Function at 0x403cba
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb88
push esi
push edi
mov dword [ebp - 0x3f4], 0
mov al, byte [0x41aea0]
mov byte [ebp - 0xb58], al
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0xb57]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x524], 0
mov cl, byte [0x41aea4]
mov byte [ebp - 0x51c], cl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x51b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x638], 0
mov dword [ebp - 0x640], 0
mov dword [ebp - 0x400], 0
mov dword [ebp - 0xa50], 0
mov dword [ebp - 0x410], 0
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0xa54], 0
mov dword [ebp - 0x658], 0
mov dword [ebp - 0x63c], 0
mov dword [ebp - 0x3f0], 0
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x3fc], 0
mov dword [ebp - 0x660], 0xfffffffe
mov dl, byte [0x41aea8]
mov byte [ebp - 0x634], dl
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x633]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [0x41aeac]
mov byte [ebp - 0xa4c], al
mov ecx, 0xf9
xor eax, eax
lea edi, [ebp - 0xa4b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov cl, byte [0x41aeb0]
mov byte [ebp - 0x3e8], cl
mov ecx, 0xf9
xor eax, eax
lea edi, [ebp - 0x3e7]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dl, byte [0x41aeb4]
mov byte [ebp - 0x530], dl
xor eax, eax
mov dword [ebp - 0x52f], eax
mov dword [ebp - 0x52b], eax
mov byte [ebp - 0x527], al
mov cl, byte [0x41aeb8]
mov byte [ebp - 0x654], cl
xor edx, edx
mov dword [ebp - 0x653], edx
mov dword [ebp - 0x64f], edx
mov byte [ebp - 0x64b], dl
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x408], 0
mov dword [ebp - 0x404], 0
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x414], 0
mov dword [ebp - 0x664], 0
mov dword [ebp - 0x648], 0
mov dword [ebp - 0x408], 0
mov dword [ebp - 0x418], 2
push 0x413120
push 0x414400
push 0x413124
lea eax, [ebp - 0x634]
push eax
call fcn.00409eb0
add esp, 0x10
push 0x41312c
push 1
call fcn.0040539a
add esp, 4
push eax
call fcn.00409d15
add esp, 8
mov dword [ebp - 0x644], eax
cmp dword [ebp - 0x644], 0
jne 0x403ef1
push 0x413130
push 0x41314c
call fcn.0040a341
add esp, 8
push 1
call fcn.0040a26c
push 2
push 0
mov ecx, dword [ebp - 0x644]
push ecx
call fcn.00409bd0
add esp, 0xc
mov edx, dword [ebp - 0x644]
push edx
call fcn.00409a78
add esp, 4
mov esi, eax
push 0x41a8dc
call fcn.0040a1b4
add esp, 4
sub esi, eax
mov dword [0x41a8ec], esi
mov dword [ebp - 0x3fc], 0x1699
push 2
mov eax, dword [0x41a8ec]
neg eax
mov ecx, dword [0x414504]
lea edx, [eax + ecx - 0xc]
push edx
mov eax, dword [ebp - 0x644]
push eax
call fcn.00409bd0
add esp, 0xc
mov ecx, dword [ebp - 0x644]
push ecx
push 0xd
lea edx, [ebp - 0x51c]
push edx
call fcn.00409a21
add esp, 0xc
mov eax, dword [ebp - 0x660]
push eax
lea ecx, [ebp - 0x51c]
push ecx
call fcn.00404f29
add esp, 8
push eax
call fcn.004050e4
add esp, 4
mov dword [ebp - 0x524], eax
push 2
mov edx, dword [ebp - 0x524]
mov eax, dword [0x41a8ec]
lea ecx, [eax + edx + 0xc]
imul ecx, ecx, 0xffffffff
add ecx, dword [0x414504]
push ecx
mov edx, dword [ebp - 0x644]
push edx
call fcn.00409bd0
add esp, 0xc
mov eax, dword [ebp - 0x644]
push eax
push 6
