Function at 0x417b10
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x6c
mov ebx, dword [esp + 0x88]
mov eax, dword [esp + 0x8c]
mov edi, dword [esp + 0x80]
mov ebp, dword [esp + 0x84]
cmp ebx, 1
mov dword [esp + 0x2c], eax
jbe 0x417d75
mov edx, dword [edi + 0x58]
mov dword [edi + 0x60], eax
test edx, edx
je 0x417b88
lea eax, [ebx + edx]
cmp dword [edi + 0x5c], eax
jae 0x417c00
mov dword [esp + 8], 0xaf9937
mov dword [esp + 4], 2
mov dword [esp], 0x1a
call fcn.00405fb0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
ret
movzx eax, byte [ebp]
movzx edx, byte [ebp + 1]
shl eax, 8
lea esi, [edx + eax]
cmp esi, dword [edi + 0x54]
jbe 0x417bc1
mov eax, dword [edi + 0x50]
test eax, eax
je 0x417baa
mov dword [esp], eax
call sub.msvcrt.dll_free
mov dword [esp], esi
call sub.msvcrt.dll_malloc
cmp eax, 1
mov dword [edi + 0x50], eax
sbb eax, eax
not eax
and eax, esi
mov dword [edi + 0x54], eax
mov eax, dword [edi + 0x50]
test eax, eax
je 0x417c16
cmp ebx, esi
mov dword [edi + 0x5c], esi
jbe 0x417d53
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0xaf990c
mov dword [esp + 4], 2
mov dword [esp], 0x1a
call fcn.00405fb0
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
ret
add edx, dword [edi + 0x50]
mov dword [esp + 8], ebx
mov dword [esp + 4], ebp
mov dword [esp], edx
call sub.msvcrt.dll_memcpy
add dword [edi + 0x58], ebx
mov ecx, dword [edi + 0x58]
mov edx, dword [edi + 0x5c]
cmp ecx, edx
je 0x417c2b
lea eax, [ecx + 1]
cmp edx, eax
jne 0x417b80
xor ebx, ebx
jmp 0x417c4b
cmp ebx, esi
jae 0x417d18
cmp esi, dword [edi + 0x5c]
nop
lea esi, [esi]
jae 0x417d18
mov ecx, dword [edi + 0x58]
mov ebx, esi
lea eax, [ebx + 4]
cmp eax, ecx
ja 0x417d03
mov eax, ebx
add eax, dword [edi + 0x50]
movzx edx, byte [eax + 3]
movzx eax, byte [eax + 2]
shl eax, 8
lea esi, [edx + eax]
mov eax, dword [edi + 0x5c]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 8], 0xaf9954
mov dword [esp + 4], 7
mov dword [esp], 0x1a
call fcn.00405fb0
cmp ebx, 3
jbe 0x417c30
cmp ebx, esi
jne 0x417c30
mov eax, dword [edi + 0x5c]
mov dword [esp + 0x10], eax
mov eax, dword [edi + 0x58]
mov dword [esp + 8], 0xaf9977
mov dword [esp + 4], 7
mov dword [esp], 0x1a
mov dword [esp + 0xc], eax
call fcn.00405fb0
mov edx, dword [edi + 0xfc]
test edx, edx
je 0x417da2
mov eax, dword [edi + 0x50]
mov dword [0xad1e94], eax
mov eax, dword [edi + 0x5c]
mov dword [esp], 0xad1e90
mov dword [0xad1e98], eax
mov eax, dword [esp + 0x2c]
mov dword [0xad1ea0], eax
call dword [edx + 0x10]
mov dword [edi + 0x58], 0
mov dword [edi + 0x58], 0
lea esi, [esi]
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0xaf9a9c
mov dword [esp + 4], 2
mov dword [esp], 0x1a
call fcn.00405fb0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x58], 0
jmp 0x417d10
mov eax, dword [edi + 0x50]
mov dword [esp + 8], ebx
mov dword [esp + 4], ebp
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x2c]
mov dword [edi + 0x58], ebx
mov dword [edi + 0x60], eax
jmp 0x417c16
mov dword [esp + 0x88], 0xaf98f2
mov dword [esp + 0x84], 2
mov dword [esp + 0x80], 0x1a
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.00405fb0
mov eax, dword [edi + 0x50]
add eax, 2
movzx edx, byte [eax + 1]
movzx eax, byte [eax]
shl eax, 8
add edx, eax
mov dword [esp + 0x30], edx
je 0x417cfc
mov dword [esp + 0x5c], edx
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
