Function at 0x4e6c10
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d3ca9
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x68
mov eax, dword [0x6dd1e4]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x3c], edi
mov eax, dword [ebx + 8]
lea ecx, [edi + 0x18]
xorps xmm0, xmm0
mov dword [ebp - 0x44], eax
mov dword [edi + 0x30], 0xfffffffb
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0
movsd qword [edi + 0x40], xmm0
call fcn.0051dfa0
mov ecx, edi
call fcn.0051dfa0
lea eax, [edi + 0xc]
mov ecx, eax
mov dword [ebp - 0x4c], eax
call fcn.0051dfa0
lea eax, [edi + 0x24]
mov ecx, eax
mov dword [ebp - 0x40], eax
call fcn.0051dfa0
push ecx
lea esi, [edi + 0x48]
push 0
mov ecx, esi
call fcn.00403a40
mov ecx, dword [ebp - 0x44]
call fcn.0051aa10
cmp eax, 0xa
jge 0x4e6cc8
mov eax, dword [edi + 0x30]
jmp 0x4e713c
add edi, 0x54
push ecx
mov ecx, edi
call fcn.004ed840
test al, al
jne 0x4e6ce2
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax + 0x30]
jmp 0x4e713c
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x20]
movq qword [ebp - 0x20], xmm0
call fcn.0051e180
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x38]
xorps xmm0, xmm0
mov dword [ebp - 0x30], 0
movq qword [ebp - 0x38], xmm0
call fcn.0051e180
xorps xmm0, xmm0
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x2c]
movq qword [ebp - 0x2c], xmm0
call fcn.0051e180
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 2
push eax
push 0x6057e0
push 0
mov ecx, edi
call fcn.004ecff0
test eax, eax
je 0x4e6d56
lea ecx, [ebp - 0x20]
call fcn.0051ccb0
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x34], eax
lea eax, [ebp - 0x20]
mov ecx, edi
push eax
push 0x6057ec
push 0
call fcn.004ecff0
test eax, eax
je 0x4e7062
lea ecx, [ebp - 0x20]
call fcn.0051ccb0
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x30], eax
lea eax, [ecx + 0x18]
push eax
push 0x605808
push 0
mov ecx, edi
call fcn.004ecff0
push dword [ebp - 0x40]
mov ecx, edi
push 0x605820
push 0
call fcn.004ecff0
test eax, eax
je 0x4e6db1
mov ecx, dword [ebp - 0x40]
call fcn.0051da30
test al, al
je 0x4e6de3
push dword [ebp - 0x40]
mov ecx, edi
push 0x605828
push 0
call fcn.004ecff0
test eax, eax
je 0x4e6dd2
mov ecx, dword [ebp - 0x40]
call fcn.0051da30
test al, al
je 0x4e6de3
push dword [ebp - 0x40]
mov ecx, edi
push 0x605830
push 0
call fcn.004ecff0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax + 0x30]
cmp ecx, 1
jge 0x4e6df5
mov esi, ecx
jmp 0x4e7122
push eax
push 0x605844
push 0
mov ecx, edi
call fcn.004ecff0
mov ecx, dword [ebp - 0x3c]
call fcn.0051dd30
mov ecx, eax
call fcn.004e11c0
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x3c], eax
mov eax, dword [ecx + 0x34]
test eax, eax
jle 0x4e701e
test byte [ebx + 0xc], 1
jne 0x4e701e
push ecx
push eax
mov ecx, esi
call fcn.00403a40
xor esi, esi
mov dword [ebp - 0x50], 0
push esi
lea eax, [ebp - 0x74]
mov dword [ebp - 0x40], esi
push eax
xorps xmm0, xmm0
mov ecx, edi
push 0x605858
movups xmmword [ebp - 0x60], xmm0
call fcn.004ed270
test al, al
je 0x4e7009
lea eax, [ebp - 0x74]
mov ecx, edi
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004ecb60
test al, al
je 0x4e7009
xor edx, edx
mov dword [ebp - 0x44], edx
nop
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
cmp dword [ecx + 0x48], esi
ja 0x4e6e94
lea eax, [esi + 1]
mov dword [ecx + 0x48], eax
mov eax, dword [ecx + 0x50]
mov ecx, edi
add eax, edx
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.004ed100
test al, al
je 0x4e6fe3
lea eax, [ebp - 0x60]
mov ecx, edi
push eax
lea eax, [ebp - 0x74]
push eax
push 0x605864
call fcn.004ed270
test al, al
je 0x4e6fe3
lea eax, [ebp - 0x20]
mov ecx, edi
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004ed090
test eax, eax
je 0x4e6fe3
push str.true
lea ecx, [ebp - 0x20]
call fcn.0051e060
test al, al
je 0x4e6f3d
lea eax, [ebp - 0x60]
mov ecx, edi
push eax
lea eax, [ebp - 0x74]
push eax
push 0x605878
call fcn.004ed270
mov ecx, dword [ebp - 0x3c]
push esi
lea ecx, [ecx + 0x48]
call fcn.00403ba0
add eax, 0xc
mov ecx, edi
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004ed090
mov ecx, dword [ebp - 0x3c]
push str.null
push esi
lea ecx, [ecx + 0x48]
call fcn.00403ba0
lea ecx, [eax + 0xc]
call fcn.0051e060
test al, al
je 0x4e6f56
mov ecx, dword [ebp - 0x3c]
push 0x605888
push esi
lea ecx, [ecx + 0x48]
call fcn.00403ba0
lea ecx, [eax + 0xc]
call fcn.0051e0b0
lea eax, [ebp - 0x60]
mov ecx, edi
push eax
lea eax, [ebp - 0x74]
push eax
push 0x605894
call fcn.004ed270
test al, al
je 0x4e6fca
mov ecx, dword [ebp - 0x3c]
push esi
lea ecx, [ecx + 0x48]
call fcn.00403ba0
add eax, 0x18
mov ecx, edi
push eax
lea eax, [ebp - 0x74]
push eax
call fcn.004ed090
test eax, eax
je 0x4e6fca
mov ecx, dword [ebp - 0x3c]
push esi
lea ecx, [ecx + 0x48]
call fcn.00403ba0
lea ecx, [eax + 0x18]
call fcn.0051df40
cmp eax, 7
jle 0x4e6fca
mov ecx, dword [ebp - 0x3c]
push 0
push 0
push 0x6058a4
push 0x6058b8
push esi
lea ecx, [ecx + 0x48]
call fcn.00403ba0
lea ecx, [eax + 0x18]
call fcn.0051b3f0
jmp 0x4e6fde
mov ecx, dword [ebp - 0x3c]
push esi
lea ecx, [ecx + 0x48]
call fcn.00403ba0
lea ecx, [eax + 0x18]
call fcn.0051dfa0
inc esi
add dword [ebp - 0x44], 0x24
mov eax, dword [ebp - 0x3c]
inc dword [ebp - 0x40]
mov ecx, dword [ebp - 0x48]
cmp ecx, dword [eax + 0x34]
jge 0x4e7009
push 0
lea eax, [ebp - 0x60]
mov ecx, edi
push eax
call fcn.004ecb60
mov edx, dword [ebp - 0x44]
test al, al
jne 0x4e6e80
mov ecx, dword [ebp - 0x3c]
cmp esi, dword [ecx + 0x34]
jge 0x4e701e
push ecx
push esi
lea ecx, [ecx + 0x48]
call fcn.00403a40
mov ecx, dword [ebp - 0x3c]
mov esi, dword [ecx + 0x30]
cmp esi, 1
jl 0x4e7122
mov esi, dword [ebp - 0x4c]
mov ecx, edi
push esi
push 0x6058fc
push 0
call fcn.004ecff0
lea eax, [ebp - 0x20]
mov ecx, edi
push eax
push 0x605910
push 0
call fcn.004ecff0
test eax, eax
je 0x4e70ce
lea ecx, [ebp - 0x20]
call fcn.0051ccb0
mov edi, dword [ebp - 0x3c]
mov dword [edi + 0x38], eax
jmp 0x4e70d1
lea eax, [ebp - 0x20]
mov ecx, edi
push eax
push 0x6058e4
push 0
call fcn.004ecff0
test eax, eax
je 0x4e701b
push str.true
lea ecx, [ebp - 0x20]
call fcn.0051e020
test al, al
je 0x4e7095
mov ecx, dword [ebp - 0x3c]
mov dword [ecx + 0x30], 0
jmp 0x4e701e
mov esi, dword [ebp - 0x40]
mov ecx, edi
push esi
push 0x6058f0
push 0
call fcn.004ecff0
test eax, eax
je 0x4e701b
mov ecx, esi
call fcn.0051df40
mov ecx, dword [ebp - 0x3c]
cmp eax, 0x1e
jle 0x4e701e
mov dword [ecx + 0x30], 1
jmp 0x4e701e
mov edi, dword [ebp - 0x3c]
mov eax, dword [edi + 0x34]
test eax, eax
jne 0x4e70dd
xorps xmm1, xmm1
jmp 0x4e70fa
movd xmm1, dword [edi + 0x38]
cvtdq2pd xmm1, xmm1
movd xmm0, eax
mulsd xmm1, qword [0x6be5a0]
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [edi + 0x40], xmm1
test eax, eax
jne 0x4e711f
mov ecx, esi
call fcn.0051df40
cmp eax, 0xa
jle 0x4e711f
mov ecx, edi
call fcn.0051da30
mov esi, 0xfffffffe
test al, al
jne 0x4e7122
mov esi, dword [edi + 0x30]
lea ecx, [ebp - 0x2c]
call fcn.0051dfd0
lea ecx, [ebp - 0x38]
call fcn.0051dfd0
lea ecx, [ebp - 0x20]
call fcn.0051dfd0
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e885
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8