Function at 0x4113d0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46b7e4
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x490274]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], 0
mov eax, dword [ebp + 8]
lea esi, [edi + 8]
mov dword [edi], vtable.MessageLoop.0
mov dword [edi + 4], eax
mov dword [ebp + 8], esi
push 8
mov dword [ebp - 4], 0
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
call fcn.00435bec
mov dword [esi], eax
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [esi]
mov dword [eax], esi
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
lea esi, [edi + 0x38]
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov dword [ebp + 8], esi
push 8
mov byte [ebp - 4], 2
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
call fcn.00435bec
mov dword [esi], eax
add esp, 8
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [esi]
mov dword [eax], esi
mov dword [edi + 0x4c], 0
lea esi, [edi + 0x50]
mov byte [ebp - 4], 4
mov ecx, esi
mov dword [ebp + 8], esi
call fcn.00421ac0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov word [edi + 0x68], 1
mov dword [edi + 0x7c], 0
mov dword [edi + 0x80], 0xf
mov byte [edi + 0x6c], 0
lea esi, [edi + 0x88]
mov dword [edi + 0x84], 0
mov dword [ebp + 8], esi
push 8
mov byte [ebp - 4], 6
mov dword [esi], 0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
call fcn.00435bec
mov dword [esi], eax
add esp, 4
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [esi]
mov dword [eax], esi
mov byte [ebp - 4], 7
lea ecx, [edi + 0x9c]
mov dword [ebp + 8], ecx
call fcn.0041bf90
mov dword [edi + 0xb4], 0
lea esi, [edi + 0xc8]
mov dword [edi + 0xb8], 0
mov ecx, esi
mov dword [edi + 0xbc], 0
mov byte [ebp - 4], 8
mov byte [edi + 0xc0], 0
mov dword [edi + 0xc4], 0
mov dword [ebp + 8], esi
call fcn.00421ac0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [edi + 0xe0], 0
mov dword [edi + 0xe4], 0
mov eax, dword [0x4938b4]
mov dword [ebp - 4], 0xb
test eax, 0xfffffffe
jne 0x411651
push 0x4938b4
call fcn.0041c000
add esp, 4
test al, al
je 0x411651
push 0x4938b8
mov dword [0x4938b8], 0
call fcn.00429100
push 0x412d50
push 0x4938b4
push 0x4938b8
push 0x4938b4
call fcn.0041bfe0
add esp, 0x14
mov eax, dword [0x4938b4]
push edi
push eax
call fcn.00429230
push 0x24
call fcn.00435bec
add esp, 0xc
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0xe
test eax, eax
je 0x41167d
mov ecx, eax
call fcn.00425390
mov ebx, eax
jmp 0x41167f
xor ebx, ebx
mov byte [ebp - 4], 0xb
test ebx, ebx
je 0x41168f
lea ecx, [ebx + 4]
call fcn.00416e00
mov esi, dword [edi + 0xe0]
mov dword [edi + 0xe0], ebx
test esi, esi
je 0x4116bd
lea ebx, [esi + 4]
mov ecx, ebx
call fcn.00416e20
test al, al
je 0x4116bd
xor eax, eax
test ebx, ebx
cmove esi, eax
push esi
call fcn.00416ea0
add esp, 4
push 4
call fcn.00435bec
mov esi, eax
add esp, 4
mov dword [ebp - 0x18], esi
mov byte [ebp - 4], 0xf
test esi, esi
je 0x411703
mov ecx, dword [edi + 0xe0]
mov dword [ebp + 8], ecx
test ecx, ecx
je 0x4116e9
add ecx, 4
call fcn.00416e00
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x10
push eax
mov ecx, esi
mov dword [ebp - 0x10], 2
call fcn.00428f00
mov ebx, eax
jmp 0x411705
xor ebx, ebx
mov esi, dword [edi + 0xe4]
cmp ebx, esi
je 0x41172b
test esi, esi
je 0x411725
mov ecx, esi
call fcn.00428fc0
push 4
push esi
call fcn.00435c1c
add esp, 8
mov dword [edi + 0xe4], ebx
test byte [ebp - 0x10], 2
mov dword [ebp - 4], 0xb
je 0x411767
mov eax, dword [ebp + 8]
mov byte [ebp - 4], 0x12
test eax, eax
je 0x411763
lea esi, [eax + 4]
mov ecx, esi
call fcn.00416e20
test al, al
je 0x411763
lea eax, [esi - 4]
neg esi
sbb esi, esi
and esi, eax
push esi
call fcn.00416ea0
add esp, 4
mov byte [ebp - 4], 0xb
mov eax, dword [edi + 4]
cmp eax, 1
jne 0x41179a
mov eax, dword [0x4938c0]
test eax, eax
je 0x41177c
call eax
jmp 0x4117e1
push 0x40
call fcn.00435bec
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x13
test eax, eax
je 0x4117db
mov ecx, eax
call fcn.00422050
jmp 0x4117dd
cmp eax, 2
jne 0x4117bd
push 0x58
call fcn.00435bec
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x14
test eax, eax
je 0x4117db
mov ecx, eax
call fcn.00421f60
jmp 0x4117dd
push 0x18
call fcn.00435bec
add esp, 4
mov dword [ebp + 8], eax
mov byte [ebp - 4], 0x17
test eax, eax
je 0x4117db
mov ecx, eax
call fcn.00425750
jmp 0x4117dd
xor eax, eax
mov byte [ebp - 4], 0xb
push eax
lea ecx, [edi + 0x4c]
call fcn.00412090
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4