Function at 0x41b4a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x1e0
mov eax, dword [ebp + 8]
call 0x41b4b7
pop edi
movzx ebx, byte [eax]
cmp bl, 0x4b
jne 0x41c0a5
mov dword [esp + 0xe4], ecx
mov ecx, dword [eax + 4]
mov ebx, dword [edx + 8]
mov esi, dword [eax + 0xc]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x9c], ecx
mov ch, byte [eax + 8]
mov eax, dword [ebx + 0x120]
mov dword [esp + 0x94], ebx
mov dword [esp + 0x34], esi
cmp eax, 2
mov byte [esp + 0x98], ch
jne 0x41c8db
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 8
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 8
mov dword [esp + 0xf0], 0
mov dword [esp + 0xd0], 0
lea eax, [esi + 0xa8]
mov ecx, dword [esi + 0xf0]
mov ebx, dword [esi + 0xc4]
mov edx, dword [esi + 0xc0]
add ecx, 8
test ebx, ebx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], eax
mov dword [esp], ebx
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xb8], 0
je 0x41c7bd
mov dword [esp + 0xd8], edi
mov edi, dword [esp + 0x9c]
mov eax, dword [esi + 0x100]
mov ebx, dword [esi + 0xc8]
xor edx, edx
mov dword [esp + 0xa0], 8
mov dword [esp + 8], 0
mov ecx, dword [edi + 0x64]
mov dword [esp + 0x28], eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0xe0], ecx
sub ecx, eax
mov dword [esp + 0x138], ecx
mov ecx, ebx
and ecx, 0xff00
mov dword [esp + 0x134], ecx
mov ecx, ebx
shr ecx, 0x10
cmp cx, 5
mov dword [esp + 0x128], ecx
mov ecx, 0
cmovb ecx, eax
setae dl
cmp byte [edi + 0x78], 0
mov eax, edi
mov edi, 0
mov dword [esp + 0x124], edx
cmove ecx, edi
mov edi, dword [esi + 0xf8]
mov dword [esp + 0x100], ecx
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x90], ecx
sub ecx, edi
mov dword [esp + 0x30], ecx
mov ecx, edx
shl ecx, 3
mov dword [esp + 0x130], ecx
mov ecx, dword [eax + 0x60]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x11c], ecx
add ecx, eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x10c], ecx
mov ecx, dword [esi + 0xe8]
mov dword [esp + 0x120], ecx
movzx ecx, bh
mov dword [esp + 0x13c], ecx
mov ecx, dword [eax + 8]
lea eax, [ecx + edi]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x6c], eax
movzx eax, bl
mov ebx, 0
mov dword [esp + 0xa4], eax
mov eax, dword [esi + 0xec]
mov dword [esp + 0xf8], eax
lea eax, [edx*8 + 4]
mov dword [esp + 0x12c], eax
lea eax, [esp + 0x140]
mov dword [esp + 0x118], eax
mov ecx, dword [esp + 0xb0]
xor eax, eax
mov edi, dword [esp + 0xa8]
mov dword [esp + 0x18], ebx
mov dword [esp + 4], 0
cmp byte [ecx + 0x21], 8
mov edx, dword [ecx + 0x1c]
mov esi, dword [ecx + 0x24]
mov dword [esp + 0x14], edi
lea ebx, [edi + 1]
sete al
add edx, dword [ecx + 0x18]
add esi, edi
xor edi, edi
xor ecx, ecx
lea eax, [esi + eax*8]
sub eax, edx
add eax, 4
mov dword [esp + 0x24], eax
mov eax, dword [esp]
dec eax
nop
movzx edx, byte [ebx - 1]
cmp ecx, 0x3f
jne 0x41b722
cmp dl, 2
jae 0x41c0dd
mov byte [esp + 0x50], dl
xor esi, esi
mov dword [esp + 0xc], eax
mov eax, edi
mov edi, 0
movzx edx, byte [esp + 0x50]
and dl, 0x7f
movzx edx, dl
shld esi, edx, cl
shl edx, cl
test cl, 0x20
cmovne esi, edx
cmovne edx, edi
mov edi, eax
or edi, edx
movzx edx, byte [esp + 0x50]
or dword [esp + 4], esi
test dl, dl
jns 0x41b76f
mov eax, dword [esp + 0xc]
add ecx, 7
inc ebx
add eax, 0xffffffff
jb 0x41b710
jmp 0x41c0ef
mov ecx, dword [esp + 4]
mov eax, dword [esp + 0xc]
mov esi, edi
mov dword [esp + 0xa8], ebx
or esi, ecx
mov dword [esp + 0xac], eax
je 0x41b8f1
mov eax, dword [esp + 0xb4]
mov ebx, dword [esp + 0x18]
test ecx, ecx
jne 0x41b7b1
lea ecx, [edi - 1]
cmp ecx, dword [eax + 8]
jae 0x41b7b1
imul ecx, ecx, 0x68
add ecx, dword [eax + 4]
jmp 0x41b882
mov ecx, dword [eax + 0xc]
mov dh, 0x12
test ecx, ecx
je 0x41c0ed
mov eax, dword [eax + 0x10]
mov esi, dword [esp + 0x10]
mov dword [esp + 0xc4], eax
movzx eax, word [ecx + 0x4d6]
mov dword [esp + 0x14], ecx
mov ebx, 0xffffffff
lea ecx, [eax*8]
mov dword [esp + 0xdc], eax
nop word [eax + eax]
test ecx, ecx
je 0x41b845
mov eax, dword [esp + 0x14]
mov edx, dword [eax + ebx*8 + 8]
mov dword [esp + 0xc], edx
mov edx, dword [eax + ebx*8 + 0xc]
xor eax, eax
mov esi, dword [esp + 0xc]
mov dword [esp], edx
xor edx, dword [esp + 4]
xor esi, edi
or esi, edx
mov edx, dword [esp + 4]
mov esi, dword [esp + 0x10]
setne al
cmp edi, dword [esp + 0xc]
sbb edx, dword [esp]
mov edx, 0xff
cmovb eax, edx
movzx edx, byte [esp + 0x50]
inc ebx
add ecx, 0xfffffff8
cmp al, 1
je 0x41b7f0
movzx eax, al
test eax, eax
jne 0x41b84c
jmp 0x41b873
mov ebx, dword [esp + 0xdc]
mov eax, dword [esp + 0xc4]
sub eax, 1
jb 0x41c1d5
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xc4], eax
mov ecx, dword [ecx + ebx*4 + 0x4d8]
jmp 0x41b7cc
mov ecx, dword [esp + 0x14]
imul eax, ebx, 0x68
mov ebx, dword [esp + 0x18]
lea ecx, [ecx + eax + 0x58]
cmp byte [ecx + 0x62], 1
jne 0x41b88f
inc dword [esp + 0xb8]
cmp word [ecx + 0x60], 0x2e
mov dword [esp + 0x10], ecx
jne 0x41b906
call fcn.00408120
test edx, edx
je 0x41b93d
mov edi, eax
shl edx, 4
mov dword [esp + 0xc], 0
mov dword [esp], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0xdc], 0
mov dword [esp + 0x104], 0
mov dword [esp + 4], 0
jmp 0x41b98f
mov ebx, dword [esp + 0x18]
dec dword [esp + 0xb8]
mov dword [esp + 0x10], 0
jmp 0x41b93d
call fcn.00408120
mov edi, dword [esp + 0xb0]
mov esi, edx
lea ecx, [esp + 0x140]
lea edx, [esp + 0xa8]
push esi
push eax
push dword [edi + 0x20]
call fcn.00426200
add esp, 0xc
cmp byte [esp + 0x140], 0x4b
jne 0x41dbd4
mov eax, dword [esp + 0xac]
test eax, eax
mov dword [esp], eax
jne 0x41b6c6
jmp 0x41c1dc
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov dword [esp], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0xc0], eax
mov dword [esp + 0xbc], ecx
mov edx, dword [esp + 0x50]
add edi, 0x10
add edx, 0xfffffff0
je 0x41bd30
movq xmm0, qword [edi]
movq xmm1, qword [edi + 8]
mov eax, dword [esp + 0xb0]
mov esi, ebx
mov dword [esp + 0x50], edx
movq qword [esp + 0x40], xmm1
movq qword [esp + 0x38], xmm0
lea ebx, [esp + 0x38]
lea ecx, [esp + 0x140]
lea edx, [esp + 0xa8]
push ebx
push dword [eax + 0x20]
call fcn.00424000
add esp, 8
mov eax, dword [esp + 0x140]
xor eax, 0x2e
or eax, dword [esp + 0x144]
je 0x41c1b2
movzx eax, word [esp + 0x150]
cmp eax, 0x11
je 0x41bb40
cmp eax, 0x12
mov ebx, esi
je 0x41ba99
cmp eax, 0x55
jne 0x41b97f
lea ecx, [esp + 0x38]
lea edx, [esp + 0x140]
call fcn.004258b0
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x40]
mov edx, ecx
and dl, 0x3f
cmp dl, 0x16
je 0x41bbd9
xor edx, edx
cmp ecx, 0x18
jne 0x41bc66
mov ecx, dword [esp + 0xe0]
cmp ecx, dword [esp + 0x28]
jb 0x41dcf9
mul dword [esp + 0x13c]
jo 0x41dd06
mov ecx, dword [esp + 0x138]
sub ecx, eax
jb 0x41dd11
add eax, dword [esp + 0x10c]
cmp dword [esp + 0x134], 0x800
jne 0x41bc4b
cmp ecx, 8
jb 0x41dd5e
cmp dword [eax + 4], 0
je 0x41bc54
jmp 0x41dd9f
lea ecx, [esp + 0x80]
lea edx, [esp + 0x140]
call fcn.004258b0
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0xf4]
test al, 0x3f
je 0x41bc1e
cmp eax, 7
je 0x41bbe7
cmp eax, 0xc
jne 0x41bd20
mov eax, dword [esp + 0x90]
cmp eax, dword [esp + 0x2c]
jb 0x41dbeb
mov eax, dword [esp + 0x88]
mov ebx, dword [esp + 8]
mul dword [esp + 0xa4]
jo 0x41dbfb
mov edx, dword [esp + 0x30]
sub edx, eax
jb 0x41dc02
movzx ebx, byte [esp + 0x20]
dec ebx
cmp ebx, 7
ja 0x41ddf0
mov ebx, dword [ebx*4 + 0x41e1e0]
mov ecx, dword [esp + 0x6c]
add ebx, dword [esp + 0xd8]
add ecx, eax
jmp ebx
lea ecx, [esp + 0x80]
lea edx, [esp + 0x140]
call fcn.004258b0
mov eax, dword [esp + 0x80]
mov ebx, esi
test al, 0x3f
je 0x41b954
cmp eax, 0xc
jne 0x41b97f
mov eax, dword [esp + 0x90]
cmp eax, dword [esp + 0x2c]
jb 0x41dbeb
mov eax, dword [esp + 0x88]
mov ebx, dword [esp + 8]
mul dword [esp + 0xa4]
jo 0x41dbfb
mov edx, dword [esp + 0x30]
sub edx, eax
jb 0x41dc02
movzx ebx, byte [esp + 0x20]
dec ebx
cmp ebx, 7
ja 0x41ddf0
mov ebx, dword [ebx*4 + 0x41e200]
mov ecx, dword [esp + 0x6c]
add ebx, dword [esp + 0xd8]
add ecx, eax
jmp ebx
add eax, dword [esp + 0x100]
mov edx, 1
jmp 0x41bc5f
mov eax, dword [esp + 0x88]
mov edx, dword [esp + 0x8c]
mov dword [esp + 0x104], 0
mov dword [esp + 0xdc], 1
mov dword [esp + 0x114], eax
mov dword [esp + 0x110], edx
jmp 0x41bd20
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x14], 0
mov dword [esp + 0xc4], 1
mov dword [esp + 0xd4], eax
jmp 0x41bd20
cmp ecx, 4
jb 0x41dd58
mov eax, dword [eax]
mov edx, 1
add eax, dword [esp + 0x28]
mov dword [esp + 0x108], eax
mov dword [esp + 4], edx
jmp 0x41b97f
mov edx, dword [esp + 0x50]
mov dword [esp + 0xf4], ecx
jmp 0x41b983
cmp dword [esp + 4], 0
je 0x41be2b
mov ecx, dword [esp + 0x9c]
mov eax, dword [esp + 0x12c]
mov edx, dword [esp + 0x130]
mov eax, dword [ecx + eax + 0x58]
mov ecx, dword [ecx + edx + 0x58]
mov edx, dword [esp + 0x108]
sub eax, edx
jb 0x41de59
add ecx, edx
mov edx, dword [esp + 0x120]
mov dword [esp + 0x140], edx
mov edx, dword [esp + 0xf8]
mov dword [esp + 0x144], edx
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x148], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 0x14c], edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x150], edx
mov edx, dword [esp + 0x20]
mov word [esp + 0x154], dx
mov edx, dword [esp + 0x128]
mov word [esp + 0x156], dx
mov dword [esp + 0x158], ecx
mov dword [esp + 0x15c], eax
mov eax, dword [esp + 0x124]
mov byte [esp + 0x160], al
mov byte [esp + 0x163], 0
mov word [esp + 0x161], 0
lea ecx, [esp + 0x38]
lea edx, [esp + 0x140]
call fcn.00422c30
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, eax
xor edx, 2
or edx, ecx
jne 0x41bea0
mov eax, dword [esp + 0x40]
cmp al, 0x4b
je 0x41bf66
jmp 0x41de63
mov eax, dword [esp]
or dword [esp + 0xc], eax
je 0x41b93d
mov eax, dword [esp + 0xc4]
or eax, dword [esp + 0x14]
je 0x41bf73
mov esi, dword [esp + 0xd4]
mov eax, dword [esp + 0xbc]
mov edi, dword [esp + 0xf4]
cmp dword [esp + 0xc0], esi
sbb eax, edi
jae 0x41b93d
cmp ebx, dword [esp + 0xc8]
jne 0x41bfd6
lea ecx, [esp + 0xc8]
call fcn.00421a60
mov eax, dword [esp + 0xcc]
mov esi, dword [esp + 0xd4]
mov edi, dword [esp + 0xf4]
jmp 0x41bfcf
mov dword [esp + 4], 0
jmp 0x41befa
mov edx, dword [esp + 0xa0]
movdqa xmm0, xmmword [esp + 0x50]
mov ecx, dword [esp + 8]
lea eax, [ebx + ebx*2]
inc ebx
movdqu xmmword [edx + eax*8], xmm0
mov dword [edx + eax*8 + 0x10], ecx
mov al, 1
mov dword [esp + 0xd0], ebx
mov dword [esp + 4], eax
lea ecx, [esp + 0x38]
lea edx, [esp + 0x140]
call fcn.00422c30
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x3c]
mov edx, eax
xor edx, 2
or edx, ecx
je 0x41be1a
xor eax, 1
or eax, ecx
jne 0x41bf5e
movdqu xmm1, xmmword [esp + 0x40]
pshufd xmm0, xmm1, 0x55
pshufd xmm2, xmm1, 0xff
movd ecx, xmm1
movdqa xmmword [esp + 0x50], xmm1
pshufd xmm1, xmm1, 0xee
movd esi, xmm1
movd eax, xmm0
movd edx, xmm2
cmp ecx, esi
sbb eax, edx
jae 0x41bed5
cmp ebx, dword [esp + 0xc8]
jne 0x41beaa
lea ecx, [esp + 0xc8]
call fcn.00421a60
mov eax, dword [esp + 0xcc]
mov dword [esp + 0xa0], eax
jmp 0x41beaa
mov eax, dword [esp + 4]
and al, 1
mov ah, al
test ah, ah
jne 0x41c00d
jmp 0x41b93d
mov eax, dword [esp + 0x104]
or dword [esp + 0xdc], eax
je 0x41b93d
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xbc]
mov esi, eax
mov edi, ecx
add esi, dword [esp + 0x114]
adc edi, dword [esp + 0x110]
cmp eax, esi
mov eax, ecx
sbb eax, edi
jae 0x41b93d
cmp ebx, dword [esp + 0xc8]
jne 0x41bfd6
lea ecx, [esp + 0xc8]
call fcn.00421a60
mov eax, dword [esp + 0xcc]
mov dword [esp + 0xa0], eax
mov edx, dword [esp + 0xa0]
mov ecx, dword [esp + 0xbc]
lea eax, [ebx + ebx*2]
inc ebx
mov dword [edx + eax*8 + 4], ecx
mov ecx, dword [esp + 0xc0]
mov dword [edx + eax*8], ecx
mov dword [edx + eax*8 + 8], esi
mov esi, dword [esp + 8]
mov dword [edx + eax*8 + 0xc], edi
mov dword [edx + eax*8 + 0x10], esi
mov dword [esp + 0xd0], ebx
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x24]
cmp ecx, dword [esp + 0xe8]
mov dword [esp + 0x140], eax
mov dword [esp + 0x148], 2
jne 0x41c03c
lea ecx, [esp + 0xe8]
call fcn.004257d0
mov edx, dword [esp + 8]
mov eax, dword [esp + 0xec]
movsd xmm0, qword [esp + 0x160]
lea ecx, [edx + edx*4]
inc edx
movsd qword [eax + ecx*8 + 0x20], xmm0
mov dword [esp + 8], edx
movsd xmm0, qword [esp + 0x158]
movsd qword [eax + ecx*8 + 0x18], xmm0
movsd xmm0, qword [esp + 0x150]
movsd qword [eax + ecx*8 + 0x10], xmm0
movq xmm0, qword [esp + 0x140]
movq xmm1, qword [esp + 0x148]
movq qword [eax + ecx*8 + 8], xmm1
movq qword [eax + ecx*8], xmm0
mov dword [esp + 0xf0], edx
jmp 0x41b93d
movzx edx, byte [eax + 3]
mov byte [ecx + 0xb], dl
movzx edx, word [eax + 1]
mov word [ecx + 9], dx
movzx edx, word [eax + 9]
mov word [ecx + 0x11], dx
movzx edx, byte [eax + 0xb]
mov byte [ecx + 0x13], dl
mov edx, dword [eax + 4]
mov byte [ecx + 8], bl
mov dword [ecx + 0xc], edx
mov dh, byte [eax + 8]
mov eax, dword [eax + 0xc]
mov byte [ecx + 0x10], dh
mov dword [ecx + 0x14], eax
jmp 0x41d15b
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], eax
mov dh, 6
jmp 0x41c10c
mov ecx, dword [esp + 0x14]
xor eax, eax
mov dh, 0x13
add ecx, dword [esp]
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], 0
mov esi, dword [esp + 0x10]
mov byte [esp + 0x40], dh
mov byte [esp + 0x41], dl
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 8]
mov dword [esp + 0x38], 1
cmp dword [esp + 0xc8], 0
je 0x41c14b
mov ecx, dword [esp + 0xcc]
mov edx, 8
call fcn.004028a0
mov esi, dword [esp + 0xec]
test ebx, ebx
je 0x41c193
lea edi, [esi + 0x18]
jmp 0x41c166
add edi, 0x28
dec ebx
je 0x41c193
cmp dword [edi - 0x10], 0
jne 0x41c160
cmp dword [edi - 8], 0
je 0x41c17f
mov ecx, dword [edi - 0xc]
mov edx, 8
call fcn.004028a0
cmp dword [edi], 0
je 0x41c160
mov ecx, dword [edi - 4]
mov edx, 8
call fcn.004028a0
jmp 0x41c160
cmp dword [esp + 0xe8], 0
je 0x41c898
mov ecx, esi
mov edx, 8
call fcn.004028a0
jmp 0x41c898
movq xmm0, qword [esp + 0x148]
movq xmm1, qword [esp + 0x150]
movq qword [esp + 0x48], xmm1
movq qword [esp + 0x40], xmm0
jmp 0x41c124
mov dh, 0x12
jmp 0x41c110
mov eax, dword [esp + 0xcc]
cmp ebx, 0x15
mov dword [esp + 0x2c], eax
jae 0x41c20a
cmp ebx, 1
jbe 0x41c7bd
mov ecx, dword [esp + 0x2c]
mov edx, ebx
push 1
call fcn.00422ad0
add esp, 4
jmp 0x41c7bd
lea eax, [ebx*4]
and eax, 0xfffffff8
lea ecx, [eax + eax*2]
movzx eax, byte [0x4a5058]
call fcn.0043cf80
test eax, eax
mov dword [esp + 4], eax
je 0x41e05e
movzx eax, byte [0x4a5058]
mov ecx, pe_nt_image_headers32
call fcn.0043cf80
test eax, eax
je 0x41e06a
mov esi, eax
mov eax, dword [esp + 0x2c]
xor edx, edx
mov dword [esp + 0xa4], 0x10
lea ecx, [eax + 0x30]
add eax, 0xffffffe8
mov dword [esp + 0x90], eax
xor eax, eax
mov dword [esp + 0x6c], ecx
jmp 0x41c281
mov edx, 1
mov eax, dword [esp + 0x20]
cmp eax, ebx
jae 0x41c7a3
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x2c]
mov edi, ebx
lea ecx, [eax + eax*2]
mov dword [esp + 0xc], esi
mov dword [esp + 0x18], ebx
mov dword [esp], eax
sub edi, eax
cmp edi, 2
lea edx, [edx + ecx*8]
mov dword [esp + 0x10], edx
jae 0x41c2fe
mov ecx, dword [esp]
mov ebx, dword [esp + 0x18]
lea edx, [edi + ecx]
mov esi, edx
sub esi, ecx
jb 0x41dfb8
cmp edx, ebx
ja 0x41dfb8
jae 0x41c411
cmp edi, 0xa
jae 0x41c411
lea esi, [ecx + 0xa]
cmp esi, ebx
cmovae esi, ebx
cmp edi, 1
adc edi, 0
mov dword [esp + 0x20], esi
sub esi, ecx
mov ecx, dword [esp + 0x10]
mov edx, esi
push edi
call fcn.00422ad0
mov ecx, dword [esp + 4]
add esp, 4
jmp 0x41c415
mov esi, dword [edx + 0x18]
mov ebx, dword [edx + 0x1c]
cmp esi, dword [edx]
mov eax, ebx
sbb eax, dword [edx + 4]
jae 0x41c748
mov eax, 2
cmp edi, 2
je 0x41c34a
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x50], edi
lea edi, [eax + ecx*8]
mov eax, 2
mov ecx, ebx
mov edx, esi
mov esi, dword [edi]
mov ebx, dword [edi + 4]
cmp esi, edx
mov edx, ebx
sbb edx, ecx
jae 0x41c34a
inc eax
add edi, 0x18
cmp dword [esp + 0x50], eax
jne 0x41c32b
mov eax, dword [esp + 0x50]
mov ecx, dword [esp]
mov edx, eax
add edx, ecx
jb 0x41e037
mov ebx, dword [esp + 0x18]
cmp edx, ebx
ja 0x41e024
mov edi, 1
cmp eax, 2
jb 0x41c2b1
mov esi, dword [esp + 0x90]
mov edi, dword [esp + 0x10]
mov ecx, edx
mov edx, eax
mov dword [esp + 0x20], ecx
lea ecx, [ecx + ecx*2]
shr edx, 1
lea esi, [esi + ecx*8]
movsd xmm0, qword [edi + 0x10]
movsd qword [esp + 0x150], xmm0
movsd xmm0, qword [edi]
movsd xmm1, qword [edi + 8]
movsd qword [esp + 0x148], xmm1
movsd qword [esp + 0x140], xmm0
movsd xmm0, qword [esi + 0x10]
movsd qword [edi + 0x10], xmm0
movsd xmm0, qword [esi]
movsd xmm1, qword [esi + 8]
movsd qword [edi + 8], xmm1
movsd qword [edi], xmm0
add edi, 0x18
movsd xmm0, qword [esp + 0x150]
movsd qword [esi + 0x10], xmm0
movq xmm0, qword [esp + 0x140]
movq xmm1, qword [esp + 0x148]
movq qword [esi + 8], xmm1
movq qword [esi], xmm0
add esi, 0xffffffe8
dec edx
jne 0x41c38c
mov edx, dword [esp + 0x20]
mov ecx, dword [esp]
mov edi, eax
jmp 0x41c2b1
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x14]
cmp edx, dword [esp + 0xa4]
jne 0x41c47e
movzx eax, byte [0x4a5058]
mov ecx, edx
shl ecx, 4
mov edi, edx
call fcn.0043cf80
test eax, eax
je 0x41dfe3
mov ecx, eax
lea eax, [edi + edi]
mov dword [esp + 0xa4], eax
lea eax, [edi*8]
push eax
mov edi, dword [esp + 0x10]
push edi
push ecx
mov dword [esp + 0x5c], ecx
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ecx, edi
mov edi, dword [esp + 0x14]
mov edx, 4
call fcn.004028a0
mov eax, dword [esp + 0x50]
mov ecx, dword [esp]
mov edx, edi
jmp 0x41c482
mov eax, dword [esp + 0xc]
mov dword [eax + edx*8], esi
mov dword [eax + edx*8 + 4], ecx
inc edx
mov esi, eax
cmp edx, 2
jb 0x41c275
mov dword [esp + 0xc], esi
jmp 0x41c50c
mov eax, dword [esp + 4]
mov dword [esp + 0x50], edi
mov ebx, dword [esp + 0x14]
mov edi, dword [esp]
sub esi, eax
lea ecx, [ebx - 1]
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0xc]
lea edx, [ecx + edi*8]
mov dword [esp + 0x30], edx
push esi
mov esi, ecx
push eax
push dword [esp + 0x58]
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x30]
add eax, dword [esp + 0x10]
mov dword [esi + edi*8 + 8], eax
mov eax, dword [esp + 0x28]
mov dword [esi + edi*8 + 0xc], eax
not edi
lea eax, [ecx + 8]
add edi, ebx
shl edi, 3
push edi
push eax
push ecx
call sub.msvcrt.dll_memmove
add esp, 0xc
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x18]
cmp edx, 1
jbe 0x41c270
mov eax, dword [esi + edx*8 - 8]
mov ecx, dword [esi + edx*8 - 4]
mov edi, edx
add ecx, eax
cmp ecx, ebx
je 0x41c560
mov edx, dword [esi + edi*8 - 0x10]
cmp edx, eax
jbe 0x41c560
cmp edi, 2
je 0x41c78b
lea ecx, [edi - 3]
mov dword [esp], ecx
mov ecx, dword [esi + edi*8 - 0x18]
lea esi, [edx + eax]
cmp ecx, esi
jbe 0x41c573
cmp edi, 3
jbe 0x41c795
mov esi, dword [esp + 0xc]
add edx, ecx
cmp dword [esi + edi*8 - 0x20], edx
mov edx, edi
jbe 0x41c575
jmp 0x41c275
cmp edi, 2
mov edx, edi
je 0x41c57c
lea ecx, [edx - 3]
mov dword [esp], ecx
mov ecx, dword [esi + edx*8 - 0x18]
jmp 0x41c575
mov edx, edi
mov edi, dword [esp]
cmp ecx, eax
jb 0x41c57f
lea edi, [edx - 2]
cmp edx, edi
jbe 0x41df2d
lea eax, [edi + 1]
mov dword [esp + 0x14], edx
cmp edx, eax
jbe 0x41df1b
mov esi, ebx
mov ebx, dword [esp + 0xc]
mov eax, dword [ebx + edi*8 + 8]
mov edx, dword [ebx + edi*8 + 0xc]
mov ecx, dword [ebx + edi*8 + 4]
add edx, eax
mov ebx, edx
sub ebx, ecx
jb 0x41df6a
cmp edx, esi
mov dword [esp + 8], eax
ja 0x41df7c
mov eax, dword [esp + 0xc]
mov dword [esp + 0x28], ecx
mov dword [esp], edi
mov esi, dword [eax + edi*8]
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + 0x2c]
lea ecx, [ecx + eax*8]
lea eax, [esi + esi*2]
mov dword [esp + 0x10], esi
lea edi, [ecx + eax*8]
lea eax, [edx + edx*2]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x24], eax
mov eax, ebx
sub eax, esi
cmp eax, esi
jae 0x41c6a6
mov dword [esp + 0x30], eax
lea eax, [eax*8]
lea esi, [eax + eax*2]
push esi
push edi
mov ebx, dword [esp + 0xc]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
add esi, ebx
cmp dword [esp + 0x10], 0
jle 0x41c49b
cmp dword [esp + 0x30], 0
jle 0x41c49b
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x24]
lea eax, [eax + ecx*8]
nop dword [eax]
mov ecx, dword [esi - 0x18]
mov edx, dword [esi - 0x14]
mov ebx, 0
cmp ecx, dword [edi - 0x18]
sbb edx, dword [edi - 0x14]
setb dl
setb cl
adc ebx, 0xffffffff
movzx edx, dl
neg edx
test cl, cl
lea edx, [edx + edx*2]
lea edi, [edi + edx*8]
lea edx, [ebx + ebx*2]
lea esi, [esi + edx*8]
mov ecx, esi
cmovne ecx, edi
cmp edi, dword [esp + 0x50]
movsd xmm1, qword [ecx + 8]
movq xmm0, qword [ecx]
movsd qword [eax + 8], xmm1
movq xmm1, qword [ecx + 0x10]
movq qword [eax], xmm0
movq qword [eax + 0x10], xmm1
jbe 0x41c49b
add eax, 0xffffffe8
cmp esi, dword [esp + 4]
ja 0x41c640
jmp 0x41c49b
lea eax, [esi*8]
lea esi, [eax + eax*2]
push esi
push ecx
push dword [esp + 0xc]
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x1c]
add esp, 0xc
add esi, dword [esp + 4]
test eax, eax
jle 0x41c73f
cmp ebx, eax
jle 0x41c73f
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
lea ecx, [eax + ecx*8]
mov eax, dword [esp + 4]
nop dword [eax]
mov edx, dword [edi]
mov ebx, dword [esp + 0x50]
cmp edx, dword [eax]
mov edx, dword [edi + 4]
sbb edx, dword [eax + 4]
mov edx, eax
cmovb edx, edi
movsd xmm1, qword [edx + 8]
movq xmm0, qword [edx]
movsd qword [ebx + 8], xmm1
movq xmm1, qword [edx + 0x10]
setae dl
movq qword [ebx], xmm0
movzx edx, dl
lea edx, [edx + edx*2]
lea eax, [eax + edx*8]
setb dl
movq qword [ebx + 0x10], xmm1
add ebx, 0x18
cmp eax, esi
mov dword [esp + 0x50], ebx
jae 0x41c4a3
movzx edx, dl
lea edx, [edx + edx*2]
lea edi, [edi + edx*8]
cmp edi, ecx
jb 0x41c6e0
jmp 0x41c4a3
mov eax, dword [esp + 4]
jmp 0x41c4a3
mov eax, edi
mov edi, 2
cmp eax, 2
mov dword [esp + 0x50], eax
je 0x41c2a7
mov eax, dword [esp + 0x6c]
lea eax, [eax + ecx*8]
mov ecx, ebx
mov edx, esi
mov esi, dword [eax]
mov ebx, dword [eax + 4]
cmp esi, edx
mov edx, ebx
sbb edx, ecx
jb 0x41c2a7
inc edi
add eax, 0x18
cmp dword [esp + 0x50], edi
jne 0x41c763
mov edi, dword [esp + 0x50]
jmp 0x41c2a7
mov edx, 2
jmp 0x41c275
mov esi, dword [esp + 0xc]
mov edx, 3
jmp 0x41c275
mov ecx, esi
mov edx, 4
call fcn.004028a0
mov ecx, dword [esp + 4]
mov edx, 8
call fcn.004028a0
mov edi, dword [esp + 0xf0]
mov ecx, dword [esp + 0xec]
cmp dword [esp + 0xe8], edi
jbe 0x41c802
test edi, edi
je 0x41c808
lea eax, [edi*8]
lea esi, [eax + eax*4]
mov edx, esi
call fcn.004028c0
test eax, eax
mov dword [esp + 0x50], eax
jne 0x41c81a
mov ecx, 8
mov edx, esi
call fcn.00402bb0
jmp 0x41e074
mov dword [esp + 0x50], ecx
jmp 0x41c81a
mov edx, 8
call fcn.004028a0
mov dword [esp + 0x50], 8
mov ebx, dword [esp + 0xd0]
mov ecx, dword [esp + 0xcc]
cmp dword [esp + 0xc8], ebx
jbe 0x41c869
test ebx, ebx
je 0x41c86d
lea eax, [ebx*8]
lea edx, [eax + eax*2]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], edx
call fcn.004028c0
mov esi, eax
test eax, eax
jne 0x41c87c
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 4]
mov ecx, 8
call fcn.00402bb0
jmp 0x41e074
mov esi, ecx
jmp 0x41c87c
mov edx, 8
mov esi, 8
call fcn.004028a0
mov eax, dword [esp + 0x50]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], edi
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], ebx
mov dword [esp + 0x38], 0
mov ebx, dword [esp + 0x94]
lea esi, [ebx + 0x120]
cmp dword [esi], 2
jne 0x41c8cc
movsd xmm0, qword [esp + 0x48]
movsd qword [esi + 0x10], xmm0
movq xmm0, qword [esp + 0x38]
movq xmm1, qword [esp + 0x40]
movq qword [esi + 8], xmm1
movq qword [esi], xmm0
jmp 0x41c8d5
lea ecx, [esp + 0x38]
call fcn.00426b40
mov edx, dword [esp + 0x1c]
mov eax, dword [esi]
test eax, eax
je 0x41c934
movzx eax, byte [ebx + 0x128]
mov esi, dword [ebx + 0x12c]
cmp al, 0x4b
je 0x41c93a
mov ah, byte [ebx + 0x12b]
mov edi, dword [esp + 0xe4]
mov ecx, dword [ebx + 0x134]
mov edx, dword [ebx + 0x130]
mov byte [edi + 0xb], ah
mov dword [esp + 0x50], ecx
mov ecx, esi
movzx esi, word [ebx + 0x129]
mov word [edi + 9], si
mov byte [edi + 8], al
mov dword [edi + 0xc], ecx
mov ecx, dword [esp + 0x50]
mov dword [edi + 0x10], edx
mov dword [edi + 0x14], ecx
mov ecx, edi
jmp 0x41d15b
lea esi, [ebx + 0x124]
mov eax, dword [edx]
mov ecx, dword [edx + 4]
mov edx, dword [esi + 0xc]
test edx, edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x50], ecx
je 0x41c9fd
mov eax, dword [esi + 8]
mov edi, dword [esp + 0x18]
mov dword [esp + 0x28], esi
xor esi, esi
mov ebx, edx
mov dword [esp + 8], eax
jmp 0x41c995
mov esi, dword [esp + 0x14]
mov ebx, dword [esp]
mov ecx, esi
cmp edi, dword [esp + 0x10]
mov eax, dword [esp + 0x50]
sbb eax, dword [esp + 4]
cmovb ebx, edx
cmovae esi, ecx
mov edx, ebx
sub edx, esi
jbe 0x41cb7b
mov dword [esp], ebx
mov ebx, dword [esp + 8]
shr edx, 1
mov dword [esp + 0x14], esi
add edx, esi
lea ecx, [edx + edx*2]
mov eax, dword [ebx + ecx*8 + 4]
mov esi, dword [ebx + ecx*8]
mov dword [esp + 4], eax
mov eax, dword [ebx + ecx*8 + 0xc]
cmp edi, esi
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x50]
sbb eax, dword [esp + 4]
mov eax, dword [ebx + ecx*8 + 8]
mov ebx, edi
jb 0x41c9e0
cmp ebx, eax
mov ebx, dword [esp + 0x50]
sbb ebx, dword [esp + 0xc]
mov ebx, dword [esp + 0x18]
jb 0x41ca04
mov ecx, dword [esp + 0x50]
cmp ebx, eax
mov edi, ebx
sbb ecx, dword [esp + 0xc]
jb 0x41c970
mov ebx, dword [esp]
mov esi, dword [esp + 0x14]
lea ecx, [edx + 1]
jmp 0x41c979
xor esi, esi
jmp 0x41cf78
mov eax, dword [esp + 8]
mov ecx, dword [eax + ecx*8 + 0x10]
mov eax, dword [esp + 0x28]
mov edx, dword [eax + 4]
cmp ecx, edx
jae 0x41df92
mov edx, dword [eax]
lea ecx, [ecx + ecx*4]
mov edi, dword [esp + 0x34]
lea eax, [edx + ecx*8]
mov dword [esp + 0x14], eax
mov eax, dword [edx + ecx*8 + 8]
cmp eax, 2
jne 0x41cf28
movzx eax, byte [edi + 0xc9]
mov esi, dword [edx + ecx*8]
mov edx, dword [edi + 0xcc]
mov ebx, dword [edi + 0xc4]
xor ecx, ecx
cmp al, 8
mov byte [esp + 0x28], al
mov dword [esp + 4], edx
mov dword [esp + 0x90], esi
sete cl
lea eax, [edx + ecx*8 + 4]
mov edx, edi
mov edi, esi
mov dword [esp + 0xc], eax
sub eax, ebx
sub esi, eax
lea eax, [edx + 0xa8]
mov edx, dword [edx + 0xf0]
mov dword [esp], eax
lea eax, [edx + 8]
mov dword [esp + 0x10], eax
jb 0x41cb82
mov eax, ebx
sub eax, esi
jbe 0x41cb82
mov dword [esp + 8], edx
mov edx, dword [esp + 0x34]
xor edi, edi
mov edx, dword [edx + 0xc0]
add esi, edx
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], eax
mov eax, dword [esp]
xor esi, esi
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x1c], 0
mov eax, dword [eax + 0xc]
mov dword [esp + 0x24], eax
lea eax, [ecx*8 + 4]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x44], ecx
lea ecx, [edx + ebx]
sub ebx, eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x48], 0
sub ebx, dword [esp + 4]
mov dword [esp + 0x10], ecx
mov ecx, eax
not ecx
add ebx, edx
mov dword [esp + 0x30], ecx
xor ecx, ecx
nop word [eax + eax]
movzx edx, byte [ebx + eax]
cmp ecx, 0x3f
jne 0x41cb1e
cmp dl, 2
jae 0x41cb95
mov eax, edx
mov dword [esp + 4], edx
xor edx, edx
mov dword [esp], ebx
mov ebx, esi
mov esi, edi
mov edi, 0
and al, 0x7f
movzx eax, al
shld edx, eax, cl
shl eax, cl
test cl, 0x20
cmovne edx, eax
cmovne eax, edi
mov edi, esi
mov esi, ebx
or esi, edx
mov edx, dword [esp + 4]
or edi, eax
test dl, dl
jns 0x41cb9c
mov edx, dword [esp + 0xc]
mov ebx, dword [esp]
mov eax, dword [esp + 0x90]
add ecx, 7
dec edx
inc ebx
cmp eax, edx
mov dword [esp + 0xc], edx
jne 0x41cb10
mov edx, dword [esp + 4]
mov bl, 0x13
jmp 0x41ceca
xor esi, esi
jmp 0x41cf6d
xor edi, edi
mov bl, 0x38
xor edx, edx
mov dword [esp + 0x1c], 0
jmp 0x41ceca
mov bl, 6
jmp 0x41ceca
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0x90]
mov ecx, dword [esp]
add ebx, dword [esp + 0xc]
lea eax, [ecx + eax + 1]
mov dword [esp + 0x38], eax
mov eax, edi
or eax, esi
mov dword [esp + 0x3c], ebx
je 0x41e01a
test esi, esi
jne 0x41cbe3
mov ecx, dword [esp + 8]
lea eax, [edi - 1]
cmp eax, dword [ecx + 0x10]
jae 0x41cbe3
mov edx, dword [esp + 8]
imul ecx, eax, 0x68
add ecx, dword [edx + 0xc]
jmp 0x41cc95
mov eax, dword [esp + 8]
mov bl, 0x12
mov ecx, dword [eax + 0x14]
test ecx, ecx
je 0x41ceca
mov eax, dword [eax + 0x18]
mov dword [esp + 0xc], esi
mov dword [esp + 0x2c], eax
movzx eax, word [ecx + 0x4d6]
mov esi, 0xffffffff
mov dword [esp + 8], ecx
lea ebx, [eax*8]
mov dword [esp + 0x30], eax
test ebx, ebx
je 0x41cc69
mov eax, dword [esp + 8]
mov edx, dword [eax + esi*8 + 0xc]
mov ecx, dword [eax + esi*8 + 8]
mov dword [esp], edx
xor edx, dword [esp + 0xc]
mov eax, ecx
mov dword [esp + 0x10], ecx
xor ecx, ecx
xor eax, edi
or eax, edx
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 4]
setne cl
cmp edi, dword [esp + 0x10]
sbb eax, dword [esp]
mov eax, 0xff
cmovb ecx, eax
inc esi
add ebx, 0xfffffff8
cmp cl, 1
je 0x41cc1a
movzx eax, cl
test eax, eax
jne 0x41cc6d
jmp 0x41cc8a
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 8]
mov bl, 0x12
sub dword [esp + 0x2c], 1
jb 0x41ceca
mov ecx, dword [ecx + esi*4 + 0x4d8]
jmp 0x41cbff
mov ecx, dword [esp + 8]
imul eax, esi, 0x68
lea ecx, [ecx + eax + 0x58]
cmp byte [ecx + 0x62], 1
mov edi, dword [esp + 0x34]
jne 0x41cca7
mov dword [esp + 0x48], 1
call fcn.00408120
movzx ecx, byte [esp + 0x98]
mov esi, eax
test edx, edx
mov dword [esp], ecx
je 0x41d33f
mov eax, dword [edi + 0xf4]
shl edx, 4
mov dword [esp + 0x20], 0
mov edi, edx
mov dword [esp + 4], eax
movzx eax, byte [esp + 0x28]
mov dword [esp + 0xc], eax
jmp 0x41ccf7
mov eax, dword [esp + 0x20]
add esi, 0x10
add edi, 0xfffffff0
mov dword [esp + 0x20], eax
je 0x41d347
movq xmm0, qword [esi]
movq xmm1, qword [esi + 8]
mov eax, dword [esp + 0x40]
movq qword [esp + 0xb0], xmm1
movq qword [esp + 0xa8], xmm0
lea ebx, [esp + 0xa8]
lea ecx, [esp + 0x140]
lea edx, [esp + 0x38]
push ebx
push dword [eax + 0x20]
call fcn.00424000
add esp, 8
mov eax, dword [esp + 0x140]
xor eax, 0x2e
or eax, dword [esp + 0x144]
je 0x41d47a
movzx eax, word [esp + 0x150]
cmp eax, 0x46
jle 0x41cdd1
cmp eax, 0x47
je 0x41cde3
cmp eax, 0x6e
je 0x41cd71
cmp eax, 0x2007
jne 0x41cce3
lea ebx, [esp + 0xa8]
lea edx, [esp + 0x140]
mov ecx, ebx
call fcn.004258b0
mov edx, dword [esp + 0x9c]
lea ecx, [esp + 0x80]
push ebx
push dword [esp + 8]
push dword [esp + 0x14]
call fcn.004222f0
add esp, 0xc
cmp byte [esp + 0x80], 0x4b
mov eax, dword [esp + 0x20]
jne 0x41cce7
mov eax, dword [esp + 0x88]
mov dword [esp + 0xa0], eax
mov eax, dword [esp + 0x84]
jmp 0x41cce7
cmp eax, 3
je 0x41ce5c
cmp eax, 0x31
jne 0x41cce3
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x41cce7
lea ecx, [esp + 0xa8]
lea edx, [esp + 0x140]
call fcn.004258b0
mov edx, dword [esp + 0xa8]
lea ecx, [esp + 0x80]
push 0x10
push dword [esp + 0xa0]
push dword [esp + 0x2c]
push dword [esp + 0x40]
push dword [esp + 0x10]
push dword [esp + 0xc4]
push dword [esp + 0xc4]
call fcn.00427fc0
add esp, 0x1c
movzx ebx, byte [esp + 0x80]
cmp bl, 0x4b
jne 0x41dd23
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x88]
jmp 0x41cebe
mov eax, dword [esp + 0x20]
test eax, eax
jne 0x41cce7
lea ebx, [esp + 0xa8]
lea edx, [esp + 0x140]
mov ecx, ebx
call fcn.004258b0
mov edx, dword [esp + 0x9c]
lea ecx, [esp + 0x80]
push ebx
push dword [esp + 8]
push dword [esp + 0x14]
call fcn.004222f0
add esp, 0xc
xor eax, eax
cmp byte [esp + 0x80], 0x4b
jne 0x41ceba
mov eax, dword [esp + 0x88]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xa0], ecx
jmp 0x41cce7
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 8]
cmp eax, 2
jne 0x41cf28
mov esi, dword [esp + 0x1c]
mov eax, edx
mov ecx, 1
mov edx, dword [esp + 0x14]
movzx eax, al
shl edi, 0x10
shl eax, 8
or eax, edi
mov dword [edx + 8], ecx
mov ecx, dword [esp + 4]
mov edi, edx
mov dword [edx + 0xc], ecx
movzx ecx, bl
mov ebx, dword [esp]
or ecx, eax
mov dword [edx + 0x10], ecx
mov ecx, dword [esp + 0x10]
mov dword [edx + 0x14], ebx
mov dword [edx + 0x18], ecx
mov dword [edx + 0x1c], esi
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0xa0]
mov dword [edx + 0x20], esi
mov dword [edx + 0x24], ecx
mov eax, dword [edi + 8]
test eax, eax
je 0x41cf66
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0xe4]
movzx ecx, byte [esi + 0x13]
movzx eax, byte [esi + 0x10]
mov byte [edi + 0xb], cl
movzx ecx, word [esi + 0x11]
mov word [edi + 9], cx
mov ecx, dword [esi + 0x1c]
mov edx, dword [esi + 0x14]
mov esi, dword [esi + 0x18]
mov byte [edi + 8], al
mov dword [edi + 0xc], edx
mov dword [edi + 0x14], ecx
mov dword [edi + 0x10], esi
mov ecx, edi
jmp 0x41d15b
mov esi, dword [esp + 0x14]
add esi, 0xc
mov ebx, dword [esp + 0x94]
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x18]
mov edx, ecx
mov ecx, dword [ebx + 0x10]
mov dword [esp + 0x1c], 2
mov dword [esp + 0x14], esi
add eax, 1
adc edx, 0
xor ecx, 0x2f
mov dword [esp + 0x34], eax
or ecx, dword [ebx + 0x14]
mov dword [esp + 0x28], edx
jne 0x41cfd4
mov ebx, dword [esp + 0xe4]
mov eax, dword [esp + 0x14]
mov dword [ebx + 4], eax
mov eax, dword [esp + 0x1c]
mov dword [ebx + 8], eax
mov eax, dword [esp + 0x50]
mov dword [ebx + 0xc], ecx
mov ecx, ebx
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], esi
mov dword [ebx + 0x18], edx
mov dword [ebx + 0x1c], edi
xor eax, eax
jmp 0x41d160
mov eax, dword [ebx + 0x108]
cmp eax, 2
jne 0x41d049
lea edi, [ebx + 0x108]
lea edx, [ebx + 0x10]
lea esi, [esp + 0x140]
mov ecx, esi
call fcn.0041e990
lea ecx, [esp + 0x38]
mov edx, ebx
push dword [esp + 0x9c]
push esi
call fcn.0041ecf0
add esp, 8
cmp dword [ebx + 0x108], 2
jne 0x41d037
movsd xmm0, qword [esp + 0x48]
movsd qword [edi + 0x10], xmm0
movq xmm0, qword [esp + 0x38]
movq xmm1, qword [esp + 0x40]
movq qword [edi + 8], xmm1
movq qword [edi], xmm0
jmp 0x41d040
lea ecx, [esp + 0x38]
call fcn.004213c0
mov eax, dword [edi]
mov ebx, dword [esp + 0x94]
test eax, eax
je 0x41d06e
movzx eax, byte [ebx + 0x110]
mov edi, dword [ebx + 0x114]
cmp eax, 0x4b
jne 0x41d122
test edi, edi
mov ebx, edi
jne 0x41d074
jmp 0x41cfa3
add ebx, 0x10c
mov edx, dword [ebx + 0xc]
mov ecx, dword [ebx + 8]
mov dword [esp + 0x30], ebx
test edx, edx
mov dword [esp + 0x24], edx
mov dword [esp + 8], ecx
je 0x41d16a
mov ebx, dword [esp + 0x50]
xor edi, edi
mov eax, edx
mov esi, edx
jmp 0x41d0cb
mov ecx, dword [esp + 4]
mov edx, edi
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0xc]
cmp dword [esp + 0x18], eax
mov eax, ebx
sbb eax, dword [esp]
cmovb esi, ecx
mov ecx, dword [esp + 8]
cmovae edi, edx
mov eax, esi
sub eax, edi
jbe 0x41d18a
shr eax, 1
mov dword [esp + 0xc], esi
add eax, edi
mov dword [esp + 4], eax
lea eax, [eax + eax*2]
mov esi, dword [ecx + eax*8 + 8]
mov edx, dword [ecx + eax*8 + 0xc]
cmp dword [esp + 0x18], esi
mov dword [esp + 0x10], esi
mov esi, ebx
mov dword [esp], edx
sbb esi, edx
mov esi, dword [ecx + eax*8 + 0x14]
mov eax, dword [ecx + eax*8 + 0x10]
mov ecx, ebx
jb 0x41d10d
cmp dword [esp + 0x18], eax
mov ecx, dword [esp + 0x50]
sbb ecx, esi
mov ecx, dword [esp + 0x50]
jb 0x41d175
cmp dword [esp + 0x18], eax
mov eax, ecx
mov ebx, ecx
sbb eax, esi
jb 0x41d0a0
mov ecx, dword [esp + 4]
lea edx, [ecx + 1]
jmp 0x41d0a6
movzx ecx, byte [ebx + 0x113]
movzx edx, word [ebx + 0x111]
mov esi, dword [esp + 0xe4]
shl edx, 8
shl ecx, 0x18
or ecx, edx
mov edx, dword [ebx + 0x11c]
or ecx, eax
mov eax, dword [ebx + 0x118]
mov dword [esi + 8], ecx
mov ecx, esi
mov dword [esi + 0xc], edi
mov dword [esi + 0x14], edx
mov dword [esi + 0x10], eax
mov eax, 1
mov dword [ecx], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor edi, edi
cmp edi, edx
jb 0x41d19b
jmp 0x41cfa3
mov edx, dword [esp + 0x24]
mov edi, dword [esp + 4]
mov ecx, dword [esp + 8]
cmp edi, edx
jb 0x41d19b
jmp 0x41cfa3
mov edx, dword [esp + 0x24]
test edi, edi
cmovne edi, edx
cmp edi, edx
jae 0x41cfa3
mov dword [esp + 4], edi
lea edi, [edi + edi*2]
mov ebx, dword [ecx + edi*8 + 4]
test ebx, ebx
je 0x41d24d
mov eax, dword [ecx + edi*8]
mov ecx, ebx
mov dword [esp + 0x94], edi
mov dword [esp + 0x9c], eax
xor eax, eax
jmp 0x41d1d5
mov edi, dword [esp + 0x94]
mov eax, dword [esp]
mov ebx, ecx
sub ebx, eax
jbe 0x41d23e
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x9c]
shr ebx, 1
mov dword [esp], eax
add ebx, eax
lea eax, [ebx + ebx*2]
mov edi, dword [ecx + eax*8]
mov eax, dword [ecx + eax*8 + 4]
mov ecx, dword [esp + 0x50]
mov edx, eax
mov esi, edi
xor edx, ecx
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x18]
xor esi, edx
or esi, dword [esp + 0xc]
je 0x41d22d
cmp edx, edi
sbb ecx, eax
mov ecx, ebx
jb 0x41d217
mov ecx, dword [esp + 0x10]
cmp edi, dword [esp + 0x18]
sbb eax, dword [esp + 0x50]
jae 0x41d1c5
mov edi, dword [esp + 0x94]
inc ebx
mov eax, ebx
jmp 0x41d1cf
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 8]
mov edi, dword [esp + 0x94]
jmp 0x41d24f
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 8]
sub eax, 1
mov ebx, eax
jae 0x41d24f
xor ebx, ebx
cmp dword [esp + 4], edx
jae 0x41cfa3
mov esi, dword [esp + 0x34]
mov eax, dword [ecx + edi*8 + 0xc]
mov edx, edi
mov edi, ecx
cmp dword [edi + edx*8 + 8], esi
sbb eax, dword [esp + 0x28]
jae 0x41cfa3
lea eax, [edi + edx*8]
mov ecx, edi
cmp ebx, dword [eax + 4]
jae 0x41d2bc
mov eax, dword [eax]
mov edi, dword [esp + 0x34]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + ecx*8 + 4]
cmp dword [eax + ecx*8], edi
sbb edx, dword [esp + 0x28]
jae 0x41cfa3
lea eax, [eax + ecx*8]
mov edx, dword [esp + 0x30]
mov ecx, dword [eax + 8]
cmp dword [edx + 4], ecx
jbe 0x41d4ad
mov esi, dword [edx]
lea ecx, [ecx + ecx*2]
mov edx, dword [esi + ecx*4 + 4]
mov edi, dword [esi + ecx*4 + 8]
jmp 0x41d4af
mov esi, dword [esp + 4]
mov edi, dword [esp + 0x24]
mov dword [esp + 0x94], edx
lea eax, [esi + 1]
cmp eax, edi
je 0x41cfa3
mov edx, dword [esp + 0x94]
mov ebx, ecx
xor ecx, ecx
cmp eax, edi
lea eax, [eax + eax*2]
lea eax, [ebx + eax*8]
cmovae eax, ecx
mov ecx, esi
neg edi
add ecx, 2
mov dword [esp + 0x50], edi
lea esi, [ebx + edx*8 + 0x30]
mov ebx, dword [esp + 0x28]
mov edx, dword [esp + 0x34]
mov edi, ecx
mov ecx, dword [eax + 0xc]
cmp dword [eax + 8], edx
sbb ecx, ebx
jae 0x41cfa3
cmp dword [eax + 4], 0
jne 0x41dbcd
mov ecx, dword [esp + 0x50]
cmp edi, dword [esp + 0x24]
mov eax, 0
lea ecx, [ecx + edi + 1]
cmovb eax, esi
inc edi
add esi, 0x18
cmp ecx, 1
jne 0x41d305
jmp 0x41cfa3
mov dword [esp + 0x20], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 8
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 8
mov dword [esp + 0x88], 0
mov dword [esp + 0xb0], 0
lea ecx, [esp + 0x140]
lea eax, [esp + 0xa8]
lea edx, [esp + 0x38]
lea esi, [esp + 0x80]
mov dword [esp + 0x100], ecx
push 0
push eax
push esi
push dword [esp + 0xa8]
push dword [esp + 0x34]
push dword [esp + 0x48]
push dword [esp + 0x18]
push 0
call fcn.00426bc0
add esp, 0x20
mov edi, dword [esp + 0x14]
cmp byte [esp + 0x140], 0x4b
jne 0x41d411
mov ebx, dword [esp + 0xb0]
mov eax, dword [esp + 0xac]
cmp ebx, 0x15
mov dword [esp + 0x2c], eax
jae 0x41d4d0
cmp ebx, 1
jbe 0x41db70
mov ecx, dword [esp + 0x2c]
mov edx, ebx
push 1
call fcn.00427e70
add esp, 4
jmp 0x41db70
mov eax, dword [esp + 0x144]
mov edx, dword [esp + 0x148]
mov ecx, dword [esp + 0x14c]
mov ebx, dword [esp + 0x140]
cmp dword [esp + 0xa8], 0
mov dword [esp], eax
mov dword [esp + 0x10], edx
mov dword [esp + 0x1c], ecx
je 0x41d453
mov ecx, dword [esp + 0xac]
mov edx, 8
call fcn.004028a0
mov edi, ebx
shr edi, 0x10
cmp dword [esp + 0x80], 0
je 0x41d473
mov ecx, dword [esp + 0x84]
mov edx, 8
call fcn.004028a0
mov dl, bh
jmp 0x41ceca
mov ebx, dword [esp + 0x148]
mov eax, dword [esp + 0x14c]
mov edx, dword [esp + 0x150]
mov ecx, dword [esp + 0x154]
mov edi, ebx
mov dword [esp + 0x10], edx
mov dword [esp], eax
mov dword [esp + 0x1c], ecx
mov dl, bh
shr edi, 0x10
jmp 0x41ceca
xor edx, edx
mov ecx, dword [eax + 0x10]
mov esi, dword [eax + 0x14]
xor eax, eax
test ecx, ecx
setne al
mov dword [esp + 0x1c], eax
xor eax, eax
test esi, esi
setne al
mov dword [esp + 0x50], eax
jmp 0x41cfa3
lea eax, [ebx*4]
and eax, 0xfffffff8
lea ecx, [eax + eax*2]
movzx eax, byte [0x4a5058]
call fcn.0043cf80
test eax, eax
mov dword [esp + 0xc], eax
je 0x41e046
movzx eax, byte [0x4a5058]
mov ecx, pe_nt_image_headers32
call fcn.0043cf80
test eax, eax
je 0x41e052
mov esi, eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xd8], 0x10
mov dword [esp + 0x34], ebx
lea ecx, [eax + 0x40]
add eax, 0xffffffe8
mov dword [esp + 0xe0], ecx
mov dword [esp + 0xa4], eax
xor eax, eax
xor ecx, ecx
jmp 0x41d54e
mov ecx, 1
mov eax, dword [esp + 0x6c]
cmp eax, ebx
jae 0x41db56
mov edi, dword [esp + 0x2c]
mov edx, eax
mov eax, ebx
mov dword [esp + 0x98], esi
mov dword [esp + 0x10], ecx
sub eax, edx
lea esi, [edx + edx*2]
mov dword [esp + 4], edx
cmp eax, 2
lea edi, [edi + esi*8]
mov dword [esp], edi
jae 0x41d57f
mov edi, eax
lea eax, [edi + edx]
jmp 0x41d721
mov dword [esp + 0x28], esi
mov ecx, dword [edi + 0x10]
mov esi, dword [edi + 0x28]
cmp esi, ecx
jb 0x41d5ac
mov ecx, dword [edi + 0x1c]
mov dword [esp + 8], ecx
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x1c], ecx
ja 0x41d5f9
mov ecx, dword [esp + 0x1c]
cmp ecx, dword [edi]
mov ecx, dword [esp + 8]
sbb ecx, dword [edi + 4]
jae 0x41d5f9
mov edx, 2
cmp eax, 2
je 0x41d664
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0x28]
lea ecx, [ecx + edx*8]
mov edx, 2
jmp 0x41d5db
inc edx
add ecx, 0x18
cmp eax, edx
je 0x41d662
mov edi, esi
mov esi, dword [ecx]
cmp esi, edi
jb 0x41d5cf
ja 0x41d664
mov edi, dword [ecx - 0x28]
mov ebx, dword [ecx - 0xc]
cmp dword [ecx - 0x10], edi
sbb ebx, dword [ecx - 0x24]
mov ebx, dword [esp + 0x34]
jb 0x41d5cf
jmp 0x41d664
mov edi, 2
cmp eax, 2
je 0x41d577
mov ecx, dword [esp + 0xe0]
mov edx, dword [esp + 0x28]
lea edx, [ecx + edx*8]
jmp 0x41d62f
mov dword [esp + 0x1c], ebx
mov ebx, dword [esp + 0x34]
inc edi
add edx, 0x18
mov dword [esp + 8], ecx
cmp eax, edi
je 0x41db4b
mov ecx, esi
mov esi, dword [edx]
cmp esi, ecx
jb 0x41db4d
mov ebx, dword [edx - 0x10]
mov ecx, dword [edx - 0xc]
ja 0x41d617
cmp ebx, dword [esp + 0x1c]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x1c]
sbb ecx, dword [esp + 8]
mov ecx, dword [esp + 0x1c]
jae 0x41d617
mov ebx, dword [esp + 0x34]
jmp 0x41db4d
mov edx, eax
mov eax, edx
add eax, dword [esp + 4]
jb 0x41e005
cmp eax, ebx
ja 0x41dff2
mov edi, 1
cmp edx, 2
jb 0x41d71d
mov esi, dword [esp + 0xa4]
mov ecx, eax
mov eax, edx
mov dword [esp + 0x6c], ecx
lea ecx, [ecx + ecx*2]
shr eax, 1
lea ecx, [esi + ecx*8]
mov esi, dword [esp]
movsd xmm0, qword [esi + 0x10]
movsd qword [esp + 0x150], xmm0
movsd xmm0, qword [esi]
movsd xmm1, qword [esi + 8]
movsd qword [esp + 0x148], xmm1
movsd qword [esp + 0x140], xmm0
movsd xmm0, qword [ecx + 0x10]
movsd qword [esi + 0x10], xmm0
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 8]
movsd qword [esi + 8], xmm1
movsd qword [esi], xmm0
add esi, 0x18
movsd xmm0, qword [esp + 0x150]
movsd qword [ecx + 0x10], xmm0
movq xmm0, qword [esp + 0x140]
movq xmm1, qword [esp + 0x148]
movq qword [ecx + 8], xmm1
movq qword [ecx], xmm0
add ecx, 0xffffffe8
dec eax
jne 0x41d6a0
mov edi, edx
mov eax, dword [esp + 0x6c]
mov edx, dword [esp + 4]
mov esi, eax
sub esi, edx
jb 0x41df9c
cmp eax, ebx
ja 0x41df9c
jae 0x41d76a
cmp edi, 0xa
jae 0x41d76a
lea esi, [edx + 0xa]
cmp esi, ebx
cmovae esi, ebx
cmp edi, 1
adc edi, 0
mov dword [esp + 0x6c], esi
sub esi, edx
mov ecx, dword [esp]
mov edx, esi
push edi
call fcn.00427e70
mov edx, dword [esp + 8]
add esp, 4
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
jmp 0x41d776
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x6c], eax
cmp ecx, dword [esp + 0xd8]
jne 0x41d7e2
movzx eax, byte [0x4a5058]
mov ebx, ecx
mov edi, edx
shl ecx, 4
call fcn.0043cf80
test eax, eax
je 0x41dfd4
mov ecx, eax
lea eax, [ebx + ebx]
mov dword [esp + 0xd8], eax
lea eax, [ebx*8]
push eax
mov ebx, dword [esp + 0x9c]
push ebx
push ecx
mov dword [esp + 0xc], ecx
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ecx, ebx
mov edx, 4
call fcn.004028a0
mov edx, edi
mov eax, dword [esp]
mov ebx, dword [esp + 0x34]
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
jmp 0x41d7e9
mov eax, dword [esp + 0x98]
mov dword [eax + ecx*8], esi
mov dword [eax + ecx*8 + 4], edx
inc ecx
mov esi, eax
cmp ecx, 2
jb 0x41d542
mov dword [esp + 0x98], esi
jmp 0x41d877
mov eax, dword [esp + 0xc]
mov edi, esi
mov ebx, dword [esp + 0x10]
mov esi, dword [esp + 0x98]
sub edx, eax
lea ecx, [ebx - 1]
mov ebx, dword [esp + 0x1c]
mov dword [esp + 4], ecx
lea ecx, [esi + ebx*8]
mov dword [esp], ecx
push edx
push eax
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x28]
mov ecx, dword [esp]
add eax, dword [esp + 8]
mov dword [esi + ebx*8 + 8], eax
mov eax, dword [esp + 0x24]
mov dword [esi + ebx*8 + 0xc], eax
not ebx
lea eax, [ecx + 8]
add ebx, dword [esp + 0x10]
shl ebx, 3
push ebx
push eax
push ecx
call sub.msvcrt.dll_memmove
add esp, 0xc
mov ecx, dword [esp + 4]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x34]
cmp ecx, 1
jbe 0x41d53d
mov dword [esp + 0x10], ecx
mov eax, dword [esi + ecx*8 - 8]
mov ecx, dword [esp + 0x10]
mov ecx, dword [esi + ecx*8 - 4]
add ecx, eax
cmp ecx, ebx
mov ecx, dword [esp + 0x10]
je 0x41d8e0
mov edx, dword [esi + ecx*8 - 0x10]
cmp edx, eax
jbe 0x41d8e0
cmp ecx, 2
je 0x41db26
lea edi, [ecx - 3]
mov dword [esp + 0x1c], edi
mov edi, ecx
mov ecx, dword [esi + ecx*8 - 0x18]
lea esi, [edx + eax]
cmp ecx, esi
jbe 0x41d8ee
cmp edi, 3
jbe 0x41db30
mov esi, dword [esp + 0x98]
add edx, ecx
cmp dword [esi + edi*8 - 0x20], edx
mov edi, dword [esp + 0x1c]
jbe 0x41d900
jmp 0x41db3e
cmp ecx, 2
je 0x41d908
lea edi, [ecx - 3]
mov ecx, dword [esi + ecx*8 - 0x18]
jmp 0x41d900
mov esi, dword [esp + 0x98]
mov edi, dword [esp + 0x1c]
nop dword [eax]
cmp ecx, eax
mov ecx, dword [esp + 0x10]
jb 0x41d90b
lea edi, [ecx - 2]
cmp ecx, edi
jbe 0x41dea4
lea eax, [edi + 1]
cmp ecx, eax
jbe 0x41deb6
mov eax, dword [esi + edi*8 + 8]
mov ebx, dword [esi + edi*8 + 0xc]
mov ecx, dword [esi + edi*8 + 4]
mov edx, esi
add ebx, eax
mov edx, ebx
sub edx, ecx
mov dword [esp], edx
jb 0x41def3
mov edx, dword [esp + 0x34]
mov dword [esp + 0x28], eax
cmp ebx, edx
ja 0x41df07
mov esi, dword [esi + edi*8]
mov dword [esp + 0x24], ecx
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x1c], edi
lea edi, [ecx + eax*8]
lea eax, [esi + esi*2]
mov ecx, esi
lea esi, [edi + eax*8]
lea eax, [ebx + ebx*2]
mov dword [esp + 8], ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp]
sub eax, ecx
cmp eax, ecx
jae 0x41da53
mov dword [esp], eax
lea eax, [eax*8]
lea eax, [eax + eax*2]
mov dword [esp + 4], eax
push eax
push esi
mov ebx, dword [esp + 0x14]
push ebx
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x10]
add esp, 0xc
add edx, ebx
cmp dword [esp + 8], 0
jle 0x41d805
cmp dword [esp], 0
jle 0x41d805
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x30]
lea eax, [eax + ecx*8]
nop dword [eax]
mov ecx, dword [esi - 8]
cmp dword [edx - 8], ecx
jae 0x41d9e0
add esi, 0xffffffe8
mov ecx, esi
jmp 0x41da21
mov dword [esp + 4], edx
mov ecx, dword [edx - 0x18]
setbe byte [esp]
mov edx, dword [esp + 4]
cmp ecx, dword [esi - 0x18]
mov edx, dword [edx - 0x14]
sbb edx, dword [esi - 0x14]
setb cl
and cl, byte [esp]
movzx edx, cl
lea ebx, [edx + edx*2]
neg edx
test cl, cl
mov dword [esp], ebx
lea edx, [edx + edx*2]
lea esi, [esi + edx*8]
mov edx, dword [esp + 4]
mov ebx, dword [esp]
lea edx, [edx + ebx*8 - 0x18]
mov ecx, edx
cmovne ecx, esi
movsd xmm0, qword [ecx + 0x10]
cmp esi, edi
movsd qword [eax + 0x10], xmm0
movq xmm0, qword [ecx]
movq xmm1, qword [ecx + 8]
movq qword [eax + 8], xmm1
movq qword [eax], xmm0
jbe 0x41d805
add eax, 0xffffffe8
cmp edx, dword [esp + 0xc]
ja 0x41d9d0
jmp 0x41d805
lea eax, [ecx*8]
lea eax, [eax + eax*2]
mov dword [esp + 4], eax
push eax
push edi
mov ebx, dword [esp + 0x14]
push ebx
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
add esp, 0xc
add edx, ebx
test eax, eax
jle 0x41db1d
cmp dword [esp], eax
jle 0x41db1d
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
mov dword [esp + 4], edx
lea eax, [eax + ecx*8]
mov dword [esp], eax
mov eax, dword [esp + 0xc]
nop word cs:[eax + eax]
nop dword [eax + eax]
mov ebx, dword [eax + 0x10]
mov dl, 1
cmp dword [esi + 0x10], ebx
mov ebx, esi
jb 0x41dad3
mov edx, dword [esi]
setbe cl
mov ebx, dword [esi + 4]
cmp edx, dword [eax]
sbb ebx, dword [eax + 4]
mov ebx, eax
setb dl
and dl, cl
cmovne ebx, esi
movsd xmm0, qword [ebx + 0x10]
mov ecx, edx
xor cl, 1
movzx ecx, cl
lea ecx, [ecx + ecx*2]
movsd qword [edi + 0x10], xmm0
lea eax, [eax + ecx*8]
movq xmm0, qword [ebx]
movq xmm1, qword [ebx + 8]
movq qword [edi + 8], xmm1
movq qword [edi], xmm0
add edi, 0x18
cmp eax, dword [esp + 4]
jae 0x41db14
movzx ecx, dl
lea ecx, [ecx + ecx*2]
lea esi, [esi + ecx*8]
cmp esi, dword [esp]
jb 0x41dab0
mov edx, dword [esp + 4]
jmp 0x41d80b
mov eax, dword [esp + 0xc]
jmp 0x41d80b
mov ecx, 2
jmp 0x41d542
mov esi, dword [esp + 0x98]
mov ecx, 3
jmp 0x41db42
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
jmp 0x41d542
mov edi, eax
mov edx, dword [esp + 4]
jmp 0x41d577
mov ecx, esi
mov edx, 4
call fcn.004028a0
mov ecx, dword [esp + 0xc]
mov edx, 8
call fcn.004028a0
mov eax, dword [esp + 0x88]
mov esi, dword [esp + 0x84]
cmp dword [esp + 0x80], eax
mov edx, eax
jbe 0x41dbc9
test edx, edx
mov eax, edx
je 0x41dc22
lea eax, [edx*8]
mov ebx, edx
lea edx, [eax + eax*4]
mov ecx, esi
mov dword [esp + 4], edx
call fcn.004028c0
mov edx, ebx
mov ebx, eax
test eax, eax
jne 0x41dc37
mov edx, dword [esp + 4]
mov ecx, 8
call fcn.00402bb0
jmp 0x41e074
mov ebx, esi
jmp 0x41dc37
xor ebx, ebx
jmp 0x41d27d
movq xmm0, qword [esp + 0x140]
movq xmm1, qword [esp + 0x148]
jmp 0x41c1c4
mov eax, dword [esp + 0xfc]
mov dword [esp + 0x78], eax
jmp 0x41de22
mov al, 0x35
jmp 0x41de30
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], 0
mov al, 0x13
jmp 0x41de30
mov ecx, esi
mov esi, edx
mov edx, 8
mov ebx, 8
call fcn.004028a0
mov edx, esi
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xac]
cmp dword [esp + 0xa8], eax
mov dword [esp + 0x10], eax
jbe 0x41dc8e
mov esi, edx
test eax, eax
je 0x41dc92
lea eax, [eax*8]
lea edx, [eax + eax*2]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], edx
call fcn.004028c0
test eax, eax
mov edx, esi
jne 0x41dca3
mov edi, dword [esp + 0xc]
mov esi, edx
mov edx, dword [esp + 4]
mov ecx, 8
call fcn.00402bb0
jmp 0x41e074
mov eax, ecx
jmp 0x41dca3
mov edx, 8
call fcn.004028a0
mov eax, 8
mov edx, esi
cmp dword [edi + 8], 2
jne 0x41dcc9
mov esi, dword [esp + 0x90]
mov edi, edx
mov dword [esp], eax
mov eax, edx
mov dword [esp + 4], ebx
xor ecx, ecx
mov ebx, edx
shr edi, 0x10
mov al, ah
jmp 0x41cee1
test edx, edx
je 0x41dcdd
mov ecx, ebx
mov edx, 8
mov esi, eax
call fcn.004028a0
mov eax, esi
cmp dword [esp + 0x10], 0
je 0x41cf25
mov ecx, eax
mov edx, 8
call fcn.004028a0
jmp 0x41cf25
mov ebx, dword [esp + 8]
mov esi, dword [esp + 0x11c]
jmp 0x41dd1c
mov ebx, dword [esp + 8]
mov cl, 0x35
jmp 0x41ddbe
mov esi, dword [esp + 0x10c]
mov ebx, dword [esp + 8]
mov cl, 0x13
jmp 0x41ddbe
mov ecx, dword [esp + 0x84]
mov esi, dword [esp + 0x88]
mov eax, dword [esp + 0x8c]
movzx edx, byte [esp + 0x81]
movzx edi, word [esp + 0x82]
mov dword [esp], ecx
mov dword [esp + 0x10], esi
mov dword [esp + 0x1c], eax
jmp 0x41ceca
mov esi, eax
mov cl, 0x13
jmp 0x41dda1
mov dword [esp + 0x87], eax
movzx edx, word [esp + 0x88]
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x84]
mov word [esp + 0x79], dx
mov dh, byte [esp + 0x8a]
mov byte [esp + 0x7b], dh
mov dword [esp + 0x75], eax
mov dword [esp + 0x71], ecx
shld eax, ecx, 8
mov cl, 0x13
mov esi, dword [esp + 0x78]
jmp 0x41dda1
mov cl, 0x35
movzx edx, byte [esp + 0x73]
movzx edi, word [esp + 0x71]
mov ebx, dword [esp + 8]
mov byte [esp + 0x82], dl
mov word [esp + 0x80], di
movzx edi, word [esp + 0x80]
movzx edx, byte [esp + 0x82]
mov byte [esp + 0x40], cl
mov word [esp + 0x41], di
mov byte [esp + 0x43], dl
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], 0
jmp 0x41c128
mov eax, dword [esp + 0x20]
mov byte [esp + 0x71], al
mov al, 0x17
jmp 0x41de2c
mov dword [esp + 0x7c], 0
mov al, 0x13
mov ebx, dword [esp + 8]
mov edx, dword [esp + 0x74]
mov ecx, dword [esp + 0x71]
mov esi, dword [esp + 0x7c]
mov dword [esp + 0x44], edx
mov dword [esp + 0x41], ecx
mov ecx, dword [esp + 0x78]
mov byte [esp + 0x40], al
mov dword [esp + 0x4c], esi
mov dword [esp + 0x48], ecx
jmp 0x41c128
xor edx, edx
mov al, 0x13
xor esi, esi
mov ah, dl
jmp 0x41de7b
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x4c]
mov edx, eax
shr edx, 0x10
mov dword [esp + 0xf8], ecx
mov ecx, dword [esp + 0x48]
mov byte [esp + 0x40], al
mov byte [esp + 0x41], ah
mov word [esp + 0x42], dx
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 8]
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], esi
jmp 0x41c128
mov dword [esp + str.Index_out_of_bounds], 0x49a650
mov edx, 0x49a7c8
jmp 0x41dec6
mov edx, 0x49a7d8
mov dword [esp + str.Index_out_of_bounds], 0x49a650
mov ecx, dword [esp + 0x100]
mov dword [ecx + 4], 1
mov dword [ecx + 0x10], 0
mov dword [ecx + 8], 4
mov dword [ecx + 0xc], 0
call fcn.00403350
jmp 0x41e074
mov edx, ebx
push 0x49a7e8
call fcn.00404b20
add esp, 4
jmp 0x41e074
mov ecx, ebx
push 0x49a7e8
call fcn.00403ab0
add esp, 4
jmp 0x41e074
mov edx, 0x49a7d8
mov dword [esp + str.Index_out_of_bounds], 0x49a650
jmp 0x41df3d
mov dword [esp + str.Index_out_of_bounds], 0x49a650
mov edx, 0x49a7c8
mov ecx, dword [esp + 0x118]
mov dword [ecx + 4], 1
mov dword [ecx + 0x10], 0
mov dword [ecx + 8], 4
mov dword [ecx + 0xc], 0
call fcn.00403350
jmp 0x41e074
push 0x49a7e8
call fcn.00404b20
add esp, 4
jmp 0x41e074
mov ecx, edx
mov edx, esi
push 0x49a7e8
call fcn.00403ab0
add esp, 4
jmp 0x41e074
push 0x49b3c0
call fcn.00403410
mov edx, 0x2c
mov ecx, str.assertion_failed:_end___start__end___lenh
push 0x49a864
call fcn.00403d90
add esp, 4
jmp 0x41e074
mov edx, 0x2c
mov ecx, str.assertion_failed:_end___start__end___lenh
push 0x49a864
call fcn.00403d90
add esp, 4
jmp 0x41e074
mov ecx, 0x49a818
call fcn.00404b80
jmp 0x41e074
mov ecx, 0x49a818
call fcn.00404b80
jmp 0x41e074
mov edx, ebx
mov ecx, eax
push 0x49a7b8
call fcn.00403ab0
add esp, 4
jmp 0x41e074
mov ecx, dword [esp + 4]
mov edx, eax
push 0x49a7b8
call fcn.00404b20
add esp, 4
jmp 0x41e074
mov ecx, 0x49b40c
call fcn.00404b80
mov ecx, edx
mov edx, ebx
push 0x49a7b8
call fcn.00403ab0
add esp, 4
jmp 0x41e074
push 0x49a7b8
call fcn.00404b20
add esp, 4
jmp 0x41e074
mov ecx, 0x49a7f8
call fcn.00404b80
jmp 0x41e074
mov ecx, 0x49a808
call fcn.00404b80
jmp 0x41e074
mov ecx, 0x49a7f8
call fcn.00404b80
jmp 0x41e074
mov ecx, 0x49a808
call fcn.00404b80
ud2