Function at 0x411910
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x170
mov al, byte [ebp + 0xc]
mov edx, dword [ebp + 8]
and al, 1
mov byte [esp + 0x16b], al
mov dword [esp + 0x164], edx
mov dword [esp + 0x160], ecx
mov edx, dword [0x4a213c]
or edx, 0xbf7dbe6c
mov esi, dword [0x4973e0]
add esi, edx
mov dword [0x4973e0], esi
mov dword [esp + 0x15c], 0
mov edx, dword [0x4a34b4]
inc edx
mov dword [0x4a34b4], edx
or edx, 0xb4953f99
or edx, 0xdf2158d7
cmp edx, 0x65a5b216
mov dword [esp + 0xc0], ecx
jne 0x41199d
mov eax, dword [0x49b0f0]
imul eax, eax, 0xea2891c2
mov dword [0x49b0f0], eax
mov eax, 0x70475152
mov ecx, esp
mov dword [ecx], 0
mov dword [esp + 0xbc], eax
call fcn.00451120
mov dword [esp + 0x154], edx
mov dword [esp + 0x150], eax
mov eax, dword [0x49ebdc]
mov ecx, dword [0x4a5130]
dec ecx
mov dword [0x4a5130], ecx
sub eax, ecx
sub eax, 0xbc75afac
mov ecx, dword [esp + 0xbc]
cmp ecx, eax
jl 0x411a00
mov eax, dword [0x4a5ebc]
add eax, 0xfefbf9bf
mov dword [0x4a5ebc], eax
jmp 0x411a54
mov ax, word [0x48ed30]
movsx ecx, ax
mov edx, dword [0x496518]
shl edx, 2
mov esi, dword [0x4a2c74]
xor esi, 0xffffffff
and esi, 0xe4b075db
or edx, esi
cmp ecx, edx
jl 0x411a4f
mov eax, dword [0x49cfb0]
not eax
mov cx, word [0x492dbe]
movsx edx, cx
shl edx, 6
add eax, edx
mov edx, dword [0x49bc48]
sub edx, eax
mov dword [0x49bc48], edx
jmp 0x411a54
mov eax, 0xc3c5fac
mov byte [esp + 0x14f], 0
mov ecx, dword [0x497b10]
mov edx, ecx
inc edx
mov dword [0x497b10], edx
or ecx, 0xcf8f506
cmp eax, ecx
jl 0x411a8d
mov eax, dword [0x49e8ac]
xor eax, 0x5f903d8a
mov dword [0x49e8ac], eax
mov eax, dword [0x48c0a4]
mov ecx, esp
mov edx, dword [esp + 0xc0]
mov dword [ecx], edx
call eax
sub esp, 4
mov eax, dword [0x4a1d54]
xor eax, 0xafa6e4fc
mov dword [0x4a1d54], eax
test byte [esp + 0x16b], 1
je 0x411b8c
mov eax, dword [0x4a5fe4]
shl eax, 5
or eax, 0x83e79b40
mov ecx, dword [0x495ea8]
imul ecx, eax
mov dword [0x495ea8], ecx
mov eax, dword [esp + 0xc0]
add eax, 0x18
mov ecx, dword [esp + 0xc0]
mov edx, dword [ecx + 0x18]
mov esi, dword [ecx + 0x1c]
mov dword [esp + 0xb8], eax
mov dword [esp + 0xb4], edx
mov dword [esp + 0xb0], esi
jmp 0x411b0c
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
xor edx, edx
mov dword [esp + 0xac], eax
mov eax, ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 0xa8], edx
mov edx, ecx
mov ebx, dword [esp + 0xa8]
mov ecx, dword [esp + 0xa8]
mov esi, dword [esp + 0xb8]
lock cmpxchg8b qword [esi]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb0], edx
jne 0x411b0c
jmp 0x411b67
mov eax, dword [0x4a3b2c]
mov ecx, eax
dec ecx
mov dword [0x4a3b2c], ecx
mov ecx, dword [0x4a21c4]
and eax, ecx
mov ecx, dword [0x496810]
imul ecx, eax
mov dword [0x496810], ecx
mov word [0x494184], 0x20a
xor eax, eax
mov dword [esp + 0xa4], eax
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa4]
mov esi, dword [esp + 0xc0]
lock cmpxchg8b qword [esi + 0x18]
mov ecx, dword [esp + 0x150]
mov ebx, dword [esp + 0x154]
sub ecx, eax
sbb ebx, edx
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x9c], ebx
jae 0x411c5d
jmp 0x411bea
mov eax, dword [0x499b38]
imul eax, eax, 0x9d2df351
mov dword [0x499b38], eax
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0xc0]
mov edx, dword [ecx + 0x2c]
mov dword [eax + 0xc], edx
mov edx, dword [ecx + 0x28]
mov dword [eax + 8], edx
mov edx, dword [ecx + 0x20]
mov esi, dword [ecx + 0x24]
mov dword [eax + 4], esi
mov dword [eax], edx
mov eax, dword [0x4a1bfc]
xor eax, 0x1f5b3979
mov dword [0x4a1bfc], eax
mov dword [esp + 0x15c], 1
mov di, word [0x48d922]
movsx eax, di
not eax
add eax, 0xc0c6d71d
mov edx, dword [0x4a26d0]
xor edx, eax
mov dword [0x4a26d0], edx
jmp 0x411cc7
mov eax, 0xa57e14d4
mov cx, word [0x48e496]
movsx edx, cx
mov esi, dword [0x499850]
or esi, edx
mov dword [0x499850], esi
mov byte [esp + 0x14f], 1
mov edx, dword [0x49a10c]
and edx, 0x93fe244e
cmp eax, edx
jg 0x411cc2
mov ax, word [0x49172e]
movsx ecx, ax
shr ecx, 7
add ecx, 0x96805678
or ecx, 0x9b11
mov ax, word [0x48dc4e]
mov dx, ax
sub edx, ecx
mov ax, dx
mov word [0x48dc4e], ax
jmp 0x411cc7
mov eax, 0xff5f76fe
mov ecx, dword [0x496ba4]
or ecx, 0xed457d03
mov dword [0x496ba4], ecx
mov ecx, dword [0x48c0a8]
mov edx, esp
mov esi, dword [esp + 0xc0]
mov dword [edx], esi
mov dword [esp + 0x98], eax
call ecx
sub esp, 4
mov eax, dword [0x49b990]
shl eax, 9
mov ecx, dword [esp + 0x98]
cmp ecx, eax
jne 0x411d48
mov eax, dword [0x4a6308]
sar eax, 2
imul eax, eax, 0x279289be
cmp eax, 0x35988122
jge 0x411d43
mov ax, word [0x48f7e4]
mov cx, ax
add ecx, 0x959ff981
mov ax, cx
mov word [0x48f7e4], ax
jmp 0x411d48
test byte [esp + 0x14f], 1
je 0x412f1f
mov eax, 0x79715f7b
mov ecx, dword [0x49865c]
add ecx, 0xef87886
mov dword [0x49865c], ecx
mov dword [esp + 0x144], 0
mov dword [esp + 0x140], 0
mov dx, word [0x48f2fa]
mov cx, dx
xor ecx, 0x24d5
mov dx, cx
mov word [0x48f2fa], dx
mov dword [esp + 0x13c], 0
mov dx, word [0x494eb0]
mov cx, dx
mov dx, word [0x48f4c8]
mov si, dx
and ecx, esi
and ecx, 0xf9b9
mov dx, cx
mov word [0x48f4c8], dx
mov ecx, esp
mov dword [ecx + 4], 0x600
mov dword [ecx], 0x242e
mov dword [esp + 0x94], eax
call fcn.00428730
mov dword [esp + 0x138], eax
mov word [0x494998], 0xdfa2
mov eax, dword [esp + 0x138]
mov bl, byte [eax]
mov byte [esp + 0x137], bl
mov eax, dword [0x4a701c]
sub eax, 0x480cbe8a
mov ecx, dword [esp + 0x94]
cmp ecx, eax
je 0x411e31
mov eax, dword [0x4a111c]
add eax, 0xdfbcdfef
mov dword [0x4a111c], eax
mov eax, dword [0x4a6040]
and eax, 0x1353
mov cx, word [0x490c50]
mov dx, cx
sub edx, eax
mov cx, dx
mov word [0x490c50], cx
xorps xmm0, xmm0
movaps xmmword [esp + 0x120], xmm0
mov cx, word [0x48dcda]
mov ax, cx
and eax, 0x68ed
mov cx, ax
mov word [0x48dcda], cx
mov word [esp + 0x120], 2
mov eax, dword [0x4968d8]
mov edx, eax
dec edx
mov dword [0x4968d8], edx
mov edx, dword [0x4a5154]
imul edx, eax
mov dword [0x4a5154], edx
mov eax, dword [0x499d58]
mov edx, dword [0x4a137c]
not edx
add edx, 0x2882daad
and eax, edx
mov edx, dword [0x499578]
sub edx, 0xc09c060d
cmp eax, edx
jge 0x411ee1
mov eax, dword [0x49d814]
mov ecx, dword [0x49a928]
xor eax, ecx
xor eax, 0x9ee6b12b
mov dword [0x49a928], eax
jmp 0x411ef9
mov ax, word [0x48f4e4]
mov cx, ax
xor ecx, 0xb67e
mov ax, cx
mov word [0x48f4e4], ax
mov eax, 0x44d976b2
mov dword [esp + 0x10d], 0x13
mov ecx, dword [0x49e81c]
dec ecx
mov dword [0x49e81c], ecx
mov edx, dword [0x499210]
imul edx, edx, 0x9c0dd7d0
and ecx, edx
cmp eax, ecx
jne 0x411f3d
mov eax, dword [0x49cff4]
not eax
add eax, 0x589f615a
mov dword [0x49a490], eax
mov eax, 0xa2b7f2a5
mov dword [esp + 0x111], 0
mov ecx, dword [0x4957d8]
shl ecx, 8
add ecx, 0xb32fa951
mov edx, dword [0x498ae8]
sub edx, ecx
mov dword [0x498ae8], edx
mov dword [esp + 0x115], 7
mov ecx, dword [0x4a522c]
cmp eax, ecx
jg 0x411f8c
mov word [0x492eb6], 0x1eff
mov byte [esp + 0x119], 3
mov eax, dword [0x49d420]
add eax, 0x4399d743
and eax, 0xa727eeb8
mov ecx, dword [0x4a5640]
add ecx, eax
mov dword [0x4a5640], ecx
lea ecx, [esp + 0xf8]
call fcn.00437470
mov ecx, dword [0x4a2b78]
mov edx, ecx
dec edx
mov dword [0x4a2b78], edx
mov edx, dword [0x4a5ea8]
xor ecx, edx
cmp ecx, 0x81f7b388
mov dword [esp + 0x90], eax
jg 0x411ff6
mov eax, dword [0x4996c0]
add eax, 0xc01043
mov dword [0x4996c0], eax
movzx eax, byte [esp + 0x137]
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], 0
lea ecx, [esp + 0xf8]
call fcn.00420e60
sub esp, 8
mov dword [0x49d58c], 0xb07ce523
mov dword [esp + 0xf4], 0
mov eax, dword [esp + 0xf4]
movzx ecx, byte [esp + 0x137]
cmp eax, ecx
je 0x412097
mov dword [0x4a305c], 0x8b9e5fe9
mov eax, esp
lea ecx, [esp + 0xf4]
mov dword [eax], ecx
lea ecx, [esp + 0xf8]
call fcn.004210f0
sub esp, 4
mov eax, dword [0x498610]
add eax, 0x24fa598e
mov ecx, dword [0x4976e0]
imul ecx, eax
mov dword [0x4976e0], ecx
mov eax, dword [esp + 0xf4]
add eax, 1
mov dword [esp + 0xf4], eax
jmp 0x41202d
mov eax, 0xd0d2ad8e
mov ecx, dword [0x4a2064]
mov edx, ecx
inc edx
mov dword [0x4a2064], edx
add ecx, 0x90936895
mov edx, dword [0x4a02f4]
imul edx, ecx
mov dword [0x4a02f4], edx
mov ecx, esp
lea edx, [esp + 0xf8]
mov dword [ecx], edx
mov dword [esp + 0x8c], eax
call fcn.0044eab0
mov eax, dword [0x4a10f4]
mov ecx, eax
inc ecx
mov dword [0x4a10f4], ecx
mov ecx, dword [esp + 0x8c]
cmp ecx, eax
jg 0x412103
mov dword [0x4a1b30], 0x511895cd
jmp 0x412112
mov eax, dword [0x49d90c]
and eax, 0x2bb64292
mov dword [0x49d90c], eax
mov dword [esp + 0xf0], 0
mov eax, dword [esp + 0xf0]
movzx ecx, byte [esp + 0x137]
cmp eax, ecx
je 0x412bf9
mov eax, 0x1d6134b4
mov ecx, dword [0x4a5590]
or ecx, 0x62c20a01
mov dword [0x4a5590], ecx
mov ecx, dword [esp + 0xf0]
mov edx, esp
mov dword [edx], ecx
lea ecx, [esp + 0xf8]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x84], eax
call fcn.00416080
sub esp, 4
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov ecx, dword [esp + 0x138]
mov eax, dword [ecx + eax*2 + 1]
mov dword [esp + 0x124], eax
mov eax, dword [0x49bff0]
shl eax, 9
mov ecx, dword [0x4a5d44]
sub eax, ecx
and eax, 0xc071cd69
mov dword [0x49efac], eax
mov eax, dword [esp + 0xf0]
mov ecx, esp
mov dword [ecx], eax
mov ecx, dword [esp + 0x88]
call fcn.00416080
sub esp, 4
mov eax, dword [eax]
lea eax, [eax + eax*2]
mov ecx, dword [esp + 0x138]
mov si, word [ecx + eax*2 + 5]
mov word [esp + 0x122], si
mov eax, dword [0x49e8fc]
sar eax, 7
add eax, 0x132c926c
mov ecx, dword [esp + 0x84]
cmp ecx, eax
jle 0x4121fd
mov dword [0x49d7c0], 0x24e40800
lea eax, [esp + 0xdc]
mov ecx, eax
mov dword [esp + 0x80], eax
call fcn.00420600
mov ecx, dword [0x4958c8]
or ecx, 0x18232391
mov dword [0x4958c8], ecx
mov ecx, dword [esp + 0x124]
mov dword [esp + 0x11a], ecx
mov ecx, dword [0x49e300]
or ecx, 0xc5c9ff86
mov dword [0x4a6ed4], ecx
mov dx, word [esp + 0x122]
mov word [esp + 0x11e], dx
mov ecx, dword [0x49d480]
xor ecx, 0xcbfb1d20
mov dword [0x49d480], ecx
mov ecx, esp
lea esi, [esp + 0x10d]
mov dword [ecx], esi
mov dword [ecx + 4], 0x13
mov ecx, dword [esp + 0x80]
mov dword [esp + 0x7c], eax
call fcn.00422dd0
sub esp, 8
mov ecx, dword [0x4a1408]
or ecx, 0x4e511f52
mov dword [0x4a1408], ecx
mov ecx, esp
lea esi, [esp + 0xdc]
mov dword [ecx + 4], esi
lea esi, [esp + 0x120]
mov dword [ecx], esi
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], 2
mov ecx, dword [esp + 0xc0]
mov dword [esp + 0x78], eax
call fcn.004361c0
sub esp, 0x10
cmp eax, 0
jg 0x412317
mov eax, dword [0x49f428]
inc eax
mov dword [0x49f428], eax
imul eax, eax, 0xcbe548f6
mov cx, word [0x490fb8]
movsx edx, cx
sub eax, edx
mov edx, dword [0x4986e8]
or edx, eax
mov dword [0x4986e8], edx
mov dword [esp + 0xd8], 7
jmp 0x412ba2
mov eax, dword [0x4a4b38]
cmp eax, 0xbfedceee
jl 0x412336
mov eax, dword [0x49f930]
and eax, 0xbf355c0a
mov dword [0x49f930], eax
lea eax, [esp + 0xdc]
mov ecx, eax
call fcn.0044fff0
cmp eax, 0x400
ja 0x412381
mov eax, dword [0x49ead4]
mov ecx, eax
dec ecx
mov dword [0x49ead4], ecx
add eax, 0x6fab8db8
mov ecx, dword [0x49cdf0]
imul ecx, eax
mov dword [0x49cdf0], ecx
mov dword [esp + 0xd8], 7
jmp 0x412ba2
lea eax, [esp + 0xdc]
mov cx, word [0x49035a]
movsx edx, cx
shr edx, 5
or edx, 0xf7de
mov cx, word [0x48e26e]
mov si, cx
sub esi, edx
mov cx, si
mov word [0x48e26e], cx
mov ecx, eax
call fcn.0044fff0
cmp eax, 0x4000
jbe 0x4123e2
mov eax, dword [0x4a1c38]
add eax, 0x3781efcb
mov dword [0x4a1c38], eax
mov dword [esp + 0xd8], 7
jmp 0x412ba2
mov eax, dword [0x49776c]
add eax, 0xffef7ddf
mov dword [0x49776c], eax
lea ecx, [esp + 0xdc]
call fcn.0043b040
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [esp + 0x150]
mov esi, dword [esp + 0x154]
sub ecx, edx
sbb eax, esi
mov dword [esp + 0x74], eax
mov dword [esp + 0x70], ecx
jae 0x4124b7
jmp 0x412427
mov eax, dword [0x49a9e4]
mov ecx, dword [0x4a09f4]
add ecx, eax
mov dword [0x4a09f4], ecx
mov eax, dword [esp + 0x13c]
inc eax
mov dword [esp + 0x13c], eax
mov dword [0x4a2d94], 0xffbdf7e3
cmp dword [esp + 0x13c], 3
jne 0x41248f
mov eax, dword [0x49b324]
inc eax
mov dword [0x49b324], eax
or eax, 0xd638376b
mov ecx, dword [0x49c13c]
add ecx, eax
mov dword [0x49c13c], ecx
mov dword [esp + 0xd8], 5
jmp 0x412ba2
mov ax, word [0x48ee64]
mov cx, ax
or ecx, 0x2c4c
mov ax, cx
mov word [0x48ee64], ax
mov dword [esp + 0xd8], 7
jmp 0x412ba2
lea eax, [esp + 0xdc]
mov ecx, dword [0x49b1d0]
add ecx, 0x40205a49
mov dword [0x49b1d0], ecx
mov dword [esp + 0x13c], 0
mov ecx, dword [0x4a6e1c]
add ecx, 0x38289d33
mov dword [0x4a6e1c], ecx
lea ecx, [esp + 0xdc]
mov dword [esp + 0x6c], eax
call fcn.0043b040
movzx eax, word [eax + 8]
mov dword [esp + 0xd4], eax
mov eax, dword [0x4a46a4]
or eax, 0xcf9ac0df
mov dword [0x4a46a4], eax
imul eax, dword [esp + 0xd4], 6
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x68], eax
call fcn.0044fff0
sub eax, 0x400
sub eax, 0xa
mov ecx, dword [esp + 0x68]
cmp ecx, eax
jbe 0x41255f
mov eax, dword [0x4963cc]
add eax, 0x2258a2a7
mov dword [0x4963cc], eax
mov dword [esp + 0xd8], 7
jmp 0x412ba2
mov ax, word [0x493594]
mov cx, ax
add ecx, 0xf6a20d50
mov ax, cx
mov word [0x493594], ax
mov byte [esp + 0xd3], 0
mov ax, word [0x49192c]
mov cx, ax
imul ecx, ecx, 0xa69b585f
mov ax, cx
mov word [0x49192c], ax
mov dword [esp + 0xcc], 0
mov eax, dword [esp + 0xcc]
cmp eax, dword [esp + 0xd4]
je 0x412861
lea eax, [esp + 0xdc]
mov ecx, dword [0x49973c]
inc ecx
mov dword [0x49973c], ecx
mov edx, dword [0x49c678]
shl edx, 2
and ecx, edx
mov edx, dword [0x49b624]
or edx, ecx
mov dword [0x49b624], edx
mov ecx, dword [esp + 0x124]
imul edx, dword [esp + 0xcc], 6
add edx, 0xa
mov dword [esp + 0x64], ecx
mov ecx, eax
mov dword [esp + 0x60], edx
call fcn.0043b040
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x60]
cmp ecx, dword [eax + edx]
jne 0x4127c2
lea eax, [esp + 0xdc]
mov cx, word [0x48c65e]
movsx edx, cx
sar edx, 0xa
mov esi, dword [0x495600]
or edx, esi
mov esi, dword [0x4a4cc0]
or edx, esi
or edx, 0xdc7ecb8b
mov dword [0x4a4cc0], edx
movzx edx, word [esp + 0x122]
imul esi, dword [esp + 0xcc], 6
add esi, 0xa
mov ecx, eax
mov dword [esp + 0x5c], esi
mov dword [esp + 0x58], edx
call fcn.0043b040
mov ecx, dword [esp + 0x5c]
movzx eax, word [eax + ecx + 4]
mov edx, dword [esp + 0x58]
cmp edx, eax
jne 0x412755
mov eax, 0x57134977
mov ecx, dword [0x49fa14]
sar ecx, 8
imul ecx, ecx, 0xec4ccde
sub ecx, 0x3a9c680e
cmp eax, ecx
jge 0x4126ad
mov dword [0x4990a0], 0xc818a7b
jmp 0x4126da
mov eax, 0xfe755b74
mov ecx, dword [0x4a5c20]
sub ecx, 0xa5f7cde9
cmp eax, ecx
jne 0x4126d5
mov eax, dword [0x49aaa8]
and eax, 0x815ec93
mov dword [0x49aaa8], eax
jmp 0x4126da
mov byte [esp + 0xd3], 1
mov ax, word [0x48eef2]
mov cx, ax
inc ecx
mov ax, cx
mov word [0x48eef2], ax
movsx ecx, ax
imul ecx, ecx, 0x428937a6
cmp ecx, 0xfe8dbfae
jne 0x412741
mov eax, dword [0x4a53fc]
mov ecx, eax
inc ecx
mov dword [0x4a53fc], ecx
add eax, 0xab62d4b1
mov ecx, dword [0x4a5894]
mov edx, ecx
inc edx
mov dword [0x4a5894], edx
xor eax, ecx
mov ecx, dword [0x4a3e4c]
xor ecx, eax
mov dword [0x4a3e4c], ecx
jmp 0x412750
mov eax, dword [0x49cfd4]
or eax, 0x1a6d32b8
mov dword [0x49ff20], eax
jmp 0x412861
mov eax, 0xa030250e
mov cx, word [0x49426c]
mov dx, cx
inc edx
mov si, dx
mov word [0x49426c], si
movsx edx, cx
or edx, 0x459d7a47
mov edi, dword [0x49b7f8]
or edx, edi
cmp eax, edx
jl 0x4127ae
mov eax, dword [0x4a399c]
mov ecx, eax
dec ecx
mov dword [0x4a399c], ecx
and eax, 0x7fbff2a
mov ecx, dword [0x4a4d38]
or ecx, eax
mov dword [0x4a4d38], ecx
jmp 0x4127bd
mov eax, dword [0x4a44d8]
and eax, 0x8c5796de
mov dword [0x4a44d8], eax
jmp 0x4127c2
mov eax, 0xe11a8650
mov ecx, dword [0x4a0cf8]
imul ecx, ecx, 0xc33a73d0
cmp eax, ecx
jl 0x412846
mov eax, 0x482f3f01
mov ecx, dword [0x497e5c]
mov edx, dword [0x4a40bc]
mov esi, edx
dec esi
mov dword [0x4a40bc], esi
imul ecx, edx
cmp eax, ecx
jl 0x412831
mov eax, 0xebdef6d7
mov ecx, dword [0x49c3dc]
mov edx, ecx
inc edx
mov dword [0x49c3dc], edx
or ecx, 0x9892a8a1
cmp eax, ecx
jge 0x412827
jmp 0x41282c
jmp 0x41282c
jmp 0x412841
mov eax, dword [0x49afbc]
imul eax, eax, 0x4e6d467a
mov dword [0x49afbc], eax
jmp 0x412846
jmp 0x41284b
mov eax, dword [esp + 0xcc]
add eax, 1
mov dword [esp + 0xcc], eax
jmp 0x4125a2
mov eax, 0x3b2b0af3
mov cx, word [0x48f9a6]
movsx edx, cx
xor edx, 0xc7c69a9b
cmp eax, edx
jl 0x412893
mov eax, dword [0x495f10]
imul eax, eax, 0x2b84780
mov dword [0x495f10], eax
jmp 0x4128ed
mov eax, 0x54c1a312
mov ecx, dword [0x4961b4]
mov edx, dword [0x498c74]
mov esi, edx
dec esi
mov dword [0x498c74], esi
and ecx, edx
cmp eax, ecx
jl 0x4128cb
mov eax, dword [0x4a2dfc]
or eax, 0x9aef0297
mov dword [0x4a2dfc], eax
jmp 0x4128e8
mov ax, word [0x491710]
movsx ecx, ax
imul ecx, ecx, 0x8d36a0be
mov edx, dword [0x4955a4]
sub ecx, edx
mov dword [0x49f388], ecx
jmp 0x4128ed
test byte [esp + 0xd3], 1
jne 0x412915
mov dword [0x497af4], 0x4d59f36
mov dword [esp + 0xd8], 7
jmp 0x412ba2
mov eax, dword [0x49fb24]
add eax, 0x46b83c3e
mov dword [0x49fb24], eax
mov eax, esp
mov dword [eax + 4], 0x408
mov dword [eax], 0x3dac
call fcn.00428730
mov dword [esp + 0xc8], eax
mov cx, word [0x4928c8]
mov ax, cx
inc eax
mov cx, ax
mov word [0x4928c8], cx
movsx eax, cx
and eax, 0x540f484c
cmp eax, 0x1942e2
jl 0x41297a
mov eax, dword [0x495b68]
mov ecx, eax
inc ecx
mov dword [0x495b68], ecx
mov dword [0x49dd60], eax
lea eax, [esp + 0xdc]
mov ecx, eax
mov dword [esp + 0x54], eax
call fcn.0044fff0
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x50], eax
call fcn.0043b040
mov ecx, dword [esp + 0xc8]
mov edx, esp
mov esi, dword [esp + 0x50]
mov dword [edx + 8], esi
mov dword [edx + 4], eax
mov dword [edx], ecx
call fcn.00423c40
mov dword [esp + 0xc4], eax
mov eax, dword [0x49a66c]
mov ecx, eax
dec ecx
mov dword [0x49a66c], ecx
mov ecx, dword [0x49647c]
lea eax, [eax + ecx - 0x1232863c]
mov dword [0x49647c], eax
mov eax, dword [esp + 0xc8]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x408
call fcn.00419110
mov eax, dword [0x499130]
or eax, 0x34d3c8af
mov dword [0x499130], eax
cmp dword [esp + 0xc4], 4
jle 0x412a33
lea eax, [esp + 0xdc]
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x4c], ecx
mov ecx, eax
call fcn.0044fff0
mov ecx, dword [esp + 0x4c]
cmp ecx, eax
jbe 0x412a72
mov eax, dword [0x49ebd4]
imul eax, eax, 0x3df944fc
mov dword [0x49ebd4], eax
mov dword [esp + 0xc4], 0
mov eax, dword [0x49636c]
and eax, 0x48650c93
cmp eax, 0xdd3ddd77
jg 0x412a6d
mov dword [0x4a5920], 0xa3fbc965
jmp 0x412aa3
mov eax, dword [0x498314]
imul eax, eax, 0xc3042681
mov dword [0x498314], eax
mov eax, dword [esp + 0xc4]
add eax, 0xfffffffc
mov dword [esp + 0xc4], eax
mov eax, dword [0x496380]
imul eax, eax, 0x3065c69
mov dword [0x496380], eax
mov eax, dword [0x4a1dc8]
xor eax, 0x80be30
mov dword [0x4a1dc8], eax
mov eax, dword [esp + 0xc4]
imul ecx, dword [esp + 0xd4], 6
add ecx, 0xa
cmp eax, ecx
jge 0x412b0f
mov eax, 0xfff9eaff
mov ecx, dword [0x4a6b90]
mov edx, dword [0x4a3d50]
or ecx, edx
cmp eax, ecx
jg 0x412aff
mov ax, word [0x48daf4]
mov cx, ax
and ecx, 0xd55f
mov ax, cx
mov word [0x48daf4], ax
mov dword [esp + 0xd8], 7
jmp 0x412ba2
mov eax, dword [0x499e78]
mov ecx, eax
dec ecx
mov dword [0x499e78], ecx
imul eax, eax, 0xc3f4b51d
xor eax, 0xf870823f
cmp eax, 0x9ea473a6
jle 0x412b4d
mov eax, dword [0x49c074]
dec eax
mov dword [0x49c074], eax
or eax, 0x46543681
and eax, 0x675fbec5
mov dword [0x49be74], eax
mov eax, 0x48990e4b
lea ecx, [esp + 0xdc]
mov dword [esp + 0x48], eax
call fcn.0043b040
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x144], eax
mov dword [esp + 0x140], ecx
mov eax, dword [0x49fbf8]
mov ecx, dword [esp + 0x48]
cmp ecx, eax
je 0x412b97
mov eax, dword [0x4a2320]
add eax, eax
mov cx, ax
mov word [0x48ed0e], cx
mov dword [esp + 0xd8], 5
lea ecx, [esp + 0xdc]
call fcn.0041d3a0
mov ecx, dword [esp + 0xd8]
mov eax, ecx
sub eax, 5
mov dword [esp + 0x44], ecx
mov dword [esp + 0x40], eax
je 0x412bf9
jmp 0x412bcd
mov eax, dword [esp + 0x44]
sub eax, 7
mov dword [esp + 0x3c], eax
jne 0x412f59
jmp 0x412be3
mov eax, dword [esp + 0xf0]
add eax, 1
mov dword [esp + 0xf0], eax
jmp 0x41211d
mov eax, dword [0x4957a4]
mov ecx, eax
inc ecx
mov dword [0x4957a4], ecx
add eax, 0x613c7316
mov ecx, dword [0x4a3b80]
mov edx, ecx
inc edx
mov dword [0x4a3b80], edx
sub eax, ecx
mov ecx, dword [0x4a604c]
sar ecx, 3
cmp eax, ecx
je 0x412c51
mov eax, dword [0x4a015c]
mov ecx, eax
inc ecx
mov dword [0x4a015c], ecx
imul eax, eax, 0xdde9d62f
add eax, 0xdc538eef
mov dx, ax
mov word [0x48f2a6], dx
mov eax, esp
lea ecx, [esp + 0x10d]
mov dword [eax], ecx
mov dword [eax + 4], 0x13
call fcn.00417650
mov eax, dword [0x4a0b24]
and eax, 0x754e3996
mov dword [0x4a0b24], eax
mov eax, dword [esp + 0x138]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 0x600
call fcn.00419110
mov dword [0x4a6464], 0xf7a45ffa
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x144]
or eax, ecx
mov dword [esp + 0x38], eax
je 0x412ecb
jmp 0x412cb7
mov eax, 0x6372f816
mov ecx, dword [0x49cecc]
xor ecx, 0xfcdccd1f
mov dword [0x49cecc], ecx
mov ecx, dword [0x48c0a4]
mov edx, esp
mov esi, dword [esp + 0xc0]
mov dword [edx], esi
mov dword [esp + 0x34], eax
call ecx
sub esp, 4
mov eax, dword [0x4a53b0]
mov ecx, dword [esp + 0x34]
cmp ecx, eax
jle 0x412d22
mov eax, dword [0x498c78]
mov ecx, eax
dec ecx
mov dword [0x498c78], ecx
or eax, 0xa384
mov dx, word [0x490502]
mov cx, dx
xor ecx, eax
mov dx, cx
mov word [0x490502], dx
mov eax, 0xffffffff
mov ecx, dword [esp + 0x12c]
mov edx, dword [esp + 0xc0]
mov dword [edx + 0x2c], ecx
mov ecx, dword [esp + 0x128]
mov dword [edx + 0x28], ecx
mov ecx, dword [esp + 0x120]
mov esi, dword [esp + 0x124]
mov dword [edx + 0x24], esi
mov dword [edx + 0x20], ecx
mov ecx, dword [0x4970cc]
cmp eax, ecx
jne 0x412dae
mov eax, dword [0x4a2a38]
xor eax, 0x24b7788f
mov ecx, dword [0x49dc58]
cmp eax, ecx
jl 0x412da9
mov ax, word [0x491e06]
mov cx, ax
dec ecx
mov dx, cx
mov word [0x491e06], dx
movsx ecx, ax
cmp ecx, 0x83024048
jge 0x412da4
jmp 0x412da4
jmp 0x412da9
jmp 0x412dae
mov ebx, dword [esp + 0x140]
mov ecx, dword [esp + 0x144]
mov eax, dword [esp + 0xc0]
add eax, 0x18
mov edx, dword [esp + 0xc0]
mov esi, dword [edx + 0x18]
mov edi, dword [edx + 0x1c]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], esi
mov dword [esp + 0x20], edi
jmp 0x412dec
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x1c], eax
mov eax, ecx
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x28]
lock cmpxchg8b qword [esi]
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], edx
jne 0x412dec
jmp 0x412e21
mov eax, dword [0x4958cc]
mov cx, word [0x49172a]
mov dx, cx
xor edx, eax
mov cx, dx
mov word [0x49172a], cx
mov eax, dword [0x48c0a8]
mov edx, esp
mov esi, dword [esp + 0xc0]
mov dword [edx], esi
call eax
sub esp, 4
mov eax, dword [0x49a1bc]
not eax
add eax, 0x3937c32f
mov dword [0x49bdd8], eax
mov eax, dword [esp + 0x164]
mov edx, dword [esp + 0x12c]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x128]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x120]
mov esi, dword [esp + 0x124]
mov dword [eax + 4], esi
mov dword [eax], edx
mov eax, dword [0x49dac8]
or eax, 0x468b
mov cx, word [0x48cf1e]
mov dx, cx
imul edx, eax
mov cx, dx
mov word [0x48cf1e], cx
mov dword [esp + 0x15c], 1
mov eax, dword [0x4a12d8]
and eax, 0x21012b82
mov dword [0x4a12d8], eax
mov eax, dword [0x49cb98]
dec eax
mov dword [0x49cb98], eax
mov cx, word [0x49214e]
movsx edx, cx
sub eax, edx
and eax, 0xe4f4a1d8
cmp eax, 0x4b87d021
jge 0x412f13
mov eax, dword [0x49696c]
mov ecx, eax
dec ecx
mov dword [0x49696c], ecx
mov ecx, 0x1c82b93b
sub ecx, eax
mov eax, dword [0x4a07c4]
xor eax, ecx
mov dword [0x4a07c4], eax
lea ecx, [esp + 0xf8]
call fcn.00422e80
mov eax, dword [0x49dc08]
mov ecx, 0x84d572cb
sub ecx, eax
xor ecx, 0xaa6b
mov dx, word [0x48f0c6]
mov ax, dx
imul eax, ecx
mov dx, ax
mov word [0x48f0c6], dx
mov eax, dword [esp + 0x15c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 8
int3