Function at 0x518520
Capabilities:
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x5cf0e2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [esp + 0x28]
push ebx
push esi
push edi
push 0x637104
mov esi, ecx
push eax
push 0x134
mov dword [esp + 0x18], esi
call fcn.00532520
lea edi, [esi + 0x98]
mov dword [esp + 0x2c], 0
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f15c4
lea edi, [esi + 0xd4]
mov ebx, 1
mov ecx, edi
mov byte [esp + 0x2c], bl
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x110]
mov byte [esp + 0x2c], 2
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x14c]
mov byte [esp + 0x2c], 3
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x188]
mov byte [esp + 0x2c], 4
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x1c4]
mov byte [esp + 0x2c], 5
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f1680
lea edi, [esi + 0x204]
mov byte [esp + 0x2c], 6
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f15c4
lea edi, [esi + 0x240]
mov byte [esp + 0x2c], 7
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f15c4
lea edi, [esi + 0x27c]
mov byte [esp + 0x2c], 8
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f15c4
lea edi, [esi + 0x2b8]
mov byte [esp + 0x2c], 9
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f15c4
lea edi, [esi + 0x2f4]
mov byte [esp + 0x2c], 0xa
mov ecx, edi
call fcn.0058f7c8
mov dword [edi], 0x5f15c4
mov byte [esp + 0x2c], 0xb
lea edi, [esi + 0x33c]
push fcn.005936db
push fcn.004063b0
push 0x12
push 4
push edi
call fcn.00573af2
or eax, 0xffffffff
push 0x6370fc
mov ecx, edi
mov byte [esp + 0x30], 0xc
mov dword [esi], 0x5eaa10
mov dword [esi + 0x200], eax
mov dword [esi + 0x39c], ebx
mov dword [esi + 0x3a0], 0
mov dword [esi + 0x398], ebx
mov dword [esi + 0x330], eax
mov dword [esi + 0x334], eax
call fcn.00593864
push 0x6370f4
lea ecx, [esi + 0x340]
call fcn.00593864
push 0x6370ec
lea ecx, [esi + 0x344]
call fcn.00593864
push 0x6370e4
lea ecx, [esi + 0x348]
call fcn.00593864
push 0x6370dc
lea ecx, [esi + 0x34c]
call fcn.00593864
push 0x6370d4
lea ecx, [esi + 0x350]
call fcn.00593864
push 0x6370cc
lea ecx, [esi + 0x354]
call fcn.00593864
push 0x6370c4
lea ecx, [esi + 0x358]
call fcn.00593864
push 0x6370bc
lea ecx, [esi + 0x35c]
call fcn.00593864
push 0x6370b4
lea ecx, [esi + 0x360]
call fcn.00593864
push 0x6370ac
lea ecx, [esi + 0x364]
call fcn.00593864
push 0x6370a4
lea ecx, [esi + 0x368]
call fcn.00593864
push 0x63709c
lea ecx, [esi + 0x36c]
call fcn.00593864
push 0x637094
lea ecx, [esi + 0x370]
call fcn.00593864
push 0x63708c
lea ecx, [esi + 0x374]
call fcn.00593864
push 0x637084
lea ecx, [esi + 0x378]
call fcn.00593864
push 0x63707c
lea ecx, [esi + 0x37c]
call fcn.00593864
push 0x637074
lea ecx, [esi + 0x380]
call fcn.00593864
lea ecx, [esp + 0x10]
mov dword [esi + 0x384], 0xd72620
mov dword [esi + 0x388], 0x1145630
mov dword [esi + 0x38c], 0x142b930
mov dword [esi + 0x390], 0x17c66d0
mov dword [esi + 0x394], 0x1ae4c40
call fcn.00595172
push 0
push 0
mov byte [esp + 0x34], 0xd
push 0x637068
lea ecx, [esp + 0x1c]
call fcn.005951e7
test eax, eax
je 0x518844
xor ebx, ebx
push edi
lea ecx, [esp + 0x14]
call fcn.005953ca
test eax, eax
je 0x518844
inc ebx
add edi, 4
cmp ebx, 0x12
jl 0x51882d
mov dword [esi + 0x3a4], 0
mov ecx, dword [0x63fd4c]
test ecx, ecx
je 0x518862
push 0x378
call fcn.0046bc80
lea ecx, [esp + 0x10]
mov byte [esp + 0x2c], 0xc
call fcn.005951a4
mov ecx, dword [esp + 0x24]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x24
ret 4