Function at 0x468b00
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4f9098
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov dword [esi + 0x158], ebx
mov eax, dword [0x532a80]
mov dword [esp + 0xc], eax
lea ecx, [esp + 0x10]
mov dword [esp + 0x20], ebx
push ecx
call fcn.0041e830
add esp, 4
mov edx, dword [esp + 0x28]
mov eax, dword [eax]
push edx
push eax
lea ecx, [esp + 0x14]
push 0x52e48c
push ecx
mov byte [esp + 0x30], 1
call fcn.004dc9ee
add esp, 0x10
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], bl
call fcn.004dfa8d
mov eax, dword [0x538128]
cmp eax, ebx
jne 0x468ba2
push 1
push 0x8010
mov ecx, esi
call fcn.004b8ae0
mov edx, dword [esp + 0xc]
push edx
call dword [0x504350]
cmp eax, ebx
mov dword [0x538128], eax
jne 0x468ba2
push 2
push 0x1b4
jmp 0x468ee2
mov edi, dword [0x504348]
push 0x52e474
push eax
call edi
mov dword [esi + 0x104], eax
mov eax, dword [0x538128]
push 0x52e460
push eax
call edi
mov dword [esi + 0x108], eax
mov ecx, dword [0x538128]
push 0x52e44c
push ecx
call edi
mov dword [esi + 0x10c], eax
mov edx, dword [0x538128]
push 0x52e440
push edx
call edi
mov dword [esi + 0x110], eax
mov eax, dword [0x538128]
push 0x52e42c
push eax
call edi
mov dword [esi + 0x114], eax
mov ecx, dword [0x538128]
push 0x52e41c
push ecx
call edi
mov dword [esi + 0x118], eax
mov edx, dword [0x538128]
push 0x52e410
push edx
call edi
mov dword [esi + 0x11c], eax
mov eax, dword [0x538128]
push 0x52e400
push eax
call edi
mov dword [esi + 0x120], eax
mov ecx, dword [0x538128]
push 0x52e3f4
push ecx
call edi
mov dword [esi + 0x124], eax
mov edx, dword [0x538128]
push 0x52e3ec
push edx
call edi
mov dword [esi + 0x128], eax
mov eax, dword [0x538128]
push 0x52e3dc
push eax
call edi
mov dword [esi + 0x12c], eax
mov ecx, dword [0x538128]
push 0x52e3c0
push ecx
call edi
mov dword [esi + 0x130], eax
mov edx, dword [0x538128]
push 0x52e3b0
push edx
call edi
mov dword [esi + 0x134], eax
mov eax, dword [0x538128]
push 0x52e3a0
push eax
call edi
mov dword [esi + 0x138], eax
mov ecx, dword [0x538128]
push 0x52e38c
push ecx
call edi
mov dword [esi + 0x13c], eax
mov edx, dword [0x538128]
push 0x52e4d0
push edx
call edi
mov dword [esi + 0x144], eax
push 0x52e380
mov eax, dword [0x538128]
push eax
call edi
mov dword [esi + 0x140], eax
mov ecx, dword [0x538128]
push 0x52e4c4
push ecx
call edi
mov dword [esi + 0x148], eax
mov edx, dword [0x538128]
push 0x52e4b8
push edx
call edi
mov dword [esi + 0x14c], eax
mov eax, dword [0x538128]
push 0x52e4a4
push eax
call edi
mov ecx, dword [esi + 0x104]
mov dword [esi + 0x150], eax
cmp ecx, ebx
je 0x468edb
cmp dword [esi + 0x108], ebx
je 0x468edb
cmp dword [esi + 0x10c], ebx
je 0x468edb
cmp dword [esi + 0x110], ebx
je 0x468edb
cmp dword [esi + 0x114], ebx
je 0x468edb
cmp dword [esi + 0x118], ebx
je 0x468edb
cmp dword [esi + 0x11c], ebx
je 0x468edb
cmp dword [esi + 0x120], ebx
je 0x468edb
cmp dword [esi + 0x124], ebx
je 0x468edb
cmp dword [esi + 0x128], ebx
je 0x468edb
cmp dword [esi + 0x12c], ebx
je 0x468edb
cmp dword [esi + 0x134], ebx
je 0x468edb
cmp dword [esi + 0x138], ebx
je 0x468edb
cmp dword [esi + 0x13c], ebx
je 0x468edb
cmp dword [esi + 0x144], ebx
je 0x468edb
cmp dword [esi + 0x140], ebx
je 0x468edb
cmp dword [esi + 0x130], ebx
je 0x468edb
cmp dword [esi + 0x148], ebx
je 0x468edb
cmp dword [esi + 0x14c], ebx
je 0x468edb
cmp eax, ebx
je 0x468edb
mov ecx, dword [0x53812c]
inc ecx
mov dword [0x53812c], ecx
lea ecx, [esp + 0x14]
push ecx
mov dword [esi + 0x158], 1
call fcn.0041ec30
add esp, 4
push 0x52e494
lea edx, [esp + 0x14]
push eax
push edx
mov byte [esp + 0x2c], 2
call fcn.004dfd22
mov eax, dword [eax]
mov byte [esp + 0x20], 3
cmp eax, ebx
je 0x468e6a
push eax
call fcn.00471ad0
add esp, 4
mov edi, eax
jmp 0x468e6c
xor edi, edi
mov dword [esp + 0x28], edi
push 0x466f00
push edi
mov byte [esp + 0x28], 4
call dword [esi + 0x150]
add esp, 8
cmp edi, ebx
mov byte [esp + 0x20], 3
je 0x468e96
push edi
call fcn.00471ae0
add esp, 4
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 2
call fcn.004dfa8d
lea ecx, [esp + 0x14]
mov byte [esp + 0x20], bl
call fcn.004dfa8d
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xffffffff
call fcn.004dfa8d
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
add esp, 0x18
ret 4
push 2
push 0x1b5
mov ecx, esi
call fcn.004b8ae0
lea ecx, [esp + 0xc]
mov dword [esp + 0x20], 0xffffffff
call fcn.004dfa8d
mov ecx, dword [esp + 0x18]
pop edi
pop esi
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x18
ret 4