Function at 0x416fe0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x497e51
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1874
call fcn.00474970
mov eax, dword [0x4cb08c]
xor eax, esp
mov dword [esp + 0x1870], eax
push ebx
push esi
push edi
mov eax, dword [0x4cb08c]
xor eax, esp
push eax
lea eax, [esp + 0x1888]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [edi + 8]
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x1c], edi
je 0x4172a1
mov eax, dword [ebp + 8]
cmp eax, dword [edi + 0x28]
jl 0x4172a1
push 0x800
lea ecx, [esp + 0x80]
push ebx
push ecx
call fcn.00475320
mov eax, dword [ebp + 0xc]
add esp, 0xc
lea edx, [ebp + 0x10]
push edx
push eax
lea ecx, [esp + 0x84]
push 0x800
push ecx
call fcn.00474a7d
lea edx, [esp + 0x28]
push edx
call fcn.004703a0
add esp, 0x14
mov ecx, eax
lea eax, [esp + 0x28]
mov dword [esp + 0x1890], ebx
call fcn.0041e070
mov dword [esp + 0x10], eax
lea esi, [esp + 0x44]
mov byte [esp + 0x1890], 1
call fcn.00416c60
mov esi, 0x10
cmp dword [edi + 0x24], esi
jb 0x4170b7
mov edx, dword [edi + 0x10]
jmp 0x4170ba
lea edx, [edi + 0x10]
mov ecx, dword [esp + 0x10]
cmp dword [ecx + 0x18], esi
jb 0x4170c8
mov ecx, dword [ecx + 4]
jmp 0x4170cb
add ecx, 4
cmp dword [eax + 0x18], esi
jb 0x4170d5
mov eax, dword [eax + 4]
jmp 0x4170d8
add eax, 4
lea esi, [esp + 0x7c]
push esi
push edx
push ecx
mov ecx, dword [ebp + 8]
push ecx
push eax
push str._s__d___s___s__s
push 0xffffffffffffffff
lea edx, [esp + 0x898]
push 0x1000
push edx
call fcn.00472a43
mov esi, 0x10
add esp, 0x24
cmp dword [esp + 0x5c], esi
jb 0x417118
mov eax, dword [esp + 0x48]
push eax
call fcn.004716d0
add esp, 4
cmp dword [esp + 0x40], esi
mov dword [esp + 0x5c], 0xf
mov dword [esp + 0x58], ebx
mov byte [esp + 0x48], bl
jb 0x41713b
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.004716d0
add esp, 4
mov dword [esp + 0x1890], 0xffffffff
mov eax, dword [esp + 0x18]
cmp eax, ebx
mov dword [esp + 0x40], 0xf
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x2c], bl
je 0x417184
mov esi, eax
add eax, 4
or edx, 0xffffffff
lock xadd dword [eax], edx
jne 0x417184
mov eax, dword [esi]
mov edx, dword [eax]
push ebx
mov ecx, esi
call edx
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov eax, dword [edi + 4]
mov eax, dword [eax]
mov esi, edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], esi
cmp esi, ebx
mov ecx, dword [edi + 4]
mov dword [esp + 0x24], ecx
je 0x4171a2
cmp esi, edi
je 0x4171a7
call fcn.00471ad5
mov edx, dword [esp + 0x24]
cmp dword [esp + 0x14], edx
je 0x4172a1
cmp esi, ebx
jne 0x4171be
call fcn.00471ad5
mov eax, dword [esp + 0x14]
cmp eax, dword [esi + 4]
jne 0x4171cc
call fcn.00471ad5
mov ecx, dword [esp + 0x14]
mov edi, dword [ecx + 0x28]
cmp edi, ebx
je 0x41728b
mov edx, dword [ebp + 8]
cmp edx, dword [edi + 4]
jl 0x41728b
lea eax, [esp + 0x87c]
mov dword [esp + 0x78], 0xf
mov dword [esp + 0x74], ebx
mov byte [esp + 0x64], bl
lea edx, [eax + 1]
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x417201
sub eax, edx
push eax
lea eax, [esp + 0x880]
push eax
lea ecx, [esp + 0x68]
call fcn.00402dd0
sub esp, 0x24
mov dword [esp + 0x18b4], 2
mov dword [esp + 0x3c], esp
mov esi, esp
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push 0xffffffffffffffff
push ebx
lea edx, [esp + 0xa8]
mov dword [ecx + 0x18], 0xf
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.004028e0
push edi
call fcn.0041e090
add esp, 0x20
call fcn.00416710
push eax
call fcn.0041e170
mov dword [esp + 0x1890], 0xffffffff
cmp dword [esp + 0x78], 0x10
jb 0x41728b
mov eax, dword [esp + 0x64]
push eax
call fcn.004716d0
add esp, 4
lea esi, [esp + 0x10]
call fcn.0041c540
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 0x1c]
jmp 0x417193
mov ecx, dword [esp + 0x1888]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1870]
xor ecx, esp
call fcn.00471497
mov esp, ebp
pop ebp
ret