Function at 0x40902d
Capabilities:
Access peb ldr_data

Disassembly:
call fcn.00432645
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409012
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x28], eax
add esi, 1
push esi
lea ecx, [esp + 0x2c]
push 0x47bd6c
push ecx
mov byte [esp + 0x78], 6
mov dword [esp + 0x58], esi
call fcn.004045cd
push 0x47ba48
lea eax, [ebx + 0x2d8]
push eax
lea edx, [esp + 0x4c]
push edx
call fcn.0040159d
add esp, 0x18
mov byte [esp + 0x6c], 7
mov ecx, dword [esp + 0x28]
mov eax, dword [eax]
push 0x47b168
push ecx
push eax
lea edx, [esp + 0x2c]
push edx
lea ecx, [esp + 0x40]
call fcn.0042c1ad
mov byte [esp + 0x6c], 9
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408b51
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x20]
cmp dword [ecx - 0xc], 0
je 0x408f42
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x20]
push eax
call fcn.0041c12d
add esp, 8
mov byte [esp + 0x6c], 0xa
mov edx, dword [esp + 0x1c]
mov esi, dword [edx - 0xc]
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, esi
or eax, ecx
jge 0x408b9c
push esi
lea ecx, [esp + 0x20]
call fcn.004018bd
mov edx, dword [esp + 0x1c]
lea ecx, [esi + 1]
push ecx
push edx
call fcn.00450dab
add esp, 8
test esi, esi
jl 0x409021
mov eax, dword [esp + 0x1c]
cmp esi, dword [eax - 8]
jg 0x409021
mov dword [eax - 0xc], esi
mov edx, dword [esp + 0x1c]
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x1c]
push ecx
mov word [edx + esi*2], 0
call fcn.0041c12d
add esp, 8
mov byte [esp + 0x6c], 0xb
mov edx, dword [esp + 0x18]
mov esi, dword [edx - 0xc]
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, esi
or eax, ecx
jge 0x408c08
push esi
lea ecx, [esp + 0x1c]
call fcn.004018bd
mov edx, dword [esp + 0x18]
lea eax, [esi + 1]
push eax
push edx
call fcn.00450dab
add esp, 8
test esi, esi
jl 0x409021
mov eax, dword [esp + 0x18]
cmp esi, dword [eax - 8]
jg 0x409021
mov dword [eax - 0xc], esi
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x18]
push eax
mov word [ecx + esi*2], 0
call fcn.0041c12d
add esp, 8
mov byte [esp + 0x6c], 0xc
mov edx, dword [esp + 0x14]
mov esi, dword [edx - 0xc]
mov eax, dword [edx - 8]
mov ecx, 1
sub ecx, dword [edx - 4]
sub eax, esi
or eax, ecx
jge 0x408c74
push esi
lea ecx, [esp + 0x18]
call fcn.004018bd
mov edx, dword [esp + 0x14]
lea ecx, [esi + 1]
push ecx
push edx
call fcn.00450dab
add esp, 8
test esi, esi
jl 0x409021
mov eax, dword [esp + 0x14]
cmp esi, dword [eax - 8]
jg 0x409021
mov dword [eax - 0xc], esi
mov edx, dword [esp + 0x14]
mov word [edx + esi*2], 0
mov edi, dword [esp + 0x1c]
test edi, edi
je 0x408ed3
mov ebp, dword [ebx + 0x23c]
xor esi, esi
test ebp, ebp
jle 0x408cfd
mov edi, edi
test esi, esi
jl 0x40901c
cmp esi, dword [ebx + 0x23c]
jge 0x40901c
mov eax, dword [ebx + 0x238]
mov ebx, dword [eax + esi*4]
mov eax, dword [ebx + 0x1d8]
push edi
push eax
call fcn.00450538
add esp, 8
test eax, eax
je 0x408dd6
mov ebx, dword [esp + 0x74]
add esi, 1
cmp esi, ebp
jl 0x408cbd
add ebx, 0x25c
push edi
call fcn.0040aa3d
test eax, eax
jne 0x408d55
mov esi, dword [esp + 0x74]
lea ebx, [esi + 0x284]
push edi
call fcn.0040aa9d
test eax, eax
jne 0x408d55
lea ebx, [esi + 0x270]
push edi
call fcn.0040aafd
test eax, eax
jne 0x408d55
lea ebx, [esi + 0x248]
push edi
call fcn.0040ab5d
test eax, eax
jne 0x408d55
lea ebx, [esi + 0x2ac]
push edi
call fcn.0040abbd
test eax, eax
je 0x40900b
mov edi, eax
test edi, edi
je 0x408ecf
call fcn.00432645
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
je 0x409012
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esp + 0x24], eax
mov byte [esp + 0x6c], 0xd
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], 0
jne 0x408ddd
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004014dd
add esp, 0xc
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x70], 0xe
call fcn.004019cd
mov byte [esp + 0x6c], 0xd
mov eax, dword [esp + 0x3c]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x408e96
mov edi, ebx
jmp 0x408d57
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x50]
push eax
call fcn.004014dd
push 0x47b14c
push eax
lea ecx, [esp + 0x58]
push ecx
mov byte [esp + 0x84], 0xf
call fcn.0040159d
lea edx, [esp + 0x30]
push edx
push eax
lea eax, [esp + 0x60]
mov bl, 0x10
push eax
mov byte [esp + 0x90], bl
call fcn.004014dd
add esp, 0x24
push eax
lea ecx, [esp + 0x28]
mov byte [esp + 0x70], 0x11
call fcn.004019cd
mov byte [esp + 0x6c], bl
mov eax, dword [esp + 0x40]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408e58
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x6c], 0xf
mov eax, dword [esp + 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408e7d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x6c], 0xd
mov eax, dword [esp + 0x48]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408ea2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x24]
push esi
mov ecx, edi
call fcn.0042b60d
lea eax, [esi - 0x10]
mov byte [esp + 0x6c], 0xc
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408ecf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ebx, dword [esp + 0x74]
mov byte [esp + 0x6c], 0xb
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408ef8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x6c], 0xa
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408f1d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x6c], 9
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408f42
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x6c], 6
mov eax, dword [esp + 0x20]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408f67
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x6c], 4
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408f8c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x4c]
cmp esi, dword [esp + 0x58]
jl 0x408ab3
lea ecx, [esp + 0x50]
mov byte [esp + 0x6c], 3
call fcn.0043d4f5
insb byte es:[edi], dx
add ebp, eax
dec ebp
inc ebp
add eax, dword [eax]
mov byte [esp + 0x6c], 0
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408fcd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x6c], 0xffffffff
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x408ff5
adc dword [edx - 0x7b], ecx
sar byte [edi + 0xa], cl
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [esp + 0x64]
mov dword fs:[0], ecx
test al, 0x3d
dec eax
lodsb al, byte [esi]
mov byte [ecx + edi*4], dl
jg 0x408f94
jge 0x408fa1
add ch, ah
dec ecx
dec esp
pop esp
sub al, al
sub al, al
sub dword [ebp + 0x2a2f8c1f], edx
cwde
in eax, dx
dec esi
sub eax, 0x4e28e34d
dec esi
stosd dword es:[edi], eax
lodsd eax, dword [esi]
in eax, dx
stosd dword es:[edi], eax
wait
add eax, 0x6de82dd8
int3
push ebp
aam 0x4d
mov dword [0x835fb336], eax
mov ebx, ecx
pop ebx
push 0x4d
mov al, 0x95
clc
pop edx
adc cl, byte [bx + si - 0x4b04]
sub edx, dword [edi]
mov dword [eax], edx
inc edx
or dword [ecx + 0x2f740d0d], edx
cmp al, 0x34
test al, 0x73
mov dl, 0x83
sal byte [eax + 0x64966860], 0xc1
inc ebp
rcr esi, 0xcb
mov dh, 0x5a
js 0x408fe5
ret