Function at 0x412370
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb4
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 0x10]
push edi
mov edx, dword [esi]
mov edi, ecx
sub esp, 0x10
mov eax, dword [edi + 0xf4]
mov dword [esp + 0x50], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x5c], edi
mov eax, dword [eax + edx*4]
mov dword [esp + 0x34], 3
movsx ecx, word [eax + 0xa]
mov edx, dword [eax]
mov dword [esp + 0x44], ecx
mov eax, dword [edx]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
mov eax, dword [edx + 8]
mov dword [ecx + 8], eax
mov eax, dword [edx + 0xc]
mov dword [ecx + 0xc], eax
inc dword [eax]
lea ecx, [edi + 0x138]
call fcn.00409bf0
mov dword [esp + 0x2c], eax
test eax, eax
je 0x47ad87
mov eax, dword [edi + 0x14c]
inc dword [esi]
mov ecx, dword [esi]
mov dword [esp + 0x84], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x60], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 1
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x50], 0x49ec4c
cmp word [eax + 8], 0x47
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x74], 0x4b36a8
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x38], 0
jne 0x47ad9f
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x18]
push eax
push esi
mov dword [esp + 0x20], ecx
mov dword [esp + 0x28], ecx
push ebx
mov ecx, edi
call fcn.0041e216
test eax, eax
js 0x412d1b
mov ebx, dword [esp + 0x2c]
mov eax, dword [ebx + 0x10]
mov dword [edi + 0xf4], eax
mov eax, dword [ebx + 0x10]
cmp eax, dword [0x4c3110]
jg 0x412c9a
test eax, eax
jle 0x412c9a
shl eax, 4
add eax, dword [0x4c314c]
mov dword [esp + 0x18], eax
mov eax, dword [eax + 4]
mov ecx, dword [eax]
cmp word [ecx + 8], 0
jne 0x4124d1
cmp dword [ecx], 0x2b
je 0x47adb1
mov ecx, 3
cmp dword [ebx + 0x14], 0
mov edx, dword [esp + 0x1c]
mov esi, ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x20], 0
mov dword [esp + 0x30], 0
jg 0x412a30
mov eax, dword [esp + 0x20]
cmp eax, dword [ebx + 0x18]
jl 0x47b1ef
cmp eax, dword [ebx + 0x14]
jg 0x47b1ef
cmp ecx, edx
jne 0x47b1ef
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], eax
test eax, eax
js 0x47aff8
lea eax, [esp + 0x44]
push eax
mov ecx, 0x4c30f0
call fcn.0041af65
push dword [esp + 0x44]
lea ecx, [esp + 0x48]
call fcn.0041add3
cmp dword [ebx + 0x14], 1
jge 0x41281f
mov eax, dword [esp + 0x20]
mov dword [edi + 0x14c], eax
mov eax, dword [edi]
mov dword [esp + 0x88], 0
mov ebx, dword [eax + 4]
add ebx, edi
mov dword [esp + 0x90], 0
cmp byte [ebx + 0xd], 0
mov dword [esp + 0x94], 1
mov byte [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov byte [esp + 0xa0], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 1
mov byte [esp + 0xb8], 0
jne 0x47b142
push 0x40
call fcn.00420f2a
mov esi, eax
add esp, 4
test esi, esi
je 0x412cd2
lea eax, [esp + 0x88]
push eax
mov ecx, esi
mov dword [esi + 8], 0
call fcn.00410090
lea ecx, [esi + 0x20]
lea eax, [esp + 0xa8]
mov byte [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov byte [esi + 0x18], 0
push eax
mov dword [ecx + 8], 0
call fcn.00410090
mov byte [esi + 0x30], 0
mov eax, dword [ebx + 8]
mov dword [esi + 0x38], eax
mov dword [ebx + 8], esi
inc dword [ebx + 4]
mov eax, dword [esp + 0x2c]
mov ecx, dword [edi + 0x160]
mov eax, dword [eax + 0x10]
mov ebx, dword [edi + 0xf4]
lea esi, [edi + 0x160]
inc eax
mov dword [esp + 0x30], ecx
push eax
mov ecx, edi
call fcn.0040ced0
mov eax, dword [esp + 0x30]
cmp eax, dword [esi]
jb 0x412cd9
mov eax, dword [edi]
mov dword [edi + 0xf4], ebx
mov ecx, dword [eax + 4]
mov eax, dword [ecx + edi + 8]
add ecx, edi
cmp byte [ecx + 0xd], 0
jne 0x412ce2
cmp byte [eax + 0x10], 0
mov eax, dword [ebp + 0x18]
je 0x412bef
cmp byte [ecx + 0xd], 0
mov byte [eax], 1
jne 0x47b16f
mov ebx, dword [ecx + 8]
mov esi, dword [ebp + 0x14]
cmp esi, ebx
je 0x4126bf
cmp dword [esi + 0xc], 4
je 0x47b17a
mov ecx, esi
call fcn.00411260
push ebx
mov ecx, esi
call fcn.00410090
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov eax, dword [esi + edi + 8]
add esi, edi
cmp byte [esi + 0xd], 0
jne 0x412cea
cmp byte [eax + 0x18], 0
jne 0x47b194
cmp byte [esi + 0xd], 0
mov eax, dword [esi + 8]
jne 0x412cf2
cmp byte [eax + 0x30], 0
jne 0x47b1ab
mov eax, dword [edi]
mov esi, dword [eax + 4]
add esi, edi
cmp byte [esi + 0xd], 0
jne 0x47b1c8
cmp byte [esi + 0xc], 0
jne 0x412cfa
mov ebx, dword [esi + 8]
mov eax, dword [ebx + 0x38]
mov dword [esp + 0x44], eax
test ebx, ebx
je 0x41273a
lea ecx, [ebx + 0x20]
call fcn.00411260
mov ecx, ebx
call fcn.00411260
push ebx
call fcn.00420f9e
mov eax, dword [esp + 0x48]
add esp, 4
mov dword [esi + 8], eax
mov byte [esi + 0xd], 0
dec dword [esi + 4]
mov eax, dword [edi]
mov ecx, dword [eax + 4]
mov eax, dword [ecx + edi + 8]
add ecx, edi
cmp byte [ecx + 0xd], 0
jne 0x412d03
mov edx, dword [esp + 0x9c]
mov dword [eax + 0x14], edx
cmp byte [ecx + 0xd], 0
mov eax, dword [ecx + 8]
jne 0x412d0b
mov byte [eax + 0x18], 0
mov eax, dword [edi]
mov esi, dword [eax + 4]
add esi, edi
cmp byte [esi + 0xd], 0
jne 0x47b1e4
mov ecx, dword [esi + 8]
lea eax, [esp + 0xa8]
push eax
add ecx, 0x20
call fcn.0040c581
cmp byte [esi + 0xd], 0
mov eax, dword [esi + 8]
jne 0x412d13
mov ecx, 0x4c30f0
mov byte [eax + 0x30], 0
call fcn.0041ad91
mov eax, dword [esp + 0x84]
lea ecx, [esp + 0xa8]
mov dword [edi + 0x14c], eax
xor ebx, ebx
call fcn.00411260
lea ecx, [esp + 0x88]
call fcn.00411260
lea ecx, [esp + 0x60]
call fcn.00411260
xor edi, edi
cmp dword [esp + 0x7c], edi
ja 0x412b65
push dword [esp + 0x78]
call fcn.00420f9e
mov eax, dword [esp + 0x58]
xor esi, esi
add esp, 4
cmp dword [esp + 0x58], esi
ja 0x412b90
push eax
call fcn.00420f9e
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x18]
sub eax, ecx
mov dword [esp + 0x34], 1
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], eax
lea ecx, [ecx]
mov ecx, dword [ebx + 4]
mov ebx, dword [esp + 0x24]
xor esi, esi
mov eax, dword [ecx + ebx*4]
lea edx, [ecx + ebx*4]
cmp word [eax + 8], si
je 0x47b005
mov eax, dword [esp + 0x24]
mov dword [esp + 0x28], 1
mov edi, dword [esp + 0x28]
lea ecx, [ecx + eax*4]
xor ebx, ebx
lea edx, [ecx + 4]
mov eax, dword [edx]
movzx eax, word [eax + 8]
cmp ax, 0x47
je 0x412cab
cmp ax, 0x48
je 0x412bdf
cmp ax, 0x40
jne 0x412be6
test ebx, ebx
jne 0x412be6
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], edi
mov edi, dword [esp + 0x4c]
cmp dword [esp + 0x34], eax
jg 0x47b0b9
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + edx]
cmp byte [eax], 0
jne 0x47b02e
mov eax, dword [ecx]
mov edx, dword [edx]
mov ebx, dword [eax]
or esi, 0x200
cmp dword [0x4c30f0], 0
mov dword [esp + 0x30], edx
je 0x47b060
cmp byte [0x4c30f9], 0
mov eax, dword [0x4c30f4]
jne 0x412cb5
push eax
push ebx
mov dword [esp + 0x24], eax
call fcn.0040c240
test al, al
jne 0x47b076
and esi, 0xff00
push 0x20
mov dword [esp + 0x48], esi
call fcn.00420f2a
mov esi, eax
add esp, 4
test esi, esi
je 0x412cc4
xor ecx, ecx
mov eax, 8
mov edx, 2
mul edx
seto cl
mov dword [esi + 4], 0
mov dword [esi + 8], 8
neg ecx
or ecx, eax
push ecx
call fcn.00420f2a
add esp, 4
xor ecx, ecx
mov dword [esi], eax
push 4
mov word [eax], cx
call fcn.00420f2a
add esp, 4
test eax, eax
je 0x412cbd
mov dword [eax], 1
mov dword [esi + 0xc], eax
cmp esi, ebx
je 0x4129b0
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
cmp eax, 1
jg 0x47b099
mov edi, dword [ebx + 4]
mov dword [esi + 4], edi
lea eax, [edi + 1]
cmp dword [esi + 8], eax
jb 0x412c59
mov eax, dword [esi + 4]
lea eax, [eax*2 + 2]
push eax
push dword [ebx]
push dword [esi]
call fcn.004208c0
add esp, 0xc
mov eax, dword [esp + 0x44]
push 0x10
mov dword [esi + 0x10], eax
call fcn.00420f2a
mov edi, eax
add esp, 4
test edi, edi
je 0x412ccb
push dword [esp + 0x30]
mov ecx, edi
mov dword [edi + 8], 0
call fcn.00410090
mov ebx, dword [esp + 0x1c]
mov dword [esi + 0x14], edi
mov dword [esi + 0x1c], 0
mov dword [esi + 0x18], 0
push dword [ebx]
push esi
call fcn.0040c160
mov edi, dword [esp + 0x4c]
mov dword [ebx], eax
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x34]
add dword [esp + 0x38], 4
inc ecx
add dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x2c]
inc eax
mov dword [esp + 0x34], eax
cmp eax, dword [ecx + 0x14]
jle 0x412840
jmp 0x412555
cmp ecx, edx
jae 0x412bcd
inc dword [esp + 0x20]
lea edx, [eax + esi*4]
xor bl, bl
mov eax, dword [edx]
mov byte [esp + 0x13], bl
cmp word [eax + 8], 0
mov dword [esp + 0x3c], 0
je 0x47adbf
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
cmp word [eax + 8], 0x33
je 0x412a70
xor bl, bl
mov byte [esp + 0x13], bl
lea eax, [esp + 0x13]
push eax
lea ecx, [esp + 0x78]
call fcn.0041e26e
test bl, bl
jne 0x47ae11
mov eax, dword [esp + 0x40]
lea ecx, [esp + 0x60]
mov dword [edi + 0xf4], eax
call fcn.00411260
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x54]
mov dword [esp + 0x70], 1
mov dword [esp + 0x64], 0
call fcn.0041e101
push dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x58]
mov ebx, dword [ebp + 0xc]
push dword [ecx + eax*4 - 4]
lea eax, [esp + 0x1c]
push eax
push ebx
mov ecx, edi
call fcn.0040e730
test eax, eax
js 0x412d1b
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x18]
mov eax, dword [eax + 0x10]
mov dword [edi + 0xf4], eax
mov ecx, dword [ecx + 4]
inc esi
mov eax, dword [ecx + esi*4]
cmp word [eax + 8], 0x41
je 0x412c19
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
cmp ecx, edx
je 0x412bcd
mov eax, dword [ebx + 4]
mov eax, dword [eax + ecx*4]
cmp word [eax + 8], 0x40
jne 0x47af92
lea eax, [ecx + 1]
cmp eax, edx
je 0x47af92
mov ecx, eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x3c], eax
mov eax, dword [eax + esi*4]
cmp word [eax + 8], 0x40
jne 0x412b4a
inc esi
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
inc ebx
mov dword [esp + 0x30], ebx
cmp ebx, dword [eax + 0x14]
jge 0x412bcd
mov eax, dword [esp + 0x3c]
jmp 0x412a30
mov eax, dword [esp + 0x78]
push dword [eax + edi*4]
lea esi, [eax + edi*4]
call fcn.00420f9e
inc edi
add esp, 4
mov dword [esi], 0
cmp edi, dword [esp + 0x7c]
jb 0x412b65
jmp 0x4127ef
mov edi, dword [eax + esi*4]
test edi, edi
je 0x412bab
mov ecx, edi
call fcn.00413120
push edi
call fcn.00420f9e
mov eax, dword [esp + 0x58]
add esp, 4
mov dword [eax + esi*4], 0
inc esi
cmp esi, dword [esp + 0x58]
jb 0x412b90
push eax
call fcn.00420f9e
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov eax, dword [esp + 0x20]
cmp eax, 1
je 0x412c0e
mov ebx, dword [esp + 0x2c]
jmp 0x4124fe
dec ebx
js 0x41289d
inc edi
add edx, 4
jmp 0x412871
mov esi, dword [ebp + 0x14]
mov ecx, esi
mov byte [eax], 0
call fcn.00411260
mov dword [esi + 0xc], 1
mov dword [esi], 0
jmp 0x4126bf
cmp byte [ebp + 8], 0
je 0x412bd6
jmp 0x47afab
inc esi
xor edx, edx
lea ecx, [ecx + esi*4]
nop
mov eax, dword [ecx]
movzx eax, word [eax + 8]
cmp ax, 0x47
je 0x412ca1
cmp ax, 0x48
je 0x412c4c
cmp ax, 0x40
je 0x412c3e
inc esi
add ecx, 4
jmp 0x412c20
test edx, edx
je 0x412b02
inc esi
add ecx, 4
jmp 0x412c20
dec edx
js 0x412b02
inc esi
add ecx, 4
jmp 0x412c20
push eax
call fcn.0040b2a0
mov dword [esi + 8], eax
mov eax, dword [esi]
test eax, eax
je 0x412c71
push eax
call fcn.00420f9e
add esp, 4
mov eax, dword [esi + 8]
xor ecx, ecx
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00420f2a
add esp, 4
xor ecx, ecx
mov dword [esi], eax
mov word [eax + edi*2], cx
jmp 0x412999
xor eax, eax
jmp 0x4124b8
inc edx
inc esi
add ecx, 4
jmp 0x412c20
inc ebx
inc edi
add edx, 4
jmp 0x412871
mov eax, dword [eax + 8]
jmp 0x4128f6
xor eax, eax
jmp 0x412972
xor esi, esi
jmp 0x412975
xor edi, edi
jmp 0x4129dd
xor esi, esi
jmp 0x412629
mov edi, dword [esp + 0x30]
jmp 0x47b15b
mov eax, dword [eax + 0x38]
jmp 0x412682
mov eax, dword [eax + 0x38]
jmp 0x4126d4
mov eax, dword [eax + 0x38]
jmp 0x4126eb
mov byte [esi + 0xd], 1
jmp 0x412741
mov eax, dword [eax + 0x38]
jmp 0x412759
mov eax, dword [eax + 0x38]
jmp 0x412770
mov eax, dword [eax + 0x38]
jmp 0x4127a5
or ebx, 0xffffffff
jmp 0x4127da
push dword [esp + 0x34]
mov ecx, edi
push 0x85
call fcn.0044e569
or eax, 0xffffffff
jmp 0x412816
push dword [esp + 0x34]
mov ecx, edi
push 0x6f
call fcn.0044e569
jmp 0x412d1b
mov ecx, 4
mov dword [esp + 0x24], ecx
jmp 0x4124d6
mov eax, dword [edx + 4]
cmp word [eax + 8], 0x33
je 0x47addc
mov eax, dword [edx]
mov edi, dword [edx + 4]
mov eax, dword [eax]
cmp eax, dword [edi]
mov edi, dword [esp + 0x4c]
je 0x47af24
mov eax, dword [edx]
mov eax, dword [eax]
cmp eax, 0x24
jne 0x47aded
mov bl, 1
mov byte [esp + 0x13], bl
jmp 0x47adfe
cmp eax, 0x1e
jne 0x47af24
mov dword [esp + 0x3c], 0x100
mov eax, dword [edx + 4]
add edx, 4
inc esi
cmp word [eax + 8], 0
je 0x47adbf
jmp 0x412a5a
mov ebx, dword [ebp + 0xc]
mov eax, dword [esp + 0x14]
mov ecx, dword [ebx + 4]
push 0
mov eax, dword [ecx + eax*4]
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x30]
push ecx
push dword [eax]
call fcn.0040bfbf
test al, al
je 0x47af45
test dword [esp + 0x38], 0x100
je 0x47ae77
test dword [esp + 0x3c], 0x100
jne 0x47ae77
mov eax, dword [esp + 0x40]
mov dword [edi + 0xf4], eax
mov ecx, dword [ebx + 4]
mov eax, dword [esp + 0x14]
mov eax, dword [ecx + eax*4]
mov ecx, edi
movsx eax, word [eax + 0xa]
push eax
push 0xb0
call fcn.0044e569
jmp 0x412d1b
mov ecx, dword [esp + 0x28]
inc dword [esp + 0x14]
push 5
inc esi
call fcn.0040bf44
test al, al
je 0x47aeba
mov eax, dword [ebx + 4]
mov ecx, dword [esp + 0x14]
mov eax, dword [eax + ecx*4]
cmp word [eax + 8], 0x4e
jne 0x47aeba
push 0
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0x1c]
push eax
push ebx
mov ecx, edi
call fcn.0046029a
test eax, eax
js 0x412d1b
jmp 0x47aef8
mov ecx, dword [esp + 0x28]
push 0xf
call fcn.0040bf44
test al, al
je 0x47aef8
mov eax, dword [ebx + 4]
mov ecx, dword [esp + 0x14]
mov eax, dword [eax + ecx*4]
cmp word [eax + 8], 0x4e
jne 0x47aef8
push 0
push 0
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x20]
push eax
push ebx
mov ecx, edi
call fcn.00460568
test eax, eax
js 0x412d1b
lea ecx, [esp + 0x60]
call fcn.00411260
mov eax, dword [esp + 0x28]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x54]
mov dword [esp + 0x70], 6
call fcn.0041e101
jmp 0x412b02
mov eax, dword [esp + 0x18]
mov ecx, edi
mov eax, dword [eax + 4]
mov eax, dword [eax + esi*4 + 4]
movsx eax, word [eax + 0xa]
push eax
push 0x91
call fcn.0044e569
jmp 0x412d1b
mov eax, dword [esp + 0x40]
mov dword [edi + 0xf4], eax
mov ecx, dword [ebx + 4]
mov eax, dword [esp + 0x14]
mov eax, dword [ecx + eax*4]
mov ecx, edi
push dword [eax]
call fcn.0041a799
mov ecx, dword [ebx + 4]
test eax, eax
mov eax, dword [esp + 0x14]
mov eax, dword [ecx + eax*4]
mov ecx, edi
movsx eax, word [eax + 0xa]
push eax
jne 0x47af83
push 0x79
call fcn.0044e569
jmp 0x412d1b
push 0xbc
call fcn.0044e569
jmp 0x412d1b
mov eax, dword [ebx + 4]
mov eax, dword [eax + ecx*4]
mov ecx, edi
movsx eax, word [eax + 0xa]
push eax
push 0x6f
call fcn.0044e569
jmp 0x412d1b
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.0045e2a3
test eax, eax
jne 0x47afe7
lea ecx, [esp + 0x74]
call fcn.00402e7d
mov ecx, dword [esp + 0x20]
test ecx, ecx
jle 0x47afe7
mov byte [esp + 0x13], 0
mov esi, ecx
lea eax, [esp + 0x13]
push eax
lea ecx, [esp + 0x78]
call fcn.0041e26e
dec esi
jne 0x47afd6
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x2c]
jmp 0x4124fa
mov dword [esp + 0x48], 0
jmp 0x41252f
mov eax, dword [edx]
mov eax, dword [eax]
cmp eax, 0x24
je 0x47b018
cmp eax, 0x1e
jne 0x47b01c
mov esi, 0x100
inc ebx
add edx, 4
mov eax, dword [edx]
cmp word [eax + 8], 0
je 0x47b005
mov dword [esp + 0x24], ebx
jmp 0x412859
mov eax, dword [edx]
cmp dword [eax + 0xc], 6
jne 0x47b03a
mov edx, dword [eax]
jmp 0x47b03c
xor edx, edx
mov eax, dword [ecx]
push 1
or esi, 0x200
push esi
push edx
push dword [eax]
call fcn.004499e3
test al, al
je 0x47b121
mov ebx, dword [esp + 0x18]
jmp 0x412a04
push esi
push edx
push ebx
mov ecx, 0x4c30e0
call fcn.0040c0bf
mov ebx, dword [esp + 0x18]
jmp 0x412a04
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
test ecx, ecx
je 0x412909
push dword [esp + 0x30]
mov ecx, dword [ecx + 0x14]
call fcn.0040c581
mov ebx, dword [esp + 0x18]
jmp 0x412a04
dec eax
mov dword [ecx], eax
mov eax, dword [ebx + 4]
mov dword [esi + 4], eax
mov eax, dword [ebx + 8]
mov dword [esi + 8], eax
mov eax, dword [ebx]
mov dword [esi], eax
mov eax, dword [ebx + 0xc]
mov dword [esi + 0xc], eax
inc dword [eax]
jmp 0x4129b0
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x18]
lea eax, [ecx + 2]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x40]
mov dword [edi + 0xf8], eax
mov eax, dword [esp + 0x28]
add eax, ecx
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x4c]
push eax
push ebx
mov ecx, edi
call fcn.0040e730
mov dword [edi + 0xf8], 0
test eax, eax
js 0x412d1b
mov ecx, dword [esp + 0x24]
push 1
or esi, 0x200
push esi
lea eax, [esp + 0x68]
push eax
mov eax, dword [ebx + 4]
mov eax, dword [eax + ecx*4]
push dword [eax]
call fcn.0040c06d
jmp 0x412a04
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, edi
movsx eax, word [eax + 0xa]
push eax
push 0x79
call fcn.0044e569
jmp 0x412d1b
mov ecx, dword [ebx + 8]
lea eax, [esp + 0x88]
push eax
call fcn.0044e219
mov byte [ebx + 0xd], 0
jmp 0x412632
mov ecx, esi
call fcn.0040c6d5
cmp edi, dword [esi]
jb 0x47b15b
mov edi, dword [esp + 0x4c]
jmp 0x412667
mov eax, dword [ecx + 8]
mov ebx, dword [eax + 0x38]
jmp 0x41269f
cmp dword [ebx + 0xc], 4
jne 0x4126b0
push dword [ebx + 8]
mov ecx, dword [esi + 8]
call fcn.0040bfa5
jmp 0x4126bf
lea ecx, [esi + 4]
call fcn.00406824
mov eax, dword [eax + 0x14]
mov dword [esp + 0x9c], eax
jmp 0x4126de
lea ecx, [esi + 4]
call fcn.00406824
add eax, 0x20
push eax
lea ecx, [esp + 0xac]
call fcn.0040c581
jmp 0x4126f5
mov ecx, dword [esi + 8]
mov ebx, dword [ecx + 0x38]
test ecx, ecx
je 0x47b1d8
push ecx
call fcn.0041b2ee
mov dword [esi + 8], ebx
mov byte [esi + 0xd], 0
jmp 0x412706
mov eax, dword [esi + 8]
mov ecx, dword [eax + 0x38]
jmp 0x412788
cmp byte [ebp + 8], 0
mov eax, dword [esp + 0x40]
mov dword [edi + 0xf4], eax
jne 0x47b211
push dword [esp + 0x34]
mov ecx, edi
push 0x70
call fcn.0044e569
jmp 0x412d1b
mov eax, dword [ebp + 0x10]
add dword [eax], 0xfffffffe
jmp 0x412d1b