Function at 0x409de4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xdc
mov dword [esp + 0xa4], eax
mov dword [esp + 0x84], edx
mov dword [esp + 0x9c], ecx
mov ebx, dword [eax]
mov dword [esp + 0x44], ebx
mov esi, dword [eax + 0x24]
mov eax, dword [esi + 0x38]
sub eax, 4
cmp eax, 1
jbe 0x40a64b
mov dword [esp + 0x6c], 1
mov eax, dword [esp + 0xf0]
add eax, 0xffff
cdq
idiv dword [esp + 0xf0]
test eax, eax
jle 0x40a641
mov dword [esp + 0xa0], eax
mov edi, dword [esp + 0xf4]
cmp eax, edi
jle 0x409e58
mov dword [esp + 0xa0], edi
mov eax, dword [esp + 0xa4]
mov eax, dword [eax + 0x38]
mov dword [esp + 0x68], eax
test eax, eax
je 0x40a28c
mov edx, dword [eax + 0x2c]
mov dword [esp + 0x64], edx
mov eax, dword [esp + 0xf0]
imul eax, edx
add eax, 0x1f
sar eax, 3
and eax, 0xfffffffc
mov dword [esp + 0x94], eax
mov edi, dword [esp + 0xf0]
mov ebx, dword [esp + 0x68]
mov dword [ebx], edi
mov ebp, dword [esp + 0xa0]
mov dword [ebx + 4], ebp
mov dword [ebx + 0x28], eax
imul eax, ebp
mov dword [esp], eax
mov eax, dword [0x68bb7c]
call dword [eax + 0x14]
mov dword [esp + 0x7c], eax
mov dword [ebx + 0x10], eax
xor edx, edx
cmp dword [ebx + 0x1c], 1
sete dl
mov dword [esp + 0x8c], edx
je 0x40a297
mov dword [esp + 0x98], 1
mov ebx, dword [esp + 0x44]
mov eax, dword [ebx + 0x10]
lea edi, [eax + eax*2]
mov dword [esp + 0x5c], edi
imul eax, dword [esp + 0x9c]
mov edx, dword [esp + 0x84]
add edx, eax
mov eax, dword [ebx + 0x3c]
lea eax, [eax + edx*4]
mov dword [esp + 0x80], eax
mov edx, dword [esp + 0x9c]
imul edx, edi
mov ebp, dword [esp + 0x84]
lea eax, [ebp + ebp*2]
add eax, edx
mov edx, dword [esp + 0xa4]
mov edx, dword [edx + 0x34]
add eax, edx
mov dword [esp + 0xa8], eax
add ebp, dword [esp + 0xf0]
mov dword [esp + 0x54], ebp
mov eax, dword [esp + 0xf4]
test eax, eax
jle 0x40a272
mov dword [esp + 0xac], 1
sub dword [esp + 0xac], edi
lea esi, [esi]
mov ebx, dword [esp + 0xf4]
cmp dword [esp + 0xa0], ebx
jle 0x409f7b
mov dword [esp + 0xa0], ebx
mov ecx, dword [esp + 0x9c]
add ecx, dword [esp + 0xa0]
mov dword [esp + 0x90], ecx
mov ebx, dword [esp + 0x9c]
cmp ecx, ebx
jle 0x40a1bf
mov edi, dword [esp + 0xa8]
mov dword [esp + 0x78], edi
mov dword [esp + 0x50], ebx
mov dword [esp + 0x74], 0
mov edi, esi
test byte [edi + 0x18], 2
je 0x40a300
mov ebp, dword [esp + 0x54]
cmp dword [esp + 0x84], ebp
jge 0x40a166
mov edx, dword [esp + 0x80]
add edx, 3
mov eax, dword [esp + 0x84]
inc eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x4c], ecx
mov ebx, dword [esp + 0x84]
not ebx
mov dword [esp + 0x88], ebx
mov ebp, edx
nop
lea esi, [ebp - 3]
mov dword [esp + 0x40], esi
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x40a2dc
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x58], edx
mov esi, dword [esp + 0x4c]
sub esi, dword [esp + 0x5c]
mov ecx, dword [esp + 0x4c]
xor eax, eax
lea ebx, [edx - 1]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x70], ebp
mov ebp, dword [esp + 0x60]
test ebp, ebp
jle 0x40a6c0
movsx ebx, byte [ecx - 3]
lea edx, [ebx*8]
sub edx, ebx
mov ebx, dword [esp + 0x50]
test ebx, ebx
jle 0x40a2b8
movsx ebx, byte [esi - 3]
add edx, ebx
movsx ebx, byte [esi]
lea ebx, [ebx + ebx*4]
add edx, ebx
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x44]
cmp dword [ebp + 0x10], ebx
jle 0x40a2b8
movsx ebx, byte [esi + 3]
lea ebx, [ebx + ebx*2]
lea edx, [edx + ebx + 0x808]
sar edx, 4
add edx, 0xffffff80
mov ebp, dword [esp + 0x40]
movzx ebx, byte [ebp + eax]
add edx, ebx
cmp edx, 0xff
jle 0x40a0b0
mov edx, 0xff
test edx, edx
js 0x40a2f8
mov ebx, eax
shl ebx, 8
add ebx, edi
mov bl, byte [edx + ebx + 0xc54]
movzx ebp, bl
mov dword [esp + eax*4 + 0xc4], ebp
sub edx, ebx
mov byte [ecx], dl
inc ecx
inc eax
inc esi
cmp eax, 3
jne 0x40a040
mov ebp, dword [esp + 0x70]
add dword [esp + 0x4c], 3
mov ecx, dword [esp + 0xc4]
mov eax, dword [esp + 0xc8]
mov edx, dword [esp + 0xcc]
mov eax, dword [edi + eax*4 + 0x450]
add eax, dword [edi + ecx*4 + 0x50]
add eax, dword [edi + edx*4 + 0x850]
mov edx, eax
test byte [edi + 0x18], 8
je 0x40a121
mov edx, dword [edi + 0xc50]
mov edx, dword [edx + eax*4]
cmp dword [esp + 0x64], 8
je 0x40a2cc
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x74]
mov dword [esp + 8], edx
mov eax, dword [esp + 0x88]
add eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x68]
mov dword [esp], ebx
call dword [ebx + 0x4c]
add ebp, 4
inc dword [esp + 0x3c]
mov esi, dword [esp + 0x58]
cmp dword [esp + 0x54], esi
jg 0x40a00c
mov ebx, dword [esp + 0x44]
mov eax, dword [ebx + 0x10]
mov esi, dword [esp + 0x80]
lea esi, [esi + eax*4]
mov dword [esp + 0x80], esi
mov ebp, dword [esp + 0x5c]
add dword [esp + 0x78], ebp
mov edx, dword [esp + 0x94]
add dword [esp + 0x7c], edx
inc dword [esp + 0x50]
inc dword [esp + 0x74]
mov ecx, dword [esp + 0x90]
cmp dword [esp + 0x50], ecx
jne 0x409fb8
mov esi, edi
mov eax, ecx
sub eax, dword [esp + 0x9c]
imul eax, ebp
add dword [esp + 0xa8], eax
mov ebx, dword [esp + 0xa0]
mov dword [esp + 0x2c], ebx
mov edi, dword [esp + 0xf0]
mov dword [esp + 0x28], edi
mov ecx, dword [esp + 0x9c]
mov dword [esp + 0x24], ecx
mov edx, dword [esp + 0x84]
mov dword [esp + 0x20], edx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov ebx, dword [esp + 0x68]
mov dword [esp + 0x14], ebx
mov edi, dword [esp + 0xa4]
mov eax, dword [edi + 0x64]
mov dword [esp + 0x10], eax
mov eax, dword [edi + 0x28]
mov dword [esp + 0xc], eax
mov eax, dword [edi + 4]
mov dword [esp + 8], eax
mov eax, dword [esi + 0x24]
mov dword [esp + 4], eax
mov eax, dword [esi + 0xc50]
mov dword [esp], eax
call fcn.004726f4
mov ebp, dword [esp + 0xa0]
sub dword [esp + 0xf4], ebp
mov edi, dword [esp + 0xf4]
test edi, edi
jle 0x40a267
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x7c], eax
mov edx, dword [esp + 0x90]
mov dword [esp + 0x9c], edx
jmp 0x409f64
mov ebx, dword [esp + 0x68]
mov ebx, dword [ebx + 0x10]
mov dword [esp + 0x7c], ebx
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
mov eax, dword [0x68bb7c]
call dword [eax + 0x18]
mov edx, dword [esp + 0x68]
mov dword [edx + 0x10], 0
add esp, 0xdc
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, dword [ebx + 0x18]
mov dword [esp + 0x38], ecx
dec ecx
mov dword [esp + 0x98], 1
shl dword [esp + 0x98], cl
jmp 0x409edf
add edx, 0x808
sar edx, 4
add edx, 0xffffff80
jmp 0x40a098
mov esi, dword [esp + 0x48]
mov byte [esi], dl
inc esi
mov dword [esp + 0x48], esi
jmp 0x40a151
movzx ecx, byte [ebp - 3]
movzx eax, byte [ebp - 2]
movzx edx, byte [ebp - 1]
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x58], ebx
jmp 0x40a0fe
xor edx, edx
jmp 0x40a0b8
cmp dword [esp + 0x64], 1
jle 0x40a480
mov edx, dword [esp + 0x54]
cmp dword [esp + 0x84], edx
jge 0x40a166
mov esi, dword [esp + 0x84]
inc esi
mov ebx, dword [esp + 0x78]
sub ebx, dword [esp + 0x5c]
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x3c], eax
mov ebp, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
not edx
mov dword [esp + 0x48], edx
jmp 0x40a3f1
add edx, 0x808
sar edx, 4
add edx, 0xffffff80
mov ecx, dword [esp + 0x44]
test byte [ecx + 0xc], 1
movzx eax, byte [ebp]
je 0x40a387
lea ecx, [eax + eax*4]
lea ecx, [eax + ecx*2]
movzx eax, byte [ebp + 1]
shl eax, 4
add eax, ecx
movzx ecx, byte [ebp + 2]
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx + 0x10]
shr eax, 5
add edx, eax
add ebp, 4
cmp edx, 0xff
jle 0x40a399
mov edx, 0xff
test edx, edx
js 0x40a460
movzx eax, byte [edi + edx + 0xc54]
sub edx, eax
mov ecx, dword [esp + 0x5c]
mov byte [ebx + ecx], dl
mov eax, dword [edi + eax*4 + 0x50]
cmp dword [esp + 0x64], 8
je 0x40a450
mov dword [esp + 0xc], eax
mov ecx, dword [esp + 0x74]
mov dword [esp + 8], ecx
mov eax, dword [esp + 0x48]
add eax, esi
mov dword [esp + 4], eax
mov edx, dword [esp + 0x68]
mov dword [esp], edx
call dword [edx + 0x4c]
inc esi
inc ebx
mov ecx, dword [esp + 0x40]
cmp dword [esp + 0x54], ecx
jle 0x40a166
lea eax, [esi - 1]
test eax, eax
jle 0x40a6e0
mov ecx, dword [esp + 0x5c]
movsx eax, byte [ebx + ecx - 1]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [esp + 0x50]
test eax, eax
jle 0x40a468
movsx eax, byte [ebx - 1]
add edx, eax
movsx eax, byte [ebx]
lea eax, [eax + eax*4]
add edx, eax
mov dword [esp + 0x40], esi
mov eax, dword [esp + 0x44]
cmp esi, dword [eax + 0x10]
jge 0x40a350
movsx eax, byte [ebx + 1]
lea eax, [eax + eax*2]
lea edx, [edx + eax + 0x808]
sar edx, 4
add edx, 0xffffff80
jmp 0x40a35c
mov edx, dword [esp + 0x3c]
mov byte [edx], al
inc edx
mov dword [esp + 0x3c], edx
jmp 0x40a3e1
xor edx, edx
jmp 0x40a3a1
add edx, 0x808
sar edx, 4
add edx, 0xffffff80
mov dword [esp + 0x40], esi
jmp 0x40a35c
mov ebp, dword [esp + 0x54]
cmp dword [esp + 0x84], ebp
jge 0x40a62f
mov edx, dword [esp + 0x78]
inc edx
mov eax, dword [esp + 0x84]
inc eax
mov ebx, dword [esp + 0x78]
add ebx, dword [esp + 0xac]
mov dword [esp + 0x3c], ebx
mov esi, dword [esp + 0x7c]
mov dword [esp + 0x4c], esi
mov ecx, dword [esp + 0x80]
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x40], 0
mov dword [esp + 0x58], edi
jmp 0x40a4ea
shr ebp, 1
inc edx
inc eax
inc dword [esp + 0x3c]
mov esi, dword [esp + 0x48]
cmp dword [esp + 0x54], esi
jle 0x40a5d2
test ebp, ebp
jne 0x40a50e
mov ebp, dword [esp + 0x40]
mov edi, dword [esp + 0x4c]
mov dword [edi], ebp
add edi, 4
mov dword [esp + 0x4c], edi
mov ebp, dword [esp + 0x98]
mov dword [esp + 0x40], 0
lea ebx, [eax - 1]
test ebx, ebx
jle 0x40a6f0
movsx ebx, byte [edx - 2]
lea esi, [ebx*8]
sub esi, ebx
mov edi, dword [esp + 0x50]
test edi, edi
jle 0x40a614
mov edi, dword [esp + 0x3c]
movsx ebx, byte [edi - 2]
add esi, ebx
mov edi, dword [esp + 0x3c]
movsx ebx, byte [edi - 1]
lea ebx, [ebx + ebx*4]
add esi, ebx
mov dword [esp + 0x48], eax
mov ebx, dword [esp + 0x44]
cmp eax, dword [ebx + 0x10]
jl 0x40a5f4
add esi, 0x808
sar esi, 4
add esi, 0xffffff80
mov ebx, dword [esp + 0x44]
test byte [ebx + 0xc], 1
movzx ebx, byte [ecx]
je 0x40a590
lea edi, [ebx + ebx*4]
lea edi, [ebx + edi*2]
movzx ebx, byte [ecx + 1]
shl ebx, 4
add ebx, edi
movzx edi, byte [ecx + 2]
lea edi, [edi + edi*4]
lea ebx, [ebx + edi + 0x10]
shr ebx, 5
add ebx, esi
add ecx, 4
test ebx, ebx
js 0x40a610
cmp ebx, 0xff
jg 0x40a5e8
cmp ebx, 0x7f
jg 0x40a62c
mov byte [edx - 1], bl
mov ebx, dword [esp + 0x8c]
test ebx, ebx
jne 0x40a4d4
shl ebp, 1
inc edx
inc eax
inc dword [esp + 0x3c]
mov esi, dword [esp + 0x48]
cmp dword [esp + 0x54], esi
jg 0x40a4ea
mov edi, dword [esp + 0x58]
mov eax, dword [esp + 0x40]
mov ebp, dword [esp + 0x4c]
mov dword [ebp], eax
jmp 0x40a166
xor ebx, ebx
or dword [esp + 0x40], ebp
mov byte [edx - 1], bl
jmp 0x40a5ad
mov edi, dword [esp + 0x3c]
movsx ebx, byte [edi]
lea ebx, [ebx + ebx*2]
lea esi, [esi + ebx + 0x808]
sar esi, 4
add esi, 0xffffff80
jmp 0x40a566
xor ebx, ebx
jmp 0x40a5aa
add esi, 0x808
sar esi, 4
add esi, 0xffffff80
mov dword [esp + 0x48], eax
jmp 0x40a566
inc ebx
jmp 0x40a5ea
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x40], 0
jmp 0x40a5d6
mov eax, 1
jmp 0x409e3f
lea eax, [esp + 0xc0]
mov dword [esp + 0x10], eax
lea eax, [esp + 0xbc]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xb8]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x5f9f9a
mov eax, dword [esi + 0x10]
mov dword [esp], eax
call sub.msvcrt.dll_sscanf
cmp dword [esp + 0xb8], 0xff
jle 0x409e1b
dec eax
je 0x40a6d3
cmp dword [esp + 0xbc], 0xff
jle 0x409e1b
xor ebx, ebx
cmp dword [esp + 0xc0], 0xff
setle bl
mov dword [esp + 0x6c], ebx
jmp 0x409e23
xor edx, edx
mov ebx, dword [esp + 0x50]
test ebx, ebx
jg 0x40a06b
jmp 0x40a098
mov dword [esp + 0x6c], 0
jmp 0x409e23
mov eax, dword [esp + 0x50]
test eax, eax
jle 0x40a6ff
xor edx, edx
jmp 0x40a41c
mov ebx, dword [esp + 0x50]
test ebx, ebx
jle 0x40a70a
xor esi, esi
jmp 0x40a53c
mov dword [esp + 0x40], esi
xor edx, edx
jmp 0x40a35c
mov dword [esp + 0x48], eax
xor esi, esi
jmp 0x40a566