Function at 0x41d5e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x504
mov eax, dword [0x43c034]
xor eax, esp
mov dword [esp + 0x500], eax
push ebx
mov ebx, dword [esp + 0x510]
push ebp
mov ebp, dword [esp + 0x518]
push esi
mov esi, dword [esp + 0x514]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x18], 0
push edi
test esi, esi
je 0x41e124
mov edi, dword [esi + 0x48]
test edi, edi
je 0x41e11d
cmp dword [esi + 0x14], 2
jne 0x41e11d
cmp dword [ebx + 0x38], 0
je 0x41e11d
mov ecx, dword [ebx + 0x48]
cmp dword [ecx + 0x34], 0
je 0x41d653
cmp dword [edi + 0x34], 0
je 0x41e11d
test ecx, ecx
je 0x41e11d
cmp ebp, dword [ebx + 0x10]
jae 0x41e11d
mov eax, dword [ecx + 0x10]
mov eax, dword [eax + ebp*4]
add eax, dword [ecx]
mov dword [esp + 0x3c], eax
je 0x41e11d
cmp dword [eax], 0x2014b50
jne 0x41d875
movzx edx, word [eax + 0x1c]
movzx ecx, word [eax + 0x20]
movzx eax, word [eax + 0x1e]
mov dword [esp + 0x2c], ecx
add ecx, eax
mov dword [esp + 0x30], eax
add ecx, edx
mov eax, dword [edi + 4]
add eax, 0x4e
mov dword [esp + 0x44], edx
add eax, ecx
mov dword [esp + 0x54], ecx
cmp eax, 0xffffffff
jae 0x41e080
push esi
call fcn.0041f140
mov ecx, dword [esi + 0x10]
add esp, 4
cmp dword [edi + 0x34], 0
mov dword [esp + 0x48], eax
jne 0x41d81f
cmp ecx, 0xffff
je 0x41d828
push 0
lea eax, [esp + 0x9c]
push eax
push dword [esp + 0x44]
push ebp
push ebx
call fcn.0041a7a0
add esp, 0x14
test eax, eax
je 0x41e124
mov ebp, dword [esp + 0xdc]
lea ecx, [esp + 0x4f0]
mov eax, dword [esi]
push 0x1e
push ecx
push ebp
push dword [esp + 0xe4]
mov dword [esp + 0x24], eax
mov eax, dword [esi + 4]
push dword [ebx + 0x44]
mov dword [esp + 0x2c], eax
mov eax, dword [ebx + 0x38]
call eax
add esp, 0x14
cmp eax, 0x1e
jne 0x41d813
cmp dword [esp + 0x4f0], 0x4034b50
jne 0x41d875
mov eax, dword [esp + 0xd8]
movzx ebx, word [esp + 0x50c]
add eax, 0x1e
mov dword [esp + 0x28], eax
movzx eax, word [esp + 0x50a]
adc ebp, 0
mov dword [esp + 0x38], ebp
mov dword [esp + 0x20], eax
lea ebp, [ebx + eax]
xor eax, eax
add ebp, dword [esp + 0xc0]
mov dword [esp + 0x34], ebp
adc eax, dword [esp + 0xc4]
mov dword [esp + 0x40], eax
test ebx, ebx
je 0x41d895
cmp dword [esp + 0x502], 0xffffffff
je 0x41d7a8
cmp dword [esp + 0x506], 0xffffffff
jne 0x41d895
mov ecx, dword [esi + 0x30]
xorps xmm0, xmm0
push ebx
movd eax, xmm0
push 1
push eax
push dword [esi + 0x34]
call ecx
add esp, 0x10
mov dword [esp + 0x10], eax
test eax, eax
je 0x41de2e
mov ebp, dword [esp + 0xd8]
mov edx, dword [esp + 0x50]
push ebx
push eax
xor eax, eax
add dword [esp + 0x28], ebp
mov ecx, dword [edx + 0x38]
adc eax, dword [esp + 0xe4]
add dword [esp + 0x28], 0x1e
adc eax, 0
push eax
push dword [esp + 0x2c]
push dword [edx + 0x44]
call ecx
mov ebp, dword [esp + 0x48]
add esp, 0x14
cmp eax, ebx
je 0x41d834
push dword [esp + 0x10]
push dword [esi + 0x34]
mov eax, dword [esi + 0x2c]
call eax
add esp, 8
mov dword [esi + 0x1c], 0x14
jmp 0x41e124
cmp ecx, 0xffffffff
jne 0x41d6d9
mov dword [esi + 0x1c], 2
jmp 0x41e124
mov edx, dword [esp + 0x10]
mov eax, edx
nop word [eax + eax]
cmp ebx, 4
jb 0x41d869
movzx ecx, word [eax + 2]
mov dword [esp + 0x10], ecx
add ecx, 4
cmp ecx, ebx
ja 0x41d869
cmp word [eax], 1
je 0x41d862
add eax, ecx
sub ebx, ecx
jne 0x41d840
jmp 0x41d889
cmp dword [esp + 0x10], 0x10
jae 0x41d881
mov eax, dword [esi + 0x2c]
push edx
push dword [esi + 0x34]
call eax
add esp, 8
mov dword [esi + 0x1c], 9
jmp 0x41e124
mov dword [esp + 0x1c], 1
mov eax, dword [esi + 0x2c]
push edx
push dword [esi + 0x34]
call eax
add esp, 8
cmp dword [edi + 0x34], 0
mov ebx, dword [esp + 0x40]
mov edx, dword [esp + 0x14]
jne 0x41d8db
mov ecx, dword [esp + 0x54]
xor eax, eax
add ecx, dword [edi + 4]
adc eax, eax
add ecx, dword [esp + 0x48]
adc eax, 0
add ecx, ebp
adc eax, ebx
add ecx, edx
adc eax, dword [esp + 0x18]
add ecx, 0xb2
adc eax, 0
test eax, eax
ja 0x41e114
jb 0x41d8db
cmp ecx, 0xffffffff
jae 0x41e114
push dword [esp + 0x48]
push dword [esp + 0x1c]
push edx
push esi
call fcn.00420200
add esp, 0x10
test eax, eax
je 0x41e124
mov ecx, dword [esp + 0x14]
lea ebp, [esp + 0x4f0]
add ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x18]
mov eax, ecx
push 0x1e
adc edx, 0
mov dword [esp + 0x14], eax
push ebp
push edx
push ecx
push dword [esi + 0x44]
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 0x3c]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], edx
mov dword [esp + 0x60], edx
call eax
mov ebp, dword [esp + 0x48]
add esp, 0x14
cmp eax, 0x1e
jne 0x41db0e
add dword [esp + 0x14], 0x1e
mov eax, dword [esi + 0x28]
adc dword [esp + 0x18], 0
test ebx, ebx
jb 0x41d96b
ja 0x41d959
cmp ebp, 0x10000
jbe 0x41d960
mov ebp, 0x10000
jmp 0x41d970
test ebx, ebx
ja 0x41d978
jb 0x41d96b
cmp ebp, 0x20
jae 0x41d978
mov ebp, 0x20
mov dword [esp + 0x24], 0
push ebp
push 1
push dword [esi + 0x34]
call eax
mov ebp, eax
add esp, 0xc
test ebp, ebp
je 0x41de2e
mov edx, dword [esp + 0x34]
mov ecx, edx
or ecx, ebx
je 0x41da27
nop dword [eax + eax]
test ebx, ebx
jb 0x41d9b5
ja 0x41d9ae
cmp edx, 0x10000
jbe 0x41d9b5
mov ebx, 0x10000
jmp 0x41d9b7
mov ebx, edx
mov ecx, dword [esp + 0x50]
push ebx
push ebp
push dword [esp + 0x40]
mov eax, dword [ecx + 0x38]
push dword [esp + 0x34]
push dword [ecx + 0x44]
call eax
add esp, 0x14
cmp eax, ebx
jne 0x41db1a
mov edx, dword [esp + 0x14]
add dword [esp + 0x28], ebx
mov eax, dword [esi + 0x3c]
adc dword [esp + 0x38], 0
push ebx
push ebp
push dword [esp + 0x20]
push edx
push dword [esi + 0x44]
call eax
add esp, 0x14
cmp eax, ebx
jne 0x41db02
add dword [esp + 0x14], ebx
mov edx, dword [esp + 0x34]
adc dword [esp + 0x18], 0
sub edx, ebx
mov ebx, dword [esp + 0x40]
mov eax, edx
sbb ebx, 0
mov dword [esp + 0x34], edx
or eax, ebx
mov dword [esp + 0x40], ebx
jne 0x41d9a0
test byte [esp + 0x4f6], 8
je 0x41db85
mov ecx, dword [esp + 0x50]
mov eax, dword [ecx + 0x48]
cmp dword [eax + 0x34], 0
jne 0x41db34
cmp dword [esp + 0x1c], 0
jne 0x41db34
mov eax, dword [ecx + 0x38]
push 0x10
push ebp
push dword [esp + 0x40]
push dword [esp + 0x34]
push dword [ecx + 0x44]
call eax
add esp, 0x14
cmp eax, 0x10
jne 0x41db1a
mov eax, dword [esi + 0x48]
mov ecx, dword [ebp]
cmp dword [eax + 0x34], 0
je 0x41db20
xor eax, eax
mov edx, 4
cmp ecx, 0x8074b50
cmove eax, edx
mov ecx, dword [eax + ebp]
mov edx, dword [eax + ebp + 4]
mov ebx, dword [eax + ebp + 8]
mov eax, ecx
shr eax, 8
mov byte [ebp + 5], al
mov eax, ecx
shr eax, 0x10
mov byte [ebp + 6], al
mov eax, edx
shr eax, 8
mov byte [ebp + 9], al
mov eax, edx
shr eax, 0x10
mov byte [ebp + 0xa], al
mov eax, ebx
shr eax, 8
mov byte [ebp + 0x11], al
mov eax, ebx
mov byte [ebp + 4], cl
shr ecx, 0x18
mov byte [ebp + 8], dl
shr edx, 0x18
mov byte [ebp + 0x10], bl
shr eax, 0x10
shr ebx, 0x18
mov byte [ebp + 0x13], bl
mov ebx, 0x18
mov dword [ebp], 0x8074b50
mov byte [ebp + 7], cl
mov byte [ebp + 0xb], dl
mov dword [ebp + 0xc], 0
mov byte [ebp + 0x12], al
mov dword [ebp + 0x14], 0
jmp 0x41db62
mov eax, dword [esi + 0x2c]
push ebp
push dword [esi + 0x34]
call eax
add esp, 8
mov dword [esi + 0x1c], 0x13
jmp 0x41e124
push ebp
jmp 0x41d808
xor ebx, ebx
cmp ecx, 0x8074b50
sete bl
lea ebx, [ebx*4 + 0xc]
jmp 0x41db62
mov eax, dword [ecx + 0x38]
push 0x18
push ebp
push dword [esp + 0x40]
push dword [esp + 0x34]
push dword [ecx + 0x44]
call eax
add esp, 0x14
cmp eax, 0x18
jne 0x41db1a
xor ebx, ebx
cmp dword [ebp], 0x8074b50
sete bl
lea ebx, [ebx*4 + 0x14]
mov edx, dword [esp + 0x14]
mov eax, dword [esi + 0x3c]
push ebx
push ebp
push dword [esp + 0x20]
push edx
push dword [esi + 0x44]
call eax
add esp, 0x14
cmp eax, ebx
jne 0x41db02
add dword [esp + 0x14], ebx
adc dword [esp + 0x18], 0
mov eax, dword [esi + 0x2c]
push ebp
push dword [esi + 0x34]
call eax
mov ecx, dword [esp + 0x44]
add esp, 8
cmp dword [edi + 0x34], 0
mov ebx, dword [edi + 4]
movups xmm0, xmmword [ecx]
mov eax, dword [ecx + 0x28]
mov dword [esp + 0x90], eax
mov ax, word [ecx + 0x2c]
movups xmmword [esp + 0x68], xmm0
mov word [esp + 0x94], ax
movups xmm0, xmmword [ecx + 0x10]
movups xmmword [esp + 0x78], xmm0
movq xmm0, qword [ecx + 0x20]
movq qword [esp + 0x88], xmm0
je 0x41df10
push 0
lea eax, [esp + 0x4c]
mov dword [esp + 0x80], 0xffffffff
push eax
lea eax, [esp + 0xd0]
mov dword [esp + 0x88], 0xffffffff
push eax
lea eax, [esp + 0xcc]
mov dword [esp + 0x9e], 0xffffffff
push eax
push dword [esp + 0x40]
mov eax, dword [esp + 0x58]
add ecx, 0x2e
add eax, ecx
xorps xmm0, xmm0
push eax
lea eax, [esp + 0x70]
push esi
movups xmmword [esp + 0x74], xmm0
push eax
mov dword [esp + 0x84], 1
call fcn.0041fe90
add esp, 0x20
test eax, eax
jne 0x41dc56
push dword [esp + 0x58]
mov eax, dword [esi + 0x2c]
push dword [esi + 0x34]
call eax
add esp, 8
jmp 0x41e124
mov eax, dword [esp + 0x5c]
mov ecx, 1
mov edx, dword [edi + 4]
mov ebp, dword [edi + 8]
mov byte [esp + 0x86], al
shr eax, 8
mov byte [esp + 0x87], al
lea eax, [edx + 0x2e]
mov dword [esp + 0x10], edx
mov dword [esp + 0x1c], eax
cmp eax, ebp
jbe 0x41dcd3
cmp ebp, ecx
cmovb ebp, ecx
cmp ebp, eax
jae 0x41dc96
nop
add ebp, ebp
cmp ebp, eax
jb 0x41dc90
mov eax, dword [esi + 0x30]
push ebp
push dword [edi + 0xc]
push dword [edi]
push dword [esi + 0x34]
call eax
add esp, 0x10
test eax, eax
jne 0x41dcc6
push dword [esp + 0x58]
mov eax, dword [esi + 0x2c]
push dword [esi + 0x34]
call eax
add esp, 8
mov dword [esi + 0x1c], 0x10
jmp 0x41e124
mov edx, dword [esp + 0x10]
mov dword [edi], eax
mov eax, dword [esp + 0x1c]
mov dword [edi + 8], ebp
imul edx, dword [edi + 0xc]
lea ecx, [edi + 0xc]
mov dword [edi + 4], eax
imul eax, dword [ecx], 0x2e
add edx, dword [edi]
push eax
lea eax, [esp + 0x6c]
push eax
push edx
call sub.msvcrt.dll_memcpy
mov eax, dword [edi + 4]
lea edx, [edi + 0xc]
mov ebp, dword [edi + 8]
add esp, 0xc
mov dword [esp + 0x10], eax
mov ecx, edx
add eax, dword [esp + 0x44]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x28], ecx
cmp eax, ebp
jbe 0x41dd78
cmp ebp, 1
mov ecx, 1
cmovb ebp, ecx
mov ecx, edx
mov dword [esp + 0x28], ecx
cmp ebp, eax
jae 0x41dd36
mov dword [esp + 0x28], edx
nop dword [eax]
add ebp, ebp
cmp ebp, eax
jb 0x41dd30
mov eax, dword [esi + 0x30]
push ebp
push dword [ecx]
push dword [edi]
push dword [esi + 0x34]
call eax
add esp, 0x10
test eax, eax
jne 0x41dd6b
push dword [esp + 0x58]
mov eax, dword [esi + 0x2c]
push dword [esi + 0x34]
call eax
add esp, 8
cmp ebx, dword [edi + 8]
jbe 0x41de2b
mov ecx, dword [esp + 0x28]
jmp 0x41de12
mov ecx, dword [esp + 0x28]
mov dword [edi], eax
mov eax, dword [esp + 0x1c]
mov dword [edi + 8], ebp
mov dword [edi + 4], eax
mov eax, dword [ecx]
imul eax, dword [esp + 0x44]
push eax
mov eax, dword [esp + 0x40]
add eax, 0x2e
push eax
mov eax, dword [esp + 0x18]
imul eax, dword [ecx]
add eax, dword [edi]
push eax
call sub.msvcrt.dll_memcpy
mov eax, dword [edi + 4]
add esp, 0xc
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x28]
add ecx, eax
mov ebp, dword [edi + 8]
mov dword [esp + 0x10], eax
mov eax, edx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
cmp ecx, ebp
jbe 0x41de47
cmp ebp, 1
mov eax, 1
mov ecx, edx
cmovb ebp, eax
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x1c]
cmp ebp, eax
jae 0x41dde6
mov dword [esp + 0x20], edx
add ebp, ebp
cmp ebp, eax
jb 0x41dde0
mov eax, dword [esi + 0x30]
push ebp
push dword [ecx]
push dword [edi]
push dword [esi + 0x34]
call eax
add esp, 0x10
test eax, eax
jne 0x41de3a
push dword [esp + 0x58]
push dword [esi + 0x34]
mov eax, dword [esi + 0x2c]
call eax
add esp, 8
cmp ebx, dword [edi + 8]
jbe 0x41de2b
mov ecx, dword [esp + 0x20]
mov eax, dword [esi + 0x30]
push ebx
push dword [ecx]
push dword [edi]
push dword [esi + 0x34]
call eax
add esp, 0x10
test eax, eax
je 0x41de2e
mov dword [edi], eax
mov dword [edi + 8], ebx
mov dword [edi + 4], ebx
mov dword [esi + 0x1c], 0x10
jmp 0x41e124
mov ecx, dword [esp + 0x1c]
mov dword [edi], eax
mov eax, dword [esp + 0x20]
mov dword [edi + 8], ebp
mov dword [edi + 4], ecx
mov ecx, dword [eax]
mov eax, ecx
imul eax, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x14]
push dword [esp + 0x5c]
imul eax, ecx
add eax, dword [edi]
push eax
call sub.msvcrt.dll_memcpy
mov edx, dword [edi + 4]
add esp, 0xc
mov ecx, dword [esp + 0x2c]
mov ebp, dword [edi + 8]
add ecx, edx
mov dword [esp + 0x10], edx
mov dword [esp + 0x1c], ecx
cmp ecx, ebp
jbe 0x41decc
cmp ebp, 1
mov eax, 1
cmovb ebp, eax
mov eax, dword [esp + 0x20]
mov edx, eax
cmp ebp, ecx
jae 0x41de9d
add ebp, ebp
cmp ebp, ecx
jb 0x41de97
mov eax, dword [esi + 0x30]
push ebp
push dword [edx]
mov dword [esp + 0x28], edx
push dword [edi]
push dword [esi + 0x34]
call eax
add esp, 0x10
test eax, eax
jne 0x41debf
mov eax, dword [esp + 0x58]
push eax
jmp 0x41ddfe
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov dword [edi], eax
mov dword [edi + 8], ebp
mov ebp, dword [esp + 0x20]
mov dword [edi + 4], ecx
mov ecx, dword [ebp]
mov eax, ecx
imul eax, dword [esp + 0x2c]
mov ebp, dword [esp + 0x3c]
imul edx, ecx
add ebp, 0x2e
push eax
mov eax, dword [esp + 0x48]
add eax, dword [esp + 0x34]
add edx, dword [edi]
add eax, ebp
push eax
push edx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x64]
push eax
push dword [esi + 0x34]
mov eax, dword [esi + 0x2c]
call eax
add esp, 0x14
jmp 0x41e054
cmp dword [esp + 0x18], 0
ja 0x41e114
jb 0x41df28
cmp dword [esp + 0x14], 0xffffffff
ja 0x41e114
cmp dword [esp + 0x4c], 0
ja 0x41e114
mov ecx, dword [esp + 0x10]
jb 0x41df42
cmp ecx, 0xffffffff
jae 0x41e114
mov ebp, dword [edi + 8]
mov eax, ecx
shr eax, 8
mov byte [esp + 0x93], al
mov eax, ecx
shr eax, 0x10
mov byte [esp + 0x92], cl
shr ecx, 0x18
mov byte [esp + 0x94], al
lea eax, [ebx + 0x2e]
mov byte [esp + 0x95], cl
mov ecx, 1
cmp eax, ebp
jbe 0x41dfaa
cmp ebp, ecx
cmovb ebp, ecx
cmp ebp, eax
jae 0x41df89
add ebp, ebp
cmp ebp, eax
jb 0x41df83
mov eax, dword [esi + 0x30]
push ebp
push dword [edi + 0xc]
push dword [edi]
push dword [esi + 0x34]
call eax
add esp, 0x10
test eax, eax
je 0x41de2e
mov dword [edi], eax
lea eax, [ebx + 0x2e]
mov dword [edi + 8], ebp
lea ecx, [edi + 0xc]
mov dword [edi + 4], eax
mov ecx, dword [ecx]
imul eax, ecx, 0x2e
imul ecx, ebx
push eax
add ecx, dword [edi]
lea eax, [esp + 0x6c]
push eax
push ecx
call sub.msvcrt.dll_memcpy
mov eax, dword [edi + 4]
add esp, 0xc
mov edx, dword [esp + 0x54]
mov ebp, dword [edi + 8]
add edx, eax
mov dword [esp + 0x2c], eax
lea eax, [edi + 0xc]
mov dword [esp + 0x30], edx
mov dword [esp + 0x20], eax
cmp edx, ebp
jbe 0x41e02f
cmp ebp, 1
mov eax, 1
cmovb ebp, eax
lea eax, [edi + 0xc]
mov ecx, eax
mov dword [esp + 0x20], ecx
cmp ebp, edx
jae 0x41e00a
mov dword [esp + 0x20], eax
add ebp, ebp
cmp ebp, edx
jb 0x41e004
mov eax, dword [esi + 0x30]
push ebp
push dword [ecx]
push dword [edi]
push dword [esi + 0x34]
call eax
add esp, 0x10
test eax, eax
je 0x41de09
mov edx, dword [esp + 0x30]
mov dword [edi], eax
mov eax, dword [esp + 0x20]
mov dword [edi + 8], ebp
mov ecx, dword [eax]
mov eax, ecx
imul eax, dword [esp + 0x54]
imul ecx, dword [esp + 0x2c]
mov dword [edi + 4], edx
push eax
mov eax, dword [esp + 0x40]
add ecx, dword [edi]
add eax, 0x2e
push eax
push ecx
call sub.msvcrt.dll_memcpy
add esp, 0xc
cmp dword [edi + 4], 0xffffffff
mov ebp, dword [esp + 0x20]
jb 0x41e08c
cmp ebx, dword [edi + 8]
jbe 0x41e07d
mov eax, dword [esi + 0x30]
push ebx
push dword [ebp]
push dword [edi]
push dword [esi + 0x34]
call eax
add esp, 0x10
test eax, eax
je 0x41e080
mov dword [edi], eax
mov dword [edi + 8], ebx
mov dword [edi + 4], ebx
mov dword [esi + 0x1c], 0xf
jmp 0x41e124
mov ecx, dword [edi + 0x14]
mov ebp, dword [edi + 0x18]
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x2c], ecx
lea eax, [ecx + 1]
mov dword [esp + 0x30], eax
cmp eax, ebp
jbe 0x41e0e2
cmp ebp, 1
mov ecx, 1
cmovb ebp, ecx
cmp ebp, eax
jae 0x41e0ba
add ebp, ebp
cmp ebp, eax
jb 0x41e0b4
mov eax, dword [esi + 0x30]
push ebp
push dword [edi + 0x1c]
push dword [edi + 0x10]
push dword [esi + 0x34]
call eax
add esp, 0x10
test eax, eax
je 0x41de09
mov ecx, dword [esp + 0x2c]
mov dword [edi + 0x10], eax
mov eax, dword [esp + 0x30]
mov dword [edi + 0x18], ebp
mov dword [edi + 0x14], eax
lea edx, [esp + 0x1c]
mov eax, dword [edi + 0x1c]
imul ecx, eax
push eax
push edx
add ecx, dword [edi + 0x10]
push ecx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x20]
add esp, 0xc
inc dword [esi + 0x10]
mov dword [esi], eax
mov eax, dword [esp + 0x18]
mov dword [esi + 4], eax
mov eax, 1
jmp 0x41e126
mov dword [esi + 0x1c], 0x1d
jmp 0x41e124
mov dword [esi + 0x1c], 0x18
xor eax, eax
mov ecx, dword [esp + 0x510]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00428a51
add esp, 0x504
ret