Function at 0x417820
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5231f0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push esi
push edi
lea ecx, [esp + 0xc]
mov dword [esp + 0x2c], 0
call fcn.0041e36c
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], 1
call fcn.0041e36c
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 2
call fcn.0041e36c
mov bl, 3
push 0x5cdd44
lea ecx, [esp + 0x38]
mov byte [esp + 0x30], bl
call fcn.0041e66c
test eax, eax
jge 0x417933
lea eax, [esp + 0x34]
lea ecx, [esp + 0xc]
push eax
call fcn.0041e360
mov ecx, dword [esp + 0x38]
mov eax, 0x5cdd34
test ecx, ecx
jne 0x4178a4
mov eax, 0x5db530
mov edi, dword [esp + 0x3c]
xor edx, edx
test edi, edi
sete dl
push edx
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x48], esp
push eax
call fcn.0041e3de
push ecx
mov byte [esp + 0x3c], 4
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x5db530
call fcn.0041e3de
push ecx
mov byte [esp + 0x40], 5
mov ecx, esp
mov dword [esp + 0x30], esp
push 0x5db530
call fcn.0041e3de
push ecx
lea eax, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
mov byte [esp + 0x48], 6
call fcn.0041e35a
lea ecx, [esp + 0x50]
mov byte [esp + 0x44], bl
push ecx
call fcn.0047dc00
mov ecx, eax
call fcn.0047df50
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x30], 8
call fcn.0041e360
lea ecx, [esp + 0x38]
mov byte [esp + 0x2c], bl
call fcn.0041e354
jmp 0x41797d
mov edx, dword [esp + 0x34]
push 0x5c
lea ecx, [esp + 0x38]
mov esi, dword [edx - 8]
call fcn.0041e5a6
sub esi, eax
lea eax, [esp + 0x38]
push esi
push eax
lea ecx, [esp + 0x3c]
call fcn.0041e62a
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x30], 9
call fcn.0041e360
lea ecx, [esp + 0x38]
mov byte [esp + 0x2c], bl
call fcn.0041e354
push 0x5c
lea ecx, [esp + 0x10]
call fcn.0041e8c4
mov ecx, dword [esp + 0x34]
mov edi, dword [0x53d274]
push ecx
call edi
mov esi, eax
test esi, esi
jne 0x4179f4
mov edx, dword [esp + 0xc]
push edx
call edi
mov esi, eax
test esi, esi
jne 0x4179f4
nop
call 0x7c90fe21
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x2c], 2
call fcn.0041e354
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], 1
call fcn.0041e354
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0
call fcn.0041e354
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0041e354
mov eax, esi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x24
ret
push 0x5cdd20
push esi
nop
call 0x7c80ae40
test eax, eax
jne 0x417a62
push esi
nop
call 0x7c80ac7e
nop
call 0x7c90fe21
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x2c], 2
call fcn.0041e354
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], 1
call fcn.0041e354
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0
call fcn.0041e354
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0041e354
mov eax, esi
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x24
ret
call eax
push esi
nop
call 0x7c80ac7e
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 2
call fcn.0041e354
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], 1
call fcn.0041e354
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0
call fcn.0041e354
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0041e354
mov ecx, dword [esp + 0x24]
pop edi
pop esi
xor eax, eax
mov dword fs:[0], ecx
pop ebx
add esp, 0x24
ret