Function at 0x412400
Capabilities:
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1a8
push 0x4161d8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp dword [0x4467d4], 0
cdq
mov ecx, eax
mov dword [0x446814], edx
mov dword [0x446810], ecx
je 0x41244f
call fcn.004154a0
mov ecx, dword [0x446810]
mov dword [0x446818], eax
mov dword [0x44681c], edx
push ebx
mov eax, ecx
or eax, dword [0x446814]
mov eax, dword [0x446818]
push esi
push edi
jne 0x412476
or eax, dword [0x44681c]
jne 0x412482
pop edi
pop esi
or eax, 0xffffffff
pop ebx
add esp, 0x1a8
ret
or eax, dword [0x44681c]
je 0x412585
push 0
push 0x40
push dword [0x44681c]
lea eax, [esp + 0x78]
push dword [0x446818]
cdq
push edx
push eax
call fcn.004157f0
mov ecx, dword [esp + 0xa8]
xor eax, eax
add ecx, dword [0x446818]
push 0
adc eax, dword [0x44681c]
push 0x108
push eax
push ecx
lea eax, [esp + 0xbc]
cdq
push edx
push eax
call fcn.004157f0
mov eax, dword [esp + 0xfc]
push str.LdrInitializeThunk
push dword [0x44681c]
mov dword [0x446824], eax
push dword [0x446818]
call fcn.00412340
add esp, 0xc
mov ebx, eax
sub eax, dword [0x446818]
mov dword [0x446844], eax
lea eax, [esp + 0x1c]
push 0
push 0x20
push edx
push ebx
cdq
push edx
push eax
call fcn.004157f0
xor edi, edi
lea esi, [esp + 0x1c]
add esi, edi
lea ecx, [esp + 0x44]
push esi
call fcn.00410790
cmp byte [esi], 0xe8
mov al, byte [esp + 0x44]
jne 0x41252e
cmp al, 5
je 0x41253a
movzx eax, al
add edi, eax
cmp edi, 0x20
jb 0x412511
jmp 0x41257f
mov eax, dword [esp + edi + 0x1d]
lea esi, [esp + 0x1c]
sub eax, dword [0x446818]
mov edx, ebx
sub edx, dword [0x446818]
add eax, 5
add eax, ebx
mov dword [0x446844], edx
add eax, edi
mov dword [0x446834], eax
lea ecx, [edx + edi]
mov edi, 0x446868
lea eax, [ecx + 5]
mov dword [0x44683c], ecx
mov ecx, 8
mov dword [0x44682c], eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x446810]
mov eax, ecx
or eax, dword [0x446814]
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_GetProcAddress]
je 0x412696
cmp dword [0x4467d4], 0
mov eax, dword [ecx + 0x3c]
mov eax, dword [eax + ecx + 0x50]
mov dword [0x446820], eax
jne 0x4125d2
push str.KiIntSystemCall
push ecx
call ebp
push str.KiFastSystemCall
push dword [0x446810]
mov dword [esp + 0x24], eax
call ebp
mov ecx, dword [0x446810]
mov dword [esp + 0x18], eax
push str.LdrInitializeThunk
push ecx
call ebp
mov ecx, eax
mov dword [esp + 0x10], eax
sub ecx, dword [0x446810]
lea edi, [esp + 0x20]
mov dword [0x446840], ecx
mov esi, eax
mov ecx, 8
mov dword [esp + 0x44], 0
rep movsd dword es:[edi], dword [esi]
xor edi, edi
xor ebx, ebx
lea esi, [esp + 0x20]
add esi, edi
lea ecx, [esp + 0x48]
push esi
call fcn.00410030
mov cl, byte [esi]
mov al, byte [esp + 0x48]
cmp cl, 0xff
jne 0x412623
inc ebx
jmp 0x41262c
cmp cl, 0xe8
jne 0x41262c
cmp al, 5
je 0x412638
movzx eax, al
add edi, eax
cmp edi, 0x20
jb 0x412605
jmp 0x412690
cmp ebx, 2
jb 0x412647
mov dword [0x446800], 1
mov ecx, dword [esp + 0x10]
mov esi, ecx
sub esi, dword [0x446810]
add ecx, 5
mov eax, dword [esp + edi + 0x21]
sub eax, dword [0x446810]
add eax, ecx
mov dword [0x446840], esi
add eax, edi
lea edx, [esi + edi]
mov dword [0x446830], eax
lea esi, [esp + 0x20]
lea eax, [edx + 5]
mov dword [0x446838], edx
mov ecx, 8
mov dword [0x446828], eax
mov edi, 0x446848
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x446810]
cmp dword [0x4467d4], 0
push 0x4169c8
je 0x41275b
push dword [0x44681c]
push dword [0x446818]
call fcn.00412340
push 0x4169b0
push dword [0x44681c]
mov ebx, eax
mov esi, edx
push dword [0x446818]
call fcn.00412340
push str.LdrSystemDllInitBlock
push dword [0x44681c]
mov ebp, eax
mov edi, edx
push dword [0x446818]
call fcn.00412340
add esp, 0x24
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], edx
mov eax, 0x446888
cdq
push 0
push 0x40
push esi
push ebx
push edx
push eax
call fcn.004157f0
push 0
push 0x40
push edi
push ebp
mov eax, 0x4468c8
cdq
push edx
push eax
call fcn.004157f0
mov ebx, dword [esp + 0x10]
mov eax, ebx
mov ebp, dword [esp + 0x18]
or eax, ebp
je 0x412742
push 0
push 0x100
push ebp
push ebx
mov eax, 0x446908
cdq
push edx
push eax
call fcn.004157f0
mov dword [0x44680c], ebp
xor eax, eax
pop ebp
pop edi
pop esi
mov dword [0x446808], ebx
pop ebx
add esp, 0x1a8
ret
push ecx
call ebp
push 0x4169b0
push dword [0x446810]
mov esi, eax
call ebp
push str.LdrSystemDllInitBlock
push dword [0x446810]
mov ebx, eax
call ebp
cmp dword [esp + 0x1c], 0
mov ecx, 0x10
mov edi, 0x446888
mov edx, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x10
mov esi, ebx
mov edi, 0x4468c8
rep movsd dword es:[edi], dword [esi]
je 0x4127e4
cmp dword [esp + 0x18], 0
je 0x4127e4
mov word [esp + 0x14], 0x2ecd
mov bl, 0x90
mov ax, word [esp + 0x14]
mov dword [esp + 0x10], 0x424548d
mov ecx, dword [esp + 0x10]
mov dword [0x44688d], ecx
mov word [0x446891], ax
mov byte [0x446893], bl
mov dword [0x4468cd], ecx
mov word [0x4468d1], ax
mov byte [0x4468d3], bl
test edx, edx
je 0x4127f6
mov ecx, 0x40
mov esi, edx
mov edi, 0x446908
rep movsd dword es:[edi], dword [esi]
pop ebp
mov eax, edx
cdq
pop edi
pop esi
mov dword [0x446808], eax
xor eax, eax
mov dword [0x44680c], edx
pop ebx
add esp, 0x1a8
ret