Function at 0x561430
Capabilities:
Access peb ldr_data
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a9e18
mov eax, dword fs:[0]
push eax
sub esp, 0x7c
mov eax, dword [0x6340c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x84], ebx
lea esi, [ebx + 8]
mov dword [ebx], vtable.ResourceManager.0
push 0x18
mov dword [ebp - 0x48], esi
mov dword [esi], 0
mov dword [esi + 4], 0
call fcn.00446660
mov edi, eax
lea edx, [ebp - 0x2c]
add esp, 4
mov dword [ebp - 0x2c], edi
mov ecx, edi
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
mov word [edi + 0xc], 0x101
mov dword [esi], edi
add ebx, 0x10
mov dword [ebp - 4], 0
push 0x18
mov dword [ebp - 0x48], ebx
mov dword [ebx], 0
mov dword [ebx + 4], 0
call fcn.00446660
mov edi, eax
lea edx, [ebp - 0x2c]
add esp, 4
mov dword [ebp - 0x2c], edi
mov ecx, edi
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
mov word [edi + 0xc], 0x101
mov dword [ebx], edi
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x54]
add eax, 0x18
push 0x18
mov dword [ebp - 0x48], eax
mov dword [eax], 0
mov dword [eax + 4], 0
call fcn.00446660
mov edi, eax
lea edx, [ebp - 0x2c]
add esp, 4
mov dword [ebp - 0x2c], edi
mov ecx, edi
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
mov eax, dword [ebp - 0x54]
mov word [edi + 0xc], 0x101
mov dword [eax + 0x18], edi
mov dword [eax + 0x20], 0
mov byte [ebp - 4], 3
mov dword [eax + 0x24], 0
mov dword [eax + 0x28], 0
mov dword [eax + 0x30], 0
mov dword [eax + 0x34], 0
mov dword [eax + 0x38], 0
add eax, 0x3c
mov ecx, eax
mov dword [ebp - 0x48], eax
call fcn.005609f0
push 4
mov byte [ebp - 4], 4
call fcn.004c59e9
add esp, 4
mov edi, eax
mov dword [ebp - 0x78], edi
push 4
mov dword [edi], 0
call fcn.004c59e9
add esp, 4
mov dword [ebp - 0x5c], eax
mov dword [eax], 0
push 4
call fcn.004c59e9
add esp, 4
mov dword [ebp - 0x60], eax
mov dword [eax], 0
push 4
call fcn.004c59e9
add esp, 4
mov dword [ebp - 0x64], eax
mov dword [eax], 0
push 4
call fcn.004c59e9
add esp, 4
mov dword [ebp - 0x68], eax
mov dword [eax], 0
push 4
call fcn.004c59e9
add esp, 4
mov dword [ebp - 0x6c], eax
mov dword [eax], 0
push 4
call fcn.004c59e9
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [eax], 0
push 4
call fcn.004c59e9
add esp, 4
mov dword [ebp - 0x74], eax
mov dword [eax], 0
push 4
call fcn.004c59e9
add esp, 4
mov dword [ebp - 0x4c], eax
mov dword [eax], 0
push 4
call fcn.004c59e9
add esp, 4
mov dword [ebp - 0x50], eax
mov dword [eax], 0
push 4
call fcn.004c59e9
add esp, 4
mov dword [ebp - 0x3c], eax
mov dword [eax], 0
push 0xe3bb64
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push 0xffffff
mov dword [edi], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [ebp - 0x5c]
push 0xd99f04
mov dword [ecx], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [ebp - 0x60]
push 0xfff2d6
mov dword [ecx], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [ebp - 0x64]
push 0xad7c01
mov dword [ecx], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [ebp - 0x68]
push 0x735000
mov dword [ecx], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [ebp - 0x6c]
push 0xf2f2f2
mov dword [ecx], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [ebp - 0x70]
push 0xf5f5f5
mov dword [ecx], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [ebp - 0x74]
push 0xdedfde
mov dword [ecx], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [ebp - 0x4c]
push 0x5b5858
mov dword [ecx], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [ebp - 0x50]
push 0x1a23e2
mov dword [ecx], eax
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x58], 0
mov dword [ecx], eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x38]
mov ecx, esi
push eax
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x561731
cmp dword [eax + 0x10], 0
jle 0x56179f
cmp dword [esi + 4], 0xaaaaaaa
je 0x562014
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 5
push 0x18
mov dword [ebp - 0x40], 0
call fcn.00446660
mov edi, eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, edi
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
push edi
push dword [ebp - 0x34]
mov ecx, esi
mov word [edi + 0xc], 0
push dword [ebp - 0x38]
call fcn.004466e0
mov edi, dword [ebp - 0x78]
mov dword [eax + 0x14], edi
mov ecx, esi
lea eax, [ebp - 0x58]
mov dword [ebp - 0x58], 1
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x5617c7
cmp dword [eax + 0x10], 1
jle 0x561832
cmp dword [esi + 4], 0xaaaaaaa
je 0x562019
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 6
push 0x18
mov dword [ebp - 0x40], 0
call fcn.00446660
mov edi, eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, edi
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
push edi
push dword [ebp - 0x34]
mov ecx, esi
mov word [edi + 0xc], 0
push dword [ebp - 0x38]
call fcn.004466e0
mov ecx, dword [ebp - 0x5c]
mov dword [eax + 0x14], ecx
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x5c], 2
push eax
mov ecx, esi
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x56185d
cmp dword [eax + 0x10], 2
jle 0x5618c8
cmp dword [esi + 4], 0xaaaaaaa
je 0x56201e
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 7
push 0x18
mov dword [ebp - 0x40], 0
call fcn.00446660
mov edi, eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x5c]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, edi
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
push edi
push dword [ebp - 0x34]
mov ecx, esi
mov word [edi + 0xc], 0
push dword [ebp - 0x38]
call fcn.004466e0
mov ecx, dword [ebp - 0x60]
mov dword [eax + 0x14], ecx
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x60], 5
push eax
mov ecx, esi
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x5618f3
cmp dword [eax + 0x10], 5
jle 0x56195e
cmp dword [esi + 4], 0xaaaaaaa
je 0x562023
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 8
push 0x18
mov dword [ebp - 0x40], 0
call fcn.00446660
mov edi, eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, edi
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
push edi
push dword [ebp - 0x34]
mov ecx, esi
mov word [edi + 0xc], 0
push dword [ebp - 0x38]
call fcn.004466e0
mov ecx, dword [ebp - 0x64]
mov dword [eax + 0x14], ecx
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x64], 3
push eax
mov ecx, esi
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x561989
cmp dword [eax + 0x10], 3
jle 0x5619f4
cmp dword [esi + 4], 0xaaaaaaa
je 0x562028
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 9
push 0x18
mov dword [ebp - 0x40], 0
call fcn.00446660
mov edi, eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x64]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, edi
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
push edi
push dword [ebp - 0x34]
mov ecx, esi
mov word [edi + 0xc], 0
push dword [ebp - 0x38]
call fcn.004466e0
mov ecx, dword [ebp - 0x68]
mov dword [eax + 0x14], ecx
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x68], 4
push eax
mov ecx, esi
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x561a1f
cmp dword [eax + 0x10], 4
jle 0x561a8a
cmp dword [esi + 4], 0xaaaaaaa
je 0x56202d
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 0xa
push 0x18
mov dword [ebp - 0x40], 0
call fcn.00446660
mov edi, eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, edi
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
push edi
push dword [ebp - 0x34]
mov ecx, esi
mov word [edi + 0xc], 0
push dword [ebp - 0x38]
call fcn.004466e0
mov ecx, dword [ebp - 0x6c]
mov dword [eax + 0x14], ecx
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x6c], 6
push eax
mov ecx, esi
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x561ab5
cmp dword [eax + 0x10], 6
jle 0x561b20
cmp dword [esi + 4], 0xaaaaaaa
je 0x562032
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 0xb
push 0x18
mov dword [ebp - 0x40], 0
call fcn.00446660
mov edi, eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x6c]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, edi
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
push edi
push dword [ebp - 0x34]
mov ecx, esi
mov word [edi + 0xc], 0
push dword [ebp - 0x38]
call fcn.004466e0
mov ecx, dword [ebp - 0x70]
mov dword [eax + 0x14], ecx
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x70], 7
push eax
mov ecx, esi
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x561b4b
cmp dword [eax + 0x10], 7
jle 0x561bb6
cmp dword [esi + 4], 0xaaaaaaa
je 0x562037
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 0xc
push 0x18
mov dword [ebp - 0x40], 0
call fcn.00446660
mov edi, eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x70]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, edi
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
push edi
push dword [ebp - 0x34]
mov ecx, esi
mov word [edi + 0xc], 0
push dword [ebp - 0x38]
call fcn.004466e0
mov ecx, dword [ebp - 0x74]
mov dword [eax + 0x14], ecx
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x74], 8
push eax
mov ecx, esi
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x561be1
cmp dword [eax + 0x10], 8
jle 0x561c4c
cmp dword [esi + 4], 0xaaaaaaa
je 0x56203c
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 0xd
push 0x18
mov dword [ebp - 0x40], 0
call fcn.00446660
mov edi, eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x74]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, edi
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
push edi
push dword [ebp - 0x34]
mov ecx, esi
mov word [edi + 0xc], 0
push dword [ebp - 0x38]
call fcn.004466e0
mov ecx, dword [ebp - 0x4c]
mov dword [eax + 0x14], ecx
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x4c], 9
push eax
mov ecx, esi
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x561c77
cmp dword [eax + 0x10], 9
jle 0x561ce2
cmp dword [esi + 4], 0xaaaaaaa
je 0x562041
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 0xe
push 0x18
mov dword [ebp - 0x40], 0
call fcn.00446660
mov edi, eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x4c]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, edi
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
push edi
push dword [ebp - 0x34]
mov ecx, esi
mov word [edi + 0xc], 0
push dword [ebp - 0x38]
call fcn.004466e0
mov ecx, dword [ebp - 0x50]
mov dword [eax + 0x14], ecx
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x50], 0xa
push eax
mov ecx, esi
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x561d0d
cmp dword [eax + 0x10], 0xa
jle 0x561d78
cmp dword [esi + 4], 0xaaaaaaa
je 0x562046
mov eax, dword [esi]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], esi
mov byte [ebp - 4], 0xf
push 0x18
mov dword [ebp - 0x40], 0
call fcn.00446660
mov edi, eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, edi
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0
call fcn.00446a40
lea ecx, [edi + 4]
call fcn.00446a40
lea ecx, [edi + 8]
call fcn.00446a40
push edi
push dword [ebp - 0x34]
mov ecx, esi
mov word [edi + 0xc], 0
push dword [ebp - 0x38]
call fcn.004466e0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x48]
mov dword [eax + 0x14], ecx
lea ecx, [ebp - 0x28]
push 0x668c54
call fcn.004833f0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push ecx
cmovae eax, dword [ebp - 0x28]
push 0x5cb450
push 0
push 0
push 0
push eax
call dword [sym.imp.OLEAUT32.dll_VarUI4FromI8]
test eax, eax
jne 0x561e12
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x3c], eax
mov eax, dword [ecx]
mov esi, dword [eax + 0xc]
lea eax, [ebp - 0x3c]
push eax
push ecx
mov ecx, esi
call dword [0x5c3794]
call esi
push 4
push 0
push 0
push 0
push dword [ebp - 0x3c]
call dword [sym.imp.USER32.dll_CopyImage]
mov esi, dword [ebp - 0x54]
mov edi, eax
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x561dfc
cmp ecx, edi
je 0x561dfc
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov eax, dword [ebp - 0x80]
mov dword [esi + 0x20], edi
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x5c3794]
call esi
xor edi, edi
mov eax, 0x660330
xor esi, esi
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], esi
mov ecx, dword [ebp - 0x54]
push eax
call fcn.00560850
mov dword [ebp - 0x48], eax
mov ecx, ebx
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edi
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x561e4d
cmp edi, dword [eax + 0x10]
jge 0x561ec2
cmp dword [ebx + 4], 0xaaaaaaa
je 0x562014
mov eax, dword [ebx]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x7c], ebx
mov byte [ebp - 4], 0x11
push 0x18
mov dword [ebp - 0x78], 0
call fcn.00446660
mov esi, eax
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, esi
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0
call fcn.00446a40
lea ecx, [esi + 4]
call fcn.00446a40
lea ecx, [esi + 8]
call fcn.00446a40
push esi
push dword [ebp - 0x34]
mov ecx, ebx
mov word [esi + 0xc], 0
push dword [ebp - 0x38]
mov dword [ebp - 0x78], 0
call fcn.004466e0
mov esi, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x48]
add esi, 0x20c
mov dword [eax + 0x14], ecx
inc edi
mov eax, dword [ebp - 0x4c]
add eax, 0x20c
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], eax
cmp esi, 0x9778
jb 0x561e21
mov esi, dword [ebp - 0x54]
mov ecx, esi
push str.status_ico_transition.png
call fcn.00560850
mov dword [esi + 0x24], eax
xor edi, edi
push 0
mov eax, 0x10
cmp edi, 8
mov ecx, 0x20
cmovne ecx, eax
movzx eax, word [edi*4 + 0x5df590]
push ecx
push ecx
push 1
push eax
push dword [0x67efd8]
call dword [sym.imp.USER32.dll_LoadImageW]
mov dword [ebp - 0x48], eax
test eax, eax
je 0x561fd1
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edi
push eax
lea eax, [ebp - 0x38]
lea ebx, [esi + 0x18]
push eax
mov ecx, ebx
call fcn.004469b0
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xd], 0
jne 0x561f56
cmp edi, dword [eax + 0x10]
jge 0x561fcb
cmp dword [ebx + 4], 0xaaaaaaa
je 0x562014
mov eax, dword [ebx]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x7c], ebx
mov byte [ebp - 4], 0x12
push 0x18
mov dword [ebp - 0x78], 0
call fcn.00446660
mov esi, eax
mov byte [ebp - 4], 0x10
mov eax, dword [ebp - 0x3c]
lea edx, [ebp - 0x2c]
add esp, 4
mov ecx, esi
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0
call fcn.00446a40
lea ecx, [esi + 4]
call fcn.00446a40
lea ecx, [esi + 8]
call fcn.00446a40
push esi
push dword [ebp - 0x34]
mov ecx, ebx
mov word [esi + 0xc], 0
push dword [ebp - 0x38]
mov dword [ebp - 0x78], 0
call fcn.004466e0
mov esi, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x48]
mov dword [eax + 0x14], ecx
inc edi
cmp edi, 0xb
jb 0x561efd
mov ecx, dword [ebp - 0x14]
cmp ecx, 8
jb 0x561ff6
lea ecx, [ecx*2 + 2]
push ecx
push dword [ebp - 0x28]
call fcn.00446620
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004c59c5
mov esp, ebp
pop ebp
ret
call fcn.00443f50
call fcn.00443f50
call fcn.00443f50
call fcn.00443f50
call fcn.00443f50
call fcn.00443f50
call fcn.00443f50
call fcn.00443f50
call fcn.00443f50
call fcn.00443f50
call fcn.00443f50
int3