Function at 0x4e45cc
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get ntdll base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff8
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 8], ebx
test dl, dl
je 0x4e45e6
add esp, 0xfffffff0
call fcn.00403dc0
mov byte [ebp - 1], dl
mov esi, eax
xor eax, eax
push ebp
push 0x4e53a1
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
mov eax, esi
call fcn.00421c6c
lea eax, [esi + 0x60]
mov edx, 0x4e53d0
call fcn.004048fc
test byte [esi + 0x1c], 0x10
je 0x4e464e
xor ecx, ecx
mov dl, 1
mov eax, dword [0x47275c]
call fcn.00473164
mov ebx, eax
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x4e53e4
mov edx, 0x4e53f8
mov eax, ebx
call fcn.004731f8
mov edx, dword [ebp - 8]
lea eax, [esi + 0x68]
call fcn.004048fc
mov eax, ebx
call fcn.00403a5c
mov byte [esi + 0x6c], 1
mov byte [esi + 0x6f], 1
mov dword [esi + 0x70], 0x79e
mov dword [esi + 0x74], 0x10000
mov dl, 1
mov eax, dword [0x4e0e84]
call fcn.00403a2c
mov ebx, eax
mov dword [esi + 0x58], ebx
lea eax, [ebx + 4]
mov edx, 0x4e5420
call fcn.004048fc
lea eax, [ebx + 8]
mov edx, 0x4e5438
call fcn.004048fc
lea eax, [ebx + 0x10]
mov edx, 0x4e5468
call fcn.004048fc
lea eax, [ebx + 0x14]
mov edx, 0x4e547c
call fcn.004048fc
lea eax, [ebx + 0x18]
mov edx, 0x4e5498
call fcn.004048fc
lea eax, [ebx + 0x1c]
mov edx, 0x4e54ac
call fcn.004048fc
lea eax, [ebx + 0x20]
mov edx, 0x4e54f8
call fcn.004048fc
lea eax, [ebx + 0x24]
mov edx, 0x4e550c
call fcn.004048fc
lea eax, [ebx + 0x28]
mov edx, 0x4e5520
call fcn.004048fc
lea eax, [ebx + 0x2c]
mov edx, 0x4e5530
call fcn.004048fc
lea eax, [ebx + 0x30]
mov edx, 0x4e5544
call fcn.004048fc
lea eax, [ebx + 0x34]
mov edx, 0x4e555c
call fcn.004048fc
lea eax, [ebx + 0x40]
mov edx, 0x4e5574
call fcn.004048fc
lea eax, [ebx + 0x44]
mov edx, 0x4e5584
call fcn.004048fc
lea eax, [ebx + 0x48]
mov edx, 0x4e5574
call fcn.004048fc
lea eax, [ebx + 0x38]
mov edx, 0x4e5594
call fcn.004048fc
lea eax, [ebx + 0x3c]
mov edx, 0x4e55bc
call fcn.004048fc
lea eax, [ebx + 0x4c]
mov edx, 0x4e55e4
call fcn.004048fc
lea eax, [ebx + 0x50]
mov edx, 0x4e560c
call fcn.004048fc
lea eax, [ebx + 0x54]
mov edx, 0x4e5634
call fcn.004048fc
lea eax, [ebx + 0x58]
mov edx, 0x4e5664
call fcn.004048fc
lea eax, [ebx + 0x5c]
mov edx, 0x4e5678
call fcn.004048fc
lea eax, [ebx + 0x60]
mov edx, 0x4e568c
call fcn.004048fc
lea eax, [ebx + 0x64]
mov edx, 0x4e56a4
call fcn.004048fc
lea eax, [ebx + 0x68]
mov edx, 0x4e56c8
call fcn.004048fc
lea eax, [ebx + 0x6c]
mov edx, 0x4e56dc
call fcn.004048fc
lea eax, [ebx + 0x70]
mov edx, 0x4e5714
call fcn.004048fc
lea eax, [ebx + 0x74]
mov edx, 0x4e572c
call fcn.004048fc
lea eax, [ebx + 0x78]
mov edx, 0x4e5750
call fcn.004048fc
lea eax, [ebx + 0x7c]
mov edx, 0x4e5770
call fcn.004048fc
lea eax, [ebx + 0x80]
mov edx, 0x4e5788
call fcn.004048fc
lea eax, [ebx + 0x84]
mov edx, 0x4e57ac
call fcn.004048fc
lea eax, [ebx + 0x88]
mov edx, 0x4e57cc
call fcn.004048fc
lea eax, [ebx + 0x8c]
mov edx, 0x4e580c
call fcn.004048fc
lea eax, [ebx + 0x90]
mov edx, 0x4e56c8
call fcn.004048fc
lea eax, [ebx + 0x94]
mov edx, 0x4e581c
call fcn.004048fc
lea eax, [ebx + 0x98]
call fcn.004048a8
lea eax, [ebx + 0x9c]
mov edx, 0x4e582c
call fcn.004048fc
lea eax, [ebx + 0xa0]
mov edx, 0x4e583c
call fcn.004048fc
lea eax, [ebx + 0xa4]
mov edx, 0x4e5868
call fcn.004048fc
lea eax, [ebx + 0xc]
mov edx, 0x4e58a4
call fcn.004048fc
mov dl, 1
mov eax, dword [0x4e2ad8]
call fcn.00403a2c
mov ebx, eax
mov dword [esi + 0x5c], ebx
lea eax, [ebx + 4]
mov edx, 0x4e58b0
call fcn.004048fc
lea eax, [ebx + 8]
mov edx, 0x4e58e4
call fcn.004048fc
lea eax, [ebx + 0xc]
mov edx, 0x4e5920
call fcn.004048fc
lea eax, [ebx + 0x10]
mov edx, 0x4e5948
call fcn.004048fc
lea eax, [ebx + 0x14]
mov edx, 0x4e5968
call fcn.004048fc
lea eax, [ebx + 0x18]
mov edx, 0x4e5988
call fcn.004048fc
lea eax, [ebx + 0x1c]
mov edx, 0x4e59b4
call fcn.004048fc
lea eax, [ebx + 0x20]
mov edx, 0x4e59dc
call fcn.004048fc
lea eax, [ebx + 0x24]
mov edx, 0x4e5a1c
call fcn.004048fc
lea eax, [ebx + 0x28]
mov edx, 0x4e5a60
call fcn.004048fc
lea eax, [ebx + 0x2c]
mov edx, 0x4e5a88
call fcn.004048fc
lea eax, [ebx + 0x30]
mov edx, 0x4e5ab8
call fcn.004048fc
lea eax, [ebx + 0x34]
mov edx, 0x4e5ae4
call fcn.004048fc
lea eax, [ebx + 0x38]
mov edx, 0x4e5b18
call fcn.004048fc
lea eax, [ebx + 0x3c]
mov edx, 0x4e5b4c
call fcn.004048fc
lea eax, [ebx + 0x40]
mov edx, 0x4e5b9c
call fcn.004048fc
lea eax, [ebx + 0x44]
mov edx, 0x4e5bd4
call fcn.004048fc
lea eax, [ebx + 0x48]
mov edx, 0x4e5c0c
call fcn.004048fc
lea eax, [ebx + 0x4c]
mov edx, 0x4e5c44
call fcn.004048fc
lea eax, [ebx + 0x50]
mov edx, 0x4e5c80
call fcn.004048fc
lea eax, [ebx + 0x54]
mov edx, 0x4e5cbc
call fcn.004048fc
lea eax, [ebx + 0x58]
mov edx, 0x4e5cf8
call fcn.004048fc
lea eax, [ebx + 0x5c]
mov edx, 0x4e5d34
call fcn.004048fc
lea eax, [ebx + 0x60]
mov edx, 0x4e5d6c
call fcn.004048fc
lea eax, [ebx + 0x64]
mov edx, 0x4e5da0
call fcn.004048fc
lea eax, [ebx + 0x68]
mov edx, 0x4e5db0
call fcn.004048fc
lea eax, [ebx + 0x6c]
mov edx, 0x4e5dd0
call fcn.004048fc
lea eax, [ebx + 0x70]
mov edx, 0x4e5df0
call fcn.004048fc
lea eax, [ebx + 0x74]
mov edx, 0x4e5e10
call fcn.004048fc
lea eax, [ebx + 0x78]
mov edx, 0x4e5e44
call fcn.004048fc
lea eax, [ebx + 0x7c]
mov edx, 0x4e5e68
call fcn.004048fc
lea eax, [ebx + 0x80]
mov edx, 0x4e5e80
call fcn.004048fc
lea eax, [ebx + 0x84]
mov edx, 0x4e5ea4
call fcn.004048fc
lea eax, [ebx + 0x88]
mov edx, 0x4e5ecc
call fcn.004048fc
lea eax, [ebx + 0x8c]
mov edx, 0x4e5ef4
call fcn.004048fc
lea eax, [ebx + 0x90]
mov edx, 0x4e5f0c
call fcn.004048fc
lea eax, [ebx + 0x94]
mov edx, 0x4e5f38
call fcn.004048fc
lea eax, [ebx + 0x98]
mov edx, 0x4e5f6c
call fcn.004048fc
mov dl, 1
mov eax, dword [0x4e173c]
call fcn.00403a2c
mov edi, eax
mov dword [ebx + 0x9c], edi
lea eax, [edi + 4]
mov edx, 0x4e5f80
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 8
mov edx, 0x4e5f90
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0xc
mov edx, 0x4e5fa0
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x10
mov edx, 0x4e5fb4
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x14
mov edx, 0x4e5fcc
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x18
mov edx, 0x4e5fdc
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x1c
mov edx, 0x4e5ff0
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x20
mov edx, 0x4e6000
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x24
mov edx, 0x4e6010
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x28
mov edx, 0x4e6020
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x2c
mov edx, 0x4e6030
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x30
mov edx, 0x4e6040
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x34
mov edx, 0x4e6050
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x38
mov edx, 0x4e6060
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x3c
mov edx, 0x4e6074
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x40
mov edx, 0x4e6084
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x44
mov edx, 0x4e6098
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x48
mov edx, 0x4e60ac
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x4c
mov edx, 0x4e60c0
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x50
mov edx, 0x4e60d8
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x54
mov edx, 0x4e60e8
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x5c
mov edx, 0x4e60f8
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x60
mov edx, 0x4e6108
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x64
mov edx, 0x4e611c
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x68
mov edx, 0x4e6130
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x6c
mov edx, 0x4e6144
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x70
mov edx, 0x4e6158
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x78
mov edx, 0x4e6168
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x7c
mov edx, 0x4e6178
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x80
mov edx, 0x4e6190
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x84
mov edx, 0x4e61a4
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x74
mov edx, 0x4e61b4
call fcn.004048fc
mov eax, dword [ebx + 0x9c]
add eax, 0x88
mov edx, 0x4e61c4
call fcn.004048fc
mov dl, 1
mov eax, dword [0x4e1e4c]
call fcn.00403a2c
mov edi, eax
mov dword [ebx + 0xa0], edi
lea eax, [edi + 4]
mov edx, 0x4e6000
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 8
mov edx, 0x4e60f8
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0xc
mov edx, 0x4e6020
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x10
mov edx, 0x4e6030
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x14
mov edx, 0x4e6040
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x18
mov edx, 0x4e6168
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x1c
mov edx, 0x4e6178
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x20
mov edx, 0x4e61d4
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x24
mov edx, 0x4e61e4
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x28
mov edx, 0x4e61f4
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x2c
mov edx, 0x4e6208
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x30
mov edx, 0x4e61a4
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x34
mov edx, 0x4e621c
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x38
mov edx, 0x4e622c
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x3c
mov edx, 0x4e6240
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x44
mov edx, 0x4e625c
call fcn.004048fc
mov eax, dword [ebx + 0xa0]
add eax, 0x40
mov edx, 0x4e60c0
call fcn.004048fc
lea eax, [ebx + 0xac]
mov edx, 0x4e6278
call fcn.004048fc
lea eax, [ebx + 0xb0]
mov edx, 0x4e6284
call fcn.004048fc
mov dl, 1
mov eax, dword [0x4e2240]
call fcn.00403a2c
mov edi, eax
mov dword [ebx + 0xa4], edi
lea eax, [edi + 4]
mov edx, 0x4e6290
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 8
mov edx, 0x4e62a4
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0xc
mov edx, 0x4e62b8
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x10
mov edx, 0x4e62c8
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x14
mov edx, 0x4e62d8
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x18
mov edx, 0x4e62ec
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x28
mov edx, 0x4e6300
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x2c
mov edx, 0x4e6310
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x30
mov edx, 0x4e6320
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x34
mov edx, 0x4e6330
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x38
mov edx, 0x4e6348
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x1c
mov edx, 0x4e6354
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x20
mov edx, 0x4e6370
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x24
mov edx, 0x4e638c
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x3c
mov edx, 0x4e63b8
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x40
mov edx, 0x4e63e0
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x44
mov edx, 0x4e63f0
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x48
mov edx, 0x4e6400
call fcn.004048fc
mov eax, dword [ebx + 0xa4]
add eax, 0x4c
mov edx, 0x4e6410
call fcn.004048fc
mov dl, 1
mov eax, dword [0x4e280c]
call fcn.00403a2c
mov edi, eax
mov dword [ebx + 0xa8], edi
lea eax, [edi + 4]
mov edx, 0x4e6420
call fcn.004048fc
mov eax, dword [ebx + 0xa8]
add eax, 8
mov edx, 0x4e642c
call fcn.004048fc
mov eax, dword [ebx + 0xa8]
add eax, 0xc
mov edx, 0x4e6448
call fcn.004048fc
mov eax, dword [ebx + 0xa8]
add eax, 0x10
mov edx, 0x4e6454
call fcn.004048fc
mov eax, dword [ebx + 0xa8]
add eax, 0x14
mov edx, 0x4e6464
call fcn.004048fc
mov eax, dword [ebx + 0xa8]
add eax, 0x18
mov edx, 0x4e6478
call fcn.004048fc
mov eax, dword [ebx + 0xa8]
add eax, 0x1c
mov edx, 0x4e6498
call fcn.004048fc
mov eax, dword [ebx + 0xa8]
add eax, 0x20
mov edx, 0x4e64c4
call fcn.004048fc
mov eax, dword [ebx + 0xa8]
add eax, 0x24
mov edx, 0x4e64e4
call fcn.004048fc
mov eax, dword [ebx + 0xa8]
add eax, 0x28
mov edx, 0x4e650c
call fcn.004048fc
mov dl, 1
mov eax, dword [0x4e3fac]
call fcn.004e6a7c
mov dword [esi + 0x34], eax
mov dl, 1
mov eax, dword [0x4e3ef0]
call fcn.00403a2c
mov ebx, eax