lea ecx, [ebp - 0x51c]
push ecx
call fcn.00409a21
add esp, 0xc
mov edx, dword [ebp - 0x660]
push edx
lea eax, [ebp - 0x51c]
push eax
call fcn.00404f29
add esp, 8
push eax
call fcn.004050e4
add esp, 4
mov dword [0x414514], eax
mov ecx, dword [ebp - 0x644]
push ecx
push 6
lea edx, [ebp - 0x51c]
push edx
call fcn.00409a21
add esp, 0xc
mov eax, dword [ebp - 0x660]
push eax
lea ecx, [ebp - 0x51c]
push ecx
call fcn.00404f29
add esp, 8
push eax
lea edx, [ebp - 0x530]
push edx
call fcn.00409dc0
add esp, 8
mov dword [ebp - 0x3f4], 0x160
mov dword [ebp - 0x648], 0
mov dword [ebp - 0x664], 0
push 0x41a91c
lea eax, [ebp - 0x530]
push eax
call fcn.0040a130
add esp, 8
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 0
jne 0x404083
mov dword [ebp - 0x648], 1
push 0x41a944
lea ecx, [ebp - 0x530]
push ecx
call fcn.0040a130
add esp, 8
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 0
jne 0x4040b0
mov dword [ebp - 0x648], 1
cmp dword [ebp - 0x648], 0
jne 0x4040be
call fcn.0040633b
mov dword [ebp - 0x3f4], 0x5fcb
push 0x413150
push 0x41a97c
call fcn.00409dc0
add esp, 8
mov dword [ebp - 0x664], 0
mov dword [0x41a8cc], 0
push 0x41aebc
push 0x41a96c
call fcn.00409dc0
add esp, 8
push 0x41aec0
lea edx, [ebp - 0x654]
push edx
call fcn.00409dc0
add esp, 8
push 0x41a97c
call fcn.00409f10
add esp, 4
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x640], 1
jmp 0x404142
mov eax, dword [ebp - 0x640]
add eax, 1
mov dword [ebp - 0x640], eax
mov ecx, dword [ebp - 0x3f8]
add ecx, 1
cmp dword [ebp - 0x640], ecx
jge 0x4041b9
push 1
mov edx, dword [ebp - 0x640]
push edx
push 0x41a97c
call fcn.00405476
add esp, 0xc
push eax
call fcn.00405412
add esp, 4
push eax
call fcn.00404e14
add esp, 4
mov dword [ebp - 0x408], eax
mov al, byte [ebp - 0x408]
push eax
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0x654]
push ecx
call fcn.00409dc0
add esp, 8
lea edx, [ebp - 0x654]
push edx
push 0x41a96c
call fcn.00409dd0
add esp, 8
jmp 0x404133
push 0x41a96c
call fcn.00405699
add esp, 4
push eax
push 0x41a988
call fcn.00409dc0
add esp, 8
push 0x41a988
call fcn.00409f10
add esp, 4
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 1
jle 0x4041f5
call fcn.0040586c
mov dword [0x41a8cc], 0
push 0x41a8dc
call fcn.0040a1b4
add esp, 4
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x644]
push eax
push 2
lea ecx, [ebp - 0x51c]
push ecx
call fcn.00409a21
add esp, 0xc
mov edx, dword [ebp - 0x660]
push edx
lea eax, [ebp - 0x51c]
push eax
call fcn.00404f29
add esp, 8
push eax
call fcn.00405412
add esp, 4
mov dword [0x414508], eax
mov ecx, dword [ebp - 0x644]
push ecx
push 2
lea edx, [ebp - 0x51c]
push edx
call fcn.00409a21
add esp, 0xc
mov eax, dword [ebp - 0x660]
push eax
lea ecx, [ebp - 0x51c]
push ecx
call fcn.00404f29
add esp, 8
push eax
call fcn.00405412
add esp, 4
mov dword [0x41450c], eax
mov dword [ebp - 0x3f4], 0x1b90
mov dword [ebp - 0x638], 0
jmp 0x4042af
mov edx, dword [ebp - 0x638]
add edx, 1
mov dword [ebp - 0x638], edx
mov eax, dword [ebp - 0x638]
cmp eax, dword [0x414514]
jge 0x404dff
push 2
mov ecx, dword [0x41a8ec]
add ecx, dword [ebp - 0x524]
mov edx, dword [ebp - 0x638]
imul edx, edx, 0x18
sub ecx, edx
imul ecx, ecx, 0xffffffff
add ecx, dword [0x414504]
push ecx
mov eax, dword [ebp - 0x644]
push eax
call fcn.00409bd0
add esp, 0xc
mov ecx, dword [ebp - 0x644]
push ecx
push 0xd
lea edx, [ebp - 0x51c]
push edx
call fcn.00409a21
add esp, 0xc
mov eax, dword [ebp - 0x660]
push eax
lea ecx, [ebp - 0x51c]
push ecx
call fcn.00404f29
add esp, 8
push eax
call fcn.004050e4
add esp, 4
mov dword [ebp - 0xa50], eax
mov edx, dword [ebp - 0x644]
push edx
push 0xc
lea eax, [ebp - 0x51c]
push eax
call fcn.00409a21
add esp, 0xc
mov ecx, dword [ebp - 0x660]
push ecx
lea edx, [ebp - 0x51c]
push edx
call fcn.00404f29
add esp, 8
push eax
call fcn.004050e4
add esp, 4
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x644]
mov ecx, dword [eax + 4]
sub ecx, 1
mov edx, dword [ebp - 0x644]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x644]
cmp dword [eax + 4], 0
jl 0x4043b9
mov ecx, dword [ebp - 0x644]
mov edx, dword [ecx]
movsx eax, byte [edx]
and eax, 0xff
mov dword [ebp - 0xb5c], eax
mov ecx, dword [ebp - 0x644]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0x644]
mov dword [eax], edx
jmp 0x4043ce
mov ecx, dword [ebp - 0x644]
push ecx
call fcn.00409948
add esp, 4
mov dword [ebp - 0xb5c], eax
mov edx, dword [ebp - 0xb5c]
add edx, dword [ebp - 0x660]
mov dword [ebp - 0x400], edx
cmp dword [ebp - 0x400], 0xff
jle 0x4043fd
mov eax, dword [ebp - 0x400]
sub eax, 0x100
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0
jge 0x404418
mov ecx, dword [ebp - 0x400]
add ecx, 0x100
mov dword [ebp - 0x400], ecx
push 2
mov edx, dword [ebp - 0x524]
mov eax, dword [0x41a8ec]
lea ecx, [eax + edx + 0xc]
sub ecx, dword [ebp - 0xa50]
imul ecx, ecx, 0xffffffff
add ecx, dword [0x414504]
push ecx
mov edx, dword [ebp - 0x644]
push edx
call fcn.00409bd0
add esp, 0xc
mov eax, dword [ebp - 0x644]
push eax
mov ecx, dword [ebp - 0x400]
add ecx, 1
push ecx
lea edx, [ebp - 0x51c]
push edx
call fcn.00409a21
add esp, 0xc
mov eax, dword [ebp - 0x660]
push eax
lea ecx, [ebp - 0x51c]
push ecx
call fcn.00404f29
add esp, 8
push eax
lea edx, [ebp - 0xb58]
push edx
call fcn.00409dc0
add esp, 8
lea eax, [ebp - 0x634]
push eax
lea ecx, [ebp - 0xa4c]
push ecx
call fcn.00409dc0
add esp, 8
lea edx, [ebp - 0xb58]
push edx
lea eax, [ebp - 0xa4c]
push eax
call fcn.00409dd0
add esp, 8
push 0x41aec4
mov ecx, dword [ebp - 0x638]
imul ecx, ecx, 0x3e8
add ecx, 0x5894e0
push ecx
call fcn.00409dc0
add esp, 8
mov edx, dword [ebp - 0x410]
sub edx, dword [ebp - 0x400]
test edx, edx
jle 0x404dfa
mov eax, dword [0x414514]
sub eax, 2
cmp dword [ebp - 0x638], eax
jge 0x404995
cmp dword [0x414508], 1
jne 0x404608
push 0
push 1
push 0x18
mov ecx, dword [0xf12b60]
push ecx
call fcn.0040980b
add esp, 0x10
push 0x41315c
call fcn.0040a341
add esp, 4
lea edx, [ebp - 0xb58]
push edx
call fcn.0040a341
add esp, 4
mov eax, dword [ebp - 0x410]
sub eax, dword [ebp - 0x400]
mov dword [ebp - 0xb60], eax
fild dword [ebp - 0xb60]
sub esp, 8
fstp qword [esp]
call fcn.0040542f
add esp, 8
push eax
call fcn.0040a341
add esp, 4
push 0x413160
call fcn.0040a341
add esp, 4
push 0x413168
call fcn.0040a341
add esp, 4
mov ecx, dword [ebp - 0x638]
add ecx, 1
mov dword [ebp - 0xb64], ecx
fild dword [ebp - 0xb64]
sub esp, 8
fstp qword [esp]
call fcn.0040542f
add esp, 8
push eax
call fcn.0040a341
add esp, 4
push 0x41316c
call fcn.0040a341
add esp, 4
mov edx, dword [0x414514]
sub edx, 2
mov dword [ebp - 0xb68], edx
fild dword [ebp - 0xb68]
sub esp, 8
fstp qword [esp]
call fcn.0040542f
add esp, 8
push eax
call fcn.0040a341
add esp, 4
push 0x413170
call fcn.0040a341
add esp, 4
push 0x413174
call fcn.0040a341
add esp, 4
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea eax, [ebp - 0xa4c]
push eax
push 0x22
call fcn.004053b6
add esp, 4
push eax
push 0x41a9d0
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa4c]
push ecx
push 0x22
call fcn.004053b6
add esp, 4
push eax
push 0x41a9b4
push 0x413178
lea edx, [ebp - 0x3e8]
push edx
call fcn.00409eb0
add esp, 0x28
lea eax, [ebp - 0x3e8]
push eax
call fcn.00409d28
add esp, 4
lea ecx, [ebp - 0x3e8]
push ecx
mov edx, dword [ebp - 0x638]
imul edx, edx, 0x3e8
add edx, 0x5894e0
push edx
call fcn.00409dc0
add esp, 8
push 0x41318c
lea eax, [ebp - 0xa4c]
push eax
call fcn.00409d15
add esp, 8
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], 0
je 0x404995
mov dword [0x41a8cc], 0
mov dword [ebp - 0x640], 1
jmp 0x4046dd
mov ecx, dword [ebp - 0x640]
add ecx, 1
mov dword [ebp - 0x640], ecx
mov edx, dword [ebp - 0x410]
sub edx, dword [ebp - 0x400]
add edx, 1
cmp dword [ebp - 0x640], edx
jge 0x404979
mov eax, dword [ebp - 0x644]
mov ecx, dword [eax + 4]
sub ecx, 1
mov edx, dword [ebp - 0x644]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x644]
cmp dword [eax + 4], 0
jl 0x404744
mov ecx, dword [ebp - 0x644]
mov edx, dword [ecx]
movsx eax, byte [edx]
and eax, 0xff
mov dword [ebp - 0xb6c], eax
mov ecx, dword [ebp - 0x644]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0x644]
mov dword [eax], edx
jmp 0x404759
mov ecx, dword [ebp - 0x644]
push ecx
call fcn.00409948
add esp, 4
mov dword [ebp - 0xb6c], eax
mov edx, dword [ebp - 0xb6c]
mov dword [ebp - 0x408], edx
mov eax, dword [ebp - 0x408]
push eax
call fcn.00404e14
add esp, 4
mov dword [ebp - 0x408], eax
mov ecx, dword [ebp - 0x65c]
mov edx, dword [ecx + 4]
sub edx, 1
mov eax, dword [ebp - 0x65c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x65c]
cmp dword [ecx + 4], 0
jl 0x4047d3
mov edx, dword [ebp - 0x65c]
mov eax, dword [edx]
mov cl, byte [ebp - 0x408]
mov byte [eax], cl
movsx edx, byte [ebp - 0x408]
and edx, 0xff
mov dword [ebp - 0xb70], edx
mov eax, dword [ebp - 0x65c]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0x65c]
mov dword [edx], ecx
jmp 0x4047ef
mov eax, dword [ebp - 0x65c]
push eax
mov ecx, dword [ebp - 0x408]
push ecx
call fcn.0040a00f
add esp, 8
mov dword [ebp - 0xb70], eax
mov edx, dword [ebp - 0x40c]
add edx, 1
mov dword [ebp - 0x40c], edx
mov eax, dword [ebp - 0xa54]
add eax, 1
mov dword [ebp - 0xa54], eax
cmp dword [ebp - 0x3f0], 0x1312d00
jbe 0x404974
cmp dword [ebp - 0x40c], 0x4c4b40
jbe 0x404974
push 0
push 0x33
push 0xd
mov ecx, dword [0xf12b60]
push ecx
call fcn.0040980b
add esp, 0x10
push 0x413190
call fcn.0040a341
add esp, 4
mov eax, dword [ebp - 0x3f0]
xor edx, edx
mov ecx, 0x64
div ecx
mov ecx, eax
mov eax, dword [ebp - 0xa54]
xor edx, edx
div ecx
mov dword [ebp - 0x658], eax
mov dword [ebp - 0x40c], 0
mov edx, dword [ebp - 0xa54]
cmp edx, dword [ebp - 0x3f0]
jb 0x404897
mov eax, dword [ebp - 0x3f0]
sub eax, 1
mov dword [ebp - 0xa54], eax
push 0
push 0x21
push 0xc
mov ecx, dword [0xf12b60]
push ecx
call fcn.0040980b
add esp, 0x10
push 0x413194
call fcn.0040a341
add esp, 4
mov edx, dword [ebp - 0x658]
mov dword [ebp - 0xb78], edx
mov dword [ebp - 0xb74], 0
fild qword [ebp - 0xb78]
sub esp, 8
fstp qword [esp]
call fcn.0040542f
add esp, 8
push eax
call fcn.0040a341
add esp, 4
push 0x4131a0
call fcn.0040a341
add esp, 4
push 0
push 0x1e
push 0xd
mov eax, dword [0xf12b60]
push eax
call fcn.0040980b
add esp, 0x10
push 0x4131a8
call fcn.0040a341
add esp, 4
mov dword [ebp - 0x63c], 0
jmp 0x404935
mov ecx, dword [ebp - 0x63c]
add ecx, 1
mov dword [ebp - 0x63c], ecx
mov edx, dword [ebp - 0x63c]
cmp edx, dword [ebp - 0x658]
jae 0x404974
mov eax, dword [ebp - 0x3ec]
add eax, 1
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 4
jbe 0x404972
push 0x4131ac
call fcn.0040a341
add esp, 4
mov dword [ebp - 0x3ec], 0
jmp 0x404926
jmp 0x4046ce
mov ecx, dword [ebp - 0x65c]
push ecx
call fcn.00409c5c
add esp, 4
push 0x4131b0
call fcn.00409d28
add esp, 4
mov edx, dword [0x414514]
sub edx, 2
cmp dword [ebp - 0x638], edx
jne 0x404bd7
push 0x416c28
lea eax, [ebp - 0xa4c]
push eax
call fcn.00409dc0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa4c]
push ecx
push 0x22
call fcn.004053b6
add esp, 4
push eax
push 0x41a9d0
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa4c]
push edx
push 0x22
call fcn.004053b6
add esp, 4
push eax
push 0x41a9b4
push 0x4131b4
lea eax, [ebp - 0x3e8]
push eax
call fcn.00409eb0
add esp, 0x28
lea ecx, [ebp - 0x3e8]
push ecx
call fcn.00409d28
add esp, 4
lea edx, [ebp - 0x3e8]
push edx
mov eax, dword [ebp - 0x638]
imul eax, eax, 0x3e8
add eax, 0x5894e0
push eax
call fcn.00409dc0
add esp, 8
push 0x4131c8
lea ecx, [ebp - 0xa4c]
push ecx
call fcn.00409d15
add esp, 8
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], 0
je 0x404bd7
mov edx, dword [ebp - 0x65c]
push edx
push 0x416e30
call fcn.00409cb2
add esp, 8
mov dword [0x41a8cc], 0
mov dword [ebp - 0x640], 1
jmp 0x404aa6
mov eax, dword [ebp - 0x640]
add eax, 1
mov dword [ebp - 0x640], eax
mov ecx, dword [ebp - 0x410]
sub ecx, dword [ebp - 0x400]
add ecx, 1
cmp dword [ebp - 0x640], ecx
jge 0x404bc8
mov edx, dword [ebp - 0x644]
mov eax, dword [edx + 4]
sub eax, 1
mov ecx, dword [ebp - 0x644]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x644]
cmp dword [edx + 4], 0
jl 0x404b0e
mov eax, dword [ebp - 0x644]
mov ecx, dword [eax]
movsx edx, byte [ecx]
and edx, 0xff
mov dword [ebp - 0xb7c], edx
mov eax, dword [ebp - 0x644]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0x644]
mov dword [edx], ecx
jmp 0x404b23
mov eax, dword [ebp - 0x644]
push eax
call fcn.00409948
add esp, 4
mov dword [ebp - 0xb7c], eax
mov ecx, dword [ebp - 0xb7c]
mov dword [ebp - 0x408], ecx
mov edx, dword [ebp - 0x408]
push edx
call fcn.00404e14
add esp, 4
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x65c]
mov ecx, dword [eax + 4]
sub ecx, 1
mov edx, dword [ebp - 0x65c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x65c]
