Function at 0x4050c0
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5133ce
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x53f040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
mov dword [edi], vtable.xs__schema.0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [ebp - 4], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x50], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x60], 0
mov dword [edi + 0x64], 0
mov dword [edi + 0x68], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x70], 0
mov dword [edi + 0x74], 0
mov dword [edi + 0x78], 0
mov dword [edi + 0x7c], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0x84], 0
mov dword [edi + 0x88], 0
mov dword [edi + 0x8c], 0
mov dword [edi + 0x90], 0
lea esi, [edi + 0xa8]
mov byte [ebp - 4], 9
push 0x18
mov dword [ebp - 0x14], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004f1990
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
lea esi, [edi + 0xb0]
mov byte [ebp - 4], 0xa
push 0x14
mov dword [ebp - 0x14], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004f1990
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
lea esi, [edi + 0xb8]
mov byte [ebp - 4], 0xb
push 0x14
mov dword [ebp - 0x14], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004f1990
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
lea esi, [edi + 0xc0]
mov byte [ebp - 4], 0xc
push 0x14
mov dword [ebp - 0x14], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004f1990
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
push 0x5172ac
push 0x1dfe0
mov byte [ebp - 4], 0xd
call fcn.004f19c0
mov esi, eax
add esp, 8
test esi, esi
je 0x4052e1
push 0
xor edx, edx
mov ecx, esi
call fcn.0042c6b0
add esp, 4
mov ecx, esi
push edx
call fcn.0042c6b0
add esp, 4
jmp 0x4052e3
xor esi, esi
mov ecx, esi
call fcn.004297a0
mov edx, dword [ebp + 8]
mov ecx, esi
call fcn.0042c4f0
test eax, eax
jne 0x40531a
mov ecx, esi
call fcn.004297a0
test esi, esi
je 0x405318
mov ecx, esi
call fcn.004297a0
push 0x1dfe0
push esi
call fcn.004f1a15
add esp, 8
xor esi, esi
mov dword [edi + 0x94], esi
mov ecx, edi
mov dword [esi + 0x6100], 0xffffffff
mov eax, dword [edi + 0x94]
mov dword [eax + 0x6118], 0
mov eax, dword [edi + 0x94]
mov dword [eax + 0x6114], 1
push dword [edi + 0x94]
call fcn.004aee20
mov eax, dword [edi + 0x94]
mov ecx, edi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
mov dword [eax + 0x6084], 0x451f10
mov eax, dword [edi + 0x94]
push dword [ebp + 0xc]
mov dword [eax + 0x78], 0
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0x98], 0
mov byte [edi + 0x9c], 0
mov dword [edi + 0xa0], 0
mov dword [edi + 0xa4], 0
call fcn.004060b0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10