Function at 0x402750
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x46479e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x14
mov eax, dword [0x486ed0]
push ebx
push ebp
push esi
push edi
mov edi, ecx
mov dword [esp + 0x20], edi
mov dword [edi], eax
mov cl, byte [esp + 0x34]
lea esi, [edi + 8]
xor ebp, ebp
mov dword [esp + 0x2c], ebp
mov byte [esi], cl
mov dword [esi + 4], ebp
mov dword [esi + 8], ebp
mov dword [esi + 0xc], ebp
mov ebx, dword [esp + 0x34]
mov ecx, edi
push ebx
mov byte [esp + 0x30], 1
call fcn.0045b362
mov edx, dword [ebx + 4]
mov dword [esp + 0x14], ebp
mov dword [edi + 4], edx
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x402983
mov ecx, dword [ebx + 0x10]
sub ecx, eax
sar ecx, 2
cmp ebp, ecx
jae 0x402983
push 0x34
call fcn.0045af6a
add esp, 4
mov dword [esp + 0x1c], eax
test eax, eax
mov byte [esp + 0x2c], 2
je 0x4027ee
mov ecx, dword [ebx + 0xc]
mov edx, dword [ecx + ebp*4]
mov ecx, eax
push edx
call fcn.00408490
jmp 0x4027f0
xor eax, eax
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x10], eax
mov eax, dword [esi + 8]
mov byte [esp + 0x2c], 1
sub ecx, eax
mov edi, eax
sar ecx, 2
cmp ecx, 1
jae 0x4028e0
mov edx, dword [esi + 4]
test edx, edx
je 0x402822
mov ecx, eax
sub ecx, edx
sar ecx, 2
cmp ecx, 1
ja 0x402827
mov ecx, 1
test edx, edx
jne 0x40282f
xor eax, eax
jmp 0x402834
sub eax, edx
sar eax, 2
add eax, ecx
test eax, eax
mov dword [esp + 0x1c], eax
jge 0x402840
xor eax, eax
lea edx, [eax*4]
push edx
call fcn.0045af6a
mov ebp, dword [esi + 4]
add esp, 4
cmp ebp, edi
mov dword [esp + 0x18], eax
mov ebx, eax
je 0x402871
push ebp
push ebx
call fcn.00402ce0
add ebp, 4
add esp, 8
add ebx, 4
cmp ebp, edi
jne 0x40285d
lea eax, [esp + 0x10]
mov ecx, esi
push eax
push 1
push ebx
call fcn.00436490
mov ecx, dword [esi + 8]
add ebx, 4
push ebx
push ecx
push edi
mov ecx, esi
call fcn.00420940
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
push edx
push eax
mov ecx, esi
call fcn.0041de00
mov ecx, dword [esi + 4]
push ecx
call fcn.0045af93
mov edi, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
add esp, 4
mov ecx, esi
lea eax, [edi + edx*4]
mov dword [esi + 0xc], eax
call fcn.0041dc20
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x34]
lea ecx, [edi + eax*4 + 4]
inc ebp
mov dword [esi + 4], edi
mov edi, dword [esp + 0x20]
mov dword [esi + 8], ecx
mov dword [esp + 0x14], ebp
jmp 0x4027ac
mov ecx, eax
sub ecx, edi
sar ecx, 2
cmp ecx, 1
jae 0x40292e
lea edx, [edi + 4]
mov ecx, esi
push edx
push eax
push edi
call fcn.00420940
mov eax, dword [esi + 8]
lea ecx, [esp + 0x10]
mov edx, eax
push ecx
sub edx, edi
mov ecx, 1
sar edx, 2
sub ecx, edx
push ecx
push eax
mov ecx, esi
call fcn.00436490
mov eax, dword [esi + 8]
cmp edi, eax
je 0x40296c
mov edx, dword [esp + 0x10]
mov dword [edi], edx
add edi, 4
cmp edi, eax
jne 0x40291f
jmp 0x40296c
lea ecx, [eax - 4]
push eax
push eax
mov dword [esp + 0x24], ecx
push ecx
mov ecx, esi
call fcn.00420940
mov ecx, dword [esi + 8]
lea eax, [ecx - 4]
cmp edi, eax
je 0x402958
mov edx, dword [eax - 4]
sub eax, 4
sub ecx, 4
cmp eax, edi
mov dword [ecx], edx
jne 0x402949
lea eax, [edi + 4]
cmp edi, eax
je 0x40296c
mov ecx, dword [esp + 0x10]
mov dword [edi], ecx
add edi, 4
cmp edi, eax
jne 0x40295f
mov eax, dword [esi + 8]
mov edi, dword [esp + 0x20]
add eax, 4
inc ebp
mov dword [esi + 8], eax
mov dword [esp + 0x14], ebp
jmp 0x4027ac
mov ecx, dword [esp + 0x24]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x20
ret 4