Function at 0x41e450
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42d085
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x464b80]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x24], 0
push 0xb
push eax
call dword [0x42f1a8]
add esp, 8
push 0x430c04
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0
call dword [0x42f230]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 1
call dword [0x42f428]
mov eax, dword [0x46521c]
mov dword [ebp - 0x24], 1
test eax, eax
jne 0x41e4e6
push 0xe4
call fcn.004239fb
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.00402d10
mov byte [ebp - 4], 1
mov dword [0x46521c], eax
mov ecx, eax
call fcn.00406c50
dec eax
cmp eax, 7
ja case.0x41e4f3.4
jmp dword [eax*4 + 0x41ebc0]
push str.BKRedAlert
jmp 0x41e529
push str.BKWarcraft
jmp 0x41e529
push str.BKEmpire
jmp 0x41e529
push str.BKPopcap
jmp 0x41e529
push str.BKStarcraft
jmp 0x41e529
push str.BKCS
jmp 0x41e529
push str.BKZuma
lea ecx, [ebp - 0x10]
call dword [0x42f20c]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x18]
call dword [0x42f260]
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0
call dword [0x42f420]
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x20]
call dword [0x42f24c]
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 3
call dword [0x42f240]
test al, al
jne 0x41e577
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x20]
call dword [0x42f244]
mov eax, dword [0x46521c]
test eax, eax
jne 0x41e5a4
push 0xe4
call fcn.004239fb
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.00402d10
mov byte [ebp - 4], 3
mov dword [0x46521c], eax
lea ecx, [ebp - 0x18]
push ecx
mov ecx, eax
call fcn.00407270
lea ecx, [ebp - 0x20]
call dword [0x42f248]
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0xffffffff
call dword [0x42f420]
lea eax, [ebp - 0x18]
push eax
call dword [0x42f0dc]
push 1
push 0x432f4c
mov dword [ebp - 4], 5
call dword [0x42f400]
add esp, 0xc
mov dword [ebp - 0x20], eax
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x18]
call dword [0x42f0e4]
lea ecx, [ebp - 0x20]
mov esi, eax
call dword [0x42f420]
lea ecx, [ebp - 0x10]
call dword [0x42f428]
mov byte [ebp - 4], 7
test esi, esi
jle 0x41e6ac
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x18]
mov eax, dword [eax + 4]
dec eax
push eax
lea eax, [esi + 1]
mov esi, dword [0x42f1e4]
push eax
lea eax, [ebp - 0x24]
push eax
call esi
push eax
lea ecx, [ebp - 0x10]
call dword [0x42f418]
lea ecx, [ebp - 0x24]
call dword [0x42f420]
push 1
push 0
push ecx
mov ecx, esp
push 0x28
call dword [0x42f0ec]
lea ecx, [ebp - 0x10]
call dword [0x42f0e8]
test eax, eax
jle 0x41e6ba
push eax
push 0
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x10]
call esi
push eax
lea ecx, [ebp - 0x10]
call dword [0x42f418]
lea ecx, [ebp - 0x24]
call dword [0x42f420]
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x10]
call dword [0x42f14c]
push eax
lea ecx, [ebp - 0x10]
call dword [0x42f418]
lea ecx, [ebp - 0x24]
call dword [0x42f420]
jmp 0x41e6ba
push str.guanwang
lea ecx, [ebp - 0x10]
call dword [0x42f20c]
mov eax, dword [0x46521c]
test eax, eax
jne 0x41e6e7
push 0xe4
call fcn.004239fb
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.00402d10
mov byte [ebp - 4], 7
mov dword [0x46521c], eax
lea ecx, [ebp - 0x10]
push ecx
mov ecx, eax
call fcn.00406fc0
lea ecx, [ebp - 0x10]
call dword [0x42f420]
lea ecx, [ebp - 0x18]
call dword [0x42f420]
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 9
call dword [0x42f428]
mov eax, dword [0x46521c]
mov dword [ebp - 0x24], 2
test eax, eax
jne 0x41e748
push 0xe4
call fcn.004239fb
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.00402d10
mov byte [ebp - 4], 9
mov dword [0x46521c], eax
mov ecx, eax
call fcn.00406c50
dec eax
cmp eax, 7
ja case.0x41e755.4
jmp dword [eax*4 + 0x41ebe0]
push str.1.ico
jmp 0x41e78b
push str.2.ico
jmp 0x41e78b
push str.3.ico
jmp 0x41e78b
push str.5.ico
jmp 0x41e78b
push str.6.ico
jmp 0x41e78b
push str.7.ico
jmp 0x41e78b
push str.8.ico
lea ecx, [ebp - 0x10]
call dword [0x42f20c]
push str.0.ico
lea ecx, [ebp - 0x10]
call dword [0x42f20c]
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x20]
call dword [0x42f45c]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb
call dword [0x42f62c]
lea ecx, [ebp - 0x20]
call dword [0x42f458]
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], 0xffffffff
call dword [0x42f420]
push ecx
mov eax, esp
mov ecx, edi
mov dword [eax], 0x800
call dword [0x42f7a4]
mov eax, dword [0x46521c]
test eax, eax
jne 0x41e819
push 0xe4
call fcn.004239fb
add esp, 4
mov dword [ebp - 0x2c], eax
mov ecx, eax
mov dword [ebp - 4], 0xc
call fcn.00402d10
mov dword [ebp - 4], 0xffffffff
mov dword [0x46521c], eax
push edi
mov ecx, eax
call fcn.00407420
push 0xc
mov dword [ebp - 0x24], fcn.0041b120
mov dword [ebp - 0x14], fcn.00421200
mov dword [ebp - 0x10], 0
call fcn.004239fb
push 0x463e20
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
mov ebx, dword [0x42f3dc]
push 0
mov dword [eax], 1
push 0
push eax
mov dword [eax + 4], 0x420940
mov dword [eax + 8], ecx
lea eax, [ebp - 0x24]
push eax
lea eax, [edi + 0x30]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push edi
push eax
call ebx
mov esi, dword [0x42f0b0]
lea ecx, [ebp - 0x20]
add esp, 0x28
call esi
push 0xc
mov dword [ebp - 0x24], fcn.0041b530
mov dword [ebp - 0x14], 0x421260
mov dword [ebp - 0x10], 0
call fcn.004239fb
push 0x463e20
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
push 0
mov dword [eax], 1
push 0
push eax
mov dword [eax + 4], 0x408980
mov dword [eax + 8], ecx
lea eax, [ebp - 0x24]
push eax
lea eax, [edi + 0x50]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push edi
push eax
call ebx
add esp, 0x28
lea ecx, [ebp - 0x20]
call esi
mov esi, dword [edi + 0x20]
push 0x10
mov dword [ebp - 0x1c], 0x41ec60
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], fcn.00423370
mov dword [ebp - 0x10], 0
call fcn.004239fb
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
push 0x454594
push 0
mov dword [eax], 1
push 0
push eax
mov dword [eax + 4], 0x4047a0
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x1c]
push eax
push edi
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x24]
push esi
push eax
call ebx
mov esi, dword [0x42f0b0]
lea ecx, [ebp - 0x24]
add esp, 0x28
call esi
push 0xc
mov dword [ebp - 0x24], fcn.004084f0
mov dword [ebp - 0x14], fcn.004211b0
mov dword [ebp - 0x10], 0
call fcn.004239fb
push 0x463e20
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
push 0
push 0
push eax
mov dword [eax], 1
mov dword [eax + 8], ecx
lea ecx, [edi + 0x6c]
mov dword [eax + 4], 0x409f70
lea eax, [ebp - 0x24]
push eax
push ecx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push edi
push eax
call ebx
add esp, 0x28
lea ecx, [ebp - 0x20]
call esi
push 0x10
mov dword [ebp - 0x14], fcn.00420760
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x24], fcn.00422980
call fcn.004239fb
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 0x464854
push 0
mov dword [eax], 1
push 0
push eax
mov dword [eax + 4], 0x404720
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x14]
push eax
push edi
lea eax, [ebp - 0x24]
push eax
lea eax, [edi + 0x6c]
push eax
lea eax, [ebp - 0x20]
push eax
call ebx
add esp, 0x28
lea ecx, [ebp - 0x20]
call esi
mov eax, dword fs:[0x2c]
mov ecx, dword [0x465520]
mov dword [ebp - 0x24], fcn.00408410
mov dword [ebp - 0x14], fcn.004210e0
mov dword [ebp - 0x10], 0
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x465208]
cmp eax, dword [ecx + 4]
jg 0x41eb5d
push 0xc
call fcn.004239fb
push 0x463e20
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
push 0x4651f8
mov dword [eax], 1
push 2
push eax
mov dword [eax + 4], 0x404810
mov dword [eax + 8], ecx
lea eax, [ebp - 0x24]
push eax
lea eax, [edi + 0x6c]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push edi
push eax
call ebx
add esp, 0x28
lea ecx, [ebp - 0x20]
call esi
push 0x10
mov dword [ebp - 0x14], fcn.0041ec90
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x24], fcn.00422980
call fcn.004239fb
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x10]
push 0x464854
push 0
mov dword [eax], 1
push 0
push eax
mov dword [eax + 4], 0x404720
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x14]
push eax
push edi
lea eax, [ebp - 0x24]
push eax
lea eax, [edi + 0x6c]
push eax
lea eax, [ebp - 0x20]
push eax
call ebx
add esp, 0x28
lea ecx, [ebp - 0x20]
call esi
push 0x10
mov dword [ebp - 0x34], fcn.0041ec00
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x28], fcn.00422490
call fcn.004239fb
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x30]
push 0x464660
push 0
mov dword [eax], 1
push 0
push eax
mov dword [eax + 4], 0x40b360
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x34]
push eax
push edi
lea eax, [ebp - 0x28]
push eax
lea eax, [edi + 0x80]
push eax
lea eax, [ebp - 0x2c]
push eax
call ebx
add esp, 0x28
lea ecx, [ebp - 0x2c]
call esi
mov ecx, dword [edi + 0x20]
push edi
call fcn.00410960
mov ecx, dword [edi + 0x20]
call fcn.004164c0
mov ecx, dword [edi + 0x28]
push 0
mov eax, dword [ecx]
call dword [eax + 0x2c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x465208
call fcn.00423d06
add esp, 4
cmp dword [0x465208], 0xffffffff
jne 0x41ea2e
mov dword [ebp - 4], 0xd
mov dword [0x4651f8], 0xa
call fcn.00404a20
push 0x465208
mov dword [0x4651fc], eax
mov dword [0x465200], 2
mov dword [0x465204], 0
mov dword [ebp - 4], 0xffffffff
call fcn.00423cb5
add esp, 4
jmp 0x41ea2e