Function at 0x4c30b0
Capabilities:
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d4d73
mov eax, dword fs:[0]
push eax
sub esp, 0x118
mov eax, dword [0x599224]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x70]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x10]
call dword [0x4d6960]
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0x10]
mov dword [edx], vtable.Window.1.0
mov eax, dword [ebp - 0x10]
mov dword [eax + 8], vtable.Window.0
push 0
mov ecx, dword [ebp - 0x10]
add ecx, 0x18
call dword [0x4d62e0]
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x28], 0
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x2c], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x30], 0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x3c], 0
push 0x57a828
mov ecx, dword [ebp - 0x10]
add ecx, 0x40
call dword [0x4d65e4]
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x10]
add ecx, 0x44
call dword [0x4d65f4]
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x48], 0
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x4c], 0
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 0x4d], 0
mov ecx, dword [ebp - 0x10]
add ecx, 0x50
call dword [0x4d64e4]
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x10]
add edx, 0x5c
mov dword [ebp - 0x74], edx
mov eax, dword [ebp - 0x74]
mov ecx, dword [0x4d625c]
mov dword [eax], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x60], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x64], 0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x7c], 0
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x80], 0
push str.LYK_ZEC_V1.5.0
mov ecx, dword [ebp - 0x10]
add ecx, 0x84
call dword [0x4d65e4]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x1ca8], 0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x1cac], 0
push str.00:00
mov ecx, dword [ebp - 0x10]
add ecx, 0x1cb0
call dword [0x4d65e4]
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1cb4], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x1cb8], 0x3c
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x1cc0], 0
push str.php.exe_img_conv_core.php__nametemp_abcimgscreen__1formatbin_565_swapcftrue_coloroutdirscreen__
mov ecx, dword [ebp - 0x10]
add ecx, 0x1cc4
call dword [0x4d65e4]
mov byte [ebp - 4], 8
push 0x4da556
mov ecx, dword [ebp - 0x10]
add ecx, 0x1cc8
call dword [0x4d65e4]
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1cd0], 0
mov eax, dword [ebp - 0x10]
add eax, 0x1cd4
mov dword [ebp - 0x78], eax
call dword [0x4d66f0]
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp - 0x78]
mov edx, dword [ebp - 0x7c]
mov dword [ecx], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x10]
add eax, 0x1cd8
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [0x4d625c]
mov dword [ecx], edx
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x10]
mov byte [eax + 0x1cdc], 0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x1ce0], 0
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1ce4], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x1ce8], 0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x1cec], 0
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1cf0], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x1cf4], 0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x1cf8], 0
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1cfc], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x1d00], 0
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x1d04], 0
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1d08], 0
mov eax, dword [ebp - 0x10]
mov dword [eax + 0x1d0c], 0
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 0x1d10], 0
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x1d14], 0
push 8
call fcn.0046fb86
add esp, 4
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x18], 0
je 0x4c33b8
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x18]
call dword [0x4d6550]
mov ecx, dword [ebp - 0x18]
mov dword [ecx], vtable.QProcess.0
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], edx
jmp 0x4c33bf
mov dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x84], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x84]
mov dword [ecx + 0x1cc0], edx
lea eax, [ebp - 0x8c]
push eax
mov ecx, dword [ebp - 0x10]
call dword [0x4d64ac]
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x88]
mov edx, dword [ecx]
cmp dword [edx + 4], 0
jne 0x4c3408
mov dword [ebp - 0x38], 1
jmp 0x4c340f
mov dword [ebp - 0x38], 0
mov al, byte [ebp - 0x38]
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0x8c]
call dword [0x4d65f8]
movzx ecx, byte [ebp - 0x11]
test ecx, ecx
je 0x4c3477
xor edx, edx
mov byte [ebp - 0x21], dl
mov dword [ebp - 0x90], 0x59b64c
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x94], ecx
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x98], edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x98]
push eax
mov ecx, dword [ebp - 0x10]
call dword [0x4d64a0]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x3c]
call dword [0x4d65f8]
mov dword [ebp - 0x9c], 0x800
mov ecx, dword [ebp - 0x9c]
or ecx, 0x4000
mov dword [ebp - 0xa0], ecx
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xa8], eax
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0xac], ecx
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0xb0], edx
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ecx]
or edx, 0xc000
mov dword [ebp - 0xb8], edx
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xbc], eax
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0xc0], ecx
mov edx, dword [ebp - 0xc0]
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xc8], eax
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xcc], ecx
mov edx, dword [ebp - 0xcc]
mov eax, dword [edx]
or eax, 1
mov dword [ebp - 0xd0], eax
mov ecx, dword [ebp - 0xd0]
mov dword [ebp - 0xd4], ecx
mov edx, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xdc], eax
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0xe0], ecx
lea edx, [ebp - 0xe0]
mov dword [ebp - 0xe4], edx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x10]
call dword [0x4d6984]
push str.HexGearsCloud
mov ecx, dword [ebp - 0x10]
add ecx, 0x40
call dword [0x4d62f0]
mov ecx, dword [ebp - 0x10]
call fcn.004c2d50
fstp dword [ebp - 0x44]
call fcn.00470f60
mov ecx, eax
call fcn.004c2c50
fstp dword [ebp - 0x1c]
movss xmm0, dword [ebp - 0x44]
comiss xmm0, dword [0x57cee0]
jb 0x4c35cb
movss xmm0, dword [0x57cf60]
mulss xmm0, dword [ebp - 0x1c]
movss dword [ebp - 0x40], xmm0
jmp 0x4c35dd
movss xmm0, dword [0x57cf60]
mulss xmm0, dword [ebp - 0x1c]
movss dword [ebp - 0x40], xmm0
movss xmm0, dword [ebp - 0x40]
movss dword [ebp - 0x30], xmm0
movss xmm0, dword [ebp - 0x44]
comiss xmm0, dword [0x57cee0]
jb 0x4c3609
movss xmm0, dword [0x57cf6c]
mulss xmm0, dword [ebp - 0x1c]
movss dword [ebp - 0x48], xmm0
jmp 0x4c361b
movss xmm0, dword [0x57cf6c]
mulss xmm0, dword [ebp - 0x1c]
movss dword [ebp - 0x48], xmm0
movss xmm0, dword [ebp - 0x48]
movss dword [ebp - 0x2c], xmm0
cvttss2si edx, dword [ebp - 0x2c]
mov dword [ebp - 0x124], edx
cvttss2si eax, dword [ebp - 0x30]
mov dword [ebp - 0x120], eax
cvttss2si ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x114], ecx
cvttss2si edx, dword [ebp - 0x30]
mov dword [ebp - 0x110], edx
lea eax, [ebp - 0x114]
push eax
mov ecx, dword [ebp - 0x10]
call dword [0x4d6970]
sub esp, 8
movsd xmm0, qword [0x57cef8]
movsd qword [esp], xmm0
mov ecx, dword [ebp - 0x10]
call dword [0x4d6858]
mov ecx, dword [ebp - 0x10]
mov byte [ecx + 0x1cdc], 1
push 1
push 2
mov ecx, dword [ebp - 0x10]
call dword [0x4d6954]
push 0xffffffffffffffff
push str.http:__client.longeplay.cn_local_
lea edx, [ebp - 0x28]
push edx
call dword [0x4d65dc]
add esp, 0xc
mov byte [ebp - 4], 0xe
mov eax, dword [ebp - 0x10]
add eax, 0x40
push eax
lea ecx, [ebp - 0x28]
call dword [0x4d65d0]
lea ecx, [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x50]
call dword [0x4d65c8]
mov edx, dword [ebp - 0x4c]
or edx, 1
mov dword [ebp - 0x4c], edx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
call dword [0x4d65f8]
lea eax, [ebp - 0x50]
mov dword [ebp - 0xe8], eax
mov byte [ebp - 4], 0xf
push str._client.html
mov ecx, dword [ebp - 0xe8]
push ecx
lea edx, [ebp - 0x6c]
push edx
call fcn.00402130
add esp, 0xc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x50]
call dword [0x4d65f8]
push 0x38
call fcn.0046fb86
add esp, 4
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x54], 0
je 0x4c3738
push 0
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x54]
call fcn.004b5570
mov dword [ebp - 0x58], eax
jmp 0x4c373f
mov dword [ebp - 0x58], 0
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0xec], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xec]
mov dword [edx + 0x30], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xf0], edx
cvttss2si eax, dword [ebp - 0x2c]
mov dword [ebp - 0x11c], eax
cvttss2si ecx, dword [ebp - 0x30]
mov dword [ebp - 0x118], ecx
lea edx, [ebp - 0x11c]
push edx
mov ecx, dword [ebp - 0xf0]
call dword [0x4d6970]
push 0
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0xfc]
call dword [0x4d6474]
mov dword [ebp - 0xf4], eax
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xf8], ecx
mov byte [ebp - 4], 0x13
lea edx, [ebp - 0x124]
push edx
mov eax, dword [ebp - 0xf8]
push eax
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + 0x30]
call fcn.004b5500
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xfc]
call dword [0x4d6470]
push 8
call fcn.0046fb86
add esp, 4
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x20], 0
je 0x4c3811
push 0
mov ecx, dword [ebp - 0x20]
call dword [0x4d6680]
mov edx, dword [ebp - 0x20]
mov dword [edx], vtable.QThread.0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5c], eax
jmp 0x4c3818
mov dword [ebp - 0x5c], 0
mov ecx, dword [ebp - 0x5c]
mov dword [ebp - 0x100], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x100]
mov dword [edx + 0x48], eax
push 1
push 0x57aa40
mov ecx, dword [ebp - 0x10]
push ecx
push 0x57a980
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0x30]
push eax
lea ecx, [ebp - 0x104]
push ecx
call dword [0x4d6698]
add esp, 0x18
lea ecx, [ebp - 0x104]
call dword [0x4d6638]
mov ecx, dword [ebp - 0x10]
call fcn.004b96c0
push 0
push str.1slot_writeDevice_QString_
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0x64]
push eax
push str.2SigWriteDevice_QString_
mov ecx, dword [ebp - 0x10]
push ecx
lea edx, [ebp - 0x108]
push edx
call dword [0x4d6698]
add esp, 0x18
lea ecx, [ebp - 0x108]
call dword [0x4d6638]
push 0x90
call fcn.0046fb86
add esp, 4
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x60], 0
je 0x4c38c6
mov ecx, dword [ebp - 0x60]
call fcn.004a8f70
mov dword [ebp - 0x64], eax
jmp 0x4c38cd
mov dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x10c], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10c]
mov dword [ecx + 0x60], edx
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0x10]
call dword [0x4d646c]
push str.PXiGua
mov ecx, dword [ebp - 0x10]
add ecx, 0x40
call dword [0x4d65fc]
movzx ecx, al
test ecx, ecx
je 0x4c3913
mov ecx, dword [ebp - 0x10]
call fcn.004b8c50
push str.HardwareMonitorDll.dll
lea ecx, [ebp - 0x68]
call dword [0x4d65e4]
mov byte [ebp - 4], 0x16
lea edx, [ebp - 0x68]
push edx
mov ecx, dword [ebp - 0x10]
add ecx, 0x18
call dword [0x4d62cc]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x68]
call dword [0x4d65f8]
mov ecx, dword [ebp - 0x10]
add ecx, 0x18
call dword [0x4d62d4]
movzx eax, al
test eax, eax
je 0x4c396c
push str.get_hardware_msg
mov ecx, dword [ebp - 0x10]
add ecx, 0x18
call dword [0x4d62d8]
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x28], eax
mov edx, dword [ebp - 0x10]
xorps xmm0, xmm0
movss dword [edx + 0x68], xmm0
mov eax, dword [ebp - 0x10]
xorps xmm0, xmm0
movss dword [eax + 0x6c], xmm0
mov ecx, dword [ebp - 0x10]
xorps xmm0, xmm0
movss dword [ecx + 0x70], xmm0
mov edx, dword [ebp - 0x10]
xorps xmm0, xmm0
movss dword [edx + 0x74], xmm0
mov eax, dword [ebp - 0x10]
xorps xmm0, xmm0
movss dword [eax + 0x78], xmm0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x6c]
call dword [0x4d65f8]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 4