Function at 0x41d6f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x160
mov al, byte [ebp + 0xc]
mov edx, dword [ebp + 8]
and al, 1
mov byte [esp + 0x15b], al
mov dword [esp + 0x154], edx
mov dword [esp + 0x150], ecx
mov edx, dword [0x498c54]
imul edx, edx, 0x8337bbdc
mov si, dx
mov word [0x491246], si
mov dword [esp + 0x14c], 0
mov edx, dword [0x495e38]
mov edi, edx
dec edi
mov dword [0x495e38], edi
xor edx, 0x98da5e71
cmp edx, 0x1a756488
mov dword [esp + 0xb0], ecx
jg 0x41d774
mov eax, dword [0x496028]
and eax, 0x2b2607bd
mov dword [0x496028], eax
mov eax, esp
mov dword [eax], 0
call fcn.00450da0
mov dword [esp + 0x144], edx
mov dword [esp + 0x140], eax
mov eax, dword [0x494894]
and eax, 0x8f85b257
mov dword [0x494894], eax
mov byte [esp + 0x13f], 0
mov eax, dword [0x49989c]
add eax, 0xeb333b8e
mov dword [0x49989c], eax
mov eax, dword [0x48efa4]
mov edx, esp
mov ecx, dword [esp + 0xb0]
mov dword [edx], ecx
call eax
sub esp, 4
mov eax, dword [0x4946b4]
mov ecx, dword [0x495110]
mov edx, ecx
dec edx
mov dword [0x495110], edx
add eax, ecx
xor eax, 0xe18bbe47
mov ecx, dword [0x49c240]
mov edx, ecx
inc edx
mov dword [0x49c240], edx
add ecx, 0x10ddc512
cmp eax, ecx
jle 0x41d835
mov eax, 0x5063af9f
mov ecx, dword [0x497cd0]
or ecx, 0xf57ce024
or ecx, 0xe3da2599
cmp eax, ecx
jl 0x41d830
mov eax, dword [0x499db0]
and eax, 0x82004
mov dword [0x499db0], eax
jmp 0x41d835
test byte [esp + 0x15b], 1
je 0x41d91a
mov eax, 0x8f95de7f
mov cx, word [0x48f44a]
mov dx, cx
inc edx
mov cx, dx
mov word [0x48f44a], cx
movsx edx, cx
add edx, 0x7769c65c
cmp eax, edx
jne 0x41d87a
mov ax, word [0x4930f2]
mov word [0x491202], ax
mov eax, dword [esp + 0xb0]
add eax, 0x18
mov ecx, dword [esp + 0xb0]
mov edx, dword [ecx + 0x18]
mov esi, dword [ecx + 0x1c]
mov dword [esp + 0xac], eax
mov dword [esp + 0xa8], edx
mov dword [esp + 0xa4], esi
jmp 0x41d8ab
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
xor edx, edx
mov dword [esp + 0xa0], eax
mov eax, ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 0x9c], edx
mov edx, ecx
mov ebx, dword [esp + 0x9c]
mov ecx, dword [esp + 0x9c]
mov esi, dword [esp + 0xac]
lock cmpxchg8b qword [esi]
mov dword [esp + 0xa8], eax
mov dword [esp + 0xa4], edx
jne 0x41d8ab
jmp 0x41d906
mov eax, dword [0x49c438]
mov ecx, dword [0x494c94]
imul ecx, eax
mov dword [0x494c94], ecx
mov eax, dword [0x4979d0]
mov ecx, eax
inc ecx
mov dword [0x4979d0], ecx
mov ecx, dword [0x49c534]
not ecx
add ecx, 0x5071820
or eax, ecx
mov dword [0x4980f8], eax
xor eax, eax
mov dword [esp + 0x98], eax
mov edx, dword [esp + 0x98]
mov ebx, dword [esp + 0x98]
mov ecx, dword [esp + 0x98]
mov esi, dword [esp + 0xb0]
lock cmpxchg8b qword [esi + 0x18]
mov ecx, dword [esp + 0x140]
mov ebx, dword [esp + 0x144]
sub ecx, eax
sbb ebx, edx
mov dword [esp + 0x94], ecx
mov dword [esp + 0x90], ebx
jae 0x41daf1
jmp 0x41d992
mov eax, 0x2550d
mov ecx, dword [0x4957d4]
mov edx, ecx
inc edx
mov dword [0x4957d4], edx
mov edx, dword [0x49b4e4]
shl edx, 7
sub ecx, edx
and ecx, 0xfd582e15
mov edx, dword [0x494064]
or edx, ecx
mov dword [0x494064], edx
mov ecx, dword [esp + 0x154]
mov edx, dword [esp + 0xb0]
mov esi, dword [edx + 0x2c]
mov dword [ecx + 0xc], esi
mov esi, dword [edx + 0x28]
mov dword [ecx + 8], esi
mov esi, dword [edx + 0x20]
mov edi, dword [edx + 0x24]
mov dword [ecx + 4], edi
mov dword [ecx], esi
mov ecx, dword [0x49ad14]
shl ecx, 1
cmp eax, ecx
jg 0x41da24
mov eax, dword [0x498764]
add eax, 0x32c471d5
mov ecx, dword [0x495d4c]
mov edx, ecx
inc edx
mov dword [0x495d4c], edx
and eax, ecx
mov ecx, dword [0x498b80]
or ecx, eax
mov dword [0x498b80], ecx
mov eax, 0xc40bbe70
mov dword [esp + 0x14c], 1
mov cx, word [0x491198]
mov dx, cx
dec edx
mov cx, dx
mov word [0x491198], cx
movsx edx, cx
cmp eax, edx
jl 0x41da81
mov eax, 0x84ed2911
mov ecx, dword [0x49b974]
add ecx, 0x99aca7e8
cmp eax, ecx
jle 0x41da7c
mov eax, dword [0x4960d4]
xor eax, 0x43c3a5ce
mov dword [0x4960d4], eax
jmp 0x41daec
mov ax, word [0x490466]
mov cx, ax
dec ecx
mov ax, cx
mov word [0x490466], ax
movsx ecx, ax
or ecx, 0xf71b3110
cmp ecx, 0xb93873c4
jle 0x41dac6
mov eax, dword [0x493b44]
xor eax, 0xdbe83d5a
mov ecx, dword [0x494c30]
or ecx, eax
mov dword [0x494c30], ecx
jmp 0x41dae7
mov eax, dword [0x49ad3c]
mov ecx, eax
inc ecx
mov dword [0x49ad3c], ecx
xor eax, 0xac4c4bc0
mov ecx, dword [0x4986d4]
add ecx, eax
mov dword [0x4986d4], ecx
jmp 0x41daec
jmp 0x41db17
mov eax, dword [0x4959f4]
xor eax, 0xd0952f26
mov dword [0x4959f4], eax
mov byte [esp + 0x13f], 1
mov eax, dword [0x4970ac]
add eax, 0x2c766dce
mov dword [0x4970ac], eax
mov ax, word [0x49282c]
movsx ecx, ax
xor ecx, 0xa1bcfc2c
cmp ecx, 0xb7b7ffaf
jne 0x41db4a
mov eax, dword [0x4976c0]
mov ecx, eax
dec ecx
mov dword [0x4976c0], ecx
add eax, 0xcde63a92
mov dword [0x49bc58], eax
mov eax, 0x3eba83f
mov ecx, dword [0x48efa8]
mov edx, esp
mov esi, dword [esp + 0xb0]
mov dword [edx], esi
mov dword [esp + 0x8c], eax
call ecx
sub esp, 4
mov eax, dword [0x495c20]
inc eax
mov dword [0x495c20], eax
mov ecx, dword [esp + 0x8c]
cmp ecx, eax
jl 0x41dbc8
mov eax, dword [0x49be94]
sar eax, 2
xor eax, 0x83f70c20
cmp eax, 0x1d4f604b
jne 0x41dbc3
mov eax, dword [0x498970]
mov ecx, eax
inc ecx
mov dword [0x498970], ecx
add eax, 0x529dcb47
mov ecx, dword [0x49567c]
xor eax, ecx
xor eax, 0xb81d8465
mov dword [0x49567c], eax
jmp 0x41dbc8
test byte [esp + 0x13f], 1
je 0x41ecec
mov eax, 0xbf805617
mov ecx, dword [0x49bd48]
or ecx, 0xa0021c46
mov dword [0x49bd48], ecx
mov dword [esp + 0x134], 0
mov dword [esp + 0x130], 0
mov ecx, dword [0x495094]
add ecx, 0x1f3eeb7c
mov dword [0x495094], ecx
mov dword [esp + 0x12c], 0
mov ecx, dword [0x49c43c]
mov edx, 0x8b80ca35
sub edx, ecx
mov si, word [0x4936f0]
mov cx, si
lea ecx, [edx + ecx + 0x6d6279a3]
mov si, cx
mov word [0x4936f0], si
mov ecx, esp
mov dword [ecx + 4], 0x600
mov dword [ecx], 0x859
mov dword [esp + 0x88], eax
call fcn.0042c7c0
mov dword [esp + 0x128], eax
mov eax, dword [0x49c394]
imul eax, eax, 0x547c9783
mov ecx, dword [esp + 0x88]
cmp ecx, eax
jle 0x41dcaf
mov eax, dword [0x4996a8]
mov ecx, dword [0x49bf10]
mov edx, ecx
dec edx
mov dword [0x49bf10], edx
mov edx, 0x2f5bc57d
sub edx, ecx
and eax, edx
mov ecx, dword [0x499620]
sub ecx, eax
mov dword [0x499620], ecx
mov eax, 0x6d830d8b
mov ecx, dword [esp + 0x128]
mov dl, byte [ecx]
mov byte [esp + 0x127], dl
mov ecx, dword [0x4965e8]
and ecx, 0xd1458010
mov dword [0x4965e8], ecx
mov ecx, dword [0x498cfc]
or ecx, 0x340c56f8
mov dword [0x498cfc], ecx
xorps xmm0, xmm0
movaps xmmword [esp + 0x110], xmm0
mov si, word [0x492a18]
movsx ecx, si
cmp eax, ecx
jle 0x41dd26
mov eax, dword [0x495470]
dec eax
mov dword [0x495470], eax
mov cx, word [0x492782]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x492782], cx
mov eax, 0x77fafede
mov word [esp + 0x110], 2
mov cx, word [0x492bd8]
movsx edx, cx
add edx, 0xf4ab464c
cmp eax, edx
jle 0x41dd5c
mov eax, dword [0x499be0]
or eax, 0x9da4e39a
mov dword [0x499be0], eax
mov eax, dword [0x499ecc]
and eax, 0x51c7d189
mov dword [0x499ecc], eax
mov dword [esp + 0xfd], 0x13
mov cx, word [0x48fb5e]
mov ax, cx
dec eax
mov dx, ax
mov word [0x48fb5e], dx
movsx eax, cx
mov esi, dword [0x49b570]
shl esi, 6
add eax, esi
mov esi, dword [0x499b8c]
imul esi, eax
mov dword [0x499b8c], esi
mov dword [esp + 0x101], 0
mov dword [0x49a9c4], 0x481a3c0e
mov dword [esp + 0x105], 7
mov cx, word [0x48f026]
movsx eax, cx
imul eax, eax, 0x48365ee0
mov esi, dword [0x49b85c]
shl esi, 8
or esi, 0xce0e870c
cmp eax, esi
jg 0x41de2c
mov eax, 0xd078165
mov cx, word [0x4903d4]
movsx edx, cx
shl edx, 4
add edx, 0xfef4c3c4
cmp eax, edx
jg 0x41de27
mov eax, dword [0x49c51c]
add eax, 0x6d97ba24
mov ecx, dword [0x499300]
sub ecx, eax
mov dword [0x499300], ecx
jmp 0x41de3b
mov eax, dword [0x495ae0]
or eax, 0xf6cdca26
mov dword [0x495ae0], eax
mov byte [esp + 0x109], 3
mov eax, dword [0x4992a0]
mov cx, word [0x492afa]
mov dx, cx
dec edx
mov si, dx
mov word [0x492afa], si
movsx edx, cx
or eax, edx
mov edx, dword [0x499edc]
add edx, eax
mov dword [0x499edc], edx
lea eax, [esp + 0xe8]
mov ecx, eax
mov dword [esp + 0x84], eax
call fcn.00426e80
mov ecx, dword [0x49a870]
imul ecx, ecx, 0xb9317300
mov dword [0x49a870], ecx
movzx ecx, byte [esp + 0x127]
mov edx, esp
mov dword [edx], ecx
mov dword [edx + 4], 0
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x80], eax
call fcn.00450790
sub esp, 8
mov si, word [0x48f648]
movsx eax, si
mov ecx, dword [0x495bcc]
imul eax, ecx
imul eax, eax, 0x5b8223cd
mov dword [0x495bcc], eax
mov dword [esp + 0xe4], 0
mov eax, dword [esp + 0xe4]
movzx ecx, byte [esp + 0x127]
cmp eax, ecx
je 0x41df60
mov ax, word [0x49234c]
mov cx, ax
imul ecx, ecx, 0x9c8c66c3
mov ax, cx
mov word [0x49234c], ax
mov ecx, esp
lea edx, [esp + 0xe4]
mov dword [ecx], edx
lea ecx, [esp + 0xe8]
call fcn.0043cf90
sub esp, 4
mov ax, word [0x48f694]
mov cx, ax
add ecx, 0x1e924340
mov ax, cx
mov word [0x48f694], ax
mov eax, dword [esp + 0xe4]
add eax, 1
mov dword [esp + 0xe4], eax
jmp 0x41dee9
mov eax, 0x6310f827
mov ecx, dword [0x49b148]
mov edx, dword [0x49c3d8]
imul edx, edx, 0x38aabd4c
xor ecx, edx
cmp eax, ecx
jl 0x41dfb0
mov ax, word [0x49073e]
mov cx, ax
mov edx, ecx
inc edx
mov ax, dx
mov word [0x49073e], ax
and ecx, 0x8504
mov ax, word [0x491286]
mov dx, ax
xor edx, ecx
mov ax, dx
mov word [0x491286], ax
mov eax, 0xcc83fd9a
mov ecx, esp
lea edx, [esp + 0xe8]
mov dword [ecx], edx
mov dword [esp + 0x7c], eax
call fcn.00449150
mov eax, dword [0x49b058]
shl eax, 9
and eax, 0x5ca8d1cd
mov ecx, dword [esp + 0x7c]
cmp ecx, eax
jl 0x41e012
mov eax, dword [0x49a404]
mov ecx, dword [0x49a610]
shl ecx, 9
or ecx, 0x66c32f6c
cmp eax, ecx
jne 0x41e00d
mov eax, dword [0x498a3c]
and eax, 0xefffcf1f
mov dword [0x498a3c], eax
jmp 0x41e012
mov dword [esp + 0xe0], 0
mov eax, dword [esp + 0xe0]
movzx ecx, byte [esp + 0x127]
cmp eax, ecx
je 0x41ea17
mov eax, dword [0x49c360]
and eax, 0xcb97006c
mov dword [0x49c360], eax
mov eax, dword [esp + 0xe0]
mov ecx, esp
mov dword [ecx], eax
lea eax, [esp + 0xe8]
mov ecx, eax
mov dword [esp + 0x78], eax
call fcn.0040dcf0
sub esp, 4
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov ecx, dword [esp + 0x128]
mov eax, dword [ecx + eax*2 + 1]
mov dword [esp + 0x114], eax
mov eax, dword [0x493ad0]
add eax, 0xbdefd400
mov dword [0x493ad0], eax
mov eax, dword [esp + 0xe0]
mov ecx, esp
mov dword [ecx], eax
mov ecx, dword [esp + 0x78]
call fcn.0040dcf0
sub esp, 4
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov ecx, dword [esp + 0x128]
mov dx, word [ecx + eax*2 + 5]
mov word [esp + 0x112], dx
mov dx, word [0x48fb0a]
movsx eax, dx
shl eax, 8
or eax, 0xbdb5e352
mov ecx, dword [0x49c280]
and ecx, eax
mov dword [0x49c280], ecx
lea eax, [esp + 0xcc]
mov ecx, eax
mov dword [esp + 0x74], eax
call fcn.00441d70
mov ecx, dword [0x49c70c]
and ecx, 0xffdfb85f
mov dword [0x49c70c], ecx
mov ecx, dword [esp + 0x114]
mov dword [esp + 0x10a], ecx
mov ecx, dword [0x496e88]
inc ecx
mov dword [0x496e88], ecx
imul ecx, ecx, 0xfecf5a0d
mov esi, dword [0x4990e4]
and esi, ecx
mov dword [0x4990e4], esi
mov dx, word [esp + 0x112]
mov word [esp + 0x10e], dx
mov dword [0x497288], 0x65553ad6
mov ecx, esp
lea esi, [esp + 0xfd]
mov dword [ecx], esi
mov dword [ecx + 4], 0x13
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x70], eax
call fcn.0041be00
sub esp, 8
mov ecx, dword [0x4943cc]
imul ecx, ecx, 0xa09cca69
mov dword [0x4943cc], ecx
mov ecx, esp
lea esi, [esp + 0xcc]
mov dword [ecx + 4], esi
lea esi, [esp + 0x110]
mov dword [ecx], esi
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], 2
mov ecx, dword [esp + 0xb0]
mov dword [esp + 0x6c], eax
call fcn.0044a170
sub esp, 0x10
cmp eax, 0
jg 0x41e24d
mov eax, 0xa44f1992
mov ecx, dword [0x495610]
cmp eax, ecx
jle 0x41e23d
mov eax, 0x9b95ccc6
mov ecx, dword [0x49c078]
dec ecx
mov dword [0x49c078], ecx
xor ecx, 0xea97e74b
cmp eax, ecx
jl 0x41e209
mov eax, dword [0x495a18]
add eax, 0xe9c708b5
mov ecx, dword [0x493acc]
xor ecx, eax
mov dword [0x493acc], ecx
jmp 0x41e238
mov eax, 0xed03c651
mov cx, word [0x4920e0]
mov dx, cx
inc edx
mov cx, dx
mov word [0x4920e0], cx
movsx edx, cx
cmp eax, edx
jle 0x41e233
jmp 0x41e233
jmp 0x41e238
jmp 0x41e23d
mov dword [esp + 0xc8], 7
jmp 0x41e9c0
lea eax, [esp + 0xcc]
mov ecx, dword [0x496c9c]
xor ecx, 0x423300da
mov dword [0x496c9c], ecx
mov ecx, eax
call fcn.0040ef30
cmp eax, 0x400
ja 0x41e297
mov eax, dword [0x49a964]
add eax, 0x4ab05588
mov dword [0x49a964], eax
mov dword [esp + 0xc8], 7
jmp 0x41e9c0
lea eax, [esp + 0xcc]
mov ecx, dword [0x4952e4]
add ecx, 0xc41a221d
mov dword [0x4952e4], ecx
mov ecx, eax
call fcn.0040ef30
cmp eax, 0x4000
jbe 0x41e2f3
mov eax, dword [0x498364]
mov ecx, eax
dec ecx
mov dword [0x498364], ecx
add eax, 0x40b2f028
mov ecx, dword [0x498048]
or ecx, eax
mov dword [0x498048], ecx
mov dword [esp + 0xc8], 7
jmp 0x41e9c0
mov eax, dword [0x49a2c0]
dec eax
mov dword [0x49a2c0], eax
mov ecx, dword [0x498928]
xor eax, ecx
mov ecx, dword [0x49af0c]
xor ecx, eax
mov dword [0x49af0c], ecx
lea ecx, [esp + 0xcc]
call fcn.00443800
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x140]
mov esi, dword [esp + 0x144]
sub ecx, edx
sbb eax, esi
mov dword [esp + 0x68], eax
mov dword [esp + 0x64], ecx
jae 0x41e412
jmp 0x41e34a
mov eax, dword [0x49af44]
mov ecx, eax
inc ecx
mov dword [0x49af44], ecx
mov ecx, dword [0x49b3d4]
imul ecx, eax
mov dword [0x49b3d4], ecx
mov eax, dword [esp + 0x12c]
inc eax
mov dword [esp + 0x12c], eax
mov eax, dword [0x499450]
mov ecx, dword [0x495dd4]
or eax, ecx
or eax, 0x90f4b205
mov dword [0x495dd4], eax
cmp dword [esp + 0x12c], 3
jne 0x41e3c3
mov ax, word [0x4926ba]
mov cx, ax
and ecx, 0x914e
mov ax, cx
mov word [0x4926ba], ax
mov dword [esp + 0xc8], 5
jmp 0x41e9c0
mov eax, 0xcaaca755
mov ecx, dword [0x494c80]
shl ecx, 4
sub eax, ecx
cmp eax, 0xaeb5124c
jl 0x41e402
mov eax, dword [0x496798]
mov ecx, eax
inc ecx
mov dword [0x496798], ecx
mov ecx, dword [0x49923c]
or eax, ecx
mov ecx, dword [0x49b6b0]
sub ecx, eax
mov dword [0x49b6b0], ecx
mov dword [esp + 0xc8], 7
jmp 0x41e9c0
lea eax, [esp + 0xcc]
mov ecx, dword [0x494090]
mov edx, 0x28832f12
sub edx, ecx
mov si, word [0x49091e]
mov cx, si
sub ecx, edx
mov si, cx
mov word [0x49091e], si
mov dword [esp + 0x12c], 0
mov ecx, dword [0x497868]
and ecx, 0xca75de4c
mov dword [0x497868], ecx
lea ecx, [esp + 0xcc]
mov dword [esp + 0x60], eax
call fcn.00443800
movzx eax, word [eax + 8]
mov dword [esp + 0xc4], eax
mov si, word [0x491aea]
mov ax, si
dec eax
mov si, ax
mov word [0x491aea], si
movsx eax, si
add eax, 0x3089e129
mov ecx, dword [0x498e54]
xor ecx, eax
mov dword [0x498e54], ecx
imul eax, dword [esp + 0xc4], 6
mov ecx, dword [esp + 0x60]
mov dword [esp + 0x5c], eax
call fcn.0040ef30
sub eax, 0x400
sub eax, 0xa
mov ecx, dword [esp + 0x5c]
cmp ecx, eax
jbe 0x41e52b
mov eax, 0xb462901
mov cx, word [0x492534]
movsx edx, cx
cmp eax, edx
jge 0x41e51b
mov eax, 0x55628b1
mov ecx, dword [0x4978a4]
mov edx, dword [0x497df0]
dec edx
mov dword [0x497df0], edx
sub edx, 0x58cab536
xor ecx, edx
cmp eax, ecx
jne 0x41e516
mov eax, dword [0x49af54]
or eax, 0x1b3addf3
mov dword [0x49af54], eax
jmp 0x41e51b
mov dword [esp + 0xc8], 7
jmp 0x41e9c0
mov dword [0x49a410], 0x8236036c
mov byte [esp + 0xc3], 0
mov eax, dword [0x495d3c]
inc eax
mov dword [0x495d3c], eax
mov cx, word [0x491dc8]
movsx edx, cx
xor edx, 0xd03fefbf
or eax, edx
mov dword [0x49a5ec], eax
mov dword [esp + 0xbc], 0
mov eax, dword [esp + 0xbc]
cmp eax, dword [esp + 0xc4]
je 0x41e6e7
lea eax, [esp + 0xcc]
mov cx, word [0x48fc80]
mov dx, cx
xor edx, 0x15f5
mov cx, dx
mov word [0x48fc80], cx
mov edx, dword [esp + 0x114]
imul esi, dword [esp + 0xbc], 6
add esi, 0xa
mov ecx, eax
mov dword [esp + 0x58], esi
mov dword [esp + 0x54], edx
call fcn.00443800
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x58]
cmp ecx, dword [eax + edx]
jne 0x41e676
lea eax, [esp + 0xcc]
mov dword [0x494a70], 0x9fe6a63e
movzx ecx, word [esp + 0x112]
imul edx, dword [esp + 0xbc], 6
add edx, 0xa
mov dword [esp + 0x50], ecx
mov ecx, eax
mov dword [esp + 0x4c], edx
call fcn.00443800
mov ecx, dword [esp + 0x4c]
movzx eax, word [eax + ecx + 4]
mov edx, dword [esp + 0x50]
cmp edx, eax
jne 0x41e65a
mov eax, dword [0x49bcd0]
imul eax, eax, 0xea7e3efc
mov dword [0x49bcd0], eax
mov byte [esp + 0xc3], 1
mov eax, dword [0x498ee8]
mov ecx, dword [0x49bdb8]
mov edx, ecx
inc edx
mov dword [0x49bdb8], edx
xor eax, ecx
mov ecx, dword [0x49a5ac]
xor ecx, eax
mov dword [0x49a5ac], ecx
jmp 0x41e6e7
mov eax, dword [0x493d1c]
shl eax, 9
and eax, 0x17559c00
mov ecx, dword [0x4970bc]
imul ecx, eax
mov dword [0x4970bc], ecx
mov eax, 0xeee9ffbf
mov ecx, dword [0x497c54]
xor ecx, 0xffffffff
cmp eax, ecx
je 0x41e6cc
mov ax, word [0x48f2d6]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x48f2d6], ax
movsx ecx, ax
cmp ecx, 0xd08080
jle 0x41e6c7
mov ax, word [0x49291e]
movsx ecx, ax
not ecx
mov edx, dword [0x49a11c]
add edx, ecx
mov dword [0x49a11c], edx
jmp 0x41e6cc
jmp 0x41e6d1
mov eax, dword [esp + 0xbc]
add eax, 1
mov dword [esp + 0xbc], eax
jmp 0x41e56a
mov eax, dword [0x493d34]
mov ecx, eax
inc ecx
mov dword [0x493d34], ecx
or eax, 0x48300800
mov ecx, dword [0x496bc0]
add ecx, eax
mov dword [0x496bc0], ecx
test byte [esp + 0xc3], 1
jne 0x41e754
mov eax, 0x4c585720
mov ecx, dword [0x496700]
xor ecx, 0xffffffff
cmp eax, ecx
jne 0x41e744
mov ax, word [0x4914b8]
mov cx, ax
and ecx, 0x3b6
mov ax, cx
mov word [0x4914b8], ax
mov dword [esp + 0xc8], 7
jmp 0x41e9c0
mov eax, 0x3a84b2c2
mov ecx, dword [0x49ae58]
mov edx, ecx
inc edx
mov dword [0x49ae58], edx
cmp eax, ecx
jge 0x41e791
mov eax, dword [0x49be28]
add eax, 0x86b2a40e
mov cx, word [0x490d06]
mov dx, cx
imul edx, eax
mov cx, dx
mov word [0x490d06], cx
mov eax, 0x39cc83ba
mov ecx, esp
mov dword [ecx + 4], 0x408
mov dword [ecx], 0x37cd
mov dword [esp + 0x48], eax
call fcn.0042c7c0
mov dword [esp + 0xb8], eax
mov word [0x48fdd6], 0x3270
lea eax, [esp + 0xcc]
mov ecx, eax
mov dword [esp + 0x44], eax
call fcn.0040ef30
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x40], eax
call fcn.00443800
mov ecx, dword [esp + 0xb8]
mov edx, esp
mov esi, dword [esp + 0x40]
mov dword [edx + 8], esi
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.0043fea0
mov dword [esp + 0xb4], eax
mov eax, dword [0x494098]
xor eax, 0x38ebd25e
mov dword [0x494098], eax
mov eax, dword [esp + 0xb8]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x408
call fcn.00450bc0
mov eax, dword [0x498054]
mov ecx, eax
dec ecx
mov dword [0x498054], ecx
mov ecx, dword [esp + 0x48]
cmp ecx, eax
jle 0x41e860
mov eax, dword [0x496a14]
mov ecx, dword [0x498bd0]
not ecx
sub eax, ecx
mov ecx, dword [0x4993f4]
add ecx, eax
mov dword [0x4993f4], ecx
jmp 0x41e86f
mov eax, dword [0x49496c]
or eax, 0x311b7dc3
mov dword [0x49496c], eax
cmp dword [esp + 0xb4], 4
jle 0x41e8a2
lea eax, [esp + 0xcc]
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x3c], ecx
mov ecx, eax
call fcn.0040ef30
mov ecx, dword [esp + 0x3c]
cmp ecx, eax
jbe 0x41e8d0
mov eax, dword [0x4961b8]
and eax, 0xe567ae9
mov dword [0x4961b8], eax
mov dword [esp + 0xb4], 0
mov eax, dword [0x497684]
add eax, 0x6f332410
mov dword [0x497684], eax
jmp 0x41e936
mov eax, dword [0x498bfc]
dec eax
mov dword [0x498bfc], eax
mov ecx, dword [0x4988d4]
xor ecx, 0xffffffff
cmp eax, ecx
jne 0x41e90d
mov eax, dword [0x49541c]
mov ecx, eax
inc ecx
mov dword [0x49541c], ecx
mov ecx, 0x43ced77d
sub ecx, eax
mov eax, dword [0x49c138]
sub eax, ecx
mov dword [0x49c138], eax
mov eax, dword [esp + 0xb4]
add eax, 0xfffffffc
mov dword [esp + 0xb4], eax
mov eax, dword [0x498408]
xor eax, 0x226695e1
mov ecx, dword [0x49517c]
or ecx, eax
mov dword [0x49517c], ecx
mov eax, dword [0x49a1e8]
or eax, 0x14e7620b
mov dword [0x49a1e8], eax
mov eax, dword [esp + 0xb4]
imul ecx, dword [esp + 0xc4], 6
add ecx, 0xa
cmp eax, ecx
jge 0x41e97e
mov eax, dword [0x498814]
add eax, 0xcb3b9220
mov dword [0x498814], eax
mov dword [esp + 0xc8], 7
jmp 0x41e9c0
mov eax, dword [0x49ac28]
add eax, 0x8101dcad
mov dword [0x49ac28], eax
lea ecx, [esp + 0xcc]
call fcn.00443800
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x134], eax
mov dword [esp + 0x130], ecx
mov word [0x4906da], 0x6408
mov dword [esp + 0xc8], 5
lea ecx, [esp + 0xcc]
call fcn.0041c510
mov ecx, dword [esp + 0xc8]
mov eax, ecx
sub eax, 5
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], eax
je 0x41ea17
jmp 0x41e9eb
mov eax, dword [esp + 0x38]
sub eax, 7
mov dword [esp + 0x30], eax
jne 0x41ed0c
jmp 0x41ea01
mov eax, dword [esp + 0xe0]
add eax, 1
mov dword [esp + 0xe0], eax
jmp 0x41e01d
mov eax, 0x1608f1db
mov ecx, dword [0x495bb8]
xor ecx, 0xffffffff
add ecx, 0x98a577f0
cmp eax, ecx
jl 0x41ea42
mov eax, dword [0x49aacc]
and eax, 0x43542469
mov dword [0x49aacc], eax
mov eax, esp
lea ecx, [esp + 0xfd]
mov dword [eax], ecx
mov dword [eax + 4], 0x13
call fcn.0040ee60
mov eax, dword [0x494940]
add eax, 0x9597d80c
mov dword [0x494940], eax
mov eax, dword [esp + 0x128]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x600
call fcn.00450bc0
mov eax, dword [0x494ed8]
or eax, 0x41fe0e03
mov dword [0x494ed8], eax
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
or eax, ecx
mov dword [esp + 0x2c], eax
je 0x41ecc8
jmp 0x41eaad
mov eax, 0x41e4caa1
mov ecx, dword [0x4988e8]
dec ecx
mov dword [0x4988e8], ecx
or ecx, 0x7cd3004e
cmp eax, ecx
jg 0x41eadc
mov eax, dword [0x4959d8]
add eax, 0x4cc8b064
mov dword [0x4959d8], eax
mov eax, 0x60840420
mov ecx, dword [0x48efa4]
mov edx, esp
mov esi, dword [esp + 0xb0]
mov dword [edx], esi
mov dword [esp + 0x28], eax
call ecx
sub esp, 4
mov eax, dword [0x49bd1c]
mov ecx, dword [esp + 0x28]
cmp ecx, eax
jne 0x41eb4d
mov eax, 0x89dfcee4
mov ecx, dword [0x49c750]
shl ecx, 3
mov edx, dword [0x495604]
mov esi, edx
dec esi
mov dword [0x495604], esi
add ecx, edx
and ecx, 0xf1d835f8
cmp eax, ecx
jle 0x41eb48
mov eax, dword [0x49c508]
add eax, 0xfc34c94b
mov dword [0x49c508], eax
jmp 0x41eb4d
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0xb0]
mov dword [ecx + 0x2c], eax
mov eax, dword [esp + 0x118]
mov dword [ecx + 0x28], eax
mov eax, dword [esp + 0x110]
mov edx, dword [esp + 0x114]
mov dword [ecx + 0x24], edx
mov dword [ecx + 0x20], eax
mov eax, dword [0x4946ac]
xor eax, 0xefffe5af
mov dword [0x4946ac], eax
mov ebx, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
mov eax, dword [esp + 0xb0]
add eax, 0x18
mov edx, dword [esp + 0xb0]
mov esi, dword [edx + 0x18]
mov edi, dword [edx + 0x1c]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], edi
jmp 0x41ebc9
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x10], eax
mov eax, ecx
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
lock cmpxchg8b qword [esi]
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], edx
jne 0x41ebc9
jmp 0x41ebfe
mov eax, dword [0x4990cc]
mov ecx, eax
inc ecx
mov dword [0x4990cc], ecx
add eax, 0x270d1607
or eax, 0xb107cc95
mov ecx, dword [0x499c70]
imul ecx, eax
mov dword [0x499c70], ecx
mov eax, dword [0x48efa8]
mov ecx, esp
mov edx, dword [esp + 0xb0]
mov dword [ecx], edx
call eax
sub esp, 4
mov eax, dword [0x496834]
cmp eax, 0x15fa5019
jl 0x41ec71
mov eax, dword [0x49aea4]
mov ecx, eax
inc ecx
mov dword [0x49aea4], ecx
mov ecx, 0xae62b7a3
sub ecx, eax
and ecx, 0x7e5446f8
mov eax, dword [0x4996c0]
xor eax, ecx
mov dword [0x4996c0], eax
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x11c]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x118]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x110]
mov edx, dword [esp + 0x114]
mov dword [eax + 4], edx
mov dword [eax], ecx
mov eax, dword [0x4971f4]
add eax, 0xd0d6ffce
mov dword [0x4971f4], eax
mov dword [esp + 0x14c], 1
mov eax, dword [0x499fe8]
and eax, 0xae2c7f15
mov dword [0x499fe8], eax
mov eax, dword [0x49bc9c]
mov ecx, 0x7f5dbf85
sub ecx, eax
mov eax, dword [0x4988f4]
add eax, ecx
mov dword [0x4988f4], eax
lea ecx, [esp + 0xe8]
call fcn.00443c00
mov eax, dword [0x4987d0]
and eax, 0x3c7a40f7
mov dword [0x4987d0], eax
mov eax, dword [esp + 0x14c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 8
int3