Function at 0x401000
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3f0e0
call fcn.0040d4b0
push edi
mov al, byte [0x41de14]
mov byte [ebp - 0xa120], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xa11f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x41de18]
mov byte [ebp - 0xb1e8], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xb1e7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x41de1c]
mov byte [ebp - 0xaa10], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xaa0f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x41de20]
mov byte [ebp - 0xc2c4], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xc2c3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x41de24]
mov byte [ebp - 0xbac0], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xbabf]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x41de28]
mov byte [ebp - 0xd284], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xd283]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x41de2c]
mov byte [ebp - 0xcaa0], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0xca9f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x41de30]
mov byte [ebp - 0x3f0dc], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x3f0db]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x41de34]
mov byte [ebp - 0x3e7a4], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x3e7a3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x41de38]
mov byte [ebp - 0x2fbc], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x2fbb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x41de3c]
mov byte [ebp - 0x3798], cl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x3797]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x41de40]
mov byte [ebp - 0x1e98], dl
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x1e97]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x41de44]
mov byte [ebp - 0x2678], al
mov ecx, 0x1f3
xor eax, eax
lea edi, [ebp - 0x2677]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x41de48]
mov byte [ebp - 0x9950], cl
xor edx, edx
mov dword [ebp - 0x994f], edx
mov dword [ebp - 0x994b], edx
mov dword [ebp - 0x9947], edx
mov byte [ebp - 0x9943], dl
mov al, byte [0x41de4c]
mov byte [ebp - 0x3dfd4], al
mov ecx, 0xc34f
xor eax, eax
lea edi, [ebp - 0x3dfd3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x41de50]
mov byte [ebp - 0x9940], cl
mov ecx, 0x1869
xor eax, eax
lea edi, [ebp - 0x993f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x41de54]
mov byte [ebp - 0x118], dl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x117]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x220], 0
mov al, byte [0x41de58]
mov byte [ebp - 0x3e90c], al
mov ecx, 0x59
xor eax, eax
lea edi, [ebp - 0x3e90b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0xaa18], 0
mov dword [ebp - 0xb2f0], 0
mov dword [ebp - 0xbaf4], 0
mov dword [ebp - 0xaa14], 0
mov cl, byte [0x41de5c]
mov byte [ebp - 0x27ec], cl
mov ecx, 0x59
xor eax, eax
lea edi, [ebp - 0x27eb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x41de60]
mov byte [ebp - 0x16c8], dl
mov ecx, 0x4e1
xor eax, eax
lea edi, [ebp - 0x16c7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x41de64]
mov byte [ebp - 0x21c], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x21b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x41de68]
mov byte [ebp - 0xb2ec], cl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0xb2eb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x41de6c]
mov byte [ebp - 0xa240], dl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0xa23f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x41de70]
mov byte [ebp - 0x340], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x33f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x41de74]
mov byte [ebp - 0xbaf0], cl
xor edx, edx
mov dword [ebp - 0xbaef], edx
mov dword [ebp - 0xbaeb], edx
mov dword [ebp - 0xbae7], edx
mov dword [ebp - 0xbae3], edx
mov word [ebp - 0xbadf], dx
mov byte [ebp - 0xbadd], dl
mov dword [ebp - 0x2684], 0
mov dword [ebp - 0x1ea8], 0
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x1ea4], 0
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x1ea0], 0
mov dword [ebp - 0x2680], 0
mov dword [ebp - 0xc2d0], 0
mov dword [ebp - 0xcab4], 0
mov dword [ebp - 0xc2cc], 0
mov dword [ebp - 0xc2c8], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x2fc8], 0
mov dword [ebp - 0x2fc4], 0
mov al, byte [0x41de78]
mov byte [ebp - 0xcab0], al
xor ecx, ecx
mov dword [ebp - 0xcaaf], ecx
mov dword [ebp - 0xcaab], ecx
mov dword [ebp - 0xcaa7], ecx
mov word [ebp - 0xcaa3], cx
mov dl, byte [0x41de7c]
mov byte [ebp - 0x10], dl
xor eax, eax
mov dword [ebp - 0xf], eax
mov dword [ebp - 0xb], eax
mov dword [ebp - 7], eax
mov word [ebp - 3], ax
mov cl, byte [0x41de80]
mov byte [ebp - 0x234], cl
xor edx, edx
mov dword [ebp - 0x233], edx
mov dword [ebp - 0x22f], edx
mov dword [ebp - 0x22b], edx
mov word [ebp - 0x227], dx
mov al, byte [0x41de84]
mov byte [ebp - 0xd294], al
xor ecx, ecx
mov dword [ebp - 0xd293], ecx
mov dword [ebp - 0xd28f], ecx
mov dword [ebp - 0xd28b], ecx
mov word [ebp - 0xd287], cx
mov dl, byte [0x41de88]
mov byte [ebp - 0xa13c], dl
mov ecx, 6
xor eax, eax
lea edi, [ebp - 0xa13b]
rep stosd dword es:[edi], eax
mov al, byte [0x41de8c]
mov byte [ebp - 0xbadc], al
mov ecx, 6
xor eax, eax
lea edi, [ebp - 0xbadb]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x2fc0], 0
mov dword [0x41d8f0], 0x36a
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [0xf15ba0], eax
push 0x104
push 0x41b1b8
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x2fc0], eax
mov dword [ebp - 0x2fc0], 0
push 0x41b1b8
call fcn.0040d3e0
add esp, 4
mov dword [ebp - 0xaa18], eax
jmp 0x4014f2
mov ecx, dword [ebp - 0xaa18]
sub ecx, 1
mov dword [ebp - 0xaa18], ecx
cmp dword [ebp - 0xaa18], 1
jle 0x401545
push 1
mov edx, dword [ebp - 0xaa18]
push edx
push 0x41b1b8
call fcn.00405476
add esp, 0xc
push eax
call fcn.00405412
add esp, 4
cmp eax, 0x5c
jne 0x401543
mov eax, dword [ebp - 0xaa18]
push eax
push 0x41b1b8
call fcn.004055b2
add esp, 8
push eax
push 0x41c540
call fcn.0040d290
add esp, 8
jmp 0x401545
jmp 0x4014e3
push str.aRCheliFUN
push 0x41d8d0
call fcn.0040d290
add esp, 8
push str.____106896
push 0x41d8dc
call fcn.0040d290
add esp, 8
mov dword [ebp - 0xaa18], 1
jmp 0x401584
mov ecx, dword [ebp - 0xaa18]
add ecx, 1
mov dword [ebp - 0xaa18], ecx
cmp dword [ebp - 0xaa18], 0xb
jge 0x4015bb
push 1
mov edx, dword [ebp - 0xaa18]
push edx
push 0x41d8d0
call fcn.00405476
add esp, 0xc
push eax
call fcn.00405412
add esp, 4
mov ecx, dword [ebp - 0xaa18]
mov dword [ecx*4 + 0x41e180], eax
jmp 0x401575
mov dword [0x41d8f0], 0x23bc
push 1
call fcn.0040cd61
add esp, 4
mov dword [ebp - 0xaa18], eax
mov edx, dword [ebp - 0xaa18]
push edx
push 0x416048
push 0x41d8f4
call fcn.0040d380
add esp, 0xc
push 5
push 0x41d8f4
call fcn.00405608
add esp, 8
push eax
push 0x41d91c
call fcn.0040d290
add esp, 8
fild dword [ebp - 0xaa18]
sub esp, 8
fstp qword [esp]
call fcn.0040542f
add esp, 8
push eax
push 0x41d8f4
call fcn.0040d290
add esp, 8
push 5
push 0x41d8f4
call fcn.00405608
add esp, 8
push eax
push 0x41d944
call fcn.0040d290
add esp, 8
mov dword [ebp - 0xaa18], 0
push 0x41de90
push 0x4171f8
call fcn.0040d290
add esp, 8
push 0x41de94
lea eax, [ebp - 0x21c]
push eax
call fcn.0040d290
add esp, 8
push 0x4171f8
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov dword [ebp - 0x2fc0], eax
mov ecx, dword [ebp - 0x2fc0]
push ecx
push 0x4171f8
call fcn.004055b2
add esp, 8
push eax
push 0x4171f8
call fcn.0040d290
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xbadc]
push edx
call fcn.0040d290
add esp, 8
push 0x6d
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xbadc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x6b
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xbadc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x64
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xbadc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xbadc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x72
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xbadc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xbadc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x72
call fcn.004053b6
add esp, 4
push eax
push 0x65
call fcn.004053b6
add esp, 4
push eax
push 0x64
call fcn.004053b6
add esp, 4
push eax
push 0x6c
call fcn.004053b6
add esp, 4
push eax
push 0x6f
call fcn.004053b6
add esp, 4
push eax
push 0x66
call fcn.004053b6
add esp, 4
push eax
push 0x61
call fcn.004053b6
add esp, 4
push eax
push 0x4171f8
push 0x41604c
push 0x417400
call fcn.0040d380
add esp, 0x28
push 0x69
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d290
add esp, 8
push 0x66
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d2a0
add esp, 8
push 0x6e
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d2a0
add esp, 8
push 0x78
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
push 0x41d998
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
push 0x41d9b4
call fcn.0040d290
add esp, 8
push 0x66
call fcn.004053b6
add esp, 4
push eax
push 0x41d9b4
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
push 0x41d9b4
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
push 0x41d9b4
call fcn.0040d2a0
add esp, 8
push 0x78
call fcn.004053b6
add esp, 4
push eax
push 0x41d9b4
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
push 0x41d9b4
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
push 0x41d9b4
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
push 0x41d9b4
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
push 0x41d9b4
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
push 0x41d9d0
call fcn.0040d290
add esp, 8
push 0x64
call fcn.004053b6
add esp, 4
push eax
push 0x41d9d0
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
push 0x41d9d0
call fcn.0040d2a0
add esp, 8
push 0x6c
call fcn.004053b6
add esp, 4
push eax
push 0x41d9d0
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
push 0x41d9d0
call fcn.0040d2a0
add esp, 8
push 0x41d998
lea eax, [ebp - 0x3e90c]
push eax
call fcn.0040d290
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3e90c]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x417400
lea edx, [ebp - 0x3e90c]
push edx
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3e90c]
push eax
call fcn.0040d2a0
add esp, 8
lea ecx, [ebp - 0xbadc]
push ecx
lea edx, [ebp - 0x3e90c]
push edx
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3e90c]
push eax
call fcn.0040d2a0
add esp, 8
push 0x417400
lea ecx, [ebp - 0x3e90c]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3e90c]
push edx
call fcn.0040d2a0
add esp, 8
lea eax, [ebp - 0x3e90c]
push eax
call fcn.0040d1f1
add esp, 4
mov dword [0x41d8f0], 0xc66
push 0x70
call fcn.004053b6
add esp, 4
push eax
push 0x6d
call fcn.004053b6
add esp, 4
push eax
push 0x74
call fcn.004053b6
add esp, 4
push eax
push 0x79
call fcn.004053b6
add esp, 4
push eax
push 0x4171f8
push 0x416060
push 0x4172fc
call fcn.0040d380
add esp, 0x1c
push 0x41d998
lea ecx, [ebp - 0x3e90c]
push ecx
call fcn.0040d290
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3e90c]
push edx
call fcn.0040d2a0
add esp, 8
push 0x4172fc
lea eax, [ebp - 0x3e90c]
push eax
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3e90c]
push ecx
call fcn.0040d2a0
add esp, 8
lea edx, [ebp - 0xbadc]
push edx
lea eax, [ebp - 0x3e90c]
push eax
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3e90c]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x4172fc
lea edx, [ebp - 0x3e90c]
push edx
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3e90c]
push eax
call fcn.0040d2a0
add esp, 8
lea ecx, [ebp - 0x3e90c]
push ecx
call fcn.0040d1f1
add esp, 4
push 0x61
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa13c]
push edx
call fcn.0040d290
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa13c]
push eax
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa13c]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x72
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa13c]
push edx
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa13c]
push eax
call fcn.0040d2a0
add esp, 8
push 0x62
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa13c]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa13c]
push edx
call fcn.0040d2a0
add esp, 8
push 0x2b
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa13c]
push eax
call fcn.0040d2a0
add esp, 8
push 0x68
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa13c]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa13c]
push edx
call fcn.0040d2a0
add esp, 8
push 0x4172fc
lea eax, [ebp - 0xa13c]
push eax
push 0x41606c
lea ecx, [ebp - 0x3e90c]
push ecx
call fcn.0040d380
add esp, 0x10
lea edx, [ebp - 0x3e90c]
push edx
call fcn.0040d1f1
add esp, 4
push 0x2e
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xcab0]
push eax
call fcn.0040d290
add esp, 8
push 0x62
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xcab0]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x61
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xcab0]
push edx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xcab0]
push eax
call fcn.0040d2a0
add esp, 8
push 0x2e
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0040d290
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x10]
push edx
call fcn.0040d2a0
add esp, 8
push 0x78
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x10]
push ecx
call fcn.0040d2a0
add esp, 8
lea edx, [ebp - 0xcab0]
push edx
push 1
call fcn.00405058
add esp, 4
push eax
push 0x416074
push 0x4172fc
push str._s_s_s_s
push 0x417518
call fcn.0040d380
add esp, 0x18
push 0x417518
push 0x419c28
call fcn.0040d290
add esp, 8
push 0x41de98
lea eax, [ebp - 0x118]
push eax
call fcn.0040d290
add esp, 8
lea ecx, [ebp - 0x10]
push ecx
push 2
call fcn.00405058
add esp, 4
push eax
push 0x416084
lea edx, [ebp - 0x118]
push edx
call fcn.0040d380
add esp, 0x10
lea eax, [ebp - 0x118]
push eax
push 0x41608c
push 0x4172fc
push str._s_s_s
push 0x419d2c
call fcn.0040d380
add esp, 0x14
mov ecx, dword [0x41d8f0]
add ecx, 0x4a
mov dword [0x41d8f0], ecx
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa240]
push edx
call fcn.0040d290
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa240]
push eax
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa240]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa240]
push edx
call fcn.0040d2a0
add esp, 8
push 0x7a
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa240]
push eax
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa240]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x6d
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa240]
push edx
call fcn.0040d2a0
add esp, 8
push 0x70
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa240]
push eax
call fcn.0040d2a0
add esp, 8
push 0x3d
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa240]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x340]
push edx
call fcn.0040d290
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x340]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x340]
push edx
call fcn.0040d2a0
add esp, 8
push 0x4d
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.0040d2a0
add esp, 8
push 0x59
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x340]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x46
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x340]
push edx
call fcn.0040d2a0
add esp, 8
push 0x49
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.0040d2a0
add esp, 8
push 0x4c
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x340]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x45
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x340]
push edx
call fcn.0040d2a0
add esp, 8
push 0x53
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x340]
push eax
call fcn.0040d2a0
add esp, 8
push 0x3d
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x340]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x4172fc
lea edx, [ebp - 0xa240]
push edx
push 0x416098
lea eax, [ebp - 0x21c]
push eax
call fcn.0040d380
add esp, 0x10
push 0x417400
lea ecx, [ebp - 0x340]
push ecx
push 0x4160a0
lea edx, [ebp - 0xb2ec]
push edx
call fcn.0040d380
add esp, 0x10
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa240]
push eax
call fcn.0040d290
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa240]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa240]
push edx
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa240]
push eax
call fcn.0040d2a0
add esp, 8
push 0x62
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa240]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x66
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa240]
push edx
call fcn.0040d2a0
add esp, 8
push 0x63
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa240]
push eax
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa240]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x63
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa240]
push edx
call fcn.0040d2a0
add esp, 8
push 0x3d
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa240]
push eax
call fcn.0040d2a0
add esp, 8
push 0x41de9c
push 0x419e30
call fcn.0040d290
add esp, 8
push 0x30
call fcn.004053b6
add esp, 4
push eax
push 0x2f
call fcn.004053b6
add esp, 4
push eax
push 0x20
call fcn.004053b6
add esp, 4
push eax
push 0x54
call fcn.004053b6
add esp, 4
push eax
push 0x46
call fcn.004053b6
add esp, 4
push eax
push 0x49
call fcn.004053b6
add esp, 4
push eax
push 0x48
call fcn.004053b6
add esp, 4
push eax
push 0x53
call fcn.004053b6
add esp, 4
push eax
push 0x4160a8
lea ecx, [ebp - 0xbaf0]
push ecx
call fcn.0040d380
add esp, 0x28
push 0x417518
push 0x20
call fcn.004053b6
add esp, 4
push eax
push 0x6c
call fcn.004053b6
add esp, 4
push eax
push 0x65
call fcn.004053b6
add esp, 4
push eax
push 0x64
call fcn.004053b6
add esp, 4
push eax
push 0x4160bc
lea edx, [ebp - 0x27ec]
push edx
call fcn.0040d380
add esp, 0x1c
push 0x22
call fcn.004053b6
add esp, 4
push eax
push 0x41b1b8
push 0x22
call fcn.004053b6
add esp, 4
push eax
push 0x20
call fcn.004053b6
add esp, 4
push eax
push 0x417518
push str._s_s_s_s_s
push 0x417518
call fcn.0040d380
add esp, 0x1c
cmp dword [ebp + 8], 1
jle 0x4024c5
mov dword [ebp - 0xaa18], 1
jmp 0x40235e
mov eax, dword [ebp - 0xaa18]
add eax, 1
mov dword [ebp - 0xaa18], eax
mov ecx, dword [ebp + 8]
sub ecx, 1
cmp dword [ebp - 0xaa18], ecx
jg 0x4024a1
mov dword [ebp - 0xcab4], 0
mov dword [ebp - 0xb2f0], 1
jmp 0x402395
mov edx, dword [ebp - 0xb2f0]
add edx, 1
mov dword [ebp - 0xb2f0], edx
mov eax, dword [ebp - 0xaa18]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
call fcn.0040d3e0
add esp, 4
add eax, 1
cmp dword [ebp - 0xb2f0], eax
jae 0x4023f7
push 1
mov eax, dword [ebp - 0xb2f0]
push eax
mov ecx, dword [ebp - 0xaa18]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call fcn.00405476
add esp, 0xc
push eax
call fcn.00405412
add esp, 4
mov dword [ebp - 0xc2d0], eax
cmp dword [ebp - 0xc2d0], 0x20
jne 0x4023f5
mov dword [ebp - 0xcab4], 1
jmp 0x402386
cmp dword [ebp - 0xcab4], 1
jne 0x402467
cmp dword [ebp - 0xaa18], 1
jle 0x40241b
push 0x4160d4
push 0x4188a0
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
push 0x4188a0
call fcn.0040d2a0
add esp, 8
mov ecx, dword [ebp - 0xaa18]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4]
push eax
push 0x4188a0
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
push 0x4188a0
call fcn.0040d2a0
add esp, 8
jmp 0x40249c
cmp dword [ebp - 0xaa18], 1
jle 0x402482
push 0x4160d8
push 0x4188a0
call fcn.0040d2a0
add esp, 8
mov ecx, dword [ebp - 0xaa18]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4]
push eax
push 0x4188a0
call fcn.0040d2a0
add esp, 8
jmp 0x40234f
push 0x4160dc
push 0x417518
call fcn.0040d2a0
add esp, 8
push 0x4188a0
push 0x417518
call fcn.0040d2a0
add esp, 8
push 0x40
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x234]
push ecx
call fcn.0040d290
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x234]
push edx
call fcn.0040d2a0
add esp, 8
push 0x63
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.0040d2a0
add esp, 8
push 0x68
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x234]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x234]
push edx
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x234]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x66
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x234]
push edx
call fcn.0040d2a0
add esp, 8
push 0x66
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xd294]
push ecx
call fcn.0040d290
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xd294]
push edx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xd294]
push eax
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xd294]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x63
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xd294]
push edx
call fcn.0040d2a0
add esp, 8
push 0x6d
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xd294]
push eax
call fcn.0040d2a0
add esp, 8
push 0x64
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xd294]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x6c
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xd294]
push edx
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xd294]
push eax
call fcn.0040d2a0
add esp, 8
push 0x6e
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xd294]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xd294]
push edx
call fcn.0040d2a0
add esp, 8
push 0x3d
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xd294]
push eax
call fcn.0040d2a0
add esp, 8
push 0xa
call fcn.004053b6
add esp, 4
push eax
push 0xd
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xbaf0]
push ecx
push 0xa
call fcn.004053b6
add esp, 4
push eax
push 0xd
call fcn.004053b6
add esp, 4
push eax
push 0x4188a0
lea edx, [ebp - 0xd294]
push edx
push 0xa
call fcn.004053b6
add esp, 4
push eax
push 0xd
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0xa240]
push ecx
push 0xa
call fcn.004053b6
add esp, 4
push eax
push 0xd
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xb2ec]
push edx
push 0xa
call fcn.004053b6
add esp, 4
push eax
push 0xd
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x21c]
push eax
push 0xa
call fcn.004053b6
add esp, 4
push eax
push 0xd
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x234]
push ecx
push 0x4160e0
push 0x419e30
call fcn.0040d380
add esp, 0x58
push 0x4171f8
lea edx, [ebp - 0xb1e8]
push edx
call fcn.0040d290
add esp, 8
lea eax, [ebp - 0xb1e8]
push eax
lea ecx, [ebp - 0xcaa0]
push ecx
call fcn.0040d290
add esp, 8
lea edx, [ebp - 0xb1e8]
push edx
lea eax, [ebp - 0x3e7a4]
push eax
call fcn.0040d290
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xb1e8]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xb1e8]
push edx
call fcn.0040d2a0
add esp, 8
push 0x36
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xb1e8]
push eax
call fcn.0040d2a0
add esp, 8
push 0x34
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xb1e8]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x2e
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xb1e8]
push edx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xb1e8]
push eax
call fcn.0040d2a0
add esp, 8
push 0x78
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xb1e8]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xb1e8]
push edx
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xcaa0]
push eax
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xcaa0]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x36
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xcaa0]
push edx
call fcn.0040d2a0
add esp, 8
push 0x34
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xcaa0]
push eax
call fcn.0040d2a0
add esp, 8
push 0x2e
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xcaa0]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x62
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xcaa0]
push edx
call fcn.0040d2a0
add esp, 8
push 0x61
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xcaa0]
push eax
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xcaa0]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3e7a4]
push edx
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3e7a4]
push eax
call fcn.0040d2a0
add esp, 8
push 0x36
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3e7a4]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x34
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3e7a4]
push edx
call fcn.0040d2a0
add esp, 8
push 0x2e
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3e7a4]
push eax
call fcn.0040d2a0
add esp, 8
push 0x66
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3e7a4]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3e7a4]
push edx
call fcn.0040d2a0
add esp, 8
push 0x6c
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3e7a4]
push eax
call fcn.0040d2a0
add esp, 8
push 0x25
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xaa10]
push ecx
call fcn.0040d290
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xc2c4]
push edx
call fcn.0040d290
add esp, 8
push 0x63
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xc2c4]
push eax
call fcn.0040d2a0
add esp, 8
push 0x68
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xc2c4]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xc2c4]
push edx
call fcn.0040d2a0
add esp, 8
push 0x3a
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xc2c4]
push eax
call fcn.0040d2a0
add esp, 8
push 0x30
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xc2c4]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x3e
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xc2c4]
push edx
call fcn.0040d2a0
add esp, 8
lea eax, [ebp - 0xc2c4]
push eax
lea ecx, [ebp - 0xbac0]
push ecx
call fcn.0040d290
add esp, 8
lea edx, [ebp - 0xb1e8]
push edx
lea eax, [ebp - 0xbac0]
push eax
call fcn.0040d2a0
add esp, 8
lea ecx, [ebp - 0xbac0]
push ecx
call fcn.0040d1f1
add esp, 4
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d290
add esp, 8
push 0x66
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x78
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
lea eax, [ebp - 0xaa10]
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x53
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x79
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x6d
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x52
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
lea eax, [ebp - 0xaa10]
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x5c
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x53
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x79
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x6e
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x61
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x76
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x5c
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x63
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x68
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x3a
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x31
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x3e
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d290
add esp, 8
push 0x66
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x78
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
lea edx, [ebp - 0xaa10]
push edx
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x53
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x79
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x6d
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x52
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
lea edx, [ebp - 0xaa10]
push edx
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x5c
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x53
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x79
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x6e
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x61
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x76
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x5c
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x63
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x68
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x3a
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x31
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa120]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x3e
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
lea ecx, [ebp - 0xb1e8]
push ecx
lea edx, [ebp - 0xa120]
push edx
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa120]
push eax
call fcn.0040d2a0
add esp, 8
push 0x40
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xd284]
push ecx
call fcn.0040d290
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xd284]
push edx
call fcn.0040d2a0
add esp, 8
push 0x63
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xd284]
push eax
call fcn.0040d2a0
add esp, 8
push 0x68
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xd284]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xd284]
push edx
call fcn.0040d2a0
add esp, 8
push 0x20
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xd284]
push eax
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xd284]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x66
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xd284]
push edx
call fcn.0040d2a0
add esp, 8
push 0x66
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xd284]
push eax
call fcn.0040d2a0
add esp, 8
push 0xd
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xd284]
push ecx
call fcn.0040d2a0
add esp, 8
push 0xa
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xd284]
push edx
call fcn.0040d2a0
add esp, 8
lea eax, [ebp - 0xa120]
push eax
lea ecx, [ebp - 0xd284]
push ecx
call fcn.0040d2a0
add esp, 8
push 0xd
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xd284]
push edx
call fcn.0040d2a0
add esp, 8
push 0xa
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xd284]
push eax
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3f0dc]
push ecx
call fcn.0040d290
add esp, 8
push 0x25
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3f0dc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x53
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3f0dc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x79
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3f0dc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3f0dc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3f0dc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3f0dc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x6d
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3f0dc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x52
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3f0dc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3f0dc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3f0dc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3f0dc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x25
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3f0dc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x5c
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3f0dc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x53
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3f0dc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x79
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3f0dc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x73
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3f0dc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x6e
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3f0dc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x61
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3f0dc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x74
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3f0dc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x69
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3f0dc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x76
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3f0dc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3f0dc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x5c
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3f0dc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x63
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3f0dc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x6d
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3f0dc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x64
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3f0dc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x2e
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3f0dc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3f0dc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x78
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x3f0dc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x3f0dc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x3f0dc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x65
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x2fbc]
push eax
call fcn.0040d290
add esp, 8
push 0x63
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x2fbc]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x68
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0x2fbc]
push edx
call fcn.0040d2a0
add esp, 8
push 0x6f
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0x2fbc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x3a
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x2fbc]
push ecx
call fcn.0040d2a0
add esp, 8
lea edx, [ebp - 0x3f0dc]
push edx
lea eax, [ebp - 0x2fbc]
push eax
call fcn.0040d2a0
add esp, 8
push 0x3e
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x2fbc]
push ecx
call fcn.0040d2a0
add esp, 8
lea edx, [ebp - 0x3e7a4]
push edx
lea eax, [ebp - 0x2fbc]
push eax
call fcn.0040d2a0
add esp, 8
lea ecx, [ebp - 0x2fbc]
push ecx
lea edx, [ebp - 0xd284]
push edx
call fcn.0040d2a0
add esp, 8
push 0xd
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xd284]
push eax
call fcn.0040d2a0
add esp, 8
push 0xa
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xd284]
push ecx
call fcn.0040d2a0
add esp, 8
push 0x41610c
lea edx, [ebp - 0xcaa0]
push edx
call fcn.0040d1de
add esp, 8
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
je 0x403a23
mov eax, dword [ebp - 0x224]
push eax
lea ecx, [ebp - 0xd284]
push ecx
call fcn.0040d17b
add esp, 8
mov edx, dword [ebp - 0x224]
push edx
call fcn.0040d125
add esp, 4
lea eax, [ebp - 0xcaa0]
push eax
call fcn.0040d1f1
add esp, 4
call fcn.00403cba
mov dword [ebp - 0x2fc8], 0
push 0x416110
lea ecx, [ebp - 0x3e7a4]
push ecx
call fcn.0040d1de
add esp, 8
mov dword [ebp - 0x267c], eax
cmp dword [ebp - 0x267c], 0
je 0x403ac8
push 2
push 0
mov edx, dword [ebp - 0x267c]
push edx
call fcn.0040d099
add esp, 0xc
mov eax, dword [ebp - 0x267c]
push eax
call fcn.0040cf41
add esp, 4
mov dword [ebp - 0x14], eax
push 0
push 1
mov ecx, dword [ebp - 0x267c]
push ecx
call fcn.0040d099
add esp, 0xc
mov edx, dword [ebp - 0x267c]
push edx
mov eax, dword [ebp - 0x14]
sub eax, 3
push eax
lea ecx, [ebp - 0x1e98]
push ecx
call fcn.0040ceea
add esp, 0xc
mov edx, dword [ebp - 0x267c]
push edx
call fcn.0040d125
add esp, 4
lea eax, [ebp - 0x1e98]
push eax
lea ecx, [ebp - 0x16c8]
push ecx
call fcn.0040d290
add esp, 8
push str.__C
lea edx, [ebp - 0x16c8]
push edx
call fcn.0040d2a0
add esp, 8
push 0x417518
lea eax, [ebp - 0x16c8]
push eax
call fcn.0040d2a0
add esp, 8
push 0x41611c
lea ecx, [ebp - 0xb1e8]
push ecx
call fcn.0040d1de
add esp, 8
mov dword [ebp - 0x1e9c], eax
cmp dword [ebp - 0x1e9c], 0
je 0x403bf4
push 0
push 0
mov edx, dword [ebp - 0x1e9c]
push edx
call fcn.0040d099
add esp, 0xc
mov eax, dword [ebp - 0x1e9c]
mov ecx, dword [eax + 4]
sub ecx, 1
mov edx, dword [ebp - 0x1e9c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x1e9c]
cmp dword [eax + 4], 0
jl 0x403b9b
mov ecx, dword [ebp - 0x1e9c]
mov edx, dword [ecx]
movsx eax, byte [edx]
and eax, 0xff
mov dword [ebp - 0x3f0e0], eax
mov ecx, dword [ebp - 0x1e9c]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0x1e9c]
mov dword [eax], edx
jmp 0x403bb0
mov ecx, dword [ebp - 0x1e9c]
push ecx
call fcn.0040ce11
add esp, 4
mov dword [ebp - 0x3f0e0], eax
mov edx, dword [ebp - 0x3f0e0]
mov dword [ebp - 0x220], edx
cmp dword [ebp - 0x220], 0x31
jne 0x403bd9
lea eax, [ebp - 0x16c8]
push eax
call fcn.0040d1f1
add esp, 4
mov dword [0x417510], eax
cmp dword [ebp - 0x220], 0x30
jne 0x403bf4
push 0x417518
call fcn.0040d1f1
add esp, 4
mov dword [0x417510], eax
mov ecx, dword [ebp - 0x1e9c]
push ecx
call fcn.0040d125
add esp, 4
mov edx, dword [0x41d8f0]
sub edx, 0x97
mov dword [0x41d8f0], edx
cmp dword [0x41750c], 1
jne 0x403c67
mov dword [ebp - 0xaa18], 0
jmp 0x403c39
mov eax, dword [ebp - 0xaa18]
add eax, 1
mov dword [ebp - 0xaa18], eax
mov ecx, dword [0x417514]
sub ecx, 2
cmp dword [ebp - 0xaa18], ecx
jge 0x403c67
mov edx, dword [ebp - 0xaa18]
imul edx, edx, 0x3e8
add edx, 0x58c520
push edx
call fcn.0040d1f1
add esp, 4
jmp 0x403c2a
mov eax, dword [0x417514]
sub eax, 2
mov dword [ebp - 0xaa18], eax
jmp 0x403c86
mov ecx, dword [ebp - 0xaa18]
add ecx, 1
mov dword [ebp - 0xaa18], ecx
mov edx, dword [ebp - 0xaa18]
cmp edx, dword [0x417514]
jge 0x403cb0
mov eax, dword [ebp - 0xaa18]
imul eax, eax, 0x3e8
add eax, 0x58c520
push eax
call fcn.0040d1f1
add esp, 4
jmp 0x403c77
mov eax, dword [0x417510]
pop edi
mov esp, ebp
pop ebp
ret