Function at 0x4655a0
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x542004
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x5a9008]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x10], ebx
push ebx
call dword [sym.imp.KERNEL32.dll_InitializeSRWLock]
push 0
lea ecx, [ebx + 4]
push 0xe
call fcn.004674b0
mov dword [ebp - 4], 0
mov dword [ebx + 0x2c], 0
mov dword [ebx + 0x30], 0
mov dword [ebx + 0x34], 0
mov byte [ebp - 4], 1
lea esi, [ebx + 0x38]
mov dword [ebp - 0x14], esi
push 0x1c
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004ef5e0
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov byte [ebp - 4], 3
lea esi, [ebx + 0x40]
mov dword [ebp - 0x18], esi
push 0x20
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004ef5e0
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov byte [ebp - 4], 5
lea esi, [ebx + 0x48]
mov dword [ebp - 0x1c], esi
push 0x18
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.004ef5e0
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], eax
mov byte [ebp - 4], 7
mov ecx, dword [ebx + 0x30]
mov dword [ebp - 0x20], 9
mov byte [ebp - 0x1c], 1
cmp ecx, dword [ebx + 0x34]
je 0x4656b8
mov eax, dword [ebp - 0x1c]
mov dword [ecx], 9
mov dword [ecx + 4], eax
add dword [ebx + 0x30], 8
jmp 0x4656c5
lea eax, [ebp - 0x20]
push eax
push ecx
lea ecx, [ebx + 0x2c]
call fcn.00466d10
mov ecx, dword [ebx + 0x30]
mov dword [ebp - 0x20], 0xa
mov byte [ebp - 0x1c], 1
cmp ecx, dword [ebx + 0x34]
je 0x4656ea
mov eax, dword [ebp - 0x1c]
mov dword [ecx], 0xa
mov dword [ecx + 4], eax
add dword [ebx + 0x30], 8
jmp 0x4656f7
lea eax, [ebp - 0x20]
push eax
push ecx
lea ecx, [ebx + 0x2c]
call fcn.00466d10
mov ecx, dword [ebx + 0x30]
mov dword [ebp - 0x20], 2
mov byte [ebp - 0x1c], 1
cmp ecx, dword [ebx + 0x34]
je 0x46571c
mov eax, dword [ebp - 0x1c]
mov dword [ecx], 2
mov dword [ecx + 4], eax
add dword [ebx + 0x30], 8
jmp 0x465729
lea eax, [ebp - 0x20]
push eax
push ecx
lea ecx, [ebx + 0x2c]
call fcn.00466d10
mov ecx, dword [ebx + 0x30]
mov dword [ebp - 0x20], 3
mov byte [ebp - 0x1c], 1
cmp ecx, dword [ebx + 0x34]
je 0x46574e
mov eax, dword [ebp - 0x1c]
mov dword [ecx], 3
mov dword [ecx + 4], eax
add dword [ebx + 0x30], 8
jmp 0x46575b
lea eax, [ebp - 0x20]
push eax
push ecx
lea ecx, [ebx + 0x2c]
call fcn.00466d10
mov ecx, dword [ebx + 0x30]
mov dword [ebp - 0x20], 4
mov byte [ebp - 0x1c], 1
cmp ecx, dword [ebx + 0x34]
je 0x465780
mov eax, dword [ebp - 0x1c]
mov dword [ecx], 4
mov dword [ecx + 4], eax
add dword [ebx + 0x30], 8
jmp 0x46578d
lea eax, [ebp - 0x20]
push eax
push ecx
lea ecx, [ebx + 0x2c]
call fcn.00466d10
mov ecx, dword [ebx + 0x30]
mov dword [ebp - 0x20], 5
mov byte [ebp - 0x1c], 1
cmp ecx, dword [ebx + 0x34]
je 0x4657b2
mov eax, dword [ebp - 0x1c]
mov dword [ecx], 5
mov dword [ecx + 4], eax
add dword [ebx + 0x30], 8
jmp 0x4657bf
lea eax, [ebp - 0x20]
push eax
push ecx
lea ecx, [ebx + 0x2c]
call fcn.00466d10
mov ecx, dword [ebx + 0x30]
mov dword [ebp - 0x20], 8
mov byte [ebp - 0x1c], 1
cmp ecx, dword [ebx + 0x34]
je 0x4657e4
mov eax, dword [ebp - 0x1c]
mov dword [ecx], 8
mov dword [ecx + 4], eax
add dword [ebx + 0x30], 8
jmp 0x4657f1
lea eax, [ebp - 0x20]
push eax
push ecx
lea ecx, [ebx + 0x2c]
call fcn.00466d10
mov ecx, dword [ebx + 0x30]
mov dword [ebp - 0x20], 0xd
mov byte [ebp - 0x1c], 1
cmp ecx, dword [ebx + 0x34]
je 0x465816
mov eax, dword [ebp - 0x1c]
mov dword [ecx], 0xd
mov dword [ecx + 4], eax
add dword [ebx + 0x30], 8
jmp 0x465823
lea eax, [ebp - 0x20]
push eax
push ecx
lea ecx, [ebx + 0x2c]
call fcn.00466d10
mov ecx, dword [ebx + 0x30]
mov dword [ebp - 0x20], 6
mov byte [ebp - 0x1c], 1
cmp ecx, dword [ebx + 0x34]
je 0x465848
mov eax, dword [ebp - 0x1c]
mov dword [ecx], 6
mov dword [ecx + 4], eax
add dword [ebx + 0x30], 8
jmp 0x465855
lea eax, [ebp - 0x20]
push eax
push ecx
lea ecx, [ebx + 0x2c]
call fcn.00466d10
mov ecx, dword [ebx + 0x30]
mov dword [ebp - 0x20], 7
mov byte [ebp - 0x1c], 1
cmp ecx, dword [ebx + 0x34]
je 0x46587a
mov eax, dword [ebp - 0x1c]
mov dword [ecx], 7
mov dword [ecx + 4], eax
add dword [ebx + 0x30], 8
jmp 0x465887
lea eax, [ebp - 0x20]
push eax
push ecx
lea ecx, [ebx + 0x2c]
call fcn.00466d10
mov ecx, dword [ebx + 0x30]
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x1c], 0
cmp ecx, dword [ebx + 0x34]
je 0x4658ac
mov eax, dword [ebp - 0x1c]
mov dword [ecx], 0xf
mov dword [ecx + 4], eax
add dword [ebx + 0x30], 8
jmp 0x4658b9
lea eax, [ebp - 0x20]
push eax
push ecx
lea ecx, [ebx + 0x2c]
call fcn.00466d10
mov dword [ebp - 4], 0xffffffff
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret