Function at 0x416fe0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x3c
push ebx
mov ebx, dword [esp + 0x4c]
push ebp
mov ebp, dword [esp + 0x48]
mov eax, dword [ebp + 0x164]
push esi
push edi
mov dword [esp + 0x20], eax
cmp ebx, dword [ebp + 0x90]
jne 0x417017
lea ecx, [ebp + 0x120]
lea edx, [ebp + 0x124]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x1c], edx
jmp 0x417028
mov eax, dword [ebp + 0x12c]
mov dword [esp + 0x10], eax
add eax, 4
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x10]
mov dword [ecx], eax
mov eax, dword [esp + 0x5c]
mov esi, dword [esp + 0x60]
lea edx, [esp + 0x58]
push edx
push esi
push eax
mov dword [esp + 0x64], eax
mov eax, dword [ebx + 4]
push ebx
call eax
mov ecx, dword [esp + 0x68]
mov edi, dword [esp + 0x2c]
add eax, 5
add esp, 0x10
mov dword [edi], ecx
cmp eax, 0x12
ja case.default.0x417064
jmp dword [eax*4 + 0x417b78]
mov eax, dword [ebx + 0x44]
mov edx, dword [ebx + 0x30]
sub ecx, eax
add eax, dword [esp + 0x5c]
push ecx
push eax
push ebx
call edx
movzx eax, ax
add esp, 0xc
mov dword [esp + 0x24], eax
test ax, ax
je 0x4170bf
mov eax, dword [ebp + 0x3c]
test eax, eax
je 0x4170a7
mov edx, dword [ebp + 4]
push 1
lea ecx, [esp + 0x28]
push ecx
push edx
call eax
add esp, 0xc
jmp 0x4178e8
cmp dword [ebp + 0x50], 0
je 0x4178e8
mov eax, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x5c]
jmp 0x4178de
mov ecx, dword [ebx + 0x44]
mov eax, dword [esp + 0x58]
mov edx, dword [esp + 0x20]
add edx, 0x50
sub eax, ecx
add ecx, dword [esp + 0x5c]
push edx
mov edx, ebx
call fcn.00414430
add esp, 4
mov dword [esp + 0x50], eax
test eax, eax
je 0x417a69
mov edi, dword [esp + 0x20]
push 0
push eax
push ebp
call fcn.004126c0
mov esi, eax
mov eax, dword [edi + 0x60]
add esp, 0xc
cmp byte [edi + 0x81], 0
mov dword [edi + 0x5c], eax
je 0x417133
cmp byte [edi + 0x82], 0
jne 0x417133
test esi, esi
jne 0x417145
mov eax, dword [ebp + 0x78]
test eax, eax
je 0x4170a7
mov ecx, dword [esp + 0x50]
mov edx, dword [ebp + 4]
push esi
push ecx
push edx
call eax
add esp, 0xc
jmp 0x4178e8
test esi, esi
je 0x417a1f
cmp byte [esi + 0x22], 0
je 0x417a2c
cmp byte [esi + 0x20], 0
jne 0x417a39
cmp dword [esi + 0x1c], 0
jne 0x417a46
cmp dword [esi + 4], 0
je 0x4171a0
cmp byte [ebp + 0x134], 0
jne 0x417186
mov eax, dword [ebp + 0x78]
test eax, eax
je 0x4170a7
mov ecx, dword [esi]
mov edx, dword [ebp + 4]
push 0
push ecx
push edx
call eax
add esp, 0xc
jmp 0x4178e8
push 0
push esi
mov esi, ebp
call fcn.004122d0
add esp, 8
test eax, eax
jne 0x417b6d
jmp 0x4178e8
cmp dword [ebp + 0x70], 0
je 0x4171ef
mov edi, ebp
mov byte [esi + 0x20], 1
call fcn.00413620
mov byte [esi + 0x20], 0
test eax, eax
je 0x417a69
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x10]
push ecx
mov ecx, dword [esi + 0x14]
push edx
mov edx, dword [ebp + 0x74]
push ecx
push eax
mov eax, dword [ebp + 0x70]
push edx
call eax
add esp, 0x14
test eax, eax
je 0x417a53
mov ecx, dword [ebp + 0x1b0]
mov dword [ebp + 0x1ac], ecx
jmp 0x4178e8
cmp dword [ebp + 0x50], 0
je 0x4178e8
mov eax, dword [esp + 0x58]
jmp 0x4178d9
mov esi, dword [ebp + 0x170]
test esi, esi
je 0x417216
mov eax, dword [esi]
mov dword [ebp + 0x170], eax
jmp 0x417245
mov ecx, dword [ebp + 0xc]
push 0x30
call ecx
mov esi, eax
add esp, 4
test esi, esi
je 0x417a69
mov edx, dword [ebp + 0xc]
push 0x20
call edx
add esp, 4
mov dword [esi + 0x24], eax
test eax, eax
je 0x417a60
add eax, 0x20
mov dword [esi + 0x28], eax
xor ecx, ecx
mov dword [esi + 0x2c], ecx
lea eax, [esi + 0x2c]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp + 0x16c]
mov dword [esi], eax
mov dword [ebp + 0x16c], esi
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], ecx
mov eax, dword [ebx + 0x44]
add eax, dword [esp + 0x5c]
push eax
mov dword [esi + 4], eax
mov eax, dword [ebx + 0x20]
push ebx
call eax
mov dword [esi + 8], eax
inc dword [ebp + 0x138]
mov ecx, dword [esi + 4]
mov eax, dword [esi + 8]
add eax, ecx
mov dword [esp + 0x58], ecx
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x1c], ecx
mov edx, dword [esi + 0x28]
sub edx, 2
push edx
lea ecx, [esp + 0x20]
push ecx
push eax
lea edx, [esp + 0x64]
push edx
mov dword [esp + 0x30], eax
mov eax, dword [ebx + 0x40]
push ebx
call eax
mov edi, dword [esp + 0x30]
sub edi, dword [esi + 0x24]
mov ecx, dword [esp + 0x34]
add esp, 0x1c
sar edi, 1
cmp dword [esp + 0x50], ecx
je 0x41732a
mov ecx, dword [esi + 0x24]
mov eax, dword [esi + 0x28]
mov edx, dword [ebp + 0x10]
sub eax, ecx
add eax, eax
push eax
push ecx
mov dword [esp + 0x30], eax
call edx
add esp, 8
test eax, eax
je 0x417a69
mov ecx, dword [esp + 0x28]
lea edx, [eax + ecx]
mov dword [esi + 0x24], eax
mov dword [esi + 0x28], edx
lea eax, [eax + edi*2]
mov dword [esp + 0x14], eax
mov ecx, dword [esi + 0x28]
mov eax, dword [esp + 0x18]
sub ecx, 2
push ecx
lea edx, [esp + 0x18]
push edx
mov edx, dword [ebx + 0x40]
push eax
lea ecx, [esp + 0x5c]
push ecx
push ebx
call edx
mov edi, dword [esp + 0x28]
sub edi, dword [esi + 0x24]
mov eax, dword [esp + 0x2c]
add esp, 0x14
sar edi, 1
cmp dword [esp + 0x50], eax
jne 0x4172c4
mov ecx, dword [esi + 0x24]
mov dword [esi + 0x18], edi
mov dword [esi + 0xc], ecx
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x14]
lea edi, [esi + 0xc]
push ecx
xor edx, edx
mov word [eax], dx
mov edx, dword [esp + 0x60]
push edi
push edx
push ebx
push ebp
call fcn.004164c0
add esp, 0x14
test eax, eax
jne 0x417b6d
mov eax, dword [ebp + 0x34]
test eax, eax
je 0x417386
mov ecx, dword [ebp + 0x188]
mov edx, dword [edi]
push ecx
mov ecx, dword [ebp + 4]
push edx
push ecx
call eax
add esp, 0xc
lea ecx, [ebp + 0x1a0]
call fcn.00412aa0
jmp 0x4178e8
cmp dword [ebp + 0x50], 0
je 0x41739f
mov edx, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
push edx
mov esi, ebp
call fcn.00412470
add esp, 4
lea ecx, [ebp + 0x1a0]
call fcn.00412aa0
jmp 0x4178e8
mov esi, dword [ebx + 0x44]
add esi, dword [esp + 0x5c]
mov eax, dword [ebx + 0x20]
push esi
push ebx
mov dword [esp + 0x20], 0
mov byte [esp + 0x58], 1
call eax
add eax, esi
push eax
push esi
push ebx
lea eax, [ebp + 0x1a0]
call fcn.00413d60
add esp, 0x14
test eax, eax
je 0x41741a
mov ecx, dword [ebp + 0x1ac]
cmp ecx, dword [ebp + 0x1a8]
jne 0x417402
lea esi, [ebp + 0x1a0]
call fcn.00412b20
test al, al
jne 0x417402
xor eax, eax
jmp 0x41741a
mov edx, dword [ebp + 0x1ac]
xor eax, eax
mov word [edx], ax
add dword [ebp + 0x1ac], 2
mov eax, dword [ebp + 0x1b0]
mov dword [esp + 0x34], eax
test eax, eax
je 0x417a69
mov ecx, dword [ebp + 0x1ac]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x38]
push eax
mov dword [ebp + 0x1b0], ecx
mov ecx, dword [esp + 0x64]
push ecx
push ebx
push ebp
call fcn.004164c0
add esp, 0x14
test eax, eax
jne 0x417b6d
mov eax, dword [ebp + 0x34]
mov edx, dword [ebp + 0x1ac]
mov esi, dword [esp + 0x34]
mov dword [ebp + 0x1b0], edx
test eax, eax
je 0x41747f
mov ecx, dword [ebp + 0x188]
mov edx, dword [ebp + 4]
push ecx
push esi
push edx
call eax
add esp, 0xc
xor al, al
jmp 0x417483
mov al, byte [esp + 0x50]
cmp dword [ebp + 0x38], 0
je 0x4174aa
cmp dword [ebp + 0x34], 0
je 0x41749b
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [esp + 0x10]
mov dword [edx], ecx
mov eax, dword [ebp + 4]
mov ecx, dword [ebp + 0x38]
push esi
push eax
call ecx
add esp, 8
jmp 0x4174c7
test al, al
je 0x4174c7
cmp dword [ebp + 0x50], 0
je 0x4174c7
mov edx, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
push edx
mov esi, ebp
call fcn.00412470
add esp, 4
lea ecx, [ebp + 0x1a0]
call fcn.00412aa0
mov esi, dword [esp + 0x18]
test esi, esi
je 0x417516
lea ebx, [ebx]
mov eax, dword [ebp + 0x68]
mov edi, esi
test eax, eax
je 0x4174f7
mov ecx, dword [esi]
mov edx, dword [ecx]
mov ecx, dword [ebp + 4]
push edx
push ecx
call eax
add esp, 8
mov edx, dword [ebp + 0x178]
lea eax, [esi + 4]
mov esi, dword [eax]
mov dword [eax], edx
mov dword [ebp + 0x178], edi
mov eax, dword [edi]
mov ecx, dword [edi + 8]
mov dword [eax + 4], ecx
test esi, esi
jne 0x4174e0
cmp dword [ebp + 0x138], 0
jne 0x4178e8
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x58]
push eax
push ecx
push edx
push ebp
call fcn.00415dd0
add esp, 0x10
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret
mov edx, dword [esp + 0x54]
cmp dword [ebp + 0x138], edx
je 0x4179bf
mov edi, dword [ebp + 0x16c]
mov eax, dword [edi]
mov ecx, dword [ebp + 0x170]
mov dword [ebp + 0x16c], eax
mov dword [edi], ecx
mov eax, dword [esp + 0x5c]
mov dword [ebp + 0x170], edi
mov edx, dword [ebx + 0x44]
mov ecx, dword [ebx + 0x20]
lea eax, [eax + edx*2]
push eax
push ebx
mov dword [esp + 0x58], eax
call ecx
add esp, 8
cmp eax, dword [edi + 8]
jne 0x417a76
mov esi, dword [esp + 0x50]
mov ecx, dword [edi + 4]
cmp eax, 4
jb 0x4175b8
lea esp, [esp]
mov edx, dword [ecx]
cmp edx, dword [esi]
jne 0x417a76
sub eax, 4
add esi, 4
add ecx, 4
cmp eax, 4
jae 0x4175a0
test eax, eax
je 0x4175e8
mov dl, byte [esi]
cmp dl, byte [ecx]
jne 0x417a76
cmp eax, 1
jbe 0x4175e8
mov dl, byte [esi + 1]
cmp dl, byte [ecx + 1]
jne 0x417a76
cmp eax, 2
jbe 0x4175e8
mov al, byte [esi + 2]
cmp al, byte [ecx + 2]
jne 0x417a76
dec dword [ebp + 0x138]
cmp dword [ebp + 0x38], 0
je 0x41767e
cmp byte [ebp + 0xec], 0
mov edx, dword [edi + 0x10]
je 0x41766c
test edx, edx
je 0x41766c
mov ecx, dword [edi + 0x1c]
mov eax, dword [edi + 0xc]
lea eax, [eax + ecx*2]
movzx ecx, word [edx]
test cx, cx
je 0x417631
lea esp, [esp]
add edx, 2
mov word [eax], cx
movzx ecx, word [edx]
add eax, 2
test cx, cx
jne 0x417620
cmp byte [ebp + 0xed], 0
mov edx, dword [edi + 0x14]
je 0x417667
test edx, edx
je 0x417667
mov cx, word [ebp + 0x1d8]
mov word [eax], cx
movzx ecx, word [edx]
add eax, 2
test cx, cx
je 0x417667
add edx, 2
mov word [eax], cx
movzx ecx, word [edx]
add eax, 2
test cx, cx
jne 0x417656
xor edx, edx
mov word [eax], dx
mov eax, dword [edi + 0xc]
mov ecx, dword [ebp + 4]
mov edx, dword [ebp + 0x38]
push eax
push ecx
call edx
add esp, 8
jmp 0x417697
cmp dword [ebp + 0x50], 0
je 0x417697
mov eax, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x5c]
mov esi, ebp
call fcn.00412470
add esp, 4
cmp dword [edi + 0x2c], 0
je 0x4176de
lea ecx, [ecx]
mov eax, dword [ebp + 0x68]
mov esi, dword [edi + 0x2c]
test eax, eax
je 0x4176b8
mov ecx, dword [esi]
mov edx, dword [ecx]
mov ecx, dword [ebp + 4]
push edx
push ecx
call eax
add esp, 8
mov edx, dword [edi + 0x2c]
mov eax, dword [edx + 4]
mov dword [edi + 0x2c], eax
mov ecx, dword [ebp + 0x178]
mov dword [esi + 4], ecx
mov dword [ebp + 0x178], esi
mov edx, dword [esi]
mov eax, dword [esi + 8]
mov dword [edx + 4], eax
cmp dword [edi + 0x2c], 0
jne 0x4176a0
cmp dword [ebp + 0x138], 0
je 0x417523
jmp 0x4178e8
mov ecx, dword [esp + 0x5c]
mov edx, dword [ebx + 0x2c]
push ecx
push ebx
call edx
add esp, 8
test eax, eax
js 0x417a8d
cmp dword [ebp + 0x3c], 0
je 0x4171ef
lea ecx, [esp + 0x30]
push ecx
push eax
call fcn.00425c00
mov ecx, dword [ebp + 0x3c]
push eax
mov eax, dword [ebp + 4]
lea edx, [esp + 0x3c]
push edx
push eax
call ecx
add esp, 0x14
jmp 0x4178e8
mov eax, dword [ebp + 0x3c]
test eax, eax
je 0x417756
mov edx, dword [ebp + 4]
push 1
lea ecx, [esp + 0x54]
push ecx
push edx
mov dword [esp + 0x5c], 0xa
call eax
add esp, 0xc
jmp 0x4178e8
cmp dword [ebp + 0x50], 0
je 0x4178e8
mov eax, dword [esp + 0x5c]
push eax
mov eax, ecx
jmp 0x4178de
mov eax, dword [ebp + 0x48]
test eax, eax
je 0x41777b
mov ecx, dword [ebp + 4]
push ecx
call eax
jmp 0x417793
cmp dword [ebp + 0x50], 0
je 0x417796
mov edx, dword [esp + 0x5c]
push edx
mov eax, ecx
mov esi, ebp
call fcn.00412470
mov esi, dword [esp + 0x64]
add esp, 4
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x64]
push eax
push ecx
lea edx, [esp + 0x60]
push esi
push edx
mov eax, ebx
mov ecx, ebp
call fcn.00412f30
add esp, 0x10
test eax, eax
jne 0x417b6d
cmp dword [esp + 0x58], eax
jne 0x4178e8
pop edi
pop esi
mov dword [ebp + 0x118], 0x414710
pop ebp
pop ebx
add esp, 0x3c
ret
mov esi, dword [ebp + 0x3c]
test esi, esi
je 0x417756
cmp byte [ebx + 0x49], 0
je 0x417803
mov eax, dword [esp + 0x5c]
test al, 1
jne 0x417803
sub ecx, eax
sar ecx, 1
push ecx
push eax
mov eax, dword [ebp + 4]
push eax
call esi
add esp, 0xc
jmp 0x4178e8
mov edx, dword [ebp + 0x2c]
mov eax, dword [ebp + 0x30]
push eax
mov dword [esp + 0x54], edx
lea edx, [esp + 0x54]
push edx
push ecx
mov ecx, dword [ebx + 0x40]
lea eax, [esp + 0x68]
push eax
push ebx
call ecx
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x64]
mov dword [edi], edx
mov eax, dword [ebp + 0x2c]
mov edx, dword [ebp + 4]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push edx
call esi
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
add esp, 0x20
cmp eax, ecx
je 0x4178e8
jmp 0x417850
mov edx, dword [esp + 0x10]
mov dword [edx], eax
mov eax, dword [ebp + 0x2c]
mov edx, dword [ebp + 0x30]
push edx
mov edx, dword [ebx + 0x40]
mov dword [esp + 0x54], eax
lea eax, [esp + 0x54]
push eax
push ecx
lea ecx, [esp + 0x68]
push ecx
push ebx
call edx
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x64]
mov dword [edi], eax
mov eax, dword [ebp + 0x2c]
mov edx, dword [ebp + 4]
sub ecx, eax
sar ecx, 1
push ecx
push eax
push edx
call esi
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
add esp, 0x20
cmp eax, ecx
jne 0x417850
jmp 0x4178e8
push ecx
mov ecx, dword [esp + 0x60]
push ecx
mov ecx, ebx
mov edi, ebp
call fcn.00415310
add esp, 8
test eax, eax
je 0x417a69
jmp 0x4178e8
mov edx, dword [esp + 0x5c]
mov eax, ecx
mov ecx, ebx
mov edi, ebp
call fcn.00415430
test eax, eax
je 0x417a69
jmp 0x4178e8
cmp dword [ebp + 0x50], 0
je 0x4178e8
mov eax, ecx
mov edx, dword [esp + 0x5c]
push edx
mov esi, ebp
call fcn.00412470
add esp, 4
mov ecx, dword [esp + 0x58]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x5c], ecx
mov dword [eax], ecx
mov eax, dword [ebp + 0x1e0]
sub eax, 2
je 0x417b68
dec eax
je 0x417918
jmp 0x417032
cmp byte [esp + 0x68], 0
je 0x417928
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x64]
pop edi
pop esi
pop ebp
mov dword [edx], ecx
xor eax, eax
pop ebx
add esp, 0x3c
ret
mov dword [edi], esi
mov eax, dword [ebp + 0x3c]
test eax, eax
je 0x41794b
mov edx, dword [ebp + 4]
push 1
lea ecx, [esp + 0x54]
push ecx
push edx
mov dword [esp + 0x5c], 0xa
call eax
add esp, 0xc
jmp 0x417968
cmp dword [ebp + 0x50], 0
je 0x417968
mov eax, dword [esp + 0x5c]
push eax
mov eax, dword [esp + 0x64]
mov esi, ebp
call fcn.00412470
mov esi, dword [esp + 0x64]
add esp, 4
mov eax, dword [esp + 0x54]
test eax, eax
je 0x417b3c
cmp dword [ebp + 0x138], eax
jne 0x4179bf
mov ecx, dword [esp + 0x64]
pop edi
mov dword [ecx], esi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x3c
ret
cmp byte [esp + 0x68], 0
je 0x4179a7
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x5c]
pop edi
pop esi
pop ebp
mov dword [eax], edx
xor eax, eax
pop ebx
add esp, 0x3c
ret
mov eax, dword [esp + 0x54]
test eax, eax
jle 0x417b3c
cmp dword [ebp + 0x138], eax
je 0x417914
pop edi
pop esi
pop ebp
mov eax, 0xd
pop ebx
add esp, 0x3c
ret
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
mov dword [eax], ecx
mov eax, 4
pop ebx
add esp, 0x3c
ret
cmp byte [esp + 0x68], 0
jne 0x417914
pop edi
pop esi
pop ebp
mov eax, 5
pop ebx
add esp, 0x3c
ret
cmp byte [esp + 0x68], 0
je 0x417a12
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x64]
pop edi
pop esi
pop ebp
mov dword [ecx], eax
xor eax, eax
pop ebx
add esp, 0x3c
ret
pop edi
pop esi
pop ebp
mov eax, 6
pop ebx
add esp, 0x3c
ret
pop edi
pop esi
pop ebp
mov eax, 0xb
pop ebx
add esp, 0x3c
ret
pop edi
pop esi
pop ebp
mov eax, 0x18
pop ebx
add esp, 0x3c
ret
pop edi
pop esi
pop ebp
mov eax, 0xc
pop ebx
add esp, 0x3c
ret
pop edi
pop esi
pop ebp
mov eax, 0xf
pop ebx
add esp, 0x3c
ret
pop edi
pop esi
pop ebp
mov eax, 0x15
pop ebx
add esp, 0x3c
ret
mov edx, dword [ebp + 0x14]
push esi
call edx
add esp, 4
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x3c
ret
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x50]
pop edi
pop esi
pop ebp
mov dword [eax], ecx
mov eax, 7
pop ebx
add esp, 0x3c
ret
pop edi
pop esi
pop ebp
mov eax, 0xe
pop ebx
add esp, 0x3c
ret
pop edi
pop esi
pop ebp
mov eax, 0x11
pop ebx
add esp, 0x3c
ret
cmp byte [esp + 0x68], 0
jne 0x417993
mov ecx, dword [ebp + 0x3c]
test ecx, ecx
je 0x417b11
cmp byte [ebx + 0x49], 0
je 0x417ada
mov eax, dword [esp + 0x5c]
test al, 1
jne 0x417ada
mov edx, esi
sub edx, eax
sar edx, 1
push edx
push eax
mov eax, dword [ebp + 4]
push eax
call ecx
add esp, 0xc
jmp 0x417b2e
mov edx, dword [ebp + 0x30]
mov ecx, dword [ebp + 0x2c]
push edx
mov edx, dword [ebx + 0x40]
lea eax, [esp + 0x54]
push eax
mov dword [esp + 0x58], ecx
push esi
lea ecx, [esp + 0x68]
push ecx
push ebx
call edx
mov eax, dword [ebp + 0x2c]
mov ecx, dword [esp + 0x64]
mov edx, dword [ebp + 4]
sub ecx, eax
sar ecx, 1
push ecx
push eax
mov eax, dword [ebp + 0x3c]
push edx
call eax
add esp, 0x20
jmp 0x417b2e
cmp dword [ebp + 0x50], 0
je 0x417b2e
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0x60]
push ecx
mov esi, ebp
call fcn.00412470
mov esi, dword [esp + 0x64]
add esp, 4
mov eax, dword [esp + 0x54]
test eax, eax
jne 0x417b49
mov edx, dword [esp + 0x10]
mov dword [edx], esi
pop edi
pop esi
pop ebp
mov eax, 3
pop ebx
add esp, 0x3c
ret
cmp dword [ebp + 0x138], eax
je 0x41797c
mov eax, dword [esp + 0x10]
pop edi
mov dword [eax], esi
pop esi
pop ebp
mov eax, 0xd
pop ebx
add esp, 0x3c
ret
mov eax, 0x23
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret