Function at 0x40f200
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2c]
cmp eax, dword [ecx + 8]
jbe 0x40fa82
sub esp, 0xac
mov edx, dword [0x5748b0]
test byte [edx], al
mov ebx, dword [esp + 0xb0]
mov ebp, ebx
shr ebx, 0x16
mov edx, dword [edx + ebx*4]
test edx, edx
je 0x40f9dc
mov esi, ebp
shr ebp, 4
and ebp, 0x3ffff
add ebp, edx
mov edi, esi
shr esi, 2
and esi, 3
add edx, 0x3ffff
mov eax, ebx
mov ecx, esi
mov esi, dword [esp + 0xbc]
mov esi, dword [esi + 0x14]
mov dword [esp + 0x94], esi
mov esi, dword [esp + 0xb4]
cmp esi, 8
je 0x40f93f
lea esi, [esi + edi - 1]
shr esi, 0x16
cmp esi, ebx
je 0x40f92f
mov edx, edi
xor ebp, ebp
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], esi
mov dword [esp + 0x44], ebx
mov edx, dword [esp + 0xbc]
movzx esi, byte [edx + 0xf]
xchg esi, eax
test al, 0x40
xchg esi, eax
jne 0x40f8d4
mov dword [esp + 0x9c], edi
mov dword [esp + 0x64], ecx
mov ebp, dword [edx]
mov dword [esp + 0x60], ebp
mov esi, dword [esp + 0xb8]
cmp ebp, esi
jae 0x40f8be
mov ebx, dword [edx + 4]
shr ebx, 2
cmp ebx, 0x19
ja 0x40f890
mov dword [esp + 0x80], eax
xor eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x88], eax
mov dword [esp + 0x78], ecx
xor ecx, ecx
mov dword [esp + 0x30], ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x78]
jmp 0x40f360
lea eax, [edi + 8]
mov ecx, dword [esp + 0x88]
movzx edx, byte [ecx]
mov ecx, edi
shl edx, cl
cmp ecx, 0x20
sbb ecx, ecx
and ecx, edx
mov edx, dword [esp + 0x30]
or edx, ecx
mov ecx, dword [esp + 0x88]
inc ecx
mov edi, dword [esp + 0x9c]
mov dword [esp + 0x40], eax
mov dword [esp + 0x88], ecx
mov dword [esp + 0x30], edx
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
cmp edi, ebx
jb 0x40f315
mov ebx, ebp
shr ebp, 2
lea edi, [ebp + ebp]
cmp edi, 0x19
ja 0x40f883
mov dword [esp + 0x48], ebp
mov edi, dword [esp + 0x30]
jmp 0x40f3a4
mov dword [esp + 0x30], edi
mov ecx, ebp
shl edi, cl
cmp ecx, 0x20
sbb eax, eax
and edi, eax
mov eax, dword [esp + 0x30]
or edi, eax
lea ebp, [ecx + ecx]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x64]
cmp ebp, 0x20
jbe 0x40f384
mov ebp, dword [esp + 0x48]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x40fa7b
xchg ebp, eax
movzx edx, al
xchg ebp, eax
mov ebx, 0x19
movzx ebx, bl
mov eax, ebx
mov esi, edx
xor edx, edx
div si
movzx edx, al
imul edx, ebp
mov eax, ecx
mov ecx, edx
mov ebx, 1
shl ebx, cl
cmp ecx, 0x20
sbb ebp, ebp
and ebx, ebp
dec ebx
and edi, ebx
xor edx, edx
xor ebx, ebx
mov ebp, ecx
test edx, edx
je 0x40f87c
movzx esi, byte [edx]
inc edx
mov ecx, 8
mov dword [esp + 0x48], ebp
mov dword [esp + 0x5c], edi
mov edi, dword [esp + 0xb8]
mov ebp, dword [esp + 0x60]
cmp edi, ebp
jne 0x40f844
mov ebp, dword [esp + 0xbc]
mov edi, dword [ebp + 4]
shr edi, 2
test edi, edi
je 0x40fa05
cmp edi, 2
jae 0x40f83d
mov ebp, 2
test eax, eax
jne 0x40f9ed
mov eax, esi
and esi, 0xf
or esi, 0xd0
cmp ebp, 4
ja 0x40f6c1
mov eax, 4
mov ecx, dword [esp + 0x9c]
cmp eax, ebp
jbe 0x40f6b6
mov edx, eax
sub eax, ebp
add eax, 0xfffffffc
neg eax
mov ebx, ecx
mov ecx, eax
mov ebp, 1
shl ebp, cl
cmp eax, 0x20
sbb eax, eax
and ebp, eax
lea eax, [ebp - 1]
mov ebp, eax
shl eax, 4
or eax, ebp
and eax, esi
mov ecx, dword [esp + 0xb4]
mov ebp, ecx
shr ecx, 2
cmp edx, ecx
ja 0x40f6a9
mov byte [ebx], al
lea eax, [edx + 4]
lea edx, [ebx + 1]
jmp 0x40f4b9
mov byte [edx], 0
add eax, 4
inc edx
cmp eax, ecx
jbe 0x40f4b2
xor ebx, ebx
add ecx, 2
cmp ecx, eax
jne 0x40f69a
movzx eax, byte [edx]
and eax, 0xffffffcc
or eax, ebx
mov byte [edx], al
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
je 0x40f624
mov eax, dword [0x5748b0]
test byte [eax], al
mov ecx, dword [esp + 0x6c]
mov eax, dword [eax + ecx*4]
test eax, eax
je 0x40f686
mov edx, dword [esp + 0xb0]
mov ebx, edx
shr edx, 4
and edx, 0x3ffff
add edx, eax
mov esi, ebx
shr ebx, 2
and ebx, 3
add eax, 0x3ffff
shr ebp, 2
mov edi, esi
jmp 0x40f5d7
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x98], edx
shr ebp, 2
shl ebp, 2
mov dword [esp + 0x10], ebp
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040e620
mov eax, dword [esp + 0x20]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xa4], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x28], ebx
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x58], ebp
mov esi, dword [esp + 0x98]
mov dword [esp], esi
mov esi, dword [esp + 0x90]
mov dword [esp + 4], esi
shr ebx, 2
mov dword [esp + 0x3c], ebx
mov dword [esp + 8], ebx
call fcn.00447e60
mov ebp, dword [esp + 0x4c]
mov eax, dword [esp + 0x28]
sub ebp, eax
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x3c]
lea esi, [ecx + eax]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x64]
mov ebx, dword [esp + 0x58]
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x90], esi
cmp ebp, 4
jae 0x40f526
cmp ebp, 2
jne 0x40f682
movzx ebp, byte [edx]
and ebp, 0xffffffcc
movzx edi, byte [esi]
or ebp, edi
xchg ebp, eax
mov byte [edx], al
xchg ebp, eax
cmp ebx, 3
jae 0x40f64c
inc ebx
cmp ebx, 3
jae 0x40f62b
lea eax, [esi + 1]
mov ecx, dword [esp + 0xb0]
mov edx, ecx
mov dword [esp], ecx
sub eax, edx
mov dword [esp + 4], eax
call fcn.00447c80
add esp, 0xac
ret
cmp edx, eax
jne 0x40f60a
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040e4f0
mov esi, dword [esp + 0x90]
jmp 0x40f60a
cmp edx, eax
je 0x40f655
inc edx
xor ebx, ebx
jmp 0x40f605
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040e4f0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x90]
jmp 0x40f605
mov eax, esi
jmp 0x40f60d
mov esi, dword [esp + 0xb0]
xor eax, eax
xor ecx, ecx
xor ebx, ebx
xor edx, edx
jmp 0x40f51c
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
jmp 0x40f4de
mov esi, eax
mov eax, edx
mov edx, ebx
mov ebx, esi
jmp 0x40f4bf
mov edx, eax
mov ebx, ecx
mov eax, esi
jmp 0x40f494
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x34], ebp
mov edi, dword [esp + 0x9c]
xchg esi, eax
mov byte [edi], al
xchg esi, eax
shr eax, 4
lea esi, [ecx - 8]
inc edi
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x70], eax
mov eax, 4
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x70]
jmp 0x40f727
test byte [esi], al
mov esi, 1
mov byte [edi + esi], al
shr ebx, 4
add edi, 2
mov eax, dword [esp + 0x5c]
mov eax, ebx
mov dword [esp + 0x2c], ebp
mov edx, dword [esp + 0x8c]
mov esi, ecx
mov ecx, dword [esp + 0x5c]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x38], esi
mov dword [esp + 0x50], eax
and eax, 0xf
or eax, 0xf0
mov esi, dword [esp + 0x2c]
add esi, 4
cmp esi, ebp
jae 0x40f832
mov byte [edi], al
mov eax, dword [esp + 0x50]
shr eax, 4
cmp ebx, edx
je 0x40f7a8
mov esi, dword [esp + 0x38]
cmp esi, 8
jae 0x40f7a1
movzx ebx, byte [edx]
mov ecx, esi
shl ebx, cl
cmp ecx, 0x20
sbb ebp, ebp
and ebx, ebp
or eax, ebx
inc edx
mov dword [esp + 0x8c], edx
mov ebx, eax
and eax, 0xf
or eax, 0xf0
mov ebp, dword [esp + 0x2c]
add ebp, 8
lea esi, [edi + 1]
mov edx, dword [esp + 0x34]
cmp ebp, edx
jb 0x40f6f5
mov ecx, esi
mov esi, eax
mov eax, ebp
mov ebp, edx
jmp 0x40f465
add esi, 0xfffffff8
mov ecx, esi
jmp 0x40f76d
test edx, edx
je 0x40f7f7
movzx edx, byte [edx]
mov ecx, dword [esp + 0x38]
shl edx, cl
cmp ecx, 0x20
sbb esi, esi
and edx, esi
or eax, edx
mov edx, dword [esp + 0x48]
lea esi, [ecx + edx]
cmp esi, 8
jae 0x40f7e8
mov edx, dword [esp + 0x94]
movzx ebx, byte [edx]
mov ecx, esi
shl ebx, cl
cmp ecx, 0x20
sbb ebp, ebp
and ebx, ebp
or eax, ebx
lea ebx, [edx + 1]
mov edx, ebx
jmp 0x40f76d
lea ecx, [ecx + edx - 8]
mov edx, dword [esp + 0x94]
mov ebx, edx
jmp 0x40f7e4
mov esi, dword [esp + 0x38]
cmp esi, 8
jae 0x40f828
mov ecx, esi
mov ebx, dword [esp + 0x5c]
shl ebx, cl
cmp ecx, 0x20
sbb ebp, ebp
and ebx, ebp
or ebx, eax
mov eax, dword [esp + 0x48]
lea ebp, [ecx + eax]
lea ecx, [ebp - 8]
mov eax, ebx
mov ebx, edx
mov edx, dword [esp + 0x94]
jmp 0x40f7e4
mov ebp, esi
mov ebx, eax
mov eax, dword [esp + 0x48]
jmp 0x40f818
mov edx, ebp
mov ebp, esi
mov esi, edi
jmp 0x40f794
mov ebp, edi
jmp 0x40f43d
test ebp, ebp
je 0x40fa74
mov dword [esp + 0x8c], edx
mov eax, edi
xor edx, edx
div ebp
lea edi, [eax - 1]
imul edi, ebp
mov ebp, dword [esp + 0xbc]
add edi, dword [ebp + 4]
shr edi, 2
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x8c]
jmp 0x40f427
mov esi, edi
jmp 0x40f3ff
mov eax, ecx
mov edi, dword [esp + 0x30]
mov ecx, ebp
jmp 0x40f3e8
lea esi, [ebx + 7]
shr esi, 3
mov ebx, esi
dec esi
shr ebp, 2
shl esi, 3
sub ebp, esi
mov esi, dword [esp + 0x94]
lea ebx, [esi + ebx - 1]
mov eax, ecx
mov edx, dword [esp + 0x94]
xor ecx, ecx
xor edi, edi
jmp 0x40f3ee
mov eax, ecx
mov edx, dword [esp + 0x94]
xor ecx, ecx
xor ebx, ebx
xor edi, edi
xor ebp, ebp
jmp 0x40f3ee
mov eax, dword [edx + 4]
mov edx, dword [edx]
mov dword [esp + 0x14], edx
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x94]
add ecx, 4
mov dword [esp + 0x20], ecx
call fcn.0040fa90
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
mov ebp, dword [esp + 0xb4]
jmp 0x40f4de
mov edi, ebp
mov ebp, edx
mov edx, dword [esp + 0xb0]
jmp 0x40f292
mov eax, dword [esp + 0xbc]
mov eax, dword [eax]
cmp eax, 4
jne 0x40f99d
mov eax, dword [esp + 0xb8]
cmp eax, 4
jne 0x40f984
movzx eax, byte [ebp]
mov edx, 0x33
shl edx, cl
cmp ecx, 0x20
sbb ebx, ebx
and edx, ebx
not edx
and edx, eax
mov eax, 0x11
shl eax, cl
and eax, ebx
or eax, edx
mov byte [ebp], al
add esp, 0xac
ret
movzx eax, byte [ebp]
mov edx, 0x13
shl edx, cl
cmp ecx, 0x20
sbb ebx, ebx
and edx, ebx
or eax, edx
mov byte [ebp], al
jmp 0x40f97d
mov eax, dword [esp + 0x94]
movzx eax, byte [eax]
and eax, 3
or eax, 0x10
movzx edx, byte [ebp]
mov ebx, 0x33
shl ebx, cl
cmp ecx, 0x20
sbb esi, esi
and esi, ebx
xchg esi, ebx
not ebx
xchg esi, ebx
and esi, edx
shl eax, cl
cmp ecx, 0x20
sbb edx, edx
and eax, edx
or eax, esi
mov byte [ebp], al
add esp, 0xac
ret
mov eax, ebx
mov edi, ebp
xor edx, edx
xor ebx, ebx
xor esi, esi
xor ebp, ebp
jmp 0x40f25c
lea eax, [0x4d1ec3]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.00425150
ud2
mov dword [esp], ebp
call fcn.00440c60
mov eax, dword [esp + 8]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0xa8], ecx
call fcn.00425a10
lea eax, [0x4cfb57]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.00426290
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.00426290
call fcn.00425c20
call fcn.00425a80
lea eax, [0x4d36ce]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.00425150
ud2
call fcn.00423f40
ud2
call fcn.00423f40
ud2
call fcn.00445f00
jmp fcn.0040f200