Function at 0x424390
Capabilities:
Check for peb ntglobalflag flag
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x58d325
mov eax, dword fs:[0]
push eax
sub esp, 0x38
push ebx
push ebp
push esi
push edi
mov eax, dword [0x60aecc]
xor eax, esp
push eax
lea eax, [esp + 0x4c]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x1c], esi
call fcn.00404440
xor ebx, ebx
lea ecx, [esi + 0x68]
mov dword [esp + 0x54], ebx
mov dword [esi], vtable.TCDCustomerGroup.0
call fcn.0049a820
lea ecx, [esi + 0x70]
call fcn.0049a820
mov dword [esi + 0x7c], ebx
mov dword [esi + 0x80], ebx
mov dword [esi + 0x84], ebx
mov dword [esi + 0x8c], ebx
mov dword [esi + 0x90], ebx
mov dword [esi + 0x94], ebx
mov dword [esi + 0x9c], ebx
mov dword [esi + 0xa0], ebx
mov dword [esi + 0xa4], ebx
lea edi, [esi + 0xa8]
mov ecx, edi
mov byte [esp + 0x54], 3
call fcn.00406e30
mov dword [edi + 4], eax
mov dword [edi + 8], ebx
lea edi, [esi + 0xb4]
mov ecx, edi
mov byte [esp + 0x54], 4
call fcn.00406e30
mov dword [edi + 4], eax
mov dword [edi + 8], ebx
lea ecx, [esi + 0xc0]
mov byte [esp + 0x54], 5
call fcn.0049a820
lea ecx, [esi + 0xc8]
call fcn.0049a820
or eax, 0xffffffff
mov dword [esi + 0xd0], eax
mov dword [esi + 0xd4], eax
mov dword [esi + 0xd8], ebx
mov dword [esi + 0xdc], ebx
mov dword [esi + 0xe0], ebx
mov dword [esi + 0xe4], ebx
mov dword [esi + 0xe8], ebx
mov dword [esi + 0xec], ebx
mov dword [esi + 0xf0], ebx
mov ecx, esi
mov byte [esp + 0x54], 8
mov byte [esi + 0xf4], bl
call fcn.004229b0
lea eax, [esp + 0x34]
push 0x3e8
push eax
call fcn.0048a8f0
add esp, 8
mov ecx, dword [eax]
mov dword [esi + 0xdc], ecx
mov ebp, dword [eax + 4]
cmp ebp, dword [esi + 0xe0]
mov byte [esp + 0x54], 9
je 0x42450d
cmp ebp, ebx
je 0x4244d9
add dword [ebp + 4], 1
mov edi, dword [esi + 0xe0]
cmp edi, ebx
je 0x424507
add dword [edi + 4], 0xffffffff
cmp dword [edi + 4], ebx
jne 0x424507
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
add dword [edi + 8], 0xffffffff
cmp dword [edi + 8], ebx
jne 0x424507
mov edx, dword [edi]
mov eax, dword [edx + 8]
mov ecx, edi
call eax
mov dword [esi + 0xe0], ebp
mov edi, dword [esp + 0x38]
cmp edi, ebx
mov byte [esp + 0x54], 8
je 0x42453e
add dword [edi + 4], 0xffffffff
lea eax, [edi + 4]
jne 0x42453e
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
add dword [edi + 8], 0xffffffff
cmp dword [edi + 8], ebx
jne 0x42453e
mov edx, dword [edi]
mov eax, dword [edx + 8]
mov ecx, edi
call eax
mov eax, dword [esi + 0xdc]
lea ecx, [esp + 0x34]
push 0x3e8
push ecx
mov dword [eax + 0x74], ebx
call fcn.0048a8f0
add esp, 8
mov edx, dword [eax]
mov dword [esi + 0xe4], edx
mov ebp, dword [eax + 4]
cmp ebp, dword [esi + 0xe8]
mov byte [esp + 0x54], 0xa
je 0x4245ad
cmp ebp, ebx
je 0x424579
add dword [ebp + 4], 1
mov edi, dword [esi + 0xe8]
cmp edi, ebx
je 0x4245a7
add dword [edi + 4], 0xffffffff
cmp dword [edi + 4], ebx
jne 0x4245a7
mov eax, dword [edi]
mov edx, dword [eax + 4]
mov ecx, edi
call edx
add dword [edi + 8], 0xffffffff
cmp dword [edi + 8], ebx
jne 0x4245a7
mov eax, dword [edi]
mov edx, dword [eax + 8]
mov ecx, edi
call edx
mov dword [esi + 0xe8], ebp
mov edi, dword [esp + 0x38]
cmp edi, ebx
mov byte [esp + 0x54], 8
je 0x4245de
add dword [edi + 4], 0xffffffff
lea eax, [edi + 4]
jne 0x4245de
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
add dword [edi + 8], 0xffffffff
cmp dword [edi + 8], ebx
jne 0x4245de
mov edx, dword [edi]
mov eax, dword [edx + 8]
mov ecx, edi
call eax
mov eax, dword [esi + 0xe4]
lea ecx, [esp + 0x34]
push 0x3e8
push ecx
mov dword [eax + 0x74], ebx
call fcn.0048a8f0
add esp, 8
mov edx, dword [eax]
mov dword [esi + 0xec], edx
mov ebp, dword [eax + 4]
cmp ebp, dword [esi + 0xf0]
mov byte [esp + 0x54], 0xb
je 0x42464d
cmp ebp, ebx
je 0x424619
add dword [ebp + 4], 1
mov edi, dword [esi + 0xf0]
cmp edi, ebx
je 0x424647
add dword [edi + 4], 0xffffffff
cmp dword [edi + 4], ebx
jne 0x424647
mov eax, dword [edi]
mov edx, dword [eax + 4]
mov ecx, edi
call edx
add dword [edi + 8], 0xffffffff
cmp dword [edi + 8], ebx
jne 0x424647
mov eax, dword [edi]
mov edx, dword [eax + 8]
mov ecx, edi
call edx
mov dword [esi + 0xf0], ebp
mov edi, dword [esp + 0x38]
cmp edi, ebx
mov byte [esp + 0x54], 8
je 0x42467e
add dword [edi + 4], 0xffffffff
lea eax, [edi + 4]
jne 0x42467e
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
add dword [edi + 8], 0xffffffff
cmp dword [edi + 8], ebx
jne 0x42467e
mov edx, dword [edi]
mov eax, dword [edx + 8]
mov ecx, edi
call eax
mov eax, dword [esi + 0xec]
mov dword [eax + 0x74], ebx
mov ecx, dword [esi + 0xdc]
push ebx
call fcn.004a5ee0
mov ecx, dword [esi + 0xe4]
push ebx
call fcn.004a5ee0
mov ecx, dword [esi + 0xec]
push ebx
call fcn.004a5ee0
mov edx, dword [esi + 0xdc]
sub esp, 8
mov ecx, esp
mov dword [ecx], edx
mov eax, dword [esi + 0xe0]
cmp eax, ebx
mov dword [esp + 0x20], esp
mov dword [ecx + 4], eax
mov edi, 1
je 0x4246d1
add dword [eax + 4], edi
mov byte [esp + 0x5c], 0xc
call fcn.00488e70
mov ecx, eax
mov byte [esp + 0x5c], 8
call fcn.004893c0
mov eax, dword [esi + 0xe4]
sub esp, 8
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [esi + 0xe8]
cmp eax, ebx
mov dword [esp + 0x20], esp
mov dword [ecx + 4], eax
je 0x424708
add dword [eax + 4], edi
mov byte [esp + 0x5c], 0xd
call fcn.00488e70
mov ecx, eax
mov byte [esp + 0x5c], 8
call fcn.004893c0
mov edx, dword [esi + 0xec]
sub esp, 8
mov ecx, esp
mov dword [ecx], edx
mov eax, dword [esi + 0xf0]
cmp eax, ebx
mov dword [esp + 0x20], esp
mov dword [ecx + 4], eax
je 0x42473f
add dword [eax + 4], edi
mov byte [esp + 0x5c], 0xe
call fcn.00488e70
mov ecx, eax
mov byte [esp + 0x5c], 8
call fcn.004893c0
call fcn.00488e70
lea ecx, [esp + 0x14]
mov byte [eax + 0x74], 1
call fcn.00496d90
push ecx
mov bl, 0xf
mov ecx, esp
mov byte [esp + 0x58], bl
mov dword [esp + 0x24], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov byte [esp + 0x5c], 0x10
mov dword [esp + 0x2c], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov byte [esp + 0x60], 0x11
mov dword [esp + 0x34], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov byte [esp + 0x64], 0x12
mov dword [esp + 0x3c], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov byte [esp + 0x68], 0x13
mov dword [esp + 0x44], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov dword [esp + 0x4c], esp
push str.need_1_seat
mov byte [esp + 0x70], 0x14
call fcn.00496da0
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x70], 0x15
call fcn.004988c0
mov ecx, eax
call fcn.004987f0
mov ecx, eax
mov byte [esp + 0x70], bl
call fcn.004aa000
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x58], 0x16
call fcn.00497360
lea ecx, [esp + 0x18]
mov byte [esp + 0x54], bl
call fcn.00497320
fldz
lea ecx, [esp + 0x3c]
fst dword [esp + 0x3c]
push ecx
fst dword [esp + 0x44]
push 0x14
fst dword [esp + 0x4c]
push str.fonts_vagrounded.mvec
fstp dword [esp + 0x54]
push 5
push 0xc8
push 0x12c
push ecx
mov ecx, esp
mov dword [esp + 0x50], esp
lea edx, [esp + 0x30]
push edx
call fcn.004971d0
call fcn.004b69a0
add esp, 0x18
mov ecx, esp
mov edi, eax
mov dword [esp + 0x38], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov byte [esp + 0x5c], 0x17
mov dword [esp + 0x38], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov byte [esp + 0x60], 0x18
mov dword [esp + 0x38], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov byte [esp + 0x64], 0x19
mov dword [esp + 0x38], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov byte [esp + 0x68], 0x1a
mov dword [esp + 0x38], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push str.need_2_seats
mov byte [esp + 0x70], 0x1b
call fcn.00496da0
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x70], 0x1c
call fcn.004988c0
mov ecx, eax
call fcn.004987f0
mov ecx, eax
mov byte [esp + 0x70], bl
call fcn.004aa000
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x58], 0x1d
call fcn.00497360
lea ecx, [esp + 0x18]
mov byte [esp + 0x54], bl
call fcn.00497320
fldz
lea ecx, [esp + 0x3c]
fst dword [esp + 0x3c]
push ecx
fst dword [esp + 0x44]
push 0x14
fst dword [esp + 0x4c]
push str.fonts_vagrounded.mvec
fstp dword [esp + 0x54]
push 5
push 0xc8
push 0x12c
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.004971d0
call fcn.004b69a0
add esp, 0x18
mov ebp, eax
mov dword [esp + 0x38], esp
mov ecx, esp
call fcn.00496d90
push ecx
mov ecx, esp
mov byte [esp + 0x5c], 0x1e
mov dword [esp + 0x38], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov byte [esp + 0x60], 0x1f
mov dword [esp + 0x38], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov byte [esp + 0x64], 0x20
mov dword [esp + 0x38], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov byte [esp + 0x68], 0x21
mov dword [esp + 0x38], esp
call fcn.00496d90
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push str.clear_dishes_sit
mov byte [esp + 0x70], 0x22
call fcn.00496da0
lea eax, [esp + 0x30]
push eax
mov byte [esp + 0x70], 0x23
call fcn.004988c0
mov ecx, eax
call fcn.004987f0
mov ecx, eax
mov byte [esp + 0x70], bl
call fcn.004aa000
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x58], 0x24
call fcn.00497360
lea ecx, [esp + 0x18]
mov byte [esp + 0x54], bl
call fcn.00497320
fldz
lea ecx, [esp + 0x3c]
fst dword [esp + 0x3c]
push ecx
fst dword [esp + 0x44]
push 0x14
fst dword [esp + 0x4c]
push str.fonts_vagrounded.mvec
fstp dword [esp + 0x54]
push 5
push 0xc8
push 0x12c
push ecx
lea edx, [esp + 0x30]
mov ecx, esp
mov dword [esp + 0x50], esp
push edx
call fcn.004971d0
call fcn.004b69a0
mov ecx, dword [esi + 0xdc]
mov dword [ecx + 0x84], edi
mov ecx, dword [esi + 0xe4]
mov dword [ecx + 0x84], ebp
mov ecx, dword [esi + 0xec]
mov dword [ecx + 0x84], eax
add esp, 0x1c
lea ecx, [esp + 0x14]
mov byte [esp + 0x54], 8
call fcn.00497320
mov eax, esi
mov ecx, dword [esp + 0x4c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x44
ret