Function at 0x41e0a4
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x44208b
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
mov eax, dword [0x448138]
xor eax, esp
mov dword [esp + 0xb8], eax
push ebx
push esi
push edi
mov eax, dword [0x448138]
xor eax, esp
push eax
lea eax, [esp + 0xd0]
mov dword fs:[0], eax
xor ebx, ebx
mov edi, ecx
mov esi, edx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x18], esi
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], ebx
mov dword [esp + 0xd8], ebx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebx
lea eax, [esi + 0xc]
mov byte [esp + 0xd8], 3
mov dword [esp + 0x14], ebx
call fcn.0041a89d
test eax, eax
jle 0x41e2e9
jmp 0x41e14b
mov esi, dword [esp + 0x18]
push ebx
lea ecx, [esp + 0x64]
mov dword [esp + 0x7c], 0xf
call fcn.00408384
lea edi, [esp + 0x7c]
call fcn.004154d1
mov eax, edi
push eax
lea eax, [esp + 0x64]
push eax
mov eax, dword [esp + 0x1c]
mov ecx, esi
mov byte [esp + 0xe0], 5
call fcn.00415f22
mov eax, dword [esp + 0x7c]
and eax, 0xf
dec eax
je 0x41e27e
dec eax
je 0x41e267
dec eax
je 0x41e22a
dec eax
je 0x41e204
dec eax
je 0x41e1ed
dec eax
je 0x41e1d6
dec eax
jne 0x41e2ae
cmp dword [esp + 0x78], 0x10
mov eax, dword [esp + 0x64]
jae 0x41e1bc
lea eax, [esp + 0x64]
push eax
push 0x405e60
mov esi, dword [0x449634]
call fcn.0040883c
lea esi, [esp + 0x24]
jmp 0x41e2a2
cmp dword [esp + 0x78], 0x10
mov eax, dword [esp + 0x64]
jae 0x41e1e5
lea eax, [esp + 0x64]
push eax
push 0x405e20
jmp 0x41e1c2
cmp dword [esp + 0x78], 0x10
mov eax, dword [esp + 0x64]
jae 0x41e1fc
lea eax, [esp + 0x64]
push eax
push 0x405de4
jmp 0x41e1c2
cmp dword [esp + 0x78], 0x10
mov eax, dword [esp + 0x64]
jae 0x41e213
lea eax, [esp + 0x64]
mov esi, dword [0x449634]
push eax
push 0x405da8
call fcn.0040883c
lea esi, [esp + 0x48]
jmp 0x41e2a2
cmp dword [esp + 0x78], 0x10
mov eax, dword [esp + 0x64]
jae 0x41e239
lea eax, [esp + 0x64]
mov esi, dword [0x449634]
push eax
push 0x405d6c
call fcn.0040883c
test byte [esp + 0x84], 0x30
pop ecx
pop ecx
lea eax, [esp + 0x60]
push eax
jne 0x41e261
lea esi, [esp + 0x44]
jmp 0x41e2a9
lea esi, [esp + 0x54]
jmp 0x41e2a9
cmp dword [esp + 0x78], 0x10
mov eax, dword [esp + 0x64]
jae 0x41e276
lea eax, [esp + 0x64]
push eax
push 0x405d34
jmp 0x41e293
cmp dword [esp + 0x78], 0x10
mov eax, dword [esp + 0x64]
jae 0x41e28d
lea eax, [esp + 0x64]
push eax
push 0x405cfc
mov esi, dword [0x449634]
call fcn.0040883c
lea esi, [esp + 0x34]
pop ecx
pop ecx
lea eax, [esp + 0x60]
push eax
call fcn.0040f0ab
lea esi, [esp + 0x7c]
call fcn.004154f7
push ebx
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0xe0], 3
call fcn.00408339
mov eax, dword [esp + 0x18]
inc dword [esp + 0x14]
add eax, 0xc
call fcn.0041a89d
cmp dword [esp + 0x14], eax
jl 0x41e147
mov edi, dword [esp + 0x3c]
push 0x412
lea edx, [esp + 0x44]
mov ecx, edi
call fcn.0041dfd7
lea edx, [esp + 0x54]
mov ecx, edi
mov dword [esp], 0x413
call fcn.0041dfd7
cmp byte [ebp + 8], bl
pop ecx
je 0x41e320
cmp byte [edi + 0x98], bl
jne 0x41e320
push 0x415
jmp 0x41e325
push 0x414
lea edx, [esp + 0x30]
mov ecx, edi
call fcn.0041dfd7
pop ecx
push 0x416
lea edx, [esp + 0x20]
mov ecx, edi
call fcn.0041dfd7
pop ecx
lea esi, [esp + 0x2c]
call fcn.00415483
lea esi, [esp + 0x1c]
call fcn.00415483
lea esi, [esp + 0x50]
call fcn.00415483
lea esi, [esp + 0x40]
call fcn.00415483
mov ecx, dword [esp + 0xd0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xb8]
xor ecx, esp
call fcn.0042acb7
mov esp, ebp
pop ebp
ret