Function at 0x40f427
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
mov ecx, 0x60d530
jmp 0x40f410
push 0xffffffffffffffff
push 0x46e0fe
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0xc], esi
lea ecx, [esi + 0xf08c]
call fcn.00402b70
xor edi, edi
lea ecx, [esi + 0xf0a0]
mov dword [esp + 0x18], edi
call fcn.00402b70
mov dword [esi], edi
mov dword [esi + 4], edi
mov eax, 0x3f800000
mov dword [esi + 8], edi
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], eax
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], eax
mov dword [esi + 0x20], eax
mov dword [esi + 0x24], edi
mov dword [esi + 0x28], edi
mov dword [esi + 0x2c], eax
mov dword [esi + 0x30], eax
mov dword [esi + 0x34], eax
mov dword [esi + 0x38], edi
mov dword [esi + 0x3c], eax
mov dword [esi + 0x40], edi
mov dword [esi + 0x44], edi
mov dword [esi + 0x48], eax
mov dword [esi + 0x4c], eax
mov dword [esi + 0x50], edi
mov dword [esi + 0x54], 0x3f1f9fa0
mov dword [esi + 0x58], 0x3ec4c4c5
mov dword [esi + 0x5c], eax
mov dword [esi + 0x60], 0x3e74f4f5
mov dword [esi + 0x64], 0x3d888889
mov dword [esi + 0x68], 0x3ef6f6f7
mov ecx, 0x3f33b3b4
mov dword [esi + 0x6c], eax
mov dword [esi + 0x70], ecx
mov dword [esi + 0x74], ecx
mov dword [esi + 0x78], ecx
mov edx, 0x3f79f9fa
mov dword [esi + 0x7c], eax
mov dword [esi + 0x80], edx
mov dword [esi + 0x84], 0x3f4dcdce
mov dword [esi + 0x88], 0x3f0a8a8b
mov dword [esi + 0x8c], eax
mov dword [esi + 0x90], 0x3f0d8d8e
mov ebx, 0x3f74f4f5
mov dword [esi + 0x94], 0x3f4fcfd0
mov dword [esi + 0x98], ebx
mov dword [esi + 0x9c], eax
mov dword [esi + 0xa0], 0x3f09898a
mov ecx, 0x3f1d9d9e
mov dword [esi + 0xa4], 0x3f4acacb
mov dword [esi + 0xa8], ecx
mov dword [esi + 0xac], eax
mov dword [esi + 0xb0], eax
mov dword [esi + 0xb4], edx
mov dword [esi + 0xb8], ecx
mov dword [esi + 0xbc], eax
mov dword [esi + 0xc0], ebx
mov dword [esi + 0xc4], 0x3f20a0a1
mov dword [esi + 0xc8], 0x3f3dbdbe
mov dword [esi + 0xcc], eax
mov dword [esi + 0xd0], 0x3f5fdfe0
mov dword [esi + 0xd4], edi
mov dword [esi + 0xd8], 0x3e24a4a5
mov dword [esi + 0xdc], eax
mov dword [esi + 0xe0], 0x3ea4a4a5
mov dword [esi + 0xe4], 0x3f048485
mov dword [esi + 0xe8], 0x3d989899
mov dword [esi + 0xec], eax
mov dword [esi + 0xf0], 0x3f28a8a9
mov dword [esi + 0xf4], 0x3f24a4a5
mov dword [esi + 0xf8], edi
mov dword [esi + 0xfc], eax
mov ebx, 0x3ed2d2d3
mov dword [esi + 0x100], edi
mov dword [esi + 0x104], ebx
mov dword [esi + 0x118], ebx
mov ebx, 0x3e189899
mov dword [esi + 0x108], 0x3e7cfcfd
mov dword [esi + 0x130], ebx
mov dword [esi + 0x148], ebx
mov ebx, 0x3f1c9c9d
mov dword [esi + 0x10c], eax
mov dword [esi + 0x110], edi
mov dword [esi + 0x114], 0x3edadadb
mov dword [esi + 0x11c], eax
mov dword [esi + 0x120], edi
mov dword [esi + 0x124], 0x3e888889
mov dword [esi + 0x128], 0x3eeeeeef
mov dword [esi + 0x12c], eax
mov dword [esi + 0x134], 0x3ce0e0e1
mov dword [esi + 0x138], 0x3ea2a2a3
mov dword [esi + 0x13c], eax
mov dword [esi + 0x140], 0x3edadadb
mov dword [esi + 0x144], edi
mov dword [esi + 0x14c], eax
mov dword [esi + 0x150], 0x3f4bcbcc
mov dword [esi + 0x154], 0x3f39b9ba
mov dword [esi + 0x158], ebx
mov dword [esi + 0x15c], eax
mov dword [esi + 0x160], 0x3e4ccccd
mov dword [esi + 0x164], 0x3e28a8a9
mov dword [esi + 0x168], 0x3e24a4a5
mov dword [esi + 0x16c], eax
mov dword [esi + 0x170], 0x3eb6b6b7
mov dword [esi + 0x174], 0x3e5cdcdd
mov dword [esi + 0x178], 0x3da0a0a1
mov dword [esi + 0x17c], eax
mov dword [esi + 0x180], 0x3f51d1d2
mov dword [esi + 0x184], ebx
mov dword [esi + 0x188], 0x3e2cacad
mov dword [esi + 0x18c], eax
mov dword [esi + 0x190], 0x3f0c8c8d
mov dword [esi + 0x194], 0x3e60e0e1
mov dword [esi + 0x198], 0x3f0f8f90
mov dword [esi + 0x19c], eax
mov dword [esi + 0x1a0], edx
mov dword [esi + 0x1a4], 0x3f1e9e9f
mov dword [esi + 0x1a8], 0x3ed8d8d9
mov edx, 0x3f19999a
mov dword [esi + 0x1ac], eax
mov dword [esi + 0x1b0], edx
mov dword [esi + 0x1b4], edx
mov dword [esi + 0x1b8], 0x3f4ccccd
mov dword [esi + 0x1bc], eax
mov dword [esi + 0x1c0], 0x3f26a6a7
mov dword [esi + 0x1c4], 0x3f55d5d6
mov dword [esi + 0x1c8], ecx
mov ecx, dword [esp + 0x10]
mov dword [esi + 0x1cc], eax
mov dword [esi + 0x1d0], edi
mov dword [esi + 0xc90c], edi
mov eax, 5
mov dword [esi + 0xf0b4], 0xf
mov dword [esi + 0xf0b8], eax
mov dword [esi + 0xf0bc], eax
mov dword [esi + 0xf0c0], 8
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret