Function at 0x415bb1
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc0
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x1c]
mov esi, dword [eax + 8]
call dword [0x44c004]
mov dword [esp + 0x1c], eax
push 0x51259aa3
push 0x53df43fd
push esi
call fcn.00418f7c
mov dword [esp + 0x5c], eax
push 0xfda19a1c
push 0x192391a3
push esi
call fcn.00418f7c
mov dword [esp + 0x60], eax
push 0x295cb762
push 0x8218a946
push esi
call fcn.00418f7c
mov dword [esp + 0x64], eax
push 0xc5b1ad71
push 0x53cd3e2f
push esi
call fcn.00418f7c
mov dword [esp + 0x34], eax
xor edi, edi
lea eax, [esp + 0x30]
mov dword [eax], edi
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x98]
mov dword [edx - 4], ecx
mov dword [esp + 0x68], edx
mov ecx, dword [esp + 0x68]
mov dword [ecx], edi
lea ecx, [esp + 0xac]
mov dword [ecx - 4], 0x18
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0x6c]
mov dword [ecx + 4], edi
mov dword [ecx + 8], edi
mov dword [ecx + 0xc], edi
mov dword [ecx + 0x10], edi
mov dword [ecx], edi
mov ecx, dword [esp + 0x5c]
lea edx, [esp + 0x94]
lea ebp, [esp + 0xa8]
push edx
push ebp
push 0x40
push eax
call ecx
lea ebx, [esp + 0x90]
mov dword [ebx], edi
mov esi, 0x14
push esi
call fcn.0042c9f4
add esp, 4
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x60]
push ebx
push esi
push dword [esp + 0x40]
push 0x10
call eax
mov dword [esp + 0x70], eax
mov dword [esp], 0x857e0064
mov eax, dword [esp]
cmp eax, 0xf8d9ae78
jle 0x415d33
cmp eax, 0x28448c11
jle 0x415dab
cmp eax, 0x5588d25c
jle 0x415e4d
cmp eax, 0x71b1f50f
jg 0x415f78
cmp eax, 0x587d1600
jle 0x4161e8
cmp eax, 0x587d1601
je 0x41662b
cmp eax, 0x6c14d2f2
jne 0x416b24
mov eax, dword [esp + 8]
shr eax, 5
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x29b1
add eax, 0xfffffff3
dec edx
mov dword [esp + 8], eax
mov eax, 0xab2ddb72
cmp ecx, edx
je 0x415d29
mov eax, 0x57627383
mov dword [esp], eax
mov byte [esp + 0xe], 0
jmp 0x415cb5
cmp eax, 0xb630cc56
jg 0x415e11
cmp eax, 0x93c5e8bb
jg 0x415eb4
cmp eax, 0x8c4a6e65
jg 0x415fba
cmp eax, 0x86d556c9
jg 0x41622f
cmp eax, 0x84eea65e
je 0x416642
cmp eax, 0x857e0064
jne 0x415cb5
mov ecx, dword [esp + 0x70]
mov eax, 0x587d1601
cmp ecx, 0xc0000004
je 0x415d8b
mov eax, 0xdc5491cf
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x70]
mov dword [esp + 0x58], eax
mov dword [esp + 0x54], ecx
mov dword [esp + 0x50], edx
jmp 0x415cb5
cmp eax, 0x136a8e00
jg 0x415ef6
cmp eax, 0x53083fc
jg 0x416001
cmp eax, 0xfef68ca7
jg 0x41624a
cmp eax, 0xf8d9ae79
je 0x41665f
cmp eax, 0xf90b6448
jne 0x415cb5
push dword [esp + 0x2c]
call dword [0x44c038]
mov esi, eax
mov eax, dword [esp + 0x34]
push dword [esp + 0x2c]
call eax
mov eax, 0xc05bf087
cmp esi, dword [esp + 0x1c]
je 0x416b00
mov eax, 0x86d556ca
jmp 0x416b00
cmp eax, 0xdc5491ce
jg 0x415f39
cmp eax, 0xc57f29ec
jg 0x41602e
cmp eax, 0xc05bf086
jg 0x41627f
cmp eax, 0xb630cc57
je 0x416689
cmp eax, 0xb8a4baef
je 0x416324
jmp 0x415cb5
cmp eax, 0x392a6d79
jg 0x41607f
cmp eax, 0x2ef00709
jg 0x4162a1
cmp eax, 0x28448c12
je 0x4166ba
cmp eax, 0x2dffd83e
jne 0x415cb5
mov eax, dword [esp + 8]
mov ecx, 0xffffff26
add eax, ecx
shr eax, 0xd
mov ecx, eax
shl ecx, 5
imul eax, eax
imul edx, eax, 0x2711
or ecx, 0xc
dec edx
mov dword [esp + 8], ecx
mov ecx, 0xab2ddb72
cmp eax, edx
je 0x416a7b
mov ecx, 0xb0f87fad
jmp 0x416a7b
cmp eax, 0xa67f2871
jg 0x4160b4
cmp eax, 0x97e6e7bd
jg 0x416330
cmp eax, 0x93c5e8bc
je 0x4166e7
cmp eax, 0x94c585d6
jne 0x415cb5
mov eax, dword [esp + 0x34]
push dword [esp + 0x18]
call eax
mov dword [esp], 0x136a8e01
jmp 0x415cb5
cmp eax, 0x19cadf51
jg 0x41612d
cmp eax, 0x171aead3
jg 0x41635c
cmp eax, 0x136a8e01
je 0x4166fb
cmp eax, 0x13c31778
jne 0x415cb5
mov eax, dword [esp + 0x30]
mov dword [esp + 0x9c], eax
mov dword [esp], 0xdf060c3a
jmp 0x415cb5
cmp eax, 0xf27d9332
jg 0x416176
cmp eax, 0xdf060c39
jg 0x41638f
cmp eax, 0xdc5491cf
je 0x416737
cmp eax, 0xdda97781
jne 0x415cb5
imul eax, dword [esp + 4], 0x58
add eax, 0x3de0
mov dword [esp + 4], eax
jmp 0x416324
cmp eax, 0x79371edd
jg 0x4163d3
cmp eax, 0x71b1f510
je 0x416756
cmp eax, 0x721e143e
jne 0x415cb5
mov eax, dword [esp + 0x20]
inc eax
mov ecx, 0x6c14d2f2
cmp eax, dword [esp + 0x40]
je 0x415fae
mov ecx, 0x93c5e8bc
mov dword [esp], ecx
mov dword [esp + 0x4c], eax
jmp 0x415cb5
cmp eax, 0x9197402a
jg 0x416443
cmp eax, 0x8c4a6e66
je 0x416788
cmp eax, 0x912ac891
jne 0x415cb5
mov eax, dword [esp + 4]
shl eax, 4
lea ecx, [eax + eax*4]
mov dword [esp + 4], ecx
mov eax, 0x23099480
cmp ecx, 0x36
jl 0x416b00
mov eax, 0x4b2711a
jmp 0x416b00
cmp eax, 0x9c089ba
jg 0x416483
cmp eax, 0x53083fd
je 0x4167a5
cmp eax, 0x848d8b1
jne 0x415cb5
mov dword [esp], 0x721e143e
jmp 0x415cb5
cmp eax, 0xce2c225c
jg 0x4164d5
cmp eax, 0xc57f29ed
je 0x4167b6
cmp eax, 0xc7975371
jne 0x415cb5
mov eax, dword [esp + 8]
mov ecx, 0x94
add eax, ecx
shr eax, 0x13
mov dword [esp + 8], eax
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x2907
dec edx
mov eax, 0xfef68ca8
cmp edx, ecx
jne 0x4166b0
jmp 0x416b00
cmp eax, 0x4898ff41
jg 0x41650d
cmp eax, 0x392a6d7a
je 0x4167e5
cmp eax, 0x3b4f944f
jne 0x415cb5
mov eax, dword [esp + 4]
lea eax, [eax + eax*8]
shl eax, 0xd
add eax, 0x369000
jmp 0x41664f
cmp eax, 0xab2ddb71
jg 0x416551
cmp eax, 0xa67f2872
je 0x41681a
cmp eax, 0xa8f14786
jne 0x415cb5
mov dword [esp + 0x2c], edi
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x24]
shl edx, 4
add ecx, edx
add ecx, 0xa
mov dword [esp + 0x80], ecx
mov ecx, dword [esp + 0x80]
movzx edx, word [ecx]
mov ecx, dword [esp + 0x64]
push 2
push edi
push edi
lea esi, [esp + 0x38]
push esi
push eax
push edx
push dword [esp + 0x94]
call ecx
mov ecx, 0xf90b6448
test eax, eax
jns 0x416a7b
mov ecx, 0x5588d25d
jmp 0x416a7b
cmp eax, 0x2309947f
jg 0x416573
cmp eax, 0x19cadf52
je 0x416839
cmp eax, 0x1e83a1ff
jne 0x415cb5
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
shl ecx, 4
mov cl, byte [eax + ecx + 8]
mov eax, 0xc0ebe48c
cmp cl, byte [esp + 0x17]
je 0x416878
mov eax, 0x19cadf52
jmp 0x416878
cmp eax, 0xf619fe1b
jg 0x4165c3
cmp eax, 0xf27d9333
je 0x416850
cmp eax, 0xf465323e
jne 0x415cb5
mov ecx, dword [esp + 8]
mov eax, ecx
shr eax, 9
and eax, 0x1ffff
imul eax, eax
imul edx, eax, 0x5701
dec edx
shr ecx, 3
and ecx, 0x7fc000
add ecx, 0xffc4c000
mov dword [esp + 8], ecx
mov ecx, 0x97e6e7be
cmp edx, eax
je 0x4161d0
mov ecx, 0xdc5491cf
mov dword [esp], ecx
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], ecx
jmp 0x415cb5
cmp eax, 0x5588d25d
je 0x41688b
cmp eax, 0x57627383
jne 0x415cb5
mov al, byte [esp + 0xe]
mov byte [esp + 0x17], al
cmp byte [esp + 0xf], 0
mov eax, 0x5a04a723
jne 0x416217
mov eax, 0xa67f2872
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x48], eax
mov dword [esp + 0x44], 0
jmp 0x415cb5
cmp eax, 0x86d556ca
je 0x4168bf
cmp eax, 0x88103d07
je 0x416318
jmp 0x415cb5
cmp eax, 0xfef68ca8
je 0x4168d7
cmp eax, 0x4b2711a
jne 0x415cb5
imul eax, dword [esp + 4], 0x68
mov dword [esp + 4], eax
call fcn.004157bf
call fcn.004156f0
mov dword [esp], 0x23099480
jmp 0x415cb5
cmp eax, 0xc05bf087
je 0x416912
cmp eax, 0xc0ebe48c
jne 0x415cb5
mov dword [esp], 0x38123a3f
jmp 0x415cb5
cmp eax, 0x2ef0070a
je 0x416939
cmp eax, 0x38123a3f
jne 0x415cb5
mov dword [esp + 0x18], edi
mov dword [esp + 0xa8], 0x18
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x6c]
mov dword [ecx + 0x10], edi
mov dword [ecx + 0xc], edi
mov dword [ecx + 8], edi
mov dword [ecx + 4], edi
mov dword [ecx], edi
mov dword [esp + 0x94], eax
mov eax, dword [esp + 0x68]
mov dword [eax], edi
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x94]
push ecx
push ebp
push 0x40
lea ecx, [esp + 0x24]
push ecx
call eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x7c]
cmp eax, 0xffffffff
je 0x4165f8
test eax, eax
jne 0x416324
mov dword [esp], 0xa53e158d
jmp 0x415cb5
mov dword [esp], 0xa8f14786
jmp 0x415cb5
cmp eax, 0x97e6e7be
je 0x416972
cmp eax, 0xa53e158d
jne 0x415cb5
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [esp], 0x19cadf52
mov dword [esp + 0x28], eax
jmp 0x415cb5
cmp eax, 0x171aead4
je 0x416993
cmp eax, 0x17b1b3c9
jne 0x415cb5
imul eax, dword [esp + 8], 0x6b0
add eax, 0xffffff40
mov dword [esp + 8], eax
mov dword [esp], 0x13c31778
jmp 0x415cb5
cmp eax, 0xdf060c3a
je 0x4169bd
cmp eax, 0xf0bee04d
jne 0x415cb5
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
shl ecx, 4
movzx ecx, word [eax + ecx + 0xa]
mov edx, dword [esp + 0x9c]
mov eax, 0xf6abd145
cmp edx, ecx
je 0x416b00
mov eax, 0xf619fe1c
jmp 0x416b00
cmp eax, 0x79371ede
je 0x4169e4
cmp eax, 0x7b9c0616
jne 0x415cb5
mov esi, dword [esp + 0x90]
mov eax, 0x100
add esi, eax
push esi
push dword [esp + 0xa4]
call fcn.0042cd1e
add esp, 8
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x60]
push ebx
push esi
push dword [esp + 0x44]
push 0x10
call eax
mov dword [esp + 0x74], eax
mov ecx, dword [esp + 0x74]
mov eax, 0x587d1601
cmp ecx, 0xc0000004
je 0x416433
mov eax, 0xf465323e
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x58], eax
jmp 0x415cb5
cmp eax, 0x9197402b
je 0x416a0f
cmp eax, 0x9311db54
jne 0x415cb5
imul esi, dword [esp + 4], 0xda
add esi, 0x3d
mov dword [esp + 4], esi
call fcn.00418eba
mov eax, 0x79371ede
cmp esi, 0xdd
jne 0x4169b3
jmp 0x416b00
cmp eax, 0x9c089bb
je 0x416a4c
cmp eax, 0xb91453b
jne 0x415cb5
mov eax, dword [esp + 8]
shr eax, 4
add eax, 0x91
mov ecx, eax
shr ecx, 9
imul ecx, ecx
shr eax, 0x11
imul edx, ecx, 0x715d
dec edx
add eax, 0xa1
shr eax, 3
mov dword [esp + 8], eax
mov eax, 0x71b1f510
cmp ecx, edx
jne 0x4167db
jmp 0x416b00
cmp eax, 0xce2c225d
je 0x4165f8
cmp eax, 0xd49a8586
jne 0x415cb5
imul eax, dword [esp + 4], 0x15004
add eax, 0x4a2952
mov dword [esp + 4], eax
call fcn.00417d8a
mov dword [esp], 0x3b4f944f
jmp 0x415cb5
cmp eax, 0x4898ff42
je 0x416a83
cmp eax, 0x508e370a
jne 0x415cb5
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x40], eax
cmp dword [esp + 0x40], 0
sete byte [esp + 0xf]
cmp byte [esp + 0xf], 0
mov eax, 0x5a04a723
jne 0x416b00
mov eax, 0x17b1b3c9
jmp 0x416b00
cmp eax, 0xab2ddb72
je 0x416ac8
cmp eax, 0xb0f87fad
jne 0x415cb5
mov dword [esp], 0xf0bee04d
jmp 0x415cb5
cmp eax, 0x23099480
je 0x416aec
cmp eax, 0x23a3ba1c
jne 0x415cb5
mov eax, dword [esp + 8]
shr eax, 9
add eax, 0xffffffd4
mov ecx, eax
shr ecx, 0xc
imul eax, eax
imul edx, eax, 0x639
dec edx
add ecx, 0x51
shr ecx, 6
mov dword [esp + 8], ecx
mov ecx, 0x171aead4
cmp eax, edx
je 0x416a7b
mov ecx, 0x508e370a
jmp 0x416a7b
cmp eax, 0xf619fe1c
je 0x416b08
cmp eax, 0xf6abd145
jne 0x415cb5
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
shl ecx, 4
mov al, byte [eax + ecx + 8]
mov dword [esp], 0x57627383
mov byte [esp + 0xe], al
jmp 0x415cb5
imul eax, dword [esp + 8], 0xcb
lea ecx, [eax - 0x5a66]
imul ecx, ecx
imul edx, ecx, 0x5693
dec edx
add eax, 0xffffa5c8
mov dword [esp + 8], eax
mov eax, 0x38123a3f
cmp edx, ecx
jne 0x41672d
jmp 0x416b00
mov eax, dword [esp + 0x58]
mov dword [esp + 0xa0], eax
mov dword [esp], 0x7b9c0616
jmp 0x415cb5
imul eax, dword [esp + 4], 0x13660000
add eax, 0xffb40000
mov dword [esp + 4], eax
mov dword [esp], 0x23099480
jmp 0x415cb5
mov ecx, dword [esp + 4]
mov eax, 0xfffffec4
add ecx, eax
mov dword [esp + 4], ecx
mov eax, 0x2ef0070a
cmp ecx, 0xbf
jge 0x416b00
mov eax, 0xab2ddb72
jmp 0x416b00
mov esi, dword [esp + 4]
shl esi, 7
add esi, 0xffffaa49
mov dword [esp + 4], esi
call fcn.004157bf
mov eax, 0x9197402b
cmp esi, 0xde
jb 0x416b00
mov eax, 0x1e83a1ff
jmp 0x416b00
imul eax, dword [esp + 4], 0xa4
shr eax, 7
mov esi, 0x23099480
and eax, 0x1ffffc0
mov dword [esp + 4], eax
je 0x4166da
mov esi, 0xf27d9333
call fcn.004156f0
mov dword [esp], esi
jmp 0x415cb5
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x20], eax
mov dword [esp], 0xab2ddb72
jmp 0x415cb5
mov eax, dword [esp + 8]
imul ecx, eax, 0x7b
imul ecx, ecx
imul edx, ecx, 0x496b
dec edx
imul eax, eax, 0x3d80
add eax, 0xffec7e00
and eax, 0xffffe000
mov dword [esp + 8], eax
mov eax, 0xab2ddb72
cmp ecx, edx
je 0x416b00
mov eax, 0x88103d07
jmp 0x416b00
mov eax, dword [esp + 0x50]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x10], eax
mov dword [esp], 0x23099480
jmp 0x415cb5
mov ecx, dword [esp + 4]
shl ecx, 0xb
add ecx, 0xffff7000
shr ecx, 0xc
and ecx, 0xfffffffe
mov dword [esp + 4], ecx
mov eax, 0x23099480
cmp ecx, 0xc1
jb 0x416b00
mov eax, 0x84eea65e
jmp 0x416b00
imul eax, dword [esp + 4], 0xe000
add eax, 0xff66df92
mov dword [esp + 4], eax
mov dword [esp], 0x508e370a
jmp 0x415cb5
mov eax, dword [esp + 8]
shl eax, 0x19
add eax, 0xebd8e000
jmp 0x4168c7
mov eax, dword [esp + 0x24]
inc eax
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 0x84]
mov eax, 0x4898ff42
cmp ecx, dword [esp + 0x8c]
jb 0x416b00
mov eax, 0x5a04a723
jmp 0x416b00
mov esi, dword [esp + 4]
mov eax, 0xffffff4f
add esi, eax
shr esi, 0xd
add esi, 0xfffffd8a
mov dword [esp + 4], esi
call fcn.00415b23
mov eax, 0x23099480
cmp esi, 0x43
jb 0x416b00
mov eax, 0xd49a8586
jmp 0x416b00
mov eax, dword [esp + 0x44]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x88], eax
mov dword [esp], 0xf27d9333
jmp 0x415cb5
mov eax, dword [esp + 0x28]
mov dword [esp + 0x8c], eax
mov dword [esp], 0xc57f29ed
jmp 0x415cb5
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x24]
shl ecx, 4
movzx eax, word [eax + ecx + 4]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x1c]
mov eax, 0x19cadf52
cmp ecx, dword [esp + 0x78]
je 0x416878
mov eax, 0xc7975371
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 0x28], eax
jmp 0x415cb5
mov eax, dword [esp + 8]
lea ecx, [eax + 0x103]
imul ecx, ecx
add eax, 0xbc
imul edx, ecx, 0x41e7
dec edx
mov dword [esp + 8], eax
mov eax, 0x23099480
cmp ecx, edx
je 0x416b00
mov eax, 0x94c585d6
jmp 0x416b00
imul eax, dword [esp + 8], 0x3a0000
mov dword [esp + 8], eax
mov dword [esp], 0x94c585d6
jmp 0x415cb5
mov esi, dword [esp + 4]
shl esi, 0xb
add esi, 0xfffcb000
mov eax, esi
shr eax, 0xe
mov dword [esp + 4], eax
call fcn.00417b56
call fcn.00416b8e
mov eax, 0xf8d9ae79
cmp esi, 0x32c000
jb 0x416b00
mov eax, 0x13c31778
jmp 0x416b00
mov eax, dword [esp + 0x80]
movzx ecx, word [eax]
mov eax, dword [esp + 0x64]
push 1
push edi
push edi
push edi
push edi
push ecx
push dword [esp + 0x30]
call eax
mov dword [esp], 0x53083fd
jmp 0x415cb5
mov eax, dword [esp + 4]
shr eax, 8
imul esi, eax, 0xbe
add esi, 0x1b92
mov dword [esp + 4], esi
call fcn.00417dae
call fcn.00418d95
mov eax, 0x23099480
cmp esi, 0x18
jge 0x416b00
mov eax, 0x508e370a
jmp 0x416b00
mov eax, dword [esp + 4]
shl eax, 0x1f
add eax, 0xc3fe8000
mov dword [esp + 4], eax
call fcn.004157bf
mov dword [esp], 0x7b9c0616
jmp 0x415cb5
imul ecx, dword [esp + 4], 0x7b0
shr ecx, 7
mov dword [esp + 4], ecx
mov eax, 0x9311db54
cmp ecx, 0xa6
je 0x416b00
mov eax, 0x23099480
jmp 0x416b00
mov eax, dword [esp + 8]
shl eax, 0x12
and eax, 0x1ffc0000
or eax, 0x1e
mov dword [esp + 8], eax
mov dword [esp], 0x93c5e8bc
mov dword [esp + 0x4c], 0
jmp 0x415cb5
mov eax, dword [esp + 4]
mov ecx, eax
shl ecx, 6
lea eax, [ecx + eax*2]
add eax, 0xffffd912
mov dword [esp + 4], eax
call fcn.00416b50
call fcn.00417ce5
mov dword [esp], 0x23099480
jmp 0x415cb5
mov eax, dword [esp + 4]
shl eax, 4
add eax, 0xfffff970
and eax, 0xfffffe00
imul esi, eax, 0x45
mov eax, esi
shr eax, 2
mov dword [esp + 4], eax
call fcn.00417dae
mov eax, 0xf90b6448
cmp esi, 0x2e8
jb 0x416b00
mov eax, 0xdda97781
jmp 0x416b00
mov eax, dword [esp + 8]
shr eax, 7
imul ecx, eax, 0x11c
imul eax, eax
imul edx, eax, 0x87b5
dec edx
and ecx, 0xffffff80
add ecx, 0xffffffb2
mov dword [esp + 8], ecx
mov ecx, 0x912ac891
cmp edx, eax
je 0x416a7b
mov ecx, 0x848d8b1
mov dword [esp], ecx
jmp 0x415cb5
mov eax, dword [esp + 8]
shr eax, 1
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x2e5b
dec edx
add eax, 0xffffffa4
mov dword [esp + 8], eax
mov eax, 0x28448c12
cmp edx, ecx
je 0x416aaa
mov eax, 0xa67f2872
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x44], eax
jmp 0x415cb5
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x20]
shl ecx, 4
movzx ecx, word [eax + ecx + 4]
mov edx, dword [esp + 0x1c]
mov eax, 0x2dffd83e
cmp edx, ecx
je 0x416b00
mov eax, 0x9c089bb
jmp 0x416b00
cmp dword [esp + 0xa4], 0
mov eax, 0x23a3ba1c
jns 0x416b00
mov eax, 0xb91453b
mov dword [esp], eax
jmp 0x415cb5
mov eax, dword [esp + 8]
shl eax, 0x13
or eax, 0x5df1
mov dword [esp + 8], eax
mov dword [esp], 0x848d8b1
jmp 0x415cb5
cmp eax, 0x5a04a723
jne 0x415cb5
push dword [esp + 0x10]
call fcn.0042c64b
add esp, 4
mov eax, dword [esp + 0x34]
push dword [esp + 0x30]
call eax
add esp, 0xc0
pop esi
pop edi
pop ebx
pop ebp
ret