Function at 0x422890
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47430c
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x6051c4]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
mov dword [esi], vtable.irr::io::CXMLReaderImpl_unsigned_short_int__class_irr::io::IXMLBase_.0
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x1c], 0
push 2
mov dword [ebp - 4], 0
mov dword [esi + 0x20], 0
mov dword [esi + 0x24], 1
mov dword [esi + 0x28], 1
call fcn.0044e221
xor ecx, ecx
mov dword [esi + 0x20], eax
mov word [eax], cx
push 2
mov byte [ebp - 4], 1
mov dword [esi + 0x2c], ecx
mov dword [esi + 0x30], 1
mov dword [esi + 0x34], 1
call fcn.0044e221
xor ecx, ecx
mov dword [esi + 0x2c], eax
add esp, 8
mov word [eax], cx
mov dword [esi + 0x3c], ecx
mov dword [esi + 0x40], ecx
mov dword [esi + 0x44], ecx
mov word [esi + 0x48], 0x101
mov dword [esi + 0x4c], ecx
mov dword [esi + 0x50], ecx
mov dword [esi + 0x54], ecx
mov word [esi + 0x58], 0x101
mov ecx, dword [ebp + 8]
mov byte [ebp - 4], 4
test ecx, ecx
je 0x422bb2
mov dword [esi + 0x1c], 3
mov eax, dword [ecx]
call dword [eax + 8]
lea ebx, [eax + 4]
push ebx
call fcn.0044e221
mov edi, eax
lea ecx, [ebx - 4]
mov eax, dword [ebp + 8]
add esp, 4
mov edx, dword [eax]
push ecx
push edi
mov ecx, eax
call dword [edx + 4]
test eax, eax
jne 0x4229ae
push edi
call fcn.0044e21c
add esp, 4
jmp 0x422a5c
mov dword [edi + ebx - 4], 0
cmp ebx, 4
jl 0x4229f5
mov eax, dword [edi]
cmp eax, 0xfffe0000
jne 0x4229cd
mov dword [esi + 0x18], 4
jmp 0x4229db
cmp eax, 0xfeff
jne 0x4229f5
mov dword [esi + 0x18], 5
mov eax, ebx
mov ecx, esi
cdq
and edx, 3
add eax, edx
sar eax, 2
push eax
push edi
lea eax, [edi + 4]
push eax
call fcn.004223c0
jmp 0x422a5c
cmp ebx, 2
jl 0x422a4b
movzx eax, word [edi]
mov ecx, 0xfffe
cmp ax, cx
jne 0x422a24
mov eax, ebx
mov dword [esi + 0x18], 2
cdq
mov ecx, esi
sub eax, edx
sar eax, 1
push eax
push edi
lea eax, [edi + 2]
push eax
call fcn.00422110
jmp 0x422a5c
mov ecx, 0xfeff
cmp ax, cx
jne 0x422a4b
mov eax, ebx
mov dword [esi + 0x18], 3
cdq
mov ecx, esi
sub eax, edx
sar eax, 1
push eax
push edi
lea eax, [edi + 2]
push eax
call fcn.00422110
jmp 0x422a5c
push ebx
push edi
push edi
mov ecx, esi
mov dword [esi + 0x18], 0
call fcn.00421e30
cmp byte [ebp + 0xc], 0
je 0x422a6b
mov ecx, dword [ebp + 8]
push 1
mov eax, dword [ecx]
call dword [eax]
push str.amp_
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
call fcn.00421b40
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 5
push eax
lea ecx, [esi + 0x3c]
call fcn.00426030
push dword [ebp - 0x1c]
mov byte [ebp - 4], 4
call fcn.0044e21c
add esp, 4
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str._lt_
call fcn.00421b40
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 6
push eax
lea ecx, [esi + 0x3c]
call fcn.00426030
push dword [ebp - 0x1c]
mov byte [ebp - 4], 4
call fcn.0044e21c
add esp, 4
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str._gt_
call fcn.00421b40
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 7
push eax
lea ecx, [esi + 0x3c]
call fcn.00426030
push dword [ebp - 0x1c]
mov byte [ebp - 4], 4
call fcn.0044e21c
add esp, 4
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str._quot_
call fcn.00421b40
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 8
push eax
lea ecx, [esi + 0x3c]
call fcn.00426030
push dword [ebp - 0x1c]
mov byte [ebp - 4], 4
call fcn.0044e21c
add esp, 4
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.apos_
call fcn.00421b40
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 9
push eax
lea ecx, [esi + 0x3c]
call fcn.00426030
push dword [ebp - 0x1c]
call fcn.0044e21c
mov eax, dword [esi + 0xc]
add esp, 4
mov dword [esi + 8], eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8