Function at 0x424df0
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4be890
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
mov ebp, ecx
push esi
push edi
mov ecx, 0xfa
xor eax, eax
lea edi, [ebp + 0x6c]
mov dword [ebp + 0x68], 0x4c0590
xor ebx, ebx
rep stosd dword es:[edi], eax
mov ecx, 0xa
lea edi, [ebp + 0x454]
rep stosd dword es:[edi], eax
lea ecx, [ebp + 0x47c]
lea edi, [ebp + 0x490]
mov dword [esp + 0x10], ebp
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov ecx, 8
rep stosd dword es:[edi], eax
mov ecx, 0x3c
lea edi, [ebp + 0x4b0]
rep stosd dword es:[edi], eax
mov ecx, 0x32
lea edi, [ebp + 0x5a2]
mov word [ebp + 0x5a0], bx
rep stosd dword es:[edi], eax
mov word [ebp + 0x66a], bx
lea ecx, [ebp + 0x66c]
mov dword [esp + 0x1c], ebx
call fcn.004164d0
push fcn.00416740
push fcn.004164d0
lea eax, [ebp + 0x1578]
push 2
push 0xf0c
push eax
mov byte [esp + 0x30], 1
call fcn.004b1ed6
lea edx, [ebp + 0x37d4]
mov ecx, 0x10
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
lea ecx, [ebp + 0x392e]
mov byte [esp + 0x1c], 2
mov dword [edx + 0x40], ebx
call fcn.00409a40
lea ecx, [ebp + 0x3958]
mov byte [esp + 0x1c], 3
call fcn.00409ff0
mov ecx, ebp
mov byte [esp + 0x1c], 4
mov dword [ebp], 0x4c059c
call fcn.004251d0
push 2
push 2
push 2
push 0x32
mov ecx, ebp
call fcn.00425260
mov word [ebp + 0x378e], 4
mov word [ebp + 0x3790], 0x18
mov word [ebp + 0x3792], bx
mov byte [ebp + 0x381b], 2
mov byte [ebp + 0x381d], 2
mov word [ebp + 0x3824], 0x24
mov word [ebp + 0x382a], 0xfff4
mov word [ebp + 0x38dc], bx
mov word [ebp + 0x38de], bx
lea edx, [ebp + 0x3794]
mov edi, 0x4d2cfc
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 1
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [ebp + 0x37d4]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x10
mov edi, edx
rep stosd dword es:[edi], eax
mov dword [edx + 0x40], ebx
mov ecx, 0x6e
lea edi, [ebp + 0x33a4]
mov dword [ebp + 0x38d4], 0xffffff
mov dword [ebp + 0x38d8], 0xefefef
mov dword [ebp + 0x3964], 0xff0000
mov byte [ebp + 0x381c], 2
rep stosd dword es:[edi], eax
mov ecx, 0x6e
lea edi, [ebp + 0x355c]
rep stosd dword es:[edi], eax
mov ecx, 0x14
lea edi, [ebp + 0x3714]
rep stosd dword es:[edi], eax
mov ecx, 8
lea edi, [ebp + 0x3764]
rep stosd dword es:[edi], eax
mov ecx, 8
lea edi, [ebp + 0x3890]
mov dword [ebp + 0x38b0], ebx
mov word [ebp + 0x38b4], bx
mov word [ebp + 0x38b6], bx
mov dword [ebp + 0x388c], ebx
rep stosd dword es:[edi], eax
lea ecx, [ebp + 0x66c]
mov dword [ebp + 0x3912], ebx
mov dword [ebp + 0x3916], ebx
mov dword [ebp + 0x391a], ebx
mov dword [ebp + 0x391e], ebx
mov dword [ebp + 0x3922], ebx
call fcn.00416750
push 1
lea ecx, [ebp + 0x1578]
call fcn.00416750
push 1
lea ecx, [ebp + 0x2484]
call fcn.00416750
lea edx, [ebp + 0x38c0]
xor ecx, ecx
mov dword [ebp + 0x3398], ebx
mov dword [ebp + 0x339c], ebx
mov dword [ebp + 0x3926], ebx
mov dword [ebp + 0x33a0], 1
mov dword [ebp + 0x38b8], ebx
mov word [ebp + 0x38bc], 0x20
mov word [ebp + 0x38be], bx
mov dword [edx], ecx
pop edi
mov eax, ebp
mov dword [edx + 4], ecx
pop esi
mov dword [edx + 8], ecx
mov dword [edx + 0xc], ecx
mov dword [edx + 0x10], ecx
mov ecx, dword [esp + 0xc]
mov dword [ebp + 0x3968], ebx
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret