Function at 0x40b0a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4198d4
push eax
mov dword fs:[0], esp
sub esp, 0x2c
push ebx
push ebp
push esi
push edi
mov esi, ecx
call fcn.00408e50
mov edi, 0x3f
cmp word [esi + 0xa8], di
jne 0x40bbec
cmp dword [esi + 0xac], 1
jne 0x40bbec
mov ecx, esi
call fcn.00408e50
mov cx, word [esi + 0xa8]
movzx eax, cx
add eax, 0xffffffdf
xor ebx, ebx
cmp eax, 0x31
mov dword [esp + 0x14], 0x3e
ja case.0x40b114.41
movzx eax, byte [eax + 0x40bd4c]
mov ebp, dword [esp + 0x4c]
jmp dword [eax*4 + 0x40bd28]
mov ebx, 1
mov ecx, esi
call fcn.00408e50
push 0xc
call fcn.0040e151
mov edi, eax
add esp, 4
mov dword [esp + 0x24], edi
test edi, edi
mov dword [esp + 0x44], 0
je 0x40b169
mov ecx, dword [esp + 0x4c]
mov edx, dword [ecx]
and edx, 0xffffffef
push edx
mov ecx, esi
call fcn.0040afd0
mov dword [edi + 4], eax
xor eax, eax
test ebx, ebx
sete al
mov dword [edi], 0x41b58c
mov dword [edi + 8], eax
jmp 0x40b16b
xor edi, edi
push edi
lea ecx, [esi + 0x14]
mov dword [esp + 0x48], 0xffffffff
call fcn.004068f0
mov ecx, esi
call fcn.00408e50
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
add esp, 0x38
ret 4
movzx eax, word [esi + 0xb8]
cmp eax, 0x21
je 0x40b1ad
cmp eax, 0x3d
je 0x40b1b2
jmp case.0x40b114.39
mov ebx, 1
mov ecx, esi
call fcn.00408e50
mov ecx, esi
call fcn.00408e50
push 0xc
call fcn.0040e151
mov edi, eax
add esp, 4
mov dword [esp + 0x24], edi
test edi, edi
mov dword [esp + 0x44], 1
je 0x40b1ff
mov ecx, dword [ebp]
or ecx, 0x10
push ecx
mov ecx, esi
call fcn.0040afd0
xor edx, edx
test ebx, ebx
sete dl
mov dword [edi], 0x41b58c
mov dword [edi + 4], eax
mov dword [edi + 8], edx
jmp 0x40b201
xor edi, edi
push edi
mov ecx, esi
mov dword [esp + 0x48], 0xffffffff
call fcn.00407900
mov edi, eax
test edi, edi
jne 0x40bbce
cmp word [esi + 0xa8], 0x50
jne case.0x40b114.34
mov ecx, esi
call fcn.00408e50
mov ax, word [esi + 0xa8]
cmp ax, 0x3c
jne 0x40b243
mov dword [esp + 0x14], 0x3e
jmp 0x40b251
cmp ax, 0x27
jne 0x40b251
mov dword [esp + 0x14], 0x27
mov ecx, esi
call fcn.00408e50
mov eax, dword [esi + 0xc]
mov dword [esp + 0x24], eax
inc eax
push 0x1c
mov dword [esi + 0xc], eax
call fcn.0040e151
add esp, 4
test eax, eax
je 0x40b281
mov ecx, dword [ebp]
and ecx, 0x10
push ecx
mov ecx, eax
call fcn.00407a20
jmp 0x40b283
xor eax, eax
lea edi, [esi + 0x14]
push eax
mov ecx, edi
mov dword [esp + 0x20], eax
call fcn.004068f0
push 0x20
call fcn.0040e151
add esp, 4
test eax, eax
je 0x40b2b7
mov edx, dword [ebp]
shr edx, 4
and edx, 1
push edx
push 0xffffffffffffffff
mov ecx, eax
call fcn.004066d0
mov ebx, eax
jmp 0x40b2b9
xor ebx, ebx
push ebx
mov ecx, edi
call fcn.004068f0
push 0x20
call fcn.0040e151
add esp, 4
test eax, eax
je 0x40b2e8
mov ecx, dword [ebp]
shr ecx, 4
not ecx
and ecx, 1
push ecx
push 0xffffffffffffffff
mov ecx, eax
call fcn.004066d0
xor ebp, ebp
jmp 0x40b2ec
xor ebp, ebp
xor eax, eax
push eax
mov ecx, edi
mov dword [esp + 0x1c], eax
call fcn.004068f0
lea edi, [ebx + 0xc]
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
mov dword [esp + 0x28], 0x41b578
mov dword [esp + 0x38], ebp
mov dword [esp + 0x34], ebp
cmp word [esi + 0xa8], bp
mov dword [esp + 0x44], 2
je 0x40b398
mov ebp, dword [esp + 0x14]
jmp 0x40b330
xor eax, eax
mov ax, word [esi + 0xa8]
cmp ax, bp
je 0x40b398
push 1
push 1
lea edx, [esp + 0x1c]
push edx
mov ecx, edi
mov dword [esp + 0x20], eax
call fcn.00405e40
mov ax, word [esi + 0xa8]
xor ecx, ecx
mov cl, al
and ecx, 0xff
cmp cx, ax
jne 0x40b370
mov dl, al
mov byte [esp + 0x10], dl
jmp 0x40b375
mov byte [esp + 0x10], 0
push 1
push 1
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x34]
call fcn.004064b0
mov ecx, esi
call fcn.00408e50
cmp word [esi + 0xa8], 0
jne 0x40b330
mov ecx, esi
call fcn.00408e50
mov eax, dword [esp + 0x34]
test eax, eax
mov dword [esp + 0x14], eax
jne 0x40b3b3
mov dword [esp + 0x14], 0x41b574
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x18]
push edx
call fcn.00406380
add esp, 8
test eax, eax
je 0x40b3ef
mov ecx, dword [esp + 0x14]
mov dl, byte [ecx]
xor eax, eax
test dl, dl
sete al
test eax, eax
je 0x40b3ef
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov dword [ebx + 4], eax
mov ecx, edi
mov dword [edx + 4], eax
call fcn.00406610
mov edi, dword [esp + 0x1c]
lea ebp, [edi + 4]
push ebx
mov ecx, ebp
call fcn.004068f0
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
push ecx
mov ecx, esi
call fcn.0040afd0
push eax
mov ecx, ebp
call fcn.004068f0
mov edx, dword [esp + 0x18]
push edx
mov ecx, ebp
call fcn.004068f0
mov ebx, dword [esp + 0x24]
push 0
push ebx
lea ecx, [esi + 0x50]
call fcn.00406700
mov eax, dword [esi + 0x5c]
mov dword [eax + ebx*4], edi
jmp 0x40b5d8
mov ecx, esi
call fcn.00408e50
push 8
call fcn.0040e151
mov edi, eax
add esp, 4
mov dword [esp + 0x24], edi
test edi, edi
mov dword [esp + 0x44], 3
je 0x40b476
mov ecx, dword [esp + 0x4c]
mov edx, dword [ecx]
push edx
mov ecx, esi
call fcn.0040afd0
mov dword [edi], 0x41b5a4
mov dword [edi + 4], eax
jmp 0x40b478
xor edi, edi
push edi
mov ecx, esi
mov dword [esp + 0x48], 0xffffffff
call fcn.00407900
mov ecx, esi
mov edi, eax
call fcn.00408e50
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
add esp, 0x38
ret 4
mov ecx, esi
call fcn.00408e50
xor edi, edi
cmp word [esi + 0xa8], di
je 0x40b4e4
lea ebx, [ebx]
movzx eax, word [esi + 0xa8]
push eax
call fcn.0040ef2f
add esp, 4
test eax, eax
je 0x40b4e4
mov ecx, esi
call fcn.00408e50
cmp word [esi + 0xa8], di
jne 0x40b4c0
mov ax, word [esi + 0xa8]
cmp ax, 0x3c
je 0x40b607
cmp ax, 0x27
je 0x40b607
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x28], 0x41b578
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], edi
cmp ax, di
mov dword [esp + 0x44], 5
je 0x40b57c
jmp 0x40b530
mov ax, word [esi + 0xa8]
cmp ax, 0x29
je 0x40b57c
xor ecx, ecx
mov cl, al
and ecx, 0xff
cmp cx, ax
jne 0x40b554
mov dl, al
mov byte [esp + 0x4c], dl
jmp 0x40b559
mov byte [esp + 0x4c], 0
push 1
push 1
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x34]
call fcn.004064b0
mov ecx, esi
call fcn.00408e50
cmp word [esi + 0xa8], 0
jne 0x40b530
mov eax, dword [esp + 0x34]
test eax, eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x4c], eax
jne 0x40b598
mov dword [esp + 0x4c], 0x41b574
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x50]
push edx
call fcn.00406380
push 0x20
call fcn.0040e151
add esp, 0xc
test eax, eax
je 0x40b5c3
mov ecx, dword [esp + 0x1c]
push ecx
mov ecx, eax
call fcn.00406820
jmp 0x40b5c5
xor eax, eax
push eax
mov ecx, esi
call fcn.00407900
mov edi, eax
push edi
lea ecx, [esi + 0x3c]
call fcn.004068f0
lea ecx, [esp + 0x28]
mov dword [esp + 0x44], 0xffffffff
call fcn.00406430
mov ecx, esi
call fcn.00408e50
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
add esp, 0x38
ret 4
xor edx, edx
cmp ax, 0x3c
setne dl
push 0x20
dec edx
and edx, 0x17
add edx, 0x27
mov ebp, edx
call fcn.0040e151
add esp, 4
cmp eax, edi
je 0x40b632
push 0xfffffffffffffffd
mov ecx, eax
call fcn.00406820
jmp 0x40b634
xor eax, eax
push eax
mov ecx, esi
call fcn.00407900
mov ecx, esi
mov edi, eax
call fcn.00408e50
xor eax, eax
lea ebx, [edi + 0xc]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], 0x41b578
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], eax
cmp word [esi + 0xa8], ax
mov dword [esp + 0x44], 4
je 0x40b6db
xor eax, eax
mov ax, word [esi + 0xa8]
cmp ax, bp
je 0x40b6db
push 1
mov dword [esp + 0x50], eax
push 1
lea eax, [esp + 0x54]
push eax
mov ecx, ebx
call fcn.00405e40
mov ax, word [esi + 0xa8]
xor ecx, ecx
mov cl, al
and ecx, 0xff
cmp cx, ax
jne 0x40b6b3
mov dl, al
mov byte [esp + 0x4c], dl
jmp 0x40b6b8
mov byte [esp + 0x4c], 0
push 1
push 1
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x34]
call fcn.004064b0
mov ecx, esi
call fcn.00408e50
cmp word [esi + 0xa8], 0
jne 0x40b673
mov ecx, esi
call fcn.00408e50
mov eax, dword [esp + 0x34]
test eax, eax
mov dword [esp + 0x4c], eax
jne 0x40b6f6
mov dword [esp + 0x4c], 0x41b574
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x50]
push edx
call fcn.00406380
add esp, 8
test eax, eax
je 0x40b72b
mov ecx, dword [esp + 0x4c]
mov dl, byte [ecx]
xor eax, eax
test dl, dl
sete al
test eax, eax
je 0x40b72b
mov edx, dword [esp + 0x24]
mov ecx, ebx
mov dword [edi + 8], edx
call fcn.00406610
push edi
lea ecx, [esi + 0x3c]
call fcn.004068f0
lea ecx, [esp + 0x28]
mov dword [esp + 0x44], 0xffffffff
call fcn.00406430
mov ecx, esi
call fcn.00408e50
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
add esp, 0x38
ret 4
push 0x28
call fcn.0040e151
add esp, 4
test eax, eax
je 0x40b77a
mov ecx, eax
call fcn.00406890
jmp 0x40b77c
xor eax, eax
push eax
mov ecx, esi
call fcn.00407900
mov ebx, eax
lea eax, [esp + 0x28]
xor ebp, ebp
push eax
lea ecx, [esi + 0xb8]
mov word [esp + 0x2c], di
mov dword [esp + 0x30], 1
mov dword [esp + 0x34], ebp
mov dword [esp + 0x38], ebp
call fcn.00406150
test eax, eax
mov ecx, esi
je 0x40b7c5
mov edi, dword [esp + 0x4c]
push edi
call fcn.0040b0a0
mov dword [ebx + 0x1c], eax
jmp 0x40b932
call fcn.00408e50
mov ebp, dword [esi + 0xb0]
push 0xc
call fcn.0040e151
mov edi, eax
add esp, 4
mov dword [esp + 0x24], edi
test edi, edi
mov dword [esp + 0x44], 6
je 0x40b810
mov ecx, dword [esp + 0x4c]
mov edx, dword [ecx]
push edx
mov ecx, esi
call fcn.0040afd0
mov dword [edi + 4], eax
mov dword [edi], 0x41b58c
mov dword [edi + 8], 1
mov eax, edi
xor edi, edi
jmp 0x40b814
xor edi, edi
xor eax, eax
push eax
mov ecx, esi
mov dword [esp + 0x48], 0xffffffff
call fcn.00407900
mov dword [ebx + 0x1c], eax
mov eax, dword [esi + 0x90]
cmp eax, edi
jne 0x40b836
mov eax, 0x41b588
mov ecx, dword [esi + 0xb0]
push 1
sub ecx, ebp
push ecx
lea edx, [eax + ebp*2]
push edx
lea ecx, [ebx + 8]
call fcn.00405e40
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x28], 0x41b578
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], edi
cmp ebp, dword [esi + 0xb0]
mov dword [esp + 0x44], 7
jge 0x40b8c9
cmp ebp, dword [esi + 0x94]
jl 0x40b881
xor eax, eax
jmp 0x40b88b
mov eax, dword [esi + 0x90]
movzx eax, word [eax + ebp*2]
mov cl, al
push 1
push 1
and cx, 0xff
cmp cx, ax
setne dl
dec dl
lea ecx, [esp + 0x30]
and edx, eax
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x1c], dl
call fcn.004064b0
mov eax, dword [esi + 0xb0]
inc ebp
cmp ebp, eax
jl 0x40b875
mov eax, dword [esp + 0x34]
cmp eax, edi
mov dword [esp + 0x18], eax
jne 0x40b8d1
mov dword [esp + 0x18], 0x41b574
lea ecx, [esp + 0x24]
push ecx
lea edx, [esp + 0x1c]
push edx
call fcn.00406380
add esp, 8
test eax, eax
je 0x40b904
mov ecx, dword [esp + 0x18]
mov dl, byte [ecx]
xor eax, eax
test dl, dl
sete al
cmp eax, edi
je 0x40b904
mov edx, dword [esp + 0x24]
mov dword [ebx + 4], edx
mov dword [ebx + 0x1c], edi
jmp 0x40b914
push ebx
lea ecx, [esi + 0x78]
mov dword [ebx + 4], 0xffffffff
call fcn.004068f0
mov ecx, esi
call fcn.00408e50
lea ecx, [esp + 0x28]
mov dword [esp + 0x44], 0xffffffff
call fcn.00406430
mov edi, dword [esp + 0x4c]
xor ebp, ebp
mov eax, dword [edi]
lea ecx, [esp + 0x4c]
push ecx
mov ecx, esi
mov dword [esp + 0x50], eax
call fcn.0040adf0
mov dword [ebx + 0x20], eax
cmp word [esi + 0xa8], 0x7c
jne 0x40b985
mov ecx, esi
call fcn.00408e50
mov edx, dword [edi]
push edx
mov ecx, esi
call fcn.0040afd0
mov ecx, esi
mov dword [ebx + 0x24], eax
mov edi, ebx
call fcn.00408e50
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
add esp, 0x38
ret 4
mov ecx, esi
mov dword [ebx + 0x24], ebp
mov edi, ebx
call fcn.00408e50
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
add esp, 0x38
ret 4
test cx, cx
je 0x40b9d5
lea ecx, [ecx]
movzx eax, word [esi + 0xa8]
push eax
call fcn.0040ef2f
add esp, 4
test eax, eax
je 0x40b9d5
mov ecx, esi
call fcn.00408e50
cmp word [esi + 0xa8], 0
jne 0x40b9b0
mov ax, word [esi + 0xa8]
cmp ax, 0x30
jb 0x40babf
cmp ax, 0x39
ja 0x40babf
xor ecx, ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x28], 0x41b578
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], ecx
cmp ax, cx
mov dword [esp + 0x44], 8
je 0x40ba6c
jmp 0x40ba20
mov ax, word [esi + 0xa8]
cmp ax, 0x29
je 0x40ba6c
xor ecx, ecx
mov cl, al
and ecx, 0xff
cmp cx, ax
jne 0x40ba44
mov dl, al
mov byte [esp + 0x4c], dl
jmp 0x40ba49
mov byte [esp + 0x4c], 0
push 1
push 1
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x34]
call fcn.004064b0
mov ecx, esi
call fcn.00408e50
cmp word [esi + 0xa8], 0
jne 0x40ba20
mov eax, dword [esp + 0x34]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x4c], eax
jne 0x40ba86
mov dword [esp + 0x4c], 0x41b574
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x50]
push edx
call fcn.00406380
push 0x20
call fcn.0040e151
add esp, 0xc
cmp eax, edi
je 0x40bab1
mov ecx, dword [esp + 0x1c]
push ecx
mov ecx, eax
call fcn.00406820
mov edi, eax
push edi
lea ecx, [esi + 0x14]
call fcn.004068f0
jmp 0x40b5cf
mov edx, dword [esp + 0x4c]
mov edi, dword [edx]
mov ebp, 0x28
lea ebx, [ebx]
cmp word [esi + 0xa8], 0
mov edx, 1
jne 0x40baeb
cmp dword [esi + 0xac], edx
je 0x40bb6e
mov cx, word [esi + 0xa8]
cmp cx, 0x3a
je 0x40bb6e
cmp cx, 0x29
je 0x40bb6e
cmp cx, bp
jne 0x40bb0b
cmp dword [esi + 0xac], edx
je 0x40bb6e
movzx ecx, cx
add ecx, 0xffffffd3
xor eax, eax
cmp ecx, 0x46
ja case.0x40bb1f.46
movzx ecx, byte [ecx + 0x40bd98]
jmp dword [ecx*4 + 0x40bd80]
mov eax, 8
test ebx, ebx
je 0x40bb60
not eax
mov ecx, esi
and edi, eax
call fcn.00408e50
jmp 0x40bad0
mov eax, edx
jmp case.0x40bb1f.46
mov eax, 2
jmp case.0x40bb1f.46
mov eax, 4
jmp case.0x40bb1f.46
not eax
mov ecx, esi
mov ebx, edx
and edi, eax
call fcn.00408e50
jmp 0x40bad0
mov ecx, esi
or edi, eax
call fcn.00408e50
jmp 0x40bad0
mov ax, word [esi + 0xa8]
cmp ax, 0x3a
je 0x40bbbd
cmp ax, bp
jne 0x40bb88
cmp dword [esi + 0xac], edx
je 0x40bbb7
mov edx, dword [esp + 0x4c]
push 0
mov ecx, esi
mov dword [edx], edi
call fcn.00408ec0
mov ecx, esi
mov edi, eax
call fcn.00408e50
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
add esp, 0x38
ret 4
cmp ax, 0x3a
jne 0x40bbc4
mov ecx, esi
call fcn.00408e50
push edi
mov ecx, esi
call fcn.0040afd0
mov edi, eax
mov ecx, esi
call fcn.00408e50
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
add esp, 0x38
ret 4
push 0x1c
call fcn.0040e151
mov ebx, dword [esp + 0x50]
xor ebp, ebp
add esp, 4
cmp eax, ebp
je 0x40bc23
mov ecx, dword [ebx]
mov dword [eax], 0x41b628
and ecx, 0x10
mov dword [eax + 8], ebp
mov dword [eax + 0xc], ebp
mov dword [eax + 4], 0x41b530
mov dword [eax + 0x14], ebp
mov dword [eax + 0x10], ebp
mov dword [eax + 0x18], ecx
jmp 0x40bc25
xor eax, eax
lea ecx, [esi + 0x14]
push eax
mov dword [esp + 0x1c], eax
call fcn.004068f0
mov ecx, dword [esi + 8]
inc ecx
push 0x20
mov dword [esi + 8], ecx
mov edi, ecx
call fcn.0040e151
add esp, 4
cmp eax, ebp
je 0x40bc72
mov ecx, dword [ebx]
mov dword [eax], 0x41b598
shr ecx, 4
mov dword [eax + 0x10], ebp
mov dword [eax + 0x14], ebp
mov dword [eax + 0x1c], ebp
mov dword [eax + 0x18], ebp
and ecx, 1
mov dword [eax + 0xc], 0x41b560
mov dword [eax + 4], edi
mov dword [eax + 8], ecx
mov ebp, eax
push ebp
lea ecx, [esi + 0x14]
call fcn.004068f0
mov ebx, dword [esp + 0x18]
add ebx, 4
push ebp
mov ecx, ebx
call fcn.004068f0
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
push ecx
mov ecx, esi
call fcn.0040afd0
push eax
mov ecx, ebx
call fcn.004068f0
push 0x20
call fcn.0040e151
add esp, 4
test eax, eax
je 0x40bce1
mov edx, dword [esp + 0x4c]
mov ecx, dword [edx]
shr ecx, 4
not ecx
mov dword [eax], 0x41b598
and ecx, 1
xor edx, edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], edx
mov dword [eax + 0xc], 0x41b560
mov dword [eax + 0x1c], edx
mov dword [eax + 0x18], edx
mov dword [eax + 4], edi
mov dword [eax + 8], ecx
mov ebp, eax
jmp 0x40bce3
xor ebp, ebp
push ebp
lea ecx, [esi + 0x14]
call fcn.004068f0
push ebp
mov ecx, ebx
call fcn.004068f0
push 0
push edi
lea ecx, [esi + 0x28]
call fcn.00406700
mov eax, dword [esi + 0x34]
mov ebx, dword [esp + 0x18]
mov ecx, esi
mov dword [eax + edi*4], ebx
call fcn.00408e50
mov ecx, dword [esp + 0x3c]
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
mov dword fs:[0], ecx
add esp, 0x38
ret 4