Function at 0x4186b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x200]
cmp eax, dword [ecx + 8]
jbe 0x4197df
sub esp, 0x280
lea eax, [0xa932e0]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00402070
nop
lea eax, [0xa932ec]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00402070
mov eax, dword [0xa932ec]
cmp eax, 1
jne 0x4197bd
mov eax, 1
mov byte [0xa93594], al
test al, al
je 0x4197b1
mov eax, 1
mov byte [0xa93590], al
mov eax, dword [0xa96c80]
mov ecx, dword [0xa96c84]
mov dword [0xa7d8e0], eax
mov dword [0xa7d8e4], ecx
nop
call fcn.00460d00
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
nop
mov edx, dword [esp]
mov dword [esp + 0x34], edx
mov ebx, dword [esp + 4]
mov dword [esp + 0x38], ebx
inc dword [ecx + 0x78]
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x1bc], ecx
test byte [eax], al
mov dword [ecx + 0x74], 5
lea edi, [ecx + 0x70]
mov dword [esp + 0x1cc], edi
mov eax, dword [0xa93590]
test eax, eax
jne 0x4197a1
lea eax, [0x7c7399]
mov dword [ecx + 0x70], eax
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov dword [esp + 0x1c4], eax
mov ecx, dword [eax + 0x18]
mov byte [ecx + 0x99], 2
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x4c]
mov dword [esp + 0x1c0], ecx
mov dword [esp], ecx
mov dword [esp + 4], 2
mov dword [esp + 8], 4
call fcn.00437650
mov eax, dword [esp + 0x1c0]
mov byte [eax + 0x64], 6
mov dword [esp + 0xf8], 0
mov dword [esp + 0xfc], 0
mov dword [esp + 0x100], 0
lea ecx, [0x457b00]
mov dword [esp + 0xf8], ecx
mov ecx, dword [esp + 0x34]
mov dword [esp + 0xfc], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x100], ecx
lea ecx, [esp + 0xf8]
mov dword [esp], ecx
call fcn.0045e670
lea eax, [0x7e6984]
mov dword [esp], eax
call fcn.0045e670
mov eax, dword [esp + 0x1c4]
mov eax, dword [eax + 0x18]
mov byte [eax + 0x99], 0
mov eax, dword [esp + 0x1c0]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 2
call fcn.00437650
movzx eax, byte [0xa8b188]
test al, al
jne 0x419773
mov ecx, dword [esp + 0x1bc]
mov dword [ecx + 0x74], 0
mov edx, dword [0xa93590]
test edx, edx
jne 0x419760
mov dword [ecx + 0x70], 0
mov eax, dword [0xa932ec]
test eax, eax
jne 0x4197c8
mov eax, dword [0xa956e8]
mov ecx, dword [0xa956ec]
mov dword [0xa96c60], eax
mov dword [0xa96c64], ecx
mov eax, dword [0xa95688]
mov ecx, dword [0xa9568c]
mov dword [0xa96c68], eax
mov dword [0xa96c6c], ecx
movsd xmm0, qword [esp + 0x284]
movsd qword [esp], xmm0
call fcn.004174a0
nop
call fcn.00460d00
mov eax, dword [esp]
mov dword [esp + 0x5c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x60], ecx
call fcn.00460d40
mov eax, dword [esp]
mov ecx, eax
mov eax, 0x3b9aca00
mul ecx
mov dword [esp + 0xc8], edx
mov dword [esp + 0xc4], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x48], ecx
add ecx, eax
mov dword [esp + 0x24], ecx
mov ebp, dword [0xa7d8d0]
mov esi, dword [esp + 0x5c]
mov edi, esi
sub esi, ebp
mov eax, dword [0xa7d8c8]
mov dword [esp + 0xc0], eax
add eax, esi
mov ebx, dword [esp + 4]
mov dword [esp + 0x3c], ebx
mov edx, dword [0xa7d8cc]
mov ebx, dword [0xa7d8d4]
mov dword [0xa7d8c8], eax
mov eax, edi
sub edi, ebp
mov ebp, dword [esp + 0x60]
mov edi, ebp
sbb ebp, ebx
mov ebx, dword [esp + 0xc0]
add ebx, esi
adc ebp, edx
mov dword [0xa7d8cc], ebp
mov dword [0xa7d8c0], eax
mov dword [0xa7d8c4], edi
lea edx, [0xa956f0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x3c]
imul edx, edx, 0x3b9aca00
mov ebx, dword [esp + 0xc8]
add edx, ebx
mov ebx, dword [esp + 0x48]
mov ebp, ebx
sar ebx, 0x1f
mov esi, dword [esp + 0xc4]
add ebp, esi
adc edx, ebx
mov dword [esp + 0x28], edx
mov dword [esp + 8], edx
call fcn.004020b0
lea eax, [0xa96c50]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x60]
mov dword [esp + 8], ecx
call fcn.004020b0
mov eax, dword [0xa96700]
and eax, 0xff
lea ecx, [0xa95700]
lea eax, [ecx + eax*8]
mov ecx, dword [0xa7d8c8]
mov edx, dword [0xa7d8cc]
mov dword [eax], ecx
mov dword [eax + 4], edx
mov eax, dword [0xa96700]
and eax, 0xff
lea ecx, [0xa95f00]
lea eax, [ecx + eax*8]
mov ecx, dword [esp + 0x24]
mov dword [eax], ecx
mov ecx, dword [esp + 0x28]
mov dword [eax + 4], ecx
mov eax, dword [0xa956f8]
mov ecx, dword [0xa7d8c8]
add eax, ecx
mov ecx, dword [0xa956fc]
mov edx, dword [0xa7d8cc]
mov dword [0xa956f8], eax
adc ecx, edx
mov dword [0xa956fc], ecx
mov eax, dword [0xa7d8b0]
mov ecx, dword [0xa7d8a8]
mov edx, eax
sub eax, ecx
mov dword [esp + 0xc8], eax
mov ebx, dword [0xa7d8a0]
mov dword [esp + 0xbc], ebx
mov ebp, edx
mul ebx
mov dword [esp + 0xc4], edx
mov dword [esp + 0x30], eax
mov edi, dword [0xa93ab0]
mov dword [esp + 0xc0], edi
mov edx, dword [0xa93ab8]
mov dword [esp + 0xb8], edx
add edi, edx
mov dword [esp + 0xb4], edi
mov esi, dword [0xa93ac0]
mov dword [esp + 0xb0], esi
add esi, edi
mov dword [esp + 0x68], esi
mov edi, dword [0xa7d8c0]
mov dword [esp + 0xac], edi
mov edx, dword [0xa7d8b8]
mov dword [esp + 0xa8], edx
sub edi, edx
mov dword [esp + 0xa4], edi
mov eax, edi
mul ebx
mov dword [esp + 0xa0], edx
mov dword [esp + 0x64], eax
mov edi, dword [esp + 0x30]
add edi, esi
mov dword [esp + 0x9c], edi
add eax, edi
mov dword [esp + 0x74], eax
mov edi, dword [0xa7d878]
mov dword [esp + 0x98], edi
add edi, eax
mov dword [esp + 0x94], edi
mov eax, dword [0xa7d8b4]
mov edx, dword [0xa7d8ac]
mov esi, dword [0xa93ab4]
mov ebx, dword [0xa93abc]
mov dword [esp + 0x90], ebx
mov ebx, dword [0xa93ac4]
mov dword [esp + 0x8c], ebx
mov ebx, dword [0xa7d8c4]
mov dword [esp + 0x88], ebx
mov ebx, dword [0xa7d8bc]
mov dword [esp + 0x84], ebx
mov ebx, dword [0xa7d87c]
mov dword [esp + 0x80], ebx
mov dword [0xa7d878], edi
sub ebp, ecx
sbb eax, edx
mov ecx, dword [esp + 0xc0]
mov edx, dword [esp + 0xb8]
add ecx, edx
mov ecx, dword [esp + 0x90]
adc esi, ecx
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
add ecx, edx
mov ecx, dword [esp + 0x8c]
adc esi, ecx
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xa8]
sub ecx, edx
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
sbb ecx, edx
mov edx, dword [esp + 0xbc]
mov ebp, edx
sar edx, 0x1f
mov edi, dword [esp + 0xc8]
imul edi, edx
imul eax, ebp
mov ebx, dword [esp + 0xc4]
add eax, ebx
add eax, edi
mov dword [esp + 0xc8], eax
mov ebx, dword [esp + 0x30]
mov edi, dword [esp + 0x68]
add edi, ebx
adc esi, eax
imul ecx, ebp
mov ebp, dword [esp + 0xa0]
add ecx, ebp
mov ebp, dword [esp + 0xa4]
imul ebp, edx
add ecx, ebp
mov dword [esp + 0xc4], ecx
mov edx, dword [esp + 0x64]
mov ebp, dword [esp + 0x9c]
add ebp, edx
adc esi, ecx
mov ebp, dword [esp + 0x98]
mov edi, dword [esp + 0x74]
add ebp, edi
mov ebp, dword [esp + 0x80]
adc ebp, esi
mov dword [0xa7d87c], ebp
mov esi, dword [0xa7d6c4]
mov dword [esp + 0xc0], esi
mov edi, dword [esp + 0x5c]
sub edi, esi
mov dword [esp + 0xb8], edi
mov ecx, dword [0xa932f0]
mov dword [esp + 0xbc], ecx
mov eax, ecx
mul edi
mov dword [esp + 0xb4], edx
mov dword [esp + 0xb0], eax
mov ebx, dword [0xa7d6cc]
mov dword [esp + 0xac], ebx
add ebx, eax
mov dword [esp + 0x2c], ebx
mov eax, dword [0xa7d6d0]
mov dword [esp + 0x90], eax
mov eax, dword [0xa7d6c8]
mov dword [esp + 0x8c], eax
mov edx, dword [esp + 0x94]
mov dword [esp], edx
mov dword [esp + 4], ebp
call fcn.00456850
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0xe8], xmm0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0xc0]
sub eax, ecx
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x8c]
sbb eax, ecx
mov ecx, dword [esp + 0xbc]
mov edx, ecx
sar ecx, 0x1f
mov ebx, dword [esp + 0xb8]
imul ebx, ecx
mov ecx, dword [esp + 0xb4]
add ecx, ebx
imul eax, edx
add eax, ecx
mov ecx, dword [esp + 0xac]
mov edx, dword [esp + 0xb0]
add ecx, edx
mov ecx, dword [esp + 0x90]
adc ecx, eax
mov dword [esp + 4], ecx
call fcn.00456850
movsd xmm0, qword [esp + 0xe8]
divsd xmm0, qword [esp + 8]
movsd qword [0xa96708], xmm0
mov dword [0xa7cf6c], 0
mov dword [0xa7cf70], 0
movzx eax, byte [0xa7d874]
test al, al
je 0x418d92
inc dword [0xa96704]
nop
nop
lea eax, [0xa7d894]
mov dword [esp], eax
call fcn.00409c80
inc dword [0xa96700]
lea eax, [0xa7d898]
mov dword [esp], eax
call fcn.0043afc0
nop
nop
lea eax, [0xa7d894]
mov dword [esp], eax
call fcn.00409e90
call fcn.0042ae30
lea eax, [0x7e6988]
mov dword [esp], eax
call fcn.0045e670
call fcn.0042aea0
call fcn.00423570
lea eax, [0x7e696c]
mov dword [esp], eax
call fcn.0045e670
lea eax, [0x7e6990]
mov dword [esp], eax
call fcn.0045e670
mov eax, dword [0xa936e0]
test eax, eax
jle 0x419687
movsd xmm0, qword [0x833048]
mulsd xmm0, qword [0xa96708]
movsd qword [esp + 0xe8], xmm0
lea edi, [esp + 0x104]
xor eax, eax
call fcn.0045ff8a
call fcn.00434e10
mov ecx, dword [0xa7d8a8]
mov edx, dword [0xa933c0]
sub ecx, edx
mov edx, dword [0xa7d8ac]
mov ebx, dword [0xa933c4]
mov dword [esp], ecx
sbb edx, ebx
mov dword [esp + 4], edx
mov dword [esp + 8], 0xf4240
mov dword [esp + 0xc], 0
call fcn.00456ab0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
lea ebx, [esp + 0x104]
mov dword [esp], ebx
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], 3
call fcn.0041a990
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c8], ecx
mov edx, dword [esp + 0x1c]
lea edi, [esp + 0x1f0]
xor eax, eax
call fcn.0045ff82
lea ecx, [0x7739a0]
mov dword [esp + 0x1f0], ecx
lea ebx, [0x8349c0]
mov dword [esp + 0x1f4], ebx
mov ebx, dword [0xa96700]
mov dword [esp + 0x7c], ebx
lea ebx, [0x773b20]
mov dword [esp + 0x1f8], ebx
lea ebx, [esp + 0x7c]
mov dword [esp + 0x1fc], ebx
mov dword [esp + 0x200], ecx
lea ebx, [0x8349c8]
mov dword [esp + 0x204], ebx
lea ebx, [esp + 0x174]
mov dword [esp], ebx
mov ebx, dword [esp + 0x1c8]
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.00448f50
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x1e0], ecx
mov dword [esp + 0x1e4], edx
lea ecx, [0x7739a0]
mov dword [esp + 0x208], ecx
lea edx, [esp + 0x1e0]
mov dword [esp + 0x20c], edx
mov dword [esp + 0x210], ecx
lea edx, [0x8349d0]
mov dword [esp + 0x214], edx
movsd xmm0, qword [esp + 0xe8]
cvttsd2si edx, xmm0
mov dword [esp + 0x78], edx
lea edx, [0x772fa0]
mov dword [esp + 0x218], edx
lea edx, [esp + 0x78]
mov dword [esp + 0x21c], edx
mov dword [esp + 0x220], ecx
lea edx, [0x8349d8]
mov dword [esp + 0x224], edx
lea edx, [esp + 0x1f0]
mov dword [esp], edx
mov dword [esp + 4], 7
mov dword [esp + 8], 7
call fcn.00408350
mov ecx, dword [0xa7d8a8]
mov dword [esp + 0x40], ecx
mov edx, dword [0xa7d8ac]
lea edi, [esp + 0x11c]
xor eax, eax
call fcn.0045ff8a
mov ecx, dword [0xa7d8b0]
mov ebx, dword [0xa7d8b4]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x120], ebx
mov ecx, dword [0xa7d8b8]
mov ebx, dword [0xa7d8bc]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], ebx
mov ecx, dword [0xa7d8c0]
mov ebx, dword [0xa7d8c4]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], ebx
xor ecx, ecx
mov ebx, dword [esp + 0x40]
jmp 0x41910c
sub esi, ebx
lea ecx, [esp + 0x104]
mov dword [esp], ecx
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
mov dword [esp + 0xc], esi
sbb ebp, edx
mov dword [esp + 0x10], ebp
call fcn.0041aaf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1e8], 0
mov dword [esp + 0x1ec], 0
lea edx, [esp + 0x154]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00448f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x1d8], eax
mov dword [esp + 0x1dc], ecx
lea eax, [0x7739a0]
mov dword [esp + 0x1e8], eax
lea ecx, [esp + 0x1d8]
mov dword [esp + 0x1ec], ecx
lea ecx, [esp + 0x1e8]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00408350
mov eax, dword [esp + 0x70]
lea ecx, [eax + 1]
xor eax, eax
mov edx, dword [esp + 0x58]
mov ebx, dword [esp + 0x4c]
cmp ecx, 3
jge 0x4191a2
mov dword [esp + 0x70], ecx
lea ebp, [esp + ecx*8 + 0x11c]
mov esi, dword [ebp]
mov dword [esp + 0x4c], esi
mov ebp, dword [ebp + 4]
mov dword [esp + 0x58], ebp
test ecx, ecx
je 0x41904b
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], edx
mov dword [esp + 0x1e8], 0
mov dword [esp + 0x1ec], 0
lea eax, [0x7739a0]
mov dword [esp + 0x1e8], eax
lea ecx, [0x8349e0]
mov dword [esp + 0x1ec], ecx
lea edx, [esp + 0x1e8]
mov dword [esp], edx
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00408350
mov edx, dword [esp + 0x44]
mov ebx, dword [esp + 0x40]
mov ebp, dword [esp + 0x58]
mov esi, dword [esp + 0x4c]
jmp 0x41904b
mov dword [esp + 0x1e8], 0
mov dword [esp + 0x1ec], 0
lea eax, [0x7739a0]
mov dword [esp + 0x1e8], eax
lea ecx, [0x8349e8]
mov dword [esp + 0x1ec], ecx
lea ecx, [esp + 0x1e8]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00408350
lea edi, [esp + 0x194]
xor eax, eax
call fcn.0045ff86
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x194], ecx
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0x198], ecx
mov ecx, dword [0xa93ab0]
mov edx, dword [0xa93ab4]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x1a0], edx
mov ecx, dword [0xa93ab8]
mov edx, dword [0xa93ac0]
add ecx, edx
mov edx, dword [0xa93abc]
mov ebx, dword [0xa93ac4]
mov dword [esp + 0x1a4], ecx
adc edx, ebx
mov dword [esp + 0x1a8], edx
mov ecx, dword [0xa93ac8]
mov edx, dword [0xa93acc]
mov dword [esp + 0x1ac], ecx
mov dword [esp + 0x1b0], edx
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x1b4], ecx
mov ecx, dword [esp + 0xc4]
mov dword [esp + 0x1b8], ecx
xor ecx, ecx
jmp 0x419353
lea eax, [esp + 0x104]
mov dword [esp], eax
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
mov ecx, dword [esp + 0x50]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x10], ecx
call fcn.0041aaf0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1e8], 0
mov dword [esp + 0x1ec], 0
lea edx, [esp + 0x134]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.00448f50
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x1d0], eax
mov dword [esp + 0x1d4], ecx
lea eax, [0x7739a0]
mov dword [esp + 0x1e8], eax
lea ecx, [esp + 0x1d0]
mov dword [esp + 0x1ec], ecx
lea ecx, [esp + 0x1e8]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00408350
mov eax, dword [esp + 0x6c]
lea ecx, [eax + 1]
xor eax, eax
cmp ecx, 5
jge 0x41943c
mov dword [esp + 0x6c], ecx
lea edx, [esp + ecx*8 + 0x194]
mov ebx, dword [edx]
mov dword [esp + 0x50], ebx
mov edx, dword [edx + 4]
mov dword [esp + 0x54], edx
cmp ecx, 2
jne 0x4193cd
mov dword [esp + 0x1e8], 0
mov dword [esp + 0x1ec], 0
lea eax, [0x7739a0]
mov dword [esp + 0x1e8], eax
lea ecx, [0x8349f0]
mov dword [esp + 0x1ec], ecx
lea edx, [esp + 0x1e8]
mov dword [esp], edx
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00408350
jmp 0x419296
cmp ecx, 3
je 0x419379
test ecx, ecx
je 0x419296
mov dword [esp + 0x1e8], 0
mov dword [esp + 0x1ec], 0
lea eax, [0x7739a0]
mov dword [esp + 0x1e8], eax
lea ecx, [0x8349f8]
mov dword [esp + 0x1ec], ecx
lea edx, [esp + 0x1e8]
mov dword [esp], edx
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00408350
xor eax, eax
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x54]
mov ebx, dword [esp + 0x50]
jmp 0x419296
lea edi, [esp + 0x228]
call fcn.0045ff7a
lea ecx, [0x7739a0]
mov dword [esp + 0x228], ecx
lea edx, [0x834a00]
mov dword [esp + 0x22c], edx
mov edx, dword [0xa7d8dc]
mov ebx, dword [0xa7d8d8]
mov ebp, edx
shl edx, 0xc
shr ebx, 0x14
or edx, ebx
mov dword [esp + 0xe0], edx
shr ebp, 0x14
mov dword [esp + 0xe4], ebp
lea edx, [0x773b60]
mov dword [esp + 0x230], edx
lea ebx, [esp + 0xe0]
mov dword [esp + 0x234], ebx
mov dword [esp + 0x238], ecx
lea ebx, [0x834a08]
mov dword [esp + 0x23c], ebx
mov ebx, dword [0xa7d8e4]
mov ebp, dword [0xa7d8e0]
mov esi, ebx
shl ebx, 0xc
shr ebp, 0x14
or ebx, ebp
mov dword [esp + 0xd8], ebx
shr esi, 0x14
mov dword [esp + 0xdc], esi
mov dword [esp + 0x240], edx
lea ebx, [esp + 0xd8]
mov dword [esp + 0x244], ebx
mov dword [esp + 0x248], ecx
lea ebx, [0x834a10]
mov dword [esp + 0x24c], ebx
mov ebx, dword [0xa7d8ec]
mov ebp, dword [0xa7d8e8]
mov esi, ebx
shl ebx, 0xc
shr ebp, 0x14
or ebx, ebp
mov dword [esp + 0xd0], ebx
shr esi, 0x14
mov dword [esp + 0xd4], esi
mov dword [esp + 0x250], edx
lea ebx, [esp + 0xd0]
mov dword [esp + 0x254], ebx
mov dword [esp + 0x258], ecx
lea ebx, [0x834a18]
mov dword [esp + 0x25c], ebx
mov ebx, dword [0xa7d8f4]
mov ebp, dword [0xa7d8f0]
mov esi, ebx
shl ebx, 0xc
shr ebp, 0x14
or ebx, ebp
mov dword [esp + 0xf0], ebx
shr esi, 0x14
mov dword [esp + 0xf4], esi
mov dword [esp + 0x260], edx
lea edx, [esp + 0xf0]
mov dword [esp + 0x264], edx
mov dword [esp + 0x268], ecx
lea edx, [0x834a20]
mov dword [esp + 0x26c], edx
mov edx, dword [0xa7d8a4]
mov dword [esp + 0xcc], edx
lea edx, [0x773020]
mov dword [esp + 0x270], edx
lea edx, [esp + 0xcc]
mov dword [esp + 0x274], edx
mov dword [esp + 0x278], ecx
lea edx, [0x834a28]
mov dword [esp + 0x27c], edx
lea edx, [esp + 0x228]
mov dword [esp], edx
mov dword [esp + 4], 0xb
mov dword [esp + 8], 0xb
call fcn.00408350
movzx ecx, byte [0xa7d874]
test cl, cl
jne 0x41970c
mov dword [esp + 0x1e8], 0
mov dword [esp + 0x1ec], 0
lea eax, [0x7739a0]
mov dword [esp + 0x1e8], eax
lea eax, [0x834a38]
mov dword [esp + 0x1ec], eax
lea eax, [esp + 0x1e8]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00408350
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
nop
movzx ecx, byte [eax + 0x87]
lea edx, [ecx - 1]
mov byte [eax + 0x87], dl
cmp cl, 1
je 0x4196f7
lea eax, [0x9cc1d4]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00443bd0
nop
lea eax, [0x9cc1b4]
mov dword [esp], eax
mov byte [esp + 4], 0
mov dword [esp + 8], 0
call fcn.00443bd0
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x1bc]
mov edx, dword [ecx + 0x78]
lea ebx, [edx - 1]
mov dword [ecx + 0x78], ebx
cmp edx, 1
jne 0x4196f0
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x4196f0
mov dword [eax + 8], 0xfffffade
add esp, 0x280
ret
nop
nop
lea eax, [0xa932bc]
mov dword [esp], eax
call fcn.00409e90
jmp 0x419687
mov dword [esp + 0x1e8], 0
mov dword [esp + 0x1ec], 0
lea eax, [0x7739a0]
mov dword [esp + 0x1e8], eax
lea ecx, [0x834a30]
mov dword [esp + 0x1ec], ecx
lea ecx, [esp + 0x1e8]
mov dword [esp], ecx
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.00408350
jmp 0x419612
mov edi, dword [esp + 0x1cc]
xor eax, eax
call fcn.0045fce0
jmp 0x4188b3
mov byte [esp], 8
mov dword [esp + 4], 0xffffffff
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.0044eb00
jmp 0x418890
lea eax, [0x7c7399]
call fcn.0045fce0
jmp 0x4187a2
movzx eax, byte [0xa93595]
jmp 0x418727
cmp eax, 2
sete al
jmp 0x418714
lea eax, [0x7d16cb]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.004333f0
nop
call fcn.0045e790
jmp fcn.004186b0