Function at 0x401087
Capabilities:
Access peb ldr_data

Disassembly:
jmp 0x40b540
push 0xffffffffffffffff
push 0x4513e8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
mov eax, dword [0x46496c]
push ebp
push edi
mov edi, ecx
mov dword [esp + 0x48], eax
xor ebp, ebp
mov dword [esp + 0x44], eax
mov dword [esp + 0x5c], ebp
mov dword [esp + 0x40], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], eax
push 0x18a7
lea ecx, [esp + 0x4c]
mov byte [esp + 0x60], 0x12
call fcn.0043ab56
push 0x18a9
lea ecx, [esp + 0x48]
call fcn.0043ab56
push 0x18ab
lea ecx, [esp + 0x44]
call fcn.0043ab56
push 0x18ad
lea ecx, [esp + 0x40]
call fcn.0043ab56
push 0x18af
lea ecx, [esp + 0x3c]
call fcn.0043ab56
push 0x18b1
lea ecx, [esp + 0x38]
call fcn.0043ab56
push 0x18b3
lea ecx, [esp + 0x34]
call fcn.0043ab56
push 0x18b5
lea ecx, [esp + 0x30]
call fcn.0043ab56
push 0x18b7
lea ecx, [esp + 0x2c]
call fcn.0043ab56
push 0x18b9
lea ecx, [esp + 0x28]
call fcn.0043ab56
push 0x18bb
lea ecx, [esp + 0x50]
call fcn.0043ab56
push 0x18bd
lea ecx, [esp + 0x24]
call fcn.0043ab56
push 0x18bf
lea ecx, [esp + 0x20]
call fcn.0043ab56
push 0x18c1
lea ecx, [esp + 0x1c]
call fcn.0043ab56
push 0x18c3
lea ecx, [esp + 0x18]
call fcn.0043ab56
push 0x18c5
lea ecx, [esp + 0x14]
call fcn.0043ab56
push 0x18c7
lea ecx, [esp + 0x10]
call fcn.0043ab56
push 0x18c9
lea ecx, [esp + 0xc]
call fcn.0043ab56
cmp dword [edi + 0x1bc], ebp
jl 0x40b9c0
push esi
lea esi, [edi + 0x1d4]
mov eax, dword [esp + 0x48]
mov ecx, dword [esi - 8]
push eax
push ecx
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b6f3
mov dword [esi], 1
mov dword [esi - 0x14], 1
push 0x17d5
jmp 0x40b9a5
mov edx, dword [esp + 0x4c]
mov eax, dword [esi - 8]
push edx
push eax
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b71f
mov dword [esi], 1
mov dword [esi - 0x14], 2
push 0x17d4
jmp 0x40b9a5
mov ecx, dword [esp + 0x40]
mov edx, dword [esi - 8]
push ecx
push edx
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b74b
mov dword [esi], 1
mov dword [esi - 0x14], 3
push 0x17d6
jmp 0x40b9a5
mov eax, dword [esp + 0x44]
mov ecx, dword [esi - 8]
push eax
push ecx
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b777
mov dword [esi], 1
mov dword [esi - 0x14], 4
push 0x17d7
jmp 0x40b9a5
mov edx, dword [esp + 0x38]
mov eax, dword [esi - 8]
push edx
push eax
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b7a3
mov dword [esi], 1
mov dword [esi - 0x14], 5
push 0x17d9
jmp 0x40b9a5
mov ecx, dword [esp + 0x3c]
mov edx, dword [esi - 8]
push ecx
push edx
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b7cf
mov dword [esi], 1
mov dword [esi - 0x14], 0xa
push 0x17d8
jmp 0x40b9a5
mov eax, dword [esp + 0x34]
mov ecx, dword [esi - 8]
push eax
push ecx
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b7fb
mov dword [esi], 1
mov dword [esi - 0x14], 6
push 0x17da
jmp 0x40b9a5
mov edx, dword [esp + 0x30]
mov eax, dword [esi - 8]
push edx
push eax
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b827
mov dword [esi], 1
mov dword [esi - 0x14], 9
push 0x17db
jmp 0x40b9a5
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi - 8]
push ecx
push edx
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b853
mov dword [esi], 1
mov dword [esi - 0x14], 7
push 0x17dc
jmp 0x40b9a5
mov eax, dword [esp + 0x28]
mov ecx, dword [esi - 8]
push eax
push ecx
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b87f
mov dword [esi], 1
mov dword [esi - 0x14], 8
push 0x17dd
jmp 0x40b9a5
mov edx, dword [esp + 0x24]
mov eax, dword [esi - 8]
push edx
push eax
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b8ab
mov dword [esi], 1
mov dword [esi - 0x14], 0xd
push 0x17e0
jmp 0x40b9a5
mov ecx, dword [esp + 0x20]
mov edx, dword [esi - 8]
push ecx
push edx
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b8d7
mov dword [esi], 1
mov dword [esi - 0x14], 0xe
push 0x17df
jmp 0x40b9a5
mov eax, dword [esp + 0x1c]
mov ecx, dword [esi - 8]
push eax
push ecx
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b903
mov dword [esi], 1
mov dword [esi - 0x14], 0xf
push 0x17e1
jmp 0x40b9a5
mov edx, dword [esp + 0x18]
mov eax, dword [esi - 8]
push edx
push eax
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b92c
mov dword [esi], 1
mov dword [esi - 0x14], 0x10
push 0x17e2
jmp 0x40b9a5
mov ecx, dword [esp + 0x14]
mov edx, dword [esi - 8]
push ecx
push edx
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b955
mov dword [esi], 1
mov dword [esi - 0x14], 0x11
push 0x17e3
jmp 0x40b9a5
mov eax, dword [esp + 0x10]
mov ecx, dword [esi - 8]
push eax
push ecx
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b97e
mov dword [esi], 1
mov dword [esi - 0x14], 0x12
push 0x17e4
jmp 0x40b9a5
mov edx, dword [esp + 0xc]
mov eax, dword [esi - 8]
push edx
push eax
call fcn.00416740
add esp, 8
test eax, eax
jne 0x40b9ad
mov dword [esi], 1
mov dword [esi - 0x14], 0x13
push 0x17e5
lea ecx, [esi - 4]
call fcn.0043ab56
mov eax, dword [edi + 0x1bc]
inc ebp
add esi, 0x24
cmp ebp, eax
jle 0x40b6c7
pop esi
lea ecx, [esp + 8]
mov byte [esp + 0x5c], 0x11
call fcn.0043a451
lea ecx, [esp + 0xc]
mov byte [esp + 0x5c], 0x10
call fcn.0043a451
lea ecx, [esp + 0x10]
mov byte [esp + 0x5c], 0xf
call fcn.0043a451
lea ecx, [esp + 0x14]
mov byte [esp + 0x5c], 0xe
call fcn.0043a451
lea ecx, [esp + 0x18]
mov byte [esp + 0x5c], 0xd
call fcn.0043a451
lea ecx, [esp + 0x1c]
mov byte [esp + 0x5c], 0xc
call fcn.0043a451
lea ecx, [esp + 0x20]
mov byte [esp + 0x5c], 0xb
call fcn.0043a451
lea ecx, [esp + 0x4c]
mov byte [esp + 0x5c], 0xa
call fcn.0043a451
lea ecx, [esp + 0x24]
mov byte [esp + 0x5c], 9
call fcn.0043a451
lea ecx, [esp + 0x28]
mov byte [esp + 0x5c], 8
call fcn.0043a451
lea ecx, [esp + 0x50]
mov byte [esp + 0x5c], 7
call fcn.0043a451
lea ecx, [esp + 0x2c]
mov byte [esp + 0x5c], 6
call fcn.0043a451
lea ecx, [esp + 0x30]
mov byte [esp + 0x5c], 5
call fcn.0043a451
lea ecx, [esp + 0x34]
mov byte [esp + 0x5c], 4
call fcn.0043a451
lea ecx, [esp + 0x38]
mov byte [esp + 0x5c], 3
call fcn.0043a451
lea ecx, [esp + 0x3c]
mov byte [esp + 0x5c], 2
call fcn.0043a451
lea ecx, [esp + 0x40]
mov byte [esp + 0x5c], 1
call fcn.0043a451
lea ecx, [esp + 0x44]
mov byte [esp + 0x5c], 0
call fcn.0043a451
lea ecx, [esp + 0x48]
mov dword [esp + 0x5c], 0xffffffff
call fcn.0043a451
mov ecx, dword [esp + 0x54]
pop edi
pop ebp
mov dword fs:[0], ecx
add esp, 0x58
ret