Function at 0x4c24a0
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4de660
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call fcn.004d6450
lea edi, [esi + 0x24]
xor ebp, ebp
mov ecx, edi
mov dword [esp + 0x1c], ebp
call fcn.004cbad0
lea ebx, [esi + 0x28]
mov byte [esp + 0x1c], 1
mov ecx, ebx
call fcn.004b99f0
lea ecx, [esi + 0x2c]
mov byte [esp + 0x1c], 2
call fcn.004d5e90
mov dword [esi + 0x30], 0x4dfb90
lea ecx, [esi + 0x38]
mov byte [esp + 0x1c], 3
mov dword [esi + 0x34], 0x4e4e58
call fcn.004c1b50
lea ecx, [esi + 0x98c]
mov byte [esp + 0x1c], 4
call fcn.004cfe10
push ebp
lea ecx, [esi + 0x1230]
mov byte [esp + 0x20], 5
call fcn.004b4e50
mov dword [esi], 0x4e5a28
mov dword [edi], 0x4e5a24
mov dword [ebx], 0x4e5a0c
mov dword [esi + 0x2c], 0x4e5a08
mov dword [esi + 0x30], 0x4e59f8
mov ecx, esi
mov byte [esp + 0x1c], 6
mov dword [esi + 0x34], 0x4e59e8
call fcn.004c3170
mov dword [esi + 0x17da4], ebp
mov dword [esi + 0x17d70], ebp
mov dword [esi + 0x17d6c], ebp
mov dword [esi + 0x122c], ebp
mov dword [esi + 0x1284], ebp
mov dword [esi + 0x1568], 0x18
mov dword [esi + 0x17d38], ebp
or edx, 0xffffffff
mov dword [esi + 0x17bec], ebp
mov dword [esi + 0x17bcc], edx
mov dword [esi + 0x17bd4], edx
mov dword [esi + 0x12b0], ebp
mov dword [esi + 0x17d80], ebp
mov dword [esi + 0x17d7c], 0xfffffffe
mov dword [esi + 0x17d74], edx
mov dword [esi + 0x1544], ebp
mov dword [esi + 0x17bd0], edx
mov dword [esi + 0x17be8], ebp
mov dword [esi + 0x17be4], ebp
mov dword [esi + 0x1564], 6
mov dword [esi + 0x1294], ebp
mov dword [esi + 0x1298], ebp
mov dword [esi + 0x1290], ebp
mov dword [esi + 0x128c], ebp
mov eax, 0x10
mov dword [esi + 0x1288], ebp
mov dword [esi + 0x1594], eax
mov dword [esi + 0x1598], eax
mov dword [esi + 0x1538], ebp
mov dword [esi + 0x1530], ebp
mov dword [esi + 0x1534], ebp
mov dword [esi + 0x153c], ebp
mov dword [esi + 0x12d0], ebp
mov dword [esi + 0x1540], ebp
mov dword [esi + 0x1528], edx
mov dword [esi + 0x1280], 0x4a
mov dword [esi + 0x17c04], ebp
mov dword [esi + 0x12cc], 4
mov dword [esi + 0x12c8], 2
mov dword [esi + 0x17bfc], ebp
mov dword [esi + 0x17c00], ebp
mov dword [esi + 0x17d44], edx
mov dword [esi + 0x1570], edx
mov dword [esi + 0x1558], ebp
mov dword [esi + 0x155c], ebp
mov ebx, 1
mov dword [esi + 0x1560], ebp
mov dword [esi + 0x1580], ebx
mov word [esi + 0x17c34], bp
mov word [esi + 0x1398], bp
mov word [esi + 0x12d8], bp
mov word [esi + 0x1358], bp
mov word [esi + 0x1318], bp
mov word [esi + 0x1418], bp
mov word [esi + 0x1458], bp
mov word [esi + 0x1498], bp
mov dword [esi + 0x1508], edx
mov dword [esi + 0x1500], edx
mov dword [esi + 0x1518], edx
mov dword [esi + 0x1510], edx
mov dword [esi + 0x1578], ebp
mov ecx, 0x5800
xor eax, eax
lea edi, [esi + 0x159c]
mov dword [esi + 0x157c], ebp
mov dword [esi + 0x17bf0], ebp
mov dword [esi + 0x1574], ebp
mov dword [esi + 0x17bc4], edx
mov dword [esi + 0x127c], edx
mov dword [esi + 0x17bdc], ebp
mov dword [esi + 0x17be0], ebp
mov dword [esi + 0x17bd8], ebp
mov dword [esi + 0x17bf4], ebp
mov dword [esi + 0x17bf8], ebp
mov dword [esi + 0x14fc], ebp
mov dword [esi + 0x156c], 0x14
rep stosd dword es:[edi], eax
lea ecx, [esi + 0x17d84]
lea edi, [esi + 0x1799c]
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov ecx, 0x80
rep stosd dword es:[edi], eax
mov eax, 0x17
mov dword [esi + 0x1588], ebp
mov dword [esi + 0x1590], ebp
mov dword [esi + 0x158c], ebp
mov dword [esi + 0x17bb8], edx
mov dword [esi + 0x17bc8], edx
mov dword [esi + 0x17bbc], edx
mov dword [esi + 0x17bc0], edx
mov dword [esi + 0x17bb4], ebp
mov dword [esi + 4], ebp
mov dword [esi + 0x1520], ebp
mov dword [esi + 0x1270], edx
mov dword [esi + 0x126c], edx
mov dword [esi + 0x1268], edx
mov dword [esi + 0x17c10], ebx
mov dword [esi + 0x1274], eax
mov dword [esi + 0x1278], eax
mov dword [esi + 0x1554], ebp
mov dword [esi + 0x129c], ebp
mov dword [esi + 0x12a0], ebp
mov dword [esi + 0x12a4], ebp
mov dword [esi + 0x12b8], 2
mov dword [esi + 0x12bc], 0x14
mov dword [esi + 0x1584], ebp
mov dword [esi + 0x17c08], ebp
mov dword [esi + 0x17d98], ebp
mov dword [esi + 0x17d9c], ebx
mov dword [esi + 0x17da0], ebx
mov dword [esi + 0x12d4], ebp
mov dword [esi + 0x12b4], ebp
mov dword [esi + 0x14d8], ebp
mov dword [esi + 0x14dc], ebp
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x14e0], ebp
mov dword [esi + 0x14e4], ebp
mov dword [esi + 0x14e8], ebp
mov dword [esi + 0x14ec], ebp
mov dword [esi + 0x14f0], ebp
mov dword [esi + 0x14f4], ebp
mov dword [esi + 0x14f8], ebp
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret