Function at 0x4189f0
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x45a716
mov eax, dword fs:[0]
push eax
sub esp, 0x1b8
mov eax, dword [0x46f1b0]
xor eax, esp
mov dword [esp + 0x1b0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x46f1b0]
xor eax, esp
push eax
lea eax, [esp + 0x1cc]
mov dword fs:[0], eax
mov eax, dword [esp + 0x1dc]
push 4
mov esi, ecx
push 0x2eff
push 0x45f99c
mov dword [esp + 0x50], esi
mov dword [esp + 0x78], eax
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x9c]
call fcn.00402830
mov dword [esp + 0x1d4], 0
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x74], eax
mov byte [esp + 0x1d4], 1
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x70], eax
push 0x11
push 0x2601
mov byte [esp + 0x1dc], 2
inc dword [esi + 0x84]
push 0x45ebd4
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x90]
call fcn.00402830
lea ecx, [esp + 0x8c]
push ecx
lea edx, [esp + 0x58]
push edx
mov byte [esp + 0x1dc], 3
call fcn.004292d5
add esp, 8
mov byte [esp + 0x1d4], 5
mov eax, dword [esp + 0x8c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418b15
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x54]
cmp dword [ecx - 0xc], 0
je 0x41a9d4
lea edx, [esp + 0x30]
xor ebp, ebp
push edx
mov dword [esp + 0x30], ebp
call fcn.00429d2d
lea eax, [esp + 0x30]
add esp, 4
push eax
lea eax, [esp + 0x34]
call fcn.004337f5
add esp, 4
test al, al
jne 0x418b4f
xor esi, esi
jmp 0x418b53
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418b73
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp esi, ebp
je 0x418bd3
lea ecx, [esp + 0x34]
push ecx
mov dword [esp + 0x30], ebp
call fcn.00429d2d
lea edx, [esp + 0x30]
add esp, 4
push edx
lea eax, [esp + 0x38]
call fcn.004337f5
add esp, 4
test al, al
jne 0x418ba1
xor esi, esi
jmp 0x418ba5
mov esi, dword [esp + 0x2c]
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418bc5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test esi, 0x100
je 0x41a9d4
xor ebp, ebp
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x40], eax
mov byte [esp + 0x1d4], 6
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x34], eax
mov byte [esp + 0x1d4], 7
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x50], eax
mov byte [esp + 0x1d4], 8
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0xcc], eax
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0x1d8], 9
call fcn.0042945a
add esp, 4
push eax
lea edx, [esp + 0x30]
push edx
mov byte [esp + 0x1dc], 0xa
call fcn.004277c1
mov esi, eax
lea eax, [esp + 0x40]
push eax
mov byte [esp + 0x1e0], 0xb
call fcn.004294fa
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
push ecx
mov byte [esp + 0x1dc], 0xc
call fcn.004277c1
mov edi, eax
lea edx, [esp + 0x2c]
push edx
mov byte [esp + 0x1e0], 0xd
call fcn.0042a52e
add esp, 0xc
push eax
lea eax, [esp + 0x1c]
mov bl, 0xe
push eax
mov byte [esp + 0x1dc], bl
call fcn.004277c1
add esp, 8
mov byte [esp + 0x1d4], 0xf
mov ecx, dword [esp + 0x44]
mov edx, dword [ecx + 0x88]
mov ecx, dword [ecx + 0x84]
push edx
mov edx, dword [esi]
push ecx
mov ecx, dword [edi]
push edx
push ecx
mov edx, dword [eax]
mov eax, dword [esp + 0xa8]
push edx
push eax
push 0x94
push 0x940
push 0x45f9a8
call fcn.00433314
add esp, 0xc
push eax
lea edi, [esp + 0x6c]
call fcn.004056f0
mov byte [esp + 0x1f0], bl
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
add esp, 0x1c
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418d40
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0xd
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418d68
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0xc
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418d90
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0xb
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418db8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0xa
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418de0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 9
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x418e08
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x50]
push ecx
lea ecx, [esp + 0x44]
call fcn.00402d80
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x30], eax
mov byte [esp + 0x1d4], 0x10
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x48], eax
mov byte [esp + 0x1d4], 0x11
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x7c]
push ecx
mov byte [esp + 0x1d8], 0x12
call fcn.0042a575
add esp, 4
push 2
push 0xf5b
push 0x45ed98
mov byte [esp + 0x1e0], 0x13
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
call fcn.00402830
push 7
push 0x11b6
push 0x45ea58
mov byte [esp + 0x1e0], 0x14
call fcn.00433314
lea edx, [esp + 0xbc]
add esp, 0xc
push edx
lea ecx, [esp + 0x40]
mov edx, eax
call fcn.0040e6b0
add esp, 4
mov esi, eax
push 0xa
push 0x1766
push 0x45ea60
mov byte [esp + 0x1e0], 0x15
call fcn.00433314
add esp, 0xc
push eax
lea eax, [esp + 0xe8]
push eax
mov ecx, esi
call fcn.0040a060
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0xb4]
push edx
mov ecx, eax
mov byte [esp + 0x1e4], 0x16
call fcn.00409fa0
mov esi, eax
push 6
mov byte [esp + 0x1e8], 0x17
push 0x55a
push 0x45fa4c
call fcn.00433314
add esp, 0x1c
push eax
lea eax, [esp + 0xcc]
push eax
mov ecx, esi
call fcn.0040a060
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0xe8]
push edx
mov ecx, eax
mov byte [esp + 0x1e4], 0x18
call fcn.00409fa0
mov esi, eax
push 0xa
push 0x2124
push 0x45ea6c
mov byte [esp + 0x1f0], 0x19
call fcn.00433314
add esp, 0x1c
push eax
lea eax, [esp + 0xd8]
push eax
mov ecx, esi
call fcn.0040a060
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0xd0]
push edx
mov ecx, eax
mov byte [esp + 0x1e4], 0x1a
call fcn.00409fa0
mov esi, eax
push 4
push 0x349
push 0x45ea90
mov byte [esp + 0x1f0], 0x1b
call fcn.00433314
add esp, 0x1c
push eax
lea eax, [esp + 0xc0]
push eax
mov ecx, esi
call fcn.0040a060
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0xa8]
push edx
mov ecx, eax
mov byte [esp + 0x1e4], 0x1c
call fcn.00409fa0
mov esi, eax
push 5
push 0x1ef1
push 0x45fa44
mov byte [esp + 0x1f0], 0x1d
call fcn.00433314
add esp, 0x1c
push eax
lea eax, [esp + 0xbc]
push eax
mov ecx, esi
call fcn.0040a060
lea ecx, [esp + 0x44]
push ecx
lea edx, [esp + 0xc0]
push edx
mov ecx, eax
mov byte [esp + 0x1e4], 0x1e
call fcn.00409fa0
mov esi, eax
push 3
push 0x2521
push 0x45fa40
mov byte [esp + 0x1f0], 0x1f
call fcn.00433314
add esp, 0x1c
push eax
lea eax, [esp + 0x94]
push eax
mov ecx, esi
call fcn.0040a060
add esp, 8
mov byte [esp + 0x1d4], 0x21
mov eax, dword [esp + 0xb4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4190a6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x22
mov eax, dword [esp + 0xb8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4190d1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x23
mov eax, dword [esp + 0x9c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4190fc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x24
mov eax, dword [esp + 0xbc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419127
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x25
mov eax, dword [esp + 0xc4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419152
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x26
mov eax, dword [esp + 0xd4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41917d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x27
mov eax, dword [esp + 0xdc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4191a8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x28
mov eax, dword [esp + 0xc8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4191d3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x29
mov eax, dword [esp + 0xa8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4191fe
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x2a
mov eax, dword [esp + 0xe4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419229
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x2b
mov eax, dword [esp + 0xb0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419254
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x5c], eax
mov byte [esp + 0x1d4], 0x2c
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x60], eax
mov byte [esp + 0x1d4], 0x2d
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x68], eax
push 2
push 0x30d7
mov bl, 0x2e
push 0x45ed9c
mov byte [esp + 0x1e0], bl
call fcn.00433314
add esp, 0xc
