Function at 0x423c40
Capabilities:
Access peb ldr_data
Get kernel32 base address
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x6ac429
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0xc], esi
call fcn.00423180
xor edi, edi
lea ecx, [esi + 0x390]
mov dword [esp + 0x1c], edi
call fcn.00510eb0
mov ebx, 1
push 0x1874
mov byte [esp + 0x20], bl
mov dword [esi + 0x38c], edi
mov dword [esi + 0x26d8], edi
mov dword [esi + 0x37c], edi
mov dword [esi + 0x330], edi
mov dword [esi + 0x2c8], edi
mov dword [esi + 0x2cc], edi
mov dword [esi + 0x2d0], edi
mov dword [esi + 0x2d4], edi
mov dword [esi + 0x2d8], edi
mov dword [esi + 0x2dc], edi
mov dword [esi + 0x2e0], edi
mov dword [esi + 0x2e4], edi
mov dword [esi + 0x2e8], edi
mov dword [esi + 0x2ec], edi
mov dword [esi + 0x2f0], edi
mov dword [esi + 0x2f4], edi
mov dword [esi + 0x2f8], edi
mov dword [esi + 0x2fc], edi
mov dword [esi + 0x338], edi
mov dword [esi + 0x33c], edi
mov dword [esi + 0x340], edi
mov dword [esi + 0x15c], edi
mov dword [esi + 0x160], edi
mov dword [esi + 0x164], edi
mov dword [esi + 0x168], edi
mov dword [esi + 0x16c], edi
mov dword [esi + 0x170], edi
mov dword [esi + 0x174], edi
mov dword [esi + 0x178], edi
mov dword [esi + 0x17c], edi
mov dword [esi + 0x180], edi
mov dword [esi + 0x184], edi
mov dword [esi + 0x188], edi
mov dword [esi + 0x18c], edi
mov dword [esi + 0x190], edi
mov dword [esi + 0x194], edi
mov dword [esi + 0x198], edi
mov dword [esi + 0x19c], edi
mov dword [esi + 0x1a0], edi
mov dword [esi + 0x1a4], edi
mov dword [esi + 0x26e8], edi
mov dword [esi + 0x26ec], edi
mov dword [esi + 0x26e0], edi
mov dword [esi + 0x26e4], edi
mov dword [esi + 0x26f0], edi
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 2
je 0x423db1
mov ecx, eax
call fcn.0049eae0
jmp 0x423db3
xor eax, eax
push 0x63b8
mov byte [esp + 0x20], bl
mov dword [esi + 0x26f0], eax
mov dword [esi + 0x380], edi
mov dword [esi + 0x384], edi
mov dword [esi + 0x388], edi
mov dword [esi + 0x300], edi
mov dword [esi + 0x304], edi
mov dword [esi + 0x308], edi
mov dword [esi + 0x30c], edi
mov dword [esi + 0x310], edi
mov dword [esi + 0x314], edi
mov dword [esi + 0x318], edi
mov dword [esi + 0x31c], edi
mov dword [esi + 0x320], edi
mov dword [esi + 0x328], edi
mov dword [esi + 0x32c], edi
mov dword [esi + 0x364], edi
mov dword [esi + 0x36c], edi
mov dword [esi + 0x370], edi
mov dword [esi + 0x368], edi
mov dword [esi + 0x374], edi
mov dword [esi + 0x378], edi
mov dword [esi + 0x334], edi
mov dword [esi + 0x344], edi
mov dword [esi + 0x348], edi
mov dword [esi + 0x34c], edi
mov dword [esi + 0x350], edi
mov dword [esi + 0x354], edi
mov dword [esi + 0x35c], edi
mov dword [esi + 0x358], edi
mov dword [esi + 0x324], edi
mov dword [esi + 0x360], edi
mov dword [esi + 0x26f4], edi
mov dword [esi + 0x26f8], edi
mov dword [esi + 0x26fc], edi
mov dword [esi + 0x2700], edi
mov dword [esi + 0x2704], edi
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 3
je 0x423eb2
mov ecx, eax
call fcn.00503c30
jmp 0x423eb4
xor eax, eax
push 0x740
mov byte [esp + 0x20], bl
mov dword [esi + 0x15c], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 4
je 0x423ee1
mov ecx, eax
call fcn.004f6e50
jmp 0x423ee3
xor eax, eax
push 0x564c
mov byte [esp + 0x20], bl
mov dword [esi + 0x160], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 5
je 0x423f10
mov ecx, eax
call fcn.00500460
jmp 0x423f12
xor eax, eax
push 0x6d4
mov byte [esp + 0x20], bl
mov dword [esi + 0x164], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 6
je 0x423f3f
mov ecx, eax
call fcn.00500800
jmp 0x423f41
xor eax, eax
push 0x127c
mov byte [esp + 0x20], bl
mov dword [esi + 0x168], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 7
je 0x423f6e
mov ecx, eax
call fcn.00507e10
jmp 0x423f70
xor eax, eax
push 0x4a64
mov byte [esp + 0x20], bl
mov dword [esi + 0x16c], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 8
je 0x423f9d
mov ecx, eax
call fcn.004fea20
jmp 0x423f9f
xor eax, eax
push 0xc958
mov byte [esp + 0x20], bl
mov dword [esi + 0x170], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 9
je 0x423fcc
mov ecx, eax
call fcn.004ee3f0
jmp 0x423fce
xor eax, eax
push 0x1ac0c
mov byte [esp + 0x20], bl
mov dword [esi + 0x174], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0xa
je 0x423ffb
mov ecx, eax
call fcn.004fa220
jmp 0x423ffd
xor eax, eax
push 0x90
mov byte [esp + 0x20], bl
mov dword [esi + 0x178], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0xb
je 0x42402a
mov ecx, eax
call fcn.00509f10
jmp 0x42402c
xor eax, eax
push 0x160
mov byte [esp + 0x20], bl
mov dword [esi + 0x17c], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0xc
je 0x424059
mov ecx, eax
call fcn.0050a2e0
jmp 0x42405b
xor eax, eax
push 0x46f8
mov byte [esp + 0x20], bl
mov dword [esi + 0x180], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0xd
je 0x424088
mov ecx, eax
call fcn.00423920
jmp 0x42408a
xor eax, eax
push 0x110
mov byte [esp + 0x20], bl
mov dword [esi + 0x184], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0xe
je 0x4240b8
push edi
mov ecx, eax
call fcn.004deac0
jmp 0x4240ba
xor eax, eax
push 0x110
mov byte [esp + 0x20], bl
mov dword [esi + 0x188], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0xf
je 0x4240e8
push ebx
mov ecx, eax
call fcn.004deac0
jmp 0x4240ea
xor eax, eax
push 0x148
mov byte [esp + 0x20], bl
mov dword [esi + 0x18c], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0x10
je 0x424117
mov ecx, eax
call fcn.004e69d0
jmp 0x424119
xor eax, eax
push 0x10c
mov byte [esp + 0x20], bl
mov dword [esi + 0x190], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0x11
je 0x424146
mov ecx, eax
call fcn.004de160
jmp 0x424148
xor eax, eax
push 0x2414
mov byte [esp + 0x20], bl
mov dword [esi + 0x194], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0x12
je 0x424175
mov ecx, eax
call fcn.004c6960
jmp 0x424177
xor eax, eax
push 0xc8
mov byte [esp + 0x20], bl
mov dword [esi + 0x198], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0x13
je 0x4241a4
mov ecx, eax
call fcn.004c85f0
jmp 0x4241a6
xor eax, eax
push 0x20ac
mov byte [esp + 0x20], bl
mov dword [esi + 0x19c], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0x14
je 0x4241d3
mov ecx, eax
call fcn.004c45d0
jmp 0x4241d5
xor eax, eax
push 0x2f40
mov byte [esp + 0x20], bl
mov dword [esi + 0x1a0], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0x15
je 0x424202
mov ecx, eax
call fcn.00485e70
jmp 0x424204
xor eax, eax
push 0x475c
mov byte [esp + 0x20], bl
mov dword [esi + 0x1a4], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0x16
je 0x424231
mov ecx, eax
call fcn.005142e0
jmp 0x424233
xor eax, eax
push 0x1e3c
mov byte [esp + 0x20], bl
mov dword [esi + 0x368], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0x17
je 0x424260
mov ecx, eax
call fcn.00514a30
jmp 0x424262
xor eax, eax
push 0x5c
mov byte [esp + 0x20], bl
mov dword [esi + 0x36c], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0x18
je 0x42428c
mov ecx, eax
call fcn.005140d0
jmp 0x42428e
xor eax, eax
push 0x63c
mov byte [esp + 0x20], bl
mov dword [esi + 0x370], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0x19
je 0x4242bb
mov ecx, eax
call fcn.00452e30
jmp 0x4242bd
xor eax, eax
push 0x54
mov byte [esp + 0x20], bl
mov dword [esi + 0x2700], eax
call fcn.005cc96d
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov byte [esp + 0x1c], 0x1a
je 0x4242e7
mov ecx, eax
call fcn.004aa410
jmp 0x4242e9
xor eax, eax
mov edx, dword [esi + 0x18c]
mov dword [esi + 0x2704], eax
mov eax, dword [esi + 0x188]
movzx ecx, byte [eax + 0x101]
mov dword [edx + 0x20], ecx
xor ecx, ecx
lea eax, [esi + 0x1a8]
mov edx, eax
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
mov dword [edx + 0x14], ecx
mov dword [edx + 0x18], ecx
mov dword [edx + 0x1c], ecx
mov dword [edx + 0x20], ecx
mov dword [edx + 0x24], ecx
mov dword [edx + 0x28], ecx
mov dword [edx + 0x2c], ecx
mov dword [edx + 0x30], ecx
mov dword [edx + 0x34], ecx
mov dword [edx + 0x38], ecx
mov dword [edx + 0x3c], ecx
mov dword [edx + 0x40], ecx
mov dword [edx + 0x44], ecx
mov dword [edx + 0x48], ecx
mov dword [edx + 0x4c], ecx
mov dword [edx + 0x50], ecx
mov dword [edx + 0x54], ecx
mov dword [edx + 0x58], ecx
mov dword [edx + 0x5c], ecx
mov dword [edx + 0x60], ecx
mov dword [edx + 0x64], ecx
mov dword [edx + 0x68], ecx
mov dword [edx + 0x6c], ecx
mov dword [edx + 0x70], ecx
mov dword [edx + 0x74], ecx
mov dword [edx + 0x78], ecx
mov dword [edx + 0x7c], ecx
mov dword [edx + 0x80], ecx
mov dword [edx + 0x84], ecx
mov dword [edx + 0x88], ecx
mov dword [edx + 0x8c], ecx
mov ecx, dword [esi + 0x15c]
mov edx, dword [esi + 0x160]
mov dword [eax], ecx
mov ecx, dword [esi + 0x164]
mov dword [esi + 0x1ac], edx
mov edx, dword [esi + 0x168]
mov dword [esi + 0x1b0], ecx
mov ecx, dword [esi + 0x16c]
mov dword [esi + 0x1b4], edx
mov edx, dword [esi + 0x170]
lea eax, [esi + 0x1ac]
mov dword [esi + 0x1b8], ecx
mov ecx, dword [esi + 0x174]
mov dword [esi + 0x1bc], edx
mov edx, dword [esi + 0x178]
mov dword [esi + 0x1c0], ecx
mov ecx, dword [esi + 0x1a0]
mov dword [esi + 0x1c4], edx
mov edx, dword [esi + 0x188]
mov dword [esi + 0x1c8], ecx
mov ecx, dword [esi + 0x18c]
mov dword [esi + 0x1cc], edx
mov edx, dword [esi + 0x17c]
mov dword [esi + 0x1d0], ecx
mov ecx, dword [esi + 0x180]
mov dword [esi + 0x1d4], edx
mov edx, dword [esi + 0x198]
mov dword [esi + 0x1d8], ecx
mov ecx, dword [esi + 0x19c]
mov dword [esi + 0x1dc], edx
mov edx, dword [esi + 0x184]
mov dword [esi + 0x1e0], ecx
mov ecx, dword [esi + 0x1a4]
mov dword [esi + 0x1e4], edx
mov dword [esi + 0x1e8], ecx
mov edx, dword [esi + 0x368]
mov byte [esp + 0x1c], bl
mov dword [esi + 0x1ec], edx
mov ecx, dword [esi + 0x36c]
mov dword [esi + 0x1f0], ecx
mov edx, dword [esi + 0x370]
mov dword [esi + 0x1f4], edx
mov ecx, dword [esi + 0x190]
mov dword [esi + 0x1f8], ecx
mov edx, dword [esi + 0x194]
mov dword [esi + 0x1fc], edx
mov ecx, dword [esi + 0x2700]
mov dword [esi + 0x200], ecx
mov ecx, 2
mov edx, dword [eax - 4]
cmp edx, edi
je 0x4244b2
lea ebx, [ecx - 2]
mov dword [edx + 0x24], ebx
mov edx, dword [eax]
cmp edx, edi
je 0x4244be
lea ebx, [ecx - 1]
mov dword [edx + 0x24], ebx
mov edx, dword [eax + 4]
cmp edx, edi
je 0x4244c8
mov dword [edx + 0x24], ecx
mov edx, dword [eax + 8]
cmp edx, edi
je 0x4244d5
lea ebx, [ecx + 1]
mov dword [edx + 0x24], ebx
mov edx, dword [eax + 0xc]
cmp edx, edi
je 0x4244e2
lea ebx, [ecx + 2]
mov dword [edx + 0x24], ebx
mov edx, dword [eax + 0x10]
cmp edx, edi
je 0x4244ef
lea ebx, [ecx + 3]
mov dword [edx + 0x24], ebx
add ecx, 6
lea edx, [ecx - 2]
add eax, 0x18
cmp edx, 0x24
jl 0x4244a5
xor ecx, ecx
lea eax, [esi + 0x238]
mov edx, eax
mov dword [edx], ecx
mov dword [edx + 4], ecx
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
mov dword [edx + 0x14], ecx
mov dword [edx + 0x18], ecx
mov dword [edx + 0x1c], ecx
mov dword [edx + 0x20], ecx
mov dword [edx + 0x24], ecx
mov dword [edx + 0x28], ecx
mov dword [edx + 0x2c], ecx
mov dword [edx + 0x30], ecx
mov dword [edx + 0x34], ecx
mov dword [edx + 0x38], ecx
mov dword [edx + 0x3c], ecx
mov dword [edx + 0x40], ecx
mov dword [edx + 0x44], ecx
mov dword [edx + 0x48], ecx
mov dword [edx + 0x4c], ecx
mov dword [edx + 0x50], ecx
mov dword [edx + 0x54], ecx
mov dword [edx + 0x58], ecx
mov dword [edx + 0x5c], ecx
mov dword [edx + 0x60], ecx
mov dword [edx + 0x64], ecx
mov dword [edx + 0x68], ecx
mov dword [edx + 0x6c], ecx
mov dword [edx + 0x70], ecx
mov dword [edx + 0x74], ecx
mov dword [edx + 0x78], ecx
mov dword [edx + 0x7c], ecx
mov dword [edx + 0x80], ecx
mov dword [edx + 0x84], ecx
mov dword [edx + 0x88], ecx
mov dword [edx + 0x8c], ecx
mov ecx, dword [esi + 0x15c]
mov dword [eax], ecx
mov edx, dword [esi + 0x160]
mov dword [esi + 0x23c], edx
mov eax, dword [esi + 0x164]
mov dword [esi + 0x240], eax
mov ecx, dword [esi + 0x168]
mov dword [esi + 0x244], ecx
mov edx, dword [esi + 0x16c]
mov dword [esi + 0x248], edx
mov eax, dword [esi + 0x170]
mov dword [esi + 0x24c], eax
mov ecx, dword [esi + 0x174]
mov dword [esi + 0x250], ecx
mov edx, dword [esi + 0x178]
mov dword [esi + 0x254], edx
mov eax, dword [esi + 0x1a0]
mov dword [esi + 0x258], eax
mov ecx, dword [esi + 0x188]
mov dword [esi + 0x25c], ecx
mov edx, dword [esi + 0x18c]
mov dword [esi + 0x260], edx
mov eax, dword [esi + 0x17c]
mov dword [esi + 0x264], eax
mov ecx, dword [esi + 0x180]
mov dword [esi + 0x268], ecx
mov edx, dword [esi + 0x198]
mov dword [esi + 0x26c], edx
mov eax, dword [esi + 0x19c]
mov dword [esi + 0x270], eax
mov ecx, dword [esi + 0x184]
mov dword [esi + 0x274], ecx
mov edx, dword [esi + 0x1a4]
mov dword [esi + 0x278], edx
mov eax, dword [esi + 0x368]
mov dword [esi + 0x27c], eax
mov ecx, dword [esi + 0x36c]
mov dword [esi + 0x280], ecx
mov edx, dword [esi + 0x370]
mov dword [esi + 0x284], edx
mov eax, dword [esi + 0x190]
mov dword [esi + 0x288], eax
mov ecx, dword [esi + 0x194]
mov dword [esi + 0x28c], ecx
mov edx, dword [esi + 0x2700]
mov dword [esi + 0x290], edx
mov eax, dword [esi + 0x2704]
mov dword [esi + 0x2ac], eax
call fcn.004a1510
call fcn.0050fe70
mov ecx, dword [esp + 0x14]
pop edi
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret