Function at 0x4c1700
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4f1d08
push eax
mov dword fs:[0], esp
sub esp, 0x24
push esi
mov esi, ecx
push edi
lea eax, [esi + 0x34]
test eax, eax
je 0x4c1728
lea eax, [esi + 0x38]
jmp 0x4c172a
xor eax, eax
mov ecx, dword [eax]
mov edx, dword [esp + 0x3c]
mov eax, dword [eax + 4]
cmp ecx, edx
mov ecx, dword [esp + 0x40]
jne 0x4c1743
cmp eax, ecx
je 0x4c1996
mov eax, dword [esi + 0x74]
mov dword [esp + 0x14], ecx
mov dword [esp + 8], eax
mov eax, dword [esi + 0x78]
lea ecx, [esp + 8]
mov dword [esp + 0xc], eax
push ecx
mov dword [esp + 0x14], edx
call fcn.004346a0
lea edx, [esp + 0x14]
push edx
call fcn.004346a0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push eax
push ecx
call fcn.00434770
add esp, 0x10
test eax, eax
je 0x4c1996
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push edx
push eax
call fcn.00434770
add esp, 8
test eax, eax
je 0x4c1996
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4c17bd
mov edx, dword [esi + 0x78]
mov eax, dword [esi + 0x74]
lea ecx, [esp + 0x3c]
push ecx
push edx
push eax
mov ecx, esi
call fcn.004c48b0
lea ecx, [esp + 0x18]
mov dword [esi + 0xec], 1
call fcn.004ba030
mov ecx, dword [esi + 0x78]
mov edx, dword [esi + 0x74]
push 0
push ecx
push edx
lea ecx, [esp + 0x24]
mov dword [esp + 0x40], 0
call fcn.004ba080
lea eax, [esp + 0x18]
sub esp, 0x14
neg eax
sbb eax, eax
lea edx, [esp + 0x30]
and eax, edx
mov ecx, esp
lea edi, [esi + 0x20]
mov dword [esp + 0x58], esp
mov edx, dword [eax]
mov dword [ecx + 4], edx
mov eax, dword [eax + 4]
mov dword [ecx + 8], eax
mov edx, dword [esp + 0x38]
mov dword [ecx + 0xc], edx
mov eax, dword [esp + 0x3c]
mov dword [ecx + 0x10], eax
mov dword [ecx], 0x4f57e8
mov ecx, edi
call fcn.00416650
mov ecx, dword [esi + 0x78]
mov edx, dword [esp + 0x3c]
push 1
push ecx
push edx
lea ecx, [esp + 0x24]
call fcn.004ba060
lea eax, [esp + 0x18]
sub esp, 0x14
neg eax
sbb eax, eax
lea edx, [esp + 0x30]
and eax, edx
mov ecx, esp
mov dword [esp + 0x58], esp
mov edx, dword [eax]
mov dword [ecx + 4], edx
mov eax, dword [eax + 4]
mov dword [ecx + 8], eax
mov edx, dword [esp + 0x38]
mov dword [ecx + 0xc], edx
mov eax, dword [esp + 0x3c]
mov dword [ecx + 0x10], eax
mov dword [ecx], 0x4f57e8
mov ecx, edi
call fcn.00416650
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
push 1
push ecx
push edx
lea ecx, [esp + 0x24]
call fcn.004ba080
lea eax, [esp + 0x18]
sub esp, 0x14
neg eax
sbb eax, eax
lea edx, [esp + 0x30]
and eax, edx
mov ecx, esp
mov dword [esp + 0x58], esp
mov edx, dword [eax]
mov dword [ecx + 4], edx
mov eax, dword [eax + 4]
mov dword [ecx + 8], eax
mov edx, dword [esp + 0x38]
mov dword [ecx + 0xc], edx
mov eax, dword [esp + 0x3c]
mov dword [ecx + 0x10], eax
mov dword [ecx], 0x4f57e8
mov ecx, edi
call fcn.00416650
mov ecx, dword [esp + 0x40]
mov edx, dword [esi + 0x74]
push 1
push ecx
push edx
lea ecx, [esp + 0x24]
call fcn.004ba060
lea eax, [esp + 0x18]
sub esp, 0x14
neg eax
sbb eax, eax
lea edx, [esp + 0x30]
and eax, edx
mov ecx, esp
mov dword [esp + 0x58], esp
mov edx, dword [eax]
mov dword [ecx + 4], edx
mov eax, dword [eax + 4]
mov dword [ecx + 8], eax
mov edx, dword [esp + 0x38]
mov dword [ecx + 0xc], edx
mov eax, dword [esp + 0x3c]
mov dword [ecx + 0x10], eax
mov dword [ecx], 0x4f57e8
mov ecx, edi
call fcn.00416650
xor ecx, ecx
xor eax, eax
push 2
push ecx
push eax
lea ecx, [esp + 0x24]
call fcn.004ba080
lea eax, [esp + 0x18]
sub esp, 0x14
neg eax
sbb eax, eax
lea edx, [esp + 0x30]
and eax, edx
mov ecx, esp
mov dword [esp + 0x58], esp
mov edx, dword [eax]
mov dword [ecx + 4], edx
mov eax, dword [eax + 4]
mov dword [ecx + 8], eax
mov edx, dword [esp + 0x38]
mov dword [ecx + 0xc], edx
mov eax, dword [esp + 0x3c]
mov dword [ecx + 0x10], eax
mov dword [ecx], 0x4f57e8
mov ecx, edi
call fcn.00416650
lea ecx, [esp + 0x18]
mov dword [esp + 0x34], 0xffffffff
call fcn.004ba050
mov eax, 1
mov ecx, dword [esp + 0x2c]
mov dword fs:[0], ecx
pop edi
pop esi
add esp, 0x30
ret 0xc
mov ecx, dword [esp + 0x2c]
pop edi
xor eax, eax
mov dword fs:[0], ecx
pop esi
add esp, 0x30
ret 0xc