Function at 0x40f610
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x64
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x6c]
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov eax, dword [eax]
mov edx, dword [edx]
mov dword [esp + 0x18], eax
mov eax, dword [0x498ecc]
mov dword [esp + 4], edx
mov dword [esp + 0x28], edx
test eax, eax
je 0x40f65e
call eax
test eax, eax
je 0x40f65a
mov eax, dword [esp + 0x74]
mov dword [eax], 0x55
xor eax, eax
add esp, 0x64
ret
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x98]
push ebx
mov ebx, dword [esp + 0x84]
push ebp
mov ebp, dword [esp + 0xa4]
mov dword [esp + 0x64], eax
push esi
push edi
mov eax, dword [ebp + 0x20]
mov edi, 0xfffffffe
sub eax, dword [ebp + 0x10]
mov dword [esp + 0x58], eax
lea eax, [ebx + 6]
mov dword [esp + 0x70], edx
mov dword [esp + 0x10], eax
cmp byte [edx], 0x85
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], 0
mov dword [esp + 0x24], edi
mov dword [esp + 0x30], edi
jne 0x40f6dd
movzx ecx, byte [edx + 3]
movzx eax, byte [edx + 4]
shl ecx, 8
or ecx, eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0x64], eax
xor eax, eax
mov word [esp + 0x6a], ax
lea eax, [esp + 0x64]
mov dword [esp + 0x4c], ecx
mov word [esp + 0x68], cx
mov dword [ebp + 0x24], eax
mov byte [edx + 1], 0
lea eax, [edx + 1]
mov dword [esp + 0x5c], eax
add ebx, 3
lea eax, [edx + 2]
add ebx, edx
mov byte [eax], 0
lea edx, [esp + 0x10]
mov dword [esp + 0x60], eax
mov eax, dword [ebp + 0x40]
mov ecx, eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xb0]
neg eax
mov dword [esp + 0x54], ecx
sbb eax, eax
and eax, edx
mov dword [esp + 0x50], eax
cmp dword [esp + 0x8c], 0
mov dword [esp + 0x1c], ebx
je 0x40f72a
mov dword [ebp + 0x40], ecx
cmp dword [esp + 0x88], 0
je 0x40f74d
mov byte [ebx], 0x7c
inc ebx
mov dword [esp + 0x48], ebx
mov word [ebx], 0
add ebx, 2
add dword [esp + 0x10], 3
mov dword [esp + 0x1c], ebx
push eax
push ebp
push dword [esp + 0x9c]
lea eax, [esp + 0x78]
push eax
lea eax, [esp + 0x28]
push eax
lea eax, [esp + 0x48]
push eax
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x60]
push eax
push dword [esp + 0xa4]
lea eax, [esp + 0x4c]
push eax
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0xa4]
push eax
call fcn.0040aee0
add esp, 0x30
test eax, eax
je 0x40f954
mov eax, dword [ebp + 0x40]
cmp eax, dword [esp + 0x3c]
jbe 0x40f7a5
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0x78]
mov ebx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
test eax, eax
jne 0x40f8bd
cmp byte [edx], 0x77
je 0x40f7e7
mov eax, dword [esp + 0x44]
mov esi, dword [esp + 0x34]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], eax
jmp 0x40f860
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x40]
mov esi, dword [esp + 0x44]
test ecx, ecx
js 0x40f817
cmp ecx, eax
jne 0x40f801
cmp dword [esp + 0x2c], esi
je 0x40f82f
test edi, edi
jns 0x40f80f
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x20], edi
mov edi, ecx
mov dword [esp + 0x30], 0xffffffff
test eax, eax
js 0x40f82f
mov ecx, dword [esp + 0x18]
test ecx, ecx
jns 0x40f833
mov ecx, eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x18], ecx
jmp 0x40f833
mov ecx, dword [esp + 0x18]
mov eax, ecx
xor eax, edi
test eax, 0xfffffffd
jne 0x40f854
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x20], eax
jne 0x40f854
or edi, ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], edi
jmp 0x40f85c
mov dword [esp + 0x24], 0xffffffff
mov ecx, dword [esp + 0x78]
cmp dword [esp + 0x88], 0
je 0x40f8b6
push 0
mov eax, ecx
mov byte [ebx], 0
push ebp
shr eax, 0xb
push 0
and eax, 1
push eax
push edx
call fcn.00410230
mov ecx, eax
add esp, 0x14
cmp ecx, 0xfffffffd
jne 0x40f894
mov dword [ebp + 0x74], 1
jmp 0x40f8b2
test ecx, ecx
js 0x40f932
cmp ecx, dword [ebp + 0x48]
jle 0x40f8a4
mov dword [ebp + 0x48], ecx
mov edx, dword [esp + 0x48]
mov eax, ecx
sar eax, 8
mov byte [edx], al
mov byte [edx + 1], cl
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0xb0]
mov esi, dword [esp + 0x28]
cmp byte [esi], 0x7c
jne 0x40f96b
test eax, eax
je 0x40f8fb
mov eax, dword [esp + 0x7c]
mov ebx, dword [esp + 0x90]
add dword [esp + 0x10], 3
add ebx, 3
mov edi, dword [esp + 0x24]
mov eax, dword [eax]
add ebx, eax
mov eax, dword [esp + 0x50]
inc esi
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x28], esi
jmp 0x40f719
mov ecx, dword [esp + 0x54]
mov eax, ebx
sub eax, edx
mov byte [ebx], 0x77
sar eax, 8
mov edi, ebx
mov byte [ebx + 1], al
mov al, bl
sub al, dl
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x24]
mov byte [ebx + 2], al
mov eax, dword [esp + 0x50]
mov dword [esp + 0x70], ebx
add ebx, 3
inc esi
mov dword [esp + 0x28], esi
jmp 0x40f719
cmp ecx, 0xfffffffe
jne 0x40f93e
mov ecx, 0x24
jmp 0x40f94b
sub ecx, 0xfffffffc
neg ecx
sbb ecx, ecx
and ecx, 0xffffffd3
add ecx, 0x46
mov eax, dword [esp + 0x84]
mov dword [eax], ecx
mov ecx, dword [esp + 0x80]
mov eax, dword [esp + 0x28]
pop edi
pop esi
pop ebp
mov dword [ecx], eax
xor eax, eax
pop ebx
add esp, 0x64
ret
test eax, eax
jne 0x40f9a0
mov edi, dword [esp + 0x14]
mov edx, ebx
sub edx, edi
jmp 0x40f980
movzx ecx, byte [edi + 1]
movzx eax, byte [edi + 2]
shl ecx, 8
or ecx, eax
mov byte [edi + 2], dl
mov eax, edx
mov edx, ecx
sar eax, 8
mov byte [edi + 1], al
sub edi, ecx
test ecx, ecx
jg 0x40f980
mov ecx, dword [esp + 0x38]
mov eax, ebx
sub eax, ecx
mov byte [ebx], 0x78
sar eax, 8
mov byte [ebx + 1], al
mov al, bl
sub al, cl
mov byte [ebx + 2], al
add ebx, 3
cmp dword [esp + 0x4c], 0
jle 0x40fa51
mov eax, dword [ebp + 0x24]
cmp word [eax + 6], 0
je 0x40fa43
push dword [esp + 0x58]
mov eax, dword [esp + 0x7c]
shr eax, 0xb
push ebp
and eax, 1
mov byte [ebx], 0
push eax
push 3
push ecx
call fcn.004094b0
mov ecx, dword [esp + 0x4c]
mov eax, ebx
sub eax, ecx
push eax
push ecx
lea eax, [ecx + 3]
push eax
call sub.MSVCRT.dll_memmove
mov edx, dword [esp + 0x58]
add ebx, 3
mov eax, dword [esp + 0x7c]
mov ecx, ebx
sub ecx, edx
add esp, 0x20
sar ecx, 8
mov byte [edx], 0x81
mov byte [eax], cl
mov al, bl
sub al, dl
mov edx, dword [esp + 0x60]
mov byte [edx], al
mov byte [ebx], 0x78
mov byte [ebx + 1], cl
mov byte [ebx + 2], al
add ebx, 3
mov ecx, dword [esp + 0x10]
mov eax, dword [ebp + 0x24]
add ecx, 6
mov dword [esp + 0x10], ecx
mov eax, dword [eax]
mov dword [ebp + 0x24], eax
jmp 0x40fa55
mov eax, dword [ebp + 0x24]
mov ecx, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [ebp + 0x24], eax
jmp 0x40fa55
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x2c]
mov dword [ebp + 0x40], eax
mov eax, dword [esp + 0x7c]
mov dword [eax], ebx
mov eax, dword [esp + 0x80]
mov dword [eax], esi
mov eax, dword [esp + 0x98]
mov esi, dword [esp + 0x30]
mov dword [eax], edx
mov eax, dword [esp + 0x9c]
mov edx, dword [esp + 0x20]
mov dword [eax], esi
mov eax, dword [esp + 0xa0]
mov esi, dword [esp + 0xb0]
mov dword [eax], edx
mov eax, dword [esp + 0xa4]
mov edx, dword [esp + 0x24]
mov dword [eax], edx
test esi, esi
je 0x40fad3
mov edx, dword [esi]
mov eax, 0x7fffffeb
sub eax, edx
cmp eax, ecx
jge 0x40face
mov eax, dword [esp + 0x84]
pop edi
pop esi
pop ebp
mov dword [eax], 0x14
xor eax, eax
pop ebx
add esp, 0x64
ret
lea eax, [edx + ecx]
mov dword [esi], eax
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x64
ret