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x60]
mov esi, eax
call fcn.00402d80
mov edx, dword [esp + 0x5c]
cmp dword [edx - 0xc], ebp
jne 0x419304
cmp esi, ebp
jne 0x4192e7
xor eax, eax
jmp 0x4192f9
mov eax, esi
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4192f0
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x64]
call fcn.00402b60
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0xd4]
push ecx
lea ecx, [esp + 0x98]
call fcn.00409fa0
add esp, 8
push eax
lea ecx, [esp + 0x64]
mov byte [esp + 0x1d8], 0x2f
call fcn.00402d80
mov byte [esp + 0x1d4], bl
mov eax, dword [esp + 0xd0]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41935c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x64], ebp
mov byte [esp + 0x1d4], 0x30
cmp dword [esp + 0x84], 0
setge al
test al, al
je 0x4194c9
jmp 0x419380
mov edx, dword [esp + 0x7c]
lea ecx, [esp + 0x84]
push ecx
push edx
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x8c]
push ecx
call fcn.00409dc0
mov byte [esp + 0x1d4], 0x31
mov eax, dword [eax]
mov ebx, dword [esp + 0x88]
lea esi, [eax - 0x10]
add ebx, 0xfffffff0
cmp esi, ebx
je 0x419456
cmp dword [ebx + 0xc], 0
lea ebp, [ebx + 0xc]
jl 0x419445
mov ecx, dword [esi]
cmp ecx, dword [ebx]
jne 0x419445
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x4193ee
cmp eax, dword [esi]
jne 0x4193ee
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x419422
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x419d01
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
inc eax
push eax
add esi, 0x10
push esi
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.0043f4de
add esp, 0x10
or edx, 0xffffffff
lock xadd dword [ebp], edx
dec edx
test edx, edx
jg 0x419439
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebx
call edx
add edi, 0x10
mov dword [esp + 0x88], edi
jmp 0x419456
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x90]
call fcn.00402b60
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41947e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str._t__r_n
lea eax, [esp + 0x8c]
call fcn.0041f6d0
mov ebx, eax
mov eax, str._t__r_n
call fcn.004282b0
mov ecx, dword [esp + 0x84]
test ecx, ecx
setg al
test al, al
je 0x4194bc
mov edx, dword [esp + 0x88]
cmp dword [edx - 0xc], 0
jg 0x419a2e
test ecx, ecx
setge al
test al, al
jne 0x419380
lea edx, [esp + 0x28]
xor esi, esi
push edx
mov dword [esp + 0x3c], esi
call fcn.00429d2d
lea eax, [esp + 0x3c]
add esp, 4
push eax
lea eax, [esp + 0x2c]
call fcn.004337f5
add esp, 4
test al, al
je 0x4194f5
mov esi, dword [esp + 0x38]
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419515
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test esi, 0x1000
je 0x4195d4
push 0x19
push 0x1374
push 0x45fa68
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x38]
call fcn.0040a060
mov esi, eax
push 3
push 0x1c28
mov bl, 0x39
push 0x45fa54
mov byte [esp + 0x1e8], bl
call fcn.00433314
add esp, 0x14
push eax
lea edx, [esp + 0x5c]
push edx
mov ecx, esi
call fcn.0040a060
add esp, 8
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x1d8], 0x3a
call fcn.00402d80
mov byte [esp + 0x1d4], bl
mov eax, dword [esp + 0x58]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4195ac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4195d4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0xa
push 0x2124
push 0x45ea6c
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
call fcn.00402830
push 0xa
push 0x1766
push 0x45ea60
mov byte [esp + 0x1e0], 0x3b
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
call fcn.00402830
push 7
push 0x11b6
push 0x45ea58
mov byte [esp + 0x1e0], 0x3c
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x3c]
call fcn.00402830
push 4
push 0x349
push 0x45ea90
mov byte [esp + 0x1e0], 0x3d
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x2c]
call fcn.00402830
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x1d8], 0x3e
call fcn.00429c64
add esp, 4
push eax
lea edx, [esp + 0x50]
push edx
mov byte [esp + 0x1dc], 0x3f
call fcn.004277c1
mov esi, eax
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x84]
push ecx
mov byte [esp + 0x1e4], 0x40
call fcn.004292d5
push eax
lea edx, [esp + 0xc0]
push edx
mov byte [esp + 0x1ec], 0x41
call fcn.004277c1
mov edi, eax
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0xc0]
push ecx
mov byte [esp + 0x1f4], 0x42
call fcn.004292d5
push eax
lea edx, [esp + 0xc4]
push edx
mov byte [esp + 0x1fc], 0x43
call fcn.004277c1
mov ebx, eax
mov byte [esp + 0x1fc], 0x44
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x104]
push ecx
call fcn.004292d5
push eax
lea edx, [esp + 0xf4]
push edx
mov byte [esp + 0x20c], 0x45
call fcn.004277c1
mov ebp, eax
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x11c]
push ecx
mov byte [esp + 0x214], 0x46
call fcn.004292d5
add esp, 0x40
push eax
lea edx, [esp + 0x5c]
push edx
mov byte [esp + 0x1dc], 0x47
call fcn.004277c1
add esp, 8
mov byte [esp + 0x1d4], 0x48
mov ecx, dword [esp + 0x30]
mov edx, dword [esi]
push ecx
mov ecx, dword [edi]
push edx
mov edx, dword [ebx]
push ecx
mov ecx, dword [ebp]
push edx
mov edx, dword [eax]
mov eax, dword [esp + 0x54]
push ecx
mov ecx, dword [eax + 0x20]
push edx
push ecx
push 0xc2
push 0x34d8
push 0x45fa88
call fcn.00433314
add esp, 0xc
push eax
lea edi, [esp + 0x70]
call fcn.004056f0
mov byte [esp + 0x1f4], 0x47
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
add esp, 0x20
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4197c8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x46
mov eax, dword [esp + 0xe0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4197f3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x45
mov eax, dword [esp + 0xc0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41981e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x44
mov eax, dword [esp + 0xd8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419849
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x43
mov eax, dword [esp + 0xa0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419874
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x42
mov eax, dword [esp + 0xa4]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41989f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x41
mov eax, dword [esp + 0xac]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4198ca
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x40
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4198f2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x3f
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41991a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x3e
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419942
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x3d
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41996a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x3c
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419992
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x3b
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4199ba
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4199e2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x50]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.00402a40
mov ebp, dword [esp + 0x44]
lea esi, [ebp + 0x7c]
mov ecx, esi
call fcn.00402b00
push 0x86
push 0x32bc
push 0x45fb50
call fcn.00433314
add esp, 0xc
lea edi, [ebp + 0x80]
test eax, eax
jne 0x419d06
xor edx, edx
jmp 0x419d19
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x80]
call fcn.00433f95
mov byte [esp + 0x1d4], 0x32
mov ecx, dword [eax]
mov esi, dword [esp + 0x48]
lea eax, [ecx - 0x10]
add esi, 0xfffffff0
cmp eax, esi
je 0x419a9e
cmp dword [esi + 0xc], 0
lea edi, [esi + 0xc]
jl 0x419a90
mov edx, dword [eax]
cmp edx, dword [esi]
jne 0x419a90
push eax
call fcn.00403010
mov ebx, eax
add esp, 4
or eax, 0xffffffff
lock xadd dword [edi], eax
dec eax
test eax, eax
jg 0x419a87
mov ecx, dword [esi]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
push esi
call eax
add ebx, 0x10
mov dword [esp + 0x48], ebx
jmp 0x419a9e
mov eax, dword [ecx - 0xc]
push eax
push ecx
lea ecx, [esp + 0x50]
call fcn.00402b60
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419ac6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1f], 0
mov dword [esp + 0x64], 0
mov edx, dword [esp + 0x5c]
lea ecx, [esp + 0x64]
push ecx
push edx
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x6c]
push ecx
call fcn.00409dc0
mov byte [esp + 0x1d4], 0x33
mov eax, dword [eax]
mov ebx, dword [esp + 0x68]
lea esi, [eax - 0x10]
add ebx, 0xfffffff0
cmp esi, ebx
je 0x419b9a
cmp dword [ebx + 0xc], 0
lea ebp, [ebx + 0xc]
jl 0x419b8c
mov ecx, dword [esi]
cmp ecx, dword [ebx]
jne 0x419b8c
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x419b38
cmp eax, dword [esi]
jne 0x419b38
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x419b6c
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 1
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
je 0x419d01
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
inc eax
push eax
add esi, 0x10
push esi
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.0043f4de
add esp, 0x10
or edx, 0xffffffff
lock xadd dword [ebp], edx
dec edx
test edx, edx
jg 0x419b83
mov ecx, dword [ebx]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push ebx
call edx
add edi, 0x10
mov dword [esp + 0x68], edi
jmp 0x419b9a
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x70]
call fcn.00402b60
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419bc2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push str._t__r_n
lea eax, [esp + 0x6c]
call fcn.0041f6d0
mov ebx, eax
mov eax, str._t__r_n
call fcn.004282b0
cmp dword [esp + 0x64], 0
setg al
test al, al
je 0x419c0b
mov ecx, dword [esp + 0x68]
mov edx, dword [esp + 0x48]
push ecx
push edx
call fcn.0043eeb7
add esp, 8
test eax, eax
sete al
mov byte [esp + 0x1f], al
test al, al
je 0x419ad3
cmp byte [esp + 0x1f], 0
mov dword [esp + 0x64], 0
jne 0x419368
lea eax, [esp + 0x48]
push eax
lea ecx, [esp + 0x3c]
push ecx
call fcn.004292d5
add esp, 8
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x1d8], 0x37
call fcn.00402d80
mov bl, 0x30
mov byte [esp + 0x1d4], bl
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x419c6b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x5c]
push edx
call fcn.004277c1
mov esi, eax
push 3
push 0x1c28
push 0x45fa54
mov byte [esp + 0x1e8], 0x38
call fcn.00433314
mov ecx, dword [esi]
add esp, 0x14
push eax
mov eax, dword [esp + 0x4c]
push eax
push ecx
push eax
push 0xe
push 0x1051
push 0x45fa58
call fcn.00433314
add esp, 0xc
push eax
lea edi, [esp + 0x64]
call fcn.004056f0
mov byte [esp + 0x1e8], bl
mov eax, dword [esp + 0x6c]
add eax, 0xfffffff0
add esp, 0x14
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x419cea
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x50]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x38]
call fcn.00402a40
jmp 0x419368
call fcn.004031c0
mov edx, eax
lea ebx, [edx + 1]
jmp 0x419d10
mov cl, byte [edx]
inc edx
test cl, cl
jne 0x419d10
sub edx, ebx
push edx
push eax
mov ecx, edi
call fcn.00402b60
push 0
push 1
lea ecx, [ebp + 0x48]
push ecx
push ebp
mov ebx, 0x4187c0
call fcn.0041ab20
push 0x11
push 0xf2f
push 0x45fbec
call fcn.00433314
lea edx, [esp + 0x58]
add esp, 0xc
push edx
mov ecx, esi
mov edx, eax
call fcn.0040e6b0
add esp, 4
mov esi, eax
push 0x12
push 0x1478
mov bl, 0x49
push 0x45fbd8
mov byte [esp + 0x1e0], bl
call fcn.00433314
add esp, 0xc
push eax
lea eax, [esp + 0x24]
push eax
mov ecx, esi
call fcn.0040a060
add esp, 8
mov byte [esp + 0x1d4], 0x4a
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.00402a40
mov byte [esp + 0x1d4], bl
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419dc8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419df0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x1f
push 0x114a
push 0x45fc00
call fcn.00433314
add esp, 0xc
test eax, eax
jne 0x419e0c
xor ecx, ecx
jmp 0x419e1a
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x419e11
sub ecx, esi
push ecx
push eax
lea ecx, [esp + 0x48]
call fcn.00402a40
lea ecx, [esp + 0x20]
push ecx
call fcn.00429d2d
mov edx, dword [eax]
mov eax, dword [esp + 0x24]
add esp, 4
cmp dword [edx - 0xc], 0
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419e5b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x419ffc
push 0x45e58a
lea ecx, [esp + 0x1c]
call fcn.00402830
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0xec]
push edx
mov byte [esp + 0x1dc], 0x4b
call fcn.00427251
mov byte [esp + 0x1d4], 0x4d
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419eb3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x40]
push ecx
lea edx, [esp + 0xec]
push edx
call fcn.00427c0c
test al, al
jne 0x419ed5
lea esi, [esp + 0xe8]
call fcn.0042730e
push 0
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0xf0]
call fcn.00427599
push 0x1d
push 0x2c1f
push 0x45fc20
mov byte [esp + 0x1e0], 0x4e
call fcn.00433314
lea ecx, [esp + 0x58]
add esp, 0xc
push ecx
lea ecx, [esp + 0x2c]
mov edx, eax
call fcn.0040e6b0
add esp, 4
mov esi, eax
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x1d8], 0x4f
call fcn.00429d2d
mov eax, dword [eax]
add esp, 4
cmp dword [eax - 0xc], 0
mov eax, dword [esp + 0x20]
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419f57
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x419f98
lea ecx, [esp + 0x24]
push 0x45ef28
push ecx
mov ecx, esi
call fcn.0040a060
add esp, 8
lea eax, [esp + 0x24]
call fcn.00436a46
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x419f98
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x4e
mov eax, dword [esp + 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419fc0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x4d
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x419fe8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0xe8]
mov byte [esp + 0x1d4], 0x30
call fcn.004272cc
push 0x41
push 0x2af3
push str.K_a__QNB___P
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
call fcn.00402830
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x44]
push edx
mov byte [esp + 0x1dc], 0x50
call fcn.0043e31c
mov byte [esp + 0x1dc], 0x30
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a05c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 8
push 0x8c0
push 0x45fc40
call fcn.00433314
lea ecx, [esp + 0xa0]
add esp, 0xc
push ecx
lea ecx, [esp + 0x44]
mov edx, eax
call fcn.0040e6b0
add esp, 4
lea edx, [esp + 0x94]
push edx
lea eax, [esp + 0x58]
push eax
lea ecx, [esp + 0x11c]
push ecx
mov byte [esp + 0x1e0], 0x51
call fcn.0043a684
mov byte [esp + 0x1d4], 0x52
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x44], eax
mov byte [esp + 0x1d4], 0x53
lea eax, [esp + 0x18]
mov ebx, 5
lea ecx, [esp + 0x114]
mov dword [esp + 0x18], 0
call fcn.0043ada8
mov byte [esp + 0x1f], al
test al, al
je 0x41aaa4
mov eax, dword [esp + 0x18]
test eax, eax
jbe 0x41a19c
push eax
push 0x2d
push 0x2b8b
push 0x45fc4c
call fcn.00433314
add esp, 0xc
push eax
lea edi, [esp + 0x4c]
call fcn.004056f0
lea ecx, [esp + 0x28]
push ecx
call fcn.00429d2d
mov edx, dword [eax]
mov eax, dword [esp + 0x2c]
add esp, 0xc
cmp dword [edx - 0xc], 0
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a159
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x41a19c
lea ecx, [esp + 0x18]
push 0x45ef28
push ecx
lea ecx, [esp + 0x4c]
call fcn.0040a060
add esp, 8
lea eax, [esp + 0x18]
call fcn.00436a46
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a19c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edx, dword [0x471864]
mov eax, dword [edx + 0xc]
mov ecx, 0x471864
call eax
add eax, 0x10
mov dword [esp + 0x78], eax
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x118]
mov byte [esp + 0x1d8], 0x54
call fcn.0043ae2a
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x1d8], 0x55
call fcn.00402d80
mov byte [esp + 0x1d4], 0x54
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a206
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x34]
cmp dword [ecx - 0xc], 0
jne 0x41a35d
inc dword [ebp + 0x90]
push 0x2d
push 0x2ce1
push 0x45fc7c
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
call fcn.00402830
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x1d8], 0x56
call fcn.00429d2d
mov eax, dword [eax]
add esp, 4
cmp dword [eax - 0xc], 0
mov eax, dword [esp + 0x20]
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a276
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x41a2b9
lea ecx, [esp + 0x18]
push 0x45ef28
push ecx
lea ecx, [esp + 0x2c]
call fcn.0040a060
add esp, 8
lea eax, [esp + 0x18]
call fcn.00436a46
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a2b9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x54
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a2e1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0xf
push 0x240c
push 0x45fcac
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
call fcn.00402830
mov edi, dword [esp + 0x6c]
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x1d8], 0x57
mov eax, dword [ebp + 0x88]
mov ecx, dword [ebp + 0x84]
lea edx, [esp + 0x58]
push edx
push eax
push ecx
call fcn.0042c03b
mov byte [esp + 0x1e4], 0x54
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
add esp, 0x10
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a353
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1f], 0
jmp 0x41a6d6
push 0x41
push 0x2af3
push str.K_a__QNB___P
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x1c]
call fcn.00402830
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x38]
push edx
mov byte [esp + 0x1dc], 0x58
call fcn.0043e3e5
mov byte [esp + 0x1dc], 0x54
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
add esp, 8
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a3bd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0x1c
push 0x212e
push str.MF5_
call fcn.00433314
lea ecx, [esp + 0x58]
add esp, 0xc
push ecx
lea ecx, [esp + 0x38]
mov edx, eax
call fcn.0040e6b0
add esp, 4
mov esi, eax
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x1d8], 0x59
call fcn.00429d2d
mov eax, dword [eax]
add esp, 4
cmp dword [eax - 0xc], 0
mov eax, dword [esp + 0x20]
setne bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a424
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test bl, bl
je 0x41a465
lea ecx, [esp + 0x18]
push 0x45ef28
push ecx
mov ecx, esi
call fcn.0040a060
add esp, 8
lea eax, [esp + 0x18]
call fcn.00436a46
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a465
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1d4], 0x54
call fcn.004028e0
push 0x45e58a
lea ecx, [esp + 0x1c]
call fcn.00402830
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0xec]
push edx
mov byte [esp + 0x1dc], 0x5a
call fcn.00427251
mov bl, 0x5c
lea ecx, [esp + 0x18]
mov byte [esp + 0x1d4], bl
call fcn.004028e0
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0xec]
push ecx
call fcn.00427c0c
test al, al
jne 0x41a4d2
lea esi, [esp + 0xe8]
call fcn.0042730e
mov edx, dword [esp + 0x10c]
cmp dword [edx - 0xc], 0
jg 0x41a542
inc dword [ebp + 0x90]
push 0xf
push 0x24df
push 0x45fcdc
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
call fcn.00402830
mov edi, dword [esp + 0x6c]
lea eax, [esp + 0x24]
push eax
mov byte [esp + 0x1d8], 0x5d
mov edx, dword [ebp + 0x88]
mov eax, dword [ebp + 0x84]
lea ecx, [esp + 0x58]
push ecx
push edx
push eax
call fcn.0042c03b
add esp, 0x10
lea ecx, [esp + 0x24]
call fcn.004028e0
mov byte [esp + 0x1f], 0
jmp 0x41a6b5
push 7
push 0x5f4
push 0x45fcec
call fcn.00433314
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00402830
lea ecx, [esp + 0xec]
call fcn.00427426
test eax, eax
je 0x41a5a8
mov ecx, dword [eax + 0x24]
cmp dword [ecx - 0xc], 0
jle 0x41a5a8
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00428134
push eax
lea ecx, [esp + 0x78]
mov byte [esp + 0x1d8], 0x5e
call fcn.00402900
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d4], bl
call fcn.004028e0
push 0xb
push 0xa30
push 0x45fcf4
call fcn.00433314
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00402830
lea ecx, [esp + 0xec]
call fcn.00427426
test eax, eax
je 0x41a60e
mov ecx, dword [eax + 0x24]
cmp dword [ecx - 0xc], 0
jle 0x41a60e
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00428134
push eax
lea ecx, [esp + 0x74]
mov byte [esp + 0x1d8], 0x5f
call fcn.00402900
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d4], bl
call fcn.004028e0
push 0x13
push 0x1936
push 0x45ebc0
call fcn.00433314
add esp, 8
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00402830
lea ecx, [esp + 0xec]
call fcn.00427426
test eax, eax
je 0x41a6b5
mov ecx, dword [eax + 0x24]
cmp dword [ecx - 0xc], 0
jle 0x41a6b5
lea edx, [esp + 0x20]
push edx
push eax
call fcn.00428134
lea esi, [ebp + 0x94]
push eax
mov ecx, esi
mov byte [esp + 0x1d8], 0x60
call fcn.00402900
lea ecx, [esp + 0x20]
mov byte [esp + 0x1d4], bl
call fcn.004028e0
push 0x13
push 0x1936
push 0x45ebc0
call fcn.00433314
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
call fcn.00402830
lea eax, [esp + 0x24]
push esi
push eax
mov byte [esp + 0x1dc], 0x61
call fcn.00428d0c
add esp, 8
lea ecx, [esp + 0x24]
call fcn.004028e0
lea ecx, [esp + 0xe8]
mov byte [esp + 0x1d4], 0x54
call fcn.004272cc
cmp byte [esp + 0x1f], 0
je 0x41a6d6
inc dword [ebp + 0x8c]
mov byte [esp + 0x1d4], 0x53
mov eax, dword [esp + 0x78]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a6fe
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
cmp byte [esp + 0x1f], 0
je 0x41a729
mov eax, dword [ebp + 0x88]
mov edi, dword [esp + 0x6c]
lea ecx, [esp + 0x70]
push ecx
mov ecx, dword [ebp + 0x84]
lea edx, [esp + 0x78]
push edx
push eax
push ecx
call fcn.0042bef5
add esp, 0x10
mov byte [esp + 0x1d4], 0x52
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a751
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [esp + 0x114]
mov byte [esp + 0x1d4], 0x51
call fcn.0043a734
mov byte [esp + 0x1d4], 0x30
mov eax, dword [esp + 0x94]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a790
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x2b
mov eax, dword [esp + 0x68]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a7b8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x60]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a7d8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x5c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a7f8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x14
mov eax, dword [esp + 0x90]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a823
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x13
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a84b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x12
mov eax, dword [esp + 0x88]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a876
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x80]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a899
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x7c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a8b9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x11
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a8e1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0x10
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a909
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 9
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a931
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 8
mov eax, dword [esp + 0xcc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a95c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 7
mov eax, dword [esp + 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a984
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 6
mov eax, dword [esp + 0x34]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a9ac
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 5
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a9d4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 2
mov eax, dword [esp + 0x54]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a9fc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 1
mov eax, dword [esp + 0x70]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41aa24
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x1d4], 0
mov eax, dword [esp + 0x74]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41aa4c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x1d4], 0xffffffff
mov eax, dword [esp + 0x98]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41aa7a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x1cc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x1b0]
xor ecx, esp
call fcn.0043eaba
add esp, 0x1c4
ret 4
inc dword [ebp + 0x90]
lea esi, [esp + 0x20]
lea eax, [esp + 0x114]
call fcn.00415db0
mov edi, dword [esp + 0x6c]
push eax
mov byte [esp + 0x1d8], 0x62
mov edx, dword [ebp + 0x88]
mov eax, dword [ebp + 0x84]
lea ecx, [esp + 0x58]
push ecx
push edx
push eax
call fcn.0042c03b
mov byte [esp + 0x1e4], 0x53
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
add esp, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41a729
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x41a729