Function at 0x10002640
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1000f5f6
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
mov eax, dword [0x100170c0]
xor eax, esp
mov dword [esp + 0xb8], eax
push ebx
push esi
push edi
mov eax, dword [0x100170c0]
xor eax, esp
push eax
lea eax, [esp + 0xd0]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
push 0xffffffffffffffff
push 0
lea eax, [esi + 0x18]
push eax
lea ecx, [esp + 0x8c]
mov dword [esp + 0xa0], 0xf
mov dword [esp + 0x9c], 0
mov byte [esp + 0x8c], 0
call fcn.10001630
mov dword [esp + 0xd8], 0
mov ecx, dword [esi + 4]
sub ecx, dword [esi]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 2
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov dword [esp + 0x10], ebx
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
lea eax, [esi + 0x30]
push eax
lea edx, [esp + 0x84]
lea ecx, [esp + 0x6c]
mov byte [esp + 0xdc], 1
call fcn.10003840
add esp, 4
lea ecx, [esp + 0x20]
push eax
call fcn.10003200
cmp dword [esp + 0x7c], 0x10
jb 0x1000272e
push dword [esp + 0x68]
call fcn.100043a9
add esp, 4
test ebx, ebx
jle 0x10002747
push 1
push 0x1001546c
lea ecx, [esp + 0x28]
call fcn.10003450
jmp 0x10002b96
xor edi, edi
test ebx, ebx
jle 0x10002b96
lea eax, [ebx - 1]
mov dword [esp + 0x1c], eax
xor ebx, ebx
lea ebx, [ebx]
mov eax, dword [esi]
push 0xffffffffffffffff
add eax, ebx
push 0
push eax
lea ecx, [esp + 0x74]
mov dword [esp + 0x88], 0xf
mov dword [esp + 0x84], 0
mov byte [esp + 0x74], 0
call fcn.10001630
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
mov byte [esp + 0xf4], 2
push 0
lea eax, [esp + 0x88]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10001630
lea ecx, [esp + 0xb0]
call fcn.10002250
add esp, 0x18
mov byte [esp + 0xd8], 3
mov eax, dword [esi + 0xc]
push 0xffffffffffffffff
add eax, ebx
push 0
push eax
lea ecx, [esp + 0x5c]
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], 0
mov byte [esp + 0x5c], 0
call fcn.10001630
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
mov byte [esp + 0xf4], 4
push 0
lea eax, [esp + 0x70]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10001630
lea ecx, [esp + 0xc8]
call fcn.10002250
lea eax, [esp + 0xb0]
push eax
lea edx, [esp + 0x3c]
lea ecx, [esp + 0x54]
mov byte [esp + 0xf4], 5
call fcn.10003840
mov esi, eax
lea eax, [esp + 0x3c]
add esp, 0x1c
cmp eax, esi
je 0x100028cd
cmp dword [esp + 0x34], 0x10
jb 0x10002870
push dword [esp + 0x20]
call fcn.100043a9
add esp, 4
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
cmp dword [esi + 0x14], 0x10
jae 0x100028a2
mov eax, dword [esi + 0x10]
inc eax
je 0x100028ae
push eax
lea eax, [esp + 0x24]
push esi
push eax
call fcn.10003ac0
add esp, 0xc
jmp 0x100028ae
mov eax, dword [esi]
mov dword [esp + 0x20], eax
mov dword [esi], 0
mov eax, dword [esi + 0x10]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x14]
mov dword [esp + 0x34], eax
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
cmp dword [esp + 0x4c], 0x10
jb 0x100028e0
push dword [esp + 0x38]
call fcn.100043a9
add esp, 4
push 0x10015470
lea edx, [esp + 0x24]
lea ecx, [esp + 0x3c]
call fcn.10003730
mov esi, eax
lea eax, [esp + 0x24]
add esp, 4
cmp eax, esi
je 0x1000296f
cmp dword [esp + 0x34], 0x10
jb 0x10002912
push dword [esp + 0x20]
call fcn.100043a9
add esp, 4
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
cmp dword [esi + 0x14], 0x10
jae 0x10002944
mov eax, dword [esi + 0x10]
inc eax
je 0x10002950
push eax
lea eax, [esp + 0x24]
push esi
push eax
call fcn.10003ac0
add esp, 0xc
jmp 0x10002950
mov eax, dword [esi]
mov dword [esp + 0x20], eax
mov dword [esi], 0
mov eax, dword [esi + 0x10]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x14]
