Function at 0x797908
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x8f53a6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], ebx
push dword [ebp + 8]
mov dword [ebp - 0x24], ecx
call fcn.008193cc
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x24]
mov dword [edx], 0xb45c50
mov eax, dword [0x9ff4f8]
mov dword [0xaab180], edx
mov ebx, 0xffff
mov word [0x9ff4fc], bx
mov dword [edx + 4], eax
xor esi, esi
mov dword [0xaab274], esi
mov ecx, 1
mov dword [0xaab270], esi
mov dword [0xaab268], esi
mov dword [0xaab26c], esi
mov dword [0xaab264], esi
mov dword [0xaab260], esi
mov eax, 0xaa6d00
mov dword [0xaab25c], esi
mov dword [0xaab258], esi
mov dword [0xaab254], esi
mov dword [0xaab250], esi
mov dword [0xaab24c], esi
xor edi, edi
mov dword [0xaab248], esi
mov dword [0xaab230], esi
mov dword [0xaab22c], esi
mov dword [0xaab244], esi
mov dword [0xaab240], esi
mov dword [0xaab23c], esi
mov dword [0xaab238], esi
mov dword [0xaab234], esi
mov dword [0xaab280], esi
mov dword [0xaab21c], esi
mov word [0xaab228], si
mov word [0xaab224], si
mov dword [0xaab220], esi
mov dword [0xaab218], esi
mov dword [0xaab27c], ecx
mov dword [0xaab214], esi
mov dword [0xaab210], esi
mov dword [0xaab278], esi
mov dword [0xaab20c], esi
mov dword [0xaab208], esi
mov dword [0xaab204], esi
mov dword [0xaab200], esi
mov dword [0xaab1fc], esi
mov dword [0xaab1f8], ecx
mov dword [0xaab1f4], esi
mov dword [0xaab1f0], esi
mov dword [0xaab1cc], esi
mov dword [0xaab1c8], esi
mov dword [0xaab1c4], esi
mov dword [0xaab19c], esi
mov dword [0xaab2a0], esi
mov dword [0xa9c4f4], esi
mov dword [0xa9c4dc], esi
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov dword [eax + 0xc], edi
mov dword [eax + 0x10], edi
mov dword [eax + 0x14], edi
mov dword [eax + 0x18], edi
mov dword [eax + 0x1c], edi
mov dword [eax + 0x20], edi
mov dword [eax + 0x24], edi
mov dword [eax + 0x28], edi
mov dword [eax + 0x2c], edi
mov dword [eax + 0x30], edi
mov dword [eax + 0x34], edi
mov dword [eax + 0x38], edi
mov dword [eax + 0x3c], edi
push 0x180
push 0
push 0xaab000
call fcn.0086b688
push 0x1050
push 0
push 0xaa5c00
call fcn.0086b688
add esp, 0x18
mov edx, 0xaab1e8
xor eax, eax
mov dword [edx], eax
mov dword [edx + 4], eax
mov edx, 0xaab1d8
xor eax, eax
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
push 0x330
push 0
push 0xaaacc0
call fcn.0086b688
mov edx, 0xaab1a0
xor eax, eax
mov dword [edx], eax
mov dword [edx + 4], eax
mov dword [edx + 8], eax
mov dword [edx + 0xc], eax
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], eax
mov dword [edx + 0x18], eax
mov dword [edx + 0x1c], eax
push 0x620c
push 0
push 0xa9f9e0
call fcn.0086b5cc
add esp, 0x18
xor eax, eax
mov dword [0xaab1c0], eax
mov dword [0xaab198], eax
mov ecx, 0xa9f960
xor edx, edx
mov dword [ecx], edx
mov dword [ecx + 4], edx
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], edx
mov dword [ecx + 0x10], edx
mov dword [ecx + 0x14], edx
mov dword [ecx + 0x18], edx
mov dword [ecx + 0x1c], edx
mov dword [ecx + 0x20], edx
mov dword [ecx + 0x24], edx
mov dword [ecx + 0x28], edx
mov dword [ecx + 0x2c], edx
mov dword [ecx + 0x30], edx
mov dword [ecx + 0x34], edx
mov dword [ecx + 0x38], edx
mov dword [ecx + 0x3c], edx
mov dword [ecx + 0x40], edx
mov dword [ecx + 0x44], edx
mov dword [ecx + 0x48], edx
mov dword [ecx + 0x4c], edx
mov dword [ecx + 0x50], edx
mov dword [ecx + 0x54], edx
mov dword [ecx + 0x58], edx
mov dword [ecx + 0x5c], edx
mov dword [ecx + 0x60], edx
mov dword [ecx + 0x64], edx
mov dword [ecx + 0x68], edx
mov dword [ecx + 0x6c], edx
mov dword [ecx + 0x70], edx
mov dword [ecx + 0x74], edx
mov dword [ecx + 0x78], edx
mov dword [ecx + 0x7c], edx
mov dword [0xaab194], 1
call fcn.00797e50
mov ecx, dword [0xaab404]
mov dword [ebp - 0x2c], 0
push 0x1e14c
call fcn.007a8a38
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], eax
test eax, eax
je 0x797e43
mov dword [ebp - 0x2c], 1
mov dword [ebp - 4], 1
call fcn.007c19b8
push 0x97ce48
push 0xa46bcc
push 0xa46b9c
mov ecx, dword [ebp - 0x14]
push dword [0xa9cd44]
push eax
push dword [ebp - 0x24]
call fcn.007d2da0
mov dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x14]
mov dword [0xaab284], eax
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x24]
mov dword [eax + 0x1e074], 0x79b81c
xor edx, edx
mov dword [eax + 0x1e078], 0x79b860
mov dword [eax + 0x1e094], edx
mov dword [eax + 0x1e138], edx
mov dword [eax + 0x1e07c], 0x79b884
mov dword [eax + 0x1e080], 0x79b92c
mov dword [0xa49508], edx
mov dword [eax + 0x1e08c], 0x7a0eb0
mov dword [eax + 0x1e090], 0x7a0e48
mov dword [eax + 0x1e084], 0x79ba38
mov dword [eax + 0x1e088], 0x79bba0
mov dword [eax + 0x1e098], 0x79b94c
mov dword [eax + 0x1e0a0], 0x79bde8
mov dword [eax + 0x1e0a4], 0x79c070
mov dword [eax + 0x1e09c], 0x79b9b0
mov dword [eax + 0x1e0a8], 0x61cdb0
mov dword [eax + 0x1e0b0], 0x79c4bc
mov dword [eax + 0x1e0b4], 0x7a0d84
mov dword [eax + 0x1e0b8], 0x79cf08
mov dword [eax + 0x1e0bc], 0x7a0d0c
mov dword [eax + 0x1e0d0], 0x81384c
mov dword [eax + 0x1e0d4], 0x827f48
mov dword [eax + 0x1e0c0], 0x79d1f0
mov dword [eax + 0x1e0c4], 0x79d2d4
mov dword [eax + 0x1e0cc], 0x79d31c
mov dword [eax + 0x1e0d8], 0x79d830
mov dword [eax + 0x1e0dc], 0x79c01c
mov dword [eax + 0x1e0e0], 0x79d89c
mov dword [eax + 0x1e0e4], 0x79d8a8
mov dword [eax + 0x1e0e8], 0x79d8b4
mov dword [eax + 0x1e0f0], 0x6cca7c
mov dword [eax + 0x1e0f4], 0x6ccaa8
mov dword [eax + 0x1e0f8], 0x6ccb88
mov dword [eax + 0x1e0fc], 0x6ccdf8
mov dword [eax + 0x1e100], 0x79d5bc
mov dword [eax + 0x1e104], 0x79d7b0
mov dword [eax + 0x1e108], 0x6bd9c8
mov dword [eax + 0x1e10c], 0x6bdcec
mov dword [eax + 0x1e118], 0x79d84c
mov dword [eax + 0x1e11c], 0x79d860
mov dword [eax + 0x1e114], 0x79bd1c
mov dword [eax + 0x1e120], 0x79d8cc
mov dword [eax + 0x1e128], 0x79d944
mov dword [eax + 0x1e13c], 0x82637c
mov dword [eax + 0x1e140], 0x827024
mov dword [eax + 0x1e144], 0x826394
mov dword [eax + 0x1e0ec], 0x79d8c0
mov dword [eax + 0x1e12c], 0x79d9ec
mov dword [eax + 0x1e130], 0x79d9f8
mov dword [eax + 0x1e134], 0x797860
mov dword [eax + 0x1e148], 0x7a0128
mov dword [eax + 0x1e124], 0x79ea60
call fcn.00797e74
mov eax, dword [ebp - 0x24]
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x797c12