Function at 0x40384c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x4a4
push edi
mov edi, ecx
cmp dword [edi + 0x14], 0
je 0x403865
mov eax, 0x40000
jmp 0x403e33
cmp byte [edi + 0x2c], 0
je 0x403875
mov eax, 0x50000
jmp 0x403e33
push ebp
mov ebp, dword [esp + 0x4bc]
push esi
xor esi, esi
push 0xc
mov dword [esp + 0x2c], esi
pop eax
cmp dword [edi], esi
je 0x403895
cmp ebp, 4
cmovne esi, eax
mov dword [esp + 0x28], esi
push ebx
push dword [esp + 0x4b8]
lea eax, [esp + 0x3b4]
push eax
call fcn.00413880
mov al, byte [esp + 0x3b8]
pop ecx
pop ecx
test al, al
je 0x403e2b
lea ecx, [esp + 0x3b0]
cmp al, 0x5c
jne 0x4038c9
mov byte [ecx], 0x2f
inc ecx
mov al, byte [ecx]
test al, al
jne 0x4038c2
push 8
pop ebx
cmp ebp, 4
jne 0x4038f7
lea eax, [esp + 0x3b0]
push eax
call fcn.00413450
pop ecx
cmp byte [esp + eax + 0x3af], 0x2f
je 0x4038f7
mov byte [esp + 0x13], 1
jmp 0x403917
mov byte [esp + 0x13], 0
mov dword [esp + 0x28], ebx
cmp ebp, 4
je 0x403917
lea eax, [esp + 0x3b0]
push eax
call fcn.004043b8
pop ecx
test al, al
je 0x40391d
xor ebx, ebx
mov dword [esp + 0x28], ebx
cmp ebp, 2
jne 0x403932
push dword [esp + 0x4bc]
mov ecx, edi
call fcn.004060c0
jmp 0x40397a
cmp ebp, 1
jne 0x40394e
push dword [esp + 0x4c0]
mov ecx, edi
push dword [esp + 0x4c0]
call fcn.0040613f
jmp 0x40397a
cmp ebp, 3
jne 0x40396a
push dword [esp + 0x4c0]
mov ecx, edi
push dword [esp + 0x4c0]
call fcn.0040626d
jmp 0x40397a
cmp ebp, 4
jne 0x403e2b
mov ecx, edi
call fcn.00406018
test eax, eax
jne 0x403e30
and dword [esp + 0x3ac], eax
lea eax, [esp + 0x88]
push 0x427905
push eax
call fcn.00413880
lea eax, [esp + 0x3b8]
push eax
lea eax, [esp + 0x1a4]
push eax
call fcn.00413880
lea eax, [esp + 0x1a8]
push eax
call fcn.00413450
add esp, 0x14
mov dword [esp + 0x68], eax
cmp byte [esp + 0x13], 0
je 0x4039e3
lea eax, [esp + 0x198]
push 0x428064
push eax
call fcn.00413890
inc dword [esp + 0x70]
pop ecx
pop ecx
lea eax, [esp + 0x29c]
push 0x427905
push eax
call fcn.00413880
xor eax, eax
mov dword [esp + 0x3a8], 1
pop ecx
pop ecx
mov word [esp + 0x7a], ax
xor edx, edx
mov eax, 0xb17
mov dword [esp + 0x194], edx
push 0x14
mov word [esp + 0x54], ax
pop eax
mov word [esp + 0x52], ax
mov eax, dword [edi + 0x68]
push 8
mov dword [esp + 0x5c], eax
pop eax
mov dword [esp + 0x74], edx
mov dword [esp + 0x3a8], edx
mov dword [esp + 0x5c], edx
mov word [esp + 0x54], ax
cmp dword [edi], edx
je 0x403a53
cmp ebp, 4
je 0x403a53
push 9
pop eax
mov word [esp + 0x54], ax
mov word [esp + 0x7c], ax
lea ecx, [edi + 0x70]
movzx eax, bx
mov dword [esp + 0x34], eax
mov word [esp + 0x56], ax
test ebx, ebx
jne 0x403a7d
mov eax, dword [ecx]
mov dword [esp + 0x30], ecx
test eax, eax
js 0x403a7d
add eax, esi
mov dword [esp + 0x60], eax
jmp 0x403a85
mov dword [esp + 0x60], edx
mov dword [esp + 0x30], ecx
mov eax, dword [ecx]
mov dword [esp + 0x64], eax
xor eax, eax
mov word [esp + 0x78], ax
mov eax, dword [edi + 0x4c]
mov dword [esp + 0x80], eax
mov eax, dword [edi + 0x10]
add eax, dword [edi + 0x18]
mov ebx, dword [edi + 0x58]
mov ecx, ebx
mov edx, dword [edi + 0x5c]
mov dword [esp + 0x84], eax
lea eax, [esp + 0x14]
mov dword [esp + 0x18c], eax
lea eax, [esp + 0x44]
mov dword [esp + 0x190], eax
mov al, byte [edi + 0x58]
mov byte [esp + 0x19], al
mov eax, edx
shrd ecx, eax, 8
mov eax, edx
mov dword [esp + 0x6c], 0x11
mov byte [esp + 0x1a], cl
mov ecx, ebx
shrd ecx, eax, 0x10
mov al, byte [edi + 0x50]
shrd ebx, edx, 0x18
mov edx, dword [edi + 0x54]
mov byte [esp + 0x1d], al
mov eax, edx
mov byte [esp + 0x1b], cl
mov byte [esp + 0x1c], bl
mov ebx, dword [edi + 0x50]
mov ecx, ebx
shrd ecx, eax, 8
mov eax, edx
mov dword [esp + 0x14], 0xd5455
mov byte [esp + 0x1e], cl
mov ecx, ebx
shrd ecx, eax, 0x10
mov al, byte [edi + 0x60]
shrd ebx, edx, 0x18
mov edx, dword [edi + 0x64]
mov byte [esp + 0x21], al
mov eax, edx
mov byte [esp + 0x1f], cl
mov byte [esp + 0x20], bl
mov ebx, dword [edi + 0x60]
mov ecx, ebx
shrd ecx, eax, 8
push 9
mov byte [esp + 0x26], cl
mov eax, edx
pop esi
mov ecx, ebx
mov dword [esp + 0x70], esi
shrd ecx, eax, 0x10
push esi
lea eax, [esp + 0x18]
mov byte [esp + 0x1c], 7
push eax
shrd ebx, edx, 0x18
lea eax, [esp + 0x4c]
mov byte [esp + 0x2b], cl
push eax
mov byte [esp + 0x30], bl
call fcn.0040f770
mov eax, dword [esp + 0x19c]
push edi
push 0x4071c5
mov byte [eax + 2], 5
lea eax, [esp + 0x64]
push eax
call fcn.00406a87
add esp, 0x18
test eax, eax
je 0x403ba5
mov ecx, edi
call fcn.00405b27
mov eax, 0x400
jmp 0x403e30
mov eax, dword [esp + 0x6c]
add eax, 0x1e
add eax, dword [esp + 0x68]
add dword [edi + 0x18], eax
cmp dword [edi + 0x14], 0
je 0x403bc8
mov ecx, edi
call fcn.00405b27
mov eax, dword [edi + 0x14]
jmp 0x403e30
lea ebx, [edi + 0x30]
mov dword [edi + 0x34], 0x23456789
mov dword [ebx], 0x12345678
mov dword [edi + 0x38], 0x34567890
mov esi, dword [edi]
test esi, esi
je 0x403bf9
mov al, byte [esi]
test al, al
je 0x403bf9
push eax
push ebx
call fcn.004071e1
pop ecx
pop ecx
add esi, 1
jne 0x403be5
cmp byte [0x433638], 0
jne 0x403c19
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor esi, eax
push esi
call fcn.00413ac5
pop ecx
xor esi, esi
call fcn.00413aa4
sar eax, 7
mov byte [esp + esi + 0x38], al
inc esi
cmp esi, 0xc
jl 0x403c1b
mov eax, dword [esp + 0x58]
shr eax, 8
xor esi, esi
mov byte [esp + 0x43], al
movzx eax, byte [esp + esi + 0x38]
push eax
push ebx
call fcn.004072f7
mov byte [esp + esi + 0x40], al
inc esi
pop ecx
pop ecx
cmp esi, 0xc
jl 0x403c3a
cmp dword [edi], 0
je 0x403c6e
cmp ebp, 4
je 0x403c6e
push 0xc
lea eax, [esp + 0x3c]
mov ecx, edi
push eax
call fcn.00407226
add dword [edi + 0x18], 0xc
xor ebx, ebx
cmp dword [edi], ebx
je 0x403c7e
cmp ebp, 4
je 0x403c7e
xor eax, eax
inc eax
jmp 0x403c80
xor al, al
mov esi, dword [esp + 0x28]
mov byte [edi + 0x2d], al
cmp ebp, 4
je 0x403cb0
push 8
pop eax
cmp esi, eax
jne 0x403ca1
lea eax, [esp + 0x50]
mov ecx, edi
push eax
call fcn.00405b6b
jmp 0x403cac
test esi, esi
jne 0x403cb6
mov ecx, edi
call fcn.00405cd8
mov ebx, eax
jmp 0x403cb6
and dword [edi + 0x90], ebx
mov ecx, edi
mov byte [edi + 0x2d], 0
call fcn.00405b27
mov ecx, dword [edi + 0x90]
add dword [edi + 0x18], ecx
mov eax, dword [edi + 0x14]
test eax, eax
jne 0x403e30
test ebx, ebx
jne 0x403b9b
add ecx, dword [esp + 0x2c]
mov eax, dword [edi + 0x78]
cmp dword [esp + 0x60], ecx
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x30]
sete dl
mov dword [esp + 0x60], ecx
mov eax, dword [eax]
mov dword [esp + 0x64], eax
cmp byte [edi + 0x1c], bl
je 0x403d78
cmp dword [edi], ebx
je 0x403d0b
cmp ebp, 4
jne 0x403d78
mov eax, dword [esp + 0x34]
mov word [esp + 0x56], ax
mov ax, word [esp + 0x54]
test al, 1
jne 0x403d2a
mov ecx, 0xfff7
and ax, cx
mov word [esp + 0x54], ax
mov word [esp + 0x7c], ax
mov ecx, edi
mov eax, dword [esp + 0x84]
sub eax, dword [edi + 0x10]
push eax
call fcn.00406341
test al, al
je 0x403d6e
push edi
lea eax, [esp + 0x54]
push 0x4071c5
push eax
call fcn.00406a87
add esp, 0xc
test eax, eax
jne 0x403b9b
push dword [edi + 0x18]
mov ecx, edi
call fcn.00406341
test al, al
jne 0x403dbc
mov eax, 0x2000000
jmp 0x403e30
mov eax, dword [esp + 0x34]
cmp word [esp + 0x56], ax
jne 0x403e24
test esi, esi
jne 0x403d93
test dl, dl
je 0x403e24
push edi
lea eax, [esp + 0x54]
push 0x4071c5
push eax
call fcn.00406961
add esp, 0xc
test eax, eax
jne 0x403b9b
mov ax, word [esp + 0x7c]
add dword [edi + 0x18], 0x10
mov word [esp + 0x54], ax
mov eax, dword [edi + 0x14]
test eax, eax
jne 0x403e30
push dword [esp + 0x70]
call fcn.0040e98e
push dword [esp + 0x74]
mov esi, eax
push dword [esp + 0x198]
push esi
call fcn.0040f770
mov ebx, 0x360
mov dword [esp + 0x1a0], esi
push ebx
call fcn.0040e92d
mov esi, eax
lea eax, [esp + 0x64]
push ebx
push eax
push esi
call fcn.0040f770
mov ecx, dword [edi + 0x44]
add esp, 0x20
test ecx, ecx
jne 0x403e10
mov dword [edi + 0x44], esi
jmp 0x403e20
mov ecx, eax
mov eax, dword [ecx + 0x35c]
test eax, eax
jne 0x403e0e
mov dword [ecx + 0x35c], esi
xor eax, eax
jmp 0x403e30
mov eax, 0x4000000
jmp 0x403e30
mov eax, 0x10000
pop ebx
pop esi
pop ebp
pop edi
add esp, 0x4a4
ret 0x10