Function at 0x416860
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x150]
cmp eax, dword [ecx + 8]
jbe 0x41769e
sub esp, 0x1d0
mov ebx, 0x6d9d00
mov dword [esp], ebx
mov dword [esp + 4], 0
call fcn.004cfde0
mov byte [0x6d9c8a], 0
mov dword [esp], 2
call fcn.00414c80
mov edx, dword [0x6dd4f4]
mov ecx, dword [0x6dd4f8]
mov dword [0x6c90dc], edx
mov dword [0x6c90e0], ecx
call fcn.00427d60
mov eax, dword [esp]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x54], eax
mov ebx, dword fs:[0x14]
mov ecx, dword [ebx]
mov eax, dword [ecx + 0x18]
mov edx, dword [eax + 0x70]
inc edx
mov dword [eax + 0x70], edx
mov ebx, dword [ecx + 0x18]
mov dword [esp + 0x180], ebx
mov ebp, 0x5f5e71
mov dword [ebx + 0x68], ebp
mov dword [ebx + 0x6c], 5
mov ebx, dword fs:[0x14]
mov ecx, dword [ebx]
mov eax, 2
mov ebp, dword [ecx + 0x18]
mov byte [ebp + 0x1ed], al
mov dword [esp + 0x18c], ecx
mov ebp, dword [ecx + 0x18]
mov eax, dword [ebp + 0x4c]
mov dword [esp + 0x184], eax
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 4
call fcn.0042d790
mov ebx, dword [esp + 0x184]
mov ebp, 0x5f9325
mov dword [ebx + 0x74], ebp
mov dword [ebx + 0x78], 0x12
xor eax, eax
mov dword [esp + 0x198], eax
mov dword [esp + 0x19c], eax
lea eax, [esp + 0x198]
mov ecx, 0x44c540
mov dword [eax], ecx
lea ebx, [esp + 0x50]
mov dword [eax + 4], ebx
mov dword [esp], eax
call fcn.00450ca0
xor eax, eax
mov dword [esp + 0x198], eax
mov dword [esp + 0x19c], eax
lea eax, [esp + 0x198]
mov ecx, 0x44c580
mov dword [eax], ecx
lea ebx, [esp + 0x50]
mov dword [eax + 4], ebx
mov dword [esp], eax
call fcn.00450ca0
xor eax, eax
mov ebx, dword [esp + 0x18c]
mov ebp, dword [ebx + 0x18]
mov byte [ebp + 0x1ed], al
mov ebx, dword [esp + 0x184]
mov dword [esp], ebx
mov dword [esp + 4], 4
mov dword [esp + 8], 2
call fcn.0042d790
movzx ebx, byte [0x6d1bc8]
cmp bl, 0
je 0x416a00
call fcn.00445310
mov ebx, dword [esp + 0x180]
xor ebp, ebp
mov dword [ebx + 0x68], ebp
mov dword [ebx + 0x6c], ebp
mov ebx, dword [0x6d9d08]
cmp ebx, 0
je 0x416a2f
mov ebx, 0x5fd0a6
mov dword [esp], ebx
mov dword [esp + 4], 0x1d
call fcn.0042a340
call fcn.00427d60
mov eax, dword [esp]
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 4]
mov dword [esp + 0xc4], eax
call fcn.00441390
mov ebp, dword [esp]
mov edx, dword [esp + 4]
mov ebx, dword [esp + 0xc0]
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], edx
mov eax, dword [0x6c90c4]
mov dword [esp + 0xc0], eax
mov edi, dword [0x6c90c8]
mov esi, dword [0x6c90cc]
mov ebp, dword [0x6c90d0]
mov eax, ebx
mov edx, ecx
sub eax, esi
sbb edx, ebp
mov esi, eax
mov ebp, edx
mov eax, dword [esp + 0xc0]
mov edx, edi
add eax, esi
adc edx, ebp
mov dword [0x6c90c4], eax
mov dword [0x6c90c8], edx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ecx
mov dword [0x6c90bc], ebx
mov dword [0x6c90c0], ecx
mov ebx, 0x6dbee0
mov dword [esp], ebx
add dword [esp], 0xb0
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
call fcn.004cfe10
mov ebx, dword [0x6dcfa0]
mov ebx, dword [0x6dcfa0]
and ebx, 0xff
mov esi, dword [0x6c90c4]
mov edx, dword [0x6c90c8]
mov ebp, 0x6dbfa0
shl ebx, 3
add ebp, ebx
mov dword [ebp], esi
mov dword [ebp + 4], edx
mov ebx, dword [0x6dcfa0]
mov ebx, dword [0x6dcfa0]
and ebx, 0xff
mov esi, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov ebp, 0x6dc7a0
shl ebx, 3
add ebp, ebx
mov dword [ebp], esi
mov dword [ebp + 4], edx
mov eax, dword [0x6dbf98]
mov edx, dword [0x6dbf9c]
mov ebx, dword [0x6c90c4]
mov ecx, dword [0x6c90c8]
add eax, ebx
adc edx, ecx
mov dword [0x6dbf98], eax
mov dword [0x6dbf9c], edx
mov eax, dword [0x6c909c]
cdq
mov edi, eax
mov ebp, edx
mov eax, dword [0x6c90ac]
mov edx, dword [0x6c90b0]
mov ebx, dword [0x6c90a4]
mov ecx, dword [0x6c90a8]
sub eax, ebx
sbb edx, ecx
mov ebx, eax
mov ecx, edx
mov eax, edi
mov edx, ebp
or ebp, ecx
jne 0x417689
mul ebx
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
mov edi, dword [0x6b5ab0]
mov edx, dword [0x6b5ab4]
mov ebp, dword [0x6b5ab8]
mov ebx, dword [0x6b5abc]
add edi, ebp
adc edx, ebx
mov ebx, dword [0x6b5ac0]
mov ecx, dword [0x6b5ac4]
add edi, ebx
adc edx, ecx
mov ecx, edx
mov eax, dword [0x6c909c]
cdq
mov dword [esp + 0xb8], eax
mov esi, edx
mov edx, dword [0x6c90bc]
mov eax, dword [0x6c90c0]
mov dword [esp + 0xc4], eax
mov ebp, dword [0x6c90b4]
mov ebx, dword [0x6c90b8]
mov eax, edx
mov edx, dword [esp + 0xc4]
sub eax, ebp
sbb edx, ebx
mov ebx, eax
mov ebp, edx
mov eax, dword [esp + 0xb8]
mov edx, esi
mov esi, ebx
mov ebx, ebp
mov ebp, edx
or ebp, ebx
jne 0x417674
mul esi
mov ebp, edx
mov ebx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
add ebx, edi
adc edx, ecx
add ebx, eax
mov dword [esp + 0x78], eax
adc edx, ebp
mov dword [esp + 0x7c], ebp
mov ecx, edx
mov eax, dword [0x6c9068]
mov edx, dword [0x6c906c]
add eax, ebx
adc edx, ecx
mov dword [0x6c9068], eax
mov dword [0x6c906c], edx
mov edi, dword [0x6c8dc0]
mov ecx, dword [0x6c8dc4]
mov ebp, dword [0x6c8db8]
mov ebx, dword [0x6c8dbc]
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x74]
sub eax, ebp
sbb edx, ebx
mov ebp, eax
mov ebx, edx
mov eax, dword [0x6d9d14]
cdq
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edx
mov eax, ebp
mov ebp, ebx
mov esi, dword [esp + 0xa0]
mov ebx, dword [esp + 0xa4]
mov edx, ebp
or ebp, ebx
jne 0x41765f
mul esi
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], edx
mov eax, edi
mov edx, ecx
add eax, dword [esp + 0xa0]
adc edx, dword [esp + 0xa4]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], edx
mov eax, dword [0x6c9068]
mov dword [esp + 0xa0], eax
mov eax, dword [0x6c906c]
mov dword [esp + 0xa4], eax
fild qword [esp + 0xa0]
fstp qword [esp + 0x98]
movsd xmm1, qword [esp + 0x98]
movsd qword [esp + 0x98], xmm1
fild qword [esp + 0x40]
fstp qword [esp + 0x90]
movsd xmm1, qword [esp + 0x90]
movsd qword [esp + 0x90], xmm1
movsd xmm1, qword [esp + 0x90]
movsd xmm0, qword [esp + 0x98]
divsd xmm0, xmm1
movsd qword [esp + 0x98], xmm0
movsd xmm1, qword [esp + 0x98]
movsd qword [0x6dcfa4], xmm1
mov ebx, dword [0x6dcfa0]
inc ebx
mov dword [0x6dcfa0], ebx
xor eax, eax
mov dword [0x6c89f0], eax
xor eax, eax
mov dword [0x6c89f4], eax
mov ebx, 0x619794
mov dword [esp], ebx
call fcn.00450ca0
mov ebx, 0x6196a4
mov dword [esp], ebx
call fcn.00450ca0
mov ebx, 0x6d9cac
mov dword [esp], ebx
call fcn.0040c950
mov ebx, dword [0x6c88d8]
mov dword [esp + 0x1a0], ebx
mov ebx, dword [0x6c88dc]
mov dword [esp + 0x1a4], ebx
mov ebx, dword [0x6c88e0]
mov dword [esp + 0x1a8], ebx
mov ebx, 0x6d9cac
mov dword [esp], ebx
call fcn.0040cb90
mov ebx, dword [esp + 0x1a0]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1a4]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x1a8]
mov dword [esp + 8], ebx
call fcn.00424a10
mov ebx, dword [0x6d9f84]
cmp ebx, 0
jle 0x4175db
movsd xmm0, qword [0x6dcfa4]
movsd qword [esp + 0x90], xmm0
movsd xmm0, qword [esp + 0x90]
mulsd xmm0, qword [0x6198a8]
movsd qword [esp + 0x90], xmm0
movsd xmm0, qword [esp + 0x90]
cvttsd2si ebx, xmm0
mov dword [esp + 0x24], ebx
lea edi, [esp + 0xc8]
xor eax, eax
call fcn.00452e9a
call fcn.0042ab20
lea ebx, [esp + 0xc8]
cmp ebx, 0
je 0x417658
mov dword [esp + 0x1c8], 0x18
mov dword [esp + 0x1cc], 0x18
mov dword [esp + 0x1c4], ebx
mov eax, dword [0x6c90a4]
mov edx, dword [0x6c90a8]
sub eax, dword [0x6d9da0]
sbb edx, dword [0x6d9da4]
mov eax, dword [0x6c90a4]
mov edx, dword [0x6c90a8]
sub eax, dword [0x6d9da0]
sbb edx, dword [0x6d9da4]
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], 0xf4240
mov dword [esp + 0xc], 0
call fcn.0044b290
mov eax, dword [esp + 0x10]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x1c4]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1c8]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x1cc]
mov dword [esp + 8], ebx
mov dword [esp + 0x14], 3
call fcn.00418c90
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov ebx, dword [0x6dcfa0]
mov dword [esp + 0x2c], ebx
lea ebx, [esp + 0x138]
mov dword [esp], ebx
mov dword [esp + 0x1b8], edx
mov dword [esp + 4], edx
mov dword [esp + 0x1bc], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0xc], eax
call fcn.0043ff10
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x190], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x194], ebx
call fcn.0042ab20
mov ebx, 0x5f597d
mov dword [esp], ebx
mov dword [esp + 4], 3
call fcn.0042b530
mov ebx, dword [esp + 0x2c]
xor ecx, ecx
mov dword [esp], ebx
mov dword [esp + 4], ecx
call fcn.0042b340
mov ebx, 0x5f5717
mov dword [esp], ebx
mov dword [esp + 4], 2
call fcn.0042b530
mov ebx, dword [esp + 0x190]
mov dword [esp], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp + 4], ebx
call fcn.0042b530
mov ebx, 0x5f57c3
mov dword [esp], ebx
mov dword [esp + 4], 2
call fcn.0042b530
mov eax, dword [esp + 0x24]
cdq
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0042b340
mov ebx, 0x5f57e8
mov dword [esp], ebx
mov dword [esp + 4], 3
call fcn.0042b530
call fcn.0042aba0
mov eax, dword [0x6c90a4]
mov dword [esp + 0x58], eax
mov eax, dword [0x6c90a8]
mov dword [esp + 0x5c], eax
xor eax, eax
mov dword [esp + 0xe0], eax
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], eax
mov dword [esp + 0xf0], eax
mov dword [esp + 0xf4], eax
lea eax, [esp + 0xe0]
mov ebp, dword [0x6c90ac]
mov edx, dword [0x6c90b0]
mov dword [eax], ebp
mov dword [eax + 4], edx
mov ebp, dword [0x6c90b4]
mov edx, dword [0x6c90b8]
mov dword [eax + 8], ebp
mov dword [eax + 0xc], edx
mov ebp, dword [0x6c90bc]
mov edx, dword [0x6c90c0]
mov dword [eax + 0x10], ebp
mov dword [eax + 0x14], edx
mov edx, 3
mov dword [esp + 0x1b4], 3
xor ecx, ecx
mov dword [esp + 0x1b0], edx
mov dword [esp + 0x30], edx
mov dword [esp + 0x1ac], eax
mov ebp, dword [esp + 0x30]
cmp ecx, ebp
jge 0x417207
mov dword [esp + 0x188], eax
mov ebp, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x60], ebp
mov dword [esp + 0x64], edx
cmp ecx, 0
je 0x41710f
call fcn.0042ab20
mov ebx, 0x5f56ec
mov dword [esp], ebx
mov dword [esp + 4], 1
call fcn.0042b530
call fcn.0042aba0
lea ebx, [esp + 0xc8]
cmp ebx, 0
je 0x417651
mov edx, 0x18
mov ecx, 0x18
mov dword [esp + 0x1c4], ebx
mov dword [esp], ebx
mov dword [esp + 0x1c8], edx
mov dword [esp + 4], edx
mov dword [esp + 0x1cc], ecx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
sub eax, dword [esp + 0x58]
sbb edx, dword [esp + 0x5c]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
call fcn.00418e50
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
lea ebx, [esp + 0x118]
mov dword [esp], ebx
mov dword [esp + 0x1b8], edx
mov dword [esp + 4], edx
mov dword [esp + 0x1bc], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0xc], eax
call fcn.0043ff10
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x190], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x194], ebx
call fcn.0042ab20
mov ebx, dword [esp + 0x190]
mov dword [esp], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp + 4], ebx
call fcn.0042b530
call fcn.0042aba0
mov eax, dword [esp + 0x60]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x188]
add eax, 8
mov ecx, dword [esp + 0x28]
inc ecx
mov ebp, dword [esp + 0x30]
cmp ecx, ebp
jl 0x4170d3
call fcn.0042ab20
mov ebx, 0x5f7053
mov dword [esp], ebx
mov dword [esp + 4], 0xb
call fcn.0042b530
call fcn.0042aba0
lea edi, [esp + 0x158]
xor eax, eax
call fcn.00452e96
lea ebx, [esp + 0x158]
mov ecx, ebx
mov ebp, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov dword [ebx], ebp
mov dword [ebx + 4], edx
mov ebp, dword [0x6b5ab0]
mov edx, dword [0x6b5ab4]
mov dword [ebx + 8], ebp
mov dword [ebx + 0xc], edx
mov eax, dword [0x6b5ab8]
mov edx, dword [0x6b5abc]
mov ebp, dword [0x6b5ac0]
mov ebx, dword [0x6b5ac4]
add eax, ebp
adc edx, ebx
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], edx
mov ebp, dword [0x6b5ac8]
mov edx, dword [0x6b5acc]
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x1c], edx
mov ebp, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov dword [ecx + 0x20], ebp
mov dword [ecx + 0x24], edx
mov edx, 5
mov dword [esp + 0x1b4], 5
mov eax, ecx
xor ecx, ecx
mov dword [esp + 0x1b0], edx
mov dword [esp + 0x28], edx
mov dword [esp + 0x1ac], eax
mov ebp, dword [esp + 0x28]
cmp ecx, ebp
jge 0x4173fe
mov dword [esp + 0x188], eax
mov ebp, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x68], ebp
mov dword [esp + 0x6c], edx
cmp ecx, 2
je 0x41762d
cmp ecx, 3
je 0x41762d
cmp ecx, 0
je 0x41731e
call fcn.0042ab20
mov ebx, 0x5f56ec
mov dword [esp], ebx
mov dword [esp + 4], 1
call fcn.0042b530
call fcn.0042aba0
lea ebx, [esp + 0xc8]
cmp ebx, 0
je 0x417626
mov edx, 0x18
mov ecx, 0x18
mov dword [esp + 0x1c4], ebx
mov dword [esp], ebx
mov dword [esp + 0x1c8], edx
mov dword [esp + 4], edx
mov dword [esp + 0x1cc], ecx
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x10], eax
call fcn.00418e50
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
lea ebx, [esp + 0xf8]
mov dword [esp], ebx
mov dword [esp + 0x1b8], edx
mov dword [esp + 4], edx
mov dword [esp + 0x1bc], ecx
mov dword [esp + 8], ecx
mov dword [esp + 0x1c0], eax
mov dword [esp + 0xc], eax
call fcn.0043ff10
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x190], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x194], ebx
call fcn.0042ab20
mov ebx, dword [esp + 0x190]
mov dword [esp], ebx
mov ebx, dword [esp + 0x194]
mov dword [esp + 4], ebx
call fcn.0042b530
call fcn.0042aba0
mov eax, dword [esp + 0x188]
add eax, 8
mov ecx, dword [esp + 0x30]
inc ecx
mov ebp, dword [esp + 0x28]
cmp ecx, ebp
jl 0x4172d0
mov eax, dword [0x6c90d4]
mov edx, dword [0x6c90d8]
shrd eax, edx, 0x14
shr edx, 0x14
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], edx
mov eax, dword [0x6c90dc]
mov edx, dword [0x6c90e0]
shrd eax, edx, 0x14
shr edx, 0x14
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], edx
mov eax, dword [0x6c90e4]
mov edx, dword [0x6c90e8]
shrd eax, edx, 0x14
shr edx, 0x14
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], edx
mov eax, dword [0x6c90ec]
mov edx, dword [0x6c90f0]
shrd eax, edx, 0x14
shr edx, 0x14
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], edx
mov ebx, dword [0x6c90a0]
mov dword [esp + 0x34], ebx
call fcn.0042ab20
mov ebx, 0x5f68c5
mov dword [esp], ebx
mov dword [esp + 4], 9
call fcn.0042b530
mov eax, dword [esp + 0xb0]
mov dword [esp], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 4], eax
call fcn.0042b1a0
mov ebx, 0x5f5729
mov dword [esp], ebx
mov dword [esp + 4], 2
call fcn.0042b530
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 4], eax
call fcn.0042b1a0
mov ebx, 0x5f5729
mov dword [esp], ebx
mov dword [esp + 4], 2
call fcn.0042b530
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 4], eax
call fcn.0042b1a0
mov ebx, 0x5f5ca5
mov dword [esp], ebx
mov dword [esp + 4], 5
call fcn.0042b530
mov eax, dword [esp + 0x80]
mov dword [esp], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 4], eax
call fcn.0042b1a0
mov ebx, 0x5f6c1c
mov dword [esp], ebx
mov dword [esp + 4], 0xa
call fcn.0042b530
mov eax, dword [esp + 0x34]
cdq
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0042b340
mov ebx, 0x5f5719
mov dword [esp], ebx
mov dword [esp + 4], 2
call fcn.0042b530
call fcn.0042aba0
mov ebx, dword [0x6c9058]
cmp ebx, 0
je 0x4175b7
call fcn.0042ab20
mov ebx, 0x5f687d
mov dword [esp], ebx
mov dword [esp + 4], 9
call fcn.0042b530
call fcn.0042aba0
call fcn.0042ab20
mov ebx, 0x5f5706
mov dword [esp], ebx
mov dword [esp + 4], 1
call fcn.0042b530
call fcn.0042aba0
call fcn.0042aba0
mov ebx, 0x6b0104
mov dword [esp], ebx
call fcn.0043a810
mov eax, dword [esp + 0x180]
mov ebx, dword fs:[0x14]
mov ecx, dword [ebx]
mov edx, dword [eax + 0x70]
dec edx
mov dword [eax + 0x70], edx
mov ebp, dword [eax + 0x70]
cmp ebp, 0
jne 0x41761f
movzx ebx, byte [ecx + 0x80]
cmp bl, 0
je 0x41761f
mov eax, 0xfffffade
mov dword [ecx + 8], eax
add esp, 0x1d0
ret
mov dword [ebx], eax
jmp 0x41732e
call fcn.0042ab20
mov ebx, 0x5f56f0
mov dword [esp], ebx
mov dword [esp + 4], 1
call fcn.0042b530
call fcn.0042aba0
jmp 0x41731e
mov dword [ebx], eax
jmp 0x41711f
mov dword [ebx], eax
jmp 0x416e8a
imul edx, esi
mov ebp, eax
imul ebp, ebx
add ebp, edx
mov edx, esi
mul edx
add edx, ebp
jmp 0x416cd0
imul edx, esi
mov ebp, eax
imul ebp, ebx
add ebp, edx
mov edx, esi
mul edx
add edx, ebp
jmp 0x416c2f
imul edx, ebx
mov ebp, edi
imul ebp, ecx
add ebp, edx
mov edx, ebx
mul edx
add edx, ebp
jmp 0x416ba0
call fcn.00450db0
jmp fcn.00416860