Function at 0x4902d0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x508cbc
mov eax, dword fs:[0]
push eax
sub esp, 0x290
mov eax, dword [0x55c658]
xor eax, esp
mov dword [esp + 0x288], eax
push ebx
push esi
push edi
mov eax, dword [0x55c658]
xor eax, esp
push eax
lea eax, [esp + 0x2a0]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
push 0x206
mov edi, edx
mov dword [esp + 0x2c], eax
xor ebx, ebx
lea eax, [esp + 0x92]
xor edx, edx
push ebx
push eax
mov dword [esp + 0x48], edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x30], ecx
mov word [esp + 0x98], dx
call fcn.004e95f0
mov ecx, dword [edi + 0x24c]
mov edx, dword [ebp + 0x10]
mov eax, dword [ecx]
add esp, 0xc
push edx
mov edx, dword [eax + 0x10]
call edx
push eax
push 0x548684
lea eax, [esp + 0x98]
push 0x104
push eax
call fcn.004e4475
add esp, 0x14
mov dword [esp + 0x84], 0x541610
mov dword [esp + 0x88], ebx
mov dword [esp + 0x2a8], ebx
mov edx, dword [edi + 0xc]
mov eax, dword [edx + 0xc]
lea ebx, [edi + 0xc]
mov ecx, ebx
mov dword [esp + 0x38], ebx
call eax
test al, al
jne 0x4903b4
push 0x541534
push esi
call fcn.00414e50
add esp, 8
jmp 0x4903be
mov edx, dword [ebx]
mov eax, dword [edx + 0x10]
push esi
mov ecx, ebx
call eax
test al, al
je 0x49041f
mov ecx, dword [esp + 0x24]
push ecx
lea edx, [esp + 0x90]
push edx
push edi
lea ecx, [esp + 0x23]
mov edx, esi
mov dword [esp + 0x94], ebx
mov byte [esp + 0x23], 0
call fcn.00490110
test al, al
jne 0x490432
mov ecx, esi
call fcn.00414da0
push 0x548724
push 0x53f504
mov edx, eax
call fcn.00416630
add esp, 8
mov ecx, ebx
mov dword [esp + 0x2a8], 0xffffffff
call fcn.004231c0
xor al, al
jmp 0x4908bf
push 0x548704
push esi
call fcn.00414e50
add esp, 8
jmp 0x4908bf
cmp byte [esp + 0x17], 0
je 0x490440
mov ecx, ebx
jmp 0x4908ad
xor eax, eax
mov byte [esp + 0x15], 0
mov dword [esp + 0x40], 0x546798
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov ebx, dword [esp + 0x28]
push ebx
push esi
lea ecx, [esp + 0x48]
mov byte [esp + 0x2b0], 1
mov byte [esp + 0x1e], al
call fcn.0047f8f0
test al, al
jne 0x4904a5
mov ecx, ebx
call fcn.0041cd20
test al, al
je 0x4904dc
mov ecx, ebx
call fcn.00416540
push eax
push 0x548738
mov ecx, esi
call fcn.004014b0
mov ecx, eax
call fcn.00416520
jmp 0x490870
push 0x2c
lea eax, [esp + 0x54]
push eax
push esi
lea ecx, [esp + 0x4c]
mov byte [esp + 0x22], 1
call fcn.0047fa80
test al, al
sete al
test al, al
je 0x4904e7
mov ecx, ebx
call fcn.00416540
push eax
push 0x548750
push esi
call fcn.00414e50
add esp, 0xc
jmp 0x490556
xor ebx, ebx
mov dword [esp + 0x64], ebx
jmp 0x490572
mov ecx, dword [edi + 0x24c]
mov edx, dword [esp + 0x54]
cmp edx, dword [ecx + 4]
je 0x49050e
mov ecx, ebx
call fcn.00416540
push eax
push 0x548780
push esi
call fcn.00414e50
add esp, 0xc
jmp 0x490556
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x5c]
mov ecx, dword [esp + 0x64]
imul eax, ebx
add eax, dword [esp + 0x50]
add eax, ecx
cmp dword [esp + 0x68], eax
je 0x490543
mov ecx, dword [esp + 0x28]
call fcn.00416540
push eax
push 0x5487b4
push esi
call fcn.00414e50
add esp, 0xc
jmp 0x490556
cmp eax, 0x200000
jbe 0x490586
push 0x5487ec
mov ecx, esi
call fcn.004014b0
mov ecx, esi
call fcn.004151a0
mov ecx, esi
call fcn.00414df0
xor ebx, ebx
mov dword [esp + 0x64], ebx
mov byte [esp + 0x16], bl
mov byte [esp + 0x15], bl
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], 0x18
mov dword [esp + 0x58], 0x132420d
mov ecx, dword [esp + 0x64]
lea eax, [ebx + 0x64]
add ecx, 0x3200
lea edx, [eax + eax*2]
lea eax, [ecx + edx*8 + 0x10]
push eax
mov dword [esp + 0x28], eax
call fcn.004e4902
mov edi, eax
add esp, 4
mov dword [esp + 0x2c], edi
test edi, edi
jne 0x4905bb
mov byte [esp + 0x15], 1
jmp 0x490858
mov dword [esp + 0x7c], 0x548a94
mov dword [esp + 0x80], edi
cmp byte [esp + 0x16], 0
mov byte [esp + 0x2a8], 2
mov ecx, dword [esp + 0x64]
lea eax, [ebx + 0x64]
mov dword [edi + 8], eax
lea eax, [ecx + 0x3200]
mov dword [edi], ebx
mov dword [edi + 4], ecx
mov dword [edi + 0xc], eax
je 0x4906bc
mov eax, dword [esp + 0x60]
mov byte [esp + 0x16], 1
cmp eax, 0x18
ja 0x490719
lea ecx, [ebx + ebx*2]
add ecx, ecx
add ecx, ecx
add ecx, ecx
push ecx
lea eax, [edi + 0x10]
push 0
push eax
call fcn.004e95f0
xor eax, eax
add esp, 0xc
cmp ebx, eax
mov dword [esp + 0x1c], eax
jle 0x4907a2
mov dword [esp + 0x34], eax
lea eax, [edi + 0x10]
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x34]
push edx
lea ecx, [eax + edi + 0x10]
push ecx
push esi
lea ecx, [esp + 0x4c]
call fcn.0047fa80
test al, al
sete al
test al, al
jne 0x4907a2
mov edx, dword [esp + 0x64]
mov eax, dword [esp + 0x30]
cmp dword [eax], edx
jae 0x4907a2
mov eax, dword [esp + 0x1c]
mov ecx, 0x18
add dword [esp + 0x34], ecx
add dword [esp + 0x30], ecx
inc eax
cmp eax, ebx
mov dword [esp + 0x1c], eax
jl 0x490638
mov ecx, dword [esp + 0x64]
test ecx, ecx
jbe 0x4906bc
mov eax, dword [edi + 8]
lea eax, [eax + eax*2]
push ecx
lea eax, [edi + eax*8 + 0x10]
push eax
push esi
lea ecx, [esp + 0x4c]
call fcn.0047fa80
test al, al
jne 0x4906bc
push 0x548830
push esi
call fcn.00414e50
mov byte [esp + 0x1d], 1
add esp, 8
cmp byte [esp + 0x15], 0
mov byte [esp + 0x2a8], 1
mov dword [esp + 0x7c], 0x548d18
jne 0x490858
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], 0x513b38
push esi
lea ecx, [esp + 0x20]
mov byte [esp + 0x2ac], 3
call fcn.00430e30
test al, al
jne 0x4907ac
push 0x548868
push esi
call fcn.00414e50
add esp, 8
mov byte [esp + 0x15], 1
jmp 0x490843
push eax
call fcn.004e401f
add esp, 4
mov esi, eax
mov dword [esp + 0x1c], 0
test ebx, ebx
jle 0x49078a
add edi, 0x10
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x18]
push ecx
push esi
push edx
lea ecx, [esp + 0x4c]
call fcn.0047fa80
test al, al
sete al
mov byte [esp + 0x16], al
test al, al
jne 0x490786
mov eax, dword [esi]
mov dword [edi], eax
mov ecx, dword [esi + 4]
mov dword [edi + 4], ecx
mov edx, dword [esi + 8]
mov dword [edi + 8], edx
mov eax, dword [esi + 0xc]
mov dword [edi + 0xc], eax
mov ecx, dword [esi + 0x10]
mov eax, dword [esp + 0x1c]
mov dword [edi + 0x10], ecx
mov edx, dword [esi + 0x14]
inc eax
mov dword [edi + 0x14], edx
add edi, 0x18
cmp eax, ebx
mov dword [esp + 0x1c], eax
jl 0x490733
mov edi, dword [esp + 0x2c]
push esi
call fcn.004e646c
mov esi, dword [esp + 0x1c]
add esp, 4
cmp byte [esp + 0x16], 0
je 0x490687
push 0x548804
jmp 0x4906ae
mov edi, dword [esp + 0x3c]
cmp dword [edi + 0x228], 0
je 0x4907c4
lea esi, [edi + 0x224]
call fcn.00417b30
mov esi, dword [esp + 0x24]
lea ecx, [esp + 0x8c]
push ecx
mov ecx, dword [esp + 0x1c]
add esi, 0x208
add edi, 0x224
call fcn.00480230
test al, al
jne 0x4907f0
mov byte [esp + 0x15], 1
jmp 0x49083b
mov edi, dword [esp + 0x3c]
mov esi, dword [edi + 0x22c]
mov ecx, dword [esp + 0x28]
add esi, 8
call fcn.00416540
push eax
push 0x104
push esi
call fcn.004e571e
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x38]
add esp, 0xc
push edx
push eax
add esi, 0x208
push esi
call fcn.004e9670
mov eax, dword [edi + 0x22c]
add esp, 0xc
mov dword [eax + 4], 1
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x2c]
mov byte [esp + 0x2a8], 1
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x490858
call fcn.004231c0
test edi, edi
je 0x490865
push edi
call fcn.004e4825
add esp, 4
cmp byte [esp + 0x15], 0
je 0x4908a0
mov ebx, dword [esp + 0x28]
push esi
mov edi, ebx
call fcn.0041ef00
mov ecx, esi
call fcn.004151a0
lea ecx, [esp + 0x40]
call fcn.0047f8b0
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x2a8], 0xffffffff
call fcn.004231c0
xor al, al
jmp 0x4908bf
lea ecx, [esp + 0x40]
call fcn.0047f8b0
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x2a8], 0xffffffff
call fcn.004231c0
mov al, 1
mov ecx, dword [esp + 0x2a0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x288]
xor ecx, esp
call fcn.004e409a
mov esp, ebp
pop ebp
ret 0xc