Function at 0x44d280
Capabilities:
Check for peb ntglobalflag flag
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e8455
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
push ebx
push esi
push edi
mov eax, dword [0x11811f8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x10], ebx
push 0
mov dword [ebp - 0x14], 0
push dword [ebp + 8]
call dword [0x4f9014]
lea ecx, [ebx + 0x38]
mov dword [ebp - 4], 0
mov dword [ebx], vtable.ParamSeting.0
mov dword [ebx + 8], vtable.ParamSeting.1.0
mov byte [ebx + 0x2a], 0
mov dword [ebx + 0x30], 0
mov word [ebx + 0x36], 0
call dword [0x4f85d4]
lea ecx, [ebx + 0x3c]
call dword [0x4f84c8]
lea ecx, [ebx + 0x40]
call dword [0x4f84c8]
lea ecx, [ebx + 0x44]
call dword [0x4f85d4]
push 0x20
push 0x113b294
mov byte [ebp - 4], 4
call dword [0x4f8504]
add esp, 8
mov dword [ebx + 0x58], eax
lea ecx, [ebx + 0x60]
mov dword [ebx + 0x5c], 0
call dword [0x4f85d4]
push 0x450
mov byte [ebp - 4], 6
mov dword [ebx + 0x64], 0x7080
mov dword [ebx + 0x68], 1
call fcn.004e094b
add esp, 4
mov dword [ebx + 0x6c], eax
lea ecx, [ebx + 0x70]
call dword [0x4f85d4]
mov dword [ebx + 0x78], 0
mov ecx, ebx
mov dword [ebx + 0x7c], 0
mov dword [ebx + 0x80], 0
mov dword [ebx + 0x84], 0
mov dword [ebx + 0xb8], 0xffffffff
mov dword [ebx + 0xbc], 0xffffffff
mov dword [ebx + 0xc0], 0xffffffff
push 0
mov dword [ebx + 0x108], 0
mov dword [ebx + 0x10c], 0xfa
mov dword [ebx + 0x110], 0
mov dword [ebx + 0xf8], 0
mov dword [ebx + 0xfc], 0
mov dword [ebx + 0x100], 0
mov dword [ebx + 0x104], 0
mov dword [ebx + 0x114], 0
mov dword [ebx + 0x118], 0
push 0x4c
mov byte [ebp - 4], 7
mov dword [ebx + 0x128], 0
mov byte [ebx + 0x12c], 0
call dword [0x4f9230]
mov ecx, dword [ebx + 0x6c]
push ebx
call fcn.0047c0d0
mov ecx, dword [ebx + 0x6c]
xor eax, eax
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x1c], 0
mov dword [ebx + 0x20], 0
mov dword [ebx + 0x24], 0
mov dword [ebx + 0x74], 0
mov word [ebx + 0x28], ax
mov ecx, dword [ecx + 0xac]
push eax
call dword [0x4f8b8c]
mov ecx, dword [ebx + 0x6c]
push 1
mov ecx, dword [ecx + 0xfc]
call dword [0x4f8c04]
push 1
mov ecx, ebx
call fcn.00471c00
push 0x10
call fcn.004e094b
mov edi, eax
add esp, 4
mov dword [ebp + 8], edi
push ebx
mov ecx, edi
mov byte [ebp - 4], 8
call dword [0x4f869c]
mov esi, dword [0x4f8bb8]
mov dword [edi], vtable.QIntValidator.0
mov ecx, dword [ebx + 0x6c]
push edi
mov byte [ebp - 4], 7
mov ecx, dword [ecx + 0xcc]
call esi
mov ecx, dword [ebx + 0x6c]
push edi
mov ecx, dword [ecx + 0xdc]
call esi
mov ecx, dword [ebx + 0x6c]
push edi
mov ecx, dword [ecx + 0xc0]
call esi
mov ecx, dword [ebx + 0x6c]
push edi
mov ecx, dword [ecx + 0xe0]
call esi
mov ecx, dword [ebx + 0x6c]
push edi
mov ecx, dword [ecx + 0x104]
call esi
mov ecx, dword [ebx + 0x6c]
push edi
mov ecx, dword [ecx + 0x310]
call esi
mov ecx, dword [ebx + 0x6c]
push edi
mov ecx, dword [ecx + 0x30c]
call esi
mov ecx, dword [ebx + 0x6c]
push edi
mov ecx, dword [ecx + 0x2fc]
call esi
mov ecx, dword [ebx + 0x6c]
mov ebx, dword [0x4f9024]
mov ecx, dword [ecx + 8]
call ebx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x6c]
mov ecx, dword [ecx + 0x28]
call ebx
push 0x18
call fcn.004e094b
mov esi, eax
mov dword [ebp - 0x24], esi
mov edi, dword [0x4f8504]
push 0
push 0x113a6bd
mov byte [ebp - 4], 9
call edi
mov dword [ebp - 0x18], eax
push 0
push 0x113a6bd
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x14], 1
call edi
add esp, 0x14
mov dword [ebp + 8], eax
mov dword [ebp - 4], 0xb
push 0x103
push 0
push ecx
mov eax, esp
mov dword [ebp - 0x14], 3
mov ecx, esi
mov dword [eax], 0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 8]
push eax
push 1
call dword [0x4f8f74]
mov dword [esi], vtable.QMessageBox.0
mov dword [esi + 8], vtable.QMessageBox.1.0
mov eax, dword [ebp - 0x10]
lea ecx, [ebp + 8]
mov dword [eax + 0x124], esi
call dword [0x4f85cc]
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 7
call dword [0x4f85cc]
mov esi, dword [ebp - 0x10]
push ecx
mov eax, esp
mov dword [eax], 0x400
mov ecx, dword [esi + 0x124]
call dword [0x4f8f6c]
lea eax, [ebp - 0x18]
mov byte [ebp + 0xb], 0
push eax
lea ecx, [ebp + 0xb]
call fcn.0045beb0
mov ecx, dword [esi + 0x124]
push eax
push 0x400
mov byte [ebp - 4], 0xe
call dword [0x4f8f60]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 7
call dword [0x4f85cc]
mov ecx, dword [esi + 0x124]
push 0xc8
call dword [0x4f8fac]
mov ecx, dword [esi + 0x124]
push 0x50
call dword [0x4f8fa8]
lea eax, [ebp + 8]
push eax
lea ecx, [ebp + 0xb]
call fcn.004504a0
mov ecx, dword [esi + 0x124]
push eax
mov byte [ebp - 4], 0xf
call dword [0x4f8f5c]
lea ecx, [ebp + 8]
mov byte [ebp - 4], 7
call dword [0x4f85cc]
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x32c]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x330]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x334]
call ebx
mov ecx, dword [esi + 0x6c]
push 0
mov ecx, dword [ecx]
call dword [0x4f8be0]
lea eax, [ebp - 0x20]
push eax
call dword [0x4f859c]
mov byte [ebp - 4], 0x10
push 8
push 0x114015c
call edi
add esp, 0xc
mov dword [ebp + 8], eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x20]
call dword [0x4f832c]
lea ecx, [ebp + 8]
call dword [0x4f85cc]
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x18]
call dword [0x4f85d0]
push 0xffffffffffffffff
mov esi, eax
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x24]
push 0x1149318
push eax
call dword [0x4f85bc]
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x15
call dword [0x4f85c4]
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x14
call dword [0x4f85cc]
mov edi, dword [ebp - 0x10]
push esi
mov ecx, dword [edi + 0x6c]
mov ecx, dword [ecx + 0x398]
call dword [0x4f9000]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x13
call dword [0x4f85cc]
push 8
call fcn.004e094b
mov esi, eax
add esp, 4
mov dword [ebp - 0x28], esi
push edi
mov edi, dword [0x4f8734]
mov ecx, esi
mov byte [ebp - 4], 0x16
call edi
mov eax, dword [ebp - 0x10]
mov dword [esi], vtable.QNetworkAccessManager.0
push 8
mov byte [ebp - 4], 0x13
mov dword [eax + 0x4c], esi
call fcn.004e094b
mov esi, eax
add esp, 4
mov dword [ebp - 0x28], esi
push dword [ebp - 0x10]
mov ecx, esi
mov byte [ebp - 4], 0x17
call edi
mov eax, dword [ebp - 0x10]
mov dword [esi], vtable.QNetworkAccessManager.0
push 8
mov byte [ebp - 4], 0x13
mov dword [eax + 0x50], esi
call fcn.004e094b
mov esi, eax
add esp, 4
mov dword [ebp - 0x28], esi
push dword [ebp - 0x10]
mov ecx, esi
mov byte [ebp - 4], 0x18
call edi
mov eax, dword [ebp - 0x10]
mov edi, dword [0x4f8494]
push 0
push 0x114931c
push eax
mov dword [esi], vtable.QNetworkAccessManager.0
push 0x113b2e0
push dword [eax + 0x4c]
mov dword [eax + 0x54], esi
lea eax, [ebp - 0x24]
push eax
mov byte [ebp - 4], 0x13
call edi
mov esi, dword [0x4f84cc]
lea ecx, [ebp - 0x24]
add esp, 0x18
call esi
mov eax, dword [ebp - 0x10]
push 0
push 0x1149344
push eax
push 0x113b2e0
push dword [eax + 0x50]
lea eax, [ebp - 0x24]
push eax
call edi
add esp, 0x18
lea ecx, [ebp - 0x24]
call esi
mov eax, dword [ebp - 0x10]
push 0
push 0x113b2b8
push eax
push 0x113b2e0
push dword [eax + 0x54]
lea eax, [ebp - 0x24]
push eax
call edi
add esp, 0x18
lea ecx, [ebp - 0x24]
call esi
mov eax, dword [ebp - 0x10]
push 0
push 0x114936c
push eax
push 0x1149380
push eax
lea eax, [ebp - 0x24]
push eax
call edi
add esp, 0x18
lea ecx, [ebp - 0x24]
call esi
push 9
push 0x11489e0
call dword [0x4f8504]
add esp, 8
mov dword [ebp - 0x18], eax
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 0x19
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x78]
call dword [0x4f8cc4]
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x13
call dword [0x4f85cc]
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x3b0]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x3a0]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x398]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x3b4]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x144]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x170]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x39c]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x3b8]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x388]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x3c0]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x394]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x390]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x384]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x37c]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x3c8]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x3c4]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x3a4]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x3ac]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x3a8]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x38c]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x380]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x3bc]
call ebx
mov ecx, dword [esi + 0x6c]
mov ecx, dword [ecx + 0x378]
call ebx
lea ecx, [ebp - 0x1c]
call dword [0x4f85cc]
lea ecx, [ebp - 0x20]
call dword [0x4f85ac]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4