Function at 0x4a22c0
Capabilities:
Get process heap flags
Get process heap force flags
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x52859a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x84
push ebx
push ebp
push esi
push edi
mov edi, ecx
push 6
push 0x54ba20
lea ecx, [esp + 0x24]
call fcn.004f58e0
push 6
push 0x54ca48
lea ecx, [esp + 0x1c]
mov dword [esp + 0xa4], 0
call fcn.004f58e0
push 6
push 0x54baec
lea ecx, [esp + 0x2c]
mov byte [esp + 0xa4], 1
call fcn.004f58e0
push 6
push 0x54bae4
lea ecx, [esp + 0x30]
mov byte [esp + 0xa4], 2
call fcn.004f58e0
push 6
push 0x54badc
lea ecx, [esp + 0x28]
mov byte [esp + 0xa4], 3
call fcn.004f58e0
push 6
push 0x54ba08
lea ecx, [esp + 0x98]
mov byte [esp + 0xa4], 4
call fcn.004f58e0
push 0
lea ecx, [esp + 0x30]
mov byte [esp + 0xa0], 5
call fcn.004f5870
push 7
push 0x54cb48
lea ecx, [esp + 0x38]
mov byte [esp + 0xa4], 6
call fcn.004f58e0
push 7
push 0x54cb40
lea ecx, [esp + 0x3c]
mov byte [esp + 0xa4], 7
call fcn.004f58e0
push 7
push 0x54cb38
lea ecx, [esp + 0x40]
mov byte [esp + 0xa4], 8
call fcn.004f58e0
push 7
push 0x54cb30
lea ecx, [esp + 0x44]
mov byte [esp + 0xa4], 9
call fcn.004f58e0
push 7
push 0x54cb28
lea ecx, [esp + 0x48]
mov byte [esp + 0xa4], 0xa
call fcn.004f58e0
push 7
push 0x54cb20
lea ecx, [esp + 0x4c]
mov byte [esp + 0xa4], 0xb
call fcn.004f58e0
push 7
push 0x54cb18
lea ecx, [esp + 0x50]
mov byte [esp + 0xa4], 0xc
call fcn.004f58e0
push 7
push 0x54cb10
lea ecx, [esp + 0x54]
mov byte [esp + 0xa4], 0xd
call fcn.004f58e0
push 7
push 0x54cb08
lea ecx, [esp + 0x58]
mov byte [esp + 0xa4], 0xe
call fcn.004f58e0
push 7
push 0x54cb00
lea ecx, [esp + 0x5c]
mov byte [esp + 0xa4], 0xf
call fcn.004f58e0
push 7
push 0x54caf8
lea ecx, [esp + 0x60]
mov byte [esp + 0xa4], 0x10
call fcn.004f58e0
push 7
push 0x54caf0
lea ecx, [esp + 0x64]
mov byte [esp + 0xa4], 0x11
call fcn.004f58e0
push 8
push 0x54cae4
lea ecx, [esp + 0x68]
mov byte [esp + 0xa4], 0x12
call fcn.004f58e0
push 8
push 0x54cad8
lea ecx, [esp + 0x6c]
mov byte [esp + 0xa4], 0x13
call fcn.004f58e0
push 8
push 0x54cacc
lea ecx, [esp + 0x70]
mov byte [esp + 0xa4], 0x14
call fcn.004f58e0
push 8
push 0x54cac0
lea ecx, [esp + 0x74]
mov byte [esp + 0xa4], 0x15
call fcn.004f58e0
push 8
push 0x54cab4
lea ecx, [esp + 0x78]
mov byte [esp + 0xa4], 0x16
call fcn.004f58e0
push 8
push 0x54caa8
lea ecx, [esp + 0x7c]
mov byte [esp + 0xa4], 0x17
call fcn.004f58e0
push 8
push 0x54ca9c
lea ecx, [esp + 0x80]
mov byte [esp + 0xa4], 0x18
call fcn.004f58e0
push 8
mov byte [esp + 0xa0], 0x19
push 0x54ca90
lea ecx, [esp + 0x84]
call fcn.004f58e0
push 8
push 0x54ca84
lea ecx, [esp + 0x88]
mov byte [esp + 0xa4], 0x1a
call fcn.004f58e0
push 8
push 0x54ca78
lea ecx, [esp + 0x8c]
mov byte [esp + 0xa4], 0x1b
call fcn.004f58e0
push 8
push 0x54ca6c
lea ecx, [esp + 0x90]
mov byte [esp + 0xa4], 0x1c
call fcn.004f58e0
push 8
push 0x54ca60
lea ecx, [esp + 0x94]
mov byte [esp + 0xa4], 0x1d
call fcn.004f58e0
mov esi, dword [esp + 0xa4]
mov bl, 0x1e
push esi
push 5
lea ecx, [esp + 0x1c]
mov byte [esp + 0xa4], bl
call fcn.004f5c80
and esi, 0xffff
push ecx
lea eax, [esp + 0x20]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call fcn.004f5850
mov ecx, dword [0x5540b4]
call fcn.004ff740
push 0
push ecx
lea edx, [esp + 0x2c]
mov ecx, esp
mov dword [esp + 0x18], esp
push edx
call fcn.004f5850
mov ecx, dword [0x5540b4]
call fcn.004ff8c0
push 0
push ecx
lea eax, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
call fcn.004f5850
mov ecx, dword [0x5540b4]
call fcn.004ff8c0
sub esp, 0x10
lea edx, [esp + 0x30]
mov ebp, esp
mov dword [esp + 0x20], esp
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
call fcn.004f5850
push ebp
call fcn.004fd210
add esp, 4
lea eax, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x2c], esp
push eax
mov byte [esp + 0xb4], 0x1f
call fcn.004f5850
mov ecx, dword [0x5540b4]
mov byte [esp + 0xb0], bl
call fcn.004ffa90
mov ecx, dword [0x5540b4]
call fcn.004ffe70
test esi, esi
jl 0x4a25f6
cmp esi, 0xb
jg 0x4a25f6
test ax, ax
jne 0x4a2758
push 1
push ecx
lea edx, [esp + esi*4 + 0x68]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.004f5850
lea eax, [esp + 0x34]
lea edx, [esp + esi*4 + 0x38]
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
mov byte [esp + 0xb0], 0x20
call fcn.004f5850
mov ecx, edi
mov byte [esp + 0xac], bl
call fcn.0049dc80
test al, al
je 0x4a2767
push 0x1388
call fcn.00446990
add esp, 4
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xac], 0x22
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x54ca58
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xac], bl
call fcn.004f91a0
jmp 0x4a25f6
cmp ax, 1
je 0x4a29d4
jmp 0x4a25f6
push 0
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push 6
push 0x548208
call fcn.004f58e0
push ecx
mov byte [esp + 0xac], 0x21
mov ecx, esp
mov dword [esp + 0x20], esp
push 6
push 0x54ca50
call fcn.004f58e0
mov ecx, 0x5540a8
mov byte [esp + 0xac], bl
call fcn.004f91a0
lea ecx, [esp + 0x8c]
mov byte [esp + 0x9c], 0x1d
call fcn.004f5980
lea ecx, [esp + 0x88]
mov byte [esp + 0x9c], 0x1c
call fcn.004f5980
lea ecx, [esp + 0x84]
mov byte [esp + 0x9c], 0x1b
call fcn.004f5980
lea ecx, [esp + 0x80]
mov byte [esp + 0x9c], 0x1a
call fcn.004f5980
lea ecx, [esp + 0x7c]
mov byte [esp + 0x9c], 0x19
call fcn.004f5980
lea ecx, [esp + 0x78]
mov byte [esp + 0x9c], 0x18
call fcn.004f5980
lea ecx, [esp + 0x74]
mov byte [esp + 0x9c], 0x17
call fcn.004f5980
lea ecx, [esp + 0x70]
mov byte [esp + 0x9c], 0x16
call fcn.004f5980
lea ecx, [esp + 0x6c]
mov byte [esp + 0x9c], 0x15
call fcn.004f5980
lea ecx, [esp + 0x68]
mov byte [esp + 0x9c], 0x14
call fcn.004f5980
lea ecx, [esp + 0x64]
mov byte [esp + 0x9c], 0x13
call fcn.004f5980
lea ecx, [esp + 0x60]
mov byte [esp + 0x9c], 0x12
call fcn.004f5980
lea ecx, [esp + 0x5c]
mov byte [esp + 0x9c], 0x11
call fcn.004f5980
lea ecx, [esp + 0x58]
mov byte [esp + 0x9c], 0x10
call fcn.004f5980
lea ecx, [esp + 0x54]
mov byte [esp + 0x9c], 0xf
call fcn.004f5980
lea ecx, [esp + 0x50]
mov byte [esp + 0x9c], 0xe
call fcn.004f5980
lea ecx, [esp + 0x4c]
mov byte [esp + 0x9c], 0xd
call fcn.004f5980
lea ecx, [esp + 0x48]
mov byte [esp + 0x9c], 0xc
call fcn.004f5980
