Function at 0x42aae7
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4fbb70
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push esi
mov esi, ecx
push edi
mov dword [esp + 0xc], esi
call fcn.00430500
xor edi, edi
lea ecx, [esi + 8]
mov dword [esp + 0x18], edi
call fcn.0041ec50
lea ecx, [esi + 0x10]
call fcn.0041ec50
lea ecx, [esi + 0x18]
call fcn.0041ec50
lea ecx, [esi + 0x20]
call fcn.0041ec50
lea ecx, [esi + 0x28]
call fcn.0041ec50
lea ecx, [esi + 0x30]
call fcn.0041ec50
lea ecx, [esi + 0x38]
call fcn.0041ec50
lea ecx, [esi + 0x40]
call fcn.0041ec50
lea ecx, [esi + 0x48]
call fcn.0041ec50
lea ecx, [esi + 0x50]
call fcn.0041ec50
lea ecx, [esi + 0x58]
call fcn.0041ec50
lea ecx, [esi + 0x60]
call fcn.0041ec50
lea ecx, [esi + 0x68]
call fcn.0041ec50
lea ecx, [esi + 0x70]
call fcn.0041ec50
lea ecx, [esi + 0x78]
call fcn.0041ec50
lea ecx, [esi + 0x80]
call fcn.0041ec50
lea ecx, [esi + 0x88]
call fcn.0041ec50
lea ecx, [esi + 0x90]
call fcn.0041ec50
lea ecx, [esi + 0x98]
call fcn.0041ec50
lea ecx, [esi + 0xa0]
call fcn.0041ec50
lea ecx, [esi + 0xa8]
call fcn.0041ec50
lea ecx, [esi + 0xb0]
call fcn.0041ec50
lea ecx, [esi + 0xb8]
call fcn.0041ec50
lea ecx, [esi + 0xc0]
call fcn.0041ec50
lea ecx, [esi + 0xc8]
call fcn.0041ec50
lea ecx, [esi + 0xd0]
call fcn.0041ec50
lea ecx, [esi + 0xd8]
call fcn.0041ec50
lea ecx, [esi + 0xe0]
call fcn.0041ec50
lea ecx, [esi + 0xec]
call fcn.004df9fd
lea ecx, [esi + 0x11c]
mov byte [esp + 0x18], 1
call fcn.004df9fd
lea ecx, [esi + 0x14c]
mov byte [esp + 0x18], 2
call fcn.004df9fd
lea ecx, [esi + 0x17c]
mov byte [esp + 0x18], 3
call fcn.004df9fd
mov byte [esp + 0x18], 4
lea ebx, [esi + 0x1ac]
push 0xa
mov ecx, ebx
call fcn.004d76f5
mov dword [ebx], method.CObList.virtual_0
lea ebx, [esi + 0x1c8]
push 0xa
mov ecx, ebx
mov byte [esp + 0x1c], 5
call fcn.004d76f5
mov dword [ebx], method.CObList.virtual_0
lea ebx, [esi + 0x1e4]
push 0xa
mov ecx, ebx
mov byte [esp + 0x1c], 6
call fcn.004d76f5
mov dword [ebx], method.CObList.virtual_0
lea ebx, [esi + 0x200]
push 0xa
mov ecx, ebx
mov byte [esp + 0x1c], 7
call fcn.004d76f5
mov dword [ebx], method.CObList.virtual_0
lea ebx, [esi + 0x21c]
push 0xa
mov ecx, ebx
mov byte [esp + 0x1c], 8
call fcn.004d76f5
mov dword [ebx], method.CObList.virtual_0
lea ebx, [esi + 0x238]
push 0xa
mov ecx, ebx
mov byte [esp + 0x1c], 9
call fcn.004d76f5
mov dword [ebx], method.CObList.virtual_0
lea ebx, [esi + 0x254]
push 0xa
mov ecx, ebx
mov byte [esp + 0x1c], 0xa
call fcn.004d76f5
mov dword [ebx], method.CObList.virtual_0
lea ebx, [esi + 0x270]
push 0xa
mov ecx, ebx
mov byte [esp + 0x1c], 0xb
call fcn.004d76f5
mov dword [ebx], method.CObList.virtual_0
mov ecx, esi
mov byte [esp + 0x18], 0xc
mov dword [esi], 0x507fe0
mov dword [esi + 4], 0xd
mov dword [esi + 0x100], edi
mov dword [esi + 0x130], edi
mov dword [esi + 0x160], edi
mov dword [esi + 0x190], edi
mov dword [esi + 0x290], edi
mov dword [esi + 0x294], edi
mov dword [esi + 0x298], edi
mov dword [esi + 0x28c], edi
mov dword [esi + 0x29c], edi
mov dword [esi + 0xe8], edi
mov dword [esi + 0x2a0], edi
call fcn.0042bd60
mov ecx, dword [esp + 0x10]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret