Function at 0x4a8332
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x544d17
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x34
mov eax, dword [0x591288]
push ebx
push esi
push edi
mov esi, ecx
mov dword [esp + 0x38], 0
mov dword [esp + 0xc], eax
mov edi, 1
mov dword [esp + 0x20], eax
mov dword [esp + 0x48], edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x20]
mov byte [esp + 0x48], 4
push eax
push 0x487
call fcn.00510ebf
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx - 8]
test eax, eax
jne 0x4a802b
mov esi, dword [esp + 0x50]
lea edx, [esp + 0xc]
push edx
mov ecx, esi
call fcn.0050d172
mov dword [esp + 0x38], edi
jmp 0x4a83a0
lea eax, [esp + 0x10]
mov ecx, esi
push eax
push 0x4ef
call fcn.00510ebf
lea ecx, [esp + 0x1c]
push ecx
push 0x4f0
mov ecx, esi
call fcn.00510ebf
mov eax, dword [0x591288]
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], eax
lea edx, [esp + 0x30]
push 0
lea eax, [esp + 0x2c]
push edx
lea ecx, [esp + 0x3c]
push eax
lea edx, [esp + 0x20]
push ecx
lea eax, [esp + 0x28]
push edx
mov edx, dword [esp + 0x34]
lea ecx, [esp + 0x38]
push eax
mov bl, 8
push ecx
push edx
mov byte [esp + 0x68], bl
call fcn.0043e9c0
add esp, 0x20
test eax, eax
je 0x4a8328
mov eax, dword [esp + 0x24]
push eax
call fcn.0043eff0
add esp, 4
test eax, eax
je 0x4a8328
mov ecx, dword [esp + 0x18]
mov eax, dword [ecx - 8]
test eax, eax
je 0x4a8328
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x2c]
push edx
push eax
call fcn.0043ef20
add esp, 8
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x4c], 9
call fcn.0050d536
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0050d3fd
mov ecx, dword [esp + 0x28]
mov eax, dword [ecx - 8]
test eax, eax
je 0x4a8116
lea edx, [esp + 0x28]
lea ecx, [esp + 0x10]
push edx
call fcn.0050d536
lea eax, [esp + 0x30]
lea ecx, [esp + 0x1c]
push eax
call fcn.0050d536
lea ecx, [esp + 0x18]
call fcn.0050d98b
lea ecx, [esp + 0x18]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x30]
push edx
push eax
call fcn.0050d62c
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x4c], 0xa
call fcn.0050d536
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0050d3fd
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x24]
and ecx, 0xffff
push ecx
push edx
call fcn.0043f2f0
add esp, 8
test eax, eax
jne 0x4a81d4
mov eax, dword [0x591288]
mov dword [esp + 0x2c], eax
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x2c]
and ecx, 0xffff
mov byte [esp + 0x48], 0xb
push ecx
push 0x5881c0
push edx
call fcn.005060bb
add esp, 0xc
lea eax, [esp + 0x2c]
lea ecx, [esp + 0xc]
lea edx, [esp + 0x3c]
push eax
push ecx
push edx
call fcn.0050d62c
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x4c], 0xc
call fcn.0050d536
lea ecx, [esp + 0x3c]
mov byte [esp + 0x48], 0xb
call fcn.0050d3fd
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0050d3fd
cmp dword [esp + 0x24], edi
jne 0x4a820a
lea eax, [esp + 0x14]
push 0
lea ecx, [esp + 0x40]
push eax
push ecx
call fcn.00434800
add esp, 0xc
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x4c], 0xd
call fcn.0050d536
lea ecx, [esp + 0x3c]
mov byte [esp + 0x48], bl
call fcn.0050d3fd
lea edx, [esp + 0x14]
lea eax, [esp + 0xc]
push edx
lea ecx, [esp + 0x40]
push eax
push ecx
call fcn.0050d62c
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x4c], 0xe
call fcn.0050d536
lea ecx, [esp + 0x3c]
mov byte [esp + 0x48], bl
call fcn.0050d3fd
mov edx, dword [esp + 0x10]
mov eax, dword [edx - 8]
test eax, eax
je 0x4a82ef
lea eax, [esp + 0xc]
push str._r_n_r_n
lea ecx, [esp + 0x30]
push eax
push ecx
call fcn.0050d692
lea edx, [esp + 0x10]
mov byte [esp + 0x48], 0xf
push edx
push eax
lea eax, [esp + 0x44]
push eax
call fcn.0050d62c
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x4c], 0x10
call fcn.0050d536
lea ecx, [esp + 0x3c]
mov byte [esp + 0x48], 0xf
call fcn.0050d3fd
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0050d3fd
lea ecx, [esp + 0xc]
push str._r_n_r_n
lea edx, [esp + 0x30]
push ecx
push edx
call fcn.0050d692
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x3c]
push ecx
push eax
push edx
mov byte [esp + 0x54], 0x11
call fcn.0050d62c
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x4c], 0x12
call fcn.0050d536
lea ecx, [esp + 0x3c]
mov byte [esp + 0x48], 0x11
call fcn.0050d3fd
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0050d3fd
mov eax, dword [esp + 0x54]
test eax, eax
je 0x4a8354
mov ecx, dword [esi + 0x88]
mov edx, dword [esp + 0xc]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, esi
call fcn.004a83f0
push ecx
lea eax, [esp + 0x10]
mov ecx, esp
mov dword [esp + 0x58], esp
push eax
call fcn.0050d172
mov ecx, esi
call fcn.004a8500
jmp 0x4a8354
mov eax, dword [esp + 0x54]
test eax, eax
je 0x4a8354
push 0xffffffffffffffff
push 0
push 0xefbd
call fcn.0043c9e0
add esp, 0xc
mov ecx, esi
push 0x487
call fcn.005135e5
mov ecx, eax
call fcn.00513a2a
mov esi, dword [esp + 0x50]
lea ecx, [esp + 0xc]
push ecx
mov ecx, esi
call fcn.0050d172
lea ecx, [esp + 0x30]
mov dword [esp + 0x38], edi
mov byte [esp + 0x48], 7
call fcn.0050d3fd
lea ecx, [esp + 0x28]
mov byte [esp + 0x48], 6
call fcn.0050d3fd
lea ecx, [esp + 0x14]
mov byte [esp + 0x48], 5
call fcn.0050d3fd
lea ecx, [esp + 0x18]
mov byte [esp + 0x48], 4
call fcn.0050d3fd
lea ecx, [esp + 0x1c]
mov byte [esp + 0x48], 3
call fcn.0050d3fd
lea ecx, [esp + 0x10]
mov byte [esp + 0x48], 2
call fcn.0050d3fd
lea ecx, [esp + 0x20]
mov byte [esp + 0x48], 1
call fcn.0050d3fd
lea ecx, [esp + 0xc]
mov byte [esp + 0x48], 0
call fcn.0050d3fd
mov ecx, dword [esp + 0x40]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
add esp, 0x40
ret 8