Function at 0x40c700
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x51d872
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24c
push ebx
push ebp
mov ebp, ecx
xor ebx, ebx
push esi
push edi
mov dword [esp + 0x38], ebp
mov dword [esp + 0xb8], 0x530160
mov word [esp + 0xbc], 0xffff
mov word [esp + 0xbe], bx
mov dword [esp + 0x264], ebx
mov edi, 0x548aa0
mov esi, 0x548a98
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x548760
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa1d0
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x548a90
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x548a88
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push 6
push 0x548a80
call fcn.004f58e0
mov ecx, dword [0x5540a8]
call fcn.004fa410
mov ecx, dword [0x5540a8]
lea eax, [esp + 0xb8]
push eax
call fcn.004fa550
cmp ax, 0xffff
je 0x40d463
movsx eax, word [esp + 0xbc]
sub eax, ebx
je 0x40d24a
dec eax
je 0x40cfb5
dec eax
jne 0x40c755
push 6
push 0x548a80
lea ecx, [esp + 0xb8]
call fcn.004f58e0
mov cl, byte [esp + 0x13]
mov dword [esp + 0x90], ebx
mov byte [esp + 0x8c], cl
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov dl, byte [esp + 0x13]
mov dword [esp + 0x20], ebx
mov byte [esp + 0x1c], dl
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
push 6
push 0x548a78
lea ecx, [esp + 0x4c]
mov byte [esp + 0x26c], 0x11
call fcn.004f58e0
push ebx
lea ecx, [esp + 0x34]
mov byte [esp + 0x268], 0x12
call fcn.004f5870
mov eax, 0x548a70
mov byte [esp + 0x264], 0x13
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
mov eax, 0x548a68
mov dword [esp + 0xc8], 0x548a60
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], eax
mov eax, 0x548a58
mov dword [esp + 0xcc], 0x548a50
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], eax
mov eax, 0x548a48
mov dword [esp + 0xd0], 0x548a40
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], eax
mov eax, 0x548a38
mov dword [esp + 0x148], eax
mov dword [esp + 0x14c], eax
mov dword [esp + 0x150], eax
mov eax, 0x548a30
mov dword [esp + 0x154], eax
mov dword [esp + 0x158], eax
mov dword [esp + 0x15c], eax
mov dword [esp + 0x160], eax
mov eax, 0x548a28
mov dword [esp + 0xd4], 0x548a20
mov dword [esp + 0xd8], 0x548a18
mov dword [esp + 0xdc], 0x548a10
mov dword [esp + 0xe0], 0x548a08
mov dword [esp + 0xe4], 0x548a00
mov dword [esp + 0xe8], 0x5489f8
mov dword [esp + 0xec], 0x5489f0
mov dword [esp + 0xf0], 0x5489e8
mov dword [esp + 0x104], 0x5489e0
mov dword [esp + 0x108], 0x5489d8
mov dword [esp + 0x10c], edi
mov dword [esp + 0x110], edi
mov dword [esp + 0x114], edi
mov dword [esp + 0x118], edi
mov dword [esp + 0x11c], edi
mov dword [esp + 0x120], edi
mov dword [esp + 0x130], esi
mov dword [esp + 0x134], esi
mov dword [esp + 0x138], esi
mov dword [esp + 0x13c], esi
mov dword [esp + 0x140], esi
mov dword [esp + 0x144], esi
mov dword [esp + 0x164], 0x5489d0
mov dword [esp + 0x168], 0x5489c8
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], eax
mov eax, 0x5489c0
mov dword [esp + 0x174], 0x5489b8
mov dword [esp + 0x21c], eax
mov dword [esp + 0x220], eax
mov eax, 0x5489b0
mov dword [esp + 0x178], 0x5489a8
mov dword [esp + 0x17c], 0x5489a0
mov dword [esp + 0x180], 0x548998
mov dword [esp + 0x184], 0x548990
mov dword [esp + 0x188], 0x548988
mov dword [esp + 0x18c], 0x548980
mov dword [esp + 0x190], 0x548978
mov dword [esp + 0x194], 0x548970
mov dword [esp + 0x198], 0x548968
mov dword [esp + 0x19c], 0x548960
mov dword [esp + 0x1a0], 0x548958
mov dword [esp + 0x1a4], 0x548950
mov dword [esp + 0x1a8], 0x548948
mov dword [esp + 0x1ac], 0x548940
mov dword [esp + 0x1b0], 0x548938
mov dword [esp + 0x1b4], 0x548930
mov dword [esp + 0x1b8], 0x548928
mov dword [esp + 0x1bc], 0x548920
mov dword [esp + 0x1c0], 0x548918
mov dword [esp + 0x1c4], 0x548910
mov dword [esp + 0x1c8], 0x548908
mov dword [esp + 0x1cc], 0x548900
mov dword [esp + 0x1d0], 0x5488f8
mov dword [esp + 0x1d4], 0x5488f0
mov dword [esp + 0x1d8], 0x5488e8
mov dword [esp + 0x1dc], 0x5488e0
mov dword [esp + 0x1e0], 0x5488d8
mov dword [esp + 0x1e4], 0x5488d0
mov dword [esp + 0x1e8], 0x5488c8
mov dword [esp + 0x1ec], 0x5488c0
mov dword [esp + 0x1f0], 0x5488b8
mov dword [esp + 0x1f4], 0x5488b0
mov dword [esp + 0x1f8], 0x5488a8
mov dword [esp + 0x1fc], 0x5488a0
mov dword [esp + 0x200], 0x548898
mov dword [esp + 0x204], 0x548890
mov dword [esp + 0x208], 0x548888
mov dword [esp + 0x20c], 0x548880
mov dword [esp + 0x210], 0x548878
mov dword [esp + 0x214], 0x548870
mov dword [esp + 0x218], 0x548868
mov dword [esp + 0x224], eax
mov dword [esp + 0x228], eax
mov dword [esp + 0x22c], eax
mov dword [esp + 0x230], eax
mov dword [esp + 0x234], 0x548860
mov dword [esp + 0x238], 0x548858
mov dword [esp + 0x23c], 0x548850
mov dword [esp + 0x240], 0x548848
mov dword [esp + 0x244], 0x548840
mov dword [esp + 0x248], 0x548838
mov dword [esp + 0x24c], 0x548830
mov dword [esp + 0x250], 0x548828
mov dword [esp + 0x254], 0x548820
mov dword [esp + 0x258], 0x548818
mov byte [esp + 0x54], bl
lea ebp, [esp + 0xc0]
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0x44]
push eax
push 5
call fcn.004f5c80
mov edx, dword [esp + 0x94]
lea ecx, [esp + 0x44]
push ecx
push 1
push edx
lea ecx, [esp + 0x98]
call fcn.00401810
mov eax, dword [ebp]
push 7
push eax
lea ecx, [esp + 0x38]
call fcn.004f5de0
lea ecx, [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x3c]
call fcn.004d3100
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
sub edx, eax
mov dword [esp + 0x34], eax
sar edx, 2
cmp edx, 1
jae 0x40cdd3
lea ecx, [esp + 0x1c]
call fcn.00509f60
cmp eax, 1
jbe 0x40cd15
lea ecx, [esp + 0x1c]
call fcn.00509f60
mov dword [esp + 0x2c], eax
jmp 0x40cd1d
mov dword [esp + 0x2c], 1
lea ecx, [esp + 0x1c]
call fcn.00509f60
add eax, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
jns 0x40cd32
xor eax, eax
shl eax, 2
push eax
call fcn.00514a8b
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x24]
add esp, 4
mov dword [esp + 0x2c], eax
push eax
push ecx
push edx
lea ecx, [esp + 0x28]
call fcn.0041ff80
lea ecx, [esp + 0x30]
mov dword [esp + 0x40], eax
push ecx
push 1
push eax
lea ecx, [esp + 0x28]
call fcn.0041ffd0
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x34]
add edx, 4
push edx
push eax
push ecx
lea ecx, [esp + 0x28]
call fcn.0041ff80
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
push edx
push eax
lea ecx, [esp + 0x24]
call fcn.0041ff50
mov ecx, dword [esp + 0x20]
push ecx
call fcn.00514140
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x18]
add esp, 4
lea ecx, [edx + eax*4]
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x1c]
call fcn.00509f60
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x20], ecx
lea edx, [ecx + eax*4 + 4]
mov dword [esp + 0x24], edx
jmp 0x40ce65
xor cl, cl
cmp cl, 1
jae 0x40ce28
lea edx, [eax + 4]
lea ecx, [esp + 0x1c]
push edx
push eax
push eax
call fcn.0041ff80
mov edx, dword [esp + 0x34]
lea eax, [esp + 0x30]
push eax
mov eax, dword [esp + 0x28]
mov ecx, eax
sub ecx, edx
mov edx, 1
sar ecx, 2
sub edx, ecx
lea ecx, [esp + 0x20]
push edx
push eax
call fcn.0041ffd0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x34]
lea eax, [esp + 0x30]
push eax
push ecx
push edx
call fcn.00401c60
add esp, 0xc
jmp 0x40ce60
push eax
push eax
add eax, 0xfffffffc
lea ecx, [esp + 0x24]
push eax
call fcn.0041ff80
mov eax, dword [esp + 0x24]
push eax
add eax, 0xfffffffc
push eax
mov eax, dword [esp + 0x3c]
push eax
call fcn.00401ca0
mov eax, dword [esp + 0x40]
lea ecx, [esp + 0x3c]
push ecx
lea edx, [eax + 4]
push edx
push eax
call fcn.00401c60
add esp, 0x18
add dword [esp + 0x24], 4
mov al, byte [esp + 0x54]
add ebp, 4
inc al
cmp al, 0x66
mov byte [esp + 0x54], al
jbe 0x40cc96
push 0x412e20
lea eax, [esp + 0x20]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00401130
sub esp, 0x10
lea edx, [esp + 0xb0]
mov ecx, esp
mov dword [esp + 0x64], esp
push edx
mov byte [esp + 0x28c], 0x14
call fcn.00401130
push ecx
lea eax, [esp + 0xd8]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
mov byte [esp + 0x290], 0x15
call fcn.004f5850
mov ecx, dword [esp + 0x60]
mov byte [esp + 0x28c], 0x13
call fcn.0040d480
lea ecx, [esp + 0x30]
mov byte [esp + 0x264], 0x12
call fcn.004f5980
lea ecx, [esp + 0x44]
mov byte [esp + 0x264], 0x11
call fcn.004f5980
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
cmp eax, ecx
mov byte [esp + 0x264], 0x10
mov dword [esp + 0x14], ecx
mov ebp, eax
je 0x40cf2f
mov ecx, ebp
call fcn.004f5980
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x40cf19
mov eax, dword [esp + 0x20]
push eax
call fcn.00514140
mov eax, dword [esp + 0x98]
mov ebp, dword [esp + 0x94]
add esp, 4
cmp ebp, eax
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x264], 0xf
mov dword [esp + 0x14], eax
je 0x40cf7b
mov ecx, ebp
call fcn.004f5980
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x40cf62
mov ebp, dword [esp + 0x90]
push ebp
call fcn.00514140
add esp, 4
lea ecx, [esp + 0xb0]
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
mov byte [esp + 0x264], bl
call fcn.004f5980
mov ebp, dword [esp + 0x38]
jmp 0x40c755
push 6
push 0x548a88
lea ecx, [esp + 0xbc]
call fcn.004f58e0
mov cl, byte [esp + 0x13]
mov dword [esp + 0x80], ebx
mov byte [esp + 0x7c], cl
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov dl, byte [esp + 0x13]
mov dword [esp + 0x70], ebx
mov byte [esp + 0x6c], dl
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
push 6
push 0x548810
lea ecx, [esp + 0x54]
mov byte [esp + 0x26c], 0xa
call fcn.004f58e0
push ebx
lea ecx, [esp + 0x1c]
mov byte [esp + 0x268], 0xb
call fcn.004f5870
xor al, al
mov byte [esp + 0x264], 0xc
mov byte [esp + 0x3c], al
jmp 0x40d037
mov al, byte [esp + 0x3c]
cmp al, bl
ja 0x40d044
push 6
push 0x548808
jmp 0x40d0aa
cmp al, 1
ja 0x40d051
push 6
push 0x548800
jmp 0x40d0aa
cmp al, 2
ja 0x40d05e
push 6
push 0x5487f8
jmp 0x40d0aa
cmp al, 0x19
ja 0x40d06b
push 6
push 0x5487f0
jmp 0x40d0aa
cmp al, 0x1d
ja 0x40d078
push 6
push 0x5487e8
jmp 0x40d0aa
cmp al, 0x1e
ja 0x40d085
push 6
push 0x5487e0
jmp 0x40d0aa
cmp al, 0x1f
ja 0x40d092
push 6
push 0x5487d8
jmp 0x40d0aa
cmp al, 0x20
ja 0x40d09f
push 6
push 0x5487d0
jmp 0x40d0aa
cmp al, 0x21
ja 0x40d0b3
push 6
push 0x5487c8
lea ecx, [esp + 0x20]
call fcn.004f5de0
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x4c]
push eax
push 5
call fcn.004f5c80
mov edx, dword [esp + 0x84]
lea ecx, [esp + 0x4c]
push ecx
push 1
push edx
lea ecx, [esp + 0x88]
call fcn.00401810
lea eax, [esp + 0x18]
mov ecx, ebp
push eax
call fcn.004d3100
mov edx, dword [esp + 0x74]
lea ecx, [esp + 0x18]
push ecx
push 1
push edx
lea ecx, [esp + 0x78]
call fcn.00401810
mov al, byte [esp + 0x3c]
inc al
cmp al, 0x21
mov byte [esp + 0x3c], al
jbe 0x40d033
push 0x4124c0
lea eax, [esp + 0x70]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00401130
sub esp, 0x10
lea edx, [esp + 0xa0]
mov ecx, esp
mov dword [esp + 0x64], esp
push edx
mov byte [esp + 0x28c], 0xd
call fcn.00401130
push ecx
lea eax, [esp + 0xdc]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
mov byte [esp + 0x290], 0xe
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0x28c], 0xc
call fcn.0040d480
lea ecx, [esp + 0x18]
mov byte [esp + 0x264], 0xb
call fcn.004f5980
lea ecx, [esp + 0x4c]
mov byte [esp + 0x264], 0xa
call fcn.004f5980
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x70]
cmp eax, ecx
mov byte [esp + 0x264], 9
mov dword [esp + 0x14], ecx
mov ebp, eax
je 0x40d1c4
mov ecx, ebp
call fcn.004f5980
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x40d1ae
mov eax, dword [esp + 0x70]
push eax
call fcn.00514140
mov eax, dword [esp + 0x88]
mov ebp, dword [esp + 0x84]
add esp, 4
cmp ebp, eax
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov byte [esp + 0x264], 8
mov dword [esp + 0x14], eax
je 0x40d210
mov ecx, ebp
call fcn.004f5980
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x40d1f7
mov ebp, dword [esp + 0x80]
push ebp
call fcn.00514140
add esp, 4
lea ecx, [esp + 0xb4]
mov dword [esp + 0x80], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov byte [esp + 0x264], bl
call fcn.004f5980
mov ebp, dword [esp + 0x38]
jmp 0x40c755
push 6
push 0x548a90
lea ecx, [esp + 0xb4]
call fcn.004f58e0
mov cl, byte [esp + 0x13]
mov dword [esp + 0x60], ebx
mov byte [esp + 0x5c], cl
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov dl, byte [esp + 0x13]
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x9c], dl
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
push 6
push 0x5487c0
lea ecx, [esp + 0x60]
mov byte [esp + 0x26c], 3
call fcn.004f58e0
push 6
push 0x5482c0
lea ecx, [esp + 0x50]
mov byte [esp + 0x26c], 4
call fcn.004f58e0
lea eax, [esp + 0x48]
mov ecx, ebp
push eax
mov byte [esp + 0x268], 5
call fcn.004d3100
mov byte [esp + 0x50], bl
mov ecx, dword [esp + 0x50]
push ecx
push 5
lea ecx, [esp + 0x60]
call fcn.004f5c80
mov eax, dword [esp + 0x64]
lea edx, [esp + 0x58]
push edx
push 1
push eax
lea ecx, [esp + 0x68]
call fcn.00401810
mov edx, dword [esp + 0xa4]
lea ecx, [esp + 0x48]
push ecx
push 1
push edx
lea ecx, [esp + 0xa8]
call fcn.00401810
mov al, byte [esp + 0x50]
inc al
cmp al, 0x77
mov byte [esp + 0x50], al
jbe 0x40d2d9
push 0x40de00
lea eax, [esp + 0xa0]
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00401130
sub esp, 0x10
lea edx, [esp + 0x80]
mov ecx, esp
mov dword [esp + 0x64], esp
push edx
mov byte [esp + 0x28c], 6
call fcn.00401130
push ecx
lea eax, [esp + 0xd4]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
mov byte [esp + 0x290], 7
call fcn.004f5850
mov ecx, ebp
mov byte [esp + 0x28c], 5
call fcn.0040d480
lea ecx, [esp + 0x48]
mov byte [esp + 0x264], 4
call fcn.004f5980
lea ecx, [esp + 0x58]
mov byte [esp + 0x264], 3
call fcn.004f5980
mov ecx, dword [esp + 0xa4]
mov eax, dword [esp + 0xa0]
cmp eax, ecx
mov byte [esp + 0x264], 2
mov dword [esp + 0x14], ecx
mov ebp, eax
je 0x40d3e6
mov ecx, ebp
call fcn.004f5980
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x40d3cd
mov eax, dword [esp + 0xa0]
push eax
call fcn.00514140
mov eax, dword [esp + 0x68]
mov ebp, dword [esp + 0x64]
add esp, 4
cmp ebp, eax
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
mov byte [esp + 0x264], 1
mov dword [esp + 0x14], eax
je 0x40d432
mov ecx, ebp
call fcn.004f5980
mov eax, dword [esp + 0x14]
add ebp, 4
cmp ebp, eax
jne 0x40d41c
mov ebp, dword [esp + 0x60]
push ebp
call fcn.00514140
add esp, 4
lea ecx, [esp + 0xac]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x68], ebx
mov byte [esp + 0x264], bl
call fcn.004f5980
mov ebp, dword [esp + 0x38]
jmp 0x40c755
mov ecx, dword [esp + 0x25c]
pop edi
pop esi
pop ebp
xor ax, ax
mov dword fs:[0], ecx
pop ebx
add esp, 0x258
ret