Function at 0x40c850
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xe4
push ebx
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_Sleep]
push esi
push edi
mov ebx, eax
mov dword [esp + 0x28], 1
lea ebx, [ebx]
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x41fd14
call dword [sym.imp.MFC80U.DLL_Ordinal_283]
push ebx
call fcn.0040c780
test al, al
je 0x40ce52
mov ecx, ebx
call fcn.004112a0
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 0x4203e0
call dword [sym.imp.MFC80U.DLL_Ordinal_283]
push ebx
call fcn.0040c780
test al, al
jne 0x40ce52
fld1
lea eax, [esp + 0xd0]
push eax
lea ecx, [esp + 0xe4]
push ecx
sub esp, 8
fstp qword [esp]
push str.ffffff_2020200
push 0x41f960
push 0x168
push 0x40
push 0x13b
push 0x13
push 0x42507c
lea edx, [esp + 0x5c]
push edx
push 3
push 1
push 4
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x40
or edi, 0xffffffff
cmp dword [esp + 0x30], edi
push 5
je 0x40c94c
call ebp
push 0x152
push 0x22
push 0x42508c
lea eax, [esp + 0x6c]
push eax
push 3
push 1
push 0x19
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x20
push 0x32
call ebp
push 0
lea ecx, [esp + 0x58]
push ecx
push 3
push 1
push 0x11
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x18
push 0x1f4
call ebp
push ebx
call fcn.00409f80
test al, al
jne 0x40c969
push 0x12c
call ebp
push ebx
call fcn.00409f80
test al, al
je 0x40c958
call fcn.0040ce60
test eax, eax
jle 0x40ca2a
push 0xd
push 0x11b
push 0x42508c
lea edx, [esp + 0x68]
push edx
push 3
push 1
push 0x19
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x20
push 0x32
call ebp
push 0
lea eax, [esp + 0x44]
push eax
push 3
push 1
push 0x11
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x18
push 0x3e8
call ebp
cmp dword [esp + 0x28], 0
je 0x40ca2a
mov edi, edi
call fcn.0040ce60
push 0x7d0
mov esi, eax
call ebp
call fcn.0040ce60
cmp esi, eax
jne 0x40ca1e
test esi, esi
jle 0x40ca20
push 0xd
push 0x11b
push 0x42508c
lea ecx, [esp + 0x7c]
push ecx
push 3
push 1
push 0x19
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x20
push 0x32
call ebp
push 0
lea edx, [esp + 0x4c]
push edx
push 3
push 1
push 0x11
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x18
push 0x2710
call ebp
jmp 0x40c9c0
test esi, esi
jge 0x40c9c0
mov dword [esp + 0x28], 0
fld1
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0xc4]
push ecx
sub esp, 8
fstp qword [esp]
push str.f6ff00_202020
push 0x41fd14
push 0x3a
push 0x249
push 0xe
push 0x1c6
push 0x42507c
lea edx, [esp + 0x60]
push edx
push 3
push 1
push 4
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x40
cmp dword [esp + 0x34], edi
je 0x40ce46
mov eax, dword [esp + 0xc8]
mov esi, dword [esp + 0xb8]
push ebx
lea edi, [esp + 0x24]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], esi
call fcn.00404360
mov ecx, dword [esp + 0x20]
lea eax, [ecx - 0x32]
cdq
xor eax, edx
sub eax, edx
cmp eax, 0x14
jge 0x40cc6d
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.jh.bmp
call dword [sym.imp.MFC80U.DLL_Ordinal_283]
mov edi, ebx
call fcn.00411a60
push 0x7d0
call ebp
fld1
lea ecx, [esp + 0xa0]
push ecx
lea edx, [esp + 0x8c]
push edx
sub esp, 8
fstp qword [esp]
push str.33a700_202020
push 0x420404
push 0x152
push 0x184
push 0
push pe_nt_image_headers32
push 0x42507c
lea eax, [esp + 0x58]
push eax
push 3
push 1
push 4
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x40
cmp dword [esp + 0x2c], 0xffffffff
je 0x40cb91
mov esi, dword [esp + 0xa8]
mov eax, dword [esp + 0x90]
push esi
push eax
push 0x42508c
lea ecx, [esp + 0x70]
push ecx
push 3
push 1
push 0x19
push ebx
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], esi
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x20
push 0x32
call ebp
push 0
lea edx, [esp + 0x54]
push edx
push 3
push 1
push 0x11
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x18
push 0x32
call ebp
push 0
lea eax, [esp + 0x70]
push eax
push 3
push 1
push 0x11
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x18
push 0xbb8
call ebp
push ebx
lea edi, [esp + 0x84]
call fcn.00404360
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x24], edx
lea eax, [ecx - 0x32]
cdq
xor eax, edx
sub eax, edx
cmp eax, 0xa
mov dword [esp + 0x20], ecx
jge 0x40ce46
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.jh.bmp
call dword [sym.imp.MFC80U.DLL_Ordinal_283]
mov edi, ebx
call fcn.00411a60
push 0x7d0
call ebp
fld1
sub esp, 0x18
fstp qword [esp + 0x10]
mov eax, esp
lea edx, [esi + 0x14]
mov ecx, pe_nt_image_headers32
mov dword [eax], ecx
mov dword [eax + 4], edx
mov esi, 0x184
mov dword [eax + 8], esi
push 0x420404
mov edi, 0x152
push ebx
lea esi, [esp + 0x34]
mov edx, str.33a700_202020
mov dword [eax + 0xc], edi
call fcn.00401580
test eax, eax
je 0x40ce46
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push ecx
push 0x42508c
lea edx, [esp + 0x64]
push edx
push 3
push 1
push 0x19
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x20
push 0x32
call ebp
push 0
lea eax, [esp + 0x78]
push eax
push 3
push 1
push 0x11
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x18
push 0x32
call ebp
push 0
lea ecx, [esp + 0x3c]
push ecx
jmp 0x40ce30
lea eax, [ecx - 0xa]
cdq
xor eax, edx
sub eax, edx
cmp eax, 5
jge 0x40ce46
call fcn.0040ce60
cmp eax, 0xffffffff
jne 0x40cd4f
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.jh.bmp
call dword [sym.imp.MFC80U.DLL_Ordinal_283]
mov edi, ebx
call fcn.00411a60
push 0x7d0
call ebp
fld1
sub esp, 0x18
fstp qword [esp + 0x10]
mov eax, esp
mov ecx, pe_nt_image_headers32
mov dword [eax], ecx
mov edx, 0x64
mov dword [eax + 4], edx
mov esi, 0x184
mov dword [eax + 8], esi
push 0x4203e0
mov edi, 0x152
push ebx
lea esi, [esp + 0x34]
mov edx, str.33a700_202020
mov dword [eax + 0xc], edi
call fcn.00401580
test eax, eax
mov esi, dword [esp + 0x18]
je 0x40cd4f
mov edx, dword [esp + 0x14]
push esi
push edx
push 0x42508c
lea eax, [esp + 0x88]
push eax
push 3
push 1
push 0x19
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x20
push 0x32
call ebp
push 0
lea ecx, [esp + 0x6c]
push ecx
push 3
push 1
push 0x11
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x18
push 0x32
call ebp
push 0
lea edx, [esp + 0x7c]
push edx
push 3
push 1
push 0x11
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x18
push 0x1f4
call ebp
push ebx
lea edi, [esp + 0x9c]
call fcn.00404360
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [esp + 0x24], eax
lea eax, [ecx - 0xa]
cdq
xor eax, edx
sub eax, edx
cmp eax, 0xa
mov dword [esp + 0x20], ecx
jge 0x40ce46
call fcn.0040ce60
cmp eax, 0xffffffff
jne 0x40ce46
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push str.jh.bmp
call dword [sym.imp.MFC80U.DLL_Ordinal_283]
mov edi, ebx
call fcn.00411a60
push 0x7d0
call ebp
fld1
sub esp, 0x18
fstp qword [esp + 0x10]
mov eax, esp
lea edx, [esi + 0x14]
mov ecx, pe_nt_image_headers32
mov dword [eax], ecx
mov dword [eax + 4], edx
mov esi, 0x184
mov dword [eax + 8], esi
push 0x4203e0
mov edi, 0x152
push ebx
lea esi, [esp + 0x34]
mov edx, str.33a700_202020
mov dword [eax + 0xc], edi
call fcn.00401580
test eax, eax
je 0x40ce46
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
push ecx
push edx
push 0x42508c
lea eax, [esp + 0x48]
push eax
push 3
push 1
push 0x19
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x20
push 0x32
call ebp
push 0
lea ecx, [esp + 0x48]
push ecx
push 3
push 1
push 0x11
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x18
push 0x32
call ebp
push 0
lea edx, [esp + 0x50]
push edx
push 3
push 1
push 0x11
push ebx
call sub.MFC80U.DLL_Ordinal_3901
add esp, 0x18
push 0xbb8
call ebp
push 0x7d0
call ebp
jmp 0x40c870
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xe4
ret