Function at 0x490f70
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x511736
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebp
push esi
push edi
mov edi, ecx
xor ebp, ebp
push 8
mov dword [edi + 0x48], ebp
mov dword [edi + 0x2c], ebp
mov dword [edi + 0x24], ebp
mov dword [edi + 0x28], ebp
mov dword [edi + 0x30], ebp
call fcn.004fff6b
add esp, 4
mov dword [esp + 0xc], eax
cmp eax, ebp
mov dword [esp + 0x18], ebp
je 0x490fbb
mov ecx, eax
call fcn.004bc180
jmp 0x490fbd
xor eax, eax
or esi, 0xffffffff
push 8
mov dword [esp + 0x1c], esi
mov dword [edi], eax
call fcn.004fff6b
add esp, 4
mov dword [esp + 0xc], eax
cmp eax, ebp
mov dword [esp + 0x18], 1
je 0x490fe9
mov ecx, eax
call fcn.004bc180
jmp 0x490feb
xor eax, eax
push 8
mov dword [esp + 0x1c], esi
mov dword [edi + 4], eax
call fcn.004fff6b
add esp, 4
mov dword [esp + 0xc], eax
cmp eax, ebp
mov dword [esp + 0x18], 2
je 0x491015
mov ecx, eax
call fcn.004bc180
jmp 0x491017
xor eax, eax
push 8
mov dword [esp + 0x1c], esi
mov dword [edi + 0xc], eax
call fcn.004fff6b
add esp, 4
mov dword [esp + 0xc], eax
cmp eax, ebp
mov dword [esp + 0x18], 3
je 0x491041
mov ecx, eax
call fcn.004bc180
jmp 0x491043
xor eax, eax
push 8
mov dword [esp + 0x1c], esi
mov dword [edi + 0x10], eax
call fcn.004fff6b
add esp, 4
mov dword [esp + 0xc], eax
cmp eax, ebp
mov dword [esp + 0x18], 4
je 0x49106d
mov ecx, eax
call fcn.004bc180
jmp 0x49106f
xor eax, eax
push 8
mov dword [esp + 0x1c], esi
mov dword [edi + 8], eax
call fcn.004fff6b
add esp, 4
mov dword [esp + 0xc], eax
cmp eax, ebp
mov dword [esp + 0x18], 5
je 0x491099
mov ecx, eax
call fcn.004bc180
jmp 0x49109b
xor eax, eax
push 8
mov dword [esp + 0x1c], esi
mov dword [edi + 0x14], eax
call fcn.004fff6b
add esp, 4
mov dword [esp + 0xc], eax
cmp eax, ebp
mov dword [esp + 0x18], 6
je 0x4910c5
mov ecx, eax
call fcn.004bc180
jmp 0x4910c7
xor eax, eax
push 8
mov dword [esp + 0x1c], esi
mov dword [edi + 0x18], eax
call fcn.004fff6b
add esp, 4
mov dword [esp + 0xc], eax
cmp eax, ebp
mov dword [esp + 0x18], 7
je 0x4910f1
mov ecx, eax
call fcn.004bc180
jmp 0x4910f3
xor eax, eax
push 8
mov dword [esp + 0x1c], esi
mov dword [edi + 0x1c], eax
call fcn.004fff6b
add esp, 4
mov dword [esp + 0xc], eax
cmp eax, ebp
mov dword [esp + 0x18], 8
je 0x49111d
mov ecx, eax
call fcn.004bc180
jmp 0x49111f
xor eax, eax
mov ecx, 0xa0
mov dword [esp + 0x18], esi
mov dword [edi + 0x20], eax
mov dword [edi + 0x38], ebp
mov dword [edi + 0x3c], ebp
mov dword [edi + 0x40], ebp
mov dword [edi + 0x44], ebp
call fcn.00488280
mov esi, eax
cmp esi, ebp
mov dword [esp + 0xc], esi
je 0x4911e8
mov ecx, esi
call fcn.00487210
lea ecx, [esi + 8]
mov dword [esp + 0x18], 9
call fcn.0047eed0
lea ecx, [esi + 0x10]
mov byte [esp + 0x18], 0xa
call fcn.0046e990
mov dword [esi + 0x14], 0x516374
mov dword [esi + 0x18], ebp
mov dword [esi + 0x1c], ebp
mov dword [esi + 0x20], ebp
mov dword [esi + 0x24], 0x516368
mov dword [esi + 0x28], ebp
mov dword [esi + 0x2c], ebp
mov dword [esi + 0x30], ebp
lea ecx, [esi + 0x38]
mov byte [esp + 0x18], 0xd
call fcn.0046e990
mov dword [esi + 0x3c], 0x516374
mov dword [esi + 0x40], ebp
mov dword [esi + 0x44], ebp
mov dword [esi + 0x48], ebp
lea ecx, [esi + 0x4c]
mov byte [esp + 0x18], 0xf
call fcn.00456900
mov dword [esi + 0x90], 0x51635c
mov dword [esi + 0x94], ebp
mov dword [esi + 0x98], ebp
mov dword [esi + 0x9c], ebp
mov ecx, esi
mov byte [esp + 0x18], 0x11
mov dword [esi], 0x516300
call fcn.00487f10
jmp 0x4911ea
xor esi, esi
mov ecx, dword [esp + 0x10]
mov dword [edi + 0x34], esi
mov dword [edi + 0x70], 0xb
mov dword [edi + 0x74], 0xa
mov dword [edi + 0x78], 0x1f5
mov dword [edi + 0x7c], 0x1e0
mov eax, edi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x10
ret