Function at 0x409950
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x40a12b
sub esp, 0x44
cmp dword [0x54f25c], 2
je 0x40a114
mov edx, dword [esp + 0x48]
test edx, edx
je 0x40a07e
movzx ebx, byte [0x54f540]
test bl, bl
je 0x409a56
mov ebx, dword [0x54f54c]
test ebx, ebx
je 0x4099fe
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x4099d7
test edx, 7
jne 0x4099b2
mov eax, 8
jmp 0x4099dc
test edx, 3
jne 0x4099c1
mov eax, 4
jmp 0x4099dc
test edx, 1
jne 0x4099d0
mov eax, 2
jmp 0x4099dc
mov eax, 1
jmp 0x4099dc
mov eax, 0x10
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [0x550be0]
mov dword [esp + 8], eax
call fcn.0040a520
mov eax, dword [esp + 0xc]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
movzx ebx, byte [0x54f460]
test bl, bl
je 0x409a56
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x50]
cmp dword [0x54f464], ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov ebx, dword [ebx + 0x54]
cmp dword [0x54f468], ebx
sete bl
and ebx, ebp
test bl, bl
je 0x409a56
mov ebx, dword [0x54f46c]
add ebx, 1
mov ebp, dword [0x54f470]
mov dword [0x54f46c], ebx
adc ebp, 0
mov dword [0x54f470], ebp
mov ebx, dword [0x54f254]
test ebx, ebx
je 0x409ab0
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x18]
mov ebp, dword [ebp + 0x4c]
test ebp, ebp
jne 0x409a79
mov ebp, ebx
mov ebx, dword [ebp + 0xe4]
sub ebx, edx
mov esi, dword [ebp + 0xe8]
mov dword [ebp + 0xe4], ebx
sbb esi, 0
mov dword [ebp + 0xe8], esi
test esi, esi
jge 0x409ab2
mov dword [esp + 0x3c], ebp
mov dword [esp], ebp
call fcn.00416f00
mov edx, dword [esp + 0x48]
mov ebp, dword [esp + 0x3c]
jmp 0x409ab2
xor ebp, ebp
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov esi, dword [ebx + 0x18]
nop
inc dword [esi + 0x78]
mov esi, dword [ebx + 0x18]
test byte [ebx], al
mov ebx, dword [esi + 0x68]
test ebx, ebx
jne 0x40a0fe
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
cmp dword [esi + 0x2c], ebx
je 0x40a0e8
mov dword [esi + 0x68], 1
mov ebx, dword [esi + 0x54]
test ebx, ebx
je 0x409aff
mov ebx, dword [ebx + 0x30]
jmp 0x409b05
mov ebx, dword [0x54f270]
test ebx, ebx
je 0x40a0d2
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x409b25
mov eax, ebp
mov ebp, dword [edi + 4]
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
jmp 0x409b2c
mov eax, ebp
mov ebp, 1
mov dword [esp + 0x34], esi
mov dword [esp + 0x20], ebx
xchg ebp, eax
mov byte [esp + 0x16], al
xchg ebp, eax
mov dword [esp + 0x40], eax
cmp edx, 0x8000
ja 0x409d84
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x409c6d
cmp edx, 0x10
jae 0x409c6d
mov ecx, dword [ebx + 0xc]
test edx, 7
jne 0x409b70
add ecx, 7
and ecx, 0xfffffff8
jmp 0x409b9a
cmp edx, 0xc
jne 0x409b7d
add ecx, 7
and ecx, 0xfffffff8
jmp 0x409b9a
test edx, 3
jne 0x409b8d
add ecx, 3
and ecx, 0xfffffffc
jmp 0x409b9a
test edx, 1
jne 0x409b9a
nop
inc ecx
and ecx, 0xfffffffe
lea eax, [ecx + edx]
cmp eax, 0x10
ja 0x409beb
mov edi, dword [ebx + 8]
test edi, edi
je 0x409beb
add ecx, edi
mov dword [ebx + 0xc], eax
inc dword [ebx + 0x10]
mov dword [esi + 0x68], 0
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov edx, dword [esi + 0x78]
lea ebx, [edx - 1]
mov dword [esi + 0x78], ebx
cmp edx, 1
jne 0x409be3
movzx edx, byte [eax + 0x65]
test dl, dl
je 0x409be3
mov dword [eax + 8], 0xfffffade
mov dword [esp + 0x54], ecx
add esp, 0x44
ret
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.00409620
mov eax, dword [esp + 4]
test eax, eax
je 0x409c0a
mov ecx, dword [esp + 0x18]
xor edx, edx
jmp 0x409c28
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov byte [esp + 4], 5
call fcn.00409730
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x20]
cmp dword [ebp + 0xc], ebx
ja 0x409c57
mov esi, dword [ebp + 8]
test esi, esi
jne 0x409c61
mov esi, eax
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], ebx
jmp 0x409c63
mov esi, eax
mov eax, 0x10
jmp 0x409d7d
cmp edx, 0x3f8
ja 0x409c95
mov ecx, esi
lea esi, [edx + 7]
shr esi, 3
cmp esi, 0x81
jae 0x40a0c6
lea edi, [0x51b080]
movzx esi, byte [edi + esi]
jmp 0x409cb6
mov ecx, esi
lea esi, [edx - 0x381]
shr esi, 7
cmp esi, 0xf9
jae 0x40a0ba
lea edi, str._______________________....______0001123333333333444444444455666677777888888888889999999999::::::___________________________________________________________________________AAAAAAAAAAAAAAAAAAAAABBBBBBBBBBBCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
movzx esi, byte [edi + esi]
xchg esi, eax
movzx edi, al
xchg esi, eax
cmp edi, 0x44
jae 0x40a0ae
lea edx, [0x51b1c0]
movzx edx, word [edx + edi*2]
nop
shl esi, 1
xchg ebp, eax
movzx edi, al
xchg ebp, eax
or esi, edi
xchg esi, eax
movzx edi, al
xchg esi, eax
cmp edi, 0x88
jae 0x40a0a2
xchg esi, eax
mov byte [esp + 0x14], al
xchg esi, eax
mov dword [esp + 0x28], edx
mov eax, dword [ebx + edi*4 + 0x14]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.00409620
mov eax, dword [esp + 4]
test eax, eax
je 0x409d13
mov ecx, dword [esp + 0x18]
xor edx, edx
jmp 0x409d35
mov eax, dword [esp + 0x20]
mov dword [esp], eax
movzx ecx, byte [esp + 0x14]
mov byte [esp + 4], cl
call fcn.00409730
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
movzx ebx, byte [esp + 0x50]
test bl, bl
je 0x409d6f
movzx ebx, byte [ecx + 0x3c]
test bl, bl
je 0x409d6f
mov dword [esp + 0x38], eax
mov byte [esp + 0x15], dl
mov dword [esp + 0x24], ecx
mov dword [esp], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 4], ecx
call fcn.00456b10
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
movzx edx, byte [esp + 0x15]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x20]
mov esi, eax
mov eax, dword [esp + 0x28]
xor edi, edi
jmp 0x409e16
mov dword [esp], ebx
mov dword [esp + 4], edx
xchg ebp, eax
mov byte [esp + 8], al
xchg ebp, eax
call fcn.004102a0
mov eax, dword [esp + 0xc]
mov dword [eax + 0x18], 1
mov word [eax + 0x38], 1
mov ecx, dword [eax + 0x40]
mov edx, dword [eax + 0xc]
movzx ebx, byte [esp + 0x50]
test bl, bl
je 0x409df4
movzx ebx, byte [eax + 0x3c]
test bl, bl
je 0x409df4
movzx ebx, byte [esp + 0x16]
test bl, bl
jne 0x409df0
mov dword [esp + 0x18], eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x38], edx
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00456b10
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x38]
movzx ebx, byte [esp + 0x16]
mov ebp, ebx
jmp 0x409dfb
movzx ebp, byte [esp + 0x16]
xor ebx, ebx
mov ebp, dword [esp + 0x20]
mov edi, ebx
mov esi, edx
mov ebx, dword [esp + 0x48]
mov edx, 1
mov ebx, ecx
mov ecx, eax
mov eax, ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x38], esi
mov dword [esp + 0x28], eax
mov byte [esp + 0x15], dl
xchg edi, eax
mov byte [esp + 0x17], al
xchg edi, eax
mov dword [esp + 0x18], ecx
movzx edx, byte [esp + 0x16]
test dl, dl
je 0x409e41
mov dword [esp + 0x2c], eax
xor eax, eax
mov dword [esp + 0x1c], eax
jmp 0x409e8d
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xc], edx
call fcn.0040e8a0
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [esp + 0x48]
cmp edx, ecx
jbe 0x409e7d
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x409e77
mov ebp, edx
sub edx, ecx
lea ecx, [edx + ebx]
jmp 0x409e82
mov ebp, edx
xor ecx, ecx
jmp 0x409e82
mov ecx, dword [eax + 4]
mov ebp, edx
mov edx, dword [esp + 0x20]
add dword [edx + 4], ecx
mov dword [esp + 0x1c], ecx
call fcn.004560b0
mov eax, dword [0x54f25c]
test eax, eax
je 0x409ec0
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x18]
mov dword [esp], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xc], edx
call fcn.00419bf0
mov eax, dword [0x54f1f4]
test eax, eax
jle 0x409f05
cmp eax, 1
je 0x409ee3
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [esp + 0x28]
cmp edx, ecx
jae 0x409ee7
sub ecx, edx
mov dword [eax], ecx
jmp 0x409f09
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov ecx, dword [esp + 0x38]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0040a2b0
mov edx, dword [esp + 0x28]
jmp 0x409f09
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x34]
mov dword [eax + 0x68], 0
nop
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov ebx, dword [eax + 0x78]
lea ebp, [ebx - 1]
mov dword [eax + 0x78], ebp
cmp ebx, 1
jne 0x409f3f
movzx eax, byte [ecx + 0x65]
test al, al
je 0x409f3f
mov dword [ecx + 8], 0xfffffade
movzx eax, byte [esp + 0x17]
test al, al
je 0x409f69
movzx eax, byte [esp + 0x16]
test al, al
je 0x40a08c
mov dword [esp], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.0040a140
mov edx, dword [esp + 0x28]
movzx eax, byte [0x54f540]
test al, al
je 0x409fed
mov eax, dword [0x54f544]
test eax, eax
je 0x409f9a
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], edx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 8], ecx
call fcn.00428f80
mov edx, dword [esp + 0x28]
movzx eax, byte [0x54f460]
test al, al
je 0x409fed
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x50]
cmp dword [0x54f464], ecx
sete cl
mov eax, dword [eax + 0x54]
cmp dword [0x54f468], eax
sete al
and eax, ecx
test al, al
je 0x409fed
mov eax, dword [0x54f474]
add eax, edx
mov ecx, dword [0x54f478]
mov dword [0x54f474], eax
adc ecx, 0
mov dword [0x54f478], ecx
mov eax, dword [esp + 0x40]
test eax, eax
je 0x40a018
mov ecx, dword [eax + 0xe4]
mov ebx, dword [esp + 0x48]
sub edx, ebx
sub ecx, edx
mov edx, dword [eax + 0xe8]
mov dword [eax + 0xe4], ecx
sbb edx, 0
mov dword [eax + 0xe8], edx
movzx eax, byte [esp + 0x15]
test al, al
je 0x40a072
mov dword [esp], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
call fcn.00412960
movzx eax, byte [esp + 0x10]
test al, al
je 0x40a072
mov dword [esp], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
call fcn.00412ac0
mov eax, dword [esp + 0x38]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
lea eax, [0x54f2dc]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
lea eax, [0x4a3c30]
mov dword [esp], eax
mov dword [esp + 4], 0x31
call fcn.00430980
mov eax, edi
mov ecx, 0x88
call fcn.004564b0
mov eax, edi
mov ecx, 0x44
call fcn.004564b0
mov eax, esi
mov ecx, 0xf9
call fcn.004564c0
mov eax, esi
mov ecx, 0x81
call fcn.004564c0
lea eax, [0x4a4018]
mov dword [esp], eax
mov dword [esp + 4], 0x34
call fcn.00430980
lea eax, [0x49de67]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.00430980
lea eax, [0x49be7b]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.00430980
lea eax, [0x4a3e4d]
mov dword [esp], eax
mov dword [esp + 4], 0x32
call fcn.00430980
nop
call fcn.00455030
jmp fcn.00409950