Function at 0x414e20
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4bc670
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push esi
push edi
mov eax, dword [0x4e9250]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0xc]
add esi, 4
mov ecx, 0xb
mov edi, dword [ebp + 8]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp + 0xc]
add esi, 0x30
mov edi, dword [ebp + 8]
add edi, 0x108
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
fld qword [ecx + 0x90]
fstp qword [eax + 0x168]
push 0x40
mov edx, dword [ebp + 0xc]
add edx, 0x98
push edx
mov eax, dword [ebp + 8]
add eax, 0x390
push eax
call fcn.004a7490
add esp, 0xc
push 0x40
mov ecx, dword [ebp + 0xc]
add ecx, 0xd8
push ecx
mov edx, dword [ebp + 8]
add edx, 0x5e0
push edx
call fcn.004a7490
add esp, 0xc
push 0x40
mov eax, dword [ebp + 0xc]
add eax, 0x118
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x6ac
push ecx
call fcn.004a7490
add esp, 0xc
mov edx, dword [ebp + 0xc]
cmp dword [edx + 0x184], 0
je 0x414f05
push 0x80
mov eax, dword [ebp + 0xc]
add eax, 0x184
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x450
push ecx
call fcn.004a7490
add esp, 0xc
jmp 0x414f25
push 0x100
mov edx, dword [ebp + 0xc]
add edx, 0x5d4
push edx
mov eax, dword [ebp + 8]
add eax, 0x450
push eax
call fcn.004a7490
add esp, 0xc
push 0x80
mov ecx, dword [ebp + 0xc]
add ecx, 0x208
push ecx
mov edx, dword [ebp + 8]
add edx, 0x620
push edx
call fcn.004a7490
add esp, 0xc
push 0x80
mov eax, dword [ebp + 0xc]
add eax, 0x28c
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x6ec
push ecx
call fcn.004a7490
add esp, 0xc
mov edx, dword [ebp + 0xc]
add edx, 0x158
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x414f89
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dl, byte [ecx + 0x158]
mov byte [eax + 0x4311], dl
mov eax, dword [ebp + 0xc]
add eax, 0x15c
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x414fab
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov al, byte [edx + 0x15c]
mov byte [ecx + 0x4313], al
mov ecx, dword [ebp + 0xc]
add ecx, 0x160
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x414fce
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x160]
mov dword [edx + 0x76c], ecx
mov edx, dword [ebp + 0xc]
add edx, 0x164
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x414ff1
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dl, byte [ecx + 0x164]
mov byte [eax + 0x770], dl
mov eax, dword [ebp + 0xc]
add eax, 0x168
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x415013
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x168]
mov dword [ecx + 0x6a0], eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x16c
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x415036
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov cl, byte [eax + 0x16c]
mov byte [edx + 0x6a4], cl
mov edx, dword [ebp + 0xc]
add edx, 0x170
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x415059
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x170]
mov dword [eax + 0x5d0], edx
mov eax, dword [ebp + 0xc]
add eax, 0x174
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x41507b
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov al, byte [edx + 0x174]
mov byte [ecx + 0x5d4], al
mov ecx, dword [ebp + 0xc]
add ecx, 0x175
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x41509e
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov cl, byte [eax + 0x175]
mov byte [edx + 0x4301], cl
mov edx, dword [ebp + 0xc]
add edx, 0x176
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x4150c1
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dl, byte [ecx + 0x176]
mov byte [eax + 0x4302], dl
mov eax, dword [ebp + 0xc]
add eax, 0x178
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x4150e3
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov al, byte [edx + 0x178]
mov byte [ecx + 0x4315], al
mov ecx, dword [ebp + 0xc]
add ecx, 0x17c
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x415106
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x17c]
mov dword [edx + 0x178], ecx
mov edx, dword [ebp + 0xc]
add edx, 0x180
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x415129
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x180]
mov dword [eax + 0x38c], edx
mov eax, dword [ebp + 0xc]
add eax, 0x204
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x41514b
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x204]
mov dword [ecx + 0x6a8], eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x288
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x41516e
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x288]
mov dword [edx + 0x5dc], ecx
mov edx, dword [ebp + 0xc]
add edx, 0x30c
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x415191
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dl, byte [ecx + 0x30c]
mov byte [eax + 0x4300], dl
mov eax, dword [ebp + 0xc]
add eax, 0x30d
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x4151b3
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov al, byte [edx + 0x30d]
mov byte [ecx + 0x4310], al
mov ecx, dword [ebp + 0xc]
add ecx, 0x310
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x4151d6
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
fld qword [eax + 0x310]
fstp qword [edx + 0x170]
mov ecx, dword [ebp + 0xc]
add ecx, 0x318
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x4151f9
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov cl, byte [eax + 0x318]
mov byte [edx + 0x4314], cl
mov edx, dword [ebp + 0xc]
add edx, 0x319
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x41521c
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dl, byte [ecx + 0x319]
mov byte [eax + 0x4316], dl
mov eax, dword [ebp + 0xc]
add eax, 0x41e
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x41523e
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov al, byte [edx + 0x41e]
mov byte [ecx + 0x4544], al
mov ecx, dword [ebp + 0xc]
add ecx, 0x523
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x415261
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov cl, byte [eax + 0x523]
mov byte [edx + 0x4303], cl
mov edx, dword [ebp + 0xc]
add edx, 0x524
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x415284
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dl, byte [ecx + 0x524]
mov byte [eax + 0x4312], dl
mov eax, dword [ebp + 0xc]
add eax, 0x525
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x4152a6
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov al, byte [edx + 0x525]
mov byte [ecx + 0x4317], al
mov ecx, dword [ebp + 0xc]
add ecx, 0x554
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x4152c9
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x554]
mov dword [edx + 0x4750], ecx
mov edx, dword [ebp + 0xc]
add edx, 0x558
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x4152ec
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x558]
mov dword [eax + 0x4754], edx
mov eax, dword [ebp + 0xc]
add eax, 0x55c
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x41530e
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x55c]
mov dword [ecx + 0x4758], eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x560
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x415331
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x560]
mov dword [edx + 0x475c], ecx
mov edx, dword [ebp + 0xc]
add edx, 0x564
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x415354
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x564]
mov dword [eax + 0x4760], edx
mov eax, dword [ebp + 0xc]
add eax, 0x568
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x415376
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x568]
mov dword [ecx + 0x17c], eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x56c
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x415399
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov cl, byte [eax + 0x56c]
mov byte [edx + 0x4318], cl
mov edx, dword [ebp + 0xc]
add edx, 0x56d
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x4153bc
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dl, byte [ecx + 0x56d]
mov byte [eax + 0x38a], dl
mov eax, dword [ebp + 0xc]
add eax, 0x570
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x4153de
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x570]
mov dword [ecx + 0x5d8], eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x574
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x415401
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x574]
mov dword [edx + 0x432c], ecx
mov edx, dword [ebp + 0xc]
add edx, 0x5d0
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x415424
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dl, byte [ecx + 0x5d0]
mov byte [eax + 0x431a], dl
mov eax, dword [ebp + 0xc]
add eax, 0x6d4
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x415446
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x6d4]
mov dword [ecx + 0x4330], eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x6f0
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x415469
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov cl, byte [eax + 0x6f0]
mov byte [edx + 0x431d], cl
mov edx, dword [ebp + 0xc]
add edx, 0x6f1
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x41548c
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov dl, byte [ecx + 0x6f1]
mov byte [eax + 0x431e], dl
mov eax, dword [ebp + 0xc]
add eax, 0x31a
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x4154e7
mov ecx, dword [ebp + 0xc]
add ecx, 0x31a
push ecx
lea ecx, [ebp - 0x10]
call fcn.004265e0
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x1c]
call fcn.0047eaf0
push eax
mov eax, dword [ebp + 8]
add eax, 0x433c
push eax
call fcn.0040e980
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.0046eb80
mov ecx, dword [ebp + 0xc]
add ecx, 0x41f
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x415544
mov edx, dword [ebp + 0xc]
add edx, 0x41f
push edx
lea ecx, [ebp - 0x14]
call fcn.004265e0
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x24]
call fcn.0047eaf0
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x4546
push ecx
call fcn.0040e980
add esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.0046eb80
mov edx, dword [ebp + 0xc]
add edx, 0x528
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x41556b
mov esi, dword [ebp + 0xc]
add esi, 0x528
mov edi, dword [ebp + 8]
add edi, 0x2c
mov ecx, 0xb
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 0xc]
add eax, 0x578
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x415591
mov esi, dword [ebp + 0xc]
add esi, 0x578
mov edi, dword [ebp + 8]
add edi, 0x58
mov ecx, 0xb
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0xc]
add ecx, 0x5a4
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x4155bb
mov esi, dword [ebp + 0xc]
add esi, 0x5a4
mov edi, dword [ebp + 8]
add edi, 0xb0
mov ecx, 0xb
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp + 0xc]
add edx, 0x6d8
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x4155ed
mov eax, dword [ebp + 0xc]
add eax, 0x6d8
mov ecx, dword [ebp + 8]
add ecx, 0x477c
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x6e4
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x41561f
mov edx, dword [ebp + 0xc]
add edx, 0x6e4
mov eax, dword [ebp + 8]
add eax, 0x4788
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov edx, dword [edx + 8]
mov dword [eax + 8], edx
mov eax, dword [ebp + 0xc]
add eax, 0x6f0
sub eax, dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jae 0x415651
mov ecx, dword [ebp + 0xc]
add ecx, 0x6f0
mov edx, dword [ebp + 8]
add edx, 0x4788
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov ecx, dword [ecx + 8]
mov dword [edx + 8], ecx
mov edx, dword [ebp + 0xc]
add edx, 0x6fc
sub edx, dword [ebp + 0xc]
cmp edx, dword [ebp + 0x10]
jae 0x415683
mov eax, dword [ebp + 0xc]
add eax, 0x6fc
mov ecx, dword [ebp + 8]
add ecx, 0x4788
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x708
sub ecx, dword [ebp + 0xc]
cmp ecx, dword [ebp + 0x10]
jae 0x4156b5
mov edx, dword [ebp + 0xc]
add edx, 0x708
mov eax, dword [ebp + 8]
add eax, 0x4788
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov edx, dword [edx + 8]
mov dword [eax + 8], edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret