Function at 0x40e720
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xc]
cmp eax, dword [ecx + 8]
jbe 0x40eb14
sub esp, 0x8c
call fcn.00424e70
mov ebx, dword [0x6dc348]
cmp ebx, 0x10
je 0x40e765
mov ebx, 0x5fa7a3
mov dword [esp], ebx
mov dword [esp + 4], 0x11
call fcn.0042b7d0
xor ecx, ecx
mov dword [esp + 0x28], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov byte [esp + 0x13], 0
mov dword [esp + 0x24], 0
cmp ecx, 0
jne 0x40e8d2
lea ebx, [esp + 0x5c]
mov esi, ebx
mov ebp, dword [0x61c240]
mov dword [ebx], ebp
mov ebp, dword [0x61c244]
mov dword [ebx + 4], ebp
mov ebp, dword [0x61c248]
mov dword [ebx + 8], ebp
mov ebp, dword [0x61c24c]
mov dword [ebx + 0xc], ebp
mov dword [esp + 0x84], 4
mov edi, 4
mov dword [esp + 0x80], ebx
mov ebp, dword [esp + 0x84]
mov dword [esp + 0x88], edi
mov dword [esp + 0x7c], edi
xor edi, edi
mov dword [esp + 0x78], ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x74], ebx
mov ebp, dword [esp + 0x2c]
cmp edi, ebp
jge 0x40e8b0
mov dword [esp + 0x6c], esi
mov ecx, dword [esi]
mov dword [esp + 0x30], edi
mov esi, 0x10000000
mov ebp, 0x200000
mov ebx, dword [esp + 0x24]
cmp ebx, 0
jbe 0x40e84e
mov edi, ecx
add edi, esi
add edi, ebp
mov ebx, dword [esp + 0x24]
cmp edi, ebx
jbe 0x40e84e
mov ebp, dword [esp + 0x24]
mov eax, 0x38e38e39
mul ebp
mov ebp, edx
shr ebp, 1
and ebp, 0xffffe000
mov esi, ebp
shl ebp, 3
mov ecx, ebp
shr ebp, 0xd
shl ebp, 2
mov ebx, 0x2000
mov edi, ebp
add edi, ebx
dec edi
dec ebx
xor ebx, 0xffffffff
and edi, ebx
mov ebp, dword [0x6b7498]
add ebp, 0x40000
mov ebx, 0x100000
add ebp, ebx
dec ebp
dec ebx
xor ebx, 0xffffffff
and ebp, ebx
mov dword [esp + 0x28], esi
mov eax, esi
add eax, edi
mov dword [esp + 0x14], edi
add eax, ecx
add eax, 0x2000
mov dword [esp], ebp
mov dword [esp + 0x18], eax
mov dword [esp + 4], eax
lea ebx, [esp + 0x13]
mov dword [esp + 8], ebx
call fcn.004148c0
mov ecx, dword [esp + 0xc]
cmp ecx, 0
je 0x40eb03
mov dword [esp + 0x20], ecx
cmp ecx, 0
jne 0x40e8d2
mov ebx, 0x603649
mov dword [esp], ebx
mov dword [esp + 4], 0x33
call fcn.0042b7d0
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x20], ecx
mov ebx, 0x2000
mov edx, ecx
add edx, ebx
dec edx
dec ebx
xor ebx, 0xffffffff
and edx, ebx
mov dword [esp + 0x1c], edx
cmp byte [0x6dbe18], 0
jne 0x40eae5
mov dword [0x6ce2e8], edx
mov ebx, edx
add ebx, dword [esp + 0x14]
add ebx, dword [esp + 0x28]
mov dword [0x6ce538], ebx
xor eax, eax
mov dword [0x6ce540], eax
mov ebx, ecx
add ebx, dword [esp + 0x18]
mov dword [0x6ce548], ebx
mov ebx, dword [esp + 0x14]
add ebx, dword [esp + 0x28]
add ebx, edx
mov dword [0x6ce544], ebx
movzx ebx, byte [esp + 0x13]
mov byte [0x6ce54c], bl
mov ebx, dword [0x6ce540]
and ebx, 0x1fff
cmp ebx, 0
je 0x40ea7c
mov ebp, ecx
xor ecx, ecx
mov dword [esp + 0x54], ebp
mov dword [esp + 0x58], ecx
xor ecx, ecx
mov dword [esp + 0x4c], edx
mov dword [esp + 0x50], ecx
mov ebx, dword [esp + 0x14]
xor ecx, ecx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ecx
mov ebx, dword [esp + 0x28]
xor ecx, ecx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ecx
mov ebx, dword [0x6ce540]
xor ecx, ecx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ecx
call fcn.0042bfb0
mov ebx, 0x5f90ea
mov dword [esp], ebx
mov dword [esp + 4], 0xc
call fcn.0042c9c0
call fcn.0042c1c0
mov eax, dword [esp + 0x54]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
call fcn.0042c850
call fcn.0042c1c0
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0042c850
call fcn.0042c1c0
mov eax, dword [esp + 0x44]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
call fcn.0042c850
call fcn.0042c1c0
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
call fcn.0042c850
call fcn.0042c1c0
mov dword [esp], 0x2000
mov dword [esp + 4], 0
call fcn.0042c850
call fcn.0042c1c0
mov ebx, 0x5f7819
mov dword [esp], ebx
mov dword [esp + 4], 5
call fcn.0042c9c0
call fcn.0042c1c0
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
call fcn.0042c850
call fcn.0042c200
call fcn.0042c030
mov ebx, 0x600696
mov dword [esp], ebx
mov dword [esp + 4], 0x23
call fcn.0042b7d0
mov ebx, 0x6cdac0
mov dword [esp], ebx
mov ebx, dword [esp + 0x14]
mov dword [esp + 4], ebx
call fcn.00420100
mov ebx, dword fs:[0x14]
mov ebx, dword [ebx]
mov dword [esp + 0x70], ebx
call fcn.00413610
mov eax, dword [esp]
mov ebx, dword [esp + 0x70]
mov ebp, dword [ebx + 0x18]
cmp ebp, 0
je 0x40eae0
cmp byte [0x6dbe18], 0
jne 0x40eacc
mov dword [ebp + 0xb0], eax
add esp, 0x8c
ret
lea esi, [ebp + 0xb0]
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.00410660
jmp 0x40eac5
mov dword [ebp], eax
jmp 0x40eab6
mov ebp, 0x6ce2e8
mov dword [esp], ebp
mov dword [esp + 4], edx
call fcn.00410660
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
jmp 0x40e8fd
mov esi, dword [esp + 0x6c]
add esi, 4
mov edi, dword [esp + 0x30]
inc edi
jmp 0x40e7f5
call fcn.00452240
jmp fcn.0040e720