mov dword [esp + 0x34], eax
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
cmp dword [esp + 0x4c], 0x10
jb 0x10002982
push dword [esp + 0x38]
call fcn.100043a9
add esp, 4
lea eax, [esp + 0xb0]
push eax
lea edx, [esp + 0x24]
lea ecx, [esp + 0x3c]
call fcn.10003840
mov esi, eax
lea eax, [esp + 0x24]
add esp, 4
cmp eax, esi
je 0x10002a14
cmp dword [esp + 0x34], 0x10
jb 0x100029b7
push dword [esp + 0x20]
call fcn.100043a9
add esp, 4
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
cmp dword [esi + 0x14], 0x10
jae 0x100029e9
mov eax, dword [esi + 0x10]
inc eax
je 0x100029f5
push eax
lea eax, [esp + 0x24]
push esi
push eax
call fcn.10003ac0
add esp, 0xc
jmp 0x100029f5
mov eax, dword [esi]
mov dword [esp + 0x20], eax
mov dword [esi], 0
mov eax, dword [esi + 0x10]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x14]
mov dword [esp + 0x34], eax
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
cmp dword [esp + 0x4c], 0x10
jb 0x10002a27
push dword [esp + 0x38]
call fcn.100043a9
add esp, 4
cmp edi, dword [esp + 0x1c]
je 0x10002ad3
push 0x10015474
lea edx, [esp + 0x24]
lea ecx, [esp + 0x3c]
call fcn.10003730
mov esi, eax
lea eax, [esp + 0x24]
add esp, 4
cmp eax, esi
je 0x10002ac0
cmp dword [esp + 0x34], 0x10
jb 0x10002a63
push dword [esp + 0x20]
call fcn.100043a9
add esp, 4
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
cmp dword [esi + 0x14], 0x10
jae 0x10002a95
mov eax, dword [esi + 0x10]
inc eax
je 0x10002aa1
push eax
lea eax, [esp + 0x24]
push esi
push eax
call fcn.10003ac0
add esp, 0xc
jmp 0x10002aa1
mov eax, dword [esi]
mov dword [esp + 0x20], eax
mov dword [esi], 0
mov eax, dword [esi + 0x10]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x14]
mov dword [esp + 0x34], eax
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], 0
mov byte [esi], 0
cmp dword [esp + 0x4c], 0x10
jb 0x10002ad3
push dword [esp + 0x38]
call fcn.100043a9
add esp, 4
cmp dword [esp + 0xc4], 0x10
jb 0x10002aec
push dword [esp + 0xb0]
call fcn.100043a9
add esp, 4
cmp dword [esp + 0x64], 0x10
mov dword [esp + 0xc4], 0xf
mov dword [esp + 0xc0], 0
mov byte [esp + 0xb0], 0
jb 0x10002b1d
push dword [esp + 0x50]
call fcn.100043a9
add esp, 4
cmp dword [esp + 0xac], 0x10
mov dword [esp + 0x64], 0xf
mov dword [esp + 0x60], 0
mov byte [esp + 0x50], 0
jb 0x10002b4b
push dword [esp + 0x98]
call fcn.100043a9
add esp, 4
mov byte [esp + 0xd8], 1
cmp dword [esp + 0x7c], 0x10
mov dword [esp + 0xac], 0xf
mov dword [esp + 0xa8], 0
mov byte [esp + 0x98], 0
jb 0x10002b84
push dword [esp + 0x68]
call fcn.100043a9
add esp, 4
mov esi, dword [esp + 0x14]
inc edi
add ebx, 0x18
cmp edi, dword [esp + 0x10]
jl 0x10002760
push 0
push 0
push 0
push 0
push 0x10015478
call dword [0x1001012c]
mov dword [esi + 0x48], eax
test eax, eax
je 0x10002bff
mov ecx, dword [esi + 0x54]
test ecx, ecx
jle 0x10002bd1
imul ecx, ecx, 0x3e8
push 4
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0x14]
push ecx
push 6
push eax
call dword [0x10010134]
cmp dword [esp + 0x34], 0x10
push 0
push 0x80000000
push 0
lea eax, [esp + 0x2c]
cmovae eax, dword [esp + 0x2c]
push 0
push eax
push dword [esi + 0x48]
call dword [0x1001013c]
mov dword [esi + 0x4c], eax
test eax, eax
je 0x10002bff
mov bl, 1
jmp 0x10002c01
xor bl, bl
cmp dword [esp + 0x34], 0x10
jb 0x10002c14
push dword [esp + 0x20]
call fcn.100043a9
add esp, 4
cmp dword [esp + 0x94], 0x10
mov dword [esp + 0x34], 0xf
mov dword [esp + 0x30], 0
mov byte [esp + 0x20], 0
jb 0x10002c42
push dword [esp + 0x80]
call fcn.100043a9
add esp, 4
mov al, bl
mov ecx, dword [esp + 0xd0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xb8]
xor ecx, esp
call fcn.10003aa3
mov esp, ebp
pop ebp
ret