Function at 0x41de1a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x60aea7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x320
push ebx
mov ebx, ecx
mov eax, dword [ebx + 0x2c]
push esi
xor esi, esi
push edi
mov dword [esp + 0x64], ebx
cmp eax, esi
jne 0x41de54
mov eax, dword [0x6a677c]
jmp 0x41de67
cmp eax, dword [0x6a677c]
jne 0x41de67
push esi
push 1
push dword [ebp + 0xc]
call fcn.00420f6d
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x24], esi
call fcn.0046458f
mov dword [esp + 0x334], esi
mov edi, dword [esp + 0x20]
mov eax, dword [edi + 0x3e8]
cmp eax, 0x80000000
je 0x41de91
cmp eax, esi
jne 0x41de97
push esi
jmp 0x41eb52
push esi
lea ecx, [edi + 0x3d8]
mov eax, ebx
call fcn.0045ab9d
cmp eax, esi
mov dword [esp + 0x18], eax
jle 0x41de91
lea ecx, [edi + 0x3d4]
mov eax, 0xff000000
cmp dword [ecx], eax
jne 0x41debf
lea ecx, [edi + 0x3c]
mov ecx, dword [ecx]
cmp ecx, eax
je 0x41dec7
mov eax, ecx
push eax
call fcn.0045b71d
pop ecx
mov dword [esp + 0x34], eax
cmp eax, 0xffffffff
je 0x41de91
cmp byte [ebp + 0x18], 0
mov eax, dword [ebx]
mov dword [esp + 0x70], esi
je 0x41def5
lea ecx, [esp + 0x90]
push ecx
mov ecx, ebx
call dword [eax + 0x1f4]
jmp 0x41df02
lea ecx, [esp + 0x24]
push ecx
mov ecx, ebx
call dword [eax + 0x20c]
push ecx
push ecx
mov ecx, dword [ebp + 0x10]
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp + 0x14]
mov dword [edx + 4], ecx
lea ecx, [esp + 0x88]
mov dword [esp + 0x18], esp
push ecx
mov ecx, eax
call fcn.0042941f
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x80]
mov edi, dword [esp + 0x84]
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x8c]
add ecx, 0x3ec
cmp dword [ecx], 0
jbe 0x41df77
mov eax, dword [esp + 0x64]
push 0
call fcn.0045ab9d
mov ecx, dword [esp + 0x8c]
mov esi, eax
mov eax, dword [esp + 0x88]
sub ebx, esi
sub edi, esi
mov dword [esp + 0x70], esi
add eax, esi
lea edx, [ecx + esi]
mov ecx, dword [esp + 0x18]
add eax, ecx
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 0x3e8]
sub ebx, ecx
sub edi, ecx
add edx, ecx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], edi
mov dword [esp + 0x60], edx
cmp eax, 0x80000000
jne 0x41dfe7
xor eax, eax
mov dword [esp + 0x1c], eax
dec eax
mov esi, dword [ebp + 8]
lea ecx, [ebx + ecx - 1]
je 0x41e99f
dec eax
je 0x41e977
push dword [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 4], edi
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 0xc], ecx
mov eax, dword [esi]
mov ecx, esi
mov dword [esp + 0x24], esp
call dword [eax + 0x78]
jmp 0x41e9c0
mov dword [esp + 0x1c], eax
cmp eax, 9
jne 0x41dfaa
test esi, esi
jge 0x41dff6
xor esi, esi
mov eax, dword [esp + 0x18]
push ecx
push ecx
mov ecx, dword [ebp + 0x10]
lea ebx, [esi + eax]
mov esi, dword [esp + 0x6c]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp + 0x14]
mov dword [eax + 4], ecx
mov dword [esp + 0x18], esp
lea eax, [esp + 0x2c]
push eax
mov eax, dword [esi]
lea ecx, [esp + 0x9c]
push ecx
mov ecx, esi
call dword [eax + 0x1f4]
mov ecx, eax
call fcn.0042941f
mov edi, dword [esp + 0x28]
sub edi, dword [esi + 0x60]
mov edx, dword [esp + 0x24]
sub edx, dword [esi + 0x5c]
mov ecx, dword [esp + 0x30]
add ecx, dword [esi + 0x68]
sub edi, dword [esi + 0x50]
mov eax, dword [esp + 0x2c]
add eax, dword [esi + 0x64]
add ecx, dword [esi + 0x58]
add eax, dword [esi + 0x54]
sub edx, dword [esi + 0x4c]
sub edi, ebx
sub edx, ebx
add ecx, ebx
add eax, ebx
sub ecx, edi
mov dword [esp + 0x28], edi
mov edi, dword [esp + 0x20]
inc ecx
sub eax, edx
inc eax
add edi, 0x40c
mov dword [esp + 0x24], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x3c], eax
call fcn.0045ab28
mov edi, dword [esp + 0x20]
add edi, 0x3fc
mov dword [esp + 0x1c], eax
call fcn.0045aab5
fld1
cmp dword [esp + 0x70], 0
fstp dword [esp + 0x4c]
mov dword [esp + 0x78], eax
je 0x41e0bd
fild dword [esp + 0x70]
fidiv dword [esp + 0x18]
fadd qword [0x64fe80]
fstp dword [esp + 0x4c]
mov esi, dword [esp + 0x20]
mov eax, dword [esi + 0x518]
cmp eax, 0xffffffff
je 0x41e0d7
cmp eax, 0xff
jne 0x41e7dd
lea eax, [esi + 0x94]
mov dword [esp + 0x68], eax
mov eax, dword [eax]
mov edi, 0xff000000
cmp eax, edi
jne 0x41e0ee
mov eax, edi
push eax
call fcn.0040b2a8
pop ecx
test al, al
jne 0x41e13e
mov eax, dword [esi + 0x98]
cmp eax, edi
jne 0x41e105
mov eax, edi
push eax
call fcn.0040b2a8
pop ecx
test al, al
jne 0x41e13e
mov eax, dword [esi + 0x9c]
cmp eax, edi
jne 0x41e11c
mov eax, edi
push eax
call fcn.0040b2a8
pop ecx
test al, al
jne 0x41e13e
mov eax, dword [esi + 0xa0]
cmp eax, edi
jne 0x41e133
mov eax, edi
push eax
call fcn.0040b2a8
pop ecx
test al, al
je 0x41e1ab
lea eax, [esi + 0xa4]
xor edi, edi
cmp dword [eax], edi
jne 0x41e154
cmp dword [eax + 4], 0xffffffff
jne 0x41e7df
lea ecx, [esi + 0xa4]
call fcn.0040bb92
test eax, eax
je 0x41e7df
lea ecx, [esi + 0xa4]
call fcn.0040bb92
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x20]
test al, al
jne 0x41e7df
lea eax, [esi + 0xac]
mov edx, dword [eax]
mov ecx, 0x80000000
cmp edx, ecx
je 0x41e1ad
cmp edx, edi
je 0x41e1ad
mov eax, edx
cmp eax, ecx
je 0x41e7df
cmp eax, 4
jne 0x41e7df
jmp 0x41e1ad
xor edi, edi
lea eax, [esi + 0x2a4]
mov dword [esp + 0x70], edi
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
cmp dword [eax], edi
jbe 0x41e215
push 0x3e8
sub esp, 0x10
lea eax, [esi + 0xc]
mov ecx, esp
push eax
call fcn.0040bc12
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.0045a775
test eax, eax
je 0x41e215
mov eax, dword [esp + 0x18]
cmp dword [eax], edi
jbe 0x41e215
push 0x3e8
sub esp, 0x10
lea eax, [esi + 0xc]
mov ecx, esp
push eax
call fcn.0040bc12
mov ecx, dword [esp + 0x2c]
call fcn.0045a775
test eax, eax
jne 0x41e7df
add dword [esp + 0x70], 2
add dword [esp + 0x18], 0x20
cmp dword [esp + 0x70], 8
jl 0x41e1bb
cmp dword [esi + 0x12c], edi
ja 0x41e7df
cmp dword [esi + 0x13c], edi
ja 0x41e7df
cmp dword [esi + 0x14c], edi
ja 0x41e7df
cmp dword [esi + 0x15c], edi
ja 0x41e7df
mov esi, dword [esp + 0x68]
push edi
mov ecx, esi
call fcn.0040d005
test al, al
jne 0x41e7df
push 1
mov ecx, esi
call fcn.0040d005
test al, al
jne 0x41e7df
push 2
mov ecx, esi
call fcn.0040d005
test al, al
jne 0x41e7df
push 3
mov ecx, esi
call fcn.0040d005
test al, al
jne 0x41e7df
mov eax, ebx
imul eax, eax, 5
push ecx
push ecx
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], eax
lea ecx, [esp + 0xa8]
mov dword [esp + 0x18], esp
call fcn.0040b69b
mov byte [esp + 0x334], 1
mov eax, dword [esp + 0x34]
and eax, 0xffffff
push eax
lea ecx, [esp + 0xa4]
call fcn.0040b5e1
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0xc0]
call fcn.0040b26f
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
dec eax
dec ecx
sub eax, ebx
sub ecx, ebx
mov dword [esp + 0x2c], eax
mov eax, dword [esi]
mov dword [esp + 0x30], ecx
mov ecx, 0xff000000
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
cmp eax, ecx
jne 0x41e315
mov eax, ecx
push eax
call fcn.0045b71d
pop ecx
or eax, 0xff000000
push eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0xa8]
call fcn.00468983
fld dword [esp + 0x4c]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x20], esp
mov dword [eax], edi
mov dword [eax + 4], edi
or dword [eax + 8], 0xffffffff
or dword [eax + 0xc], 0xffffffff
push ecx
push ecx
mov eax, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, dword [esp + 0x50]
fstp dword [esp]
lea edx, [esp + 0xbc]
mov dword [eax], ebx
mov dword [eax + 4], ebx
call fcn.0046b1e2
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x1c], edi
call fcn.0046458f
mov byte [esp + 0x334], 2
mov ecx, dword [esp + 0x60]
sub ecx, dword [esp + 0x58]
lea eax, [ebx + ebx]
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x5c]
sub eax, dword [esp + 0x54]
mov esi, ebx
shl esi, 2
inc eax
inc ecx
push ecx
push ecx
mov dword [esp + 0x54], ecx
mov ecx, esp
mov dword [ecx], eax
mov dword [ecx + 4], esi
lea ecx, [esp + 0x258]
mov dword [esp + 0x78], eax
mov dword [esp + 0x18], esp
call fcn.0040b69b
push ecx
push ecx
mov byte [esp + 0x33c], 3
mov ecx, dword [esp + 0x54]
mov eax, esp
mov dword [eax + 4], ecx
lea ecx, [esp + 0x180]
mov dword [esp + 0x18], esp
mov dword [eax], esi
call fcn.0040b69b
mov byte [esp + 0x334], 4
mov eax, dword [esp + 0x34]
or eax, 0xff000000
push eax
lea ecx, [esp + 0x254]
mov dword [esp + 0x6c], eax
call fcn.0040b5e1
push dword [esp + 0x68]
lea ecx, [esp + 0x17c]
call fcn.0040b5e1
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov eax, dword [esp + 0x70]
push edi
lea edx, [esp + 0x94]
push edx
lea edx, [esp + 0x2c]
push edx
lea ecx, [esi - 1]
dec eax
lea edx, [esp + 0x48]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x24]
push edx
lea edx, [esp + 0x260]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x8c]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x18]
push edi
lea edx, [esp + 0x94]
push edx
lea edx, [esp + 0x2c]
push edx
dec esi
dec eax
lea edx, [esp + 0x48]
push edx
lea edx, [esp + 0x188]
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], eax
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x8c]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x1c]
mov esi, dword [esp + 0x84]
add ecx, eax
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x58]
add edx, ecx
mov ecx, dword [esp + 0x5c]
add eax, ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x44], eax
lea eax, [esi - 1]
lea ecx, [esp + 0x3c]
mov dword [esp + 0x40], edx
mov dword [esp + 0x48], eax
call fcn.00429527
test al, al
jne 0x41e576
mov ecx, dword [esp + 0x48]
sub ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
sub edx, dword [esp + 0x3c]
inc ecx
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x4c]
inc edx
mov dword [eax + 8], edx
dec dword [eax + 8]
dec dword [eax + 0xc]
mov dword [esp + 0x20], esp
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x64]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x30], esp
push dword [ebp + 8]
mov dword [eax + 0xc], ecx
lea ecx, [esp + 0x274]
call fcn.0040b2f9
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x60]
add ecx, eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x48], ecx
inc eax
lea ecx, [esp + 0x3c]
mov dword [esp + 0x40], eax
call fcn.00429527
test al, al
jne 0x41e623
mov eax, dword [esp + 0x48]
sub eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
sub ecx, dword [esp + 0x3c]
inc eax
mov dword [esp + 0x6c], eax
mov eax, ebx
imul eax, eax, 3
sub eax, dword [esp + 0x1c]
sub esp, 0x10
inc ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x78], ecx
mov ecx, esp
mov dword [esp + 0x20], esp
lea eax, [esp + 0x78]
push eax
lea eax, [esp + 0x48]
push eax
mov dword [esp + 0x4c], edi
call fcn.004293b0
mov ecx, dword [esp + 0x4c]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x64]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x30], esp
push dword [ebp + 8]
mov dword [eax + 0xc], ecx
lea ecx, [esp + 0x274]
call fcn.0040b2f9
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x80]
dec eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], eax
call fcn.00429527
test al, al
jne 0x41e6c6
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [esp + 0x24]
sub eax, esi
inc eax
mov dword [esp + 0x6c], eax
mov eax, ebx
sub eax, dword [esp + 0x1c]
sub esp, 0x10
inc ecx
mov dword [esp + 0x60], eax
mov dword [esp + 0x78], ecx
mov ecx, esp
mov dword [esp + 0x20], esp
lea eax, [esp + 0x78]
push eax
lea eax, [esp + 0x60]
push eax
mov dword [esp + 0x64], edi
call fcn.004293b0
mov ecx, dword [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 4], esi
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 0x30], esp
push dword [ebp + 8]
mov dword [eax + 0xc], ecx
lea ecx, [esp + 0x19c]
call fcn.0040b2f9
mov eax, dword [esp + 0x70]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x88]
inc eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x28], esi
mov dword [esp + 0x24], eax
call fcn.00429527
test al, al
jne 0x41e77d
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x2c]
sub ecx, dword [esp + 0x24]
sub eax, esi
inc eax
mov dword [esp + 0x6c], eax
mov eax, ebx
sub ebx, dword [esp + 0x1c]
imul eax, eax, 3
sub eax, dword [esp + 0x78]
sub esp, 0x10
inc ecx
mov dword [esp + 0x88], eax
mov dword [esp + 0x78], ecx
mov ecx, esp
mov dword [esp + 0x20], esp
lea eax, [esp + 0x78]
push eax
lea eax, [esp + 0x8c]
push eax
mov dword [esp + 0x94], ebx
call fcn.004293b0
mov ecx, dword [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 4], esi
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0xac]
mov dword [esp + 0x30], esp
push dword [ebp + 8]
mov dword [eax + 0xc], ecx
lea ecx, [esp + 0x19c]
call fcn.0040b2f9
push 1
push ecx
push ecx
mov ecx, dword [ebp + 0x10]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x1c], esp
push dword [ebp + 0xc]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x74]
push dword [ebp + 8]
mov eax, dword [ecx]
call dword [eax + 0x294]
lea ecx, [esp + 0x178]
mov byte [esp + 0x334], 3
call fcn.0040b8f3
lea ecx, [esp + 0x250]
mov byte [esp + 0x334], 2
call fcn.0040b8f3
mov byte [esp + 0x334], 1
lea ecx, [esp + 0x18]
jmp 0x41e958
xor edi, edi
push ecx
push ecx
mov ecx, dword [esp + 0x44]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x18]
mov dword [eax + 4], ecx
lea ecx, [esp + 0xa8]
mov dword [esp + 0x70], esp
call fcn.0040b69b
mov byte [esp + 0x334], 5
mov eax, dword [esp + 0x34]
or eax, 0xff000000
push eax
lea ecx, [esp + 0xa4]
call fcn.0040b5e1
push 1
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0x180]
call fcn.0045ce38
push ecx
mov byte [esp + 0x338], 6
mov esi, dword [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x30]
mov eax, esp
mov dword [eax + 4], ecx
lea ecx, [esp + 0x180]
mov dword [esp + 0x18], esp
mov dword [eax], esi
call fcn.0045bb25
push edi
push ecx
push ecx
mov ecx, dword [ebp + 0x10]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x1c], esp
push dword [ebp + 0xc]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x74]
mov eax, dword [ecx]
lea edx, [esp + 0x188]
push edx
call dword [eax + 0x294]
lea ecx, [esp + 0x178]
mov byte [esp + 0x334], 5
call fcn.0045cef6
lea ecx, [esp + 0xa0]
call fcn.00469246
fld dword [esp + 0x4c]
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x20], esp
mov dword [eax], edi
mov dword [eax + 4], edi
or dword [eax + 8], 0xffffffff
or dword [eax + 0xc], 0xffffffff
push ecx
push ecx
mov eax, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, dword [esp + 0x50]
fstp dword [esp]
lea edx, [esp + 0xbc]
mov dword [eax], ebx
mov dword [eax + 4], ebx
call fcn.0046b1e2
push eax
lea ecx, [esp + 0x50]
mov dword [esp + 0x50], edi
call fcn.0046458f
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x334], 7
mov ecx, dword [esp + 0x28]
add eax, ecx
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x7c], eax
lea eax, [esp + 0x78]
push eax
push dword [ebp + 8]
add ecx, esi
mov esi, dword [esp + 0x54]
mov dword [esp + 0x80], ecx
call fcn.0040b3a1
push 1
push ecx
push ecx
mov ecx, dword [ebp + 0x10]
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x1c], esp
push dword [ebp + 0xc]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x74]
push dword [ebp + 8]
mov eax, dword [ecx]
call dword [eax + 0x294]
mov byte [esp + 0x334], 5
lea ecx, [esp + 0x4c]
push edi
call fcn.0046458f
lea ecx, [esp + 0xa0]
mov byte [esp + 0x334], 0
call fcn.0040b8f3
jmp 0x41eb50
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x20], esp
mov dword [eax], ebx
mov dword [eax + 4], edi
push 0x69c624
push dword [esp + 0x48]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0xc], ecx
call fcn.0045caea
jmp 0x41e9c0
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 4], edi
mov dword [esp + 0x20], esp
push dword [esp + 0x44]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x74]
mov dword [eax + 0xc], ecx
call fcn.0045d8bd
mov eax, dword [esp + 0x5c]
sub eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
inc eax
dec ecx
je 0x41ea28
dec ecx
je 0x41e9fc
push dword [esp + 0x34]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [esp + 0x70]
mov dword [ecx + 4], edi
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x74]
mov dword [ecx + 0xc], eax
mov eax, dword [esi]
mov ecx, esi
mov dword [esp + 0x24], esp
call dword [eax + 0x78]
jmp 0x41ea4d
sub esp, 0x10
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x20], esp
mov dword [ecx + 4], edi
push 0x69c624
push dword [esp + 0x48]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x78]
mov dword [ecx + 0xc], eax
call fcn.0045caea
jmp 0x41ea4d
sub esp, 0x10
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [esp + 0x6c]
mov dword [ecx + 4], edi
mov dword [esp + 0x20], esp
push dword [esp + 0x44]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x74]
mov dword [ecx + 0xc], eax
call fcn.0045d8bd
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x5c]
lea ecx, [edi + eax - 1]
mov eax, dword [esp + 0x1c]
dec eax
je 0x41eaa8
dec eax
je 0x41ea84
push dword [esp + 0x34]
sub esp, 0x10
mov eax, esp
mov dword [eax], ebx
mov dword [eax + 4], edi
mov dword [eax + 0xc], ecx
mov dword [eax + 8], edx
mov eax, dword [esi]
mov ecx, esi
mov dword [esp + 0x24], esp
call dword [eax + 0x78]
jmp 0x41eac5
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x20], esp
push 0x69c624
push dword [esp + 0x48]
mov dword [eax], ebx
mov dword [eax + 4], edi
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
call fcn.0045caea
jmp 0x41eac5
sub esp, 0x10
mov eax, esp
mov dword [esp + 0x20], esp
push dword [esp + 0x44]
mov dword [eax], ebx
mov dword [eax + 4], edi
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
call fcn.0045d8bd
mov edx, dword [esp + 0x60]
mov ecx, dword [esp + 0x1c]
mov eax, edx
sub eax, dword [esp + 0x18]
inc eax
dec ecx
je 0x41eb2b
dec ecx
je 0x41eaff
push dword [esp + 0x34]
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x70]
mov dword [ecx], ebx
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], edx
mov eax, dword [esi]
mov ecx, esi
mov dword [esp + 0x24], esp
call dword [eax + 0x78]
jmp 0x41eb50
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x20], esp
mov dword [ecx], ebx
push 0x69c624
push dword [esp + 0x48]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x78]
mov dword [ecx + 0xc], eax
call fcn.0045caea
jmp 0x41eb50
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 4], eax
mov eax, dword [esp + 0x6c]
mov dword [ecx], ebx
mov dword [esp + 0x20], esp
push dword [esp + 0x44]
mov dword [ecx + 8], eax
mov eax, dword [esp + 0x74]
mov dword [ecx + 0xc], eax
call fcn.0045d8bd
push 0
or dword [esp + 0x338], 0xffffffff
lea ecx, [esp + 0x24]
call fcn.0046458f
mov ecx, dword [esp + 0x32c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x14