Function at 0x417930
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4364dc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x14], esi
call fcn.0041e580
or ebp, 0xffffffff
lea edi, [esi + 0x1c]
xor ebx, ebx
push ebp
push ebp
mov ecx, edi
mov dword [esp + 0x2c], ebx
call fcn.0041e5b0
lea ecx, [esi + 0x30]
mov dword [ecx], ebx
push ecx
mov dword [esi + 0x34], ebx
mov eax, esp
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x40], 1
mov byte [esp + 0x28], 2
mov dword [esp + 0x1c], esp
mov dword [eax], 0xc9
call fcn.00401480
push 0xf8f5ec
mov ecx, edi
call fcn.0041e610
mov dword [esp + 0x24], 3
mov dword [esi + 0x44], ebx
mov dword [esi + 0x48], ebx
mov dword [esi + 0x4c], ebx
mov byte [esi + 0x60], bl
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], ebx
mov dword [esi + 0x58], ebp
mov dword [esi + 0x5c], ebp
lea edi, [esi + 0x68]
push ebx
push 2
mov ecx, edi
mov byte [esp + 0x2c], 4
call fcn.0040f8f0
mov dword [edi], 0x438570
lea edi, [esi + 0xd8]
push ebx
push 2
mov ecx, edi
mov byte [esp + 0x2c], 5
call fcn.0040f8f0
mov dword [edi], 0x438570
lea edi, [esi + 0x148]
push ebx
push 2
mov ecx, edi
mov byte [esp + 0x2c], 6
call fcn.0040f8f0
mov dword [edi], 0x438570
lea edi, [esi + 0x1b8]
push ebx
push 2
mov ecx, edi
mov byte [esp + 0x2c], 7
call fcn.0040f8f0
mov dword [edi], 0x438570
lea ecx, [esi + 0x228]
mov byte [esp + 0x24], 8
call fcn.004046e0
mov byte [esp + 0x24], 9
mov dword [esi + 0x2ec], ebx
mov dword [esi + 0x2f0], ebx
mov dword [esi + 0x2f4], ebx
call fcn.00401410
mov eax, dword [eax + 0x1c]
lea edi, [esi + 0x2f8]
push eax
push 0x19
mov ecx, edi
call fcn.0040f130
mov dword [edi], 0x43857c
mov byte [esp + 0x24], 0xa
call fcn.00401410
mov eax, dword [eax + 0x1c]
lea edi, [esi + 0x33c]
push eax
push 0x19
mov ecx, edi
call fcn.0040f130
mov dword [edi], 0x43857c
mov dword [esi + 0x3a4], ebx
mov dword [esi + 0x3a8], ebx
mov dword [esi + 0x3ac], ebx
mov al, byte [esp + 0x13]
mov dword [esi + 0x3b0], ebx
mov dword [esi + 0x3b4], ebx
mov dword [esi + 0x3b8], ebx
mov dword [esi + 0x3bc], ebx
mov dword [esi + 0x3c0], ebx
mov dword [esi + 0x3c4], ebx
mov dword [esi + 0x3c8], ebx
mov dword [esi + 0x3cc], ebx
mov dword [esi + 0x3d0], ebx
mov byte [esi + 0x3d8], al
mov dword [esi + 0x3dc], ebx
mov dword [esi + 0x3e0], ebx
mov dword [esi + 0x3e4], ebx
mov cl, byte [esp + 0x13]
mov dl, byte [esp + 0x13]
lea edi, [esi + 0x3e8]
push 1
push ebx
mov byte [esp + 0x2c], 0xc
mov byte [edi], cl
mov ecx, edi
mov byte [edi + 1], dl
mov byte [edi + 0xc], bl
call fcn.0040b0a0
mov dword [edi + 8], eax
mov byte [eax + 0x15], 1
mov eax, dword [edi + 8]
push ebx
mov dword [eax], ebx
mov eax, dword [edi + 8]
mov dword [eax + 8], ebx
mov ecx, dword [edi + 8]
push ecx
mov ecx, edi
call fcn.0040b0a0
mov dword [edi + 4], eax
mov dword [eax], eax
mov eax, dword [edi + 4]
mov dword [eax + 8], eax
mov dword [edi + 0x10], ebx
lea ecx, [esi + 0x3fc]
mov byte [esp + 0x24], 0xd
call fcn.00415640
mov dl, byte [esp + 0x13]
mov al, byte [esp + 0x13]
mov byte [esi + 0x640], dl
mov dword [esi + 0x644], ebx
mov dword [esi + 0x648], ebx
mov dword [esi + 0x64c], ebx
mov byte [esi + 0x650], al
mov dword [esi + 0x654], ebx
mov dword [esi + 0x658], ebx
mov dword [esi + 0x65c], ebx
mov ecx, 0x84
xor eax, eax
lea edi, [esi + 0x430]
mov dword [esi], 0x43858c
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x1c]
mov dword [esi + 0x380], ebx
mov dword [esi + 0x388], ebp
mov dword [esi + 0x38c], ebx
mov dword [esi + 0x394], ebx
mov dword [esi + 0x3a0], ebx
mov dword [esi + 0x398], ebx
mov dword [esi + 0x39c], ebx
mov dword [esi + 0x390], ebx
mov dword [esi + 0x3d4], ebx
mov dword [esi + 0x384], ebx
mov dword [esi + 0x660], ebp
mov eax, esi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x18
ret