Function at 0x41f540
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0xce31cc]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41f928
sub esp, 0x7c
mov eax, dword [esp + 0x80]
test byte [eax], al
lea ecx, [eax + 0x40]
mov dword [esp + 0x78], ecx
mov dword [esp], ecx
call fcn.00406610
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x88]
cmp edx, ecx
sete bl
xchg ebp, ebx
setl bl
xchg ebp, ebx
mov esi, dword [esp + 0x84]
cmp esi, eax
xchg edi, ebx
setb bl
xchg edi, ebx
and ebx, edi
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x41f745
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [eax + 0x4c]
mov dword [esp + 0x60], ecx
sar ecx, 0x1f
mov dword [esp + 0x5c], ecx
lea ebx, [eax + 0x28]
mov dword [esp + 0x74], ebx
nop
mov ebp, dword [esp + 0x78]
mov dword [esp], ebp
mov ebp, dword [esp + 0x88]
mov dword [esp + 8], ebp
mov dword [esp + 4], esi
call fcn.004065d0
nop
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call fcn.00406610
mov eax, dword [esp + 4]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 8]
mov edx, dword [esp + 8]
mov dword [esp + 0x2c], edx
mov ebx, dword [esp + 0x84]
mov ebp, dword [esp + 0x20]
sub ebx, ebp
mov ebp, dword [esp + 0x88]
mov edi, dword [esp + 0x24]
sbb ebp, edi
mov edi, eax
mov eax, ebx
mov esi, dword [esp + 0x60]
mul esi
mov dword [esp + 0x30], eax
imul ebp, esi
add edx, ebp
mov ebp, dword [esp + 0x5c]
imul ebp, ebx
add edx, ebp
mov dword [esp + 0x58], edx
test ecx, ecx
setne bl
test edi, edi
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebp, ebx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x41f678
mov eax, dword [esp + 0x74]
mov dword [esp], eax
xor eax, eax
sub eax, edi
mov edx, 0
sbb edx, ecx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.00406630
mov eax, dword [esp + 0x80]
lea ecx, [eax + 0x38]
mov dword [esp + 0x78], ecx
nop
mov dword [esp], ecx
call fcn.00406610
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 8]
test eax, eax
setne bl
test ecx, ecx
xchg ebp, ebx
setne bl
xchg ebp, ebx
or ebx, ebp
test bl, bl
je 0x41f6de
mov dword [esp + 0x28], edx
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x78]
mov dword [esp], edx
xor edx, edx
sub edx, eax
mov ebx, 0
sbb ebx, ecx
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
call fcn.00406630
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x80]
movzx ebx, byte [ecx + 0x50]
test bl, bl
jne 0x41f73b
mov ebx, dword [0xce31cc]
mov ebx, dword fs:[ebx]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x18]
nop
inc dword [ebp + 0x7c]
mov ebp, dword [0xcbc9b8]
mov dword [esp + 0x70], ebp
mov esi, dword [0xcbc9bc]
mov dword [esp + 0x54], esi
mov ebx, dword [ebx + 0x18]
mov dword [esp + 0x6c], ebx
xor edi, edi
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x60], edi
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x64]
xor edi, edi
jmp 0x41f804
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x1c]
jmp 0x41f749
add esp, 0x7c
ret
movzx esi, byte [ecx + 0x20]
xchg esi, eax
test al, al
xchg esi, eax
je 0x41f7b2
mov dword [esp + 0x44], ebp
mov dword [esp + 0x48], ebx
mov dword [esp + 0x38], edx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
call fcn.00464020
movsd xmm0, qword [0x9db7b8]
mulsd xmm0, qword [esp + 8]
movsd qword [esp], xmm0
call fcn.00463f80
mov ebp, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov eax, dword [esp + 0x44]
add ebp, eax
mov eax, dword [esp + 0x48]
adc ebx, eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x38]
mov dword [esp], ecx
mov ecx, dword [esp + 0x30]
sub ecx, eax
mov eax, dword [esp + 0x58]
sbb eax, edx
sub ecx, ebp
sbb eax, ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], ebp
call fcn.0041f940
add esp, 0x7c
ret
mov ebp, dword [esp + 0x4c]
lea edi, [ebp + 1]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x54]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x50], edx
mov edx, eax
mov eax, ecx
mov ecx, dword [esp + 0x80]
mov ebx, dword [esp + 0x6c]
cmp edi, esi
jge 0x41f8db
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], edx
mov dword [esp + 0x4c], edi
mov eax, dword [ebp + edi*4]
test byte [eax], al
add eax, 0x948
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
call fcn.0041fd40
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x40], ecx
mov edx, dword [esp + 0x10]
cmp al, 1
ja 0x41f870
test al, al
jne 0x41f898
mov ebx, dword [esp + 0x60]
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
jmp 0x41f7de
cmp al, 2
je 0x41f87a
cmp al, 3
jne 0x41f893
mov ebx, dword [esp + 0x50]
add edx, ebx
mov ebx, dword [esp + 0x60]
adc ebx, ecx
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x34]
jmp 0x41f7de
cmp al, 4
jne 0x41f911
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x14]
lea ecx, [0xcbe920]
mov dword [esp], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], edx
call fcn.00406630
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x34]
add eax, ecx
mov edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x40]
adc edx, ecx
mov ebx, dword [esp + 0x60]
mov ecx, eax
mov eax, edx
mov edx, dword [esp + 0x50]
jmp 0x41f7de
mov ebp, dword [ebx + 0x7c]
lea esi, [ebp - 1]
nop
mov edi, dword [0xce31cc]
mov edi, dword fs:[edi]
mov edi, dword [edi]
mov dword [ebx + 0x7c], esi
cmp ebp, 1
jne 0x41f904
movzx ebx, byte [edi + 0x65]
test bl, bl
je 0x41f904
mov dword [edi + 8], 0xfffffade
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x50]
jmp 0x41f749
lea eax, [0x9422cc]
mov dword [esp], eax
mov dword [esp + 4], 0x20
call fcn.0043cbd0
nop
call fcn.0046bf00
jmp fcn.0041f540