Function at 0x43c540
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x168
mov ebp, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, ecx
sub edx, eax
xor edi, edi
cmp edx, 2
jae 0x43c569
mov eax, edi
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
ret
cmp byte [eax], 0x67
jne 0x43c58a
cmp byte [eax + 1], 0x73
jne 0x43c58a
add eax, 2
mov dword [ebp], eax
mov edx, ecx
sub edx, eax
mov byte [esp + 0x1b], 1
cmp edx, 2
jb case.0x43c59a.58
jmp 0x43c58f
mov byte [esp + 0x1b], 0
movsx esi, byte [eax]
add esi, 0xffffffcf
cmp esi, 0x43
ja case.0x43c59a.58
jmp dword [esi*4 + 0x46a67c]
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x43ef20
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x43d800
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.0043b430
movsx ecx, byte [eax + 1]
add ecx, 0xffffffb2
cmp ecx, 0x2c
ja case.0x43c59a.58
jmp dword [ecx*4 + 0x46ac98]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x148], 0x46b871
mov dword [esp + 0x14c], 0x46b873
movsd xmm0, qword [esp + 0x148]
jmp 0x43d638
movsx ecx, byte [eax + 1]
add ecx, 0xffffff9d
cmp ecx, 0x13
ja case.0x43c59a.58
jmp dword [ecx*4 + 0x46ac48]
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.004380b0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0x14], eax
test eax, eax
je 0x43d751
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.0043e970
jmp 0x43d74a
movsx ecx, byte [eax + 1]
add ecx, 0xffffffaa
cmp ecx, 0x20
ja case.0x43c59a.58
jmp dword [ecx*4 + 0x46abc4]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x118], 0x46b8a5
mov dword [esp + 0x11c], 0x46b8a7
movsd xmm0, qword [esp + 0x118]
jmp 0x43d638
movsx ecx, byte [eax + 1]
cmp ecx, 0x4f
je 0x43cbb2
cmp ecx, 0x71
je 0x43cbdc
cmp ecx, 0x6f
jne case.0x43c59a.58
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x110], 0x46b8a8
mov dword [esp + 0x114], 0x46b8a9
movsd xmm0, qword [esp + 0x110]
jmp 0x43d638
movzx ecx, byte [eax + 1]
cmp cl, 0x70
jne 0x43ca88
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.0043e0f0
movsx ecx, byte [eax + 1]
cmp ecx, 0x74
je 0x43cab3
cmp ecx, 0x65
jne case.0x43c59a.58
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xf8], 0x46b8b0
mov dword [esp + 0xfc], 0x46b8b2
movsd xmm0, qword [esp + 0xf8]
jmp 0x43d638
movsx edx, byte [eax + 1]
cmp edx, 0x6c
je 0x43cadd
cmp edx, 0x78
jne case.0x43c59a.58
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0x14], eax
test eax, eax
je 0x43d751
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43f540
jmp 0x43d74a
movsx ecx, byte [eax + 1]
add ecx, 0xffffffad
cmp ecx, 0x21
ja case.0x43c59a.58
jmp dword [ecx*4 + 0x46ab3c]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xd8], 0x46b8bb
mov dword [esp + 0xdc], 0x46b8be
movsd xmm0, qword [esp + 0xd8]
jmp 0x43d638
movsx edx, byte [eax + 1]
add edx, 0xffffffb7
cmp edx, 0x24
ja case.0x43c59a.58
jmp dword [edx*4 + 0x46aaa8]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xc0], 0x46b8c3
mov dword [esp + 0xc4], 0x46b8c5
movsd xmm0, qword [esp + 0xc0]
jmp 0x43d638
movsx ecx, byte [eax + 1]
add ecx, 0xffffff9f
cmp ecx, 0x17
ja case.0x43c59a.58
jmp dword [ecx*4 + 0x46aa48]
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x43f930
movsx ecx, byte [eax + 1]
add ecx, 0xffffffae
cmp ecx, 0x20
ja case.0x43c59a.58
jmp dword [ecx*4 + 0x46a9c4]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x78], 0x46b8e1
mov dword [esp + 0x7c], 0x46b8e3
movsd xmm0, qword [esp + 0x78]
jmp 0x43d638
movsx edx, byte [eax + 1]
add edx, 0xffffffb4
cmp edx, 0x28
ja case.0x43c59a.58
jmp dword [edx*4 + 0x46a920]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x60], 0x46b8ea
mov dword [esp + 0x64], 0x46b8ec
movsd xmm0, qword [esp + 0x60]
jmp 0x43d638
cmp byte [eax + 1], 0x75
jne case.0x43c59a.58
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0x14], eax
test eax, eax
je 0x43d751
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0x2c], eax
test eax, eax
je 0x43d751
lea eax, [esp + 0x2c]
mov dword [esp + 4], eax
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43fda0
jmp 0x43d74a
movsx ecx, byte [eax + 1]
add ecx, 0xffffffb3
cmp ecx, 0x26
ja case.0x43c59a.58
jmp dword [ecx*4 + 0x46a884]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x40], 0x46b906
mov dword [esp + 0x44], 0x46b908
movsd xmm0, qword [esp + 0x40]
jmp 0x43d638
movsx edx, byte [eax + 1]
add edx, 0xffffffb0
cmp edx, 0x2a
ja case.0x43c59a.58
jmp dword [edx*4 + 0x46a7d8]
add eax, 2
mov dword [ebp], eax
mov edx, dword [ebp + 0xc]
sub edx, dword [ebp + 8]
sar edx, 2
mov dword [esp + 0x20], edx
lea edx, [ebp + 0x14]
mov dword [esp + 0x24], ebp
jmp 0x43c9ad
mov edx, ebx
lea ecx, [esi + 4]
mov dword [ebp + 0xc], ecx
mov dword [esi], eax
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
cmp eax, ecx
je 0x43c9ba
cmp byte [eax], 0x45
je 0x43d673
mov ebx, edx
mov ecx, ebp
call fcn.00439ee0
test eax, eax
je case.0x43c59a.58
mov esi, dword [ebp + 0xc]
cmp esi, dword [ebp + 0x10]
jne 0x43c99d
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 8]
mov edi, esi
sub edi, eax
lea ecx, [edi + edi]
cmp eax, ebx
je 0x43ca05
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ebp, eax
mov ecx, dword [esp + 0x24]
mov dword [ecx + 8], eax
test eax, eax
mov edx, ebx
jne 0x43ca36
jmp 0x43d758
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x43d758
mov ebp, eax
mov edx, ebx
cmp esi, ebx
je 0x43ca2f
mov dword [esp + 8], edi
mov dword [esp + 4], edx
mov dword [esp], ebp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov edx, ebx
mov ecx, dword [esp + 0x24]
mov dword [ecx + 8], ebp
mov eax, edi
sar eax, 2
sar edi, 1
lea esi, [eax*4]
add esi, ebp
lea eax, [edi*4]
add eax, ebp
mov dword [ecx + 0x10], eax
mov ebp, ecx
xor edi, edi
mov eax, dword [esp + 0x1c]
jmp 0x43c99f
movsx ecx, byte [eax + 1]
add ecx, 0xffffff9b
cmp ecx, 0x12
ja case.0x43c59a.58
jmp dword [ecx*4 + 0x46a78c]
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
jmp 0x43cf9e
cmp cl, 0x4c
jne 0x43caa2
cmp edx, 3
jb 0x43caa2
movsx eax, byte [eax + 2]
add eax, 0xffffffd0
cmp eax, 9
jbe 0x43c706
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x43e2e0
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xf0], 0x46b8b3
mov dword [esp + 0xf4], 0x46b8b4
movsd xmm0, qword [esp + 0xf0]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov edx, dword [ebp + 0xc]
sub edx, dword [ebp + 8]
sar edx, 2
mov dword [esp + 0x20], edx
lea edx, [ebp + 0x14]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], ebp
jmp 0x43cb46
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ecx, ebp
mov ebp, eax
mov dword [ecx + 8], eax
test eax, eax
je 0x43d758
mov eax, esi
sar eax, 2
sar esi, 1
lea edi, [eax*4]
add edi, ebp
lea eax, [esi*4]
add eax, ebp
mov dword [ecx + 0x10], eax
mov ebp, ecx
lea eax, [edi + 4]
mov dword [ebp + 0xc], eax
mov dword [edi], ebx
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
xor edi, edi
cmp eax, ecx
je 0x43cb53
cmp byte [eax], 0x45
je 0x43d278
mov ecx, ebp
call 0x43f5c0
test eax, eax
je case.0x43c59a.58
mov ebx, eax
mov edi, dword [ebp + 0xc]
cmp edi, dword [ebp + 0x10]
jne 0x43cb36
mov eax, dword [ebp + 8]
mov esi, edi
sub esi, eax
lea ecx, [esi + esi]
cmp eax, dword [esp + 0x1c]
jne 0x43cafd
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x43d758
mov ebp, eax
mov eax, dword [esp + 0x1c]
cmp edi, eax
je 0x43cba6
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ebp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov ecx, dword [esp + 0x24]
mov dword [ecx + 8], ebp
jmp 0x43cb18
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x108], 0x46b8aa
mov dword [esp + 0x10c], 0x46b8ac
movsd xmm0, qword [esp + 0x108]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x100], 0x46b8ad
mov dword [esp + 0x104], 0x46b8af
movsd xmm0, qword [esp + 0x100]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xe8], 0x46b8b5
mov dword [esp + 0xec], 0x46b8b7
movsd xmm0, qword [esp + 0xe8]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xe0], 0x46b8b8
mov dword [esp + 0xe4], 0x46b8ba
movsd xmm0, qword [esp + 0xe0]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xd0], 0x46b8bf
mov dword [esp + 0xd4], 0x46b8c0
movsd xmm0, qword [esp + 0xd0]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x88], 0x46b8dc
mov dword [esp + 0x8c], 0x46b8de
movsd xmm0, qword [esp + 0x88]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x80], 0x46b8df
mov dword [esp + 0x84], 0x46b8e0
movsd xmm0, qword [esp + 0x80]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0x14], eax
xor edi, edi
test eax, eax
je case.0x43c59a.58
mov eax, dword [ebp + 0xc]
sub eax, dword [ebp + 8]
sar eax, 2
mov dword [esp + 0x28], eax
lea esi, [ebp + 0x14]
mov dword [esp + 0x20], esi
jmp 0x43cd50
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ebp, eax
mov dword [esi + 8], eax
test eax, eax
je 0x43d758
mov ecx, dword [esp + 0x1c]
mov eax, ecx
sar eax, 2
sar ecx, 1
lea edi, [eax*4]
add edi, ebp
lea eax, [ecx*4]
add eax, ebp
mov dword [esi + 0x10], eax
mov ebp, esi
mov esi, dword [esp + 0x20]
lea eax, [edi + 4]
mov dword [ebp + 0xc], eax
mov dword [edi], ebx
mov eax, dword [ebp]
cmp eax, dword [ebp + 4]
je 0x43cd61
cmp byte [eax], 0x45
je 0x43d6b2
mov ecx, ebp
call fcn.0043c540
test eax, eax
je 0x43d751
mov ebx, eax
mov edi, dword [ebp + 0xc]
cmp edi, dword [ebp + 0x10]
jne 0x43cd48
mov eax, dword [ebp + 8]
mov ecx, edi
sub ecx, eax
mov dword [esp + 0x1c], ecx
add ecx, ecx
cmp eax, esi
mov esi, ebp
jne 0x43cd09
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x43d758
mov ebp, eax
mov eax, dword [esp + 0x20]
cmp edi, eax
je 0x43cdbf
mov ecx, dword [esp + 0x1c]
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], ebp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov dword [esi + 8], ebp
jmp 0x43cd22
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x138], 0x46b88b
mov dword [esp + 0x13c], 0x46b88c
movsd xmm0, qword [esp + 0x138]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x130], 0x46b88d
mov dword [esp + 0x134], 0x46b88e
movsd xmm0, qword [esp + 0x130]
jmp 0x43d537
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.0043ea90
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xb0], 0x46b8c6
mov dword [esp + 0xb4], 0x46b8c8
movsd xmm0, qword [esp + 0xb0]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xc8], 0x46b8c1
mov dword [esp + 0xcc], 0x46b8c2
movsd xmm0, qword [esp + 0xc8]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xb8], 0x46b89c
mov dword [esp + 0xbc], 0x46b89d
movsd xmm0, qword [esp + 0xb8]
jmp 0x43d638
lea edx, [eax + 2]
mov dword [ebp], edx
cmp edx, ecx
je 0x43d48d
cmp byte [edx], 0x5f
jne 0x43d48d
add eax, 3
mov dword [ebp], eax
mov dword [esp + 0xa8], 0x46b8c9
mov dword [esp + 0xac], 0x46b8cb
movsd xmm0, qword [esp + 0xa8]
jmp 0x43d537
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x30], 0x46b90c
mov dword [esp + 0x34], 0x46b90f
movsd xmm0, qword [esp + 0x30]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.004380b0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0x14], eax
test eax, eax
je 0x43d751
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43fe30
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x48], 0x46b904
mov dword [esp + 0x4c], 0x46b905
movsd xmm0, qword [esp + 0x48]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x38], 0x46b909
mov dword [esp + 0x3c], 0x46b90b
movsd xmm0, qword [esp + 0x38]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.004380b0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
lea eax, [esp + 0xc]
mov dword [esp], eax
mov ecx, ebp
mov edx, str.typeid__
call fcn.0043ffd0
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.004380b0
mov dword [esp + 0x14], eax
xor edi, edi
test eax, eax
je case.0x43c59a.58
mov eax, dword [ebp + 0xc]
sub eax, dword [ebp + 8]
sar eax, 2
mov dword [esp + 0x20], eax
lea ecx, [ebp + 0x14]
mov dword [esp + 0x24], ebp
jmp 0x43cffd
mov ecx, ebx
lea edx, [esi + 4]
mov dword [ebp + 0xc], edx
mov dword [esi], eax
mov eax, dword [ebp]
cmp eax, dword [ebp + 4]
je 0x43d00e
cmp byte [eax], 0x45
je 0x43d6f1
mov ebx, ecx
mov ecx, ebp
call 0x43f5c0
test eax, eax
je case.0x43c59a.58
mov esi, dword [ebp + 0xc]
cmp esi, dword [ebp + 0x10]
jne 0x43cff3
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 8]
mov edi, esi
sub edi, eax
lea ecx, [edi + edi]
cmp eax, ebx
je 0x43d057
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov edx, ebp
mov ebp, eax
mov dword [edx + 8], eax
test eax, eax
mov ecx, ebx
jne 0x43d088
jmp 0x43d758
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x43d758
mov ebp, eax
mov ecx, ebx
cmp esi, ebx
je 0x43d081
mov dword [esp + 8], edi
mov dword [esp + 4], ecx
mov dword [esp], ebp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov ecx, ebx
mov edx, dword [esp + 0x24]
mov dword [edx + 8], ebp
mov eax, edi
sar eax, 2
sar edi, 1
lea esi, [eax*4]
add esi, ebp
lea eax, [edi*4]
add eax, ebp
mov dword [edx + 0x10], eax
mov ebp, edx
xor edi, edi
mov eax, dword [esp + 0x1c]
jmp 0x43cff5
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
mov edx, 0x46b93a
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x4402a0
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.00440330
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xa0], 0x46b8cc
mov dword [esp + 0xa4], 0x46b8ce
movsd xmm0, qword [esp + 0xa0]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x98], 0x46b8c1
mov dword [esp + 0x9c], 0x46b8c2
movsd xmm0, qword [esp + 0x98]
jmp 0x43d537
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x90], 0x46b8cf
mov dword [esp + 0x94], 0x46b8d0
movsd xmm0, qword [esp + 0x90]
jmp 0x43d537
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43fd00
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x68], 0x46b8e8
mov dword [esp + 0x6c], 0x46b8e9
movsd xmm0, qword [esp + 0x68]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x70], 0x46b8e4
mov dword [esp + 0x74], 0x46b8e7
movsd xmm0, qword [esp + 0x70]
jmp 0x43d638
lea edx, [eax + 2]
mov dword [ebp], edx
cmp edx, ecx
je 0x43d649
cmp byte [edx], 0x5f
jne 0x43d649
add eax, 3
mov dword [ebp], eax
mov dword [esp + 0x58], 0x46b8ed
mov dword [esp + 0x5c], 0x46b8ef
movsd xmm0, qword [esp + 0x58]
jmp 0x43d537
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x50], 0x46b8e8
mov dword [esp + 0x54], 0x46b8e9
movsd xmm0, qword [esp + 0x50]
jmp 0x43d537
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0x14], eax
test eax, eax
je 0x43d751
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp], 0x46b8f0
jmp 0x43d5c0
inc eax
mov dword [ebp], eax
mov esi, dword [esp + 0x20]
shl esi, 2
mov edx, dword [ebp + 8]
add edx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov ecx, ebp
call fcn.00441f90
add esi, dword [ebp + 8]
mov dword [ebp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43f800
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x140], 0x46b874
mov dword [esp + 0x144], 0x46b875
movsd xmm0, qword [esp + 0x140]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x160], 0x46b86c
mov dword [esp + 0x164], 0x46b86e
movsd xmm0, qword [esp + 0x160]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x158], 0x46b86f
mov dword [esp + 0x15c], 0x46b870
movsd xmm0, qword [esp + 0x158]
jmp 0x43d537
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x150], 0x46b86f
mov dword [esp + 0x154], 0x46b870
movsd xmm0, qword [esp + 0x150]
jmp 0x43d638
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.004380b0
jmp 0x43d377
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
lea eax, [esp + 0xc]
mov dword [esp], eax
mov ecx, ebp
mov edx, str.alignof__
call 0x43d760
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
cmp ecx, eax
je case.0x43c59a.58
movzx eax, byte [eax]
cmp eax, 0x66
je 0x43d730
cmp eax, 0x54
jne case.0x43c59a.58
mov ecx, ebp
call fcn.0043b430
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.00440070
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.004380b0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0x14], eax
test eax, eax
je 0x43d751
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43fec0
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.0043ff50
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.004380b0
jmp 0x43d469
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
lea eax, [esp + 0xc]
mov dword [esp], eax
mov ecx, ebp
mov edx, str.sizeof__
call fcn.0043ffd0
jmp 0x43d74a
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov dword [esp], 0x46b8c9
jmp 0x43d663
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov byte [esp + 0x14], 1
jmp 0x43d566
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.004380b0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0x14], eax
test eax, eax
je 0x43d751
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.0043ee90
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x128], 0x46b89c
mov dword [esp + 0x12c], 0x46b89d
movsd xmm0, qword [esp + 0x128]
movsd qword [esp], xmm0
mov ecx, ebp
call fcn.0043e8d0
jmp 0x43c55e
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov byte [esp + 0x14], 0
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
lea eax, [esp + 0x1b]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.0043ee00
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0x14], eax
test eax, eax
je 0x43d751
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp], 0x46b89e
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43f410
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0x14], eax
test eax, eax
je 0x43d751
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43f4b0
jmp 0x43d74a
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x120], 0x46b8a3
mov dword [esp + 0x124], 0x46b8a4
movsd xmm0, qword [esp + 0x120]
movsd qword [esp], xmm0
mov ecx, ebp
call fcn.0043e820
jmp 0x43c55e
mov ecx, ebp
call fcn.0043c540
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
mov dword [esp], 0x46b8ed
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43f890
jmp 0x43d74a
inc eax
mov dword [ebp], eax
mov esi, dword [esp + 0x20]
shl esi, 2
mov edx, dword [ebp + 8]
add edx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov ecx, ebp
call fcn.00441f90
add esi, dword [ebp + 8]
mov dword [ebp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.00440190
mov dword [esp + 0xc], eax
jmp 0x43d73f
inc eax
mov dword [ebp], eax
mov esi, dword [esp + 0x28]
shl esi, 2
mov edx, dword [ebp + 8]
add edx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov ecx, ebp
call fcn.00441f90
add esi, dword [ebp + 8]
mov dword [ebp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
mov dword [esp], eax
lea edx, [esp + 0x14]
mov ecx, ebp
call fcn.0043ea00
jmp 0x43d74a
inc eax
mov dword [ebp], eax
mov esi, dword [esp + 0x20]
shl esi, 2
mov edx, dword [ebp + 8]
add edx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov ecx, ebp
call fcn.00441f90
add esi, dword [ebp + 8]
mov dword [ebp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
mov dword [esp], eax
lea edx, [esp + 0x14]
mov ecx, ebp
call fcn.00440210
jmp 0x43d74a
mov ecx, ebp
call fcn.0043e0f0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43d751
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.004400f0
mov edi, eax
jmp case.0x43c59a.58
xor edi, edi
jmp case.0x43c59a.58
call fcn.0041d310
nop dword [eax]
push ebp
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43d7a2
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43d7fa
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ebx, dword [edi + 0x116c]
mov ebp, dword [ebx + 4]
lea edi, [ebx + ebp]
add edi, 0xffffffe8
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
add eax, esi
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov dword [ebx + ebp - 0x14], 0x101012f
mov dword [ebx + ebp - 0x18], 0x46c754
mov dword [ebx + ebp - 0x10], esi
mov dword [ebx + ebp - 0xc], eax
mov dword [ebx + ebp - 8], ecx
mov dword [ebx + ebp - 4], 0x46b86a
mov dword [ebx + ebp], 0x46b86b
mov eax, edi
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041d310
nop
push ebp
push ebx
push edi
push esi
push eax
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, ecx
sub edx, eax
cmp edx, 3
jae 0x43ef4c
cmp edx, 2
je 0x43f00d
mov ecx, esi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
jmp 0x442450
movzx edx, byte [eax]
cmp dl, 0x73
jne 0x43f010
cmp byte [eax + 1], 0x72
jne 0x43f00d
cmp byte [eax + 2], 0x4e
jne 0x43f00d
add eax, 3
mov dword [esi], eax
mov ecx, esi
call fcn.00442260
test eax, eax
je 0x43f3e2
mov edi, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x43f36b
cmp byte [eax], 0x49
jne 0x43f36b
xor ebp, ebp
mov ecx, esi
xor edx, edx
call fcn.0043ad70
test eax, eax
je 0x43f3e4
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43efe9
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f407
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x46cf90
jmp 0x43f35e
movzx edx, byte [eax]
cmp dl, 0x67
jne 0x43f030
cmp byte [eax + 1], 0x73
jne 0x43f03d
add eax, 2
mov dword [esi], eax
mov edx, ecx
sub edx, eax
mov bl, 1
cmp edx, 2
jae 0x43f032
jmp 0x43f1b1
xor ebx, ebx
cmp byte [eax], 0x73
jne 0x43f1b1
jmp 0x43f048
xor ebx, ebx
cmp byte [eax], 0x73
jne 0x43f1b1
cmp byte [eax + 1], 0x72
jne 0x43f1b1
add eax, 2
mov dword [esi], eax
cmp ecx, eax
je 0x43f235
movsx eax, byte [eax]
add eax, 0xffffffd0
cmp eax, 9
ja 0x43f235
mov dword [esp], ebx
mov ecx, esi
call 0x4423a0
test eax, eax
je 0x43f3e2
mov ebx, eax
xor edi, edi
jmp 0x43f0a3
mov ecx, esi
call 0x4423a0
mov ebx, eax
xor ebp, ebp
test eax, eax
je 0x43f3e4
test edi, edi
je 0x43f120
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43f0e5
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f407
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov ecx, dword [esi + 0x116c]
mov edx, dword [ecx + 4]
lea eax, [ecx + edx]
add eax, 0xfffffff8
mov dword [ecx + edx - 4], 0x1010116
mov dword [ecx + edx - 8], 0x46c030
mov dword [ecx + edx], edi
add ecx, edx
add ecx, 4
jmp 0x43f190
cmp byte [esp], 0
je 0x43f1ad
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43f168
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f407
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
add ecx, 0x10
mov dword [edi + 4], ecx
mov edx, dword [esi + 0x116c]
mov edi, dword [edx + 4]
lea ecx, [edx + edi]
lea eax, [edx + edi]
add eax, 0xfffffff8
mov dword [edx + edi - 4], 0x1010121
mov dword [edx + edi - 8], 0x46c3e4
mov dword [ecx], ebx
mov edi, eax
mov eax, dword [esi]
cmp eax, dword [esi + 4]
je 0x43f090
cmp byte [eax], 0x45
jne 0x43f090
jmp 0x43f2db
mov edi, ebx
jmp 0x43f194
mov ecx, esi
call 0x442450
mov ebp, eax
test bl, bl
je 0x43f3e4
test ebp, ebp
je 0x43f3e4
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43f208
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f407
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
add ecx, 0x10
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010121
mov dword [eax + ecx - 8], 0x46c3e4
mov dword [eax + ecx], ebp
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
jmp 0x43f3e4
mov ecx, esi
call fcn.00442260
test eax, eax
je 0x43f3e2
mov edi, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x43f2de
cmp byte [eax], 0x49
jne 0x43f2de
xor ebp, ebp
mov ecx, esi
xor edx, edx
call fcn.0043ad70
test eax, eax
je 0x43f3e4
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43f2ad
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f407
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x46cf90
mov dword [eax + ecx], edi
lea edi, [eax + ecx]
add edi, 0xfffffff8
mov dword [eax + ecx + 4], ebx
jmp 0x43f2de
inc eax
mov dword [esi], eax
mov ecx, esi
call 0x442450
test eax, eax
je 0x43f3e2
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43f32d
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f407
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
mov dword [eax + ecx - 4], 0x1010116
mov dword [eax + ecx - 8], 0x46c030
mov dword [eax + ecx], edi
mov dword [eax + ecx + 4], ebx
jmp 0x43f3e4
mov dword [eax + ecx], edi
lea edi, [eax + ecx]
add edi, 0xfffffff8
mov dword [eax + ecx + 4], ebx
mov eax, dword [esi]
cmp eax, dword [esi + 4]
je 0x43f377
cmp byte [eax], 0x45
je 0x43f3ee
mov ecx, esi
call 0x4423a0
test eax, eax
je 0x43f3e2
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43f3be
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f407
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010116
mov dword [eax + ecx - 8], 0x46c030
jmp 0x43f35e
xor ebp, ebp
mov eax, ebp
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
inc eax
mov dword [esi], eax
mov ecx, esi
call 0x442450
mov ebp, 0
test eax, eax
jne 0x43f2ed
jmp 0x43f3e4
call fcn.0041d310
nop dword [eax]
push ebp
push ebx
push edi
push esi
mov ebp, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f452
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f4a9
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ebx, dword [edi + 0x116c]
mov esi, dword [ebx + 4]
lea edi, [ebx + esi]
add edi, 0xffffffe8
mov ebp, dword [ebp]
push dword [esp + 0x14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edx, dword [esp + 0x14]
add eax, edx
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
mov dword [ebx + esi - 0x14], 0x101012e
mov dword [ebx + esi - 0x18], 0x46c454
mov dword [ebx + esi - 0x10], ebp
mov dword [ebx + esi - 0xc], edx
mov dword [ebx + esi - 8], eax
mov dword [ebx + esi - 4], ecx
mov eax, edi
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041d310
nop
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f4f1
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f53a
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x10]
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xffffffe8
mov esi, dword [esi]
mov edx, dword [edx]
mov dword [ecx + edi - 0x14], 0x101012e
mov dword [ecx + edi - 0x18], 0x46c454
mov dword [ecx + edi - 0x10], esi
mov dword [ecx + edi - 0xc], 0x46b8a1
mov dword [ecx + edi - 8], 0x46b8a2
mov dword [ecx + edi - 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.0041d310
nop
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43f581
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f5b9
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x10]
add ecx, 0x10
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xfffffff8
mov esi, dword [esi]
mov edx, dword [edx]
mov dword [ecx + edi - 4], 0x101012b
mov dword [ecx + edi - 8], 0x46c4bc
mov dword [ecx + edi], esi
mov dword [ecx + edi + 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.0041d310
nop
push ebp
push ebx
push edi
push esi
push eax
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
sub ecx, eax
je 0x43f6a3
cmp byte [eax], 0x64
jne 0x43f6a3
cmp ecx, 2
jb 0x43f6a3
movsx ecx, byte [eax + 1]
cmp ecx, 0x58
je 0x43f6b1
cmp ecx, 0x78
je 0x43f764
cmp ecx, 0x69
jne 0x43f6a3
add eax, 2
mov dword [esi], eax
mov ecx, esi
call fcn.004425f0
xor edi, edi
test eax, eax
je 0x43f7f1
mov ebx, eax
mov ecx, esi
call 0x43f5c0
test eax, eax
je 0x43f7f1
mov ebp, eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f66c
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f7fb
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea edi, [eax + ecx]
add edi, 0xffffffe8
mov dword [eax + ecx - 0x14], 0x1010141
mov dword [eax + ecx - 0x18], 0x46c52c
mov dword [eax + ecx - 0x10], ebx
mov dword [eax + ecx - 0xc], ebp
mov byte [eax + ecx - 8], 0
jmp 0x43f7f1
mov ecx, esi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.0043c540
add eax, 2
mov dword [esi], eax
mov ecx, esi
call fcn.0043c540
xor edi, edi
test eax, eax
je 0x43f7f1
mov ebx, eax
mov ecx, esi
call fcn.0043c540
test eax, eax
je 0x43f7f1
mov ebp, eax
mov ecx, esi
call 0x43f5c0
test eax, eax
je 0x43f7f1
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea edx, [ecx - 0xfd8]
cmp edx, 0xfffff007
ja 0x43f72e
mov dword [esp], eax
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f7fb
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
mov eax, dword [esp]
add ecx, 0x20
mov dword [edi + 4], ecx
mov edx, dword [esi + 0x116c]
mov ecx, dword [edx + 4]
lea edi, [edx + ecx]
add edi, 0xffffffe8
mov dword [edx + ecx - 0x14], 0x1010142
mov dword [edx + ecx - 0x18], 0x46c598
mov dword [edx + ecx - 0x10], ebx
mov dword [edx + ecx - 0xc], ebp
mov dword [edx + ecx - 8], eax
jmp 0x43f7f1
add eax, 2
mov dword [esi], eax
mov ecx, esi
call fcn.0043c540
xor edi, edi
test eax, eax
je 0x43f7f1
mov ebx, eax
mov ecx, esi
call 0x43f5c0
test eax, eax
je 0x43f7f1
mov ebp, eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f7bf
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f7fb
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea edi, [eax + ecx]
add edi, 0xffffffe8
mov dword [eax + ecx - 0x14], 0x1010141
mov dword [eax + ecx - 0x18], 0x46c52c
mov dword [eax + ecx - 0x10], ebx
mov dword [eax + ecx - 0xc], ebp
mov byte [eax + ecx - 8], 1
mov eax, edi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041d310
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f841
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f87f
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edx, dword [ecx + 4]
lea eax, [ecx + edx]
add eax, 0xffffffe8
mov edi, dword [esi]
mov esi, dword [esi + 4]
mov dword [ecx + edx - 0x14], 0x1010138
mov dword [ecx + edx - 0x18], 0x46c60c
mov dword [ecx + edx - 0x10], 0
mov dword [ecx + edx - 0xc], edi
mov dword [ecx + edx - 8], esi
pop esi
pop edi
pop ebx
ret
call fcn.0041d310
nop word cs:[eax + eax]
push ebp
push ebx
push edi
push esi
mov ebp, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f8d2
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f91f
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ebx, dword [edi + 0x116c]
mov esi, dword [ebx + 4]
lea edi, [ebx + esi]
add edi, 0xffffffe8
mov ebp, dword [ebp]
push dword [esp + 0x14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ecx, dword [esp + 0x14]
add eax, ecx
mov dword [ebx + esi - 0x14], 0x101012c
mov dword [ebx + esi - 0x18], 0x46c678
mov dword [ebx + esi - 0x10], ebp
mov dword [ebx + esi - 0xc], ecx
mov dword [ebx + esi - 8], eax
mov eax, edi
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041d310
nop word cs:[eax + eax]
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov ebx, ecx
mov ecx, dword [ecx]
mov edx, dword [ebx + 4]
mov esi, edx
sub esi, ecx
xor eax, eax
cmp esi, 2
jb 0x43fc41
cmp byte [ecx], 0x67
jne 0x43f977
xor eax, eax
cmp byte [ecx + 1], 0x73
jne 0x43f977
add ecx, 2
mov dword [ebx], ecx
mov esi, edx
sub esi, ecx
mov edi, ebx
mov bl, 1
mov dword [esp + 4], ebx
mov ebx, edi
cmp esi, 2
jae 0x43f97f
jmp 0x43fc41
mov dword [esp + 4], 0
movzx eax, word [ecx]
movd xmm0, eax
pcmpeqb xmm0, xmmword [0x46ae90]
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0x60
pshufd xmm0, xmm0, 0x50
movmskpd eax, xmm0
test al, 1
je 0x43fc3f
cmp byte [ecx + 1], 0x77
je 0x43f9c1
cmp byte [ecx], 0x6e
jne 0x43fc3f
cmp byte [ecx + 1], 0x61
jne 0x43fc3f
shr al, 1
mov dword [esp + 0x1c], eax
add ecx, 2
mov dword [ebx], ecx
mov eax, dword [ebx + 0xc]
sub eax, dword [ebx + 8]
sar eax, 2
mov dword [esp + 8], eax
lea eax, [ebx + 0x14]
mov dword [esp], eax
mov dword [esp + 0xc], ebx
jmp 0x43fa29
push ecx
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ecx, ebx
add esp, 8
mov ebx, eax
mov dword [ecx + 8], eax
test eax, eax
je 0x43fcf5
mov eax, esi
sar eax, 2
sar esi, 1
lea ebp, [ebx + eax*4]
lea eax, [ebx + esi*4]
mov dword [ecx + 0x10], eax
mov ebx, ecx
lea eax, [ebp + 4]
mov dword [ebx + 0xc], eax
mov dword [ebp], edi
mov ecx, dword [ebx]
mov edx, dword [ebx + 4]
cmp ecx, edx
je 0x43fa32
cmp byte [ecx], 0x5f
je 0x43fa88
mov ecx, ebx
call fcn.0043c540
test eax, eax
je 0x43fc3f
mov edi, eax
mov ebp, dword [ebx + 0xc]
cmp ebp, dword [ebx + 0x10]
jne 0x43fa1b
mov eax, dword [ebx + 8]
mov esi, ebp
sub esi, eax
lea ecx, [esi + esi]
cmp eax, dword [esp]
jne 0x43f9f0
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43fcf5
mov ebx, eax
mov eax, dword [esp]
cmp ebp, eax
je 0x43fa7f
push esi
push eax
push ebx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0xc]
mov dword [ecx + 8], ebx
jmp 0x43fa09
inc ecx
mov dword [ebx], ecx
mov esi, dword [esp + 8]
shl esi, 2
mov edx, dword [ebx + 8]
add edx, esi
mov ecx, ebx
push dword [ebx + 0xc]
call fcn.00441f90
add esp, 4
mov edi, eax
mov ebp, edx
add esi, dword [ebx + 8]
mov dword [ebx + 0xc], esi
mov ecx, ebx
call fcn.004380b0
test eax, eax
je 0x43fc3f
mov dword [esp + 8], eax
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov edx, eax
sub edx, ecx
cmp edx, 2
jb 0x43faf9
cmp byte [ecx], 0x70
jne 0x43faf9
cmp byte [ecx + 1], 0x69
jne 0x43faf9
mov dword [esp + 0x10], edi
add ecx, 2
mov dword [ebx], ecx
mov edx, dword [ebx + 0xc]
sub edx, dword [ebx + 8]
sar edx, 2
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], ebp
jmp 0x43fbe3
cmp ecx, eax
je 0x43fc3f
cmp byte [ecx], 0x45
mov eax, 0
jne 0x43fc41
inc ecx
mov dword [ebx], ecx
mov esi, dword [ebx + 0x116c]
mov ecx, dword [esi + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43fb50
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43fcf5
mov dword [eax], esi
mov dword [eax + 4], 0
mov dword [ebx + 0x116c], eax
xor ecx, ecx
mov esi, eax
add ecx, 0x20
mov dword [esi + 4], ecx
mov ecx, dword [ebx + 0x116c]
mov edx, dword [ecx + 4]
lea eax, [ecx + edx]
add eax, 0xffffffe8
mov dword [ecx + edx - 0x14], 0x1010133
mov dword [ecx + edx - 0x18], 0x46c6e0
mov dword [ecx + edx - 0xc], ebp
mov dword [ecx + edx - 0x10], edi
mov esi, dword [esp + 8]
mov dword [ecx + edx - 8], esi
mov dword [ecx + edx - 4], 0
mov dword [ecx + edx], 0
mov edx, dword [esp + 4]
mov byte [eax + 0x1c], dl
mov ecx, dword [esp + 0x1c]
mov byte [eax + 0x1d], cl
jmp 0x43fc41
push ecx
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ecx, ebx
add esp, 8
mov ebx, eax
mov dword [ecx + 8], eax
test eax, eax
je 0x43fcf5
mov eax, ebp
sar eax, 2
sar ebp, 1
lea esi, [ebx + eax*4]
lea eax, [ebx + ebp*4]
mov dword [ecx + 0x10], eax
mov ebx, ecx
mov ebp, dword [esp + 0x18]
lea eax, [esi + 4]
mov dword [ebx + 0xc], eax
mov dword [esi], edi
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
cmp ecx, eax
je 0x43fbec
cmp byte [ecx], 0x45
je 0x43fc49
mov ecx, ebx
call fcn.0043c540
test eax, eax
je 0x43fc3f
mov edi, eax
mov esi, dword [ebx + 0xc]
cmp esi, dword [ebx + 0x10]
jne 0x43fbd6
mov eax, dword [ebx + 8]
mov ebp, esi
sub ebp, eax
mov ecx, ebp
add ecx, ebp
cmp eax, dword [esp]
jne 0x43fba7
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43fcf5
mov ebx, eax
mov eax, dword [esp]
cmp esi, eax
je 0x43fc36
push ebp
push eax
push ebx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0xc]
mov dword [ecx + 8], ebx
jmp 0x43fbc0
xor eax, eax
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret
inc ecx
mov dword [ebx], ecx
mov esi, dword [esp + 0x14]
shl esi, 2
mov edx, dword [ebx + 8]
add edx, esi
mov ecx, ebx
push dword [ebx + 0xc]
call fcn.00441f90
add esp, 4
mov dword [esp], eax
mov edi, edx
add esi, dword [ebx + 8]
mov dword [ebx + 0xc], esi
mov esi, dword [ebx + 0x116c]
mov ecx, dword [esi + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43fcaa
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43fcf5
mov dword [eax], esi
mov dword [eax + 4], 0
mov dword [ebx + 0x116c], eax
xor ecx, ecx
mov esi, eax
mov edx, dword [esp + 4]
add ecx, 0x20
mov dword [esi + 4], ecx
mov eax, dword [ebx + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x1010133
mov dword [eax + ecx - 0x18], 0x46c6e0
mov dword [eax + ecx - 0xc], ebp
mov esi, dword [esp + 0x10]
mov dword [eax + ecx - 0x10], esi
mov esi, dword [esp + 8]
mov dword [eax + ecx - 8], esi
mov dword [eax + ecx], edi
mov esi, dword [esp]
mov dword [eax + ecx - 4], esi
add eax, ecx
add eax, 0xffffffe8
jmp 0x43fb98
call fcn.0041d310
nop word [eax + eax]
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43fd41
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43fd8f
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edx, dword [ecx + 4]
lea eax, [ecx + edx]
add eax, 0xffffffe8
mov esi, dword [esi]
mov dword [ecx + edx - 0x14], 0x101012f
mov dword [ecx + edx - 0x18], 0x46c754
mov dword [ecx + edx - 0x10], 0x46b8d1
mov dword [ecx + edx - 0xc], 0x46b8db
mov dword [ecx + edx - 8], esi
mov dword [ecx + edx - 4], 0x46b86a
mov dword [ecx + edx], 0x46b86b
pop esi
pop edi
pop ebx
ret
call fcn.0041d310
nop word cs:[eax + eax]
push ebp
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43fde2
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43fe27
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xffffffe8
mov esi, dword [esi]
mov ebx, dword [ebp]
mov edx, dword [edx]
mov dword [ecx + edi - 0x14], 0x101012d
mov dword [ecx + edi - 0x18], 0x46c7c0
mov dword [ecx + edi - 0x10], esi
mov dword [ecx + edi - 0xc], ebx
mov dword [ecx + edi - 8], edx
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041d310
nop dword [eax]
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43fe71
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43feba
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x10]
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xffffffe8
mov esi, dword [esi]
mov edx, dword [edx]
mov dword [ecx + edi - 0x14], 0x1010130
mov dword [ecx + edi - 0x18], 0x46be70
mov dword [ecx + edi - 0x10], 0x46b8f3
mov dword [ecx + edi - 0xc], 0x46b903
mov dword [ecx + edi - 8], esi
mov dword [ecx + edi - 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.0041d310
nop
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43ff01
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43ff4a
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x10]
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xffffffe8
mov esi, dword [esi]
mov edx, dword [edx]
mov dword [ecx + edi - 0x14], 0x1010130
mov dword [ecx + edi - 0x18], 0x46be70
mov dword [ecx + edi - 0x10], 0x46b910
mov dword [ecx + edi - 0xc], 0x46b91b
mov dword [ecx + edi - 8], esi
mov dword [ecx + edi - 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.0041d310
nop
push ebp
push ebx
push edi
push esi
mov edi, ecx
call fcn.004425f0
test eax, eax
je 0x44243e
mov esi, eax
mov eax, dword [edi]
cmp dword [edi + 4], eax
je 0x44243a
cmp byte [eax], 0x49
jne 0x44243a
xor ebp, ebp
mov ecx, edi
xor edx, edx
call fcn.0043ad70
test eax, eax
je 0x442440
mov ebx, eax
mov ebp, dword [edi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x44240c
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442447
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [edi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x46cf90
mov dword [eax + ecx], esi
mov dword [eax + ecx + 4], ebx
jmp 0x442440
mov ebp, esi
jmp 0x442440
xor ebp, ebp
mov eax, ebp
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041d310
nop dword [eax]
push ebp
push ebx
push edi
push esi
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, ecx
sub edx, eax
je 0x442477
movsx edi, byte [eax]
add edi, 0xffffffd0
cmp edi, 9
ja 0x442477
mov ecx, esi
pop esi
pop edi
pop ebx
pop ebp
jmp 0x4423a0
cmp edx, 2
jb 0x4424c5
movzx edx, byte [eax]
cmp dl, 0x64
jne 0x4424b5
cmp byte [eax + 1], 0x6e
jne 0x4424b2
add eax, 2
mov dword [esi], eax
cmp ecx, eax
je 0x442570
movsx eax, byte [eax]
add eax, 0xffffffd0
cmp eax, 9
ja 0x442570
mov ecx, esi
call 0x4423a0
jmp 0x442577
movzx edx, byte [eax]
cmp dl, 0x6f
jne 0x4424c5
cmp byte [eax + 1], 0x6e
jne 0x4424c5
add eax, 2
mov dword [esi], eax
xor ebp, ebp
mov ecx, esi
xor edx, edx
call fcn.004428c0
test eax, eax
je 0x442569
mov edi, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x442567
cmp byte [eax], 0x49
jne 0x442567
xor ebp, ebp
mov ecx, esi
xor edx, edx
call fcn.0043ad70
test eax, eax
je 0x442569
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x442539
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x4425e5
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x46cf90
mov dword [eax + ecx], edi
mov dword [eax + ecx + 4], ebx
jmp 0x442569
mov ebp, edi
mov eax, ebp
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, esi
call fcn.00442260
mov edi, eax
test eax, eax
je 0x4425e1
mov ebx, dword [esi + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x4425b7
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x4425e5
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x10
mov dword [ebx + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
mov dword [eax + ecx - 4], 0x1010126
mov dword [eax + ecx - 8], 0x46c09c
mov dword [eax + ecx], edi
jmp 0x442569
xor ebp, ebp
jmp 0x442569
call fcn.0041d310
nop word [eax + eax]