Function at 0x41f090
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x455ee9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c4
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0x1d0]
mov ecx, 0x71
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - 0x14], ecx
push 0x10
mov ecx, dword [ebp + 8]
call fcn.00405c10
mov ecx, dword [ebp + 8]
call fcn.00402b80
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0xa0], eax
mov ecx, dword [ebp + 8]
call fcn.00402b00
mov ecx, dword [ebp - 0x14]
mov word [ecx + 0xa8], ax
mov ecx, dword [ebp + 8]
call fcn.00402b80
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 1
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x1d0], 0
je 0x41f2d8
mov ecx, dword [ebp + 8]
call fcn.00402a80
mov byte [ebp - 0x41], al
push 2
mov ecx, dword [ebp + 8]
call fcn.00405c10
mov ecx, dword [ebp + 8]
call fcn.00402a80
mov byte [ebp - 0x4d], al
movzx eax, byte [ebp - 0x4d]
mov dword [ebp - 0x1d0], eax
mov ecx, dword [ebp - 0x1d0]
sub ecx, 1
mov dword [ebp - 0x1d0], ecx
cmp dword [ebp - 0x1d0], 0x10
ja case.0x41f172.5
mov edx, dword [ebp - 0x1d0]
movzx eax, byte [edx + 0x41fc58]
jmp dword [eax*4 + 0x41fc3c]
mov ecx, dword [ebp + 8]
call fcn.00402b00
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push eax
mov ecx, dword [ebp + 8]
call fcn.00405c10
jmp case.0x41f172.5
mov ecx, dword [ebp + 8]
call fcn.00402b80
jmp case.0x41f172.5
mov ecx, dword [ebp + 8]
call fcn.00402b80
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0xac], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x84], 0
je 0x41f1d7
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x84]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xac]
mov dword [ecx + 0x14], eax
jmp case.0x41f172.5
mov ecx, dword [ebp + 8]
call fcn.00402b80
jmp case.0x41f172.5
mov ecx, dword [ebp + 8]
call fcn.00402b80
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0xa0], eax
jmp case.0x41f172.5
mov ecx, dword [ebp + 8]
call fcn.00402b00
movzx eax, ax
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp + 8]
call fcn.004079c0
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x14]
add eax, 0x88
push eax
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.0041aae0
add esp, 8
movzx edx, al
test edx, edx
jne 0x41f247
push 0
push 1
mov ecx, dword [ebp - 0x14]
call fcn.0041db90
xor al, al
jmp 0x41fbc1
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0xf8], 0
je 0x41f28d
push 0x10
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
add ecx, 8
push ecx
mov edx, dword [ebp - 0x14]
add edx, 0x88
push edx
call fcn.004333e0
add esp, 0xc
test eax, eax
je 0x41f28b
push 0
push 1
mov ecx, dword [ebp - 0x14]
call fcn.0041db90
xor al, al
jmp 0x41fbc1
jmp 0x41f2c9
mov eax, dword [ebp - 0x14]
add eax, 0x88
push eax
mov ecx, dword [0x462338]
call fcn.004115f0
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0xf8], eax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0xf8], 0
jne 0x41f2c9
push 0
push 1
mov ecx, dword [ebp - 0x14]
call fcn.0041db90
xor al, al
jmp 0x41fbc1
push 0x20
mov ecx, dword [ebp + 8]
call fcn.00405c10
jmp 0x41f100
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov esi, esp
mov ecx, dword [ebp + 8]
call dword [edx + 8]
cmp esi, esp
call fcn.0043234a
cmp eax, 0x2a
jae 0x41f304
push 0
push 1
mov ecx, dword [ebp - 0x14]
call fcn.0041db90
xor al, al
jmp 0x41fbc1
push 0x24
mov ecx, dword [ebp + 8]
call fcn.00405c10
mov ecx, dword [ebp + 8]
call fcn.00402b80
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 0xa4], eax
mov ecx, dword [ebp + 8]
call fcn.00402b00
mov ecx, dword [ebp - 0x14]
mov word [ecx + 0xaa], ax
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0xc], 3
jne 0x41fb9c
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0xf8], 0
jne 0x41f35d
push 0
push 1
mov ecx, dword [ebp - 0x14]
call fcn.0041db90
xor al, al
jmp 0x41fbc1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ecx + 0x74]
mov dword [ebp - 0x5c], edx
jmp 0x41f377
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 0x28]
mov dword [ebp - 0x5c], ecx
cmp dword [ebp - 0x5c], 0
je 0x41f3a7
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 8]
cmp edx, dword [ecx + 0xa0]
jne 0x41f3a5
mov eax, dword [ebp - 0x5c]
movzx ecx, word [eax + 0x10]
mov edx, dword [ebp - 0x14]
movzx eax, word [edx + 0xa8]
cmp ecx, eax
jne 0x41f3a5
jmp 0x41f3a7
jmp 0x41f36e
cmp dword [ebp - 0x5c], 0
je 0x41f50d
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x28], 0
je 0x41f3cb
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 0x28]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x2c]
mov dword [ecx + 0x2c], eax
jmp 0x41f3dd
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x2c]
mov dword [ecx + 0x78], eax
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x2c], 0
je 0x41f3f7
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x28]
mov dword [ecx + 0x28], eax
jmp 0x41f409
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x28]
mov dword [ecx + 0x74], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ecx + 0x7c]
sub edx, 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov dword [ecx + 0x7c], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
add ecx, 0xcc
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x74], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
add ecx, 0xe0
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x78], ecx
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x18], 2
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
cmp dword [ecx + 0x5c], 0
je 0x41f4a6
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ecx + 0x5c]
mov eax, dword [ebp - 0x5c]
mov dword [edx + 0x28], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ecx + 0x5c]
mov dword [edx + 0x2c], eax
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x28], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov dword [ecx + 0x5c], edx
jmp 0x41f4d8
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov dword [ecx + 0x5c], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov dword [ecx + 0x58], edx
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x2c], 0
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x28], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ecx + 0x60]
add edx, 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov dword [ecx + 0x60], edx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x14]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x5c]
mov dword [eax + 0x84], ecx
jmp 0x41fabb
lea ecx, [ebp - 0x94]
call fcn.0040ad70
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xa0]
mov dword [ebp - 0x8c], ecx
mov eax, dword [ebp - 0x14]
mov cx, word [eax + 0xa8]
mov word [ebp - 0x84], cx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xa4]
mov dword [ebp - 0x88], ecx
mov eax, dword [ebp - 0x14]
mov cx, word [eax + 0xaa]
mov word [ebp - 0x82], cx
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x94]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xf8]
mov ecx, dword [eax + 0x98]
call fcn.00417a10
movzx ecx, al
test ecx, ecx
je 0x41f8e9
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 4], 0
je 0x41f5cf
mov eax, dword [ebp - 0x14]
mov dword [eax + 0xf8], 0
push 0
push 1
mov ecx, dword [ebp - 0x14]
call fcn.0041db90
mov byte [ebp - 0x1c5], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.0040ae20
mov al, byte [ebp - 0x1c5]
jmp 0x41fbc1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x5c]
mov dword [eax + 0x84], ecx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x14]
mov dword [eax + 4], ecx
push 0
call fcn.00431e48
add esp, 4
mov ecx, dword [ebp - 0x5c]
mov dword [ecx + 0x1c], eax
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x18], 1
jne 0x41f675
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x28], 0
je 0x41f617
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 0x28]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x2c]
mov dword [ecx + 0x2c], eax
jmp 0x41f629
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x2c]
mov dword [ecx + 0x50], eax
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x2c], 0
je 0x41f643
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x28]
mov dword [ecx + 0x28], eax
jmp 0x41f655
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x28]
mov dword [ecx + 0x4c], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ecx + 0x54]
sub edx, 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov dword [ecx + 0x54], edx
jmp 0x41f815
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x18], 4
jne 0x41f6f6
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x28], 0
je 0x41f698
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 0x28]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x2c]
mov dword [ecx + 0x2c], eax
jmp 0x41f6aa
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x2c]
mov dword [ecx + 0x78], eax
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x2c], 0
je 0x41f6c4
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x28]
mov dword [ecx + 0x28], eax
jmp 0x41f6d6
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x28]
mov dword [ecx + 0x74], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ecx + 0x7c]
sub edx, 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov dword [ecx + 0x7c], edx
jmp 0x41f815
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x18], 5
jne 0x41f787
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x28], 0
je 0x41f71d
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 0x28]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x2c]
mov dword [ecx + 0x2c], eax
jmp 0x41f732
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x2c]
mov dword [ecx + 0x84], eax
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x2c], 0
je 0x41f74c
mov eax, dword [ebp - 0x5c]
mov ecx, dword [eax + 0x2c]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x28]
mov dword [ecx + 0x28], eax
jmp 0x41f761
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x28]
mov dword [ecx + 0x80], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ecx + 0x88]
sub edx, 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov dword [ecx + 0x88], edx
jmp 0x41f815
mov eax, dword [ebp - 0x5c]
cmp dword [eax + 0x18], 3
jne 0x41f815
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0xa0]
push ecx
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0xf8]
add ecx, 0x64
call fcn.00420330
lea eax, [ebp - 0x1bc]
push eax
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0xf8]
add ecx, 0x64
call fcn.0040d300
push eax
lea ecx, [ebp - 0xa0]
call fcn.0040d4e0
movzx edx, al
test edx, edx
je 0x41f815
mov eax, dword [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x1b0]
push ecx
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0xf8]
add ecx, 0x64
call fcn.00411d10
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ecx + 0x70]
sub edx, 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov dword [ecx + 0x70], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
add ecx, 0xcc
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x74], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
add ecx, 0xe0
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x78], ecx
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x18], 2
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
cmp dword [ecx + 0x5c], 0
je 0x41f897
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ecx + 0x5c]
mov eax, dword [ebp - 0x5c]
mov dword [edx + 0x28], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ecx + 0x5c]
mov dword [edx + 0x2c], eax
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x28], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov dword [ecx + 0x5c], edx
jmp 0x41f8c9
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov dword [ecx + 0x5c], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov dword [ecx + 0x58], edx
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x2c], 0
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x28], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ecx + 0x60]
add edx, 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov dword [ecx + 0x60], edx
jmp 0x41faa9
push 0x30
call fcn.00431bf8
add esp, 4
mov dword [ebp - 0x198], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x198], 0
je 0x41f919
mov ecx, dword [ebp - 0x198]
call fcn.0040ad70
mov dword [ebp - 0x1d0], eax
jmp 0x41f923
mov dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1a4], eax
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x5c], ecx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xa0]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x14]
mov dx, word [ecx + 0xa8]
mov word [eax + 0x10], dx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xa4]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x14]
mov dx, word [ecx + 0xaa]
mov word [eax + 0x12], dx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xac]
mov dword [eax + 0x14], edx
lea eax, [ebp - 0x5c]
push eax
mov ecx, dword [ebp - 0x5c]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0xf8]
mov ecx, dword [eax + 0x98]
call fcn.00417850
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x5c]
mov dword [eax + 0x84], ecx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x14]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0xf8]
mov dword [eax], edx
push 0
call fcn.00431e48
add esp, 4
mov ecx, dword [ebp - 0x5c]
mov dword [ecx + 0x1c], eax
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x18], 2
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
cmp dword [ecx + 0x5c], 0
je 0x41fa32
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ecx + 0x5c]
mov eax, dword [ebp - 0x5c]
mov dword [edx + 0x28], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ecx + 0x5c]
mov dword [edx + 0x2c], eax
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x28], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov dword [ecx + 0x5c], edx
jmp 0x41fa64
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov dword [ecx + 0x5c], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ebp - 0x5c]
mov dword [ecx + 0x58], edx
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x2c], 0
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0x28], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov edx, dword [ecx + 0x60]
add edx, 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
mov dword [ecx + 0x60], edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
add ecx, 0xcc
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x74], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
add ecx, 0xe0
mov edx, dword [ebp - 0x14]
mov dword [edx + 0x78], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.0040ae20
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x80], 0
je 0x41facf
mov ecx, dword [ebp - 0x14]
call fcn.00422c00
push 0x1000
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x3c]
call fcn.00402190
push 0x1000
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x3c]
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x3c]
mov ecx, dword [ecx + 4]
add ecx, dword [eax + 0xc]
push ecx
lea ecx, [ebp - 0xc0]
call fcn.00405b30
push 0xefbeadde
lea ecx, [ebp - 0xc0]
call fcn.00402cc0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x3c]
mov edx, dword [ecx + 0xc]
add edx, 4
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x3c]
mov dword [ecx + 0xc], edx
push 1
lea eax, [ebp - 0xc0]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0041fc70
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x3c]
mov edx, dword [ecx + 0xc]
add edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x3c]
mov dword [ecx + 0xc], edx
push 0
mov ecx, dword [ebp - 0x14]
call fcn.00423600
movzx eax, al
test eax, eax
jne 0x41fb6b
xor al, al
jmp 0x41fbc1
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0xf8], 0
je 0x41fb9a
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
cmp dword [ecx + 0x30], 0
jne 0x41fb90
mov ecx, dword [ebp - 0x14]
call fcn.0041ed20
jmp 0x41fbc1
mov ecx, dword [ebp - 0x14]
call fcn.0041ee40
jmp 0x41fbc1
jmp 0x41fbbf
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0xf8]
cmp dword [ecx + 0x30], 0
jne 0x41fbb5
mov ecx, dword [ebp - 0x14]
call fcn.0041ed20
jmp 0x41fbc1
mov ecx, dword [ebp - 0x14]
call fcn.0041ee40
jmp 0x41fbc1
mov al, 1
push edx
mov ecx, ebp
push eax
lea edx, [0x41fbf2]
call fcn.0043236d
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x1d0
cmp ebp, esp
call fcn.0043234a
mov esp, ebp
pop ebp
ret 4