Function at 0x401000
Capabilities:
Check for time delay via gettickcount
Get common file path
Hide graphical window
Parse pe header
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x59e8
call fcn.00407f90
push esi
push edi
mov dword [ebp - 0x160], 0x40
mov dword [ebp - 0x5370], 0x80
mov al, byte [0x8d6654]
mov byte [ebp - 0x268], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x267]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x8d6658]
mov byte [ebp - 0x1770], cl
mov ecx, 0x18
xor eax, eax
lea edi, [ebp - 0x176f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x8d665c]
mov byte [ebp - 0x2b34], dl
mov ecx, 0xc
xor eax, eax
lea edi, [ebp - 0x2b33]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov dword [ebp - 0x537c], 0
mov dword [ebp - 0x5378], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x2b00], 0
mov dword [ebp - 0x3ec0], 0
mov dword [ebp - 0x3ecc], 0
mov dword [ebp - 0x536c], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x5260], 0
mov dword [ebp - 0x370], 0
mov byte [ebp - 0x5374], 0
mov al, byte [0x8d6660]
mov byte [ebp - 0x3ebc], al
mov ecx, 0x4e1
xor eax, eax
lea edi, [ebp - 0x3ebb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x8d6664]
mov byte [ebp - 0x5258], cl
mov ecx, 0x4e1
xor eax, eax
lea edi, [ebp - 0x5257]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x8d6668]
mov byte [ebp - 0x37c], dl
xor eax, eax
mov word [ebp - 0x37b], ax
push 0x8d666c
lea ecx, [ebp - 0x5368]
push ecx
call fcn.00407b80
add esp, 8
push 0x3f
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x37c]
push edx
call fcn.00407b80
add esp, 8
lea eax, [ebp - 0x5368]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
mov dword [ebp - 0x378], eax
mov ecx, dword [ebp - 0x378]
push ecx
lea edx, [ebp - 0x5368]
push edx
call fcn.00406192
add esp, 8
push eax
lea eax, [ebp - 0x5368]
push eax
call fcn.00407b80
add esp, 8
push 0x70
call fcn.00405fa4
add esp, 4
push eax
push 0x6d
call fcn.00405fa4
add esp, 4
push eax
push 0x74
call fcn.00405fa4
add esp, 4
push eax
push 0x78
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5368]
push ecx
push 0x410040
lea edx, [ebp - 0x5368]
push edx
call fcn.00407ee6
add esp, 0x1c
push 0x74
call fcn.00405fa4
add esp, 4
push eax
push 0x61
call fcn.00405fa4
add esp, 4
push eax
push 0x62
call fcn.00405fa4
add esp, 4
push eax
push 0x2e
call fcn.00405fa4
add esp, 4
push eax
push 0x74
call fcn.00405fa4
add esp, 4
push eax
push 0x6c
call fcn.00405fa4
add esp, 4
push eax
push 0x75
call fcn.00405fa4
add esp, 4
push eax
push 0x73
call fcn.00405fa4
add esp, 4
push eax
push 0x65
call fcn.00405fa4
add esp, 4
push eax
push 0x72
call fcn.00405fa4
add esp, 4
push eax
push 0x41004c
lea eax, [ebp - 0x5368]
push eax
push 0x410050
push 0x8d68e0
call fcn.00407ee6
add esp, 0x38
push 0x41006c
lea ecx, [ebp - 0x2b34]
push ecx
call fcn.00407b80
add esp, 8
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [0x8d7040], eax
cmp dword [ebp + 8], 1
jne 0x4012a3
push 0
call fcn.00407e11
push 0x68
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x38
call fcn.00406bbe
add esp, 4
push 0x6d
call fcn.00406bbe
add esp, 4
push 0x63
call fcn.00406bbe
add esp, 4
push 0x58
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x59
call fcn.00406bbe
add esp, 4
push 0x61
call fcn.00406bbe
add esp, 4
push 0x4a
call fcn.00406bbe
add esp, 4
push 0x6c
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4014b6
cmp dword [ebp + 8], 7
jne 0x40148a
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x10]
push edx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x384], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x14]
push ecx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x1774], eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
push eax
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 1
jl 0x40138c
cmp dword [ebp - 0x380], 2
jle 0x401396
mov dword [ebp - 0x380], 1
cmp dword [ebp - 0x380], 1
jne 0x4013a9
mov dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 2
jne 0x4013bc
mov dword [ebp - 0x380], 8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x525c], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x3ec8], eax
mov edx, dword [ebp - 0x380]
push edx
mov eax, dword [ebp - 0x1774]
push eax
mov ecx, dword [ebp - 0x384]
push ecx
mov edx, dword [ebp - 0x3ec8]
push edx
mov eax, dword [ebp - 0x525c]
push eax
call fcn.004065b1
add esp, 0x14
cmp dword [ebp - 0x525c], 1
jge 0x401424
mov dword [ebp - 0x525c], 1
cmp dword [ebp - 0x3ec8], 1
jge 0x401437
mov dword [ebp - 0x3ec8], 1
cmp dword [ebp - 0x525c], 0x19
jge 0x401483
cmp dword [ebp - 0x3ec8], 0x50
jge 0x401483
push 0
push 1
push 1
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406556
add esp, 0x10
push 0
mov edx, dword [ebp - 0x3ec8]
add edx, 1
push edx
mov eax, dword [ebp - 0x525c]
add eax, 1
push eax
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406556
add esp, 0x10
push 0
call fcn.00407e11
push 0
push 7
mov edx, dword [0x8d7040]
push edx
call fcn.00406596
add esp, 0xc
push 0x410084
push 0x410098
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
push 0x78
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x36
call fcn.00406bbe
add esp, 4
push 0x6a
call fcn.00406bbe
add esp, 4
push 0x48
call fcn.00406bbe
add esp, 4
push 0x30
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x75
call fcn.00406bbe
add esp, 4
push 0x49
call fcn.00406bbe
add esp, 4
push 0x70
call fcn.00406bbe
add esp, 4
push 0x32
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4015ba
cmp dword [ebp + 8], 4
jne 0x401587
push 0
call fcn.00406c5c
add esp, 4
push 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc]
push eax
call fcn.00407cc9
add esp, 4
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00407cc9
add esp, 4
push eax
mov eax, dword [0x8d7040]
push eax
call fcn.00406556
add esp, 0x10
push 0
call fcn.00407e11
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
lea edx, [ebp - 0x2b34]
push edx
push 0x4100a0
push 0x4100ac
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x59
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x7a
call fcn.00406bbe
add esp, 4
push 0x32
call fcn.00406bbe
add esp, 4
push 0x39
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x6f
call fcn.00406bbe
add esp, 4
push 0x46
call fcn.00406bbe
add esp, 4
push 0x79
call fcn.00406bbe
add esp, 4
push 0x52
call fcn.00406bbe
add esp, 4
push 0x76
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4016b6
cmp dword [ebp + 8], 3
jne 0x40168a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x2b00], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
call fcn.00407cc9
add esp, 4
sub esi, eax
cmp esi, dword [ebp - 0x2b00]
jb 0x401679
jmp 0x401683
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x401656
push 0
call fcn.00407e11
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
push 0x4100b4
push 0x4100c0
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
push 0x68
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x34
call fcn.00406bbe
add esp, 4
push 0x58
call fcn.00406bbe
add esp, 4
push 0x5a
call fcn.00406bbe
add esp, 4
push 0x70
call fcn.00406bbe
add esp, 4
push 0x65
call fcn.00406bbe
add esp, 4
push 0x47
call fcn.00406bbe
add esp, 4
push 0x61
call fcn.00406bbe
add esp, 4
push 0x51
call fcn.00406bbe
add esp, 4
push 0x76
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x401935
cmp dword [ebp + 8], 3
jne 0x40184a
call dword [sym.imp.WINMM.dll_timeGetTime]
push eax
call fcn.00407c70
add esp, 4
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00407cc9
add esp, 4
movsx eax, ax
push eax
call fcn.0040611e
add esp, 4
mov dword [ebp - 0x5998], eax
fild dword [ebp - 0x5998]
fstp qword [ebp - 0x537c]
push 0x4100c8
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
fld qword [ebp - 0x537c]
call fcn.00407fc0
mov dword [ebp - 0x599c], eax
fild dword [ebp - 0x599c]
sub esp, 8
fstp qword [esp]
call fcn.00406027
add esp, 8
push eax
call fcn.004061e8
add esp, 4
push eax
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b90
add esp, 8
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x4100d4
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x40181e
push 0x4100d8
push 0x4100e8
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov eax, dword [ebp - 0x5264]
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b08
add esp, 8
mov edx, dword [ebp - 0x5264]
push edx
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
call dword [sym.imp.WINMM.dll_timeGetTime]
push eax
call fcn.00407c70
add esp, 4
push 0x64
call fcn.0040611e
add esp, 4
mov dword [ebp - 0x59a0], eax
fild dword [ebp - 0x59a0]
fstp qword [ebp - 0x537c]
push 0x4100ec
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b80
add esp, 8
fld qword [ebp - 0x537c]
call fcn.00407fc0
mov dword [ebp - 0x59a4], eax
fild dword [ebp - 0x59a4]
sub esp, 8
fstp qword [esp]
call fcn.00406027
add esp, 8
push eax
call fcn.004061e8
add esp, 4
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b90
add esp, 8
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x4100f8
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x401909
push 0x4100fc
push 0x41010c
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov edx, dword [ebp - 0x5264]
push edx
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b08
add esp, 8
mov ecx, dword [ebp - 0x5264]
push ecx
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0x71
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x4b
call fcn.00406bbe
add esp, 4
push 0x76
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x6d
call fcn.00406bbe
add esp, 4
push 0x72
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x37
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x64
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x401ad7
cmp dword [ebp + 8], 4
jl 0x401aa5
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4 - 4]
push eax
call fcn.00407cc9
add esp, 4
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4 - 8]
push eax
call fcn.00407cc9
add esp, 4
push eax
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
push 0x8d6670
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b80
add esp, 8
mov dword [ebp - 0x2b00], 2
jmp 0x401a33
mov eax, dword [ebp - 0x2b00]
add eax, 1
mov dword [ebp - 0x2b00], eax
mov ecx, dword [ebp + 8]
sub ecx, 2
cmp dword [ebp - 0x2b00], ecx
jge 0x401a7c
cmp dword [ebp - 0x2b00], 2
je 0x401a5e
push 0x410110
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b90
add esp, 8
mov eax, dword [ebp - 0x2b00]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b90
add esp, 8
jmp 0x401a24
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407c98
add esp, 4
push 0
push 7
mov edx, dword [0x8d7040]
push edx
call fcn.00406596
add esp, 0xc
push 0
call fcn.00407e11
push 0
push 7
mov eax, dword [0x8d7040]
push eax
call fcn.00406596
add esp, 0xc
lea ecx, [ebp - 0x2b34]
push ecx
push 0x410114
push 0x410124
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x59
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x35
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x6d
call fcn.00406bbe
add esp, 4
push 0x6f
call fcn.00406bbe
add esp, 4
push 0x46
call fcn.00406bbe
add esp, 4
push 0x78
call fcn.00406bbe
add esp, 4
push 0x57
call fcn.00406bbe
add esp, 4
push 0x6c
call fcn.00406bbe
add esp, 4
push 0x69
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x401cbc
cmp dword [ebp + 8], 6
jl 0x401c89
push 0
call fcn.00406c5c
add esp, 4
push 0
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4 - 0xc]
push eax
call fcn.00407cc9
add esp, 4
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4 - 0x10]
push eax
call fcn.00407cc9
add esp, 4
push eax
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406556
add esp, 0x10
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4 - 4]
push ecx
call fcn.00407cc9
add esp, 4
push eax
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4 - 8]
push ecx
call fcn.00407cc9
add esp, 4
push eax
mov edx, dword [0x8d7040]
push edx
call fcn.00406596
add esp, 0xc
push 0x8d6674
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b80
add esp, 8
mov dword [ebp - 0x2b00], 2
jmp 0x401c18
mov ecx, dword [ebp - 0x2b00]
add ecx, 1
mov dword [ebp - 0x2b00], ecx
mov edx, dword [ebp + 8]
sub edx, 4
cmp dword [ebp - 0x2b00], edx
jge 0x401c61
cmp dword [ebp - 0x2b00], 2
je 0x401c43
push 0x41012c
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b90
add esp, 8
mov ecx, dword [ebp - 0x2b00]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4]
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b90
add esp, 8
jmp 0x401c09
lea edx, [ebp - 0x170c]
push edx
call fcn.00407c98
add esp, 4
push 0
push 7
mov eax, dword [0x8d7040]
push eax
call fcn.00406596
add esp, 0xc
push 0
call fcn.00407e11
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
lea edx, [ebp - 0x2b34]
push edx
push 0x410130
push 0x410140
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x64
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x69
call fcn.00406bbe
add esp, 4
push 0x74
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x4a
call fcn.00406bbe
add esp, 4
push 0x32
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x4e
call fcn.00406bbe
add esp, 4
push 0x63
call fcn.00406bbe
add esp, 4
push 0x39
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x401e38
cmp dword [ebp + 8], 4
jne 0x401e31
push 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
call fcn.00407a18
fstp qword [ebp - 0x59ac]
add esp, 8
push 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0xc]
push edx
call fcn.00407a18
add esp, 8
fadd qword [ebp - 0x59ac]
fstp qword [ebp - 0x537c]
push 0x410148
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b80
add esp, 8
mov ecx, dword [ebp - 0x5378]
push ecx
mov edx, dword [ebp - 0x537c]
push edx
call fcn.00406027
add esp, 8
push eax
call fcn.004061e8
add esp, 4
push eax
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b90
add esp, 8
push 0x410154
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x401e05
push 0x410158
push 0x410164
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov ecx, dword [ebp - 0x5264]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b08
add esp, 8
mov eax, dword [ebp - 0x5264]
push eax
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 1
call fcn.00407e11
push 0x4b
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x39
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x4a
call fcn.00406bbe
add esp, 4
push 0x32
call fcn.00406bbe
add esp, 4
push 0x68
call fcn.00406bbe
add esp, 4
push 0x66
call fcn.00406bbe
add esp, 4
push 0x6f
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x50
call fcn.00406bbe
add esp, 4
push 0x78
call fcn.00406bbe
add esp, 4
push 0x47
call fcn.00406bbe
add esp, 4
push 0x68
call fcn.00406bbe
add esp, 4
push 0x6a
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x40201f
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0x410168
lea eax, [ebp - 0x110]
push eax
push 0
call fcn.0040731d
add esp, 0xc
test eax, eax
je 0x401f9f
push 0x410180
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b90
add esp, 8
push 0x41018c
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x401f78
push 0x410190
push 0x4101a0
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov ecx, dword [ebp - 0x5264]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b08
add esp, 8
mov eax, dword [ebp - 0x5264]
push eax
call fcn.00407ab2
add esp, 4
jmp 0x402012
push 0x4101a4
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
push 0x4101b4
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x401fed
push 0x4101b8
push 0x4101c8
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov edx, dword [ebp - 0x5264]
push edx
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b08
add esp, 8
mov ecx, dword [ebp - 0x5264]
push ecx
call fcn.00407ab2
add esp, 4
call dword [sym.imp.ole32.dll_CoUninitialize]
push 0
call fcn.00407e11
push 0x4b
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x75
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x66
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x5a
call fcn.00406bbe
add esp, 4
push 0x6e
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x71
call fcn.00406bbe
add esp, 4
push 0x39
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x4f
call fcn.00406bbe
add esp, 4
push 0x6e
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x402403
push 0x4c
push 0
lea ecx, [ebp - 0x15c]
push ecx
call fcn.004079c0
add esp, 0xc
mov dword [ebp - 0x15c], 0x4c
mov edx, dword [ebp - 0x5260]
mov dword [ebp - 0x158], edx
cmp dword [ebp + 8], 3
jl 0x40226b
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push ecx
call fcn.00406298
add esp, 4
push eax
lea edx, [ebp - 0x1770]
push edx
call fcn.00407b80
add esp, 8
push 0x4101cc
lea eax, [ebp - 0x1770]
push eax
call fcn.00407b90
add esp, 8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
lea eax, [ebp - 0x1770]
push eax
call fcn.00407b90
add esp, 8
push 0x4101d8
lea ecx, [ebp - 0x1770]
push ecx
call fcn.00407b90
add esp, 8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
call fcn.00407940
add esp, 4
mov esi, eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00407940
add esp, 4
lea eax, [esi + eax + 0xb]
mov dword [ebp - 0x3ecc], eax
push 3
push 0x4101dc
mov ecx, dword [ebp - 0x3ecc]
lea edx, [ebp + ecx - 0x1770]
push edx
call fcn.00407600
add esp, 0xc
mov eax, dword [ebp - 0x3ecc]
add eax, 3
mov dword [ebp - 0x3ecc], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00407940
add esp, 4
push eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp - 0x3ecc]
lea eax, [ebp + edx - 0x1770]
push eax
call fcn.00407600
add esp, 0xc
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00407940
add esp, 4
mov ecx, dword [ebp - 0x3ecc]
add ecx, eax
mov dword [ebp - 0x3ecc], ecx
push 0x15
push 0x4101e0
mov edx, dword [ebp - 0x3ecc]
lea eax, [ebp + edx - 0x1770]
push eax
call fcn.00407600
add esp, 0xc
mov ecx, dword [ebp - 0x3ecc]
add ecx, 0x15
mov dword [ebp - 0x3ecc], ecx
mov edx, dword [ebp - 0x3ecc]
mov dword [ebp - 0x2b00], edx
jmp 0x402244
mov eax, dword [ebp - 0x2b00]
add eax, 1
mov dword [ebp - 0x2b00], eax
cmp dword [ebp - 0x2b00], 0x64
jge 0x40225d
mov ecx, dword [ebp - 0x2b00]
mov byte [ebp + ecx - 0x1770], 0
jmp 0x402235
lea edx, [ebp - 0x1770]
mov dword [ebp - 0x150], edx
jmp 0x402275
mov dword [ebp - 0x150], 0x4101f8
cmp dword [ebp + 8], 4
jne 0x402287
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x130], ecx
lea edx, [ebp - 0x268]
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x13c], 0x104
mov dword [ebp - 0x128], 0x81004
mov dword [ebp - 0x120], 0x410210
lea eax, [ebp - 0x15c]
push eax
call sub.comdlg32.dll_GetOpenFileNameA
test eax, eax
je 0x402389
push 0x410214
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
push 0x22
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b90
add esp, 8
mov eax, dword [ebp - 0x140]
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b90
add esp, 8
push 0x22
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b90
add esp, 8
push 0x410220
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x40235d
push 0x410224
push 0x410234
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov eax, dword [ebp - 0x5264]
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b08
add esp, 8
mov edx, dword [ebp - 0x5264]
push edx
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0x410238
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b80
add esp, 8
push 0x410248
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x4023d7
push 0x41024c
push 0x41025c
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov ecx, dword [ebp - 0x5264]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b08
add esp, 8
mov eax, dword [ebp - 0x5264]
push eax
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0x68
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x34
call fcn.00406bbe
add esp, 4
push 0x64
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x66
call fcn.00406bbe
add esp, 4
push 0x6e
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x37
call fcn.00406bbe
add esp, 4
push 0x70
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x73
call fcn.00406bbe
add esp, 4
push 0x78
call fcn.00406bbe
add esp, 4
push 0x37
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00406311
add esp, 4
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4027c1
cmp dword [ebp + 8], 1
jle 0x402795
push 3
push 0x410260
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push ecx
call fcn.00406311
add esp, 4
push eax
call fcn.004075c0
add esp, 0xc
test eax, eax
jne 0x4024ef
mov dword [0x8d6530], 1
push 1
call fcn.00406c8c
add esp, 4
mov dword [ebp - 0x3ecc], 2
jmp 0x402514
mov edx, dword [ebp - 0x3ecc]
add edx, 1
mov dword [ebp - 0x3ecc], edx
mov eax, dword [ebp - 0x3ecc]
cmp eax, dword [ebp + 8]
jge 0x402783
mov dword [ebp - 0x536c], 0
mov dword [ebp - 0x3ec0], 0
mov dword [ebp - 0x2b00], 1
jmp 0x402552
mov ecx, dword [ebp - 0x2b00]
add ecx, 1
mov dword [ebp - 0x2b00], ecx
mov edx, dword [ebp - 0x3ecc]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
call fcn.00407940
add esp, 4
cmp dword [ebp - 0x2b00], eax
jae 0x40277e
push 1
mov edx, dword [ebp - 0x2b00]
push edx
mov eax, dword [ebp - 0x3ecc]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
call fcn.00406082
add esp, 0xc
push eax
call fcn.00406000
add esp, 4
mov esi, eax
push 0x410264
call fcn.00406000
add esp, 4
cmp esi, eax
jne 0x402779
mov dword [ebp - 4], 0
cmp dword [ebp - 0x3ec0], 0
jne 0x402625
cmp dword [ebp - 4], 0
jne 0x402625
mov eax, dword [ebp - 0x2b00]
sub eax, 1
push eax
push 1
mov ecx, dword [ebp - 0x3ecc]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call fcn.00406082
add esp, 0xc
push eax
call fcn.00407cc9
add esp, 4
mov ecx, dword [ebp - 0x3ecc]
sub ecx, 1
shl ecx, 4
mov dword [ecx + 0x8d6a0c], eax
mov edx, dword [ebp - 0x2b00]
mov dword [ebp - 0x536c], edx
mov eax, dword [ebp - 0x3ec0]
add eax, 1
mov dword [ebp - 0x3ec0], eax
mov dword [ebp - 4], 1
cmp dword [ebp - 0x3ec0], 1
jne 0x4026a0
cmp dword [ebp - 4], 0
jne 0x4026a0
mov ecx, dword [ebp - 0x2b00]
sub ecx, dword [ebp - 0x536c]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x536c]
add edx, 1
push edx
mov eax, dword [ebp - 0x3ecc]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
call fcn.00406082
add esp, 0xc
push eax
call fcn.00407cc9
add esp, 4
mov ecx, dword [ebp - 0x3ecc]
sub ecx, 1
shl ecx, 4
mov dword [ecx + 0x8d6a00], eax
mov edx, dword [ebp - 0x2b00]
mov dword [ebp - 0x536c], edx
mov eax, dword [ebp - 0x3ec0]
add eax, 1
mov dword [ebp - 0x3ec0], eax
mov dword [ebp - 4], 1
cmp dword [ebp - 0x3ec0], 2
jne 0x402779
cmp dword [ebp - 4], 0
jne 0x402779
mov ecx, dword [ebp - 0x2b00]
sub ecx, dword [ebp - 0x536c]
sub ecx, 1
push ecx
mov edx, dword [ebp - 0x536c]
add edx, 1
push edx
mov eax, dword [ebp - 0x3ecc]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
push edx
call fcn.00406082
add esp, 0xc
push eax
call fcn.00407cc9
add esp, 4
mov ecx, dword [ebp - 0x3ecc]
sub ecx, 1
shl ecx, 4
mov dword [ecx + 0x8d6a08], eax
mov edx, dword [ebp - 0x2b00]
mov dword [ebp - 0x536c], edx
mov eax, dword [ebp - 0x3ec0]
add eax, 1
mov dword [ebp - 0x3ec0], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x3ecc]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call fcn.00407940
add esp, 4
sub eax, dword [ebp - 0x536c]
push eax
mov ecx, dword [ebp - 0x536c]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x3ecc]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
call fcn.00406082
add esp, 0xc
push eax
call fcn.00407cc9
add esp, 4
mov edx, dword [ebp - 0x3ecc]
sub edx, 1
shl edx, 4
mov dword [edx + 0x8d6a04], eax
jmp 0x402543
jmp 0x402505
mov eax, dword [ebp + 8]
sub eax, 2
mov dword [0x8d6650], eax
call fcn.00406d83
jmp 0x4027c1
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
push 0x410268
push 0x410280
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
push 0x73
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x37
call fcn.00406bbe
add esp, 4
push 0x41
call fcn.00406bbe
add esp, 4
push 0x78
call fcn.00406bbe
add esp, 4
push 0x4e
call fcn.00406bbe
add esp, 4
push 0x35
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x62
call fcn.00406bbe
add esp, 4
push 0x35
call fcn.00406bbe
add esp, 4
push 0x64
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4029fa
cmp dword [ebp + 8], 5
jne 0x4029c8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x384], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x1774], eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x10]
push eax
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x384], 0x19
jle 0x4028ab
mov dword [ebp - 0x384], 0x19
cmp dword [ebp - 0x384], 3
jge 0x4028be
mov dword [ebp - 0x384], 3
cmp dword [ebp - 0x1774], 0x50
jle 0x4028d1
mov dword [ebp - 0x1774], 0x50
cmp dword [ebp - 0x1774], 3
jge 0x4028e4
mov dword [ebp - 0x1774], 3
cmp dword [ebp - 0x380], 1
jl 0x4028f6
cmp dword [ebp - 0x380], 2
jle 0x402900
mov dword [ebp - 0x380], 1
cmp dword [ebp - 0x380], 1
jne 0x402913
mov dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 2
jne 0x402926
mov dword [ebp - 0x380], 8
mov eax, dword [ebp - 0x384]
cdq
sub eax, edx
sar eax, 1
mov ecx, 0xc
sub ecx, eax
add ecx, 1
mov dword [ebp - 0x525c], ecx
mov eax, dword [ebp - 0x1774]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x28
sub edx, eax
add edx, 1
mov dword [ebp - 0x3ec8], edx
mov eax, dword [ebp - 0x380]
push eax
mov ecx, dword [ebp - 0x1774]
push ecx
mov edx, dword [ebp - 0x384]
push edx
mov eax, dword [ebp - 0x3ec8]
push eax
mov ecx, dword [ebp - 0x525c]
push ecx
call fcn.004065b1
add esp, 0x14
push 0
push 1
push 1
mov edx, dword [0x8d7040]
push edx
call fcn.00406556
add esp, 0x10
push 1
mov eax, dword [ebp - 0x3ec8]
add eax, 1
push eax
mov ecx, dword [ebp - 0x525c]
add ecx, 1
push ecx
mov edx, dword [0x8d7040]
push edx
call fcn.00406556
add esp, 0x10
push 0
call fcn.00407e11
push 0
push 7
mov eax, dword [0x8d7040]
push eax
call fcn.00406596
add esp, 0xc
lea ecx, [ebp - 0x2b34]
push ecx
push 0x410284
push 0x410290
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x68
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x35
call fcn.00406bbe
add esp, 4
push 0x43
call fcn.00406bbe
add esp, 4
push 0x6f
call fcn.00406bbe
add esp, 4
push 0x55
call fcn.00406bbe
add esp, 4
push 0x72
call fcn.00406bbe
add esp, 4
push 0x77
call fcn.00406bbe
add esp, 4
push 0x39
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x31
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x402af4
cmp dword [ebp + 8], 4
jne 0x402ac2
push 1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0xc]
push edx
call fcn.00407cc9
add esp, 4
push eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push ecx
call fcn.00407cc9
add esp, 4
push eax
mov edx, dword [0x8d7040]
push edx
call fcn.00406556
add esp, 0x10
push 0
call fcn.00407e11
push 0
push 7
mov eax, dword [0x8d7040]
push eax
call fcn.00406596
add esp, 0xc
lea ecx, [ebp - 0x2b34]
push ecx
push 0x410298
push 0x4102a4
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x76
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x37
call fcn.00406bbe
add esp, 4
push 0x47
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x35
call fcn.00406bbe
add esp, 4
push 0x6e
call fcn.00406bbe
add esp, 4
push 0x43
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x59
call fcn.00406bbe
add esp, 4
push 0x64
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x402c65
cmp dword [ebp + 8], 3
jne 0x402c32
push 0x4102ac
call fcn.0040751e
add esp, 4
push 0x8d6678
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
mov dword [ebp - 0x2b00], 0
jmp 0x402bc8
mov edx, dword [ebp - 0x2b00]
add edx, 1
mov dword [ebp - 0x2b00], edx
cmp dword [ebp - 0x2b00], 0x7d0
jge 0x402c04
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push ecx
call fcn.00407cc9
add esp, 4
push eax
push 0
mov edx, dword [0x8d7040]
push edx
call fcn.00406596
add esp, 0xc
push 0x4102b0
call fcn.00407c98
add esp, 4
jmp 0x402bb9
push 1
push 1
push 1
mov eax, dword [0x8d7040]
push eax
call fcn.00406556
add esp, 0x10
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
push 0
call fcn.00407e11
push 0
push 7
mov edx, dword [0x8d7040]
push edx
call fcn.00406596
add esp, 0xc
lea eax, [ebp - 0x2b34]
push eax
push 0x4102b4
push 0x4102c4
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x66
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x38
call fcn.00406bbe
add esp, 4
push 0x37
call fcn.00406bbe
add esp, 4
push 0x56
call fcn.00406bbe
add esp, 4
push 0x79
call fcn.00406bbe
add esp, 4
push 0x39
call fcn.00406bbe
add esp, 4
push 0x48
call fcn.00406bbe
add esp, 4
push 0x61
call fcn.00406bbe
add esp, 4
push 0x43
call fcn.00406bbe
add esp, 4
push 0x78
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x402eb1
cmp dword [ebp + 8], 6
jl 0x402e7e
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4 - 4]
push edx
call fcn.00407cc9
add esp, 4
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4 - 8]
push edx
call fcn.00407cc9
add esp, 4
push eax
mov eax, dword [0x8d7040]
push eax
call fcn.00406596
add esp, 0xc
push 0x8d667c
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
mov dword [ebp - 0x2b00], 2
jmp 0x402d62
mov edx, dword [ebp - 0x2b00]
add edx, 1
mov dword [ebp - 0x2b00], edx
mov eax, dword [ebp + 8]
sub eax, 3
cmp dword [ebp - 0x2b00], eax
jge 0x402dab
cmp dword [ebp - 0x2b00], 2
je 0x402d8d
push 0x4102cc
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b90
add esp, 8
mov edx, dword [ebp - 0x2b00]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b90
add esp, 8
jmp 0x402d53
lea eax, [ebp - 0x170c]
push eax
call fcn.00407940
add esp, 4
cmp eax, 0x50
jbe 0x402de0
push 0x50
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00406192
add esp, 8
push eax
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b80
add esp, 8
lea eax, [ebp - 0x170c]
push eax
call fcn.00407940
add esp, 4
shr eax, 1
mov ecx, 0x28
sub ecx, eax
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4 - 0xc]
push ecx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x2b00], eax
cmp dword [ebp - 0x2b00], 0x18
jle 0x402e27
mov dword [ebp - 0x2b00], 0x18
cmp dword [ebp - 0x2b00], 1
jge 0x402e3a
mov dword [ebp - 0x2b00], 1
push 1
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x2b00]
push eax
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406556
add esp, 0x10
lea edx, [ebp - 0x170c]
push edx
call fcn.00407c98
add esp, 4
push 0
push 7
mov eax, dword [0x8d7040]
push eax
call fcn.00406596
add esp, 0xc
push 0
call fcn.00407e11
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
lea edx, [ebp - 0x2b34]
push edx
push 0x4102d0
push 0x4102e0
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x66
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x33
call fcn.00406bbe
add esp, 4
push 0x47
call fcn.00406bbe
add esp, 4
push 0x63
call fcn.00406bbe
add esp, 4
push 0x4e
call fcn.00406bbe
add esp, 4
push 0x37
call fcn.00406bbe
add esp, 4
push 0x53
call fcn.00406bbe
add esp, 4
push 0x72
call fcn.00406bbe
add esp, 4
push 0x45
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x402fa9
cmp dword [ebp + 8], 4
jne 0x402f76
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc]
push eax
call fcn.00407cc9
add esp, 4
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00407cc9
add esp, 4
push eax
mov eax, dword [0x8d7040]
push eax
call fcn.00406596
add esp, 0xc
push 0
call fcn.00407e11
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
lea edx, [ebp - 0x2b34]
push edx
push 0x4102e8
push 0x4102f8
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x70
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x34
call fcn.00406bbe
add esp, 4
push 0x76
call fcn.00406bbe
add esp, 4
push 0x43
call fcn.00406bbe
add esp, 4
push 0x64
call fcn.00406bbe
add esp, 4
push 0x73
call fcn.00406bbe
add esp, 4
push 0x37
call fcn.00406bbe
add esp, 4
push 0x4e
call fcn.00406bbe
add esp, 4
push 0x61
call fcn.00406bbe
add esp, 4
push 0x32
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x40319c
cmp dword [ebp + 8], 7
jne 0x40316a
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x10]
push eax
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x384], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x14]
push edx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x1774], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x18]
push ecx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 1
jl 0x403092
cmp dword [ebp - 0x380], 0xf
jle 0x40309c
mov dword [ebp - 0x380], 1
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x525c], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0xc]
push edx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x3ec8], eax
mov eax, dword [ebp - 0x380]
push eax
mov ecx, dword [ebp - 0x1774]
push ecx
mov edx, dword [ebp - 0x384]
push edx
mov eax, dword [ebp - 0x3ec8]
push eax
mov ecx, dword [ebp - 0x525c]
push ecx
call fcn.00406953
add esp, 0x14
cmp dword [ebp - 0x525c], 1
jge 0x403104
mov dword [ebp - 0x525c], 1
cmp dword [ebp - 0x3ec8], 1
jge 0x403117
mov dword [ebp - 0x3ec8], 1
cmp dword [ebp - 0x525c], 0x19
jge 0x403163
cmp dword [ebp - 0x3ec8], 0x50
jge 0x403163
push 0
push 1
push 1
mov edx, dword [0x8d7040]
push edx
call fcn.00406556
add esp, 0x10
push 0
mov eax, dword [ebp - 0x3ec8]
add eax, 1
push eax
mov ecx, dword [ebp - 0x525c]
add ecx, 1
push ecx
mov edx, dword [0x8d7040]
push edx
call fcn.00406556
add esp, 0x10
push 0
call fcn.00407e11
push 0
push 7
mov eax, dword [0x8d7040]
push eax
call fcn.00406596
add esp, 0xc
lea ecx, [ebp - 0x2b34]
push ecx
push 0x410300
push 0x410310
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x6a
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x48
call fcn.00406bbe
add esp, 4
push 0x36
call fcn.00406bbe
add esp, 4
push 0x6f
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x56
call fcn.00406bbe
add esp, 4
push 0x63
call fcn.00406bbe
add esp, 4
push 0x72
call fcn.00406bbe
add esp, 4
push 0x32
call fcn.00406bbe
add esp, 4
push 0x75
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x403390
cmp dword [ebp + 8], 7
jne 0x40335d
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x10]
push edx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x384], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x14]
push ecx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x1774], eax
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x18]
push eax
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 1
jl 0x403285
cmp dword [ebp - 0x380], 4
jle 0x40328f
mov dword [ebp - 0x380], 1
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x525c], eax
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x3ec8], eax
mov edx, dword [ebp - 0x380]
push edx
mov eax, dword [ebp - 0x1774]
push eax
mov ecx, dword [ebp - 0x384]
push ecx
mov edx, dword [ebp - 0x3ec8]
push edx
mov eax, dword [ebp - 0x525c]
push eax
call fcn.00406a4f
add esp, 0x14
cmp dword [ebp - 0x525c], 1
jge 0x4032f7
mov dword [ebp - 0x525c], 1
cmp dword [ebp - 0x3ec8], 1
jge 0x40330a
mov dword [ebp - 0x3ec8], 1
cmp dword [ebp - 0x525c], 0x19
jge 0x403356
cmp dword [ebp - 0x3ec8], 0x50
jge 0x403356
push 0
push 1
push 1
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406556
add esp, 0x10
push 0
mov edx, dword [ebp - 0x3ec8]
add edx, 1
push edx
mov eax, dword [ebp - 0x525c]
add eax, 1
push eax
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406556
add esp, 0x10
push 0
call fcn.00407e11
push 0
push 7
mov edx, dword [0x8d7040]
push edx
call fcn.00406596
add esp, 0xc
lea eax, [ebp - 0x2b34]
push eax
push 0x410318
push 0x410328
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x6a
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x36
call fcn.00406bbe
add esp, 4
push 0x4e
call fcn.00406bbe
add esp, 4
push 0x4d
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x43
call fcn.00406bbe
add esp, 4
push 0x78
call fcn.00406bbe
add esp, 4
push 0x66
call fcn.00406bbe
add esp, 4
push 0x76
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x40342b
push 0
call fcn.00406c5c
add esp, 4
push 0
call fcn.00407e11
push 0x67
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x37
call fcn.00406bbe
add esp, 4
push 0x4e
call fcn.00406bbe
add esp, 4
push 0x66
call fcn.00406bbe
add esp, 4
push 0x78
call fcn.00406bbe
add esp, 4
push 0x30
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x64
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4034db
call fcn.00406bdd
mov dword [0x8d69e4], eax
push 0
mov edx, dword [0x8d69e4]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x2b00], eax
push 0
call fcn.00407e11
push 0x6b
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x31
call fcn.00406bbe
add esp, 4
push 0x46
call fcn.00406bbe
add esp, 4
push 0x7a
call fcn.00406bbe
add esp, 4
push 0x30
call fcn.00406bbe
add esp, 4
push 0x4b
call fcn.00406bbe
add esp, 4
push 0x73
call fcn.00406bbe
add esp, 4
push 0x65
call fcn.00406bbe
add esp, 4
push 0x35
call fcn.00406bbe
add esp, 4
push 0x63
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x40357f
push 0
push 7
mov edx, dword [0x8d7040]
push edx
call fcn.00406596
add esp, 0xc
push 0
call fcn.00407e11
push 0x67
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x39
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x58
call fcn.00406bbe
add esp, 4
push 0x63
call fcn.00406bbe
add esp, 4
push 0x76
call fcn.00406bbe
add esp, 4
push 0x35
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x64
call fcn.00406bbe
add esp, 4
push 0x35
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x40361a
push 1
call fcn.00406c5c
add esp, 4
push 0
call fcn.00407e11
push 0x64
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x41
call fcn.00406bbe
add esp, 4
push 0x36
call fcn.00406bbe
add esp, 4
push 0x6e
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x49
call fcn.00406bbe
add esp, 4
push 0x6f
call fcn.00406bbe
add esp, 4
push 0x50
call fcn.00406bbe
add esp, 4
push 0x77
call fcn.00406bbe
add esp, 4
push 0x51
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4037a8
cmp dword [ebp + 8], 4
jne 0x4037a1
push 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00407a18
fstp qword [ebp - 0x59b4]
add esp, 8
push 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.00407a18
add esp, 8
fsubr qword [ebp - 0x59b4]
fstp qword [ebp - 0x537c]
push 0x410330
