Function at 0x4febf0
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x616ed7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push esi
mov dword [esp + 0x1c], 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x28], 1
call fcn.0041c5f0
lea eax, [esp + 0x34]
lea ecx, [esp + 8]
push eax
mov byte [esp + 0x2c], 2
call fcn.005eae6a
mov bl, 3
push 0x672ea0
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], bl
call fcn.005eb163
push 0x6713a0
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], 4
call fcn.005eb163
lea ecx, [esp + 0x14]
push 0
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x10]
push edx
lea ecx, [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 5
call fcn.0041c630
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 6
call fcn.005eb22e
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 5
call fcn.005eb0f5
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], 4
call fcn.005eb0f5
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], bl
call fcn.005eb0f5
push 0x67e7b8
lea ecx, [esp + 0x14]
call fcn.005eb163
push 0x672654
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 7
call fcn.005eb163
lea edx, [esp + 0x10]
push 0
lea eax, [esp + 0x18]
push edx
lea ecx, [esp + 0x10]
push eax
lea edx, [esp + 0x24]
push ecx
push edx
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 8
call fcn.0041c630
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 9
call fcn.005eb22e
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 8
call fcn.005eb0f5
mov byte [esp + 0x28], 7
lea ecx, [esp + 0x14]
call fcn.005eb0f5
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.005eb0f5
push 0x67e7b4
lea ecx, [esp + 0x14]
call fcn.005eb163
push 0x672778
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 0xa
call fcn.005eb163
lea eax, [esp + 0x10]
push 0
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x10]
push ecx
lea eax, [esp + 0x24]
push edx
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 0xb
call fcn.0041c630
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0xc
call fcn.005eb22e
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 0xb
call fcn.005eb0f5
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0xa
call fcn.005eb0f5
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.005eb0f5
push str._r_n
lea ecx, [esp + 0x14]
call fcn.005eb163
push 0x67422c
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 0xd
call fcn.005eb163
lea ecx, [esp + 0x10]
push 0
lea edx, [esp + 0x18]
push ecx
lea eax, [esp + 0x10]
push edx
lea ecx, [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 0xe
call fcn.0041c630
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0xf
call fcn.005eb22e
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 0xe
call fcn.005eb0f5
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0xd
call fcn.005eb0f5
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.005eb0f5
push 0x67e7a8
lea ecx, [esp + 0x14]
call fcn.005eb163
mov byte [esp + 0x28], 0x10
push 0x675320
lea ecx, [esp + 0x18]
call fcn.005eb163
lea edx, [esp + 0x10]
push 0
lea eax, [esp + 0x18]
push edx
lea ecx, [esp + 0x10]
push eax
lea edx, [esp + 0x24]
push ecx
push edx
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 0x11
call fcn.0041c630
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0x12
call fcn.005eb22e
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 0x11
call fcn.005eb0f5
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0x10
call fcn.005eb0f5
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.005eb0f5
push 0x67e7a4
lea ecx, [esp + 0x14]
call fcn.005eb163
push 0x67e7a0
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 0x13
call fcn.005eb163
lea eax, [esp + 0x10]
push 0
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x10]
push ecx
lea eax, [esp + 0x24]
push edx
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 0x14
call fcn.0041c630
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0x15
call fcn.005eb22e
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 0x14
call fcn.005eb0f5
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0x13
call fcn.005eb0f5
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.005eb0f5
push 0x67e79c
lea ecx, [esp + 0x14]
call fcn.005eb163
push 0x67e798
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 0x16
call fcn.005eb163
lea ecx, [esp + 0x10]
push 0
lea edx, [esp + 0x18]
push ecx
lea eax, [esp + 0x10]
push edx
mov byte [esp + 0x34], 0x17
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x20]
call fcn.0041c630
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0x18
call fcn.005eb22e
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 0x17
call fcn.005eb0f5
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0x16
call fcn.005eb0f5
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.005eb0f5
mov esi, dword [esp + 0x30]
lea edx, [esp + 8]
push edx
mov ecx, esi
call fcn.005eae6a
mov dword [esp + 0x1c], 1
lea ecx, [esp + 8]
mov byte [esp + 0x28], 2
call fcn.005eb0f5
lea ecx, [esp + 0xc]
mov byte [esp + 0x28], 1
call fcn.0041c620
lea ecx, [esp + 0x34]
mov byte [esp + 0x28], 0
call fcn.005eb0f5
mov ecx, dword [esp + 0x20]
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x24
ret