Function at 0x41c8a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x456c59
mov eax, dword fs:[0]
push eax
sub esp, 0x298
mov eax, dword [0x467334]
xor eax, esp
mov dword [esp + 0x290], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x467334]
xor eax, esp
push eax
lea eax, [esp + 0x2ac]
mov dword fs:[0], eax
mov eax, dword [esp + 0x2bc]
lea ecx, [esp + 0x24]
push ecx
mov dword [esp + 0x24], eax
call fcn.0042a300
xor ebx, ebx
mov dword [esp + 0x2b4], ebx
call fcn.00403c90
test eax, eax
je 0x41c90c
call fcn.00418130
call fcn.00418200
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
lea ebp, [esp + 0x124]
mov dword [esp + 0x38], esp
cmp eax, 0x10
jb 0x41c937
mov ecx, dword [edi]
jmp 0x41c939
mov ecx, edi
cmp ecx, 0x45c1f8
ja 0x41c974
cmp eax, 0x10
jb 0x41c94a
mov ecx, dword [edi]
jmp 0x41c94c
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45c1f8
jbe 0x41c974
cmp eax, 0x10
jb 0x41c960
mov edi, dword [edi]
push 0x24
mov eax, 0x45c1f8
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x41c9b7
cmp eax, 0x24
jae 0x41c986
mov ecx, dword [esi + 0x14]
push ecx
push 0x24
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, 0x10
jb 0x41c992
mov eax, dword [edi]
jmp 0x41c994
mov eax, edi
push 0x24
push 0x45c1f8
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
cmp dword [esi + 0x18], 0x10
mov dword [esi + 0x14], 0x24
jb 0x41c9b4
mov edi, dword [edi]
mov byte [edi + 0x24], bl
lea esi, [esp + 0x74]
call fcn.00401900
mov edx, ebp
mov ecx, eax
mov byte [esp + 0x2b4], 1
call fcn.00401a70
mov byte [esp + 0x2b4], 2
cmp dword [eax + 0x18], 0x10
jb 0x41c9e4
mov ecx, dword [eax + 4]
jmp 0x41c9e7
lea ecx, [eax + 4]
mov eax, ecx
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x41ca05
sub eax, esi
push eax
push ecx
lea ecx, [esp + 0x148]
call fcn.004033f0
sub esp, 0x18
mov byte [esp + 0x2cc], 3
mov edx, esp
mov dword [esp + 0x34], esp
lea eax, [esp + 0x158]
push eax
push edx
call fcn.004295f0
lea ecx, [esp + 0x54]
push ecx
sub esp, 0x1c
mov esi, esp
mov byte [esp + 0x2ec], 4
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
mov ebp, pe_nt_image_headers32
mov dword [esp + 0x50], esp
cmp eax, ebp
jb 0x41ca70
mov ecx, dword [edi]
jmp 0x41ca72
mov ecx, edi
cmp ecx, 0x45c220
ja 0x41caab
cmp eax, ebp
jb 0x41ca82
mov ecx, dword [edi]
jmp 0x41ca84
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45c220
jbe 0x41caab
cmp eax, ebp
jb 0x41ca97
mov edi, dword [edi]
push 0xb
mov eax, 0x45c220
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x41caec
cmp eax, 0xb
jae 0x41cabd
mov ecx, dword [esi + 0x14]
push ecx
push 0xb
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x41cac8
mov eax, dword [edi]
jmp 0x41caca
mov eax, edi
push 0xb
push 0x45c220
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
mov dword [esi + 0x14], 0xb
cmp dword [esi + 0x18], ebp
jb 0x41cae9
mov edi, dword [edi]
mov byte [edi + 0xb], bl
lea esi, [esp + 0xe8]
call fcn.00401900
mov ecx, eax
mov byte [esp + 0x2d0], 5
call fcn.00401db0
mov byte [esp + 0x2cc], 6
cmp dword [eax + 0x18], ebp
jb 0x41cb19
mov eax, dword [eax + 4]
jmp 0x41cb1c
add eax, 4
push eax
lea esi, [esp + 0x140]
mov byte [esp + 0x2d0], 8
call fcn.0042f020
add esp, 0x1c
lea edx, [esp + 0x15c]
push edx
mov edi, eax
mov byte [esp + 0x2b8], 9
call fcn.0042f0c0
lea eax, [esp + 0x15c]
push eax
lea edi, [esp + 0x28]
mov byte [esp + 0x2b8], 0xa
call fcn.0042a4c0
lea esi, [esp + 0x15c]
call fcn.0041dec0
mov eax, dword [esp + 0x134]
cmp eax, ebx
je 0x41cb9f
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x138]
push ecx
call fcn.00405d80
mov edx, dword [esp + 0x138]
add esp, 4
push edx
call fcn.0043c853
add esp, 4
mov eax, dword [esp + 0x128]
push eax
mov dword [esp + 0x138], ebx
mov dword [esp + 0x13c], ebx
mov dword [esp + 0x140], ebx
call fcn.0043c853
add esp, 4
cmp dword [esp + 0x54], ebp
jb 0x41cbd7
mov ecx, dword [esp + 0x40]
push ecx
call fcn.0043c853
add esp, 4
mov edi, 0xf
lea esi, [esp + 0xb0]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.00429050
cmp dword [esp + 0x158], ebp
jb 0x41cc0d
mov edx, dword [esp + 0x144]
push edx
call fcn.0043c853
add esp, 4
mov dword [esp + 0x158], edi
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
cmp dword [esp + 0x120], ebp
jb 0x41cc3b
mov eax, dword [esp + 0x10c]
push eax
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x58]
mov dword [esp + 0x120], edi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429050
push ebx
call fcn.0043cb47
sub esp, 0x18
mov esi, esp
mov dword [esi + 0x18], edi
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
lea ebp, [esp + 0x124]
mov dword [esp + 0x34], esp
cmp eax, 0x10
jb 0x41cc8d
mov ecx, dword [edi]
jmp 0x41cc8f
mov ecx, edi
cmp ecx, 0x45c22c
ja 0x41ccca
cmp eax, 0x10
jb 0x41cca0
mov ecx, dword [edi]
jmp 0x41cca2
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45c22c
jbe 0x41ccca
cmp eax, 0x10
jb 0x41ccb6
mov edi, dword [edi]
push 0x2f
mov eax, 0x45c22c
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x41cd0d
cmp eax, 0x2f
jae 0x41ccdc
mov ecx, dword [esi + 0x14]
push ecx
push 0x2f
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, 0x10
jb 0x41cce8
mov eax, dword [edi]
jmp 0x41ccea
mov eax, edi
push 0x2f
push 0x45c22c
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
cmp dword [esi + 0x18], 0x10
mov dword [esi + 0x14], 0x2f
jb 0x41cd0a
mov edi, dword [edi]
mov byte [edi + 0x2f], bl
lea esi, [esp + 0x74]
call fcn.00401900
mov edx, ebp
mov ecx, eax
mov byte [esp + 0x2b4], 0xb
call fcn.00401a70
mov byte [esp + 0x2b4], 0xc
cmp dword [eax + 0x18], 0x10
jb 0x41cd3a
mov ecx, dword [eax + 4]
jmp 0x41cd3d
lea ecx, [eax + 4]
mov eax, ecx
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
lea esi, [eax + 1]
jmp 0x41cd60
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x41cd60
sub eax, esi
push eax
push ecx
lea ecx, [esp + 0x148]
call fcn.004033f0
lea edx, [esp + 0x140]
push edx
push ecx
lea eax, [esp + 0x2c]
mov byte [esp + 0x2bc], 0xd
call fcn.0042a450
mov ebx, eax
add esp, 4
add ebx, 0x1c
call fcn.004297d0
mov ebp, pe_nt_image_headers32
cmp dword [esp + 0x158], ebp
jb 0x41cdbc
mov eax, dword [esp + 0x144]
push eax
call fcn.0043c853
add esp, 4
xor ebx, ebx
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
cmp dword [esp + 0x120], ebp
jb 0x41cdf0
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.0043c853
add esp, 4
mov edi, 0xf
lea esi, [esp + 0x58]
mov dword [esp + 0x120], edi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429050
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], edi
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
mov dword [esp + 0x34], esp
cmp eax, ebp
jb 0x41ce39
mov ecx, dword [edi]
jmp 0x41ce3b
mov ecx, edi
cmp ecx, 0x45c25c
ja 0x41ce74
cmp eax, ebp
jb 0x41ce4b
mov ecx, dword [edi]
jmp 0x41ce4d
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45c25c
jbe 0x41ce74
cmp eax, ebp
jb 0x41ce60
mov edi, dword [edi]
push 0x38
mov eax, 0x45c25c
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x41ceb5
cmp eax, 0x38
jae 0x41ce86
mov ecx, dword [esi + 0x14]
push ecx
push 0x38
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x41ce91
mov eax, dword [edi]
jmp 0x41ce93
mov eax, edi
push 0x38
push 0x45c25c
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
mov dword [esi + 0x14], 0x38
cmp dword [esi + 0x18], ebp
jb 0x41ceb2
mov edi, dword [edi]
mov byte [edi + 0x38], bl
lea esi, [esp + 0x74]
call fcn.00401900
lea edx, [esp + 0x108]
mov ecx, eax
mov byte [esp + 0x2b4], 0xe
call fcn.00401a70
mov byte [esp + 0x2b4], 0xf
cmp dword [eax + 0x18], ebp
jb 0x41cee6
mov edx, dword [eax + 4]
jmp 0x41cee9
lea edx, [eax + 4]
mov eax, edx
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x41cf07
sub eax, esi
push eax
push edx
lea ecx, [esp + 0x148]
call fcn.004033f0
lea edx, [esp + 0x140]
push edx
push ecx
lea eax, [esp + 0x2c]
mov byte [esp + 0x2bc], pe_nt_image_headers32
call fcn.0042a450
mov ebx, eax
add esp, 4
add ebx, 0x1c
call fcn.004297d0
mov ebp, pe_nt_image_headers32
cmp dword [esp + 0x158], ebp
jb 0x41cf63
mov eax, dword [esp + 0x144]
push eax
call fcn.0043c853
add esp, 4
xor ebx, ebx
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
cmp dword [esp + 0x120], ebp
jb 0x41cf97
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.0043c853
add esp, 4
mov edi, 0xf
lea esi, [esp + 0x58]
mov dword [esp + 0x120], edi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429050
lea edx, [esp + 0x3c]
push edx
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], edi
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
mov dword [esp + 0x38], esp
cmp eax, ebp
jb 0x41cfe5
mov ecx, dword [edi]
jmp 0x41cfe7
mov ecx, edi
cmp ecx, 0x45c298
ja 0x41d020
cmp eax, ebp
jb 0x41cff7
mov ecx, dword [edi]
jmp 0x41cff9
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45c298
jbe 0x41d020
cmp eax, ebp
jb 0x41d00c
mov edi, dword [edi]
push 2
mov eax, 0x45c298
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x41d061
cmp eax, 2
jae 0x41d032
mov ecx, dword [esi + 0x14]
push ecx
push 2
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x41d03d
mov eax, dword [edi]
jmp 0x41d03f
mov eax, edi
push 2
push 0x45c298
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
mov dword [esi + 0x14], 2
cmp dword [esi + 0x18], ebp
jb 0x41d05e
mov edi, dword [edi]
mov byte [edi + 2], bl
lea esi, [esp + 0xd0]
call fcn.00401900
mov ecx, eax
mov byte [esp + 0x2b8], 0x11
call fcn.00401db0
mov byte [esp + 0x2b4], 0x12
cmp dword [eax + 0x18], ebp
jb 0x41d08e
mov ecx, dword [eax + 4]
jmp 0x41d091
lea ecx, [eax + 4]
mov eax, ecx
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
lea esi, [eax + 1]
nop
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x41d0b0
sub eax, esi
push eax
push ecx
lea ecx, [esp + 0x148]
call fcn.004033f0
sub esp, 0x18
mov byte [esp + 0x2cc], 0x13
mov edx, esp
mov dword [esp + 0x30], esp
lea eax, [esp + 0x158]
push eax
push edx
call fcn.004295f0
lea ecx, [esp + 0x120]
push ecx
sub esp, 0x1c
mov esi, esp
mov byte [esp + 0x2ec], 0x14
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
mov dword [esp + 0x54], esp
cmp eax, ebp
jb 0x41d119
mov ecx, dword [edi]
jmp 0x41d11b
mov ecx, edi
cmp ecx, 0x45c29c
ja 0x41d154
cmp eax, ebp
jb 0x41d12b
mov ecx, dword [edi]
jmp 0x41d12d
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45c29c
jbe 0x41d154
cmp eax, ebp
jb 0x41d140
mov edi, dword [edi]
push 7
mov eax, 0x45c29c
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x41d195
cmp eax, 7
jae 0x41d166
mov ecx, dword [esi + 0x14]
push ecx
push 7
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x41d171
mov eax, dword [edi]
jmp 0x41d173
mov eax, edi
push 7
push 0x45c29c
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
mov dword [esi + 0x14], 7
cmp dword [esi + 0x18], ebp
jb 0x41d192
mov edi, dword [edi]
mov byte [edi + 7], bl
lea esi, [esp + 0x90]
call fcn.00401900
push eax
mov byte [esp + 0x2d4], 0x15
call fcn.00401c70
mov byte [esp + 0x2cc], 0x16
cmp dword [eax + 0x18], ebp
jb 0x41d1c1
mov eax, dword [eax + 4]
jmp 0x41d1c4
add eax, 4
push eax
lea esi, [esp + 0x140]
mov byte [esp + 0x2d0], 0x18
call fcn.0042f020
add esp, 0x1c
lea edx, [esp + 0x15c]
push edx
mov edi, eax
mov byte [esp + 0x2b8], 0x19
call fcn.0042f0c0
lea eax, [esp + 0x15c]
push eax
lea edi, [esp + 0x28]
mov byte [esp + 0x2b8], 0x1a
call fcn.0042a4c0
lea esi, [esp + 0x15c]
call fcn.0041dec0
lea esi, [esp + 0x124]
call fcn.0041de70
cmp dword [esp + 0x120], ebp
jb 0x41d23d
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.0043c853
add esp, 4
mov edi, 0xf
lea esi, [esp + 0x58]
mov dword [esp + 0x120], edi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
call fcn.00429050
cmp dword [esp + 0x158], ebp
jb 0x41d279
mov edx, dword [esp + 0x144]
push edx
call fcn.0043c853
add esp, 4
mov dword [esp + 0x158], edi
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
cmp dword [esp + 0x54], ebp
jb 0x41d2a1
mov eax, dword [esp + 0x40]
push eax
call fcn.0043c853
add esp, 4
lea esi, [esp + 0xb0]
mov dword [esp + 0x54], edi
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
mov byte [esp + 0x2b4], bl
call fcn.00429050
lea ecx, [esp + 0x108]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xd
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x45c2a4
mov byte [ecx + 4], bl
call fcn.004033f0
lea esi, [esp + 0x78]
call fcn.00401900
push eax
mov byte [esp + 0x2bc], 0x1b
call fcn.00401c70
mov byte [esp + 0x2b4], 0x1c
cmp dword [eax + 0x18], ebp
jb 0x41d30f
mov eax, dword [eax + 4]
jmp 0x41d312
add eax, 4
push eax
lea ecx, [esp + 0x128]
call fcn.00402c00
lea edx, [esp + 0x124]
push edx
push ecx
lea eax, [esp + 0x2c]
mov byte [esp + 0x2bc], 0x1d
call fcn.0042a450
mov ebx, eax
add esp, 4
add ebx, 0x1c
call fcn.004297d0
mov edi, pe_nt_image_headers32
cmp dword [esp + 0x13c], edi
jb 0x41d364
mov eax, dword [esp + 0x128]
push eax
call fcn.0043c853
add esp, 4
xor ebx, ebx
mov ebp, 0xf
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
cmp dword [esp + 0x120], edi
jb 0x41d399
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x58]
mov dword [esp + 0x120], ebp
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429050
lea edx, [esp + 0x3c]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 2
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0x45b60c
mov byte [ecx + 4], bl
call fcn.004033f0
lea esi, [esp + 0xd0]
call fcn.00401900
mov ecx, eax
mov byte [esp + 0x2b8], 0x1e
call fcn.00401b50
mov byte [esp + 0x2b4], 0x1f
cmp dword [eax + 0x18], edi
jb 0x41d40e
mov eax, dword [eax + 4]
jmp 0x41d411
add eax, 4
push eax
lea ecx, [esp + 0x128]
call fcn.00402c00
sub esp, 0x18
mov byte [esp + 0x2cc], 0x20
mov eax, esp
mov dword [esp + 0x30], esp
lea ecx, [esp + 0x13c]
push ecx
push eax
call fcn.004295f0
sub esp, 0x1c
mov byte [esp + 0x2e8], 0x21
mov ecx, esp
mov dword [esp + 0x50], esp
push 0xa
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0x45c2b4
lea edi, [esp + 0x144]
mov byte [ecx + 4], bl
call fcn.004033f0
lea esi, [esp + 0x8c]
call fcn.00401900
mov edx, edi
mov ecx, eax
mov byte [esp + 0x2cc], 0x22
call fcn.00401a70
mov byte [esp + 0x2cc], 0x23
cmp dword [eax + 0x18], 0x10
jb 0x41d49a
mov eax, dword [eax + 4]
jmp 0x41d49d
add eax, 4
push eax
lea esi, [esp + 0x15c]
mov byte [esp + 0x2d0], 0x25
call fcn.0042f020
add esp, 0x1c
lea edx, [esp + 0x15c]
push edx
mov edi, eax
mov byte [esp + 0x2b8], 0x26
call fcn.0042f0c0
lea eax, [esp + 0x15c]
push eax
lea edi, [esp + 0x28]
mov byte [esp + 0x2b8], 0x27
call fcn.0042a4c0
lea esi, [esp + 0x15c]
call fcn.0041dec0
lea esi, [esp + 0x140]
call fcn.0041de70
mov edi, pe_nt_image_headers32
cmp dword [esp + 0x120], edi
jb 0x41d51b
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x58]
mov dword [esp + 0x120], ebp
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
call fcn.00429050
cmp dword [esp + 0x13c], edi
jb 0x41d552
mov edx, dword [esp + 0x128]
push edx
call fcn.0043c853
add esp, 4
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
cmp dword [esp + 0x54], edi
jb 0x41d57a
mov eax, dword [esp + 0x40]
push eax
call fcn.0043c853
add esp, 4
lea esi, [esp + 0xb0]
mov dword [esp + 0x54], ebp
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
mov byte [esp + 0x2b4], bl
call fcn.00429050
lea ecx, [esp + 0x108]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xa
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0x45c2c0
mov byte [ecx + 4], bl
call fcn.004033f0
lea esi, [esp + 0x78]
call fcn.00401900
mov ecx, eax
mov byte [esp + 0x2b8], 0x28
call fcn.00401b50
mov byte [esp + 0x2b4], 0x29
cmp dword [eax + 0x18], edi
jb 0x41d5e9
mov eax, dword [eax + 4]
jmp 0x41d5ec
add eax, 4
push eax
lea ecx, [esp + 0x128]
call fcn.00402c00
lea edx, [esp + 0x124]
push edx
push ecx
lea eax, [esp + 0x2c]
mov byte [esp + 0x2bc], 0x2a
call fcn.0042a450
mov ebx, eax
add esp, 4
add ebx, 0x1c
call fcn.004297d0
mov ebp, pe_nt_image_headers32
cmp dword [esp + 0x13c], ebp
jb 0x41d63e
mov eax, dword [esp + 0x128]
push eax
call fcn.0043c853
add esp, 4
xor ebx, ebx
mov edi, 0xf
mov dword [esp + 0x13c], edi
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
cmp dword [esp + 0x120], ebp
jb 0x41d673
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x58]
mov dword [esp + 0x120], edi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429050
lea edx, [esp + 0x108]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x15
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push str.Sy__a
mov byte [ecx + 4], bl
call fcn.004033f0
lea esi, [esp + 0x78]
call fcn.00401900
mov ecx, eax
mov byte [esp + 0x2b8], 0x2b
call fcn.00401db0
mov byte [esp + 0x2b4], 0x2c
cmp dword [eax + 0x18], ebp
jb 0x41d6e8
mov eax, dword [eax + 4]
jmp 0x41d6eb
add eax, 4
push eax
lea ecx, [esp + 0x128]
call fcn.00402c00
lea eax, [esp + 0x124]
push eax
push ecx
lea eax, [esp + 0x2c]
mov byte [esp + 0x2bc], 0x2d
call fcn.0042a450
mov ebx, eax
add esp, 4
add ebx, 0x1c
call fcn.004297d0
mov edi, pe_nt_image_headers32
cmp dword [esp + 0x13c], edi
jb 0x41d73d
mov ecx, dword [esp + 0x128]
push ecx
call fcn.0043c853
add esp, 4
xor ebx, ebx
mov ebp, 0xf
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
cmp dword [esp + 0x120], edi
jb 0x41d772
mov edx, dword [esp + 0x10c]
push edx
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x58]
mov dword [esp + 0x120], ebp
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429050
lea eax, [esp + 0x3c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 2
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0x45c2e4
mov byte [ecx + 4], bl
call fcn.004033f0
lea esi, [esp + 0xd0]
call fcn.00401900
push eax
mov byte [esp + 0x2bc], 0x2e
call fcn.00401c70
mov byte [esp + 0x2b4], 0x2f
cmp dword [eax + 0x18], edi
jb 0x41d7e6
mov eax, dword [eax + 4]
jmp 0x41d7e9
add eax, 4
push eax
lea ecx, [esp + 0x128]
call fcn.00402c00
sub esp, 0x18
mov byte [esp + 0x2cc], 0x30
mov ecx, esp
mov dword [esp + 0x30], esp
lea edx, [esp + 0x13c]
push edx
push ecx
call fcn.004295f0
lea eax, [esp + 0x120]
push eax
sub esp, 0x1c
mov byte [esp + 0x2ec], 0x31
mov ecx, esp
mov dword [esp + 0x54], esp
push ebp
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0x45c2e8
mov byte [ecx + 4], bl
call fcn.004033f0
lea esi, [esp + 0x90]
call fcn.00401900
mov ecx, eax
mov byte [esp + 0x2d0], 0x32
call fcn.00401db0
mov byte [esp + 0x2cc], 0x33
cmp dword [eax + 0x18], edi
jb 0x41d86f
mov eax, dword [eax + 4]
jmp 0x41d872
add eax, 4
push eax
lea esi, [esp + 0x15c]
mov byte [esp + 0x2d0], 0x35
call fcn.0042f020
add esp, 0x1c
lea ecx, [esp + 0x15c]
push ecx
mov edi, eax
mov byte [esp + 0x2b8], 0x36
call fcn.0042f0c0
lea edx, [esp + 0x15c]
push edx
lea edi, [esp + 0x28]
mov byte [esp + 0x2b8], 0x37
call fcn.0042a4c0
lea esi, [esp + 0x15c]
call fcn.0041dec0
lea esi, [esp + 0x140]
call fcn.0041de70
mov edi, pe_nt_image_headers32
cmp dword [esp + 0x120], edi
jb 0x41d8f0
mov eax, dword [esp + 0x10c]
push eax
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x58]
mov dword [esp + 0x120], ebp
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
call fcn.00429050
cmp dword [esp + 0x13c], edi
jb 0x41d927
mov ecx, dword [esp + 0x128]
push ecx
call fcn.0043c853
add esp, 4
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
cmp dword [esp + 0x54], edi
jb 0x41d94f
mov edx, dword [esp + 0x40]
push edx
call fcn.0043c853
add esp, 4
lea esi, [esp + 0xb0]
mov dword [esp + 0x54], ebp
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], bl
call fcn.00429050
lea eax, [esp + 0x108]
push eax
sub esp, 0x1c
mov dword [esp + 0x2d4], ebx
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xd
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0x45c2f8
mov byte [ecx + 4], bl
call fcn.004033f0
lea esi, [esp + 0x78]
call fcn.00401900
mov ecx, eax
mov byte [esp + 0x2b8], 0x3a
call fcn.00401db0
mov byte [esp + 0x2b4], 0x3b
cmp dword [eax + 0x18], edi
jb 0x41d9be
mov eax, dword [eax + 4]
jmp 0x41d9c1
add eax, 4
push eax
lea ecx, [esp + 0x128]
call fcn.00402c00
lea ecx, [esp + 0x124]
push ecx
push ecx
lea eax, [esp + 0x2c]
mov byte [esp + 0x2bc], 0x3c
call fcn.0042a450
mov ebx, eax
add esp, 4
add ebx, 0x1c
call fcn.004297d0
mov esi, pe_nt_image_headers32
cmp dword [esp + 0x13c], esi
jb 0x41da13
mov edx, dword [esp + 0x128]
push edx
call fcn.0043c853
add esp, 4
xor ebx, ebx
mov dword [esp + 0x13c], 0xf
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
cmp dword [esp + 0x120], esi
jb 0x41da47
mov eax, dword [esp + 0x10c]
push eax
call fcn.0043c853
add esp, 4
lea esi, [esp + 0x58]
mov dword [esp + 0x120], 0xf
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429050
mov ecx, dword [esp + 0x34]
sub ecx, dword [esp + 0x30]
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
xor ebp, ebp
add ecx, edx
je 0x41de2c
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
push ebp
lea eax, [esp + 0x28]
mov byte [esp + 0x2b8], 0x3d
lea esi, [esp + 0x144]
call fcn.0042a3b0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00402c40
call fcn.0041df20
cmp eax, ebx
jge 0x41db60
push ebp
lea eax, [esp + 0x28]
call fcn.0042a3b0
mov ecx, eax
call fcn.004030b0
push eax
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x38], esp
push 0x21
mov ecx, str.___
lea edi, [esp + 0x12c]
call fcn.00404720
lea esi, [esp + 0x78]
call fcn.00401900
mov edx, edi
mov ecx, eax
mov byte [esp + 0x2b8], 0x3e
call fcn.00401a70
mov ecx, eax
mov byte [esp + 0x2b8], 0x3f
call fcn.004030b0
mov edx, dword [esp + 0x24]
push eax
push 1
push edx
call fcn.0041c440
add esp, 0x10
lea ecx, [esp + 0x108]
call fcn.00402c70
lea esi, [esp + 0x58]
call fcn.00429050
jmp 0x41ddf7
sub esp, 0x1c
lea eax, [esp + 0x15c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00402c40
call fcn.0041c740
mov esi, eax
call fcn.00417b10
test eax, eax
je 0x41db8b
call fcn.00418740
cmp esi, ebx
jge 0x41dc0d
lea ecx, [esp + 0x140]
call fcn.004030b0
push eax
push ecx
push ebp
lea eax, [esp + 0x30]
call fcn.0042a3b0
add esp, 4
mov ecx, eax
call fcn.004030b0
push eax
lea ecx, [esp + 0x110]
push ecx
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x40], esp
push 0x22
mov ecx, 0x45c32c
call fcn.00404720
lea esi, [esp + 0x80]
call fcn.00401900
push eax
mov byte [esp + 0x2c4], 0x40
call fcn.00401c70
mov ecx, eax
mov byte [esp + 0x2bc], 0x41
call fcn.004030b0
mov edx, dword [esp + 0x28]
push eax
push 1
push edx
call fcn.0041c440
add esp, 0x14
jmp 0x41db46
push ebp
lea eax, [esp + 0x28]
mov dword [esp + 0x20], ebx
call fcn.0042a3b0
add eax, 0x1c
call fcn.004052e0
test eax, eax
jbe 0x41ddf7
mov esi, ebx
push esi
push ecx
push ebp
lea eax, [esp + 0x30]
call fcn.0042a3b0
add esp, 4
add eax, 0x1c
call fcn.00405300
push eax
lea eax, [esp + 0x144]
push eax
lea edi, [esp + 0x110]
call fcn.00405ac0
mov dword [esp + 0x144], 0xf
mov dword [esp + 0x140], ebx
mov byte [esp + 0x130], bl
sub esp, 0x14
mov byte [esp + 0x2d0], 0x45
mov edx, edi
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00402c40
call fcn.0041c740
cmp eax, ebx
jge 0x41dcb4
lea ecx, [esp + 0x124]
call fcn.00402c70
mov ecx, edi
mov byte [esp + 0x2b4], 0x3d
call fcn.00402c70
jmp 0x41ddd8
push 0x103
lea eax, [esp + 0x1a1]
push ebx
push eax
mov byte [esp + 0x1a8], bl
call fcn.00444d20
add esp, 0xc
push 0x104
lea ecx, [esp + 0x1a0]
push ecx
lea ecx, [esp + 0x110]
call fcn.004030b0
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
cmp eax, ebx
je 0x41dd1e
cmp eax, 0x104
jae 0x41dd1e
lea edx, [esp + 0x19c]
push edx
lea ecx, [esp + 0x128]
call fcn.00402ca0
call fcn.00417ad0
test eax, eax
je 0x41dd1e
call fcn.00418270
mov eax, 0xf
mov dword [esp + 0x174], eax
mov dword [esp + 0x170], ebx
mov byte [esp + 0x160], bl
mov dword [esp + 0x190], eax
mov dword [esp + 0x18c], ebx
mov byte [esp + 0x17c], bl
push 0xffffffffffffffff
push ebx
lea eax, [esp + 0x110]
push eax
lea ecx, [esp + 0x168]
mov byte [esp + 0x2c0], 0x46
call fcn.00402ea0
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x12c]
push ecx
lea ecx, [esp + 0x184]
call fcn.00402ea0
mov edi, dword [esp + 0x20]
mov dword [esp + 0x194], ebx
add edi, 0x2c0
lea ebx, [esp + 0x15c]
mov dword [esp + 0x198], 1
call fcn.00429950
mov esi, ebx
call fcn.00439de0
lea ecx, [esp + 0x124]
call fcn.00402c70
lea ecx, [esp + 0x108]
mov byte [esp + 0x2b4], 0x3d
call fcn.00402c70
mov esi, dword [esp + 0x1c]
xor ebx, ebx
inc esi
push ebp
lea eax, [esp + 0x28]
mov dword [esp + 0x20], esi
call fcn.0042a3b0
add eax, 0x1c
call fcn.004052e0
cmp esi, eax
jb 0x41dc2d
lea ecx, [esp + 0x140]
mov byte [esp + 0x2b4], bl
call fcn.00402c70
mov ecx, dword [esp + 0x34]
sub ecx, dword [esp + 0x30]
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
cmp ebp, eax
jb 0x41da91
lea esi, [esp + 0x24]
call fcn.0042a360
xor eax, eax
mov ecx, dword [esp + 0x2ac]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x290]
xor ecx, esp
call fcn.0043c2d9
add esp, 0x2a4
ret 4