cmp dword [eax + 4], 0
jl 0x404b9d
mov ecx, dword [ebp - 0x65c]
mov edx, dword [ecx]
mov al, byte [ebp - 0x408]
mov byte [edx], al
movsx ecx, byte [ebp - 0x408]
and ecx, 0xff
mov dword [ebp - 0xb80], ecx
mov edx, dword [ebp - 0x65c]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp - 0x65c]
mov dword [ecx], eax
jmp 0x404bb9
mov edx, dword [ebp - 0x65c]
push edx
mov eax, dword [ebp - 0x408]
push eax
call fcn.0040a00f
add esp, 8
mov dword [ebp - 0xb80], eax
mov dword [ebp - 0x3fc], 0xb
jmp 0x404a97
mov ecx, dword [ebp - 0x65c]
push ecx
call fcn.00409c5c
add esp, 4
mov edx, dword [0x414514]
sub edx, 1
cmp dword [ebp - 0x638], edx
jne 0x404dfa
push 0x416d2c
lea eax, [ebp - 0xa4c]
push eax
call fcn.00409dc0
add esp, 8
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea ecx, [ebp - 0xa4c]
push ecx
push 0x22
call fcn.004053b6
add esp, 4
push eax
push 0x41a9d0
push 0x22
call fcn.004053b6
add esp, 4
push eax
lea edx, [ebp - 0xa4c]
push edx
push 0x22
call fcn.004053b6
add esp, 4
push eax
push 0x41a9b4
push 0x4131cc
lea eax, [ebp - 0x3e8]
push eax
call fcn.00409eb0
add esp, 0x28
lea ecx, [ebp - 0x3e8]
push ecx
call fcn.00409d28
add esp, 4
lea edx, [ebp - 0x3e8]
push edx
mov eax, dword [ebp - 0x638]
imul eax, eax, 0x3e8
add eax, 0x5894e0
push eax
call fcn.00409dc0
add esp, 8
push 0x4131e0
lea ecx, [ebp - 0xa4c]
push ecx
call fcn.00409d15
add esp, 8
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], 0
je 0x404dfa
mov dword [0x41a8cc], 0
mov dword [ebp - 0x640], 1
jmp 0x404cd4
mov edx, dword [ebp - 0x640]
add edx, 1
mov dword [ebp - 0x640], edx
mov eax, dword [ebp - 0x410]
sub eax, dword [ebp - 0x400]
add eax, 1
cmp dword [ebp - 0x640], eax
jge 0x404deb
mov ecx, dword [ebp - 0x644]
mov edx, dword [ecx + 4]
sub edx, 1
mov eax, dword [ebp - 0x644]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x644]
cmp dword [ecx + 4], 0
jl 0x404d3c
mov edx, dword [ebp - 0x644]
mov eax, dword [edx]
movsx ecx, byte [eax]
and ecx, 0xff
mov dword [ebp - 0xb84], ecx
mov edx, dword [ebp - 0x644]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp - 0x644]
mov dword [ecx], eax
jmp 0x404d51
mov edx, dword [ebp - 0x644]
push edx
call fcn.00409948
add esp, 4
mov dword [ebp - 0xb84], eax
mov eax, dword [ebp - 0xb84]
mov dword [ebp - 0x408], eax
mov ecx, dword [ebp - 0x408]
push ecx
call fcn.00404e14
add esp, 4
mov dword [ebp - 0x408], eax
mov edx, dword [ebp - 0x65c]
mov eax, dword [edx + 4]
sub eax, 1
mov ecx, dword [ebp - 0x65c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x65c]
cmp dword [edx + 4], 0
jl 0x404dca
mov eax, dword [ebp - 0x65c]
mov ecx, dword [eax]
mov dl, byte [ebp - 0x408]
mov byte [ecx], dl
movsx eax, byte [ebp - 0x408]
and eax, 0xff
mov dword [ebp - 0xb88], eax
mov ecx, dword [ebp - 0x65c]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0x65c]
mov dword [eax], edx
jmp 0x404de6
mov ecx, dword [ebp - 0x65c]
push ecx
mov edx, dword [ebp - 0x408]
push edx
call fcn.0040a00f
add esp, 8
mov dword [ebp - 0xb88], eax
jmp 0x404cc5
mov eax, dword [ebp - 0x65c]
push eax
call fcn.00409c5c
add esp, 4
jmp 0x4042a0
mov ecx, dword [ebp - 0x644]
push ecx
call fcn.00409c5c
add esp, 4
pop edi
pop esi
mov esp, ebp
pop ebp
ret