Function at 0x4e3a60
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x27
push 0
push 0
dec ecx
jne 0x4e3a68
push ebx
push esi
push edi
mov eax, dword [0x4e9b28]
mov byte [eax], 1
mov eax, 0x4e34a0
call fcn.00406e44
xor eax, eax
push ebp
push 0x4e48ca
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [0x4eb5b4], 0
xor eax, eax
push ebp
push 0x4e475e
push dword fs:[eax]
mov dword fs:[eax], esp
xor ecx, ecx
mov dl, 1
mov eax, dword [0x4de5a4]
call fcn.00427620
mov edx, dword [0x4e95b8]
mov dword [edx], eax
call fcn.00402ae8
mov ebx, eax
test ebx, ebx
jle 0x4e3afc
mov esi, 1
lea edx, [ebp - 0x18]
mov eax, esi
call fcn.00402b48
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x14]
call fcn.00408c10
mov eax, dword [ebp - 0x14]
mov edx, 0x4e48e4
call fcn.00404cac
jne 0x4e3af8
mov byte [0x4eb5b4], 1
inc esi
dec ebx
jne 0x4e3acd
mov edx, 0x4eb5b0
xor eax, eax
mov al, byte [0x4eb5b4]
inc eax
call fcn.00402b48
cmp dword [0x4eb5b0], 0
je 0x4e3b52
lea edx, [ebp - 0x1c]
mov eax, dword [0x4eb5b0]
call fcn.00409698
cmp dword [ebp - 0x1c], 0
jne 0x4e3b52
lea edx, [ebp - 0x24]
xor eax, eax
call fcn.00402b48
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
call fcn.00409698
mov edx, dword [ebp - 0x20]
mov eax, 0x4eb5b0
mov ecx, dword [0x4eb5b0]
call fcn.00404bb4
mov eax, dword [0x4eb5b0]
call fcn.00409538
test al, al
jne 0x4e3b87
lea edx, [ebp - 0x2c]
xor eax, eax
call fcn.00402b48
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x28]
mov edx, 0x4e48f0
call fcn.00409604
mov edx, dword [ebp - 0x28]
mov eax, 0x4eb5b0
call fcn.00404904
mov ecx, dword [0x4eb5b0]
mov dl, 1
mov eax, dword [0x428034]
call fcn.004280e4
mov dword [0x4eb5bc], eax
xor eax, eax
push ebp
push 0x4e42d2
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x4e4900
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x4e4914
mov edx, 0x4e4928
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
push dword [ebp - 0x34]
push 0x4e493c
push 0x4e4948
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x4e4960
mov edx, 0x4e4928
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
push dword [ebp - 0x38]
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.00404c28
mov edx, dword [ebp - 0x30]
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x58]
call fcn.004526b4
push 0
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x4e4970
mov edx, 0x4e4928
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x3c]
mov eax, 0x4eb5ac
call fcn.00404904
cmp dword [0x4eb5ac], 0
je 0x4e3c5d
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x58]
mov eax, dword [eax + 0xa0]
mov ecx, dword [0x4eb5ac]
mov edx, 0x4e4984
call fcn.0041fab4
push 0
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x4e4998
mov edx, 0x4e4928
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x40]
mov eax, 0x4eb5ac
call fcn.00404904
cmp dword [0x4eb5ac], 0
je 0x4e3cac
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x58]
mov eax, dword [eax + 0xa0]
mov ecx, dword [0x4eb5ac]
mov edx, 0x4e49ac
call fcn.0041fab4
push 0
lea eax, [ebp - 0x44]
push eax
mov ecx, 0x4e49c4
mov edx, 0x4e4928
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x44]
mov eax, 0x4eb5ac
call fcn.00404904
cmp dword [0x4eb5ac], 0
je 0x4e3d3b
mov edx, 0x4e49dc
mov eax, dword [0x4eb5ac]
call fcn.00408d2c
test al, al
je 0x4e3d04
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
add eax, 0x8c
mov edx, 0x4e49ec
call fcn.00404904
lea eax, [ebp - 0x48]
push eax
mov eax, dword [0x4eb5ac]
mov dword [ebp - 0x50], eax
mov byte [ebp - 0x4c], 0xb
lea edx, [ebp - 0x50]
xor ecx, ecx
mov eax, 0x4e49f8
call fcn.00409f70
mov edx, dword [ebp - 0x48]
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x58]
mov eax, dword [eax + 0xa0]
mov ecx, dword [eax]
call dword [ecx + 0x38]
push 0x4e4a0c
lea eax, [ebp - 0x54]
push eax
mov ecx, 0x4e4a20
mov edx, 0x4e4928
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x54]
mov eax, 0x4eb5ac
call fcn.00404904
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x58]
mov eax, dword [eax + 0xa0]
mov ecx, dword [0x4eb5ac]
mov edx, 0x4e4a34
call fcn.0041fab4
push 0
lea eax, [ebp - 0x58]
push eax
mov ecx, 0x4e4a48
mov edx, 0x4e4a5c
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x58]
mov eax, dword [0x4e9424]
call fcn.00404904
push 0
lea eax, [ebp - 0x5c]
push eax
mov ecx, 0x4e4a6c
mov edx, 0x4e4a5c
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x5c]
mov eax, dword [0x4e9a54]
call fcn.00404904
push 0
lea eax, [ebp - 0x60]
push eax
mov ecx, 0x4e4a80
mov edx, 0x4e4a5c
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x60]
mov eax, dword [0x4e9dbc]
call fcn.00404904
push 0
lea eax, [ebp - 0x64]
push eax
mov ecx, 0x4e4a90
mov edx, 0x4e4a5c
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x64]
mov eax, dword [0x4e9998]
call fcn.00404904
push 0
lea eax, [ebp - 0x68]
push eax
mov ecx, 0x4e4aa4
mov edx, 0x4e4a5c
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x68]
mov eax, dword [0x4e9528]
call fcn.00404904
call fcn.0040b190
fsub dword [0x4e4aac]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov ecx, 0x4e4ab8
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx + 0x1c]
mov eax, dword [0x4e9218]
fstp qword [eax]
wait
push 1
mov ecx, 0x4e4ad8
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov dword [ebp - 0x6c], eax
fild dword [ebp - 0x6c]
fstp xword [ebp - 0x78]
wait
call fcn.0040b190
fld xword [ebp - 0x78]
fsubp st(1)
mov eax, dword [0x4e9824]
fstp qword [eax]
wait
push 0
mov ecx, 0x4e4aec
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [0x4e9860]
mov dword [edx], eax
push 0
mov ecx, 0x4e4b04
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [0x4e9900]
mov dword [edx], eax
push 0
mov ecx, 0x4e4b24
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [0x4e9270]
mov dword [edx], eax
push 0
lea eax, [ebp - 0x7c]
push eax
mov ecx, 0x4e4b34
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x4e9378]
call fcn.00404904
push 0
lea eax, [ebp - 0x80]
push eax
mov ecx, 0x4e4b4c
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x80]
mov eax, dword [0x4e9400]
call fcn.00404904
push 0x4e4b68
lea eax, [ebp - 0x84]
push eax
mov ecx, 0x4e4b74
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x84]
mov eax, dword [0x4e9760]
call fcn.00404904
push 0x4e4b68
lea eax, [ebp - 0x88]
push eax
mov ecx, 0x4e4b8c
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x88]
mov eax, dword [0x4e9dc8]
call fcn.00404904
push 0
lea eax, [ebp - 0x8c]
push eax
mov ecx, 0x4e4ba4
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x8c]
mov eax, dword [0x4e9a78]
call fcn.00404904
push 0
lea eax, [ebp - 0x90]
push eax
mov ecx, 0x4e4bb4
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x90]
mov eax, dword [0x4e9aa8]
call fcn.00404904
push 0
lea eax, [ebp - 0x94]
push eax
mov ecx, 0x4e4bc4
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x94]
mov eax, dword [0x4e97e0]
call fcn.00404904
push 0
lea eax, [ebp - 0x98]
push eax
mov ecx, 0x4e4bd8
mov edx, 0x4e4acc
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x98]
mov eax, dword [0x4e94c8]
call fcn.00404904
push 0
lea eax, [ebp - 0x9c]
push eax
mov ecx, 0x4e4bec
mov edx, 0x4e4aa4
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x9c]
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
add eax, 0x98
call fcn.00404904
push 0
lea eax, [ebp - 0xa0]
push eax
mov ecx, 0x4e4bfc
mov edx, 0x4e4aa4
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0xa0]
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
add eax, 0xa0
call fcn.00404904
push 0
lea eax, [ebp - 0xa4]
push eax
mov ecx, 0x4e4c10
mov edx, 0x4e4aa4
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0xa4]
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x9c]
call fcn.0041fbdc
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov ecx, dword [eax + 0xa4]
mov edx, 0x4e4c20
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx + 0x48]
push 0
lea eax, [ebp - 0xa8]
push eax
mov ecx, 0x4e4c30
mov edx, 0x4e4c40
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0xa8]
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x94]
mov eax, dword [eax + 0xc]
call fcn.0041fbdc
push 0
lea eax, [ebp - 0xac]
push eax
mov ecx, 0x4e4c50
mov edx, 0x4e4c40
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0xac]
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x94]
add eax, 0x18
call fcn.00404904
push 0
lea eax, [ebp - 0xb0]
push eax
mov ecx, 0x4e4c60
mov edx, 0x4e4c40
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0xb0]
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x94]
add eax, 0x1c
call fcn.00404904
push 0
lea eax, [ebp - 0xb4]
push eax
mov ecx, 0x4e4c74
mov edx, 0x4e4c40
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x94]
add eax, 0x20
call fcn.00404904
push 0
lea eax, [ebp - 0xb8]
push eax
mov ecx, 0x4e4c88
mov edx, 0x4e4c40
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0xb8]
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x94]
add eax, 0x24
call fcn.00404904
push 1
mov ecx, 0x4e4c98
mov edx, 0x4e4c40
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [0x4e95b8]
mov edx, dword [edx]
mov edx, dword [edx + 0x94]
mov dword [edx + 0x28], eax
push 0
lea eax, [ebp - 0xbc]
push eax
mov ecx, 0x4e4cb4
mov edx, 0x4e4c40
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0xbc]
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x94]
mov eax, dword [eax + 0x14]
add eax, 0x30
call fcn.00404904
push 0
lea eax, [ebp - 0xc0]
push eax
mov ecx, 0x4e4cc4
mov edx, 0x4e4c40
mov eax, dword [0x4eb5bc]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0xc0]
mov eax, dword [0x4e95b8]
mov eax, dword [eax]
mov eax, dword [eax + 0x94]
mov eax, dword [eax + 0x14]
add eax, 0x34
call fcn.00404904
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e42d9
mov eax, dword [0x4eb5bc]
call fcn.00403a9c
ret