Function at 0x254a50
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
mov ecx, 5
push 0
push 0
dec ecx
jne 0x254a58
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x255007
push dword fs:[eax]
mov dword fs:[eax], esp
mov esi, dword [ebx + 0xc]
lea edx, [ebp - 8]
mov eax, ebx
call fcn.002572b0
mov eax, dword [ebp - 8]
lea ecx, [ebp - 4]
mov edx, dword [ebx + 0x10]
call fcn.0010cdb4
mov eax, dword [ebp - 4]
push eax
mov ecx, 0x255020
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 0x14]
push eax
mov ecx, 0x255044
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
movzx eax, byte [eax + 4]
push eax
mov ecx, 0x255054
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
push 2
mov ecx, 0x255064
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
lea edx, [ebp - 0xc]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0xc]
call fcn.0011fa30
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x255070
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
lea edx, [ebp - 0x10]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x1c]
call fcn.0011fa30
mov eax, dword [ebp - 0x10]
push eax
mov ecx, 0x255084
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
lea edx, [ebp - 0x14]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x20]
call fcn.0011fa30
mov eax, dword [ebp - 0x14]
push eax
mov ecx, 0x255098
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x24]
push eax
mov ecx, 0x2550a8
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
lea edx, [ebp - 0x18]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x28]
call fcn.0011fa30
mov eax, dword [ebp - 0x18]
push eax
mov ecx, 0x2550c0
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
lea edx, [ebp - 0x1c]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x2c]
call fcn.0011fa30
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, 0x2550dc
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x10]
push eax
mov ecx, 0x2550f4
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x14]
push eax
mov ecx, 0x255108
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x18]
push eax
mov ecx, 0x25511c
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov al, byte [eax + 0x30]
push eax
mov ecx, 0x25512c
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x14]
lea edx, [ebp - 0x24]
mov eax, ebx
call fcn.002572b0
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x20]
mov edx, dword [ebx + 8]
mov edx, dword [edx + 0x34]
call fcn.0010cdb4
mov eax, dword [ebp - 0x20]
push eax
mov ecx, 0x25513c
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x38]
push eax
mov ecx, 0x25514c
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x3c]
push eax
mov ecx, 0x255160
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x40]
push eax
mov ecx, 0x255178
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov al, byte [eax + 0x44]
push eax
mov ecx, 0x25518c
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x14]
mov eax, dword [ebx + 8]
mov al, byte [eax + 0x4c]
push eax
mov ecx, 0x2551a8
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x14]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x50]
push eax
mov ecx, 0x2551c0
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x54]
push eax
mov ecx, 0x2551dc
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov al, byte [eax + 0x45]
push eax
mov ecx, 0x2551f4
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x14]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x48]
push eax
mov ecx, 0x255210
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x68]
push eax
mov ecx, 0x255228
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
lea edx, [ebp - 0x28]
mov eax, dword [ebx + 0x20]
call fcn.0011f9a8
mov eax, dword [ebp - 0x28]
push eax
mov ecx, 0x25523c
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov al, byte [eax + 0x58]
push eax
mov ecx, 0x25524c
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x14]
mov eax, dword [ebx + 8]
mov al, byte [eax + 0x59]
push eax
mov ecx, 0x255268
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x14]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x5c]
push eax
mov ecx, 0x255280
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x60]
push eax
mov ecx, 0x255294
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 4]
push eax
mov ecx, 0x2552b0
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 8]
push eax
mov ecx, 0x2552d4
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0xc]
push eax
mov ecx, 0x2552e4
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x10]
push eax
mov ecx, 0x2552f4
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x14]
push eax
mov ecx, 0x255304
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x18]
push eax
mov ecx, 0x255318
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x1c]
push eax
mov ecx, 0x25532c
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x20]
push eax
mov ecx, 0x255340
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x24]
push eax
mov ecx, 0x255354
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x28]
push eax
mov ecx, 0x25536c
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x2c]
push eax
mov ecx, 0x255384
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x30]
push eax
mov ecx, 0x25539c
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x34]
push eax
mov ecx, 0x2553b4
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x38]
push eax
mov ecx, 0x2553d0
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov eax, dword [eax + 0x3c]
push eax
mov ecx, 0x2553e4
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov al, byte [eax + 0x40]
push eax
mov ecx, 0x2553fc
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x14]
mov eax, dword [ebx + 8]
mov eax, dword [eax + 0x64]
mov al, byte [eax + 0x41]
push eax
mov ecx, 0x255414
mov edx, 0x2552c0
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x14]
mov eax, dword [ebx + 8]
cmp dword [eax + 8], 0
jg 0x254fe4
mov ecx, 0x255428
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x50]
mov ecx, 0x25543c
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x50]
mov ecx, 0x25544c
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x50]
mov ecx, 0x255460
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x50]
mov ecx, 0x255474
mov edx, 0x255034
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0x50]
mov ecx, 0x25548c
mov edx, 0x255034
mov eax, esi
mov esi, dword [eax]
call dword [esi + 0x50]
mov eax, dword [ebx + 0xc]
mov edx, dword [eax]
call dword [edx + 0x54]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x25500e
lea eax, [ebp - 0x28]
mov edx, 0xa
call fcn.001050a0
ret