Function at 0x4040c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xf8
mov eax, dword [0x603144]
xor eax, esp
mov dword [esp + 0xf4], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x108]
push edi
push 1
push esi
mov dword [esp + 0x1c], esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x40440e
mov dword [esp + 0x1c], str.AutoIt_compiled_script_file
mov ebp, 1
mov dword [esp + 0x20], str.A3_48_4B_BE_98_6C_4A_A9_99_4C_53_0A_86_D6_48_7D
mov dword [esp + 0x24], 0x5ae408
mov dword [esp + 0x28], str.3C_3F_78_6D_6C_20_76_65_72_73_69_6F_6E_3D_22_31
mov dword [esp + 0x2c], str.Security_Certificate
mov dword [esp + 0x30], str.2D_2D_2D_2D_2D_42_45_47_49_4E_20_43_45_52_54_49
mov dword [esp + 0x34], 0x5ae500
mov dword [esp + 0x38], str.52_49_46_46_____________57_41_56_45
mov dword [esp + 0x3c], 0x5ae550
mov dword [esp + 0x40], str.52_49_46_46_____________41_56_49_20
mov dword [esp + 0x44], str.Rar_Archive
mov dword [esp + 0x48], str.52_61_72_21_1A_07_01_00
mov dword [esp + 0x4c], str.PNG_Image
mov dword [esp + 0x50], str.89_50_4E_47_0D_0A_1A_0A
mov dword [esp + 0x54], str.OLE_or_Visual_C_type_library_file
mov dword [esp + 0x58], str.4D_53_46_54_02_00_01_00
mov dword [esp + 0x5c], str.Generic_XML
mov dword [esp + 0x60], str.EF_BB_BF_3C_3F_78_6D_6C
mov dword [esp + 0x64], 0x5ae6f0
mov dword [esp + 0x68], str.89_50_4E_47_0D_0A_1A_0A
mov dword [esp + 0x6c], str.GIF_Image
mov dword [esp + 0x70], str.47_49_46_38_37_61
mov dword [esp + 0x74], str.GIF_Image
mov dword [esp + 0x78], str.47_49_46_38_39_61
mov dword [esp + 0x7c], str.Generic_XML
mov dword [esp + 0x80], str.3C_3F_78_6D_6C
mov dword [esp + 0x84], str.Rich_Text_Format
mov dword [esp + 0x88], str.7B_5C_72_74_66
mov dword [esp + 0x8c], 0x5ae7b8
mov dword [esp + 0x90], str.3C_73_76_67_20
mov dword [esp + 0x94], str.Zip_Archive
mov dword [esp + 0x98], str.50_4B_03_04
mov dword [esp + 0x9c], str.PE_File
mov dword [esp + 0xa0], str.4D_5A_50_00
mov dword [esp + 0xa4], str.PE_File
mov dword [esp + 0xa8], str.4D_5A_90_00
mov dword [esp + 0xac], str.WMF_Windows_graphics_metafile_
mov dword [esp + 0xb0], str.D7_CD_C6_9A
mov dword [esp + 0xb4], str.Windows_Cursor
mov dword [esp + 0xb8], str.00_00_02_00
mov dword [esp + 0xbc], str.Borland_Delphi_Form
mov dword [esp + 0xc0], str.54_50_46_30
mov dword [esp + 0xc4], str.MPEG_Video
mov dword [esp + 0xc8], str.00_00_01_B_
mov dword [esp + 0xcc], str.Icon
mov dword [esp + 0xd0], str.00_00_01_00
mov dword [esp + 0xd4], str.Registry_script
mov dword [esp + 0xd8], str.48_4B_43_52
mov dword [esp + 0xdc], str.GZIP_Compressed_file
mov dword [esp + 0xe0], str.1F_8B_08
mov dword [esp + 0xe4], str.JPEG
mov dword [esp + 0xe8], str.FF_D8_FF
mov dword [esp + 0xec], str.Macromedia_flash_compressed
mov dword [esp + 0xf0], str.43_57_53
mov dword [esp + 0xf4], str.Macromedia_flash_uncompressed
mov dword [esp + 0xf8], str.46_57_53
mov dword [esp + 0xfc], str.BMP_Image
mov dword [esp + 0x100], str.42_4D
mov word [esp + 0x10], ax
mov byte [esp + 0x12], al
lea eax, [esp + 0x1c]
xor edi, edi
mov ebx, dword [eax + ebp*4]
lea eax, [eax + ebp*4]
push ebx
mov dword [esp + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jle 0x4043c6
mov al, byte [ebx + edi*2]
push 0x10
mov byte [esp + 0x14], al
lea eax, [esp + 0x14]
push 0
push eax
call fcn.00582902
mov ecx, eax
add esp, 0xc
movzx eax, word [ebx + edi*2]
cmp eax, 0x3f
je 0x404384
cmp eax, 0x20
je 0x404384
mov eax, dword [esi]
shr eax, 4
and eax, 0xf
cmp eax, ecx
jne 0x4043cf
mov al, byte [ebx + edi*2 + 2]
push 0x10
mov byte [esp + 0x14], al
lea eax, [esp + 0x14]
push 0
push eax
call fcn.00582902
mov ecx, eax
add esp, 0xc
movzx eax, word [ebx + edi*2 + 2]
cmp eax, 0x3f
je 0x4043b7
cmp eax, 0x20
je 0x4043b7
mov eax, dword [esi]
and eax, 0xf
cmp eax, ecx
jne 0x4043cf
push ebx
inc esi
add edi, 3
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp edi, eax
jl 0x404350
mov eax, dword [esp + 0x18]
mov eax, dword [eax - 4]
jmp 0x404413
mov esi, dword [esp + 0x14]
add ebp, 2
cmp ebp, 0x3a
jb 0x404335
mov esi, dword [esp + 0x110]
or ecx, 0xffffffff
dec esi
xor dl, dl
cmp esi, ecx
jle 0x40440e
mov edi, dword [esp + 0x14]
mov al, byte [edi + ecx + 1]
test al, al
je 0x40442c
xor dl, dl
cmp al, 0x20
jae 0x40440a
cmp al, 0xa
je 0x404432
cmp al, 0xd
jne 0x40440e
cmp al, 0x7e
jbe 0x404432
mov eax, 0x5acf10
mov ecx, dword [esp + 0x104]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00572cc2
add esp, 0xf8
ret
test dl, dl
jne 0x40440e
mov dl, 1
inc ecx
cmp ecx, esi
jl 0x4043f4
cmp ecx, 0xffffffff
mov eax, 0x5acf10
mov edx, str.Text_string
cmovne eax, edx
jmp 0x404413