Function at 0x40f4f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x4c
push ebx
mov ebx, dword [esp + 0x54]
push ebp
mov ebp, dword [esp + 0x74]
push esi
xor esi, esi
mov dword [ebp], esi
mov eax, dword [ebx]
push edi
and eax, 0xfffffdff
push 8
mov dword [esp + 0x64], eax
lea eax, [esp + 0x38]
push esi
push eax
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x1c], esi
mov dword [esp + 0x28], 0xffffffff
call fcn.0040a61f
add esp, 0xc
mov ecx, ebx
mov dword [esp + 0x18], esi
call fcn.0040f490
mov edi, dword [esp + 0x70]
cmp edi, esi
mov esi, dword [esp + 0x74]
mov dword [esp + 0x30], eax
je 0x40f5df
cmp dword [esp + 0x68], 0
je 0x40f565
test dword [ebx], 0x8800
je 0x40f5df
mov ecx, dword [edi]
mov ecx, dword [ecx]
lea edx, [esp + 0x6c]
push edx
lea eax, [esp + 0x6c]
push eax
push edi
call ecx
add esp, 0xc
test eax, eax
je 0x40f597
push ebp
mov edx, dword [esp + 0x14]
push 0xffffffffffffffff
push edx
push ebx
push eax
call fcn.00410400
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x68]
push eax
push ecx
lea edx, [esp + 0x3c]
push edx
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x28]
push ecx
push esi
call fcn.0040f150
add esp, 0x18
test eax, eax
je 0x40f5df
test dword [ebx], 0x8000
je 0x40f5df
mov edx, dword [esi]
push edx
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x70]
push ecx
push edi
call fcn.00416950
add esp, 0x10
test eax, eax
jne 0x40f57d
mov eax, dword [ebx + 0xc]
mov ecx, dword [esp + 0x78]
cmp dword [ecx + eax*4], 0x43b5ac
jne 0x40f5ff
pop edi
mov dword [esi], 0
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x4c
ret
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x68]
push edx
push eax
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x34]
push edx
lea eax, [esp + 0x28]
push eax
push esi
call fcn.0040f150
mov ecx, dword [esp + 0x78]
add esp, 0x18
test eax, eax
je 0x40f698
cmp eax, 0x800
jne 0x40f677
test eax, ecx
je 0x40f677
mov ecx, dword [esp + 0x10]
push ebp
push 0xffffffffffffffff
push ecx
mov ecx, dword [esp + 0x78]
push ebx
lea edx, [esp + 0x20]
push edx
mov edx, dword [esp + 0x7c]
lea eax, [esp + 0x48]
push eax
mov eax, dword [esp + 0x90]
push ecx
push edx
push eax
mov eax, dword [esp + 0x3c]
push ebx
call fcn.0040f2f0
add esp, 0x18
push eax
call fcn.00410400
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
cmp dword [esp + 0x30], 0
jne 0x40f698
push ebp
mov ecx, dword [esp + 0x14]
push 0xffffffffffffffff
push ecx
push ebx
push eax
call fcn.00410400
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
mov ebp, dword [esi]
test ebp, ebp
jne 0x40f6a9
mov edx, dword [esp + 0x28]
add edx, 4
mov dword [esp + 0x24], edx
mov eax, dword [esp + 0x34]
test eax, eax
mov edx, dword [esp + 0x68]
je 0x40f6bb
sub eax, edx
mov dword [esp + 0x20], eax
mov eax, ecx
and eax, 0x1ff
cmp eax, 0x102
je 0x40fb39
movzx edx, cl
cmp dword [esp + 0x18], edx
je 0x40f75d
mov eax, ecx
and eax, 0x4420
cmp eax, 0x4420
jne 0x40f72f
test byte [ebx + 0x14], 0x20
lea eax, [ebx + 0x14]
jne 0x40f72f
and ecx, 0xdf
cmp dword [esp + 0x18], ecx
jne 0x40f72f
mov edx, dword [esp + 0x78]
lea ecx, [esp + 0x10]
push ecx
push edx
mov edx, dword [esp + 0x70]
lea ecx, [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x70]
push edi
push ebp
push edx
push ecx
push eax
call fcn.0040f4f0
add esp, 0x20
test eax, eax
je 0x40f75d
mov edx, dword [esp + 0x7c]
push edx
jmp 0x40f67f
test dword [ebx], 0x200
jne 0x40f5ef
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x10]
push edx
push 0xffffffffffffffff
push eax
push ebx
push 0x807
call fcn.00410400
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
test byte [esp + 0x18], 0x20
je 0x40fa04
lea ecx, [esp + 0x14]
push ebx
push ecx
call fcn.0040fe80
mov ecx, 1
add esp, 8
cmp dword [esp + 0x14], ecx
jbe 0x40f7ad
mov edx, dword [esp + 0x78]
lea eax, [ebx + 0x14]
cmp dword [eax], 0x103
je 0x40f799
mov ebp, dword [eax + 0xc]
cmp dword [edx + ebp*4], 0
jne 0x40f7a7
add ecx, 1
add eax, 0x14
cmp ecx, dword [esp + 0x14]
jb 0x40f788
jmp 0x40f7ad
cmp ecx, dword [esp + 0x14]
jb 0x40f7e6
cmp dword [esi], 0
jne 0x40fa04
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x68]
push edx
push eax
push esi
call fcn.004100a0
add esp, 0xc
test eax, eax
je 0x40f7d7
mov ecx, dword [esp + 0x7c]
push ecx
jmp 0x40f57e
mov ecx, dword [esi]
sub ecx, dword [esp + 0x24]
mov dword [esp + 0x38], ecx
jmp 0x40fa08
cmp dword [esi], 0
jne 0x40f7f9
mov ecx, dword [esp + 0x6c]
sub ecx, dword [esp + 0x24]
mov dword [esp + 0x38], ecx
jmp 0x40f7fd
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x60]
test al, 0xc0
je 0x40f814
test eax, 0x1000
mov dword [esp + 0x28], 1
je 0x40f81c
mov dword [esp + 0x28], 0
test edi, edi
je 0x40f840
mov edx, dword [esp + 0x20]
mov eax, dword [edi + 4]
add dword [edi + 0x14], edx
mov edi, dword [edi + 0x14]
mov dword [esp + 0x34], eax
mov dword [esp + 0x20], 0
mov ebp, 1
jmp 0x40f854
xor edi, edi
mov dword [esp + 0x20], edi
lea ebp, [edi + 1]
jmp 0x40f854
mov ecx, dword [esp + 0x38]
cmp dword [esp + 0x28], 0
jne 0x40f8a7
test dword [esp + 0x60], 0x400
je 0x40f86c
add dword [esp + 0x1c], 1
jmp 0x40f87d
lea eax, [ebp + ebp*4]
cmp dword [ebx + eax*4], 0x103
je 0x40f960
mov edx, dword [esp + 0x74]
cmp dword [edx], 0
jne 0x40f89d
mov eax, dword [esp + 0x34]
cmp byte [edi + eax], 0
jne 0x40f8a7
cmp byte [edi + eax + 1], 0
je 0x40f960
jmp 0x40f8a7
cmp dword [esp + 0x20], ecx
jae 0x40f960
mov edx, dword [esp + 0x70]
test edx, edx
je 0x40f8b7
mov eax, dword [edx + 0x10]
sub eax, dword [edx + 0x14]
jmp 0x40f8bb
sub ecx, edi
mov eax, ecx
lea ecx, [ebp + ebp*4]
lea esi, [ebx + ecx*4]
mov ecx, dword [esp + 0x78]
lea edx, [esp + 0x10]
push edx
push ecx
mov ecx, dword [esp + 0x78]
lea edx, [esp + 0x34]
push edx
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x74]
push eax
lea eax, [edi + edx]
push eax
push ecx
push esi
call fcn.0040f4f0
add esp, 0x20
test eax, eax
jne 0x40f93b
mov eax, dword [esp + 0x70]
test eax, eax
mov ecx, dword [esp + 0x2c]
je 0x40f909
mov edx, dword [eax + 4]
mov edi, dword [eax + 0x14]
mov dword [esp + 0x34], edx
jmp 0x40f90b
add edi, ecx
add dword [esp + 0x20], ecx
cmp dword [esp + 0x28], 0
jne 0x40f95c
test dword [esp + 0x60], 0x400
jne 0x40f850
lea eax, [esp + 0x14]
push esi
push eax
call fcn.0040fe80
add esp, 8
add ebp, dword [esp + 0x14]
jmp 0x40f850
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x14]
push edx
push ecx
push ebx
push eax
call fcn.00410400
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x74]
cmp dword [edx], 0
jne 0x40faaf
mov eax, dword [esp + 0x70]
test eax, eax
je 0x40f979
add dword [eax + 0x14], 2
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
mov ecx, edi
add eax, esi
mov dword [esp + 0x38], ecx
mov dword [edx], eax
cmp dword [esp + 0x28], 0
jne 0x40fb62
test dword [esp + 0x60], 0x400
jne 0x40fb62
lea edx, [ebp + ebp*4]
lea eax, [ebx + edx*4]
mov edx, dword [eax]
cmp edx, 0x103
je 0x40fb62
mov esi, dword [esp + 0x78]
lea ecx, [ecx]
test edx, 0x200
jne 0x40f9d8
mov ecx, dword [eax + 0xc]
cmp dword [esi + ecx*4], 0x43b5ac
jne 0x40fade
push eax
lea edx, [esp + 0x18]
push edx
call fcn.0040fe80
add ebp, dword [esp + 0x1c]
add esp, 8
lea eax, [ebp + ebp*4]
mov edx, dword [ebx + eax*4]
cmp edx, 0x103
lea eax, [ebx + eax*4]
jne 0x40f9c0
mov edi, dword [esp + 0x70]
mov esi, dword [esp + 0x74]
mov ecx, dword [esp + 0x38]
mov eax, dword [ebx + 0xc]
mov edx, dword [esp + 0x78]
cmp dword [edx + eax*4], 0
lea ebp, [edx + eax*4]
je 0x40fba9
mov eax, dword [ebx + 4]
test eax, eax
je 0x40fb88
mov edx, dword [esp + 0x18]
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x68]
add edx, 1
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x68]
mov dword [esp + 0x50], edx
mov edx, dword [esi]
mov dword [esp + 0x54], edx
mov edx, dword [esp + 0x34]
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x58], 0
mov ecx, dword [ebp]
push ecx
lea edx, [esp + 0x40]
push edx
call eax
mov ebp, eax
mov eax, dword [esp + 0x60]
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x1c], eax
call fcn.00410130
add esp, 0xc
test ebp, ebp
je 0x40fb6f
mov edx, dword [esp + 0x7c]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
push edx
push eax
push ecx
push ebx
push ebp
call fcn.00410400
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
cmp dword [esp + 0x20], ecx
je 0x40f98b
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x10]
push ecx
push edx
push eax
push ebx
push 0x806
call fcn.00410400
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
lea ecx, [ebp + ebp*4]
mov eax, dword [ebx + ecx*4 + 0x10]
test eax, eax
lea esi, [ebx + ecx*4 + 0x10]
je 0x40fb14
push eax
call fcn.0040a6ac
add eax, 1
push eax
call fcn.0040a67d
add esp, 8
test eax, eax
mov dword [esp + 0x10], eax
je 0x40fb18
mov edx, dword [esi]
push edx
push eax
call fcn.0040a6a3
add esp, 8
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x7c]
mov edx, dword [esp + 0x1c]
push ecx
push edx
push eax
push ebx
push 0x805
call fcn.00410400
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret
test ebp, ebp
jne 0x40fa04
mov eax, dword [esp + 0x6c]
push eax
push edx
push esi
call fcn.004100a0
add esp, 0xc
test eax, eax
je 0x40f7d7
mov ecx, dword [esp + 0x7c]
push ecx
jmp 0x40f57e
mov edi, dword [esp + 0x70]
mov esi, dword [esp + 0x74]
jmp 0x40fa08
test edi, edi
je 0x40fba9
test byte [ebx], 0x20
je 0x40fb81
cmp dword [ebx + 0x14], 0x103
jne 0x40fba9
mov edx, dword [esi]
add dword [edi + 0x14], edx
jmp 0x40fba9
test edi, edi
mov eax, dword [ebp]
mov ecx, dword [esp + 0x68]
mov dword [eax], ecx
mov edx, dword [ebx + 0xc]
mov eax, dword [esp + 0x78]
mov ecx, dword [eax + edx*4]
mov edx, dword [esi]
mov dword [ecx + 4], edx
je 0x40fba9
mov eax, dword [esi]
add dword [edi + 0x14], eax
test dword [ebx], 0x8000
je 0x40fbd3
mov ecx, dword [esi]
add dword [esp + 0x68], ecx
test edi, edi
je 0x40fbd3
mov edx, dword [edi]
mov edx, dword [edx]
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x6c]
push ecx
push edi
call edx
add esp, 0xc
test eax, eax
jne 0x40fbd5
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4c
ret