Function at 0x41d750
Capabilities:
Reference http user-agent string

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4762a5
mov eax, dword fs:[0]
push eax
sub esp, 0x540
mov eax, dword [0x496074]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x530], esi
mov eax, dword [esi + 4]
add eax, 0xb4
cmp dword [eax + 0x14], 0x10
jb 0x41d795
mov eax, dword [eax]
mov dword [ebp - 0x528], eax
mov edx, str.CBusUpload::BusParser
lea eax, [ebp - 0x528]
mov ecx, 0x48cd5c
push eax
push 0x16
call fcn.00407570
add esp, 8
cmp byte [0x499726], 0
jne 0x41e734
mov byte [0x499726], 1
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x480], 0xf
mov byte [ebp - 0x494], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x514], 0
mov dword [ebp - 0x510], 0xf
mov byte [ebp - 0x524], 0
mov dword [ebp - 0x49c], 0
mov dword [ebp - 0x498], 0xf
mov byte [ebp - 0x4ac], 0
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x468], 0xf
mov byte [ebp - 0x47c], 0
mov dword [ebp - 0x4fc], 0
mov dword [ebp - 0x4f8], 0xf
mov byte [ebp - 0x50c], 0
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x450], 0xf
mov byte [ebp - 0x464], 0
mov dword [ebp - 0x4e4], 0
mov dword [ebp - 0x4e0], 0xf
mov byte [ebp - 0x4f4], 0
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x4c8], 0xf
mov byte [ebp - 0x4dc], 0
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x4b0], 0xf
mov byte [ebp - 0x4c4], 0
mov byte [ebp - 4], 8
mov eax, dword [esi + 4]
mov eax, dword [eax + 0xe4]
mov esi, dword [eax]
cmp esi, eax
je 0x41dd11
nop dword [eax + eax]
cmp dword [esi + 0x24], 0x10
lea edi, [esi + 0x10]
mov ecx, edi
jb 0x41d8ed
mov ecx, dword [edi]
mov edx, dword [edi + 0x10]
push 3
push 0x48c5a4
call fcn.00407ba0
add esp, 8
test eax, eax
jne 0x41d9cf
lea eax, [esi + 0x28]
lea ecx, [ebp - 0x494]
cmp ecx, eax
je 0x41d92d
cmp dword [eax + 0x14], 0x10
mov ecx, eax
jb 0x41d91e
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x494]
call fcn.00401740
push ecx
lea edx, [ebp - 0x494]
lea ecx, [ebp - 0x54c]
call fcn.00401320
add esp, 4
push str._kpfw_kjxx_v1_upload
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00406520
lea ecx, [ebp - 0x494]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x434], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x434]
push eax
movq qword [ebp - 0x424], xmm0
call fcn.00406590
mov edx, dword [ebp - 0x420]
cmp edx, 0x10
jb 0x41d9c6
mov ecx, dword [ebp - 0x434]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41d9bc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e766
push edx
push ecx
call fcn.00439350
add esp, 8
mov byte [ebp - 4], 8
jmp 0x41dc83
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x41d9d9
mov ecx, dword [edi]
push 6
push str.cookie
call fcn.00407ba0
add esp, 8
test eax, eax
jne 0x41dab2
lea eax, [esi + 0x28]
mov edx, str.Cookie:
push eax
lea ecx, [ebp - 0x54c]
call fcn.004108b0
add esp, 4
lea ecx, [ebp - 0x47c]
push eax
call fcn.00406590
mov edx, dword [ebp - 0x538]
cmp edx, 0x10
jb 0x41da4d
mov ecx, dword [ebp - 0x54c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41da43
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e766
push edx
push ecx
call fcn.00439350
add esp, 8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x52c], esp
push 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x487222
mov byte [ecx], 0
call fcn.00401740
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
push 3
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x48c5d0
mov byte [ecx], 0
call fcn.00401740
lea ecx, [ebp - 0x47c]
mov byte [ebp - 4], 8
call fcn.00403140
add esp, 0x30
jmp 0x41dcbd
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x41dabc
mov ecx, dword [edi]
push 0x18
push str.SSO_SECURITY_CHECK_TOKEN
call fcn.00407ba0
add esp, 8
test eax, eax
jne 0x41daee
lea eax, [esi + 0x28]
mov edx, str.SSO_SECURITY_CHECK_TOKEN:
push eax
lea ecx, [ebp - 0x54c]
call fcn.004108b0
lea ecx, [ebp - 0x50c]
jmp 0x41dc7a
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x41daf8
mov ecx, dword [edi]
push 0xc
push str.X_B3_Sampled
call fcn.00407ba0
add esp, 8
test eax, eax
jne 0x41dbd1
lea eax, [esi + 0x28]
mov edx, str.X_B3_Sampled:
push eax
lea ecx, [ebp - 0x54c]
call fcn.004108b0
add esp, 4
lea ecx, [ebp - 0x464]
push eax
call fcn.00406590
mov edx, dword [ebp - 0x538]
cmp edx, 0x10
jb 0x41db6c
mov ecx, dword [ebp - 0x54c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41db62
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e766
push edx
push ecx
call fcn.00439350
add esp, 8
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x52c], esp
push 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x487222
mov byte [ecx], 0
call fcn.00401740
sub esp, 0x18
mov byte [ebp - 4], 0xb
mov ecx, esp
push 3
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push 0x48c62c
mov byte [ecx], 0
call fcn.00401740
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 8
call fcn.00403140
add esp, 0x30
jmp 0x41dcbd
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x41dbdb
mov ecx, dword [edi]
push 0xb
push str.X_B3_SpanId
call fcn.00407ba0
add esp, 8
test eax, eax
jne 0x41dc0a
lea eax, [esi + 0x28]
mov edx, str.X_B3_SpanId:
push eax
lea ecx, [ebp - 0x54c]
call fcn.004108b0
lea ecx, [ebp - 0x4f4]
jmp 0x41dc7a
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x41dc14
mov ecx, dword [edi]
push 0xc
push str.X_B3_TraceId
call fcn.00407ba0
add esp, 8
test eax, eax
jne 0x41dc43
lea eax, [esi + 0x28]
mov edx, str.X_B3_TraceId:
push eax
lea ecx, [ebp - 0x54c]
call fcn.004108b0
lea ecx, [ebp - 0x4dc]
jmp 0x41dc7a
cmp dword [edi + 0x14], 0x10
jb 0x41dc4b
mov edi, dword [edi]
push 0x16
push str.X_Tsf_Client_Timestamp
mov ecx, edi
call fcn.00407ba0
add esp, 8
test eax, eax
jne 0x41dcbd
lea eax, [esi + 0x28]
mov edx, str.X_Tsf_Client_Timestamp:
push eax
lea ecx, [ebp - 0x54c]
call fcn.004108b0
lea ecx, [ebp - 0x4c4]
add esp, 4
push eax
call fcn.00406590
mov edx, dword [ebp - 0x538]
cmp edx, 0x10
jb 0x41dcbd
mov ecx, dword [ebp - 0x54c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41dcb3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e766
push edx
push ecx
call fcn.00439350
add esp, 8
mov eax, dword [esi + 8]
cmp byte [eax + 0xd], 0
je 0x41dce4
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x41dce0
nop
cmp esi, dword [eax + 8]
jne 0x41dce0
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0xd], 0
je 0x41dcd0
mov esi, eax
jmp 0x41dcfc
mov esi, eax
mov ecx, dword [esi]
cmp byte [ecx + 0xd], 0
jne 0x41dcfc
nop
mov eax, dword [ecx]
mov esi, ecx
mov ecx, eax
cmp byte [eax + 0xd], 0
je 0x41dcf0
mov eax, dword [ebp - 0x530]
mov eax, dword [eax + 4]
cmp esi, dword [eax + 0xe4]
jne 0x41d8e0
push 0xa
push str.User_Agent
lea ecx, [ebp - 0x434]
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0xf
mov byte [ebp - 0x434], 0
call fcn.00401740
mov ecx, dword [ebp - 0x530]
mov dword [ebp - 0x528], 0
mov eax, dword [ecx + 4]
mov dword [ebp - 0x52c], eax
lea esi, [eax + 0xec]
lea eax, [ebp - 0x434]
mov ecx, esi
push eax
lea eax, [ebp - 0x528]
push eax
call fcn.004092c0
mov eax, dword [esi]
mov esi, dword [ebp - 0x528]
mov edi, dword [ebp - 0x434]
mov dword [ebp - 0x534], eax
cmp esi, eax
je 0x41ddc5
cmp dword [esi + 0x24], 0x10
lea edx, [esi + 0x10]
jb 0x41dd96
mov edx, dword [esi + 0x10]
cmp dword [ebp - 0x420], 0x10
lea ecx, [ebp - 0x434]
push dword [esi + 0x20]
cmovae ecx, edi
push edx
mov edx, dword [ebp - 0x424]
call fcn.00407ba0
shr eax, 0x1f
add esp, 8
test al, al
je 0x41ddc7
mov eax, dword [ebp - 0x534]
mov esi, eax
mov eax, dword [ebp - 0x420]
cmp eax, 0x10
jb 0x41de08
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x41ddf3
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e766
push ecx
push edi
call fcn.00439350
mov edi, dword [ebp - 0x530]
add esp, 8
mov eax, dword [edi + 4]
jmp 0x41de14
mov eax, dword [ebp - 0x52c]
mov edi, dword [ebp - 0x530]
cmp esi, dword [eax + 0xec]
je 0x41de7b
add esi, 0x28
lea ecx, [ebp - 0x54c]
push esi
mov edx, str.User_Agent:
call fcn.004108b0
add esp, 4
lea ecx, [ebp - 0x524]
push eax
call fcn.00406590
mov edx, dword [ebp - 0x538]
cmp edx, 0x10
jb 0x41de90
mov ecx, dword [ebp - 0x54c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41de6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e76b
push edx
push ecx
call fcn.00439350
add esp, 8
jmp 0x41de90
push 0x8e
push str.User_Agent:_Mozilla_5.0__Windows_NT_10.0__Win64__x64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_115.0.0.0_Safari_537.36_Edg_115.0.1901.183
lea ecx, [ebp - 0x524]
call fcn.00401740
push 0xc
push str.Content_Type
lea ecx, [ebp - 0x434]
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0xf
mov byte [ebp - 0x434], 0
call fcn.00401740
mov eax, dword [edi + 4]
mov dword [ebp - 0x534], eax
mov dword [ebp - 0x528], 0
lea esi, [eax + 0xec]
lea eax, [ebp - 0x434]
mov ecx, esi
push eax
lea eax, [ebp - 0x528]
push eax
call fcn.004092c0
mov eax, dword [esi]
mov esi, dword [ebp - 0x528]
mov edi, dword [ebp - 0x434]
mov dword [ebp - 0x52c], eax
cmp esi, eax
je 0x41df3e
cmp dword [esi + 0x24], 0x10
lea edx, [esi + 0x10]
jb 0x41df0f
mov edx, dword [esi + 0x10]
cmp dword [ebp - 0x420], 0x10
lea ecx, [ebp - 0x434]
push dword [esi + 0x20]
cmovae ecx, edi
push edx
mov edx, dword [ebp - 0x424]
call fcn.00407ba0
shr eax, 0x1f
add esp, 8
test al, al
je 0x41df40
mov eax, dword [ebp - 0x52c]
mov esi, eax
mov eax, dword [ebp - 0x420]
cmp eax, 0x10
jb 0x41df81
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x41df6c
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e770
push ecx
push edi
call fcn.00439350
mov eax, dword [ebp - 0x530]
add esp, 8
mov eax, dword [eax + 4]
jmp 0x41df87
mov eax, dword [ebp - 0x534]
cmp esi, dword [eax + 0xec]
je 0x41dfee
add esi, 0x28
lea ecx, [ebp - 0x54c]
push esi
mov edx, str.Content_Type:
call fcn.004108b0
add esp, 4
lea ecx, [ebp - 0x4ac]
push eax
call fcn.00406590
mov edx, dword [ebp - 0x538]
cmp edx, 0x10
jb 0x41e000
mov ecx, dword [ebp - 0x54c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41dfe2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e775
push edx
push ecx
call fcn.00439350
add esp, 8
jmp 0x41e000
push 0x1e
push str.Content_Type:_application_json
lea ecx, [ebp - 0x4ac]
call fcn.00401740
xorps xmm0, xmm0
mov dword [ebp - 0x414], 0
movq qword [ebp - 0x41c], xmm0
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x414], 0
lea eax, [ebp - 0x524]
mov byte [ebp - 4], 0xc
push eax
push 0
lea ecx, [ebp - 0x41c]
call fcn.0041d5b0
mov eax, dword [ebp - 0x418]
lea ecx, [ebp - 0x4ac]
push ecx
cmp dword [ebp - 0x414], eax
je 0x41e078
mov ecx, eax
call fcn.004015c0
mov eax, dword [ebp - 0x418]
add eax, 0x18
mov dword [ebp - 0x418], eax
jmp 0x41e08a
push eax
lea ecx, [ebp - 0x41c]
call fcn.0041d5b0
mov eax, dword [ebp - 0x418]
lea ecx, [ebp - 0x47c]
push ecx
cmp dword [ebp - 0x414], eax
je 0x41e0b1
mov ecx, eax
call fcn.004015c0
mov eax, dword [ebp - 0x418]
add eax, 0x18
mov dword [ebp - 0x418], eax
jmp 0x41e0c3
push eax
lea ecx, [ebp - 0x41c]
call fcn.0041d5b0
mov eax, dword [ebp - 0x418]
lea ecx, [ebp - 0x50c]
push ecx
cmp dword [ebp - 0x414], eax
je 0x41e0ea
mov ecx, eax
call fcn.004015c0
mov eax, dword [ebp - 0x418]
add eax, 0x18
mov dword [ebp - 0x418], eax
jmp 0x41e0fc
push eax
lea ecx, [ebp - 0x41c]
call fcn.0041d5b0
mov eax, dword [ebp - 0x418]
lea ecx, [ebp - 0x464]
push ecx
cmp dword [ebp - 0x414], eax
je 0x41e123
mov ecx, eax
call fcn.004015c0
mov eax, dword [ebp - 0x418]
add eax, 0x18
mov dword [ebp - 0x418], eax
jmp 0x41e135
push eax
lea ecx, [ebp - 0x41c]
call fcn.0041d5b0
mov eax, dword [ebp - 0x418]
lea ecx, [ebp - 0x4f4]
push ecx
cmp dword [ebp - 0x414], eax
je 0x41e15c
mov ecx, eax
call fcn.004015c0
mov eax, dword [ebp - 0x418]
add eax, 0x18
mov dword [ebp - 0x418], eax
jmp 0x41e16e
push eax
lea ecx, [ebp - 0x41c]
call fcn.0041d5b0
mov eax, dword [ebp - 0x418]
lea ecx, [ebp - 0x4dc]
push ecx
cmp dword [ebp - 0x414], eax
je 0x41e195
mov ecx, eax
call fcn.004015c0
mov eax, dword [ebp - 0x418]
add eax, 0x18
mov dword [ebp - 0x418], eax
jmp 0x41e1a7
push eax
lea ecx, [ebp - 0x41c]
call fcn.0041d5b0
mov eax, dword [ebp - 0x418]
lea ecx, [ebp - 0x4c4]
push ecx
cmp dword [ebp - 0x414], eax
je 0x41e1c6
mov ecx, eax
call fcn.004015c0
add dword [ebp - 0x418], 0x18
jmp 0x41e1d2
push eax
lea ecx, [ebp - 0x41c]
call fcn.0041d5b0
push 8
push 0
push str.Lemon.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov esi, eax
test esi, esi
jne 0x41e208
push eax
mov dword [ebp - 0x424], eax
mov dword [ebp - 0x420], 0xf
mov byte [ebp - 0x434], al
push 0x487222
jmp 0x41e2a1
push str.GetDsHardwareInformation
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
test edi, edi
jne 0x41e240
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push edi
mov dword [ebp - 0x424], edi
mov dword [ebp - 0x420], 0xf
mov byte [ebp - 0x434], 0
push 0x487222
jmp 0x41e2a1
push 0x400
lea eax, [ebp - 0x410]
push 0
push eax
call fcn.00452320
lea eax, [ebp - 0x410]
push 0x400
push eax
call edi
add esp, 0x14
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x420], 0xf
lea edx, [ecx + 1]
mov byte [ebp - 0x434], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e290
sub ecx, edx
lea eax, [ebp - 0x410]
push ecx
push eax
lea ecx, [ebp - 0x434]
call fcn.00401740
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x438], 0xf
mov byte [ebp - 0x44c], 0
lea eax, [ebp - 0x52c]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x44c]
mov dword [ebp - 0x52c], 0x14
push eax
lea eax, [ebp - 0x434]
push eax
lea edx, [ebp - 0x41c]
lea ecx, [ebp - 0x494]
call fcn.00422980
mov esi, eax
add esp, 0xc
test esi, esi
je 0x41e36d
cmp esi, 0x1b
jne 0x41e312
push 0x39
push 0x48c7ac
jmp 0x41e362
cmp esi, 0x1c
jne 0x41e320
push 0x24
push 0x48c7e8
jmp 0x41e362
push 0x104
lea eax, [ebp - 0x114]
push 0
push eax
call fcn.00452320
push esi
lea eax, [ebp - 0x114]
push 0x48c810
push eax
call fcn.0040e8b0
lea ecx, [ebp - 0x114]
add esp, 0x18
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e351
sub ecx, edx
lea eax, [ebp - 0x114]
push ecx
push eax
lea ecx, [ebp - 0x44c]
call fcn.00401740
cmp dword [ebp - 0x438], 0x10
lea eax, [ebp - 0x44c]
mov edx, str.CBusUpload::BusParser
mov ecx, str._s
cmovae eax, dword [ebp - 0x44c]
mov dword [ebp - 0x52c], eax
lea eax, [ebp - 0x52c]
push eax
push 0x85
call fcn.00407570
mov eax, dword [ebp - 0x530]
add esp, 8
mov ecx, dword [eax + 4]
lea eax, [ebp - 0x44c]
add ecx, 0xcc
cmp ecx, eax
je 0x41e3d8
cmp dword [ebp - 0x438], 0x10
push dword [ebp - 0x43c]
cmovae eax, dword [ebp - 0x44c]
push eax
call fcn.00401740
mov edx, dword [ebp - 0x438]
mov byte [0x499726], 0
cmp edx, 0x10
jb 0x41e419
mov ecx, dword [ebp - 0x44c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e40f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e77a
push edx
push ecx
call fcn.00439350
add esp, 8
mov edx, dword [ebp - 0x420]
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x438], 0xf
mov byte [ebp - 0x44c], 0
cmp edx, 0x10
jb 0x41e46e
mov ecx, dword [ebp - 0x434]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e464
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e77f
push edx
push ecx
call fcn.00439350
add esp, 8
mov ecx, dword [ebp - 0x41c]
test ecx, ecx
je 0x41e4f2
mov edx, dword [ebp - 0x418]
push ecx
call fcn.00410b90
mov ecx, dword [ebp - 0x414]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0x41c]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x41e4ca
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e784
push ecx
push esi
call fcn.00439350
add esp, 8
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x414], 0
mov edx, dword [ebp - 0x4b0]
cmp edx, 0x10
jb 0x41e52c
mov ecx, dword [ebp - 0x4c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e522
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e789
push edx
push ecx
call fcn.00439350
add esp, 8
mov edx, dword [ebp - 0x4c8]
cmp edx, 0x10
jb 0x41e566
mov ecx, dword [ebp - 0x4dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e55c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e78e
push edx
push ecx
call fcn.00439350
add esp, 8
mov edx, dword [ebp - 0x4e0]
cmp edx, 0x10
jb 0x41e5a0
mov ecx, dword [ebp - 0x4f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e596
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e793
push edx
push ecx
call fcn.00439350
add esp, 8
mov edx, dword [ebp - 0x450]
cmp edx, 0x10
jb 0x41e5da
mov ecx, dword [ebp - 0x464]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e5d0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e798
push edx
push ecx
call fcn.00439350
add esp, 8
mov edx, dword [ebp - 0x4f8]
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x450], 0xf
mov byte [ebp - 0x464], 0
cmp edx, 0x10
jb 0x41e62f
mov ecx, dword [ebp - 0x50c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e625
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e79d
push edx
push ecx
call fcn.00439350
add esp, 8
mov edx, dword [ebp - 0x468]
cmp edx, 0x10
jb 0x41e669
mov ecx, dword [ebp - 0x47c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e65f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7a2
push edx
push ecx
call fcn.00439350
add esp, 8
mov edx, dword [ebp - 0x498]
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x468], 0xf
mov byte [ebp - 0x47c], 0
cmp edx, 0x10
jb 0x41e6be
mov ecx, dword [ebp - 0x4ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e6b4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7a7
push edx
push ecx
call fcn.00439350
add esp, 8
mov edx, dword [ebp - 0x510]
cmp edx, 0x10
jb 0x41e6f8
mov ecx, dword [ebp - 0x524]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e6ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7ac
push edx
push ecx
call fcn.00439350
add esp, 8
mov edx, dword [ebp - 0x480]
cmp edx, 0x10
jb 0x41e749
mov ecx, dword [ebp - 0x494]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e728
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41e7b1
push edx
push ecx
call fcn.00439350
add esp, 8
jmp 0x41e749
mov ecx, dword [esi + 4]
push 9
push 0x48cd70
add ecx, 0xcc
call fcn.00401740
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043930f
mov esp, ebp
pop ebp
ret
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
call fcn.004542d9
int3