Function at 0x4b1afc
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffbc
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x38], eax
xor eax, eax
push ebp
push 0x4b1f6c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x14b3bf0
mov eax, dword [eax]
add eax, 0x2c
mov eax, dword [eax]
add eax, 0x14c
add eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, 0x50
call fcn.00408754
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [eax], 0x100b6
mov eax, dword [ebp - 0x30]
add eax, 4
mov dword [eax], 0x3db98000
lea ecx, [ebp - 0x38]
mov eax, dword [0x4ff278]
mov eax, dword [eax]
mov eax, dword [eax + 0x378]
mov eax, dword [eax + 0x218]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x38]
call fcn.004a50b8
mov eax, dword [ebp - 0x44]
shl eax, 0x10
mov edx, dword [ebp - 0x30]
add edx, 8
mov dword [edx], eax
call fcn.004a8500
cmp eax, 0x3c
jb 0x4b1ba7
mov eax, dword [ebp - 0x30]
add eax, 0xc
mov dword [eax], 0x8080000
jmp 0x4b1bd5
call fcn.004a8500
cmp eax, 0x28
jb 0x4b1bc9
call fcn.004a8500
cmp eax, 0x3c
jae 0x4b1bc9
mov eax, dword [ebp - 0x30]
add eax, 0xc
mov dword [eax], 0x7080000
jmp 0x4b1bd5
mov eax, dword [ebp - 0x30]
add eax, 0xc
mov dword [eax], 0x6080000
mov eax, dword [ebp - 0x30]
add eax, 0x10
mov dword [eax], 0x310031
mov eax, dword [ebp - 0x30]
add eax, 0x14
mov dword [eax], 0x310031
xor eax, eax
push ebp
push 0x4b1c3b
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x38]
mov eax, dword [0x4ff278]
mov eax, dword [eax]
mov eax, dword [eax + 0x378]
mov eax, dword [eax + 0x218]
mov edx, 1
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x38]
call fcn.004a50b8
mov eax, dword [ebp - 0x30]
add eax, 0x18
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b1c45
xor eax, eax
push ebp
push 0x4b1c93
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x38]
mov eax, dword [0x4ff278]
mov eax, dword [eax]
mov eax, dword [eax + 0x378]
mov eax, dword [eax + 0x218]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x38]
call fcn.004a50b8
mov eax, dword [ebp - 0x30]
add eax, 0x1c
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b1c9d
xor eax, eax
push ebp
push 0x4b1ceb
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x38]
mov eax, dword [0x4ff278]
mov eax, dword [eax]
mov eax, dword [eax + 0x378]
mov eax, dword [eax + 0x218]
mov edx, 3
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x38]
call fcn.004a50b8
mov eax, dword [ebp - 0x30]
add eax, 0x20
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b1cf5
xor eax, eax
push ebp
push 0x4b1d43
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x38]
mov eax, dword [0x4ff278]
mov eax, dword [eax]
mov eax, dword [eax + 0x378]
mov eax, dword [eax + 0x218]
mov edx, 4
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x38]
call fcn.004a50b8
mov eax, dword [ebp - 0x30]
add eax, 0x24
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b1d4d
xor eax, eax
push ebp
push 0x4b1d9b
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x38]
mov eax, dword [0x4ff278]
mov eax, dword [eax]
mov eax, dword [eax + 0x378]
mov eax, dword [eax + 0x218]
mov edx, 5
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x38]
call fcn.004a50b8
mov eax, dword [ebp - 0x30]
add eax, 0x28
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b1da5
xor eax, eax
push ebp
push 0x4b1df3
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x38]
mov eax, dword [0x4ff278]
mov eax, dword [eax]
mov eax, dword [eax + 0x378]
mov eax, dword [eax + 0x218]
mov edx, 6
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x38]
call fcn.004a50b8
mov eax, dword [ebp - 0x30]
add eax, 0x2c
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b1dfd
xor eax, eax
push ebp
push 0x4b1e4b
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x38]
mov eax, dword [0x4ff278]
mov eax, dword [eax]
mov eax, dword [eax + 0x378]
mov eax, dword [eax + 0x218]
mov edx, 7
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x38]
call fcn.004a50b8
mov eax, dword [ebp - 0x30]
add eax, 0x30
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b1e55
call fcn.004a8500
cmp eax, 0x3c
jb 0x4b1eb7
xor eax, eax
push ebp
push 0x4b1ead
push dword fs:[eax]
mov dword fs:[eax], esp
lea ecx, [ebp - 0x38]
mov eax, dword [0x4ff278]
mov eax, dword [eax]
mov eax, dword [eax + 0x378]
mov eax, dword [eax + 0x218]
mov edx, 8
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x44]
mov eax, dword [ebp - 0x38]
call fcn.004a50b8
mov eax, dword [ebp - 0x30]
add eax, 0x34
mov edx, dword [ebp - 0x44]
mov dword [eax], edx
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4b1eb7
mov dword [ebp - 0x28], 0x11d5a9c
mov dword [ebp - 0x24], 0x22
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0x11d5a50
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x14], eax
call fcn.004a8500
cmp eax, 0x3c
jb 0x4b1ef1
mov eax, dword [ebp - 0x30]
add eax, 0x40
mov dword [ebp - 0x10], eax
jmp 0x4b1f19
call fcn.004a8500
cmp eax, 0x28
jb 0x4b1f10
call fcn.004a8500
cmp eax, 0x3c
jae 0x4b1f10
mov eax, dword [ebp - 0x30]
add eax, 0x34
mov dword [ebp - 0x10], eax
jmp 0x4b1f19
mov eax, dword [ebp - 0x30]
add eax, 0x30
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0x40
xor eax, eax
mov dword [ebp - 8], eax
xor eax, eax
mov dword [ebp - 4], eax
pushal
push 0
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x2c]
mov ecx, 0x14b3bf0
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x2c]
mov edi, 0x14c
mov ecx, dword [edi + ecx]
mov edx, 0xc970e0
call edx
popal
mov eax, dword [ebp - 0x34]
call fcn.004027ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b1f73
lea eax, [ebp - 0x38]
call fcn.004044c8
ret