Function at 0x40af10
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
cmp dword [0x40f9a0], 0
jne 0x40b465
push ebp
mov ecx, 0x412980
mov ebp, esp
push edi
push esi
push ebx
mov ebx, 0x145e
sub esp, 0x5c
mov eax, dword fs:[0x30]
mov edx, dword [eax + 0xc]
movzx eax, word [ecx]
add ecx, 2
test ax, ax
je 0x40af58
add ebx, eax
cmp ebx, 0x1ce7
jbe 0x40af39
or dword [0x410f2c], 0x54719c9
mov eax, dword [0x410c74]
xor edi, edi
xor ebx, ebx
xor eax, 0xaeaa54fc
mov dword [0x410cf8], eax
imul eax, eax, 0x779f21a4
mov dword [0x410b58], eax
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov esi, dword [eax + 0x18]
test esi, esi
je 0x40b176
mov eax, dword [esi + 0x3c]
add eax, esi
mov dword [ebp - 0x2c], eax
xor eax, eax
cmp byte [eax + 0x412540], 0
je 0x40afb9
inc eax
cmp eax, 0x86e
jne 0x40af94
mov dword [esp + 4], str.result_out_of_range
mov dword [esp], str.result_out_of_range
call fcn.0040bc50
mov edx, dword [0x410b58]
mov edi, dword [0x410cd0]
mov dword [esp + 0x10], 0x412980
mov dword [esp], str.et_EE
mov eax, edx
mov dword [esp + 0xc], edi
and eax, 0x47d381e2
mov dword [esp + 4], edx
mov dword [ebp - 0x1c], eax
mov dword [0x410f2c], eax
lea eax, [edi - 0x242a04d]
mov dword [esp + 8], eax
mov dword [ebp - 0x24], eax
mov dword [0x410c74], eax
call fcn.0040d51c
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0x78]
mov dword [ebp - 0x30], eax
test eax, eax
je 0x40b167
mov dword [ebp - 0x2c], 0x22
mov ebx, str.wilActivity
movzx edx, word [ebx]
test dx, dx
je 0x40b125
add dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x1233
jbe 0x40b087
mov eax, dword [ebp - 0x1c]
mov dword [esp + 0x10], 0x412980
mov dword [esp + 8], edi
mov dword [esp + 0xc], eax
mov eax, dword [0x410b58]
mov dword [esp], str.et_EE
mov dword [esp + 4], eax
call fcn.0040d51c
mov eax, dword [ebp - 0x1c]
sub eax, 0x764ca7f9
mov dword [0x410cf8], eax
call fcn.0040bdd4
imul eax, dword [ebp - 0x24], 0xc30cb5d2
and eax, 0x40870000
mov dword [0x410c74], eax
jmp 0x40b125
mov ecx, str.message_size
mov eax, 0x801
movzx edx, word [ecx]
add ecx, 2
test dx, dx
je 0x40b0da
add eax, edx
cmp eax, 0x130f
jbe 0x40b091
mov edx, dword [0x410b58]
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], edi
mov dword [esp + 0x10], 0x412980
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp], str.result_out_of_range
call fcn.0040d51c
lea edx, [edi + 0x22bef1db]
mov dword [0x410b58], edx
mov edx, dword [0x410b58]
mov eax, dword [ebp - 0x24]
add ebx, 2
mov dword [esp + 0x10], str.message_size
mov dword [esp], str.kernelbase.dll
mov ecx, edx
mov dword [esp + 8], eax
imul edx, edx, 0x885c5d3f
and ecx, 0x6bf0a672
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ecx
mov dword [0x410cf8], ecx
mov dword [0x410b58], edx
call fcn.0040d51c
jmp 0x40b01f
mov eax, dword [0x410b58]
mov ebx, dword [ebp - 0x30]
lea edx, [eax + 0x1a1005db]
add ebx, esi
sub eax, 0x6ebdccdf
mov dword [0x410f2c], edx
mov edx, dword [ebx + 0xc]
mov dword [0x410cd0], eax
add edx, esi
mov eax, dword [edx]
or eax, 0x20202020
cmp eax, 0x6c64746e
jne 0x40b167
mov eax, dword [edx + 4]
or eax, 0x20202020
cmp eax, 0x6c642e6c
je 0x40b181
mov eax, dword [ebp - 0x20]
mov edi, esi
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
jmp 0x40af7c
xor eax, eax
test ebx, ebx
jne 0x40b183
jmp 0x40b45d
mov edi, esi
mov eax, dword [0x410f2c]
lea esi, [eax - 0x17804d2d]
mov eax, dword [0x410cd0]
xor esi, 0xc73e8861
mov dword [ebp - 0x1c], eax
or eax, 0x90ce37a2
mov dword [0x410f2c], esi
mov dword [0x410c74], eax
call fcn.0040de48
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 0x1c]
mov dword [0x411b54], edi
mov dword [ebp - 0x38], eax
mov eax, dword [ebx + 0x1c]
or edx, 0xf4febfb7
mov dword [0x410cf8], edx
add eax, edi
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx + 0x20]
add eax, edi
mov dword [ebp - 0x24], eax
xor eax, eax
cmp word [eax + 0x412980], 0
je 0x40b209
add eax, 2
cmp eax, 0x2ff4
jne 0x40b1de
or esi, 0x6aa9cc96
mov dword [ebp - 0x20], edx
call fcn.0040bdd4
mov dword [0x410f2c], esi
mov edx, dword [ebp - 0x20]
lea eax, [edx + 0x7b376692]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x410f2c]
lea esi, [eax - 0x244730ce]
mov dword [ebp - 0x20], eax
mov dword [0x410cd0], esi
call fcn.0040bdd4
mov eax, dword [ebx + 0x24]
add eax, edi
mov dword [ebp - 0x30], eax
xor eax, eax
cmp byte [eax + 0x412540], 0
je 0x40b253
inc eax
cmp eax, 0x12bd
jne 0x40b235
mov eax, dword [ebp - 0x20]
sub eax, 0x4275aefc
mov dword [0x410b58], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], esi
imul ebx, dword [0x410b58], 0x9d6aa90e
mov dword [esp + 0x10], str.et_EE
and eax, 0xccc192aa
mov dword [esp], str.kernelbase.dll
or eax, 0xc4c092a2
mov dword [ebp - 0x1c], eax
mov dword [0x410b58], eax
mov eax, dword [ebp - 0x2c]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [0x410f2c], ebx
and ebx, 0x8debb185
call fcn.0040d51c
mov esi, dword [ebp - 0x38]
mov dword [0x410c74], ebx
xor ebx, ebx
dec esi
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx + esi*4]
add eax, edi
cmp word [eax], 0x775a
jne 0x40b331
mov dword [esp], eax
lea edx, [ebx*8 + 0x40f9a4]
mov dword [ebp - 0x2c], edx
call fcn.0040ae4c
mov edx, dword [ebp - 0x2c]
mov dword [ebx*8 + 0x40f9a4], eax
xor eax, eax
cmp word [eax + str.message_size], 0
je 0x40b2fb
add eax, 2
cmp eax, 0x352a
jne 0x40b2da
mov eax, dword [ebp - 0x20]
add eax, 0x255a8d29
mov dword [0x410c74], eax
mov eax, dword [0x410c74]
inc ebx
mov ecx, eax
sub eax, 0x2e26d3ad
mov dword [0x410c74], eax
mov eax, dword [ebp - 0x30]
and ecx, 0xfb8da9c2
mov dword [0x410f2c], ecx
mov ecx, dword [ebp - 0x3c]
movzx eax, word [eax + esi*2]
mov eax, dword [ecx + eax*4]
mov dword [edx + 4], eax
cmp ebx, 0x226
je 0x40b33f
lea eax, [esi - 1]
test esi, esi
je 0x40b33f
mov esi, eax
jmp 0x40b2ad
mov esi, dword [0x410c74]
mov eax, dword [ebp - 0x1c]
xor edx, edx
xor ecx, ecx
mov dword [0x40f9a0], ebx
dec ebx
imul edi, esi, 0xca4dc584
sub eax, 0x3e0ca486
mov dword [0x410cd0], eax
xor eax, 0x45593396
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], edi
test ebx, ebx
je 0x40b3df
mov edi, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x28], edi
mov edi, esi
and edi, 0xae3c5513
mov dword [ebp - 0x24], edi
mov ecx, dword [eax*8 + 0x40f9a8]
inc eax
mov edi, dword [eax*8 + 0x40f9a8]
cmp edi, ecx
jae 0x40b3d6
mov edx, dword [eax*8 + 0x40f99c]
mov dword [eax*8 + 0x40f9a0], edi
mov edi, dword [ebp - 0x24]
mov dword [eax*8 + 0x40f9a8], ecx
mov dword [ebp - 0x20], edx
mov edx, dword [eax*8 + 0x40f9a4]
mov dword [ebp - 0x34], edi
mov edi, dword [ebp - 0x20]
mov dword [eax*8 + 0x40f99c], edx
mov edx, dword [ebp - 0x2c]
mov dword [eax*8 + 0x40f9a4], edi
mov dword [ebp - 0x28], edx
mov dl, 1
cmp eax, ebx
jb 0x40b385
dec ebx
mov cl, 1
jmp 0x40b36e
test dl, dl
je 0x40b3eb
mov eax, dword [ebp - 0x34]
mov dword [0x410cf8], eax
test cl, cl
je 0x40b3f7
mov eax, dword [ebp - 0x28]
mov dword [0x410b58], eax
mov edx, str.message_size
mov ecx, 0xa25
movzx eax, word [edx]
add edx, 2
test ax, ax
je 0x40b43b
add ecx, eax
cmp ecx, 0x10c6
jbe 0x40b401
mov dword [esp + 4], 0x412980
add esi, 0x5acde7d6
mov dword [esp], 0x412980
call fcn.0040bc50
mov dword [0x410cf8], esi
call fcn.0040de48
mov eax, dword [0x410b58]
mov edx, eax
or eax, 0x45a5428d
xor edx, 0x404ae664
mov dword [0x410c74], eax
mov eax, 1
mov dword [0x410f2c], edx
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 1
ret