Function at 0x4d0f30
Capabilities:
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4e006e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
call fcn.004ccba0
xor ebp, ebp
lea ecx, [esi + 4]
mov dword [esp + 0x1c], ebp
call fcn.004d7b60
lea ecx, [esi + 0x28]
mov byte [esp + 0x1c], 1
call fcn.004d7580
mov dword [esi + 0x2c], 0x4e1b80
mov dword [esi + 0x30], ebp
or ebx, 0xffffffff
mov dword [esi + 0x44], ebp
mov dword [esi + 0x48], ebx
mov dword [esi + 0x6c], ebp
mov dword [esi + 0x70], ebp
mov dword [esi + 0x74], ebp
push ebp
lea ecx, [esi + 0x7c]
mov byte [esp + 0x20], 2
mov dword [esi + 0x78], ebx
call fcn.004b70a0
mov dword [esi + 0xb4], ebp
mov dword [esi + 0xc0], ebp
mov dword [esi + 0xc4], ebp
mov dword [esi + 0xc8], ebp
mov dword [esi + 0xcc], ebp
mov eax, 1
mov dword [esi + 0xd0], ebp
mov dword [esi + 0xd4], eax
mov dword [esi + 0xd8], ebx
mov dword [esi + 0xdc], ebp
mov dword [esi + 0xe0], ebx
mov dword [esi + 0xe4], eax
mov dword [esi + 0xe8], ebp
mov dword [esi + 0xec], ebp
mov dword [esi + 0xf0], ebp
mov dword [esi + 0xf4], ebp
mov dword [esi + 0xf8], ebp
mov dword [esi + 0xfc], ebp
mov dword [esi + 0x100], ebx
mov dword [esi + 0x104], ebx
mov dword [esi + 0x108], ebp
lea edx, [esi + 0x1a4]
mov dword [esi + 0x10c], ebp
mov dword [esi + 0x118], ebp
mov ecx, 0x18
xor eax, eax
mov edi, edx
mov dword [esi + 0x11c], ebp
rep stosd dword es:[edi], eax
lea ecx, [edx + 0x1f8]
mov dword [edx + 0x60], ebp
mov dword [edx + 0x1a0], ebp
mov dword [edx + 0x1ec], ebp
mov dword [edx + 0x1e8], ebx
mov dword [edx + 0x1a4], ebp
mov dword [edx + 0x1f4], ebp
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [esi + 0x430], ebp
mov dword [esi + 0x434], ebp
mov dword [esi + 0x438], ebp
mov dword [esi + 0x43c], ebp
mov dword [esi + 0x440], ebp
mov eax, 0xa
mov dword [esi + 0x444], ebp
mov dword [esi + 0x448], eax
mov dword [esi + 0x44c], eax
mov dword [esi + 0x450], ebp
mov eax, 1
mov dword [esi + 0x454], ebp
mov dword [esi + 0x45c], eax
mov dword [esi + 0x460], eax
mov dword [esi + 0x470], ebp
mov dword [esi + 0x880], ebp
mov dword [esi + 0x884], ebp
mov dword [esi + 0x89c], ebp
mov dword [esi + 0x8a0], ebx
mov ecx, 0x10
mov dword [esi + 0x8a4], ebp
mov dword [esi + 0x8a8], ecx
mov dword [esi + 0x8ac], ecx
mov dword [esi + 0x8b0], ebp
mov dword [esi], 0x4e7c50
mov dword [esi + 4], 0x4e7c44
mov dword [esi + 0x28], 0x4e7c40
mov dword [esi + 0x2c], 0x4e7c30
mov dword [esi + 0x114], ebp
mov dword [esi + 0x110], ebp
mov dword [esi + 0xbc], ebx
mov dword [esi + 0xb8], ebx
mov word [esi + 0x124], bp
mov word [esi + 0x164], bp
push str.REBAR_CHEVRON
mov word [esi + 0x3a4], bp
push edx
mov word [esi + 0x3e0], bp
mov dword [esi + 0x464], 0x808080
mov dword [esi + 0x468], 0xffffff
mov dword [esi + 0x46c], eax
mov dword [esi + 0x344], ebp
mov dword [esi + 0x354], ebx
mov dword [esi + 0x34c], ebx
mov dword [esi + 0x50], ebp
mov dword [esi + 0x54], ebp
mov dword [esi + 0x68], ebp
mov dword [esi + 0x58], ebp
mov dword [esi + 0x5c], ebp
mov dword [esi + 0x60], ebp
mov dword [esi + 0x64], ebp
call dword [sym.imp.MSVCRT.dll_wcscpy]
mov ecx, 0x82
xor eax, eax
lea edi, [esi + 0x478]
mov dword [esi + 0x474], ebp
mov dword [esi + 0x34], ebp
mov dword [esi + 0x40], ebp
mov dword [esi + 0x38], ebp
add esp, 8
rep stosd dword es:[edi], eax
mov eax, 1
mov ecx, 0x200
mov dword [esi + 0x3c], eax
mov dword [esi + 0x8bc], eax
xor eax, eax
lea edi, [esi + 0x8d4]
mov dword [esi + 0x888], ebp
mov dword [esi + 0x88c], ebp
mov dword [esi + 0x890], ebp
mov dword [esi + 0x894], ebp
mov dword [esi + 0x898], ebp
mov dword [esi + 0x8b8], ebp
mov dword [esi + 0x8b4], ebp
mov dword [esi + 0x8c4], ebp
mov dword [esi + 0x8c0], ebp
mov dword [esi + 0x8cc], ebp
mov dword [esi + 0x8d0], ebp
mov dword [esi + 0x8c8], ebp
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x14]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret