Function at 0x4094f1
Capabilities:
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x454754
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x46a1c0]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov edi, ebx
call fcn.0041b510
call fcn.0041a7a2
call fcn.0041a771
call fcn.0041b4ea
call fcn.0041a7d7
call fcn.0041a7b9
call fcn.0041a7c3
call fcn.0041a795
call fcn.0041a7e1
call fcn.0041a7ee
call fcn.0041a77b
call fcn.0041a788
call fcn.0041a764
call fcn.0041a7ac
call fcn.0041a7cd
lea eax, [esp + 0x14]
call fcn.0041a319
and dword [esp + 0x30], 0
mov esi, eax
call fcn.00409270
push 5
mov edi, esi
call fcn.0041b3fe
push str.OPTIMUM
call fcn.0041b4f4
push str.Deflate
call fcn.0041a387
push 0x20
call fcn.0041a3cd
push 5
call fcn.0041a3db
push 1
call fcn.0041a3bf
push str..sys__.com_
push 1
push 0x10
push 0x46083c
push 0x460844
mov eax, esi
push eax
call fcn.0041a3e9
push str..ppt__.xls__.doc__.ani__.ico__.cur__.pcx__.emf_
push 6
push 0xe
mov edi, 0x460848
push edi
push 0x460854
mov eax, esi
push eax
call fcn.0041a3e9
push str..alz__.arc__.arj__.bz__.bz2__.cab__.egg__.ice__.ear__.war__.gz__.ha__.jar__.lha__.lzh__.pak__.rar__.tbz__.tbz2__.tgz__.7z__.z__.zip__.zoo__.docx__.xlsx__.pptx__.jpg__.jpeg__.png__.gif__.ape__.mp4__.mov__.flac__.flv__.mp3__.ogg__.wma__.wmv_
push 0
push 0
push 0x460858
push 0x460864
mov eax, esi
push eax
call fcn.0041a3e9
push str..h__.c__.java__.cpp__.txt__.pas__.xml__.html__.htm__.bat__.1st__.ans__.asc__.ascii__.bbs__.charset__.dbt__.err__.faq__.hs__.klg__.man__.ada__.as__.au3__.b__.bas__.bb__.bet__.cp__.cs__.d__.def__.dev__.dpr__.dsp__.fpp__.hpp__.hh__.hs__.inc__.j__.jav__.xaml__.x_
push 4
push 0x40
push 0x460868
push 0x460870
mov eax, esi
push eax
call fcn.0041a3e9
push ecx
push ecx
lea eax, [esp + 0x1c]
mov esi, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0041a341
mov ecx, ebx
call fcn.0041a8ed
push 8
push 0xe
push edi
push 0x460874
push 6
push ebx
call fcn.0041a94e
lea eax, [esp + 0x1c]
call fcn.0041a319
mov esi, eax
mov byte [esp + 0x30], 1
call fcn.00409270
push 7
mov edi, esi
call fcn.0041b3fe
push str.CS_PRIORITY
call fcn.0041b4f4
push str.Deflate
call fcn.0041a387
push 0x20
call fcn.0041a3cd
push 4
call fcn.0041a3db
push 1
call fcn.0041a3bf
push str..alz__.arc__.arj__.bz__.bz2__.cab__.egg__.ice__.ear__.war__.gz__.ha__.jar__.lha__.lzh__.pak__.rar__.tbz__.tbz2__.tgz__.7z__.z__.zip__.zoo__.docx__.xlsx__.pptx__.jpg__.jpeg__.png__.gif__.ape__.mp4__.mov__.flac__.flv__.mp3__.ogg__.wma__.wmv_
push 0
push 0
mov edi, 0x460858
push edi
push 0x460864
mov eax, esi
push eax
call fcn.0041a3e9
push ecx
push ecx
lea eax, [esp + 0x24]
mov esi, esp
mov dword [esp + 0x18], esp
push eax
call fcn.0041a341
mov ecx, ebx
call fcn.0041a8ed
push 2
push 0x20
push str.Deflate
push str.Normal
push 9
push ebx
call fcn.0041a94e
xor eax, eax
push eax
push eax
push edi
push str.Nocomp
push eax
push ebx
call fcn.0041a94e
push 1
push str.Zip_2.0_Compatible
push ebx
call fcn.0041a9f7
push 2
push str.AES_128_bit
push ebx
call fcn.0041a9f7
push 4
push str.AES_256_bit
push ebx
call fcn.0041a9f7
push 5
push str.LEA_128_bit
push ebx
call fcn.0041a9f7
push 7
push str.LEA_256_bit
push ebx
call fcn.0041a9f7
lea ecx, [esp + 0x1c]
mov byte [esp + 0x30], 0
call fcn.0041a356
or dword [esp + 0x30], 0xffffffff
lea ecx, [esp + 0x14]
call fcn.0041a356
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4