Function at 0x40cbd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x870
mov edx, dword [esp + 0x874]
mov eax, ecx
mov dword [esp + 8], eax
test edx, edx
je 0x40d3d4
cmp dword [esp + 0x878], 0xf0
jbe 0x40d3d4
push esi
push edi
mov ecx, 0x18
lea edi, [esp + 0x78]
mov esi, edx
rep movsd dword es:[edi], dword [esi]
cmp dword [esp + 0xa4], 0x4d524353
je 0x40cc25
pop edi
xor eax, eax
pop esi
add esp, 0x870
ret 8
push ebp
push 0x1e00
lea edi, [eax + 0xe99c]
mov dword [eax + 0xe920], 2
push 0
push edi
mov ebp, 0x60
call sub.MSVCRT.dll_memset
movzx eax, byte [esp + 0xb9]
lea esi, [esp + 0x88]
mov ecx, 7
add esp, 0xc
rep movsd dword es:[edi], dword [esi]
mov edi, dword [esp + 0x14]
mov dword [edi + 0xe900], eax
cmp eax, 1
jae 0x40cc7a
mov dword [edi + 0xe900], 6
cmp dword [edi + 0xe900], 0x1f
jbe 0x40cc8d
mov dword [edi + 0xe900], 0x1f
movzx eax, byte [esp + 0xae]
mov dword [edi + 0xe904], eax
cmp eax, 0x28
jae 0x40ccaa
mov dword [edi + 0xe904], 0x28
cmp dword [edi + 0xe904], 0xf0
jbe 0x40ccc0
mov dword [edi + 0xe904], 0xf0
movzx eax, byte [esp + 0xac]
shl eax, 2
mov dword [edi + 0xe908], eax
test eax, eax
je 0x40ccdc
cmp eax, 0x100
jbe 0x40cce6
mov dword [edi + 0xe908], 0x100
movzx eax, byte [esp + 0xaf]
lea ecx, [edi + 0xc1c0]
and eax, 0x7f
mov dword [edi + 0xe910], 4
mov dword [edi + 0xe964], eax
xor edx, edx
push ebx
lea ebx, [ebx]
mov bl, byte [esp + edx + 0xc0]
mov dword [ecx], pe_nt_image_headers32
mov dword [ecx + 4], 0x40
mov dword [ecx + 8], 0x100
cmp bl, 0xff
je 0x40cd4e
lea eax, [edx + 1]
mov dword [edi + 0xe910], eax
movzx eax, bl
and eax, 8
mov dword [ecx + 8], 0
or eax, 4
shl eax, 4
mov dword [ecx], eax
inc edx
add ecx, 0x24
cmp edx, 0x20
jb 0x40cd10
cmp dword [edi + 0xe910], 4
jae 0x40cd6a
mov dword [edi + 0xe910], 4
mov eax, 0x1320
cmp word [esp + 0xa8], ax
jb 0x40cd83
test byte [esp + 0xa6], 0x40
je 0x40cd8a
or dword [edi + 0xe90c], 2
movzx ebx, word [esp + 0xa0]
cmp ebx, 1
jae 0x40cd9e
mov ebx, 1
jmp 0x40cdb1
cmp ebx, 0x100
jbe 0x40cdad
mov ebx, 0x100
jmp 0x40cdb1
test ebx, ebx
je 0x40cdd1
mov esi, dword [esp + 0x884]
push ebx
lea eax, [esi + 0x60]
push eax
lea eax, [edi + 0xd060]
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0xc
lea ebp, [ebx + 0x60]
jmp 0x40cdd8
mov esi, dword [esp + 0x884]
test bl, 1
je 0x40cde4
cmp byte [esi + ebp], 0xff
jne 0x40cde4
inc ebp
movzx ebx, word [esp + 0xa2]
mov dword [esp + 0x14], ebx
mov eax, ebx
cmp ebx, 0xf0
jb 0x40ce03
mov eax, 0xef
mov dword [esp + 0x14], eax
movzx esi, word [esp + 0xa4]
mov dword [edi + 0xe924], eax
mov dword [esp + 0x10], esi
cmp esi, 0xf0
jbe 0x40ce25
mov dword [esp + 0x10], 0xf0
push 0x200
lea eax, [esp + 0x2c4]
push 0
push eax
call sub.MSVCRT.dll_memset
add esi, ebx
add esp, 0xc
cmp esi, 0x100
jbe 0x40ce55
pop ebx
pop ebp
pop edi
xor eax, eax
pop esi
add esp, 0x870
ret 8
test esi, esi
je 0x40cf02
mov eax, dword [esp + 0x884]
add esi, esi
add eax, ebp
push esi
push eax
lea eax, [esp + 0x2c8]
push eax
call sub.MSVCRT.dll_memcpy
add esp, 0xc
add ebp, esi
cmp byte [esp + 0xb5], 0xfc
jne 0x40cf02
mov eax, dword [esp + 0x884]
lea edx, [edi + 0xc208]
mov esi, 8
lea ecx, [eax + 1]
add ecx, ebp
lea ecx, [ecx]
mov al, byte [ecx - 1]
test al, 0x20
je 0x40ceb6
movzx eax, al
and eax, 0xf
shl eax, 4
add eax, 8
mov dword [edx - 0x48], eax
mov al, byte [ecx]
test al, 0x20
je 0x40cecb
movzx eax, al
and eax, 0xf
shl eax, 4
add eax, 8
mov dword [edx - 0x24], eax
mov al, byte [ecx + 1]
test al, 0x20
je 0x40cee0
movzx eax, al
and eax, 0xf
shl eax, 4
add eax, 8
mov dword [edx], eax
mov al, byte [ecx + 2]
test al, 0x20
je 0x40cef6
movzx eax, al
and eax, 0xf
shl eax, 4
add eax, 8
mov dword [edx + 0x24], eax
add ecx, 4
add edx, 0x90
dec esi
jne 0x40cea0
cmp dword [edi + 0xe910], 0
je 0x40d3a4
push 0x3c0
lea eax, [esp + 0x4c4]
push 0
push eax
call sub.MSVCRT.dll_memset
mov ebp, 1
add esp, 0xc
lea ecx, [ebp + 0x3f]
cmp dword [esp + 0x14], ebp
jb 0x40d12e
mov eax, dword [esp + 0x14]
lea edx, [edi + 0xe9d8]
lea ecx, [esp + 0x2c0]
mov dword [esp + 0x1c], edx
lea ebx, [edi + 0x8240]
mov dword [esp + 0x20], ecx
movzx ecx, word [ecx]
shl ecx, 4
test ecx, ecx
je 0x40d0ff
lea eax, [ecx + 0x50]
cmp eax, dword [esp + 0x888]
ja 0x40d0fb
mov esi, dword [esp + 0x884]
lea edi, [esp + 0x30]
add esi, ecx
mov ecx, 0x14
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x31]
lea edi, [edx - 0x1c]
mov dword [ebx + 0x2a], eax
lea esi, [esp + 0x60]
mov eax, dword [esp + 0x35]
mov dword [ebx + 0x2e], eax
mov eax, dword [esp + 0x39]
mov dword [ebx + 0x32], eax
mov eax, dword [esp + 0x4c]
mov ecx, eax
shr ecx, 0x18
mov dword [esp + 0x24], ecx
mov byte [esp + ebp + 0xdf], cl
mov ecx, 7
shr eax, 0x10
cmp byte [esp + 0x30], 1
rep movsd dword es:[edi], dword [esi]
mov byte [esp + ebp + 0x1cf], al
mov byte [edx], 0
jne 0x40d0fb
cmp byte [esp + 0x7e], 0x52
jne 0x40d0fb
cmp byte [esp + 0x7f], 0x53
jne 0x40d0fb
mov eax, dword [esp + 0x40]
cmp eax, 0xf42400
jbe 0x40d000
mov edx, 0xf42400
jmp 0x40d009
cmp eax, 4
sbb edx, edx
not edx
and edx, eax
mov eax, dword [esp + 0x44]
lea esi, [edx - 1]
mov dword [ebx], edx
cmp eax, esi
ja 0x40d01f
cmp eax, 4
sbb esi, esi
not esi
and esi, eax
mov eax, dword [esp + 0x48]
mov dword [ebx + 4], esi
cmp eax, edx
ja 0x40d033
cmp eax, 4
sbb edx, edx
not edx
and edx, eax
mov eax, dword [esp + 0x4c]
movzx eax, al
mov dword [ebx + 8], edx
cmp eax, 0x40
jbe 0x40d047
mov eax, 0x40
shl eax, 2
test byte [esp + 0x24], 1
mov word [ebx + 0x1e], ax
mov eax, 0x40
mov word [ebx + 0x20], ax
je 0x40d063
or word [ebx + 0x22], 2
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x40d072
mov eax, 0x20ab
jmp 0x40d07e
cmp eax, 0x400
jae 0x40d07e
mov eax, 0x400
mov ecx, dword [esp + 0x3c]
mov dword [ebx + 0x18], eax
mov eax, ecx
shr eax, 8
movzx eax, al
shl eax, 0x10
shr ecx, 0x10
add eax, ecx
shl eax, 4
mov dword [esp + ebp*4 + 0x4c0], eax
cmp eax, dword [esp + 0x888]
jbe 0x40d0b5
mov dword [esp + ebp*4 + 0x4c0], 0
jmp 0x40d0d5
test eax, eax
je 0x40d0d5
lea ecx, [ebp - 1]
test ecx, ecx
js 0x40d0d5
cmp eax, dword [esp + ecx*4 + 0x4c0]
jne 0x40d0d2
xor eax, eax
mov dword [esp + ebp*4 + 0x4c0], eax
dec ecx
jns 0x40d0c0
cmp esi, edx
jae 0x40d0e0
sub edx, esi
cmp edx, 8
jae 0x40d0ee
mov dword [ebx + 8], 0
mov dword [ebx + 4], 0
mov edx, dword [esp + 0x1c]
mov eax, pe_nt_image_headers32
mov word [ebx + 0x1c], ax
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x20]
inc ebp
add ecx, 2
add edx, 0x20
add ebx, 0x40
mov dword [esp + 0x20], ecx
mov dword [esp + 0x1c], edx
cmp ebp, eax
jbe 0x40cf57
mov edi, dword [esp + 0x18]
mov ecx, 0x40
movzx ebx, word [esp + 0xa2]
cmp dword [esp + 0x10], 0
jbe 0x40d2f0
mov edx, dword [esp + 0x888]
lea eax, [edi + 0xcac0]
mov dword [esp + 0x20], eax
lea ebp, [edi + 0xce80]
lea eax, [esp + 0x2c0]
mov dword [esp + 0x1c], ebp
lea eax, [eax + ebx*2]
mov ebx, dword [esp + 0x10]
mov dword [esp + 0x24], eax
movzx esi, word [eax]
shl esi, 4
lea eax, [esi + 0x40]
cmp eax, edx
ja 0x40d2c9
mov ebx, dword [esp + 0x884]
movzx eax, word [esi + ebx]
add esi, 2
mov word [ebp], cx
test ax, ax
je 0x40d2c5
lea ecx, [eax + esi]
mov dword [esp + 0x2c], eax
lea eax, [edx - 6]
cmp ecx, eax
ja 0x40d2c5
push dword [edi + 0xe910]
push 0x40
call fcn.00402cd0
mov edx, eax
add esp, 8
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], edx
mov dword [eax], edx
test edx, edx
je 0x40d2be
mov eax, dword [esp + 0x2c]
lea edi, [esi + ebx]
xor ebp, ebp
xor esi, esi
test eax, eax
je 0x40d2b6
jmp 0x40d1e0
mov bl, byte [esi + edi]
inc esi
test bl, bl
jne 0x40d1f7
inc ebp
cmp ebp, 0x40
jae 0x40d2b6
jmp 0x40d2ae
mov eax, dword [esp + 0x18]
movzx ecx, bl
and ecx, 0x1f
mov eax, dword [eax + 0xe910]
cmp ecx, eax
jae 0x40d3b6
imul eax, ebp
add eax, ecx
lea eax, [eax + eax*2]
lea edx, [edx + eax*2]
test bl, 0x20
je 0x40d255
mov al, byte [esi + edi]
mov ah, al
mov byte [edx], al
cmp ah, 0xf0
jae 0x40d243
shr al, 4
and ah, 0xf
mov cl, al
add al, al
add cl, al
shl cl, 2
add cl, 0xd
add cl, ah
mov byte [edx], cl
jmp 0x40d24b
cmp ah, 0xff
jne 0x40d24b
mov byte [edx], 0
mov al, byte [esi + edi + 1]
add esi, 2
mov byte [edx + 1], al
test bl, 0x40
je 0x40d280
movzx eax, byte [esi + edi]
inc esi
lea ecx, [eax - 0x80]
cmp ecx, 0x40
ja 0x40d26f
mov eax, ecx
mov byte [edx + 2], 2
jmp 0x40d27d
cmp eax, 0x40
jbe 0x40d279
mov eax, 0x40
mov byte [edx + 2], 1
mov byte [edx + 4], al
test bl, bl
jns 0x40d2a6
mov al, byte [esi + edi]
mov byte [edx + 3], al
mov al, byte [esi + edi + 1]
add esi, 2
cmp byte [edx + 3], 0
mov byte [edx + 5], al
je 0x40d2a6
mov ecx, dword [esp + 0x18]
push 0
push edx
call fcn.0040d3e0
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
cmp esi, eax
jb 0x40d1e0
mov edi, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
mov edx, dword [esp + 0x888]
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
add ebp, 2
add dword [esp + 0x20], 4
add eax, 2
dec ebx
mov dword [esp + 0x24], eax
mov dword [esp + 0x1c], ebp
mov ecx, 0x40
mov dword [esp + 0x10], ebx
jne 0x40d166
mov ebp, dword [esp + 0x14]
mov esi, 1
cmp ebp, esi
jb 0x40d378
mov bx, word [esp + 0xaa]
add edi, 0x8240
jmp 0x40d310
cmp dword [edi], 0
je 0x40d370
mov edx, dword [esp + esi*4 + 0x4c0]
test edx, edx
je 0x40d370
mov al, byte [esp + esi + 0xdf]
xor ecx, ecx
cmp bx, 1
setne cl
test al, 4
je 0x40d337
add ecx, 5
test al, 2
je 0x40d33e
or ecx, 8
cmp byte [esp + esi + 0x1cf], 4
jne 0x40d34d
mov ecx, 3
mov eax, dword [esp + 0x888]
cmp edx, eax
jae 0x40d370
sub eax, edx
push eax
mov eax, dword [esp + 0x888]
add eax, edx
push eax
push ecx
mov ecx, dword [esp + 0x24]
push edi
call fcn.00403a60
inc esi
add edi, 0x40
cmp esi, ebp
jbe 0x40d310
test byte [esp + 0xa6], 0x10
mov eax, dword [esp + 0x18]
mov dword [eax + 0xe974], 0x40
mov dword [eax + 0xe978], 0x7fff
je 0x40d3a4
or dword [eax + 0xe90c], 0x10000
pop ebx
pop ebp
pop edi
mov eax, 1
pop esi
add esp, 0x870
ret 8
test bl, 0x20
je 0x40d3be
add esi, 2
test bl, 0x40
je 0x40d3c4
inc esi
test bl, bl
jns 0x40d2aa
add esi, 2
jmp 0x40d2aa
xor eax, eax
add esp, 0x870
ret 8