Function at 0x48e998
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4d133e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call fcn.00499f60
lea edi, [esi + 0x24]
xor ebp, ebp
mov ecx, edi
mov dword [esp + 0x1c], ebp
call fcn.0048c1b0
lea ebx, [esi + 0x28]
mov byte [esp + 0x1c], 1
mov ecx, ebx
call fcn.00480690
lea ecx, [esi + 0x2c]
mov byte [esp + 0x1c], 2
call fcn.004999a0
mov dword [esi + 0x30], 0x4d3b50
lea ecx, [esi + 0x38]
mov byte [esp + 0x1c], 3
mov dword [esi + 0x34], 0x4d46d8
call fcn.00488680
lea ecx, [esi + 0x858]
mov byte [esp + 0x1c], 4
call fcn.00495170
push ebp
lea ecx, [esi + 0xf44]
mov byte [esp + 0x20], 5
call fcn.0047be90
lea ecx, [esi + 0x11e8]
mov byte [esp + 0x1c], 6
call fcn.00456d20
lea ecx, [esi + 0x1200]
mov byte [esp + 0x1c], 7
call fcn.00456d20
lea ecx, [esi + 0x1218]
mov byte [esp + 0x1c], 8
call fcn.00456d20
lea ecx, [esi + 0x1230]
mov byte [esp + 0x1c], 9
call fcn.00456d20
lea ecx, [esi + 0x1248]
mov byte [esp + 0x1c], 0xa
call fcn.00456d20
lea ecx, [esi + 0x1260]
mov byte [esp + 0x1c], 0xb
call fcn.00456d20
lea ecx, [esi + 0x1278]
mov byte [esp + 0x1c], 0xc
call fcn.00456d20
lea ecx, [esi + 0x1290]
mov byte [esp + 0x1c], 0xd
call fcn.00456d20
lea ecx, [esi + 0x12a8]
mov byte [esp + 0x1c], 0xe
call fcn.00456d20
mov dword [esi], 0x4d503c
mov dword [edi], 0x4d5038
mov dword [ebx], 0x4d5020
mov dword [esi + 0x2c], 0x4d501c
mov dword [esi + 0x30], 0x4d500c
mov byte [esp + 0x1c], 0xf
mov dword [esi + 0x34], 0x4d4ffc
mov ecx, esi
call fcn.0048f630
mov dword [esi + 0xf40], ebp
mov dword [esi + 0xf98], ebp
mov dword [esi + 0x132c], 0x18
mov dword [esi + 0x17af4], ebp
or edx, 0xffffffff
mov dword [esi + 0x179a8], ebp
mov dword [esi + 0x17988], edx
lea eax, [esi + 0x1200]
mov dword [esi + 0x17990], edx
mov dword [esi + 0xfc8], eax
mov dword [esi + 0xfc4], ebp
mov dword [esi + 0x17b14], ebp
mov dword [esi + 0x17b10], 0xfffffffe
mov dword [esi + 0x17b08], edx
mov dword [esi + 0x1308], ebp
mov dword [esi + 0x1798c], edx
mov dword [esi + 0x179a4], ebp
mov dword [esi + 0x179a0], ebp
mov dword [esi + 0x1328], 6
mov dword [esi + 0xfa8], ebp
mov dword [esi + 0xfac], ebp
mov dword [esi + 0xfa4], ebp
mov dword [esi + 0xfa0], ebp
mov eax, 0x10
mov dword [esi + 0xf9c], ebp
mov dword [esi + 0x1350], eax
mov dword [esi + 0x1354], eax
mov dword [esi + 0x12fc], ebp
mov dword [esi + 0x12f4], ebp
mov dword [esi + 0x12f8], ebp
mov dword [esi + 0x1300], ebp
mov dword [esi + 0xfe4], ebp
mov dword [esi + 0x1304], ebp
mov dword [esi + 0x12ec], edx
mov dword [esi + 0xf94], 0x4a
mov dword [esi + 0x179c0], ebp
mov dword [esi + 0xfe0], 4
mov dword [esi + 0xfdc], 2
mov dword [esi + 0x179b8], ebp
mov dword [esi + 0x179bc], ebp
mov dword [esi + 0x17b00], edx
mov dword [esi + 0x1330], edx
mov dword [esi + 0x131c], ebp
mov dword [esi + 0x1320], ebp
mov ebx, 1
mov dword [esi + 0x1324], ebp
mov dword [esi + 0x1340], ebx
mov word [esi + 0x179f0], bp
mov word [esi + 0x10a8], bp
mov word [esi + 0xfe8], bp
mov word [esi + 0x1068], bp
mov word [esi + 0x1028], bp
mov word [esi + 0x1128], bp
mov word [esi + 0x1168], bp
mov word [esi + 0x11a8], bp
mov dword [esi + 0x12cc], edx
mov dword [esi + 0x12c4], edx
mov dword [esi + 0x12dc], edx
mov dword [esi + 0x12d4], edx
mov dword [esi + 0x1338], ebp
mov dword [esi + 0x133c], ebp
mov dword [esi + 0x179ac], ebp
mov ecx, 0x5800
xor eax, eax
lea edi, [esi + 0x1358]
mov dword [esi + 0x1334], ebp
mov dword [esi + 0x17980], edx
mov dword [esi + 0xf90], edx
mov dword [esi + 0x17998], ebp
mov dword [esi + 0x1799c], ebp
mov dword [esi + 0x17994], ebp
mov dword [esi + 0x179b0], ebp
mov dword [esi + 0x179b4], ebp
mov dword [esi + 0x12c0], ebp
rep stosd dword es:[edi], eax
lea ecx, [esi + 0x17b18]
mov dword [esi + 0x17b18], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
lea edi, [esi + 0x17758]
mov dword [ecx + 0x10], eax
mov ecx, 0x80
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x14]
mov eax, 0x17
mov dword [esi + 0x1348], ebp
mov dword [esi + 0x134c], ebp
mov dword [esi + 0x17974], edx
mov dword [esi + 0x17984], edx
mov dword [esi + 0x17978], edx
mov dword [esi + 0x1797c], edx
mov dword [esi + 0x17970], ebp
mov dword [esi + 4], ebp
mov dword [esi + 0x12e4], ebp
mov dword [esi + 0xf84], edx
mov dword [esi + 0xf80], edx
mov dword [esi + 0xf7c], edx
mov dword [esi + 0x179cc], ebx
mov dword [esi + 0xf88], eax
mov dword [esi + 0xf8c], eax
mov dword [esi + 0x1318], ebp
mov dword [esi + 0xfb0], ebp
mov dword [esi + 0xfb4], ebp
mov dword [esi + 0xfb8], ebp
mov dword [esi + 0xfcc], 2
mov dword [esi + 0xfd0], 0x14
mov dword [esi + 0x1344], ebp
mov dword [esi + 0x179c4], ebp
mov dword [esi + 0x17b2c], ebp
mov dword [esi + 0x17b30], ebx
mov dword [esi + 0x17b34], ebx
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret