Function at 0x5754c0
Capabilities:
Get process heap flags

Disassembly:
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, eax
sub esp, 0xdc
or edx, ecx
je 0x5754dc
mov dword [0x10143f9c], ecx
jmp 0x5754e7
call fcn.005ba800
mov dword [0x10143f9c], edx
push ebx
push ebp
push esi
push edi
mov dword [0x10143f98], eax
call dword [0x100830c8]
push 0
push 0
push 0
mov dword [0x10143f94], eax
call dword [0x100830fc]
mov esi, dword [0x100830f8]
mov dword [0x10143f90], eax
call esi
mov dword [0x1009641c], eax
call esi
push 0x10083ab4
push 0x10083a98
mov dword [0x10096420], eax
mov dword [0x10143f8c], 0
call dword [0x1008321c]
mov esi, dword [0x10083224]
push eax
call esi
test eax, eax
mov dword [0x10143f88], eax
je 0x57555e
push 0x10143f8c
call dword [0x10083210]
push eax
call dword [0x10143f88]
mov ebp, dword [0x10083208]
xor eax, eax
cmp dword [0x10143f8c], eax
push 0x10083a84
setne al
lea eax, [eax*4 + 4]
mov dword [0x10143f84], eax
call ebp
mov edi, eax
push 0x10083a78
push edi
call esi
push 0x10083a68
push edi
mov dword [0x10143f80], eax
call esi
push 0x10083a58
push edi
mov dword [0x10143f7c], eax
call esi
push 0x10083a40
push edi
mov dword [0x10143f78], eax
call esi
push 0x10083a28
push edi
mov dword [0x10143f74], eax
call esi
push 0x10083a1c
push edi
mov dword [0x10143f70], eax
call esi
push 0x10083a10
push edi
mov dword [0x10143f6c], eax
call esi
push 0x100839f8
push edi
mov dword [0x10143f68], eax
call esi
push 0x100839e0
push edi
mov dword [0x10143f64], eax
call esi
push 0x100839c4
push edi
mov dword [0x10143f60], eax
call esi
push 0x100839ac
push edi
mov dword [0x10143f5c], eax
call esi
push 0x10083990
push edi
mov dword [0x10143f58], eax
call esi
push 0x10083974
push edi
mov dword [0x10143f54], eax
call esi
push 0x10083960
push edi
mov dword [0x10143f50], eax
call esi
push 0x10083944
push edi
mov dword [0x10143f4c], eax
call esi
push 0x10083930
push edi
mov dword [0x10143f48], eax
call esi
push 0x1008391c
push edi
mov dword [0x10143f44], eax
call esi
push 0x10083904
push edi
mov dword [0x10143f40], eax
call esi
mov dword [0x10143f3c], eax
push 0x100838e4
push edi
call esi
push 0x100838cc
push edi
mov dword [0x10143f38], eax
call esi
push 0x100838b4
push edi
mov dword [0x10143f34], eax
call esi
push 0x1008389c
push edi
mov dword [0x10143f30], eax
call esi
push 0x10083888
push edi
mov dword [0x10143f2c], eax
call esi
push 0x10083870
push edi
mov dword [0x10143f28], eax
call esi
push 0x10083864
push edi
mov dword [0x10143f24], eax
call esi
push 0x10083854
push edi
mov dword [0x10143f20], eax
call esi
push 0x1008383c
push edi
mov dword [0x10143f1c], eax
call esi
push 0x10083830
push edi
mov dword [0x10143f18], eax
call esi
push 0x10083818
push edi
mov dword [0x10143f14], eax
call esi
push 0x10083800
push edi
mov dword [0x10143f10], eax
call esi
push 0x100837ec
push edi
mov dword [0x10143f0c], eax
call esi
push 0x100837d4
push edi
mov dword [0x10143f08], eax
call esi
push 0x10083a98
mov dword [0x10143f04], eax
call ebp
mov edi, eax
push 0x100837c4
push edi
call esi
push 0x100837b4
push edi
mov dword [0x10143f00], eax
call esi
push 0x100837a0
push edi
mov dword [0x10143efc], eax
call esi
push 0x1008378c
push edi
mov dword [0x10143ef8], eax
call esi
push 0x10083780
push edi
mov dword [0x10143ef4], eax
call esi
push 0x10083760
mov dword [0x10143ef0], eax
push edi
call esi
push 0x10083740
push edi
mov dword [0x10143eec], eax
call esi
push 0x10083724
push edi
mov dword [0x10143ee8], eax
call esi
push 0x10083718
push edi
mov dword [0x10143ee4], eax
call esi
mov edi, dword [0x10083200]
push pe_nt_image_headers32
push 0x1000
push 0x25
push 0
mov dword [0x10143ee0], eax
call edi
push 0x25
push 0x100836f0
push eax
mov dword [0x10143edc], eax
call fcn.005752a0
add esp, 0xc
push 0
push 0x10143ed8
push 1
push 0x100836d0
call dword [0x10083004]
test eax, eax
mov ebx, dword [0x10083008]
je 0x575833
lea ecx, [esp + 0x34]
push ecx
xor eax, eax
push 0x10143ed4
lea edx, [esp + 0x4c]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x3c], eax
mov eax, dword [0x10143ed8]
push edx
push eax
call dword [0x1008300c]
test eax, eax
je 0x575833
push 1
push 0x10143ec0
call ebx
mov ecx, dword [esp + 0x34]
mov edx, dword [0x10143ed4]
push ecx
push edx
push 1
push 0x10143ec0
call dword [0x10083010]
push 1
push 0x10143eac
call ebx
xor ebx, ebx
push ebx
push ebx
push 1
push 0x10143eac
call dword [0x10083014]
push 4
push 0x1000
push 0xa0000
push ebx
call edi
push ebx
push 0x400
push 0xa0000
push eax
mov dword [0x10143ea8], eax
call fcn.00591440
add esp, 0x10
test eax, eax
je 0x575ee6
push 0x10143e84
call dword [0x10083090]
push 0x10143d68
mov dword [0x10143d68], 0x11c
call dword [0x100830f4]
push 0x20000
call fcn.00575310
add esp, 4
mov dword [0x10143d64], eax
xor edi, edi
push edi
call dword [0x10143f64]
mov ecx, dword [0x10143d64]
mov word [ecx + edi*2], ax
add edi, 1
cmp edi, 0x10000
jl 0x5758b1
push 0xc
call fcn.00589c20
mov edi, eax
add esp, 4
cmp edi, ebx
je 0x575907
push 0x200
push ebx
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], 0xff
call fcn.005753b0
mov dword [edi], eax
mov dword [edi + 4], ebx
mov word [eax], bx
add esp, 8
mov dword [0x10143fa0], edi
jmp 0x57590d
mov dword [0x10143fa0], ebx
lea edx, [esp + 0x18]
push edx
push 8
call dword [0x10083210]
push eax
call dword [0x10083018]
test eax, eax
je 0x5759ec
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
push ebx
push ebx
push 1
push ecx
mov dword [esp + 0x28], ebx
call dword [0x1008301c]
mov eax, dword [esp + 0x14]
cmp eax, ebx
jbe 0x5759e1
push eax
mov ebx, eax
call fcn.00575310
add esp, 4
lea edx, [esp + 0x14]
push edx
push ebx
mov edi, eax
mov eax, dword [esp + 0x20]
push edi
push 1
push eax
call dword [0x1008301c]
test eax, eax
je 0x5759d2
mov edx, dword [edi]
lea ecx, [esp + 0x28]
push ecx
push edx
call dword [0x10083020]
xor eax, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x28]
push eax
lea ecx, [esp + 0x3c]
call fcn.005739d0
mov ebx, dword [esp + 0x38]
mov ecx, dword [0x10143fa0]
push ebx
call fcn.005739d0
test ebx, ebx
je 0x5759c7
push ebx
call fcn.00575460
add esp, 4
xor eax, eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x28]
push ecx
call dword [0x10083078]
test edi, edi
je 0x5759df
push edi
call fcn.00575460
add esp, 4
xor ebx, ebx
mov edx, dword [esp + 0x18]
push edx
call dword [0x100831f0]
push 0x100836b8
push 0x10143d5c
call dword [0x10143f74]
mov dword [0x10143d58], ebx
xor ecx, ecx
mov eax, 0x10083540
lea esp, [esp]
add eax, 2
add ecx, 1
cmp word [eax], bx
jne 0x575a10
lea eax, [ecx + ecx + 2]
push eax
push ebx
call dword [0x10083084]
push eax
call dword [0x10083088]
mov dword [0x10143d54], eax
xor edx, edx
mov ecx, 0x10083540
lea ebx, [ebx]
add ecx, 2
add edx, 1
cmp word [ecx], bx
jne 0x575a40
lea ecx, [edx + edx + 2]
push ecx
push 0x10083540
push eax
call fcn.005752a0
add esp, 0xc
push 0x10083530
call ebp
cmp eax, ebx
mov dword [0x10143d50], eax
je 0x575c4b
push 0x10083510
push eax
call esi
mov edx, dword [0x10143d50]
push 0x100834e4
push edx
mov dword [0x10143d4c], eax
call esi
mov dword [0x10143d48], eax
mov eax, dword [0x10143d50]
push 0x100834b8
push eax
call esi
mov dword [0x10143d44], eax
mov eax, dword [0x10143d50]
cmp eax, ebx
je 0x575b01
push 0x10
push 1
push eax
call dword [0x100830f0]
mov ecx, dword [0x10143d50]
mov edi, eax
push edi
push ecx
call dword [0x100830ec]
push eax
call dword [0x100830e8]
mov edx, dword [0x10143d50]
push edi
push edx
mov ebx, eax
call dword [0x100830e4]
test ebx, ebx
je 0x575b01
cmp word [ebx + 0x26], 0
lea eax, [ebx + 0x26]
jne 0x575af9
lea ecx, [ecx]
add eax, 2
cmp word [eax], 0
je 0x575af0
mov eax, dword [eax + 0x10]
mov dword [0x10143d40], eax
mov ebx, dword [0x1008321c]
push 0x1008349c
push 0x10083a84
call ebx
push eax
call esi
push 0x10083480
mov dword [0x10143d3c], eax
call ebp
push 0x10083470
push eax
mov dword [0x10143d38], eax
call esi
push 0x10083460
mov dword [0x10143d34], eax
call ebp
push 0x1008344c
push eax
mov dword [0x10143d30], eax
call esi
push 2
mov ebp, 1
push 0
mov dword [0x10143d2c], eax
mov dword [esp + 0x18], ebp
call dword [0x10083084]
push eax
call dword [0x10083088]
mov edi, dword [0x100830e0]
mov dword [0x10143d28], eax
lea ecx, [esp + 0x10]
mov word [eax], 0
mov edx, dword [0x10143d28]
push ecx
push edx
call edi
test eax, eax
jne 0x575bc4
call dword [0x100830ac]
cmp eax, 0x6f
jne 0x575bc4
mov eax, dword [esp + 0x10]
mov ecx, dword [0x10143d28]
add eax, ebp
mov dword [esp + 0x10], eax
add eax, eax
push eax
push ecx
push 0
call dword [0x10083084]
push eax
call dword [0x100830d8]
lea edx, [esp + 0x10]
push edx
push eax
mov dword [0x10143d28], eax
call edi
call dword [0x100831e4]
push 0x10000
mov dword [0x10143d24], eax
call fcn.00575310
add esp, 4
mov edi, eax
lea eax, [esp + 0x1c]
push eax
push 0x1008343c
mov dword [0x10143d20], ebp
mov ebp, dword [0x10083024]
push 0x80000005
call ebp
test eax, eax
jne 0x575c6f
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x20]
push ecx
push 0x10000
push edi
push 7
push edx
call dword [0x10143f6c]
mov ecx, dword [esp + 0x1c]
neg eax
sbb eax, eax
add eax, 1
mov dword [0x10143d20], eax
lea eax, [esp + 0x20]
push eax
push 0x10000
push edi
push 5
push ecx
call dword [0x10143f6c]
test eax, eax
jne 0x575c56
mov edx, dword [esp + 0x20]
mov dword [0x10143d1c], edx
jmp 0x575c60
mov dword [0x10143d4c], ebx
jmp 0x575b01
mov dword [0x10143d1c], 0xc
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x575c6f
push eax
call dword [0x10083028]
test edi, edi
je 0x575c7c
push edi
call fcn.00575460
add esp, 4
push 0x10000
call fcn.00575310
add esp, 4
mov edi, eax
lea eax, [esp + 0x30]
push eax
push 0x1008343c
push 0x80000005
mov dword [0x10143d18], 1
call ebp
test eax, eax
jne 0x575cdd
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x78]
push ecx
push 0x10000
push edi
push 7
push edx
call dword [0x10143f6c]
neg eax
sbb eax, eax
add eax, 1
mov dword [0x10143d18], eax
mov eax, dword [esp + 0x30]
test eax, eax
je 0x575cdd
push eax
call dword [0x10083028]
test edi, edi
je 0x575cea
push edi
call fcn.00575460
add esp, 4
lea eax, [esp + 0x2c]
push eax
push 0
push 0
push 0
push 0
push pe_nt_image_headers32
mov ebp, 0xfefe
push 0x10083420
lea ecx, [esp + 0xac]
mov dword [esp + 0x48], ebp
call fcn.005bd3c0
mov ecx, eax
call fcn.005d8300
push eax
push 0
lea ecx, [esp + 0xf4]
call fcn.005bd370
mov ecx, eax
call fcn.005d8300
push eax
push 0x20019
lea ecx, [esp + 0x94]
push ecx
call dword [0x10143f68]
mov eax, dword fs:[0x18]
xor edx, edx
cmp dword [esp + 0x2c], edx
sete dl
mov dword [0x10143d14], edx
mov ecx, dword [eax + 0x30]
mov edx, dword [ecx + 0x10]
mov edi, dword [edx + 0x2c]
mov eax, 0xfefefefe
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
lea eax, [esp + 0x50]
push eax
push 0
push pe_nt_image_headers32
push 0x1008341c
lea ecx, [esp + 0xa8]
call fcn.005bd3c0
mov ecx, eax
call fcn.005d8300
push eax
push edi
lea ecx, [esp + 0xd0]
call fcn.005bd370
mov ecx, eax
call fcn.005d8300
push eax
call dword [0x10143f10]
test eax, eax
jne 0x575dfa
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
lea eax, [esp + 0xac]
mov dword [esp + 0x48], ecx
push eax
lea ecx, [esp + 0x4c]
push ecx
mov dword [esp + 0x54], edx
call dword [0x100830dc]
mov dword [0x10143d10], eax
jmp 0x575e04
mov dword [0x10143d10], 1
push 0x1008340c
push 0x10083400
call ebx
push eax
call esi
lea edx, [esp + 0x24]
push edx
push 1
lea ecx, [esp + 0xa8]
push ecx
push 1
push edi
mov dword [esp + 0x38], ebp
call eax
xor edx, edx
cmp dword [esp + 0x24], edx
push 0x13
push 8
setne dl
lea eax, [esp + 0x90]
push eax
lea ecx, [esp + 0x8c]
push ecx
push edi
mov dword [0x10143d0c], edx
call dword [0x10143f0c]
mov dword [0x10143d08], eax
call fcn.005bbbc0
mov dword [0x10143d04], eax
mov dword [0x10143d00], 0
call fcn.005ba740
call fcn.005b9fc0
call fcn.005b9770
call fcn.005b8160
call fcn.005b6480
call fcn.005b5830
call fcn.005b48d0
call fcn.005b3a60
call fcn.005b1b20
call fcn.0058b8c0
call fcn.005af920
call fcn.005ac340
call fcn.005aab90
call fcn.005a96b0
call fcn.005a68f0
call fcn.005a5d80
call fcn.005a47c0
call fcn.005a1650
call fcn.005a0a40
call fcn.0059ee90
call fcn.0059ae50
call fcn.005999e0
call fcn.005956d0
call fcn.00592a80
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xdc
ret