Function at 0x440970
Capabilities:
Check for peb beingdebugged flag
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffdc
mov eax, 0x5eeac4
call fcn.0050acb0
mov word [ebp - 0x14], 8
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0043efb8
add esp, 8
add dword [ebp - 8], 2
mov edx, dword [ebp + 8]
add edx, 0x10
push edx
call fcn.00435a94
pop ecx
add dword [ebp - 8], 0x1e
mov ecx, 0x5ea5cc
mov eax, dword [ebp + 8]
mov dword [eax + 2], ecx
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x10]
mov dword [edx + 0x10], eax
mov edx, dword [ebp + 0xc]
add edx, 0x14
mov eax, dword [ebp + 8]
add eax, 0x14
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x18
mov eax, dword [ebp + 8]
add eax, 0x18
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x1c
mov eax, dword [ebp + 8]
add eax, 0x1c
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x20
mov eax, dword [ebp + 8]
add eax, 0x20
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x24
mov eax, dword [ebp + 8]
add eax, 0x24
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x28
mov eax, dword [ebp + 8]
add eax, 0x28
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x2c
mov eax, dword [ebp + 8]
add eax, 0x2c
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x30
mov eax, dword [ebp + 8]
add eax, 0x30
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x34
mov eax, dword [ebp + 8]
add eax, 0x34
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x38
mov eax, dword [ebp + 8]
add eax, 0x38
call fcn.00545ea0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x3c]
mov dword [edx + 0x3c], eax
mov edx, dword [ebp + 0xc]
add edx, 0x40
mov eax, dword [ebp + 8]
add eax, 0x40
call fcn.00545ea0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x44]
mov dword [edx + 0x44], eax
mov edx, dword [ebp + 0xc]
add edx, 0x48
mov eax, dword [ebp + 8]
add eax, 0x48
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x4c
mov eax, dword [ebp + 8]
add eax, 0x4c
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x50
mov eax, dword [ebp + 8]
add eax, 0x50
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x54
mov eax, dword [ebp + 8]
add eax, 0x54
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x58
mov eax, dword [ebp + 8]
add eax, 0x58
call fcn.00545ea0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x5c]
mov dword [edx + 0x5c], eax
mov edx, dword [ebp + 0xc]
add edx, 0x60
mov eax, dword [ebp + 8]
add eax, 0x60
call fcn.00545ea0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x64]
mov dword [edx + 0x64], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x68]
mov dword [edx + 0x68], eax
mov edx, dword [ebp + 0xc]
add edx, 0x6c
mov eax, dword [ebp + 8]
add eax, 0x6c
call fcn.00545ea0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x70]
mov dword [edx + 0x70], eax
mov edx, dword [ebp + 0xc]
add edx, 0x74
mov eax, dword [ebp + 8]
add eax, 0x74
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x78
mov eax, dword [ebp + 8]
add eax, 0x78
call fcn.00545ea0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x7c]
mov dword [edx + 0x7c], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x80]
mov dword [edx + 0x80], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x84]
mov dword [edx + 0x84], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x88]
mov dword [edx + 0x88], eax
mov edx, dword [ebp + 0xc]
add edx, 0x8c
mov eax, dword [ebp + 8]
add eax, 0x8c
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x90
mov eax, dword [ebp + 8]
add eax, 0x90
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0x94
mov eax, dword [ebp + 8]
add eax, 0x94
call fcn.00545ea0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x98]
mov dword [edx + 0x98], eax
mov edx, dword [ebp + 0xc]
add edx, 0x9c
mov eax, dword [ebp + 8]
add eax, 0x9c
call fcn.00545ea0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0xa0]
mov dword [edx + 0xa0], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov al, byte [ecx + 0xa4]
mov byte [edx + 0xa4], al
mov edx, dword [ebp + 0xc]
add edx, 0xa8
mov eax, dword [ebp + 8]
add eax, 0xa8
call fcn.00545ea0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0xac]
mov dword [edx + 0xac], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0xb0]
mov dword [edx + 0xb0], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0xb8]
mov dword [edx + 0xb8], eax
mov edx, dword [ebp + 0xc]
add edx, 0xbc
mov eax, dword [ebp + 8]
add eax, 0xbc
call fcn.00545ea0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0xc0]
mov dword [edx + 0xc0], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0xc4]
mov dword [edx + 0xc4], eax
mov edx, dword [ebp + 0xc]
add edx, 0xc8
mov eax, dword [ebp + 8]
add eax, 0xc8
call fcn.00545ea0
mov edx, dword [ebp + 0xc]
add edx, 0xcc
mov eax, dword [ebp + 8]
add eax, 0xcc
call fcn.00545ea0
mov edx, dword [ebp - 0x24]
mov dword fs:[0], edx
mov eax, dword [ebp + 8]
mov esp, ebp
pop ebp
ret