Function at 0x41d670
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x68cdd8]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x40]
cmp eax, dword [ecx + 8]
jbe 0x41de0c
sub esp, 0xc0
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.0041e700
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [0x68dd00], eax
mov dword [0x68dd04], ecx
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0xe0]
mov edx, dword [eax + 0xe4]
mov ebx, dword [esp + 0xc8]
sub ebx, ecx
mov dword [esp + 0x80], ebx
mov ecx, dword [esp + 0xcc]
sbb ecx, edx
mov dword [esp + 0x84], ecx
test ecx, ecx
setg dl
xchg ebp, ebx
sete bl
xchg ebp, ebx
test ebx, ebx
xchg esi, ebx
seta bl
xchg esi, ebx
and esi, ebp
or esi, edx
xchg esi, eax
mov byte [esp + 0x17], al
xchg esi, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x41d716
movsd xmm1, qword [0x5c2290]
jmp 0x41d7af
mov edx, eax
mov eax, ebx
mov ebp, dword [esp + 0xd0]
mov esi, edx
mul ebp
mov dword [esp + 0xa4], eax
mov edi, ebp
imul ebp, ecx
add edx, ebp
sar edi, 0x1f
imul edi, ebx
add edx, edi
mov dword [esp + 0xa0], edx
lea edi, [esi + 0xc0]
mov dword [esp], edi
call fcn.004716f0
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.0045f7c0
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0x98], xmm0
mov ecx, dword [esp + 0xa4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.0045f7c0
movsd xmm0, qword [esp + 0x98]
divsd xmm0, qword [esp + 8]
movsd xmm1, qword [0x5c2290]
addsd xmm1, xmm0
mov eax, dword [esp + 0xc4]
movsd qword [esp + 0x60], xmm1
lea ecx, [eax + 0x68]
mov dword [esp + 0xbc], ecx
mov dword [esp], ecx
call fcn.00471870
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x58]
mov edx, dword [eax + 0x5c]
mov ebx, dword [esp + 8]
cmp dword [esp + 4], ecx
setbe cl
cmp ebx, edx
sete dl
setb bl
and edx, ecx
or ebx, edx
test bl, bl
jne 0x41d9fb
movzx ecx, byte [esp + 0x17]
test cl, cl
jne 0x41d804
xorps xmm0, xmm0
jmp 0x41d89d
mov ecx, eax
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0xd0]
mov ebx, edx
mov ebp, eax
mul edx
mov dword [esp + 0xa4], eax
mov esi, dword [esp + 0x84]
imul esi, ebx
add edx, esi
sar ebx, 0x1f
imul ebp, ebx
add edx, ebp
mov dword [esp + 0xa0], edx
lea ebx, [ecx + 0xd8]
mov dword [esp], ebx
call fcn.004716f0
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.0045f7c0
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0x98], xmm0
mov ecx, dword [esp + 0xa4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.0045f7c0
movsd xmm0, qword [esp + 0x98]
divsd xmm0, qword [esp + 8]
mov eax, dword [esp + 0xc4]
movsd xmm1, qword [esp + 0x60]
addsd xmm0, xmm1
movsd qword [esp + 0x98], xmm0
movsd xmm2, qword [0x5c21b0]
subsd xmm2, xmm1
movsd qword [esp + 0x90], xmm2
lea ecx, [eax + 0xa0]
mov dword [esp + 0xb8], ecx
lea edx, [eax + 0xa8]
mov dword [esp + 0xb4], edx
lea ebx, [eax + 0xb0]
mov dword [esp + 0xb0], ebx
mov dword [esp], ecx
call fcn.004716f0
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp], edx
call fcn.004716f0
mov eax, dword [esp + 4]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
call fcn.004716f0
mov eax, dword [esp + 4]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call fcn.00471870
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x58]
mov edx, dword [eax + 0x5c]
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 8]
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x34]
add esi, edi
mov edi, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
adc edi, eax
mov eax, dword [esp + 0x30]
add esi, eax
mov dword [esp + 0x68], esi
mov eax, dword [esp + 0x54]
adc edi, eax
mov dword [esp + 0x6c], edi
sub ebx, ecx
mov dword [esp], ebx
sbb ebp, edx
mov dword [esp + 4], ebp
call fcn.0045f890
movsd xmm0, qword [esp + 0x98]
mulsd xmm0, qword [esp + 8]
movsd qword [esp + 0x98], xmm0
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
call fcn.0045f7c0
movsd xmm0, qword [esp + 0x90]
mulsd xmm0, qword [esp + 8]
movsd xmm1, qword [esp + 0x98]
divsd xmm1, xmm0
mov eax, dword [esp + 0xc4]
movsd xmm0, qword [eax + 0x20]
movsd qword [eax + 0x20], xmm1
xor ecx, ecx
jmp 0x41da03
add esp, 0xc0
ret
inc ecx
cmp ecx, 4
jge 0x41da20
movsd xmm2, qword [eax + ecx*8 + 0x28]
movsd xmm3, qword [eax + 0x20]
ucomisd xmm2, xmm3
jbe 0x41da02
movsd qword [eax + 0x20], xmm2
jmp 0x41da02
movsd qword [esp + 0x78], xmm1
movsd qword [esp + 0x70], xmm0
lea ecx, [eax + 0x28]
mov dword [esp], ecx
lea ecx, [eax + 0x30]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x18
call fcn.0046d810
movsd xmm0, qword [esp + 0x78]
mov eax, dword [esp + 0xc4]
movsd qword [eax + 0x40], xmm0
mov ecx, dword [0x68d1f8]
test ecx, ecx
jle 0x41de05
call fcn.004368f0
call fcn.004368f0
lea eax, [0x50cce7]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00437150
movsd xmm0, qword [esp + 0x60]
movsd xmm1, qword [0x5c2520]
mulsd xmm0, xmm1
cvttsd2si eax, xmm0
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x50ccee]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00437150
mov dword [esp], 0x19
mov dword [esp + 4], 0
call fcn.00436f70
lea eax, [0x50d912]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00437150
call fcn.00436950
mov eax, dword [esp + 0xc4]
lea ecx, [eax + 0x80]
mov dword [esp + 0xac], ecx
lea edx, [eax + 0x90]
mov dword [esp + 0xa8], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
call fcn.004716f0
mov eax, dword [esp + 4]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp], edx
call fcn.004716f0
mov eax, dword [esp + 4]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
call fcn.004716f0
mov eax, dword [esp + 4]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xac]
mov dword [esp], edx
call fcn.00471870
mov eax, dword [esp + 4]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call fcn.00471870
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x78]
mov dword [esp + 0xa4], ecx
mov edx, dword [eax + 0x7c]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 4]
mov dword [esp + 0x1c], ebx
mov ebp, dword [esp + 8]
mov dword [esp + 0x40], ebp
call fcn.004368f0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, str.___M__yi_____:_LlLtLuMn25M___________n__s____Pn___n__n___n__t__0b0x0X0o__nosnilMayUTCEET0001CATWATEATGMTHSTHDT_03_04_05ESTCSTCDTMSTMDT_02EDTASTADTPSTPDTNSTNDT06030407IST0908IDT12PKT11KST05JST10_01_11_12_08_0913CETBSTMSK_0614_mStdDltEOFintmapptr...125625NaNfinobjgc__:_gp___in__n___n_____P__MPC___end____:_n___pc__Gcgodnstcpudpsm9adxaesshaavxfmanettrueJuneJulyEESTSASTAKSTAKDTACSTACDTAESTAEDTAWSTCESTNZSTNZDTbindboolint8uintchanfunccallkind_on_3125_InfInffilesyncpipeallgallprootitabsbrkidledead_is_LEAFbase_of______GOGC____pc:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fp_gp_mp__micmpigmpermssse3avx2bmi1bmi2timecx16sse2_nil_falseErrorMarchApril053004300545063003300845103012451345_0930LocalntohsCall_Greekint16int32int64uint8arrayslice_and_1562578125closedefersweeptestRtestWexecWhchanexecRschedsudogtimergscanmheaptracepanicsleepgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_tab_top_...___fp:filessse41sse42ssse3failedStringFormat__bytestringSundayMondayFridayAugustUTC_11UTC_02UTC_08UTC_09UTC12UTC13GetAceGetACPlistensendtosocketCommonuint16uint32uint64structchan____chan_Value390625sysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max_bad_ts_...__n_mnil_base_netdnsrdtscppopcntcmd_goheaderAnsweravx512rdrandrdseedfloat32float64TuesdayJanuaryOctoberMUI_StdMUI_DltCopySidFreeSidSleepExWSARecvWSASendconnectinvaliduintptrChanDir_Value_19531259765625console:eventsforcegcallocmWcpuprofallocmRunknowngctraceIO_waitrunningsyscallwaitingforevernetworkUNKNOWN__goid_snil_n__scan__MB_in_pacer:___CPU___zombie__j0__head__panic:__nmsys_locks_dying_allocsGODEBUG_m__g0_pad1__pad2__text_minpc__tvalue__scan__ttypes_:_type_avx512fos_execruntimetls3desamxtileamxint8amxbf16osxsaveGoStringThursdaySaturdayFebruaryNovemberDecember__Month_EqualSidCancelIoReadFileSetEventAcceptExIsWindowWSAIoctlrecvfromshutdownnil_Pool48828125no_anodescavengepollDesctraceBufdeadlockraceFinipanicnilcgocheckrunnable_procid_eax_____ebx_____ecx_____edx_____edi_____esi_____ebp_____esp_____eip_____eflags__cs______fs______gs_______is_not__pointerBAD_RANK_status_unknown_trigger_npages_nalloc_nfreedruntime._signal_reflect._newval_mcount_bytes___stack__minLC__maxpc__tstack__minutes_status_etypes_netedns0wsaioctlavx512bwavx512vlgo_typesnet_httpgo_buildtlskyberx509sha1ClassANYQuestionavx512cdavx512eravx512pfavx512dq_method:__MISSING____EXTRA_WednesdaySeptember_07:00:00Z07:00:00urn:uuid:ntdll.dllole32.dllpsapi.dllwinmm.dllFindCloseLocalFreeMoveFileWPurgeCommSetupCommWriteFileWSASendToInheritedcomplex64interfaceinvalid_nreflect:_funcargs_bad_indirInterface244140625timerSendpollCacheprofBlockstackpoolhchanLeafwbufSpansGC__idle_mSpanDeadinittracescavtracepanicwaitchan_sendpreemptedcoroutinecopystack_ms_cpu____forced__wbuf1.n_wbuf2.n_s.limit_s.state_B_work___B_exp.___marked___unmarked_in_use__n__size____tail__recover:__not_in__ctxt___0__oldval__newval_threads:_status_blocked_lockedgatomicor8_runtime_m__curg_unknown_traceback_stack__gp.goid_lockedmd.nx___0files_dnsdns_filesipv6_icmpunderflowpclmulqdqmath_randtlsrsakexClassINETAuthority_BADINDEX____NOVERB_time.Date_time.Local__Weekday_dnsapi.dlldwmapi.dlluser32.dllws2_32.dllIsValidSidDnsQuery_WGetIfEntryCancelIoExCreatePipeGetVersionLocalAllocLockFileExOpenEventWOpenMutexWOpenThreadPulseEventResetEventWSACleanupWSASocketWWSAStartupgetsockoptsetsockoptcomplex128t.Kind__12207031256103515625winsymlink_dev_stdinowner_diednotifyListprofInsertstackLargeNot_workermSpanInUseGOMAXPROCSstop_tracedisablethpinvalidptrschedtracesemacquiredebug_call_flushGen__MB_goal__s.state___s.base___heapGoalGOMEMLIMIT_KiB_now___pages_at__sweepgen_sweepgen___bound____limit__exitThreadBad_varintGC_forced_n_runqueue_stopwait_runqsize_gfreecnt_throwing_spinningatomicand8float64nanfloat32nanException__ptrSize__targetpc_until_pcunknown_pcruntime:_ggoroutine_unixpacketimpossibleexecerrdothttp2debugcrypto_tlsClassCSNETClassCHAOSAdditionalavx512ifma
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00437150
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, str.___M__yi_____:_LlLtLuMn25M___________n__s____Pn___n__n___n__t__0b0x0X0o__nosnilMayUTCEET0001CATWATEATGMTHSTHDT_03_04_05ESTCSTCDTMSTMDT_02EDTASTADTPSTPDTNSTNDT06030407IST0908IDT12PKT11KST05JST10_01_11_12_08_0913CETBSTMSK_0614_mStdDltEOFintmapptr...125625NaNfinobjgc__:_gp___in__n___n_____P__MPC___end____:_n___pc__Gcgodnstcpudpsm9adxaesshaavxfmanettrueJuneJulyEESTSASTAKSTAKDTACSTACDTAESTAEDTAWSTCESTNZSTNZDTbindboolint8uintchanfunccallkind_on_3125_InfInffilesyncpipeallgallprootitabsbrkidledead_is_LEAFbase_of______GOGC____pc:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fp_gp_mp__micmpigmpermssse3avx2bmi1bmi2timecx16sse2_nil_falseErrorMarchApril053004300545063003300845103012451345_0930LocalntohsCall_Greekint16int32int64uint8arrayslice_and_1562578125closedefersweeptestRtestWexecWhchanexecRschedsudogtimergscanmheaptracepanicsleepgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_tab_top_...___fp:filessse41sse42ssse3failedStringFormat__bytestringSundayMondayFridayAugustUTC_11UTC_02UTC_08UTC_09UTC12UTC13GetAceGetACPlistensendtosocketCommonuint16uint32uint64structchan____chan_Value390625sysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max_bad_ts_...__n_mnil_base_netdnsrdtscppopcntcmd_goheaderAnsweravx512rdrandrdseedfloat32float64TuesdayJanuaryOctoberMUI_StdMUI_DltCopySidFreeSidSleepExWSARecvWSASendconnectinvaliduintptrChanDir_Value_19531259765625console:eventsforcegcallocmWcpuprofallocmRunknowngctraceIO_waitrunningsyscallwaitingforevernetworkUNKNOWN__goid_snil_n__scan__MB_in_pacer:___CPU___zombie__j0__head__panic:__nmsys_locks_dying_allocsGODEBUG_m__g0_pad1__pad2__text_minpc__tvalue__scan__ttypes_:_type_avx512fos_execruntimetls3desamxtileamxint8amxbf16osxsaveGoStringThursdaySaturdayFebruaryNovemberDecember__Month_EqualSidCancelIoReadFileSetEventAcceptExIsWindowWSAIoctlrecvfromshutdownnil_Pool48828125no_anodescavengepollDesctraceBufdeadlockraceFinipanicnilcgocheckrunnable_procid_eax_____ebx_____ecx_____edx_____edi_____esi_____ebp_____esp_____eip_____eflags__cs______fs______gs_______is_not__pointerBAD_RANK_status_unknown_trigger_npages_nalloc_nfreedruntime._signal_reflect._newval_mcount_bytes___stack__minLC__maxpc__tstack__minutes_status_etypes_netedns0wsaioctlavx512bwavx512vlgo_typesnet_httpgo_buildtlskyberx509sha1ClassANYQuestionavx512cdavx512eravx512pfavx512dq_method:__MISSING____EXTRA_WednesdaySeptember_07:00:00Z07:00:00urn:uuid:ntdll.dllole32.dllpsapi.dllwinmm.dllFindCloseLocalFreeMoveFileWPurgeCommSetupCommWriteFileWSASendToInheritedcomplex64interfaceinvalid_nreflect:_funcargs_bad_indirInterface244140625timerSendpollCacheprofBlockstackpoolhchanLeafwbufSpansGC__idle_mSpanDeadinittracescavtracepanicwaitchan_sendpreemptedcoroutinecopystack_ms_cpu____forced__wbuf1.n_wbuf2.n_s.limit_s.state_B_work___B_exp.___marked___unmarked_in_use__n__size____tail__recover:__not_in__ctxt___0__oldval__newval_threads:_status_blocked_lockedgatomicor8_runtime_m__curg_unknown_traceback_stack__gp.goid_lockedmd.nx___0files_dnsdns_filesipv6_icmpunderflowpclmulqdqmath_randtlsrsakexClassINETAuthority_BADINDEX____NOVERB_time.Date_time.Local__Weekday_dnsapi.dlldwmapi.dlluser32.dllws2_32.dllIsValidSidDnsQuery_WGetIfEntryCancelIoExCreatePipeGetVersionLocalAllocLockFileExOpenEventWOpenMutexWOpenThreadPulseEventResetEventWSACleanupWSASocketWWSAStartupgetsockoptsetsockoptcomplex128t.Kind__12207031256103515625winsymlink_dev_stdinowner_diednotifyListprofInsertstackLargeNot_workermSpanInUseGOMAXPROCSstop_tracedisablethpinvalidptrschedtracesemacquiredebug_call_flushGen__MB_goal__s.state___s.base___heapGoalGOMEMLIMIT_KiB_now___pages_at__sweepgen_sweepgen___bound____limit__exitThreadBad_varintGC_forced_n_runqueue_stopwait_runqsize_gfreecnt_throwing_spinningatomicand8float64nanfloat32nanException__ptrSize__targetpc_until_pcunknown_pcruntime:_ggoroutine_unixpacketimpossibleexecerrdothttp2debugcrypto_tlsClassCSNETClassCHAOSAdditionalavx512ifma
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00437150
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x50d1d4]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00437150
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x44]
adc ecx, edx
mov edx, dword [esp + 0x1c]
add eax, edx
mov dword [esp], eax
mov eax, dword [esp + 0x40]
adc ecx, eax
mov dword [esp + 4], ecx
call fcn.00436e40
lea eax, [0x50d1dd]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00437150
call fcn.00436950
nop
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
call fcn.00471870
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0xa4], ecx
mov edx, dword [eax + 0x5c]
mov dword [esp + 0xa0], edx
mov ebx, dword [eax + 0x60]
mov dword [esp + 0x8c], ebx
mov eax, dword [eax + 0x64]
mov dword [esp + 0x88], eax
mov ebp, dword [esp + 4]
mov dword [esp + 0x18], ebp
mov esi, dword [esp + 8]
mov dword [esp + 0x3c], esi
call fcn.004368f0
lea eax, [0x50c794]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00437150
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 4], eax
call fcn.00436e40
lea eax, [0x50cb29]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00437150
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
call fcn.00436e40
lea eax, [0x50de34]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00437150
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x8c]
sub eax, ecx
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x88]
sbb eax, ecx
mov dword [esp + 4], eax
call fcn.00436f70
lea eax, [0x50de40]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00437150
movsd xmm0, qword [esp + 0x70]
movsd qword [esp], xmm0
call fcn.00436b90
lea eax, [0x50c675]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00437150
call fcn.00436950
call fcn.004368f0
call fcn.00436af0
call fcn.00436950
mov eax, dword [0x68cdd8]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
movzx ecx, byte [eax + 0x8b]
lea edx, [ecx - 1]
nop
mov byte [eax + 0x8b], dl
cmp cl, 1
jne 0x41de05
nop
nop
lea eax, [0x68cd68]
mov dword [esp], eax
call fcn.0040a010
add esp, 0xc0
ret
call fcn.0046bac0
jmp fcn.0041d670