Function at 0x4b4870
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get ntdll base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 8], ebx
test dl, dl
je 0x4b488a
add esp, 0xfffffff0
call fcn.00403d00
mov byte [ebp - 1], dl
mov esi, eax
xor eax, eax
push ebp
push 0x4b5645
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, esi
call fcn.00420700
lea eax, [esi + 0x60]
mov edx, 0x4b5674
call fcn.0040475c
test byte [esi + 0x1c], 0x10
je 0x4b48f2
xor ecx, ecx
mov dl, 1
mov eax, dword [0x46e514]
call fcn.0046eb20
mov ebx, eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4b5688
mov edx, 0x4b569c
mov eax, ebx
call fcn.0046ebb4
mov edx, dword [ebp - 8]
lea eax, [esi + 0x68]
call fcn.0040475c
mov eax, ebx
call fcn.0040399c
mov byte [esi + 0x6c], 1
mov byte [esi + 0x6f], 1
mov dword [esi + 0x70], 0x79e
mov dword [esi + 0x74], 0x10000
mov dl, 1
mov eax, dword [0x4b1128]
call fcn.0040396c
mov ebx, eax
mov dword [esi + 0x58], ebx
lea eax, [ebx + 4]
mov edx, 0x4b56c4
call fcn.0040475c
lea eax, [ebx + 8]
mov edx, 0x4b56dc
call fcn.0040475c
lea eax, [ebx + 0x10]
mov edx, 0x4b570c
call fcn.0040475c
lea eax, [ebx + 0x14]
mov edx, 0x4b5720
call fcn.0040475c
lea eax, [ebx + 0x18]
mov edx, 0x4b573c
call fcn.0040475c
lea eax, [ebx + 0x1c]
mov edx, 0x4b5750
call fcn.0040475c
lea eax, [ebx + 0x20]
mov edx, 0x4b579c
call fcn.0040475c
lea eax, [ebx + 0x24]
mov edx, 0x4b57b0
call fcn.0040475c
lea eax, [ebx + 0x28]
mov edx, 0x4b57c4
call fcn.0040475c
lea eax, [ebx + 0x2c]
mov edx, 0x4b57d4
call fcn.0040475c
lea eax, [ebx + 0x30]
mov edx, 0x4b57e8
call fcn.0040475c
lea eax, [ebx + 0x34]
mov edx, 0x4b5800
call fcn.0040475c
lea eax, [ebx + 0x40]
mov edx, 0x4b5818
call fcn.0040475c
lea eax, [ebx + 0x44]
mov edx, 0x4b5828
call fcn.0040475c
lea eax, [ebx + 0x48]
mov edx, 0x4b5818
call fcn.0040475c
lea eax, [ebx + 0x38]
mov edx, 0x4b5838
call fcn.0040475c
lea eax, [ebx + 0x3c]
mov edx, 0x4b5860
call fcn.0040475c
lea eax, [ebx + 0x4c]
mov edx, 0x4b5888
call fcn.0040475c
lea eax, [ebx + 0x50]
mov edx, 0x4b58b0
call fcn.0040475c
lea eax, [ebx + 0x54]
mov edx, 0x4b58d8
call fcn.0040475c
lea eax, [ebx + 0x58]
mov edx, 0x4b5908
call fcn.0040475c
lea eax, [ebx + 0x5c]
mov edx, 0x4b591c
call fcn.0040475c
lea eax, [ebx + 0x60]
mov edx, 0x4b5930
call fcn.0040475c
lea eax, [ebx + 0x64]
mov edx, 0x4b5948
call fcn.0040475c
lea eax, [ebx + 0x68]
mov edx, 0x4b596c
call fcn.0040475c
lea eax, [ebx + 0x6c]
mov edx, 0x4b5980
call fcn.0040475c
lea eax, [ebx + 0x70]
mov edx, 0x4b59b8
call fcn.0040475c
lea eax, [ebx + 0x74]
mov edx, 0x4b59d0
call fcn.0040475c
lea eax, [ebx + 0x78]
mov edx, 0x4b59f4
call fcn.0040475c
lea eax, [ebx + 0x7c]
mov edx, 0x4b5a14
call fcn.0040475c
lea eax, [ebx + 0x80]
mov edx, 0x4b5a2c
call fcn.0040475c
lea eax, [ebx + 0x84]
mov edx, 0x4b5a50
call fcn.0040475c
lea eax, [ebx + 0x88]
mov edx, 0x4b5a70
call fcn.0040475c
lea eax, [ebx + 0x8c]
mov edx, 0x4b5ab0
call fcn.0040475c
lea eax, [ebx + 0x90]
mov edx, 0x4b596c
call fcn.0040475c
lea eax, [ebx + 0x94]
mov edx, 0x4b5ac0
call fcn.0040475c
lea eax, [ebx + 0x98]
call fcn.00404708
lea eax, [ebx + 0x9c]
mov edx, 0x4b5ad0
call fcn.0040475c
lea eax, [ebx + 0xa0]
mov edx, 0x4b5ae0
call fcn.0040475c
lea eax, [ebx + 0xa4]
mov edx, 0x4b5b0c
call fcn.0040475c
lea eax, [ebx + 0xc]
mov edx, 0x4b5b48
call fcn.0040475c
mov dl, 1
mov eax, dword [0x4b2d7c]
call fcn.0040396c
mov ebx, eax
mov dword [esi + 0x5c], ebx
lea eax, [ebx + 4]
mov edx, 0x4b5b54
call fcn.0040475c
lea eax, [ebx + 8]
mov edx, 0x4b5b88
call fcn.0040475c
lea eax, [ebx + 0xc]
mov edx, 0x4b5bc4
call fcn.0040475c
lea eax, [ebx + 0x10]
mov edx, 0x4b5bec
call fcn.0040475c
lea eax, [ebx + 0x14]
mov edx, 0x4b5c0c
call fcn.0040475c
lea eax, [ebx + 0x18]
mov edx, 0x4b5c2c
call fcn.0040475c
lea eax, [ebx + 0x1c]
mov edx, 0x4b5c58
call fcn.0040475c
lea eax, [ebx + 0x20]
mov edx, 0x4b5c80
call fcn.0040475c
lea eax, [ebx + 0x24]
mov edx, 0x4b5cc0
call fcn.0040475c
lea eax, [ebx + 0x28]
mov edx, 0x4b5d04
call fcn.0040475c
lea eax, [ebx + 0x2c]
mov edx, 0x4b5d2c
call fcn.0040475c
lea eax, [ebx + 0x30]
mov edx, 0x4b5d5c
call fcn.0040475c
lea eax, [ebx + 0x34]
mov edx, 0x4b5d88
call fcn.0040475c
lea eax, [ebx + 0x38]
mov edx, 0x4b5dbc
call fcn.0040475c
lea eax, [ebx + 0x3c]
mov edx, 0x4b5df0
call fcn.0040475c
lea eax, [ebx + 0x40]
mov edx, 0x4b5e40
call fcn.0040475c
lea eax, [ebx + 0x44]
mov edx, 0x4b5e78
call fcn.0040475c
lea eax, [ebx + 0x48]
mov edx, 0x4b5eb0
call fcn.0040475c
lea eax, [ebx + 0x4c]
mov edx, 0x4b5ee8
call fcn.0040475c
lea eax, [ebx + 0x50]
mov edx, 0x4b5f24
call fcn.0040475c
lea eax, [ebx + 0x54]
mov edx, 0x4b5f60
call fcn.0040475c
lea eax, [ebx + 0x58]
mov edx, 0x4b5f9c
call fcn.0040475c
lea eax, [ebx + 0x5c]
mov edx, 0x4b5fd8
call fcn.0040475c
lea eax, [ebx + 0x60]
mov edx, 0x4b6010
call fcn.0040475c
lea eax, [ebx + 0x64]
mov edx, 0x4b6044
call fcn.0040475c
lea eax, [ebx + 0x68]
mov edx, 0x4b6054
call fcn.0040475c
lea eax, [ebx + 0x6c]
mov edx, 0x4b6074
call fcn.0040475c
lea eax, [ebx + 0x70]
mov edx, 0x4b6094
call fcn.0040475c
lea eax, [ebx + 0x74]
mov edx, 0x4b60b4
call fcn.0040475c
lea eax, [ebx + 0x78]
mov edx, 0x4b60e8
call fcn.0040475c
lea eax, [ebx + 0x7c]
mov edx, 0x4b610c
call fcn.0040475c
lea eax, [ebx + 0x80]
mov edx, 0x4b6124
call fcn.0040475c
lea eax, [ebx + 0x84]
mov edx, 0x4b6148
call fcn.0040475c
lea eax, [ebx + 0x88]
mov edx, 0x4b6170
call fcn.0040475c
lea eax, [ebx + 0x8c]
mov edx, 0x4b6198
call fcn.0040475c
lea eax, [ebx + 0x90]
mov edx, 0x4b61b0
call fcn.0040475c
lea eax, [ebx + 0x94]
mov edx, 0x4b61dc
call fcn.0040475c
lea eax, [ebx + 0x98]
mov edx, 0x4b6210
call fcn.0040475c
mov dl, 1
mov eax, dword [0x4b19e0]
call fcn.0040396c
mov edi, eax
mov dword [ebx + 0x9c], edi
lea eax, [edi + 4]
mov edx, 0x4b6224
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 8
mov edx, 0x4b6234
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0xc
mov edx, 0x4b6244
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x10
mov edx, 0x4b6258
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x14
mov edx, 0x4b6270
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x18
mov edx, 0x4b6280
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x1c
mov edx, 0x4b6294
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x20
mov edx, 0x4b62a4
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x24
mov edx, 0x4b62b4
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x28
mov edx, 0x4b62c4
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x2c
mov edx, 0x4b62d4
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x30
mov edx, 0x4b62e4
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x34
mov edx, 0x4b62f4
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x38
mov edx, 0x4b6304
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x3c
mov edx, 0x4b6318
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x40
mov edx, 0x4b6328
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x44
mov edx, 0x4b633c
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x48
mov edx, 0x4b6350
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x4c
mov edx, 0x4b6364
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x50
mov edx, 0x4b637c
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x54
mov edx, 0x4b638c
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x5c
mov edx, 0x4b639c
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x60
mov edx, 0x4b63ac
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x64
mov edx, 0x4b63c0
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x68
mov edx, 0x4b63d4
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x6c
mov edx, 0x4b63e8
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x70
mov edx, 0x4b63fc
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x78
mov edx, 0x4b640c
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x7c
mov edx, 0x4b641c
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x80
mov edx, 0x4b6434
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x84
mov edx, 0x4b6448
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x74
mov edx, 0x4b6458
call fcn.0040475c
mov eax, dword [ebx + 0x9c]
add eax, 0x88
mov edx, 0x4b6468
call fcn.0040475c
mov dl, 1
mov eax, dword [0x4b20f0]
call fcn.0040396c
mov edi, eax
mov dword [ebx + 0xa0], edi
lea eax, [edi + 4]
mov edx, 0x4b62a4
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 8
mov edx, 0x4b639c
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0xc
mov edx, 0x4b62c4
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x10
mov edx, 0x4b62d4
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x14
mov edx, 0x4b62e4
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x18
mov edx, 0x4b640c
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x1c
mov edx, 0x4b641c
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x20
mov edx, 0x4b6478
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x24
mov edx, 0x4b6488
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x28
mov edx, 0x4b6498
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x2c
mov edx, 0x4b64ac
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x30
mov edx, 0x4b6448
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x34
mov edx, 0x4b64c0
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x38
mov edx, 0x4b64d0
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x3c
mov edx, 0x4b64e4
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x44
mov edx, 0x4b6500
call fcn.0040475c
mov eax, dword [ebx + 0xa0]
add eax, 0x40
mov edx, 0x4b6364
call fcn.0040475c
lea eax, [ebx + 0xac]
mov edx, 0x4b651c
call fcn.0040475c
lea eax, [ebx + 0xb0]
mov edx, 0x4b6528
call fcn.0040475c
mov dl, 1
mov eax, dword [0x4b24e4]
call fcn.0040396c
mov edi, eax
mov dword [ebx + 0xa4], edi
lea eax, [edi + 4]
mov edx, 0x4b6534
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 8
mov edx, 0x4b6548
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0xc
mov edx, 0x4b655c
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x10
mov edx, 0x4b656c
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x14
mov edx, 0x4b657c
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x18
mov edx, 0x4b6590
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x28
mov edx, 0x4b65a4
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x2c
mov edx, 0x4b65b4
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x30
mov edx, 0x4b65c4
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x34
mov edx, 0x4b65d4
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x38
mov edx, 0x4b65ec
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x1c
mov edx, 0x4b65f8
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x20
mov edx, 0x4b6614
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x24
mov edx, 0x4b6630
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x3c
mov edx, 0x4b665c
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x40
mov edx, 0x4b6684
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x44
mov edx, 0x4b6694
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x48
mov edx, 0x4b66a4
call fcn.0040475c
mov eax, dword [ebx + 0xa4]
add eax, 0x4c
mov edx, 0x4b66b4
call fcn.0040475c
mov dl, 1
mov eax, dword [0x4b2ab0]
call fcn.0040396c
mov edi, eax
mov dword [ebx + 0xa8], edi
lea eax, [edi + 4]
mov edx, 0x4b66c4
call fcn.0040475c
mov eax, dword [ebx + 0xa8]
add eax, 8
mov edx, 0x4b66d0
call fcn.0040475c
mov eax, dword [ebx + 0xa8]
add eax, 0xc
mov edx, 0x4b66ec
call fcn.0040475c
mov eax, dword [ebx + 0xa8]
add eax, 0x10
mov edx, 0x4b66f8
call fcn.0040475c
mov eax, dword [ebx + 0xa8]
add eax, 0x14
mov edx, 0x4b6708
call fcn.0040475c
mov eax, dword [ebx + 0xa8]
add eax, 0x18
mov edx, 0x4b671c
call fcn.0040475c
mov eax, dword [ebx + 0xa8]
add eax, 0x1c
mov edx, 0x4b673c
call fcn.0040475c
mov eax, dword [ebx + 0xa8]
add eax, 0x20
mov edx, 0x4b6768
call fcn.0040475c
mov eax, dword [ebx + 0xa8]
add eax, 0x24
mov edx, 0x4b6788
call fcn.0040475c
mov eax, dword [ebx + 0xa8]
add eax, 0x28
mov edx, 0x4b67b0
call fcn.0040475c
mov dl, 1
mov eax, dword [0x4b4250]
call fcn.004b6d20
mov dword [esi + 0x34], eax
mov dl, 1
mov eax, dword [0x4b4194]
call fcn.0040396c
mov ebx, eax
mov dword [esi + 0x30], ebx
mov byte [ebx + 4], 1
mov dl, 1
mov eax, dword [0x4b385c]
call fcn.0040396c
mov ebx, eax
mov dword [esi + 0x40], ebx
lea eax, [ebx + 4]
mov edx, 0x4b67cc
call fcn.0040475c
lea eax, [ebx + 8]
mov edx, 0x4b67e0
call fcn.0040475c
mov dl, 1
mov eax, dword [0x4b365c]
call fcn.0040396c
mov ebx, eax
mov dword [esi + 0x38], ebx
lea eax, [ebx + 4]
mov edx, 0x4b67fc
call fcn.0040475c
lea eax, [ebx + 8]
mov edx, 0x4b6818
call fcn.0040475c
lea eax, [ebx + 0xc]
mov edx, 0x4b6830
call fcn.0040475c
lea eax, [ebx + 0x10]
mov edx, 0x4b6844
call fcn.0040475c
lea eax, [ebx + 0x14]
mov edx, 0x4b6854
call fcn.0040475c
lea eax, [ebx + 0x18]
mov edx, 0x4b6860
call fcn.0040475c
lea eax, [ebx + 0x1c]
mov edx, 0x4b6890
call fcn.0040475c
mov dl, 1
mov eax, dword [0x4b3964]
call fcn.0040396c
mov ebx, eax
mov dword [esi + 0x3c], ebx
lea eax, [ebx + 4]
mov edx, 0x4b5930
call fcn.0040475c
lea eax, [ebx + 8]
mov edx, 0x4b68c0
call fcn.0040475c
lea eax, [ebx + 0xc]
mov edx, 0x4b68d8
call fcn.0040475c
lea eax, [ebx + 0x10]
mov edx, 0x4b59b8
call fcn.0040475c
lea eax, [ebx + 0x14]
mov edx, 0x4b59d0
call fcn.0040475c
lea eax, [ebx + 0x18]
mov edx, 0x4b68f0
call fcn.0040475c
lea eax, [ebx + 0x1c]
mov edx, 0x4b5ad0
call fcn.0040475c
lea eax, [ebx + 0x20]
mov edx, 0x4b6910
call fcn.0040475c
lea eax, [ebx + 0x24]
mov edx, 0x4b6920
call fcn.0040475c
lea eax, [ebx + 0x28]
mov edx, 0x4b6930
call fcn.0040475c
lea eax, [ebx + 0x2c]
mov edx, 0x4b6940
call fcn.0040475c
lea eax, [ebx + 0x30]
mov edx, 0x4b5948
call fcn.0040475c
lea eax, [ebx + 0x34]
mov edx, 0x4b5a2c
call fcn.0040475c
lea eax, [ebx + 0x38]
mov edx, 0x4b6950
call fcn.0040475c
lea eax, [ebx + 0x3c]
mov edx, 0x4b6988
call fcn.0040475c
lea eax, [ebx + 0x40]
mov edx, 0x4b69c8
call fcn.0040475c
lea eax, [ebx + 0x44]
mov edx, 0x4b6a00
call fcn.0040475c
lea eax, [ebx + 0x48]
mov edx, 0x4b6a1c
call fcn.0040475c
lea eax, [ebx + 0x4c]
mov edx, 0x4b6a48
call fcn.0040475c
mov dl, 1
mov eax, dword [0x4b0e24]
call fcn.0040396c
mov ebx, eax
mov dword [esi + 0x54], ebx
lea eax, [ebx + 4]
mov edx, 0x4b6a70
call fcn.0040475c
lea eax, [ebx + 8]
mov edx, 0x4b6a98
call fcn.0040475c
lea eax, [ebx + 0xc]
mov edx, 0x4b6ac0
call fcn.0040475c
lea eax, [ebx + 0x10]
mov edx, 0x4b6adc
call fcn.0040475c
lea eax, [ebx + 0x14]
mov edx, 0x4b6afc
call fcn.0040475c
lea eax, [ebx + 0x18]
mov edx, 0x4b6b40
call fcn.0040475c
lea eax, [ebx + 0x1c]
mov edx, 0x4b6b84
call fcn.0040475c
lea eax, [ebx + 0x20]
mov edx, 0x4b6ba0
call fcn.0040475c
lea eax, [ebx + 0x24]
mov edx, 0x4b6bc8
call fcn.0040475c
lea eax, [ebx + 0x28]
mov edx, 0x4b6c00
call fcn.0040475c
lea eax, [ebx + 0x2c]
mov edx, 0x4b6b40
call fcn.0040475c
mov byte [esi + 0x44], 1
lea eax, [esi + 0x48]
mov edx, 0x4b6c34
call fcn.0040475c
lea eax, [esi + 0x4c]
mov edx, 0x4b6930
call fcn.0040475c
lea eax, [esi + 0x64]
call fcn.00404708
mov byte [esi + 0x6d], 0
mov byte [esi + 0x6e], 1
mov al, byte [0x4b6c38]
mov byte [esi + 0x45], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b564c
lea eax, [ebp - 8]
call fcn.00404708
ret