Function at 0x41f4e0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x51dac3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
push ebx
xor ebx, ebx
push ebp
push esi
mov esi, ecx
mov dword [esi + 0x18], ebx
mov byte [esi + 0x2c], bl
mov dword [esi + 0xc], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x10], ebx
call fcn.0041e160
mov ebp, dword [esp + 0x30]
mov cx, word [esp + 0x38]
xor eax, eax
cmp cx, 0xffff
mov ax, word [ebp]
mov dword [esp + 0x18], eax
je 0x41f54b
cmp cx, ax
je 0x41f54b
pop esi
pop ebp
xor al, al
pop ebx
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
add esp, 0x20
ret 0xc
movzx eax, word [ebp + 2]
mov ecx, dword [esp + 0x34]
push edi
push eax
call fcn.00483a00
mov edi, eax
cmp edi, ebx
mov dword [esp + 0x20], edi
jne 0x41f57b
pop edi
pop esi
pop ebp
xor al, al
pop ebx
mov ecx, dword [esp + 0x14]
mov dword fs:[0], ecx
add esp, 0x20
ret 0xc
mov dword [esi + 0x18], edi
mov ecx, dword [edi + 0x210]
cmp ecx, ebx
jne 0x41f58c
xor eax, eax
jmp 0x41f597
mov eax, dword [edi + 0x214]
sub eax, ecx
sar eax, 2
lea ecx, [esi + 0x1c]
push eax
mov dword [esp + 0x14], ecx
call fcn.0041ee00
mov cl, byte [ebp + 4]
mov byte [esi + 0x2c], cl
mov eax, dword [edi + 0x210]
cmp eax, ebx
mov ebp, 5
jne 0x41f5bd
xor edi, edi
jmp 0x41f5c8
mov edi, dword [edi + 0x214]
sub edi, eax
sar edi, 2
cmp edi, ebx
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], ebx
jle 0x41f9e3
or edi, 0xffffffff
jmp 0x41f5e0
mov esi, dword [esp + 0x14]
cmp esi, ebx
jl case.default.0x41f626
mov edx, dword [esp + 0x20]
mov ecx, dword [edx + 0x210]
cmp ecx, ebx
jne 0x41f5fe
xor eax, eax
jmp 0x41f609
mov eax, dword [edx + 0x214]
sub eax, ecx
sar eax, 2
cmp esi, eax
jge case.default.0x41f626
mov eax, dword [edx + 0x210]
mov edx, dword [eax + esi*4]
mov eax, dword [edx + 4]
cmp eax, 0x11
ja case.default.0x41f626
jmp dword [eax*4 + 0x41fa00]
push 0x10
call fcn.00406685
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], ebx
je 0x41f950
mov ecx, eax
call fcn.0042af80
jmp 0x41f952
push 0x10
call fcn.004066ee
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 1
je 0x41f950
mov ecx, eax
call fcn.0042b030
jmp 0x41f952
push 0x10
call fcn.0041d4a0
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 2
je 0x41f950
mov ecx, eax
call fcn.0042b0d0
jmp 0x41f952
push 0xc
call fcn.004f5012
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 3
je 0x41f6ca
mov ecx, eax
call fcn.0042b170
jmp 0x41f6cc
xor eax, eax
mov ecx, dword [esp + 0x34]
mov esi, eax
movzx eax, bp
mov ax, word [eax + ecx]
cmp ax, word [esp + 0x3c]
mov dword [esp + 0x2c], edi
mov dword [esp + 0x38], esi
ja case.default.0x41f626
cmp ax, bx
je case.default.0x41f626
jmp 0x41f95c
push 0x14
call fcn.004f5012
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 4
je 0x41f950
mov ecx, eax
call fcn.0042b320
jmp 0x41f952
push 0x18
call fcn.0041d880
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 5
je 0x41f950
mov ecx, eax
call fcn.0041da80
jmp 0x41f952
push 0x18
call fcn.0041d910
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 6
je 0x41f950
mov ecx, eax
call fcn.0041dba0
jmp 0x41f952
push 0x10
call fcn.0041d440
add esp, 4
cmp eax, ebx
je 0x41f798
mov dword [eax + 4], 3
mov dword [eax], 0x52fcec
jmp 0x41f956
xor eax, eax
jmp 0x41f956
push 0x18
call fcn.0041d9a0
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 7
je 0x41f950
mov ecx, eax
call fcn.0041dc90
jmp 0x41f952
push 0x14
call fcn.004081fb
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 8
je 0x41f950
mov ecx, eax
call fcn.0042bb90
jmp 0x41f952
push 0x10
call fcn.004f5012
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 9
je 0x41f816
mov ecx, eax
call fcn.0042b3f0
jmp 0x41f818
xor eax, eax
movzx ecx, word [esp + 0x3c]
mov esi, eax
mov eax, dword [esp + 0x34]
movzx edx, bp
mov eax, dword [edx + eax]
cmp eax, ecx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x38], esi
ja case.default.0x41f626
cmp eax, ebx
je case.default.0x41f626
jmp 0x41f95c
push 0x10
call fcn.0040661c
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 0xa
je 0x41f950
mov ecx, eax
call fcn.0042b5a0
jmp 0x41f952
push 0x10
call fcn.0040ba06
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 0xb
je 0x41f950
mov ecx, eax
call fcn.0042b650
jmp 0x41f952
push 0x10
call fcn.0041d530
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 0xc
je 0x41f950
mov ecx, eax
call fcn.0042b6f0
jmp 0x41f952
push 0x10
call fcn.0041d5c0
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 0xd
je 0x41f950
mov ecx, eax
call fcn.0042b780
jmp 0x41f952
push 0x18
call fcn.0041d650
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 0xe
je 0x41f950
mov ecx, eax
call fcn.0042b800
jmp 0x41f952
push 0x18
call fcn.0041d6e0
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 0xf
je 0x41f950
mov ecx, eax
call fcn.0042b890
jmp 0x41f952
push 0x14
call fcn.0041d770
add esp, 4
mov dword [esp + 0x38], eax
cmp eax, ebx
mov dword [esp + 0x2c], 0x10
je 0x41f950
mov ecx, eax
call fcn.0042b910
jmp 0x41f952
xor eax, eax
mov dword [esp + 0x2c], edi
mov esi, eax
mov dword [esp + 0x38], esi
mov ecx, dword [esp + 0x34]
mov edx, dword [esi]
movzx eax, bp
add eax, ecx
push eax
mov ecx, esi
call dword [edx + 0x10]
mov ecx, dword [esp + 0x10]
mov ecx, dword [ecx + 4]
add ebp, eax
cmp ecx, ebx
jne 0x41f97e
xor edx, edx
jmp 0x41f98a
mov edx, dword [esp + 0x10]
mov edx, dword [edx + 8]
sub edx, ecx
sar edx, 2
cmp ecx, ebx
je 0x41f9af
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 0xc]
sub eax, ecx
sar eax, 2
cmp edx, eax
jae 0x41f9af
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 8]
mov dword [eax], esi
add eax, 4
mov dword [ecx + 8], eax
jmp 0x41f9c3
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 8]
lea edx, [esp + 0x38]
push edx
push 1
push eax
call fcn.0041ea30
cmp bp, word [esp + 0x1c]
ja case.default.0x41f626
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x41f5e0
cmp bp, word [esp + 0x1c]
mov ecx, dword [esp + 0x24]
pop edi
pop esi
pop ebp
sete al
pop ebx
mov dword fs:[0], ecx
add esp, 0x20
ret 0xc