Function at 0x41ff70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x24]
cmp eax, dword [ecx + 8]
jbe 0x4208c0
sub esp, 0xa4
mov ecx, dword [0xaa0960]
mov edx, dword [0xaa0964]
mov dword [0xaa0968], ecx
mov dword [0xaa096c], edx
mov ecx, dword [esp + 0xa8]
mov edx, dword [ecx + 0xe8]
mov ebx, dword [esp + 0xac]
sub ebx, edx
mov dword [esp + 0x60], ebx
mov edx, dword [ecx + 0xec]
mov ebp, dword [esp + 0xb0]
sbb ebp, edx
mov dword [esp + 0x64], ebp
test ebx, ebx
seta dl
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
xchg edi, ebx
setg bl
xchg edi, ebx
and edx, esi
or edi, edx
xchg edi, eax
test al, al
xchg edi, eax
jne 0x420000
mov edx, 0x3fd00000
xor eax, eax
jmp 0x4200df
xchg edi, eax
mov byte [esp + 0x2b], al
xchg edi, eax
mov eax, ebx
mov edx, dword [esp + 0xb4]
mul edx
mov dword [esp + 0x94], edx
mov dword [esp + 0x90], eax
mov esi, dword [ecx + 0xc8]
mov edi, dword [ecx + 0xcc]
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.0044dc90
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x88], edx
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0xb4]
imul ebx, ebp
mov edi, dword [esp + 0x94]
add ebx, edi
sar ebp, 0x1f
mov esi, dword [esp + 0x60]
imul ebp, esi
add ebx, ebp
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x90]
mov dword [esp], ebx
call fcn.0044dc90
mov ecx, dword [esp + 0x8c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp], ecx
call fcn.0044c660
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [esp + 4], 0x3fd00000
mov dword [esp], 0
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
call fcn.0044bb60
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0x60]
mov ebp, dword [esp + 0x64]
movzx edi, byte [esp + 0x2b]
mov eax, ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x94], edx
mov esi, dword [ecx + 0x18]
cmp dword [ecx + 0x70], esi
xchg esi, ebx
setbe bl
xchg esi, ebx
mov edx, dword [ecx + 0x74]
mov ebp, dword [ecx + 0x1c]
cmp edx, ebp
sete dl
xchg ebp, ebx
setb bl
xchg ebp, ebx
and esi, edx
or ebp, esi
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x4208a3
mov dword [esp + 0x90], eax
xchg edi, eax
test al, al
xchg edi, eax
jne 0x420129
xor edx, edx
xor ebx, ebx
jmp 0x4201d1
mov eax, ebx
mov edx, dword [esp + 0xb4]
mul edx
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], eax
mov esi, dword [ecx + 0xe0]
mov edi, dword [ecx + 0xe4]
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.0044dc90
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 8]
mov dword [esp + 0x80], edx
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0xb4]
imul ebx, ebp
mov esi, dword [esp + 0x8c]
add ebx, esi
sar ebp, 0x1f
mov esi, dword [esp + 0x60]
imul esi, ebp
add ebx, esi
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0x88]
mov dword [esp], ebx
call fcn.0044dc90
mov ecx, dword [esp + 0x84]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x80]
mov dword [esp], ecx
call fcn.0044c660
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ebx, ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], ebx
lea eax, [ecx + 0xa8]
mov dword [esp + 0xa0], eax
mov dword [esp], eax
call fcn.00402780
mov eax, dword [esp + 4]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xa8]
lea ebx, [edx + 0xb0]
mov dword [esp + 0x9c], ebx
mov dword [esp], ebx
call fcn.00402780
mov eax, dword [esp + 4]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 0x40]
add ecx, eax
mov dword [esp + 0x84], ecx
mov ebx, dword [esp + 8]
mov dword [esp + 0x44], ebx
mov ebp, dword [esp + 0xa8]
lea esi, [ebp + 0xb8]
mov dword [esp + 0x98], esi
mov dword [esp], esi
call fcn.00402780
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x84]
add eax, ecx
mov dword [esp + 0x5c], eax
mov ebx, dword [esp + 0xa8]
mov ebp, dword [ebx + 0x70]
mov esi, dword [ebx + 0x18]
sub ebp, esi
mov esi, dword [ebx + 0x74]
mov edi, dword [ebx + 0x1c]
sbb esi, edi
mov edi, dword [esp + 8]
mov dword [esp + 0x4c], edi
mov dword [esp + 4], esi
mov dword [esp], ebp
call fcn.0044de50
mov eax, dword [esp + 0xc]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x7c], ecx
mov edx, dword [esp + 0x94]
mov dword [esp + 4], edx
mov ebx, dword [esp + 0x90]
mov dword [esp], ebx
mov ebp, dword [esp + 0x8c]
mov dword [esp + 0xc], ebp
mov ebp, dword [esp + 0x88]
mov dword [esp + 8], ebp
call fcn.0044bb60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x80]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x7c]
mov dword [esp], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.0044c1e0
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
add eax, ecx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x44]
adc eax, ecx
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x84]
add ecx, edx
mov ecx, dword [esp + 0x4c]
adc eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x8c], ecx
mov edx, dword [esp + 0x10]
mov dword [esp + 0x88], edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.0044dc90
mov eax, dword [esp + 0xc]
mov dword [esp + 0x84], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x80], ecx
mov dword [esp + 4], 0x3ff00000
mov dword [esp], 0
mov edx, dword [esp + 0x94]
xor edx, 0x80000000
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 8], edx
call fcn.0044bb60
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x84]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x80]
mov dword [esp], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.0044c1e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x88]
mov dword [esp], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
call fcn.0044c660
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xa8]
mov ebx, dword [edx + 0x20]
mov dword [esp + 0x8c], ebx
mov ebp, dword [edx + 0x24]
mov dword [esp + 0x88], ebp
lea esi, [edx + 0x28]
mov dword [esp], esi
mov dword [esp + 4], ebx
mov dword [esp + 8], ebp
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0x3ff00000
call fcn.004217e0
movzx eax, byte [esp + 0x24]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0xa8]
mov dword [ebx + 0x20], ecx
mov dword [ebx + 0x24], edx
test al, al
jne 0x420464
mov dword [ebx + 0x20], 0
mov dword [ebx + 0x24], 0
mov ecx, dword [0xaa01f0]
test ecx, ecx
jle 0x420886
mov byte [esp + 0x2a], al
call fcn.00438dd0
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov dword [esp + 0xc], 0x40590000
mov dword [esp + 8], 0
call fcn.0044c1e0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0044dce0
mov eax, dword [esp + 8]
mov dword [esp + 0x78], eax
mov dword [esp + 4], 0x40390000
mov dword [esp], 0
call fcn.0044dce0
mov eax, dword [esp + 8]
mov dword [esp + 0x74], eax
call fcn.00438dd0
lea eax, [0x836742]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00439a00
mov eax, dword [esp + 0x78]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00439800
lea eax, [0x836447]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.00439a00
mov eax, dword [esp + 0x74]
mov ecx, eax
sar eax, 0x1f
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00439800
lea eax, [0x8375ee]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.00439a00
call fcn.00438e40
mov eax, dword [esp + 0xa0]
mov dword [esp], eax
call fcn.00402780
mov eax, dword [esp + 8]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0x9c]
mov dword [esp], edx
call fcn.00402780
mov eax, dword [esp + 8]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x98]
mov dword [esp], edx
call fcn.00402780
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x80]
mov dword [esp + 0x94], ecx
mov edx, dword [eax + 0x88]
mov dword [esp + 0x90], edx
add ecx, edx
mov dword [esp + 0x84], ecx
mov ebp, dword [eax + 0x98]
mov dword [esp + 0x80], ebp
add ebp, ecx
mov dword [esp + 0x7c], ebp
mov edi, dword [eax + 0x84]
mov dword [esp + 0x70], edi
mov ebp, dword [eax + 0x8c]
mov dword [esp + 0x6c], ebp
mov eax, dword [eax + 0x9c]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x50], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x2c], ecx
call fcn.00438dd0
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x34]
mov dword [esp], eax
call fcn.00439800
lea eax, [0x83590a]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00439a00
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.00439800
lea eax, [0x83590a]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00439a00
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00439800
lea eax, [0x836c3b]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00439a00
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
add eax, ecx
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
adc eax, ecx
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
add ecx, edx
mov ecx, dword [esp + 0x68]
adc ecx, eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.004396a0
lea eax, [0x836c32]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.00439a00
call fcn.00438e40
mov eax, dword [esp + 0xa8]
mov ecx, dword [eax + 0x70]
mov dword [esp + 0x94], ecx
mov edx, dword [eax + 0x60]
mov dword [esp + 0x90], edx
sub ecx, edx
mov dword [esp + 0x84], ecx
mov ebp, dword [eax + 0x18]
mov dword [esp + 0x80], ebp
mov esi, dword [eax + 0x1c]
mov dword [esp + 0x7c], esi
mov edi, dword [eax + 0x74]
mov dword [esp + 0x70], edi
mov eax, dword [eax + 0x64]
mov dword [esp + 0x6c], eax
call fcn.00438dd0
lea eax, [0x835bc9]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.00439a00
mov eax, dword [esp + 0x7c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x80]
mov dword [esp], eax
call fcn.004396a0
lea eax, [0x8360ce]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.00439a00
mov eax, dword [esp + 0x70]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x94]
mov dword [esp], ecx
call fcn.004396a0
lea eax, [0x837b64]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00439a00
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
sub eax, ecx
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x6c]
sbb eax, ecx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x84]
mov dword [esp], eax
call fcn.00439800
lea eax, [0x837c60]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.00439a00
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0x88]
mov dword [esp + 4], eax
call fcn.00439090
lea eax, [0x835909]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00439a00
call fcn.00438e40
movzx eax, byte [esp + 0x2a]
test al, al
jne 0x420842
call fcn.00438dd0
lea eax, [0x83a20f]
mov dword [esp], eax
mov dword [esp + 4], 0x12
call fcn.00439a00
call fcn.00438e40
call fcn.00438dd0
call fcn.00438ff0
call fcn.00438e40
mov eax, dword fs:[0x14]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
nop
movzx ecx, byte [eax + 0x87]
lea edx, [ecx - 1]
mov byte [eax + 0x87], dl
cmp cl, 1
jne 0x420886
nop
lea eax, [0xa9fd40]
mov dword [esp], eax
call fcn.0040ae10
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
add esp, 0xa4
ret
mov dword [esp + 0xbc], 0
mov dword [esp + 0xc0], 0
add esp, 0xa4
ret
call fcn.004634e0
jmp fcn.0041ff70