Function at 0x10046730
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x100fc662
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
mov eax, dword [esp + 0x28]
mov dl, byte [esp + 0x30]
push ebx
push ebp
push esi
mov esi, ecx
mov ecx, dword [esp + 0x30]
mov dword [esi], eax
mov al, byte [esp + 0x3c]
mov dword [esi + 0x23c], ecx
xor ebx, ebx
lea ecx, [esi + 0x24c]
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x248], ebx
push edi
mov dword [esp + 0x10], esi
mov byte [ecx], dl
mov byte [ecx + 1], al
mov byte [ecx + 8], bl
call fcn.1004aaf0
mov dl, byte [esp + 0x40]
mov al, byte [esp + 0x40]
lea ecx, [esi + 0x25c]
mov dword [esp + 0x2c], ebx
mov byte [ecx], dl
mov byte [ecx + 1], al
mov byte [ecx + 8], bl
call fcn.1004b230
mov dl, byte [esp + 0x40]
mov al, byte [esp + 0x40]
lea ecx, [esi + 0x26c]
mov byte [esp + 0x2c], 1
mov byte [ecx], dl
mov byte [ecx + 1], al
mov byte [ecx + 8], bl
call fcn.1004b990
mov dl, byte [esp + 0x40]
mov al, byte [esp + 0x40]
lea ecx, [esi + 0x27c]
mov byte [esp + 0x2c], 2
mov byte [ecx], dl
mov byte [ecx + 1], al
mov byte [ecx + 8], bl
call fcn.1004c0f0
mov dl, byte [esp + 0x40]
mov al, byte [esp + 0x40]
lea ecx, [esi + 0x28c]
mov byte [esp + 0x2c], 3
mov byte [ecx], dl
mov byte [ecx + 1], al
mov byte [ecx + 8], bl
call fcn.1004c830
mov cl, byte [esp + 0x40]
mov dl, byte [esp + 0x40]
lea edi, [esi + 0x29c]
push 1
mov byte [edi], cl
push ebx
mov ecx, edi
mov byte [esp + 0x34], 4
mov byte [edi + 1], dl
mov byte [edi + 8], bl
call fcn.1004d880
lea ecx, [esp + 0x38]
mov ebp, eax
call fcn.1008cbab
cmp dword [0x1012bb94], ebx
jne 0x10046855
mov eax, ebp
mov dword [0x1012bb94], eax
mov dword [eax], ebx
mov eax, dword [0x1012bb94]
xor ebp, ebp
mov dword [eax + 8], ebx
inc dword [0x1012bb90]
lea ecx, [esp + 0x38]
call fcn.1008cc47
cmp ebp, ebx
je 0x10046871
push ebp
call fcn.1008cc5c
add esp, 4
mov ecx, dword [0x1012bb94]
push ebx
push ecx
mov ecx, edi
call fcn.1004d880
mov dword [edi + 4], eax
mov dword [edi + 0xc], ebx
mov dword [eax], eax
mov edi, dword [edi + 4]
mov dword [edi + 8], edi
mov eax, dword [esi]
mov edx, dword [eax]
lea ecx, [esi + 4]
push ecx
push 0x101027b0
push eax
mov byte [esp + 0x38], 5
call dword [edx]
push 0x144
call fcn.10099f75
add esp, 4
mov dword [esp + 0x34], eax
cmp eax, ebx
mov ebp, dword [esp + 0x3c]
mov byte [esp + 0x2c], 6
je 0x100468cd
push ebx
push ebp
push esi
mov ecx, eax
call fcn.10043f20
jmp 0x100468cf
xor eax, eax
push 0x144
mov byte [esp + 0x30], 5
mov dword [esi + 0x240], eax
call fcn.10099f75
add esp, 4
mov dword [esp + 0x34], eax
cmp eax, ebx
mov byte [esp + 0x2c], 7
je 0x10046904
mov edx, dword [esp + 0x40]
push ebx
push edx
push esi
mov ecx, eax
call fcn.10043f20
jmp 0x10046906
xor eax, eax
mov ecx, dword [esi + 0x240]
mov byte [esp + 0x2c], 5
mov dword [esi + 0x244], eax
call fcn.10044a30
mov ecx, dword [esi + 0x244]
call fcn.10044a30
mov al, byte [esp + 0x40]
or ecx, 0xffffffff
mov byte [esp + 0x14], al
xor eax, eax
mov edi, str.courier
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.courier
lea ecx, [esp + 0x1c]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
call fcn.100021fe
push ebx
push 0xc
lea ecx, [esp + 0x1c]
push ecx
mov ecx, esi
mov byte [esp + 0x38], 8
call fcn.10047e80
mov dword [esi + 0x248], eax
mov eax, dword [esp + 0x18]
cmp eax, ebx
mov byte [esp + 0x2c], 5
je 0x1004699c
lea ecx, [eax - 1]
mov al, byte [ecx]
cmp al, bl
je 0x10046993
cmp al, 0xff
je 0x10046993
dec al
mov byte [ecx], al
jmp 0x1004699c
push ecx
call fcn.1008cc5c
add esp, 4
mov edx, dword [esi + 0x248]
mov ecx, dword [esi + 0x240]
push edx
call fcn.10044800
mov eax, dword [esi + 0x248]
mov ecx, dword [esi + 0x244]
push eax
call fcn.10044800
lea edx, [esi + 0xfc]
xor eax, eax
mov edi, edx
mov ecx, 8
rep stosd dword es:[edi], eax
push edx
mov dword [edx], 0x20
mov ecx, dword [ebp]
push ebp
call dword [ecx + 0x54]
cmp ebp, dword [esp + 0x40]
lea edi, [esi + 0x8ac]
mov dword [edi], ebx
je 0x10046a13
mov edx, dword [ebp]
push edi
push 0x10102780
push ebp
call dword [edx]
test eax, eax
jl 0x10046a13
mov eax, dword [edi]
mov ecx, dword [eax]
lea edx, [esi + 0x2ac]
push edx
push ebx
push eax
call dword [ecx + 0xc]
test eax, eax
jge 0x10046a13
mov dword [edi], ebx
cmp dword [edi], ebx
jne 0x10046a3a
lea eax, [esi + 0x6ac]
mov word [eax - 0x200], bx
mov word [eax], bx
mov word [eax - 0x400], bx
inc ebx
add eax, 2
cmp ebx, 0x100
jl 0x10046a1d
mov ecx, dword [esp + 0x24]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x20
ret 0x14