Function at 0x416e90
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5461dd
mov eax, dword fs:[0]
push eax
sub esp, 0x204
mov eax, dword [0x5abcc4]
xor eax, ebp
mov dword [ebp - 0x18], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x208], ecx
mov dword [ebp - 0x14], 0x80804
push 1
push 0
push 0
push 0
push 6
push 0
push 0
push 0
lea ecx, [ebp - 0x1fc]
call fcn.00502499
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1fc]
call fcn.005016a4
add eax, 0x34
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x20c]
mov dword [edx], ecx
lea ecx, [ebp - 0x10]
call fcn.004096a0
mov byte [ebp - 4], 1
push str.Binary_DWF__Desgin_Web_Format__v6.0__.dwf_
lea ecx, [ebp - 0x10]
call fcn.00409780
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push 0x5620f4
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push str.Zipped_Ascii_Encoded_2D_Stream_DWF__Design_Web_Format__v6.0__.dwf_
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push 0x562144
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push str.Compressed_DWF__Design_Web_Format__v5.5__.dwf_
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push 0x56217c
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push str.Binary_DWF__Design_Web_Format__v5.5__.dwf_
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push 0x5621b0
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push str.Ascii_DWF__Design_Web_Format__v5.5__.dwf_
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push 0x5621e4
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push str.Compressed_DWF__Design_Web_Format__v4.2__.dwf_
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push 0x56221c
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push str.Binary_DWF__Design_Web_Format__v4.2__.dwf_
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push 0x562250
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push str.Ascii_DWF__Design_Web_Format__v4.2__.dwf_
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push 0x562284
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push str.XPS__.dwfx_
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
push str..dwfx
lea ecx, [ebp - 0x10]
call fcn.00408d80
push 0
lea ecx, [ebp - 0x10]
call fcn.00437c30
lea ecx, [ebp - 0x1fc]
call fcn.005016a4
mov dword [eax + 0x3c], 0x5622a4
lea ecx, [ebp - 0x10]
call fcn.004a7b60
mov esi, eax
lea ecx, [ebp - 0x1fc]
call fcn.005016a4
mov dword [eax + 0xc], esi
lea ecx, [ebp - 0x1fc]
call fcn.005016a4
mov dword [eax + 0x30], str.Export_To_Dwf
lea ecx, [ebp - 0x1fc]
call fcn.00502cc8
cmp eax, 1
jne 0x4171f5
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x1fc]
call fcn.00502df4
mov byte [ebp - 4], 2
push 0
push 0x2e
lea ecx, [ebp - 0x200]
call fcn.00437b70
cmp eax, 0xffffffff
jne 0x417146
push 0x5622b8
lea ecx, [ebp - 0x200]
call fcn.00408d80
mov ecx, dword [ebp - 0x208]
mov edx, dword [ecx + 0xf4]
mov eax, dword [ebp - 0x208]
mov ecx, dword [eax + 0xf4]
mov edx, dword [edx]
mov eax, dword [edx + 0x10]
call eax
mov dword [ebp - 0x210], eax
lea ecx, [ebp - 0x1fc]
call fcn.005016a4
mov ecx, dword [eax + 0x18]
push ecx
lea ecx, [ebp - 0x200]
call fcn.004a7b60
push eax
call dword [sym.imp.gsio.dll_gs_A2U]
add esp, 4
push eax
mov edx, dword [ebp - 0x210]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x210]
mov edx, dword [eax + 0x1cc]
call edx
test eax, eax
jne 0x4171e6
mov byte [ebp - 0x201], 1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x200]
call fcn.00408fa0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.00408fa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1fc]
call fcn.0050205f
mov al, byte [ebp - 0x201]
jmp 0x417220
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x200]
call fcn.00408fa0
mov byte [ebp - 0x202], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10]
call fcn.00408fa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1fc]
call fcn.0050205f
mov al, byte [ebp - 0x202]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.005255a0
mov esp, ebp
pop ebp
ret