Function at 0x4ee800
Capabilities:
Access peb ldr_data
Get process heap force flags
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b04b6
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x5bd344]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x14], edi
mov al, byte [ebp + 8]
push 1
push ecx
push 0x44c104
push 7
lea ecx, [edi + 8]
mov dword [edi], 0x44c210
mov byte [edi + 4], al
call fcn.004ed660
push 0
push ecx
push 0x44c108
push 0
lea ecx, [edi + 0x14]
mov dword [ebp - 4], 0
call fcn.004ed660
push 0
push ecx
push 0x44c10c
push 0
lea ecx, [edi + 0x20]
mov byte [ebp - 4], 1
call fcn.004ed660
push 0
push ecx
push 0x44c114
push 0
lea ecx, [edi + 0x2c]
mov byte [ebp - 4], 2
call fcn.004ed660
push 0
push ecx
push 0x44c11c
push 0
lea ecx, [edi + 0x38]
mov byte [ebp - 4], 3
call fcn.004ed660
push 0
push ecx
push 0x41695d
push 0
lea ecx, [edi + 0x44]
mov byte [ebp - 4], 4
call fcn.004ed660
mov dword [edi + 0x50], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x60], 0
mov dword [edi + 0x64], 0
mov dword [edi + 0x68], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x70], 0
mov byte [edi + 0x74], 0
mov dword [edi + 0x78], 0xffffffff
mov dword [edi + 0x478], 0
mov dword [edi + 0x47c], 0
mov dword [edi + 0x480], 0
mov byte [edi + 0x484], 0
mov dword [edi + 0x488], 0xffffffff
mov dword [edi + 0x888], 0
mov dword [edi + 0x88c], 0
mov dword [edi + 0x890], 0
mov byte [edi + 0x894], 0
mov dword [edi + 0x898], 0xffffffff
mov dword [edi + 0xc98], 0
mov dword [edi + 0xc9c], 0
mov dword [edi + 0xca0], 0
mov byte [edi + 0xca4], 0
mov dword [edi + 0xca8], 0xffffffff
mov dword [edi + 0x10a8], 0
mov dword [edi + 0x10ac], 0
mov dword [edi + 0x10b0], 0
mov byte [edi + 0x10b4], 0
mov dword [edi + 0x10b8], 0xffffffff
mov dword [edi + 0x14b8], 0
mov dword [edi + 0x14bc], 0
mov dword [edi + 0x14c0], 0
mov byte [edi + 0x14c4], 0
mov dword [edi + 0x14c8], 0xffffffff
mov byte [ebp - 4], 0xd
lea esi, [edi + 0x18c8]
mov dword [ebp + 8], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004f6a70
mov dword [esi], eax
add edi, 0x18d0
lea ecx, [edi + 0x10]
mov dword [ebp + 8], edi
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov dword [edi + 0x38], 0
mov dword [edi + 0x3c], 0xf
mov byte [edi + 0x28], 0
mov byte [ebp - 4], 0x10
push 0
push 0x41695d
mov dword [edi], 0x1010100
mov dword [edi + 4], 0
mov dword [edi + 8], 0x10000
mov word [edi + 0xc], 0x101
call fcn.004ad0f0
push 0
push 0x41695d
lea ecx, [edi + 0x28]
call fcn.004ad0f0
mov dword [edi + 0x40], 0
mov byte [edi + 0x44], 0
mov byte [ebp - 4], 0x11
mov edi, dword [ebp - 0x14]
lea ecx, [edi + 0x1918]
call fcn.004ee2e0
push 0
push ecx
lea esi, [edi + 0x1954]
mov byte [ebp - 4], 0x12
lea eax, [esi + 4]
mov dword [ebp - 0x18], esi
push 0x41695d
push 0
mov ecx, eax
mov dword [ebp + 8], eax
call fcn.004ed660
push 0
push ecx
lea eax, [esi + 0x10]
mov byte [ebp - 4], 0x13
push 0x41695d
push 0
mov ecx, eax
mov dword [ebp - 0x10], eax
call fcn.004ed660
push 0
push ecx
push 0x41695d
push 0
lea ecx, [esi + 0x1c]
mov byte [ebp - 4], 0x14
call fcn.004ed660
mov byte [ebp - 4], 0x15
push 0x80
mov dword [esi], 0
mov dword [esi + 0x28], 0
call fcn.0057eb8c
mov esi, eax
xorps xmm0, xmm0
add esp, 4
mov ecx, 0x44b7f4
mov al, 0x41
movups xmmword [esi], xmm0
movups xmmword [esi + 0x10], xmm0
movups xmmword [esi + 0x20], xmm0
movups xmmword [esi + 0x30], xmm0
movups xmmword [esi + 0x40], xmm0
movups xmmword [esi + 0x50], xmm0
movups xmmword [esi + 0x60], xmm0
movups xmmword [esi + 0x70], xmm0
movzx eax, al
lea ecx, [ecx + 1]
mov byte [esi + eax], 1
mov al, byte [ecx]
test al, al
jne 0x4eeb34
mov ecx, 0x44b7dc
mov al, 0x30
nop dword [eax + eax]
movzx eax, al
lea ecx, [ecx + 1]
mov byte [esi + eax], 1
mov al, byte [ecx]
test al, al
jne 0x4eeb50
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x24]
cmp eax, ecx
je 0x4eeb87
push dword [eax + 8]
call fcn.0057e94e
mov eax, dword [ebp + 8]
add esp, 4
mov dword [eax + 8], esi
xor esi, esi
mov dword [eax], 0x80
mov byte [eax + 4], 0
push esi
call fcn.0057e94e
push 0x80
call fcn.0057eb8c
mov esi, eax
xorps xmm0, xmm0
add esp, 8
mov ecx, 0x44b804
mov al, 0x30
movups xmmword [esi], xmm0
movups xmmword [esi + 0x10], xmm0
movups xmmword [esi + 0x20], xmm0
movups xmmword [esi + 0x30], xmm0
movups xmmword [esi + 0x40], xmm0
movups xmmword [esi + 0x50], xmm0
movups xmmword [esi + 0x60], xmm0
movups xmmword [esi + 0x70], xmm0
movzx eax, al
lea ecx, [ecx + 1]
mov byte [esi + eax], 1
mov al, byte [ecx]
test al, al
jne 0x4eebc5
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x24]
cmp eax, ecx
je 0x4eebfc
push dword [eax + 8]
call fcn.0057e94e
mov eax, dword [ebp - 0x10]
add esp, 4
mov dword [eax + 8], esi
xor esi, esi
mov dword [eax], 0x80
mov byte [eax + 4], 0
push esi
call fcn.0057e94e
add esp, 4
mov dword [edi + 0x1984], 0
mov dword [edi + 0x1988], 0
mov dword [edi + 0x198c], 0
mov dword [edi + 0x1980], 0xffffffff
push 0x40
sub esp, 8
mov byte [ebp - 4], 0x17
lea ecx, [edi + 0x1990]
push 0x41b6f8
call fcn.004eda20
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4