Function at 0x403c00
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x484
push ebx
push ebp
push esi
xor ebx, ebx
push edi
mov ebp, ecx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x20], ebx
call fcn.00406270
mov edx, eax
mov eax, dword [esp + 0x498]
xor esi, esi
lea edi, [ebp + 8]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x18], ebx
mov dword [esp + 0x24], esi
mov dword [esp + 0x14], edi
lea ecx, [ecx]
cmp eax, ebx
mov dword [esp + 0x3c], ebx
jle 0x404580
lea esp, [esp]
cmp dword [edi], ebx
je 0x40456b
cmp esi, ebx
jbe 0x403c8b
lea eax, [esi - 1]
cmp eax, ebx
jl 0x403c89
mov edx, dword [edi + 0x1c8]
lea ecx, [edi - 0x54]
lea esp, [esp]
cmp edx, dword [ecx]
je 0x403c81
dec eax
sub ecx, 0x21c
cmp eax, ebx
jge 0x403c70
jmp 0x403c89
mov dword [esp + 0x28], 1
cmp esi, ebx
je 0x403d74
cmp dword [esp + 0x28], ebx
je 0x403d74
cmp esi, 9
mov dword [esp + 0x28], ebx
jae 0x403cac
mov eax, dword [edi]
mov dword [ebp + 0x1304], eax
mov ecx, dword [ebp + 0x1308]
mov edx, dword [esp + 0x24]
lea esi, [edi + 8]
push esi
lea eax, [edi + 0x28]
push eax
push ecx
push edx
lea eax, [esp + 0x3a0]
push str.Secondary_CRTC_dwLoop___d_m_ulRequestedTests___d____s___s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea ecx, [esp + 0x390]
lea ebx, [ebp + 0x18bc]
push ecx
mov ecx, ebx
call fcn.00404b70
push str.Call_Post_Bus_Test
mov ecx, ebx
call fcn.00404b70
mov edx, dword [esp + 0x10]
push edx
mov ecx, ebp
call fcn.00402cd0
mov edx, dword [esp + 0x20]
or edx, eax
push str.After_Calling_Post_Bus_Test
mov ecx, ebx
mov dword [esp + 0x24], edx
call fcn.00404b70
mov eax, dword [esp + 0x1c]
cmp eax, 3
je 0x403d67
cmp eax, 4
je 0x403d67
mov ecx, dword [ebp + 0x1304]
lea eax, [esp + 0x18]
push eax
push str.AtiSmartModeSwitch
push ecx
call fcn.00403850
add esp, 0xc
test eax, eax
je 0x403d48
mov eax, dword [esp + 0x18]
mov edx, dword [ebp + 0x1304]
inc eax
push eax
push str.AtiSmartModeSwitch
push edx
mov dword [esp + 0x24], eax
call fcn.00403720
add esp, 0xc
jmp 0x404548
push esi
mov ecx, ebp
call fcn.004030d0
jmp 0x404548
lea eax, [edi + 8]
push eax
mov eax, dword [ebp + 0x1308]
lea ecx, [edi + 0x28]
push ecx
push eax
push esi
lea ecx, [esp + 0x29c]
push str.dwLoop___d_m_ulRequestedTests___d____s___s
push ecx
mov dword [esp + 0x28], 0
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
lea edx, [esp + 0x28c]
lea ebx, [ebp + 0x18bc]
push edx
mov ecx, ebx
call fcn.00404b70
mov eax, dword [ebp + 0x1308]
test eax, eax
je 0x40454c
cmp esi, 9
jae 0x403dd6
mov eax, dword [edi]
test eax, eax
je 0x403dd6
mov dword [ebp + 0x1304], eax
mov ecx, ebp
xor esi, esi
call fcn.00403640
test eax, eax
jne 0x403e4b
jmp 0x403df0
mov edx, dword [edi + 0x214]
mov ecx, dword [edi + 0x218]
shr edx, 1
shr ecx, 1
inc esi
push esi
push ecx
mov eax, edx
push eax
lea eax, [esp + 0x298]
push str.Lower_resolution_for_allocating_surface_:_ulSurfWidth___d_ulSurfHeight___d_iFailCount__d
push eax
mov dword [edi + 0x214], edx
mov dword [edi + 0x218], ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [esp + 0x28c]
push ecx
mov ecx, ebx
call fcn.00404b70
cmp esi, 5
je 0x404637
mov ecx, ebp
call fcn.00403640
test eax, eax
je 0x403df0
mov edx, dword [ebp + 0x1304]
add edi, 8
push edi
push edx
call fcn.00403510
mov eax, dword [esp + 0x24]
add esp, 8
cmp eax, 0x11
je 0x403e6c
cmp eax, 0x12
jne 0x403e82
mov eax, dword [ebp + 0x1304]
push 0
push str.AtiSmartModeSwitch
push eax
call fcn.00403720
add esp, 0xc
test byte [ebp + 0x1308], 2
je 0x403f67
mov eax, dword [esp + 0x14]
lea ecx, [eax + 8]
push ecx
add eax, 0x28
push eax
push str.AGP_Read_Test
lea ecx, [esp + 0x94]
push str._s____s___s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea edx, [esp + 0x88]
push edx
mov ecx, ebx
call fcn.00404b70
mov eax, dword [ebp + 0x1304]
push 2
push eax
mov ecx, ebp
call fcn.00403940
mov edx, dword [ebp + 0x1314]
sub esp, 0x90
mov edi, esp
sub esp, 0x90
lea esi, [ebp + 0x16e4]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
mov edi, esp
push 2
lea esi, [ebp + 0x15c4]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x1318]
push ecx
mov ecx, dword [ebp + 0x1304]
push edx
lea eax, [ebp + 0x1774]
push eax
push ecx
mov ecx, ebp
call fcn.00406900
test al, 0x40
mov dword [esp + 0x10], eax
je 0x403f38
push str.FAILURE__NO_SURFACE
mov ecx, ebx
call fcn.00404b70
test byte [esp + 0x10], 4
mov ecx, ebx
je 0x403f4d
push str.FAIL
call fcn.00404b70
jmp 0x403f67
push str.PASS
call fcn.00404b70
mov edx, dword [ebp + 0x1304]
push 2
push edx
mov ecx, ebp
call fcn.004039c0
test byte [ebp + 0x1308], 8
je 0x4040b8
mov eax, dword [esp + 0x14]
lea ecx, [eax + 8]
push ecx
add eax, 0x28
push eax
push str.AGP_Write_Test
lea eax, [esp + 0x94]
push str._s___s___s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [esp + 0x88]
push ecx
mov ecx, ebx
call fcn.00404b70
mov edx, dword [ebp + 0x1304]
push 8
push edx
mov ecx, ebp
call fcn.00403940
sub esp, 0x90
mov edi, esp
sub esp, 0x90
lea esi, [ebp + 0x15c4]
lea eax, [ebp + 0x16e4]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
mov edi, esp
push 8
mov esi, eax
mov eax, dword [ebp + 0x1318]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x1314]
push eax
push ecx
lea edx, [ebp + 0x1774]
push edx
mov edx, dword [ebp + 0x1304]
push edx
mov ecx, ebp
call fcn.00406900
mov edx, dword [esp + 0x10]
mov ecx, dword [ebp + 0x1a5c]
or edx, eax
test ecx, ecx
mov dword [esp + 0x10], edx
je 0x404076
test eax, eax
jne 0x404076
mov eax, dword [ebp + 0x1318]
mov edx, dword [ebp + 0x1304]
sub esp, 0x90
mov edi, esp
sub esp, 0x90
mov ecx, 0x24
lea esi, [ebp + 0x15c4]
rep movsd dword es:[edi], dword [esi]
mov edi, esp
push 8
push eax
mov ecx, 0x24
lea esi, [ebp + 0x16e4]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x1314]
push ecx
lea eax, [ebp + 0x1774]
push eax
push edx
mov ecx, ebp
call fcn.00406d50
or dword [esp + 0x10], eax
test byte [esp + 0x10], 0x40
je 0x404089
push str.FAILURE__NO_SURFACE
mov ecx, ebx
call fcn.00404b70
test byte [esp + 0x10], 8
mov ecx, ebx
je 0x40409e
push str.FAIL
call fcn.00404b70
jmp 0x4040b8
push str.PASS
call fcn.00404b70
mov eax, dword [ebp + 0x1304]
push 8
push eax
mov ecx, ebp
call fcn.004039c0
test byte [ebp + 0x1308], 1
je 0x4041a4
mov eax, dword [esp + 0x14]
lea ecx, [eax + 8]
push ecx
add eax, 0x28
push eax
push str.PCI_Read_Test
lea ecx, [esp + 0x94]
push str._s____s___s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea edx, [esp + 0x88]
push edx
mov ecx, ebx
call fcn.00404b70
mov eax, dword [ebp + 0x1304]
push 1
push eax
mov ecx, ebp
call fcn.00403940
mov edx, dword [ebp + 0x1314]
sub esp, 0x90
mov edi, esp
sub esp, 0x90
lea esi, [ebp + 0x16e4]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
mov edi, esp
push 1
lea esi, [ebp + 0x1654]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x1318]
push ecx
mov ecx, dword [ebp + 0x1304]
push edx
lea eax, [ebp + 0x1774]
push eax
push ecx
mov ecx, ebp
call fcn.00406900
mov ecx, dword [esp + 0x10]
or ecx, eax
test cl, 0x40
mov dword [esp + 0x10], ecx
je 0x404175
push str.FAILURE__NO_SURFACE
mov ecx, ebx
call fcn.00404b70
test byte [esp + 0x10], 1
mov ecx, ebx
je 0x40418a
push str.FAIL
call fcn.00404b70
jmp 0x4041a4
push str.PASS
call fcn.00404b70
mov edx, dword [ebp + 0x1304]
push 1
push edx
mov ecx, ebp
call fcn.004039c0
test byte [ebp + 0x1308], 4
je 0x404290
mov eax, dword [esp + 0x14]
lea ecx, [eax + 8]
push ecx
add eax, 0x28
push eax
push str.PCI_Write_Test
lea eax, [esp + 0x94]
push str._s___s___s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [esp + 0x88]
push ecx
mov ecx, ebx
call fcn.00404b70
mov edx, dword [ebp + 0x1304]
push 4
push edx
mov ecx, ebp
call fcn.00403940
mov eax, dword [ebp + 0x1318]
sub esp, 0x90
mov edi, esp
sub esp, 0x90
lea esi, [ebp + 0x1654]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
mov edi, esp
push 4
push eax
mov eax, dword [ebp + 0x1304]
lea esi, [ebp + 0x16e4]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x1314]
push ecx
lea edx, [ebp + 0x1774]
push edx
push eax
mov ecx, ebp
call fcn.00406900
mov ecx, dword [esp + 0x10]
or ecx, eax
test cl, 0x40
mov dword [esp + 0x10], ecx
je 0x404261
push str.FAILURE__NO_SURFACE
mov ecx, ebx
call fcn.00404b70
test byte [esp + 0x10], 2
mov ecx, ebx
je 0x404276
push str.FAIL
call fcn.00404b70
jmp 0x404290
push str.PASS
call fcn.00404b70
mov ecx, dword [ebp + 0x1304]
push 4
push ecx
mov ecx, ebp
call fcn.004039c0
test byte [ebp + 0x1308], 0x10
je 0x4042a9
mov edx, dword [ebp + 0x1304]
push 0x10
push edx
mov ecx, ebp
call fcn.004039c0
test byte [ebp + 0x1308], 0x20
je 0x404391
mov eax, dword [esp + 0x14]
lea ecx, [eax + 8]
push ecx
add eax, 0x28
push eax
lea eax, [esp + 0x90]
push str.RV350_Tune_Northbridge_Test___s___s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [esp + 0x88]
push ecx
mov ecx, ebx
call fcn.00404b70
mov edx, dword [ebp + 0x1304]
push 0x20
push edx
mov ecx, ebp
call fcn.00403940
sub esp, 0x90
mov edi, esp
sub esp, 0x90
lea esi, [ebp + 0x16e4]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp + 0x15c4]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x1304]
lea eax, [ebp + 0x1774]
push eax
push ecx
mov ecx, ebp
call fcn.00408490
test al, 0x40
mov dword [esp + 0x10], eax
je 0x404358
mov ecx, eax
or ecx, 0x80
mov dword [esp + 0x10], ecx
push str.FAILURE__NO_SURFACE
mov ecx, ebx
call fcn.00404b70
jmp 0x404391
test byte [esp + 0x10], 0x20
je 0x404375
or dword [esp + 0x10], 0x80
push str.idle_time_out
mov ecx, ebx
call fcn.00404b70
jmp 0x404391
push str.PASS
mov ecx, ebx
call fcn.00404b70
mov edx, dword [ebp + 0x1304]
push 0x20
push edx
mov ecx, ebp
call fcn.004039c0
test byte [ebp + 0x1308], 0x40
je 0x404479
mov eax, dword [esp + 0x14]
lea ecx, [eax + 8]
push ecx
add eax, 0x28
push eax
lea eax, [esp + 0x90]
push str.RV350_Tune_Asic_AGP_Delay_Test___s___s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ecx, [esp + 0x88]
push ecx
mov ecx, ebx
call fcn.00404b70
mov edx, dword [ebp + 0x1304]
push 0x40
push edx
mov ecx, ebp
call fcn.00403940
sub esp, 0x90
mov edi, esp
sub esp, 0x90
lea esi, [ebp + 0x16e4]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp + 0x15c4]
mov ecx, 0x24
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x1304]
lea eax, [ebp + 0x1774]
push eax
push ecx
mov ecx, ebp
call fcn.00408580
test al, 0x40
mov dword [esp + 0x10], eax
je 0x404440
mov ecx, eax
or ecx, 0x100
mov dword [esp + 0x10], ecx
push str.FAILURE__NO_SURFACE
mov ecx, ebx
call fcn.00404b70
jmp 0x404479
test byte [esp + 0x10], 0x20
je 0x40445d
or dword [esp + 0x10], 0x100
push str.idle_time_out
mov ecx, ebx
call fcn.00404b70
jmp 0x404479
push str.PASS
mov ecx, ebx
call fcn.00404b70
mov edx, dword [ebp + 0x1304]
push 0x40
push edx
mov ecx, ebp
call fcn.004039c0
mov eax, dword [ebp + 0x15c0]
test eax, eax
je 0x4044a3
mov ecx, ebp
call fcn.00403050
lea eax, [ebp + 0x1320]
push eax
call fcn.00407d30
add esp, 4
mov dword [ebp + 0x15c0], 0
push str.Call_Post_Bus_Test
mov ecx, ebx
call fcn.00404b70
mov ecx, dword [esp + 0x10]
push ecx
mov ecx, ebp
call fcn.00402cd0
mov edx, dword [esp + 0x20]
or edx, eax
push str.After_Calling_Post_Bus_Test
mov ecx, ebx
mov dword [esp + 0x44], eax
mov dword [esp + 0x24], edx
call fcn.00404b70
test byte [esp + 0x40], 2
je 0x404536
mov eax, dword [esp + 0x1c]
cmp eax, 3
je 0x404527
cmp eax, 4
je 0x404527
mov eax, dword [ebp + 0x1304]
lea edx, [esp + 0x18]
push edx
push str.AtiSmartModeSwitch
push eax
call fcn.00403850
add esp, 0xc
test eax, eax
je 0x40450b
mov eax, dword [esp + 0x18]
mov ecx, dword [ebp + 0x1304]
inc eax
push eax
push str.AtiSmartModeSwitch
push ecx
mov dword [esp + 0x24], eax
call fcn.00403720
add esp, 0xc
jmp 0x404536
mov eax, dword [esp + 0x14]
add eax, 8
push eax
mov ecx, ebp
call fcn.004030d0
mov edx, dword [ebp + 0x1304]
push edx
mov ecx, ebp
call fcn.00402c10
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x24]
mov eax, dword [ebp + 0x1304]
push 0
push str.SGCountDown
push eax
call fcn.00403720
mov eax, dword [esp + 0x4a4]
add esp, 0xc
xor ebx, ebx
mov ecx, dword [esp + 0x3c]
inc ecx
cmp ecx, eax
mov dword [esp + 0x3c], ecx
jl 0x403c50
mov edx, dword [esp + 0x1c]
inc esi
add edi, 0x21c
cmp esi, 9
mov dword [esp + 0x24], esi
mov dword [esp + 0x14], edi
jb 0x403c40
mov ecx, dword [esp + 0x20]
mov eax, ecx
and eax, 2
je 0x404676
test cl, 1
je 0x4046ee
cmp edx, 0x11
je 0x4045ba
cmp edx, 0x12
jne 0x4045c4
mov dword [ebp + 0x19d4], 1
xor edx, edx
mov dword [esp + 0x2c], edx
mov dword [esp + 0x30], edx
xor eax, eax
mov ecx, 0x11
lea edi, [esp + 0x44]
rep stosd dword es:[edi], eax
mov dword [esp + 0x34], edx
add ebp, 0x18bc
push str.BEGIN___Launch_message_box
mov ecx, ebp
mov dword [esp + 0x3c], edx
mov dword [esp + 0x48], 0x44
call fcn.00404b70
push 0xa
push str.atiprbxx.exe
lea eax, [esp + 0x194]
push str._s__d
push eax
call fcn.00409b56
add esp, 0x10
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x48]
push edx
push ebx
push ebx
push 0x20
push ebx
push ebx
push ebx
lea eax, [esp + 0x1ac]
push eax
jmp 0x40478d
mov ecx, dword [ebp + 0x1304]
push 0
push str.SGCountDown
push ecx
mov dword [ebp + 0x19d4], 0
call fcn.00403720
add esp, 0xc
push str.FAIL_TO_INITIALIZE
lea ecx, [ebp + 0x18bc]
call fcn.00404b70
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x484
ret 4
test cl, 1
je 0x4046ee
xor ecx, ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], ecx
xor eax, eax
mov ecx, 0x11
lea edi, [esp + 0x44]
rep stosd dword es:[edi], eax
add ebp, 0x18bc
push str.BEGIN___Launch_message_box
mov ecx, ebp
mov dword [esp + 0x48], 0x44
call fcn.00404b70
push 0xa
push str.atiprbxx.exe
lea edx, [esp + 0x194]
push str._s__d
push edx
call fcn.00409b56
add esp, 0x10
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0x48]
push ecx
push ebx
push ebx
push 0x20
push ebx
push ebx
push ebx
lea edx, [esp + 0x1ac]
push edx
jmp 0x40478d
cmp eax, ebx
je 0x40471c
cmp edx, 0x11
je 0x404700
cmp edx, 0x12
jne 0x4047a0
mov dword [ebp + 0x19d4], 1
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x484
ret 4
test cl, 4
je 0x4047a0
xor eax, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov ecx, 0x11
lea edi, [esp + 0x44]
rep stosd dword es:[edi], eax
add ebp, 0x18bc
push str.BEGIN___Launch_message_box
mov ecx, ebp
mov dword [esp + 0x3c], eax
mov dword [esp + 0x48], 0x44
call fcn.00404b70
push 0xb
push str.atiprbxx.exe
lea ecx, [esp + 0x194]
push str._s__d
push ecx
call fcn.00409b56
add esp, 0x10
lea edx, [esp + 0x2c]
push edx
lea eax, [esp + 0x48]
push eax
push ebx
push ebx
push 0x20
push ebx
push ebx
push ebx
lea ecx, [esp + 0x1ac]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ecx, ebp
push str.END___Launch_message_box
call fcn.00404b70
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x484
ret 4