Function at 0x436a68
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffdc
mov eax, 0x5e9ccc
call fcn.0050acb0
mov word [ebp - 0x14], 8
mov eax, dword [ebp + 8]
call fcn.0040177c
inc dword [ebp - 8]
mov edx, 0x5dc905
mov eax, dword [ebp + 8]
add eax, 4
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc906
mov eax, dword [ebp + 8]
add eax, 8
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc907
mov eax, dword [ebp + 8]
add eax, 0xc
call fcn.00545d10
inc dword [ebp - 8]
mov edx, dword [ebp + 8]
mov byte [edx + 0x10], 0xff
mov edx, 0x5dc908
mov eax, dword [ebp + 8]
add eax, 0x14
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc909
mov eax, dword [ebp + 8]
add eax, 0x18
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc90a
mov eax, dword [ebp + 8]
add eax, 0x1c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc90b
mov eax, dword [ebp + 8]
add eax, 0x20
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc90c
mov eax, dword [ebp + 8]
add eax, 0x24
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc90d
mov eax, dword [ebp + 8]
add eax, 0x28
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc90e
mov eax, dword [ebp + 8]
add eax, 0x2c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc90f
mov eax, dword [ebp + 8]
add eax, 0x30
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc910
mov eax, dword [ebp + 8]
add eax, 0x34
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc911
mov eax, dword [ebp + 8]
add eax, 0x38
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc912
mov eax, dword [ebp + 8]
add eax, 0x3c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc913
mov eax, dword [ebp + 8]
add eax, 0x40
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc914
mov eax, dword [ebp + 8]
add eax, 0x44
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc915
mov eax, dword [ebp + 8]
add eax, 0x48
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc916
mov eax, dword [ebp + 8]
add eax, 0x4c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc917
mov eax, dword [ebp + 8]
add eax, 0x50
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc918
mov eax, dword [ebp + 8]
add eax, 0x54
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc919
mov eax, dword [ebp + 8]
add eax, 0x58
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc91a
mov eax, dword [ebp + 8]
add eax, 0x5c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc91b
mov eax, dword [ebp + 8]
add eax, 0x60
call fcn.00545d10
inc dword [ebp - 8]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x64], 0xffffffff
mov eax, dword [ebp + 8]
mov dword [eax + 0x68], 0xffffffff
mov edx, 0x5dc91c
mov eax, dword [ebp + 8]
add eax, 0x6c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc91d
mov eax, dword [ebp + 8]
add eax, 0x70
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc91e
mov eax, dword [ebp + 8]
add eax, 0x74
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc91f
mov eax, dword [ebp + 8]
add eax, 0x78
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc920
mov eax, dword [ebp + 8]
add eax, 0x7c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc921
mov eax, dword [ebp + 8]
add eax, 0x80
call fcn.00545d10
inc dword [ebp - 8]
mov edx, dword [ebp + 8]
mov byte [edx + 0x84], 0
mov eax, dword [ebp + 8]
add eax, 0x88
call fcn.0040177c
inc dword [ebp - 8]
mov edx, dword [ebp + 8]
mov dword [edx + 0x8c], 0xffffffff
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x90], 0xffffffff
mov edx, 0x5dc928
mov eax, dword [ebp + 8]
add eax, 0x94
call fcn.00545d10
inc dword [ebp - 8]
mov eax, dword [ebp + 8]
add eax, 0x98
call fcn.0040177c
inc dword [ebp - 8]
mov eax, dword [ebp + 8]
add eax, 0x9c
call fcn.0040177c
inc dword [ebp - 8]
mov eax, dword [ebp + 8]
add eax, 0xa0
call fcn.0040177c
inc dword [ebp - 8]
mov eax, dword [ebp + 8]
add eax, 0xa4
call fcn.0040177c
inc dword [ebp - 8]
mov eax, dword [ebp + 8]
add eax, 0xa8
call fcn.0040177c
inc dword [ebp - 8]
mov eax, dword [ebp + 8]
add eax, 0xac
call fcn.0040177c
inc dword [ebp - 8]
mov eax, dword [ebp + 8]
add eax, 0xb0
call fcn.0040177c
inc dword [ebp - 8]
mov eax, dword [ebp + 8]
add eax, 0xb4
call fcn.0040177c
inc dword [ebp - 8]
mov edx, 0x5dc922
mov eax, dword [ebp + 8]
add eax, 0xb8
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc923
mov eax, dword [ebp + 8]
add eax, 0xbc
call fcn.00545d10
inc dword [ebp - 8]
mov edx, dword [ebp + 8]
mov dword [edx + 0xc0], 0xffffffff
mov edx, 0x5dc924
mov eax, dword [ebp + 8]
add eax, 0xc4
call fcn.00545d10
inc dword [ebp - 8]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xc8], 0xffffffff
mov eax, dword [ebp + 8]
mov dword [eax + 0xcc], 0xffffffff
mov edx, dword [ebp + 8]
mov dword [edx + 0xd0], 0xffffffff
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xd4], 0xffffffff
mov eax, dword [ebp + 8]
add eax, 0xd8
call fcn.0040177c
inc dword [ebp - 8]
mov edx, dword [ebp + 8]
mov dword [edx + 0xdc], 0xffffffff
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xe0], 0xffffffff
mov eax, dword [ebp + 8]
mov dword [eax + 0xe4], 0xffffffff
mov eax, dword [ebp + 8]
add eax, 0xe8
call fcn.0040177c
inc dword [ebp - 8]
mov eax, dword [ebp + 8]
add eax, 0xec
call fcn.0040177c
inc dword [ebp - 8]
mov eax, dword [ebp + 8]
add eax, 0xf0
call fcn.0040177c
inc dword [ebp - 8]
mov edx, dword [ebp + 8]
mov dword [edx + 0xf4], 0xffffffff
mov edx, 0x5dc925
mov eax, dword [ebp + 8]
add eax, 0xf8
call fcn.00545d10
inc dword [ebp - 8]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0xfc], 0xffffffff
mov eax, dword [ebp + 8]
mov dword [eax + 0x100], 0xffffffff
mov edx, 0x5dc926
mov eax, dword [ebp + 8]
add eax, 0x104
call fcn.00545d10
inc dword [ebp - 8]
mov edx, dword [ebp + 8]
mov dword [edx + 0x108], 0xffffffff
mov edx, 0x5dc927
mov eax, dword [ebp + 8]
add eax, 0x10c
call fcn.00545d10
inc dword [ebp - 8]
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x110], 0xffffffff
mov eax, dword [ebp + 8]
mov dword [eax + 0x114], 0xffffffff
mov edx, dword [ebp + 8]
mov dword [edx + 0x118], 0xffffffff
mov edx, 0x5dc929
mov eax, dword [ebp + 8]
add eax, 0x11c
call fcn.00545d10
inc dword [ebp - 8]
mov edx, 0x5dc92a
mov eax, dword [ebp + 8]
add eax, 0x120
call fcn.00545d10
inc dword [ebp - 8]
mov ecx, dword [ebp - 0x24]
mov dword fs:[0], ecx
mov eax, dword [ebp + 8]
mov esp, ebp
pop ebp
ret