Function at 0x41d2a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4242ee
mov eax, dword fs:[0]
push eax
sub esp, 0x1e0
push ebx
push ebp
push esi
push edi
mov eax, dword [0x42e110]
xor eax, esp
push eax
lea eax, [esp + 0x1f4]
mov dword fs:[0], eax
xor ebx, ebx
push ebx
sub esp, 0xc
mov dword [esp + 0x20c], ebx
mov dword [esp + 0x24], ebx
mov eax, 0x42881c
mov esi, esp
mov dword [esp + 0x28], esp
call fcn.0041bd50
sub esp, 0xc
mov ebp, 1
mov dword [esp + 0x218], ebp
mov eax, 0x428824
mov esi, esp
mov dword [esp + 0x38], esp
call fcn.0041bd50
push ecx
mov ecx, dword [esp + 0x228]
mov eax, esp
lea edx, [esp + 0x90]
mov dword [esp + 0x38], esp
mov dword [eax], ecx
push edx
mov byte [esp + 0x220], bl
call fcn.00422aa0
add esp, 0x24
push ebx
sub esp, 0xc
mov dword [esp + 0x20c], 2
mov eax, str.config
mov esi, esp
mov dword [esp + 0x28], esp
call fcn.0041bd50
sub esp, 0xc
mov byte [esp + 0x218], 3
mov eax, 0x428834
mov esi, esp
mov dword [esp + 0x38], esp
call fcn.0041bd50
push ecx
mov ecx, dword [esp + 0x228]
mov eax, esp
lea edx, [esp + 0x104]
mov dword [esp + 0x38], esp
mov dword [eax], ecx
push edx
mov byte [esp + 0x220], 2
call fcn.00422aa0
add esp, 0x24
push ebx
sub esp, 0xc
mov byte [esp + 0x20c], 4
mov eax, 0x42883c
mov esi, esp
mov dword [esp + 0x28], esp
call fcn.0041bd50
sub esp, 0xc
mov byte [esp + 0x218], 5
mov eax, 0x428850
mov esi, esp
mov dword [esp + 0x38], esp
call fcn.0041bd50
push ecx
mov ecx, dword [esp + 0x228]
mov eax, esp
lea edx, [esp + 0xc4]
mov dword [esp + 0x38], esp
mov dword [eax], ecx
push edx
mov byte [esp + 0x220], 4
call fcn.00422aa0
add esp, 0x24
push ebx
mov byte [esp + 0x200], 6
sub esp, 0xc
mov eax, str.recursiveSearch
mov esi, esp
mov dword [esp + 0x28], esp
call fcn.0041bd50
sub esp, 0xc
mov byte [esp + 0x218], 7
mov eax, 0x428868
mov esi, esp
mov dword [esp + 0x38], esp
call fcn.0041bd50
push ecx
mov ecx, dword [esp + 0x228]
mov eax, esp
lea edx, [esp + 0x78]
mov dword [esp + 0x38], esp
mov dword [eax], ecx
push edx
mov byte [esp + 0x220], 6
call fcn.00422aa0
add esp, 0x24
push ebp
sub esp, 0xc
mov byte [esp + 0x20c], 8
mov eax, str.subdir
mov esi, esp
mov dword [esp + 0x28], esp
call fcn.0041bd50
push ecx
mov ecx, dword [esp + 0x21c]
mov eax, esp
lea edx, [esp + 0x144]
mov dword [esp + 0x2c], esp
push edx
mov dword [eax], ecx
call fcn.00422840
add esp, 0x18
push ebx
sub esp, 0xc
mov byte [esp + 0x20c], 9
mov eax, str.keepUnmarked
mov esi, esp
mov dword [esp + 0x28], esp
call fcn.0041bd50
sub esp, 0xc
mov byte [esp + 0x218], 0xa
mov eax, 0x428888
mov esi, esp
mov dword [esp + 0x38], esp
call fcn.0041bd50
push ecx
mov ecx, dword [esp + 0x228]
mov eax, esp
lea edx, [esp + 0xdc]
mov dword [esp + 0x38], esp
mov dword [eax], ecx
push edx
mov byte [esp + 0x220], 9
call fcn.00422aa0
add esp, 0x24
push ebx
sub esp, 0xc
mov byte [esp + 0x20c], 0xb
mov eax, str.invisible
mov esi, esp
mov dword [esp + 0x28], esp
call fcn.0041bd50
sub esp, 0xc
mov byte [esp + 0x218], 0xc
mov eax, str.Item
mov esi, esp
mov dword [esp + 0x38], esp
call fcn.0041bd50
push ecx
mov dword [esp + 0x38], esp
mov eax, esp
mov ecx, dword [esp + 0x228]
lea edx, [esp + 0xac]
mov dword [eax], ecx
push edx
mov byte [esp + 0x220], 0xb
call fcn.00422aa0
add esp, 0x24
mov edx, 0x4288b8
lea esi, [esp + 0xfc]
mov byte [esp + 0x1fc], 0xd
call fcn.0041b3c0
mov edi, eax
push ebp
sub esp, 0xc
mov byte [esp + 0x20c], 0xe
mov eax, str.keepCommonUnmarked
mov esi, esp
mov dword [esp + 0x28], esp
call fcn.0041bd50
push ecx
mov ecx, dword [esp + 0x21c]
mov eax, esp
lea edx, [esp + 0xe8]
mov dword [esp + 0x2c], esp
push edx
mov dword [eax], ecx
call fcn.00422840
add esp, 0x18
mov edx, edi
mov esi, eax
call fcn.0041b5d0
lea ecx, [esp + 0xd4]
mov byte [esp + 0x23], al
call fcn.0041b440
lea ecx, [esp + 0xfc]
mov byte [esp + 0x1fc], 0xd
call fcn.0041b440
mov eax, dword [esp + 0x218]
mov ecx, dword [esp + 0x204]
push eax
push ecx
call fcn.00402a30
mov ecx, dword [esp + 0x80]
sub ecx, dword [esp + 0x7c]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
mov dword [esp + 0x14], ebp
shr eax, 0x1f
xor ebp, ebp
add eax, edx
je 0x41de3c
mov dword [esp + 0x18], ebx
lea eax, [esp + 0x4c]
call fcn.0041b450
push 4
mov byte [esp + 0x200], 0xf
call fcn.0040a18d
add esp, 4
cmp eax, ebx
je 0x41d636
lea ecx, [esp + 0x28]
mov dword [eax], ecx
jmp 0x41d638
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov bl, 0x11
push ebp
lea eax, [esp + 0x74]
mov byte [esp + 0x200], bl
call fcn.00401590
sub esp, 0xc
mov ecx, eax
mov esi, esp
mov dword [esp + 0x28], esp
call fcn.0041b390
lea edx, [esp + 0x1d8]
push edx
call fcn.0041c870
lea esi, [esp + 0x4c]
mov byte [esp + 0x1fc], 0x12
call fcn.0041b760
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x1fc], bl
call fcn.0041b440
mov ecx, esi
call fcn.0041b2c0
test al, al
je 0x41ddba
mov ecx, dword [esp + 0x68]
mov esi, dword [esp + 0x64]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
mov byte [esp + 0x22], 1
cmp ebp, eax
jae 0x41d845
mov ecx, dword [esp + 0x18]
add ecx, esi
call fcn.0041b2c0
test al, al
je 0x41d845
push 0
push 0
sub esp, 0xc
mov esi, esp
mov dword [esp + 0x30], esp
call fcn.0041b390
sub esp, 0xc
lea ecx, [esp + 0x6c]
mov esi, esp
mov byte [esp + 0x21c], 0x13
mov dword [esp + 0x44], esp
call fcn.0041b390
lea edx, [esp + 0x1a8]
call fcn.0041aa90
mov byte [esp + 0x21c], 0x14
lea edx, [esp + 0x1f8]
push edx
push eax
mov byte [esp + 0x224], 0x15
call fcn.0041b070
push eax
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x204], 0x16
call fcn.004022b0
lea ebx, [esp + 0x1d8]
mov byte [esp + 0x1fc], 0x17
call fcn.004017f0
mov ecx, dword [esp + 0x1d8]
push ecx
call fcn.00409dad
add esp, 4
lea ecx, [esp + 0x188]
mov byte [esp + 0x1fc], 0x11
call fcn.0041aa80
mov ecx, dword [esp + 0x38]
sub ecx, dword [esp + 0x34]
mov eax, 0x2aaaaaab
imul ecx
mov ecx, dword [esp + 0x68]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
setne byte [esp + 0x22]
sub ecx, dword [esp + 0x64]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
sub esp, 0x18
mov ecx, edx
shr ecx, 0x1f
mov edi, esp
mov dword [esp + 0x34], esp
add ecx, edx
push 0
push 1
cmp ebp, ecx
jb 0x41d7d1
call fcn.0040a0e5
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x84]
sub esp, 0xc
lea ecx, [eax + edx]
mov esi, esp
mov dword [esp + 0x48], esp
call fcn.0041b390
sub esp, 0xc
lea ecx, [esp + 0x84]
mov esi, esp
mov byte [esp + 0x234], 0x18
mov dword [esp + 0x5c], esp
call fcn.0041b390
lea edx, [esp + 0x1c0]
call fcn.0041aa90
mov byte [esp + 0x234], 0x19
push edi
push eax
mov byte [esp + 0x23c], 0x1a
call fcn.0041b070
lea ecx, [esp + 0x40]
push ecx
call fcn.00402830
lea ecx, [esp + 0x188]
call fcn.0041aa80
jmp 0x41d870
lea ecx, [esp + 0x4c]
lea esi, [esp + 0x16c]
call fcn.0041b390
mov edx, esi
push edx
lea edi, [esp + 0x2c]
mov byte [esp + 0x200], 0x1b
call fcn.00401720
mov ecx, esi
call fcn.0041b440
mov edi, dword [esp + 0x38]
mov esi, dword [esp + 0x34]
mov ecx, edi
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x41ddc2
mov dword [esp + 0x24], 0
test eax, eax
jbe 0x41ddc2
mov dword [esp + method.PathLibrary.virtual_0], vtable.PathLibrary.0
mov dword [esp + 0x1c], 0
jmp 0x41d8c0
sub esp, 0xc
mov bl, 0x1c
mov byte [esp + 0x208], bl
lea ecx, [esp + 0x13c]
mov esi, esp
mov dword [esp + 0x190], esp
call fcn.0041b390
mov byte [esp + 0x208], 0x1d
mov ecx, dword [esp + 0x44]
sub ecx, dword [esp + 0x40]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x30], eax
jb 0x41d90c
call fcn.0040a0e5
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x28]
sub esp, 0xc
add ecx, edx
mov esi, esp
mov dword [esp + 0xa0], esp
call fcn.0041b390
lea eax, [esp + 0x1b4]
push eax
mov byte [esp + 0x218], bl
call fcn.004208d0
add esp, 0x1c
mov ecx, eax
lea esi, [esp + 0x40]
mov byte [esp + 0x1fc], 0x1e
call fcn.0041b390
lea ecx, [esp + 0x19c]
call fcn.0041b440
mov byte [esp + 0x1fc], 0x21
mov ecx, dword [esp + 0xb4]
sub ecx, dword [esp + 0xb0]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebp, eax
jae 0x41d9c9
test eax, eax
jbe 0x41d9c9
mov edx, 0x4288c0
lea esi, [esp + 0x1a8]
call fcn.0041b3c0
mov esi, eax
mov byte [esp + 0x1fc], 0x22
or dword [esp + 0x14], 2
push ebp
lea eax, [esp + 0xa8]
call fcn.00401590
mov edx, esi
mov esi, eax
call fcn.0041b5d0
test al, al
je 0x41d9c9
mov bl, 1
jmp 0x41d9cb
xor bl, bl
mov dword [esp + 0x1fc], 0x21
test byte [esp + 0x14], 2
je 0x41d9ee
and dword [esp + 0x14], 0xfffffffd
lea ecx, [esp + 0x1a8]
call fcn.0041b440
test bl, bl
je 0x41da28
lea ecx, [esp + 0x40]
lea esi, [esp + 0x11c]
call fcn.0041b390
mov edi, dword [esp + 0x20c]
mov ecx, esi
push ecx
mov byte [esp + 0x200], 0x23
call fcn.00401720
mov ecx, esi
mov byte [esp + 0x1fc], 0x21
call fcn.0041b440
mov ecx, dword [esp + 0xcc]
sub ecx, dword [esp + 0xc8]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebp, eax
jae 0x41da8c
test eax, eax
jbe 0x41da8c
mov edx, 0x4288c8
lea esi, [esp + 0x1b4]
call fcn.0041b3c0
mov esi, eax
mov byte [esp + 0x1fc], 0x24
or dword [esp + 0x14], 4
push ebp
lea eax, [esp + 0xc0]
call fcn.00401590
mov edx, esi
mov esi, eax
call fcn.0041b5d0
test al, al
je 0x41da8c
mov bl, 1
jmp 0x41da8e
xor bl, bl
mov dword [esp + 0x1fc], 0x21
test byte [esp + 0x14], 4
je 0x41dab1
and dword [esp + 0x14], 0xfffffffb
lea ecx, [esp + 0x1b4]
call fcn.0041b440
test bl, bl
je 0x41daf0
lea ecx, [esp + 0x40]
lea esi, [esp + 0x13c]
call fcn.0041b390
mov edi, dword [esp + 0x210]
mov edx, esi
push edx
mov byte [esp + 0x200], 0x25
call fcn.00401720
mov ecx, esi
mov byte [esp + 0x1fc], 0x21
call fcn.0041b440
jmp 0x41dc29
cmp byte [esp + 0x23], 0
je 0x41db34
mov edx, str.Common
lea esi, [esp + 0x150]
call fcn.0041b3c0
lea eax, [esp + 0x40]
mov byte [esp + 0x1fc], 0x26
or dword [esp + 0x14], 8
push eax
mov edi, esi
call fcn.0041b920
mov ecx, eax
lea eax, [esp + 0x40]
call fcn.0041b2b0
test al, al
je 0x41db34
mov bl, 1
jmp 0x41db36
xor bl, bl
mov dword [esp + 0x1fc], 0x21
test byte [esp + 0x14], 8
je 0x41db59
and dword [esp + 0x14], 0xfffffff7
lea ecx, [esp + 0x150]
call fcn.0041b440
test bl, bl
je 0x41db98
lea ecx, [esp + 0x40]
lea esi, [esp + 0x15c]
call fcn.0041b390
mov edi, dword [esp + 0x210]
mov ecx, esi
push ecx
mov byte [esp + 0x200], 0x27
call fcn.00401720
mov ecx, esi
mov byte [esp + 0x1fc], 0x21
call fcn.0041b440
jmp 0x41dc29
cmp byte [esp + 0x22], 0
je 0x41dc29
mov ebx, dword [esp + 0x24]
test ebx, ebx
jle 0x41dc29
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x34]
mov edx, ecx
sub edx, esi
mov eax, 0x2aaaaaab
imul edx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x41dbd6
call fcn.0040a0e5
mov ecx, dword [esp + 0x38]
mov esi, dword [esp + 0x34]
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, esi
cmp ebx, ecx
jb 0x41dbf7
call fcn.0040a0e5
mov esi, dword [esp + 0x34]
mov edx, dword [esp + 0x1c]
add esi, edx
mov edx, edi
call fcn.0041b5d0
test al, al
jne 0x41dc29
sub esp, 0xc
lea ecx, [esp + 0x4c]
mov esi, esp
mov dword [esp + 0x94], esp
call fcn.0041b390
mov edi, dword [esp + 0x21c]
call fcn.004013e0
mov ecx, dword [esp + 0x9c]
sub ecx, dword [esp + 0x98]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebp, eax
jae 0x41dc8d
test eax, eax
jbe 0x41dc8d
mov edx, 0x4288e0
lea esi, [esp + 0x1c0]
call fcn.0041b3c0
mov esi, eax
mov byte [esp + 0x1fc], 0x28
or dword [esp + 0x14], 0x10
push ebp
lea eax, [esp + 0x90]
call fcn.00401590
mov edx, esi
mov esi, eax
call fcn.0041b5d0
test al, al
je 0x41dc8d
mov bl, 1
jmp 0x41dc8f
xor bl, bl
mov dword [esp + 0x1fc], 0x21
test byte [esp + 0x14], 0x10
je 0x41dcb2
and dword [esp + 0x14], 0xffffffef
lea ecx, [esp + 0x1c0]
call fcn.0041b440
lea ecx, [esp + 0x40]
test bl, bl
je 0x41dd35
lea esi, [esp + 0x10c]
call fcn.0041b390
mov edi, dword [esp + 0x214]
mov eax, esi
push eax
mov byte [esp + 0x200], 0x29
call fcn.00401720
mov ecx, esi
mov byte [esp + 0x1fc], 0x21
call fcn.0041b440
lea ecx, [esp + 0x40]
lea esi, [esp + 0xfc]
call fcn.0041b390
push ebp
lea eax, [esp + 0xe8]
mov byte [esp + 0x200], 0x2a
call fcn.00401590
mov edx, dword [esp + 0x21c]
mov ecx, eax
call fcn.00402920
mov ecx, esi
push ecx
mov edi, eax
mov byte [esp + 0x200], 0x2b
call fcn.00401720
mov ecx, esi
jmp 0x41dd78
lea esi, [esp + 0xd4]
call fcn.0041b390
push ebp
lea eax, [esp + 0xe8]
mov byte [esp + 0x200], 0x2c
call fcn.00401590
mov edx, dword [esp + 0x204]
mov ecx, eax
call fcn.00402920
mov edx, esi
push edx
mov edi, eax
mov byte [esp + 0x200], 0x2d
call fcn.00401720
mov ecx, esi
call fcn.0041b440
lea ecx, [esp + 0x40]
call fcn.0041b440
mov edi, dword [esp + 0x38]
mov esi, dword [esp + 0x34]
mov ebx, dword [esp + 0x24]
add dword [esp + 0x1c], 0xc
mov ecx, edi
sub ecx, esi
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc ebx
add eax, edx
mov dword [esp + 0x24], ebx
cmp ebx, eax
jb 0x41d8c0
jmp 0x41ddc2
mov edi, dword [esp + 0x38]
mov esi, dword [esp + 0x34]
xor ebx, ebx
mov byte [esp + 0x1fc], 0x2e
cmp esi, ebx
je 0x41ddf1
cmp esi, edi
je 0x41dde8
mov edx, dword [esi]
mov eax, dword [edx]
push ebx
mov ecx, esi
call eax
add esi, 0xc
cmp esi, edi
jne 0x41ddd4
mov esi, dword [esp + 0x34]
push esi
call fcn.00409dad
add esp, 4
mov ecx, dword [esp + 0x28]
push ecx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
call fcn.00409dad
add esp, 4
lea ecx, [esp + 0x4c]
call fcn.0041b440
mov ecx, dword [esp + 0x80]
sub ecx, dword [esp + 0x7c]
add dword [esp + 0x18], 0xc
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
cmp ebp, eax
jb 0x41d60f
mov byte [esp + 0x1fc], 0x2f
mov esi, dword [esp + 0x98]
cmp esi, ebx
je 0x41de80
mov edi, dword [esp + 0x9c]
cmp esi, edi
je 0x41de77
lea ebx, [ebx]
mov edx, dword [esi]
mov eax, dword [edx]
push ebx
mov ecx, esi
call eax
add esi, 0xc
cmp esi, edi
jne 0x41de60
mov esi, dword [esp + 0x98]
push esi
call fcn.00409dad
add esp, 4
mov ecx, dword [esp + 0x8c]
push ecx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
call fcn.00409dad
add esp, 4
mov byte [esp + 0x1fc], 0x30
mov esi, dword [esp + 0xc8]
cmp esi, ebx
je 0x41dee3
mov edi, dword [esp + 0xcc]
cmp esi, edi
je 0x41deda
mov edx, dword [esi]
mov eax, dword [edx]
push ebx
mov ecx, esi
call eax
add esi, 0xc
cmp esi, edi
jne 0x41dec3
mov esi, dword [esp + 0xc8]
push esi
call fcn.00409dad
add esp, 4
mov ecx, dword [esp + 0xbc]
push ecx
mov dword [esp + 0xcc], ebx
mov dword [esp + 0xd0], ebx
mov dword [esp + 0xd4], ebx
call fcn.00409dad
add esp, 4
lea ecx, [esp + 0x130]
call fcn.0041b440
mov byte [esp + 0x1fc], 0x31
mov esi, dword [esp + 0x64]
cmp esi, ebx
je 0x41df4d
mov edi, dword [esp + 0x68]
cmp esi, edi
je 0x41df44
lea esp, [esp]
mov edx, dword [esi]
mov eax, dword [edx]
push ebx
mov ecx, esi
call eax
add esi, 0xc
cmp esi, edi
jne 0x41df30
mov esi, dword [esp + 0x64]
push esi
call fcn.00409dad
add esp, 4
mov ecx, dword [esp + 0x58]
push ecx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
call fcn.00409dad
add esp, 4
mov byte [esp + 0x1fc], 0x32
mov esi, dword [esp + 0xb0]
cmp esi, ebx
je 0x41dfa4
mov edi, dword [esp + 0xb4]
cmp esi, edi
je 0x41df9b
mov edx, dword [esi]
mov eax, dword [edx]
push ebx
mov ecx, esi
call eax
add esi, 0xc
cmp esi, edi
jne 0x41df84
mov esi, dword [esp + 0xb0]
push esi
call fcn.00409dad
add esp, 4
mov ecx, dword [esp + 0xa4]
push ecx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xbc], ebx
call fcn.00409dad
add esp, 4
mov byte [esp + 0x1fc], 0x33
mov esi, dword [esp + 0xf0]
cmp esi, ebx
je 0x41e007
mov edi, dword [esp + 0xf4]
cmp esi, edi
je 0x41dffe
mov edx, dword [esi]
mov eax, dword [edx]
push ebx
mov ecx, esi
call eax
add esi, 0xc
cmp esi, edi
jne 0x41dfe7
mov esi, dword [esp + 0xf0]
push esi
call fcn.00409dad
add esp, 4
mov ecx, dword [esp + 0xe4]
push ecx
mov dword [esp + 0xf4], ebx
mov dword [esp + 0xf8], ebx
mov dword [esp + 0xfc], ebx
call fcn.00409dad
add esp, 4
mov dword [esp + 0x1fc], 0x34
mov esi, dword [esp + 0x7c]
cmp esi, ebx
je 0x41e06d
mov edi, dword [esp + 0x80]
cmp esi, edi
je 0x41e064
lea ebx, [ebx]
mov edx, dword [esi]
mov eax, dword [edx]
push ebx
mov ecx, esi
call eax
add esi, 0xc
cmp esi, edi
jne 0x41e050
mov esi, dword [esp + 0x7c]
push esi
call fcn.00409dad
add esp, 4
mov ecx, dword [esp + 0x70]
push ecx
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
call fcn.00409dad
mov eax, dword [esp + 0x208]
add esp, 4
mov ecx, dword [esp + 0x1f4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1ec
ret 0x1c