Function at 0x41e490
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42d0c5
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x464b80]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x24], 0
push 0xb
push eax
call dword [0x42f1a8]
add esp, 8
push 0x430bfc
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0
call dword [0x42f230]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call dword [0x42f428]
mov eax, dword [0x46521c]
mov dword [ebp - 0x24], 1
test eax, eax
jne 0x41e526
push 0xe4
call fcn.00423a2b
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.00402d10
mov byte [ebp - 4], 1
mov dword [0x46521c], eax
mov ecx, eax
call fcn.00406c60
dec eax
cmp eax, 7
ja case.0x41e533.4
jmp dword [eax*4 + 0x41ec00]
push str.BKRedAlert
jmp 0x41e569
push str.BKWarcraft
jmp 0x41e569
push str.BKEmpire
jmp 0x41e569
push str.BKPopcap
jmp 0x41e569
push str.BKStarcraft
jmp 0x41e569
push str.BKCS
jmp 0x41e569
push str.BKZuma
lea ecx, [ebp - 0x10]
call dword [0x42f20c]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
call dword [0x42f260]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [0x42f420]
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x20]
call dword [0x42f24c]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 3
call dword [0x42f240]
test al, al
jne 0x41e5b7
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x20]
call dword [0x42f244]
mov eax, dword [0x46521c]
test eax, eax
jne 0x41e5e4
push 0xe4
call fcn.00423a2b
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.00402d10
mov byte [ebp - 4], 3
mov dword [0x46521c], eax
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
call fcn.00407280
lea ecx, [ebp - 0x20]
call dword [0x42f248]
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
call dword [0x42f420]
lea eax, [ebp - 0x18]
push eax
call dword [0x42f0dc]
push 1
push 0x432f3c
mov dword [ebp - 4], 5
call dword [0x42f400]
add esp, 0xc
mov dword [ebp - 0x20], eax
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x18]
call dword [0x42f0e4]
lea ecx, [ebp - 0x20]
mov esi, eax
call dword [0x42f420]
lea ecx, [ebp - 0x10]
call dword [0x42f428]
mov byte [ebp - 4], 7
test esi, esi
jle 0x41e6ec
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
mov eax, dword [eax + 4]
dec eax
push eax
lea eax, [esi + 1]
mov esi, dword [0x42f1e4]
push eax
lea eax, [ebp - 0x24]
push eax
call esi
push eax
lea ecx, [ebp - 0x10]
call dword [0x42f418]
lea ecx, [ebp - 0x24]
call dword [0x42f420]
push 1
push 0
push ecx
mov ecx, esp
push 0x28
call dword [0x42f0ec]
lea ecx, [ebp - 0x10]
call dword [0x42f0e8]
test eax, eax
jle 0x41e6fa
push eax
push 0
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x10]
call esi
push eax
lea ecx, [ebp - 0x10]
call dword [0x42f418]
lea ecx, [ebp - 0x24]
call dword [0x42f420]
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x10]
call dword [0x42f14c]
push eax
lea ecx, [ebp - 0x10]
call dword [0x42f418]
lea ecx, [ebp - 0x24]
call dword [0x42f420]
jmp 0x41e6fa
push str.guanwang
lea ecx, [ebp - 0x10]
call dword [0x42f20c]
mov eax, dword [0x46521c]
test eax, eax
jne 0x41e727
push 0xe4
call fcn.00423a2b
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.00402d10
mov byte [ebp - 4], 7
mov dword [0x46521c], eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, eax
call fcn.00406fd0
lea ecx, [ebp - 0x10]
call dword [0x42f420]
lea ecx, [ebp - 0x18]
call dword [0x42f420]
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 9
call dword [0x42f428]
mov eax, dword [0x46521c]
mov dword [ebp - 0x24], 2
test eax, eax
jne 0x41e788
push 0xe4
call fcn.00423a2b
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.00402d10
mov byte [ebp - 4], 9
mov dword [0x46521c], eax
mov ecx, eax
call fcn.00406c60
dec eax
cmp eax, 7
ja case.0x41e795.4
jmp dword [eax*4 + 0x41ec20]
push str.1.ico
jmp 0x41e7cb
push str.2.ico
jmp 0x41e7cb
push str.3.ico
jmp 0x41e7cb
push str.5.ico
jmp 0x41e7cb
push str.6.ico
jmp 0x41e7cb
push str.7.ico
jmp 0x41e7cb
push str.8.ico
lea ecx, [ebp - 0x10]
call dword [0x42f20c]
push str.0.ico
lea ecx, [ebp - 0x10]
call dword [0x42f20c]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x20]
call dword [0x42f45c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb
call dword [0x42f62c]
lea ecx, [ebp - 0x20]
call dword [0x42f458]
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0xffffffff
call dword [0x42f420]
push ecx
mov eax, esp
mov ecx, edi
mov dword [eax], 0x800
call dword [0x42f7a4]
mov eax, dword [0x46521c]
test eax, eax
jne 0x41e859
push 0xe4
call fcn.00423a2b
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, eax
mov dword [ebp - 4], 0xc
call fcn.00402d10
mov dword [ebp - 4], 0xffffffff
mov dword [0x46521c], eax
push edi
mov ecx, eax
call fcn.00407430
push 0xc
mov dword [ebp - 0x24], fcn.0041b160
mov dword [ebp - 0x14], fcn.00421230
mov dword [ebp - 0x10], 0
call fcn.00423a2b
push 0x463e20
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
mov ebx, dword [0x42f3dc]
push 0
mov dword [eax], 1
push 0
push eax
mov dword [eax + 4], 0x420970
mov dword [eax + 8], ecx
lea eax, [ebp - 0x24]
push eax
lea eax, [edi + 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push edi
push eax
call ebx
mov esi, dword [0x42f0b0]
lea ecx, [ebp - 0x20]
add esp, 0x28
call esi
push 0xc
mov dword [ebp - 0x24], fcn.0041b570
mov dword [ebp - 0x14], 0x421290
mov dword [ebp - 0x10], 0
call fcn.00423a2b
push 0x463e20
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
push 0
mov dword [eax], 1
push 0
push eax
mov dword [eax + 4], 0x408990
mov dword [eax + 8], ecx
lea eax, [ebp - 0x24]
push eax
lea eax, [edi + 0x50]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push edi
push eax
call ebx
add esp, 0x28
lea ecx, [ebp - 0x20]
call esi
mov esi, dword [edi + 0x20]
push 0x10
mov dword [ebp - 0x1c], 0x41eca0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], fcn.004233a0
mov dword [ebp - 0x10], 0
call fcn.00423a2b
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
push 0x454584
push 0
mov dword [eax], 1
push 0
push eax
mov dword [eax + 4], 0x4047a0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x1c]
push eax
push edi
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x24]
push esi
push eax
call ebx
mov esi, dword [0x42f0b0]
lea ecx, [ebp - 0x24]
add esp, 0x28
call esi
push 0xc
mov dword [ebp - 0x24], fcn.00408500
mov dword [ebp - 0x14], fcn.004211e0
mov dword [ebp - 0x10], 0
call fcn.00423a2b
push 0x463e20
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
push 0
push 0
push eax
mov dword [eax], 1
mov dword [eax + 8], ecx
lea ecx, [edi + 0x6c]
mov dword [eax + 4], 0x409f80
lea eax, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push edi
push eax
call ebx
add esp, 0x28
lea ecx, [ebp - 0x20]
call esi
push 0x10
mov dword [ebp - 0x14], fcn.00420790
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x24], fcn.004229b0
call fcn.00423a2b
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 0x464854
push 0
mov dword [eax], 1
push 0
push eax
mov dword [eax + 4], 0x404720
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x14]
push eax
push edi
lea eax, [ebp - 0x24]
push eax
lea eax, [edi + 0x6c]
push eax
lea eax, [ebp - 0x20]
push eax
call ebx
add esp, 0x28
lea ecx, [ebp - 0x20]
call esi
mov eax, dword fs:[0x2c]
mov ecx, dword [0x465520]
mov dword [ebp - 0x24], fcn.00408420
mov dword [ebp - 0x14], fcn.00421110
mov dword [ebp - 0x10], 0
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x465208]
cmp eax, dword [ecx + 4]
jg 0x41eb9d
push 0xc
call fcn.00423a2b
push 0x463e20
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
push 0x4651f8
mov dword [eax], 1
push 2
push eax
mov dword [eax + 4], 0x404810
mov dword [eax + 8], ecx
lea eax, [ebp - 0x24]
push eax
lea eax, [edi + 0x6c]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push edi
push eax
call ebx
add esp, 0x28
lea ecx, [ebp - 0x20]
call esi
push 0x10
mov dword [ebp - 0x14], fcn.0041ecc0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x24], fcn.004229b0
call fcn.00423a2b
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 0x464854
push 0
mov dword [eax], 1
push 0
push eax
mov dword [eax + 4], 0x404720
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x14]
push eax
push edi
lea eax, [ebp - 0x24]
push eax
lea eax, [edi + 0x6c]
push eax
lea eax, [ebp - 0x20]
push eax
call ebx
add esp, 0x28
lea ecx, [ebp - 0x20]
call esi
push 0x10
mov dword [ebp - 0x34], fcn.0041ec40
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x28], fcn.004224c0
call fcn.00423a2b
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
push 0x464660
push 0
mov dword [eax], 1
push 0
push eax
mov dword [eax + 4], 0x40b380
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x34]
push eax
push edi
lea eax, [ebp - 0x28]
push eax
lea eax, [edi + 0x80]
push eax
lea eax, [ebp - 0x2c]
push eax
call ebx
add esp, 0x28
lea ecx, [ebp - 0x2c]
call esi
mov ecx, dword [edi + 0x20]
push edi
call fcn.004109a0
mov ecx, dword [edi + 0x20]
call fcn.004164f0
mov ecx, dword [edi + 0x28]
push 0
mov eax, dword [ecx]
call dword [eax + 0x2c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x465208
call fcn.00423d36
add esp, 4
cmp dword [0x465208], 0xffffffff
jne 0x41ea6e
mov dword [ebp - 4], 0xd
mov dword [0x4651f8], 0xa
call fcn.00404a20
push 0x465208
mov dword [0x4651fc], eax
mov dword [0x465200], 2
mov dword [0x465204], 0
mov dword [ebp - 4], 0xffffffff
call fcn.00423ce5
add esp, 4
jmp 0x41ea6e