Function at 0x4cfe10
Capabilities:
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4de8ee
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call fcn.004cbad0
xor ebp, ebp
lea ecx, [esi + 4]
mov dword [esp + 0x1c], ebp
call fcn.004d6450
lea ecx, [esi + 0x28]
mov byte [esp + 0x1c], 1
call fcn.004d5e90
mov dword [esi + 0x2c], 0x4dfb90
mov dword [esi + 0x30], ebp
or ebx, 0xffffffff
mov dword [esi + 0x40], ebp
mov dword [esi + 0x44], ebx
mov dword [esi + 0x68], ebp
mov dword [esi + 0x6c], ebp
mov dword [esi + 0x70], ebp
push ebp
lea ecx, [esi + 0x78]
mov byte [esp + 0x20], 2
mov dword [esi + 0x74], ebx
call fcn.004b4e50
mov dword [esi + 0xb0], ebp
mov dword [esi + 0xbc], ebp
mov dword [esi + 0xc0], ebp
mov dword [esi + 0xc4], ebp
mov dword [esi + 0xc8], ebp
mov eax, 1
mov dword [esi + 0xcc], ebp
mov dword [esi + 0xd0], eax
mov dword [esi + 0xd4], ebx
mov dword [esi + 0xd8], ebp
mov dword [esi + 0xdc], ebx
mov dword [esi + 0xe0], eax
mov dword [esi + 0xe4], ebp
mov dword [esi + 0xe8], ebp
mov dword [esi + 0xec], ebp
mov dword [esi + 0xf0], ebp
mov dword [esi + 0xf4], ebp
mov dword [esi + 0xf8], ebp
mov dword [esi + 0xfc], ebx
mov dword [esi + 0x100], ebx
mov dword [esi + 0x104], ebp
lea edx, [esi + 0x1a0]
mov dword [esi + 0x108], ebp
mov dword [esi + 0x114], ebp
mov ecx, 0x18
xor eax, eax
mov edi, edx
mov dword [esi + 0x118], ebp
rep stosd dword es:[edi], eax
mov dword [edx + 0x60], ebp
mov dword [edx + 0x1a0], ebp
mov dword [edx + 0x1ec], ebp
mov dword [edx + 0x1e8], ebx
mov dword [edx + 0x1a4], ebp
mov dword [esi + 0x420], ebp
mov dword [esi + 0x424], ebp
mov dword [esi + 0x428], ebp
mov dword [esi + 0x42c], ebp
mov dword [esi + 0x430], ebp
mov eax, 0xa
mov dword [esi + 0x434], ebp
mov dword [esi + 0x438], eax
mov dword [esi + 0x43c], eax
mov dword [esi + 0x440], ebp
mov eax, 1
mov dword [esi + 0x444], ebp
mov dword [esi + 0x44c], eax
mov dword [esi + 0x450], eax
mov dword [esi + 0x460], ebp
mov dword [esi + 0x870], ebp
mov dword [esi + 0x874], ebp
mov dword [esi + 0x88c], ebp
mov dword [esi + 0x890], ebx
mov ecx, 0x10
mov dword [esi + 0x894], ebp
mov dword [esi + 0x898], ecx
mov dword [esi + 0x89c], ecx
mov dword [esi], 0x4e5bf4
push str.REBAR_CHEVRON
mov dword [esi + 4], 0x4e5be8
push edx
mov dword [esi + 0x28], 0x4e5be4
mov dword [esi + 0x2c], 0x4e5bd4
mov dword [esi + 0x110], ebp
mov dword [esi + 0x10c], ebp
mov dword [esi + 0xb8], ebx
mov dword [esi + 0xb4], ebx
mov word [esi + 0x120], bp
mov word [esi + 0x160], bp
mov word [esi + 0x394], bp
mov word [esi + 0x3d0], bp
mov dword [esi + 0x454], 0x808080
mov dword [esi + 0x458], 0xffffff
mov dword [esi + 0x45c], eax
mov dword [esi + 0x340], ebp
mov dword [esi + 0x350], ebx
mov dword [esi + 0x348], ebx
mov dword [esi + 0x4c], ebp
mov dword [esi + 0x50], ebp
mov dword [esi + 0x64], ebp
mov dword [esi + 0x54], ebp
mov dword [esi + 0x58], ebp
mov dword [esi + 0x5c], ebp
mov dword [esi + 0x60], ebp
call dword [sym.imp.MSVCRT.dll_wcscpy]
add esp, 8
mov ecx, 0x82
xor eax, eax
lea edi, [esi + 0x468]
mov dword [esi + 0x464], ebp
mov dword [esi + 0x34], ebp
mov dword [esi + 0x3c], ebp
mov dword [esi + 0x38], ebp
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x878], ebp
mov dword [esi + 0x87c], ebp
mov dword [esi + 0x880], ebp
mov dword [esi + 0x884], ebp
mov dword [esi + 0x888], ebp
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret