Function at 0x42bca0
Capabilities:
Get process heap flags

Disassembly:
sub esp, 0xc4
push ebx
push ebp
push esi
push edi
call dword [0x100780c4]
xor ebx, ebx
push ebx
push ebx
push ebx
mov dword [0x10176940], eax
call dword [0x10078188]
mov dword [0x1017693c], eax
call dword [0x10078178]
push 0x1007a89c
push 0x10078654
mov dword [0x1008a41c], eax
mov dword [0x10176938], ebx
call dword [0x10078210]
mov esi, dword [0x10078218]
push eax
call esi
cmp eax, ebx
mov dword [0x10176934], eax
je 0x42bd0a
push 0x10176938
call dword [0x10078204]
push eax
call dword [0x10176934]
mov ebp, dword [0x100781fc]
xor eax, eax
cmp dword [0x10176938], ebx
push 0x10078688
setne al
lea eax, [eax*4 + 4]
mov dword [0x10176930], eax
call ebp
mov edi, eax
push 0x1007a890
push edi
call esi
push 0x1007860c
push edi
mov dword [0x1017692c], eax
call esi
push 0x1007a880
push edi
mov dword [0x10176928], eax
call esi
push 0x1007863c
push edi
mov dword [0x10176924], eax
call esi
push 0x1007a868
push edi
mov dword [0x10176920], eax
call esi
push 0x1007a13c
push edi
mov dword [0x1017691c], eax
call esi
push 0x1007a1dc
push edi
mov dword [0x10176918], eax
call esi
push 0x1007a850
push edi
mov dword [0x10176914], eax
call esi
push 0x1007a838
push edi
mov dword [0x10176910], eax
call esi
push 0x1007a028
push edi
mov dword [0x1017690c], eax
call esi
push 0x1007a820
push edi
mov dword [0x10176908], eax
call esi
push 0x1007a804
push edi
mov dword [0x10176904], eax
call esi
push 0x1007a7e8
push edi
mov dword [0x10176900], eax
call esi
push 0x1007a7d4
push edi
mov dword [0x101768fc], eax
call esi
push 0x1007a7b8
push edi
mov dword [0x101768f8], eax
call esi
push 0x1007a7a4
push edi
mov dword [0x101768f4], eax
call esi
push 0x1007a318
push edi
mov dword [0x101768f0], eax
call esi
push 0x1007a2f0
push edi
mov dword [0x101768ec], eax
call esi
mov dword [0x101768e8], eax
push 0x1007a784
push edi
call esi
push 0x1007a76c
push edi
mov dword [0x101768e4], eax
call esi
push 0x1007a754
push edi
mov dword [0x101768e0], eax
call esi
push 0x1007a73c
push edi
mov dword [0x101768dc], eax
call esi
push 0x1007a728
push edi
mov dword [0x101768d8], eax
call esi
push 0x1007a710
push edi
mov dword [0x101768d4], eax
call esi
push 0x1007a704
push edi
mov dword [0x101768d0], eax
call esi
push 0x1007a6f4
push edi
mov dword [0x101768cc], eax
call esi
push 0x1007a6dc
push edi
mov dword [0x101768c8], eax
call esi
push 0x1007a6d0
push edi
mov dword [0x101768c4], eax
call esi
push 0x1007a340
push edi
mov dword [0x101768c0], eax
call esi
push 0x1007a398
push edi
mov dword [0x101768bc], eax
call esi
push 0x1007a32c
push edi
mov dword [0x101768b8], eax
call esi
push 0x10078654
mov dword [0x101768b4], eax
call ebp
mov edi, eax
push 0x1007a08c
push edi
call esi
push 0x1007a6c0
push edi
mov dword [0x101768b0], eax
call esi
push 0x1007a6ac
push edi
mov dword [0x101768ac], eax
call esi
push 0x1007a698
push edi
mov dword [0x101768a8], eax
call esi
mov edi, dword [0x100781f4]
push 0x40
push 0x1000
push 0x25
push ebx
mov dword [0x101768a4], eax
call edi
push 0x25
push 0x1007a670
mov dword [0x101768a0], eax
push eax
call fcn.0041a850
add esp, 0xc
push 4
push 0x1000
push 0xa0000
push ebx
call edi
push ebx
push 0x400
push 0xa0000
push eax
mov dword [0x1017689c], eax
call fcn.00430840
add esp, 0x10
test eax, eax
je 0x42c553
push 0x1017675c
call dword [0x10078090]
push 0x10176780
mov dword [0x10176780], 0x11c
call dword [0x10078184]
push 0x20000
call fcn.0041a8c0
add esp, 4
mov dword [0x10176758], eax
xor edi, edi
jmp 0x42bf90
push edi
call dword [0x10176910]
mov ecx, dword [0x10176758]
mov word [ecx + edi*2], ax
add edi, 1
cmp edi, 0x10000
jl 0x42bf90
push 0xc
call fcn.0042bc90
mov edi, eax
add esp, 4
cmp edi, ebx
je 0x42bfe6
push 0x200
push ebx
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], 0xff
call fcn.0041a960
mov dword [edi], eax
mov dword [edi + 4], ebx
mov word [eax], bx
add esp, 8
mov dword [0x10176754], edi
jmp 0x42bfec
mov dword [0x10176754], ebx
lea edx, [esp + 0x18]
push edx
push 8
call dword [0x10078204]
push eax
call dword [0x10078030]
test eax, eax
je 0x42c0cb
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
push ebx
push ebx
push 1
push ecx
mov dword [esp + 0x28], ebx
call dword [0x10078000]
mov eax, dword [esp + 0x14]
cmp eax, ebx
jbe 0x42c0c0
push eax
mov ebx, eax
call fcn.0041a8c0
add esp, 4
lea edx, [esp + 0x14]
push edx
push ebx
mov edi, eax
mov eax, dword [esp + 0x20]
push edi
push 1
push eax
call dword [0x10078000]
test eax, eax
je 0x42c0b1
mov edx, dword [edi]
lea ecx, [esp + 0x28]
push ecx
push edx
call dword [0x10078038]
xor eax, eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x28]
push eax
lea ecx, [esp + 0x34]
call fcn.00419100
mov ebx, dword [esp + 0x30]
mov ecx, dword [0x10176754]
push ebx
call fcn.00419100
test ebx, ebx
je 0x42c0a6
push ebx
call fcn.0041aa10
add esp, 4
xor eax, eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x28]
push ecx
call dword [0x10078078]
test edi, edi
je 0x42c0be
push edi
call fcn.0041aa10
add esp, 4
xor ebx, ebx
mov edx, dword [esp + 0x18]
push edx
call dword [0x100781e4]
push 0x1007a658
push 0x1017674c
call dword [0x10176920]
mov dword [0x10176748], ebx
xor ecx, ecx
mov eax, 0x1007a4e0
jmp 0x42c0f0
add eax, 2
add ecx, 1
cmp word [eax], bx
jne 0x42c0f0
lea eax, [ecx + ecx + 2]
push eax
push ebx
call dword [0x10078084]
push eax
call dword [0x10078088]
mov dword [0x10176744], eax
xor edx, edx
mov ecx, 0x1007a4e0
lea ebx, [ebx]
add ecx, 2
add edx, 1
cmp word [ecx], bx
jne 0x42c120
lea ecx, [edx + edx + 2]
push ecx
push 0x1007a4e0
push eax
call fcn.0041a850
add esp, 0xc
push 0x1007a4d0
call ebp
cmp eax, ebx
mov dword [0x10176740], eax
je 0x42c301
push 0x1007a4b0
push eax
call esi
mov dword [0x1017673c], eax
mov eax, dword [0x10176740]
cmp eax, ebx
je 0x42c1bb
push 0x10
push 1
push eax
call dword [0x10078214]
mov edx, dword [0x10176740]
mov edi, eax
push edi
push edx
call dword [0x10078164]
push eax
call dword [0x10078160]
mov ebx, eax
mov eax, dword [0x10176740]
push edi
push eax
call dword [0x1007815c]
test ebx, ebx
je 0x42c1b9
cmp word [ebx + 0x26], 0
lea eax, [ebx + 0x26]
jne 0x42c1b0
add eax, 2
cmp word [eax], 0
je 0x42c1a7
mov ecx, dword [eax + 0x10]
mov dword [0x10176738], ecx
xor ebx, ebx
push 0x1007a494
push 0x10078688
call dword [0x10078210]
push eax
call esi
push 0x1007a478
mov dword [0x10176734], eax
call ebp
push 0x1007a468
push eax
mov dword [0x10176730], eax
call esi
push 0x1007a458
mov dword [0x1017672c], eax
call ebp
push 0x1007a444
push eax
mov dword [0x10176728], eax
call esi
mov edi, dword [0x10078084]
push 2
push ebx
mov dword [0x10176724], eax
mov dword [esp + 0x18], 1
call edi
push eax
call dword [0x10078088]
mov esi, dword [0x10078180]
mov dword [0x10176720], eax
lea edx, [esp + 0x10]
mov word [eax], bx
mov eax, dword [0x10176720]
push edx
push eax
call esi
test eax, eax
jne 0x42c276
call dword [0x1007813c]
cmp eax, 0x6f
jne 0x42c276
mov eax, dword [esp + 0x10]
mov edx, dword [0x10176720]
add eax, 1
lea ecx, [eax + eax]
push ecx
push edx
push ebx
mov dword [esp + 0x1c], eax
call edi
push eax
call dword [0x100780d4]
lea ecx, [esp + 0x10]
push ecx
push eax
mov dword [0x10176720], eax
call esi
call dword [0x10078048]
push 0x10000
mov dword [0x1017671c], eax
call fcn.0041a8c0
mov edi, dword [0x10078034]
add esp, 4
lea edx, [esp + 0x1c]
push edx
push 0x1007a434
push 0x80000005
mov esi, eax
mov dword [0x10176718], 1
call edi
test eax, eax
jne 0x42c325
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x20]
push eax
push 0x10000
push esi
push 7
push ecx
call dword [0x10176918]
neg eax
lea edx, [esp + 0x20]
push edx
sbb eax, eax
push 0x10000
add eax, 1
push esi
mov dword [0x10176718], eax
mov eax, dword [esp + 0x28]
push 5
push eax
call dword [0x10176918]
test eax, eax
jne 0x42c30c
mov ecx, dword [esp + 0x20]
mov dword [0x10176714], ecx
jmp 0x42c316
mov dword [0x1017673c], ebx
jmp 0x42c1bb
mov dword [0x10176714], 0xc
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x42c325
push eax
call dword [0x1007801c]
cmp esi, ebx
je 0x42c332
push esi
call fcn.0041aa10
add esp, 4
push 0x10000
call fcn.0041a8c0
add esp, 4
lea edx, [esp + 0x2c]
push edx
push 0x1007a434
mov ebp, 1
push 0x80000005
mov esi, eax
mov dword [0x10176710], ebp
call edi
test eax, eax
jne 0x42c393
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x70]
push eax
push 0x10000
push esi
push 7
push ecx
call dword [0x10176918]
neg eax
sbb eax, eax
add eax, ebp
mov dword [0x10176710], eax
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x42c393
push eax
call dword [0x1007801c]
cmp esi, ebx
je 0x42c3a0
push esi
call fcn.0041aa10
add esp, 4
lea edx, [esp + 0x24]
push edx
push ebx
push ebx
push ebx
push ebx
push 0x40
push 0x1007a418
lea ecx, [esp + 0xa0]
mov dword [esp + 0x40], 0xfefe
call fcn.0044f4a0
mov ecx, eax
call fcn.00484580
push eax
push ebx
lea ecx, [esp + 0xdc]
call fcn.00483d70
mov ecx, eax
call fcn.00484580
push eax
push 0x20019
lea eax, [esp + 0x84]
push eax
call dword [0x10176914]
mov edx, dword fs:[0x18]
xor ecx, ecx
cmp dword [esp + 0x24], ebx
sete cl
mov dword [0x1017670c], ecx
mov eax, dword [edx + 0x30]
mov ecx, dword [eax + 0x10]
mov esi, dword [ecx + 0x2c]
mov eax, 0xfefefefe
lea edx, [esp + 0x44]
push edx
push ebx
push 0x40
push 0x10078348
lea ecx, [esp + 0x8c]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
call fcn.0044f4a0
mov ecx, eax
call fcn.00484580
push eax
push esi
lea ecx, [esp + 0xb8]
call fcn.00483d70
mov ecx, eax
call fcn.00484580
push eax
call dword [0x101768bc]
test eax, eax
jne 0x42c4aa
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
lea edx, [esp + 0x94]
mov dword [esp + 0x3c], eax
push edx
lea eax, [esp + 0x40]
push eax
mov dword [esp + 0x48], ecx
call dword [0x1007817c]
mov dword [0x10176708], eax
jmp 0x42c4b0
mov dword [0x10176708], ebp
push 0x13
push 8
lea ecx, [esp + 0x94]
push ecx
lea edx, [esp + 0x80]
push edx
push esi
call dword [0x101768b8]
mov dword [0x10176704], eax
call fcn.004825c0
mov dword [0x10176700], eax
mov dword [0x101766fc], ebx
call fcn.00481530
call fcn.00480db0
call fcn.00480560
call fcn.0047ef60
call fcn.0047d420
call fcn.0047c540
call fcn.0047b6d0
call fcn.00479960
call fcn.0042e3c0
call fcn.0044d9b0
call fcn.004493a0
call fcn.00477520
call fcn.0044a8f0
call fcn.00474890
call fcn.00473d10
call fcn.004727d0
call fcn.0046f660
call fcn.0046ea90
call fcn.0046ce30
call fcn.00468e50
call fcn.004677e0
call fcn.004634f0
call fcn.00460cb0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc4
ret