Function at 0x41f1c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x573670]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x40]
cmp eax, dword [ecx + 8]
jbe 0x41f927
sub esp, 0xc0
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.004201b0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [0x573de4], ecx
mov dword [0x573de0], eax
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0xe0]
mov edx, dword [eax + 0xe4]
mov ebx, dword [esp + 0xc8]
sub ebx, ecx
mov dword [esp + 0x68], ebx
mov ecx, dword [esp + 0xcc]
sbb ecx, edx
mov dword [esp + 0x6c], ecx
test ecx, ecx
sete dl
xchg ebp, ebx
setg bl
xchg ebp, ebx
test ebx, ebx
xchg esi, ebx
seta bl
xchg esi, ebx
and edx, esi
or ebp, edx
xchg ebp, eax
mov byte [esp + 0x17], al
xchg ebp, eax
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x41f260
movsd xmm1, qword [0x4d5898]
jmp 0x41f2eb
mov edx, eax
mov eax, ebx
mov ebp, dword [esp + 0xd0]
mov esi, edx
mul ebp
mov dword [esp + 0x7c], eax
imul ecx, ebp
add ecx, edx
sar ebp, 0x1f
imul ebp, ebx
add ecx, ebp
mov dword [esp + 0x78], ecx
lea ebp, [esi + 0xc0]
mov dword [esp], ebp
call fcn.00402e30
mov ecx, dword [esp + 8]
mov edx, dword [esp + 4]
mov dword [esp + 4], ecx
mov dword [esp], edx
call fcn.0045b6b0
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0xa0], xmm0
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
call fcn.0045b6b0
movsd xmm0, qword [esp + 0xa0]
divsd xmm0, qword [esp + 8]
movsd xmm1, qword [0x4d5898]
addsd xmm1, xmm0
mov eax, dword [esp + 0xc4]
movsd qword [esp + 0x80], xmm1
lea ecx, [eax + 0x68]
mov dword [esp + 0xbc], ecx
mov dword [esp], ecx
call fcn.00402fb0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc4]
mov edx, dword [ecx + 0x58]
mov ebx, dword [ecx + 0x5c]
cmp dword [esp + 4], edx
setbe dl
cmp ebx, eax
sete al
seta bl
and eax, edx
or ebx, eax
test bl, bl
jne 0x41f529
movzx edx, byte [esp + 0x17]
test dl, dl
jne 0x41f343
xorps xmm0, xmm0
jmp 0x41f3c8
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0xd0]
mov ebx, edx
mov ebp, eax
mul edx
mov dword [esp + 0x7c], eax
mov esi, dword [esp + 0x6c]
imul esi, ebx
add edx, esi
sar ebx, 0x1f
imul ebp, ebx
add edx, ebp
mov dword [esp + 0x78], edx
lea ebx, [ecx + 0xd8]
mov dword [esp], ebx
call fcn.00402e30
mov ecx, dword [esp + 8]
mov edx, dword [esp + 4]
mov dword [esp + 4], ecx
mov dword [esp], edx
call fcn.0045b6b0
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0xa0], xmm0
mov ecx, dword [esp + 0x78]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
call fcn.0045b6b0
movsd xmm0, qword [esp + 0xa0]
divsd xmm0, qword [esp + 8]
mov ecx, dword [esp + 0xc4]
movsd xmm1, qword [esp + 0x80]
addsd xmm0, xmm1
movsd qword [esp + 0xa0], xmm0
movsd xmm2, qword [0x4d5868]
subsd xmm2, xmm1
movsd qword [esp + 0x98], xmm2
lea eax, [ecx + 0xa0]
mov dword [esp + 0xb8], eax
lea edx, [ecx + 0xa8]
mov dword [esp + 0xb4], edx
lea ebx, [ecx + 0xb0]
mov dword [esp + 0xb0], ebx
mov dword [esp], eax
call fcn.00402e30
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp], edx
call fcn.00402e30
mov eax, dword [esp + 4]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
call fcn.00402e30
mov eax, dword [esp + 4]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call fcn.00402fb0
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc4]
mov ebx, dword [edx + 0x58]
mov ebp, dword [edx + 0x5c]
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x34]
add esi, edi
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
adc edi, edx
mov edx, dword [esp + 0x30]
add edx, esi
mov dword [esp + 0x60], edx
mov esi, dword [esp + 0x44]
adc edi, esi
mov dword [esp + 0x64], edi
sub eax, ebx
sbb ecx, ebp
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.0045b780
movsd xmm0, qword [esp + 0xa0]
mulsd xmm0, qword [esp + 8]
movsd qword [esp + 0xa0], xmm0
mov eax, dword [esp + 0x64]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.0045b6b0
movsd xmm0, qword [esp + 0x98]
mulsd xmm0, qword [esp + 8]
movsd xmm1, qword [esp + 0xa0]
divsd xmm1, xmm0
mov eax, dword [esp + 0xc4]
movsd xmm0, qword [eax + 0x20]
movsd qword [eax + 0x20], xmm1
xor ecx, ecx
jmp 0x41f531
add esp, 0xc0
ret
inc ecx
cmp ecx, 4
jge 0x41f54e
movsd xmm2, qword [eax + ecx*8 + 0x28]
movsd xmm3, qword [eax + 0x20]
ucomisd xmm2, xmm3
jbe 0x41f530
movsd qword [eax + 0x20], xmm2
jmp 0x41f530
movsd qword [esp + 0x90], xmm1
movsd qword [esp + 0x88], xmm0
lea ecx, [eax + 0x28]
mov dword [esp], ecx
lea ecx, [eax + 0x30]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x18
call fcn.004631d0
movsd xmm0, qword [esp + 0x90]
mov eax, dword [esp + 0xc4]
movsd qword [eax + 0x40], xmm0
mov ecx, dword [0x573994]
test ecx, ecx
jle 0x41f920
call fcn.004384d0
call fcn.004384d0
lea eax, [0x4b3883]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00438d50
movsd xmm0, qword [esp + 0x80]
movsd xmm1, qword [0x4d58e8]
mulsd xmm0, xmm1
cvttsd2si eax, xmm0
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00438b70
lea eax, [0x4b388a]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00438d50
mov dword [esp + 4], 0
mov dword [esp], 0x19
call fcn.00438b70
lea eax, [0x4b42d1]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00438d50
call fcn.00438530
mov eax, dword [esp + 0xc4]
lea ecx, [eax + 0x80]
mov dword [esp + 0xac], ecx
lea edx, [eax + 0x90]
mov dword [esp + 0xa8], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
call fcn.00402e30
mov eax, dword [esp + 8]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x2c], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp], edx
call fcn.00402e30
mov eax, dword [esp + 8]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x28], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
call fcn.00402e30
mov eax, dword [esp + 8]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0xac]
mov dword [esp], edx
call fcn.00402fb0
mov eax, dword [esp + 4]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call fcn.00402fb0
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x78]
mov dword [esp + 0x7c], ecx
mov edx, dword [eax + 0x7c]
mov dword [esp + 0x78], edx
mov ebx, dword [esp + 4]
mov dword [esp + 0x1c], ebx
mov ebp, dword [esp + 8]
mov dword [esp + 0x4c], ebp
call fcn.004384d0
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00438b70
lea eax, str.___M_____y:_i_____LlLtLuMn__________n__s____Pn___n__n___n__t__25__nnil_mEOFfinptrobjgc__:_gp___in__n___n___NaN__P__MPC___end___..._:_n___pc__Gudpdnstcpcgo125625intmapadxaesshaavxfmanetbindtrueallgallprootitabsbrkidledead_is_LEAFbase_of______GOGC____pcInf_Inf:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fp__mfile_on_pipeicmpigmp3125boolint8uintchanfunccallkindermssse3avx2bmi1bmi2ntohsCall__nil_falseErrorGreekdefersweepschedhchansudoggscanmheaptracepanicsleepgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_and__tab_top_...___fp:writeclosefiles1562578125int16int32int64uint8arrayslicesse41sse42ssse3_loop_GetACPlistensendtosocketStringFormat__bytestringCommonsysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max__...__n_base_netdns390625uint16uint32uint64structchan____chan_Valuerdtscppopcntcmd_goheaderAnswerCopySidFreeSidSleepExWSARecvWSASendconnectfloat32float64forcegccpuprofunknowngctraceIO_waitrunningsyscallwaitingUNKNOWN:events__goid_snil_n__scan__MB_in_pacer:___CPU___zombie__j0__head__panic:__nmsys_locks_dying_allocsGODEBUG_m__g0_pad1__pad2__text_minpc__tvalue__scan__ttypes_:_type_19531259765625consoleinvaliduintptrChanDir_Value_os_execruntimeinternEqualSidCancelIoReadFileSetEventAcceptExIsWindowWSAIoctlrecvfromshutdownGoStringno_anodescavengepollDescrwmutexWrwmutexRtraceBufdeadlockraceFinipanicnilcgocheckrunnableeax_____ebx_____ecx_____edx_____edi_____esi_____ebp_____esp_____eip_____eflags__cs______fs______gs_______is_not__pointerBAD_RANK_status_unknown_trigger_npages_nalloc_nfreedruntime._signal_reflect._newval_mcount_bytes___stack__minLC__maxpc__tstack__minutes_etypes_wsaioctl48828125net_httpgo_buildx509sha1ClassANYQuestionntdll.dllole32.dllpsapi.dllFindCloseLocalFreeMoveFileWWriteFileWSASendToGetParentLoadIconW_method:_InheritedprofBlockstackpoolhchanLeafwbufSpansmSpanDeadscavtraceinittracepanicwaitchan_sendpreemptedcopystackinterface_ms_cpu____forced__wbuf1.n_wbuf2.n_s.limit_s.state_B_work___B_exp.___marked___unmarked_in_use__n__size____tail__recover:__not_in__ctxt___0__oldval__newval_threads:_status_blocked_lockedgatomicor8_runtime_m__curg_unknown_traceback_stack__lockedmfiles_dnsdns_filesipv6_icmp244140625complex64invalid_nfuncargs_bad_indirreflect:_Interfacepclmulqdqmath_randClassINETAuthoritydnsapi.dlldwmapi.dlluser32.dllws2_32.dllIsValidSidDnsQuery_WGetIfEntryCancelIoExCreatePipeGetVersionLocalAllocLockFileExOpenEventWOpenMutexWOpenThreadPulseEventResetEventWSACleanupWSASocketWWSAStartupgetsockoptsetsockoptShowWindowMoveWindowowner_diednotifyListprofInsertstackLargemSpanInUseGOMAXPROCSstop_traceinvalidptrschedtracesemacquiredebug_call_flushGen__MB_goal__s.state___s.base___heapGoalGOMEMLIMIT_KiB_now___pages_at__sweepgen_sweepgen___bound____limit__tracefree_tracegc___nexitThreadBad_varintGC_forced_n_runqueue_stopwait_runqsize_gfreecnt_throwing_spinningatomicand8float64nanfloat32nanException__ptrSize__targetpc_until_pcunknown_pcruntime:_ggoroutine_unixpacket12207031256103515625_dev_stdincomplex128t.Kind__execerrdothttp2debugClassCSNETClassCHAOSAdditionalBannerAdWndbroken_pipecrypt32.dllmswsock.dllsechost.dllsecur32.dllshell32.dlluserenv.dllversion.dllRegCloseKeyCloseHandleCreateFileWDeleteFileWExitProcessFreeLibraryGetFileTypeMoveFileExWOpenProcessSetFileTimeVirtualFreeVirtualLockCoGetObjectEnumWindowsMessageBoxWWSARecvFromclosesocketgetpeernamegetsocknamebad_messagefile_existsbad_addressshort_writeassistQueuenetpollInitreflectOffsglobalAllocmSpanManualstart_traceclobberfreegccheckmarkscheddetailcgocall_nilunreachable_s.nelems___of_size__runtime:_p__ms_clock___nBSSRootsruntime:_P__exp.__for_minTriggerGOMEMLIMITbad_m_value__elemsize_freeindex_span.list__npages__tracealloc__p__status_in_status__idleprocs_gcwaiting_schedtick_timerslen_mallocingbad_timedivfloat64nan1float64nan2float64nan3float32nan2GOTRACEBACK__at_entry__targetpc___plugin:_runtime:_g_:_frame.spcreated_by_i_o_timeout30517578125_dev_s
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438d50
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp], eax
call fcn.00438b70
lea eax, str.___M_____y:_i_____LlLtLuMn__________n__s____Pn___n__n___n__t__25__nnil_mEOFfinptrobjgc__:_gp___in__n___n___NaN__P__MPC___end___..._:_n___pc__Gudpdnstcpcgo125625intmapadxaesshaavxfmanetbindtrueallgallprootitabsbrkidledead_is_LEAFbase_of______GOGC____pcInf_Inf:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fp__mfile_on_pipeicmpigmp3125boolint8uintchanfunccallkindermssse3avx2bmi1bmi2ntohsCall__nil_falseErrorGreekdefersweepschedhchansudoggscanmheaptracepanicsleepgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_and__tab_top_...___fp:writeclosefiles1562578125int16int32int64uint8arrayslicesse41sse42ssse3_loop_GetACPlistensendtosocketStringFormat__bytestringCommonsysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max__...__n_base_netdns390625uint16uint32uint64structchan____chan_Valuerdtscppopcntcmd_goheaderAnswerCopySidFreeSidSleepExWSARecvWSASendconnectfloat32float64forcegccpuprofunknowngctraceIO_waitrunningsyscallwaitingUNKNOWN:events__goid_snil_n__scan__MB_in_pacer:___CPU___zombie__j0__head__panic:__nmsys_locks_dying_allocsGODEBUG_m__g0_pad1__pad2__text_minpc__tvalue__scan__ttypes_:_type_19531259765625consoleinvaliduintptrChanDir_Value_os_execruntimeinternEqualSidCancelIoReadFileSetEventAcceptExIsWindowWSAIoctlrecvfromshutdownGoStringno_anodescavengepollDescrwmutexWrwmutexRtraceBufdeadlockraceFinipanicnilcgocheckrunnableeax_____ebx_____ecx_____edx_____edi_____esi_____ebp_____esp_____eip_____eflags__cs______fs______gs_______is_not__pointerBAD_RANK_status_unknown_trigger_npages_nalloc_nfreedruntime._signal_reflect._newval_mcount_bytes___stack__minLC__maxpc__tstack__minutes_etypes_wsaioctl48828125net_httpgo_buildx509sha1ClassANYQuestionntdll.dllole32.dllpsapi.dllFindCloseLocalFreeMoveFileWWriteFileWSASendToGetParentLoadIconW_method:_InheritedprofBlockstackpoolhchanLeafwbufSpansmSpanDeadscavtraceinittracepanicwaitchan_sendpreemptedcopystackinterface_ms_cpu____forced__wbuf1.n_wbuf2.n_s.limit_s.state_B_work___B_exp.___marked___unmarked_in_use__n__size____tail__recover:__not_in__ctxt___0__oldval__newval_threads:_status_blocked_lockedgatomicor8_runtime_m__curg_unknown_traceback_stack__lockedmfiles_dnsdns_filesipv6_icmp244140625complex64invalid_nfuncargs_bad_indirreflect:_Interfacepclmulqdqmath_randClassINETAuthoritydnsapi.dlldwmapi.dlluser32.dllws2_32.dllIsValidSidDnsQuery_WGetIfEntryCancelIoExCreatePipeGetVersionLocalAllocLockFileExOpenEventWOpenMutexWOpenThreadPulseEventResetEventWSACleanupWSASocketWWSAStartupgetsockoptsetsockoptShowWindowMoveWindowowner_diednotifyListprofInsertstackLargemSpanInUseGOMAXPROCSstop_traceinvalidptrschedtracesemacquiredebug_call_flushGen__MB_goal__s.state___s.base___heapGoalGOMEMLIMIT_KiB_now___pages_at__sweepgen_sweepgen___bound____limit__tracefree_tracegc___nexitThreadBad_varintGC_forced_n_runqueue_stopwait_runqsize_gfreecnt_throwing_spinningatomicand8float64nanfloat32nanException__ptrSize__targetpc_until_pcunknown_pcruntime:_ggoroutine_unixpacket12207031256103515625_dev_stdincomplex128t.Kind__execerrdothttp2debugClassCSNETClassCHAOSAdditionalBannerAdWndbroken_pipecrypt32.dllmswsock.dllsechost.dllsecur32.dllshell32.dlluserenv.dllversion.dllRegCloseKeyCloseHandleCreateFileWDeleteFileWExitProcessFreeLibraryGetFileTypeMoveFileExWOpenProcessSetFileTimeVirtualFreeVirtualLockCoGetObjectEnumWindowsMessageBoxWWSARecvFromclosesocketgetpeernamegetsocknamebad_messagefile_existsbad_addressshort_writeassistQueuenetpollInitreflectOffsglobalAllocmSpanManualstart_traceclobberfreegccheckmarkscheddetailcgocall_nilunreachable_s.nelems___of_size__runtime:_p__ms_clock___nBSSRootsruntime:_P__exp.__for_minTriggerGOMEMLIMITbad_m_value__elemsize_freeindex_span.list__npages__tracealloc__p__status_in_status__idleprocs_gcwaiting_schedtick_timerslen_mallocingbad_timedivfloat64nan1float64nan2float64nan3float32nan2GOTRACEBACK__at_entry__targetpc___plugin:_runtime:_g_:_frame.spcreated_by_i_o_timeout30517578125_dev_s
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438d50
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.00438b70
lea eax, [0x4b3c53]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00438d50
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x50]
adc ecx, edx
mov edx, dword [esp + 0x1c]
add eax, edx
mov edx, dword [esp + 0x4c]
adc ecx, edx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00438a30
lea eax, [0x4b3c5c]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00438d50
call fcn.00438530
nop
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
call fcn.00402fb0
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0x7c], ecx
mov edx, dword [eax + 0x5c]
mov dword [esp + 0x78], edx
mov ebx, dword [esp + 4]
mov dword [esp + 0x18], ebx
mov ebp, dword [esp + 8]
mov dword [esp + 0x48], ebp
mov esi, dword [eax + 0x60]
mov dword [esp + 0x74], esi
mov eax, dword [eax + 0x64]
mov dword [esp + 0x70], eax
call fcn.004384d0
lea eax, [0x4b3496]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00438d50
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00438a30
lea eax, [0x4b3723]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00438d50
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x18]
mov dword [esp], ecx
call fcn.00438a30
lea eax, [0x4b47d9]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00438d50
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x74]
sub eax, ecx
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x70]
sbb ecx, edx
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00438b70
lea eax, [0x4b47e5]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00438d50
movsd xmm0, qword [esp + 0x88]
movsd qword [esp], xmm0
call fcn.00438780
lea eax, [0x4b3436]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00438d50
call fcn.00438530
call fcn.004384d0
call fcn.004386e0
call fcn.00438530
mov eax, dword [0x573670]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
movzx ecx, byte [eax + 0x8b]
lea edx, [ecx - 1]
nop
mov byte [eax + 0x8b], dl
cmp cl, 1
jne 0x41f920
nop
nop
lea eax, [0x573600]
mov dword [esp], eax
call fcn.004099d0
add esp, 0xc0
ret
call fcn.00461530
jmp fcn.0041f1c0