Function at 0x4b8f90
Capabilities:
Access peb ldr_data
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x52ca97
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x148
push ebx
push ebp
push esi
xor esi, esi
push edi
lea ecx, [esp + 0xd8]
mov dword [esp + 0x14], esi
call fcn.0040c600
mov eax, dword [0x569c90]
mov dword [esp + 0x160], esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x170]
mov byte [esp + 0x160], 3
cmp eax, esi
mov esi, dword [esp + 0x168]
lea edi, [esi + 0xc]
lea eax, [edi + 8]
push eax
je 0x4b902c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [edi]
mov ebp, dword [esi + 0xb8]
mov ecx, edi
call dword [edx + 0x14]
lea eax, [esp + 0x38]
mov ecx, esi
push eax
call fcn.004a5480
mov ebx, 1
mov dword [esp + 0x14], ebx
mov byte [esp + 0x160], 4
jmp 0x4b905f
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [edi]
mov ebp, dword [esi + 0x154]
mov ecx, edi
call dword [edx + 0x14]
lea ecx, [esp + 0x34]
push ecx
mov ecx, esi
call fcn.004a01d0
mov ebx, 2
mov dword [esp + 0x14], ebx
mov dword [esp + 0x160], 5
push eax
lea ecx, [esp + 0x24]
call fcn.00507aaf
test bl, 2
mov dword [esp + 0x160], 8
je 0x4b9089
and ebx, 0xfffffffd
lea ecx, [esp + 0x34]
mov dword [esp + 0x14], ebx
call fcn.00507d3a
test bl, 1
mov dword [esp + 0x160], 7
je 0x4b90a2
lea ecx, [esp + 0x38]
call fcn.00507d3a
lea edx, [esp + 0x18]
lea eax, [esp + 0x10]
push edx
push eax
push ebp
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.00507aaf
call fcn.0040e680
add esp, 0x10
lea ecx, [esp + 0x3c]
call fcn.004608a0
lea eax, [edi + 8]
mov dword [esp + 0x1c], edi
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ecx, [esi + 0x34]
mov byte [esp + 0x160], 0xa
push ecx
lea ecx, [esp + 0x40]
call fcn.00461150
mov edx, dword [edi]
mov ecx, edi
mov byte [esp + 0x160], 9
call dword [edx + 0x14]
mov eax, dword [0x569c90]
mov dword [esp + 0x24], 0x572658
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x160], 0xb
push ecx
lea ecx, [esp + 0x30]
mov dword [esp + 0x2c], 0
call fcn.00507ec3
lea ecx, [esp + 0x24]
call fcn.004b96d0
mov eax, dword [esp + 0x28]
mov byte [esp + 0x160], 0xc
test eax, eax
jne 0x4b91bf
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.004f5157
cdq
mov ecx, 0xc8
idiv ecx
add edx, ecx
push edx
call ebx
lea eax, [edi + 8]
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [esi + 0x394]
test eax, eax
jne 0x4b918d
mov eax, dword [esi + 0x248]
cmp eax, 0x20003
je 0x4b918d
cmp eax, 0x10002
je 0x4b918d
xor ebp, ebp
jmp 0x4b9192
mov ebp, 1
mov edx, dword [edi]
mov ecx, edi
call dword [edx + 0x14]
test ebp, ebp
jne 0x4b928a
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x4b91bf
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
push eax
call fcn.004998c0
test eax, eax
mov dword [esp + 0x28], eax
je 0x4b914f
lea eax, [esp + 0x14]
mov ecx, esi
push eax
call fcn.004afda0
mov eax, dword [eax]
lea ecx, [esp + 0x3c]
push eax
mov eax, dword [esp + 0x14]
lea edx, [esp + 0xdc]
push ecx
push edx
push eax
mov byte [esp + 0x170], 0x13
call fcn.00409f00
add esp, 0x10
lea ecx, [esp + 0x14]
mov edi, eax
mov byte [esp + 0x160], 0xc
call fcn.00507d3a
test edi, edi
jne 0x4b931b
lea ecx, [esp + 0x24]
mov byte [esp + 0x160], 0x14
call fcn.004b96f0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x160], 9
call fcn.00507d3a
lea ecx, [esp + 0xa0]
mov byte [esp + 0x160], 0x19
call fcn.00406c60
lea ecx, [esp + 0x9c]
mov byte [esp + 0x160], 0x18
call fcn.00507d3a
lea ecx, [esp + 0x98]
mov byte [esp + 0x160], 0x17
call fcn.00507d3a
lea ecx, [esp + 0x94]
mov byte [esp + 0x160], 0x16
call fcn.00507d3a
mov byte [esp + 0x160], 0x15
jmp 0x4b95f4
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x3c]
push ecx
push edx
call fcn.00409a90
add esp, 8
lea ecx, [esp + 0x24]
mov byte [esp + 0x160], 0xd
call fcn.004b96f0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x160], 9
call fcn.00507d3a
lea ecx, [esp + 0xa0]
mov byte [esp + 0x160], 0x12
call fcn.00406c60
lea ecx, [esp + 0x9c]
mov byte [esp + 0x160], 0x11
call fcn.00507d3a
lea ecx, [esp + 0x98]
mov byte [esp + 0x160], 0x10
call fcn.00507d3a
lea ecx, [esp + 0x94]
mov byte [esp + 0x160], 0xf
call fcn.00507d3a
mov byte [esp + 0x160], 0xe
jmp 0x4b95f4
push ecx
lea edx, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00507aaf
lea ecx, [esp + 0xdc]
call fcn.0040ca00
mov edi, eax
test edi, edi
jne 0x4b935d
push ecx
lea eax, [esp + 0x1c]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00507aaf
lea ecx, [esp + 0xdc]
call fcn.0040c960
mov edi, eax
mov ebx, dword [esp + 0x16c]
cmp ebx, 0xffffffff
je 0x4b93c3
test edi, edi
jne 0x4b950f
push 0x30
call fcn.0050c4a3
add esp, 4
mov dword [esp + 0x1c], eax
test eax, eax
mov byte [esp + 0x160], 0x1a
je 0x4b9396
mov ecx, eax
call fcn.00451830
mov edi, eax
jmp 0x4b9398
xor edi, edi
lea ecx, [esp + 0x18]
mov byte [esp + 0x160], 0xc
push ecx
lea ecx, [edi + 4]
call fcn.00507e73
push edi
lea ecx, [esp + 0xdc]
call fcn.0040c710
test edi, edi
je 0x4b93d8
jmp 0x4b951e
test edi, edi
je 0x4b9533
push edi
lea ecx, [esp + 0xdc]
call fcn.0040c730
lea edx, [esp + 0x14]
mov ecx, esi
push edx
call fcn.004afda0
mov eax, dword [eax]
mov edx, dword [esp + 0x10]
push eax
lea eax, [esp + 0x40]
lea ecx, [esp + 0xdc]
push eax
push ecx
push edx
mov byte [esp + 0x170], 0x22
call fcn.004096c0
add esp, 0x10
lea ecx, [esp + 0x14]
mov byte [esp + 0x160], 0xc
call fcn.00507d3a
mov eax, dword [esp + 0x174]
test eax, eax
je 0x4b9461
lea eax, [esp + 0x1c]
mov ecx, esi
push eax
call fcn.004afda0
mov eax, dword [eax]
mov edx, dword [esp + 0x10]
push 0
lea ecx, [esp + 0x40]
push eax
push ecx
push edx
mov byte [esp + 0x170], 0x23
call fcn.00409ba0
add esp, 0x10
lea ecx, [esp + 0x1c]
mov byte [esp + 0x160], 0xc
call fcn.00507d3a
lea ecx, [esp + 0x24]
mov byte [esp + 0x160], 0x24
call fcn.004b96f0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x160], 9
call fcn.00507d3a
lea ecx, [esp + 0x3c]
mov byte [esp + 0x160], 7
call fcn.00404c90
lea ecx, [esp + 0x20]
mov byte [esp + 0x160], 3
call fcn.00507d3a
lea ecx, [esp + 0x30]
mov byte [esp + 0x160], 2
call fcn.00507d3a
lea ecx, [esp + 0x10]
mov byte [esp + 0x160], 1
call fcn.00507d3a
lea ecx, [esp + 0x18]
mov byte [esp + 0x160], 0
call fcn.00507d3a
lea ecx, [esp + 0xd8]
mov dword [esp + 0x160], 0xffffffff
call fcn.0040c6a0
mov eax, 1
mov ecx, dword [esp + 0x158]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x154
ret 0x10
mov ecx, edi
call fcn.0040d710
cmp eax, ebx
jne 0x4b951e
xor ebp, ebp
jmp 0x4b9523
mov ebp, 1
push ebx
mov ecx, edi
call fcn.0040d720
test ebp, ebp
jne 0x4b93d8
mov eax, dword [esp + 0x174]
test eax, eax
je 0x4b957a
lea edx, [esp + 0x14]
mov ecx, esi
push edx
call fcn.004afda0
mov eax, dword [eax]
mov ecx, dword [esp + 0x10]
push 0
push eax
lea eax, [esp + 0x44]
mov byte [esp + 0x168], 0x1b
push eax
push ecx
call fcn.00409ba0
add esp, 0x10
lea ecx, [esp + 0x14]
mov byte [esp + 0x160], 0xc
call fcn.00507d3a
lea ecx, [esp + 0x24]
mov byte [esp + 0x160], 0x1c
call fcn.004b96f0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x160], 9
call fcn.00507d3a
lea ecx, [esp + 0xa0]
mov byte [esp + 0x160], 0x21
call fcn.00406c60
lea ecx, [esp + 0x9c]
mov byte [esp + 0x160], 0x20
call fcn.00507d3a
lea ecx, [esp + 0x98]
mov byte [esp + 0x160], 0x1f
call fcn.00507d3a
lea ecx, [esp + 0x94]
mov byte [esp + 0x160], 0x1e
call fcn.00507d3a
mov byte [esp + 0x160], 0x1d
lea ecx, [esp + 0x78]
call fcn.00404e10
lea ecx, [esp + 0x40]
mov byte [esp + 0x160], 7
call fcn.00404d90
lea ecx, [esp + 0x20]
mov byte [esp + 0x160], 3
call fcn.00507d3a
lea ecx, [esp + 0x30]
mov byte [esp + 0x160], 2
call fcn.00507d3a
lea ecx, [esp + 0x10]
mov byte [esp + 0x160], 1
call fcn.00507d3a
lea ecx, [esp + 0x18]
mov byte [esp + 0x160], 0
call fcn.00507d3a
lea ecx, [esp + 0xd8]
mov dword [esp + 0x160], 0xffffffff
call fcn.0040c6a0
xor eax, eax
jmp 0x4b94f4