Function at 0x41caf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x24]
cmp eax, dword [ecx + 8]
jbe 0x41d440
sub esp, 0xa4
mov ecx, dword [0x641160]
mov edx, dword [0x641164]
mov dword [0x641168], ecx
mov dword [0x64116c], edx
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx + 0xe8]
mov ebx, dword [esp + 0xac]
sub ebx, edx
mov dword [esp + 0x60], ebx
mov edx, dword [ecx + 0xec]
mov ebp, dword [esp + 0xb0]
sbb ebp, edx
mov dword [esp + 0x64], ebp
test ebx, ebx
seta dl
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
xchg edi, ebx
setg bl
xchg edi, ebx
and edx, esi
or edi, edx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x41cb80
mov edx, 0x3fd00000
xor eax, eax
jmp 0x41cc5f
xchg edi, eax
mov byte [esp + 0x2b], al
xchg edi, eax
mov eax, ebx
mov edx, dword [esp + 0xb4]
mul edx
mov dword [esp + 0x94], edx
mov dword [esp + 0x90], eax
mov esi, dword [ecx + 0xc8]
mov edi, dword [ecx + 0xcc]
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.00449e00
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x88], edx
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0xb4]
imul ebx, ebp
mov edi, dword [esp + 0x94]
add ebx, edi
sar ebp, 0x1f
mov esi, dword [esp + 0x60]
imul ebp, esi
add ebx, ebp
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x90]
mov dword [esp], ebx
call fcn.00449e00
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
call fcn.00448b50
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [esp + 4], 0x3fd00000
mov dword [esp], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
call fcn.00448050
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x64]
movzx edi, byte [esp + 0x2b]
mov eax, ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x94], edx
mov esi, dword [ecx + 0x18]
cmp dword [ecx + 0x70], esi
xchg esi, ebx
setbe bl
xchg esi, ebx
mov edx, dword [ecx + 0x74]
mov ebp, dword [ecx + 0x1c]
cmp edx, ebp
sete dl
xchg ebp, ebx
setb bl
xchg ebp, ebx
and esi, edx
or ebp, esi
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x41d423
mov dword [esp + 0x90], eax
xchg edi, eax
test al, al
xchg edi, eax
jne 0x41cca9
xor edx, edx
xor ebx, ebx
jmp 0x41cd51
mov eax, ebx
mov edx, dword [esp + 0xb4]
mul edx
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], eax
mov esi, dword [ecx + 0xe0]
mov edi, dword [ecx + 0xe4]
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.00449e00
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x80], edx
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0xb4]
imul ebx, ebp
mov esi, dword [esp + 0x8c]
add ebx, esi
sar ebp, 0x1f
mov esi, dword [esp + 0x60]
imul esi, ebp
add ebx, esi
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
call fcn.00449e00
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
call fcn.00448b50
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], ebx
lea eax, [ecx + 0xa8]
mov dword [esp + 0xa0], eax
mov dword [esp], eax
call fcn.00401cc0
mov eax, dword [esp + 4]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xa8]
lea ebx, [edx + 0xb0]
mov dword [esp + 0x9c], ebx
mov dword [esp], ebx
call fcn.00401cc0
mov eax, dword [esp + 4]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x40]
add ecx, eax
mov dword [esp + 0x84], ecx
mov ebx, dword [esp + 8]
mov dword [esp + 0x44], ebx
mov ebp, dword [esp + 0xa8]
lea esi, [ebp + 0xb8]
mov dword [esp + 0x98], esi
mov dword [esp], esi
call fcn.00401cc0
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x84]
add eax, ecx
mov dword [esp + 0x5c], eax
mov ebx, dword [esp + 0xa8]
mov ebp, dword [ebx + 0x70]
mov esi, dword [ebx + 0x18]
sub ebp, esi
mov esi, dword [ebx + 0x74]
mov edi, dword [ebx + 0x1c]
sbb esi, edi
mov edi, dword [esp + 8]
mov dword [esp + 0x4c], edi
mov dword [esp + 4], esi
mov dword [esp], ebp
call fcn.00449fc0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x94]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x90]
mov dword [esp], ebx
mov ebp, dword [esp + 0x8c]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0x88]
mov dword [esp + 8], ebp
call fcn.00448050
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x80]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.004486d0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
add eax, ecx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
adc eax, ecx
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x84]
add ecx, edx
mov ecx, dword [esp + 0x4c]
adc eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x88], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00449e00
mov eax, dword [esp + 0xc]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x80], ecx
mov dword [esp + 4], 0x3ff00000
mov dword [esp], 0
mov edx, dword [esp + 0x94]
xor edx, 0x80000000
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 8], edx
call fcn.00448050
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x84]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x80]
mov dword [esp], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.004486d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x88]
mov dword [esp], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.00448b50
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp + 0x8c], ebx
mov ebp, dword [edx + 0x24]
mov dword [esp + 0x88], ebp
lea esi, [edx + 0x28]
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0x3ff00000
call fcn.0041e360
movzx eax, byte [esp + 0x24]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0xa8]
mov dword [ebx + 0x20], ecx
mov dword [ebx + 0x24], edx
test al, al
jne 0x41cfe4
mov dword [ebx + 0x20], 0
mov dword [ebx + 0x24], 0
mov ecx, dword [0x640c30]
test ecx, ecx
jle 0x41d406
mov byte [esp + 0x2a], al
call fcn.004352c0
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov dword [esp + 0xc], 0x40590000
mov dword [esp + 8], 0
call fcn.004486d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00449e50
mov eax, dword [esp + 8]
mov dword [esp + 0x78], eax
mov dword [esp + 4], 0x40390000
mov dword [esp], 0
call fcn.00449e50
mov eax, dword [esp + 8]
mov dword [esp + 0x74], eax
call fcn.004352c0
lea eax, [0x53cbfc]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00435ef0
mov eax, dword [esp + 0x78]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435cf0
lea eax, [0x53c9e8]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00435ef0
mov eax, dword [esp + 0x74]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435cf0
lea eax, [0x53d5e8]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00435ef0
call fcn.00435330
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.00401cc0
mov eax, dword [esp + 8]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0x9c]
mov dword [esp], edx
call fcn.00401cc0
mov eax, dword [esp + 8]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x98]
mov dword [esp], edx
call fcn.00401cc0
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x80]
mov dword [esp + 0x94], ecx
mov edx, dword [eax + 0x88]
mov dword [esp + 0x90], edx
add ecx, edx
mov dword [esp + 0x84], ecx
mov ebp, dword [eax + 0x98]
mov dword [esp + 0x80], ebp
add ebp, ecx
mov dword [esp + 0x7c], ebp
mov edi, dword [eax + 0x84]
mov dword [esp + 0x70], edi
mov ebp, dword [eax + 0x8c]
mov dword [esp + 0x6c], ebp
mov eax, dword [eax + 0x9c]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x2c], ecx
call fcn.004352c0
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00435cf0
lea eax, [0x53c1c9]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00435ef0
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00435cf0
lea eax, [0x53c1c9]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00435ef0
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00435cf0
lea eax, [0x53cf65]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00435ef0
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
add eax, ecx
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
adc eax, ecx
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
add ecx, edx
mov ecx, dword [esp + 0x68]
adc ecx, eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00435b90
lea eax, [0x53cf5c]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00435ef0
call fcn.00435330
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x70]
mov dword [esp + 0x94], ecx
mov edx, dword [eax + 0x60]
mov dword [esp + 0x90], edx
sub ecx, edx
mov dword [esp + 0x84], ecx
mov ebp, dword [eax + 0x18]
mov dword [esp + 0x80], ebp
mov esi, dword [eax + 0x1c]
mov dword [esp + 0x7c], esi
mov edi, dword [eax + 0x74]
mov dword [esp + 0x70], edi
mov eax, dword [eax + 0x64]
mov dword [esp + 0x6c], eax
call fcn.004352c0
lea eax, [0x53c3b7]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00435ef0
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00435b90
lea eax, [0x53c745]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00435ef0
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
call fcn.00435b90
lea eax, [0x53da08]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00435ef0
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
sub eax, ecx
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
sbb eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00435cf0
lea eax, [0x53db04]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00435ef0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
call fcn.00435580
lea eax, [0x53c1c7]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00435ef0
call fcn.00435330
movzx eax, byte [esp + 0x2a]
test al, al
jne 0x41d3c2
call fcn.004352c0
lea eax, [0x53f31b]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00435ef0
call fcn.00435330
call fcn.004352c0
call fcn.004354e0
call fcn.00435330
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
nop
movzx ecx, byte [eax + 0x87]
lea edx, [ecx - 1]
mov byte [eax + 0x87], dl
cmp cl, 1
jne 0x41d406
nop
lea eax, [0x6408ac]
mov dword [esp], eax
call fcn.00409370
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
add esp, 0xa4
ret
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
add esp, 0xa4
ret
call fcn.0045dcf0
jmp fcn.0041caf0