Function at 0x454000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x30
push ebx
push ebp
push esi
mov esi, dword [esp + 0x40]
push edi
xor edx, edx
mov edi, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
lea ebx, reloc.KERNEL32.dll_GetProcessHeap
mov dword [esp + 0x14], reloc.wtsapi32.dll_WTSVirtualChannelOpen
mov dword [esp + 0x10], edx
lea eax, [edi + 0x80]
mov dword [esp + 0x20], edx
mov dword [esp + 0x44], eax
mov dword [esp + 0x28], 5
mov dword [esp + 0x24], ebx
jmp 0x454049
mov edx, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov eax, dword [esi + 0xd0]
mov ecx, edx
shr ecx, 1
imul ecx, eax
push eax
imul eax, dword [esp + 0x54]
mov ebp, dword [esp + 0x50]
and edx, 1
add ecx, edx
mov edx, dword [esp + 0x4c]
add eax, ebp
mov ebp, dword [edx]
shl eax, 4
shl ecx, 3
add eax, ebp
add eax, ecx
push eax
mov eax, dword [esi + 0xb8]
add ecx, eax
push ecx
push edi
call dword [0x50bb38]
mov eax, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov ecx, dword [ebx + 0x1c]
mov edx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov ebp, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov dword [esp + 0x3c], eax
mov eax, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov dword [esp + 0x40], ecx
mov ecx, dword [ebx]
mov ebx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov dword [esp + 0x4c], edx
mov edx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov dword [esp + 0x28], eax
mov eax, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
push edi
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x48], edx
mov dword [esp + 0x30], eax
add ebx, 0x100
call dword [0x50bb00]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0x58]
add esp, 0x14
test ebp, ebp
push ecx
push edx
push edi
push eax
je 0x4540ff
call dword [0x50bb10]
jmp 0x454105
call dword [0x50bb24]
add esp, 0x10
test eax, eax
jle 0x4541c1
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x10]
mov edx, 1
shl edx, cl
mov ecx, dword [esp + 0x44]
or eax, edx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x34]
push eax
push ecx
call fcn.0043b220
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x4c]
shl eax, 4
add esp, 8
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x1c]
push edx
push eax
test ebp, ebp
push ecx
push ebx
je 0x45415a
call dword [0x50bb18]
jmp 0x454160
call dword [0x50bb1c]
mov eax, dword [esp + 0x3c]
add esp, 0x10
test eax, eax
je 0x4541bc
mov ebp, 0x8000
mov dword [esp + 0x1c], ebp
push edi
call dword [0x50bc74]
imul eax, dword [esp + 0x34]
mov edx, ebp
add esp, 4
imul edx, ebp
shl eax, 1
cmp edx, eax
jbe 0x454192
xor ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
shr eax, 1
mov dword [esp + 0x1c], eax
je 0x4541a2
or ebp, eax
jmp 0x454174
add ebp, 0x30
shr ebp, 6
push ebp
push ebx
push edi
call dword [0x50bc7c]
lea eax, [eax + eax*4]
add esp, 0xc
shr eax, 7
jmp 0x45421b
push 0x10
push ebx
jmp 0x454211
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x34], 0
test eax, eax
je 0x45420a
mov ebp, 0x8000
mov ebx, ebp
push edi
call dword [0x50bc74]
imul eax, dword [esp + 0x34]
mov ecx, ebx
add esp, 4
imul ecx, ebx
shl eax, 1
cmp ecx, eax
jbe 0x4541f4
xor ebx, ebp
shr ebp, 1
je 0x4541fc
or ebx, ebp
jmp 0x4541d8
add ebx, 0x30
shr ebx, 6
push ebx
push 0x485e7c
jmp 0x4541aa
push 0x10
push 0x485e7c
push edi
call dword [0x50bc54]
add esp, 0xc
imul eax, dword [esp + 0x38]
xor edx, edx
mov ebp, dword [esp + 0x34]
div dword [esp + 0x3c]
mov ecx, dword [esi + 0x10]
mov edx, eax
mov eax, dword [esp + 0x14]
add edx, ebp
add eax, edx
cmp eax, ecx
mov dword [esp + 0x14], eax
jge 0x454514
mov eax, dword [esp + 0x20]
mov ebx, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
inc eax
add ebx, 4
dec edx
cmp eax, 4
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], edx
jb 0x454041
mov eax, dword [esp + 0x10]
mov ecx, 0x4807ec
shr eax, 2
shl eax, 3
sub ecx, eax
mov eax, dword [esi + 0xd0]
shr eax, 1
push eax
imul eax, dword [esp + 0x54]
mov ebp, dword [esp + 0x18]
xor edx, edx
mov dl, byte [ecx]
mov ecx, dword [esp + 0x50]
sub edx, 2
add eax, ecx
mov ecx, dword [esp + 0x4c]
shl edx, 4
add ebp, edx
mov edx, dword [ecx + 4]
mov ecx, dword [esi + 0xbc]
mov dword [esp + 0x18], ebp
lea eax, [edx + eax*8]
push eax
push ecx
push edi
call dword [0x50bb38]
mov edx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov eax, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov ecx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov ebx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov ebp, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov dword [esp + 0x44], edx
mov edx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov dword [esp + 0x40], eax
mov eax, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov dword [esp + 0x38], ecx
mov ecx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov dword [esp + 0x2c], edx
mov edx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
push edi
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], ecx
mov dword [esp + 0x2c], edx
add ebx, 0x100
call dword [0x50bb00]
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x58]
add esp, 0x14
test ebp, ebp
push eax
push ecx
push edi
push edx
je 0x454339
call dword [0x50bb10]
jmp 0x45433f
call dword [0x50bb24]
add esp, 0x10
test eax, eax
jle 0x4543f1
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x44]
or edx, 2
push eax
push ecx
mov dword [esp + 0x18], edx
call fcn.0043b220
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x4c]
shl eax, 4
add esp, 8
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x18]
push edx
push eax
test ebp, ebp
push ecx
push ebx
je 0x45438a
call dword [0x50bb18]
jmp 0x454390
call dword [0x50bb1c]
mov eax, dword [esp + 0x44]
add esp, 0x10
test eax, eax
je 0x4543ec
mov ebp, 0x8000
mov dword [esp + 0x1c], ebp
push edi
call dword [0x50bc74]
imul eax, dword [esp + 0x34]
mov edx, ebp
add esp, 4
imul edx, ebp
shl eax, 1
cmp edx, eax
jbe 0x4543c2
xor ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
shr eax, 1
mov dword [esp + 0x1c], eax
je 0x4543d2
or ebp, eax
jmp 0x4543a4
add ebp, 0x30
shr ebp, 6
push ebp
push ebx
push edi
call dword [0x50bc7c]
lea eax, [eax + eax*4]
add esp, 0xc
shr eax, 7
jmp 0x454444
push 0x10
push ebx
jmp 0x45443a
mov eax, dword [esp + 0x34]
mov dword [esp + 0x2c], 0
test eax, eax
je 0x454433
push edi
call dword [0x50bc74]
imul eax, dword [esp + 0x34]
shl eax, 1
push eax
call fcn.00456680
add eax, 0x30
shr eax, 6
push eax
push 0x485e7c
push edi
call dword [0x50bc7c]
lea eax, [eax + eax*4]
add esp, 0x14
shr eax, 7
jmp 0x454444
push 0x10
push 0x485e7c
push edi
call dword [0x50bc54]
add esp, 0xc
imul eax, dword [esp + 0x38]
xor edx, edx
mov ebx, dword [esp + 0x14]
div dword [esp + 0x28]
add eax, dword [esp + 0x2c]
add ebx, eax
mov eax, dword [esi + 0x10]
cmp ebx, eax
jl 0x45446a
pop edi
pop esi
mov eax, ebx
pop ebp
pop ebx
add esp, 0x30
ret
mov eax, dword [esi + 0xd0]
mov edx, dword [esp + 0x4c]
shr eax, 1
push eax
imul eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x4c]
add eax, edx
mov edx, dword [ecx + 8]
mov ecx, dword [esi + 0xc0]
lea eax, [edx + eax*8]
push eax
push ecx
push edi
call dword [0x50bb38]
mov edx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov eax, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
mov ecx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
push edx
mov edx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
push eax
mov eax, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
push ecx
mov ecx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
push edx
push eax
mov eax, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
push ecx
mov ecx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
lea edx, [esp + 0x38]
push 5
push edx
mov edx, dword [esi + reloc.KERNEL32.dll_GetProcessHeap]
push eax
mov eax, dword [esp + 0x78]
add edx, 0x100
push ecx
push edx
push edi
push eax
call fcn.00454520
mov ecx, dword [esp + 0x54]
add ebx, eax
mov edx, ecx
xor eax, eax
and edx, 3
add esp, 0x44
shl edx, 6
mov al, byte [edx + 0x48d964]
mov dword [esi + reloc.KERNEL32.dll_GetProcessHeap], ecx
shl eax, 4
lea eax, [ebx + eax - 0x10]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret