Function at 0x404ab0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x60
mov eax, dword [esp + 0x7c]
mov esi, dword [esp + 0x78]
mov ebx, dword [esp + 0x74]
cmp edx, 0x101
jb 0x404b1a
cmp byte [ecx + 0x100], 0xbf
mov edi, 0x100
jg 0x404b07
cmp byte [ecx + 0xff], 0xbf
mov edi, 0xff
jg 0x404b07
cmp byte [ecx + 0xfe], 0xbf
mov edi, 0xfe
jg 0x404b07
cmp byte [ecx + 0xfd], 0xbf
mov edi, 0xfd
jle 0x404cf2
mov dword [esp], ecx
mov dword [esp + 4], edi
mov edi, 5
mov ebp, str._..._begin___end_______when_slicing___
jmp 0x404b28
mov dword [esp], ecx
mov dword [esp + 4], edx
xor edi, edi
mov ebp, str.kernel_drivers_do_not_support_launch_arguments
cmp ebx, edx
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], edi
ja 0x404ba8
cmp esi, edx
ja 0x404ba8
cmp ebx, esi
jbe 0x404c12
lea ecx, [esp + 0x74]
lea esi, [esp + 0x78]
mov edx, esp
mov dword [esp + 0xc], 0x4189d8
mov dword [esp + 0x10], 4
mov dword [esp + 0x1c], 0
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], fcn.004028e0
mov dword [esp + 0x2c], esi
mov dword [esp + 0x30], fcn.004028e0
mov dword [esp + 0x34], edx
lea edx, [esp + 0x24]
lea esi, [esp + 0x4c]
mov dword [esp + 0x38], 0x403340
mov dword [esp + 0x3c], esi
mov dword [esp + 0x14], edx
mov dword [esp + 0x40], 0x403340
mov dword [esp + 0x18], 4
jmp 0x404c07
cmp ebx, edx
lea ecx, [esp + 0x54]
mov edx, esp
mov dword [esp + 0xc], 0x418a78
mov dword [esp + 0x10], 3
mov dword [esp + 0x1c], 0
cmova esi, ebx
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], fcn.004028e0
mov dword [esp + 0x2c], edx
lea edx, [esp + 0x24]
mov dword [esp + 0x30], 0x403340
mov dword [esp + 0x54], esi
lea esi, [esp + 0x4c]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 3
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], 0x403340
lea ecx, [esp + 0xc]
mov edx, eax
call fcn.00416e20
test ebx, ebx
je 0x404c20
cmp ebx, edx
jae 0x404c20
cmp byte [ecx + ebx], 0xc0
jl 0x404c22
mov ebx, esi
cmp ebx, edx
mov esi, edx
mov dword [esp + 0x5c], ebx
jae 0x404c6f
mov edi, ebx
xor esi, esi
sub edi, 3
cmovb edi, esi
lea esi, [ebx + 1]
cmp edi, esi
jbe 0x404c4b
mov ecx, edi
mov edx, esi
push 0x418aac
call fcn.00417100
add esi, ecx
add ebx, ecx
sub esi, ecx
sub esi, edi
nop word cs:[eax + eax]
nop dword [eax]
test esi, esi
je 0x404c6d
dec esi
cmp byte [ebx], 0xc0
lea ebx, [ebx - 1]
jl 0x404c60
add esi, edi
test esi, esi
jne 0x404c77
mov edi, edx
jmp 0x404c8d
mov edi, edx
sub edi, esi
jbe 0x404c8b
cmp byte [ecx + esi], 0xbf
jg 0x404c8d
push eax
push edx
push esi
call fcn.00417390
jne 0x404c83
test edi, edi
jne 0x404c98
mov ecx, eax
call fcn.00417230
movzx ebx, byte [ecx + esi]
movzx edx, bl
test bl, bl
js 0x404cb1
mov dword [esp + 8], edx
mov edx, 1
jmp 0x404d3b
movzx ebp, byte [ecx + esi + 1]
and edx, 0x1f
and ebp, 0x3f
cmp bl, 0xdf
jbe 0x404cff
movzx edi, byte [ecx + esi + 2]
shl ebp, 6
and edi, 0x3f
or edi, ebp
cmp bl, 0xf0
jb 0x404d08
movzx ecx, byte [ecx + esi + 3]
and edx, 7
shl edi, 6
shl edx, 0x12
and ecx, 0x3f
or ecx, edi
or ecx, edx
cmp ecx, 0x110000
je 0x404c91
jmp 0x404d0f
push eax
push 0xfd
push 0
call fcn.00417390
shl edx, 6
or edx, ebp
mov ecx, edx
jmp 0x404d0f
shl edx, 0xc
or edi, edx
mov ecx, edi
mov edx, 1
cmp ecx, 0x80
mov dword [esp + 8], ecx
jb 0x404d3b
mov edx, 2
cmp ecx, 0x800
jb 0x404d3b
cmp ecx, 0x10000
mov edx, 4
sbb edx, 0
add edx, esi
mov dword [esp + 0x54], esi
lea ecx, [esp + 0x5c]
lea esi, [esp + 0x54]
mov dword [esp + 0xc], 0x418a38
mov dword [esp + 0x10], 5
mov dword [esp + 0x1c], 0
mov dword [esp + 0x58], edx
lea edx, [esp + 8]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], fcn.004028e0
mov dword [esp + 0x2c], edx
mov edx, esp
mov dword [esp + 0x30], 0x404dc0
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], 0x404ed0
lea esi, [esp + 0x4c]
mov dword [esp + 0x3c], edx
lea edx, [esp + 0x24]
mov dword [esp + 0x40], 0x403340
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], 0x403340
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], 5
jmp 0x404c07