Function at 0x488be0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x621f06
mov eax, dword fs:[0]
push eax
sub esp, 0x25c
mov eax, dword [0x786f54]
xor eax, esp
mov dword [esp + 0x258], eax
push ebp
push esi
push edi
mov eax, dword [0x786f54]
xor eax, esp
push eax
lea eax, [esp + 0x26c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x27c]
mov edi, dword [esp + 0x280]
push 0x70168c
lea ecx, [esp + 0x18]
call sub.SCL.dll_Ordinal_9806
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x1c]
push edi
push ecx
mov dword [esp + 0x280], 0
call sub.SCL.dll_Ordinal_9839
add esp, 0xc
lea ecx, [esp + 0x14]
mov byte [esp + 0x274], 2
call sub.SCL.dll_Ordinal_9807
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x38]
add eax, 0xc
push edx
push eax
call dword [sym.imp.MSVCR80.dll__wfindfirst64i32]
mov esi, eax
add esp, 8
cmp esi, 0xffffffff
mov dword [esp + 0x30], esi
je 0x488e6e
lea ebx, [ebx]
test byte [esp + 0x38], 0x10
je 0x488dc1
mov ecx, 0x709818
lea eax, [esp + 0x5c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x488cca
test dx, dx
je 0x488cc6
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x488cca
add eax, 4
add ecx, 4
test dx, dx
jne 0x488ca4
xor eax, eax
jmp 0x488ccf
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x488e57
mov ecx, 0x70a158
lea eax, [esp + 0x5c]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x488d06
test dx, dx
je 0x488d02
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x488d06
add eax, 4
add ecx, 4
test dx, dx
jne 0x488ce0
xor eax, eax
jmp 0x488d0b
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x488e57
push 0x7016b0
lea ecx, [esp + 0x20]
call sub.SCL.dll_Ordinal_9806
lea eax, [esp + 0x5c]
push eax
lea ecx, [esp + 0x24]
mov byte [esp + 0x278], 3
call sub.SCL.dll_Ordinal_9806
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x30]
push edi
push edx
mov byte [esp + 0x280], 4
call sub.SCL.dll_Ordinal_9839
lea ecx, [esp + 0x28]
push ecx
push eax
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0x28c], 5
call sub.SCL.dll_Ordinal_9839
add esp, 0x18
lea ecx, [esp + 0x2c]
mov byte [esp + 0x274], 7
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x20]
mov byte [esp + 0x274], 8
call sub.SCL.dll_Ordinal_9807
lea ecx, [esp + 0x1c]
mov byte [esp + 0x274], 9
call sub.SCL.dll_Ordinal_9807
lea eax, [esp + 0x28]
push eax
push ebp
call fcn.00488be0
add esp, 8
lea ecx, [esp + 0x28]
mov byte [esp + 0x274], 2
call sub.SCL.dll_Ordinal_9807
jmp 0x488e57
lea ecx, [esp + 0x5c]
push ecx
lea ecx, [esp + 0x28]
call sub.SCL.dll_Ordinal_9806
lea edx, [esp + 0x24]
push edx
lea eax, [esp + 0x14]
push edi
push eax
mov byte [esp + 0x280], 0xa
call sub.SCL.dll_Ordinal_9839
add esp, 0xc
lea ecx, [esp + 0x24]
mov byte [esp + 0x274], 0xc
call sub.SCL.dll_Ordinal_9807
push 0x20
call sub.SCL.dll_Ordinal_5366
add esp, 4
mov dword [esp + 0x34], eax
test eax, eax
mov byte [esp + 0x274], 0xd
je 0x488e20
mov ecx, eax
call sub.SCL.dll_Ordinal_2876
mov esi, eax
jmp 0x488e22
xor esi, esi
mov edx, dword [esi]
mov edx, dword [edx + 0x44]
push 1
lea eax, [esp + 0x14]
push eax
mov ecx, esi
mov byte [esp + 0x27c], 0xc
call edx
push esi
mov ecx, ebp
call sub.SCL.dll_Ordinal_4937
lea ecx, [esp + 0x10]
mov byte [esp + 0x274], 2
call sub.SCL.dll_Ordinal_9807
mov esi, dword [esp + 0x30]
lea eax, [esp + 0x38]
push eax
push esi
call dword [sym.imp.MSVCR80.dll__wfindnext64i32]
add esp, 8
test eax, eax
je 0x488c90
push esi
call dword [sym.imp.MSVCR80.dll__findclose]
add esp, 4
lea ecx, [esp + 0x18]
mov dword [esp + 0x274], 0xffffffff
call sub.SCL.dll_Ordinal_9807
mov ecx, dword [esp + 0x26c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x258]
xor ecx, esp
call fcn.00610c76
add esp, 0x268
ret