Function at 0x40c0a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0xdc
push ebx
push esi
push edi
mov edi, dword [ebp + 0x70]
xor esi, esi
cmp dword [edi + 0x180], esi
jne 0x40c0d1
push 0xfc
push 1
call fcn.00403bc7
pop ecx
mov dword [edi + 0x180], eax
pop ecx
mov dword [eax], esi
mov ebx, dword [edi + 0x180]
mov eax, dword [ebx]
mov ecx, 0xecd
cmp eax, ecx
mov dword [ebp + 0x58], ebx
mov edx, 0xfa0
jg 0x40cc6a
je 0x40cbd7
mov ecx, 0xdeb
cmp eax, ecx
jg 0x40c7da
je 0x40c727
sub eax, esi
mov ecx, 0xcfc
je 0x40c1cb
sub eax, ecx
je 0x40c1cb
sub eax, 0x59
je 0x40c18d
sub eax, 0x53
jne 0x40d66c
cmp dword [ebp + 0x7c], esi
je 0x40c148
push 0x43ba88
call fcn.00404045
push eax
mov eax, edi
call fcn.0040b040
pop ecx
pop ecx
jmp 0x40d0c7
cmp dword [ebp + 0x78], esi
jg 0x40c5ce
mov eax, dword [edi + 0x1f8]
mov dword [ebx + 0xac], eax
mov esi, dword [ebp + 0x70]
xor edi, edi
call fcn.004097bf
cmp dword [ebx + 0xac], edi
jne 0x40c5d9
mov eax, 0x43ba68
xor edi, edi
push 1
push edi
push edi
call fcn.0040bfec
add esp, 0xc
mov dword [ebx], edi
jmp 0x40da0d
cmp dword [ebp + 0x7c], esi
je 0x40c199
push 0x43ba20
jmp 0x40c134
cmp dword [ebp + 0x78], esi
jg 0x40c411
mov eax, dword [edi + 0x1f8]
mov dword [ebx + 0xac], eax
mov esi, dword [ebp + 0x70]
xor edi, edi
call fcn.004097bf
cmp dword [ebx + 0xac], edi
jne 0x40c41c
mov eax, 0x43b9f4
jmp 0x40c178
mov esi, dword [ebp + 0x7c]
test esi, esi
jne 0x40c1d9
mov dword [ebx], ecx
jmp 0x40da0d
cmp dword [esi + 8], 2
je 0x40c1e9
push 0x43b9d4
jmp 0x40cd1a
push 0x43b9bc
push dword [edi + 0xd4]
call fcn.0042736a
mov eax, dword [esi + 0x18]
pop ecx
pop ecx
mov ecx, dword [esi]
sub ecx, eax
cmp ecx, 8
jl 0x40c218
mov ecx, dword [esi + 0x14]
add eax, 8
mov dword [esi + 0x18], eax
lea eax, [ecx + eax - 8]
test eax, eax
jne 0x40c222
push 0x43b984
jmp 0x40cd1a
push 8
push eax
lea eax, [ebp + 0x4c]
push eax
call fcn.0042df20
lea eax, [ebx + 0xc]
lea ecx, [ebx + 0xb4]
push eax
push ecx
call fcn.00408e72
add esp, 0x14
test eax, eax
je 0x40c71d
lea eax, [ebx + 0x10]
lea ecx, [ebx + 0xd8]
push eax
push ecx
call fcn.00408e72
test eax, eax
pop ecx
pop ecx
je 0x40c71d
push 0x43b968
push dword [edi + 0xd4]
call fcn.0042736a
lea eax, [ebp - 4]
push 0x43b960
push eax
call fcn.0042f020
and dword [ebx + 0xf8], 0
add esp, 0x10
lea eax, [ebx + 0xd8]
push eax
lea eax, [ebp - 4]
push eax
call fcn.0042d810
pop ecx
push 0x50
pop ecx
sub ecx, eax
push ecx
lea eax, [ebp - 4]
push eax
call fcn.0042d810
pop ecx
lea eax, [ebp + eax - 4]
push eax
call fcn.00420482
lea eax, [ebp - 4]
push eax
push dword [edi + 0xd4]
call fcn.0042736a
add esp, 0x14
mov ecx, esi
call fcn.00408dbe
mov dword [edi + 0x40], eax
call fcn.00408dbe
mov dword [ebx + 0x14], eax
call fcn.00408dbe
mov dword [ebx + 0x18], eax
test byte [edi + 0x50], 8
je 0x40c2ee
and eax, 0xfffffffb
mov dword [ebx + 0x18], eax
lea eax, [ebp - 0x74]
push eax
mov dword [edi + 0x44], 1
call fcn.0041e37b
push dword [ebx + 0xdc]
lea eax, [ebp - 0x74]
push dword [ebx + 0x10]
push eax
call fcn.0041e3a6
push dword [ebx + 0xb8]
lea eax, [ebp - 0x74]
push dword [ebx + 0xc]
push eax
call fcn.0041e3a6
push 8
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0041e3a6
lea eax, [ebp - 0x74]
push eax
lea eax, [ebx + 0x2c]
push eax
call fcn.0041e473
add esp, 0x30
xor esi, esi
call fcn.0041fd97
mov byte [edi + esi + 0x1c], al
inc esi
cmp esi, 0x20
jl 0x40c343
mov ecx, dword [ebx + 0xdc]
mov eax, ecx
shl eax, 3
cmp dword [ebx + 0xd8], eax
jg 0x40c713
mov eax, dword [ebx + 0xb8]
mov edx, eax
shl edx, 3
cmp dword [ebx + 0xb4], edx
jg 0x40c713
cmp ecx, eax
jle 0x40c386
mov eax, ecx
xor edi, edi
inc edi
push edi
push eax
mov dword [ebx + 4], eax
call fcn.00403bc7
lea esi, [ebx + 0xd8]
push esi
mov dword [ebx + 8], eax
call fcn.00420357
push edi
push eax
call fcn.00403bc7
push esi
push eax
mov dword [ebp + 0x64], eax
call fcn.00420391
push esi
lea eax, [ebp - 0x18]
push 0x64
push eax
call fcn.00420482
mov esi, dword [ebp + 0x70]
call fcn.004097bf
mov eax, esi
push eax
push 0x409aba
lea ecx, [ebp - 0x18]
push ecx
push dword [ebp + 0x64]
push 0x438728
push dword [eax + 0xc4]
push dword [eax + 0xc0]
push dword [eax + 0xd4]
call fcn.004270c4
add esp, 0x48
push dword [ebp + 0x64]
mov dword [ebx + 0xac], eax
call fcn.00403c87
cmp dword [ebx + 0xac], 0
pop ecx
jge 0x40c1ae
mov dword [ebx], 0xd55
jmp 0x40da0d
xor eax, eax
cmp eax, 0x10
mov ecx, dword [ebx + 8]
mov dl, byte [esi + eax + 0x1c]
mov byte [eax + ecx], dl
jge 0x40c439
mov ecx, dword [ebx + 8]
lea edi, [ecx + eax]
mov cl, byte [eax + ebx + 0x2c]
xor byte [edi], cl
inc eax
cmp eax, 0x20
jl 0x40c41e
mov eax, dword [ebx + 0xdc]
cmp eax, dword [ebx + 0xb8]
jle 0x40c474
lea eax, [ebx + 0xb4]
push eax
push 0x20
push dword [ebx + 8]
call fcn.0041ff10
add esp, 0xc
test eax, eax
je 0x40c4a8
lea eax, [ebx + 0xd8]
push eax
push dword [ebx + 0xb8]
jmp 0x40c499
lea eax, [ebx + 0xd8]
push eax
push 0x20
push dword [ebx + 8]
call fcn.0041ff10
add esp, 0xc
test eax, eax
je 0x40c4a8
lea eax, [ebx + 0xb4]
push eax
push dword [ebx + 0xdc]
push dword [ebx + 8]
call fcn.0041ff10
add esp, 0xc
test eax, eax
jne 0x40c4ba
push 0x43b924
call fcn.00404045
push eax
mov eax, esi
jmp 0x40cd22
push 0x43b90c
push dword [esi + 0xd4]
call fcn.0042736a
pop ecx
pop ecx
xor eax, eax
push 2
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x64], eax
mov dword [ebp + 0x5c], eax
mov dword [ebp + 0x58], eax
pop edi
cmp dword [ebp + 0x58], 6
jge 0x40c571
push dword [ebp + 0x58]
push 0x1d
push dword [esi + 0x1e4]
call fcn.004020b5
add esp, 0xc
test eax, eax
jne 0x40c507
mov dword [ebp + 0x64], 1
jmp 0x40c564
push 3
pop ecx
cmp eax, ecx
jne 0x40c522
push 0x43b8e4
push dword [esi + 0xd4]
call fcn.0042736a
pop ecx
pop ecx
jmp 0x40c564
dec eax
je 0x40c548
dec eax
je 0x40c538
sub eax, edi
jne 0x40c552
mov dword [ebx + 0x3c], edi
mov dword [ebp + 0x5c], 0x43b8d8
jmp 0x40c552
mov dword [ebx + 0x3c], 6
mov dword [ebp + 0x5c], 0x43b8cc
jmp 0x40c552
mov dword [ebx + 0x3c], ecx
mov dword [ebp + 0x5c], 0x43b8c4
mov ecx, dword [ebx + 0x3c]
xor eax, eax
inc eax
mov edx, eax
shl edx, cl
test dword [ebx + 0x14], edx
je 0x40c564
mov dword [ebp + 0x60], eax
inc dword [ebp + 0x58]
cmp dword [ebp + 0x60], 0
je 0x40c4dd
cmp dword [ebp + 0x60], 0
jne 0x40c591
test byte [ebx + 0x14], 8
jne 0x40c587
push 0x43b880
jmp 0x40c4ad
push 0x43b864
jmp 0x40c4ad
cmp dword [ebp + 0x64], 0
je 0x40c5dc
mov esi, dword [ebp + 0x70]
xor edi, edi
inc edi
call fcn.004097bf
mov eax, esi
push eax
push 0x409aba
push dword [ebp + 0x5c]
push 0x43b85c
push dword [eax + 0xd4]
call fcn.004271dc
add esp, 0x14
test eax, eax
mov dword [ebx + 0xac], eax
jge 0x40c15d
mov dword [ebx], 0xda8
jmp 0x40da0d
push 2
pop edi
mov eax, dword [ebx + 0x3c]
sub eax, edi
je 0x40c5f9
dec eax
je 0x40c5f2
sub eax, 3
jne 0x40c60b
push 0x43b840
jmp 0x40c5fe
push 0x43b828
jmp 0x40c5fe
push 0x43b80c
push dword [esi + 0xd4]
call fcn.0042736a
pop ecx
pop ecx
mov ecx, dword [ebx + 4]
push 0
push dword [esi + 0x44]
mov eax, ecx
push 1
push ecx
push dword [ebx + 8]
shl eax, 3
push 3
mov ecx, eax
and ecx, 0xff
push ecx
push edi
sar eax, 8
push eax
push edi
push 8
lea eax, [ebp + 0x4c]
push eax
push 3
push dword [ebx + 0x3c]
push edi
push 3
push esi
call fcn.0040be19
push 0x43b7ec
push dword [esi + 0xd4]
call fcn.0042736a
add esp, 0x4c
push dword [ebx + 8]
call fcn.00403c87
mov eax, dword [ebx + 0x3c]
cmp eax, 6
pop ecx
jne 0x40c66e
mov eax, 0x440b10
jmp 0x40c67c
cmp eax, edi
mov eax, 0x441c9c
je 0x40c67c
mov eax, 0x441c80
mov dword [esi + 0x54], eax
call dword [eax]
mov ecx, dword [esi + 0x54]
lea edx, [esi + 0x1c]
push edx
push eax
mov dword [esi + 0x58], eax
call dword [ecx + 8]
mov eax, dword [esi + 0x54]
push dword [eax + 0x18]
push 0x43b7d0
push esi
call fcn.004083af
call fcn.0041a14b
push 0x43b7a4
push dword [esi + 0xd4]
mov dword [esi + 0x5c], eax
call fcn.0042736a
lea esi, [ebx + 0xbc]
mov eax, dword [esi]
xor edi, edi
add esp, 0x1c
cmp eax, edi
je 0x40c6d2
push eax
call fcn.00403c87
pop ecx
mov dword [esi], edi
lea esi, [ebx + 0xc0]
mov eax, dword [esi]
cmp eax, edi
je 0x40c6e7
push eax
call fcn.00403c87
pop ecx
mov dword [esi], edi
lea esi, [ebx + 0xe0]
mov eax, dword [esi]
cmp eax, edi
je 0x40c6fc
push eax
call fcn.00403c87
pop ecx
mov dword [esi], edi
lea esi, [ebx + 0xe4]
mov eax, dword [esi]
cmp eax, edi
je 0x40c72e
push eax
call fcn.00403c87
pop ecx
mov dword [esi], edi
jmp 0x40c72e
push 0x43b77c
jmp 0x40cd1a
push 0x43b744
jmp 0x40cd1a
mov eax, dword [ebp + 0x7c]
cmp eax, esi
jne 0x40c739
mov dword [ebx], 0xdeb
jmp 0x40da0d
cmp dword [eax + 8], 0xe
je 0x40c752
push 0x43b720
call fcn.00404045
push eax
mov eax, dword [ebp + 0x70]
jmp 0x40cd22
mov edi, dword [ebp + 0x70]
push 0x43b700
push dword [edi + 0xd4]
call fcn.0042736a
push 0x448930
call fcn.0042e440
push dword [edi + 0x1e4]
call fcn.00406b77
add esp, 0x10
test eax, eax
mov dword [edi + 0x1ec], eax
jne 0x40cb6c
push dword [edi + 0xd4]
call fcn.00403cc1
xor esi, esi
mov dword [ebx + 0x50], eax
inc esi
mov dword [eax], esi
mov dword [esp], 0x43b6f0
call fcn.00403e18
pop ecx
mov ecx, dword [ebx + 0x50]
push esi
push 0x43b6e4
mov dword [ecx + 4], eax
call fcn.00403e18
pop ecx
push eax
push dword [ebx + 0x50]
call fcn.00403cf1
push 0
push 0
push dword [ebx + 0x50]
call fcn.0042abc1
add esp, 0x18
jmp 0x40cb13
sub eax, 0xdff
je 0x40caf3
sub eax, 0x1d
je 0x40c9a6
sub eax, 0x46
je 0x40c97b
sub eax, 0x46
jne 0x40d66c
mov esi, dword [ebp + 0x7c]
test esi, esi
je 0x40d38e
cmp dword [esi + 8], 7
je 0x40c828
push 0x43b6d8
push dword [edi + 0xd4]
call fcn.0042736a
pop ecx
pop ecx
jmp 0x40d334
push 0x43b6c0
push dword [edi + 0xd4]
call fcn.0042736a
pop ecx
pop ecx
call fcn.00408ebe
test eax, eax
mov dword [ebx + 0xa0], eax
je 0x40cd15
push dword [ebx + 0x88]
call fcn.004191d3
push dword [ebx + 0x84]
mov esi, eax
add esi, 5
call fcn.004191d3
push dword [ebx + 0xa0]
add esi, eax
call fcn.004191d3
lea eax, [esi + eax + 0x14]
mov dword [ebp + 0x5c], eax
add eax, 4
push 1
push eax
mov dword [ebp + 0x58], eax
call fcn.00403bc7
mov ecx, dword [ebp + 0x5c]
mov edx, ecx
sar edx, 0x18
mov byte [eax], dl
mov edx, ecx
sar edx, 0x10
mov byte [eax + 1], dl
mov edx, ecx
sar edx, 8
lea esi, [eax + 4]
mov byte [eax + 2], dl
mov byte [eax + 3], cl
mov byte [esi], 3
push dword [ebx + 0x84]
mov dword [ebp + 0x70], eax
inc esi
call fcn.004191a9
sar eax, 0x18
mov byte [esi], al
push dword [ebx + 0x84]
call fcn.004191a9
sar eax, 0x10
mov byte [esi + 1], al
push dword [ebx + 0x84]
call fcn.004191a9
sar eax, 8
mov byte [esi + 2], al
push dword [ebx + 0x84]
call fcn.004191a9
mov byte [esi + 3], al
push dword [ebx + 0x88]
add esi, 4
push esi
call fcn.00419271
push dword [ebx + 0x84]
add esi, eax
push esi
call fcn.00419271
push dword [ebx + 0xa0]
add esi, eax
push esi
call fcn.00419271
add esi, eax
push 0x10
lea eax, [ebx + 0x2c]
push eax
push esi
call fcn.0042df20
add esp, 0x48
push edi
push 0x40f00c
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x64]
push eax
push dword [ebp + 0x58]
add esi, 0x10
push dword [ebp + 0x70]
mov byte [esi], 0
mov byte [esi + 1], 0
mov byte [esi + 2], 0
mov byte [esi + 3], 1
call fcn.0042a86e
add esp, 0x18
push dword [ebp + 0x70]
test eax, eax
jne 0x40c96d
call fcn.00403c87
pop ecx
jmp 0x40cbeb
call fcn.00403c87
mov esi, dword [ebp + 0x64]
pop ecx
jmp 0x40cc08
cmp dword [ebp + 0x7c], esi
jne 0x40cbdc
cmp dword [ebp + 0x78], esi
jg 0x40d1bc
mov eax, dword [edi + 0x1f0]
mov ecx, dword [edi + 0x1f4]
lea esi, [ebx + 0x6c]
mov dword [ebp + 0x60], eax
mov dword [esi], ecx
jmp 0x40d1ca
cmp dword [ebp + 0x7c], esi
je 0x40cbcc
test byte [ebx + 0x18], 4
jne 0x40c9c0
xor eax, eax
inc eax
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x1c], eax
jmp 0x40c9c6
mov dword [ebx + 0x20], esi
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x28], esi
mov dword [ebx + 0x24], esi
push 0x1e
push dword [edi + 0x1e4]
call fcn.004022e3
push eax
mov dword [ebx + 0xb0], eax
call fcn.004283eb
add esp, 0xc
test eax, eax
jne 0x40caeb
push dword [ebx + 0xb0]
call fcn.004283e4
push eax
push 0x43b69c
push edi
call fcn.004083af
push dword [ebx + 0xb0]
call fcn.0041f996
mov esi, eax
add esp, 0x14
cmp esi, 2
jne 0x40caa0
lea eax, [ebp + 0x70]
push eax
lea eax, [ebx + 0x48]
push eax
lea eax, [ebx + 0x44]
push eax
lea esi, [ebx + 0x40]
push esi
push dword [ebx + 0xb0]
call fcn.0041ebf3
add esp, 0x14
test eax, eax
je 0x40ca56
push 0
push dword [ebx + 0xb0]
call fcn.0041eb8a
pop ecx
pop ecx
mov dword [ebx + 0x4c], eax
jmp 0x40ca99
push dword [ebp + 0x70]
push 0x43b67c
push edi
call fcn.004083af
add esp, 0xc
push dword [ebp + 0x70]
push dword [ebx + 0xb0]
call fcn.004283e4
pop ecx
push eax
push 0x43b64c
call fcn.00404045
push eax
push edi
mov dword [ebp + 0x64], eax
call fcn.00408688
push dword [ebp + 0x64]
call fcn.00403c87
add esp, 0x18
and dword [esi], 0
xor esi, esi
jmp 0x40d12d
push esi
call fcn.0041fa7a
push eax
push 0x43b628
push edi
call fcn.004083af
push esi
call fcn.0041fa7a
add esp, 0x14
push eax
push dword [ebx + 0xb0]
call fcn.004283e4
pop ecx
push eax
push 0x43b600
call fcn.00404045
mov esi, eax
push esi
push edi
call fcn.00408688
push esi
call fcn.00403c87
add esp, 0x18
and dword [ebx + 0x40], 0
jmp 0x40ca99
mov dword [ebx + 0x40], esi
jmp 0x40d12d
cmp dword [ebp + 0x7c], esi
jne 0x40cb1d
push dword [ebp + 0x78]
push dword [ebp + 0x74]
push dword [ebx + 0x50]
call fcn.0042abc1
and dword [edi + 0xc8], 0
xor esi, esi
add esp, 0xc
inc esi
test eax, eax
jge 0x40cb28
mov dword [edi + 0xc8], esi
mov dword [ebx], 0xdff
jmp 0x40da0d
jne 0x40cb4c
push dword [ebx + 0x50]
call fcn.00403db6
push 1
push 0
push 0
mov eax, 0x43b5e8
mov esi, edi
call fcn.0040bfec
add esp, 0x10
jmp 0x40cd29
mov eax, dword [ebx + 0x50]
mov eax, dword [eax + 0x18]
mov eax, dword [eax]
push dword [eax + 8]
call fcn.00403e18
mov dword [edi + 0x1ec], eax
push dword [ebx + 0x50]
call fcn.00403db6
pop ecx
pop ecx
push 0
push dword [edi + 0x1ec]
push 4
push 4
push edi
call fcn.0040be19
push dword [edi + 0x1ec]
push 0x43b5d4
call fcn.00404045
mov esi, eax
push esi
push dword [edi + 0xd4]
call fcn.0042736a
mov al, byte [0x44a114]
add esp, 0x24
test al, 4
je 0x40cbc5
test al, 2
je 0x40cbb0
test al, 1
jne 0x40cbc5
push esi
push edi
call fcn.00408688
push 0x4376cc
push edi
call fcn.00408688
add esp, 0x10
push esi
call fcn.00403c87
pop ecx
mov dword [ebx], 0xe1c
jmp 0x40da0d
cmp dword [ebp + 0x7c], esi
je 0x40cbe6
push 0x43b594
jmp 0x40c134
cmp dword [ebp + 0x78], esi
jle 0x40cbf6
mov dword [ebx], 0xecd
jmp 0x40da0d
mov esi, dword [edi + 0x1f0]
mov eax, dword [edi + 0x1f4]
mov dword [ebp + 0x64], esi
mov dword [ebp + 0x54], eax
test esi, esi
je 0x40cc60
cmp byte [esi + 4], 4
jne 0x40cc42
push 0x43b578
push dword [edi + 0xd4]
call fcn.0042736a
push 0
push 0x10
lea eax, [esi + 5]
push eax
push 3
push 8
push edi
call fcn.0040be19
push esi
call fcn.00403c87
add esp, 0x24
jmp 0x40ce03
push 0x43b554
push dword [edi + 0xd4]
call fcn.0042736a
push esi
call fcn.00403c87
add esp, 0xc
jmp 0x40ce75
push 0x43b534
jmp 0x40ce68
cmp eax, edx
jg 0x40d051
je 0x40ceca
sub eax, 0xee1
je 0x40cdfc
sub eax, 0x49
je 0x40cdd7
sub eax, 0x35
je 0x40ccd4
sub eax, 0x26
jne 0x40d66c
mov eax, dword [ebp + 0x7c]
cmp eax, esi
je 0x40cdcc
mov eax, dword [eax + 8]
cmp eax, 0xf
jne 0x40ccc1
test byte [0x44a114], 1
je 0x40d12d
push 0x43b504
jmp 0x40ccec
cmp eax, 0xe
je 0x40d641
push 0x43b4d4
jmp 0x40c134
mov eax, dword [ebp + 0x7c]
cmp eax, esi
je 0x40d636
mov eax, dword [eax + 8]
cmp eax, 0xf
jne 0x40ccf7
push 0x43b4b0
push edi
call fcn.00408688
jmp 0x40d0a5
cmp eax, 7
je 0x40cd06
push 0x43b488
jmp 0x40c134
mov esi, dword [ebp + 0x7c]
call fcn.00408ebe
test eax, eax
mov dword [ebp + 0x64], eax
jne 0x40cd31
push 0x43b45c
call fcn.00404045
push eax
mov eax, edi
call fcn.0040b040
pop ecx
pop ecx
and dword [ebx], 0
jmp 0x40da0d
lea eax, [ebx + 0x7c]
push eax
push dword [ebp + 0x64]
call fcn.00420348
push dword [ebx + 0x8c]
mov dword [ebp + 0x60], eax
call fcn.0041841a
add esp, 0xc
xor esi, esi
mov dword [ebp + 0x70], 0x1f
push dword [ebp + 0x70]
push dword [ebp + 0x60]
call fcn.00419200
mov byte [ebp + esi + 0x2c], al
inc esi
dec dword [ebp + 0x70]
cmp dword [ebp + 0x70], 0xffffffff
pop ecx
pop ecx
jg 0x40cd57
lea eax, [ebp - 0x74]
push eax
call fcn.0041e37b
push 0x20
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0041e3a6
push 0x10
lea eax, [ebx + 0x2c]
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.0041e3a6
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp + 0x2c]
push eax
call fcn.0041e473
push 0
push 0x10
lea eax, [ebp + 0x2c]
push eax
push 3
push 8
push edi
call fcn.0040be19
push dword [ebp + 0x64]
call fcn.0041841a
add esp, 0x40
push dword [ebp + 0x60]
call fcn.0041841a
pop ecx
mov dword [ebx], 0xf85
jmp 0x40da0d
cmp dword [ebp + 0x7c], esi
jne 0x40d54a
push dword [ebp + 0x78]
push dword [ebp + 0x74]
push dword [ebx + 0x50]
call fcn.0042abc1
add esp, 0xc
mov dword [edi + 0xc8], esi
jmp 0x40d483
mov eax, dword [ebp + 0x7c]
cmp eax, esi
jne 0x40ce0e
mov dword [ebx], 0xee1
jmp 0x40da0d
cmp dword [eax + 8], 0xe
jne 0x40ce63
push 0x43b440
push dword [edi + 0xd4]
call fcn.0042736a
test byte [0x44a114], 1
pop ecx
pop ecx
je 0x40ce5a
push 0x43b420
push edi
call fcn.00408688
push dword [ebx + 0xa8]
push dword [ebx + 0xa4]
push edi
call fcn.00408657
push 0x43b410
push edi
call fcn.00408688
add esp, 0x1c
mov dword [ebx + 0x78], 1
jmp 0x40ce75
push 0x43b3f0
push dword [edi + 0xd4]
call fcn.0042736a
pop ecx
pop ecx
push dword [ebx + 0x88]
call fcn.0041841a
push dword [ebx + 0x84]
call fcn.0041841a
push dword [ebx + 0xa0]
call fcn.0041841a
add esp, 0xc
cmp dword [ebx + 0x78], 0
je 0x40d334
push dword [ebx + 0x64]
call fcn.00403c87
cmp dword [ebx + 0x40], 0
pop ecx
je 0x40d3ab
cmp dword [ebx + 0x1c], 0
jne 0x40d3ab
push 0x43b3cc
jmp 0x40d39e
mov eax, dword [ebp + 0x7c]
cmp eax, esi
je 0x40d61b
cmp dword [eax + 8], 0x28
je 0x40cf0f
push 0x43b3b0
push dword [edi + 0xd4]
call fcn.0042736a
test byte [0x44a114], 4
pop ecx
pop ecx
je 0x40cf03
push 0x43b390
push edi
call fcn.00408688
pop ecx
pop ecx
mov dword [ebx + 0x24], 1
jmp 0x40d12d
mov esi, dword [ebp + 0x7c]
lea edi, [ebp + 0x64]
lea ebx, [ebp + 0x5c]
call fcn.00408e1a
cmp dword [ebp + 0x5c], 0
jne 0x40cf2d
push 0x43b368
jmp 0x40d68f
mov eax, dword [ebp + 0x70]
push 0x43b350
push dword [eax + 0xd4]
call fcn.0042736a
mov esi, dword [ebp + 0x58]
mov eax, dword [esi + 0x50]
xor edi, edi
inc edi
push 0x43b338
mov dword [eax], edi
call fcn.00403e18
push dword [ebp + 0x64]
mov ecx, dword [esi + 0x50]
push 0xa
push dword [ebp + 0x5c]
mov dword [ecx + 4], eax
call fcn.0042e260
add esp, 0x18
test eax, eax
mov ebx, 0x437367
je 0x40cf8f
push ebx
call fcn.00403e18
push dword [ebp + 0x5c]
mov dword [ebp + 0x60], eax
push dword [ebp + 0x64]
push str._.s
call fcn.00404045
jmp 0x40cfac
push dword [ebp + 0x5c]
push dword [ebp + 0x64]
push str._.s
call fcn.00404045
push 0x43b32c
mov dword [ebp + 0x60], eax
call fcn.00403e18
mov dword [ebp + 0x64], eax
mov eax, dword [ebp + 0x60]
add esp, 0x10
cmp byte [eax], 0
je 0x40cfbf
mov ebx, 0x43b328
push dword [ebp + 0x60]
push ebx
push 0x43b308
call fcn.00404045
mov ecx, dword [esi + 0x50]
mov dword [ecx + 0xc], eax
mov eax, dword [esi + 0x50]
push 0
push dword [ebp + 0x64]
mov dword [eax + 0x10], edi
push dword [esi + 0x50]
call fcn.00403cf1
push dword [ebp + 0x60]
call fcn.00403c87
mov ebx, dword [ebp + 0x58]
mov edi, dword [ebp + 0x70]
add esp, 0x1c
xor esi, esi
push 0x23
push dword [edi + 0x1e4]
call fcn.00402036
test eax, eax
pop ecx
pop ecx
je 0x40d77d
test byte [ebx + 0x1a], 1
je 0x40d77d
cmp dword [ebx + 0x28], esi
jne 0x40d77d
mov dword [ebx + 0x58], 0x48
push 0x43b2e4
push dword [edi + 0xd4]
call fcn.0042736a
push esi
push 0x46
push edi
call fcn.0040be19
add esp, 0x14
mov dword [ebx], 0xfcb
jmp 0x40da0d
sub eax, 0xfcb
je 0x40d0f3
sub eax, 0x3b
je 0x40d0ce
sub eax, 0x8e
jne 0x40d66c
mov eax, dword [ebp + 0x7c]
cmp eax, esi
je 0x40da07
mov eax, dword [eax + 8]
cmp eax, 0xf
jne 0x40d0ac
test byte [0x44a114], 1
je 0x40d095
push 0x43b2d4
push edi
call fcn.00408688
pop ecx
pop ecx
push 0x43b2bc
push dword [edi + 0xd4]
call fcn.0042736a
pop ecx
pop ecx
jmp 0x40d12d
cmp eax, 0xe
je 0x40d12d
push eax
push 0x43b298
call fcn.00404045
push eax
mov eax, edi
call fcn.0040b040
add esp, 0xc
mov dword [ebx], esi
jmp 0x40da0d
cmp dword [ebp + 0x7c], esi
jne 0x40d7ff
push dword [ebp + 0x78]
push dword [ebp + 0x74]
push dword [ebx + 0x50]
call fcn.0042abc1
add esp, 0xc
mov dword [edi + 0xc8], esi
jmp 0x40d7f1
mov eax, dword [ebp + 0x7c]
cmp eax, esi
je 0x40d046
cmp dword [eax + 8], 0x47
je 0x40d676
push 0x43b274
push dword [edi + 0xd4]
call fcn.0042736a
push 0x43b24c
push edi
call fcn.00408688
add esp, 0x10
mov dword [ebx + 0x28], 1
mov eax, dword [ebp + 0x7c]
cmp dword [eax + 8], 0xf
jne 0x40d641
mov dword [ebx + 0x58], 9
push 0x1a
push dword [edi + 0x1e4]
call fcn.00402036
test eax, eax
pop ecx
pop ecx
je 0x40d3b5
call fcn.0042a69d
test eax, eax
je 0x40d3b5
cmp dword [ebx + 0x20], esi
jne 0x40d3b5
and dword [ebx + 0x78], 0
mov dword [ebx + 0x20], 1
push 0x43b224
push dword [edi + 0xd4]
call fcn.0042736a
push edi
push 0x40f00c
lea esi, [ebx + 0x6c]
push esi
lea ecx, [ebp + 0x60]
push ecx
lea eax, [ebx + 0x5c]
push 5
push eax
mov byte [eax], 0
mov byte [ebx + 0x5d], 0
mov byte [ebx + 0x5e], 0
mov byte [ebx + 0x5f], 1
mov byte [ebx + 0x60], 1
call fcn.0042a86e
add esp, 0x20
test eax, eax
jne 0x40d1c7
mov dword [ebx], 0xe62
jmp 0x40da0d
mov eax, dword [ebp + 0x60]
test eax, eax
mov dword [ebx + 0x64], eax
je 0x40d399
cmp dword [esi], 5
jl 0x40d399
cmp byte [eax + 4], 2
jne 0x40d399
add eax, 5
mov dword [ebx + 0x68], eax
movzx ecx, byte [eax + 1]
mov ch, byte [eax]
movzx edx, byte [eax + 2]
movzx eax, byte [eax + 3]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
push ecx
call fcn.00403a80
test eax, eax
pop ecx
mov dword [ebx + 0x74], eax
jge 0x40d227
push eax
push 0x43b1fc
push edi
call fcn.004083af
add esp, 0xc
and dword [ebx + 0x74], 0
push dword [ebx + 0x74]
add dword [ebx + 0x68], 4
push 0x43b1e0
push edi
call fcn.004083af
add esp, 0xc
and dword [ebx + 0x70], 0
mov eax, dword [ebx + 0x70]
cmp eax, dword [ebx + 0x74]
jge 0x40cea3
mov eax, dword [ebx + 0x68]
lea ecx, [ebx + 0x88]
push ecx
mov ecx, dword [ebx + 0x64]
mov dword [ebp + 0x70], eax
add eax, 4
sub ecx, eax
add ecx, dword [ebx + 0x6c]
mov dword [ebx + 0x68], eax
push ecx
call fcn.00403a80
pop ecx
push eax
push dword [ebx + 0x68]
call fcn.0041914f
add esp, 0xc
test eax, eax
jl 0x40d33c
add dword [ebx + 0x68], eax
mov eax, dword [ebx + 0x68]
lea ecx, [ebx + 0x84]
push ecx
mov ecx, dword [ebx + 0x64]
sub ecx, eax
add ecx, dword [ebx + 0x6c]
push ecx
call fcn.00403a80
pop ecx
push eax
push dword [ebx + 0x68]
call fcn.0041914f
add esp, 0xc
test eax, eax
jl 0x40d33c
add dword [ebx + 0x68], eax
mov eax, dword [ebx + 0x68]
mov ecx, dword [ebx + 0x64]
sub ecx, eax
add ecx, dword [ebx + 0x6c]
cmp ecx, 4
jl 0x40d33c
movzx ecx, byte [eax + 1]
mov ch, byte [eax]
movzx edx, byte [eax + 2]
movzx eax, byte [eax + 3]
shl ecx, 8
or ecx, edx
shl ecx, 8
or ecx, eax
push ecx
call fcn.00403a80
add dword [ebx + 0x68], 4
test eax, eax
mov edx, dword [ebx + 0x68]
pop ecx
lea ecx, [ebx + 0xa8]
mov dword [ecx], eax
jl 0x40d33c
mov esi, eax
mov eax, dword [ebx + 0x64]
sub eax, edx
add eax, dword [ebx + 0x6c]
push eax
call fcn.00403a80
cmp eax, esi
pop ecx
jl 0x40d33c
mov eax, dword [ebx + 0x68]
mov dword [ebx + 0xa4], eax
add eax, esi
mov dword [ebx + 0x68], eax
mov eax, dword [ebx + 0x40]
test eax, eax
je 0x40d36b
push dword [ebx + 0x44]
push eax
push dword [ebp + 0x70]
call fcn.0042fa40
add esp, 0xc
test eax, eax
je 0x40d353
inc dword [ebx + 0x70]
jmp 0x40d240
push 0x43b1b8
push dword [edi + 0xd4]
call fcn.0042736a
pop ecx
pop ecx
jmp 0x40cea3
push dword [ebx + 0x70]
push 0x43b18c
push edi
call fcn.004083af
add esp, 0xc
mov dword [ebx + 0x1c], 1
push dword [ebx + 0x70]
push 0x43b174
push edi
call fcn.004083af
push 0
push dword [ebx + 0x84]
push 5
push 6
push edi
call fcn.0040be19
add esp, 0x20
mov dword [ebx], 0xea8
jmp 0x40da0d
push 0x43b150
push dword [edi + 0xd4]
call fcn.0042736a
pop ecx
pop ecx
cmp dword [ebx + 0x78], 0
jne 0x40d641
xor esi, esi
cmp dword [ebx + 0x40], esi
je 0x40d5ba
cmp dword [ebx + 0x1c], esi
jne 0x40d5ba
test byte [0x44a114], 1
je 0x40d3df
push 0x43b12c
push edi
call fcn.00408688
pop ecx
pop ecx
push 0x1e
push dword [edi + 0x1e4]
call fcn.004022e3
push eax
mov dword [ebx + 0xb0], eax
call fcn.004283e4
push eax
push 0x43b114
push edi
call fcn.004083af
add esp, 0x18
mov dword [ebx + 0x1c], 1
xor eax, eax
cmp eax, esi
jne 0x40d622
cmp dword [ebx + 0x4c], esi
jne 0x40d438
test byte [0x44a114], 1
je 0x40d433
push 0x43b0f8
push edi
call fcn.00408688
pop ecx
pop ecx
mov dword [ebp + 0x70], esi
jmp 0x40d4b0
push dword [edi + 0xd4]
call fcn.00403cc1
mov dword [ebx + 0x50], eax
mov dword [eax], esi
mov dword [esp], 0x43b0e4
call fcn.00403e18
pop ecx
mov ecx, dword [ebx + 0x50]
push esi
mov dword [ecx + 4], eax
push dword [ebx + 0x48]
push 0x43b0c4
call fcn.00404045
pop ecx
pop ecx
push eax
push dword [ebx + 0x50]
call fcn.00403cf1
push esi
push esi
push dword [ebx + 0x50]
call fcn.0042abc1
add esp, 0x18
xor esi, esi
cmp eax, esi
jl 0x40d540
je 0x40d555
mov eax, dword [ebx + 0x50]
mov eax, dword [eax + 0x18]
mov eax, dword [eax]
push dword [eax + 8]
call fcn.00403e18
push dword [ebx + 0x50]
mov dword [ebp + 0x70], eax
call fcn.00403db6
pop ecx
pop ecx
xor esi, esi
push 0x1e
push dword [edi + 0x1e4]
call fcn.004022e3
lea ecx, [ebp + 0x54]
push ecx
push dword [ebp + 0x70]
lea ecx, [ebx + 0x7c]
push ecx
push eax
mov dword [ebx + 0xb0], eax
call fcn.0041eaf4
add esp, 0x18
cmp dword [ebp + 0x70], esi
mov dword [ebp + 0x64], eax
je 0x40d4fb
push dword [ebp + 0x70]
call fcn.0042d810
push eax
push dword [ebp + 0x70]
call fcn.00428411
push dword [ebp + 0x70]
call fcn.00403c87
add esp, 0x10
xor eax, eax
inc eax
cmp dword [ebp + 0x64], eax
je 0x40d410
cmp dword [ebp + 0x64], esi
je 0x40d57b
cmp dword [ebp + 0x64], 0xffffffff
jne 0x40d524
push 0x43b0b0
push edi
call fcn.00408688
pop ecx
pop ecx
jmp 0x40d40e
push 0xf52
push str..._ssh.c
push 0x43b084
call fcn.0042db48
add esp, 0xc
jmp 0x40d40e
mov dword [edi + 0xc8], 1
mov dword [ebx], 0xf2a
jmp 0x40da0d
push dword [ebx + 0x50]
call fcn.00403db6
push 1
push 0
push 0x43b06c
xor eax, eax
mov esi, edi
call fcn.0040bfec
add esp, 0x10
xor eax, eax
xor esi, esi
jmp 0x40d66f
push 0x43b04c
push edi
call fcn.00408688
push dword [ebx + 0xb0]
call fcn.004283e4
push eax
push edi
call fcn.00408688
push 0x43b048
push edi
call fcn.00408688
push dword [ebp + 0x54]
push edi
call fcn.00408688
push 0x43b040
push edi
call fcn.00408688
add esp, 0x2c
push dword [edi + 0xd4]
call fcn.00403cc1
mov dword [ebx + 0x50], eax
push 0x23
push dword [edi + 0x1e4]
call fcn.00402036
add esp, 0xc
test eax, eax
je 0x40cff9
test byte [ebx + 0x18], 0x20
je 0x40cff9
cmp dword [ebx + 0x24], esi
jne 0x40cff9
mov dword [ebx + 0x58], 0x29
push 0x43b020
push dword [edi + 0xd4]
call fcn.0042736a
push esi
push 0x27
push edi
call fcn.0040be19
add esp, 0x14
mov edx, 0xfa0
mov dword [ebx], edx
jmp 0x40da0d
push esi
push dword [ebx + 0x84]
push 5
push 6
push edi
call fcn.0040be19
add esp, 0x14
mov dword [ebx], 0xf5f
jmp 0x40da0d
mov eax, dword [ebx + 0x40]
test eax, eax
je 0x40d658
push eax
call fcn.00403c87
push dword [ebx + 0x48]
call fcn.00403c87
pop ecx
pop ecx
push 0x43b004
push dword [edi + 0xd4]
call fcn.0042736a
pop ecx
pop ecx
xor esi, esi
xor eax, eax
inc eax
mov dword [ebx], esi
jmp 0x40da0f
mov esi, dword [ebp + 0x7c]
lea edi, [ebp + 0x64]
lea ebx, [ebp + 0x60]
call fcn.00408e1a
cmp dword [ebp + 0x60], 0
jne 0x40d6aa
push 0x43afd4
call fcn.00404045
push eax
mov eax, dword [ebp + 0x70]
call fcn.0040b040
mov eax, dword [ebp + 0x58]
and dword [eax], 0
pop ecx
pop ecx
jmp 0x40da0d
mov eax, dword [ebp + 0x70]
push 0x43afb4
push dword [eax + 0xd4]
call fcn.0042736a
mov esi, dword [ebp + 0x58]
mov eax, dword [esi + 0x50]
xor edi, edi
inc edi
push 0x43af94
mov dword [eax], edi
call fcn.00403e18
push dword [ebp + 0x64]
mov ecx, dword [esi + 0x50]
mov dword [ecx + 4], eax
mov eax, dword [esi + 0x50]
and dword [eax + 8], 0
push 0xa
push dword [ebp + 0x60]
call fcn.0042e260
add esp, 0x18
test eax, eax
mov ebx, 0x437367
je 0x40d713
push ebx
call fcn.00403e18
push dword [ebp + 0x60]
mov dword [ebp + 0x5c], eax
push dword [ebp + 0x64]
push str._.s
call fcn.00404045
jmp 0x40d730
push dword [ebp + 0x60]
push dword [ebp + 0x64]
push str._.s
call fcn.00404045
push 0x43b32c
mov dword [ebp + 0x5c], eax
call fcn.00403e18
mov dword [ebp + 0x64], eax
mov eax, dword [ebp + 0x5c]
add esp, 0x10
cmp byte [eax], 0
je 0x40d743
mov ebx, 0x43b328
push dword [ebp + 0x5c]
push ebx
push 0x43af6c
call fcn.00404045
mov ecx, dword [esi + 0x50]
mov dword [ecx + 0xc], eax
mov eax, dword [esi + 0x50]
push 0
push dword [ebp + 0x64]
mov dword [eax + 0x10], edi
push dword [esi + 0x50]
call fcn.00403cf1
push dword [ebp + 0x5c]
call fcn.00403c87
mov ebx, dword [ebp + 0x58]
mov edi, dword [ebp + 0x70]
add esp, 0x1c
xor esi, esi
cmp dword [ebx + 0x58], 9
jne 0x40d7e2
test byte [ebx + 0x18], 8
jne 0x40d7a2
push 0x43af3c
call fcn.00404045
push eax
mov eax, edi
call fcn.0040b040
pop ecx
pop ecx
jmp 0x40d572
mov eax, dword [ebx + 0x50]
push 0x43af2c
mov dword [eax], 1
call fcn.00403e18
pop ecx
mov ecx, dword [ebx + 0x50]
push esi
mov dword [ecx + 4], eax
push dword [edi + 0xc0]
push dword [edi + 0x1ec]
push 0x43af18
call fcn.00404045
add esp, 0xc
push eax
push dword [ebx + 0x50]
call fcn.00403cf1
add esp, 0xc
push esi
push esi
push dword [ebx + 0x50]
call fcn.0042abc1
add esp, 0xc
xor esi, esi
cmp eax, esi
jge 0x40d80a
mov dword [edi + 0xc8], 1
mov dword [ebx], 0x1006
jmp 0x40da0d
jne 0x40d814
push dword [ebx + 0x50]
jmp 0x40d558
mov eax, dword [ebx + 0x58]
cmp eax, 9
jne 0x40d9d0
mov eax, dword [edi + 0x50]
test al, 5
jne 0x40d91f
mov eax, dword [ebx + 0x50]
mov eax, dword [eax + 0x18]
mov eax, dword [eax]
push dword [eax + 8]
call fcn.0042d810
cmp eax, 0x10
pop ecx
mov dword [ebp + 0x64], eax
jge 0x40d84f
xor esi, esi
mov dword [ebp + 0x70], 0xf
jmp 0x40d85b
mov esi, dword [ebp + 0x64]
and esi, 0xfffffff8
lea eax, [esi + 7]
mov dword [ebp + 0x70], eax
mov eax, dword [ebp + 0x64]
cmp eax, esi
jl 0x40d867
cmp eax, dword [ebp + 0x70]
jle 0x40d87e
push 0x104e
push str..._ssh.c
push 0x43aef8
call fcn.0042db48
add esp, 0xc
mov eax, dword [ebp + 0x70]
inc eax
push 1
push eax
call fcn.00403bc7
pop ecx
pop ecx
mov dword [ebp + 0x5c], eax
jmp 0x40d8f3
cmp esi, dword [ebp + 0x64]
jne 0x40d8b8
mov eax, dword [ebx + 0x50]
mov eax, dword [eax + 0x18]
mov eax, dword [eax]
push 0
push 6
push dword [eax + 8]
mov eax, edi
push 4
push 7
push dword [ebx + 0x58]
call fcn.0040be3a
add esp, 0x18
jmp 0x40d8f2
and dword [ebp + 0x60], 0
test esi, esi
jle 0x40d8da
call fcn.0041fd97
test al, al
mov ecx, dword [ebp + 0x60]
mov edx, dword [ebp + 0x5c]
mov byte [ecx + edx], al
je 0x40d8c0
inc dword [ebp + 0x60]
cmp dword [ebp + 0x60], esi
jl 0x40d8c0
mov eax, dword [ebp + 0x5c]
push 0
push eax
mov byte [esi + eax], 0
push 4
push 0x20
mov eax, edi
call fcn.0040be3a
add esp, 0x10
inc esi
cmp esi, dword [ebp + 0x70]
jle 0x40d891
push 0x43aecc
push dword [edi + 0xd4]
call fcn.0042736a
mov eax, edi
call fcn.0040be56
push dword [ebp + 0x5c]
call fcn.00403c87
add esp, 0xc
jmp 0x40d9ec
test al, 4
mov eax, dword [ebx + 0x50]
mov eax, dword [eax + 0x18]
mov eax, dword [eax]
push dword [eax + 8]
jne 0x40d9a5
call fcn.0042d810
mov esi, eax
cmp esi, 0x40
pop ecx
jae 0x40d96a
lea eax, [ebp + 0xc]
mov dword [ebp + 0x70], eax
mov eax, dword [ebx + 0x50]
mov eax, dword [eax + 0x18]
mov eax, dword [eax]
push dword [eax + 8]
lea eax, [ebp + 0xc]
push eax
call fcn.0042f020
pop ecx
pop ecx
jmp 0x40d962
call fcn.0041fd97
mov byte [ebp + esi + 0xc], al
inc esi
cmp esi, 0x40
jb 0x40d959
jmp 0x40d978
mov eax, dword [ebx + 0x50]
mov eax, dword [eax + 0x18]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp + 0x70], eax
push 0x43aeac
push dword [edi + 0xd4]
call fcn.0042736a
push 0
push 6
push esi
push dword [ebp + 0x70]
push 3
push esi
push 1
push 7
push dword [ebx + 0x58]
push edi
call fcn.0040be19
add esp, 0x30
jmp 0x40d9ec
call fcn.0042d810
mov dword [esp], 0x43ae90
push dword [edi + 0xd4]
mov esi, eax
call fcn.0042736a
mov eax, dword [ebx + 0x50]
mov eax, dword [eax + 0x18]
mov eax, dword [eax]
push 0
push 6
push esi
push dword [eax + 8]
jmp 0x40d990
mov ecx, dword [ebx + 0x50]
mov ecx, dword [ecx + 0x18]
mov ecx, dword [ecx]
push esi
push 6
push dword [ecx + 8]
push 4
push 7
push eax
push edi
call fcn.0040be19
add esp, 0x1c
push 0x43ae80
push dword [edi + 0xd4]
call fcn.0042736a
push dword [ebx + 0x50]
call fcn.00403db6
add esp, 0xc
mov dword [ebx], 0x1094
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret