Function at 0x401442
Capabilities:
Access peb ldr_data

Disassembly:
jmp 0x403e50
push 0xffffffffffffffff
push 0x553ea6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x7c
mov eax, dword [0x599508]
push ebx
push esi
mov dword [esp + 0x18], eax
xor ebx, ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0x8c], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], eax
lea eax, [esp + 0x10]
push ebx
push eax
mov byte [esp + 0x94], 3
call fcn.00455d50
add esp, 8
mov ecx, dword [eax]
lea edx, [esp + 8]
push ecx
push str._s_bakoav3.sys
push edx
mov byte [esp + 0x98], 4
call fcn.0051eea6
add esp, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0x8c], 3
call fcn.0052a9e2
call fcn.00468300
test eax, eax
push ebx
je 0x403f0e
lea eax, [esp + 0x14]
push eax
call fcn.00455d50
add esp, 8
mov ecx, dword [eax]
lea edx, [esp + 0xc]
push ecx
push str._s_syswow64winoav3.dll
push edx
mov byte [esp + 0x98], 5
call fcn.0051eea6
add esp, 0xc
mov byte [esp + 0x8c], 3
lea ecx, [esp + 0x10]
jmp 0x403f44
lea eax, [esp + 0x14]
push eax
call fcn.00456250
add esp, 8
mov ecx, dword [eax]
lea edx, [esp + 0xc]
push ecx
push str._swinoav3.dll
push edx
mov byte [esp + 0x98], 6
call fcn.0051eea6
add esp, 0xc
mov byte [esp + 0x8c], 3
lea ecx, [esp + 0x10]
call fcn.0052a9e2
mov eax, dword [0x599508]
mov word [esp + 0x1c], bx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov word [esp + 0x1e], bx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov ecx, dword [esp + 0xc]
lea eax, [esp + 0x1c]
push ebx
push eax
push ecx
mov byte [esp + 0x98], 7
call fcn.004619f0
add esp, 0xc
test eax, eax
je 0x4041bf
mov eax, dword [0x599508]
mov word [esp + 0x50], bx
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov word [esp + 0x52], bx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov edx, dword [esp + 8]
mov byte [esp + 0x8c], 0xf
push edx
call fcn.004015ff
add esp, 4
test eax, eax
je 0x40408b
mov ecx, dword [esp + 8]
lea eax, [esp + 0x50]
push ebx
push eax
push ecx
call fcn.004619f0
add esp, 0xc
test eax, eax
je 0x40408b
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x54]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x58]
cmp eax, edx
jne 0x404039
cmp ecx, esi
je 0x404093
cmp edx, ebx
jne 0x404041
cmp esi, ebx
je 0x404093
push edi
mov edi, esi
and edi, 0xffff
shr esi, 0x10
push edi
push esi
mov esi, edx
and esi, 0xffff
shr edx, 0x10
push esi
push edx
mov edx, ecx
and edx, 0xffff
shr ecx, 0x10
push edx
mov edx, dword [esp + 0xac]
push ecx
mov ecx, eax
and ecx, 0xffff
shr eax, 0x10
push ecx
push eax
push 0x67
push edx
call fcn.0051eeb9
add esp, 0x28
pop edi
jmp 0x4040bf
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
mov edx, ecx
and edx, 0xffff
shr ecx, 0x10
push edx
mov edx, dword [esp + 0x98]
push ecx
mov ecx, eax
and ecx, 0xffff
shr eax, 0x10
push ecx
push eax
push 0x66
push edx
call fcn.0051eeb9
add esp, 0x18
mov esi, 1
lea ecx, [esp + 0x80]
mov byte [esp + 0x8c], 0x16
call fcn.0052a9e2
lea ecx, [esp + 0x7c]
mov byte [esp + 0x8c], 0x15
call fcn.0052a9e2
lea ecx, [esp + 0x78]
mov byte [esp + 0x8c], 0x14
call fcn.0052a9e2
lea ecx, [esp + 0x74]
mov byte [esp + 0x8c], 0x13
call fcn.0052a9e2
lea ecx, [esp + 0x70]
mov byte [esp + 0x8c], 0x12
call fcn.0052a9e2
lea ecx, [esp + 0x6c]
mov byte [esp + 0x8c], 0x11
call fcn.0052a9e2
lea ecx, [esp + 0x68]
mov byte [esp + 0x8c], 0x10
call fcn.0052a9e2
lea ecx, [esp + 0x64]
mov byte [esp + 0x8c], 7
call fcn.0052a9e2
lea ecx, [esp + 0x4c]
mov byte [esp + 0x8c], 0x1d
call fcn.0052a9e2
lea ecx, [esp + 0x48]
mov byte [esp + 0x8c], 0x1c
call fcn.0052a9e2
lea ecx, [esp + 0x44]
mov byte [esp + 0x8c], 0x1b
call fcn.0052a9e2
lea ecx, [esp + 0x40]
mov byte [esp + 0x8c], 0x1a
call fcn.0052a9e2
lea ecx, [esp + 0x3c]
mov byte [esp + 0x8c], 0x19
call fcn.0052a9e2
lea ecx, [esp + 0x38]
mov byte [esp + 0x8c], 0x18
call fcn.0052a9e2
mov byte [esp + 0x8c], 0x17
jmp 0x40422f
xor esi, esi
lea ecx, [esp + 0x4c]
mov byte [esp + 0x8c], 0xe
call fcn.0052a9e2
lea ecx, [esp + 0x48]
mov byte [esp + 0x8c], 0xd
call fcn.0052a9e2
lea ecx, [esp + 0x44]
mov byte [esp + 0x8c], 0xc
call fcn.0052a9e2
lea ecx, [esp + 0x40]
mov byte [esp + 0x8c], 0xb
call fcn.0052a9e2
lea ecx, [esp + 0x3c]
mov byte [esp + 0x8c], 0xa
call fcn.0052a9e2
lea ecx, [esp + 0x38]
mov byte [esp + 0x8c], 9
call fcn.0052a9e2
mov byte [esp + 0x8c], 8
lea ecx, [esp + 0x34]
call fcn.0052a9e2
lea ecx, [esp + 0x30]
mov byte [esp + 0x8c], 3
call fcn.0052a9e2
lea ecx, [esp + 8]
mov byte [esp + 0x8c], 2
call fcn.0052a9e2
lea ecx, [esp + 0xc]
mov byte [esp + 0x8c], 1
call fcn.0052a9e2
lea ecx, [esp + 0x14]
mov byte [esp + 0x8c], bl
call fcn.0052a9e2
lea ecx, [esp + 0x18]
mov dword [esp + 0x8c], 0xffffffff
call fcn.0052a9e2
mov ecx, dword [esp + 0x84]
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x88
ret 4