Function at 0x40c0f1
Capabilities:
Read file on windows

Disassembly:
push 0x898
mov eax, 0x46e4a7
call fcn.004510b2
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x8a0], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x898], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x8a4], eax
xor eax, eax
xor ebx, ebx
mov byte [ebp - 0x88], bl
lea edi, [ebp - 0x87]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x4c], bl
lea edi, [ebp - 0x4b]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov esi, 0xff
push esi
stosb byte es:[edi], al
lea eax, [ebp - 0x1ef]
push ebx
push eax
mov byte [ebp - 0x1f0], bl
call fcn.0044b040
add esp, 0xc
push esi
lea eax, [ebp - 0x4ef]
push ebx
push eax
mov byte [ebp - 0x4f0], bl
call fcn.0044b040
add esp, 0xc
push esi
lea eax, [ebp - 0x2ef]
push ebx
push eax
mov byte [ebp - 0x2f0], bl
call fcn.0044b040
xor eax, eax
mov byte [ebp - 0xd8], bl
lea edi, [ebp - 0xd7]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0xb0], bl
lea edi, [ebp - 0xaf]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0xc4], bl
lea edi, [ebp - 0xc3]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0xec], bl
add esp, 0xc
xor eax, eax
lea edi, [ebp - 0xeb]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x60], bl
lea edi, [ebp - 0x5f]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x74], bl
lea edi, [ebp - 0x73]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x38], bl
lea edi, [ebp - 0x37]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
xor eax, eax
mov byte [ebp - 0x9c], bl
lea edi, [ebp - 0x9b]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
push esi
stosb byte es:[edi], al
lea eax, [ebp - 0x5ef]
push ebx
push eax
mov dword [ebp - 0x894], ebx
mov byte [ebp - 0x5f0], bl
call fcn.0044b040
xor eax, eax
mov byte [ebp - 0x878], bl
lea edi, [ebp - 0x877]
stosw word es:[edi], ax
mov byte [ebp - 0x880], bl
lea edi, [ebp - 0x87f]
stosw word es:[edi], ax
mov eax, dword [ebp - 0x8a4]
mov byte [eax], bl
add esp, 0xc
lea eax, [ebp - 0x828]
push eax
lea eax, [ebp - 0x89c]
push eax
mov dword [ebp - 0x868], ebx
call fcn.0042fa08
pop ecx
mov ecx, eax
call fcn.0042fae4
lea ecx, [ebp - 0x844]
mov dword [ebp - 4], ebx
call fcn.0042c5b8
push 0x10
pop edi
cmp dword [eax + 0x14], edi
jb 0x40c29d
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x88]
push 0x14
push eax
call fcn.0044c4aa
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x844]
call fcn.004031e0
lea eax, [ebp - 0x844]
push eax
call fcn.0042c775
pop ecx
cmp dword [eax + 0x14], edi
jb 0x40c2d1
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x4c]
push 0x14
push eax
call fcn.0044c4aa
add esp, 0xc
push ebx
push 1
lea ecx, [ebp - 0x844]
call fcn.004031e0
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x14]
cmp edx, edi
jb 0x40c2fc
mov esi, dword [eax]
jmp 0x40c2fe
mov esi, eax
mov ecx, dword [eax + 0x10]
add ecx, esi
cmp edx, edi
jb 0x40c309
mov eax, dword [eax]
push dword [ebp - 0x898]
mov dword [ebp - 0x890], ebx
push ecx
push eax
lea eax, [ebp - 0x890]
push eax
