Function at 0x404d0c
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2c
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov eax, dword [edi + 8]
mov dword [ebp - 0x10], eax
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x14], eax
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 8]
mov dword [edi], eax
mov dword [esp + 4], 0x408268
mov eax, dword [esi + 4]
mov dword [esp], eax
call fcn.0040297b
cmp dword [0x406040], 0x2d43c38f
jne 0x404d69
mov dword [esp + 4], 0x26a9678f
mov eax, dword [0x40608c]
mov dword [esp], eax
call fcn.00403d01
cmp dword [0x40608c], 0x2d43c38f
jne 0x404d9a
mov dword [esp + 0x10], edi
mov eax, dword [ebp - 0x14]
mov dword [esp + 0xc], eax
mov dword [esp + 8], eax
mov eax, dword [0x406034]
mov dword [esp + 4], eax
mov eax, dword [0x406088]
mov dword [esp], eax
call fcn.00403322
mov word [esi], 0x17
cmp dword [0x406040], 0x21cad6f5
jne 0x404db0
call fcn.00402875
test edi, edi
setne dl
cmp dword [ebp - 0x10], 0
setne al
or eax, edx
mov ebx, eax
and ebx, 1
mov dword [esp + 8], 0
mov eax, dword [esi + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00403c04
mov dword [edi + 0x6c], eax
test ebx, ebx
setne al
movzx eax, al
mov ebx, eax
mov dword [esp + 4], 0x408281
mov eax, dword [esi + 4]
mov dword [esp], eax
call fcn.0040297b
mov word [esi], 0xc
cmp dword [0x406078], 0x4d3fefd4
jne 0x404e2d
mov dword [esp + 0xc], 0x115590d6
mov dword [esp + 8], 0x46cb089b
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.0040273a
mov ebx, 0
test esi, esi
setne al
cmp dword [ebp - 0x14], esi
setne dl
movzx eax, al
test eax, edx
je 0x404e49
test dword [ebp - 0x14], edi
jne 0x404e4f
cmp dword [ebp - 0x10], 0
je 0x404e54
mov ebx, 1
mov dword [esp + 8], 0
mov eax, dword [esi + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.00403c04
mov dword [edi + 0x74], eax
cmp dword [0x406090], 0x2d43c38f
jne 0x404e9e
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], edi
mov eax, dword [0x406028]
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.0040158f
mov ebx, eax
jmp 0x404ead
mov eax, dword [ebp - 0x14]
imul eax, dword [0x406058]
mov ebx, dword [ebp - 0x10]
sub ebx, eax
mov dword [esp + 4], 0x408292
mov eax, dword [esi + 4]
mov dword [esp], eax
call fcn.0040297b
mov word [esi], 0xf
cmp dword [0x406030], 0x4d3fefd4
jne 0x404ef2
mov dword [esp + 0xc], ebx
mov eax, dword [0x406074]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
mov dword [esp + 4], eax
mov eax, dword [0x406024]
mov dword [esp], eax
call fcn.004030b0
cmp dword [0x40608c], 0x21cad6f5
jne 0x404f22
mov eax, dword [0x406064]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x7101c44c
mov dword [esp + 8], edi
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.0040158f
mov dword [esp + 8], 0
mov eax, dword [esi + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.00403c04
mov dword [edi + 0x78], eax
mov dword [esp + 4], 0x4082a3
mov eax, dword [esi + 4]
mov dword [esp], eax
call fcn.0040297b
mov word [esi], 9
mov dword [esp + 8], 0
mov eax, dword [esi + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.00403c04
mov dword [edi + 0x7c], eax
mov dword [esp + 4], 0x4082b4
mov eax, dword [esi + 4]
mov dword [esp], eax
call fcn.0040297b
mov word [esi], 0xd
mov dword [esp + 8], 0
mov eax, dword [esi + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.00403c04
mov dword [edi + 0x80], eax
mov dword [esp + 4], 0x4082c5
mov eax, dword [esi + 4]
mov dword [esp], eax
call fcn.0040297b
mov word [esi], 0x14
mov dword [esp + 8], 0
mov eax, dword [esi + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00403c04
mov dword [edi + 0x68], eax
mov dword [esp + 4], 0x4082de
mov eax, dword [esi + 4]
mov dword [esp], eax
call fcn.0040297b
mov word [esi], 0x13
mov dword [esp + 8], 0
mov eax, dword [esi + 4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00403c04
mov dword [edi + 0x70], eax
mov dword [esp], edi
call fcn.00403e79
test eax, eax
je 0x405061
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], 0x80000000
mov eax, dword [edi + 0x10]
mov dword [esp], eax
call dword [edi + 0x74]
sub esp, 0x1c
mov dword [edi + 4], eax
mov eax, dword [edi + 4]
test eax, eax
sete dl
cmp eax, 0xffffffff
sete al
or eax, edx
test al, 1
je 0x40507a
call sub.msvcrt.dll_abort
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov dword [esp + 8], edi
mov dword [esp + 4], 0x1000
mov eax, dword [eax + 8]
mov dword [esp], eax
call fcn.00403dff
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret