Function at 0x4030dc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x401540
push 0x414d30
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x294
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
and dword [ebp - 0x248], 0
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x403e56
and dword [ebp - 4], 0
cmp word [esi], 3
jne 0x403e52
and dword [ebp - 0x27c], 0
mov dword [ebp - 0x278], 0xffff0000
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x264], str.DEVICE_OBJECT
lea eax, [ebp - 0x27c]
push eax
mov edi, dword [ebp + 8]
push edi
call fcn.00412e20
mov dword [ebp - 0x20], eax
movsx ecx, word [esi]
push ecx
mov ebx, str.0x_04X
push ebx
push 0x41f468
push eax
push edi
call fcn.0040210b
add esp, 0x14
mov dword [ebp - 0x28], eax
cmp word [esi], 3
jne 0x403186
push str.IO_TYPE_DEVICE
jmp 0x40318b
push str.__Must_be_IO_TYPE_DEVICE
push 2
push eax
push edi
call fcn.00412f50
movzx eax, word [esi + 2]
push eax
push ebx
push str.Size
push dword [ebp - 0x20]
push edi
call fcn.0040210b
push dword [esi + 4]
push 0x41f1bc
push str.ReferenceCount
push dword [ebp - 0x20]
push edi
call fcn.0040210b
push dword [esi + 8]
push str.DriverObject
push dword [ebp - 0x20]
push edi
call fcn.004020a3
add esp, 0x38
mov dword [ebp - 0x28], eax
test eax, eax
je 0x403222
cmp dword [esi + 8], 0
je 0x403222
mov ebx, 0x190
push ebx
push 0
lea eax, [ebp - 0x244]
push eax
call fcn.00414be0
add esp, 0xc
push ebx
lea eax, [ebp - 0x244]
push eax
push 1
push 7
push dword [esi + 8]
call fcn.00404a99
test eax, eax
jne 0x403227
lea eax, [ebp - 0x244]
push eax
push 2
push dword [ebp - 0x28]
push edi
call fcn.00413080
jmp 0x403227
mov ebx, 0x190
push dword [esi + 0xc]
push str.NextDevice
push dword [ebp - 0x20]
push edi
call fcn.004020a3
add esp, 0x10
mov dword [ebp - 0x28], eax
test eax, eax
je 0x403284
cmp dword [esi + 0xc], 0
je 0x403284
push ebx
push 0
lea eax, [ebp - 0x244]
push eax
call fcn.00414be0
add esp, 0xc
push ebx
lea eax, [ebp - 0x244]
push eax
push 1
push 5
push dword [esi + 0xc]
call fcn.00404a99
test eax, eax
jne 0x403284
lea eax, [ebp - 0x244]
push eax
push 2
push dword [ebp - 0x28]
push edi
call fcn.00413080
push dword [esi + 0x10]
push str.AttachedDevice
push dword [ebp - 0x20]
push edi
call fcn.004020a3
add esp, 0x10
mov dword [ebp - 0x28], eax
test eax, eax
je 0x4032e1
cmp dword [esi + 0x10], 0
je 0x4032e1
push ebx
push 0
lea eax, [ebp - 0x244]
push eax
call fcn.00414be0
add esp, 0xc
push ebx
lea eax, [ebp - 0x244]
push eax
push 1
push 5
push dword [esi + 0x10]
call fcn.00404a99
test eax, eax
jne 0x4032e1
lea eax, [ebp - 0x244]
push eax
push 2
push dword [ebp - 0x28]
push edi
call fcn.00413080
push dword [esi + 0x14]
push str.CurrentIrp
push dword [ebp - 0x20]
push edi
call fcn.004020a3
push dword [esi + 0x18]
push 0x41f928
push dword [ebp - 0x20]
push edi
call fcn.004020a3
add esp, 0x20
mov dword [ebp - 0x28], eax
push str.PIO_TIMER
push 2
push eax
push edi
call fcn.00412f50
push dword [esi + 0x1c]
mov ebx, str.0x_08X
push ebx
push str.Flags
push dword [ebp - 0x20]
push edi
call fcn.0040210b
add esp, 0x14
mov dword [ebp - 0x28], eax
and dword [ebp - 0x280], 0
and dword [ebp - 0x1c], 0
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x20
jae 0x40339e
push 1
pop eax
shl eax, cl
test dword [esi + 0x1c], eax
je 0x403399
cmp dword [ebp - 0x280], 0
je 0x403372
push 0
push 0
push 0x424d10
push dword [ebp - 0x20]
push edi
call fcn.0040210b
add esp, 0x14
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c]
push dword [eax*4 + 0x41e190]
push 0x41f418
push 2
push dword [ebp - 0x28]
push edi
call fcn.00402174
add esp, 0x14
mov dword [ebp - 0x280], 1
inc dword [ebp - 0x1c]
jmp 0x40333f
push dword [esi + 0x20]
push ebx
push str.Characteristics
push dword [ebp - 0x20]
push edi
call fcn.0040210b
add esp, 0x14
mov dword [ebp - 0x28], eax
and dword [ebp - 0x280], 0
and dword [ebp - 0x1c], 0
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0x20
jae 0x403420
push 1
pop eax
shl eax, cl
test dword [esi + 0x20], eax
je 0x40341b
cmp dword [ebp - 0x280], 0
je 0x4033f4
push 0
push 0
push 0x424d10
push dword [ebp - 0x20]
push edi
call fcn.0040210b
add esp, 0x14
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c]
push dword [eax*4 + 0x41e210]
push 0x41f418
push 2
push dword [ebp - 0x28]
push edi
call fcn.00402174
add esp, 0x14
mov dword [ebp - 0x280], 1
inc dword [ebp - 0x1c]
jmp 0x4033c1
push dword [esi + 0x24]
push 0x41f908
push dword [ebp - 0x20]
push edi
call fcn.004020a3
add esp, 0x10
mov dword [ebp - 0x28], eax
push str.PVPB
push 2
push eax
push edi
call fcn.00412f50
push dword [esi + 0x28]
push str.DeviceExtension
push dword [ebp - 0x20]
push edi
call fcn.004020a3
mov dword [ebp - 0x28], eax
push dword [esi + 0x2c]
push ebx
push str.DeviceType
push dword [ebp - 0x20]
push edi
call fcn.0040210b
add esp, 0x24
mov dword [ebp - 0x28], eax
mov eax, dword [esi + 0x2c]
cmp eax, 0x3c
jae 0x403487
push dword [eax*4 + 0x41e290]
push 0x41f418
jmp 0x40348d
push eax
push str.0x_02X
push 2
push dword [ebp - 0x28]
push edi
call fcn.00402174
add esp, 0x14
movsx eax, byte [esi + 0x30]
push eax
push 0x41f1bc
push str.StackSize
push dword [ebp - 0x20]
push edi
call fcn.0040210b
push 0
push 0
push str.Queue
push dword [ebp - 0x20]
push edi
call fcn.0040210b
add esp, 0x28
mov dword [ebp - 0x28], eax
test eax, eax
je 0x403651
push 0
push 0
push 0x41f8c4
push eax
push edi
call fcn.0040210b
mov dword [ebp - 0x28], eax
push 0
push 0
push str.WaitQueueEntry
push eax
push edi
call fcn.0040210b
mov dword [ebp - 0x2c], eax
push 0
push 0
push str.DeviceListEntry
push eax
push edi
call fcn.0040210b
mov dword [ebp - 0x30], eax
push dword [esi + 0x34]
push str.Flink
push eax
push edi
call fcn.004020a3
add esp, 0x4c
push dword [esi + 0x38]
push str.Blink
push dword [ebp - 0x30]
push edi
call fcn.004020a3
push dword [esi + 0x3c]
push ebx
push str.SortKey
push dword [ebp - 0x2c]
push edi
call fcn.0040210b
add esp, 0x24
cmp byte [esi + 0x40], 0
mov dword [ebp - 0x24], str.TRUE
jne 0x403558
mov dword [ebp - 0x24], str.FALSE
push dword [ebp - 0x24]
push 0x41f418
push str.Inserted
push dword [ebp - 0x2c]
push edi
call fcn.0040210b
push dword [esi + 0x44]
push str.DeviceRoutine
push dword [ebp - 0x28]
push edi
call fcn.004020a3
add esp, 0x24
mov dword [ebp - 0x2c], eax
push str.PDRIVER_CONTROL
push 2
push eax
push edi
call fcn.00412f50
push dword [esi + 0x48]
push str.DeviceContext
push dword [ebp - 0x28]
push edi
call fcn.004020a3
push dword [esi + 0x4c]
push 0x41f1bc
push str.NumberOfMapRegisters
push dword [ebp - 0x28]
push edi
call fcn.0040210b
push dword [esi + 0x50]
push str.DeviceObject
push dword [ebp - 0x28]
push edi
call fcn.004020a3
add esp, 0x34
mov dword [ebp - 0x2c], eax
cmp dword [esi + 0x50], 0
je 0x40361b
push 0x190
push 0
lea eax, [ebp - 0x244]
push eax
call fcn.00414be0
add esp, 0xc
push 0x190
lea eax, [ebp - 0x244]
push eax
push 1
push 5
push dword [esi + 0x50]
call fcn.00404a99
test eax, eax
jne 0x40361b
lea eax, [ebp - 0x244]
push eax
push 2
push dword [ebp - 0x2c]
push edi
call fcn.00413080
push dword [esi + 0x54]
push str.CurrentIrp
push dword [ebp - 0x28]
push edi
call fcn.004020a3
push dword [esi + 0x58]
push str.BufferChainingDpc
push dword [ebp - 0x28]
push edi
call fcn.004020a3
add esp, 0x20
mov dword [ebp - 0x2c], eax
push str.PKDPC
push 2
push eax
push edi
call fcn.00412f50
push dword [esi + 0x5c]
push ebx
push str.AlignmentRequirement
push dword [ebp - 0x20]
push edi
call fcn.0040210b
add esp, 0x14
mov dword [ebp - 0x28], eax
mov eax, dword [esi + 0x5c]
cmp eax, 0x1f
ja 0x4036c4
je 0x4036bb
mov ecx, eax
sub ecx, 0
je 0x4036b2
dec ecx
je 0x4036a9
dec ecx
dec ecx
je 0x4036a0
sub ecx, 4
je 0x403697
sub ecx, 8
jne 0x4036dc
mov dword [ebp - 0x24], str.FILE_OCTA_ALIGNMENT
jmp 0x40371f
mov dword [ebp - 0x24], str.FILE_QUAD_ALIGNMENT
jmp 0x40371f
mov dword [ebp - 0x24], str.FILE_LONG_ALIGNMENT
jmp 0x40371f
mov dword [ebp - 0x24], str.FILE_WORD_ALIGNMENT
jmp 0x40371f
mov dword [ebp - 0x24], str.FILE_BYTE_ALIGNMENT
jmp 0x40371f
mov dword [ebp - 0x24], str.FILE_32_BYTE_ALIGNMENT
jmp 0x40371f
cmp eax, 0x3f
je 0x403718
cmp eax, 0x7f
je 0x40370f
cmp eax, 0xff
je 0x403706
cmp eax, 0x1ff
je 0x4036fd
push eax
push 0x41f780
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x24], eax
jmp 0x40371f
mov dword [ebp - 0x24], str.FILE_512_BYTE_ALIGNMENT
jmp 0x40371f
mov dword [ebp - 0x24], str.FILE_256_BYTE_ALIGNMENT
jmp 0x40371f
mov dword [ebp - 0x24], str.FILE_128_BYTE_ALIGNMENT
jmp 0x40371f
mov dword [ebp - 0x24], str.FILE_64_BYTE_ALIGNMENT
push dword [ebp - 0x24]
push 0x41f418
push 2
push dword [ebp - 0x28]
push edi
call fcn.00402174
push 0
push 0
push str.DeviceQueue
push dword [ebp - 0x20]
push edi
call fcn.0040210b
add esp, 0x28
mov dword [ebp - 0x28], eax
test eax, eax
je 0x403814
movsx eax, word [esi + 0x60]
push eax
push str.0x_04X
push 0x41f468
push dword [ebp - 0x28]
push edi
call fcn.0040210b
movsx eax, word [esi + 0x62]
push eax
push str.0x_04X
push str.Size
push dword [ebp - 0x28]
push edi
call fcn.0040210b
add esp, 0x28
mov dword [ebp - 0x2c], eax
cmp word [esi + 0x62], 0x14
jne 0x40379d
push str.sizeof_KDEVICE_QUEUE_
push 2
push eax
push edi
call fcn.00412f50
push 0
push 0
push str.DeviceListHead
push dword [ebp - 0x28]
push edi
call fcn.0040210b
mov dword [ebp - 0x2c], eax
push dword [esi + 0x64]
push str.Flink
push eax
push edi
call fcn.004020a3
push dword [esi + 0x68]
push str.Blink
push dword [ebp - 0x2c]
push edi
call fcn.004020a3
push dword [esi + 0x6c]
push ebx
push str.Lock
push dword [ebp - 0x28]
push edi
call fcn.0040210b
add esp, 0x48
cmp byte [esi + 0x70], 0
mov dword [ebp - 0x24], str.TRUE
jne 0x4037fb
mov dword [ebp - 0x24], str.FALSE
push dword [ebp - 0x24]
push 0x41f418
push str.Busy
push dword [ebp - 0x28]
push edi
call fcn.0040210b
add esp, 0x14
push 0
push 0
push 0x41f6d8
push dword [ebp - 0x20]
push edi
call fcn.0040210b
add esp, 0x14
mov dword [ebp - 0x28], eax
test eax, eax
je 0x4039c0
movsx eax, word [esi + 0x74]
mov ecx, eax
sub ecx, 0
je 0x40386c
dec ecx
je 0x403863
push eax
push str.0x_04X
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x24], eax
jmp 0x403873
mov dword [ebp - 0x24], str.DPC_THREADED
jmp 0x403873
mov dword [ebp - 0x24], str.DPC_NORMAL
push dword [ebp - 0x24]
push 0x41f418
push 0x41f468
push dword [ebp - 0x28]
push edi
call fcn.0040210b
movzx eax, byte [esi + 0x76]
push eax
push str.0x_02X
push str.Size
push dword [ebp - 0x28]
push edi
call fcn.0040210b
movzx eax, byte [esi + 0x77]
push eax
push str.0x_02X
push str.Importance
push dword [ebp - 0x28]
push edi
call fcn.0040210b
add esp, 0x3c
mov dword [ebp - 0x2c], eax
movzx eax, byte [esi + 0x77]
mov ecx, eax
sub ecx, 0
je 0x403903
dec ecx
je 0x4038fa
dec ecx
je 0x4038f1
push eax
push str.0x_04X
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0xb4]
mov dword [ebp - 0x24], eax
jmp 0x40390a
mov dword [ebp - 0x24], str.HighImportance
jmp 0x40390a
mov dword [ebp - 0x24], str.MediumImportance
jmp 0x40390a
mov dword [ebp - 0x24], str.LowImportance
push dword [ebp - 0x24]
push 0x41f418
push 2
push dword [ebp - 0x2c]
push edi
call fcn.00402174
push 0
push 0
push str.DpcListEntry
push dword [ebp - 0x28]
push edi
call fcn.0040210b
mov dword [ebp - 0x2c], eax
push dword [esi + 0x78]
push str.Flink
push eax
push edi
call fcn.004020a3
push dword [esi + 0x7c]
push str.Blink
push dword [ebp - 0x2c]
push edi
call fcn.004020a3
add esp, 0x48
push dword [esi + 0x80]
push str.DeferredRoutine
push dword [ebp - 0x28]
push edi
call fcn.004020a3
push dword [esi + 0x84]
push str.DeferredContext
push dword [ebp - 0x28]
push edi
call fcn.004020a3
push dword [esi + 0x88]
push str.SystemArgument1
push dword [ebp - 0x28]
push edi
call fcn.004020a3
push dword [esi + 0x8c]
push str.SystemArgument2
push dword [ebp - 0x28]
push edi
call fcn.004020a3
add esp, 0x40
push dword [esi + 0x90]
push ebx
push str.Lock
push dword [ebp - 0x28]
push edi
call fcn.0040210b
add esp, 0x14
push dword [esi + 0x94]
push 0x41f1bc
push str.ActiveThreadCount
push dword [ebp - 0x20]
push edi
call fcn.0040210b
push dword [esi + 0x98]
push str.SecurityDescriptor
push dword [ebp - 0x20]
push edi
call fcn.004020a3
add esp, 0x24
mov dword [ebp - 0x28], eax
push str.PSECURITY_DESCRIPTOR
push 2
push eax
push edi
call fcn.00412f50
push 0
push 0
push str.DeviceLock
push dword [ebp - 0x20]
push edi
call fcn.0040210b
add esp, 0x14
mov dword [ebp - 0x28], eax
test eax, eax
je 0x403af7
push 0
push 0
push str.Header
push eax
push edi
call fcn.0040210b
mov dword [ebp - 0x28], eax
movzx ecx, byte [esi + 0x9c]
push ecx
push str.0x_02X
push 0x41f468
push eax
push edi
call fcn.0040210b
movzx eax, byte [esi + 0x9d]
push eax
push str.0x_02X
push str.Absolute
push dword [ebp - 0x28]
push edi
call fcn.0040210b
movzx eax, byte [esi + 0x9e]
push eax
push str.0x_02X
push str.Size
push dword [ebp - 0x28]
push edi
call fcn.0040210b
add esp, 0x50
movzx eax, byte [esi + 0x9f]
push eax
push str.0x_02X
push str.Inserted
push dword [ebp - 0x28]
push edi
call fcn.0040210b
push dword [esi + 0xa0]
push ebx
push str.SignalState
push dword [ebp - 0x28]
push edi
call fcn.0040210b
push 0
push 0
push str.WaitListHead
push dword [ebp - 0x28]
push edi
call fcn.0040210b
mov dword [ebp - 0x2c], eax
push dword [esi + 0xa4]
push str.Flink
push eax
push edi
call fcn.004020a3
add esp, 0x4c
push dword [esi + 0xa8]
push str.Blink
push dword [ebp - 0x2c]
push edi
call fcn.004020a3
add esp, 0x10
movzx eax, word [esi + 0xac]
push eax
push str.0x_04X
push str.SectorSize
push dword [ebp - 0x20]
push edi
call fcn.0040210b
movzx eax, word [esi + 0xae]
push eax
push str.0x_04X
push str.Spare1
push dword [ebp - 0x20]
push edi
call fcn.0040210b
push dword [esi + 0xb0]
push str.DeviceObjectExtension
push dword [ebp - 0x20]
push edi
call fcn.004020a3
add esp, 0x38
mov dword [ebp - 0x28], eax
push str.PDEVOBJ_EXTENSION
push 2
push eax
push edi
call fcn.00412f50
push dword [esi + 0xb4]
push ebx
push str.Reserved
push dword [ebp - 0x20]
push edi
call fcn.0040210b
add esp, 0x14
push 2
push dword [ebp - 0x20]
push edi
call fcn.004125b0
cmp dword [esi + 0xb0], 0
je 0x403e3f
push 0x24
push 0
lea eax, [ebp - 0x2a4]
push eax
call fcn.00414be0
add esp, 0xc
push 0x24
lea eax, [ebp - 0x2a4]
push eax
push 0x24
push dword [esi + 0xb0]
call fcn.00404b08
test eax, eax
jne 0x403e3f
cmp word [ebp - 0x2a4], 0xd
jne 0x403e3f
and dword [ebp - 0x27c], eax
mov dword [ebp - 0x278], 0xffff0000
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x264], str.DEVOBJ_EXTENSION
lea eax, [ebp - 0x27c]
push eax
push edi
call fcn.00412e20
mov esi, eax
mov dword [ebp - 0x20], esi
movsx eax, word [ebp - 0x2a4]
push eax
push str.0x_04X
push 0x41f468
push esi
push edi
call fcn.0040210b
add esp, 0x14
mov dword [ebp - 0x28], eax
cmp word [ebp - 0x2a4], 0xd
jne 0x403c2a
push str.IO_TYPE_DEVICE_OBJECT_EXTENSION
jmp 0x403c2f
push str.__Must_be_IO_TYPE_DEVICE_OBJECT_EXTENSION
push 2
push eax
push edi
call fcn.00412f50
movzx eax, word [ebp - 0x2a2]
push eax
push str.0x_04X
push str.Size
push esi
push edi
call fcn.0040210b
push dword [ebp - 0x2a0]
push str.DeviceObject
push esi
push edi
call fcn.004020a3
add esp, 0x24
mov dword [ebp - 0x28], eax
test eax, eax
je 0x403cbd
cmp dword [ebp - 0x2a0], 0
je 0x403cbd
push 0x190
push 0
lea eax, [ebp - 0x244]
push eax
call fcn.00414be0
add esp, 0xc
push 0x190
lea eax, [ebp - 0x244]
push eax
push 1
push 5
push dword [ebp - 0x2a0]
call fcn.00404a99
test eax, eax
jne 0x403cbd
lea eax, [ebp - 0x244]
push eax
push 2
push dword [ebp - 0x28]
push edi
call fcn.00413080
push dword [ebp - 0x29c]
push ebx
push str.PowerFlags
push esi
push edi
call fcn.0040210b
push dword [ebp - 0x298]
push str.Dope
push esi
push edi
call fcn.004020a3
add esp, 0x24
mov dword [ebp - 0x28], eax
push str.PDEVICE_OBJECT_POWER_EXTENSION
push 2
push eax
push edi
call fcn.00412f50
push dword [ebp - 0x294]
push ebx
push str.ExtensionFlags
push esi
push edi
call fcn.0040210b
add esp, 0x14
mov dword [ebp - 0x28], eax
xor ebx, ebx
mov dword [ebp - 0x280], ebx
mov dword [ebp - 0x1c], ebx
cmp ebx, 0x20
jae 0x403d74
push 1
pop eax
mov ecx, ebx
shl eax, cl
test dword [ebp - 0x294], eax
je 0x403d71
cmp dword [ebp - 0x280], 0
je 0x403d4d
push 0
push 0
push 0x424d10
push esi
push edi
call fcn.0040210b
add esp, 0x14
mov dword [ebp - 0x28], eax
push dword [ebx*4 + 0x41e380]
push 0x41f418
push 2
push dword [ebp - 0x28]
push edi
call fcn.00402174
add esp, 0x14
mov dword [ebp - 0x280], 1
inc ebx
jmp 0x403d17
push dword [ebp - 0x290]
push str.DeviceNode
push esi
push edi
call fcn.004020a3
add esp, 0x10
mov dword [ebp - 0x28], eax
push str.PDEVICE_NODE
push 2
push eax
push edi
call fcn.00412f50
push dword [ebp - 0x28c]
push str.AttachedTo
push esi
push edi
call fcn.004020a3
add esp, 0x10
mov dword [ebp - 0x28], eax
test eax, eax
je 0x403e03
cmp dword [ebp - 0x28c], 0
je 0x403e03
mov ebx, 0x190
push ebx
push 0
lea eax, [ebp - 0x244]
push eax
call fcn.00414be0
add esp, 0xc
push ebx
lea eax, [ebp - 0x244]
push eax
push 1
push 5
push dword [ebp - 0x28c]
call fcn.00404a99
test eax, eax
jne 0x403e03
lea eax, [ebp - 0x244]
push eax
push 2
push dword [ebp - 0x28]
push edi
call fcn.00413080
push 0
push 0
push str.FileObjectList
push esi
push edi
call fcn.0040210b
mov dword [ebp - 0x28], eax
push dword [ebp - 0x288]
push str.Flink
push eax
push edi
call fcn.004020a3
push dword [ebp - 0x284]
push str.Blink
push dword [ebp - 0x28]
push edi
call fcn.004020a3
add esp, 0x34
mov dword [ebp - 0x248], 1
jmp 0x403e52
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret