Function at 0x450c70
Capabilities:
Check for peb ntglobalflag flag

Disassembly:
push 0xffffffffffffffff
push 0x4aa77b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x18], esi
mov dword [esi], 0x4b51ac
push 6
mov dword [esp + 0x28], 0xf
call fcn.0040cc30
mov ecx, dword [esi + 0x3c]
xor eax, eax
mov ax, word [esi + 0x40]
xor edx, edx
mov dx, word [esi + 0x38]
push eax
push ecx
push edx
push 1
call fcn.00417a30
mov eax, dword [eax + 0x54]
add esp, 4
push eax
push 1
call fcn.00417a30
mov ecx, dword [eax + 0x50]
add esp, 4
call fcn.00442790
lea edi, [esi + 0x1f4]
push 1
mov ecx, edi
call fcn.0040a760
mov edx, dword [esi + 0xc4]
xor ebx, ebx
push ebx
push ebx
push 1
push 3
push edx
lea ecx, [esi + 0x1b8]
push ecx
xor ecx, ecx
mov cx, word [esi + 0x38]
lea eax, [esi + 0x140]
push eax
push ecx
push 1
call fcn.00417a30
mov edx, dword [eax + 0x54]
add esp, 4
push edx
push 1
call fcn.00417a30
mov ecx, dword [eax + 0x50]
add esp, 4
call fcn.00442bd0
push 1
mov ecx, edi
call fcn.0040a770
mov ecx, esi
call fcn.0040d5a0
lea ecx, [esi + 0x210]
push 1
call fcn.0040a760
mov eax, dword [esi + 0x50]
mov ecx, dword [eax]
cmp ecx, eax
mov dword [esp + 0x10], ecx
je 0x450d8a
mov edi, dword [ecx + 0x10]
lea eax, [edi + 0x10f4]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
cmp eax, ebx
jne 0x450d76
cmp edi, ebx
je 0x450d76
mov edx, dword [edi]
push 1
mov ecx, edi
call dword [edx]
lea ecx, [esp + 0x10]
call fcn.00472bf0
mov eax, dword [esi + 0x50]
mov ecx, dword [esp + 0x10]
cmp ecx, eax
jne 0x450d56
mov eax, dword [esi + 0x50]
mov ebp, dword [eax + 4]
cmp byte [ebp + 0x15], bl
lea edi, [esi + 0x4c]
mov dword [esp + 0x10], ebp
jne 0x450dc6
lea esp, [esp]
mov ecx, dword [ebp + 8]
push ecx
mov ecx, edi
call fcn.0044e9f0
mov edx, dword [esp + 0x10]
mov ebp, dword [ebp]
push edx
call fcn.004955bc
mov al, byte [ebp + 0x15]
add esp, 4
cmp al, bl
mov dword [esp + 0x10], ebp
je 0x450da0
mov eax, dword [edi + 4]
mov dword [eax + 4], eax
mov eax, dword [edi + 4]
mov dword [edi + 8], ebx
mov dword [eax], eax
mov edi, dword [edi + 4]
mov dword [edi + 8], edi
mov eax, dword [esi + 0x5c]
mov dword [esi + 0x48], ebx
mov edi, dword [eax]
cmp edi, eax
je 0x450e49
mov ebp, dword [edi + 0x10]
lea eax, [ebp + 0x10f4]
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
cmp eax, ebx
jne 0x450e07
cmp ebp, ebx
je 0x450e07
mov edx, dword [ebp]
push 1
mov ecx, ebp
call dword [edx]
cmp byte [edi + 0x15], bl
jne 0x450e44
mov eax, dword [edi + 8]
cmp byte [eax + 0x15], bl
jne 0x450e2b
mov edi, eax
mov eax, dword [edi]
cmp byte [eax + 0x15], bl
jne 0x450e44
lea ecx, [ecx]
mov edi, eax
mov eax, dword [edi]
cmp byte [eax + 0x15], bl
je 0x450e20
jmp 0x450e44
mov eax, dword [edi + 4]
cmp byte [eax + 0x15], bl
jne 0x450e42
cmp edi, dword [eax + 8]
jne 0x450e42
mov edi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0x15], bl
je 0x450e33
mov edi, eax
cmp edi, dword [esi + 0x5c]
jne 0x450de6
mov eax, dword [esi + 0x5c]
mov edi, dword [eax + 4]
cmp byte [edi + 0x15], bl
lea ebp, [esi + 0x58]
mov dword [esp + 0x10], edi
jne 0x450e85
jmp 0x450e60
mov ecx, dword [edi + 8]
push ecx
mov ecx, ebp
call fcn.0044e9f0
mov edx, dword [esp + 0x10]
mov edi, dword [edi]
push edx
call fcn.004955bc
mov al, byte [edi + 0x15]
add esp, 4
cmp al, bl
mov dword [esp + 0x10], edi
je 0x450e60
mov eax, dword [ebp + 4]
mov dword [eax + 4], eax
mov eax, dword [ebp + 4]
mov dword [ebp + 8], ebx
mov dword [eax], eax
mov eax, dword [ebp + 4]
push 1
lea ecx, [esi + 0x210]
mov dword [eax + 8], eax
call fcn.0040a770
lea ecx, [esi + 0xa4]
push 4
call fcn.0040a760
mov eax, dword [esi + 0x68]
mov edi, dword [eax]
cmp edi, eax
je 0x450ed5
lea esp, [esp]
mov eax, dword [edi + 8]
push eax
call fcn.004955bc
mov edi, dword [edi]
mov eax, dword [esi + 0x68]
add esp, 4
cmp edi, eax
jne 0x450ec0
mov ecx, dword [esi + 0x68]
mov eax, dword [ecx]
mov dword [ecx], ecx
mov ecx, dword [esi + 0x68]
mov dword [ecx + 4], ecx
cmp eax, dword [esi + 0x68]
mov dword [esi + 0x6c], ebx
je 0x450f04
lea ebx, [ebx]
mov edi, dword [eax]
push eax
call fcn.004955bc
mov ecx, dword [esi + 0x68]
add esp, 4
cmp edi, ecx
mov eax, edi
jne 0x450ef0
mov eax, dword [esi + 0x74]
mov eax, dword [eax + 4]
cmp byte [eax + 0x15], bl
lea edi, [esi + 0x70]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
jne 0x450f55
lea ebx, [ebx]
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 8]
push edx
mov ecx, edi
call fcn.0044ea30
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov ecx, dword [eax]
push edx
mov dword [esp + 0x14], ecx
call fcn.004955bc
mov eax, dword [esp + 0x14]
mov cl, byte [eax + 0x15]
add esp, 4
cmp cl, bl
mov dword [esp + 0x14], eax
je 0x450f20
mov eax, dword [edi + 4]
mov dword [eax + 4], eax
mov eax, dword [edi + 4]
mov dword [edi + 8], ebx
mov dword [eax], eax
mov eax, dword [edi + 4]
push 4
lea ecx, [esi + 0xa4]
mov dword [eax + 8], eax
call fcn.0040a770
lea ecx, [esi + 0x148c]
mov byte [esp + 0x24], 0xe
mov dword [ecx], 0x4b23b4
call fcn.0040d8f0
lea ecx, [esi + 0x1444]
mov byte [esp + 0x24], 0xd
mov dword [ecx], 0x4b23b4
call fcn.0040d8f0
lea ecx, [esi + 0x13fc]
mov byte [esp + 0x24], 0xc
mov dword [ecx], 0x4b23b4
call fcn.0040d8f0
lea ecx, [esi + 0x13b4]
mov byte [esp + 0x24], 0xb
mov dword [ecx], 0x4b23b4
call fcn.0040d8f0
mov eax, dword [esi + 0x13a8]
cmp eax, ebx
je 0x450fe1
push eax
call fcn.004955bc
add esp, 4
lea ecx, [esi + 0x12f8]
mov dword [esi + 0x13a8], ebx
mov dword [esi + 0x13ac], ebx
mov dword [esi + 0x13b0], ebx
mov byte [esp + 0x24], 9
call fcn.0040a740
lea ecx, [esi + 0x22c]
mov byte [esp + 0x24], 8
call fcn.0044cdc0
lea ecx, [esi + 0x210]
mov byte [esp + 0x24], 7
call fcn.0040a740
lea ecx, [esi + 0xc0]
mov byte [esp + 0x24], 6
call fcn.00452e90
lea ecx, [esi + 0xa4]
mov byte [esp + 0x24], 5
call fcn.0040a740
lea ecx, [esi + 0x7c]
mov byte [esp + 0x24], 4
call fcn.004508b0
mov eax, dword [edi + 4]
mov ecx, dword [eax]
push eax
push ecx
lea eax, [esp + 0x1c]
push eax
mov ecx, edi
mov byte [esp + 0x30], 3
call fcn.0044f4c0
mov eax, dword [edi + 4]
push eax
call fcn.004955bc
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov eax, dword [esi + 0x68]
mov ecx, dword [eax]
mov dword [eax], eax
mov eax, dword [esi + 0x68]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x68]
add esp, 4
cmp ecx, eax
mov dword [esi + 0x6c], ebx
je 0x4510a5
mov edi, dword [ecx]
push ecx
call fcn.004955bc
mov eax, dword [esi + 0x68]
add esp, 4
cmp edi, eax
mov ecx, edi
jne 0x451091
mov eax, dword [esi + 0x68]
push eax
call fcn.004955bc
add esp, 4
mov dword [esi + 0x68], ebx
mov eax, dword [ebp + 4]
mov ecx, dword [eax]
push eax
push ecx
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebp
mov byte [esp + 0x30], 1
call fcn.0044f7a0
mov eax, dword [ebp + 4]
push eax
call fcn.004955bc
add esp, 4
mov dword [ebp + 4], ebx
mov dword [ebp + 8], ebx
mov eax, dword [esi + 0x50]
mov ecx, dword [eax]
lea edi, [esi + 0x4c]
push eax
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, edi
mov byte [esp + 0x30], bl
call fcn.0044f7a0
mov eax, dword [edi + 4]
push eax
call fcn.004955bc
add esp, 4
mov ecx, esi
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov dword [esp + 0x24], 0xffffffff
call fcn.0040d8f0
mov ecx, dword [esp + 0x1c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x18
ret