Function at 0x427c9e
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49f47a
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x4db068]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], 0x10
mov eax, dword [esi + 0x19d0]
sub eax, dword [esi + 0x19cc]
push 0xfffffffffffffffc
pop ebx
test ebx, eax
je 0x427d13
mov edx, dword [esi + 0x19d0]
mov ecx, dword [edx - 4]
test ecx, ecx
je 0x427cfe
push ecx
call fcn.00413430
mov edx, dword [esi + 0x19d0]
add edx, 0xfffffffc
mov eax, edx
mov dword [esi + 0x19d0], edx
sub eax, dword [esi + 0x19cc]
test ebx, eax
jne 0x427ceb
mov eax, dword [esi + 0x19c4]
sub eax, dword [esi + 0x19c0]
test ebx, eax
je 0x427d60
mov edi, dword [esi + 0x19c4]
mov edi, dword [edi - 4]
mov dword [ebp - 0x14], edi
test edi, edi
je 0x427d48
mov byte [ebp - 4], 0x10
mov ecx, edi
call fcn.004020b0
push 0x20
push edi
call fcn.00451cfc
pop ecx
pop ecx
add dword [esi + 0x19c4], ebx
mov edi, dword [esi + 0x19c4]
mov eax, edi
sub eax, dword [esi + 0x19c0]
test ebx, eax
jne 0x427d29
mov byte [ebp - 4], 0xf
xor ebx, ebx
mov ecx, dword [esi + 0x19cc]
mov edi, 0x1000
test ecx, ecx
je 0x427dba
mov eax, dword [esi + 0x19d4]
sub eax, ecx
mov dword [ebp - 0x14], ecx
and eax, 0xfffffffc
mov dword [ebp - 0x10], eax
cmp eax, edi
jb 0x427d9f
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00402250
mov eax, dword [ebp - 0x10]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x14]
push eax
push ecx
call fcn.00451cfc
pop ecx
pop ecx
mov dword [esi + 0x19cc], ebx
mov dword [esi + 0x19d0], ebx
mov dword [esi + 0x19d4], ebx
mov byte [ebp - 4], 0xe
mov ecx, dword [esi + 0x19c0]
test ecx, ecx
je 0x427e0d
mov eax, dword [esi + 0x19c8]
sub eax, ecx
mov dword [ebp - 0x10], ecx
and eax, 0xfffffffc
mov dword [ebp - 0x14], eax
cmp eax, edi
jb 0x427df2
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00402250
mov eax, dword [ebp - 0x14]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x10]
push eax
push ecx
call fcn.00451cfc
pop ecx
pop ecx
mov dword [esi + 0x19c0], ebx
mov dword [esi + 0x19c4], ebx
mov dword [esi + 0x19c8], ebx
mov byte [ebp - 4], 0xd
lea ecx, [esi + 0x1984]
call fcn.004020b0
mov byte [ebp - 4], 0xc
lea eax, [esi + 0x184]
push fcn.004020b0
push 0x100
push 0x18
push eax
call fcn.00452364
mov byte [ebp - 4], 0xb
lea ecx, [esi + 0x164]
call fcn.004020b0
mov byte [ebp - 4], 0xa
lea ecx, [esi + 0x148]
call fcn.004020b0
mov byte [ebp - 4], 9
lea ecx, [esi + 0x130]
call fcn.004020b0
mov byte [ebp - 4], 8
lea ecx, [esi + 0x110]
call fcn.004020b0
mov byte [ebp - 4], 7
lea ecx, [esi + 0xf8]
call fcn.004020b0
mov byte [ebp - 4], 6
lea ecx, [esi + 0xa8]
call fcn.004020b0
mov byte [ebp - 4], 5
lea ecx, [esi + 0x90]
call fcn.004020b0
mov byte [ebp - 4], 4
lea ecx, [esi + 0x78]
call fcn.004020b0
mov byte [ebp - 4], 3
lea ecx, [esi + 0x60]
call fcn.004020b0
mov byte [ebp - 4], 2
lea ecx, [esi + 0x48]
call fcn.004020b0
mov byte [ebp - 4], 1
lea ecx, [esi + 0x30]
call fcn.004020b0
mov byte [ebp - 4], bl
lea ecx, [esi + 0x18]
call fcn.004020b0
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004020b0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret