Function at 0x40cf50
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x28
mov eax, dword fs:[0x18]
mov edi, esp
lea ebx, [esp + 0x14]
mov eax, dword [eax + 0x30]
mov esi, dword [eax + 0xc]
add esi, 0xc
nop word cs:[eax + eax]
nop dword [eax + eax]
mov esi, dword [esi]
cmp dword [esi + 0x18], 0
je 0x40d01f
mov eax, dword [esi + 0x30]
movzx ecx, word [esi + 0x2c]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
push 0
push edi
push ebx
call fcn.0040b4b0
add esp, 0xc
cmp byte [esp + 0x14], 4
jne 0x40d027
cmp dword [esp + 0x18], 0xaddfe535
jne 0x40cf80
mov esi, dword [esi + 0x18]
mov ecx, esp
mov edx, esi
push 0xa2b1807f
call 0x40d050
add esp, 4
mov ecx, esp
mov edx, esi
push 0xced7e31f
call 0x40d050
add esp, 4
mov ecx, esp
mov edx, esi
push 0x91c3ed4a
call 0x40d050
add esp, 4
mov ecx, esp
mov edx, esi
push 0xb2036547
call 0x40d050
add esp, 4
mov ecx, esp
mov edx, esi
push 0xa596d8ce
call 0x40d050
add esp, 4
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movsd xmm0, qword [esp + 0x14]
lea eax, [esp + 0x1c]
movsd qword [esp + 0x1c], xmm0
push 0x536c70
push 0x536c4c
push eax
push 0
push 1
call fcn.004dc7d0
nop dword [eax + eax]
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x40
movzx eax, word [edx]
mov edi, edx
xor edx, edx
cmp eax, 0x5a4d
jne 0x40d191
mov eax, dword [edi + 0x3c]
cmp dword [eax + edi], 0x4550
jne 0x40d191
mov eax, dword [edi + eax + 0x78]
mov dword [esp + 4], ecx
mov esi, dword [eax + edi + 0x20]
mov edx, dword [eax + edi + 0x1c]
mov ecx, dword [eax + edi + 0x14]
mov ebx, dword [eax + edi + 0x18]
mov eax, dword [eax + edi + 0x24]
add eax, edi
add edx, edi
add esi, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], eax
xor eax, eax
mov dword [esp + 8], edx
nop word cs:[eax + eax]
nop dword [eax]
cmp eax, dword [esp + 0x14]
je 0x40d18b
mov ebx, eax
mov eax, dword [esi + eax*4]
mov ecx, 0xffffffff
add eax, edi
nop word cs:[eax + eax]
cmp byte [eax + ecx + 1], 0
lea ecx, [ecx + 1]
jne 0x40d0e0
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
push 0
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.0040b4b0
add esp, 0xc
cmp byte [esp + 0x18], 4
jne 0x40d19b
mov ecx, dword [ebp + 8]
lea eax, [ebx + 1]
cmp dword [esp + 0x1c], ecx
jne 0x40d0c0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
movzx eax, word [eax + ebx*2]
cmp ecx, eax
jbe 0x40d1bf
mov ecx, dword [esp + 8]
mov edx, 0
mov eax, dword [ecx + eax*4]
mov ecx, dword [esp + 4]
cmp byte [eax + edi], 0x4c
jne 0x40d191
add eax, edi
cmp byte [eax + 1], 0x8b
jne 0x40d191
cmp byte [eax + 2], 0xd1
jne 0x40d191
cmp byte [eax + 3], 0xb8
jne 0x40d191
cmp byte [eax + 6], 0
jne 0x40d191
cmp byte [eax + 7], 0
jne 0x40d191
movzx edx, byte [eax + 4]
or dl, byte [eax + 5]
mov dword [ecx + 4], eax
movzx edx, dl
mov word [ecx + 8], dx
mov edx, 1
jmp 0x40d191
mov ecx, dword [esp + 4]
xor edx, edx
mov dword [ecx], edx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movsd xmm0, qword [esp + 0x18]
lea eax, [esp + 0x34]
movsd qword [esp + 0x34], xmm0
push 0x536c70
push 0x536c4c
push eax
push 0
push 1
call fcn.004dc7d0
push 0x536c80
push ecx
push eax
call fcn.004dc480
nop
nop
nop