Function at 0x407710
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59f00e
mov eax, dword fs:[0]
push eax
sub esp, 0x12c
mov eax, dword [0x628144]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x120], ebx
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x134], eax
call fcn.004266b1
test al, al
je 0x40777d
pop ebp
push esi
push esp
pop esp
push ecx
pop esp
push ecx
push eax
pop eax
pop esp
push edx
push esp
pop edx
push esp
push edi
push ebx
pop edi
pop esp
pop ecx
pop ebx
push ebx
push edx
push ebx
pop esp
push edx
push esi
pop esi
push edi
push edx
push esp
pop esi
mov ebx, dword [ebp - 0x120]
mov dword [ebp - 0x130], 0
call fcn.00426a77
test al, al
je 0x4077a1
push edx
push edi
push edx
pop eax
pop esi
push ebx
pop edx
push ebx
push eax
push esi
pop ebp
pop edx
pop eax
push esi
push ebx
pop ebp
push ebp
lea eax, [ebx + 0x14]
mov dword [ebp - 0x124], 0
push eax
mov dword [ebp - 0x128], eax
lea eax, [ebp - 0x88]
push eax
call fcn.0042bc94
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
mov dword [ebp - 4], 0
cmovae eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.0042a099
cmp dword [ebp - 0xa4], 8
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 1
cmovae eax, dword [ebp - 0xb8]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.00429f70
lea eax, [ebp - 0xe8]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.0042c06b
add esp, 0x20
mov byte [ebp - 4], 3
call fcn.0042680a
test al, al
je 0x40784f
pop edx
push esi
pop edx
push esi
push ebp
push esp
pop edi
push eax
pop edi
push edx
pop esi
pop esi
push ecx
pop ebx
pop ebx
push ebp
pop esp
push esi
pop ebp
pop eax
pop ecx
push ecx
push eax
pop edi
push esi
pop ebp
push esi
pop ebx
pop ecx
push eax
pop ebp
push edi
call fcn.0042684f
test al, al
je 0x407869
pop esi
push esp
push ecx
pop edx
push ebp
pop edx
push eax
pop eax
push esp
pop ebx
push ebp
push eax
pop esi
pop eax
pop ebx
push edi
push esp
call fcn.00426b46
test al, al
je 0x407892
push edx
push esp
pop esp
pop esi
push ebx
pop eax
pop edi
push eax
push ecx
pop esp
pop edi
push edi
pop esp
pop ebp
pop ecx
pop ecx
push eax
push eax
push ecx
pop edi
pop ebp
pop ebp
push esp
pop ebx
push ebp
push eax
push ecx
push ebx
pop ebp
pop esp
pop eax
pop ecx
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
push eax
lea eax, [ebp - 0xd0]
push eax
call fcn.0042ac57
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0042c06b
add esp, 0x10
mov eax, dword [ebp - 0x120]
mov byte [ebp - 4], 5
mov esi, dword [eax]
cmp esi, dword [eax + 4]
je 0x407a48
nop dword [eax]
cmp dword [esi + 0x14], 0x10
jb 0x4078ea
mov edx, dword [esi]
jmp 0x4078ec
mov edx, esi
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
cmp byte [edx], 0
jne 0x407907
xor ecx, ecx
jmp 0x407919
mov ecx, edx
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407910
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.004069e0
cmp dword [ebp - 0x44], 0x10
lea ecx, [ebp - 0x58]
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x28]
cmovae ecx, dword [ebp - 0x58]
cmp dword [ebp - 0x14], 0x10
mov ebx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x48]
cmovae edx, ebx
cmp eax, edi
cmovb edi, eax
mov eax, dword [ebp - 0x14]
test edi, edi
je 0x4079a5
sub edi, 4
jb 0x407963
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x407968
add edx, 4
add ecx, 4
sub edi, 4
jae 0x407952
cmp edi, 0xfffffffc
je 0x40799c
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x407995
cmp edi, 0xfffffffd
je 0x40799c
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x407995
cmp edi, 0xfffffffe
je 0x40799c
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x407995
cmp edi, 0xffffffff
je 0x40799c
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x40799c
sbb eax, eax
or eax, 1
jmp 0x40799e
xor eax, eax
test eax, eax
jne 0x4079b1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x18]
cmp edx, ecx
jb 0x4079b1
jbe 0x4079f9
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x4079e5
inc eax
cmp eax, 0x1000
jb 0x4079dc
test byte [ebp - 0x28], 0x1f
jne 0x407a16
mov eax, dword [ebx - 4]
cmp eax, ebx
jae 0x407a16
sub ebx, eax
cmp ebx, 4
jb 0x407a16
cmp ebx, 0x23
ja 0x407a16
mov ebx, eax
push ebx
call fcn.004257ce
add esp, 4
mov eax, dword [ebp - 0x120]
add esi, 0x18
cmp esi, dword [eax + 4]
jne 0x4078e0
jmp 0x407a48
mov dword [ebp - 0x130], 1
cmp eax, 0x10
jb 0x407a48
inc eax
cmp eax, 0x1000
jb 0x407a3f
test byte [ebp - 0x28], 0x1f
je 0x407a1b
call fcn.00445a81
mov eax, dword [ebx - 4]
cmp eax, ebx
jb 0x407a27
call fcn.00445a81
sub ebx, eax
cmp ebx, 4
jae 0x407a33
call fcn.00445a81
cmp ebx, 0x23
jbe 0x407a3d
call fcn.00445a81
mov ebx, eax
push ebx
call fcn.004257ce
add esp, 4
call fcn.00426bd0
test al, al
je 0x407a66
pop eax
push ebx
pop ecx
push ebx
pop ebp
push edx
pop ebp
pop edx
pop edi
pop eax
pop esp
push edi
push ecx
push edx
push ebx
push eax
push esp
pop esi
pop ecx
push edx
push esp
call fcn.00426489
test al, al
je 0x407a81
pop edi
push ebp
push edx
pop esp
push esp
pop esi
pop ebx
pop ebp
pop eax
pop ebx
pop esp
pop edi
pop edx
pop edx
pop ebx
pop ebx
push ebx
push ebp
call fcn.00426c15
test al, al
je 0x407aa8
pop esi
push edi
pop edi
pop edi
pop ebx
push eax
push ebx
pop edi
push edi
push esi
push eax
pop ebx
push ebp
push ecx
push ebp
push ebp
push ecx
pop ecx
pop edx
pop ebp
pop eax
pop eax
pop edx
push edi
push ebx
push eax
push edx
push ecx
pop esp
push edi
cmp dword [ebp - 0x130], 0
jne 0x407ab8
xor esi, esi
jmp 0x408206
call fcn.0042673b
test al, al
je 0x407ad5
push edi
pop ecx
push edi
push edi
push esi
push ebp
pop ebp
push ebx
push eax
pop eax
pop eax
push edx
pop esp
pop edi
push edx
pop edi
pop edi
pop eax
pop edi
pop edi
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x407b00
mov eax, dword [ecx]
jmp 0x407b02
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
mov word [eax], dx
lea eax, [ebp - 0xb8]
push edx
push eax
call fcn.004022e0
push dword [ebp - 0x134]
mov ecx, dword [ebp - 0x120]
lea eax, [ebp - 0xa0]
push eax
call fcn.00407500
cmp dword [ebp + 0xc], 0
mov byte [ebp - 4], 6
je 0x407c51
call fcn.0042684f
test al, al
je 0x407b62
push eax
pop esi
pop edi
pop esp
push esi
pop edi
pop ecx
pop ebp
push ebx
pop ebp
push ecx
push ecx
push eax
push edi
push ebx
pop esi
pop eax
pop edx
push esi
push esp
push edi
pop ecx
pop ebx
push ecx
pop ebx
push edx
pop edx
pop esp
pop edx
call fcn.00426489
test al, al
je 0x407b81
push ebp
pop ecx
push esp
pop edx
push ecx
push ebx
push edi
push esp
pop ebx
pop eax
pop edx
pop edx
push ebx
pop esi
pop ecx
push ebx
push esi
pop ecx
push ebx
push edx
push ebp
pop edi
call fcn.0042666c
test al, al
je 0x407b9b
push edi
pop esp
pop edx
push eax
push edx
pop ebp
push ebx
push esp
push esp
pop esi
pop esp
pop eax
push ebx
push ecx
push esp
push esp
pop ecx
mov ebx, dword [ebp - 0x120]
cmp dword [ebx + 0xb4], 0
je 0x407bd6
push 1
lea eax, [ebp - 0xa0]
push eax
sub esp, 0x18
lea ecx, [ebx + 0x14]
mov eax, esp
push ecx
push eax
call fcn.0042bc94
mov ecx, dword [ebx + 0xb4]
add esp, 8
push dword [ebp - 0x134]
call fcn.00402e60
cmp dword [ebp - 0x8c], 8
lea eax, [ebp - 0xa0]
cmovae eax, dword [ebp - 0xa0]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x407fc6
lea eax, [ebp - 0x124]
push eax
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 7
cmp dword [ecx + 0x14], 8
mov dword [ecx + 0x10], 0
jb 0x407c2b
mov eax, dword [ecx]
jmp 0x407c2d
mov eax, ecx
xor edx, edx
push 0xffffffffffffffff
mov word [eax], dx
lea eax, [ebp - 0xa0]
push edx
push eax
call fcn.004022e0
call fcn.00428af3
add esp, 0x1c
mov dword [ebx + 0x68], eax
jmp 0x407fc6
call fcn.004266b1
test al, al
je 0x407c7a
pop esp
pop edx
pop ebx
push esp
push esp
pop esp
push ecx
push ebp
push eax
push eax
push ebx
pop ebx
push ecx
push ecx
push esi
pop edx
pop esi
pop ebp
push eax
push ebx
push ecx
push eax
push edx
pop eax
push esi
push eax
push esp
pop ebx
pop edx
pop esi
pop ecx
push edi
call fcn.004269a8
test al, al
je 0x407c99
push ebp
pop edi
pop edi
push edi
push ebp
pop edi
pop eax
pop edx
pop esp
pop esp
pop edi
pop eax
push ebx
push esi
pop ebx
push ebx
push esp
pop esi
pop ebp
pop ebp
push esi
pop eax
mov ecx, dword [ebp - 0x128]
push 0xffffffffffffffff
push 0
push ecx
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
call fcn.004068b0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.004068b0
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 8
push str.43355423066425411340622061073636
push eax
call fcn.00427905
mov esi, eax
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 9
push str.67518947036756241167664868024529
push eax
call fcn.00427905
push esi
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
call fcn.0042b707
mov eax, dword [ebp - 0xec]
add esp, 0x1c
mov byte [ebp - 4], 9
cmp eax, 0x10
jb 0x407d76
mov ecx, dword [ebp - 0x100]
inc eax
cmp eax, 0x1000
jb 0x407d6d
test cl, 0x1f
je 0x407d49
call fcn.00445a81
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x407d55
call fcn.00445a81
sub ecx, eax
cmp ecx, 4
jae 0x407d61
call fcn.00445a81
cmp ecx, 0x23
jbe 0x407d6b
call fcn.00445a81
mov ecx, eax
push ecx
call fcn.004257ce
add esp, 4
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xec], 0xf
mov dword [ebp - 0xf0], 0
mov byte [ebp - 0x100], 0
mov byte [ebp - 4], 8
cmp eax, 0x10
jb 0x407de5
mov ecx, dword [ebp - 0x118]
inc eax
cmp eax, 0x1000
jb 0x407ddc
test cl, 0x1f
je 0x407db8
call fcn.00445a81
mov eax, dword [ecx - 4]
cmp eax, ecx
jb 0x407dc4
call fcn.00445a81
sub ecx, eax
cmp ecx, 4
jae 0x407dd0
call fcn.00445a81
cmp ecx, 0x23
jbe 0x407dda
call fcn.00445a81
mov ecx, eax
push ecx
call fcn.004257ce
add esp, 4
cmp dword [ebp - 0x14], 0x10
lea ecx, [ebp - 0x28]
mov edi, dword [ebp - 0x18]
lea edx, [ebp - 0x40]
cmovae ecx, dword [ebp - 0x28]
mov esi, edi
cmp dword [ebp - 0x2c], 0x10
mov ebx, dword [ebp - 0x30]
cmovae edx, dword [ebp - 0x40]
cmp ebx, edi
cmovb esi, ebx
test esi, esi
je 0x407e61
sub esi, 4
jb 0x407e22
mov eax, dword [edx]
cmp eax, dword [ecx]
jne 0x407e27
add edx, 4
add ecx, 4
sub esi, 4
jae 0x407e11
cmp esi, 0xfffffffc
je 0x407e5b
mov al, byte [edx]
cmp al, byte [ecx]
jne 0x407e54
cmp esi, 0xfffffffd
je 0x407e5b
mov al, byte [edx + 1]
cmp al, byte [ecx + 1]
jne 0x407e54
cmp esi, 0xfffffffe
je 0x407e5b
mov al, byte [edx + 2]
cmp al, byte [ecx + 2]
jne 0x407e54
cmp esi, 0xffffffff
je 0x407e5b
mov al, byte [edx + 3]
cmp al, byte [ecx + 3]
je 0x407e5b
sbb eax, eax
or eax, 1
jmp 0x407e5d
xor eax, eax
test eax, eax
jne 0x407eb6
cmp ebx, edi
jb 0x407eb6
ja 0x407eb6
call fcn.004308fe
mov ebx, dword [ebp - 0x120]
sub esp, 0x18
mov ecx, esp
mov dword [ebx + 0xc], eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x407ea9
mov eax, dword [ecx]
mov byte [eax], 0
lea eax, [ebx + 0x14]
jmp 0x407f39
mov eax, ecx
mov byte [eax], 0
lea eax, [ebx + 0x14]
jmp 0x407f39
call fcn.004308fe
mov ebx, dword [ebp - 0x120]
sub esp, 0x18
mov ecx, esp
mov dword [ebx + 0xc], eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x407eef
mov eax, dword [ecx]
jmp 0x407ef1
mov eax, ecx
push 0xffffffffffffffff
mov byte [eax], 0
lea eax, [ebp - 0x40]
push 0
push eax
call fcn.004068b0
mov ecx, ebx
call fcn.00407140
mov dword [ebp - 0x124], eax
test eax, eax
jne 0x407f50
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], eax
jb 0x407f31
mov eax, dword [ecx]
jmp 0x407f33
mov eax, ecx
mov byte [eax], 0
lea eax, [ebp - 0x28]
push 0xffffffffffffffff
push 0
push eax
call fcn.004068b0
mov ecx, ebx
call fcn.00407140
mov dword [ebp - 0x124], eax
call fcn.004308fe
sub eax, dword [ebx + 0xc]
cmp dword [ebp - 0x124], 0
mov dword [ebx + 0xc], eax
lea eax, [ebp - 0x70]
jne 0x407f6b
push 1
jmp 0x407f6d
push 2
cmp dword [ebp - 0x5c], 0x10
cmovae eax, dword [ebp - 0x70]
push eax
push 1
push 1
call fcn.004041d0
mov ecx, eax
call fcn.00416fc0
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x407f9b
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00404a40
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 6
cmp eax, 0x10
jb 0x407fc6
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.00404a40
call fcn.004268d9
test al, al
je 0x407fe2
push eax
push eax
pop edx
push esp
pop ebp
push esp
push edx
push edi
pop esp
pop ecx
pop esi
push ebx
pop ebp
push esi
pop esi
push eax
pop esi
pop edx
pop edx
call fcn.004266f6
test al, al
je 0x408006
push edx
push esi
pop ebx
push esi
push eax
pop edi
push esi
pop ecx
push ecx
pop edi
pop ebx
pop edx
push edx
pop ebx
push edi
push ebx
pop ebp
pop edi
pop esp
push edx
push esp
push esi
pop ecx
push esp
pop ebx
push esi
pop ebp
cmp dword [ebp - 0x124], 0
jne 0x408028
push str.size__0
push 0x89
call fcn.0042cdf9
add esp, 8
xor esi, esi
jmp 0x4081cb
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x12c], 0
call fcn.00426444
test al, al
je 0x408062
pop esp
pop ebx
push edx
pop ebx
pop ecx
push edx
push eax
push ebx
pop eax
pop edi
pop edi
push esi
push esp
push edx
push ecx
pop ecx
push ebx
pop edi
pop ebx
push esp
pop ebp
pop esi
pop eax
pop esp
push eax
pop eax
push edx
pop eax
push ebp
call fcn.00426a32
test al, al
je 0x408084
pop eax
pop ecx
push eax
pop ebp
push edx
push ebp
pop eax
pop esp
pop ebp
push edi
pop ebx
pop ebx
pop edi
push ecx
push ebp
push esp
push eax
push esp
pop eax
pop edi
pop ebx
pop edi
push esi
push edx
pop esi
call fcn.004265e2
test al, al
je 0x4080a9
pop eax
pop ecx
pop ebp
pop ecx
pop ecx
push ebx
pop eax
pop edx
pop edx
push esi
pop eax
pop esi
pop ebx
pop esp
pop eax
push ebx
pop ebp
push esi
pop ebp
push edi
push edx
pop edi
pop ecx
push ebp
push esp
push esi
pop edi
push ebp
lea ecx, [ebp - 0x119]
call fcn.00409130
mov eax, dword [ebp - 0x120]
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xb
lea edi, [eax + 0x44]
push edi
push ecx
lea ecx, [ebp - 0x138]
push ecx
push dword [ebp - 0x124]
lea ecx, [ebp - 0x119]
push dword [eax + 0x68]
call fcn.004091c0
mov ecx, dword [ebp - 0x138]
test ecx, ecx
je 0x40819f
mov eax, dword [ebp - 0x12c]
test eax, eax
je 0x40819f
push eax
push ecx
call fcn.0040b530
mov esi, eax
add esp, 8
test esi, esi
jne 0x4081c0
lea eax, [ebp - 0x118]
push edi
push eax
call fcn.0042bc94
add esp, 8
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0xc
jb 0x408130
mov eax, dword [eax]
push eax
push 0x89
call fcn.0042cdf9
add esp, 8
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x118]
call fcn.0041a870
push dword [ebp - 0x12c]
lea eax, [ebp - 0x118]
push eax
call fcn.00404b80
add esp, 8
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0xd
jb 0x40816e
mov eax, dword [eax]
push eax
push 0x89
call fcn.0042cdf9
add esp, 8
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x118]
call fcn.0041a870
push str.hMoudle__NULL
push 0x89
call fcn.0042cdf9
add esp, 8
jmp 0x4081c0
cmp dword [ebp - 0x74], 8
lea eax, [ebp - 0x88]
cmovae eax, dword [ebp - 0x88]
push eax
push 0x89
call fcn.0042cdf9
add esp, 8
xor esi, esi
lea ecx, [ebp - 0x119]
call fcn.00474280
mov eax, dword [ebp - 0x8c]
cmp eax, 8
jb 0x4081e9
inc eax
lea ecx, [ebp - 0xa0]
push eax
push dword [ebp - 0xa0]
call fcn.00402500
xor eax, eax
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x90], 0
mov word [ebp - 0xa0], ax
mov eax, dword [ebp - 0x44]
cmp eax, 0x10
jb 0x40821b
inc eax
lea ecx, [ebp - 0x58]
push eax
push dword [ebp - 0x58]
call fcn.00404a40
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x44], 0xf
mov dword [ebp - 0x48], 0
mov byte [ebp - 0x58], 0
cmp eax, 8
jb 0x40824b
inc eax
lea ecx, [ebp - 0xd0]
push eax
push dword [ebp - 0xd0]
call fcn.00402500
xor eax, eax
mov dword [ebp - 0xbc], 7
mov word [ebp - 0xd0], ax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xc0], 0
cmp eax, 0x10
jb 0x40827d
inc eax
lea ecx, [ebp - 0x70]
push eax
push dword [ebp - 0x70]
call fcn.00404a40
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x5c], 0xf
mov dword [ebp - 0x60], 0
mov byte [ebp - 0x70], 0
cmp eax, 8
jb 0x4082ad
inc eax
lea ecx, [ebp - 0xe8]
push eax
push dword [ebp - 0xe8]
call fcn.00402500
xor eax, eax
mov dword [ebp - 0xd4], 7
mov word [ebp - 0xe8], ax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xd8], 0
cmp eax, 8
jb 0x4082e8
inc eax
lea ecx, [ebp - 0xb8]
push eax
push dword [ebp - 0xb8]
call fcn.00402500
mov ecx, dword [ebp - 0x74]
xor eax, eax
mov dword [ebp - 0xa4], 7
mov dword [ebp - 0xa8], 0
mov word [ebp - 0xb8], ax
cmp ecx, 8
jb 0x408320
inc ecx
push ecx
push dword [ebp - 0x88]
lea ecx, [ebp - 0x88]
call fcn.00402500
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042578a
mov esp, ebp
pop ebp
ret 0xc