Function at 0x4087a0
Capabilities:
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42884a
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x3e8
mov eax, dword [0x439018]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [ebp - 4], 1
call fcn.00416fad
add esp, 4
push eax
call fcn.00416e67
add esp, 4
push 0
push 0
push 0
push 0x405220
push 0
push 0
call dword [0x42a088]
push 0x7d0
call dword [0x42a078]
push 4
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
push 0x435a30
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00403070
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 2
lea ecx, [ebx + 0x20]
call fcn.00406c40
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x408886
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40887c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4088e7
push edx
push ecx
call fcn.0040ee03
add esp, 8
push 1
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
push 0x435a38
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00403070
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 3
lea ecx, [ebx + 8]
call fcn.00406c40
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x4088f6
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4088ec
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4088ec
call fcn.004133d7
push edx
push ecx
call fcn.0040ee03
add esp, 8
cmp dword [ebx + 0x1c], 0x10
lea ecx, [ebx + 8]
jb 0x40890b
mov edi, dword [ebx + 8]
mov ecx, edi
mov esi, dword [ebx + 0x18]
add esi, edi
jmp 0x408914
lea esi, [ebx + 8]
add esi, dword [ebx + 0x18]
lea edi, [ebx + 8]
cmp edi, esi
je 0x40893a
sub ecx, edi
mov dword [ebp - 0x324], ecx
movzx eax, byte [edi]
push eax
call fcn.00416f7d
mov ecx, dword [ebp - 0x324]
add esp, 4
mov byte [edi + ecx], al
inc edi
cmp edi, esi
jne 0x408920
call fcn.00405910
mov edi, eax
mov dword [ebp - 0x328], edi
call fcn.00405240
cmp dword [ebx + 0x1c], 0x10
lea ecx, [ebx + 8]
mov edx, dword [ebx + 0x18]
cmovae ecx, dword [ebx + 8]
push 3
push 0x435a3c
push ecx
mov dword [ebp - 0x324], eax
call fcn.0040d1e0
add esp, 0xc
test eax, eax
jne 0x408ca7
push 0x148
push eax
lea eax, [ebp - 0x1d8]
push eax
call fcn.004109b0
add esp, 0xc
mov dword [ebp - 0x1cc], 0x435a20
mov dword [ebp - 0x1d4], 0x7a120
push 0x7a120
call fcn.0040ee11
add esp, 4
mov dword [ebp - 0x1d8], eax
push dword [ebp - 0x1d4]
push 0
push eax
call fcn.004109b0
add esp, 0xc
mov dword [ebp - 0x1b4], 0xfde9
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0
mov byte [ebp - 4], 4
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x3c], 0x4f5e4d01
mov dword [ebp - 0x38], 0x434f4001
mov dword [ebp - 0x34], 0x465e004b
mov ecx, dword [eax]
mov eax, dword [0x43ae6c]
mov word [ebp - 0x30], 0x2e5e
cmp eax, dword [ecx + 4]
jle 0x408a70
push 0x43ae6c
call fcn.0040ef4c
add esp, 4
cmp dword [0x43ae6c], 0xffffffff
jne 0x408a70
mov eax, dword [ebp - 0x34]
movq xmm0, qword [ebp - 0x3c]
mov dword [0x43ad88], eax
mov ax, word [ebp - 0x30]
push 0x4292e0
movq qword [0x43ad80], xmm0
mov word [0x43ad8c], ax
call fcn.0040f373
add esp, 4
push 0x43ae6c
call fcn.0040ef02
add esp, 4
cmp byte [0x43ad8d], 0
je 0x408a8d
xor eax, eax
nop dword [eax + eax]
xor byte [eax + 0x43ad80], 0x2e
inc eax
cmp eax, 0xe
jb 0x408a80
mov ecx, 0x43ad80
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x408ab0
sub ecx, edx
push ecx
push 0x43ad80
lea ecx, [ebp - 0x5c]
call fcn.00403070
mov byte [ebp - 4], 5
mov eax, 0x43ad20
cmp dword [0x43ad34], 0x10
push dword [0x43ad30]
cmovae eax, dword [0x43ad20]
push eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0040d730
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x408b5e
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408b54
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x408b54
call fcn.004133d7
push edx
push ecx
call fcn.0040ee03
add esp, 8
mov edi, dword [0x42a078]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
nop word [eax + eax]
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov eax, dword [ebp - 0x1ac]
cmovae esi, dword [ebp - 0x2c]
mov dword [ebp - 0x1a4], 0
test eax, eax
je 0x408bb2
push eax
call fcn.0040ebd1
add esp, 4
mov dword [ebp - 0x1ac], 0
push esi
lea ecx, [ebp - 0x1d8]
call fcn.00402930
test eax, eax
je 0x408c55
mov edx, dword [ebp - 0x1b0]
xor eax, eax
cmp dword [ebp - 0x1a4], eax
mov dword [ebp - 0x44], eax
cmove edx, eax
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x44], al
mov eax, edx
mov dword [ebp - 0x30], 0xf
lea esi, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408bf0
sub eax, esi
lea ecx, [ebp - 0x44]
push eax
push edx
call fcn.00403070
mov byte [ebp - 4], 8
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
mov ecx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x34]
cmovae eax, ecx
cmp esi, 1
je 0x408c61
cmp esi, 0x14
jb 0x408c7a
mov byte [ebp - 4], 7
cmp edx, 0x10
jb 0x408c55
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x408c4b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4088e7
push edx
push ecx
call fcn.0040ee03
add esp, 8
push 0xbb8
call edi
jmp 0x408b80
movzx eax, byte [eax]
cmp al, 0x30
jne 0x408c6c
xor eax, eax
jmp 0x408c71
sbb eax, eax
or eax, 1
test eax, eax
jne 0x408c7a
call fcn.00405c40
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebx + 8]
call fcn.0040c410
lea ecx, [ebp - 0x44]
call fcn.00402e00
lea ecx, [ebp - 0x2c]
call fcn.00402e00
lea ecx, [ebp - 0x1d8]
call fcn.004022e0
mov edi, dword [ebp - 0x328]
lea ecx, [ebp - 0x44]
call fcn.0040c440
lea ecx, [ebp - 0x74]
call fcn.0040c440
lea ecx, [ebp - 0x5c]
call fcn.0040c440
mov byte [ebp - 4], 0xb
call fcn.004094a0
mov ecx, eax
call fcn.0040c090
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x408d91
push ecx
push 0x435a44
lea ecx, [ebx + 8]
call fcn.00402d80
cmp eax, 0xffffffff
je 0x408d34
call fcn.00409520
mov ecx, eax
call fcn.0040c0b0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.004095b0
jmp 0x408d5f
call fcn.00409630
mov ecx, eax
call fcn.0040c0b0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.004096c0
mov ecx, eax
call fcn.0040c040
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
lea eax, [ebx + 8]
push eax
lea ecx, [ebp - 0x74]
call fcn.0040c410
jmp 0x409236
call fcn.00409740
mov ecx, eax
call fcn.0040c020
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x408e90
call fcn.004097c0
mov ecx, eax
call fcn.0040c020
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.00409840
mov ecx, eax
call fcn.0040c040
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.004098c0
mov ecx, eax
call fcn.0040c0b0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x408e58
call fcn.00409950
mov ecx, eax
call fcn.0040c090
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
lea ecx, [ebp - 0x74]
jmp 0x409228
call fcn.004099d0
mov ecx, eax
call fcn.0040c0b0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x409236
call fcn.00409a60
jmp 0x408e40
call fcn.00409ae0
mov ecx, eax
call fcn.0040c020
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x408f7f
call fcn.00409b60
mov ecx, eax
call fcn.0040c020
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.00409bf0
mov ecx, eax
call fcn.0040c040
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.00409c70
mov ecx, eax
call fcn.0040c0b0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x408f44
call fcn.00409d00
jmp 0x408e40
call fcn.00409d80
mov ecx, eax
call fcn.0040c0b0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x409236
call fcn.00409e10
jmp 0x408e40
call fcn.00409e90
mov ecx, eax
call fcn.0040c000
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x409094
call fcn.00409f10
mov ecx, eax
call fcn.0040c090
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.00409f90
mov ecx, eax
call fcn.0040c040
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.0040a010
mov ecx, eax
call fcn.0040c000
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x74]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.0040a090
mov ecx, eax
call fcn.0040c0e0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x409059
call fcn.0040a120
jmp 0x408e40
call fcn.0040a1a0
mov ecx, eax
call fcn.0040c0e0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x409236
call fcn.0040a230
jmp 0x408e40
call fcn.0040a2b0
mov ecx, eax
call fcn.0040bfd0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x409117
call fcn.0040a340
mov ecx, eax
call fcn.0040c040
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.0040a3c0
mov ecx, eax
call fcn.0040c0b0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x74]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.0040a450
jmp 0x409215
call fcn.0040a4d0
mov ecx, eax
call fcn.0040c0b0
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x409197
call fcn.0040a560
mov ecx, eax
call fcn.0040c040
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.0040a5e0
mov ecx, eax
call fcn.0040c090
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x74]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.0040a660
jmp 0x409215
call fcn.0040a6e0
mov ecx, eax
call fcn.0040c000
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040c230
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402e00
test esi, esi
jne 0x409236
call fcn.0040a760
mov ecx, eax
call fcn.0040c040
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.0040a7e0
mov ecx, eax
call fcn.0040c090
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x74]
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
call fcn.0040a860
mov ecx, eax
call fcn.0040c000
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
lea ecx, [ebp - 0x5c]
push eax
call fcn.00402e50
lea ecx, [ebp - 0x2c]
call fcn.00402e00
cmp dword [ebp - 0x324], 0
je 0x40924c
push 0x435a4c
lea ecx, [ebp - 0x74]
call fcn.00402dd0
test edi, edi
je 0x40925d
push 0x435a50
lea ecx, [ebp - 0x74]
call fcn.00402dd0
sub esp, 0x10
lea ecx, [ebp - 0x320]
push 0x435a20
call fcn.00402280
mov byte [ebp - 4], 0xc
call fcn.0040aa00
mov ecx, eax
call fcn.0040c0b0
push eax
lea ecx, [ebp - 0x3f4]
call fcn.00402ed0
mov edi, eax
mov byte [ebp - 4], 0xd
call fcn.0040a980
mov ecx, eax
call fcn.0040c090
push eax
lea ecx, [ebp - 0x3dc]
call fcn.00402ed0
mov esi, eax
mov byte [ebp - 4], 0xe
call fcn.0040a8e0
mov ecx, eax
call fcn.0040c060
push eax
lea ecx, [ebp - 0x3c4]
call fcn.00402ed0
push eax
mov edx, 0x43ad20
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x3ac]
call fcn.0040ca30
add esp, 4
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x10
push ecx
mov edx, eax
lea ecx, [ebp - 0x394]
call fcn.0040ca90
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x37c]
call fcn.0040cb40
add esp, 4
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x12
push ecx
mov edx, eax
lea ecx, [ebp - 0x364]
call fcn.0040ca90
add esp, 4
push edi
mov edx, eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x34c]
call fcn.0040cb40
add esp, 4
lea ecx, [ebx + 0x20]
mov byte [ebp - 4], 0x14
push ecx
mov edx, eax
lea ecx, [ebp - 0x8c]
call fcn.0040ca90
add esp, 4
lea ecx, [ebp - 0x34c]
call fcn.00402e00
lea ecx, [ebp - 0x364]
call fcn.00402e00
lea ecx, [ebp - 0x37c]
call fcn.00402e00
lea ecx, [ebp - 0x394]
call fcn.00402e00
lea ecx, [ebp - 0x3ac]
call fcn.00402e00
lea ecx, [ebp - 0x3c4]
call fcn.00402e00
lea ecx, [ebp - 0x3dc]
call fcn.00402e00
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0x1d
call fcn.00402e00
nop
lea ecx, [ebp - 0x8c]
call fcn.00402dc0
push eax
lea ecx, [ebp - 0x320]
call fcn.00402c40
test eax, eax
je 0x409409
lea ecx, [ebp - 0x320]
call fcn.00402c80
push eax
lea ecx, [ebp - 0x2c]
call fcn.00402ed0
mov edx, 0x435a40
lea ecx, [ebp - 0x2c]
call fcn.004031c0
test al, al
jne 0x409416
mov edx, 0x435a20
lea ecx, [ebp - 0x2c]
call fcn.004031c0
test al, al
jne 0x409416
lea ecx, [ebp - 0x2c]
call fcn.00402e00
push 0xbb8
call dword [0x42a078]
jmp 0x4093b0
lea ecx, [ebp - 0x2c]
call fcn.00402e00
sub esp, 0x18
lea eax, [ebp - 0x44]
mov ecx, esp
mov dword [ebp - 0x330], esp
push eax
call fcn.0040c460
sub esp, 0x18
mov byte [ebp - 4], 0x1e
mov ecx, esp
mov dword [ebp - 0x334], esp
push 0x43ad38
call fcn.0040c460
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
push 0x43ad50
call fcn.0040c460
cmp dword [ebp - 0x328], 0
mov byte [ebp - 4], 0x1d
setne dl
cmp dword [ebp - 0x324], 0
setne cl
call fcn.00407e20
add esp, 0x30
mov ecx, esp
push 0x43ad08
call fcn.0040c460
call fcn.00406cc0
add esp, 0x18
call fcn.00405c40
int3