Function at 0x403d0e
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd80
push esi
push edi
mov al, byte [0xf0f7e8]
mov byte [ebp - 0x7f0], al
xor ecx, ecx
mov dword [ebp - 0x7ef], ecx
mov dl, byte [0xf0f7ec]
mov byte [ebp - 0xc60], dl
mov ecx, 0x18
xor eax, eax
lea edi, [ebp - 0xc5f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0f7f0]
mov byte [ebp - 0x6c8], al
xor ecx, ecx
mov dword [ebp - 0x6c7], ecx
mov dword [ebp - 0x6c3], ecx
mov dword [ebp - 0x6bf], ecx
mov dword [ebp - 0x6bb], ecx
mov word [ebp - 0x6b7], cx
mov byte [ebp - 0x6b5], cl
mov dl, byte [0xf0f7f4]
mov byte [ebp - 0x5a0], dl
xor eax, eax
mov dword [ebp - 0x59f], eax
mov dword [ebp - 0x59b], eax
mov dword [ebp - 0x597], eax
mov dword [ebp - 0x593], eax
mov word [ebp - 0x58f], ax
mov byte [ebp - 0x58d], al
mov dword [ebp - 0x6ac], 0
mov dword [ebp - 0x588], 0
mov dword [ebp - 0x584], 0
mov dword [ebp - 0x6b4], 0
mov cl, byte [0xf0f7f8]
mov byte [ebp - 0x578], cl
mov ecx, 0xf9
xor eax, eax
lea edi, [ebp - 0x577]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0f7fc]
mov byte [ebp - 0x7dc], dl
xor eax, eax
mov dword [ebp - 0x7db], eax
mov dword [ebp - 0x7d7], eax
mov byte [ebp - 0x7d3], al
mov cl, byte [0xf0f800]
mov byte [ebp - 0x800], cl
xor edx, edx
mov dword [ebp - 0x7ff], edx
mov dword [ebp - 0x7fb], edx
mov byte [ebp - 0x7f7], dl
mov dword [ebp - 0x580], 0
mov dword [ebp - 0x6a8], 0
mov al, byte [0xf0f804]
mov byte [ebp - 0xd64], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0xd63]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x6b0], 0
mov cl, byte [0xf0f808]
mov byte [ebp - 0x6a4], cl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x6a3]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x7d0], 0
mov dword [ebp - 0x7e8], 0
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0xbfc], 0
mov dword [ebp - 0x58c], 0
mov dword [ebp - 0x808], 0xfffffffe
mov dl, byte [0xf0f80c]
mov byte [ebp - 0x7cc], dl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x7cb]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0xf0f810]
mov byte [ebp - 0xbf8], al
mov ecx, 0xf9
xor eax, eax
lea edi, [ebp - 0xbf7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x810], 0
mov dword [ebp - 0x7e4], 0xdf6
mov dword [ebp - 0x7e0], 0
mov dword [ebp - 0x7f4], 0
mov cl, byte [0xf0f814]
mov byte [ebp - 0x190], cl
mov ecx, 0x18
xor eax, eax
lea edi, [ebp - 0x18f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0xf0f818]
mov byte [ebp - 0x12c], dl
mov ecx, 0x4a
xor eax, eax
lea edi, [ebp - 0x12b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x63
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x7f0]
push eax
call fcn.004088e0
add esp, 8
push 0x6c
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x7f0]
push ecx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x7f0]
push edx
call fcn.004088f0
add esp, 8
call fcn.00403cb8
mov dword [ebp - 0x588], 0
mov dword [ebp - 0x6ac], 2
mov dword [0xf0f310], 0x23
mov eax, dword [0xf0f310]
imul eax, eax, 3
mov dword [0xf0f310], eax
mov ecx, dword [0xf0f310]
add ecx, 1
mov dword [0xf0f310], ecx
push str.safe
lea edx, [ebp - 0xc60]
push edx
call fcn.004088e0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x6c8]
push eax
call fcn.004088e0
add esp, 8
push 0x66
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x6c8]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x6c8]
push edx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x6c8]
push eax
call fcn.004088f0
add esp, 8
push 0x78
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x6c8]
push ecx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x6c8]
push edx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x6c8]
push eax
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x6c8]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x6c8]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x5a0]
push eax
call fcn.004088e0
add esp, 8
push 0x64
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x5a0]
push ecx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x5a0]
push edx
call fcn.004088f0
add esp, 8
push 0x6c
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x5a0]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x5a0]
push ecx
call fcn.004088f0
add esp, 8
mov dword [ebp - 0x7e4], 0xd9d
push 0x43
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x190]
push edx
call fcn.004088e0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x190]
push ecx
call fcn.004088f0
add esp, 8
push 0x61
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x190]
push edx
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x190]
push ecx
call fcn.004088f0
add esp, 8
push 0x64
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x190]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004088f0
add esp, 8
push 0x77
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x190]
push ecx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x190]
push edx
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004088f0
add esp, 8
push 0x68
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x190]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x190]
push edx
call fcn.004088f0
add esp, 8
push 0x55
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x190]
push ecx
call fcn.004088f0
add esp, 8
push 0x6c
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x190]
push edx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004088f0
add esp, 8
push 0x63
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x190]
push ecx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x190]
push edx
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x190]
push ecx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x190]
push edx
call fcn.004088f0
add esp, 8
push 0x64
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x190]
push ecx
call fcn.004088f0
add esp, 8
push 0x43
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x190]
push edx
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004088f0
add esp, 8
push 0x6d
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x190]
push ecx
call fcn.004088f0
add esp, 8
push 0x70
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x190]
push edx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004088f0
add esp, 8
push 0x6c
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x190]
push ecx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x190]
push edx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x190]
push eax
call fcn.004088f0
add esp, 8
mov ecx, dword [ebp - 0x7e4]
add ecx, 1
mov dword [ebp - 0x7e4], ecx
mov dword [ebp - 0x7e4], 0x79d1
push 0x59
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088e0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x75
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6d
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x61
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x79
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x4e
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x4f
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x54
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x64
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x62
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x75
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x68
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x49
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x76
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x62
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6c
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x45
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x58
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x45
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x77
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x68
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x68
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x66
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x76
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x66
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x68
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x63
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6d
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x70
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6c
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x2e
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0xd
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0xa
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0xd
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0xa
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x52
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x75
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x70
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x67
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x61
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6d
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x61
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6d
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x61
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6c
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x63
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6c
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x77
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x64
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x77
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x3f
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0xd
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0xa
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0xd
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0xa
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x4d
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x61
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6b
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x75
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x79
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x75
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x54
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x52
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x55
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x53
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x54
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x68
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x75
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x63
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x66
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x68
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x66
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6c
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x62
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x66
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x70
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x75
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x68
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x67
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x59
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x45
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x53
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x410174
push 0xf089fc
push str._s_s
lea edx, [ebp - 0x7cc]
push edx
call fcn.00408a54
add esp, 0x10
push 0x410180
push 1
call fcn.004074d0
add esp, 4
push eax
call fcn.00408839
add esp, 8
mov dword [ebp - 0x804], eax
cmp dword [ebp - 0x804], 0
jne 0x405809
push 1
call fcn.00408bdc
push 2
push 0
mov eax, dword [ebp - 0x804]
push eax
call fcn.0040878d
add esp, 0xc
mov ecx, dword [ebp - 0x804]
push ecx
call fcn.00408487
add esp, 4
mov esi, eax
push 0xf0f2d0
call fcn.0040884c
add esp, 4
sub esi, eax
mov dword [0xf0f2e0], esi
mov edx, dword [ebp - 0x7e4]
imul edx, edx, 3
mov dword [ebp - 0x7e4], edx
push 2
mov eax, dword [0xf0f2e0]
neg eax
mov ecx, dword [0xf08b08]
lea edx, [eax + ecx - 0xc]
push edx
mov eax, dword [ebp - 0x804]
push eax
call fcn.0040878d
add esp, 0xc
mov ecx, dword [ebp - 0x804]
push ecx
push 0xd
lea edx, [ebp - 0x6a4]
push edx
call fcn.00408430
add esp, 0xc
mov eax, dword [ebp - 0x808]
push eax
lea ecx, [ebp - 0x6a4]
push ecx
call fcn.0040705a
add esp, 8
push eax
call fcn.0040721a
add esp, 4
mov dword [ebp - 0x6b0], eax
push 2
mov edx, dword [ebp - 0x6b0]
mov eax, dword [0xf0f2e0]
lea ecx, [eax + edx + 0xc]
imul ecx, ecx, 0xffffffff
add ecx, dword [0xf08b08]
push ecx
mov edx, dword [ebp - 0x804]
push edx
call fcn.0040878d
add esp, 0xc
mov eax, dword [ebp - 0x804]
push eax
push 6
lea ecx, [ebp - 0x6a4]
push ecx
call fcn.00408430
add esp, 0xc
mov edx, dword [ebp - 0x808]
push edx
lea eax, [ebp - 0x6a4]
push eax
call fcn.0040705a
add esp, 8
push eax
call fcn.0040721a
add esp, 4
mov dword [0xf08b04], eax
mov ecx, dword [ebp - 0x804]
push ecx
push 6
lea edx, [ebp - 0x6a4]
push edx
call fcn.00408430
add esp, 0xc
mov eax, dword [ebp - 0x808]
push eax
lea ecx, [ebp - 0x6a4]
push ecx
call fcn.0040705a
add esp, 8
push eax
lea edx, [ebp - 0x7dc]
push edx
call fcn.004088e0
add esp, 8
mov dword [ebp - 0x7f4], 0
mov dword [ebp - 0x810], 0
push 0xf0f280
lea eax, [ebp - 0x7dc]
push eax
call fcn.004089d0
add esp, 8
mov dword [ebp - 0x810], eax
cmp dword [ebp - 0x810], 0
jne 0x405996
mov dword [ebp - 0x7f4], 1
push 0xf0f2a8
lea ecx, [ebp - 0x7dc]
push ecx
call fcn.004089d0
add esp, 8
mov dword [ebp - 0x810], eax
cmp dword [ebp - 0x810], 0
jne 0x4059c3
mov dword [ebp - 0x7f4], 1
cmp dword [ebp - 0x7f4], 0
jne 0x406465
push 0x54
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088e0
add esp, 8
push 0x68
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x70
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x67
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x61
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6d
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x77
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x61
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6d
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x61
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x64
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x77
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x68
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x61
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x55
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6c
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x63
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x64
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x63
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6d
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x70
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x6c
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x2e
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0xd
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0xa
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x50
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6c
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x61
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x62
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x75
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x79
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x68
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x50
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x52
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x4f
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x76
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6e
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x64
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x73
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x69
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x62
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x75
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x74
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x65
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x79
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x6f
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x75
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x72
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x20
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x45
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0x58
call fcn.004074ec
add esp, 4
push eax
lea eax, [ebp - 0x12c]
push eax
call fcn.004088f0
add esp, 8
push 0x45
call fcn.004074ec
add esp, 4
push eax
lea ecx, [ebp - 0x12c]
push ecx
call fcn.004088f0
add esp, 8
push 0x2e
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x12c]
push edx
call fcn.004088f0
add esp, 8
push 0
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x12c]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 1
call fcn.00408bdc
mov edx, dword [ebp - 0x7e4]
add edx, 0x1163
mov dword [ebp - 0x7e4], edx
push 0x410184
push 0xf0f2f4
call fcn.004088e0
add esp, 8
mov dword [ebp - 0x810], 0
mov dword [0xf0f238], 0
push 0xf0f81c
push 0xf0f2e4
call fcn.004088e0
add esp, 8
push 0xf0f820
lea eax, [ebp - 0x800]
push eax
call fcn.004088e0
add esp, 8
push 0xf0f2f4
call fcn.00408ab0
add esp, 4
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x7e8], 1
jmp 0x4064f1
mov ecx, dword [ebp - 0x7e8]
add ecx, 1
mov dword [ebp - 0x7e8], ecx
mov edx, dword [ebp - 0x580]
add edx, 1
cmp dword [ebp - 0x7e8], edx
jge 0x406568
push 1
mov eax, dword [ebp - 0x7e8]
push eax
push 0xf0f2f4
call fcn.004075ac
add esp, 0xc
push eax
call fcn.00407548
add esp, 4
push eax
call fcn.00406e30
add esp, 4
mov dword [ebp - 0x588], eax
mov cl, byte [ebp - 0x588]
push ecx
call fcn.004074ec
add esp, 4
push eax
lea edx, [ebp - 0x800]
push edx
call fcn.004088e0
add esp, 8
lea eax, [ebp - 0x800]
push eax
push 0xf0f2e4
call fcn.004088f0
add esp, 8
jmp 0x4064e2
push 0xf0f2e4
call fcn.004077cf
add esp, 4
push eax
push 0xf0f300
call fcn.004088e0
add esp, 8
push 0xf0f300
call fcn.00408ab0
add esp, 4
mov dword [ebp - 0x580], eax
call fcn.00407a43
mov dword [0xf0f238], 0
mov ecx, dword [ebp - 0x7e4]
shl ecx, 1
mov dword [ebp - 0x7e4], ecx
mov edx, dword [ebp - 0x804]
push edx
push 2
lea eax, [ebp - 0x6a4]
push eax
call fcn.00408430
add esp, 0xc
mov ecx, dword [ebp - 0x808]
push ecx
lea edx, [ebp - 0x6a4]
push edx
call fcn.0040705a
add esp, 8
push eax
call fcn.00407548
add esp, 4
mov dword [0xf08b0c], eax
mov eax, dword [ebp - 0x804]
push eax
push 2
lea ecx, [ebp - 0x6a4]
push ecx
call fcn.00408430
add esp, 0xc
mov edx, dword [ebp - 0x808]
push edx
lea eax, [ebp - 0x6a4]
push eax
call fcn.0040705a
add esp, 8
push eax
call fcn.00407548
add esp, 4
mov dword [0xf08b10], eax
mov dword [ebp - 0x7d0], 0
jmp 0x406646
mov ecx, dword [ebp - 0x7d0]
add ecx, 1
mov dword [ebp - 0x7d0], ecx
mov edx, dword [ebp - 0x7d0]
cmp edx, dword [0xf08b04]
jge 0x406e1b
push 2
mov eax, dword [0xf0f2e0]
add eax, dword [ebp - 0x6b0]
mov ecx, dword [ebp - 0x7d0]
imul ecx, ecx, 0x18
sub eax, ecx
imul eax, eax, 0xffffffff
add eax, dword [0xf08b08]
push eax
mov edx, dword [ebp - 0x804]
push edx
call fcn.0040878d
add esp, 0xc
mov eax, dword [ebp - 0x804]
push eax
push 0xd
lea ecx, [ebp - 0x6a4]
push ecx
call fcn.00408430
add esp, 0xc
mov edx, dword [ebp - 0x808]
push edx
lea eax, [ebp - 0x6a4]
push eax
call fcn.0040705a
add esp, 8
push eax
call fcn.0040721a
add esp, 4
mov dword [ebp - 0xbfc], eax
mov ecx, dword [ebp - 0x804]
push ecx
push 0xc
lea edx, [ebp - 0x6a4]
push edx
call fcn.00408430
add esp, 0xc
mov eax, dword [ebp - 0x808]
push eax
lea ecx, [ebp - 0x6a4]
push ecx
call fcn.0040705a
add esp, 8
push eax
call fcn.0040721a
add esp, 4
mov dword [ebp - 0x58c], eax
mov edx, dword [ebp - 0x804]
mov eax, dword [edx + 4]
sub eax, 1
mov ecx, dword [ebp - 0x804]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x804]
cmp dword [edx + 4], 0
jl 0x406750
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax]
movsx edx, byte [ecx]
and edx, 0xff
mov dword [ebp - 0xd68], edx
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0x804]
mov dword [edx], ecx
jmp 0x406765
mov eax, dword [ebp - 0x804]
push eax
call fcn.00408357
add esp, 4
mov dword [ebp - 0xd68], eax
mov ecx, dword [ebp - 0xd68]
add ecx, dword [ebp - 0x808]
mov dword [ebp - 0x57c], ecx
cmp dword [ebp - 0x57c], 0xff
jle 0x406795
mov edx, dword [ebp - 0x57c]
sub edx, 0x100
mov dword [ebp - 0x57c], edx
cmp dword [ebp - 0x57c], 0
jge 0x4067af
mov eax, dword [ebp - 0x57c]
add eax, 0x100
mov dword [ebp - 0x57c], eax
push 2
mov ecx, dword [ebp - 0x6b0]
mov edx, dword [0xf0f2e0]
lea eax, [edx + ecx + 0xc]
sub eax, dword [ebp - 0xbfc]
imul eax, eax, 0xffffffff
add eax, dword [0xf08b08]
push eax
mov ecx, dword [ebp - 0x804]
push ecx
call fcn.0040878d
add esp, 0xc
mov edx, dword [ebp - 0x804]
push edx
mov eax, dword [ebp - 0x57c]
add eax, 1
push eax
lea ecx, [ebp - 0x6a4]
push ecx
call fcn.00408430
add esp, 0xc
mov edx, dword [ebp - 0x808]
push edx
lea eax, [ebp - 0x6a4]
push eax
call fcn.0040705a
add esp, 8
push eax
lea ecx, [ebp - 0xd64]
push ecx
call fcn.004088e0
add esp, 8
lea edx, [ebp - 0x7cc]
push edx
lea eax, [ebp - 0xbf8]
push eax
call fcn.004088e0
add esp, 8
lea ecx, [ebp - 0xd64]
push ecx
lea edx, [ebp - 0xbf8]
push edx
call fcn.004088f0
add esp, 8
push 0xf0f824
mov eax, dword [ebp - 0x7d0]
imul eax, eax, 0x3e8
add eax, 0x410e14
push eax
call fcn.004088e0
add esp, 8
mov ecx, dword [ebp - 0x58c]
sub ecx, dword [ebp - 0x57c]
test ecx, ecx
jle 0x406e16
mov edx, dword [0xf08b04]
sub edx, 2
cmp dword [ebp - 0x7d0], edx
jge 0x406a43
lea eax, [ebp - 0xbf8]
push eax
call fcn.0040832d
add esp, 4
mov dword [ebp - 0x7e0], eax
lea ecx, [ebp - 0xbf8]
push ecx
mov edx, dword [ebp - 0x7d0]
imul edx, edx, 0x3e8
add edx, 0x410e14
push edx
call fcn.004088e0
add esp, 8
push 0x410190
lea eax, [ebp - 0xbf8]
push eax
call fcn.00408839
add esp, 8
mov dword [ebp - 0x80c], eax
cmp dword [ebp - 0x80c], 0
je 0x406a43
mov dword [0xf0f238], 0
mov dword [ebp - 0x7e8], 1
jmp 0x40691d
mov ecx, dword [ebp - 0x7e8]
add ecx, 1
mov dword [ebp - 0x7e8], ecx
mov edx, dword [ebp - 0x58c]
sub edx, dword [ebp - 0x57c]
add edx, 1
cmp dword [ebp - 0x7e8], edx
jge 0x406a34
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax + 4]
sub ecx, 1
mov edx, dword [ebp - 0x804]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x804]
cmp dword [eax + 4], 0
jl 0x406984
mov ecx, dword [ebp - 0x804]
mov edx, dword [ecx]
movsx eax, byte [edx]
and eax, 0xff
mov dword [ebp - 0xd6c], eax
mov ecx, dword [ebp - 0x804]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0x804]
mov dword [eax], edx
jmp 0x406999
mov ecx, dword [ebp - 0x804]
push ecx
call fcn.00408357
add esp, 4
mov dword [ebp - 0xd6c], eax
mov edx, dword [ebp - 0xd6c]
mov dword [ebp - 0x588], edx
mov eax, dword [ebp - 0x588]
push eax
call fcn.00406e30
add esp, 4
mov dword [ebp - 0x588], eax
mov ecx, dword [ebp - 0x80c]
mov edx, dword [ecx + 4]
sub edx, 1
mov eax, dword [ebp - 0x80c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x80c]
cmp dword [ecx + 4], 0
jl 0x406a13
mov edx, dword [ebp - 0x80c]
mov eax, dword [edx]
mov cl, byte [ebp - 0x588]
mov byte [eax], cl
movsx edx, byte [ebp - 0x588]
and edx, 0xff
mov dword [ebp - 0xd70], edx
mov eax, dword [ebp - 0x80c]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0x80c]
mov dword [edx], ecx
jmp 0x406a2f
mov eax, dword [ebp - 0x80c]
push eax
mov ecx, dword [ebp - 0x588]
push ecx
call fcn.00408678
add esp, 8
mov dword [ebp - 0xd70], eax
jmp 0x40690e
mov edx, dword [ebp - 0x80c]
push edx
call fcn.00408622
add esp, 4
mov eax, dword [0xf08b04]
sub eax, 2
cmp dword [ebp - 0x7d0], eax
jne 0x406c44
push 0xf0ecc0
lea ecx, [ebp - 0xbf8]
push ecx
call fcn.004088e0
add esp, 8
lea edx, [ebp - 0xbf8]
push edx
call fcn.0040832d
add esp, 4
mov dword [ebp - 0x7e0], eax
lea eax, [ebp - 0xbf8]
push eax
mov ecx, dword [ebp - 0x7d0]
imul ecx, ecx, 0x3e8
add ecx, 0x410e14
push ecx
call fcn.004088e0
add esp, 8
push 0x410194
lea edx, [ebp - 0xbf8]
push edx
call fcn.00408839
add esp, 8
mov dword [ebp - 0x80c], eax
cmp dword [ebp - 0x80c], 0
je 0x406c44
push 0xf0eec8
push 0xf08b18
call fcn.004088f0
add esp, 8
mov eax, dword [ebp - 0x80c]
push eax
push 0xf08b18
call fcn.004085df
add esp, 8
mov dword [0xf0f238], 0
mov dword [ebp - 0x7e8], 1
jmp 0x406b14
mov ecx, dword [ebp - 0x7e8]
add ecx, 1
mov dword [ebp - 0x7e8], ecx
mov edx, dword [ebp - 0x58c]
sub edx, dword [ebp - 0x57c]
add edx, 1
cmp dword [ebp - 0x7e8], edx
jge 0x406c35
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax + 4]
sub ecx, 1
mov edx, dword [ebp - 0x804]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x804]
cmp dword [eax + 4], 0
jl 0x406b7b
mov ecx, dword [ebp - 0x804]
mov edx, dword [ecx]
movsx eax, byte [edx]
and eax, 0xff
mov dword [ebp - 0xd74], eax
mov ecx, dword [ebp - 0x804]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0x804]
mov dword [eax], edx
jmp 0x406b90
mov ecx, dword [ebp - 0x804]
push ecx
call fcn.00408357
add esp, 4
mov dword [ebp - 0xd74], eax
mov edx, dword [ebp - 0xd74]
mov dword [ebp - 0x588], edx
mov eax, dword [ebp - 0x588]
push eax
call fcn.00406e30
add esp, 4
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x7e4], 7
mov ecx, dword [ebp - 0x80c]
mov edx, dword [ecx + 4]
sub edx, 1
mov eax, dword [ebp - 0x80c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x80c]
cmp dword [ecx + 4], 0
jl 0x406c14
mov edx, dword [ebp - 0x80c]
mov eax, dword [edx]
mov cl, byte [ebp - 0x588]
mov byte [eax], cl
movsx edx, byte [ebp - 0x588]
and edx, 0xff
mov dword [ebp - 0xd78], edx
mov eax, dword [ebp - 0x80c]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0x80c]
mov dword [edx], ecx
jmp 0x406c30
mov eax, dword [ebp - 0x80c]
push eax
mov ecx, dword [ebp - 0x588]
push ecx
call fcn.00408678
add esp, 8
mov dword [ebp - 0xd78], eax
jmp 0x406b05
mov edx, dword [ebp - 0x80c]
push edx
call fcn.00408622
add esp, 4
mov eax, dword [0xf08b04]
sub eax, 1
cmp dword [ebp - 0x7d0], eax
jne 0x406e16
push 0xf0edc4
lea ecx, [ebp - 0xbf8]
push ecx
call fcn.004088e0
add esp, 8
lea edx, [ebp - 0xbf8]
push edx
call fcn.0040832d
add esp, 4
mov dword [ebp - 0x7e0], eax
lea eax, [ebp - 0xbf8]
push eax
mov ecx, dword [ebp - 0x7d0]
imul ecx, ecx, 0x3e8
add ecx, 0x410e14
push ecx
call fcn.004088e0
add esp, 8
push 0x410198
lea edx, [ebp - 0xbf8]
push edx
call fcn.00408839
add esp, 8
mov dword [ebp - 0x80c], eax
cmp dword [ebp - 0x80c], 0
je 0x406e16
mov dword [0xf0f238], 0
mov dword [ebp - 0x7e8], 1
jmp 0x406cef
mov eax, dword [ebp - 0x7e8]
add eax, 1
mov dword [ebp - 0x7e8], eax
mov ecx, dword [ebp - 0x58c]
sub ecx, dword [ebp - 0x57c]
add ecx, 1
cmp dword [ebp - 0x7e8], ecx
jge 0x406e07
mov edx, dword [ebp - 0x804]
mov eax, dword [edx + 4]
sub eax, 1
mov ecx, dword [ebp - 0x804]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x804]
cmp dword [edx + 4], 0
jl 0x406d57
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax]
movsx edx, byte [ecx]
and edx, 0xff
mov dword [ebp - 0xd7c], edx
mov eax, dword [ebp - 0x804]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0x804]
mov dword [edx], ecx
jmp 0x406d6c
mov eax, dword [ebp - 0x804]
push eax
call fcn.00408357
add esp, 4
mov dword [ebp - 0xd7c], eax
mov ecx, dword [ebp - 0xd7c]
mov dword [ebp - 0x588], ecx
mov edx, dword [ebp - 0x588]
push edx
call fcn.00406e30
add esp, 4
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0x80c]
mov ecx, dword [eax + 4]
sub ecx, 1
mov edx, dword [ebp - 0x80c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x80c]
cmp dword [eax + 4], 0
jl 0x406de6
mov ecx, dword [ebp - 0x80c]
mov edx, dword [ecx]
mov al, byte [ebp - 0x588]
mov byte [edx], al
movsx ecx, byte [ebp - 0x588]
and ecx, 0xff
mov dword [ebp - 0xd80], ecx
mov edx, dword [ebp - 0x80c]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp - 0x80c]
mov dword [ecx], eax
jmp 0x406e02
mov edx, dword [ebp - 0x80c]
push edx
mov eax, dword [ebp - 0x588]
push eax
call fcn.00408678
add esp, 8
mov dword [ebp - 0xd80], eax
jmp 0x406ce0
mov ecx, dword [ebp - 0x80c]
push ecx
call fcn.00408622
add esp, 4
jmp 0x406637
mov edx, dword [ebp - 0x804]
push edx
call fcn.00408622
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret