Function at 0x415ca0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x49b44f
mov eax, dword fs:[0]
push eax
sub esp, 0x194
mov eax, dword [0x4be0a0]
xor eax, esp
mov dword [esp + 0x190], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4be0a0]
xor eax, esp
push eax
lea eax, [esp + 0x1a8]
mov dword fs:[0], eax
xor ebx, ebx
mov edi, ecx
mov dword [esp + 0x18], ebx
push 0xb
mov ebp, 0xf
push str.rule_digest
lea ecx, [esp + 0x80]
mov dword [esp + 0x28], edi
mov dword [esp + 0x98], ebp
mov dword [esp + 0x94], ebx
mov byte [esp + 0x84], bl
call fcn.00404770
lea edx, [esp + 0x78]
lea ecx, [esp + 0xc4]
mov dword [esp + 0x1b0], 1
call fcn.00413990
push eax
lea eax, [esp + 0x18c]
push eax
mov byte [esp + 0x1b8], 2
call fcn.0047559e
add esp, 8
mov esi, 0x10
cmp dword [esp + 0xdc], esi
jb 0x415d66
mov ecx, dword [esp + 0xc8]
push ecx
call fcn.0047d710
add esp, 4
mov dword [esp + 0xdc], ebp
mov dword [esp + 0xd8], ebx
mov byte [esp + 0xc8], bl
cmp dword [esp + 0x90], esi
jb 0x415d91
mov edx, dword [esp + 0x7c]
push edx
call fcn.0047d710
add esp, 4
mov esi, 0xfffffe00
and dword [esp + 0x4c], esi
mov dword [esp + 0x90], ebp
mov dword [esp + 0x8c], ebx
mov byte [esp + 0x7c], bl
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x18c]
push ecx
mov byte [esp + 0x1b8], 7
call fcn.00405a30
add esp, 8
test al, al
je 0x4163fc
cmp byte [esp + 0x4c], 6
jne 0x4163fc
and dword [esp + 0x64], esi
mov dword [esp + 0x68], ebx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
lea esi, [esp + 0x134]
mov byte [esp + 0x1b0], 9
call fcn.00461990
mov byte [esp + 0x1b0], 0xa
cmp dword [eax + 0x18], 8
mov dword [esp + 0x18], 2
jb 0x415e27
mov eax, dword [eax + 4]
jmp 0x415e2a
add eax, 4
lea esi, [esp + 0x5c]
mov ecx, eax
call fcn.004079e0
test al, al
je 0x415e44
cmp byte [esp + 0x64], 7
mov byte [esp + 0x17], bl
je 0x415e49
mov byte [esp + 0x17], 1
mov dword [esp + 0x1b0], 9
cmp dword [esp + 0x14c], 8
mov dword [esp + 0x18], ebx
jb 0x415e72
mov edx, dword [esp + 0x138]
push edx
call fcn.0047d710
add esp, 4
cmp byte [esp + 0x17], bl
je 0x415ea2
mov edx, 0x4a4aa4
mov eax, edi
call fcn.00402730
lea esi, [esp + 0x5c]
mov dword [esp + 0x18], 1
mov byte [esp + 0x1b0], 7
call fcn.0046941b
jmp 0x416422
mov esi, 7
xor ecx, ecx
mov dword [esp + 0x184], esi
mov dword [esp + 0x180], ebx
mov word [esp + 0x170], cx
lea eax, [esp + 0x44]
mov byte [esp + 0x1b0], 0xb
mov dword [esp + 0x1c], ebx
call fcn.00469dde
test eax, eax
jbe 0x4162d1
mov edx, dword [esp + 0x1c]
push edx
lea eax, [esp + 0x48]
push eax
call fcn.00469e2e
push eax
lea ecx, [esp + 0xb0]
push ecx
call fcn.00469282
mov byte [esp + 0x1b0], 0xc
push 0x15
push str.name:_desc:
lea ecx, [esp + 0x2c]
mov dword [esp + 0x44], ebp
mov dword [esp + 0x40], ebx
mov byte [esp + 0x30], bl
call fcn.00404770
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0xb0]
push eax
mov byte [esp + 0x1b8], 0xd
call fcn.00412dd0
add esp, 8
test al, al
mov esi, 0x10
sete byte [esp + 0x17]
mov byte [esp + 0x1b0], 0xc
cmp dword [esp + 0x3c], esi
jb 0x415f61
mov ecx, dword [esp + 0x28]
push ecx
call fcn.0047d710
add esp, 4
cmp byte [esp + 0x17], bl
je 0x415f80
lea esi, [esp + 0xac]
mov byte [esp + 0x1b0], 0xb
call fcn.0046941b
jmp 0x4162b2
push 0x4a2058
lea edx, [esp + 0xb0]
push edx
mov ecx, 0x4a205c
call fcn.0046a0e5
lea ecx, [esp + 0x24]
push ecx
push eax
call fcn.00469609
mov byte [esp + 0x1b0], 0xe
cmp dword [eax + 0x18], esi
jb 0x415fb4
mov eax, dword [eax + 4]
jmp 0x415fb7
add eax, 4
push eax
lea edx, [esp + 0x98]
push edx
mov edi, 0x4a4ad0
call fcn.0045e66b
add esp, 8
mov edi, 0x10
mov byte [esp + 0x1b0], 0x10
cmp dword [esp + 0x3c], edi
jb 0x415fed
mov eax, dword [esp + 0x28]
push eax
call fcn.0047d710
add esp, 4
mov ecx, dword [esp + 0xa4]
mov esi, dword [esp + 0xa0]
sub ecx, esi
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], ebx
mov byte [esp + 0x28], bl
cmp ecx, 2
jne 0x41628e
push 0xffffffffffffffff
push ebx
push esi
lea ecx, [esp + 0x15c]
mov dword [esp + 0x174], ebp
mov dword [esp + 0x170], ebx
mov byte [esp + 0x160], bl
call fcn.004040f0
mov byte [esp + 0x1b0], 0x11
mov ecx, dword [esp + 0xa4]
sub ecx, dword [esp + 0xa0]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
ja 0x41607d
call fcn.0047db04
mov eax, dword [esp + 0xa0]
push 0xffffffffffffffff
add eax, 0x1c
push ebx
push eax
lea ecx, [esp + 0x140]
mov dword [esp + 0x158], ebp
mov dword [esp + 0x154], ebx
mov byte [esp + 0x144], bl
call fcn.004040f0
mov byte [esp + 0x1b0], 0x12
mov eax, dword [esp + 0x168]
mov edx, dword [esp + 0x154]
mov ecx, edx
cmp eax, edi
jae 0x41631e
lea ecx, [esp + 0x154]
mov eax, ecx
mov edx, dword [esp + 0x164]
push eax
lea eax, [esp + 0x60]
add ecx, edx
push eax
call fcn.0046a0e5
push eax
lea ecx, [esp + 0x100]
push ecx
call fcn.00469282
mov byte [esp + 0x1b0], 0x13
cmp byte [esp + 0x104], 7
jne 0x41621e
lea edx, [esp + 0xfc]
push edx
lea eax, [esp + 0x138]
call fcn.0046a3d0
push eax
lea eax, [esp + 0x28]
push eax
call fcn.00469282
push str.value_bool
lea ecx, [esp + 0xe4]
mov byte [esp + 0x1b4], 0x14
call fcn.00403d80
lea ecx, [esp + 0x24]
push ecx
lea edi, [esp + 0xe4]
mov byte [esp + 0x1b4], 0x15
call fcn.00405b60
add esp, 4
cmp eax, 1
mov ecx, edi
sete byte [esp + 0x17]
mov byte [esp + 0x1b0], 0x14
call fcn.00403df0
cmp byte [esp + 0x17], bl
je 0x416208
lea edx, [esp + 0x118]
push edx
push ecx
lea eax, [esp + 0xb4]
push eax
mov edx, str.desc
call fcn.0046a3b0
add esp, 4
push eax
call fcn.00469609
push eax
lea ecx, [esp + 0xe4]
mov byte [esp + 0x1b4], 0x16
call fcn.00403040
add esp, 4
push 0xffffffffffffffff
push ebx
push eax
lea esi, [esp + 0x178]
mov byte [esp + 0x1bc], 0x17
call fcn.00406b80
lea esi, [esp + 0xe0]
call fcn.00405980
lea ecx, [esp + 0x118]
mov byte [esp + 0x1b0], 0x14
call fcn.00403df0
lea ecx, [esp + 0x16c]
push ecx
mov edx, 0x4a4ad4
call fcn.00406b50
lea esi, [esp + 0x24]
mov byte [esp + 0x1b0], 0x13
call fcn.0046941b
mov edi, 0x10
lea esi, [esp + 0xfc]
mov byte [esp + 0x1b0], 0x12
call fcn.0046941b
cmp dword [esp + 0x14c], edi
jb 0x41624b
mov edx, dword [esp + 0x138]
push edx
call fcn.0047d710
add esp, 4
mov dword [esp + 0x14c], ebp
mov dword [esp + 0x148], ebx
mov byte [esp + 0x138], bl
cmp dword [esp + 0x168], edi
jb 0x416279
mov eax, dword [esp + 0x154]
push eax
call fcn.0047d710
add esp, 4
mov dword [esp + 0x168], ebp
mov dword [esp + 0x164], ebx
mov byte [esp + 0x154], bl
lea esi, [esp + 0x94]
call fcn.00403e20
lea esi, [esp + 0xac]
mov byte [esp + 0x1b0], 0xb
call fcn.0046941b
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
inc esi
lea eax, [esp + 0x44]
mov dword [esp + 0x1c], esi
call fcn.00469dde
cmp esi, eax
jb 0x415edc
mov esi, 7
cmp dword [esp + 0x180], ebx
jne 0x416325
push 6
mov dword [esp + 0x150], esi
xor ecx, ecx
push 0x4a4adc
lea esi, [esp + 0x13c]
mov dword [esp + 0x150], ebx
mov word [esp + 0x140], cx
call fcn.004028e0
mov eax, esi
mov byte [esp + 0x1b0], 0x18
mov dword [esp + 0x18], 4
mov esi, 7
jmp 0x41632c
mov eax, edx
jmp 0x4160d5
lea eax, [esp + 0x16c]
push 0xffffffffffffffff
push ebx
xor edx, edx
push eax
mov dword [edi + 0x18], esi
mov dword [edi + 0x14], ebx
mov eax, edi
mov word [edi + 4], dx
call fcn.00402830
mov eax, dword [esp + 0x18]
or eax, 1
mov dword [esp + 0x18], eax
mov dword [esp + 0x1b0], 0xb
test al, 4
je 0x416394
and dword [esp + 0x18], 0xfffffffb
cmp dword [esp + 0x14c], 8
jb 0x41637c
mov eax, dword [esp + 0x138]
push eax
call fcn.0047d710
add esp, 4
xor ecx, ecx
mov dword [esp + 0x14c], esi
mov dword [esp + 0x148], ebx
mov word [esp + 0x138], cx
cmp dword [esp + 0x184], 8
jb 0x4163ae
mov edx, dword [esp + 0x170]
push edx
call fcn.0047d710
add esp, 4
mov dword [esp + 0x184], esi
xor eax, eax
lea esi, [esp + 0x5c]
mov dword [esp + 0x180], ebx
mov word [esp + 0x170], ax
mov byte [esp + 0x1b0], 7
call fcn.0046941b
lea esi, [esp + 0x44]
mov byte [esp + 0x1b0], 5
call fcn.0046941b
cmp dword [esp + 0x1a0], 0x10
jb 0x41644d
mov ecx, dword [esp + 0x18c]
push ecx
jmp 0x416445
push 8
xor edx, edx
mov dword [edi + 0x18], 7
mov dword [edi + 0x14], ebx
push 0x4a4a90
mov esi, edi
mov word [edi + 4], dx
call fcn.004028e0
mov dword [esp + 0x18], 1
lea esi, [esp + 0x44]
mov byte [esp + 0x1b0], 5
call fcn.0046941b
cmp dword [esp + 0x1a0], 0x10
jb 0x41644d
mov eax, dword [esp + 0x18c]
push eax
call fcn.0047d710
add esp, 4
mov eax, edi
mov ecx, dword [esp + 0x1a8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x190]
xor ecx, esp
call fcn.0047d444
add esp, 0x1a0
ret