mov dword [ebp - 0x88c], ebx
mov dword [ebp - 0x888], ebx
call fcn.0040ef78
mov byte [ebp - 4], 1
lea eax, [ebp - 0x861]
lea esi, [ebp - 0x890]
mov byte [ebp - 0x861], bl
call fcn.0040df73
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp dword [0x49910c], ebx
je 0x40c6f4
push ebx
push 0x80
push 3
push ebx
push 1
push SysReAllocString
push 0x498eb8
mov dword [ebp - 0x89c], ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x874], eax
cmp eax, 0xffffffff
jne 0x40c3b1
push ebx
push str.TestMode
push str.Failed_to_Open_Test_ConfigFile
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
cmp dword [ebp - 0x890], ebx
je 0x40cce1
push dword [ebp - 0x890]
jmp 0x40ccdb
mov edi, 0x200
push edi
lea eax, [ebp - 0x7f0]
push ebx
push eax
call fcn.0044b040
add esp, 0xc
push ebx
lea eax, [ebp - 0x89c]
push eax
push edi
lea eax, [ebp - 0x7f0]
push eax
push dword [ebp - 0x874]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp - 0x874]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x89c], ebx
jbe 0x40c6f4
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [ebp - 0x7f0]
push 0x4789cc
mov dword [ebp - 0x87c], eax
call fcn.0040bf76
pop ecx
mov dword [ebp - 0x870], eax
cmp eax, ebx
je 0x40c5fc
push 0x4789d0
call fcn.0040bf76
pop ecx
mov dword [ebp - 0x874], eax
cmp eax, ebx
jne 0x40c44f
push dword [ebp - 0x870]
call esi
add eax, dword [ebp - 0x870]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
sub eax, dword [ebp - 0x870]
dec eax
mov dword [ebp - 0x86c], eax
cmp eax, ebx
jle 0x40c5f1
push 0x4789d4
call esi
push eax
push 0x4789d4
push dword [ebp - 0x87c]
call fcn.0044b277
add esp, 0xc
test eax, eax
jne 0x40c491
lea eax, [ebp - 0x1f0]
jmp 0x40c4da
push 0x4789e8
call esi
push eax
push 0x4789e8
push dword [ebp - 0x87c]
call fcn.0044b277
add esp, 0xc
test eax, eax
jne 0x40c4b8
lea eax, [ebp - 0x88]
jmp 0x40c4da
push str.Arch
call esi
push eax
push str.Arch
push dword [ebp - 0x87c]
call fcn.0044b277
add esp, 0xc
test eax, eax
jne 0x40c4e9
lea eax, [ebp - 0x4c]
push dword [ebp - 0x86c]
push dword [ebp - 0x870]
push eax
jmp 0x40c51a
push str.Version
call esi
push eax
push str.Version
push dword [ebp - 0x87c]
call fcn.0044b277
add esp, 0xc
test eax, eax
jne 0x40c521
push dword [ebp - 0x86c]
push dword [ebp - 0x870]
push dword [ebp - 0x8a0]
call edi
jmp 0x40c5f1
push str.Locale
call esi
push eax
push str.Locale
push dword [ebp - 0x87c]
call fcn.0044b277
add esp, 0xc
test eax, eax
jne 0x40c5b7
push 0x14
push dword [ebp - 0x870]
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x844]
call fcn.00402559
lea eax, [ebp - 0x844]
push eax
lea eax, [ebp - 0x860]
mov byte [ebp - 4], 2
call fcn.00424821
pop ecx
mov esi, eax
lea edi, [ebp - 0x828]
mov byte [ebp - 4], 3
call fcn.004030fd
push ebx
push 1
lea ecx, [ebp - 0x860]
call fcn.004031e0
push ebx
push 1
lea ecx, [ebp - 0x844]
mov byte [ebp - 4], 1
call fcn.004031e0
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpynA]
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
jmp 0x40c5f1
push str.Cntry
call esi
push eax
push str.Cntry
push dword [ebp - 0x87c]
call fcn.0044b277
add esp, 0xc
test eax, eax
jne 0x40c5f1
push 3
push dword [ebp - 0x870]
lea eax, [ebp - 0x878]
push eax
call edi
mov dword [ebp - 0x868], 1
mov eax, dword [ebp - 0x874]
jmp 0x40c407
mov dword [ebp - 0x7f8], 0xf
mov dword [ebp - 0x7fc], ebx
mov byte [ebp - 0x80c], bl
push ebx
push ebx
push 1
lea eax, [ebp - 0x80c]
push ebx
push eax
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 4
call fcn.0040b9b0
add esp, 0x14
test eax, eax
jns 0x40c65b
push ebx
lea eax, [ebp - 0x1f0]
push eax
push str.FAILED_to_read_map.xml_File
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push ebx
push 1
lea ecx, [ebp - 0x80c]
call fcn.004031e0
jmp 0x40c39a
cmp dword [ebp - 0x7f8], 0x10
mov ecx, dword [ebp - 0x80c]
mov eax, ecx
jae 0x40c672
lea eax, [ebp - 0x80c]
mov esi, dword [ebp - 0x7fc]
add esi, eax
cmp dword [ebp - 0x7f8], 0x10
jb 0x40c68b
mov dword [ebp - 0x874], ecx
jmp 0x40c697
lea eax, [ebp - 0x80c]
mov dword [ebp - 0x874], eax
push dword [ebp - 0x88c]
lea eax, [ebp - 0x86c]
push dword [ebp - 0x890]
lea edi, [ebp - 0x890]
push eax
call fcn.00412217
push dword [ebp - 0x898]
mov ecx, edi
push esi
push dword [ebp - 0x874]
push dword [ebp - 0x890]
call fcn.0040f3d0
lea eax, [ebp - 0x861]
mov esi, edi
mov byte [ebp - 0x861], bl
call fcn.0040df73
push ebx
push 1
lea ecx, [ebp - 0x80c]
mov byte [ebp - 4], 1
call fcn.004031e0
mov esi, dword [ebp - 0x890]
mov dword [0x499114], esi
call fcn.00413bca
call fcn.00413c96
mov edi, eax
cmp edi, ebx
je 0x40ccd6
push str.java_update_map
push dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x40ccd6
mov eax, dword [edi + 0xc]
push str.cntry_lookup
call fcn.00413e63
mov esi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
pop ecx
cmp eax, ebx
je 0x40c78e
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x40c78e
push 0xffffffffffffffff
push dword [eax + 4]
lea eax, [ebp - 0x5f0]
push pe_nt_image_headers32
push eax
call fcn.0044b78c
lea eax, [ebp - 0x5f0]
push eax
lea ecx, [ebp - 0x880]
call fcn.0041453f
add esp, 0x14
cmp dword [ebp - 0x868], ebx
jne 0x40c7a7
lea eax, [ebp - 0x880]
push eax
lea eax, [ebp - 0x878]
push eax
call esi
jmp 0x40c7a7
push 0x478a4c
lea eax, [ebp - 0x878]
push eax
call esi
push str.No_cntry_lookup_tag_in_map.xml
call fcn.00429029
pop ecx
mov eax, dword [edi + 0xc]
push str.DEBUG
call fcn.00413e63
pop ecx
cmp eax, ebx
je 0x40c7c8
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x40c7c8
mov ecx, dword [eax + 4]
call fcn.0040b595
mov eax, dword [edi + 0xc]
push str.SendUDPing
call fcn.00413e63
pop ecx
test eax, eax
je 0x40c842
lea eax, [ebp - 0x868]
push 1
push eax
call fcn.0040fa62
pop ecx
pop ecx
test eax, eax
je 0x40c842
mov eax, dword [ebp - 0x868]
push 1
lea esi, [ebp - 0x24]
mov dword [ebp - 0x80c], eax
mov dword [ebp - 0x7f4], ebx
mov byte [ebp - 0x7f8], bl
call fcn.0040b364
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x808], eax
push str.SendUDPing
lea eax, [ebp - 0x80c]
push eax
mov ecx, esi
call fcn.0042f0e8
lea esi, [ebp - 0x80c]
call fcn.0042f012
lea esi, [ebp - 0x20]
call fcn.0043df69
mov eax, dword [edi + 0xc]
push str.SendUAPing
call fcn.00413e63
pop ecx
test eax, eax
je 0x40c8bc
lea eax, [ebp - 0x868]
push 1
push eax
call fcn.0040fa62
pop ecx
pop ecx
test eax, eax
je 0x40c8bc
mov eax, dword [ebp - 0x868]
push 1
lea esi, [ebp - 0x24]
mov dword [ebp - 0x80c], eax
mov dword [ebp - 0x7f4], ebx
mov byte [ebp - 0x7f8], bl
call fcn.0040b364
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x808], eax
push str.SendUAPing
lea eax, [ebp - 0x80c]
push eax
mov ecx, esi
call fcn.0042f0e8
lea esi, [ebp - 0x80c]
call fcn.0042f012
lea esi, [ebp - 0x20]
call fcn.0043df69
mov eax, dword [edi + 0xc]
push str.mapping
call fcn.00413e63
mov esi, eax
pop ecx
mov dword [ebp - 0x86c], eax
cmp esi, ebx
je 0x40cc14
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push str.mapping
push dword [esi + 4]
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x40cbfd
mov eax, dword [esi + 0xc]
push str.version
call fcn.00413e63
mov dword [ebp - 0x868], eax
mov eax, dword [esi + 0xc]
mov dword [esp], 0x478aa0
call fcn.00413e63
pop ecx
cmp dword [ebp - 0x868], ebx
je 0x40cbfd
mov ecx, dword [ebp - 0x868]
mov esi, dword [ecx + 0xc]
cmp esi, ebx
je 0x40cbfd
cmp eax, ebx
je 0x40cbfd
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x868], eax
cmp eax, ebx
je 0x40cbfd
mov ecx, dword [ebp - 0x8a0]
mov edx, dword [esi + 4]
lea eax, [ebp - 0x2f0]
push ebx
push eax
call fcn.0040bfb4
pop ecx
pop ecx
test eax, eax
jne 0x40c98b
mov ecx, dword [ebp - 0x898]
mov edx, dword [esi + 4]
lea eax, [ebp - 0x2f0]
push ebx
push eax
call fcn.0040bfb4
pop ecx
pop ecx
test eax, eax
je 0x40cbfd
cmp dword [ebp + 0x14], ebx
je 0x40c9ac
mov eax, dword [ebp - 0x86c]
mov eax, dword [eax + 0xc]
push str.critical
call fcn.00413e63
pop ecx
test eax, eax
je 0x40cbfd
mov esi, dword [ebp - 0x86c]
mov eax, dword [esi + 0xc]
push 0x478aa4
call fcn.00413e63
pop ecx
cmp eax, ebx
je 0x40c9ea
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x40c9ea
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x60]
push 1
push ecx
lea ecx, [ebp - 0x88]
call fcn.0040bfb4
pop ecx
pop ecx
test eax, eax
jne 0x40c9f9
jmp 0x40cbfd
push 0x474e64
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esi + 0xc]
push str.arch
call fcn.00413e63
pop ecx
cmp eax, ebx
je 0x40ca2d
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x40ca2d
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x74]
push ebx
push ecx
lea ecx, [ebp - 0x4c]
call fcn.0040bfb4
pop ecx
pop ecx
test eax, eax
jne 0x40ca3c
jmp 0x40cbfd
push 0x474e64
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esi + 0xc]
push str.cntry
call fcn.00413e63
pop ecx
cmp eax, ebx
je 0x40ca76
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x40ca76
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x9c]
push ebx
push ecx
lea ecx, [ebp - 0x878]
call fcn.0040bfb4
pop ecx
pop ecx
test eax, eax
jne 0x40ca88
jmp 0x40cbfd
push 0x474e64
lea eax, [ebp - 0x9c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esi + 0xc]
push str.locale
call fcn.00413e63
pop ecx
cmp eax, ebx
je 0x40cace
mov eax, dword [eax + 0xc]
cmp eax, ebx
je 0x40cace
cmp dword [ebp - 0x814], 0x10
mov ecx, dword [ebp - 0x828]
jae 0x40cab6
lea ecx, [ebp - 0x828]
lea edx, [ebp - 0x38]
push ebx
push edx
mov edx, dword [eax + 4]
call fcn.0040bfb4
pop ecx
pop ecx
test eax, eax
jne 0x40cadd
jmp 0x40cbfd
push 0x474e64
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x4f0]
push eax
call edi
mov esi, eax
lea eax, [ebp - 0x2f0]
push eax
call edi
cmp esi, eax
ja 0x40cbfd
jb 0x40cb68
lea eax, [ebp - 0xd8]
push eax
call edi
mov esi, eax
lea eax, [ebp - 0x60]
push eax
call edi
cmp esi, eax
ja 0x40cbfd
jb 0x40cb68
lea eax, [ebp - 0xb0]
push eax
call edi
mov esi, eax
lea eax, [ebp - 0x74]
push eax
call edi
cmp esi, eax
ja 0x40cbfd
jb 0x40cb68
lea eax, [ebp - 0xec]
push eax
call edi
mov esi, eax
lea eax, [ebp - 0x9c]
push eax
call edi
cmp esi, eax
ja 0x40cbfd
jb 0x40cb68
lea eax, [ebp - 0xc4]
push eax
call edi
mov esi, eax
lea eax, [ebp - 0x38]
push eax
call edi
cmp esi, eax
jae 0x40cbfd
push 0xffffffffffffffff
lea eax, [ebp - 0x2f0]
push eax
mov esi, pe_nt_image_headers32
lea eax, [ebp - 0x4f0]
push esi
push eax
call fcn.0044b78c
mov eax, dword [ebp - 0x868]
push 0xffffffffffffffff
push dword [eax + 4]
lea eax, [ebp - 0x1f0]
push esi
push eax
call fcn.0044b78c
or esi, 0xffffffff
push esi
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0xd8]
push 0x14
push eax
call fcn.0044b78c
push esi
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xb0]
push 0x14
push eax
call fcn.0044b78c
add esp, 0x40
push esi
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xec]
push 0x14
push eax
call fcn.0044b78c
push esi
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xc4]
push 0x14
push eax
call fcn.0044b78c
add esp, 0x20
mov dword [ebp - 0x894], 1
mov eax, dword [ebp - 0x86c]
mov esi, dword [eax + 8]
mov dword [ebp - 0x86c], esi
cmp esi, ebx
jne 0x40c8e0
push 0xff
lea eax, [ebp - 0x3ef]
push ebx
push eax
mov byte [ebp - 0x3f0], bl
call fcn.0044b040
mov eax, dword [ebp - 0x828]
add esp, 0xc
cmp dword [ebp - 0x814], 0x10
jae 0x40cc44
lea eax, [ebp - 0x828]
lea ecx, [ebp - 0x878]
push ecx
push eax
push dword [ebp - 0x8a0]
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x88]
push eax
push dword [0x49910c]
lea eax, [ebp - 0x3f0]
push str.OVERRIDE_SYSTEM_VALUE_d:OS:_s_Arch:_s_Version:_s_Locale:_s_Cntry:_s_n
push 0xffffffffffffffff
push pe_nt_image_headers32
push eax
call fcn.004494f8
lea eax, [ebp - 0x3f0]
push eax
call fcn.00429029
add esp, 0x2c
cmp dword [ebp - 0x894], ebx
je 0x40ccac
lea eax, [ebp - 0x1f0]
push eax
push 0x800
push dword [ebp - 0x8a4]
call fcn.0044c4aa
add esp, 0xc
cmp dword [ebp - 0x890], ebx
je 0x40ccc0
push dword [ebp - 0x890]
call fcn.00448f8c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x828]
call fcn.004031e0
mov eax, dword [ebp - 0x894]
jmp 0x40ccf1
cmp esi, ebx
je 0x40cce1
push esi
call fcn.00448f8c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x828]
call fcn.004031e0
xor eax, eax
call fcn.00451135
ret