Function at 0x4111c0
Capabilities:
Check for peb ntglobalflag flag

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
push ebx
push esi
push edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, edx
mov eax, eax
nop
mov edx, edx
nop
mov ebx, ebx
nop
pushal
pushfd
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
movzx eax, byte [eax + 0x68]
cmp eax, 0x70
jne 0x4111fc
mov eax, 0
mov dword [eax], eax
popfd
popal
mov ecx, ecx
mov edx, edx
nop
nop
mov ecx, ecx
nop
mov edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [ebp - 0x120]
push 0x104
push eax
push 0
call dword [fcn.0040902c]
push 0
push 0
push 3
push 0
push 1
lea ecx, [ebp - 0x120]
push 0x80000000
push ecx
call dword [fcn.0040901c]
mov esi, eax
test esi, esi
mov dword [ebp - 0x14], esi
je 0x411450
mov edi, dword [0x409038]
push 2
push 0
push 0xfffffffffffffffc
push esi
call edi
mov ebx, dword [0x409034]
lea edx, [ebp - 8]
push 0
push edx
lea eax, [ebp - 0xc]
push 4
push eax
push esi
call ebx
cmp dword [ebp - 0xc], 0xcc
jne 0x411449
push 2
push 0
push 0xffffff10
push esi
call edi
lea ecx, [ebp - 8]
push 0
push ecx
lea edx, [ebp - 4]
push 4
push edx
push esi
call ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, edx
mov eax, eax
nop
mov edx, edx
nop
mov ebx, ebx
nop
pushal
pushfd
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
movzx eax, byte [eax + 0x68]
cmp eax, 0x70
jne 0x4112cc
mov eax, 0
mov dword [eax], eax
popfd
popal
mov ecx, ecx
mov edx, edx
nop
nop
mov ecx, ecx
nop
mov edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, dword [ebp - 0x14]
mov edi, dword [0x409038]
push 2
push 0
push 0xffffff0c
push esi
call edi
mov ebx, dword [0x409034]
lea eax, [ebp - 8]
push 0
push eax
lea ecx, [ebp - 0x10]
push 4
push ecx
push esi
call ebx
mov edx, dword [ebp - 4]
push 2
neg edx
push 0
push edx
push esi
call edi
mov eax, dword [ebp - 4]
push eax
call fcn.00411c97
mov edx, dword [ebp - 4]
add esp, 4
lea ecx, [ebp - 8]
mov dword [ebp - 0x18], eax
push 0
push ecx
push edx
push eax
push esi
call ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, edx
mov eax, eax
nop
mov edx, edx
nop
mov ebx, ebx
nop
pushal
pushfd
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
movzx eax, byte [eax + 0x68]
cmp eax, 0x70
jne 0x411367
mov eax, 0
mov dword [eax], eax
popfd
popal
mov ecx, ecx
mov edx, edx
nop
nop
mov ecx, ecx
nop
mov edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 4]
mov esi, dword [ebp - 0x18]
lea eax, [ebp - 0x10]
push 4
add ecx, 0xfffffffc
push eax
push ecx
push esi
call fcn.00411130
mov edx, dword [ebp - 4]
mov ecx, dword [ebp + 8]
add esp, 0x10
xor edi, edi
mov dword [esi + edx - 0xf0], edi
mov eax, dword [ebp - 4]
push edi
push edi
push 4
push edi
push 1
push 0xc0000000
push ecx
mov dword [esi + eax - 0xf4], edi
call dword [fcn.0040901c]
push 2
push edi
push edi
push eax
mov dword [ebp - 0x1c], eax
call dword [0x409038]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, edx
mov eax, eax
nop
mov edx, edx
nop
mov ebx, ebx
nop
pushal
pushfd
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
movzx eax, byte [eax + 0x68]
cmp eax, 0x70
jne 0x411401
mov eax, 0
mov dword [eax], eax
popfd
popal
mov ecx, ecx
mov edx, edx
nop
nop
mov ecx, ecx
nop
mov edx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
lea edx, [ebp - 8]
push 0
add eax, 0xfffffffc
push edx
push eax
push ecx
push esi
call dword [fcn.00409018]
push esi
call dword [fcn.00409080]
mov edx, dword [ebp + 8]
push 6
push edx
call dword [0x409030]
mov esi, dword [ebp - 0x14]
push esi
call dword [fcn.00409080]
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret