Function at 0x40ce40
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x140
mov esi, esp
mov dword [esi + 0x128], ebp
lea edi, [esi + 0x130]
lea edx, [esi + 0x32]
lea eax, [esi + 0x48]
lea ebx, [esi + 0x38]
mov dword [edi - 4], esp
mov dword [edi + 8], 0xffffffff
mov dword [edi + 4], 0x41c390
mov ecx, dword fs:[0]
mov dword [edi], ecx
lea ecx, [esi + 0x30]
mov dword fs:[0], edi
push ecx
push edx
push eax
push dword [ebp + 0x14]
push ebx
call fcn.0040dd70
add esp, 0x14
xor eax, eax
lea ecx, [esi + 0x18]
mov dword [ecx + 4], eax
mov dword [ecx], eax
mov dword [ecx + 8], eax
mov dword [edi + 8], eax
push eax
push 0xa
call fcn.0041cc26
cmp byte [esi + 0x23], 0
lea eax, [esi + 0x18]
jns 0x40cebd
mov eax, dword [esi + 0x18]
lea ecx, [esi + 0x28]
mov dword [esi + 4], eax
lea edx, [esi + 0x34]
mov dword [ecx], eax
lea eax, [esi + 0x88]
lea ecx, [esi + 0x24]
mov dword [edx], 0
lea edx, [esi + 0x17]
mov dword [ecx], eax
lea ecx, [esi + 0xb]
mov byte [edx], 0x45
mov byte [ecx], 1
mov ecx, dword [ebp + 0x10]
mov dword [esi + 0x10], ecx
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x40cf02
mov eax, dword [ecx + 0xc]
mov ebx, dword [esi + 4]
cmp eax, dword [ecx + 0x10]
je 0x40cf0b
movzx eax, word [eax]
jmp 0x40cf19
mov ebx, dword [esi + 4]
mov al, 1
xor ecx, ecx
jmp 0x40cf28
mov eax, dword [ecx]
mov dword [esi + 0xc], ecx
call dword [eax + 0x20]
mov ecx, dword [esi + 0xc]
mov ebx, dword [esi + 4]
xor edx, edx
cmp ax, 0xffff
sete al
je 0x40cf26
mov edx, ecx
mov ecx, edx
mov edx, dword [esi + 0x10]
mov dword [esi + 0xc], ecx
test edx, edx
je 0x40cf64
mov byte [esi + 0x14], al
mov eax, dword [edx + 0xc]
cmp eax, dword [edx + 0x10]
je 0x40cf42
movzx eax, word [eax]
jmp 0x40cf52
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0x20]
mov ecx, dword [esi + 0xc]
mov edx, dword [esi + 0x10]
mov ebx, dword [esi + 4]
cmp ax, 0xffff
mov al, byte [esi + 0x14]
je 0x40cf64
test al, al
jne 0x40cf6e
jmp 0x40d066
xor edx, edx
test al, al
jne 0x40d066
mov dword [esi + 0x10], edx
movzx edx, byte [esi + 0x23]
mov eax, dword [esi + 0x28]
test dl, dl
jns 0x40cf7f
mov edx, dword [esi + 0x1c]
mov edi, edx
add edx, ebx
cmp eax, edx
jne 0x40cfd1
mov dword [esi + 4], edi
lea eax, [edi + edi]
lea ecx, [esi + 0x18]
push 0
push eax
call fcn.0041cc26
mov eax, dword [esi + 0x20]
mov ecx, 0x7fffffff
and eax, ecx
mov ecx, 0xa
dec eax
cmp byte [esi + 0x23], 0
cmovns eax, ecx
lea ecx, [esi + 0x18]
push 0
push eax
call fcn.0041cc26
mov ecx, dword [esi + 0xc]
cmp byte [esi + 0x23], 0
lea ebx, [esi + 0x18]
jns 0x40cfc9
mov ebx, dword [esi + 0x18]
mov eax, dword [esi + 4]
add eax, ebx
mov dword [esi + 0x28], eax
mov eax, dword [ecx + 0xc]
movzx edx, word [esi + 0x30]
movzx edi, word [esi + 0x32]
mov dword [esi + 4], ebx
cmp eax, dword [ecx + 0x10]
je 0x40cfe9
movzx eax, word [eax]
jmp 0x40d001
mov eax, dword [ecx]
mov word [esi + 0x2e], di
mov word [esi + 0x14], dx
call dword [eax + 0x20]
mov ebx, dword [esi + 4]
movzx edx, word [esi + 0x14]
movzx edi, word [esi + 0x2e]
movzx ecx, dx
movzx edx, di
movzx eax, ax
lea edi, [esi + 0x48]
push edi
lea edi, [esi + 0x34]
xor al, 0x57
lea edi, [esi + 0x24]
push edi
lea edi, [esi + 0x88]
push edi
lea edi, [esi + 0x38]
push edi
push ecx
push edx
lea ecx, [esi + 0x28]
push ecx
push ebx
lea ecx, [esi + 0x17]
push ecx
lea ecx, [esi + 0xb]
push ecx
push eax
call fcn.0040de50
add esp, 0x30
mov ecx, dword [esi + 0xc]
test eax, eax
jne 0x40d060
mov eax, dword [ecx + 0xc]
cmp eax, dword [ecx + 0x10]
je 0x40d053
add eax, 2
mov dword [ecx + 0xc], eax
jmp 0x40ceee
mov eax, dword [ecx]
call dword [eax + 0x24]
mov ecx, dword [esi + 0xc]
jmp 0x40ceee
mov edx, dword [esi + 0x10]
mov ebx, dword [esi + 4]
movzx eax, byte [esi + 0x43]
mov dword [esi + 0x10], edx
test al, al
jns 0x40d074
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x40d09e
cmp byte [esi + 0xb], 0
je 0x40d09e
mov eax, dword [esi + 0x24]
lea edx, [esi + 0x88]
mov ecx, eax
sub ecx, edx
cmp ecx, 0x9f
jg 0x40d09e
mov ecx, dword [esi + 0x34]
lea edx, [eax + 4]
mov dword [esi + 0x24], edx
mov dword [eax], ecx
push dword [ebp + 0x18]
push dword [esi + 0x28]
push ebx
call fcn.0041bb43
add esp, 0xc
fstp dword [esi + 0x44]
mov ebx, dword [esi + 0xc]
movss xmm0, dword [esi + 0x44]
mov eax, dword [ebp + 0x1c]
movss dword [eax], xmm0
push dword [ebp + 0x18]
push dword [esi + 0x24]
lea eax, [esi + 0x88]
push eax
lea eax, [esi + 0x38]
push eax
call fcn.00414753
add esp, 0x10
test ebx, ebx
je 0x40d0e9
mov eax, dword [ebx + 0xc]
cmp eax, dword [ebx + 0x10]
je 0x40d0ef
movzx eax, word [eax]
jmp 0x40d0f9
mov dl, 1
xor ebx, ebx
jmp 0x40d105
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x20]
mov ebx, dword [esi + 0xc]
xor ecx, ecx
cmp ax, 0xffff
sete dl
cmove ebx, ecx
mov ecx, dword [esi + 0x10]
mov edi, dword [ebp + 8]
test ecx, ecx
je 0x40d11c
mov eax, dword [ecx + 0xc]
cmp eax, dword [ecx + 0x10]
je 0x40d122
movzx eax, word [eax]
jmp 0x40d136
test dl, dl
jne 0x40d141
jmp 0x40d147
mov eax, dword [ecx]
mov byte [esi + 4], dl
mov dword [esi + 0xc], ebx
call dword [eax + 0x20]
mov ebx, dword [esi + 0xc]
mov edi, dword [ebp + 8]
mov dl, byte [esi + 4]
cmp ax, 0xffff
sete al
xor dl, al
jne 0x40d147
mov eax, dword [ebp + 0x18]
or byte [eax], 2
cmp byte [esi + 0x23], 0
mov dword [edi], ebx
jns 0x40d15a
push dword [esi + 0x18]
call fcn.004e6856
add esp, 4
cmp byte [esi + 0x43], 0
jns 0x40d16b
push dword [esi + 0x38]
call fcn.004e6856
add esp, 4
mov eax, dword [esi + 0x130]
mov dword fs:[0], eax
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x18