Function at 0x404670
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4ac74e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
mov ebx, dword [esp + 0x20]
push ebp
push esi
mov esi, dword [ebx + 0xa8]
cmp esi, 1
mov al, 1
push edi
mov edi, ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0x18], esi
mov dl, al
jne 0x4046b5
xor al, al
mov dword [esp + 0x10], esi
mov dl, 2
movsx esi, al
lea eax, [esi + esi*2]
lea ecx, [edi + eax*4 + 0x244]
mov eax, dword [ecx]
mov ebp, dword [eax]
cmp ebp, eax
mov dword [esp + 0x14], ebp
je 0x404b8a
jmp 0x4046d8
mov ebp, dword [esp + 0x14]
cmp dword [ebp + 8], ebx
je 0x4046fd
mov ebp, dword [ebp]
cmp ebp, dword [ecx]
mov dword [esp + 0x14], ebp
jne 0x4046d4
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
add esp, 0x18
ret 4
mov eax, dword [ebx + 0x1c]
movsx ecx, dl
push eax
push ecx
mov ecx, dword [0x4d5fd4]
call fcn.0042ca20
test byte [0x4cc9c4], 1
jne 0x404747
or dword [0x4cc9c4], 1
mov ecx, 0x4cc9a4
mov dword [esp + 0x24], 0
call fcn.0047d7e0
push 0x4b0860
call fcn.00497919
add esp, 4
mov dword [esp + 0x24], 0xffffffff
mov ecx, 0x4cc9a4
call fcn.0047d5f0
push 0x413
mov ecx, 0x4cc9a4
call fcn.0047d600
push 3
mov ecx, 0x4cc9a4
call fcn.0047d590
mov edx, dword [esp + 0x18]
push edx
mov ecx, 0x4cc9a4
call fcn.0047d590
xor eax, eax
mov ax, word [ebx + 0x2d2]
mov ecx, 0x4cc9a4
push eax
call fcn.0047d600
mov ecx, dword [0x4d5fd4]
mov edx, dword [esp + 0x10]
mov eax, dword [ecx + edx*4 + 0xd84]
push eax
mov ecx, 0x4cc9a4
call fcn.0047d640
mov ecx, dword [0x4d5fd4]
push 0x4cc9a4
call fcn.0042d700
mov ebx, dword [edi + esi*4 + 0x264]
mov ecx, dword [esp + 0x2c]
cmp ecx, ebx
jne 0x4047e2
mov byte [esi + edi + 0x26c], 1
mov dword [edi + esi*4 + 0x264], 0
jmp 0x404b57
mov eax, dword [esp + 0x10]
cmp ecx, dword [edi + eax*4 + 0x264]
jne 0x40482c
mov byte [eax + edi + 0x26c], 1
mov dword [edi + eax*4 + 0x264], 0
push ebp
lea eax, [esp + 0x30]
lea ecx, [esi + esi*2 + 0x90]
push eax
lea ecx, [edi + ecx*4]
call fcn.0047b760
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
add esp, 0x18
ret 4
test ebx, ebx
je 0x404b57
mov edx, dword [ebx + 0x28]
mov ecx, dword [ebx + 0x18]
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, ecx
add dword [ebx + 0x28], eax
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x2c]
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, ecx
add dword [ebx + 0x2c], eax
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x30]
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebx + 0x30]
imul eax, ecx
add edx, eax
mov dword [ebx + 0x30], edx
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x34]
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebx + 0x34]
imul eax, ecx
add edx, eax
mov dword [ebx + 0x34], edx
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x38]
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebx + 0x38]
imul eax, ecx
add edx, eax
mov dword [ebx + 0x38], edx
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x3c]
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebx + 0x3c]
imul eax, ecx
add edx, eax
mov dword [ebx + 0x3c], edx
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x40]
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, ecx
add dword [ebx + 0x40], eax
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x44]
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebx + 0x44]
imul eax, ecx
add edx, eax
mov dword [ebx + 0x44], edx
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x48]
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebx + 0x48]
imul eax, ecx
add edx, eax
mov dword [ebx + 0x48], edx
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x74]
imul edx, ecx
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add dword [ebx + 0x74], eax
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x78]
imul edx, ecx
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add dword [ebx + 0x78], eax
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x7c]
imul edx, ecx
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add dword [ebx + 0x7c], eax
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x80]
imul edx, ecx
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add dword [ebx + 0x80], eax
mov ebx, dword [edi + esi*4 + 0x264]
mov edx, dword [ebx + 0x84]
imul edx, ecx
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add dword [ebx + 0x84], eax
mov ebx, 0xc0
lea ecx, [ecx]
mov edx, dword [edi + esi*4 + 0x264]
lea ebp, [ebx + edx - 4]
mov edx, dword [ebp]
imul edx, ecx
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add dword [ebp], eax
mov edx, dword [edi + esi*4 + 0x264]
lea ebp, [ebx + edx]
mov edx, dword [ebp]
imul edx, ecx
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add dword [ebp], eax
mov edx, dword [edi + esi*4 + 0x264]
lea ebp, [ebx + edx + 4]
mov edx, dword [ebp]
imul edx, ecx
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add dword [ebp], eax
mov edx, dword [edi + esi*4 + 0x264]
lea ebp, [ebx + edx + 8]
mov edx, dword [ebp]
imul edx, ecx
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add dword [ebp], eax
mov edx, dword [edi + esi*4 + 0x264]
lea ebp, [ebx + edx + 0xc]
mov edx, dword [ebp]
imul edx, ecx
mov eax, 0xae147ae1
imul edx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp]
add edx, eax
add ebx, 0x14
cmp ebx, 0xf8
mov dword [ebp], edx
jle 0x404a30
mov ecx, dword [edi + esi*4 + 0x264]
mov eax, dword [esp + 0x2c]
mov edx, dword [eax + 0x5c]
sub dword [ecx + 0x5c], edx
mov ecx, dword [edi + esi*4 + 0x264]
mov edx, dword [eax + 0x60]
sub dword [ecx + 0x60], edx
mov ecx, dword [edi + esi*4 + 0x264]
mov edx, dword [eax + 0x64]
sub dword [ecx + 0x64], edx
mov ecx, dword [edi + esi*4 + 0x264]
mov edx, dword [eax + 0x68]
sub dword [ecx + 0x68], edx
mov ecx, dword [edi + esi*4 + 0x264]
mov edx, dword [eax + 0x6c]
mov ebx, dword [ecx + 0x6c]
mov ebp, dword [esp + 0x14]
sub ebx, edx
mov dword [ecx + 0x6c], ebx
mov ecx, dword [edi + esi*4 + 0x264]
mov eax, dword [eax + 0x70]
sub dword [ecx + 0x70], eax
lea ecx, [esi + esi*2 + 0x90]
mov eax, dword [edi + ecx*4 + 4]
cmp ebp, eax
lea edi, [edi + ecx*4]
je 0x404b8a
mov edx, dword [ebp + 4]
mov eax, dword [ebp]
mov dword [edx], eax
mov edx, dword [ebp + 4]
mov ecx, dword [ebp]
push ebp
mov dword [ecx + 4], edx
call fcn.00496b1d
mov eax, dword [edi + 8]
add esp, 4
dec eax
mov dword [edi + 8], eax
mov ecx, dword [esp + 0x1c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x18
ret 4