Function at 0x4d1998
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
mov ebx, eax
xor eax, eax
push ebp
push 0x4d1d63
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
lea eax, [ebp - 8]
mov ecx, 1
mov edx, dword [0x4565dc]
call fcn.004055e8
add esp, 4
push 0
lea eax, [ebp - 0x10]
mov ecx, 1
mov edx, dword [0x4565dc]
call fcn.004055e8
add esp, 4
push 0
lea eax, [ebp - 0xc]
mov ecx, 1
mov edx, dword [0x4565dc]
call fcn.004055e8
add esp, 4
push 0
lea eax, [ebp - 0x14]
mov ecx, 1
mov edx, dword [0x4565dc]
call fcn.004055e8
add esp, 4
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
call fcn.0040540c
test eax, eax
jle 0x4d1d42
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
call fcn.0040540c
dec eax
push eax
lea eax, [ebp - 4]
mov ecx, 1
mov edx, dword [0x4565dc]
call fcn.004055e8
add esp, 4
mov eax, dword [ebp - 4]
call fcn.0040540c
mov ecx, eax
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0xc]
inc eax
call fcn.00402c74
cmp dword [ebx + 0x114], 0
je 0x4d1a80
lea eax, [ebx + 0x114]
call fcn.0045ab08
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x28]
mov esi, dword [eax + 4]
mov eax, esi
mov edx, dword [0x4ccec0]
call fcn.00403684
test al, al
je 0x4d1b05
mov ecx, dword [ebx + 0x44]
mov dl, 1
mov eax, dword [0x49baf8]
call fcn.0049e224
mov esi, eax
mov dword [ebx + 0x114], esi
mov dl, 1
mov eax, esi
call fcn.0049fb60
mov eax, dword [ebp - 4]
call fcn.0040540c
mov ecx, eax
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x114]
mov esi, dword [eax]
call dword [esi + 0x34]
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 4]
mov edx, dword [eax + 0x14]
mov eax, dword [ebx + 0x114]
call fcn.0049faa0
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 4]
mov edx, dword [eax + 0x18]
mov eax, dword [ebx + 0x114]
call fcn.0049fb00
jmp 0x4d1d42
mov eax, esi
mov edx, dword [0x4ccf2c]
call fcn.00403684
test al, al
je 0x4d1b74
mov ecx, dword [ebx + 0x44]
mov dl, 1
mov eax, dword [0x49baf8]
call fcn.0049e224
mov esi, eax
mov dword [ebx + 0x114], esi
mov eax, dword [ebp - 4]
call fcn.0040540c
mov ecx, eax
mov edx, dword [ebp - 4]
mov eax, esi
mov esi, dword [eax]
call dword [esi + 0x34]
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 4]
mov edx, dword [eax + 0x14]
mov eax, dword [ebx + 0x114]
call fcn.0049fb00
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 4]
mov edx, dword [eax + 0x18]
mov eax, dword [ebx + 0x114]
call fcn.0049fa80
jmp 0x4d1d42
mov eax, esi
mov edx, dword [0x4cce2c]
call fcn.00403684
test al, al
je 0x4d1bc2
mov ecx, dword [ebx + 0x44]
mov dl, 1
mov eax, dword [0x49baf8]
call fcn.0049e224
mov esi, eax
mov dword [ebx + 0x114], esi
mov dl, 1
mov eax, esi
call fcn.0049fb60
mov eax, dword [ebp - 4]
call fcn.0040540c
mov ecx, eax
mov edx, dword [ebp - 4]
mov eax, dword [ebx + 0x114]
mov ebx, dword [eax]
call dword [ebx + 0x34]
jmp 0x4d1d42
mov eax, esi
mov edx, dword [0x4ccfb4]
call fcn.00403684
test al, al
je 0x4d1c98
mov ecx, dword [ebx + 0x44]
mov dl, 1
mov eax, dword [0x49bcbc]
call fcn.004a29bc
mov dword [ebx + 0x114], eax
lea eax, [ebp - 8]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov edx, dword [edx + 8]
mov ecx, dword [0x4565dc]
call fcn.00405730
lea eax, [ebp - 0x10]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov edx, dword [edx + 0xc]
mov ecx, dword [0x4565dc]
call fcn.00405730
lea eax, [ebp - 0xc]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov edx, dword [edx + 0x10]
mov ecx, dword [0x4565dc]
call fcn.00405730
lea eax, [ebp - 0x14]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov edx, dword [edx + 0x14]
mov ecx, dword [0x4565dc]
call fcn.00405730
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x10]
call fcn.0040540c
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0xc]
call fcn.0040540c
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x14]
call fcn.0040540c
push eax
mov eax, dword [ebp - 8]
call fcn.0040540c
mov ecx, eax
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x114]
call fcn.004a39ac
jmp 0x4d1d42
mov eax, esi
mov edx, dword [0x4cd108]
call fcn.00403684
test al, al
je 0x4d1d42
mov ecx, dword [ebx + 0x44]
mov dl, 1
mov eax, dword [0x49be84]
call fcn.004a49b4
mov dword [ebx + 0x114], eax
lea eax, [ebp - 8]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov edx, dword [edx + 8]
mov ecx, dword [0x4565dc]
call fcn.00405730
lea eax, [ebp - 0xc]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov edx, dword [edx + 0x10]
mov ecx, dword [0x4565dc]
call fcn.00405730
lea eax, [ebp - 0x14]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx + 0x28]
mov edx, dword [edx + 4]
mov edx, dword [edx + 0x14]
mov ecx, dword [0x4565dc]
call fcn.00405730
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0xc]
call fcn.0040540c
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x14]
call fcn.0040540c
push eax
mov eax, dword [ebp - 8]
call fcn.0040540c
mov ecx, eax
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x114]
call fcn.004a4e10
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4d1d6a
lea eax, [ebp - 0x14]
mov edx, dword [0x4565dc]
mov ecx, 5
call fcn.00404d84
ret