Function at 0xf16ca0
Capabilities:
Get process heap flags

Disassembly:
sub esp, 0xc4
push ebx
push ebp
push esi
push edi
call dword [0x100780c4]
xor ebx, ebx
push ebx
push ebx
push ebx
mov dword [0x10176940], eax
call dword [0x10078188]
mov dword [0x1017693c], eax
call dword [0x10078178]
push 0x1007a89c
push 0x10078654
mov dword [0x1008a41c], eax
mov dword [0x10176938], ebx
call dword [0x10078210]
mov esi, dword [0x10078218]
push eax
call esi
cmp eax, ebx
mov dword [0x10176934], eax
je 0xf16d0a
push 0x10176938
call dword [0x10078204]
push eax
call dword [0x10176934]
mov ebp, dword [0x100781fc]
xor eax, eax
cmp dword [0x10176938], ebx
push 0x10078688
setne al
lea eax, [eax*4 + 4]
mov dword [0x10176930], eax
call ebp
mov edi, eax
push 0x1007a890
push edi
call esi
push 0x1007860c
push edi
mov dword [0x1017692c], eax
call esi
push 0x1007a880
push edi
mov dword [0x10176928], eax
call esi
push 0x1007863c
push edi
mov dword [0x10176924], eax
call esi
push 0x1007a868
push edi
mov dword [0x10176920], eax
call esi
push 0x1007a13c
push edi
mov dword [0x1017691c], eax
call esi
push 0x1007a1dc
push edi
mov dword [0x10176918], eax
call esi
push 0x1007a850
push edi
mov dword [0x10176914], eax
call esi
push 0x1007a838
push edi
mov dword [0x10176910], eax
call esi
push 0x1007a028
push edi
mov dword [0x1017690c], eax
call esi
push 0x1007a820
push edi
mov dword [0x10176908], eax
call esi
push 0x1007a804
push edi
mov dword [0x10176904], eax
call esi
push 0x1007a7e8
push edi
mov dword [0x10176900], eax
call esi
push 0x1007a7d4
push edi
mov dword [0x101768fc], eax
call esi
push 0x1007a7b8
push edi
mov dword [0x101768f8], eax
call esi
push 0x1007a7a4
push edi
mov dword [0x101768f4], eax
call esi
push 0x1007a318
push edi
mov dword [0x101768f0], eax
call esi
push 0x1007a2f0
push edi
mov dword [0x101768ec], eax
call esi
mov dword [0x101768e8], eax
push 0x1007a784
push edi
call esi
push 0x1007a76c
push edi
mov dword [0x101768e4], eax
call esi
push 0x1007a754
push edi
mov dword [0x101768e0], eax
call esi
push 0x1007a73c
push edi
mov dword [0x101768dc], eax
call esi
push 0x1007a728
push edi
mov dword [0x101768d8], eax
call esi
push 0x1007a710
push edi
mov dword [0x101768d4], eax
call esi
push 0x1007a704
push edi
mov dword [0x101768d0], eax
call esi
push 0x1007a6f4
push edi
mov dword [0x101768cc], eax
call esi
push 0x1007a6dc
push edi
mov dword [0x101768c8], eax
call esi
push 0x1007a6d0
push edi
mov dword [0x101768c4], eax
call esi
push 0x1007a340
push edi
mov dword [0x101768c0], eax
call esi
push 0x1007a398
push edi
mov dword [0x101768bc], eax
call esi
push 0x1007a32c
push edi
mov dword [0x101768b8], eax
call esi
push 0x10078654
mov dword [0x101768b4], eax
call ebp
mov edi, eax
push 0x1007a08c
push edi
call esi
push 0x1007a6c0
push edi
mov dword [0x101768b0], eax
call esi
push 0x1007a6ac
push edi
mov dword [0x101768ac], eax
call esi
push 0x1007a698
push edi
mov dword [0x101768a8], eax
call esi
mov edi, dword [0x100781f4]
push 0x40
push 0x1000
push 0x25
push ebx
mov dword [0x101768a4], eax
call edi
push 0x25
push 0x1007a670
mov dword [0x101768a0], eax
push eax
call fcn.00f05850
add esp, 0xc
push 4
push 0x1000
push 0xa0000
push ebx
call edi
push ebx
push 0x400
push 0xa0000
push eax
mov dword [0x1017689c], eax
call fcn.00f1b840
add esp, 0x10
test eax, eax
je 0xf17553
push 0x1017675c
call dword [0x10078090]
push 0x10176780
mov dword [0x10176780], 0x11c
call dword [0x10078184]
push 0x20000
call fcn.00f058c0
add esp, 4
mov dword [0x10176758], eax
xor edi, edi
jmp 0xf16f90
push edi
call dword [0x10176910]
mov ecx, dword [0x10176758]
mov word [ecx + edi*2], ax
add edi, 1
cmp edi, 0x10000
jl 0xf16f90
push 0xc
call fcn.00f16c90
mov edi, eax
add esp, 4
cmp edi, ebx
je 0xf16fe6
push 0x200
push ebx
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], 0xff
call fcn.00f05960
mov dword [edi], eax
mov dword [edi + 4], ebx
mov word [eax], bx
add esp, 8
mov dword [0x10176754], edi
jmp 0xf16fec
mov dword [0x10176754], ebx
lea edx, [esp + 0x18]
push edx
push 8
call dword [0x10078204]
push eax
call dword [0x10078030]
test eax, eax
je 0xf170cb
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
push ebx
push ebx
push 1
push ecx
mov dword [esp + 0x28], ebx
call dword [0x10078000]
mov eax, dword [esp + 0x14]
cmp eax, ebx
jbe 0xf170c0
push eax
mov ebx, eax
call fcn.00f058c0
add esp, 4
lea edx, [esp + 0x14]
push edx
push ebx
mov edi, eax
mov eax, dword [esp + 0x20]
push edi
push 1
push eax
call dword [0x10078000]
test eax, eax
je 0xf170b1
mov edx, dword [edi]
lea ecx, [esp + 0x28]
push ecx
push edx
call dword [0x10078038]
xor eax, eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x28]
push eax
lea ecx, [esp + 0x34]
call fcn.00f04100
mov ebx, dword [esp + 0x30]
mov ecx, dword [0x10176754]
push ebx
call fcn.00f04100
test ebx, ebx
je 0xf170a6
push ebx
call fcn.00f05a10
add esp, 4
xor eax, eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x28]
push ecx
call dword [0x10078078]
test edi, edi
je 0xf170be
push edi
call fcn.00f05a10
add esp, 4
xor ebx, ebx
mov edx, dword [esp + 0x18]
push edx
call dword [0x100781e4]
push 0x1007a658
push 0x1017674c
call dword [0x10176920]
mov dword [0x10176748], ebx
xor ecx, ecx
mov eax, 0x1007a4e0
jmp 0xf170f0
add eax, 2
add ecx, 1
cmp word [eax], bx
jne 0xf170f0
lea eax, [ecx + ecx + 2]
push eax
push ebx
call dword [0x10078084]
push eax
call dword [0x10078088]
mov dword [0x10176744], eax
xor edx, edx
mov ecx, 0x1007a4e0
lea ebx, [ebx]
add ecx, 2
add edx, 1
cmp word [ecx], bx
jne 0xf17120
lea ecx, [edx + edx + 2]
push ecx
push 0x1007a4e0
push eax
call fcn.00f05850
add esp, 0xc
push 0x1007a4d0
call ebp
cmp eax, ebx
mov dword [0x10176740], eax
je 0xf17301
push 0x1007a4b0
push eax
call esi
mov dword [0x1017673c], eax
mov eax, dword [0x10176740]
cmp eax, ebx
je 0xf171bb
push 0x10
push 1
push eax
call dword [0x10078214]
mov edx, dword [0x10176740]
mov edi, eax
push edi
push edx
call dword [0x10078164]
push eax
call dword [0x10078160]
mov ebx, eax
mov eax, dword [0x10176740]
push edi
push eax
call dword [0x1007815c]
test ebx, ebx
je 0xf171b9
cmp word [ebx + 0x26], 0
lea eax, [ebx + 0x26]
jne 0xf171b0
add eax, 2
cmp word [eax], 0
je 0xf171a7
mov ecx, dword [eax + 0x10]
mov dword [0x10176738], ecx
xor ebx, ebx
push 0x1007a494
push 0x10078688
call dword [0x10078210]
push eax
call esi
push 0x1007a478
mov dword [0x10176734], eax
call ebp
push 0x1007a468
push eax
mov dword [0x10176730], eax
call esi
push 0x1007a458
mov dword [0x1017672c], eax
call ebp
push 0x1007a444
push eax
mov dword [0x10176728], eax
call esi
mov edi, dword [0x10078084]
push 2
push ebx
mov dword [0x10176724], eax
mov dword [esp + 0x18], 1
call edi
push eax
call dword [0x10078088]
mov esi, dword [0x10078180]
mov dword [0x10176720], eax
lea edx, [esp + 0x10]
mov word [eax], bx
mov eax, dword [0x10176720]
push edx
push eax
call esi
test eax, eax
jne 0xf17276
call dword [0x1007813c]
cmp eax, 0x6f
jne 0xf17276
mov eax, dword [esp + 0x10]
mov edx, dword [0x10176720]
add eax, 1
lea ecx, [eax + eax]
push ecx
push edx
push ebx
mov dword [esp + 0x1c], eax
call edi
push eax
call dword [0x100780d4]
lea ecx, [esp + 0x10]
push ecx
push eax
mov dword [0x10176720], eax
call esi
call dword [0x10078048]
push 0x10000
mov dword [0x1017671c], eax
call fcn.00f058c0
mov edi, dword [0x10078034]
add esp, 4
lea edx, [esp + 0x1c]
push edx
push 0x1007a434
push 0x80000005
mov esi, eax
mov dword [0x10176718], 1
call edi
test eax, eax
jne 0xf17325
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x20]
push eax
push 0x10000
push esi
push 7
push ecx
call dword [0x10176918]
neg eax
lea edx, [esp + 0x20]
push edx
sbb eax, eax
push 0x10000
add eax, 1
push esi
mov dword [0x10176718], eax
mov eax, dword [esp + 0x28]
push 5
push eax
call dword [0x10176918]
test eax, eax
jne 0xf1730c
mov ecx, dword [esp + 0x20]
mov dword [0x10176714], ecx
jmp 0xf17316
mov dword [0x1017673c], ebx
jmp 0xf171bb
mov dword [0x10176714], 0xc
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0xf17325
push eax
call dword [0x1007801c]
cmp esi, ebx
je 0xf17332
push esi
call fcn.00f05a10
add esp, 4
push 0x10000
call fcn.00f058c0
add esp, 4
lea edx, [esp + 0x2c]
push edx
push 0x1007a434
mov ebp, 1
push 0x80000005
mov esi, eax
mov dword [0x10176710], ebp
call edi
test eax, eax
jne 0xf17393
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 0x70]
push eax
push 0x10000
push esi
push 7
push ecx
call dword [0x10176918]
neg eax
sbb eax, eax
add eax, ebp
mov dword [0x10176710], eax
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0xf17393
push eax
call dword [0x1007801c]
cmp esi, ebx
je 0xf173a0
push esi
call fcn.00f05a10
add esp, 4
lea edx, [esp + 0x24]
push edx
push ebx
push ebx
push ebx
push ebx
push 0x40
push 0x1007a418
lea ecx, [esp + 0xa0]
mov dword [esp + 0x40], 0xfefe
call fcn.00f3a4a0
mov ecx, eax
call fcn.00f6f580
push eax
push ebx
lea ecx, [esp + 0xdc]
call fcn.00f6ed70
mov ecx, eax
call fcn.00f6f580
push eax
push 0x20019
lea eax, [esp + 0x84]
push eax
call dword [0x10176914]
mov edx, dword fs:[0x18]
xor ecx, ecx
cmp dword [esp + 0x24], ebx
sete cl
mov dword [0x1017670c], ecx
mov eax, dword [edx + 0x30]
mov ecx, dword [eax + 0x10]
mov esi, dword [ecx + 0x2c]
mov eax, 0xfefefefe
lea edx, [esp + 0x44]
push edx
push ebx
push 0x40
push 0x10078348
lea ecx, [esp + 0x8c]
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
call fcn.00f3a4a0
mov ecx, eax
call fcn.00f6f580
push eax
push esi
lea ecx, [esp + 0xb8]
call fcn.00f6ed70
mov ecx, eax
call fcn.00f6f580
push eax
call dword [0x101768bc]
test eax, eax
jne 0xf174aa
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x48]
lea edx, [esp + 0x94]
mov dword [esp + 0x3c], eax
push edx
lea eax, [esp + 0x40]
push eax
mov dword [esp + 0x48], ecx
call dword [0x1007817c]
mov dword [0x10176708], eax
jmp 0xf174b0
mov dword [0x10176708], ebp
push 0x13
push 8
lea ecx, [esp + 0x94]
push ecx
lea edx, [esp + 0x80]
push edx
push esi
call dword [0x101768b8]
mov dword [0x10176704], eax
call fcn.00f6d5c0
mov dword [0x10176700], eax
mov dword [0x101766fc], ebx
call fcn.00f6c530
call fcn.00f6bdb0
call fcn.00f6b560
call fcn.00f69f60
call fcn.00f68420
call fcn.00f67540
call fcn.00f666d0
call fcn.00f64960
call fcn.00f193c0
call fcn.00f389b0
call fcn.00f343a0
call fcn.00f62520
call fcn.00f358f0
call fcn.00f5f890
call fcn.00f5ed10
call fcn.00f5d7d0
call fcn.00f5a660
call fcn.00f59a90
call fcn.00f57e30
call fcn.00f53e50
call fcn.00f527e0
call fcn.00f4e4f0
call fcn.00f4bcb0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc4
ret