Function at 0x4058f0
Capabilities:
Contain obfuscated stackstrings
Create directory
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41531b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x149c
call fcn.0040ccd0
mov dword [ebp - 0x1194], ecx
mov byte [ebp - 0xe3], 0x2f
mov byte [ebp - 0xe9], 0x65
mov byte [ebp - 0xe2], 0x72
mov byte [ebp - 0xd6], 0x6c
mov byte [ebp - 0x31], 0x61
mov byte [ebp - 0x42], 0x75
mov byte [ebp - 0xd5], 0x63
mov byte [ebp - 0xe1], 0x64
mov byte [ebp - 0xf1], 0x6f
mov byte [ebp - 0x41], 0x73
push 0x416361
lea ecx, [ebp - 0x30]
call fcn.00402160
mov dword [ebp - 4], 0
push 0x416361
lea ecx, [ebp - 0x60]
call fcn.00402160
mov byte [ebp - 4], 1
push 0x416361
lea ecx, [ebp - 0xb8]
call fcn.00402160
mov byte [ebp - 4], 2
push 0x416361
lea ecx, [ebp - 0xd4]
call fcn.00402160
mov byte [ebp - 4], 3
push 0x416361
lea ecx, [ebp - 0x9c]
call fcn.00402160
mov byte [ebp - 4], 4
movzx eax, byte [0x416630]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xf0], 0
mov ecx, dword [ebp - 0x14]
add ecx, 1
push ecx
call fcn.0040bb01
add esp, 4
mov dword [ebp - 0xf8], eax
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0xf0], edx
mov eax, dword [ebp - 0x14]
add eax, 1
push eax
push 0
mov ecx, dword [ebp - 0xf0]
push ecx
call fcn.0040d220
add esp, 0xc
mov edx, dword [ebp - 0x14]
push edx
push 0x41662c
mov eax, dword [ebp - 0xf0]
push eax
call fcn.0040cee0
add esp, 0xc
push 0x4166bc
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 0xf0]
push edx
call fcn.00408650
add esp, 0xc
mov eax, dword [ebp - 0xf0]
push eax
call fcn.0040ce50
add esp, 4
push eax
mov ecx, dword [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x30]
call fcn.00402070
mov edx, dword [ebp - 0xf0]
mov dword [ebp - 0xfc], edx
mov eax, dword [ebp - 0xfc]
push eax
call fcn.0040ccc9
add esp, 4
movzx ecx, byte [0x4167f0]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x80], 0
mov edx, dword [ebp - 0x40]
add edx, 1
push edx
call fcn.0040bb01
add esp, 4
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x40]
add ecx, 1
push ecx
push 0
mov edx, dword [ebp - 0x80]
push edx
call fcn.0040d220
add esp, 0xc
mov eax, dword [ebp - 0x40]
push eax
push 0x4167ec
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.0040cee0
add esp, 0xc
push 0x4166bc
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x80]
push eax
call fcn.00408650
add esp, 0xc
mov ecx, dword [ebp - 0x80]
push ecx
call fcn.0040ce50
add esp, 4
push eax
mov edx, dword [ebp - 0x80]
push edx
lea ecx, [ebp - 0x60]
call fcn.00402070
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x104], eax
mov ecx, dword [ebp - 0x104]
push ecx
call fcn.0040ccc9
add esp, 4
movzx edx, byte [0x41650c]
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 0xe0]
add eax, 1
push eax
call fcn.0040bb01
add esp, 4
mov dword [ebp - 0x108], eax
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0xe0]
add edx, 1
push edx
push 0
mov eax, dword [ebp - 0x3c]
push eax
call fcn.0040d220
add esp, 0xc
mov ecx, dword [ebp - 0xe0]
push ecx
push 0x416508
mov edx, dword [ebp - 0x3c]
push edx
call fcn.0040cee0
add esp, 0xc
push 0x4166bc
mov eax, dword [ebp - 0xe0]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
call fcn.00408650
add esp, 0xc
mov edx, dword [ebp - 0x3c]
push edx
call fcn.0040ce50
add esp, 4
push eax
mov eax, dword [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00402070
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x10c], ecx
mov edx, dword [ebp - 0x10c]
push edx
call fcn.0040ccc9
add esp, 4
movzx eax, byte [0x416618]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x38], 0
mov ecx, dword [ebp - 0xe8]
add ecx, 1
push ecx
call fcn.0040bb01
add esp, 4
mov dword [ebp - 0x110], eax
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0xe8]
add eax, 1
push eax
push 0
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.0040d220
add esp, 0xc
mov edx, dword [ebp - 0xe8]
push edx
push 0x416614
mov eax, dword [ebp - 0x38]
push eax
call fcn.0040cee0
add esp, 0xc
push 0x4166bc
mov ecx, dword [ebp - 0xe8]
push ecx
mov edx, dword [ebp - 0x38]
push edx
call fcn.00408650
add esp, 0xc
mov eax, dword [ebp - 0x38]
push eax
call fcn.0040ce50
add esp, 4
push eax
mov ecx, dword [ebp - 0x38]
push ecx
lea ecx, [ebp - 0xd4]
call fcn.00402070
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x114], edx
mov eax, dword [ebp - 0x114]
push eax
call fcn.0040ccc9
add esp, 4
movzx ecx, byte [0x4167d7]
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0xdc]
add edx, 1
push edx
call fcn.0040bb01
add esp, 4
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xdc]
add ecx, 1
push ecx
push 0
mov edx, dword [ebp - 0x10]
push edx
call fcn.0040d220
add esp, 0xc
mov eax, dword [ebp - 0xdc]
push eax
push 0x4167d4
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.0040cee0
add esp, 0xc
push 0x4166bc
mov edx, dword [ebp - 0xdc]
push edx
mov eax, dword [ebp - 0x10]
push eax
call fcn.00408650
add esp, 0xc
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.0040ce50
add esp, 4
push eax
mov edx, dword [ebp - 0x10]
push edx
lea ecx, [ebp - 0x9c]
call fcn.00402070
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
push ecx
call fcn.0040ccc9
add esp, 4
lea edx, [ebp - 0x138]
push edx
mov ecx, dword [ebp - 0x1194]
call fcn.00405860
mov dword [ebp - 0x1198], eax
mov eax, dword [ebp - 0x1198]
mov dword [ebp - 0xe30], eax
mov byte [ebp - 4], 5
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe30]
push edx
mov ecx, dword [ebp - 0x1194]
call fcn.00401f80
mov byte [ebp - 4], 4
push 0
push 1
lea ecx, [ebp - 0x138]
call fcn.00401b90
mov al, byte [ebp - 0xe3]
push eax
push 1
mov ecx, dword [ebp - 0x1194]
call fcn.00404650
push 0x24
lea ecx, [ebp - 0x154]
push ecx
mov ecx, dword [ebp - 0x1194]
call fcn.00405340
mov dword [ebp - 0x119c], eax
mov edx, dword [ebp - 0x119c]
mov dword [ebp - 0xe34], edx
mov byte [ebp - 4], 6
mov eax, dword [0x4164b8]
push eax
push 0
mov ecx, dword [ebp - 0xe34]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x8c
call fcn.00401f80
mov byte [ebp - 4], 4
push 0
push 1
lea ecx, [ebp - 0x154]
call fcn.00401b90
mov dl, byte [ebp - 0xe3]
push edx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x8c
call fcn.00404650
mov eax, dword [ebp - 0x1194]
cmp dword [eax + 0x18], 0x10
jb 0x405e1d
mov ecx, dword [ebp - 0x1194]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x11a0], edx
jmp 0x405e2c
mov eax, dword [ebp - 0x1194]
add eax, 4
mov dword [ebp - 0x11a0], eax
push 0
mov ecx, dword [ebp - 0x11a0]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea edx, [ebp - 0x7c]
push edx
mov ecx, dword [ebp - 0x1194]
call fcn.004050b0
mov byte [ebp - 4], 7
cmp dword [ebp + 8], 0x7ae
jne 0x4067f6
push 1
push 9
lea eax, [ebp - 0x170]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x11a4], eax
mov ecx, dword [ebp - 0x11a4]
mov dword [ebp - 0x11a8], ecx
mov byte [ebp - 4], 8
push 1
push 3
lea edx, [ebp - 0x18c]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x11ac], eax
mov eax, dword [ebp - 0x11ac]
mov dword [ebp - 0x11b0], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x11b0]
push ecx
mov edx, dword [ebp - 0x1194]
push edx
lea eax, [ebp - 0x1a8]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x11b4], eax
mov ecx, dword [ebp - 0x11b4]
mov dword [ebp - 0x11b8], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x11a8]
push edx
mov eax, dword [ebp - 0x11b8]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x11bc], eax
mov edx, dword [ebp - 0x11bc]
mov dword [ebp - 0xe38], edx
mov byte [ebp - 4], 0xb
mov eax, dword [0x4164b8]
push eax
push 0
mov ecx, dword [ebp - 0xe38]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x1c
call fcn.00401f80
mov byte [ebp - 4], 0xa
push 0
push 1
lea ecx, [ebp - 0x1c4]
call fcn.00401b90
mov byte [ebp - 4], 9
push 0
push 1
lea ecx, [ebp - 0x1a8]
call fcn.00401b90
mov byte [ebp - 4], 8
push 0
push 1
lea ecx, [ebp - 0x18c]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x170]
call fcn.00401b90
mov dl, byte [ebp - 0xe9]
push edx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x1c
call fcn.00404650
push 1
push 0xc
lea eax, [ebp - 0x1e0]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x11c0], eax
mov ecx, dword [ebp - 0x11c0]
mov dword [ebp - 0x11c4], ecx
mov byte [ebp - 4], 0xc
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x11c4]
push eax
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x11c8], eax
mov edx, dword [ebp - 0x11c8]
mov dword [ebp - 0xe3c], edx
mov byte [ebp - 4], 0xd
mov eax, dword [0x4164b8]
push eax
push 0
mov ecx, dword [ebp - 0xe3c]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x1c
call fcn.00404720
mov byte [ebp - 4], 0xc
push 0
push 1
lea ecx, [ebp - 0x1fc]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x1e0]
call fcn.00401b90
push 1
push 7
lea edx, [ebp - 0x218]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x11cc], eax
mov eax, dword [ebp - 0x11cc]
mov dword [ebp - 0x11d0], eax
mov byte [ebp - 4], 0xe
push 1
push 2
lea ecx, [ebp - 0x234]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x11d4], eax
mov edx, dword [ebp - 0x11d4]
mov dword [ebp - 0x11d8], edx
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x11d8]
push eax
mov ecx, dword [ebp - 0x1194]
push ecx
lea edx, [ebp - 0x250]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x11dc], eax
mov eax, dword [ebp - 0x11dc]
mov dword [ebp - 0x11e0], eax
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x11d0]
push ecx
mov edx, dword [ebp - 0x11e0]
push edx
lea eax, [ebp - 0x26c]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x11e4], eax
mov ecx, dword [ebp - 0x11e4]
mov dword [ebp - 0xe40], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [0x4164b8]
push edx
push 0
mov eax, dword [ebp - 0xe40]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0x38
call fcn.00401f80
mov byte [ebp - 4], 0x10
push 0
push 1
lea ecx, [ebp - 0x26c]
call fcn.00401b90
mov byte [ebp - 4], 0xf
push 0
push 1
lea ecx, [ebp - 0x250]
call fcn.00401b90
mov byte [ebp - 4], 0xe
push 0
push 1
lea ecx, [ebp - 0x234]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x218]
call fcn.00401b90
mov cl, byte [ebp - 0xd6]
push ecx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x38
call fcn.00404650
push 1
push 0xb
lea edx, [ebp - 0x288]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x11e8], eax
mov eax, dword [ebp - 0x11e8]
mov dword [ebp - 0x11ec], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0x11ec]
push edx
lea eax, [ebp - 0x2a4]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x11f0], eax
mov ecx, dword [ebp - 0x11f0]
mov dword [ebp - 0xe44], ecx
mov byte [ebp - 4], 0x13
mov edx, dword [0x4164b8]
push edx
push 0
mov eax, dword [ebp - 0xe44]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0x38
call fcn.00404720
mov byte [ebp - 4], 0x12
push 0
push 1
lea ecx, [ebp - 0x2a4]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x288]
call fcn.00401b90
push 2
push 7
lea ecx, [ebp - 0x2c0]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x11f4], eax
mov edx, dword [ebp - 0x11f4]
mov dword [ebp - 0x11f8], edx
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0x11f8]
push eax
mov ecx, dword [ebp - 0x1194]
push ecx
lea edx, [ebp - 0x2dc]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x11fc], eax
mov eax, dword [ebp - 0x11fc]
mov dword [ebp - 0xe48], eax
mov byte [ebp - 4], 0x15
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe48]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x54
call fcn.00401f80
mov byte [ebp - 4], 0x14
push 0
push 1
lea ecx, [ebp - 0x2dc]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x2c0]
call fcn.00401b90
mov al, byte [ebp - 0xe2]
push eax
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x54
call fcn.00404650
push 1
push 9
lea ecx, [ebp - 0x2f8]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1200], eax
mov edx, dword [ebp - 0x1200]
mov dword [ebp - 0x1204], edx
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x1204]
push ecx
lea edx, [ebp - 0x314]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1208], eax
mov eax, dword [ebp - 0x1208]
mov dword [ebp - 0xe4c], eax
mov byte [ebp - 4], 0x17
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe4c]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x54
call fcn.00404720
mov byte [ebp - 4], 0x16
push 0
push 1
lea ecx, [ebp - 0x314]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x2f8]
call fcn.00401b90
push 4
push 4
lea eax, [ebp - 0x330]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x120c], eax
mov ecx, dword [ebp - 0x120c]
mov dword [ebp - 0x1210], ecx
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x1210]
push edx
mov eax, dword [ebp - 0x1194]
push eax
lea ecx, [ebp - 0x34c]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1214], eax
mov edx, dword [ebp - 0x1214]
mov dword [ebp - 0x1218], edx
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x1218]
push ecx
lea edx, [ebp - 0x368]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x121c], eax
mov eax, dword [ebp - 0x121c]
mov dword [ebp - 0xe50], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe50]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x70
call fcn.00401f80
mov byte [ebp - 4], 0x19
push 0
push 1
lea ecx, [ebp - 0x368]
call fcn.00401b90
mov byte [ebp - 4], 0x18
push 0
push 1
lea ecx, [ebp - 0x34c]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x330]
call fcn.00401b90
push 4
push 5
lea eax, [ebp - 0x384]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1220], eax
mov ecx, dword [ebp - 0x1220]
mov dword [ebp - 0x1224], ecx
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x1224]
push edx
mov eax, dword [ebp - 0x1194]
add eax, 0x8c
push eax
lea ecx, [ebp - 0x3a0]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1228], eax
mov edx, dword [ebp - 0x1228]
mov dword [ebp - 0x122c], edx
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0xb8]
push eax
mov ecx, dword [ebp - 0x122c]
push ecx
lea edx, [ebp - 0x3bc]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1230], eax
mov eax, dword [ebp - 0x1230]
mov dword [ebp - 0xe54], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe54]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xa8
call fcn.00401f80
mov byte [ebp - 4], 0x1c
push 0
push 1
lea ecx, [ebp - 0x3bc]
call fcn.00401b90
mov byte [ebp - 4], 0x1b
push 0
push 1
lea ecx, [ebp - 0x3a0]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x384]
call fcn.00401b90
push 4
push 7
lea eax, [ebp - 0x3d8]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1234], eax
mov ecx, dword [ebp - 0x1234]
mov dword [ebp - 0x1238], ecx
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0x1238]
push edx
mov eax, dword [ebp - 0x1194]
add eax, 0x8c
push eax
lea ecx, [ebp - 0x3f4]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x123c], eax
mov edx, dword [ebp - 0x123c]
mov dword [ebp - 0x1240], edx
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x1240]
push ecx
lea edx, [ebp - 0x410]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1244], eax
mov eax, dword [ebp - 0x1244]
mov dword [ebp - 0xe58], eax
mov byte [ebp - 4], 0x20
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe58]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xc4
call fcn.00401f80
mov byte [ebp - 4], 0x1f
push 0
push 1
lea ecx, [ebp - 0x410]
call fcn.00401b90
mov byte [ebp - 4], 0x1e
push 0
push 1
lea ecx, [ebp - 0x3f4]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x3d8]
call fcn.00401b90
push 4
push 2
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1248], eax
mov ecx, dword [ebp - 0x1248]
mov dword [ebp - 0x124c], ecx
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x124c]
push edx
mov eax, dword [ebp - 0x1194]
add eax, 0x8c
push eax
lea ecx, [ebp - 0x448]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1250], eax
mov edx, dword [ebp - 0x1250]
mov dword [ebp - 0x1254], edx
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0xd4]
push eax
mov ecx, dword [ebp - 0x1254]
push ecx
lea edx, [ebp - 0x464]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1258], eax
mov eax, dword [ebp - 0x1258]
mov dword [ebp - 0xe5c], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe5c]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xe0
call fcn.00401f80
mov byte [ebp - 4], 0x22
push 0
push 1
lea ecx, [ebp - 0x464]
call fcn.00401b90
mov byte [ebp - 4], 0x21
push 0
push 1
lea ecx, [ebp - 0x448]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x42c]
call fcn.00401b90
push 4
push 9
lea eax, [ebp - 0x480]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x125c], eax
mov ecx, dword [ebp - 0x125c]
mov dword [ebp - 0x1260], ecx
mov byte [ebp - 4], 0x24
mov edx, dword [ebp - 0x1260]
push edx
mov eax, dword [ebp - 0x1194]
add eax, 0x8c
push eax
lea ecx, [ebp - 0x49c]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1264], eax
mov edx, dword [ebp - 0x1264]
mov dword [ebp - 0x1268], edx
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x1268]
push ecx
lea edx, [ebp - 0x4b8]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x126c], eax
mov eax, dword [ebp - 0x126c]
mov dword [ebp - 0xe60], eax
mov byte [ebp - 4], 0x26
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe60]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xfc
call fcn.00401f80
mov byte [ebp - 4], 0x25
push 0
push 1
lea ecx, [ebp - 0x4b8]
call fcn.00401b90
mov byte [ebp - 4], 0x24
push 0
push 1
lea ecx, [ebp - 0x49c]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x480]
call fcn.00401b90
jmp 0x408468
cmp dword [ebp + 8], 0x7af
jne 0x407198
push 1
push 5
lea eax, [ebp - 0x4d4]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1270], eax
mov ecx, dword [ebp - 0x1270]
mov dword [ebp - 0x1274], ecx
mov byte [ebp - 4], 0x27
push 1
push 7
lea edx, [ebp - 0x4f0]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1278], eax
mov eax, dword [ebp - 0x1278]
mov dword [ebp - 0x127c], eax
mov byte [ebp - 4], 0x28
mov ecx, dword [ebp - 0x127c]
push ecx
mov edx, dword [ebp - 0x1194]
push edx
lea eax, [ebp - 0x50c]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1280], eax
mov ecx, dword [ebp - 0x1280]
mov dword [ebp - 0x1284], ecx
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x1274]
push edx
mov eax, dword [ebp - 0x1284]
push eax
lea ecx, [ebp - 0x528]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1288], eax
mov edx, dword [ebp - 0x1288]
mov dword [ebp - 0xe64], edx
mov byte [ebp - 4], 0x2a
mov eax, dword [0x4164b8]
push eax
push 0
mov ecx, dword [ebp - 0xe64]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x1c
call fcn.00401f80
mov byte [ebp - 4], 0x29
push 0
push 1
lea ecx, [ebp - 0x528]
call fcn.00401b90
mov byte [ebp - 4], 0x28
push 0
push 1
lea ecx, [ebp - 0x50c]
call fcn.00401b90
mov byte [ebp - 4], 0x27
push 0
push 1
lea ecx, [ebp - 0x4f0]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x4d4]
call fcn.00401b90
mov dl, byte [ebp - 0x31]
push edx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x1c
call fcn.00404650
push 1
push 4
lea eax, [ebp - 0x544]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x128c], eax
mov ecx, dword [ebp - 0x128c]
mov dword [ebp - 0x1290], ecx
mov byte [ebp - 4], 0x2b
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x1290]
push eax
lea ecx, [ebp - 0x560]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1294], eax
mov edx, dword [ebp - 0x1294]
mov dword [ebp - 0xe68], edx
mov byte [ebp - 4], 0x2c
mov eax, dword [0x4164b8]
push eax
push 0
mov ecx, dword [ebp - 0xe68]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x1c
call fcn.00404720
mov byte [ebp - 4], 0x2b
push 0
push 1
lea ecx, [ebp - 0x560]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x544]
call fcn.00401b90
push 1
push 4
lea edx, [ebp - 0x57c]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1298], eax
mov eax, dword [ebp - 0x1298]
mov dword [ebp - 0x129c], eax
mov byte [ebp - 4], 0x2d
push 1
push 9
lea ecx, [ebp - 0x598]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x12a0], eax
mov edx, dword [ebp - 0x12a0]
mov dword [ebp - 0x12a4], edx
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x12a4]
push eax
mov ecx, dword [ebp - 0x1194]
push ecx
lea edx, [ebp - 0x5b4]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x12a8], eax
mov eax, dword [ebp - 0x12a8]
mov dword [ebp - 0x12ac], eax
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x129c]
push ecx
mov edx, dword [ebp - 0x12ac]
push edx
lea eax, [ebp - 0x5d0]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x12b0], eax
mov ecx, dword [ebp - 0x12b0]
mov dword [ebp - 0xe6c], ecx
mov byte [ebp - 4], 0x30
mov edx, dword [0x4164b8]
push edx
push 0
mov eax, dword [ebp - 0xe6c]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0x38
call fcn.00401f80
mov byte [ebp - 4], 0x2f
push 0
push 1
lea ecx, [ebp - 0x5d0]
call fcn.00401b90
mov byte [ebp - 4], 0x2e
push 0
push 1
lea ecx, [ebp - 0x5b4]
call fcn.00401b90
mov byte [ebp - 4], 0x2d
push 0
push 1
lea ecx, [ebp - 0x598]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x57c]
call fcn.00401b90
mov cl, byte [ebp - 0xd5]
push ecx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x38
call fcn.00404650
push 1
push 5
lea edx, [ebp - 0x5ec]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x12b4], eax
mov eax, dword [ebp - 0x12b4]
mov dword [ebp - 0x12b8], eax
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x30]
push ecx
mov edx, dword [ebp - 0x12b8]
push edx
lea eax, [ebp - 0x608]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x12bc], eax
mov ecx, dword [ebp - 0x12bc]
mov dword [ebp - 0xe70], ecx
mov byte [ebp - 4], 0x32
mov edx, dword [0x4164b8]
push edx
push 0
mov eax, dword [ebp - 0xe70]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0x38
call fcn.00404720
mov byte [ebp - 4], 0x31
push 0
push 1
lea ecx, [ebp - 0x608]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x5ec]
call fcn.00401b90
push 2
push 3
lea ecx, [ebp - 0x624]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x12c0], eax
mov edx, dword [ebp - 0x12c0]
mov dword [ebp - 0x12c4], edx
mov byte [ebp - 4], 0x33
mov eax, dword [ebp - 0x12c4]
push eax
mov ecx, dword [ebp - 0x1194]
push ecx
lea edx, [ebp - 0x640]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x12c8], eax
mov eax, dword [ebp - 0x12c8]
mov dword [ebp - 0xe74], eax
mov byte [ebp - 4], 0x34
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe74]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x54
call fcn.00401f80
mov byte [ebp - 4], 0x33
push 0
push 1
lea ecx, [ebp - 0x640]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x624]
call fcn.00401b90
mov al, byte [ebp - 0x42]
push eax
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x54
call fcn.00404650
push 1
push 0xa
lea ecx, [ebp - 0x65c]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x12cc], eax
mov edx, dword [ebp - 0x12cc]
mov dword [ebp - 0x12d0], edx
mov byte [ebp - 4], 0x35
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x12d0]
push ecx
lea edx, [ebp - 0x678]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x12d4], eax
mov eax, dword [ebp - 0x12d4]
mov dword [ebp - 0xe78], eax
mov byte [ebp - 4], 0x36
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe78]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x54
call fcn.00404720
mov byte [ebp - 4], 0x35
push 0
push 1
lea ecx, [ebp - 0x678]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x65c]
call fcn.00401b90
push 4
push 5
lea eax, [ebp - 0x694]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x12d8], eax
mov ecx, dword [ebp - 0x12d8]
mov dword [ebp - 0x12dc], ecx
mov byte [ebp - 4], 0x37
mov edx, dword [ebp - 0x12dc]
push edx
mov eax, dword [ebp - 0x1194]
push eax
lea ecx, [ebp - 0x6b0]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x12e0], eax
mov edx, dword [ebp - 0x12e0]
mov dword [ebp - 0x12e4], edx
mov byte [ebp - 4], 0x38
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x12e4]
push ecx
lea edx, [ebp - 0x6cc]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x12e8], eax
mov eax, dword [ebp - 0x12e8]
mov dword [ebp - 0xe7c], eax
mov byte [ebp - 4], 0x39
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe7c]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x70
call fcn.00401f80
mov byte [ebp - 4], 0x38
push 0
push 1
lea ecx, [ebp - 0x6cc]
call fcn.00401b90
mov byte [ebp - 4], 0x37
push 0
push 1
lea ecx, [ebp - 0x6b0]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x694]
call fcn.00401b90
push 3
push 0xc
lea eax, [ebp - 0x6e8]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x12ec], eax
mov ecx, dword [ebp - 0x12ec]
mov dword [ebp - 0x12f0], ecx
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0x12f0]
push edx
mov eax, dword [ebp - 0x1194]
add eax, 0x8c
push eax
lea ecx, [ebp - 0x704]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x12f4], eax
mov edx, dword [ebp - 0x12f4]
mov dword [ebp - 0x12f8], edx
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0xb8]
push eax
mov ecx, dword [ebp - 0x12f8]
push ecx
lea edx, [ebp - 0x720]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x12fc], eax
mov eax, dword [ebp - 0x12fc]
mov dword [ebp - 0xe80], eax
mov byte [ebp - 4], 0x3c
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe80]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xa8
call fcn.00401f80
mov byte [ebp - 4], 0x3b
push 0
push 1
lea ecx, [ebp - 0x720]
call fcn.00401b90
mov byte [ebp - 4], 0x3a
push 0
push 1
lea ecx, [ebp - 0x704]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x6e8]
call fcn.00401b90
push 3
push 0xb
lea eax, [ebp - 0x73c]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1300], eax
mov ecx, dword [ebp - 0x1300]
mov dword [ebp - 0x1304], ecx
mov byte [ebp - 4], 0x3d
mov edx, dword [ebp - 0x1304]
push edx
mov eax, dword [ebp - 0x1194]
add eax, 0x8c
push eax
lea ecx, [ebp - 0x758]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1308], eax
mov edx, dword [ebp - 0x1308]
mov dword [ebp - 0x130c], edx
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x130c]
push ecx
lea edx, [ebp - 0x774]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1310], eax
mov eax, dword [ebp - 0x1310]
mov dword [ebp - 0xe84], eax
mov byte [ebp - 4], 0x3f
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe84]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xc4
call fcn.00401f80
mov byte [ebp - 4], 0x3e
push 0
push 1
lea ecx, [ebp - 0x774]
call fcn.00401b90
mov byte [ebp - 4], 0x3d
push 0
push 1
lea ecx, [ebp - 0x758]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x73c]
call fcn.00401b90
push 3
push 0xa
lea eax, [ebp - 0x790]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1314], eax
mov ecx, dword [ebp - 0x1314]
mov dword [ebp - 0x1318], ecx
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x1318]
push edx
mov eax, dword [ebp - 0x1194]
add eax, 0x8c
push eax
lea ecx, [ebp - 0x7ac]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x131c], eax
mov edx, dword [ebp - 0x131c]
mov dword [ebp - 0x1320], edx
mov byte [ebp - 4], 0x41
lea eax, [ebp - 0xd4]
push eax
mov ecx, dword [ebp - 0x1320]
push ecx
lea edx, [ebp - 0x7c8]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1324], eax
mov eax, dword [ebp - 0x1324]
mov dword [ebp - 0xe88], eax
mov byte [ebp - 4], 0x42
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe88]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xe0
call fcn.00401f80
mov byte [ebp - 4], 0x41
push 0
push 1
lea ecx, [ebp - 0x7c8]
call fcn.00401b90
mov byte [ebp - 4], 0x40
push 0
push 1
lea ecx, [ebp - 0x7ac]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x790]
call fcn.00401b90
push 3
push 7
lea eax, [ebp - 0x7e4]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1328], eax
mov ecx, dword [ebp - 0x1328]
mov dword [ebp - 0x132c], ecx
mov byte [ebp - 4], 0x43
mov edx, dword [ebp - 0x132c]
push edx
mov eax, dword [ebp - 0x1194]
add eax, 0x8c
push eax
lea ecx, [ebp - 0x800]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1330], eax
mov edx, dword [ebp - 0x1330]
mov dword [ebp - 0x1334], edx
mov byte [ebp - 4], 0x44
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x1334]
push ecx
lea edx, [ebp - 0x81c]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1338], eax
mov eax, dword [ebp - 0x1338]
mov dword [ebp - 0xe8c], eax
mov byte [ebp - 4], 0x45
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xe8c]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xfc
call fcn.00401f80
mov byte [ebp - 4], 0x44
push 0
push 1
lea ecx, [ebp - 0x81c]
call fcn.00401b90
mov byte [ebp - 4], 0x43
push 0
push 1
lea ecx, [ebp - 0x800]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x7e4]
call fcn.00401b90
jmp 0x408468
cmp dword [ebp + 8], 0x7b0
jne 0x407b09
push 1
push 6
lea eax, [ebp - 0x838]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x133c], eax
mov ecx, dword [ebp - 0x133c]
mov dword [ebp - 0x1340], ecx
mov byte [ebp - 4], 0x46
push 1
push 3
lea edx, [ebp - 0x854]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1344], eax
mov eax, dword [ebp - 0x1344]
mov dword [ebp - 0x1348], eax
mov byte [ebp - 4], 0x47
push 1
push 9
lea ecx, [ebp - 0x870]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x134c], eax
mov edx, dword [ebp - 0x134c]
mov dword [ebp - 0x1350], edx
mov byte [ebp - 4], 0x48
mov eax, dword [ebp - 0x1350]
push eax
mov ecx, dword [ebp - 0x1194]
push ecx
lea edx, [ebp - 0x88c]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1354], eax
mov eax, dword [ebp - 0x1354]
mov dword [ebp - 0x1358], eax
mov byte [ebp - 4], 0x49
mov ecx, dword [ebp - 0x1348]
push ecx
mov edx, dword [ebp - 0x1358]
push edx
lea eax, [ebp - 0x8a8]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x135c], eax
mov ecx, dword [ebp - 0x135c]
mov dword [ebp - 0x1360], ecx
mov byte [ebp - 4], 0x4a
mov edx, dword [ebp - 0x1340]
push edx
mov eax, dword [ebp - 0x1360]
push eax
lea ecx, [ebp - 0x8c4]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1364], eax
mov edx, dword [ebp - 0x1364]
mov dword [ebp - 0xe90], edx
mov byte [ebp - 4], 0x4b
mov eax, dword [0x4164b8]
push eax
push 0
mov ecx, dword [ebp - 0xe90]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x1c
call fcn.00401f80
mov byte [ebp - 4], 0x4a
push 0
push 1
lea ecx, [ebp - 0x8c4]
call fcn.00401b90
mov byte [ebp - 4], 0x49
push 0
push 1
lea ecx, [ebp - 0x8a8]
call fcn.00401b90
mov byte [ebp - 4], 0x48
push 0
push 1
lea ecx, [ebp - 0x88c]
call fcn.00401b90
mov byte [ebp - 4], 0x47
push 0
push 1
lea ecx, [ebp - 0x870]
call fcn.00401b90
mov byte [ebp - 4], 0x46
push 0
push 1
lea ecx, [ebp - 0x854]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x838]
call fcn.00401b90
mov dl, byte [ebp - 0x41]
push edx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x1c
call fcn.00404650
mov eax, dword [0x4164b8]
push eax
push 0
lea ecx, [ebp - 0x30]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x1c
call fcn.00404720
push 1
push 3
lea edx, [ebp - 0x8e0]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1368], eax
mov eax, dword [ebp - 0x1368]
mov dword [ebp - 0x136c], eax
mov byte [ebp - 4], 0x4c
push 1
push 6
lea ecx, [ebp - 0x8fc]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1370], eax
mov edx, dword [ebp - 0x1370]
mov dword [ebp - 0x1374], edx
mov byte [ebp - 4], 0x4d
push 1
push 8
lea eax, [ebp - 0x918]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1378], eax
mov ecx, dword [ebp - 0x1378]
mov dword [ebp - 0x137c], ecx
mov byte [ebp - 4], 0x4e
mov edx, dword [ebp - 0x137c]
push edx
mov eax, dword [ebp - 0x1194]
push eax
lea ecx, [ebp - 0x934]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1380], eax
mov edx, dword [ebp - 0x1380]
mov dword [ebp - 0x1384], edx
mov byte [ebp - 4], 0x4f
mov eax, dword [ebp - 0x1374]
push eax
mov ecx, dword [ebp - 0x1384]
push ecx
lea edx, [ebp - 0x950]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1388], eax
mov eax, dword [ebp - 0x1388]
mov dword [ebp - 0x138c], eax
mov byte [ebp - 4], 0x50
mov ecx, dword [ebp - 0x136c]
push ecx
mov edx, dword [ebp - 0x138c]
push edx
lea eax, [ebp - 0x96c]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1390], eax
mov ecx, dword [ebp - 0x1390]
mov dword [ebp - 0xe94], ecx
mov byte [ebp - 4], 0x51
mov edx, dword [0x4164b8]
push edx
push 0
mov eax, dword [ebp - 0xe94]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0x38
call fcn.00401f80
mov byte [ebp - 4], 0x50
push 0
push 1
lea ecx, [ebp - 0x96c]
call fcn.00401b90
mov byte [ebp - 4], 0x4f
push 0
push 1
lea ecx, [ebp - 0x950]
call fcn.00401b90
mov byte [ebp - 4], 0x4e
push 0
push 1
lea ecx, [ebp - 0x934]
call fcn.00401b90
mov byte [ebp - 4], 0x4d
push 0
push 1
lea ecx, [ebp - 0x918]
call fcn.00401b90
mov byte [ebp - 4], 0x4c
push 0
push 1
lea ecx, [ebp - 0x8fc]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x8e0]
call fcn.00401b90
mov cl, byte [ebp - 0xe2]
push ecx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x38
call fcn.00404650
mov edx, dword [0x4164b8]
push edx
push 0
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0x38
call fcn.00404720
push 1
push 8
lea ecx, [ebp - 0x988]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1394], eax
mov edx, dword [ebp - 0x1394]
mov dword [ebp - 0x1398], edx
mov byte [ebp - 4], 0x52
push 2
push 7
lea eax, [ebp - 0x9a4]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x139c], eax
mov ecx, dword [ebp - 0x139c]
mov dword [ebp - 0x13a0], ecx
mov byte [ebp - 4], 0x53
mov edx, dword [ebp - 0x13a0]
push edx
mov eax, dword [ebp - 0x1194]
push eax
lea ecx, [ebp - 0x9c0]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x13a4], eax
mov edx, dword [ebp - 0x13a4]
mov dword [ebp - 0x13a8], edx
mov byte [ebp - 4], 0x54
mov eax, dword [ebp - 0x1398]
push eax
mov ecx, dword [ebp - 0x13a8]
push ecx
lea edx, [ebp - 0x9dc]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x13ac], eax
mov eax, dword [ebp - 0x13ac]
mov dword [ebp - 0xea8], eax
mov byte [ebp - 4], 0x55
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xea8]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x54
call fcn.00401f80
mov byte [ebp - 4], 0x54
push 0
push 1
lea ecx, [ebp - 0x9dc]
call fcn.00401b90
mov byte [ebp - 4], 0x53
push 0
push 1
lea ecx, [ebp - 0x9c0]
call fcn.00401b90
mov byte [ebp - 4], 0x52
push 0
push 1
lea ecx, [ebp - 0x9a4]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x988]
call fcn.00401b90
mov al, byte [ebp - 0xe1]
push eax
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x54
call fcn.00404650
mov ecx, dword [0x4164b8]
push ecx
push 0
lea edx, [ebp - 0x60]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x54
call fcn.00404720
push 4
push 6
lea eax, [ebp - 0x9f8]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x13b0], eax
mov ecx, dword [ebp - 0x13b0]
mov dword [ebp - 0x13b4], ecx
mov byte [ebp - 4], 0x56
mov edx, dword [ebp - 0x13b4]
push edx
mov eax, dword [ebp - 0x1194]
push eax
lea ecx, [ebp - 0xa14]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x13b8], eax
mov edx, dword [ebp - 0x13b8]
mov dword [ebp - 0x13bc], edx
mov byte [ebp - 4], 0x57
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x13bc]
push ecx
lea edx, [ebp - 0xa30]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x13c0], eax
mov eax, dword [ebp - 0x13c0]
mov dword [ebp - 0xed4], eax
mov byte [ebp - 4], 0x58
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xed4]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x70
call fcn.00401f80
mov byte [ebp - 4], 0x57
push 0
push 1
lea ecx, [ebp - 0xa30]
call fcn.00401b90
mov byte [ebp - 4], 0x56
push 0
push 1
lea ecx, [ebp - 0xa14]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0x9f8]
call fcn.00401b90
push 3
push 0xd
lea eax, [ebp - 0xa4c]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x13c4], eax
mov ecx, dword [ebp - 0x13c4]
mov dword [ebp - 0x13c8], ecx
mov byte [ebp - 4], 0x59
mov edx, dword [ebp - 0x13c8]
push edx
mov eax, dword [ebp - 0x1194]
add eax, 0x8c
push eax
lea ecx, [ebp - 0xa68]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x13cc], eax
mov edx, dword [ebp - 0x13cc]
mov dword [ebp - 0xef0], edx
mov byte [ebp - 4], 0x5a
mov eax, dword [0x4164b8]
push eax
push 0
mov ecx, dword [ebp - 0xef0]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xa8
call fcn.00401f80
mov byte [ebp - 4], 0x59
push 0
push 1
lea ecx, [ebp - 0xa68]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0xa4c]
call fcn.00401b90
mov dl, byte [ebp - 0x42]
push edx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0xa8
call fcn.00404650
mov eax, dword [0x4164b8]
push eax
push 0
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xa8
call fcn.00404720
push 3
push 0xa
lea edx, [ebp - 0xa84]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x13d0], eax
mov eax, dword [ebp - 0x13d0]
mov dword [ebp - 0x13d4], eax
mov byte [ebp - 4], 0x5b
mov ecx, dword [ebp - 0x13d4]
push ecx
mov edx, dword [ebp - 0x1194]
add edx, 0x8c
push edx
lea eax, [ebp - 0xaa0]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x13d8], eax
mov ecx, dword [ebp - 0x13d8]
mov dword [ebp - 0xf0c], ecx
mov byte [ebp - 4], 0x5c
mov edx, dword [0x4164b8]
push edx
push 0
mov eax, dword [ebp - 0xf0c]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0xc4
call fcn.00401f80
mov byte [ebp - 4], 0x5b
push 0
push 1
lea ecx, [ebp - 0xaa0]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0xa84]
call fcn.00401b90
mov cl, byte [ebp - 0xe1]
push ecx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0xc4
call fcn.00404650
mov edx, dword [0x4164b8]
push edx
push 0
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0xc4
call fcn.00404720
push 3
push 8
lea ecx, [ebp - 0xabc]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x13dc], eax
mov edx, dword [ebp - 0x13dc]
mov dword [ebp - 0x13e0], edx
mov byte [ebp - 4], 0x5d
mov eax, dword [ebp - 0x13e0]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0x8c
push ecx
lea edx, [ebp - 0xad8]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x13e4], eax
mov eax, dword [ebp - 0x13e4]
mov dword [ebp - 0xf28], eax
mov byte [ebp - 4], 0x5e
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xf28]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xe0
call fcn.00401f80
mov byte [ebp - 4], 0x5d
push 0
push 1
lea ecx, [ebp - 0xad8]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0xabc]
call fcn.00401b90
mov al, byte [ebp - 0xe1]
push eax
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0xe0
call fcn.00404650
mov ecx, dword [0x4164b8]
push ecx
push 0
lea edx, [ebp - 0xd4]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xe0
call fcn.00404720
push 3
push 6
lea eax, [ebp - 0xaf4]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x13e8], eax
mov ecx, dword [ebp - 0x13e8]
mov dword [ebp - 0x13ec], ecx
mov byte [ebp - 4], 0x5f
mov edx, dword [ebp - 0x13ec]
push edx
mov eax, dword [ebp - 0x1194]
add eax, 0x8c
push eax
lea ecx, [ebp - 0xb10]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x13f0], eax
mov edx, dword [ebp - 0x13f0]
mov dword [ebp - 0xf44], edx
mov byte [ebp - 4], 0x60
mov eax, dword [0x4164b8]
push eax
push 0
mov ecx, dword [ebp - 0xf44]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xfc
call fcn.00401f80
mov byte [ebp - 4], 0x5f
push 0
push 1
lea ecx, [ebp - 0xb10]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0xaf4]
call fcn.00401b90
mov dl, byte [ebp - 0x31]
push edx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0xfc
call fcn.00404650
mov eax, dword [0x4164b8]
push eax
push 0
lea ecx, [ebp - 0x9c]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xfc
call fcn.00404720
jmp 0x408468
cmp dword [ebp + 8], 0
jne 0x408468
push 1
push 7
lea edx, [ebp - 0xb2c]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x13f4], eax
mov eax, dword [ebp - 0x13f4]
mov dword [ebp - 0x13f8], eax
mov byte [ebp - 4], 0x61
push 1
push 4
lea ecx, [ebp - 0xb48]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x13fc], eax
mov edx, dword [ebp - 0x13fc]
mov dword [ebp - 0x1400], edx
mov byte [ebp - 4], 0x62
push 1
push 3
lea eax, [ebp - 0xb64]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1404], eax
mov ecx, dword [ebp - 0x1404]
mov dword [ebp - 0x1408], ecx
mov byte [ebp - 4], 0x63
mov edx, dword [ebp - 0x1408]
push edx
mov eax, dword [ebp - 0x1194]
push eax
lea ecx, [ebp - 0xb80]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x140c], eax
mov edx, dword [ebp - 0x140c]
mov dword [ebp - 0x1410], edx
mov byte [ebp - 4], 0x64
mov eax, dword [ebp - 0x1400]
push eax
mov ecx, dword [ebp - 0x1410]
push ecx
lea edx, [ebp - 0xb9c]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1414], eax
mov eax, dword [ebp - 0x1414]
mov dword [ebp - 0x1418], eax
mov byte [ebp - 4], 0x65
mov ecx, dword [ebp - 0x13f8]
push ecx
mov edx, dword [ebp - 0x1418]
push edx
lea eax, [ebp - 0xbb8]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x141c], eax
mov ecx, dword [ebp - 0x141c]
mov dword [ebp - 0xf60], ecx
mov byte [ebp - 4], 0x66
mov edx, dword [0x4164b8]
push edx
push 0
mov eax, dword [ebp - 0xf60]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0x1c
call fcn.00401f80
mov byte [ebp - 4], 0x65
push 0
push 1
lea ecx, [ebp - 0xbb8]
call fcn.00401b90
mov byte [ebp - 4], 0x64
push 0
push 1
lea ecx, [ebp - 0xb9c]
call fcn.00401b90
mov byte [ebp - 4], 0x63
push 0
push 1
lea ecx, [ebp - 0xb80]
call fcn.00401b90
mov byte [ebp - 4], 0x62
push 0
push 1
lea ecx, [ebp - 0xb64]
call fcn.00401b90
mov byte [ebp - 4], 0x61
push 0
push 1
lea ecx, [ebp - 0xb48]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0xb2c]
call fcn.00401b90
mov cl, byte [ebp - 0xe9]
push ecx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x1c
call fcn.00404650
mov edx, dword [0x4164b8]
push edx
push 0
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0x1c
call fcn.00404720
push 1
push 8
lea ecx, [ebp - 0xbd4]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1420], eax
mov edx, dword [ebp - 0x1420]
mov dword [ebp - 0x1424], edx
mov byte [ebp - 4], 0x67
push 1
push 3
lea eax, [ebp - 0xbf0]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1428], eax
mov ecx, dword [ebp - 0x1428]
mov dword [ebp - 0x142c], ecx
mov byte [ebp - 4], 0x68
push 1
push 5
lea edx, [ebp - 0xc0c]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1430], eax
mov eax, dword [ebp - 0x1430]
mov dword [ebp - 0x1434], eax
mov byte [ebp - 4], 0x69
mov ecx, dword [ebp - 0x1434]
push ecx
mov edx, dword [ebp - 0x1194]
push edx
lea eax, [ebp - 0xc28]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1438], eax
mov ecx, dword [ebp - 0x1438]
mov dword [ebp - 0x143c], ecx
mov byte [ebp - 4], 0x6a
mov edx, dword [ebp - 0x142c]
push edx
mov eax, dword [ebp - 0x143c]
push eax
lea ecx, [ebp - 0xc44]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1440], eax
mov edx, dword [ebp - 0x1440]
mov dword [ebp - 0x1444], edx
mov byte [ebp - 4], 0x6b
mov eax, dword [ebp - 0x1424]
push eax
mov ecx, dword [ebp - 0x1444]
push ecx
lea edx, [ebp - 0xc60]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1448], eax
mov eax, dword [ebp - 0x1448]
mov dword [ebp - 0xf9c], eax
mov byte [ebp - 4], 0x6c
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0xf9c]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x38
call fcn.00401f80
mov byte [ebp - 4], 0x6b
push 0
push 1
lea ecx, [ebp - 0xc60]
call fcn.00401b90
mov byte [ebp - 4], 0x6a
push 0
push 1
lea ecx, [ebp - 0xc44]
call fcn.00401b90
mov byte [ebp - 4], 0x69
push 0
push 1
lea ecx, [ebp - 0xc28]
call fcn.00401b90
mov byte [ebp - 4], 0x68
push 0
push 1
lea ecx, [ebp - 0xc0c]
call fcn.00401b90
mov byte [ebp - 4], 0x67
push 0
push 1
lea ecx, [ebp - 0xbf0]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0xbd4]
call fcn.00401b90
mov al, byte [ebp - 0xf1]
push eax
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x38
call fcn.00404650
mov ecx, dword [0x4164b8]
push ecx
push 0
lea edx, [ebp - 0x30]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x38
call fcn.00404720
push 1
push 7
lea eax, [ebp - 0xc7c]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x144c], eax
mov ecx, dword [ebp - 0x144c]
mov dword [ebp - 0x1450], ecx
mov byte [ebp - 4], 0x6d
push 2
push 3
lea edx, [ebp - 0xc98]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x1454]
mov dword [ebp - 0x1458], eax
mov byte [ebp - 4], 0x6e
mov ecx, dword [ebp - 0x1458]
push ecx
mov edx, dword [ebp - 0x1194]
push edx
lea eax, [ebp - 0xcb4]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x145c], eax
mov ecx, dword [ebp - 0x145c]
mov dword [ebp - 0x1460], ecx
mov byte [ebp - 4], 0x6f
mov edx, dword [ebp - 0x1450]
push edx
mov eax, dword [ebp - 0x1460]
push eax
lea ecx, [ebp - 0xcd0]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1464], eax
mov edx, dword [ebp - 0x1464]
mov dword [ebp - 0xfdc], edx
mov byte [ebp - 4], 0x70
mov eax, dword [0x4164b8]
push eax
push 0
mov ecx, dword [ebp - 0xfdc]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x54
call fcn.00401f80
mov byte [ebp - 4], 0x6f
push 0
push 1
lea ecx, [ebp - 0xcd0]
call fcn.00401b90
mov byte [ebp - 4], 0x6e
push 0
push 1
lea ecx, [ebp - 0xcb4]
call fcn.00401b90
mov byte [ebp - 4], 0x6d
push 0
push 1
lea ecx, [ebp - 0xc98]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0xc7c]
call fcn.00401b90
mov dl, byte [ebp - 0xe1]
push edx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0x54
call fcn.00404650
mov eax, dword [0x4164b8]
push eax
push 0
lea ecx, [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x54
call fcn.00404720
push 4
push 5
lea edx, [ebp - 0xcec]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1468], eax
mov eax, dword [ebp - 0x1468]
mov dword [ebp - 0x146c], eax
mov byte [ebp - 4], 0x71
mov ecx, dword [ebp - 0x146c]
push ecx
mov edx, dword [ebp - 0x1194]
push edx
lea eax, [ebp - 0xd08]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1470], eax
mov ecx, dword [ebp - 0x1470]
mov dword [ebp - 0x1474], ecx
mov byte [ebp - 4], 0x72
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x1474]
push eax
lea ecx, [ebp - 0xd24]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1478], eax
mov edx, dword [ebp - 0x1478]
mov dword [ebp - 0x104c], edx
mov byte [ebp - 4], 0x73
mov eax, dword [0x4164b8]
push eax
push 0
mov ecx, dword [ebp - 0x104c]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0x70
call fcn.00401f80
mov byte [ebp - 4], 0x72
push 0
push 1
lea ecx, [ebp - 0xd24]
call fcn.00401b90
mov byte [ebp - 4], 0x71
push 0
push 1
lea ecx, [ebp - 0xd08]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0xcec]
call fcn.00401b90
push 3
push 9
lea edx, [ebp - 0xd40]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x147c], eax
mov eax, dword [ebp - 0x147c]
mov dword [ebp - 0x1480], eax
mov byte [ebp - 4], 0x74
mov ecx, dword [ebp - 0x1480]
push ecx
mov edx, dword [ebp - 0x1194]
add edx, 0x8c
push edx
lea eax, [ebp - 0xd5c]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1484], eax
mov ecx, dword [ebp - 0x1484]
mov dword [ebp - 0x1090], ecx
mov byte [ebp - 4], 0x75
mov edx, dword [0x4164b8]
push edx
push 0
mov eax, dword [ebp - 0x1090]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0xa8
call fcn.00401f80
mov byte [ebp - 4], 0x74
push 0
push 1
lea ecx, [ebp - 0xd5c]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0xd40]
call fcn.00401b90
mov cl, byte [ebp - 0x42]
push ecx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0xa8
call fcn.00404650
mov edx, dword [0x4164b8]
push edx
push 0
lea eax, [ebp - 0xb8]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0xa8
call fcn.00404720
push 3
push 9
lea ecx, [ebp - 0xd78]
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1488], eax
mov edx, dword [ebp - 0x1488]
mov dword [ebp - 0x148c], edx
mov byte [ebp - 4], 0x76
mov eax, dword [ebp - 0x148c]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0x8c
push ecx
lea edx, [ebp - 0xd94]
push edx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x1490], eax
mov eax, dword [ebp - 0x1490]
mov dword [ebp - 0x10e0], eax
mov byte [ebp - 4], 0x77
mov ecx, dword [0x4164b8]
push ecx
push 0
mov edx, dword [ebp - 0x10e0]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xc4
call fcn.00401f80
mov byte [ebp - 4], 0x76
push 0
push 1
lea ecx, [ebp - 0xd94]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0xd78]
call fcn.00401b90
mov al, byte [ebp - 0xe1]
push eax
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0xc4
call fcn.00404650
mov ecx, dword [0x4164b8]
push ecx
push 0
lea edx, [ebp - 0x60]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xc4
call fcn.00404720
push 3
push 9
lea eax, [ebp - 0xdb0]
push eax
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x1494], eax
mov ecx, dword [ebp - 0x1494]
mov dword [ebp - 0x1498], ecx
mov byte [ebp - 4], 0x78
mov edx, dword [ebp - 0x1498]
push edx
mov eax, dword [ebp - 0x1194]
add eax, 0x8c
push eax
lea ecx, [ebp - 0xdcc]
push ecx
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x149c], eax
mov edx, dword [ebp - 0x149c]
mov dword [ebp - 0x1134], edx
mov byte [ebp - 4], 0x79
mov eax, dword [0x4164b8]
push eax
push 0
mov ecx, dword [ebp - 0x1134]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xe0
call fcn.00401f80
mov byte [ebp - 4], 0x78
push 0
push 1
lea ecx, [ebp - 0xdcc]
call fcn.00401b90
mov byte [ebp - 4], 7
push 0
push 1
lea ecx, [ebp - 0xdb0]
call fcn.00401b90
mov dl, byte [ebp - 0xe1]
push edx
push 1
mov ecx, dword [ebp - 0x1194]
add ecx, 0xe0
call fcn.00404650
mov eax, dword [0x4164b8]
push eax
push 0
lea ecx, [ebp - 0xd4]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xe0
call fcn.00404720
push 3
push 0xa
lea edx, [ebp - 0xde8]
push edx
lea ecx, [ebp - 0x7c]
call fcn.00408520
mov dword [ebp - 0x14a0], eax
mov eax, dword [ebp - 0x14a0]
mov dword [ebp - 0x14a4], eax
mov byte [ebp - 4], 0x7a
mov ecx, dword [ebp - 0x14a4]
push ecx
mov edx, dword [ebp - 0x1194]
add edx, 0x8c
push edx
lea eax, [ebp - 0xe04]
push eax
call fcn.00404cd0
add esp, 0xc
mov dword [ebp - 0x14a8], eax
mov ecx, dword [ebp - 0x14a8]
mov dword [ebp - 0x118c], ecx
mov byte [ebp - 4], 0x7b
mov edx, dword [0x4164b8]
push edx
push 0
mov eax, dword [ebp - 0x118c]
push eax
mov ecx, dword [ebp - 0x1194]
add ecx, 0xfc
call fcn.00401f80
mov byte [ebp - 4], 0x7a
push 0
push 1
lea ecx, [ebp - 0xe04]
call fcn.00401b90
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xde8]
call fcn.00401e10
mov cl, byte [ebp - 0x31]
push ecx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xfc
call fcn.00408500
lea edx, [ebp - 0x9c]
push edx
mov ecx, dword [ebp - 0x1194]
add ecx, 0xfc
call fcn.004084d0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x7c]
call fcn.00401e10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x9c]
call fcn.00401e10
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd4]
call fcn.00401e10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xb8]
call fcn.00401e10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x60]
call fcn.00401e10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.00401e10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4