Function at 0x410fc0
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x74
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0x70], eax
cmp byte [0x43dbd4], 0
push ebx
push esi
push edi
mov edi, ecx
jne 0x4110ae
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
push 0x51d19f5
push 0x972795c4
mov ecx, esi
call fcn.00410d50
push 0x955879b2
push 0xc40a0f04
mov ecx, esi
mov dword [0x43e400], eax
call fcn.00410d50
push 0xdd3bdd8f
push 0x77ecada8
mov ecx, esi
mov dword [0x43dbf4], eax
call fcn.00410d50
push 0xa3f74cb2
push 0x77ecada8
mov ecx, esi
mov dword [0x43e3fc], eax
call fcn.00410d50
push 0x65fa4e02
push 0x77ecada8
mov ecx, esi
mov dword [0x43e3f8], eax
call fcn.00410d50
add esp, 0x28
mov dword [0x43dbd0], eax
cmp dword [0x43e3fc], 0
je 0x41112c
cmp dword [0x43e3f8], 0
je 0x41112c
cmp dword [0x43e400], 0
je 0x41112c
cmp dword [0x43dbf4], 0
je 0x41112c
test eax, eax
je 0x41112c
push 0x43dbdc
mov byte [0x43dbd4], 1
call eax
push 0x43dbdc
call dword [0x43e3fc]
mov ecx, dword [0x43dbd8]
xor eax, eax
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], str.Ntdll.dll
mov dword [esp + 0x1c], str.Kernel32.dll
mov dword [esp + 0x20], str.Shlwapi.dll
mov dword [esp + 0x24], str.Advapi32.dll
mov dword [esp + 0x28], str.User32.dll
mov dword [esp + 0x2c], str.Shell32.dll
mov dword [esp + 0x30], str.Wininet.dll
mov dword [esp + 0x34], str.Urlmon.dll
test ecx, ecx
je 0x411153
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
cmp dword [eax*8 + 0x43dbf8], esi
jne 0x411125
cmp dword [eax*8 + 0x43dbfc], edx
je 0x411140
inc eax
cmp eax, ecx
jb 0x411113
jmp 0x411153
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x70]
xor ecx, esp
call fcn.00417fbf
mov esp, ebp
pop ebp
ret
mov ebx, dword [eax*4 + 0x43d7b0]
mov dword [esp + 0x14], ebx
test ebx, ebx
jne 0x411293
lea eax, [edi*4]
mov esi, dword [eax + 0x43dbb0]
mov dword [esp + 0x10], eax
test esi, esi
jne 0x411251
mov eax, dword [esp + eax + 0x18]
xor ecx, ecx
or ebx, 0xffffffff
cmp byte [eax], cl
je 0x41119f
lea esi, [esp + 0x38]
mov edx, eax
sub esi, eax
cmp ecx, 0x40
jae 0x4112b2
mov al, byte [edx]
inc ecx
mov byte [esi + edx], al
inc edx
cmp byte [edx], 0
jne 0x411181
cmp ecx, 0x40
jae 0x4112b2
mov byte [esp + ecx + 0x38], 0
cmp byte [esp + ecx + 0x34], 0x2e
je 0x4111c4
mov dword [esp + ecx + 0x38], 0x6c6c642e
add ecx, 4
cmp ecx, 0x40
jae 0x4112b2
mov byte [esp + ecx + 0x38], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0xc]
mov esi, dword [edi + 0x18]
test esi, esi
je 0x41120d
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
xor eax, eax
test ecx, ecx
je 0x411203
mov eax, dword [ecx + esi + 0xc]
add eax, esi
push eax
lea eax, [esp + 0x3c]
push eax
call fcn.004227aa
mov ebx, eax
add esp, 8
xor eax, eax
test ebx, ebx
je 0x411243
mov edi, dword [edi]
test ebx, ebx
jne 0x4111d3
test eax, eax
jne 0x41122b
lea eax, [esp + 0x38]
mov ecx, 1
push eax
push 0x51d19f5
push 0x972795c4
call fcn.00410fc0
add esp, 8
call eax
mov esi, eax
test eax, eax
jne 0x411243
mov edi, dword [esp + 0x10]
push dword [esp + edi + 0x18]
call dword [0x43e400]
mov esi, eax
jmp 0x411247
mov edi, dword [esp + 0x10]
mov dword [edi + 0x43dbb0], esi
test esi, esi
je 0x41128f
mov edi, dword [ebp + 0xc]
mov ecx, esi
push edi
push dword [ebp + 8]
call fcn.00410d50
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x411293
mov ecx, dword [0x43dbd8]
mov eax, dword [ebp + 8]
mov dword [ecx*8 + 0x43dbf8], eax
mov dword [ecx*8 + 0x43dbfc], edi
mov dword [ecx*4 + 0x43d7b0], ebx
inc ecx
mov dword [0x43dbd8], ecx
jmp 0x411293
mov ebx, dword [esp + 0x14]
push 0x43dbdc
call dword [0x43e3f8]
mov ecx, dword [esp + 0x7c]
mov eax, ebx
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00417fbf
mov esp, ebp
pop ebp
ret
call fcn.0041815e
int3