Function at 0x436400
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffdc
mov eax, 0x5e9ad4
call fcn.0050acb0
mov word [ebp - 0x14], 8
mov eax, dword [ebp + 8]
call fcn.0040177c
inc dword [ebp - 8]
mov edx, 0x5dc8e8
mov eax, dword [ebp + 8]
add eax, 4
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8e9
mov eax, dword [ebp + 8]
add eax, 8
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8ea
mov eax, dword [ebp + 8]
add eax, 0xc
call fcn.00545d10
inc dword [ebp - 8]
mov edx, dword [ebp + 8]
mov byte [edx + 0x10], 0xff
mov edx, 0x5dc8eb
mov eax, dword [ebp + 8]
add eax, 0x14
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8ec
mov eax, dword [ebp + 8]
add eax, 0x18
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8ed
mov eax, dword [ebp + 8]
add eax, 0x1c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8ee
mov eax, dword [ebp + 8]
add eax, 0x20
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8ef
mov eax, dword [ebp + 8]
add eax, 0x24
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8f0
mov eax, dword [ebp + 8]
add eax, 0x28
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8f1
mov eax, dword [ebp + 8]
add eax, 0x2c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8f2
mov eax, dword [ebp + 8]
add eax, 0x30
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8f3
mov eax, dword [ebp + 8]
add eax, 0x34
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8f4
mov eax, dword [ebp + 8]
add eax, 0x38
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8f5
mov eax, dword [ebp + 8]
add eax, 0x3c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8f6
mov eax, dword [ebp + 8]
add eax, 0x40
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8f7
mov eax, dword [ebp + 8]
add eax, 0x44
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8f8
mov eax, dword [ebp + 8]
add eax, 0x48
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8f9
mov eax, dword [ebp + 8]
add eax, 0x4c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8fa
mov eax, dword [ebp + 8]
add eax, 0x50
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8fb
mov eax, dword [ebp + 8]
add eax, 0x54
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8fc
mov eax, dword [ebp + 8]
add eax, 0x58
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8fd
mov eax, dword [ebp + 8]
add eax, 0x5c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc8fe
mov eax, dword [ebp + 8]
add eax, 0x60
call fcn.00545d10
inc dword [ebp - 8]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x64], 0xffffffff
mov eax, dword [ebp + 8]
mov dword [eax + 0x68], 0xffffffff
mov edx, 0x5dc8ff
mov eax, dword [ebp + 8]
add eax, 0x6c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc900
mov eax, dword [ebp + 8]
add eax, 0x70
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc901
mov eax, dword [ebp + 8]
add eax, 0x74
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc902
mov eax, dword [ebp + 8]
add eax, 0x78
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc903
mov eax, dword [ebp + 8]
add eax, 0x7c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc904
mov eax, dword [ebp + 8]
add eax, 0x80
call fcn.00545d10
inc dword [ebp - 8]
mov edx, dword [ebp + 8]
mov byte [edx + 0x84], 0
mov eax, dword [ebp + 8]
add eax, 0x88
call fcn.0040177c
inc dword [ebp - 8]
mov edx, dword [ebp + 8]
mov dword [edx + 0x8c], 0xffffffff
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x90], 0xffffffff
mov eax, dword [ebp - 0x24]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esp, ebp
pop ebp
ret