Function at 0x405aa6
Capabilities:
Set current directory

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43e091
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd0
call fcn.004058d4
cmp dword [ebp + 8], 1
jne 0x405adb
call fcn.0040590b
xor eax, eax
jmp 0x4068f2
mov byte [ebp - 0x18], 1
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 0x18]
and eax, 0xff
test eax, eax
je 0x406660
mov ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp + 8]
jge 0x406660
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x44277c
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405b29
mov byte [0x4463f8], 1
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x442780
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405b53
mov dword [0x4463f4], 1
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x442784
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405b7a
mov byte [0x4463f8], 1
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x44278c
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405ba1
mov byte [0x442188], 0
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x442798
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405bc8
mov byte [0x442188], 0
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x44279c
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405bef
mov byte [0x4463f9], 1
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427a4
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405c16
mov byte [0x4463f9], 1
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427a8
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405c3d
mov byte [0x4463fa], 1
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427ac
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405c64
mov byte [0x442189], 0
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427b4
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405c8e
mov dword [0x4463fc], 1
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427b8
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405cb8
mov dword [0x4463fc], 2
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427bc
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405d5e
mov edx, dword [0x4463f0]
and edx, 1
test edx, edx
jne 0x405d59
push 0xb0
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x2c], 0
je 0x405d13
push 1
mov ecx, dword [ebp - 0x2c]
call fcn.00406900
mov dword [ebp - 0xa0], eax
jmp 0x405d1d
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x28]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ecx, 1
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427c4
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405e0a
mov edx, dword [0x4463f0]
and edx, 0x800
test edx, edx
jne 0x405e05
push 0xb0
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 1
cmp dword [ebp - 0x34], 0
je 0x405dbf
push 0x800
mov ecx, dword [ebp - 0x34]
call fcn.00406ae0
mov dword [ebp - 0xa4], eax
jmp 0x405dc9
mov dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x30]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ch, 8
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427cc
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405eb6
mov edx, dword [0x4463f0]
and edx, 0x1000
test edx, edx
jne 0x405eb1
push 0x110
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x3c], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x3c], 0
je 0x405e6b
push 0x1000
mov ecx, dword [ebp - 0x3c]
call fcn.00406c40
mov dword [ebp - 0xa8], eax
jmp 0x405e75
mov dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x38]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ch, 0x10
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427d8
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x405f5c
mov edx, dword [0x4463f0]
and edx, 2
test edx, edx
jne 0x405f57
push 0xb4
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x44], eax
mov dword [ebp - 4], 3
cmp dword [ebp - 0x44], 0
je 0x405f11
push 2
mov ecx, dword [ebp - 0x44]
call fcn.00406da0
mov dword [ebp - 0xac], eax
jmp 0x405f1b
mov dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x40]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ecx, 2
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427e0
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x406002
mov edx, dword [0x4463f0]
and edx, 4
test edx, edx
jne 0x405ffd
push 0xc0
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0x4c], 0
je 0x405fb7
push 4
mov ecx, dword [ebp - 0x4c]
call fcn.00406f00
mov dword [ebp - 0xb0], eax
jmp 0x405fc1
mov dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x48]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ecx, 4
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427e8
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x4060a8
mov edx, dword [0x4463f0]
and edx, 8
test edx, edx
jne 0x4060a3
push 0x128
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x54], eax
mov dword [ebp - 4], 5
cmp dword [ebp - 0x54], 0
je 0x40605d
push 8
mov ecx, dword [ebp - 0x54]
call fcn.00407060
mov dword [ebp - 0xb4], eax
jmp 0x406067
mov dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x50]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ecx, 8
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427f0
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x40614e
mov edx, dword [0x4463f0]
and edx, 0x10
test edx, edx
jne 0x406149
push 0x128
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x5c], eax
mov dword [ebp - 4], 6
cmp dword [ebp - 0x5c], 0
je 0x406103
push 0x10
mov ecx, dword [ebp - 0x5c]
call fcn.004071a0
mov dword [ebp - 0xb8], eax
jmp 0x40610d
mov dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x58], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x58]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ecx, 0x10
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x4427f8
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x4061f4
mov edx, dword [0x4463f0]
and edx, 0x20
test edx, edx
jne 0x4061ef
push 0xb4
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x64], eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x64], 0
je 0x4061a9
push 0x20
mov ecx, dword [ebp - 0x64]
call fcn.00407300
mov dword [ebp - 0xbc], eax
jmp 0x4061b3
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x60], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x60]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ecx, 0x20
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x442800
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x40629a
mov edx, dword [0x4463f0]
and edx, 0x40
test edx, edx
jne 0x406295
push 0x558
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x6c], eax
mov dword [ebp - 4], 8
cmp dword [ebp - 0x6c], 0
je 0x40624f
push 0x40
mov ecx, dword [ebp - 0x6c]
call fcn.00407460
mov dword [ebp - 0xc0], eax
jmp 0x406259
mov dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x68]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ecx, 0x40
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x442808
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x406346
mov edx, dword [0x4463f0]
and edx, 0x80
test edx, edx
jne 0x406341
push 0xb8
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x74], eax
mov dword [ebp - 4], 9
cmp dword [ebp - 0x74], 0
je 0x4062fb
push 0x80
mov ecx, dword [ebp - 0x74]
call fcn.004075c0
mov dword [ebp - 0xc4], eax
jmp 0x406305
mov dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x70], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x70]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or cl, 0x80
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x442810
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x4063ef
mov edx, dword [0x4463f0]
and edx, 0x100
test edx, edx
jne 0x4063ea
push 0x5c
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x7c], eax
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x7c], 0
je 0x4063a4
push 0x100
mov ecx, dword [ebp - 0x7c]
call fcn.00407720
mov dword [ebp - 0xc8], eax
jmp 0x4063ae
mov dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x78], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x78]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ch, 1
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x442818
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x4064a1
mov edx, dword [0x4463f0]
and edx, 0x200
test edx, edx
jne 0x40649c
push 0x5c
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x84], 0
je 0x406456
push 0x200
mov ecx, dword [ebp - 0x84]
call fcn.00407880
mov dword [ebp - 0xcc], eax
jmp 0x406460
mov dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x80], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x80]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ch, 2
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x442820
call fcn.0043dd00
add esp, 8
test eax, eax
jne 0x406560
mov edx, dword [0x4463f0]
and edx, 0x400
test edx, edx
jne 0x40655b
push 0x9c
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x8c], 0
je 0x40650f
push 0x400
mov ecx, dword [ebp - 0x8c]
call fcn.004079e0
mov dword [ebp - 0xd0], eax
jmp 0x406519
mov dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x88]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ch, 4
mov dword [0x4463f0], ecx
jmp 0x406652
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
call fcn.00436350
add esp, 4
cmp eax, 2
jb 0x40664c
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + edx*4]
movsx edx, byte [ecx]
cmp edx, 0x2d
jne 0x40664c
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + eax*4]
movsx eax, byte [edx + 1]
push eax
call fcn.00436c46
add esp, 4
cmp eax, 0x44
jne 0x40664c
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4]
add eax, 2
push eax
push 0x446418
call fcn.00437400
add esp, 8
push 0x446418
call fcn.00436350
add esp, 4
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jbe 0x40664a
mov ecx, dword [ebp - 0x1c]
movsx edx, byte [ecx + 0x446417]
cmp edx, 0x5c
je 0x40661a
mov eax, dword [ebp - 0x1c]
movsx ecx, byte [eax + 0x446417]
cmp ecx, 0x2f
je 0x40661a
mov edx, dword [ebp - 0x1c]
mov byte [edx + 0x446418], 0x5c
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov byte [ecx + 0x446418], 0
push 0x446418
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
test eax, eax
jne 0x40664a
push 0x446418
push 0x442828
push 0x443b00
call fcn.0043720c
add esp, 0xc
mov eax, 5
jmp 0x4068f2
jmp 0x406652
mov byte [ebp - 0x18], 0
jmp 0x406660
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
jmp 0x405ae6
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp + 8]
jl 0x40667f
push 0x442840
call fcn.00405810
add esp, 4
mov eax, 1
jmp 0x4068f2
xor ecx, ecx
mov cl, byte [0x4463f8]
test ecx, ecx
je 0x406745
cmp dword [0x4463f0], 0
jne 0x4066a2
mov dword [0x4463f0], 0xffffffff
mov edx, dword [ebp - 0x10]
cmp edx, dword [ebp + 8]
jge 0x4066e7
mov eax, dword [0x4463fc]
push eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + ecx*4]
push eax
mov ecx, dword [0x4463f0]
push ecx
call fcn.00401977
add esp, 0xc
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x4066dc
mov eax, 2
jmp 0x4068f2
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
jmp 0x4066a2
push 0x442854
call fcn.004363cb
add esp, 4
cmp dword [0x446404], 0
jbe 0x406710
mov eax, dword [0x446404]
push eax
push 0x442858
call fcn.004363cb
add esp, 8
mov ecx, dword [0x44640c]
add ecx, dword [0x446410]
test ecx, ecx
jbe 0x406740
mov edx, dword [0x44640c]
add edx, dword [0x446410]
add edx, dword [0x446414]
push edx
push 0x442870
call fcn.004363cb
add esp, 8
jmp 0x4068b3
call fcn.0040585c
cmp dword [0x4463ec], 0
jne 0x40686f
cmp dword [0x4463fc], 1
jne 0x4067ed
push 0x5c
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x94], eax
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x94], 0
je 0x40679c
push 0x100
mov ecx, dword [ebp - 0x94]
call fcn.00407720
mov dword [ebp - 0xd4], eax
jmp 0x4067a6
mov dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x90], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [0x4463ec]
mov edx, dword [ebp - 0x90]
mov dword [ecx*4 + 0x44636c], edx
mov eax, dword [0x4463ec]
add eax, 1
mov dword [0x4463ec], eax
mov ecx, dword [0x4463f0]
or ch, 1
mov dword [0x4463f0], ecx
jmp 0x40686f
push 0xb0
call fcn.004370e5
add esp, 4
mov dword [ebp - 0x9c], eax
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x9c], 0
je 0x406825
push 1
mov ecx, dword [ebp - 0x9c]
call fcn.00406900
mov dword [ebp - 0xd8], eax
jmp 0x40682f
mov dword [ebp - 0xd8], 0
mov edx, dword [ebp - 0xd8]
mov dword [ebp - 0x98], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x4463ec]
mov ecx, dword [ebp - 0x98]
mov dword [eax*4 + 0x44636c], ecx
mov edx, dword [0x4463ec]
add edx, 1
mov dword [0x4463ec], edx
mov eax, dword [0x4463f0]
or al, 1
mov dword [0x4463f0], eax
mov ecx, dword [0x4463fc]
push ecx
mov edx, dword [ebp + 8]
sub edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 0xc]
lea edx, [ecx + eax*4]
push edx
mov eax, dword [0x4463ec]
push eax
push 0x44636c
call fcn.004024cd
add esp, 0x14
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
je 0x4068aa
mov eax, 3
jmp 0x4068f2
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
mov edx, dword [0x446404]
add edx, dword [0x44640c]
add edx, dword [0x446410]
add edx, dword [0x446414]
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0
je 0x4068e2
mov eax, dword [ebp - 0x14]
add eax, 5
mov dword [ebp - 0xdc], eax
jmp 0x4068ec
mov dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret