Function at 0x401015
Capabilities:
Create directory
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3e988
call fcn.00407bc0
push edi
mov dword [ebp - 0xbb40], 0x266a
mov al, byte [0xf0e6e4]
mov byte [ebp - 0x99cc], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x99cb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e6e8]
mov byte [ebp - 0xaa78], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xaa77]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e6ec]
mov byte [ebp - 0xa2a0], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xa29f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e6f0]
mov byte [ebp - 0xbb3c], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xbb3b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e6f4]
mov byte [ebp - 0xb350], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xb34f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e6f8]
mov byte [ebp - 0xcb28], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xcb27]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e6fc]
mov byte [ebp - 0xc344], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xc343]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e700]
mov byte [ebp - 0x3e980], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x3e97f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e704]
mov byte [ebp - 0x3e048], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x3e047]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e708]
mov byte [ebp - 0x27f0], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x27ef]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e70c]
mov byte [ebp - 0x3008], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x3007]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e710]
mov byte [ebp - 0x16c8], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x16c7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e714]
mov byte [ebp - 0x1eac], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x1eab]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e718]
mov byte [ebp - 0x8e8], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x8e7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0xb36c], 0x152f
mov dl, byte [0xf0e71c]
mov byte [ebp - 0x91fc], dl
xor eax, eax
mov dword [ebp - 0x91fb], eax
mov dword [ebp - 0x91f7], eax
mov dword [ebp - 0x91f3], eax
mov byte [ebp - 0x91ef], al
mov cl, byte [0xf0e720]
mov byte [ebp - 0x3d878], cl
mov ecx, 0xc34f
xor eax, eax
lea edi, [ebp - 0x3d877]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e724]
mov byte [ebp - 0x91ec], dl
mov ecx, 0x1869
xor eax, eax
lea edi, [ebp - 0x91eb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e728]
mov byte [ebp - 0x118], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x117]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e72c]
mov byte [ebp - 0x3e1b0], cl
mov ecx, 0x59
xor eax, eax
lea edi, [ebp - 0x3e1af]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0xa2a8], 0
mov dword [ebp - 0xab80], 0
mov dword [ebp - 0xb368], 0
mov dword [ebp - 0xa2a4], 0
mov dl, byte [0xf0e730]
mov byte [ebp - 0x2020], dl
mov ecx, 0x59
xor eax, eax
lea edi, [ebp - 0x201f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0xbb74], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x2838], 0
mov dword [ebp - 0x1eb8], 0
mov dword [ebp - 0x16dc], 0
mov al, byte [0xf0e734]
mov byte [ebp - 0x9f0], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x9ef]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e738]
mov byte [ebp - 0xab7c], cl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0xab7b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e73c]
mov byte [ebp - 0x9ad0], dl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x9acf]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0e740]
mov byte [ebp - 0xef8], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0xef7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e744]
mov byte [ebp - 0xbb70], cl
mov ecx, 9
xor eax, eax
lea edi, [ebp - 0xbb6f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0e748]
mov byte [ebp - 0xb364], dl
xor eax, eax
mov dword [ebp - 0xb363], eax
mov dword [ebp - 0xb35f], eax
mov dword [ebp - 0xb35b], eax
mov dword [ebp - 0xb357], eax
mov word [ebp - 0xb353], ax
mov byte [ebp - 0xb351], al
mov cl, byte [0xf0e74c]
mov byte [ebp - 0xc358], cl
xor edx, edx
mov dword [ebp - 0xc357], edx
mov dword [ebp - 0xc353], edx
mov dword [ebp - 0xc34f], edx
mov word [ebp - 0xc34b], dx
mov al, byte [0xf0e750]
mov byte [ebp - 0x10], al
xor ecx, ecx
mov dword [ebp - 0xf], ecx
mov dword [ebp - 0xb], ecx
mov dword [ebp - 7], ecx
mov word [ebp - 3], cx
mov dl, byte [0xf0e754]
mov byte [ebp - 0xdf4], dl
xor eax, eax
mov dword [ebp - 0xdf3], eax
mov dword [ebp - 0xdef], eax
mov dword [ebp - 0xdeb], eax
mov word [ebp - 0xde7], ax
mov cl, byte [0xf0e758]
mov byte [ebp - 0xcb38], cl
xor edx, edx
mov dword [ebp - 0xcb37], edx
mov dword [ebp - 0xcb33], edx
mov dword [ebp - 0xcb2f], edx
mov word [ebp - 0xcb2b], dx
mov dword [ebp - 0x8ec], 0
mov al, byte [0xf0e75c]
mov byte [ebp - 0xde4], al
mov ecx, 0xf9
xor eax, eax
lea edi, [ebp - 0xde3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x9fc], 0
mov dword [ebp - 0x16d8], 0
mov dword [ebp - 0x9f8], 0
mov dword [ebp - 0x16d4], 0
mov dword [ebp - 0x1eb4], 0
mov dword [ebp - 0xbb48], 0
mov dword [ebp - 0xc348], 0
mov dword [ebp - 0xbb44], 0
mov dword [ebp - 0x16d0], 0
mov dword [0xf0e2bc], 0xacb
mov dword [ebp - 0x27f8], 0
push 0x104
push 0xf0b770
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0xa2a8], eax
mov ecx, dword [ebp + 8]
push ecx
push 0xf08e58
call fcn.00407a00
add esp, 8
push 0xf0b770
call fcn.00407af0
add esp, 4
mov dword [ebp - 0xa2a8], eax
jmp 0x40151d
mov edx, dword [ebp - 0xa2a8]
sub edx, 1
mov dword [ebp - 0xa2a8], edx
cmp dword [ebp - 0xa2a8], 1
jle 0x401570
push 1
mov eax, dword [ebp - 0xa2a8]
push eax
push 0xf0b770
call fcn.004067b2
add esp, 0xc
push eax
call fcn.0040674e
add esp, 4
cmp eax, 0x5c
jne 0x40156e
mov ecx, dword [ebp - 0xa2a8]
push ecx
push 0xf0b770
call fcn.004068ee
add esp, 8
push eax
push 0xf0caf8
call fcn.00407a00
add esp, 8
jmp 0x401570
jmp 0x40150e
push str.____135602
push 0xf0e27c
call fcn.00407a00
add esp, 8
push 0x53
call fcn.004066f2
add esp, 4
push eax
push 0xf0e270
call fcn.00407a00
add esp, 8
push 0x6d
call fcn.004066f2
add esp, 4
push eax
push 0xf0e270
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
push 0xf0e270
call fcn.00407a10
add esp, 8
push 0x6b
call fcn.004066f2
add esp, 4
push eax
push 0xf0e270
call fcn.00407a10
add esp, 8
push 0x53
call fcn.004066f2
add esp, 4
push eax
push 0xf0e270
call fcn.00407a10
add esp, 8
push 0x61
call fcn.004066f2
add esp, 4
push eax
push 0xf0e270
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
push 0xf0e270
call fcn.00407a10
add esp, 8
push 0x69
call fcn.004066f2
add esp, 4
push eax
push 0xf0e270
call fcn.00407a10
add esp, 8
push 0x76
call fcn.004066f2
add esp, 4
push eax
push 0xf0e270
call fcn.00407a10
add esp, 8
push 0x61
call fcn.004066f2
add esp, 4
push eax
push 0xf0e270
call fcn.00407a10
add esp, 8
mov dword [ebp - 0xa2a8], 1
jmp 0x40168d
mov edx, dword [ebp - 0xa2a8]
add edx, 1
mov dword [ebp - 0xa2a8], edx
cmp dword [ebp - 0xa2a8], 0xb
jge 0x4016c4
push 1
mov eax, dword [ebp - 0xa2a8]
push eax
push 0xf0e270
call fcn.004067b2
add esp, 0xc
push eax
call fcn.0040674e
add esp, 4
mov ecx, dword [ebp - 0xa2a8]
mov dword [ecx*4 + 0x40fd9c], eax
jmp 0x40167e
push 1
call fcn.00406b99
add esp, 4
mov dword [ebp - 0xa2a8], eax
mov edx, dword [ebp - 0xa2a8]
push edx
push 0x40f044
push 0xf0e1f8
call fcn.004079a2
add esp, 0xc
push 5
push 0xf0e1f8
call fcn.00406944
add esp, 8
push eax
push 0xf0e220
call fcn.00407a00
add esp, 8
fild dword [ebp - 0xa2a8]
sub esp, 8
fstp qword [esp]
call fcn.0040676b
add esp, 8
push eax
push 0xf0e1f8
call fcn.00407a00
add esp, 8
push 5
push 0xf0e1f8
call fcn.00406944
add esp, 8
push eax
push 0xf0e248
call fcn.00407a00
add esp, 8
mov dword [ebp - 0xa2a8], 0
mov dword [0xf0e2bc], 0x3c
push 0xf0e760
push 0xf077b0
call fcn.00407a00
add esp, 8
push 0xf0e764
lea eax, [ebp - 0x9f0]
push eax
call fcn.00407a00
add esp, 8
push 0xf077b0
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov dword [ebp - 0x27f8], eax
mov ecx, dword [ebp - 0x27f8]
push ecx
push 0xf077b0
call fcn.004068ee
add esp, 8
push eax
push 0xf077b0
call fcn.00407a00
add esp, 8
push 0x72
call fcn.004066f2
add esp, 4
push eax
push 0x65
call fcn.004066f2
add esp, 4
push eax
push 0x64
call fcn.004066f2
add esp, 4
push eax
push 0x6c
call fcn.004066f2
add esp, 4
push eax
push 0x6f
call fcn.004066f2
add esp, 4
push eax
push 0x66
call fcn.004066f2
add esp, 4
push eax
push 0x61
call fcn.004066f2
add esp, 4
push eax
push 0xf077b0
push 0x40f048
push 0xf079b8
call fcn.004079a2
add esp, 0x28
push 0
push 0xf079b8
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0xa2a8], eax
push 0x64
call fcn.004066f2
add esp, 4
push eax
push 0x70
call fcn.004066f2
add esp, 4
push eax
push 0x6d
call fcn.004066f2
add esp, 4
push eax
push 0x74
call fcn.004066f2
add esp, 4
push eax
push 0x77
call fcn.004066f2
add esp, 4
push eax
push 0xf077b0
push str._s_s_s_s_s_s
push 0xf078b4
call fcn.004079a2
add esp, 0x20
push 0
push 0xf078b4
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov dword [ebp - 0xa2a8], eax
mov dword [ebp - 0xa2a8], 0
push 0x2e
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xc358]
push edx
call fcn.00407a00
add esp, 8
push 0x62
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xc358]
push eax
call fcn.00407a10
add esp, 8
push 0x61
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xc358]
push ecx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xc358]
push edx
call fcn.00407a10
add esp, 8
push 0x2e
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00407a00
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.00407a10
add esp, 8
push 0x78
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x10]
push edx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00407a10
add esp, 8
lea ecx, [ebp - 0xc358]
push ecx
push 4
call fcn.00406394
add esp, 4
push eax
push 0x40f06c
push 0xf078b4
push 0x40f070
push 0xf0dfec
call fcn.004079a2
add esp, 0x18
lea edx, [ebp - 0xc358]
push edx
push 5
call fcn.00406394
add esp, 4
push eax
push 0x40f07c
push 0xf078b4
push 0x40f080
push 0xf0e0f0
call fcn.004079a2
add esp, 0x18
lea eax, [ebp - 0xc358]
push eax
push 1
call fcn.00406394
add esp, 4
push eax
push 0x40f08c
push 0xf078b4
push str._s_s_s_s
push 0xf07ad0
call fcn.004079a2
add esp, 0x18
push 0xf07ad0
push 0xf0a1e0
call fcn.00407a00
add esp, 8
push 0xf0e768
lea ecx, [ebp - 0x118]
push ecx
call fcn.00407a00
add esp, 8
lea edx, [ebp - 0x10]
push edx
push 2
call fcn.00406394
add esp, 4
push eax
push 0x40f09c
lea eax, [ebp - 0x118]
push eax
call fcn.004079a2
add esp, 0x10
lea ecx, [ebp - 0x118]
push ecx
push 0x40f0a4
push 0xf078b4
push str._s_s_s
push 0xf0a2e4
call fcn.004079a2
add esp, 0x14
push 0x73
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x9ad0]
push edx
call fcn.00407a00
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x9ad0]
push eax
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x9ad0]
push edx
call fcn.00407a10
add esp, 8
push 0x7a
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x9ad0]
push eax
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407a10
add esp, 8
push 0x6d
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x9ad0]
push edx
call fcn.00407a10
add esp, 8
push 0x70
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x9ad0]
push eax
call fcn.00407a10
add esp, 8
push 0x3d
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407a10
add esp, 8
push 0x73
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xef8]
push edx
call fcn.00407a00
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xef8]
push eax
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xef8]
push ecx
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xef8]
push edx
call fcn.00407a10
add esp, 8
push 0x4d
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xef8]
push eax
call fcn.00407a10
add esp, 8
push 0x59
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xef8]
push ecx
call fcn.00407a10
add esp, 8
push 0x46
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xef8]
push edx
call fcn.00407a10
add esp, 8
push 0x49
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xef8]
push eax
call fcn.00407a10
add esp, 8
push 0x4c
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xef8]
push ecx
call fcn.00407a10
add esp, 8
push 0x45
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xef8]
push edx
call fcn.00407a10
add esp, 8
push 0x53
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xef8]
push eax
call fcn.00407a10
add esp, 8
push 0x3d
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xef8]
push ecx
call fcn.00407a10
add esp, 8
push 0xf078b4
lea edx, [ebp - 0x9ad0]
push edx
push 0x40f0b0
lea eax, [ebp - 0x9f0]
push eax
call fcn.004079a2
add esp, 0x10
push 0xf079b8
lea ecx, [ebp - 0xef8]
push ecx
push 0x40f0b8
lea edx, [ebp - 0xab7c]
push edx
call fcn.004079a2
add esp, 0x10
mov dword [0xf0e2bc], 0x8aeb
mov eax, dword [0xf0e2bc]
imul eax, eax, 3
mov dword [0xf0e2bc], eax
push 0x73
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407a00
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x9ad0]
push edx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x9ad0]
push eax
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407a10
add esp, 8
push 0x62
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x9ad0]
push edx
call fcn.00407a10
add esp, 8
push 0x66
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x9ad0]
push eax
call fcn.00407a10
add esp, 8
push 0x63
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x9ad0]
push edx
call fcn.00407a10
add esp, 8
push 0x63
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x9ad0]
push eax
call fcn.00407a10
add esp, 8
push 0x3d
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x9ad0]
push ecx
call fcn.00407a10
add esp, 8
push 0x61
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xbb70]
push edx
call fcn.00407a00
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xbb70]
push eax
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xbb70]
push ecx
call fcn.00407a10
add esp, 8
push 0x72
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xbb70]
push edx
call fcn.00407a10
add esp, 8
push 0x69
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xbb70]
push eax
call fcn.00407a10
add esp, 8
push 0x62
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xbb70]
push ecx
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xbb70]
push edx
call fcn.00407a10
add esp, 8
push 0x2b
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xbb70]
push eax
call fcn.00407a10
add esp, 8
push 0x68
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xbb70]
push ecx
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xbb70]
push edx
call fcn.00407a10
add esp, 8
push 0xf078b4
lea eax, [ebp - 0xbb70]
push eax
push 0x40f0c0
lea ecx, [ebp - 0x3e1b0]
push ecx
call fcn.004079a2
add esp, 0x10
push 0xd
call fcn.004066f2
add esp, 4
push eax
push 0xf0de84
call fcn.00407a00
add esp, 8
push 0xa
call fcn.004066f2
add esp, 4
push eax
push 0xf0de84
call fcn.00407a10
add esp, 8
lea edx, [ebp - 0x3e1b0]
push edx
push 0xf0de84
call fcn.00407a10
add esp, 8
push 0xd
call fcn.004066f2
add esp, 4
push eax
push 0xf0de84
call fcn.00407a10
add esp, 8
push 0xa
call fcn.004066f2
add esp, 4
push eax
push 0xf0de84
call fcn.00407a10
add esp, 8
push 0xf0e76c
push 0xf0a3e8
call fcn.00407a00
add esp, 8
push 0x30
call fcn.004066f2
add esp, 4
push eax
push 0x2f
call fcn.004066f2
add esp, 4
push eax
push 0x20
call fcn.004066f2
add esp, 4
push eax
push 0x54
call fcn.004066f2
add esp, 4
push eax
push 0x46
call fcn.004066f2
add esp, 4
push eax
push 0x49
call fcn.004066f2
add esp, 4
push eax
push 0x48
call fcn.004066f2
add esp, 4
push eax
push 0x53
call fcn.004066f2
add esp, 4
push eax
push str._s_s_s_s_s_s_s_s
lea eax, [ebp - 0xb364]
push eax
call fcn.004079a2
add esp, 0x28
push 0x40
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xdf4]
push ecx
call fcn.00407a00
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xdf4]
push edx
call fcn.00407a10
add esp, 8
push 0x63
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xdf4]
push eax
call fcn.00407a10
add esp, 8
push 0x68
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xdf4]
push ecx
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xdf4]
push edx
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xdf4]
push eax
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xdf4]
push ecx
call fcn.00407a10
add esp, 8
push 0x66
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xdf4]
push edx
call fcn.00407a10
add esp, 8
push 0x66
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xdf4]
push eax
call fcn.00407a10
add esp, 8
push 0x73
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xcb38]
push ecx
call fcn.00407a00
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xcb38]
push edx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xcb38]
push eax
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xcb38]
push ecx
call fcn.00407a10
add esp, 8
push 0x63
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xcb38]
push edx
call fcn.00407a10
add esp, 8
push 0x6d
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xcb38]
push eax
call fcn.00407a10
add esp, 8
push 0x64
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xcb38]
push ecx
call fcn.00407a10
add esp, 8
push 0x6c
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xcb38]
push edx
call fcn.00407a10
add esp, 8
push 0x69
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xcb38]
push eax
call fcn.00407a10
add esp, 8
push 0x6e
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xcb38]
push ecx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xcb38]
push edx
call fcn.00407a10
add esp, 8
push 0x3d
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xcb38]
push eax
call fcn.00407a10
add esp, 8
push 0xa
call fcn.004066f2
add esp, 4
push eax
push 0xd
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xb364]
push ecx
push 0xa
call fcn.004066f2
add esp, 4
push eax
push 0xd
call fcn.004066f2
add esp, 4
push eax
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0xcb38]
push eax
push 0xa
call fcn.004066f2
add esp, 4
push eax
push 0xd
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x118]
push ecx
lea edx, [ebp - 0x9ad0]
push edx
push 0xa
call fcn.004066f2
add esp, 4
push eax
push 0xd
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xab7c]
push eax
push 0xa
call fcn.004066f2
add esp, 4
push eax
push 0xd
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x9f0]
push ecx
push 0xa
call fcn.004066f2
add esp, 4
push eax
push 0xd
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xdf4]
push edx
push str._s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s_s
push 0xf0a3e8
call fcn.004079a2
add esp, 0x58
mov eax, dword [ebp + 8]
push eax
push 0x20
call fcn.004066f2
add esp, 4
push eax
push 0x22
call fcn.004066f2
add esp, 4
push eax
push 0xf0b770
push 0x22
call fcn.004066f2
add esp, 4
push eax
push 0x40f108
push 0xf07ad0
call fcn.004079a2
add esp, 0x1c
mov dword [0xf0e2bc], 0x14a53
mov ecx, dword [0xf0e2bc]
add ecx, 0x1ab
mov dword [0xf0e2bc], ecx
push 0xf0a1e0
push 0x20
call fcn.004066f2
add esp, 4
push eax
push 0x6c
call fcn.004066f2
add esp, 4
push eax
push 0x65
call fcn.004066f2
add esp, 4
push eax
push 0x64
call fcn.004066f2
add esp, 4
push eax
push str._s_s_s_s_s
lea edx, [ebp - 0x2020]
push edx
call fcn.004079a2
add esp, 0x1c
push 0xf077b0
lea eax, [ebp - 0xaa78]
push eax
call fcn.00407a00
add esp, 8
lea ecx, [ebp - 0xaa78]
push ecx
lea edx, [ebp - 0xc344]
push edx
call fcn.00407a00
add esp, 8
lea eax, [ebp - 0xaa78]
push eax
lea ecx, [ebp - 0x3e048]
push ecx
call fcn.00407a00
add esp, 8
push 0x69
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xaa78]
push edx
call fcn.00407a10
add esp, 8
push 0x36
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xaa78]
push eax
call fcn.00407a10
add esp, 8
push 0x2e
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xaa78]
push ecx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xaa78]
push edx
call fcn.00407a10
add esp, 8
push 0x69
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xc344]
push eax
call fcn.00407a10
add esp, 8
push 0x36
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xc344]
push ecx
call fcn.00407a10
add esp, 8
push 0x2e
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xc344]
push edx
call fcn.00407a10
add esp, 8
push 0x62
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xc344]
push eax
call fcn.00407a10
add esp, 8
push 0x61
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xc344]
push ecx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xc344]
push edx
call fcn.00407a10
add esp, 8
push 0x69
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e048]
push eax
call fcn.00407a10
add esp, 8
push 0x36
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x3e048]
push ecx
call fcn.00407a10
add esp, 8
push 0x2e
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x3e048]
push edx
call fcn.00407a10
add esp, 8
push 0x66
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e048]
push eax
call fcn.00407a10
add esp, 8
push 0x25
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xa2a0]
push ecx
call fcn.00407a00
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xbb3c]
push edx
call fcn.00407a00
add esp, 8
push 0x63
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xbb3c]
push eax
call fcn.00407a10
add esp, 8
push 0x68
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xbb3c]
push ecx
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xbb3c]
push edx
call fcn.00407a10
add esp, 8
push 0x3a
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xbb3c]
push eax
call fcn.00407a10
add esp, 8
push 0x30
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xbb3c]
push ecx
call fcn.00407a10
add esp, 8
push 0x3e
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xbb3c]
push edx
call fcn.00407a10
add esp, 8
lea eax, [ebp - 0xbb3c]
push eax
lea ecx, [ebp - 0xb350]
push ecx
call fcn.00407a00
add esp, 8
lea edx, [ebp - 0xaa78]
push edx
lea eax, [ebp - 0xb350]
push eax
call fcn.00407a10
add esp, 8
push 0x40f120
lea ecx, [ebp - 0xaa78]
push ecx
call fcn.0040798f
add esp, 8
mov dword [ebp - 0x27f4], eax
cmp dword [ebp - 0x27f4], 0
je 0x4026ba
push 0
push 0
mov edx, dword [ebp - 0x27f4]
push edx
call fcn.004078e3
add esp, 0xc
mov eax, dword [ebp - 0x27f4]
mov ecx, dword [eax + 4]
sub ecx, 1
mov edx, dword [ebp - 0x27f4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x27f4]
cmp dword [eax + 4], 0
jl 0x4026a3
mov ecx, dword [ebp - 0x27f4]
mov edx, dword [ecx]
mov byte [edx], 0x30
mov eax, 0x30
and eax, 0xff
mov dword [ebp - 0x3e984], eax
mov ecx, dword [ebp - 0x27f4]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0x27f4]
mov dword [eax], edx
jmp 0x4026ba
mov ecx, dword [ebp - 0x27f4]
push ecx
push 0x30
call fcn.004077ce
add esp, 8
mov dword [ebp - 0x3e984], eax
mov edx, dword [ebp - 0x27f4]
push edx
call fcn.00407778
add esp, 4
push 0x69
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a00
add esp, 8
push 0x66
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x78
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x69
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x73
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x22
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
lea ecx, [ebp - 0xa2a0]
push ecx
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x53
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x79
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x73
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x6d
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x52
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
lea ecx, [ebp - 0xa2a0]
push ecx
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x5c
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x53
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x79
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x73
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x6e
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x61
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x69
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x76
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x5c
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x22
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x63
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x68
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x3a
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x31
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x3e
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x69
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a00
add esp, 8
push 0x66
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x78
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x69
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x73
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x22
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
lea eax, [ebp - 0xa2a0]
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x53
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x79
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x73
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x6d
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x52
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
lea eax, [ebp - 0xa2a0]
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x5c
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x53
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x79
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x73
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x6e
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x61
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x69
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x76
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x5c
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x22
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x63
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x68
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x3a
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x31
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x99cc]
push edx
call fcn.00407a10
add esp, 8
push 0x3e
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x22
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
lea edx, [ebp - 0xaa78]
push edx
lea eax, [ebp - 0x99cc]
push eax
call fcn.00407a10
add esp, 8
push 0x22
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x99cc]
push ecx
call fcn.00407a10
add esp, 8
push 0x40
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xcb28]
push edx
call fcn.00407a00
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xcb28]
push eax
call fcn.00407a10
add esp, 8
push 0x63
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xcb28]
push ecx
call fcn.00407a10
add esp, 8
push 0x68
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xcb28]
push edx
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xcb28]
push eax
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xcb28]
push ecx
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xcb28]
push edx
call fcn.00407a10
add esp, 8
push 0x66
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xcb28]
push eax
call fcn.00407a10
add esp, 8
push 0x66
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xcb28]
push ecx
call fcn.00407a10
add esp, 8
push 0xd
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xcb28]
push edx
call fcn.00407a10
add esp, 8
push 0xa
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xcb28]
push eax
call fcn.00407a10
add esp, 8
lea ecx, [ebp - 0x99cc]
push ecx
lea edx, [ebp - 0xcb28]
push edx
call fcn.00407a10
add esp, 8
push 0xd
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0xcb28]
push eax
call fcn.00407a10
add esp, 8
push 0xa
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xcb28]
push ecx
call fcn.00407a10
add esp, 8
push 0x22
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x3e980]
push edx
call fcn.00407a00
add esp, 8
push 0x25
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e980]
push eax
call fcn.00407a10
add esp, 8
push 0x53
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x3e980]
push ecx
call fcn.00407a10
add esp, 8
push 0x79
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x3e980]
push edx
call fcn.00407a10
add esp, 8
push 0x73
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e980]
push eax
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x3e980]
push ecx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x3e980]
push edx
call fcn.00407a10
add esp, 8
push 0x6d
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e980]
push eax
call fcn.00407a10
add esp, 8
push 0x52
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x3e980]
push ecx
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x3e980]
push edx
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e980]
push eax
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x3e980]
push ecx
call fcn.00407a10
add esp, 8
push 0x25
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x3e980]
push edx
call fcn.00407a10
add esp, 8
push 0x5c
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e980]
push eax
call fcn.00407a10
add esp, 8
push 0x53
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x3e980]
push ecx
call fcn.00407a10
add esp, 8
push 0x79
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x3e980]
push edx
call fcn.00407a10
add esp, 8
push 0x73
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e980]
push eax
call fcn.00407a10
add esp, 8
push 0x6e
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x3e980]
push ecx
call fcn.00407a10
add esp, 8
push 0x61
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x3e980]
push edx
call fcn.00407a10
add esp, 8
push 0x74
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e980]
push eax
call fcn.00407a10
add esp, 8
push 0x69
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x3e980]
push ecx
call fcn.00407a10
add esp, 8
push 0x76
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x3e980]
push edx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e980]
push eax
call fcn.00407a10
add esp, 8
push 0x5c
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x3e980]
push ecx
call fcn.00407a10
add esp, 8
push 0x63
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x3e980]
push edx
call fcn.00407a10
add esp, 8
push 0x6d
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e980]
push eax
call fcn.00407a10
add esp, 8
push 0x64
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x3e980]
push ecx
call fcn.00407a10
add esp, 8
push 0x2e
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x3e980]
push edx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e980]
push eax
call fcn.00407a10
add esp, 8
push 0x78
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x3e980]
push ecx
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x3e980]
push edx
call fcn.00407a10
add esp, 8
push 0x22
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x3e980]
push eax
call fcn.00407a10
add esp, 8
push 0x65
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x27f0]
push ecx
call fcn.00407a00
add esp, 8
push 0x63
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x27f0]
push edx
call fcn.00407a10
add esp, 8
push 0x68
call fcn.004066f2
add esp, 4
push eax
lea eax, [ebp - 0x27f0]
push eax
call fcn.00407a10
add esp, 8
push 0x6f
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0x27f0]
push ecx
call fcn.00407a10
add esp, 8
push 0x3a
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x27f0]
push edx
call fcn.00407a10
add esp, 8
lea eax, [ebp - 0x3e980]
push eax
lea ecx, [ebp - 0x27f0]
push ecx
call fcn.00407a10
add esp, 8
push 0x3e
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x27f0]
push edx
call fcn.00407a10
add esp, 8
lea eax, [ebp - 0x3e048]
push eax
lea ecx, [ebp - 0x27f0]
push ecx
call fcn.00407a10
add esp, 8
lea edx, [ebp - 0x27f0]
push edx
lea eax, [ebp - 0xcb28]
push eax
call fcn.00407a10
add esp, 8
push 0xd
call fcn.004066f2
add esp, 4
push eax
lea ecx, [ebp - 0xcb28]
push ecx
call fcn.00407a10
add esp, 8
push 0xa
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0xcb28]
push edx
call fcn.00407a10
add esp, 8
push 0x40f124
lea eax, [ebp - 0xc344]
push eax
call fcn.0040798f
add esp, 8
mov dword [ebp - 0x9f4], eax
cmp dword [ebp - 0x9f4], 0
je 0x40357e
mov ecx, dword [ebp - 0x9f4]
push ecx
lea edx, [ebp - 0xcb28]
push edx
call fcn.00407735
add esp, 8
mov eax, dword [ebp - 0x9f4]
push eax
call fcn.00407778
add esp, 4
mov dword [ebp - 0x3044], 0x3c
lea ecx, [ebp - 0xc344]
mov dword [ebp - 0x3034], ecx
mov dword [ebp - 0x3040], 0x40
mov dword [ebp - 0x303c], 0
mov dword [ebp - 0x3038], 0x40f128
mov dword [ebp - 0x3030], 0xf0e770
mov dword [ebp - 0x302c], 0
mov dword [ebp - 0x3028], 0
mov dword [ebp - 0x3024], 0x1d
lea edx, [ebp - 0x3044]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x300c], 0
je 0x403623
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov eax, dword [ebp - 0x300c]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x300c]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00403b24
mov dword [ebp - 0x2838], 0
push 0x40f130
lea edx, [ebp - 0x3e048]
push edx
call fcn.0040798f
add esp, 8
mov dword [ebp - 0x1eb0], eax
cmp dword [ebp - 0x1eb0], 0
je 0x4036aa
push 2
push 0
mov eax, dword [ebp - 0x1eb0]
push eax
call fcn.004078e3
add esp, 0xc
mov ecx, dword [ebp - 0x1eb0]
push ecx
call fcn.004075dd
add esp, 4
mov dword [ebp - 0x14], eax
push 0
push 1
mov edx, dword [ebp - 0x1eb0]
push edx
call fcn.004078e3
add esp, 0xc
mov eax, dword [ebp - 0x1eb0]
push eax
mov ecx, dword [ebp - 0x14]
sub ecx, 3
push ecx
lea edx, [ebp - 0x16c8]
push edx
call fcn.00407586
add esp, 0xc
mov eax, dword [ebp - 0x1eb0]
push eax
call fcn.00407778
add esp, 4
lea ecx, [ebp - 0x16c8]
push ecx
lea edx, [ebp - 0xde4]
push edx
call fcn.00407a00
add esp, 8
push str.__C
lea eax, [ebp - 0x8e8]
push eax
call fcn.00407a00
add esp, 8
push 0xf0a1e0
lea ecx, [ebp - 0x8e8]
push ecx
call fcn.00407a10
add esp, 8
push 0x20
call fcn.004066f2
add esp, 4
push eax
lea edx, [ebp - 0x8e8]
push edx
call fcn.00407a10
add esp, 8
push 0xf07ad0
lea eax, [ebp - 0x8e8]
push eax
call fcn.00407a10
add esp, 8
push 0x40f13c
lea ecx, [ebp - 0xaa78]
push ecx
call fcn.0040798f
add esp, 8
mov dword [ebp - 0x16cc], eax
cmp dword [ebp - 0x16cc], 0
je 0x403a72
push 0
push 0
mov edx, dword [ebp - 0x16cc]
push edx
call fcn.004078e3
add esp, 0xc
mov eax, dword [ebp - 0x16cc]
mov ecx, dword [eax + 4]
sub ecx, 1
mov edx, dword [ebp - 0x16cc]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x16cc]
cmp dword [eax + 4], 0
jl 0x4037ab
mov ecx, dword [ebp - 0x16cc]
mov edx, dword [ecx]
movsx eax, byte [edx]
and eax, 0xff
mov dword [ebp - 0x3e988], eax
mov ecx, dword [ebp - 0x16cc]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0x16cc]
mov dword [eax], edx
jmp 0x4037c0
mov ecx, dword [ebp - 0x16cc]
push ecx
call fcn.004074ad
add esp, 4
mov dword [ebp - 0x3e988], eax
mov edx, dword [ebp - 0x3e988]
mov dword [ebp - 0x8ec], edx
cmp dword [ebp - 0x8ec], 0x31
jne 0x403923
cmp dword [0xf0e2c0], 0
jne 0x40387e
mov dword [ebp - 0x2834], 0x3c
lea eax, [ebp - 0xde4]
mov dword [ebp - 0x2824], eax
mov dword [ebp - 0x2830], 0x40
mov dword [ebp - 0x282c], 0
mov dword [ebp - 0x2828], 0x40f140
lea ecx, [ebp - 0x8e8]
mov dword [ebp - 0x2820], ecx
mov dword [ebp - 0x281c], 0
mov dword [ebp - 0x2818], 0
mov dword [ebp - 0x2814], 0x1d
lea edx, [ebp - 0x2834]
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x27fc], 0
je 0x40387e
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov eax, dword [ebp - 0x27fc]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [ebp - 0x27fc]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0xf0e2c0], 6
jne 0x403923
mov dword [ebp - 0x2834], 0x3c
lea edx, [ebp - 0xde4]
mov dword [ebp - 0x2824], edx
mov dword [ebp - 0x2830], 0x40
mov dword [ebp - 0x282c], 0
mov dword [ebp - 0x2828], 0x40f148
lea eax, [ebp - 0x8e8]
mov dword [ebp - 0x2820], eax
mov dword [ebp - 0x281c], 0
mov dword [ebp - 0x2818], 1
mov dword [ebp - 0x2814], 0x1d
lea ecx, [ebp - 0x2834]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x27fc], 0
je 0x403923
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov edx, dword [ebp - 0x27fc]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x27fc]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x8ec], 0x30
jne 0x403a72
cmp dword [0xf0e2c0], 0
jne 0x4039d1
mov dword [ebp - 0x2834], 0x3c
mov dword [ebp - 0x2824], 0xf0a1e0
mov dword [ebp - 0x2830], 0x40
mov dword [ebp - 0x282c], 0
mov dword [ebp - 0x2828], 0x40f150
mov dword [ebp - 0x2820], 0xf07ad0
mov dword [ebp - 0x281c], 0
mov dword [ebp - 0x2818], 0
mov dword [ebp - 0x2814], 0x1d
lea ecx, [ebp - 0x2834]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x27fc], 0
je 0x4039d1
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov edx, dword [ebp - 0x27fc]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x27fc]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0xf0e2c0], 6
jne 0x403a72
mov dword [ebp - 0x2834], 0x3c
mov dword [ebp - 0x2824], 0xf0a1e0
mov dword [ebp - 0x2830], 0x40
mov dword [ebp - 0x282c], 0
mov dword [ebp - 0x2828], str.open
mov dword [ebp - 0x2820], 0xf07ad0
mov dword [ebp - 0x281c], 0
mov dword [ebp - 0x2818], 1
mov dword [ebp - 0x2814], 0x1d
lea ecx, [ebp - 0x2834]
push ecx
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x27fc], 0
je 0x403a72
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0xffffffffffffffff
mov edx, dword [ebp - 0x27fc]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x27fc]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x16cc]
push ecx
call fcn.00407778
add esp, 4
cmp dword [0xf07ac4], 1
jne 0x403ad2
mov dword [ebp - 0xa2a8], 0
jmp 0x403aa5
mov edx, dword [ebp - 0xa2a8]
add edx, 1
mov dword [ebp - 0xa2a8], edx
mov eax, dword [0xf07acc]
sub eax, 2
cmp dword [ebp - 0xa2a8], eax
jge 0x403ad2
mov ecx, dword [ebp - 0xa2a8]
imul ecx, ecx, 0x3e8
add ecx, 0x40fdcc
push ecx
call fcn.00407483
add esp, 4
jmp 0x403a96
mov edx, dword [0xf07acc]
sub edx, 2
mov dword [ebp - 0xa2a8], edx
jmp 0x403af2
mov eax, dword [ebp - 0xa2a8]
add eax, 1
mov dword [ebp - 0xa2a8], eax
mov ecx, dword [ebp - 0xa2a8]
cmp ecx, dword [0xf07acc]
jge 0x403b1d
mov edx, dword [ebp - 0xa2a8]
imul edx, edx, 0x3e8
add edx, 0x40fdcc
push edx
call fcn.00407483
add esp, 4
jmp 0x403ae3
xor eax, eax
pop edi
mov esp, ebp
pop ebp
ret