Function at 0x41ce50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4e9050
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2d4
push ebx
push ebp
mov dword [esp + 0x40], ecx
push esi
push edi
lea ecx, [esp + 0x50]
call fcn.004be1a0
xor esi, esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x2ec], esi
call fcn.004be1a0
mov al, byte [esp + 0x1b]
sub esp, 0x10
mov ebp, esp
mov edi, 0x520010
or ecx, 0xffffffff
mov dword [esp + 0x5c], esp
mov byte [ebp], al
xor eax, eax
mov dword [ebp + 4], esi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], esi
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov byte [esp + 0x300], 1
mov ebx, ecx
mov ecx, ebp
push ebx
call fcn.004144a0
test al, al
je 0x41cef0
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
mov esi, 0x520010
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, ebp
call fcn.00414480
xor esi, esi
push esi
lea ecx, [esp + 0x30]
call fcn.004ca360
lea ecx, [esp + 0x54]
mov byte [esp + 0x2ec], 2
call fcn.004be1a0
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ec], 3
call fcn.004be1a0
mov ecx, dword [esp + 0x48]
push 1
mov byte [esp + 0x2f0], 4
call fcn.0041b830
cmp ax, si
jge 0x41cf5e
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 5
mov ecx, esp
mov dword [esp + 0x58], esp
jmp 0x41e3af
jne 0x41cf91
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x50f634
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 6
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
push 0x50f998
jmp 0x41e3b6
push 0xff
lea eax, [esp + 0xe8]
push 0x50f930
push eax
call fcn.004de8d6
push ecx
mov cl, byte [esp + 0x2b]
mov ebp, esp
xor esi, esi
lea edi, [esp + 0xf4]
xor eax, eax
mov byte [ebp], cl
or ecx, 0xffffffff
mov dword [ebp + 4], esi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], esi
mov dword [esp + 0x5c], esp
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
mov ebx, ecx
mov ecx, ebp
push ebx
call fcn.004144a0
test al, al
je 0x41d006
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
lea esi, [esp + 0xf4]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push ebx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, ebp
call fcn.00414480
xor esi, esi
sub esp, 0x10
lea eax, [esp + 0x3b]
mov ecx, esp
mov dword [esp + 0x60], esp
push eax
push 0x50f8e4
mov byte [esp + 0x314], 7
call fcn.00413bf0
sub esp, 0x10
lea edx, [esp + 0x93]
mov ecx, esp
mov dword [esp + 0x8c], esp
push edx
push 0x50f9a8
mov byte [esp + 0x324], 8
call fcn.00413bf0
sub esp, 0x10
lea eax, [esp + 0x7f]
mov ecx, esp
mov dword [esp + 0xa8], esp
push eax
push 0x520010
mov byte [esp + 0x334], 9
call fcn.00413bf0
sub esp, 0x10
mov byte [esp + 0x33c], 0xa
mov edi, esp
mov dword [esp + 0xb4], esp
push ecx
mov ecx, esp
mov dword [esp + 0x8c], esp
push 6
push 0x50f9a0
call fcn.004be240
push edi
call fcn.004cfca0
sub esp, 8
mov byte [esp + 0x34c], 0xb
mov edi, esp
mov dword [esp + 0x98], esp
push ecx
mov ecx, esp
mov dword [esp + 0x9c], esp
push 6
push 0x50f9a0
call fcn.004be240
push edi
call fcn.004cfca0
add esp, 8
lea ecx, [esp + 0xe4]
mov byte [esp + 0x34c], 4
push ecx
mov ecx, 0x5200a8
call fcn.004cb120
mov ecx, dword [0x4f73d0]
mov dx, word [eax]
push ecx
add eax, 4
push esi
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x2f8], 0xc
mov word [esp + 0x28], dx
call fcn.00413e90
mov eax, dword [esp + 0x8c]
mov byte [esp + 0x2ec], 4
cmp eax, esi
je 0x41d141
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41d138
cmp al, 0xff
je 0x41d138
dec al
mov byte [ecx], al
jmp 0x41d141
push ecx
call fcn.004de1a0
add esp, 4
lea ecx, [esp + 0x1c]
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], esi
call fcn.004c48d0
cmp ax, 2
je 0x41e3cd
lea edx, [esp + 0x74]
lea ecx, [esp + 0x1c]
push edx
call fcn.004ca4a0
mov edi, dword [eax + 4]
cmp edi, esi
jne 0x41d183
mov edi, 0x4f7480
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0xe4]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x78]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor esi, esi
cmp eax, esi
je 0x41d1ce
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41d1c5
cmp al, 0xff
je 0x41d1c5
dec al
mov byte [ecx], al
jmp 0x41d1ce
push ecx
call fcn.004de1a0
add esp, 4
lea ecx, [esp + 0xe4]
mov dword [esp + 0x78], esi
push ecx
mov dword [esp + 0x80], esi
mov dword [esp + 0x84], esi
call fcn.004dea48
add esp, 4
cmp al, 0xff
mov byte [esp + 0x44], al
jb 0x41d240
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 0xd
mov ecx, esp
mov dword [esp + 0x74], esp
push 6
push 0x50fa14
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0x2fc], 4
call fcn.004caf10
jmp 0x41cf91
mov eax, 1
mov dword [esp + 0x40], eax
mov dword [esp + 0x4c], eax
xor esi, esi
cmp word [esp + 0x40], si
jne 0x41d61a
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x50fa0c
call fcn.004be240
mov ecx, dword [0x5200b4]
call fcn.004d0800
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x50fa04
call fcn.004be240
mov ecx, dword [0x5200b4]
call fcn.004d0980
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x50f9d4
call fcn.004be240
mov ecx, dword [0x5200b4]
call fcn.004d0980
mov edx, dword [esp + 0x44]
lea eax, [esp + 0xe4]
and edx, 0xff
push edx
push 0x50f930
push eax
call fcn.004de8d6
add esp, 8
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x50f5c0
call fcn.004be240
sub esp, 0x10
lea edx, [esp + 0x53]
mov ecx, esp
mov dword [esp + 0x78], esp
lea eax, [esp + 0xf8]
push edx
push eax
mov byte [esp + 0x308], 0xe
call fcn.00413bf0
push ecx
mov byte [esp + 0x304], 0xf
mov ecx, esp
mov dword [esp + 0x80], esp
push 6
push 0x50f988
call fcn.004be240
mov ecx, dword [0x5200b4]
mov byte [esp + 0x304], 4
call fcn.004d0d40
mov ecx, dword [0x5200b4]
call fcn.004d0f50
push 0xa
mov edi, eax
call fcn.004bb3e0
movsx eax, di
add esp, 4
sub eax, esi
je 0x41d366
dec eax
je 0x41e1bd
jmp 0x41d24d
push 0xff
lea ecx, [esp + 0xe8]
push 0x50f930
push ecx
call fcn.004de8d6
mov dl, byte [esp + 0x4b]
push ecx
mov ebp, esp
lea edi, [esp + 0xf4]
or ecx, 0xffffffff
xor eax, eax
mov byte [ebp], dl
mov dword [ebp + 4], esi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], esi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x48], esp
mov ebx, ecx
push 1
push ebx
mov ecx, ebp
call fcn.004144a0
test al, al
je 0x41d3dd
mov edi, dword [ebp + 4]
mov ecx, ebx
mov eax, ecx
lea esi, [esp + 0xf4]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ebp, dword [ebp + 4]
add ebp, ebx
xor esi, esi
mov byte [ebp], 0
sub esp, 0x10
lea edx, [esp + 0x83]
mov ecx, esp
mov dword [esp + 0x84], esp
push edx
push 0x50f8e4
mov byte [esp + 0x314], 0x10
call fcn.00413bf0
sub esp, 0x10
lea eax, [esp + 0x4b]
mov ecx, esp
mov dword [esp + 0x98], esp
push eax
push 0x50f9a8
mov byte [esp + 0x324], 0x11
call fcn.00413bf0
sub esp, 0x10
lea edx, [esp + 0xb1]
mov ecx, esp
mov dword [esp + 0x9c], esp
push edx
push 0x520010
mov byte [esp + 0x334], 0x12
call fcn.00413bf0
sub esp, 0x10
mov byte [esp + 0x33c], 0x13
mov edi, esp
mov dword [esp + 0x80], esp
push ecx
mov ecx, esp
mov dword [esp + 0x64], esp
push 6
push 0x50f9a0
call fcn.004be240
push edi
call fcn.004cfca0
sub esp, 8
mov byte [esp + 0x34c], 0x14
mov edi, esp
mov dword [esp + 0x70], esp
push ecx
mov ecx, esp
mov dword [esp + 0x74], esp
push 6
push 0x50f9a0
call fcn.004be240
push edi
call fcn.004cfca0
add esp, 8
lea eax, [esp + 0x11c]
mov ecx, 0x5200a8
mov byte [esp + 0x34c], 4
push eax
call fcn.004cb120
mov edx, dword [0x4f73d0]
mov cx, word [eax]
push edx
add eax, 4
mov word [esp + 0x20], cx
push esi
push eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x2f8], 0x15
call fcn.00413e90
mov eax, dword [esp + 0xc4]
mov byte [esp + 0x2ec], 4
cmp eax, esi
je 0x41d515
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41d50c
cmp al, 0xff
je 0x41d50c
dec al
mov byte [ecx], al
jmp 0x41d515
push ecx
call fcn.004de1a0
add esp, 4
lea ecx, [esp + 0x1c]
mov dword [esp + 0xc4], esi
mov dword [esp + 0xc8], esi
mov dword [esp + 0xcc], esi
call fcn.004c48d0
cmp ax, 2
je 0x41d24d
lea eax, [esp + 0x74]
lea ecx, [esp + 0x1c]
push eax
call fcn.004ca4a0
mov edi, dword [eax + 4]
cmp edi, esi
jne 0x41d557
mov edi, 0x4f7480
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0xe4]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x78]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor esi, esi
cmp eax, esi
je 0x41d5a2
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41d599
cmp al, 0xff
je 0x41d599
dec al
mov byte [ecx], al
jmp 0x41d5a2
push ecx
call fcn.004de1a0
add esp, 4
lea ecx, [esp + 0xe4]
mov dword [esp + 0x78], esi
push ecx
mov dword [esp + 0x80], esi
mov dword [esp + 0x84], esi
call fcn.004dea48
add esp, 4
cmp al, 0xff
mov byte [esp + 0x44], al
jb 0x41d240
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 0x16
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x50fa14
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0x2fc], 4
call fcn.004caf10
xor esi, esi
jmp 0x41d366
cmp word [esp + 0x4c], si
je 0x41d65d
mov dl, byte [esp + 0x44]
mov ecx, dword [esp + 0x48]
lea eax, [esp + 0x14]
mov dword [esp + 0x4c], esi
push eax
push 0x50fd44
mov byte [0x50fd4a], dl
call fcn.0041b6a0
test ax, ax
jle 0x41e23c
push 0xa
mov dword [esp + 0x44], 1
call fcn.004bb3e0
add esp, 4
mov cl, byte [esp + 0x44]
lea edx, [esp + 0x14]
mov byte [0x50fd52], cl
mov ecx, dword [esp + 0x48]
push edx
push 0x50fd4c
call fcn.0041b6a0
cmp ax, si
jge 0x41d6cb
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 0x18
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x50f970
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0x2fc], 4
call fcn.004caf10
mov dword [esp + 0x40], esi
jmp 0x41d24d
jne 0x41d6fb
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 0x19
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x50f9bc
jmp 0x41d6ab
lea ecx, [esp + 0x14]
call fcn.004be660
cmp ax, 0xa
jl 0x41d72b
lea ecx, [esp + 0x14]
call fcn.004be660
movsx ecx, ax
sub ecx, 7
mov eax, 0x55555556
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
mov edi, edx
jmp 0x41d72d
xor edi, edi
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x50fa0c
call fcn.004be240
mov ecx, dword [0x5200b4]
call fcn.004d0800
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x50fa04
call fcn.004be240
mov ecx, dword [0x5200b4]
call fcn.004d0980
movsx edi, di
xor bl, bl
xor ebp, ebp
cmp edi, esi
jle 0x41d7af
lea ecx, [ebp + ebp*2 + 7]
push ecx
lea ecx, [esp + 0x18]
call fcn.004be4c0
cmp al, 0x25
je 0x41d78e
inc ebp
cmp ebp, edi
jl 0x41d775
jmp 0x41d7af
push esi
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x50fb04
mov bl, 1
call fcn.004be240
mov ecx, dword [0x5200b4]
call fcn.004d0980
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x50f9d4
call fcn.004be240
mov ecx, dword [0x5200b4]
call fcn.004d0980
mov edx, dword [esp + 0x44]
lea eax, [esp + 0xe4]
and edx, 0xff
push edx
push 0x50f930
push eax
call fcn.004de8d6
add esp, 8
mov ecx, esp
mov dword [esp + 0x14], esp
push 6
push 0x50f5c0
call fcn.004be240
sub esp, 0x10
lea edx, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x44], esp
lea eax, [esp + 0xf8]
push edx
push eax
mov byte [esp + 0x308], 0x1a
call fcn.00413bf0
push ecx
mov byte [esp + 0x304], 0x1b
mov ecx, esp
mov dword [esp + 0x50], esp
push 6
push 0x50f988
call fcn.004be240
mov ecx, dword [0x5200b4]
mov byte [esp + 0x304], 4
call fcn.004d0d40
mov ebp, dword [esp + 0x48]
xor esi, esi
test edi, edi
jle 0x41d929
lea ecx, [esp + 0x34]
lea edx, [esp + 0x1e4]
push ecx
lea eax, [esi + esi*2 + 9]
push edx
push eax
lea ecx, [esp + 0x20]
call fcn.004be4c0
lea ecx, [esi + esi*2 + 8]
push eax
push ecx
lea ecx, [esp + 0x24]
call fcn.004be4c0
lea edx, [esi + esi*2 + 7]
push eax
push edx
lea ecx, [esp + 0x28]
call fcn.004be4c0
push eax
mov ecx, ebp
call fcn.0047ef10
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004be1b0
lea ecx, [esp + 0x38]
call fcn.004be4d0
push ecx
lea edx, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call fcn.004be1b0
sub esp, 0x10
lea eax, [esp + 0x76]
mov ecx, esp
mov dword [esp + 0x44], esp
lea edx, [esp + 0x1f8]
push eax
push edx
mov byte [esp + 0x308], 0x1c
call fcn.00413bf0
push ecx
mov byte [esp + 0x304], 0x1d
mov ecx, esp
mov dword [esp + 0x50], esp
push 6
push 0x50f980
call fcn.004be240
mov ecx, dword [0x5200b4]
mov byte [esp + 0x304], 4
call fcn.004d0d40
inc esi
cmp esi, edi
jl 0x41d863
mov ecx, dword [0x5200b4]
call fcn.004d0f50
push 2
mov esi, eax
call fcn.004bb3e0
add esp, 4
test bl, bl
movsx eax, si
je 0x41dd49
xor esi, esi
sub eax, esi
je 0x41d9db
dec eax
je 0x41d964
dec eax
je 0x41e190
jmp 0x41d24d
mov al, byte [esp + 0x44]
lea ecx, [esp + 0x14]
push ecx
push 0x50fd5c
mov ecx, ebp
mov byte [0x50fd62], al
call fcn.0041b6a0
movsx eax, ax
cmp eax, esi
jle 0x41e31a
cmp eax, 0x7f
jne 0x41d24d
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x50fa0c
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 0x26
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x510054
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0x2fc], 4
call fcn.004caf10
jmp 0x41d24d
push 0xff
lea edx, [esp + 0xe8]
push 0x50f930
push edx
call fcn.004de8d6
mov al, byte [esp + 0x6e]
push ecx
mov ebp, esp
lea edi, [esp + 0xf4]
or ecx, 0xffffffff
mov dword [esp + 0x20], esp
mov byte [ebp], al
xor eax, eax
mov dword [ebp + 4], eax
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
mov ecx, ebp
push ebx
call fcn.004144a0
test al, al
je 0x41da50
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
lea esi, [esp + 0xf4]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 8], ebx
mov ebp, dword [ebp + 4]
add ebp, ebx
mov byte [ebp], 0
sub esp, 0x10
lea eax, [esp + 0x93]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
push 0x50f8e4
mov byte [esp + 0x314], 0x1e
call fcn.00413bf0
sub esp, 0x10
lea edx, [esp + 0xa2]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
push 0x50f9a8
mov byte [esp + 0x324], 0x1f
call fcn.00413bf0
sub esp, 0x10
lea eax, [esp + 0x9b]
mov ecx, esp
mov dword [esp + 0xa4], esp
push eax
push 0x520010
mov byte [esp + 0x334], 0x20
call fcn.00413bf0
sub esp, 0x10
mov byte [esp + 0x33c], 0x21
mov esi, esp
mov dword [esp + 0xb8], esp
push ecx
mov ecx, esp
mov dword [esp + 0xb0], esp
push 6
push 0x50f9a0
call fcn.004be240
push esi
call fcn.004cfca0
sub esp, 8
mov byte [esp + 0x34c], 0x22
mov esi, esp
mov dword [esp + 0xbc], esp
push ecx
mov ecx, esp
mov dword [esp + 0xc0], esp
push 6
push 0x50f9a0
call fcn.004be240
push esi
call fcn.004cfca0
add esp, 8
lea ecx, [esp + 0x130]
mov byte [esp + 0x34c], 4
push ecx
mov ecx, 0x5200a8
call fcn.004cb120
mov dx, word [eax]
mov ecx, dword [0x4f73d0]
lea esi, [eax + 4]
mov word [esp + 0x1c], dx
mov byte [esp + 0x2ec], 0x23
mov eax, dword [esi + 8]
mov ebp, eax
cmp ecx, ebp
jae 0x41db5d
mov ebp, ecx
lea edx, [esp + 0x20]
cmp edx, esi
jne 0x41db82
push ecx
push ebp
lea ecx, [esp + 0x28]
call fcn.00414360
xor ebx, ebx
lea ecx, [esp + 0x20]
push ebx
push ebx
call fcn.00414360
jmp 0x41dc0d
xor ebx, ebx
cmp ebp, ebx
jbe 0x41dbd1
cmp ebp, eax
jne 0x41dbd1
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x41db98
mov eax, 0x4f7480
cmp byte [eax - 1], 0xfe
jae 0x41dbd1
push 1
lea ecx, [esp + 0x24]
call fcn.00414090
mov eax, dword [esi + 4]
cmp eax, ebx
jne 0x41dbb5
mov eax, 0x4f7480
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 8]
mov dword [esp + 0x28], ecx
mov esi, dword [esi + 0xc]
mov dword [esp + 0x2c], esi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x41dc0d
push 1
push ebp
lea ecx, [esp + 0x28]
call fcn.004144a0
test al, al
je 0x41dc0d
mov esi, dword [esi + 4]
cmp esi, ebx
jne 0x41dbed
mov esi, 0x4f7480
mov edi, dword [esp + 0x24]
mov ecx, ebp
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x28], ebp
mov byte [ecx + ebp], 0
mov eax, dword [esp + 0xd8]
mov byte [esp + 0x2ec], 4
cmp eax, ebx
je 0x41dc3d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41dc34
cmp al, 0xff
je 0x41dc34
dec al
mov byte [ecx], al
jmp 0x41dc3d
push ecx
call fcn.004de1a0
add esp, 4
lea ecx, [esp + 0x1c]
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], ebx
mov dword [esp + 0xe0], ebx
call fcn.004c48d0
cmp ax, 2
je 0x41d24d
lea edx, [esp + 0x98]
lea ecx, [esp + 0x1c]
push edx
call fcn.004ca4a0
mov edi, dword [eax + 4]
xor ebx, ebx
cmp edi, ebx
jne 0x41dc84
mov edi, 0x4f7480
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0xe4]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x9c]
and ecx, 3
cmp eax, ebx
rep movsb byte es:[edi], byte [esi]
je 0x41dcd0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41dcc7
cmp al, 0xff
je 0x41dcc7
dec al
mov byte [ecx], al
jmp 0x41dcd0
push ecx
call fcn.004de1a0
add esp, 4
lea ecx, [esp + 0xe4]
mov dword [esp + 0x9c], ebx
push ecx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
call fcn.004dea48
add esp, 4
cmp al, 0xff
mov byte [esp + 0x44], al
jb 0x41d240
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 0x24
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x50fa14
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0x2fc], 4
call fcn.004caf10
jmp 0x41d9db
sub eax, 0
je 0x41dd5a
dec eax
je 0x41e20c
jmp 0x41d24d
push 0xff
lea edx, [esp + 0xe8]
push 0x50f930
push edx
call fcn.004de8d6
mov al, byte [esp + 0x67]
push ecx
mov ebp, esp
xor esi, esi
lea edi, [esp + 0xf4]
or ecx, 0xffffffff
mov byte [ebp], al
xor eax, eax
mov dword [ebp + 4], esi
mov dword [ebp + 8], esi
mov dword [ebp + 0xc], esi
mov dword [esp + 0x20], esp
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
mov ecx, ebp
call fcn.00415050
cmp eax, ebx
jae 0x41ddad
call fcn.004de1ab
mov ecx, dword [ebp + 4]
cmp ecx, esi
je 0x41ddd2
mov al, byte [ecx - 1]
test al, al
je 0x41ddd2
cmp al, 0xff
je 0x41ddd2
cmp ebx, esi
jne 0x41ddf6
dec al
push esi
mov byte [ecx - 1], al
mov ecx, ebp
call fcn.00414090
jmp 0x41de25
cmp ebx, esi
jne 0x41dde1
push 1
mov ecx, ebp
call fcn.00414090
jmp 0x41de25
mov eax, dword [ebp + 0xc]
cmp eax, 0x1f
ja 0x41dded
cmp eax, ebx
jae 0x41ddfe
push 1
mov ecx, ebp
call fcn.00414090
push ebx
mov ecx, ebp
call fcn.00415060
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
lea esi, [esp + 0xf4]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 4]
mov dword [ebp + 8], ebx
add ebx, eax
xor esi, esi
mov byte [ebx], 0
sub esp, 0x10
lea eax, [esp + 0x8d]
mov ecx, esp
mov dword [esp + 0x50], esp
push eax
push 0x50f8e4
mov byte [esp + 0x314], 0x28
call fcn.00413bf0
sub esp, 0x10
lea edx, [esp + 0x9e]
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
push 0x50f9a8
mov byte [esp + 0x324], 0x29
call fcn.00413bf0
sub esp, 0x10
lea eax, [esp + 0xaf]
mov ecx, esp
mov dword [esp + 0xa4], esp
push eax
push 0x520010
mov byte [esp + 0x334], 0x2a
call fcn.00413bf0
sub esp, 0x10
mov byte [esp + 0x33c], 0x2b
mov edi, esp
mov dword [esp + 0xb8], esp
push ecx
mov ecx, esp
mov dword [esp + 0xb0], esp
push 6
push 0x50f9a0
call fcn.004be240
push edi
call fcn.004cfca0
sub esp, 8
mov byte [esp + 0x34c], 0x2c
mov edi, esp
mov dword [esp + 0xbc], esp
push ecx
mov ecx, esp
mov dword [esp + 0xc0], esp
push 6
push 0x50f9a0
call fcn.004be240
push edi
call fcn.004cfca0
add esp, 8
lea ecx, [esp + 0x108]
mov byte [esp + 0x34c], 4
push ecx
mov ecx, 0x5200a8
call fcn.004cb120
mov dx, word [eax]
mov ebx, dword [0x4f73d0]
lea edi, [eax + 4]
mov word [esp + 0x1c], dx
mov byte [esp + 0x2ec], 0x2d
mov eax, dword [edi + 8]
mov ebp, eax
cmp ebx, ebp
jae 0x41df32
mov ebp, ebx
lea ecx, [esp + 0x20]
cmp ecx, edi
jne 0x41dfa1
cmp dword [esp + 0x28], ebp
jae 0x41df45
call fcn.004de3d7
lea ecx, [esp + 0x20]
call fcn.00415170
mov eax, dword [esp + 0x28]
sub eax, ebp
cmp eax, ebx
jae 0x41df5a
mov ebx, eax
cmp ebx, esi
jbe 0x41df93
mov edx, dword [esp + 0x24]
sub eax, ebx
add ebp, edx
push eax
lea ecx, [ebx + ebp]
push ecx
push ebp
call fcn.004dea60
mov edi, dword [esp + 0x34]
add esp, 0xc
sub edi, ebx
lea ecx, [esp + 0x20]
push esi
push edi
call fcn.004144a0
test al, al
je 0x41df93
push edi
lea ecx, [esp + 0x24]
call fcn.00414480
lea ecx, [esp + 0x20]
call fcn.00415170
jmp 0x41e054
cmp ebp, esi
jbe 0x41e014
cmp ebp, eax
jne 0x41e014
mov eax, dword [edi + 4]
cmp eax, esi
jne 0x41dfb5
mov eax, 0x4f7480
cmp byte [eax - 1], 0xfe
jae 0x41e014
mov eax, dword [esp + 0x24]
cmp eax, esi
je 0x41dfe0
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41dfd7
cmp al, 0xff
je 0x41dfd7
dec al
mov byte [ecx], al
jmp 0x41dfe0
push ecx
call fcn.004de1a0
add esp, 4
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov eax, dword [edi + 4]
cmp eax, esi
jne 0x41dff8
mov eax, 0x4f7480
mov dword [esp + 0x24], eax
mov ecx, dword [edi + 8]
mov dword [esp + 0x28], ecx
mov edi, dword [edi + 0xc]
mov dword [esp + 0x2c], edi
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x41e054
push 1
push ebp
lea ecx, [esp + 0x28]
call fcn.004144a0
test al, al
je 0x41e054
mov edi, dword [edi + 4]
cmp edi, esi
mov esi, 0x4f7480
je 0x41e032
mov esi, edi
mov edi, dword [esp + 0x24]
mov ecx, ebp
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x28], ebp
xor esi, esi
mov byte [ecx + ebp], 0
mov eax, dword [esp + 0xb0]
mov byte [esp + 0x2ec], 4
cmp eax, esi
je 0x41e084
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41e07b
cmp al, 0xff
je 0x41e07b
dec al
mov byte [ecx], al
jmp 0x41e084
push ecx
call fcn.004de1a0
add esp, 4
lea ecx, [esp + 0x1c]
mov dword [esp + 0xb0], esi
mov dword [esp + 0xb4], esi
mov dword [esp + 0xb8], esi
call fcn.004c48d0
cmp ax, 2
je 0x41d24d
lea edx, [esp + 0x84]
lea ecx, [esp + 0x1c]
push edx
call fcn.004ca4a0
mov edi, dword [eax + 4]
test edi, edi
jne 0x41e0c9
mov edi, 0x4f7480
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0xe4]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x88]
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor esi, esi
cmp eax, esi
je 0x41e117
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41e10e
cmp al, 0xff
je 0x41e10e
dec al
mov byte [ecx], al
jmp 0x41e117
push ecx
call fcn.004de1a0
add esp, 4
lea ecx, [esp + 0xe4]
mov dword [esp + 0x88], esi
push ecx
mov dword [esp + 0x90], esi
mov dword [esp + 0x94], esi
call fcn.004dea48
add esp, 4
cmp al, 0xff
mov byte [esp + 0x44], al
jb 0x41d240
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 0x2e
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x50fa14
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0x2fc], 4
call fcn.004caf10
jmp 0x41dd5a
cmp word [esp + 0x40], si
je 0x41e1bd
mov dl, byte [esp + 0x44]
mov ecx, dword [esp + 0x48]
lea eax, [esp + 0x14]
mov byte [0x50fd5a], dl
push eax
push 0x50fd54
call fcn.0041b6a0
test ax, ax
jle 0x41e2aa
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ec], 3
call fcn.004be2e0
lea ecx, [esp + 0x54]
mov byte [esp + 0x2ec], 2
call fcn.004be2e0
mov eax, dword [esp + 0x24]
xor esi, esi
cmp eax, esi
je 0x41e401
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41e3f8
cmp al, 0xff
je 0x41e3f8
dec al
mov byte [ecx], al
jmp 0x41e401
cmp word [esp + 0x40], 0
je 0x41e1bd
mov cl, byte [esp + 0x44]
lea edx, [esp + 0x14]
mov byte [0x50fd5a], cl
mov ecx, dword [esp + 0x48]
push edx
push 0x50fd54
call fcn.0041b6a0
test ax, ax
jle 0x41e388
jmp 0x41e1bd
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 0x17
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x50f970
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0x2fc], 4
call fcn.004caf10
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ec], 3
call fcn.004be2e0
lea ecx, [esp + 0x54]
mov byte [esp + 0x2ec], 2
call fcn.004be2e0
mov eax, dword [esp + 0x24]
jmp 0x41e1e5
xor esi, esi
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 0x27
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x50f970
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0x2fc], 4
call fcn.004caf10
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ec], 3
call fcn.004be2e0
lea ecx, [esp + 0x54]
mov byte [esp + 0x2ec], 2
call fcn.004be2e0
mov eax, dword [esp + 0x24]
jmp 0x41e1e5
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 0x25
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x50f970
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0x2fc], 4
call fcn.004caf10
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ec], 3
call fcn.004be2e0
lea ecx, [esp + 0x54]
mov byte [esp + 0x2ec], 2
call fcn.004be2e0
mov eax, dword [esp + 0x24]
jmp 0x41e1e5
xor esi, esi
push esi
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x50f76c
call fcn.004be240
push ecx
mov byte [esp + 0x2fc], 0x2f
mov ecx, esp
mov dword [esp + 0x40], esp
push 6
push 0x50f970
call fcn.004be240
mov ecx, 0x5200a8
mov byte [esp + 0x2fc], 4
call fcn.004caf10
lea ecx, [esp + 0x34]
mov byte [esp + 0x2ec], 3
call fcn.004be2e0
lea ecx, [esp + 0x54]
mov byte [esp + 0x2ec], 2
call fcn.004be2e0
mov eax, dword [esp + 0x24]
jmp 0x41e1e5
push ecx
call fcn.004de1a0
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], esi
mov byte [esp + 0x2ec], 0
call fcn.004be2e0
lea ecx, [esp + 0x50]
mov dword [esp + 0x2ec], 0xffffffff
call fcn.004be2e0
mov ecx, dword [esp + 0x2e4]
pop edi
pop esi
pop ebp
mov ax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x2e0
ret