add edx, dword [edi + 0x50]
movzx eax, byte [edx]
movzx ecx, byte [edx + 1]
shl eax, 8
lea ebx, [ecx + eax]
movzx eax, byte [edx + 2]
movzx ecx, byte [edx + 3]
shl ebx, 0xa
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0xaf9991
shl eax, 8
add ecx, eax
mov dword [esp + 0x68], ecx
mov dword [esp + 4], 7
mov dword [esp], 0x1a
call fcn.00405fb0
mov eax, dword [edi + 0x50]
mov edx, dword [esp + 0x5c]
movzx eax, byte [edx + eax + 4]
cmp al, 0xff
je 0x417f96
add ebx, dword [esp + 0x2c]
mov ebp, edx
movzx esi, al
add ebp, 5
mov dword [esp + 0x28], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0xaf999a
mov dword [esp + 4], 7
mov dword [esp], 0x1a
call fcn.00405fb0
cmp esi, 3
je 0x417fb9
ja 0x417ee1
cmp esi, 1
je 0x4180dd
nop
jbe 0x41809a
mov dword [esp + 8], 0xaf99bc
mov dword [esp + 4], 7
mov dword [esp], 0x1a
call fcn.00405fb0
mov eax, dword [esp + 0x28]
mov dword [esp + 0x54], eax
mov eax, dword [edi + 0x50]
movzx eax, byte [eax + ebp]
cmp al, 0xff
je 0x417f96
movzx esi, al
add ebp, 1
jmp 0x417e6a
cmp esi, 5
je 0x418120
jae 0x417f57
mov eax, dword [edi + 0x50]
movzx ebx, byte [eax + ebp]
shr bl, 4
movzx ebx, bl
mov dword [edi + 0x74], ebx
movzx ecx, byte [ebp + eax]
and ecx, 0xf
mov dword [edi + 0x78], ecx
movzx edx, byte [ebp + eax + 1]
shr dl, 4
movzx edx, dl
mov dword [edi + 0x7c], edx
movzx eax, byte [ebp + eax + 1]
add ebp, 2
and eax, 0xf
mov dword [edi + 0x80], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0xaf99e3
mov dword [esp + 4], 7
mov dword [esp], 0x1a
call fcn.00405fb0
jmp 0x417eca
cmp esi, 6
je 0x418042
cmp esi, 0xff
je 0x418021
mov eax, dword [esp + 0x68]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0xaf9a58
mov dword [esp + 4], 2
sub eax, ebp
mov dword [esp + 0x10], eax
mov dword [esp], 0x1a
call fcn.00405fb0
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x418212
mov edx, dword [esp + 0x68]
cmp dword [esp + 0x5c], edx
je 0x417cfc
mov dword [esp + 0x5c], edx
jmp 0x417e02
mov eax, dword [edi + 0x50]
movzx ebx, byte [eax + ebp]
shr bl, 4
movzx ebx, bl
mov dword [edi + 0x64], ebx
movzx ecx, byte [ebp + eax]
and ecx, 0xf
mov dword [edi + 0x68], ecx
movzx edx, byte [ebp + eax + 1]
shr dl, 4
movzx edx, dl
mov dword [edi + 0x6c], edx
movzx eax, byte [ebp + eax + 1]
add ebp, 2
and eax, 0xf
mov dword [edi + 0x70], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0xaf99cb
mov dword [esp + 4], 7
mov dword [esp], 0x1a
call fcn.00405fb0
jmp 0x417eca
mov dword [esp + 8], 0xaf9a50
mov dword [esp + 4], 7
mov dword [esp], 0x1a
call fcn.00405fb0
jmp 0x417cfc
mov ecx, ebp
add ebp, 4
add ecx, dword [edi + 0x50]
movzx eax, byte [ecx]
movzx ebx, byte [ecx + 1]
movzx edx, byte [ecx + 3]
shl eax, 8
add ebx, eax
movzx eax, byte [ecx + 2]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0xaf9a2c
mov dword [esp + 4], 7
shl eax, 8
add edx, eax
lea eax, [edx + edx]
mov dword [esp + 0x10], edx
lea edx, [ebx + ebx]
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], edx
mov dword [esp], 0x1a
call fcn.00405fb0
jmp 0x417eca
mov dword [esp + 8], 0xaf99a3
mov dword [esp + 4], 7
mov dword [esp], 0x1a
call fcn.00405fb0
mov eax, dword [esp + 0x28]
mov dword [edi + 0x108], 0xffffffff
mov dword [esp + 0x54], 0xffffffff
mov dword [esp + 0x50], 1
mov dword [esp + 0x58], eax
jmp 0x417eca
mov dword [esp + 8], 0xaf99ac
mov dword [esp + 4], 7
mov dword [esp], 0x1a
call fcn.00405fb0
mov edx, dword [esp + 0x28]
mov dword [edi + 0x108], 0
mov dword [esp + 0x54], 0xffffffff
mov dword [esp + 0x50], 1
mov dword [esp + 0x58], edx
jmp 0x417eca
mov ebx, ebp
add ebx, dword [edi + 0x50]
movzx eax, byte [ebx]
lea esi, [ebx + 3]
movzx ecx, byte [ebx + 1]
movzx edx, byte [esi + 1]
shl eax, 8
add ecx, eax
movzx eax, byte [ebx + 2]
shl ecx, 8
add ecx, eax
movzx eax, byte [ebx + 3]
shl eax, 8
add edx, eax
movzx eax, byte [esi + 2]
shl edx, 8
mov dword [esp + 0x3c], 0
mov dword [esp + 0x34], 0
lea eax, [edx + eax]
mov edx, ecx
sar edx, 0xc
and ecx, 0xfff
cmp edx, ecx
mov dword [esp + 0x4c], edx
mov dword [esp + 0x48], ecx
ja 0x41819a
mov edx, ecx
add edx, 1
mov dword [esp + 0x3c], edx
mov edx, dword [esp + 0x4c]
sub dword [esp + 0x3c], edx
mov edx, dword [esp + 0x3c]
add edx, 7
and edx, 0xfffffff8
mov dword [esp + 0x34], edx
mov edx, eax
and eax, 0xfff
sar edx, 0xc
mov dword [esp + 0x40], eax
sub eax, edx
cmp dword [esp + 0x40], edx
mov dword [esp + 0x38], eax
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x3c]
sbb eax, eax
add ebp, 6
not eax
and dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x44]
mov dword [esp + 8], 0xaf99fc
mov dword [esp + 4], 7
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x4c]
mov dword [esp], 0x1a
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], eax
call fcn.00405fb0
jmp 0x417eca
mov dword [esp + 4], 0x5c
mov dword [esp], 1
call sub.msvcrt.dll_calloc
cmp dword [esp + 0x54], 0xffffffff
mov ebx, eax
mov eax, dword [esp + 0x58]
mov dword [ebx + 0x50], eax
je 0x4182f1
mov eax, dword [esp + 0x54]
mov dword [ebx + 0x54], eax
mov edx, dword [esp + 0x64]
mov eax, dword [esp + 0x60]
mov dword [ebx + 0x28], edx
mov edx, dword [esp + 0x44]
mov dword [ebx + 0x2c], eax
mov eax, dword [esp + 0x40]
mov dword [ebx + 0x3c], edx
mov edx, dword [esp + 0x4c]
mov dword [ebx + 0x40], eax
mov eax, dword [esp + 0x48]
mov dword [ebx + 0x34], edx
mov edx, dword [esp + 0x3c]
mov dword [ebx + 0x38], eax
mov eax, dword [esp + 0x38]
mov dword [ebx + 0x44], edx
mov edx, dword [esp + 0x34]
mov dword [ebx + 0x48], eax
mov eax, dword [esp + 0x30]
mov dword [ebx + 0x4c], edx
mov dword [ebx + 0x24], eax
mov eax, dword [edi + 0x74]
mov dword [ebx + 0x14], eax
mov eax, dword [edi + 0x64]
mov dword [ebx + 4], eax
mov eax, dword [edi + 0x78]
mov dword [ebx + 0x18], eax
mov eax, dword [edi + 0x68]
mov dword [ebx + 8], eax
mov eax, dword [edi + 0x7c]
mov dword [ebx + 0x1c], eax
mov eax, dword [edi + 0x6c]
mov dword [ebx + 0xc], eax
mov eax, dword [edi + 0x80]
mov dword [ebx + 0x20], eax
mov eax, dword [edi + 0x70]
mov dword [ebx + 0x10], eax
mov eax, dword [edi + 0x5c]
mov dword [esp], eax
call sub.msvcrt.dll_malloc
mov edx, dword [edi + 0x5c]
mov dword [ebx], eax
mov ecx, dword [edi + 0x50]
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_memcpy
mov eax, dword [edi]
test eax, eax
je 0x418328
mov eax, dword [edi + 4]
mov dword [eax + 0x58], ebx
mov dword [edi + 4], ebx
jmp 0x417fa2
mov edx, dword [esp + 0x68]
cmp dword [esp + 0x5c], edx
je 0x41823a
mov eax, edx
add eax, dword [edi + 0x50]
movzx edx, byte [eax + 1]
movzx eax, byte [eax]
shl eax, 8
add edx, eax
shl edx, 0xa
add edx, dword [esp + 0x2c]
mov eax, edx
sub eax, 1
mov dword [esp + 0x58], edx
mov dword [ebx + 0x54], eax
jmp 0x418241
mov dword [edi], ebx
jmp 0x4182e9