Function at 0x418120
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x47d26b
mov eax, dword fs:[0]
push eax
sub esp, 0xd8
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a67d0]
xor eax, esp
push eax
lea eax, [esp + 0xec]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0xc8], esi
xor ebx, ebx
mov dword [esp + 0x18], ebx
mov ecx, dword [esp + 0xfc]
lea eax, [esp + 0x18]
push eax
push str.icbcres
push ecx
mov dword [esp + 0x100], ebx
call fcn.0042a730
test eax, eax
jge 0x4181a1
mov eax, dword [esp + 0x18]
cmp eax, ebx
mov dword [esp + 0xf4], 0xffffffff
je 0x418199
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
or eax, 0xffffffff
jmp 0x418b95
lea ecx, [esp + 0xb0]
push ecx
mov ecx, esi
call fcn.00413c50
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x18]
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
lea ecx, [esp + 0x14]
push ecx
push eax
mov byte [esp + 0xfc], 1
call edx
test eax, eax
mov eax, dword [esp + 0x14]
jge 0x41820b
cmp eax, ebx
mov byte [esp + 0xf4], bl
je 0x4181e8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
cmp eax, ebx
mov dword [esp + 0xf4], 0xffffffff
je 0x418203
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
or eax, 0xffffffff
jmp 0x418b95
lea edx, [esp + 0xb4]
mov dword [esp + 0xb4], ebx
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
jge 0x41822c
mov eax, dword [esp + 0x14]
jmp 0x4181d5
push 0xffffffffffffffff
lea ecx, [esi + 0x5c]
push ebx
call fcn.00415470
xor ebp, ebp
cmp dword [esp + 0xb4], ebx
jle 0x418b61
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x418257
mov esi, dword [esp + 0xc8]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0x1c], ebx
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
lea edx, [esp + 0x1c]
push edx
push ebp
push eax
mov eax, dword [ecx + 0x1c]
mov byte [esp + 0x100], 3
call eax
test eax, eax
jl 0x418bb1
mov dword [esp + 0x20], ebx
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x20]
push ecx
push 0x486868
push edx
mov byte [esp + 0x100], 4
call fcn.0042b210
test eax, eax
jl 0x418bf6
lea ecx, [esp + 0x80]
call fcn.00401380
mov eax, dword [esp + 0x20]
cmp eax, ebx
mov dword [esp + 0x80], eax
je 0x418310
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov dword [esp + 0x24], ebx
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x24]
push eax
push str.name
push ecx
mov byte [esp + 0x100], 5
call fcn.0042aa70
test eax, eax
jl 0x418bde
mov dword [esp + 0x28], ebx
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0x28]
push edx
push eax
push ecx
mov byte [esp + 0x100], 6
call fcn.0042aa70
test eax, eax
mov eax, dword [esp + 0x28]
jl 0x418c01
mov edx, dword [eax]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0xc4]
push ecx
push eax
call edx
test eax, eax
jl 0x418c2f
mov eax, dword [esp + 0xc4]
push eax
lea ecx, [esp + 0x88]
call fcn.00401400
mov ecx, dword [esp + 0xc4]
push ecx
call edi
mov dword [esp + 0x2c], ebx
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x2c]
push edx
push str.info
push eax
mov byte [esp + 0x100], 7
call fcn.0042aa70
test eax, eax
jl 0x418c17
mov dword [esp + 0x30], ebx
mov edx, dword [esp + 0xb0]
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x30]
push ecx
push edx
push eax
mov byte [esp + 0x100], 8
call fcn.0042aa70
test eax, eax
mov eax, dword [esp + 0x30]
jl 0x418c35
mov ecx, dword [eax]
lea edx, [esp + 0xd8]
push edx
push eax
mov eax, dword [ecx + 0x68]
call eax
test eax, eax
jl 0x418c63
mov ecx, dword [esp + 0xd8]
push ecx
lea ecx, [esp + 0x8c]
call fcn.00401400
mov edx, dword [esp + 0xd8]
push edx
call edi
mov dword [esp + 0x38], ebx
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x38]
push eax
push str.windows
push ecx
mov byte [esp + 0x100], 9
call fcn.0042aa70
test eax, eax
jl 0x418c4b
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x38]
lea edx, [esp + 0x34]
push edx
push str.winver
push eax
mov byte [esp + 0x100], 0xa
call fcn.0042aa70
test eax, eax
jl 0x418c69
mov dword [esp + 0x3c], ebx
mov edx, dword [esp + 0x34]
lea ecx, [esp + 0x3c]
push ecx
push str.value
push edx
mov byte [esp + 0x100], 0xb
call fcn.0042b210
test eax, eax
lea ecx, [esp + 0x3c]
jl 0x418ca8
call fcn.00414200
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x50]
call fcn.00403a00
mov eax, dword [esp + 0x4c]
mov byte [esp + 0xf4], 0xc
mov ecx, 0x48688c
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4184ee
cmp dx, bx
je 0x4184ea
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4184ee
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4184c8
xor eax, eax
jmp 0x4184f3
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebx
je 0x418524
mov eax, dword [esi + 0x110]
cmp eax, ebx
je 0x418505
mov eax, dword [eax]
jmp 0x418507
xor eax, eax
mov edx, dword [esp + 0x38]
lea ecx, [esp + 0x34]
push ecx
push eax
push str.winver
push edx
call fcn.0042ac90
test eax, eax
jl 0x418c9b
mov dword [esp + 0x44], ebx
mov ecx, dword [esp + 0x34]
lea eax, [esp + 0x44]
push eax
push str.langs
push ecx
mov byte [esp + 0x100], 0xd
call fcn.0042aa70
test eax, eax
jl 0x418c83
mov dword [esp + 0x40], ebx
mov eax, dword [esp + 0x44]
lea edx, [esp + 0x40]
push edx
push str.lang
push eax
mov byte [esp + 0x100], 0xe
call fcn.0042aa70
test eax, eax
jl 0x418caf
mov dword [esp + 0x50], ebx
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0x50]
push ecx
push str.value
push edx
mov byte [esp + 0x100], 0xf
call fcn.0042b210
test eax, eax
lea ecx, [esp + 0x50]
jl 0x418cc9
call fcn.00414200
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x5c]
call fcn.00403a00
mov eax, dword [esp + 0x58]
mov byte [esp + 0xf4], 0x10
mov ecx, 0x48688c
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x4185eb
cmp dx, bx
je 0x4185e4
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x4185eb
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x4185c2
xor eax, eax
or esi, 0xffffffff
jmp 0x4185f4
sbb eax, eax
mov esi, 0xffffffff
sbb eax, esi
cmp eax, ebx
je 0x41861c
mov edx, dword [esp + 0xb0]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x40]
push ecx
push edx
push str.lang
push eax
call fcn.0042ac90
test eax, eax
jl 0x418cd0
mov dword [esp + 0x48], ebx
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0x48]
push ecx
push str.file
push edx
mov byte [esp + 0x100], 0x11
call fcn.0042aa70
test eax, eax
jl 0x418e2a
mov dword [esp + 0x5c], ebx
mov ecx, dword [esp + 0x48]
lea eax, [esp + 0x5c]
push eax
push str.type
push ecx
mov byte [esp + 0x100], 0x12
call fcn.0042aa70
test eax, eax
mov eax, dword [esp + 0x5c]
jl 0x418e16
mov edx, dword [eax]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0xdc]
push ecx
push eax
call edx
test eax, eax
jl 0x418e63
mov eax, dword [esp + 0xdc]
push eax
lea ecx, [esp + 0x90]
call fcn.00401400
mov ecx, dword [esp + 0xdc]
push ecx
call edi
mov dword [esp + 0x54], ebx
mov eax, dword [esp + 0x48]
lea edx, [esp + 0x54]
push edx
push 0x483974
push eax
mov byte [esp + 0x100], 0x13
call fcn.0042aa70
test eax, eax
jl 0x418e4b
mov dword [esp + 0x60], ebx
mov edx, dword [esp + 0x54]
lea ecx, [esp + 0x60]
push ecx
push str.rootkey
push edx
mov byte [esp + 0x100], 0x14
call fcn.0042aa70
test eax, eax
mov eax, dword [esp + 0x60]
jl 0x418e69
mov ecx, dword [eax]
lea edx, [esp + 0xb8]
push edx
push eax
mov eax, dword [ecx + 0x68]
call eax
test eax, eax
jl 0x418e93
mov ecx, dword [esp + 0xb8]
push ecx
lea ecx, [esp + 0x94]
call fcn.00401400
mov edx, dword [esp + 0xb8]
push edx
call edi
mov dword [esp + 0x64], ebx
mov ecx, dword [esp + 0x54]
lea eax, [esp + 0x64]
push eax
push str.subkey
push ecx
mov byte [esp + 0x100], 0x15
call fcn.0042aa70
test eax, eax
mov eax, dword [esp + 0x64]
jl 0x418e7f
mov edx, dword [eax]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0xd0]
push ecx
push eax
call edx
test eax, eax
jl 0x418ead
mov eax, dword [esp + 0xd0]
push eax
lea ecx, [esp + 0x98]
call fcn.00401400
mov ecx, dword [esp + 0xd0]
push ecx
call edi
mov dword [esp + 0x68], ebx
mov eax, dword [esp + 0x54]
lea edx, [esp + 0x68]
push edx
push 0x48681c
push eax
mov byte [esp + 0x100], 0x16
call fcn.0042aa70
test eax, eax
mov eax, dword [esp + 0x68]
jl 0x418e99
mov ecx, dword [eax]
lea edx, [esp + 0xcc]
push edx
push eax
mov eax, dword [ecx + 0x68]
call eax
test eax, eax
jl 0x418ec7
mov ecx, dword [esp + 0xcc]
push ecx
lea ecx, [esp + 0x9c]
call fcn.00401400
mov edx, dword [esp + 0xcc]
push edx
call edi
mov dword [esp + 0x6c], ebx
mov ecx, dword [esp + 0x54]
lea eax, [esp + 0x6c]
push eax
push str.vernum
push ecx
mov byte [esp + 0x100], 0x17
call fcn.0042aa70
test eax, eax
mov eax, dword [esp + 0x6c]
jl 0x418eb3
mov edx, dword [eax]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0xd4]
push ecx
push eax
call edx
test eax, eax
jl 0x418ecd
mov eax, dword [esp + 0xd4]
push eax
lea ecx, [esp + 0xa0]
call fcn.00401400
mov ecx, dword [esp + 0xd4]
push ecx
call edi
mov dword [esp + 0x70], ebx
mov eax, dword [esp + 0x48]
lea edx, [esp + 0x70]
push edx
push 0x483984
push eax
mov byte [esp + 0x100], 0x18
call fcn.0042aa70
test eax, eax
mov eax, dword [esp + 0x70]
jl 0x418ed3
mov ecx, dword [eax]
lea edx, [esp + 0xbc]
push edx
push eax
mov eax, dword [ecx + 0x68]
call eax
test eax, eax
jl 0x4190d9
mov ecx, dword [esp + 0xbc]
push ecx
lea ecx, [esp + 0xa4]
call fcn.00401400
mov edx, dword [esp + 0xbc]
push edx
call edi
mov dword [esp + 0x74], ebx
mov ecx, dword [esp + 0x48]
lea eax, [esp + 0x74]
push eax
push 0x486804
push ecx
mov byte [esp + 0x100], 0x19
call fcn.0042aa70
test eax, eax
jl 0x4190d0
mov eax, dword [esp + 0x74]
mov edx, dword [eax]
mov edx, dword [edx + 0x68]
lea ecx, [esp + 0xc0]
push ecx
push eax
call edx
test eax, eax
jl 0x4190d0
mov eax, dword [esp + 0xc0]
push eax
lea ecx, [esp + 0xa8]
call fcn.00401400
mov ecx, dword [esp + 0xc0]
push ecx
call edi
mov dword [esp + 0x78], ebx
mov eax, dword [esp + 0x48]
lea edx, [esp + 0x78]
push edx
push 0x4867f0
push eax
mov byte [esp + 0x100], 0x1a
call fcn.0042aa70
test eax, eax
jl 0x4190c7
mov eax, dword [esp + 0x78]
mov ecx, dword [eax]
lea edx, [esp + 0xe0]
push edx
push eax
mov eax, dword [ecx + 0x68]
call eax
test eax, eax
jl 0x4190c7
mov esi, dword [esp + 0xe0]
mov ecx, 0x4867ec
mov eax, esi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x418996
cmp dx, bx
je 0x418992
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x418996
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x418970
xor eax, eax
jmp 0x41899b
sbb eax, eax
sbb eax, 0xffffffff
xor ecx, ecx
cmp eax, ebx
setne cl
push esi
mov dword [esp + 0xac], ecx
call edi
mov dword [esp + 0x7c], ebx
mov eax, dword [esp + 0x48]
lea edx, [esp + 0x7c]
push edx
push str.reboot
push eax
mov byte [esp + 0x100], 0x1b
call fcn.0042aa70
test eax, eax
jl 0x4191c4
mov eax, dword [esp + 0x7c]
mov ecx, dword [eax]
lea edx, [esp + 0xe4]
push edx
push eax
mov eax, dword [ecx + 0x68]
call eax
test eax, eax
jl 0x4191c4
mov esi, dword [esp + 0xe4]
mov ecx, 0x4867ec
mov eax, esi
mov edi, edi
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x418a26
cmp dx, bx
je 0x418a22
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x418a26
add eax, 4
add ecx, 4
cmp dx, bx
jne 0x418a00
xor eax, eax
jmp 0x418a2b
sbb eax, eax
sbb eax, 0xffffffff
xor ecx, ecx
cmp eax, ebx
setne cl
push esi
mov dword [esp + 0xb0], ecx
call edi
sub esp, 0x30
lea edx, [esp + 0xb0]
mov ecx, esp
mov dword [esp + 0x118], esp
push edx
call fcn.00406210
mov ecx, dword [esp + 0xf8]
add ecx, 0x5c
call fcn.00416910
lea ecx, [esp + 0x7c]
call fcn.00410e30
lea ecx, [esp + 0x78]
call fcn.00410e30
lea ecx, [esp + 0x74]
call fcn.00410e30
lea ecx, [esp + 0x70]
call fcn.00410e30
lea ecx, [esp + 0x6c]
call fcn.00410e30
lea ecx, [esp + 0x68]
call fcn.00410e30
lea ecx, [esp + 0x64]
call fcn.00410e30
lea ecx, [esp + 0x60]
call fcn.00410e30
lea ecx, [esp + 0x54]
call fcn.00410e30
lea ecx, [esp + 0x5c]
call fcn.00410e30
lea ecx, [esp + 0x48]
call fcn.00410e30
lea ecx, [esp + 0x58]
call fcn.0040b540
lea ecx, [esp + 0x50]
call fcn.00401380
lea ecx, [esp + 0x40]
call fcn.00410e30
lea ecx, [esp + 0x44]
call fcn.00410e30
lea ecx, [esp + 0x4c]
call fcn.0040b540
lea ecx, [esp + 0x3c]
call fcn.00401380
lea ecx, [esp + 0x34]
call fcn.00410e30
lea ecx, [esp + 0x38]
call fcn.00410e30
lea ecx, [esp + 0x30]
call fcn.00410e30
lea ecx, [esp + 0x2c]
call fcn.00410e30
lea ecx, [esp + 0x28]
call fcn.00410e30
lea ecx, [esp + 0x24]
call fcn.00410e30
lea ecx, [esp + 0x20]
call fcn.00401380
lea ecx, [esp + 0x1c]
call fcn.00410e30
lea ecx, [esp + 0x80]
call fcn.004062e0
add ebp, 1
cmp ebp, dword [esp + 0xb4]
jl 0x418250
mov eax, dword [esp + 0x14]
cmp eax, ebx
mov byte [esp + 0xf4], bl
je 0x418b78
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
cmp eax, ebx
mov dword [esp + 0xf4], 0xffffffff
je 0x418b93
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
xor eax, eax
mov ecx, dword [esp + 0xec]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xe4
ret 4
mov eax, dword [esp + 0x1c]
cmp eax, ebx
mov byte [esp + 0xf4], 2
je 0x418bc9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x80]
call fcn.004062e0
mov eax, dword [esp + 0x14]
jmp 0x4181d5
mov eax, dword [esp + 0x24]
cmp eax, ebx
mov byte [esp + 0xf4], 4
je 0x418bf6
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x20]
call fcn.00401380
jmp 0x418bb1
cmp eax, ebx
mov byte [esp + 0xf4], 5
je 0x418bde
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x418bde
mov eax, dword [esp + 0x2c]
cmp eax, ebx
mov byte [esp + 0xf4], 6
je 0x418c2f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x28]
jmp 0x418c01
cmp eax, ebx
mov byte [esp + 0xf4], 7
je 0x418c17
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x418c17
mov eax, dword [esp + 0x38]
cmp eax, ebx
mov byte [esp + 0xf4], 8
je 0x418c63
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
jmp 0x418c35
mov eax, dword [esp + 0x34]
cmp eax, ebx
mov byte [esp + 0xf4], 9
je 0x418c4b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x418c4b
mov eax, dword [esp + 0x44]
cmp eax, ebx
mov byte [esp + 0xf4], 0xc
je 0x418c9b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x4c]
call fcn.0040b540
lea ecx, [esp + 0x3c]
call fcn.00401380
jmp 0x418c69
mov eax, dword [esp + 0x40]
cmp eax, ebx
mov byte [esp + 0xf4], 0xd
je 0x418c83
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x418c83
call fcn.00401380
jmp 0x418caf
lea ecx, [esp + 0x58]
call fcn.0040b540
lea ecx, [esp + 0x50]
call fcn.00401380
mov eax, dword [esp + 0x40]
cmp eax, ebx
mov byte [esp + 0xf4], 0xd
je 0x418cfa
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x44]
cmp eax, ebx
mov byte [esp + 0xf4], 0xc
je 0x418d12
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x4c]
call fcn.0040b540
lea ecx, [esp + 0x3c]
call fcn.00401380
mov eax, dword [esp + 0x34]
cmp eax, ebx
mov byte [esp + 0xf4], 9
je 0x418d3c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x38]
cmp eax, ebx
mov byte [esp + 0xf4], 8
je 0x418d54
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
cmp eax, ebx
mov byte [esp + 0xf4], 7
je 0x418d6c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x2c]
cmp eax, ebx
mov byte [esp + 0xf4], 6
je 0x418d84
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x28]
cmp eax, ebx
mov byte [esp + 0xf4], 5
je 0x418d9c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x24]
cmp eax, ebx
mov byte [esp + 0xf4], 4
je 0x418db4
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x20]
call fcn.00401380
mov eax, dword [esp + 0x1c]
cmp eax, ebx
mov byte [esp + 0xf4], 2
je 0x418dd5
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x80]
call fcn.004062e0
mov eax, dword [esp + 0x14]
cmp eax, ebx
mov byte [esp + 0xf4], bl
je 0x418df8
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x18]
cmp eax, ebx
mov dword [esp + 0xf4], esi
je 0x418e0f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, esi
jmp 0x418b95
cmp eax, ebx
mov byte [esp + 0xf4], 0x11
je 0x418e2a
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x48]
cmp eax, ebx
mov byte [esp + 0xf4], 0x10
je 0x418cd0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x418cd0
mov eax, dword [esp + 0x54]
cmp eax, ebx
mov byte [esp + 0xf4], 0x12
je 0x418e63
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x5c]
jmp 0x418e16
cmp eax, ebx
mov byte [esp + 0xf4], 0x13
je 0x418e4b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x418e4b
cmp eax, ebx
mov byte [esp + 0xf4], 0x14
je 0x418e93
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x60]
jmp 0x418e69
cmp eax, ebx
mov byte [esp + 0xf4], 0x15
je 0x418ead
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x64]
jmp 0x418e7f
cmp eax, ebx
mov byte [esp + 0xf4], 0x16
je 0x418ec7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x68]
jmp 0x418e99
mov eax, dword [esp + 0x6c]
jmp 0x418eb3
cmp eax, ebx
mov byte [esp + 0xf4], 0x17
je 0x418ee7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x6c]
cmp eax, ebx
mov byte [esp + 0xf4], 0x16
je 0x418eff
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x68]
cmp eax, ebx
mov byte [esp + 0xf4], 0x15
je 0x418f17
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x64]
cmp eax, ebx
mov byte [esp + 0xf4], 0x14
je 0x418f2f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x60]
cmp eax, ebx
mov byte [esp + 0xf4], 0x13
je 0x418f47
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x54]
cmp eax, ebx
mov byte [esp + 0xf4], 0x12
je 0x418f5f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x5c]
cmp eax, ebx
mov byte [esp + 0xf4], 0x11
je 0x418f77
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x48]
cmp eax, ebx
mov byte [esp + 0xf4], 0x10
je 0x418f8f
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x58]
call fcn.0040b540
lea ecx, [esp + 0x50]
call fcn.00401380
mov eax, dword [esp + 0x40]
cmp eax, ebx
mov byte [esp + 0xf4], 0xd
je 0x418fb9
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x44]
cmp eax, ebx
mov byte [esp + 0xf4], 0xc
je 0x418fd1
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x4c]
call fcn.0040b540
lea ecx, [esp + 0x3c]
call fcn.00401380
mov eax, dword [esp + 0x34]
cmp eax, ebx
mov byte [esp + 0xf4], 9
je 0x418ffb
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x38]
cmp eax, ebx
mov byte [esp + 0xf4], 8
je 0x419013
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x30]
cmp eax, ebx
mov byte [esp + 0xf4], 7
je 0x41902b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x2c]
cmp eax, ebx
mov byte [esp + 0xf4], 6
je 0x419043
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x28]
cmp eax, ebx
mov byte [esp + 0xf4], 5
je 0x41905b
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [esp + 0x24]
cmp eax, ebx
mov byte [esp + 0xf4], 4
je 0x419073
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x20]
call fcn.00401380
mov eax, dword [esp + 0x1c]
cmp eax, ebx
mov byte [esp + 0xf4], 2
je 0x419094
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x80]
call fcn.004062e0
mov eax, dword [esp + 0x14]
cmp eax, ebx
mov byte [esp + 0xf4], bl
je 0x4190b7
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x18]
call fcn.00410e30
mov eax, esi
jmp 0x418b95
lea ecx, [esp + 0x78]
call fcn.00410e30
lea ecx, [esp + 0x74]
call fcn.00410e30
lea ecx, [esp + 0x70]
call fcn.00410e30
lea ecx, [esp + 0x6c]
call fcn.00410e30
lea ecx, [esp + 0x68]
call fcn.00410e30
lea ecx, [esp + 0x64]
call fcn.00410e30
lea ecx, [esp + 0x60]
call fcn.00410e30
lea ecx, [esp + 0x54]
call fcn.00410e30
lea ecx, [esp + 0x5c]
call fcn.00410e30
lea ecx, [esp + 0x48]
call fcn.00410e30
lea ecx, [esp + 0x58]
call fcn.0040b540
lea ecx, [esp + 0x50]
call fcn.00401380
lea ecx, [esp + 0x40]
call fcn.00410e30
lea ecx, [esp + 0x44]
call fcn.00410e30
lea ecx, [esp + 0x4c]
call fcn.0040b540
lea ecx, [esp + 0x3c]
call fcn.00401380
lea ecx, [esp + 0x34]
call fcn.00410e30
lea ecx, [esp + 0x38]
call fcn.00410e30
lea ecx, [esp + 0x30]
call fcn.00410e30
lea ecx, [esp + 0x2c]
call fcn.00410e30
lea ecx, [esp + 0x28]
call fcn.00410e30
lea ecx, [esp + 0x24]
call fcn.00410e30
lea ecx, [esp + 0x20]
call fcn.00401380
lea ecx, [esp + 0x1c]
call fcn.00410e30
lea ecx, [esp + 0x80]
call fcn.004062e0
lea ecx, [esp + 0x14]
call fcn.00410e30
lea ecx, [esp + 0x18]
call fcn.00410e30
mov eax, esi
jmp 0x418b95
lea ecx, [esp + 0x7c]
call fcn.00410e30
lea ecx, [esp + 0x78]
call fcn.00410e30
lea ecx, [esp + 0x74]
call fcn.00410e30
lea ecx, [esp + 0x70]
call fcn.00410e30
lea ecx, [esp + 0x6c]
call fcn.00410e30
lea ecx, [esp + 0x68]
call fcn.00410e30
lea ecx, [esp + 0x64]
call fcn.00410e30
lea ecx, [esp + 0x60]
call fcn.00410e30
lea ecx, [esp + 0x54]
call fcn.00410e30
lea ecx, [esp + 0x5c]
call fcn.00410e30
lea ecx, [esp + 0x48]
call fcn.00410e30
lea ecx, [esp + 0x58]
call fcn.0040b540
lea ecx, [esp + 0x50]
call fcn.00401380
lea ecx, [esp + 0x40]
call fcn.00410e30
lea ecx, [esp + 0x44]
call fcn.00410e30
lea ecx, [esp + 0x4c]
call fcn.0040b540
lea ecx, [esp + 0x3c]
call fcn.00401380
lea ecx, [esp + 0x34]
call fcn.00410e30
lea ecx, [esp + 0x38]
call fcn.00410e30
lea ecx, [esp + 0x30]
call fcn.00410e30
lea ecx, [esp + 0x2c]
call fcn.00410e30
lea ecx, [esp + 0x28]
call fcn.00410e30
lea ecx, [esp + 0x24]
call fcn.00410e30
lea ecx, [esp + 0x20]
call fcn.00401380
lea ecx, [esp + 0x1c]
call fcn.00410e30
lea ecx, [esp + 0x80]
call fcn.004062e0
lea ecx, [esp + 0x14]
call fcn.00410e30
lea ecx, [esp + 0x18]
call fcn.00410e30
or eax, 0xffffffff
jmp 0x418b95