Function at 0x4bbe10
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4d6bee
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call fcn.004ce850
lea edi, [esi + 0x24]
xor ebp, ebp
mov ecx, edi
mov dword [esp + 0x1c], ebp
call fcn.004c53a0
lea ebx, [esi + 0x28]
mov byte [esp + 0x1c], 1
mov ecx, ebx
call fcn.004b32a0
lea ecx, [esi + 0x2c]
mov byte [esp + 0x1c], 2
call fcn.004ce280
mov dword [esi + 0x30], 0x4d8b70
lea ecx, [esi + 0x38]
mov byte [esp + 0x1c], 3
mov dword [esi + 0x34], 0x4d9918
call fcn.004bb410
lea ecx, [esi + 0xa20]
mov byte [esp + 0x1c], 4
call fcn.004c8510
push ebp
lea ecx, [esi + 0x1330]
mov byte [esp + 0x20], 5
call fcn.004ae800
lea ecx, [esi + 0x15d8]
mov byte [esp + 0x1c], 6
call fcn.00476ab0
lea ecx, [esi + 0x15f0]
mov byte [esp + 0x1c], 7
call fcn.00476ab0
lea ecx, [esi + 0x1608]
mov byte [esp + 0x1c], 8
call fcn.00476ab0
lea ecx, [esi + 0x1620]
mov byte [esp + 0x1c], 9
call fcn.00476ab0
lea ecx, [esi + 0x1638]
mov byte [esp + 0x1c], 0xa
call fcn.00476ab0
lea ecx, [esi + 0x1650]
mov byte [esp + 0x1c], 0xb
call fcn.00476ab0
lea ecx, [esi + 0x1668]
mov byte [esp + 0x1c], 0xc
call fcn.00476ab0
lea ecx, [esi + 0x1680]
mov byte [esp + 0x1c], 0xd
call fcn.00476ab0
lea ecx, [esi + 0x1698]
mov byte [esp + 0x1c], 0xe
call fcn.00476ab0
mov dword [esi], 0x4da4e0
mov dword [edi], 0x4da4dc
mov dword [ebx], 0x4da4c4
mov dword [esi + 0x2c], 0x4da4c0
mov dword [esi + 0x30], 0x4da4b0
mov byte [esp + 0x1c], 0xf
mov dword [esi + 0x34], 0x4da4a0
mov ecx, esi
call fcn.004bcbd0
mov dword [esi + 0x17f58], ebp
mov dword [esi + 0x17f24], ebp
mov dword [esi + 0x17f20], ebp
mov dword [esi + 0x132c], ebp
mov dword [esi + 0x1384], ebp
mov dword [esi + 0x171c], 0x18
mov dword [esi + 0x17eec], ebp
or edx, 0xffffffff
mov dword [esi + 0x17da0], ebp
mov dword [esi + 0x17d80], edx
lea eax, [esi + 0x15f0]
mov dword [esi + 0x17d88], edx
mov dword [esi + 0x13b4], eax
mov dword [esi + 0x13b0], ebp
mov dword [esi + 0x17f34], ebp
mov dword [esi + 0x17f30], 0xfffffffe
mov dword [esi + 0x17f28], edx
mov dword [esi + 0x16f8], ebp
mov dword [esi + 0x17d84], edx
mov dword [esi + 0x17d9c], ebp
mov dword [esi + 0x17d98], ebp
mov dword [esi + 0x1718], 6
mov dword [esi + 0x1394], ebp
mov dword [esi + 0x1398], ebp
mov dword [esi + 0x1390], ebp
mov dword [esi + 0x138c], ebp
mov eax, 0x10
mov dword [esi + 0x1388], ebp
mov dword [esi + 0x1748], eax
mov dword [esi + 0x174c], eax
mov dword [esi + 0x16ec], ebp
mov dword [esi + 0x16e4], ebp
mov dword [esi + 0x16e8], ebp
mov dword [esi + 0x16f0], ebp
mov dword [esi + 0x13d0], ebp
mov dword [esi + 0x16f4], ebp
mov dword [esi + 0x16dc], edx
mov dword [esi + 0x1380], 0x4a
mov dword [esi + 0x17db8], ebp
mov dword [esi + 0x13cc], 4
mov dword [esi + 0x13c8], 2
mov dword [esi + 0x17db0], ebp
mov dword [esi + 0x17db4], ebp
mov dword [esi + 0x17ef8], edx
mov dword [esi + 0x1724], edx
mov dword [esi + 0x170c], ebp
mov dword [esi + 0x1710], ebp
mov ebx, 1
mov dword [esi + 0x1714], ebp
mov dword [esi + 0x1734], ebx
mov word [esi + 0x17de8], bp
mov word [esi + 0x1498], bp
mov word [esi + 0x13d8], bp
mov word [esi + 0x1458], bp
mov word [esi + 0x1418], bp
mov word [esi + 0x1518], bp
mov word [esi + 0x1558], bp
mov word [esi + 0x1598], bp
mov dword [esi + 0x16bc], edx
mov dword [esi + 0x16b4], edx
mov dword [esi + 0x16cc], edx
mov dword [esi + 0x16c4], edx
mov ecx, 0x5800
xor eax, eax
lea edi, [esi + 0x1750]
mov dword [esi + 0x172c], ebp
mov dword [esi + 0x1730], ebp
mov dword [esi + 0x17da4], ebp
mov dword [esi + 0x1728], ebp
mov dword [esi + 0x17d78], edx
mov dword [esi + 0x137c], edx
mov dword [esi + 0x17d90], ebp
mov dword [esi + 0x17d94], ebp
mov dword [esi + 0x17d8c], ebp
mov dword [esi + 0x17da8], ebp
mov dword [esi + 0x17dac], ebp
mov dword [esi + 0x16b0], ebp
mov dword [esi + 0x1720], 0x14
rep stosd dword es:[edi], eax
lea ecx, [esi + 0x17f38]
lea edi, [esi + 0x17b50]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov ecx, 0x80
rep stosd dword es:[edi], eax
mov eax, 0x17
mov dword [esi + 0x173c], ebp
mov dword [esi + 0x1744], ebp
mov dword [esi + 0x1740], ebp
mov dword [esi + 0x17d6c], edx
mov dword [esi + 0x17d7c], edx
mov dword [esi + 0x17d70], edx
mov dword [esi + 0x17d74], edx
mov dword [esi + 0x17d68], ebp
mov dword [esi + 4], ebp
mov dword [esi + 0x16d4], ebp
mov dword [esi + 0x1370], edx
mov dword [esi + 0x136c], edx
mov dword [esi + 0x1368], edx
mov dword [esi + 0x17dc4], ebx
mov dword [esi + 0x1374], eax
mov dword [esi + 0x1378], eax
mov dword [esi + 0x1708], ebp
mov dword [esi + 0x139c], ebp
mov dword [esi + 0x13a0], ebp
mov dword [esi + 0x13a4], ebp
mov dword [esi + 0x13b8], 2
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x13bc], 0x14
mov dword [esi + 0x1738], ebp
mov dword [esi + 0x17dbc], ebp
mov dword [esi + 0x17f4c], ebp
mov dword [esi + 0x17f50], ebx
mov dword [esi + 0x17f54], ebx
mov dword [esi + 0x13d4], ebp
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret