Function at 0x413300
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43513c
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x44e018]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x10], ebx
mov al, byte [ebp + 8]
lea edx, [ebx + 0x20]
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], fcn.0041ff0e
mov dword [ebx + 0x18], fcn.0041fc6d
mov dword [ebx + 0x1c], fcn.0041fd4b
mov dword [edx + 4], fcn.0041ff0e
mov dword [edx + 8], fcn.0041fc6d
mov dword [edx + 0xc], fcn.0041fd4b
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0x1fff8
mov dword [edx], vtable.common::t_heap.0
mov dword [ebx + 0x3c], fcn.0041ff0e
mov dword [ebx + 0x40], fcn.0041fc6d
mov dword [ebx + 0x44], fcn.0041fd4b
mov dword [ebx + 0x48], 0
mov dword [ebx + 0x4c], 0x8000
mov dword [ebx + 0x38], vtable.common::t_heap.0
mov dword [ebx + 0x50], 0
mov byte [ebx + 0x54], al
mov dword [ebp - 4], 0
lea ecx, [ebx + 0x58]
mov dword [ebx], vtable.t_hookConfigFile.0
mov dword [ebp + 8], ecx
mov byte [ecx + 4], 0
mov dword [ecx + 8], 0x446c74
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x1c], fcn.0041ff0e
mov dword [ecx + 0x20], fcn.0041fc6d
mov dword [ecx + 0x24], fcn.0041fd4b
mov dword [ecx + 0x28], edx
mov dword [ecx], vtable.t_hookConfigFile::t_setting.0
mov byte [ecx + 0x30], 0
mov dword [ecx + 0x34], str.cfwcnt
mov dword [ecx + 0x38], 0
mov dword [ecx + 0x3c], 0
mov dword [ecx + 0x2c], vtable.n_config::t_int.0
mov byte [ecx + 0x44], 0
mov dword [ecx + 0x48], str.gmfnwcnt
mov dword [ecx + 0x4c], 0
mov dword [ecx + 0x50], 0
mov dword [ecx + 0x40], vtable.n_config::t_int.0
mov byte [ecx + 0x58], 0
mov dword [ecx + 0x5c], str.version
mov dword [ecx + 0x60], 0x447340
mov dword [ecx + 0x64], 0x447340
mov dword [ecx + 0x54], vtable.n_config::t_str.0
mov dword [ecx + 0x68], 0
lea edi, [ebx + 0xc4]
mov dword [ebp + 8], edi
mov byte [edi + 4], 0
mov dword [edi + 8], 0x448c44
mov dword [edi + 0xc], edx
mov dword [edi + 0x10], 0
lea eax, [ebx + 0x84]
mov dword [edi + 0x14], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], fcn.0041ff0e
mov dword [edi + 0x24], fcn.0041fc6d
mov dword [edi + 0x28], fcn.0041fd4b
mov dword [edi], vtable.n_config::t_arraySection_class_t_hookConfigFile::t_item_.0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], eax
lea esi, [ebx + 0xf8]
mov dword [ebp + 8], esi
mov byte [esi + 4], 0
mov dword [esi + 8], str.gmfn
mov dword [esi + 0xc], edx
mov dword [esi + 0x10], 0
lea eax, [ebx + 0x98]
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], fcn.0041ff0e
mov dword [esi + 0x24], fcn.0041fc6d
mov dword [esi + 0x28], fcn.0041fd4b
mov dword [esi], vtable.n_config::t_arraySection_class_t_hookConfigFile::t_item_.0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], eax
mov byte [ebp - 4], 6
lea eax, [ebp + 8]
mov dword [ebp + 8], ecx
lea ecx, [ebx + 4]
push eax
call fcn.00409c90
lea eax, [ebp + 8]
mov dword [ebp + 8], edi
push eax
lea ecx, [ebx + 4]
call fcn.00409c90
lea eax, [ebp + 8]
mov dword [ebp + 8], esi
push eax
lea ecx, [ebx + 4]
call fcn.00409c90
xor esi, esi
cmp dword [ebx + 8], esi
jle 0x413583
mov eax, dword [ebx + 4]
mov ecx, dword [eax + esi*4]
mov eax, dword [ecx]
call dword [eax + 0x20]
inc esi
cmp esi, dword [ebx + 8]
jl 0x413572
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4