Function at 0x4016ac
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4a4
mov eax, dword [0x42a0b4]
xor eax, ebp
mov dword [ebp - 4], eax
and dword [ebp - 0x498], 0
push ebx
push esi
mov ebx, 0x42b310
push edi
mov ecx, ebx
call fcn.00406d94
test eax, eax
je 0x4017e0
mov eax, dword [0x42bd1c]
cmp eax, 6
je 0x401714
cmp eax, 7
je 0x401714
push 0x42bd24
push 0x44d1b8
mov dword [0x42b300], eax
call fcn.00410ea9
push 0x42bda8
push 0x44d238
call fcn.00410ea9
jmp 0x4019b8
mov esi, 0x4260cc
lea edi, [ebp - 0x288]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x72
lea eax, [ebp - 0x27a]
push 0
push eax
movsw word es:[edi], word [esi]
call fcn.00410870
mov esi, 0x4260dc
lea edi, [ebp - 0x208]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add esp, 0xc
movsd dword es:[edi], dword [esi]
push 0x72
lea eax, [ebp - 0x1fa]
push 0
push eax
movsw word es:[edi], word [esi]
call fcn.00410870
mov esi, 0x4260ec
lea edi, [ebp - 0x188]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add esp, 0xc
movsd dword es:[edi], dword [esi]
push 0x72
lea eax, [ebp - 0x17a]
push 0
push eax
movsw word es:[edi], word [esi]
call fcn.00410870
mov esi, 0x4260fc
lea edi, [ebp - 0x108]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add esp, 0xc
movsd dword es:[edi], dword [esi]
push 0x70
lea eax, [ebp - 0xf8]
push 0
push eax
movsd dword es:[edi], dword [esi]
call fcn.00410870
mov esi, 0x42610c
lea edi, [ebp - 0x88]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add esp, 0xc
movsw word es:[edi], word [esi]
push 0x6e
xor esi, esi
lea eax, [ebp - 0x76]
push esi
push eax
call fcn.00410870
add esp, 0xc
lea edi, [ebp - 0x288]
push edi
mov ecx, ebx
call fcn.00406eb5
test eax, eax
jne 0x401982
inc esi
sub edi, 0xffffff80
cmp esi, 5
jl 0x4017c7
or dword [0x42b300], 0xffffffff
and dword [0x44d348], 0
cmp dword [0x44d1b0], 3
jne 0x4019d1
cmp dword [0x42b300], 5
ja 0x4019ca
xor edi, edi
cmp dword [0x44d348], edi
jne 0x4019d1
xor eax, eax
push 0x206
mov word [ebp - 0x490], ax
lea eax, [ebp - 0x48e]
push edi
push eax
mov dword [ebp - 0x49c], edi
call fcn.00410870
add esp, 0xc
mov esi, 0x104
push esi
lea eax, [ebp - 0x210]
push eax
xor ebx, ebx
push ebx
call dword [fcn.0042211c]
lea eax, [ebp - 0x210]
push 0x5c
push eax
call fcn.00411aa1
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x490]
push esi
push eax
call fcn.00410e15
add esp, 0x14
lea eax, [ebp - 0x490]
push 0x426120
push eax
call fcn.00410e78
pop ecx
pop ecx
lea eax, [ebp - 0x490]
push eax
call dword [0x422130]
cmp eax, 0xffffffff
jne 0x4018dc
lea eax, [ebp - 0x49c]
push eax
call fcn.0040254a
mov edi, eax
pop ecx
cmp edi, ebx
je 0x4019d1
mov eax, dword [ebp - 0x49c]
cmp eax, 0xa
jl 0x4019d1
lea ecx, [ebp - 0x490]
push ecx
push edi
call fcn.00403768
pop ecx
pop ecx
test eax, eax
jne 0x4019d1
call dword [0x42212c]
push eax
lea eax, [ebp - 0x490]
push eax
call section..text
test eax, eax
je 0x4019d1
cmp edi, ebx
je 0x401902
push edi
call fcn.004107bc
pop ecx
lea eax, [ebp - 0x494]
push eax
push 0x28
mov dword [ebp - 0x494], ebx
call dword [fcn.00422128]
push eax
call dword [0x422004]
test eax, eax
je 0x40194c
mov edi, dword [ebp - 0x494]
lea eax, [ebp - 0x4a0]
push eax
push 0x426150
push ebx
call dword [0x422000]
test eax, eax
je 0x40194c
lea esi, [ebp - 0x4a0]
mov ecx, edi
call fcn.0040717f
cmp dword [ebp - 0x494], ebx
je 0x401960
push dword [ebp - 0x494]
call dword [fcn.00422124]
push dword [0x42bd20]
lea ebx, [ebp - 0x490]
call fcn.00407076
pop ecx
test eax, eax
jne 0x4019d1
mov eax, dword [0x42bd20]
mov dword [0x44d348], eax
jmp 0x4019d1
mov eax, esi
shl eax, 7
lea eax, [ebp + eax - 0x288]
push eax
push 0x44d238
call fcn.00410ea9
push 0x42bd24
push 0x44d1b8
mov dword [0x42b300], 6
call fcn.00410ea9
mov dword [0x42b304], esi
add esp, 0x10
mov dword [ebp - 0x498], 1
jmp 0x4017ee
and dword [0x44d348], 0
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x498]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004107c7
leave
ret