Function at 0x416ac0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x698
mov al, 0xe2
push ebx
mov cl, 0x42
mov byte [esp + 0xf], al
mov byte [esp + 0x14], al
mov byte [esp + 0x19], al
mov byte [esp + 0x1e], al
mov byte [esp + 0x37], al
mov byte [esp + 0x3c], al
mov byte [esp + 0x41], al
mov eax, dword [str.3820015_EY]
xor ebx, ebx
push ebp
mov dl, 0x52
push esi
mov byte [esp + 0xd], cl
mov byte [esp + 0x12], cl
mov byte [esp + 0x3a], cl
mov ecx, dword [0x432098]
push edi
mov byte [esp + 0x10], bl
mov byte [esp + 0x12], bl
mov byte [esp + 0x13], bl
mov byte [esp + 0x14], bl
mov byte [esp + 0x15], bl
mov byte [esp + 0x17], bl
mov byte [esp + 0x18], bl
mov byte [esp + 0x19], bl
mov byte [esp + 0x1a], 0x20
mov byte [esp + 0x1c], bl
mov byte [esp + 0x1d], bl
mov byte [esp + 0x1e], bl
mov byte [esp + 0x1f], pe_nt_image_headers32
mov byte [esp + 0x21], bl
mov byte [esp + 0x22], bl
mov byte [esp + 0x23], bl
mov byte [esp + 0x24], 0x21
mov byte [esp + 0x26], bl
mov byte [esp + 0x27], bl
mov byte [esp + 0x28], bl
mov byte [esp + 0x29], 0xa1
mov byte [esp + 0x2b], bl
mov byte [esp + 0x2c], bl
mov byte [esp + 0x2d], bl
mov byte [esp + 0x2e], 1
mov byte [esp + 0x2f], dl
mov byte [esp + 0x30], bl
mov byte [esp + 0x31], bl
mov byte [esp + 0x32], bl
mov byte [esp + 0x33], bl
mov byte [esp + 0x34], bl
mov byte [esp + 0x35], bl
mov byte [esp + 0x36], bl
mov byte [esp + 0x37], bl
mov byte [esp + 0x38], bl
mov byte [esp + 0x39], 0x40
mov byte [esp + 0x3a], bl
mov byte [esp + 0x3b], bl
mov byte [esp + 0x3c], bl
mov byte [esp + 0x3d], bl
mov byte [esp + 0x3f], bl
mov byte [esp + 0x40], bl
mov byte [esp + 0x41], bl
mov byte [esp + 0x42], 0x20
mov byte [esp + 0x44], bl
mov byte [esp + 0x45], bl
mov byte [esp + 0x46], bl
mov byte [esp + 0x47], 0x21
mov byte [esp + 0x49], bl
mov byte [esp + 0x4a], bl
mov byte [esp + 0x4b], bl
mov byte [esp + 0x4c], 0xa1
mov byte [esp + 0x4e], bl
mov byte [esp + 0x4f], bl
mov byte [esp + 0x50], bl
mov byte [esp + 0x51], 1
mov byte [esp + 0x52], dl
mov byte [esp + 0x53], bl
mov byte [esp + 0x54], bl
mov byte [esp + 0x55], bl
mov dword [esp + 0x9c], eax
mov dx, word [0x43209c]
mov dword [esp + 0xa6], eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0xba], eax
mov dword [esp + 0xc4], eax
mov dword [esp + 0xce], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xe2], eax
mov dword [esp + 0xec], eax
mov dword [esp + 0xf6], eax
mov dword [esp + 0x100], eax
mov dword [esp + 0x10a], eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x11e], eax
xor eax, eax
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x74], eax
mov dword [esp + 0xaa], ecx
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xbe], ecx
mov dword [esp + 0xc8], ecx
mov dword [esp + 0xd2], ecx
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe6], ecx
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xfa], ecx
mov dword [esp + 0x104], ecx
mov dword [esp + 0x10e], ecx
mov dword [esp + 0x118], ecx
mov dword [esp + 0x122], ecx
mov dword [esp + 0x78], eax
xor ecx, ecx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x88], ecx
mov dword [esp + 0x80], eax
mov dword [esp + 0x8c], ecx
mov word [esp + 0xa4], dx
mov word [esp + 0xae], dx
mov word [esp + 0xb8], dx
mov word [esp + 0xc2], dx
mov word [esp + 0xcc], dx
mov word [esp + 0xd6], dx
mov word [esp + 0xe0], dx
mov word [esp + 0xea], dx
mov word [esp + 0xf4], dx
mov word [esp + 0xfe], dx
mov word [esp + 0x108], dx
mov word [esp + 0x112], dx
mov word [esp + 0x11c], dx
mov word [esp + 0x126], dx
mov dword [esp + 0x84], eax
mov dword [esp + 0x90], ecx
xor edx, edx
lea eax, [esp + 0x74]
mov dword [esp + 0x94], ecx
mov dword [esp + 0x6c], edx
push 0x11
push eax
mov dword [esp + 0xa0], ecx
mov dword [esp + 0x78], edx
mov dword [esp + 0x6c], ebx
call fcn.0040ecb0
add esp, 8
cmp eax, 1
jne 0x4173c8
push 5
push 0x30006
push 0x1213010c
call dword [0x472f68]
add esp, 0xc
mov byte [0x472a2c], 0xcf
call fcn.00426dd0
test eax, eax
jge 0x416dd7
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [esp + 0x88]
push 0x10
push ecx
call fcn.0040edd0
add esp, 8
cmp eax, 1
jne 0x4173c8
mov ecx, dword [0x472a30]
xor eax, eax
lea edx, [ecx + ecx*4]
lea esi, [esp + edx*2 + 0x9c]
mov cl, byte [esp + eax + 0x88]
mov dl, byte [esi + eax]
cmp cl, dl
jne 0x416e69
inc eax
cmp eax, 0xa
jl 0x416e04
lea edx, [esp + 0x58]
push edx
push ebx
push ebx
push ebx
push 0xa0021
push 0x12130110
call dword [0x473b1c]
add esp, 0x18
call sub.MSVCRT.dll__ftol
mov esi, eax
mov eax, dword [esp + 0x58]
cmp eax, ebx
mov dword [esp + 0x68], esi
je 0x41733c
cmp esi, 0xff1b9e00
jbe 0x416e88
push 1
push 0x1218011f
push 0x12180135
call dword [0x472f68]
add esp, 0xc
jmp 0x416e18
push 1
push 0x30006
push 0x1213010d
call dword [0x472f68]
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, 0x100
xor eax, eax
lea edi, [esp + 0x2a8]
push 0x100
rep stosd dword es:[edi], eax
lea eax, [esp + 0x2ac]
push eax
push 0x12130111
call dword [0x473afc]
mov ebp, dword [sym.imp.MSVCRT.dll_sprintf]
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x174]
rep stosd dword es:[edi], eax
push esi
lea ecx, [esp + 0x178]
push str._lu_km
push ecx
call ebp
lea edi, [esp + 0x180]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x2c0]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x40
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x40
lea edi, [esp + 0x184]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x184]
push eax
push 0x30006
call dword [0x473afc]
lea ecx, [esp + 0x18c]
push 3
lea edx, [esp + 0x2d0]
push ecx
push edx
call dword [0x472eb8]
add esp, 0x30
cmp ax, 2
jne 0x416e18
lea eax, [esp + 0x268]
push 0x40
push eax
push ebx
push 0xa0021
push 0x12130112
call dword [0x472dc4]
movsx eax, ax
add esp, 0x14
cmp eax, ebx
jl 0x4173c3
cmp eax, 8
jne 0x416fa4
xor ecx, ecx
mov al, byte [esp + ecx + 0x268]
cmp al, 0x30
jb 0x416f9f
cmp al, 0x39
ja 0x416f9f
sub al, 0x30
mov byte [esp + ecx + 0x268], al
inc ecx
cmp ecx, 8
jl 0x416f81
cmp ecx, 8
je 0x416fbb
push 1
push 0x1218011f
push 0x1218011e
call dword [0x472f68]
add esp, 0xc
jmp 0x416f51
mov dword [esp + 0x5c], ebx
xor esi, esi
lea eax, [esp + 0x269]
mov cl, byte [eax - 1]
mov dl, byte [eax]
shl cl, 4
add cl, dl
add eax, 2
mov byte [esp + esi + 0x5c], cl
inc esi
cmp esi, 4
jl 0x416fc8
lea edx, [esp + 0x2a8]
mov ecx, 0x100
xor eax, eax
lea edi, [esp + 0x2a8]
push 0x100
push edx
rep stosd dword es:[edi], eax
push 0x12130113
call dword [0x473afc]
mov edx, dword [esp + 0x69]
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x174]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x6b]
mov ecx, dword [esp + 0x6a]
and eax, 0xff
and ecx, 0xff
push eax
mov eax, dword [esp + 0x6c]
and edx, 0xff
push ecx
and eax, 0xff
push edx
push eax
lea ecx, [esp + 0x184]
push str._02X_02X_02X_02X
push ecx
call ebp
lea edi, [esp + 0x18c]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x2cc]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x40
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x40
lea edi, [esp + 0x190]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x190]
push eax
push 0x30006
call dword [0x473afc]
lea ecx, [esp + 0x198]
push 3
lea edx, [esp + 0x2dc]
push ecx
push edx
call dword [0x472eb8]
add esp, 0x3c
cmp ax, 2
jne 0x416f51
lea eax, [esp + 0x58]
push eax
push ebx
push ebx
push ebx
push 0x12130114
push 0x12130118
call dword [0x473b1c]
add esp, 0x18
call sub.MSVCRT.dll__ftol
mov ebp, eax
mov eax, dword [esp + 0x58]
cmp eax, ebx
je 0x41733c
cmp ebp, 0xff1b9e00
jbe 0x417118
push 1
push 0x1218011f
push 0x12180135
call dword [0x472f68]
add esp, 0xc
jmp 0x4170cb
mov ecx, 0x100
xor eax, eax
lea edi, [esp + 0x2a8]
push 0x100
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x2ac]
push ecx
push 0x12130115
call dword [0x473afc]
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x174]
push ebp
lea edx, [esp + 0x178]
push str._lu_km
rep stosd dword es:[edi], eax
push edx
call dword [sym.imp.MSVCRT.dll_sprintf]
lea edi, [esp + 0x180]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x2c0]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x40
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x40
lea edi, [esp + 0x184]
rep stosd dword es:[edi], eax
lea eax, [esp + 0x184]
push eax
push 0x30006
call dword [0x473afc]
lea ecx, [esp + 0x18c]
push 3
lea edx, [esp + 0x2d0]
push ecx
push edx
call dword [0x472eb8]
add esp, 0x30
cmp ax, 2
jne 0x4170cb
push 5
push 0x30006
push 0x12130116
call dword [0x472f68]
add esp, 0xc
xor esi, esi
lea edi, [esp + 0x6f]
mov eax, dword [esp + 0x68]
mov ecx, esi
shr eax, cl
add esi, 8
dec edi
cmp esi, 0x20
mov byte [edi + 1], al
jb 0x4171fa
xor edi, edi
lea esi, [esp + 0x67]
mov edx, ebp
mov ecx, edi
shr edx, cl
add edi, 8
dec esi
cmp edi, 0x20
mov byte [esi + 1], dl
jb 0x417214
mov byte [0x472a2c], 0xcf
call fcn.0042ab10
test eax, eax
jge 0x417241
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.0040dad0
test eax, eax
jge 0x417269
push 1
push 0x12180103
push 0x121300a6
call dword [0x472f68]
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, 0x10
xor eax, eax
lea edi, [esp + 0x128]
mov dword [0x472d64], 0x12cf0901
rep stosd dword es:[edi], eax
lea eax, [esp + 0x128]
push eax
push 0x12cf0901
call fcn.00402900
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x64]
lea edx, [esp + 0x130]
mov dword [esp + 0x134], ecx
push edx
mov dword [esp + 0x13c], eax
call fcn.00402980
add esp, 0xc
cmp eax, ebx
jl 0x4173c8
cmp eax, 0x7f000000
jle 0x4172dd
push eax
call fcn.0040eb00
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, 0x10
xor eax, eax
lea edi, [esp + 0x128]
mov dword [0x472d64], 0x12cf0902
rep stosd dword es:[edi], eax
lea eax, [esp + 0x128]
push eax
push 0x12cf0902
call fcn.00402900
mov ecx, dword [esp + 0x6c]
lea edx, [esp + 0x130]
push edx
mov dword [esp + 0x138], ecx
call fcn.00402980
add esp, 0xc
cmp eax, ebx
jl 0x4173c8
cmp eax, 0x7f000000
jle 0x417346
push eax
call fcn.0040eb00
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0x74]
push 0x11
push eax
call fcn.004195a0
add esp, 8
cmp eax, 1
jne 0x4173c8
mov eax, dword [0x472a30]
push 5
lea ecx, [esp + eax + 0x14]
lea edx, [ecx + eax*4]
push edx
call fcn.00419510
add esp, 8
cmp eax, 1
jne 0x4173c8
push 0xc
call fcn.00419620
add esp, 4
cmp eax, 1
jne 0x4173c8
call fcn.004199c0
cmp eax, 1
jne 0x4173c8
push eax
call fcn.00419c40
add esp, 4
cmp eax, 1
jne 0x4173c8
push eax
push 0x30006
push 0x12130117
call dword [0x472f68]
push 1
push 0x30006
push 0x12130127
call dword [0x472f68]
add esp, 0x18
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov esp, ebp
pop ebp
ret