Function at 0x415010
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe0
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
test dl, dl
je 0x415033
add esp, 0xfffffff0
call fcn.004028c8
mov edi, ecx
mov byte [ebp - 1], dl
mov ebx, eax
mov esi, dword [ebp + 8]
xor eax, eax
push ebp
push 0x415262
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 0xc]
push eax
push esi
mov ecx, edi
xor edx, edx
mov eax, ebx
call fcn.00411808
mov dword [ebx + 0x20], esi
mov dl, 1
mov eax, dword [0x411bf0]
call fcn.004027c8
mov esi, eax
mov dword [ebx + 0xc], esi
push 1
lea eax, [esi + 0xc]
mov ecx, 1
mov edx, dword [0x411bc8]
call fcn.00403d60
add esp, 4
push 0
lea eax, [esi + 0x10]
mov ecx, 1
mov edx, dword [0x411bdc]
call fcn.00403d60
add esp, 4
mov dl, 1
mov eax, dword [0x414b9c]
call fcn.004027c8
mov esi, eax
mov dword [ebx + 0x10], esi
mov eax, 0x41528c
call fcn.0040d270
mov dword [esi + 8], eax
mov dl, 1
mov eax, dword [0x414ccc]
call fcn.004027c8
mov esi, eax
mov dword [ebx + 0x14], esi
push 0x80
push 0xcc
lea eax, [ebp - 0x14]
push eax
xor ecx, ecx
mov dl, 0xa
mov eax, 0x41529c
call fcn.0040d2d4
lea edx, [ebp - 0x14]
lea eax, [esi + 0x14]
mov ecx, dword [0x40c518]
call fcn.00403858
mov byte [esi + 0x24], 0
mov dl, 1
mov eax, dword [0x4114d0]
call fcn.004027c8
mov dword [ebx + 0x18], eax
mov dl, 1
mov eax, dword [0x412124]
call fcn.004027c8
mov dword [ebx + 0x1c], eax
mov eax, dword [ebx + 0xc]
mov dword [ebx + 8], eax
mov eax, dword [ebx + 0xc]
mov dword [eax + 8], ebx
mov dword [eax + 4], edi
mov eax, dword [ebx + 0x1c]
push eax
push 0x41218c
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.0040c708
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x20]
mov dword [eax], edx
mov edx, dword [ebp - 0x1c]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x18]
mov dword [eax + 8], edx
mov eax, dword [ebx + 0x14]
push eax
push 0x414d44
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.0040c708
mov eax, dword [ebx + 0x10]
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x18], edx
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0x1c], edx
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x20], edx
mov eax, dword [ebx + 0x18]
push eax
push 0x411540
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.0040c708
mov eax, dword [ebx + 0x14]
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x64], edx
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0x68], edx
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x6c], edx
mov eax, dword [ebx + 0x10]
push eax
push 0x414c30
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.0040c708
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x2c], edx
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0x30], edx
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x34], edx
mov eax, dword [ebx + 0x14]
push eax
push 0x414f40
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.0040c708
mov eax, dword [ebx + 0x18]
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x20], edx
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0x24], edx
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x28], edx
mov eax, dword [ebx + 0xc]
push eax
push 0x411c68
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.0040c708
mov eax, dword [ebx + 0x1c]
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x2c], edx
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0x30], edx
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x34], edx
mov eax, dword [ebx + 0x18]
push eax
push 0x4115b4
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.0040c708
mov eax, dword [ebx + 0x1c]
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x20], edx
mov edx, dword [ebp - 0x1c]
mov dword [eax + 0x24], edx
mov edx, dword [ebp - 0x18]
mov dword [eax + 0x28], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x415269
lea eax, [ebp - 0x14]
mov edx, dword [0x40c518]
call fcn.00403648
ret