Function at 0x4a6bd0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d2e58
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
mov eax, dword [0x644904]
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
mov edx, dword [edi + 8]
mov esi, ecx
mov ecx, dword [edi + 4]
mov dword [ebp - 0x14], eax
mov eax, dword [edi]
mov dword [ebp - 0x48], ecx
lea ecx, [edi + 0x10]
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x4c], eax
mov eax, dword [edi + 0xc]
push ecx
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x40], eax
call dword [fcn.005ea350]
mov edx, dword [edi + 0x2c]
mov eax, dword [edi + 0x30]
mov ecx, dword [edi + 0x34]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
mov ebx, dword [esi + 4]
xor ecx, ecx
cmp ebx, ecx
mov dword [ebp - 4], ecx
je 0x4a6c5b
mov ecx, dword [esi + 0xc]
sub ecx, ebx
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edi, dword [ebp + 0xc]
test edi, edi
je 0x4a6ef4
test ebx, ebx
jne 0x4a6c6e
xor eax, eax
jmp 0x4a6c89
mov edx, dword [esi + 4]
mov ebx, dword [esi + 8]
sub ebx, edx
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, 0x4924924
sub edx, eax
cmp edx, edi
jae 0x4a6c9b
mov ecx, esi
call fcn.00498c90
mov eax, dword [esi + 4]
test eax, eax
jne 0x4a6ca6
xor eax, eax
jmp 0x4a6cc1
mov edx, dword [esi + 4]
mov ebx, dword [esi + 8]
sub ebx, edx
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, edi
cmp ecx, eax
jae 0x4a6dff
mov eax, ecx
shr eax, 1
mov edx, 0x4924924
sub edx, eax
cmp edx, ecx
jae 0x4a6cde
xor ecx, ecx
jmp 0x4a6ce0
add ecx, eax
mov eax, dword [esi + 4]
test eax, eax
jne 0x4a6ceb
xor eax, eax
jmp 0x4a6d06
mov edx, dword [esi + 4]
mov ebx, dword [esi + 8]
sub ebx, edx
mov eax, 0x92492493
imul ebx
add edx, ebx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, edi
cmp ecx, eax
jae 0x4a6d17
mov ecx, esi
call fcn.00498c60
mov ecx, eax
add ecx, edi
imul ecx, ecx, 0x38
push ecx
mov dword [ebp + 0xc], ecx
call fcn.005c8833
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 8]
push ecx
mov ebx, eax
mov eax, dword [esi + 4]
push esi
push ebx
push edx
push eax
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
mov byte [ebp - 4], 1
call fcn.0049a310
mov ecx, dword [ebp + 8]
add esp, 0x18
push ecx
push esi
lea edx, [ebp - 0x4c]
push edx
push edi
push eax
mov dword [ebp - 0x50], eax
call fcn.0049c5a0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0x50]
mov eax, edi
imul eax, eax, 0x38
add esp, 0x14
push edx
add ecx, eax
mov eax, dword [esi + 8]
push esi
push ecx
push eax
mov eax, dword [ebp + 8]
push eax
mov dword [ebp - 0x50], ecx
call fcn.0049a310
mov eax, dword [esi + 4]
add esp, 0x14
test eax, eax
mov dword [ebp - 4], 0
je 0x4a6da4
mov ecx, dword [esi + 8]
sub ecx, eax
mov eax, 0x92492493
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
add edi, eax
mov eax, dword [esi + 4]
test eax, eax
je 0x4a6dc5
mov ecx, dword [esi + 8]
push ecx
push eax
mov ecx, esi
call fcn.004a4cd0
mov eax, dword [esi + 4]
push eax
call fcn.005c88b6
add esp, 4
mov edx, dword [ebp + 0xc]
imul edi, edi, 0x38
add edx, ebx
add edi, ebx
mov dword [esi + 0xc], edx
mov dword [esi + 8], edi
mov dword [esi + 4], ebx
jmp 0x4a6ef4
mov ecx, dword [esi + 8]
mov ebx, dword [ebp + 8]
mov edx, ecx
sub edx, ebx
mov dword [ebp + 0x10], edx
mov eax, 0x92492493
imul edx
add edx, dword [ebp + 0x10]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, edi
mov dword [ebp - 0x54], ecx
jae 0x4a6ebc
mov edx, dword [ebp + 8]
mov eax, edi
imul eax, eax, 0x38
push edx
mov dword [ebp + 0x10], eax
push esi
add eax, ebx
push eax
push ecx
push ebx
call fcn.0049a310
mov ecx, dword [esi + 8]
add esp, 0x14
sub ecx, ebx
lea eax, [ebp - 0x4c]
push eax
mov eax, 0x92492493
imul ecx
mov eax, dword [esi + 8]
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
sub edi, ecx
push edi
push eax
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.004a4d00
mov edx, dword [esi + 8]
mov eax, dword [ebp + 0x10]
add edx, eax
mov dword [esi + 8], edx
mov esi, edx
lea edx, [ebp - 0x4c]
push edx
sub esi, eax
push esi
push ebx
mov dword [ebp - 4], 0
call fcn.00499d90
add esp, 0xc
jmp 0x4a6ef4
imul edi, edi, 0x38
mov eax, ecx
sub eax, edi
mov dword [ebp + 8], eax
mov edx, dword [ebp + 8]
push edx
push esi
push ecx
push ecx
push eax
call fcn.0049a310
mov ecx, dword [ebp + 8]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x54]
push eax
push ecx
push ebx
call fcn.00499df0
lea edx, [ebp - 0x4c]
push edx
add edi, ebx
push edi
push ebx
call fcn.00499d90
add esp, 0x2c
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 0xffffffff
call dword [fcn.005ea35c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.005c8895
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc