Function at 0x4ac120
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4fac4e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call fcn.004b88a0
lea edi, [esi + 0x24]
xor ebp, ebp
mov ecx, edi
mov dword [esp + 0x1c], ebp
call fcn.004a98a0
lea ebx, [esi + 0x28]
mov byte [esp + 0x1c], 1
mov ecx, ebx
call fcn.0049dca0
lea ecx, [esi + 0x2c]
mov byte [esp + 0x1c], 2
call fcn.004b82e0
mov dword [esi + 0x30], 0x4fdbc0
lea ecx, [esi + 0x38]
mov byte [esp + 0x1c], 3
mov dword [esi + 0x34], 0x4fe928
call fcn.004a5d70
lea ecx, [esi + 0x864]
mov byte [esp + 0x1c], 4
call fcn.004b2b20
push ebp
lea ecx, [esi + 0xf5c]
mov byte [esp + 0x20], 5
call fcn.004992c0
lea ecx, [esi + 0x1204]
mov byte [esp + 0x1c], 6
call fcn.00467380
lea ecx, [esi + 0x121c]
mov byte [esp + 0x1c], 7
call fcn.00467380
lea ecx, [esi + 0x1234]
mov byte [esp + 0x1c], 8
call fcn.00467380
lea ecx, [esi + 0x124c]
mov byte [esp + 0x1c], 9
call fcn.00467380
lea ecx, [esi + 0x1264]
mov byte [esp + 0x1c], 0xa
call fcn.00467380
lea ecx, [esi + 0x127c]
mov byte [esp + 0x1c], 0xb
call fcn.00467380
lea ecx, [esi + 0x1294]
mov byte [esp + 0x1c], 0xc
call fcn.00467380
lea ecx, [esi + 0x12ac]
mov byte [esp + 0x1c], 0xd
call fcn.00467380
lea ecx, [esi + 0x12c4]
mov byte [esp + 0x1c], 0xe
call fcn.00467380
mov dword [esi], 0x4ff4ac
mov dword [edi], 0x4ff4a8
mov dword [ebx], 0x4ff490
mov dword [esi + 0x2c], 0x4ff48c
mov dword [esi + 0x30], 0x4ff47c
mov byte [esp + 0x1c], 0xf
mov dword [esi + 0x34], 0x4ff46c
mov ecx, esi
call fcn.004ace40
mov dword [esi + 0xf58], ebp
mov dword [esi + 0xfb0], ebp
mov dword [esi + 0x1348], 0x18
mov dword [esi + 0x17b10], ebp
or edx, 0xffffffff
mov dword [esi + 0x179c4], ebp
mov dword [esi + 0x179a4], edx
lea eax, [esi + 0x121c]
mov dword [esi + 0x179ac], edx
mov dword [esi + 0xfe0], eax
mov dword [esi + 0xfdc], ebp
mov dword [esi + 0x17b30], ebp
mov dword [esi + 0x17b2c], 0xfffffffe
mov dword [esi + 0x17b24], edx
mov dword [esi + 0x1324], ebp
mov dword [esi + 0x179a8], edx
mov dword [esi + 0x179c0], ebp
mov dword [esi + 0x179bc], ebp
mov dword [esi + 0x1344], 6
mov dword [esi + 0xfc0], ebp
mov dword [esi + 0xfc4], ebp
mov dword [esi + 0xfbc], ebp
mov dword [esi + 0xfb8], ebp
mov eax, 0x10
mov dword [esi + 0xfb4], ebp
mov dword [esi + 0x136c], eax
mov dword [esi + 0x1370], eax
mov dword [esi + 0x1318], ebp
mov dword [esi + 0x1310], ebp
mov dword [esi + 0x1314], ebp
mov dword [esi + 0x131c], ebp
mov dword [esi + 0xffc], ebp
mov dword [esi + 0x1320], ebp
mov dword [esi + 0x1308], edx
mov dword [esi + 0xfac], 0x4a
mov dword [esi + 0x179dc], ebp
mov dword [esi + 0xff8], 4
mov dword [esi + 0xff4], 2
mov dword [esi + 0x179d4], ebp
mov dword [esi + 0x179d8], ebp
mov dword [esi + 0x17b1c], edx
mov dword [esi + 0x134c], edx
mov dword [esi + 0x1338], ebp
mov dword [esi + 0x133c], ebp
mov ebx, 1
mov dword [esi + 0x1340], ebp
mov dword [esi + 0x135c], ebx
mov word [esi + 0x17a0c], bp
mov word [esi + 0x10c4], bp
mov word [esi + 0x1004], bp
mov word [esi + 0x1084], bp
mov word [esi + 0x1044], bp
mov word [esi + 0x1144], bp
mov word [esi + 0x1184], bp
mov word [esi + 0x11c4], bp
mov dword [esi + 0x12e8], edx
mov dword [esi + 0x12e0], edx
mov dword [esi + 0x12f8], edx
mov dword [esi + 0x12f0], edx
mov dword [esi + 0x1354], ebp
mov dword [esi + 0x1358], ebp
mov dword [esi + 0x179c8], ebp
mov ecx, 0x5800
xor eax, eax
lea edi, [esi + 0x1374]
mov dword [esi + 0x1350], ebp
mov dword [esi + 0x1799c], edx
mov dword [esi + 0xfa8], edx
mov dword [esi + 0x179b4], ebp
mov dword [esi + 0x179b8], ebp
mov dword [esi + 0x179b0], ebp
mov dword [esi + 0x179cc], ebp
mov dword [esi + 0x179d0], ebp
mov dword [esi + 0x12dc], ebp
rep stosd dword es:[edi], eax
lea ecx, [esi + 0x17b34]
mov dword [esi + 0x17b34], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
lea edi, [esi + 0x17774]
mov dword [ecx + 0x10], eax
mov ecx, 0x80
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x14]
mov eax, 0x17
mov dword [esi + 0x1364], ebp
mov dword [esi + 0x1368], ebp
mov dword [esi + 0x17990], edx
mov dword [esi + 0x179a0], edx
mov dword [esi + 0x17994], edx
mov dword [esi + 0x17998], edx
mov dword [esi + 0x1798c], ebp
mov dword [esi + 4], ebp
mov dword [esi + 0x1300], ebp
mov dword [esi + 0xf9c], edx
mov dword [esi + 0xf98], edx
mov dword [esi + 0xf94], edx
mov dword [esi + 0x179e8], ebx
mov dword [esi + 0xfa0], eax
mov dword [esi + 0xfa4], eax
mov dword [esi + 0x1334], ebp
mov dword [esi + 0xfc8], ebp
mov dword [esi + 0xfcc], ebp
mov dword [esi + 0xfd0], ebp
mov dword [esi + 0xfe4], 2
mov dword [esi + 0xfe8], 0x14
mov dword [esi + 0x1360], ebp
mov dword [esi + 0x179e0], ebp
mov dword [esi + 0x17b48], ebp
mov dword [esi + 0x17b4c], ebx
mov dword [esi + 0x17b50], ebx
mov dword [esi + 0x1000], ebp
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret