Function at 0x483e78
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xd
push 0
push 0
dec ecx
jne 0x483e80
push ecx
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x48473a
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [esi + 0x2bc]
call fcn.004092f0
mov ebx, eax
xor bl, 1
mov ecx, dword [esi + 0x2bc]
mov dl, 1
mov eax, dword [0x436aa0]
call fcn.00436b50
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x48470b
push dword fs:[eax]
mov dword fs:[eax], esp
push 0x484750
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x48475c
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi]
xor eax, eax
mov al, byte [esi + 0xb8]
push eax
mov ecx, 0x484784
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0xc]
push eax
mov ecx, 0x48475c
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [esi + 0x2c4]
push eax
mov ecx, 0x484794
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [esi + 0x2c0]
push eax
mov ecx, 0x4847a4
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [esi + 0x2c8]
push eax
mov ecx, 0x4847b8
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [esi + 0x2fc]
push eax
mov ecx, 0x4847c4
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [esi + 0x300]
push eax
mov ecx, 0x4847d8
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [esi + 0x2e4]
push dword [esi + 0x2e0]
mov ecx, 0x4847e8
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x30]
mov al, byte [esi + 0x2dc]
push eax
mov ecx, 0x484800
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x14]
mov eax, dword [esi + 0x2e8]
push eax
mov ecx, 0x484818
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [esi + 0x2ec]
push eax
mov ecx, 0x48482c
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [esi + 0x2f4]
push eax
mov ecx, 0x484840
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [esi + 0x2f8]
push eax
mov ecx, 0x484854
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x1c]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov ecx, 0x484868
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x38]
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x20]
add esp, 0xfffffff8
fstp qword [esp]
wait
mov ecx, 0x48487c
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x38]
mov eax, dword [esi + 0x2f0]
push eax
mov ecx, 0x484890
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [esi + 0x60]
push eax
mov ecx, 0x4848ac
mov edx, 0x484770
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
test bl, bl
je 0x484266
mov edx, 0x4848c0
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov eax, dword [esi + 0x2cc]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x484114
inc eax
mov dword [ebp - 0x10], eax
xor ebx, ebx
lea ecx, [ebp - 0x2c]
mov eax, dword [esi + 0x2cc]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x34]
mov edx, 3
mov eax, ebx
call fcn.00473088
mov ecx, dword [ebp - 0x34]
lea eax, [ebp - 0x30]
mov edx, 0x4848d4
call fcn.00404a64
mov ecx, dword [ebp - 0x30]
mov edx, 0x4848c0
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
inc ebx
dec dword [ebp - 0x10]
jne 0x4840cb
mov edx, 0x4848e0
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
mov eax, dword [esi + 0x2d0]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x484180
inc eax
mov dword [ebp - 0x10], eax
xor ebx, ebx
lea ecx, [ebp - 0x38]
mov eax, dword [esi + 0x2d0]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x38]
push eax
lea ecx, [ebp - 0x40]
mov edx, 3
mov eax, ebx
call fcn.00473088
mov ecx, dword [ebp - 0x40]
lea eax, [ebp - 0x3c]
mov edx, 0x4848d4
call fcn.00404a64
mov ecx, dword [ebp - 0x3c]
mov edx, 0x4848e0
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
inc ebx
dec dword [ebp - 0x10]
jne 0x484137
mov eax, dword [esi + 0x2d4]
push eax
mov ecx, 0x4848f8
mov edx, 0x4848e0
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [esi + 0x9c]
push eax
mov ecx, 0x48490c
mov edx, 0x48491c
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0xc]
lea edx, [ebp - 0x44]
mov eax, dword [esi + 0x2d8]
call fcn.004737b0
mov eax, dword [ebp - 0x44]
push eax
mov ecx, 0x484930
mov edx, 0x48491c
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 4]
lea edx, [ebp - 0x48]
mov eax, dword [esi + 0x398]
call fcn.004737b0
mov eax, dword [ebp - 0x48]
push eax
mov ecx, 0x484950
mov edx, 0x48491c
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 4]
lea edx, [ebp - 0x4c]
mov eax, dword [esi + 0x38c]
call fcn.004737b0
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, 0x484970
mov edx, 0x48491c
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 4]
lea edx, [ebp - 0x50]
mov eax, dword [esi + 0x390]
call fcn.004737b0
mov eax, dword [ebp - 0x50]
push eax
mov ecx, 0x484994
mov edx, 0x48491c
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 4]
lea edx, [ebp - 0x54]
mov eax, dword [esi + 0x394]
call fcn.004737b0
mov eax, dword [ebp - 0x54]
push eax
mov ecx, 0x4849b8
mov edx, 0x48491c
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 4]
mov eax, dword [esi + 0x32c]
mov edx, dword [esi + 0x328]
cmp eax, dword [edx + 8]
je 0x48439f
xor ebx, ebx
lea ecx, [ebp - 0x58]
mov edx, 3
mov eax, ebx
call fcn.00473088
mov ecx, dword [ebp - 0x58]
lea eax, [ebp - 8]
mov edx, 0x4849d8
call fcn.00404a64
mov edi, dword [esi + 0x328]
mov eax, dword [edi + 8]
dec eax
cmp ebx, eax
jg 0x484370
mov eax, edi
mov edx, ebx
call fcn.0042adac
mov edx, dword [0x47f74c]
call fcn.00403bb8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 4]
push eax
mov ecx, 0x4849ec
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x1c]
push eax
mov ecx, 0x484a00
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x14]
push dword [eax + 0x14]
push dword [eax + 0x10]
mov ecx, 0x484a10
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x38]
mov eax, dword [ebp - 0x14]
push dword [eax + 0xc]
push dword [eax + 8]
mov ecx, 0x484a1c
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x38]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x18]
push eax
mov ecx, 0x484a30
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x14]
push dword [eax + 0x24]
push dword [eax + 0x20]
mov ecx, 0x484a40
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x38]
mov eax, dword [ebp - 0x14]
push dword [eax + 0x2c]
push dword [eax + 0x28]
mov ecx, 0x484a54
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x38]
jmp 0x48438a
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00436b8c
test al, al
je 0x484390
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
inc ebx
jmp 0x48427d
mov eax, dword [esi + 0x328]
mov eax, dword [eax + 8]
mov dword [esi + 0x32c], eax
xor ebx, ebx
lea ecx, [ebp - 0x5c]
mov edx, 2
mov eax, ebx
call fcn.00473088
mov ecx, dword [ebp - 0x5c]
lea eax, [ebp - 8]
mov edx, 0x484a68
call fcn.00404a64
mov edi, dword [esi + 0x330]
mov eax, dword [edi + 8]
dec eax
cmp ebx, eax
jg 0x484417
mov eax, edi
mov edx, ebx
call fcn.0042adac
mov edx, dword [0x47f7d0]
call fcn.00403bb8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 0x10]
push eax
mov ecx, 0x484a80
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x18]
push dword [eax + 0xc]
push dword [eax + 8]
mov ecx, 0x484a90
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x38]
jmp 0x484431
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00436b8c
test al, al
je 0x484437
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
inc ebx
jmp 0x4843a1
xor ebx, ebx
lea ecx, [ebp - 0x60]
mov edx, 2
mov eax, ebx
call fcn.00473088
mov ecx, dword [ebp - 0x60]
lea eax, [ebp - 8]
mov edx, 0x484aa4
call fcn.00404a64
mov edi, dword [esi + 0x334]
mov eax, dword [edi + 8]
dec eax
cmp ebx, eax
jg 0x4844af
mov eax, edi
mov edx, ebx
call fcn.0042adac
mov edx, dword [0x47f83c]
call fcn.00403bb8
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x10]
push eax
mov ecx, 0x484ab8
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x1c]
push dword [eax + 0xc]
push dword [eax + 8]
mov ecx, 0x484ac8
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x38]
jmp 0x4844c9
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00436b8c
test al, al
je 0x4844cf
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
inc ebx
jmp 0x484439
xor ebx, ebx
lea ecx, [ebp - 0x64]
mov edx, 2
mov eax, ebx
call fcn.00473088
mov ecx, dword [ebp - 0x64]
lea eax, [ebp - 8]
mov edx, 0x484ad8
call fcn.00404a64
mov edi, dword [esi + 0x320]
mov eax, dword [edi + 8]
dec eax
cmp ebx, eax
jg 0x48455e
mov eax, edi
mov edx, ebx
call fcn.0042adac
mov edx, dword [0x47f638]
call fcn.00403bb8
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x10]
push eax
mov ecx, 0x484af0
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 4]
push eax
mov ecx, 0x4849ec
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x20]
push dword [eax + 0xc]
push dword [eax + 8]
mov ecx, 0x484b00
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x38]
jmp 0x484578
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00436b8c
test al, al
je 0x48457e
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
inc ebx
jmp 0x4844d1
xor ebx, ebx
lea ecx, [ebp - 0x68]
mov edx, 2
mov eax, ebx
call fcn.00473088
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 8]
mov edx, 0x484b14
call fcn.00404a64
mov edi, dword [esi + 0x324]
mov eax, dword [edi + 8]
dec eax
cmp ebx, eax
jg 0x48460d
mov eax, edi
mov edx, ebx
call fcn.0042adac
mov edx, dword [0x47f6c0]
call fcn.00403bb8
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 0x10]
push eax
mov ecx, 0x484af0
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax + 4]
push eax
mov ecx, 0x4849ec
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x24]
push dword [eax + 0xc]
push dword [eax + 8]
mov ecx, 0x484b00
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x38]
jmp 0x484627
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00436b8c
test al, al
je 0x48462d
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
inc ebx
jmp 0x484580
xor ebx, ebx
lea ecx, [ebp - 0x6c]
mov edx, 2
mov eax, ebx
call fcn.00473088
mov ecx, dword [ebp - 0x6c]
lea eax, [ebp - 8]
mov edx, 0x484b34
call fcn.00404a64
mov edi, dword [esi + 0x31c]
mov eax, dword [edi + 8]
dec eax
cmp ebx, eax
jg 0x4846d5
mov eax, edi
mov edx, ebx
call fcn.0042adac
mov edx, dword [0x47f5c0]
call fcn.00403bb8
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x20]
push eax
mov ecx, 0x4849ec
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 4]
mov eax, dword [ebp - 0x28]
push dword [eax + 0xc]
push dword [eax + 8]
mov ecx, 0x484b34
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x38]
mov eax, dword [ebp - 0x28]
mov al, byte [eax + 0x10]
push eax
mov ecx, 0x484b48
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x14]
mov eax, dword [ebp - 0x28]
push dword [eax + 0x1c]
push dword [eax + 0x18]
mov ecx, 0x484b00
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov edi, dword [eax]
call dword [edi + 0x38]
jmp 0x4846ef
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00436b8c
test al, al
je 0x4846f5
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x4c]
inc ebx
jmp 0x48462f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x484712
mov eax, dword [ebp - 4]
call fcn.00403a08
ret