Function at 0x4bd4b0
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4d9450
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call fcn.004d1340
lea edi, [esi + 0x24]
xor ebp, ebp
mov ecx, edi
mov dword [esp + 0x1c], ebp
call fcn.004c6ac0
lea ebx, [esi + 0x28]
mov byte [esp + 0x1c], 1
mov ecx, ebx
call fcn.004b4b10
lea ecx, [esi + 0x2c]
mov byte [esp + 0x1c], 2
call fcn.004d0d70
mov dword [esi + 0x30], 0x4dab70
lea ecx, [esi + 0x38]
mov byte [esp + 0x1c], 3
mov dword [esi + 0x34], 0x4dfe30
call fcn.004bcb60
lea ecx, [esi + 0x980]
mov byte [esp + 0x1c], 4
call fcn.004cae30
push ebp
lea ecx, [esi + 0x1218]
mov byte [esp + 0x20], 5
call fcn.004aff40
mov dword [esi], 0x4e09f8
mov dword [edi], 0x4e09f4
mov dword [ebx], 0x4e09dc
mov dword [esi + 0x2c], 0x4e09d8
mov dword [esi + 0x30], 0x4e09c8
mov ecx, esi
mov byte [esp + 0x1c], 6
mov dword [esi + 0x34], 0x4e09b8
call fcn.004be180
mov dword [esi + 0x17d8c], ebp
mov dword [esi + 0x17d58], ebp
mov dword [esi + 0x17d54], ebp
mov dword [esi + 0x1214], ebp
mov dword [esi + 0x126c], ebp
mov dword [esi + 0x1550], 0x18
mov dword [esi + 0x17d20], ebp
or edx, 0xffffffff
mov dword [esi + 0x17bd4], ebp
mov dword [esi + 0x17bb4], edx
mov dword [esi + 0x17bbc], edx
mov dword [esi + 0x1298], ebp
mov dword [esi + 0x17d68], ebp
mov dword [esi + 0x17d64], 0xfffffffe
mov dword [esi + 0x17d5c], edx
mov dword [esi + 0x152c], ebp
mov dword [esi + 0x17bb8], edx
mov dword [esi + 0x17bd0], ebp
mov dword [esi + 0x17bcc], ebp
mov dword [esi + 0x154c], 6
mov dword [esi + 0x127c], ebp
mov dword [esi + 0x1280], ebp
mov dword [esi + 0x1278], ebp
mov dword [esi + 0x1274], ebp
mov eax, 0x10
mov dword [esi + 0x1270], ebp
mov dword [esi + 0x157c], eax
mov dword [esi + 0x1580], eax
mov dword [esi + 0x1520], ebp
mov dword [esi + 0x1518], ebp
mov dword [esi + 0x151c], ebp
mov dword [esi + 0x1524], ebp
mov dword [esi + 0x12b8], ebp
mov dword [esi + 0x1528], ebp
mov dword [esi + 0x1510], edx
mov dword [esi + 0x1268], 0x4a
mov dword [esi + 0x17bec], ebp
mov dword [esi + 0x12b4], 4
mov dword [esi + 0x12b0], 2
mov dword [esi + 0x17be4], ebp
mov dword [esi + 0x17be8], ebp
mov dword [esi + 0x17d2c], edx
mov dword [esi + 0x1558], edx
mov dword [esi + 0x1540], ebp
mov dword [esi + 0x1544], ebp
mov ebx, 1
mov dword [esi + 0x1548], ebp
mov dword [esi + 0x1568], ebx
mov word [esi + 0x17c1c], bp
mov word [esi + 0x1380], bp
mov word [esi + 0x12c0], bp
mov word [esi + 0x1340], bp
mov word [esi + 0x1300], bp
mov word [esi + 0x1400], bp
mov word [esi + 0x1440], bp
mov word [esi + 0x1480], bp
mov dword [esi + 0x14f0], edx
mov dword [esi + 0x14e8], edx
mov dword [esi + 0x1500], edx
mov dword [esi + 0x14f8], edx
mov dword [esi + 0x1560], ebp
mov ecx, 0x5800
xor eax, eax
lea edi, [esi + 0x1584]
mov dword [esi + 0x1564], ebp
mov dword [esi + 0x17bd8], ebp
mov dword [esi + 0x155c], ebp
mov dword [esi + 0x17bac], edx
mov dword [esi + 0x1264], edx
mov dword [esi + 0x17bc4], ebp
mov dword [esi + 0x17bc8], ebp
mov dword [esi + 0x17bc0], ebp
mov dword [esi + 0x17bdc], ebp
mov dword [esi + 0x17be0], ebp
mov dword [esi + 0x14e4], ebp
mov dword [esi + 0x1554], 0x14
rep stosd dword es:[edi], eax
lea ecx, [esi + 0x17d6c]
lea edi, [esi + 0x17984]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov ecx, 0x80
rep stosd dword es:[edi], eax
mov eax, 0x17
mov dword [esi + 0x1570], ebp
mov dword [esi + 0x1578], ebp
mov dword [esi + 0x1574], ebp
mov dword [esi + 0x17ba0], edx
mov dword [esi + 0x17bb0], edx
mov dword [esi + 0x17ba4], edx
mov dword [esi + 0x17ba8], edx
mov dword [esi + 0x17b9c], ebp
mov dword [esi + 4], ebp
mov dword [esi + 0x1508], ebp
mov dword [esi + 0x1258], edx
mov dword [esi + 0x1254], edx
mov dword [esi + 0x1250], edx
mov dword [esi + 0x17bf8], ebx
mov dword [esi + 0x125c], eax
mov dword [esi + 0x1260], eax
mov dword [esi + 0x153c], ebp
mov dword [esi + 0x1284], ebp
mov dword [esi + 0x1288], ebp
mov dword [esi + 0x128c], ebp
mov dword [esi + 0x12a0], 2
mov dword [esi + 0x12a4], 0x14
mov dword [esi + 0x156c], ebp
mov dword [esi + 0x17bf0], ebp
mov dword [esi + 0x17d80], ebp
mov dword [esi + 0x17d84], ebx
mov dword [esi + 0x17d88], ebx
mov dword [esi + 0x12bc], ebp
mov dword [esi + 0x129c], ebp
mov dword [esi + 0x14c0], ebp
mov dword [esi + 0x14c4], ebp
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x14c8], ebp
mov dword [esi + 0x14cc], ebp
mov dword [esi + 0x14d0], ebp
mov dword [esi + 0x14d4], ebp
mov dword [esi + 0x14d8], ebp
mov dword [esi + 0x14dc], ebp
mov dword [esi + 0x14e0], ebp
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret