Function at 0x4e00a0
Capabilities:
Access peb ldr_data
Check os version

Disassembly:
push 0xffffffffffffffff
push 0x5b0b5b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd4
push esi
mov esi, ecx
lea ecx, [esp + 8]
call fcn.00419570
mov dword [esp + 0xe0], 0
mov eax, dword [esp + 0xe8]
imul eax, eax, 0xbec
mov ecx, dword [eax + 0x67e290]
mov edx, dword [eax + 0x67e294]
mov dword [esp + 0xc], ecx
mov cl, byte [eax + 0x67e298]
mov dword [esp + 0x10], edx
mov dl, byte [eax + 0x67e299]
mov byte [esp + 0x14], cl
mov ecx, dword [eax + 0x67e2a0]
mov byte [esp + 0x15], dl
mov edx, dword [eax + 0x67e2a4]
mov dword [esp + 0x1c], ecx
mov cl, byte [eax + 0x67e2a8]
mov dword [esp + 0x20], edx
mov dl, byte [eax + 0x67e2a9]
mov byte [esp + 0x24], cl
mov ecx, dword [eax + 0x67e2b0]
mov byte [esp + 0x25], dl
mov edx, dword [eax + 0x67e2b4]
mov dword [esp + 0x2c], ecx
mov cl, byte [eax + 0x67e2b8]
mov dword [esp + 0x30], edx
mov dl, byte [eax + 0x67e2b9]
mov byte [esp + 0x34], cl
mov ecx, dword [eax + 0x67e2c0]
mov byte [esp + 0x35], dl
mov edx, dword [eax + 0x67e2c4]
mov dword [esp + 0x3c], ecx
mov cl, byte [eax + 0x67e2c8]
mov dword [esp + 0x40], edx
mov dl, byte [eax + 0x67e2c9]
mov byte [esp + 0x44], cl
mov ecx, dword [eax + 0x67e2d0]
mov byte [esp + 0x45], dl
mov edx, dword [eax + 0x67e2d4]
mov dword [esp + 0x4c], ecx
mov cl, byte [eax + 0x67e2d8]
mov dword [esp + 0x50], edx
mov dl, byte [eax + 0x67e2d9]
mov byte [esp + 0x54], cl
mov ecx, dword [eax + 0x67e2e0]
mov byte [esp + 0x55], dl
mov edx, dword [eax + 0x67e2e4]
mov dword [esp + 0x5c], ecx
mov cl, byte [eax + 0x67e2e8]
mov dword [esp + 0x60], edx
mov dl, byte [eax + 0x67e2e9]
mov byte [esp + 0x64], cl
mov ecx, dword [eax + 0x67e2f0]
mov byte [esp + 0x65], dl
mov edx, dword [eax + 0x67e2f4]
mov dword [esp + 0x6c], ecx
mov cl, byte [eax + 0x67e2f8]
mov dword [esp + 0x70], edx
mov dl, byte [eax + 0x67e2f9]
mov byte [esp + 0x74], cl
mov ecx, dword [eax + 0x67e300]
mov byte [esp + 0x75], dl
mov edx, dword [eax + 0x67e304]
mov dword [esp + 0x7c], ecx
mov cl, byte [eax + 0x67e308]
mov dword [esp + 0x80], edx
mov dl, byte [eax + 0x67e309]
mov byte [esp + 0x84], cl
mov ecx, dword [eax + 0x67e310]
mov byte [esp + 0x85], dl
mov edx, dword [eax + 0x67e314]
mov dword [esp + 0x8c], ecx
mov cl, byte [eax + 0x67e318]
mov dword [esp + 0x90], edx
mov dl, byte [eax + 0x67e319]
mov byte [esp + 0x94], cl
mov ecx, dword [eax + 0x67e320]
mov byte [esp + 0x95], dl
mov edx, dword [eax + 0x67e324]
mov dword [esp + 0x9c], ecx
mov cl, byte [eax + 0x67e328]
mov dword [esp + 0xa0], edx
mov dl, byte [eax + 0x67e329]
mov byte [esp + 0xa4], cl
mov ecx, dword [eax + 0x67e330]
mov byte [esp + 0xa5], dl
mov edx, dword [eax + 0x67e334]
mov dword [esp + 0xac], ecx
mov cl, byte [eax + 0x67e338]
mov dword [esp + 0xb0], edx
mov dl, byte [eax + 0x67e339]
mov byte [esp + 0xb4], cl
mov ecx, dword [esp + 0xec]
xor eax, eax
cmp ecx, 0xa
mov byte [esp + 0xb5], dl
ja case.default.0x4e02d6
jmp dword [ecx*4 + 0x4e03e0]
mov eax, dword [esi + 0xec]
mov dword [esp + 4], eax
lea ecx, [esp + 8]
jmp 0x4e039d
mov ecx, dword [esi + 0xf8]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x18]
jmp 0x4e039d
mov edx, dword [esi + 0x104]
mov dword [esp + 4], edx
lea ecx, [esp + 0x28]
jmp 0x4e039d
mov eax, dword [esi + 0x110]
mov dword [esp + 4], eax
lea ecx, [esp + 0x38]
jmp 0x4e039d
mov ecx, dword [esi + 0x11c]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x48]
jmp 0x4e039d
mov edx, dword [esi + 0x128]
mov dword [esp + 4], edx
lea ecx, [esp + 0x58]
jmp 0x4e039d
mov eax, dword [esi + 0x134]
mov dword [esp + 4], eax
lea ecx, [esp + 0x68]
jmp 0x4e039d
mov ecx, dword [esi + 0x140]
mov dword [esp + 4], ecx
lea ecx, [esp + 0x78]
jmp 0x4e039d
mov edx, dword [esi + 0x14c]
mov dword [esp + 4], edx
lea ecx, [esp + 0x88]
jmp 0x4e039d
mov eax, dword [esi + 0x158]
mov dword [esp + 4], eax
lea ecx, [esp + 0x98]
jmp 0x4e039d
mov ecx, dword [esi + 0x164]
mov dword [esp + 4], ecx
lea ecx, [esp + 0xa8]
call fcn.00465050
fimul dword [esp + 4]
call fcn.00591008
mov ecx, dword [esp + 0xf0]
add dword [ecx], eax
mov dword [esp + 0xe0], 0xffffffff
lea ecx, [esp + 8]
call fcn.00414f50
mov ecx, dword [esp + 0xd8]
pop esi
mov dword fs:[0], ecx
add esp, 0xe0
ret 0xc