Function at 0x4fb2c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
jmp 0x4fb2c0
push 0xffffffffffffffff
push 0x789f97
mov eax, dword fs:[0]
push eax
sub esp, 0x50
mov eax, dword [0x856918]
xor eax, esp
mov dword [esp + 0x4c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x856918]
xor eax, esp
push eax
lea eax, [esp + 0x64]
mov dword fs:[0], eax
mov esi, dword [esp + 0x78]
mov ebx, dword [esp + 0x74]
xor edi, edi
mov dword [esp + 0x3c], edi
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [esp + 0x1c], ebx
jne 0x4fb334
push edi
mov dword [ebx + 0x18], 0xf
mov dword [ebx + 0x14], edi
push 0x7bb8a5
jmp 0x4fb9d2
push 0x24
mov ebp, 0xf
push str.CWFP::DoAction___Openning_WFP_handle
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], edi
mov byte [esp + 0x2c], 0
call fcn.00405920
lea ecx, [esp + 0x20]
push 1
push ecx
mov dword [esp + 0x74], edi
call fcn.004024eb
mov ecx, eax
call fcn.00403bb1
cmp dword [esp + 0x38], 0x10
mov dword [esp + 0x6c], 0xffffffff
jb 0x4fb389
mov edx, dword [esp + 0x24]
push edx
call fcn.00564155
add esp, 4
push edi
push edi
push 3
push edi
push edi
push 0xc0000000
push 0x7bbc9c
call dword [sym.imp.KERNEL32.dll_CreateFileA]
push 0x22
push str.CWFP::DoAction___Opened_WFP_handle
lea ecx, [esp + 0x28]
mov dword [esp + 0x48], eax
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], edi
mov byte [esp + 0x2c], 0
call fcn.00405920
lea eax, [esp + 0x20]
push 1
push eax
mov dword [esp + 0x74], 1
call fcn.004024eb
mov ecx, eax
call fcn.00403bb1
cmp dword [esp + 0x38], 0x10
mov dword [esp + 0x6c], 0xffffffff
jb 0x4fb3f7
mov ecx, dword [esp + 0x24]
push ecx
call fcn.00564155
add esp, 4
cmp dword [esp + 0x40], 0xffffffff
jne 0x4fb4a2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea edx, [esp + 0x24]
push edx
call fcn.004083af
push eax
lea eax, [esp + 0x50]
push str.CWFP::DoAction___Failed_to_open_file:
push eax
mov dword [esp + 0x80], 2
call fcn.00404cfa
add esp, 0x14
mov esi, 0x10
mov byte [esp + 0x6c], 4
cmp dword [esp + 0x38], esi
jb 0x4fb44e
mov ecx, dword [esp + 0x24]
push ecx
call fcn.00564155
add esp, 4
lea edx, [esp + 0x44]
push edi
push edx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], edi
mov byte [esp + 0x2c], 0
call fcn.004024eb
mov ecx, eax
call fcn.004020ae
push 0xffffffffffffffff
push edi
lea eax, [esp + 0x4c]
mov dword [ebx + 0x18], ebp
mov dword [ebx + 0x14], edi
push eax
mov ecx, ebx
mov byte [ebx + 4], 0
call fcn.00403fb2
cmp dword [esp + 0x5c], esi
jb 0x4fb9dd
mov ecx, dword [esp + 0x48]
push ecx
call fcn.00564155
add esp, 4
jmp 0x4fb9dd
mov eax, dword [esp + 0x7c]
xor ebp, ebp
mov dword [esp + 0x18], edi
test eax, eax
je 0x4fb4b9
cmp eax, 3
jne 0x4fb610
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
imul edi, edi, 0x20a
push edi
call fcn.00563dd8
push edi
mov ebp, eax
push 0
push ebp
mov dword [esp + 0x28], ebp
call fcn.00566330
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
mov dword [esp + 0x24], ebp
shr eax, 0x1f
add esp, 0x10
xor ebp, ebp
add eax, edx
je 0x4fb5de
xor ebx, ebx
cmp ebp, eax
jb 0x4fb522
call fcn.00565471
mov ecx, dword [esi + 0xc]
mov eax, dword [ebx + ecx + 0x14]
lea edx, [eax + eax]
mov eax, dword [esp + 0x14]
mov word [eax], dx
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cmp ebp, ecx
jb 0x4fb555
call fcn.00565471
mov eax, dword [esi + 0xc]
mov edx, dword [ebx + eax + 0x14]
mov ecx, dword [esi + 0x10]
sub ecx, eax
mov dword [esp + 0x3c], edx
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebp, eax
jb 0x4fb581
call fcn.00565471
mov eax, dword [esi + 0xc]
add eax, ebx
cmp dword [eax + 0x18], 8
jb 0x4fb591
mov eax, dword [eax + 4]
jmp 0x4fb594
add eax, 4
mov ecx, dword [esp + 0x3c]
lea edx, [ecx + ecx]
push edx
push eax
mov eax, dword [esp + 0x1c]
add eax, 2
push eax
call fcn.00564f70
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
add dword [esp + 0x20], 0x20a
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
add esp, 0xc
add ebx, 0x1c
cmp ebp, eax
jb 0x4fb522
mov ebx, dword [esp + 0x1c]
cmp dword [esp + 0x7c], 0
movzx ebp, byte [esp + 0x80]
jne 0x4fb5ff
neg ebp
sbb ebp, ebp
and ebp, 0x1c
add ebp, 0x12a0d0
jmp 0x4fb801
mov eax, dword [esp + 0x7c]
neg ebp
sbb ebp, ebp
and ebp, 0x18
add ebp, 0x12a0e0
cmp eax, 1
je 0x4fb61e
cmp eax, 4
jne 0x4fb6ec
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov edi, edx
shr edi, 0x1f
add edi, edx
add edi, edi
push edi
call fcn.00563dd8
push edi
mov ebp, eax
push 0
push ebp
mov dword [esp + 0x28], ebp
call fcn.00566330
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
mov ebx, ebp
shr eax, 0x1f
add esp, 0x10
xor ebp, ebp
add eax, edx
je 0x4fb6b6
mov dword [esp + 0x14], ebp
cmp ebp, eax
jb 0x4fb67d
call fcn.00565471
mov eax, dword [esi + 0xc]
add eax, dword [esp + 0x14]
push eax
call fcn.00406604
mov word [ebx], ax
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
add dword [esp + 0x18], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
add esp, 4
add ebx, 2
cmp ebp, eax
jb 0x4fb67d
cmp dword [esp + 0x7c], 1
movzx ebp, byte [esp + 0x80]
mov ebx, dword [esp + 0x1c]
jne 0x4fb6db
neg ebp
sbb ebp, ebp
and ebp, 0x18
add ebp, 0x12a0dc
jmp 0x4fb801
mov eax, dword [esp + 0x7c]
neg ebp
sbb ebp, ebp
and ebp, 0x18
add ebp, 0x12a0e8
cmp eax, 2
je 0x4fb6fa
cmp eax, 5
jne 0x4fb7f9
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov edi, edx
shr edi, 0x1f
add edi, edx
add edi, edi
add edi, edi
push edi
call fcn.00563dd8
push edi
mov ebp, eax
push 0
push ebp
mov dword [esp + 0x28], ebp
call fcn.00566330
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
mov ebx, ebp
shr eax, 0x1f
add esp, 0x10
xor ebp, ebp
add eax, edx
je 0x4fb7c8
mov dword [esp + 0x14], ebp
cmp ebp, eax
jb 0x4fb75b
call fcn.00565471
mov eax, dword [esi + 0xc]
add eax, dword [esp + 0x14]
lea ecx, [esp + 0x44]
push eax
push ecx
call fcn.00407662
add esp, 8
cmp dword [eax + 0x18], 0x10
jb 0x4fb77b
mov eax, dword [eax + 4]
jmp 0x4fb77e
add eax, 4
push eax
call dword [sym.imp.WS2_32.dll_inet_addr]
push eax
call dword [sym.imp.WS2_32.dll_ntohl]
cmp dword [esp + 0x5c], 0x10
mov dword [ebx], eax
jb 0x4fb7a2
mov edx, dword [esp + 0x48]
push edx
call fcn.00564155
add esp, 4
mov ecx, dword [esi + 0x10]
sub ecx, dword [esi + 0xc]
add dword [esp + 0x14], 0x1c
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 4
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
add ebx, 4
cmp ebp, eax
jb 0x4fb75b
cmp dword [esp + 0x7c], 2
movzx ebp, byte [esp + 0x80]
mov ebx, dword [esp + 0x1c]
jne 0x4fb7ea
neg ebp
sbb ebp, ebp
and ebp, 0x1c
add ebp, 0x12a0d4
jmp 0x4fb801
neg ebp
sbb ebp, ebp
and ebp, 0x18
add ebp, 0x12a0e4
jmp 0x4fb801
test ebp, ebp
je 0x4fb9a4
cmp dword [esp + 0x18], 0
je 0x4fb9a4
test edi, edi
je 0x4fb9a4
push 0x28
mov esi, 0xf
push str.CWFP::DoAction___Before_sending_WFP_data
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], 0
mov byte [esp + 0x2c], 0
call fcn.00405920
lea eax, [esp + 0x20]
push 1
push eax
mov dword [esp + 0x74], 5
call fcn.004024eb
mov ecx, eax
call fcn.00403bb1
cmp dword [esp + 0x38], 0x10
mov dword [esp + 0x6c], 0xffffffff
jb 0x4fb871
mov ecx, dword [esp + 0x24]
push ecx
call fcn.00564155
add esp, 4
mov eax, dword [esp + 0x18]
push 0
lea edx, [esp + 0x40]
push edx
push 0
push 0
push edi
mov edi, dword [esp + 0x54]
push eax
push ebp
push edi
mov dword [esp + 0x5c], 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
push 0x27
push str.CWFP::DoAction___After_sending_WFP_data
lea ecx, [esp + 0x28]
mov ebp, eax
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], 0
mov byte [esp + 0x2c], 0
call fcn.00405920
lea ecx, [esp + 0x20]
push 1
push ecx
mov dword [esp + 0x74], 6
call fcn.004024eb
mov ecx, eax
call fcn.00403bb1
cmp dword [esp + 0x38], 0x10
mov dword [esp + 0x6c], 0xffffffff
jb 0x4fb8f0
mov edx, dword [esp + 0x24]
push edx
call fcn.00564155
add esp, 4
test ebp, ebp
jne 0x4fb9ad
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [esp + 0x24]
push eax
call fcn.004083af
push eax
lea ecx, [esp + 0x50]
push str.CWFP::DoAction___Failed_to_DeviceIoControl:
push ecx
mov dword [esp + 0x80], 7
call fcn.00404cfa
add esp, 0x14
cmp dword [esp + 0x38], 0x10
mov byte [esp + 0x6c], 9
jb 0x4fb940
mov edx, dword [esp + 0x24]
push edx
call fcn.00564155
add esp, 4
mov eax, dword [esp + 0x18]
xor ebp, ebp
push eax
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], ebp
mov byte [esp + 0x28], 0
call fcn.00565caa
add esp, 4
lea ecx, [esp + 0x44]
push ebp
push ecx
call fcn.004024eb
mov ecx, eax
call fcn.004020ae
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xffffffffffffffff
push ebp
lea edx, [esp + 0x4c]
mov dword [ebx + 0x18], esi
mov dword [ebx + 0x14], ebp
push edx
mov ecx, ebx
mov byte [ebx + 4], 0
call fcn.00403fb2
cmp dword [esp + 0x5c], 0x10
jb 0x4fb9dd
mov eax, dword [esp + 0x48]
push eax
call fcn.00564155
add esp, 4
jmp 0x4fb9dd
mov edi, dword [esp + 0x40]
mov esi, 0xf
mov ecx, dword [esp + 0x18]
push ecx
call fcn.00565caa
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
mov dword [ebx + 0x18], esi
mov dword [ebx + 0x14], 0
push 0x7bb8a6
mov ecx, ebx
mov byte [ebx + 4], 0
call fcn.00405920
mov eax, ebx
mov ecx, dword [esp + 0x64]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x4c]
xor ecx, esp
call fcn.00564b24
add esp, 0x5c
ret 0x10