Function at 0x48875c
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffd4
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 8], edx
mov esi, eax
xor eax, eax
push ebp
push 0x4889c2
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, 0x4c26f4
mov eax, 0x4c26f0
call fcn.00487464
mov eax, 0x3c2
call fcn.004874a4
mov edi, eax
mov eax, 0x1f0
call fcn.004874b8
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x10], 0x8000
lea eax, [ebp - 0x14]
call fcn.0040b658
mov edx, dword [0x486c00]
xor eax, eax
call fcn.0040ba70
mov dword [esi], eax
mov eax, dword [esi]
mov dword [ebp - 4], eax
mov eax, dword [esi]
mov ebx, eax
lea eax, [ebp - 0x24]
xor ecx, ecx
mov edx, 0x10
call fcn.004047e8
mov dword [ebp - 0x24], 1
push 0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebx + 0x18]
push eax
call sub.gdiplus.dll_GdiplusStartup
lea edx, [ebp - 0x28]
xor eax, eax
call fcn.0044d254
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
call fcn.0040ccdc
mov ecx, dword [ebp - 0xc]
mov edx, edi
call fcn.0040ed1c
call fcn.0040f20c
mov dword [ebx + 0xc0], eax
lea eax, [ebp - 0x2c]
push eax
xor ecx, ecx
mov edx, 0x3b6
mov eax, 0x4889dc
call fcn.00487008
mov eax, dword [ebp - 0x2c]
push eax
mov eax, dword [ebx + 0xc0]
call fcn.0040f090
pop edx
call fcn.0040c0cc
mov eax, dword [ebx + 0xc0]
call fcn.0040f090
mov dl, 5
call fcn.0040c0bc
mov eax, 0x10
call fcn.004874cc
push eax
mov eax, dword [ebx + 0xc0]
call fcn.0040f090
mov edx, 4
pop ecx
call fcn.0040c088
mov eax, dword [ebx + 0xc0]
xor edx, edx
call fcn.0040f39c
mov eax, dword [ebx + 0xc0]
xor edx, edx
call fcn.0040f2c0
mov eax, dword [0x4bc734]
mov edx, dword [ebx + 0xc0]
mov dword [eax], edx
mov edx, dword [esi]
mov eax, dword [ebx + 0xc0]
call fcn.0040bb48
mov eax, ebx
push eax
push 0x48ee94
mov eax, dword [ebx + 0xc0]
call fcn.0040f034
mov eax, ebx
push eax
push 0x48eb7c
mov eax, dword [ebx + 0xc0]
call fcn.0040f51c
mov eax, ebx
push eax
push 0x48e55c
mov eax, dword [ebx + 0xc0]
call fcn.00410390
mov eax, ebx
push eax
push 0x48a89c
mov eax, dword [ebx + 0xc0]
call fcn.0040e014
mov eax, dword [ebx + 0xc0]
mov edx, 0xd3d3d3
call fcn.0040eb88
mov edi, dword [ebx + 0xc0]
mov byte [edi + 0xb0], 1
push ebp
mov eax, edi
call fcn.004874e4
pop ecx
mov dword [ebx + 0x24], eax
push ebp
mov eax, dword [ebx + 0xc0]
call fcn.00487904
pop ecx
mov edi, eax
mov dword [ebx + 0x28], edi
push ebp
mov eax, edi
call fcn.00487a20
pop ecx
mov edx, dword [esi]
mov dword [edx + 0x2c], eax
push ebp
mov eax, dword [ebx + 0x28]
call fcn.00487c9c
pop ecx
mov edx, dword [esi]
mov dword [edx + 0x30], eax
mov eax, dword [ebx + 0x30]
xor edx, edx
call fcn.0040e698
push ebp
mov eax, dword [ebx + 0x28]
call fcn.004883dc
pop ecx
mov edx, dword [esi]
mov dword [edx + 0x34], eax
mov eax, dword [ebx + 0x34]
xor edx, edx
call fcn.0040e698
push 0
push 0xffffffffffffffff
mov ecx, dword [ebx + 0xc0]
mov edx, dword [0x486c14]
xor eax, eax
call fcn.00488b98
mov edx, dword [ebx + 0xc0]
mov dword [edx + 0xee], eax
mov eax, ebx
call fcn.0048a5b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4889c9
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00407098
ret