Function at 0x4cb270
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1014a4a0
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x101d74a8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
call 0x3b79d0
mov dword [esi + 0x94], 0x1016c9e4
xor edi, edi
mov dword [esi + 0x98], 0x1016c9f8
push esi
lea ecx, [esi + 0xa4]
mov dword [ebp - 4], edi
mov dword [esi + 0x9c], 0x1016cd30
call fcn.0041bce0
push edi
mov dword [esi + 0xa0], 0x1015b628
push edi
push 0x1017764c
lea ecx, [esi + 0xb4]
mov byte [ebp - 4], 1
mov dword [esi], 0x1016cf40
mov dword [esi + 0x94], 0x1016cf2c
mov dword [esi + 0x98], 0x1016cf24
mov dword [esi + 0x9c], 0x1016cf0c
mov dword [esi + 0xa0], 0x1016cf04
call fcn.00425d80
push edi
lea ecx, [esi + 0xd4]
push edi
push 0x1017764c
mov byte [ebp - 4], 2
mov dword [ecx], 0x10153c1c
mov dword [ecx + 4], edi
call 0x3fe920
lea ebx, [esi + 0xe0]
mov ecx, ebx
mov byte [ebp - 4], 3
call fcn.0047e9e0
mov dword [ebx + 4], eax
mov dword [ebx + 8], edi
lea ecx, [esi + 0xfc]
mov byte [ebp - 4], 4
call fcn.0049a510
push esi
lea ecx, [esi + 0x2b4]
mov byte [ebp - 4], 5
mov dword [esi + 0x2ac], edi
call fcn.004c9670
mov dword [esi + 0x2b0], 0x1016ce28
mov dword [esi + 0x2b8], edi
mov dword [esi + 0x2bc], edi
push 0x10000000
lea ecx, [esi + 0x2c0]
mov byte [ebp - 4], 8
call fcn.0049cd60
mov dword [esi + 0x42c], edi
mov dword [esi + 0x430], edi
mov dword [esi + 0x434], edi
mov dword [esi + 0x438], edi
lea ecx, [esi + 0x43c]
mov byte [ebp - 4], 0xa
call 0x3fefd0
lea ecx, [esi + 0x45c]
mov byte [ebp - 4], 0xb
call fcn.004c8c00
mov eax, dword [esi + 0x2b4]
mov byte [ebp - 4], 0xc
mov dword [esi + 0x408], edi
mov dword [esi + 0x40c], edi
mov dword [esi + 0x410], edi
mov dword [esi + 0x414], edi
mov ecx, 0x1006f910
xor edx, edx
mov dword [eax + 0x28], ecx
mov dword [eax + 0x2c], edx
mov dword [eax + 0x30], edi
add eax, 0x28
xor ecx, ecx
mov dword [eax + 0xc], ecx
mov ebx, 1
mov dword [esi + 0x454], ebx
mov dword [esi + 0xf8], edi
mov dword [esi + 0xec], edi
mov dword [esi + 0xf0], edi
mov dword [esi + 0xf4], edi
mov dword [esi + 0x4b8], edi
mov dword [esi + 0x418], edi
mov dword [esi + 0x41c], edi
mov dword [esi + 0xdc], edi
call fcn.00411db0
mov dword [esi + 0x4a4], ebx
mov dword [esi + 0x4b0], ebx
lea ebx, [esi + 0x420]
push 0x10155ffc
mov dword [esi + 0x458], eax
mov dword [esi + 0x4a0], edi
mov dword [esi + 0x4a8], edi
mov dword [esi + 0x4b4], 0xffffffff
mov dword [esi + 0x4ac], edi
mov dword [esi + 0x424], edi
mov dword [ebx], edi
call dword [0x10152518]
cmp eax, edi
mov dword [esi + 0x424], eax
je 0x4cb4ca
push 0x10155fdc
push eax
call dword [0x10152514]
cmp eax, edi
je 0x4cb4b6
push ebx
call eax
mov ebx, dword [ebx]
cmp ebx, edi
je 0x4cb4ca
mov eax, dword [ebx]
mov ecx, dword [eax]
push edi
push edi
push 0x1017764c
push ebx
call ecx
mov dword [esi + 0x4bc], edi
mov dword [esi + 0x4c0], edi
mov dword [esi + 0x4c4], edi
mov dword [esi + 0x404], edi
mov dword [esi + 0x4cc], edi
mov dword [esi + 0x4d0], 1
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret