Function at 0x406148
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1498
call fcn.00408a30
push edi
mov al, byte [0x41906c]
mov byte [ebp - 0x34], al
mov ecx, 0xc
xor eax, eax
lea edi, [ebp - 0x33]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov cl, byte [0x419070]
mov byte [ebp - 0x1454], cl
xor edx, edx
mov dword [ebp - 0x1453], edx
mov dword [ebp - 0x1494], 0
mov al, byte [0x419074]
mov byte [ebp - 0x48], al
xor ecx, ecx
mov dword [ebp - 0x47], ecx
mov dword [ebp - 0x43], ecx
mov dword [ebp - 0x3f], ecx
mov dword [ebp - 0x3b], ecx
mov word [ebp - 0x37], cx
mov byte [ebp - 0x35], cl
mov dword [ebp - 0x148c], 0
mov dword [ebp - 0x144c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dl, byte [0x419078]
mov byte [ebp - 0x1448], dl
mov ecx, 0x18
xor eax, eax
lea edi, [ebp - 0x1447]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x41907c]
mov byte [ebp - 0x1488], al
mov ecx, 0xc
xor eax, eax
lea edi, [ebp - 0x1487]
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x1490], 0
mov dword [ebp - 0x4c], 0
mov byte [ebp - 0x1498], 0
mov cl, byte [0x419080]
mov byte [ebp - 0x13e4], cl
mov ecx, 0x4e1
xor eax, eax
lea edi, [ebp - 0x13e3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x63
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x1454]
push edx
call fcn.00408790
add esp, 8
push 0x6c
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x1454]
push eax
call fcn.004087a0
add esp, 8
push 0x73
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x1454]
push ecx
call fcn.004087a0
add esp, 8
push 0x57
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.00408790
add esp, 8
push 0x72
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004087a0
add esp, 8
push 0x6f
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.004087a0
add esp, 8
push 0x6e
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.004087a0
add esp, 8
push 0x67
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004087a0
add esp, 8
push 0x20
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.004087a0
add esp, 8
push 0x50
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.004087a0
add esp, 8
push 0x61
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004087a0
add esp, 8
push 0x73
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.004087a0
add esp, 8
push 0x73
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.004087a0
add esp, 8
push 0x77
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004087a0
add esp, 8
push 0x6f
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.004087a0
add esp, 8
push 0x72
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x34]
push edx
call fcn.004087a0
add esp, 8
push 0x64
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004087a0
add esp, 8
push 0x50
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x1488]
push ecx
call fcn.00408790
add esp, 8
push 0x72
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x1488]
push edx
call fcn.004087a0
add esp, 8
push 0x6f
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x1488]
push eax
call fcn.004087a0
add esp, 8
push 0x74
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x1488]
push ecx
call fcn.004087a0
add esp, 8
push 0x65
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x1488]
push edx
call fcn.004087a0
add esp, 8
push 0x63
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x1488]
push eax
call fcn.004087a0
add esp, 8
push 0x74
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x1488]
push ecx
call fcn.004087a0
add esp, 8
push 0x65
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x1488]
push edx
call fcn.004087a0
add esp, 8
push 0x64
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x1488]
push eax
call fcn.004087a0
add esp, 8
push 0x20
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x1488]
push ecx
call fcn.004087a0
add esp, 8
push 0x66
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x1488]
push edx
call fcn.004087a0
add esp, 8
push 0x69
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x1488]
push eax
call fcn.004087a0
add esp, 8
push 0x6c
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x1488]
push ecx
call fcn.004087a0
add esp, 8
push 0x65
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x1488]
push edx
call fcn.004087a0
add esp, 8
push 0x2e
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x1488]
push eax
call fcn.004087a0
add esp, 8
push 0x20
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x1488]
push ecx
call fcn.004087a0
add esp, 8
push 0x45
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x1488]
push edx
call fcn.004087a0
add esp, 8
push 0x6e
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x1488]
push eax
call fcn.004087a0
add esp, 8
push 0x74
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x1488]
push ecx
call fcn.004087a0
add esp, 8
push 0x65
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x1488]
push edx
call fcn.004087a0
add esp, 8
push 0x72
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x1488]
push eax
call fcn.004087a0
add esp, 8
push 0x20
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x1488]
push ecx
call fcn.004087a0
add esp, 8
push 0x50
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x1488]
push edx
call fcn.004087a0
add esp, 8
push 0x61
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x1488]
push eax
call fcn.004087a0
add esp, 8
push 0x73
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x1488]
push ecx
call fcn.004087a0
add esp, 8
push 0x73
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x1488]
push edx
call fcn.004087a0
add esp, 8
push 0x77
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x1488]
push eax
call fcn.004087a0
add esp, 8
push 0x6f
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x1488]
push ecx
call fcn.004087a0
add esp, 8
push 0x72
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x1488]
push edx
call fcn.004087a0
add esp, 8
push 0x64
call fcn.00405c8b
add esp, 4
push eax
lea eax, [ebp - 0x1488]
push eax
call fcn.004087a0
add esp, 8
push 0x3a
call fcn.00405c8b
add esp, 4
push eax
lea ecx, [ebp - 0x1488]
push ecx
call fcn.004087a0
add esp, 8
push 0x20
call fcn.00405c8b
add esp, 4
push eax
lea edx, [ebp - 0x1488]
push edx
call fcn.004087a0
add esp, 8
mov dword [ebp - 0x58], 1
jmp 0x406727
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x406b97
lea ecx, [ebp - 0x1454]
push ecx
call fcn.00408669
add esp, 4
push 0x411390
lea edx, [ebp - 0x48]
push edx
call fcn.00408790
add esp, 8
mov dword [ebp - 0x50], 8
mov dword [ebp - 0x5c], 0x28
mov eax, dword [ebp - 0x50]
cdq
sub eax, edx
sar eax, 1
mov ecx, 0xc
sub ecx, eax
add ecx, 1
mov dword [ebp - 0x148c], ecx
mov eax, dword [ebp - 0x5c]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x28
sub edx, eax
mov dword [ebp - 0x144c], edx
push 1
mov eax, dword [ebp - 0x144c]
push eax
mov ecx, dword [ebp - 0x148c]
push ecx
mov edx, dword [0xf10d40]
push edx
call fcn.0040802d
add esp, 0x10
push 1
push 9
lea eax, [ebp - 0x48]
push eax
call fcn.00405d4b
add esp, 0xc
push eax
push 0x4113a4
call fcn.00408c76
add esp, 8
push 1
mov ecx, dword [ebp - 0x144c]
push ecx
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x148c]
lea ecx, [eax + edx - 1]
push ecx
mov edx, dword [0xf10d40]
push edx
call fcn.0040802d
add esp, 0x10
push 1
push 0xf
lea eax, [ebp - 0x48]
push eax
call fcn.00405d4b
add esp, 0xc
push eax
push 0x4113a8
call fcn.00408c76
add esp, 8
mov dword [ebp - 0x1490], 1
jmp 0x406828
mov ecx, dword [ebp - 0x1490]
add ecx, 1
mov dword [ebp - 0x1490], ecx
mov edx, dword [ebp - 0x5c]
sub edx, 1
cmp dword [ebp - 0x1490], edx
jge 0x4068cc
push 1
mov eax, dword [ebp - 0x144c]
add eax, dword [ebp - 0x1490]
push eax
mov ecx, dword [ebp - 0x148c]
push ecx
mov edx, dword [0xf10d40]
push edx
call fcn.0040802d
add esp, 0x10
push 1
push 0xa
lea eax, [ebp - 0x48]
push eax
call fcn.00405d4b
add esp, 0xc
push eax
push 0x4113ac
call fcn.00408c76
add esp, 8
push 1
mov ecx, dword [ebp - 0x144c]
add ecx, dword [ebp - 0x1490]
push ecx
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x148c]
lea ecx, [eax + edx - 1]
push ecx
mov edx, dword [0xf10d40]
push edx
call fcn.0040802d
add esp, 0x10
push 1
push 0xa
lea eax, [ebp - 0x48]
push eax
call fcn.00405d4b
add esp, 0xc
push eax
push 0x4113b0
call fcn.00408c76
add esp, 8
jmp 0x406819
push 1
mov ecx, dword [ebp - 0x144c]
add ecx, dword [ebp - 0x1490]
push ecx
mov edx, dword [ebp - 0x148c]
push edx
mov eax, dword [0xf10d40]
push eax
call fcn.0040802d
add esp, 0x10
push 1
push 0xb
lea ecx, [ebp - 0x48]
push ecx
call fcn.00405d4b
add esp, 0xc
push eax
push 0x4113b4
call fcn.00408c76
add esp, 8
push 1
mov edx, dword [ebp - 0x144c]
add edx, dword [ebp - 0x1490]
push edx
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x148c]
lea edx, [ecx + eax - 1]
push edx
mov eax, dword [0xf10d40]
push eax
call fcn.0040802d
add esp, 0x10
push 1
push 0xd
lea ecx, [ebp - 0x48]
push ecx
call fcn.00405d4b
add esp, 0xc
push eax
push 0x4113b8
call fcn.00408c76
add esp, 8
mov dword [ebp - 0x1490], 1
jmp 0x406972
mov edx, dword [ebp - 0x1490]
add edx, 1
mov dword [ebp - 0x1490], edx
mov eax, dword [ebp - 0x50]
sub eax, 1
cmp dword [ebp - 0x1490], eax
jge 0x406a14
push 1
mov ecx, dword [ebp - 0x144c]
push ecx
mov edx, dword [ebp - 0x148c]
add edx, dword [ebp - 0x1490]
push edx
mov eax, dword [0xf10d40]
push eax
call fcn.0040802d
add esp, 0x10
push 1
push 0xc
lea ecx, [ebp - 0x48]
push ecx
call fcn.00405d4b
add esp, 0xc
push eax
push 0x4113bc
call fcn.00408c76
add esp, 8
push 1
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x144c]
lea ecx, [eax + edx - 1]
push ecx
mov edx, dword [ebp - 0x148c]
add edx, dword [ebp - 0x1490]
push edx
mov eax, dword [0xf10d40]
push eax
call fcn.0040802d
add esp, 0x10
push 1
push 0xc
lea ecx, [ebp - 0x48]
push ecx
call fcn.00405d4b
add esp, 0xc
push eax
push 0x4113c0
call fcn.00408c76
add esp, 8
jmp 0x406963
push 1
push 0x18
push 0xb
mov edx, dword [0xf10d40]
push edx
call fcn.0040802d
add esp, 0x10
lea eax, [ebp - 0x1488]
push eax
call fcn.00408c76
add esp, 4
push 1
push 0x18
push 0xd
mov ecx, dword [0xf10d40]
push ecx
call fcn.0040802d
add esp, 0x10
push 0x4113c4
call fcn.00408c76
add esp, 4
push 0x419084
lea edx, [ebp - 0x13e4]
push edx
call fcn.00408790
add esp, 8
mov byte [ebp - 0x1498], 0
mov dword [ebp - 0x4c], 0
movsx eax, byte [ebp - 0x1498]
cmp eax, 0xd
je 0x406b3d
call fcn.0040faba
mov byte [ebp - 0x1498], al
movsx ecx, byte [ebp - 0x1498]
test ecx, ecx
je 0x406b38
movsx edx, byte [ebp - 0x1498]
cmp edx, 8
jne 0x406aec
cmp dword [ebp - 0x4c], 0
jle 0x406aea
push 8
call fcn.0040fa76
add esp, 4
push 0x20
call fcn.0040fa76
add esp, 4
push 8
call fcn.0040fa76
add esp, 4
mov eax, dword [ebp - 0x4c]
sub eax, 1
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
mov byte [ebp + ecx - 0x13e4], 0
jmp 0x406b38
movsx edx, byte [ebp - 0x1498]
cmp edx, 0xd
je 0x406b38
cmp dword [ebp - 0x4c], 0
jne 0x406b12
push 0x419088
lea eax, [ebp - 0x13e4]
push eax
call fcn.00408790
add esp, 8
mov ecx, dword [ebp - 0x4c]
mov dl, byte [ebp - 0x1498]
mov byte [ebp + ecx - 0x13e4], dl
push 0x4113cc
call fcn.00408c76
add esp, 4
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
jmp 0x406a7c
lea ecx, [ebp - 0x13e4]
push ecx
call fcn.00405f75
add esp, 4
push eax
lea edx, [ebp - 0x1448]
push edx
call fcn.00408790
add esp, 8
mov dword [ebp - 0x1494], 0
push 0x418b54
lea eax, [ebp - 0x1448]
push eax
call fcn.00408880
add esp, 8
mov dword [ebp - 0x1494], eax
cmp dword [ebp - 0x1494], 0
jne 0x406b92
mov dword [ebp - 0x54], 1
jmp 0x406b97
jmp 0x40671e
lea ecx, [ebp - 0x1454]
push ecx
call fcn.00408669
add esp, 4
cmp dword [ebp - 0x54], 0
jne 0x406bf8
push 0xd
lea edx, [ebp - 0x34]
push edx
mov eax, dword [0xf10d40]
push eax
call fcn.00407d4f
add esp, 0xc
push 0x7d0
call fcn.00408088
add esp, 4
lea ecx, [ebp - 0x1454]
push ecx
call fcn.00408669
add esp, 4
push 1
push 1
push 1
mov edx, dword [0xf10d40]
push edx
call fcn.0040802d
add esp, 0x10
push 1
call fcn.00408ba1
push 1
push 1
push 1
mov eax, dword [0xf10d40]
push eax
call fcn.0040802d
add esp, 0x10
pop edi
mov esp, ebp
pop ebp
ret