Function at 0x4a96f0
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4bdffe
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call fcn.004b5fa0
lea edi, [esi + 0x24]
xor ebp, ebp
mov ecx, edi
mov dword [esp + 0x1c], ebp
call fcn.004a6ec0
lea ebx, [esi + 0x28]
mov byte [esp + 0x1c], 1
mov ecx, ebx
call fcn.0049b310
lea ecx, [esi + 0x2c]
mov byte [esp + 0x1c], 2
call fcn.004b5890
mov dword [esi + 0x30], 0x4bfb10
lea ecx, [esi + 0x38]
mov byte [esp + 0x1c], 3
mov dword [esi + 0x34], 0x4c07f0
call fcn.004a3390
lea ecx, [esi + 0x864]
mov byte [esp + 0x1c], 4
call fcn.004b00c0
push ebp
lea ecx, [esi + 0xf5c]
mov byte [esp + 0x20], 5
call fcn.00496920
lea ecx, [esi + 0x1204]
mov byte [esp + 0x1c], 6
call fcn.00463fa0
lea ecx, [esi + 0x121c]
mov byte [esp + 0x1c], 7
call fcn.00463fa0
lea ecx, [esi + 0x1234]
mov byte [esp + 0x1c], 8
call fcn.00463fa0
lea ecx, [esi + 0x124c]
mov byte [esp + 0x1c], 9
call fcn.00463fa0
lea ecx, [esi + 0x1264]
mov byte [esp + 0x1c], 0xa
call fcn.00463fa0
lea ecx, [esi + 0x127c]
mov byte [esp + 0x1c], 0xb
call fcn.00463fa0
lea ecx, [esi + 0x1294]
mov byte [esp + 0x1c], 0xc
call fcn.00463fa0
lea ecx, [esi + 0x12ac]
mov byte [esp + 0x1c], 0xd
call fcn.00463fa0
lea ecx, [esi + 0x12c4]
mov byte [esp + 0x1c], 0xe
call fcn.00463fa0
mov dword [esi], 0x4c1374
mov dword [edi], 0x4c1370
mov dword [ebx], 0x4c1358
mov dword [esi + 0x2c], 0x4c1354
mov dword [esi + 0x30], 0x4c1344
mov byte [esp + 0x1c], 0xf
mov dword [esi + 0x34], 0x4c1334
mov ecx, esi
call fcn.004aa420
mov dword [esi + 0xf58], ebp
mov dword [esi + 0xfb0], ebp
mov dword [esi + 0x1348], 0x18
mov dword [esi + 0x17b14], ebp
or edx, 0xffffffff
mov dword [esi + 0x179c8], ebp
mov dword [esi + 0x179a8], edx
lea eax, [esi + 0x121c]
mov dword [esi + 0x179b0], edx
mov dword [esi + 0xfe0], eax
mov dword [esi + 0xfdc], ebp
mov dword [esi + 0x17b34], ebp
mov dword [esi + 0x17b30], 0xfffffffe
mov dword [esi + 0x17b28], edx
mov dword [esi + 0x1324], ebp
mov dword [esi + 0x179ac], edx
mov dword [esi + 0x179c4], ebp
mov dword [esi + 0x179c0], ebp
mov dword [esi + 0x1344], 6
mov dword [esi + 0xfc0], ebp
mov dword [esi + 0xfc4], ebp
mov dword [esi + 0xfbc], ebp
mov dword [esi + 0xfb8], ebp
mov eax, 0x10
mov dword [esi + 0xfb4], ebp
mov dword [esi + 0x1370], eax
mov dword [esi + 0x1374], eax
mov dword [esi + 0x1318], ebp
mov dword [esi + 0x1310], ebp
mov dword [esi + 0x1314], ebp
mov dword [esi + 0x131c], ebp
mov dword [esi + 0xffc], ebp
mov dword [esi + 0x1320], ebp
mov dword [esi + 0x1308], edx
mov dword [esi + 0xfac], 0x4a
mov dword [esi + 0x179e0], ebp
mov dword [esi + 0xff8], 4
mov dword [esi + 0xff4], 2
mov dword [esi + 0x179d8], ebp
mov dword [esi + 0x179dc], ebp
mov dword [esi + 0x17b20], edx
mov dword [esi + 0x134c], edx
mov dword [esi + 0x1338], ebp
mov dword [esi + 0x133c], ebp
mov ebx, 1
mov dword [esi + 0x1340], ebp
mov dword [esi + 0x135c], ebx
mov word [esi + 0x17a10], bp
mov word [esi + 0x10c4], bp
mov word [esi + 0x1004], bp
mov word [esi + 0x1084], bp
mov word [esi + 0x1044], bp
mov word [esi + 0x1144], bp
mov word [esi + 0x1184], bp
mov word [esi + 0x11c4], bp
mov dword [esi + 0x12e8], edx
mov dword [esi + 0x12e0], edx
mov dword [esi + 0x12f8], edx
mov dword [esi + 0x12f0], edx
mov dword [esi + 0x1354], ebp
mov dword [esi + 0x1358], ebp
mov dword [esi + 0x179cc], ebp
mov ecx, 0x5800
xor eax, eax
lea edi, [esi + 0x1378]
mov dword [esi + 0x1350], ebp
mov dword [esi + 0x179a0], edx
mov dword [esi + 0xfa8], edx
mov dword [esi + 0x179b8], ebp
mov dword [esi + 0x179bc], ebp
mov dword [esi + 0x179b4], ebp
mov dword [esi + 0x179d0], ebp
mov dword [esi + 0x179d4], ebp
mov dword [esi + 0x12dc], ebp
rep stosd dword es:[edi], eax
lea ecx, [esi + 0x17b38]
mov dword [esi + 0x17b38], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
lea edi, [esi + 0x17778]
mov dword [ecx + 0x10], eax
mov ecx, 0x80
rep stosd dword es:[edi], eax
mov eax, 0x17
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x1364], ebp
mov dword [esi + 0x136c], ebp
mov dword [esi + 0x1368], ebp
mov dword [esi + 0x17994], edx
mov dword [esi + 0x179a4], edx
mov dword [esi + 0x17998], edx
mov dword [esi + 0x1799c], edx
mov dword [esi + 0x17990], ebp
mov dword [esi + 4], ebp
mov dword [esi + 0x1300], ebp
mov dword [esi + 0xf9c], edx
mov dword [esi + 0xf98], edx
mov dword [esi + 0xf94], edx
mov dword [esi + 0x179ec], ebx
mov dword [esi + 0xfa0], eax
mov dword [esi + 0xfa4], eax
mov dword [esi + 0x1334], ebp
mov dword [esi + 0xfc8], ebp
mov dword [esi + 0xfcc], ebp
mov dword [esi + 0xfd0], ebp
mov dword [esi + 0xfe4], 2
mov dword [esi + 0xfe8], 0x14
mov dword [esi + 0x1360], ebp
mov dword [esi + 0x179e4], ebp
mov dword [esi + 0x17b4c], ebp
mov dword [esi + 0x17b50], ebx
mov dword [esi + 0x17b54], ebx
mov dword [esi + 0x1000], ebp
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret