Function at 0x46c0e0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5150a8
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push esi
push edi
mov eax, dword [0x574be0]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [esp + 0x20], ebx
push 0x55194c
lea ecx, [esp + 0x28]
call fcn.004204a0
push 0x553888
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54], 0
call fcn.004204a0
mov byte [esp + 0x50], 1
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
mov byte [esp + 0x50], 2
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x30], edi
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x34]
lea ecx, [esp + 0x38]
mov byte [esp + 0x54], 3
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x24]
push ecx
mov edx, eax
lea ecx, [esp + 0x2c]
mov byte [esp + 0x54], 4
call fcn.00421890
add esp, 4
mov esi, eax
mov byte [esp + 0x50], 5
call fcn.004ebe2d
push eax
mov edx, esi
lea ecx, [esp + 0x30]
call fcn.00421800
add esp, 4
mov byte [esp + 0x50], 6
cmp dword [ebx + 0xc], 0
je 0x46c1d1
push 0
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [ebx + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x50], 5
mov edx, dword [esp + 0x2c]
add edx, 0xfffffff0
or ebx, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x46c1f6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 4
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c218
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 3
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c23a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [edi - 0x10]
mov byte [esp + 0x50], 2
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c258
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 1
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c27a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c29c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [esp + 0x50], 0xffffffff
mov edx, dword [esp + 0x24]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c2c1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
mov byte [esp + 0x17], 0
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [esp + 0x2c], edi
mov esi, dword [ebp + 8]
push 0x55384c
mov ecx, esi
mov dword [esp + 0x54], 7
call fcn.0043a040
cmp eax, 0x57c240
je 0x46c565
push 0x55384c
mov ecx, esi
call fcn.0043a040
mov al, byte [eax + 8]
cmp al, 1
je 0x46c31f
cmp al, 2
je 0x46c31f
cmp al, 5
je 0x46c31f
cmp al, 3
jne 0x46c565
push 0x55384c
mov ecx, esi
call fcn.0043a040
mov ecx, eax
call fcn.00439800
mov dword [esp + 0x28], eax
cmp eax, 0xffffffff
je 0x46c55b
mov edx, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
mov eax, 0x5538f8
mov byte [esp + 0x50], 0xd
test eax, 0xffff0000
jne 0x46c380
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x46c38e
push esi
push eax
lea ecx, [esp + 0x24]
call fcn.00420bb0
jmp 0x46c38e
push 0x5538f8
lea ecx, [esp + 0x20]
call fcn.00420650
mov byte [esp + 0x50], 0xe
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
mov eax, 0x553888
mov byte [esp + 0x50], 0xf
test eax, 0xffff0000
jne 0x46c3d3
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x46c3e3
push esi
push eax
lea ecx, [esp + 0x20]
call fcn.00420bb0
jmp 0x46c3e3
push 0xa
push 0x553888
lea ecx, [esp + 0x20]
call fcn.00420c80
mov byte [esp + 0x50], 0x10
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x38]
call fcn.00421920
mov esi, eax
mov byte [esp + 0x50], 0x11
mov edx, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x24], eax
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x28]
lea ecx, [esp + 0x34]
mov byte [esp + 0x54], 0x12
call fcn.00421890
add esp, 4
push esi
mov edx, eax
lea ecx, [esp + 0x38]
mov byte [esp + 0x54], 0x13
call fcn.00421890
add esp, 4
mov esi, dword [esp + 0x20]
mov byte [esp + 0x50], 0x14
cmp dword [esi + 0xc], 0
je 0x46c45f
push 0
push eax
lea eax, [esp + 0x20]
push eax
lea eax, [esi + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x50], 0x13
mov edx, dword [esp + 0x34]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c481
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x12
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c4a3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x11
mov edx, dword [esp + 0x24]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c4c5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x10
mov edx, dword [esp + 0x38]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c4e7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0xe
mov edx, dword [esp + 0x18]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c509
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 7
