Function at 0x41c7b0
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44cc72
mov eax, dword fs:[0]
push eax
sub esp, 0xcc
mov eax, dword [0x461020]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x68], esi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x68], 0
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
lea ecx, [esi + 0xc]
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
movups xmmword [esi + 0x24], xmm0
mov dword [esi + 0x34], 0
mov dword [esi + 0x38], 0xf
mov byte [esi + 0x24], 0
mov dword [esi + 0x40], 0
mov dword [esi + 0x44], 0
mov dword [esi + 0x48], 0
mov byte [ebp - 4], 3
lea edx, [edi + 0x10]
mov dword [ebp - 0x70], edx
lea eax, [edi + 0x14]
mov dword [ebp - 0x60], eax
cmp ecx, edi
je 0x41c87d
cmp dword [edi + 0x14], 0x10
mov eax, edi
jb 0x41c873
mov eax, dword [edi]
push dword [edx]
push eax
call fcn.0040d0b0
jmp 0x41c883
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x60], eax
cmp byte [ebp + 0x10], 0
mov eax, dword [ebp + 8]
mov dword [esi + 0x3c], eax
jne 0x41c9bf
mov edx, 3
lea ecx, [ebp - 0x40]
call fcn.004145d0
mov edx, eax
mov byte [ebp - 4], 4
mov eax, 1
cmp dword [edx + 0x14], 0x10
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x68], eax
mov eax, dword [edx + 0x10]
jb 0x41c8bc
mov edx, dword [edx]
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x41c8c6
mov ecx, dword [edi]
push eax
push edx
mov edx, dword [ebp - 0x70]
mov edx, dword [edx]
call fcn.0040f050
add esp, 8
test eax, eax
je 0x41c91c
mov edx, 7
lea ecx, [ebp - 0x28]
call fcn.004145d0
mov edx, eax
mov eax, 3
mov dword [ebp - 0x5c], eax
cmp dword [edx + 0x14], 0x10
mov eax, dword [edx + 0x10]
jb 0x41c8fb
mov edx, dword [edx]
cmp dword [edi + 0x14], 0x10
mov ecx, edi
jb 0x41c905
mov ecx, dword [edi]
push eax
mov eax, dword [ebp - 0x70]
push edx
mov edx, dword [eax]
call fcn.0040f050
add esp, 8
mov byte [ebp - 0x69], 0
test eax, eax
jne 0x41c920
mov byte [ebp - 0x69], 1
mov eax, dword [ebp - 0x5c]
test al, 2
je 0x41c976
mov ecx, dword [ebp - 0x14]
and eax, 0xfffffffd
mov dword [ebp - 0x5c], eax
cmp ecx, 0x10
jb 0x41c964
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41c957
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3ac
push ecx
push edx
call fcn.0042b48a
mov eax, dword [ebp - 0x5c]
add esp, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 4], 3
test al, 1
je 0x41c9b5
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x41c9b5
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41c9ab
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3ac
push ecx
push edx
call fcn.0042b48a
add esp, 8
cmp byte [ebp - 0x69], 0
jne 0x41d38d
lea eax, [ebp - 0x64]
mov dword [ebp - 0x64], 0
push eax
push 0
push 0
push 0x44f2e0
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
jne 0x41cd43
push dword [ebp - 0x64]
lea ecx, [ebp - 0x40]
call fcn.0041e6f0
mov byte [ebp - 4], 5
push dword [ebp - 0x64]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x28]
call fcn.0041ad40
mov edx, 9
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd8]
call fcn.004145d0
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 7
mov eax, 0x7fffffff
mov ecx, dword [ebp - 0x18]
sub eax, ecx
cmp eax, 1
jb 0x41d3b1
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 1
cmovae eax, dword [ebp - 0x28]
push 0x45afa4
push ecx
push eax
push ecx
push dword [ebp - 0x74]
lea ecx, [ebp - 0x58]
call fcn.00410960
mov byte [ebp - 4], 8
lea eax, [ebp - 0x58]
push dword [ebp - 0x68]
lea ecx, [ebp - 0x8c]
push eax
push dword [ebp - 0x74]
call fcn.00410780
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x78]
mov eax, edx
mov ecx, dword [ebp - 0x7c]
sub eax, ecx
cmp eax, 1
jb 0x41caa2
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x8c]
cmovae eax, dword [ebp - 0x8c]
mov word [eax + ecx], 0x5c
lea eax, [ebp - 0x8c]
jmp 0x41cabd
push 1
push 0x45afa4
mov byte [ebp - 0x68], 0
lea ecx, [ebp - 0x8c]
push dword [ebp - 0x68]
push 1
call fcn.004041d0
mov dword [ebp - 0x94], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xa4], xmm0
mov dword [ebp - 0x90], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x94], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push edi
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xa
call fcn.0040bbb0
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
movups xmmword [ebp - 0xc0], xmm0
mov dword [eax + 0x10], 0
movq qword [ebp - 0xb0], xmm1
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xb
mov eax, dword [esi + 4]
cmp eax, dword [esi + 8]
je 0x41cb61
movups xmmword [eax], xmm0
mov ecx, 0xf
mov byte [ebp - 0xc0], 0
movq qword [eax + 0x10], xmm1
add dword [esi + 4], 0x18
jmp 0x41cb76
lea ecx, [ebp - 0xc0]
push ecx
push eax
mov ecx, esi
call fcn.0041ee10
mov ecx, dword [ebp - 0xac]
mov byte [ebp - 4], 0xa
cmp ecx, 0x10
jb 0x41cbae
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cba4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3b6
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x90]
cmp ecx, 0x10
jb 0x41cbec
mov edx, dword [ebp - 0xa4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cbe2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3b6
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp ecx, 0x10
jb 0x41cc42
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cc38
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3b6
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp ecx, 0x10
jb 0x41cc8f
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cc85
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3b6
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0x10
jb 0x41cccd
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41ccc3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3b6
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x41cd05
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41ccfb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3bb
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x2c]
cmp ecx, 8
jb 0x41cd43
mov edx, dword [ebp - 0x40]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41cd39
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3bb
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov edx, 3
lea ecx, [ebp - 0xd8]
call fcn.004145d0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x41cd60
mov eax, dword [eax]
jmp 0x41cd66
lea ecx, [edi + 0x14]
mov dword [ebp - 0x60], ecx
mov esi, dword [ebp - 0x60]
mov ecx, edi
cmp dword [esi], 0x10
mov esi, dword [ebp - 0xa8]
jb 0x41cd78
mov ecx, dword [edi]
push edx
push eax
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
call fcn.0040f050
mov ecx, dword [ebp - 0xc4]
add esp, 8
mov dword [ebp - 0x68], eax
cmp ecx, 0x10
jb 0x41cdc7
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cdba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3c0
push ecx
push edx
call fcn.0042b48a
mov eax, dword [ebp - 0x68]
add esp, 8
test eax, eax
jne 0x41d14f
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push eax
push 0
push 0
push 0x44f2f0
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
jne 0x41d14f
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x58]
call fcn.0041e6f0
mov byte [ebp - 4], 0xc
push dword [ebp - 0x5c]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
lea edx, [ebp - 0x58]
lea ecx, [ebp - 0x28]
call fcn.0041ad40
mov edx, 0xa
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xd8]
call fcn.004145d0
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0xe
mov eax, 0x7fffffff
mov ecx, dword [ebp - 0x18]
sub eax, ecx
cmp eax, 1
jb 0x41d3c5
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 1
cmovae eax, dword [ebp - 0x28]
push 0x45afa4
push ecx
push eax
push ecx
push dword [ebp - 0x74]
lea ecx, [ebp - 0x40]
call fcn.00410960
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x40]
push dword [ebp - 0x68]
lea ecx, [ebp - 0x8c]
push eax
push dword [ebp - 0x74]
call fcn.00410780
mov byte [ebp - 4], 0x10
mov edx, dword [ebp - 0x78]
mov eax, edx
mov ecx, dword [ebp - 0x7c]
sub eax, ecx
cmp eax, 1
jb 0x41ceae
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x8c]
cmovae eax, dword [ebp - 0x8c]
mov word [eax + ecx], 0x5c
lea eax, [ebp - 0x8c]
jmp 0x41cec9
push 1
push 0x45afa4
mov byte [ebp - 0x68], 0
lea ecx, [ebp - 0x8c]
push dword [ebp - 0x68]
push 1
call fcn.004041d0
mov dword [ebp - 0x94], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xa4], xmm0
mov dword [ebp - 0x90], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x94], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push edi
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x11
call fcn.0040bbb0
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
movups xmmword [ebp - 0xc0], xmm0
mov dword [eax + 0x10], 0
movq qword [ebp - 0xb0], xmm1
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x12
mov eax, dword [esi + 4]
cmp eax, dword [esi + 8]
je 0x41cf6d
movups xmmword [eax], xmm0
mov ecx, 0xf
mov byte [ebp - 0xc0], 0
movq qword [eax + 0x10], xmm1
add dword [esi + 4], 0x18
jmp 0x41cf82
lea ecx, [ebp - 0xc0]
push ecx
push eax
mov ecx, esi
call fcn.0041ee10
mov ecx, dword [ebp - 0xac]
mov byte [ebp - 4], 0x11
cmp ecx, 0x10
jb 0x41cfba
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cfb0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3ca
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x90]
cmp ecx, 0x10
jb 0x41cff8
mov edx, dword [ebp - 0xa4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41cfee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3ca
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
cmp ecx, 0x10
jb 0x41d04e
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d044
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3ca
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
cmp ecx, 0x10
jb 0x41d09b
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d091
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3ca
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0x10
jb 0x41d0d9
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d0cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3ca
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x41d111
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d107
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3cf
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x44]
cmp ecx, 8
jb 0x41d14f
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41d145
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3cf
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov edx, 2
lea ecx, [ebp - 0xd8]
call fcn.004145d0
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x41d16a
mov eax, dword [eax]
mov esi, dword [ebp - 0x60]
mov ecx, edi
cmp dword [esi], 0x10
mov esi, dword [ebp - 0xa8]
jb 0x41d17c
mov ecx, dword [edi]
push edx
push eax
mov eax, dword [ebp - 0x70]
mov edx, dword [eax]
call fcn.0040f050
mov ecx, dword [ebp - 0xc4]
add esp, 8
mov dword [ebp - 0x68], eax
cmp ecx, 0x10
jb 0x41d1cb
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d1be
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3d4
push ecx
push edx
call fcn.0042b48a
mov eax, dword [ebp - 0x68]
add esp, 8
test eax, eax
jne 0x41d38d
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push eax
push 0
push 0
push 0x44f300
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderPath]
test eax, eax
jne 0x41d38d
push dword [ebp - 0x60]
lea ecx, [ebp - 0x58]
call fcn.0041e6f0
mov byte [ebp - 4], 0x13
push dword [ebp - 0x60]
call dword [sym.imp.ole32.dll_CoTaskMemFree]
lea edx, [ebp - 0x58]
lea ecx, [ebp - 0x28]
call fcn.0041ad40
mov byte [ebp - 4], 0x14
mov eax, 0x7fffffff
mov ecx, dword [ebp - 0x18]
sub eax, ecx
cmp eax, 1
jb 0x41d3d9
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 1
cmovae eax, dword [ebp - 0x28]
push 0x45afa4
push ecx
push eax
push ecx
push dword [ebp - 0x74]
lea ecx, [ebp - 0x40]
call fcn.00410960
push edi
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x15
call fcn.0040bbb0
movups xmm0, xmmword [eax]
movq xmm1, qword [eax + 0x10]
movups xmmword [ebp - 0xc0], xmm0
mov dword [eax + 0x10], 0
movq qword [ebp - 0xb0], xmm1
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x16
mov eax, dword [esi + 4]
cmp eax, dword [esi + 8]
je 0x41d2a6
movups xmmword [eax], xmm0
mov ecx, 0xf
mov byte [ebp - 0xc0], 0
movq qword [eax + 0x10], xmm1
add dword [esi + 4], 0x18
jmp 0x41d2bb
lea ecx, [ebp - 0xc0]
push ecx
push eax
mov ecx, esi
call fcn.0041ee10
mov ecx, dword [ebp - 0xac]
cmp ecx, 0x10
jb 0x41d2ef
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d2e5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3de
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x10
jb 0x41d323
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d319
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3de
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x41d357
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41d34d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3e3
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov ecx, dword [ebp - 0x44]
cmp ecx, 8
jb 0x41d38d
mov edx, dword [ebp - 0x58]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x41d383
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41d3e3
push ecx
push edx
call fcn.0042b48a
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042b459
mov esp, ebp
pop ebp
ret 0xc
call fcn.0043042f
call fcn.00402390
call fcn.0043042f
call fcn.0043042f
call fcn.0043042f
call fcn.00402390
call fcn.0043042f
call fcn.0043042f
call fcn.0043042f
call fcn.00402390
call fcn.0043042f
call fcn.0043042f
int3