Function at 0x4fc770
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
mov ecx, 9
push 0
push 0
dec ecx
jne 0x4fc778
push ebx
push esi
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x4fca64
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebx + 4]
call fcn.004026b0
test al, al
je 0x4fc7ad
mov ecx, esi
mov edx, dword [ebx + 4]
mov eax, ebx
call fcn.004fd06c
jmp 0x4fc7de
lea edx, [ebp - 0xc]
xor eax, eax
call fcn.00401048
mov eax, dword [ebp - 0xc]
lea edx, [ebp - 8]
call fcn.00402718
mov edx, dword [ebp - 8]
lea eax, [ebp - 4]
mov ecx, 0x4fca80
call fcn.00401458
mov ecx, esi
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.004fd06c
push 1
mov ecx, 0x4fcab0
mov edx, 0x4fcafc
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi + 0x10]
mov byte [ebx + 0x14], al
push 0
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x4fcb10
mov edx, 0x4fcafc
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x10]
lea eax, [ebx + 0x18]
call fcn.004013d0
push 0
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x4fcb40
mov edx, 0x4fcafc
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x14]
lea eax, [ebx + 0x1c]
call fcn.004013d0
push 0x4fcb74
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4fcbac
mov edx, 0x4fcafc
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x18]
lea eax, [ebx + 0x20]
call fcn.004013d0
push 0x4fcbd8
lea eax, [ebp - 0x1c]
push eax
mov ecx, 0x4fcc50
mov edx, 0x4fcca8
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x1c]
lea eax, [ebx + 0x24]
call fcn.004013d0
push 0x4fcccc
lea eax, [ebp - 0x20]
push eax
mov ecx, 0x4fcd3c
mov edx, 0x4fcca8
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x20]
lea eax, [ebx + 0x28]
call fcn.004013d0
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4fcd94
mov edx, 0x4fcca8
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x24]
lea eax, [ebx + 0x2c]
call fcn.004013d0
push 0
lea eax, [ebp - 0x28]
push eax
mov ecx, 0x4fcdf0
mov edx, 0x4fcca8
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x28]
lea eax, [ebx + 0x30]
call fcn.004013d0
push 0
lea eax, [ebp - 0x2c]
push eax
mov ecx, 0x4fce50
mov edx, 0x4fce64
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x2c]
lea eax, [ebx + 0x34]
call fcn.004013d0
push 0
lea eax, [ebp - 0x30]
push eax
mov ecx, 0x4fce7c
mov edx, 0x4fce64
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x30]
lea eax, [ebx + 0x38]
call fcn.004013d0
push 1
mov ecx, 0x4fce90
mov edx, 0x4fce64
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi + 0x10]
mov byte [ebx + 0x3c], al
push 0x4fcec8
lea eax, [ebp - 0x34]
push eax
mov ecx, 0x4fcee0
mov edx, 0x4fce64
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x34]
lea eax, [ebx + 0x40]
call fcn.004013d0
push 0
mov ecx, 0x4fcf04
mov edx, 0x4fcf34
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi + 0x10]
mov byte [ebx + 0x44], al
push 0
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x4fcf50
mov edx, 0x4fcf34
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov eax, dword [ebp - 0x38]
mov edx, 0xf
call fcn.00402680
mov dword [ebx + 0x48], eax
push 0
mov ecx, 0x4fcf78
mov edx, 0x4fcfa0
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi + 0x10]
mov byte [ebx + 0x4c], al
push 0
lea eax, [ebp - 0x3c]
push eax
mov ecx, 0x4fcfc0
mov edx, 0x4fcfa0
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x3c]
lea eax, [ebx + 0x50]
call fcn.004013d0
push 0
lea eax, [ebp - 0x40]
push eax
mov ecx, 0x4fcfec
mov edx, 0x4fcfa0
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x40]
lea eax, [ebx + 0x54]
call fcn.004013d0
push 0
lea eax, [ebp - 0x44]
push eax
mov ecx, 0x4fd01c
mov edx, 0x4fcfa0
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x44]
lea eax, [ebx + 0x58]
call fcn.004013d0
push 0
lea eax, [ebp - 0x48]
push eax
mov ecx, 0x4fd044
mov edx, 0x4fcfa0
mov eax, dword [ebx + 0x10]
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x48]
lea eax, [ebx + 0x5c]
call fcn.004013d0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4fca6b
lea eax, [ebp - 0x48]
mov edx, 0x12
call fcn.004013c8
ret