Function at 0x416cc4
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xbc
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x1c]
mov edi, dword [eax + 8]
call dword [0x44c004]
mov dword [esp + 0x50], eax
push 0x25e06369
push 0x4a77bfe0
push edi
call fcn.00418f7c
mov esi, eax
push 0x17faaf81
push 0xf7d1e6b0
push edi
call fcn.00418f7c
mov dword [esp + 0x7c], eax
push 0x8cbb6cf4
push 0x73ae97a8
push edi
call fcn.00418f7c
mov dword [esp + 0x54], eax
push 0xcbcf22f6
push 0xa19871b9
push edi
call fcn.00418f7c
mov dword [esp + 0x80], eax
push 0xc5b1ad71
push 0x53cd3e2f
push edi
call fcn.00418f7c
mov dword [esp + 0x58], eax
xor edi, edi
lea ebx, [esp + 0x78]
mov dword [ebx], edi
push 0x14
call fcn.0042c9f4
add esp, 4
mov dword [esp + 0x28], eax
lea eax, [esp + 0xa8]
mov dword [eax - 4], 0x18
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x5c]
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax], edi
lea ebp, [esp + 0xa4]
lea eax, [esp + 0x4c]
push edi
push ebp
push 0x1f000f
push eax
call esi
mov dword [esp + 0x84], eax
mov dword [esp], 0xaae13404
mov eax, dword [esp]
cmp eax, 0xf3b52f7d
jg 0x416e0b
cmp eax, 0xbe290889
jle 0x416e75
cmp eax, 0xd9e79a97
jg 0x416f81
cmp eax, 0xc7654d98
jg 0x4170e7
cmp eax, 0xc0c3d9de
jg 0x417361
cmp eax, 0xbe29088a
je 0x4176ad
cmp eax, 0xbeacc93a
jne 0x416da9
imul eax, dword [esp + 8], 0x3d9c9800
add eax, 0x99063ab8
mov dword [esp + 8], eax
mov dword [esp], 0x7509ea30
jmp 0x416da9
cmp eax, 0x393a03ce
jle 0x416edd
cmp eax, 0x667ae797
jg 0x416fdb
cmp eax, 0x531ad7c9
jg 0x417143
cmp eax, 0x3e08763a
jg 0x417399
cmp eax, 0x393a03cf
je 0x41790b
cmp eax, 0x3d014760
jne 0x416da9
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
shl ecx, 4
mov cl, byte [eax + ecx + 8]
mov eax, 0xa1a1b3cf
cmp cl, byte [esp + 0x17]
je 0x41771a
mov eax, 0x531ad7ca
jmp 0x41771a
cmp eax, 0xa79188ed
jle 0x417028
cmp eax, 0xaf9adce1
jg 0x41719b
cmp eax, 0xaae13403
jg 0x4173cc
cmp eax, 0xa79188ee
je 0x4176c1
cmp eax, 0xaa4f1b42
jne 0x416da9
mov esi, dword [esp + 4]
add esi, 0xffffffbe
shr esi, 0xc
add esi, 0xfffffffd
mov dword [esp + 4], esi
call fcn.00415756
call fcn.00415bb1
mov eax, 0x770d2664
cmp esi, 0x91
jne 0x4179d5
jmp 0x417a0d
cmp eax, 0x1be23bf1
jle 0x417088
cmp eax, 0x270fb3e6
jg 0x417213
cmp eax, 0x222f69d9
jg 0x4173f9
cmp eax, 0x1be23bf2
je 0x4176f2
cmp eax, 0x1f5bc9b6
jne 0x416da9
mov dword [esp + 0x24], edi
mov dword [esp + 0xa4], 0x18
mov eax, dword [esp + 0x5c]
mov dword [eax + 0x10], edi
mov dword [eax + 0xc], edi
mov dword [eax + 8], edi
mov dword [eax + 4], edi
mov dword [eax], edi
mov eax, dword [esp + 0x68]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x8c]
mov dword [eax], edi
mov eax, dword [esp + 0x7c]
lea ecx, [esp + 0x9c]
push ecx
push ebp
push 0x40
lea ecx, [esp + 0x30]
push ecx
call eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x6c]
cmp eax, 0xffffffff
je 0x417007
test eax, eax
je 0x417653
jmp 0x41765f
cmp eax, 0xeb5f6024
jg 0x41725e
cmp eax, 0xdfc927ff
jg 0x417438
cmp eax, 0xd9e79a98
je 0x41772a
cmp eax, 0xdb3be87a
jne 0x416da9
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
shl ecx, 4
movzx ecx, word [eax + ecx + 0xa]
mov edx, dword [esp + 0x88]
mov eax, 0x88a1a7f3
cmp edx, ecx
je 0x417a0d
mov eax, 0x7509ea30
jmp 0x417a0d
cmp eax, 0x770d2663
jg 0x4172a2
cmp eax, 0x6f83d3de
jg 0x417488
cmp eax, 0x667ae798
je 0x417750
cmp eax, 0x6c1567a3
jne 0x416da9
mov eax, dword [esp + 8]
shl eax, 0xc
and eax, 0xffe0000
or eax, 0x490
mov dword [esp + 8], eax
mov dword [esp], 0xaf9adce2
jmp 0x416da9
cmp eax, 0x88a1a7f2
jle 0x4172ec
cmp eax, 0xa1a1b3ce
jg 0x4174aa
cmp eax, 0x88a1a7f3
je 0x417795
cmp eax, 0x8f5169de
jne 0x416da9
mov eax, dword [esp + 4]
lea esi, [eax + eax]
add esi, 0xfffffd80
and esi, 0xffffffc0
mov dword [esp + 4], esi
call fcn.00417aef
mov eax, 0x770d2664
cmp esi, 0xa8
jge 0x417a0d
mov eax, 0xf451e1a4
jmp 0x417a0d
cmp eax, 0xfdac18c6
jle 0x417334
cmp eax, 0x12def619
jg 0x4174d9
cmp eax, 0xfdac18c7
je 0x4177b4
cmp eax, 0xcd48737
jne 0x416da9
mov eax, dword [esp + 8]
shr eax, 4
and eax, 0x3fffff
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x8657
dec edx
add eax, 0xfffffef3
mov dword [esp + 8], eax
mov eax, 0xefc4fedc
cmp edx, ecx
jne 0x4179d5
jmp 0x417a0d
cmp eax, 0xd78e7032
jg 0x417520
cmp eax, 0xc7654d99
je 0x4177e8
cmp eax, 0xcc0585b2
jne 0x416da9
mov eax, dword [esp + 8]
lea ecx, [eax + 0x15]
imul ecx, ecx
imul edx, ecx, 0x48b
dec edx
add eax, eax
add eax, 0x2a
mov dword [esp + 8], eax
mov eax, 0x12def61a
cmp ecx, edx
je 0x417130
mov eax, 0x531ad7ca
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x20], eax
jmp 0x416da9
cmp eax, 0x5c5a7ed2
jg 0x417573
cmp eax, 0x531ad7ca
je 0x417808
cmp eax, 0x56d3c195
jne 0x416da9
imul esi, dword [esp + 4], 0xaa0
add esi, 0xc88c0
mov dword [esp + 4], esi
call fcn.00417b18
call fcn.00416c0c
mov eax, 0xdfc92800
cmp esi, 0xd4
jb 0x417a0d
mov eax, 0xefc4fedc
jmp 0x417a0d
cmp eax, 0xb58adedf
jg 0x4175bb
cmp eax, 0xaf9adce2
je 0x417653
cmp eax, 0xb003531f
jne 0x416da9
mov esi, dword [esp + 0x78]
mov eax, 0x100
add esi, eax
push esi
push dword [esp + 0x98]
call fcn.0042cd1e
add esp, 8
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x54]
push ebx
push esi
push dword [esp + 0x34]
push 0x10
call eax
mov dword [esp + 0x64], eax
mov ecx, dword [esp + 0x64]
mov eax, 0xac31d909
cmp ecx, 0xc0000004
je 0x417203
mov eax, 0x5c5a7ed3
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x48], eax
jmp 0x416da9
cmp eax, 0x372db88c
jg 0x4175eb
cmp eax, 0x270fb3e7
je 0x41781c
cmp eax, 0x34956656
jne 0x416da9
imul eax, dword [esp + 4], 0x99
add eax, 0xffffd37d
shr eax, 7
mov dword [esp + 4], eax
call fcn.00415802
call fcn.00415b23
mov dword [esp], 0x82ebacf9
jmp 0x416da9
cmp eax, 0xefaa7288
jg 0x417620
cmp eax, 0xeb5f6025
je 0x417842
cmp eax, 0xee7e01fc
jne 0x416da9
imul eax, dword [esp + 8], 0x5a
add eax, 0xfffffff4
shr eax, 0xd
mov dword [esp + 8], eax
mov dword [esp], 0x38589cf8
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x60]
jmp 0x417a7d
cmp eax, 0x771ab5de
jle 0x417670
cmp eax, 0x771ab5df
je 0x41785f
cmp eax, 0x78388a98
jne 0x416da9
mov esi, dword [esp + 4]
shl esi, 4
add esi, 0xffffffa1
mov dword [esp + 4], esi
call fcn.00417b56
mov eax, 0x82ebacf9
cmp esi, 0x8d
jb 0x417992
jmp 0x417a0d
cmp eax, 0x82ebacf9
je 0x417888
cmp eax, 0x87998b04
je 0x41789f
cmp eax, 0x88708d07
jne 0x416da9
imul eax, dword [esp + 8], 0x7a00
add eax, 0x75c634
and eax, 0xfffffe00
add eax, 0xffffff64
mov dword [esp + 8], eax
mov dword [esp], 0x770e3389
jmp 0x416da9
cmp eax, 0xf3b52f7e
je 0x4178c8
cmp eax, 0xf451e1a4
je 0x4178f3
cmp eax, 0xfcfca93d
jne 0x416da9
mov dword [esp], 0xdb3be87a
jmp 0x416da9
cmp eax, 0xc0c3d9df
je 0x417917
cmp eax, 0xc1fd28a3
jne 0x416da9
push dword [esp + 0x10]
call fcn.0042c64b
add esp, 4
mov eax, dword [esp + 0x58]
push dword [esp + 0x4c]
call eax
mov dword [esp], 0x88708d07
jmp 0x416da9
cmp eax, 0x3e08763b
je 0x417933
cmp eax, 0x41a5562b
jne 0x416da9
imul eax, dword [esp + 8], 0xb28
add eax, 0x191a0
mov dword [esp + 8], eax
mov dword [esp], 0xc1fd28a3
jmp 0x416da9
cmp eax, 0xaae13404
je 0x417955
cmp eax, 0xac31d909
jne 0x416da9
mov eax, dword [esp + 0x48]
mov dword [esp + 0x94], eax
mov dword [esp], 0xb003531f
jmp 0x416da9
cmp eax, 0x222f69da
je 0x417972
cmp eax, 0x25f287ef
jne 0x416da9
imul esi, dword [esp + 4], 0xcf30
mov dword [esp + 4], esi
call fcn.00417b18
mov eax, 0x87998b04
cmp esi, 0x43
jl 0x417a0d
mov eax, 0x78388a98
jmp 0x417a0d
cmp eax, 0xdfc92800
je 0x417999
cmp eax, 0xe148db91
jne 0x416da9
mov eax, dword [esp + 8]
mov ecx, 0xffffff45
add eax, ecx
shr eax, 6
and eax, 0xfffffff8
lea eax, [eax + eax*2]
shr eax, 7
imul eax, eax, 0x2b
add eax, 0xffffff78
shr eax, 0xb
mov dword [esp + 8], eax
mov dword [esp], 0xbe29088a
mov dword [esp + 0x3c], 0
jmp 0x416da9
cmp eax, 0x6f83d3df
je 0x4179b9
cmp eax, 0x7509ea30
jne 0x416da9
mov dword [esp], 0xd9e79a98
jmp 0x416da9
cmp eax, 0xa1a1b3cf
je 0x4179dc
cmp eax, 0xa3272bac
jne 0x416da9
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x90], eax
mov dword [esp], 0xcc0585b2
jmp 0x416da9
cmp eax, 0x12def61a
je 0x4179e8
cmp eax, 0x17f5729b
jne 0x416da9
mov esi, dword [esp + 4]
shl esi, 6
and esi, 0x1fffffc0
add esi, 0xffffffd0
mov dword [esp + 4], esi
call fcn.00416b50
call fcn.00418eba
mov eax, 0x1f5bc9b6
cmp esi, 0x56
jae 0x41794b
jmp 0x417a0d
cmp eax, 0xd78e7033
je 0x417a15
cmp eax, 0xd97ccadf
jne 0x416da9
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
shl ecx, 4
movzx ecx, word [eax + ecx + 0xa]
mov eax, dword [esp + 0x80]
push 1
push edi
push edi
push edi
push edi
push ecx
push dword [esp + 0x84]
call eax
mov eax, dword [esp + 0x58]
push dword [esp + 0x24]
call eax
mov dword [esp], 0xefaa7289
jmp 0x416da9
cmp eax, 0x5c5a7ed3
je 0x417a55
cmp eax, 0x5dca4d95
jne 0x416da9
mov eax, dword [esp + 4]
add eax, 0xffffffa1
shr eax, 0xb
imul esi, eax, 0x4b8
add esi, 0xfffff718
mov dword [esp + 4], esi
call fcn.00416c0c
mov eax, 0x25f287ef
cmp esi, 0x42
jge 0x41794b
jmp 0x417a0d
cmp eax, 0xb58adee0
je 0x41765f
cmp eax, 0xbacd3ab6
jne 0x416da9
lea eax, [esp + 0xa0]
mov dword [esp + 0x8c], eax
mov dword [esp], 0x667ae798
jmp 0x416da9
cmp eax, 0x372db88d
je 0x417a8a
cmp eax, 0x38589cf8
jne 0x416da9
mov eax, dword [esp + 0x40]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x10], eax
mov dword [esp], 0xefc4fedc
jmp 0x416da9
cmp eax, 0xefaa7289
je 0x417aa2
cmp eax, 0xefc4fedc
jne 0x416da9
cmp dword [esp + 0x98], 0
mov eax, 0x12def61a
jns 0x417a0d
mov eax, 0x41a5562b
jmp 0x417a0d
mov dword [esp], 0xa3272bac
jmp 0x416da9
shl dword [esp + 8], 0xd
mov dword [esp], 0xd97ccadf
jmp 0x416da9
cmp eax, 0x770d2664
jne 0x417ad9
mov eax, dword [esp + 0x54]
push ebx
push 0x14
push dword [esp + 0x30]
push 0x10
call eax
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x60]
mov eax, 0xd78e7033
cmp ecx, 0xc0000004
je 0x417a0d
mov eax, 0xee7e01fc
jmp 0x417a0d
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x18], eax
mov dword [esp], 0xf3b52f7e
jmp 0x416da9
mov eax, dword [esp + 4]
shr eax, 4
and eax, 0xfffff
imul ecx, eax, 0x7164
mov dword [esp + 4], ecx
mov eax, 0xeb5f6025
cmp ecx, 0xfd
jae 0x417a0d
mov eax, 0x270fb3e7
jmp 0x417a0d
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
shl ecx, 4
movzx eax, word [eax + ecx + 4]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x50]
mov eax, 0x531ad7ca
cmp ecx, dword [esp + 0x68]
je 0x41771a
mov eax, 0x372db88d
mov dword [esp], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x20], eax
jmp 0x416da9
mov eax, dword [esp + 0x18]
inc eax
mov ecx, 0x3e08763b
cmp eax, dword [esp + 0x30]
je 0x41773f
mov ecx, 0xbe29088a
mov dword [esp], ecx
mov dword [esp + 0x3c], eax
mov byte [esp + 0xe], 0
jmp 0x416da9
mov ecx, dword [esp + 8]
mov eax, 0xffffff72
add ecx, eax
imul eax, ecx, 0x2f0d
imul ecx, ecx
imul edx, ecx, 0x3ed3
dec edx
mov dword [esp + 8], eax
mov eax, 0x34956656
cmp edx, ecx
je 0x41777d
mov eax, 0xc0c3d9df
mov dword [esp], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], 0
jmp 0x416da9
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
shl ecx, 4
mov al, byte [eax + ecx + 8]
mov dword [esp], 0x3e08763b
mov byte [esp + 0xe], al
jmp 0x416da9
mov eax, dword [esp + 4]
shr eax, 2
imul esi, eax, 0x1880
add esi, 0xffffff96
mov dword [esp + 4], esi
call fcn.00416b8e
mov eax, 0xf3b52f7e
cmp esi, 0x9c
jl 0x417a0d
mov eax, 0xd97ccadf
jmp 0x417a0d
imul eax, dword [esp + 4], 0x526c00
add eax, 0xffbc6a00
mov dword [esp + 4], eax
call fcn.00416cc4
call fcn.00416c0c
jmp 0x41790b
mov eax, dword [esp + 0x20]
mov dword [esp + 0x74], eax
mov dword [esp], 0x771ab5df
jmp 0x416da9
mov eax, dword [esp + 4]
shl eax, 0x10
add eax, 0xfee10000
mov dword [esp + 4], eax
call fcn.00417e4e
call fcn.00417e05
mov dword [esp], 0xfdac18c7
jmp 0x416da9
imul eax, dword [esp + 4], 0x39800000
add eax, 0x257fffe4
mov dword [esp + 4], eax
mov dword [esp], 0x17f5729b
jmp 0x416da9
mov eax, dword [esp + 0x1c]
