Function at 0x418c80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x3f4
push ebx
xor ebx, ebx
push ebp
mov ecx, 2
mov eax, 1
push esi
push edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], ebx
mov word [esp + 0x38], bx
mov word [esp + 0x3a], bx
mov word [esp + 0x3c], bx
mov word [esp + 0x3e], bx
mov word [esp + 0x40], bx
mov word [esp + 0x42], bx
mov word [esp + 0x44], bx
mov word [esp + 0x46], bx
mov word [esp + 0x48], bx
mov word [esp + 0x4a], bx
mov word [esp + 0x4c], bx
mov word [esp + 0x4e], bx
mov word [esp + 0x50], bx
mov word [esp + 0x52], bx
mov word [esp + 0x54], bx
mov word [esp + 0x56], bx
mov word [esp + 0x58], bx
mov word [esp + 0x5a], bx
mov word [esp + 0x5c], bx
mov word [esp + 0x5e], bx
mov word [esp + 0x60], bx
mov word [esp + 0x62], bx
mov word [esp + 0x64], bx
mov word [esp + 0x66], bx
mov word [esp + 0x68], bx
mov word [esp + 0x6a], bx
mov word [esp + 0x6c], bx
mov word [esp + 0x6e], bx
mov word [esp + 0x70], bx
mov word [esp + 0x72], bx
mov word [esp + 0x74], bx
mov word [esp + 0x76], bx
mov word [esp + 0x78], bx
mov word [esp + 0x7a], bx
mov word [esp + 0x7c], bx
mov word [esp + 0x7e], bx
mov word [esp + 0x80], bx
mov word [esp + 0x82], bx
mov word [esp + 0x84], bx
mov word [esp + 0x86], bx
mov word [esp + 0x88], bx
mov word [esp + 0x8a], bx
mov word [esp + 0x8c], bx
mov word [esp + 0x8e], bx
mov word [esp + 0x90], bx
mov word [esp + 0x92], bx
mov word [esp + 0x94], bx
mov word [esp + 0x96], bx
mov word [esp + 0x98], bx
mov word [esp + 0x9a], bx
mov word [esp + 0x9c], bx
mov word [esp + 0x9e], bx
mov word [esp + 0xa0], bx
mov word [esp + 0xa2], bx
mov word [esp + 0xa4], bx
mov word [esp + 0xa6], bx
mov word [esp + 0xa8], bx
mov word [esp + 0xaa], bx
mov word [esp + 0xac], bx
mov word [esp + 0xae], bx
mov word [esp + 0xb0], bx
mov word [esp + 0xb2], bx
mov word [esp + 0xb4], bx
mov word [esp + 0xb6], bx
mov word [esp + 0xb8], ax
mov word [esp + 0xba], ax
mov word [esp + 0xbc], bx
mov word [esp + 0xbe], bx
mov word [esp + 0xc0], bx
mov word [esp + 0xc2], bx
mov word [esp + 0xc4], cx
mov word [esp + 0xc6], bx
mov word [esp + 0xc8], bx
mov word [esp + 0xca], bx
mov word [esp + 0xcc], bx
mov word [esp + 0xce], bx
mov word [esp + 0xd0], ax
mov word [esp + 0xd2], ax
mov word [esp + 0xd4], bx
mov word [esp + 0xd6], bx
mov word [esp + 0xd8], cx
mov word [esp + 0xda], bx
mov word [esp + 0xdc], bx
mov word [esp + 0xde], bx
mov word [esp + 0xe0], bx
mov word [esp + 0xe2], bx
mov word [esp + 0xe4], bx
mov word [esp + 0xe6], bx
mov word [esp + 0xe8], bx
mov word [esp + 0xea], bx
mov word [esp + 0xec], bx
mov word [esp + 0xee], bx
mov word [esp + 0xf0], bx
mov word [esp + 0xf2], bx
mov word [esp + 0xf4], bx
mov word [esp + 0xf6], bx
mov word [esp + 0xf8], bx
mov word [esp + 0xfa], bx
mov word [esp + 0xfc], bx
mov word [esp + 0xfe], bx
mov word [esp + 0x100], bx
mov word [esp + 0x102], bx
mov word [esp + 0x104], bx
mov word [esp + 0x106], bx
mov word [esp + 0x108], bx
mov word [esp + 0x10a], bx
mov word [esp + 0x10c], bx
mov word [esp + 0x10e], bx
mov word [esp + 0x110], bx
mov word [esp + 0x112], bx
mov word [esp + 0x114], bx
mov word [esp + 0x116], bx
mov word [esp + 0x118], bx
mov word [esp + 0x11a], bx
mov word [esp + 0x11c], bx
mov word [esp + 0x11e], bx
mov word [esp + 0x120], bx
mov word [esp + 0x122], bx
mov word [esp + 0x124], bx
mov word [esp + 0x126], bx
mov word [esp + 0x128], bx
mov word [esp + 0x12a], bx
mov word [esp + 0x12c], bx
mov word [esp + 0x12e], bx
mov word [esp + 0x130], bx
mov word [esp + 0x132], bx
mov word [esp + 0x134], bx
mov word [esp + 0x136], bx
mov word [esp + 0x138], bx
mov word [esp + 0x13a], bx
mov word [esp + 0x13c], bx
mov word [esp + 0x13e], bx
mov word [esp + 0x140], bx
mov word [esp + 0x142], bx
mov word [esp + 0x144], bx
mov word [esp + 0x146], bx
mov word [esp + 0x148], bx
mov word [esp + 0x14a], bx
mov word [esp + 0x14c], bx
mov word [esp + 0x14e], bx
mov word [esp + 0x150], bx
mov word [esp + 0x152], bx
mov word [esp + 0x154], bx
mov word [esp + 0x156], bx
mov word [esp + 0x158], bx
mov word [esp + 0x15a], bx
mov word [esp + 0x15c], bx
mov word [esp + 0x15e], bx
mov word [esp + 0x160], bx
mov word [esp + 0x162], bx
mov word [esp + 0x164], bx
mov word [esp + 0x166], bx
mov word [esp + 0x168], bx
mov word [esp + 0x16a], bx
mov word [esp + 0x16c], bx
mov word [esp + 0x16e], bx
mov word [esp + 0x170], bx
mov word [esp + 0x172], bx
mov word [esp + 0x174], bx
mov word [esp + 0x176], bx
mov word [esp + 0x178], bx
mov word [esp + 0x17a], bx
mov word [esp + 0x17c], bx
mov word [esp + 0x17e], bx
mov word [esp + 0x180], bx
mov word [esp + 0x182], bx
mov word [esp + 0x184], bx
mov word [esp + 0x186], bx
mov word [esp + 0x188], bx
mov word [esp + 0x18a], bx
mov word [esp + 0x18c], bx
mov word [esp + 0x18e], bx
mov word [esp + 0x190], bx
mov word [esp + 0x192], bx
mov word [esp + 0x194], bx
mov word [esp + 0x196], ax
mov word [esp + 0x198], ax
mov word [esp + 0x19a], bx
mov word [esp + 0x19c], bx
mov word [esp + 0x19e], bx
mov word [esp + 0x1a0], bx
mov word [esp + 0x1a2], cx
mov word [esp + 0x1a4], bx
mov word [esp + 0x1a6], bx
mov word [esp + 0x1a8], bx
mov word [esp + 0x1aa], bx
mov word [esp + 0x1ac], bx
mov word [esp + 0x1ae], ax
mov word [esp + 0x1b0], ax
mov word [esp + 0x1b2], bx
mov word [esp + 0x1b4], bx
mov word [esp + 0x1b6], cx
mov word [esp + 0x1b8], bx
mov word [esp + 0x1ba], bx
mov word [esp + 0x1bc], bx
mov word [esp + 0x1be], bx
mov word [esp + 0x1c0], bx
mov word [esp + 0x1c2], bx
mov word [esp + 0x1c4], bx
mov word [esp + 0x1c6], bx
mov word [esp + 0x1c8], bx
mov word [esp + 0x1ca], bx
mov word [esp + 0x1cc], bx
mov word [esp + 0x1ce], bx
mov word [esp + 0x1d0], bx
mov word [esp + 0x1d2], bx
mov word [esp + 0x1d4], bx
mov word [esp + 0x1d6], bx
mov word [esp + 0x1d8], bx
mov word [esp + 0x1da], bx
mov word [esp + 0x1dc], bx
mov word [esp + 0x1de], bx
mov word [esp + 0x1e0], bx
mov word [esp + 0x1e2], bx
mov word [esp + 0x1e4], bx
mov word [esp + 0x1e6], bx
mov word [esp + 0x1e8], bx
mov word [esp + 0x1ea], bx
mov word [esp + 0x1ec], bx
mov word [esp + 0x1ee], bx
mov word [esp + 0x1f0], bx
mov word [esp + 0x1f2], bx
mov word [esp + 0x1f4], bx
mov word [esp + 0x1f6], bx
mov word [esp + 0x1f8], bx
mov word [esp + 0x1fa], bx
mov word [esp + 0x1fc], bx
mov word [esp + 0x1fe], bx
mov word [esp + 0x200], bx
mov word [esp + 0x202], bx
mov word [esp + 0x204], bx
mov word [esp + 0x206], bx
mov word [esp + 0x208], bx
mov word [esp + 0x20a], bx
mov word [esp + 0x20c], bx
mov word [esp + 0x20e], bx
mov word [esp + 0x210], bx
mov word [esp + 0x212], bx
mov word [esp + 0x214], bx
mov word [esp + 0x216], bx
mov word [esp + 0x218], bx
mov word [esp + 0x21a], bx
mov word [esp + 0x21c], bx
mov word [esp + 0x21e], bx
mov word [esp + 0x220], bx
mov word [esp + 0x222], bx
mov word [esp + 0x224], bx
mov word [esp + 0x226], bx
mov word [esp + 0x228], bx
mov word [esp + 0x22a], ax
mov word [esp + 0x22c], ax
mov word [esp + 0x22e], bx
mov word [esp + 0x230], bx
mov word [esp + 0x232], bx
mov word [esp + 0x234], bx
mov word [esp + 0x236], cx
mov word [esp + 0x238], bx
mov word [esp + 0x23a], bx
mov word [esp + 0x23c], bx
mov word [esp + 0x23e], bx
mov word [esp + 0x240], bx
mov word [esp + 0x242], bx
mov word [esp + 0x244], bx
mov word [esp + 0x246], bx
mov word [esp + 0x248], bx
mov word [esp + 0x24a], bx
mov word [esp + 0x24c], bx
mov word [esp + 0x24e], bx
mov word [esp + 0x250], bx
mov word [esp + 0x252], bx
mov word [esp + 0x254], bx
mov word [esp + 0x256], bx
mov word [esp + 0x258], bx
mov word [esp + 0x25a], bx
mov word [esp + 0x25c], bx
mov word [esp + 0x25e], bx
mov word [esp + 0x260], bx
mov word [esp + 0x262], bx
mov word [esp + 0x264], bx
mov word [esp + 0x266], bx
mov word [esp + 0x268], bx
mov word [esp + 0x26a], bx
mov word [esp + 0x26c], bx
mov word [esp + 0x26e], bx
mov word [esp + 0x270], bx
mov word [esp + 0x272], bx
mov word [esp + 0x274], bx
mov word [esp + 0x276], bx
mov word [esp + 0x278], bx
mov word [esp + 0x27a], bx
mov word [esp + 0x27c], bx
mov word [esp + 0x27e], bx
mov word [esp + 0x280], bx
mov word [esp + 0x282], bx
mov word [esp + 0x284], bx
mov word [esp + 0x286], bx
mov word [esp + 0x288], bx
mov word [esp + 0x28a], bx
mov word [esp + 0x28c], bx
mov word [esp + 0x28e], bx
mov word [esp + 0x290], bx
mov word [esp + 0x292], bx
mov word [esp + 0x294], bx
mov word [esp + 0x296], bx
mov word [esp + 0x298], bx
mov word [esp + 0x29a], bx
mov word [esp + 0x29c], bx
mov word [esp + 0x29e], bx
mov word [esp + 0x2a0], bx
mov word [esp + 0x2a2], bx
mov word [esp + 0x2a4], bx
mov word [esp + 0x2a6], bx
mov word [esp + 0x2a8], bx
mov word [esp + 0x2aa], bx
mov word [esp + 0x2ac], bx
mov word [esp + 0x2ae], bx
mov word [esp + 0x2b0], bx
mov word [esp + 0x2b2], bx
mov word [esp + 0x2b4], bx
mov word [esp + 0x2b6], bx
mov word [esp + 0x2b8], bx
mov word [esp + 0x2ba], bx
mov word [esp + 0x2bc], bx
mov word [esp + 0x2be], bx
mov word [esp + 0x2c0], bx
mov word [esp + 0x2c2], bx
mov word [esp + 0x2c4], bx
mov word [esp + 0x2c6], bx
mov word [esp + 0x2c8], bx
mov word [esp + 0x2ca], bx
mov word [esp + 0x2cc], bx
mov word [esp + 0x2ce], bx
mov word [esp + 0x2d0], bx
mov word [esp + 0x2d2], bx
mov word [esp + 0x2d4], bx
mov word [esp + 0x2d6], bx
mov word [esp + 0x2d8], bx
mov word [esp + 0x2da], bx
mov word [esp + 0x2dc], bx
mov word [esp + 0x2de], bx
mov word [esp + 0x2e0], bx
mov word [esp + 0x2e2], bx
mov word [esp + 0x2e4], bx
mov word [esp + 0x2e6], bx
mov word [esp + 0x2e8], bx
mov word [esp + 0x2ea], bx
mov word [esp + 0x2ec], bx
mov word [esp + 0x2ee], bx
mov word [esp + 0x2f0], bx
mov word [esp + 0x2f2], bx
mov word [esp + 0x2f4], bx
mov word [esp + 0x2f6], bx
mov word [esp + 0x2f8], bx
mov word [esp + 0x2fa], bx
mov word [esp + 0x2fc], bx
mov word [esp + 0x2fe], bx
mov word [esp + 0x300], bx
mov word [esp + 0x302], bx
mov word [esp + 0x304], bx
mov word [esp + 0x306], bx
mov word [esp + 0x308], bx
mov word [esp + 0x30a], bx
mov word [esp + 0x30c], bx
mov word [esp + 0x30e], bx
mov word [esp + 0x310], bx
mov word [esp + 0x312], bx
mov word [esp + 0x314], bx
mov word [esp + 0x316], bx
mov word [esp + 0x318], bx
mov word [esp + 0x31a], bx
mov word [esp + 0x31c], bx
mov word [esp + 0x31e], bx
mov word [esp + 0x320], bx
mov word [esp + 0x322], bx
mov word [esp + 0x324], bx
mov word [esp + 0x326], bx
mov word [esp + 0x328], bx
mov word [esp + 0x32a], bx
mov word [esp + 0x32c], bx
mov word [esp + 0x32e], bx
mov word [esp + 0x330], bx
mov word [esp + 0x332], bx
mov word [esp + 0x334], bx
mov word [esp + 0x336], bx
mov word [esp + 0x338], bx
mov word [esp + 0x33a], bx
mov word [esp + 0x33c], bx
mov word [esp + 0x33e], bx
mov word [esp + 0x340], bx
mov word [esp + 0x342], bx
mov word [esp + 0x344], bx
mov word [esp + 0x346], bx
mov word [esp + 0x348], bx
mov word [esp + 0x34a], bx
mov word [esp + 0x34c], bx
mov word [esp + 0x34e], bx
mov word [esp + 0x350], bx
mov word [esp + 0x352], ax
mov word [esp + 0x354], ax
mov word [esp + 0x356], bx
mov word [esp + 0x358], bx
mov word [esp + 0x35a], bx
mov word [esp + 0x35c], bx
mov word [esp + 0x35e], cx
mov word [esp + 0x360], bx
mov word [esp + 0x362], bx
mov word [esp + 0x364], bx
mov word [esp + 0x366], bx
mov word [esp + 0x368], bx
mov word [esp + 0x36a], bx
mov word [esp + 0x36c], bx
mov word [esp + 0x36e], bx
mov word [esp + 0x370], bx
mov word [esp + 0x372], bx
mov word [esp + 0x374], bx
mov word [esp + 0x376], bx
mov word [esp + 0x378], bx
mov word [esp + 0x37a], bx
mov word [esp + 0x37c], bx
mov word [esp + 0x37e], bx
mov word [esp + 0x380], bx
mov word [esp + 0x382], bx
mov word [esp + 0x384], bx
mov word [esp + 0x386], bx
mov word [esp + 0x388], bx
mov word [esp + 0x38a], bx
mov word [esp + 0x38c], bx
mov word [esp + 0x38e], bx
mov word [esp + 0x390], bx
mov word [esp + 0x392], bx
mov word [esp + 0x394], bx
mov word [esp + 0x396], bx
mov word [esp + 0x398], bx
mov word [esp + 0x39a], bx
mov word [esp + 0x39c], bx
mov word [esp + 0x39e], bx
mov word [esp + 0x3a0], bx
mov word [esp + 0x3a2], bx
mov word [esp + 0x3a4], bx
mov word [esp + 0x3a6], bx
mov word [esp + 0x3a8], bx
mov word [esp + 0x3aa], bx
mov word [esp + 0x3ac], bx
mov word [esp + 0x3ae], bx
mov word [esp + 0x3b0], bx
mov word [esp + 0x3b2], bx
mov word [esp + 0x3b4], bx
mov word [esp + 0x3b6], bx
mov word [esp + 0x3b8], bx
mov word [esp + 0x3ba], bx
mov word [esp + 0x3bc], bx
mov word [esp + 0x3be], bx
mov word [esp + 0x3c0], bx
mov word [esp + 0x3c2], bx
mov word [esp + 0x3c4], bx
mov word [esp + 0x3c6], bx
mov word [esp + 0x3c8], bx
mov word [esp + 0x3ca], bx
mov word [esp + 0x3cc], bx
mov word [esp + 0x3ce], bx
mov word [esp + 0x3d0], bx
mov word [esp + 0x3d2], bx
mov word [esp + 0x3d4], bx
mov word [esp + 0x3d6], bx
mov word [esp + 0x3d8], bx
mov word [esp + 0x3da], bx
mov word [esp + 0x3dc], bx
mov word [esp + 0x3de], bx
mov word [esp + 0x3e0], bx
mov word [esp + 0x3e2], bx
mov word [esp + 0x3e4], bx
mov word [esp + 0x3e6], ax
mov word [esp + 0x3e8], ax
mov word [esp + 0x3ea], bx
mov word [esp + 0x3ec], bx
mov word [esp + 0x3ee], bx
mov word [esp + 0x3f0], bx
mov esi, dword [esp + 0x408]
mov ebp, dword [esp + 0x40c]
mov word [esp + 0x3f2], cx
push ebx
mov edi, dword [esi + ebp*4 + 0x20]
mov ecx, dword [esi + 0x10]
mov word [esp + 0x3f8], bx
mov word [esp + 0x3fa], bx
mov eax, dword [edi + 0x14]
mov edx, dword [ecx]
mov dword [esp + 0x1c], eax
mov eax, dword [esi + 8]
add edx, 0x11a80
mov word [esp + 0x3fc], bx
mov ecx, dword [eax]
push edx
add ecx, 0x11a80
push ebx
push ecx
push 0xe
push 0x140
push ebx
push ebx
mov word [esp + 0x41a], 0xffff
mov dword [esp + 0x3c], 0x514
mov dword [esp + 0x30], 8
call fcn.0041ce30
mov eax, dword [edi + 0x1c]
add esp, 0x20
cmp eax, ebx
je 0x419bcf
mov edx, dword [esi + 8]
mov ecx, dword [edx]
mov edx, dword [esi + 0x14]
push ecx
mov ecx, dword [edx]
push ecx
push eax
push 0xe2
push eax
call fcn.004151f0
cdq
sub eax, edx
mov edx, 0xa0
sar eax, 1
add esp, 4
sub edx, eax
push edx
call fcn.00415040
add esp, 0x14
mov eax, dword [esi + 8]
mov edx, dword [0x489dd8]
push ebx
push ebx
mov ecx, dword [eax]
push ebx
push ebx
push ecx
push ebx
push edx
push 0xf0
push 0x140
push ebx
push ebx
call fcn.0041cc70
add esp, 0x2c
push ebp
push esi
call fcn.00418ae0
mov eax, dword [0x489dd4]
mov ecx, dword [0x489dd8]
add esp, 8
mov dword [0x4c3810], eax
mov dword [0x489dd4], ecx
mov dword [0x489dd8], eax
call fcn.0041c910
mov edx, dword [0x489dd4]
push ebx
add edx, 0xfff60000
push edx
call fcn.0041cb90
mov eax, dword [esi + 8]
mov edx, dword [0x489dd8]
add esp, 8
mov ecx, dword [eax]
push ebx
push ebx
push ebx
push ebx
push ecx
push ebx
push edx
push 0xf0
push 0x140
push ebx
push ebx
call fcn.0041cc70
add esp, 0x2c
push ebp
push esi
call fcn.00418ae0
mov eax, dword [0x489dd4]
mov ecx, dword [0x489dd8]
add esp, 8
mov dword [0x4c3810], eax
mov dword [0x489dd4], ecx
mov dword [0x489dd8], eax
call fcn.0041c910
mov edx, dword [0x489dd4]
push ebx
add edx, 0xfff60000
push edx
call fcn.0041cb90
mov al, byte [esp + 0x418]
add esp, 8
test al, 1
je 0x419cb3
mov eax, dword [esi + 0x18]
mov ecx, dword [eax]
push ecx
call fcn.00418bc0
jmp 0x419cc2
test al, 2
je 0x419cc5
mov edx, dword [esi + 0x18]
mov eax, dword [edx]
push eax
call fcn.00418c40
add esp, 4
mov ecx, dword [esi + 0x18]
mov edx, dword [ecx]
push edx
call fcn.0041d050
mov eax, dword [esp + 0x414]
add esp, 4
mov ecx, eax
mov byte [0x4cad20], bl
and ecx, 0x20
and eax, 0x40
mov dword [esp + 0x20], 5
mov dword [esp + 0x3fc], ecx
mov dword [esp + 0x400], eax
push 0x4c384c
push 0x4c37b5
push 0x4c37b4
call fcn.0040da50
mov eax, dword [esp + 0x20]
add esp, 0xc
cmp eax, ebx
jle 0x419db6
cmp dword [edi + 0x1c], ebx
je 0x419d87
mov eax, dword [esi + 0x10]
mov edx, dword [esi + 8]
push ebx
mov ecx, dword [eax]
mov eax, dword [edx]
add ecx, 0x11a80
add eax, 0x11a80
push ecx
push ebx
push eax
push 0xe
push 0x140
push ebx
push ebx
call fcn.0041ce30
mov eax, dword [edi + 0x1c]
add esp, 0x20
cmp eax, ebx
je 0x419d87
mov ecx, dword [esi + 8]
mov edx, dword [ecx]
mov ecx, dword [esi + 0x14]
push edx
mov edx, dword [ecx]
push edx
push eax
push 0xe2
push eax
call fcn.004151f0
cdq
sub eax, edx
mov ecx, 0xa0
sar eax, 1
add esp, 4
sub ecx, eax
push ecx
call fcn.00415040
add esp, 0x14
mov edx, dword [esi + 8]
mov ecx, dword [0x489dd8]
push ebx
push ebx
mov eax, dword [edx]
push ebx
push ebx
push eax
push ebx
push ecx
push 0xf0
push 0x140
push ebx
push ebx
call fcn.0041cc70
mov eax, dword [esp + 0x40]
add esp, 0x2c
dec eax
mov dword [esp + 0x14], eax
cmp dword [esp + 0x3fc], ebx
je 0x419e1b
mov ebp, dword [esp + 0x24]
mov ax, word [esp + ebp*2 + 0x38]
cmp ax, 1
jne 0x419dfc
mov edx, dword [0x4c37bc]
mov eax, dword [0x489dd8]
push ebx
push ebx
push ebx
push ebx
push edx
push 0x90
push eax
push 0x37
push 0xb0
push 0x8c
push 0x5f
call fcn.0041cc70
add esp, 0x2c
jmp 0x419e0a
cmp ax, 2
jne 0x419e0a
mov dword [esp + 0x14], 2
inc ebp
mov dword [esp + 0x24], ebp
cmp word [esp + ebp*2 + 0x38], 0xffff
jne 0x419e1b
mov dword [esp + 0x24], ebx
cmp dword [esp + 0x400], ebx
je 0x419e33
mov eax, dword [esp + 0x1c]
dec eax
mov dword [esp + 0x1c], eax
js 0x41a13b
mov eax, dword [esi + 4]
mov ebp, dword [esi + 8]
mov ecx, dword [esi]
push ebx
mov ebp, dword [ebp]
lea edx, [eax + eax*4]
shl edx, 6
add edx, ecx
push ebx
push ebx
push 0x134
lea edx, [edx + ebp - 0x10]
add ecx, 0xfffffff0
push edx
mov edx, dword [0x489dd8]
push 0x134
push edx
mov edx, 0xf0
sub edx, eax
push edx
push 0xc
push eax
push ecx
call fcn.0041cc70
mov ebp, dword [esp + 0x438]
add esp, 0x2c
push ebp
push esi
call fcn.00418ae0
mov ecx, dword [edi + 0x10]
add esp, 8
mov edx, dword [esi + 0xc]
mov eax, dword [edi + 8]
push ebx
push 1
push ebx
push ecx
mov ecx, dword [esp + 0x20]
mov ecx, dword [edi + ecx*4 + 0x20]
add ecx, dword [edx]
mov edx, 0x140
sub edx, eax
push ecx
mov ecx, dword [0x489dd8]
push edx
mov edx, dword [edi + 0xc]
push ecx
mov ecx, dword [edi]
push edx
mov edx, dword [esi + 4]
push eax
mov eax, dword [edi + 4]
add eax, edx
push eax
mov eax, dword [esi]
add ecx, eax
push ecx
call fcn.0041cc70
mov eax, dword [0x489dd4]
mov edx, dword [0x489dd8]
add esp, 0x2c
mov dword [0x4c3810], eax
mov dword [0x489dd4], edx
mov dword [0x489dd8], eax
call fcn.0041c910
mov eax, dword [0x489dd4]
push ebx
add eax, 0xfff60000
push eax
call fcn.0041cb90
mov eax, dword [esp + 0x20]
add esp, 8
cmp eax, ebx
jge 0x419f25
mov eax, dword [esp + 0x10]
mov ecx, dword [edi + 0x14]
inc eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], eax
cmp dword [edi + eax*4 + 0x20], 0xffffffff
jne 0x419f29
mov dword [esp + 0x10], ebx
jmp 0x419f29
dec dword [esp + 0x18]
cmp dword [0x4c2040], ebx
jge 0x41a130
mov al, byte [esp + 0x410]
test al, 0x10
je 0x419f4c
cmp dword [0x4c384c], ebx
jne 0x41a14d
test al, 0x80
je 0x419fb4
lea edx, [esp + 0x2c]
lea eax, [esp + 0x34]
push edx
lea ecx, [esp + 0x34]
push eax
lea edx, [esp + 0x30]
push ecx
push edx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x3c], ebx
call fcn.0041d1a0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x40]
add esp, 0x10
cmp eax, ebx
je 0x419f90
cmp ecx, ebx
jne 0x41a23b
cmp eax, ebx
jne 0x41a25d
cmp ecx, ebx
jne 0x41a27d
cmp dword [esp + 0x34], ebx
jne 0x41a2a0
cmp dword [esp + 0x2c], ebx
jne 0x41a2c2
test byte [esp + 0x410], 8
je 0x419fed
push ebx
call fcn.0040c670
mov al, byte [0x4cad20]
add esp, 4
cmp al, bl
je 0x419fda
cmp dword [esp + 0x20], ebx
je 0x41a2e5
mov eax, dword [esp + 0x20]
cmp eax, ebx
jle 0x419fed
dec eax
mov byte [0x4cad20], bl
mov dword [esp + 0x20], eax
cmp byte [0x4cac21], bl
jne 0x41a2f8
cmp byte [0x4cac3c], bl
jne 0x41a34d
cmp dword [0x4c384c], ebx
jne 0x41a34d
test byte [esp + 0x410], 4
je 0x41a048
cmp byte [0x4caced], bl
jne 0x41a32d
mov al, byte [0x4c37b4]
cmp al, 1
je 0x41a32d
cmp byte [0x4caceb], bl
jne 0x41a30d
cmp al, 0xff
je 0x41a30d
cmp byte [0x4cacf0], bl
jne 0x41a059
cmp byte [0x4c37b5], 1
jne 0x41a0ae
mov eax, dword [0x4924f4]
push ebx
push eax
push ebx
mov dword [0x4c2040], 5
mov dword [esp + 0x28], 0x514
mov dword [esp + 0x1c], 8
mov dword [esp + 0x20], 2
mov byte [0x4cacf0], bl
call fcn.0041c4a0
mov edi, dword [esi + ebp*4 + 0x24]
add esp, 0xc
inc ebp
cmp edi, 0xffffffff
mov dword [esp + 0x40c], ebp
jne 0x41a0ae
mov edi, dword [esi + 0x20]
xor ebp, ebp
mov dword [esp + 0x40c], ebp
cmp byte [0x4cace8], bl
jne 0x41a0c3
cmp byte [0x4c37b5], 0xff
jne 0x419cfe
mov ecx, dword [0x4924f4]
push ebx
push ecx
push ebx
mov dword [0x4c2040], 5
mov dword [esp + 0x28], 0x514
mov dword [esp + 0x1c], 8
mov dword [esp + 0x20], 2
mov byte [0x4cace8], bl
call fcn.0041c4a0
add esp, 0xc
dec ebp
mov dword [esp + 0x40c], ebp
jns 0x41a127
mov ecx, dword [esi + 0x20]
lea eax, [esi + 0x20]
xor ebp, ebp
cmp ecx, 0xffffffff
je 0x41a11f
mov ecx, dword [eax + 4]
add eax, 4
inc ebp
cmp ecx, 0xffffffff
jne 0x41a113
dec ebp
mov dword [esp + 0x40c], ebp
mov edi, dword [esi + ebp*4 + 0x20]
jmp 0x419cfe
dec dword [0x4c2040]
jmp 0x419cfe
mov ebp, 0xfffffffe
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
mov edx, dword [0x4924f4]
push ebx
push edx
push ebx
mov dword [0x4c2040], 5
call fcn.0041c4a0
mov eax, dword [0x4c384c]
add esp, 0xc
cmp eax, 8
ja 0x41a19b
je 0x41a24b
dec eax
cmp eax, 3
ja case.default.0x41a182
jmp dword [eax*4 + 0x41a37c]
mov ebp, 0xb
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
cmp eax, 0x20
ja 0x41a1cf
je 0x41a1bd
cmp eax, 0x10
jne case.default.0x41a182
mov ebp, 5
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
mov ebp, 6
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
cmp eax, 0x80
ja 0x41a205
je 0x41a1f3
cmp eax, 0x40
jne case.default.0x41a182
mov ebp, 7
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
mov ebp, 8
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
cmp eax, 0x100
je 0x41a229
cmp eax, 0x200
jne case.default.0x41a182
mov ebp, 0xa
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
mov ebp, 9
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
mov eax, dword [0x4924f4]
push ebx
push eax
push ebx
call fcn.0041c4a0
add esp, 0xc
mov ebp, 4
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
mov ecx, dword [0x4924f4]
push ebx
push ecx
push ebx
call fcn.0041c4a0
add esp, 0xc
xor ebp, ebp
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
mov edx, dword [0x4924f4]
push ebx
push edx
push ebx
call fcn.0041c4a0
add esp, 0xc
mov ebp, 1
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
mov eax, dword [0x4924f4]
push ebx
push eax
push ebx
call fcn.0041c4a0
add esp, 0xc
mov ebp, 2
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
mov ecx, dword [0x4924f4]
push ebx
push ecx
push ebx
call fcn.0041c4a0
add esp, 0xc
mov ebp, 3
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
xor edx, edx
mov dl, al
mov ebp, edx
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret
mov dword [0x4c2040], 5
mov byte [0x4cac21], bl
or ebp, 0xffffffff
jmp 0x41a35d
mov ecx, dword [0x4924f4]
push ebx
mov dword [0x4c2040], 5
add ebp, 0x100
mov byte [0x4caceb], bl
push ecx
jmp 0x41a364
mov edx, dword [0x4924f4]
push ebx
mov dword [0x4c2040], 5
add ebp, 0x80
mov byte [0x4caced], bl
push edx
jmp 0x41a364
mov dword [0x4c2040], 5
mov byte [0x4cac3c], bl
mov eax, dword [0x4924f4]
push ebx
push eax
push ebx
call fcn.0041c4a0
add esp, 0xc
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
add esp, 0x3f4
ret