Function at 0x412e70
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x442083
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc00
push ebx
push esi
mov esi, ecx
mov ecx, dword [0x44f698]
mov eax, dword [ecx]
push edi
call dword [eax + 4]
mov dword [esi + 0x20], eax
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
xor ebx, ebx
push ebx
push eax
call dword [edx + 0x14c]
mov ecx, dword [0x44f698]
mov eax, dword [ecx]
call dword [eax + 0xf0]
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
mov edi, eax
mov eax, dword [esi + 0x20]
push eax
call dword [edx + 0xf4]
push 0x200
lea ecx, [esp + 0x10]
push str.tipbox
push ecx
mov word [esp + 0x18], bx
call fcn.00435306
add esp, 0xc
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0xc18], ebx
call dword [edx + 0x70]
push 0x200
lea ecx, [esp + 0x10]
push str.mirage
push ecx
mov dword [esi + 0x10], eax
mov word [esp + 0x18], bx
call fcn.00435306
add esp, 0xc
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0xc18], 1
call dword [edx + 0x6a0]
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
cmp al, bl
mov eax, dword [esi + 0x10]
mov dword [esp + 0xc14], 0xffffffff
push 0x3f800000
je 0x412f72
push 0x3f800000
push 0x3f800000
push 0x3f800000
jmp 0x412f81
push 0x3e4ccccd
push 0x3e4ccccd
push 0x3e4ccccd
push eax
call dword [edx + 0x3e4]
push 0x200
lea ecx, [esp + 0x10]
push str.ui_helptipboxarrowtop
push ecx
mov word [esp + 0x18], bx
call fcn.00435306
add esp, 0xc
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0xc18], 2
call dword [edx + 0x50]
push 0x200
lea ecx, [esp + 0x10]
push str.ui_helptipboxarrowbottom
push ecx
mov dword [esi + 0x14], eax
mov word [esp + 0x18], bx
call fcn.00435306
add esp, 0xc
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0xc18], 3
call dword [edx + 0x50]
push 0x200
lea ecx, [esp + 0x10]
push str.tipbox_done
push ecx
mov dword [esi + 0x18], eax
mov word [esp + 0x18], bx
call fcn.00435306
add esp, 0xc
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0xc18], 4
call dword [edx + 0x60]
push 0x200
lea ecx, [esp + 0x10]
push str.tipbox_next
push ecx
mov dword [esi + 0x30], eax
mov word [esp + 0x18], bx
call fcn.00435306
add esp, 0xc
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0xc18], 5
call dword [edx + 0x60]
push 0x200
lea ecx, [esp + 0x10]
push str.tipbox_disable
push ecx
mov dword [esi + 0x2c], eax
mov word [esp + 0x18], bx
call fcn.00435306
add esp, 0xc
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0xc18], 6
call dword [edx + 0x68]
mov dword [esi + 0x34], eax
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
mov dword [esp + 0xc14], 0xffffffff
push edi
call dword [edx + 0xf4]
push 0x200
lea eax, [esp + 0x10]
push str.menu_fadein
push eax
mov word [esp + 0x18], bx
call fcn.00435306
add esp, 0xc
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
lea eax, [esp + 0xc]
push eax
mov dword [esp + 0xc18], 7
call dword [edx + 0x58]
push 0x200
lea ecx, [esp + 0x610]
push str.menu_fadeout
push ecx
mov dword [esi + 0x24], eax
mov word [esp + 0x618], bx
call fcn.00435306
add esp, 0xc
mov ecx, dword [0x44f698]
mov edx, dword [ecx]
lea eax, [esp + 0x60c]
push eax
mov dword [esp + 0xc18], 8
call dword [edx + 0x58]
mov ecx, dword [esp + 0xc0c]
pop edi
mov dword [esi + 0x28], eax
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0xc0c
ret