inc eax
mov ecx, 0xc0c3d9df
cmp eax, dword [esp + 0x74]
jb 0x417874
mov ecx, 0xc1fd28a3
mov dword [esp], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], eax
jmp 0x416da9
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x88], eax
mov dword [esp], 0xe148db91
jmp 0x416da9
mov ecx, dword [esp + 4]
shl ecx, 0x14
add ecx, 0x19c000
mov dword [esp + 4], ecx
mov eax, 0xefc4fedc
cmp ecx, 0x5a
jge 0x417a0d
mov eax, 0x12def61a
jmp 0x417a0d
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
shl ecx, 4
movzx ecx, word [eax + ecx + 4]
mov edx, dword [esp + 0x50]
mov eax, 0xfcfca93d
cmp edx, ecx
je 0x417a0d
mov eax, 0xbeacc93a
jmp 0x417a0d
mov eax, dword [esp + 4]
shl eax, 4
and eax, 0x3ffffe00
add eax, 0x1e800
shr eax, 0xf
mov dword [esp + 4], eax
mov dword [esp], 0x770d2664
jmp 0x416da9
mov eax, dword [esp + 0x34]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x70], eax
mov dword [esp], 0x1be23bf2
jmp 0x416da9
mov al, byte [esp + 0xe]
mov byte [esp + 0x17], al
cmp byte [esp + 0xf], 0
mov eax, 0xc1fd28a3
jne 0x417a0d
mov eax, 0xbacd3ab6
jmp 0x417a0d
cmp dword [esp + 0x84], 0
mov eax, 0x393a03cf
jns 0x417a0d
mov eax, 0x770e3389
jmp 0x417a0d
mov esi, dword [esp + 4]
shr esi, 0xa
add esi, 0xc
mov dword [esp + 4], esi
call fcn.00416cc4
mov eax, 0x82ebacf9
cmp esi, 0xef
je 0x417a0d
mov eax, 0x3d014760
jmp 0x417a0d
imul ecx, dword [esp + 4], 0x4c
add ecx, 0xfffff01e
shr ecx, 1
mov eax, 0xaa4f1b42
and ecx, 0x7ffff000
mov dword [esp + 4], ecx
jne 0x4179d5
jmp 0x417a0d
imul ecx, dword [esp + 4], 0x96
add ecx, 0x3e
mov dword [esp + 4], ecx
mov eax, 0xf3b52f7e
cmp ecx, 0x94
je 0x417a0d
mov eax, 0x82ebacf9
jmp 0x417a0d
mov dword [esp], 0x1f5bc9b6
jmp 0x416da9
mov eax, dword [esp + 0x10]
mov eax, dword [eax]
mov dword [esp + 0x30], eax
cmp dword [esp + 0x30], 0
sete byte [esp + 0xf]
cmp byte [esp + 0xf], 0
mov eax, 0xc1fd28a3
jne 0x417a0d
mov eax, 0xcd48737
mov dword [esp], eax
jmp 0x416da9
mov eax, dword [esp + 8]
add eax, 0xffffffcb
mov ecx, eax
shr ecx, 3
imul ecx, ecx
imul edx, ecx, 0x4333
dec edx
shr eax, 6
and eax, 0x7ffff
mov dword [esp + 8], eax
mov eax, 0xc7654d99
cmp ecx, edx
je 0x417a45
mov eax, 0xac31d909
mov dword [esp], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x48], eax
jmp 0x416da9
mov eax, dword [esp + 8]
and eax, 0xfffffff8
shl eax, 0xa
imul eax, eax, 0x7ab8000
add eax, 0xffff5688
mov dword [esp + 8], eax
mov dword [esp], 0x38589cf8
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x44], eax
mov dword [esp + 0x40], ecx
jmp 0x416da9
imul eax, dword [esp + 8], 0x3a3e
mov dword [esp + 8], eax
mov dword [esp], 0x3d014760
jmp 0x416da9
mov ecx, dword [esp + 8]
mov eax, ecx
shr eax, 9
imul eax, eax
imul edx, eax, 0x4733
shr ecx, 0xd
dec edx
mov esi, ecx
shl esi, 5
add esi, ecx
mov dword [esp + 8], esi
mov ecx, 0xa79188ee
cmp edx, eax
je 0x417ad1
mov ecx, 0xaf9adce2
mov dword [esp], ecx
jmp 0x416da9
cmp eax, 0x770e3389
jne 0x416da9
add esp, 0xbc
pop esi
pop edi
pop ebx
pop ebp
ret