Function at 0x401000
Capabilities:
Access peb ldr_data

Disassembly:
pushal
call 0x401006
pop ebp
sub ebp, 0x15424b8
jmp 0x40101f
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x1c]
lodsd eax, dword [esi]
mov eax, dword [eax + 8]
mov dword [ebp + 0x1542eba], eax
lea ebx, [ebp + 0x1542ec2]
push ebx
push dword [ebp + 0x1542eba]
call fcn.00401297
mov dword [ebp + 0x1542f74], eax
cmp eax, 0
jne 0x401099
lea ebx, [ebp + 0x1542ecf]
push ebx
push dword [ebp + 0x1542eba]
call fcn.00401297
mov dword [ebp + 0x1542f78], eax
xor ebx, ebx
push ebx
push ebx
lea ebx, [ebp + 0x1542e9e]
lea ebx, [ebp + 0x1542ede]
push ebx
push dword [ebp + 0x1542eba]
call fcn.00401297
mov dword [ebp + 0x1542f80], eax
lea ebx, [ebp + 0x1542eea]
push ebx
push dword [ebp + 0x1542eba]
call fcn.00401297
mov dword [ebp + 0x1542f84], eax
lea ebx, [ebp + 0x1542ef9]
push ebx
push dword [ebp + 0x1542eba]
call fcn.00401297
mov dword [ebp + 0x1542f88], eax
lea ebx, [ebp + 0x1542f06]
push ebx
push dword [ebp + 0x1542eba]
call fcn.00401297
mov dword [ebp + 0x1542f7c], eax
lea ebx, [ebp + 0x1542f15]
push ebx
push dword [ebp + 0x1542eba]
call fcn.00401297
mov dword [ebp + 0x1542f8c], eax
lea ebx, [ebp + 0x1542f28]
push ebx
push dword [ebp + 0x1542eba]
call fcn.00401297
add dword [eax], eax
add byte [ecx + 0x542f9085], cl
add dword [ebp + 0x542f349d], ecx
add dword [ebx - 1], edx
mov ch, 0xba
push esp
add eax, ebp
pop esp
add dword [eax], eax
add byte [ecx + 0x542f9485], cl
add dword [ebp + 0x542f449d], ecx
add dword [ebx - 1], edx
mov ch, 0xba
push esp
add eax, ebp
inc esp
add dword [eax], eax
add byte [ecx + 0x542f9885], cl
add dword [ebp + 0x542ead9d], ecx
add dword [ebx - 1], edx
xchg ebp, eax
je 0x401193
push esp
add dword [ecx + 0x542ebe85], ecx
add dword [ebp + 0x542f509d], ecx
add dword [ebx - 1], edx
mov ch, 0xbe
push esp
add edi, edi
xchg ebp, eax
jl 0x4011ac
push esp
add dword [ecx + 0x542f9c85], ecx
add dword [ebp + 0x542f5c9d], ecx
add dword [ebx - 1], edx
mov ch, 0xbe
push esp
add edi, edi
xchg ebp, eax
jl 0x4011c5
push esp
add dword [ecx + 0x542fa085], ecx
add dword [ebp + 0x542f689d], ecx
add dword [ebx - 1], edx
mov ch, 0xba
push esp
add eax, ebp
out 0, eax
add byte [eax], al
mov dword [ebp + 0x1542fa4], eax
mov eax, ebp
add eax, 0x1542a74
push eax
mov eax, dword [ebp + 0x1542f88]
push eax
mov eax, dword [ebp + 0x1542f98]
push eax
mov eax, dword [ebp + 0x1542f94]
push eax
mov eax, dword [ebp + 0x1542f90]
push eax
lea eax, [ebp + 0x1542fac]
push eax
lea eax, [ebp + 0x1542d7e]
push eax
lea eax, [ebp + 0x1542d8e]
push eax
call fcn.0040132c
mov dword [ebp + 0x1542fa8], eax
mov dword [ebp + 0x1542d6e], eax
cmp eax, 0
je 0x401231
cmp eax, 0xffffffff
je 0x40120c
jmp 0x401256
push 0x10
lea eax, [ebp + 0x1542fb3]
push eax
lea eax, [ebp + 0x1542fc1]
push eax
push 0
call dword [ebp + 0x1542fa0]
mov eax, 0x1f5
push eax
call dword [ebp + 0x1542fa4]
int3
push 0x10
lea eax, [ebp + 0x1542da2]
push eax
lea eax, [ebp + 0x1542df2]
push eax
push 0
call dword [ebp + 0x1542f9c]
mov eax, 0x1f4
push eax
call dword [ebp + 0x1542fa4]
int3
lea ebx, [ebp + 0x1542d5e]
push ebx
mov eax, dword [ebp + 0x1542f7c]
push eax
mov eax, dword [ebp + 0x1542f74]
push eax
mov eax, dword [ebp + 0x1542f80]
push eax
mov eax, dword [ebp + 0x1542f84]
push eax
mov eax, dword [ebp + 0x1542f88]
push eax
mov eax, dword [ebp + 0x1542fa8]
add eax, dword [ebp + 0x1542d72]
push eax
call fcn.00401686
add esp, 0x18
pop eax
int3