Function at 0x41eb20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x5c
push ebx
push ebp
push esi
push edi
mov edi, ecx
lea eax, [esp + 0x5c]
push eax
mov dword [esp + 0x24], edi
mov ecx, dword [edi + 0x20]
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov esi, dword [esp + 0x64]
mov ecx, dword [esp + 0x5c]
mov ebx, dword [esp + 0x68]
mov edx, dword [esp + 0x60]
sub esi, ecx
sub ebx, edx
cmp esi, 1
mov dword [esp + 0x10], ebx
mov eax, 1
jl 0x41eb60
mov eax, esi
push 8
lea ecx, [edi + 0x5b4]
push 1
push eax
mov dword [esp + 0x54], ecx
call fcn.0041e530
cmp ebx, 1
mov eax, 1
jl 0x41eb80
mov eax, ebx
push 8
lea ecx, [edi + 0x5f8]
push eax
push 1
mov dword [esp + 0x58], ecx
call fcn.0041e530
push 8
lea ecx, [edi + 0x4a4]
push ebx
push esi
mov dword [esp + 0x50], ecx
call fcn.0041e530
mov edi, dword [sym.imp.USER32.dll_GetSysColor]
push 0x14
call edi
push 0xf
mov dword [esp + 0x44], eax
call edi
push 0x10
mov ebx, eax
call edi
mov ecx, ebx
mov edi, eax
and ecx, 0xff
and edi, 0xff
mov dword [esp + 0x3c], ecx
xor ecx, ecx
mov cl, ah
xor edx, edx
mov ebp, ecx
xor ecx, ecx
mov cl, bh
and ebp, 0xff
shr eax, 0x10
and ecx, 0xff
and eax, 0xff
mov dword [esp + 0x38], ecx
mov ecx, eax
neg ecx
mov dword [esp + 0x58], ecx
mov ecx, ebp
neg ecx
mov dword [esp + 0x54], ecx
mov ecx, edi
shr ebx, 0x10
and ebx, 0xff
mov dword [esp + 0x14], edx
neg ecx
shl eax, 7
shl ebp, 7
shl edi, 7
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], edx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], edx
mov dword [esp + 0x50], ecx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], ebp
mov dword [esp + 0x18], edi
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x24]
add eax, edx
mov ecx, dword [esp + 0x28]
cdq
and edx, 0x7f
add eax, edx
mov edx, dword [esp + 0x1c]
mov edi, eax
lea eax, [ecx + edx]
mov ecx, dword [esp + 0x30]
cdq
and edx, 0x7f
add eax, edx
mov ebp, eax
mov eax, dword [esp + 0x2c]
add eax, ecx
mov ecx, dword [esp + 0x44]
cdq
and edx, 0x7f
add eax, edx
mov edx, dword [esp + 0x14]
mov ebx, eax
sar ebx, 7
sar ebp, 7
sar edi, 7
push ebx
push ebp
push edi
push edx
call fcn.0041e890
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x48]
push ebx
push ebp
push edi
push eax
call fcn.0041e890
mov ecx, dword [esp + 0x4c]
push ebx
push ebp
push edi
mov edi, dword [esp + 0x20]
push edi
call fcn.0041e890
mov ecx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x24]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x1c]
add ebp, ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x24], ebp
mov ebp, dword [esp + 0x28]
add ecx, eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x54]
add ebx, edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x1c], ebx
mov ebx, dword [esp + 0x2c]
add ebp, ecx
mov ecx, dword [esp + 0x30]
inc edi
add ebx, edx
add ecx, eax
cmp edi, 0x81
mov dword [esp + 0x14], edi
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ecx
jl 0x41ec41
mov eax, dword [esp + 0x40]
mov edi, dword [esp + 0x34]
xor edx, edx
mov ecx, eax
mov dl, ah
and ecx, 0xff
shr eax, 0x10
and eax, 0xff
and edx, 0xff
mov dword [esp + 0x44], eax
mov dword [esp + 0x18], eax
mov eax, edi
mov dword [esp + 0x54], edx
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x38]
neg eax
mov dword [esp + 0x48], eax
mov eax, edx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x14], 1
neg eax
mov dword [esp + 0x4c], eax
mov eax, ecx
neg eax
mov dword [esp + 0x50], eax
mov eax, edi
shl eax, 7
sub eax, edi
mov dword [esp + 0x1c], eax
mov eax, edx
shl eax, 7
sub eax, edx
mov dword [esp + 0x24], eax
mov eax, ecx
shl eax, 7
sub eax, ecx
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x30]
lea eax, [ecx + edx]
mov ecx, dword [esp + 0x2c]
cdq
and edx, 0x7f
add eax, edx
mov edi, eax
mov eax, dword [esp + 0x24]
add eax, ecx
mov ecx, dword [esp + 0x20]
cdq
and edx, 0x7f
add ecx, 0x4a4
add eax, edx
mov edx, dword [esp + 0x1c]
mov ebp, eax
mov eax, dword [esp + 0x18]
add eax, edx
cdq
and edx, 0x7f
add eax, edx
mov ebx, eax
mov al, byte [esp + 0x14]
sar ebx, 7
sar ebp, 7
sar edi, 7
push ebx
add al, 0x7f
push ebp
push edi
push eax
mov byte [esp + 0x4c], al
call fcn.0041e890
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x3c]
push ebx
push ebp
push edi
push edx
lea ecx, [eax + 0x5b4]
call fcn.0041e890
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x20]
push ebx
push ebp
push edi
push ecx
lea ecx, [edx + 0x5f8]
call fcn.0041e890
mov ecx, dword [esp + 0x58]
mov ebx, dword [esp + 0x30]
mov edx, dword [esp + 0x54]
mov edi, dword [esp + 0x2c]
mov ebp, dword [esp + 0x24]
mov eax, dword [esp + 0x14]
add ebx, ecx
mov ecx, dword [esp + 0x50]
add edi, edx
mov edx, dword [esp + 0x28]
add edx, ecx
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x30], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 0x18]
add ebp, edx
mov edx, dword [esp + 0x44]
inc eax
add ebx, ecx
add edi, edx
cmp eax, 0x81
mov dword [esp + 0x14], eax
mov dword [esp + 0x24], ebp
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x18], edi
jl 0x41ed9c
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x80]
mov ebp, dword [esp + 0x20]
and eax, 0xff
push eax
push ecx
lea ecx, [ebp + 0x4a4]
call fcn.0041e6b0
lea edi, [ebp + 0x5b4]
mov ecx, edi
call fcn.0041e660
mov ecx, edi
mov ebx, eax
call fcn.0041e680
xor ecx, ecx
test eax, eax
jle 0x41eee5
mov edx, ecx
and edx, reloc.C2kAgent.dll_Ordinal_1
jns 0x41eedb
dec edx
or edx, 0xfffffffe
inc edx
neg dl
mov byte [ebx + ecx], dl
inc ecx
cmp ecx, eax
jl 0x41eecc
lea ebx, [ebp + 0x5f8]
mov ecx, ebx
call fcn.0041e660
mov ecx, ebx
mov edi, eax
call fcn.0041e690
xor ecx, ecx
test eax, eax
jle 0x41ef1c
mov edx, ecx
and edx, reloc.C2kAgent.dll_Ordinal_1
jns 0x41ef10
dec edx
or edx, 0xfffffffe
inc edx
neg dl
mov byte [edi], dl
add edi, 4
inc ecx
cmp ecx, eax
jl 0x41ef01
add ebp, 0x4a4
mov ecx, ebp
call fcn.0041e6a0
mov ecx, ebp
mov dword [esp + 0x80], eax
call fcn.0041e660
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x14], eax
and ecx, 0xff
mov edi, eax
mov dword [esp + 0x1c], ecx
mov ebx, 1
lea eax, [ecx + ecx]
cmp eax, 1
jl 0x41ef5a
mov ebx, eax
mov eax, 0x7fff
cdq
idiv ebx
mov edx, dword [esp + 0x70]
mov dword [esp + 0x7c], eax
mov eax, 0xff
sub eax, ecx
dec edx
cmp edx, 7
mov dword [esp + 0x28], eax
ja case.default.0x41ef7f
jmp dword [edx*4 + 0x41f828]
push 0
mov ecx, ebp
call fcn.0041e7a0
mov eax, 0x7fff
mov dword [esp + 0x38], 0xc8
cdq
idiv esi
mov dword [esp + 0x58], eax
mov eax, 0x7fff
cdq
idiv dword [esp + 0x10]
mov dword [esp + 0x54], eax
mov edi, dword [sym.imp.MSVCRT.dll_rand]
call edi
cdq
idiv dword [esp + 0x58]
mov dword [esp + 0x24], eax
call edi
cdq
idiv dword [esp + 0x54]
mov ebx, dword [esp + 0x10]
cmp esi, ebx
mov ebp, eax
jge 0x41efd5
mov ebx, esi
mov edi, dword [sym.imp.MSVCRT.dll_rand]
call edi
mov ecx, eax
mov eax, 0x7fff
cdq
idiv ebx
mov ebx, eax
mov eax, ecx
cdq
idiv ebx
cdq
sub eax, edx
mov ebx, eax
sar ebx, 1
call edi
mov ecx, eax
mov eax, 0xa00a00a1
imul ecx
add edx, ecx
xor edi, edi
sar edx, 9
mov eax, edx
shr eax, 0x1f
add edx, eax
test ebx, ebx
mov dword [esp + 0x70], edx
jle 0x41f0a5
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x74], ebp
sub ecx, ebp
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x74]
lea eax, [ecx + edx]
test eax, eax
jle 0x41f05e
mov edx, dword [esp + 0x10]
lea eax, [edi + ebp]
cmp eax, edx
jge 0x41f05e
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x24]
push ecx
push eax
mov eax, dword [esp + 0x28]
sub edx, edi
push edx
lea ecx, [eax + 0x4a4]
call fcn.0041e7e0
mov ecx, dword [esp + 0x3c]
lea edx, [ecx + ebp]
add edx, edi
cmp edx, esi
jge 0x41f097
mov eax, dword [esp + 0x74]
test eax, eax
jle 0x41f097
mov eax, dword [esp + 0x70]
mov edx, edi
push eax
mov eax, dword [esp + 0x28]
mov ecx, ebp
sub edx, eax
mov eax, dword [esp + 0x24]
sub ecx, edi
add edx, esi
push ecx
push edx
lea ecx, [eax + 0x4a4]
call fcn.0041e7e0
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x74]
inc edi
dec edx
cmp edi, ebx
mov dword [esp + 0x74], edx
jl 0x41f028
mov eax, dword [esp + 0x38]
dec eax
mov dword [esp + 0x38], eax
jne 0x41efb1
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x1c]
sub eax, edx
mov ecx, dword [esp + 0x10]
sub eax, 0x28
mov ebp, dword [esp + 0x14]
cdq
sub eax, edx
sar eax, 1
test ecx, ecx
mov dword [esp + 0x18], eax
jle 0x41f7d5
mov dword [esp + 0x74], 0
mov dword [esp + 0x3c], ecx
xor edi, edi
test esi, esi
jle 0x41f13d
mov eax, dword [esp + 0x74]
mov ebx, dword [esp + 0x18]
cdq
idiv dword [esp + 0x10]
mov dword [esp + 0x70], eax
mov eax, ebx
neg eax
imul ebx, esi
mov dword [esp + 0x58], eax
mov eax, ebx
mov cl, byte [esp + 0x70]
cdq
idiv esi
mov dl, byte [edi + ebp]
add al, cl
add dl, al
mov byte [edi + ebp], dl
call dword [sym.imp.MSVCRT.dll_rand]
cdq
idiv dword [esp + 0x7c]
mov cl, byte [edi + ebp]
add cl, al
mov byte [edi + ebp], cl
mov ecx, dword [esp + 0x58]
inc edi
add ebx, ecx
cmp edi, esi
jl 0x41f108
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x80]
mov edx, dword [esp + 0x74]
mov ecx, dword [esp + 0x3c]
add ebp, edi
add edx, eax
dec ecx
mov dword [esp + 0x74], edx
mov dword [esp + 0x3c], ecx
jne 0x41f0e6
jmp 0x41f7d5
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x41f218
mov ecx, dword [esp + 0x1c]
mov eax, 0x40
sub eax, ecx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x58], eax
mov dword [esp + 0x70], 0
mov dword [esp + 0x3c], ecx
mov eax, dword [esp + 0x70]
xor ebp, ebp
cdq
idiv dword [esp + 0x10]
mov ecx, eax
sub ecx, 0x7f
mov eax, ecx
imul eax, ecx
imul eax, ecx
cdq
and edx, 0x7f
add eax, edx
sar eax, 7
cdq
and edx, 0x7f
add eax, edx
sar eax, 7
imul eax, dword [esp + 0x58]
shl eax, 1
cdq
and edx, 0x7f
add eax, edx
mov ebx, eax
sar ebx, 7
add ebx, 0x80
test esi, esi
jle 0x41f1f2
mov byte [edi + ebp], bl
call dword [sym.imp.MSVCRT.dll_rand]
cdq
idiv dword [esp + 0x7c]
mov cl, byte [esp + 0x74]
mov dl, byte [edi + ebp]
sub al, cl
add dl, al
mov byte [edi + ebp], dl
inc ebp
cmp ebp, esi
jl 0x41f1d1
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x3c]
add edi, edx
add ecx, 0xff
dec eax
mov dword [esp + 0x70], ecx
mov dword [esp + 0x3c], eax
jne 0x41f18b
mov eax, 0x2aaaaaab
mov dword [esp + 0x70], 0x10
imul esi
mov eax, edx
shr eax, 0x1f
add edx, eax
cmp edx, 0x10
jg 0x41f237
mov dword [esp + 0x70], edx
mov edi, dword [esp + 0x10]
mov ebp, dword [esp + 0x14]
mov eax, edi
xor ecx, ecx
imul eax, edi
cdq
and edx, 3
mov dword [esp + 0x14], ecx
add eax, edx
sar eax, 2
test edi, edi
mov dword [esp + 0x18], eax
jle 0x41f7d5
mov eax, edi
mov edi, dword [esp + 0x70]
cdq
sub eax, edx
mov dword [esp + 0x2c], ecx
sar eax, 1
imul edi, eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x58], edi
jmp 0x41f27f
mov edi, dword [esp + 0x58]
mov edx, dword [esp + 0x2c]
mov ebx, ecx
sub edx, edi
sub ebx, eax
xor edi, edi
mov dword [esp + 0x54], edx
test esi, esi
jle 0x41f345
mov eax, esi
mov dword [esp + 0x30], edi
cdq
sub eax, edx
mov ecx, eax
mov eax, dword [esp + 0x54]
imul eax, ebx
cdq
idiv dword [esp + 0x18]
mov edx, dword [esp + 0x70]
mov ebx, esi
sar ecx, 1
mov dword [esp + 0x50], ecx
sub eax, edx
add eax, ecx
mov dword [esp + 0x3c], eax
shl ebx, 7
jmp 0x41f2cf
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x3c]
mov edx, edi
sub edx, ecx
cmp edx, eax
mov dword [esp + 0x24], edx
jle 0x41f2f3
mov eax, ebx
mov cl, byte [esp + 0x1c]
cdq
idiv dword [esp + 0x70]
mov edx, dword [esp + 0x24]
add al, cl
mov byte [edi + ebp], al
mov eax, dword [esp + 0x3c]
add eax, edx
test eax, eax
jge 0x41f30b
mov eax, dword [esp + 0x30]
mov cl, byte [esp + 0x28]
cdq
idiv dword [esp + 0x70]
sub cl, al
mov byte [edi + ebp], cl
call dword [sym.imp.MSVCRT.dll_rand]
cdq
idiv dword [esp + 0x7c]
mov dl, byte [esp + 0x74]
mov cl, byte [edi + ebp]
sub ebx, 0x80
sub al, dl
add cl, al
mov byte [edi + ebp], cl
mov ecx, dword [esp + 0x30]
inc edi
add ecx, 0x80
cmp edi, esi
mov dword [esp + 0x30], ecx
jl 0x41f2c7
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x80]
mov edi, dword [esp + 0x2c]
add ebp, edx
mov edx, dword [esp + 0x70]
add edi, edx
mov edx, dword [esp + 0x10]
inc ecx
mov dword [esp + 0x2c], edi
cmp ecx, edx
mov dword [esp + 0x14], ecx
jl 0x41f27b
jmp 0x41f7d5
mov ebx, dword [esp + 0x10]
test ebx, ebx
jle 0x41f7d5
mov dword [esp + 0x70], 0
mov dword [esp + 0x3c], ebx
mov eax, dword [esp + 0x70]
xor ebp, ebp
cdq
idiv ebx
mov ecx, eax
sub ecx, 0x7f
test esi, esi
jle 0x41f450
mov eax, ecx
mov ebx, esi
imul eax, ecx
imul eax, ecx
cdq
and edx, 0x7f
add eax, edx
sar eax, 7
cdq
and edx, 0x7f
add eax, edx
mov edx, dword [esp + 0x1c]
sar eax, 7
mov dword [esp + 0x58], eax
mov eax, 0x80
sub eax, edx
shl ebx, 8
mov dword [esp + 0x24], eax
sub ebx, esi
mov eax, ebx
cdq
idiv esi
mov ecx, eax
sub ecx, 0x7f
mov eax, ecx
imul eax, ecx
imul eax, ecx
cdq
and edx, 0x7f
mov ecx, dword [esp + 0x1c]
add eax, edx
sar eax, 7
cdq
and edx, 0x7f
add eax, edx
mov edx, dword [esp + 0x58]
sar eax, 7
add eax, edx
imul eax, dword [esp + 0x24]
cdq
and edx, 0x7f
add eax, edx
sar eax, 7
add eax, 0x80
cmp eax, ecx
jge 0x41f41b
mov eax, ecx
mov ecx, dword [esp + 0x28]
cmp eax, ecx
jle 0x41f425
mov eax, ecx
mov byte [edi + ebp], al
call dword [sym.imp.MSVCRT.dll_rand]
cdq
idiv dword [esp + 0x7c]
mov dl, byte [esp + 0x74]
mov cl, byte [edi + ebp]
sub ebx, 0xff
sub al, dl
add cl, al
mov byte [edi + ebp], cl
inc ebp
cmp ebp, esi
jl 0x41f3d4
mov ebx, dword [esp + 0x10]
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x3c]
add edi, edx
add ecx, 0xff
dec eax
mov dword [esp + 0x70], ecx
mov dword [esp + 0x3c], eax
jne 0x41f38a
jmp 0x41f7d5
test esi, esi
mov dword [esp + 0x70], 0
jle 0x41f7d5
mov edi, esi
mov ebp, 0x80
shl edi, 8
sub ebp, ecx
sub edi, esi
mov dword [esp + 0x24], ebp
mov dword [esp + 0x3c], edi
mov eax, edi
cdq
idiv esi
mov ecx, eax
sub ecx, 0x7f
mov eax, ecx
imul eax, ecx
imul eax, ecx
cdq
and edx, 0x7f
add eax, edx
sar eax, 7
cdq
and edx, 0x7f
add eax, edx
sar eax, 7
imul eax, ebp
cdq
and edx, 0x7f
add eax, edx
mov ebx, eax
mov eax, dword [esp + 0x10]
sar ebx, 7
add ebx, 0x80
test eax, eax
jle 0x41f51d
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x70]
mov ebp, dword [esp + 0x10]
lea edi, [ecx + eax]
mov byte [edi], bl
call dword [sym.imp.MSVCRT.dll_rand]
cdq
idiv dword [esp + 0x7c]
mov cl, byte [esp + 0x74]
mov dl, byte [edi]
sub al, cl
mov ecx, dword [esp + 0x80]
add dl, al
mov byte [edi], dl
add edi, ecx
dec ebp
jne 0x41f4f0
mov edi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x24]
mov eax, dword [esp + 0x70]
sub edi, 0xff
inc eax
mov dword [esp + 0x3c], edi
cmp eax, esi
mov dword [esp + 0x70], eax
jl 0x41f4a1
jmp 0x41f7d5
mov edx, dword [esp + 0x10]
test edx, edx
jle 0x41f7d5
mov eax, 0x80
mov dword [esp + 0x70], 0
sub eax, ecx
mov dword [esp + 0x3c], edx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x70]
xor ebp, ebp
cdq
idiv dword [esp + 0x10]
mov ecx, eax
sub ecx, 0x7f
mov eax, ecx
imul eax, ecx
imul eax, ecx
cdq
and edx, 0x7f
add eax, edx
sar eax, 7
cdq
and edx, 0x7f
add eax, edx
sar eax, 7
imul eax, dword [esp + 0x24]
cdq
and edx, 0x7f
add eax, edx
mov ebx, eax
sar ebx, 7
add ebx, 0x80
test esi, esi
jle 0x41f5c5
mov byte [edi + ebp], bl
call dword [sym.imp.MSVCRT.dll_rand]
cdq
idiv dword [esp + 0x7c]
mov cl, byte [esp + 0x74]
mov dl, byte [edi + ebp]
sub al, cl
add dl, al
mov byte [edi + ebp], dl
inc ebp
cmp ebp, esi
jl 0x41f5a4
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x3c]
add edi, edx
add ecx, 0xff
dec eax
mov dword [esp + 0x70], ecx
mov dword [esp + 0x3c], eax
jne 0x41f560
jmp 0x41f7d5
sub eax, ecx
mov ecx, dword [esp + 0x10]
cdq
sub eax, edx
sar eax, 1
test ecx, ecx
mov dword [esp + 0x18], eax
jle 0x41f7d5
mov dword [esp + 0x30], 0
mov dword [esp + 0x3c], ecx
xor ebp, ebp
test esi, esi
jle 0x41f66f
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x18]
cdq
idiv dword [esp + 0x10]
mov dword [esp + 0x70], eax
mov eax, ebx
neg eax
imul ebx, esi
mov dword [esp + 0x58], eax
mov eax, ebx
mov cl, byte [esp + 0x1c]
cdq
idiv esi
add al, byte [esp + 0x70]
add al, cl
mov byte [edi + ebp], al
call dword [sym.imp.MSVCRT.dll_rand]
cdq
idiv dword [esp + 0x7c]
mov dl, byte [esp + 0x74]
mov cl, byte [edi + ebp]
sub al, dl
add cl, al
mov byte [edi + ebp], cl
mov ecx, dword [esp + 0x58]
inc ebp
add ebx, ecx
cmp ebp, esi
jl 0x41f635
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x80]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x3c]
add edi, ebx
add edx, eax
dec ecx
mov dword [esp + 0x30], edx
mov dword [esp + 0x3c], ecx
jne 0x41f613
jmp 0x41f7d5
sub eax, ecx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x41f7d5
mov dword [esp + 0x70], 0
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x1c]
cdq
idiv dword [esp + 0x10]
xor ebp, ebp
mov ebx, eax
add ebx, ecx
test esi, esi
jle 0x41f6e8
mov byte [edi + ebp], bl
call dword [sym.imp.MSVCRT.dll_rand]
cdq
idiv dword [esp + 0x7c]
mov cl, byte [esp + 0x74]
mov dl, byte [edi + ebp]
sub al, cl
add dl, al
mov byte [edi + ebp], dl
inc ebp
cmp ebp, esi
jl 0x41f6c7
mov edx, dword [esp + 0x80]
mov ecx, dword [esp + 0x70]
mov eax, dword [esp + 0x3c]
add edi, edx
mov edx, dword [esp + 0x18]
add ecx, edx
dec eax
mov dword [esp + 0x70], ecx
mov dword [esp + 0x3c], eax
jne 0x41f6b0
jmp 0x41f7d5
sub eax, ecx
mov dword [esp + 0x70], 0
test esi, esi
jle 0x41f7d5
mov ecx, eax
neg ecx
imul eax, esi
mov dword [esp + 0x58], ecx
mov dword [esp + 0x3c], eax
cdq
idiv esi
mov edx, dword [esp + 0x1c]
mov ebx, eax
mov eax, dword [esp + 0x10]
add ebx, edx
test eax, eax
jle 0x41f77b
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x70]
mov ebp, dword [esp + 0x10]
lea edi, [ecx + eax]
mov byte [edi], bl
call dword [sym.imp.MSVCRT.dll_rand]
cdq
idiv dword [esp + 0x7c]
mov cl, byte [esp + 0x74]
mov dl, byte [edi]
sub al, cl
mov ecx, dword [esp + 0x80]
add dl, al
mov byte [edi], dl
add edi, ecx
dec ebp
jne 0x41f752
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0x70]
mov eax, dword [esp + 0x3c]
inc edx
add eax, ecx
cmp edx, esi
mov dword [esp + 0x70], edx
mov dword [esp + 0x3c], eax
jl 0x41f730
jmp 0x41f7d5
mov eax, dword [esp + 0x10]
test eax, eax
jle 0x41f7d5
mov ebx, dword [sym.imp.MSVCRT.dll_rand]
mov dword [esp + 0x70], eax
xor ebp, ebp
test esi, esi
jle 0x41f7c1
call ebx
cdq
idiv dword [esp + 0x7c]
sub al, byte [esp + 0x74]
add al, 0x80
mov byte [edi + ebp], al
inc ebp
cmp ebp, esi
jl 0x41f7ac
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x70]
add edi, ecx
dec eax
mov dword [esp + 0x70], eax
jne 0x41f7a6
mov ebx, dword [esp + 0x20]
lea edi, [ebx + 0x4a4]
lea ecx, [ebx + 0x52c]
push edi
call fcn.0041e830
lea esi, [ebx + 0x570]
push edi
mov ecx, esi
call fcn.0041e830
mov edx, dword [esp + 0x78]
mov eax, dword [esp + 0x40]
and edx, 0xff
mov ecx, esi
push edx
push eax
call fcn.0041e6b0
push esi
lea ecx, [ebx + 0x4e8]
call fcn.0041e830
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret 0x14