Function at 0x427740
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x60
push esi
mov esi, dword [ecx + 4]
push edi
mov dword [esp + 0x18], ecx
xor edi, edi
call fcn.00427590
mov edx, eax
mov eax, dword [ebp + 8]
mov dword [eax], edi
test edx, edx
js 0x428289
movzx ecx, byte [edx + esi]
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edx + esi + 1]
add cx, ax
movzx eax, cx
test ax, ax
jle 0x427c26
cwde
mov dword [esp + 0x10], edi
mov dword [esp + 0x40], edi
lea edi, [esi + 0xa]
add edi, edx
lea ecx, [edx + eax*2]
mov dword [esp + 0x3c], edi
add eax, eax
add edx, 0xc
mov dword [esp + 0x18], eax
movzx eax, byte [ecx + esi + 0xb]
movzx ecx, byte [ecx + esi + 0xa]
add eax, dword [esp + 0x18]
shl ecx, 8
add ecx, eax
add esi, ecx
add esi, edx
mov edx, dword [esp + 0x18]
movzx ecx, byte [edx + edi - 2]
movzx eax, byte [edx + edi - 1]
shl ecx, 8
inc ecx
add eax, ecx
mov dword [esp + 0x30], eax
add eax, edx
lea ecx, [eax*8]
sub ecx, eax
add ecx, ecx
call fcn.0040e490
mov edi, eax
mov dword [esp + 0xc], edi
test edi, edi
je 0x428289
mov edx, dword [esp + 0x18]
xor cl, cl
mov dword [esp + 0x44], 0
lea eax, [edx*8]
sub eax, edx
mov edx, dword [esp + 0x30]
add eax, eax
mov dword [esp + 0x4c], eax
test edx, edx
je 0x427bdd
add eax, 0xc
mov dword [esp + 0x34], edx
add eax, edi
mov dl, cl
mov dword [esp + 0x38], eax
test cl, cl
jne 0x427859
mov al, byte [esi]
mov dl, al
mov byte [esp + 9], al
and dl, 8
je 0x427845
mov cl, byte [esi + 1]
xor eax, eax
test dl, dl
mov dl, byte [esp + 9]
setne al
inc eax
add esi, eax
mov eax, dword [esp + 0x38]
jmp 0x42785b
dec cl
mov byte [eax], dl
add eax, 0xe
sub dword [esp + 0x34], 1
mov dword [esp + 0x38], eax
jne 0x427831
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x30]
add eax, edi
mov dword [esp + 0x38], eax
xor edi, edi
mov dword [esp + 0x34], ecx
nop
mov dl, byte [eax + 0xc]
and dl, 0x10
test byte [eax + 0xc], 2
je 0x42789f
mov al, byte [esi]
inc esi
movzx ecx, al
mov eax, ecx
neg eax
test dl, dl
cmove ecx, eax
add edi, ecx
jmp 0x4278c1
test dl, dl
jne 0x4278c1
movzx ecx, byte [esi]
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
add edi, eax
add esi, 2
mov eax, dword [esp + 0x38]
mov word [eax], di
add eax, 0xe
sub dword [esp + 0x34], 1
mov dword [esp + 0x38], eax
jne 0x427880
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0xc]
add edi, 2
lea eax, [ecx*8]
sub eax, ecx
mov ecx, dword [esp + 0x30]
mov dword [esp + 0x34], ecx
lea eax, [edi + eax*2]
xor edi, edi
mov dword [esp + 0x38], eax
nop dword [eax + eax]
mov dl, byte [eax + 0xa]
and dl, 0x20
test byte [eax + 0xa], 4
je 0x42791f
mov al, byte [esi]
inc esi
movzx ecx, al
mov eax, ecx
neg eax
test dl, dl
cmove ecx, eax
add edi, ecx
jmp 0x427941
test dl, dl
jne 0x427941
movzx ecx, byte [esi]
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
add edi, eax
add esi, 2
mov eax, dword [esp + 0x38]
mov word [eax], di
add eax, 0xe
sub dword [esp + 0x34], 1
mov dword [esp + 0x38], eax
jne 0x427900
mov esi, dword [esp + 0x18]
xor eax, eax
mov edi, dword [esp + 0xc]
xor edx, edx
mov dword [esp + 0x1c], eax
xor ecx, ecx
mov dword [esp + 0x34], edx
lea eax, [esi*8]
mov dword [esp + 0x38], edx
sub eax, esi
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], edx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x2c], ecx
lea esi, [edi + eax*2]
nop dword [eax]
mov al, byte [esi + 0xc]
mov byte [esp + 9], al
movzx eax, word [esi]
mov dword [esp + 0x18], eax
movzx eax, word [esi + 2]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1c]
cmp dword [esp + 0x44], eax
jne 0x427aa9
test eax, eax
je 0x4279e1
push dword [esp + 0x24]
push dword [esp + 0x2c]
push dword [esp + 0x3c]
push dword [esp + 0x44]
push ecx
push dword [esp + 0x40]
mov ecx, edi
push dword [esp + 0x58]
push dword [esp + 0x2c]
call fcn.00427670
add esp, 0x20
mov edx, eax
movzx eax, byte [esp + 9]
mov ecx, dword [esp + 0x18]
not eax
and eax, 1
mov dword [esp + 0x40], eax
movsx eax, cx
je 0x427a51
test byte [esi + 0x1a], 1
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x14]
movsx ecx, ax
lea eax, [esi + 0xe]
mov dword [esp + 0x34], ecx
movsx ecx, word [esi + 0x10]
mov dword [esp + 0x4c], eax
movsx eax, word [eax]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x20], ecx
jne 0x427a47
mov ecx, dword [esp + 0x18]
movsx edi, cx
mov ecx, dword [esp + 0x20]
add eax, edi
mov edi, dword [esp + 0x14]
sar eax, 1
mov dword [esp + 0x2c], eax
movsx eax, di
mov edi, dword [esp + 0xc]
add ecx, eax
sar ecx, 1
jmp 0x427a5c
inc dword [esp + 0x1c]
mov esi, dword [esp + 0x4c]
jmp 0x427a60
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
movsx ecx, cx
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x2c]
lea eax, [edx*8]
sub eax, edx
inc edx
mov word [edi + eax*2], cx
mov ecx, dword [esp + 0x20]
mov word [edi + eax*2 + 2], cx
xor ecx, ecx
mov dword [edi + eax*2 + 4], ecx
mov byte [edi + eax*2 + 0xc], 1
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], ecx
movzx ecx, byte [eax + 1]
movzx eax, byte [eax]
inc ecx
shl eax, 8
add eax, ecx
add dword [esp + 0x3c], 2
mov dword [esp + 0x44], eax
jmp 0x427bbb
test byte [esp + 9], 1
jne 0x427b2e
cmp dword [esp + 0x10], 0
je 0x427b0b
lea ecx, [edx*8]
sub ecx, edx
inc edx
mov dword [esp + 0x10], ecx
mov byte [edi + ecx*2 + 0xc], 3
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0xc]
movsx eax, cx
add eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
sar eax, 1
mov word [edi + ecx*2], ax
mov ecx, dword [esp + 0x14]
movsx eax, cx
mov ecx, dword [esp + 0x10]
add eax, dword [esp + 0x24]
sar eax, 1
mov word [edi + ecx*2 + 2], ax
mov eax, dword [esp + 0x28]
mov word [edi + ecx*2 + 4], ax
mov eax, dword [esp + 0x24]
mov word [edi + ecx*2 + 6], ax
mov eax, dword [esp + 0x18]
movsx ecx, ax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], ecx
movsx ecx, ax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x10], 1
jmp 0x427bbb
lea ecx, [edx*8]
sub ecx, edx
cmp dword [esp + 0x10], 0
je 0x427b56
mov eax, dword [esp + 0x24]
movzx eax, ax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x28]
movzx eax, ax
mov dword [esp + 0x48], eax
jmp 0x427b66
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov eax, dword [esp + 0x14]
movzx edi, ax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], edi
movzx edi, ax
mov eax, dword [esp + 0x10]
test eax, eax
mov dword [esp + 0x18], edi
mov edi, dword [esp + 0xc]
setne al
add al, 2
mov dword [esp + 0x10], 0
inc edx
mov byte [edi + ecx*2 + 0xc], al
mov eax, dword [esp + 0x18]
mov word [edi + ecx*2], ax
mov eax, dword [esp + 0x14]
mov word [edi + ecx*2 + 2], ax
mov eax, dword [esp + 0x48]
mov word [edi + ecx*2 + 4], ax
mov eax, dword [esp + 0x4c]
mov word [edi + ecx*2 + 6], ax
mov eax, dword [esp + 0x1c]
add esi, 0xe
mov ecx, dword [esp + 0x20]
inc eax
mov dword [esp + 0x1c], eax
cmp eax, dword [esp + 0x30]
jl 0x427990
mov eax, ecx
mov ecx, dword [esp + 0x2c]
jmp 0x427bf3
xor edx, edx
xor eax, eax
mov dword [esp + 0x34], edx
xor ecx, ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], edx
push dword [esp + 0x24]
push dword [esp + 0x2c]
push dword [esp + 0x3c]
push dword [esp + 0x44]
push eax
push ecx
push dword [esp + 0x58]
mov ecx, edi
push dword [esp + 0x2c]
call fcn.00427670
mov ecx, eax
add esp, 0x20
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov eax, ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
jns 0x428291
add esi, 0xa
mov dword [esp + 0x2c], edi
add esi, edx
mov dword [esp + 0x1c], 6
xor edi, edi
mov dword [esp + 0xc], edi
mov cl, byte [esi + 2]
xorps xmm1, xmm1
movzx eax, byte [esi + 1]
movups xmm0, xmmword [0xbca5c0]
mov byte [esp + 0xa], cl
mov cl, byte [esi + 3]
add esi, 4
movss xmm4, dword [0xbca0ac]
mov dword [esp + 0x20], 0
movss dword [esp + 0x40], xmm1
movss dword [esp + 0x3c], xmm1
mov dword [esp + 0x44], eax
mov byte [esp + 0xb], cl
movups xmmword [esp + 0x50], xmm0
test al, 2
je 0x427d04
lea edx, [esi + 1]
mov dword [esp + 0x4c], edx
test al, 1
je 0x427cdb
mov al, byte [esi]
lea edx, [esi + 3]
movzx ecx, byte [esi + 2]
add esi, 4
mov byte [esp + 9], al
mov eax, 0x100
cwde
movsx ecx, cx
imul ecx, eax
movzx eax, byte [edx]
add cx, ax
mov eax, 0x100
movsx edx, cx
movzx ecx, byte [esp + 9]
cwde
movsx ecx, cx
imul ecx, eax
mov eax, dword [esp + 0x4c]
movzx eax, byte [eax]
add cx, ax
movsx eax, cx
jmp 0x427ce8
mov cl, byte [esi]
mov esi, edx
mov al, byte [esi]
inc esi
movsx edx, al
movsx eax, cl
movd xmm0, edx
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x3c], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x40], xmm0
jmp 0x427d27
push 0x733
push str.D:clientsWexsideLoaderFrontendexample_win32_directx9imguiimstb_truetype.h
push 0xbbe2d8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
movss xmm4, dword [0xbca0ac]
add esp, 0xc
xorps xmm1, xmm1
mov eax, dword [esp + 0x44]
test al, 8
je 0x427d6d
movzx ecx, byte [esi]
mov eax, 0x100
cwde
xorps xmm3, xmm3
movsx ecx, cx
imul ecx, eax
movzx eax, byte [esi + 1]
movss dword [esp + 0x24], xmm1
add cx, ax
add esi, 2
movsx eax, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [esp + 0x28], xmm0
movaps xmm2, xmm0
jmp 0x427e9f
test al, 0x40
je 0x427dd0
movzx ecx, byte [esi]
mov edx, 0x100
movsx ecx, cx
xorps xmm3, xmm3
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 1]
movss dword [esp + 0x24], xmm1
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + 2]
movsx ecx, cx
movd xmm2, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 3]
cvtdq2ps xmm2, xmm2
add cx, ax
add esi, 4
movsx eax, cx
mulss xmm2, xmm4
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [esp + 0x28], xmm0
jmp 0x427e9f
test al, al
jns 0x427e7b
movzx ecx, byte [esi]
mov edx, 0x100
movsx ecx, cx
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 1]
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + 2]
movsx ecx, cx
movd xmm2, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 3]
cvtdq2ps xmm2, xmm2
add cx, ax
movsx eax, cx
movzx ecx, byte [esi + 4]
movsx ecx, cx
mulss xmm2, xmm4
movd xmm3, eax
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 5]
cvtdq2ps xmm3, xmm3
add cx, ax
movsx eax, cx
movss dword [esp + 0x38], xmm2
movzx ecx, byte [esi + 6]
movsx ecx, cx
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movsx eax, dx
imul ecx, eax
movzx eax, byte [esi + 7]
mulss xmm0, xmm4
mulss xmm3, xmm4
add cx, ax
add esi, 8
movsx eax, cx
movss dword [esp + 0x24], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm4
movss dword [esp + 0x28], xmm0
jmp 0x427ea5
movss xmm0, dword [esp + 0x5c]
movss xmm3, dword [esp + 0x54]
movss xmm2, dword [esp + 0x50]
movss dword [esp + 0x28], xmm0
movss xmm0, dword [esp + 0x58]
movss dword [esp + 0x24], xmm0
movss dword [esp + 0x38], xmm2
movaps xmm1, xmm3
movss dword [esp + 0x34], xmm3
movaps xmm0, xmm2
mulss xmm1, xmm3
mulss xmm0, xmm2
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x427ecf
sqrtsd xmm0, xmm0
jmp 0x427ed4
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movss xmm1, dword [esp + 0x28]
cvtsd2ss xmm0, xmm0
mulss xmm1, xmm1
movss dword [esp + 0x4c], xmm0
movss xmm0, dword [esp + 0x24]
mulss xmm0, xmm0
addss xmm1, xmm0
cvtps2pd xmm0, xmm1
xorps xmm1, xmm1
ucomisd xmm1, xmm0
ja 0x427f08
sqrtsd xmm0, xmm0
jmp 0x427f0d
call sub.api_ms_win_crt_math_l1_1_0.dll__libm_sse2_sqrt_precise
movzx edx, byte [esp + 0xa]
lea eax, [esp + 0x20]
mov ecx, dword [esp + 0x18]
cvtsd2ss xmm0, xmm0
push eax
movzx eax, byte [esp + 0xf]
shl edx, 8
add edx, eax
movss dword [esp + 0x4c], xmm0
call fcn.004295f0
add esp, 4
mov dword [esp + 0x30], eax
test eax, eax
jle 0x4281b5
movss xmm4, dword [esp + 0x28]
xor edx, edx
movss xmm5, dword [esp + 0x38]
mov edi, eax
movss xmm6, dword [esp + 0x24]
movss xmm7, dword [esp + 0x34]
nop
mov ecx, dword [esp + 0x20]
movaps xmm1, xmm5
movaps xmm0, xmm6
movsx eax, word [edx + ecx + 2]
movd xmm3, eax
movsx eax, word [edx + ecx]
cvtdq2ps xmm3, xmm3
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm0, xmm3
mulss xmm1, xmm2
addss xmm1, xmm0
movaps xmm0, xmm4
mulss xmm0, xmm3
addss xmm1, dword [esp + 0x40]
mulss xmm1, dword [esp + 0x4c]
cvttss2si eax, xmm1
movaps xmm1, xmm7
mulss xmm1, xmm2
mov word [edx + ecx], ax
addss xmm1, xmm0
movaps xmm0, xmm6
addss xmm1, dword [esp + 0x3c]
mulss xmm1, dword [esp + 0x48]
cvttss2si eax, xmm1
movaps xmm1, xmm5
mov word [edx + ecx + 2], ax
movsx eax, word [edx + ecx + 6]
movd xmm3, eax
movsx eax, word [edx + ecx + 4]
cvtdq2ps xmm3, xmm3
movd xmm2, eax
cvtdq2ps xmm2, xmm2
mulss xmm0, xmm3
mulss xmm1, xmm2
addss xmm1, xmm0
movaps xmm0, xmm4
mulss xmm0, xmm3
addss xmm1, dword [esp + 0x40]
mulss xmm1, dword [esp + 0x4c]
cvttss2si eax, xmm1
movaps xmm1, xmm7
mulss xmm1, xmm2
mov word [edx + ecx + 4], ax
addss xmm1, xmm0
addss xmm1, dword [esp + 0x3c]
mulss xmm1, dword [esp + 0x48]
cvttss2si eax, xmm1
mov word [edx + ecx + 6], ax
add edx, 0xe
sub edi, 1
jne 0x427f60
mov eax, dword [esp + 0x2c]
add eax, dword [esp + 0x30]
mov edi, dword [esp + 0xc]
lea ecx, [eax*8]
sub ecx, eax
add ecx, ecx
call fcn.0040e490
mov edx, eax
mov dword [esp + 0x4c], edx
test edx, edx
je 0x4281c9
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jle 0x42808e
test edi, edi
je 0x42808e
lea eax, [ecx*8]
sub eax, ecx
add eax, eax
push eax
push edi
push edx
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [esp + 0x38]
add esp, 0xc
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x30]
shl eax, 3
sub eax, dword [esp + 0x30]
add eax, eax
push eax
push dword [esp + 0x24]
lea eax, [ecx*8]
sub eax, ecx
lea eax, [edx + eax*2]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
test edi, edi
je 0x428120
mov ecx, dword [0xc74718]
test ecx, ecx
je 0x428116
movsx eax, word [ecx + 0x5ee4]
mov edx, dword [ecx + 0x3f08]
add eax, 0xbdd
mov dword [esp + 0x48], edx
cmp dword [ecx + eax*8], edx
lea eax, [ecx + eax*8]
je 0x42810c
movsx eax, word [ecx + 0x5ee4]
inc eax
cdq
idiv dword [esp + 0x1c]
movzx eax, dx
mov edx, dword [esp + 0x48]
mov word [ecx + 0x5ee4], ax
cwde
add eax, 0xbdd
lea eax, [ecx + eax*8]
mov dword [eax], edx
xor edx, edx
mov dword [eax + 4], edx
inc word [eax + 6]
inc dword [ecx + 0x5ee0]
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov edx, dword [esp + 0x20]
mov edi, dword [esp + 0x4c]
mov dword [esp + 0xc], edi
mov dword [esp + 0x48], edx
test edx, edx
je 0x42819d
mov ecx, dword [0xc74718]
test ecx, ecx
je 0x42819d
mov eax, dword [ecx + 0x3f08]
mov dword [esp + 0x4c], eax
movsx eax, word [ecx + 0x5ee4]
mov edx, dword [esp + 0x4c]
add eax, 0xbdd
cmp dword [ecx + eax*8], edx
mov edx, dword [esp + 0x48]
lea eax, [ecx + eax*8]
je 0x428193
movsx eax, word [ecx + 0x5ee4]
inc eax
cdq
idiv dword [esp + 0x1c]
movzx eax, dx
mov edx, dword [esp + 0x4c]
mov word [ecx + 0x5ee4], ax
cwde
add eax, 0xbdd
lea eax, [ecx + eax*8]
mov dword [eax], edx
xor edx, edx
mov dword [eax + 4], edx
mov edx, dword [esp + 0x48]
inc word [eax + 6]
inc dword [ecx + 0x5ee0]
push edx
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [esp + 0x30]
add esp, 4
add ecx, dword [esp + 0x30]
mov dword [esp + 0x2c], ecx
jmp 0x4281b9
mov ecx, dword [esp + 0x2c]
test byte [esp + 0x44], 0x20
je 0x428293
jmp 0x427c43
test edi, edi
je 0x428227
mov ecx, dword [0xc74718]
test ecx, ecx
je 0x42821d
movsx edx, word [ecx + 0x5ee4]
lea eax, [ecx + 0x5ee8]
mov esi, dword [ecx + 0x3f08]
lea eax, [eax + edx*8]
cmp dword [eax], esi
je 0x428213
lea eax, [edx + 1]
cdq
idiv dword [esp + 0x1c]
movzx eax, dx
mov word [ecx + 0x5ee4], ax
cwde
add eax, 0xbdd
xor edx, edx
lea eax, [ecx + eax*8]
mov dword [eax], esi
mov dword [eax + 4], edx
inc word [eax + 6]
inc dword [ecx + 0x5ee0]
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov esi, dword [esp + 0x20]
test esi, esi
je 0x428289
mov ecx, dword [0xc74718]
test ecx, ecx
je 0x42827f
movsx edx, word [ecx + 0x5ee4]
lea eax, [ecx + 0x5ee8]
mov edi, dword [ecx + 0x3f08]
lea eax, [eax + edx*8]
cmp dword [eax], edi
je 0x428275
lea eax, [edx + 1]
cdq
idiv dword [esp + 0x1c]
movzx eax, dx
mov word [ecx + 0x5ee4], ax
cwde
add eax, 0xbdd
xor edx, edx
lea eax, [ecx + eax*8]
mov dword [eax], edi
mov dword [eax + 4], edx
inc word [eax + 6]
inc dword [ecx + 0x5ee0]
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret
xor ecx, ecx
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov eax, ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret