Function at 0x404010
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x42a810
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
mov eax, dword [esp + 0x24]
push ebx
push ebp
push esi
push edi
push eax
mov esi, ecx
push 0x83
mov dword [esp + 0x18], esi
call fcn.0041f6a7
mov dword [esp + 0x2c], 0
mov dword [esi], 0x42cc38
lea ebp, [esi + 0x70]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp], eax
mov byte [esp + 0x2c], 1
lea ebx, [esi + 0x74]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebx], eax
mov byte [esp + 0x2c], 2
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x78], eax
mov byte [esp + 0x2c], 3
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x7c], eax
mov byte [esp + 0x2c], 4
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x80], eax
mov byte [esp + 0x2c], 5
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x84], eax
mov byte [esp + 0x2c], 6
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x88], eax
mov byte [esp + 0x2c], 7
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x8c], eax
mov byte [esp + 0x2c], 8
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x90], eax
mov byte [esp + 0x2c], 9
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x94], eax
mov byte [esp + 0x2c], 0xa
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x98], eax
mov byte [esp + 0x2c], 0xb
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0x9c], eax
mov byte [esp + 0x2c], 0xc
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0xa0], eax
mov byte [esp + 0x2c], 0xd
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0xa4], eax
mov byte [esp + 0x2c], 0xe
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0xa8], eax
mov byte [esp + 0x2c], 0xf
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0xac], eax
mov byte [esp + 0x2c], 0x10
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0xb0], eax
mov byte [esp + 0x2c], 0x11
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esi + 0xb4], eax
push 0xc
mov byte [esp + 0x30], 0x12
call fcn.0041f569
add esp, 4
mov edi, eax
test edi, edi
je 0x404251
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [edi], eax
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [edi + 4], eax
jmp 0x404253
xor edi, edi
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
xor eax, eax
mov dword [esi + 0xd4], eax
mov dword [esi + 0xbc], eax
lea eax, [esi + 0xc4]
mov dword [eax], ecx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x20]
mov dword [eax + 8], ecx
mov dword [esi + 0xdc], edi
mov dword [eax + 0xc], edx
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
mov ecx, ebp
mov byte [esp + 0x30], 0x13
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4042cb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
mov ecx, ebx
mov byte [esp + 0x30], 0x14
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40430e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0x78]
mov byte [esp + 0x30], 0x15
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404352
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0x7c]
mov byte [esp + 0x30], 0x16
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404396
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0x80]
mov byte [esp + 0x30], 0x17
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4043dd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0x84]
mov byte [esp + 0x30], 0x18
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404424
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0x88]
mov byte [esp + 0x30], 0x19
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40446b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0x8c]
mov byte [esp + 0x30], 0x1a
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4044b2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0x90]
mov byte [esp + 0x30], 0x1b
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4044f9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0x94]
mov byte [esp + 0x30], 0x1c
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404540
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0x98]
mov byte [esp + 0x30], 0x1d
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404587
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0x9c]
mov byte [esp + 0x30], 0x1e
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4045ce
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0xa0]
mov byte [esp + 0x30], 0x1f
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404615
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0xa4]
mov byte [esp + 0x30], 0x20
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40465c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0xa8]
mov byte [esp + 0x30], 0x21
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4046a3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0xac]
mov byte [esp + 0x30], 0x22
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4046ea
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
call fcn.0041f494
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x34], edi
lea eax, [esp + 0x34]
push eax
lea ecx, [esi + 0xb0]
mov byte [esp + 0x30], 0x23
call fcn.00401820
lea eax, [edi - 0x10]
mov byte [esp + 0x2c], 0x12
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404731
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0x24]
pop edi
mov byte [esi + 0xd8], 0
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x20
ret 4