Function at 0x5416da
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x743b56
push eax
mov dword fs:[0], esp
sub esp, 0x24
push ebx
push ebp
push esi
mov esi, ecx
mov eax, dword [esi + 0x2c4]
push edi
xor edi, edi
cmp eax, edi
je 0x541da7
cmp dword [eax + 0x54], edi
je 0x541703
mov ecx, dword [eax + 0x54]
mov edx, dword [ecx]
call dword [edx + 0x48]
test eax, eax
jne 0x5418be
mov eax, dword [esi + 0x2c4]
cmp dword [eax + 0x54], edi
jne 0x54173b
push 0x14
call fcn.0040fa60
add esp, 4
cmp eax, edi
je 0x541730
mov dword [eax + 4], edi
mov dword [eax], vtable.CBSList_struct_TPassInfo_.0
mov dword [eax + 0xc], edi
mov dword [eax + 8], edi
mov dword [eax + 0x10], edi
jmp 0x541732
xor eax, eax
mov ecx, dword [esi + 0x2c4]
mov dword [ecx + 0x54], eax
push 0x1a0
call fcn.0040fa60
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov dword [esp + 0x3c], edi
je 0x54175f
mov ecx, eax
call fcn.00604440
mov ebx, eax
jmp 0x541761
xor ebx, ebx
push str.passinfo
mov dword [esp + 0x40], 0xffffffff
call fcn.0040fbd0
mov dword [ebx], eax
mov dword [ebx + 4], edi
mov word [ebx + 8], di
mov dx, word [0x8605c0]
mov word [ebx + 0x19a], dx
mov eax, dword [esi + 0x2c4]
add esp, 4
cmp dword [eax + 0x54], edi
jne 0x5417c5
push 0x14
call fcn.0040fa60
add esp, 4
cmp eax, edi
je 0x5417ba
mov dword [eax + 4], edi
mov dword [eax], vtable.CBSList_struct_TPassInfo_.0
mov dword [eax + 0xc], edi
mov dword [eax + 8], edi
mov dword [eax + 0x10], edi
jmp 0x5417bc
xor eax, eax
mov ecx, dword [esi + 0x2c4]
mov dword [ecx + 0x54], eax
mov edx, dword [esi + 0x2c4]
mov eax, dword [edx + 0x54]
mov ebp, dword [eax]
sub esp, 0x1a0
mov ecx, esp
mov dword [esp + 0x1b0], esp
push ebx
call fcn.00536f80
mov ecx, dword [esi + 0x2c4]
mov ecx, dword [ecx + 0x54]
call dword [ebp + 8]
push 0x68
call fcn.0040fa60
add esp, 4
mov dword [esp + 0x10], eax
cmp eax, edi
mov dword [esp + 0x3c], 1
je 0x541816
push 1
mov ecx, eax
call fcn.0042ade0
mov edi, eax
mov ecx, dword [esi + 0x2a4]
mov eax, dword [ecx + 0xf8]
mov edx, dword [ecx + 0x2c]
sub edx, dword [eax + 0x2c]
add eax, 0x24
sub edx, dword [ecx + 0x24]
mov eax, dword [eax]
mov ecx, dword [ebx]
lea ebp, [edx + eax - 1]
mov edx, dword [esi + 0x50]
push ecx
mov ecx, edx
mov eax, dword [ecx]
push edx
mov dword [esp + 0x44], 0xffffffff
call dword [eax + 0x20]
sub esp, 8
mov ecx, esp
mov dword [ecx], ebp
mov dword [ecx + 4], eax
mov ecx, dword [esi + 0x2a4]
mov dword [esp + 0x20], esp
push ecx
mov ecx, edi
call fcn.00429900
mov edx, dword [esi + 0x2c4]
mov ecx, dword [edx + 0x54]
mov eax, dword [ecx]
call dword [eax + 0x44]
mov dword [edi + 0x18], eax
mov ecx, dword [esi + 0x2a4]
mov edx, dword [ecx]
push edi
call dword [edx + 0x12c]
mov ecx, dword [esi + 0x2a4]
mov eax, dword [ecx]
push 0
push 0
call dword [eax + 0x13c]
mov eax, dword [esi + 0x2a4]
lea ecx, [eax + 0xe4]
mov edx, eax
mov eax, dword [ecx]
mov edi, dword [edx]
push 1
call dword [eax + 0x30]
mov ecx, dword [esi + 0x2a4]
push eax
call dword [edi + 0x140]
xor edi, edi
cmp byte [0x8605a5], 0xff
je 0x541da7
mov eax, dword [esp + 0x44]
cmp eax, 0x26e622
jne 0x541917
mov edi, 5
jmp 0x5418e0
movzx eax, byte [0x8605a5]
lea ecx, [eax + eax*4]
lea ecx, [ecx*4 + 0x906b38]
call fcn.00548f00
sub edi, 1
jne 0x5418e0
mov ecx, esi
call fcn.00537040
mov ecx, dword [esp + 0x34]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret 4
cmp eax, 4
jne 0x541d3e
cmp byte [0x906a94], 0
jne 0x541ae2
push 0xc
call fcn.0040fa60
add esp, 4
cmp eax, edi
je 0x541947
mov dword [eax], edi
mov dword [eax + 4], edi
mov dword [eax + 8], edi
mov esi, eax
jmp 0x541949
xor esi, esi
mov ecx, dword [0x906224]
mov eax, dword [ecx]
mov ecx, dword [0x906b24]
mov ebx, dword [0x8605c0]
sub eax, ecx
cdq
idiv ebx
imul eax, ebx
add eax, ecx
mov dword [esi], eax
mov edx, dword [0x906224]
mov eax, dword [edx + 4]
mov ecx, dword [0x906b28]
mov ebx, dword [0x8605c4]
sub eax, ecx
cdq
idiv ebx
mov dword [esi + 8], edi
imul eax, ebx
add eax, ecx
mov dword [esi + 4], eax
mov eax, dword [esi]
mov edx, dword [0x8605c0]
mov ecx, dword [esi + 4]
mov dword [esp + 0x14], eax
add eax, edx
mov dword [esp + 0x1c], eax
mov eax, dword [0x8605c4]
mov dword [esp + 0x18], ecx
add ecx, eax
mov dword [esp + 0x20], ecx
mov ecx, dword [0x906a9c]
mov edx, dword [ecx]
lea eax, [esp + 0x14]
push eax
call dword [edx + 0x24]
movzx ecx, byte [0x8605a5]
cmp dword [ecx*8 + 0x906a64], edi
je 0x541a0e
mov eax, dword [esi + 4]
sub eax, dword [ecx*8 + 0x906a64]
mov edx, dword [esi]
mov ecx, dword [0x8605c0]
mov dword [esp + 0x14], edx
add edx, ecx
mov ecx, dword [0x906a9c]
mov dword [esp + 0x1c], edx
mov edx, dword [0x8605c4]
mov dword [esp + 0x18], eax
add eax, edx
lea edx, [esp + 0x14]
mov dword [esp + 0x20], eax
mov eax, dword [ecx]
push edx
call dword [eax + 0x24]
mov eax, dword [esi]
sub eax, dword [0x906b2c]
push esi
cdq
idiv dword [0x8605c0]
push 0x52bda0
mov dword [esi], eax
mov eax, dword [esi + 4]
sub eax, dword [0x906b30]
cdq
idiv dword [0x8605c4]
mov dword [esi + 4], eax
movzx eax, byte [0x8605a5]
lea ecx, [eax + eax*4]
lea ecx, [ecx*4 + 0x906b38]
call fcn.004a7d70
cmp eax, edi
je 0x541aa5
mov cl, byte [0x906220]
cmp cl, 2
je 0x541a66
cmp cl, 4
jne 0x541da7
mov esi, dword [eax]
push eax
movzx eax, byte [0x8605a5]
lea ecx, [eax + eax*4]
lea ecx, [ecx*4 + 0x906b38]
call fcn.00485430
cmp esi, edi
je 0x541da7
push esi
call fcn.0040fa80
add esp, 4
mov ecx, dword [esp + 0x34]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret 4
mov al, byte [0x906220]
cmp al, 1
je 0x541ab6
cmp al, 3
jne 0x541da7
movzx eax, byte [0x8605a5]
lea ecx, [eax + eax*4]
push esi
lea ecx, [ecx*4 + 0x906b38]
call fcn.004bb960
mov ecx, dword [esp + 0x34]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret 4
mov ecx, dword [0x906a90]
cmp ecx, edi
je 0x541da7
mov al, byte [0x906220]
cmp al, 1
je 0x541c2a
cmp al, 3
je 0x541c2a
cmp al, 2
je 0x541b11
cmp al, 4
jne 0x541da7
mov eax, dword [ecx + 0xc]
mov edx, dword [0x8605c0]
mov ecx, dword [ecx + 0x10]
imul eax, edx
mov esi, dword [0x8605c4]
add eax, dword [0x906b2c]
imul ecx, esi
add ecx, dword [0x906b30]
add edx, eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
add esi, ecx
mov ecx, dword [0x906a9c]
lea edx, [esp + 0x14]
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], esi
mov eax, dword [ecx]
push edx
call dword [eax + 0x24]
mov eax, dword [0x906224]
mov eax, dword [eax]
mov ecx, dword [0x906b24]
mov esi, dword [0x8605c0]
sub eax, ecx
cdq
idiv esi
imul eax, esi
add eax, ecx
mov ecx, dword [0x906a90]
mov dword [ecx + 0xc], eax
mov edx, dword [0x906224]
mov eax, dword [edx + 4]
mov ecx, dword [0x906b28]
mov esi, dword [0x8605c4]
sub eax, ecx
cdq
idiv esi
imul eax, esi
add eax, ecx
mov ecx, dword [0x906a90]
mov dword [ecx + 0x10], eax
mov ecx, dword [0x906a90]
mov eax, dword [ecx + 0x10]
mov ecx, dword [ecx + 0xc]
mov edx, dword [0x8605c4]
mov esi, dword [0x8605c0]
add edx, eax
add esi, ecx
mov dword [esp + 0x24], ecx
mov ecx, dword [0x906a9c]
mov dword [esp + 0x30], edx
lea edx, [esp + 0x24]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], esi
mov eax, dword [ecx]
push edx
call dword [eax + 0x24]
mov ecx, dword [0x906a90]
mov eax, dword [ecx + 0xc]
sub eax, dword [0x906b2c]
cdq
idiv dword [0x8605c0]
mov dword [ecx + 0xc], eax
mov ecx, dword [0x906a90]
mov eax, dword [ecx + 0x10]
sub eax, dword [0x906b30]
cdq
idiv dword [0x8605c4]
mov dword [ecx + 0x10], eax
mov ecx, dword [esp + 0x34]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret 4
mov eax, dword [ecx]
mov edx, dword [0x8605c0]
mov ecx, dword [ecx + 4]
imul eax, edx
mov esi, dword [0x8605c4]
add eax, dword [0x906b2c]
imul ecx, esi
add ecx, dword [0x906b30]
add edx, eax
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
add esi, ecx
mov ecx, dword [0x906a9c]
lea edx, [esp + 0x14]
mov dword [esp + 0x14], eax
mov dword [esp + 0x20], esi
mov eax, dword [ecx]
push edx
call dword [eax + 0x24]
mov eax, dword [0x906224]
mov eax, dword [eax]
mov ecx, dword [0x906b24]
mov esi, dword [0x8605c0]
sub eax, ecx
cdq
idiv esi
imul eax, esi
add eax, ecx
mov ecx, dword [0x906a90]
mov dword [ecx], eax
mov edx, dword [0x906224]
mov eax, dword [edx + 4]
mov ecx, dword [0x906b28]
mov esi, dword [0x8605c4]
sub eax, ecx
cdq
idiv esi
imul eax, esi
add eax, ecx
mov ecx, dword [0x906a90]
mov dword [ecx + 4], eax
mov ecx, dword [0x906a90]
mov eax, dword [ecx + 4]
mov ecx, dword [ecx]
mov edx, dword [0x8605c4]
mov esi, dword [0x8605c0]
add edx, eax
add esi, ecx
mov dword [esp + 0x14], ecx
mov ecx, dword [0x906a9c]
mov dword [esp + 0x20], edx
lea edx, [esp + 0x14]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], esi
mov eax, dword [ecx]
push edx
call dword [eax + 0x24]
mov ecx, dword [0x906a90]
mov eax, dword [ecx]
sub eax, dword [0x906b2c]
cdq
idiv dword [0x8605c0]
mov dword [ecx], eax
mov ecx, dword [0x906a90]
mov eax, dword [ecx + 4]
sub eax, dword [0x906b30]
cdq
idiv dword [0x8605c4]
mov dword [ecx + 4], eax
mov ecx, dword [esp + 0x34]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret 4
cmp eax, 0xbbdeec
jne 0x541d56
mov cl, byte [esi + 0x2bc]
mov al, byte [esi + 0x2bd]
sub cl, 1
jmp 0x541d9e
cmp eax, 0xbbdeed
jne 0x541d6f
mov al, byte [esi + 0x2bc]
mov dl, byte [esi + 0x2bd]
add al, 1
push edx
push eax
jmp 0x541da0
cmp eax, 0xbbde24
jne 0x541d89
mov cl, byte [esi + 0x2bd]
mov dl, byte [esi + 0x2bc]
sub cl, 1
push ecx
push edx
jmp 0x541da0
cmp eax, 0xbbde25
jne 0x541da7
mov al, byte [esi + 0x2bd]
mov cl, byte [esi + 0x2bc]
add al, 1
push eax
push ecx
mov ecx, esi
call fcn.0053fd20
mov ecx, dword [esp + 0x34]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x30
ret 4