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b80
add esp, 8
mov eax, dword [ebp - 0x5378]
push eax
mov ecx, dword [ebp - 0x537c]
push ecx
call fcn.00406027
add esp, 8
push eax
call fcn.004061e8
add esp, 4
push eax
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b90
add esp, 8
push 0x41033c
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x403775
push 0
push 7
mov eax, dword [0x8d7040]
push eax
call fcn.00406596
add esp, 0xc
push 0x410340
push 0x41034c
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov ecx, dword [ebp - 0x5264]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b08
add esp, 8
mov eax, dword [ebp - 0x5264]
push eax
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 1
call fcn.00407e11
push 0x65
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x58
call fcn.00406bbe
add esp, 4
push 0x36
call fcn.00406bbe
add esp, 4
push 0x31
call fcn.00406bbe
add esp, 4
push 0x4a
call fcn.00406bbe
add esp, 4
push 0x76
call fcn.00406bbe
add esp, 4
push 0x70
call fcn.00406bbe
add esp, 4
push 0x4c
call fcn.00406bbe
add esp, 4
push 0x30
call fcn.00406bbe
add esp, 4
push 0x73
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x403937
cmp dword [ebp + 8], 4
jne 0x403930
push 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push ecx
call fcn.00407a18
fstp qword [ebp - 0x59bc]
add esp, 8
push 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc]
push eax
call fcn.00407a18
add esp, 8
fmul qword [ebp - 0x59bc]
fstp qword [ebp - 0x537c]
push 0x410350
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
mov edx, dword [ebp - 0x5378]
push edx
mov eax, dword [ebp - 0x537c]
push eax
call fcn.00406027
add esp, 8
push eax
call fcn.004061e8
add esp, 4
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b90
add esp, 8
push 0x41035c
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x403904
push 0
push 7
mov edx, dword [0x8d7040]
push edx
call fcn.00406596
add esp, 0xc
push 0x410360
push 0x41036c
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov eax, dword [ebp - 0x5264]
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b08
add esp, 8
mov edx, dword [ebp - 0x5264]
push edx
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 1
call fcn.00407e11
push 0x61
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x37
call fcn.00406bbe
add esp, 4
push 0x43
call fcn.00406bbe
add esp, 4
push 0x47
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x6c
call fcn.00406bbe
add esp, 4
push 0x30
call fcn.00406bbe
add esp, 4
push 0x6e
call fcn.00406bbe
add esp, 4
push 0x42
call fcn.00406bbe
add esp, 4
push 0x79
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x403ac6
cmp dword [ebp + 8], 4
jne 0x403abf
push 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
call fcn.00407a18
fstp qword [ebp - 0x59c4]
add esp, 8
push 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0xc]
push edx
call fcn.00407a18
add esp, 8
fdivr qword [ebp - 0x59c4]
fstp qword [ebp - 0x537c]
push 0x410370
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b80
add esp, 8
mov ecx, dword [ebp - 0x5378]
push ecx
mov edx, dword [ebp - 0x537c]
push edx
call fcn.00406027
add esp, 8
push eax
call fcn.004061e8
add esp, 4
push eax
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b90
add esp, 8
push 0x41037c
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x403a93
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
push 0x410380
push 0x41038c
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov edx, dword [ebp - 0x5264]
push edx
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b08
add esp, 8
mov ecx, dword [ebp - 0x5264]
push ecx
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 1
call fcn.00407e11
push 0x66
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x45
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x36
call fcn.00406bbe
add esp, 4
push 0x42
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x62
call fcn.00406bbe
add esp, 4
push 0x39
call fcn.00406bbe
add esp, 4
push 0x72
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x403ca6
cmp dword [ebp + 8], 3
jl 0x403c73
push 0x410390
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
mov dword [ebp - 0x2b00], 2
jmp 0x403b8d
mov edx, dword [ebp - 0x2b00]
add edx, 1
mov dword [ebp - 0x2b00], edx
mov eax, dword [ebp + 8]
sub eax, 1
cmp dword [ebp - 0x2b00], eax
jg 0x403bdb
mov ecx, dword [ebp - 0x2b00]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4]
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b90
add esp, 8
mov edx, dword [ebp + 8]
sub edx, 1
cmp dword [ebp - 0x2b00], edx
je 0x403bd9
push 0x41039c
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b90
add esp, 8
jmp 0x403b7e
push 0x4103a0
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x403c28
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
push 0x4103a4
push 0x4103b4
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
lea edx, [ebp - 0x170c]
push edx
call fcn.00406311
add esp, 4
push eax
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b80
add esp, 8
mov ecx, dword [ebp - 0x5264]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b08
add esp, 8
mov eax, dword [ebp - 0x5264]
push eax
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
lea edx, [ebp - 0x2b34]
push edx
push 0x4103b8
push 0x4103c4
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x7a
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x34
call fcn.00406bbe
add esp, 4
push 0x53
call fcn.00406bbe
add esp, 4
push 0x64
call fcn.00406bbe
add esp, 4
push 0x45
call fcn.00406bbe
add esp, 4
push 0x35
call fcn.00406bbe
add esp, 4
push 0x69
call fcn.00406bbe
add esp, 4
push 0x4c
call fcn.00406bbe
add esp, 4
push 0x62
call fcn.00406bbe
add esp, 4
push 0x43
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x403e86
cmp dword [ebp + 8], 3
jl 0x403e53
push 0x4103cc
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b80
add esp, 8
mov dword [ebp - 0x2b00], 2
jmp 0x403d6d
mov eax, dword [ebp - 0x2b00]
add eax, 1
mov dword [ebp - 0x2b00], eax
mov ecx, dword [ebp + 8]
sub ecx, 1
cmp dword [ebp - 0x2b00], ecx
jg 0x403dbb
mov edx, dword [ebp - 0x2b00]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b90
add esp, 8
mov eax, dword [ebp + 8]
sub eax, 1
cmp dword [ebp - 0x2b00], eax
je 0x403db9
push 0x4103d8
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b90
add esp, 8
jmp 0x403d5e
push 0x4103dc
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x403e08
push 0
push 7
mov edx, dword [0x8d7040]
push edx
call fcn.00406596
add esp, 0xc
push 0x4103e0
push 0x4103f0
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
lea eax, [ebp - 0x170c]
push eax
call fcn.00406298
add esp, 4
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
mov edx, dword [ebp - 0x5264]
push edx
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b08
add esp, 8
mov ecx, dword [ebp - 0x5264]
push ecx
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0
push 7
mov edx, dword [0x8d7040]
push edx
call fcn.00406596
add esp, 0xc
lea eax, [ebp - 0x2b34]
push eax
push 0x4103f4
push 0x410400
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x78
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x5a
call fcn.00406bbe
add esp, 4
push 0x36
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x62
call fcn.00406bbe
add esp, 4
push 0x56
call fcn.00406bbe
add esp, 4
push 0x79
call fcn.00406bbe
add esp, 4
push 0x55
call fcn.00406bbe
add esp, 4
push 0x70
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x404058
push 0x8d6680
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b80
add esp, 8
mov dword [ebp - 0x2b00], 2
jmp 0x403f43
mov ecx, dword [ebp - 0x2b00]
add ecx, 1
mov dword [ebp - 0x2b00], ecx
mov edx, dword [ebp - 0x2b00]
cmp edx, dword [ebp + 8]
jge 0x403f89
cmp dword [ebp - 0x2b00], 2
je 0x403f6b
push 0x410408
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b90
add esp, 8
mov ecx, dword [ebp - 0x2b00]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4]
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b90
add esp, 8
jmp 0x403f34
lea edx, [ebp - 0x170c]
push edx
call fcn.00407940
add esp, 4
mov dword [ebp - 0x59cc], eax
mov dword [ebp - 0x59c8], 0
fild qword [ebp - 0x59cc]
sub esp, 8
fstp qword [esp]
call fcn.00406027
add esp, 8
push eax
call fcn.004061e8
add esp, 4
push eax
push 0x41040c
push 0x410418
lea eax, [ebp - 0x170c]
push eax
call fcn.00407ee6
add esp, 0x10
push 0x410420
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x40402c
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
push 0x410424
push 0x410434
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov edx, dword [ebp - 0x5264]
push edx
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b08
add esp, 8
mov ecx, dword [ebp - 0x5264]
push ecx
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0x73
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x41
call fcn.00406bbe
add esp, 4
push 0x32
call fcn.00406bbe
add esp, 4
push 0x67
call fcn.00406bbe
add esp, 4
push 0x37
call fcn.00406bbe
add esp, 4
push 0x4e
call fcn.00406bbe
add esp, 4
push 0x68
call fcn.00406bbe
add esp, 4
push 0x64
call fcn.00406bbe
add esp, 4
push 0x45
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x40420a
cmp dword [ebp + 8], 4
jne 0x40414d
push 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00407a18
fstp qword [ebp - 0x59d4]
add esp, 8
push 0
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.00407a18
add esp, 8
fcomp qword [ebp - 0x59d4]
fnstsw ax
test ah, 1
jne 0x404137
mov dword [ebp - 0x537c], 0
mov dword [ebp - 0x5378], 0x3ff00000
jmp 0x40414b
mov dword [ebp - 0x537c], 0
mov dword [ebp - 0x5378], 0
jmp 0x404161
mov dword [ebp - 0x537c], 0
mov dword [ebp - 0x5378], 0
push 0x410438
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b80
add esp, 8
mov eax, dword [ebp - 0x5378]
push eax
mov ecx, dword [ebp - 0x537c]
push ecx
call fcn.00406027
add esp, 8
push eax
call fcn.004061e8
add esp, 4
push eax
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b90
add esp, 8
push 0x410444
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x4041de
push 0x410448
push 0x410458
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov eax, dword [ebp - 0x5264]
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b08
add esp, 8
mov edx, dword [ebp - 0x5264]
push edx
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0x6e
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x47
call fcn.00406bbe
add esp, 4
push 0x35
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x5a
call fcn.00406bbe
add esp, 4
push 0x4f
call fcn.00406bbe
add esp, 4
push 0x70
call fcn.00406bbe
add esp, 4
push 0x77
call fcn.00406bbe
add esp, 4
push 0x46
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4043bc
cmp dword [ebp + 8], 4
jne 0x4042ff
push 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
call fcn.00407a18
fstp qword [ebp - 0x59dc]
add esp, 8
push 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0xc]
push edx
call fcn.00407a18
add esp, 8
fcomp qword [ebp - 0x59dc]
fnstsw ax
test ah, 0x41
je 0x4042e9
mov dword [ebp - 0x537c], 0
mov dword [ebp - 0x5378], 0x3ff00000
jmp 0x4042fd
mov dword [ebp - 0x537c], 0
mov dword [ebp - 0x5378], 0
jmp 0x404313
mov dword [ebp - 0x537c], 0
mov dword [ebp - 0x5378], 0
push 0x41045c
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b80
add esp, 8
mov ecx, dword [ebp - 0x5378]
push ecx
mov edx, dword [ebp - 0x537c]
push edx
call fcn.00406027
add esp, 8
push eax
call fcn.004061e8
add esp, 4
push eax
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b90
add esp, 8
push 0x410468
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x404390
push 0x41046c
push 0x41047c
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov ecx, dword [ebp - 0x5264]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b08
add esp, 8
mov eax, dword [ebp - 0x5264]
push eax
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0x6a
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x35
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x4e
call fcn.00406bbe
add esp, 4
push 0x76
call fcn.00406bbe
add esp, 4
push 0x30
call fcn.00406bbe
add esp, 4
push 0x43
call fcn.00406bbe
add esp, 4
push 0x70
call fcn.00406bbe
add esp, 4
push 0x6f
call fcn.00406bbe
add esp, 4
push 0x51
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x404531
push 1
call fcn.00406c5c
add esp, 4
lea eax, [ebp - 0x2afc]
push eax
call fcn.004074d4
add esp, 4
push 0x8d6684
lea ecx, [ebp - 0x2afc]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x40448f
push 0x410480
lea edx, [ebp - 0x2afc]
push edx
call fcn.00407b80
add esp, 8
push 0x410484
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b80
add esp, 8
lea ecx, [ebp - 0x2afc]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b90
add esp, 8
push 0x410490
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x404505
push 0
push 7
mov eax, dword [0x8d7040]
push eax
call fcn.00406596
add esp, 0xc
push 0x410494
push 0x4104a4
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov ecx, dword [ebp - 0x5264]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b08
add esp, 8
mov eax, dword [ebp - 0x5264]
push eax
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0x42
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x32
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x6d
call fcn.00406bbe
add esp, 4
push 0x49
call fcn.00406bbe
add esp, 4
push 0x70
call fcn.00406bbe
add esp, 4
push 0x6d
call fcn.00406bbe
add esp, 4
push 0x37
call fcn.00406bbe
add esp, 4
push 0x67
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x404759
push 0x8d6688
lea eax, [ebp - 0x3ebc]
push eax
call fcn.00407b80
add esp, 8
movsx ecx, byte [ebp - 0x5374]
cmp ecx, 0xd
je 0x4046ac
call fcn.0040ecaa
mov byte [ebp - 0x5374], al
movsx edx, byte [ebp - 0x5374]
test edx, edx
je 0x4046a7
movsx eax, byte [ebp - 0x5374]
cmp eax, 8
jne 0x40464f
cmp dword [ebp - 0x370], 0
jle 0x40464d
push 8
call fcn.0040ec66
add esp, 4
push 0x20
call fcn.0040ec66
add esp, 4
push 8
call fcn.0040ec66
add esp, 4
mov ecx, dword [ebp - 0x370]
sub ecx, 1
mov dword [ebp - 0x370], ecx
mov edx, dword [ebp - 0x370]
mov byte [ebp + edx - 0x3ebc], 0
jmp 0x4046a7
movsx eax, byte [ebp - 0x5374]
cmp eax, 0xd
je 0x4046a7
cmp dword [ebp - 0x370], 0
jne 0x404678
push 0x8d668c
lea ecx, [ebp - 0x3ebc]
push ecx
call fcn.00407b80
add esp, 8
mov edx, dword [ebp - 0x370]
mov al, byte [ebp - 0x5374]
mov byte [ebp + edx - 0x3ebc], al
push 0x4104a8
call fcn.00407c98
add esp, 4
mov ecx, dword [ebp - 0x370]
add ecx, 1
mov dword [ebp - 0x370], ecx
jmp 0x4045d3
cmp dword [ebp - 0x370], 0
jne 0x4046c9
push 0x4104ac
lea edx, [ebp - 0x3ebc]
push edx
call fcn.00407b80
add esp, 8
push 0x4104b0
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b80
add esp, 8
lea ecx, [ebp - 0x3ebc]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b90
add esp, 8
push 0x4104bc
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x40472d
push 0x4104c0
push 0x4104d0
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov eax, dword [ebp - 0x5264]
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b08
add esp, 8
mov edx, dword [ebp - 0x5264]
push edx
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0x66
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x5a
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x31
call fcn.00406bbe
add esp, 4
push 0x48
call fcn.00406bbe
add esp, 4
push 0x74
call fcn.00406bbe
add esp, 4
push 0x50
call fcn.00406bbe
add esp, 4
push 0x53
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4048e0
cmp dword [ebp + 8], 3
jne 0x404810
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
call fcn.00407cc9
add esp, 4
mov dword [ebp - 0x59e0], eax
fild dword [ebp - 0x59e0]
fstp qword [ebp - 0x537c]
jmp 0x404824
mov dword [ebp - 0x537c], 0
mov dword [ebp - 0x5378], 0
push 0x4104d4
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
mov edx, dword [ebp - 0x5378]
push edx
mov eax, dword [ebp - 0x537c]
push eax
call fcn.00406027
add esp, 8
push eax
call fcn.004061e8
add esp, 4
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b90
add esp, 8
push 0x4104e0
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x4048b4
push 0
push 7
mov edx, dword [0x8d7040]
push edx
call fcn.00406596
add esp, 0xc
push 0x4104e4
push 0x4104f4
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov eax, dword [ebp - 0x5264]
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b08
add esp, 8
mov edx, dword [ebp - 0x5264]
push edx
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0x6f
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x58
call fcn.00406bbe
add esp, 4
push 0x70
call fcn.00406bbe
add esp, 4
push 0x36
call fcn.00406bbe
add esp, 4
push 0x62
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x52
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x4a
call fcn.00406bbe
add esp, 4
push 0x76
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x404a8b
cmp dword [ebp + 8], 4
jne 0x404a58
push 0
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
call fcn.00407a18
fstp qword [ebp - 0x59e8]
add esp, 8
push 0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0xc]
push edx
call fcn.00407a18
add esp, 8
fdivr qword [ebp - 0x59e8]
fmul qword [0x40f178]
call fcn.00407fc0
mov dword [ebp - 8], eax
push 0x4104f8
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b80
add esp, 8
fild dword [ebp - 8]
sub esp, 8
fstp qword [esp]
call fcn.00406027
add esp, 8
push eax
call fcn.004061e8
add esp, 4
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b90
add esp, 8
push 0x410504
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x404a2c
push 0x410508
push 0x410514
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov edx, dword [ebp - 0x5264]
push edx
lea eax, [ebp - 0x170c]
push eax
call fcn.00407b08
add esp, 8
mov ecx, dword [ebp - 0x5264]
push ecx
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0
push 7
mov edx, dword [0x8d7040]
push edx
call fcn.00406596
add esp, 0xc
lea eax, [ebp - 0x2b34]
push eax
push 0x410518
push 0x410528
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x4c
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x78
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x68
call fcn.00406bbe
add esp, 4
push 0x59
call fcn.00406bbe
add esp, 4
push 0x72
call fcn.00406bbe
add esp, 4
push 0x77
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x48
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x404b29
push 0x410530
call fcn.00407c98
add esp, 4
push 0
call fcn.00407e11
push 0x51
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x38
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x45
call fcn.00406bbe
add esp, 4
push 0x6e
call fcn.00406bbe
add esp, 4
push 0x39
call fcn.00406bbe
add esp, 4
push 0x6e
call fcn.00406bbe
add esp, 4
push 0x4d
call fcn.00406bbe
add esp, 4
push 0x32
call fcn.00406bbe
add esp, 4
push 0x4a
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x404c60
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [ebp - 0x3ed0], eax
cmp dword [ebp - 0x3ed0], 0xffffffff
jne 0x404bdb
push 0x410534
call fcn.00406d66
add esp, 4
lea edx, [ebp - 0x3ec4]
push edx
mov eax, dword [ebp - 0x3ed0]
push eax
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
jne 0x404c00
push 0x410544
call fcn.00406d66
add esp, 4
mov ecx, dword [ebp - 0x374]
and ecx, 0x18
mov dword [ebp - 0x374], ecx
mov edx, dword [ebp - 0x160]
not edx
mov eax, dword [ebp - 0x374]
and eax, edx
mov dword [ebp - 0x374], eax
mov ecx, dword [ebp - 0x5370]
or ecx, 8
mov dword [ebp - 0x164], ecx
mov edx, dword [ebp - 0x164]
push edx
mov eax, dword [ebp - 0x3ed0]
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleMode]
test eax, eax
jne 0x404c59
push 0x410558
call fcn.00406d66
add esp, 4
push 0
call fcn.00407e11
push 0x51
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x62
call fcn.00406bbe
add esp, 4
push 0x37
call fcn.00406bbe
add esp, 4
push 0x79
call fcn.00406bbe
add esp, 4
push 0x55
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x44
call fcn.00406bbe
add esp, 4
push 0x35
call fcn.00406bbe
add esp, 4
push 0x43
call fcn.00406bbe
add esp, 4
push 0x76
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x404d97
push 0xfffffffffffffff6
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [ebp - 0x3ed0], eax
cmp dword [ebp - 0x3ed0], 0xffffffff
jne 0x404d12
push 0x41056c
call fcn.00406d66
add esp, 4
lea eax, [ebp - 0x3ec4]
push eax
mov ecx, dword [ebp - 0x3ed0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
jne 0x404d37
push 0x41057c
call fcn.00406d66
add esp, 4
mov edx, dword [ebp - 0x374]
and edx, 0x18
mov dword [ebp - 0x374], edx
mov eax, dword [ebp - 0x160]
not eax
mov ecx, dword [ebp - 0x374]
and ecx, eax
mov dword [ebp - 0x374], ecx
mov edx, dword [ebp - 0x160]
or edx, 8
mov dword [ebp - 0x164], edx
mov eax, dword [ebp - 0x164]
push eax
mov ecx, dword [ebp - 0x3ed0]
push ecx
call dword [sym.imp.KERNEL32.dll_SetConsoleMode]
test eax, eax
jne 0x404d90
push 0x410590
call fcn.00406d66
add esp, 4
push 0
call fcn.00407e11
push 0x6b
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x46
call fcn.00406bbe
add esp, 4
push 0x35
call fcn.00406bbe
add esp, 4
push 0x6e
call fcn.00406bbe
add esp, 4
push 0x4a
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x44
call fcn.00406bbe
add esp, 4
push 0x39
call fcn.00406bbe
add esp, 4
push 0x32
call fcn.00406bbe
add esp, 4
push 0x68
call fcn.00406bbe
add esp, 4
push 0x66
call fcn.00406bbe
add esp, 4
push 0x4f
call fcn.00406bbe
add esp, 4
push 0x70
call fcn.00406bbe
add esp, 4
push 0x63
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x404e73
call fcn.00406bdd
mov dword [0x8d69e4], eax
mov ecx, dword [0x8d69e4]
push ecx
call fcn.0040739b
add esp, 4
push 0
call fcn.00407e11
push 0x63
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x58
call fcn.00406bbe
add esp, 4
push 0x79
call fcn.00406bbe
add esp, 4
push 0x4a
call fcn.00406bbe
add esp, 4
push 0x48
call fcn.00406bbe
add esp, 4
push 0x6e
call fcn.00406bbe
add esp, 4
push 0x37
call fcn.00406bbe
add esp, 4
push 0x6d
call fcn.00406bbe
add esp, 4
push 0x51
call fcn.00406bbe
add esp, 4
push 0x36
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x404f11
push 0x4105a4
call fcn.00407c98
add esp, 4
push 0
call fcn.00407e11
push 0x69
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x46
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x7a
call fcn.00406bbe
add esp, 4
push 0x59
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x70
call fcn.00406bbe
add esp, 4
push 0x6d
call fcn.00406bbe
add esp, 4
push 0x42
call fcn.00406bbe
add esp, 4
push 0x71
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x405174
cmp dword [ebp + 8], 4
jne 0x405141
mov dword [ebp - 0x2b00], 1
jmp 0x404fc4
mov eax, dword [ebp - 0x2b00]
add eax, 1
mov dword [ebp - 0x2b00], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00407940
add esp, 4
cmp dword [ebp - 0x2b00], eax
ja 0x405009
push 0x4105a8
push 1
mov eax, dword [ebp - 0x2b00]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
call fcn.00406082
add esp, 0xc
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x405007
jmp 0x405009
jmp 0x404fb5
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.00407cc9
add esp, 4
mov edx, dword [ebp - 0x2b00]
add edx, eax
push edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push ecx
call fcn.00406192
add esp, 8
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x4105ac
push 1
push 0x8d64b8
call fcn.004064c5
add esp, 8
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4050a1
push 0x8d64b8
call fcn.00407940
add esp, 4
sub eax, 1
push eax
push 0x8d64b8
call fcn.00406192
add esp, 8
push eax
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b80
add esp, 8
lea eax, [ebp - 0x170c]
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x4105b0
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
push 0x8d64b8
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b90
add esp, 8
push 0x4105bc
push 0x8d68e0
call fcn.00407b6b
add esp, 8
mov dword [ebp - 0x5264], eax
cmp dword [ebp - 0x5264], 0
jne 0x405115
push 0
push 7
mov eax, dword [0x8d7040]
push eax
call fcn.00406596
add esp, 0xc
push 0x4105c0
push 0x4105d0
call fcn.00407c98
add esp, 8
push 1
call fcn.00407e11
mov ecx, dword [ebp - 0x5264]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b08
add esp, 8
mov eax, dword [ebp - 0x5264]
push eax
call fcn.00407ab2
add esp, 4
push 0
call fcn.00407e11
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
lea edx, [ebp - 0x2b34]
push edx
push 0x4105d4
push 0x4105e4
call fcn.00407c98
add esp, 0xc
push 1
call fcn.00407e11
push 0x68
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x35
call fcn.00406bbe
add esp, 4
push 0x4e
call fcn.00406bbe
add esp, 4
push 0x66
call fcn.00406bbe
add esp, 4
push 0x50
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x32
call fcn.00406bbe
add esp, 4
push 0x79
call fcn.00406bbe
add esp, 4
push 0x58
call fcn.00406bbe
add esp, 4
push 0x35
call fcn.00406bbe
add esp, 4
push 0x72
call fcn.00406bbe
add esp, 4
push 0x54
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
push ecx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x405286
push 0x8d6690
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b80
add esp, 8
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
push ecx
lea edx, [ebp - 0x170c]
push edx
call fcn.00407b80
add esp, 8
lea eax, [ebp - 0x170c]
push eax
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [0x8d69e4], eax
cmp dword [0x8d69e4], 0
jne 0x40526a
push 1
call fcn.00407e11
push 0
mov ecx, dword [0x8d69e4]
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x2b00], eax
push 0
call fcn.00407e11
push 0x6b
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x50
call fcn.00406bbe
add esp, 4
push 0x38
call fcn.00406bbe
add esp, 4
push 0x43
call fcn.00406bbe
add esp, 4
push 0x76
call fcn.00406bbe
add esp, 4
push 0x45
call fcn.00406bbe
add esp, 4
push 0x36
call fcn.00406bbe
add esp, 4
push 0x32
call fcn.00406bbe
add esp, 4
push 0x75
call fcn.00406bbe
add esp, 4
push 0x54
call fcn.00406bbe
add esp, 4
push 0x73
call fcn.00406bbe
add esp, 4
push 0x50
call fcn.00406bbe
add esp, 4
push 0x34
call fcn.00406bbe
add esp, 4
push 0x32
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4053c0
push 0x8d6694
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
lea edx, [ebp - 0x170c]
push edx
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [0x8d69e4], eax
cmp dword [0x8d69e4], 0
jne 0x40538a
push 1
call fcn.00407e11
push 1
mov eax, dword [0x8d69e4]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x2b00], eax
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x8d69e4]
push ecx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov dword [ebp - 0x2b00], eax
push 0
call fcn.00407e11
push 0x67
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x38
call fcn.00406bbe
add esp, 4
push 0x56
call fcn.00406bbe
add esp, 4
push 0x33
call fcn.00406bbe
add esp, 4
push 0x6b
call fcn.00406bbe
add esp, 4
push 0x4f
call fcn.00406bbe
add esp, 4
push 0x77
call fcn.00406bbe
add esp, 4
push 0x39
call fcn.00406bbe
add esp, 4
push 0x6e
call fcn.00406bbe
add esp, 4
push 0x58
call fcn.00406bbe
add esp, 4
push 0x7a
call fcn.00406bbe
add esp, 4
push 0x31
call fcn.00406bbe
add esp, 4
push 0x37
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4054db
push 0x8d6698
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
push eax
lea ecx, [ebp - 0x170c]
push ecx
call fcn.00407b80
add esp, 8
lea edx, [ebp - 0x170c]
push edx
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
mov dword [0x8d69e4], eax
cmp dword [0x8d69e4], 0
jne 0x4054b6
push 1
call fcn.00407e11
push 0
push 0xf060
push 0x112
mov eax, dword [0x8d69e4]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov dword [ebp - 0x2b00], eax
push 0
call fcn.00407e11
push 0x69
call fcn.00405fa4
add esp, 4
push eax
push 0x8d64b8
call fcn.00407b80
add esp, 8
push 0x39
call fcn.00406bbe
add esp, 4
push 0x64
call fcn.00406bbe
add esp, 4
push 0x43
call fcn.00406bbe
add esp, 4
push 0x78
call fcn.00406bbe
add esp, 4
push 0x5a
call fcn.00406bbe
add esp, 4
push 0x35
call fcn.00406bbe
add esp, 4
push 0x53
call fcn.00406bbe
add esp, 4
push 0x6a
call fcn.00406bbe
add esp, 4
push 0x48
call fcn.00406bbe
add esp, 4
push 0x8d64b8
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x4055a5
call fcn.00406bdd
mov dword [0x8d69e4], eax
push 1
mov eax, dword [0x8d69e4]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov dword [ebp - 0x2b00], eax
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x8d69e4]
push ecx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov dword [ebp - 0x2b00], eax
push 0
call fcn.00407e11
push 0x68
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x36c]
push edx
call fcn.00407b80
add esp, 8
push 0x65
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x36c]
push eax
call fcn.00407b90
add esp, 8
push 0x6c
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x36c]
push ecx
call fcn.00407b90
add esp, 8
push 0x70
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x36c]
push edx
call fcn.00407b90
add esp, 8
lea eax, [ebp - 0x36c]
push eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
push edx
call fcn.00406311
add esp, 4
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x405a5b
push 0
push 7
mov eax, dword [0x8d7040]
push eax
call fcn.00406596
add esp, 0xc
push 0x42
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5688]
push ecx
call fcn.00407b80
add esp, 8
push 0x72
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5688]
push edx
call fcn.00407b90
add esp, 8
push 0x61
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5688]
push eax
call fcn.00407b90
add esp, 8
push 0x6e
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5688]
push ecx
call fcn.00407b90
add esp, 8
push 0x64
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5688]
push edx
call fcn.00407b90
add esp, 8
push 0x6f
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5688]
push eax
call fcn.00407b90
add esp, 8
push 0x6e
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5688]
push ecx
call fcn.00407b90
add esp, 8
push 0x20
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5688]
push edx
call fcn.00407b90
add esp, 8
push 0x44
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5688]
push eax
call fcn.00407b90
add esp, 8
push 0x61
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5688]
push ecx
call fcn.00407b90
add esp, 8
push 0x72
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5688]
push edx
call fcn.00407b90
add esp, 8
push 0x67
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5688]
push eax
call fcn.00407b90
add esp, 8
push 0x6f
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5688]
push ecx
call fcn.00407b90
add esp, 8
push 0x70
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5584]
push edx
call fcn.00407b80
add esp, 8
push 0x61
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5584]
push eax
call fcn.00407b90
add esp, 8
push 0x75
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5584]
push ecx
call fcn.00407b90
add esp, 8
push 0x73
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5584]
push edx
call fcn.00407b90
add esp, 8
push 0x65
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5584]
push eax
call fcn.00407b90
add esp, 8
push 0x62
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5480]
push ecx
call fcn.00407b80
add esp, 8
push 0x72
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5480]
push edx
call fcn.00407b90
add esp, 8
push 0x61
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5480]
push eax
call fcn.00407b90
add esp, 8
push 0x6e
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5480]
push ecx
call fcn.00407b90
add esp, 8
push 0x64
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5480]
push edx
call fcn.00407b90
add esp, 8
push 0x6f
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5480]
push eax
call fcn.00407b90
add esp, 8
push 0x6e
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5480]
push ecx
call fcn.00407b90
add esp, 8
push 0x40
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5480]
push edx
call fcn.00407b90
add esp, 8
push 0x62
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5480]
push eax
call fcn.00407b90
add esp, 8
push 0x64
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5480]
push ecx
call fcn.00407b90
add esp, 8
push 0x61
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5480]
push edx
call fcn.00407b90
add esp, 8
push 0x72
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5480]
push eax
call fcn.00407b90
add esp, 8
push 0x67
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5480]
push ecx
call fcn.00407b90
add esp, 8
push 0x6f
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5480]
push edx
call fcn.00407b90
add esp, 8
push 0x2e
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5480]
push eax
call fcn.00407b90
add esp, 8
push 0x63
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5480]
push ecx
call fcn.00407b90
add esp, 8
push 0x6f
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5480]
push edx
call fcn.00407b90
add esp, 8
push 0x6d
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5480]
push eax
call fcn.00407b90
add esp, 8
lea ecx, [ebp - 0x5688]
push ecx
call fcn.00407c98
add esp, 4
push 0x20
call fcn.00405fa4
add esp, 4
push eax
call fcn.00407c98
add esp, 4
lea edx, [ebp - 0x5480]
push edx
call fcn.00407c98
add esp, 4
push 0xd
call fcn.00405fa4
add esp, 4
push eax
call fcn.00407c98
add esp, 4
push 0xa
call fcn.00405fa4
add esp, 4
push eax
call fcn.00407c98
add esp, 4
lea eax, [ebp - 0x5584]
push eax
call fcn.0040751e
add esp, 4
push 0
call fcn.00407e11
lea ecx, [ebp - 0x37c]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
push eax
call fcn.00406311
add esp, 4
push eax
call fcn.00407d60
add esp, 8
test eax, eax
jne 0x405eaa
push 0
push 7
mov ecx, dword [0x8d7040]
push ecx
call fcn.00406596
add esp, 0xc
push 0x42
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5994]
push edx
call fcn.00407b80
add esp, 8
push 0x72
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5994]
push eax
call fcn.00407b90
add esp, 8
push 0x61
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5994]
push ecx
call fcn.00407b90
add esp, 8
push 0x6e
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5994]
push edx
call fcn.00407b90
add esp, 8
push 0x64
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5994]
push eax
call fcn.00407b90
add esp, 8
push 0x6f
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5994]
push ecx
call fcn.00407b90
add esp, 8
push 0x6e
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5994]
push edx
call fcn.00407b90
add esp, 8
push 0x20
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5994]
push eax
call fcn.00407b90
add esp, 8
push 0x44
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5994]
push ecx
call fcn.00407b90
add esp, 8
push 0x61
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5994]
push edx
call fcn.00407b90
add esp, 8
push 0x72
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5994]
push eax
call fcn.00407b90
add esp, 8
push 0x67
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5994]
push ecx
call fcn.00407b90
add esp, 8
push 0x6f
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5994]
push edx
call fcn.00407b90
add esp, 8
push 0x70
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5890]
push eax
call fcn.00407b80
add esp, 8
push 0x61
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5890]
push ecx
call fcn.00407b90
add esp, 8
push 0x75
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x5890]
push edx
call fcn.00407b90
add esp, 8
push 0x73
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x5890]
push eax
call fcn.00407b90
add esp, 8
push 0x65
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x5890]
push ecx
call fcn.00407b90
add esp, 8
push 0x62
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x578c]
push edx
call fcn.00407b80
add esp, 8
push 0x72
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x578c]
push eax
call fcn.00407b90
add esp, 8
push 0x61
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x578c]
push ecx
call fcn.00407b90
add esp, 8
push 0x6e
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x578c]
push edx
call fcn.00407b90
add esp, 8
push 0x64
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x578c]
push eax
call fcn.00407b90
add esp, 8
push 0x6f
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x578c]
push ecx
call fcn.00407b90
add esp, 8
push 0x6e
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x578c]
push edx
call fcn.00407b90
add esp, 8
push 0x40
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x578c]
push eax
call fcn.00407b90
add esp, 8
push 0x62
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x578c]
push ecx
call fcn.00407b90
add esp, 8
push 0x64
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x578c]
push edx
call fcn.00407b90
add esp, 8
push 0x61
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x578c]
push eax
call fcn.00407b90
add esp, 8
push 0x72
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x578c]
push ecx
call fcn.00407b90
add esp, 8
push 0x67
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x578c]
push edx
call fcn.00407b90
add esp, 8
push 0x6f
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x578c]
push eax
call fcn.00407b90
add esp, 8
push 0x2e
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x578c]
push ecx
call fcn.00407b90
add esp, 8
push 0x63
call fcn.00405fa4
add esp, 4
push eax
lea edx, [ebp - 0x578c]
push edx
call fcn.00407b90
add esp, 8
push 0x6f
call fcn.00405fa4
add esp, 4
push eax
lea eax, [ebp - 0x578c]
push eax
call fcn.00407b90
add esp, 8
push 0x6d
call fcn.00405fa4
add esp, 4
push eax
lea ecx, [ebp - 0x578c]
push ecx
call fcn.00407b90
add esp, 8
lea edx, [ebp - 0x5994]
push edx
call fcn.00407c98
add esp, 4
push 0x20
call fcn.00405fa4
add esp, 4
push eax
call fcn.00407c98
add esp, 4
lea eax, [ebp - 0x578c]
push eax
call fcn.00407c98
add esp, 4
push 0xd
call fcn.00405fa4
add esp, 4
push eax
call fcn.00407c98
add esp, 4
push 0xa
call fcn.00405fa4
add esp, 4
push eax
call fcn.00407c98
add esp, 4
lea ecx, [ebp - 0x5890]
push ecx
call fcn.0040751e
add esp, 4
push 0
call fcn.00407e11
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret