Function at 0x40e230
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc4
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0x30], esi
mov eax, dword [esi + 4]
test eax, eax
je 0x40ed3c
mov edi, dword [ebp + 8]
test edi, edi
je 0x40ed3c
mov ecx, dword [ebp + 0x14]
test ecx, ecx
je 0x40ed3c
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x40ed3c
mov dl, byte [esi + 0x17a]
test dl, dl
je 0x40ed3c
test ecx, ecx
jge 0x40e289
mov ecx, dword [esi + 0xc]
mov dword [ebp + 0x14], ecx
test eax, eax
jge 0x40e293
mov eax, dword [esi + 0x10]
mov dword [ebp + 0x18], eax
mov edx, dword [esi + 0x148]
mov ebx, dword [esi + 0x18c]
cmp edx, 0xffffffff
mov edx, dword [ebp + 0x1c]
setne byte [esp + 0x16]
test ebx, ebx
mov ebx, dword [0x43a07c]
setne byte [esp + 0x17]
test edx, edx
je 0x40e2ef
lea eax, [esp + 0xc0]
push eax
push edi
call dword [0x43a080]
mov ecx, dword [ebp + 0x1c]
push ecx
call dword [0x43a084]
push 1
push eax
push edi
mov dword [esp + 0x5c], eax
call dword [0x43a088]
mov edx, dword [esp + 0x50]
push edx
call ebx
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x14]
mov dl, byte [esp + 0x16]
test dl, dl
jne 0x40e64c
mov dl, byte [esp + 0x17]
test dl, dl
jne 0x40e64c
mov dl, byte [esi + 0x179]
test dl, dl
jne 0x40e64c
cmp ecx, dword [esi + 0xc]
jne 0x40e355
cmp eax, dword [esi + 0x10]
jne 0x40e355
push 3
push edi
call dword [0x43a08c]
mov eax, dword [esi + 4]
mov ecx, dword [esi + 0x34]
push 0
mov edx, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x18]
push ecx
mov ecx, dword [ebp + 0xc]
push eax
push 0
push 0
push 0
push eax
mov eax, dword [ebp + 0x10]
push edx
push eax
push ecx
push edi
call dword [0x43a090]
jmp 0x40ed0a
lea edx, [esp + 0x78]
push edx
push edi
call dword [0x43a080]
mov ebx, dword [esp + 0x78]
mov eax, dword [ebp + 0xc]
cmp ebx, eax
mov edx, ebx
jg 0x40e370
mov edx, eax
mov ecx, dword [esp + 0x80]
cmp ecx, edx
jge 0x40e381
mov dword [esp + 0x3c], ecx
jmp 0x40e38d
cmp ebx, eax
mov dword [esp + 0x3c], ebx
jg 0x40e38d
mov dword [esp + 0x3c], eax
mov edx, dword [ebp + 0x14]
add eax, edx
mov edx, ecx
cmp ecx, eax
jl 0x40e39a
mov edx, eax
cmp ebx, edx
jg 0x40e3a6
cmp ecx, eax
mov ebx, ecx
jl 0x40e3a6
mov ebx, eax
mov esi, dword [esp + 0x7c]
mov eax, dword [ebp + 0x10]
cmp esi, eax
mov edx, esi
jg 0x40e3b5
mov edx, eax
mov ecx, dword [esp + 0x84]
cmp ecx, edx
jge 0x40e3c6
mov dword [esp + 0x40], ecx
jmp 0x40e3d2
cmp esi, eax
mov dword [esp + 0x40], esi
jg 0x40e3d2
mov dword [esp + 0x40], eax
mov edx, dword [ebp + 0x18]
add eax, edx
mov edx, ecx
cmp ecx, eax
jl 0x40e3df
mov edx, eax
cmp esi, edx
jle 0x40e3e9
mov dword [esp + 0x48], esi
jmp 0x40e3f5
cmp ecx, eax
mov dword [esp + 0x48], ecx
jl 0x40e3f5
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x40]
sub ebx, eax
sub esi, edi
mov ecx, 0xa
xor eax, eax
lea edi, [esp + 0x90]
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x10], ebx
push eax
mov dword [esp + 0x68], esi
mov dword [esp + 0x94], 0x28
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], esi
mov word [esp + 0xa0], 1
mov word [esp + 0xa2], 0x18
call dword [0x43a0bc]
push 0
lea ecx, [esp + 0x30]
push 0
mov edi, eax
mov eax, dword [ebp + 8]
push ecx
lea edx, [esp + 0x9c]
push 0
push edx
push eax
mov dword [esp + 0x78], edi
call dword [0x43a094]
push eax
push edi
call dword [0x43a098]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x40e617
lea ecx, [ebx + ebx*2]
lea eax, [ecx*8 + 0x1f]
cdq
and edx, 0x1f
add eax, edx
sar eax, 5
shl eax, 2
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x30]
test esi, esi
fild dword [eax + 0xc]
fidiv dword [ebp + 0x14]
fstp dword [esp + 0x68]
fild dword [eax + 0x10]
fidiv dword [ebp + 0x18]
fstp dword [esp + 0x6c]
jle 0x40e617
mov edx, dword [esp + 0x48]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], edx
mov dword [esp + 0x34], esi
mov eax, dword [esp + 0x28]
mov edx, dword [ebp + 0x10]
sub eax, edx
mov dword [esp + 0x50], eax
fild dword [esp + 0x50]
fmul dword [esp + 0x6c]
fstp qword [esp + 0x18]
mov edi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x18]
push edi
push ebx
call fcn.0041ee89
add esp, 8
call fcn.0041e808
mov esi, dword [esp + 0x30]
mov ecx, dword [esi + 0x10]
sub ecx, eax
jns 0x40e522
mov dword [esp + 0x4c], 0
jmp 0x40e53a
push edi
push ebx
call fcn.0041ee89
add esp, 8
call fcn.0041e808
mov ecx, dword [esi + 0x10]
sub ecx, eax
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
xor ebx, ebx
lea edi, [edx + eax]
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x40e5e5
mov eax, dword [ebp + 0xc]
mov edx, dword [esp + 0x3c]
mov ecx, ebx
sub esp, 8
sub ecx, eax
add ecx, edx
mov dword [esp + 0x58], ecx
fild dword [esp + 0x58]
fmul dword [esp + 0x70]
fstp qword [esp]
call fcn.0041edba
add esp, 8
call fcn.0041e808
mov ecx, dword [esi + 0x28]
test ecx, ecx
je 0x40e5b4
mov edx, dword [esp + 0x4c]
mov ecx, esi
push edx
push eax
call fcn.0040f820
push eax
lea eax, [esp + 0x74]
push eax
mov ecx, esi
call fcn.0040f7b0
mov ecx, dword [eax]
mov dword [esp + 0x38], ecx
mov cl, byte [esp + 0x3a]
mov dl, byte [esp + 0x39]
mov al, byte [esp + 0x38]
jmp 0x40e5cf
mov ecx, dword [esi + 0x30]
lea edx, [eax + eax*2]
imul ecx, dword [esp + 0x4c]
mov eax, dword [esi + 0x34]
add ecx, edx
add ecx, eax
mov al, byte [ecx]
mov dl, byte [ecx + 1]
inc ecx
mov cl, byte [ecx + 1]
mov byte [edi], al
inc edi
mov eax, dword [esp + 0x10]
mov byte [edi], dl
inc edi
mov byte [edi], cl
inc edi
inc ebx
cmp ebx, eax
jl 0x40e553
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
add ecx, eax
mov eax, dword [esp + 0x34]
dec edx
dec eax
mov dword [esp + 0x28], edx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x34], eax
jne 0x40e4dd
mov esi, dword [esp + 0x64]
mov edi, dword [esp + 0x60]
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x2c]
lea ecx, [esp + 0x90]
mov eax, dword [esp + 0x40]
push 0
push ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [ebp + 8]
push esi
push 0
push 0
push 0
push esi
push ebx
push eax
push ecx
push edx
call dword [0x43a090]
mov eax, dword [esp + 0x58]
jmp 0x40ecef
lea ecx, [esp + 0x78]
push ecx
push edi
call dword [0x43a080]
mov ebx, dword [esp + 0x78]
mov eax, dword [ebp + 0xc]
cmp ebx, eax
mov edx, ebx
jg 0x40e667
mov edx, eax
mov ecx, dword [esp + 0x80]
cmp ecx, edx
jge 0x40e678
mov dword [esp + 0x3c], ecx
jmp 0x40e684
cmp ebx, eax
mov dword [esp + 0x3c], ebx
jg 0x40e684
mov dword [esp + 0x3c], eax
mov edx, dword [ebp + 0x14]
add eax, edx
mov edx, ecx
cmp ecx, eax
jl 0x40e691
mov edx, eax
cmp ebx, edx
jg 0x40e69d
cmp ecx, eax
mov ebx, ecx
jl 0x40e69d
mov ebx, eax
mov esi, dword [esp + 0x7c]
mov eax, dword [ebp + 0x10]
cmp esi, eax
mov edx, esi
jg 0x40e6ac
mov edx, eax
mov ecx, dword [esp + 0x84]
cmp ecx, edx
jge 0x40e6bd
mov dword [esp + 0x40], ecx
jmp 0x40e6c9
cmp esi, eax
mov dword [esp + 0x40], esi
jg 0x40e6c9
mov dword [esp + 0x40], eax
mov edx, dword [ebp + 0x18]
add eax, edx
mov edx, ecx
cmp ecx, eax
jl 0x40e6d6
mov edx, eax
cmp esi, edx
jle 0x40e6e0
mov dword [esp + 0x48], esi
jmp 0x40e6ec
cmp ecx, eax
mov dword [esp + 0x48], ecx
jl 0x40e6ec
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x3c]
mov esi, dword [esp + 0x48]
mov edi, dword [esp + 0x40]
mov ecx, dword [esp + 0x30]
sub ebx, eax
lea eax, [esp + 0x70]
sub esi, edi
push eax
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x90], esi
mov byte [esp + 0x1c], 0
mov byte [esp + 0x1d], 0
mov byte [esp + 0x1e], 0
mov byte [esp + 0x1f], 0
call fcn.0040f1d0
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
mov dword [esp + 0x68], ecx
mov ecx, 0xa
xor eax, eax
lea edi, [esp + 0x90]
rep stosd dword es:[edi], eax
push edx
mov dword [esp + 0x94], 0x28
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], esi
mov word [esp + 0xa0], 1
mov word [esp + 0xa2], 0x18
call dword [0x43a0bc]
mov edx, dword [ebp + 8]
mov edi, eax
push 0
lea eax, [esp + 0x50]
push 0
push eax
lea ecx, [esp + 0x9c]
push 0
push ecx
push edx
mov dword [esp + 0x68], edi
call dword [0x43a094]
push eax
push edi
call dword [0x43a098]
mov ecx, dword [esp + 0x3c]
mov edx, dword [ebp + 8]
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x40]
push 0xcc0020
push eax
push ecx
push edx
push esi
push ebx
push 0
push 0
push edi
call dword [0x43a0b0]
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x40ecb4
lea eax, [ebx + ebx*2]
lea eax, [eax*8 + 0x1f]
cdq
and edx, 0x1f
add eax, edx
mov edx, dword [ebp + 0x14]
sar eax, 5
shl eax, 2
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 0xc]
cmp edx, ecx
mov dword [esp + 0x58], ecx
jne 0x40ea30
mov ecx, dword [eax + 0x10]
mov edx, dword [ebp + 0x18]
cmp edx, ecx
jne 0x40ea30
mov edx, dword [esp + 0x48]
sub ecx, edx
mov edx, dword [ebp + 0x10]
add ecx, edx
test esi, esi
mov dword [esp + 0x28], ecx
jle 0x40ecb4
mov ecx, dword [esp + 0x3c]
mov edx, dword [ebp + 0xc]
sub ecx, edx
mov dword [esp + 0x2c], 0
mov dword [esp + 0x58], ecx
mov dword [esp + 0x54], esi
jmp 0x40e845
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
mov edi, dword [esp + 0x4c]
mov ecx, edx
imul ecx, dword [eax + 0xc]
add esi, edi
mov edi, dword [eax + 0x30]
imul edi, edx
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x24], ecx
lea ecx, [ecx + ecx*2]
add edi, ecx
mov ecx, dword [eax + 0x34]
add edi, ecx
test ebx, ebx
jle 0x40ea05
mov dword [esp + 0x34], ebx
mov al, byte [esp + 0x17]
test al, al
je 0x40e8a6
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
mov eax, dword [edx + 0x18c]
add eax, ecx
mov ecx, dword [esp + 0x60]
mov dl, byte [eax + ecx]
mov byte [esp + 0x10], dl
jmp 0x40e8ab
mov byte [esp + 0x10], 0xff
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
xor ebx, ebx
and ecx, 0xff
mov bl, byte [eax + 0x178]
inc ebx
imul ebx, ecx
mov ecx, dword [eax + 0x28]
sar ebx, 8
test ecx, ecx
mov byte [esp + 0x10], bl
je 0x40e92a
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x30]
push edx
push eax
call fcn.0040f820
lea ecx, [esp + 0x74]
push eax
push ecx
mov ecx, dword [esp + 0x38]
call fcn.0040f7b0
mov edx, dword [esp + 0x30]
mov eax, dword [eax]
mov dword [esp + 0x18], eax
mov cl, byte [edx + 0x179]
test cl, cl
je 0x40e944
mov ebx, dword [esp + 0x1b]
mov ecx, dword [esp + 0x10]
and ebx, 0xff
and ecx, 0xff
inc ebx
imul ebx, ecx
sar ebx, 8
mov byte [esp + 0x10], bl
jmp 0x40e944
mov dl, byte [edi]
mov al, byte [edi + 1]
inc edi
mov byte [esp + 0x18], dl
inc edi
mov byte [esp + 0x19], al
mov cl, byte [edi]
inc edi
mov byte [esp + 0x1a], cl
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x68]
jne 0x40e95a
mov cl, byte [esp + 0x16]
test cl, cl
je 0x40e95a
add esi, 3
jmp 0x40e9e9
test bl, bl
jne 0x40e966
add esi, 3
jmp 0x40e9e9
cmp bl, 0xff
jne 0x40e981
mov dl, byte [esp + 0x18]
mov al, byte [esp + 0x19]
mov cl, byte [esp + 0x1a]
mov byte [esi], dl
inc esi
mov byte [esi], al
inc esi
mov byte [esi], cl
jmp 0x40e9e8
mov ecx, dword [esp + 0x10]
and eax, 0xff
not bl
mov byte [esp + 0x64], bl
xor ebx, ebx
mov edx, dword [esp + 0x64]
mov bl, byte [esi]
and ecx, 0xff
and edx, 0xff
imul eax, ecx
imul ebx, edx
add eax, ebx
xor ebx, ebx
sar eax, 8
mov byte [esi], al
mov eax, dword [esp + 0x19]
mov bl, byte [esi + 1]
inc esi
and eax, 0xff
imul ebx, edx
imul eax, ecx
add eax, ebx
sar eax, 8
mov byte [esi], al
mov eax, dword [esp + 0x1a]
and eax, 0xff
inc esi
imul eax, ecx
xor ecx, ecx
mov cl, byte [esi]
imul ecx, edx
add eax, ecx
sar eax, 8
mov byte [esi], al
inc esi
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x34]
inc ecx
dec eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x34], eax
jne 0x40e881
mov ebx, dword [esp + 0x38]
mov edx, dword [esp + 0x6c]
mov esi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x54]
add esi, edx
inc ecx
dec eax
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], ecx
mov dword [esp + 0x54], eax
jne 0x40e841
jmp 0x40ecb0
fild dword [esp + 0x58]
test esi, esi
fidiv dword [ebp + 0x14]
fstp dword [esp + 0x74]
fild dword [eax + 0x10]
fidiv dword [ebp + 0x18]
fstp dword [esp + 0x88]
jle 0x40ecb4
mov eax, dword [esp + 0x48]
mov dword [esp + 0x34], 0
mov dword [esp + 0x24], eax
mov dword [esp + 0x54], esi
mov ecx, dword [esp + 0x24]
mov eax, dword [ebp + 0x10]
sub ecx, eax
mov dword [esp + 0x58], ecx
fild dword [esp + 0x58]
fmul dword [esp + 0x88]
fstp qword [esp + 0x58]
mov esi, dword [esp + 0x5c]
mov ebx, dword [esp + 0x58]
push esi
push ebx
call fcn.0041ee89
add esp, 8
call fcn.0041e808
mov edi, dword [esp + 0x30]
mov edx, dword [edi + 0x10]
sub edx, eax
jns 0x40eaa6
xor ecx, ecx
jmp 0x40eaba
push esi
push ebx
call fcn.0041ee89
add esp, 8
call fcn.0041e808
mov ecx, dword [edi + 0x10]
sub ecx, eax
mov dword [esp + 0x2c], ecx
imul ecx, dword [edi + 0xc]
mov eax, dword [esp + 0x34]
mov dword [esp + 0x60], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x28], 0
lea esi, [eax + ecx]
mov eax, dword [esp + 0x38]
test eax, eax
jle 0x40ec8a
mov edx, dword [esp + 0x28]
mov ecx, dword [ebp + 0xc]
mov eax, dword [esp + 0x3c]
sub edx, ecx
add edx, eax
sub esp, 8
mov dword [esp + 0x60], edx
fild dword [esp + 0x60]
fmul dword [esp + 0x7c]
fstp qword [esp]
call fcn.0041edba
add esp, 8
call fcn.0041e808
mov cl, byte [esp + 0x17]
test cl, cl
je 0x40eb30
mov ecx, dword [edi + 0x18c]
mov edx, dword [esp + 0x60]
add ecx, eax
mov cl, byte [ecx + edx]
mov byte [esp + 0x10], cl
jmp 0x40eb35
mov byte [esp + 0x10], 0xff
mov edx, dword [esp + 0x10]
xor ebx, ebx
mov bl, byte [edi + 0x178]
and edx, 0xff
inc ebx
mov ecx, dword [edi + 0x28]
imul ebx, edx
sar ebx, 8
test ecx, ecx
mov byte [esp + 0x10], bl
je 0x40eba7
mov ecx, dword [esp + 0x2c]
push ecx
push eax
mov ecx, edi
call fcn.0040f820
lea edx, [esp + 0xbc]
push eax
push edx
mov ecx, edi
call fcn.0040f7b0
mov cl, byte [edi + 0x179]
mov eax, dword [eax]
test cl, cl
mov dword [esp + 0x18], eax
je 0x40ebd2
mov ebx, dword [esp + 0x1b]
mov ecx, dword [esp + 0x10]
and ebx, 0xff
and ecx, 0xff
inc ebx
imul ebx, ecx
sar ebx, 8
mov byte [esp + 0x10], bl
jmp 0x40ebd2
mov ecx, dword [edi + 0x30]
lea edx, [eax + eax*2]
imul ecx, dword [esp + 0x2c]
add ecx, edx
mov edx, dword [edi + 0x34]
add ecx, edx
mov dl, byte [ecx + 1]
mov byte [esp + 0x19], dl
mov al, byte [ecx]
inc ecx
mov byte [esp + 0x18], al
mov al, byte [ecx + 1]
mov byte [esp + 0x1a], al
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x68]
jne 0x40ebe8
mov cl, byte [esp + 0x16]
test cl, cl
je 0x40ebe8
add esi, 3
jmp 0x40ec75
test bl, bl
jne 0x40ebf4
add esi, 3
jmp 0x40ec75
cmp bl, 0xff
jne 0x40ec0d
mov cl, byte [esp + 0x18]
mov dl, byte [esp + 0x19]
mov al, byte [esp + 0x1a]
mov byte [esi], cl
inc esi
mov byte [esi], dl
inc esi
jmp 0x40ec72
mov ecx, dword [esp + 0x10]
and eax, 0xff
not bl
mov byte [esp + 0x64], bl
xor ebx, ebx
mov edx, dword [esp + 0x64]
mov bl, byte [esi]
and ecx, 0xff
and edx, 0xff
imul eax, ecx
imul ebx, edx
add eax, ebx
xor ebx, ebx
sar eax, 8
mov byte [esi], al
mov eax, dword [esp + 0x19]
mov bl, byte [esi + 1]
inc esi
and eax, 0xff
imul ebx, edx
imul eax, ecx
add eax, ebx
sar eax, 8
mov byte [esi], al
mov eax, dword [esp + 0x1a]
and eax, 0xff
inc esi
imul eax, ecx
xor ecx, ecx
mov cl, byte [esi]
imul ecx, edx
add eax, ecx
sar eax, 8
mov byte [esi], al
inc esi
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x38]
inc eax
cmp eax, ecx
mov dword [esp + 0x28], eax
jl 0x40eae5
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x54]
dec edx
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x6c]
add ecx, edx
dec eax
mov dword [esp + 0x34], ecx
mov dword [esp + 0x54], eax
jne 0x40ea64
mov edi, dword [esp + 0x50]
mov ecx, dword [esp + 0x4c]
lea eax, [esp + 0x90]
push 0
mov edx, dword [esp + 0x3c]
push eax
mov eax, dword [esp + 0x94]
push ecx
mov ecx, dword [esp + 0x48]
push eax
push 0
push 0
push 0
push eax
mov eax, dword [esp + 0x60]
push edx
mov edx, dword [ebp + 8]
push eax
push ecx
push edx
call dword [0x43a090]
mov eax, dword [esp + 0x70]
push eax
push edi
call dword [0x43a098]
mov ebx, dword [0x43a07c]
push eax
call ebx
push edi
call dword [0x43a09c]
mov edi, dword [ebp + 8]
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x40ed2e
lea ecx, [esp + 0xc0]
push ecx
call dword [0x43a084]
mov esi, eax
push 2
push esi
push edi
call dword [0x43a088]
push esi
call ebx
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x18