Function at 0x404390
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9b4
mov eax, dword [0x433004]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x435ab4]
push ebx
push esi
push edi
mov eax, dword [eax + 0x11c]
test eax, eax
jne 0x4043d0
push 0x2bdbdf4e
lea edx, [eax + 9]
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x435ab4]
mov dword [ecx + 0x11c], eax
push 0
push 0
call eax
test eax, eax
js 0x404448
mov eax, dword [0x435ab4]
mov eax, dword [eax + 0x118]
test eax, eax
jne 0x404404
push 0xcc12507f
lea edx, [eax + 9]
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x435ab4]
mov dword [ecx + 0x118], eax
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call eax
test eax, eax
mov eax, dword [0x435ab4]
jns 0x40445b
mov eax, dword [eax + 0x10c]
test eax, eax
jne 0x404446
push 0xd3a7a468
lea edx, [eax + 9]
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x435ab4]
mov dword [ecx + 0x10c], eax
call eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b142
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x84c], 0
mov eax, dword [eax + 0x110]
test eax, eax
jne 0x40448a
push 0xb32feeec
lea edx, [eax + 9]
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x435ab4]
mov dword [ecx + 0x110], eax
lea ecx, [ebp - 0x84c]
push ecx
push 0x42c264
push 1
push 0
push 0x42c334
call eax
mov eax, dword [0x435ab4]
mov dword [ebp - 0x850], 0
mov eax, dword [eax + 0x4c]
test eax, eax
jne 0x4044ce
push 0xdf1af05e
xor edx, edx
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x435ab4]
mov dword [ecx + 0x4c], eax
lea ecx, [ebp - 0x844]
push ecx
call eax
cmp word [ebp - 0x844], 9
jne 0x404706
mov eax, dword [0x435ab4]
mov eax, dword [eax + 0x110]
test eax, eax
jne 0x40450f
push 0xb32feeec
lea edx, [eax + 9]
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x435ab4]
mov dword [ecx + 0x110], eax
lea ecx, [ebp - 0x850]
push ecx
push 0x42c2a4
push 1
push 0
push 0x42c344
call eax
test eax, eax
js 0x404844
mov byte [ebp - 0x8cc], 0
lea ecx, [ebp - 0x8cc]
mov byte [ebp - 0x8cb], 0x6f
mov byte [ebp - 0x8ca], 0x6a
mov byte [ebp - 0x8c9], 0x6f
mov byte [ebp - 0x8c8], 0x6a
mov byte [ebp - 0x8c7], 0x1e
mov byte [ebp - 0x8c6], 0x6a
mov byte [ebp - 0x8c5], 0x70
mov byte [ebp - 0x8c4], 0x6a
mov byte [ebp - 0x8c3], 0x2d
mov byte [ebp - 0x8c2], 0x6a
mov byte [ebp - 0x8c1], 0x20
mov byte [ebp - 0x8c0], 0x6a
mov byte [ebp - 0x8bf], 0x26
mov byte [ebp - 0x8be], 0x6a
mov byte [ebp - 0x8bd], 0xb
mov byte [ebp - 0x8bc], 0x6a
mov byte [ebp - 0x8bb], 0x76
mov byte [ebp - 0x8ba], 0x6a
mov byte [ebp - 0x8b9], 0x70
mov byte [ebp - 0x8b8], 0x6a
mov byte [ebp - 0x8b7], 0x4c
mov byte [ebp - 0x8b6], 0x6a
mov byte [ebp - 0x8b5], 0x70
mov byte [ebp - 0x8b4], 0x6a
mov byte [ebp - 0x8b3], 0x1f
mov byte [ebp - 0x8b2], 0x6a
mov byte [ebp - 0x8b1], 0x3a
mov byte [ebp - 0x8b0], 0x6a
mov byte [ebp - 0x8af], 0x26
mov byte [ebp - 0x8ae], 0x6a
mov byte [ebp - 0x8ad], 0x48
mov byte [ebp - 0x8ac], 0x6a
mov byte [ebp - 0x8ab], 0x76
mov byte [ebp - 0x8aa], 0x6a
mov byte [ebp - 0x8a9], 0x1f
mov byte [ebp - 0x8a8], 0x6a
mov byte [ebp - 0x8a7], 0x48
mov byte [ebp - 0x8a6], 0x6a
mov byte [ebp - 0x8a5], 0x34
mov byte [ebp - 0x8a4], 0x6a
mov byte [ebp - 0x8a3], 0x70
mov byte [ebp - 0x8a2], 0x6a
mov byte [ebp - 0x8a1], 0x76
mov byte [ebp - 0x8a0], 0x6a
mov byte [ebp - 0x89f], 0x6a
mov byte [ebp - 0x89e], 0x6a
mov al, byte [ebp - 0x8cb]
call fcn.004109a0
mov ecx, eax
call fcn.00404180
mov ecx, dword [0x435ab4]
mov esi, eax
mov eax, dword [ecx + 0x170]
test eax, eax
jne 0x4046bc
push 0x5243a16a
lea edx, [eax + 0xa]
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x435ab4]
mov dword [ecx + 0x170], eax
lea ecx, [ebp - 0x820]
push ecx
call eax
mov eax, 3
mov dword [ebp - 0x818], 0x40
mov word [ebp - 0x820], ax
lea edx, [ebp - 0x820]
mov eax, dword [ebp - 0x850]
push edx
push 0
push esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
lea ecx, [ebp - 0x820]
mov esi, eax
call fcn.004041c0
test esi, esi
js 0x404844
mov dword [ebp - 0x848], 0
lea ecx, [ebp - 0x89c]
mov byte [ebp - 0x89c], 0
mov byte [ebp - 0x89b], 0x14
mov byte [ebp - 0x89a], 0x57
mov byte [ebp - 0x899], 0x18
mov byte [ebp - 0x898], 0x57
mov byte [ebp - 0x897], 0x18
mov byte [ebp - 0x896], 0x57
mov byte [ebp - 0x895], 0x66
mov byte [ebp - 0x894], 0x57
mov byte [ebp - 0x893], 0x31
mov byte [ebp - 0x892], 0x57
mov byte [ebp - 0x891], 0x28
mov byte [ebp - 0x890], 0x57
mov byte [ebp - 0x88f], 0x20
mov byte [ebp - 0x88e], 0x57
mov byte [ebp - 0x88d], 0x45
mov byte [ebp - 0x88c], 0x57
mov byte [ebp - 0x88b], 0x39
mov byte [ebp - 0x88a], 0x57
mov byte [ebp - 0x889], 0x69
mov byte [ebp - 0x888], 0x57
mov byte [ebp - 0x887], 0x57
mov byte [ebp - 0x886], 0x57
mov al, byte [ebp - 0x89b]
call fcn.00410940
mov ecx, dword [0x435ab4]
mov esi, eax
mov eax, dword [ecx + 0x16c]
test eax, eax
jne 0x4047ef
push 0xe6bc0210
lea edx, [eax + 0xa]
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x435ab4]
mov dword [ecx + 0x16c], eax
push esi
call eax
mov ecx, dword [ebp - 0x84c]
lea esi, [ebp - 0x848]
push esi
push dword [ebp - 0x850]
mov edx, dword [ecx]
push 0
push 0
push 0
push 0
push 0
push eax
push ecx
call dword [edx + 0xc]
test eax, eax
js 0x404838
mov ecx, dword [ebp - 0x848]
sub esp, 0x18
call fcn.00404130
test eax, eax
jns 0x40485c
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x84c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
call fcn.00404100
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041b142
mov esp, ebp
pop ebp
ret
mov byte [ebp - 0x884], 0
lea ecx, [ebp - 0x884]
mov byte [ebp - 0x883], 0x70
mov byte [ebp - 0x882], 0x36
mov byte [ebp - 0x881], 0x6c
mov byte [ebp - 0x880], 0x36
mov byte [ebp - 0x87f], 0x14
mov byte [ebp - 0x87e], 0x36
mov byte [ebp - 0x87d], 0x36
mov byte [ebp - 0x87c], 0x36
mov al, byte [ebp - 0x883]
call fcn.004108e0
mov ecx, eax
call fcn.00404180
mov byte [ebp - 0x90c], 0
lea ecx, [ebp - 0x90c]
mov byte [ebp - 0x90b], 0x16
mov esi, eax
mov byte [ebp - 0x90a], 0x31
mov byte [ebp - 0x909], 0x64
mov byte [ebp - 0x908], 0x31
mov byte [ebp - 0x907], 0x3d
mov byte [ebp - 0x906], 0x31
mov byte [ebp - 0x905], 0x64
mov byte [ebp - 0x904], 0x31
mov byte [ebp - 0x903], 0x5d
mov byte [ebp - 0x902], 0x31
mov byte [ebp - 0x901], 0x59
mov byte [ebp - 0x900], 0x31
mov byte [ebp - 0x8ff], 0x22
mov byte [ebp - 0x8fe], 0x31
mov byte [ebp - 0x8fd], 0x45
mov byte [ebp - 0x8fc], 0x31
mov byte [ebp - 0x8fb], 0x22
mov byte [ebp - 0x8fa], 0x31
mov byte [ebp - 0x8f9], 0x28
mov byte [ebp - 0x8f8], 0x31
mov byte [ebp - 0x8f7], 0x52
mov byte [ebp - 0x8f6], 0x31
mov byte [ebp - 0x8f5], 8
mov byte [ebp - 0x8f4], 0x31
mov byte [ebp - 0x8f3], 1
mov byte [ebp - 0x8f2], 0x31
mov byte [ebp - 0x8f1], 0x22
mov byte [ebp - 0x8f0], 0x31
mov byte [ebp - 0x8ef], 0x24
mov byte [ebp - 0x8ee], 0x31
mov byte [ebp - 0x8ed], 0x63
mov byte [ebp - 0x8ec], 0x31
mov byte [ebp - 0x8eb], 0x35
mov byte [ebp - 0x8ea], 0x31
mov byte [ebp - 0x8e9], 0x25
mov byte [ebp - 0x8e8], 0x31
mov byte [ebp - 0x8e7], 0x61
mov byte [ebp - 0x8e6], 0x31
mov byte [ebp - 0x8e5], 0x40
mov byte [ebp - 0x8e4], 0x31
mov byte [ebp - 0x8e3], 0x16
mov byte [ebp - 0x8e2], 0x31
mov byte [ebp - 0x8e1], 0x20
mov byte [ebp - 0x8e0], 0x31
mov byte [ebp - 0x8df], 0x47
mov byte [ebp - 0x8de], 0x31
mov byte [ebp - 0x8dd], 0x12
mov byte [ebp - 0x8dc], 0x31
mov byte [ebp - 0x8db], 0x78
mov byte [ebp - 0x8da], 0x31
mov byte [ebp - 0x8d9], 0x15
mov byte [ebp - 0x8d8], 0x31
mov byte [ebp - 0x8d7], 0x5d
mov byte [ebp - 0x8d6], 0x31
mov byte [ebp - 0x8d5], 0x78
mov byte [ebp - 0x8d4], 0x31
mov byte [ebp - 0x8d3], 0x3c
mov byte [ebp - 0x8d2], 0x31
mov byte [ebp - 0x8d1], 0x1c
mov byte [ebp - 0x8d0], 0x31
mov byte [ebp - 0x8cf], 0x31
mov byte [ebp - 0x8ce], 0x31
mov al, byte [ebp - 0x90b]
call fcn.00410880
mov ecx, eax
call fcn.00404180
mov ecx, dword [ebp - 0x848]
lea edi, [ebp - 0x854]
push edi
push 0
push 0x30
push eax
mov dword [ebp - 0x854], 0
mov edx, dword [ecx]
push esi
push ecx
call dword [edx + 0x50]
test eax, eax
jns 0x404ac4
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x84c]
jmp 0x405154
mov ecx, dword [ebp - 0x854]
mov dword [ebp - 0x858], 0
mov dword [ebp - 0x80c], 0
test ecx, ecx
je 0x405126
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
mov ebx, 0x7f
mov eax, dword [ecx]
lea edx, [ebp - 0x80c]
push edx
lea edx, [ebp - 0x858]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
cmp dword [ebp - 0x80c], 0
je 0x405126
mov byte [ebp - 0x878], 0
mov byte [ebp - 0x877], 0x48
mov byte [ebp - 0x876], 0x72
mov byte [ebp - 0x875], 0x36
mov byte [ebp - 0x874], 0x72
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x72
mov al, byte [ebp - 0x877]
cmp byte [ebp - 0x878], 0
jne 0x404b8a
xor esi, esi
nop dword [eax + eax]
mov al, byte [ebp + esi - 0x877]
mov ecx, 0x72
movzx eax, al
sub ecx, eax
imul eax, ecx, 0x23
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [ebp + esi - 0x877], dl
inc esi
cmp esi, 6
jb 0x404b60
mov eax, dword [ebp - 0x858]
lea edx, [ebp - 0x870]
push 0
push 0
push edx
mov ecx, dword [eax]
lea edx, [ebp - 0x877]
push 0
push edx
push eax
call dword [ecx + 0x10]
mov ecx, 0x800
lea eax, [ebp - 0x808]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x404bb5
mov byte [ebp - 0x9b0], cl
mov byte [ebp - 0x9af], 0x70
mov byte [ebp - 0x9ae], 0x27
mov byte [ebp - 0x9ad], 0x5f
mov byte [ebp - 0x9ac], 0x27
mov byte [ebp - 0x9ab], 0x7b
mov byte [ebp - 0x9aa], 0x27
mov byte [ebp - 0x9a9], 0x25
mov byte [ebp - 0x9a8], 0x27
mov byte [ebp - 0x9a7], 7
mov byte [ebp - 0x9a6], 0x27
mov byte [ebp - 0x9a5], 0x59
mov byte [ebp - 0x9a4], 0x27
mov byte [ebp - 0x9a3], 7
mov byte [ebp - 0x9a2], 0x27
mov byte [ebp - 0x9a1], 0xa
mov byte [ebp - 0x9a0], 0x27
mov byte [ebp - 0x99f], 0x30
mov byte [ebp - 0x99e], 0x27
mov byte [ebp - 0x99d], 0x70
mov byte [ebp - 0x99c], 0x27
mov byte [ebp - 0x99b], 0xa
mov byte [ebp - 0x99a], 0x27
mov byte [ebp - 0x999], 0xe
mov byte [ebp - 0x998], 0x27
mov byte [ebp - 0x997], 0x2a
mov byte [ebp - 0x996], 0x27
mov byte [ebp - 0x995], 0x23
mov byte [ebp - 0x994], 0x27
mov byte [ebp - 0x993], 0x6b
mov byte [ebp - 0x992], 0x27
mov byte [ebp - 0x991], 0x33
mov byte [ebp - 0x990], 0x27
mov byte [ebp - 0x98f], 0x6a
mov byte [ebp - 0x98e], 0x27
mov byte [ebp - 0x98d], 0x7b
mov byte [ebp - 0x98c], 0x27
mov byte [ebp - 0x98b], 0x75
mov byte [ebp - 0x98a], 0x27
mov byte [ebp - 0x989], 0x4e
mov byte [ebp - 0x988], 0x27
mov byte [ebp - 0x987], 0x22
mov byte [ebp - 0x986], 0x27
mov byte [ebp - 0x985], 0x23
mov byte [ebp - 0x984], 0x27
mov byte [ebp - 0x983], 0x3f
mov byte [ebp - 0x982], 0x27
mov byte [ebp - 0x981], 0x64
mov byte [ebp - 0x980], 0x27
mov byte [ebp - 0x97f], 0x22
mov byte [ebp - 0x97e], 0x27
mov byte [ebp - 0x97d], 0x2d
mov byte [ebp - 0x97c], 0x27
mov byte [ebp - 0x97b], 7
mov byte [ebp - 0x97a], 0x27
mov byte [ebp - 0x979], 0x5f
mov byte [ebp - 0x978], 0x27
mov byte [ebp - 0x977], 0x5c
mov byte [ebp - 0x976], 0x27
mov byte [ebp - 0x975], 0x51
mov byte [ebp - 0x974], 0x27
mov byte [ebp - 0x973], 0x23
mov byte [ebp - 0x972], 0x27
mov byte [ebp - 0x971], 0x4e
mov byte [ebp - 0x970], 0x27
mov byte [ebp - 0x96f], 0x65
mov byte [ebp - 0x96e], 0x27
mov byte [ebp - 0x96d], 7
mov byte [ebp - 0x96c], 0x27
mov byte [ebp - 0x96b], 0x5f
mov byte [ebp - 0x96a], 0x27
mov byte [ebp - 0x969], 0x23
mov byte [ebp - 0x968], 0x27
mov byte [ebp - 0x967], 0x6b
mov byte [ebp - 0x966], 0x27
mov byte [ebp - 0x965], 0x7c
mov byte [ebp - 0x964], 0x27
mov byte [ebp - 0x963], 0x50
mov byte [ebp - 0x962], 0x27
mov byte [ebp - 0x961], 0xe
mov byte [ebp - 0x960], 0x27
mov byte [ebp - 0x95f], 0x25
mov byte [ebp - 0x95e], 0x27
mov byte [ebp - 0x95d], 7
mov byte [ebp - 0x95c], 0x27
mov byte [ebp - 0x95b], 0x59
mov byte [ebp - 0x95a], 0x27
mov byte [ebp - 0x959], 7
mov byte [ebp - 0x958], 0x27
mov byte [ebp - 0x957], 0xa
mov byte [ebp - 0x956], 0x27
mov byte [ebp - 0x955], 0x22
mov byte [ebp - 0x954], 0x27
mov byte [ebp - 0x953], 0x28
mov byte [ebp - 0x952], 0x27
mov byte [ebp - 0x951], 0x5a
mov byte [ebp - 0x950], 0x27
mov byte [ebp - 0x94f], 0x7b
mov byte [ebp - 0x94e], 0x27
mov byte [ebp - 0x94d], 0x75
mov byte [ebp - 0x94c], 0x27
mov byte [ebp - 0x94b], 0x4e
mov byte [ebp - 0x94a], 0x27
mov byte [ebp - 0x949], 0x70
mov byte [ebp - 0x948], 0x27
mov byte [ebp - 0x947], 0x75
mov byte [ebp - 0x946], 0x27
mov byte [ebp - 0x945], 1
mov byte [ebp - 0x944], 0x27
mov byte [ebp - 0x943], 0x64
mov byte [ebp - 0x942], 0x27
mov byte [ebp - 0x941], 0xa
mov byte [ebp - 0x940], 0x27
mov byte [ebp - 0x93f], 0x4e
mov byte [ebp - 0x93e], 0x27
mov byte [ebp - 0x93d], 0x28
mov byte [ebp - 0x93c], 0x27
mov byte [ebp - 0x93b], 7
mov byte [ebp - 0x93a], 0x27
mov byte [ebp - 0x939], 0x17
mov byte [ebp - 0x938], 0x27
mov byte [ebp - 0x937], 7
mov byte [ebp - 0x936], 0x27
mov byte [ebp - 0x935], 0xa
mov byte [ebp - 0x934], 0x27
mov byte [ebp - 0x933], 0x20
mov byte [ebp - 0x932], 0x27
mov byte [ebp - 0x931], 0x50
mov byte [ebp - 0x930], 0x27
mov byte [ebp - 0x92f], 0x19
mov byte [ebp - 0x92e], 0x27
mov byte [ebp - 0x92d], 0x4b
mov byte [ebp - 0x92c], 0x27
mov byte [ebp - 0x92b], 0x57
mov byte [ebp - 0x92a], 0x27
mov byte [ebp - 0x929], 0x41
mov byte [ebp - 0x928], 0x27
mov byte [ebp - 0x927], 0x22
mov byte [ebp - 0x926], 0x27
mov byte [ebp - 0x925], 0x57
mov byte [ebp - 0x924], 0x27
mov byte [ebp - 0x923], 0x20
mov byte [ebp - 0x922], 0x27
mov byte [ebp - 0x921], 0xa
mov byte [ebp - 0x920], 0x27
mov byte [ebp - 0x91f], 0x7b
mov byte [ebp - 0x91e], 0x27
mov byte [ebp - 0x91d], 7
mov byte [ebp - 0x91c], 0x27
mov byte [ebp - 0x91b], 0x54
mov byte [ebp - 0x91a], 0x27
mov byte [ebp - 0x919], 7
mov byte [ebp - 0x918], 0x27
mov byte [ebp - 0x917], 0x2d
mov byte [ebp - 0x916], 0x27
mov byte [ebp - 0x915], 7
mov byte [ebp - 0x914], 0x27
mov byte [ebp - 0x913], 0x27
mov byte [ebp - 0x912], 0x27
mov al, byte [ebp - 0x9af]
cmp byte [ebp - 0x9b0], cl
jne 0x40505d
xor esi, esi
nop dword [eax + eax]
mov al, byte [ebp + esi - 0x9af]
mov ecx, 0x27
movzx eax, al
sub ecx, eax
imul eax, ecx, 0x17
cdq
idiv ebx
lea eax, [edx + 0x7f]
cdq
idiv ebx
mov byte [ebp + esi - 0x9af], dl
inc esi
cmp esi, 0x9e
jb 0x405030
push dword [ebp - 0x868]
lea eax, [ebp - 0x9af]
push eax
lea eax, [ebp - 0x808]
push eax
call edi
mov eax, dword [0x435ab4]
add esp, 0xc
mov eax, dword [eax + 0x20]
test eax, eax
jne 0x405099
push 0x1972bf90
xor edx, edx
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x435ab4]
mov dword [ecx + 0x20], eax
lea ecx, [ebp - 0x85c]
push ecx
call eax
lea ecx, [ebp - 0x808]
call fcn.00404200
mov eax, dword [0x435ab4]
mov esi, dword [ebp - 0x85c]
mov eax, dword [eax + 0x3c]
test eax, eax
jne 0x4050d6
push 0x78ee4dfa
xor edx, edx
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x435ab4]
mov dword [ecx + 0x3c], eax
push esi
call eax
mov eax, dword [0x435ab4]
mov eax, dword [eax + 0x174]
test eax, eax
jne 0x405103
push 0xeedec24b
lea edx, [eax + 0xa]
xor ecx, ecx
call fcn.004022b0
mov ecx, dword [0x435ab4]
mov dword [ecx + 0x174], eax
lea ecx, [ebp - 0x870]
push ecx
call eax
mov eax, dword [ebp - 0x858]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x854]
test ecx, ecx
jne 0x404af1
mov ecx, dword [ebp - 0x850]
test ecx, ecx
je 0x405136
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x84c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x854]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
call fcn.00404100
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041b142
mov esp, ebp
pop ebp
ret