Function at 0x41fa90
Capabilities:
Access peb ldr_data

Disassembly:
mov ecx, dword [0x57fc4c]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41fd89
sub esp, 0x28
mov eax, dword [esp + 0x2c]
test eax, 3
jne 0x41fd72
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ecx
call fcn.00411f00
movzx eax, byte [0x57fb2d]
mov ecx, dword [esp + 8]
movzx edx, byte [esp + 0xc]
mov ebx, dword [esp + 0x10]
test al, al
jne 0x41fbe7
mov dword [esp + 0x20], ebx
mov byte [esp + 0x1f], dl
mov dword [esp + 0x24], ecx
mov eax, dword [0x57ff74]
test eax, eax
jle 0x41fb2a
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov ecx, dword [esp + 0x40]
mov dword [esp + 4], ecx
call fcn.00411e40
movzx eax, byte [esp + 8]
test al, al
jne 0x41fc5d
mov ecx, dword [esp + 0x24]
movzx edx, byte [esp + 0x1f]
mov ebx, dword [esp + 0x20]
mov dword [esp], ecx
mov byte [esp + 4], dl
mov dword [esp + 8], ebx
call fcn.00411f90
movzx eax, byte [esp + 0xc]
test al, al
jne 0x41fbe3
mov eax, dword [esp + 0x24]
mov dword [esp], eax
movzx eax, byte [esp + 0x1f]
mov byte [esp + 4], al
mov eax, dword [esp + 0x20]
mov dword [esp + 8], eax
call fcn.00411fc0
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00428a60
mov eax, dword [esp + 4]
mov dword [esp], eax
call fcn.00428e10
mov eax, dword [esp + 8]
movzx ecx, byte [esp + 0xc]
mov edx, dword [esp + 4]
test byte [edx], al
movzx ebx, byte [edx + eax + 0x840]
lea eax, [edx + eax + 0x840]
test cl, bl
jne 0x41fbaa
mov dword [esp], eax
mov byte [esp + 4], cl
call fcn.00476910
mov eax, dword [esp + 0x38]
movzx ecx, byte [eax + 0x3e]
mov byte [esp], cl
call fcn.00428c60
movzx eax, byte [esp + 4]
test al, al
je 0x41fc18
mov eax, dword [esp + 0x3c]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 0xc]
mov ebx, dword [esp + 0x38]
mov ebx, dword [ebx + 0x44]
add ecx, ebx
mov dword [eax + 8], ecx
adc edx, 0
mov dword [eax + 0xc], edx
add esp, 0x28
ret
add esp, 0x28
ret
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov ebp, dword [esp + 0x30]
mov dword [esp + 4], ebp
mov ebp, dword [esp + 0x34]
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ecx
mov byte [esp + 0x10], dl
mov dword [esp + 0x14], ebx
call fcn.004141c0
movzx eax, byte [esp + 0x18]
test al, al
jne 0x41fc59
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.004036f0
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov ecx, dword [esp + 0x2c]
mov dword [esp + 4], ecx
call fcn.00427f20
movzx eax, byte [esp + 8]
test al, al
jne 0x41fc55
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
call fcn.00427e20
add esp, 0x28
ret
add esp, 0x28
ret
call fcn.0043b190
lea eax, [0x4d6d9b]
mov dword [esp], eax
mov dword [esp + 4], 0x1d
call fcn.0043b9a0
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043b860
lea eax, [0x4d20e5]
mov dword [esp], eax
mov dword [esp + 4], 0xc
call fcn.0043b9a0
mov eax, dword [esp + 0x30]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043b860
lea eax, [0x4d0b75]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.0043b9a0
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov dword [esp + 4], 0
call fcn.0043b860
lea eax, [0x4d0b9e]
mov dword [esp], eax
mov dword [esp + 4], 2
call fcn.0043b9a0
call fcn.0043b1f0
lea eax, [0x4d0d58]
mov dword [esp], eax
mov dword [esp + 4], 4
mov eax, dword [esp + 0x30]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0xc], eax
call fcn.0041fda0
lea eax, [0x4d0bee]
mov dword [esp], eax
mov dword [esp + 4], 3
mov eax, dword [esp + 0x2c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0xffffffff
call fcn.0041fda0
mov eax, dword [0x57fc4c]
mov eax, dword fs:[eax]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov byte [eax + 0x95], 2
lea eax, [0x4d3c27]
mov dword [esp], eax
mov dword [esp + 4], 0x13
call fcn.0046c450
lea eax, [0x4d8484]
mov dword [esp], eax
mov dword [esp + 4], 0x23
call fcn.0046c450
nop
call fcn.004704c0
jmp fcn.0041fa90