Function at 0x409e80
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4939d0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x2c], esi
lea ecx, [esi + 0x100014]
call fcn.00492156
lea ebx, [esi + 0x100018]
mov dword [esp + 0x54], 0
mov ecx, ebx
call fcn.00492156
lea ecx, [esi + 0x10001c]
mov byte [esp + 0x54], 1
call fcn.00492156
lea ecx, [esi + 0x100020]
mov byte [esp + 0x54], 2
call fcn.00492156
lea ebp, [esi + 0x100024]
mov byte [esp + 0x54], 3
mov ecx, ebp
call fcn.00492156
lea ecx, [esi + 0x100028]
mov byte [esp + 0x54], 4
call fcn.00492156
lea ecx, [esi + 0x10002c]
mov byte [esp + 0x54], 5
call fcn.00492156
lea edi, [esi + 0x100030]
push 0
mov ecx, edi
mov byte [esp + 0x58], 6
call fcn.004923fc
mov dword [edi], 0x4970d4
add edi, 8
push edi
call dword [0x496058]
xor edi, edi
push 0x4ca954
mov ecx, ebx
mov byte [esp + 0x58], 7
mov dword [esi + 4], edi
mov dword [esi], edi
mov dword [esi + 8], edi
mov dword [esi + 0xc], edi
call fcn.0049225e
push 0x4ca954
lea ecx, [esi + 0x100020]
call fcn.0049225e
push 0x4ca954
lea ecx, [esi + 0x10001c]
call fcn.0049225e
push 0x4ca954
lea ecx, [esi + 0x100028]
call fcn.0049225e
push 0x4bf7a8
mov ecx, ebp
mov dword [esi + 0x10], edi
call fcn.0049225e
lea ecx, [esp + 0x10]
call fcn.00492156
lea ecx, [esp + 0x30]
mov byte [esp + 0x54], 8
call fcn.004923f6
push str..
lea eax, [esp + 0x20]
push ebp
push eax
mov byte [esp + 0x60], 9
mov dword [esp + 0x20], edi
call fcn.004922fa
mov eax, dword [eax]
push edi
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x5c], 0xa
call fcn.004923f0
lea ecx, [esp + 0x1c]
mov edi, eax
mov byte [esp + 0x54], 9
call fcn.0049214a
test edi, edi
je 0x40a097
mov edi, dword [0x496634]
lea ecx, [esp + 0x30]
call fcn.004923ea
lea ecx, [esp + 0x30]
mov dword [esp + 0x24], eax
call fcn.004923e4
test eax, eax
jne 0x40a081
mov edx, dword [esp + 0x30]
push 0x10
lea ecx, [esp + 0x34]
call dword [edx + 0x40]
test eax, eax
je 0x40a081
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x30]
push eax
call fcn.004923de
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x58], 0xb
call fcn.004922ee
lea ecx, [esp + 0x1c]
mov byte [esp + 0x54], 9
call fcn.0049214a
lea ecx, [esp + 0x10]
call fcn.004923d8
push 0x4bf798
lea ecx, [esp + 0x24]
call fcn.0049228e
mov eax, dword [eax]
mov ecx, dword [esp + 0x10]
push eax
push ecx
call edi
add esp, 8
lea ecx, [esp + 0x20]
test eax, eax
sete bl
call fcn.0049214a
test bl, bl
jne 0x40a08f
mov eax, dword [esp + 0x24]
test eax, eax
jne 0x409ff5
jmp 0x40a097
mov dword [esp + 0x14], 1
push 0x4bf798
lea ecx, [esp + 0x2c]
call fcn.0049228e
mov edi, eax
push 0x4bf79c
lea ecx, [esp + 0x20]
mov byte [esp + 0x58], 0xc
call fcn.0049228e
push eax
lea edx, [esp + 0x24]
push ebp
push edx
mov byte [esp + 0x60], 0xd
call fcn.004922f4
push edi
push eax
lea eax, [esp + 0x2c]
mov bl, 0xe
push eax
mov byte [esp + 0x60], bl
call fcn.004922f4
lea edi, [esi + 0x100028]
push eax
mov ecx, edi
mov byte [esp + 0x58], 0xf
call fcn.004922ee
lea ecx, [esp + 0x24]
mov byte [esp + 0x54], bl
call fcn.0049214a
lea ecx, [esp + 0x20]
mov byte [esp + 0x54], 0xd
call fcn.0049214a
lea ecx, [esp + 0x1c]
mov byte [esp + 0x54], 0xc
call fcn.0049214a
lea ecx, [esp + 0x28]
mov byte [esp + 0x54], 9
call fcn.0049214a
mov eax, dword [esp + 0x14]
test eax, eax
jne 0x40a13b
mov edi, dword [edi]
push edi
call dword [0x4965e0]
add esp, 4
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.0040a770
push 0xa
lea edx, [esp + 0x2c]
push 0
push edx
lea ecx, [esp + 0x24]
mov byte [esp + 0x60], 0x10
call fcn.00492324
push eax
lea ecx, [esi + 0x100020]
mov byte [esp + 0x58], 0x11
call fcn.004922ee
lea ecx, [esp + 0x28]
mov byte [esp + 0x54], 0x10
call fcn.0049214a
lea ecx, [esp + 0x18]
mov byte [esp + 0x54], 9
call fcn.0049214a
lea ecx, [esp + 0x30]
mov byte [esp + 0x54], 8
call fcn.004923d2
lea ecx, [esp + 0x10]
mov byte [esp + 0x54], 7
call fcn.0049214a
mov ecx, dword [esp + 0x4c]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x48
ret