Function at 0x4e2cf4
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffee8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov esi, ecx
mov edi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x4e3038
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp + 8]
call fcn.0040468c
mov edx, esi
mov eax, dword [ebx + 0xc]
call fcn.00517aec
mov edx, edi
call fcn.004fe644
mov al, byte [eax + 0x30]
dec al
je 0x4e2d52
sub al, 2
je 0x4e2ff5
jmp 0x4e301a
mov edx, esi
mov eax, dword [ebx + 0xc]
call fcn.00517aec
mov edx, edi
call fcn.004fe644
cmp dword [eax + 0x20], 0
je 0x4e2d94
mov edx, esi
mov eax, dword [ebx + 0xc]
call fcn.00517aec
mov edx, edi
call fcn.004fe644
mov eax, dword [eax + 0x20]
push eax
mov eax, dword [ebx + 8]
call fcn.005050b8
mov eax, dword [eax + 0x30]
pop edx
call fcn.0049b128
mov dword [ebp - 8], eax
jmp 0x4e2db6
mov edx, esi
mov eax, dword [ebx + 0xc]
call fcn.00517aec
mov eax, dword [eax + 0x40]
push eax
mov eax, dword [ebx + 8]
call fcn.005050b8
mov eax, dword [eax + 0x30]
pop edx
call fcn.0049b128
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4e301a
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + 8]
imul edi
add esi, eax
mov eax, dword [ebx + 0x14]
fild qword [eax + esi*8]
lea eax, [ebp - 0x18]
call fcn.00417238
mov eax, dword [ebp - 8]
movzx eax, byte [eax + 0x40]
cmp eax, 8
jg 0x4e2e01
je 0x4e2e7d
add eax, 0xfffffffe
sub eax, 3
jb 0x4e2e14
dec eax
sub eax, 2
jb 0x4e2f77
jmp 0x4e301a
sub eax, 0xe
je 0x4e2e14
sub eax, 0x17
je 0x4e2efa
jmp 0x4e301a
mov eax, dword [ebp - 8]
mov edx, dword [0x48a8d0]
call fcn.00403928
mov ebx, eax
lea eax, [ebp - 4]
mov edx, dword [ebx + 0xe0]
call fcn.00404724
cmp dword [ebp - 4], 0
jne 0x4e2e5e
lea eax, [ebp - 0x18]
call fcn.00413810
lea edx, [ebp - 0x118]
call fcn.00403158
lea edx, [ebp - 0x118]
mov eax, dword [ebp + 8]
call fcn.00404900
jmp 0x4e301a
lea eax, [ebp - 0x18]
call fcn.00415160
add esp, 0xfffffff4
fstp xword [esp]
wait
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 4]
call fcn.0040bdf4
jmp 0x4e301a
mov eax, dword [ebp - 8]
mov edx, dword [0x48bfc4]
call fcn.00403928
mov ebx, eax
lea eax, [ebp - 4]
mov edx, dword [ebx + 0xe0]
call fcn.00404724
cmp dword [ebp - 4], 0
jne 0x4e2edb
cmp byte [ebx + 0xe8], 0
je 0x4e2eb7
mov bl, 4
mov esi, dword [0x6b4cb0]
movzx esi, byte [esi]
jmp 0x4e2ebb
xor ebx, ebx
xor esi, esi
lea eax, [ebp - 0x18]
call fcn.00415abc
add esp, 0xfffffff8
fistp qword [esp]
wait
mov ecx, dword [ebp + 8]
mov edx, esi
mov eax, ebx
call fcn.0040bdbc
jmp 0x4e301a
lea eax, [ebp - 0x18]
call fcn.00415abc
add esp, 0xfffffff8
fistp qword [esp]
wait
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 4]
call fcn.0040be4c
jmp 0x4e301a
mov eax, dword [ebp - 8]
mov edx, dword [0x48c1c8]
call fcn.00403928
mov ebx, eax
lea eax, [ebp - 4]
mov edx, dword [ebx + 0xe0]
call fcn.00404724
cmp dword [ebp - 4], 0
jne 0x4e2f58
cmp byte [ebx + 0xe8], 0
je 0x4e2f34
mov bl, 4
mov esi, dword [0x6b4cb0]
movzx esi, byte [esi]
jmp 0x4e2f38
xor ebx, ebx
xor esi, esi
lea eax, [ebp - 0x18]
call fcn.00415abc
add esp, 0xfffffff8
fistp qword [esp]
wait
mov ecx, dword [ebp + 8]
mov edx, esi
mov eax, ebx
call fcn.0040bdbc
jmp 0x4e301a
lea eax, [ebp - 0x18]
call fcn.00415abc
add esp, 0xfffffff8
fistp qword [esp]
wait
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 4]
call fcn.0040be4c
jmp 0x4e301a
mov eax, dword [ebp - 8]
mov edx, dword [0x48b034]
call fcn.00403928
mov edi, eax
lea eax, [ebp - 4]
mov edx, dword [edi + 0xe0]
call fcn.00404724
cmp dword [ebp - 4], 0
jne 0x4e2fd9
cmp byte [edi + 0xe8], 0
je 0x4e2fb1
mov bl, 4
mov esi, dword [0x6b4cb0]
movzx esi, byte [esi]
jmp 0x4e2fb5
xor ebx, ebx
xor esi, esi
lea eax, [ebp - 0x18]
call fcn.00415160
add esp, 0xfffffff4
fstp xword [esp]
wait
mov eax, dword [ebp + 8]
push eax
mov edx, dword [edi + 0xec]
mov ecx, esi
mov eax, ebx
call fcn.0040bd84
jmp 0x4e301a
lea eax, [ebp - 0x18]
call fcn.00415160
add esp, 0xfffffff4
fstp xword [esp]
wait
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 4]
call fcn.0040bdf4
jmp 0x4e301a
mov eax, dword [ebx + 0xc]
mov eax, dword [eax + 8]
imul edi
add esi, eax
mov eax, dword [ebx + 0x14]
fild qword [eax + esi*8]
fdiv dword [0x4e3048]
add esp, 0xfffffff4
fstp xword [esp]
wait
mov eax, dword [ebp + 8]
call fcn.0040bcbc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e303f
lea eax, [ebp - 0x18]
call fcn.00412bf4
lea eax, [ebp - 4]
call fcn.0040468c
ret