Function at 0x4867d0
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x523694
mov eax, dword fs:[0]
push eax
sub esp, 0x40
mov eax, dword [0x57e9a8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x4c]
call fcn.004a83d0
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x4c]
add ecx, 0x18
call fcn.004bacb0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x4c]
add ecx, 0x24
call fcn.004bacb0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x4c]
add ecx, 0x30
call fcn.004bacb0
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x4c]
add ecx, 0x3c
call fcn.004a83d0
mov byte [ebp - 4], 4
mov ecx, 0x580abc
call fcn.0042e470
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0x30
push eax
call fcn.00415190
mov ecx, eax
call fcn.0043ba60
mov ecx, eax
call fcn.0043bb20
movzx ecx, al
test ecx, ecx
jne 0x486884
mov dword [ebp - 0x38], 1
push 0x557c48
lea edx, [ebp - 0x38]
push edx
call fcn.00509f58
mov dword [ebp - 0x10], 0
jmp 0x486896
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jae 0x486903
lea ecx, [ebp - 0x1c]
call fcn.004bacb0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx*4 + 0x5732a4]
push edx
lea eax, [ebp - 0x1c]
push eax
call fcn.00415190
mov ecx, eax
call fcn.0043ba60
mov ecx, eax
call fcn.0043bb20
movzx ecx, al
test ecx, ecx
jne 0x4868e6
mov dword [ebp - 0x3c], 1
push 0x557c48
lea edx, [ebp - 0x3c]
push edx
call fcn.00509f58
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x4c]
add ecx, 0x3c
call fcn.00476480
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1c]
call fcn.00427140
jmp 0x48688d
mov dword [ebp - 0x20], 0
jmp 0x486915
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 2
jae 0x48697f
lea ecx, [ebp - 0x2c]
call fcn.004bacb0
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x20]
mov eax, dword [edx*4 + 0x573348]
push eax
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00415190
mov ecx, eax
call fcn.0043ba60
mov ecx, eax
call fcn.0043bb20
movzx edx, al
test edx, edx
jne 0x486965
mov dword [ebp - 0x40], 1
push 0x557c48
lea eax, [ebp - 0x40]
push eax
call fcn.00509f58
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 0x4c]
call fcn.00476480
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2c]
call fcn.00427140
jmp 0x48690c
push 0x14
mov ecx, dword [ebp - 0x4c]
add ecx, 0x18
call fcn.0043cf50
mov dword [ebp - 0x30], 0
jmp 0x48699e
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
mov ecx, dword [ebp - 0x4c]
add ecx, 0x18
call fcn.0041d760
cmp dword [ebp - 0x30], eax
jge 0x4869fa
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax*4 + 0x5732f8]
push ecx
mov edx, dword [ebp - 0x30]
push edx
mov ecx, dword [ebp - 0x4c]
add ecx, 0x18
call fcn.004853d0
push eax
call fcn.00415190
mov ecx, eax
call fcn.0043ba60
mov ecx, eax
call fcn.0044c230
movzx eax, al
test eax, eax
jne 0x4869f8
mov dword [ebp - 0x44], 1
push 0x557c48
lea ecx, [ebp - 0x44]
push ecx
call fcn.00509f58
jmp 0x486995
push 0x18
mov ecx, dword [ebp - 0x4c]
add ecx, 0x24
call fcn.0043cf50
mov dword [ebp - 0x34], 0
jmp 0x486a19
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
mov ecx, dword [ebp - 0x4c]
add ecx, 0x24
call fcn.0041d760
cmp dword [ebp - 0x34], eax
jge 0x486a75
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax*4 + 0x5733c8]
push ecx
mov edx, dword [ebp - 0x34]
push edx
mov ecx, dword [ebp - 0x4c]
add ecx, 0x24
call fcn.004853d0
push eax
call fcn.00415190
mov ecx, eax
call fcn.0043ba60
mov ecx, eax
call fcn.0044c230
movzx eax, al
test eax, eax
jne 0x486a73
mov dword [ebp - 0x48], 1
push 0x557c48
lea ecx, [ebp - 0x48]
push ecx
call fcn.00509f58
jmp 0x486a10
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret