Function at 0x5427e0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x5427e8
push ebx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x542ae9
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 5], 0
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0xd8]
cmp ebx, 0xffffffff
je 0x542abe
lea ecx, [ebp - 0x24]
mov edx, ebx
mov eax, dword [0x570298]
mov eax, dword [eax + 0x30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x24]
lea eax, [ebp - 0x20]
mov edx, 0x542b00
call fcn.00404a44
mov ecx, dword [ebp - 0x20]
mov eax, 0x542b14
mov edx, 0x800080
call fcn.004ffb74
push 0x66
push 0x542b20
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xd8]
mov eax, dword [0x570298]
mov eax, dword [eax + 0x30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
push dword [ebp - 0x2c]
push 0x542b4c
push 0x542b58
lea eax, [ebp - 0x28]
mov edx, 4
call fcn.00404ab8
mov eax, dword [ebp - 0x28]
push eax
mov ecx, 1
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.0053f2d8
xor eax, eax
push ebp
push 0x542ab7
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
mov ecx, 0xe
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0052fd40
xor ecx, ecx
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00532628
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x7c0], edx
mov eax, dword [ebp - 4]
add eax, 0x79c
call fcn.00404724
mov eax, dword [ebp - 4]
call fcn.0053443c
test al, al
jne 0x5428f1
call fcn.004041ac
jmp 0x542abe
push 0
mov eax, dword [ebp - 4]
add eax, 0x6c0
call fcn.00406534
push eax
push 0
lea eax, [ebp - 0x14]
push eax
push 0
push 0
mov eax, dword [ebp - 4]
lea ecx, [eax + 0xd8]
mov edx, dword [0x570298]
mov eax, dword [ebp - 4]
call fcn.0053198c
test al, al
jne 0x542930
call fcn.004041ac
jmp 0x542abe
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6c0]
xor edx, edx
call fcn.0050676c
test al, al
je 0x54295b
cmp dword [ebp - 0x18], 4
setge al
mov edx, dword [ebp - 4]
mov byte [edx + 0x908], al
mov eax, dword [ebp - 4]
add eax, 0x678
call fcn.00406534
push eax
push 0x542b68
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6c0]
push eax
push 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6c8]
push eax
mov eax, dword [eax]
call dword [eax + 0x18]
test eax, eax
sete bl
mov eax, dword [ebp - 4]
mov byte [eax + 0x958], bl
mov eax, ebx
mov ecx, 0x542b80
mov edx, 0xff0000
call fcn.004ffb4c
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x6c0]
xor eax, eax
call fcn.0050b5d0
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
add eax, 0x79c
call fcn.00404778
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x7c0], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x79c]
mov eax, 0x542bac
mov edx, 0x808080
call fcn.004ffb74
mov eax, dword [ebp - 4]
add eax, 0x6b8
call fcn.00406534
push eax
push 0x542bbc
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x6c0]
push eax
mov eax, dword [eax]
call dword [eax]
test eax, eax
jne 0x542a27
mov eax, dword [ebp - 4]
mov byte [eax + 0x958], 1
mov eax, dword [ebp - 4]
call fcn.00542000
mov byte [ebp - 5], 1
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xd8]
mov eax, dword [0x570298]
mov eax, dword [eax + 0x30]
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x34]
mov edx, 0x542bd4
call fcn.00404a44
mov ecx, dword [ebp - 0x34]
mov eax, 0x542b14
mov edx, 0x800080
call fcn.004ffb74
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x542abe
cmp dword [ebp - 0xc], 0
je 0x542a81
lea eax, [ebp - 0xc]
call fcn.00406534
cmp dword [ebp - 0x10], 0
je 0x542a8f
lea eax, [ebp - 0x10]
call fcn.00406534
push 0x69
push 0x542bf0
mov ecx, 1
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.0053f2d8
push 0
mov ecx, 0xf
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.0052fd40
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x542af0
lea eax, [ebp - 0x38]
mov edx, 7
call fcn.00404748
lea eax, [ebp - 0x10]
call fcn.00406534
lea eax, [ebp - 0xc]
call fcn.00406534
ret