Function at 0x41f2fc
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x9c
mov eax, dword [0x4343f0]
xor eax, esp
mov dword [esp + 0x98], eax
and dword [esp + 0x10], 0
and dword [esp + 0x18], 0
push ebx
push esi
mov esi, ecx
push edi
mov eax, dword [esi + 0x18]
mov edi, dword [esi + 0xc]
mov ecx, dword [esi + 0x38]
mov ebx, dword [esi + 0x14]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 0x10]
mov dword [esp + 0x28], edx
mov dword [esp + 0x14], edi
mov dword [esp + 0x20], eax
mov dword [esp + 0x18], 0xc
call fcn.00420c6e
test eax, eax
je 0x41f36c
cmp dword [esi + 8], 0xffffffff
je 0x41f364
push dword [esi + 8]
call fcn.0040ac22
pop ecx
xor eax, eax
inc eax
jmp 0x41f873
mov ecx, dword [esp + 0x10]
call fcn.00420853
push 0x40
lea eax, [esp + 0x34]
push 0
push eax
mov dword [esp + 0x38], eax
call fcn.0040a3e0
mov eax, dword [esi + 0x30]
mov edx, dword [esi + 4]
mov dword [esp + 0x54], eax
mov eax, dword [esi + 0x38]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x1c]
add esp, 0xc
mov dword [esp + 0x5c], eax
mov eax, dword [esi + 0x2c]
mov dword [esp + 0x34], edi
xor edi, edi
push 0xc
mov dword [esp + 0x68], eax
mov eax, dword [esi]
pop ecx
inc edi
mov dword [esp + 0x4c], esi
mov dword [esp + 0x60], ebx
mov dword [esp + 0x50], edx
cmp eax, ecx
jg 0x41f598
je 0x41f562
sub eax, 5
je 0x41f54b
dec eax
dec eax
je 0x41f53b
dec eax
dec eax
je 0x41f4e0
dec eax
je 0x41f423
dec eax
jne 0x41f364
mov edx, str.FILDES
xor ecx, ecx
call fcn.00420cad
mov edx, str.FILDES_support_not_compiled_in.
mov ecx, esi
call fcn.0041f938
push dword [esi + 8]
call fcn.0040ac22
pop ecx
xor eax, eax
jmp 0x41f873
lea eax, [esp + 0x70]
push eax
push edx
call dword [sym.imp.libav.dll_Ordinal_44339]
pop ecx
pop ecx
test eax, eax
jne 0x41f443
test dword [esp + 0x76], 0x4000
je 0x41f53b
push dword [esi + 0x2c]
call dword [sym.imp.libav.dll_Ordinal_44297]
pop ecx
mov ecx, dword [esi + 0x2c]
mov eax, dword [ecx + 0x2c]
inc eax
cmp eax, dword [ecx + 0x1c]
jge 0x41f45e
mov dword [ecx + 0x2c], eax
jmp 0x41f463
or dword [esp + 0x1c], 0xffffffff
push dword [esi + 0x2c]
call dword [sym.imp.libav.dll_Ordinal_44298]
cmp dword [esp + 0x20], 0
pop ecx
je 0x41f48e
push str.ERROR
push str.Not_enough_threads_for_multiscan._Increase_MaxThreads.
mov edx, dword [esi + 4]
mov ecx, esi
call fcn.0041f9fd
pop ecx
jmp 0x41f363
mov edx, str.MULTISCAN
xor ecx, ecx
mov dword [esp + 0x18], 8
call fcn.00420cad
push 2
pop eax
mov dword [esp + 0x10], eax
call fcn.00420421
mov dword [esp + 0x24], eax
mov dword [esp + 0x68], eax
test eax, eax
jne 0x41f5f5
push str.ExitOnOOM
push ebx
call dword [sym.imp.libav.dll_Ordinal_44283]
pop ecx
pop ecx
xor ecx, ecx
inc ecx
cmp dword [eax + 0x18], 0
push 0xffffffffffffffff
pop eax
cmovne ecx, eax
mov eax, ecx
jmp 0x41f873
mov edx, str.STREAM
xor ecx, ecx
call fcn.00420cad
movzx eax, byte [esi + 0x28]
mov ecx, dword [esp + 0x14]
push eax
push ebx
push dword [esp + 0x28]
push dword [esp + 0x1c]
call fcn.0041c579
xor edi, edi
inc edi
add esp, 0x10
cmp eax, edi
jne 0x41f513
mov edx, dword [esp + 0x28]
mov dword [edx], edi
cmp eax, 0x14
jne 0x41f41c
push str.ExitOnOOM
push ebx
call dword [sym.imp.libav.dll_Ordinal_44283]
pop ecx
pop ecx
or ecx, 0xffffffff
cmp dword [eax + 0x18], 0
cmovne edi, ecx
mov eax, edi
jmp 0x41f873
mov edx, str.CONTSCAN
xor ecx, ecx
call fcn.00420cad
mov eax, edi
jmp 0x41f559
mov edx, str.SCAN
xor ecx, ecx
call fcn.00420cad
xor eax, eax
mov dword [esp + 0x10], eax
jmp 0x41f5f9
mov edx, str.STATS
xor ecx, ecx
call fcn.00420cad
cmp dword [esi + 0x38], 0
mov edi, dword [esp + 0x14]
je 0x41f589
push dword [esi + 0x30]
push str._u:
push edi
call fcn.004214b6
add esp, 0xc
mov dl, byte [esi + 0x28]
mov ecx, edi
call fcn.00420577
jmp 0x41f41c
sub eax, 0x12
je 0x41f81a
dec eax
je 0x41f78a
dec eax
je 0x41f5b9
dec eax
jne 0x41f364
mov edx, str.SCANH
jmp 0x41f550
push str.AllowAllMatchScan
push ebx
call dword [sym.imp.libav.dll_Ordinal_44283]
cmp dword [eax + 0x18], 0
pop ecx
pop ecx
jne 0x41f5dc
push str.ERROR
push str.ALLMATCHSCAN_command_disabled_by_clamd_configuration.
jmp 0x41f47e
mov edx, str.ALLMATCHSCAN
xor ecx, ecx
call fcn.00420cad
or dword [esp + 0x58], 0x200000
jmp 0x41f557
mov eax, dword [esp + 0x10]
push str.MaxDirectoryRecursion
push ebx
mov dword [esp + 0x40], eax
call dword [sym.imp.libav.dll_Ordinal_44283]
mov eax, dword [eax + 0x10]
push str.FollowDirectorySymlinks
push ebx
mov dword [esp + 0x2c], eax
call dword [sym.imp.libav.dll_Ordinal_44283]
add esp, 0x10
cmp dword [eax + 0x18], 0
je 0x41f62a
or dword [esp + 0x18], 2
push str.FollowFileSymlinks
push ebx
call dword [sym.imp.libav.dll_Ordinal_44283]
cmp dword [eax + 0x18], 0
pop ecx
pop ecx
je 0x41f642
or dword [esp + 0x18], edi
push str.CrossFilesystems
push ebx
call dword [sym.imp.libav.dll_Ordinal_44283]
cmp dword [eax + 0x18], 0
pop ecx
pop ecx
jne 0x41f675
lea eax, [esp + 0x70]
push eax
push dword [esi + 4]
call dword [sym.imp.libav.dll_Ordinal_44339]
pop ecx
pop ecx
mov ecx, dword [esp + 0x6c]
test eax, eax
cmove ecx, dword [esp + 0x70]
mov dword [esp + 0x6c], ecx
mov ecx, dword [esp + 0x1c]
push 0x41cec9
lea eax, [esp + 0x30]
push eax
test ecx, ecx
push fcn.0041cf83
mov eax, Ordinal_3
cmovne eax, ecx
push eax
push dword [esp + 0x28]
push dword [esi + 4]
call dword [sym.imp.libav.dll_Ordinal_44221]
mov edx, eax
add esp, 0x18
mov dword [esp + 0x1c], edx
cmp edx, 0x14
jne 0x41f6cb
push str.ExitOnOOM
push ebx
call dword [sym.imp.libav.dll_Ordinal_44283]
cmp dword [eax + 0x18], 0
pop ecx
pop ecx
push 0xffffffffffffffff
pop eax
cmovne edi, eax
jmp 0x41f534
cmp dword [esp + 0x68], 0
je 0x41f71e
cmp dword [esp + 0x10], 2
jne 0x41f71e
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x20]
call fcn.00420493
push dword [esi + 0x2c]
call dword [sym.imp.libav.dll_Ordinal_44297]
mov eax, dword [esi + 0x2c]
add esp, 0xc
dec dword [eax + 0x2c]
push dword [esi + 0x2c]
call dword [sym.imp.libav.dll_Ordinal_44298]
mov edi, dword [esp + 0x24]
mov ebx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
pop ecx
mov ecx, dword [esp + 0x14]
jmp 0x41f72e
mov edi, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
mov ebx, edi
sub ebx, ecx
sub ebx, dword [esp + 0x3c]
lea eax, [ebx + ecx]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], 0x15
cmp eax, edi
jne 0x41f765
cmp ecx, edi
je 0x41f765
mov edx, dword [esi + 4]
push 0x4304d0
mov ecx, esi
call fcn.0041fa5e
mov edx, dword [esp + 0x20]
cmp eax, 0xffffffff
cmove edx, dword [esp + 0x28]
pop ecx
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
sub edi, ebx
sub edi, ecx
mov dword [eax], edi
cmp edx, dword [esp + 0x24]
jne 0x41f4d9
mov ecx, dword [esi + 0x38]
call fcn.00420cfd
mov ecx, dword [esp + 0x14]
jmp 0x41f4d9
mov edx, str.INSTREAM
xor ecx, ecx
call fcn.00420cad
push ecx
push ecx
push ebx
push dword [esp + 0x2c]
mov ecx, esi
push dword [esp + 0x20]
call fcn.0041cc5e
xor edi, edi
inc edi
add esp, 0x14
cmp eax, edi
jne 0x41f7ec
mov eax, dword [esp + 0x28]
mov dword [eax], edi
xor edi, edi
push 0
push dword [esi + 8]
call fcn.00403bd8
pop ecx
pop ecx
cmp eax, 0xffffffff
jne 0x41f7d0
call fcn.0040297f
push dword [esi + 8]
call fcn.0040ac22
or dword [esi + 8], 0xffffffff
pop ecx
push dword [esi + 4]
call dword [sym.imp.libav.dll_Ordinal_44219]
pop ecx
jmp 0x41f534
cmp eax, 0x14
jne 0x41f80b
push str.ExitOnOOM
push ebx
call dword [sym.imp.libav.dll_Ordinal_44283]
cmp dword [eax + 0x18], 0
pop ecx
pop ecx
push 0xffffffffffffffff
pop eax
cmovne edi, eax
jmp 0x41f7ba
cmp eax, 0x15
jne 0x41f7b8
mov ecx, dword [esi + 0x38]
call fcn.00420cfd
jmp 0x41f7ba
mov edx, str.MULTISCANFILE
xor ecx, ecx
call fcn.00420cad
xor ebx, ebx
lea eax, [esp + 0x2c]
push eax
push ebx
push dword [esi + 4]
mov dword [esp + 0x74], ebx
push dword [esi + 4]
mov dword [esp + 0x48], ebx
push ebx
mov dword [esp + 0x78], ebx
call fcn.0041cf83
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x50]
add esp, 0x14
mov dword [esi + 4], ebx
mov dword [edx], ecx
cmp eax, 0x16
jne 0x41f868
mov ecx, dword [esi + 0x38]
call fcn.00420cfd
jmp 0x41f364
xor eax, eax
cmp dword [esp + 0x40], eax
cmovg eax, dword [esp + 0x40]
mov ecx, dword [esp + 0xa4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00401276
mov esp, ebp
pop ebp
ret