Function at 0x403bb0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x507984
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
push edi
mov eax, dword [0x5a8314]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
lea ecx, [edi + 8]
call fcn.004048a0
lea ecx, [edi + 0x1528]
mov dword [ebp - 4], 0
call fcn.00404b90
lea esi, [edi + 0x1eac]
mov ecx, esi
call fcn.004170c0
mov dword [edi + 0x1fac], 0
mov dword [edi + 0x1fa8], 0
mov dword [edi + 0x1fb0], 0
mov dword [edi + 0x1fb8], 0
mov dword [edi + 0x1fb4], 0
mov dword [edi + 0x1fbc], 0
mov dword [edi + 0x1fc4], 0
mov dword [edi + 0x1fc0], 0
mov dword [edi + 0x1fc8], 0
mov dword [edi + 0x1fd0], 0
mov dword [edi + 0x1fcc], 0
mov dword [edi + 0x1fd4], 0
mov dword [edi + 0x1fdc], 0
mov dword [edi + 0x1fd8], 0
mov dword [edi + 0x1fe0], 0
mov dword [edi + 0x2004], 0
lea eax, [edi + 0x2070]
mov dword [edi + 0x2000], 0
mov dword [edi + 0x204c], 0
mov dword [edi + 0x2048], 0
push 0x60
push 0
push eax
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x3c], 0
mov dword [eax + 0x40], 0
mov dword [eax + 0x44], 0
mov dword [eax + 0x48], 0
mov dword [eax + 0x5c], 0
mov dword [eax + 0x58], 0
call fcn.004df370
xorps xmm0, xmm0
add esp, 0xc
movups xmmword [edi + 0x20d0], xmm0
mov dword [edi + 0x20e0], 0
mov dword [edi + 0x20e8], 0
mov dword [edi + 0x20e4], 0
mov dword [edi + 0x20ec], 0
mov dword [edi + 0x20f4], 0
mov dword [edi + 0x20f0], 0
mov dword [edi + 0x20f8], 0
mov dword [edi + 0x2100], 0
mov dword [edi + 0x20fc], 0
mov dword [edi + 0x2104], 0
mov dword [edi + 0x210c], 0
mov dword [edi + 0x2108], 0
mov dword [edi + 0x2110], 0
mov dword [edi + 0x2118], 0
mov dword [edi + 0x2114], 0
mov dword [edi + 0x211c], 0
mov dword [edi + 0x2154], 0
mov dword [edi + 0x2158], 0
mov dword [edi + 0x215c], 0
mov dword [edi + 0x2160], 0
mov dword [edi + 0x217c], 0
mov dword [edi + 0x2180], 0
mov dword [edi + 0x2184], 0
mov dword [edi + 0x2188], 0
mov dword [edi + 0x21c4], 0
mov dword [edi + 0x21c8], 0
mov dword [edi + 0x21cc], 0
mov dword [edi + 0x21a8], 0
mov dword [edi + 0x21b0], 0
mov dword [edi + 0x21ac], 0
mov dword [edi + 0x21bc], 0x7f7fffff
mov dword [edi + 0x21b8], 0x7f7fffff
mov dword [edi + 0x21b4], 0x7f7fffff
movups xmmword [edi + 0x21c0], xmm0
mov dword [edi + 0x21ec], 0
mov dword [edi + 0x21f0], 0
mov dword [edi + 0x21f4], 0
mov dword [edi + 0x21d0], 0
mov dword [edi + 0x21d8], 0
mov dword [edi + 0x21d4], 0
mov dword [edi + 0x21e4], 0x7f7fffff
mov dword [edi + 0x21e0], 0x7f7fffff
mov dword [edi + 0x21dc], 0x7f7fffff
movups xmmword [edi + 0x21e8], xmm0
mov dword [edi + 0x2214], 0
mov dword [edi + 0x2218], 0
mov dword [edi + 0x221c], 0
mov dword [edi + 0x21f8], 0
mov dword [edi + 0x2200], 0
mov dword [edi + 0x21fc], 0
mov dword [edi + 0x220c], 0x7f7fffff
mov dword [edi + 0x2208], 0x7f7fffff
mov dword [edi + 0x2204], 0x7f7fffff
movups xmmword [edi + 0x2210], xmm0
mov byte [edi + 0x225c], 0
mov dword [edi + 0x2260], 0
mov dword [edi + 0x2268], 0
mov dword [edi + 0x226c], 0
mov dword [edi + 0x2264], 0
mov dword [edi + 0x2280], 0
mov dword [edi + 0x2284], 0
mov dword [edi + 0x2278], 0
mov dword [edi + 0x227c], 0
mov dword [edi + 0x2270], 0
mov dword [edi + 0x2274], 0
push 0x405a60
push 0x403890
push 2
lea eax, [edi + 0x2288]
mov byte [ebp - 4], 0xb
push 0xc
push eax
mov dword [ebp - 0x14], eax
call fcn.00496b8d
lea ecx, [edi + 0x22a4]
push esi
call fcn.00403a90
lea ecx, [edi + 0x2340]
push esi
call fcn.00403a90
mov dword [edi + 0x23fc], 0
xorps xmm0, xmm0
mov dword [edi + 0x23f8], 0
mov dword [edi + 0x23f0], 0
mov dword [edi + 0x23f4], 0
movups xmmword [edi + 0x2404], xmm0
movups xmmword [edi + 0x2414], xmm0
mov word [edi + 0x2424], 0
mov dword [edi + 0x2400], 0xffffffff
mov byte [edi + 0x2426], 0
mov dword [edi + 0x2428], 0
mov dword [edi + 0x242c], 0
mov dword [edi + 0x2430], 0
mov dword [edi + 0x2434], 0
mov dword [edi + 0x2458], 0
mov dword [edi + 0x2454], 0
mov dword [edi + 0x245c], 0
mov dword [edi + 0x2478], 0
mov dword [edi + 0x2474], 0
mov dword [edi + 0x247c], 0
mov dword [edi + 0x2484], 0
mov dword [edi + 0x2480], 0
mov dword [edi + 0x2488], 0
mov dword [edi + 0x248c], 0
mov dword [edi + 0x2494], 0
mov dword [edi + 0x2490], 0
mov dword [edi + 0x2498], 0
mov dword [edi + 0x24a0], 0
mov dword [edi + 0x249c], 0
mov dword [edi + 0x24a4], 0
lea eax, [edi + 0x24b0]
mov dword [edi + 0x24ac], 0
mov dword [edi + 0x24a8], 0
push 0xe74
push 0
push eax
mov dword [eax + 0x10], 0
mov dword [eax + 0xc], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x1c], 0
mov dword [eax + 0x18], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x24], 0
mov dword [eax + 0x2c], 0
call fcn.004df370
add esp, 0xc
lea ecx, [edi + 0x3324]
mov byte [ebp - 4], 0x13
call fcn.004171d0
mov dword [edi + 0x33ac], 0
mov dword [edi + 0x33a8], 0
mov dword [edi + 0x33a4], 0
mov dword [edi + 0x33a0], 0
mov dword [edi + 0x33cc], 0
mov dword [edi + 0x33c8], 0
mov dword [edi + 0x33d0], 0
mov dword [edi + 0x33d8], 0
mov dword [edi + 0x33d4], 0
mov dword [edi + 0x33dc], 0
mov dword [edi + 0x33e4], 0
mov dword [edi + 0x33e0], 0
mov dword [edi + 0x33ec], 0
mov dword [edi + 0x33e8], 0
mov dword [edi + 0x33fc], 0
mov dword [edi + 0x33f8], 0
mov dword [edi + 0x3400], 0
mov dword [edi + 0x3408], 0
mov dword [edi + 0x3404], 0
mov dword [edi + 0x340c], 0
mov dword [edi + 0x3414], 0
mov dword [edi + 0x3410], 0
mov dword [edi + 0x3418], 0
mov dword [edi + 0x342c], 0
mov dword [edi + 0x3428], 0
mov dword [edi + 0x3430], 0
mov ecx, dword [ebp + 8]
test ecx, ecx
mov byte [ebp - 4], 0x1a
sete al
mov byte [edi], 0
mov byte [edi + 1], al
mov dword [edi + 0x1ea0], 0
mov dword [edi + 0x1ea8], 0
mov dword [edi + 0x1ea4], 0
test ecx, ecx
jne 0x404314
mov eax, dword [0x5a9890]
test eax, eax
je 0x4042df
inc dword [eax + 0x37c]
push dword [0x5a9898]
push 0x544
call dword [0x5a8038]
mov dword [ebp - 0x14], eax
lea ecx, [ebp + 0xb]
add esp, 8
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 0x1b
test eax, eax
je 0x404310
mov ecx, eax
call fcn.00417280
jmp 0x404312
xor eax, eax
mov ecx, eax
xorps xmm0, xmm0
mov dword [edi + 0xa0], ecx
movsd qword [edi + 0x1f88], xmm0
mov dword [edi + 0x1f90], 0
mov dword [edi + 0x1f98], 0xffffffff
mov dword [edi + 0x1f94], 0xffffffff
mov word [edi + 0x1f9d], 0
mov byte [edi + 0x1f9c], 0
mov byte [edi + 0x1f9f], 0
mov dword [edi + 0x1fa0], 0
mov dword [edi + 0x1fa4], 0
mov dword [edi + 0x1fe4], 0
mov dword [edi + 0x1fe8], 0
mov dword [edi + 0x1fec], 0
mov dword [edi + 0x1ff0], 0
mov dword [edi + 0x1ff4], 0
mov dword [edi + 0x1ff8], 0
mov dword [edi + 0x1ffc], 0
mov dword [edi + 0x2008], 0
mov dword [edi + 0x2010], 0
mov dword [edi + 0x200c], 0
mov word [edi + 0x2014], 0
mov dword [edi + 0x201c], 0
mov dword [edi + 0x2018], 0
mov dword [edi + 0x2020], 0
mov dword [edi + 0x2024], 0
mov dword [edi + 0x2028], 0
mov dword [edi + 0x202c], 0
mov word [edi + 0x2030], 0
mov dword [edi + 0x2034], 0
mov dword [edi + 0x2038], 0
mov dword [edi + 0x2040], 0
mov dword [edi + 0x2044], 0
mov dword [edi + 0x2048], 0xbf800000
mov dword [edi + 0x204c], 0xbf800000
mov dword [edi + 0x2050], 0
mov dword [edi + 0x2054], 0
mov dword [edi + 0x2058], 0
mov dword [edi + 0x205c], 0
mov word [edi + 0x2060], 0
mov dword [edi + 0x2064], 0
mov dword [edi + 0x2068], 0
mov dword [edi + 0x206c], 0
mov dword [edi + 0x2120], 0
mov dword [edi + 0x2138], 0
mov dword [edi + 0x2134], 0
mov dword [edi + 0x2130], 0
mov dword [edi + 0x212c], 0
mov dword [edi + 0x2128], 0
mov dword [edi + 0x2124], 0
mov dword [edi + 0x214c], 0
mov dword [edi + 0x2144], 0
mov dword [edi + 0x2140], 0
mov dword [edi + 0x213c], 0
mov dword [edi + 0x2148], 0
mov dword [edi + 0x2150], 0
movups xmmword [edi + 0x2154], xmm0
mov dword [edi + 0x2164], 0
mov dword [edi + 0x2168], 0
mov dword [edi + 0x216c], 0x7fffffff
mov dword [edi + 0x2170], 0x10000
mov word [edi + 0x2174], 0
mov byte [edi + 0x2176], 0
mov dword [edi + 0x2178], 0
mov word [edi + 0x218c], 0
mov dword [edi + 0x2190], 0
mov dword [edi + 0x2194], 0
mov dword [edi + 0x2198], 0
mov dword [edi + 0x21a4], 0xffffffff
mov dword [edi + 0x21a0], 0xffffffff
mov dword [edi + 0x219c], 0xffffffff
mov dword [edi + 0x2220], 0
mov dword [edi + 0x2224], 0
mov dword [edi + 0x2230], 0
mov dword [edi + 0x222c], 0
mov dword [edi + 0x2228], 0
mov dword [edi + 0x2238], 0
mov dword [edi + 0x2234], 0
mov byte [edi + 0x223c], 0
mov dword [edi + 0x2244], 0
mov dword [edi + 0x2240], 0
mov dword [edi + 0x224c], 0x7fffffff
lea eax, [edi + 0x3450]
mov dword [edi + 0x2248], 0x7fffffff
mov dword [edi + 0x2254], 0x7fffffff
mov dword [edi + 0x2250], 0x7fffffff
mov byte [edi + 0x2258], 0
mov dword [edi + 0x22a0], 0
mov dword [edi + 0x22d0], 0x50ab54
mov dword [edi + 0x236c], 0x50ab64
mov dword [edi + 0x23dc], 0
mov word [edi + 0x23e1], 0
mov byte [edi + 0x23e0], 0
mov dword [edi + 0x23e4], 0
mov dword [edi + 0x23e8], 0xffffffff
mov dword [edi + 0x23ec], 0xffffffff
mov dword [edi + 0x2438], 0
mov dword [edi + 0x243c], 0
mov dword [edi + 0x2440], 0
mov dword [edi + 0x2444], 0
mov dword [edi + 0x2448], 0
mov dword [edi + 0x244c], 0xffffffff
mov dword [edi + 0x2450], 0
movups xmmword [edi + 0x2460], xmm0
mov dword [edi + 0x2470], 0
mov dword [edi + 0x24a8], 0
mov dword [edi + 0x24ac], 0
mov dword [edi + 0x3384], 0
mov dword [edi + 0x3388], 0xa900000
mov dword [edi + 0x3390], 0
mov dword [edi + 0x338c], 0
mov dword [edi + 0x339c], 0x7f7fffff
mov dword [edi + 0x3398], 0x7f7fffff
mov dword [edi + 0x3394], 0x7f7fffff
mov dword [edi + 0x33b0], 0
mov word [edi + 0x33b4], 0
mov dword [edi + 0x33b8], 0
mov dword [edi + 0x33bc], 0x3c23d70a
mov dword [edi + 0x33c0], 0
mov dword [edi + 0x33c4], 0
mov dword [edi + 0x33e8], 0x7f7fffff
mov dword [edi + 0x33ec], 0x7f7fffff
mov dword [edi + 0x33e0], 0x7f7fffff
mov dword [edi + 0x33e4], 0x7f7fffff
mov byte [edi + 0x33f0], 0
mov dword [edi + 0x33f4], 0
mov byte [edi + 0x341c], 0
mov dword [edi + 0x3420], 0
mov dword [edi + 0x3424], 0
mov dword [edi + 0x3434], 0x7f7fffff
mov byte [edi + 0x3438], 0
mov dword [edi + 0x343c], 0
mov dword [edi + 0x3444], 2
push 0x1e0
mov dword [edi + 0x3440], 2
push 0
mov byte [edi + 0x3448], 0
push eax
mov dword [edi + 0x344c], 0
call fcn.004df370
mov dword [edi + 0x3630], 0
lea eax, [edi + 0x3644]
mov dword [edi + 0x3634], 0
push 0xc01
mov dword [edi + 0x3640], 0xffffffff
push 0
mov dword [edi + 0x363c], 0xffffffff
push eax
mov dword [edi + 0x3638], 0xffffffff
call fcn.004df370
add esp, 0x18
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4