Function at 0x4065f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x51eb0f
mov eax, dword fs:[0]
push eax
sub esp, 0x874
mov eax, dword [0x56b338]
xor eax, esp
mov dword [esp + 0x870], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x56b338]
xor eax, esp
push eax
lea eax, [esp + 0x888]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x89c]
mov eax, dword [esp + 0x898]
xor ebx, ebx
cmp ebp, ebx
mov esi, ecx
mov dword [esp + 0x20], esi
mov dword [esp + 0x18], eax
jle 0x40666f
xor eax, eax
xor ecx, ecx
cmp ebp, ebx
jle 0x40666f
mov dl, byte [eax + str.GUANGSU]
mov edi, dword [esp + 0x18]
xor byte [edi + ecx], dl
add eax, 1
cmp eax, 7
jl 0x406668
xor eax, eax
add ecx, 1
cmp ecx, ebp
jl 0x406651
lea ecx, [esp + 0x44]
call fcn.0047aa80
mov eax, dword [esp + 0x18]
push 1
push ebx
push eax
lea ecx, [esp + 0x50]
mov dword [esp + 0x89c], ebx
call fcn.0047cd60
push str.TheConfigure
lea ecx, [esp + 0x48]
call fcn.0047a0e0
mov edi, eax
cmp edi, ebx
mov dword [esp + 0x14], edi
jne 0x406708
push str.TheQueryInfo
lea ecx, [esp + 0x48]
call fcn.0047a0e0
cmp eax, ebx
mov dword [esp + 0x14], eax
jne 0x406706
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x4066cf
push eax
call fcn.0042f3a5
add esp, 4
mov dword [esp + 0x890], 0xffffffff
mov eax, dword [esp + 0x78]
cmp eax, 0x5765b8
mov dword [esp + 0x44], vtable.TiXmlDocument.0
je 0x4066f6
push eax
call fcn.0042fb39
add esp, 4
lea ecx, [esp + 0x44]
call fcn.0047a710
xor eax, eax
jmp 0x406a99
mov edi, eax
push str.QueryProbability
mov ecx, edi
call fcn.0047a0e0
cmp eax, ebx
je 0x406773
mov ecx, eax
call fcn.0047a180
cmp eax, ebx
je 0x406773
push 0x5613f8
push eax
call fcn.0042fb3e
mov edi, eax
add esp, 8
xor ebp, ebp
xor eax, eax
cmp edi, ebx
je 0x406760
push 0x5613f8
push ebx
call fcn.0042fb3e
push edi
mov esi, eax
call fcn.0042fc0e
add esp, 0xc
push esi
mov ebp, eax
call fcn.0042fc0e
mov esi, dword [esp + 0x24]
add esp, 4
xor ecx, ecx
call fcn.0040ca30
cmp eax, ebp
jg 0x4066be
mov edi, dword [esp + 0x14]
push str.QueryList
mov ecx, edi
call fcn.0047a0e0
mov edi, eax
cmp edi, ebx
je 0x4066be
push 0x3e6
lea ecx, [esp + 0x4a2]
push ebx
push ecx
mov word [esp + 0x4a8], bx
call fcn.00436020
add esp, 0xc
push 0x3e6
lea edx, [esp + 0xba]
push ebx
push edx
mov word [esp + 0xc0], bx
call fcn.00436020
add esp, 0xc
mov ecx, edi
call fcn.0047a0b0
cmp eax, ebx
mov dword [esp + 0x1c], eax
je 0x406a37
mov ebp, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 8
call fcn.0042f1cf
mov edi, eax
add esp, 4
mov dword [esp + 0x24], edi
cmp edi, ebx
mov byte [esp + 0x890], 1
je 0x406805
call fcn.004070c0
mov dword [esp + 0x14], edi
jmp 0x406809
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov byte [esp + 0x890], bl
mov dword [esp + 0x24], eax
call fcn.0047a0b0
mov edi, eax
cmp edi, ebx
je 0x4069cc
jmp 0x406830
mov esi, dword [edi + 0x20]
push 0x3e8
lea ecx, [esp + 0x4a0]
push ebx
push ecx
add esi, 8
call fcn.00436020
add esp, 0xc
push 0x3e8
lea edx, [esp + 0xb8]
push ebx
push edx
call fcn.00436020
add esp, 0xc
push ebx
push ebx
push 0xffffffffffffffff
push esi
push ebx
push 0xfde9
call ebp
push eax
lea eax, [esp + 0x4a0]
push eax
push 0xffffffffffffffff
push esi
push ebx
push 0xfde9
call ebp
mov ecx, dword [edi + 0x18]
cmp ecx, ebx
je 0x4069b7
mov edx, dword [ecx]
mov eax, dword [edx + 0x30]
call eax
cmp eax, ebx
je 0x4068c0
mov esi, dword [eax + 0x20]
push ebx
push ebx
push 0xffffffffffffffff
add esi, 8
push esi
push ebx
push 0xfde9
call ebp
push eax
lea ecx, [esp + 0xb8]
push ecx
push 0xffffffffffffffff
push esi
push ebx
push 0xfde9
call ebp
lea eax, [esp + 0xb4]
mov dword [esp + 0xa8], 7
mov dword [esp + 0xa4], ebx
mov word [esp + 0x94], bx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4068e4
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0xb8]
push edx
lea esi, [esp + 0x98]
call fcn.004021f0
mov byte [esp + 0x890], 2
lea eax, [esp + 0x49c]
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], ebx
mov word [esp + 0x2c], bx
lea edx, [eax + 2]
jmp 0x406930
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x406930
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x4a0]
push eax
lea esi, [esp + 0x30]
call fcn.004021f0
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x90]
mov byte [esp + 0x890], 3
mov edx, dword [ecx]
mov edx, dword [edx]
push eax
mov eax, esi
push eax
call edx
mov esi, 8
cmp dword [esp + 0x40], esi
jb 0x406986
mov eax, dword [esp + 0x2c]
push eax
call fcn.0042f3a5
add esp, 4
mov byte [esp + 0x890], bl
cmp dword [esp + 0xa8], esi
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], ebx
mov word [esp + 0x2c], bx
jb 0x4069b7
mov ecx, dword [esp + 0x94]
push ecx
call fcn.0042f3a5
add esp, 4
mov ecx, edi
call fcn.0047a120
mov edi, eax
cmp edi, ebx
jne 0x406830
mov esi, dword [esp + 0x20]
mov edx, dword [esi + 4]
cmp edx, ebx
jne 0x4069d7
xor ecx, ecx
jmp 0x4069df
mov ecx, dword [esi + 8]
sub ecx, edx
sar ecx, 2
cmp edx, ebx
je 0x406a00
mov eax, dword [esi + 0xc]
sub eax, edx
sar eax, 2
cmp ecx, eax
jae 0x406a00
mov eax, dword [esi + 8]
mov edx, dword [esp + 0x14]
mov dword [eax], edx
add eax, 4
mov dword [esi + 8], eax
jmp 0x406a22
mov edi, dword [esi + 8]
cmp edx, edi
jbe 0x406a0c
call fcn.0042f791
push edi
push esi
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0xb8]
push ecx
mov eax, esi
call fcn.00406c20
mov ecx, dword [esp + 0x1c]
call fcn.0047a120
cmp eax, ebx
mov dword [esp + 0x1c], eax
jne 0x4067de
mov ecx, dword [esi + 4]
cmp ecx, ebx
je 0x4066be
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp eax, 1
jb 0x4066be
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x406a64
push eax
call fcn.0042f3a5
add esp, 4
mov dword [esp + 0x890], 0xffffffff
mov eax, dword [esp + 0x78]
cmp eax, 0x5765b8
mov dword [esp + 0x44], vtable.TiXmlDocument.0
je 0x406a8b
push eax
call fcn.0042fb39
add esp, 4
lea ecx, [esp + 0x44]
call fcn.0047a710
mov eax, 1
mov ecx, dword [esp + 0x888]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x870]
xor ecx, esp
call fcn.0042f3aa
add esp, 0x880
ret 8