Function at 0x10001790
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov ebx, eax
add eax, 0x34
sub esp, 0x2c
mov dword [ebp - 0x20], eax
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
sub esp, 4
cmp dword [ebx + 0x4f8], 5
jne 0x100017d0
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 8], 0x14
mov edi, dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [esp + 4], 0
mov esi, dword fs:[0x18]
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call edi
sub esp, 0xc
mov dword [ebp - 0x10], eax
mov dword [esp + 8], 0x28
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call edi
pxor xmm0, xmm0
mov edi, eax
mov eax, dword [ebp - 0x10]
sub esp, 0xc
mov dword [edi + 0x20], 0
movups xmmword [eax], xmm0
pxor xmm0, xmm0
mov dword [eax + 0x10], 0
mov eax, dword [ebx + 0x4f0]
mov dword [edi + 0x24], 0
mov dword [ebp - 0x14], eax
movups xmmword [edi], xmm0
movups xmmword [edi + 0x10], xmm0
test eax, eax
je 0x10001985
mov eax, dword [ebx + 0x4f8]
test eax, eax
jle 0x100019a3
mov eax, dword [sym.imp.kernel32.dll_HeapFree]
xor ecx, ecx
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], edi
mov esi, ecx
mov dword [ebp - 0x1c], eax
jmp 0x100018c8
mov ecx, dword [ebp - 0x28]
mov dword [esp + 8], edi
mov dword [esp + 4], 0
mov eax, dword [ecx + 0x30]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ecx
mov eax, dword [ebx + 0x4f0]
lea edx, [esi*4]
sub esp, 0xc
mov dword [eax + edx], 0
mov eax, dword [ebx + 0x4f0]
mov dword [ebp - 0x14], eax
add esi, 1
cmp esi, dword [ebx + 0x4f8]
jge 0x10001938
lea eax, [esi*4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
mov edi, dword [eax + esi*4]
test edi, edi
je 0x100018bd
mov eax, dword [ebx + 0x4f4]
lea ecx, [eax + esi*8]
mov eax, dword [ecx]
mov edx, dword [ecx + 4]
mov dword [esp + 8], 5
mov dword [esp + 0xc], 0
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [ebp - 0x18], ecx
call sym.___moddi3
mov edx, dword [ebp - 0x10]
lea edx, [edx + eax*4]
mov ecx, dword [edx]
test ecx, ecx
mov ecx, dword [ebp - 0x18]
jne 0x10001880
mov dword [edx], edi
mov edi, dword [ebp - 0x24]
add esi, 1
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [edi + eax*8], edx
mov dword [edi + eax*8 + 4], ecx
cmp esi, dword [ebx + 0x4f8]
jl 0x100018c8
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov dword [esp + 4], 0
mov esi, dword fs:[0x18]
mov dword [esp + 8], eax
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x1c]
call eax
mov eax, dword [ebx + 0x4f4]
sub esp, 0xc
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x1c]
call eax
sub esp, 0xc
mov eax, dword [ebp - 0x10]
mov dword [ebx + 0x4f4], edi
mov dword [ebx + 0x4f8], 5
mov dword [ebx + 0x4f0], eax
jmp 0x100017b6
mov eax, dword [sym.imp.kernel32.dll_HeapFree]
mov dword [ebp - 0x1c], eax
jmp 0x1000193b