lea ecx, [esp + 0x44]
mov byte [esp + 0x9c], 0xb
call fcn.004f5980
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0xa
call fcn.004f5980
mov byte [esp + 0x9c], 9
lea ecx, [esp + 0x3c]
call fcn.004f5980
lea ecx, [esp + 0x38]
mov byte [esp + 0x9c], 8
call fcn.004f5980
lea ecx, [esp + 0x34]
mov byte [esp + 0x9c], 7
call fcn.004f5980
lea ecx, [esp + 0x30]
mov byte [esp + 0x9c], 6
call fcn.004f5980
lea ecx, [esp + 0x2c]
mov byte [esp + 0x9c], 5
call fcn.004f5980
lea ecx, [esp + 0x90]
mov byte [esp + 0x9c], 4
call fcn.004f5980
lea ecx, [esp + 0x20]
mov byte [esp + 0x9c], 3
call fcn.004f5980
lea ecx, [esp + 0x28]
mov byte [esp + 0x9c], 2
call fcn.004f5980
lea ecx, [esp + 0x24]
mov byte [esp + 0x9c], 1
call fcn.004f5980
lea ecx, [esp + 0x14]
mov byte [esp + 0x9c], 0
call fcn.004f5980
lea ecx, [esp + 0x1c]
mov dword [esp + 0x9c], 0xffffffff
call fcn.004f5980
or ax, 0xffff
jmp 0x4a2bf9
lea ecx, [esp + 0x8c]
mov byte [esp + 0x9c], 0x1d
call fcn.004f5980
lea ecx, [esp + 0x88]
mov byte [esp + 0x9c], 0x1c
call fcn.004f5980
lea ecx, [esp + 0x84]
mov byte [esp + 0x9c], 0x1b
call fcn.004f5980
lea ecx, [esp + 0x80]
mov byte [esp + 0x9c], 0x1a
call fcn.004f5980
lea ecx, [esp + 0x7c]
mov byte [esp + 0x9c], 0x19
call fcn.004f5980
lea ecx, [esp + 0x78]
mov byte [esp + 0x9c], 0x18
call fcn.004f5980
lea ecx, [esp + 0x74]
mov byte [esp + 0x9c], 0x17
call fcn.004f5980
lea ecx, [esp + 0x70]
mov byte [esp + 0x9c], 0x16
call fcn.004f5980
lea ecx, [esp + 0x6c]
mov byte [esp + 0x9c], 0x15
call fcn.004f5980
lea ecx, [esp + 0x68]
mov byte [esp + 0x9c], 0x14
call fcn.004f5980
lea ecx, [esp + 0x64]
mov byte [esp + 0x9c], 0x13
call fcn.004f5980
lea ecx, [esp + 0x60]
mov byte [esp + 0x9c], 0x12
call fcn.004f5980
lea ecx, [esp + 0x5c]
mov byte [esp + 0x9c], 0x11
call fcn.004f5980
lea ecx, [esp + 0x58]
mov byte [esp + 0x9c], 0x10
call fcn.004f5980
lea ecx, [esp + 0x54]
mov byte [esp + 0x9c], 0xf
call fcn.004f5980
lea ecx, [esp + 0x50]
mov byte [esp + 0x9c], 0xe
call fcn.004f5980
lea ecx, [esp + 0x4c]
mov byte [esp + 0x9c], 0xd
call fcn.004f5980
lea ecx, [esp + 0x48]
mov byte [esp + 0x9c], 0xc
call fcn.004f5980
lea ecx, [esp + 0x44]
mov byte [esp + 0x9c], 0xb
call fcn.004f5980
lea ecx, [esp + 0x40]
mov byte [esp + 0x9c], 0xa
call fcn.004f5980
lea ecx, [esp + 0x3c]
mov byte [esp + 0x9c], 9
call fcn.004f5980
lea ecx, [esp + 0x38]
mov byte [esp + 0x9c], 8
call fcn.004f5980
lea ecx, [esp + 0x34]
mov byte [esp + 0x9c], 7
call fcn.004f5980
lea ecx, [esp + 0x30]
mov byte [esp + 0x9c], 6
call fcn.004f5980
lea ecx, [esp + 0x2c]
mov byte [esp + 0x9c], 5
call fcn.004f5980
lea ecx, [esp + 0x90]
mov byte [esp + 0x9c], 4
call fcn.004f5980
lea ecx, [esp + 0x20]
mov byte [esp + 0x9c], 3
call fcn.004f5980
lea ecx, [esp + 0x28]
mov byte [esp + 0x9c], 2
call fcn.004f5980
lea ecx, [esp + 0x24]
mov byte [esp + 0x9c], 1
call fcn.004f5980
lea ecx, [esp + 0x14]
mov byte [esp + 0x9c], 0
call fcn.004f5980
lea ecx, [esp + 0x1c]
mov dword [esp + 0x9c], 0xffffffff
call fcn.004f5980
mov ax, 1
mov ecx, dword [esp + 0x94]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x90
ret 4