Function at 0x4c8750
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x53d818
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebp
push esi
push edi
mov esi, ecx
call fcn.00527fd7
movzx eax, word [esi + 0x79c]
mov ecx, dword [esi + 0x53c]
mov edi, dword [sym.imp.user32.dll_SendMessageA]
push eax
push 0
push 0x467
push ecx
call edi
movzx edx, word [esi + 0x7a0]
mov eax, dword [esi + 0x58c]
push edx
push 0
push 0x467
push eax
call edi
call fcn.00503c89
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
mov eax, dword [esi + 0x768]
mov ecx, dword [esi + 0x764]
push eax
push ecx
lea edx, [esp + 0x1c]
push 0x55e130
push edx
mov dword [esp + 0x30], 0
call fcn.00404c00
mov eax, dword [esp + 0x24]
add esp, 0x10
push eax
lea ecx, [esi + 0xd90]
call fcn.005093d7
movzx edx, byte [esi + 0x76c]
xor ecx, ecx
mov ch, byte [esi + 0x774]
xor eax, eax
mov ah, byte [esi + 0x780]
push 0
mov cl, byte [esi + 0x770]
mov al, byte [esi + 0x77c]
shl ecx, 8
or ecx, edx
mov dword [esi + 0x660], ecx
movzx ecx, byte [esi + 0x778]
xor edx, edx
mov dh, byte [esi + 0x78c]
shl eax, 8
or eax, ecx
xor ecx, ecx
mov ch, byte [esi + 0x798]
mov dword [esi + 0x6b4], eax
movzx eax, byte [esi + 0x784]
mov dl, byte [esi + 0x788]
mov cl, byte [esi + 0x794]
shl edx, 8
or edx, eax
mov eax, dword [esi + 0x7b0]
mov dword [esi + 0x708], edx
movzx edx, byte [esi + 0x790]
push eax
mov eax, dword [esi + 0x3fc]
shl ecx, 8
push 0xf1
or ecx, edx
push eax
mov dword [esi + 0x75c], ecx
call edi
mov eax, dword [esi + 0x7b8]
mov ecx, dword [esi + 0x8c]
push 0
push eax
push 0xf1
push ecx
call edi
mov ecx, dword [esi + 0x7a4]
mov eax, 2
cmp ecx, eax
jge 0x4c88b6
mov dword [esi + 0x7a4], eax
mov eax, dword [esi + 0x7a4]
dec eax
movzx edx, ax
mov eax, dword [esi + 0x35c]
push edx
push 0
push 0x467
push eax
call edi
mov eax, dword [esi + 0x7a8]
mov ecx, dword [esi + 0x2bc]
push eax
push 1
push 0x405
push ecx
call edi
call fcn.00503c89
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [esi + 0x7a8]
lea eax, [eax + eax*4]
shl eax, 1
push eax
lea ecx, [esp + 0x10]
push 0x55b640
push ecx
mov byte [esp + 0x2c], 1
call fcn.00404c00
mov edx, dword [esp + 0x18]
add esp, 0xc
push edx
lea ecx, [esi + 0x200]
call fcn.005093d7
mov eax, dword [esi + 0x7ac]
push eax
mov eax, dword [esi + 0x1cc]
push 1
push 0x405
push eax
call edi
mov eax, dword [esi + 0x7ac]
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
lea edx, [esp + 0x10]
push 0x55b640
push edx
call fcn.00404c00
mov eax, dword [esp + 0x18]
add esp, 0xc
push eax
lea ecx, [esi + 0x110]
call fcn.005093d7
call fcn.0050a0d4
test eax, eax
je 0x4c8985
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x74]
jmp 0x4c8987
xor eax, eax
mov eax, dword [eax + 0x464]
mov ecx, dword [eax + 0x258]
test ecx, ecx
je 0x4c89ae
push 0
lea ecx, [esi + 0xd40]
call fcn.005094b0
mov dword [esi + 0x7bc], 0
mov eax, dword [esi + 0x7bc]
test eax, eax
push 0
push 1
push 0xf1
je 0x4c89ca
mov eax, dword [esi + 0xd5c]
push eax
jmp 0x4c89d1
mov ecx, dword [esi + 0xd0c]
push ecx
call edi
call fcn.00503c89
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x10], eax
fld dword [esi + 0x7c0]
sub esp, 8
fstp qword [esp]
lea eax, [esp + 0x18]
push 0x55f388
push eax
mov byte [esp + 0x30], 2
call fcn.00404c00
mov ecx, dword [esp + 0x20]
add esp, 0x10
push ecx
lea ecx, [esi + 0x8e0]
call fcn.005093d7
fld dword [esi + 0x7c4]
sub esp, 8
fstp qword [esp]
lea edx, [esp + 0x18]
push 0x55f388
push edx
call fcn.00404c00
mov ebp, dword [esp + 0x20]
add esp, 0x10
push ebp
lea ecx, [esi + 0x930]
call fcn.005093d7
mov eax, dword [esi + 0x85c]
push 0
push 0
push 0xf1
push eax
call edi
mov ecx, dword [esi + 0x8ac]
push 0
push 0
push 0xf1
push ecx
call edi
mov edx, dword [esi + 0xa3c]
push 0
push 0
push 0xf1
push edx
call edi
mov eax, dword [esi + 0xb2c]
push 0
push 0
push 0xf1
push eax
call edi
mov ecx, dword [esi + 0xc6c]
push 0
push 0
push 0xf1
push ecx
call edi
mov edx, dword [esi + 0x9ec]
push 0
push 0
push 0xf1
push edx
call edi
mov eax, dword [esi + 0xcbc]
push 0
push 0
push 0xf1
push eax
call edi
mov ecx, dword [esi + 0xb7c]
push 0
push 0
push 0xf1
push ecx
call edi
mov edx, dword [esi + 0xbcc]
push 0
push 0
push 0xf1
push edx
call edi
mov eax, dword [esi + 0xc1c]
push 0
push 0
push 0xf1
push eax
call edi
mov ecx, dword [esi + 0x99c]
push 0
push 0
push 0xf1
push ecx
call edi
mov eax, dword [esi + 0x7c8]
test eax, eax
je 0x4c8b29
mov edx, dword [esi + 0x85c]
push 0
push 1
push 0xf1
push edx
call edi
mov eax, dword [esi + 0x7cc]
test eax, eax
je 0x4c8b45
mov eax, dword [esi + 0x8ac]
push 0
push 1
push 0xf1
push eax
call edi
mov eax, dword [esi + 0x7d0]
test eax, eax
je 0x4c8b57
mov ecx, dword [esi + 0xa3c]
jmp 0x4c8b95
mov eax, dword [esi + 0x7d4]
test eax, eax
je 0x4c8b73
mov edx, dword [esi + 0xb2c]
push 0
push 1
push 0xf1
push edx
jmp 0x4c8b9f
mov eax, dword [esi + 0x7d8]
test eax, eax
je 0x4c8b8f
mov eax, dword [esi + 0xc6c]
push 0
push 1
push 0xf1
push eax
jmp 0x4c8b9f
mov ecx, dword [esi + 0x9ec]
push 0
push 1
push 0xf1
push ecx
call edi
movzx edx, word [esi + 0x7dc]
mov eax, dword [esi + 0xadc]
push edx
push 0
push 0x467
push eax
call edi
mov eax, dword [esi + 0x7e8]
test eax, eax
je 0x4c8bd5
mov ecx, dword [esi + 0x99c]
push 0
push 1
push 0xf1
push ecx
call edi
mov eax, dword [esi + 0x7e0]
test eax, eax
push 0
push 1
push 0xf1
jne 0x4c8bf1
mov edx, dword [esi + 0xb7c]
push edx
jmp 0x4c8c0b
mov eax, dword [esi + 0x7e4]
test eax, eax
je 0x4c8c04
mov eax, dword [esi + 0xbcc]
push eax
jmp 0x4c8c0b
mov ecx, dword [esi + 0xc1c]
push ecx
call edi
mov eax, dword [esi + 0x7ec]
test eax, eax
je 0x4c8c29
mov edx, dword [esi + 0xcbc]
push 0
push 1
push 0xf1
push edx
call edi
lea eax, [ebp - 0x10]
mov byte [esp + 0x20], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
pop edi
pop esi
pop ebp
jg 0x4c8c4b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp]
add eax, 0xfffffff0
mov byte [esp + 0x14], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c8c6d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 8]
add eax, 0xfffffff0
mov dword [esp + 0x14], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4c8c93
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
add esp, 0x18
ret