Function at 0x403b70
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffb0
mov dword [ebp - 4], eax
mov eax, 0x4bde3c
call fcn.004afb5c
mov word [ebp - 0x38], 8
mov eax, dword [ebp - 4]
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 4
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 8
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 0x10
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 0x14
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 0x18
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 0x20
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 0x28
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 0x50
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 0x54
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 0x5c
call fcn.00401790
inc dword [ebp - 0x2c]
mov dl, 1
mov eax, dword [0x4685dc]
call fcn.00403ed0
mov edx, dword [ebp - 4]
mov dword [edx + 0x1c], eax
call fcn.0047d90c
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], 1
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [ebp - 0x4c]
jg 0x403cb7
mov word [ebp - 0x38], 0x14
lea eax, [ebp - 8]
call fcn.00401790
mov edx, eax
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x50]
call fcn.0047d96c
lea edx, [ebp - 8]
push dword [edx]
lea eax, [ebp - 0xc]
call fcn.00401790
mov edx, eax
inc dword [ebp - 0x2c]
pop eax
call fcn.00476330
lea edx, [ebp - 0xc]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
dec dword [ebp - 0x2c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004b9d00
dec dword [ebp - 0x2c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004b9d00
inc dword [ebp - 0x50]
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [ebp - 0x4c]
jle 0x403c49
mov word [ebp - 0x38], 0x20
lea eax, [ebp - 0x10]
call fcn.00401790
mov edx, eax
inc dword [ebp - 0x2c]
mov ecx, dword [0x4db5ac]
mov eax, dword [ecx]
call fcn.00442158
lea edx, [ebp - 0x10]
push edx
mov edx, 0x4bd500
lea eax, [ebp - 0x14]
call fcn.004b9ba0
inc dword [ebp - 0x2c]
lea edx, [ebp - 0x14]
pop eax
call fcn.004b9de4
push eax
dec dword [ebp - 0x2c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004b9d00
dec dword [ebp - 0x2c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004b9d00
pop ecx
test cl, cl
je 0x403d74
mov word [ebp - 0x38], 0x2c
lea eax, [ebp - 0x1c]
call fcn.00401790
push eax
inc dword [ebp - 0x2c]
mov edx, 0x4bd508
lea eax, [ebp - 0x18]
call fcn.004b9ba0
inc dword [ebp - 0x2c]
mov eax, dword [eax]
pop edx
call fcn.00476330
lea edx, [ebp - 0x1c]
mov edx, dword [edx]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
dec dword [ebp - 0x2c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.004b9d00
dec dword [ebp - 0x2c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004b9d00
push 0x3c
call fcn.004adc64
pop ecx
mov dword [ebp - 0x20], eax
test eax, eax
je 0x403df7
mov word [ebp - 0x38], 0x44
mov eax, dword [ebp - 0x20]
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
add eax, 4
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
add eax, 0x14
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
add eax, 0x18
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
add eax, 0x1c
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
add eax, 0x30
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
add eax, 0x38
call fcn.00401790
inc dword [ebp - 0x2c]
add dword [ebp - 0x2c], 0xfffffff9
mov word [ebp - 0x38], 0x38
mov edx, dword [ebp - 0x20]
jmp 0x403dfa
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov dword [eax + 0x38], edx
push 0x3c
call fcn.004adc64
pop ecx
mov dword [ebp - 0x24], eax
test eax, eax
je 0x403e83
mov word [ebp - 0x38], 0x5c
mov eax, dword [ebp - 0x24]
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
add eax, 4
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
add eax, 0x14
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
add eax, 0x18
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
add eax, 0x1c
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
add eax, 0x30
call fcn.00401790
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
add eax, 0x38
call fcn.00401790
inc dword [ebp - 0x2c]
add dword [ebp - 0x2c], 0xfffffff9
mov word [ebp - 0x38], 0x50
mov edx, dword [ebp - 0x24]
jmp 0x403e86
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
mov dword [eax + 0x3c], edx
mov ecx, dword [ebp - 4]
mov byte [ecx + 0x24], 0
mov eax, dword [ebp - 4]
mov byte [eax + 0x25], 0
mov edx, dword [ebp - 4]
mov byte [edx + 0xd], 1
mov ecx, dword [ebp - 4]
mov byte [ecx + 0xc], 1
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x30], edx
mov ecx, dword [ebp - 4]
xor eax, eax
mov dword [ecx + 0x34], eax
mov edx, dword [ebp - 4]
xor ecx, ecx
mov dword [edx + 0x64], ecx
mov eax, dword [ebp - 0x48]
mov dword fs:[0], eax
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret