Function at 0x413210
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46066e
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x2a0
mov eax, dword [0x481e80]
xor eax, ebp
mov dword [ebp - 0x9c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c0], ecx
mov ecx, dword [ebp - 0x1c0]
add ecx, 0x10
call fcn.0041b320
mov dword [ebp - 4], 0
push 0xa
mov ecx, dword [ebp - 0x1c0]
add ecx, 0x18
call fcn.00414470
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x94]
call fcn.0041b320
mov byte [ebp - 4], 2
push 0x467284
lea ecx, [ebp - 0x1c]
call fcn.0040aea0
mov byte [ebp - 4], 3
push 0x467290
lea ecx, [ebp - 0x18]
call fcn.0040aea0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x24]
call fcn.0041b320
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x20]
call fcn.0041b320
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x98]
call fcn.0041b320
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x1c0]
add eax, 0x10
push eax
push 3
push ecx
mov ecx, esp
mov dword [ebp - 0x10c], esp
push 0x467298
call fcn.0040aea0
mov dword [ebp - 0x1c4], eax
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0x1c8], ecx
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
mov dword [ebp - 0x110], esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0040ae80
mov dword [ebp - 0x1cc], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
lea eax, [ebp - 0x24]
push eax
push 3
push ecx
mov ecx, esp
mov dword [ebp - 0x114], esp
push 0x4672a4
call fcn.0040aea0
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1d4], ecx
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x118], esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0040ae80
mov dword [ebp - 0x1d8], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
lea eax, [ebp - 0x20]
push eax
push 3
push ecx
mov ecx, esp
mov dword [ebp - 0x11c], esp
push 0x4672b0
call fcn.0040aea0
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp - 0x1dc]
mov dword [ebp - 0x1e0], ecx
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x120], esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0040ae80
mov dword [ebp - 0x1e4], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
lea eax, [ebp - 0x60]
push eax
push 6
push ecx
mov ecx, esp
mov dword [ebp - 0x124], esp
push 0x4672c0
call fcn.0040aea0
mov dword [ebp - 0x1e8], eax
mov ecx, dword [ebp - 0x1e8]
mov dword [ebp - 0x1ec], ecx
mov byte [ebp - 4], 0xb
push ecx
mov ecx, esp
mov dword [ebp - 0x128], esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0040ae80
mov dword [ebp - 0x1f0], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
lea eax, [ebp - 0x98]
push eax
push 3
push ecx
mov ecx, esp
mov dword [ebp - 0x12c], esp
push 0x4672d0
call fcn.0040aea0
mov dword [ebp - 0x1f4], eax
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x1f8], ecx
mov byte [ebp - 4], 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x130], esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0040ae80
mov dword [ebp - 0x1fc], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
lea eax, [ebp - 0x14]
push eax
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x134], esp
push 0x4672dc
call fcn.0040aea0
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x200]
mov dword [ebp - 0x204], ecx
mov byte [ebp - 4], 0xd
push ecx
mov ecx, esp
mov dword [ebp - 0x138], esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0040ae80
mov dword [ebp - 0x208], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0
mov byte [ebp - 0xc4], 0
mov byte [ebp - 0xc3], 0
mov byte [ebp - 0xc2], 0
mov byte [ebp - 0xc1], 1
mov byte [ebp - 0xc0], 0
mov byte [ebp - 0xbf], 0
mov byte [ebp - 0xbe], 0
mov byte [ebp - 0xbd], 0
mov dword [ebp - 0xc8], 0x190
push 0x4672ec
lea eax, [ebp - 0x20]
push eax
call fcn.0040ab00
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41355b
mov dword [ebp - 0xc8], 0x2bc
fld qword [ebp - 0x60]
fmul qword [0x4674f8]
call fcn.00449480
mov dword [ebp - 0xd8], eax
lea ecx, [ebp - 0x24]
call fcn.0041b440
push eax
lea ecx, [ebp - 0x24]
call fcn.0040af90
push eax
push 0x20
lea edx, [ebp - 0xbc]
push edx
call fcn.00449395
add esp, 0xc
push 8
call fcn.00414b40
mov dword [ebp - 0x140], eax
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x140], 0
je 0x4135bf
mov ecx, dword [ebp - 0x140]
call fcn.00414b60
mov dword [ebp - 0x20c], eax
jmp 0x4135c9
mov dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x13c], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c0]
mov edx, dword [ebp - 0x13c]
mov dword [ecx + 4], edx
push 0
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0x1c0]
mov ecx, dword [ecx + 4]
call fcn.00437226
mov dword [ebp - 0xc8], 0x190
mov edx, dword [ebp - 0x14]
imul edx, edx, 0xa
mov dword [ebp - 0xd8], edx
lea ecx, [ebp - 0x98]
call fcn.0041b440
push eax
lea ecx, [ebp - 0x98]
call fcn.0040af90
push eax
push 0x20
lea eax, [ebp - 0xbc]
push eax
call fcn.00449395
add esp, 0xc
push 8
call fcn.00414b40
mov dword [ebp - 0x148], eax
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x148], 0
je 0x41366b
mov ecx, dword [ebp - 0x148]
call fcn.00414b60
mov dword [ebp - 0x210], eax
jmp 0x413675
mov dword [ebp - 0x210], 0
mov ecx, dword [ebp - 0x210]
mov dword [ebp - 0x144], ecx
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x144]
mov dword [edx + 8], eax
push 0
lea ecx, [ebp - 0xd8]
push ecx
mov edx, dword [ebp - 0x1c0]
mov ecx, dword [edx + 8]
call fcn.00437226
push 8
call fcn.00414b40
mov dword [ebp - 0x150], eax
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x150], 0
je 0x4136d8
mov ecx, dword [ebp - 0x150]
call fcn.00414b60
mov dword [ebp - 0x214], eax
jmp 0x4136e2
mov dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x14c], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c0]
mov edx, dword [ebp - 0x14c]
mov dword [ecx + 0xc], edx
push 0
lea eax, [ebp - 0xd8]
push eax
mov ecx, dword [ebp - 0x1c0]
mov ecx, dword [ecx + 0xc]
call fcn.00437226
mov edx, dword [ebp - 0x1c0]
push edx
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x154], esp
push 0x4672f4
call fcn.0040aea0
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x21c], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x18]
push ecx
mov edx, esp
mov dword [ebp - 0x158], esp
push ecx
mov ecx, edx
call fcn.0040ae80
mov dword [ebp - 0x220], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
mov eax, dword [ebp - 0x1c0]
add eax, 0x14
push eax
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x15c], esp
push 0x467300
call fcn.0040aea0
mov dword [ebp - 0x224], eax
mov ecx, dword [ebp - 0x224]
mov dword [ebp - 0x228], ecx
mov byte [ebp - 4], 0x12
push ecx
mov ecx, esp
mov dword [ebp - 0x160], esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0040ae80
mov dword [ebp - 0x22c], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
mov eax, dword [ebp - 0x1c0]
cmp dword [eax + 0x14], 1
jge 0x4137e8
mov ecx, dword [ebp - 0x1c0]
mov dword [ecx + 0x14], 0x1388
mov edx, dword [ebp - 0x1c0]
movzx eax, byte [edx]
test eax, eax
je 0x413d72
lea ecx, [ebp - 0xe4]
push ecx
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x164], esp
push 0x46731c
call fcn.0040aea0
mov dword [ebp - 0x230], eax
mov edx, dword [ebp - 0x230]
mov dword [ebp - 0x234], edx
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x18]
push ecx
mov ecx, esp
mov dword [ebp - 0x168], esp
push eax
call fcn.0040ae80
mov dword [ebp - 0x238], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
lea ecx, [ebp - 0xe0]
call fcn.0041b320
mov byte [ebp - 4], 0x14
mov eax, dword [ebp - 0xe4]
cdq
mov ecx, 3
idiv ecx
mov dword [ebp - 0xe8], edx
mov eax, dword [ebp - 0xe4]
cdq
mov ecx, 3
idiv ecx
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xe8], 0
je 0x4138a1
mov edx, dword [ebp - 0xdc]
add edx, 1
mov dword [ebp - 0xdc], edx
mov dword [ebp - 0xec], 1
jmp 0x4138bc
mov eax, dword [ebp - 0xec]
add eax, 1
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp - 0xec]
cmp ecx, dword [ebp - 0xdc]
jg 0x413d63
mov dword [ebp - 0xf0], 3
mov edx, dword [ebp - 0xec]
cmp edx, dword [ebp - 0xdc]
jne 0x4138fb
cmp dword [ebp - 0xe8], 0
je 0x4138fb
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xf4], 0
jmp 0x413916
mov ecx, dword [ebp - 0xf4]
add ecx, 1
mov dword [ebp - 0xf4], ecx
mov edx, dword [ebp - 0xf4]
cmp edx, dword [ebp - 0xf0]
jge 0x413d5e
lea ecx, [ebp - 0x100]
call fcn.0042b6f8
mov byte [ebp - 4], 0x15
mov byte [ebp - 4], 0x16
push 0x1c
call fcn.0042b140
add esp, 4
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x170], eax
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x170], 0
je 0x413983
mov ecx, dword [ebp - 0x170]
call fcn.0041c230
mov dword [ebp - 0x240], eax
mov ecx, dword [ebp - 0x240]
mov dword [ebp - 0x244], ecx
jmp 0x41398d
mov dword [ebp - 0x244], 0
mov edx, dword [ebp - 0x244]
mov dword [ebp - 0x16c], edx
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0xf8], eax
jmp 0x4139c4
mov dword [ebp - 4], 0x15
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x100]
call fcn.0040ab20
mov edx, dword [ebp - 0xf4]
add edx, 1
push edx
push 0x467330
lea eax, [ebp - 0xe0]
push eax
call fcn.0040b960
add esp, 0xc
mov ecx, dword [ebp - 0xf8]
push ecx
push 3
push ecx
mov edx, esp
mov dword [ebp - 0x174], esp
lea eax, [ebp - 0xe0]
push eax
push 0x467334
push edx
call fcn.00407d30
add esp, 0xc
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x248]
mov dword [ebp - 0x24c], ecx
mov byte [ebp - 4], 0x19
lea edx, [ebp - 0x18]
push ecx
mov ecx, esp
mov dword [ebp - 0x178], esp
push edx
call fcn.0040ae80
mov dword [ebp - 0x250], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
mov eax, dword [ebp - 0xf8]
add eax, 4
push eax
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x17c], esp
lea edx, [ebp - 0xe0]
push edx
push 0x467350
push ecx
call fcn.00407d30
add esp, 0xc
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x258], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x18]
push ecx
mov edx, esp
mov dword [ebp - 0x180], esp
push ecx
mov ecx, edx
call fcn.0040ae80
mov dword [ebp - 0x25c], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
mov eax, dword [ebp - 0xf8]
add eax, 8
push eax
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x184], esp
lea edx, [ebp - 0xe0]
push edx
push 0x46736c
push ecx
call fcn.00407d30
add esp, 0xc
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x264], eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x18]
push ecx
mov edx, esp
mov dword [ebp - 0x188], esp
push ecx
mov ecx, edx
call fcn.0040ae80
mov dword [ebp - 0x268], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
mov eax, dword [ebp - 0xf8]
add eax, 0xc
push eax
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x18c], esp
lea edx, [ebp - 0xe0]
push edx
push 0x46738c
push ecx
call fcn.00407d30
add esp, 0xc
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x270], eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x18]
push ecx
mov edx, esp
mov dword [ebp - 0x190], esp
push ecx
mov ecx, edx
call fcn.0040ae80
mov dword [ebp - 0x274], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
mov eax, dword [ebp - 0xf8]
add eax, 0x10
push eax
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x194], esp
lea edx, [ebp - 0xe0]
push edx
push 0x4673ac
push ecx
call fcn.00407d30
add esp, 0xc
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x27c], eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x18]
push ecx
mov edx, esp
mov dword [ebp - 0x198], esp
push ecx
mov ecx, edx
call fcn.0040ae80
mov dword [ebp - 0x280], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
mov eax, dword [ebp - 0xf8]
add eax, 0x14
push eax
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x19c], esp
lea edx, [ebp - 0xe0]
push edx
push 0x4673cc
push ecx
call fcn.00407d30
add esp, 0xc
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x288], eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x18]
push ecx
mov edx, esp
mov dword [ebp - 0x1a0], esp
push ecx
mov ecx, edx
call fcn.0040ae80
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
mov eax, dword [ebp - 0xf8]
add eax, 0x18
push eax
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x1a4], esp
lea edx, [ebp - 0xe0]
push edx
push 0x4673ec
push ecx
call fcn.00407d30
add esp, 0xc
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x294], eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x18]
push ecx
mov edx, esp
mov dword [ebp - 0x1a8], esp
push ecx
mov ecx, edx
call fcn.0040ae80
mov dword [ebp - 0x298], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
push ecx
mov ecx, esp
mov dword [ebp - 0x1ac], esp
mov eax, dword [ebp - 0xf8]
push eax
call fcn.0040ae80
mov dword [ebp - 0x29c], eax
mov ecx, dword [0x4832a4]
call fcn.0040f850
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0xffffffff
je 0x413d19
mov ecx, dword [ebp - 0xf8]
push ecx
mov ecx, dword [0x4832a4]
call fcn.00409530
mov edx, dword [ebp - 0xf8]
mov dword [ebp - 0x1b4], edx
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0
je 0x413d4f
push 1
mov ecx, dword [ebp - 0x1b0]
call fcn.0040a020
mov dword [ebp - 0x2a4], eax
jmp 0x413d59
mov dword [ebp - 0x2a4], 0
jmp 0x413907
jmp 0x4138ad
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe0]
call fcn.0040af20
push 0x467410
lea ecx, [ebp - 0x54]
call fcn.0040aea0
mov byte [ebp - 4], 0x20
push 0x467420
lea ecx, [ebp - 0x50]
call fcn.0040aea0
mov byte [ebp - 4], 0x21
push 0x467430
lea ecx, [ebp - 0x4c]
call fcn.0040aea0
mov byte [ebp - 4], 0x22
push 0x467440
lea ecx, [ebp - 0x48]
call fcn.0040aea0
mov byte [ebp - 4], 0x23
push 0x467450
lea ecx, [ebp - 0x44]
call fcn.0040aea0
mov byte [ebp - 4], 0x24
push 0x467460
lea ecx, [ebp - 0x40]
call fcn.0040aea0
mov byte [ebp - 4], 0x25
push 0x467470
lea ecx, [ebp - 0x3c]
call fcn.0040aea0
mov byte [ebp - 4], 0x26
push 0x467480
lea ecx, [ebp - 0x38]
call fcn.0040aea0
mov byte [ebp - 4], 0x27
push 0x467490
lea ecx, [ebp - 0x34]
call fcn.0040aea0
mov byte [ebp - 4], 0x28
push 0x4674a0
lea ecx, [ebp - 0x30]
call fcn.0040aea0
mov byte [ebp - 4], 0x29
push 0x4674b0
lea ecx, [ebp - 0x2c]
call fcn.0040aea0
mov byte [ebp - 4], 0x2a
push 0x4674c0
lea ecx, [ebp - 0x28]
call fcn.0040aea0
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x90], 0x81
mov dword [ebp - 0x8c], 0x89
mov dword [ebp - 0x88], 0x9e
mov dword [ebp - 0x84], 0x87
mov dword [ebp - 0x80], 0xa3
mov dword [ebp - 0x7c], 0x8a
mov dword [ebp - 0x78], 0x8d
mov dword [ebp - 0x74], 0xc1
mov dword [ebp - 0x70], 0xe9
mov dword [ebp - 0x6c], 0x597
mov dword [ebp - 0x68], 0x5ab
mov dword [ebp - 0x64], 0xee
mov dword [ebp - 0x108], 0
jmp 0x413eb9
mov ecx, dword [ebp - 0x108]
add ecx, 1
mov dword [ebp - 0x108], ecx
cmp dword [ebp - 0x108], 0xc
jae 0x413f54
lea edx, [ebp - 0x94]
push edx
push 3
mov eax, dword [ebp - 0x108]
lea ecx, [ebp + eax*4 - 0x54]
push ecx
mov edx, esp
mov dword [ebp - 0x1b8], esp
push ecx
mov ecx, edx
call fcn.0040ae80
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x2ac], eax
mov byte [ebp - 4], 0x2c
push ecx
mov ecx, esp
mov dword [ebp - 0x1bc], esp
lea edx, [ebp - 0x1c]
push edx
call fcn.0040ae80
mov dword [ebp - 0x2b0], eax
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0x1c0]
call fcn.00414220
lea ecx, [ebp - 0x94]
call fcn.0040af80
push eax
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp + eax*4 - 0x90]
push ecx
mov ecx, dword [ebp - 0x1c0]
add ecx, 0x18
call fcn.00414520
jmp 0x413eaa
mov ecx, dword [0x4832ac]
call fcn.004129f0
mov byte [ebp - 4], 7
push fcn.0040af20
push 0xc
push 4
lea edx, [ebp - 0x54]
push edx
call fcn.00447eca
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x98]
call fcn.0040af20
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x20]
call fcn.0040af20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x24]
call fcn.0040af20
mov byte [ebp - 4], 2
push fcn.0040af20
push 2
push 4
lea eax, [ebp - 0x1c]
push eax
call fcn.00447eca
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x94]
call fcn.0040af20
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x9c]
xor ecx, ebp
call fcn.00446d91
mov esp, ebp
pop ebp
ret