Function at 0x40f490
Capabilities:
Access peb ldr_data

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx]
ja 0x40f4a6
xor edx, edx
xor eax, eax
call fcn.00417120
sub esp, 0x40
mov eax, dword fs:[0x14]
mov eax, dword [eax + 4]
mov esi, dword [eax + 0x18]
mov dword [esp + 0x3c], esi
mov eax, dword fs:[0x14]
mov eax, dword [eax + 4]
mov ebp, dword [eax + 0x1c]
mov dword [esp + 0x38], ebp
mov eax, dword fs:[0x14]
mov eax, dword [eax + 4]
mov ebx, dword [eax + 0x50]
mov eax, dword fs:[0x14]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0xc]
mov dword [esp + 0x28], ebx
mov ecx, dword [ebx]
add ecx, 0xfffff700
cmp eax, ecx
jae 0x40f537
mov eax, str.runtime:_split_stack_overflow:__p____p_n
mov dword [esp], eax
mov eax, dword fs:[0x14]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebx]
add eax, 0xfffff700
mov dword [esp + 8], eax
call fcn.0040d260
mov eax, str.runtime:_split_stack_overflow
mov dword [esp], eax
call fcn.0040c940
mov esi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
mov ebx, dword [esp + 0x28]
mov eax, ebp
cdq
and edx, 3
add eax, edx
and eax, 3
sub eax, edx
cmp eax, 0
je 0x40f573
mov eax, str.runtime:_stack_split_with_misaligned_argsize__d_n
mov dword [esp], eax
mov dword [esp + 4], ebp
call fcn.0040d260
mov eax, str.runtime:_stack_split_argsize
mov dword [esp], eax
call fcn.0040c940
mov esi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
mov ebx, dword [esp + 0x28]
cmp esi, 1
jne 0x40f714
mov eax, 1
mov cl, al
cmp cl, 0
je 0x40f58a
xor esi, esi
cmp cl, 0
je 0x40f5ab
mov eax, dword fs:[0x14]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0xc]
sub eax, ebp
add eax, 0xffffffbc
mov ecx, dword [ebx]
cmp eax, ecx
ja 0x40f6ec
add esi, ebp
add esi, 0x400
cmp esi, 0x1000
jge 0x40f5c0
mov esi, 0x1000
add esi, 0x800
mov dword [esp + 0x3c], esi
mov dword [esp], esi
call fcn.00414d00
mov esi, dword [esp + 0x3c]
mov ebp, dword [esp + 0x38]
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x30]
lea eax, [edx + esi]
add eax, 0xffffffdc
mov edx, eax
mov dword [esp + 0x14], esi
mov ecx, dword [ebx + 4]
mov dword [edx + 4], ecx
mov eax, edx
mov ecx, dword [ebx]
mov dword [edx], ecx
mov edi, edx
add edi, 8
mov esi, dword fs:[0x14]
mov esi, dword [esi + 4]
add esi, 0xc
mov ecx, 3
cld
rep movsd dword es:[edi], dword [esi]
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx + 4]
mov ecx, dword [ecx + 8]
mov dword [edx + 0x18], ecx
mov dword [edx + 0x14], ebp
mov ecx, dword [esp + 0x14]
mov dword [edx + 0x1c], ecx
mov eax, dword fs:[0x14]
mov eax, dword [eax + 4]
mov dword [eax + 8], 0
mov eax, dword fs:[0x14]
mov eax, dword [eax + 4]
mov dword [eax + 0x10], 0
mov eax, dword fs:[0x14]
mov eax, dword [eax + 4]
mov dword [eax + 0xc], 0
movzx ecx, byte [ebx + 0x4d]
mov byte [edx + 0x20], cl
mov byte [ebx + 0x4d], 0
mov dword [ebx + 4], edx
mov ecx, dword [esp + 0x30]
add ecx, 0x900
mov dword [ebx], ecx
mov ecx, edx
cmp ebp, 0
jle 0x40f6a3
sub ecx, ebp
mov dword [esp + 0x2c], ecx
mov dword [esp], ecx
mov eax, dword [edx + 0x18]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.00417460
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x1c], ecx
mov eax, 0x4171e0
mov dword [esp + 0x20], eax
mov eax, dword fs:[0x14]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x50]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x1c]
mov dword [esp], eax
mov eax, dword fs:[0x14]
mov eax, dword [eax + 4]
mov eax, dword [eax + 4]
mov dword [esp + 4], eax
call fcn.004170c0
mov dword [0x159], 0x7b
add esp, 0x40
ret
mov eax, dword fs:[0x14]
mov eax, dword [eax + 4]
mov edx, dword [eax + 0xc]
add edx, 0xffffffdc
mov eax, dword [ebx]
add eax, 0xfffff700
mov dword [esp + 0x30], eax
mov dword [esp + 0x14], 0
jmp 0x40f5f2
xor eax, eax
jmp 0x40f581