Function at 0x41ffa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x420900
add esp, 0xffffff80
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x7c]
test edx, edx
jne 0x41ffdf
mov edx, dword [ecx + 0x6c]
test edx, edx
jne 0x41ffdf
cmp dword [ecx], eax
jne 0x4208e9
mov eax, dword [esp + 0x84]
mov ecx, dword [eax]
movzx edx, byte [esp + 0x88]
test dl, dl
jne 0x41fffa
mov dword [eax], 0
mov dword [esp + 0x24], ecx
test byte [ecx], al
mov eax, dword [0x83de58]
mov dword [esp + 0x1c], eax
nop
lea edx, [ecx + 0x3b]
mov dword [esp + 0x5c], edx
mov dword [esp], edx
call fcn.00402430
cmp byte [esp + 4], 1
jne 0x4208d3
mov eax, dword [esp + 0x1c]
lea ecx, [eax - 1]
mov edx, dword [esp + 0x24]
cmp dword [edx + 0x30], ecx
jne 0x4208d3
mov dword [esp + 0x4c], ecx
movzx ebx, byte [0x842408]
test bl, bl
je 0x42005a
mov eax, dword [edx + 0x10]
shl eax, 0xd
mov dword [esp], eax
call fcn.004494d0
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x10]
lea ecx, [0x83de70]
mov dword [esp], ecx
mov dword [esp + 8], 0
mov dword [esp + 4], eax
call fcn.00402610
mov eax, dword [esp + 0x24]
movzx ecx, byte [eax + 0x3a]
mov byte [esp + 0x17], cl
mov edx, dword [eax + 0x40]
mov dword [esp + 0x20], edx
mov ebx, dword [eax + 0x4c]
mov dword [esp + 0x48], ebx
lea ebp, [eax + 0x4c]
mov dword [esp + 0x60], ebp
mov dword [esp + 0x64], ebx
jmp 0x4200ad
mov eax, edx
movzx ecx, byte [esp + 0x17]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x48]
mov ebp, dword [esp + 0x64]
test ebp, ebp
je 0x42018e
movzx esi, word [ebp + 4]
test edx, edx
je 0x4208ce
mov edi, dword [eax + 0x2c]
mov dword [esp + 0x40], edi
test byte [edi], al
mov eax, esi
mov ebx, edx
xor edx, edx
div ebx
mov dword [esp + 0x2c], eax
mov edx, eax
imul eax, ebx
mov esi, dword [esp + 0x24]
mov esi, dword [esi + 0xc]
add esi, eax
mov dword [esp + 0x28], esi
nop
shr edx, 3
mov dword [esp + 0x30], edx
movzx edx, byte [edx + edi]
mov edi, dword [esp + 0x2c]
and edi, 7
mov ecx, edi
mov esi, 1
shl esi, cl
xchg esi, eax
test al, dl
xchg esi, eax
je 0x420157
cmp byte [ebp + 6], 3
je 0x420122
nop
mov dword [esp + 0x60], ebp
mov edx, dword [ebp]
mov dword [esp + 0x64], edx
jmp 0x42014c
nop
mov eax, dword [ebp]
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x60]
mov dword [ecx], eax
mov byte [ebp + 9], 1
mov eax, dword [esp + 0x28]
mov dword [esp], ebp
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.00424160
mov ebx, dword [esp + 0x20]
mov eax, ebx
mov edx, dword [esp + 0x24]
jmp 0x42009e
lea edi, [eax + ebx]
jmp 0x420849
nop
or edx, esi
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x40]
mov byte [ebp + ebx], dl
mov ecx, 1
jmp 0x42017d
xor ecx, ecx
jmp 0x42017d
mov eax, ebx
xor ecx, ecx
mov dword [esp + 0x3c], edi
mov byte [esp + 0x18], cl
mov edx, dword [esp + 0x24]
jmp 0x42086a
test ebx, ebx
je 0x4201ae
mov ebx, dword [eax + 0x4c]
test ebx, ebx
jne 0x4201ae
mov dword [esp], eax
call fcn.00423af0
mov eax, dword [esp + 0x24]
movzx ecx, byte [esp + 0x17]
mov edx, dword [esp + 0x20]
mov ebx, dword [0x85e128]
test ebx, ebx
jne 0x4201c2
mov ebx, dword [0x85e0e4]
test ebx, ebx
je 0x4201f6
mov ebx, dword [eax + 0x2c]
test byte [ebx], al
mov dword [esp + 0x68], ebx
mov byte [esp + 0x6c], 1
mov dword [esp + 0x70], 0
mov ebx, dword [eax + 0x28]
test byte [ebx], al
nop
mov dword [esp + 0x74], ebx
mov byte [esp + 0x78], 1
mov dword [esp + 0x7c], 0
xor ebx, ebx
jmp 0x420790
mov ebx, dword [eax + 0x18]
cmp dword [eax + 0x1c], ebx
jbe 0x420254
mov ebp, dword [eax + 0x2c]
test byte [ebp], al
mov esi, dword [eax + 0x28]
test byte [esi], al
mov edi, ebx
shr ebx, 3
movzx ebp, byte [ebx + ebp]
movzx esi, byte [ebx + esi]
xchg esi, ebx
not ebx
xchg esi, ebx
and esi, ebp
and edi, 7
mov ebp, ecx
mov ecx, edi
xchg esi, eax
shr al, cl
xchg esi, eax
xchg esi, eax
test al, al
xchg esi, eax
je 0x42024c
mov dword [esp + 0x34], ebx
mov dword [esp], eax
call fcn.004209b0
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x34]
movzx ebp, byte [esp + 0x17]
lea ecx, [ebx + 1]
jmp 0x42073d
mov dword [esp], eax
call fcn.00410530
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x24]
movzx edx, word [ecx + 0x38]
mov ebx, edx
sub edx, eax
cmp ax, bx
ja 0x420726
mov dword [esp + 0x44], eax
mov word [esp + 0x1a], dx
mov word [ecx + 0x38], ax
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x58], 0
movzx ebx, byte [0x842408]
test bl, bl
je 0x4202bb
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov ebx, dword [ebx + 0x18]
mov ebx, dword [ebx + 0x58]
movzx ebp, dx
imul ebp, dword [ecx + 0x40]
add dword [ebx + 0x918], ebp
mov eax, dword [ecx + 0x2c]
mov dword [ecx + 0x28], eax
mov eax, dword [ecx + 0x1c]
mov dword [esp], eax
call fcn.00424330
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x24]
mov dword [ecx + 0x2c], eax
mov dword [esp], ecx
mov dword [esp + 4], 0
call fcn.0040f7c0
nop
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00402430
cmp byte [esp + 4], 1
jne 0x420710
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x30]
mov edx, dword [esp + 0x4c]
cmp ecx, edx
jne 0x420710
mov edx, dword [esp + 0x1c]
lea ebx, [edx + 1]
cmp ecx, ebx
je 0x4206fa
lea ebx, [edx + 3]
cmp ecx, ebx
je 0x4206fa
lea ecx, [eax + 0x30]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.004026c0
mov eax, dword [esp + 0x24]
movzx ecx, byte [eax + 0x3d]
test cl, cl
je 0x420410
movzx edx, byte [esp + 0x88]
test dl, dl
jne 0x4206e4
mov edx, dword [esp + 0x44]
test dx, dx
jbe 0x4203ac
movzx edx, byte [esp + 0x17]
movzx edx, dl
cmp edx, 0x88
jae 0x4206d8
shl edx, 7
lea ecx, [0x83def0]
lea ecx, [edx + ecx + 0x38]
mov edx, dword [esp + 0x1c]
shr edx, 1
and edx, 1
lea edx, [edx + edx*2]
lea ecx, [ecx + edx*8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00429b40
mov byte [esp + 0x8c], 0
sub esp, 0xffffff80
ret
mov ecx, dword [eax + 0x10]
lea edx, [0x83de68]
mov dword [esp], edx
neg ecx
mov dword [esp + 4], ecx
call fcn.00402550
nop
nop
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov byte [esp + 4], 0
call fcn.00402760
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
lea eax, [0x420910]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x54], eax
lea eax, [esp + 0x50]
mov dword [esp], eax
call fcn.004513b0
mov byte [esp + 0x8c], 0
sub esp, 0xffffff80
ret
movzx edx, byte [esp + 0x17]
mov ebx, edx
shr dl, 1
test dl, dl
je 0x420583
movzx ebp, word [esp + 0x1a]
test bp, bp
ja 0x42043a
movzx edx, byte [esp + 0x88]
test dl, dl
jmp 0x4204d2
mov byte [esp + 0x19], dl
mov byte [eax + 0x3c], 1
lea ecx, [0x85f820]
mov dword [esp], ecx
call fcn.0042a2c0
mov eax, dword [esp + 4]
test byte [eax], al
movzx ecx, byte [esp + 0x19]
movsx ecx, cl
cmp ecx, 0x44
jae 0x4206cc
lea eax, [eax + ecx*8 + 0x278]
mov dword [esp], eax
mov dword [esp + 8], 0
movzx eax, word [esp + 0x1a]
movzx eax, ax
mov dword [esp + 0x4c], eax
mov dword [esp + 4], eax
call fcn.00402610
lea eax, [0x85f820]
mov dword [esp], eax
call fcn.0042a380
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x40]
mov eax, dword [esp + 0x4c]
mul ecx
lea ecx, [0x85e7b8]
mov dword [esp], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.00402610
movzx eax, byte [esp + 0x88]
test al, al
mov eax, dword [esp + 0x24]
movzx ebx, byte [esp + 0x17]
jne 0x42069c
mov edx, dword [esp + 0x44]
test dx, dx
je 0x420565
movzx edx, dx
cmp dword [eax + 0x1c], edx
jne 0x420529
movzx edx, bl
cmp edx, 0x88
jae 0x4206c0
shl edx, 7
lea ecx, [0x83def0]
lea ecx, [edx + ecx + 0x38]
mov edx, dword [esp + 0x1c]
shr edx, 1
and edx, 1
lea edx, [edx + edx*2]
lea ecx, [ecx + edx*8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00429b40
jmp 0x42069c
movzx edx, bl
cmp edx, 0x88
jae 0x4206b4
shl edx, 7
lea ecx, [0x83def0]
lea ecx, [ecx + edx + 8]
mov edx, dword [esp + 0x1c]
shr edx, 1
and edx, 1
lea edx, [edx + edx*2]
lea ecx, [ecx + edx*8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00429b40
jmp 0x42069c
lea ecx, [0x83ddc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00423450
mov byte [esp + 0x8c], 1
sub esp, 0xffffff80
ret
movzx edx, byte [esp + 0x88]
test dl, dl
jne 0x42069c
movzx edx, word [esp + 0x1a]
test dx, dx
je 0x420669
mov ecx, dword [0x85e0e8]
test ecx, ecx
jle 0x4205c7
mov dword [eax + 0x44], 0
mov eax, dword [eax + 0xc]
mov dword [esp], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 4], eax
call fcn.004128a0
jmp 0x4205d9
lea ecx, [0x83ddc0]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00423450
lea eax, [0x85f820]
mov dword [esp], eax
call fcn.0042a2c0
mov eax, dword [esp + 4]
mov dword [esp + 0x58], eax
test byte [eax], al
lea ecx, [eax + 0x270]
mov dword [esp], ecx
mov dword [esp + 8], 0
mov dword [esp + 4], 1
call fcn.00402610
mov eax, dword [esp + 0x58]
add eax, 0x268
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x20]
mov dword [esp + 4], eax
call fcn.00402610
lea eax, [0x85f820]
mov dword [esp], eax
call fcn.0042a380
nop
lea eax, [0x85e7b8]
mov dword [esp], eax
mov dword [esp + 8], 0
mov eax, dword [esp + 0x20]
mov dword [esp + 4], eax
call fcn.00402610
mov byte [esp + 0x8c], 1
sub esp, 0xffffff80
ret
movzx edx, bl
cmp edx, 0x88
jae 0x4206a8
shl edx, 7
lea ecx, [0x83def0]
lea ecx, [edx + ecx + 0x38]
mov edx, dword [esp + 0x1c]
shr edx, 1
and edx, 1
lea edx, [edx + edx*2]
lea ecx, [ecx + edx*8]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00429b40
mov byte [esp + 0x8c], 0
sub esp, 0xffffff80
ret
mov eax, edx
mov ecx, 0x88
call fcn.00452970
mov eax, edx
mov ecx, 0x88
call fcn.00452970
mov eax, edx
mov ecx, 0x88
call fcn.00452970
mov eax, ecx
mov ecx, 0x44
call fcn.00452970
mov eax, edx
mov ecx, 0x88
call fcn.00452970
lea eax, [0x7b7783]
mov dword [esp], eax
mov dword [esp + 4], 0x2a
call fcn.0042fde0
lea eax, [0x7b2034]
mov dword [esp], eax
mov dword [esp + 4], 0x11
call fcn.0042fde0
lea eax, [0x7b6fe3]
mov dword [esp], eax
mov dword [esp + 4], 0x27
call fcn.0042fde0
lea eax, [0x7b5def]
mov dword [esp], eax
mov dword [esp + 4], 0x20
call fcn.0042fde0
inc ecx
mov ebx, dword [eax + 0x1c]
add ebx, 7
shr ebx, 3
cmp ecx, ebx
jae 0x420254
mov ebx, dword [eax + 0x2c]
test byte [ebx], al
mov esi, dword [eax + 0x28]
test byte [esi], al
movzx ebx, byte [ecx + ebx]
movzx esi, byte [ecx + esi]
xchg esi, ebx
not ebx
xchg esi, ebx
xchg esi, eax
test bl, al
xchg esi, eax
je 0x42073c
mov dword [esp + 0x38], ecx
mov dword [esp], eax
call fcn.004209b0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x20]
movzx ebp, byte [esp + 0x17]
jmp 0x42073c
inc dword [esp + 0x7c]
inc ebx
cmp dword [eax + 0x1c], ebx
jbe 0x4201f6
mov ebp, dword [esp + 0x68]
movzx esi, byte [esp + 0x6c]
movzx ebp, byte [ebp]
xchg esi, eax
xchg ebp, ebx
test bl, al
xchg ebp, ebx
xchg esi, eax
jne 0x4207e7
mov ebp, dword [esp + 0x7c]
cmp dword [eax + 0x18], ebp
ja 0x4207d0
mov ebp, dword [esp + 0x74]
movzx esi, byte [esp + 0x78]
movzx ebp, byte [ebp]
xchg esi, eax
xchg ebp, ebx
test bl, al
xchg ebp, ebx
xchg esi, eax
je 0x4207e7
mov ebp, dword [eax + 0x40]
imul ebp, ebx
add ebp, dword [eax + 0xc]
mov esi, dword [0x85e0e4]
test esi, esi
je 0x4207e7
xor esi, esi
jmp 0x42083e
nop
movzx ebp, byte [esp + 0x6c]
xchg ebp, eax
cmp al, 0x80
xchg ebp, eax
jne 0x4207ff
inc dword [esp + 0x68]
mov byte [esp + 0x6c], 1
jmp 0x420807
shl ebp, 1
xchg ebp, eax
mov byte [esp + 0x6c], al
xchg ebp, eax
inc dword [esp + 0x70]
nop
movzx ebp, byte [esp + 0x78]
xchg ebp, eax
cmp al, 0x80
xchg ebp, eax
jne 0x420826
inc dword [esp + 0x74]
mov byte [esp + 0x78], 1
jmp 0x42078b
shl ebp, 1
xchg ebp, eax
mov byte [esp + 0x78], al
xchg ebp, eax
jmp 0x42078b
mov dword [ebp + esi], 0xdeadbeef
add esi, 4
cmp esi, edx
jb 0x420833
jmp 0x4207e7
mov ebp, dword [ebp]
mov ebx, eax
test ebp, ebp
je 0x420179
mov eax, ebx
movzx ebx, word [ebp + 4]
cmp ebx, edi
jae 0x420175
cmp byte [ebp + 6], 1
jne 0x420844
jmp 0x42015f
mov ebx, dword [esp + 0x64]
test ebx, ebx
je 0x42009e
movzx ebp, word [ebx + 4]
cmp ebp, edi
jae 0x42009e
mov esi, dword [edx + 0xc]
add ebp, esi
cmp byte [ebx + 6], 1
je 0x42089e
test cl, cl
je 0x42089e
nop
mov dword [esp + 0x60], ebx
mov ebx, dword [ebx]
mov dword [esp + 0x64], ebx
jmp 0x42086a
nop
mov ecx, dword [ebx]
mov dword [esp + 0x64], ecx
mov edx, dword [esp + 0x60]
mov dword [edx], ecx
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], eax
call fcn.00424160
mov eax, dword [esp + 0x20]
movzx ecx, byte [esp + 0x18]
mov edx, dword [esp + 0x24]
mov edi, dword [esp + 0x3c]
jmp 0x42086a
call fcn.0042ea10
lea eax, [0x7b4b4a]
mov dword [esp], eax
mov dword [esp + 4], 0x1b
call fcn.0042fde0
lea eax, [0x7b4f9a]
mov dword [esp], eax
mov dword [esp + 4], 0x1c
call fcn.0042fde0
nop
call fcn.004514c0
jmp fcn.0041ffa0