Function at 0x40b520
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
mov esi, ecx
mov ecx, dword [edx + 4]
mov eax, ecx
shr eax, 0xc
and eax, 0xf
mov dword [esi + 8], eax
mov edi, 0xffff
mov eax, ecx
and eax, edi
mov dword [esi + 0xc], eax
mov eax, dword [edx + 8]
mov dword [esi + 0x10], eax
mov eax, dword [edx + 0x48]
test al, 0x40
jne 0x40b552
and edi, eax
jmp 0x40b588
mov edi, eax
test al, 2
jne 0x40b560
and edi, 0xffbf
jmp 0x40b588
test al, 1
jne 0x40b571
test ax, ax
js 0x40b57c
and edi, 0xffbd
jmp 0x40b588
and edi, 0xffbc
or edi, 0x40
jmp 0x40b588
and edi, 0x7f3d
or edi, 0x80
mov dword [esi + 0x38], edi
sar eax, 0x10
mov dword [esi + 0x34], eax
mov eax, dword [edx + 0x18]
movzx edx, ax
mov dword [esi + 0x2c], edx
sar eax, 0x10
mov dword [esi + 0x30], eax
mov eax, dword [esi + 0x78]
test eax, eax
je 0x40b749
mov edx, dword [eax + 0x60]
mov byte [esi + 0x3c], 0
mov dword [esi + 0x40], 0
movzx ecx, cx
cmp ecx, 0x3000
jle 0x40b5ea
lea edx, [ecx - 0x4001]
cmp edx, 7
jbe switch.0x0040b61e
lea edx, [ecx - 0x3001]
cmp edx, 5
jb case.0x40b5f5.8195
add ecx, 0xffff9fff
cmp ecx, 4
jb case.0x40b5f5.8195
jmp 0x40b71e
lea edi, [ecx - 0x2001]
cmp edi, 9
ja case.default.0x40b5f5
jmp dword [edi*4 + 0x44a6ec]
cmp dword [eax], 1
jne 0x40b71e
cmp dword [eax + 0x20], 5
je 0x40b615
cmp dword [eax + 0x24], 5
jne 0x40b71e
mov byte [esi + 0x3c], 1
jmp 0x40b71e
jmp dword [edx*4 + 0x44a714]
mov byte [esi + 0x3c], 1
mov dword [esi + 0x40], 0
jmp 0x40b71e
lea eax, [ecx - 0x1003]
cmp eax, 2
jae 0x40b678
mov byte [esi + 0x3c], 1
movzx eax, byte [esi + 0x29]
neg eax
jmp case.default.0x40b6ba
cmp dword [eax], 1
jne 0x40b71e
cmp dword [eax + 0x20], 5
je 0x40b668
cmp dword [eax + 0x24], 5
jne 0x40b71e
mov byte [esi + 0x3c], 1
mov dword [esi + 0x40], 1
jmp 0x40b71e
cmp ecx, 0x1005
jne 0x40b71e
mov byte [esi + 0x3c], 1
movzx eax, byte [esi + 0x29]
jmp case.default.0x40b6ba
cmp dword [eax], 1
jne 0x40b71e
cmp dword [eax + 0x20], 5
je 0x40b6a6
cmp dword [eax + 0x24], 5
jne 0x40b71e
mov byte [esi + 0x3c], 1
xor eax, eax
cmp dword [edx], 2
jne case.default.0x40b6ba
mov ecx, dword [edx + 4]
dec ecx
cmp ecx, 3
ja case.default.0x40b6ba
jmp dword [ecx*4 + 0x44a744]
mov eax, dword [edx + 0x10]
jmp case.default.0x40b6ba
cmp dword [eax], 1
jne 0x40b71e
cmp dword [eax + 0x20], 5
je 0x40b6d7
cmp dword [eax + 0x24], 5
jne 0x40b71e
mov byte [esi + 0x3c], 1
xor eax, eax
cmp dword [edx], 2
jne case.default.0x40b6f3
mov ecx, dword [edx + 4]
dec ecx
cmp ecx, 3
ja case.default.0x40b6f3
jmp dword [ecx*4 + 0x44a734]
mov eax, dword [edx + 0x10]
jmp case.default.0x40b6f3
mov byte [esi + 0x3c], 1
cmp dword [eax], 1
jne 0x40b717
cmp dword [eax + 0x20], 5
je 0x40b71e
cmp dword [eax + 0x24], 5
je 0x40b71e
movzx eax, byte [esi + 0x2a]
mov dword [esi + 0x40], eax
lea edi, [esi + 0x68]
push edi
push 0x455007
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
je 0x40b745
push edi
push 0x4553f3
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
add esp, 8
test eax, eax
jne 0x40b749
mov byte [esi + 0x3c], 1
pop esi
pop edi
pop ebp
ret
movsx eax, byte [edx + 0x10]
jmp case.default.0x40b6ba
movsx eax, word [edx + 0x10]
jmp case.default.0x40b6ba
movsx eax, byte [edx + 0x10]
jmp case.default.0x40b6f3
movsx eax, word [edx + 0x10]
jmp case.default.0x40b6f3