Function at 0x4185b0
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x41f3e8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
push edi
mov ebx, ecx
xor edi, edi
push 0x18
mov dword [esp + 0x20], edi
call fcn.00419780
mov ebp, dword [esp + 0x30]
mov esi, eax
add esp, 4
mov dword [esp + 0x10], esi
mov dword [esi + 4], ebp
mov dword [esi + 0x14], edi
mov eax, dword [0x427aac]
mov edi, dword [esp + 0x30]
mov dword [esi], eax
mov ecx, dword [0x427aac]
lea edx, [esi + 0xc]
push edi
push edx
mov dword [esi + 8], ecx
call fcn.00419130
mov ecx, dword [ebx + 0xc]
mov eax, dword [ebx + 4]
add esp, 8
inc ecx
cmp ebp, eax
mov dword [ebx + 0xc], ecx
je 0x418868
mov eax, dword [esp + 0x28]
mov ecx, dword [0x427aac]
cmp eax, ecx
jne 0x418868
mov esi, dword [ebp + 0xc]
mov eax, dword [edi]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x41865a
test cl, cl
je 0x418656
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x41865a
add eax, 2
add esi, 2
test cl, cl
jne 0x418636
xor eax, eax
jmp 0x41865f
sbb eax, eax
sbb eax, 0xffffffff
xor ecx, ecx
test eax, eax
setl cl
test cl, cl
jne 0x418864
mov edx, dword [esp + 0x10]
mov dword [ebp + 8], edx
mov eax, dword [ebx + 4]
cmp ebp, dword [eax + 8]
jne 0x418682
mov ecx, edx
mov dword [eax + 8], ecx
mov esi, dword [esp + 0x10]
mov ecx, dword [ebx + 4]
mov eax, esi
mov edi, 1
cmp esi, dword [ecx + 4]
je 0x418840
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 0x14]
test edx, edx
jne 0x418840
mov esi, dword [ecx + 4]
mov edx, dword [esi]
cmp ecx, edx
jne 0x41877a
mov edx, dword [esi + 8]
xor esi, esi
cmp dword [edx + 0x14], esi
jne 0x4186d8
mov dword [ecx + 0x14], edi
mov dword [edx + 0x14], edi
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov dword [ecx + 0x14], esi
mov edx, dword [eax + 4]
mov eax, dword [edx + 4]
jmp 0x418830
cmp eax, dword [ecx + 8]
jne 0x41871a
mov eax, ecx
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov dword [eax + 8], edx
mov edx, dword [ecx]
cmp edx, dword [0x427aac]
je 0x4186f4
mov dword [edx + 4], eax
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [ebx + 4]
cmp eax, dword [edx + 4]
jne 0x418707
mov dword [edx + 4], ecx
jmp 0x418715
mov edx, dword [eax + 4]
cmp eax, dword [edx]
jne 0x418712
mov dword [edx], ecx
jmp 0x418715
mov dword [edx + 8], ecx
mov dword [ecx], eax
mov dword [eax + 4], ecx
mov ecx, dword [eax + 4]
mov dword [ecx + 0x14], edi
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov dword [ecx + 0x14], esi
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx]
mov esi, dword [edx + 8]
mov dword [ecx], esi
mov esi, dword [edx + 8]
cmp esi, dword [0x427aac]
je 0x418744
mov dword [esi + 4], ecx
mov esi, dword [ecx + 4]
mov dword [edx + 4], esi
mov esi, dword [ebx + 4]
cmp ecx, dword [esi + 4]
jne 0x41875d
mov dword [esi + 4], edx
mov dword [edx + 8], ecx
jmp 0x41882d
mov esi, dword [ecx + 4]
cmp ecx, dword [esi + 8]
jne 0x418770
mov dword [esi + 8], edx
mov dword [edx + 8], ecx
jmp 0x41882d
mov dword [esi], edx
mov dword [edx + 8], ecx
jmp 0x41882d
mov ebp, dword [edx + 0x14]
xor esi, esi
cmp ebp, esi
jne 0x41879d
mov dword [ecx + 0x14], edi
mov dword [edx + 0x14], edi
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 4]
mov dword [edx + 0x14], esi
mov eax, dword [eax + 4]
mov eax, dword [eax + 4]
jmp 0x418830
cmp eax, dword [ecx]
jne 0x4187e0
mov eax, ecx
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
mov dword [eax], edx
mov edx, dword [ecx + 8]
cmp edx, dword [0x427aac]
je 0x4187b8
mov dword [edx + 4], eax
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [ebx + 4]
cmp eax, dword [edx + 4]
jne 0x4187cb
mov dword [edx + 4], ecx
jmp 0x4187da
mov edx, dword [eax + 4]
cmp eax, dword [edx + 8]
jne 0x4187d8
mov dword [edx + 8], ecx
jmp 0x4187da
mov dword [edx], ecx
mov dword [ecx + 8], eax
mov dword [eax + 4], ecx
mov ecx, dword [eax + 4]
mov dword [ecx + 0x14], edi
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov dword [ecx + 0x14], esi
mov edx, dword [eax + 4]
mov ecx, dword [edx + 4]
mov edx, dword [ecx + 8]
mov esi, dword [edx]
mov dword [ecx + 8], esi
mov esi, dword [edx]
cmp esi, dword [0x427aac]
je 0x41880a
mov dword [esi + 4], ecx
mov esi, dword [ecx + 4]
mov dword [edx + 4], esi
mov esi, dword [ebx + 4]
cmp ecx, dword [esi + 4]
jne 0x41881d
mov dword [esi + 4], edx
jmp 0x41882b
mov esi, dword [ecx + 4]
cmp ecx, dword [esi]
jne 0x418828
mov dword [esi], edx
jmp 0x41882b
mov dword [esi + 8], edx
mov dword [edx], ecx
mov dword [ecx + 4], edx
mov ecx, dword [ebx + 4]
mov esi, dword [esp + 0x10]
cmp eax, dword [ecx + 4]
jne 0x418699
mov edx, dword [ebx + 4]
mov ecx, dword [esp + 0x14]
mov eax, dword [edx + 4]
mov dword [eax + 0x14], edi
mov eax, dword [esp + 0x24]
pop edi
mov dword [eax], esi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x10
ret 0x10
mov esi, dword [esp + 0x10]
mov dword [ebp], esi
mov eax, dword [ebx + 4]
cmp ebp, eax
jne 0x418880
mov dword [eax + 4], esi
mov edx, dword [ebx + 4]
mov dword [edx + 8], esi
jmp 0x418686
cmp ebp, dword [eax]
jne 0x418686
mov dword [eax], esi
jmp 0x418686