Function at 0x4c8130
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d6532
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
mov ebx, ecx
push esi
xor esi, esi
mov dword [ebx], 0x600744
push edi
mov dword [ebp - 0x1c], ebx
mov dword [ebx + 8], esi
mov dword [ebx + 0xc], esi
mov dword [ebx + 0x10], esi
mov dword [ebx + 0x14], esi
mov dword [ebp - 4], esi
mov dword [ebx + 0x1c], esi
mov dword [ebx + 0x20], esi
mov dword [ebx + 0x24], esi
mov dword [ebx + 0x2c], esi
mov dword [ebx + 0x30], esi
mov dword [ebx + 0x34], esi
mov dword [ebx + 0x40], esi
mov dword [ebx + 0x44], esi
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x4c], esi
lea edi, [ebx + 0x7c]
mov ecx, edi
mov byte [ebp - 4], 3
call fcn.00577b40
mov dword [edi + 4], eax
mov dword [edi + 8], esi
lea ecx, [ebx + 0x98]
mov byte [ebp - 4], 4
call dword [fcn.005ea34c]
lea ecx, [ebx + 0xbc]
mov byte [ebp - 4], 5
call fcn.004b6ec0
mov dword [ebx + 0xc0], eax
mov byte [eax + 0x95], 1
mov eax, dword [ebx + 0xc0]
mov dword [eax + 4], eax
mov eax, dword [ebx + 0xc0]
mov dword [eax], eax
mov eax, dword [ebx + 0xc0]
mov dword [eax + 8], eax
mov dword [ebx + 0xc4], esi
mov dword [ebx + 0xcc], esi
mov dword [ebx + 0xd0], esi
mov dword [ebx + 0xd4], esi
mov dword [ebx + 0xd8], esi
lea ecx, [ebx + 0xe0]
mov byte [ebp - 4], 7
call dword [fcn.005ea34c]
lea ecx, [ebx + 0x104]
mov byte [ebp - 4], 8
call dword [fcn.005ea34c]
push 0x5c
mov byte [ebp - 4], 9
mov byte [ebx + 0x50], 0
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x18], eax
cmp eax, esi
mov byte [ebp - 4], 0xa
je 0x4c8246
mov ecx, eax
call fcn.004c0f80
jmp 0x4c8248
xor eax, eax
mov dword [eax + 4], esi
mov dword [ebp - 0x10], eax
mov eax, dword [edi + 4]
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x10]
push ecx
push edx
push eax
mov ecx, edi
mov byte [ebp - 4], 9
mov dword [ebp - 0x14], eax
call fcn.004fd910
push 1
mov ecx, edi
mov dword [ebp - 0x10], eax
call fcn.004b6e20
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov dword [eax + 4], ecx
mov eax, dword [ecx + 4]
push 0x5c
mov dword [eax], ecx
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x18], eax
cmp eax, esi
mov byte [ebp - 4], 0xb
je 0x4c82a0
mov ecx, eax
call fcn.004c0f80
jmp 0x4c82a2
xor eax, eax
mov dword [eax + 4], 2
mov dword [ebp - 0x10], eax
mov eax, dword [edi + 4]
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x10]
push ecx
push edx
push eax
mov ecx, edi
mov byte [ebp - 4], 9
mov dword [ebp - 0x18], eax
call fcn.004fd910
push 1
mov ecx, edi
mov dword [ebp - 0x14], eax
call fcn.004b6e20
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 4], eax
mov ecx, dword [eax + 4]
push 0x5c
mov dword [ecx], eax
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x18], eax
cmp eax, esi
mov byte [ebp - 4], 0xc
je 0x4c82fe
mov ecx, eax
call fcn.004c0f80
jmp 0x4c8300
xor eax, eax
mov dword [ebx + 0x64], eax
push 0x5c
mov byte [ebp - 4], 9
mov dword [eax + 4], 8
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x18], eax
cmp eax, esi
mov byte [ebp - 4], 0xd
je 0x4c832c
mov ecx, eax
call fcn.004c0f80
jmp 0x4c832e
xor eax, eax
mov dword [ebx + 0x60], eax
push 0x5c
mov byte [ebp - 4], 9
mov dword [eax + 4], 4
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x18], eax
cmp eax, esi
mov byte [ebp - 4], 0xe
je 0x4c835a
mov ecx, eax
call fcn.004c0f80
jmp 0x4c835c
xor eax, eax
mov dword [ebx + 0x68], eax
push 0x60
mov byte [ebp - 4], 9
mov dword [eax + 4], 9
call fcn.005c8833
add esp, 4
mov dword [ebp - 0x18], eax
cmp eax, esi
mov byte [ebp - 4], 0xf
je 0x4c8398
mov ecx, eax
call fcn.004c0f80
mov eax, dword [ebp - 0x18]
mov dword [eax], 0x600208
mov dword [eax + 0x5c], 0xffffffff
jmp 0x4c839a
xor eax, eax
mov dword [ebx + 0x78], eax
mov dword [eax + 4], 0xb
mov edx, dword [ebx + 0x78]
mov eax, dword [edi + 4]
lea ecx, [ebp - 0x18]
push ecx
mov dword [ebp - 0x18], edx
mov edx, dword [eax + 4]
push edx
push eax
mov ecx, edi
mov byte [ebp - 4], 9
mov dword [ebp - 0x14], eax
call fcn.004fd910
push 1
mov ecx, edi
mov dword [ebp - 0x18], eax
call fcn.004b6e20
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [ecx + 4], eax
mov edx, dword [eax + 4]
mov dword [edx], eax
or eax, 0xffffffff
mov dword [ebx + 0x90], eax
mov dword [ebx + 0x94], eax
mov dword [ebx + 0x38], eax
sub esp, 0x14
mov eax, esp
mov dword [ebx + 0x54], esi
mov dword [ebx + 0x58], esi
mov dword [ebx + 0x5c], esi
mov dword [ebx + 0x6c], esi
mov dword [ebx + 0x70], esi
mov dword [ebx + 0x74], esi
mov dword [ebx + 0x88], esi
mov dword [ebx + 0x8c], 0x7530
mov dword [ebx + 0xb8], esi
mov dword [ebp - 0x18], esp
push 7
lea ecx, [ebx + 0x18]
mov dword [eax + 4], esi
mov dword [eax + 8], esi
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
call fcn.004c8030
xor eax, eax
sub esp, 0x34
mov ecx, 0xd
lea edi, [ebp - 0x50]
rep stosd dword es:[edi], eax
mov edi, esp
mov ecx, 0xd
lea esi, [ebp - 0x50]
rep movsd dword es:[edi], dword [esi]
push 7
lea ecx, [ebx + 0x28]
call fcn.004bdb40
or edi, 0xffffffff
xor esi, esi
push 0x5eb0c0
lea ecx, [ebx + 0x104]
mov dword [ebx + 0xb4], edi
mov dword [ebx + 0x100], esi
call dword [fcn.005ea348]
mov dword [ebx + 0x120], edi
mov byte [ebx + 0xdc], 0
mov eax, dword [0x5ea320]
mov ecx, dword [eax]
push ecx
push esi
lea ecx, [ebx + 0xe0]
call dword [fcn.005ea310]
mov ecx, dword [ebp - 0xc]
mov dword [ebx + 0xfc], esi
pop edi
pop esi
mov eax, ebx
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret