Function at 0x407810
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x52b42d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x68
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0x74]
mov ecx, 0x1a
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x160], 0xffffffff
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0xc8], 1
mov edx, dword [ebp - 0x10]
mov dword [edx + 0xb8], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xbc], 0
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 0xcc], 0
mov edx, dword [ebp - 0x10]
cmp dword [edx + 0xbb4], 0
je 0x4078c4
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0xbb4]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xbb4]
mov ecx, dword [ebp - 0x10]
mov edx, dword [eax + 0xd0]
mov dword [ecx + 0xbb4], edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.004a0b99
add esp, 4
jmp 0x407880
mov edx, dword [ebp - 0x10]
mov dword [edx + 0xbb4], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xbb0], 0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0xba8], 0
mov dword [ecx + 0xbac], 0x40977000
mov edx, dword [ebp - 0x10]
mov dword [edx + 0xaa8], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xba0], 0
mov dword [eax + 0xba4], 0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0xa48], 0
mov dword [ecx + 0xa4c], 0
mov edx, dword [ebp - 0x10]
mov byte [edx + 0xab0], 0
mov eax, dword [ebp - 0x10]
mov byte [eax + 0xac1], 0
mov ecx, dword [ebp - 0x10]
cmp dword [ecx + 0xabc], 0
je 0x40799b
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xabc]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0xabc]
mov eax, dword [ebp - 0x10]
mov ecx, dword [edx + 0x50]
mov dword [eax + 0xabc], ecx
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x407992
push 1
mov ecx, dword [ebp - 0x20]
call fcn.00402f60
mov dword [ebp - 0x30], eax
jmp 0x407999
mov dword [ebp - 0x30], 0
jmp 0x407944
movsx ecx, word [0x55e3f4]
add ecx, 0x21
push ecx
push 0x55e3b0
push 0x58
call fcn.004a07c3
add esp, 0xc
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x2c], 0
je 0x4079d2
mov ecx, dword [ebp - 0x2c]
call fcn.00407bc0
mov dword [ebp - 0x34], eax
jmp 0x4079d9
mov dword [ebp - 0x34], 0
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x28], edx
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x28]
mov dword [eax + 0xabc], ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xabc]
mov dword [eax], 0
mov dword [eax + 4], 0
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0xabc]
mov dword [edx + 8], 0
mov dword [edx + 0xc], 0x404e0000
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0xabc]
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xabc]
mov dword [eax + 0x18], 0
mov dword [eax + 0x1c], 0x40938800
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0xabc]
mov dword [edx + 0x20], 0
mov dword [edx + 0x24], 0x40340000
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0xabc]
mov dword [ecx + 0x28], 0
mov dword [ecx + 0x2c], 0x405e0000
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xabc]
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 0xc0140000
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0xabc]
mov dword [edx + 0x38], 0
mov dword [edx + 0x3c], 0x40140000
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0xabc]
mov dword [ecx + 0x40], 0
mov dword [ecx + 0x44], 0xbff00000
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xabc]
mov dword [eax + 0x48], 0
mov dword [eax + 0x4c], 0x40340000
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0xabc]
mov dword [edx + 0x50], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0xab4], 6
mov ecx, dword [ebp - 0x10]
call fcn.00410cd0
mov ecx, dword [ebp - 0x10]
add ecx, 0xa0c
call fcn.00415b80
mov ecx, dword [ebp - 0x10]
add ecx, 0xa20
call fcn.00415b80
mov ecx, dword [ebp - 0x10]
add ecx, 0x170
call fcn.0041aa70
mov ecx, dword [ebp - 0x10]
add ecx, 0x9f0
call fcn.004154f0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0xc0], 0
mov edx, dword [ebp - 0x10]
mov dword [edx + 0xa08], 8
mov eax, dword [ebp - 0x10]
mov byte [eax + 0xac0], 0
mov ecx, dword [ebp - 0x10]
add ecx, 0xa50
call fcn.00415b80
mov ecx, dword [ebp - 0x10]
add ecx, 0xa64
call fcn.00415b80
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0xbc0], 0
mov dword [ecx + 0xbc4], 0
mov edx, dword [ebp - 0x10]
mov dword [edx + 0xbc8], 0
mov dword [edx + 0xbcc], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
add esp, 0x74
cmp ebp, esp
call fcn.004516c0
mov esp, ebp
pop ebp
ret