Function at 0x48bac0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x48be6f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.0044a55c
test eax, eax
je 0x48be3b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.0044a55c
mov edx, eax
mov eax, dword [ebp - 4]
call fcn.0048a67c
test al, al
je 0x48bcca
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x300]
cmp byte [ebx + 0x3b4], 0
je 0x48be3b
mov eax, ebx
call fcn.0044a55c
mov eax, dword [eax + 0x24]
mov edx, 0x48be88
call fcn.00404e7c
jne 0x48bc35
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
cmp dword [eax + 0x3b0], 0
je 0x48bbd5
mov edx, dword [ebp - 8]
mov eax, 0x48be94
call fcn.00405074
mov esi, eax
lea edx, [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov eax, dword [eax + 0x3b0]
call fcn.0040ddb0
mov ecx, dword [ebp - 8]
mov edx, 0x48be94
mov eax, dword [ebp - 4]
call fcn.0048a77c
mov ebx, eax
cmp esi, ebx
jne 0x48bba7
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
xor edx, edx
call fcn.004890e0
jmp 0x48bbd5
lea eax, [ebp - 0x10]
push eax
mov ecx, ebx
add ecx, 1
jno 0x48bbb7
call fcn.00403be0
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.00404f90
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.004890e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov edx, dword [eax + 0x3b0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
call fcn.004875e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov eax, dword [eax + 0x22c]
call fcn.00446e84
test eax, eax
jle 0x48be3b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov eax, dword [eax + 0x22c]
xor edx, edx
call fcn.00446eb4
mov cl, 1
mov edx, 2
call fcn.00446a04
jmp 0x48be3b
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x300]
push dword [ebx + 0x3b0]
mov eax, ebx
call fcn.0044a55c
push dword [eax + 0x24]
push 0x48be94
lea eax, [ebp - 0x14]
mov edx, 3
call fcn.00404df0
mov edx, dword [ebp - 0x14]
mov eax, ebx
call fcn.004890e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov edx, dword [eax + 0x3b0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2fc]
call fcn.004875e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov eax, dword [eax + 0x22c]
call fcn.00446e84
test eax, eax
jle 0x48be3b
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov eax, dword [eax + 0x22c]
xor edx, edx
call fcn.00446eb4
mov cl, 1
mov edx, 2
call fcn.00446a04
jmp 0x48be3b
lea edx, [ebp - 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
call fcn.00495094
mov eax, dword [ebp - 8]
call fcn.00409890
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.0044a55c
mov eax, dword [eax + 0x24]
lea edx, [ebp - 0x18]
call fcn.00409964
mov eax, dword [ebp - 0x18]
push eax
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 8]
call fcn.00409930
mov edx, dword [ebp - 0x1c]
lea eax, [ebp - 8]
pop ecx
call fcn.00404d7c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov dl, byte [eax + 0xe0]
mov byte [ebp - 9], dl
xor edx, edx
push ebp
push 0x48bdc3
push dword fs:[edx]
mov dword fs:[edx], esp
mov dl, 2
call fcn.00495ad8
xor eax, eax
push ebp
push 0x48bd80
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
call fcn.0044a55c
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov eax, dword [eax + 0x30]
call fcn.00491670
mov edx, dword [ebp - 8]
call fcn.004912c8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48bda4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48bdca
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x2f8]
mov dl, byte [ebp - 9]
call fcn.00495ad8
ret
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x300]
mov edx, dword [eax]
call dword [edx + 0xc4]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48be76
lea eax, [ebp - 0x20]
mov edx, 5
call fcn.00404a94
lea eax, [ebp - 8]
call fcn.00404a70
ret