Function at 0x460350
Capabilities:
Get process heap flags
Get process heap force flags

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x580a34
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
sub esp, 0x428
push ebx
push esi
push edi
mov dword [ebp - 4], 0
xorps xmm0, xmm0
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x20], 0
push 0x20
mov dword [ebp - 0x6c], ecx
movups xmmword [ebp - 0x114], xmm0
call fcn.00550cf4
movups xmm0, xmmword [str.cldE1bhMnKNAoTpIyU]
add esp, 4
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x104], 0x13
movups xmmword [eax], xmm0
mov cx, word [0x5a1bcc]
mov word [eax + 0x10], cx
mov cl, byte [0x5a1bce]
mov byte [eax + 0x12], cl
mov dword [ebp - 0x100], 0x1f
mov byte [eax + 0x13], 0
mov dword [ebp - 4], 1
xorps xmm0, xmm0
mov eax, dword [0x5a1bd8]
movups xmmword [ebp - 0xb4], xmm0
mov dword [ebp - 0xac], eax
movq xmm0, qword [str.WlJt1ei43OAAo]
movzx eax, word [0x5a1bdc]
mov dword [ebp - 0xa4], 0xe
mov dword [ebp - 0xa0], 0xf
movq qword [ebp - 0xb4], xmm0
mov word [ebp - 0xa8], ax
mov byte [ebp - 0xa6], 0
xorps xmm0, xmm0
mov byte [ebp - 4], 2
push 0x40
movups xmmword [ebp - 0xfc], xmm0
call fcn.00550cf4
movups xmm0, xmmword [str.OG1W0RmQgwOTxRhATonDZCs_cNF0L0OT5knPSQpFXgQ6BI0sx]
mov ecx, eax
mov dword [ebp - 0xec], 0x31
add esp, 4
mov dword [ebp - 0xfc], ecx
mov dword [ebp - 0xe8], 0x3f
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x5a1bf0]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x5a1c00]
movups xmmword [ecx + 0x20], xmm0
movzx eax, byte [0x5a1c10]
mov byte [ecx + 0x30], al
mov byte [ecx + 0x31], 0
xorps xmm0, xmm0
mov byte [ebp - 4], 3
push 0x30
movups xmmword [ebp - 0xe4], xmm0
call fcn.00550cf4
movups xmm0, xmmword [str.R1Va1dhsdRCDIVlCioadJjY_KBWkmFKxouhIT8]
mov edx, eax
mov dword [ebp - 0xd4], 0x27
add esp, 4
mov dword [ebp - 0xe4], edx
mov dword [ebp - 0xd0], 0x2f
movups xmmword [edx], xmm0
movups xmm0, xmmword [0x5a1c24]
movups xmmword [edx + 0x10], xmm0
mov ecx, dword [0x5a1c34]
mov dword [edx + 0x20], ecx
movzx eax, word [0x5a1c38]
mov word [edx + 0x24], ax
movzx eax, byte [0x5a1c3a]
mov byte [edx + 0x26], al
mov byte [edx + 0x27], 0
xorps xmm0, xmm0
mov byte [ebp - 4], 4
movups xmmword [ebp - 0xcc], xmm0
push 0x20
call fcn.00550cf4
movups xmm0, xmmword [str.dkh2yMio4sGlMVuLQUcyBTka8WwIt]
mov edx, eax
mov dword [ebp - 0xbc], 0x1d
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0xb8], 0x1f
movups xmmword [edx], xmm0
movq xmm0, qword [0x5a1c4c]
movq qword [edx + 0x10], xmm0
mov ecx, dword [0x5a1c54]
mov dword [edx + 0x18], ecx
movzx eax, byte [0x5a1c58]
mov byte [edx + 0x1c], al
mov byte [edx + 0x1d], 0
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 5
call fcn.00464640
sub esp, 0x18
mov byte [ebp - 4], 6
lea eax, [ebp - 0xfc]
mov ecx, esp
push eax
call fcn.0042e7e0
lea ecx, [ebp - 0x9c]
call fcn.00446a30
mov esi, eax
lea eax, [ebp - 0x114]
mov byte [ebp - 4], 7
mov ecx, esp
push eax
call fcn.0042e7e0
lea ecx, [ebp - 0x44]
call fcn.00446a30
add esp, 0x18
mov byte [ebp - 4], 8
cmp dword [eax + 0x14], 0x10
jb 0x4605c5
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00561b9a
mov edx, dword [ebp - 0x1c]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0x4c], 0
add esp, 0xc
mov dword [ebp - 0x48], 0
movups xmmword [ebp - 0x5c], xmm0
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4605f3
sub ecx, edi
push ecx
push edx
lea ecx, [ebp - 0x5c]
call fcn.0042ebd0
mov dword [ebp - 0x20], 0x100
mov byte [ebp - 4], 9
lea edx, [ebp - 0x5c]
cmp dword [ebp - 0x48], 0x10
lea ecx, [ebp - 0x1d8]
push dword [ebp - 0x4c]
cmovae edx, dword [ebp - 0x5c]
call fcn.00463080
mov ecx, dword [esi + 0x10]
add esp, 4
cmp dword [esi + 0x14], 0x10
jb 0x460638
mov esi, dword [esi]
push ecx
mov edx, esi
mov ecx, eax
call fcn.00463080
mov byte [ebp - 4], 8
add esp, 4
mov ecx, dword [ebp - 0x48]
cmp ecx, 0x10
jb 0x46067d
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x460673
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x461080
push ecx
push edx
call fcn.00550d24
add esp, 8
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
cmp ecx, 0x10
jb 0x4606c7
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4606bd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x461080
push ecx
push edx
call fcn.00550d24
add esp, 8
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp ecx, 0x10
jb 0x460717
mov edx, dword [ebp - 0x9c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46070d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x461080
push ecx
push edx
call fcn.00550d24
add esp, 8
mov eax, dword [ebx + 8]
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], 0
lea eax, [ebp - 0x44]
mov dword [ebp - 0x20], 0x101
push eax
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0xa
call fcn.00443710
cmp dword [ebp - 0x30], 0x10
lea esi, [ebp - 0x44]
mov edi, dword [ebp - 0x34]
lea eax, [ebp - 0x5c]
cmovae esi, dword [ebp - 0x44]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], esi
call fcn.0053e0ce
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0xc
xorps xmm0, xmm0
xor ecx, ecx
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x20], 0x1301
movups xmmword [ebp - 0x5c], xmm0
mov word [ebp - 0x5c], cx
test edi, edi
je 0x46080a
cmp edi, 0x7fffffff
ja 0x461085
push ecx
push ecx
push edi
push esi
push eax
call fcn.0053e0eb
mov esi, eax
mov dword [ebp - 0x84], esi
test edx, edx
jne 0x46108a
mov ecx, dword [ebp - 0x4c]
cmp esi, ecx
ja 0x4607d4
cmp dword [ebp - 0x48], 8
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x4c], esi
cmovae eax, dword [ebp - 0x5c]
xor ecx, ecx
mov word [eax + esi*2], cx
jmp 0x4607e3
mov eax, esi
sub eax, ecx
lea ecx, [ebp - 0x5c]
push 0
push eax
call fcn.00441850
cmp dword [ebp - 0x48], 8
lea eax, [ebp - 0x5c]
push esi
cmovae eax, dword [ebp - 0x5c]
push eax
push edi
push dword [ebp - 0x1c]
push dword [ebp - 0x28]
call fcn.0053e0eb
mov dword [ebp - 0x84], eax
test edx, edx
jne 0x461091
mov esi, 0xf01
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x20], esi
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x7c]
call fcn.00464270
lea ecx, [ebp - 0x5c]
call fcn.00430800
mov byte [ebp - 4], 0x10
mov ecx, dword [ebp - 0x30]
cmp ecx, 0x10
jb 0x460869
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46085f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x461098
push ecx
push edx
call fcn.00550d24
add esp, 8
mov ecx, dword [ebp - 0x78]
test ecx, ecx
je 0x460874
lock inc dword [ecx + 4]
mov edi, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x78]
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], ecx
test ecx, ecx
je 0x460888
lock inc dword [ecx + 4]
mov ecx, dword [ebp - 0x78]
xorps xmm0, xmm0
movlpd qword [ebp - 0x84], xmm0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x1c], ecx
test ecx, ecx
je 0x4608ce
or eax, 0xffffffff
lock xadd dword [ecx + 4], eax
jne 0x4608ce
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x1c]
or eax, 0xffffffff
lock xadd dword [ecx + 8], eax
jne 0x4608ce
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0x12
test edi, edi
je 0x460de8
push ecx
lea ecx, [ebp - 0x298]
call fcn.00464640
sub esp, 0x18
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0xcc]
mov ecx, esp
push eax
call fcn.0042e7e0
lea ecx, [ebp - 0x9c]
call fcn.00446a30
add esp, 0x18
mov dword [ebp - 0x68], eax
cmp dword [edi + 0x34], 8
lea eax, [edi + 0x20]
mov dword [ebp - 0x60], eax
jb 0x46091d
mov ecx, dword [eax]
mov dword [ebp - 0x60], ecx
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x24], eax
call fcn.0053e0ce
mov edx, eax
mov dword [ebp - 0x28], edx
mov byte [ebp - 4], 0x15
xor ecx, ecx
mov eax, dword [ebp - 0x24]
xorps xmm0, xmm0
or esi, 0x10
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], 0xf
mov dword [ebp - 0x20], esi
movups xmmword [ebp - 0x44], xmm0
mov byte [ebp - 0x44], cl
test eax, eax
je 0x4609cc
cmp eax, 0x7fffffff
ja 0x46109d
push ecx
push ecx
push eax
push dword [ebp - 0x60]
push edx
call fcn.0053e11f
mov ecx, eax
mov dword [ebp - 0x1c], ecx
test edx, edx
jne 0x4610a2
mov edx, dword [ebp - 0x34]
cmp ecx, edx
ja 0x460993
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
mov dword [ebp - 0x34], ecx
cmovae eax, dword [ebp - 0x44]
mov byte [ecx + eax], 0
jmp 0x4609a5
mov eax, ecx
lea ecx, [ebp - 0x44]
push 0
sub eax, edx
push eax
call fcn.00428c10
mov ecx, dword [ebp - 0x1c]
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
push ecx
cmovae eax, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x24]
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x28]
call fcn.0053e11f
test edx, edx
jne 0x4610a9
mov ecx, dword [ebp - 0x34]
and esi, 0xffffffef
mov dword [ebp - 4], 0x14
or esi, 0xe
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0x16
lea edx, [ebp - 0x44]
cmp dword [ebp - 0x30], 0x10
push ecx
cmovae edx, dword [ebp - 0x44]
lea ecx, [ebp - 0x288]
call fcn.00463080
mov ecx, eax
add esp, 4
mov eax, dword [ebp - 0x68]
cmp dword [eax + 0x14], 0x10
mov edx, dword [eax + 0x10]
jb 0x460a0a
mov eax, dword [eax]
push edx
mov edx, eax
call fcn.00463080
mov byte [ebp - 4], 0x14
add esp, 4
mov ecx, dword [ebp - 0x30]
cmp ecx, 0x10
jb 0x460a4d
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x460a43
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4610b0
push ecx
push edx
call fcn.00550d24
add esp, 8
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp ecx, 0x10
jb 0x460a9d
mov edx, dword [ebp - 0x9c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x460a93
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4610b0
push ecx
push edx
call fcn.00550d24
add esp, 8
sub esp, 0x18
lea eax, [ebp - 0xe4]
mov ecx, esp
push eax
call fcn.0042e7e0
lea ecx, [ebp - 0x9c]
call fcn.00446a30
add esp, 0x18
mov dword [ebp - 0x28], eax
sub esp, 0x18
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0xb4]
mov ecx, esp
push eax
call fcn.0042e7e0
lea ecx, [ebp - 0x134]
call fcn.00446a30
add esp, 0x18
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x14], 0x10
jb 0x460aee
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00561b9a
mov edx, dword [ebp - 0x2c]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0x34], 0
add esp, 0xc
mov dword [ebp - 0x30], 0
movups xmmword [ebp - 0x44], xmm0
lea eax, [ecx + 1]
mov dword [ebp - 0x1c], eax
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x460b20
sub ecx, dword [ebp - 0x1c]
push ecx
push edx
lea ecx, [ebp - 0x44]
call fcn.0042ebd0
or esi, 0x20
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x44]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x5c]
push eax
push dword [ebp - 0x64]
call fcn.0042b310
or esi, 0x40
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x30]
cmp ecx, 0x10
jb 0x460b8e
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x460b84
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4610b5
push ecx
push edx
call fcn.00550d24
add esp, 8
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x120]
cmp ecx, 0x10
jb 0x460bcc
mov edx, dword [ebp - 0x134]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x460bc2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4610b5
push ecx
push edx
call fcn.00550d24
add esp, 8
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x88]
cmp ecx, 0x10
jb 0x460c25
mov edx, dword [ebp - 0x9c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x460c1b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4610b5
push ecx
push edx
call fcn.00550d24
add esp, 8
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x8c], 0
cmovae eax, dword [ebp - 0x5c]
push eax
mov dword [ebp - 0x88], 0xf
mov byte [ebp - 0x9c], 0
call fcn.00561c9d
add esp, 4
lea eax, [ebp - 0x5c]
cmp dword [ebp - 0x48], 0x10
lea ecx, [ebp - 0x280]
cmovae eax, dword [ebp - 0x5c]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x44]
push eax
call fcn.00443710
or esi, 0x80
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x44]
cmp dword [ebp - 0x30], 0x10
mov edx, dword [ebp - 0x1c]
cmovae ecx, dword [ebp - 0x44]
call fcn.0045f990
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x30]
cmp ecx, 0x10
jb 0x460cc9
mov edx, dword [ebp - 0x44]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x460cbf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4610ba
push ecx
push edx
call fcn.00550d24
add esp, 8
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
mov ecx, dword [ebp - 0x6c]
cmovae eax, dword [ebp - 0x5c]
push eax
push dword [ebx + 8]
call fcn.0045fd60
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.00561c9d
mov byte [ebp - 4], 0x13
add esp, 4
mov ecx, dword [ebp - 0x48]
cmp ecx, 0x10
jb 0x460d2c
mov edx, dword [ebp - 0x5c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x460d22
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4610bf
push ecx
push edx
call fcn.00550d24
add esp, 8
lea ecx, [ebp - 0x298]
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov byte [ebp - 4], 0x12
call fcn.00464430
nop dword [eax]
lea eax, [ebp - 0x438]
push eax
push dword [edi + 0x38]
call fcn.0053e241
cmp eax, 0x12
je 0x460da5
test eax, eax
jne 0x4610c4
cmp word [ebp - 0x40c], 0x2e
jne 0x460d92
mov ax, word [ebp - 0x40a]
test ax, ax
je 0x460d50
cmp ax, 0x2e
jne 0x460d92
cmp word [ebp - 0x408], 0
je 0x460d50
lea eax, [ebp - 0x438]
mov ecx, edi
push eax
call fcn.004639c0
jmp 0x4608d2
mov edi, dword [ebp - 0x70]
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
test edi, edi
je 0x460dd1
or eax, 0xffffffff
lock xadd dword [edi + 4], eax
jne 0x460dd1
mov eax, dword [edi]
mov ecx, edi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [edi + 8], eax
je 0x460dd9
mov edi, dword [ebp - 0x24]
jmp 0x4608d2
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov edi, dword [ebp - 0x24]
jmp 0x4608d2
mov esi, dword [ebp - 0x70]
or edi, 0xffffffff
test esi, esi
je 0x460e11
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x460e11
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
mov eax, edi
lock xadd dword [esi + 8], eax
jne 0x460e11
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov esi, dword [ebp - 0x78]
test esi, esi
je 0x460f3e
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x460f3e
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x460f3e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
jmp 0x460f3e
lea ecx, [ebp - 0x1e8]
call fcn.00464430
mov ecx, dword [ebp - 0xb8]
cmp ecx, 0x10
jb 0x460f83
mov edx, dword [ebp - 0xcc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x460f79
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4610cb
push ecx
push edx
call fcn.00550d24
add esp, 8
mov ecx, dword [ebp - 0xd0]
cmp ecx, 0x10
jb 0x460fbd
mov edx, dword [ebp - 0xe4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x460fb3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4610cb
push ecx
push edx
call fcn.00550d24
add esp, 8
mov ecx, dword [ebp - 0xe8]
cmp ecx, 0x10
jb 0x460ff7
mov edx, dword [ebp - 0xfc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x460fed
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4610cb
push ecx
push edx
call fcn.00550d24
add esp, 8
mov ecx, dword [ebp - 0xa0]
cmp ecx, 0x10
jb 0x461031
mov edx, dword [ebp - 0xb4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x461027
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4610cb
push ecx
push edx
call fcn.00550d24
add esp, 8
mov ecx, dword [ebp - 0x100]
cmp ecx, 0x10
jb 0x461067
mov edx, dword [ebp - 0x114]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46105d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4610cb
push ecx
push edx
call fcn.00550d24
add esp, 8
mov eax, dword [ebx + 8]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call fcn.00555bff
call fcn.00463b30
mov ecx, edx
call fcn.00463c10
mov ecx, edx
call fcn.00463c10
call fcn.00555bff
call fcn.00463b30
mov ecx, edx
call fcn.00463c10
mov ecx, edx
call fcn.00463c10
call fcn.00555bff
call fcn.00555bff
call fcn.00555bff
call fcn.00555bff
mov edx, eax
call fcn.0045f6c0
call fcn.00555bff
int3