Function at 0x409880
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x45600c
mov eax, dword fs:[0]
push eax
mov eax, 0x10e4
call fcn.00413390
mov eax, dword [0x464380]
xor eax, esp
mov dword [esp + 0x10e0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x464380]
xor eax, esp
push eax
lea eax, [esp + 0x10f8]
mov dword fs:[0], eax
xor edi, edi
push 0x206
lea eax, [esp + 0x4ca]
push edi
push eax
mov dword [esp + 0x34], ecx
mov word [esp + 0x4d0], di
call fcn.00413220
push 0x206
lea ecx, [esp + 0x2ce]
push edi
push ecx
mov word [esp + 0x2d4], di
call fcn.00413220
push 0x206
lea edx, [esp + 0x8f2]
push edi
push edx
mov word [esp + 0x8f8], di
call fcn.00413220
push 0x206
lea eax, [esp + 0xd0e]
push edi
push eax
mov word [esp + 0xd14], di
call fcn.00413220
push 0x206
lea ecx, [esp + 0x702]
push edi
push ecx
mov word [esp + 0x708], di
call fcn.00413220
push 0x206
lea edx, [esp + 0xf6]
push edi
push edx
mov word [esp + 0xfc], di
call fcn.00413220
xor eax, eax
add esp, 0x48
mov dword [esp + 0x8e], eax
mov dword [esp + 0x92], eax
mov dword [esp + 0x96], eax
mov dword [esp + 0x9a], eax
mov dword [esp + 0x9e], eax
mov dword [esp + 0xa2], eax
mov dword [esp + 0xa6], eax
mov dword [esp + 0xaa], eax
mov dword [esp + 0xae], eax
mov word [esp + 0xb2], ax
push 0x104
lea eax, [esp + 0xce8]
push eax
push edi
mov word [esp + 0x98], di
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [esp + 0x8d4]
push ecx
lea edx, [esp + 0xce8]
push edx
call fcn.0040b0e0
lea eax, [esp + 0x8dc]
push 0x2e
push eax
call fcn.00413446
add esp, 0x10
cmp eax, edi
je 0x4099fd
mov word [eax], di
xor eax, eax
nop
movzx ecx, word [esp + eax + 0x8d4]
mov word [esp + eax + 0x4c4], cx
add eax, 2
cmp cx, di
jne 0x409a00
call fcn.0040b570
push eax
lea ecx, [esp + 0x90]
push 0x4575bc
push ecx
call fcn.00413d0d
lea edx, [esp + 0x4d0]
push 0x4575b8
push edx
call fcn.00413476
add esp, 0x14
cmp eax, edi
jne 0x409a6a
xor eax, eax
jmp 0x409a50
movzx ecx, word [esp + eax + 0x4c4]
mov word [esp + eax + 0x6cc], cx
add eax, 2
cmp cx, di
jne 0x409a50
jmp 0x409a85
add eax, 2
lea edx, [esp + 0x6cc]
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, di
jne 0x409a76
lea ecx, [esp + 0x1c]
call fcn.00407b70
mov dword [esp + 0x20], eax
mov byte [eax + 0xf], 1
mov eax, dword [esp + 0x20]
mov dword [eax + 4], eax
mov eax, dword [esp + 0x20]
mov dword [eax], eax
mov eax, dword [esp + 0x20]
mov dword [eax + 8], eax
mov dword [esp + 0x24], edi
mov dword [esp + 0x1100], edi
xor esi, esi
jmp 0x409ac0
lea eax, [esi + 0x61]
movzx ecx, ax
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x30]
mov dword [esp + 0x18], ecx
push eax
lea ecx, [esp + 0x24]
call fcn.00409230
add esi, 1
cmp esi, 0x1a
jl 0x409ac0
xor esi, esi
jmp 0x409af0
lea ecx, [esi + 0x41]
movzx edx, cx
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], edx
call fcn.00409230
add esi, 1
cmp esi, 0x1a
jl 0x409af0
xor esi, esi
jmp 0x409b20
lea edx, [esi + 0x30]
movzx eax, dx
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x30]
push edx
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], eax
call fcn.00409230
add esi, 1
cmp esi, 0xa
jl 0x409b20
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x24]
mov dword [esp + 0x1c], 0x5f
call fcn.00409230
lea eax, [esp + 0x6cc]
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x409b70
sub eax, edx
sar eax, 1
mov ebx, eax
xor esi, esi
cmp ebx, edi
jle 0x409bd7
jmp 0x409b90
lea edi, [esp + esi*2 + 0x6cc]
push edi
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x24]
call fcn.00407e00
mov eax, dword [esp + 0x14]
test eax, eax
mov ebp, dword [esp + 0x20]
je 0x409bba
lea ecx, [esp + 0x1c]
cmp eax, ecx
je 0x409bbf
call fcn.00413c30
cmp dword [esp + 0x18], ebp
je 0x409bd7
mov dx, word [edi]
mov word [esp + esi*2 + 0xb4], dx
add esi, 1
cmp esi, ebx
jl 0x409b90
lea eax, [esp + 0xb4]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x409be1
sub eax, edx
sar eax, 1
jne 0x409c17
xor eax, eax
jmp 0x409c00
movzx ecx, word [eax + 0x4575b0]
mov word [esp + eax + 0xb4], cx
add eax, 2
test cx, cx
jne 0x409c00
mov edi, dword [esp + 0x28]
lea esi, [edi + 0x250]
push 0x4575a4
push esi
call fcn.004133c0
xor ebp, ebp
add esp, 8
cmp eax, ebp
je 0x409d1f
mov esi, 7
lea eax, [esp + 0xb4]
mov dword [esp + 0x50], esi
mov dword [esp + 0x4c], ebp
mov word [esp + 0x3c], bp
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x409c55
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0xb8]
push eax
lea ecx, [esp + 0x40]
call fcn.00408320
cmp dword [esp + 0x4c], esi
mov byte [esp + 0x1100], 1
mov ebx, 8
jb 0x409cd6
push 0xffffffffffffffff
push 4
lea ecx, [esp + 0x5c]
push ecx
lea ecx, [esp + 0x44]
call fcn.00408520
cmp dword [esp + 0x6c], ebx
mov eax, dword [esp + 0x58]
jae 0x409ca9
lea eax, [esp + 0x58]
push eax
call fcn.00413db4
add eax, 0xffffff9c
add esp, 4
cmp eax, 0xc8
ja 0x409cc3
mov dword [edi + 0x24], 1
cmp dword [esp + 0x6c], ebx
jb 0x409cd6
mov edx, dword [esp + 0x58]
push edx
call fcn.004136fe
add esp, 4
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0xb8]
push ecx
lea edx, [esp + 0x2c4]
push 0x457598
push edx
call fcn.00413d0d
add esp, 0x10
cmp dword [esp + 0x50], ebx
mov byte [esp + 0x1100], 0
jb 0x409e61
mov eax, dword [esp + 0x3c]
push eax
call fcn.004136fe
add esp, 4
jmp 0x409e61
mov edi, 0xf
mov eax, esi
mov dword [esp + 0x6c], edi
mov dword [esp + 0x68], ebp
mov byte [esp + 0x58], 0
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x409d36
sub eax, edx
push eax
push esi
lea ecx, [esp + 0x5c]
call fcn.00407f50
lea ecx, [esp + 0x54]
push ecx
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0x1108], 2
call fcn.0040b8b0
add esp, 8
cmp dword [esp + 0x6c], 0x10
mov byte [esp + 0x1100], 4
jb 0x409d82
mov eax, dword [esp + 0x58]
push eax
call fcn.004136fe
add esp, 4
cmp dword [esp + 0x4c], 7
mov dword [esp + 0x6c], edi
mov dword [esp + 0x68], ebp
mov byte [esp + 0x58], 0
mov ebx, 8
jb 0x409df2
push 0xffffffffffffffff
push 4
lea ecx, [esp + 0x78]
push ecx
lea ecx, [esp + 0x44]
call fcn.00408520
cmp dword [esp + 0x88], ebx
mov eax, dword [esp + 0x74]
jae 0x409dbe
lea eax, [esp + 0x74]
push eax
call fcn.00413db4
add eax, 0xffffff9c
add esp, 4
cmp eax, 0xc8
ja 0x409ddc
mov edx, dword [esp + 0x28]
mov dword [edx + 0x24], 1
cmp dword [esp + 0x88], ebx
jb 0x409df2
mov eax, dword [esp + 0x74]
push eax
call fcn.004136fe
add esp, 4
cmp dword [esp + 0x50], ebx
mov eax, dword [esp + 0x3c]
jae 0x409e00
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x90]
push ecx
push eax
lea edx, [esp + 0x2c4]
push 0x457598
push edx
call fcn.00413d0d
mov esi, dword [esp + 0x60]
mov edi, dword [esp + 0x4c]
add esp, 0x10
cmp esi, ebx
mov ecx, edi
jae 0x409e30
lea ecx, [esp + 0x3c]
lea edx, [esp + 0xb4]
movzx eax, word [ecx]
mov word [edx], ax
add ecx, 2
add edx, 2
cmp ax, bp
jne 0x409e37
cmp esi, ebx
mov byte [esp + 0x1100], 0
jb 0x409e5d
push edi
call fcn.004136fe
add esp, 4
mov edi, dword [esp + 0x28]
push 0x206
lea eax, [esp + 0xef2]
push ebp
push eax
mov word [esp + 0xef8], bp
call fcn.00413220
push 0x206
lea ecx, [esp + 0xaee]
push ebp
push ecx
mov word [esp + 0xaf4], bp
call fcn.00413220
lea edx, [esp + 0xf04]
push edx
lea eax, [esp + 0x4e0]
push eax
call fcn.00413476
add esp, 0x20
cmp eax, ebp
je 0x409eda
lea eax, [esp + 0xb4]
lea edx, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x409ec0
sub eax, edx
sar eax, 1
push eax
lea ecx, [esp + 0xb8]
push ecx
jmp 0x409efc
lea eax, [esp + 0xadc]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x409ee4
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0xae0]
push edx
lea ecx, [edi + 0x124]
call fcn.00408320
lea eax, [esp + 0x2bc]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x409f11
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x2c0]
push eax
lea ecx, [edi + 0xb4]
call fcn.00408320
mov eax, dword [esp + 0x20]
mov edx, dword [eax]
push eax
lea ecx, [esp + 0x20]
push ecx
mov esi, ecx
push edx
push esi
lea ecx, [esp + 0x24]
push ecx
mov ecx, esi
mov dword [esp + 0x1114], 0xffffffff
call fcn.00409350
mov edx, dword [esp + 0x20]
push edx
call fcn.004136fe
add esp, 4
mov ecx, dword [esp + 0x10f8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x10e0]
xor ecx, esp
call fcn.00413205
add esp, 0x10f0
ret