Function at 0x410b8c
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffd2c
mov dword [ebp - 0x2d0], eax
mov eax, 0x557380
call fcn.00525a60
mov word [ebp - 0x2bc], 8
push 0x40f838
push 1
push 0x40f7f0
push 1
push 0xa
push 0x44
lea edx, [ebp - 0x2a8]
push edx
call fcn.00524cb4
add esp, 0x1c
add dword [ebp - 0x2b0], 0x1e
xor ecx, ecx
mov dword [ebp - 0x2d4], ecx
push 0
add esp, 0xffffffbc
mov word [ebp - 0x2bc], 0x20
mov eax, dword [ebp - 0x2a8]
mov dword [esp], eax
mov edx, dword [ebp - 0x2a4]
mov dword [esp + 4], edx
mov ecx, dword [ebp - 0x2a0]
mov dword [esp + 8], ecx
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], eax
mov dl, byte [ebp - 0x298]
mov byte [esp + 0x10], dl
mov cl, byte [ebp - 0x297]
mov byte [esp + 0x11], cl
mov eax, dword [ebp - 0x294]
mov dword [esp + 0x14], eax
mov edx, dword [ebp - 0x290]
mov dword [esp + 0x18], edx
mov ecx, dword [ebp - 0x28c]
mov dword [esp + 0x1c], ecx
mov eax, dword [ebp - 0x288]
mov dword [esp + 0x20], eax
lea edx, [ebp - 0x284]
lea eax, [esp + 0x24]
call fcn.00530f7c
inc dword [ebp - 0x2b0]
mov edx, dword [ebp - 0x280]
mov dword [esp + 0x28], edx
mov ecx, dword [ebp - 0x27c]
mov dword [esp + 0x2c], ecx
mov eax, dword [ebp - 0x278]
mov dword [esp + 0x30], eax
mov edx, dword [ebp - 0x274]
mov dword [esp + 0x34], edx
mov ecx, dword [ebp - 0x270]
mov dword [esp + 0x38], ecx
mov eax, dword [ebp - 0x26c]
mov dword [esp + 0x3c], eax
lea edx, [ebp - 0x268]
lea eax, [esp + 0x40]
call fcn.00530f7c
inc dword [ebp - 0x2b0]
inc dword [ebp - 0x2b0]
mov edx, dword [ebp - 0x2d0]
push dword [edx + 0x6f4]
mov word [ebp - 0x2bc], 0x14
add dword [ebp - 0x2b0], 0xfffffffd
call fcn.0040ef20
add esp, 0x4c
push 0
add esp, 0xffffffbc
mov word [ebp - 0x2bc], 0x38
mov ecx, dword [ebp - 0x2a8]
mov dword [esp], ecx
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 4], eax
mov edx, dword [ebp - 0x2a0]
mov dword [esp + 8], edx
mov ecx, dword [ebp - 0x29c]
mov dword [esp + 0xc], ecx
mov al, byte [ebp - 0x298]
mov byte [esp + 0x10], al
mov dl, byte [ebp - 0x297]
mov byte [esp + 0x11], dl
mov ecx, dword [ebp - 0x294]
mov dword [esp + 0x14], ecx
mov eax, dword [ebp - 0x290]
mov dword [esp + 0x18], eax
mov edx, dword [ebp - 0x28c]
mov dword [esp + 0x1c], edx
mov ecx, dword [ebp - 0x288]
mov dword [esp + 0x20], ecx
lea edx, [ebp - 0x284]
lea eax, [esp + 0x24]
call fcn.00530f7c
inc dword [ebp - 0x2b0]
mov ecx, dword [ebp - 0x280]
mov dword [esp + 0x28], ecx
mov eax, dword [ebp - 0x27c]
mov dword [esp + 0x2c], eax
mov edx, dword [ebp - 0x278]
mov dword [esp + 0x30], edx
mov ecx, dword [ebp - 0x274]
mov dword [esp + 0x34], ecx
mov eax, dword [ebp - 0x270]
mov dword [esp + 0x38], eax
mov edx, dword [ebp - 0x26c]
mov dword [esp + 0x3c], edx
lea edx, [ebp - 0x268]
lea eax, [esp + 0x40]
call fcn.00530f7c
inc dword [ebp - 0x2b0]
inc dword [ebp - 0x2b0]
mov ecx, dword [ebp - 0x2d0]
push dword [ecx + 0x6f8]
mov word [ebp - 0x2bc], 0x2c
add dword [ebp - 0x2b0], 0xfffffffd
call fcn.0040ef20
add esp, 0x4c
push 0
add esp, 0xffffffbc
mov word [ebp - 0x2bc], 0x50
mov eax, dword [ebp - 0x2a8]
mov dword [esp], eax
mov edx, dword [ebp - 0x2a4]
mov dword [esp + 4], edx
mov ecx, dword [ebp - 0x2a0]
mov dword [esp + 8], ecx
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], eax
mov dl, byte [ebp - 0x298]
mov byte [esp + 0x10], dl
mov cl, byte [ebp - 0x297]
mov byte [esp + 0x11], cl
mov eax, dword [ebp - 0x294]
mov dword [esp + 0x14], eax
mov edx, dword [ebp - 0x290]
mov dword [esp + 0x18], edx
mov ecx, dword [ebp - 0x28c]
mov dword [esp + 0x1c], ecx
mov eax, dword [ebp - 0x288]
mov dword [esp + 0x20], eax
lea edx, [ebp - 0x284]
lea eax, [esp + 0x24]
call fcn.00530f7c
inc dword [ebp - 0x2b0]
mov edx, dword [ebp - 0x280]
mov dword [esp + 0x28], edx
mov ecx, dword [ebp - 0x27c]
mov dword [esp + 0x2c], ecx
mov eax, dword [ebp - 0x278]
mov dword [esp + 0x30], eax
mov edx, dword [ebp - 0x274]
mov dword [esp + 0x34], edx
mov ecx, dword [ebp - 0x270]
mov dword [esp + 0x38], ecx
mov eax, dword [ebp - 0x26c]
mov dword [esp + 0x3c], eax
lea edx, [ebp - 0x268]
lea eax, [esp + 0x40]
call fcn.00530f7c
inc dword [ebp - 0x2b0]
inc dword [ebp - 0x2b0]
mov edx, dword [ebp - 0x2d0]
push dword [edx + 0x6fc]
mov word [ebp - 0x2bc], 0x44
add dword [ebp - 0x2b0], 0xfffffffd
call fcn.0040ef20
add esp, 0x4c
push 0
add esp, 0xffffffbc
mov word [ebp - 0x2bc], 0x68
mov ecx, dword [ebp - 0x2a8]
mov dword [esp], ecx
mov eax, dword [ebp - 0x2a4]
mov dword [esp + 4], eax
mov edx, dword [ebp - 0x2a0]
mov dword [esp + 8], edx
mov ecx, dword [ebp - 0x29c]
mov dword [esp + 0xc], ecx
mov al, byte [ebp - 0x298]
mov byte [esp + 0x10], al
mov dl, byte [ebp - 0x297]
mov byte [esp + 0x11], dl
mov ecx, dword [ebp - 0x294]
mov dword [esp + 0x14], ecx
mov eax, dword [ebp - 0x290]
mov dword [esp + 0x18], eax
mov edx, dword [ebp - 0x28c]
mov dword [esp + 0x1c], edx
mov ecx, dword [ebp - 0x288]
mov dword [esp + 0x20], ecx
lea edx, [ebp - 0x284]
lea eax, [esp + 0x24]
call fcn.00530f7c
inc dword [ebp - 0x2b0]
mov ecx, dword [ebp - 0x280]
mov dword [esp + 0x28], ecx
mov eax, dword [ebp - 0x27c]
mov dword [esp + 0x2c], eax
mov edx, dword [ebp - 0x278]
mov dword [esp + 0x30], edx
mov ecx, dword [ebp - 0x274]
mov dword [esp + 0x34], ecx
mov eax, dword [ebp - 0x270]
mov dword [esp + 0x38], eax
mov edx, dword [ebp - 0x26c]
mov dword [esp + 0x3c], edx
lea edx, [ebp - 0x268]
lea eax, [esp + 0x40]
call fcn.00530f7c
inc dword [ebp - 0x2b0]
inc dword [ebp - 0x2b0]
mov ecx, dword [ebp - 0x2d0]
push dword [ecx + 0x700]
mov word [ebp - 0x2bc], 0x5c
add dword [ebp - 0x2b0], 0xfffffffd
call fcn.0040ef20
add esp, 0x4c
push 0
add esp, 0xffffffbc
mov word [ebp - 0x2bc], 0x80
mov eax, dword [ebp - 0x2a8]
mov dword [esp], eax
mov edx, dword [ebp - 0x2a4]
mov dword [esp + 4], edx
mov ecx, dword [ebp - 0x2a0]
mov dword [esp + 8], ecx
mov eax, dword [ebp - 0x29c]
mov dword [esp + 0xc], eax
mov dl, byte [ebp - 0x298]
mov byte [esp + 0x10], dl
mov cl, byte [ebp - 0x297]
mov byte [esp + 0x11], cl
invalid
invalid
insb byte es:[edi], dx