Function at 0x410b60
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x9c
mov ecx, dword [0x48111c]
push ebx
push ebp
push esi
push edi
xor ebp, ebp
xor ebx, ebx
xor edi, edi
xor esi, esi
cmp ecx, ebp
mov dword [esp + 0x60], ebx
mov dword [esp + 0x5c], edi
mov dword [esp + 0x68], esi
mov dword [esp + 0x58], ebp
jbe 0x410bb9
mov eax, dword [0x481120]
mov edx, ecx
add eax, 0x20
cmp dword [eax - 0xc], ebp
je 0x410b9c
inc ebx
cmp dword [eax], ebp
je 0x410ba1
inc edi
cmp dword [eax + 0xc], ebp
je 0x410ba7
inc esi
add eax, 0x44
dec edx
jne 0x410b96
mov dword [esp + 0x68], esi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x60], ebx
cmp ecx, ebp
mov word [esp + 0x4c], bp
mov word [esp + 0x52], 0x5643
mov dword [esp + 0x20], ebp
jbe 0x410e8e
mov edx, dword [0x481120]
mov ebx, dword [esp + 0xb0]
lea ecx, [esp + 0x50]
push ebx
mov eax, dword [edx + ebp]
push ecx
push eax
call fcn.00410730
mov edx, dword [0x481120]
mov esi, eax
or ecx, 0xffffffff
xor eax, eax
mov edi, dword [edx + ebp + 4]
mov dword [esp + 0x28], edi
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x1c], eax
mov byte [esp + 0x48], cl
mov ecx, dword [esp + 0x48]
and ecx, 0xff
mov dword [esp + 0x24], ecx
mov edx, dword [edx + ebp]
mov eax, dword [edx + 0x64]
mov ecx, dword [eax + 0x30]
shr ecx, 4
not cl
test cl, 1
je 0x410c87
mov edx, dword [ebx + 0x1c0]
lea eax, [esp + 0x70]
push edx
push eax
call fcn.0040f6f0
lea ecx, [esp + 0x70]
push ecx
call fcn.0040f720
test al, al
je 0x410c7d
mov eax, dword [esp + 0x7c]
cmp dword [eax], 0
je 0x410c6f
mov edi, dword [esp + 0x1c]
mov edx, dword [0x481120]
inc edi
mov dword [esp + 0x1c], edi
mov ecx, dword [edx + ebp]
cmp eax, dword [ecx + 0x64]
je 0x410c7d
lea edx, [esp + 0x70]
push edx
call fcn.0040f720
test al, al
jne 0x410c4f
lea eax, [esp + 0x70]
push eax
call fcn.0040f760
mov al, byte [0x481194]
mov cx, word [esp + 0x1c]
mov edi, dword [0x481184]
mov word [esp + 0x4e], cx
test al, al
je 0x410ca5
call fcn.0040ca50
mov edx, dword [0x469524]
mov eax, dword [edx + edi*4]
test byte [eax + 4], 8
je 0x410cb9
mov eax, dword [eax + 0x1c]
jmp 0x410cbf
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0xc]
mov ecx, dword [0x481120]
mov dword [ecx + ebp + 0x38], eax
mov al, byte [0x481194]
mov edi, dword [0x481184]
test al, al
je 0x410cdd
call fcn.0040ca50
mov edx, dword [0x469524]
push 8
mov eax, dword [edx + edi*4]
test byte [eax + 4], 8
je 0x410cfb
lea ecx, [esp + 0x50]
push ecx
push eax
call fcn.0040c700
jmp 0x410d06
lea edx, [esp + 0x50]
push edx
push eax
call fcn.0040bd70
xor ebx, ebx
cmp word [esp + 0x50], bx
jbe 0x410dbc
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x1c]
mov edx, dword [ecx + 0x28]
mov ax, word [edx + 0x2c]
mov word [esp + 0x82], 0
mov word [esp + 0x80], ax
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax]
mov edx, dword [ecx + 0x28]
sub eax, dword [edx + 4]
mov dword [esp + 0x84], eax
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edx, dword [eax + 8]
mov edi, dword [ecx]
mov ecx, dword [eax]
mov al, byte [0x481194]
sub edx, edi
mov edi, dword [0x481184]
add edx, ecx
test al, al
mov dword [esp + 0x88], edx
je 0x410d73
call fcn.0040ca50
mov eax, dword [0x469524]
push 0xc
mov eax, dword [eax + edi*4]
test byte [eax + 4], 8
je 0x410d93
lea ecx, [esp + 0x84]
push ecx
push eax
call fcn.0040c700
jmp 0x410da1
lea edx, [esp + 0x84]
push edx
push eax
call fcn.0040bd70
mov edi, dword [esi + 0xc]
push esi
call dword [sym.imp.MSVCRT.dll_free]
add esp, 4
inc ebx
cmp bx, word [esp + 0x50]
mov esi, edi
jb 0x410d13
mov al, byte [0x481194]
mov esi, dword [0x481184]
test al, al
je 0x410dd0
call fcn.0040ca50
mov eax, dword [0x469524]
push 1
mov eax, dword [eax + esi*4]
test byte [eax + 4], 8
je 0x410ded
lea ecx, [esp + 0x4c]
push ecx
push eax
call fcn.0040c700
jmp 0x410df8
lea edx, [esp + 0x4c]
push edx
push eax
call fcn.0040bd70
mov al, byte [0x481194]
mov esi, dword [esp + 0x24]
mov edi, dword [0x481184]
test al, al
je 0x410e10
call fcn.0040ca50
mov eax, dword [0x469524]
push esi
mov eax, dword [eax + edi*4]
test byte [eax + 4], 8
je 0x410e2c
mov ecx, dword [esp + 0x2c]
push ecx
push eax
call fcn.0040c700
jmp 0x410e37
mov edx, dword [esp + 0x2c]
push edx
push eax
call fcn.0040bd70
mov al, byte [0x481194]
mov esi, dword [0x481184]
test al, al
je 0x410e4b
call fcn.0040ca50
mov eax, dword [0x469524]
mov eax, dword [eax + esi*4]
test byte [eax + 4], 8
je 0x410e5e
mov eax, dword [eax + 0x1c]
jmp 0x410e64
mov ecx, dword [eax + 0x20]
mov eax, dword [ecx + 0xc]
mov ecx, dword [0x481120]
add ebp, 0x44
mov edi, dword [ecx + ebp - 0xc]
sub eax, edi
mov dword [ecx + ebp - 8], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [0x48111c]
inc eax
cmp eax, ecx
mov dword [esp + 0x20], eax
jb 0x410bd1
mov ebx, dword [esp + 0xb0]
xor edi, edi
push ebx
mov dword [esp + 0x2c], edi
call fcn.00410880
cmp dword [0x48111c], edi
jbe 0x41108d
xor ebp, ebp
mov dword [esp + 0x2c], 1
mov ecx, dword [0x481120]
cmp dword [ecx + ebp + 8], 0xffffffff
jne 0x410ecd
mov dword [ecx + ebp + 8], edi
jmp 0x411072
mov edx, dword [esp + 0x28]
mov al, byte [0x481194]
mov esi, dword [0x481184]
inc edx
test al, al
mov dword [esp + 0x28], edx
je 0x410ef0
call fcn.0040ca50
mov ecx, dword [0x481120]
mov edx, dword [0x469524]
mov eax, dword [edx + esi*4]
test byte [eax + 4], 8
je 0x410f04
mov eax, dword [eax + 0x1c]
jmp 0x410f0a
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0xc]
mov dword [ecx + ebp + 8], eax
mov al, byte [0x481194]
mov esi, dword [0x481184]
mov dword [esp + 0x6c], 2
test al, al
je 0x410f2a
call fcn.0040ca50
mov ecx, dword [0x469524]
push 4
mov eax, dword [ecx + esi*4]
test byte [eax + 4], 8
je 0x410f48
lea edx, [esp + 0x70]
push edx
push eax
call fcn.0040c700
jmp 0x410f53
lea ecx, [esp + 0x70]
push ecx
push eax
call fcn.0040bd70
mov edx, dword [0x481120]
lea eax, [edx + ebp]
push eax
push ebx
call fcn.00410ae0
mov edx, dword [0x481120]
mov ecx, dword [edx + ebp]
mov eax, dword [ecx + 0x64]
mov ecx, dword [eax + 0x30]
shr ecx, 4
not cl
test cl, 1
je 0x411032
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x48111c]
cmp eax, ecx
mov dword [esp + 0x30], eax
jae 0x411032
lea edi, [ebp + 0x44]
mov dword [esp + 0x20], edi
mov eax, dword [edx + ebp]
mov ecx, dword [edi + edx]
add edi, edx
mov eax, dword [eax + 0x64]
mov esi, dword [ecx + 0x64]
cmp eax, esi
jne 0x411009
mov esi, dword [edi + 4]
mov eax, dword [edx + ebp + 4]
mov bl, byte [eax]
mov cl, bl
cmp bl, byte [esi]
jne 0x410fda
test cl, cl
je 0x410fd6
mov bl, byte [eax + 1]
mov cl, bl
cmp bl, byte [esi + 1]
jne 0x410fda
add eax, 2
add esi, 2
test cl, cl
jne 0x410fb6
xor eax, eax
jmp 0x410fdf
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x411009
mov ecx, dword [esp + 0xb0]
push edi
push ecx
call fcn.00410ae0
mov edx, dword [0x481120]
mov eax, dword [esp + 0x20]
mov dword [eax + edx + 8], 0xffffffff
mov edx, dword [0x481120]
mov eax, dword [esp + 0x30]
mov edi, dword [esp + 0x20]
mov ecx, dword [0x48111c]
inc eax
add edi, 0x44
cmp eax, ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x20], edi
jb 0x410f9d
mov ebx, dword [esp + 0xb0]
mov al, byte [0x481194]
mov esi, dword [0x481184]
test al, al
je 0x41104c
call fcn.0040ca50
mov edx, dword [0x481120]
mov ecx, dword [0x469524]
mov eax, dword [ecx + esi*4]
test byte [eax + 4], 8
je 0x411060
mov eax, dword [eax + 0x1c]
jmp 0x411066
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0xc]
mov ecx, dword [edx + ebp + 8]
sub eax, ecx
xor edi, edi
mov dword [edx + ebp + 0xc], eax
mov eax, dword [esp + 0x2c]
mov ecx, dword [0x48111c]
inc eax
add ebp, 0x44
mov dword [esp + 0x2c], eax
dec eax
cmp eax, ecx
jb 0x410eb7
mov al, byte [0x481194]
mov esi, dword [0x481184]
test al, al
je 0x4110a1
call fcn.0040ca50
mov ecx, dword [0x469524]
mov eax, dword [ecx + esi*4]
test byte [eax + 4], 8
je 0x4110b9
mov edx, dword [eax + 0x1c]
mov dword [esp + 0x30], edx
jmp 0x4110c3
mov eax, dword [eax + 0x20]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x30], ecx
mov al, byte [0x481194]
mov esi, dword [0x481184]
test al, al
mov dword [esp + 0x24], edi
je 0x4110db
call fcn.0040ca50
mov edx, dword [0x469524]
push 1
mov eax, dword [edx + esi*4]
test byte [eax + 4], 8
je 0x4110f9
lea ecx, [esp + 0x28]
push ecx
push eax
call fcn.0040c700
jmp 0x411104
lea edx, [esp + 0x28]
push edx
push eax
call fcn.0040bd70
mov eax, dword [ebx + 0x1c0]
lea ecx, [esp + 0x70]
push eax
push ecx
call fcn.0040f6f0
lea edx, [esp + 0x70]
push edx
call fcn.0040f720
test al, al
je 0x4111d3
mov eax, dword [esp + 0x7c]
mov ebp, eax
mov edi, dword [eax]
test edi, edi
je 0x4111bf
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
mov al, byte [0x481194]
mov esi, dword [0x481184]
not ecx
dec ecx
and ecx, 0xff
test al, al
mov dword [esp + 0x24], ecx
je 0x41115f
call fcn.0040ca50
mov eax, dword [0x469524]
push 1
mov eax, dword [eax + esi*4]
test byte [eax + 4], 8
je 0x41117c
lea ecx, [esp + 0x28]
push ecx
push eax
call fcn.0040c700
jmp 0x411187
lea edx, [esp + 0x28]
push edx
push eax
call fcn.0040bd70
mov al, byte [0x481194]
mov edi, dword [ebp]
mov esi, dword [esp + 0x24]
mov ebp, dword [0x481184]
test al, al
je 0x4111a2
call fcn.0040ca50
mov eax, dword [0x469524]
push esi
push edi
mov eax, dword [eax + ebp*4]
push eax
test byte [eax + 4], 8
je 0x4111ba
call fcn.0040c700
jmp 0x4111bf
call fcn.0040bd70
lea ecx, [esp + 0x70]
push ecx
call fcn.0040f720
test al, al
jne 0x411127
xor edi, edi
mov al, byte [0x481194]
mov esi, dword [0x481184]
test al, al
je 0x4111e7
call fcn.0040ca50
mov edx, dword [0x469524]
mov eax, dword [edx + esi*4]
test byte [eax + 4], 8
je 0x4111ff
mov eax, dword [eax + 0x1c]
mov dword [esp + 0x2c], eax
jmp 0x411209
mov ecx, dword [eax + 0x20]
mov edx, dword [ecx + 0xc]
mov dword [esp + 0x2c], edx
mov al, byte [0x481194]
mov esi, dword [0x481184]
test al, al
je 0x41121d
call fcn.0040ca50
mov eax, dword [0x469524]
mov eax, dword [eax + esi*4]
test byte [eax + 4], 8
je 0x411234
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0x64], ecx
jmp 0x41123e
mov edx, dword [eax + 0x20]
mov eax, dword [edx + 0xc]
mov dword [esp + 0x64], eax
mov cx, word [ebx + 0x32]
mov al, byte [0x481194]
mov esi, dword [0x481184]
inc cx
test al, al
mov dword [esp + 0x1c], ecx
je 0x41125c
call fcn.0040ca50
mov edx, dword [0x469524]
push 2
mov eax, dword [edx + esi*4]
test byte [eax + 4], 8
je 0x41127a
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.0040c700
jmp 0x411285
lea edx, [esp + 0x20]
push edx
push eax
call fcn.0040bd70
mov al, byte [0x481194]
mov esi, dword [0x481184]
test al, al
je 0x411299
call fcn.0040ca50
mov eax, dword [0x469524]
push 2
mov eax, dword [eax + esi*4]
test byte [eax + 4], 8
je 0x4112b6
lea ecx, [esp + 0x20]
push ecx
push eax
call fcn.0040c700
jmp 0x4112c1
lea edx, [esp + 0x20]
push edx
push eax
call fcn.0040bd70
mov eax, 1
mov word [esp + 0x36], di
cmp word [ebx + 0x32], ax
mov word [esp + 0x38], di
mov dword [esp + 0x1c], eax
mov ebp, 0xffff
jb 0x4113f6
mov esi, dword [esp + 0x54]
mov ebx, 0x40000000
mov eax, dword [esp + 0xb0]
lea ecx, [esp + 0x9c]
add eax, 0x1b8
push eax
push ecx
call fcn.0040f7e0
lea edx, [esp + 0x9c]
push edx
call fcn.0040f720
test al, al
je 0x41133f
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x1c]
mov esi, eax
and ecx, ebp
movsx eax, word [eax + 0x2c]
cmp eax, ecx
je 0x41133f
lea edx, [esp + 0x9c]
push edx
call fcn.0040f720
test al, al
jne 0x411317
lea eax, [esp + 0x9c]
push eax
call fcn.0040f760
mov word [esp + 0x34], 0x108
mov eax, dword [esi + 0x1c]
test ebx, eax
je 0x411361
mov word [esp + 0x34], 0x109
test dword [esi + 0x1c], 0x80000000
je 0x41136f
or byte [esp + 0x34], 2
test dword [esi + 0x1c], 0x20000000
je 0x41137d
or byte [esp + 0x34], 4
mov cx, word [esp + 0x1c]
mov al, byte [0x481194]
mov edi, dword [0x481184]
mov word [esp + 0x3a], cx
mov word [esp + 0x3c], bp
mov word [esp + 0x3e], bp
mov dword [esp + 0x40], 0
mov edx, dword [esi + 0x10]
test al, al
mov dword [esp + 0x44], edx
je 0x4113b4
call fcn.0040ca50
mov eax, dword [0x469524]
push 0x14
mov eax, dword [eax + edi*4]
test byte [eax + 4], 8
je 0x4113d1
lea ecx, [esp + 0x38]
push ecx
push eax
call fcn.0040c700
jmp 0x4113dc
lea edx, [esp + 0x38]
push edx
push eax
call fcn.0040bd70
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xb0]
inc eax
cmp ax, word [ecx + 0x32]
mov dword [esp + 0x1c], eax
jbe 0x4112ec
mov al, byte [0x481194]
mov esi, dword [0x481184]
xor edi, edi
mov word [esp + 0x34], 0x208
test al, al
mov word [esp + 0x3a], di
mov word [esp + 0x3c], bp
mov word [esp + 0x3e], bp
mov dword [esp + 0x44], 0xffffffff
je 0x41142a
call fcn.0040ca50
mov edx, dword [0x469524]
push 0x14
mov eax, dword [edx + esi*4]
test byte [eax + 4], 8
je 0x411448
lea ecx, [esp + 0x38]
push ecx
push eax
call fcn.0040c700
jmp 0x411453
lea edx, [esp + 0x38]
push edx
push eax
call fcn.0040bd70
mov al, byte [0x481194]
mov esi, dword [0x481184]
test al, al
je 0x411467
call fcn.0040ca50
mov eax, dword [0x469524]
mov eax, dword [eax + esi*4]
test byte [eax + 4], 8
je 0x41147e
mov ecx, dword [eax + 0x1c]
mov dword [esp + 0x54], ecx
jmp 0x411488
mov edx, dword [eax + 0x20]
mov eax, dword [edx + 0xc]
mov dword [esp + 0x54], eax
mov eax, dword [0x48111c]
mov dword [esp + 0x20], edi
cmp eax, edi
jbe 0x41154c
xor ebx, ebx
mov ecx, dword [0x481120]
mov eax, dword [ebx + ecx]
mov ecx, dword [eax + 0x70]
test ecx, ecx
jne 0x4114b4
mov dword [eax + 0x7c], 0
jmp 0x411532
mov al, byte [0x481194]
mov esi, dword [0x481184]
test al, al
je 0x4114c8
call fcn.0040ca50
mov edx, dword [0x469524]
mov eax, dword [edx + esi*4]
test byte [eax + 4], 8
je 0x4114dc
mov eax, dword [eax + 0x1c]
jmp 0x4114e2
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0xc]
mov ecx, dword [0x481120]
mov edx, dword [ebx + ecx]
mov dword [edx + 0x7c], eax
mov eax, dword [0x481120]
mov ebp, dword [0x481184]
mov eax, dword [ebx + eax]
mov esi, dword [eax + 0x78]
mov edi, dword [eax + 0x74]
mov al, byte [0x481194]
test al, al
je 0x411510
call fcn.0040ca50
mov ecx, dword [0x469524]
push esi
push edi
mov eax, dword [ecx + ebp*4]
push eax
test byte [eax + 4], 8
je 0x411529
call fcn.0040c700
jmp 0x41152e
call fcn.0040bd70
inc dword [esp + 0x58]
mov eax, dword [esp + 0x20]
mov ecx, dword [0x48111c]
inc eax
add ebx, 0x44
cmp eax, ecx
mov dword [esp + 0x20], eax
jb 0x41149b
mov al, byte [0x481194]
mov esi, dword [0x481184]
test al, al
je 0x411560
call fcn.0040ca50
mov edx, dword [0x469524]
mov eax, dword [edx + esi*4]
test byte [eax + 4], 8
je 0x411574
mov eax, dword [eax + 0x1c]
jmp 0x41157a
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 0x28]
mov edx, dword [0x48111c]
mov edi, dword [esp + 0x58]
