Function at 0x4a92d0
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d12c4
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x4f8194]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
call fcn.0046a290
push 0x4a9760
push 0x4a9200
push 0xa
lea eax, [edi + 0x18c]
mov dword [ebp - 4], 0
push 0x148
push eax
mov dword [edi], vtable.KUiChatCentre.0
call fcn.004bf0e4
lea ecx, [edi + 0xe60]
mov byte [ebp - 4], 1
call fcn.0045eae0
lea ecx, [edi + 0xfb8]
mov byte [ebp - 4], 2
call fcn.0045c170
lea ecx, [edi + 0x11a0]
mov byte [ebp - 4], 3
call fcn.0045c170
lea ecx, [edi + 0x1388]
mov byte [ebp - 4], 4
call fcn.0045c170
lea ecx, [edi + 0x1570]
mov byte [ebp - 4], 5
call fcn.0045c170
lea ecx, [edi + 0x1758]
mov byte [ebp - 4], 6
call fcn.00469330
lea ecx, [edi + 0x1e88]
mov byte [ebp - 4], 7
call fcn.0045c170
lea ecx, [edi + 0x2070]
mov byte [ebp - 4], 8
call fcn.0045c170
lea ecx, [edi + 0x2258]
mov byte [ebp - 4], 9
call fcn.0045c170
lea ecx, [edi + 0x2440]
mov byte [ebp - 4], 0xa
call fcn.0045c170
lea ecx, [edi + 0x2628]
mov byte [ebp - 4], 0xb
call fcn.0045c170
lea ecx, [edi + 0x2810]
mov byte [ebp - 4], 0xc
call fcn.0045c170
push 0x4552e0
push fcn.0045f8b0
push 0xa
push 0x250
lea eax, [edi + 0x29f8]
mov byte [ebp - 4], 0xd
push eax
call fcn.004bf0e4
lea ecx, [edi + 0x4118]
mov byte [ebp - 4], 0xe
call fcn.00460600
lea ebx, [edi + 0x4230]
mov byte [ebp - 4], 0xf
xorps xmm0, xmm0
movq qword [ebx + 0xc], xmm0
push 0x80
mov dword [ebx + 0x14], 0
mov dword [ebx + 0x18], 0
push 0
lea eax, [ebx + 0x20]
push eax
call sub.MSVCR120.dll_memset
mov dword [ebx + 0x1c], 0
lea esi, [edi + 0x42ec]
mov dword [ebx + 0xa0], 0
or eax, 0xffffffff
mov word [ebx + 0xa4], ax
xorps xmm0, xmm0
xor eax, eax
mov word [ebx + 0xa6], ax
mov dword [ebx + 0xa8], eax
mov dword [edi + 0x41fc], eax
mov dword [edi + 0x4204], eax
mov dword [edi + 0x4208], eax
movq qword [edi + 0x41f0], xmm0
mov word [edi + 0x41f8], ax
push 3
push esi
mov dword [edi + 0x420c], eax
mov byte [edi + 0x4200], al
mov dword [edi + 0x45cc], eax
call fcn.00458a10
add esp, 0x14
mov ebx, 0x4f80e8
add esi, 0x30
mov ecx, dword [ebx]
mov edx, esi
jmp 0x4a94c0
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx], al
lea edx, [edx + 1]
test al, al
jne 0x4a94c0
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4a94d3
sub ecx, edx
add ebx, 4
mov dword [esi + 0x40], ecx
add esi, 0x50
cmp ebx, 0x4f80f4
jl 0x4a94b7
lea esi, [edi + 0x440c]
push 5
push esi
call fcn.00458a10
add esp, 8
mov ebx, 0x4f80f4
add esi, 0x30
mov ecx, dword [ebx]
mov edx, esi
lea ebx, [ebx]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx], al
lea edx, [edx + 1]
test al, al
jne 0x4a9510
mov eax, esi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4a9523
sub eax, edx
add ebx, 4
mov dword [esi + 0x40], eax
add esi, 0x50
cmp ebx, 0x4f8108
jl 0x4a9506
push 0xac
lea eax, [edi + 0x4230]
mov dword [edi + 0x4210], 0
push 0
push eax
mov dword [edi + 0x4214], 0
mov dword [edi + 0x4228], 0
mov dword [edi + 0x4218], 8
mov dword [edi + 0x4224], 0
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [edi + 0x42dc], 0
mov dword [edi + 0x42e0], 0
lea ecx, [edi + 0x18c]
mov dword [edi + 0x422c], 0
mov dword [edi + 0x188], 0
push 7
push 0x4e01f4
mov dword [0x4f810c], 0
call fcn.00403d30
push 0
mov ecx, edi
call fcn.004aa410
push 6
mov dword [edi + vtable.ServerNotify.0], 0x4f8108
lea ecx, [edi + 0x2d4]
inc dword [0x4f810c]
push 0x4e01fc
call fcn.00403d30
push 1
mov ecx, edi
call fcn.004aa410
push 7
mov dword [edi + 0x418], 0x4f8108
lea ecx, [edi + 0x41c]
inc dword [0x4f810c]
push 0x4e0204
call fcn.00403d30
push 2
mov ecx, edi
call fcn.004aa410
push 8
mov dword [edi + 0x560], 0x4f8108
lea ecx, [edi + 0x564]
inc dword [0x4f810c]
push 0x4e020c
call fcn.00403d30
push 3
mov ecx, edi
call fcn.004aa410
mov dword [edi + 0x6a8], 0x4f8108
mov eax, edi
inc dword [0x4f810c]
mov dword [edi + 0xe5c], 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret