Function at 0x41ab70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2b0
mov eax, dword [ebp + 8]
mov ecx, 0
mov edx, 0x28
lea esi, [esp + 0x244]
lea edi, [esp + 0x26c]
mov dword [esp + 0x29c], eax
mov dword [esp + 0x298], 0
mov dword [esp + 0x294], 0
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [esp + 0x214], esi
mov dword [esp + 0x210], ecx
mov dword [esp + 0x20c], edx
call fcn.00429750
mov eax, dword [esp + 0x214]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.00429750
mov dword [esp + 0x240], 0
mov dword [esp + 0x23c], 0
mov eax, dword [0x434140]
mov dword [esp + 0x230], eax
mov bx, word [0x434144]
mov word [esp + 0x234], bx
mov dword [esp + 0x220], 0
mov eax, dword [0x47ee20]
mov dword [esp + 0x2a4], eax
mov dword [esp + 0x218], 0x6cd2bc25
mov eax, dword [esp + 0x218]
mov ecx, eax
sub ecx, 0x88304d29
mov dword [esp + 0x208], eax
mov dword [esp + 0x204], ecx
jg 0x41ac9f
jmp 0x41ac81
mov eax, dword [esp + 0x208]
sub eax, 0x8466005b
mov dword [esp + 0x200], eax
je 0x41bb90
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x959d0df6
mov dword [esp + 0x1fc], eax
jg 0x41acdb
jmp 0x41acbd
mov eax, dword [esp + 0x208]
sub eax, 0x88304d2a
mov dword [esp + 0x1f8], eax
je 0x41c096
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x9bc66e29
mov dword [esp + 0x1f4], eax
jg 0x41ad17
jmp 0x41acf9
mov eax, dword [esp + 0x208]
sub eax, 0x959d0df7
mov dword [esp + 0x1f0], eax
je 0x41bf08
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xa2ab076d
mov dword [esp + 0x1ec], eax
jg 0x41ad53
jmp 0x41ad35
mov eax, dword [esp + 0x208]
sub eax, 0x9bc66e2a
mov dword [esp + 0x1e8], eax
je 0x41bd43
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xa811b2ff
mov dword [esp + 0x1e4], eax
jg 0x41ad8f
jmp 0x41ad71
mov eax, dword [esp + 0x208]
sub eax, 0xa2ab076e
mov dword [esp + 0x1e0], eax
je 0x41bd17
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xb2dbfe21
mov dword [esp + 0x1dc], eax
jg 0x41adcb
jmp 0x41adad
mov eax, dword [esp + 0x208]
sub eax, 0xa811b300
mov dword [esp + 0x1d8], eax
je 0x41bac5
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xb7a74157
mov dword [esp + 0x1d4], eax
jg 0x41ae07
jmp 0x41ade9
mov eax, dword [esp + 0x208]
sub eax, 0xb2dbfe22
mov dword [esp + 0x1d0], eax
je 0x41b9d5
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x7f7499fe
mov dword [esp + 0x1cc], eax
jg 0x41b8ed
jmp 0x41ae25
mov eax, dword [esp + 0x208]
sub eax, 0x7edca365
mov dword [esp + 0x1c8], eax
jg 0x41b8d2
jmp 0x41ae43
mov eax, dword [esp + 0x208]
sub eax, 0x7e3e687b
mov dword [esp + 0x1c4], eax
jg 0x41b8b7
jmp 0x41ae61
mov eax, dword [esp + 0x208]
sub eax, 0x7c4d1d97
mov dword [esp + 0x1c0], eax
jg 0x41b89c
jmp 0x41ae7f
mov eax, dword [esp + 0x208]
sub eax, 0x7b42ae9d
mov dword [esp + 0x1bc], eax
jg 0x41b881
jmp 0x41ae9d
mov eax, dword [esp + 0x208]
sub eax, 0x79dc642c
mov dword [esp + 0x1b8], eax
jg 0x41b866
jmp 0x41aebb
mov eax, dword [esp + 0x208]
sub eax, 0x739bea9a
mov dword [esp + 0x1b4], eax
jg 0x41b84b
jmp 0x41aed9
mov eax, dword [esp + 0x208]
sub eax, 0x703347e4
mov dword [esp + 0x1b0], eax
jg 0x41b830
jmp 0x41aef7
mov eax, dword [esp + 0x208]
sub eax, 0x6e339258
mov dword [esp + 0x1ac], eax
jg 0x41b815
jmp 0x41af15
mov eax, dword [esp + 0x208]
sub eax, 0xb8343734
mov dword [esp + 0x1a8], eax
jg 0x41af51
jmp 0x41af33
mov eax, dword [esp + 0x208]
sub eax, 0xb7a74158
mov dword [esp + 0x1a4], eax
je 0x41bffa
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xbc092b78
mov dword [esp + 0x1a0], eax
jg 0x41af8d
jmp 0x41af6f
mov eax, dword [esp + 0x208]
sub eax, 0xb8343735
mov dword [esp + 0x19c], eax
je 0x41be93
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xc432b854
mov dword [esp + 0x198], eax
jg 0x41afc9
jmp 0x41afab
mov eax, dword [esp + 0x208]
sub eax, 0xbc092b79
mov dword [esp + 0x194], eax
je 0x41bf33
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xce5c50b1
mov dword [esp + 0x190], eax
jg 0x41b005
jmp 0x41afe7
mov eax, dword [esp + 0x208]
sub eax, 0xc432b855
mov dword [esp + 0x18c], eax
je 0x41bdb7
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x6cd2bc24
mov dword [esp + 0x188], eax
jg 0x41b7fa
jmp 0x41b023
mov eax, dword [esp + 0x208]
sub eax, 0x6c737ded
mov dword [esp + 0x184], eax
jg 0x41b7df
jmp 0x41b041
mov eax, dword [esp + 0x208]
sub eax, 0x6ae848fa
mov dword [esp + 0x180], eax
jg 0x41b7c1
jmp 0x41b05f
mov eax, dword [esp + 0x208]
sub eax, 0x5a0b5cb5
mov dword [esp + 0x17c], eax
jg 0x41b7a3
jmp 0x41b07d
mov eax, dword [esp + 0x208]
sub eax, 0x5292c3b1
mov dword [esp + 0x178], eax
jg 0x41b785
jmp 0x41b09b
mov eax, dword [esp + 0x208]
sub eax, 0x4deb5db7
mov dword [esp + 0x174], eax
jg 0x41b767
jmp 0x41b0b9
mov eax, dword [esp + 0x208]
sub eax, 0x4a274a5f
mov dword [esp + 0x170], eax
jg 0x41b749
jmp 0x41b0d7
mov eax, dword [esp + 0x208]
sub eax, 0x4624abda
mov dword [esp + 0x16c], eax
jg 0x41b72b
jmp 0x41b0f5
mov eax, dword [esp + 0x208]
sub eax, 0x425064b2
mov dword [esp + 0x168], eax
jg 0x41b70d
jmp 0x41b113
mov eax, dword [esp + 0x208]
sub eax, 0x3de0ab1e
mov dword [esp + 0x164], eax
jg 0x41b6ef
jmp 0x41b131
mov eax, dword [esp + 0x208]
sub eax, 0x32e9db53
mov dword [esp + 0x160], eax
jg 0x41b6d1
jmp 0x41b14f
mov eax, dword [esp + 0x208]
sub eax, 0x2ff52200
mov dword [esp + 0x15c], eax
jg 0x41b6b3
jmp 0x41b16d
mov eax, dword [esp + 0x208]
sub eax, 0x2f4cd547
mov dword [esp + 0x158], eax
jg 0x41b695
jmp 0x41b18b
mov eax, dword [esp + 0x208]
sub eax, 0x2ea32c4b
mov dword [esp + 0x154], eax
jg 0x41b677
jmp 0x41b1a9
mov eax, dword [esp + 0x208]
sub eax, 0x2a92ce24
mov dword [esp + 0x150], eax
jg 0x41b659
jmp 0x41b1c7
mov eax, dword [esp + 0x208]
sub eax, 0x22ac261d
mov dword [esp + 0x14c], eax
jg 0x41b63b
jmp 0x41b1e5
mov eax, dword [esp + 0x208]
sub eax, 0x21d8d608
mov dword [esp + 0x148], eax
jg 0x41b61d
jmp 0x41b203
mov eax, dword [esp + 0x208]
sub eax, 0x1f012e48
mov dword [esp + 0x144], eax
jg 0x41b5ff
jmp 0x41b221
mov eax, dword [esp + 0x208]
sub eax, 0x1bff481c
mov dword [esp + 0x140], eax
jg 0x41b5e1
jmp 0x41b23f
mov eax, dword [esp + 0x208]
sub eax, 0x1b5f2099
mov dword [esp + 0x13c], eax
jg 0x41b5c3
jmp 0x41b25d
mov eax, dword [esp + 0x208]
sub eax, 0x16e36aa8
mov dword [esp + 0x138], eax
jg 0x41b5a5
jmp 0x41b27b
mov eax, dword [esp + 0x208]
sub eax, 0x132de578
mov dword [esp + 0x134], eax
jg 0x41b587
jmp 0x41b299
mov eax, dword [esp + 0x208]
sub eax, 0xf20c9d0
mov dword [esp + 0x130], eax
jg 0x41b569
jmp 0x41b2b7
mov eax, dword [esp + 0x208]
sub eax, 0xcfd3dbd
mov dword [esp + 0x12c], eax
jg 0x41b54b
jmp 0x41b2d5
mov eax, dword [esp + 0x208]
sub eax, 0xc72510d
mov dword [esp + 0x128], eax
jg 0x41b52d
jmp 0x41b2f3
mov eax, dword [esp + 0x208]
sub eax, 0xa29f6a3
mov dword [esp + 0x124], eax
jg 0x41b50f
jmp 0x41b311
mov eax, dword [esp + 0x208]
sub eax, 0x96f9897
mov dword [esp + 0x120], eax
jg 0x41b4f1
jmp 0x41b32f
mov eax, dword [esp + 0x208]
sub eax, 0x83011a2
mov dword [esp + 0x11c], eax
jg 0x41b4d3
jmp 0x41b34d
mov eax, dword [esp + 0x208]
sub eax, 0x7f1dbbf
mov dword [esp + 0x118], eax
jg 0x41b4b5
jmp 0x41b36b
mov eax, dword [esp + 0x208]
sub eax, 0xfacc94f3
mov dword [esp + 0x114], eax
jg 0x41b497
jmp 0x41b389
mov eax, dword [esp + 0x208]
sub eax, 0xed865104
mov dword [esp + 0x110], eax
jg 0x41b479
jmp 0x41b3a7
mov eax, dword [esp + 0x208]
sub eax, 0xe56f734f
mov dword [esp + 0x10c], eax
jg 0x41b45b
jmp 0x41b3c5
mov eax, dword [esp + 0x208]
sub eax, 0xd91f8307
mov dword [esp + 0x108], eax
jg 0x41b43d
jmp 0x41b3e3
mov eax, dword [esp + 0x208]
sub eax, 0xce5c50b2
mov dword [esp + 0x104], eax
je 0x41c00a
jmp 0x41b401
mov eax, dword [esp + 0x208]
sub eax, 0xce8a41fc
mov dword [esp + 0x100], eax
je 0x41c043
jmp 0x41b41f
mov eax, dword [esp + 0x208]
sub eax, 0xd0dddfb8
mov dword [esp + 0xfc], eax
je 0x41bfda
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xd91f8308
mov dword [esp + 0xf8], eax
je 0x41ba7f
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xe56f7350
mov dword [esp + 0xf4], eax
je 0x41b94f
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xed865105
mov dword [esp + 0xf0], eax
je 0x41bfa6
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xfacc94f4
mov dword [esp + 0xec], eax
je 0x41bb3e
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x7f1dbc0
mov dword [esp + 0xe8], eax
je 0x41bd85
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x83011a3
mov dword [esp + 0xe4], eax
je 0x41c053
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x96f9898
mov dword [esp + 0xe0], eax
je 0x41b988
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xa29f6a4
mov dword [esp + 0xdc], eax
je 0x41be00
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xc72510e
mov dword [esp + 0xd8], eax
je 0x41bcdf
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xcfd3dbe
mov dword [esp + 0xd4], eax
je 0x41bd53
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0xf20c9d1
mov dword [esp + 0xd0], eax
je 0x41bad5
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x132de579
mov dword [esp + 0xcc], eax
je 0x41beb6
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x16e36aa9
mov dword [esp + 0xc8], eax
je 0x41bf6c
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x1b5f209a
mov dword [esp + 0xc4], eax
je 0x41c0f3
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x1bff481d
mov dword [esp + 0xc0], eax
je 0x41bef7
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x1f012e49
mov dword [esp + 0xbc], eax
je 0x41bd75
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x21d8d609
mov dword [esp + 0xb8], eax
je 0x41b933
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x22ac261e
mov dword [esp + 0xb4], eax
je 0x41c062
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x2a92ce25
mov dword [esp + 0xb0], eax
je 0x41c186
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x2ea32c4c
mov dword [esp + 0xac], eax
je 0x41c0d9
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x2f4cd548
mov dword [esp + 0xa8], eax
je 0x41c103
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x2ff52201
mov dword [esp + 0xa4], eax
je 0x41bbb3
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x32e9db54
mov dword [esp + 0xa0], eax
je 0x41ba90
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x3de0ab1f
mov dword [esp + 0x9c], eax
je 0x41bf7d
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x425064b3
mov dword [esp + 0x98], eax
je 0x41bd95
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x4624abdb
mov dword [esp + 0x94], eax
je 0x41c1a0
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x4a274a60
mov dword [esp + 0x90], eax
je 0x41c1b0
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x4deb5db8
mov dword [esp + 0x8c], eax
je 0x41c113
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x5292c3b2
mov dword [esp + 0x88], eax
je 0x41bdc7
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x5a0b5cb6
mov dword [esp + 0x84], eax
je 0x41bd28
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x6ae848fb
mov dword [esp + 0x80], eax
je 0x41bf5c
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x6c737dee
mov dword [esp + 0x7c], eax
je 0x41bd64
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x6cd2bc25
mov dword [esp + 0x78], eax
je 0x41b90d
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x6e339259
mov dword [esp + 0x74], eax
je 0x41bf23
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x703347e5
mov dword [esp + 0x70], eax
je 0x41bda6
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x739bea9b
mov dword [esp + 0x6c], eax
je 0x41bdf0
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x79dc642d
mov dword [esp + 0x68], eax
je 0x41c01b
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x7b42ae9e
mov dword [esp + 0x64], eax
je 0x41bfc9
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x7c4d1d98
mov dword [esp + 0x60], eax
je 0x41be11
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x7e3e687c
mov dword [esp + 0x5c], eax
je 0x41c1cf
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x7edca366
mov dword [esp + 0x58], eax
je 0x41ba34
jmp 0x41b908
mov eax, dword [esp + 0x208]
sub eax, 0x7f7499ff
mov dword [esp + 0x54], eax
je 0x41bb2d
jmp 0x41b908
jmp 0x41c1f0
mov eax, 0xe56f7350
mov ecx, 0x21d8d609
mov edx, dword [esp + 0x2a4]
cmp edx, 0
cmovne eax, ecx
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, dword [0x47ee24]
mov dword [esp + 0x2a0], eax
mov dword [esp + 0x218], 0x83011a3
jmp 0x41c1f0
call fcn.00407b20
mov ecx, 0xa29f6a4
mov edx, 0x96f9898
mov esi, dword [esp + 0x29c]
mov dword [esi], eax
mov dword [esp + 0x21c], eax
cmp dword [esp + 0x21c], 6
cmovae ecx, edx
mov dword [esp + 0x218], ecx
jmp 0x41c1f0
mov eax, dword [0x47fdbc]
mov ecx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [esp + 0x50], eax
call ecx
mov ecx, esp
lea edx, [esp + 0x23c]
mov dword [ecx + 8], edx
mov dword [ecx], eax
mov dword [ecx + 4], 0x2000000
mov eax, dword [esp + 0x50]
call eax
sub esp, 0xc
mov ecx, 0x739bea9b
mov edx, 0xb2dbfe22
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x218], ecx
jmp 0x41c1f0
mov eax, dword [0x47fdb8]
mov ecx, dword [esp + 0x220]
mov edx, dword [esp + 0x23c]
mov esi, esp
lea edi, [esp + 0x220]
mov dword [esi + 0x10], edi
mov dword [esi + 0xc], ecx
mov dword [esi], edx
mov dword [esi + 8], 0
mov dword [esi + 4], 0x19
call eax
sub esp, 0x14
mov ecx, 0x5292c3b2
mov edx, 0x7edca366
cmp dword [esp + 0x220], 0
cmovne ecx, edx
mov dword [esp + 0x218], ecx
mov dword [esp + 0x4c], eax
jmp 0x41c1f0
mov eax, 1
mov ecx, dword [esp + 0x220]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 0x48], eax
call fcn.00429818
mov ecx, 0xf20c9d1
mov edx, 0xd91f8308
mov dword [esp + 0x240], eax
cmp dword [esp + 0x240], 0
cmove ecx, edx
mov dword [esp + 0x218], ecx
jmp 0x41c1f0
mov eax, 0x32e9db54
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, dword [esp + 0x23c]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0xa811b300
mov dword [esp + 0x2a0], 0xffffffff
mov dword [esp + 0x218], ecx
mov dword [esp + 0x44], eax
jmp 0x41c1f0
mov dword [esp + 0x218], 0x83011a3
jmp 0x41c1f0
mov eax, dword [0x47fdb8]
mov ecx, dword [esp + 0x220]
mov edx, dword [esp + 0x240]
mov esi, dword [esp + 0x23c]
mov edi, esp
lea ebx, [esp + 0x220]
mov dword [edi + 0x10], ebx
mov dword [edi + 0xc], ecx
mov dword [edi + 8], edx
mov dword [edi], esi
mov dword [edi + 4], 0x19
call eax
sub esp, 0x14
mov ecx, 0x425064b3
mov edx, 0x7f7499ff
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x218], ecx
jmp 0x41c1f0
mov eax, 0xfacc94f4
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, dword [esp + 0x240]
mov dword [esp + 0x298], eax
mov eax, dword [0x47fdb4]
mov ecx, dword [esp + 0x298]
mov ecx, dword [ecx]
mov edx, esp
lea esi, [esp + 0x294]
mov dword [edx + 4], esi
mov dword [edx], ecx
call eax
sub esp, 8
mov ecx, 0x8466005b
cmp eax, 0
setne bl
and bl, 1
mov byte [esp + 0x2a9], bl
mov dword [esp + 0x218], ecx
jmp 0x41c1f0
mov eax, 0x7f1dbc0
mov ecx, 0x2ff52201
mov dl, byte [esp + 0x2a9]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x218], eax
jmp 0x41c1f0
lea eax, [esp + 0x26c]
mov ecx, dword [0x434148]
movzx ecx, word [ecx]
mov dword [esp + 0x228], ecx
mov ecx, dword [esp + 0x228]
mov edx, dword [0x434148]
movzx ecx, word [edx + ecx*2 + 2]
mov dword [esp + 0x224], ecx
mov ecx, dword [esp + 0x224]
mov edx, dword [0x434148]
mov esi, dword [esp + 0x228]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x434148]
add esi, 2
mov edi, dword [esp + 0x228]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00406e50
lea eax, [esp + 0x244]
mov ecx, dword [0x43414c]
movzx ecx, word [ecx]
mov dword [esp + 0x228], ecx
mov ecx, dword [esp + 0x228]
mov edx, dword [0x43414c]
movzx ecx, word [edx + ecx*2 + 2]
mov dword [esp + 0x224], ecx
mov ecx, dword [esp + 0x224]
mov edx, dword [0x43414c]
mov esi, dword [esp + 0x228]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x43414c]
add esi, 2
mov edi, dword [esp + 0x228]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00406e50
lea eax, [esp + 0x26c]
mov ecx, dword [esp + 0x294]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0042a8bc
mov ecx, 0xa2ab076e
mov edx, 0xc72510e
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x218], ecx
jmp 0x41c1f0
lea eax, [esp + 0x244]
mov ecx, dword [esp + 0x294]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0042a8bc
mov ecx, 0xa2ab076e
mov edx, 0xcfd3dbe
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x218], ecx
jmp 0x41c1f0
mov eax, 0x5a0b5cb6
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, 0x9bc66e2a
mov dword [0x47ee24], 1
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov dword [esp + 0x218], 0xcfd3dbe
jmp 0x41c1f0
mov eax, 0x6c737dee
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, 0x1f012e49
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov dword [esp + 0x218], 0x7f1dbc0
jmp 0x41c1f0
mov dword [esp + 0x218], 0x425064b3
jmp 0x41c1f0
mov eax, 0x703347e5
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, 0xc432b855
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov dword [esp + 0x218], 0x5292c3b2
jmp 0x41c1f0
mov eax, dword [esp + 0x23c]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x218], 0x739bea9b
mov dword [esp + 0x40], eax
jmp 0x41c1f0
mov dword [esp + 0x218], 0x16e36aa9
jmp 0x41c1f0
mov eax, 0x7c4d1d98
mov dword [esp + 0x218], eax
jmp 0x41c1f0
lea eax, [esp + 0x22c]
mov ecx, dword [0x47fdb0]
mov edx, esp
mov dword [edx + 0x28], eax
lea eax, [esp + 0x230]
mov dword [edx], eax
mov dword [edx + 0x24], 0
mov dword [edx + 0x20], 0
mov dword [edx + 0x1c], 0
mov dword [edx + 0x18], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0xc], 0x220
mov dword [edx + 8], 0x20
mov dword [edx + 4], 2
call ecx
sub esp, 0x2c
mov ecx, 0xb8343735
cmp eax, 0
setne bl
and bl, 1
mov byte [esp + 0x2aa], bl
mov dword [esp + 0x218], ecx
jmp 0x41c1f0
mov eax, 0x6ae848fb
mov ecx, 0x132de579
mov dl, byte [esp + 0x2aa]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, dword [0x47fdac]
mov ecx, dword [esp + 0x22c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx + 8], 0x47ee24
mov dword [edx], 0
call eax
sub esp, 0xc
mov ecx, 0x1bff481d
mov edx, 0xbc092b79
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x218], ecx
jmp 0x41c1f0
mov eax, 0x959d0df7
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, 0x6e339259
mov dword [0x47ee24], 0
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov dword [esp + 0x218], 0xbc092b79
jmp 0x41c1f0
mov eax, dword [0x47fda8]
mov ecx, dword [esp + 0x22c]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [esp + 0x218], 0x6ae848fb
mov dword [esp + 0x3c], eax
jmp 0x41c1f0
mov dword [esp + 0x218], 0x16e36aa9
jmp 0x41c1f0
mov eax, 0x3de0ab1f
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, 0xed865105
cmp dword [esp + 0x240], 0
setne cl
and cl, 1
mov byte [esp + 0x2ab], cl
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, 0xce5c50b2
mov ecx, 0x7b42ae9e
mov dl, byte [esp + 0x2ab]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, 0xd0dddfb8
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, dword [esp + 0x240]
mov dword [esp], eax
call fcn.004297e0
mov eax, 0xb7a74158
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov dword [esp + 0x218], 0xce5c50b2
jmp 0x41c1f0
mov eax, 0x79dc642d
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov eax, 0xce8a41fc
mov dword [0x47ee20], 1
mov ecx, dword [0x47ee24]
mov dword [esp + 0x2a0], ecx
mov dword [esp + 0x218], eax
jmp 0x41c1f0
mov dword [esp + 0x218], 0x83011a3
jmp 0x41c1f0
mov eax, dword [esp + 0x2a0]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x23c]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x2a0], 0xffffffff
mov dword [esp + 0x218], 0x32e9db54
mov dword [esp + 0x38], eax
jmp 0x41c1f0
mov eax, dword [esp + 0x240]
mov dword [esp + 0x298], eax
mov eax, dword [0x47fdb4]
mov ecx, dword [esp + 0x298]
mov ecx, dword [ecx]
mov edx, esp
lea esi, [esp + 0x294]
mov dword [edx + 4], esi
mov dword [edx], ecx
call eax
sub esp, 8
mov dword [esp + 0x218], 0xfacc94f4
mov dword [esp + 0x34], eax
jmp 0x41c1f0
mov dword [0x47ee24], 1
mov dword [esp + 0x218], 0x5a0b5cb6
jmp 0x41c1f0
mov dword [esp + 0x218], 0x6c737dee
jmp 0x41c1f0
mov dword [esp + 0x218], 0x703347e5
jmp 0x41c1f0
lea eax, [esp + 0x22c]
mov ecx, dword [0x47fdb0]
mov edx, esp
mov dword [edx + 0x28], eax
lea eax, [esp + 0x230]
mov dword [edx], eax
mov dword [edx + 0x24], 0
mov dword [edx + 0x20], 0
mov dword [edx + 0x1c], 0
mov dword [edx + 0x18], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0xc], 0x220
mov dword [edx + 8], 0x20
mov dword [edx + 4], 2
call ecx
sub esp, 0x2c
mov dword [esp + 0x218], 0x7c4d1d98
mov dword [esp + 0x30], eax
jmp 0x41c1f0
mov dword [0x47ee24], 0
mov dword [esp + 0x218], 0x959d0df7
jmp 0x41c1f0
mov dword [esp + 0x218], 0x3de0ab1f
jmp 0x41c1f0
mov eax, dword [esp + 0x240]
mov dword [esp], eax
call fcn.004297e0
mov dword [esp + 0x218], 0xd0dddfb8
jmp 0x41c1f0
mov dword [0x47ee20], 1
mov eax, dword [0x47ee24]
mov dword [esp + 0x2a0], eax
mov dword [esp + 0x218], 0x79dc642d
jmp 0x41ac59