Function at 0x4973a4
Capabilities:
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
xor ecx, ecx
push ecx
push ecx
push ecx
push ecx
push ebx
push esi
push edi
mov esi, eax
xor eax, eax
push ebp
push 0x4977cc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x10
call fcn.00497250
mov dword [ebp - 4], eax
mov dl, 2
mov eax, esi
call fcn.00464dcc
mov edi, eax
mov ebx, edi
push 1
push 0
mov eax, ebx
mov cl, 1
mov dl, 1
call fcn.00467b04
mov eax, 0x18
call fcn.004972c0
push eax
mov eax, ebx
call fcn.004668e4
mov edx, 4
pop ecx
call fcn.004637e0
mov eax, esi
call fcn.004669ec
push eax
mov eax, 2
call fcn.00497250
pop edx
sub edx, eax
mov eax, ebx
call fcn.0046636c
mov eax, 0x32
call fcn.00497264
mov edx, eax
mov eax, ebx
call fcn.004663b0
mov eax, ebx
mov edx, 0xffffff
call fcn.004663dc
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
push eax
push 0x49ecf8
mov eax, ebx
mov edx, 3
call fcn.00465c68
mov dl, 2
mov eax, edi
call fcn.00464dcc
mov ebx, eax
push 0
push 0
mov cl, 1
mov dl, 1
mov eax, ebx
call fcn.00467b04
mov edx, 0xffffff
mov eax, ebx
call fcn.004663dc
mov eax, 8
call fcn.00497250
mov edx, eax
mov eax, ebx
call fcn.004662d0
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
push eax
push 0x49ecf8
mov edx, 3
mov eax, ebx
call fcn.00465c68
push 0
push 0xffffffffffffffff
mov eax, dword [ebx + 0x30]
xor edx, edx
call fcn.00466498
mov ecx, eax
mov edx, dword [0x497018]
xor eax, eax
call fcn.00498aac
mov esi, eax
mov dword [ebx + 0xee], esi
lea edx, [ebp - 8]
mov eax, 0x4977e8
call fcn.004972d8
mov edx, dword [ebp - 8]
mov eax, esi
xor ecx, ecx
call fcn.00498b24
mov eax, dword [esi + 0x38]
mov edx, dword [eax + 0x18]
mov eax, ebx
call fcn.0046636c
mov eax, dword [esi + 0x38]
mov edx, dword [eax + 0x1c]
mov eax, ebx
call fcn.004663b0
mov eax, dword [ebx + 0x30]
call fcn.004669d0
push eax
mov eax, ebx
call fcn.00466394
pop edx
sub edx, eax
sar edx, 1
jns 0x49751c
adc edx, 0
mov eax, ebx
call fcn.0046631c
mov edx, dword [ebx + 0x28]
or edx, 0x20
mov eax, ebx
call fcn.00465d28
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
push eax
push 0x49cad8
mov eax, ebx
call fcn.00466888
mov eax, ebx
call fcn.00466350
add dword [ebp - 4], eax
mov dl, 2
mov eax, edi
call fcn.00464dcc
mov dl, 1
call fcn.0046763c
mov ebx, eax
push 0
push 0
mov eax, ebx
mov cl, 1
mov dl, 1
call fcn.00467b04
mov eax, ebx
mov edx, dword [ebp - 4]
call fcn.004662d0
lea edx, [ebp - 0xc]
mov eax, 8
call fcn.00448d28
mov edx, dword [ebp - 0xc]
mov eax, ebx
call fcn.00465e44
mov eax, dword [ebx + 0x30]
call fcn.004669d0
mov esi, eax
mov eax, ebx
call fcn.00466394
sub esi, eax
sar esi, 1
jns 0x4975a9
adc esi, 0
mov eax, 3
call fcn.00497250
mov edx, esi
sub edx, eax
mov eax, ebx
call fcn.0046631c
mov eax, ebx
call fcn.00466db0
xor edx, edx
mov eax, edi
call fcn.0046469c
mov ebx, eax
mov eax, 0x258
call fcn.00497250
mov edx, eax
mov eax, ebx
call fcn.004662d0
mov eax, 0x10
call fcn.00497250
mov edx, eax
mov eax, ebx
call fcn.0046636c
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
push eax
push fcn.0049da80
mov eax, ebx
call fcn.00466fe4
mov eax, ebx
xor edx, edx
call fcn.00465eec
xor edx, edx
mov eax, edi
call fcn.0046469c
mov ebx, eax
mov eax, 0x270
call fcn.00497250
mov edx, eax
mov eax, ebx
call fcn.004662d0
mov eax, 0x10
call fcn.00497250
mov edx, eax
mov eax, ebx
call fcn.0046636c
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
push eax
push fcn.0049dd74
mov eax, ebx
call fcn.00466fe4
mov eax, ebx
xor edx, edx
call fcn.00465eec
xor edx, edx
mov eax, edi
call fcn.0046469c
mov ebx, eax
mov eax, 0x288
call fcn.00497250
mov edx, eax
mov eax, ebx
call fcn.004662d0
mov eax, 0x10
call fcn.00497250
mov edx, eax
mov eax, ebx
call fcn.0046636c
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
push eax
push fcn.0049e7f8
mov eax, ebx
call fcn.00466fe4
mov eax, ebx
xor edx, edx
call fcn.00465eec
xor edx, edx
mov eax, edi
call fcn.0046469c
mov esi, eax
mov ebx, esi
push 1
push 0
mov cl, 1
xor edx, edx
mov eax, ebx
call fcn.00467b04
push 0
push 0xffffffffffffffff
mov ecx, esi
mov edx, dword [0x497018]
xor eax, eax
call fcn.00498aac
mov esi, eax
mov dword [ebx + 0xee], esi
lea edx, [ebp - 0x10]
mov eax, 0x49781c
call fcn.004972d8
mov edx, dword [ebp - 0x10]
mov eax, esi
xor ecx, ecx
call fcn.00498b24
mov eax, dword [ebx + 0x30]
call fcn.00466350
mov edx, dword [esi + 0x38]
sub eax, dword [edx + 0x18]
push eax
mov eax, 8
call fcn.00497250
pop edx
sub edx, eax
mov eax, ebx
call fcn.004662d0
mov eax, 8
call fcn.00497264
mov edx, eax
mov eax, ebx
call fcn.0046631c
mov eax, 0x20
call fcn.00497250
mov edx, eax
mov eax, ebx
call fcn.0046636c
mov eax, 0x20
call fcn.00497264
mov edx, eax
mov eax, ebx
call fcn.004663b0
mov edx, dword [ebx + 0x28]
or edx, 0x20
mov eax, ebx
call fcn.00465d28
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
push eax
push 0x499f84
mov eax, ebx
call fcn.00466fe4
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
push eax
push 0x49cbf4
mov eax, ebx
call fcn.00466888
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
push eax
push 0x49c868
mov eax, ebx
call fcn.0046737c
mov eax, dword [ebp + 8]
mov eax, dword [eax - 4]
push eax
push 0x49c878
mov eax, ebx
call fcn.004673a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4977d3
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.0040711c
ret