Function at 0x6c8600
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x1f
push 0
push 0
dec ecx
jne 0x6c8608
push ecx
push ebx
push esi
push edi
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x24]
mov edx, dword [0x6c7a38]
call fcn.0040c104
xor eax, eax
push ebp
push 0x6c91f3
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x29], 0
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [eax + 0x5b], edx
mov eax, dword [ebp - 0x28]
mov byte [eax + 0x4a], 0
mov edx, 1
mov eax, dword [ebp - 0x28]
call fcn.006c8588
mov eax, dword [ebp - 0x28]
add eax, 0x3a
call fcn.0040a790
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dl, 1
mov eax, dword [0x60ce38]
call fcn.0060d3e8
mov dword [ebp - 0x30], eax
xor edx, edx
push ebp
push 0x6c91a7
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 1
mov eax, dword [0x6c7128]
call fcn.006c73bc
mov ebx, eax
mov eax, dword [ebp - 0x28]
mov dword [eax + 0xc], ebx
mov eax, dword [ebp - 0x28]
push eax
push 0x6c9524
mov eax, ebx
call fcn.006c7a24
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [0x6c7128]
call fcn.00408d40
mov edx, dword [ebp - 0x28]
movzx edx, byte [edx + 0x2c]
call fcn.006c799c
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [0x6c7128]
call fcn.00408d40
mov edx, dword [ebp - 0x28]
mov edx, dword [edx + 0x2d]
call fcn.006c79a0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [0x6c7128]
call fcn.00408d40
mov edx, dword [ebp - 0x28]
mov edx, dword [edx + 0x31]
call fcn.006c79b8
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [0x6c7128]
call fcn.00408d40
mov edx, dword [ebp - 0x28]
mov edx, dword [edx + 0x35]
call fcn.006c79d0
mov dl, 1
mov eax, dword [0x47aeac]
call fcn.00408a94
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x28]
add eax, 0x42
mov edx, 0x6c9214
call fcn.0040ab70
xor edx, edx
push ebp
push 0x6c9178
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x28]
call fcn.005fc000
push 0x7d0
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x28]
lea eax, [ebp - 0x68]
mov ecx, 0x6c9214
call fcn.0040ba64
mov eax, dword [ebp - 0x68]
push eax
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x20]
lea eax, [ebp - 0x6c]
mov ecx, 0x6c9214
call fcn.0040ba64
mov edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
pop ecx
mov ebx, dword [eax]
call dword [ebx]
test al, al
jne 0x6c880e
push 0x6c9238
mov eax, dword [ebp - 0x28]
push dword [eax + 0x20]
push 0x6c9258
lea edx, [ebp - 0x74]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
call fcn.00424120
push dword [ebp - 0x74]
push 0x6c926c
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
xor edx, edx
push edx
push eax
lea edx, [ebp - 0x78]
mov eax, 8
call fcn.00424370
push dword [ebp - 0x78]
push 0x6c9280
lea eax, [ebp - 0x70]
mov edx, 7
call fcn.0040baec
mov ecx, dword [ebp - 0x70]
mov edx, 1
mov eax, dword [ebp - 0x28]
call fcn.006c84b4
call fcn.00409f88
call fcn.00409f88
jmp 0x6c91b2
mov edx, 2
mov eax, dword [ebp - 0x28]
call fcn.006c8588
xor ecx, ecx
mov dl, 1
mov eax, dword [0x67b4c4]
call fcn.0067b9f0
mov dword [ebp - 0x38], eax
mov dl, 1
mov eax, dword [0x481c74]
call fcn.00408a94
mov dword [ebp - 0x3c], eax
xor edx, edx
push ebp
push 0x6c8881
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x28]
lea eax, [ebp - 0x7c]
mov ecx, 0x6c9214
call fcn.0040ba64
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov ecx, dword [ebp - 0x3c]
mov edx, 0x6c9290
mov eax, dword [ebp - 0x38]
call fcn.0067bae8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6c88bd
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov ebx, dword [eax]
call dword [ebx + 0x1c]
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
call dword [edx]
mov edx, eax
lea eax, [ebp - 4]
xor ecx, ecx
call fcn.0040b34c
mov eax, dword [ebp - 0x3c]
mov edx, dword [eax]
call dword [edx]
push eax
lea eax, [ebp - 4]
call fcn.0040ad50
mov edx, eax
mov eax, dword [ebp - 0x3c]
pop ecx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov dword [ebp - 0x3c], edx
call fcn.00408ac4
mov eax, dword [ebp - 0x38]
xor edx, edx
mov dword [ebp - 0x38], edx
call fcn.00408ac4
lea eax, [ebp - 0x80]
mov edx, dword [ebp - 4]
call fcn.0040b8d0
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x30]
call fcn.0060d5f4
mov edx, 0x6c92d0
mov eax, dword [ebp - 0x30]
call fcn.0060ead0
mov ebx, eax
test ebx, ebx
je 0x6c8a6e
push 0
push 0
mov edx, 0x6c92e4
mov eax, ebx
call fcn.0060e658
fstp qword [ebp - 0x48]
wait
push 0
push 0
mov edx, 0x6c9300
mov eax, ebx
call fcn.0060e658
mov eax, dword [ebp - 0x28]
fstp qword [eax + 0x53]
wait
fldz
fcomp qword [ebp - 0x48]
wait
fnstsw ax
sahf
je 0x6c89ed
mov eax, dword [ebp - 0x28]
fldz
fcomp qword [eax + 0x4b]
wait
fnstsw ax
sahf
je 0x6c89ed
mov eax, dword [ebp - 0x28]
fld qword [ebp - 0x48]
fcomp qword [eax + 0x4b]
wait
fnstsw ax
sahf
jbe 0x6c89ed
fld qword [ebp - 0x48]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea ecx, [ebp - 0x14]
mov edx, dword [0x8c2498]
mov eax, 0x6c931c
call fcn.004278e0
push 0x6c9334
push dword [ebp - 0x14]
push 0x6c9368
lea eax, [ebp - 0x84]
mov edx, 3
call fcn.0040baec
mov ecx, dword [ebp - 0x84]
mov edx, 7
mov eax, dword [ebp - 0x28]
call fcn.006c84b4
call fcn.00409f88
call fcn.00409f88
jmp 0x6c91b2
mov eax, dword [ebp - 0x28]
fldz
fcomp qword [eax + 0x53]
wait
fnstsw ax
sahf
je 0x6c8a6e
mov eax, dword [ebp - 0x28]
fldz
fcomp qword [eax + 0x4b]
wait
fnstsw ax
sahf
je 0x6c8a6e
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x28]
fld qword [eax + 0x53]
fcomp qword [edx + 0x4b]
wait
fnstsw ax
sahf
jbe 0x6c8a6e
mov eax, dword [ebp - 0x28]
fld qword [eax + 0x53]
fstp xword [ebp - 0x60]
wait
movzx eax, word [ebp - 0x58]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
lea ecx, [ebp - 0x18]
mov edx, dword [0x8c2498]
mov eax, 0x6c931c
call fcn.004278e0
push 0x6c938c
push dword [ebp - 0x18]
push 0x6c93ac
lea eax, [ebp - 0x88]
mov edx, 3
call fcn.0040baec
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x28]
call fcn.006c8450
mov edx, 0x6c93f0
mov eax, dword [ebp - 0x30]
call fcn.0060ead0
mov ebx, eax
mov eax, dword [ebp - 0x40]
mov edx, dword [eax]
call dword [edx + 8]
test ebx, ebx
jne 0x6c8aaa
mov ecx, 0x6c9410
mov edx, 3
mov eax, dword [ebp - 0x28]
call fcn.006c84b4
call fcn.00409f88
call fcn.00409f88
jmp 0x6c91b2
mov edx, 3
mov eax, dword [ebp - 0x28]
call fcn.006c8588
mov eax, dword [ebx + 0xc]
call fcn.0060e9b4
dec eax
test eax, eax
jl 0x6c8c39
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x34], 0
mov eax, dword [ebx + 0xc]
mov edx, dword [ebp - 0x34]
call fcn.0060e9bc
lea edx, [ebp - 0x8c]
call fcn.0060ec04
mov eax, dword [ebp - 0x8c]
mov edx, 0x6c9430
call fcn.0040bbfc
jne 0x6c8c2d
lea eax, [ebp - 8]
push eax
mov eax, dword [ebx + 0xc]
mov edx, dword [ebp - 0x34]
call fcn.0060e9bc
xor ecx, ecx
mov edx, 0x6c9448
call fcn.0060e4d0
lea eax, [ebp - 0x94]
push eax
mov eax, dword [ebx + 0xc]
mov edx, dword [ebp - 0x34]
call fcn.0060e9bc
xor ecx, ecx
mov edx, 0x6c9460
call fcn.0060e4d0
mov eax, dword [ebp - 0x94]
lea edx, [ebp - 0x90]
call fcn.00423620
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x10]
call fcn.00423774
mov eax, dword [ebp - 0x28]
add eax, 0x42
mov edx, dword [ebp - 8]
call fcn.0040ab70
cmp dword [ebp - 8], 0
jne 0x6c8b8c
mov ecx, 0x6c9410
mov edx, 3
mov eax, dword [ebp - 0x28]
call fcn.006c84b4
call fcn.00409f88
call fcn.00409f88
jmp 0x6c91b2
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x28]
call fcn.006c9538
test al, al
je 0x6c8c2d
mov eax, dword [ebp - 0x28]
push dword [eax + 0x24]
push 0x6c9474
push dword [ebp - 8]
lea eax, [ebp - 0x98]
mov edx, 3
call fcn.0040baec
mov edx, dword [ebp - 0x98]
lea ecx, [ebp - 0x24]
mov eax, dword [ebp - 0x28]
call fcn.006c9628
test al, al
jne 0x6c8be9
mov eax, dword [ebx + 0xc]
mov edx, dword [ebp - 0x34]
call fcn.0060e9bc
mov edx, eax
mov eax, dword [ebp - 0x40]
call fcn.0049deac
jmp 0x6c8c2d
lea edx, [ebp - 0xa0]
mov eax, dword [ebp - 0x1c]
call fcn.00423620
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x9c]
call fcn.00423774
mov eax, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x10]
call fcn.0040bbfc
je 0x6c8c2d
mov eax, dword [ebx + 0xc]
mov edx, dword [ebp - 0x34]
call fcn.0060e9bc
mov edx, eax
mov eax, dword [ebp - 0x40]
call fcn.0049deac
inc dword [ebp - 0x34]
dec dword [ebp - 0x4c]
jne 0x6c8ad3
mov eax, dword [ebp - 0x40]
cmp dword [eax + 8], 0
jne 0x6c8c6c
mov byte [ebp - 0x29], 1
mov eax, dword [ebp - 0x28]
mov dword [eax + 0x5b], 1
mov edx, 4
mov eax, dword [ebp - 0x28]
call fcn.006c8588
call fcn.00409f88
call fcn.00409f88
jmp 0x6c91b2
xor ebx, ebx
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x6c8ca5
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x34], 0
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
call fcn.0049e030
xor ecx, ecx
mov edx, 0x6c948c
call fcn.0060e7a8
add ebx, eax
inc dword [ebp - 0x34]
dec dword [ebp - 0x4c]
jne 0x6c8c84
mov edx, ebx
mov eax, dword [ebp - 0x28]
call fcn.006c8570
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x6c8ec5
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x34], 0
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
call fcn.0049e030
xor ecx, ecx
mov edx, 0x6c9448
call fcn.0060e4d0
lea eax, [ebp - 0xc]
push eax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
call fcn.0049e030
xor ecx, ecx
mov edx, 0x6c94a4
call fcn.0060e4d0
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
call fcn.0049e030
xor ecx, ecx
mov edx, 0x6c9460
call fcn.0060e4d0
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
call fcn.0049e030
xor ecx, ecx
mov edx, 0x6c948c
call fcn.0060e7a8
mov ebx, eax
mov eax, dword [ebp - 0x28]
add eax, 0x42
mov edx, dword [ebp - 8]
call fcn.0040ab70
cmp dword [ebp - 0xc], 0
jne 0x6c8d52
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 8]
call fcn.0040abb8
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x28]
lea eax, [ebp - 0xa4]
mov ecx, dword [ebp - 8]
call fcn.0040ba64
mov edx, dword [ebp - 0xa4]
lea ecx, [ebp - 0x24]
mov eax, dword [ebp - 0x28]
call fcn.006c9628
test al, al
je 0x6c8db0
lea edx, [ebp - 0xa8]
mov eax, dword [ebp - 0x1c]
call fcn.00423620
mov eax, dword [ebp - 0xa8]
push eax
lea edx, [ebp - 0xac]
mov eax, dword [ebp - 0x10]
call fcn.00423620
mov edx, dword [ebp - 0xac]
pop eax
call fcn.0040bbfc
je 0x6c8eb9
push ebx
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x28]
lea eax, [ebp - 0xb0]
mov ecx, dword [ebp - 8]
call fcn.0040ba64
mov eax, dword [ebp - 0xb0]
push eax
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x20]
lea eax, [ebp - 0xb4]
mov ecx, dword [ebp - 0xc]
call fcn.0040ba64
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
pop ecx
mov ebx, dword [eax]
call dword [ebx]
test al, al
jne 0x6c8e2a
lea eax, [ebp - 0xb8]
mov ecx, dword [ebp - 8]
mov edx, 0x6c94c8
call fcn.0040ba64
mov ecx, dword [ebp - 0xb8]
mov edx, 4
mov eax, dword [ebp - 0x28]
call fcn.006c84b4
call fcn.00409f88
call fcn.00409f88
jmp 0x6c91b2
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x28]
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 8]
call fcn.0040ba64
mov edx, dword [ebp - 0xbc]
lea ecx, [ebp - 0x24]
mov eax, dword [ebp - 0x28]
call fcn.006c9628
test al, al
je 0x6c8e84
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 0x1c]
call fcn.00423620
mov eax, dword [ebp - 0xc0]
push eax
lea edx, [ebp - 0xc4]
mov eax, dword [ebp - 0x10]
call fcn.00423620
mov edx, dword [ebp - 0xc4]
pop eax
call fcn.0040bbfc
je 0x6c8eb9
lea eax, [ebp - 0xc8]
mov ecx, dword [ebp - 8]
mov edx, 0x6c94e8
call fcn.0040ba64
mov ecx, dword [ebp - 0xc8]
mov edx, 5
mov eax, dword [ebp - 0x28]
call fcn.006c84b4
call fcn.00409f88
call fcn.00409f88
jmp 0x6c91b2
inc dword [ebp - 0x34]
dec dword [ebp - 0x4c]
jne 0x6c8cc9
mov edx, 4
mov eax, dword [ebp - 0x28]
call fcn.006c8588
mov eax, dword [ebp - 0x40]
mov eax, dword [eax + 8]
dec eax
test eax, eax
jl 0x6c90cf
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x34], 0
lea eax, [ebp - 8]
push eax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
call fcn.0049e030
xor ecx, ecx
mov edx, 0x6c9448
call fcn.0060e4d0
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
call fcn.0049e030
xor ecx, ecx
mov edx, 0x6c9460
call fcn.0060e4d0
mov eax, dword [ebp - 0x28]
add eax, 0x42
mov edx, dword [ebp - 8]
call fcn.0040ab70
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x28]
lea eax, [ebp - 0xcc]
mov ecx, dword [ebp - 8]
call fcn.0040ba64
mov edx, dword [ebp - 0xcc]
lea ecx, [ebp - 0x24]
mov eax, dword [ebp - 0x28]
call fcn.006c9628
test al, al
je 0x6c8f8a
lea edx, [ebp - 0xd0]
mov eax, dword [ebp - 0x1c]
call fcn.00423620
mov eax, dword [ebp - 0xd0]
push eax
lea edx, [ebp - 0xd4]
mov eax, dword [ebp - 0x10]
call fcn.00423620
mov edx, dword [ebp - 0xd4]
pop eax
call fcn.0040bbfc
je 0x6c8fbf
lea eax, [ebp - 0xd8]
mov ecx, dword [ebp - 8]
mov edx, 0x6c950c
call fcn.0040ba64
mov ecx, dword [ebp - 0xd8]
mov edx, 6
mov eax, dword [ebp - 0x28]
call fcn.006c84b4
call fcn.00409f88
call fcn.00409f88
jmp 0x6c91b2
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x24]
lea eax, [ebp - 0xdc]
mov ecx, 0x6c9474
call fcn.0040ba64
mov eax, dword [ebp - 0xdc]
call fcn.005fc000
xor eax, eax
push ebp
push 0x6c9052
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov eax, dword [ebp - 0x28]
push dword [eax + 0x24]
push 0x6c9474
push dword [ebp - 8]
lea eax, [ebp - 0xe0]
mov edx, 3
call fcn.0040baec
mov eax, dword [ebp - 0xe0]
call fcn.0040b7f8
push eax
call sub.KERNEL32.DLL_SetFileAttributesW
mov eax, dword [ebp - 0x28]
push dword [eax + 0x24]
push 0x6c9474
push dword [ebp - 8]
lea eax, [ebp - 0xe4]
mov edx, 3
call fcn.0040baec
mov eax, dword [ebp - 0xe4]
call fcn.004253d8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6c905c
mov eax, dword [ebp - 0x28]
push dword [eax + 0x24]
push 0x6c9474
push dword [ebp - 8]
lea eax, [ebp - 0xe8]
mov edx, 3
call fcn.0040baec
mov eax, dword [ebp - 0xe8]
push eax
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x28]
lea eax, [ebp - 0xec]
mov ecx, dword [ebp - 8]
call fcn.0040ba64
mov edx, dword [ebp - 0xec]
mov eax, dword [ebp - 0x28]
pop ecx
call fcn.006c9754
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x28]
lea eax, [ebp - 0xf0]
mov ecx, dword [ebp - 8]
call fcn.0040ba64
mov eax, dword [ebp - 0xf0]
call fcn.004253d8
inc dword [ebp - 0x34]
dec dword [ebp - 0x4c]
jne 0x6c8eec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6c9182
mov eax, dword [ebp - 0x28]
cmp byte [eax + 0x39], 0
je 0x6c9131
mov eax, dword [ebp - 0x28]
push dword [eax + 0x24]
push 0x6c9474
push 0x6c9214
lea eax, [ebp - 0xf4]
mov edx, 3
call fcn.0040baec
mov eax, dword [ebp - 0xf4]
push eax
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x28]
lea eax, [ebp - 0xf8]
mov ecx, 0x6c9214
call fcn.0040ba64
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x28]
pop ecx
call fcn.006c9754
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x28]
lea eax, [ebp - 0xfc]
mov ecx, 0x6c9214
call fcn.0040ba64
mov eax, dword [ebp - 0xfc]
call fcn.004253d8
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x28]
call fcn.00425a90
mov eax, dword [ebp - 0x28]
add eax, 0xc
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [eax]
mov edx, dword [ebp - 0x64]
xor ecx, ecx
mov dword [edx], ecx
call fcn.00408ac4
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6c91fa
lea eax, [ebp - 0xfc]
mov edx, 0x26
call fcn.0040a7f0
lea eax, [ebp - 0x24]
mov edx, dword [0x6c7a38]
call fcn.0040c1e0
lea eax, [ebp - 0x18]
mov edx, 5
call fcn.0040a7f0
lea eax, [ebp - 4]
call fcn.0040a7b4
ret