Function at 0x4889b8
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4cc4de
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call fcn.00494040
lea edi, [esi + 0x24]
xor ebp, ebp
mov ecx, edi
mov dword [esp + 0x1c], ebp
call fcn.00486200
lea ebx, [esi + 0x28]
mov byte [esp + 0x1c], 1
mov ecx, ebx
call fcn.0047a6e0
lea ecx, [esi + 0x2c]
mov byte [esp + 0x1c], 2
call fcn.00493a80
mov dword [esi + 0x30], 0x4ceb10
lea ecx, [esi + 0x38]
mov byte [esp + 0x1c], 3
mov dword [esi + 0x34], 0x4cf5a8
call fcn.004826e0
lea ecx, [esi + 0x850]
mov byte [esp + 0x1c], 4
call fcn.0048f220
lea ecx, [esi + 0xf30]
mov byte [esp + 0x1c], 5
call fcn.00475da0
lea ecx, [esi + 0x11cc]
mov byte [esp + 0x1c], 6
call fcn.00451520
lea ecx, [esi + 0x11e4]
mov byte [esp + 0x1c], 7
call fcn.00451520
lea ecx, [esi + 0x11fc]
mov byte [esp + 0x1c], 8
call fcn.00451520
lea ecx, [esi + 0x1214]
mov byte [esp + 0x1c], 9
call fcn.00451520
lea ecx, [esi + 0x122c]
mov byte [esp + 0x1c], 0xa
call fcn.00451520
lea ecx, [esi + 0x1244]
mov byte [esp + 0x1c], 0xb
call fcn.00451520
lea ecx, [esi + 0x125c]
mov byte [esp + 0x1c], 0xc
call fcn.00451520
lea ecx, [esi + 0x1274]
mov byte [esp + 0x1c], 0xd
call fcn.00451520
lea ecx, [esi + 0x128c]
mov byte [esp + 0x1c], 0xe
call fcn.00451520
mov dword [esi], 0x4cfe10
mov dword [edi], 0x4cfe0c
mov dword [ebx], 0x4cfdf4
mov dword [esi + 0x2c], 0x4cfdf0
mov dword [esi + 0x30], 0x4cfde0
mov byte [esp + 0x1c], 0xf
mov dword [esi + 0x34], 0x4cfdd0
mov ecx, esi
call fcn.00489670
mov dword [esi + 0xf7c], ebp
mov dword [esi + 0x1310], 0x18
mov dword [esi + 0x176d8], ebp
or edx, 0xffffffff
mov dword [esi + 0x1758c], ebp
mov dword [esi + 0x1756c], edx
lea eax, [esi + 0x11e4]
mov dword [esi + 0x17574], edx
mov dword [esi + 0xfac], eax
mov dword [esi + 0xfa8], ebp
mov dword [esi + 0x176f8], ebp
mov dword [esi + 0x176f4], 0xfffffffe
mov dword [esi + 0x176ec], edx
mov dword [esi + 0x12ec], ebp
mov dword [esi + 0x17570], edx
mov dword [esi + 0x17588], ebp
mov dword [esi + 0x17584], ebp
mov dword [esi + 0x130c], 6
mov dword [esi + 0xf8c], ebp
mov dword [esi + 0xf90], ebp
mov dword [esi + 0xf88], ebp
mov dword [esi + 0xf84], ebp
mov eax, 0x10
mov dword [esi + 0xf80], ebp
mov dword [esi + 0x1334], eax
mov dword [esi + 0x1338], eax
mov dword [esi + 0x12e0], ebp
mov dword [esi + 0x12d8], ebp
mov dword [esi + 0x12dc], ebp
mov dword [esi + 0x12e4], ebp
mov dword [esi + 0xfc8], ebp
mov dword [esi + 0x12e8], ebp
mov dword [esi + 0x12d0], edx
mov dword [esi + 0xf78], 0x4a
mov dword [esi + 0x175a4], ebp
mov dword [esi + 0xfc4], 4
mov dword [esi + 0xfc0], 2
mov dword [esi + 0x1759c], ebp
mov dword [esi + 0x175a0], ebp
mov dword [esi + 0x176e4], edx
mov dword [esi + 0x1314], edx
mov dword [esi + 0x1300], ebp
mov dword [esi + 0x1304], ebp
mov ebx, 1
mov dword [esi + 0x1308], ebp
mov dword [esi + 0x1324], ebx
mov word [esi + 0x175d4], bp
mov word [esi + 0x108c], bp
mov word [esi + 0xfcc], bp
mov word [esi + 0x104c], bp
mov word [esi + 0x100c], bp
mov word [esi + 0x110c], bp
mov word [esi + 0x114c], bp
mov word [esi + 0x118c], bp
mov dword [esi + 0x12b0], edx
mov dword [esi + 0x12a8], edx
mov dword [esi + 0x12c0], edx
mov dword [esi + 0x12b8], edx
mov dword [esi + 0x131c], ebp
mov dword [esi + 0x1320], ebp
mov dword [esi + 0x17590], ebp
mov dword [esi + 0x1318], ebp
mov ecx, 0x5700
xor eax, eax
lea edi, [esi + 0x133c]
mov dword [esi + 0x17564], edx
mov dword [esi + 0xf74], edx
mov dword [esi + 0x1757c], ebp
mov dword [esi + 0x17580], ebp
mov dword [esi + 0x17578], ebp
mov dword [esi + 0x17594], ebp
mov dword [esi + 0x17598], ebp
mov dword [esi + 0x12a4], ebp
rep stosd dword es:[edi], eax
lea ecx, [esi + 0x176fc]
mov dword [esi + 0x176fc], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov ecx, 0x80
lea edi, [esi + 0x1733c]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x14]
mov eax, 0x17
mov dword [esi + 0x132c], ebp
mov dword [esi + 0x1330], ebp
mov dword [esi + 0x17558], edx
mov dword [esi + 0x17568], edx
mov dword [esi + 0x1755c], edx
mov dword [esi + 0x17560], edx
mov dword [esi + 0x17554], ebp
mov dword [esi + 4], ebp
mov dword [esi + 0x12c8], ebp
mov dword [esi + 0xf68], edx
mov dword [esi + 0xf64], edx
mov dword [esi + 0xf60], edx
mov dword [esi + 0x175b0], ebx
mov dword [esi + 0xf6c], eax
mov dword [esi + 0xf70], eax
mov dword [esi + 0x12fc], ebp
mov dword [esi + 0xf94], ebp
mov dword [esi + 0xf98], ebp
mov dword [esi + 0xf9c], ebp
mov dword [esi + 0xfb0], 2
mov dword [esi + 0xfb4], 0x14
mov dword [esi + 0x1328], ebp
mov dword [esi + 0x175a8], ebp
mov dword [esi + 0x17710], ebp
mov dword [esi + 0x17714], ebx
mov dword [esi + 0x17718], ebx
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret