Function at 0x474e9c
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0
push ebx
push esi
test dl, dl
je 0x474eaf
add esp, 0xfffffff0
call fcn.004051bc
mov ebx, edx
mov esi, eax
xor eax, eax
push ebp
push 0x475472
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, esi
call fcn.00475498
push 0x10
lea eax, [ebp - 4]
mov ecx, 1
mov edx, dword [0x473cb4]
call fcn.00408930
add esp, 4
push 0x4000d7eb
push 0xaf102364
push 0x4003a0d9
push 0x945b6c37
push 0x40058d99
push 0x45b6c376
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 0
push 3
push 0xf
xor ecx, ecx
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx], eax
push 0xbfd62396
push 0x73de1e3
push 0x3fa7be69
push 0x5cbaebfa
push 0x3fdc8f60
push 0x5ab3aabd
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 0
push 4
push 0xe
mov ecx, 1
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 4], eax
push 0xbfd918b0
push 0xd0edc3bd
push 0x3f9dce68
push 0xae3f430c
push 0x3fdc6084
push 0xa515ce9e
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 4
push 4
push 0xb
mov ecx, 1
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 8], eax
push 0xbfc8af57
push 0x71001d5c
push 0x3f77e6ce
push 0xd692486d
push 0x3fca1e68
push 0xa0d349bf
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 0
push 4
push 0xe
mov ecx, 3
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0xc], eax
push 0xbfb3c0e1
push 0xdcff49f8
push 0xbf8450ee
push 0x85035f86
push 0x3fad75f6
push 0x26626a58
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 8
push 2
push 4
mov ecx, 2
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0x10], eax
push 0xbfe6bbe6
push 0x601bc98a
push 0xbfe09b45
push 0x6b441bb9
push 0xbfd5254e
push 0x6e221c8a
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 6
push 2
push 0xf
mov ecx, 5
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0x14], eax
push 0xbfd6a369
push 0xfcf3dc05
push 0xbf936d5e
push 0xa82c0394
push 0x3fd28b8f
push 0x14db5958
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 9
push 2
push 0x10
mov ecx, 1
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0x18], eax
push 0xbfc07000
push 0x431bde83
push 0xbf9d4160
push 0x1ca049b7
push 0x3fae4cb9
push 0x1636a32a
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 4
push 2
push 0xa
mov ecx, 3
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0x1c], eax
push 0xbfc1cc74
push 0xb838c112
push 0xbf976526
push 0xcb45e410
push 0x3fb6855a
push 0x477432d8
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 9
push 2
push 0x10
mov ecx, 3
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0x20], eax
push 0xbfc1188f
push 0x42fe8251
push 0x3f7b691f
push 0x7e4a88ba
push 0x3fc3d76e
push 0xe73e681b
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 1
push 3
push 6
mov ecx, 2
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0x24], eax
push 0xbf9b573e
push 0xab367a10
push 0x3f807b9f
push 0x32b5b4d8
push 0x3fa78a56
push 0x2fb77db0
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 3
push 6
push 2
mov ecx, 3
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0x28], eax
push 0xbfb8e4d5
push 0x14eb499
push 0x3f8f2d14
push 0x35412a6d
push 0x3fc0832b
push 0x990afe61
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 8
push 1
push 0xa
mov ecx, 2
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0x2c], eax
push 0xbfc21a82
push 0x62456f76
push 0x3f6eae26
push 0x18987d3a
push 0x3fc33111
push 0xf0c34c1b
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 4
push 4
push 0xe
mov ecx, 3
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0x30], eax
push 0xbfe47dbf
push 0x487fcb92
push 0xbfdde34f
push 0xc610f0e9
push 0xbfd24584
push 0x6e8f29d4
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 4
push 2
push 0xf
mov ecx, 5
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0x34], eax
push 0xbfd4a89f
push 0xc6da4485
push 0xbfd045c3
push 0x58afc47e
push 0xbfc64ebd
push 0xd334c5da
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 9
push 2
push 3
mov ecx, 5
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0x38], eax
push 0xbfb2faac
push 0xd9e83e42
push 0xbf783461
push 0xb175d94b
push 0x3faebcff
push 0xd02f57dc
mov dl, 1
mov eax, dword [0x473aec]
call fcn.00473b88
push eax
push 1
push 8
push 4
mov ecx, 2
mov dl, 1
mov eax, dword [0x473598]
call fcn.004739b4
mov ecx, eax
mov dl, 1
mov eax, dword [0x473c18]
call fcn.00473cf0
mov edx, dword [ebp - 4]
mov dword [edx + 0x3c], eax
mov edx, dword [ebp - 4]
mov eax, esi
call fcn.00475590
mov edx, dword [esi + 0x1c]
mov eax, esi
call fcn.004755f4
mov byte [esi + 0x14], 0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x475479
lea eax, [ebp - 4]
mov edx, dword [0x473cb4]
call fcn.0040893c
ret