Function at 0x40bf04
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x64
mov dword [esp], 1
imul edx, dword [esp + 0x6c], 0x34
imul eax, dword [esp + 0x6c], 0x30
push ebx
mov ebx, ecx
mov ecx, dword [esp + 0x6c]
push ebp
mov ebp, 0x18f3672a
mov dword [esp + 0x14], ebx
sub edx, eax
add ecx, 0x30
mov eax, dword [esp + 0x74]
add edx, ebp
xor ecx, edx
imul eax, ecx
lea ecx, [esp + 0x30]
push esi
push edi
sub eax, 0x30
push eax
call fcn.0040b154
push 0x35
lea ecx, [esp + 0x44]
call fcn.0040b154
imul edx, dword [esp + 0x7c], 0x34
imul eax, dword [esp + 0x7c], 0x30
mov ecx, dword [esp + 0x78]
add ecx, 0x30
sub edx, eax
mov eax, dword [esp + 0x7c]
add edx, ebp
xor ecx, edx
imul eax, ecx
lea ecx, [esp + 0x48]
sub eax, 0x37
push eax
call fcn.0040b154
push 5
lea ecx, [esp + 0x24]
call fcn.0040b154
push 0
lea ecx, [esp + 0x2c]
call fcn.0040b154
mov esi, dword [esp + 0x78]
mov eax, dword [esp + 0x7c]
imul ecx, dword [esp + 0x2c], 0x34
mov dword [esp + 0x34], eax
imul eax, dword [esp + 0x2c], 0x30
mov edx, dword [esp + 0x2c]
sub ecx, eax
mov eax, dword [esp + 0x28]
add ecx, ebp
add eax, 0x30
xor eax, ecx
imul ecx, dword [esp + 0x34], 0x34
imul edx, eax
imul eax, dword [esp + 0x34], 0x30
sub ecx, eax
lea eax, [esi + 0x30]
add ecx, ebp
xor ecx, eax
mov eax, dword [esp + 0x34]
imul eax, ecx
cmp edx, eax
jae 0x40c24f
mov eax, dword [esp + 0x40]
mov ebp, dword [esp + 0x38]
add eax, 0x30
mov edi, dword [esp + 0x28]
add ebp, 0x30
mov dword [esp + 0x14], eax
add edi, 0x30
mov eax, dword [esp + 0x48]
mov ebx, dword [esp + 0x14]
add eax, 0x30
mov dword [esp + 0x18], eax
push esi
xor esi, 0x8b0c
add esi, 0x12ddb
sub esi, 0x16e30
pop esi
push edi
push ecx
add esp, 4
sub edi, 0xa05f
pop edi
push eax
push edx
add esp, 4
jmp 0x40c033
add eax, 0xddc9
pop eax
imul ecx, dword [esp + 0x2c], 0x34
imul eax, dword [esp + 0x2c], 0x30
mov esi, dword [esp + 0x2c]
imul edx, dword [esp + 0x3c], 0x34
sub ecx, eax
imul eax, dword [esp + 0x3c], 0x30
add ecx, 0x18f3672a
xor ecx, edi
imul esi, ecx
mov ecx, dword [esp + 0x3c]
sub edx, eax
mov eax, dword [esp + 0x10]
add edx, 0x18f3672a
xor edx, ebp
imul ecx, edx
imul eax, ecx
cmp esi, eax
jne 0x40c0b8
imul edx, dword [esp + 0x24], 0x34
imul eax, dword [esp + 0x24], 0x30
mov ecx, dword [esp + 0x20]
add ecx, 0x30
sub edx, eax
mov eax, dword [esp + 0x24]
add edx, 0x18f3672a
xor ecx, edx
imul eax, ecx
lea ecx, [esp + 0x50]
dec eax
push eax
call fcn.0040b154
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
push ecx
push eax
add esp, 4
sub ecx, 0xd613
or ecx, 0x562f
or ecx, 0x9c2c
pop ecx
push esi
push ebx
add esp, 4
and esi, 0x1317f
and esi, 0xe59f
pop esi
push ecx
xor ecx, 0xf120
pop ecx
imul ecx, dword [esp + 0x2c], 0x34
imul eax, dword [esp + 0x2c], 0x30
mov esi, dword [esp + 0x2c]
imul edx, dword [esp + 0x44], 0x34
sub ecx, eax
imul eax, dword [esp + 0x44], 0x30
add ecx, 0x18f3672a
xor ecx, edi
imul esi, ecx
mov ecx, dword [esp + 0x44]
sub edx, eax
mov eax, dword [esp + 0x10]
add edx, 0x18f3672a
xor edx, ebx
imul ecx, edx
imul eax, ecx
cmp esi, eax
jne 0x40c16a
imul edx, dword [esp + 0x24], 0x34
imul eax, dword [esp + 0x24], 0x30
mov ecx, dword [esp + 0x20]
add ecx, 0x30
sub edx, eax
mov eax, dword [esp + 0x24]
add edx, 0x18f3672a
xor ecx, edx
imul eax, ecx
lea ecx, [esp + 0x58]
sub eax, 3
push eax
call fcn.0040b154
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
imul ecx, dword [esp + 0x2c], 0x34
imul eax, dword [esp + 0x2c], 0x30
mov esi, dword [esp + 0x2c]
imul edx, dword [esp + 0x4c], 0x34
sub ecx, eax
imul eax, dword [esp + 0x4c], 0x30
add ecx, 0x18f3672a
xor ecx, edi
mov edi, 0x18f3672a
imul esi, ecx
mov ecx, dword [esp + 0x4c]
sub edx, eax
mov eax, dword [esp + 0x10]
add edx, edi
xor edx, dword [esp + 0x18]
imul ecx, edx
imul eax, ecx
cmp esi, eax
jne 0x40c1e7
imul edx, dword [esp + 0x24], 0x34
imul eax, dword [esp + 0x24], 0x30
mov ecx, dword [esp + 0x20]
add ecx, 0x30
sub edx, eax
mov eax, dword [esp + 0x24]
add edx, edi
xor ecx, edx
imul eax, ecx
lea ecx, [esp + 0x60]
dec eax
push eax
call fcn.0040b154
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
push ecx
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x30]
call fcn.0040c8db
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov esi, dword [esp + 0x78]
mov eax, dword [esp + 0x7c]
imul ecx, dword [esp + 0x2c], 0x34
mov dword [esp + 0x34], eax
imul eax, dword [esp + 0x2c], 0x30
sub ecx, eax
add ecx, edi
mov edi, dword [esp + 0x28]
add edi, 0x30
mov edx, edi
xor edx, ecx
imul edx, dword [esp + 0x2c]
imul ecx, dword [esp + 0x34], 0x34
imul eax, dword [esp + 0x34], 0x30
sub ecx, eax
lea eax, [esi + 0x30]
add ecx, 0x18f3672a
xor ecx, eax
mov eax, dword [esp + 0x34]
imul eax, ecx
cmp edx, eax
jb 0x40c008
mov ebx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
pop edi
pop esi
mov dword [ebx], eax
mov eax, ebx
pop ebp
mov dword [ebx + 4], ecx
pop ebx
add esp, 0x64
ret