Function at 0x40c9a0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x50fdd3
mov eax, dword fs:[0]
push eax
sub esp, 0x98
push ebx
push esi
push edi
mov eax, dword [0x5467a4]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov eax, dword [ebx]
cmp eax, 4
jne 0x40c9ec
lea edi, [ebx + 0x5c]
call fcn.0040ed00
add eax, 1
jmp 0x40ca03
cmp eax, 5
jne 0x40c9fe
lea edi, [ebx + 0x4c]
call fcn.0040ed80
add eax, 1
jmp 0x40ca03
mov eax, 1
add eax, 0xffffffff
mov dword [esp + 0x14], eax
mov dword [esi + 0x34], eax
push eax
lea eax, [esp + 0x6c]
call fcn.004219d0
add esp, 4
push 1
push eax
lea eax, [esp + 0x30]
xor edi, edi
push eax
mov dword [esp + 0xbc], edi
call fcn.004101c0
mov ecx, dword [eax + 4]
add esp, 0xc
cmp ecx, edi
jne 0x40ca3e
xor eax, eax
jmp 0x40ca43
mov eax, dword [eax + 8]
sub eax, ecx
mov dword [esi + 0x30], eax
mov eax, dword [esp + 0x2c]
cmp eax, edi
je 0x40ca57
push eax
call fcn.004e7d7e
add esp, 4
mov dword [esp + 0xb0], 0xffffffff
mov eax, dword [esp + 0x6c]
cmp eax, edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
je 0x40ca7f
push eax
call fcn.004e7d7e
add esp, 4
push ebx
lea ecx, [esp + 0x6c]
push esi
push ecx
call fcn.0040d4e0
mov eax, dword [esp + 0x78]
add esp, 0xc
cmp eax, edi
je 0x40ca9f
push eax
call fcn.004e7d7e
add esp, 4
push 8
push str.bplist00
lea ecx, [esp + 0x70]
mov dword [esp + 0x88], 0xf
mov dword [esp + 0x84], edi
mov byte [esp + 0x74], 0
call fcn.00406f00
push edi
lea edx, [esp + 0x6c]
push edx
lea eax, [esp + 0x30]
push esi
push eax
mov dword [esp + 0xc0], 1
call fcn.0040ea20
mov eax, dword [esp + 0x3c]
add esp, 0x10
cmp eax, edi
je 0x40caf6
push eax
call fcn.004e7d7e
add esp, 4
mov dword [esp + 0xb0], 0xffffffff
cmp dword [esp + 0x80], 0x10
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
jb 0x40cb24
mov ecx, dword [esp + 0x6c]
push ecx
call fcn.004e7d7e
add esp, 4
mov ecx, dword [esi + 0x14]
cmp ecx, edi
lea ebx, [esi + 0x10]
jne 0x40cb32
xor eax, eax
jmp 0x40cb37
mov eax, dword [ebx + 8]
sub eax, ecx
mov dword [esi + 0x28], eax
mov dword [esi + 0x2c], edi
mov ecx, dword [ebx + 4]
cmp ecx, edi
jne 0x40cb48
xor eax, eax
jmp 0x40cb4d
mov eax, dword [ebx + 8]
sub eax, ecx
mov esi, dword [ebp + 8]
lea edx, [esp + 0x18]
add eax, 0xfffffff8
push edx
mov dword [esp + 0x1c], eax
call fcn.00406c70
mov edi, dword [esi + 8]
cmp dword [esi + 4], edi
jbe 0x40cb6e
call fcn.004e89bf
lea eax, [edi - 4]
cmp eax, dword [esi + 8]
mov dword [esp + 0x20], edi
ja 0x40cb7f
cmp eax, dword [esi + 4]
jae 0x40cb84
call fcn.004e89bf
add edi, 0xfffffffc
mov eax, esi
cmp edi, dword [eax + 8]
jb 0x40cb93
call fcn.004e89bf
mov eax, dword [edi]
push eax
lea eax, [esp + 0x6c]
call fcn.004219d0
add esp, 4
push 1
push eax
lea ecx, [esp + 0x30]
push ecx
mov dword [esp + 0xbc], 2
call fcn.004101c0
mov ecx, dword [eax + 4]
xor edi, edi
add esp, 0xc
cmp ecx, edi
jne 0x40cbca
xor eax, eax
jmp 0x40cbcf
mov eax, dword [eax + 8]
sub eax, ecx
mov dword [esi + 0x20], eax
mov eax, dword [esp + 0x2c]
cmp eax, edi
je 0x40cbe3
push eax
call fcn.004e7d7e
add esp, 4
mov eax, dword [esp + 0x6c]
cmp eax, edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], edi
je 0x40cc00
push eax
call fcn.004e7d7e
add esp, 4
mov dword [esp + 0x5c], edi
mov dword [esp + 0x60], edi
mov dword [esp + 0x64], edi
mov dword [esp + 0xb0], 3
mov edi, dword [esi + 8]
cmp dword [esi + 4], edi
jbe 0x40cc24
call fcn.004e89bf
mov ecx, dword [esi + 4]
cmp ecx, dword [esi + 8]
mov dword [esp + 0x18], ecx
jbe 0x40cc39
call fcn.004e89bf
mov ecx, dword [esp + 0x18]
cmp ecx, edi
mov eax, edi
jae 0x40cc53
nop
mov edx, dword [ecx]
mov edi, dword [eax - 4]
sub eax, 4
mov dword [ecx], edi
add ecx, 4
cmp ecx, eax
mov dword [eax], edx
jb 0x40cc40
mov eax, esi
mov dword [esp + 0x48], 0
call fcn.004ab0c0
test eax, eax
jbe 0x40ce20
mov ecx, dword [ebx + 4]
test ecx, ecx
jne 0x40cc77
mov dword [esp + 0x18], ecx
jmp 0x40cc80
mov eax, dword [ebx + 8]
sub eax, ecx
mov dword [esp + 0x18], eax
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x40cc95
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x48], eax
jb 0x40cc9a
call fcn.004e89bf
mov ecx, dword [esi + 4]
test ecx, ecx
mov edx, dword [esp + 0x48]
mov dword [esp + 0x1c], ecx
lea edi, [edx*4]
je 0x40ccbc
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp edx, eax
jb 0x40ccc9
call fcn.004e89bf
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x18]
sub eax, dword [edi + ecx]
mov ecx, dword [esi + 4]
mov dword [edi + ecx], eax
mov ecx, dword [esi + 4]
test ecx, ecx
je 0x40cce9
mov eax, dword [esi + 8]
sub eax, ecx
sar eax, 2
cmp edx, eax
jb 0x40ccee
call fcn.004e89bf
mov eax, dword [esi + 4]
mov edx, dword [eax + edi]
add eax, edi
push edx
lea eax, [esp + 0x6c]
call fcn.004219d0
add esp, 4
mov byte [esp + 0xb0], 4
mov ecx, dword [esi + 0x20]
push ecx
push eax
lea edx, [esp + 0x30]
push edx
call fcn.004101c0
add esp, 0xc
mov byte [esp + 0xb0], 6
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x40cd36
push eax
call fcn.004e7d7e
add esp, 4
mov ecx, dword [esp + 0x2c]
xor eax, eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x30]
cmp ecx, eax
mov edi, ecx
jbe 0x40cd5f
call fcn.004e89bf
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
cmp ecx, eax
lea edx, [esp + 0x28]
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], edi
mov dword [esp + 0x1c], eax
jbe 0x40cd78
call fcn.004e89bf
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x60]
cmp dword [esp + 0x5c], eax
lea edi, [esp + 0x28]
mov dword [esp + 0x1c], eax
jbe 0x40cd9a
call fcn.004e89bf
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push ecx
lea eax, [esp + 0x5c]
push eax
push edx
mov edx, dword [esp + 0x60]
xor ecx, ecx
sub esp, 0xc
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x68]
mov dword [eax + 4], ecx
mov dword [eax + 8], edx
sub esp, 0xc
mov eax, esp
xor ecx, ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0xc0]
mov dword [eax + 4], edi
mov dword [eax + 8], ecx
lea ecx, [esp + 0x7c]
call fcn.00422ba0
mov byte [esp + 0xb0], 3
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x40cdf8
push eax
call fcn.004e7d7e
add esp, 4
mov edi, dword [esp + 0x48]
xor eax, eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
add edi, 1
mov eax, esi
mov dword [esp + 0x48], edi
call fcn.004ab0c0
cmp edi, eax
jb 0x40cc6a
mov eax, dword [esp + 0x60]
cmp dword [esp + 0x5c], eax
mov dword [esp + 0x1c], eax
jbe 0x40ce33
call fcn.004e89bf
mov eax, dword [esp + 0x5c]
cmp eax, dword [esp + 0x60]
mov dword [esp + 0x18], eax
jbe 0x40ce46
call fcn.004e89bf
mov esi, dword [ebx + 8]
cmp dword [ebx + 4], esi
lea edi, [esp + 0x58]
jbe 0x40ce57
call fcn.004e89bf
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
push edx
lea eax, [esp + 0x5c]
push eax
mov eax, dword [esp + 0x20]
push eax
push edi
push esi
push ebx
push ecx
mov esi, ebx
call fcn.00422ea0
lea edx, [esp + 0x13]
push edx
mov edi, 6
lea esi, [esp + 0x88]
mov byte [esp + 0x17], 0
call fcn.0041fe50
mov byte [esp + 0xb0], 7
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
cmp ecx, eax
mov esi, eax
jbe 0x40cebf
call fcn.004e89bf
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x88]
cmp ecx, eax
mov dword [esp + 0x1c], ecx
jbe 0x40cecc
call fcn.004e89bf
mov edi, dword [ebx + 8]
cmp dword [ebx + 4], edi
jbe 0x40ced9
call fcn.004e89bf
mov ecx, dword [esp + 0x14]
push esi
lea eax, [esp + 0x88]
push eax
mov eax, dword [esp + 0x24]
push eax
lea eax, [esp + 0x90]
push eax
push edi
push ebx
push ecx
mov esi, ebx
call fcn.00422ea0
mov edi, dword [ebp + 8]
mov eax, dword [ebx + 4]
test eax, eax
mov dl, byte [edi + 0x20]
mov byte [esp + 0x13], dl
jne 0x40cf12
xor esi, esi
jmp 0x40cf17
mov esi, dword [ebx + 8]
sub esi, eax
test eax, eax
je 0x40cf31
mov ecx, dword [ebx + 0xc]
sub ecx, eax
cmp esi, ecx
jae 0x40cf31
mov eax, dword [ebx + 8]
mov byte [eax], dl
add eax, 1
mov dword [ebx + 8], eax
jmp 0x40cf50
mov esi, dword [ebx + 8]
cmp eax, esi
jbe 0x40cf3d
call fcn.004e89bf
lea edx, [esp + 0x13]
push edx
push esi
push ebx
lea eax, [esp + 0x28]
push eax
mov eax, ebx
call fcn.0041dcf0
mov eax, dword [ebx + 4]
test eax, eax
mov dl, byte [edi + 0x30]
mov byte [esp + 0x13], dl
jne 0x40cf62
xor esi, esi
jmp 0x40cf67
mov esi, dword [ebx + 8]
sub esi, eax
test eax, eax
je 0x40cf81
mov ecx, dword [ebx + 0xc]
sub ecx, eax
cmp esi, ecx
jae 0x40cf81
mov eax, dword [ebx + 8]
mov byte [eax], dl
add eax, 1
mov dword [ebx + 8], eax
jmp 0x40cfa0
mov esi, dword [ebx + 8]
cmp eax, esi
jbe 0x40cf8d
call fcn.004e89bf
lea ecx, [esp + 0x13]
push ecx
push esi
push ebx
lea edx, [esp + 0x28]
push edx
mov eax, ebx
call fcn.0041dcf0
mov eax, dword [esp + 0x14]
cdq
add eax, 1
adc edx, 0
push edx
push eax
lea eax, [esp + 0x40]
call fcn.00421ac0
add esp, 8
mov byte [esp + 0xb0], 8
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
cmp ecx, eax
mov esi, ecx
jbe 0x40cfdc
call fcn.004e89bf
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
cmp ecx, eax
lea edx, [esp + 0x38]
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], edx
mov esi, eax
jbe 0x40cff3
call fcn.004e89bf
mov dword [esp + 0x24], esi
mov esi, dword [ebx + 8]
lea eax, [esp + 0x38]
xor edi, edi
cmp dword [ebx + 4], esi
mov dword [esp + 0x20], eax
jbe 0x40d00e
call fcn.004e89bf
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x54]
push esi
push ebx
push eax
sub esp, 0xc
mov eax, esp
xor ecx, ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x68]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x3c]
sub esp, 0xc
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], ecx
mov ecx, ebx
mov dword [eax + 8], edx
call fcn.00422ba0
push 0
push 0
lea eax, [esp + 0x70]
call fcn.00421ac0
add esp, 8
push eax
lea eax, [esp + 0x3c]
mov byte [esp + 0xb4], 9
call fcn.0041da50
mov byte [esp + 0xb0], 8
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x40d083
push eax
call fcn.004e7d7e
add esp, 4
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
cmp eax, ecx
mov dword [esp + 0x14], ecx
jbe 0x40d0a0
call fcn.004e89bf
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
cmp eax, ecx
mov dword [esp + 0x1c], eax
jbe 0x40d0ad
call fcn.004e89bf
mov esi, dword [ebx + 8]
cmp dword [ebx + 4], esi
lea edi, [esp + 0x38]
jbe 0x40d0be
call fcn.004e89bf
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x14]
push eax
lea eax, [esp + 0x3c]
push eax
push ecx
push edi
push esi
push ebx
push edx
mov esi, ebx
call fcn.00422ea0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x2c]
mov edx, dword [eax + 0x28]
push ecx
push edx
lea eax, [esp + 0x9c]
call fcn.00421ac0
add esp, 8
push eax
lea eax, [esp + 0x3c]
mov byte [esp + 0xb4], 0xa
call fcn.0041da50
mov byte [esp + 0xb0], 8
mov eax, dword [esp + 0x98]
test eax, eax
je 0x40d124
push eax
call fcn.004e7d7e
add esp, 4
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
cmp edx, eax
mov esi, edx
jbe 0x40d13f
call fcn.004e89bf
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
cmp edx, eax
lea ecx, [esp + 0x38]
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], ecx
mov esi, eax
jbe 0x40d156
call fcn.004e89bf
mov dword [esp + 0x24], esi
mov esi, dword [ebx + 8]
lea eax, [esp + 0x38]
xor edi, edi
cmp dword [ebx + 4], esi
mov dword [esp + 0x20], eax
jbe 0x40d171
call fcn.004e89bf
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x54]
push esi
push ebx
push eax
sub esp, 0xc
mov eax, esp
xor ecx, ecx
mov dword [eax], ecx
mov ecx, dword [esp + 0x68]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x3c]
sub esp, 0xc
mov eax, esp
mov dword [eax], edi
mov dword [eax + 4], ecx
mov ecx, ebx
mov dword [eax + 8], edx
call fcn.00422ba0
mov eax, dword [esp + 0x3c]
xor esi, esi
cmp eax, esi
je 0x40d1be
push eax
call fcn.004e7d7e
add esp, 4
mov eax, dword [esp + 0x88]
cmp eax, esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], esi
mov dword [esp + 0x44], esi
je 0x40d1de
push eax
call fcn.004e7d7e
add esp, 4
mov eax, dword [esp + 0x5c]
cmp eax, esi
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], esi
je 0x40d204
push eax
call fcn.004e7d7e
add esp, 4
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret