Function at 0x40f910
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x88
push ebx
mov ebx, dword [esp + 0x90]
push ebp
push esi
mov eax, dword [ebx + 0x83c]
push edi
mov edi, dword [esp + 0xac]
mov edx, dword [esp + 0xa8]
imul eax, edi
add eax, edx
mov ebp, dword [ebx + 0x834]
shl edx, 4
lea esi, [eax + eax*8]
mov ecx, ebp
sar ecx, 1
lea esi, [eax + esi*2]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], edx
lea eax, [eax + esi*4]
mov esi, dword [ebx + 0x28c0]
lea esi, [esi + eax*4]
mov eax, edi
shl eax, 4
imul eax, ebp
mov edi, dword [esp + 0xa0]
add eax, edx
mov dword [esp + 0x44], esi
add eax, dword [edi]
mov dword [esp + 0x80], eax
lea edi, [eax + 8]
lea eax, [eax + ebp*8]
mov dword [esp + 0x88], eax
add eax, 8
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0xac]
shl eax, 3
imul eax, ecx
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x84], edi
mov edi, dword [esp + 0xa0]
shl ecx, 3
mov edi, dword [edi + 4]
mov dword [esp + 0x24], ecx
add edi, ecx
add edi, eax
mov dword [esp + 0x90], edi
mov edi, dword [esp + 0xa0]
mov edi, dword [edi + 8]
add edi, ecx
add edi, eax
mov eax, dword [esi]
cmp eax, 2
mov dword [esp + 0x94], edi
jne 0x40fca3
add esi, 4
mov ecx, 8
lea edi, [esp + 0x48]
mov dword [esp + 0x2c], 8
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x58]
mov edi, dword [esp + 0x5c]
mov esi, dword [esp + 0x50]
add eax, ecx
mov ecx, dword [esp + 0x64]
add ecx, edi
mov edi, dword [esp + 0x54]
add eax, esi
mov esi, dword [esp + 0x48]
add ecx, edi
mov edi, dword [esp + 0x4c]
add eax, esi
add ecx, edi
mov edi, eax
and edi, 0xf
sar eax, 3
add eax, dword [edi*4 + 0x472ef8]
mov dword [esp + 0x28], eax
mov eax, ecx
and eax, 0xf
sar ecx, 3
mov edi, dword [eax*4 + 0x472ef8]
mov eax, dword [esp + 0xac]
add ecx, edi
mov edi, edx
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x4c]
shl eax, 4
sar ecx, 1
add ecx, eax
mov dword [esp + 0x1c], eax
imul ecx, ebp
mov eax, esi
add edi, ecx
mov ecx, dword [esp + 0x4c]
and esi, 1
sar eax, 1
add eax, edi
mov edi, dword [ebx + 0x870]
and ecx, 1
add eax, edi
lea edi, [ebx + 0x600]
lea esi, [ecx + esi*2]
mov dword [esp + 0x10], edi
sub esi, 0
je 0x40fad6
push ebp
push 8
push eax
dec esi
push edi
je 0x40fac7
dec esi
je 0x40fab8
call dword [0x4dca9c]
mov edx, dword [esp + 0x24]
add esp, 0x10
jmp 0x40fade
call dword [0x4dca94]
mov edx, dword [esp + 0x24]
add esp, 0x10
jmp 0x40fade
call dword [0x4dcab4]
mov edx, dword [esp + 0x24]
add esp, 0x10
jmp 0x40fade
mov dword [esp + 0x10], eax
mov dword [esp + 0x2c], ebp
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x1c]
sar ecx, 1
add ecx, eax
mov eax, dword [esp + 0x50]
imul ecx, ebp
mov esi, eax
mov edi, edx
sar esi, 1
add edi, ecx
mov ecx, dword [ebx + 0x870]
add esi, edi
and eax, 1
mov dword [esp + 0x30], 8
lea edi, [esi + ecx + 8]
mov ecx, dword [esp + 0x54]
and ecx, 1
lea esi, [ebx + 0x640]
mov dword [esp + 0x10], esi
lea eax, [ecx + eax*2]
sub eax, 0
je 0x40fb69
push ebp
push 8
push edi
dec eax
push esi
je 0x40fb5a
dec eax
je 0x40fb4b
call dword [0x4dca9c]
mov edx, dword [esp + 0x24]
add esp, 0x10
jmp 0x40fb71
call dword [0x4dca94]
mov edx, dword [esp + 0x24]
add esp, 0x10
jmp 0x40fb71
call dword [0x4dcab4]
mov edx, dword [esp + 0x24]
add esp, 0x10
jmp 0x40fb71
mov dword [esp + 0x10], edi
mov dword [esp + 0x30], ebp
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x1c]
sar ecx, 1
mov edi, edx
mov dword [esp + 0x34], 8
lea esi, [ecx + eax + 8]
mov ecx, dword [esp + 0x58]
imul esi, ebp
mov eax, ecx
add edi, esi
mov esi, dword [ebx + 0x870]
and ecx, 1
sar eax, 1
add eax, edi
mov edi, dword [esp + 0x5c]
and edi, 1
add eax, esi
lea esi, [ebx + 0x680]
lea ecx, [edi + ecx*2]
mov dword [esp + 0x10], esi
sub ecx, 0
je 0x40fbfc
push ebp
push 8
push eax
dec ecx
push esi
je 0x40fbed
dec ecx
je 0x40fbde
call dword [0x4dca9c]
mov edx, dword [esp + 0x24]
add esp, 0x10
jmp 0x40fc04
call dword [0x4dca94]
mov edx, dword [esp + 0x24]
add esp, 0x10
jmp 0x40fc04
call dword [0x4dcab4]
mov edx, dword [esp + 0x24]
add esp, 0x10
jmp 0x40fc04
mov dword [esp + 0x10], eax
mov dword [esp + 0x34], ebp
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x64]
mov eax, ecx
and ecx, 1
sar eax, 1
mov dword [esp + 0x38], 8
lea esi, [eax + esi + 8]
mov eax, dword [esp + 0x60]
imul esi, ebp
mov edi, eax
add edx, esi
sar edi, 1
add edi, edx
mov edx, dword [ebx + 0x870]
and eax, 1
lea esi, [edi + edx + 8]
lea edx, [ebx + 0x6c0]
lea eax, [ecx + eax*2]
mov edi, edx
sub eax, 0
je 0x40fc94
push ebp
push 8
push esi
dec eax
push edx
je 0x40fc82
dec eax
je 0x40fc70
call dword [0x4dca9c]
add esp, 0x10
mov dword [esp + 0x74], edi
jmp 0x40fd7c
call dword [0x4dca94]
add esp, 0x10
mov dword [esp + 0x74], edi
jmp 0x40fd7c
call dword [0x4dcab4]
add esp, 0x10
mov dword [esp + 0x74], edi
jmp 0x40fd7c
mov edi, esi
mov dword [esp + 0x38], ebp
mov dword [esp + 0x74], edi
jmp 0x40fd7c
mov ecx, dword [esi + 4]
mov esi, dword [esi + 8]
mov edi, ecx
mov eax, ecx
and edi, 3
and ecx, 1
sar eax, 1
mov edi, dword [edi*4 + 0x472ee8]
mov dword [esp + 0x10], eax
add edi, eax
mov eax, esi
mov dword [esp + 0x28], edi
and eax, 3
mov edi, esi
and esi, 1
mov eax, dword [eax*4 + 0x472ee8]
sar edi, 1
add eax, edi
lea ecx, [esi + ecx*2]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0xac]
shl eax, 4
add eax, edi
mov edi, dword [ebx + 0x870]
imul eax, ebp
add eax, edi
mov edi, dword [esp + 0x10]
add eax, edi
mov edi, 0x10
add eax, edx
lea edx, [ebx + 0x600]
sub ecx, 0
mov dword [esp + 0x1c], edx
mov dword [esp + 0x2c], edi
je 0x40fd50
push ebp
push edi
push eax
dec ecx
push edx
je 0x40fd41
dec ecx
je 0x40fd32
call dword [0x4dca98]
mov eax, dword [esp + 0x2c]
add esp, 0x10
jmp 0x40fd56
call dword [0x4dcaa8]
mov eax, dword [esp + 0x2c]
add esp, 0x10
jmp 0x40fd56
call dword [0x4dcaa0]
mov eax, dword [esp + 0x2c]
add esp, 0x10
jmp 0x40fd56
mov edi, ebp
mov dword [esp + 0x2c], edi
mov dword [esp + 0x68], eax
lea ecx, [eax + 8]
lea edx, [eax + edi*8]
lea eax, [eax + edi*8 + 8]
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x70], edx
mov dword [esp + 0x74], eax
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0xac]
mov eax, edx
mov ecx, dword [esp + 0x28]
sar eax, 1
mov edi, ecx
and ecx, 1
lea esi, [eax + esi*8]
mov eax, dword [ebx + 0x874]
imul esi, dword [esp + 0x18]
sar edi, 1
add eax, edi
mov dword [esp + 0x20], edi
mov edi, dword [esp + 0x24]
add eax, esi
add eax, edi
lea edi, [ebx + 0x700]
and edx, 1
mov dword [esp + 0x10], edi
mov dword [esp + 0x3c], 8
lea edi, [edx + ecx*2]
mov ecx, edi
sub ecx, 0
je 0x40fe31
dec ecx
je 0x40fe13
dec ecx
je 0x40fdf5
mov ecx, dword [esp + 0x18]
push ecx
push 8
push eax
lea eax, [ebx + 0x700]
push eax
call dword [0x4dca9c]
mov edx, dword [esp + 0x28]
add esp, 0x10
jmp 0x40fe3d
mov edx, dword [esp + 0x18]
push edx
push 8
push eax
lea eax, [ebx + 0x700]
push eax
call dword [0x4dca94]
mov edx, dword [esp + 0x28]
add esp, 0x10
jmp 0x40fe3d
mov ecx, dword [esp + 0x18]
push ecx
push 8
push eax
lea eax, [ebx + 0x700]
push eax
call dword [0x4dcab4]
mov edx, dword [esp + 0x28]
add esp, 0x10
jmp 0x40fe3d
mov edx, dword [esp + 0x18]
mov dword [esp + 0x10], eax
mov dword [esp + 0x3c], edx
mov eax, dword [esp + 0x10]
lea ecx, [ebx + 0x740]
mov dword [esp + 0x78], eax
mov eax, dword [ebx + 0x878]
add eax, dword [esp + 0x20]
mov dword [esp + 0x40], 8
add eax, esi
mov esi, dword [esp + 0x24]
add eax, esi
sub edi, 0
mov esi, ecx
je 0x40fe98
push edx
push 8
push eax
dec edi
push ecx
je 0x40fe8d
dec edi
je 0x40fe82
call dword [0x4dca9c]
add esp, 0x10
jmp 0x40fe9e
call dword [0x4dca94]
add esp, 0x10
jmp 0x40fe9e
call dword [0x4dcab4]
add esp, 0x10
jmp 0x40fe9e
mov esi, eax
mov dword [esp + 0x40], edx
lea edx, [ebx + 0x300]
mov ecx, 0xc0
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
mov dword [esp + 0x7c], esi
mov dword [esp + 0x24], edx
mov edi, 5
mov esi, edx
mov eax, 1
mov ecx, edi
shl eax, cl
mov ecx, dword [esp + 0x44]
test dword [ecx + 0x60], eax
je 0x40fee4
lea edx, [ebx + 0x814]
push esi
push edx
call fcn.0040eff0
mov edx, dword [esp + 0x2c]
add esp, 8
add esi, 0x80
dec edi
cmp edi, 0xffffffff
jg 0x40febe
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x60]
mov eax, dword [eax + 0x58]
push ecx
push eax
lea ecx, [esp + 0x34]
push ebp
push ecx
lea eax, [esp + 0x78]
lea ecx, [esp + 0x90]
push eax
push ecx
push ebx
push edx
call fcn.0040f840
add esp, 0x20
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x88
ret