Function at 0x416650
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x12c]
cmp eax, dword [ecx + 8]
jbe 0x417495
sub esp, 0x1ac
lea eax, [0xc6ee7c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.00401f80
mov byte [0xc6ed9a], 0
mov dword [esp], 2
call fcn.00414530
mov eax, dword [0xc72890]
mov ecx, dword [0xc72894]
mov dword [0xc5e12c], eax
mov dword [0xc5e130], ecx
call fcn.0044d580
mov eax, dword [esp]
mov ecx, dword [esp + 4]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], ecx
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x74]
inc edx
mov dword [ecx + 0x74], edx
mov ecx, dword [eax + 0x18]
mov dword [esp + 0x188], ecx
test byte [eax], al
mov dword [ecx + 0x70], 5
mov eax, dword [0xc6f140]
lea edi, [ecx + 0x6c]
mov dword [esp + 0x194], edi
test eax, eax
jne 0x41746d
lea eax, [0x897c12]
mov dword [ecx + 0x6c], eax
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov dword [esp + 0x190], eax
mov ecx, dword [eax + 0x18]
mov byte [ecx + 0x99], 2
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x4c]
mov dword [esp + 0x18c], ecx
mov dword [esp], ecx
mov dword [esp + 4], 2
mov dword [esp + 8], 4
call fcn.0042adf0
mov eax, dword [esp + 0x18c]
mov byte [eax + 0x64], 6
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a8], 0
lea ecx, [0x448e20]
mov dword [esp + 0x1a4], ecx
lea ecx, [esp + 0xc0]
mov dword [esp + 0x1a8], ecx
lea edx, [esp + 0x1a4]
mov dword [esp], edx
call fcn.0044afe0
mov dword [esp + 0x19c], 0
mov dword [esp + 0x1a0], 0
lea eax, [0x448e60]
mov dword [esp + 0x19c], eax
lea eax, [esp + 0xc0]
mov dword [esp + 0x1a0], eax
lea eax, [esp + 0x19c]
mov dword [esp], eax
call fcn.0044afe0
mov eax, dword [esp + 0x190]
mov eax, dword [eax + 0x18]
mov byte [eax + 0x99], 0
mov eax, dword [esp + 0x18c]
mov dword [esp], eax
mov dword [esp + 4], 4
mov dword [esp + 8], 2
call fcn.0042adf0
movzx eax, byte [0xc66c68]
test al, al
jne 0x417463
mov ecx, dword [esp + 0x188]
mov dword [ecx + 0x70], 0
mov edx, dword [0xc6f140]
test edx, edx
jne 0x417450
mov dword [ecx + 0x6c], 0
mov eax, dword [0xc6ee84]
test eax, eax
jne 0x41747d
movsd xmm0, qword [esp + 0x1b0]
movsd qword [esp], xmm0
call fcn.00415620
call fcn.0044d580
mov eax, dword [esp]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x58], ecx
call fcn.0044d5d0
mov eax, dword [esp]
mov ecx, eax
mov eax, 0x3b9aca00
mul ecx
mov dword [esp + 0x84], edx
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x40], ecx
add eax, ecx
mov dword [esp + 0x24], eax
mov ebp, dword [0xc5e11c]
mov esi, dword [esp + 0x54]
mov edi, esi
sub esi, ebp
mov dword [esp + 0x7c], esi
mov ebx, dword [0xc5e114]
add esi, ebx
mov ecx, dword [esp + 4]
mov dword [esp + 0x34], ecx
mov edx, dword [0xc5e118]
mov ecx, dword [0xc5e120]
mov dword [0xc5e114], esi
mov esi, edi
sub edi, ebp
mov ebp, dword [esp + 0x58]
mov edi, ebp
sbb ebp, ecx
mov ecx, dword [esp + 0x7c]
add ecx, ebx
adc ebp, edx
mov dword [0xc5e118], ebp
mov dword [0xc5e10c], esi
mov dword [0xc5e110], edi
lea ecx, [0xc71310]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x34]
imul ecx, ecx, 0x3b9aca00
mov edx, dword [esp + 0x84]
add ecx, edx
mov edx, dword [esp + 0x40]
mov ebx, edx
sar edx, 0x1f
mov ebp, dword [esp + 0x80]
add ebp, ebx
adc ecx, edx
mov dword [esp + 0x28], ecx
mov dword [esp + 8], ecx
call fcn.00401fb0
lea eax, [0xc72870]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x58]
mov dword [esp + 8], ecx
call fcn.00401fb0
mov eax, dword [0xc72320]
and eax, 0xff
lea ecx, [0xc71320]
lea eax, [ecx + eax*8]
mov ecx, dword [0xc5e118]
mov edx, dword [0xc5e114]
mov dword [eax], edx
mov dword [eax + 4], ecx
mov eax, dword [0xc72320]
and eax, 0xff
lea ecx, [0xc71b20]
lea eax, [ecx + eax*8]
mov ecx, dword [esp + 0x24]
mov dword [eax], ecx
mov ecx, dword [esp + 0x28]
mov dword [eax + 4], ecx
mov eax, dword [0xc71318]
mov ecx, dword [0xc5e114]
add ecx, eax
mov eax, dword [0xc7131c]
mov edx, dword [0xc5e118]
mov dword [0xc71318], ecx
adc eax, edx
mov dword [0xc7131c], eax
mov eax, dword [0xc5e0fc]
mov ecx, dword [0xc5e0f4]
mov dword [esp + 0x84], ecx
mov edx, eax
sub eax, ecx
mov ebx, dword [0xc5e0ec]
mov dword [esp + 0x78], ebx
mov ebp, edx
mov esi, eax
mul ebx
mov dword [esp + 0x80], edx
mov dword [esp + 0x30], eax
mov edi, dword [0xc6f5f0]
mov dword [esp + 0x7c], edi
mov edx, dword [0xc6f5f8]
mov dword [esp + 0x74], edx
add edx, edi
mov dword [esp + 0x70], edx
mov edi, dword [0xc6f600]
mov dword [esp + 0xbc], edi
add edi, edx
mov dword [esp + 0x60], edi
mov edx, dword [0xc5e10c]
mov dword [esp + 0xb8], edx
mov ecx, dword [0xc5e104]
mov dword [esp + 0xb4], ecx
sub edx, ecx
mov dword [esp + 0xb0], edx
mov eax, edx
mul ebx
mov dword [esp + 0xac], edx
mov dword [esp + 0x5c], eax
mov edx, dword [esp + 0x30]
add edi, edx
mov dword [esp + 0xa8], edi
add edi, eax
mov dword [esp + 0x6c], edi
mov eax, dword [0xc5e0c4]
mov dword [esp + 0xa4], eax
add eax, edi
mov dword [esp + 0xa0], eax
mov edi, dword [0xc5e100]
mov edx, dword [0xc5e0f8]
mov ecx, dword [0xc6f5f4]
mov dword [esp + 0x9c], ecx
mov ecx, dword [0xc6f5fc]
mov dword [esp + 0x98], ecx
mov ecx, dword [0xc6f604]
mov dword [esp + 0x94], ecx
mov ecx, dword [0xc5e110]
mov dword [esp + 0x90], ecx
mov ecx, dword [0xc5e108]
mov dword [esp + 0x8c], ecx
mov ecx, dword [0xc5e0c8]
mov dword [0xc5e0c4], eax
sar ebx, 0x1f
imul esi, ebx
mov eax, dword [esp + 0x84]
sub ebp, eax
sbb edi, edx
mov eax, dword [esp + 0x78]
imul edi, eax
mov edx, dword [esp + 0x80]
add edx, edi
add edx, esi
mov dword [esp + 0x84], edx
mov ebp, dword [esp + 0x74]
mov esi, dword [esp + 0x7c]
add ebp, esi
mov ebp, dword [esp + 0x9c]
mov esi, dword [esp + 0x98]
adc ebp, esi
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0x70]
add esi, edi
mov esi, dword [esp + 0x94]
adc ebp, esi
mov esi, dword [esp + 0xb0]
imul esi, ebx
mov ebx, dword [esp + 0xb8]
mov edi, dword [esp + 0xb4]
sub ebx, edi
mov ebx, dword [esp + 0x90]
mov edi, dword [esp + 0x8c]
sbb ebx, edi
imul ebx, eax
mov eax, dword [esp + 0xac]
add eax, ebx
add eax, esi
mov dword [esp + 0x80], eax
mov ebx, dword [esp + 0x60]
mov esi, dword [esp + 0x30]
add ebx, esi
adc ebp, edx
mov ebx, dword [esp + 0xa8]
mov edi, dword [esp + 0x5c]
add ebx, edi
adc ebp, eax
mov ebx, dword [esp + 0xa4]
mov eax, dword [esp + 0x6c]
add ebx, eax
adc ecx, ebp
mov dword [0xc5e0c8], ecx
mov eax, dword [0xc5de2c]
mov dword [esp + 0x7c], eax
mov ebx, dword [esp + 0x54]
sub ebx, eax
mov dword [esp + 0x74], ebx
mov edi, dword [0xc6ee88]
mov dword [esp + 0x78], edi
mov eax, ebx
mul edi
mov dword [esp + 0x70], edx
mov dword [esp + 0xbc], eax
mov esi, dword [0xc5de34]
mov dword [esp + 0xb8], esi
add eax, esi
mov dword [esp + 0x2c], eax
mov esi, dword [0xc5de38]
mov dword [esp + 0x9c], esi
mov esi, dword [0xc5de30]
mov dword [esp + 0x98], esi
mov edx, dword [esp + 0xa0]
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00447fa0
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0xc8], xmm0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x7c]
sub eax, ecx
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x98]
sbb eax, ecx
mov ecx, dword [esp + 0x78]
imul eax, ecx
sar ecx, 0x1f
mov edx, dword [esp + 0x74]
imul ecx, edx
mov edx, dword [esp + 0x70]
add ecx, edx
add eax, ecx
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0xb8]
add ecx, edx
mov ecx, dword [esp + 0x9c]
adc ecx, eax
mov dword [esp + 4], ecx
call fcn.00447fa0
movsd xmm0, qword [esp + 8]
movsd xmm1, qword [esp + 0xc8]
divsd xmm1, xmm0
movsd qword [0xc72328], xmm1
mov dword [0xc5d77c], 0
mov dword [0xc5d780], 0
movzx eax, byte [0xc5e0c0]
test al, al
je 0x416cca
mov eax, dword [0xc72324]
inc eax
mov dword [0xc72324], eax
lea eax, [0xc5e0e0]
mov dword [esp], eax
call fcn.00407fb0
mov eax, dword [0xc72320]
inc eax
mov dword [0xc72320], eax
mov eax, dword [0xc5e0e4]
mov dword [esp], eax
call fcn.0042e020
mov dword [0xc5e0e4], 0
lea eax, [0xc5e0e0]
mov dword [esp], eax
call fcn.00408180
call fcn.00421b40
lea eax, [0x8bf770]
mov dword [esp], eax
call fcn.0044afe0
call fcn.00421bb0
call fcn.0041e480
lea eax, [0x8bf75c]
mov dword [esp], eax
call fcn.0044afe0
mov eax, dword [0xc6f260]
test eax, eax
jle 0x4173e8
movsd xmm0, qword [0x91ebe8]
mulsd xmm0, qword [0xc72328]
movsd qword [esp + 0xc8], xmm0
lea edi, [esp + 0xd0]
xor eax, eax
call fcn.0044c95a
call fcn.00428440
mov ecx, dword [0xc5e0f4]
mov edx, dword [0xc6ef78]
sub ecx, edx
mov edx, dword [0xc5e0f8]
mov ebx, dword [0xc6ef7c]
mov dword [esp], ecx
sbb edx, ebx
mov dword [esp + 4], edx
mov dword [esp + 8], 0xf4240
mov dword [esp + 0xc], 0
call fcn.00448210
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0xd0]
mov dword [esp], ecx
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
mov dword [esp + 0x14], 3
call fcn.00418390
mov ecx, dword [0xc72320]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
lea esi, [esp + 0x140]
mov dword [esp], esi
mov dword [esp + 4], ebp
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call fcn.0043bf50
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x88], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x198], edx
call fcn.00428440
lea ecx, [0x896df2]
mov dword [esp], ecx
mov dword [esp + 4], 3
call fcn.00428cc0
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.004289e0
lea ecx, [0x896a0d]
mov dword [esp], ecx
mov dword [esp + 4], 2
call fcn.00428cc0
mov ecx, dword [esp + 0x198]
mov dword [esp], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 4], ecx
call fcn.00428cc0
lea ecx, [0x896b5b]
mov dword [esp], ecx
mov dword [esp + 4], 2
call fcn.00428cc0
movsd xmm0, qword [esp + 0xc8]
cvttsd2si ecx, xmm0
mov dword [esp], ecx
sar ecx, 0x1f
mov dword [esp + 4], ecx
call fcn.00428b10
lea ecx, [0x896ba6]
mov dword [esp], ecx
mov dword [esp + 4], 3
call fcn.00428cc0
call fcn.004284b0
mov ecx, dword [0xc5e0f8]
mov dword [esp + 0x3c], ecx
mov edx, dword [0xc5e0f4]
lea edi, [esp + 0xe8]
xor eax, eax
call fcn.0044c95a
mov ecx, dword [0xc5e100]
mov ebx, dword [0xc5e0fc]
mov dword [esp + 0xe8], ebx
mov dword [esp + 0xec], ecx
mov ecx, dword [0xc5e108]
mov ebx, dword [0xc5e104]
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xf4], ecx
mov ecx, dword [0xc5e110]
mov ebx, dword [0xc5e10c]
mov dword [esp + 0xf8], ebx
mov dword [esp + 0xfc], ecx
xor ecx, ecx
mov ebx, dword [esp + 0x3c]
jmp 0x416fe6
sub ebp, edx
lea ecx, [esp + 0xd0]
mov dword [esp], ecx
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
mov dword [esp + 0xc], ebp
sbb esi, ebx
mov dword [esp + 0x10], esi
call fcn.004184f0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
lea ebx, [esp + 0x120]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.0043bf50
mov eax, dword [esp + 0x14]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x198], ecx
call fcn.00428440
mov eax, dword [esp + 0x198]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
call fcn.00428cc0
call fcn.004284b0
mov eax, dword [esp + 0x68]
lea ecx, [eax + 1]
xor eax, eax
mov edx, dword [esp + 0x48]
mov ebx, dword [esp + 0x50]
cmp ecx, 3
jge 0x417049
mov dword [esp + 0x68], ecx
lea ebp, [esp + ecx*8 + 0xe8]
mov esi, dword [ebp + 4]
mov dword [esp + 0x50], esi
mov ebp, dword [ebp]
mov dword [esp + 0x48], ebp
test ecx, ecx
je 0x416f49
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], ebx
call fcn.00428440
lea eax, [0x8969cd]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00428cc0
call fcn.004284b0
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x48]
mov esi, dword [esp + 0x50]
jmp 0x416f49
call fcn.00428440
lea eax, [0x89bc35]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00428cc0
call fcn.004284b0
lea edi, [esp + 0x160]
xor eax, eax
call fcn.0044c956
mov eax, dword [esp + 0x30]
mov dword [esp + 0x160], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x164], eax
mov eax, dword [0xc6f5f4]
mov ecx, dword [0xc6f5f0]
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], eax
mov eax, dword [0xc6f5f8]
mov ecx, dword [0xc6f600]
add ecx, eax
mov eax, dword [0xc6f5fc]
mov edx, dword [0xc6f604]
mov dword [esp + 0x170], ecx
adc eax, edx
mov dword [esp + 0x174], eax
mov eax, dword [0xc6f60c]
mov ecx, dword [0xc6f608]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x17c], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x184], eax
xor eax, eax
jmp 0x4171a3
lea eax, [esp + 0xd0]
mov dword [esp], eax
mov dword [esp + 4], 0x18
mov dword [esp + 8], 0x18
mov ecx, dword [esp + 0x44]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x10], ecx
call fcn.004184f0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lea ebx, [esp + 0x100]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
mov dword [esp + 0xc], edx
call fcn.0043bf50
mov eax, dword [esp + 0x14]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x198], ecx
call fcn.00428440
mov eax, dword [esp + 0x198]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
call fcn.00428cc0
call fcn.004284b0
mov eax, dword [esp + 0x64]
inc eax
cmp eax, 5
jge 0x41722c
mov dword [esp + 0x64], eax
lea ecx, [esp + eax*8 + 0x160]
mov edx, dword [ecx + 4]
mov dword [esp + 0x4c], edx
mov ecx, dword [ecx]
mov dword [esp + 0x44], ecx
cmp eax, 2
jne 0x4171ee
call fcn.00428440
lea eax, [0x8969d1]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00428cc0
call fcn.004284b0
jmp 0x41710e
cmp eax, 3
je 0x4171c9
test eax, eax
je 0x41710e
call fcn.00428440
lea eax, [0x8969cd]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00428cc0
call fcn.004284b0
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x4c]
jmp 0x41710e
mov eax, dword [0xc5e128]
mov dword [esp + 0x84], eax
mov ecx, dword [0xc5e124]
mov dword [esp + 0x80], ecx
mov edx, dword [0xc5e130]
mov dword [esp + 0x7c], edx
mov ebx, dword [0xc5e12c]
mov dword [esp + 0x74], ebx
mov ebp, dword [0xc5e138]
mov dword [esp + 0x70], ebp
mov esi, dword [0xc5e134]
mov dword [esp + 0xbc], esi
mov edi, dword [0xc5e140]
mov dword [esp + 0xb8], edi
mov edi, dword [0xc5e13c]
mov dword [esp + 0xb4], edi
mov edi, dword [0xc5e0f0]
mov dword [esp + 0x78], edi
call fcn.00428440
lea eax, [0x89aaf0]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00428cc0
mov eax, dword [esp + 0x80]
shr eax, 0x14
mov ecx, dword [esp + 0x84]
mov edx, ecx
shl ecx, 0xc
or ecx, eax
mov dword [esp], ecx
shr edx, 0x14
mov dword [esp + 4], edx
call fcn.004289e0
lea eax, [0x896a37]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00428cc0
mov eax, dword [esp + 0x74]
shr eax, 0x14
mov ecx, dword [esp + 0x7c]
mov edx, ecx
shl ecx, 0xc
or ecx, eax
mov dword [esp], ecx
shr edx, 0x14
mov dword [esp + 4], edx
call fcn.004289e0
lea eax, [0x896a37]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00428cc0
mov eax, dword [esp + 0xbc]
shr eax, 0x14
mov ecx, dword [esp + 0x70]
mov edx, ecx
shl ecx, 0xc
or ecx, eax
mov dword [esp], ecx
shr edx, 0x14
mov dword [esp + 4], edx
call fcn.004289e0
lea eax, [0x89761d]
mov dword [esp], eax
mov dword [esp + 4], 5
call fcn.00428cc0
mov eax, dword [esp + 0xb4]
shr eax, 0x14
mov ecx, dword [esp + 0xb8]
mov edx, ecx
shl ecx, 0xc
or ecx, eax
mov dword [esp], ecx
shr edx, 0x14
mov dword [esp + 4], edx
call fcn.004289e0
lea eax, [0x89b3b1]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call fcn.00428cc0
mov eax, dword [esp + 0x78]
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.00428b10
lea eax, [0x896a0f]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.00428cc0
call fcn.004284b0
movzx eax, byte [0xc5e0c0]
test al, al
jne 0x41742e
call fcn.00428440
call fcn.00428650
call fcn.004284b0
call fcn.004284b0
lea eax, [0xc1a150]
mov dword [esp], eax
call fcn.00436a70
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x188]
mov edx, dword [ecx + 0x74]
lea ebx, [edx - 1]
mov dword [ecx + 0x74], ebx
cmp edx, 1
jne 0x417427
movzx ecx, byte [eax + 0x65]
test cl, cl
je 0x417427
mov dword [eax + 8], 0xfffffade
add esp, 0x1ac
ret
call fcn.00428440
lea eax, [0x89aaa8]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00428cc0
call fcn.004284b0
jmp 0x4173d4
mov edi, dword [esp + 0x194]
xor eax, eax
call fcn.0044c860
jmp 0x416849
call fcn.00441730
jmp 0x416826
lea eax, [0x897c12]
call fcn.0044c860
jmp 0x416719
lea eax, [0x8a737b]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.00427b80
ud2
call fcn.0044b100
jmp fcn.00416650