Function at 0x4a1960
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff4
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4a1c65
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 8]
mov dword [eax + 0x34], edx
xor eax, eax
push ebp
push 0x4a19f9
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
add eax, 0x30
call fcn.004048d0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
mov edx, 0xbda
call fcn.0046b6f4
mov edx, 0x4a1c74
call fcn.0046e2ac
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
mov edx, 0xbdb
call fcn.0046b6f4
mov edx, 0x4a1c74
call fcn.0046e2ac
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
mov edx, 0xbea
call fcn.0046b724
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0xc]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4a1a03
mov eax, dword [ebp - 8]
cmp eax, 0xb
ja case.0x4a1a0f.0
jmp dword [eax*4 + 0x4a1a16]
mov eax, dword [ebp - 4]
add eax, 0x2c
mov edx, 0x4a1c7c
call fcn.0040490c
mov eax, dword [ebp - 4]
call fcn.004a14f8
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x38]
mov eax, dword [ebp - 4]
call fcn.004a3e28
jmp case.0x4a1a0f.0
mov eax, dword [ebp - 4]
add eax, 0x2c
mov edx, 0x4a1c8c
call fcn.0040490c
mov eax, dword [ebp - 4]
call fcn.004a13d4
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x40]
mov eax, dword [ebp - 4]
call fcn.004a3e28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
mov edx, 0xbea
call fcn.0046b724
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0xc]
jmp case.0x4a1a0f.0
mov eax, dword [ebp - 4]
add eax, 0x2c
mov edx, 0x4a1c9c
call fcn.0040490c
mov eax, dword [ebp - 4]
call fcn.004a1844
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x4c]
mov eax, dword [ebp - 4]
call fcn.004a3e28
jmp case.0x4a1a0f.0
mov eax, dword [ebp - 4]
add eax, 0x2c
mov edx, 0x4a1cac
call fcn.0040490c
mov eax, dword [ebp - 4]
call fcn.004a1608
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x44]
mov eax, dword [ebp - 4]
call fcn.004a3e28
jmp case.0x4a1a0f.0
mov eax, dword [ebp - 4]
add eax, 0x2c
mov edx, 0x4a1cbc
call fcn.0040490c
mov eax, dword [ebp - 4]
call fcn.004a14e4
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004a3e28
jmp case.0x4a1a0f.0
mov eax, dword [ebp - 4]
add eax, 0x2c
mov edx, 0x4a1ccc
call fcn.0040490c
mov eax, dword [ebp - 4]
call fcn.004a18d8
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004a3e28
jmp case.0x4a1a0f.0
mov eax, dword [ebp - 4]
add eax, 0x2c
mov edx, 0x4a1cdc
call fcn.0040490c
mov eax, dword [ebp - 4]
call fcn.004a1924
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004a3e28
jmp case.0x4a1a0f.0
mov eax, dword [ebp - 4]
add eax, 0x2c
mov edx, 0x4a1cec
call fcn.0040490c
mov eax, dword [ebp - 4]
call fcn.004a1734
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x48]
mov eax, dword [ebp - 4]
call fcn.004a3e28
jmp case.0x4a1a0f.0
mov eax, dword [ebp - 4]
add eax, 0x2c
mov edx, 0x4a1cfc
call fcn.0040490c
mov eax, dword [ebp - 4]
call fcn.004a1938
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004a3e28
jmp case.0x4a1a0f.0
mov eax, dword [ebp - 4]
add eax, 0x2c
mov edx, 0x4a1d0c
call fcn.0040490c
mov eax, dword [ebp - 4]
call fcn.004a194c
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004a3e28
jmp case.0x4a1a0f.0
mov eax, dword [ebp - 4]
add eax, 0x2c
mov edx, 0x4a1d1c
call fcn.0040490c
mov eax, dword [ebp - 4]
call fcn.004a1924
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.004a3e28
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
mov edx, 0xbe0
call fcn.0046b6f4
push eax
mov eax, dword [ebp - 4]
push dword [eax + 0x2c]
push 0x4a1d2c
mov eax, dword [ebp - 4]
push dword [eax + 0x30]
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404bec
mov eax, dword [ebp - 0xc]
call fcn.00404b0c
mov edx, eax
pop eax
call fcn.0046e2ac
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a1c6c
lea eax, [ebp - 0xc]
call fcn.004048d0
ret