Function at 0x4c3480
Capabilities:
Get process heap flags

Disassembly:
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, eax
sub esp, 0xdc
or edx, ecx
je 0x4c349c
mov dword [0x1018ef9c], ecx
jmp 0x4c34a7
call fcn.00507f30
mov dword [0x1018ef9c], edx
push ebx
push ebp
push esi
push edi
mov dword [0x1018ef98], eax
call dword [0x100820c8]
push 0
push 0
push 0
mov dword [0x1018ef94], eax
call dword [0x100820fc]
mov esi, dword [0x100820f8]
mov dword [0x1018ef90], eax
call esi
mov dword [0x1009541c], eax
call esi
push 0x10082ab4
push 0x10082a98
mov dword [0x10095420], eax
mov dword [0x1018ef8c], 0
call dword [0x1008221c]
mov esi, dword [0x10082224]
push eax
call esi
test eax, eax
mov dword [0x1018ef88], eax
je 0x4c351e
push 0x1018ef8c
call dword [0x10082210]
push eax
call dword [0x1018ef88]
mov ebp, dword [0x10082208]
xor eax, eax
cmp dword [0x1018ef8c], eax
push 0x10082a84
setne al
lea eax, [eax*4 + 4]
mov dword [0x1018ef84], eax
call ebp
mov edi, eax
push 0x10082a78
push edi
call esi
push 0x10082a68
push edi
mov dword [0x1018ef80], eax
call esi
push 0x10082a58
push edi
mov dword [0x1018ef7c], eax
call esi
push 0x10082a40
push edi
mov dword [0x1018ef78], eax
call esi
push 0x10082a28
push edi
mov dword [0x1018ef74], eax
call esi
push 0x10082a1c
push edi
mov dword [0x1018ef70], eax
call esi
push 0x10082a10
push edi
mov dword [0x1018ef6c], eax
call esi
push 0x100829f8
push edi
mov dword [0x1018ef68], eax
call esi
push 0x100829e0
push edi
mov dword [0x1018ef64], eax
call esi
push 0x100829c4
push edi
mov dword [0x1018ef60], eax
call esi
push 0x100829ac
push edi
mov dword [0x1018ef5c], eax
call esi
push 0x10082990
push edi
mov dword [0x1018ef58], eax
call esi
push 0x10082974
push edi
mov dword [0x1018ef54], eax
call esi
push 0x10082960
push edi
mov dword [0x1018ef50], eax
call esi
push 0x10082944
push edi
mov dword [0x1018ef4c], eax
call esi
push 0x10082930
push edi
mov dword [0x1018ef48], eax
call esi
push 0x1008291c
push edi
mov dword [0x1018ef44], eax
call esi
push 0x10082904
push edi
mov dword [0x1018ef40], eax
call esi
mov dword [0x1018ef3c], eax
push 0x100828e4
push edi
call esi
push 0x100828cc
push edi
mov dword [0x1018ef38], eax
call esi
push 0x100828b4
push edi
mov dword [0x1018ef34], eax
call esi
push 0x1008289c
push edi
mov dword [0x1018ef30], eax
call esi
push 0x10082888
push edi
mov dword [0x1018ef2c], eax
call esi
push 0x10082870
push edi
mov dword [0x1018ef28], eax
call esi
push 0x10082864
push edi
mov dword [0x1018ef24], eax
call esi
push 0x10082854
push edi
mov dword [0x1018ef20], eax
call esi
push 0x1008283c
push edi
mov dword [0x1018ef1c], eax
call esi
push 0x10082830
push edi
mov dword [0x1018ef18], eax
call esi
push 0x10082818
push edi
mov dword [0x1018ef14], eax
call esi
push 0x10082800
push edi
mov dword [0x1018ef10], eax
call esi
push 0x100827ec
push edi
mov dword [0x1018ef0c], eax
call esi
push 0x100827d4
push edi
mov dword [0x1018ef08], eax
call esi
push 0x10082a98
mov dword [0x1018ef04], eax
call ebp
mov edi, eax
push 0x100827c4
push edi
call esi
push 0x100827b4
push edi
mov dword [0x1018ef00], eax
call esi
push 0x100827a0
push edi
mov dword [0x1018eefc], eax
call esi
push 0x1008278c
push edi
mov dword [0x1018eef8], eax
call esi
push 0x10082780
push edi
mov dword [0x1018eef4], eax
call esi
push 0x10082760
mov dword [0x1018eef0], eax
push edi
call esi
push 0x10082740
push edi
mov dword [0x1018eeec], eax
call esi
push 0x10082724
push edi
mov dword [0x1018eee8], eax
call esi
push 0x10082718
push edi
mov dword [0x1018eee4], eax
call esi
mov edi, dword [0x10082200]
push 0x40
push 0x1000
push 0x25
push 0
mov dword [0x1018eee0], eax
call edi
push 0x25
push 0x100826f0
push eax
mov dword [0x1018eedc], eax
call fcn.004c3260
add esp, 0xc
push 0
push 0x1018eed8
push 1
push 0x100826d0
call dword [0x10082004]
test eax, eax
mov ebx, dword [0x10082008]
je 0x4c37f3
lea ecx, [esp + 0x34]
push ecx
xor eax, eax
push 0x1018eed4
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x3c], eax
mov eax, dword [0x1018eed8]
push edx
push eax
call dword [0x1008200c]
test eax, eax
je 0x4c37f3
push 1
push 0x1018eec0
call ebx
mov ecx, dword [esp + 0x34]
mov edx, dword [0x1018eed4]
push ecx
push edx
push 1
push 0x1018eec0
call dword [0x10082010]
push 1
push 0x1018eeac
call ebx
xor ebx, ebx
push ebx
push ebx
push 1
push 0x1018eeac
call dword [0x10082014]
push 4
push 0x1000
push 0xa0000
push ebx
call edi
push ebx
push 0x400
push 0xa0000
push eax
mov dword [0x1018eea8], eax
call fcn.004df720
add esp, 0x10
test eax, eax
je 0x4c3ea1
push 0x1018ee84
call dword [0x10082090]
push 0x1018ed68
mov dword [0x1018ed68], 0x11c
call dword [0x100820f4]
push 0x20000
call fcn.004c32d0
add esp, 4
mov dword [0x1018ed64], eax
xor edi, edi
push edi
call dword [0x1018ef64]
mov ecx, dword [0x1018ed64]
mov word [ecx + edi*2], ax
add edi, 1
cmp edi, 0x10000
jl 0x4c3871
push 0xc
call fcn.004d7f00
mov edi, eax
add esp, 4
cmp edi, ebx
je 0x4c38c7
push 0x200
push ebx
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], 0xff
call fcn.004c3370
mov dword [edi], eax
mov dword [edi + 4], ebx
mov word [eax], bx
add esp, 8
mov dword [0x1018efa0], edi
jmp 0x4c38cd
mov dword [0x1018efa0], ebx
lea edx, [esp + 0x18]
push edx
push 8
call dword [0x10082210]
push eax
call dword [0x10082018]
test eax, eax
je 0x4c39ac
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
push ebx
push ebx
push 1
push ecx
mov dword [esp + 0x28], ebx
call dword [0x1008201c]
mov eax, dword [esp + 0x14]
cmp eax, ebx
jbe 0x4c39a1
push eax
mov ebx, eax
call fcn.004c32d0
add esp, 4
lea edx, [esp + 0x14]
push edx
push ebx
mov edi, eax
mov eax, dword [esp + 0x20]
push edi
push 1
push eax
call dword [0x1008201c]
test eax, eax
je 0x4c3992
mov edx, dword [edi]
lea ecx, [esp + 0x28]
push ecx
push edx
call dword [0x10082020]
xor eax, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x28]
push eax
lea ecx, [esp + 0x3c]
call fcn.004c1990
mov ebx, dword [esp + 0x38]
mov ecx, dword [0x1018efa0]
push ebx
call fcn.004c1990
test ebx, ebx
je 0x4c3987
push ebx
call fcn.004c3420
add esp, 4
xor eax, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x28]
push ecx
call dword [0x10082078]
test edi, edi
je 0x4c399f
push edi
call fcn.004c3420
add esp, 4
xor ebx, ebx
mov edx, dword [esp + 0x18]
push edx
call dword [0x100821f0]
push 0x100826b8
push 0x1018ed5c
call dword [0x1018ef74]
mov dword [0x1018ed58], ebx
xor ecx, ecx
mov eax, 0x10082540
lea esp, [esp]
add eax, 2
add ecx, 1
cmp word [eax], bx
jne 0x4c39d0
lea eax, [ecx + ecx + 2]
push eax
push ebx
call dword [0x10082084]
push eax
call dword [0x10082088]
mov dword [0x1018ed54], eax
xor edx, edx
mov ecx, 0x10082540
lea ebx, [ebx]
add ecx, 2
add edx, 1
cmp word [ecx], bx
jne 0x4c3a00
lea ecx, [edx + edx + 2]
push ecx
push 0x10082540
push eax
call fcn.004c3260
add esp, 0xc
push 0x10082530
call ebp
cmp eax, ebx
mov dword [0x1018ed50], eax
je 0x4c3c0b
push 0x10082510
push eax
call esi
mov edx, dword [0x1018ed50]
push 0x100824e4
push edx
mov dword [0x1018ed4c], eax
call esi
mov dword [0x1018ed48], eax
mov eax, dword [0x1018ed50]
push 0x100824b8
push eax
call esi
mov dword [0x1018ed44], eax
mov eax, dword [0x1018ed50]
cmp eax, ebx
je 0x4c3ac1
push 0x10
push 1
push eax
call dword [0x100820f0]
mov ecx, dword [0x1018ed50]
mov edi, eax
push edi
push ecx
call dword [0x100820ec]
push eax
call dword [0x100820e8]
mov edx, dword [0x1018ed50]
push edi
push edx
mov ebx, eax
call dword [0x100820e4]
test ebx, ebx
je 0x4c3ac1
cmp word [ebx + 0x26], 0
lea eax, [ebx + 0x26]
jne 0x4c3ab9
lea ecx, [ecx]
add eax, 2
cmp word [eax], 0
je 0x4c3ab0
mov eax, dword [eax + 0x10]
mov dword [0x1018ed40], eax
mov ebx, dword [0x1008221c]
push 0x1008249c
push 0x10082a84
call ebx
push eax
call esi
push 0x10082480
mov dword [0x1018ed3c], eax
call ebp
push 0x10082470
push eax
mov dword [0x1018ed38], eax
call esi
push 0x10082460
mov dword [0x1018ed34], eax
call ebp
push 0x1008244c
push eax
mov dword [0x1018ed30], eax
call esi
push 2
mov ebp, 1
push 0
mov dword [0x1018ed2c], eax
mov dword [esp + 0x18], ebp
call dword [0x10082084]
push eax
call dword [0x10082088]
mov edi, dword [0x100820e0]
mov dword [0x1018ed28], eax
lea ecx, [esp + 0x10]
mov word [eax], 0
mov edx, dword [0x1018ed28]
push ecx
push edx
call edi
test eax, eax
jne 0x4c3b84
call dword [0x100820ac]
cmp eax, 0x6f
jne 0x4c3b84
mov eax, dword [esp + 0x10]
mov ecx, dword [0x1018ed28]
add eax, ebp
mov dword [esp + 0x10], eax
add eax, eax
push eax
push ecx
push 0
call dword [0x10082084]
push eax
call dword [0x100820d8]
lea edx, [esp + 0x10]
push edx
push eax
mov dword [0x1018ed28], eax
call edi
call dword [0x100821e4]
push 0x10000
mov dword [0x1018ed24], eax
call fcn.004c32d0
add esp, 4
mov edi, eax
lea eax, [esp + 0x1c]
push eax
push 0x1008243c
mov dword [0x1018ed20], ebp
mov ebp, dword [0x10082024]
push 0x80000005
call ebp
test eax, eax
jne 0x4c3c2f
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x20]
push ecx
push 0x10000
push edi
push 7
push edx
call dword [0x1018ef6c]
mov ecx, dword [esp + 0x1c]
neg eax
sbb eax, eax
add eax, 1
mov dword [0x1018ed20], eax
lea eax, [esp + 0x20]
push eax
push 0x10000
push edi
push 5
push ecx
call dword [0x1018ef6c]
test eax, eax
jne 0x4c3c16
mov edx, dword [esp + 0x20]
mov dword [0x1018ed1c], edx
jmp 0x4c3c20
mov dword [0x1018ed4c], ebx
jmp 0x4c3ac1
mov dword [0x1018ed1c], 0xc
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4c3c2f
push eax
call dword [0x10082028]
test edi, edi
je 0x4c3c3c
push edi
call fcn.004c3420
add esp, 4
push 0x10000
call fcn.004c32d0
add esp, 4
mov edi, eax
lea eax, [esp + 0x30]
push eax
push 0x1008243c
push 0x80000005
mov dword [0x1018ed18], 1
call ebp
test eax, eax
jne 0x4c3c9d
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x78]
push ecx
push 0x10000
push edi
push 7
push edx
call dword [0x1018ef6c]
neg eax
sbb eax, eax
add eax, 1
mov dword [0x1018ed18], eax
mov eax, dword [esp + 0x30]
test eax, eax
je 0x4c3c9d
push eax
call dword [0x10082028]
test edi, edi
je 0x4c3caa
push edi
call fcn.004c3420
add esp, 4
lea eax, [esp + 0x2c]
push eax
push 0
push 0
push 0
push 0
push 0x40
mov ebp, 0xfefe
push 0x10082420
lea ecx, [esp + 0xac]
mov dword [esp + 0x48], ebp
call fcn.0050aae0
mov ecx, eax
call fcn.0050aab0
push eax
push 0
lea ecx, [esp + 0xf4]
call fcn.0050aa80
mov ecx, eax
call fcn.0050aab0
push eax
push 0x20019
lea ecx, [esp + 0x94]
push ecx
call dword [0x1018ef68]
mov eax, dword fs:[0x18]
xor edx, edx
cmp dword [esp + 0x2c], edx
sete dl
mov dword [0x1018ed14], edx
mov ecx, dword [eax + 0x30]
mov edx, dword [ecx + 0x10]
mov edi, dword [edx + 0x2c]
mov eax, 0xfefefefe
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
lea eax, [esp + 0x50]
push eax
push 0
push 0x40
push 0x1008241c
lea ecx, [esp + 0xa8]
call fcn.0050aae0
mov ecx, eax
call fcn.0050aab0
push eax
push edi
lea ecx, [esp + 0xd0]
call fcn.0050aa80
mov ecx, eax
call fcn.0050aab0
push eax
call dword [0x1018ef10]
test eax, eax
jne 0x4c3dba
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
lea eax, [esp + 0xac]
mov dword [esp + 0x48], ecx
push eax
lea ecx, [esp + 0x4c]
push ecx
mov dword [esp + 0x54], edx
call dword [0x100820dc]
mov dword [0x1018ed10], eax
jmp 0x4c3dc4
mov dword [0x1018ed10], 1
push 0x1008240c
push 0x10082400
call ebx
push eax
call esi
lea edx, [esp + 0x24]
push edx
push 1
lea ecx, [esp + 0xa8]
push ecx
push 1
push edi
mov dword [esp + 0x38], ebp
call eax
xor edx, edx
cmp dword [esp + 0x24], edx
push 0x13
push 8
setne dl
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x8c]
push ecx
push edi
mov dword [0x1018ed0c], edx
call dword [0x1018ef0c]
mov dword [0x1018ed08], eax
call fcn.00509260
mov dword [0x1018ed04], eax
mov dword [0x1018ed00], 0
call fcn.00507e70
call fcn.00507640
call fcn.00506cf0
call fcn.005056a0
call fcn.00503b50
call fcn.00502c60
call fcn.00501df0
call fcn.004fff70
call fcn.004d9b90
call fcn.004fde90
call fcn.004fa7c0
call fcn.004f9060
call fcn.004f7a90
call fcn.004f4d60
call fcn.004f41e0
call fcn.004f2bd0
call fcn.004ef7a0
call fcn.004eeb40
call fcn.004ecf90
call fcn.004e9010
call fcn.004e7c10
call fcn.004e3b30
call fcn.004e0d60
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xdc
ret