Function at 0x40d0b6
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [0x71cd6410]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
and dword [ebp - 0x24], 0
and dword [ebp - 0x10], 0
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [eax]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp + 0x10]
shr ebx, 2
push edi
mov edi, dword [ecx]
mov dword [ebp - 0x38], edx
mov edx, dword [ebp + 0x14]
and bl, 1
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], edx
mov dword [ebp - 8], edi
mov dword [ebp - 0x34], esi
mov byte [ebp - 0x1e], 0
mov byte [ebp - 0x1d], 1
test edi, edi
je 0x40d1b8
cmp word [esi], 0x5b
je 0x420ecc
movzx edi, word [esi]
test di, di
je 0x421e19
movzx edx, di
mov eax, 0x100
cmp dx, ax
jae 0x421008
movzx ecx, dx
mov eax, dword [ecx*8 + 0x71cd6fe0]
mov ecx, dword [ecx*8 + 0x71cd6fe4]
mov dword [ebp - 0x2c], ecx
and eax, 0x800
xor ecx, ecx
or eax, ecx
jne 0x40e0b8
test bl, bl
jne 0x419374
movzx eax, di
mov ecx, 0x100
cmp ax, cx
jae 0x421022
movzx ecx, ax
mov eax, dword [ecx*8 + 0x71cd6fe0]
mov edx, dword [ecx*8 + 0x71cd6fe4]
mov cl, 0x20
call fcn.0040cbff
and eax, 0x1ff
test al, 0xc0
jne 0x421e3b
mov dword [ebp - 0x14], eax
test al, 8
jne 0x421e45
mov al, 1
mov ecx, dword [ebp - 0x14]
or dword [ebp - 0x10], ecx
movzx eax, al
sub dword [ebp - 8], eax
lea esi, [esi + eax*2]
jne 0x40d118
mov ecx, esi
sub ecx, dword [ebp - 0x34]
sar ecx, 1
cmp dword [ebp - 8], 0
mov dword [ebp - 0xc], ecx
je 0x421044
cmp word [esi], 0x3a
jne 0x421044
test ecx, ecx
je 0x421e83
inc esi
inc esi
mov dword [ebp - 0x2c], esi
dec dword [ebp - 8]
je 0x40d267
movzx edi, word [esi]
test di, di
je 0x421e19
movzx edx, di
mov eax, 0x100
cmp dx, ax
jae 0x42102a
movzx ecx, dx
mov eax, dword [ecx*8 + 0x71cd6fe0]
mov ecx, dword [ecx*8 + 0x71cd6fe4]
mov dword [ebp - 0x14], ecx
and eax, 0x1000
xor ecx, ecx
or eax, ecx
jne 0x40d25d
movzx eax, di
mov ecx, 0x100
cmp ax, cx
jae 0x421038
movzx eax, ax
mov ecx, dword [eax*8 + 0x71cd6fe0]
mov dword [ebp - 0x18], ecx
mov ecx, dword [eax*8 + 0x71cd6fe4]
and ecx, 0x2000
xor eax, eax
or eax, ecx
je 0x421e9a
inc esi
inc esi
jmp 0x40d1e3
cmp dx, 0x5c
je 0x421e8b
cmp byte [ebp - 0x1d], 0
je 0x421f67
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
mov edx, esi
sub edx, ecx
sar edx, 1
mov dword [eax], ecx
mov ecx, dword [ebp - 0xc]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x28]
or byte [eax], 0x10
test ecx, ecx
je 0x40d2a6
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x34]
mov dword [ecx], edx
mov edx, dword [ebp - 0xc]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x10]
mov dword [ecx + 8], edx
or byte [eax], 8
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 8]
mov dword [eax], esi
mov eax, dword [ebp - 0x44]
mov dword [eax], ecx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x24]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00406ea0
leave
ret 0x10
sbb byte [ebp - 0x5ad3db8c], cl
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jmp 0x40e14d
lea esi, [esp + 0x78]
lea edi, [esp + 0x40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x24], ecx
cmp dword [esp + 0x60], ecx
je 0x40e180
mov esi, dword [0x6c7b192c]
lea eax, [ebx + 0xb80]
push eax
call esi
