Function at 0x4837d0
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x682c72
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push ebx
mov eax, dword [0x70af2c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + 8]
mov dword [eax + 0x34], ecx
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 0x10]
mov dword [edx + 0x28], eax
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp + 0x14]
mov dword [ecx + 0x30], edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x44]
cdq
and edx, 7
add eax, edx
sar eax, 3
push eax
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + 0x1c]
call fcn.0052a609
mov edx, dword [ebp - 0x10]
mov ecx, dword [edx + 0x24]
call fcn.004d0680
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + 0x24]
call fcn.004d06a0
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x24]
call fcn.004d06a0
lea ecx, [ebp - 0x38]
call fcn.0052a475
mov dword [ebp - 4], 0
push 0xffffffffffffffff
push 4
lea ecx, [ebp - 0x38]
call fcn.0052a609
push 0
lea ecx, [ebp - 0x38]
call fcn.00411310
mov cl, byte [ebp + 0x14]
mov byte [eax], cl
mov ebx, dword [ebp + 0x14]
sar ebx, 8
push 1
lea ecx, [ebp - 0x38]
call fcn.00411310
mov byte [eax], bl
mov ebx, dword [ebp + 0x14]
sar ebx, 0x10
push 2
lea ecx, [ebp - 0x38]
call fcn.00411310
mov byte [eax], bl
mov ebx, dword [ebp + 0x14]
sar ebx, 0x18
push 3
lea ecx, [ebp - 0x38]
call fcn.00411310
mov byte [eax], bl
push 4
push 0
lea edx, [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x24]
call fcn.004d06c0
cmp dword [ebp + 8], 0
je 0x4838e2
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x10]
mov ecx, dword [edx + 0x24]
call fcn.004d06a0
mov eax, dword [ebp - 0x10]
cmp dword [eax + 0x48], 0
jne 0x483903
mov ecx, dword [0x711cec]
mov edx, dword [ecx + 0xb10]
push edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x24]
call fcn.004d06a0
push 0x14
call fcn.004096f0
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x1c], 0
je 0x483924
mov ecx, dword [ebp - 0x1c]
call fcn.0052a475
mov dword [ebp - 0x20], eax
jmp 0x48392b
mov dword [ebp - 0x20], 0
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x24], ecx
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x50
call fcn.0052a80d
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + 0x1c]
call fcn.0040d510
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0052a609
mov edx, dword [ebp - 0x10]
mov ecx, dword [edx + 0x1c]
call fcn.0040d510
push eax
push 0
mov eax, dword [ebp - 0x14]
push eax
push 0
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + 0x24]
call fcn.004d05d0
push eax
call fcn.004130a0
add esp, 0x14
mov edx, dword [ebp - 0x10]
mov eax, dword [0x711cec]
mov ecx, dword [edx + 0x3c]
cmp ecx, dword [eax + 0xb00]
je 0x4839ae
mov edx, dword [ebp - 0x10]
mov eax, dword [0x711cec]
mov ecx, dword [edx + 0x3c]
cmp ecx, dword [eax + 0xb04]
jne 0x4839f4
mov dword [ebp - 0x18], 0
jmp 0x4839c0
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], 0x32
jge 0x4839f4
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x1c]
call fcn.0040d510
push eax
push 0
mov ecx, dword [ebp - 0x14]
push ecx
push 0
mov edx, dword [ebp - 0x14]
push edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x24]
call fcn.004d0580
push eax
call fcn.004130a0
add esp, 0x14
jmp 0x4839b7
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + 0x1c]
call fcn.0040d510
push eax
push 0
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0x1c]
push eax
push 0
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.004130a0
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38]
call fcn.0052a48c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x10