Function at 0x40acf0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x521171
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x90
mov al, byte [esp + 3]
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esp + 0x30], esi
mov byte [esp + 0x18], al
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
lea ecx, [esp + 0x38]
mov dword [esp + 0xa8], ebx
call fcn.0048a5e0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 1
call fcn.0048a5e0
mov cl, byte [esp + 0x13]
push ebx
mov byte [esp + 0x44], cl
lea ecx, [esp + 0x44]
mov byte [esp + 0xac], 2
call fcn.00405cc0
lea edx, [esp + 0x34]
mov ecx, esi
push edx
mov byte [esp + 0xac], 3
call fcn.0040a940
cmp ax, 2
jne 0x40addb
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x549e08
call fcn.0048a680
lea eax, [esp + 0x54]
push eax
call fcn.0049de10
add esp, 8
mov ecx, dword [0x531160]
mov byte [esp + 0xa8], 4
push ecx
push ebx
push eax
lea ecx, [esp + 0x4c]
call fcn.00407be0
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0xac], 3
call fcn.00405cc0
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x34]
push edx
push 1
push eax
jmp 0x40ae3e
cmp ax, 1
jne 0x40b535
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x549e00
call fcn.0048a680
lea ecx, [esp + 0x54]
push ecx
call fcn.0049de10
add esp, 8
mov edx, dword [0x531160]
lea ecx, [esp + 0x40]
push edx
push ebx
push eax
mov byte [esp + 0xb4], 5
call fcn.00407be0
push 1
lea ecx, [esp + 0x54]
mov byte [esp + 0xac], 3
call fcn.00405cc0
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x34]
push eax
push 1
push ecx
lea ecx, [esp + 0x24]
call fcn.0040d830
mov byte [esp + 0x13], bl
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x549df8
call fcn.0048a680
mov ecx, dword [0x55b3dc]
call fcn.004a0490
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549df0
call fcn.0048a680
mov ecx, dword [0x55b3dc]
call fcn.004a0610
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x549dc4
call fcn.0048a680
mov ecx, dword [0x55b3dc]
call fcn.004a0610
mov eax, dword [esp + 0x1c]
cmp eax, ebx
jne 0x40aeb3
xor edx, edx
jmp 0x40aecc
mov ecx, dword [esp + 0x20]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
movsx ebp, dx
xor edi, edi
cmp ebp, ebx
jle 0x40af54
mov ecx, ebp
sub ecx, edi
lea esi, [ecx - 1]
lea ecx, [esp + 0x18]
push esi
call fcn.0040d190
push ecx
add eax, 8
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0048a5f0
push esi
lea ecx, [esp + 0x20]
mov byte [esp + 0xb0], 0xc
call fcn.0040d190
sub esp, 0x10
add eax, 0xc
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.0040d030
push esi
lea ecx, [esp + 0x30]
mov byte [esp + 0xc0], 0xd
call fcn.0040d190
push ecx
add eax, 4
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
call fcn.0048a5f0
mov ecx, dword [0x55b3dc]
mov byte [esp + 0xc0], 3
call fcn.004a0860
inc edi
cmp edi, ebp
jl 0x40aed5
mov ecx, dword [0x55b3dc]
call fcn.004a0a70
push 0xa
mov esi, eax
call fcn.00430630
add esp, 4
cmp si, 1
je 0x40b2df
cmp si, bx
jne 0x40b2d0
cmp byte [esp + 0x13], bl
je 0x40afcc
push ebx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x549ad8
call fcn.0048a680
push ecx
mov byte [esp + 0xb8], 0x10
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x549de8
call fcn.0048a680
mov ecx, 0x55b3d0
mov byte [esp + 0xb8], 3
call fcn.00499670
jmp 0x40ae4b
mov ecx, dword [esp + 0x30]
lea edx, [esp + 0x34]
push edx
call fcn.0040a940
cmp ax, 2
jne 0x40b0d9
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x549e08
call fcn.0048a680
lea eax, [esp + 0x94]
push eax
call fcn.0049de10
add esp, 8
mov ecx, dword [0x531160]
mov byte [esp + 0xa8], 0x11
push ecx
push ebx
push eax
lea ecx, [esp + 0x4c]
call fcn.00407be0
push 1
lea ecx, [esp + 0x94]
mov byte [esp + 0xac], 3
call fcn.00405cc0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x549de0
call fcn.0048a680
lea edx, [esp + 0x84]
push edx
call fcn.0049de10
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x1c]
mov byte [esp + 0xa8], 0x12
cmp esi, ebx
jne 0x40b070
xor edx, edx
jmp 0x40b089
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
mov ecx, dword [0x531160]
lea eax, [edx*8]
sub eax, edx
push ecx
push ebx
push edi
lea ecx, [esi + eax*4 - 0x10]
call fcn.00407be0
push 1
lea ecx, [esp + 0x84]
mov byte [esp + 0xac], 3
call fcn.00405cc0
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x34]
push ecx
push 1
push edx
lea ecx, [esp + 0x24]
call fcn.0040d830
mov byte [esp + 0x13], 1
jmp 0x40ae4b
cmp ax, 1
jne 0x40b342
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x40b243
mov ecx, dword [esp + 0x20]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add edx, eax
je 0x40b243
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x549e00
call fcn.0048a680
lea ecx, [esp + 0x74]
push ecx
call fcn.0049de10
add esp, 8
mov edx, dword [0x531160]
lea ecx, [esp + 0x40]
push edx
push ebx
push eax
mov byte [esp + 0xb4], 0x13
call fcn.00407be0
mov eax, dword [esp + 0x74]
mov byte [esp + 0xa8], 3
cmp eax, ebx
je 0x40b175
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x40b16c
cmp al, 0xff
je 0x40b16c
dec al
mov byte [ecx], al
jmp 0x40b175
push ecx
call fcn.00514120
add esp, 4
push ecx
mov dword [esp + 0x78], ebx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x549de0
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
call fcn.0048a680
lea eax, [esp + 0x64]
push eax
call fcn.0049de10
add esp, 8
mov edi, eax
mov esi, dword [esp + 0x1c]
mov byte [esp + 0xa8], 0x14
cmp esi, ebx
jne 0x40b1bd
xor edx, edx
jmp 0x40b1d6
mov ecx, dword [esp + 0x20]
mov eax, 0x92492493
sub ecx, esi
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
mov eax, dword [0x531160]
lea ecx, [edx*8]
sub ecx, edx
push eax
push ebx
push edi
lea ecx, [esi + ecx*4 - 0x10]
call fcn.00407be0
mov eax, dword [esp + 0x64]
mov byte [esp + 0xa8], 3
cmp eax, ebx
je 0x40b21d
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x40b214
cmp al, 0xff
je 0x40b214
dec al
mov byte [ecx], al
jmp 0x40b21d
push ecx
call fcn.00514120
add esp, 4
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x34]
push edx
push 1
push eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
call fcn.0040d830
jmp 0x40ae4b
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x549e00
call fcn.0048a680
lea ecx, [esp + 0x54]
push ecx
call fcn.0049de10
add esp, 8
mov edx, dword [0x531160]
lea ecx, [esp + 0x40]
push edx
push ebx
push eax
mov byte [esp + 0xb4], 0x15
call fcn.00407be0
mov eax, dword [esp + 0x54]
mov byte [esp + 0xa8], 3
cmp eax, ebx
je 0x40b2aa
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x40b2a1
cmp al, 0xff
je 0x40b2a1
dec al
mov byte [ecx], al
jmp 0x40b2aa
push ecx
call fcn.00514120
add esp, 4
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x34]
push eax
push 1
push ecx
lea ecx, [esp + 0x24]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
call fcn.0040d830
jmp 0x40ae4b
push 0xa
call fcn.00430630
add esp, 4
jmp 0x40ae4b
push 1
lea ecx, [esp + 0x44]
mov byte [esp + 0xac], 0xf
call fcn.00405cc0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 0xe
call fcn.0048a720
lea ecx, [esp + 0x38]
mov byte [esp + 0xa8], bl
call fcn.0048a720
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, edi
mov dword [esp + 0xa8], 0xffffffff
je 0x40b683
push ebx
mov ecx, esi
call fcn.0040e140
add esi, 0x1c
cmp esi, edi
jne 0x40b32e
jmp 0x40b67f
push ebx
push 1
push ecx
cmp ax, bx
mov ecx, esp
jne 0x40b443
mov dword [esp + 0x20], esp
push 6
push 0x549c08
call fcn.0048a680
push ecx
mov byte [esp + 0xb8], 0x16
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x549dcc
call fcn.0048a680
mov ecx, 0x55b3d0
mov byte [esp + 0xb8], 3
call fcn.00499670
mov eax, dword [esp + 0x44]
mov byte [esp + 0xa8], 0x17
cmp eax, ebx
je 0x40b3bb
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x40b3b2
cmp al, 0xff
je 0x40b3b2
dec al
mov byte [ecx], al
jmp 0x40b3bb
push ecx
call fcn.00514120
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
call fcn.0048a720
lea ecx, [esp + 0x38]
mov byte [esp + 0xa8], bl
call fcn.0048a720
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
or ebp, 0xffffffff
cmp esi, edi
mov dword [esp + 0xa8], ebp
mov dword [esp + 0x30], esi
je 0x40b683
mov bl, 0x18
push 1
lea ecx, [esi + 0xc]
mov dword [esp + 0xac], 0x19
call fcn.00405cc0
lea ecx, [esi + 8]
mov byte [esp + 0xa8], bl
call fcn.0048a720
lea ecx, [esi + 4]
mov dword [esp + 0xa8], ebp
call fcn.0048a720
add esi, 0x1c
cmp esi, edi
mov dword [esp + 0x30], esi
jne 0x40b400
jmp 0x40b67f
mov dword [esp + 0x20], esp
push 6
push 0x549c08
call fcn.0048a680
push ecx
mov byte [esp + 0xb8], 0x1a
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x549c00
call fcn.0048a680
mov ecx, 0x55b3d0
mov byte [esp + 0xb8], 3
call fcn.00499670
mov eax, dword [esp + 0x44]
mov byte [esp + 0xa8], 0x1b
cmp eax, ebx
je 0x40b4ad
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x40b4a4
cmp al, 0xff
je 0x40b4a4
dec al
mov byte [ecx], al
jmp 0x40b4ad
push ecx
call fcn.00514120
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
call fcn.0048a720
lea ecx, [esp + 0x38]
mov byte [esp + 0xa8], bl
call fcn.0048a720
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
or ebp, 0xffffffff
cmp esi, edi
mov dword [esp + 0xa8], ebp
mov dword [esp + 0x30], esi
je 0x40b683
mov ebx, 0x1d
push 1
lea ecx, [esi + 0xc]
mov dword [esp + 0xac], ebx
call fcn.00405cc0
lea ecx, [esi + 8]
mov byte [esp + 0xa8], 0x1c
call fcn.0048a720
lea ecx, [esi + 4]
mov dword [esp + 0xa8], ebp
call fcn.0048a720
add esi, 0x1c
cmp esi, edi
mov dword [esp + 0x30], esi
jne 0x40b4f5
jmp 0x40b67f
push ebx
push 1
push ecx
cmp ax, bx
mov ecx, esp
jne 0x40b5e6
mov dword [esp + 0x20], esp
push 6
push 0x549c08
call fcn.0048a680
push ecx
mov byte [esp + 0xb8], 6
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x549dcc
call fcn.0048a680
mov ecx, 0x55b3d0
mov byte [esp + 0xb8], 3
call fcn.00499670
push 1
lea ecx, [esp + 0x44]
mov byte [esp + 0xac], 8
call fcn.00405cc0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 7
call fcn.0048a720
lea ecx, [esp + 0x38]
mov byte [esp + 0xa8], bl
call fcn.0048a720
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov dword [esp + 0xa8], 0xffffffff
mov edi, eax
je 0x40b683
push ebx
mov ecx, esi
call fcn.0040e140
add esi, 0x1c
cmp esi, edi
jne 0x40b5d2
jmp 0x40b67f
mov dword [esp + 0x20], esp
push 6
push 0x549c08
call fcn.0048a680
push ecx
mov byte [esp + 0xb8], 9
mov ecx, esp
mov dword [esp + 0x3c], esp
push 6
push 0x549c00
call fcn.0048a680
mov ecx, 0x55b3d0
mov byte [esp + 0xb8], 3
call fcn.00499670
push 1
lea ecx, [esp + 0x44]
mov byte [esp + 0xac], 0xb
call fcn.00405cc0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa8], 0xa
call fcn.0048a720
lea ecx, [esp + 0x38]
mov byte [esp + 0xa8], bl
call fcn.0048a720
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
cmp esi, eax
mov dword [esp + 0xa8], 0xffffffff
mov edi, eax
je 0x40b683
push ebx
mov ecx, esi
call fcn.0040e140
add esi, 0x1c
cmp esi, edi
jne 0x40b670
mov esi, dword [esp + 0x1c]
push esi
call fcn.00514120
mov ecx, dword [esp + 0xa4]
add esp, 4
mov ax, 1
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x9c
ret