Function at 0x40c9f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb8
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x14], eax
mov esi, dword [ebp + 0x14]
mov edi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0xc]
call sub.api_ms_win_crt_runtime_l1_1_0.dll__errno
mov eax, dword [eax]
mov dword [esp + 0x7c], eax
mov eax, 0x6000
and eax, dword [ebp + 8]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0xffffffff
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x34], 0xfffffffd
mov word [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov word [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], 0xffffffff
mov dword [esp + 0x74], eax
add eax, 0x200
mov dword [esp + 0x78], eax
jmp 0x40ca93
movsx eax, al
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
inc dword [esp + 0x44]
inc esi
movzx eax, byte [esi - 1]
test eax, eax
je 0x40d5c4
cmp eax, 0x25
je 0x40cad4
mov edx, dword [esp + 0x28]
test edx, 0x4000
jne 0x40cabb
mov ecx, dword [esp + 0x48]
cmp ecx, dword [esp + 0x44]
jle 0x40cace
mov ecx, dword [esp + 0x24]
test edx, 0x2000
jne 0x40ca80
mov edx, dword [esp + 0x44]
mov byte [ecx + edx], al
inc dword [esp + 0x44]
jmp 0x40ca93
mov eax, dword [esp + 0x74]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], 0xffffffff
mov dword [esp + 0x2c], 0xffffffff
movzx ecx, byte [esi]
test cl, cl
je 0x40cdb1
mov dword [esp + 0x1c], 0
lea eax, [esp + 0x2c]
mov dword [esp + 0x20], eax
mov edi, esi
xor edx, edx
nop dword [eax + eax]
lea eax, [edi + 1]
mov dword [esp + 0x10], eax
movsx ecx, cl
lea ebx, [ecx - 0x20]
cmp ebx, 0x5a
ja case.0x40cb2b.33
mov eax, 4
jmp dword [ebx*4 + 0x4aa3d4]
mov dword [esp + 0x1c], 0
jmp 0x40cd50
test edx, edx
jne 0x40cc21
or byte [esp + 0x28], 0x40
jmp 0x40cd41
test edx, edx
jne 0x40cc21
or byte [esp + 0x29], 8
jmp 0x40cd41
test edx, edx
jne 0x40cc21
or byte [esp + 0x29], 0x10
mov dword [esp + 0x60], 0
call sub.api_ms_win_crt_locale_l1_1_0.dll_localeconv
mov eax, dword [eax + 4]
lea ecx, [esp + 0x60]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], eax
lea eax, [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 8], 0x10
call sub.api_ms_win_crt_convert_l1_1_0.dll_mbrtowc
test eax, eax
mov ebx, dword [esp + 0x10]
jle 0x40cbb2
movzx ecx, word [esp + 0x18]
mov word [esp + 0x40], cx
mov dword [esp + 0x3c], eax
xor eax, eax
jmp 0x40cd54
mov edi, dword [esp + 0x20]
test edi, edi
je 0x40cca5
test edx, 0xfffffffd
mov ebx, dword [esp + 0x10]
jne 0x40cd92
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
add ecx, 4
mov dword [edi], eax
test eax, eax
mov dword [esp + 0x14], ecx
jns 0x40cbfc
test edx, edx
je 0x40cd9c
mov dword [esp + 0x30], 0xffffffff
mov eax, edx
mov dword [esp + 0x20], 0
jmp 0x40cd54
test edx, edx
jne 0x40cc21
or byte [esp + 0x29], 1
jmp 0x40cd41
test edx, edx
je 0x40cd35
mov eax, edx
jmp 0x40cd50
cmp edx, 1
ja 0x40cd50
mov dword [esp + 0x30], 0
mov eax, 2
lea ecx, [esp + 0x30]
mov dword [esp + 0x20], ecx
jmp 0x40cd50
test edx, edx
je 0x40cd3c
cmp edx, 3
ja 0x40ce2b
mov eax, ecx
add al, 0xd0
cmp al, 9
ja 0x40ce2b
cmp edx, 2
mov eax, edx
mov edi, 3
cmove eax, edi
test edx, edx
mov edx, 1
cmove eax, edx
mov edi, dword [esp + 0x20]
test edi, edi
je 0x40cca5
mov edx, dword [edi]
test edx, edx
mov ebx, dword [esp + 0x10]
js 0x40cd65
lea edx, [edx + edx*4]
lea ecx, [ecx + edx*2]
add ecx, 0xffffffd0
mov dword [edi], ecx
jmp 0x40cd54
mov dword [esp + 0x20], 0
jmp 0x40cd50
mov ebx, dword [esp + 0x10]
movzx ecx, byte [ebx]
cmp ecx, 0x33
je 0x40cd6c
cmp ecx, 0x36
jne 0x40cd88
lea eax, [edi + 3]
xor ecx, ecx
cmp byte [edi + 2], 0x34
sete cl
lea ecx, [ecx + ecx*2]
mov dword [esp + 0x1c], ecx
cmove ebx, eax
mov eax, 4
jmp 0x40cd54
or byte [esp + 0x28], 4
jmp 0x40cd50
lea ecx, [edi + 2]
xor edx, edx
cmp byte [edi + 1], 0x68
sete dl
lea edx, [edx*4 + 1]
mov dword [esp + 0x1c], edx
mov ebx, dword [esp + 0x10]
cmove ebx, ecx
jmp 0x40cd54
mov dword [esp + 0x1c], 3
jmp 0x40cd50
lea ecx, [edi + 2]
xor edx, edx
cmp byte [edi + 1], 0x6c
sete dl
mov ebx, dword [esp + 0x10]
cmove ebx, ecx
or edx, 2
mov dword [esp + 0x1c], edx
jmp 0x40cd54
or byte [esp + 0x29], 4
jmp 0x40cd41
or byte [esp + 0x29], 2
xor eax, eax
nop word cs:[eax + eax]
mov ebx, dword [esp + 0x10]
movzx ecx, byte [ebx]
mov edi, ebx
mov edx, eax
test cl, cl
jne 0x40cb10
jmp 0x40cdb3
add ecx, 0xffffffd0
mov dword [edi], ecx
jmp 0x40cd54
lea eax, [edi + 3]
xor ecx, ecx
cmp byte [edi + 2], 0x32
sete cl
cmove ebx, eax
add ecx, ecx
mov dword [esp + 0x1c], ecx
mov eax, 4
jmp 0x40cd54
mov dword [esp + 0x1c], 0
jmp 0x40cd57
mov dword [esp + 0x20], 0
jmp 0x40cd54
or byte [esp + 0x29], 4
neg dword [esp + 0x2c]
xor eax, eax
mov dword [esp + 0x20], 0
jmp 0x40cd54
mov ebx, esi
mov esi, ebx
jmp 0x40ca93
and byte [esp + 0x29], 0xfe
mov edi, dword [esp + 0x1c]
cmp edi, 2
je 0x40ce60
cmp edi, 3
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
jne 0x40ce7e
movsd xmm0, qword [edx]
add edx, 8
movsd qword [esp + 0x50], xmm0
jmp 0x40d3d8
or byte [esp + 0x28], 0x80
mov edi, dword [esp + 0x1c]
cmp edi, 2
je 0x40d1f1
cmp edi, 3
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
jne 0x40d212
mov ecx, dword [edx]
mov eax, dword [edx + 4]
add edx, 8
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0x14], edx
jmp 0x40d4ab
mov eax, dword [esp + 0x28]
test eax, 0x4000
jne 0x40ce40
mov ecx, dword [esp + 0x48]
cmp ecx, dword [esp + 0x44]
jle 0x40ce57
mov ecx, dword [esp + 0x24]
test eax, 0x2000
jne 0x40d242
mov eax, dword [esp + 0x44]
mov byte [ecx + eax], 0x25
inc dword [esp + 0x44]
jmp 0x40ca93
mov edx, dword [esp + 0x14]
mov eax, dword [edx]
add edx, 4
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
mov esi, dword [esp + 0x10]
jmp 0x40d3d8
mov eax, dword [edx]
add edx, 4
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
cmp edi, 5
je 0x40d3c9
cmp edi, 1
jne 0x40d3d8
movzx eax, ax
jmp 0x40d3cc
mov eax, dword [esp + 0x28]
test eax, 0x4000
mov esi, dword [esp + 0x10]
jne 0x40cec2
mov ecx, dword [esp + 0x48]
