Function at 0x40c390
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x45c2e5
mov eax, dword fs:[0]
push eax
sub esp, 0x168
mov eax, dword [0x4772c4]
xor eax, esp
mov dword [esp + 0x164], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4772c4]
xor eax, esp
push eax
lea eax, [esp + 0x17c]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [esp + 0x190]
test edi, edi
mov dword [esp + 0x184], 0
je 0x40c401
mov ecx, dword [esp + 0x194]
sub ecx, edi
mov eax, 0xea0ea0eb
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
jne 0x40c406
call fcn.004402b5
cmp dword [edi + 0x88], 0x10
jb 0x40c414
mov edi, dword [edi + 0x74]
jmp 0x40c417
add edi, 0x74
push str.ES_UNINST.INI
push edi
lea ecx, [esp + 0x7c]
push str._s_s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea ebx, [esi + 0x82c]
lea edx, [esp + 0x74]
push edx
mov ecx, ebx
mov dword [esp + 0x18], ebx
call fcn.0042c8b0
xor edi, edi
xor ebp, ebp
lea ebx, [ebx]
mov eax, dword [esi + 0x760]
test eax, eax
je 0x40c770
mov ecx, dword [esi + 0x764]
sub ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jae 0x40c770
mov eax, dword [esi + 0x760]
test eax, eax
je 0x40c4aa
mov ecx, dword [esi + 0x764]
sub ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c4af
call fcn.004402b5
mov eax, dword [esi + 0x760]
cmp dword [eax + ebp], 0
jne 0x40c56a
test eax, eax
je 0x40c4e2
mov ecx, dword [esi + 0x764]
sub ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c4e7
call fcn.004402b5
mov eax, dword [esi + 0x760]
add eax, ebp
push 0x462a70
add eax, 0x5c
push eax
lea ecx, [esp + 0x24]
push ecx
call fcn.00406860
add esp, 0xc
mov ebx, eax
mov eax, dword [esi + 0x760]
test eax, eax
mov byte [esp + 0x184], 1
je 0x40c538
mov ecx, dword [esi + 0x764]
sub ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c53d
call fcn.004402b5
mov eax, dword [esi + 0x760]
sub esp, 0x1c
add eax, ebp
mov edx, esp
add eax, 8
mov dword [esp + 0x34], esp
push eax
push ebx
push edx
call fcn.00409fe0
mov ecx, dword [esp + 0x3c]
add esp, 0xc
call fcn.0042b1d0
jmp 0x40c745
test eax, eax
je 0x40c58d
mov ecx, dword [esi + 0x764]
sub ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c592
call fcn.004402b5
mov ecx, dword [esi + 0x760]
cmp dword [ecx + ebp], 2
mov eax, ecx
jne 0x40c667
test eax, eax
je 0x40c5c7
mov ecx, dword [esi + 0x764]
sub ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c5cc
call fcn.004402b5
mov eax, dword [esi + 0x760]
add eax, ebp
push 0x462a70
add eax, 0x5c
push eax
lea edx, [esp + 0x24]
push edx
call fcn.00406860
add esp, 0xc
mov ebx, eax
mov eax, dword [esi + 0x760]
test eax, eax
mov byte [esp + 0x184], 2
je 0x40c61d
mov ecx, dword [esi + 0x764]
sub ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c622
call fcn.004402b5
mov eax, dword [esi + 0x760]
sub esp, 0x1c
add eax, ebp
mov ecx, esp
add eax, 8
mov dword [esp + 0x34], esp
push eax
push ebx
push ecx
call fcn.00409fe0
mov ecx, dword [esp + 0x3c]
add esp, 0xc
call fcn.0042b310
cmp dword [esp + 0x34], 0x10
mov byte [esp + 0x184], 0
jb 0x40c761
mov edx, dword [esp + 0x20]
push edx
jmp 0x40c759
test eax, eax
je 0x40c68a
mov ecx, dword [esi + 0x764]
sub ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c68f
call fcn.004402b5
mov eax, dword [esi + 0x760]
cmp dword [eax + ebp], 4
jne 0x40c761
test eax, eax
je 0x40c6c2
mov ecx, dword [esi + 0x764]
sub ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c6c7
call fcn.004402b5
mov eax, dword [esi + 0x760]
add eax, ebp
push 0x462a70
add eax, 0x5c
push eax
lea ecx, [esp + 0x24]
push ecx
call fcn.00406860
add esp, 0xc
mov ebx, eax
mov eax, dword [esi + 0x760]
test eax, eax
mov byte [esp + 0x184], 3
je 0x40c718
mov ecx, dword [esi + 0x764]
sub ecx, eax
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c71d
call fcn.004402b5
mov eax, dword [esi + 0x760]
sub esp, 0x1c
add eax, ebp
mov edx, esp
add eax, 8
mov dword [esp + 0x34], esp
push eax
push ebx
push edx
call fcn.00409fe0
mov ecx, dword [esp + 0x3c]
add esp, 0xc
call fcn.0042b450
cmp dword [esp + 0x34], 0x10
mov byte [esp + 0x184], 0
jb 0x40c761
mov eax, dword [esp + 0x20]
push eax
call fcn.0042f233
add esp, 4
mov ebx, dword [esp + 0x14]
add edi, 1
add ebp, 0x78
jmp 0x40c450
xor edi, edi
xor ebp, ebp
jmp 0x40c780
mov eax, dword [esi + 0x780]
test eax, eax
je 0x40c93a
mov ecx, dword [esi + 0x784]
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jae 0x40c93a
mov eax, dword [esi + 0x780]
test eax, eax
je 0x40c7d6
mov ecx, dword [esi + 0x784]
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c7db
call fcn.004402b5
mov ecx, dword [esi + 0x780]
cmp byte [ecx + ebp + 0x5c], 0
je 0x40c92f
xor ecx, ecx
mov eax, 0xf
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], ecx
mov byte [esp + 0x40], cl
mov dword [esp + 0x70], eax
mov dword [esp + 0x6c], ecx
mov byte [esp + 0x5c], cl
mov eax, dword [esi + 0x780]
cmp eax, ecx
mov byte [esp + 0x184], 4
je 0x40c83a
mov ecx, dword [esi + 0x784]
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c83f
call fcn.004402b5
mov edx, dword [esi + 0x780]
mov eax, dword [edx + ebp]
mov dword [esp + 0x38], eax
mov eax, edx
test eax, eax
je 0x40c86f
mov ecx, dword [esi + 0x784]
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c874
call fcn.004402b5
mov ecx, dword [esi + 0x780]
push 0xffffffffffffffff
lea eax, [ecx + ebp + 4]
push 0
push eax
lea ecx, [esp + 0x48]
call fcn.00402ad0
mov eax, dword [esi + 0x780]
test eax, eax
je 0x40c8b3
mov ecx, dword [esi + 0x784]
sub ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40c8b8
call fcn.004402b5
mov edx, dword [esi + 0x780]
push 0xffffffffffffffff
lea eax, [edx + ebp + 0x20]
push 0
push eax
lea ecx, [esp + 0x64]
call fcn.00402ad0
sub esp, 0x3c
lea eax, [esp + 0x74]
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.004097d0
mov ecx, ebx
call fcn.0042c550
cmp dword [esp + 0x70], 0x10
mov byte [esp + 0x184], 0
jb 0x40c906
mov ecx, dword [esp + 0x5c]
push ecx
call fcn.0042f233
add esp, 4
cmp dword [esp + 0x54], 0x10
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
jb 0x40c92f
mov edx, dword [esp + 0x40]
push edx
call fcn.0042f233
add esp, 4
add edi, 1
add ebp, 0x60
jmp 0x40c780
xor ebp, ebp
xor edi, edi
mov bl, 5
mov ecx, dword [esi + 0x770]
test ecx, ecx
je 0x40ca36
mov eax, dword [esi + 0x774]
sub eax, ecx
sar eax, 5
cmp ebp, eax
jae 0x40ca36
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
test ecx, ecx
mov byte [esp + 0x184], bl
je 0x40c990
mov eax, dword [esi + 0x774]
sub eax, ecx
sar eax, 5
cmp ebp, eax
jb 0x40c995
call fcn.004402b5
mov eax, dword [esi + 0x770]
mov ecx, dword [edi + eax]
mov dword [esp + 0x38], ecx
mov ecx, eax
test ecx, ecx
je 0x40c9b7
mov eax, dword [esi + 0x774]
sub eax, ecx
sar eax, 5
cmp ebp, eax
jb 0x40c9bc
call fcn.004402b5
mov edx, dword [esi + 0x770]
push 0xffffffffffffffff
lea eax, [edi + edx + 4]
push 0
push eax
lea ecx, [esp + 0x48]
call fcn.00402ad0
mov ecx, dword [esp + 0x38]
sub esp, 0x20
mov eax, esp
mov dword [esp + 0x38], esp
mov dword [eax], ecx
push 0xffffffffffffffff
lea ecx, [eax + 4]
push 0
lea edx, [esp + 0x64]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], 0
push edx
mov byte [ecx + 4], 0
call fcn.00402ad0
mov ecx, dword [esp + 0x34]
call fcn.0042c770
cmp dword [esp + 0x54], 0x10
mov byte [esp + 0x184], 0
jb 0x40ca2b
mov eax, dword [esp + 0x40]
push eax
call fcn.0042f233
add esp, 4
add ebp, 1
add edi, 0x20
jmp 0x40c940
xor edi, edi
xor ebp, ebp
lea ebx, [ebx]
mov eax, dword [esi + 0x7a0]
test eax, eax
je 0x40cadc
mov ecx, dword [esi + 0x7a4]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jae 0x40cadc
mov eax, dword [esi + 0x7a0]
test eax, eax
je 0x40ca96
mov ecx, dword [esi + 0x7a4]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40ca9b
call fcn.004402b5
mov eax, dword [esi + 0x7a0]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
add eax, ebp
push 0
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], 0
push eax
mov byte [ecx + 4], 0
call fcn.00402ad0
mov ecx, dword [esp + 0x30]
call fcn.0042b590
add edi, 1
add ebp, 0x38
jmp 0x40ca40
xor ebp, ebp
xor ebx, ebx
mov eax, dword [esi + 0x790]
test eax, eax
je 0x40cc25
mov ecx, dword [esi + 0x794]
sub ecx, eax
mov eax, 0xea0ea0eb
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebp, eax
jae 0x40cc25
mov eax, dword [esi + 0x790]
test eax, eax
je 0x40cb3a
mov ecx, dword [esi + 0x794]
sub ecx, eax
mov eax, 0xea0ea0eb
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebp, eax
jb 0x40cb3f
call fcn.004402b5
mov eax, dword [esi + 0x790]
add eax, ebx
push 0x462a70
add eax, 0x1c
push eax
lea ecx, [esp + 0x40]
push ecx
call fcn.00406860
add esp, 0xc
mov edi, eax
mov eax, dword [esi + 0x790]
test eax, eax
mov byte [esp + 0x184], 6
je 0x40cb90
mov ecx, dword [esi + 0x794]
sub ecx, eax
mov eax, 0xea0ea0eb
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebp, eax
jb 0x40cb95
call fcn.004402b5
mov eax, dword [esi + 0x790]
add eax, ebx
push eax
lea edx, [esp + 0x20]
push edi
push edx
call fcn.00409fe0
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x34], esp
push str..lnk
push eax
push ecx
mov byte [esp + 0x1ac], 7
call fcn.00406860
mov ecx, dword [esp + 0x3c]
add esp, 0xc
call fcn.0042b6d0
cmp dword [esp + 0x34], 0x10
jb 0x40cbe6
mov edx, dword [esp + 0x20]
push edx
call fcn.0042f233
add esp, 4
cmp dword [esp + 0x50], 0x10
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
mov byte [esp + 0x184], 0
jb 0x40cc17
mov eax, dword [esp + 0x3c]
push eax
call fcn.0042f233
add esp, 4
add ebp, 1
add ebx, 0x8c
jmp 0x40cae0
mov ebx, dword [esp + 0x14]
xor edi, edi
xor ebp, ebp
lea ecx, [ecx]
mov eax, dword [esi + 0x7c0]
test eax, eax
je 0x40ccca
mov ecx, dword [esi + 0x7c4]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jae 0x40ccca
mov eax, dword [esi + 0x7c0]
test eax, eax
je 0x40cc86
mov ecx, dword [esi + 0x7c4]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40cc8b
call fcn.004402b5
mov eax, dword [esi + 0x7c0]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
add eax, ebp
push 0
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], 0
push eax
mov byte [ecx + 4], 0
call fcn.00402ad0
mov ecx, ebx
call fcn.0042b810
add edi, 1
add ebp, 0x1c
jmp 0x40cc30
xor edi, edi
xor ebp, ebp
mov edi, edi
mov eax, dword [esi + 0x7f0]
test eax, eax
je 0x40cd6a
mov ecx, dword [esi + 0x7f4]
sub ecx, eax
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jae 0x40cd6a
mov eax, dword [esi + 0x7f0]
test eax, eax
je 0x40cd26
mov ecx, dword [esi + 0x7f4]
sub ecx, eax
mov eax, 0x8d3dcb09
imul ecx
add edx, ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
jb 0x40cd2b
call fcn.004402b5
mov eax, dword [esi + 0x7f0]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push 0xffffffffffffffff
add eax, ebp
push 0
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], 0
push eax
mov byte [ecx + 4], 0
call fcn.00402ad0
mov ecx, ebx
call fcn.0042b950
add edi, 1
add ebp, 0x74
jmp 0x40ccd0
lea ecx, [esp + 0x74]
push ecx
mov ecx, ebx
call fcn.00429070
mov edi, dword [esp + 0x190]
test edi, edi
mov bl, al
je 0x40cdaa
mov ebp, dword [esp + 0x194]
cmp edi, ebp
mov esi, edi
je 0x40cda1
mov ecx, esi
call fcn.00410fc0
add esi, 0x8c
cmp esi, ebp
jne 0x40cd90
push edi
call fcn.0042f233
add esp, 4
mov al, bl
mov ecx, dword [esp + 0x17c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x164]
xor ecx, esp
call fcn.0044017c
add esp, 0x174
ret 0x10