Function at 0x404dd0
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x513300
mov eax, dword fs:[0]
push eax
sub esp, 8
push esi
push edi
mov eax, dword [0x53f040]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
mov dword [edi], vtable.xs__schema.0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [ebp - 4], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0x30], 0
mov dword [edi + 0x34], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0
mov dword [edi + 0x40], 0
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x50], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x60], 0
mov dword [edi + 0x64], 0
mov dword [edi + 0x68], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x70], 0
mov dword [edi + 0x74], 0
mov dword [edi + 0x78], 0
mov dword [edi + 0x7c], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0x84], 0
mov dword [edi + 0x88], 0
mov dword [edi + 0x8c], 0
mov dword [edi + 0x90], 0
lea esi, [edi + 0xa8]
mov byte [ebp - 4], 9
push 0x18
mov dword [ebp - 0x14], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004f1990
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
lea esi, [edi + 0xb0]
mov byte [ebp - 4], 0xa
push 0x14
mov dword [ebp - 0x14], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004f1990
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
lea esi, [edi + 0xb8]
mov byte [ebp - 4], 0xb
push 0x14
mov dword [ebp - 0x14], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004f1990
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
lea esi, [edi + 0xc0]
mov byte [ebp - 4], 0xc
push 0x14
mov dword [ebp - 0x14], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004f1990
push 0x5172ac
push 0x1dfe0
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
call fcn.004f19c0
mov esi, eax
add esp, 0x18
test esi, esi
je 0x404fde
push 0
xor edx, edx
mov ecx, esi
call fcn.0042c6b0
push edx
mov ecx, esi
call fcn.0042c6b0
add esp, 8
jmp 0x404fe0
xor esi, esi
mov ecx, esi
call fcn.004297a0
mov edx, dword [ebp + 8]
mov ecx, esi
call fcn.0042c4f0
test eax, eax
jne 0x405017
mov ecx, esi
call fcn.004297a0
test esi, esi
je 0x405015
mov ecx, esi
call fcn.004297a0
push 0x1dfe0
push esi
call fcn.004f1a15
add esp, 8
xor esi, esi
mov dword [edi + 0x94], esi
mov ecx, edi
mov dword [esi + 0x6100], 0xffffffff
mov eax, dword [edi + 0x94]
mov dword [eax + 0x6118], 0
mov eax, dword [edi + 0x94]
mov dword [eax + 0x6114], 1
push dword [edi + 0x94]
call fcn.004aee20
mov eax, dword [edi + 0x94]
mov dword [eax + 0x6084], 0x451f10
mov eax, dword [edi + 0x94]
mov dword [eax + 0x78], 0
mov eax, edi
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0x98], 0
mov byte [edi + 0x9c], 0
mov dword [edi + 0xa0], 0
mov dword [edi + 0xa4], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4