Function at 0x4136e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x45a858
mov eax, dword fs:[0]
push eax
sub esp, 0x78
push ebx
push esi
push edi
mov eax, dword [0x46f1b0]
xor eax, esp
push eax
lea eax, [esp + 0x88]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
xor edi, edi
lea eax, [ebx + 0xcc]
push edi
lea ecx, [ebx + 0x48]
push eax
push ecx
push ebx
mov esi, 0x10f9
mov dword [esp + 0x34], edi
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
call fcn.0042ca26
mov eax, dword [0x471864]
mov edx, dword [eax + 0xc]
add esp, 0x10
mov ecx, 0x471864
call edx
add eax, 0x10
mov dword [esp + 0x18], eax
mov dword [esp + 0x90], edi
mov eax, dword [0x471864]
mov edx, dword [eax + 0xc]
mov ecx, 0x471864
call edx
lea ecx, [eax + 0x10]
mov dword [esp + 0x14], ecx
mov byte [esp + 0x90], 1
mov esi, dword [ecx - 0x10]
lea eax, [ecx - 0x10]
mov dword [esp + 0x20], edi
cmp dword [eax + 4], edi
je 0x4137c3
cmp dword [eax + 0xc], edi
lea edx, [eax + 0xc]
jge 0x41379d
cmp dword [ecx - 8], edi
jl 0x413dac
mov dword [ecx - 0xc], edi
mov byte [ecx], 0
jmp 0x4137c3
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4137b3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [esi]
mov eax, dword [edx + 0xc]
mov ecx, esi
call eax
add eax, 0x10
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x34]
push ecx
mov dword [esp + 0x2c], edi
call fcn.00429d2d
lea edx, [esp + 0x2c]
add esp, 4
push edx
lea eax, [esp + 0x38]
call fcn.004337f5
add esp, 4
test al, al
jne 0x4137ed
xor esi, esi
jmp 0x4137f1
mov esi, dword [esp + 0x28]
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413811
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp esi, edi
je 0x41386a
lea ecx, [esp + 0x38]
push ecx
mov dword [esp + 0x2c], edi
call fcn.00429d2d
lea edx, [esp + 0x2c]
add esp, 4
push edx
lea eax, [esp + 0x3c]
call fcn.004337f5
add esp, 4
test al, al
jne 0x41383f
mov dword [esp + 0x28], edi
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41385f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test byte [esp + 0x28], 0x40
je 0x413da5
mov ecx, dword [ebx + 0xd8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x30]
push 1
call eax
mov ecx, dword [ebx + 0xd8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x38]
call eax
lea ecx, [ebx + 0xc4]
push ecx
lea edx, [esp + 0x20]
push edx
call fcn.00429ba5
add esp, 8
mov byte [esp + 0x90], 2
mov eax, dword [esp + 0x1c]
cmp dword [eax - 0xc], edi
mov dword [esp + 0x3c], edi
setne al
mov byte [esp + 0x13], al
test al, al
je 0x4138c9
push edi
lea ecx, [esp + 0x20]
call fcn.004151d0
add esp, 4
mov dword [esp + 0x3c], eax
lea ecx, [esp + 0x14]
push ecx
push ebx
call fcn.004125b0
mov byte [esp + 0x12], al
test al, al
je 0x413c52
cmp byte [ebx + 0x4d], 0
je 0x41390b
mov eax, dword [ebx + 0xdc]
cmp eax, edi
sete cl
mov byte [esp + 0x12], cl
test cl, cl
jne 0x41390b
push eax
push 0xd
push 0x809
push 0x45f56c
jmp 0x413c65
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
lea esi, [ebx + 0x94]
call eax
add eax, 0x10
mov dword [esp + 0x54], eax
mov byte [esp + 0x90], 3
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0x90], 4
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x60], eax
push 2
push 0x30d7
push 0x45ed9c
mov byte [esp + 0x9c], 5
call fcn.00433314
add esp, 0xc
push esi
lea ecx, [esp + 0x58]
mov edi, eax
call fcn.00402d80
mov ecx, dword [esp + 0x54]
cmp dword [ecx - 0xc], 0
jne 0x4139b9
test edi, edi
jne 0x4139a0
xor eax, eax
jmp 0x4139ae
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4139a5
sub eax, edx
push eax
push edi
lea ecx, [esp + 0x5c]
call fcn.00402b60
lea edx, [esp + 0x54]
push edx
lea eax, [esp + 0x48]
lea ecx, [esi + 4]
push eax
call fcn.00409fa0
add esp, 8
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x94], 6
call fcn.00402d80
mov byte [esp + 0x90], 5
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413a08
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor ecx, ecx
mov dword [esp + 0x5c], ecx
mov byte [esp + 0x90], 7
mov dword [esp + 0x28], ecx
lea ebx, [ebx]
test ecx, ecx
setge al
test al, al
je 0x413b63
lea ecx, [ecx]
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x5c]
push ecx
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x64]
push ecx
call fcn.00409dc0
mov byte [esp + 0x90], 8
mov eax, dword [eax]
mov edi, dword [esp + 0x60]
lea esi, [eax - 0x10]
add edi, 0xfffffff0
cmp esi, edi
je 0x413af6
cmp dword [edi + 0xc], 0
jl 0x413ae8
mov ecx, dword [esi]
cmp ecx, dword [edi]
jne 0x413ae8
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x413a92
cmp eax, dword [esi]
jne 0x413a92
mov ebx, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x413ac6
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
je 0x413db6
mov eax, dword [esi + 4]
mov dword [ebx + 4], eax
mov eax, dword [esi + 4]
inc eax
push eax
add esi, 0x10
push esi
push eax
lea ecx, [ebx + 0x10]
push ecx
call fcn.0043f4de
add esp, 0x10
lea eax, [edi + 0xc]
or edx, 0xffffffff
lock xadd dword [eax], edx
dec edx
test edx, edx
jg 0x413adf
mov ecx, dword [edi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
add ebx, 0x10
mov dword [esp + 0x60], ebx
jmp 0x413af6
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x68]
call fcn.00402b60
mov byte [esp + 0x90], 7
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413b1e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str._t__r_n
lea eax, [esp + 0x64]
call fcn.0041f6d0
mov ebx, eax
mov eax, str._t__r_n
call fcn.004282b0
mov ecx, dword [esp + 0x5c]
test ecx, ecx
setg al
test al, al
je 0x413b53
mov edx, dword [esp + 0x60]
cmp dword [edx - 0xc], 0
jg 0x413c23
test ecx, ecx
setge al
test al, al
jne 0x413a30
mov ebx, dword [ebp + 8]
mov byte [esp + 0x90], 2
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413b8b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413bab
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413bcb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x28], 0
jle 0x413c82
cmp byte [esp + 0x13], 0
je 0x413bf5
cmp dword [esp + 0x3c], 0
jne 0x413bf5
push 0xe10
lea ecx, [esp + 0x20]
call fcn.004151d0
add esp, 4
mov ecx, dword [ebx + 0x54]
push ecx
push ebx
call fcn.00412960
mov byte [esp + 0x12], al
test al, al
jne 0x413c82
push 9
push 0x2505
push 0x45f628
call fcn.00433314
add esp, 0xc
test eax, eax
jne 0x413c2f
xor ecx, ecx
jmp 0x413c3d
inc dword [esp + 0x28]
mov ebx, dword [ebp + 8]
jmp 0x413a20
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x413c34
sub ecx, esi
push ecx
push eax
lea ecx, [esp + 0x20]
call fcn.00402b60
mov dword [esp + 0x20], 0x10
jmp 0x413c82
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push 0x12
push 0x1f54
push 0x45f634
call fcn.00433314
add esp, 0xc
push eax
lea edi, [esp + 0x20]
call fcn.004056f0
mov dword [esp + 0x28], 8
add esp, 8
mov byte [esp + 0x90], 1
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x413caa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp byte [esp + 0x12], 0
jne 0x413dd9
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x18]
push ecx
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x18]
push edx
push eax
push ecx
mov edi, ebx
mov esi, 0x10fb
call fcn.0042ccac
mov ecx, dword [ebx + 0xd8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x30]
add esp, 0x10
push 0
call eax
cmp byte [ebx + 0x60], 0
je 0x413dbb
push 0xf
push 0x33e1
push 0x45f648
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
call fcn.00402830
lea ecx, [ebx + 0x20]
push ecx
lea edx, [esp + 0x50]
push edx
mov byte [esp + 0x98], 9
call fcn.004342a5
lea ecx, [esp + 0x48]
push ecx
push eax
mov byte [esp + 0xa0], 0xa
call fcn.004351c5
mov byte [esp + 0x23], al
mov byte [esp + 0xa0], 9
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
add esp, 0x10
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x413d67
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x90], 1
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413d8f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp byte [esp + 0x13], 0
je 0x413dbb
inc dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
xor edi, edi
jmp 0x413775
mov byte [esp + 0x12], 1
jmp 0x413dd9
push 0x80070057
call fcn.00401000
call fcn.004031c0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
push ecx
push edx
push eax
mov edi, ebx
mov esi, 0x10fc
call fcn.0042cdf4
add esp, 0xc
mov ecx, dword [esp + 0x20]
or dword [ebx + 0x50], ecx
cmp byte [esp + 0x12], 0
je 0x413e6c
or dword [ebx + 0x50], 0x80
mov eax, dword [ebx + 0x50]
mov edx, eax
and dl, 0x40
cmp dl, 0x40
sete cl
test cl, cl
je 0x413e0a
or eax, 0x20
mov dword [ebx + 0x50], eax
lea eax, [ebx + 0x90]
lea edi, [esp + 0x4c]
call fcn.004159a0
mov edx, dword [esp + 0x24]
push edx
mov byte [esp + 0x94], 0xb
mov ecx, dword [ebx + 0x50]
push ecx
mov ecx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x38]
push eax
push ecx
mov edi, ebx
mov esi, 0x10fa
call fcn.0042caf2
mov byte [esp + 0xa4], 1
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
add esp, 0x14
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x413e6c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ebx, dword [ebx + 0xb8]
xor eax, eax
mov dword [esp + 0x50], ebx
mov dword [esp + 0x28], eax
test ebx, ebx
jle 0x414878
jmp 0x413e94
mov eax, dword [esp + 0x28]
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx + 0xb8]
jae 0x413dac
mov ecx, dword [ecx + 0xb4]
lea eax, [ecx + eax*4]
mov eax, dword [eax]
lea esi, [eax + 0x2c]
push esi
mov dword [esp + 0x28], eax
call fcn.004156a0
mov eax, dword [esi]
sub eax, 1
je 0x414463
sub eax, 1
jne 0x414865
mov eax, dword [esp + 0x24]
mov edx, dword [0x471864]
add eax, 0x2c
lea esi, [eax + 0x14]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x54], eax
mov byte [esp + 0x90], 0x12
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x58], eax
mov byte [esp + 0x90], 0x13
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x60], eax
push 2
push 0x30d7
mov bl, 0x14
push 0x45ed9c
mov byte [esp + 0x9c], bl
call fcn.00433314
add esp, 0xc
push esi
lea ecx, [esp + 0x58]
mov edi, eax
call fcn.00402d80
mov ecx, dword [esp + 0x54]
cmp dword [ecx - 0xc], 0
jne 0x413f84
test edi, edi
jne 0x413f69
xor eax, eax
jmp 0x413f79
mov eax, edi
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x413f70
sub eax, edx
push eax
push edi
lea ecx, [esp + 0x5c]
call fcn.00402b60
lea edx, [esp + 0x54]
push edx
lea eax, [esp + 0x50]
lea ecx, [esi + 4]
push eax
call fcn.00409fa0
add esp, 8
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x94], 0x15
call fcn.00402d80
mov byte [esp + 0x90], bl
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x413fd2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor ecx, ecx
mov dword [esp + 0x5c], ecx
mov byte [esp + 0x90], 0x16
mov dword [esp + 0x2c], ecx
test ecx, ecx
setge al
test al, al
je 0x414121
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x5c]
push ecx
push edx
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x64]
push ecx
call fcn.00409dc0
mov byte [esp + 0x90], 0x17
mov eax, dword [eax]
mov esi, dword [esp + 0x60]
lea edi, [eax - 0x10]
add esi, 0xfffffff0
cmp edi, esi
je 0x4140b7
cmp dword [esi + 0xc], 0
jl 0x4140a9
mov ecx, dword [edi]
cmp ecx, dword [esi]
jne 0x4140a9
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [edi + 0xc], 0
lea ecx, [edi + 0xc]
jl 0x414053
cmp eax, dword [edi]
jne 0x414053
mov ebx, edi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x414087
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
je 0x413db6
mov eax, dword [edi + 4]
mov dword [ebx + 4], eax
mov eax, dword [edi + 4]
inc eax
push eax
add edi, 0x10
push edi
push eax
lea ecx, [ebx + 0x10]
push ecx
call fcn.0043f4de
add esp, 0x10
lea eax, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [eax], edx
dec edx
test edx, edx
jg 0x4140a0
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
add ebx, 0x10
mov dword [esp + 0x60], ebx
jmp 0x4140b7
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x68]
call fcn.00402b60
mov byte [esp + 0x90], 0x16
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4140df
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str._t__r_n
lea eax, [esp + 0x64]
call fcn.0041f6d0
mov ebx, eax
mov eax, str._t__r_n
call fcn.004282b0
mov ecx, dword [esp + 0x5c]
test ecx, ecx
setg al
test al, al
je 0x414114
mov edx, dword [esp + 0x60]
cmp dword [edx - 0xc], 0
jg 0x414223
test ecx, ecx
setge al
test al, al
jne 0x413ff1
mov byte [esp + 0x90], 1
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414149
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414169
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414189
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x24]
mov edx, dword [0x471864]
add eax, 0x2c
lea esi, [eax + 4]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x64], eax
mov byte [esp + 0x90], 0x18
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x68], eax
mov byte [esp + 0x90], 0x19
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x70], eax
push 2
push 0x30d7
mov bl, 0x1a
push 0x45ed9c
mov byte [esp + 0x9c], bl
call fcn.00433314
add esp, 0xc
push esi
lea ecx, [esp + 0x68]
mov edi, eax
call fcn.00402d80
mov ecx, dword [esp + 0x64]
cmp dword [ecx - 0xc], 0
jne 0x414245
test edi, edi
jne 0x41422c
xor eax, eax
jmp 0x41423a
inc dword [esp + 0x2c]
jmp 0x413fe4
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x414231
sub eax, edx
push eax
push edi
lea ecx, [esp + 0x6c]
call fcn.00402b60
lea edx, [esp + 0x64]
push edx
lea eax, [esp + 0x48]
lea ecx, [esi + 4]
push eax
call fcn.00409fa0
add esp, 8
push eax
lea ecx, [esp + 0x6c]
mov byte [esp + 0x94], 0x1b
call fcn.00402d80
mov byte [esp + 0x90], bl
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414293
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor ecx, ecx
mov dword [esp + 0x6c], ecx
mov byte [esp + 0x90], 0x1c
mov dword [esp + 0x30], ecx
test ecx, ecx
setge al
test al, al
je 0x4143e2
mov edx, dword [esp + 0x64]
lea ecx, [esp + 0x6c]
push ecx
push edx
lea eax, [esp + 0x40]
push eax
lea ecx, [esp + 0x74]
push ecx
call fcn.00409dc0
mov byte [esp + 0x90], 0x1d
mov eax, dword [eax]
mov esi, dword [esp + 0x70]
lea edi, [eax - 0x10]
add esi, 0xfffffff0
cmp edi, esi
je 0x414378
cmp dword [esi + 0xc], 0
jl 0x41436a
mov ecx, dword [edi]
cmp ecx, dword [esi]
jne 0x41436a
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [edi + 0xc], 0
lea ecx, [edi + 0xc]
jl 0x414314
cmp eax, dword [edi]
jne 0x414314
mov ebx, edi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x414348
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
je 0x413db6
mov eax, dword [edi + 4]
mov dword [ebx + 4], eax
mov eax, dword [edi + 4]
inc eax
push eax
add edi, 0x10
push edi
push eax
lea ecx, [ebx + 0x10]
push ecx
call fcn.0043f4de
add esp, 0x10
lea eax, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [eax], edx
dec edx
test edx, edx
jg 0x414361
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
add ebx, 0x10
mov dword [esp + 0x70], ebx
jmp 0x414378
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x78]
call fcn.00402b60
mov byte [esp + 0x90], 0x1c
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4143a0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str._t__r_n
lea eax, [esp + 0x74]
call fcn.0041f6d0
mov ebx, eax
mov eax, str._t__r_n
call fcn.004282b0
mov ecx, dword [esp + 0x6c]
test ecx, ecx
setg al
test al, al
je 0x4143d5
mov edx, dword [esp + 0x70]
cmp dword [edx - 0xc], 0
jg 0x41445a
test ecx, ecx
setge al
test al, al
jne 0x4142b2
mov byte [esp + 0x90], 1
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41440a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41442a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x64]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41444a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x30]
cmp dword [esp + 0x2c], ecx
sete al
jmp 0x41473e
inc dword [esp + 0x30]
jmp 0x4142a5
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
add esi, 0x14
call eax
add eax, 0x10
mov dword [esp + 0x74], eax
mov byte [esp + 0x90], 0xc
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x78], eax
mov byte [esp + 0x90], 0xd
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x80], eax
push 2
push 0x30d7
mov bl, 0xe
push 0x45ed9c
mov byte [esp + 0x9c], bl
call fcn.00433314
add esp, 0xc
push esi
lea ecx, [esp + 0x78]
mov edi, eax
call fcn.00402d80
mov ecx, dword [esp + 0x74]
cmp dword [ecx - 0xc], 0
jne 0x414514
test edi, edi
jne 0x4144f9
xor eax, eax
jmp 0x414509
mov eax, edi
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x414500
sub eax, edx
push eax
push edi
lea ecx, [esp + 0x7c]
call fcn.00402b60
lea edx, [esp + 0x74]
push edx
lea eax, [esp + 0x38]
lea ecx, [esi + 4]
push eax
call fcn.00409fa0
add esp, 8
push eax
lea ecx, [esp + 0x7c]
mov byte [esp + 0x94], 0xf
call fcn.00402d80
mov byte [esp + 0x90], bl
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414562
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor ecx, ecx
mov dword [esp + 0x7c], ecx
mov byte [esp + 0x90], 0x10
mov dword [esp + 0x30], ecx
test ecx, ecx
setge al
test al, al
je 0x4146cb
mov edx, dword [esp + 0x74]
lea ecx, [esp + 0x7c]
push ecx
push edx
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x84]
push ecx
call fcn.00409dc0
mov byte [esp + 0x90], 0x11
mov eax, dword [eax]
mov esi, dword [esp + 0x80]
lea edi, [eax - 0x10]
add esi, 0xfffffff0
cmp edi, esi
je 0x41465b
cmp dword [esi + 0xc], 0
jl 0x41464a
mov ecx, dword [edi]
cmp ecx, dword [esi]
jne 0x41464a
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [edi + 0xc], 0
lea ecx, [edi + 0xc]
jl 0x4145f1
cmp eax, dword [edi]
jne 0x4145f1
mov ebx, edi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x414625
mov ecx, dword [edi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov ebx, eax
test ebx, ebx
je 0x413db6
mov eax, dword [edi + 4]
mov dword [ebx + 4], eax
mov eax, dword [edi + 4]
inc eax
push eax
add edi, 0x10
push edi
push eax
lea ecx, [ebx + 0x10]
push ecx
call fcn.0043f4de
add esp, 0x10
lea eax, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [eax], edx
dec edx
test edx, edx
jg 0x41463e
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
add ebx, 0x10
mov dword [esp + 0x80], ebx
jmp 0x41465b
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x88]
call fcn.00402b60
mov byte [esp + 0x90], 0x10
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414683
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str._t__r_n
lea eax, [esp + 0x84]
call fcn.0041f6d0
mov ebx, eax
mov eax, str._t__r_n
call fcn.004282b0
mov ecx, dword [esp + 0x7c]
test ecx, ecx
setg al
test al, al
je 0x4146be
mov edx, dword [esp + 0x80]
cmp dword [edx - 0xc], 0
jg 0x4148e7
test ecx, ecx
setge al
test al, al
jne 0x414581
mov byte [esp + 0x90], 1
mov eax, dword [esp + 0x80]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4146f6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414716
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414736
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp dword [esp + 0x30], 0
setg al
test al, al
je 0x414865
mov ecx, dword [esp + 0x24]
or dword [ecx + 4], 0x80
mov eax, dword [ecx + 4]
mov edx, eax
and dl, 0x40
cmp dl, 0x40
sete dl
test dl, dl
je 0x414769
or eax, 0x20
mov dword [ecx + 4], eax
push 1
push 0x24b4
push 0x45e890
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
call fcn.00402830
push 1
push 0x24b4
push 0x45e890
mov byte [esp + 0x9c], 0x1e
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x44]
call fcn.00402830
mov esi, dword [esp + 0x24]
mov bl, 0x1f
lea edi, [esp + 0x1c]
lea eax, [esi + 0x2c]
mov byte [esp + 0x90], bl
call fcn.004159a0
push 0
mov byte [esp + 0x94], 0x20
mov ecx, dword [esi + 4]
push ecx
push eax
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x50]
mov edi, esi
push ecx
mov esi, 0x10fa
call fcn.0042caf2
mov byte [esp + 0xa4], bl
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
add esp, 0x14
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x414815
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x90], 0x1e
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41483d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x90], 1
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x414865
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x28]
inc eax
cmp eax, dword [esp + 0x50]
mov dword [esp + 0x28], eax
jl 0x413e90
mov byte [esp + 0x90], 0
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4148a0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x90], 0xffffffff
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4148cb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, byte [esp + 0x12]
mov ecx, dword [esp + 0x88]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
inc dword [esp + 0x30]
jmp 0x414574