Function at 0x46bb70
Capabilities:
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x5265fb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0xc], edi
mov dword [edi], 0x53b5f4
mov ecx, dword [edi + 0x1dc]
xor ebx, ebx
cmp ecx, ebx
mov dword [esp + 0x1c], 7
je 0x46bbb1
mov eax, dword [ecx]
push 1
call dword [eax]
mov ecx, dword [edi + 0x1e0]
cmp ecx, ebx
je 0x46bbc1
mov edx, dword [ecx]
push 1
call dword [edx]
mov ecx, dword [edi + 0x1e4]
cmp ecx, ebx
je 0x46bbd1
mov eax, dword [ecx]
push 1
call dword [eax]
lea esi, [edi + 0x1cc]
mov byte [esp + 0x1c], 6
mov ecx, esi
call fcn.00478dc0
mov esi, dword [esi]
cmp esi, ebx
je 0x46bbf2
push esi
call fcn.005096eb
add esp, 4
lea esi, [edi + 0x1bc]
mov byte [esp + 0x1c], 5
mov ecx, esi
call fcn.00478d50
mov esi, dword [esi]
cmp esi, ebx
je 0x46bc13
push esi
call fcn.005096eb
add esp, 4
push ebp
lea ecx, [edi + 0x1ac]
mov byte [esp + 0x20], 4
call fcn.00472a40
mov ebp, dword [edi + 0x1a4]
mov esi, dword [edi + 0x1a0]
cmp esi, ebp
mov byte [esp + 0x20], 3
je 0x46bc4a
mov ecx, esi
call fcn.0041f140
add esi, 0x1f4
cmp esi, ebp
jne 0x46bc39
mov eax, dword [edi + 0x1a0]
push eax
call fcn.005096eb
mov dword [edi + 0x1a0], ebx
mov dword [edi + 0x1a4], ebx
mov dword [edi + 0x1a8], ebx
mov eax, dword [edi + 0x190]
add esp, 4
cmp eax, ebx
pop ebp
je 0x46bc93
lea ecx, [eax - 1]
mov al, byte [eax - 1]
cmp al, bl
je 0x46bc8a
cmp al, 0xff
je 0x46bc8a
dec al
mov byte [ecx], al
jmp 0x46bc93
push ecx
call fcn.005096eb
add esp, 4
lea esi, [edi + 0x48]
mov dword [edi + 0x190], ebx
mov dword [edi + 0x194], ebx
mov dword [edi + 0x198], ebx
mov dword [esp + 0x10], esi
push 1
lea ecx, [esi + 0x130]
mov byte [esp + 0x20], 0x19
call fcn.00402fc0
push 1
lea ecx, [esi + 0x120]
mov byte [esp + 0x20], 0x18
call fcn.00402fc0
push 1
lea ecx, [esi + 0x110]
mov byte [esp + 0x20], 0x17
call fcn.00402fc0
push 1
lea ecx, [esi + 0x100]
mov byte [esp + 0x20], 0x16
call fcn.00402fc0
push 1
lea ecx, [esi + 0xf0]
mov byte [esp + 0x20], 0x15
call fcn.00402fc0
push 1
lea ecx, [esi + 0xe0]
mov byte [esp + 0x20], 0x14
call fcn.00402fc0
push 1
lea ecx, [esi + 0xd0]
mov byte [esp + 0x20], 0x13
call fcn.00402fc0
push 1
lea ecx, [esi + 0xbc]
mov byte [esp + 0x20], 0x12
call fcn.00402fc0
push 1
lea ecx, [esi + 0xac]
mov byte [esp + 0x20], 0x11
call fcn.00402fc0
push 1
lea ecx, [esi + 0x94]
mov byte [esp + 0x20], 0x10
call fcn.00402fc0
push 1
lea ecx, [esi + 0x80]
mov byte [esp + 0x20], 0xf
call fcn.00402fc0
push 1
lea ecx, [esi + 0x70]
mov byte [esp + 0x20], 0xe
call fcn.00402fc0
push 1
lea ecx, [esi + 0x60]
mov byte [esp + 0x20], 0xd
call fcn.00402fc0
push 1
lea ecx, [esi + 0x50]
mov byte [esp + 0x20], 0xc
call fcn.00402fc0
mov byte [esp + 0x1c], 0xb
push 1
lea ecx, [esi + 0x40]
call fcn.00402fc0
push 1
lea ecx, [esi + 0x30]
mov byte [esp + 0x20], 0xa
call fcn.00402fc0
push 1
lea ecx, [esi + 0x20]
mov byte [esp + 0x20], 9
call fcn.00402fc0
push 1
lea ecx, [esi + 0x10]
mov byte [esp + 0x20], 8
call fcn.00402fc0
push 1
mov ecx, esi
mov byte [esp + 0x20], 1
call fcn.00402fc0
lea ecx, [edi + 0x38]
mov byte [esp + 0x1c], bl
call fcn.00421e60
lea esi, [edi + 8]
mov dword [esp + 0x10], esi
push 1
lea ecx, [esi + 0x20]
mov dword [esp + 0x20], 0x1b
call fcn.00402fc0
push 1
lea ecx, [esi + 0x10]
mov byte [esp + 0x20], 0x1a
call fcn.00402fc0
push 1
mov ecx, esi
mov dword [esp + 0x20], 0xffffffff
call fcn.00402fc0
mov ecx, dword [esp + 0x14]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret