Function at 0x492cd0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x5dd90e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x6c
push ebx
push esi
lea esi, [ecx + 4]
xor ebx, ebx
push edi
lea ecx, [esp + 0x5c]
mov edi, dword [esi]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x50], 0x5ecdf0
mov dword [esp + 0x54], 0x5ecde8
call fcn.004018e0
mov dword [esp + 0xc], 1
push ebx
lea ecx, [esp + 0x54]
mov dword [esp + 0x84], ebx
call fcn.00401950
push ebx
lea ecx, [esp + 0x58]
mov dword [esp + 0x84], 1
call fcn.00401a40
mov eax, dword [esp + 0x50]
mov ebx, 0x5ecdd4
push edi
mov byte [esp + 0x84], 2
mov ecx, dword [eax + 4]
mov dword [esp + ecx + 0x54], ebx
mov edx, dword [esp + 0x54]
mov eax, dword [edx + 4]
lea ecx, [eax - 0xc]
mov dword [esp + eax + 0x50], ecx
mov edx, dword [esp + 0x54]
mov eax, dword [edx + 4]
lea ecx, [esp + eax + 0x54]
call fcn.0048f9c0
mov edi, 3
lea ecx, [esp + 0x34]
mov dword [esp + 0x80], edi
mov dword [esp + 0x28], 0x5ecdf0
mov dword [esp + 0x2c], 0x5ecde8
call fcn.004018e0
mov dword [esp + 0xc], edi
push 0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x84], 4
call fcn.00401950
push 0
lea ecx, [esp + 0x30]
mov dword [esp + 0x84], 5
call fcn.00401a40
mov ecx, dword [esp + 0x28]
mov edx, dword [ecx + 4]
mov dword [esp + edx + 0x28], ebx
mov eax, dword [esp + 0x28]
mov eax, dword [eax + 4]
lea ecx, [eax - 0xc]
mov dword [esp + eax + 0x24], ecx
lea ecx, [esp + 0x14]
call fcn.004925d0
mov eax, dword [esp + 0x88]
mov bl, 7
test eax, eax
mov byte [esp + 0x80], bl
jne 0x492eab
mov eax, dword [esi]
push eax
call fcn.0059535b
add esp, 4
cmp eax, 0xffffffff
jne 0x492fc1
call fcn.0055b201
mov eax, dword [eax]
sub eax, 2
je 0x492e3a
sub eax, 0xb
push 0
mov eax, dword [esi]
push 0
push eax
je 0x492e33
push 0x66301c
jmp 0x492e46
push 0x65bae8
jmp 0x492e46
mov eax, dword [esi]
push 0
push 0
push eax
push 0x663004
mov ecx, esi
call fcn.00497790
lea ecx, [esp + 0x14]
mov byte [esp + 0x80], 6
call fcn.00492610
lea ecx, [esp + 0x28]
mov byte [esp + 0x80], 3
call fcn.00401b90
lea ecx, [esp + 0x34]
call fcn.004019c0
lea ecx, [esp + 0x50]
mov dword [esp + 0x80], 0xffffffff
call fcn.00401b90
lea ecx, [esp + 0x5c]
call fcn.004019c0
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x6c]
mov dword fs:[0], ecx
add esp, 0x78
ret 4
mov edx, dword [esp + 0x50]
mov edi, 1
mov eax, dword [edx + 4]
lea ecx, [esp + eax + 0x50]
call fcn.00490120
cmp eax, edi
jl 0x492fc1
mov edx, dword [esp + 0x50]
lea ecx, [esp + 0x88]
push ecx
mov eax, dword [edx + 4]
lea ecx, [esp + eax + 0x54]
call fcn.0048ff50
mov ecx, dword [esp + 0x28]
mov eax, dword [eax]
push eax
mov byte [esp + 0x84], 8
mov edx, dword [ecx + 4]
lea ecx, [esp + edx + 0x2c]
call fcn.0048f9c0
lea ecx, [esp + 0x88]
mov byte [esp + 0x80], bl
call fcn.0059d7fd
mov eax, dword [esp + 0x28]
push 0x652aec
mov ecx, dword [eax + 4]
lea ecx, [esp + ecx + 0x2c]
call fcn.0048fb10
xor esi, esi
test edi, edi
jle 0x492f6f
mov eax, dword [esp + 0x50]
lea edx, [esp + 0xc]
push esi
push edx
mov ecx, dword [eax + 4]
lea ecx, [esp + ecx + 0x58]
call fcn.004902f0
mov eax, dword [eax]
mov edx, dword [esp + 0x28]
push eax
mov byte [esp + 0x84], 9
mov eax, dword [edx + 4]
lea ecx, [esp + eax + 0x2c]
call fcn.0048fb10
lea ecx, [esp + 0xc]
mov byte [esp + 0x80], bl
call fcn.0059d7fd
inc esi
cmp esi, edi
jl 0x492f29
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x10]
push ecx
mov eax, dword [edx + 4]
lea ecx, [esp + eax + 0x2c]
call fcn.0048fe30
lea ecx, [esp + 0x10]
call fcn.0059d7fd
mov ecx, dword [esp + 0x28]
push 1
mov edx, dword [ecx + 4]
lea ecx, [esp + 0x18]
mov eax, dword [esp + edx + 0x30]
push eax
call fcn.00492660
test eax, eax
je 0x493010
mov eax, dword [esp + 0x50]
inc edi
mov ecx, dword [eax + 4]
lea ecx, [esp + ecx + 0x50]
call fcn.00490120
cmp edi, eax
jle 0x492ec8
lea ecx, [esp + 0x14]
mov byte [esp + 0x80], 6
call fcn.00492610
lea ecx, [esp + 0x34]
mov byte [esp + 0x80], 3
call fcn.004019c0
lea ecx, [esp + 0x5c]
mov dword [esp + 0x80], 0xffffffff
call fcn.004019c0
pop edi
pop esi
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x6c]
mov dword fs:[0], ecx
add esp, 0x78
ret 4
lea ecx, [esp + 0x14]
mov byte [esp + 0x80], 6
call fcn.00492610
lea ecx, [esp + 0x34]
mov byte [esp + 0x80], 3
call fcn.004019c0
lea ecx, [esp + 0x5c]
mov dword [esp + 0x80], 0xffffffff
call fcn.004019c0
mov ecx, dword [esp + 0x78]
pop edi
pop esi
xor eax, eax
pop ebx
mov dword fs:[0], ecx
add esp, 0x78
ret 4