Function at 0x41ce60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x44ee89
mov eax, dword fs:[0]
push eax
sub esp, 0x298
mov eax, dword [0x45f2b0]
xor eax, esp
mov dword [esp + 0x290], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x45f2b0]
xor eax, esp
push eax
lea eax, [esp + 0x2ac]
mov dword fs:[0], eax
mov eax, dword [esp + 0x2bc]
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x20], eax
call fcn.0040f9c0
lea edx, [esp + 0x108]
push edx
sub esp, 0x1c
xor ebx, ebx
mov esi, esp
mov dword [esp + 0x2d4], ebx
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
mov ebp, pe_nt_image_headers32
mov dword [esp + 0x34], esp
cmp eax, ebp
jb 0x41cee9
mov ecx, dword [edi]
jmp 0x41ceeb
mov ecx, edi
cmp ecx, str.Lo_
ja 0x41cf24
cmp eax, ebp
jb 0x41cefb
mov ecx, dword [edi]
jmp 0x41cefd
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, str.Lo_
jbe 0x41cf24
cmp eax, ebp
jb 0x41cf10
mov edi, dword [edi]
push 0x24
mov eax, str.Lo_
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402d10
jmp 0x41cf65
cmp eax, 0x24
jae 0x41cf36
mov ecx, dword [esi + 0x14]
push ecx
push 0x24
mov ecx, esi
call fcn.00403480
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x41cf41
mov eax, dword [edi]
jmp 0x41cf43
mov eax, edi
push 0x24
push str.Lo_
push ecx
push eax
call fcn.00437feb
add esp, 0x10
mov dword [esi + 0x14], 0x24
cmp dword [esi + 0x18], ebp
jb 0x41cf62
mov edi, dword [edi]
mov byte [edi + 0x24], bl
lea esi, [esp + 0x74]
call fcn.004014c0
mov byte [esp + 0x2b8], 1
call fcn.004018b0
mov byte [esp + 0x2b4], 2
cmp dword [eax + 0x18], ebp
jb 0x41cf8d
mov ecx, dword [eax + 4]
jmp 0x41cf90
lea ecx, [eax + 4]
mov eax, ecx
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
lea esi, [eax + 1]
mov edi, edi
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x41cfb0
sub eax, esi
push eax
push ecx
lea ecx, [esp + 0x148]
call fcn.00403090
sub esp, 0x18
mov byte [esp + 0x2cc], 3
mov edx, esp
mov dword [esp + 0x2c], esp
lea eax, [esp + 0x158]
push eax
push edx
call fcn.00429d40
lea ecx, [esp + 0x50]
push ecx
sub esp, 0x1c
mov esi, esp
mov byte [esp + 0x2ec], 4
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
mov dword [esp + 0x50], esp
cmp eax, ebp
jb 0x41d016
mov ecx, dword [edi]
jmp 0x41d018
mov ecx, edi
cmp ecx, 0x45526c
ja 0x41d051
cmp eax, ebp
jb 0x41d028
mov ecx, dword [edi]
jmp 0x41d02a
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x45526c
jbe 0x41d051
cmp eax, ebp
jb 0x41d03d
mov edi, dword [edi]
push 0xb
mov eax, 0x45526c
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402d10
jmp 0x41d092
cmp eax, 0xb
jae 0x41d063
mov ecx, dword [esi + 0x14]
push ecx
push 0xb
mov ecx, esi
call fcn.00403480
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x41d06e
mov eax, dword [edi]
jmp 0x41d070
mov eax, edi
push 0xb
push 0x45526c
push ecx
push eax
call fcn.00437feb
add esp, 0x10
mov dword [esi + 0x14], 0xb
cmp dword [esi + 0x18], ebp
jb 0x41d08f
mov edi, dword [edi]
mov byte [edi + 0xb], bl
lea esi, [esp + 0xe8]
call fcn.004014c0
mov byte [esp + 0x2d0], 5
call fcn.004018b0
mov byte [esp + 0x2cc], 6
cmp dword [eax + 0x18], ebp
jb 0x41d0bd
mov eax, dword [eax + 4]
jmp 0x41d0c0
add eax, 4
push eax
lea esi, [esp + 0x140]
mov byte [esp + 0x2d0], 8
call fcn.0042d080
add esp, 0x1c
lea edx, [esp + 0x15c]
push edx
mov edi, eax
mov byte [esp + 0x2b8], 9
call fcn.0042d120
lea eax, [esp + 0x15c]
push eax
lea edi, [esp + 0x24]
mov byte [esp + 0x2b8], 0xa
call fcn.0042a570
lea esi, [esp + 0x15c]
call fcn.0041e4e0
mov eax, dword [esp + 0x134]
cmp eax, ebx
je 0x41d143
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x138]
push ecx
call fcn.00405eb0
mov edx, dword [esp + 0x138]
add esp, 4
push edx
call fcn.00437f8b
add esp, 4
mov eax, dword [esp + 0x128]
push eax
mov dword [esp + 0x138], ebx
mov dword [esp + 0x13c], ebx
mov dword [esp + 0x140], ebx
call fcn.00437f8b
add esp, 4
cmp dword [esp + 0x50], ebp
jb 0x41d17b
mov ecx, dword [esp + 0x3c]
push ecx
call fcn.00437f8b
add esp, 4
mov edi, 0xf
lea esi, [esp + 0xb0]
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
call fcn.00429620
cmp dword [esp + 0x158], ebp
jb 0x41d1b1
mov edx, dword [esp + 0x144]
push edx
call fcn.00437f8b
add esp, 4
mov dword [esp + 0x158], edi
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
cmp dword [esp + 0x120], ebp
jb 0x41d1df
mov eax, dword [esp + 0x10c]
push eax
call fcn.00437f8b
add esp, 4
lea esi, [esp + 0x54]
mov dword [esp + 0x120], edi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429620
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], edi
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
lea ebp, [esp + 0x124]
mov dword [esp + 0x30], esp
cmp eax, 0x10
jb 0x41d22b
mov ecx, dword [edi]
jmp 0x41d22d
mov ecx, edi
cmp ecx, str.Loc
ja 0x41d268
cmp eax, 0x10
jb 0x41d23e
mov ecx, dword [edi]
jmp 0x41d240
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, str.Loc
jbe 0x41d268
cmp eax, 0x10
jb 0x41d254
mov edi, dword [edi]
push 0x2f
mov eax, str.Loc
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402d10
jmp 0x41d2ab
cmp eax, 0x2f
jae 0x41d27a
mov ecx, dword [esi + 0x14]
push ecx
push 0x2f
mov ecx, esi
call fcn.00403480
mov ecx, dword [esi + 0x18]
cmp ecx, 0x10
jb 0x41d286
mov eax, dword [edi]
jmp 0x41d288
mov eax, edi
push 0x2f
push str.Loc
push ecx
push eax
call fcn.00437feb
add esp, 0x10
cmp dword [esi + 0x18], 0x10
mov dword [esi + 0x14], 0x2f
jb 0x41d2a8
mov edi, dword [edi]
mov byte [edi + 0x2f], bl
lea esi, [esp + 0x70]
call fcn.004014c0
mov edx, ebp
mov ecx, eax
mov byte [esp + 0x2b4], 0xb
call fcn.00401a50
mov byte [esp + 0x2b4], 0xc
cmp dword [eax + 0x18], 0x10
jb 0x41d2d8
mov ecx, dword [eax + 4]
jmp 0x41d2db
lea ecx, [eax + 4]
mov eax, ecx
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
lea esi, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x41d300
sub eax, esi
push eax
push ecx
lea ecx, [esp + 0x148]
call fcn.00403090
lea edx, [esp + 0x140]
push edx
push ecx
lea eax, [esp + 0x28]
mov byte [esp + 0x2bc], 0xd
call fcn.0042a500
mov ebx, eax
add esp, 4
add ebx, 0x1c
call fcn.00429f20
mov ebp, pe_nt_image_headers32
cmp dword [esp + 0x158], ebp
jb 0x41d35c
mov eax, dword [esp + 0x144]
push eax
call fcn.00437f8b
add esp, 4
xor ebx, ebx
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
cmp dword [esp + 0x120], ebp
jb 0x41d390
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.00437f8b
add esp, 4
mov edi, 0xf
lea esi, [esp + 0x54]
mov dword [esp + 0x120], edi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
call fcn.00429620
push ebx
call fcn.00439283
sub esp, 0x18
mov dword [esp + 0x2d0], ebx
mov esi, esp
mov dword [esi + 0x18], edi
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
mov dword [esp + 0x30], esp
cmp eax, ebp
jb 0x41d3df
mov ecx, dword [edi]
jmp 0x41d3e1
mov ecx, edi
cmp ecx, str.Loca0S__n
ja 0x41d41a
cmp eax, ebp
jb 0x41d3f1
mov ecx, dword [edi]
jmp 0x41d3f3
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, str.Loca0S__n
jbe 0x41d41a
cmp eax, ebp
jb 0x41d406
mov edi, dword [edi]
push 0x38
mov eax, str.Loca0S__n
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402d10
jmp 0x41d45b
cmp eax, 0x38
jae 0x41d42c
mov ecx, dword [esi + 0x14]
push ecx
push 0x38
mov ecx, esi
call fcn.00403480
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x41d437
mov eax, dword [edi]
jmp 0x41d439
mov eax, edi
push 0x38
push str.Loca0S__n
push ecx
push eax
call fcn.00437feb
add esp, 0x10
mov dword [esi + 0x14], 0x38
cmp dword [esi + 0x18], ebp
jb 0x41d458
mov edi, dword [edi]
mov byte [edi + 0x38], bl
lea esi, [esp + 0x70]
call fcn.004014c0
lea edx, [esp + 0x108]
mov ecx, eax
mov byte [esp + 0x2b4], pe_nt_image_headers32
call fcn.00401a50
mov byte [esp + 0x2b4], 0x11
cmp dword [eax + 0x18], ebp
jb 0x41d48c
mov edx, dword [eax + 4]
jmp 0x41d48f
lea edx, [eax + 4]
mov edi, 0xf
mov eax, edx
mov dword [esp + 0x158], edi
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
lea esi, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x41d4b0
sub eax, esi
push eax
push edx
lea ecx, [esp + 0x148]
call fcn.00403090
lea edx, [esp + 0x140]
push edx
push ecx
lea eax, [esp + 0x28]
mov byte [esp + 0x2bc], 0x12
call fcn.0042a500
mov ebx, eax
add esp, 4
add ebx, 0x1c
call fcn.00429f20
mov ebp, pe_nt_image_headers32
cmp dword [esp + 0x158], ebp
jb 0x41d50c
mov eax, dword [esp + 0x144]
push eax
call fcn.00437f8b
add esp, 4
xor ebx, ebx
mov dword [esp + 0x158], edi
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
cmp dword [esp + 0x120], ebp
jb 0x41d53c
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.00437f8b
add esp, 4
mov edi, 0xf
lea esi, [esp + 0x54]
mov dword [esp + 0x120], edi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429620
lea edx, [esp + 0x38]
push edx
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], edi
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
mov dword [esp + 0x34], esp
cmp eax, ebp
jb 0x41d58a
mov ecx, dword [edi]
jmp 0x41d58c
mov ecx, edi
cmp ecx, 0x4552e4
ja 0x41d5c5
cmp eax, ebp
jb 0x41d59c
mov ecx, dword [edi]
jmp 0x41d59e
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, 0x4552e4
jbe 0x41d5c5
cmp eax, ebp
jb 0x41d5b1
mov edi, dword [edi]
push 2
mov eax, 0x4552e4
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402d10
jmp 0x41d606
cmp eax, 2
jae 0x41d5d7
mov ecx, dword [esi + 0x14]
push ecx
push 2
mov ecx, esi
call fcn.00403480
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x41d5e2
mov eax, dword [edi]
jmp 0x41d5e4
mov eax, edi
push 2
push 0x4552e4
push ecx
push eax
call fcn.00437feb
add esp, 0x10
mov dword [esi + 0x14], 2
cmp dword [esi + 0x18], ebp
jb 0x41d603
mov edi, dword [edi]
mov byte [edi + 2], bl
lea esi, [esp + 0xd0]
call fcn.004014c0
mov byte [esp + 0x2b8], 0x13
call fcn.00401580
mov byte [esp + 0x2b4], 0x14
cmp dword [eax + 0x18], ebp
jb 0x41d631
mov ecx, dword [eax + 4]
jmp 0x41d634
lea ecx, [eax + 4]
mov eax, ecx
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x41d652
sub eax, esi
push eax
push ecx
lea ecx, [esp + 0x148]
call fcn.00403090
sub esp, 0x18
mov byte [esp + 0x2cc], 0x15
mov edx, esp
mov dword [esp + 0x2c], esp
lea eax, [esp + 0x158]
push eax
push edx
call fcn.00429d40
sub esp, 0x1c
mov esi, esp
mov byte [esp + 0x2e8], 0x16
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
lea ebp, [esp + 0x13c]
mov dword [esp + 0x4c], esp
cmp eax, 0x10
jb 0x41d6bb
mov ecx, dword [edi]
jmp 0x41d6bd
mov ecx, edi
cmp ecx, str.___nt_r6
ja 0x41d6f8
cmp eax, 0x10
jb 0x41d6ce
mov ecx, dword [edi]
jmp 0x41d6d0
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, str.___nt_r6
jbe 0x41d6f8
cmp eax, 0x10
jb 0x41d6e4
mov edi, dword [edi]
push 7
mov eax, str.___nt_r6
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402d10
jmp 0x41d73b
cmp eax, 7
jae 0x41d70a
mov ecx, dword [esi + 0x14]
push ecx
push 7
mov ecx, esi
call fcn.00403480
mov ecx, dword [esi + 0x18]
cmp ecx, 0x10
jb 0x41d716
mov eax, dword [edi]
jmp 0x41d718
mov eax, edi
push 7
push str.___nt_r6
push ecx
push eax
call fcn.00437feb
add esp, 0x10
cmp dword [esi + 0x18], 0x10
mov dword [esi + 0x14], 7
jb 0x41d738
mov edi, dword [edi]
mov byte [edi + 7], bl
lea esi, [esp + 0x88]
call fcn.004014c0
mov edx, ebp
mov ecx, eax
mov byte [esp + 0x2cc], 0x17
call fcn.00401640
mov byte [esp + 0x2cc], 0x18
cmp dword [eax + 0x18], 0x10
jb 0x41d76b
mov eax, dword [eax + 4]
jmp 0x41d76e
add eax, 4
push eax
lea esi, [esp + 0x140]
mov byte [esp + 0x2d0], 0x1a
call fcn.0042d080
add esp, 0x1c
lea edx, [esp + 0x15c]
push edx
mov edi, eax
mov byte [esp + 0x2b8], 0x1b
call fcn.0042d120
lea eax, [esp + 0x15c]
push eax
lea edi, [esp + 0x24]
mov byte [esp + 0x2b8], 0x1c
call fcn.0042a570
lea esi, [esp + 0x15c]
call fcn.0041e4e0
lea esi, [esp + 0x124]
call fcn.0041e490
mov ebp, pe_nt_image_headers32
cmp dword [esp + 0x120], ebp
jb 0x41d7ec
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.00437f8b
add esp, 4
mov edi, 0xf
lea esi, [esp + 0x54]
mov dword [esp + 0x120], edi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
call fcn.00429620
cmp dword [esp + 0x158], ebp
jb 0x41d828
mov edx, dword [esp + 0x144]
push edx
call fcn.00437f8b
add esp, 4
mov dword [esp + 0x158], edi
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
cmp dword [esp + 0x50], ebp
jb 0x41d850
mov eax, dword [esp + 0x3c]
push eax
call fcn.00437f8b
add esp, 4
lea esi, [esp + 0xb0]
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429620
lea ecx, [esp + 0x108]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xd
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x4552f0
mov byte [ecx + 4], bl
call fcn.00403090
lea esi, [esp + 0x74]
call fcn.004014c0
mov byte [esp + 0x2b8], 0x1d
call fcn.004018b0
mov byte [esp + 0x2b4], 0x1e
cmp dword [eax + 0x18], ebp
jb 0x41d8bd
mov eax, dword [eax + 4]
jmp 0x41d8c0
add eax, 4
push eax
lea ecx, [esp + 0x128]
call fcn.00402b30
lea edx, [esp + 0x124]
push edx
push ecx
lea eax, [esp + 0x28]
mov byte [esp + 0x2bc], 0x1f
call fcn.0042a500
mov ebx, eax
add esp, 4
add ebx, 0x1c
call fcn.00429f20
mov ebp, pe_nt_image_headers32
cmp dword [esp + 0x13c], ebp
jb 0x41d912
mov eax, dword [esp + 0x128]
push eax
call fcn.00437f8b
add esp, 4
xor ebx, ebx
mov edi, 0xf
mov dword [esp + 0x13c], edi
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
cmp dword [esp + 0x120], ebp
jb 0x41d947
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.00437f8b
add esp, 4
lea esi, [esp + 0x54]
mov dword [esp + 0x120], edi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429620
lea edx, [esp + 0x38]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 2
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x4552e4
mov byte [ecx + 4], bl
call fcn.00403090
lea esi, [esp + 0xd0]
call fcn.004014c0
mov byte [esp + 0x2b8], 0x20
call fcn.00401580
mov byte [esp + 0x2b4], 0x21
cmp dword [eax + 0x18], ebp
jb 0x41d9ba
mov eax, dword [eax + 4]
jmp 0x41d9bd
add eax, 4
push eax
lea ecx, [esp + 0x128]
call fcn.00402b30
sub esp, 0x18
mov byte [esp + 0x2cc], 0x22
mov eax, esp
mov dword [esp + 0x2c], esp
lea ecx, [esp + 0x13c]
push ecx
push eax
call fcn.00429d40
lea edx, [esp + 0x120]
push edx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
mov byte [esp + 0x2ec], 0x23
push 0xa
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push 0x455300
mov byte [ecx + 4], bl
call fcn.00403090
lea esi, [esp + 0x8c]
call fcn.004014c0
mov byte [esp + 0x2d0], 0x24
call fcn.004018b0
mov byte [esp + 0x2cc], 0x25
cmp dword [eax + 0x18], ebp
jb 0x41da42
mov eax, dword [eax + 4]
jmp 0x41da45
add eax, 4
push eax
lea esi, [esp + 0x15c]
mov byte [esp + 0x2d0], 0x27
call fcn.0042d080
add esp, 0x1c
lea ecx, [esp + 0x15c]
push ecx
mov edi, eax
mov byte [esp + 0x2b8], 0x28
call fcn.0042d120
lea edx, [esp + 0x15c]
push edx
lea edi, [esp + 0x24]
mov byte [esp + 0x2b8], 0x29
call fcn.0042a570
lea esi, [esp + 0x15c]
call fcn.0041e4e0
lea esi, [esp + 0x140]
call fcn.0041e490
cmp dword [esp + 0x120], ebp
jb 0x41dabe
mov eax, dword [esp + 0x10c]
push eax
call fcn.00437f8b
add esp, 4
mov edi, 0xf
lea esi, [esp + 0x54]
mov dword [esp + 0x120], edi
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
call fcn.00429620
cmp dword [esp + 0x13c], ebp
jb 0x41dafa
mov ecx, dword [esp + 0x128]
push ecx
call fcn.00437f8b
add esp, 4
mov dword [esp + 0x13c], edi
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
cmp dword [esp + 0x50], ebp
jb 0x41db22
mov edx, dword [esp + 0x3c]
push edx
call fcn.00437f8b
add esp, 4
lea esi, [esp + 0xb0]
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429620
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0xa
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push 0x45530c
lea edi, [esp + 0x12c]
mov byte [ecx + 4], bl
call fcn.00403090
lea esi, [esp + 0x70]
call fcn.004014c0
mov edx, edi
mov ecx, eax
mov byte [esp + 0x2b4], 0x2a
call fcn.00401a50
mov byte [esp + 0x2b4], 0x2b
cmp dword [eax + 0x18], ebp
jb 0x41db96
mov eax, dword [eax + 4]
jmp 0x41db99
add eax, 4
push eax
lea ecx, [esp + 0x128]
call fcn.00402b30
lea eax, [esp + 0x124]
push eax
push ecx
lea eax, [esp + 0x28]
mov byte [esp + 0x2bc], 0x2c
call fcn.0042a500
mov ebx, eax
add esp, 4
add ebx, 0x1c
call fcn.00429f20
mov edi, pe_nt_image_headers32
cmp dword [esp + 0x13c], edi
jb 0x41dbeb
mov ecx, dword [esp + 0x128]
push ecx
call fcn.00437f8b
add esp, 4
xor ebx, ebx
mov ebp, 0xf
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
cmp dword [esp + 0x120], edi
jb 0x41dc20
mov edx, dword [esp + 0x10c]
push edx
call fcn.00437f8b
add esp, 4
lea esi, [esp + 0x54]
mov dword [esp + 0x120], ebp
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429620
lea eax, [esp + 0x108]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0x15
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push str.nN
mov byte [ecx + 4], bl
call fcn.00403090
lea esi, [esp + 0x74]
call fcn.004014c0
mov byte [esp + 0x2b8], 0x2d
call fcn.00401770
mov byte [esp + 0x2b4], 0x2e
cmp dword [eax + 0x18], edi
jb 0x41dc93
mov eax, dword [eax + 4]
jmp 0x41dc96
add eax, 4
push eax
lea ecx, [esp + 0x128]
call fcn.00402b30
lea ecx, [esp + 0x124]
push ecx
push ecx
lea eax, [esp + 0x28]
mov byte [esp + 0x2bc], 0x2f
call fcn.0042a500
mov ebx, eax
add esp, 4
add ebx, 0x1c
call fcn.00429f20
mov edi, pe_nt_image_headers32
cmp dword [esp + 0x13c], edi
jb 0x41dce8
mov edx, dword [esp + 0x128]
push edx
call fcn.00437f8b
add esp, 4
xor ebx, ebx
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
cmp dword [esp + 0x120], edi
jb 0x41dd18
mov eax, dword [esp + 0x10c]
push eax
call fcn.00437f8b
add esp, 4
lea esi, [esp + 0x54]
mov dword [esp + 0x120], ebp
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
call fcn.00429620
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push ebx
shr esi, 0x18
call fcn.00439283
imul eax, eax, 0x63
add esp, 4
cmp esi, eax
jbe 0x41dd58
push ebx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
lea ecx, [esp + 0x38]
push ecx
sub esp, 0x1c
mov dword [esp + 0x2d4], ebx
mov ecx, esp
mov dword [esp + 0x34], esp
push 2
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0x455330
mov byte [ecx + 4], bl
call fcn.00403090
lea esi, [esp + 0xd0]
call fcn.004014c0
mov byte [esp + 0x2b8], 0x32
call fcn.004018b0
mov byte [esp + 0x2b4], 0x33
cmp dword [eax + 0x18], edi
jb 0x41ddad
mov eax, dword [eax + 4]
jmp 0x41ddb0
add eax, 4
push eax
lea ecx, [esp + 0x128]
call fcn.00402b30
sub esp, 0x18
mov byte [esp + 0x2cc], 0x34
mov edx, esp
mov dword [esp + 0x2c], esp
lea eax, [esp + 0x13c]
push eax
push edx
call fcn.00429d40
lea ecx, [esp + 0x120]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
mov byte [esp + 0x2ec], 0x35
push ebp
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push str.s8e_
mov byte [ecx + 4], bl
call fcn.00403090
lea esi, [esp + 0x8c]
call fcn.004014c0
mov byte [esp + 0x2d0], 0x36
call fcn.00401770
mov byte [esp + 0x2cc], 0x37
cmp dword [eax + 0x18], edi
jb 0x41de34
mov eax, dword [eax + 4]
jmp 0x41de37
add eax, 4
push eax
lea esi, [esp + 0x15c]
mov byte [esp + 0x2d0], 0x39
call fcn.0042d080
add esp, 0x1c
lea edx, [esp + 0x15c]
push edx
mov edi, eax
mov byte [esp + 0x2b8], 0x3a
call fcn.0042d120
lea eax, [esp + 0x15c]
push eax
lea edi, [esp + 0x24]
mov byte [esp + 0x2b8], 0x3b
call fcn.0042a570
lea esi, [esp + 0x15c]
call fcn.0041e4e0
lea esi, [esp + 0x140]
call fcn.0041e490
mov edi, pe_nt_image_headers32
cmp dword [esp + 0x120], edi
jb 0x41deb5
mov ecx, dword [esp + 0x10c]
push ecx
call fcn.00437f8b
add esp, 4
lea esi, [esp + 0x54]
mov dword [esp + 0x120], ebp
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
call fcn.00429620
cmp dword [esp + 0x13c], edi
jb 0x41deec
mov edx, dword [esp + 0x128]
push edx
call fcn.00437f8b
add esp, 4
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
cmp dword [esp + 0x50], edi
jb 0x41df14
mov eax, dword [esp + 0x3c]
push eax
call fcn.00437f8b
add esp, 4
lea esi, [esp + 0xb0]
mov dword [esp + 0x50], ebp
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429620
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push 0xd
mov dword [ecx + 0x18], ebp
mov dword [ecx + 0x14], ebx
push 0x455344
lea edi, [esp + 0x12c]
mov byte [ecx + 4], bl
call fcn.00403090
lea esi, [esp + 0x70]
call fcn.004014c0
mov edx, edi
mov ecx, eax
mov byte [esp + 0x2b4], 0x3c
call fcn.00401a50
mov byte [esp + 0x2b4], 0x3d
cmp dword [eax + 0x18], 0x10
jb 0x41df85
mov eax, dword [eax + 4]
jmp 0x41df88
add eax, 4
push eax
lea ecx, [esp + 0x128]
call fcn.00402b30
lea ecx, [esp + 0x124]
push ecx
push ecx
lea eax, [esp + 0x28]
mov byte [esp + 0x2bc], 0x3e
call fcn.0042a500
mov ebx, eax
add esp, 4
add ebx, 0x1c
call fcn.00429f20
mov esi, pe_nt_image_headers32
cmp dword [esp + 0x13c], esi
jb 0x41dfda
mov edx, dword [esp + 0x128]
push edx
call fcn.00437f8b
add esp, 4
xor ebx, ebx
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x138], ebx
mov byte [esp + 0x128], bl
cmp dword [esp + 0x120], esi
jb 0x41e00a
mov eax, dword [esp + 0x10c]
push eax
call fcn.00437f8b
add esp, 4
lea esi, [esp + 0x54]
mov dword [esp + 0x120], 0xf
mov dword [esp + 0x11c], ebx
mov byte [esp + 0x10c], bl
mov byte [esp + 0x2b4], bl
call fcn.00429620
mov ecx, dword [esp + 0x30]
sub ecx, dword [esp + 0x2c]
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
xor ebp, ebp
add ecx, edx
je 0x41e453
call fcn.00417d30
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x158], 0xf
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
mov byte [esp + 0x2b4], 0x3f
cmp dword [esp + 0x14], ebx
je 0x41e092
call fcn.00418a10
call fcn.004353a0
push ebp
lea eax, [esp + 0x24]
lea esi, [esp + 0x144]
call fcn.0042a460
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00402b70
call fcn.0041e540
cmp eax, ebx
jge 0x41e148
push ebp
lea eax, [esp + 0x24]
call fcn.0042a460
mov ecx, eax
call fcn.00402f50
push eax
lea edx, [esp + 0x10c]
push edx
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x3c], esp
push 0x21
mov ecx, 0x455354
call fcn.00404250
lea esi, [esp + 0x78]
call fcn.004014c0
mov byte [esp + 0x2bc], 0x40
call fcn.00401580
mov ecx, eax
mov byte [esp + 0x2b8], 0x41
call fcn.00402f50
push eax
push 1
push edi
call fcn.0041c990
add esp, 0x10
lea ecx, [esp + 0x108]
call fcn.00402ba0
call fcn.00429620
lea ecx, [esp + 0x140]
mov byte [esp + 0x2b4], bl
call fcn.00402ba0
jmp 0x41e431
sub esp, 0x1c
lea eax, [esp + 0x15c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00402b70
call fcn.0041cd30
cmp eax, ebx
jge 0x41e205
lea ecx, [esp + 0x140]
call fcn.00402f50
push eax
push ecx
push ebp
lea eax, [esp + 0x2c]
call fcn.0042a460
add esp, 4
mov ecx, eax
call fcn.00402f50
push eax
lea ecx, [esp + 0x110]
push ecx
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x40], esp
push 0x22
mov ecx, 0x455378
call fcn.00404250
lea esi, [esp + 0x7c]
call fcn.004014c0
mov byte [esp + 0x2c0], 0x42
call fcn.00401580
mov ecx, eax
mov byte [esp + 0x2bc], 0x43
call fcn.00402f50
push eax
push 1
push edi
call fcn.0041c990
add esp, 0x14
lea ecx, [esp + 0x108]
call fcn.00402ba0
call fcn.00429620
lea ecx, [esp + 0x140]
mov byte [esp + 0x2b4], bl
call fcn.00402ba0
jmp 0x41e431
push ebp
lea eax, [esp + 0x24]
mov dword [esp + 0x1c], ebx
call fcn.0042a460
add eax, 0x1c
call fcn.004051f0
test eax, eax
jbe 0x41e41a
mov esi, ebx
push esi
push ecx
push ebp
lea eax, [esp + 0x2c]
call fcn.0042a460
add esp, 4
add eax, 0x1c
call fcn.00405210
push eax
lea edx, [esp + 0x144]
push edx
lea edi, [esp + 0x110]
call fcn.004059d0
mov edi, 0xf
mov dword [esp + 0x144], edi
mov dword [esp + 0x140], ebx
mov byte [esp + 0x130], bl
sub esp, 0x14
lea eax, [esp + 0x124]
mov ecx, esp
mov dword [esp + 0xc8], esp
push eax
mov byte [esp + 0x2d4], 0x45
call fcn.00402b70
call fcn.0041cd30
cmp eax, ebx
jge 0x41e2ba
lea ecx, [esp + 0x124]
call fcn.00402ba0
lea ecx, [esp + 0x108]
mov byte [esp + 0x2b4], 0x3f
call fcn.00402ba0
jmp 0x41e3fb
push 0x103
lea ecx, [esp + 0x1a1]
push ebx
push ecx
mov byte [esp + 0x1a8], bl
call fcn.0043e780
add esp, 0xc
push 0x104
lea edx, [esp + 0x1a0]
push edx
lea ecx, [esp + 0x110]
call fcn.00402f50
push eax
call dword [sym.imp.KERNEL32.dll_GetShortPathNameA]
cmp eax, ebx
je 0x41e324
cmp eax, 0x104
jae 0x41e324
lea eax, [esp + 0x19c]
push eax
lea ecx, [esp + 0x128]
call fcn.00402df0
call fcn.00417cd0
test eax, eax
je 0x41e324
call fcn.00401440
mov dword [esp + 0x174], edi
mov dword [esp + 0x170], ebx
mov byte [esp + 0x160], bl
mov dword [esp + 0x190], edi
mov dword [esp + 0x18c], ebx
mov byte [esp + 0x17c], bl
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x110]
push ecx
lea ecx, [esp + 0x168]
mov byte [esp + 0x2c0], 0x46
call fcn.00402d10
call fcn.00417a20
test eax, eax
je 0x41e37b
call fcn.00435230
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0x12c]
push edx
lea ecx, [esp + 0x184]
call fcn.00402d10
mov dword [esp + 0x194], ebx
call fcn.00417930
sub eax, 1
jne 0x41e3ad
call fcn.004186c0
call fcn.00406c60
mov edi, dword [esp + 0x1c]
add edi, 0x2c0
lea ebx, [esp + 0x15c]
mov dword [esp + 0x198], 1
call fcn.0042a0a0
mov esi, ebx
call fcn.0042e340
lea ecx, [esp + 0x124]
call fcn.00402ba0
lea ecx, [esp + 0x108]
mov byte [esp + 0x2b4], 0x3f
call fcn.00402ba0
mov esi, dword [esp + 0x18]
xor ebx, ebx
inc esi
push ebp
lea eax, [esp + 0x24]
mov dword [esp + 0x1c], esi
call fcn.0042a460
add eax, 0x1c
call fcn.004051f0
cmp esi, eax
jb 0x41e225
lea ecx, [esp + 0x140]
mov byte [esp + 0x2b4], bl
call fcn.00402ba0
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x30]
sub ecx, dword [esp + 0x2c]
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
cmp ebp, eax
jb 0x41e061
lea esi, [esp + 0x20]
call fcn.0042a410
xor eax, eax
mov ecx, dword [esp + 0x2ac]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x290]
xor ecx, esp
call fcn.00437983
add esp, 0x2a4
ret 4