Function at 0x4b3100
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4f3b3a
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x52a6ec]
xor eax, esp
mov dword [esp + 0x60], eax
push ebx
push esi
push edi
mov eax, dword [0x52a6ec]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
xor edi, edi
mov dword [esp + 0x14], edi
mov esi, ecx
mov eax, 0xf
mov dword [esp + 0x18], esi
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], edi
mov byte [esp + 0x38], 0
mov dword [esp + 0x80], edi
push 1
push 0x507404
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], eax
mov dword [esp + 0x34], edi
mov byte [esp + 0x24], 0
call fcn.00404fd0
mov byte [esp + 0x80], 1
cmp dword [esp + 0x30], 0x10
mov ecx, dword [esp + 0x1c]
lea edx, [esi + 0x18]
jae 0x4b3193
lea ecx, [esp + 0x1c]
mov esi, dword [edx + 0x10]
mov ebx, dword [esp + 0x2c]
mov eax, esi
cmp esi, ebx
jb 0x4b31a2
mov eax, ebx
cmp dword [edx + 0x14], 0x10
jb 0x4b31aa
mov edx, dword [edx]
call fcn.0040af80
cmp eax, edi
jne 0x4b31c5
cmp esi, ebx
jae 0x4b31bc
or eax, 0xffffffff
jmp 0x4b31c3
xor eax, eax
cmp esi, ebx
setne al
cmp eax, edi
sete al
test al, al
je 0x4b31dc
mov ecx, dword [esp + 0x18]
add ecx, 0x14
call fcn.004b7e60
mov bl, 1
jmp 0x4b31de
xor bl, bl
mov esi, 0x10
mov byte [esp + 0x80], 0
cmp dword [esp + 0x30], esi
jb 0x4b31fe
mov eax, dword [esp + 0x1c]
push eax
call fcn.004c9387
add esp, 4
push 1
test bl, bl
je 0x4b3214
push 0x51121c
lea ecx, [esp + 0x40]
call fcn.00404fd0
jmp 0x4b3285
push 0x5112ac
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0xf
mov dword [esp + 0x34], edi
mov byte [esp + 0x24], 0
call fcn.00404fd0
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x1c]
mov byte [esp + 0x80], 2
call fcn.004b4660
mov byte [esp + 0x80], 0
mov bl, al
cmp dword [esp + 0x30], esi
jb 0x4b3265
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.004c9387
add esp, 4
test bl, bl
je 0x4b3461
push 1
push 0x50c6cc
lea ecx, [esp + 0x40]
call fcn.00404fd0
jmp 0x4b3285
mov esi, 0x10
push 1
push 0x51121c
lea ecx, [esp + 0x24]
mov dword [esp + 0x38], 0xf
mov dword [esp + 0x34], edi
mov byte [esp + 0x24], 0
call fcn.00404fd0
mov byte [esp + 0x80], 3
or dword [esp + 0x14], 1
mov ecx, dword [esp + 0x1c]
cmp dword [esp + 0x30], esi
jae 0x4b32c1
lea ecx, [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov esi, dword [edx + 0x28]
mov ebx, dword [esp + 0x2c]
add edx, 0x18
mov eax, esi
cmp esi, ebx
jb 0x4b32d7
mov eax, ebx
cmp dword [edx + 0x14], 0x10
jb 0x4b32df
mov edx, dword [edx]
call fcn.0040af80
cmp eax, edi
jne 0x4b32fa
cmp esi, ebx
jae 0x4b32f1
or eax, 0xffffffff
jmp 0x4b32f8
xor eax, eax
cmp esi, ebx
setne al
cmp eax, edi
sete al
test al, al
jne 0x4b337a
push 1
push 0x50c6cc
lea ecx, [esp + 0x5c]
mov dword [esp + 0x70], 0xf
mov dword [esp + 0x6c], edi
mov byte [esp + 0x5c], al
call fcn.00404fd0
or dword [esp + 0x14], 2
cmp dword [esp + 0x68], 0x10
mov ecx, dword [esp + 0x54]
jae 0x4b3335
lea ecx, [esp + 0x54]
mov edx, dword [esp + 0x18]
mov esi, dword [edx + 0x28]
mov ebx, dword [esp + 0x64]
add edx, 0x18
mov eax, esi
cmp esi, ebx
jb 0x4b334b
mov eax, ebx
cmp dword [edx + 0x14], 0x10
jb 0x4b3353
mov edx, dword [edx]
call fcn.0040af80
cmp eax, edi
jne 0x4b336e
cmp esi, ebx
jae 0x4b3365
or eax, 0xffffffff
jmp 0x4b336c
xor eax, eax
cmp esi, ebx
setne al
cmp eax, edi
sete al
mov byte [esp + 0x13], 1
test al, al
je 0x4b337f
mov byte [esp + 0x13], 0
mov dword [esp + 0x80], 3
mov ebx, dword [esp + 0x14]
mov esi, 0x10
test bl, 2
je 0x4b33c3
and ebx, 0xfffffffd
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x68], esi
jb 0x4b33b2
mov edx, dword [esp + 0x54]
push edx
call fcn.004c9387
add esp, 4
mov dword [esp + 0x68], 0xf
mov dword [esp + 0x64], edi
mov byte [esp + 0x54], 0
mov dword [esp + 0x80], edi
test bl, 1
je 0x4b33fa
and ebx, 0xfffffffe
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x30], esi
jb 0x4b33e9
mov eax, dword [esp + 0x1c]
push eax
call fcn.004c9387
add esp, 4
mov dword [esp + 0x30], 0xf
mov dword [esp + 0x2c], edi
mov byte [esp + 0x1c], 0
cmp byte [esp + 0x13], 0
mov ecx, dword [esp + 0x18]
je 0x4b3425
push ecx
call fcn.004b28b0
test al, al
jne 0x4b3280
mov dword [esp + 0x80], 0xffffffff
cmp dword [esp + 0x4c], 0x10
jmp 0x4b3470
lea edx, [esp + 0x38]
call fcn.004b4660
mov dword [esp + 0x80], 0xffffffff
test al, al
je 0x4b3454
cmp dword [esp + 0x4c], esi
jb 0x4b3450
mov eax, dword [esp + 0x38]
push eax
call fcn.004c9387
add esp, 4
mov al, 1
jmp 0x4b3481
cmp dword [esp + 0x4c], esi
jb 0x4b347f
mov ecx, dword [esp + 0x38]
push ecx
jmp 0x4b3477
mov dword [esp + 0x80], 0xffffffff
cmp dword [esp + 0x4c], esi
jb 0x4b347f
mov edx, dword [esp + 0x38]
push edx
call fcn.004c9387
add esp, 4
xor al, al
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x60]
xor ecx, esp
call fcn.004c9392
mov esp, ebp
pop ebp
ret