Function at 0x40dee0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
xor edi, edi
push esi
mov esi, 0x16
push ebx
sub esp, 0x5c
mov dword [ebp - 0x38], 0x15
mov dword [ebp - 0x34], 0xffffffd5
mov dword [ebp - 0x40], edi
cmp byte [str.Architecture], 0
mov edx, dword [0x42939c]
je 0x40df1b
lea eax, [edx + 0x54f23547]
mov dword [0x42986c], eax
mov eax, dword [0x42986c]
xor edx, 0x2706ec22
mov dword [0x42939c], edx
add eax, 0x46511106
mov dword [0x42986c], eax
mov dword [esp], eax
call fcn.0041270c
mov eax, dword [ebp - 0x40]
mov ebx, dword [ebp + eax*4 - 0x38]
add ebx, esi
mov esi, ebx
test eax, eax
jne 0x40df56
mov dword [ebp - 0x40], 1
jmp 0x40df01
add dword [0x42986c], 0x4d5b5ba3
xor esi, esi
xor edi, edi
mov dword [ebp - 0x30], 0xe
mov dword [ebp - 0x2c], 0x49
mov dword [ebp - 0x28], 0xffffffa9
mov eax, dword [0x42986c]
lea edx, [eax + 0x7851efac]
add eax, 0x39ecba35
imul eax, eax, 0x645fec75
mov dword [0x42986c], edx
mov dword [0x42939c], eax
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov dword [esp], str.Asynchronous_requests_are_not_valid_for_this_operation.
call fcn.0040eaac
sub edi, dword [ebp + esi*4 - 0x30]
inc esi
mov dword [ebp - 0x3c], edi
cmp esi, 3
jne 0x40df79
or dword [0x42986c], 0x239c42b2
call dword [sym.imp.USER32.dll_GetShellWindow]
imul eax, dword [0x42939c], 0xa5814657
cmp dword [0x4281c0], 0
mov dword [0x42986c], eax
jne 0x40e5b8
sub eax, 0x48b58594
mov dword [0x42939c], eax
and eax, 0x14c3fcec
mov dword [0x42986c], eax
call fcn.00411c14
xor eax, eax
xor dword [0x42986c], 0x54b380ea
mov esi, dword fs:[0x30]
cmp byte [eax + str.The_client_certificate_used_for_authentication_was_not_trusted.], 0
je 0x40e038
inc eax
cmp eax, 0x1d7d
jne 0x40e013
call fcn.0040ed24
imul eax, dword [0x42939c], 0x78755d3e
mov dword [0x42939c], eax
mov eax, dword [0x42986c]
mov edi, dword [esi + 0xc]
mov ecx, str.RtlpQueryRunLevel
mov esi, 0xfb3
or dword [0x42939c], 0x3f39dd9b
lea edx, [eax + 0x700871fd]
mov dword [0x42986c], edx
movzx eax, word [ecx]
add ecx, 2
test ax, ax
je 0x40e08d
add esi, eax
cmp esi, 0x10d0
jbe 0x40e060
mov dword [esp + 8], str.Architecture
mov dword [esp + 4], edx
mov dword [esp], str.Asynchronous_requests_are_not_valid_for_this_operation.
call fcn.004120e4
mov eax, dword [0x42939c]
mov edi, dword [edi + 0xc]
xor esi, esi
and eax, 0xed51d5d1
mov dword [0x42986c], eax
cmp dword [edi + 0x18], 0
je 0x40e15e
xor eax, eax
cmp byte [eax + str.The_client_certificate_used_for_authentication_was_not_trusted.], 0
je 0x40e0c8
inc eax
cmp eax, 0x1392
jne 0x40e0ad
or dword [0x42939c], 0xeec29134
mov eax, dword [0x42939c]
and eax, 0xadb81a2e
or eax, 0xc001226
xor eax, 0x6db8eb18
lea edx, [eax - 0x3d885cea]
add eax, 0x213babf8
or eax, 0x61d9feef
mov dword [0x42986c], edx
mov dword [0x42939c], eax
call dword [sym.imp.USER32.dll_GetForegroundWindow]
mov eax, dword [0x42986c]
mov esi, dword [edi + 0x18]
and eax, 0x5a35c19e
mov edx, eax
mov dword [0x42986c], eax
or edx, 0xa5565c4
mov dword [0x42939c], edx
mov edx, dword [esi + 0x3c]
mov edx, dword [esi + edx + 0x78]
test edx, edx
je 0x40e157
lea ebx, [esi + edx]
xor eax, 0x1f409510
mov edx, dword [ebx + 0xc]
mov dword [0x42939c], eax
add edx, esi
mov eax, dword [edx]
or eax, 0x20202020
cmp eax, 0x6c64746e
jne 0x40e157
mov eax, dword [edx + 4]
or eax, 0x20202020
cmp eax, 0x6c642e6c
je 0x40e19a
mov edi, dword [edi]
jmp 0x40e0a1
test ebx, ebx
jne 0x40e19a
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [esp], str.SdbpCheckMatchingDir
xor esi, esi
call ebx
push ecx
and dword [0x42939c], 0xebea35a2
mov dword [esp], str.SdbpCheckMatchingDir
call ebx
push ebx
mov dword [ebp - 0x40], esi
and dword [0x42939c], 0xebea35a2
jmp 0x40e5b8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov eax, dword [ebx + 0x1c]
mov dword [0x42b13c], esi
mov edi, dword [ebx + 0x18]
add eax, esi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebx + 0x20]
add eax, esi
mov dword [ebp - 0x44], eax
mov eax, dword [ebx + 0x24]
add eax, esi
mov dword [ebp - 0x48], eax
mov edx, str.Architecture
mov ecx, 0xe45
movzx eax, byte [edx]
inc edx
test al, al
je 0x40e1e2
add ecx, eax
cmp ecx, 0x157d
jbe 0x40e1cb
call fcn.0040f2b4
mov eax, dword [0x42939c]
dec edi
xor eax, 0x1cdde87e
mov dword [0x42986c], eax
call fcn.0040f07c
mov eax, dword [ebp - 0x44]
mov ebx, dword [eax + edi*4]
add ebx, esi
cmp word [ebx], 0x775a
jne 0x40e2d5
imul eax, dword [0x42986c], 0x289fe25d
mov dword [0x42939c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
or eax, 0xfe3b5529
imul edx, eax, 0xe8bc7627
mov dword [0x42939c], eax
mov dword [0x42986c], edx
mov dword [esp], eax
call fcn.00414fa4
mov eax, dword [0x42986c]
and eax, 0xa9642d9e
or eax, 0x511b5f40
mov dword [0x42939c], eax
imul eax, eax, 0xa73a5481
mov dword [0x42986c], eax
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov edx, str.The_client_certificate_used_for_authentication_was_not_trusted.
add eax, 0x41d4e202
mov dword [0x42986c], eax
mov al, byte [edx]
test al, al
je 0x40e28d
sub eax, 0x30
cmp al, 9
jbe 0x40e28a
or dword [0x42939c], 0x211df90a
jmp 0x40e28d
inc edx
jmp 0x40e271
sub dword [0x42939c], 0x38f09ee2
mov eax, dword [ebp - 0x3c]
lea edx, [eax*8 + 0x4281c4]
mov dword [ebp - 0x50], edx
mov dword [esp], ebx
call fcn.0040de34
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x50]
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0x226
mov dword [ecx*8 + 0x4281c4], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x4c]
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
mov dword [edx + 4], eax
je 0x40e2dd
test edi, edi
jne 0x40e1c1
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov dword [ebp - 0x3c], edx
mov dword [0x4281c0], eax
mov eax, dword [0x4281c0]
dec eax
cmp dword [ebp - 0x3c], eax
jae 0x40e5b2
mov eax, dword [0x42939c]
or eax, 0xfaa150ca
mov dword [0x42986c], eax
call fcn.00413854
xor eax, eax
cmp word [eax + str.Asynchronous_requests_are_not_valid_for_this_operation.], 0
je 0x40e332
add eax, 2
cmp eax, 0xce2
jne 0x40e30f
imul eax, dword [0x42939c], 0xddda3851
mov dword [0x42939c], eax
mov eax, dword [0x42939c]
and eax, 0x87de6061
or eax, 0x50eacd6f
mov dword [0x42986c], eax
call fcn.00410a7c
xor eax, eax
cmp word [eax + str.RtlpQueryRunLevel], 0
je 0x40e370
add eax, 2
cmp eax, 0x3e12
jne 0x40e34d
mov eax, dword [0x42986c]
sub eax, 0x4545867e
mov dword [0x42939c], eax
imul eax, dword [0x42986c], 0x22c8dbed
mov edx, str.The_client_certificate_used_for_authentication_was_not_trusted.
mov ecx, 0x3cf
xor eax, 0xa59fadad
mov dword [0x42986c], eax
movzx eax, byte [edx]
inc edx
test al, al
je 0x40e3b9
add ecx, eax
cmp ecx, 0x1fe5
jbe 0x40e38e
mov eax, dword [0x42939c]
mov dword [esp], str.RtlpQueryRunLevel
mov dword [esp + 8], eax
mov dword [esp + 4], eax
call fcn.0040eaac
mov eax, dword [0x42939c]
xor esi, esi
mov edx, eax
and eax, 0xc0d1424c
and edx, 0x53062169
mov dword [0x42939c], eax
mov dword [0x42986c], edx
call fcn.0040f07c
mov eax, dword [ebp - 0x3c]
not eax
add eax, dword [0x4281c0]
cmp esi, eax
jae 0x40e5aa
mov eax, dword [esi*8 + 0x4281c8]
lea ebx, [esi + 1]
cmp dword [esi*8 + 0x4281d0], eax
jae 0x40e5a3
mov dword [ebp - 0x24], 0x40
xor edi, edi
mov ecx, 0x3e
mov dword [ebp - 0x20], 0xf
mov dword [ebp - 0x1c], 0xffffff74
mov eax, dword [0x42939c]
mov dword [ebp - 0x44], ecx
mov dword [esp + 8], eax
mov eax, dword [0x42986c]
mov dword [esp], str.Asynchronous_requests_are_not_valid_for_this_operation.
mov dword [esp + 4], eax
call fcn.0040eaac
mov eax, dword [0x42939c]
or eax, 0xd4e03bed
mov dword [0x42986c], eax
call dword [sym.imp.USER32.dll_GetMessageTime]
lea edx, [eax + 0x1a460330]
add eax, 0x5250148f
mov dword [0x42986c], edx
mov dword [0x42939c], eax
mov dword [esp + 8], str.The_client_certificate_used_for_authentication_was_not_trusted.
mov dword [esp + 4], edx
mov dword [esp], str.Asynchronous_requests_are_not_valid_for_this_operation.
call fcn.004120e4
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp + edi*4 - 0x24]
inc edi
or dword [0x42939c], 0x7f02e2d1
mov dword [ebp - 0x44], ecx
cmp edi, 3
jne 0x40e423
xor eax, eax
cmp byte [eax + str.Architecture], 0
je 0x40e4c0
inc eax
cmp eax, 0x410
jne 0x40e4a3
or dword [0x42986c], 0x930982d4
jmp 0x40e4c7
cmp eax, 0x213
jle 0x40e4cc
call fcn.0040f2b4
mov eax, dword [0x42986c]
xor eax, 0xc1c67de1
mov dword [0x42939c], eax
and eax, 0xe1b855a8
mov dword [0x42986c], eax
call fcn.00414db0
mov eax, dword [0x42986c]
mov ecx, dword [ebx*8 + 0x4281bc]
and eax, 0x63385bcf
mov dword [ebp - 0x48], ecx
add eax, 0x18bd6532
mov dword [0x42986c], eax
and eax, 0x257fb247
mov dword [0x42939c], eax
call fcn.00410f64
mov dword [esp], 0x153c
call dword [sym.imp.USER32.dll_GetWindowTextLengthW]
push eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov edi, dword [ebx*8 + 0x4281c0]
add eax, esi
cmp byte [str.The_client_certificate_used_for_authentication_was_not_trusted.], 0
mov eax, dword [eax*8 + 0x4281c4]
mov dword [ebx*8 + 0x4281c4], ecx
mov dword [ebx*8 + 0x4281bc], eax
mov eax, dword [ebx*8 + 0x4281c8]
mov dword [ebx*8 + 0x4281c0], eax
je 0x40e574
call fcn.0040f2b4
mov eax, dword [0x42986c]
add eax, 0x61d19953
mov dword [0x42939c], eax
mov eax, dword [0x42986c]
or eax, 0x1050d24a
xor eax, 0xf30925f3
mov dword [0x42986c], eax
call fcn.00410e58
mov eax, dword [0x42986c]
mov dword [ebx*8 + 0x4281c8], edi
xor eax, 0x463262d5
mov dword [0x42939c], eax
mov esi, ebx
jmp 0x40e3dd
inc dword [ebp - 0x3c]
jmp 0x40e2ea
call dword [sym.imp.USER32.dll_GetMessageTime]
mov eax, dword [ebp - 0x40]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret