Function at 0x4110e0
Capabilities:
Link many functions at runtime

Disassembly:
sub esp, 0x5cc
mov eax, dword [0x4740f4]
xor eax, esp
mov dword [esp + 0x5c8], eax
push ebx
mov ebx, dword [esp + 0x5d4]
push ebp
push esi
mov eax, ebx
push edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x411104
sub eax, edx
lea eax, [eax + eax + 2]
push eax
call fcn.0044127e
mov ebp, eax
mov eax, ebx
add esp, 4
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x411121
sub eax, esi
push eax
push ebp
push 0xffffffffffffffff
push ebx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push str.apphelp.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
push str.SdbOpenDatabase
push esi
call edi
push str.SdbCloseDatabase
push esi
mov dword [0x4758cc], eax
call edi
push str.SdbGetFirstChild
push esi
mov dword [0x4758d0], eax
call edi
push str.SdbGetNextChild
push esi
mov dword [0x4758d4], eax
call edi
push str.SdbGetTagFromTagID
push esi
mov dword [0x4758d8], eax
call edi
push str.SdbTagToString
push esi
mov dword [0x4758dc], eax
call edi
push str.SdbGetStringTagPtr
push esi
mov dword [0x4758e0], eax
call edi
push str.SdbReadDWORDTag
push esi
mov dword [0x4758e8], eax
call edi
push str.SdbReadQWORDTag
push esi
mov dword [0x4758ec], eax
call edi
push str.SdbOpenApphelpResourceFile
push esi
mov dword [0x4758f0], eax
call edi
push str.SdbGetBinaryTagData
push esi
mov dword [0x4758f8], eax
call edi
push str.SdbGetTagDataSize
push esi
mov dword [0x4758fc], eax
call edi
push str.SdbGetMatchingExe
push esi
mov dword [0x475900], eax
call edi
push str.SdbReleaseMatchingExe
push esi
mov dword [0x475904], eax
call edi
mov dword [0x475908], eax
mov eax, dword [0x475904]
test eax, eax
jne 0x411216
push ebx
push str.Unsupported_Shim_DB_n
jmp 0x411405
lea ecx, [esp + 0x10]
push ecx
push 0
push 0
push 0
push ebp
push 0
call eax
push ebx
test eax, eax
je 0x411400
push str.Shim_found_for_file:__s_n
push 0x475910
call fcn.00440071
mov eax, dword [esp + 0xdc]
push 0x400
lea edx, [esp + 0x1e8]
push edx
push eax
call fcn.00410f70
mov edx, dword [esp + 0xe8]
lea ecx, [esp + 0x1f0]
push ecx
push edx
push 0x475910
push str._sFlags:_0x_x:__s_n
push 0x475910
call fcn.00440071
mov eax, dword [esp + 0xe0]
add esp, 0x2c
test eax, eax
je 0x4112a2
push eax
push 0x475910
push str._sAppHelp_Message:_0x_x_n
push 0x475910
call fcn.00440071
add esp, 0x10
xor esi, esi
cmp dword [esp + 0xb8], esi
jbe 0x41130e
lea ecx, [ecx]
mov eax, dword [esp + esi*4 + 0x10]
push eax
push 0x475910
push str._sExe_Shim:_0x_x_
push 0x475910
call fcn.00440071
mov edx, dword [esp + esi*4 + 0x60]
push 0x400
lea ecx, [esp + 0x1ec]
push ecx
push edx
call fcn.00410f70
mov ecx, dword [esp + esi*4 + 0x6c]
lea eax, [esp + 0x1f4]
push eax
push ecx
push 0x475910
push str._sFlags:_0x_x:__s_n
push 0x475910
call fcn.00440071
inc esi
add esp, 0x30
cmp esi, dword [esp + 0xb8]
jb 0x4112b0
xor esi, esi
cmp dword [esp + 0xbc], esi
jbe 0x411349
lea esp, [esp]
mov edx, dword [esp + esi*4 + 0x90]
push edx
push 0x475910
push str._sLayer_Shim:_0x_x_n
push 0x475910
call fcn.00440071
inc esi
add esp, 0x10
cmp esi, dword [esp + 0xbc]
jb 0x411320
mov ecx, dword [esp + 0xb0]
push 0x400
lea eax, [esp + 0x1dc]
push eax
push ecx
call fcn.00410f70
mov eax, dword [esp + 0xbc]
lea edx, [esp + 0x1e4]
push edx
push eax
push 0x475910
push str._sLayer_Flags:_0x_x:__s_n
push 0x475910
call fcn.00440071
add esp, 0x20
lea esi, [esp + 0xe6]
mov ebx, 0x10
lea edi, [esi - 0xe]
push 0x466b0c
push edi
call fcn.00411050
add esp, 8
test eax, eax
jne 0x4113f6
movzx ecx, byte [esi + 1]
movzx edx, byte [esi]
movzx eax, byte [esi - 1]
push ecx
movzx ecx, byte [esi - 2]
push edx
movzx edx, byte [esi - 3]
push eax
movzx eax, byte [esi - 4]
push ecx
movzx ecx, byte [esi - 5]
push edx
movzx edx, byte [esi - 6]
push eax
movzx eax, word [esi - 8]
push ecx
movzx ecx, word [esi - 0xa]
push edx
mov edx, dword [edi]
push eax
push ecx
push edx
push 0x475910
push str._sShim_Database:__8.8X__4.4X__4.4X__2.2X_2.2X_2.2X_2.2X_2.2X_2.2X_2.2X_2.2X_n
push 0x475910
call fcn.00440071
add esp, 0x38
add esi, 0x10
sub ebx, 1
jne 0x411396
jmp 0x411412
push str.No_Shim_found_for_file:__s_n
push 0x475910
call fcn.00440071
add esp, 0xc
mov ecx, dword [esp + 0x5d8]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
mov eax, 0x475910
call fcn.0043fd57
add esp, 0x5cc
ret