Function at 0x4c8d40
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4d7bbe
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call fcn.004cf270
lea edi, [esi + 0x24]
xor ebp, ebp
mov ecx, edi
mov dword [esp + 0x1c], ebp
call fcn.004bfa60
lea ebx, [esi + 0x28]
mov byte [esp + 0x1c], 1
mov ecx, ebx
call fcn.004b3c30
lea ecx, [esi + 0x2c]
mov byte [esp + 0x1c], 2
call fcn.004c8940
mov dword [esi + 0x30], 0x4d8b64
lea ecx, [esi + 0x38]
mov byte [esp + 0x1c], 3
mov dword [esi + 0x34], 0x4d9f70
call fcn.004bbde0
lea ecx, [esi + 0xa80]
mov byte [esp + 0x1c], 4
call fcn.004c2b80
push ebp
lea ecx, [esi + 0x1390]
mov byte [esp + 0x20], 5
call fcn.004af1a0
lea ecx, [esi + 0x1638]
mov byte [esp + 0x1c], 6
call fcn.004792a0
lea ecx, [esi + 0x1650]
mov byte [esp + 0x1c], 7
call fcn.004792a0
lea ecx, [esi + 0x1668]
mov byte [esp + 0x1c], 8
call fcn.004792a0
lea ecx, [esi + 0x1680]
mov byte [esp + 0x1c], 9
call fcn.004792a0
lea ecx, [esi + 0x1698]
mov byte [esp + 0x1c], 0xa
call fcn.004792a0
lea ecx, [esi + 0x16b0]
mov byte [esp + 0x1c], 0xb
call fcn.004792a0
lea ecx, [esi + 0x16c8]
mov byte [esp + 0x1c], 0xc
call fcn.004792a0
lea ecx, [esi + 0x16e0]
mov byte [esp + 0x1c], 0xd
call fcn.004792a0
lea ecx, [esi + 0x16f8]
mov byte [esp + 0x1c], 0xe
call fcn.004792a0
mov dword [esi], 0x4dacd4
mov dword [edi], 0x4dacd0
mov dword [ebx], 0x4dacb8
mov dword [esi + 0x2c], 0x4dacb4
mov dword [esi + 0x30], 0x4daca4
mov byte [esp + 0x1c], 0xf
mov dword [esi + 0x34], 0x4dac94
mov ecx, esi
call fcn.004c9ad0
mov dword [esi + 0x17f88], ebp
mov dword [esi + 0x138c], ebp
mov dword [esi + 0x13e4], ebp
mov dword [esi + 0x177c], 0x18
mov dword [esi + 0x17f44], ebp
or edx, 0xffffffff
mov dword [esi + 0x17df8], ebp
mov dword [esi + 0x17dd8], edx
mov dword [esi + 0x17de0], edx
mov dword [esi + 0x1410], ebp
mov dword [esi + 0x17f64], ebp
mov dword [esi + 0x17f60], 0xfffffffe
mov ebx, 1
mov dword [esi + 0x17f58], edx
mov dword [esi + 0x1758], ebx
mov dword [esi + 0x17ddc], edx
mov dword [esi + 0x17df4], ebp
mov dword [esi + 0x17df0], ebp
mov dword [esi + 0x1778], 6
mov dword [esi + 0x13f4], ebp
mov dword [esi + 0x13f8], ebp
mov dword [esi + 0x13f0], ebp
mov dword [esi + 0x13ec], ebp
mov eax, 0x10
mov dword [esi + 0x13e8], ebp
mov dword [esi + 0x17a0], eax
mov dword [esi + 0x17a4], eax
mov dword [esi + 0x174c], ebp
mov dword [esi + 0x1744], ebp
mov dword [esi + 0x1748], ebp
mov dword [esi + 0x1750], ebp
mov dword [esi + 0x1430], ebp
mov dword [esi + 0x1754], ebp
mov dword [esi + 0x173c], edx
mov dword [esi + 0x13e0], 0x4a
mov dword [esi + 0x17e10], ebp
mov dword [esi + 0x142c], 4
mov dword [esi + 0x1428], 2
mov dword [esi + 0x17e08], ebp
mov dword [esi + 0x17e0c], ebp
mov dword [esi + 0x17f50], edx
mov dword [esi + 0x1780], edx
mov dword [esi + 0x176c], ebp
mov dword [esi + 0x1770], ebp
mov dword [esi + 0x1774], ebp
mov dword [esi + 0x1790], ebx
mov word [esi + 0x17e40], bp
mov word [esi + 0x14f8], bp
mov word [esi + 0x1438], bp
mov word [esi + 0x14b8], bp
mov word [esi + 0x1478], bp
mov word [esi + 0x1578], bp
mov word [esi + 0x15b8], bp
mov word [esi + 0x15f8], bp
mov dword [esi + 0x171c], edx
mov dword [esi + 0x1714], edx
mov dword [esi + 0x172c], edx
mov dword [esi + 0x1724], edx
mov dword [esi + 0x1788], ebp
mov dword [esi + 0x178c], ebp
mov dword [esi + 0x17dfc], ebp
mov ecx, 0x5800
xor eax, eax
lea edi, [esi + 0x17a8]
mov dword [esi + 0x1784], ebp
mov dword [esi + 0x17dd0], edx
mov dword [esi + 0x13dc], edx
mov dword [esi + 0x17de8], ebp
mov dword [esi + 0x17dec], ebp
mov dword [esi + 0x17de4], ebp
mov dword [esi + 0x17e00], ebp
mov dword [esi + 0x17e04], ebp
mov dword [esi + 0x1710], ebp
rep stosd dword es:[edi], eax
lea ecx, [esi + 0x17f68]
mov dword [esi + 0x17f68], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov ecx, 0x80
lea edi, [esi + 0x17ba8]
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x14]
mov eax, 0x17
mov dword [esi + 0x1798], ebp
mov dword [esi + 0x179c], ebp
mov dword [esi + 0x17dc4], edx
mov dword [esi + 0x17dd4], edx
mov dword [esi + 0x17dc8], edx
mov dword [esi + 0x17dcc], edx
mov dword [esi + 0x17dc0], ebp
mov dword [esi + 4], ebp
mov dword [esi + 0x1734], ebp
mov dword [esi + 0x13d0], edx
mov dword [esi + 0x13cc], edx
mov dword [esi + 0x13c8], edx
mov dword [esi + 0x17e1c], ebx
mov dword [esi + 0x13d4], eax
mov dword [esi + 0x13d8], eax
mov dword [esi + 0x1768], ebp
mov dword [esi + 0x13fc], ebp
mov dword [esi + 0x1400], ebp
mov dword [esi + 0x1404], ebp
mov dword [esi + 0x1418], 2
mov dword [esi + 0x141c], 0x14
mov dword [esi + 0x1794], ebp
mov dword [esi + 0x17e14], ebp
mov dword [esi + 0x17f7c], ebp
mov dword [esi + 0x17f80], ebx
mov dword [esi + 0x17f84], ebx
mov dword [esi + 0x1434], ebp
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret