Function at 0x41b690
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x290
mov esi, esp
mov eax, dword [ebp + 8]
mov dword [esi + 0x248], 0xf1b4cc23
mov dword [esi + 0x244], eax
mov eax, dword [esi + 0x248]
mov ecx, eax
sub ecx, 0x7d5e5efe
mov dword [esi + 0x240], eax
mov dword [esi + 0x23c], ecx
jg 0x41c290
jmp 0x41b6dc
mov eax, dword [esi + 0x240]
sub eax, 0x78779014
mov dword [esi + 0x238], eax
jg 0x41c274
jmp 0x41b6f8
mov eax, dword [esi + 0x240]
sub eax, 0x67de02a2
mov dword [esi + 0x234], eax
jg 0x41c258
jmp 0x41b714
mov eax, dword [esi + 0x240]
sub eax, 0x86bf77f8
mov dword [esi + 0x230], eax
jg 0x41b74c
jmp 0x41b730
mov eax, dword [esi + 0x240]
sub eax, 0x84364d33
mov dword [esi + 0x22c], eax
je 0x41c63a
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x8d70ebbe
mov dword [esi + 0x228], eax
jg 0x41b784
jmp 0x41b768
mov eax, dword [esi + 0x240]
sub eax, 0x86bf77f9
mov dword [esi + 0x224], eax
je 0x41c522
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x8fdd37a3
mov dword [esi + 0x220], eax
jg 0x41b7bc
jmp 0x41b7a0
mov eax, dword [esi + 0x240]
sub eax, 0x8d70ebbf
mov dword [esi + 0x21c], eax
je 0x41cbba
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x958fa696
mov dword [esi + 0x218], eax
jg 0x41b7f4
jmp 0x41b7d8
mov eax, dword [esi + 0x240]
sub eax, 0x8fdd37a4
mov dword [esi + 0x214], eax
je 0x41cb6f
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x97c306f7
mov dword [esi + 0x210], eax
jg 0x41b82c
jmp 0x41b810
mov eax, dword [esi + 0x240]
sub eax, 0x958fa697
mov dword [esi + 0x20c], eax
je 0x41c5db
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x990dbbec
mov dword [esi + 0x208], eax
jg 0x41b864
jmp 0x41b848
mov eax, dword [esi + 0x240]
sub eax, 0x97c306f8
mov dword [esi + 0x204], eax
je 0x41c4f5
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x9ade76db
mov dword [esi + 0x200], eax
jg 0x41b89c
jmp 0x41b880
mov eax, dword [esi + 0x240]
sub eax, 0x990dbbed
mov dword [esi + 0x1fc], eax
je 0x41c73f
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xa7ba475a
mov dword [esi + 0x1f8], eax
jg 0x41b8d4
jmp 0x41b8b8
mov eax, dword [esi + 0x240]
sub eax, 0x9ade76dc
mov dword [esi + 0x1f4], eax
je 0x41c98d
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xb03060ae
mov dword [esi + 0x1f0], eax
jg 0x41b90c
jmp 0x41b8f0
mov eax, dword [esi + 0x240]
sub eax, 0xa7ba475b
mov dword [esi + 0x1ec], eax
je 0x41cdd6
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xb282d78b
mov dword [esi + 0x1e8], eax
jg 0x41b944
jmp 0x41b928
mov eax, dword [esi + 0x240]
sub eax, 0xb03060af
mov dword [esi + 0x1e4], eax
je 0x41c74f
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xbba01011
mov dword [esi + 0x1e0], eax
jg 0x41b97c
jmp 0x41b960
mov eax, dword [esi + 0x240]
sub eax, 0xb282d78c
mov dword [esi + 0x1dc], eax
je 0x41c9f2
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xc2160389
mov dword [esi + 0x1d8], eax
jg 0x41b9b4
jmp 0x41b998
mov eax, dword [esi + 0x240]
sub eax, 0xbba01012
mov dword [esi + 0x1d4], eax
je 0x41caf4
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x60fe468f
mov dword [esi + 0x1d0], eax
jg 0x41c23c
jmp 0x41b9d0
mov eax, dword [esi + 0x240]
sub eax, 0x6046caf6
mov dword [esi + 0x1cc], eax
jg 0x41c220
jmp 0x41b9ec
mov eax, dword [esi + 0x240]
sub eax, 0x5fc53fc0
mov dword [esi + 0x1c8], eax
jg 0x41c204
jmp 0x41ba08
mov eax, dword [esi + 0x240]
sub eax, 0x5f01ccfc
mov dword [esi + 0x1c4], eax
jg 0x41c1e8
jmp 0x41ba24
mov eax, dword [esi + 0x240]
sub eax, 0x5d277126
mov dword [esi + 0x1c0], eax
jg 0x41c1cc
jmp 0x41ba40
mov eax, dword [esi + 0x240]
sub eax, 0x59d3beeb
mov dword [esi + 0x1bc], eax
jg 0x41c1b0
jmp 0x41ba5c
mov eax, dword [esi + 0x240]
sub eax, 0x544645c5
mov dword [esi + 0x1b8], eax
jg 0x41c194
jmp 0x41ba78
mov eax, dword [esi + 0x240]
sub eax, 0x51045e40
mov dword [esi + 0x1b4], eax
jg 0x41c178
jmp 0x41ba94
mov eax, dword [esi + 0x240]
sub eax, 0x4ccbe3d0
mov dword [esi + 0x1b0], eax
jg 0x41c15c
jmp 0x41bab0
mov eax, dword [esi + 0x240]
sub eax, 0xc28bb92c
mov dword [esi + 0x1ac], eax
jg 0x41bae8
jmp 0x41bacc
mov eax, dword [esi + 0x240]
sub eax, 0xc216038a
mov dword [esi + 0x1a8], eax
je 0x41cb2d
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xc6970c0c
mov dword [esi + 0x1a4], eax
jg 0x41bb20
jmp 0x41bb04
mov eax, dword [esi + 0x240]
sub eax, 0xc28bb92d
mov dword [esi + 0x1a0], eax
je 0x41ca9a
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xc90c75b4
mov dword [esi + 0x19c], eax
jg 0x41bb58
jmp 0x41bb3c
mov eax, dword [esi + 0x240]
sub eax, 0xc6970c0d
mov dword [esi + 0x198], eax
je 0x41c9ca
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xcbeb9afe
mov dword [esi + 0x194], eax
jg 0x41bb90
jmp 0x41bb74
mov eax, dword [esi + 0x240]
sub eax, 0xc90c75b5
mov dword [esi + 0x190], eax
je 0x41c9bb
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xce58c3f9
mov dword [esi + 0x18c], eax
jg 0x41bbc8
jmp 0x41bbac
mov eax, dword [esi + 0x240]
sub eax, 0xcbeb9aff
mov dword [esi + 0x188], eax
je 0x41ca21
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xd3aeca04
mov dword [esi + 0x184], eax
jg 0x41bc00
jmp 0x41bbe4
mov eax, dword [esi + 0x240]
sub eax, 0xce58c3fa
mov dword [esi + 0x180], eax
je 0x41c97d
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xd649f2a8
mov dword [esi + 0x17c], eax
jg 0x41bc38
jmp 0x41bc1c
mov eax, dword [esi + 0x240]
sub eax, 0xd3aeca05
mov dword [esi + 0x178], eax
je 0x41cadb
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xd8386383
mov dword [esi + 0x174], eax
jg 0x41bc70
jmp 0x41bc54
mov eax, dword [esi + 0x240]
sub eax, 0xd649f2a9
mov dword [esi + 0x170], eax
je 0x41cbf6
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xdc894669
mov dword [esi + 0x16c], eax
jg 0x41bca8
jmp 0x41bc8c
mov eax, dword [esi + 0x240]
sub eax, 0xd8386384
mov dword [esi + 0x168], eax
je 0x41ca02
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xdd8f5e23
mov dword [esi + 0x164], eax
jg 0x41bce0
jmp 0x41bcc4
mov eax, dword [esi + 0x240]
sub eax, 0xdc89466a
mov dword [esi + 0x160], eax
je 0x41c6e0
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xe1c10a14
mov dword [esi + 0x15c], eax
jg 0x41bd18
jmp 0x41bcfc
mov eax, dword [esi + 0x240]
sub eax, 0xdd8f5e24
mov dword [esi + 0x158], eax
je 0x41ce4d
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xe9811dfe
mov dword [esi + 0x154], eax
jg 0x41bd50
jmp 0x41bd34
mov eax, dword [esi + 0x240]
sub eax, 0xe1c10a15
mov dword [esi + 0x150], eax
je 0x41c56d
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xf1b4cc22
mov dword [esi + 0x14c], eax
jg 0x41bd88
jmp 0x41bd6c
mov eax, dword [esi + 0x240]
sub eax, 0xe9811dff
mov dword [esi + 0x148], eax
je 0x41c944
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xff9f90e7
mov dword [esi + 0x144], eax
jg 0x41bdc0
jmp 0x41bda4
mov eax, dword [esi + 0x240]
sub eax, 0xf1b4cc23
mov dword [esi + 0x140], eax
je 0x41c2b1
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x339a87d
mov dword [esi + 0x13c], eax
jg 0x41bdf8
jmp 0x41bddc
mov eax, dword [esi + 0x240]
sub eax, 0xff9f90e8
mov dword [esi + 0x138], eax
je 0x41cd98
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x97908d8
mov dword [esi + 0x134], eax
jg 0x41be30
jmp 0x41be14
mov eax, dword [esi + 0x240]
sub eax, 0x339a87e
mov dword [esi + 0x130], eax
je 0x41cb3c
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xbb0967e
mov dword [esi + 0x12c], eax
jg 0x41be68
jmp 0x41be4c
mov eax, dword [esi + 0x240]
sub eax, 0x97908d9
mov dword [esi + 0x128], eax
je 0x41c7a1
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0xcb3ab0c
mov dword [esi + 0x124], eax
jg 0x41bea0
jmp 0x41be84
mov eax, dword [esi + 0x240]
sub eax, 0xbb0967f
mov dword [esi + 0x120], eax
je 0x41cb94
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x4634d032
mov dword [esi + 0x11c], eax
jg 0x41c140
jmp 0x41bebc
mov eax, dword [esi + 0x240]
sub eax, 0x45d9b754
mov dword [esi + 0x118], eax
jg 0x41c124
jmp 0x41bed8
mov eax, dword [esi + 0x240]
sub eax, 0x3bf61d7c
mov dword [esi + 0x114], eax
jg 0x41c108
jmp 0x41bef4
mov eax, dword [esi + 0x240]
sub eax, 0x38239200
mov dword [esi + 0x110], eax
jg 0x41c0ec
jmp 0x41bf10
mov eax, dword [esi + 0x240]
sub eax, 0x370548d5
mov dword [esi + 0x10c], eax
jg 0x41c0d0
jmp 0x41bf2c
mov eax, dword [esi + 0x240]
sub eax, 0x3634b4c8
mov dword [esi + 0x108], eax
jg 0x41c0b4
jmp 0x41bf48
mov eax, dword [esi + 0x240]
sub eax, 0x36053908
mov dword [esi + 0x104], eax
jg 0x41c098
jmp 0x41bf64
mov eax, dword [esi + 0x240]
sub eax, 0x27a45a7f
mov dword [esi + 0x100], eax
jg 0x41c07c
jmp 0x41bf80
mov eax, dword [esi + 0x240]
sub eax, 0x1edcf1ca
mov dword [esi + 0xfc], eax
jg 0x41c060
jmp 0x41bf9c
mov eax, dword [esi + 0x240]
sub eax, 0x1ca55160
mov dword [esi + 0xf8], eax
jg 0x41c044
jmp 0x41bfb8
mov eax, dword [esi + 0x240]
sub eax, 0x13140daa
mov dword [esi + 0xf4], eax
jg 0x41c028
jmp 0x41bfd4
mov eax, dword [esi + 0x240]
sub eax, 0xcb3ab0d
mov dword [esi + 0xf0], eax
je 0x41c6d1
jmp 0x41bff0
mov eax, dword [esi + 0x240]
sub eax, 0xcc2b1fd
mov dword [esi + 0xec], eax
je 0x41ce75
jmp 0x41c00c
mov eax, dword [esi + 0x240]
sub eax, 0x112f5daf
mov dword [esi + 0xe8], eax
je 0x41c69c
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x13140dab
mov dword [esi + 0xe4], eax
je 0x41c55d
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x1ca55161
mov dword [esi + 0xe0], eax
je 0x41cb4b
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x1edcf1cb
mov dword [esi + 0xdc], eax
je 0x41c68c
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x27a45a80
mov dword [esi + 0xd8], eax
je 0x41c9ac
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x36053909
mov dword [esi + 0xd4], eax
je 0x41ce84
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x3634b4c9
mov dword [esi + 0xd0], eax
je 0x41c96e
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x370548d6
mov dword [esi + 0xcc], eax
je 0x41ce66
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x38239201
mov dword [esi + 0xc8], eax
je 0x41c7c2
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x3bf61d7d
mov dword [esi + 0xc4], eax
je 0x41ce0a
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x45d9b755
mov dword [esi + 0xc0], eax
je 0x41c99d
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x4634d033
mov dword [esi + 0xbc], eax
je 0x41c907
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x4ccbe3d1
mov dword [esi + 0xb8], eax
je 0x41cb04
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x51045e41
mov dword [esi + 0xb4], eax
je 0x41c4e5
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x544645c6
mov dword [esi + 0xb0], eax
je 0x41c513
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x59d3beec
mov dword [esi + 0xac], eax
je 0x41c2c1
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x5d277127
mov dword [esi + 0xa8], eax
je 0x41c954
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x5f01ccfd
mov dword [esi + 0xa4], eax
je 0x41ceac
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x5fc53fc1
mov dword [esi + 0xa0], eax
je 0x41ca12
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x6046caf7
mov dword [esi + 0x9c], eax
je 0x41cbca
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x60fe4690
mov dword [esi + 0x98], eax
je 0x41cbe8
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x67de02a3
mov dword [esi + 0x94], eax
je 0x41c5ba
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x78779015
mov dword [esi + 0x90], eax
je 0x41c4c4
jmp 0x41c2ac
mov eax, dword [esi + 0x240]
sub eax, 0x7d5e5eff
mov dword [esi + 0x8c], eax
je 0x41cd7c
jmp 0x41c2ac
jmp 0x41cebe
mov eax, 0x59d3beec
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, 0x78779015
mov ecx, 0
mov edx, 0x28
mov edi, 4
mov dword [esi + 0x88], eax
mov eax, edi
mov dword [esi + 0x84], edi
mov dword [esi + 0x80], ecx
mov dword [esi + 0x7c], edx
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x24c], eax
mov eax, dword [esi + 0x84]
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x250], eax
mov eax, dword [esi + 0x84]
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x254], eax
mov eax, dword [esi + 0x84]
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x258], eax
mov eax, 0x28
mov dword [esi + 0x78], eax
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x25c], eax
mov eax, dword [esi + 0x78]
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x260], eax
mov eax, dword [esi + 0x84]
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x264], eax
mov eax, dword [esi + 0x84]
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x268], eax
mov eax, 8
call fcn.0043c5e0
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov dword [esi + 0x26c], eax
mov eax, dword [esi + 0x84]
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x270], eax
mov eax, dword [esi + 0x84]
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x274], eax
mov eax, dword [esi + 0x84]
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x278], eax
mov eax, dword [esi + 0x84]
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x27c], eax
mov eax, dword [esi + 0x84]
call fcn.0043c5e0
mov eax, esp
mov dword [esi + 0x280], eax
mov eax, dword [esi + 0x250]
mov ecx, dword [esi + 0x244]
mov dword [eax], ecx
mov eax, dword [esi + 0x254]
mov dword [eax], 0
mov eax, dword [esi + 0x258]
mov dword [eax], 0
mov eax, dword [esi + 0x25c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.0043c610
add esp, 0xc
mov eax, dword [esi + 0x260]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.0043c610
add esp, 0xc
mov eax, dword [esi + 0x264]
mov dword [eax], 0
mov eax, dword [esi + 0x268]
mov dword [eax], 0
mov eax, dword [esi + 0x26c]
mov ecx, dword [0x492140]
mov dword [eax], ecx
mov bx, word [0x492144]
mov word [eax + 4], bx
mov eax, dword [esi + 0x27c]
mov dword [eax], 0
cmp dword [0x4d7678], 0
setne al
and al, 1
mov byte [esi + 0x285], al
mov ecx, dword [esi + 0x88]
mov dword [esi + 0x248], ecx
jmp 0x41cebe
mov eax, 0x86bf77f9
mov ecx, 0x51045e41
mov dl, byte [esi + 0x285]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, 0x97c306f8
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, 0x544645c6
mov ecx, dword [0x4d767c]
mov edx, dword [esi + 0x24c]
mov dword [edx], ecx
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov dword [esi + 0x248], 0x8d70ebbf
jmp 0x41cebe
call fcn.00407bc0
mov ecx, 0xcbeb9aff
mov edx, 0x13140dab
mov edi, dword [esi + 0x250]
mov edi, dword [edi]
mov dword [edi], eax
mov edi, dword [esi + 0x280]
mov dword [edi], eax
mov eax, dword [esi + 0x280]
cmp dword [eax], 6
cmovae ecx, edx
mov dword [esi + 0x248], ecx
jmp 0x41cebe
mov eax, 0xe1c10a15
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, dword [0x4d8614]
mov ecx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [esi + 0x74], eax
call ecx
mov ecx, dword [esi + 0x268]
sub esp, 0xc
mov edx, esp
mov dword [edx + 8], ecx
mov dword [edx], eax
mov dword [edx + 4], 0x2000000
mov eax, dword [esi + 0x74]
call eax
mov ecx, 0x67de02a3
cmp eax, 0
setne bl
and bl, 1
mov byte [esi + 0x286], bl
mov dword [esi + 0x248], ecx
jmp 0x41cebe
mov eax, 0xb282d78c
mov ecx, 0x958fa697
mov dl, byte [esi + 0x286]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, dword [0x4d8610]
mov ecx, dword [esi + 0x27c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x268]
mov edx, dword [edx]
mov edi, dword [esi + 0x27c]
sub esp, 0x14
mov ebx, esp
mov dword [ebx + 0x10], edi
mov dword [ebx + 0xc], ecx
mov dword [ebx], edx
mov dword [ebx + 8], 0
mov dword [ebx + 4], 0x19
call eax
mov ecx, 0xc6970c0d
mov edx, 0x84364d33
mov edi, dword [esi + 0x27c]
cmp dword [edi], 0
cmovne ecx, edx
mov dword [esi + 0x248], ecx
mov dword [esi + 0x70], eax
jmp 0x41cebe
mov eax, 1
mov ecx, dword [esi + 0x27c]
mov ecx, dword [ecx]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esi + 0x6c], eax
call fcn.0043c6d8
add esp, 8
mov ecx, 0xdc89466a
mov edx, 0x1edcf1cb
mov edi, dword [esi + 0x264]
mov dword [edi], eax
mov eax, dword [esi + 0x264]
cmp dword [eax], 0
cmove ecx, edx
mov dword [esi + 0x248], ecx
jmp 0x41cebe
mov eax, 0x112f5daf
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, dword [esi + 0x268]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov ecx, 0xcb3ab0d
mov edx, dword [esi + 0x24c]
mov dword [edx], 0xffffffff
mov dword [esi + 0x248], ecx
mov dword [esi + 0x68], eax
jmp 0x41cebe
mov dword [esi + 0x248], 0x8d70ebbf
jmp 0x41cebe
mov eax, dword [0x4d8610]
mov ecx, dword [esi + 0x27c]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x264]
mov edx, dword [edx]
mov edi, dword [esi + 0x268]
mov edi, dword [edi]
mov ebx, dword [esi + 0x27c]
sub esp, 0x14
mov dword [esi + 0x64], eax
mov eax, esp
mov dword [eax + 0x10], ebx
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov dword [eax], edi
mov dword [eax + 4], 0x19
mov eax, dword [esi + 0x64]
call eax
mov ecx, 0xc90c75b5
mov edx, 0x990dbbed
cmp eax, 0
cmovne ecx, edx
mov dword [esi + 0x248], ecx
jmp 0x41cebe
mov eax, 0xb03060af
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, dword [esi + 0x264]
mov eax, dword [eax]
mov ecx, dword [esi + 0x254]
mov dword [ecx], eax
mov eax, dword [0x4d860c]
mov ecx, dword [esi + 0x254]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x258]
sub esp, 8
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], ecx
call eax
mov ecx, 0x97908d9
cmp eax, 0
setne bl
and bl, 1
mov byte [esi + 0x287], bl
mov dword [esi + 0x248], ecx
jmp 0x41cebe
mov eax, 0x27a45a80
mov ecx, 0x38239201
mov dl, byte [esi + 0x287]
test dl, 1
cmovne eax, ecx
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, dword [0x492148]
movzx eax, word [eax]
mov ecx, dword [esi + 0x274]
mov dword [ecx], eax
mov eax, dword [esi + 0x274]
mov eax, dword [eax]
mov ecx, dword [0x492148]
movzx eax, word [ecx + eax*2 + 2]
mov ecx, dword [esi + 0x278]
mov dword [ecx], eax
mov eax, dword [esi + 0x278]
mov eax, dword [eax]
mov ecx, dword [0x492148]
mov edx, dword [esi + 0x274]
mov edx, dword [edx]
shl edx, 1
add ecx, edx
add ecx, 4
mov edx, dword [0x492148]
add edx, 2
mov edi, dword [esi + 0x274]
mov edi, dword [edi]
mov ebx, dword [esi + 0x25c]
sub esp, 0x14
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.00406f80
add esp, 0x14
mov eax, dword [0x49214c]
movzx eax, word [eax]
mov ecx, dword [esi + 0x274]
mov dword [ecx], eax
mov eax, dword [esi + 0x274]
mov eax, dword [eax]
mov ecx, dword [0x49214c]
movzx eax, word [ecx + eax*2 + 2]
mov ecx, dword [esi + 0x278]
mov dword [ecx], eax
mov eax, dword [esi + 0x278]
mov eax, dword [eax]
mov ecx, dword [0x49214c]
mov edx, dword [esi + 0x274]
mov edx, dword [edx]
shl edx, 1
add ecx, edx
add ecx, 4
mov edx, dword [0x49214c]
add edx, 2
mov edi, dword [esi + 0x274]
mov edi, dword [edi]
mov ebx, dword [esi + 0x260]
sub esp, 0x14
mov dword [esp], ebx
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.00406f80
add esp, 0x14
mov eax, dword [esi + 0x25c]
mov ecx, dword [esi + 0x258]
mov ecx, dword [ecx]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0043d77c
add esp, 8
mov ecx, 0xe9811dff
mov edx, 0x4634d033
cmp eax, 0
cmovne ecx, edx
mov dword [esi + 0x248], ecx
jmp 0x41cebe
mov eax, dword [esi + 0x260]
mov ecx, dword [esi + 0x258]
mov ecx, dword [ecx]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0043d77c
add esp, 8
mov ecx, 0xe9811dff
mov edx, 0xce58c3fa
cmp eax, 0
cmovne ecx, edx
mov dword [esi + 0x248], ecx
jmp 0x41cebe
mov eax, 0x5d277127
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, 0x3634b4c9
mov dword [0x4d767c], 1
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov dword [esi + 0x248], 0xce58c3fa
jmp 0x41cebe
mov eax, 0x9ade76dc
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, 0x45d9b755
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov dword [esi + 0x248], 0x27a45a80
jmp 0x41cebe
mov dword [esi + 0x248], 0xc90c75b5
jmp 0x41cebe
mov dword [esi + 0x248], 0xc6970c0d
jmp 0x41cebe
mov eax, dword [esi + 0x268]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov dword [esi + 0x248], 0xb282d78c
mov dword [esi + 0x60], eax
jmp 0x41cebe
mov eax, 0xd8386384
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, 0x5fc53fc1
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov dword [esi + 0x248], 0x1ca55161
jmp 0x41cebe
mov eax, dword [0x4d8608]
mov ecx, dword [esi + 0x270]
mov edx, dword [esi + 0x26c]
sub esp, 0x2c
mov edi, esp
mov dword [edi + 0x28], ecx
mov dword [edi], edx
mov dword [edi + 0x24], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x14], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0xc], 0x220
mov dword [edi + 8], 0x20
mov dword [edi + 4], 2
call eax
mov ecx, 0x339a87e
mov edx, 0xc28bb92d
cmp eax, 0
cmovne ecx, edx
mov dword [esi + 0x248], ecx
jmp 0x41cebe
mov eax, dword [0x4d8604]
mov ecx, dword [esi + 0x270]
mov ecx, dword [ecx]
sub esp, 0xc
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx + 8], 0x4d767c
mov dword [edx], 0
call eax
mov ecx, 0xd3aeca05
mov edx, 0xbba01012
cmp eax, 0
cmovne ecx, edx
mov dword [esi + 0x248], ecx
jmp 0x41cebe
mov dword [0x4d767c], 0
mov dword [esi + 0x248], 0xbba01012
jmp 0x41cebe
mov eax, 0x4ccbe3d1
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, dword [0x4d8600]
mov ecx, dword [esi + 0x270]
mov ecx, dword [ecx]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
call eax
mov ecx, 0xc216038a
mov dword [esi + 0x248], ecx
mov dword [esi + 0x5c], eax
jmp 0x41cebe
mov dword [esi + 0x248], 0x339a87e
jmp 0x41cebe
mov dword [esi + 0x248], 0x1ca55161
jmp 0x41cebe
mov eax, 0xbb0967f
mov ecx, 0x8fdd37a4
mov edx, dword [esi + 0x264]
cmp dword [edx], 0
cmovne eax, ecx
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, dword [esi + 0x264]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.0043c6a0
add esp, 4
mov dword [esi + 0x248], 0xbb0967f
jmp 0x41cebe
mov dword [0x4d7678], 1
mov eax, dword [0x4d767c]
mov ecx, dword [esi + 0x24c]
mov dword [ecx], eax
mov dword [esi + 0x248], 0x8d70ebbf
jmp 0x41cebe
mov eax, 0x6046caf7
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, 0x60fe4690
mov ecx, dword [esi + 0x24c]
mov ecx, dword [ecx]
mov dword [esi + 0x288], ecx
mov dword [esi + 0x248], eax
jmp 0x41cebe
mov eax, dword [esi + 0x288]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, 0
mov ecx, 0x28
mov edx, 4
mov dword [esi + 0x58], eax
mov eax, edx
mov dword [esi + 0x54], edx
mov dword [esi + 0x50], ecx
call fcn.0043c5e0
mov eax, esp
mov ecx, dword [esi + 0x54]
mov dword [esi + 0x4c], eax
mov eax, ecx
call fcn.0043c5e0
mov eax, esp
mov ecx, dword [esi + 0x54]
mov dword [esi + 0x48], eax
mov eax, ecx
call fcn.0043c5e0
mov eax, esp
mov ecx, dword [esi + 0x54]
mov dword [esi + 0x44], eax
mov eax, ecx
call fcn.0043c5e0
mov eax, esp
mov ecx, 0x28
mov dword [esi + 0x40], eax
mov eax, ecx
mov dword [esi + 0x3c], ecx
call fcn.0043c5e0
mov eax, esp
mov ecx, dword [esi + 0x3c]
mov dword [esi + 0x38], eax
mov eax, ecx
call fcn.0043c5e0
mov eax, esp
mov ecx, dword [esi + 0x54]
mov dword [esi + 0x34], eax
mov eax, ecx
call fcn.0043c5e0
mov eax, esp
mov ecx, dword [esi + 0x54]
mov dword [esi + 0x30], eax
mov eax, ecx
call fcn.0043c5e0
mov eax, esp
mov ecx, 8
mov dword [esi + 0x2c], eax
mov eax, ecx
call fcn.0043c5e0
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
mov ecx, dword [esi + 0x54]
mov dword [esi + 0x28], eax
mov eax, ecx
call fcn.0043c5e0
mov eax, esp
mov ecx, dword [esi + 0x54]
mov dword [esi + 0x24], eax
mov eax, ecx
call fcn.0043c5e0
mov eax, esp
mov ecx, dword [esi + 0x54]
mov dword [esi + 0x20], eax
mov eax, ecx
call fcn.0043c5e0
mov eax, esp
mov ecx, dword [esi + 0x54]
mov dword [esi + 0x1c], eax
mov eax, ecx
call fcn.0043c5e0
mov eax, esp
mov ecx, dword [esi + 0x48]
mov edx, dword [esi + 0x244]
mov dword [ecx], edx
mov edi, dword [esi + 0x44]
mov dword [edi], 0
mov ebx, dword [esi + 0x40]
mov dword [ebx], 0
mov ecx, dword [esi + 0x38]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
mov dword [esi + 0x18], eax
call fcn.0043c610
add esp, 0xc
mov eax, dword [esi + 0x34]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x28
call fcn.0043c610
add esp, 0xc
mov eax, dword [esi + 0x30]
mov dword [eax], 0
mov ecx, dword [esi + 0x2c]
mov dword [ecx], 0
mov edx, dword [0x492140]
mov edi, dword [esi + 0x28]
mov dword [edi], edx
mov di, word [0x492144]
mov edx, dword [esi + 0x28]
mov word [edx + 4], di
mov ebx, dword [esi + 0x18]
mov dword [ebx], 0
mov dword [esi + 0x248], 0x59d3beec
jmp 0x41cebe
mov eax, dword [0x4d767c]
mov ecx, dword [esi + 0x24c]
mov dword [ecx], eax
mov dword [esi + 0x248], 0x97c306f8
jmp 0x41cebe
mov eax, dword [0x4d8614]
mov ecx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [esi + 0x14], eax
call ecx
mov ecx, dword [esi + 0x268]
sub esp, 0xc
mov edx, esp
mov dword [edx + 8], ecx
mov dword [edx], eax
mov dword [edx + 4], 0x2000000
mov eax, dword [esi + 0x14]
call eax
mov dword [esi + 0x248], 0xe1c10a15
mov dword [esi + 0x10], eax
jmp 0x41cebe
mov eax, dword [esi + 0x268]
mov eax, dword [eax]
sub esp, 4
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [sym.imp.KERNEL32.dll_CloseHandle]
call eax
mov ecx, dword [esi + 0x24c]
mov dword [ecx], 0xffffffff
mov dword [esi + 0x248], 0x112f5daf
mov dword [esi + 0xc], eax
jmp 0x41cebe
mov eax, dword [esi + 0x264]
mov eax, dword [eax]
mov ecx, dword [esi + 0x254]
mov dword [ecx], eax
mov eax, dword [0x4d860c]
mov ecx, dword [esi + 0x254]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
mov edx, dword [esi + 0x258]
sub esp, 8
mov edi, esp
mov dword [edi + 4], edx
mov dword [edi], ecx
call eax
mov dword [esi + 0x248], 0xb03060af
mov dword [esi + 8], eax
jmp 0x41cebe
mov dword [0x4d767c], 1
mov dword [esi + 0x248], 0x5d277127
jmp 0x41cebe
mov dword [esi + 0x248], 0x9ade76dc
jmp 0x41cebe
mov dword [esi + 0x248], 0xd8386384
jmp 0x41cebe
mov eax, dword [0x4d8600]
mov ecx, dword [esi + 0x270]
mov ecx, dword [ecx]
sub esp, 4
mov edx, esp
mov dword [edx], ecx
call eax
mov dword [esi + 0x248], 0x4ccbe3d1
mov dword [esi + 4], eax
jmp 0x41cebe
mov eax, dword [esi + 0x24c]
mov dword [esi + 0x248], 0x6046caf7
mov dword [esi], eax
jmp 0x41b6b7