Function at 0x41cfa0
Capabilities:
Contain obfuscated stackstrings
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49b9e5
mov eax, dword fs:[0]
push eax
sub esp, 0x74
mov eax, dword [0x4d90c0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x4dd0bc
push dword [0x4dd358]
call dword [sym.imp.d3dx9_43.dll_D3DXCreateSprite]
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
lea ecx, [ebp - 0x34]
movq qword [ebp - 0x34], xmm0
xor bl, bl
call fcn.00408930
mov dword [ebp - 4], 0
xor ecx, ecx
movaps xmm0, xmmword [0x4d3370]
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x68], 0x74787072
mov dword [ebp - 0x64], 0x7d667c61
mov dword [ebp - 0x60], 0x7d633d77
mov word [ebp - 0x5c], 0x74
mov al, byte [ebp - 0x78]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x1c
jb 0x41d024
push 0x4dd100
push 0
push 0
push 0x80808080
mov esi, dword [sym.imp.d3dx9_43.dll_D3DXCreateTextureFromFileExA]
lea eax, [ebp - 0x77]
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push 0xfffffffffffffffe
push eax
push dword [0x4dd358]
mov byte [ebp - 0x5b], 0
call esi
test eax, eax
je 0x41d0cc
movaps xmm0, xmmword [0x4d31b0]
mov bl, 1
movups xmmword [ebp - 0x78], xmm0
mov dword [ebp - 0x68], 0xc0406
xor ecx, ecx
mov dword [ebp - 0x64], 0x9120815
mov dword [ebp - 0x60], 0x9174903
mov word [ebp - 0x5c], 0
mov al, byte [ebp - 0x78]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x1c
jb 0x41d093
lea eax, [ebp - 0x77]
mov byte [ebp - 0x5b], 0
push eax
lea ecx, [ebp - 0x28]
call fcn.00406160
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x34]
call fcn.00407920
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00402480
movaps xmm0, xmmword [0x4d3550]
xor ecx, ecx
movups xmmword [ebp - 0x78], xmm0
mov byte [ebp - 0x58], 0
movaps xmm0, xmmword [0x4d34a0]
movups xmmword [ebp - 0x68], xmm0
mov al, byte [ebp - 0x78]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x1f
jb 0x41d0e8
push 0x4dcfb8
push 0
push 0
push 0x80808080
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push 0xfffffffffffffffe
lea eax, [ebp - 0x77]
mov byte [ebp - 0x58], 0
push eax
push dword [0x4dd358]
call esi
test eax, eax
je 0x41d17e
movaps xmm0, xmmword [0x4d3330]
mov bl, 1
movups xmmword [ebp - 0x78], xmm0
xor ecx, ecx
mov byte [ebp - 0x58], 0
movaps xmm0, xmmword [0x4d3630]
movups xmmword [ebp - 0x68], xmm0
mov al, byte [ebp - 0x78]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x1f
jb 0x41d145
lea eax, [ebp - 0x77]
mov byte [ebp - 0x58], 0
push eax
lea ecx, [ebp - 0x28]
call fcn.00406160
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x34]
call fcn.00407920
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00402480
movaps xmm0, xmmword [0x4d34c0]
xor ecx, ecx
movups xmmword [ebp - 0x7c], xmm0
mov word [ebp - 0x5c], 0x57
movaps xmm0, xmmword [0x4d3470]
movups xmmword [ebp - 0x6c], xmm0
nop dword [eax]
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x20
jb 0x41d1a0
push 0x4dcfe0
push 0
push 0
push 0x80808080
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push 0xfffffffffffffffe
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x5b], 0
push eax
push dword [0x4dd358]
call esi
test eax, eax
je 0x41d239
movaps xmm0, xmmword [0x4d3530]
mov bl, 1
movups xmmword [ebp - 0x7c], xmm0
xor ecx, ecx
mov word [ebp - 0x5c], 0x5c
movaps xmm0, xmmword [0x4d33b0]
movups xmmword [ebp - 0x6c], xmm0
nop
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x20
jb 0x41d200
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x5b], 0
push eax
lea ecx, [ebp - 0x28]
call fcn.00406160
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x34]
call fcn.00407920
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00402480
movaps xmm0, xmmword [0x4d3360]
xor ecx, ecx
movups xmmword [ebp - 0x7c], xmm0
mov word [ebp - 0x5c], 0x7a73
movaps xmm0, xmmword [0x4d3560]
movups xmmword [ebp - 0x6c], xmm0
mov byte [ebp - 0x5a], 0
nop dword [eax + eax]
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x21
jb 0x41d260
push 0x4dd104
push 0
push 0
push 0x80808080
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push 0xfffffffffffffffe
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x5a], 0
push eax
push dword [0x4dd358]
call esi
test eax, eax
je 0x41d2fc
movaps xmm0, xmmword [0x4d3220]
mov bl, 1
movups xmmword [ebp - 0x7c], xmm0
xor ecx, ecx
mov word [ebp - 0x5c], 0x1d14
movaps xmm0, xmmword [0x4d3100]
movups xmmword [ebp - 0x6c], xmm0
mov byte [ebp - 0x5a], 0
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x21
jb 0x41d2c3
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x5a], 0
push eax
lea ecx, [ebp - 0x28]
call fcn.00406160
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x34]
call fcn.00407920
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00402480
movaps xmm0, xmmword [str.Y07_6]
xor ecx, ecx
movups xmmword [ebp - 0x7c], xmm0
mov word [ebp - 0x5c], 0x3e37
movaps xmm0, xmmword [0x4d3240]
movups xmmword [ebp - 0x6c], xmm0
mov byte [ebp - 0x5a], 0
nop
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x21
jb 0x41d320
push 0x4dcfb0
push 0
push 0
push 0x80808080
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push 0xfffffffffffffffe
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x5a], 0
push eax
push dword [0x4dd358]
call esi
test eax, eax
je 0x41d3bc
movaps xmm0, xmmword [0x4d34e0]
mov bl, 1
movups xmmword [ebp - 0x7c], xmm0
xor ecx, ecx
mov word [ebp - 0x5c], 0x4d44
movaps xmm0, xmmword [0x4d3430]
movups xmmword [ebp - 0x6c], xmm0
mov byte [ebp - 0x5a], 0
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x21
jb 0x41d383
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x5a], 0
push eax
lea ecx, [ebp - 0x28]
call fcn.00406160
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x34]
call fcn.00407920
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00402480
movaps xmm0, xmmword [str.52:3]
xor ecx, ecx
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x5c], 0x3b322c
movaps xmm0, xmmword [0x4d3580]
movups xmmword [ebp - 0x6c], xmm0
nop dword [eax + eax]
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x22
jb 0x41d3e0
push 0x4dcb8c
push 0
push 0
push 0x80808080
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push 0xfffffffffffffffe
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x59], 0
push eax
push dword [0x4dd358]
call esi
test eax, eax
je 0x41d479
movaps xmm0, xmmword [str.Y07_6]
mov bl, 1
movups xmmword [ebp - 0x7c], xmm0
xor ecx, ecx
mov dword [ebp - 0x5c], 0x3e3729
movaps xmm0, xmmword [0x4d35e0]
movups xmmword [ebp - 0x6c], xmm0
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x22
jb 0x41d440
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x59], 0
push eax
lea ecx, [ebp - 0x28]
call fcn.00406160
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x34]
call fcn.00407920
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00402480
movaps xmm0, xmmword [0x4d3590]
xor ecx, ecx
movups xmmword [ebp - 0x7c], xmm0
mov dword [ebp - 0x5c], 0x5a534d13
movaps xmm0, xmmword [0x4d33e0]
movups xmmword [ebp - 0x6c], xmm0
mov byte [ebp - 0x58], 0
nop dword [eax]
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x23
jb 0x41d4a0
push 0x4dd004
push 0
push 0
push 0x80808080
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push 0xfffffffffffffffe
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x58], 0
push eax
push dword [0x4dd358]
call esi
test eax, eax
je 0x41d562
movaps xmm0, xmmword [0x4d32d0]
mov bl, 1
movups xmmword [ebp - 0x7c], xmm0
xor ecx, ecx
mov dword [ebp - 0x5c], 0x141d035d
movaps xmm0, xmmword [0x4d3180]
movups xmmword [ebp - 0x6c], xmm0
mov byte [ebp - 0x58], 0
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x23
jb 0x41d508
push dword [ebp - 0x80]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x58], 0
call fcn.004026f0
lea ecx, [ebp - 0x7b]
mov byte [ebp - 4], 7
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41d530
sub ecx, edx
lea eax, [ebp - 0x7b]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.004080c0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x34]
call fcn.00407920
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00402480
movaps xmm0, xmmword [0x4d35b0]
xor ecx, ecx
movups xmmword [ebp - 0x78], xmm0
mov byte [ebp - 0x58], 0
movaps xmm0, xmmword [0x4d33f0]
movups xmmword [ebp - 0x68], xmm0
nop
mov al, byte [ebp - 0x78]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x1f
jb 0x41d580
push 0x4dd098
push 0
push 0
push 0x80808080
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push 0xfffffffffffffffe
lea eax, [ebp - 0x77]
mov byte [ebp - 0x58], 0
push eax
push dword [0x4dd358]
call esi
test eax, eax
je 0x41d638
movaps xmm0, xmmword [0x4d3110]
mov bl, 1
movups xmmword [ebp - 0x78], xmm0
xor ecx, ecx
mov byte [ebp - 0x58], 0
movaps xmm0, xmmword [0x4d31f0]
movups xmmword [ebp - 0x68], xmm0
nop dword [eax]
mov al, byte [ebp - 0x78]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x1f
jb 0x41d5e0
push dword [ebp - 0x80]
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x58], 0
call fcn.004026f0
lea ecx, [ebp - 0x77]
mov byte [ebp - 4], 9
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41d606
sub ecx, edx
lea eax, [ebp - 0x77]
push ecx
push eax
lea ecx, [ebp - 0x28]
call fcn.004080c0
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x34]
call fcn.00407920
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00402480
movaps xmm0, xmmword [0x4d31e0]
xor ecx, ecx
movups xmmword [ebp - 0x7c], xmm0
mov word [ebp - 0x5c], 3
movaps xmm0, xmmword [0x4d30f0]
movups xmmword [ebp - 0x6c], xmm0
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x20
jb 0x41d656
push 0x4dcff0
push 0
push 0
push 0x80808080
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push 0xfffffffffffffffe
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x5b], 0
push eax
push dword [0x4dd358]
call esi
test eax, eax
je 0x41d6ee
movaps xmm0, xmmword [0x4d3520]
mov bl, 1
movups xmmword [ebp - 0x7c], xmm0
xor ecx, ecx
mov word [ebp - 0x5c], 0x43
movaps xmm0, xmmword [0x4d3320]
movups xmmword [ebp - 0x6c], xmm0
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x20
jb 0x41d6b5
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x5b], 0
push eax
lea ecx, [ebp - 0x28]
call fcn.00406160
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x34]
call fcn.00407920
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00402480
movaps xmm0, xmmword [0x4d3310]
xor ecx, ecx
movups xmmword [ebp - 0x7c], xmm0
mov word [ebp - 0x5c], 0x6c65
movaps xmm0, xmmword [0x4d3600]
movups xmmword [ebp - 0x6c], xmm0
mov byte [ebp - 0x5a], 0
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x21
jb 0x41d710
push 0x4dcfb4
push 0
push 0
push 0x80808080
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push 0xfffffffffffffffe
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x5a], 0
push eax
push dword [0x4dd358]
call esi
test eax, eax
je 0x41d7ac
movaps xmm0, xmmword [0x4d34f0]
mov bl, 1
movups xmmword [ebp - 0x7c], xmm0
xor ecx, ecx
mov word [ebp - 0x5c], 0x4148
movaps xmm0, xmmword [0x4d33d0]
movups xmmword [ebp - 0x6c], xmm0
mov byte [ebp - 0x5a], 0
mov al, byte [ebp - 0x7c]
xor byte [ebp + ecx - 0x7b], al
inc ecx
cmp ecx, 0x21
jb 0x41d773
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x5a], 0
push eax
lea ecx, [ebp - 0x28]
call fcn.00406160
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x34]
call fcn.00407920
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00402480
movaps xmm0, xmmword [0x4d3390]
xor ecx, ecx
movups xmmword [ebp - 0x78], xmm0
mov byte [ebp - 0x58], 0
movaps xmm0, xmmword [0x4d34d0]
movups xmmword [ebp - 0x68], xmm0
mov al, byte [ebp - 0x78]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x1f
jb 0x41d7c8
push 0x4dd0c0
push 0
push 0
push 0x80808080
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push 0xfffffffffffffffe
lea eax, [ebp - 0x77]
mov byte [ebp - 0x58], 0
push eax
push dword [0x4dd358]
call esi
test eax, eax
je 0x41d85e
movaps xmm0, xmmword [0x4d3420]
mov bl, 1
movups xmmword [ebp - 0x78], xmm0
xor ecx, ecx
mov byte [ebp - 0x58], 0
movaps xmm0, xmmword [0x4d3570]
movups xmmword [ebp - 0x68], xmm0
mov al, byte [ebp - 0x78]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x1f
jb 0x41d825
lea eax, [ebp - 0x77]
mov byte [ebp - 0x58], 0
push eax
lea ecx, [ebp - 0x28]
call fcn.00406160
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x34]
call fcn.00407920
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00402480
movaps xmm0, xmmword [0x4d32a0]
xor ecx, ecx
movups xmmword [ebp - 0x78], xmm0
mov byte [ebp - 0x58], 0
movaps xmm0, xmmword [0x4d30b0]
movups xmmword [ebp - 0x68], xmm0
nop word [eax + eax]
mov al, byte [ebp - 0x78]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x1f
jb 0x41d880
push 0x4dd0c8
push 0
push 0
push 0x80808080
push 0xffffffffffffffff
push 1
push 1
push 0
push 0
push 0
push 0xfffffffffffffffe
push 0xfffffffffffffffe
lea eax, [ebp - 0x77]
mov byte [ebp - 0x58], 0
push eax
push dword [0x4dd358]
call esi
test eax, eax
je 0x41d919
movaps xmm0, xmmword [0x4d3540]
mov bl, 1
movups xmmword [ebp - 0x78], xmm0
xor ecx, ecx
mov byte [ebp - 0x58], 0
movaps xmm0, xmmword [0x4d3450]
movups xmmword [ebp - 0x68], xmm0
nop dword [eax]
mov al, byte [ebp - 0x78]
xor byte [ebp + ecx - 0x77], al
inc ecx
cmp ecx, 0x1f
jb 0x41d8e0
lea eax, [ebp - 0x77]
mov byte [ebp - 0x58], 0
push eax
lea ecx, [ebp - 0x28]
call fcn.00406160
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x34]
call fcn.00407920
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0
call fcn.00402480
lea ecx, [ebp - 0x4c]
call fcn.0041cec0
push eax
mov ecx, 0x4daf50
call fcn.00406090
lea ecx, [ebp - 0x4c]
call fcn.00402480
test bl, bl
je 0x41da09
push 0x4cdf71
lea ecx, [ebp - 0x28]
call fcn.00406160
mov byte [ebp - 4], 0xf
mov esi, dword [ebp - 0x34]
mov edi, dword [ebp - 0x30]
cmp esi, edi
je 0x41d99f
push esi
lea ecx, [ebp - 0x4c]
call fcn.004061a0
push 0x4d2e44
lea edx, [ebp - 0x4c]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x70]
call fcn.00407760
add esp, 4
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x11
call fcn.00406080
lea ecx, [ebp - 0x70]
call fcn.00402480
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0xf
call fcn.00402480
add esi, 0x18
cmp esi, edi
jne 0x41d957
movaps xmm0, xmmword [0x4d3340]
xor ecx, ecx
movups xmmword [ebp - 0x54], xmm0
movaps xmm0, xmmword [0x4d3070]
movups xmmword [ebp - 0x44], xmm0
mov al, byte [ebp - 0x54]
xor byte [ebp + ecx - 0x53], al
inc ecx
cmp ecx, 0x1e
jb 0x41d9b7
lea eax, [ebp - 0x28]
mov byte [ebp - 0x35], 0
push eax
lea edx, [ebp - 0x53]
lea ecx, [ebp - 0x70]
call fcn.00407700
add esp, 4
mov ecx, eax
call fcn.00402470
push 0x30
push str.Error
push eax
push dword [0x4dcb80]
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x70]
call fcn.00402480
lea ecx, [ebp - 0x28]
call fcn.00402480
xor bl, bl
jmp 0x41da53
mov eax, dword [0x4dcfb8]
push 0x4dcf90
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [0x4dcfb0]
push 0x4dd108
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [0x4dd098]
push 0x4dd0d0
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov eax, dword [0x4dd0c0]
push 0x4dd09c
push 0
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov bl, 1
lea ecx, [ebp - 0x34]
call fcn.00404d20
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00472221
mov esp, ebp
pop ebp
ret