mov dword [esi + 0x30], ebx
mov byte [ebx + 4], 1
mov dl, 1
mov eax, dword [0x4e35b8]
call fcn.00403a2c
mov ebx, eax
mov dword [esi + 0x40], ebx
lea eax, [ebx + 4]
mov edx, 0x4e6528
call fcn.004048fc
lea eax, [ebx + 8]
mov edx, 0x4e653c
call fcn.004048fc
mov dl, 1
mov eax, dword [0x4e33b8]
call fcn.00403a2c
mov ebx, eax
mov dword [esi + 0x38], ebx
lea eax, [ebx + 4]
mov edx, 0x4e6558
call fcn.004048fc
lea eax, [ebx + 8]
mov edx, 0x4e6574
call fcn.004048fc
lea eax, [ebx + 0xc]
mov edx, 0x4e658c
call fcn.004048fc
lea eax, [ebx + 0x10]
mov edx, 0x4e65a0
call fcn.004048fc
lea eax, [ebx + 0x14]
mov edx, 0x4e65b0
call fcn.004048fc
lea eax, [ebx + 0x18]
mov edx, 0x4e65bc
call fcn.004048fc
lea eax, [ebx + 0x1c]
mov edx, 0x4e65ec
call fcn.004048fc
mov dl, 1
mov eax, dword [0x4e36c0]
call fcn.00403a2c
mov ebx, eax
mov dword [esi + 0x3c], ebx
lea eax, [ebx + 4]
mov edx, 0x4e568c
call fcn.004048fc
lea eax, [ebx + 8]
mov edx, 0x4e661c
call fcn.004048fc
lea eax, [ebx + 0xc]
mov edx, 0x4e6634
call fcn.004048fc
lea eax, [ebx + 0x10]
mov edx, 0x4e5714
call fcn.004048fc
lea eax, [ebx + 0x14]
mov edx, 0x4e572c
call fcn.004048fc
lea eax, [ebx + 0x18]
mov edx, 0x4e664c
call fcn.004048fc
lea eax, [ebx + 0x1c]
mov edx, 0x4e582c
call fcn.004048fc
lea eax, [ebx + 0x20]
mov edx, 0x4e666c
call fcn.004048fc
lea eax, [ebx + 0x24]
mov edx, 0x4e667c
call fcn.004048fc
lea eax, [ebx + 0x28]
mov edx, 0x4e668c
call fcn.004048fc
lea eax, [ebx + 0x2c]
mov edx, 0x4e669c
call fcn.004048fc
lea eax, [ebx + 0x30]
mov edx, 0x4e56a4
call fcn.004048fc
lea eax, [ebx + 0x34]
mov edx, 0x4e5788
call fcn.004048fc
lea eax, [ebx + 0x38]
mov edx, 0x4e66ac
call fcn.004048fc
lea eax, [ebx + 0x3c]
mov edx, 0x4e66e4
call fcn.004048fc
lea eax, [ebx + 0x40]
mov edx, 0x4e6724
call fcn.004048fc
lea eax, [ebx + 0x44]
mov edx, 0x4e675c
call fcn.004048fc
lea eax, [ebx + 0x48]
mov edx, 0x4e6778
call fcn.004048fc
lea eax, [ebx + 0x4c]
mov edx, 0x4e67a4
call fcn.004048fc
mov dl, 1
mov eax, dword [0x4e0b80]
call fcn.00403a2c
mov ebx, eax
mov dword [esi + 0x54], ebx
lea eax, [ebx + 4]
mov edx, 0x4e67cc
call fcn.004048fc
lea eax, [ebx + 8]
mov edx, 0x4e67f4
call fcn.004048fc
lea eax, [ebx + 0xc]
mov edx, 0x4e681c
call fcn.004048fc
lea eax, [ebx + 0x10]
mov edx, 0x4e6838
call fcn.004048fc
lea eax, [ebx + 0x14]
mov edx, 0x4e6858
call fcn.004048fc
lea eax, [ebx + 0x18]
mov edx, 0x4e689c
call fcn.004048fc
lea eax, [ebx + 0x1c]
mov edx, 0x4e68e0
call fcn.004048fc
lea eax, [ebx + 0x20]
mov edx, 0x4e68fc
call fcn.004048fc
lea eax, [ebx + 0x24]
mov edx, 0x4e6924
call fcn.004048fc
lea eax, [ebx + 0x28]
mov edx, 0x4e695c
call fcn.004048fc
lea eax, [ebx + 0x2c]
mov edx, 0x4e689c
call fcn.004048fc
mov byte [esi + 0x44], 1
lea eax, [esi + 0x48]
mov edx, 0x4e6990
call fcn.004048fc
lea eax, [esi + 0x4c]
mov edx, 0x4e668c
call fcn.004048fc
lea eax, [esi + 0x64]
call fcn.004048a8
mov byte [esi + 0x6d], 0
mov byte [esi + 0x6e], 1
mov al, byte [0x4e6994]
mov byte [esi + 0x45], al
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4e53a8
lea eax, [ebp - 8]
call fcn.004048a8
ret