Function at 0x41f5d9
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x13c
mov eax, dword [0x44e4f8]
xor eax, esp
mov dword [esp + 0x138], eax
push ebx
push esi
push edi
mov edi, ecx
lea ecx, [edi + 8]
mov eax, dword [ecx]
mov esi, edx
mov dword [esp + 0x18], edi
mov dword [esp + 0x34], esi
call dword [eax + 0x14]
test esi, esi
je 0x41fe6d
lea eax, [esp + 0x1c]
call fcn.0040f705
mov ecx, esi
lea esi, [esp + 0x20]
call fcn.00407f94
mov esi, dword [esp + 0x20]
mov ebx, dword [esi]
lea eax, [esp + 0x1c]
call fcn.00403eae
push eax
push 0x1402
mov ecx, esi
call dword [ebx]
test eax, eax
jne 0x41fe5b
push 7
pop esi
xor ebx, ebx
lea eax, [esp + 0x118]
mov dword [esp + 0xc0], esi
mov dword [esp + 0xbc], ebx
mov word [esp + 0xac], bx
call fcn.0040f0c8
lea eax, [esp + 0x1c]
call fcn.0041e17c
mov edx, dword [eax]
lea ecx, [esp + 0x118]
push ecx
push 4
mov ecx, eax
call dword [edx + 0x18]
test eax, eax
jne 0x41fe40
lea eax, [esp + 0x118]
call fcn.0041e17c
cmp eax, 1
jne 0x41fe40
push 0xffffffffffffffff
lea eax, [esp + 0x11c]
call fcn.0041078d
lea ecx, [esp + 0xac]
push ecx
call fcn.004022c9
lea eax, [esp + 0x118]
call fcn.0040f0e1
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0xac]
mov dword [esp + 0x18], 0x2e
call fcn.00403a82
cmp eax, 0xffffffff
mov dword [esp + 0x14], eax
mov dword [esp + 0x88], esi
mov dword [esp + 0x84], ebx
mov word [esp + 0x74], bx
mov dword [esp + 0xa4], esi
mov dword [esp + 0xa0], ebx
mov word [esp + 0x90], bx
jne 0x41f75a
xor edi, edi
inc edi
push ebx
push edi
lea esi, [esp + 0x94]
call fcn.00402032
push ebx
push edi
lea esi, [esp + 0x78]
call fcn.00402032
push ebx
push edi
lea esi, [esp + 0xb0]
call fcn.00402032
lea eax, [esp + 0x20]
call fcn.004165c9
lea eax, [esp + 0x1c]
call fcn.004165c9
mov eax, edi
jmp 0x41fe70
push eax
lea eax, [esp + 0xac]
push eax
lea eax, [esp + 0x40]
call fcn.0040d569
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [esp + 0x74]
push ecx
xor ebx, ebx
call fcn.004022c9
push ebx
push 1
lea esi, [esp + 0x40]
call fcn.00402032
push 0xffffffffffffffff
lea eax, [esp + 0x3c]
mov dword [esp + 0x50], ebx
mov word [esp + 0x40], bx
mov ebx, dword [esp + 0x18]
push eax
lea eax, [esp + 0xb0]
mov dword [esp + 0x58], 7
call fcn.004022c9
push 0xffffffffffffffff
lea eax, [esp + 0x90]
push eax
xor ebx, ebx
lea eax, [esp + 0x40]
call fcn.004022c9
push ebx
push 1
lea esi, [esp + 0x40]
call fcn.00402032
mov eax, str.cmd.exe__c_del__
lea ecx, [esp + 0xc4]
call fcn.00401d8b
lea eax, [esp + 0xc4]
lea ecx, [esp + 0x8c]
mov byte [esp + 0x13], bl
call fcn.0040d2f2
test al, al
jne 0x41f837
push 0x443d1c
lea eax, [esp + 0x90]
call fcn.0040d338
test al, al
pop ecx
je 0x41fe2a
push 0xffffffffffffffff
lea eax, [esp + 0x90]
push eax
lea eax, [esp + 0xcc]
call fcn.004022c9
mov byte [esp + 0x13], 1
jmp 0x41f961
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x74]
mov dword [esp + 0x70], 7
mov dword [esp + 0x6c], ebx
mov word [esp + 0x5c], bx
mov dword [esp + 0x18], 0x2e
call fcn.00403a82
cmp eax, 0xffffffff
jne 0x41f876
lea esi, [esp + 0x54]
xor edi, edi
inc edi
push ebx
push edi
call fcn.00402032
jmp 0x41fe2d
lea edi, [eax + 1]
lea eax, [esp + 0x38]
push eax
or edx, 0xffffffff
mov ecx, edi
lea eax, [esp + 0x74]
call fcn.0040d599
pop ecx
push 0xffffffffffffffff
lea ecx, [esp + 0x58]
push ecx
xor ebx, ebx
call fcn.004022c9
push ebx
push 1
lea esi, [esp + 0x40]
call fcn.00402032
lea eax, [esp + 0x70]
push edi
push eax
lea eax, [esp + 0x40]
call fcn.0040d569
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [esp + 0x74]
push ecx
call fcn.004022c9
xor edi, edi
push ebx
inc edi
push edi
lea esi, [esp + 0x40]
call fcn.00402032
mov dword [esp + 0x14], edi
push dword [esp + 0x14]
lea ecx, [esp + 0x3c]
push 0x445840
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], ebx
mov word [esp + 0x44], bx
call fcn.0040d608
lea eax, [esp + 0x40]
push 2
push eax
call fcn.0040e4f5
mov eax, dword [esp + 0x68]
add esp, 0x10
cmp dword [esp + 0x6c], 8
jae 0x41f917
lea eax, [esp + 0x58]
mov edi, dword [esp + 0x68]
mov ecx, dword [esp + 0x4c]
push eax
lea eax, [esp + 0x3c]
call fcn.00403b18
test eax, eax
push ebx
lea esi, [esp + 0x3c]
push 1
je 0x41f94c
call fcn.00402032
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 0x3e7
jbe 0x41f8d6
jmp 0x41f863
call fcn.00402032
push ebx
push 1
lea esi, [esp + 0x5c]
call fcn.00402032
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x84]
cmp eax, ebx
je 0x41f991
lea edi, [eax - 1]
lea eax, [esp + 0x70]
call fcn.00405c6c
cmp word [eax], 0x2e
je 0x41f98d
push 0x4438d4
lea eax, [esp + 0x74]
push eax
call fcn.00402bfd
mov edi, dword [esp + 0x18]
cmp byte [esp + 0x13], bl
je 0x41fa4f
cmp dword [esp + 0xa4], 8
mov eax, dword [esp + 0x90]
mov dword [esp + 0x50], 7
mov dword [esp + 0x4c], ebx
mov word [esp + 0x3c], bx
jae 0x41f9c4
lea eax, [esp + 0x90]
push eax
push 1
push 0x44584c
lea ecx, [esp + 0x44]
call fcn.0040d608
add esp, 0xc
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x78]
call fcn.00402bc6
pop ecx
pop ecx
lea eax, [esp + 0x14]
call fcn.0040f705
lea eax, [esp + 0x1c]
call fcn.0041e17c
mov esi, dword [eax]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x14]
call fcn.00403eae
mov ecx, dword [esp + 0x18]
push eax
push 1
lea eax, [esp + 0x5c]
push eax
call dword [esi + 0x1c]
test eax, eax
jne 0x41fa88
lea eax, [esp + 0x14]
call fcn.004327c7
test al, al
jne 0x41fa88
lea eax, [esp + 0x14]
call fcn.004165c9
push ebx
push 1
lea esi, [esp + 0x5c]
call fcn.00402032
push ebx
push 1
lea esi, [esp + 0x40]
call fcn.00402032
mov eax, dword [esp + 0x84]
cmp eax, 1
mov dword [esp + 0x114], 7
mov dword [esp + 0x110], ebx
mov word [esp + 0x100], bx
jae 0x41faa6
mov eax, 0x44585c
lea esi, [esp + 0xfc]
call fcn.00401f18
jmp 0x41fad5
lea eax, [esp + 0x14]
call fcn.004165c9
push ebx
push 1
lea esi, [esp + 0x5c]
call fcn.00402032
lea esi, [esp + 0x38]
jmp 0x41f867
dec eax
push eax
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x40]
call fcn.0040d569
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [esp + 0x100]
push ecx
xor ebx, ebx
call fcn.004022c9
push ebx
push 1
lea esi, [esp + 0x40]
call fcn.00402032
lea eax, [esp + 0x18]
mov dword [esp + 0x14], ebx
mov dword [edi + 0x58], ebx
mov dword [edi + 0x5c], ebx
mov dword [esp + 0xf8], 7
mov dword [esp + 0xf4], ebx
mov word [esp + 0xe4], bx
mov byte [esp + 0x13], bl
call fcn.00403eae
mov dword [esp + 0x24], eax
cmp dword [esp + 0x14], ebx
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], ebx
mov word [esp + 0x58], bx
jne 0x41fb31
mov eax, 0x445868
lea esi, [esp + 0x54]
call fcn.00401f18
jmp 0x41fb5f
cmp dword [esp + 0xa4], 8
mov eax, dword [esp + 0x90]
jae 0x41fb49
lea eax, [esp + 0x90]
push eax
push dword [esp + 0x18]
lea ecx, [esp + 0x5c]
push 0x44584c
call fcn.0040d608
add esp, 0xc
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x78]
call fcn.00402bc6
pop ecx
pop ecx
push 0xffffffffffffffff
lea ecx, [esp + 0xe4]
push ecx
xor ebx, ebx
call fcn.004022c9
push ebx
push 1
lea esi, [esp + 0x40]
call fcn.00402032
lea eax, [esp + 0x18]
call fcn.0040f705
lea eax, [esp + 0x1c]
call fcn.0041e17c
push dword [esp + 0x24]
mov edx, dword [eax]
push ebx
lea ecx, [esp + 0xe8]
push ecx
mov ecx, eax
call dword [edx + 0x1c]
test eax, eax
jne 0x41fd89
lea eax, [esp + 0x18]
call fcn.004327c7
test al, al
jne 0x41fd89
lea eax, [esp + 0xa8]
lea ecx, [esp + 0xe0]
call fcn.0040d2f2
test al, al
je 0x41fbec
mov byte [esp + 0x13], 1
cmp dword [esp + 0x14], ebx
jne 0x41fc24
push ecx
lea eax, [esp + 0x1c]
mov esi, esp
call fcn.0042bd25
call fcn.0041fe85
test al, al
je 0x41fce0
push ecx
lea eax, [esp + 0x1c]
mov esi, esp
call fcn.0042bd25
call fcn.0041fe85
test al, al
je 0x41fce0
lea eax, [esp + 0x118]
call fcn.0040f0c8
lea eax, [esp + 0x1c]
call fcn.0041e17c
mov edx, dword [eax]
lea ecx, [esp + 0x118]
push ecx
push 7
mov ecx, eax
call dword [edx + 0x18]
test eax, eax
jne 0x41fd15
lea eax, [esp + 0x118]
call fcn.0041e17c
cmp eax, 3
jne 0x41fd15
lea ecx, [esp + 0x118]
call fcn.0040dd4d
mov esi, eax
mov eax, ecx
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], edx
call fcn.0040f0e1
add dword [edi + 0x58], esi
mov eax, dword [esp + 0x2c]
adc dword [edi + 0x5c], eax
lea eax, [esp + 0x28]
push eax
lea eax, [edi + 0x44]
call fcn.0041ff20
lea eax, [esp + 0x18]
lea esi, [edi + 0x34]
push eax
call fcn.0041fe93
mov eax, esi
call fcn.0041808d
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx]
push ebx
push ebx
push ebx
push eax
call dword [edx + 0x14]
cmp eax, ebx
jne 0x41fd11
inc dword [esp + 0x14]
lea eax, [esp + 0x18]
call fcn.004165c9
push ebx
push 1
lea esi, [esp + 0x5c]
call fcn.00402032
xor ebx, ebx
jmp 0x41fb0a
lea eax, [esp + 0x18]
call fcn.004165c9
push ebx
lea esi, [esp + 0x58]
xor edi, edi
inc edi
push edi
call fcn.00402032
push ebx
push edi
lea esi, [esp + 0xe8]
call fcn.00402032
lea esi, [esp + 0xfc]
jmp 0x41f86a
mov edi, eax
jmp 0x41fd24
lea eax, [esp + 0x118]
call fcn.0040f0e1
xor edi, edi
inc edi
lea eax, [esp + 0x18]
call fcn.004165c9
push ebx
push 1
lea esi, [esp + 0x5c]
call fcn.00402032
push ebx
push 1
lea esi, [esp + 0xe8]
call fcn.00402032
push ebx
push 1
lea esi, [esp + 0x104]
call fcn.00402032
push ebx
push 1
lea esi, [esp + 0xcc]
call fcn.00402032
push ebx
push 1
lea esi, [esp + 0x94]
call fcn.00402032
push ebx
push 1
lea esi, [esp + 0x78]
call fcn.00402032
push ebx
push 1
jmp 0x41f735
lea eax, [esp + 0x18]
call fcn.004165c9
cmp dword [esp + 0x14], ebx
push ebx
lea esi, [esp + 0x58]
je 0x41fcee
push 1
call fcn.00402032
cmp byte [esp + 0x13], bl
jne 0x41fdb3
xor edi, edi
inc edi
jmp 0x41fd39
lea eax, [edi + 0x34]
call fcn.0041808d
cmp eax, 2
jb 0x41fdae
xor edi, edi
push ebx
inc edi
push edi
lea esi, [esp + 0xe8]
call fcn.00402032
push ebx
push edi
lea esi, [esp + 0x104]
call fcn.00402032
push ebx
push edi
lea esi, [esp + 0xcc]
call fcn.00402032
push ebx
push edi
lea esi, [esp + 0x94]
call fcn.00402032
push ebx
push edi
lea esi, [esp + 0x78]
call fcn.00402032
push ebx
push edi
lea esi, [esp + 0xb0]
call fcn.00402032
lea eax, [esp + 0x20]
call fcn.004165c9
lea eax, [esp + 0x1c]
call fcn.004165c9
xor eax, eax
jmp 0x41fe70
xor edi, edi
inc edi
push ebx
push edi
lea esi, [esp + 0xcc]
call fcn.00402032
jmp 0x41f71a
lea eax, [esp + 0x118]
call fcn.0040f0e1
push ebx
push 1
lea esi, [esp + 0xb0]
call fcn.00402032
lea eax, [esp + 0x20]
call fcn.004165c9
lea eax, [esp + 0x1c]
call fcn.004165c9
xor eax, eax
inc eax
mov ecx, dword [esp + 0x144]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00432e8b
mov esp, ebp
pop ebp
ret