Function at 0x41be40
Capabilities:
Access peb ldr_data

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 0xc]
jbe 0x41c215
sub esp, 0x44
mov ecx, dword [esp + 0x48]
test byte [ecx], al
lea edi, [ecx + 0x44]
mov dword [esp + 0x40], edi
mov edx, dword [0x7e34e0]
test edx, edx
jne 0x41c106
mov dword [ecx + 0x44], 0
lea eax, [0x7e3268]
mov dword [esp], eax
call fcn.00402770
mov eax, dword [esp + 4]
test eax, eax
jne 0x41bead
mov eax, dword [esp + 0x48]
mov dword [eax + 0xd0], 0
mov dword [eax + 0xd4], 0
add esp, 0x44
ret
nop
call fcn.0045d930
mov eax, dword [esp]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x20], ecx
lea edx, [0x7e3e04]
mov dword [esp], edx
mov dword [esp + 4], 0xffffffff
call fcn.00402880
mov eax, dword [esp + 8]
mov ecx, dword [0x7e3df8]
cmp eax, ecx
je 0x41c193
mov eax, dword [esp + 0x48]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 4
call fcn.00436470
mov eax, dword [esp + 0x48]
mov byte [eax + 0x64], 1
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x18]
mov ecx, dword [ecx + 0x54]
test byte [ecx], al
add ecx, 0xb80
mov dword [esp], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x50]
mov dword [esp + 8], ecx
call fcn.0041d5c0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x18], ecx
mov edx, dword [esp + 0x48]
mov dword [esp], edx
mov dword [esp + 4], 4
mov dword [esp + 8], 2
call fcn.00436470
mov eax, dword [esp + 0x48]
mov ecx, dword [eax + 0xd0]
mov dword [esp + 0x30], ecx
mov edx, dword [eax + 0xd4]
mov dword [esp + 0x2c], edx
fld qword [0x7e3ac8]
fld st(0)
fstp qword [esp + 0x34]
mov ebx, dword [esp + 0x14]
mov dword [esp], ebx
mov ebx, dword [esp + 0x18]
mov dword [esp + 4], ebx
fstp st(0)
call fcn.00453eb0
fld qword [esp + 8]
fld qword [esp + 0x34]
fld st(1)
fmulp st(1)
fld st(0)
fstp qword [esp]
fstp st(0)
fstp st(0)
call fcn.00453e10
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x30]
mov edx, ecx
add ecx, eax
mov ebx, ecx
add ecx, 1
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x48]
mov dword [esi + 0xd0], ecx
add edx, eax
mov eax, dword [esp + 0x2c]
adc eax, ebp
add ebx, 1
adc eax, 0
mov dword [esi + 0xd4], eax
lea eax, [0x7e3e04]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00402880
mov eax, dword [esp + 8]
mov ecx, dword [0x7e3df8]
cmp eax, ecx
ja 0x41c112
je 0x41c0c5
call fcn.0045d930
mov eax, dword [esp + 0x48]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x54]
mov ecx, dword [esp]
mov edx, dword [esp + 0x1c]
mov ebx, ecx
sub ecx, edx
mov ebp, dword [eax + 0xb60]
mov esi, ebp
add ebp, ecx
mov edi, dword [eax + 0xb64]
mov dword [esp + 0x2c], edi
mov edi, dword [esp + 4]
mov dword [eax + 0xb60], ebp
sub ebx, edx
mov edx, dword [esp + 0x20]
sbb edi, edx
add esi, ecx
mov ecx, dword [esp + 0x2c]
adc ecx, edi
mov dword [eax + 0xb64], ecx
test ecx, ecx
setg dl
sete bl
cmp ebp, 0x1388
xchg esi, ebx
seta bl
xchg esi, ebx
and ebx, esi
or edx, ebx
test dl, dl
jne 0x41c091
add esp, 0x44
ret
mov dword [esp + 0x3c], eax
lea eax, [0x7e3a90]
mov dword [esp], eax
mov dword [esp + 4], ebp
mov dword [esp + 8], ecx
call fcn.00402820
mov eax, dword [esp + 0x3c]
mov dword [eax + 0xb60], 0
mov dword [eax + 0xb64], 0
jmp 0x41c08d
mov dword [esp], 0
call fcn.0041a110
movzx eax, byte [esp + 4]
test al, al
jne 0x41c022
mov ecx, dword [0x7e34e0]
test ecx, ecx
jne 0x41c0f4
mov eax, dword [esp + 0x48]
mov dword [eax + 0x44], eax
jmp 0x41c022
mov edi, dword [esp + 0x40]
mov eax, dword [esp + 0x48]
call fcn.0045c920
jmp 0x41c022
xor eax, eax
call fcn.0045c920
jmp 0x41be7b
mov dword [esp + 0x24], eax
mov dword [esp + 0x30], ecx
call fcn.00433c00
lea eax, [0x67f887]
mov dword [esp], eax
mov dword [esp + 4], 0x15
call fcn.004345e0
mov eax, dword [esp + 0x24]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004342e0
lea eax, [0x67bf66]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.004345e0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004342e0
call fcn.00433e20
call fcn.00433c70
lea eax, [0x6809e7]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.00432350
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], ecx
call fcn.00433c00
lea eax, [0x67ff89]
mov dword [esp], eax
mov dword [esp + 4], 0x16
call fcn.004345e0
mov eax, dword [esp + 0x28]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004342e0
lea eax, [0x67bf66]
mov dword [esp], eax
mov dword [esp + 4], 0xd
call fcn.004345e0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.004342e0
call fcn.00433e20
call fcn.00433c70
lea eax, [0x67e976]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.00432350
nop
call fcn.00459fe0
jmp fcn.0041be40