Function at 0x41ce20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2c0
mov eax, dword [ebp + 8]
mov ecx, 0
mov edx, 0x28
lea esi, [esp + 0x24c]
lea edi, [esp + 0x274]
mov dword [esp + 0x2a4], eax
mov dword [esp + 0x2a0], 0
mov dword [esp + 0x29c], 0
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [esp + 0x21c], esi
mov dword [esp + 0x218], ecx
mov dword [esp + 0x214], edx
call fcn.00440050
mov eax, dword [esp + 0x21c]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.00440050
mov dword [esp + 0x248], 0
mov dword [esp + 0x244], 0
mov eax, dword [0x495140]
mov dword [esp + 0x238], eax
mov bx, word [0x495144]
mov word [esp + 0x23c], bx
mov dword [esp + 0x228], 0
mov eax, dword [0x4da4cc]
mov dword [esp + 0x2ac], eax
mov dword [esp + 0x220], 0xda3aa1a4
mov eax, dword [esp + 0x220]
mov ecx, eax
sub ecx, 0x8d36b326
mov dword [esp + 0x210], eax
mov dword [esp + 0x20c], ecx
jg 0x41cf4f
jmp 0x41cf31
mov eax, dword [esp + 0x210]
sub eax, 0x8761f769
mov dword [esp + 0x208], eax
je 0x41e0ce
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x90011f14
mov dword [esp + 0x204], eax
jg 0x41cf8b
jmp 0x41cf6d
mov eax, dword [esp + 0x210]
sub eax, 0x8d36b327
mov dword [esp + 0x200], eax
je 0x41e100
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x93882359
mov dword [esp + 0x1fc], eax
jg 0x41cfc7
jmp 0x41cfa9
mov eax, dword [esp + 0x210]
sub eax, 0x90011f15
mov dword [esp + 0x1f8], eax
je 0x41dcc4
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x794a39fa
mov dword [esp + 0x1f4], eax
jg 0x41dba3
jmp 0x41cfe5
mov eax, dword [esp + 0x210]
sub eax, 0x93ff4aa2
mov dword [esp + 0x1f0], eax
jg 0x41d021
jmp 0x41d003
mov eax, dword [esp + 0x210]
sub eax, 0x9388235a
mov dword [esp + 0x1ec], eax
je 0x41e44d
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x9f3ca60e
mov dword [esp + 0x1e8], eax
jg 0x41d05d
jmp 0x41d03f
mov eax, dword [esp + 0x210]
sub eax, 0x93ff4aa3
mov dword [esp + 0x1e4], eax
je 0x41deb8
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xa1609954
mov dword [esp + 0x1e0], eax
jg 0x41d099
jmp 0x41d07b
mov eax, dword [esp + 0x210]
sub eax, 0x9f3ca60f
mov dword [esp + 0x1dc], eax
je 0x41dd5c
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x77ea8e0c
mov dword [esp + 0x1d8], eax
jg 0x41db88
jmp 0x41d0b7
mov eax, dword [esp + 0x210]
sub eax, 0x778b0dbf
mov dword [esp + 0x1d4], eax
jg 0x41db6d
jmp 0x41d0d5
mov eax, dword [esp + 0x210]
sub eax, 0xa1becd87
mov dword [esp + 0x1d0], eax
jg 0x41d111
jmp 0x41d0f3
mov eax, dword [esp + 0x210]
sub eax, 0xa1609955
mov dword [esp + 0x1cc], eax
je 0x41e054
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xa296fcac
mov dword [esp + 0x1c8], eax
jg 0x41d14d
jmp 0x41d12f
mov eax, dword [esp + 0x210]
sub eax, 0xa1becd88
mov dword [esp + 0x1c4], eax
je 0x41e250
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xa341035d
mov dword [esp + 0x1c0], eax
jg 0x41d189
jmp 0x41d16b
mov eax, dword [esp + 0x210]
sub eax, 0xa296fcad
mov dword [esp + 0x1bc], eax
je 0x41e1e7
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xa5aeee51
mov dword [esp + 0x1b8], eax
jg 0x41d1c5
jmp 0x41d1a7
mov eax, dword [esp + 0x210]
sub eax, 0xa341035e
mov dword [esp + 0x1b4], eax
je 0x41e5ca
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xaae636c7
mov dword [esp + 0x1b0], eax
jg 0x41d201
jmp 0x41d1e3
mov eax, dword [esp + 0x210]
sub eax, 0xa5aeee52
mov dword [esp + 0x1ac], eax
je 0x41e0f0
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xafdf19f5
mov dword [esp + 0x1a8], eax
jg 0x41d23d
jmp 0x41d21f
mov eax, dword [esp + 0x210]
sub eax, 0xaae636c8
mov dword [esp + 0x1a4], eax
je 0x41e2fa
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xb22091a9
mov dword [esp + 0x1a0], eax
jg 0x41d279
jmp 0x41d25b
mov eax, dword [esp + 0x210]
sub eax, 0xafdf19f6
mov dword [esp + 0x19c], eax
je 0x41dec9
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xb255d6f2
mov dword [esp + 0x198], eax
jg 0x41d2b5
jmp 0x41d297
mov eax, dword [esp + 0x210]
sub eax, 0xb22091aa
mov dword [esp + 0x194], eax
je 0x41e5ba
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xb5020585
mov dword [esp + 0x190], eax
jg 0x41d2f1
jmp 0x41d2d3
mov eax, dword [esp + 0x210]
sub eax, 0xb255d6f3
mov dword [esp + 0x18c], eax
je 0x41e043
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xb63edd21
mov dword [esp + 0x188], eax
jg 0x41d32d
jmp 0x41d30f
mov eax, dword [esp + 0x210]
sub eax, 0xb5020586
mov dword [esp + 0x184], eax
je 0x41e26a
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xb939d352
mov dword [esp + 0x180], eax
jg 0x41d369
jmp 0x41d34b
mov eax, dword [esp + 0x210]
sub eax, 0xb63edd22
mov dword [esp + 0x17c], eax
je 0x41e380
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xc1f94745
mov dword [esp + 0x178], eax
jg 0x41d3a5
jmp 0x41d387
mov eax, dword [esp + 0x210]
sub eax, 0xb939d353
mov dword [esp + 0x174], eax
je 0x41e3b4
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xc73c36c6
mov dword [esp + 0x170], eax
jg 0x41d3e1
jmp 0x41d3c3
mov eax, dword [esp + 0x210]
sub eax, 0xc1f94746
mov dword [esp + 0x16c], eax
je 0x41dda7
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xca55696d
mov dword [esp + 0x168], eax
jg 0x41d41d
jmp 0x41d3ff
mov eax, dword [esp + 0x210]
sub eax, 0xc73c36c7
mov dword [esp + 0x164], eax
je 0x41e58c
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xcea40841
mov dword [esp + 0x160], eax
jg 0x41d459
jmp 0x41d43b
mov eax, dword [esp + 0x210]
sub eax, 0xca55696e
mov dword [esp + 0x15c], eax
je 0x41dc77
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xd2b684f0
mov dword [esp + 0x158], eax
jg 0x41d495
jmp 0x41d477
mov eax, dword [esp + 0x210]
sub eax, 0xcea40842
mov dword [esp + 0x154], eax
je 0x41e601
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xda3aa1a3
mov dword [esp + 0x150], eax
jg 0x41d4d1
jmp 0x41d4b3
mov eax, dword [esp + 0x210]
sub eax, 0xd2b684f1
mov dword [esp + 0x14c], eax
je 0x41e38f
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xde7e752e
mov dword [esp + 0x148], eax
jg 0x41d50d
jmp 0x41d4ef
mov eax, dword [esp + 0x210]
sub eax, 0xda3aa1a4
mov dword [esp + 0x144], eax
je 0x41dbc3
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xe53f339d
mov dword [esp + 0x140], eax
jg 0x41d549
jmp 0x41d52b
mov eax, dword [esp + 0x210]
sub eax, 0xde7e752f
mov dword [esp + 0x13c], eax
je 0x41e159
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xe60bf5f3
mov dword [esp + 0x138], eax
jg 0x41d585
jmp 0x41d567
mov eax, dword [esp + 0x210]
sub eax, 0xe53f339e
mov dword [esp + 0x134], eax
je 0x41e22d
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xf00ccae3
mov dword [esp + 0x130], eax
jg 0x41d5c1
jmp 0x41d5a3
mov eax, dword [esp + 0x210]
sub eax, 0xe60bf5f4
mov dword [esp + 0x12c], eax
je 0x41e0df
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xfe342308
mov dword [esp + 0x128], eax
jg 0x41d5fd
jmp 0x41d5df
mov eax, dword [esp + 0x210]
sub eax, 0xf00ccae4
mov dword [esp + 0x124], eax
je 0x41e32a
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x9056048
mov dword [esp + 0x120], eax
jg 0x41d639
jmp 0x41d61b
mov eax, dword [esp + 0x210]
sub eax, 0xfe342309
mov dword [esp + 0x11c], eax
je 0x41e149
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xa8b9b4c
mov dword [esp + 0x118], eax
jg 0x41d675
jmp 0x41d657
mov eax, dword [esp + 0x210]
sub eax, 0x9056049
mov dword [esp + 0x114], eax
je 0x41e361
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0xb41fd46
mov dword [esp + 0x110], eax
jg 0x41d6b1
jmp 0x41d693
mov eax, dword [esp + 0x210]
sub eax, 0xa8b9b4d
mov dword [esp + 0x10c], eax
je 0x41e350
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x11f74da8
mov dword [esp + 0x108], eax
jg 0x41d6ed
jmp 0x41d6cf
mov eax, dword [esp + 0x210]
sub eax, 0xb41fd47
mov dword [esp + 0x104], eax
je 0x41de6b
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x137e54f6
mov dword [esp + 0x100], eax
jg 0x41d729
jmp 0x41d70b
mov eax, dword [esp + 0x210]
sub eax, 0x11f74da9
mov dword [esp + 0xfc], eax
je 0x41e091
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x14bbe1f9
mov dword [esp + 0xf8], eax
jg 0x41d765
jmp 0x41d747
mov eax, dword [esp + 0x210]
sub eax, 0x137e54f7
mov dword [esp + 0xf4], eax
je 0x41dcd5
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x343b0df6
mov dword [esp + 0xf0], eax
jg 0x41d7a1
jmp 0x41d783
mov eax, dword [esp + 0x210]
sub eax, 0x14bbe1fa
mov dword [esp + 0xec], eax
je 0x41e110
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x36371c04
mov dword [esp + 0xe8], eax
jg 0x41d7dd
jmp 0x41d7bf
mov eax, dword [esp + 0x210]
sub eax, 0x343b0df7
mov dword [esp + 0xe4], eax
je 0x41ddec
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x3f9d7b29
mov dword [esp + 0xe0], eax
jg 0x41d819
jmp 0x41d7fb
mov eax, dword [esp + 0x210]
sub eax, 0x36371c05
mov dword [esp + 0xdc], eax
je 0x41e1d6
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x42d87abf
mov dword [esp + 0xd8], eax
jg 0x41d855
jmp 0x41d837
mov eax, dword [esp + 0x210]
sub eax, 0x3f9d7b2a
mov dword [esp + 0xd4], eax
je 0x41dddb
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x44948653
mov dword [esp + 0xd0], eax
jg 0x41d891
jmp 0x41d873
mov eax, dword [esp + 0x210]
sub eax, 0x42d87ac0
mov dword [esp + 0xcc], eax
je 0x41dc05
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x4777e7c1
mov dword [esp + 0xc8], eax
jg 0x41d8cd
jmp 0x41d8af
mov eax, dword [esp + 0x210]
sub eax, 0x44948654
mov dword [esp + 0xc4], eax
je 0x41e2c5
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x499b600c
mov dword [esp + 0xc0], eax
jg 0x41d909
jmp 0x41d8eb
mov eax, dword [esp + 0x210]
sub eax, 0x4777e7c2
mov dword [esp + 0xbc], eax
je 0x41e2a5
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x4af207ee
mov dword [esp + 0xb8], eax
jg 0x41d945
jmp 0x41d927
mov eax, dword [esp + 0x210]
sub eax, 0x499b600d
mov dword [esp + 0xb4], eax
je 0x41dbe9
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x4d3d7a7c
mov dword [esp + 0xb0], eax
jg 0x41d981
jmp 0x41d963
mov eax, dword [esp + 0x210]
sub eax, 0x4af207ef
mov dword [esp + 0xac], eax
je 0x41e020
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x50c82a9e
mov dword [esp + 0xa8], eax
jg 0x41d9bd
jmp 0x41d99f
mov eax, dword [esp + 0x210]
sub eax, 0x4d3d7a7d
mov dword [esp + 0xa4], eax
je 0x41e62a
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x517d1dda
mov dword [esp + 0xa0], eax
jg 0x41d9f9
jmp 0x41d9db
mov eax, dword [esp + 0x210]
sub eax, 0x50c82a9f
mov dword [esp + 0x9c], eax
je 0x41e3ff
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x52aef87e
mov dword [esp + 0x98], eax
jg 0x41da35
jmp 0x41da17
mov eax, dword [esp + 0x210]
sub eax, 0x517d1ddb
mov dword [esp + 0x94], eax
je 0x41dc54
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x5eea58ff
mov dword [esp + 0x90], eax
jg 0x41da71
jmp 0x41da53
mov eax, dword [esp + 0x210]
sub eax, 0x52aef87f
mov dword [esp + 0x8c], eax
je 0x41e120
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x62318943
mov dword [esp + 0x88], eax
jg 0x41daad
jmp 0x41da8f
mov eax, dword [esp + 0x210]
sub eax, 0x5eea5900
mov dword [esp + 0x84], eax
je 0x41de48
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x70a5c790
mov dword [esp + 0x80], eax
jg 0x41dae6
jmp 0x41dacb
mov eax, dword [esp + 0x210]
sub eax, 0x62318944
mov dword [esp + 0x7c], eax
je 0x41dc16
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x7255218b
mov dword [esp + 0x78], eax
jg 0x41db52
jmp 0x41db01
mov eax, dword [esp + 0x210]
sub eax, 0x70a5c791
mov dword [esp + 0x74], eax
je 0x41e2b5
jmp 0x41db1c
mov eax, dword [esp + 0x210]
sub eax, 0x70be2e1e
mov dword [esp + 0x70], eax
je 0x41e27b
jmp 0x41db37
mov eax, dword [esp + 0x210]
sub eax, 0x7234e25f
mov dword [esp + 0x6c], eax
je 0x41e649
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x7255218c
mov dword [esp + 0x68], eax
je 0x41dd39
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x778b0dc0
mov dword [esp + 0x64], eax
je 0x41e0b4
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x77ea8e0d
mov dword [esp + 0x60], eax
je 0x41e2e9
jmp 0x41dbbe
mov eax, dword [esp + 0x210]
sub eax, 0x794a39fb
mov dword [esp + 0x5c], eax
je 0x41e31a
jmp 0x41dbbe
jmp 0x41e654
mov eax, 0x42d87ac0
mov ecx, 0x499b600d
mov edx, dword [esp + 0x2ac]
cmp edx, 0
cmovne eax, ecx
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, dword [0x4da4d0]
mov dword [esp + 0x2a8], eax
mov dword [esp + 0x220], 0xa8b9b4d
jmp 0x41e654
mov eax, 0x62318944
mov dword [esp + 0x220], eax
jmp 0x41e654
call fcn.00407a50
mov ecx, 0x517d1ddb
mov edx, dword [esp + 0x2a4]
mov dword [edx], eax
mov dword [esp + 0x224], eax
cmp dword [esp + 0x224], 6
setae bl
and bl, 1
mov byte [esp + 0x2b2], bl
mov dword [esp + 0x220], ecx
jmp 0x41e654
mov eax, 0xde7e752f
mov ecx, 0xca55696e
mov dl, byte [esp + 0x2b2]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, dword [0x4db468]
mov ecx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [esp + 0x58], eax
call ecx
mov ecx, esp
lea edx, [esp + 0x244]
mov dword [ecx + 8], edx
mov dword [ecx], eax
mov dword [ecx + 4], 0x2000000
mov eax, dword [esp + 0x58]
call eax
sub esp, 0xc
mov ecx, 0xfe342309
mov edx, 0x90011f15
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x220], ecx
jmp 0x41e654
mov eax, 0x137e54f7
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, dword [0x4db464]
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x244]
mov esi, esp
lea edi, [esp + 0x228]
mov dword [esi + 0x10], edi
mov dword [esi + 0xc], ecx
mov dword [esi], edx
mov dword [esi + 8], 0
mov dword [esi + 4], 0x19
call eax
sub esp, 0x14
mov ecx, 0x7255218c
cmp dword [esp + 0x228], 0
setne bl
and bl, 1
mov byte [esp + 0x2b3], bl
mov dword [esp + 0x220], ecx
mov dword [esp + 0x54], eax
jmp 0x41e654
mov eax, 0x52aef87f
mov ecx, 0x9f3ca60f
mov dl, byte [esp + 0x2b3]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, 1
mov ecx, dword [esp + 0x228]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 0x50], eax
call fcn.00440118
mov ecx, 0x3f9d7b2a
mov edx, 0xc1f94746
mov dword [esp + 0x248], eax
cmp dword [esp + 0x248], 0
cmove ecx, edx
mov dword [esp + 0x220], ecx
jmp 0x41e654
mov eax, dword [esp + 0x244]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x2a8], 0xffffffff
mov dword [esp + 0x220], 0xa8b9b4d
mov dword [esp + 0x4c], eax
jmp 0x41e654
mov eax, 0x343b0df7
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, dword [0x4db464]
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x248]
mov esi, dword [esp + 0x244]
mov edi, esp
lea ebx, [esp + 0x228]
mov dword [edi + 0x10], ebx
mov dword [edi + 0xc], ecx
mov dword [edi + 8], edx
mov dword [edi], esi
mov dword [edi + 4], 0x19
call eax
sub esp, 0x14
mov ecx, 0x5eea5900
cmp eax, 0
setne al
and al, 1
mov byte [esp + 0x2b4], al
mov dword [esp + 0x220], ecx
jmp 0x41e654
mov eax, 0x14bbe1fa
mov ecx, 0xb41fd47
mov dl, byte [esp + 0x2b4]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, dword [esp + 0x248]
mov dword [esp + 0x2a0], eax
mov eax, dword [0x4db460]
mov ecx, dword [esp + 0x2a0]
mov ecx, dword [ecx]
mov edx, esp
lea esi, [esp + 0x29c]
mov dword [edx + 4], esi
mov dword [edx], ecx
call eax
sub esp, 8
mov ecx, 0x8d36b327
mov edx, 0x93ff4aa3
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x220], ecx
jmp 0x41e654
mov eax, 0xafdf19f6
mov dword [esp + 0x220], eax
jmp 0x41e654
lea eax, [esp + 0x274]
mov ecx, dword [0x495148]
movzx ecx, word [ecx]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x230]
add ecx, 0x7e5254e0
add ecx, 1
sub ecx, 0x7e5254e0
mov edx, dword [0x495148]
movzx ecx, word [edx + ecx*2]
mov dword [esp + 0x22c], ecx
mov ecx, dword [esp + 0x22c]
mov edx, dword [0x495148]
mov esi, dword [esp + 0x230]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x495148]
add esi, 2
mov edi, dword [esp + 0x230]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00406c80
lea eax, [esp + 0x24c]
mov ecx, dword [str._f.__A]
movzx ecx, word [ecx]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x230]
sub ecx, 0x69652dc9
add ecx, 1
add ecx, 0x69652dc9
mov edx, dword [str._f.__A]
shl ecx, 1
add edx, ecx
movzx ecx, word [edx]
mov dword [esp + 0x22c], ecx
mov ecx, dword [esp + 0x22c]
mov edx, dword [str._f.__A]
mov esi, dword [esp + 0x230]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [str._f.__A]
add esi, 2
mov edi, dword [esp + 0x230]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00406c80
lea eax, [esp + 0x274]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004411bc
mov ecx, 0x4af207ef
cmp eax, 0
setne bl
and bl, 1
mov byte [esp + 0x2b5], bl
mov dword [esp + 0x220], ecx
jmp 0x41e654
mov eax, 0x778b0dc0
mov ecx, 0xb255d6f3
mov dl, byte [esp + 0x2b5]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, 0xa1609955
mov dword [esp + 0x220], eax
jmp 0x41e654
lea eax, [esp + 0x24c]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004411bc
mov ecx, 0x11f74da9
cmp eax, 0
setne dl
and dl, 1
mov byte [esp + 0x2b6], dl
mov dword [esp + 0x220], ecx
jmp 0x41e654
mov eax, 0x778b0dc0
mov ecx, 0x8761f769
mov dl, byte [esp + 0x2b6]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x220], eax
jmp 0x41e654
mov dword [0x4da4d0], 1
mov dword [esp + 0x220], 0x8761f769
jmp 0x41e654
mov eax, 0xe60bf5f4
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, 0xa5aeee52
mov dword [esp + 0x220], eax
jmp 0x41e654
mov dword [esp + 0x220], 0x8d36b327
jmp 0x41e654
mov dword [esp + 0x220], 0x14bbe1fa
jmp 0x41e654
mov dword [esp + 0x220], 0x52aef87f
jmp 0x41e654
mov eax, dword [esp + 0x244]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x220], 0xfe342309
mov dword [esp + 0x48], eax
jmp 0x41e654
mov dword [esp + 0x220], 0x44948654
jmp 0x41e654
lea eax, [esp + 0x234]
mov ecx, dword [0x4db45c]
mov edx, esp
mov dword [edx + 0x28], eax
lea eax, [esp + 0x238]
mov dword [edx], eax
mov dword [edx + 0x24], 0
mov dword [edx + 0x20], 0
mov dword [edx + 0x1c], 0
mov dword [edx + 0x18], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0xc], 0x220
mov dword [edx + 8], 0x20
mov dword [edx + 4], 2
call ecx
sub esp, 0x2c
mov ecx, 0x70a5c791
mov edx, 0x36371c05
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x220], ecx
jmp 0x41e654
mov eax, 0xa296fcad
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, dword [0x4db458]
mov ecx, dword [esp + 0x234]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx + 8], 0x4da4d0
mov dword [edx], 0
call eax
sub esp, 0xc
mov ecx, 0xe53f339e
cmp eax, 0
setne bl
and bl, 1
mov byte [esp + 0x2b7], bl
mov dword [esp + 0x220], ecx
jmp 0x41e654
mov eax, 0xa1becd88
mov ecx, 0xb5020586
mov dl, byte [esp + 0x2b7]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x220], eax
jmp 0x41e654
mov dword [0x4da4d0], 0
mov dword [esp + 0x220], 0xb5020586
jmp 0x41e654
mov eax, 0x70be2e1e
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, dword [0x4db454]
mov ecx, dword [esp + 0x234]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov ecx, 0x4777e7c2
mov dword [esp + 0x220], ecx
mov dword [esp + 0x44], eax
jmp 0x41e654
mov dword [esp + 0x220], 0x70a5c791
jmp 0x41e654
mov dword [esp + 0x220], 0x44948654
jmp 0x41e654
mov eax, 0xf00ccae4
mov ecx, 0x77ea8e0d
cmp dword [esp + 0x248], 0
cmovne eax, ecx
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, 0xaae636c8
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, dword [esp + 0x248]
mov dword [esp], eax
call fcn.004400e0
mov eax, 0x794a39fb
mov dword [esp + 0x220], eax
jmp 0x41e654
mov dword [esp + 0x220], 0xf00ccae4
jmp 0x41e654
mov dword [0x4da4cc], 1
mov eax, dword [0x4da4d0]
mov dword [esp + 0x2a8], eax
mov dword [esp + 0x220], 0xa8b9b4d
jmp 0x41e654
mov eax, 0x9056049
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, 0xb63edd22
mov ecx, dword [esp + 0x2a8]
mov dword [esp + 0x2b8], ecx
mov dword [esp + 0x220], eax
jmp 0x41e654
mov eax, dword [esp + 0x2b8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.00407a50
mov ecx, dword [esp + 0x2a4]
mov dword [ecx], eax
mov dword [esp + 0x224], eax
mov dword [esp + 0x220], 0x62318944
jmp 0x41e654
mov eax, dword [0x4db464]
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x244]
mov esi, esp
lea edi, [esp + 0x228]
mov dword [esi + 0x10], edi
mov dword [esi + 0xc], ecx
mov dword [esi], edx
mov dword [esi + 8], 0
mov dword [esi + 4], 0x19
call eax
sub esp, 0x14
mov dword [esp + 0x220], 0x137e54f7
mov dword [esp + 0x40], eax
jmp 0x41e654
mov eax, dword [0x4db464]
mov ecx, dword [esp + 0x228]
mov edx, dword [esp + 0x248]
mov esi, dword [esp + 0x244]
mov edi, esp
lea ebx, [esp + 0x228]
mov dword [edi + 0x10], ebx
mov dword [edi + 0xc], ecx
mov dword [edi + 8], edx
mov dword [edi], esi
mov dword [edi + 4], 0x19
call eax
sub esp, 0x14
mov dword [esp + 0x220], 0x343b0df7
mov dword [esp + 0x3c], eax
jmp 0x41e654
lea eax, [esp + 0x274]
mov ecx, 0
mov edx, dword [0x495148]
movzx edx, word [edx]
mov dword [esp + 0x230], edx
mov edx, dword [esp + 0x230]
mov esi, ecx
sub esi, edx
mov edx, ecx
sub edx, 1
add esi, edx
sub ecx, esi
mov edx, dword [0x495148]
movzx ecx, word [edx + ecx*2]
mov dword [esp + 0x22c], ecx
mov ecx, dword [esp + 0x22c]
mov edx, dword [0x495148]
mov esi, dword [esp + 0x230]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x495148]
add esi, 2
mov edi, dword [esp + 0x230]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00406c80
lea eax, [esp + 0x24c]
mov ecx, dword [str._f.__A]
movzx ecx, word [ecx]
mov dword [esp + 0x230], ecx
mov ecx, dword [esp + 0x230]
sub ecx, 0x680572a
mov edx, dword [str._f.__A]
movzx ecx, word [edx + ecx*2 + 0xd00ae56]
mov dword [esp + 0x22c], ecx
mov ecx, dword [esp + 0x22c]
mov edx, dword [str._f.__A]
mov esi, dword [esp + 0x230]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [str._f.__A]
add esi, 2
mov edi, dword [esp + 0x230]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00406c80
lea eax, [esp + 0x274]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004411bc
mov dword [esp + 0x220], 0xafdf19f6
mov dword [esp + 0x38], eax
jmp 0x41e654
lea eax, [esp + 0x24c]
mov ecx, dword [esp + 0x29c]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004411bc
mov dword [esp + 0x220], 0xa1609955
mov dword [esp + 0x34], eax
jmp 0x41e654
mov dword [esp + 0x220], 0xe60bf5f4
jmp 0x41e654
mov eax, dword [0x4db458]
mov ecx, dword [esp + 0x234]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx + 8], 0x4da4d0
mov dword [edx], 0
call eax
sub esp, 0xc
mov dword [esp + 0x220], 0xa296fcad
mov dword [esp + 0x30], eax
jmp 0x41e654
mov eax, dword [0x4db454]
mov ecx, dword [esp + 0x234]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [esp + 0x220], 0x70be2e1e
mov dword [esp + 0x2c], eax
jmp 0x41e654
mov eax, dword [esp + 0x248]
mov dword [esp], eax
call fcn.004400e0
mov dword [esp + 0x220], 0xaae636c8
jmp 0x41e654
mov dword [esp + 0x220], 0x9056049
jmp 0x41cf09