Function at 0x4867b0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x4af8d8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push ebx
push ebp
push esi
push edi
mov edi, ecx
lea edx, [esp + 0x12]
xor ebx, ebx
push edx
mov eax, dword [edi + 0x2448]
mov cl, byte [edi + 0x2448]
sar eax, 8
mov byte [edi + 0x676], al
lea eax, [esp + 0x17]
mov byte [edi + 0x677], cl
push eax
lea ecx, [esp + 0x30]
mov byte [edi + 0x670], 3
mov byte [edi + 0x671], bl
mov byte [edi + 0x672], bl
mov byte [edi + 0x674], 8
mov byte [edi + 0x675], 2
mov byte [edi + 0x678], 1
mov byte [edi + 0x679], 0x7e
mov byte [edi + 0x67a], bl
mov byte [edi + 0x67c], 5
call fcn.0048b920
mov ecx, dword [0x4b1dec]
mov dword [esp + 0x84], ebx
push ecx
lea ecx, [esp + 0x40]
mov dword [esp + 0x28], 2
call fcn.0049550c
mov dword [esp + 0x3c], 0x4b6eb8
mov edx, dword [esp + 0x48]
mov byte [esp + 0x84], 1
mov eax, dword [edx]
mov eax, dword [eax + 0xc]
mov esi, dword [eax]
mov eax, dword [0x4b1e4c]
cmp eax, ebx
jne 0x486881
xor eax, eax
jmp 0x486887
push eax
call dword [eax]
add esp, 4
push eax
push 3
mov ecx, esi
call fcn.004954a0
mov esi, eax
push 0x4d8db4
push 0x4d8d9c
mov eax, dword [esi + 0xc]
mov eax, dword [eax]
lea ecx, [eax + 8]
call fcn.0048c080
mov eax, dword [esi + 0xc]
push 3
push 1
mov ecx, esi
mov eax, dword [eax + 4]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x18]
mov byte [eax + 8], bl
mov eax, dword [esi + 0xc]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0x1c]
mov byte [eax + 8], bl
call fcn.00495494
mov esi, dword [esi + 0xc]
mov esi, dword [esi + 0xc]
mov esi, dword [esi + 0xc]
mov esi, dword [esi]
add esi, 8
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
push eax
push ecx
mov ecx, esi
call fcn.0048bd00
mov ecx, dword [esp + 0x8c]
mov eax, dword [esi + 4]
lea edx, [ecx + 0x10]
push edx
push ecx
push eax
mov ecx, esi
call fcn.0048bb20
mov al, byte [esp + 0x8c]
mov dword [esp + 0x18], ebx
mov byte [esp + 0x14], al
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
lea ecx, [esp + 0x14]
lea edx, [esp + 0x3c]
push ecx
push edx
lea ecx, [esp + 0x2c]
mov byte [esp + 0x8c], 2
call fcn.0048c460
test al, al
jne 0x48697f
mov eax, dword [esp + 0x18]
push eax
call fcn.004a297c
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov byte [esp + 0x84], bl
call fcn.00495506
lea ecx, [esp + 0x28]
mov dword [esp + 0x84], 0xffffffff
call fcn.0048b950
jmp 0x486a54
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
xor esi, esi
cmp eax, ebx
je 0x4869a6
mov ecx, ebp
sub ecx, eax
cmp esi, ecx
jae 0x4869a2
mov dl, byte [eax + esi]
mov byte [esi + edi + 0x67d], dl
inc esi
jmp 0x486989
cmp eax, ebx
jne 0x4869aa
xor ecx, ecx
jmp 0x4869ae
mov ecx, ebp
sub ecx, eax
inc cl
cmp eax, ebx
mov byte [edi + 0x67b], cl
jne 0x4869be
xor ecx, ecx
jmp 0x4869c2
mov ecx, ebp
sub ecx, eax
add cl, 0xd
cmp eax, ebx
mov byte [edi + 0x673], cl
jne 0x4869d3
xor eax, eax
jmp 0x4869d7
sub ebp, eax
mov eax, ebp
add eax, 0xd
mov ecx, edi
mov dword [edi + 0x1228], eax
push eax
lea eax, [edi + 0x670]
push eax
call fcn.00486f10
xor eax, eax
push 2
mov al, byte [0x4e0b24]
push 2
lea ecx, [eax*4 + 0x4e43a4]
push ecx
mov edx, esp
mov dword [esp + 0x98], esp
push ecx
push str.H.225___ALERTING
push edx
call fcn.004a2b2c
mov ecx, edi
call fcn.004817c0
mov eax, dword [esp + 0x18]
push eax
call fcn.004a297c
add esp, 4
lea ecx, [esp + 0x3c]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov byte [esp + 0x84], bl
call fcn.00495506
mov ecx, dword [esp + 0x2c]
push ecx
call fcn.004a297c
add esp, 4
mov ecx, dword [esp + 0x7c]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x78
ret 4