Function at 0x409010
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x420c18
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x472934]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x10], ebx
mov edi, dword [0x42531c]
lea eax, [ebp - 0x14]
push 0xffffffffffffffff
push 0
push str.MOD_____
push 0x426ff0
push eax
call edi
add esp, 0x14
mov ecx, dword [ebp + 8]
push eax
mov dword [ebp - 4], 0
call dword [0x425af4]
lea ecx, [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x4272ac
lea eax, [ebp + 8]
push 0x426ff0
push eax
call edi
add esp, 0x14
mov ecx, dword [ebx]
push eax
mov dword [ebp - 4], 1
call dword [0x4253ec]
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x4272b4
lea eax, [ebp + 8]
push 0x426ff0
push eax
call edi
add esp, 0x14
mov ecx, dword [ebx + 0x1c]
mov esi, dword [0x425b5c]
push eax
mov dword [ebp - 4], 2
call esi
lea ecx, [ebp + 8]
call dword [0x425354]
lea ecx, [ebp + 8]
call dword [0x425330]
mov ecx, dword [ebx + 0x1c]
mov ebx, dword [0x425460]
push eax
mov dword [ebp - 4], 3
call ebx
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x4272c0
lea eax, [ebp + 8]
push 0x426ff0
push eax
call edi
add esp, 0x14
mov ecx, dword [ebp - 0x10]
push eax
mov dword [ebp - 4], 4
mov ecx, dword [ecx + 0x20]
call esi
lea ecx, [ebp + 8]
call dword [0x425354]
lea ecx, [ebp + 8]
call dword [0x425330]
mov dword [ebp - 4], 5
push eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x20]
call ebx
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x4272cc
lea eax, [ebp + 8]
push 0x426ff0
push eax
call edi
add esp, 0x14
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 6
mov ecx, dword [eax + 0x24]
call esi
lea ecx, [ebp + 8]
call dword [0x425354]
lea ecx, [ebp + 8]
call dword [0x425330]
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 7
mov ecx, dword [eax + 0x24]
call ebx
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x4272d4
lea eax, [ebp + 8]
push 0x426ff0
push eax
call edi
add esp, 0x14
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 8
mov ecx, dword [eax + 0x28]
call esi
lea ecx, [ebp + 8]
call dword [0x425354]
lea ecx, [ebp + 8]
call dword [0x425330]
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 9
mov ecx, dword [eax + 0x28]
call dword [0x425b58]
lea ecx, [ebp + 8]
call dword [0x425354]
lea ecx, [ebp + 8]
call dword [0x425330]
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0xa
mov ecx, dword [eax + 0x28]
call dword [0x425b54]
lea ecx, [ebp + 8]
call dword [0x425354]
lea ecx, [ebp + 8]
call dword [0x425330]
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0xb
mov ecx, dword [eax + 0x28]
call ebx
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x4272e8
lea eax, [ebp + 8]
push 0x426ff0
push eax
call edi
add esp, 0x14
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0xc
mov ecx, dword [eax + 0x30]
call esi
lea ecx, [ebp + 8]
call dword [0x425354]
lea ecx, [ebp + 8]
call dword [0x425330]
mov esi, dword [ebp - 0x10]
push eax
mov dword [ebp - 4], 0xd
mov ecx, dword [esi + 0x30]
call ebx
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x4272f0
lea eax, [ebp + 8]
push 0x426ff0
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0x38]
mov ebx, dword [0x425acc]
push eax
mov dword [ebp - 4], 0xe
call ebx
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x4272fc
lea eax, [ebp + 8]
push 0x426ff0
push eax
call edi
add esp, 0x14
mov ecx, dword [esi + 0xc]
mov edi, dword [0x425aa0]
push eax
push dword [esi + 0x10]
mov dword [ebp - 4], 0xf
call edi
mov ecx, dword [esi + 0xc]
mov esi, dword [0x425aa8]
push eax
call esi
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x427300
lea eax, [ebp + 8]
push 0x426ff0
push eax
call dword [0x42531c]
add esp, 0x14
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0x10
mov ecx, dword [eax + 0x4c]
call dword [0x425b5c]
lea ecx, [ebp + 8]
call dword [0x425354]
lea ecx, [ebp + 8]
call dword [0x425330]
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0x11
mov ecx, dword [eax + 0x4c]
call dword [0x425460]
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x427308
lea eax, [ebp + 8]
push 0x426ff0
push eax
call dword [0x42531c]
add esp, 0x14
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0x12
mov ecx, dword [eax + 0x50]
call dword [0x425b5c]
lea ecx, [ebp + 8]
call dword [0x425354]
lea ecx, [ebp + 8]
call dword [0x425330]
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0x13
mov ecx, dword [eax + 0x50]
call dword [0x425460]
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push str.PLUGIN
lea eax, [ebp + 8]
push 0x426ff0
push eax
call dword [0x42531c]
add esp, 0x14
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0x14
push dword [eax + 0x40]
mov ecx, dword [eax + 0xc]
call edi
push eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x427300
lea eax, [ebp + 8]
push 0x426ff0
push eax
call dword [0x42531c]
add esp, 0x14
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0x15
mov ecx, dword [eax + 0x68]
call dword [0x425b5c]
lea ecx, [ebp + 8]
call dword [0x425354]
lea ecx, [ebp + 8]
call dword [0x425330]
mov dword [ebp - 4], 0x16
push eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x68]
call dword [0x425460]
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x427328
lea eax, [ebp + 8]
push 0x426ff0
push eax
call dword [0x42531c]
add esp, 0x14
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0x17
mov ecx, dword [eax + 0x6c]
call dword [0x425b5c]
lea ecx, [ebp + 8]
call dword [0x425354]
lea ecx, [ebp + 8]
call dword [0x425330]
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0x18
mov ecx, dword [eax + 0x6c]
call dword [0x425460]
lea ecx, [ebp + 8]
call dword [0x425354]
lea ecx, [ebp + 8]
call dword [0x425330]
push eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 4], 0x19
mov ecx, dword [eax + 0x80]
call ebx
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call dword [0x425354]
push 0xffffffffffffffff
push 0
push 0x427338
lea eax, [ebp - 0x18]
push 0x426ff0
push eax
call dword [0x42531c]
add esp, 0x14
mov ebx, dword [ebp - 0x10]
push eax
mov dword [ebp - 4], 0x1a
push dword [ebx + 0x5c]
mov ecx, dword [ebx + 0xc]
call edi
mov ecx, dword [ebx + 0xc]
push eax
call esi
lea ecx, [ebp - 0x18]
call dword [0x425354]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4