Function at 0x41ddf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x2d0
mov eax, dword [ebp + 8]
mov ecx, 0
mov edx, 0x28
lea esi, [esp + 0x260]
lea edi, [esp + 0x288]
mov dword [esp + 0x2b8], eax
mov dword [esp + 0x2b4], 0
mov dword [esp + 0x2b0], 0
mov dword [esp], edi
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [esp + 0x234], esi
mov dword [esp + 0x230], ecx
mov dword [esp + 0x22c], edx
call fcn.0042e4d0
mov eax, dword [esp + 0x234]
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.0042e4d0
mov dword [esp + 0x25c], 0
mov dword [esp + 0x258], 0
mov eax, dword [0x439140]
mov dword [esp + 0x250], eax
mov bx, word [0x439144]
mov word [esp + 0x254], bx
mov dword [esp + 0x240], 0
mov eax, dword [0x480e00]
mov dword [esp + 0x2c0], eax
mov dword [esp + 0x238], 0xded786a6
mov eax, dword [esp + 0x238]
mov ecx, eax
sub ecx, 0x7be3fba2
mov dword [esp + 0x228], eax
mov dword [esp + 0x224], ecx
jg 0x41ec27
jmp 0x41df01
mov eax, dword [esp + 0x228]
sub eax, 0x7ba2ed59
mov dword [esp + 0x220], eax
jg 0x41ec0c
jmp 0x41df1f
mov eax, dword [esp + 0x228]
sub eax, 0x74b18112
mov dword [esp + 0x21c], eax
jg 0x41ebf1
jmp 0x41df3d
mov eax, dword [esp + 0x228]
sub eax, 0x7458037b
mov dword [esp + 0x218], eax
jg 0x41ebd6
jmp 0x41df5b
mov eax, dword [esp + 0x228]
sub eax, 0x6bb27221
mov dword [esp + 0x214], eax
jg 0x41ebbb
jmp 0x41df79
mov eax, dword [esp + 0x228]
sub eax, 0x6b719df4
mov dword [esp + 0x210], eax
jg 0x41eba0
jmp 0x41df97
mov eax, dword [esp + 0x228]
sub eax, 0x66e2bcfe
mov dword [esp + 0x20c], eax
jg 0x41eb85
jmp 0x41dfb5
mov eax, dword [esp + 0x228]
sub eax, 0x6360840e
mov dword [esp + 0x208], eax
jg 0x41eb6a
jmp 0x41dfd3
mov eax, dword [esp + 0x228]
sub eax, 0x5df7b5e6
mov dword [esp + 0x204], eax
jg 0x41eb4f
jmp 0x41dff1
mov eax, dword [esp + 0x228]
sub eax, 0x50e30917
mov dword [esp + 0x200], eax
jg 0x41eb31
jmp 0x41e00f
mov eax, dword [esp + 0x228]
sub eax, 0x50555ca0
mov dword [esp + 0x1fc], eax
jg 0x41eb13
jmp 0x41e02d
mov eax, dword [esp + 0x228]
sub eax, 0x464e7deb
mov dword [esp + 0x1f8], eax
jg 0x41eaf5
jmp 0x41e04b
mov eax, dword [esp + 0x228]
sub eax, 0x45b39215
mov dword [esp + 0x1f4], eax
jg 0x41ead7
jmp 0x41e069
mov eax, dword [esp + 0x228]
sub eax, 0x4056062b
mov dword [esp + 0x1f0], eax
jg 0x41eab9
jmp 0x41e087
mov eax, dword [esp + 0x228]
sub eax, 0x3da6589d
mov dword [esp + 0x1ec], eax
jg 0x41ea9b
jmp 0x41e0a5
mov eax, dword [esp + 0x228]
sub eax, 0x3abb1523
mov dword [esp + 0x1e8], eax
jg 0x41ea7d
jmp 0x41e0c3
mov eax, dword [esp + 0x228]
sub eax, 0x35fc8b36
mov dword [esp + 0x1e4], eax
jg 0x41ea5f
jmp 0x41e0e1
mov eax, dword [esp + 0x228]
sub eax, 0x2d471059
mov dword [esp + 0x1e0], eax
jg 0x41ea41
jmp 0x41e0ff
mov eax, dword [esp + 0x228]
sub eax, 0x2a3d7c6f
mov dword [esp + 0x1dc], eax
jg 0x41ea23
jmp 0x41e11d
mov eax, dword [esp + 0x228]
sub eax, 0x28be0877
mov dword [esp + 0x1d8], eax
jg 0x41ea05
jmp 0x41e13b
mov eax, dword [esp + 0x228]
sub eax, 0x242deddd
mov dword [esp + 0x1d4], eax
jg 0x41e9e7
jmp 0x41e159
mov eax, dword [esp + 0x228]
sub eax, 0x1b8f99d4
mov dword [esp + 0x1d0], eax
jg 0x41e9c9
jmp 0x41e177
mov eax, dword [esp + 0x228]
sub eax, 0x176e1a26
mov dword [esp + 0x1cc], eax
jg 0x41e9ab
jmp 0x41e195
mov eax, dword [esp + 0x228]
sub eax, 0x1635ce2d
mov dword [esp + 0x1c8], eax
jg 0x41e98d
jmp 0x41e1b3
mov eax, dword [esp + 0x228]
sub eax, 0x1625b8ce
mov dword [esp + 0x1c4], eax
jg 0x41e96f
jmp 0x41e1d1
mov eax, dword [esp + 0x228]
sub eax, 0x15b11acd
mov dword [esp + 0x1c0], eax
jg 0x41e951
jmp 0x41e1ef
mov eax, dword [esp + 0x228]
sub eax, 0xfa0857d
mov dword [esp + 0x1bc], eax
jg 0x41e933
jmp 0x41e20d
mov eax, dword [esp + 0x228]
sub eax, 0x1df637f
mov dword [esp + 0x1b8], eax
jg 0x41e915
jmp 0x41e22b
mov eax, dword [esp + 0x228]
sub eax, 0xfb345bdf
mov dword [esp + 0x1b4], eax
jg 0x41e8f7
jmp 0x41e249
mov eax, dword [esp + 0x228]
sub eax, 0xee4c248f
mov dword [esp + 0x1b0], eax
jg 0x41e8d9
jmp 0x41e267
mov eax, dword [esp + 0x228]
sub eax, 0xec3b3488
mov dword [esp + 0x1ac], eax
jg 0x41e8bb
jmp 0x41e285
mov eax, dword [esp + 0x228]
sub eax, 0xe9853253
mov dword [esp + 0x1a8], eax
jg 0x41e89d
jmp 0x41e2a3
mov eax, dword [esp + 0x228]
sub eax, 0xe7e21703
mov dword [esp + 0x1a4], eax
jg 0x41e87f
jmp 0x41e2c1
mov eax, dword [esp + 0x228]
sub eax, 0xe5ecfe26
mov dword [esp + 0x1a0], eax
jg 0x41e861
jmp 0x41e2df
mov eax, dword [esp + 0x228]
sub eax, 0x884223ad
mov dword [esp + 0x19c], eax
jg 0x41e31b
jmp 0x41e2fd
mov eax, dword [esp + 0x228]
sub eax, 0x883af9e2
mov dword [esp + 0x198], eax
je 0x41eeed
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x8b6f571f
mov dword [esp + 0x194], eax
jg 0x41e357
jmp 0x41e339
mov eax, dword [esp + 0x228]
sub eax, 0x884223ae
mov dword [esp + 0x190], eax
je 0x41f3f3
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x8d57f763
mov dword [esp + 0x18c], eax
jg 0x41e393
jmp 0x41e375
mov eax, dword [esp + 0x228]
sub eax, 0x8b6f5720
mov dword [esp + 0x188], eax
je 0x41f161
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x9a38ab09
mov dword [esp + 0x184], eax
jg 0x41e3cf
jmp 0x41e3b1
mov eax, dword [esp + 0x228]
sub eax, 0x8d57f764
mov dword [esp + 0x180], eax
je 0x41f306
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x9c2d0545
mov dword [esp + 0x17c], eax
jg 0x41e40b
jmp 0x41e3ed
mov eax, dword [esp + 0x228]
sub eax, 0x9a38ab0a
mov dword [esp + 0x178], eax
je 0x41f46d
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x9d5071f6
mov dword [esp + 0x174], eax
jg 0x41e447
jmp 0x41e429
mov eax, dword [esp + 0x228]
sub eax, 0x9c2d0546
mov dword [esp + 0x170], eax
je 0x41ecc2
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xa1345b0b
mov dword [esp + 0x16c], eax
jg 0x41e483
jmp 0x41e465
mov eax, dword [esp + 0x228]
sub eax, 0x9d5071f7
mov dword [esp + 0x168], eax
je 0x41f171
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xa40a5041
mov dword [esp + 0x164], eax
jg 0x41e4bf
jmp 0x41e4a1
mov eax, dword [esp + 0x228]
sub eax, 0xa1345b0c
mov dword [esp + 0x160], eax
je 0x41f11f
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xa87887d6
mov dword [esp + 0x15c], eax
jg 0x41e4fb
jmp 0x41e4dd
mov eax, dword [esp + 0x228]
sub eax, 0xa40a5042
mov dword [esp + 0x158], eax
je 0x41ee48
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xaa30e134
mov dword [esp + 0x154], eax
jg 0x41e537
jmp 0x41e519
mov eax, dword [esp + 0x228]
sub eax, 0xa87887d7
mov dword [esp + 0x150], eax
je 0x41f5e6
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xac64091b
mov dword [esp + 0x14c], eax
jg 0x41e573
jmp 0x41e555
mov eax, dword [esp + 0x228]
sub eax, 0xaa30e135
mov dword [esp + 0x148], eax
je 0x41f38d
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xad19723d
mov dword [esp + 0x144], eax
jg 0x41e5af
jmp 0x41e591
mov eax, dword [esp + 0x228]
sub eax, 0xac64091c
mov dword [esp + 0x140], eax
je 0x41ee03
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xb5095598
mov dword [esp + 0x13c], eax
jg 0x41e5eb
jmp 0x41e5cd
mov eax, dword [esp + 0x228]
sub eax, 0xad19723e
mov dword [esp + 0x138], eax
je 0x41f2f6
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xb6215b0b
mov dword [esp + 0x134], eax
jg 0x41e627
jmp 0x41e609
mov eax, dword [esp + 0x228]
sub eax, 0xb5095599
mov dword [esp + 0x130], eax
je 0x41f0f4
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xbc30f469
mov dword [esp + 0x12c], eax
jg 0x41e663
jmp 0x41e645
mov eax, dword [esp + 0x228]
sub eax, 0xb6215b0c
mov dword [esp + 0x128], eax
je 0x41f083
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xbd0daacf
mov dword [esp + 0x124], eax
jg 0x41e69f
jmp 0x41e681
mov eax, dword [esp + 0x228]
sub eax, 0xbc30f46a
mov dword [esp + 0x120], eax
je 0x41f0c0
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xc15d6640
mov dword [esp + 0x11c], eax
jg 0x41e6db
jmp 0x41e6bd
mov eax, dword [esp + 0x228]
sub eax, 0xbd0daad0
mov dword [esp + 0x118], eax
je 0x41f2a1
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xc49eb06c
mov dword [esp + 0x114], eax
jg 0x41e717
jmp 0x41e6f9
mov eax, dword [esp + 0x228]
sub eax, 0xc15d6641
mov dword [esp + 0x110], eax
je 0x41f647
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xc9e945ab
mov dword [esp + 0x10c], eax
jg 0x41e753
jmp 0x41e735
mov eax, dword [esp + 0x228]
sub eax, 0xc49eb06d
mov dword [esp + 0x108], eax
je 0x41f151
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xcb657bbf
mov dword [esp + 0x104], eax
jg 0x41e78f
jmp 0x41e771
mov eax, dword [esp + 0x228]
sub eax, 0xc9e945ac
mov dword [esp + 0x100], eax
je 0x41f227
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xd47954b6
mov dword [esp + 0xfc], eax
jg 0x41e7cb
jmp 0x41e7ad
mov eax, dword [esp + 0x228]
sub eax, 0xcb657bc0
mov dword [esp + 0xf8], eax
je 0x41f680
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xd7d4d46c
mov dword [esp + 0xf4], eax
jg 0x41e807
jmp 0x41e7e9
mov eax, dword [esp + 0x228]
sub eax, 0xd47954b7
mov dword [esp + 0xf0], eax
je 0x41f04f
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xd7d4d46d
mov dword [esp + 0xec], eax
je 0x41ed7f
jmp 0x41e825
mov eax, dword [esp + 0x228]
sub eax, 0xded786a6
mov dword [esp + 0xe8], eax
je 0x41ec47
jmp 0x41e843
mov eax, dword [esp + 0x228]
sub eax, 0xdede94ab
mov dword [esp + 0xe4], eax
je 0x41ee38
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xe5ecfe27
mov dword [esp + 0xe0], eax
je 0x41f5b8
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xe7e21704
mov dword [esp + 0xdc], eax
je 0x41f141
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xe9853254
mov dword [esp + 0xd8], eax
je 0x41eea0
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xec3b3489
mov dword [esp + 0xd4], eax
je 0x41f439
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xee4c2490
mov dword [esp + 0xd0], eax
je 0x41f19a
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xfb345be0
mov dword [esp + 0xcc], eax
je 0x41f072
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x1df6380
mov dword [esp + 0xc8], eax
je 0x41f402
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0xfa0857e
mov dword [esp + 0xc4], eax
je 0x41f1aa
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x15b11ace
mov dword [esp + 0xc0], eax
je 0x41f0e3
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x1625b8cf
mov dword [esp + 0xbc], eax
je 0x41f600
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x1635ce2e
mov dword [esp + 0xb8], eax
je 0x41eefe
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x176e1a27
mov dword [esp + 0xb4], eax
je 0x41f2bb
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x1b8f99d5
mov dword [esp + 0xb0], eax
je 0x41f27e
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x242dedde
mov dword [esp + 0xac], eax
je 0x41f130
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x28be0878
mov dword [esp + 0xa8], eax
je 0x41ec89
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x2a3d7c70
mov dword [esp + 0xa4], eax
je 0x41f36d
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x2d47105a
mov dword [esp + 0xa0], eax
je 0x41f670
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x35fc8b37
mov dword [esp + 0x9c], eax
je 0x41ed0f
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x3abb1524
mov dword [esp + 0x98], eax
je 0x41edf2
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x3da6589e
mov dword [esp + 0x94], eax
je 0x41f338
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x4056062c
mov dword [esp + 0x90], eax
je 0x41f35c
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x45b39216
mov dword [esp + 0x8c], eax
je 0x41f3d4
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x464e7dec
mov dword [esp + 0x88], eax
je 0x41f238
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x50555ca1
mov dword [esp + 0x84], eax
je 0x41f328
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x50e30918
mov dword [esp + 0x80], eax
je 0x41edcf
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x5df7b5e7
mov dword [esp + 0x7c], eax
je 0x41f610
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x6360840f
mov dword [esp + 0x78], eax
je 0x41f2cc
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x66e2bcff
mov dword [esp + 0x74], eax
je 0x41f3c3
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x6b719df5
mov dword [esp + 0x70], eax
je 0x41ed6e
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x6bb27222
mov dword [esp + 0x6c], eax
je 0x41f39d
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x7458037c
mov dword [esp + 0x68], eax
je 0x41f10f
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x74b18113
mov dword [esp + 0x64], eax
je 0x41ec6d
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x7ba2ed5a
mov dword [esp + 0x60], eax
je 0x41f69f
jmp 0x41ec42
mov eax, dword [esp + 0x228]
sub eax, 0x7be3fba3
mov dword [esp + 0x5c], eax
je 0x41f317
jmp 0x41ec42
jmp 0x41f6aa
mov eax, 0x28be0878
mov ecx, 0x74b18113
mov edx, dword [esp + 0x2c0]
cmp edx, 0
cmovne eax, ecx
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, dword [0x480e04]
mov dword [esp + 0x2bc], eax
mov dword [esp + 0x238], 0x66e2bcff
jmp 0x41f6aa
call fcn.004085b0
mov ecx, 0xfa0857e
mov edx, 0x9c2d0546
mov esi, dword [esp + 0x2b8]
mov dword [esi], eax
mov dword [esp + 0x23c], eax
cmp dword [esp + 0x23c], 6
cmovae ecx, edx
mov dword [esp + 0x238], ecx
jmp 0x41f6aa
mov eax, dword [0x481d9c]
mov ecx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [esp + 0x58], eax
call ecx
mov ecx, esp
lea edx, [esp + 0x258]
mov dword [ecx + 8], edx
mov dword [ecx], eax
mov dword [ecx + 4], 0x2000000
mov eax, dword [esp + 0x58]
call eax
sub esp, 0xc
mov ecx, 0xee4c2490
mov edx, 0x35fc8b37
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x238], ecx
jmp 0x41f6aa
mov eax, dword [0x481d98]
mov ecx, dword [esp + 0x240]
mov edx, dword [esp + 0x258]
mov esi, esp
lea edi, [esp + 0x240]
mov dword [esi + 0x10], edi
mov dword [esi + 0xc], ecx
mov dword [esi], edx
mov dword [esi + 8], 0
mov dword [esi + 4], 0x19
call eax
sub esp, 0x14
mov ecx, 0x9d5071f7
mov edx, 0x6b719df5
cmp dword [esp + 0x240], 0
cmovne ecx, edx
mov dword [esp + 0x238], ecx
mov dword [esp + 0x54], eax
jmp 0x41f6aa
mov eax, 0xd7d4d46d
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, 1
mov ecx, dword [esp + 0x240]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 0x50], eax
call fcn.0042e598
mov ecx, 0x50e30918
mov dword [esp + 0x25c], eax
cmp dword [esp + 0x25c], 0
sete dl
and dl, 1
mov byte [esp + 0x2c4], dl
mov dword [esp + 0x238], ecx
jmp 0x41f6aa
mov eax, 0xa40a5042
mov ecx, 0x3abb1524
mov dl, byte [esp + 0x2c4]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, 0xac64091c
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, dword [esp + 0x258]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov ecx, 0xdede94ab
mov dword [esp + 0x2bc], 0xffffffff
mov dword [esp + 0x238], ecx
mov dword [esp + 0x4c], eax
jmp 0x41f6aa
mov dword [esp + 0x238], 0x66e2bcff
jmp 0x41f6aa
mov eax, dword [0x481d98]
mov ecx, dword [esp + 0x240]
mov edx, dword [esp + 0x25c]
mov esi, dword [esp + 0x258]
mov edi, esp
lea ebx, [esp + 0x240]
mov dword [edi + 0x10], ebx
mov dword [edi + 0xc], ecx
mov dword [edi + 8], edx
mov dword [edi], esi
mov dword [edi + 4], 0x19
call eax
sub esp, 0x14
mov ecx, 0x8b6f5720
mov edx, 0xe9853254
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x238], ecx
jmp 0x41f6aa
mov eax, dword [esp + 0x25c]
mov dword [esp + 0x2b4], eax
mov eax, dword [0x481d94]
mov ecx, dword [esp + 0x2b4]
mov ecx, dword [ecx]
mov edx, esp
lea esi, [esp + 0x2b0]
mov dword [edx + 4], esi
mov dword [edx], ecx
call eax
sub esp, 8
mov ecx, 0xc49eb06d
mov edx, 0x883af9e2
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x238], ecx
jmp 0x41f6aa
mov eax, 0x1635ce2e
mov dword [esp + 0x238], eax
jmp 0x41f6aa
lea eax, [esp + 0x288]
mov ecx, 0
mov edx, dword [0x439148]
movzx edx, word [edx]
mov dword [esp + 0x248], edx
mov edx, dword [esp + 0x248]
sub ecx, 1
sub edx, ecx
mov ecx, dword [0x439148]
movzx ecx, word [ecx + edx*2]
mov dword [esp + 0x244], ecx
mov ecx, dword [esp + 0x244]
mov edx, dword [0x439148]
mov esi, dword [esp + 0x248]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x439148]
add esi, 2
mov edi, dword [esp + 0x248]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00407770
lea eax, [esp + 0x260]
mov ecx, 0
mov edx, dword [0x43914c]
movzx edx, word [edx]
mov dword [esp + 0x248], edx
mov edx, dword [esp + 0x248]
mov esi, ecx
sub esi, edx
mov edx, ecx
sub edx, 1
add esi, edx
sub ecx, esi
mov edx, dword [0x43914c]
movzx ecx, word [edx + ecx*2]
mov dword [esp + 0x244], ecx
mov ecx, dword [esp + 0x244]
mov edx, dword [0x43914c]
mov esi, dword [esp + 0x248]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x43914c]
add esi, 2
mov edi, dword [esp + 0x248]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00407770
lea eax, [esp + 0x288]
mov ecx, dword [esp + 0x2b0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0042f63c
mov ecx, 0xd47954b7
cmp eax, 0
setne bl
and bl, 1
mov byte [esp + 0x2c5], bl
mov dword [esp + 0x238], ecx
jmp 0x41f6aa
mov eax, 0x15b11ace
mov ecx, 0xfb345be0
mov dl, byte [esp + 0x2c5]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, 0xb6215b0c
mov dword [esp + 0x238], eax
jmp 0x41f6aa
lea eax, [esp + 0x260]
mov ecx, dword [esp + 0x2b0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0042f63c
mov ecx, 0xbc30f46a
cmp eax, 0
setne dl
and dl, 1
mov byte [esp + 0x2c6], dl
mov dword [esp + 0x238], ecx
jmp 0x41f6aa
mov eax, 0x15b11ace
mov ecx, 0xa1345b0c
mov dl, byte [esp + 0x2c6]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, 0xb5095599
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, 0x7458037c
mov dword [0x480e04], 1
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov dword [esp + 0x238], 0xa1345b0c
jmp 0x41f6aa
mov eax, 0x242dedde
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, 0xe7e21704
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov dword [esp + 0x238], 0xc49eb06d
jmp 0x41f6aa
mov dword [esp + 0x238], 0x8b6f5720
jmp 0x41f6aa
mov dword [esp + 0x238], 0x9d5071f7
jmp 0x41f6aa
mov eax, dword [esp + 0x258]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x238], 0xee4c2490
mov dword [esp + 0x48], eax
jmp 0x41f6aa
mov dword [esp + 0x238], 0x3da6589e
jmp 0x41f6aa
lea eax, [esp + 0x24c]
mov ecx, dword [0x481d90]
mov edx, esp
mov dword [edx + 0x28], eax
lea eax, [esp + 0x250]
mov dword [edx], eax
mov dword [edx + 0x24], 0
mov dword [edx + 0x20], 0
mov dword [edx + 0x1c], 0
mov dword [edx + 0x18], 0
mov dword [edx + 0x14], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0xc], 0x220
mov dword [edx + 8], 0x20
mov dword [edx + 4], 2
call ecx
sub esp, 0x2c
mov ecx, 0x8d57f764
mov edx, 0xc9e945ac
cmp eax, 0
cmovne ecx, edx
mov dword [esp + 0x238], ecx
jmp 0x41f6aa
mov eax, 0x464e7dec
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, dword [0x481d8c]
mov ecx, dword [esp + 0x24c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx + 8], 0x480e04
mov dword [edx], 0
call eax
sub esp, 0xc
mov ecx, 0x1b8f99d5
cmp eax, 0
setne bl
and bl, 1
mov byte [esp + 0x2c7], bl
mov dword [esp + 0x238], ecx
jmp 0x41f6aa
mov eax, 0xbd0daad0
mov ecx, 0x176e1a27
mov dl, byte [esp + 0x2c7]
test dl, 1
cmovne eax, ecx
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov dword [0x480e04], 0
mov dword [esp + 0x238], 0x176e1a27
jmp 0x41f6aa
mov eax, 0x6360840f
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, dword [0x481d88]
mov ecx, dword [esp + 0x24c]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov ecx, 0xad19723e
mov dword [esp + 0x238], ecx
mov dword [esp + 0x44], eax
jmp 0x41f6aa
mov dword [esp + 0x238], 0x8d57f764
jmp 0x41f6aa
mov eax, 0x7be3fba3
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, 0x50555ca1
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov dword [esp + 0x238], 0x3da6589e
jmp 0x41f6aa
mov eax, 0x6bb27222
mov ecx, 0x4056062c
cmp dword [esp + 0x25c], 0
cmovne eax, ecx
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, 0x2a3d7c70
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, dword [esp + 0x25c]
mov dword [esp], eax
call fcn.0042e560
mov eax, 0xaa30e135
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov dword [esp + 0x238], 0x6bb27222
jmp 0x41f6aa
mov dword [0x480e00], 1
mov eax, dword [0x480e04]
mov dword [esp + 0x2bc], eax
mov dword [esp + 0x238], 0x66e2bcff
jmp 0x41f6aa
mov eax, 0x45b39216
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, 0x884223ae
mov ecx, dword [esp + 0x2bc]
mov dword [esp + 0x2c8], ecx
mov dword [esp + 0x238], eax
jmp 0x41f6aa
mov eax, dword [esp + 0x2c8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, 1
mov ecx, dword [esp + 0x240]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 0x40], eax
call fcn.0042e598
mov dword [esp + 0x25c], eax
mov dword [esp + 0x238], 0xd7d4d46d
jmp 0x41f6aa
mov eax, dword [esp + 0x258]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
sub esp, 4
mov dword [esp + 0x2bc], 0xffffffff
mov dword [esp + 0x238], 0xac64091c
mov dword [esp + 0x3c], eax
jmp 0x41f6aa
lea eax, [esp + 0x288]
mov ecx, 0
mov edx, dword [0x439148]
movzx edx, word [edx]
mov dword [esp + 0x248], edx
mov edx, dword [esp + 0x248]
mov esi, ecx
sub esi, edx
mov edx, ecx
sub edx, 1
add esi, edx
sub ecx, esi
mov edx, dword [0x439148]
movzx ecx, word [edx + ecx*2]
mov dword [esp + 0x244], ecx
mov ecx, dword [esp + 0x244]
mov edx, dword [0x439148]
mov esi, dword [esp + 0x248]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x439148]
add esi, 2
mov edi, dword [esp + 0x248]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00407770
lea eax, [esp + 0x260]
mov ecx, dword [0x43914c]
movzx ecx, word [ecx]
mov dword [esp + 0x248], ecx
mov ecx, dword [esp + 0x248]
sub ecx, 0x5951f747
add ecx, 1
add ecx, 0x5951f747
mov edx, dword [0x43914c]
shl ecx, 1
add edx, ecx
movzx ecx, word [edx]
mov dword [esp + 0x244], ecx
mov ecx, dword [esp + 0x244]
mov edx, dword [0x43914c]
mov esi, dword [esp + 0x248]
shl esi, 1
add edx, esi
add edx, 4
mov esi, dword [0x43914c]
add esi, 2
mov edi, dword [esp + 0x248]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], esi
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
call fcn.00407770
lea eax, [esp + 0x288]
mov ecx, dword [esp + 0x2b0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0042f63c
mov dword [esp + 0x238], 0x1635ce2e
mov dword [esp + 0x38], eax
jmp 0x41f6aa
lea eax, [esp + 0x260]
mov ecx, dword [esp + 0x2b0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0042f63c
mov dword [esp + 0x238], 0xb6215b0c
mov dword [esp + 0x34], eax
jmp 0x41f6aa
mov dword [0x480e04], 1
mov dword [esp + 0x238], 0xb5095599
jmp 0x41f6aa
mov dword [esp + 0x238], 0x242dedde
jmp 0x41f6aa
mov eax, dword [0x481d8c]
mov ecx, dword [esp + 0x24c]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx + 8], 0x480e04
mov dword [edx], 0
call eax
sub esp, 0xc
mov dword [esp + 0x238], 0x464e7dec
mov dword [esp + 0x30], eax
jmp 0x41f6aa
mov eax, dword [0x481d88]
mov ecx, dword [esp + 0x24c]
mov edx, esp
mov dword [edx], ecx
call eax
sub esp, 4
mov dword [esp + 0x238], 0x6360840f
mov dword [esp + 0x2c], eax
jmp 0x41f6aa
mov dword [esp + 0x238], 0x7be3fba3
jmp 0x41f6aa
mov eax, dword [esp + 0x25c]
mov dword [esp], eax
call fcn.0042e560
mov dword [esp + 0x238], 0x2a3d7c70
jmp 0x41f6aa
mov dword [esp + 0x238], 0x45b39216
jmp 0x41ded9