Function at 0x40eea0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ecx, 0x11
push edi
push esi
mov esi, eax
push ebx
sub esp, 0x4c
mov dword [esp + 0x18], edx
add edx, 0x48
mov edi, edx
mov dword [esp + 0x1c], eax
xor eax, eax
rep stosd dword es:[edi], eax
mov dword [esi + 0x68], 0
mov dword [esi + 0x50], 0
mov edx, dword [esi + 0x4c]
test edx, edx
je 0x40f271
mov esi, dword [esp + 0x1c]
lea eax, [esi + 0x54]
mov dword [esp + 4], eax
mov eax, dword [esi + 0x60]
mov dword [esp + 0x20], eax
shr eax, 0x1f
lea eax, [edx + eax - 1]
mov dword [esp], eax
call fcn.00411930
test eax, eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x1c]
je 0x40f230
mov eax, dword [eax + 0x5c]
mov esi, dword [esp + 0x18]
mov dword [esi + 0x70], eax
mov esi, dword [esp + 0x20]
lea eax, [esi + 4]
sub eax, dword [esi + 4]
lea edi, [eax + 9]
mov esi, eax
mov dword [esp + 0x28], eax
mov dword [esp], edi
mov dword [esp + 0x24], edi
call sub.msvcrt.dll_strlen
cmp byte [esi + 9], 0x65
lea eax, [edi + eax + 1]
je 0x40f170
mov esi, dword [esp + 0x28]
movzx edx, byte [eax]
movzx ecx, byte [esi + 8]
mov byte [esp + 0x2f], cl
cmp cl, 3
ja 0x40f328
xor esi, esi
xor ecx, ecx
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or esi, edx
test bl, bl
js 0x40ef60
mov ebx, dword [esp + 0x18]
xor ecx, ecx
mov dword [ebx + 0x7c], esi
xor ebx, ebx
lea esi, [esi]
mov ebp, eax
movzx edx, byte [eax]
add eax, 1
mov edi, edx
and edi, 0x7f
shl edi, cl
add ecx, 7
or ebx, edi
test dl, dl
js 0x40ef88
mov edi, ebp
mov ebp, edx
mov edx, edi
cmp ecx, 0x1f
ja 0x40efb9
and ebp, 0x40
je 0x40efb9
mov edi, 0xffffffff
shl edi, cl
or ebx, edi
mov ecx, dword [esp + 0x18]
xor edi, edi
mov ebp, ebx
mov dword [ecx + 0x78], ebx
xor ecx, ecx
cmp byte [esp + 0x2f], 1
je 0x40f1a0
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or edi, edx
test bl, bl
js 0x40efd8
mov ebx, ebp
mov ecx, dword [esp + 0x18]
xor ebp, ebp
mov dword [ecx + 0x80], edi
mov edi, dword [esp + 0x24]
mov byte [ecx + 0x85], 0xff
movzx edx, byte [edi]
cmp dl, 0x7a
je 0x40f280
test dl, dl
je 0x40f4f0
mov edi, dword [esp + 0x24]
add edi, 1
sub edx, 0x42
cmp dl, 0x11
ja case.0x40f02d.1
movzx edx, dl
jmp dword [edx*4 + 0x4ddb8c]
movzx edx, byte [eax]
mov ecx, dword [esp + 0x18]
add eax, 1
mov byte [ecx + 0x85], dl
movzx edx, byte [edi]
add edi, 1
test dl, dl
jne 0x40f022
test ebp, ebp
jne 0x40f068
mov ebp, eax
lea esi, [esi]
nop
test ebp, ebp
je 0x40f32d
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx]
lea edx, [ecx + eax + 4]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp], eax
mov eax, ebp
cmp ebx, 0xfffffffc
jne 0x40f08d
cmp esi, 1
je 0x40f35f
call fcn.0040e6a0
mov eax, dword [esp + 0x18]
movzx eax, byte [eax + 0x84]
cmp al, 0xff
je 0x40f340
and eax, 7
cmp al, 2
je 0x40f318
jbe 0x40f2d0
cmp al, 3
je 0x40f2d8
cmp al, 4
jne 0x48cad0
mov ebx, 0x18
mov eax, dword [esp + 0x20]
add ebx, eax
mov eax, dword [esp + 0x18]
cmp byte [eax + 0x86], 0
movzx edx, byte [eax + 0x85]
je 0x40f2e8
xor esi, esi
xor ecx, ecx
mov edi, edx
nop
movzx edx, byte [ebx]
add ebx, 1
mov eax, edx
and eax, 0x7f
shl eax, cl
add ecx, 7
or esi, eax
test dl, dl
js 0x40f0f0
mov edx, edi
cmp dl, 0xff
je 0x40f12b
lea eax, [esp + 0x3c]
mov edi, dword [esp + 0x1c]
movzx edx, dl
mov ecx, ebx
mov dword [esp], eax
mov eax, edi
call fcn.0040d3d0
mov eax, dword [esp + 0x3c]
mov dword [edi + 0x50], eax
add ebx, esi
mov esi, dword [esp + 0x20]
mov eax, dword [esi]
lea edx, [esi + eax + 4]
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x78], 0xfffffffc
jne 0x40f14b
cmp dword [eax + 0x7c], 1
je 0x40f34a
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov dword [esp], eax
mov eax, ebx
call fcn.0040e6a0
xor eax, eax
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
cmp byte [esi + 0xa], 0x68
jne 0x40ef40
mov edx, dword [eax]
mov esi, dword [esp + 0x18]
add eax, 4
mov dword [esi + 0x88], edx
mov esi, dword [esp + 0x28]
add esi, 0xb
mov dword [esp + 0x24], esi
jmp 0x40ef40
movzx edi, byte [eax]
lea eax, [edx + 2]
jmp 0x40eff0
movzx edx, byte [eax]
mov ecx, dword [esp + 0x18]
add eax, 1
add edi, 1
mov byte [ecx + 0x84], dl
movzx edx, byte [edi - 1]
test dl, dl
jne 0x40f022
jmp 0x40f052
movzx edx, byte [eax]
lea ecx, [eax + 1]
lea eax, [esp + 0x3c]
add edi, 1
mov dword [esp], eax
mov eax, dword [esp + 0x1c]
call fcn.0040d3d0
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x18]
mov dword [ecx + 0x74], edx
movzx edx, byte [edi - 1]
test dl, dl
jne 0x40f022
jmp 0x40f052
mov ecx, dword [esp + 0x18]
add edi, 1
mov byte [ecx + 0x87], 1
movzx edx, byte [edi - 1]
test dl, dl
jne 0x40f022
jmp 0x40f052
mov ecx, dword [eax + 0x48]
mov eax, dword [eax + 0x4c]
cmp byte [eax - 2], 0xff
movzx edx, byte [eax - 5]
je 0x40f491
cmp dl, 0xe8
je 0x40f4b8
cmp dl, 0x8b
jne 0x40f25c
cmp byte [eax - 4], 0x4d
je 0x40f3e3
cmp byte [eax - 1], 0x83
jne 0x40f271
cmp byte [eax], 9
jne 0x40f271
cmp byte [eax + 1], 0
je 0x40f377
add esp, 0x4c
mov eax, 5
pop ebx
pop esi
pop edi
pop ebp
ret
xor ecx, ecx
mov edi, ebx
lea esi, [esi]
movzx ebx, byte [eax]
add eax, 1
mov edx, ebx
and edx, 0x7f
shl edx, cl
add ecx, 7
or ebp, edx
test bl, bl
js 0x40f288
mov ebx, edi
mov edi, dword [esp + 0x18]
add ebp, eax
mov byte [edi + 0x86], 1
mov edi, dword [esp + 0x24]
movzx edx, byte [edi + 1]
lea ecx, [edi + 1]
test dl, dl
je 0x40f068
mov dword [esp + 0x24], ecx
jmp 0x40f01b
test al, al
jne 0x40f4fe
mov ebx, 0x10
jmp 0x40f0cb
cmp dl, 0xff
je 0x40f12d
lea eax, [esp + 0x3c]
mov esi, dword [esp + 0x1c]
mov ecx, ebx
mov dword [esp], eax
mov eax, esi
call fcn.0040d3d0
mov ebx, eax
mov eax, dword [esp + 0x3c]
mov dword [esi + 0x50], eax
jmp 0x40f12d
mov ebx, 0xc
jmp 0x40f0cb
cmp dl, 4
je 0x40f369
add esp, 0x4c
mov eax, 3
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebx, 8
jmp 0x40f0cb
mov dword [esp], eax
mov ecx, dword [esp + 0x1c]
mov eax, ebx
call fcn.0040df40
xor eax, eax
jmp 0x40f15f
call fcn.0040df40
jmp 0x40f092
cmp byte [eax + 1], 0
jne 0x40f32d
add eax, 2
jmp 0x40ef58
cmp byte [eax + 2], 0x2d
jne 0x40f271
cmp byte [eax + 3], 0
jne 0x40f271
cmp byte [eax + 4], 0x10
jne 0x40f271
cmp byte [eax + 5], 0
jne 0x40f271
mov eax, dword [esp + 0x18]
mov byte [eax + 0x5c], 1
mov dword [eax + 0x68], 4
mov dword [eax + 0x64], 4
mov byte [eax + 0x49], 1
mov dword [eax + 4], 0xfffffffc
mov dword [eax + 0x80], 8
mov byte [eax + 0x50], 1
mov dword [eax + 0x20], 0
mov byte [eax + 0x87], 1
xor eax, eax
jmp 0x40f15f
cmp byte [eax], 0x64
jne 0x40f25c
cmp byte [eax + 1], 0x8b
jne 0x40f271
mov eax, dword [ecx + 8]
mov edx, dword [eax + 0xc4]
mov esi, dword [esp + 0x18]
mov ebx, edx
mov byte [esi + 0x5c], 1
sub ebx, ecx
lea ecx, [eax + 0xb0]
mov dword [esi + 0x68], 4
sub ecx, edx
mov dword [esi + 0x64], ebx
mov dword [esi], ecx
lea ecx, [eax + 0xa4]
sub ecx, edx
mov dword [esi + 0x48], 0x1010101
mov dword [esi + 0xc], ecx
lea ecx, [eax + 0xac]
sub ecx, edx
mov dword [esi + 0x4d], 0x1010101
mov dword [esi + 4], ecx
lea ecx, [eax + 0xa8]
sub ecx, edx
mov byte [esi + 0x87], 1
mov dword [esi + 8], ecx
lea ecx, [eax + 0xa0]
mov dword [esi + 0x80], 8
sub ecx, edx
mov dword [esi + 0x18], ecx
lea ecx, [eax + 0x9c]
sub ecx, edx
mov dword [esi + 0x1c], ecx
lea ecx, [eax + 0xb4]
add eax, 0xb8
sub eax, edx
sub ecx, edx
mov dword [esi + 0x20], eax
xor eax, eax
mov dword [esi + 0x14], ecx
jmp 0x40f15f
cmp byte [eax - 1], 0xd0
jne 0x40f244
cmp byte [eax], 0x83
jne 0x40f244
cmp byte [eax + 1], 0xf8
jne 0x40f244
mov eax, dword [ecx]
mov eax, dword [eax + 4]
jmp 0x40f3f9
cmp byte [eax - 4], 0x68
movzx edx, byte [eax]
je 0x40f4f7
cmp dl, 0x83
jne 0x40f25c
cmp byte [eax + 1], 0xc4
jne 0x40f271
cmp byte [eax + 3], 0xb8
jne 0x40f271
mov eax, dword [ecx + 0x38]
jmp 0x40f3f9
mov ebp, eax
jmp 0x40f068
cmp dl, 0xc3
jne 0x40f4c1
jmp 0x40f4ae
jmp 0x48cad0
ud2