Function at 0x40f920
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x2c]
cmp eax, dword [ecx + 8]
jbe 0x4101a2
sub esp, 0xac
mov edx, dword [0x5bf630]
test byte [edx], al
mov ebx, dword [esp + 0xb0]
mov ebp, ebx
shr ebx, 0x16
mov edx, dword [edx + ebx*4]
test edx, edx
je 0x4100fc
mov esi, ebp
shr ebp, 4
and ebp, 0x3ffff
add ebp, edx
mov edi, esi
shr esi, 2
and esi, 3
add edx, 0x3ffff
mov eax, ebx
mov ecx, esi
mov esi, dword [esp + 0xbc]
mov esi, dword [esi + 0x14]
mov dword [esp + 0x94], esi
mov esi, dword [esp + 0xb4]
cmp esi, 8
je 0x41005f
lea esi, [esi + edi - 1]
shr esi, 0x16
cmp esi, ebx
je 0x41004f
mov edx, edi
xor ebp, ebp
mov dword [esp + 0x6c], eax
mov dword [esp + 0x68], esi
mov dword [esp + 0x44], ebx
mov edx, dword [esp + 0xbc]
movzx esi, byte [edx + 0xf]
xchg esi, eax
test al, 0x40
xchg esi, eax
jne 0x40fff4
mov dword [esp + 0x9c], edi
mov dword [esp + 0x64], ecx
mov ebp, dword [edx]
mov dword [esp + 0x60], ebp
mov esi, dword [esp + 0xb8]
cmp ebp, esi
jae 0x40ffde
mov ebx, dword [edx + 4]
shr ebx, 2
cmp ebx, 0x19
ja 0x40ffb0
mov dword [esp + 0x80], eax
xor eax, eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x88], eax
mov dword [esp + 0x78], ecx
xor ecx, ecx
mov dword [esp + 0x30], ecx
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x78]
jmp 0x40fa80
lea eax, [edi + 8]
mov ecx, dword [esp + 0x88]
movzx edx, byte [ecx]
mov ecx, edi
shl edx, cl
cmp ecx, 0x20
sbb ecx, ecx
and ecx, edx
mov edx, dword [esp + 0x30]
or edx, ecx
mov ecx, dword [esp + 0x88]
inc ecx
mov edi, dword [esp + 0x9c]
mov dword [esp + 0x40], eax
mov dword [esp + 0x88], ecx
mov dword [esp + 0x30], edx
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xbc]
mov edi, dword [esp + 0x40]
cmp edi, ebx
jb 0x40fa35
mov ebx, ebp
shr ebp, 2
lea edi, [ebp + ebp]
cmp edi, 0x19
ja 0x40ffa3
mov dword [esp + 0x48], ebp
mov edi, dword [esp + 0x30]
jmp 0x40fac4
mov dword [esp + 0x30], edi
mov ecx, ebp
shl edi, cl
cmp ecx, 0x20
sbb eax, eax
and edi, eax
mov eax, dword [esp + 0x30]
or edi, eax
lea ebp, [ecx + ecx]
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x64]
cmp ebp, 0x20
jbe 0x40faa4
mov ebp, dword [esp + 0x48]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x41019b
xchg ebp, eax
movzx edx, al
xchg ebp, eax
mov ebx, 0x19
movzx ebx, bl
mov eax, ebx
mov esi, edx
xor edx, edx
div si
movzx edx, al
imul edx, ebp
mov eax, ecx
mov ecx, edx
mov ebx, 1
shl ebx, cl
cmp ecx, 0x20
sbb ebp, ebp
and ebx, ebp
dec ebx
and edi, ebx
xor edx, edx
xor ebx, ebx
mov ebp, ecx
test edx, edx
je 0x40ff9c
movzx esi, byte [edx]
inc edx
mov ecx, 8
mov dword [esp + 0x48], ebp
mov dword [esp + 0x5c], edi
mov edi, dword [esp + 0xb8]
mov ebp, dword [esp + 0x60]
cmp edi, ebp
jne 0x40ff64
mov ebp, dword [esp + 0xbc]
mov edi, dword [ebp + 4]
shr edi, 2
test edi, edi
je 0x410125
cmp edi, 2
jae 0x40ff5d
mov ebp, 2
test eax, eax
jne 0x41010d
mov eax, esi
and esi, 0xf
or esi, 0xd0
cmp ebp, 4
ja 0x40fde1
mov eax, 4
mov ecx, dword [esp + 0x9c]
cmp eax, ebp
jbe 0x40fdd6
mov edx, eax
sub eax, ebp
add eax, 0xfffffffc
neg eax
mov ebx, ecx
mov ecx, eax
mov ebp, 1
shl ebp, cl
cmp eax, 0x20
sbb eax, eax
and ebp, eax
lea eax, [ebp - 1]
mov ebp, eax
shl eax, 4
or eax, ebp
and eax, esi
mov ecx, dword [esp + 0xb4]
mov ebp, ecx
shr ecx, 2
cmp edx, ecx
ja 0x40fdc9
mov byte [ebx], al
lea eax, [edx + 4]
lea edx, [ebx + 1]
jmp 0x40fbd9
mov byte [edx], 0
add eax, 4
inc edx
cmp eax, ecx
jbe 0x40fbd2
xor ebx, ebx
add ecx, 2
cmp ecx, eax
jne 0x40fdba
movzx eax, byte [edx]
and eax, 0xffffffcc
or eax, ebx
mov byte [edx], al
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
je 0x40fd44
mov eax, dword [0x5bf630]
test byte [eax], al
mov ecx, dword [esp + 0x6c]
mov eax, dword [eax + ecx*4]
test eax, eax
je 0x40fda6
mov edx, dword [esp + 0xb0]
mov ebx, edx
shr edx, 4
and edx, 0x3ffff
add edx, eax
mov esi, ebx
shr ebx, 2
and ebx, 3
add eax, 0x3ffff
shr ebp, 2
mov edi, esi
jmp 0x40fcf7
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x98], edx
shr ebp, 2
shl ebp, 2
mov dword [esp + 0x10], ebp
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040ed40
mov eax, dword [esp + 0x20]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0xa4], ecx
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x64], edx
mov ebx, dword [esp + 0x24]
mov dword [esp + 0x28], ebx
mov ebp, dword [esp + 0x18]
mov dword [esp + 0x58], ebp
mov esi, dword [esp + 0x98]
mov dword [esp], esi
mov esi, dword [esp + 0x90]
mov dword [esp + 4], esi
shr ebx, 2
mov dword [esp + 0x3c], ebx
mov dword [esp + 8], ebx
call fcn.0044a4e0
mov ebp, dword [esp + 0x4c]
mov eax, dword [esp + 0x28]
sub ebp, eax
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x3c]
lea esi, [ecx + eax]
mov edi, dword [esp + 0xb0]
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0x64]
mov ebx, dword [esp + 0x58]
mov edx, dword [esp + 0xa4]
mov dword [esp + 0x90], esi
cmp ebp, 4
jae 0x40fc46
cmp ebp, 2
jne 0x40fda2
movzx ebp, byte [edx]
and ebp, 0xffffffcc
movzx edi, byte [esi]
or ebp, edi
xchg ebp, eax
mov byte [edx], al
xchg ebp, eax
cmp ebx, 3
jae 0x40fd6c
inc ebx
cmp ebx, 3
jae 0x40fd4b
lea eax, [esi + 1]
mov ecx, dword [esp + 0xb0]
mov edx, ecx
mov dword [esp], ecx
sub eax, edx
mov dword [esp + 4], eax
call fcn.0044a300
add esp, 0xac
ret
cmp edx, eax
jne 0x40fd2a
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040ec10
mov esi, dword [esp + 0x90]
jmp 0x40fd2a
cmp edx, eax
je 0x40fd75
inc edx
xor ebx, ebx
jmp 0x40fd25
mov dword [esp], edx
mov dword [esp + 4], ebx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
call fcn.0040ec10
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x90]
jmp 0x40fd25
mov eax, esi
jmp 0x40fd2d
mov esi, dword [esp + 0xb0]
xor eax, eax
xor ecx, ecx
xor ebx, ebx
xor edx, edx
jmp 0x40fc3c
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
jmp 0x40fbfe
mov esi, eax
mov eax, edx
mov edx, ebx
mov ebx, esi
jmp 0x40fbdf
mov edx, eax
mov ebx, ecx
mov eax, esi
jmp 0x40fbb4
mov dword [esp + 0xa0], ebx
mov dword [esp + 0x34], ebp
mov edi, dword [esp + 0x9c]
xchg esi, eax
mov byte [edi], al
xchg esi, eax
shr eax, 4
lea esi, [ecx - 8]
inc edi
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x70], eax
mov eax, 4
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x70]
jmp 0x40fe47
test byte [esi], al
mov esi, 1
mov byte [edi + esi], al
shr ebx, 4
add edi, 2
mov eax, dword [esp + 0x5c]
mov eax, ebx
mov dword [esp + 0x2c], ebp
mov edx, dword [esp + 0x8c]
mov esi, ecx
mov ecx, dword [esp + 0x5c]
mov ebx, dword [esp + 0xa0]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x38], esi
mov dword [esp + 0x50], eax
and eax, 0xf
or eax, 0xf0
mov esi, dword [esp + 0x2c]
add esi, 4
cmp esi, ebp
jae 0x40ff52
mov byte [edi], al
mov eax, dword [esp + 0x50]
shr eax, 4
cmp ebx, edx
je 0x40fec8
mov esi, dword [esp + 0x38]
cmp esi, 8
jae 0x40fec1
movzx ebx, byte [edx]
mov ecx, esi
shl ebx, cl
cmp ecx, 0x20
sbb ebp, ebp
and ebx, ebp
or eax, ebx
inc edx
mov dword [esp + 0x8c], edx
mov ebx, eax
and eax, 0xf
or eax, 0xf0
mov ebp, dword [esp + 0x2c]
add ebp, 8
lea esi, [edi + 1]
mov edx, dword [esp + 0x34]
cmp ebp, edx
jb 0x40fe15
mov ecx, esi
mov esi, eax
mov eax, ebp
mov ebp, edx
jmp 0x40fb85
add esi, 0xfffffff8
mov ecx, esi
jmp 0x40fe8d
test edx, edx
je 0x40ff17
movzx edx, byte [edx]
mov ecx, dword [esp + 0x38]
shl edx, cl
cmp ecx, 0x20
sbb esi, esi
and edx, esi
or eax, edx
mov edx, dword [esp + 0x48]
lea esi, [ecx + edx]
cmp esi, 8
jae 0x40ff08
mov edx, dword [esp + 0x94]
movzx ebx, byte [edx]
mov ecx, esi
shl ebx, cl
cmp ecx, 0x20
sbb ebp, ebp
and ebx, ebp
or eax, ebx
lea ebx, [edx + 1]
mov edx, ebx
jmp 0x40fe8d
lea ecx, [ecx + edx - 8]
mov edx, dword [esp + 0x94]
mov ebx, edx
jmp 0x40ff04
mov esi, dword [esp + 0x38]
cmp esi, 8
jae 0x40ff48
mov ecx, esi
mov ebx, dword [esp + 0x5c]
shl ebx, cl
cmp ecx, 0x20
sbb ebp, ebp
and ebx, ebp
or ebx, eax
mov eax, dword [esp + 0x48]
lea ebp, [ecx + eax]
lea ecx, [ebp - 8]
mov eax, ebx
mov ebx, edx
mov edx, dword [esp + 0x94]
jmp 0x40ff04
mov ebp, esi
mov ebx, eax
mov eax, dword [esp + 0x48]
jmp 0x40ff38
mov edx, ebp
mov ebp, esi
mov esi, edi
jmp 0x40feb4
mov ebp, edi
jmp 0x40fb5d
test ebp, ebp
je 0x410194
mov dword [esp + 0x8c], edx
mov eax, edi
xor edx, edx
div ebp
lea edi, [eax - 1]
imul edi, ebp
mov ebp, dword [esp + 0xbc]
add edi, dword [ebp + 4]
shr edi, 2
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x8c]
jmp 0x40fb47
mov esi, edi
jmp 0x40fb1f
mov eax, ecx
mov edi, dword [esp + 0x30]
mov ecx, ebp
jmp 0x40fb08
lea esi, [ebx + 7]
shr esi, 3
mov ebx, esi
dec esi
shr ebp, 2
shl esi, 3
sub ebp, esi
mov esi, dword [esp + 0x94]
lea ebx, [esi + ebx - 1]
mov eax, ecx
mov edx, dword [esp + 0x94]
xor ecx, ecx
xor edi, edi
jmp 0x40fb0e
mov eax, ecx
mov edx, dword [esp + 0x94]
xor ecx, ecx
xor ebx, ebx
xor edi, edi
xor ebp, ebp
jmp 0x40fb0e
mov eax, dword [edx + 4]
mov edx, dword [edx]
mov dword [esp + 0x14], edx
mov dword [esp], edi
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ebp
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x94]
add ecx, 4
mov dword [esp + 0x20], ecx
call fcn.004101b0
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x44]
cmp eax, ecx
mov ebp, dword [esp + 0xb4]
jmp 0x40fbfe
mov edi, ebp
mov ebp, edx
mov edx, dword [esp + 0xb0]
jmp 0x40f9b2
mov eax, dword [esp + 0xbc]
mov eax, dword [eax]
cmp eax, 4
jne 0x4100bd
mov eax, dword [esp + 0xb8]
cmp eax, 4
jne 0x4100a4
movzx eax, byte [ebp]
mov edx, 0x33
shl edx, cl
cmp ecx, 0x20
sbb ebx, ebx
and edx, ebx
not edx
and edx, eax
mov eax, 0x11
shl eax, cl
and eax, ebx
or eax, edx
mov byte [ebp], al
add esp, 0xac
ret
movzx eax, byte [ebp]
mov edx, 0x13
shl edx, cl
cmp ecx, 0x20
sbb ebx, ebx
and edx, ebx
or eax, edx
mov byte [ebp], al
jmp 0x41009d
mov eax, dword [esp + 0x94]
movzx eax, byte [eax]
and eax, 3
or eax, 0x10
movzx edx, byte [ebp]
mov ebx, 0x33
shl ebx, cl
cmp ecx, 0x20
sbb esi, esi
and esi, ebx
xchg esi, ebx
not ebx
xchg esi, ebx
and esi, edx
shl eax, cl
cmp ecx, 0x20
sbb edx, edx
and eax, edx
or eax, esi
mov byte [ebp], al
add esp, 0xac
ret
mov eax, ebx
mov edi, ebp
xor edx, edx
xor ebx, ebx
xor esi, esi
xor ebp, ebp
jmp 0x40f97c
lea eax, [0x4fd366]
mov dword [esp], eax
mov dword [esp + 4], 0x21
call fcn.004258a0
ud2
mov dword [esp], ebp
call fcn.00443230
mov eax, dword [esp + 8]
mov dword [esp + 0x54], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0xa8], ecx
call fcn.00426160
lea eax, [0x4fa937]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.004269e0
mov eax, dword [esp + 0xa8]
mov dword [esp], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 4], eax
call fcn.004269e0
call fcn.00426370
call fcn.004261d0
lea eax, [0x4ff00b]
mov dword [esp], eax
mov dword [esp + 4], 0x2d
call fcn.004258a0
ud2
call fcn.00424690
ud2
call fcn.00424690
ud2
call fcn.00448580
jmp fcn.0040f920