lea eax, [ebx + 0x31c]
push eax
call esi
jmp 0x40e295
lea edx, [esp + 0x88]
push edx
lea ecx, [ebx + 0xb68]
mov eax, dword [ecx]
lea edx, [esp + 0x58]
push edx
call dword [eax + 0x5c]
mov eax, ebx
call 0x40b20f
lea edi, [ebx + 0xb80]
test eax, eax
je 0x40e273
lea ecx, [ebx + 0x714]
mov esi, ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 4]
mov edi, dword [esp + 0x58]
sub eax, edi
cdq
sub eax, edx
sar eax, 1
jns 0x40e1d0
xor eax, eax
jmp 0x40e1dd
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 4]
sub eax, edi
cdq
sub eax, edx
sar eax, 1
lea esi, [ebx + 0xb84]
add dword [esi], eax
mov eax, dword [esi]
add eax, edi
mov ecx, 0x6ca189a8
mov dword [ebx + 0xb8c], eax
call 0x3ca07c
test eax, eax
je 0x40e200
add dword [esi], 2
mov ecx, dword [esp + 0x54]
lea edi, [ebx + 0xb80]
mov eax, dword [edi]
add ecx, eax
mov eax, dword [ebx + 0x71c]
add eax, 0xffffffce
cmp ecx, eax
jge 0x40e21d
mov eax, ecx
lea ecx, [esp + 0x88]
lea esi, [ebx + 0xb68]
mov dword [ebx + 0xb88], eax
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x88]
mov ecx, esi
call fcn.0042e00c
mov ecx, dword [edi]
lea eax, [ecx + eax + 2]
cmp eax, dword [ebx + 0xb88]
jge 0x40e256
mov dword [ebx + 0xb88], eax
call 0x382252
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x250]
add eax, dword [ebx + 0xb88]
mov dword [ebx + 0x714], eax
jmp 0x40e295
mov ecx, dword [esp + 0x58]
lea esi, [esp + 0x78]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0xb8c]
sub eax, ecx
mov dword [ebx + 0xb84], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x4c], eax
lea ecx, [ebx + 0xb68]
mov eax, dword [ecx]
lea edx, [esp + 0x88]
push edx
call dword [eax + 0x88]
cmp dword [esp + 0x60], 0
jne 0x40e80b
lea eax, [ebx + 0x704]
push eax
call dword [0x6c7b188c]
mov edi, dword [esp + 0x7c]
test eax, eax
jne 0x40e2d1
mov edi, dword [ebx + 0x710]
mov esi, dword [esp + 0x84]
sub esi, dword [esp + 0x24]
lea edx, [esp + 0x88]
sub esi, dword [esp + 0x28]
push edx
lea ecx, [ebx + 0x304]
mov eax, dword [ecx]
lea edx, [esp + 0x58]
push edx
mov dword [esp + 0x74], edi
mov dword [esp + 0x44], esi
call dword [eax + 0x60]
mov eax, esi
sub eax, dword [esp + 0x58]
sub eax, edi
cdq
sub eax, edx
sar eax, 1
jns 0x40e313
xor ecx, ecx
jmp 0x40e315
mov ecx, eax
mov edx, dword [ebx + 0x284]
cmp edx, dword [esp + 0x58]
jl 0x40e325
mov edx, dword [esp + 0x58]
mov esi, dword [esp + 0x6c]
mov eax, dword [esp + 0x80]
sub eax, dword [esp + 0x54]
push edx
push dword [esp + 0x58]
add ecx, esi
push ecx
push eax
lea eax, [esp + 0xec]
call 0x2f7627
mov esi, eax
lea edi, [ebx + 0x31c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0040ca36
mov dword [esp + 0x5c], eax
test eax, eax
jle 0x40e803
mov ecx, dword [ebx + 0x734]
mov edi, dword [esp + 0x80]
mov esi, dword [esp + 0x78]
inc ecx
sub edi, ecx
sub edi, dword [esp + 0x54]
add ecx, esi
sub edi, esi
dec edi
dec edi
mov eax, edi
cdq
idiv dword [esp + 0x5c]
mov dword [esp + 0x10], ecx
xor ecx, ecx
mov dword [esp + 0x5c], 1
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x18], ecx
mov dword [esp + 0x74], eax
mov eax, dword [ebx + 0x6d0]
cmp eax, ecx
jle 0x40e51f
mov eax, dword [esp + 0x18]
lea ecx, [ebx + 0x6c8]
call 0x391c9a
mov eax, dword [eax]
cmp dword [eax + 0xc], 0
mov dword [esp + 0x1c], eax
je 0x40e504
mov edx, dword [esp + 0x74]
mov ecx, dword [ebx + 0x284]
mov eax, dword [eax + 0x30]
and dword [esp + 0x9c], 0
and dword [esp + 0xa0], 0
mov dword [esp + 0xa4], edx
push 0x424
mov dword [esp + 0xac], ecx
mov ecx, dword [eax - 0xc]
lea edx, [esp + 0xa0]
push edx
push ecx
push eax
mov eax, dword [esp + 0x98]
lea ecx, [esp + 0x98]
call dword [eax + 0x70]
mov ecx, dword [esp + 0xa4]
sub ecx, dword [esp + 0x9c]
push 0x28
mov eax, ecx
cdq
pop esi
idiv esi
add eax, 0xe
lea ecx, [ecx + eax*2]
mov eax, dword [esp + 0x1c]
mov esi, dword [eax + 0x10]
mov dword [eax + 0xe0], ecx
test esi, esi
je 0x40e4f4
xor eax, eax
cmp dword [ebx + 0x2ec], eax
je 0x40e4f4
cmp dword [ebx + 0x6d0], eax
mov dword [esp + 0x14], eax
jle 0x40e4a1
mov eax, dword [esp + 0x14]
lea ecx, [ebx + 0x6c8]
call 0x391c9a
mov ecx, dword [esp + 0x14]
mov eax, dword [eax]
cmp dword [esp + 0x18], ecx
je 0x40e491
cmp dword [eax + 0x10], esi
je 0x40e4f4
inc dword [esp + 0x14]
mov eax, dword [esp + 0x14]
cmp eax, dword [ebx + 0x6d0]
jl 0x40e471
push esi
mov ecx, ebx
call 0x411205
test eax, eax
je 0x40e4f4
push dword [eax + 4]
lea ecx, [esp + 0x54]
call 0x2dc76e
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x54]
lea esi, [esp + 0xc0]
call 0x2f5f5d
mov esi, dword [eax]
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
add esi, 0x1c
call 0x2da6ab
mov eax, dword [esp + 0x1c]
cmp esi, dword [eax + 0xe0]
jle 0x40e4f4
mov dword [eax + 0xe0], esi
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0xe0]
add dword [esp + 0x20], eax
jmp 0x40e50b
and dword [eax + 0xe0], 0
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
cmp eax, dword [ebx + 0x6d0]
jl 0x40e3b9
xor eax, eax
cmp dword [esp + 0x20], edi
setg al
and dword [esp + 0x18], 0
cmp dword [ebx + 0x6d0], 0
mov dword [esp + 0x14], eax
jle 0x40e803
mov eax, dword [esp + 0x18]
lea ecx, [ebx + 0x6c8]
call 0x391c9a
mov eax, dword [eax]
xor edx, edx
mov dword [esp + 0x20], eax
cmp dword [eax + 0xc], edx
jne 0x40e58f
mov edi, dword [esp + 0x20]
xor eax, eax
add edi, 0x4c
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
lea esi, [esp + 0xcc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jmp 0x40e7ef
mov ecx, dword [eax + 0xe0]
mov esi, dword [esp + 0x74]
cmp ecx, esi
mov dword [esp + 0x1c], ecx
jle 0x40e5e6
cmp dword [esp + 0x14], edx
je 0x40e5e6
cmp ecx, edx
mov dword [eax + 0xdc], 1
jle 0x40e5e0
fild dword [esp + 0x74]
fld qword [0x6c7f1a10]
fmul st(1), st(0)
fild dword [esp + 0x1c]
fdivp st(2)
fsubrp st(1)
call 0x49dbd0
mov ecx, dword [ebx + 0x298]
cmp ecx, eax
jg 0x40e5da
mov ecx, eax
mov dword [ebx + 0x298], ecx
mov dword [esp + 0x1c], esi
jmp 0x40e5ec
mov dword [eax + 0xdc], edx
mov ecx, dword [esp + 0x6c]
mov eax, dword [esp + 0x10]
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], ecx
mov ecx, dword [esp + 0x1c]
add eax, ecx
mov dword [esp + 0xb4], eax
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xb8], eax
mov eax, dword [esp + 0x20]
lea edi, [eax + 0x4c]
mov eax, dword [eax + 0x10]
mov dword [esp + 0xc8], edi
lea esi, [esp + 0xac]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test eax, eax
je 0x40e7e4
cmp dword [ebx + 0x2ec], 0
je 0x40e7e4
push eax
mov ecx, ebx
call 0x411205
mov dword [esp + 0x50], eax
test eax, eax
je 0x40e7e4
lea edi, [eax + 4]
lea eax, [esp + 0x88]
push eax
mov eax, edi
lea esi, [esp + 0x110]
call 0x2f5f5d
mov ecx, dword [esp + 0x1c]
cmp ecx, dword [eax]
jle 0x40e68b
mov eax, ecx
jmp 0x40e6a3
lea eax, [esp + 0x88]
push eax
mov eax, edi
lea esi, [esp + 0xa0]
call 0x2f5f5d
mov eax, dword [eax]
mov ecx, dword [esp + 0x50]
lea esi, [ecx + 0x18]
lea edi, [esp + 0xfc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0xfc]
lea esi, [ebx + 0x704]
lea edi, [esp + 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test edx, edx
jne 0x40e6d2
mov edx, dword [esp + 0x10]
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x10]
lea esi, [eax + edx]
cmp dword [esp + 0x68], esi
jge 0x40e6e7
mov esi, dword [esp + 0x68]
cmp dword [esp + 0x5c], 0
mov dword [esp + 0x34], esi
je 0x40e798
mov eax, ebx
call 0x40b20f
test eax, eax
je 0x40e746
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff2
lea ecx, [ebx + 0xb88]
cmp eax, dword [ecx]
jge 0x40e746
mov dword [ecx], eax
lea ecx, [ebx + 0xb80]
cmp eax, dword [ecx]
jg 0x40e725
push ecx
call dword [0x6c7b192c]
lea ecx, [ebx + 0xb68]
mov eax, dword [ecx]
lea edx, [esp + 0x88]
push edx
call dword [eax + 0x88]
add esi, 0xe
mov dword [ebx + 0x714], esi
jmp 0x40e77d
mov edi, dword [ebx + 0x71c]
cmp edi, dword [esp + 0x10]
jl 0x40e756
mov edi, dword [esp + 0x10]
mov eax, dword [ebx + 0x70c]
mov ecx, edi
lea edx, [ebx + 0x714]
sub ecx, dword [edx]
sub eax, esi
sub eax, 0xe
cmp dword [esp + 0xc4], ecx
jle 0x40e787
cmp ecx, eax
jge 0x40e787
add esi, 0xe
mov dword [edx], esi
mov dword [esp + 0x24], 1
jmp 0x40e78d
mov dword [ebx + 0x71c], edi
and dword [esp + 0x5c], 0
mov ecx, dword [esp + 0x50]
jmp 0x40e7a8
cmp dword [esp + 0x24], 0
je 0x40e7a8
add esi, 0xe
mov dword [ebx + 0x714], esi
mov eax, dword [esp + 0x20]
lea esi, [esp + 0x2c]
lea edi, [ecx + 0x18]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp dword [eax + 0xdc], 0
je 0x40e7c5
or eax, 0xffffffff
jmp 0x40e7de
mov esi, dword [esp + 0xc8]
lea edi, [esp + 0xdc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0xe4]
mov dword [ecx + 0x164], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x10], eax
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
cmp eax, dword [ebx + 0x6d0]
jl 0x40e53e
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x44], eax
lea ecx, [ebx + 0x304]
mov eax, dword [ecx]
lea edx, [esp + 0x88]
push edx
call dword [eax + 0x88]
mov eax, dword [ebx + 0x6a4]
lea esi, [esp + 0x40]
lea edi, [esp + 0xec]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test eax, eax
je 0x40e900
xor ecx, ecx
cmp dword [esp + 0x60], ecx
je 0x40e86b
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], ecx
lea esi, [esp + 0xac]
jmp 0x40e86f
lea esi, [esp + 0x40]
cmp dword [esp + 0x28], ecx
lea edi, [eax + 0x20]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jle 0x40e900
mov eax, dword [ebx + 0x6a4]
mov eax, dword [eax + 0x3d0]
lea esi, [eax - 1]
lea eax, [esp + 0x40]
push eax
mov dword [esp + 0x2c], esi
call dword [0x6c7b192c]
test esi, esi
jl 0x40e8b9
mov ecx, dword [ebx + 0x6a4]
push esi
call fcn.00417e90
lea esi, [eax + 0x6c]
lea edi, [esp + 0x40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x6a4]
mov eax, dword [ecx]
lea edx, [esp + 0x88]
push edx
call dword [eax + 0x14]
push eax
adc al, 0x83
jl 0x40e8f3
sub byte [eax], al
jl 0x40e900
push dword [esp + 0x28]
mov ecx, dword [ebx + 0x6a4]
call fcn.00417e90
lea ecx, [esp + 0x40]
push ecx
add eax, 0x6c
push eax
call dword [0x6c7b196c]
test eax, eax
je 0x40e900
mov eax, dword [esp + 0x48]
mov dword [esp + 0xec], eax
push dword [esp + 0x70]
lea ecx, [esp + 0x8c]
call 0x30efe8
mov ecx, 0x6ca189a8
call 0x3ca07c
xor esi, esi
test eax, eax
je 0x40e991
cmp dword [ebx + 0x2ec], esi
je 0x40e991
mov edi, dword [0x6c7b19b4]
push esi
push 0x100
push esi
push dword [ebx + 0x20]
call edi
push eax
call 0x2e5043
mov ecx, eax
call 0x31302e
mov eax, dword [ebx + 0x710]
push dword [ebx + 0x20]
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], esi
call edi
push eax
call 0x2e5043
cmp eax, esi
jne 0x40e970
xor eax, eax
jmp 0x40e973
mov eax, dword [eax + 0x20]
lea ecx, [esp + 0x40]
push ecx
push eax
mov ecx, 0x6ca189a8
call 0x3ca020
test eax, eax
je 0x40e991
mov dword [ebx + 0x2cc], 1
lea edi, [ebx + 0x2bc]
cmp dword [edi], esi
je 0x40e9b2
push 0x105
push esi
push esi
push dword [ebx + 0x20]
call dword [0x6c7b18b0]
mov dword [edi], esi
jmp 0x40ea37
push 1
lea eax, [ebx + 0x704]
push eax
push dword [ebx + 0x20]
call dword [0x6c7b18f4]
lea esi, [esp + 0x78]
lea edi, [esp + 0x40]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebx + 0x704]
push eax
movsd dword es:[edi], dword [esi]
call dword [0x6c7b188c]
test eax, eax
mov eax, dword [esp + 0x7c]
jne 0x40e9eb
mov eax, dword [ebx + 0x710]
mov ecx, dword [ebx + 0x284]
mov esi, dword [0x6c7b18f4]
mov dword [esp + 0x44], eax
lea eax, [ecx + eax + 0xa]
mov dword [esp + 0x4c], eax
push 1
lea eax, [esp + 0x44]
push eax
push dword [ebx + 0x20]
call esi
push 1
lea eax, [ebx + 0xb80]
push eax
push dword [ebx + 0x20]
call esi
push 1
lea eax, [esp + 0xf0]
push eax
push dword [ebx + 0x20]
call esi
push dword [ebx + 0x20]
call dword [0x6c7b193c]
xor esi, esi
push dword [ebx + 0x20]
call dword [0x6c7b19b4]
push eax
call 0x2e5043
push esi
push dword [eax + 0x20]
call dword [0x6c7b1a40]
push eax
call 0x311d68
mov dword [esp + 0x70], eax
cmp dword [ebx + 0x2ec], esi
je 0x40eb31
cmp eax, esi
je 0x40eb31
cmp dword [eax + 4], esi
je 0x40eb31
cmp dword [ebx + 0x2cc], esi
jne 0x40eb31
lea esi, [ebx + 0x748]
mov dword [esp + 0x3c], 3
push 0x6ca0df5c
lea ecx, [esp + 0x14]
call 0x2da36d
push 0
lea ecx, [esp + 0x14]
mov byte [esp + 0x324], 2
mov eax, dword [esi + 0x48]
push ecx
mov ecx, dword [esp + 0x78]
push eax
call 0x311e26
push 0x6c7c2a10
lea eax, [esp + 0xc0]
push eax
lea ecx, [esp + 0x18]
call fcn.00409151
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x324], 3
call fcn.00499e49
mov byte [esp + 0x320], 2
mov eax, dword [esp + 0xbc]
add eax, 0xfffffff0
call 0x2da6ab
push 0x26
lea ecx, [esp + 0x14]
call 0x36de09
mov edi, dword [esp + 0x10]
mov eax, dword [esi]
push edi
mov ecx, esi
call dword [eax + 0x2c]
lea eax, [edi - 0x10]
mov byte [esp + 0x320], 1
call 0x2da6ab
add esi, 0x160
dec dword [esp + 0x3c]
jne 0x40ea91
mov ecx, ebx
call fcn.004115f3
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
invalid