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c52b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push dword [esp + 0x28]
call dword [0x51b144]
test eax, eax
jne 0x46c55b
call dword [0x51b0d4]
push eax
lea eax, [esp + 0x30]
push 0x553914
push eax
call fcn.00421610
mov edi, dword [esp + 0x38]
add esp, 0xc
jmp 0x46c6a1
mov byte [esp + 0x17], 1
jmp 0x46c6a1
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
mov eax, 0x553858
mov byte [esp + 0x50], 8
test eax, 0xffff0000
jne 0x46c5a5
movzx esi, ax
mov ecx, esi
call fcn.0041fcd0
test eax, eax
je 0x46c5b3
push esi
push eax
lea ecx, [esp + 0x24]
call fcn.00420bb0
jmp 0x46c5b3
push 0x553858
lea ecx, [esp + 0x20]
call fcn.00420650
push 0x553888
lea ecx, [esp + 0x28]
mov byte [esp + 0x54], 9
call fcn.004204a0
mov byte [esp + 0x50], 0xa
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x28], eax
lea eax, [esp + 0x1c]
push eax
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x3c]
mov byte [esp + 0x54], 0xb
call fcn.00421890
add esp, 4
mov esi, dword [esp + 0x20]
mov byte [esp + 0x50], 0xc
cmp dword [esi + 0xc], 0
je 0x46c619
push 2
push eax
lea eax, [esp + 0x2c]
push eax
lea eax, [esi + 8]
push eax
call fcn.004219a0
mov byte [esp + 0x50], 0xb
mov edx, dword [esp + 0x38]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c63b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0xa
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c65d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 9
mov edx, dword [esp + 0x24]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c67f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 7
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c6a1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x46c743
mov ecx, 8
mov word [eax], cx
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x1c], eax
cmp byte [esp + 0x17], 0
mov ecx, 0x54f2d8
push edi
mov eax, 0x5518ec
cmove eax, ecx
push eax
lea eax, [esp + 0x24]
push 0x5538a0
push eax
mov byte [esp + 0x60], 0x15
call fcn.00421610
add esp, 0x10
lea ecx, [esp + 0x1c]
push 0x54ef3c
push 0x54e18c
call fcn.00421ef0
mov esi, dword [esp + 0x1c]
push dword [esi - 0xc]
push esi
call dword [0x51b314]
mov ecx, eax
test ecx, ecx
jne 0x46c71f
call fcn.004208f0
mov eax, dword [ebp + 0xc]
add esi, 0xfffffff0
mov dword [eax + 8], ecx
mov byte [esp + 0x50], 7
lea eax, [esi + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c743
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
push 0x551a44
lea ecx, [esp + 0x34]
call fcn.004204a0
push 0x553888
lea ecx, [esp + 0x20]
mov byte [esp + 0x54], 0x16
call fcn.004204a0
mov byte [esp + 0x50], 0x17
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x24], eax
mov byte [esp + 0x50], 0x18
mov eax, dword [0x575ba4]
mov ecx, 0x575ba4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x28], eax
lea eax, [esp + 0x24]
push eax
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x44]
mov byte [esp + 0x54], 0x19
call fcn.00421890
add esp, 4
lea ecx, [esp + 0x30]
push ecx
mov edx, eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x54], 0x1a
call fcn.00421890
add esp, 4
mov esi, eax
mov byte [esp + 0x50], 0x1b
call fcn.004ebe2d
push eax
mov edx, esi
lea ecx, [esp + 0x3c]
call fcn.00421800
add esp, 4
mov ecx, eax
mov eax, dword [esp + 0x20]
mov byte [esp + 0x50], 0x1c
cmp dword [eax + 0xc], 0
je 0x46c805
push 0
push ecx
lea ecx, [esp + 0x24]
push ecx
add eax, 8
push eax
call fcn.004219a0
mov byte [esp + 0x50], 0x1b
mov edx, dword [esp + 0x38]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c827
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x1a
mov edx, dword [esp + 0x3c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c849
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x19
mov edx, dword [esp + 0x40]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c86b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x18
mov edx, dword [esp + 0x28]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c88d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x17
mov edx, dword [esp + 0x24]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c8af
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 0x16
mov edx, dword [esp + 0x1c]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c8d1
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [esp + 0x50], 7
mov edx, dword [esp + 0x30]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46c8f3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov dword [esp + 0x50], 0xffffffff
lea eax, [edi + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x46c912
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8