Function at 0x4418a0
Capabilities:
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x7f3d25
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x18], esi
call fcn.0043c660
lea eax, [esp + 0x13]
lea ecx, [esp + 0x14]
push eax
xor ebx, ebx
push ecx
lea ecx, [esi + 0x74]
mov dword [esp + 0x30], ebx
mov dword [esi + 0x70], ebx
call fcn.00441b90
lea edx, [esp + 0x15]
lea eax, [esp + 0x16]
push edx
push eax
lea ecx, [esi + 0x84]
mov byte [esp + 0x30], 1
call fcn.00441c40
lea ecx, [esp + 0x30]
lea edx, [esp + 0x30]
push ecx
push edx
lea ecx, [esi + 0x94]
mov byte [esp + 0x30], 2
call fcn.0043bf40
lea eax, [esp + 0x30]
lea ecx, [esp + 0x30]
push eax
push ecx
lea ecx, [esi + 0xa4]
mov byte [esp + 0x30], 3
call fcn.0043bff0
lea edx, [esp + 0x30]
lea ecx, [esi + 0xb4]
push edx
call fcn.00478ac0
lea eax, [esp + 0x30]
lea ecx, [esi + 0xc4]
push eax
call fcn.00478ac0
mov ecx, esi
mov byte [esp + 0x28], 6
mov dword [esi], vtable.MemberMapEvaluator.0
call fcn.006613e0
mov cl, byte [esp + 0x30]
mov dl, byte [esp + 0x30]
mov byte [esi + 0xf4], cl
lea ecx, [esi + 0x100]
push ebx
mov dword [esp + 0x2c], 7
mov byte [ecx], dl
call fcn.00404f20
mov al, byte [esp + 0x30]
lea ecx, [esi + 0x110]
push ebx
mov byte [ecx], al
call fcn.00404f20
mov dl, byte [esp + 0x30]
lea ecx, [esi + 0x120]
push ebx
mov byte [ecx], dl
call fcn.00404f20
lea edi, [esi + 0x13c]
mov byte [esp + 0x28], 0xa
mov dword [esp + 0x1c], edi
mov ecx, edi
call fcn.0043c660
lea eax, [esp + 0x30]
lea ecx, [edi + 0x70]
push eax
mov byte [esp + 0x2c], 0xb
call fcn.00478ac0
lea ecx, [edi + 0xe8]
mov byte [esp + 0x28], 0xc
call fcn.004413f0
lea ecx, [edi + 0xfc]
mov byte [esp + 0x28], 0xd
call fcn.004413f0
mov ecx, edi
mov byte [esp + 0x28], 0xe
mov dword [edi], vtable.ClientKeys.0
call fcn.007557b0
lea edi, [esi + 0x250]
mov byte [esp + 0x28], 0xf
mov ecx, edi
mov dword [esp + 0x1c], edi
call fcn.00441cf0
lea ebp, [edi + 0x24]
mov byte [esp + 0x28], 0x10
mov ecx, ebp
call fcn.0043c660
push ebp
lea ecx, [edi + 0xa0]
mov byte [esp + 0x2c], 0x11
mov byte [edi + 0x94], bl
mov dword [edi + 0x98], ebx
call fcn.00440e20
mov dword [edi + 0x198], ebx
mov dword [edi + 0x19c], ebx
lea ecx, [edi + 0x1a0]
mov byte [esp + 0x28], 0x13
call fcn.00442a00
mov ecx, ebp
mov byte [esp + 0x28], 0x14
mov dword [edi], vtable.SortedListEvaluator_struct_ShareToMap__struct_ShareToMap_.1.0
mov dword [ebp], vtable.SortedListEvaluator_struct_ShareToMap__struct_ShareToMap_.0
call fcn.0071d090
lea edi, [esi + 0x634]
mov byte [esp + 0x28], 0x15
mov ecx, edi
mov dword [esp + 0x30], edi
call fcn.004357b0
lea ecx, [esp + 0x17]
mov byte [edi + 0xf4], bl
push ecx
lea ecx, [edi + 0xf8]
mov byte [edi + 0xf5], bl
call fcn.00478ac0
lea edx, [esp + 0x17]
lea ecx, [edi + 0x108]
push edx
call fcn.00478ac0
push ebx
mov ecx, edi
mov byte [esp + 0x2c], 0x18
mov dword [edi], vtable.AutoExecCommand.0
call fcn.00682ee0
push ebx
lea ecx, [esi + 0x758]
mov byte [esp + 0x2c], 0x19
call fcn.00442860
mov al, byte [esp + 0x30]
lea ecx, [esi + 0x880]
push ebx
mov byte [ecx], al
call fcn.00404f20
mov dl, byte [esp + 0x30]
lea ecx, [esi + 0x890]
push ebx
mov byte [ecx], dl
call fcn.00404f20
mov al, byte [esp + 0x30]
lea ecx, [esi + 0x8a4]
push ebx
mov byte [ecx], al
call fcn.00404f20
lea ecx, [esp + 0x17]
push ecx
lea ecx, [esi + 0x8b8]
call fcn.00478ac0
push 1
lea ecx, [esi + 0x8cc]
mov byte [esp + 0x2c], 0x1e
call fcn.00442ff0
lea ecx, [esi + 0x163c]
mov byte [esp + 0x28], 0x1f
call fcn.00443af0
lea ecx, [esi + 0x274c]
mov byte [esp + 0x28], 0x20
call fcn.00444710
push ebx
mov ecx, esi
mov byte [esp + 0x2c], 0x21
mov dword [esi], vtable.Group.0
call fcn.00682ee0
mov ecx, dword [esp + 0x20]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret 4