Function at 0x4025e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x100
mov eax, dword [ebp + 8]
mov cx, 0x7207
mov dword [esp + 0xf4], 0
mov dword [esp + 0xf0], 0x4ef9
mov word [esp + 0xdc], 0x60dc
mov byte [esp + 0xdb], 0xb0
mov dword [esp + 0xd4], 0x7c11
movzx edx, word [esp + 0xdc]
mov si, dx
add edx, 0xeb3
mov di, dx
mov word [esp + 0x9e], di
mov edx, dword [esp + 0xf8]
mov ebx, dword [esp + 0xf0]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xf4]
mov dword [esp + 0x3c], eax
mov eax, ebx
xor eax, 0x6f3e
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0xc0], eax
sub cx, word [esp + 0xdc]
cmp di, cx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], edx
mov word [esp + 0x2e], si
je 0x402b91
jmp 0x4027a5
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 0x1c]
mov ecx, dword [esp + 0xc8]
add ecx, eax
mov dword [esp + 0xb4], ecx
mov eax, dword [esp + 0x58]
mov word [esp + 0xee], 0x23ef
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx + eax*4]
mov dword [esp + 0xa0], eax
mov dl, byte [esp + 0xdf]
mov byte [esp + 0xdf], dl
mov eax, dword [esp + 0xc8]
mov si, word [esp + 0x2e]
imul di, si, 0x556a
mov word [esp + 0xee], di
add eax, dword [esp + 0xa0]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x94], eax
jmp 0x402ba5
mov eax, dword [esp + 0xd4]
add eax, 0xffff83ef
cmp dword [esp + 0x44], eax
jne 0x40293e
jmp 0x4028e9
mov eax, 0x998b
sub eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x88], eax
cmp dword [esp + 0x88], 0x90a
jae 0x402bf7
mov eax, 0x7c10
mov ecx, 0x2cf5
mov edx, dword [esp + 0x30]
sub ecx, edx
mov dword [esp + 0xf8], ecx
mov ecx, dword [esp + 0x58]
sub eax, dword [esp + 0xd4]
mov byte [esp + 0xdf], 0x4c
cmp ecx, eax
je 0x402b74
jmp 0x402a3f
mov eax, dword [esp + 0x40]
mov dword [esp + 0x5c], eax
call fcn.00402e80
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xc8]
mov ecx, esp
mov dword [ecx], eax
call fcn.00402c40
sub esp, 4
mov ecx, 0x7c11
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x78]
add eax, 0x18
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xc8]
mov dx, word [esp + 0x2e]
or dx, 0x1e8e
mov word [esp + 0xee], dx
mov esi, dword [esp + 0xd4]
xor esi, 0xffff83ee
mov edi, dword [esp + 0x98]
add eax, dword [edi + 0x60]
mov edi, dword [esp + 0x30]
add edi, edi
mov dword [esp + 0xf8], edi
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x98]
mov eax, dword [eax + 0x64]
mov dword [esp + 0x74], eax
sub ecx, dword [esp + 0xd4]
mov dword [esp + 0x58], esi
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 0x20]
mov esi, dword [esp + 0xc8]
add esi, eax
mov dword [esp + 0x70], esi
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 0x24]
mov esi, dword [esp + 0xc8]
add esi, eax
mov dword [esp + 0x4c], esi
mov dword [esp + 0xd0], ecx
jmp 0x402bb6
mov eax, dword [esp + 0x48]
add eax, 1
mov dword [esp + 0x48], eax
jmp 0x402898
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x5c]
movsx eax, byte [ecx + eax]
cmp eax, 0
je 0x402a92
jmp 0x402b15
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
xor edx, edx
mov esi, 0xa643
sub esi, eax
sbb edx, ecx
mov dword [esp + 0xb8], esi
mov dword [esp + 0xbc], edx
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
xor eax, 0x53e7
sub eax, esi
sbb ecx, edx
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], ecx
jae 0x40276e
jmp 0x402a79
mov al, byte [esp + 0xdb]
add al, 0xf2
mov byte [esp + 0x93], al
mov al, byte [esp + 0x93]
mov ecx, dword [esp + 0xd4]
xor ecx, 0x1811
mov byte [esp + 0x6f], al
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x80], ecx
mov ecx, dword [esp + 0x80]
add edx, 2
mov dword [esp + 0x84], edx
cmp ecx, 0x4a2e
jne 0x402b91
jmp 0x402a3f
mov al, byte [esp + 0xdf]
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0xf4]
not al
mov byte [esp + 0xdf], al
mov esi, dword [esp + 0xf0]
mov edi, dword [esp + 0xf4]
add esi, 0xffffec8b
adc edi, 0xffffffff
xor ebx, ebx
mov eax, 0x5ced
sub eax, ecx
sbb ebx, edx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x8c], ecx
xor edi, ebx
xor esi, eax
or esi, edi
mov dword [esp + 0x20], esi
je 0x402b74
jmp 0x402a97
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xf0]
mov esi, dword [esp + 0xf4]
xor edx, 0x3676
sub eax, edx
sbb ecx, esi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], ecx
jae 0x402ba5
jmp 0x402724
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x34]
xor edx, 0x3cae
movsx eax, byte [ecx + eax]
mov ecx, dword [esp + 0x7c]
sub ecx, eax
sete bl
mov eax, dword [esp + 0xd4]
xor eax, 0x7c11
mov esi, dword [esp + 0x3c]
mov dword [esp + 0xe4], esi
mov dword [esp + 0xe0], edx
and bl, 1
movzx edx, bl
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x54]
mov edi, dword [esp + 0x48]
movsx edx, byte [edx + edi]
cmp edx, eax
mov dword [esp + 0x14], ecx
je 0x402a92
jmp 0x40287e
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov edx, eax
xor edx, 0x3140
xor eax, 0x681
mov dword [esp + 0xac], ecx
mov dword [esp + 0xa8], edx
sub edx, eax
mov dword [esp + 0x10], edx
jae 0x4026a6
jmp 0x40287e
mov eax, 0x7c31
mov ecx, dword [esp + 0x48]
sub eax, dword [esp + 0xd4]
cmp ecx, eax
jb 0x402ac0
jmp 0x4029a6
jmp 0x4029a6
mov eax, dword [esp + 0x8c]
movzx eax, word [eax]
mov dword [esp + 0x58], eax
jmp 0x40276e
mov eax, 0x7c11
mov ecx, dword [esp + 0x44]
sub eax, dword [esp + 0xd4]
cmp ecx, eax
je 0x402a92
jmp 0x402b3e
mov al, byte [esp + 0xdb]
xor al, 0x89
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x54]
mov ah, byte [edx + ecx]
mov bl, byte [esp + 0xdf]
mov byte [esp + 0xdf], bl
mov byte [esp + 0x9d], al
mov al, byte [esp + 0x9d]
movsx ecx, ah
mov dword [esp + 0x7c], ecx
mov ah, byte [esp + 0xdf]
xor ah, 0xe9
mov byte [esp + 0xdf], ah
cmp al, 0xbc
jne 0x4029df
jmp 0x402bcf
mov al, 0xec
mov cl, byte [esp + 0xdb]
xor cl, 0x10
sub al, byte [esp + 0xdb]
mov byte [esp + 0xcf], al
cmp cl, byte [esp + 0xcf]
jne 0x402aaa
jmp 0x402ba5
jmp 0x402871
mov eax, dword [esp + 0xd0]
add eax, 1
mov dword [esp + 0xd0], eax
mov cl, byte [esp + 0xdf]
add cl, 0x4e
mov byte [esp + 0xdf], cl
jmp 0x402bb6
mov eax, dword [esp + 0x84]
mov dword [esp + 0x4c], eax
jmp 0x402b43
mov dword [esp + 0x94], 0
mov eax, dword [esp + 0x30]
or eax, 0x553f
mov dword [esp + 0xf8], eax
jmp 0x402ba5
mov al, byte [esp + 0x6f]
mov cl, byte [esp + 0xdb]
xor cl, 0xdb
cmp al, cl
je 0x402b67
jmp 0x402b67
mov eax, dword [esp + 0x94]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 0x18]
cmp dword [esp + 0xd0], eax
jb 0x40273f
jmp 0x40276e
mov eax, esp
mov dword [eax + 4], 0
mov dword [eax], 0
mov eax, dword [sym.imp.KERNEL32.DLL_HeapWalk]
call eax
xor ecx, ecx
mov dword [esp + 0xc], eax
mov eax, ecx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
mov eax, 0x7c11
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xd4]
mov esi, dword [esp + 0x70]
sub eax, edx
mov ecx, dword [esi + ecx*4]
mov word [esp + 0xee], 0x2fc1
add ecx, dword [esp + 0x68]
mov edx, dword [esp + 0xd4]
add edx, 0xffff83ef
mov dword [esp + 0x54], ecx
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], eax
jmp 0x402898