Function at 0x4381f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xe0
mov eax, dword [edx + 8]
mov dword [esp + 0xc4], ecx
mov dword [esp + 0xcc], edx
test eax, eax
mov dword [esp + 0xc8], eax
je 0x438224
mov ecx, dword [eax + 4]
mov ebx, dword [edx]
mov dword [esp + 0x44], ecx
mov ecx, dword [eax + 8]
jmp 0x43825b
mov ebx, dword [edx]
lea ecx, [esp + 0x84]
mov edx, ebx
call fcn.00439360
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0xc0], eax
mov dword [esp + 0xb8], edx
mov dword [esp + 0x44], edx
mov eax, ecx
test ecx, ecx
mov edx, 0
mov eax, 4
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 4
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 4
mov dword [esp + 0x50], 0
mov dword [esp + 0xbc], ecx
mov dword [esp + 0x20], ebx
je 0x43886a
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0x44]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov dword [esp + 0xd0], eax
jmp 0x4382e6
add eax, 0x14
mov ecx, eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x44], ecx
mov dword [eax + edx*8], esi
mov dword [eax + edx*8 + 4], edi
inc edx
cmp ecx, dword [esp + 0xd0]
mov dword [esp + 0x68], edx
je 0x43886a
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 4
mov dword [esp + 0x40], 0
xor ecx, ecx
mov edx, 4
movzx eax, byte [0x94bfc5]
call fcn.0071ee80
test eax, eax
je 0x439350
mov ecx, dword [esp + 0x44]
mov ebp, eax
lea edi, [ecx + 0xc]
mov dword [eax], edi
mov dword [esp + 0x54], 1
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 4
mov dword [esp + 0x58], eax
mov dword [esp + 0x1c], 0
mov eax, dword [ebx + 0x4c]
test eax, eax
je 0x438780
mov esi, dword [ecx + 0xc]
mov edx, dword [ebx + 0x48]
mov ecx, dword [ecx + 0x10]
imul eax, eax, 0x134
mov dword [esp + 0xc], 0
mov dword [esp], 4
mov dword [esp + 0x4c], eax
mov eax, 1
mov dword [esp + 0x34], edx
mov dword [esp + 0x10], esi
mov dword [esp + 8], ecx
jmp 0x4383a0
mov ebp, dword [esp + 4]
mov eax, dword [esp + 0x5c]
test eax, eax
je 0x438760
lea ecx, [eax - 1]
cmp dword [esp + 0xc], 0
mov dword [esp + 4], ebp
mov dword [esp + 0x5c], ecx
mov esi, dword [ebp + eax*4 - 4]
je 0x438400
mov eax, dword [esp + 0xc]
mov edi, dword [esi + 4]
xor ebp, ebp
lea ebx, [eax*4]
jmp 0x4383d7
add ebp, 4
cmp ebx, ebp
je 0x438400
mov eax, dword [esp]
mov eax, dword [eax + ebp]
cmp dword [eax + 4], edi
jne 0x4383d0
push edi
push dword [esi]
push dword [eax]
call fcn.007be090
add esp, 0xc
test eax, eax
jne 0x4383d0
jmp 0x438390
mov edx, dword [esp + 0xc]
cmp edx, dword [esp + 0x38]
jne 0x438420
lea ecx, [esp + 0x38]
call fcn.0075a1c0
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
jmp 0x438423
mov eax, dword [esp]
mov dword [eax + edx*4], esi
inc edx
mov ebp, dword [esp + 0x4c]
mov dword [esp], eax
mov dword [esp + 0x40], edx
mov dword [esp + 0xc], edx
mov edi, dword [esi]
mov ebx, dword [esi + 4]
mov esi, dword [esp + 0x34]
jmp 0x438462
add esi, 0x134
add ebp, 0xfffffecc
je 0x438390
cmp dword [esi + 0x118], ebx
jne 0x438450
push ebx
push edi
push dword [esi + 0x114]
call fcn.007be090
add esp, 0xc
test eax, eax
jne 0x438450
mov ecx, dword [esi + 0x68]
test ecx, ecx
je 0x438390
mov edx, dword [esi + 0x64]
mov ebp, dword [esp + 4]
shl ecx, 4
add ecx, edx
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0xfc]
test eax, eax
je 0x438660
mov esi, dword [eax + 0x28]
test esi, esi
je 0x4384e0
mov ecx, dword [eax + 0x34]
mov ebx, dword [eax + 0x24]
mov eax, dword [eax + 0x30]
shl esi, 3
mov dword [esp + 4], ebp
mov dword [esp + 0x70], esi
mov dword [esp + 0x30], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x48], ecx
jmp 0x43850e
cmp dword [edx], 0
je 0x43868a
add edx, 0x10
cmp edx, ecx
jne 0x4384e0
jmp 0x438394
mov eax, dword [esp + 8]
nop dword [eax]
mov edx, dword [esp + 0x28]
cmp edx, dword [esp + 0x24]
je 0x438390
cmp dword [edx], 0
mov edi, edx
lea ecx, [edx + 0x10]
mov dword [esp + 0x28], ecx
je 0x438697
mov ebp, dword [esp + 0x70]
xor esi, esi
jmp 0x438536
inc esi
add ebp, 0xfffffff8
je 0x438500
cmp dword [ebx + esi*8 + 4], eax
jne 0x438530
push eax
push dword [esp + 0x14]
push dword [ebx + esi*8]
call fcn.007be090
add esp, 0xc
test eax, eax
mov eax, dword [esp + 8]
jne 0x438530
cmp esi, dword [esp + 0x48]
jae 0x4392dc
mov ecx, dword [esp + 0x30]
lea edx, [esi + esi*4]
shl edx, 4
cmp byte [ecx + edx + 0x45], 0
je 0x438500
mov eax, dword [esp + 0x30]
mov dword [esp + 0x2c], edi
mov esi, dword [eax + edx + 0x3c]
mov eax, dword [eax + edx + 0x40]
lea ecx, [eax + eax*2]
test eax, eax
mov dword [esp + 0x84], esi
lea ecx, [esi + ecx*4]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x80], ecx
mov dword [esp + 0x94], 0
je 0x4384f5
add edx, dword [esp + 0x30]
shl eax, 2
add esi, 8
lea ebp, [eax + eax*2]
nop word [eax + eax]
mov ecx, dword [esi]
mov eax, dword [esi - 4]
mov edi, edx
shl ecx, 4
mov dword [esp + 0x8c], eax
add ecx, eax
lea eax, [esp + 0x8c]
mov dword [esp + 0x90], ecx
mov ecx, edx
mov edx, dword [esp + 0x2c]
push eax
call fcn.004396b0
add esp, 4
test al, al
jne 0x438650
add esi, 0xc
mov edx, edi
add ebp, 0xfffffff4
jne 0x4385c0
mov eax, dword [esp + 0x80]
mov dword [esp + 0x84], eax
mov dword [esp + 0x8c], 0
cmp dword [esp + 0x94], 0
je 0x4384f5
mov ecx, edx
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x94]
push eax
call fcn.004396b0
add esp, 4
test al, al
je 0x4384f5
nop word cs:[eax + eax]
nop dword [eax]
mov edi, dword [esp + 0x2c]
jmp 0x438697
mov edi, edx
nop word cs:[eax + eax]
nop dword [eax]
cmp dword [edi], 0
je 0x438681
add edi, 0x10
cmp edi, ecx
jne 0x438670
jmp 0x438394
mov dword [esp + 4], ebp
lea eax, [edi + 0x10]
jmp 0x438693
mov edi, edx
lea eax, [edx + 0x10]
mov dword [esp + 4], ebp
mov dword [esp + 0x28], eax
mov esi, dword [edi + 8]
mov edi, dword [edi + 0xc]
mov ebp, dword [esp + 0x4c]
mov ebx, dword [esp + 0x34]
jmp 0x4386c2
add ebx, 0x134
add ebp, 0xfffffecc
je 0x438750
cmp dword [ebx + 0x118], edi
jne 0x4386b0
push edi
push esi
push dword [ebx + 0x114]
call fcn.007be090
add esp, 0xc
test eax, eax
jne 0x4386b0
cmp dword [ebx + 0x68], 0
mov ebp, dword [esp + 4]
je 0x438712
mov edx, dword [esp + 0x5c]
cmp edx, dword [esp + 0x54]
jne 0x4386ff
lea ecx, [esp + 0x54]
call fcn.0075a1c0
mov edx, dword [esp + 0x5c]
mov ebp, dword [esp + 0x58]
add ebx, 0x114
mov dword [ebp + edx*4], ebx
inc edx
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0x1c]
cmp edx, dword [esp + 0x14]
jne 0x438729
lea ecx, [esp + 0x14]
call fcn.004c7a80
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
mov dword [eax + edx*8], esi
mov dword [eax + edx*8 + 4], edi
inc edx
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x28]
cmp edx, ecx
jne 0x438499
jmp 0x438394
mov ebp, dword [esp + 4]
mov edx, dword [esp + 0x1c]
cmp edx, dword [esp + 0x14]
je 0x43871c
jmp 0x438729
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
cmp dword [esp + 0x54], 0
mov dword [esp + 8], eax
mov dword [esp], ecx
je 0x4387b6
mov ebp, dword [esp + 0x58]
jmp 0x4387a7
lea ecx, [esp + 0x38]
xor edx, edx
mov dword [esp + 8], 0
call fcn.0075a1c0
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov dword [esp], 4
xor ebx, ebx
mov dword [eax + ecx*4], edi
push ebp
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x38], 0
je 0x4387cf
push dword [esp + 0x3c]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
test ebx, ebx
je 0x438820
mov ebp, dword [esp]
mov edx, dword [esp + 0x68]
lea ebx, [ebp + ebx*8]
jmp 0x4387f7
mov eax, dword [esp + 0x64]
add ebp, 8
mov dword [eax + edx*8], esi
mov dword [eax + edx*8 + 4], edi
inc edx
cmp ebp, ebx
mov dword [esp + 0x68], edx
je 0x438820
mov esi, dword [ebp]
mov edi, dword [ebp + 4]
cmp edx, dword [esp + 0x60]
jne 0x4387e0
lea ecx, [esp + 0x60]
call fcn.004c7a80
mov edx, dword [esp + 0x68]
jmp 0x4387e0
cmp dword [esp + 8], 0
je 0x438838
push dword [esp]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x68]
mov ebx, dword [esp + 0x20]
mov esi, dword [eax + 0xc]
mov edi, dword [eax + 0x10]
cmp edx, dword [esp + 0x60]
jne 0x4382c0
lea ecx, [esp + 0x60]
call fcn.004c7a80
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x68]
jmp 0x4382c0
mov ecx, dword [esp + 0xf8]
mov esi, dword [esp + 0xf4]
lea edx, [eax + edx*8]
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 4
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 4
mov dword [esp + 0xb4], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x4c], edx
lea ecx, [esi + ecx*8]
mov dword [esp + 0x70], ecx
mov ecx, esi
jmp 0x4388dc
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 4]
mov ebx, dword [esp + 0x20]
test eax, eax
je 0x438900
cmp eax, dword [esp + 0x4c]
je 0x438900
lea edi, [eax + 8]
mov esi, ecx
mov ebp, eax
mov edx, dword [ebx + 0x70]
mov eax, edi
test edx, edx
jne 0x438924
jmp 0x4388dc
test ecx, ecx
je 0x438c8e
cmp ecx, dword [esp + 0x70]
je 0x438c8e
lea esi, [ecx + 8]
mov ebp, ecx
xor edi, edi
mov ecx, esi
mov edx, dword [ebx + 0x70]
mov eax, edi
test edx, edx
je 0x4388dc
mov dword [esp + 4], esi
mov esi, dword [ebx + 0x6c]
mov dword [esp + 0x24], edi
mov edi, dword [ebp]
mov ebx, dword [ebp + 4]
shl edx, 4
mov dword [esp + 0x34], ebp
lea ebp, [edx + edx*2]
add esi, 0x28
jmp 0x43895c
add esi, 0x30
add ebp, 0xffffffd0
je 0x4388d0
cmp dword [esi], ebx
jne 0x438950
push ebx
push edi
push dword [esi - 4]
call fcn.007be090
add esp, 0xc
test eax, eax
jne 0x438950
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x84]
push dword [esp + 0x34]
call fcn.00439ae0
add esp, 4
cmp dword [esp + 0xfc], 0
je 0x438a95
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x438a95
mov ecx, dword [esp + 0xfc]
mov ebp, dword [ecx + 0x28]
test ebp, ebp
je 0x438a80
mov edx, dword [esp + 0x88]
mov edi, dword [ecx + 0x24]
shl ebp, 3
mov dword [esp + 0x10], ebp
lea eax, [edx + eax*8]
mov dword [esp + 0x30], edx
mov dword [esp + 0xc], eax
mov eax, dword [ecx + 0x34]
mov dword [esp + 0x2c], eax
mov eax, dword [ecx + 0x30]
mov dword [esp + 0x28], eax
mov eax, edx
jmp 0x438a02
mov eax, dword [esp + 8]
mov ebp, dword [esp + 0x10]
cmp eax, dword [esp + 0xc]
je 0x438a95
mov ecx, dword [eax]
mov esi, dword [eax + 4]
add eax, 8
xor ebx, ebx
mov dword [esp + 8], eax
mov dword [esp], ecx
jmp 0x438a26
inc ebx
add ebp, 0xfffffff8
je 0x4389f0
cmp dword [edi + ebx*8 + 4], esi
jne 0x438a20
push esi
push dword [esp + 4]
push dword [edi + ebx*8]
call fcn.007be090
add esp, 0xc
test eax, eax
jne 0x438a20
cmp ebx, dword [esp + 0x2c]
jae 0x439326
mov ecx, dword [esp + 0x28]
lea eax, [ebx + ebx*4]
shl eax, 4
cmp byte [ecx + eax + 0x45], 0
je 0x4389f0
cmp dword [esp + 0x84], 0
je 0x4388d0
push dword [esp + 0x30]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4388d0
shl eax, 3
nop word cs:[eax + eax]
nop dword [eax]
add eax, 0xfffffff8
jne 0x438a90
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0xd4]
push dword [esp + 0x34]
call fcn.00439db0
add esp, 4
mov ecx, dword [esp + 0x7c]
mov eax, dword [esp + 0x78]
test ecx, ecx
mov dword [esp + 8], eax
mov eax, ecx
mov dword [esp], ecx
je 0x438b30
mov eax, dword [esp + 8]
mov ebx, dword [esp + 0xd8]
mov ebp, dword [esp + 0xdc]
lea esi, [eax + 8]
mov eax, dword [esp]
lea eax, [eax*4]
lea edi, [eax + eax*2]
jmp 0x438af8
add esi, 0xc
add edi, 0xfffffff4
je 0x438b30
cmp dword [esi], ebp
jne 0x438af0
push ebp
push ebx
push dword [esi - 4]
call fcn.007be090
mov ecx, dword [esp + 0x78]
add esp, 0xc
test eax, eax
jne 0x438af0
cmp dword [esp + 0xd4], 0
je 0x438b75
push ebx
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0x6c]
jmp 0x438b75
mov edx, dword [esp]
cmp edx, dword [esp + 0x74]
jne 0x438b4c
lea ecx, [esp + 0x74]
call fcn.0045d970
mov esi, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
jmp 0x438b50
mov esi, dword [esp + 8]
mov ecx, dword [esp + 0xdc]
lea eax, [edx + edx*2]
inc edx
mov dword [esi + eax*4 + 8], ecx
mov ecx, dword [esp + 0x6c]
movsd xmm0, qword [esp + 0xd4]
movsd qword [esi + eax*4], xmm0
mov dword [esp + 0x7c], edx
mov eax, dword [esp + 0x84]
mov edx, dword [esp + 0x88]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x2c], edx
test eax, eax
je 0x438c60
lea eax, [edx + eax*8]
mov dword [esp + 0x10], eax
jmp 0x438bdb
mov eax, dword [esp]
mov dword [ecx + edx*8], eax
mov dword [ecx + edx*8 + 4], edi
inc edx
mov dword [esp + 0x50], edx
mov dword [esp + 0xb4], edx
mov edx, dword [esp + 8]
mov ebx, dword [esp + 0x20]
add edx, 8
cmp edx, dword [esp + 0x10]
je 0x438c64
mov eax, dword [edx]
mov edi, dword [edx + 4]
cmp dword [esp + 0x50], 0
mov dword [esp + 8], edx
mov dword [esp], eax
je 0x438c30
mov eax, dword [esp + 0x50]
xor esi, esi
lea ebx, [eax*8]
jmp 0x438c07
add esi, 8
cmp ebx, esi
je 0x438c30
cmp dword [ecx + esi + 4], edi
jne 0x438c00
push edi
push dword [esp + 4]
push dword [ecx + esi]
mov ebp, ecx
call fcn.007be090
mov ecx, ebp
add esp, 0xc
test eax, eax
jne 0x438c00
jmp 0x438bc6
mov edx, dword [esp + 0x50]
cmp edx, dword [esp + 0xac]
jne 0x438bb0
lea ecx, [esp + 0xac]
call fcn.004c7a80
mov ecx, dword [esp + 0xb0]
mov edx, dword [esp + 0xb4]
jmp 0x438bb0
mov ebx, dword [esp + 0x20]
cmp dword [esp + 0xc], 0
mov dword [esp + 0x6c], ecx
je 0x438c81
push dword [esp + 0x2c]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 4]
jmp 0x4388dc
mov ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x68]
mov edx, dword [esp + 0xb0]
mov esi, dword [esp + 0xf4]
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 4
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 4
mov dword [esp + 0x40], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 4
mov dword [esp + 4], 0
mov dword [esp + 0x48], 4
lea eax, [ecx + eax*8]
add edx, 4
mov dword [esp + 0x80], ecx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 0x34], edx
mov eax, dword [eax + 4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x50]
lea eax, [eax*8]
mov dword [esp + 0x4c], eax
mov eax, ecx
jmp 0x438d38
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
test eax, eax
je 0x438d50
cmp eax, dword [esp + 0x2c]
je 0x438d50
lea edi, [eax + 8]
mov ecx, eax
mov dword [esp + 0x10], esi
jmp 0x438d6f
test esi, esi
je 0x438fe6
cmp esi, dword [esp + 0x70]
je 0x438fe6
lea eax, [esi + 8]
mov ecx, esi
xor edi, edi
mov dword [esp + 0x10], eax
mov esi, eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0xc], edi
mov edx, dword [eax + 0x4c]
mov eax, edi
test edx, edx
je 0x438d38
mov eax, dword [esp + 0x20]
mov esi, dword [ecx]
imul ebp, edx, 0x134
mov edi, dword [eax + 0x48]
mov eax, dword [ecx + 4]
mov dword [esp], eax
jmp 0x438dae
add edi, 0x134
add ebp, 0xfffffecc
je 0x438d30
cmp dword [edi + 0x118], eax
jne 0x438da0
mov ebx, dword [edi + 0x114]
push eax
push esi
push ebx
call fcn.007be090
add esp, 0xc
test eax, eax
mov eax, dword [esp]
jne 0x438da0
cmp dword [esp + 0x50], 0
mov dword [esp + 8], esi
je 0x438e15
mov ebp, dword [esp + 0x4c]
mov esi, dword [esp + 0x34]
jmp 0x438df8
add esi, 8
add ebp, 0xfffffff8
je 0x438e15
cmp dword [esi], eax
jne 0x438df0
push eax
push ebx
push dword [esi - 4]
call fcn.007be090
add esp, 0xc
test eax, eax
mov eax, dword [esp]
jne 0x438df0
jmp 0x438d30
mov esi, dword [esp + 0xfc]
test esi, esi
je 0x438e91
mov ecx, dword [esp + 0xfc]
mov ebp, dword [ecx + 0x28]
test ebp, ebp
je 0x438e91
mov esi, dword [ecx + 0x24]
shl ebp, 3
xor ebx, ebx
jmp 0x438e46
inc ebx
add ebp, 0xfffffff8
je 0x438e91
cmp dword [esi + ebx*8 + 4], eax
jne 0x438e40
push eax
push dword [esp + 0xc]
push dword [esi + ebx*8]
call fcn.007be090
add esp, 0xc
test eax, eax
mov eax, dword [esp]
jne 0x438e40
mov eax, dword [esp + 0xfc]
mov edx, dword [eax + 0x34]
cmp ebx, edx
jae 0x439344
mov eax, dword [eax + 0x30]
lea ecx, [ebx + ebx*4]
mov esi, dword [esp + 0x10]
shl ecx, 4
cmp byte [eax + ecx + 0x45], 0
mov eax, dword [esp + 0xc]
jne 0x438d38
lea ecx, [esp + 0x14]
mov edx, edi
push 1
push dword [esp + 0x34]
call fcn.00431f30
add esp, 8
cmp dword [edi + 0x14], 0
je 0x438f2a
mov edi, dword [edi + 0x18]
mov eax, dword [esp + 0x24]
lea edx, [edi + 1]
cmp eax, edx
jae 0x438edc
lea eax, [esp + 0x84]
mov dword [esp + 0x84], 0x80000000
lea ecx, [esp + 0x54]
push eax
call fcn.00439960
add esp, 4
mov eax, dword [esp + 0x5c]
cmp edi, eax
jae 0x439336
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x24], eax
lea eax, [edi + edi*2]
test dword [ecx + eax*4], 0x7fffffff
lea esi, [ecx + eax*4]
mov dword [esp + 0x48], ecx
je 0x438f10
push dword [esi + 4]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0x1c]
mov edi, dword [esp + 0xc]
mov dword [esi + 8], eax
movsd xmm0, qword [esp + 0x14]
movsd qword [esi], xmm0
jmp 0x438fdb
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
cmp dword [esp + 4], 0
mov ecx, dword [esp + 0x28]
mov dword [esp], eax
je 0x438f9e
mov eax, dword [esp + 4]
xor edi, edi
lea eax, [eax*4]
lea ebp, [eax + eax*2]
jmp 0x438f67
add edi, 0xc
cmp ebp, edi
je 0x438f9e
cmp dword [ecx + edi + 8], ebx
jne 0x438f60
push ebx
push esi
push dword [ecx + edi + 4]
call fcn.007be090
mov ecx, dword [esp + 0x34]
add esp, 0xc
test eax, eax
jne 0x438f60
cmp dword [esp], 0
je 0x438f98
push esi
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov edi, dword [esp + 0xc]
jmp 0x438fdb
mov edx, dword [esp + 4]
cmp edx, dword [esp + 0x38]
jne 0x438fb9
lea ecx, [esp + 0x38]
call fcn.0045d970
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
mov edi, dword [esp + 0xc]
mov ebp, dword [esp]
lea eax, [edx + edx*2]
inc edx
mov dword [esp + 0x28], ecx
mov dword [esp + 4], edx
mov dword [ecx + eax*4], ebp
mov dword [ecx + eax*4 + 4], esi
mov dword [ecx + eax*4 + 8], ebx
mov dword [esp + 0x40], edx
mov esi, dword [esp + 0x10]
mov eax, edi
jmp 0x438d38
mov ebp, dword [esp + 4]
mov edi, dword [esp + 0x38]
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 4
mov dword [esp + 0x1c], 0
lea eax, [ebp*4]
test ebp, ebp
lea ebx, [eax + eax*2]
jne 0x4392ec
xor ebp, ebp
mov ecx, 4
lea eax, [ebp + ebp*2]
mov dword [esp], ecx
lea eax, [ecx + eax*4]
push ebx
push esi
push eax
call fcn.007bd9b0
add esp, 0xc
mov eax, dword [esp + 4]
add eax, ebp
test edi, edi
mov ebx, eax
mov dword [esp + 0x1c], eax
je 0x439057
push esi
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x7c]
mov edi, dword [esp + 0x78]
mov dword [esp + 8], eax
lea eax, [ecx*4]
lea ebp, [eax + eax*2]
mov eax, dword [esp + 0x14]
sub eax, ebx
cmp eax, ecx
mov eax, ecx
jb 0x439308
mov ecx, dword [esp]
mov esi, eax
lea eax, [ebx + ebx*2]
mov dword [esp], ecx
lea eax, [ecx + eax*4]
push ebp
push edi
push eax
call fcn.007bd9b0
add esp, 0xc
add esi, ebx
cmp dword [esp + 8], 0
mov dword [esp + 0x10], esi
mov dword [esp + 0x1c], esi
je 0x4390ba
push edi
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x54]
mov ebx, 0x80000001
mov dword [esp + 0x84], 0x80000001
mov dword [esp + 0x90], 0x80000001
lea ecx, [ecx + ecx*2]
mov ebp, edx
mov dword [esp + 0x9c], edx
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], eax
lea edi, [edx + ecx*4]
lea ecx, [esp + 0x88]
mov dword [esp + 0xa8], edi
test edx, edx
mov eax, ecx
je 0x4391e6
nop word cs:[eax + eax]
cmp ebx, 0x80000001
jg 0x439155
cmp ebp, edi
je 0x4391d7
mov ebx, dword [ebp]
cmp ebx, 0x80000001
je 0x4391d2
mov esi, ecx
lea ecx, [ebp + 0xc]
add ebp, 4
mov eax, ebp
mov ebp, ecx
mov ecx, esi
cmp ebx, 0x80000001
jle 0x439128
mov esi, edx
mov edx, dword [esp + 0x10]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
cmp edx, dword [esp + 0x14]
mov dword [esp + 0xc], eax
mov dword [esp + 0x8c], eax
mov dword [esp + 8], ecx
mov dword [esp + 0x88], ecx
jne 0x439193
lea ecx, [esp + 0x14]
call fcn.0045d970
mov esi, dword [esp + 0x48]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
jmp 0x439196
mov ecx, dword [esp]
lea eax, [edx + edx*2]
inc edx
mov dword [esp], ecx
mov dword [ecx + eax*4], ebx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x10], edx
mov dword [ecx + eax*4 + 8], ebx
mov ebx, dword [esp + 8]
mov dword [ecx + eax*4 + 4], ebx
mov dword [esp + 0x1c], edx
mov ebx, 0x80000000
lea ecx, [esp + 0x88]
mov edx, esi
test edx, edx
mov eax, ecx
jne 0x439120
jmp 0x4391e6
add ebp, 0xc
mov edi, ebp
movsd xmm0, qword [eax]
mov edx, edi
movsd qword [esp + 0x88], xmm0
lea ecx, [esp + 0x84]
mov dword [esp + 0x90], 0x80000001
mov dword [esp + 0x84], 0x80000001
mov dword [esp + 0xa0], edx
call fcn.004398a0
cmp dword [esp + 0xac], 0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0xc4]
movsd xmm0, qword [esp + 0x14]
mov dword [ecx + 8], eax
movsd qword [ecx], xmm0
je 0x439246
push dword [esp + 0xb0]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x60], 0
je 0x439262
push dword [esp + 0x80]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0xc8], 0
jne 0x4392d1
mov ecx, dword [esp + 0xbc]
test ecx, ecx
je 0x4392b2
mov eax, dword [esp + 0xb8]
lea esi, [eax + 4]
jmp 0x439296
add esi, 0x14
dec ecx
je 0x4392b2
cmp dword [esi - 4], 0
je 0x439290
push dword [esi]
push 0
push dword [0x94bf18]
mov edi, ecx
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, edi
jmp 0x439290
cmp dword [esp + 0xc0], 0
je 0x4392d1
push dword [esp + 0xb8]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
add esp, 0xe0
pop esi
pop edi
pop ebx
pop ebp
ret
mov edx, dword [esp + 0x48]
mov ecx, esi
push 0x8a8474
call fcn.007c1be0
lea ecx, [esp + 0x14]
xor edx, edx
push ebp
call fcn.007c1aa0
add esp, 4
mov ecx, dword [esp + 0x18]
mov ebp, dword [esp + 0x1c]
jmp 0x439023
lea ecx, [esp + 0x14]
mov esi, eax
mov edx, ebx
push eax
call fcn.007c1aa0
add esp, 4
mov ecx, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
jmp 0x439086
mov edx, dword [esp + 0x2c]
mov ecx, ebx
push 0x8a8474
call fcn.007c1be0
mov ecx, edi
mov edx, eax
push 0x80eaf4
call fcn.007c1be0
mov ecx, ebx
push 0x8a8474
call fcn.007c1be0
mov ecx, 4
mov edx, 4
call fcn.007c1490
int3