Function at 0x4bdf78
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x32
push 0
push 0
dec ecx
jne 0x4bdf80
push ebx
push esi
push edi
test dl, dl
je 0x4bdf96
add esp, 0xfffffff0
call fcn.004038cc
mov ebx, edx
mov edi, eax
xor eax, eax
push ebp
push 0x4be9b9
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [edi + 0x18]
mov edx, 0x4be9e8
call fcn.0040434c
lea eax, [edi + 8]
mov edx, 0x4be9fc
call fcn.0040434c
lea eax, [edi + 4]
mov edx, 0x4bea0c
call fcn.0040434c
lea eax, [edi + 0xc]
mov edx, 0x4bea1c
call fcn.0040434c
lea eax, [edi + 0x10]
mov edx, 0x4bea30
call fcn.0040434c
lea eax, [edi + 0x14]
mov edx, 0x4bea40
call fcn.0040434c
call fcn.004cfdfc
mov esi, eax
mov dword [esi + 0x30], edi
push edi
push 0x4bf93c
push 0
mov ecx, dword [edi + 4]
mov edx, 0x4bea50
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bf93c
push 0
mov ecx, dword [edi + 4]
mov edx, 0x4bea80
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bf93c
push 0
mov ecx, dword [edi + 4]
mov edx, 0x4beab4
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bf93c
push 0
mov ecx, dword [edi + 4]
mov edx, 0x4beae4
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bf93c
push 0
mov ecx, dword [edi + 4]
mov edx, 0x4beb14
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 4]
mov edx, 0x4beb48
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bfb94
push 0
mov ecx, dword [edi + 4]
mov edx, 0x4beb78
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bfb94
push 0
mov ecx, dword [edi + 4]
mov edx, 0x4beba8
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bfb94
push 0
mov ecx, dword [edi + 4]
mov edx, 0x4bebdc
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bfb94
push 0
mov ecx, dword [edi + 4]
mov edx, 0x4bec0c
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bfb94
push 0
mov ecx, dword [edi + 4]
mov edx, 0x4bec3c
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bfdd0
push 0
mov ecx, dword [edi + 0xc]
mov edx, 0x4bec70
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bfdd0
push 0
mov ecx, dword [edi + 0xc]
mov edx, 0x4becac
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bfdd0
push 0
mov ecx, dword [edi + 0xc]
mov edx, 0x4becf0
mov eax, esi
call fcn.004ce34c
push edi
push 0x4bfdd0
push 0
mov ecx, dword [edi + 0xc]
mov edx, 0x4bed3c
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0090
push 0
mov ecx, dword [edi + 8]
mov edx, 0x4bed88
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0090
push 0
mov ecx, dword [edi + 8]
mov edx, 0x4bedc8
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0090
push 0
mov ecx, dword [edi + 8]
mov edx, 0x4bee14
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0090
push 0
mov ecx, dword [edi + 8]
mov edx, 0x4bee58
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0090
push 0
mov ecx, dword [edi + 8]
mov edx, 0x4beea8
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0090
push 0
mov ecx, dword [edi + 8]
mov edx, 0x4beecc
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0090
push 0
mov ecx, dword [edi + 8]
mov edx, 0x4beef0
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0090
push 0
mov ecx, dword [edi + 8]
mov edx, 0x4bef10
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0090
push 0
mov ecx, dword [edi + 8]
mov edx, 0x4bef48
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0090
push 0
mov ecx, dword [edi + 8]
mov edx, 0x4bef7c
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4befbc
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4befe8
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4bf028
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4bf05c
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4bf0a4
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4bf0f0
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4bf120
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4bf150
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4bf17c
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4bf1ac
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4bf1e4
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4bf20c
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0584
push 0
mov ecx, dword [edi + 0x18]
mov edx, 0x4bf234
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf26c
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf29c
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf2cc
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf2f8
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf328
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf358
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf384
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf3b0
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf3dc
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf40c
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf438
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf464
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c0e00
push 0
mov ecx, dword [edi + 0x10]
mov edx, 0x4bf490
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 0x14]
mov edx, 0x4bf4b0
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 0x14]
mov edx, 0x4bf4ec
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 0x14]
mov edx, 0x4bf528
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 0x14]
mov edx, 0x4bf558
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 0x14]
mov edx, 0x4bf584
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 0x14]
mov edx, 0x4bf5a0
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 0x14]
mov edx, 0x4bf5c4
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 0x14]
mov edx, 0x4bf5f8
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 0x14]
mov edx, 0x4bf62c
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 0x14]
mov edx, 0x4bf660
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 0x14]
mov edx, 0x4bf6a0
mov eax, esi
call fcn.004ce34c
push edi
push 0x4c1238
push 0
mov ecx, dword [edi + 0x14]
mov edx, 0x4bf6e8
mov eax, esi
call fcn.004ce34c
lea eax, [ebp - 0x10]
xor edx, edx
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf728
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x20]
mov edx, 1
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf73c
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x30]
mov edx, 2
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf74c
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x40]
mov edx, 3
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf760
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x50]
mov edx, 4
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x50]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf774
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x60]
mov edx, 5
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x60]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf788
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x70]
mov edx, 6
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x70]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf79c
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x80]
mov edx, 7
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x80]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf7b0
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x90]
mov edx, 8
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x90]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf7c0
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0xa0]
mov edx, 9
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0xa0]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf7d4
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0xb0]
mov edx, 0xa
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0xb0]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf7e8
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0xc0]
mov edx, 0xb
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0xc0]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf7fc
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0xd0]
mov edx, 0xc
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0xd0]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf810
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0xe0]
mov edx, 0xd
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0xe0]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf824
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0xf0]
mov edx, 0x10
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0xf0]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf838
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x100]
mov edx, 0x11
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x100]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf84c
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x110]
mov edx, 0x12
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x110]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf85c
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x120]
mov edx, 0x13
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x120]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf86c
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x130]
mov edx, 0x14
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x130]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf880
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x140]
mov edx, 0x48
mov cl, 1
call fcn.00414dd0
lea eax, [ebp - 0x140]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf894
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x150]
mov edx, 0x100
mov cl, 2
call fcn.00414dd0
lea eax, [ebp - 0x150]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf8a8
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x160]
mov edx, 0x101
mov cl, 2
call fcn.00414dd0
lea eax, [ebp - 0x160]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf8bc
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x170]
mov edx, 0xfff
mov cl, 2
call fcn.00414dd0
lea eax, [ebp - 0x170]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf8cc
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x180]
mov edx, 0x2000
mov cl, 2
call fcn.00414dd0
lea eax, [ebp - 0x180]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf8e0
mov eax, esi
call fcn.004ce060
lea eax, [ebp - 0x190]
mov edx, 0x4000
mov cl, 2
call fcn.00414dd0
lea eax, [ebp - 0x190]
push eax
mov ecx, 0x4bf718
mov edx, 0x4bf8f4
mov eax, esi
call fcn.004ce060
xor eax, eax
mov dword [esi + 0x30], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4be9c0
lea eax, [ebp - 0x190]
mov edx, dword [0x401114]
mov ecx, 0x19
call fcn.00404e0c
ret