Function at 0x48fc30
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x526e30
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push esi
mov esi, ecx
push 7
push 0x54c168
lea ecx, [esp + 0x18]
call fcn.004f58e0
push 7
push 0x54c160
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], 0
call fcn.004f58e0
push 0
lea ecx, [esp + 0xc]
mov byte [esp + 0x30], 1
call fcn.004f5870
push 0
push 3
push ecx
mov ebx, 2
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x54c158
mov byte [esp + 0x40], bl
call fcn.004f58e0
push ecx
mov byte [esp + 0x3c], 3
mov ecx, esp
mov dword [esp + 0x1c], esp
push 6
push 0x54c150
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x3c], bl
call fcn.004f91a0
cmp ax, bx
je 0x490003
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0
call fcn.004f5870
lea eax, [esp + 0xc]
lea edx, [esp + 0x14]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
mov byte [esp + 0x3c], 4
call fcn.004f5850
mov ecx, 0x5574f0
mov byte [esp + 0x38], bl
call fcn.004a3b90
test ax, ax
jge 0x48fd6e
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x5481e8
call fcn.004f58e0
mov ecx, esi
call fcn.00490050
lea ecx, [esp + 8]
mov byte [esp + 0x2c], 1
movzx si, al
call fcn.004f5980
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], 0
call fcn.004f5980
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], 0xffffffff
call fcn.004f5980
mov ax, si
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop esi
pop ebx
add esp, 0x28
ret
je 0x490003
push ecx
lea eax, [esp + 0xc]
mov esi, esp
mov dword [esp + 0x20], esp
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.004f5850
push esi
mov ecx, 0x5574f0
call fcn.004a4f60
lea ecx, [esp + 0xc]
call fcn.004f5b70
push 1
lea ecx, [esp + 0xc]
call fcn.004f5b60
cmp al, 0x70
jne 0x48ff34
push 3
lea ecx, [esp + 0xc]
call fcn.004f5b60
cmp al, bl
jne 0x48ff34
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push 6
push 0x54c158
call fcn.004f58e0
push ecx
mov byte [esp + 0x3c], 5
mov ecx, esp
mov dword [esp + 0x30], esp
push 6
push 0x54c148
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x3c], bl
call fcn.004f91a0
push 8
push 0x54c13c
lea ecx, [esp + 0x20]
call fcn.004f58e0
push 0
lea ecx, [esp + 0x10]
mov byte [esp + 0x30], 6
call fcn.004f5870
push ecx
mov byte [esp + 0x30], 7
mov ecx, esp
mov dword [esp + 0x24], esp
push 0
call fcn.004f5870
lea ecx, [esp + 0x10]
lea edx, [esp + 0x1c]
push ecx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov byte [esp + 0x3c], 8
call fcn.004f5850
mov ecx, 0x5574f0
mov byte [esp + 0x38], 7
call fcn.004a3b90
push ecx
lea eax, [esp + 0x10]
mov esi, esp
mov dword [esp + 0x24], esp
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.004f5850
push esi
mov ecx, 0x5574f0
call fcn.004a4f60
lea ecx, [esp + 0x10]
call fcn.004f5b70
push 3
lea ecx, [esp + 0x10]
call fcn.004f5b60
cmp al, 1
jne 0x48fec7
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54c158
call fcn.004f58e0
push ecx
mov byte [esp + 0x3c], 9
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54c134
jmp 0x48ff00
push 3
lea ecx, [esp + 0x10]
call fcn.004f5b60
cmp al, bl
jne 0x48ff14
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54c158
call fcn.004f58e0
push ecx
mov byte [esp + 0x3c], 0xa
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54c12c
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x3c], 7
call fcn.004f91a0
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 6
call fcn.004f5980
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], bl
call fcn.004f5980
jmp 0x490003
push 1
lea ecx, [esp + 0xc]
call fcn.004f5b60
cmp al, 0x70
jne 0x48ff7d
push ebx
lea ecx, [esp + 0xc]
call fcn.004f5b60
cmp al, 3
jne 0x48ff7d
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54c158
call fcn.004f58e0
push ecx
mov byte [esp + 0x3c], 0xb
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54c124
jmp 0x48fff0
push 1
lea ecx, [esp + 0xc]
call fcn.004f5b60
cmp al, 0x70
jne 0x48ffc6
push ebx
lea ecx, [esp + 0xc]
call fcn.004f5b60
cmp al, 4
jne 0x48ffc6
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54c158
call fcn.004f58e0
push ecx
mov byte [esp + 0x3c], 0xc
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54c11c
jmp 0x48fff0
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54c158
call fcn.004f58e0
push ecx
mov byte [esp + 0x3c], 0xd
mov ecx, esp
mov dword [esp + 0x2c], esp
push 6
push 0x54c114
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0x3c], bl
call fcn.004f91a0
lea ecx, [esp + 8]
mov byte [esp + 0x2c], 1
call fcn.004f5980
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], 0
call fcn.004f5980
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], 0xffffffff
call fcn.004f5980
mov ecx, dword [esp + 0x24]
pop esi
xor ax, ax
mov dword fs:[0], ecx
pop ebx
add esp, 0x28
ret