Function at 0x4bf360
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101490a8
mov eax, dword fs:[0]
push eax
sub esp, 0x78
mov eax, dword [0x101d74a8]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 0x14]
mov eax, dword [esi]
mov edx, dword [esi + 8]
mov ebx, ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0x70], ecx
lea ecx, [esi + 0x10]
mov dword [ebp - 0x74], eax
mov eax, dword [esi + 0xc]
push ecx
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x68], eax
call dword [0x101526bc]
mov edx, dword [esi + 0x2c]
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x48], edx
add esi, 0x34
mov ecx, 0xa
lea edi, [ebp - 0x40]
mov dword [ebp - 0x44], eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x80]
mov edx, dword [ecx + 0x5c]
mov dword [ebp - 0x18], edx
mov ecx, dword [ebx + 4]
xor edi, edi
cmp ecx, edi
mov dword [ebp - 4], edi
je 0x4bf401
mov edx, dword [ebx + 0xc]
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 4
mov edi, edx
shr edi, 0x1f
add edi, edx
mov esi, dword [ebp + 0x10]
test esi, esi
je 0x4bf67c
test ecx, ecx
jne 0x4bf414
xor eax, eax
jmp 0x4bf42a
mov edx, dword [ebx + 8]
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, 0x2aaaaaa
sub edx, eax
cmp edx, esi
jae 0x4bf43a
call fcn.004be080
test ecx, ecx
jne 0x4bf442
xor eax, eax
jmp 0x4bf458
mov edx, dword [ebx + 8]
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, esi
cmp edi, eax
jae 0x4bf596
mov eax, edi
shr eax, 1
mov edx, 0x2aaaaaa
sub edx, eax
cmp edx, edi
jae 0x4bf475
xor edi, edi
jmp 0x4bf477
add edi, eax
test ecx, ecx
jne 0x4bf47f
xor eax, eax
jmp 0x4bf495
mov edx, dword [ebx + 8]
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
add eax, esi
cmp edi, eax
jae 0x4bf4a6
mov ecx, ebx
call fcn.004be060
mov edi, eax
add edi, esi
push 0
push edi
call fcn.004be0e0
mov ecx, dword [ebx + 4]
mov byte [ebp - 0x78], 0
mov edx, dword [ebp - 0x78]
push edx
mov edx, dword [ebp - 0x78]
push edx
push ebx
push eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp + 0xc]
push eax
push ecx
mov byte [ebp - 4], 1
call fcn.004be690
add esp, 0x20
lea ecx, [ebp - 0x74]
push ecx
push esi
push eax
mov ecx, ebx
mov dword [ebp - 0x84], eax
call fcn.004bf210
mov ecx, dword [ebx + 8]
mov byte [ebp - 0x78], 0
mov edx, dword [ebp - 0x78]
push edx
mov edx, dword [ebp - 0x78]
push edx
push ebx
push eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp + 0xc]
push ecx
push eax
call fcn.004be690
mov ecx, dword [ebx + 4]
xor eax, eax
add esp, 0x18
cmp ecx, eax
mov dword [ebp - 4], eax
je 0x4bf532
mov edx, dword [ebx + 8]
sub edx, ecx
mov eax, 0x2aaaaaab
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
add esi, eax
test ecx, ecx
je 0x4bf550
mov edx, dword [ebx + 8]
push edx
push ecx
mov ecx, ebx
call fcn.004bf250
mov eax, dword [ebx + 4]
push eax
call fcn.004e34ac
add esp, 4
mov eax, dword [ebp - 0x80]
lea ecx, [edi + edi*2]
shl ecx, 5
lea edx, [esi + esi*2]
add ecx, eax
shl edx, 5
add edx, eax
mov dword [ebx + 0xc], ecx
mov dword [ebx + 8], edx
mov dword [ebx + 4], eax
jmp 0x4bf67c
mov ecx, dword [ebx + 8]
mov edi, dword [ebp + 0xc]
mov edx, ecx
sub edx, edi
mov eax, 0x2aaaaaab
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, esi
mov dword [ebp - 0x78], ecx
jae 0x4bf644
lea eax, [esi + esi*2]
shl eax, 5
mov dword [ebp - 0x78], eax
add eax, edi
push eax
push ecx
push edi
mov ecx, ebx
call fcn.004bf330
mov ecx, dword [ebx + 8]
lea edx, [ebp - 0x74]
push edx
mov edx, ecx
sub edx, edi
mov eax, 0x2aaaaaab
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
sub esi, eax
push esi
push ecx
mov ecx, ebx
mov byte [ebp - 4], 3
call fcn.004bf210
mov eax, dword [ebp - 0x78]
add dword [ebx + 8], eax
mov ebx, dword [ebx + 8]
lea ecx, [ebp - 0x74]
push ecx
sub ebx, eax
push ebx
push edi
mov dword [ebp - 4], 0
call fcn.004be4f0
add esp, 0xc
jmp 0x4bf67c
push ecx
lea esi, [esi + esi*2]
mov eax, ecx
shl esi, 5
sub eax, esi
push ecx
push eax
mov ecx, ebx
mov dword [ebp - 0x7c], eax
call fcn.004bf330
mov ecx, dword [ebp - 0x7c]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x78]
push eax
push ecx
push edi
call fcn.004be660
lea edx, [ebp - 0x74]
push edx
add esi, edi
push esi
push edi
call fcn.004be4f0
add esp, 0x18
lea ecx, [ebp - 0x64]
mov dword [ebp - 4], 0xffffffff
call dword [0x10152680]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004e35fa
mov esp, ebp
pop ebp
ret 0x10