Function at 0x41f220
Capabilities:
Access peb ldr_data

Disassembly:
mov ecx, dword [0x52fb9c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41f519
sub esp, 0x28
mov eax, dword [esp + 0x2c]
test eax, 3
jne 0x41f502
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ecx
call fcn.00411690
movzx eax, byte [0x52fa8c]
mov ecx, dword [esp + 8]
movzx edx, byte [esp + 0xc]
mov ebx, dword [esp + 0x10]
test al, al
jne 0x41f377
mov dword [esp + 0x20], ebx
mov byte [esp + 0x1f], dl
mov dword [esp + 0x24], ecx
mov eax, dword [0x52feb4]
test eax, eax
jle 0x41f2ba
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ecx
call fcn.004115d0
movzx eax, byte [esp + 8]
test al, al
jne 0x41f3ed
mov ecx, dword [esp + 0x24]
movzx edx, byte [esp + 0x1f]
mov ebx, dword [esp + 0x20]
mov dword [esp], ecx
mov byte [esp + 4], dl
mov dword [esp + 8], ebx
call fcn.00411720
movzx eax, byte [esp + 0xc]
test al, al
jne 0x41f373
mov eax, dword [esp + 0x24]
mov dword [esp], eax
movzx eax, byte [esp + 0x1f]
mov byte [esp + 4], al
mov eax, dword [esp + 0x20]
mov dword [esp + 8], eax
call fcn.00411750
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.004281f0
mov eax, dword [esp + 4]
mov dword [esp], eax
call fcn.004285a0
mov eax, dword [esp + 8]
movzx ecx, byte [esp + 0xc]
mov edx, dword [esp + 4]
test byte [edx], al
movzx ebx, byte [edx + eax + 0x840]
lea eax, [edx + eax + 0x840]
test cl, bl
jne 0x41f33a
mov dword [esp], eax
mov byte [esp + 4], cl
call fcn.00475210
mov eax, dword [esp + 0x38]
movzx ecx, byte [eax + 0x3e]
mov byte [esp], cl
call fcn.004283f0
movzx eax, byte [esp + 4]
test al, al
je 0x41f3a8
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ebx, dword [esp + 0x38]
mov ebx, dword [ebx + 0x44]
add ecx, ebx
mov dword [eax + 8], ecx
adc edx, 0
mov dword [eax + 0xc], edx
add esp, 0x28
ret
add esp, 0x28
ret
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov ebp, dword [esp + 0x30]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x34]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov byte [esp + 0x10], dl
mov dword [esp + 0x14], ebx
call fcn.00413950
movzx eax, byte [esp + 0x18]
test al, al
jne 0x41f3e9
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00402f60
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
call fcn.004276b0
movzx eax, byte [esp + 8]
test al, al
jne 0x41f3e5
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
call fcn.004275b0
add esp, 0x28
ret
add esp, 0x28
ret
call fcn.0043a8c0
lea eax, [0x4a565a]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.0043b0d0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043af90
lea eax, [0x4a1a15]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.0043b0d0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043af90
lea eax, str..____M____:1_yi___:_M___________n__s____Pn___n__n___n__t__LlLtLuMn__nosnilEOFNaNintmapptr...fin386objgc__:_gp___in__n___n_____P_m__MPC___end___run_:_n___pc__Gadxaesshaavxfmanettruesyncpipefilebind_InfInfboolint8uintchanfuncallgallprootitabsbrkidledead_is_LEAFbase_of______GOGC____pc:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fplockstoptake_gp_mp__mermssse3avx2bmi1bmi2timefalseclosentohsint16int32int64uint8arrayslice_and_defersweeptestRtestWexecWhchanexecRschedsudogtimergscanmheaptracepanicsleep_cntgcing_MB___got_..._n_maxscav__ptr_____usageinit__ms__fault_tabcheck_top_...___fp:Greeksse41sse42ssse3stringlistensocketuint16uint32uint64structGetACPsysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max_unlockmodifybad_tsadjust_...__n_mnil_base_Commonrdtscppopcntcmd_gonetdnsfloat32float64consoleCopySidWSARecvWSASendconnectinvaliduintptrforcegcallocmWcpuprofallocmRunknowngctraceIO_waitrunningsyscallwaitingforevernetworkUNKNOWN:events__goid_snil_n__scan__MB_in_pacer:___CPU___zombie__j0__head__panic:__nmsys_locks_dying_allocsGODEBUG_m__g0_pad1__pad2__text_minpc__tvalue__scan__ttypes_:_type_avx512fos_execruntimetls3desno_anodeCancelIoReadFileAcceptExWSAIoctlshutdownnil_PoolscavengepollDesctraceBufdeadlockraceFinipanicnilcgocheckrunnable_procid_eax_____ebx_____ecx_____edx_____edi_____esi_____ebp_____esp_____eip_____eflags__cs______fs______gs_______is_not__pointer_packedBAD_RANK_status_unknown_trigger_npages_nalloc_nfreedruntime._signal_reflect._newval_mcount_bytes___stack__minLC__maxpc_maybeAdd_tstack__minutes_status_etypes_wsaioctlavx512bwavx512vlgo_typesnet_httpgo_buildnetedns0tlskyberx509sha1FindCloseLocalFreeMoveFileWWriteFileWSASendTocomplex64interfacentdll.dllpsapi.dlltimerSendpollCacheprofBlockstackpoolhchanLeafwbufSpansGC__idle_mSpanDeadinittracescavtracepanicwaitchan_sendpreemptedcoroutinecopystack____node_ms_cpu____forced__wbuf1.n_wbuf2.n_s.limit_s.state_B_work___B_exp.___marked___unmarked_in_use__n__size____tail__recover:__not_in__ctxt___0__oldval__newval_threads:_status_blocked_lockedgatomicor8_runtime_m__curg_unknown_needsAddneedsAdd_cleanHeadtraceback_stack__gp.goid_lockedmInheritedpclmulqdqmath_randtlsrsakex_dev_stdinwinsymlinkowner_dieddnsapi.dllws2_32.dllDnsQuery_WGetIfEntryCancelIoExCreatePipeGetVersionWSACleanupWSAStartupgetsockoptsetsockoptcomplex128LockFileExWSASocketWnotifyListprofInsertstackLargeNot_workermSpanInUseGOMAXPROCSstop_tracedisablethpinvalidptrschedtracesemacquiredebug_call_flushGen__MB_goal__s.state___s.base___heapGoalGOMEMLIMIT_KiB_now___pages_at__sweepgen_sweepgen___bound____limit__exitThreadBad_varintGC_forced_n_runqueue_stopwait_runqsize_gfreecnt_throwing_spinningatomicand8float64nanfloat32nanException__ptrSize__targetpc_until_pcupdateHeapunknown_pcruntime:_ggoroutine_unixpacketexecerrdothttp2debugcrypto_tlsshort_write_dev_stdout_dev_stderrOpenProcessunreachableGetFileTypebroken_pipebad_messagefile_existsbad_addresscrypt32.dllmswsock.dllsecur32.dllshell32.dlluserenv.dllRegCloseKeyCloseHandleCreateFileWDeleteFileWExitProcessFreeLibrarySetFileTimeVirtualLockWSARecvFromclosesocketgetpeernamegetsocknameProcessPrngMoveFileExWNetShareAddNetShareDelassistQueuenetpollInitreflectOffsglobalAllocmSpanManualstart_traceclobberfreegccheckmarkscheddetailunspecifiedcgocall_nil_s.nelems___of_size__runtime:_p__ms_clock___nBSSRootsruntime:_P__exp.__for_minTriggerGOMEMLIMITbad_m_value__elemsize_freeindex_span.list__npages___p__status_in_status__idleprocs_gcwaiting_schedtick_timerslen_mallocingbad_timedivfloat64nan1float64nan2float64nan3float32nan2GOTRACEBACK__at_entry__targetpc___plugin:_runtime:_g_:_frame.spcreated_by_i_o_timeoutread_varintgocachehashgocachetesthttp2clienthttp2serverarchive_tartls10servercrypto_x509archive_zipkernel32.dllshort_bufferinvalid_slothost_is_downillegal_seekadvapi32.dlliphlpapi.dllnetapi32.dllGetLengthSidGetLastErrorGetStdHandleGetTempPathWLoadLibraryWReadConsoleWSetEn
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0043b0d0
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043af90
lea eax, [0x4a08b6]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0043b0d0
call fcn.0043a920
lea eax, [0x4a099c]
mov dword [esp], eax
mov dword [esp + 4], 4
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], eax
call fcn.0041f530
lea eax, [0x4a08f7]
mov dword [esp], eax
mov dword [esp + 4], 3
mov eax, dword [esp + 0x2c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xffffffff
call fcn.0041f530
mov eax, dword [0x52fb9c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov byte [eax + 0x95], 2
lea eax, [0x4a3272]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.0046b0d0
lea eax, [0x4a6879]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0046b0d0
nop
call fcn.0046eed0
jmp fcn.0041f220