Function at 0x4bcd00
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4044c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x100
call fcn.004044c0
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x402d50
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0x104], 0x8002
push 0x5211c8
lea eax, [ebp - 0x104]
push eax
call fcn.0040480e
movsx eax, ax
test eax, eax
je 0x4bcea3
mov dword [ebp - 0xfc], 0xba
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x64]
call fcn.004048d4
mov dword [ebp - 0xfc], 0x76
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0xb4]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xd6
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0xa4]
call fcn.004048d4
mov dword [ebp - 0xfc], 0x30
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x74]
call fcn.004048d4
mov dword [ebp - 0xfc], 0x56
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x44]
call fcn.004048d4
mov dword [ebp - 0xfc], 0x5f
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov dword [ebp - 0xfc], 0x3e
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0xc4]
call fcn.004048d4
mov dword [ebp - 0xfc], 0x8c
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x94]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xbb
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x34]
call fcn.004048d4
jmp 0x4bd12d
mov dword [ebp - 0xfc], 0xd5
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x64]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xc9
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0xb4]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xd3
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0xa4]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xcb
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x74]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xcf
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x44]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xd4
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xcc
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0xc4]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xca
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x94]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xd6
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x34]
call fcn.004048d4
cmp word [0x521220], 0x1e
jl 0x4bd12d
mov dword [ebp - 0xfc], pe_nt_image_headers32
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x64]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xbc
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0xb4]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xef
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0xa4]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xbe
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x74]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xc2
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x44]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xc7
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x54]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xbf
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0xc4]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xbd
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x94]
call fcn.004048d4
mov dword [ebp - 0xfc], 0xd6
mov dword [ebp - 0x104], 2
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x34]
call fcn.004048d4
mov dword [ebp - 0xfc], 0x40a6cc
mov dword [ebp - 0x104], 8
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x24]
call fcn.00404766
movsx esi, word [0x5210dc]
push dword [0x5210d8]
push 1
call fcn.00404838
cmp esi, eax
jge 0x4bdc50
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
mov al, byte [eax]
mov byte [ebp - 0x10c], al
lea eax, [ebp - 0x64]
push eax
call fcn.00404640
cmp byte [ebp - 0x10c], al
jne 0x4bd1e7
mov dword [ebp - 0xfc], 0x4108bc
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x4bdd42
mov word [0x5210dc], ax
jmp 0x4bdc4b
mov ax, word [0x5210dc]
add ax, 1
jo 0x4bdd42
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0x10
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0xfc], ax
mov dword [ebp - 0x104], 0xb
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00404808
push eax
call fcn.00404640
xor ecx, ecx
cmp byte [ebp - 0x10c], al
sete cl
neg ecx
mov word [ebp - 0x108], cx
lea ecx, [ebp - 0x104]
call fcn.00404844
movsx eax, word [ebp - 0x108]
test eax, eax
je 0x4bd332
mov dword [ebp - 0xfc], 0x4108c8
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 2
jo 0x4bdd42
mov word [0x5210dc], ax
lea eax, [ebp - 0xd4]
push eax
call fcn.00444aa2
mov dword [ebp - 0xfc], 0x40bffc
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xd4]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4bdc4b
lea eax, [ebp - 0xa4]
push eax
call fcn.00404640
cmp byte [ebp - 0x10c], al
jne 0x4bd396
mov dword [ebp - 0xfc], 0x40e0fc
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x4bdd42
mov word [0x5210dc], ax
jmp 0x4bdc4b
mov ax, word [0x5210dc]
add ax, 1
jo 0x4bdd42
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0x10
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0xfc], ax
mov dword [ebp - 0x104], 0xb
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00404808
push eax
call fcn.00404640
xor ecx, ecx
cmp byte [ebp - 0x10c], al
sete cl
neg ecx
mov word [ebp - 0x108], cx
lea ecx, [ebp - 0x104]
call fcn.00404844
movsx eax, word [ebp - 0x108]
test eax, eax
je 0x4bd4de
mov dword [ebp - 0xfc], 0x4108d4
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 2
jo 0x4bdd42
mov word [0x5210dc], ax
lea eax, [ebp - 0xd4]
push eax
call fcn.00444aa2
mov dword [ebp - 0xfc], 0x40bffc
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xd4]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4bdc4b
mov ax, word [0x5210dc]
add ax, 1
jo 0x4bdd42
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0x10
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0xfc], ax
mov dword [ebp - 0x104], 0xb
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00404808
push eax
call fcn.00404640
xor ecx, ecx
cmp byte [ebp - 0x10c], al
sete cl
neg ecx
mov word [ebp - 0x108], cx
lea ecx, [ebp - 0x104]
call fcn.00404844
movsx eax, word [ebp - 0x108]
test eax, eax
je 0x4bd626
mov dword [ebp - 0xfc], 0x4108e0
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 2
jo 0x4bdd42
mov word [0x5210dc], ax
lea eax, [ebp - 0xd4]
push eax
call fcn.00444aa2
mov dword [ebp - 0xfc], 0x40bffc
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xd4]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4bdc4b
mov ax, word [0x5210dc]
add ax, 1
jo 0x4bdd42
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0x10
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0xfc], ax
mov dword [ebp - 0x104], 0xb
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00404808
push eax
call fcn.00404640
xor ecx, ecx
cmp byte [ebp - 0x10c], al
sete cl
neg ecx
mov word [ebp - 0x108], cx
lea ecx, [ebp - 0x104]
call fcn.00404844
movsx eax, word [ebp - 0x108]
test eax, eax
je 0x4bd812
mov dword [ebp - 0xfc], 0x4108ec
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 2
jo 0x4bdd42
mov word [0x5210dc], ax
lea eax, [ebp - 0xd4]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
lea ecx, [ebp - 0xd4]
call fcn.00404844
movsx eax, word [0x5210dc]
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
cmp ax, 7
jne 0x4bd7d8
mov ax, word [0x5210dc]
add ax, 1
jo 0x4bdd42
mov word [0x5210dc], ax
mov dword [ebp - 0xfc], 0x40bf4c
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0xe4]
push eax
call fcn.00444aa2
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xd4]
push eax
push 2
call fcn.00404898
add esp, 0xc
mov dword [ebp - 0xfc], 0x40bffc
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
jmp 0x4bdc4b
mov ax, word [0x5210dc]
add ax, 1
jo 0x4bdd42
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0x10
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0xfc], ax
mov dword [ebp - 0x104], 0xb
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00404808
push eax
call fcn.00404640
xor ecx, ecx
cmp byte [ebp - 0x10c], al
sete cl
neg ecx
mov word [ebp - 0x108], cx
lea ecx, [ebp - 0x104]
call fcn.00404844
movsx eax, word [ebp - 0x108]
test eax, eax
je 0x4bd95d
mov dword [ebp - 0xfc], 0x4108f8
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 2
jo 0x4bdd42
mov word [0x5210dc], ax
lea eax, [ebp - 0xd4]
push eax
call fcn.00444aa2
mov dword [ebp - 0xfc], 0x40bffc
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xd4]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4bdc4b
mov ax, word [0x5210dc]
add ax, 1
jo 0x4bdd42
movsx eax, ax
push eax
push dword [0x5210d8]
call fcn.00404832
movzx ax, byte [eax]
sub ax, 0x10
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0xfc], ax
mov dword [ebp - 0x104], 0xb
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.00404808
push eax
call fcn.00404640
xor ecx, ecx
cmp byte [ebp - 0x10c], al
sete cl
neg ecx
mov word [ebp - 0x108], cx
lea ecx, [ebp - 0x104]
call fcn.00404844
movsx eax, word [ebp - 0x108]
test eax, eax
je 0x4bdaa8
mov dword [ebp - 0xfc], 0x410904
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 2
jo 0x4bdd42
mov word [0x5210dc], ax
lea eax, [ebp - 0xd4]
push eax
call fcn.00444aa2
mov dword [ebp - 0xfc], 0x40bffc
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xd4]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4bdc4b
lea eax, [ebp - 0x34]
push eax
call fcn.00404640
cmp byte [ebp - 0x10c], al
jne 0x4bdb7a
mov dword [ebp - 0xfc], 0x40bbd0
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x4bdd42
mov word [0x5210dc], ax
lea eax, [ebp - 0xd4]
push eax
call fcn.00444aa2
mov dword [ebp - 0xfc], 0x40bffc
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xd4]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4bdc4b
mov cx, 0x10
call fcn.004046b8
cmp byte [ebp - 0x10c], al
jne 0x4bdc49
mov dword [ebp - 0xfc], 0x410910
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
mov ax, word [0x5210dc]
add ax, 1
jo 0x4bdd42
mov word [0x5210dc], ax
lea eax, [ebp - 0xd4]
push eax
call fcn.00444aa2
mov dword [ebp - 0xfc], 0x40bffc
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.004047d2
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x24]
call fcn.004048d4
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xd4]
push eax
push 2
call fcn.00404898
add esp, 0xc
jmp 0x4bdc4b
jmp 0x4bdc50
jmp 0x4bd14f
mov dword [ebp - 0xfc], 0x40bffc
mov dword [ebp - 0x104], 8
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.004047d2
mov edx, eax
lea ecx, [ebp - 0x84]
call fcn.004048d4
push 0x4bdd21
jmp 0x4bdcc4
lea ecx, [ebp - 0x24]
call fcn.00404844
lea ecx, [ebp - 0x34]
call fcn.00404844
lea ecx, [ebp - 0x44]
call fcn.00404844
lea ecx, [ebp - 0x54]
call fcn.00404844
lea ecx, [ebp - 0x64]
call fcn.00404844
lea ecx, [ebp - 0x74]
call fcn.00404844
lea ecx, [ebp - 0x94]
call fcn.00404844
lea ecx, [ebp - 0xa4]
call fcn.00404844
lea ecx, [ebp - 0xb4]
call fcn.00404844
lea ecx, [ebp - 0xc4]
call fcn.00404844
ret
call fcn.0040477e