Function at 0x41fd70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4576ed
mov eax, dword fs:[0]
push eax
sub esp, 0x148
mov eax, dword [0x467334]
xor eax, esp
mov dword [esp + 0x140], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x467334]
xor eax, esp
push eax
lea eax, [esp + 0x15c]
mov dword fs:[0], eax
mov eax, dword [esp + 0x16c]
mov ebp, dword [esp + 0x170]
mov dword [esp + 0x18], eax
mov dword [esp + 0x38], ebp
xor ebx, ebx
lea ecx, [esp + 0x44]
mov dword [esp + 0x164], ebx
push ecx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
call fcn.0042a300
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov byte [esp + 0x6c], bl
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov byte [esp + 0x80], bl
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x90], ebx
mov byte [esp + 0x94], bl
push 1
push str.____________._
lea edx, [esp + 0xc4]
push edx
mov byte [esp + 0x170], 1
call fcn.0040f810
push ebx
push eax
lea eax, [esp + 0x44]
push eax
lea edi, [esp + 0x180]
mov byte [esp + 0x170], 2
call fcn.004106e0
add esp, 0xc
lea ecx, [esp + 0xbc]
push ecx
movzx esi, al
mov byte [esp + 0x168], 1
call fcn.0040f900
cmp esi, ebx
je 0x420472
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 3
jne 0x420472
lea edi, [ebx + 2]
lea esi, [esp + 0x3c]
call fcn.0040f7a0
lea ecx, [esp + 0x1c]
call fcn.0040f7f0
push 0xffffffffffffffff
push ebx
lea ecx, [esp + 0x24]
mov byte [esp + 0x16c], 5
push ecx
mov esi, 0xf
lea ecx, [esp + 0x128]
mov dword [esp + 0x140], esi
mov dword [esp + 0x13c], ebx
mov byte [esp + 0x12c], bl
call fcn.00402ea0
lea eax, [ebp + 0x3c]
mov edi, pe_nt_image_headers32
cmp dword [eax + 0x18], edi
jb 0x41ff03
mov eax, dword [eax + 4]
jmp 0x41ff06
add eax, 4
mov ecx, dword [esp + 0x120]
cmp dword [esp + 0x134], edi
jae 0x41ff1d
lea ecx, [esp + 0x120]
push eax
push ecx
call fcn.0043cd92
add esp, 8
test eax, eax
setne byte [esp + 0x17]
cmp dword [esp + 0x134], edi
jb 0x41ff47
mov edx, dword [esp + 0x120]
push edx
call fcn.0043c853
add esp, 4
mov byte [esp + 0x164], 1
mov dword [esp + 0x134], esi
mov dword [esp + 0x130], ebx
mov byte [esp + 0x120], bl
cmp dword [esp + 0x34], edi
jb 0x41ff77
mov eax, dword [esp + 0x20]
push eax
call fcn.0043c853
add esp, 4
cmp byte [esp + 0x17], bl
je 0x41ffa0
lea esi, [esp + 0x3c]
call fcn.0040f5a0
cmp dword [esp + 0x18c], edi
jb 0x4205e5
mov ecx, dword [esp + 0x178]
push ecx
jmp 0x4205dd
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 0x2d0]
sub edx, dword [eax + 0x2cc]
add eax, 0x2c0
sar edx, 6
xor ebp, ebp
mov dword [esp + 0x18], eax
test edx, edx
jbe 0x4202f5
mov esi, dword [esp + 0x18]
mov eax, ebp
mov ecx, esi
call fcn.004298c0
push 0xffffffffffffffff
push ebx
mov edi, 0xf
push eax
lea ecx, [esp + 0x128]
mov dword [esp + 0x140], edi
mov dword [esp + 0x13c], ebx
mov byte [esp + 0x12c], bl
call fcn.00402ea0
mov eax, ebp
mov ecx, esi
mov byte [esp + 0x164], 6
call fcn.004298c0
push 0xffffffffffffffff
add eax, 0x1c
push ebx
push eax
lea ecx, [esp + 0x144]
mov dword [esp + 0x15c], edi
mov dword [esp + 0x158], ebx
mov byte [esp + 0x148], bl
call fcn.00402ea0
mov byte [esp + 0x164], 7
mov eax, dword [esp + 0x130]
cmp eax, ebx
je 0x42008b
lea esi, [eax - 1]
cmp eax, esi
ja 0x420055
call fcn.0043b6d1
cmp dword [esp + 0x134], 0x10
mov eax, dword [esp + 0x120]
jae 0x42006d
lea eax, [esp + 0x120]
cmp byte [esi + eax], 0x5c
je 0x42008b
push 0x5c
mov eax, 1
lea edi, [esp + 0x120]
call fcn.00412820
mov edi, 0xf
mov eax, dword [esp + 0x14c]
cmp eax, ebx
je 0x4200d8
lea esi, [eax - 1]
cmp eax, esi
ja 0x4200a2
call fcn.0043b6d1
cmp dword [esp + 0x150], 0x10
mov eax, dword [esp + 0x13c]
jae 0x4200ba
lea eax, [esp + 0x13c]
cmp byte [esi + eax], 0x5c
je 0x4200d8
push 0x5c
mov eax, 1
lea edi, [esp + 0x13c]
call fcn.00412820
mov edi, 0xf
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
mov eax, 0x66666667
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 1
ja 0x4200ff
lea eax, [esp + 0x84]
jmp 0x420106
mov eax, dword [esp + 0x50]
add eax, 0x14
lea ecx, [esp + 0xa0]
call fcn.0040f7f0
push 0xffffffffffffffff
mov byte [esp + 0x168], 8
push ebx
lea eax, [esp + 0xa8]
push eax
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], edi
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x2c], bl
call fcn.00402ea0
mov ecx, dword [esp + 0x120]
mov esi, pe_nt_image_headers32
cmp dword [esp + 0x134], esi
jae 0x420156
lea ecx, [esp + 0x120]
mov eax, dword [esp + 0x20]
cmp dword [esp + 0x34], esi
jae 0x420164
lea eax, [esp + 0x20]
push ecx
push eax
call fcn.0043cd92
add esp, 8
test eax, eax
sete byte [esp + 0x17]
cmp dword [esp + 0x34], esi
jb 0x420188
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0043c853
add esp, 4
mov byte [esp + 0x164], 7
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
cmp dword [esp + 0xb8], esi
jb 0x4201b5
mov edx, dword [esp + 0xa4]
push edx
call fcn.0043c853
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x42033a
mov edi, 1
lea esi, [esp + 0x3c]
call fcn.0040f7a0
lea ecx, [esp + 0xa0]
call fcn.0040f7f0
push 0xffffffffffffffff
mov byte [esp + 0x168], 0xa
push ebx
lea eax, [esp + 0xa8]
push eax
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x2c], bl
call fcn.00402ea0
cmp dword [esp + 0x150], 0x10
mov ecx, dword [esp + 0x13c]
jae 0x42021d
lea ecx, [esp + 0x13c]
mov eax, dword [esp + 0x20]
mov esi, pe_nt_image_headers32
cmp dword [esp + 0x34], esi
jae 0x420230
lea eax, [esp + 0x20]
push ecx
push eax
call fcn.0043cd92
add esp, 8
test eax, eax
sete byte [esp + 0x17]
cmp dword [esp + 0x34], esi
jb 0x420254
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0043c853
add esp, 4
mov edi, 0xf
mov byte [esp + 0x164], 7
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
cmp dword [esp + 0xb8], esi
jb 0x420286
mov edx, dword [esp + 0xa4]
push edx
call fcn.0043c853
add esp, 4
cmp byte [esp + 0x17], bl
jne 0x42043c
cmp dword [esp + 0x150], esi
jb 0x4202a9
mov eax, dword [esp + 0x13c]
push eax
call fcn.0043c853
add esp, 4
mov byte [esp + 0x164], 1
mov dword [esp + 0x150], edi
mov dword [esp + 0x14c], ebx
mov byte [esp + 0x13c], bl
cmp dword [esp + 0x134], esi
jb 0x4202df
mov ecx, dword [esp + 0x120]
push ecx
call fcn.0043c853
add esp, 4
mov eax, dword [esp + 0x18]
mov edx, dword [eax + 0x10]
sub edx, dword [eax + 0xc]
inc ebp
sar edx, 6
cmp ebp, edx
jb 0x41ffc6
mov eax, dword [esp + 0x50]
cmp eax, ebx
je 0x420306
push eax
call fcn.0043c853
add esp, 4
mov eax, dword [esp + 0x44]
push eax
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
call fcn.0043c853
add esp, 4
cmp dword [esp + 0x18c], 0x10
jb 0x4205e5
mov ecx, dword [esp + 0x178]
push ecx
jmp 0x4205dd
mov esi, dword [esp + 0x38]
lea eax, [esi + 0x3c]
push eax
lea eax, [esp + 0x120]
push eax
lea edi, [esp + 0xa8]
mov dword [esi + 0x74], ebp
mov dword [esi + 0x78], ebx
call fcn.00405ac0
add esp, 8
mov byte [esp + 0x164], 9
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [esi + 0x58]
call fcn.00402ea0
mov esi, pe_nt_image_headers32
cmp dword [esp + 0xb8], esi
jb 0x420391
mov ecx, dword [esp + 0xa4]
push ecx
call fcn.0043c853
add esp, 4
cmp dword [esp + 0x150], esi
jb 0x4203aa
mov edx, dword [esp + 0x13c]
push edx
call fcn.0043c853
add esp, 4
mov edi, 0xf
mov byte [esp + 0x13c], bl
mov dword [esp + 0x14c], ebx
mov dword [esp + 0x150], edi
cmp dword [esp + 0x134], esi
jb 0x4203dd
mov eax, dword [esp + 0x120]
push eax
call fcn.0043c853
add esp, 4
mov eax, dword [esp + 0x50]
mov byte [esp + 0x120], bl
mov dword [esp + 0x130], ebx
mov dword [esp + 0x134], edi
cmp eax, ebx
je 0x420403
push eax
call fcn.0043c853
add esp, 4
mov ecx, dword [esp + 0x44]
push ecx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
call fcn.0043c853
add esp, 4
cmp dword [esp + 0x18c], esi
jb 0x420435
mov edx, dword [esp + 0x178]
push edx
call fcn.0043c853
add esp, 4
xor eax, eax
jmp 0x4205ea
mov esi, dword [esp + 0x38]
lea eax, [esi + 0x3c]
push eax
lea eax, [esp + 0x13c]
push eax
lea edi, [esp + 0xa8]
mov dword [esi + 0x74], ebp
mov dword [esi + 0x78], 1
call fcn.00405ac0
add esp, 8
mov byte [esp + 0x164], 0xb
jmp 0x420367
mov eax, dword [esp + 0x178]
mov ebp, pe_nt_image_headers32
cmp dword [esp + 0x18c], ebp
jae 0x42048e
lea eax, [esp + 0x178]
push eax
lea edx, [esp + 0x20]
push edx
sub esp, 0x1c
mov esi, esp
mov dword [esi + 0x18], 0xf
lea edi, [esi + 4]
mov dword [esi + 0x14], ebx
mov byte [edi], bl
mov eax, dword [esi + 0x18]
mov dword [esp + 0x5c], esp
cmp eax, ebp
jb 0x4204b7
mov ecx, dword [edi]
jmp 0x4204b9
mov ecx, edi
cmp ecx, str._DRTSNVEIHA
ja 0x4204f2
cmp eax, ebp
jb 0x4204c9
mov ecx, dword [edi]
jmp 0x4204cb
mov ecx, edi
mov edx, dword [esi + 0x14]
add edx, ecx
cmp edx, str._DRTSNVEIHA
jbe 0x4204f2
cmp eax, ebp
jb 0x4204de
mov edi, dword [edi]
push 0x37
mov eax, str._DRTSNVEIHA
sub eax, edi
push eax
push esi
mov ecx, esi
call fcn.00402ea0
jmp 0x420533
cmp eax, 0x37
jae 0x420504
mov ecx, dword [esi + 0x14]
push ecx
push 0x37
mov ecx, esi
call fcn.00403800
mov ecx, dword [esi + 0x18]
cmp ecx, ebp
jb 0x42050f
mov eax, dword [edi]
jmp 0x420511
mov eax, edi
push 0x37
push str._DRTSNVEIHA
push ecx
push eax
call fcn.0043c85e
add esp, 0x10
mov dword [esi + 0x14], 0x37
cmp dword [esi + 0x18], ebp
jb 0x420530
mov edi, dword [edi]
mov byte [edi + 0x37], bl
lea esi, [esp + 0xe8]
call fcn.00401900
mov ecx, eax
mov byte [esp + 0x16c], 3
call fcn.00401db0
mov byte [esp + 0x168], 4
cmp dword [eax + 0x18], ebp
jb 0x420560
mov eax, dword [eax + 4]
jmp 0x420563
add eax, 4
mov edx, dword [esp + 0x1c]
push eax
push 1
push edx
call fcn.0041c440
add esp, 0x10
cmp dword [esp + 0x34], ebp
jb 0x420586
mov eax, dword [esp + 0x20]
push eax
call fcn.0043c853
add esp, 4
lea esi, [esp + 0xc4]
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00429050
mov eax, dword [esp + 0x50]
cmp eax, ebx
je 0x4205b3
push eax
call fcn.0043c853
add esp, 4
mov ecx, dword [esp + 0x44]
push ecx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
call fcn.0043c853
add esp, 4
cmp dword [esp + 0x18c], ebp
jb 0x4205e5
mov edx, dword [esp + 0x178]
push edx
call fcn.0043c853
add esp, 4
mov eax, 0x80004005
mov ecx, dword [esp + 0x15c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x140]
xor ecx, esp
call fcn.0043c2d9
add esp, 0x154
ret 0x24