Function at 0x40a620
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x465395
mov eax, dword fs:[0]
push eax
sub esp, 0x24
mov eax, dword [0x47d080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x30], ebx
cmp word [ebx + 4], 0
mov edi, dword [ebp + 8]
jne 0x40a679
mov edx, str.Error:_File_Version_is_not_set
mov ecx, 0x47eb28
call fcn.004218e0
push eax
call fcn.00421b80
add esp, 4
xor al, al
jmp 0x40b360
mov ecx, edi
call fcn.00404630
mov ecx, edi
mov byte [ebx + 8], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 9], al
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xc], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x10], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x14], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x18], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x1c], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x20], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x24], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x28], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x2c], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x30], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x34], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x38], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x3c], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x40], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x44], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x48], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x4c], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x50], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x54], eax
call fcn.00404580
mov ecx, edi
mov word [ebx + 0x58], ax
call fcn.00404580
mov ecx, edi
mov word [ebx + 0x5a], ax
call fcn.00404580
mov ecx, edi
mov word [ebx + 0x5c], ax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x60], eax
call fcn.00404580
mov ecx, edi
mov word [ebx + 0x64], ax
call fcn.00404580
mov word [ebx + 0x66], ax
mov ecx, edi
call fcn.00404580
mov ecx, edi
mov word [ebx + 0x68], ax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x6c], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x70], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x74], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x78], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x7c], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x80], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x84], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x88], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x8c], eax
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x90], al
call fcn.00404580
mov ecx, edi
mov word [ebx + 0x92], ax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x94], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x98], eax
call fcn.00404580
mov ecx, edi
mov word [ebx + 0x9c], ax
call fcn.00404580
mov ecx, edi
mov word [ebx + 0x9e], ax
call fcn.00404580
mov ecx, edi
mov word [ebx + 0xa0], ax
call fcn.00404580
mov ecx, edi
mov word [ebx + 0xa2], ax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xa4], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xa8], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xac], eax
call fcn.00404630
cmp word [ebx + 4], 0x60
mov byte [ebx + 0xb0], al
ja 0x40a8b2
mov ecx, edi
call fcn.004044d0
mov dword [ebx + 0xb4], eax
mov ecx, edi
call fcn.004044d0
cmp word [ebx + 4], 0x62
mov dword [ebx + 0xb8], eax
jb 0x40a8e0
mov ecx, edi
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xbc], eax
call fcn.004044d0
mov dword [ebx + 0xc0], eax
cmp word [ebx + 4], 0x64
jb 0x40aae9
mov ecx, edi
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xc4], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xc8], eax
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0xcc], al
call fcn.004044d0
mov dword [ebx + 0xd0], eax
test eax, eax
jle 0x40aa4e
mov dword [ebp - 0x2c], 0
lea esi, [ebx + 0x360]
nop dword [eax]
nop dword [eax + eax]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x14], 0
mov ecx, edi
mov dword [ebp - 4], 0
call fcn.004044d0
mov ecx, eax
mov byte [ebp - 0x14], 1
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x40a9df
mov edx, dword [ebp - 0x20]
mov eax, edx
mov esi, dword [ebp - 0x24]
sub eax, esi
mov dword [ebp - 0x28], eax
cmp ecx, eax
jae 0x40a991
lea edx, [esi + ecx]
jmp 0x40a9c5
jbe 0x40a9c8
mov eax, dword [ebp - 0x1c]
sub eax, esi
cmp ecx, eax
jbe 0x40a9ae
push ecx
push ecx
lea ecx, [ebp - 0x24]
call fcn.00433890
mov edx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x24]
jmp 0x40a9c8
sub ecx, dword [ebp - 0x28]
push ecx
push 0
push edx
lea esi, [edx + ecx]
call fcn.0043e210
mov edx, esi
add esp, 0xc
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
lea eax, [ebp - 0x28]
sub edx, esi
push eax
push esi
mov ecx, edi
mov dword [ebp - 0x28], edx
call fcn.004046e0
lea esi, [ebx + 0x360]
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x24]
push ecx
cmp eax, dword [esi + 8]
je 0x40a9f8
mov ecx, eax
call fcn.00435ee0
add dword [esi + 4], 0x14
jmp 0x40aa00
push eax
mov ecx, esi
call fcn.0042e860
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x40aa3b
mov edx, dword [ebp - 0x1c]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40aa31
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b37e
push edx
push ecx
call fcn.0043c5fc
add esp, 8
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, dword [ebx + 0xd0]
jb 0x40a940
mov ecx, edi
call fcn.004044d0
mov dword [ebx + 0xd4], eax
test eax, eax
jle 0x40aaa8
mov dword [ebp - 0x2c], 0
mov ecx, edi
call fcn.004044d0
mov ecx, dword [ebx + 0x34c]
mov dword [ebp - 0x28], eax
cmp ecx, dword [ebx + 0x350]
je 0x40aa89
mov dword [ecx], eax
add dword [ebx + 0x34c], 4
jmp 0x40aa99
lea eax, [ebp - 0x28]
push eax
push ecx
lea ecx, [ebx + 0x348]
call fcn.0042ee10
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, dword [ebx + 0xd4]
jb 0x40aa66
mov ecx, edi
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xd8], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xdc], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xe0], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xe4], eax
call fcn.004044d0
mov dword [ebx + 0xe8], eax
cmp word [ebx + 4], 0x65
jb 0x40ab3e
mov ecx, edi
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xec], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xf0], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xf4], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xf8], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0xfc], eax
call fcn.004044d0
mov dword [ebx + 0x100], eax
cmp word [ebx + 4], 0x66
jb 0x40ab53
mov ecx, edi
call fcn.00404580
mov word [ebx + 0x104], ax
cmp word [ebx + 4], 0x67
jb 0x40ab8d
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0xffff
push eax
lea ecx, [ebx + 0x1a4]
mov edx, edi
call fcn.00422220
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0xffff
push eax
lea ecx, [ebx + 0x1b4]
mov edx, edi
call fcn.00422220
add esp, 8
cmp word [ebx + 4], 0x68
jb 0x40aba1
mov ecx, edi
call fcn.004044d0
mov dword [ebx + 0x108], eax
cmp word [ebx + 4], 0x6a
jb 0x40abcf
mov ecx, edi
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x10c], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x110], eax
call fcn.004044d0
mov dword [ebx + 0x114], eax
cmp word [ebx + 4], 0x6c
jb 0x40ac5e
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0xffff
push eax
lea ecx, [ebx + 0x1c4]
mov edx, edi
call fcn.00422220
add esp, 4
mov ecx, edi
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x118], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x11c], eax
call fcn.004044d0
mov dword [ebx + 0x120], eax
lea ecx, [ebx + 0x1d4]
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0xffff
push eax
mov edx, edi
call fcn.00422220
add esp, 4
mov ecx, edi
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x124], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x128], eax
call fcn.004044d0
mov dword [ebx + 0x12c], eax
cmp word [ebx + 4], 0x6d
jb 0x40aca5
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0xffff
push eax
lea ecx, [ebx + 0x1e4]
mov edx, edi
call fcn.00422220
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0xffff
push eax
lea ecx, [ebx + 0x1f4]
mov edx, edi
call fcn.00422220
add esp, 8
mov ecx, edi
call fcn.00404630
mov byte [ebx + 0x130], al
cmp word [ebx + 4], 0x6e
jb 0x40acb9
mov ecx, edi
call fcn.00404630
mov byte [ebx + 0x131], al
cmp word [ebx + 4], 0x77
jb 0x40ad0b
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0xffff
push eax
lea ecx, [ebx + 0x204]
mov edx, edi
call fcn.00422220
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0xffff
push eax
lea ecx, [ebx + 0x214]
mov edx, edi
call fcn.00422220
lea eax, [ebp - 0x28]
mov dword [ebp - 0x28], 0xffff
push eax
lea ecx, [ebx + 0x224]
mov edx, edi
call fcn.00422220
add esp, 0xc
cmp word [ebx + 4], 0x79
jb 0x40ad1f
mov ecx, edi
call fcn.004044d0
mov dword [ebx + 0x134], eax
cmp word [ebx + 4], 0x7a
jb 0x40ad33
mov ecx, edi
call fcn.004044d0
mov dword [ebx + 0x138], eax
cmp word [ebx + 4], 0x7c
jb 0x40ad47
mov ecx, edi
call fcn.004044d0
mov dword [ebx + 0x13c], eax
cmp word [ebx + 4], 0x7e
jb 0x40ad5b
mov ecx, edi
call fcn.004044d0
mov dword [ebx + 0x140], eax
mov eax, 0x80
cmp word [ebx + 4], ax
jb 0x40ad73
mov ecx, edi
call fcn.004044d0
mov dword [ebx + 0x144], eax
mov eax, 0x81
cmp word [ebx + 4], ax
jb 0x40ad98
mov ecx, edi
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x148], eax
call fcn.004044d0
mov dword [ebx + 0x14c], eax
mov eax, 0x82
cmp word [ebx + 4], ax
jb 0x40adb0
mov ecx, edi
call fcn.004044d0
mov dword [ebx + 0x150], eax
mov eax, 0x83
cmp word [ebx + 4], ax
jb 0x40adc8
mov ecx, edi
call fcn.004044d0
mov dword [ebx + 0x154], eax
mov eax, 0x84
cmp word [ebx + 4], ax
jb 0x40ae07
mov ecx, edi
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x158], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x15c], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x160], eax
call fcn.004044d0
mov dword [ebx + 0x164], eax
mov eax, 0x86
cmp word [ebx + 4], ax
jb 0x40ae1f
mov ecx, edi
call fcn.00404630
mov byte [ebx + 0x168], al
mov eax, 0x88
cmp word [ebx + 4], ax
jb 0x40ae37
mov ecx, edi
call fcn.00404630
mov byte [ebx + 0x169], al
mov eax, 0x89
cmp word [ebx + 4], ax
jb 0x40b059
mov ecx, edi
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x16c], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x170], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x174], eax
call fcn.004044d0
mov dword [ebx + 0x178], eax
lea esi, [ebx + 0x354]
mov ebx, 2
mov ecx, edi
call fcn.004044d0
mov ecx, dword [esi + 4]
mov dword [ebp - 0x28], eax
cmp ecx, dword [esi + 8]
je 0x40ae9f
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40aeab
lea eax, [ebp - 0x28]
push eax
push ecx
mov ecx, esi
call fcn.0042ee10
mov ecx, edi
call fcn.004044d0
mov ecx, dword [esi + 4]
mov dword [ebp - 0x28], eax
cmp ecx, dword [esi + 8]
je 0x40aec5
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40aed1
lea eax, [ebp - 0x28]
push eax
push ecx
mov ecx, esi
call fcn.0042ee10
mov ecx, edi
call fcn.004044d0
mov ecx, dword [esi + 4]
mov dword [ebp - 0x28], eax
cmp ecx, dword [esi + 8]
je 0x40aeeb
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40aef7
lea eax, [ebp - 0x28]
push eax
push ecx
mov ecx, esi
call fcn.0042ee10
mov ecx, edi
call fcn.004044d0
mov ecx, dword [esi + 4]
mov dword [ebp - 0x28], eax
cmp ecx, dword [esi + 8]
je 0x40af11
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40af1d
lea eax, [ebp - 0x28]
push eax
push ecx
mov ecx, esi
call fcn.0042ee10
mov ecx, edi
call fcn.004044d0
mov ecx, dword [esi + 4]
mov dword [ebp - 0x28], eax
cmp ecx, dword [esi + 8]
je 0x40af37
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40af43
lea eax, [ebp - 0x28]
push eax
push ecx
mov ecx, esi
call fcn.0042ee10
mov ecx, edi
call fcn.004044d0
mov ecx, dword [esi + 4]
mov dword [ebp - 0x28], eax
cmp ecx, dword [esi + 8]
je 0x40af5d
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40af69
lea eax, [ebp - 0x28]
push eax
push ecx
mov ecx, esi
call fcn.0042ee10
mov ecx, edi
call fcn.004044d0
mov ecx, dword [esi + 4]
mov dword [ebp - 0x28], eax
cmp ecx, dword [esi + 8]
je 0x40af83
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40af8f
lea eax, [ebp - 0x28]
push eax
push ecx
mov ecx, esi
call fcn.0042ee10
mov ecx, edi
call fcn.004044d0
mov ecx, dword [esi + 4]
mov dword [ebp - 0x28], eax
cmp ecx, dword [esi + 8]
je 0x40afa9
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40afb5
lea eax, [ebp - 0x28]
push eax
push ecx
mov ecx, esi
call fcn.0042ee10
mov ecx, edi
call fcn.004044d0
mov ecx, dword [esi + 4]
mov dword [ebp - 0x28], eax
cmp ecx, dword [esi + 8]
je 0x40afcf
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40afdb
lea eax, [ebp - 0x28]
push eax
push ecx
mov ecx, esi
call fcn.0042ee10
mov ecx, edi
call fcn.004044d0
mov ecx, dword [esi + 4]
mov dword [ebp - 0x28], eax
cmp ecx, dword [esi + 8]
je 0x40aff5
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40b001
lea eax, [ebp - 0x28]
push eax
push ecx
mov ecx, esi
call fcn.0042ee10
mov ecx, edi
call fcn.004044d0
mov ecx, dword [esi + 4]
mov dword [ebp - 0x28], eax
cmp ecx, dword [esi + 8]
je 0x40b01b
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40b027
lea eax, [ebp - 0x28]
push eax
push ecx
mov ecx, esi
call fcn.0042ee10
mov ecx, edi
call fcn.004044d0
mov ecx, dword [esi + 4]
mov dword [ebp - 0x28], eax
cmp ecx, dword [esi + 8]
je 0x40b041
mov dword [ecx], eax
add dword [esi + 4], 4
jmp 0x40b04d
lea eax, [ebp - 0x28]
push eax
push ecx
mov ecx, esi
call fcn.0042ee10
sub ebx, 1
jne 0x40ae85
mov ebx, dword [ebp - 0x30]
mov eax, 0x8a
cmp word [ebx + 4], ax
jb 0x40b24e
mov ecx, edi
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x17c], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x180], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x184], eax
call fcn.004044d0
mov ecx, edi
mov dword [ebx + 0x188], eax
call fcn.004044d0
mov esi, eax
mov byte [ebx + 0x244], 1
mov dword [ebx + 0x240], esi
lea edx, [ebx + 0x234]
test esi, esi
je 0x40b11a
mov ecx, dword [edx + 4]
mov eax, dword [edx]
mov dword [ebp - 0x2c], ecx
sub ecx, eax
cmp esi, ecx
jb 0x40b0ff
jbe 0x40b104
mov eax, dword [edx + 8]
sub eax, dword [edx]
cmp esi, eax
jbe 0x40b0e6
push ecx
push esi
mov ecx, edx
call fcn.00433890
lea edx, [ebx + 0x234]
jmp 0x40b104
sub esi, ecx
push esi
push 0
push dword [ebp - 0x2c]
call fcn.0043e210
mov eax, dword [ebp - 0x2c]
lea edx, [ebx + 0x234]
add esp, 0xc
add eax, esi
mov dword [edx + 4], eax
mov ecx, dword [edx]
mov eax, dword [edx + 4]
sub eax, ecx
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push ecx
mov ecx, edi
call fcn.004046e0
mov ecx, edi
call fcn.004044d0
mov dword [ebx + 0x18c], eax
test eax, eax
jle 0x40b24e
mov dword [ebp - 0x2c], 0
lea esi, [ebx + 0x36c]
nop dword [eax]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x14], 0
mov ecx, edi
mov dword [ebp - 4], 3
call fcn.004044d0
mov ecx, eax
mov byte [ebp - 0x14], 1
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x40b1df
mov edx, dword [ebp - 0x20]
mov eax, edx
mov esi, dword [ebp - 0x24]
sub eax, esi
mov dword [ebp - 0x30], eax
cmp ecx, eax
jae 0x40b191
lea edx, [esi + ecx]
jmp 0x40b1c5
jbe 0x40b1c8
mov eax, dword [ebp - 0x1c]
sub eax, esi
cmp ecx, eax
jbe 0x40b1ae
push ecx
push ecx
lea ecx, [ebp - 0x24]
call fcn.00433890
mov edx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x24]
jmp 0x40b1c8
sub ecx, dword [ebp - 0x30]
push ecx
push 0
push edx
lea esi, [edx + ecx]
call fcn.0043e210
mov edx, esi
add esp, 0xc
mov esi, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
lea eax, [ebp - 0x30]
sub edx, esi
push eax
push esi
mov ecx, edi
mov dword [ebp - 0x30], edx
call fcn.004046e0
lea esi, [ebx + 0x36c]
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x24]
push ecx
cmp eax, dword [esi + 8]
je 0x40b1f8
mov ecx, eax
call fcn.00435ee0
add dword [esi + 4], 0x14
jmp 0x40b200
push eax
mov ecx, esi
call fcn.0042e860
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x40b23b
mov edx, dword [ebp - 0x1c]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x40b231
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40b37e
push edx
push ecx
call fcn.0043c5fc
add esp, 8
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, dword [ebx + 0x18c]
jb 0x40b140
mov eax, 0x8d
cmp word [ebx + 4], ax
jb 0x40b35e
mov ecx, edi
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x190], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x191], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x192], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x193], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x194], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x195], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x196], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x197], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x198], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x199], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x19a], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x19b], al
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x19c], al
call fcn.00404630
lea ecx, [ebp - 0x30]
mov byte [ebx + 0x19d], al
push ecx
lea eax, [ebx + 0x248]
mov dword [ebp - 0x30], 0x100
push eax
mov ecx, edi
call fcn.004046e0
mov ecx, edi
call fcn.00404630
mov ecx, edi
mov byte [ebx + 0x19e], al
call fcn.00404630
mov byte [ebx + 0x19f], al
mov eax, 0x8e
cmp word [ebx + 4], ax
jb 0x40b35e
mov ecx, edi
call fcn.004044d0
mov dword [ebx + 0x1a0], eax
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043c5a8
mov esp, ebp
pop ebp
ret 4
call fcn.0044f733
int3