Function at 0x41ece0
Capabilities:
Check if file exists

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x687047
mov eax, dword fs:[0]
push eax
sub esp, 0x3f0
mov eax, dword [0x732694]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1a4], ecx
call fcn.004ecb09
test al, al
je 0x41ed83
mov eax, dword [0x73fbb0]
test eax, eax
je 0x41ed83
cmp dword [eax + 4], 4
jl 0x41ed83
push 0
push 0
push 0x695460
push 0x141
push str.CDoTaskItemByAppID::UnInstallAll
push 4
lea ecx, [ebp - 0x2dc]
call fcn.0041c640
mov esi, eax
lea ecx, [esi + 0x30]
mov dword [ebp - 4], 0
push str.UnInstallAll_start
push ecx
call fcn.0041cf00
mov ecx, dword [0x73fbb0]
add esp, 8
push esi
call fcn.0041cfb0
lea ecx, [ebp - 0x2dc]
mov dword [ebp - 4], 0xffffffff
call fcn.0041ca70
push str.68131367
push str.SOFTWAREWinAssistmainkey
lea eax, [ebp - 0x150]
push reloc.gdiplus.dll_Ordinal_1
push eax
call fcn.004ea73a
sub esp, 8
mov dword [ebp - 4], 1
mov ecx, esp
xor eax, eax
push eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x696338
mov word [ecx], ax
call fcn.00402f30
lea eax, [ebp - 0x150]
push eax
call fcn.004e6f5e
add esp, 0x1c
lea ecx, [ebp - 0x150]
push 1
push 0x693250
call fcn.00402da0
push 0xd
push 0x695e38
lea ecx, [ebp - 0x150]
call fcn.00402da0
push str.mainkey
push str.WIN_Clear
lea eax, [ebp - 0xc0]
push str.Software_s_s
push eax
call fcn.004e7163
cmp dword [ebp - 0xac], 8
lea eax, [ebp - 0xc0]
push str.68131367
cmovae eax, dword [ebp - 0xc0]
push eax
lea eax, [ebp - 0x138]
mov byte [ebp - 4], 2
push reloc.gdiplus.dll_Ordinal_1
push eax
call fcn.004ea73a
add esp, 8
mov byte [ebp - 4], 3
mov ecx, esp
xor eax, eax
push eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x696338
mov word [ecx], ax
call fcn.00402f30
lea eax, [ebp - 0x138]
push eax
call fcn.004e6f5e
add esp, 0x1c
lea ecx, [ebp - 0x138]
push 1
push 0x693250
call fcn.00402da0
push 0xc
push str.WinClear.exe
lea ecx, [ebp - 0x138]
call fcn.00402da0
push str.mainkey
push str.WIN_Intercept
lea eax, [ebp - 0xd8]
push str.Software_s_s
push eax
call fcn.004e7163
mov esi, eax
add esp, 0x10
lea eax, [ebp - 0xc0]
cmp eax, esi
je 0x41eefa
mov ecx, eax
call fcn.00401e90
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0xc0], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0xb0], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0xc4]
cmp edx, 8
jb 0x41ef3a
mov ecx, dword [ebp - 0xd8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41ef30
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fb56
push edx
push ecx
call fcn.00447d89
add esp, 8
cmp dword [ebp - 0xac], 8
lea eax, [ebp - 0xc0]
push str.68131367
cmovae eax, dword [ebp - 0xc0]
push eax
lea eax, [ebp - 0x120]
push reloc.gdiplus.dll_Ordinal_1
push eax
call fcn.004ea73a
sub esp, 8
mov byte [ebp - 4], 4
mov ecx, esp
xor eax, eax
push eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x696338
mov word [ecx], ax
call fcn.00402f30
lea eax, [ebp - 0x120]
push eax
call fcn.004e6f5e
add esp, 0x1c
lea ecx, [ebp - 0x120]
push 1
push 0x693250
call fcn.00402da0
push 0x10
push str.WinIntercept.exe
lea ecx, [ebp - 0x120]
call fcn.00402da0
push str.mainkey
push str.WIN_GameBox
lea eax, [ebp - 0xd8]
push str.Software_s_s
