Function at 0x455ef0
Capabilities:
Get process heap flags

Disassembly:
push ebp
lea ebp, [esp - 0xdc]
sub esp, 0xdc
push 0xffffffffffffffff
push 0x686cd2
mov eax, dword fs:[0]
push eax
sub esp, 0x30
mov eax, dword [0x729140]
xor eax, ebp
mov dword [ebp + 0xd8], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0xe4]
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp + 0xe8]
push 4
mov dword [ebp - 0x38], eax
call fcn.00407a60
lea eax, [edi + 0x110]
push eax
lea ecx, [ebp - 0x1c]
call fcn.0042ab70
mov dword [ebp - 4], 0
lea esi, [edi + 0x40]
push esi
lea ecx, [ebp + 4]
call fcn.00414330
mov byte [ebp - 4], 1
lea eax, [esi + 0x18]
push eax
lea ecx, [ebp + 0x1c]
call fcn.00414330
mov byte [ebp - 4], 2
lea eax, [esi + 0x30]
push eax
lea ecx, [ebp + 0x34]
call fcn.00414330
mov byte [ebp - 4], 3
lea eax, [esi + 0x48]
push eax
lea ecx, [ebp + 0x4c]
call fcn.00414330
mov byte [ebp - 4], 4
lea eax, [esi + 0x60]
push eax
lea ecx, [ebp + 0x64]
call fcn.0041eca0
mov byte [ebp - 4], 5
mov eax, dword [esi + 0x78]
mov dword [ebp + 0x7c], eax
mov eax, dword [esi + 0x7c]
mov dword [ebp + 0x80], eax
mov al, byte [esi + 0x80]
mov byte [ebp + 0x84], al
mov byte [ebp - 4], 6
lea eax, [edi + 0xc8]
xorps xmm0, xmm0
mov dword [ebp + 0xd0], 0
push eax
lea ecx, [ebp + 0xc8]
movq qword [ebp + 0xc8], xmm0
call fcn.004517b0
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [edi + 0x140]
mov edx, dword [edi + 0x144]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x28], edx
test eax, eax
je 0x45602a
mov eax, dword [eax]
test eax, eax
je 0x456023
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], 0
mov eax, 1
cmp edx, eax
cmovb edx, eax
mov dword [ebp - 0x28], edx
cmp ecx, 0xbb8
jae 0x456048
mov dword [ebp - 0x18], 0xbb8
jmp 0x456055
mov eax, 0x927c0
cmp ecx, eax
cmova ecx, eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x24], 0
test edx, edx
je 0x4562ba
nop dword [eax]
nop dword [eax + eax]
cmp byte [edi + 0x114], 0
jne 0x4562ba
lea ecx, [ebp + 0x8c]
mov byte [ebp - 0xd], 0
call fcn.004058d0
mov byte [ebp - 4], 8
mov dword [ebp + 0xa4], 0
mov dword [ebp + 0xa8], 0
mov dword [ebp + 0xac], 0
mov byte [ebp - 4], 9
mov dword [ebp + 0xb0], 0
mov dword [ebp + 0xb4], 0
mov dword [ebp + 0xb8], 0
mov byte [ebp - 4], 0xa
mov dword [ebp + 0xbc], 0
mov dword [ebp + 0xc0], 0
mov dword [ebp + 0xc4], 0
mov byte [ebp - 4], 0xc
lea ebx, [edi + 8]
mov dword [ebp], ebx
lea esi, [edi + 0x194]
test ebx, ebx
je 0x4561cb
push 4
lea ecx, [ebp - 0x2c]
call fcn.00407a60
push esi
lea ecx, [ebp - 0x2c]
call fcn.0042ab70
mov byte [ebp - 4], 0xd
lea eax, [ebp]
push eax
lea eax, [ebp + 0xd4]
mov dword [ebp + 0xd4], 0
push eax
lea ecx, [esi + 0xc]
call fcn.00457410
mov eax, dword [ebp + 0xd4]
cmp eax, dword [esi + 0xc]
je 0x45614f
mov byte [eax + 0x14], 0
jmp 0x4561b9
mov esi, dword [edi + 0x198]
mov eax, dword [esi + 4]
cmp byte [eax + 0xd], 0
jne 0x456182
mov ecx, dword [ebp]
cmp dword [eax + 0x10], ecx
jae 0x45616b
mov eax, dword [eax + 8]
jmp 0x45616f
mov esi, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x456161
cmp esi, dword [edi + 0x198]
je 0x456182
cmp ecx, dword [esi + 0x10]
jae 0x4561b5
lea eax, [ebp]
mov byte [ebp - 0x1d], 1
push ecx
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push ecx
lea ecx, [edi + 0x198]
call fcn.00458870
push eax
add eax, 0x10
lea ecx, [edi + 0x198]
push eax
push esi
lea eax, [ebp - 0x34]
push eax
call fcn.00458900
mov esi, dword [ebp - 0x34]
mov byte [esi + 0x14], 0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2c]
call fcn.0042aba0
lea esi, [edi + 0x194]
lea eax, [ebp - 0xd]
push eax
push dword [ebp - 0x38]
lea eax, [ebp + 0x8c]
push eax
lea eax, [ebp + 0xc8]
push eax
lea eax, [ebp + 4]
push eax
push ebx
call fcn.00467cc0
mov bl, al
mov ecx, esi
lea eax, [edi + 8]
push eax
call fcn.00456e30
cmp byte [edi + 0x114], 0
jne 0x456396
push 4
lea ecx, [ebp - 0x14]
call fcn.00407a60
lea eax, [edi + 0x110]
push eax
lea ecx, [ebp - 0x14]
call fcn.0042ab70
mov byte [ebp - 4], 0xe
test bl, bl
jne 0x456377
cmp byte [ebp - 0xd], bl
jne 0x45632a
mov eax, dword [edi + 0x34]
cmp eax, 0x2efd
je 0x45627b
cmp eax, 0x2efe
je 0x45627b
cmp eax, 0x2eff
je 0x45627b
cmp eax, 0x2ee7
je 0x45627b
cmp eax, 0x2ee2
je 0x45627b
cmp eax, 0x2ee6
je 0x45627b
cmp dword [ebp - 0x24], 3
jae 0x45630d
push 0x7d0
lea ecx, [edi + 0x120]
call fcn.004d81c0
jmp 0x45628f
mov eax, dword [edi + 0x120]
test eax, eax
je 0x45628f
push dword [ebp - 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x14]
call fcn.0042aba0
mov byte [ebp - 4], 7
lea ecx, [ebp + 0x8c]
call fcn.00455130
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, dword [ebp - 0x28]
jb 0x456070
xor bl, bl
mov byte [ebp - 4], 6
lea ecx, [ebp + 0xc8]
call fcn.00442b80
mov byte [ebp - 4], 0
lea ecx, [ebp + 4]
call fcn.0042bf40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.0042aba0
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xd8]
xor ecx, ebp
call fcn.00634bf3
lea esp, [ebp + 0xdc]
pop ebp
ret 8
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x14]
call fcn.0042aba0
mov byte [ebp - 4], 7
lea ecx, [ebp + 0x8c]
call fcn.00455130
jmp 0x4562ba
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x14]
call fcn.0042aba0
mov byte [ebp - 4], 0x15
lea ecx, [ebp + 0xbc]
call fcn.00456ac0
mov byte [ebp - 4], 0x14
lea ecx, [ebp + 0xb0]
call fcn.00456b40
mov byte [ebp - 4], 0x13
lea ecx, [ebp + 0xa4]
call fcn.00442b80
mov byte [ebp - 4], 7
lea ecx, [ebp + 0x8c]
call fcn.00405870
jmp 0x4562ba
mov ecx, dword [ebp - 0x3c]
lea eax, [ebp + 0x8c]
push eax
call fcn.00455e60
mov bl, 1
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x14]
call fcn.0042aba0
jmp 0x456398
xor bl, bl
mov byte [ebp - 4], 0x11
lea ecx, [ebp + 0xbc]
call fcn.00456ac0
mov byte [ebp - 4], 0x10
lea ecx, [ebp + 0xb0]
call fcn.00456b40
mov byte [ebp - 4], 0xf
lea ecx, [ebp + 0xa4]
call fcn.00442b80
mov byte [ebp - 4], 7
lea ecx, [ebp + 0x8c]
call fcn.00405870
jmp 0x4562bc