Function at 0x408180
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
xor edx, edx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00403980
xor eax, eax
push ebp
push 0x408def
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, 0x408e04
call fcn.00407a18
mov eax, 0x41c778
mov edx, dword [ebp - 8]
mov edx, dword [edx]
call fcn.00403d88
mov eax, 0x41c780
mov edx, dword [ebp - 8]
mov edx, dword [edx + 4]
call fcn.00403d88
mov eax, 0x41c784
mov edx, dword [ebp - 8]
mov edx, dword [edx + 8]
call fcn.00403d88
mov eax, 0x41c788
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xc]
call fcn.00403d88
mov eax, 0x41c78c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x10]
call fcn.00403d88
mov eax, 0x41c790
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x14]
call fcn.00403d88
mov eax, 0x41c77c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x18]
call fcn.00403d88
mov eax, 0x41c7a4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1c]
call fcn.00403d88
mov eax, 0x41c7a8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x20]
call fcn.00403d88
mov eax, 0x41c7ac
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x24]
call fcn.00403d88
mov eax, 0x41c7c0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x28]
call fcn.00403d88
mov eax, 0x41c7c8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x2c]
call fcn.00403d88
mov eax, 0x41c7cc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x30]
call fcn.00403d88
mov eax, 0x41c7d0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x34]
call fcn.00403d88
mov eax, 0x41c7d4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x38]
call fcn.00403d88
mov eax, 0x41c7c4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x3c]
call fcn.00403d88
mov eax, 0x41c810
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x40]
call fcn.00403538
mov eax, 0x41c814
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x44]
call fcn.00403538
mov eax, 0x41c7d8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x48]
call fcn.00403538
mov eax, 0x41c7dc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x4c]
call fcn.00403538
mov eax, 0x41c7e0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x50]
call fcn.00403538
mov eax, 0x41c7e4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x54]
call fcn.00403538
mov eax, 0x41c7e8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x58]
call fcn.00403538
mov eax, 0x41c7ec
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x5c]
call fcn.00403538
mov eax, 0x41c7f0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x60]
call fcn.00403d88
mov eax, 0x41c7f4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x64]
call fcn.00403538
mov eax, 0x41c7f8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x68]
call fcn.00403538
mov eax, 0x41c7fc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x6c]
call fcn.00403538
mov eax, 0x41c800
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x70]
call fcn.00403538
mov eax, 0x41c804
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x74]
call fcn.00403538
mov eax, 0x41c808
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x78]
call fcn.00403d88
mov eax, 0x41c80c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x7c]
call fcn.00403d88
mov eax, 0x41c818
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x80]
call fcn.00403d88
mov eax, 0x41c81c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x84]
call fcn.00403d88
mov eax, 0x41c820
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x88]
call fcn.00403d88
mov eax, 0x41c824
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x8c]
call fcn.00403d88
mov eax, 0x41c828
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x90]
call fcn.00403d88
mov eax, 0x41c82c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x94]
call fcn.00403d88
mov eax, 0x41c830
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x98]
call fcn.00403d88
mov eax, 0x41c834
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x9c]
call fcn.00403d88
mov eax, 0x41c838
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xa0]
call fcn.00403d88
mov eax, 0x41c83c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xa4]
call fcn.00403d88
mov eax, 0x41c840
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xa8]
call fcn.00403d88
mov eax, 0x41c844
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xac]
call fcn.00403d88
mov eax, 0x41c848
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xb0]
call fcn.00403d88
mov eax, 0x41c84c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xb4]
call fcn.00403d88
mov eax, 0x41c850
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xb8]
call fcn.00403d88
mov eax, 0x41c854
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xbc]
call fcn.00403d88
mov eax, 0x41c858
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xc0]
call fcn.00403d88
mov eax, 0x41c85c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xc4]
call fcn.00403d88
mov eax, 0x41c860
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xc8]
call fcn.00403d88
mov eax, 0x41c864
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xcc]
call fcn.00403d88
mov eax, 0x41c868
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xd0]
call fcn.00403d88
mov eax, 0x41c86c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xd4]
call fcn.00403d88
mov eax, 0x41c870
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xd8]
call fcn.00403d88
mov eax, 0x41c874
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xdc]
call fcn.00403d88
mov eax, 0x41c878
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xe0]
call fcn.00403d88
mov eax, 0x41c87c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xe4]
call fcn.00403d88
mov eax, 0x41c880
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xe8]
call fcn.00403d88
mov eax, 0x41c884
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xec]
call fcn.00403d88
mov eax, 0x41c888
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xf0]
call fcn.00403d88
mov eax, 0x41c88c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xf4]
call fcn.00403d88
mov eax, 0x41c890
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xf8]
call fcn.00403d88
mov eax, 0x41c894
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0xfc]
call fcn.00403d88
mov eax, 0x41c898
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x100]
call fcn.00403d88
mov eax, 0x41c89c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x104]
call fcn.00403d88
mov eax, 0x41c8a0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x108]
call fcn.00403d88
mov eax, 0x41c8a4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x10c]
call fcn.00403d88
mov eax, 0x41c8a8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x110]
call fcn.00403d88
mov eax, 0x41c8ac
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x114]
call fcn.00403d88
mov eax, 0x41c8b0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x118]
call fcn.00403d88
mov eax, 0x41c8b4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x11c]
call fcn.00403d88
mov eax, 0x41c8b8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x120]
call fcn.00403d88
mov eax, 0x41c8bc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x124]
call fcn.00403d88
mov eax, 0x41c8c0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x128]
call fcn.00403d88
mov eax, 0x41c8c4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x12c]
call fcn.00403d88
mov eax, 0x41c8c8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x130]
call fcn.00403d88
mov eax, 0x41c8cc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x134]
call fcn.00403d88
mov eax, 0x41c8d0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x138]
call fcn.00403d88
mov eax, 0x41c8d4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x13c]
call fcn.00403d88
mov eax, 0x41c8d8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x140]
call fcn.00403d88
mov eax, 0x41c8dc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x144]
call fcn.00403d88
mov eax, 0x41c8e0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x148]
call fcn.00403d88
mov eax, 0x41c8e4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x14c]
call fcn.00403d88
mov eax, 0x41c8e8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x150]
call fcn.00403d88
mov eax, 0x41c8ec
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x154]
call fcn.00403d88
mov eax, 0x41c8f0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x158]
call fcn.00403d88
mov eax, 0x41c8f4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x15c]
call fcn.00403d88
mov eax, 0x41c8f8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x160]
call fcn.00403d88
mov eax, 0x41c8fc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x164]
call fcn.00403d88
mov eax, 0x41c900
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x168]
call fcn.00403d88
mov eax, 0x41c904
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x16c]
call fcn.00403d88
mov eax, 0x41c908
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x170]
call fcn.00403d88
mov eax, 0x41c90c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x174]
call fcn.00403d88
mov eax, 0x41c910
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x178]
call fcn.00403d88
mov eax, 0x41c914
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x17c]
call fcn.00403d88
mov eax, 0x41c918
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x180]
call fcn.00403d88
mov eax, 0x41c91c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x184]
call fcn.00403d88
mov eax, 0x41c920
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x188]
call fcn.00403538
mov eax, 0x41c924
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x18c]
call fcn.00403538
mov eax, 0x41c92c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x190]
call fcn.00403538
mov eax, 0x41c930
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x194]
call fcn.00403538
mov eax, 0x41c934
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x198]
call fcn.00403538
mov eax, 0x41c938
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x19c]
call fcn.00403d88
mov eax, 0x41c93c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1a0]
call fcn.00403d88
mov eax, 0x41c940
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1a4]
call fcn.00403d88
mov eax, 0x41c944
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1a8]
call fcn.00403d88
mov eax, 0x41c948
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1ac]
call fcn.00403d88
mov eax, 0x41c94c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1b0]
call fcn.00403d88
mov eax, 0x41c950
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1b4]
call fcn.00403d88
mov eax, 0x41c954
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1b8]
call fcn.00403d88
mov eax, 0x41c958
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1bc]
call fcn.00403d88
mov eax, 0x41c95c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1c0]
call fcn.00403d88
mov eax, 0x41c960
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1c4]
call fcn.00403d88
mov eax, 0x41c964
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1c8]
call fcn.00403d88
mov eax, 0x41c968
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1cc]
call fcn.00403d88
mov eax, 0x41c96c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1d0]
call fcn.00403d88
mov eax, 0x41c970
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1d4]
call fcn.00403d88
mov eax, 0x41c974
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1d8]
call fcn.00403d88
mov eax, 0x41c978
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1dc]
call fcn.00403d88
mov eax, 0x41c97c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1e0]
call fcn.00403d88
mov eax, 0x41c980
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1e4]
call fcn.00403d88
mov eax, 0x41c984
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1e8]
call fcn.00403538
mov eax, 0x41c988
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1ec]
call fcn.00403538
mov eax, 0x41c98c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1f0]
call fcn.00403538
mov eax, 0x41c990
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1f4]
call fcn.00403538
mov eax, 0x41c794
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1f8]
call fcn.00403d88
mov eax, 0x41c7b0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x1fc]
call fcn.00403d88
mov eax, 0x41c79c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x200]
call fcn.00403d88
mov eax, 0x41c7b8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x204]
call fcn.00403d88
mov eax, 0x41c798
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x208]
call fcn.00403d88
mov eax, 0x41c7b4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x20c]
call fcn.00403d88
mov eax, 0x41c994
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x210]
call fcn.00403538
mov eax, 0x41c998
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x214]
call fcn.00403538
mov eax, 0x41c99c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x218]
call fcn.00403538
mov eax, 0x41c9a0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x21c]
call fcn.00403538
mov eax, 0x41c9a4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x220]
call fcn.00403538
mov eax, 0x41c9a8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x224]
call fcn.00403538
mov eax, 0x41c9ac
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x228]
call fcn.00403538
mov eax, 0x41c9b0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x22c]
call fcn.00403d88
mov eax, 0x41c9b8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x230]
call fcn.00403538
mov eax, 0x41c9bc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x234]
call fcn.00403538
mov eax, 0x41c9c0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x238]
call fcn.00403538
mov eax, 0x41c9c4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x23c]
call fcn.00403538
mov eax, 0x41c9c8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x240]
call fcn.00403538
mov eax, 0x41c9cc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x244]
call fcn.00403538
mov eax, 0x41c9d0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x248]
call fcn.00403538
mov eax, 0x41c9d4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x24c]
call fcn.00403538
mov eax, 0x41c9d8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x250]
call fcn.00403538
mov eax, 0x41c9dc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x254]
call fcn.00403538
mov eax, 0x41c9e0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x258]
call fcn.00403538
mov eax, 0x41c9e4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x25c]
call fcn.00403538
mov eax, 0x41c9e8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x260]
call fcn.00403538
mov eax, 0x41c9ec
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x264]
call fcn.00403538
mov eax, 0x41c9f0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x268]
call fcn.00403538
mov eax, 0x41c9f4
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x26c]
call fcn.00403538
mov eax, 0x41c9f8
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x270]
call fcn.00403538
mov eax, 0x41c9fc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x274]
call fcn.00403538
mov eax, 0x41ca00
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x278]
call fcn.00403538
mov eax, 0x41ca04
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x27c]
call fcn.00403538
mov eax, 0x41ca08
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x280]
call fcn.00403538
mov eax, 0x41ca0c
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x284]
call fcn.00403538
mov eax, 0x41ca10
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x288]
call fcn.00403538
mov eax, 0x41ca14
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x28c]
call fcn.00403538
mov eax, 0x41ca18
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x290]
call fcn.00403538
mov eax, 0x41c928
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x294]
call fcn.00403538
mov eax, 0x41c7a0
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x298]
call fcn.00403d88
mov eax, 0x41c7bc
mov edx, dword [ebp - 8]
mov edx, dword [edx + 0x29c]
call fcn.00403d88
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x408df6
lea eax, [ebp - 8]
mov edx, dword [0x405f50]
call fcn.00404810
lea eax, [ebp - 4]
call fcn.004034e4
ret