Function at 0x56040c
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe4
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov ebx, ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
call fcn.004857f4
xor eax, eax
push ebp
push 0x560742
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 1
xor eax, eax
mov dword [ebp - 0x10], eax
xor ecx, ecx
push ebp
push 0x5606be
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov eax, dword [ebp - 8]
cmp byte [eax + 0x103], 0
je 0x5604db
mov dword [ebp - 0x14], 0xffffffff
mov eax, dword [ebp - 4]
cmp dword [eax + 8], 0
je 0x5604c9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
call fcn.004866c0
test eax, eax
jle 0x5604c9
mov eax, dword [ebp - 4]
mov eax, dword [eax + 8]
call fcn.004866c8
mov edi, eax
test edi, edi
jl 0x5604c9
inc edi
xor esi, esi
imul eax, esi, 0x35
mov edx, dword [ebp - 4]
mov edx, dword [edx + 8]
mov eax, dword [edx + eax + 0x28]
lea edx, [ebp - 0x18]
call fcn.00489820
mov eax, dword [ebp - 0x18]
push eax
lea edx, [ebp - 0x1c]
mov eax, dword [ebp + 8]
call fcn.00489820
mov edx, dword [ebp - 0x1c]
pop eax
call fcn.0048579c
jne 0x5604c5
mov dword [ebp - 0x14], esi
jmp 0x5604c9
inc esi
dec edi
jne 0x560491
imul eax, dword [ebp - 0x14], 0x35
mov edx, dword [ebp - 4]
mov edx, dword [edx + 8]
lea eax, [edx + eax]
mov dword [ebp - 0x10], eax
jmp 0x56052d
mov eax, dword [ebp - 4]
call fcn.0056016c
mov eax, dword [ebp - 4]
call fcn.005600d8
mov edx, eax
inc edx
mov eax, dword [ebp - 4]
call fcn.005600e4
mov eax, dword [ebp - 4]
call fcn.005600d8
imul eax, eax, 0x35
mov edx, dword [ebp - 4]
mov edx, dword [edx + 8]
lea eax, [edx + eax - 0x35]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add eax, 0x28
mov edx, dword [ebp + 8]
call fcn.004853b8
mov dl, 1
mov eax, dword [0x53ff08]
call fcn.00541644
mov edx, dword [ebp - 0x10]
mov dword [edx], eax
xor ecx, ecx
push ebp
push 0x5606ad
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov edx, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
xor edx, edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x10]
xor edx, edx
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 0x10]
xor edx, edx
mov dword [eax + 0x18], edx
mov dword [eax + 0x1c], 0x3ff00000
mov eax, dword [ebp - 0x10]
xor edx, edx
mov dword [eax + 0x20], edx
mov dword [eax + 0x24], 0x3ff00000
mov eax, dword [ebp - 0x10]
add eax, 0x10
push eax
mov eax, dword [ebp - 0x10]
add eax, 0x18
push eax
mov eax, dword [ebp - 0x10]
add eax, 0x20
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 8]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
call fcn.00560188
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov eax, dword [eax + 0x8c]
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x2c], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x30], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov edx, ebx
mov ecx, dword [eax]
call dword [ecx + 0x3c]
push ebx
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
xor ecx, ecx
xor edx, edx
call fcn.00542388
mov ecx, eax
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.00560368
mov esi, eax
mov eax, dword [ebp - 8]
cmp byte [eax + 0x103], 0
je 0x560604
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
call fcn.0055a530
jmp 0x560624
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
push eax
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov dl, 1
mov eax, dword [0x5505b0]
call fcn.0055974c
mov edx, dword [ebp - 0x10]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x97]
mov edx, esi
cmp ecx, edx
je 0x560650
mov dword [eax + 0x97], edx
cmp dword [eax + 0x15], 0
je 0x560650
cmp byte [eax + 0x96], 0
je 0x560650
call fcn.0055a674
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov edi, dword [eax + 0x15]
test edi, edi
je 0x560677
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
cmp byte [eax + 0xa5], 0
je 0x560677
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
call fcn.0055a530
mov edx, esi
mov eax, edi
call fcn.005552cc
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
cmp bl, byte [eax + 0x96]
je 0x56069f
mov byte [eax + 0x96], bl
cmp dword [eax + 0x15], 0
je 0x56069f
call fcn.0055a674
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x5606b4
ret