Function at 0x407720
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4d12b4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0x14], esi
call fcn.004a636c
lea edi, [esi + 0x3c]
xor ebx, ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x10], edi
mov dword [edi], method.CCommandLineInfo.virtual_0
mov dword [edi + 4], ebx
mov dword [edi + 8], 0x11
mov dword [edi + 0xc], ebx
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov dword [edi + 0x18], 0xa
push 0x404
mov byte [esp + 0x24], 1
mov dword [edi + 0x1c], ebx
mov dword [edi + 0x20], 0x100
call fcn.004a622a
mov edx, eax
mov ecx, 0x101
mov dword [edi + 4], edx
xor eax, eax
mov edi, edx
push 0x400
rep stosd dword es:[edi], eax
mov edi, dword [esp + 0x18]
mov dword [edi + 8], 0x101
call fcn.004a622a
add esp, 8
mov dword [edi + 0x24], eax
lea ecx, [esi + 0x114]
mov byte [esp + 0x20], 2
call fcn.004a4b97
mov dword [esi], method.CWnd.virtual_0
mov eax, 0x14
mov dword [esi + 0x74], ebx
mov dword [esi + 0x78], ebx
mov dword [esi + 0x94], eax
mov dword [esi + 0x98], eax
mov dword [esi + 0x8c], eax
mov dword [esi + 0x90], eax
mov dword [esi + 0x7c], ebx
or eax, 0xffffffff
mov dword [esi + 0x80], ebx
push 0x28
mov byte [esp + 0x24], 3
mov dword [esi + 0x6c], ebx
mov dword [esi + 0x70], ebx
mov dword [esi + 0xa4], ebx
mov dword [esi + 0xa8], ebx
mov dword [esi + 0x9c], eax
mov dword [esi + 0xa0], eax
mov dword [esi + 0xac], ebx
mov dword [esi + 0xd0], ebx
mov dword [esi + 0xcc], ebx
mov dword [esi + 0xc8], ebx
mov dword [esi + 0xc4], ebx
mov dword [esi + 0xd4], ebx
mov dword [esi + 0xd8], ebx
mov dword [esi + 0xb0], ebx
mov dword [esi + 0xb4], ebx
mov dword [esi + 0xb8], ebx
mov dword [esi + 0x84], ebx
mov dword [esi + 0x88], ebx
mov dword [esi + 0xdc], ebx
mov dword [esi + 0xe0], ebx
mov dword [esi + 0xe4], ebx
mov dword [esi + 0xe8], ebx
mov dword [esi + 0xbc], ebx
mov dword [esi + 0xc0], ebx
call fcn.004a622a
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, ebx
mov byte [esp + 0x20], 4
je 0x4078b3
push 1
mov ecx, eax
call fcn.00411d10
jmp 0x4078b5
xor eax, eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
mov ecx, eax
mov byte [esp + 0x40], 3
mov dword [esi + 0x10c], eax
call fcn.00411da0
mov edi, 1
push 0x48
mov dword [esi + 0x100], edi
mov dword [esi + 0x110], ebx
call fcn.004a622a
mov dword [esi + 0xec], eax
mov dword [eax + 0x18], ebx
mov eax, dword [esi + 0xec]
add esp, 4
mov dword [eax + 0x14], ebx
mov ecx, dword [esi + 0xec]
mov dword [ecx + 0x10], ebx
mov edx, dword [esi + 0xec]
mov dword [edx + 0x1c], ebx
mov eax, dword [esi + 0xec]
mov dword [eax + 0x20], ebx
mov dword [eax + 0x24], 0x3ff00000
mov ecx, dword [esi + 0xec]
mov dword [ecx + 0xc], 2
mov edx, dword [esi + 0xec]
mov dword [edx], ebx
mov eax, dword [esi + 0xec]
mov dword [eax + 4], ebx
mov ecx, dword [esi + 0xec]
mov dword [ecx + 8], edi
mov edx, dword [esi + 0xec]
pop edi
mov dword [edx + 0x34], ebx
mov eax, dword [esi + 0xec]
mov dword [eax + 0x30], ebx
mov ecx, dword [esi + 0xec]
mov eax, esi
mov dword [ecx + 0x28], ebx
mov edx, dword [esi + 0xec]
mov ecx, dword [esp + 0x14]
pop esi
mov dword [edx + 0x2c], ebx
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret