Function at 0x489090
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58e626
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x610304]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
lea ecx, [esi + 0x28]
mov dword [esi], vtable.CUpgradeLogic.0
mov dword [esi + 0x20], 1
call sym.txupd.exe_public:_void___thiscall_CTXStringW::constructor_void_
xor edi, edi
lea ecx, [esi + 0x30]
mov dword [ebp - 4], edi
call fcn.00480ce0
lea ecx, [esi + 0x134]
mov byte [ebp - 4], 1
call fcn.00472d40
lea ecx, [esi + 0x234]
mov byte [ebp - 4], 2
call fcn.00467850
lea ecx, [esi + 0x28c]
mov byte [ebp - 4], 3
call fcn.004707d0
lea ecx, [esi + 0x310]
mov byte [ebp - 4], 4
call fcn.0046ece0
lea ecx, [esi + 0x330]
mov byte [ebp - 4], 5
call fcn.00475bd0
lea ecx, [esi + 0x390]
mov byte [ebp - 4], 6
call fcn.0046a940
lea ecx, [esi + 0x3cc]
mov byte [ebp - 4], 7
call fcn.0047d4e0
push esi
lea ecx, [esi + 0x424]
mov byte [ebp - 4], 8
call fcn.00487530
mov ebx, vtable.CTXCallbackPtr_class_CUpgradeLogic_.0
mov dword [esi + 0x420], ebx
push esi
lea ecx, [esi + 0x42c]
mov byte [ebp - 4], 9
call fcn.00487530
mov dword [esi + 0x428], ebx
push esi
lea ecx, [esi + 0x434]
mov byte [ebp - 4], 0xa
call fcn.00487530
mov dword [esi + 0x430], ebx
push esi
lea ecx, [esi + 0x43c]
mov byte [ebp - 4], 0xb
call fcn.00487530
mov dword [esi + 0x438], ebx
push esi
lea ecx, [esi + 0x444]
mov byte [ebp - 4], 0xc
call fcn.00487530
mov dword [esi + 0x440], ebx
push esi
lea ecx, [esi + 0x44c]
mov byte [ebp - 4], 0xd
call fcn.00487530
mov dword [esi + 0x448], ebx
push esi
lea ecx, [esi + 0x454]
mov byte [ebp - 4], 0xe
call fcn.00487530
mov dword [esi + 0x450], ebx
push esi
lea ecx, [esi + 0x45c]
mov byte [ebp - 4], 0xf
call fcn.00487530
mov dword [esi + 0x458], ebx
mov dword [esi + 0x460], edi
mov eax, dword [esi + 0x424]
mov dword [eax + 0x28], 0x4886e0
mov ecx, dword [esi + 0x42c]
mov dword [ecx + 0x28], fcn.00487100
mov edx, dword [esi + 0x434]
mov dword [edx + 0x28], 0x488b80
mov eax, dword [esi + 0x43c]
mov dword [eax + 0x28], 0x4889e0
mov ecx, dword [esi + 0x444]
mov dword [ecx + 0x28], 0x488d60
mov edx, dword [esi + 0x44c]
mov dword [edx + 0x28], fcn.00487340
mov eax, dword [esi + 0x454]
mov dword [eax + 0x28], 0x4848b0
mov ecx, dword [esi + 0x45c]
mov dword [ecx + 0x28], 0x488f10
mov edx, dword [esi + 0x424]
push edx
lea ecx, [esi + 0x30]
mov byte [ebp - 4], 0x11
call fcn.0047f760
mov eax, dword [esi + 0x42c]
push eax
lea ecx, [esi + 0x134]
call fcn.004736d0
mov ecx, dword [esi + 0x434]
push ecx
lea ecx, [esi + 0x234]
call fcn.004671e0
mov edx, dword [esi + 0x43c]
push edx
lea ecx, [esi + 0x28c]
call fcn.00470620
mov eax, dword [esi + 0x444]
push eax
lea ecx, [esi + 0x310]
call fcn.0046f190
mov ecx, dword [esi + 0x44c]
push ecx
lea ecx, [esi + 0x330]
call fcn.004756f0
mov edx, dword [esi + 0x454]
push edx
lea ecx, [esi + 0x390]
call fcn.00468060
mov eax, dword [esi + 0x45c]
push eax
lea ecx, [esi + 0x3cc]
call fcn.0047d330
mov dword [esi + 8], edi
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov dword [esi + 0x18], 1
mov dword [esi + 0x1c], edi
mov dword [esi + 0x24], edi
mov dword [esi + 0x2c], edi
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret