Function at 0x1000ce20
Capabilities:
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100dcda0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
mov dword [ebp - 0x10], ecx
push esi
mov dword [ecx], 0
push edi
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov dword [ebp - 4], 0
mov dword [ecx + 0x18], 0
mov dword [ecx + 0x28], 0
mov dword [ecx + 0x2c], 0xf
mov byte [ecx + 0x18], 0
mov dword [ecx + 0x30], 0
mov dword [ecx + 0x40], 0
mov dword [ecx + 0x44], 0xf
mov byte [ecx + 0x30], 0
mov dword [ecx + 0x48], 0
mov dword [ecx + 0x58], 0
mov dword [ecx + 0x5c], 0xf
mov byte [ecx + 0x48], 0
mov dword [ecx + 0x60], 0
mov dword [ecx + 0x70], 0
mov dword [ecx + 0x74], 0xf
mov byte [ecx + 0x60], 0
lea ebx, [ecx + 0x78]
mov byte [ebp - 4], 4
lea edi, [ebx + 0x30]
mov dword [ebp - 0x14], ebx
push 1
lea ecx, [edi + 4]
mov dword [ebp - 0x18], edi
call fcn.10027820
mov byte [edi + 0x59], 1
lea eax, [edi + 0x10]
mov dword [eax + 0x50], 0x3fffffff
mov dword [eax + 0x54], 0x12
mov dword [eax + 0x58], eax
lea eax, [edi + 0x70]
mov byte [eax + 0x1001], 1
mov dword [eax + 0x1008], 0x3fffffff
mov dword [eax + 0x100c], 0x400
mov dword [eax + 0x1010], eax
mov dword [edi], vtable.CryptoPP::BlockCipherFinal_0__class_CryptoPP::Blowfish::Base_.1.0
mov dword [edi + 4], vtable.CryptoPP::BlockCipherFinal_0__class_CryptoPP::Blowfish::Base_.0
push 1
lea ecx, [ebx + 4]
mov byte [ebp - 4], 5
call fcn.10027820
mov dword [ebx + 0x10], 0xffffffff
mov dword [ebx + 0x14], 0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x20], 0xffffffff
mov dword [ebx + 0x24], 0
mov dword [ebx + 0x28], 0
mov byte [ebp - 4], 7
mov ecx, ebx
mov dword [ebx], vtable.CryptoPP::CipherModeFinalTemplate_CipherHolder_class_CryptoPP::BlockCipherFinal_0__class_CryptoPP::Blowfish::Base___class_CryptoPP::CBC_Encryption_.0
mov dword [ebx + 4], vtable.CryptoPP::CipherModeFinalTemplate_CipherHolder_class_CryptoPP::BlockCipherFinal_0__class_CryptoPP::Blowfish::Base___class_CryptoPP::CBC_Encryption_.1.0
mov dword [ebx + 8], edi
call fcn.10029dc0
mov byte [ebp - 4], 8
mov ebx, dword [ebp - 0x10]
add ebx, 0x1130
mov dword [ebp - 0x18], ebx
push 1
lea edi, [ebx + 0x40]
lea ecx, [edi + 4]
mov dword [ebp - 0x14], edi
call fcn.10027820
lea eax, [edi + 0x10]
mov dword [eax + 0x50], 0x3fffffff
mov byte [eax + 0x49], 1
mov dword [eax + 0x54], 0x12
mov dword [eax + 0x58], eax
lea eax, [edi + 0x70]
mov byte [eax + 0x1001], 1
mov dword [eax + 0x1008], 0x3fffffff
mov dword [eax + 0x100c], 0x400
mov dword [eax + 0x1010], eax
mov dword [edi], vtable.CryptoPP::BlockCipherFinal_1__class_CryptoPP::Blowfish::Base_.1.0
mov dword [edi + 4], vtable.CryptoPP::BlockCipherFinal_1__class_CryptoPP::Blowfish::Base_.0
push 1
lea ecx, [ebx + 4]
mov byte [ebp - 4], 9
call fcn.10027820
mov dword [ebx + 0x10], 0xffffffff
mov dword [ebx + 0x14], 0
mov dword [ebx + 0x18], 0
mov dword [ebx + 0x20], 0xffffffff
mov dword [ebx + 0x24], 0
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x30], 0xffffffff
mov dword [ebx + 0x34], 0
mov dword [ebx + 0x38], 0
mov byte [ebp - 4], 0xc
mov ecx, ebx
mov dword [ebx], vtable.CryptoPP::CipherModeFinalTemplate_CipherHolder_class_CryptoPP::BlockCipherFinal_1__class_CryptoPP::Blowfish::Base___class_CryptoPP::CBC_Decryption_.1.0
mov dword [ebx + 4], vtable.CryptoPP::CipherModeFinalTemplate_CipherHolder_class_CryptoPP::BlockCipherFinal_1__class_CryptoPP::Blowfish::Base___class_CryptoPP::CBC_Decryption_.0
mov dword [ebx + 8], edi
call fcn.10029e20
mov byte [ebp - 4], 0xd
mov ebx, dword [ebp - 0x10]
push 0
push 0x10103ee7
lea ecx, [ebx + 0x60]
mov dword [ebx + 0x21fc], 0
mov dword [ebx + 0x2200], 1
mov word [ebx + 0x21f9], 0
mov byte [ebx + 0x21f8], 0
mov byte [ebx + 0x21fb], 0
call fcn.10005770
push 0
push 0x10103ee7
lea ecx, [ebx + 0x30]
call fcn.10005770
push 0
push 0x10103ee7
mov ecx, ebx
call fcn.10005770
push 0
push 0x10103ee7
lea ecx, [ebx + 0x18]
call fcn.10005770
push 0
push 0x10103ee7
lea ecx, [ebx + 0x48]
call fcn.10005770
mov ecx, dword [ebp - 0xc]
mov eax, ebx
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret