Function at 0x4962e0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x65efab
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push ebp
mov ebp, dword [esp + 0x48]
push esi
lea eax, [esp + 0xc]
mov esi, ecx
push ebp
push eax
mov dword [esp + 0x18], esi
call fcn.004c11c0
add esp, 8
mov eax, dword [esp + 0xc]
xor ebx, ebx
cmp eax, ebx
mov dword [esp + 0x44], ebx
jne 0x496348
lea ecx, [esp + 0xc]
mov dword [esp + 0x44], 0xffffffff
call fcn.00499a60
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
add esp, 0x3c
ret 4
push 0x2c
call fcn.00493aa0
add esp, 4
mov dword [esp + 0x4c], eax
cmp eax, ebx
mov byte [esp + 0x44], 1
je 0x49636e
push ebp
push esi
mov ecx, eax
call fcn.004a4c70
mov dword [esp + 0x4c], eax
jmp 0x496372
mov dword [esp + 0x4c], ebx
mov eax, dword [esp + 0xc]
mov byte [esp + 0x44], 0
cmp eax, ebx
je 0x496384
add eax, 0xc
jmp 0x496389
mov eax, 0x7427dc
push 0xffffffffffffffff
lea ecx, [esp + 0x1c]
push eax
push ecx
call fcn.0049ae20
add esp, 0xc
mov eax, dword [esp + 0x18]
mov byte [esp + 0x44], 2
cmp eax, ebx
je 0x4963b6
lea edx, [eax + 0xc]
mov dword [esp + 0x1c], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x20], eax
jmp 0x4963be
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
lea ecx, [esp + 0x1c]
push edi
push ecx
lea ecx, [esi + 0x40]
call fcn.0049b840
mov edx, dword [esp + 0x50]
mov edi, 0x6e77b8
mov dword [eax], edx
mov eax, edi
test eax, eax
mov dword [esp + 0x28], edi
je 0x4963f1
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x2c], ecx
jmp 0x4963f5
mov dword [esp + 0x2c], ebx
lea ecx, [esp + 0x28]
push ecx
mov ecx, ebp
call fcn.00498ae0
mov edi, eax
cmp edi, ebx
mov dword [esp + 0x18], edi
jne 0x4964a5
mov edi, 0x6e5408
mov edx, edi
mov dword [esp + 0x28], edi
test edx, edx
je 0x49642e
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x2c], ecx
jmp 0x496432
mov dword [esp + 0x2c], ebx
lea eax, [esp + 0x28]
lea ecx, [esp + 0x18]
push eax
push ecx
mov ecx, ebp
call fcn.004988b0
mov edx, eax
mov edi, 0x6e54e4
mov byte [esp + 0x48], 3
mov eax, edi
mov dword [esp + 0x20], edi
test eax, eax
je 0x496469
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x24], ecx
jmp 0x49646d
mov dword [esp + 0x24], ebx
lea ecx, [esp + 0x20]
push ecx
mov ecx, edx
call fcn.00499da0
lea ecx, [esp + 0x18]
mov bl, al
mov byte [esp + 0x48], 2
call fcn.00499a60
test bl, bl
je 0x496566
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0x14]
push ebp
push edx
call fcn.004965a0
jmp 0x496566
mov eax, dword [edi + 0x10]
xor ebp, ebp
cmp eax, ebx
jbe 0x496566
push ebp
mov ecx, edi
call fcn.00498430
mov esi, eax
cmp esi, ebx
je 0x49655a
mov edi, 0x6e5408
mov eax, edi
mov dword [esp + 0x30], edi
test eax, eax
je 0x4964e3
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x34], ecx
jmp 0x4964e7
mov dword [esp + 0x34], ebx
lea ecx, [esp + 0x30]
lea edx, [esp + 0x20]
push ecx
push edx
mov ecx, esi
call fcn.004988b0
mov edx, eax
mov edi, 0x6e54e4
mov byte [esp + 0x48], 4
mov eax, edi
mov dword [esp + 0x38], edi
test eax, eax
je 0x49651e
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [esp + 0x3c], ecx
jmp 0x496522
mov dword [esp + 0x3c], ebx
lea ecx, [esp + 0x38]
push ecx
mov ecx, edx
call fcn.00499da0
test al, al
lea ecx, [esp + 0x20]
mov byte [esp + 0x48], 2
sete bl
call fcn.00499a60
test bl, bl
jne 0x496554
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0x14]
push esi
push edx
call fcn.004965a0
mov edi, dword [esp + 0x18]
xor ebx, ebx
mov eax, dword [edi + 0x10]
inc ebp
cmp ebp, eax
jb 0x4964b2
lea ecx, [esp + 0x1c]
mov byte [esp + 0x48], 0
call fcn.00499a60
lea ecx, [esp + 0x10]
mov dword [esp + 0x48], 0xffffffff
call fcn.00499a60
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x50]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x3c
ret 4