eax, [ebp - 0x440]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x438]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x430]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x428]
mov edx, 0x17
call fcn.00013c60
lea eax, [ebp - 0x3cc]
mov edx, 0x14
call fcn.00013c60
lea eax, [ebp - 0x37c]
call fcn.00014314
lea eax, [ebp - 0x378]
mov edx, 0x13
call fcn.00013c60
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0xb8]
call fcn.00013c3c
lea eax, [ebp - 0xb0]
call fcn.00013c3c
lea eax, [ebp - 0xac]
call fcn.00014314
lea eax, [ebp - 0xa4]
mov edx, 6
call fcn.0001432c
lea eax, [ebp - 0x8c]
call fcn.00013c3c
lea eax, [ebp - 0x84]
call fcn.00013c3c
lea eax, [ebp - 0x7c]
call fcn.00013c3c
lea eax, [ebp - 0x78]
call fcn.00014314
lea eax, [ebp - 0x74]
call fcn.00013c3c
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x64]
mov edx, 5
call fcn.0001432c
lea eax, [ebp - 0x4c]
call fcn.00014314
lea eax, [ebp - 0x40]
call fcn.00013c3c
lea eax, [ebp - 0x3c]
mov edx, 3
call fcn.0001432c
lea eax, [ebp - 0x28]
call fcn.00014314
lea eax, [ebp - 0x24]
call fcn.00013c3c
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x10]
call fcn.00014314
lea eax, [ebp - 4]
call fcn.00014314
ret