Function at 0x4200f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x45c570
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push esi
push ecx
lea eax, [esp + 0x38]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
mov dword [esp + 0x34], 0
call fcn.0044ae62
call fcn.0041feb0
add esp, 4
test eax, eax
jne 0x420153
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0044b0ed
xor eax, eax
mov ecx, dword [esp + 0x24]
mov dword fs:[0], ecx
pop esi
pop ebx
add esp, 0x28
ret
mov eax, dword [0x473e34]
mov dword [esp + 0xc], eax
mov dword [esp + 8], eax
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x10]
mov bl, 2
mov eax, dword [ecx - 8]
lea ecx, [esp + 0x34]
add eax, 0xffffffed
mov byte [esp + 0x2c], bl
push eax
push 0x11
push edx
call fcn.00448fb1
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x30], 3
call fcn.0044b226
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], bl
call fcn.0044b0ed
mov eax, dword [esp + 8]
xor esi, esi
mov ecx, dword [eax - 8]
test ecx, ecx
jle 0x4201f4
movsx eax, byte [esi + eax]
push eax
push 0x473588
call fcn.004284c0
sub eax, 0x473588
lea ecx, [esp + 0x14]
push eax
push 0x473778
push ecx
call fcn.0044949e
mov edx, dword [esp + 0x20]
add esp, 0x14
mov al, byte [edx]
mov byte [esp + 0x10], al
mov ecx, dword [esp + 0x10]
push ecx
push esi
lea ecx, [esp + 0x10]
call fcn.0044b601
mov eax, dword [esp + 8]
inc esi
cmp esi, dword [eax - 8]
jl 0x4201aa
push eax
call fcn.00427be5
and eax, 0xffff
lea edx, [esp + 0xc]
push eax
push 0x47387c
push edx
call fcn.0044949e
mov eax, dword [esp + 0x18]
add esp, 0x10
lea ecx, [esp + 8]
mov esi, dword [eax - 8]
push 0
call fcn.0044b51d
push eax
push esi
call fcn.00408e70
mov ecx, eax
and eax, 0xff
xor edx, edx
mov esi, 0x3e
div esi
xor eax, eax
add esp, 8
mov al, ch
mov ecx, esi
and eax, 0xff
push 1
mov byte [esp + 0x18], dl
xor edx, edx
div ecx
lea ecx, [esp + 0x20]
mov byte [esp + 0x14], dl
mov edx, dword [esp + 0x14]
and edx, 0xff
mov al, byte [edx + 0x473588]
push eax
call fcn.00448e1a
mov esi, eax
mov ecx, dword [esp + 0x14]
push 1
and ecx, 0xff
mov byte [esp + 0x30], 4
mov dl, byte [ecx + 0x473588]
lea ecx, [esp + 0x1c]
push edx
call fcn.00448e1a
push esi
push eax
lea eax, [esp + 0x18]
mov byte [esp + 0x34], 5
push eax
call fcn.0044b31c
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x30], 6
call fcn.0044b505
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 5
call fcn.0044b0ed
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 4
call fcn.0044b0ed
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2c], bl
call fcn.0044b0ed
push ecx
lea edx, [esp + 0xc]
mov esi, esp
mov dword [esp + 0x18], esp
push ecx
lea eax, [esp + 0x3c]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
push eax
push ecx
call fcn.0044b31c
push esi
call fcn.0041faa0
add esp, 4
mov byte [esp + 0x34], 7
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x473878
call fcn.0044b15b
mov byte [esp + 0x34], bl
call fcn.0041f720
add esp, 8
lea ecx, [esp + 8]
mov byte [esp + 0x2c], 1
call fcn.0044b0ed
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0
call fcn.0044b0ed
lea ecx, [esp + 0x34]
mov dword [esp + 0x2c], 0xffffffff
call fcn.0044b0ed
mov ecx, dword [esp + 0x24]
pop esi
mov eax, 1
mov dword fs:[0], ecx
pop ebx
add esp, 0x28
ret