push eax
call fcn.004e7163
mov esi, eax
add esp, 0x10
lea eax, [ebp - 0xc0]
cmp eax, esi
je 0x41f01a
mov ecx, eax
call fcn.00401e90
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0xc0], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0xb0], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0xc4]
cmp edx, 8
jb 0x41f05a
mov ecx, dword [ebp - 0xd8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f050
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fb5b
push edx
push ecx
call fcn.00447d89
add esp, 8
cmp dword [ebp - 0xac], 8
lea eax, [ebp - 0xc0]
push str.68131367
cmovae eax, dword [ebp - 0xc0]
push eax
lea eax, [ebp - 0x108]
push reloc.gdiplus.dll_Ordinal_1
push eax
call fcn.004ea73a
sub esp, 8
mov byte [ebp - 4], 5
mov ecx, esp
xor eax, eax
push eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x696338
mov word [ecx], ax
call fcn.00402f30
lea eax, [ebp - 0x108]
push eax
call fcn.004e6f5e
add esp, 0x1c
lea ecx, [ebp - 0x108]
push 1
push 0x693250
call fcn.00402da0
push 0xe
push str.WinGameBox.exe
lea ecx, [ebp - 0x108]
call fcn.00402da0
call fcn.004ecb09
mov edi, 0x696188
test al, al
je 0x41f165
mov eax, dword [0x73fbb0]
test eax, eax
je 0x41f165
cmp dword [eax + 4], 4
jl 0x41f165
push 0
push 0
push 0x695460
push 0x16b
push str.CDoTaskItemByAppID::UnInstallAll
push 4
lea ecx, [ebp - 0x2dc]
call fcn.0041c640
mov esi, eax
cmp dword [ebp - 0x13c], 8
lea edx, [ebp - 0x150]
mov ecx, edi
mov byte [ebp - 4], 6
cmovae edx, dword [ebp - 0x150]
lea eax, [esi + 0x30]
test edx, edx
cmovne ecx, edx
push ecx
push eax
call fcn.0041bf60
mov ecx, dword [0x73fbb0]
add esp, 8
push esi
call fcn.0041cfb0
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 5
call fcn.0041ca70
call fcn.004ecb09
test al, al
je 0x41f1e6
mov eax, dword [0x73fbb0]
test eax, eax
je 0x41f1e6
cmp dword [eax + 4], 4
jl 0x41f1e6
push 0
push 0
push 0x695460
push 0x16c
push str.CDoTaskItemByAppID::UnInstallAll
push 4
lea ecx, [ebp - 0x2dc]
call fcn.0041c640
mov esi, eax
cmp dword [ebp - 0x124], 8
lea edx, [ebp - 0x138]
mov ecx, edi
mov byte [ebp - 4], 7
cmovae edx, dword [ebp - 0x138]
lea eax, [esi + 0x30]
test edx, edx
cmovne ecx, edx
push ecx
push eax
call fcn.0041bf60
mov ecx, dword [0x73fbb0]
add esp, 8
push esi
call fcn.0041cfb0
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 5
call fcn.0041ca70
call fcn.004ecb09
test al, al
je 0x41f267
mov eax, dword [0x73fbb0]
test eax, eax
je 0x41f267
cmp dword [eax + 4], 4
jl 0x41f267
push 0
push 0
push 0x695460
push 0x16d
push str.CDoTaskItemByAppID::UnInstallAll
push 4
lea ecx, [ebp - 0x2dc]
call fcn.0041c640
mov esi, eax
cmp dword [ebp - 0x10c], 8
lea edx, [ebp - 0x120]
mov ecx, edi
mov byte [ebp - 4], 8
cmovae edx, dword [ebp - 0x120]
lea eax, [esi + 0x30]
test edx, edx
cmovne ecx, edx
push ecx
push eax
call fcn.0041bf60
mov ecx, dword [0x73fbb0]
add esp, 8
push esi
call fcn.0041cfb0
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 5
call fcn.0041ca70
call fcn.004ecb09
test al, al
je 0x41f2e6
mov eax, dword [0x73fbb0]
test eax, eax
je 0x41f2e6
cmp dword [eax + 4], 4
jl 0x41f2e6
push 0
push 0
push 0x695460
push 0x16e
push str.CDoTaskItemByAppID::UnInstallAll
push 4
lea ecx, [ebp - 0x2dc]
call fcn.0041c640
mov esi, eax
cmp dword [ebp - 0xf4], 8
lea ecx, [ebp - 0x108]
lea eax, [esi + 0x30]
mov byte [ebp - 4], 9
cmovae ecx, dword [ebp - 0x108]
test ecx, ecx
cmovne edi, ecx
push edi
push eax
call fcn.0041bf60
mov ecx, dword [0x73fbb0]
add esp, 8
push esi
call fcn.0041cfb0
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 5
call fcn.0041ca70
cmp dword [ebp - 0x13c], 8
lea eax, [ebp - 0x150]
mov esi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmovae eax, dword [ebp - 0x150]
push eax
call esi
test eax, eax
jne 0x41f918
cmp dword [ebp - 0x124], 8
lea eax, [ebp - 0x138]
cmovae eax, dword [ebp - 0x138]
push eax
call esi
test eax, eax
jne 0x41f918
cmp dword [ebp - 0xf4], 8
lea eax, [ebp - 0x108]
cmovae eax, dword [ebp - 0x108]
push eax
call esi
test eax, eax
jne 0x41f918
cmp dword [ebp - 0x10c], 8
lea eax, [ebp - 0x120]
cmovae eax, dword [ebp - 0x120]
push eax
call esi
test eax, eax
jne 0x41f918
mov eax, dword [ebp - 0x1a4]
lea ecx, [ebp - 0xa8]
sub eax, 0xffffff80
push eax
call fcn.00401df0
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0xb
push eax
call fcn.004e7387
add esp, 4
test eax, eax
jne 0x41f3a4
push 0x693250
lea ecx, [ebp - 0xa8]
call fcn.00402d70
push 6
push str....._
lea ecx, [ebp - 0xa8]
call fcn.00402da0
cmp dword [ebp - 0x94], 8
lea eax, [ebp - 0xa8]
push str.WinLogin.exe
cmovae eax, dword [ebp - 0xa8]
push eax
lea eax, [ebp - 0xf0]
push 0x6966d0
push eax
call fcn.004e7163
cmp dword [ebp - 0xdc], 8
lea eax, [ebp - 0xf0]
push 1
cmovae eax, dword [ebp - 0xf0]
push eax
mov byte [ebp - 4], 0xc
call fcn.004e5e4d
cmp dword [ebp - 0xdc], 8
lea eax, [ebp - 0xf0]
cmovae eax, dword [ebp - 0xf0]
push eax
call fcn.004eadb7
cmp dword [ebp - 0x94], 8
lea eax, [ebp - 0xa8]
push str.node.dll
cmovae eax, dword [ebp - 0xa8]
push eax
lea eax, [ebp - 0xd8]
push 0x6966d0
push eax
call fcn.004e7163
add esp, 0x2c
lea ecx, [ebp - 0xf0]
push eax
call fcn.0041cdd0
lea ecx, [ebp - 0xd8]
call fcn.00401e90
cmp dword [ebp - 0xdc], 8
lea eax, [ebp - 0xf0]
cmovae eax, dword [ebp - 0xf0]
push eax
call fcn.004eadb7
cmp dword [ebp - 0x94], 8
lea eax, [ebp - 0xa8]
push str.About.exe
cmovae eax, dword [ebp - 0xa8]
push str.WinTools
push str.Tools
push eax
lea eax, [ebp - 0xd8]
push 0x6966e8
push eax
call fcn.004e7163
add esp, 0x1c
lea ecx, [ebp - 0xf0]
push eax
call fcn.0041cdd0
lea ecx, [ebp - 0xd8]
call fcn.00401e90
cmp dword [ebp - 0xdc], 8
lea eax, [ebp - 0xf0]
push 1
cmovae eax, dword [ebp - 0xf0]
push eax
call fcn.004e5e4d
cmp dword [ebp - 0xdc], 8
lea eax, [ebp - 0xf0]
cmovae eax, dword [ebp - 0xf0]
push eax
call fcn.004eadb7
cmp dword [ebp - 0x94], 8
lea eax, [ebp - 0xa8]
push str.Wintray.exe
cmovae eax, dword [ebp - 0xa8]
push str.WinTools
push str.Tools
push eax
lea eax, [ebp - 0x198]
push 0x6966e8
push eax
call fcn.004e7163
cmp dword [ebp - 0x184], 8
lea eax, [ebp - 0x198]
push 1
cmovae eax, dword [ebp - 0x198]
push eax
mov byte [ebp - 4], 0xd
call fcn.004e5e4d
cmp dword [ebp - 0x184], 8
lea eax, [ebp - 0x198]
cmovae eax, dword [ebp - 0x198]
push eax
call fcn.004eadb7
cmp dword [ebp - 0x94], 8
lea eax, [ebp - 0xa8]
push str.Wintray.exe
cmovae eax, dword [ebp - 0xa8]
push str.WinTools
push str.Tools
push eax
lea eax, [ebp - 0x180]
push 0x6966e8
push eax
call fcn.004e7163
add esp, 0x48
cmp dword [ebp - 0x16c], 8
lea eax, [ebp - 0x180]
push 1
cmovae eax, dword [ebp - 0x180]
push eax
mov byte [ebp - 4], 0xe
call fcn.004e5e4d
cmp dword [ebp - 0x16c], 8
lea eax, [ebp - 0x180]
cmovae eax, dword [ebp - 0x180]
push eax
call fcn.004eadb7
cmp dword [ebp - 0x94], 8
lea eax, [ebp - 0xa8]
push str.Render
cmovae eax, dword [ebp - 0xa8]
push eax
lea eax, [ebp - 0x168]
push 0x696390
push eax
call fcn.004e7163
add esp, 0x1c
cmp dword [ebp - 0x154], 8
lea eax, [ebp - 0x168]
mov byte [ebp - 4], 0xf
cmovae eax, dword [ebp - 0x168]
push eax
call esi
test eax, eax
je 0x41f64a
cmp dword [ebp - 0x154], 8
lea eax, [ebp - 0x168]
cmovae eax, dword [ebp - 0x168]
push eax
call fcn.004eadcf
add esp, 4
mov eax, dword [str.GoodZip]
mov dword [ebp - 0x90], eax
mov eax, dword [0x69671c]
push 0x38
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x88]
push 0
push eax
call fcn.005175d0
mov eax, dword [0x696728]
movq xmm0, qword [str.BKPDFReader]
push 0x34
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x44]
push 0
push eax
movq qword [ebp - 0x50], xmm0
call fcn.005175d0
add esp, 0x18
lea esi, [ebp - 0x90]
xor edi, edi
nop dword [eax]
push 0x69672c
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
call fcn.0041ff60
mov eax, esi
mov byte [ebp - 4], 0x10
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41f6d4
sub eax, edx
lea ecx, [ebp - 0xd8]
push eax
push esi
call fcn.0040cc70
push 0x3a8
sub esp, 0x18
lea eax, [ebp - 0xd8]
mov ecx, esp
push eax
call fcn.0040b550
lea eax, [ebp - 0x1bc]
push eax
call fcn.004e751c
add esp, 0x20
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x11
jb 0x41f71b
mov eax, dword [eax]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004ea86a
add esp, 8
mov byte [ebp - 0x199], al
lea ecx, [ebp - 0x1bc]
mov byte [ebp - 4], 0x10
call fcn.00401e90
cmp byte [ebp - 0x199], 0
jne 0x41f863
push 0x3a8
sub esp, 0x18
lea eax, [ebp - 0xd8]
mov ecx, esp
push eax
call fcn.0040b550
lea eax, [ebp - 0x1bc]
push eax
call fcn.004e751c
add esp, 0x20
cmp dword [eax + 0x14], 8
mov byte [ebp - 4], 0x12
jb 0x41f77c
mov eax, dword [eax]
push eax
push reloc.gdiplus.dll_Ordinal_1
call fcn.004ea86a
add esp, 8
mov byte [ebp - 0x199], al
lea ecx, [ebp - 0x1bc]
call fcn.00401e90
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0xf
call fcn.0040b6f0
cmp byte [ebp - 0x199], 0
jne 0x41f872
inc edi
add esi, 0x40
cmp edi, 2
jb 0x41f6a0
cmp dword [ebp - 0x94], 8
lea eax, [ebp - 0xa8]
cmovae eax, dword [ebp - 0xa8]
push eax
call fcn.004eadcf
add esp, 4
call fcn.004ecb09
test al, al
je 0x41f857
mov eax, dword [0x73fbb0]
test eax, eax
je 0x41f857
cmp dword [eax + 4], 4
jl 0x41f857
push 0
push 0
push 0x695460
push 0x1b8
push str.CDoTaskItemByAppID::UnInstallAll
push 4
lea ecx, [ebp - 0x3fc]
call fcn.0041c640
mov edi, eax
lea ecx, [edi + 0x30]
mov byte [ebp - 4], 0x14
push str.UnInstallAll_del_all_:
push ecx
call fcn.0041bf60
mov esi, dword [0x73fbb0]
lea eax, [ebp - 0xa8]
add esp, 8
mov ecx, edi
push eax
call fcn.0041bf30
push eax
mov ecx, esi
call fcn.0041cfb0
lea ecx, [ebp - 0x3fc]
call fcn.0041ca70
mov byte [ebp - 0x199], 1
jmp 0x41f8df
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0xf
call fcn.0040b6f0
call fcn.004ecb09
test al, al
je 0x41f8d8
mov eax, dword [0x73fbb0]
test eax, eax
je 0x41f8d8
cmp dword [eax + 4], 4
jl 0x41f8d8
push 0
push 0
push 0x695460
push 0x1b3
push str.CDoTaskItemByAppID::UnInstallAll
push 4
lea ecx, [ebp - 0x3fc]
call fcn.0041c640
mov esi, eax
lea ecx, [esi + 0x30]
mov byte [ebp - 4], 0x13
push str.UnInstallAll_GoodZip_BKPDFReader_exist
push ecx
call fcn.0041cf00
mov ecx, dword [0x73fbb0]
add esp, 8
push esi
call fcn.0041cfb0
lea ecx, [ebp - 0x3fc]
call fcn.0041ca70
mov byte [ebp - 0x199], 0
lea ecx, [ebp - 0x168]
call fcn.00401e90
lea ecx, [ebp - 0x180]
call fcn.00401e90
lea ecx, [ebp - 0x198]
call fcn.00401e90
lea ecx, [ebp - 0xf0]
call fcn.00401e90
lea ecx, [ebp - 0xa8]
call fcn.00401e90
jmp 0x41f985
call fcn.004ecb09
test al, al
je 0x41f97e
mov eax, dword [0x73fbb0]
test eax, eax
je 0x41f97e
cmp dword [eax + 4], 4
jl 0x41f97e
push 0
push 0
push 0x695460
push 0x176
push str.CDoTaskItemByAppID::UnInstallAll
push 4
lea ecx, [ebp - 0x3fc]
call fcn.0041c640
mov esi, eax
lea ecx, [esi + 0x30]
mov byte [ebp - 4], 0xa
push str.UnInstallAll_assist__clear__ad__zip_exist
push ecx
call fcn.0041cf00
mov ecx, dword [0x73fbb0]
add esp, 8
push esi
call fcn.0041cfb0
lea ecx, [ebp - 0x3fc]
call fcn.0041ca70
mov byte [ebp - 0x199], 0
mov edx, dword [ebp - 0xf4]
cmp edx, 8
jb 0x41f9c5
mov ecx, dword [ebp - 0x108]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41f9bb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fb60
push edx
push ecx
call fcn.00447d89
add esp, 8
mov edx, dword [ebp - 0x10c]
xor eax, eax
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 7
mov word [ebp - 0x108], ax
cmp edx, 8
jb 0x41fa22
mov ecx, dword [ebp - 0x120]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41fa18
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fb65
push edx
push ecx
call fcn.00447d89
add esp, 8
mov edx, dword [ebp - 0x124]
xor eax, eax
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x10c], 7
mov word [ebp - 0x120], ax
cmp edx, 8
jb 0x41fa7f
mov ecx, dword [ebp - 0x138]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41fa75
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fb6a
push edx
push ecx
call fcn.00447d89
add esp, 8
mov edx, dword [ebp - 0xac]
xor eax, eax
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
cmp edx, 8
jb 0x41fadc
mov ecx, dword [ebp - 0xc0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41fad2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fb6f
push edx
push ecx
call fcn.00447d89
add esp, 8
mov edx, dword [ebp - 0x13c]
xor eax, eax
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
cmp edx, 8
jb 0x41fb35
mov ecx, dword [ebp - 0x150]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41fb2b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41fb74
push edx
push ecx
call fcn.00447d89
add esp, 8
mov al, byte [ebp - 0x199]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00447de7
mov esp, ebp
pop ebp
ret
call fcn.0051ae21
call fcn.0051ae21
call fcn.0051ae21
call fcn.0051ae21
call fcn.0051ae21
call fcn.0051ae21
call fcn.0051ae21
int3