Function at 0x42ce90
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x456ba8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
xor ebx, ebx
push ebp
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x30]
mov ebp, ecx
push eax
lea ecx, [esp + 0xc]
call dword [0x458230]
push ebx
lea ecx, [esp + 0xc]
mov dword [esp + 0x2c], ebx
call dword [0x4584b4]
cmp ax, 0x3c
jne 0x42d424
lea ecx, [esp + 8]
call dword [0x45829c]
dec eax
push eax
lea ecx, [esp + 0xc]
call dword [0x4584b4]
cmp ax, 0x3e
jne 0x42d424
push ebx
push 0x3e
lea ecx, [esp + 0x10]
call dword [0x4584a4]
inc eax
push eax
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x10]
call dword [0x4589b4]
lea ecx, [esp + 0x30]
mov byte [esp + 0x28], 1
call dword [0x45829c]
push eax
lea edx, [esp + 0x14]
push edx
lea ecx, [esp + 0x10]
call dword [0x458358]
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 2
call dword [0x4589a4]
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], 1
call dword [0x458b24]
lea ecx, [esp + 8]
call dword [0x458400]
lea ecx, [esp + 0x30]
call dword [0x45829c]
sub eax, 2
push eax
push 1
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x3c]
call dword [0x45838c]
push eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x2c], 3
call dword [0x4589a4]
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], 1
call dword [0x458b24]
lea ecx, [esp + 0x30]
call dword [0x4583fc]
push 0x45f0d0
lea ecx, [esp + 0x34]
call dword [0x458510]
cmp eax, 0xffffffff
je 0x42cfdc
push eax
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x38]
call dword [0x4589b4]
mov ebx, 1
mov byte [esp + 0x28], 4
mov dword [esp + 0x14], ebx
jmp 0x42cfe0
lea eax, [esp + 0x30]
push esi
lea esi, [ebp + 4]
push eax
mov ecx, esi
call dword [0x4589a4]
test bl, 1
mov dword [esp + 0x2c], 1
je 0x42d004
lea ecx, [esp + 0x14]
call dword [0x458b24]
mov ecx, esi
call dword [0x45829c]
push eax
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x3c]
call dword [0x458358]
push eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x30], 5
call dword [0x4589a4]
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 1
call dword [0x458b24]
lea ecx, [esp + 0x34]
call dword [0x458400]
mov ecx, esi
call dword [0x458980]
test al, al
lea ecx, [esp + 0x34]
je 0x42d07b
call dword [0x458b24]
lea ecx, [esp + 0xc]
call dword [0x458b24]
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
add esp, 0x24
ret 4
push edi
call dword [0x458980]
test al, al
jne 0x42d28a
mov bl, 6
lea esp, [esp]
push 0x45f0cc
lea ecx, [esp + 0x3c]
call dword [0x4589d8]
test eax, eax
je 0x42d3ce
push 0
push 0x3d
lea ecx, [esp + 0x40]
call dword [0x4584a4]
mov esi, eax
cmp esi, 0xffffffff
je 0x42d3b8
push esi
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x40]
call dword [0x4589b4]
inc esi
push esi
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x40]
mov byte [esp + 0x38], bl
call dword [0x458358]
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x34], 7
call dword [0x4589a4]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30], bl
call dword [0x458b24]
lea ecx, [esp + 0x38]
call dword [0x458400]
push 0
lea ecx, [esp + 0x3c]
call dword [0x4584b4]
cmp ax, 0x22
jne 0x42d193
push 1
lea edx, [esp + 0x24]
push edx
lea ecx, [esp + 0x40]
call dword [0x458358]
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x34], 8
call dword [0x4589a4]
lea ecx, [esp + 0x20]
mov byte [esp + 0x30], bl
call dword [0x458b24]
lea ecx, [esp + 0x38]
xor edi, edi
xor esi, esi
call dword [0x45829c]
test eax, eax
jle 0x42d193
push esi
lea ecx, [esp + 0x3c]
call dword [0x4584b4]
cmp ax, 0x22
jne 0x42d177
cmp di, 0x5c
jne 0x42d1d9
push esi
lea ecx, [esp + 0x3c]
call dword [0x4584b4]
lea ecx, [esp + 0x38]
inc esi
mov edi, eax
call dword [0x45829c]
cmp esi, eax
jl 0x42d160
lea ecx, [ebp + 4]
call dword [0x458284]
lea ecx, [ebp + 8]
call fcn.004527c6
lea ecx, [esp + 0x14]
call dword [0x458b24]
lea ecx, [esp + 0x38]
call dword [0x458b24]
lea ecx, [esp + 0x10]
call dword [0x458b24]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
add esp, 0x24
ret 4
cmp esi, 0xffffffff
je 0x42d193
push esi
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x40]
call dword [0x4589b4]
inc esi
push esi
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x40]
mov byte [esp + 0x38], 9
call dword [0x458358]
push eax
lea ecx, [esp + 0x3c]
mov byte [esp + 0x34], 0xa
call dword [0x4589a4]
lea ecx, [esp + 0x24]
mov byte [esp + 0x30], 9
call dword [0x458b24]
lea ecx, [esp + 0x38]
call dword [0x458400]
lea ecx, [esp + 0x14]
call dword [0x4584b8]
lea ecx, [esp + 0x18]
call dword [0x4589bc]
lea ecx, [esp + 0x14]
mov esi, eax
call dword [0x4589bc]
push esi
push eax
lea ecx, [ebp + 8]
call fcn.004527ba
mov ecx, eax
call dword [0x458290]
lea ecx, [esp + 0x18]
call dword [0x458b24]
lea ecx, [esp + 0x14]
mov byte [esp + 0x30], 1
call dword [0x458b24]
lea ecx, [esp + 0x38]
call dword [0x458980]
test al, al
je 0x42d090
lea ecx, [esp + 0x10]
call dword [0x458980]
test al, al
jne 0x42d3b8
push 0x3c
lea ecx, [esp + 0x14]
call dword [0x4584c0]
mov esi, eax
cmp esi, 0xffffffff
je 0x42d3b8
push esi
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x18]
call dword [0x458358]
push esi
lea eax, [esp + 0x28]
mov bl, 0xb
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x38], bl
call dword [0x4589b4]
push eax
lea ecx, [esp + 0x14]
mov byte [esp + 0x34], 0xc
call dword [0x4589a4]
lea ecx, [esp + 0x24]
mov byte [esp + 0x30], bl
call dword [0x458b24]
lea ecx, [esp + 0x10]
call dword [0x458954]
lea ecx, [esp + 0x14]
call dword [0x45829c]
sub eax, 2
push eax
push 1
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x20]
call dword [0x45838c]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], 0xd
call dword [0x4589a4]
lea ecx, [esp + 0x24]
mov byte [esp + 0x30], bl
call dword [0x458b24]
lea ecx, [esp + 0x14]
call dword [0x4583fc]
push 0
lea ecx, [esp + 0x18]
call dword [0x4584b4]
cmp ax, 0x2f
jne 0x42d193
push 1
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x1c]
call dword [0x458358]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x34], 0xe
call dword [0x4589a4]
lea ecx, [esp + 0x24]
mov byte [esp + 0x30], bl
call dword [0x458b24]
lea ecx, [esp + 0x14]
call dword [0x458400]
lea ecx, [esp + 0x14]
call dword [0x4589bc]
lea esi, [ebp + 4]
push eax
mov ecx, esi
call dword [0x4589d8]
test eax, eax
je 0x42d3de
mov ecx, esi
jmp 0x42d196
lea ecx, [ebp + 4]
call dword [0x458284]
lea ecx, [ebp + 8]
call fcn.004527c6
jmp 0x42d1ae
lea ecx, [esp + 0x10]
call dword [0x458980]
test al, al
je 0x42d3b8
jmp 0x42d3f6
lea eax, [esp + 0x10]
push eax
lea ecx, [ebp + 0x24]
call dword [0x4589a4]
lea ecx, [esp + 0x14]
call dword [0x458b24]
lea ecx, [esp + 0x38]
call dword [0x458b24]
lea ecx, [esp + 0x10]
call dword [0x458b24]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
add esp, 0x24
ret 4
lea ecx, [esp + 8]
call dword [0x458b24]
mov ecx, dword [esp + 0x20]
pop ebp
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x24
ret 4