Function at 0x41ca90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x24]
cmp eax, dword [ecx + 8]
jbe 0x41d3e0
sub esp, 0xa4
mov ecx, dword [0x67e980]
mov edx, dword [0x67e984]
mov dword [0x67e988], ecx
mov dword [0x67e98c], edx
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx + 0xe8]
mov ebx, dword [esp + 0xac]
sub ebx, edx
mov dword [esp + 0x60], ebx
mov edx, dword [ecx + 0xec]
mov ebp, dword [esp + 0xb0]
sbb ebp, edx
mov dword [esp + 0x64], ebp
test ebx, ebx
seta dl
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
xchg edi, ebx
setg bl
xchg edi, ebx
and edx, esi
or edi, edx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x41cb20
mov edx, 0x3fd00000
xor eax, eax
jmp 0x41cbff
xchg edi, eax
mov byte [esp + 0x2b], al
xchg edi, eax
mov eax, ebx
mov edx, dword [esp + 0xb4]
mul edx
mov dword [esp + 0x94], edx
mov dword [esp + 0x90], eax
mov esi, dword [ecx + 0xc8]
mov edi, dword [ecx + 0xcc]
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.00449d90
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x88], edx
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0xb4]
imul ebx, ebp
mov edi, dword [esp + 0x94]
add ebx, edi
sar ebp, 0x1f
mov esi, dword [esp + 0x60]
imul ebp, esi
add ebx, ebp
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x90]
mov dword [esp], ebx
call fcn.00449d90
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
call fcn.00448ae0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [esp + 4], 0x3fd00000
mov dword [esp], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
call fcn.00447fe0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x64]
movzx edi, byte [esp + 0x2b]
mov eax, ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x94], edx
mov esi, dword [ecx + 0x18]
cmp dword [ecx + 0x70], esi
xchg esi, ebx
setbe bl
xchg esi, ebx
mov edx, dword [ecx + 0x74]
mov ebp, dword [ecx + 0x1c]
cmp edx, ebp
sete dl
xchg ebp, ebx
setb bl
xchg ebp, ebx
and esi, edx
or ebp, esi
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x41d3c3
mov dword [esp + 0x90], eax
xchg edi, eax
test al, al
xchg edi, eax
jne 0x41cc49
xor edx, edx
xor ebx, ebx
jmp 0x41ccf1
mov eax, ebx
mov edx, dword [esp + 0xb4]
mul edx
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], eax
mov esi, dword [ecx + 0xe0]
mov edi, dword [ecx + 0xe4]
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.00449d90
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x80], edx
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0xb4]
imul ebx, ebp
mov esi, dword [esp + 0x8c]
add ebx, esi
sar ebp, 0x1f
mov esi, dword [esp + 0x60]
imul esi, ebp
add ebx, esi
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
call fcn.00449d90
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
call fcn.00448ae0
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], ebx
lea eax, [ecx + 0xa8]
mov dword [esp + 0xa0], eax
mov dword [esp], eax
call fcn.00401cc0
mov eax, dword [esp + 4]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xa8]
lea ebx, [edx + 0xb0]
mov dword [esp + 0x9c], ebx
mov dword [esp], ebx
call fcn.00401cc0
mov eax, dword [esp + 4]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x40]
add ecx, eax
mov dword [esp + 0x84], ecx
mov ebx, dword [esp + 8]
mov dword [esp + 0x44], ebx
mov ebp, dword [esp + 0xa8]
lea esi, [ebp + 0xb8]
mov dword [esp + 0x98], esi
mov dword [esp], esi
call fcn.00401cc0
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x84]
add eax, ecx
mov dword [esp + 0x5c], eax
mov ebx, dword [esp + 0xa8]
mov ebp, dword [ebx + 0x70]
mov esi, dword [ebx + 0x18]
sub ebp, esi
mov esi, dword [ebx + 0x74]
mov edi, dword [ebx + 0x1c]
sbb esi, edi
mov edi, dword [esp + 8]
mov dword [esp + 0x4c], edi
mov dword [esp + 4], esi
mov dword [esp], ebp
call fcn.00449f50
mov eax, dword [esp + 0xc]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x94]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x90]
mov dword [esp], ebx
mov ebp, dword [esp + 0x8c]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0x88]
mov dword [esp + 8], ebp
call fcn.00447fe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x80]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.00448660
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
add eax, ecx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
adc eax, ecx
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x84]
add ecx, edx
mov ecx, dword [esp + 0x4c]
adc eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x88], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00449d90
mov eax, dword [esp + 0xc]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x80], ecx
mov dword [esp + 4], 0x3ff00000
mov dword [esp], 0
mov edx, dword [esp + 0x94]
xor edx, 0x80000000
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 8], edx
call fcn.00447fe0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x84]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x80]
mov dword [esp], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.00448660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x88]
mov dword [esp], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.00448ae0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp + 0x8c], ebx
mov ebp, dword [edx + 0x24]
mov dword [esp + 0x88], ebp
lea esi, [edx + 0x28]
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0x3ff00000
call fcn.0041e300
movzx eax, byte [esp + 0x24]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0xa8]
mov dword [ebx + 0x20], ecx
mov dword [ebx + 0x24], edx
test al, al
jne 0x41cf84
mov dword [ebx + 0x20], 0
mov dword [ebx + 0x24], 0
mov ecx, dword [0x67e450]
test ecx, ecx
jle 0x41d3a6
mov byte [esp + 0x2a], al
call fcn.00435250
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov dword [esp + 0xc], 0x40590000
mov dword [esp + 8], 0
call fcn.00448660
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00449de0
mov eax, dword [esp + 8]
mov dword [esp + 0x78], eax
mov dword [esp + 4], 0x40390000
mov dword [esp], 0
call fcn.00449de0
mov eax, dword [esp + 8]
mov dword [esp + 0x74], eax
call fcn.00435250
lea eax, [0x55cf0d]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00435e80
mov eax, dword [esp + 0x78]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435c80
lea eax, [0x55ccac]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00435e80
mov eax, dword [esp + 0x74]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00435c80
lea eax, [0x55d9e8]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00435e80
call fcn.004352c0
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.00401cc0
mov eax, dword [esp + 8]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0x9c]
mov dword [esp], edx
call fcn.00401cc0
mov eax, dword [esp + 8]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x98]
mov dword [esp], edx
call fcn.00401cc0
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x80]
mov dword [esp + 0x94], ecx
mov edx, dword [eax + 0x88]
mov dword [esp + 0x90], edx
add ecx, edx
mov dword [esp + 0x84], ecx
mov ebp, dword [eax + 0x98]
mov dword [esp + 0x80], ebp
add ebp, ecx
mov dword [esp + 0x7c], ebp
mov edi, dword [eax + 0x84]
mov dword [esp + 0x70], edi
mov ebp, dword [eax + 0x8c]
mov dword [esp + 0x6c], ebp
mov eax, dword [eax + 0x9c]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x2c], ecx
call fcn.00435250
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00435c80
lea eax, [0x55c26d]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00435e80
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00435c80
lea eax, [0x55c26d]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00435e80
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00435c80
lea eax, [0x55d2e2]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00435e80
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
add eax, ecx
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
adc eax, ecx
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
add ecx, edx
mov ecx, dword [esp + 0x68]
adc ecx, eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.00435b20
lea eax, [0x55d2d9]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00435e80
call fcn.004352c0
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x70]
mov dword [esp + 0x94], ecx
mov edx, dword [eax + 0x60]
mov dword [esp + 0x90], edx
sub ecx, edx
mov dword [esp + 0x84], ecx
mov ebp, dword [eax + 0x18]
mov dword [esp + 0x80], ebp
mov esi, dword [eax + 0x1c]
mov dword [esp + 0x7c], esi
mov edi, dword [eax + 0x74]
mov dword [esp + 0x70], edi
mov eax, dword [eax + 0x64]
mov dword [esp + 0x6c], eax
call fcn.00435250
lea eax, [0x55c52f]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00435e80
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.00435b20
lea eax, [0x55c9c2]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00435e80
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
call fcn.00435b20
lea eax, [0x55de3f]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00435e80
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
sub eax, ecx
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
sbb eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00435c80
lea eax, [0x55df47]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00435e80
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
call fcn.00435510
lea eax, [0x55c26b]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00435e80
call fcn.004352c0
movzx eax, byte [esp + 0x2a]
test al, al
jne 0x41d362
call fcn.00435250
lea eax, [0x55f875]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00435e80
call fcn.004352c0
call fcn.00435250
call fcn.00435470
call fcn.004352c0
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
nop
movzx ecx, byte [eax + 0x87]
lea edx, [ecx - 1]
mov byte [eax + 0x87], dl
cmp cl, 1
jne 0x41d3a6
nop
lea eax, [0x67e0f0]
mov dword [esp], eax
call fcn.00409310
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
add esp, 0xa4
ret
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
add esp, 0xa4
ret
call fcn.0045e080
jmp fcn.0041ca90