Function at 0x4216d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x647874]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
lea eax, [esp - 0x40]
cmp eax, dword [ecx + 8]
jbe 0x421e6c
sub esp, 0xc0
mov eax, dword [esp + 0xc4]
mov dword [esp], eax
call fcn.00422720
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [0x6481e0], eax
mov dword [0x6481e4], ecx
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0xe0]
mov edx, dword [eax + 0xe4]
mov ebx, dword [esp + 0xc8]
sub ebx, ecx
mov dword [esp + 0x80], ebx
mov ecx, dword [esp + 0xcc]
sbb ecx, edx
mov dword [esp + 0x84], ecx
test ecx, ecx
setg dl
xchg ebp, ebx
sete bl
xchg ebp, ebx
test ebx, ebx
xchg esi, ebx
seta bl
xchg esi, ebx
and esi, ebp
or esi, edx
xchg esi, eax
mov byte [esp + 0x17], al
xchg esi, eax
xchg esi, eax
test al, al
xchg esi, eax
jne 0x421776
movsd xmm1, qword [0x5540b0]
jmp 0x42180f
mov edx, eax
mov eax, ebx
mov ebp, dword [esp + 0xd0]
mov esi, edx
mul ebp
mov dword [esp + 0xa4], eax
mov edi, ebp
imul ebp, ecx
add edx, ebp
sar edi, 0x1f
imul edi, ebx
add edx, edi
mov dword [esp + 0xa0], edx
lea edi, [esi + 0xc0]
mov dword [esp], edi
call fcn.00402ab0
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00462c60
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0x98], xmm0
mov ecx, dword [esp + 0xa4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00462c60
movsd xmm0, qword [esp + 0x98]
divsd xmm0, qword [esp + 8]
movsd xmm1, qword [0x5540b0]
addsd xmm1, xmm0
mov eax, dword [esp + 0xc4]
movsd qword [esp + 0x60], xmm1
lea ecx, [eax + 0x68]
mov dword [esp + 0xbc], ecx
mov dword [esp], ecx
call fcn.00402c30
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x58]
mov edx, dword [eax + 0x5c]
mov ebx, dword [esp + 8]
cmp dword [esp + 4], ecx
setbe cl
cmp ebx, edx
sete dl
setb bl
and edx, ecx
or ebx, edx
test bl, bl
jne 0x421a5b
movzx ecx, byte [esp + 0x17]
test cl, cl
jne 0x421864
xorps xmm0, xmm0
jmp 0x4218fd
mov ecx, eax
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0xd0]
mov ebx, edx
mov ebp, eax
mul edx
mov dword [esp + 0xa4], eax
mov esi, dword [esp + 0x84]
imul esi, ebx
add edx, esi
sar ebx, 0x1f
imul ebp, ebx
add edx, ebp
mov dword [esp + 0xa0], edx
lea ebx, [ecx + 0xd8]
mov dword [esp], ebx
call fcn.00402ab0
mov ecx, dword [esp + 4]
mov edx, dword [esp + 8]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.00462c60
movsd xmm0, qword [esp + 8]
movsd qword [esp + 0x98], xmm0
mov ecx, dword [esp + 0xa4]
mov dword [esp], ecx
mov ecx, dword [esp + 0xa0]
mov dword [esp + 4], ecx
call fcn.00462c60
movsd xmm0, qword [esp + 0x98]
divsd xmm0, qword [esp + 8]
mov eax, dword [esp + 0xc4]
movsd xmm1, qword [esp + 0x60]
addsd xmm0, xmm1
movsd qword [esp + 0x98], xmm0
movsd xmm2, qword [0x5540d8]
subsd xmm2, xmm1
movsd qword [esp + 0x90], xmm2
lea ecx, [eax + 0xa0]
mov dword [esp + 0xb8], ecx
lea edx, [eax + 0xa8]
mov dword [esp + 0xb4], edx
lea ebx, [eax + 0xb0]
mov dword [esp + 0xb0], ebx
mov dword [esp], ecx
call fcn.00402ab0
mov eax, dword [esp + 4]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x5c], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp], edx
call fcn.00402ab0
mov eax, dword [esp + 4]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x58], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
call fcn.00402ab0
mov eax, dword [esp + 4]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x54], ecx
mov edx, dword [esp + 0xbc]
mov dword [esp], edx
call fcn.00402c30
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x58]
mov edx, dword [eax + 0x5c]
mov ebx, dword [esp + 4]
mov ebp, dword [esp + 8]
mov esi, dword [esp + 0x38]
mov edi, dword [esp + 0x34]
add esi, edi
mov edi, dword [esp + 0x5c]
mov eax, dword [esp + 0x58]
adc edi, eax
mov eax, dword [esp + 0x30]
add esi, eax
mov dword [esp + 0x68], esi
mov eax, dword [esp + 0x54]
adc edi, eax
mov dword [esp + 0x6c], edi
sub ebx, ecx
mov dword [esp], ebx
sbb ebp, edx
mov dword [esp + 4], ebp
call fcn.00462d30
movsd xmm0, qword [esp + 0x98]
mulsd xmm0, qword [esp + 8]
movsd qword [esp + 0x98], xmm0
mov eax, dword [esp + 0x68]
mov dword [esp], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 4], eax
call fcn.00462c60
movsd xmm0, qword [esp + 0x90]
mulsd xmm0, qword [esp + 8]
movsd xmm1, qword [esp + 0x98]
divsd xmm1, xmm0
mov eax, dword [esp + 0xc4]
movsd xmm0, qword [eax + 0x20]
movsd qword [eax + 0x20], xmm1
xor ecx, ecx
jmp 0x421a63
add esp, 0xc0
ret
inc ecx
cmp ecx, 4
jge 0x421a80
movsd xmm2, qword [eax + ecx*8 + 0x28]
movsd xmm3, qword [eax + 0x20]
ucomisd xmm2, xmm3
jbe 0x421a62
movsd qword [eax + 0x20], xmm2
jmp 0x421a62
movsd qword [esp + 0x78], xmm1
movsd qword [esp + 0x70], xmm0
lea ecx, [eax + 0x28]
mov dword [esp], ecx
lea ecx, [eax + 0x30]
mov dword [esp + 4], ecx
mov dword [esp + 8], 0x18
call fcn.0046acb0
movsd xmm0, qword [esp + 0x78]
mov eax, dword [esp + 0xc4]
movsd qword [eax + 0x40], xmm0
mov ecx, dword [0x647c18]
test ecx, ecx
jle 0x421e65
call fcn.0043b060
call fcn.0043b060
lea eax, [0x524bb5]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043b8d0
movsd xmm0, qword [esp + 0x60]
movsd xmm1, qword [0x554110]
mulsd xmm0, xmm1
cvttsd2si eax, xmm0
mov dword [esp], eax
sar eax, 0x1f
mov dword [esp + 4], eax
call fcn.0043b6f0
lea eax, [0x524bbc]
mov dword [esp], eax
mov dword [esp + 4], 7
call fcn.0043b8d0
mov dword [esp], 0x19
mov dword [esp + 4], 0
call fcn.0043b6f0
lea eax, [0x52598d]
mov dword [esp], eax
mov dword [esp + 4], 0xb
call fcn.0043b8d0
call fcn.0043b0c0
mov eax, dword [esp + 0xc4]
lea ecx, [eax + 0x80]
mov dword [esp + 0xac], ecx
lea edx, [eax + 0x90]
mov dword [esp + 0xa8], edx
mov ebx, dword [esp + 0xb8]
mov dword [esp], ebx
call fcn.00402ab0
mov eax, dword [esp + 4]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x50], ecx
mov edx, dword [esp + 0xb4]
mov dword [esp], edx
call fcn.00402ab0
mov eax, dword [esp + 4]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x4c], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp], edx
call fcn.00402ab0
mov eax, dword [esp + 4]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x48], ecx
mov edx, dword [esp + 0xac]
mov dword [esp], edx
call fcn.00402c30
mov eax, dword [esp + 4]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x44], ecx
mov edx, dword [esp + 0xa8]
mov dword [esp], edx
call fcn.00402c30
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x78]
mov dword [esp + 0xa4], ecx
mov edx, dword [eax + 0x7c]
mov dword [esp + 0xa0], edx
mov ebx, dword [esp + 4]
mov dword [esp + 0x1c], ebx
mov ebp, dword [esp + 8]
mov dword [esp + 0x40], ebp
call fcn.0043b060
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.0043b6f0
lea eax, [0x524339]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0043b8d0
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 4], eax
call fcn.0043b6f0
lea eax, [0x524339]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0043b8d0
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 4], eax
call fcn.0043b6f0
lea eax, [0x525159]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.0043b8d0
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x20]
add eax, ecx
mov ecx, dword [esp + 0xa0]
mov edx, dword [esp + 0x44]
adc ecx, edx
mov edx, dword [esp + 0x1c]
add eax, edx
mov dword [esp], eax
mov eax, dword [esp + 0x40]
adc ecx, eax
mov dword [esp + 4], ecx
call fcn.0043b5c0
lea eax, [0x525162]
mov dword [esp], eax
mov dword [esp + 4], 9
call fcn.0043b8d0
call fcn.0043b0c0
nop
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
call fcn.00402c30
mov eax, dword [esp + 0xc4]
mov ecx, dword [eax + 0x58]
mov dword [esp + 0xa4], ecx
mov edx, dword [eax + 0x5c]
mov dword [esp + 0xa0], edx
mov ebx, dword [eax + 0x60]
mov dword [esp + 0x8c], ebx
mov eax, dword [eax + 0x64]
mov dword [esp + 0x88], eax
mov ebp, dword [esp + 4]
mov dword [esp + 0x18], ebp
mov esi, dword [esp + 8]
mov dword [esp + 0x3c], esi
call fcn.0043b060
lea eax, [0x5243eb]
mov dword [esp], eax
mov dword [esp + 4], 3
call fcn.0043b8d0
mov eax, dword [esp + 0xa4]
mov dword [esp], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 4], eax
call fcn.0043b5c0
lea eax, [0x5248f5]
mov dword [esp], eax
mov dword [esp + 4], 6
call fcn.0043b8d0
mov eax, dword [esp + 0x18]
mov dword [esp], eax
mov ecx, dword [esp + 0x3c]
mov dword [esp + 4], ecx
call fcn.0043b5c0
lea eax, [0x525eae]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.0043b8d0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x8c]
sub eax, ecx
mov dword [esp], eax
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x88]
sbb eax, ecx
mov dword [esp + 4], eax
call fcn.0043b6f0
lea eax, [0x525eba]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.0043b8d0
movsd xmm0, qword [esp + 0x70]
movsd qword [esp], xmm0
call fcn.0043b310
lea eax, str.__________My_c:_01.__xdM_____________n__s____Pn___n__ni____n__t____25ip53_:__nLlLtLuMn__idcmd_NUL:___.__zeddiegdbkdbHxDdbghxdSAEmdbdbxtcpgetregEOFfinptrnilobjgc__:_gp___in__n___n___NaN__P_m__MPC___end___..._:_n___pc__GMayUTCEET0001CATWATEATGMTHSTHDT_03_04_05ESTCSTCDTMSTMDT_02EDTASTADTPSTPDTNSTNDT06030407IST0908IDT12PKT11KST05JST10_01_11_12_08_0913CETBSTMSK_0614StdDlt125625cgodnsudpftpssh::1setintmapadxaesshaavxfmanet_:_TTLTEMP____filereadopenpipeStat.com.exe.bat.cmdpathquitbinddumppeekhttpkgdbmdbgwmicnameallgallprootitabsbrkidledead_is_LEAFbase_of______GOGC____pctrueInf_Inf:_pcas1cas2cas3cas4cas5cas6_at__n_tm_sp_sp:_lr:_fp_gp_mp__mJuneJulyEESTSASTAKSTAKDTACSTACDTAESTAEDTAWSTCESTNZSTNZDT3125icmpigmpftpspop3smtpmdnsdial__r_t_n_on_unixboolint8uintchanfuncermssse3avx2bmi1bmi2bitsNameTypecallkindchdir_nil_writecloseLstatntohsdnspyilspydebugILSpypizzacrackida__brutejamesproxymodelqueryvirusBrunodefersweeptestRtestWexecWexecRschedhchansudoggscanmheaptracepanicsleepgcing_MB___got_..._n_maxscav__ptr_____usagefalseinit__ms__fault_and__tab_top_...___fp:MarchApril053004300545063003300845103012451345_0930Local1562578125fileshttpsimap2imap3imapspop3shostsint16int32int64uint8arrayslicesse41sse42ssse3GreekError__at_ClassHidden__n____exec:_hangupkilledlistensocketx32dbgpc_retCentoswindbgdbgclrde4dotpepperghidrahackerx96dbgfolderrecentMillergeorgevmwareGetACPsysmontimersefenceselect__not_object_next_jobs_goid_sweep__B______util_alloc_free__span_prev_list__i___code_addr_m__p_p__mSCHED__curg_ctxt:_min__max__...__n_mnil_base_SundayMondayFridayAugustUTC_11UTC_02UTC_08UTC_09UTC12UTC13__val_390625netdnsdomaingophertelnet.localreturn.onionGetAcesendto_Valueuint16uint32uint64stringstructrdtscppopcntcmd_goCommonStringFormat__byteheaderAnswerLengthchan____chanreaddirconsolePATHEXT.UNCabortedCopySidWSARecvWSASendconnectsignal_reverseprocesssharpodfiddlerx64_dbgpetoolsmonitorollydbgwpe_proPhantOmx32_dbgphantomWPE_PROcharlescheckerharmonyPEToolssnifferAPPDATAwindowsJohnsonmalwaremaltestSandboxforcegcallocmWcpuprofallocmRunknowngctraceIO_waitrunningsyscallwaitingUNKNOWN:events__goid_snil_n__scan__MB_in_pacer:___CPU___zombie__j0__head__panic:__nmsys_locks_dying_allocsGODEBUG_m__g0_pad1__pad2__text_minpc__tvalue__scan__ttypes_:_type_TuesdayJanuaryOctoberMUI_StdMUI_Dltnil_key19531259765625wsarecvwsasendlookup_writetoFreeSidSleepExSwapperinvaliduintptrfloat32float64avx512fos_execruntime::ffff:answersChanDir_Value_intern_CommandFullPathno_anodeCancelIoReadFileAcceptExWSAIoctlshutdowngraywolfstrongoddebuggerreversalksdumper0harmonyvioinputSystem32John_Doesand_boxUSERNAMEscavengepollDesctraceBufdeadlockraceFinipanicnilcgocheckrunnable_procid_eax_____ebx_____ecx_____edx_____edi_____esi_____ebp_____esp_____eip_____eflags__cs______fs______gs_______is_not__pointerBAD_RANK_status_unknown_trigger_npages_nalloc_nfreedruntime._signal_reflect._newval_mcount_bytes___stack__minLC__maxpc__tstack__minutes_etypes_nil_PoolwsaioctlThursdaySaturdayFebruaryNovemberDecember__Month_48828125netedns0_::1_:53continue_gatewayaddress_readfromunixgramEqualSidSetEventIsWindowrecvfromavx512bwavx512vlgo_typesnet_httpgo_buildx509sha1GoStringClassANYQuestionfork_execexecwaitinterruptbus_errorFindCloseLocalFreeMoveFileWWriteFileWSASendTontdll.dllproxifierexeinfopetitanHidetitanhidewiresharkhttpdebugprocmon64mitmproxyviofs.sysmicrosoftdiskdrivetest_userrwxrwxrwxpsapi.dllprofBlockstackpoolhchanLeafwbufSpansmSpanDeadscavtraceinittracepanicwaitchan_sendpreemptedcoroutinecopystackinterface_ms_cpu____forced__wbuf1.n_wbuf2.n_s.limit_s.state_B_work___B_exp.___marked___unmarked_in_use__n__size____tail__recover:__not_in__ctxt___0__oldval__newval_threads:_status_blocked_lockedgatomicor8_runtime_m__curg_unknown_traceback_stack__lockedmWednesdaySeptember_07:00:00Z07:00:00244140625files_dnsdns_filesipv6_icmp_outboundlocalhostconnectexole32.dllwinmm.dllPurgeCommSetupCommbad_indirreflect:_complex64pclmulqdqmath_randtlsrsakexInherited_method:__MISSING____EXTRA_ClassINETAut
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0043b8d0
call fcn.0043b0c0
call fcn.0043b060
call fcn.0043b270
call fcn.0043b0c0
mov eax, dword [0x647874]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
movzx ecx, byte [eax + 0x8b]
lea edx, [ecx - 1]
nop
mov byte [eax + 0x8b], dl
cmp cl, 1
jne 0x421e65
nop
nop
lea eax, [0x6477f0]
mov dword [esp], eax
call fcn.0040ae50
add esp, 0xc0
ret
call fcn.00468fe0
jmp fcn.004216d0