Function at 0x4094f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x409ccb
sub esp, 0x44
cmp dword [0x4f29c8], 2
je 0x409cb4
mov edx, dword [esp + 0x48]
test edx, edx
je 0x409c1e
movzx ebx, byte [0x4f2c80]
test bl, bl
je 0x4095f6
mov ebx, dword [0x4f2c8c]
test ebx, ebx
je 0x40959e
mov eax, dword [esp + 0x4c]
test eax, eax
je 0x409577
test edx, 7
jne 0x409552
mov eax, 8
jmp 0x40957c
test edx, 3
jne 0x409561
mov eax, 4
jmp 0x40957c
test edx, 1
jne 0x409570
mov eax, 2
jmp 0x40957c
mov eax, 1
jmp 0x40957c
mov eax, 0x10
mov dword [esp], edx
mov dword [esp + 4], eax
lea eax, [0x4f4320]
mov dword [esp + 8], eax
call fcn.0040a0c0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
movzx ebx, byte [0x4f2ba0]
test bl, bl
je 0x4095f6
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x50]
cmp dword [0x4f2ba4], ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov ebx, dword [ebx + 0x54]
cmp dword [0x4f2ba8], ebx
sete bl
and ebx, ebp
test bl, bl
je 0x4095f6
mov ebx, dword [0x4f2bac]
add ebx, 1
mov ebp, dword [0x4f2bb0]
mov dword [0x4f2bac], ebx
adc ebp, 0
mov dword [0x4f2bb0], ebp
mov ebx, dword [0x4f29c0]
test ebx, ebx
je 0x409650
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebp, dword [ebx + 0x18]
mov ebp, dword [ebp + 0x4c]
test ebp, ebp
jne 0x409619
mov ebp, ebx
mov ebx, dword [ebp + 0xe4]
sub ebx, edx
mov esi, dword [ebp + 0xe8]
mov dword [ebp + 0xe4], ebx
sbb esi, 0
mov dword [ebp + 0xe8], esi
test esi, esi
jge 0x409652
mov dword [esp + 0x3c], ebp
mov dword [esp], ebp
call fcn.00415f90
mov edx, dword [esp + 0x48]
mov ebp, dword [esp + 0x3c]
jmp 0x409652
xor ebp, ebp
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov esi, dword [ebx + 0x18]
nop
inc dword [esi + 0x78]
mov esi, dword [ebx + 0x18]
test byte [ebx], al
mov ebx, dword [esi + 0x68]
test ebx, ebx
jne 0x409c9e
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
cmp dword [esi + 0x2c], ebx
je 0x409c88
mov dword [esi + 0x68], 1
mov ebx, dword [esi + 0x54]
test ebx, ebx
je 0x40969f
mov ebx, dword [ebx + 0x30]
jmp 0x4096a5
mov ebx, dword [0x4f29dc]
test ebx, ebx
je 0x409c72
mov edi, dword [esp + 0x4c]
test edi, edi
je 0x4096c5
mov eax, ebp
mov ebp, dword [edi + 4]
test ebp, ebp
xchg ebp, ebx
sete bl
xchg ebp, ebx
jmp 0x4096cc
mov eax, ebp
mov ebp, 1
mov dword [esp + 0x34], esi
mov dword [esp + 0x20], ebx
xchg ebp, eax
mov byte [esp + 0x16], al
xchg ebp, eax
mov dword [esp + 0x40], eax
cmp edx, 0x8000
ja 0x409924
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x40980d
cmp edx, 0x10
jae 0x40980d
mov ecx, dword [ebx + 0xc]
test edx, 7
jne 0x409710
add ecx, 7
and ecx, 0xfffffff8
jmp 0x40973a
cmp edx, 0xc
jne 0x40971d
add ecx, 7
and ecx, 0xfffffff8
jmp 0x40973a
test edx, 3
jne 0x40972d
add ecx, 3
and ecx, 0xfffffffc
jmp 0x40973a
test edx, 1
jne 0x40973a
nop
inc ecx
and ecx, 0xfffffffe
lea eax, [ecx + edx]
cmp eax, 0x10
ja 0x40978b
mov edi, dword [ebx + 8]
test edi, edi
je 0x40978b
add ecx, edi
mov dword [ebx + 0xc], eax
inc dword [ebx + 0x10]
mov dword [esi + 0x68], 0
nop
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov edx, dword [esi + 0x78]
lea ebx, [edx - 1]
mov dword [esi + 0x78], ebx
cmp edx, 1
jne 0x409783
movzx edx, byte [eax + 0x65]
test dl, dl
je 0x409783
mov dword [eax + 8], 0xfffffade
mov dword [esp + 0x54], ecx
add esp, 0x44
ret
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.004091c0
mov eax, dword [esp + 4]
test eax, eax
je 0x4097aa
mov ecx, dword [esp + 0x18]
xor edx, edx
jmp 0x4097c8
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov byte [esp + 4], 5
call fcn.004092d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
mov dword [eax + 0xc], 0
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x20]
cmp dword [ebp + 0xc], ebx
ja 0x4097f7
mov esi, dword [ebp + 8]
test esi, esi
jne 0x409801
mov esi, eax
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], ebx
jmp 0x409803
mov esi, eax
mov eax, 0x10
jmp 0x40991d
cmp edx, 0x3f8
ja 0x409835
mov ecx, esi
lea esi, [edx + 7]
shr esi, 3
cmp esi, 0x81
jae 0x409c66
lea edi, [0x4ca500]
movzx esi, byte [edi + esi]
jmp 0x409856
mov ecx, esi
lea esi, [edx - 0x381]
shr esi, 7
cmp esi, 0xf9
jae 0x409c5a
lea edi, str._______________________....______0001123333333333444444444455666677777888888888889999999999::::::___________________________________________________________________________AAAAAAAAAAAAAAAAAAAAABBBBBBBBBBBCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCC
movzx esi, byte [edi + esi]
xchg esi, eax
movzx edi, al
xchg esi, eax
cmp edi, 0x44
jae 0x409c4e
lea edx, [0x4ca5a0]
movzx edx, word [edx + edi*2]
nop
shl esi, 1
xchg ebp, eax
movzx edi, al
xchg ebp, eax
or esi, edi
xchg esi, eax
movzx edi, al
xchg esi, eax
cmp edi, 0x88
jae 0x409c42
xchg esi, eax
mov byte [esp + 0x14], al
xchg esi, eax
mov dword [esp + 0x28], edx
mov eax, dword [ebx + edi*4 + 0x14]
mov dword [esp + 0x18], eax
mov dword [esp], eax
call fcn.004091c0
mov eax, dword [esp + 4]
test eax, eax
je 0x4098b3
mov ecx, dword [esp + 0x18]
xor edx, edx
jmp 0x4098d5
mov eax, dword [esp + 0x20]
mov dword [esp], eax
movzx ecx, byte [esp + 0x14]
mov byte [esp + 4], cl
call fcn.004092d0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
movzx edx, byte [esp + 0x10]
movzx ebx, byte [esp + 0x50]
test bl, bl
je 0x40990f
movzx ebx, byte [ecx + 0x3c]
test bl, bl
je 0x40990f
mov dword [esp + 0x38], eax
mov byte [esp + 0x15], dl
mov dword [esp + 0x24], ecx
mov dword [esp], eax
mov ecx, dword [esp + 0x28]
mov dword [esp + 4], ecx
call fcn.00454d00
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x24]
movzx edx, byte [esp + 0x15]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x20]
mov esi, eax
mov eax, dword [esp + 0x28]
xor edi, edi
jmp 0x4099b6
mov dword [esp], ebx
mov dword [esp + 4], edx
xchg ebp, eax
mov byte [esp + 8], al
xchg ebp, eax
call fcn.0040fe40
mov eax, dword [esp + 0xc]
mov dword [eax + 0x18], 1
mov word [eax + 0x38], 1
mov ecx, dword [eax + 0x40]
mov edx, dword [eax + 0xc]
movzx ebx, byte [esp + 0x50]
test bl, bl
je 0x409994
movzx ebx, byte [eax + 0x3c]
test bl, bl
je 0x409994
movzx ebx, byte [esp + 0x16]
test bl, bl
jne 0x409990
mov dword [esp + 0x18], eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x38], edx
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.00454d00
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x38]
movzx ebx, byte [esp + 0x16]
mov ebp, ebx
jmp 0x40999b
movzx ebp, byte [esp + 0x16]
xor ebx, ebx
mov ebp, dword [esp + 0x20]
mov edi, ebx
mov esi, edx
mov ebx, dword [esp + 0x48]
mov edx, 1
mov ebx, ecx
mov ecx, eax
mov eax, ebx
mov ebx, dword [esp + 0x48]
mov dword [esp + 0x38], esi
mov dword [esp + 0x28], eax
mov byte [esp + 0x15], dl
xchg edi, eax
mov byte [esp + 0x17], al
xchg edi, eax
mov dword [esp + 0x18], ecx
movzx edx, byte [esp + 0x16]
test dl, dl
je 0x4099e1
mov dword [esp + 0x2c], eax
xor eax, eax
mov dword [esp + 0x1c], eax
jmp 0x409a2d
mov dword [esp], esi
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xc], edx
call fcn.0040e440
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
mov edx, dword [esp + 0x48]
cmp edx, ecx
jbe 0x409a1d
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x409a17
mov ebp, edx
sub edx, ecx
lea ecx, [edx + ebx]
jmp 0x409a22
mov ebp, edx
xor ecx, ecx
jmp 0x409a22
mov ecx, dword [eax + 4]
mov ebp, edx
mov edx, dword [esp + 0x20]
add dword [edx + 4], ecx
mov dword [esp + 0x1c], ecx
call fcn.004542a0
mov eax, dword [0x4f29c8]
test eax, eax
je 0x409a60
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x18]
mov dword [esp], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 8], eax
mov edx, dword [esp + 0x1c]
mov dword [esp + 0xc], edx
call fcn.00418c80
mov eax, dword [0x4f2964]
test eax, eax
jle 0x409aa5
cmp eax, 1
je 0x409a83
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov edx, dword [esp + 0x28]
cmp edx, ecx
jae 0x409a87
sub ecx, edx
mov dword [eax], ecx
jmp 0x409aa9
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov ecx, dword [esp + 0x38]
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.00409e50
mov edx, dword [esp + 0x28]
jmp 0x409aa9
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x34]
mov dword [eax + 0x68], 0
nop
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov ebx, dword [eax + 0x78]
lea ebp, [ebx - 1]
mov dword [eax + 0x78], ebp
cmp ebx, 1
jne 0x409adf
movzx eax, byte [ecx + 0x65]
test al, al
je 0x409adf
mov dword [ecx + 8], 0xfffffade
movzx eax, byte [esp + 0x17]
test al, al
je 0x409b09
movzx eax, byte [esp + 0x16]
test al, al
je 0x409c2c
mov dword [esp], edx
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.00409ce0
mov edx, dword [esp + 0x28]
movzx eax, byte [0x4f2c80]
test al, al
je 0x409b8d
mov eax, dword [0x4f2c84]
test eax, eax
je 0x409b3a
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], edx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 8], ecx
call fcn.00427c50
mov edx, dword [esp + 0x28]
movzx eax, byte [0x4f2ba0]
test al, al
je 0x409b8d
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x50]
cmp dword [0x4f2ba4], ecx
sete cl
mov eax, dword [eax + 0x54]
cmp dword [0x4f2ba8], eax
sete al
and eax, ecx
test al, al
je 0x409b8d
mov eax, dword [0x4f2bb4]
add eax, edx
mov ecx, dword [0x4f2bb8]
mov dword [0x4f2bb4], eax
adc ecx, 0
mov dword [0x4f2bb8], ecx
mov eax, dword [esp + 0x40]
test eax, eax
je 0x409bb8
mov ecx, dword [eax + 0xe4]
mov ebx, dword [esp + 0x48]
sub edx, ebx
sub ecx, edx
mov edx, dword [eax + 0xe8]
mov dword [eax + 0xe4], ecx
sbb edx, 0
mov dword [eax + 0xe8], edx
movzx eax, byte [esp + 0x15]
test al, al
je 0x409c12
mov dword [esp], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
call fcn.004119f0
movzx eax, byte [esp + 0x10]
test al, al
je 0x409c12
mov dword [esp], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp + 0xc], 0
call fcn.00411b50
mov eax, dword [esp + 0x38]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
lea eax, [0x4f2a48]
mov dword [esp + 0x54], eax
add esp, 0x44
ret
lea eax, [0x472fef]
mov dword [esp], eax
mov dword [esp + 4], 0x31
call fcn.0042f370
mov eax, edi
mov ecx, 0x88
call fcn.004546a0
mov eax, edi
mov ecx, 0x44
call fcn.004546a0
mov eax, esi
mov ecx, 0xf9
call fcn.004546b0
mov eax, esi
mov ecx, 0x81
call fcn.004546b0
lea eax, [0x47336f]
mov dword [esp], eax
mov dword [esp + 4], 0x34
call fcn.0042f370
lea eax, [0x46ea52]
mov dword [esp], eax
mov dword [esp + 4], 0x14
call fcn.0042f370
lea eax, [0x46d898]
mov dword [esp], eax
mov dword [esp + 4], 0xf
call fcn.0042f370
lea eax, [0x47320c]
mov dword [esp], eax
mov dword [esp + 4], 0x32
call fcn.0042f370
nop
call fcn.00453220
jmp fcn.004094f0