cmp ecx, dword [esp + 0x44]
jle 0x40ced9
mov ecx, dword [esp + 0x24]
test eax, 0x2000
jne 0x40d3fc
mov eax, dword [esp + 0x44]
mov byte [ecx + eax], 0x25
inc dword [esp + 0x44]
jmp 0x40ca93
mov eax, dword [esp + 0x28]
jmp 0x40cf24
mov dword [esp + 0x30], 0xffffffff
jmp 0x40cfac
mov eax, dword [esp + 0x28]
jmp 0x40cfdd
mov eax, dword [esp + 0x28]
jmp 0x40d002
mov eax, dword [esp + 0x28]
jmp 0x40d027
mov eax, dword [esp + 0x30]
jmp 0x40d111
mov eax, dword [esp + 0x28]
or eax, 0x20
mov dword [esp + 0x28], eax
test al, 4
mov ebx, dword [esp + 0x14]
jne 0x40d13e
movsd xmm0, qword [ebx]
add ebx, 8
movsd qword [esp + 0xa8], xmm0
fld qword [esp + 0xa8]
fld st(0)
fstp xword [esp + 0x80]
fxam
wait
fnstsw ax
fstp st(0)
and eax, 0x4500
cmp eax, 0x100
mov dword [esp + 0x14], ebx
jne 0x40d278
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x28]
test eax, 0x100
jne 0x40d3aa
test al, 0x40
je 0x40d19a
mov byte [esp + 0x18], 0x20
jmp 0x40d3af
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x1c]
and eax, 0xfffffffe
cmp eax, 2
jne 0x40d2f2
mov esi, dword [esp + 0x14]
movzx eax, word [esi]
mov word [esp + 0x60], ax
lea eax, [esp + 0x24]
mov dword [esp], eax
lea ecx, [esp + 0x60]
mov edx, 1
call fcn.0040d5d0
jmp 0x40d312
mov eax, dword [esp + 0x28]
or eax, 0x20
mov dword [esp + 0x28], eax
test al, 4
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
jne 0x40d1a3
fld qword [eax]
add eax, 8
jmp 0x40d1a8
mov eax, dword [esp + 0x28]
or eax, 0x20
mov dword [esp + 0x28], eax
test al, 4
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
jne 0x40d1bd
fld qword [eax]
add eax, 8
jmp 0x40d1c2
mov eax, dword [esp + 0x28]
or eax, 0x20
mov dword [esp + 0x28], eax
test al, 4
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
jne 0x40d1d7
fld qword [eax]
add eax, 8
jmp 0x40d1dc
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call sub.api_ms_win_crt_runtime_l1_1_0.dll_strerror
test eax, eax
mov esi, str._null_
cmovne esi, eax
mov eax, dword [esp + 0x30]
test eax, eax
js 0x40d415
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.004117c0
jmp 0x40d41d
mov eax, dword [esp + 0x1c]
dec eax
cmp eax, 4
ja case.0x40d07e.2
jmp dword [eax*4 + 0x4aa540]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x14]
mov ecx, dword [edx]
mov dword [ecx], eax
jmp 0x40d4fe
test edx, edx
jne 0x40d0b4
mov eax, dword [esp + 0x74]
cmp dword [esp + 0x28], eax
jne 0x40d0b4
mov eax, dword [esp + 0x78]
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], 8
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
add ecx, 4
mov dword [esp + 0x14], ecx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x58], 0
movups xmm0, xmmword [esp + 0x50]
movups xmmword [esp], xmm0
lea edx, [esp + 0x24]
mov ecx, pe_nt_image_headers32
call fcn.0040dbf0
mov esi, dword [esp + 0x10]
jmp 0x40ca93
mov ecx, dword [esp + 0x1c]
and ecx, 0xfffffffe
mov eax, dword [esp + 0x30]
cmp ecx, 2
jne 0x40d322
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x10]
mov ecx, dword [edi]
test ecx, ecx
mov esi, 0x4aa554
cmovne esi, ecx
test eax, eax
js 0x40d25b
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00411800
jmp 0x40d263
fld xword [ebx]
add ebx, 0xc
fld st(0)
fstp xword [esp + 0x90]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x94]
fld st(0)
fstp xword [esp + 0x60]
fxam
wait
fnstsw ax
and eax, 0x4500
cmp eax, 0x100
mov dword [esp + 0x14], ebx
jne 0x40d34f
fstp st(0)
mov dword [esp + 0x30], 0xffffffff
mov eax, dword [esp + 0x28]
test eax, 0x100
jne 0x40d3aa
test al, 0x40
jne 0x40cf8a
lea edx, [esp + 0x18]
jmp 0x40d3b3
fld xword [eax]
add eax, 0xc
mov dword [esp + 0x14], eax
fstp xword [esp]
lea ecx, [esp + 0x24]
call fcn.0040df50
jmp 0x40ca93
fld xword [eax]
add eax, 0xc
mov dword [esp + 0x14], eax
fstp xword [esp]
lea ecx, [esp + 0x24]
call fcn.0040e0f0
jmp 0x40ca93
fld xword [eax]
add eax, 0xc
mov dword [esp + 0x14], eax
fstp xword [esp]
lea ecx, [esp + 0x24]
call fcn.0040e2d0
jmp 0x40ca93
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx]
add ecx, 4
mov dword [esp + 0x14], ecx
mov dword [esp + 0x50], eax
sar eax, 0x1f
mov dword [esp + 0x54], eax
mov esi, dword [esp + 0x10]
jmp 0x40d4ab
mov ecx, dword [edx]
add edx, 4
mov eax, ecx
sar eax, 0x1f
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], eax
cmp edi, 5
mov dword [esp + 0x14], edx
je 0x40d49d
cmp edi, 1
jne 0x40d4ab
movsx eax, cx
jmp 0x40d4a0
mov dword [esp + 4], ecx
mov dword [esp], 0x25
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
inc dword [esp + 0x44]
jmp 0x40ca93
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
mov edx, eax
lea eax, [esp + 0x24]
mov dword [esp], eax
mov ecx, esi
call fcn.0040d5d0
jmp 0x40d526
mov edx, dword [esp + 0x80]
mov esi, dword [esp + 0x84]
movsx ecx, word [esp + 0x88]
mov edi, ecx
sar edi, 0x1f
jns 0x40d29a
or byte [esp + 0x28], 0x80
movsd qword [esp + 0xa0], xmm0
fld qword [esp + 0xa0]
fxam
wait
fnstsw ax
fstp st(0)
and eax, 0x4500
cmp eax, 0x500
jne 0x40d438
mov dword [esp + 0x30], 0xffffffff
test edi, edi
js 0x40d534
mov eax, dword [esp + 0x28]
test eax, 0x100
jne 0x40d53f
test al, 0x40
je 0x40d3a1
mov byte [esp + 0x18], 0x20
jmp 0x40d544
mov esi, dword [esp + 0x14]
movzx eax, byte [esi]
mov byte [esp + 0x50], al
lea eax, [esp + 0x24]
mov dword [esp], eax
lea ecx, [esp + 0x50]
mov edx, 1
call fcn.0040d750
add esi, 4
mov dword [esp + 0x14], esi
mov esi, dword [esp + 0x10]
jmp 0x40ca93
mov edi, dword [esp + 0x14]
mov ecx, dword [edi]
test ecx, ecx
mov esi, str._null_
cmovne esi, ecx
test eax, eax
mov ebx, dword [esp + 0x10]
js 0x40d50e
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.004117c0
jmp 0x40d516
movsx esi, word [esp + 0x98]
mov edi, esi
sar edi, 0x1f
jns 0x40d363
or byte [esp + 0x28], 0x80
fxam
wait
fnstsw ax
fstp st(0)
and eax, 0x4500
cmp eax, 0x500
jne 0x40d480
mov dword [esp + 0x30], 0xffffffff
test edi, edi
js 0x40d534
mov eax, dword [esp + 0x28]
test eax, 0x100
jne 0x40d53f
test al, 0x40
jne 0x40d2e8
lea edx, [esp + 0x18]
jmp 0x40d548
mov byte [esp + 0x18], 0x2b
lea edx, [esp + 0x19]
and al, 0x20
mov ecx, eax
or cl, 0x4e
mov byte [edx], cl
or al, 0x41
mov byte [edx + 1], al
mov byte [edx + 2], cl
jmp 0x40d55e
movzx eax, al
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
mov dword [esp + 0x14], edx
cmp cl, 0x75
je 0x40d4b6
movups xmm0, xmmword [esp + 0x50]
movups xmmword [esp], xmm0
lea edx, [esp + 0x24]
call fcn.0040dbf0
jmp 0x40ca93
mov dword [esp + 4], ecx
mov dword [esp], 0x25
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
inc dword [esp + 0x44]
jmp 0x40ca93
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov edi, dword [esp + 0x10]
lea ecx, [esp + 0x24]
mov dword [esp], ecx
mov ecx, esi
mov edx, eax
call fcn.0040d750
mov esi, edi
jmp 0x40ca93
and ecx, 0x7fff
mov eax, ecx
dec eax
movzx eax, ax
cmp eax, 0x3bff
ja 0x40d467
movzx eax, cx
mov ecx, 0x3c01
sub ecx, eax
shrd edx, esi, cl
shr esi, cl
xor edi, edi
test cl, 0x20
cmovne edx, esi
cmovne esi, edi
add ecx, eax
mov word [esp + 0x68], cx
test cx, cx
je 0x40d57c
add ecx, 0xffffc004
jmp 0x40d586
and si, 0x7fff
mov word [esp + 0x68], si
je 0x40d59c
movzx eax, si
add eax, 0xffffc001
jmp 0x40d5a4
movsx eax, cl
mov dword [esp + 0x50], eax
sar eax, 0x1f
mov dword [esp + 0x54], eax
sar eax, 0x1f
mov dword [esp + 0x5c], eax
mov dword [esp + 0x58], eax
movups xmm0, xmmword [esp + 0x50]
movups xmmword [esp], xmm0
lea ecx, [esp + 0x24]
call fcn.0040d870
jmp 0x40ca93
movzx eax, word [esp + 0x44]
mov edx, dword [esp + 0x14]
mov ecx, dword [edx]
mov word [ecx], ax
jmp 0x40d4fe
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x14]
mov ecx, dword [edx]
mov dword [ecx], eax
sar eax, 0x1f
mov dword [ecx + 4], eax
jmp 0x40d4fe
movzx eax, byte [esp + 0x44]
mov edx, dword [esp + 0x14]
mov ecx, dword [edx]
mov byte [ecx], al
add edx, 4
mov dword [esp + 0x14], edx
mov esi, dword [esp + 0x10]
jmp 0x40ca93
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov edx, eax
lea eax, [esp + 0x24]
mov dword [esp], eax
mov ecx, esi
call fcn.0040d750
add edi, 4
mov dword [esp + 0x14], edi
mov esi, ebx
jmp 0x40ca93
mov byte [esp + 0x18], 0x2d
mov eax, dword [esp + 0x28]
jmp 0x40d544
mov byte [esp + 0x18], 0x2b
lea edx, [esp + 0x19]
and al, 0x20
mov ecx, eax
or cl, 0x49
mov byte [edx], cl
mov ecx, eax
or cl, 0x4e
mov byte [edx + 1], cl
or al, 0x46
mov byte [edx + 2], al
lea ecx, [esp + 0x18]
sub edx, ecx
add edx, 3
lea eax, [esp + 0x24]
mov dword [esp], eax
call fcn.0040d750
mov esi, dword [esp + 0x10]
jmp 0x40ca93
mov cx, 0xfc05
mov eax, edx
or eax, esi
je 0x40d58b
mov word [esp + 0x68], cx
shrd edx, esi, 3
shr esi, 3
mov dword [esp + 0x64], esi
mov dword [esp + 0x60], edx
jmp 0x40d5a9
mov ax, 0xc002
or ecx, edx
je 0x40d5a9
mov word [esp + 0x68], ax
movups xmm0, xmmword [esp + 0x60]
movups xmmword [esp], xmm0
lea ecx, [esp + 0x24]
call fcn.0040ec60
mov esi, dword [esp + 0x10]
jmp 0x40ca93
mov eax, dword [esp + 0x44]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret