Function at 0x473840
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 5
push 0
push 0
dec ecx
jne 0x473849
push ecx
xchg dword [ebp - 4], ecx
push ebx
test dl, dl
je 0x473861
add esp, 0xfffffff0
call fcn.00405b74
mov dword [ebp - 0xc], ecx
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x473b3f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0xc]
mov dword [eax + 4], edx
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00405870
mov eax, dword [ebp - 4]
call fcn.00473b70
mov edx, dword [ebp - 4]
mov byte [edx + 8], al
mov eax, dword [ebp - 4]
call fcn.00473c90
mov edx, dword [ebp - 4]
mov byte [edx + 9], al
lea edx, [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00473d70
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
add eax, 0xc
call fcn.00407398
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.00473e10
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
add eax, 0x10
call fcn.004072fc
lea edx, [ebp - 0x18]
mov eax, dword [ebp - 4]
call fcn.00473e70
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
add eax, 0x14
call fcn.004072fc
lea edx, [ebp - 0x1c]
mov eax, dword [ebp - 4]
call fcn.00473ef0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
add eax, 0x18
call fcn.004072fc
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 4]
call fcn.00473f60
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x24]
mov dword [eax + 0x1c], edx
mov edx, dword [ebp - 0x20]
mov dword [eax + 0x20], edx
mov eax, dword [ebp - 4]
call fcn.00474030
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x28], eax
mov dword [ecx + 0x2c], edx
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 4]
call fcn.004740a0
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 4]
add eax, 0x30
call fcn.004072fc
mov eax, dword [ebp - 4]
call fcn.00474120
mov edx, dword [ebp - 4]
mov dword [edx + 0x34], eax
mov eax, dword [ebp - 4]
call fcn.00474190
mov edx, dword [ebp - 4]
mov byte [edx + 0x38], al
mov eax, dword [ebp - 4]
call fcn.00474200
mov edx, dword [ebp - 4]
mov byte [edx + 0x39], al
mov eax, dword [ebp - 4]
call fcn.00474270
mov edx, dword [ebp - 4]
mov byte [edx + 0x3a], al
mov eax, dword [ebp - 4]
call fcn.004742e0
mov edx, dword [ebp - 4]
mov byte [edx + 0x3b], al
mov eax, dword [ebp - 4]
call fcn.00474360
mov edx, dword [ebp - 4]
mov byte [edx + 0x3c], al
mov eax, dword [ebp - 4]
call fcn.004743e0
mov edx, dword [ebp - 4]
mov byte [edx + 0x3d], al
mov eax, dword [ebp - 4]
call fcn.00474470
mov edx, dword [ebp - 4]
mov byte [edx + 0x3e], al
mov eax, dword [ebp - 4]
call fcn.004744f0
mov edx, dword [ebp - 4]
mov byte [edx + 0x3f], al
mov eax, dword [ebp - 4]
call fcn.00474580
mov edx, dword [ebp - 4]
mov byte [edx + 0x40], al
mov eax, dword [ebp - 4]
call fcn.00474600
mov edx, dword [ebp - 4]
mov byte [edx + 0x41], al
mov eax, dword [ebp - 4]
call fcn.00474680
mov edx, dword [ebp - 4]
mov byte [edx + 0x42], al
mov eax, dword [ebp - 4]
call fcn.004746f0
mov edx, dword [ebp - 4]
mov byte [edx + 0x43], al
mov eax, dword [ebp - 4]
call fcn.00474780
mov edx, dword [ebp - 4]
mov byte [edx + 0x44], al
mov eax, dword [ebp - 4]
call fcn.00474800
mov edx, dword [ebp - 4]
mov byte [edx + 0x45], al
mov eax, dword [ebp - 4]
call fcn.00474880
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x48], eax
mov dword [ecx + 0x4c], edx
mov eax, dword [ebp - 4]
call fcn.004748f0
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x50], eax
mov dword [ecx + 0x54], edx
mov eax, dword [ebp - 4]
call fcn.00474960
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x58], eax
mov dword [ecx + 0x5c], edx
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x60], eax
mov dword [ecx + 0x64], edx
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 8]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x68], eax
mov dword [ecx + 0x6c], edx
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x70], eax
mov dword [ecx + 0x74], edx
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 4]
call fcn.00474d30
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
add eax, 0x78
call fcn.004072fc
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 4]
call fcn.00474db0
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
add eax, 0x7c
call fcn.004072fc
mov eax, dword [ebp - 4]
call fcn.00474e20
mov edx, dword [ebp - 4]
mov byte [edx + 0x80], al
mov eax, dword [ebp - 4]
call fcn.00474ea0
mov edx, dword [ebp - 4]
mov byte [edx + 0x81], al
mov eax, dword [ebp - 4]
call fcn.00474f20
mov edx, dword [ebp - 4]
mov dword [edx + 0x84], eax
mov eax, dword [ebp - 4]
call fcn.00474f80
mov edx, dword [ebp - 4]
mov byte [edx + 0x88], al
mov eax, dword [ebp - 4]
call fcn.00474ff0
mov edx, dword [ebp - 4]
mov byte [edx + 0x89], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x473b46
lea eax, [ebp - 0x30]
mov edx, 3
call fcn.00406fb8
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00406fb8
lea eax, [ebp - 0x10]
call fcn.00406f7c
pop eax
jmp eax