Function at 0x10041b4d
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x10048d7b
call fcn.1000cf04
sub esp, 0x1e4
mov eax, dword [0x1005a214]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0x18]
push edi
xor edi, edi
push edi
push edi
push edi
push 6
push edi
push edi
push dword [ebp + 0x14]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x1f0], eax
call fcn.10030a7d
mov dword [ebp - 4], edi
call fcn.10034457
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x1ec], eax
push dword [ebp + 0xc]
xor ebx, ebx
inc ebx
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 4], ebx
call fcn.10003d68
lea ecx, [ebp - 0x1d8]
call fcn.1003074b
mov ecx, dword [ebp + 0x10]
add eax, 0x34
or dword [eax], ecx
call fcn.10034457
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 4], 2
call fcn.10034457
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x1e8], eax
cmp esi, edi
mov dword [ebp - 4], 3
je 0x10041c30
lea eax, [ebp - 0x1e8]
push eax
push esi
lea ecx, [ebp - 0x1d8]
call fcn.1003074b
push eax
lea eax, [ebp - 0x1e0]
push eax
call fcn.100419bc
jmp 0x10041c86
mov eax, dword [ebp - 0x1dc]
mov ecx, dword [eax + 8]
cmp ecx, edi
mov dword [ebp - 0x1dc], ecx
je 0x10041c86
lea esi, [eax + 4]
lea eax, [ebp - 0x1dc]
push eax
mov ecx, esi
call fcn.1000674f
mov eax, dword [eax]
neg ebx
sbb ebx, ebx
lea ecx, [ebp - 0x1e8]
and ebx, ecx
push ebx
push eax
lea ecx, [ebp - 0x1d8]
call fcn.1003074b
push eax
lea eax, [ebp - 0x1e0]
push eax
call fcn.100419bc
xor ebx, ebx
cmp dword [ebp - 0x1dc], edi
jne 0x10041c46
call fcn.10034457
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x1dc], eax
push 0xf002
lea ecx, [ebp - 0x1dc]
mov dword [ebp - 4], 4
call fcn.10003d68
mov esi, dword [ebp - 0x1dc]
push dword [esi - 0xc]
lea ecx, [ebp - 0x1e0]
push esi
call fcn.10026178
push edi
lea ecx, [ebp - 0x1e0]
call fcn.100046f6
push 0x1004c730
lea ecx, [ebp - 0x1e0]
call fcn.100040b8
push edi
lea ecx, [ebp - 0x1e0]
call fcn.100046f6
lea ecx, [ebp - 0x1d8]
call fcn.1003074b
add eax, 0x14
inc dword [eax]
lea ecx, [ebp - 0x1d8]
call fcn.1003074b
mov edi, dword [ebp - 0x1e0]
lea ecx, [ebp - 0x1d8]
mov dword [eax + 0xc], edi
call fcn.1003074b
mov ebx, dword [ebp - 0x1ec]
mov ecx, dword [ebp - 0x1f0]
push 0x104
mov dword [eax + 0x30], ebx
call fcn.10003c5f
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x1e4], eax
call fcn.1003074b
mov ecx, dword [ebp - 0x1e4]
mov dword [eax + 0x1c], ecx
lea ecx, [ebp - 0x1d8]
call fcn.1003074f
mov ecx, dword [ebp - 0x1f0]
push 0xffffffffffffffff
mov dword [ebp - 0x1e4], eax
call fcn.10003f1e
xor eax, eax
cmp dword [ebp - 0x1e4], 1
lea ecx, [esi - 0x10]
sete al
mov dword [ebp - 0x1e4], eax
call fcn.1000398e
mov ecx, dword [ebp - 0x1e8]
add ecx, 0xfffffff0
call fcn.1000398e
lea ecx, [edi - 0x10]
call fcn.1000398e
lea ecx, [ebx - 0x10]
call fcn.1000398e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d8]
call fcn.100309d6
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1e4]
pop edi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop esi
xor ecx, ebp
pop ebx
call fcn.1000cef6
leave
ret 0x14