Function at 0x404540
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebx
push ebp
push esi
mov esi, dword [esp + 0x18]
push edi
push 0
mov edi, ecx
push esi
call fcn.00404960
mov ebp, eax
push ebp
call fcn.00403d50
mov ecx, dword [0x44a0f0]
push ebp
mov dword [eax], ecx
call fcn.00403d70
mov ebx, dword [esp + 0x28]
mov edx, dword [0x44a0f0]
add esp, 8
mov dword [eax], edx
push ebx
push ebp
call fcn.004020d0
add esp, 4
mov ecx, edi
push eax
call fcn.004050a0
mov ecx, dword [edi + 0xc]
mov eax, dword [edi + 4]
inc ecx
cmp esi, eax
mov dword [edi + 0xc], ecx
je 0x404425
mov eax, dword [esp + 0x18]
mov ecx, dword [0x44a0f0]
cmp eax, ecx
jne 0x404425
push esi
call fcn.00403d30
add esp, 4
lea ecx, [esp + 0x1c]
push eax
push ebx
call fcn.00403d10
push eax
lea ecx, [edi + 1]
call fcn.004020b0
test al, al
jne 0x404425
push esi
call fcn.00403d70
add esp, 4
mov ecx, edi
mov dword [eax], ebp
call fcn.00403ce0
cmp esi, dword [eax]
jne 0x40445b
mov ecx, edi
call fcn.00403ce0
jmp 0x404459
push esi
call fcn.00403d50
mov dword [eax], ebp
mov eax, dword [edi + 4]
add esp, 4
cmp esi, eax
mov ecx, edi
jne 0x404449
call fcn.004029c0
mov ecx, edi
mov dword [eax], ebp
call fcn.00403ce0
jmp 0x404459
call fcn.00403cd0
cmp esi, dword [eax]
jne 0x40445b
mov ecx, edi
call fcn.00403cd0
mov dword [eax], ebp
mov ecx, edi
mov esi, ebp
call fcn.004029c0
cmp ebp, dword [eax]
je 0x4046a2
push esi
call fcn.00403d60
mov ecx, dword [eax]
push ecx
call fcn.00404370
mov ecx, dword [eax]
add esp, 8
test ecx, ecx
jne 0x4046a2
push esi
call fcn.00403d60
mov edx, dword [eax]
push edx
call fcn.00403d60
mov eax, dword [eax]
push eax
call fcn.00403d50
push esi
mov ebx, eax
call fcn.00403d60
mov ecx, dword [eax]
mov eax, dword [ebx]
add esp, 0x10
cmp ecx, eax
push esi
jne 0x4045a8
call fcn.00403d60
mov edx, dword [eax]
push edx
call fcn.00403d60
mov eax, dword [eax]
push eax
call fcn.00403d70
mov ebx, dword [eax]
push ebx
call fcn.00404370
mov ecx, dword [eax]
add esp, 0x10
test ecx, ecx
push esi
jne 0x40452f
call fcn.00403d60
mov ecx, dword [eax]
push ecx
call fcn.00404370
push ebx
mov dword [eax], 1
call fcn.00404370
push esi
mov dword [eax], 1
call fcn.00403d60
mov edx, dword [eax]
push edx
call fcn.00403d60
mov eax, dword [eax]
push eax
call fcn.00404370
push esi
mov dword [eax], 0
call fcn.00403d60
mov ecx, dword [eax]
push ecx
call fcn.00403d60
mov esi, dword [eax]
add esp, 0x20
jmp 0x404693
call fcn.00403d60
mov edx, dword [eax]
push edx
call fcn.00403d70
mov ecx, dword [eax]
add esp, 8
cmp esi, ecx
jne 0x404558
push esi
call fcn.00403d60
mov esi, dword [eax]
add esp, 4
mov ecx, edi
push esi
call fcn.00404740
push esi
call fcn.00403d60
mov eax, dword [eax]
push eax
call fcn.00404370
push esi
mov dword [eax], 1
call fcn.00403d60
mov ecx, dword [eax]
push ecx
call fcn.00403d60
mov edx, dword [eax]
push edx
call fcn.00404370
push esi
mov dword [eax], 0
call fcn.00403d60
mov eax, dword [eax]
push eax
call fcn.00403d60
mov ecx, dword [eax]
add esp, 0x1c
push ecx
mov ecx, edi
call fcn.00404890
jmp 0x404693
call fcn.00403d60
mov edx, dword [eax]
push edx
call fcn.00403d60
mov eax, dword [eax]
push eax
call fcn.00403d50
mov ebx, dword [eax]
push ebx
call fcn.00404370
mov ecx, dword [eax]
add esp, 0x10
test ecx, ecx
push esi
jne 0x40461f
call fcn.00403d60
mov ecx, dword [eax]
push ecx
call fcn.00404370
push ebx
mov dword [eax], 1
call fcn.00404370
push esi
mov dword [eax], 1
call fcn.00403d60
mov edx, dword [eax]
push edx
call fcn.00403d60
mov eax, dword [eax]
push eax
call fcn.00404370
push esi
mov dword [eax], 0
call fcn.00403d60
mov ecx, dword [eax]
push ecx
call fcn.00403d60
mov esi, dword [eax]
add esp, 0x20
jmp 0x404693
call fcn.00403d60
mov edx, dword [eax]
push edx
call fcn.00403d50
mov ecx, dword [eax]
add esp, 8
cmp esi, ecx
jne 0x404648
push esi
call fcn.00403d60
mov esi, dword [eax]
add esp, 4
mov ecx, edi
push esi
call fcn.00404890
push esi
call fcn.00403d60
mov eax, dword [eax]
push eax
call fcn.00404370
push esi
mov dword [eax], 1
call fcn.00403d60
mov ecx, dword [eax]
push ecx
call fcn.00403d60
mov edx, dword [eax]
push edx
call fcn.00404370
push esi
mov dword [eax], 0
call fcn.00403d60
mov eax, dword [eax]
push eax
call fcn.00403d60
mov ecx, dword [eax]
add esp, 0x1c
push ecx
mov ecx, edi
call fcn.00404740
mov ecx, edi
call fcn.004029c0
cmp esi, dword [eax]
jne 0x40446c
mov ecx, edi
call fcn.004029c0
mov edx, dword [eax]
push edx
call fcn.00404370
mov esi, dword [esp + 0x18]
add esp, 4
mov ecx, esi
mov dword [eax], 1
push ebp
call fcn.004029d0
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
ret 0x10