Function at 0x41c190
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4c326d
mov eax, dword fs:[0]
push eax
sub esp, 0x5f0
mov eax, dword [0x570f20]
xor eax, esp
mov dword [esp + 0x5ec], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x570f20]
xor eax, esp
push eax
lea eax, [esp + 0x604]
mov dword fs:[0], eax
pxor xmm0, xmm0
lea eax, [esp + 0x48]
mov esi, ecx
mov ecx, dword [0x6bb3dc]
push eax
push ecx
movq qword [esp + 0x54], xmm0
movq qword [esp + 0x5c], xmm0
movq qword [esp + 0x64], xmm0
movq qword [esp + 0x6c], xmm0
movq qword [esp + 0x74], xmm0
mov dword [esp + 0x50], 0x2c
call dword [sym.imp.USER32.dll_GetWindowPlacement]
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x68]
mov dword [0x5723b4], edx
mov edx, dword [esp + 0x6c]
sub edx, eax
mov dword [0x6bb4cc], eax
mov eax, dword [esp + 0x70]
sub eax, ecx
xor ebx, ebx
mov dword [0x6bb4d0], ecx
mov dword [0x6bb4d4], edx
mov dword [0x6bb4d8], eax
cmp byte [esi + 0x97d], bl
je 0x41c278
movq xmm0, qword [str.x64_settings.ini]
mov cl, byte [0x4c6fe0]
movq qword [esp + 0x5ec], xmm0
movq xmm0, qword [0x4c6fd8]
movq qword [esp + 0x5f4], xmm0
mov byte [esp + 0x5fc], cl
jmp 0x41c2a3
mov edx, dword [0x4c6fc8]
mov cl, byte [0x4c6fcc]
movq xmm0, qword [str.settings.ini]
movq qword [esp + 0x5ec], xmm0
mov dword [esp + 0x5f4], edx
mov byte [esp + 0x5f8], cl
push eax
lea edx, [esp + 0x5d4]
push edx
call fcn.004121c0
mov edi, eax
mov eax, dword [0x6bb4d4]
push eax
lea ecx, [esp + 0x5a4]
push ecx
mov dword [esp + 0x61c], ebx
call fcn.004121c0
mov ebp, eax
mov edx, dword [0x6bb4d0]
push edx
lea eax, [esp + 0x574]
push eax
mov byte [esp + 0x624], 1
call fcn.004121c0
mov dword [esp + 0x2c], eax
mov ecx, dword [0x6bb4cc]
push ecx
lea edx, [esp + 0x544]
push edx
mov byte [esp + 0x62c], 2
call fcn.004121c0
mov dword [esp + 0x58], eax
mov eax, dword [0x5723b4]
push eax
lea ecx, [esp + 0x514]
push ecx
mov byte [esp + 0x634], 3
call fcn.004121c0
mov dword [esp + 0x58], eax
mov edx, dword [0x570138]
push edx
lea eax, [esp + 0x4e4]
push eax
mov byte [esp + 0x63c], 4
call fcn.004121c0
mov dword [esp + 0x58], eax
mov ecx, dword [0x570120]
push ecx
lea edx, [esp + 0x4b4]
push edx
mov byte [esp + 0x644], 5
call fcn.004121c0
mov dword [esp + 0x58], eax
mov eax, dword [esi + 0x9c]
push eax
lea ecx, [esp + 0x484]
push ecx
mov byte [esp + 0x64c], 6
call fcn.004121c0
add esp, 0x40
mov dword [esp + 0x1c], eax
mov edx, dword [esi + 0x98]
push edx
lea eax, [esp + 0x414]
push eax
mov byte [esp + 0x614], 7
call fcn.004121c0
mov dword [esp + 0x20], eax
movzx ecx, byte [esi + 0x98b]
push ecx
lea edx, [esp + 0x3e4]
push edx
mov byte [esp + 0x61c], 8
call fcn.004117f0
mov dword [esp + 0x3c], eax
movzx eax, byte [esi + 0x988]
mov byte [esp + 0x61c], 9
push eax
lea ecx, [esp + 0x3b4]
push ecx
call fcn.004117f0
mov dword [esp + 0x54], eax
mov edx, dword [esi + 0x38]
push edx
lea eax, [esp + 0x384]
push eax
mov byte [esp + 0x62c], 0xa
call fcn.004121c0
mov dword [esp + 0x44], eax
movzx ecx, byte [esi + 0x98e]
push ecx
lea edx, [esp + 0x354]
push edx
mov byte [esp + 0x634], 0xb
call fcn.004117f0
mov dword [esp + 0x5c], eax
mov eax, dword [0x570140]
push eax
lea ecx, [esp + 0x324]
push ecx
mov byte [esp + 0x63c], 0xc
call fcn.004121c0
mov dword [esp + 0x74], eax
mov edx, dword [0x57013c]
push edx
lea eax, [esp + 0x2f4]
push eax
mov byte [esp + 0x644], 0xd
call fcn.004121c0
mov dword [esp + 0x78], eax
mov ecx, dword [esi + 0x34]
push ecx
lea edx, [esp + 0x2a8]
push edx
mov byte [esp + 0x64c], 0xe
call fcn.004121c0
add esp, 0x40
push eax
lea eax, [esp + 0x238]
push str.device
push eax
mov byte [esp + 0x618], 0xf
call fcn.00411b80
push str._ndef_duration
push eax
lea ecx, [esp + 0x210]
push ecx
mov byte [esp + 0x624], 0x10
call fcn.00411cb0
mov edx, dword [esp + 0x58]
push edx
push eax
lea eax, [esp + 0x1e4]
push eax
mov byte [esp + 0x630], 0x11
call fcn.00411d00
push str._ndef_volume
push eax
lea ecx, [esp + 0x1b8]
push ecx
mov byte [esp + 0x63c], 0x12
call fcn.00411cb0
mov edx, dword [esp + 0x74]
push edx
push eax
lea eax, [esp + 0x18c]
mov byte [esp + 0x644], 0x13
push eax
call fcn.00411d00
push str._nmore
push eax
lea ecx, [esp + 0x160]
push ecx
mov byte [esp + 0x654], 0x14
call fcn.00411cb0
add esp, 0x48
mov edx, dword [esp + 0x34]
push edx
push eax
lea eax, [esp + 0xec]
push eax
mov byte [esp + 0x618], 0x15
call fcn.00411d00
push str._nstart
push eax
lea ecx, [esp + 0xc0]
push ecx
mov byte [esp + 0x624], 0x16
call fcn.00411cb0
mov edx, dword [esp + 0x3c]
push edx
push eax
lea eax, [esp + 0xb0]
push eax
mov byte [esp + 0x630], 0x17
call fcn.00411d00
push str._nassociate
push eax
lea ecx, [esp + 0x5a8]
push ecx
mov byte [esp + 0x63c], 0x18
call fcn.00411cb0
mov edx, dword [esp + 0x6c]
push edx
push eax
lea eax, [esp + 0x34c]
push eax
mov byte [esp + 0x648], 0x19
call fcn.00411d00
push str._nallow_send
push eax
lea ecx, [esp + 0x4a8]
push ecx
mov byte [esp + 0x654], 0x1a
call fcn.00411cb0
add esp, 0x48
mov edx, dword [esp + 0x2c]
push edx
push eax
lea eax, [esp + 0x2e4]
push eax
mov byte [esp + 0x618], 0x1b
call fcn.00411d00
push str._nhistory
push eax
lea ecx, [esp + 0x520]
push ecx
mov byte [esp + 0x624], 0x1c
call fcn.00411cb0
mov edx, dword [esp + 0x30]
push edx
push eax
lea eax, [esp + 0x2a8]
push eax
mov byte [esp + 0x630], 0x1d
call fcn.00411d00
mov byte [esp + 0x630], 0x1e
push str._nhistory_all
push eax
lea ecx, [esp + 0xa0]
push ecx
call fcn.00411cb0
mov edx, dword [esp + 0x4c]
push edx
push eax
lea eax, [esp + 0x464]
push eax
mov byte [esp + 0x648], 0x1f
call fcn.00411d00
push str._nhistory_hold
push eax
lea ecx, [esp + 0x294]
push ecx
mov byte [esp + 0x654], 0x20
call fcn.00411cb0
add esp, 0x48
mov edx, dword [esp + 0x20]
push edx
push eax
lea eax, [esp + 0x5bc]
push eax
mov byte [esp + 0x618], 0x21
call fcn.00411d00
push str._nmenuh
push eax
lea ecx, [esp + 0x22c]
push ecx
mov byte [esp + 0x624], 0x22
call fcn.00411cb0
mov edx, dword [esp + 0x40]
push edx
push eax
lea eax, [esp + 0x414]
push eax
mov byte [esp + 0x630], 0x23
call fcn.00411d00
push str._nwinstate
push eax
lea ecx, [esp + 0x20c]
push ecx
mov byte [esp + 0x63c], 0x24
call fcn.00411cb0
mov edx, dword [esp + 0x60]
push edx
push eax
lea eax, [esp + 0x50c]
push eax
mov byte [esp + 0x648], 0x25
call fcn.00411d00
push str._nwinx
push eax
lea ecx, [esp + 0x1ec]
push ecx
mov byte [esp + 0x654], 0x26
call fcn.00411cb0
add esp, 0x48
mov edx, dword [esp + 0x38]
push edx
push eax
lea eax, [esp + 0x3c4]
push eax
mov byte [esp + 0x618], 0x27
call fcn.00411d00
push str._nwiny
push eax
lea ecx, [esp + 0x184]
push ecx
mov byte [esp + 0x624], 0x28
call fcn.00411cb0
mov edx, dword [esp + 0x2c]
push edx
push eax
lea eax, [esp + 0x564]
push eax
mov byte [esp + 0x630], 0x29
call fcn.00411d00
push str._nwinw
push eax
lea ecx, [esp + 0x164]
push ecx
mov byte [esp + 0x63c], 0x2a
call fcn.00411cb0
push ebp
push eax
lea edx, [esp + 0x3bc]
push edx
mov byte [esp + 0x648], 0x2b
call fcn.00411d00
push str._nwinh
push eax
lea eax, [esp + 0x144]
push eax
mov byte [esp + 0x654], 0x2c
call fcn.00411cb0
add esp, 0x48
push edi
push eax
lea ecx, [esp + 0x4a4]
push ecx
mov byte [esp + 0x618], 0x2d
call fcn.00411d00
push str._nopened_dir
push eax
lea edx, [esp + 0xdc]
push edx
mov byte [esp + 0x624], 0x2e
call fcn.00411cb0
lea ecx, [esi + 0x567]
push ecx
push eax
lea edx, [esp + 0x36c]
push edx
mov byte [esp + 0x630], 0x2f
call fcn.00411cb0
push str._nexport_dir
push eax
lea eax, [esp + 0x2d0]
push eax
mov byte [esp + 0x63c], 0x30
call fcn.00411cb0
add esp, 0x14
mov edx, esp
lea ecx, [esi + 0x771]
mov dword [esp + 0x30], esp
push ecx
push eax
push edx
mov byte [esp + 0x634], 0x31
call fcn.00411cb0
add esp, 0xc
lea eax, [esp + 0x608]
push eax
mov ecx, esi
call fcn.0041c070
cmp dword [esp + 0x2b8], 0x10
jb 0x41c876
mov ecx, dword [esp + 0x2a4]
push ecx
call fcn.004a684d
add esp, 4
mov edi, 0x10
mov esi, 0xf
mov dword [esp + 0x2b8], esi
mov dword [esp + 0x2b4], ebx
mov byte [esp + 0x2a4], bl
cmp dword [esp + 0x360], edi
jb 0x41c8ae
mov edx, dword [esp + 0x34c]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x360], esi
mov dword [esp + 0x35c], ebx
mov byte [esp + 0x34c], bl
cmp dword [esp + 0xdc], edi
jb 0x41c8dc
mov eax, dword [esp + 0xc8]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0xdc], esi
mov dword [esp + 0xd8], ebx
mov byte [esp + 0xc8], bl
cmp dword [esp + 0x4b0], edi
jb 0x41c90a
mov ecx, dword [esp + 0x49c]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x4b0], esi
mov dword [esp + 0x4ac], ebx
mov byte [esp + 0x49c], bl
cmp dword [esp + 0x114], edi
jb 0x41c938
mov edx, dword [esp + 0x100]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x114], esi
mov dword [esp + 0x110], ebx
mov byte [esp + 0x100], bl
cmp dword [esp + 0x398], edi
jb 0x41c966
mov eax, dword [esp + 0x384]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x398], esi
mov dword [esp + 0x394], ebx
mov byte [esp + 0x384], bl
cmp dword [esp + 0x14c], edi
jb 0x41c994
mov ecx, dword [esp + 0x138]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x14c], esi
mov dword [esp + 0x148], ebx
mov byte [esp + 0x138], bl
cmp dword [esp + 0x558], edi
jb 0x41c9c2
mov edx, dword [esp + 0x544]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x558], esi
mov dword [esp + 0x554], ebx
mov byte [esp + 0x544], bl
cmp dword [esp + 0x184], edi
jb 0x41c9f0
mov eax, dword [esp + 0x170]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x184], esi
mov dword [esp + 0x180], ebx
mov byte [esp + 0x170], bl
cmp dword [esp + 0x3d0], edi
jb 0x41ca1e
mov ecx, dword [esp + 0x3bc]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x3d0], esi
mov dword [esp + 0x3cc], ebx
mov byte [esp + 0x3bc], bl
cmp dword [esp + 0x1bc], edi
jb 0x41ca4c
mov edx, dword [esp + 0x1a8]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x1bc], esi
mov dword [esp + 0x1b8], ebx
mov byte [esp + 0x1a8], bl
cmp dword [esp + 0x4e8], edi
jb 0x41ca7a
mov eax, dword [esp + 0x4d4]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x4e8], esi
mov dword [esp + 0x4e4], ebx
mov byte [esp + 0x4d4], bl
cmp dword [esp + 0x1f4], edi
jb 0x41caa8
mov ecx, dword [esp + 0x1e0]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x1f4], esi
mov dword [esp + 0x1f0], ebx
mov byte [esp + 0x1e0], bl
cmp dword [esp + 0x408], edi
jb 0x41cad6
mov edx, dword [esp + 0x3f4]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x408], esi
mov dword [esp + 0x404], ebx
mov byte [esp + 0x3f4], bl
cmp dword [esp + 0x22c], edi
jb 0x41cb04
mov eax, dword [esp + 0x218]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x22c], esi
mov dword [esp + 0x228], ebx
mov byte [esp + 0x218], bl
cmp dword [esp + 0x5c8], edi
jb 0x41cb32
mov ecx, dword [esp + 0x5b4]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x5c8], esi
mov dword [esp + 0x5c4], ebx
mov byte [esp + 0x5b4], bl
cmp dword [esp + 0x264], edi
jb 0x41cb60
mov edx, dword [esp + 0x250]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x264], esi
mov dword [esp + 0x260], ebx
mov byte [esp + 0x250], bl
cmp dword [esp + 0x440], edi
jb 0x41cb8e
mov eax, dword [esp + 0x42c]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x440], esi
mov dword [esp + 0x43c], ebx
mov byte [esp + 0x42c], bl
cmp dword [esp + 0x88], edi
jb 0x41cbb9
mov ecx, dword [esp + 0x74]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x88], esi
mov dword [esp + 0x84], ebx
mov byte [esp + 0x74], bl
cmp dword [esp + 0x29c], edi
jb 0x41cbe4
mov edx, dword [esp + 0x288]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x29c], esi
mov dword [esp + 0x298], ebx
mov byte [esp + 0x288], bl
cmp dword [esp + 0x520], edi
jb 0x41cc12
mov eax, dword [esp + 0x50c]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x520], esi
mov dword [esp + 0x51c], ebx
mov byte [esp + 0x50c], bl
cmp dword [esp + 0x2f0], edi
jb 0x41cc40
mov ecx, dword [esp + 0x2dc]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x2f0], esi
mov dword [esp + 0x2ec], ebx
mov byte [esp + 0x2dc], bl
cmp dword [esp + 0x478], edi
jb 0x41cc6e
mov edx, dword [esp + 0x464]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x478], esi
mov dword [esp + 0x474], ebx
mov byte [esp + 0x464], bl
cmp dword [esp + 0x328], edi
jb 0x41cc9c
mov eax, dword [esp + 0x314]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x328], esi
mov dword [esp + 0x324], ebx
mov byte [esp + 0x314], bl
cmp dword [esp + 0x590], edi
jb 0x41ccca
mov ecx, dword [esp + 0x57c]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x590], esi
mov dword [esp + 0x58c], ebx
mov byte [esp + 0x57c], bl
cmp dword [esp + 0xa4], edi
jb 0x41ccf8
mov edx, dword [esp + 0x90]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
cmp dword [esp + 0xc0], edi
jb 0x41cd26
mov eax, dword [esp + 0xac]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0xc0], esi
mov dword [esp + 0xbc], ebx
mov byte [esp + 0xac], bl
cmp dword [esp + 0xf8], edi
jb 0x41cd54
mov ecx, dword [esp + 0xe4]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0xf8], esi
mov dword [esp + 0xf4], ebx
mov byte [esp + 0xe4], bl
cmp dword [esp + 0x130], edi
jb 0x41cd82
mov edx, dword [esp + 0x11c]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x130], esi
mov dword [esp + 0x12c], ebx
mov byte [esp + 0x11c], bl
cmp dword [esp + 0x168], edi
jb 0x41cdb0
mov eax, dword [esp + 0x154]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x168], esi
mov dword [esp + 0x164], ebx
mov byte [esp + 0x154], bl
cmp dword [esp + 0x1a0], edi
jb 0x41cdde
mov ecx, dword [esp + 0x18c]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x1a0], esi
mov dword [esp + 0x19c], ebx
mov byte [esp + 0x18c], bl
cmp dword [esp + 0x1d8], edi
jb 0x41ce0c
mov edx, dword [esp + 0x1c4]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x1d8], esi
mov dword [esp + 0x1d4], ebx
mov byte [esp + 0x1c4], bl
cmp dword [esp + 0x210], edi
jb 0x41ce3a
mov eax, dword [esp + 0x1fc]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x210], esi
mov dword [esp + 0x20c], ebx
mov byte [esp + 0x1fc], bl
cmp dword [esp + 0x248], edi
jb 0x41ce68
mov ecx, dword [esp + 0x234]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x248], esi
mov dword [esp + 0x244], ebx
mov byte [esp + 0x234], bl
cmp dword [esp + 0x280], edi
jb 0x41ce96
mov edx, dword [esp + 0x26c]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x280], esi
mov dword [esp + 0x27c], ebx
mov byte [esp + 0x26c], bl
cmp dword [esp + 0x2d4], edi
jb 0x41cec4
mov eax, dword [esp + 0x2c0]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x2d4], esi
mov dword [esp + 0x2d0], ebx
mov byte [esp + 0x2c0], bl
cmp dword [esp + 0x30c], edi
jb 0x41cef2
mov ecx, dword [esp + 0x2f8]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x30c], esi
mov dword [esp + 0x308], ebx
mov byte [esp + 0x2f8], bl
cmp dword [esp + 0x344], edi
jb 0x41cf20
mov edx, dword [esp + 0x330]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x344], esi
mov dword [esp + 0x340], ebx
mov byte [esp + 0x330], bl
cmp dword [esp + 0x37c], edi
jb 0x41cf4e
mov eax, dword [esp + 0x368]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x37c], esi
mov dword [esp + 0x378], ebx
mov byte [esp + 0x368], bl
cmp dword [esp + 0x3b4], edi
jb 0x41cf7c
mov ecx, dword [esp + 0x3a0]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x3b4], esi
mov dword [esp + 0x3b0], ebx
mov byte [esp + 0x3a0], bl
cmp dword [esp + 0x3ec], edi
jb 0x41cfaa
mov edx, dword [esp + 0x3d8]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x3ec], esi
mov dword [esp + 0x3e8], ebx
mov byte [esp + 0x3d8], bl
cmp dword [esp + 0x424], edi
jb 0x41cfd8
mov eax, dword [esp + 0x410]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x424], esi
mov dword [esp + 0x420], ebx
mov byte [esp + 0x410], bl
cmp dword [esp + 0x45c], edi
jb 0x41d006
mov ecx, dword [esp + 0x448]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x45c], esi
mov dword [esp + 0x458], ebx
mov byte [esp + 0x448], bl
cmp dword [esp + 0x494], edi
jb 0x41d034
mov edx, dword [esp + 0x480]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x494], esi
mov dword [esp + 0x490], ebx
mov byte [esp + 0x480], bl
cmp dword [esp + 0x4cc], edi
jb 0x41d062
mov eax, dword [esp + 0x4b8]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x4cc], esi
mov dword [esp + 0x4c8], ebx
mov byte [esp + 0x4b8], bl
cmp dword [esp + 0x504], edi
jb 0x41d090
mov ecx, dword [esp + 0x4f0]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x504], esi
mov dword [esp + 0x500], ebx
mov byte [esp + 0x4f0], bl
cmp dword [esp + 0x53c], edi
jb 0x41d0be
mov edx, dword [esp + 0x528]
push edx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x53c], esi
mov dword [esp + 0x538], ebx
mov byte [esp + 0x528], bl
cmp dword [esp + 0x574], edi
jb 0x41d0ec
mov eax, dword [esp + 0x560]
push eax
call fcn.004a684d
add esp, 4
mov dword [esp + 0x574], esi
mov dword [esp + 0x570], ebx
mov byte [esp + 0x560], bl
cmp dword [esp + 0x5ac], edi
jb 0x41d11a
mov ecx, dword [esp + 0x598]
push ecx
call fcn.004a684d
add esp, 4
mov dword [esp + 0x5ac], esi
mov dword [esp + 0x5a8], ebx
mov byte [esp + 0x598], bl
cmp dword [esp + 0x5e4], edi
jb 0x41d148
mov edx, dword [esp + 0x5d0]
push edx
call fcn.004a684d
add esp, 4
mov ecx, dword [esp + 0x604]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x5ec]
xor ecx, esp
call fcn.004a7314
add esp, 0x5fc
ret