Function at 0x40fbf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x30]
cmp eax, dword [ecx + 8]
jbe 0x410472
sub esp, 0xb0
mov edx, dword [0x59303c]
test byte [edx], al
nop
mov ebx, dword [esp + 0xb4]
mov ebp, ebx
shr ebx, 0x16
mov edx, dword [edx + ebx*4]
test edx, edx
je 0x4103d3
mov esi, ebp
shr ebp, 4
and ebp, 0x3ffff
add ebp, edx
mov edi, esi
shr esi, 2
and esi, 3
add edx, 0x3ffff
mov eax, ebx
mov ecx, esi
mov esi, dword [esp + 0xc0]
mov esi, dword [esi + 0x14]
mov dword [esp + 0x8c], esi
mov esi, dword [esp + 0xb8]
cmp esi, 8
je 0x41033f
lea esi, [esi + edi - 1]
shr esi, 0x16
cmp esi, ebx
je 0x41032f
mov edx, edi
xor ebp, ebp
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], esi
mov dword [esp + 0x44], ebx
mov edx, dword [esp + 0xc0]
movzx esi, byte [edx + 0xf]
xchg esi, eax
test al, 0x40
xchg esi, eax
jne 0x4102d4
mov dword [esp + 0x9c], edi
mov dword [esp + 0x64], ecx
mov ebp, dword [edx]
mov dword [esp + 0x60], ebp
mov esi, dword [esp + 0xbc]
cmp ebp, esi
jae 0x4102be
mov ebx, dword [edx + 4]
shr ebx, 2
cmp ebx, 0x19
ja 0x41028f
mov dword [esp + 0x80], eax
xor eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x94], eax
mov dword [esp + 0x78], ecx
xor ecx, ecx
mov dword [esp + 0x30], ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x78]
jmp 0x40fd58
cmp edi, 0x20
sbb eax, eax
lea ecx, [edi + 8]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x94]
movzx esi, byte [edx]
mov ecx, edi
shl esi, cl
and eax, esi
mov ecx, dword [esp + 0x30]
or ecx, eax
nop
lea eax, [edx + 1]
mov edx, dword [esp + 0x40]
mov edx, dword [esp + 0xc0]
mov esi, dword [esp + 0xbc]
mov edi, dword [esp + 0x9c]
mov dword [esp + 0x94], eax
mov dword [esp + 0x30], ecx
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x64]
mov edi, dword [esp + 0x40]
cmp edi, ebx
jb 0x40fd06
mov ebx, ebp
shr ebp, 2
lea edi, [ebp + ebp]
cmp edi, 0x19
ja 0x410282
mov dword [esp + 0x48], ebp
mov edi, dword [esp + 0x30]
jmp 0x40fd99
mov dword [esp + 0x30], edi
sbb eax, eax
mov ecx, ebp
shl edi, cl
and edi, eax
mov eax, dword [esp + 0x30]
or edi, eax
lea ebp, [ecx + ecx]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x64]
cmp ebp, 0x20
jbe 0x40fd7c
mov ebp, dword [esp + 0x48]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x41046c
xchg ebp, eax
movzx edx, al
xchg ebp, eax
mov ebx, 0x19
movzx ebx, bl
mov eax, ebx
mov esi, edx
xor edx, edx
div si
movzx edx, al
imul edx, ebp
cmp edx, 0x20
sbb ebx, ebx
mov eax, ecx
mov ecx, edx
mov ebp, 1
shl ebp, cl
and ebp, ebx
lea ebx, [ebp - 1]
and edi, ebx
xor edx, edx
xor ebx, ebx
mov ebp, ecx
test edx, edx
je 0x41027b
movzx esi, byte [edx]
nop
inc edx
mov ecx, 8
mov dword [esp + 0x48], ebp
mov dword [esp + 0x5c], edi
mov edi, dword [esp + 0xbc]
mov ebp, dword [esp + 0x60]
cmp edi, ebp
jne 0x410243
mov ebp, dword [esp + 0xc0]
mov edi, dword [ebp + 4]
shr edi, 2
test edi, edi
je 0x4103fa
cmp edi, 2
jae 0x41023c
mov ebp, 2
test eax, eax
jne 0x4103e4
mov eax, esi
and esi, 0xf
or esi, 0xd0
cmp ebp, 4
ja 0x4100bf
mov eax, 4
mov ecx, dword [esp + 0x9c]
cmp eax, ebp
jbe 0x4100b4
mov edx, eax
sub eax, ebp
add eax, 0xfffffffc
neg eax
cmp eax, 0x20
sbb ebx, ebx
mov ebp, ecx
mov ecx, eax
mov edi, 1
shl edi, cl
and edi, ebx
lea eax, [edi - 1]
mov ebx, eax
shl eax, 4
or eax, ebx
and eax, esi
mov ecx, dword [esp + 0xb8]
mov ebx, ecx
shr ecx, 2
cmp edx, ecx
ja 0x4100a7
mov byte [ebp], al
nop
lea eax, [edx + 4]
lea edx, [ebp + 1]
jmp 0x40feb4
mov byte [edx], 0
add eax, 4
nop
inc edx
cmp eax, ecx
jbe 0x40feac
xor ebp, ebp
add ecx, 2
cmp ecx, eax
jne 0x410098
movzx eax, byte [edx]
and eax, 0xffffffcc
or eax, ebp
mov byte [edx], al
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
je 0x410021
mov eax, dword [0x59303c]
test byte [eax], al
mov ecx, dword [esp + 0x6c]
mov eax, dword [eax + ecx*4]
test eax, eax
je 0x410084
mov edx, dword [esp + 0xb4]
mov ebp, edx
shr edx, 4
and edx, 0x3ffff
add edx, eax
mov esi, ebp
shr ebp, 2
and ebp, 3
add eax, 0x3ffff
shr ebx, 2
mov edi, esi
jmp 0x40ffd3
mov dword [esp + 0x4c], ebx
mov dword [esp + 0xa0], edx
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
shr ebx, 2
shl ebx, 2
mov dword [esp + 0x10], ebx
call fcn.0040ef10
mov eax, dword [esp + 0x20]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x58], edx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x28], ebx
mov ebp, dword [esp + 0x14]
mov dword [esp + 0xa8], ebp
mov esi, dword [esp + 0xa0]
mov dword [esp], esi
mov esi, dword [esp + 0x88]
mov dword [esp + 4], esi
shr ebx, 2
mov dword [esp + 0x3c], ebx
mov dword [esp + 8], ebx
call fcn.0044b390
mov ebx, dword [esp + 0x4c]
mov eax, dword [esp + 0x28]
sub ebx, eax
nop
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x3c]
lea esi, [ecx + eax]
mov edi, dword [esp + 0xb4]
mov ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x58]
mov edx, dword [esp + 0xa8]
mov eax, dword [esp + 0xac]
mov dword [esp + 0x88], esi
cmp ebx, 4
jae 0x40ff21
cmp ebx, 2
jne 0x410080
movzx ebx, byte [edx]
and ebx, 0xffffffcc
movzx edi, byte [esi]
or ebx, edi
mov byte [edx], bl
nop
cmp ebp, 3
jae 0x410049
lea ebx, [ebp + 1]
cmp ebx, 3
jae 0x410028
lea eax, [esi + 1]
mov ecx, dword [esp + 0xb4]
mov edx, ecx
mov dword [esp], ecx
sub eax, edx
mov dword [esp + 4], eax
call fcn.0044b1b0
add esp, 0xb0
ret
cmp edx, eax
jne 0x410007
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040edd0
mov esi, dword [esp + 0x88]
jmp 0x410007
cmp edx, eax
je 0x410053
nop
inc edx
xor ebx, ebx
jmp 0x410002
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040edd0
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov esi, dword [esp + 0x88]
jmp 0x410002
mov eax, esi
jmp 0x41000a
mov esi, dword [esp + 0xb4]
xor eax, eax
xor ecx, ecx
xor ebp, ebp
xor edx, edx
jmp 0x40ff17
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
jmp 0x40fed9
mov esi, eax
mov eax, edx
mov edx, ebp
mov ebp, esi
jmp 0x40feba
mov edx, eax
mov ebp, ecx
mov eax, esi
jmp 0x40fe8c
mov dword [esp + 0xa4], ebx
mov dword [esp + 0x34], ebp
mov edi, dword [esp + 0x9c]
xchg esi, eax
mov byte [edi], al
xchg esi, eax
nop
shr eax, 4
lea esi, [ecx - 8]
inc edi
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x70], eax
mov eax, 4
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x70]
jmp 0x410124
mov edi, 1
mov ebp, dword [esp + 0x98]
mov byte [ebp + edi], al
nop
shr ebx, 4
lea eax, [ebp + 2]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x2c], esi
mov esi, ecx
mov edi, eax
mov ecx, dword [esp + 0x5c]
mov eax, ebx
mov ebx, dword [esp + 0xa4]
mov dword [esp + 0x38], esi
mov dword [esp + 0x50], eax
and eax, 0xf
or eax, 0xf0
mov esi, dword [esp + 0x2c]
add esi, 4
cmp esi, ebp
jae 0x410235
mov dword [esp + 0x98], edi
mov byte [edi], al
nop
mov eax, dword [esp + 0x50]
shr eax, 4
cmp ebx, edx
je 0x4101a8
mov esi, dword [esp + 0x38]
cmp esi, 8
jae 0x4101a1
cmp esi, 0x20
sbb ebx, ebx
movzx edi, byte [edx]
mov ecx, esi
shl edi, cl
and edi, ebx
or eax, edi
nop
inc edx
mov ebx, eax
and eax, 0xf
or eax, 0xf0
mov esi, dword [esp + 0x2c]
add esi, 8
cmp esi, ebp
jb 0x4100f4
mov edx, dword [esp + 0x98]
inc edx
mov ecx, edx
mov ebx, eax
mov eax, esi
mov esi, ebx
jmp 0x40fe5d
add esi, 0xfffffff8
mov ecx, esi
jmp 0x410173
test edx, edx
je 0x4101fa
mov esi, dword [esp + 0x38]
cmp esi, 0x20
sbb ebx, ebx
movzx edx, byte [edx]
mov ecx, esi
shl edx, cl
and edx, ebx
or eax, edx
mov edx, dword [esp + 0x48]
lea ebx, [ecx + edx]
cmp ebx, 8
jae 0x4101eb
cmp ebx, 0x20
sbb esi, esi
mov edx, dword [esp + 0x8c]
movzx edi, byte [edx]
mov ecx, ebx
shl edi, cl
and edi, esi
or eax, edi
nop
lea esi, [edx + 1]
mov edx, esi
jmp 0x410173
lea ecx, [ecx + edx - 8]
mov edx, dword [esp + 0x8c]
mov esi, edx
jmp 0x4101e7
mov esi, dword [esp + 0x38]
cmp esi, 8
jae 0x41022b
cmp esi, 0x20
sbb ebx, ebx
mov ecx, esi
mov edi, dword [esp + 0x5c]
shl edi, cl
and edi, ebx
or edi, eax
mov eax, dword [esp + 0x48]
lea ebx, [ecx + eax]
lea ecx, [ebx - 8]
mov esi, edx
mov eax, edi
mov edx, dword [esp + 0x8c]
jmp 0x4101e7
mov ebx, esi
mov edi, eax
mov eax, dword [esp + 0x48]
jmp 0x41021b
mov edx, edi
jmp 0x410194
mov ebp, edi
jmp 0x40fe35
test ebp, ebp
je 0x410467
mov dword [esp + 0x90], edx
mov eax, edi
xor edx, edx
div ebp
lea edi, [eax - 1]
imul edi, ebp
mov ebp, dword [esp + 0xc0]
add edi, dword [ebp + 4]
shr edi, 2
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x90]
jmp 0x40fe1f
mov esi, edi
jmp 0x40fdf7
mov eax, ecx
mov edi, dword [esp + 0x30]
mov ecx, ebp
jmp 0x40fddf
lea esi, [ebx + 7]
shr esi, 3
mov ebx, esi
dec esi
nop
shr ebp, 2
shl esi, 3
sub ebp, esi
mov esi, dword [esp + 0x8c]
lea ebx, [esi + ebx - 1]
mov eax, ecx
mov edx, dword [esp + 0x8c]
xor ecx, ecx
xor edi, edi
jmp 0x40fde5
mov eax, ecx
mov edx, dword [esp + 0x8c]
xor ecx, ecx
xor ebx, ebx
xor edi, edi
xor ebp, ebp
jmp 0x40fde5
mov eax, dword [edx + 4]
mov edx, dword [edx]
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0xbc]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x8c]
add ecx, 4
mov dword [esp + 0x20], ecx
call fcn.00410480
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
mov ebx, dword [esp + 0xb8]
jmp 0x40fed9
mov edi, ebp
mov ebp, edx
mov edx, dword [esp + 0xb4]
jmp 0x40fc83
mov eax, dword [esp + 0xc0]
cmp dword [eax], 4
jne 0x41039b
mov eax, dword [esp + 0xbc]
cmp eax, 4
jne 0x410382
cmp ecx, 0x20
sbb eax, eax
movzx edx, byte [ebp]
mov ebx, 0x33
shl ebx, cl
and ebx, eax
not ebx
and ebx, edx
mov edx, 0x11
shl edx, cl
and edx, eax
or edx, ebx
mov byte [ebp], dl
add esp, 0xb0
ret
cmp ecx, 0x20
sbb eax, eax
movzx edx, byte [ebp]
mov ebx, 0x13
shl ebx, cl
and ebx, eax
or edx, ebx
mov byte [ebp], dl
jmp 0x41037b
cmp ecx, 0x20
sbb eax, eax
sbb edx, edx
mov ebx, dword [esp + 0x8c]
movzx ebx, byte [ebx]
and ebx, 3
or ebx, 0x10
movzx esi, byte [ebp]
mov edi, 0x33
shl edi, cl
and eax, edi
not eax
and eax, esi
shl ebx, cl
and ebx, edx
or ebx, eax
mov byte [ebp], bl
add esp, 0xb0
ret
mov eax, ebx
mov edi, ebp
xor edx, edx
xor ebx, ebx
xor esi, esi
xor ebp, ebp
jmp 0x40fc4d
lea eax, [0x4e8df3]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.00427930
mov dword [esp], ebp
call fcn.004435f0
mov eax, dword [esp + 4]
mov dword [esp + 0xac], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
call fcn.00428420
lea eax, [0x4e68b9]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.00428cc0
mov eax, dword [esp + 0xac]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00428cc0
call fcn.00428640
call fcn.00428490
lea eax, [0x4ea845]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00427930
call fcn.00426b00
call fcn.00426b00
nop
call fcn.00449350
jmp fcn.0040fbf0