Function at 0x5bfe4a
Capabilities:
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x77a95a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x14], esi
call fcn.005d40d0
xor ebx, ebx
mov dword [esi], 0x89aecc
mov dword [esi + 0xd4], ebx
mov dword [esi + 0xd8], ebx
mov dword [esp + 0x20], ebx
mov dword [esi + 0xe0], ebx
mov dword [esi + 0xe4], ebx
mov dword [esi + 0xe8], ebx
lea edi, [esi + 0x10c]
mov dword [edi], ebx
lea ebp, [esi + 0x110]
mov dword [ebp], ebx
mov dword [esi + 0x118], ebx
mov dword [esi + 0x114], ebx
mov dword [esi + 0x120], ebx
mov dword [esi + 0x11c], ebx
mov dword [esi + 0x128], ebx
mov dword [esi + 0x130], ebx
mov dword [esi + 0x138], ebx
mov dword [esi + 0x140], ebx
mov dword [esi + 0x148], ebx
mov dword [esi + 0x150], ebx
mov dword [esi + 0x158], ebx
mov dword [esi + 0x160], ebx
mov dword [esi + 0x15c], ebx
mov dword [esi + 0x168], ebx
mov dword [esi + 0x164], ebx
mov dword [esi + 0x174], ebx
mov dword [esi + 0x170], ebx
mov dword [esi + 0x178], ebx
mov dword [esi + 0x17c], ebx
mov dword [esi + 0x184], ebx
mov dword [esi + 0x180], ebx
mov dword [esi + 0x18c], ebx
mov dword [esi + 0x188], ebx
mov dword [esi + 0x194], ebx
mov dword [esi + 0x190], ebx
mov dword [esi + 0x19c], ebx
mov dword [esi + 0x198], ebx
mov dword [esi + 0x1a4], ebx
mov dword [esi + 0x1a0], ebx
mov dword [esi + 0x1ac], ebx
mov dword [esi + 0x1a8], ebx
mov dword [esi + 0x1b4], ebx
mov dword [esi + 0x1b0], ebx
mov dword [esi + 0x1bc], ebx
mov dword [esi + 0x1b8], ebx
mov dword [esi + 0x1c4], ebx
mov dword [esi + 0x1c0], ebx
mov dword [esi + 0x1cc], ebx
mov dword [esi + 0x1c8], ebx
mov dword [esi + 0x1d4], ebx
mov dword [esi + 0x1dc], ebx
mov dword [esi + 0x1e4], ebx
mov dword [esi + 0x1e0], ebx
mov dword [esi + 0x1ec], ebx
mov dword [esi + 0x1e8], ebx
mov dword [esi + 0x1f4], ebx
mov dword [esi + 0x298], ebx
mov dword [esi + 0x294], ebx
fldz
mov dword [esi + 0x2a0], ebx
mov dword [esi + 0x29c], ebx
fst dword [esi + 0x2a4]
fst dword [esi + 0x2a8]
fst dword [esi + 0x2ac]
mov dword [esi + 0x2b4], ebx
mov dword [esi + 0x2b0], ebx
fst dword [esi + 0x2b8]
fst dword [esi + 0x2bc]
fstp dword [esi + 0x2c0]
mov dword [esi + 0x2cc], ebx
mov dword [esi + 0x2c8], ebx
mov dword [esi + 0x2d4], ebx
mov dword [esi + 0x2d0], ebx
mov dword [esi + 0x2dc], ebx
mov dword [esi + 0x2e4], ebx
mov dword [esi + 0x2e0], ebx
mov dword [esi + 0x2ec], ebx
mov dword [esi + 0x2e8], ebx
mov dword [esi + 0x2f4], ebx
fld1
mov dword [esi + 0xec], 2
mov dword [esi + 0xf0], ebx
fst dword [esi + 0xf4]
fst dword [esi + 0xf8]
push ebx
fst dword [esi + 0xfc]
lea ecx, [esp + 0x14]
fst dword [esi + 0x100]
mov byte [esp + 0x24], 0xf
fstp dword [esi + 0x104]
mov dword [esi + 0x108], ebx
call fcn.00435170
lea eax, [esp + 0x10]
push eax
mov ecx, edi
mov byte [esp + 0x24], 0x10
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
push ebx
lea ecx, [esp + 0x14]
call fcn.00435170
lea ecx, [esp + 0x10]
push ecx
mov ecx, ebp
mov byte [esp + 0x24], 0x11
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
mov dword [esi + 0x114], ebx
mov dword [esi + 0x118], ebx
mov edi, 1
push ebx
mov dword [esi + 0x11c], edi
mov dword [esi + 0x120], edi
mov ecx, dword [0x992210]
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x124], eax
call fcn.00435170
lea edx, [esp + 0x10]
push edx
lea ecx, [esi + 0x128]
mov byte [esp + 0x24], 0x12
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
push ebx
push 0x7958c8
mov ecx, dword [0x992210]
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x12c], eax
call fcn.00435170
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 0x130]
mov byte [esp + 0x24], 0x13
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x134], eax
call fcn.00435170
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x138]
mov byte [esp + 0x24], 0x14
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x154], eax
call fcn.00435170
lea edx, [esp + 0x10]
push edx
lea ecx, [esi + 0x158]
mov byte [esp + 0x24], 0x15
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
mov dword [esi + 0x1c0], ebx
mov dword [esi + 0x1c4], ebx
push ebx
mov dword [esi + 0x1c8], edi
mov dword [esi + 0x1cc], edi
mov ecx, dword [0x992210]
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x1d0], eax
call fcn.00435170
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 0x1d4]
mov byte [esp + 0x24], 0x16
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x1d8], eax
call fcn.00435170
mov byte [esp + 0x20], 0x17
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x1dc]
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x1f0], eax
call fcn.00435170
lea edx, [esp + 0x10]
push edx
lea ecx, [esi + 0x1f4]
mov byte [esp + 0x24], 0x18
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x13c], eax
call fcn.00435170
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 0x140]
mov byte [esp + 0x24], 0x19
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x144], eax
call fcn.00435170
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x148]
mov byte [esp + 0x24], 0x1a
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x14c], eax
call fcn.00435170
lea edx, [esp + 0x10]
push edx
lea ecx, [esi + 0x150]
mov byte [esp + 0x24], 0x1b
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
mov dword [esi + 0x2d8], eax
push ebx
lea ecx, [esp + 0x14]
call fcn.00435170
lea eax, [esp + 0x10]
push eax
lea ecx, [esi + 0x2dc]
mov byte [esp + 0x24], 0x1c
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
mov ecx, dword [0x992210]
push ebx
push 0x7958c8
call fcn.004148b0
push ebx
lea ecx, [esp + 0x14]
mov dword [esi + 0x2f0], eax
call fcn.00435170
lea ecx, [esp + 0x10]
push ecx
lea ecx, [esi + 0x2f4]
mov byte [esp + 0x24], 0x1d
call fcn.00435280
lea ecx, [esp + 0x10]
mov byte [esp + 0x20], 0xf
call fcn.004350c0
fld1
mov byte [esi + 0x1f8], bl
fst dword [esi + 0x1fc]
fldz
fst dword [esi + 0x200]
fst dword [esi + 0x204]
fxch st(1)
fst dword [esi + 0x208]
mov byte [esi + 0x20c], bl
fst dword [esi + 0x210]
fld dword [0x7bb5bc]
fstp dword [esi + 0x214]
fxch st(1)
fst dword [esi + 0x218]
fxch st(1)
fst dword [esi + 0x21c]
mov byte [esi + 0x220], 1
fxch st(1)
fst dword [esi + 0x224]
fstp dword [esi + 0x22c]
fst dword [esi + 0x228]
fstp dword [esi + 0x230]
mov dword [esi + 0x234], 0x12c
mov dword [esi + 0x238], ebx
mov dword [esi + 0x23c], ebx
mov dword [esi + 0x294], ebx
mov dword [esi + 0x298], ebx
mov dword [esi + 0x16c], ebx
mov dword [esi + 0x170], ebx
mov dword [esi + 0x174], ebx
mov dword [esi + 0x178], edi
mov dword [esi + 0x17c], edi
mov dword [esi + 0x180], ebx
mov dword [esi + 0x184], ebx
mov dword [esi + 0x188], edi
mov dword [esi + 0x18c], edi
mov dword [esi + 0x190], ebx
mov dword [esi + 0x194], ebx
mov dword [esi + 0x198], edi
mov dword [esi + 0x19c], edi
mov dword [esi + 0x1a0], ebx
mov dword [esi + 0x1a4], ebx
mov dword [esi + 0x1a8], edi
mov dword [esi + 0x1ac], edi
mov dword [esi + 0x1b0], ebx
mov dword [esi + 0x1b4], ebx
mov dword [esi + 0x1b8], edi
mov dword [esi + 0x1bc], edi
mov dword [esi + 0x1e0], ebx
mov dword [esi + 0x1e4], ebx
mov dword [esi + 0x1e8], edi
mov dword [esi + 0x1ec], edi
mov dword [esi + 0x15c], ebx
mov dword [esi + 0x160], ebx
mov dword [esi + 0x164], edi
mov dword [esi + 0x168], edi
mov dword [esi + 0x2c8], ebx
mov dword [esi + 0x2cc], ebx
mov dword [esi + 0x2d0], edi
mov dword [esi + 0x2d4], edi
mov dword [esi + 0x2e0], ebx
mov dword [esi + 0x2e4], ebx
push 0x7958c8
lea edx, [esi + 0x24c]
mov dword [esi + 0x2e8], edi
mov dword [esi + 0x2ec], edi
push 0x20
push edx
mov dword [esi + 0x240], ebx
mov dword [esi + 0x248], ebx
call fcn.0067acb0
push 0x7958c8
lea eax, [esi + 0x26c]
push 0x20
push eax
call fcn.0067acb0
mov ecx, dword [esp + 0x30]
add esp, 0x18
pop edi
mov byte [esi + 0x28f], bl
mov byte [esi + 0x28d], bl
mov byte [esi + 0x308], bl
mov byte [esi + 0x28c], 1
mov byte [esi + 0x290], 1
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret