Function at 0x49f6c0
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4e29be
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call fcn.004ab030
lea edi, [esi + 0x24]
xor ebp, ebp
mov ecx, edi
mov dword [esp + 0x1c], ebp
call fcn.0049ce10
lea ebx, [esi + 0x28]
mov byte [esp + 0x1c], 1
mov ecx, ebx
call fcn.00491290
lea ecx, [esi + 0x2c]
mov byte [esp + 0x1c], 2
call fcn.004aaa70
mov dword [esi + 0x30], 0x4e5b80
lea ecx, [esi + 0x38]
mov byte [esp + 0x1c], 3
mov dword [esi + 0x34], 0x4e6760
call fcn.004992e0
lea ecx, [esi + 0x860]
mov byte [esp + 0x1c], 4
call fcn.004a5f80
push ebp
lea ecx, [esi + 0xf54]
mov byte [esp + 0x20], 5
call fcn.0048c8b0
lea ecx, [esi + 0x11fc]
mov byte [esp + 0x1c], 6
call fcn.0045df60
lea ecx, [esi + 0x1214]
mov byte [esp + 0x1c], 7
call fcn.0045df60
lea ecx, [esi + 0x122c]
mov byte [esp + 0x1c], 8
call fcn.0045df60
lea ecx, [esi + 0x1244]
mov byte [esp + 0x1c], 9
call fcn.0045df60
lea ecx, [esi + 0x125c]
mov byte [esp + 0x1c], 0xa
call fcn.0045df60
lea ecx, [esi + 0x1274]
mov byte [esp + 0x1c], 0xb
call fcn.0045df60
lea ecx, [esi + 0x128c]
mov byte [esp + 0x1c], 0xc
call fcn.0045df60
lea ecx, [esi + 0x12a4]
mov byte [esp + 0x1c], 0xd
call fcn.0045df60
lea ecx, [esi + 0x12bc]
mov byte [esp + 0x1c], 0xe
call fcn.0045df60
mov dword [esi], 0x4e7224
mov dword [edi], 0x4e7220
mov dword [ebx], 0x4e7208
mov dword [esi + 0x2c], 0x4e7204
mov dword [esi + 0x30], 0x4e71f4
mov byte [esp + 0x1c], 0xf
mov dword [esi + 0x34], 0x4e71e4
mov ecx, esi
call fcn.004a03d0
mov dword [esi + 0xf50], ebp
mov dword [esi + 0xfa8], ebp
mov dword [esi + 0x1340], 0x18
mov dword [esi + 0x17b08], ebp
or edx, 0xffffffff
mov dword [esi + 0x179bc], ebp
mov dword [esi + 0x1799c], edx
lea eax, [esi + 0x1214]
mov dword [esi + 0x179a4], edx
mov dword [esi + 0xfd8], eax
mov dword [esi + 0xfd4], ebp
mov dword [esi + 0x17b28], ebp
mov dword [esi + 0x17b24], 0xfffffffe
mov dword [esi + 0x17b1c], edx
mov dword [esi + 0x131c], ebp
mov dword [esi + 0x179a0], edx
mov dword [esi + 0x179b8], ebp
mov dword [esi + 0x179b4], ebp
mov dword [esi + 0x133c], 6
mov dword [esi + 0xfb8], ebp
mov dword [esi + 0xfbc], ebp
mov dword [esi + 0xfb4], ebp
mov dword [esi + 0xfb0], ebp
mov eax, 0x10
mov dword [esi + 0xfac], ebp
mov dword [esi + 0x1364], eax
mov dword [esi + 0x1368], eax
mov dword [esi + 0x1310], ebp
mov dword [esi + 0x1308], ebp
mov dword [esi + 0x130c], ebp
mov dword [esi + 0x1314], ebp
mov dword [esi + 0xff4], ebp
mov dword [esi + 0x1318], ebp
mov dword [esi + 0x1300], edx
mov dword [esi + 0xfa4], 0x4a
mov dword [esi + 0x179d4], ebp
mov dword [esi + 0xff0], 4
mov dword [esi + 0xfec], 2
mov dword [esi + 0x179cc], ebp
mov dword [esi + 0x179d0], ebp
mov dword [esi + 0x17b14], edx
mov dword [esi + 0x1344], edx
mov dword [esi + 0x1330], ebp
mov dword [esi + 0x1334], ebp
mov ebx, 1
mov dword [esi + 0x1338], ebp
mov dword [esi + 0x1354], ebx
mov word [esi + 0x17a04], bp
mov word [esi + 0x10bc], bp
mov word [esi + 0xffc], bp
mov word [esi + 0x107c], bp
mov word [esi + 0x103c], bp
mov word [esi + 0x113c], bp
mov word [esi + 0x117c], bp
mov word [esi + 0x11bc], bp
mov dword [esi + 0x12e0], edx
mov dword [esi + 0x12d8], edx
mov dword [esi + 0x12f0], edx
mov dword [esi + 0x12e8], edx
mov dword [esi + 0x134c], ebp
mov dword [esi + 0x1350], ebp
mov dword [esi + 0x179c0], ebp
mov ecx, 0x5800
xor eax, eax
lea edi, [esi + 0x136c]
mov dword [esi + 0x1348], ebp
mov dword [esi + 0x17994], edx
mov dword [esi + 0xfa0], edx
mov dword [esi + 0x179ac], ebp
mov dword [esi + 0x179b0], ebp
mov dword [esi + 0x179a8], ebp
mov dword [esi + 0x179c4], ebp
mov dword [esi + 0x179c8], ebp
mov dword [esi + 0x12d4], ebp
rep stosd dword es:[edi], eax
lea ecx, [esi + 0x17b2c]
mov dword [esi + 0x17b2c], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
lea edi, [esi + 0x1776c]
mov dword [ecx + 0x10], eax
mov ecx, 0x80
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x14]
mov eax, 0x17
mov dword [esi + 0x135c], ebp
mov dword [esi + 0x1360], ebp
mov dword [esi + 0x17988], edx
mov dword [esi + 0x17998], edx
mov dword [esi + 0x1798c], edx
mov dword [esi + 0x17990], edx
mov dword [esi + 0x17984], ebp
mov dword [esi + 4], ebp
mov dword [esi + 0x12f8], ebp
mov dword [esi + 0xf94], edx
mov dword [esi + 0xf90], edx
mov dword [esi + 0xf8c], edx
mov dword [esi + 0x179e0], ebx
mov dword [esi + 0xf98], eax
mov dword [esi + 0xf9c], eax
mov dword [esi + 0x132c], ebp
mov dword [esi + 0xfc0], ebp
mov dword [esi + 0xfc4], ebp
mov dword [esi + 0xfc8], ebp
mov dword [esi + 0xfdc], 2
mov dword [esi + 0xfe0], 0x14
mov dword [esi + 0x1358], ebp
mov dword [esi + 0x179d8], ebp
mov dword [esi + 0x17b40], ebp
mov dword [esi + 0x17b44], ebx
mov dword [esi + 0x17b48], ebx
mov dword [esi + 0xff8], ebp
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret