Function at 0x40f0f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4dcd41
mov eax, dword fs:[0]
push eax
sub esp, 0x68
push ebx
push ebp
push esi
push edi
mov eax, dword [0x515854]
xor eax, esp
push eax
lea eax, [esp + 0x7c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x94]
xor esi, esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x84], 1
mov ebx, dword [ebp + 8]
cmp dword [ebp + 4], ebx
jbe 0x40f148
call fcn.004b7b58
mov edi, dword [ebp + 4]
cmp edi, dword [ebp + 8]
jbe 0x40f155
call fcn.004b7b58
cmp ebp, esi
je 0x40f15d
cmp ebp, ebp
je 0x40f162
call fcn.004b7b58
cmp ebx, edi
je 0x40f21b
cmp ebp, esi
mov edi, ebp
mov dword [esp + 0x18], ebx
jne 0x40f179
call fcn.004b7b58
cmp ebx, dword [ebp + 4]
ja 0x40f183
call fcn.004b7b58
lea esi, [ebx - 4]
cmp esi, dword [edi + 8]
mov dword [esp + 0x14], esi
jb 0x40f194
call fcn.004b7b58
mov eax, dword [esi]
mov esi, dword [esp + 0x90]
push eax
lea ecx, [esp + 0x60]
push esi
push ecx
call fcn.0040ecc0
mov eax, dword [esp + 0x6c]
xor ecx, ecx
add esp, 0xc
cmp eax, ecx
je 0x40f1c1
push eax
call fcn.004b6eae
add esp, 4
xor ecx, ecx
mov eax, dword [esi + 0x14]
cmp eax, ecx
mov dword [esp + 0x60], ecx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x68], ecx
jne 0x40f1dd
mov dword [esp + 0x94], ecx
jmp 0x40f1e9
mov edx, dword [esi + 0x18]
sub edx, eax
mov dword [esp + 0x94], edx
lea eax, [esp + 0x94]
push eax
call fcn.004076f0
lea edi, [esi + 0x34]
push edi
lea esi, [esp + 0x50]
call fcn.004076f0
add dword [edi], 0xffffffff
cmp ebx, dword [ebp + 4]
ja 0x40f210
call fcn.004b7b58
mov ebx, dword [esp + 0x14]
xor esi, esi
jmp 0x40f148
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov byte [esp + 0x84], 2
mov ecx, dword [ebp + 4]
cmp ecx, esi
je 0x40f247
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
cmp eax, 0xf
jae 0x40f272
cmp ecx, esi
jne 0x40f24b
xor eax, eax
jmp 0x40f253
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
lea ecx, [esp + 0x94]
or al, 0xa0
push ecx
lea esi, [esp + 0x40]
mov byte [esp + 0x98], al
call fcn.00420e50
jmp 0x40f333
lea edx, [esp + 0x94]
push edx
lea esi, [esp + 0x40]
mov byte [esp + 0x98], 0xaf
call fcn.00420e50
mov ecx, dword [ebp + 4]
test ecx, ecx
jne 0x40f296
xor eax, eax
jmp 0x40f29e
mov eax, dword [ebp + 8]
sub eax, ecx
sar eax, 2
push 0
push 0
push eax
mov eax, dword [esp + 0x9c]
push eax
lea ecx, [esp + 0x3c]
push ecx
call fcn.0040ff80
add esp, 0x14
mov byte [esp + 0x84], 3
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
cmp ecx, eax
mov dword [esp + 0x94], eax
jbe 0x40f2e0
call fcn.004b7b58
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
cmp ecx, eax
lea edi, [esp + 0x2c]
mov ebp, ecx
jbe 0x40f2ef
call fcn.004b7b58
mov ebx, dword [esp + 0x44]
cmp dword [esp + 0x40], ebx
lea esi, [esp + 0x2c]
jbe 0x40f302
call fcn.004b7b58
mov edx, dword [esp + 0x94]
push edx
push edi
push ebp
push esi
lea eax, [esp + 0x4c]
push ebx
push eax
mov esi, eax
call fcn.00424fb0
mov byte [esp + 0x84], 2
mov eax, dword [esp + 0x30]
test eax, eax
je 0x40f333
push eax
call fcn.004b6eae
add esp, 4
mov edi, dword [esp + 0x8c]
xor eax, eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
mov esi, dword [esp + 0x50]
mov eax, dword [esp + 0x54]
cmp esi, eax
mov dword [esp + 0x1c], 1
jbe 0x40f362
call fcn.004b7b58
mov eax, dword [esp + 0x54]
lea ebx, [esp + 0x4c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], esi
mov edi, edi
cmp dword [esp + 0x50], eax
mov ebp, eax
jbe 0x40f37d
call fcn.004b7b58
test ebx, ebx
je 0x40f389
lea eax, [esp + 0x4c]
cmp ebx, eax
je 0x40f38e
call fcn.004b7b58
cmp esi, ebp
je 0x40f4b2
test ebx, ebx
jne 0x40f39f
call fcn.004b7b58
cmp esi, dword [ebx + 8]
jb 0x40f3a9
call fcn.004b7b58
mov ecx, dword [esi]
push ecx
lea eax, [esp + 0x70]
call fcn.00424f00
mov edx, dword [esp + 0x94]
mov byte [esp + 0x88], 4
mov ecx, dword [edx + 0x30]
push ecx
push eax
lea edx, [esp + 0x68]
push edx
call fcn.004119a0
add esp, 0x10
mov byte [esp + 0x84], 6
mov eax, dword [esp + 0x70]
xor esi, esi
cmp eax, esi
je 0x40f3f1
push eax
call fcn.004b6eae
add esp, 4
mov ebx, dword [edi + 4]
cmp ebx, dword [edi + 8]
mov dword [esp + 0x70], esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x78], esi
jbe 0x40f40a
call fcn.004b7b58
lea esi, [esp + 0x20]
lea edi, [esp + 0x5c]
call fcn.00420e10
lea esi, [esp + 0x2c]
mov ebp, eax
call fcn.00420de0
mov edx, dword [ebp]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [ebp + 4]
mov dword [ecx + 4], edx
mov edx, dword [ebp + 8]
mov dword [ecx + 8], edx
mov edx, dword [eax]
sub esp, 0xc
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
mov eax, dword [esp + 0xa4]
push ebx
push eax
push eax
call fcn.00424f60
mov byte [esp + 0x84], 2
mov eax, dword [esp + 0x60]
xor esi, esi
cmp eax, esi
je 0x40f477
push eax
call fcn.004b6eae
add esp, 4
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
cmp edx, dword [ecx + 8]
mov dword [esp + 0x60], esi
mov dword [esp + 0x64], esi
mov dword [esp + 0x68], esi
jb 0x40f495
call fcn.004b7b58
add dword [esp + 0x18], 4
mov eax, dword [esp + 0x54]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
mov edi, dword [esp + 0x8c]
jmp 0x40f370
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x40]
cmp eax, ecx
mov dword [esp + 0x94], ecx
jbe 0x40f4d2
call fcn.004b7b58
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x40]
cmp eax, ecx
lea ebp, [esp + 0x3c]
mov dword [esp + 0x14], eax
jbe 0x40f4e3
call fcn.004b7b58
mov esi, dword [edi + 4]
cmp esi, dword [edi + 8]
lea ebx, [esp + 0x3c]
jbe 0x40f4f4
call fcn.004b7b58
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x14]
push eax
push ebp
push ecx
push ebx
push esi
push edi
mov esi, edi
call fcn.00424fb0
mov ebx, dword [edi + 8]
cmp dword [edi + 4], ebx
jbe 0x40f519
call fcn.004b7b58
mov eax, dword [edi + 4]
cmp eax, dword [edi + 8]
mov dword [esp + 0x94], eax
jbe 0x40f52d
call fcn.004b7b58
mov esi, dword [esp + 0x90]
mov ebp, dword [esi + 0x14]
add esi, 0x10
cmp ebp, dword [esi + 8]
jbe 0x40f544
call fcn.004b7b58
mov edx, dword [esp + 0x94]
push ebx
push edi
push edx
push edi
push ebp
push esi
call fcn.00424fb0
mov eax, dword [esp + 0x40]
xor esi, esi
cmp eax, esi
je 0x40f569
push eax
call fcn.004b6eae
add esp, 4
mov eax, dword [esp + 0x50]
cmp eax, esi
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
je 0x40f586
push eax
call fcn.004b6eae
add esp, 4
mov eax, edi
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x74
ret