Function at 0x467360
Capabilities:
Access peb ldr_data
Get kernel32 base address
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47b335
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x14], esi
mov dword [esi], 0x480b28
mov dword [ebp - 4], 8
call fcn.0046ad50
mov ecx, esi
call fcn.00468680
mov ecx, esi
call fcn.004686b0
mov ecx, esi
call fcn.00468740
mov ecx, esi
call fcn.00468820
lea ebx, [esi + 0x100]
mov dword [ebp - 0x18], ebx
mov eax, dword [ebx + 4]
mov edi, dword [ebx]
cmp edi, eax
mov byte [ebp - 4], 9
mov dword [ebp - 0x10], eax
je 0x4673db
mov ecx, edi
call fcn.0040c850
mov eax, dword [ebp - 0x10]
add edi, 0xc
cmp edi, eax
jne 0x4673ca
mov ecx, dword [ebx]
mov ebx, dword [ebx + 8]
sub ebx, ecx
mov eax, 0x2aaaaaab
imul ebx
sar edx, 1
mov eax, edx
mov byte [ebp - 4], 7
shr eax, 0x1f
add edx, eax
je 0x467408
lea edx, [edx + edx*2]
shl edx, 2
push edx
push ecx
call fcn.00405c50
add esp, 8
mov ecx, dword [esi + 0xf4]
mov eax, dword [esi + 0xfc]
sub eax, ecx
mov byte [ebp - 4], 6
sar eax, 2
mov dword [ebp - 0x18], ecx
je 0x46742f
shl eax, 2
push eax
push ecx
call fcn.00405c50
add esp, 8
mov ecx, dword [esi + 0xe8]
mov eax, dword [esi + 0xf0]
sub eax, ecx
mov byte [ebp - 4], 5
sar eax, 2
mov dword [ebp - 0x18], ecx
je 0x46745a
lea edx, [eax*4]
push edx
push ecx
call fcn.00405c50
add esp, 8
mov eax, dword [esi + 0xe0]
test eax, eax
je 0x46746d
push eax
call fcn.0046f73b
add esp, 4
mov ecx, dword [esi + 0xc4]
mov eax, dword [esi + 0xcc]
sub eax, ecx
mov byte [ebp - 4], 3
sar eax, 2
mov dword [ebp - 0x18], ecx
je 0x467494
shl eax, 2
push eax
push ecx
call fcn.00405c50
add esp, 8
lea edi, [esi + 0x84]
mov dword [ebp - 0x18], edi
mov ecx, dword [edi + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x10], esp
sub esp, 0x10
mov byte [ebp - 4], 0xa
mov dword [eax], ecx
mov edx, dword [edi + 0x1c]
mov dword [eax + 4], edx
mov ecx, dword [edi + 0x20]
mov dword [eax + 8], ecx
mov edx, dword [edi + 0x24]
mov dword [eax + 0xc], edx
lea eax, [edi + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00412460
call fcn.004136f0
add esp, 0x20
mov ecx, edi
mov byte [ebp - 4], 2
call fcn.00469550
lea edi, [esi + 0x58]
mov dword [ebp - 0x18], edi
mov ecx, dword [edi + 0x18]
sub esp, 0x10
mov eax, esp
mov dword [ebp - 0x10], esp
sub esp, 0x10
mov byte [ebp - 4], 0xb
mov dword [eax], ecx
mov edx, dword [edi + 0x1c]
mov dword [eax + 4], edx
mov ecx, dword [edi + 0x20]
mov dword [eax + 8], ecx
mov edx, dword [edi + 0x24]
mov dword [eax + 0xc], edx
lea eax, [edi + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00412460
call fcn.004136f0
add esp, 0x20
mov ecx, edi
mov byte [ebp - 4], 1
call fcn.00469550
lea edi, [esi + 0x30]
mov dword [ebp - 0x18], edi
sub esp, 0x10
lea edx, [edi + 0x18]
mov ecx, esp
mov dword [ebp - 0x10], esp
push edx
mov byte [ebp - 4], 0xc
call fcn.00412460
sub esp, 0x10
lea eax, [edi + 8]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.00412460
call fcn.004136f0
add esp, 0x20
mov ecx, edi
mov byte [ebp - 4], 0
call fcn.00469550
lea ecx, [esi + 4]
mov dword [ebp - 4], 0xffffffff
call fcn.00469160
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret