Function at 0x406d33
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
push edi
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 0
mov al, byte [0xf0e7bc]
mov byte [ebp - 0xc8], al
mov ecx, 0x18
xor eax, eax
lea edi, [ebp - 0xc7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0xf0e7c0]
mov byte [ebp - 0x100], cl
mov ecx, 0xc
xor eax, eax
lea edi, [ebp - 0xff]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov dl, byte [0xf0e7c4]
mov byte [ebp - 0x34], dl
mov ecx, 0xc
xor eax, eax
lea edi, [ebp - 0x33]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov al, byte [0xf0e7c8]
mov byte [ebp - 0x64], al
xor ecx, ecx
mov dword [ebp - 0x63], ecx
mov dword [ebp - 0x108], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x104], 0
mov dl, byte [0xf0e7cc]
mov byte [ebp - 0x48], dl
xor eax, eax
mov dword [ebp - 0x47], eax
mov dword [ebp - 0x43], eax
mov dword [ebp - 0x3f], eax
mov dword [ebp - 0x3b], eax
mov word [ebp - 0x37], ax
mov byte [ebp - 0x35], al
push 0x63
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x64]
push ecx
call fcn.00407ae0
add esp, 8
push 0x6c
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x64]
push edx
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x64]
push eax
call fcn.00407af0
add esp, 8
push 0x57
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00407ae0
add esp, 8
push 0x72
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00407af0
add esp, 8
push 0x6e
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00407af0
add esp, 8
push 0x67
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00407af0
add esp, 8
push 0x50
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00407af0
add esp, 8
push 0x61
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00407af0
add esp, 8
push 0x77
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.00407af0
add esp, 8
push 0x72
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00407af0
add esp, 8
push 0x64
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.00407af0
add esp, 8
push 0x50
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00407ae0
add esp, 8
push 0x72
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00407af0
add esp, 8
push 0x63
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00407af0
add esp, 8
push 0x64
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00407af0
add esp, 8
push 0x66
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00407af0
add esp, 8
push 0x69
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.00407af0
add esp, 8
push 0x6c
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00407af0
add esp, 8
push 0x2e
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00407af0
add esp, 8
push 0x45
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00407af0
add esp, 8
push 0x6e
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.00407af0
add esp, 8
push 0x74
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00407af0
add esp, 8
push 0x65
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00407af0
add esp, 8
push 0x72
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00407af0
add esp, 8
push 0x50
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00407af0
add esp, 8
push 0x61
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00407af0
add esp, 8
push 0x73
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00407af0
add esp, 8
push 0x77
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.00407af0
add esp, 8
push 0x6f
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00407af0
add esp, 8
push 0x72
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00407af0
add esp, 8
push 0x64
call fcn.004067dc
add esp, 4
push eax
lea edx, [ebp - 0x100]
push edx
call fcn.00407af0
add esp, 8
push 0x3a
call fcn.004067dc
add esp, 4
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00407af0
add esp, 8
push 0x20
call fcn.004067dc
add esp, 4
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00407af0
add esp, 8
mov dword [ebp - 0x54], 1
cmp dword [ebp - 0x54], 4
jge 0x4074f5
push 0x40f1e0
lea eax, [ebp - 0x48]
push eax
call fcn.00407ae0
add esp, 8
mov dword [ebp - 0x4c], 8
mov dword [ebp - 0x58], 0x28
mov eax, dword [ebp - 0x4c]
cdq
sub eax, edx
sar eax, 1
mov ecx, 0xc
sub ecx, eax
add ecx, 1
mov dword [ebp - 0xcc], ecx
mov eax, dword [ebp - 0x58]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x28
sub edx, eax
mov dword [ebp - 0x5c], edx
push 1
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0xcc]
push ecx
mov edx, dword [0xf0779c]
push edx
call fcn.00407531
add esp, 0x10
push 1
mov eax, dword [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0xcc]
lea eax, [edx + ecx - 1]
push eax
mov ecx, dword [0xf0779c]
push ecx
call fcn.00407531
add esp, 0x10
mov dword [ebp - 0x104], 1
jmp 0x407373
mov edx, dword [ebp - 0x104]
add edx, 1
mov dword [ebp - 0x104], edx
mov eax, dword [ebp - 0x58]
sub eax, 1
cmp dword [ebp - 0x104], eax
jge 0x4073cd
push 1
mov ecx, dword [ebp - 0x5c]
add ecx, dword [ebp - 0x104]
push ecx
mov edx, dword [ebp - 0xcc]
push edx
mov eax, dword [0xf0779c]
push eax
call fcn.00407531
add esp, 0x10
push 1
mov ecx, dword [ebp - 0x5c]
add ecx, dword [ebp - 0x104]
push ecx
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xcc]
lea ecx, [eax + edx - 1]
push ecx
mov edx, dword [0xf0779c]
push edx
call fcn.00407531
add esp, 0x10
jmp 0x407364
push 1
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0xcc]
push ecx
mov edx, dword [0xf0779c]
push edx
call fcn.00407531
add esp, 0x10
push 1
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0xcc]
lea eax, [edx + ecx - 1]
push eax
mov ecx, dword [0xf0779c]
push ecx
call fcn.00407531
add esp, 0x10
mov dword [ebp - 0x104], 1
jmp 0x407433
mov edx, dword [ebp - 0x104]
add edx, 1
mov dword [ebp - 0x104], edx
mov eax, dword [ebp - 0x4c]
sub eax, 1
cmp dword [ebp - 0x104], eax
jge 0x40748d
push 1
mov ecx, dword [ebp - 0x5c]
push ecx
mov edx, dword [ebp - 0xcc]
add edx, dword [ebp - 0x104]
push edx
mov eax, dword [0xf0779c]
push eax
call fcn.00407531
add esp, 0x10
push 1
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x5c]
lea eax, [edx + ecx - 1]
push eax
mov ecx, dword [ebp - 0xcc]
add ecx, dword [ebp - 0x104]
push ecx
mov edx, dword [0xf0779c]
push edx
call fcn.00407531
add esp, 0x10
jmp 0x407424
push 1
push 0x18
push 0xb
mov eax, dword [0xf0779c]
push eax
call fcn.00407531
add esp, 0x10
push 1
push 0x18
push 0xd
mov ecx, dword [0xf0779c]
push ecx
call fcn.00407531
add esp, 0x10
push 0x40f1f4
lea edx, [ebp - 0xc8]
push edx
call fcn.00407ae0
add esp, 8
mov dword [ebp - 0x108], 0
push 0xf0e29c
lea eax, [ebp - 0xc8]
push eax
call fcn.00407cd0
add esp, 8
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x50], 1
cmp dword [ebp - 0x50], 0
jne 0x407517
push 1
push 1
push 1
mov ecx, dword [0xf0779c]
push ecx
call fcn.00407531
add esp, 0x10
push 1
call fcn.00407e0c
push 1
push 1
push 1
mov edx, dword [0xf0779c]
push edx
call fcn.00407531
add esp, 0x10
pop edi
mov esp, ebp
pop ebp
ret