Function at 0x4fe990
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x567886
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x38
xor eax, eax
push ebx
mov dword [esp + 4], eax
push ebp
mov ebp, dword [esp + 0x50]
mov dword [esp + 0xc], eax
push esi
mov esi, ecx
xor ecx, ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x28], ecx
mov dword [esp + 0x18], eax
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x20], eax
mov dword [esp + 0x34], ecx
mov byte [esp + 0x24], al
mov eax, dword [esp + 0x58]
dec eax
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], ecx
push edi
mov byte [esp + 0x44], cl
je 0x4feb22
dec eax
jne 0x4fec2c
push 0x40e
mov ecx, 0x75e40c
call fcn.00536380
cmp esi, 0xffffffff
jne 0x4fea4a
mov eax, dword [0x887734]
xor ecx, ecx
mov dword [ebp + 0xb4], ecx
cmp dword [eax + 0x77900], ecx
je 0x4fea2f
mov dword [eax + 0x77900], ecx
pop edi
pop esi
pop ebp
mov dword [eax + 0x7787c], ecx
pop ebx
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
add esp, 0x44
ret 8
push esi
lea edx, [esp + 0x14]
push 0x5869ec
push edx
call fcn.00553270
push esi
lea eax, [esp + 0x3c]
push str.b_d.img
push eax
call fcn.00553270
add esp, 0x18
lea ecx, [esp + 0x2c]
push ecx
push 0x40e
mov ecx, 0x75e40c
call fcn.00536400
mov ecx, dword [0x887734]
add ecx, 0x4f0cc
lea eax, [esp + 0x10]
call fcn.00402fc0
push 0x13c
call fcn.0054bf29
add esp, 4
mov dword [esp + 0x58], eax
xor ecx, ecx
cmp eax, ecx
mov edi, 1
mov dword [esp + 0x50], edi
je 0x4feabf
mov esi, eax
call fcn.0045cb10
jmp 0x4feac1
xor eax, eax
mov dword [esp + 0x50], 0xffffffff
mov ecx, dword [0x887734]
lea edx, [esp + 0x10]
push edx
lea ebx, [ecx + 0x4f0cc]
mov dword [ecx + 0x77900], eax
lea esi, [ecx + 0x77900]
call fcn.00403040
mov ecx, dword [esi]
mov dword [ecx + 0x1c], eax
mov ecx, dword [esi]
mov edx, dword [ecx]
push 0x5869d0
call dword [edx + 4]
mov eax, dword [0x887734]
mov dword [ebp + 0xb4], edi
mov dword [eax + 0x7787c], edi
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
add esp, 0x44
ret 8
push 0x40d
mov ecx, 0x75e40c
call fcn.00536380
cmp esi, 0xffffffff
jne 0x4feb6c
mov eax, dword [0x887734]
xor ecx, ecx
mov dword [ebp + 0xb0], ecx
cmp dword [eax + 0x77904], ecx
je 0x4feb51
mov dword [eax + 0x77904], ecx
pop edi
pop esi
pop ebp
mov dword [eax + 0x77878], ecx
pop ebx
mov ecx, dword [esp + 0x38]
mov dword fs:[0], ecx
add esp, 0x44
ret 8
push esi
lea ecx, [esp + 0x14]
push 0x586a14
push ecx
call fcn.00553270
push esi
lea edx, [esp + 0x3c]
push str.f_d.img
push edx
call fcn.00553270
add esp, 0x18
lea eax, [esp + 0x2c]
push eax
push 0x40d
mov ecx, 0x75e40c
call fcn.00536400
mov ecx, dword [0x887734]
add ecx, 0x4f0cc
lea eax, [esp + 0x10]
call fcn.00402fc0
push 0x38
call fcn.0054bf29
add esp, 4
mov dword [esp + 0x58], eax
xor ecx, ecx
cmp eax, ecx
mov dword [esp + 0x50], ecx
je 0x4febd9
mov esi, eax
call fcn.0047c190
jmp 0x4febdb
xor eax, eax
mov dword [esp + 0x50], 0xffffffff
mov ecx, dword [0x887734]
lea edx, [esp + 0x10]
push edx
lea ebx, [ecx + 0x4f0cc]
mov dword [ecx + 0x77904], eax
lea esi, [ecx + 0x77904]
call fcn.00403040
mov ecx, dword [esi]
mov dword [ecx + 0x1c], eax
mov ecx, dword [esi]
mov edx, dword [ecx]
push 0x5869d0
call dword [edx + 4]
mov eax, dword [0x887734]
mov edi, 1
mov dword [ebp + 0xb0], edi
mov dword [eax + 0x77878], edi
mov ecx, dword [esp + 0x48]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x44
ret 8