Function at 0x487e90
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x508fc8
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x55c658]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
mov esi, ecx
mov ebp, dword [esp + 0x80]
xor ebx, ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], ebx
mov byte [esp + 0x80], 1
mov dword [esp + 0x30], ebx
mov dword [esp + 0x2c], 0x513b38
mov dword [esp + 0x78], ebx
mov eax, dword [0x55f890]
mov edx, dword [eax + 0xc]
mov ecx, 0x55f890
call edx
test al, al
jne 0x487f4c
push 0x541534
push ebp
call fcn.00414e50
add esp, 8
cmp al, bl
je 0x487f60
mov eax, dword [esi + 0x10]
mov edx, dword [eax + 0xc]
lea ecx, [esi + 0x10]
mov dword [esp + 0x30], 0x55f890
call edx
test al, al
je 0x487f33
cmp dword [esi + 0x430], ebx
je 0x487f33
mov eax, dword [esi + 0x434]
mov eax, dword [eax + 4]
test eax, eax
jne 0x487f84
mov ecx, 0x55f890
mov dword [esp + 0x78], 0xffffffff
call fcn.004231c0
mov al, 1
jmp 0x487fe9
mov eax, dword [0x55f890]
mov edx, dword [eax + 0x10]
push ebp
mov ecx, 0x55f890
call edx
test al, al
jmp 0x487f05
mov ecx, ebp
call fcn.00414da0
push 0x547734
push 0x53f504
mov edx, eax
call fcn.00416630
add esp, 8
mov byte [esp + 0x80], bl
jmp 0x487fe2
lea ecx, [esp + 0x1c]
push ecx
lea edi, [esp + 0x24]
lea ecx, [esp + 0x30]
mov ebx, ebp
call fcn.00482e60
test al, al
jne 0x487fff
mov ecx, ebp
call fcn.00414da0
push 0x547754
push 0x53f504
mov edx, eax
call fcn.00416630
add esp, 8
mov ecx, 0x55f890
mov byte [esp + 0x80], 0
mov dword [esp + 0x78], 0xffffffff
call fcn.004231c0
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x487fe2
push eax
call fcn.004e646c
add esp, 4
mov al, byte [esp + 0x80]
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x68
ret 8
xor esi, esi
mov byte [esp + 0x38], 0
mov dword [esp + 0x34], esi
mov byte [esp + 0x78], 1
mov edx, dword [0x55f890]
mov eax, dword [edx + 0x14]
mov ecx, 0x55f890
call eax
lea ecx, [esp + 0x34]
mov byte [esp + 0x78], 0
call fcn.00414d40
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x20]
push edx
push ebp
mov dword [esp + 0x3c], esi
call fcn.00489410
add esp, 0xc
test al, al
jne 0x488070
mov ecx, ebp
call fcn.00414da0
push 0x547754
push 0x53f504
mov edx, eax
call fcn.00416630
add esp, 8
mov byte [esp + 0x80], 0
jmp 0x487fd1
mov edi, dword [esp + 0x84]
cmp byte [edi + 0x11c], 0
lea eax, [edi + 0xc]
jne 0x488086
mov eax, dword [edi + 8]
lea ecx, [esp + 0x3c]
push ecx
add eax, 4
push eax
call fcn.004e6065
add esp, 8
cmp eax, esi
jne 0x488164
test dword [esp + 0x42], 0x4000
jne 0x488164
lea edx, [esp + 0x24]
mov ebx, edi
push edx
mov edi, ebp
mov dword [esp + 0x28], esi
call fcn.004889b0
mov esi, dword [esp + 0x28]
add esp, 4
test al, al
jne 0x4880e7
test esi, esi
je 0x4880d9
push esi
call fcn.004e646c
add esp, 4
xor esi, esi
mov ecx, ebp
call fcn.004151a0
mov ecx, ebp
call fcn.00414df0
mov dword [esp + 0x28], 0
test esi, esi
je 0x4881a4
mov edi, dword [esp + 0x1c]
push 0x489280
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x30]
push ecx
push ebp
mov ecx, esi
mov eax, edi
call fcn.00488ce0
push esi
mov bl, al
call fcn.004e646c
add esp, 0x14
test bl, bl
jne 0x48818d
mov ecx, ebp
call fcn.00414da0
push 0x54776c
push 0x53f504
mov edx, eax
call fcn.00416630
add esp, 8
mov ecx, ebp
call fcn.004151a0
mov ecx, ebp
call fcn.00414df0
mov eax, dword [esp + 0x28]
test eax, eax
je 0x48815d
push eax
call fcn.004e646c
add esp, 4
mov edi, dword [esp + 0x84]
mov edx, dword [esp + 0x20]
push edx
sub esp, 0x124
mov esi, esp
mov ecx, esi
mov dword [esp + 0x1ac], esp
call fcn.00415d50
cmp byte [edi + 0x11c], 0
je 0x4881a8
add edi, 0xc
jmp 0x4881ab
push edi
call fcn.004e646c
mov eax, dword [esp + 0x2c]
add esp, 4
test eax, eax
je 0x48815d
mov dword [esp + 0x1c], eax
jmp 0x48815d
mov edi, ebx
jmp 0x488164
mov edi, dword [edi + 8]
lea ebx, [edi + 4]
test ebx, ebx
jne 0x4881b7
mov ebx, 0x52e780
mov eax, ebx
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4881c0
sub eax, edx
sar eax, 1
lea edi, [eax + 1]
mov dword [esi + 4], eax
add esi, 8
mov ecx, edi
call fcn.00416cf0
cmp byte [esi + 0x114], 0
je 0x4881ed
add esi, 4
jmp 0x4881ef
mov esi, dword [esi]
lea ecx, [edi + edi]
push ecx
lea eax, [esi + 4]
push ebx
push eax
call fcn.004e9670
mov byte [esp + 0x1ac], 0
mov ecx, dword [esp + 0x150]
add esp, 0xc
mov esi, ebp
call fcn.00488b40
add esp, 0x128
test al, al
jne 0x487fd1
push 0x547788
mov ecx, ebp
call fcn.004014b0
lea ecx, [esp + 0x2c]
mov dword [esp + 0x78], 0xffffffff
call fcn.00422f40
xor al, al
jmp 0x487fe9