Function at 0x4a1af4
Capabilities:
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x20
push 0
push 0
dec ecx
jne 0x4a1afc
push ebx
push esi
mov ebx, 0x514184
xor eax, eax
push ebp
push 0x4a2734
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4a2744
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov esi, eax
mov dword [0x5140e8], esi
test esi, esi
jne 0x4a1b6f
lea eax, [ebp - 4]
push eax
lea edx, [ebp - 8]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 8]
push eax
mov eax, 0x4a2760
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 4]
mov ecx, 0xac5
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a27a4
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov esi, eax
mov dword [0x5140ec], esi
test esi, esi
jne 0x4a1bc6
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x18]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x18]
push eax
mov eax, 0x4a27c0
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x14]
mov ecx, 0xac6
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a27d4
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov esi, eax
mov dword [0x51414c], esi
test esi, esi
jne 0x4a1c1d
lea eax, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x20]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x20]
push eax
mov eax, 0x4a27ec
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x1c]
mov ecx, 0xac7
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a27fc
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov esi, eax
mov dword [0x514150], esi
test esi, esi
jne 0x4a1c74
lea eax, [ebp - 0x24]
push eax
lea edx, [ebp - 0x28]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x28]
push eax
mov eax, 0x4a2810
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x24]
mov ecx, 0xac8
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a281c
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov esi, eax
mov dword [0x514154], esi
test esi, esi
jne 0x4a1ccb
lea eax, [ebp - 0x2c]
push eax
lea edx, [ebp - 0x30]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x30]
push eax
mov eax, 0x4a2838
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x2c]
mov ecx, 0xac9
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a284c
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov esi, eax
mov dword [0x51415c], esi
test esi, esi
jne 0x4a1d22
lea eax, [ebp - 0x34]
push eax
lea edx, [ebp - 0x38]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x38]
push eax
mov eax, 0x4a2860
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x34]
mov ecx, 0xaca
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a286c
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov esi, eax
mov dword [0x514158], esi
test esi, esi
jne 0x4a1d79
lea eax, [ebp - 0x3c]
push eax
lea edx, [ebp - 0x40]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x40]
push eax
mov eax, 0x4a2884
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x3c]
mov ecx, 0xacb
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2894
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov esi, eax
mov dword [0x514160], esi
test esi, esi
jne 0x4a1dd0
lea eax, [ebp - 0x44]
push eax
lea edx, [ebp - 0x48]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x48]
push eax
mov eax, 0x4a28ac
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x44]
mov ecx, 0xacc
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a28bc
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514164], eax
push 0x4a28d0
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514168], eax
push 0x4a28e4
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x51416c], eax
push 0x4a28fc
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov esi, eax
mov dword [0x514170], esi
test esi, esi
jne 0x4a1e5d
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x50]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x50]
push eax
mov eax, 0x4a2914
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x4c]
mov ecx, 0xad2
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2924
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514174], eax
push 0x4a2938
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514178], eax
push 0x4a294c
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x51417c], eax
push 0x4a2964
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov esi, eax
mov dword [0x5140f8], esi
test esi, esi
jne 0x4a1eea
lea eax, [ebp - 0x54]
push eax
lea edx, [ebp - 0x58]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x58]
push eax
mov eax, 0x4a2980
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x54]
mov ecx, 0xad8
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2994
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x5140fc], eax
cmp dword [0x5140fc], 0
jne 0x4a1f43
lea eax, [ebp - 0x5c]
push eax
lea edx, [ebp - 0x60]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x60]
push eax
mov eax, 0x4a29b4
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x5c]
mov ecx, 0xad9
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a29cc
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514100], eax
cmp dword [0x514100], 0
jne 0x4a1f9c
lea eax, [ebp - 0x64]
push eax
lea edx, [ebp - 0x68]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x68]
push eax
mov eax, 0x4a29ec
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x64]
mov ecx, 0xada
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2a04
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514104], eax
cmp dword [0x514104], 0
jne 0x4a1ff5
lea eax, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x70]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x70]
push eax
mov eax, 0x4a2a24
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x6c]
mov ecx, 0xadb
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2a3c
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514108], eax
cmp dword [0x514108], 0
jne 0x4a204e
lea eax, [ebp - 0x74]
push eax
lea edx, [ebp - 0x78]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x78]
push eax
mov eax, 0x4a2a60
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x74]
mov ecx, 0xadc
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2a7c
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x51410c], eax
push 0x4a2a94
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x5140f0], eax
cmp dword [0x5140f0], 0
jne 0x4a20b9
lea eax, [ebp - 0x7c]
push eax
lea edx, [ebp - 0x80]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x80]
push eax
mov eax, 0x4a2ab8
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x7c]
mov ecx, 0xadf
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2ad4
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x5140f4], eax
cmp dword [0x5140f4], 0
jne 0x4a211e
lea eax, [ebp - 0x84]
push eax
lea edx, [ebp - 0x88]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x88]
push eax
mov eax, 0x4a2af4
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x84]
mov ecx, 0xae0
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2b0c
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514110], eax
cmp dword [0x514110], 0
jne 0x4a2183
lea eax, [ebp - 0x8c]
push eax
lea edx, [ebp - 0x90]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x90]
push eax
mov eax, 0x4a2b28
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x8c]
mov ecx, 0xae1
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2b3c
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514114], eax
cmp dword [0x514114], 0
jne 0x4a21e8
lea eax, [ebp - 0x94]
push eax
lea edx, [ebp - 0x98]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x98]
push eax
mov eax, 0x4a2b58
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x94]
mov ecx, 0xae2
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2b6c
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514118], eax
cmp dword [0x514118], 0
jne 0x4a224d
lea eax, [ebp - 0x9c]
push eax
lea edx, [ebp - 0xa0]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0xa0]
push eax
mov eax, 0x4a2b88
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0x9c]
mov ecx, 0xae3
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2b9c
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x51411c], eax
cmp dword [0x51411c], 0
jne 0x4a22b2
lea eax, [ebp - 0xa4]
push eax
lea edx, [ebp - 0xa8]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0xa8]
push eax
mov eax, 0x4a2bb4
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0xa4]
mov ecx, 0xae4
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2bc4
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514120], eax
cmp dword [0x514120], 0
jne 0x4a2317
lea eax, [ebp - 0xac]
push eax
lea edx, [ebp - 0xb0]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0xb0]
push eax
mov eax, 0x4a2be0
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0xac]
mov ecx, 0xae5
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2bf4
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514124], eax
cmp dword [0x514124], 0
jne 0x4a237c
lea eax, [ebp - 0xb4]
push eax
lea edx, [ebp - 0xb8]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0xb8]
push eax
mov eax, 0x4a2c10
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0xb4]
mov ecx, 0xae6
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2c24
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514128], eax
cmp dword [0x514128], 0
jne 0x4a23e1
lea eax, [ebp - 0xbc]
push eax
lea edx, [ebp - 0xc0]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0xc0]
push eax
mov eax, 0x4a2c44
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0xbc]
mov ecx, 0xae7
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2c5c
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x51412c], eax
cmp dword [0x51412c], 0
jne 0x4a2446
lea eax, [ebp - 0xc4]
push eax
lea edx, [ebp - 0xc8]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0xc8]
push eax
mov eax, 0x4a2c74
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0xc4]
mov ecx, 0xae8
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2c84
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514130], eax
cmp dword [0x514130], 0
jne 0x4a24ab
lea eax, [ebp - 0xcc]
push eax
lea edx, [ebp - 0xd0]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0xd0]
push eax
mov eax, 0x4a2c9c
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0xcc]
mov ecx, 0xae9
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2cac
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514134], eax
cmp dword [0x514134], 0
jne 0x4a2510
lea eax, [ebp - 0xd4]
push eax
lea edx, [ebp - 0xd8]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0xd8]
push eax
mov eax, 0x4a2cc4
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0xd4]
mov ecx, 0xaea
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2cd4
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514138], eax
cmp dword [0x514138], 0
jne 0x4a2575
lea eax, [ebp - 0xdc]
push eax
lea edx, [ebp - 0xe0]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0xe0]
push eax
mov eax, 0x4a2cec
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0xdc]
mov ecx, 0xaeb
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2cfc
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x51413c], eax
cmp dword [0x51413c], 0
jne 0x4a25da
lea eax, [ebp - 0xe4]
push eax
lea edx, [ebp - 0xe8]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0xe8]
push eax
mov eax, 0x4a2d14
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0xe4]
mov ecx, 0xaec
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2d24
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514140], eax
cmp dword [0x514140], 0
jne 0x4a263f
lea eax, [ebp - 0xec]
push eax
lea edx, [ebp - 0xf0]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0xf0]
push eax
mov eax, 0x4a2d3c
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0xec]
mov ecx, 0xaed
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2d4c
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514144], eax
cmp dword [0x514144], 0
jne 0x4a26a4
lea eax, [ebp - 0xf4]
push eax
lea edx, [ebp - 0xf8]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0xf8]
push eax
mov eax, 0x4a2d64
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0xf4]
mov ecx, 0xaee
mov edx, 0x4a277c
call fcn.00403e48
push 0x4a2d74
mov eax, dword [ebx]
push eax
call sub.kernel32.dll_GetProcAddress_1
mov dword [0x514148], eax
cmp dword [0x514148], 0
jne 0x4a2709
lea eax, [ebp - 0xfc]
push eax
lea edx, [ebp - 0x100]
mov eax, 0x4a1970
call fcn.00406544
mov eax, dword [ebp - 0x100]
push eax
mov eax, 0x4a2d90
mov dword [ebp - 0x10], eax
mov byte [ebp - 0xc], 0xb
lea edx, [ebp - 0x10]
xor ecx, ecx
pop eax
call fcn.0040a60c
mov eax, dword [ebp - 0xfc]
mov ecx, 0xaef
mov edx, 0x4a277c
call fcn.00403e48
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a273b
lea eax, [ebp - 0x100]
mov edx, 0x3c
call fcn.00403f0c
lea eax, [ebp - 8]
mov edx, 2
call fcn.00403f0c
ret