Function at 0x1b417259
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x99c
mov eax, dword [0x1b44b010]
xor eax, esp
mov dword [esp + 0x998], eax
mov eax, dword [esp + 0x9a8]
mov ecx, dword [esp + 0x9ac]
push esi
mov esi, dword [esp + 0x9b8]
cmp esi, 5
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
ja case.default.0x1b417294
jmp dword [esi*4 + 0x1b417830]
mov edx, dword [esp + 0x9a8]
mov eax, dword [esp + 0x9a4]
push ebx
push edx
push eax
call fcn.1b4126d3
mov ebx, eax
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x1b417523
test esi, esi
push ebp
mov ebp, dword [ebx + 8]
push edi
mov edi, dword [ebx + 4]
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], ebp
je 0x1b417519
cmp esi, 4
je 0x1b417519
cmp esi, 5
je 0x1b417519
mov ecx, dword [esp + 0x9b0]
push ecx
call fcn.1b413784
push 1
push eax
mov dword [esp + 0x24], eax
call fcn.1b419847
mov ebp, eax
xor ebx, ebx
cmp ebp, ebx
je 0x1b417559
mov dword [ebp + 0x230], ebx
mov dword [ebp + 0x1c], esi
mov dword [ebp + 0x20], ebx
mov edi, dword [edi + 0x394]
test edi, edi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x10], ebx
je 0x1b417409
lea ecx, [ecx]
push 0x2a0
call fcn.1b4117ae
mov esi, eax
test esi, esi
je 0x1b41754e
push 0x2a0
push 0
push esi
call fcn.1b411863
mov dword [esi + 4], ebx
mov edx, dword [edi + 0xc]
mov dword [esi + 8], edx
mov eax, dword [edi + 0x10]
add esp, 0xc
add ebx, 1
cmp eax, 0x10
mov dword [esi + 0xc], eax
je 0x1b41752a
mov dword [esi + 0x10], 0
mov edx, dword [edi + 0x14]
mov eax, dword [esp + 0x2c]
mov dword [esi + 0x14], edx
cmp byte [eax + 0x1c], 1
jne 0x1b41750e
mov ecx, dword [edi + 8]
and ecx, 0xffffffdf
mov dword [esi + 0x18], ecx
push 0x4b0
push 0x41
lea eax, [esi + 0x1c]
push eax
lea ecx, [edi + 0x24]
push ecx
call fcn.1b417122
mov eax, dword [esp + 0x28]
push 2
push 0x100
lea edx, [esi + 0x9e]
push edx
add eax, 0x398
push eax
call fcn.1b417122
cmp dword [ebp + 0x230], 0
je 0x1b417503
mov ecx, dword [esp + 0x18]
mov dword [ecx], esi
mov edi, dword [edi]
add dword [esp + 0x10], 1
test edi, edi
mov dword [esp + 0x18], esi
jne 0x1b417332
cmp dword [esp + 0x10], edi
jle 0x1b417409
mov eax, dword [esp + 0x10]
mov ecx, dword [ebp + 0x230]
mov dword [ebp + 0x20], eax
mov byte [ebp + 0x24], 2
mov dword [ebp + 0x234], ecx
call sub.KERNEL32.dll_GetCurrentProcessId
push eax
call fcn.1b41370d
mov edx, dword [eax + 0x1c]
mov eax, dword [ebp + 0xc]
push 0x1b44bcd0
push eax
mov eax, dword [esp + 0x9b8]
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [edx + 0x24]
push eax
call ecx
mov esi, eax
test esi, esi
jne 0x1b41753f
mov eax, dword [esp + 0x20]
mov dword [ebp + 0x10], eax
mov eax, dword [esp + 0x24]
mov ecx, dword [eax + 0x374]
mov dword [ebp + 0x14], ecx
mov edx, dword [eax + 0x378]
mov ecx, dword [esp + 0x10]
mov dword [ebp + 0x18], edx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x4c], eax
mov eax, 1
mov dword [esp + 0x58], eax
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x9c0]
cmp eax, 0x38
mov dword [esp + 0x50], ecx
mov dword [esp + 0x54], 0
mov dword [esp + 0x5c], 2
mov dword [esp + 0x60], 3
mov dword [esp + 0x64], 4
mov dword [esp + 0x68], 5
mov dword [esp + 0x6c], 6
mov dword [esp + 0x70], 7
mov dword [esp + 0x74], 8
mov dword [esp + 0x78], 9
mov dword [esp + 0x48], 0x38
ja 0x1b4174d6
mov dword [esp + 0x48], eax
mov edx, dword [esp + 0x14]
push eax
push edx
push 0x38
lea eax, [esp + 0x54]
push eax
call fcn.1b41177b
pop edi
pop ebp
pop ebx
pop esi
mov ecx, dword [esp + 0x998]
xor ecx, esp
call fcn.1b41133e
add esp, 0x99c
ret 0x18
mov dword [ebp + 0x230], esi
jmp 0x1b4173d9
mov edx, dword [edi + 8]
mov dword [esi + 0x18], edx
jmp 0x1b417395
mov eax, dword [esp + 0x10]
test eax, eax
je 0x1b417560
jmp 0x1b417567
mov eax, 0xfffffae2
jmp 0x1b4174ea
mov ax, word [edi + 0x20]
mov word [esi + 0x10], ax
mov cx, word [edi + 0x1c]
mov word [esi + 0x12], cx
jmp 0x1b417378
mov edx, dword [esp + 0x1c]
push ebp
push edx
call fcn.1b417ef8
mov eax, esi
jmp 0x1b4174e8
mov edx, dword [esp + 0x1c]
push ebp
push edx
call fcn.1b417ef8
mov eax, 0xfffffc0d
jmp 0x1b4174e8
mov eax, 0xfffffc15
jmp 0x1b4174e8
mov ecx, dword [edi + 4]
cmp dword [ecx + 8], 0
push 0x41
jne 0x1b417586
lea edx, [esp + 0x6a4]
push edx
push eax
mov eax, dword [ebp + 0x30]
push eax
call fcn.1b415b00
jmp 0x1b417594
push eax
lea ecx, [esp + 0x6a8]
push ecx
call fcn.1b4150bf
push 0x4b0
push 0x41
lea edx, [esp + 0x72c]
push edx
lea eax, [esp + 0x6ac]
push eax
push ebp
call fcn.1b42cc6a
test eax, eax
jne 0x1b4175d0
mov ecx, dword [esp + 0x10]
push 1
push ecx
push 0xffffdffa
call fcn.1b429427
mov eax, 0xfffffc16
jmp 0x1b4174e8
lea edx, [esp + 0x724]
push edx
push edi
call fcn.1b42e8b4
xor ebp, ebp
cmp eax, ebp
je 0x1b4175e9
cmp dword [eax + 0x10], ebp
jne 0x1b4175f3
mov eax, 0xfffffa1d
jmp 0x1b4174e8
cmp esi, ebp
jne 0x1b41766b
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x34], ecx
mov ecx, dword [eax + 0x10]
cmp ecx, 0x10
mov dword [esp + 0x38], ecx
jne 0x1b41761e
mov dx, word [eax + 0x20]
mov word [esp + 0x3c], dx
mov cx, word [eax + 0x1c]
mov word [esp + 0x3e], cx
jmp 0x1b417622
mov dword [esp + 0x3c], ebp
mov edx, dword [eax + 0x14]
mov dword [esp + 0x40], edx
cmp byte [ebx + 0x1c], 1
jne 0x1b41763b
mov eax, dword [eax + 8]
and eax, 0xffffffdf
mov dword [esp + 0x44], eax
jmp 0x1b417642
mov ecx, dword [eax + 8]
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0x9c0]
cmp eax, 0x18
mov dword [esp + 0x30], 0x18
ja 0x1b41765a
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x14]
push eax
push edx
push 0x18
lea eax, [esp + 0x3c]
jmp 0x1b4174e2
cmp esi, 4
jne 0x1b417782
mov ecx, dword [eax + 0xc]
mov dword [esp + 0x84], ecx
mov ecx, dword [eax + 0x10]
cmp ecx, 0x10
mov dword [esp + 0x88], ecx
jne 0x1b4176a7
mov dx, word [eax + 0x20]
mov word [esp + 0x8c], dx
mov cx, word [eax + 0x1c]
mov word [esp + 0x8e], cx
jmp 0x1b4176ae
mov dword [esp + 0x8c], ebp
mov edx, dword [eax + 0x14]
mov dword [esp + 0x90], edx
cmp byte [ebx + 0x1c], 1
jne 0x1b4176cd
mov eax, dword [eax + 8]
and eax, 0xffffffdf
mov dword [esp + 0x94], eax
jmp 0x1b4176d7
mov ecx, dword [eax + 8]
mov dword [esp + 0x94], ecx
push 2
push 0x100
lea edx, [esp + 0x7b0]
push edx
add edi, 0x398
push edi
call fcn.1b417122
lea eax, [esp + 0x98]
lea esi, [esp + 0x7a8]
mov ecx, eax
mov edx, 0x100
sub esi, ecx
lea ecx, [edx + 0x7ffffefe]
test ecx, ecx
je 0x1b417729
movzx ecx, word [esi + eax]
cmp cx, bp
je 0x1b417729
mov word [eax], cx
add eax, 2
sub edx, 1
je 0x1b41772d
jmp 0x1b417709
cmp edx, ebp
jne 0x1b417730
sub eax, 2
mov edx, dword [esp + 0x10]
push 0x100
mov word [eax], bp
push edx
lea eax, [esp + 0x2a0]
push eax
call fcn.1b4150bf
mov eax, dword [esp + 0x9c0]
cmp eax, 0x418
mov dword [esp + 0x80], 0x418
ja 0x1b41776a
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x14]
push eax
push ecx
push 0x418
lea edx, [esp + 0x8c]
push edx
jmp 0x1b4174e3
push 0x100
lea ecx, [esp + 0x4a4]
push ecx
mov dword [esp + 0x4a4], ebp
mov word [esp + 0x4a8], bp
mov edx, dword [eax + 0x18]
add edi, 0xc
push edi
push edx
call fcn.1b43528d
test eax, eax
je 0x1b4177b7
mov word [esp + 0x4a0], bp
mov eax, dword [esp + 0x9c0]
cmp eax, 0x208
mov dword [esp + 0x498], 0x208
ja 0x1b4177d7
mov dword [esp + 0x498], eax
push eax
mov eax, dword [esp + 0x18]
push eax
push 0x208
lea ecx, [esp + 0x4a4]
push ecx
jmp 0x1b4174e3
mov eax, 0xfffffc17
pop esi
mov ecx, dword [esp + 0x998]
xor ecx, esp
call fcn.1b41133e
add esp, 0x99c
ret 0x18
mov ecx, dword [esp + 0x99c]
pop esi
xor ecx, esp
mov eax, 0xfffffc15
call fcn.1b41133e
add esp, 0x99c
ret 0x18