mov esi, dword [esp + 0x68]
add edx, ecx
mov ecx, dword [esp + 0x5c]
add edx, edi
mov dword [0x48112c], eax
mov eax, dword [esp + 0x60]
add edx, esi
mov esi, dword [0x481184]
add edx, ecx
xor ebp, ebp
mov word [esp + 0x8c], 0x10
lea ecx, [edx + eax + 2]
mov al, byte [0x481194]
test al, al
mov word [esp + 0x8e], 0xc
mov dword [esp + 0x90], ecx
mov dword [esp + 0x94], ebp
mov dword [esp + 0x98], ebp
je 0x4115e4
call fcn.0040ca50
mov edx, dword [0x469524]
push 0x10
mov esi, dword [edx + esi*4]
test byte [esi + 4], 8
je 0x411605
lea eax, [esp + 0x90]
push eax
push esi
call fcn.0040c700
jmp 0x411613
lea ecx, [esp + 0x90]
push ecx
push esi
call fcn.0040bd70
mov ecx, dword [0x48111c]
xor edi, edi
cmp ecx, ebp
mov word [esp + 0x10], 0x120
jbe 0x411697
xor esi, esi
mov eax, dword [0x481120]
lea edx, [edi + 1]
mov word [esp + 0x12], dx
mov edx, dword [0x481128]
mov ecx, dword [esi + eax + 0x38]
mov ebx, dword [0x481184]
sub ecx, edx
mov dword [esp + 0x14], ecx
mov edx, dword [esi + eax + 0x3c]
mov al, byte [0x481194]
mov dword [esp + 0x18], edx
test al, al
je 0x411661
call fcn.0040ca50
mov eax, dword [0x469524]
push 0xc
mov eax, dword [eax + ebx*4]
test byte [eax + 4], 8
je 0x41167e
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.0040c700
jmp 0x411689
lea edx, [esp + 0x14]
push edx
push eax
call fcn.0040bd70
mov ecx, dword [0x48111c]
inc edi
add esi, 0x44
cmp edi, ecx
jb 0x411628
xor ebx, ebx
cmp ecx, ebp
mov word [esp + 0x10], 0x123
jbe 0x411721
mov eax, dword [0x481120]
xor esi, esi
cmp dword [esi + eax + 8], ebp
je 0x411711
lea ecx, [ebx + 1]
mov edi, dword [0x481184]
mov word [esp + 0x12], cx
mov edx, dword [esi + eax + 8]
sub edx, dword [0x481128]
mov dword [esp + 0x14], edx
mov eax, dword [esi + eax + 0xc]
mov dword [esp + 0x18], eax
mov al, byte [0x481194]
test al, al
je 0x4116e3
call fcn.0040ca50
mov ecx, dword [0x469524]
push 0xc
mov eax, dword [ecx + edi*4]
test byte [eax + 4], 8
je 0x411701
lea edx, [esp + 0x14]
push edx
push eax
call fcn.0040c700
jmp 0x41170c
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.0040bd70
mov eax, dword [0x481120]
mov ecx, dword [0x48111c]
inc ebx
add esi, 0x44
cmp ebx, ecx
jb 0x4116ab
jmp 0x411726
mov eax, dword [0x481120]
xor ebx, ebx
cmp ecx, ebp
mov word [esp + 0x10], 0x124
jbe 0x4117a8
xor esi, esi
cmp dword [esi + eax + 0x14], ebp
je 0x41179a
lea edx, [ebx + 1]
mov edi, dword [0x481184]
mov word [esp + 0x12], dx
mov ecx, dword [esi + eax + 0x14]
sub ecx, dword [0x481128]
mov dword [esp + 0x14], ecx
mov edx, dword [esi + eax + 0x18]
mov al, byte [0x481194]
mov dword [esp + 0x18], edx
test al, al
je 0x41176d
call fcn.0040ca50
mov eax, dword [0x469524]
push 0xc
mov eax, dword [eax + edi*4]
test byte [eax + 4], 8
je 0x41178a
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.0040c700
jmp 0x411795
lea edx, [esp + 0x14]
push edx
push eax
call fcn.0040bd70
mov eax, dword [0x481120]
mov ecx, dword [0x48111c]
inc ebx
add esi, 0x44
cmp ebx, ecx
jb 0x411735
xor ebx, ebx
cmp ecx, ebp
mov word [esp + 0x10], 0x127
jbe 0x411833
xor esi, esi
mov ecx, dword [esi + eax]
cmp dword [ecx + 0x7c], ebp
je 0x411825
lea edx, [ebx + 1]
mov edi, dword [0x481184]
mov word [esp + 0x12], dx
mov ecx, dword [esi + eax]
mov edx, dword [ecx + 0x7c]
mov ecx, dword [0x481128]
sub edx, ecx
mov dword [esp + 0x14], edx
mov eax, dword [esi + eax]
mov ecx, dword [eax + 0x78]
mov al, byte [0x481194]
test al, al
mov dword [esp + 0x18], ecx
je 0x4117f7
call fcn.0040ca50
mov edx, dword [0x469524]
push 0xc
mov eax, dword [edx + edi*4]
test byte [eax + 4], 8
je 0x411815
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.0040c700
jmp 0x411820
lea edx, [esp + 0x14]
push edx
push eax
call fcn.0040bd70
mov eax, dword [0x481120]
mov ecx, dword [0x48111c]
inc ebx
add esi, 0x44
cmp ebx, ecx
jb 0x4117b7
xor ebx, ebx
cmp ecx, ebp
jbe 0x4118ce
xor esi, esi
cmp dword [esi + eax + 0x20], ebp
je 0x4118bc
mov ecx, dword [esi + eax + 0x28]
lea edx, [ebx + 1]
neg ecx
sbb ecx, ecx
mov word [esp + 0x12], dx
mov edx, dword [0x481128]
and ecx, 0xe
add ecx, 0x121
mov edi, dword [0x481184]
mov word [esp + 0x10], cx
mov ecx, dword [esi + eax + 0x20]
sub ecx, edx
mov dword [esp + 0x14], ecx
mov edx, dword [esi + eax + 0x24]
mov al, byte [0x481194]
mov dword [esp + 0x18], edx
test al, al
je 0x41188f
call fcn.0040ca50
mov eax, dword [0x469524]
push 0xc
mov eax, dword [eax + edi*4]
test byte [eax + 4], 8
je 0x4118ac
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.0040c700
jmp 0x4118b7
lea edx, [esp + 0x14]
push edx
push eax
call fcn.0040bd70
mov eax, dword [0x481120]
mov ecx, dword [0x48111c]
inc ebx
add esi, 0x44
cmp ebx, ecx
jb 0x41183f
mov ecx, dword [esp + 0x30]
mov esi, dword [0x481128]
mov eax, ecx
mov edi, 0xffff
sub eax, esi
mov esi, dword [0x481184]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x2c]
sub eax, ecx
mov word [esp + 0x10], 0x128
mov dword [esp + 0x18], eax
mov al, byte [0x481194]
test al, al
mov word [esp + 0x12], di
je 0x41190f
call fcn.0040ca50
mov ecx, dword [0x469524]
push 0xc
mov eax, dword [ecx + esi*4]
test byte [eax + 4], 8
je 0x41192d
lea edx, [esp + 0x14]
push edx
push eax
call fcn.0040c700
jmp 0x411938
lea ecx, [esp + 0x14]
push ecx
push eax
call fcn.0040bd70
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x54]
mov esi, dword [0x481128]
sub eax, ecx
mov edx, ecx
mov dword [esp + 0x18], eax
mov al, byte [0x481194]
sub edx, esi
mov esi, dword [0x481184]
mov word [esp + 0x10], 0x12d
test al, al
mov word [esp + 0x12], di
mov dword [esp + 0x14], edx
je 0x411974
call fcn.0040ca50
mov eax, dword [0x469524]
pop edi
mov eax, dword [eax + esi*4]
pop esi
pop ebp
pop ebx
mov cl, byte [eax + 4]
push 0xc
test cl, 8
je 0x41199e
lea ecx, [esp + 4]
push ecx
push eax
call fcn.0040c700
add esp, 0x9c
ret 4
lea edx, [esp + 4]
push edx
push eax
call fcn.0040bd70
add esp, 0x9c
ret 4