Function at 0x4b1d30
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x6207b0
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x30]
xor esi, esi
cmp edi, esi
mov ebp, ecx
je 0x4b1e51
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x4b1e51
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x10], esi
cmp edi, esi
je 0x4b1d9f
push edi
call fcn.005e71bf
add esp, 4
test eax, eax
je 0x4b1d9f
push 0x2e
push edi
call fcn.005e710f
add esp, 8
cmp eax, esi
mov dword [esp + 0x10], eax
je 0x4b1d9f
add eax, 2
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 8]
xor ebx, ebx
cmp eax, esi
jle 0x4b1e51
mov eax, dword [ebp + 4]
add eax, esi
mov cl, byte [eax + 0x15]
test cl, cl
je 0x4b1e40
mov edx, dword [eax + 0x18]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x4b1e40
mov ecx, dword [esp + 0x30]
push edx
push ecx
mov ecx, ebp
call fcn.004b1b10
test al, al
je 0x4b1e40
mov edx, dword [ebp + 4]
or ecx, 0xffffffff
xor eax, eax
mov edi, dword [edx + esi + 0xc]
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x4b1f5c
mov eax, dword [esp + 0x10]
test eax, eax
je 0x4b1e40
lea ecx, [esp + 0x18]
push eax
push ecx
call fcn.00402500
add esp, 8
mov edx, dword [ebp + 4]
mov ecx, ebp
mov dword [esp + 0x24], 0
mov eax, dword [edx + esi + 0xc]
push eax
mov eax, dword [esp + 0x1c]
push eax
call fcn.004b1b10
test al, al
jne 0x4b1f9c
lea ecx, [esp + 0x18]
mov dword [esp + 0x24], 0xffffffff
call fcn.00603a3c
mov eax, dword [ebp + 8]
inc ebx
add esi, 0x1c
cmp ebx, eax
jl 0x4b1dac
xor esi, esi
mov edi, dword [esp + 0x2c]
cmp edi, esi
je 0x4b20a8
push edi
call fcn.005e71bf
add esp, 4
test eax, eax
je 0x4b20a8
push 0x2e
push edi
call fcn.005e710f
add esp, 8
cmp eax, esi
je 0x4b20a8
add eax, 2
lea ecx, [esp + 0x14]
push eax
push ecx
call fcn.00402500
add esp, 8
mov eax, dword [ebp + 8]
mov ebx, dword [esp + 0x14]
cmp eax, esi
mov dword [esp + 0x24], 1
mov dword [esp + 0x30], esi
jle 0x4b2097
mov dword [esp + 0x2c], esi
mov edx, dword [ebp + 4]
mov eax, dword [esp + 0x2c]
mov edi, ebx
or ecx, 0xffffffff
mov esi, dword [edx + eax + 0xc]
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
push edi
push ebx
push esi
call fcn.005ea9e0
add esp, 0xc
test eax, eax
jne 0x4b1eec
mov al, byte [edi + esi]
cmp al, 0x20
je 0x4b1fed
test al, al
je 0x4b1fed
push 0x6a1484
push esi
call fcn.005e72b0
lea ecx, [edi + esi]
add esp, 8
cmp ecx, eax
jbe 0x4b1f21
push 0x6a1484
push esi
call fcn.005e72b0
sub eax, esi
push eax
push ebx
push esi
call fcn.005ea9e0
add esp, 0x14
test eax, eax
je 0x4b2042
push 0x6a0fa0
push esi
call fcn.005e72b0
mov esi, eax
add esp, 8
test esi, esi
je 0x4b1f38
inc esi
jne 0x4b1eca
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x2c]
mov ecx, dword [ebp + 8]
inc eax
add edx, 0x1c
cmp eax, ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], edx
jl 0x4b1eb1
jmp 0x4b2097
mov ecx, dword [ebp + 4]
lea esi, [ebx*8]
sub esi, ebx
shl esi, 2
mov edx, dword [ecx + esi + 0x10]
mov ecx, dword [esp + 0x34]
push edx
call fcn.00603bec
mov eax, dword [ebp + 4]
mov edx, dword [esp + 0x38]
pop edi
mov ecx, dword [eax + esi]
pop esi
pop ebp
mov dword [edx], ecx
mov al, 1
pop ebx
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
add esp, 0x18
ret 0x10
mov eax, dword [ebp + 4]
lea esi, [ebx*8]
mov ecx, dword [esp + 0x34]
sub esi, ebx
shl esi, 2
mov eax, dword [eax + esi + 0x10]
push eax
call fcn.00603bec
mov ecx, dword [ebp + 4]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x24], 0xffffffff
mov edx, dword [ecx + esi]
lea ecx, [esp + 0x18]
mov dword [eax], edx
call fcn.00603a3c
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
add esp, 0x18
ret 0x10
mov eax, dword [esp + 0x30]
mov edx, dword [ebp + 4]
mov ecx, dword [esp + 0x34]
lea esi, [eax*8]
sub esi, eax
shl esi, 2
lea eax, [edx + esi + 4]
push eax
call fcn.00603b75
mov ecx, dword [ebp + 4]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x24], 0xffffffff
mov edx, dword [ecx + esi]
lea ecx, [esp + 0x14]
mov dword [eax], edx
call fcn.00603a3c
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
add esp, 0x18
ret 0x10
mov eax, dword [esp + 0x30]
mov ecx, dword [ebp + 4]
lea esi, [eax*8]
sub esi, eax
shl esi, 2
lea edx, [ecx + esi + 4]
mov ecx, dword [esp + 0x34]
push edx
call fcn.00603b75
mov eax, dword [ebp + 4]
mov edx, dword [esp + 0x38]
mov dword [esp + 0x24], 0xffffffff
mov ecx, dword [eax + esi]
mov dword [edx], ecx
lea ecx, [esp + 0x14]
call fcn.00603a3c
pop edi
pop esi
pop ebp
mov al, 1
pop ebx
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
add esp, 0x18
ret 0x10
lea ecx, [esp + 0x14]
mov dword [esp + 0x24], 0xffffffff
call fcn.00603a3c
mov ecx, dword [esp + 0x1c]
pop edi
pop esi
pop ebp
xor al, al
pop ebx
mov dword fs:[0], ecx
add esp, 0x18
ret 0x10