Function at 0x56e5e0
Capabilities:
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x60bc59
mov eax, dword fs:[0]
push eax
sub esp, 0x1e0
mov eax, dword [0x697bc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x12c], ecx
lea ecx, [ebp - 0x98]
call fcn.004eea00
mov dword [ebp - 4], 0
call fcn.004e8dd0
push eax
lea ecx, [ebp - 0xc8]
call fcn.004ef320
mov byte [ebp - 4], 1
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0xc8]
call fcn.004ef850
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x164], esp
push eax
push ecx
call fcn.004e2fe0
add esp, 8
mov dword [ebp - 0x140], eax
mov edx, dword [ebp - 0x140]
mov dword [ebp - 0x170], edx
mov byte [ebp - 4], 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x168], esp
push str.C2F6E58b1D5Ad
call fcn.004eea50
mov dword [ebp - 0x158], eax
mov byte [ebp - 4], 1
call fcn.004f7d20
add esp, 0x34
mov ecx, dword [ebp - 0x12c]
add ecx, 0x1bc
call fcn.004ef850
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.004e2fe0
add esp, 8
mov dword [ebp - 0x148], eax
mov ecx, dword [ebp - 0x148]
push ecx
mov ecx, dword [ebp + 8]
add ecx, 0x18
call fcn.004eeb20
lea ecx, [ebp - 0x18c]
call fcn.004eeb60
mov ecx, dword [ebp - 0x12c]
add ecx, 0x1d4
call fcn.004ef850
push eax
lea edx, [ebp - 0x1d4]
push edx
call fcn.004e2fe0
add esp, 8
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x60
call fcn.004eeb20
lea ecx, [ebp - 0x1d4]
call fcn.004eeb60
lea ecx, [ebp - 0x98]
push ecx
mov ecx, dword [ebp + 8]
call fcn.004eeb90
lea edx, [ebp - 0x1bc]
push edx
call fcn.004e72e0
add esp, 4
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x13c], eax
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x13c]
call fcn.004ef850
push eax
lea ecx, [ebp - 0x1a4]
push ecx
call fcn.004e2fe0
add esp, 8
mov dword [ebp - 0x14c], eax
mov edx, dword [ebp - 0x14c]
push edx
mov ecx, dword [ebp + 8]
add ecx, 0x48
call fcn.004eeb20
lea ecx, [ebp - 0x1a4]
call fcn.004eeb60
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1bc]
call fcn.004ef480
push str.embsoft
mov ecx, dword [ebp + 8]
add ecx, 0x30
call fcn.004eebb0
push 0x66dce8
lea ecx, [ebp - 0x38]
call fcn.004eea50
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x11]
call fcn.004e2500
mov byte [ebp - 4], 5
lea eax, [ebp - 0x38]
push eax
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x11]
call fcn.00512490
push str.B2f6E5_8b1D4A3
lea ecx, [ebp - 0xb0]
call fcn.004eea50
mov byte [ebp - 4], 6
push str.849a5ee64a63a725
lea ecx, [ebp - 0xf8]
call fcn.004eea50
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x80]
call fcn.004eea00
mov byte [ebp - 4], 8
lea edx, [ebp - 0x80]
push edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x160], esp
lea eax, [ebp - 0x38]
push eax
call fcn.004ee9d0
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x15c], ecx
mov byte [ebp - 4], 9
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x16c], esp
lea edx, [ebp - 0xb0]
push edx
call fcn.004ee9d0
mov dword [ebp - 0x154], eax
mov byte [ebp - 4], 8
call fcn.004f7d20
add esp, 0x34
lea eax, [ebp - 0x1ec]
push eax
call fcn.004e72e0
add esp, 4
mov dword [ebp - 0x144], eax
mov ecx, dword [ebp - 0x144]
mov dword [ebp - 0x138], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x138]
call fcn.004ef850
push eax
lea edx, [ebp - 0x68]
push edx
call fcn.004e2fe0
add esp, 8
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1ec]
call fcn.004ef480
lea ecx, [ebp - 0x38]
call fcn.004eed50
push eax
lea ecx, [ebp - 0xf8]
call fcn.004eed50
push eax
lea ecx, [ebp - 0x68]
call fcn.004eed50
push eax
lea ecx, [ebp - 0xb0]
call fcn.004eed50
push eax
push str._s_s_s_s
lea eax, [ebp - 0x128]
push eax
call fcn.004e3870
add esp, 0x18
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x50]
call fcn.004eea00
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x128]
push edx
call fcn.004f79d0
add esp, 8
push 0xc
lea ecx, [ebp - 0x20]
call fcn.004e2570
lea ecx, [ebp - 0x20]
call fcn.004f6b10
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x110]
call fcn.004eea00
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x68]
call fcn.004eed50
push eax
lea ecx, [ebp - 0x50]
call fcn.004eed50
push eax
lea ecx, [ebp - 0x80]
call fcn.004eed50
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x30
call fcn.004eed50
push eax
push str.https:__tongji.flash.cn
push str._s_hm2.gif_msgtype_sdata_stoken_stime_s
lea eax, [ebp - 0xe0]
push eax
call fcn.004e3870
add esp, 0x1c
mov byte [ebp - 4], 0x11
push 0
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea ecx, [ebp - 0x20]
call fcn.004f6fb0
mov dword [ebp - 0x174], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xe0]
call fcn.004eeb60
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x110]
call fcn.004eeb60
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x20]
call fcn.004f6b30
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x50]
call fcn.004eeb60
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x128]
call fcn.004eeb60
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x68]
call fcn.004eeb60
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x80]
call fcn.004eeb60
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xf8]
call fcn.004eeb60
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xb0]
call fcn.004eeb60
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x11]
call fcn.004e1450
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x38]
call fcn.004eeb60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc8]
call fcn.004ef480
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
call fcn.004eeb60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c6c09
mov esp, ebp
pop ebp
ret 4