Function at 0x40b8d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xd0
mov eax, dword [ebp + 8]
mov dword [esp + 0xbc], eax
mov ax, word [0x41b128]
mov word [esp + 0x54], ax
mov eax, dword [0x41b124]
mov dword [esp + 0x50], eax
mov eax, dword [0x465260]
mov dword [esp + 0xc4], eax
lea esi, [esp + 0x40]
lea edi, [esp + 0x8c]
lea ebx, [esp + 0xb4]
mov dword [esp + 0xb8], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xa4], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x94], 0
mov dword [esp + 0x90], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x6c], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x60], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x38], 0x5bda5745
jmp 0x40ba40
call fcn.00402ff0
mov ecx, dword [esp + 0xbc]
mov dword [ecx], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], 0x6b03b382
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 0x38]
cmp eax, 0x74ad2c37
jg 0x40ba80
cmp eax, 0x715f6fd7
jg 0x40ba90
cmp eax, 0x8c751a69
jg 0x40bab2
cmp eax, 0x896c274c
jne 0x40ba40
mov al, byte [esp + 0xcb]
test al, al
mov eax, 0x2e8895b0
jne 0x40ba75
mov eax, 0xc7e25289
mov dword [esp + 0x38], eax
jmp 0x40ba40
cmp eax, 0x74ad2c38
jne 0x40ba40
jmp 0x40ba1d
cmp eax, 0x715f6fd8
jne 0x40ba40
mov al, byte [esp + 0xc9]
test al, al
mov eax, 0x98639aee
jne 0x40baac
mov eax, 0xda782179
mov dword [esp + 0x38], eax
jmp 0x40ba40
cmp eax, 0x9458f5db
jg 0x40bac5
cmp eax, 0x8c751a6a
jne 0x40ba40
jmp 0x40c230
cmp eax, 0x6b03b381
jg 0x40bc52
cmp eax, 0x6ada7b76
jg 0x40bc87
cmp eax, 0x5bda5744
jg 0x40bc9f
cmp eax, 0x5a1a6ce3
jg 0x40bcc7
cmp eax, 0x564d99d3
jg 0x40bcec
cmp eax, 0x483a4a09
jg 0x40bcfc
cmp eax, 0x4320dd3a
jg 0x40bd1e
cmp eax, 0x3da64555
jg 0x40bd58
cmp eax, 0x374b9c93
jg 0x40bda9
cmp eax, 0x2e8895af
jg 0x40bde8
cmp eax, 0x1c8799fd
jg 0x40be0c
cmp eax, 0x1b19b2f3
jg 0x40be50
cmp eax, 0x17d6bb04
jg 0x40be72
cmp eax, 0xec20069
jg 0x40be8a
cmp eax, 0xcd1f88f
jg 0x40beb2
cmp eax, 0x1cb461d
jg 0x40bee5
cmp eax, 0xf60f6492
jg 0x40bf1e
cmp eax, 0xef62d4ec
jg 0x40bf60
cmp eax, 0xda782178
jg 0x40bf89
cmp eax, 0xcfb7e024
jg 0x40c00b
cmp eax, 0xc7f9eda8
jg 0x40c023
cmp eax, 0xc7e25288
jg 0x40c03b
cmp eax, 0xc520bf80
jg 0x40c069
cmp eax, 0xb9bcc781
jg 0x40c081
cmp eax, 0xb9681e9d
jg 0x40c099
cmp eax, 0xaca98830
jg 0x40c180
cmp eax, 0xa8ac43ed
jg 0x40c198
cmp eax, 0xa6c7e2e7
jg 0x40c1c0
cmp eax, 0x9458f5dc
je 0x40c1d8
cmp eax, 0x945fa499
jne 0x40c1e5
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x19
call dword [0x4661f4]
sub esp, 0x14
test eax, eax
setne byte [esp + 0xca]
mov dword [esp + 0x38], 0xef62d4ed
jmp 0x40ba40
cmp eax, 0x6b03b382
jne 0x40ba40
call fcn.00402ff0
mov ecx, dword [esp + 0xbc]
mov dword [ecx], eax
mov dword [esp + 0x3c], eax
cmp eax, 5
seta byte [esp + 0xc9]
mov dword [esp + 0x38], 0x715f6fd8
jmp 0x40ba40
cmp eax, 0x6ada7b77
jne 0x40ba40
mov dword [esp + 0x38], 0x6b03b382
jmp 0x40ba40
cmp eax, 0x5bda5745
jne 0x40ba40
mov eax, 0x564d99d4
cmp dword [esp + 0xc4], 0
jne 0x40bcbe
mov eax, 0x6ada7b77
mov dword [esp + 0x38], eax
jmp 0x40ba40
cmp eax, 0x5a1a6ce4
jne 0x40ba40
cmp dword [esp + 0x60], 0
setne byte [esp + 0xcb]
mov dword [esp + 0x38], 0x896c274c
jmp 0x40ba40
cmp eax, 0x564d99d4
jne 0x40ba40
jmp 0x40c050
cmp eax, 0x483a4a0a
jne 0x40ba40
mov dword [0x465264], 1
mov dword [esp + 0x38], 0xc520bf81
jmp 0x40ba40
cmp eax, 0x4320dd3b
jne 0x40ba40
mov eax, dword [esp + 0x40]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00410f83
mov dword [esp + 0x60], eax
mov ecx, 0xcd1f890
test eax, eax
je 0x40bd4f
mov ecx, 0xaca98831
mov dword [esp + 0x38], ecx
jmp 0x40ba40
cmp eax, 0x3da64556
jne 0x40ba40
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], eax
mov dword [esp], ecx
mov dword [esp + 8], 0
mov dword [esp + 4], 0x19
call dword [0x4661f4]
sub esp, 0x14
mov eax, 0x4320dd3b
cmp dword [esp + 0x40], 0
jne 0x40bda0
mov eax, 0xa8ac43ee
mov dword [esp + 0x38], eax
jmp 0x40ba40
cmp eax, 0x374b9c94
jne 0x40ba40
mov eax, dword [esp + 0x60]
mov dword [esp + 0xb8], eax
mov eax, dword [eax]
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [0x4661f0]
sub esp, 8
test eax, eax
mov eax, 0xb9681e9e
jne 0x40bddf
mov eax, 0x17d6bb05
mov dword [esp + 0x38], eax
jmp 0x40ba40
cmp eax, 0x2e8895b0
jne 0x40ba40
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.00410f4b
mov dword [esp + 0x38], 0xc7e25289
jmp 0x40ba40
cmp eax, 0x1c8799fe
jne 0x40ba40
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 0x19
call dword [0x4661f4]
sub esp, 0x14
mov dword [esp + 0x38], 0x945fa499
jmp 0x40ba40
cmp eax, 0x1b19b2f4
jne 0x40ba40
mov dword [0x465264], 0
mov dword [esp + 0x38], 0xec2006a
jmp 0x40ba40
cmp eax, 0x17d6bb05
jne 0x40ba40
mov dword [esp + 0x38], 0x9458f5dc
jmp 0x40ba40
cmp eax, 0xec2006a
jne 0x40ba40
mov eax, dword [esp + 0x4c]
mov dword [esp], eax
call dword [0x4661e4]
sub esp, 4
mov dword [esp + 0x38], 0xc7f9eda9
jmp 0x40ba40
cmp eax, 0xcd1f890
jne 0x40ba40
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0xc0], 0xffffffff
mov dword [esp + 0x38], 0x8c751a6a
jmp 0x40ba40
cmp eax, 0x1cb461e
jne 0x40ba40
mov eax, dword [esp + 0xb4]
lea ecx, [esp + 0x64]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004120b8
test eax, eax
mov eax, 0xc520bf81
jne 0x40bf15
mov eax, 0x483a4a0a
mov dword [esp + 0x38], eax
jmp 0x40ba40
cmp eax, 0xf60f6493
jne 0x40ba40
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x465264
mov dword [esp], 0
call dword [0x4661e8]
sub esp, 0xc
test eax, eax
mov eax, 0xec2006a
jne 0x40bf57
mov eax, 0x1b19b2f4
mov dword [esp + 0x38], eax
jmp 0x40ba40
cmp eax, 0xef62d4ed
jne 0x40ba40
mov al, byte [esp + 0xca]
test al, al
mov eax, 0x374b9c94
jne 0x40bf80
mov eax, 0x9458f5dc
mov dword [esp + 0x38], eax
jmp 0x40ba40
cmp eax, 0xda782179
jne 0x40ba40
lea eax, [esp + 0x4c]
mov dword [esp + 0x28], eax
lea eax, [esp + 0x50]
mov dword [esp], eax
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x220
mov dword [esp + 8], 0x20
mov dword [esp + 4], 2
call dword [0x4661ec]
sub esp, 0x2c
test eax, eax
mov eax, 0xf60f6493
jne 0x40c002
mov eax, 0xc7f9eda9
mov dword [esp + 0x38], eax
jmp 0x40ba40
cmp eax, 0xcfb7e025
jne 0x40ba40
mov dword [esp + 0x38], 0x5a1a6ce4
jmp 0x40ba40
cmp eax, 0xc7f9eda9
jne 0x40ba40
mov dword [esp + 0x38], 0xcfb7e025
jmp 0x40ba40
cmp eax, 0xc7e25289
jne 0x40ba40
mov dword [0x465260], 1
mov eax, dword [0x465264]
mov dword [esp + 0xc0], eax
mov dword [esp + 0x38], 0x8c751a6a
jmp 0x40ba40
cmp eax, 0xc520bf81
jne 0x40ba40
mov dword [esp + 0x38], 0x17d6bb05
jmp 0x40ba40
cmp eax, 0xb9bcc782
jne 0x40ba40
mov dword [esp + 0x38], 0x5a1a6ce4
jmp 0x40ba40
cmp eax, 0xb9681e9e
jne 0x40ba40
mov eax, dword [0x41b12c]
movzx eax, word [eax]
mov dword [esp + 0x48], eax
mov ecx, dword [0x41b12c]
movzx eax, word [ecx + eax*2 + 2]
mov dword [esp + 0x30], eax
mov dword [esp + 0x44], eax
mov ecx, dword [0x41b12c]
mov edx, dword [esp + 0x48]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x34], eax
add ecx, 2
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], edi
call fcn.00402910
mov eax, dword [0x41b130]
movzx eax, word [eax]
mov dword [esp + 0x48], eax
not eax
mov ecx, dword [0x41b130]
add eax, eax
neg eax
movzx edi, word [ecx + eax]
mov dword [esp + 0x44], edi
mov ecx, dword [0x41b130]
mov edx, dword [esp + 0x48]
lea eax, [ecx + edx*2 + 4]
mov dword [esp + 0x34], eax
add ecx, 2
mov dword [esp + 0x10], edi
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
lea eax, [esp + 0x64]
mov dword [esp], eax
call fcn.00402910
mov eax, dword [esp + 0xb4]
lea ecx, [esp + 0x8c]
mov dword [esp + 4], ecx
mov edi, ecx
mov dword [esp], eax
call fcn.004120b8
test eax, eax
mov eax, 0x1cb461e
jne 0x40c177
mov eax, 0x483a4a0a
mov dword [esp + 0x38], eax
jmp 0x40ba40
cmp eax, 0xaca98831
jne 0x40ba40
mov dword [esp + 0x38], 0x945fa499
jmp 0x40ba40
cmp eax, 0xa8ac43ee
jne 0x40ba40
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 0x38], 0xa6c7e2e8
jmp 0x40ba40
cmp eax, 0xa6c7e2e8
jne 0x40ba40
mov dword [esp + 0x38], 0xcfb7e025
jmp 0x40ba40
mov dword [esp + 0x38], 0xa8ac43ee
jmp 0x40ba40
cmp eax, 0x98639aee
jne 0x40ba40
mov eax, dword [0x4661f8]
mov dword [esp + 0x34], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea ecx, [esp + 0x5c]
mov dword [esp + 8], ecx
mov dword [esp], eax
mov dword [esp + 4], 0x2000000
call dword [esp + 0x34]
sub esp, 0xc
test eax, eax
mov eax, 0x3da64556
jne 0x40c227
mov eax, 0xa6c7e2e8
mov dword [esp + 0x38], eax
jmp 0x40ba40
mov eax, dword [esp + 0xc0]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret