Function at 0x41ceaf
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x4c
push ebx
push ebp
push esi
push edi
xor eax, eax
mov dword [esp + 0x1c], edx
mov edi, ecx
mov dword [esp + 0x2c], eax
push 0x28
push eax
mov dword [esp + 0x28], eax
mov esi, eax
mov byte [edi + 0x320], al
lea eax, [esp + 0x38]
push eax
call fcn.00434c30
mov ebp, dword [esp + 0x6c]
add esp, 0xc
movzx eax, byte [edi + 0x320]
mov dword [esp + 0x28], 0xfffb
mov ecx, dword [ebp]
mov ebx, ecx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], ebx
push 1
pop edx
sub eax, esi
je 0x41cf3b
sub eax, edx
je 0x41d21a
sub eax, edx
je 0x41d39d
sub eax, edx
je 0x41cf33
sub eax, edx
je 0x41d60c
sub eax, edx
je 0x41d6a1
mov esi, 0xfffffed3
jmp 0x41d6a4
xor ebx, ebx
inc ebx
jmp 0x41d407
movzx edx, word [edi + 0x310]
mov eax, 0x8000
mov ebp, dword [esp + 0x64]
cmp dx, ax
jb 0x41cfbb
mov eax, ecx
sub eax, ebx
inc eax
cmp eax, ebp
jbe 0x41cf63
mov esi, 0xfffffeb8
jmp 0x41d6a4
mov eax, dword [esp + 0x1c]
mov al, byte [ecx + eax]
inc ecx
mov byte [esp + 0x14], al
movzx eax, al
mov dword [esp + 0x24], eax
sub eax, ebx
add eax, ecx
mov dword [esp + 0x3c], ecx
cmp eax, ebp
ja 0x41cf59
and dl, 0x30
cmp dl, 0x10
jne 0x41cf9b
cmp byte [esp + 0x14], 0
je 0x41cf9b
mov esi, 0xfffffe5c
jmp 0x41d6a4
add ecx, dword [esp + 0x24]
mov dword [esp + 0x3c], ecx
push 0x48
pop ecx
call fcn.00430c79
mov dword [esp + 0x34], eax
test eax, eax
jne 0x41cfbb
push 0xffffffffffffff83
pop esi
jmp 0x41d6a4
push 0x48
pop ecx
call fcn.00430c79
mov dword [esp + 0x30], eax
test eax, eax
je 0x41cfb3
push 0x48
push 0
push eax
call fcn.00434c30
mov ebx, dword [esp + 0x48]
add esp, 0xc
mov eax, ebx
sub eax, dword [esp + 0x40]
add eax, 3
cmp eax, ebp
ja 0x41cf59
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x24]
lea ecx, [ebx + ecx]
call fcn.0041b45c
mov ecx, dword [esp + 0x24]
add ebx, 3
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x18], ecx
cmp ecx, 0x481e
ja 0x41cf59
mov edx, dword [esp + 0x40]
mov eax, ecx
sub eax, edx
add eax, ebx
cmp eax, ebp
jne 0x41cf59
mov ebp, dword [esp + 0x44]
test ecx, ecx
je 0x41d190
movzx eax, byte [edi + 0x216]
cmp ebp, eax
jge 0x41d186
cmp ebp, 9
jge 0x41d186
mov eax, ebx
sub eax, edx
add eax, 3
cmp eax, dword [esp + 0x64]
ja 0x41cf59
mov ecx, dword [esp + 0x1c]
lea edx, [esp + 0x24]
lea ecx, [ebx + ecx]
call fcn.0041b45c
mov ecx, dword [esp + 0x24]
add ebx, 3
mov eax, ecx
mov dword [esp + 0x3c], ebx
sub eax, dword [esp + 0x40]
add eax, ebx
cmp eax, dword [esp + 0x64]
ja 0x41cf59
mov eax, dword [esp + 0x30]
push 0xfffffffffffffffd
mov dword [eax + ebp*8 + 4], ecx
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x34]
mov ebp, dword [esp + 0x20]
add edx, ebp
mov dword [eax + ecx*8], edx
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x40]
add ebx, dword [esp + 0x28]
pop eax
sub eax, dword [esp + 0x24]
add ecx, eax
mov dword [esp + 0x3c], ebx
mov eax, 0x8000
mov dword [esp + 0x18], ecx
cmp word [edi + 0x310], ax
jb 0x41d170
mov eax, ebx
sub eax, dword [esp + 0x40]
add eax, 2
cmp eax, dword [esp + 0x64]
ja 0x41cf59
lea ecx, [ebx + ebp]
lea edx, [esp + 0x14]
call fcn.0041b476
movzx esi, word [esp + 0x14]
add ebx, 2
mov eax, esi
mov dword [esp + 0x3c], ebx
sub eax, dword [esp + 0x40]
add eax, ebx
cmp eax, dword [esp + 0x64]
ja 0x41cf59
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x44]
push 0xfffffffffffffffe
mov dword [ecx + eax*8 + 4], esi
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x38]
add edx, ebp
mov eax, dword [esp + 0x48]
mov dword [ecx + eax*8], edx
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x38]
add dword [esp + 0x40], esi
pop eax
sub eax, esi
add dword [esp + 0x18], eax
movzx eax, word [edx + ecx*8 + 4]
mov edx, dword [edx + ecx*8]
mov ecx, edi
push 0
push 0xb
push eax
call fcn.00421c5e
mov esi, eax
add esp, 0xc
test esi, esi
js 0x41d6a4
mov ebx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x44]
inc ebp
mov dword [esp + 0x44], ebp
test ecx, ecx
je 0x41d190
mov edx, dword [esp + 0x40]
jmp 0x41d036
mov esi, 0xfffffe90
jmp 0x41d6a4
and dword [esp + 0x4c], 0
mov dword [esp + 0x48], ebp
test ebp, ebp
jne 0x41d1e4
mov eax, 0x2000
test word [edi + 0x314], ax
jne 0x41d1cd
mov eax, 0x100
test word [edi + 0x310], ax
je 0x41d1e4
movzx eax, word [edi + 0x220]
push eax
call fcn.0041b4bc
add esp, 4
test eax, eax
je 0x41d1e4
test byte [edi + 0x310], 0x30
jne 0x41d1e4
mov esi, 0xfffffea7
mov ecx, edi
mov edx, esi
call fcn.0041cb8f
mov eax, dword [esp + 0x28]
mov ebx, 0x370
and word [esp + 0x56], ax
mov ecx, ebx
call fcn.00430c79
mov dword [esp + 0x38], eax
test eax, eax
je 0x41cfb3
push ebx
push 0
push eax
call fcn.00434c30
xor edx, edx
add esp, 0xc
inc edx
mov byte [edi + 0x320], dl
mov eax, dword [esp + 0x48]
test eax, eax
jle 0x41d38a
jmp 0x41d382
mov eax, dword [esp + 0x48]
dec eax
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x30]
push eax
movzx eax, word [edi + 0x310]
shr eax, 7
not eax
and eax, edx
lea edx, [esp + 0x38]
push eax
push ecx
mov ecx, edi
call fcn.0041cd9e
add esp, 0x10
test eax, eax
jne 0x41d26b
lea edx, [esp + 0x30]
mov ecx, edi
call fcn.0041ce77
lea ecx, [esp + 0x30]
mov edx, edi
push ecx
mov ecx, dword [edi]
push eax
mov ecx, dword [ecx + 0x50]
call fcn.0041cbee
pop ecx
pop ecx
mov cx, word [edi + 0x310]
mov esi, eax
mov eax, 0x80
and cx, ax
je 0x41d2ab
cmp esi, 0xfffffe96
je 0x41d2a2
cmp esi, 0xfffffe97
jne 0x41d2ab
and dword [edi + 0x1f8], 0
xor esi, esi
test esi, esi
jne 0x41d340
mov eax, dword [esp + 0x38]
test byte [eax + 0x36c], 0x10
je 0x41d364
test cx, cx
jne 0x41d364
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x4c]
cmp dword [esp + 0x20], esi
jne 0x41d364
push dword [edi + 0x84]
mov edx, dword [ebx + ebp*8 + 4]
lea ecx, [esp + 0x20]
and dword [esp + 0x20], esi
push 5
call fcn.00429023
mov esi, eax
pop ecx
pop ecx
test esi, esi
js 0x41d6a4
push dword [ebx + ebp*8 + 4]
mov eax, dword [esp + 0x20]
push dword [ebx + ebp*8]
push dword [eax]
call fcn.004346b0
mov ecx, dword [edi]
lea edx, [esp + 0x28]
add esp, 0xc
mov ecx, dword [ecx + 0x50]
push 0
push 2
call fcn.0041f0cd
pop ecx
pop ecx
xor ecx, ecx
mov esi, eax
xor eax, eax
inc ecx
cmp esi, ecx
cmove esi, eax
test esi, esi
je 0x41d364
lea eax, [ecx + 0x7f]
test byte [edi + 0x310], al
jne 0x41d351
mov edx, esi
mov ecx, edi
call fcn.0041cb8f
cmp dword [esp + 0x50], 0
mov dword [edi + 0x1f8], esi
jne 0x41d364
mov dword [esp + 0x50], esi
xor esi, esi
mov ecx, dword [esp + 0x38]
call fcn.00426bf7
mov eax, dword [esp + 0x28]
xor edx, edx
and word [esp + 0x56], ax
mov eax, dword [esp + 0x48]
dec eax
inc edx
mov dword [esp + 0x48], eax
cmp eax, edx
jg 0x41d22b
test esi, esi
jne 0x41d6a4
mov ebp, dword [esp + 0x60]
mov byte [edi + 0x320], 2
xor ebx, ebx
inc ebx
cmp dword [esp + 0x48], 0
jle 0x41d3f2
and dword [esp + 0x4c], 0
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x30]
push eax
movzx eax, word [edi + 0x310]
lea edx, [esp + 0x38]
shr eax, 7
not eax
and eax, ebx
push eax
push ecx
mov ecx, edi
call fcn.0041cd9e
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x41d49e
test byte [esp + 0x56], 2
je 0x41d48f
mov esi, dword [esp + 0x50]
or word [esp + 0x56], bx
test byte [esp + 0x56], bl
je 0x41d400
test esi, esi
jne 0x41d6a4
mov byte [edi + 0x320], 3
cmp dword [esp + 0x48], 0
jle 0x41d5f4
mov ecx, dword [esp + 0x38]
mov edx, 0x80
cmp byte [ecx + 0x36c], dl
jb 0x41d46b
cmp byte [edi + 0x22f], bl
jne 0x41d446
mov al, byte [edi + 0x310]
and al, 0x30
cmp al, 0x10
jne 0x41d446
test byte [ecx + 0x31a], 0x20
mov eax, 0xfffffe7f
cmove esi, eax
mov al, byte [edi + 0x230]
cmp al, bl
je 0x41d45d
cmp al, 3
jne 0x41d46b
cmp byte [edi + 0x233], 0
jne 0x41d46b
test byte [ecx + 0x31a], dl
mov eax, 0xfffffe81
cmove esi, eax
test byte [ecx + 0x36d], bl
je 0x41d4e8
mov al, byte [edi + 0x310]
and al, 0x30
cmp al, 0x10
jne 0x41d4d9
test byte [ecx + 0x31c], 3
jne 0x41d4e8
mov esi, 0xfffffe7e
jmp 0x41d4e8
mov eax, 0xfffe
and word [esp + 0x56], ax
jmp 0x41d3f2
cmp esi, 0xffffff74
je 0x41d3ed
cmp esi, 0xffffff7c
je 0x41d3ed
cmp dword [edi + 0x80], 0
je 0x41d3ed
mov eax, dword [esp + 0x56]
shr eax, 1
xor eax, dword [esp + 0x56]
and eax, ebx
xor word [esp + 0x56], ax
jmp 0x41d3f2
test byte [ecx + 0x31c], 5
mov eax, 0xfffffe7e
cmove esi, eax
test byte [esp + 0x56], bl
je 0x41d4f9
mov dword [edi + 0x1f8], esi
jmp 0x41d6a4
mov eax, 0x2000
or word [edi + 0x312], ax
test byte [edi + 0x310], dl
jne 0x41d550
mov eax, dword [edi + 0x100]
test eax, eax
je 0x41d550
cmp dword [ecx + 0x24], 0
je 0x41d535
push ecx
mov edx, eax
call fcn.0041cb39
pop ecx
mov ecx, dword [esp + 0x38]
cmp eax, ebx
je 0x41d550
mov esi, 0xfffffebe
jmp 0x41d550
mov edx, dword [ecx + 0x7c]
mov ecx, dword [ecx + 0x78]
push eax
call fcn.0041ca87
pop ecx
mov ecx, 0xfffffebe
test eax, eax
cmove esi, ecx
mov ecx, dword [esp + 0x38]
cmp dword [ecx + 0x1c], 0x206
jne 0x41d5f4
and dword [esp + 0x60], 0
lea ebx, [edi + 0x384]
cmp dword [ebx], 0
jne 0x41d57a
push ebx
push 0x25
pop edx
mov ecx, edi
call fcn.0041c0d3
jmp 0x41d593
cmp byte [edi + 0x38a], 0
je 0x41d59c
push dword [ebx]
mov ecx, edi
call fcn.0041c15c
mov byte [edi + 0x38a], 0
pop ecx
test eax, eax
jne 0x41d5bd
mov ecx, dword [esp + 0x38]
push dword [ecx + 4]
mov ecx, dword [ecx]
lea edx, [esp + 0x64]
push dword [ebx]
call fcn.004293b7
pop ecx
pop ecx
test eax, eax
jne 0x41d5bd
xor ecx, ecx
inc ecx
mov byte [edi + 0x38a], cl
jmp 0x41d5c2
mov esi, 0xfffffeaa
test esi, esi
jne 0x41d5f4
cmp byte [edi + 0x38a], 0
je 0x41d5f4
mov eax, 0x80
test byte [edi + 0x310], al
jne 0x41d5f4
mov ecx, dword [ebx]
call fcn.0042cd97
movsx ecx, word [edi + 0x32a]
mov edx, 0xfffffe66
cmp eax, ecx
cmovl esi, edx
xor eax, eax
inc eax
test byte [esp + 0x56], al
je 0x41d605
test esi, esi
jne 0x41d6a4
mov byte [edi + 0x320], 4
cmp dword [esp + 0x50], 0
je 0x41d61a
test esi, esi
cmove esi, dword [esp + 0x50]
mov ecx, dword [edi]
lea eax, [esp + 0x30]
push eax
push esi
mov edx, edi
mov ecx, dword [ecx + 0x50]
call fcn.0041cbee
pop ecx
mov esi, eax
movzx eax, word [edi + 0x310]
pop ecx
mov ecx, eax
and ecx, 0x80
je 0x41d65a
cmp esi, 0xfffffe96
je 0x41d651
cmp esi, 0xfffffe97
jne 0x41d65a
and dword [edi + 0x1f8], 0
xor esi, esi
test esi, esi
je 0x41d674
test cx, cx
jne 0x41d66c
mov edx, esi
mov ecx, edi
call fcn.0041cb8f
mov dword [edi + 0x1f8], esi
jmp 0x41d681
and al, 0x30
cmp al, 0x10
jne 0x41d681
mov byte [edi + 0x319], 5
mov ecx, edi
call fcn.0041b4d5
mov ecx, dword [esp + 0x3c]
test eax, eax
je 0x41d69a
add ecx, dword [edi + 0x308]
mov dword [esp + 0x3c], ecx
mov byte [edi + 0x320], 5
mov dword [ebp], ecx
lea edx, [esp + 0x30]
call fcn.0041cd50
mov ecx, edi
call fcn.0041c17b
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret