Function at 0x4368d0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4cc6c8
push eax
mov dword fs:[0], esp
mov eax, dword [esp + 0x14]
sub esp, 0x18
push ebx
push ebp
push esi
mov ebx, edx
test ecx, ecx
jne 0x4369ab
movzx edx, word [eax]
test dx, dx
je 0x4369b2
movzx ecx, dx
add eax, 2
lea esi, [esp + 0x3c]
call fcn.00442d80
mov ebx, eax
mov dword [esp + 0x2c], 0
mov esi, dword [edi]
mov ebp, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test esi, esi
je 0x43693a
push esi
call ebp
test eax, eax
jne 0x43693a
push esi
call fcn.0049e96f
add esp, 4
mov eax, dword [ebx]
mov dword [edi], eax
test eax, eax
je 0x436949
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov dword [esp + 0x2c], 0xffffffff
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x43696b
push eax
mov esi, eax
call ebp
test eax, eax
jne 0x43696b
push esi
call fcn.0049e96f
add esp, 4
mov eax, dword [edi]
test eax, eax
je 0x436976
mov eax, dword [eax + 4]
jmp 0x436978
xor eax, eax
test eax, eax
je 0x43697f
sub eax, 2
test eax, 0xfffffffe
jne 0x436992
mov esi, 0x4d9158
mov eax, edi
call fcn.00490590
mov eax, 0x4e060c
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 0xc
cmp word [eax], 0
je 0x4369b2
dec ecx
cmp dword [esp + 0x3c], 0
je case.0x436a18.4
mov eax, dword [esp + 0x34]
mov ebp, dword [eax + 8]
cmp ebp, 0x1d
je case.0x436a18.4
cmp ebp, 0x21
je case.0x436a18.4
xor esi, esi
mov eax, ebx
test ecx, ecx
jle 0x4369fd
mov edx, dword [eax]
test edx, edx
je case.0x436a18.4
add eax, edx
mov edx, eax
sub edx, ebx
cmp edx, dword [esp + 0x3c]
ja case.0x436a18.4
inc esi
cmp esi, ecx
jl 0x4369de
test eax, eax
je case.0x436a18.4
lea edx, [ebp - 1]
cmp edx, 0x25
ja case.0x436a18.4
movzx edx, byte [edx + 0x436cb4]
jmp dword [edx*4 + 0x436c90]
mov ecx, dword [eax + 0x3c]
shr ecx, 1
add eax, 0x5e
lea esi, [esp + 0x38]
call fcn.00442d80
push eax
mov esi, edi
mov dword [esp + 0x30], 1
call fcn.004018d0
lea eax, [esp + 0x38]
mov dword [esp + 0x2c], 0xffffffff
call fcn.00401970
mov eax, 0x4d9064
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 0xc
mov ecx, dword [eax + 0x3c]
shr ecx, 1
add eax, 0x40
lea esi, [esp + 0x34]
call fcn.00442d80
push eax
mov esi, edi
mov dword [esp + 0x30], 2
call fcn.004018d0
lea eax, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.00401970
mov eax, 0x4d9064
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 0xc
mov ecx, dword [eax + 0x3c]
shr ecx, 1
add eax, 0x44
lea esi, [esp + 0xc]
call fcn.00442d80
push eax
mov esi, edi
mov dword [esp + 0x30], 3
call fcn.004018d0
lea eax, [esp + 0xc]
mov dword [esp + 0x2c], 0xffffffff
call fcn.00401970
mov eax, 0x4d9064
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 0xc
mov ecx, dword [eax + 0x3c]
shr ecx, 1
add eax, 0x68
lea esi, [esp + 0x10]
call fcn.00442d80
push eax
mov esi, edi
mov dword [esp + 0x30], 4
call fcn.004018d0
lea eax, [esp + 0x10]
mov dword [esp + 0x2c], 0xffffffff
call fcn.00401970
mov eax, 0x4d9064
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 0xc
mov ecx, dword [eax + 0x3c]
shr ecx, 1
add eax, 0x50
lea esi, [esp + 0x14]
call fcn.00442d80
push eax
mov esi, edi
mov dword [esp + 0x30], 5
call fcn.004018d0
lea eax, [esp + 0x14]
mov dword [esp + 0x2c], 0xffffffff
call fcn.00401970
mov eax, 0x4d9064
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 0xc
mov ecx, dword [eax + 8]
shr ecx, 1
add eax, 0xc
lea esi, [esp + 0x18]
call fcn.00442d80
push eax
mov esi, edi
mov dword [esp + 0x30], 6
call fcn.004018d0
lea eax, [esp + 0x18]
mov dword [esp + 0x2c], 0xffffffff
call fcn.00401970
mov eax, 0x4d9064
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 0xc
lea eax, [ecx + ecx*8]
lea ecx, [esp + 0x1c]
lea ebx, [ebx + eax*8 + 8]
push ecx
call fcn.00443c00
push eax
mov esi, edi
mov dword [esp + 0x30], 7
call fcn.004018d0
lea eax, [esp + 0x1c]
mov dword [esp + 0x2c], 0xffffffff
call fcn.00401970
mov eax, 0x4d9064
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 0xc
shl ecx, 4
mov edx, dword [ecx + ebx + 8]
push 0
push edx
lea eax, [esp + 0x28]
call fcn.00443560
push eax
mov esi, edi
mov dword [esp + 0x30], 8
call fcn.004018d0
lea eax, [esp + 0x20]
mov dword [esp + 0x2c], 0xffffffff
call fcn.00401970
mov eax, 0x4d9064
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop esi
pop ebp
pop ebx
add esp, 0x24
ret 0xc
mov ecx, dword [esp + 0x24]
pop esi
pop ebp
xor eax, eax
mov dword fs:[0], ecx
pop ebx
add esp, 0x24
ret 0xc