Function at 0x41ad6d
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x451dd2
mov eax, dword fs:[0]
push eax
sub esp, 0x2b0
mov eax, dword [0x487024]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov ebx, dword [edx + 8]
lea eax, [edx + 0x18]
mov dword [ebp - 0x208], eax
lea esi, [edx + 0x10]
mov eax, dword [edx + 0x28]
lea ecx, [edx + 0x20]
mov dword [ebp - 0x204], eax
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x21c], eax
mov eax, dword [edx + 0x34]
mov dword [ebp - 0x218], eax
mov eax, dword [esi]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x214], eax
mov eax, dword [esi + 4]
push ecx
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x1fc], ebx
mov dword [ebp - 0x210], eax
call fcn.0040ad93
mov ecx, ebx
call fcn.0041d8d9
test al, al
jne 0x41aef5
and dword [ebp - 4], 0
mov ecx, dword [0x48bf2c]
test ecx, ecx
sete dl
test dl, dl
sete al
test al, al
je 0x41ae33
test dl, dl
je 0x41ae23
call fcn.0041e2ff
mov eax, dword [ecx]
lea edx, [ebp - 0x24]
push esi
push ebx
push edx
call dword [eax + 8]
mov al, byte [ebp - 0x24]
jmp 0x41ae38
xor al, al
mov byte [ebp - 0x24], al
or dword [ebp - 4], 0xffffffff
lea edx, [ebp - 0x1c]
test al, al
sete cl
test cl, cl
cmovne edx, esi
mov eax, dword [edx]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x214], eax
mov eax, dword [edx + 4]
mov dword [ebp - 0x210], eax
sete al
test al, al
je 0x41aef5
push dword [edx + 4]
lea ecx, [ebp - 0x1ec]
push dword [edx]
call fcn.0041ab98
mov edx, ecx
mov ecx, dword [ebp - 0x1f4]
call fcn.0041aafb
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x1ec]
call fcn.00417cb6
mov ecx, dword [ebp - 0x1f0]
mov esi, dword [eax + 4]
mov edx, dword [eax]
and dword [eax], 0
and dword [eax + 4], 0
mov dword [ebp - 0x1f8], esi
mov dword [ebp - 0x1f0], esi
mov dword [ebp - 0x1f4], edx
mov dword [ebp - 4], 1
test ecx, ecx
je 0x41aece
call fcn.0040693a
mov dword [ebp - 4], 2
mov ecx, dword [ebp - 0x220]
test ecx, ecx
je 0x41aee4
call fcn.0040693a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.0041ac1f
jmp 0x41af01
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x1f8], eax
lea eax, [ebp - 0x94]
mov ecx, ebx
push eax
call fcn.00419a72
mov esi, 0x48be2c
push eax
mov ecx, esi
call fcn.00419e92
lea ecx, [ebp - 0x94]
mov bl, al
call fcn.0040388c
test bl, bl
je 0x41af54
mov ebx, dword [ebp - 0x1fc]
lea eax, [ebp - 0xac]
push eax
mov ecx, ebx
call fcn.00419a72
push eax
mov ecx, esi
call fcn.00419ee6
movzx esi, ax
lea ecx, [ebp - 0xac]
jmp 0x41afbf
cmp byte [ebp + 8], 0
je 0x41b080
push dword [ebp - 0x204]
mov ebx, dword [ebp - 0x1fc]
lea eax, [ebp - 0x214]
mov edx, dword [ebp - 0x208]
mov ecx, ebx
push eax
call fcn.0041d61b
movzx esi, ax
test si, si
jne 0x41af9d
push ebx
mov ecx, 0x48be48
call fcn.0041da1e
movzx esi, ax
test si, si
je 0x41b080
push esi
push ecx
lea eax, [ebp - 0xc4]
mov ecx, ebx
push eax
call fcn.00419a72
pop ecx
push eax
mov ecx, 0x48be2c
call fcn.00419bac
lea ecx, [ebp - 0xc4]
call fcn.0040388c
test si, si
je 0x41b080
cmp byte [ebp - 0x200], 3
sete al
test al, al
je 0x41b0e5
push ecx
push ecx
lea ecx, [ebp - 0x2bc]
call fcn.004086dc
push esi
lea ecx, [ebp - 0x2bc]
call fcn.0041a016
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x2b8]
call fcn.00409082
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x60], 0x461858
mov esi, 0x463a0c
lea ecx, [ebp - 0x5c]
push eax
mov dword [ebp - 0x64], esi
call fcn.0040409d
lea eax, [ebp - 0xdc]
mov ecx, ebx
push eax
call fcn.00419a72
push eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], 0x47e600
call fcn.0040409d
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x44]
push eax
push ecx
push ecx
call fcn.0041b1e9
lea ecx, [ebp - 0x3c]
call fcn.0040388c
lea ecx, [ebp - 0xdc]
call fcn.0040388c
lea ecx, [ebp - 0x5c]
call fcn.0040388c
lea ecx, [ebp - 0x7c]
call fcn.0040388c
lea ecx, [ebp - 0x2bc]
call fcn.0040864b
mov edx, dword [ebp - 0x1fc]
lea eax, [ebp - 0x21c]
push eax
push ecx
push dword [ebp - 0x204]
lea eax, [ebp - 0x214]
mov ecx, edi
push eax
push dword [ebp - 0x208]
lea eax, [ebp - 0x1f4]
push eax
call fcn.0041b271
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0x1f0]
test ecx, ecx
je 0x41b0c5
call fcn.0040693a
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00420fc8
mov esp, ebp
pop ebp
ret 4
movzx eax, si
sub eax, 1
je 0x41b19c
sub eax, 1
je 0x41b169
push 5
pop ecx
sub eax, ecx
je 0x41b148
sub eax, 3
je 0x41b131
sub eax, 1
je 0x41b113
push 0
push 0x14a118c
call fcn.00405a6e
mov al, byte [0x48be40]
test al, al
setne al
test al, al
je 0x41b080
and dword [edi], 0
mov dword [ebp - 4], 6
jmp 0x41b0b6
and dword [edi], 0
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x1f8]
test eax, eax
je 0x41b0c5
mov ecx, eax
jmp 0x41b0c0
mov al, byte [0x48be40]
test al, al
setne al
test al, al
je 0x41b080
and dword [edi], 0
mov dword [ebp - 4], 8
jmp 0x41b0b6
mov eax, dword [0x488f24]
mov ecx, 0x488f24
push 0x16218a1
call dword [eax + 4]
mov al, byte [0x48be40]
test al, al
setne al
test al, al
je 0x41b080
and dword [edi], 0
mov dword [ebp - 4], 7
jmp 0x41b0b6
mov eax, dword [0x488f24]
mov ecx, 0x488f24
push 0x16218a0
call dword [eax + 4]
mov ecx, ebx
call fcn.0041d8d9
test al, al
jne 0x41b1c8
and dword [edi], 0
mov dword [ebp - 4], 3
jmp 0x41b137
mov al, byte [0x48be40]
test al, al
setne al
test al, al
je 0x41b080
and dword [edi], 0
mov dword [ebp - 4], 4
jmp 0x41b0b6