Function at 0x4f1db1
Capabilities:
Access peb ldr_data

Disassembly:
mov eax, 0x6b57e1
call fcn.00651da4
sub esp, 0xc
push ebx
push esi
push edi
mov edi, ecx
xor ebx, ebx
mov dword [ebp - 0x18], edi
mov dword [edi + 4], ebx
mov dword [ebp - 4], ebx
mov dword [edi + 8], 0x6e57c8
lea ecx, [edi + 0x14]
mov byte [ebp - 4], 1
mov dword [edi], 0x6f18f0
mov dword [edi + 8], 0x6f190c
call fcn.004c8749
push 7
pop edx
lea eax, [edi + 0x80]
mov dword [eax + 0x14], edx
mov dword [eax + 0x10], ebx
cmp edx, 8
jb 0x4f1e04
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
lea eax, [edi + 0x98]
mov dword [eax + 0x14], edx
mov dword [eax + 0x10], ebx
cmp edx, 8
jb 0x4f1e1c
mov eax, dword [eax]
xor ecx, ecx
mov word [eax], cx
mov dword [edi + 0xd0], ebx
mov dword [edi + 0xd4], ebx
mov dword [edi + 0xd8], ebx
lea esi, [edi + 0xec]
mov byte [ebp - 4], 4
mov dword [ebp - 0x14], esi
mov ecx, esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
call fcn.004f3cca
mov dword [esi], eax
push 0xf
pop ecx
lea eax, [edi + 0x134]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
cmp ecx, 0x10
jb 0x4f1e64
mov eax, dword [eax]
mov byte [eax], bl
lea eax, [edi + 0x154]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
cmp ecx, 0x10
jb 0x4f1e79
mov eax, dword [eax]
mov byte [eax], bl
lea eax, [edi + 0x174]
mov dword [eax + 0x14], ecx
mov dword [eax + 0x10], ebx
cmp ecx, 0x10
jb 0x4f1e8e
mov eax, dword [eax]
mov byte [eax], bl
fldz
or esi, 0xffffffff
and byte [edi + 0xe0], 0x18
and byte [edi + 0x171], 0xfe
fst dword [edi + 0x10]
fld dword [0x6e7c64]
fstp dword [edi + 0x74]
mov byte [ebp - 4], 8
fst dword [edi + 0x5c]
fstp dword [edi + 0x60]
mov dword [edi + 0x16c], ebx
mov byte [edi + 0x18c], bl
mov dword [edi + 0x28], ebx
mov dword [edi + 0x68], ebx
mov dword [edi + 0x38], ebx
mov byte [edi + 0x6c], bl
mov dword [edi + 0x34], ebx
mov dword [edi + 0x64], ebx
mov dword [edi + 0x2c], esi
mov dword [edi + 0x30], esi
mov dword [edi + 0x70], esi
mov byte [edi + 0x3c], bl
mov dword [edi + 0x78], ebx
mov dword [edi + 0x7c], ebx
mov dword [edi + 0x40], esi
mov dword [edi + 0x44], ebx
mov dword [edi + 0x48], ebx
mov dword [edi + 0x4c], ebx
mov dword [edi + 0x50], ebx
mov dword [edi + 0x54], ebx
mov dword [edi + 0x58], ebx
mov dword [edi + 0xb8], ebx
mov dword [edi + 0xbc], ebx
mov dword [edi + 0xc0], ebx
mov dword [edi + 0xc4], ebx
mov dword [edi + 0xb0], ebx
mov dword [edi + 0xb4], ebx
mov dword [edi + 0xc8], ebx
mov dword [edi + 0xdc], ebx
mov byte [edi + 0xe1], bl
mov dword [edi + 0xf4], ebx
mov dword [edi + 0xf8], ebx
mov dword [edi + 0xfc], ebx
mov dword [edi + 0x128], ebx
mov dword [edi + 0x12c], ebx
call fcn.004604ce
mov dword [edi + 0x118], eax
mov dword [edi + 0x11c], edx
mov dword [edi + 0x120], eax
mov dword [edi + 0x124], edx
mov dword [edi + 0x100], esi
mov dword [edi + 0x104], esi
mov dword [edi + 0x108], esi
mov dword [edi + 0x10c], esi
mov dword [edi + 0x110], esi
mov dword [edi + 0x114], esi
mov dword [edi + 0xe4], ebx
mov dword [edi + 0xe8], ebx
mov dword [edi + 0xc], ebx
mov dword [edi + 0x130], ebx
mov dword [edi + 0x14c], ebx
mov dword [edi + 0x150], ebx
mov byte [ebp - 0xd], 1
call fcn.00475363
and byte [edi + 0xe0], 0xef
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x7ce298
mov byte [ebp - 4], 9
mov dword [edi + 0xcc], 8
mov byte [edi + 0x170], bl
mov dword [ebp - 0x14], edi
call fcn.005beb1c
mov byte [ebp - 4], 0xa
call fcn.004753a4
mov eax, edi
pop edi
mov ecx, dword [ebp - 0xc]
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret