Function at 0x4ff310
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x6179c7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
push ebx
push esi
mov dword [esp + 0x1c], 0
lea ecx, [esp + 0xc]
mov dword [esp + 0x28], 1
call fcn.0041c6b0
lea eax, [esp + 0x34]
lea ecx, [esp + 8]
push eax
mov byte [esp + 0x2c], 2
call fcn.005eb756
mov bl, 3
push 0x673ea0
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], bl
call fcn.005eba4f
push 0x6723a0
lea ecx, [esp + 0x14]
mov byte [esp + 0x2c], 4
call fcn.005eba4f
lea ecx, [esp + 0x14]
push 0
lea edx, [esp + 0x14]
push ecx
lea eax, [esp + 0x10]
push edx
lea ecx, [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 5
call fcn.0041c6f0
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 6
call fcn.005ebb1a
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 5
call fcn.005eb9e1
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], 4
call fcn.005eb9e1
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], bl
call fcn.005eb9e1
push 0x67f6b0
lea ecx, [esp + 0x14]
call fcn.005eba4f
push 0x673654
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 7
call fcn.005eba4f
lea edx, [esp + 0x10]
push 0
lea eax, [esp + 0x18]
push edx
lea ecx, [esp + 0x10]
push eax
lea edx, [esp + 0x24]
push ecx
push edx
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 8
call fcn.0041c6f0
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 9
call fcn.005ebb1a
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 8
call fcn.005eb9e1
mov byte [esp + 0x28], 7
lea ecx, [esp + 0x14]
call fcn.005eb9e1
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.005eb9e1
push 0x67f6ac
lea ecx, [esp + 0x14]
call fcn.005eba4f
push 0x673778
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 0xa
call fcn.005eba4f
lea eax, [esp + 0x10]
push 0
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x10]
push ecx
lea eax, [esp + 0x24]
push edx
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 0xb
call fcn.0041c6f0
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0xc
call fcn.005ebb1a
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 0xb
call fcn.005eb9e1
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0xa
call fcn.005eb9e1
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.005eb9e1
push str._r_n
lea ecx, [esp + 0x14]
call fcn.005eba4f
push 0x67522c
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 0xd
call fcn.005eba4f
lea ecx, [esp + 0x10]
push 0
lea edx, [esp + 0x18]
push ecx
lea eax, [esp + 0x10]
push edx
lea ecx, [esp + 0x24]
push eax
push ecx
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 0xe
call fcn.0041c6f0
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0xf
call fcn.005ebb1a
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 0xe
call fcn.005eb9e1
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0xd
call fcn.005eb9e1
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.005eb9e1
push 0x67f6a0
lea ecx, [esp + 0x14]
call fcn.005eba4f
mov byte [esp + 0x28], 0x10
push 0x676320
lea ecx, [esp + 0x18]
call fcn.005eba4f
lea edx, [esp + 0x10]
push 0
lea eax, [esp + 0x18]
push edx
lea ecx, [esp + 0x10]
push eax
lea edx, [esp + 0x24]
push ecx
push edx
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 0x11
call fcn.0041c6f0
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0x12
call fcn.005ebb1a
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 0x11
call fcn.005eb9e1
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0x10
call fcn.005eb9e1
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.005eb9e1
push 0x67f69c
lea ecx, [esp + 0x14]
call fcn.005eba4f
push 0x67f698
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 0x13
call fcn.005eba4f
lea eax, [esp + 0x10]
push 0
lea ecx, [esp + 0x18]
push eax
lea edx, [esp + 0x10]
push ecx
lea eax, [esp + 0x24]
push edx
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x3c], 0x14
call fcn.0041c6f0
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0x15
call fcn.005ebb1a
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 0x14
call fcn.005eb9e1
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0x13
call fcn.005eb9e1
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.005eb9e1
push 0x67f694
lea ecx, [esp + 0x14]
call fcn.005eba4f
push 0x67f690
lea ecx, [esp + 0x18]
mov byte [esp + 0x2c], 0x16
call fcn.005eba4f
lea ecx, [esp + 0x10]
push 0
lea edx, [esp + 0x18]
push ecx
lea eax, [esp + 0x10]
push edx
mov byte [esp + 0x34], 0x17
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x20]
call fcn.0041c6f0
push eax
lea ecx, [esp + 0xc]
mov byte [esp + 0x2c], 0x18
call fcn.005ebb1a
lea ecx, [esp + 0x18]
mov byte [esp + 0x28], 0x17
call fcn.005eb9e1
lea ecx, [esp + 0x14]
mov byte [esp + 0x28], 0x16
call fcn.005eb9e1
lea ecx, [esp + 0x10]
mov byte [esp + 0x28], bl
call fcn.005eb9e1
mov esi, dword [esp + 0x30]
lea edx, [esp + 8]
push edx
mov ecx, esi
call fcn.005eb756
mov dword [esp + 0x1c], 1
lea ecx, [esp + 8]
mov byte [esp + 0x28], 2
call fcn.005eb9e1
lea ecx, [esp + 0xc]
mov byte [esp + 0x28], 1
call fcn.0041c6e0
lea ecx, [esp + 0x34]
mov byte [esp + 0x28], 0
call fcn.005eb9e1
mov ecx, dword [esp + 0x20]
mov eax, esi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x24
ret