Function at 0x64aae510
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x78
mov eax, dword [ecx + 8]
mov ebx, dword [ecx]
mov esi, dword [ecx + 4]
mov dword [ebp - 0x40], eax
test byte [0x64ab5130], 8
jne 0x64aae6d8
test esi, esi
je 0x64aae710
fild dword [esi + 0xc]
fild dword [esi + 8]
fild dword [esi + 4]
fild dword [esi]
fstp dword [ebp - 0x28]
fstp dword [ebp - 0x24]
fstp dword [ebp - 0x20]
fstp dword [ebp - 0x1c]
test byte [0x64ab5130], 8
jne 0x64aae720
mov dword [ebp - 0x3c], 2
test ebx, ebx
je 0x64aae6c3
lea eax, [ebp - 0x2c]
mov dword [esp + 4], eax
lea eax, [ebp - 0x28]
mov dword [esp], eax
call sym.gdiplus.dll_GdipCreateRegionRect
mov dword [ebp - 0x3c], eax
sub esp, 8
test eax, eax
jne 0x64aae6c3
mov ecx, dword [ebp - 0x40]
test ecx, ecx
je 0x64aae7e0
mov dword [esp + 8], 0x14
mov dword [esp + 4], 8
mov esi, dword fs:[0x18]
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [ebp - 0x4c], eax
call eax
mov dword [ebp - 0x44], eax
sub esp, 0xc
mov edi, eax
test eax, eax
je 0x64aae768
mov edx, dword [ebx + 4]
mov dword [eax], edx
mov edx, dword [ebx + 8]
mov dword [eax + 4], edx
mov edx, dword [ebx + 0xc]
mov dword [eax + 8], edx
mov edx, dword [ebx + 0x10]
mov dword [eax + 0xc], edx
mov eax, dword [ebx + 0x14]
mov dword [edi + 0x10], eax
mov edi, dword [ebp - 0x2c]
mov dword [ebp - 0x50], edi
mov dword [esp + 8], 0x14
mov dword [esp + 4], 8
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4c]
call eax
mov dword [ebp - 0x48], eax
sub esp, 0xc
mov edx, eax
test eax, eax
je 0x64aae768
mov eax, dword [edi + 4]
mov dword [edx], eax
cmp eax, 0x10000001
je 0x64aae978
ja 0x64aae870
cmp eax, 0x10000000
jne 0x64aae87e
mov edi, edx
mov edx, dword [ebp - 0x50]
mov eax, dword [edx + 8]
mov dword [edi + 4], eax
mov eax, dword [edx + 0xc]
mov dword [edi + 8], eax
mov eax, dword [edx + 0x10]
mov dword [edi + 0xc], eax
mov eax, dword [edx + 0x14]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0x40]
add dword [ebx], 2
mov dword [ebx + 4], eax
mov eax, dword [ebp - 0x44]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x48]
mov dword [ebx + 0xc], eax
mov ebx, dword [ebp - 0x2c]
test byte [0x64ab5130], 8
jne 0x64aaea98
test ebx, ebx
je 0x64aae6c3
lea eax, [ebx + 4]
mov dword [esp], eax
call sym._delete_element
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
mov eax, dword [ebp - 0x3c]
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0xc
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str._p__p__d_n
mov dword [esp + 8], str.GdipCombineRegionRectI
mov dword [esp + 4], 0x64ab5130
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_12
test esi, esi
jne 0x64aae544
mov dword [ebp - 0x3c], 2
jmp 0x64aae6c3
lea eax, [ebp - 0x28]
mov dword [esp], eax
call sym._debugstr_rectf
mov edx, dword [ebp - 0x40]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
mov dword [esp + 0xc], str._p__s__d_n
mov dword [esp + 8], str.GdipCombineRegionRect
mov dword [esp + 4], 0x64ab5130
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_12
jmp 0x64aae568
mov dword [ebp - 0x3c], 3
mov ebx, dword [ebp - 0x44]
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov dword [esp + 8], ebx
mov eax, dword [eax + 0x30]
mov esi, dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call esi
mov ebx, dword [ebp - 0x2c]
sub esp, 0xc
test byte [0x64ab5130], 8
jne 0x64aae840
test ebx, ebx
je 0x64aae6c3
lea eax, [ebx + 4]
mov dword [esp], eax
call sym._delete_element
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call esi
sub esp, 0xc
jmp 0x64aae6c3
lea eax, [ebx + 4]
mov dword [esp], eax
call sym._delete_element
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
mov dword [ebx], edx
mov edx, dword [eax + 4]
mov dword [ebx + 4], edx
mov edx, dword [eax + 8]
mov dword [ebx + 8], edx
mov edx, dword [eax + 0xc]
mov dword [ebx + 0xc], edx
mov edx, dword [eax + 0x10]
mov dword [ebx + 0x10], edx
mov edx, dword [eax + 0x14]
mov dword [ebx + 0x14], edx
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov edx, dword fs:[0x18]
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
jmp 0x64aae6c3
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0x64ac0781
mov dword [esp + 8], str.GdipDeleteRegion
mov dword [esp + 4], 0x64ab5130
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_12
jmp 0x64aae7a8
sub eax, 0x10000002
cmp eax, 1
jbe 0x64aae66b
mov eax, dword [ebp - 0x50]
mov dword [edx + 4], 0
mov esi, edx
mov dword [edx + 8], 0
mov eax, dword [eax + 8]
mov dword [ebp - 0x54], eax
mov dword [esp + 8], 0x14
mov dword [esp + 4], 8
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4c]
call eax
mov dword [esi + 4], eax
sub esp, 0xc
test eax, eax
je 0x64aaec0f
mov edx, dword [ebp - 0x54]
mov edx, dword [edx]
mov dword [eax], edx
cmp edx, 0x10000001
je 0x64aaeac5
ja 0x64aae9b0
cmp edx, 0x10000000
jne 0x64aae9bf
mov edi, dword [ebp - 0x54]
mov eax, dword [ebp - 0x48]
mov edx, dword [edi + 4]
mov eax, dword [eax + 4]
mov dword [eax + 4], edx
mov edx, dword [edi + 8]
mov dword [eax + 8], edx
mov edx, dword [edi + 0xc]
mov dword [eax + 0xc], edx
mov edx, dword [edi + 0x10]
mov dword [eax + 0x10], edx
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 8]
test eax, eax
je 0x64aaebda
mov edx, dword [ebp - 0x50]
mov edx, dword [edx]
mov dword [eax], edx
cmp edx, 0x10000001
je 0x64aaecc2
ja 0x64aaeb0b
cmp edx, 0x10000000
jne 0x64aaeb1a
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x48]
mov edx, dword [ecx + 4]
mov eax, dword [eax + 8]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov edx, dword [ecx + 0x10]
mov dword [eax + 0x10], edx
jmp 0x64aae66b
mov eax, edx
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 8]
mov dword [esp], eax
call sym.gdiplus.dll_GdipClonePath
sub esp, 8
test eax, eax
je 0x64aae66b
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call sym._delete_element
jmp 0x64aae76f
sub edx, 0x10000002
cmp edx, 1
jbe 0x64aae90f
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + 4]
mov dword [eax + 4], 0
mov eax, dword [edx + 4]
mov dword [eax + 8], 0
mov eax, dword [edx + 4]
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x5c], eax
mov edx, dword [edx + 4]
mov dword [ebp - 0x58], edx
mov edx, dword [eax + 4]
test edx, edx
je 0x64aaed36
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov dword [edx], eax
cmp eax, 0x10000001
je 0x64aaed08
ja 0x64aaec1b
cmp eax, 0x10000000
jne 0x64aaec29
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
mov edx, dword [ecx + 4]
mov eax, dword [eax + 4]
mov dword [eax + 4], edx
mov edx, dword [ecx + 8]
mov dword [eax + 8], edx
mov edx, dword [ecx + 0xc]
mov dword [eax + 0xc], edx
mov edx, dword [ecx + 0x10]
mov dword [eax + 0x10], edx
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x54]
mov eax, dword [eax + 4]
mov edx, dword [edx + 8]
mov dword [ebp - 0x58], eax
mov eax, dword [eax + 8]
mov dword [ebp - 0x54], edx
test eax, eax
je 0x64aaef76
mov edx, dword [ebp - 0x54]
mov edx, dword [edx]
mov dword [eax], edx
cmp edx, 0x10000001
je 0x64aaeee5
ja 0x64aaedc8
cmp edx, 0x10000000
jne 0x64aaedd7
mov eax, dword [ebp - 0x58]
mov esi, dword [ebp - 0x54]
mov ecx, 4
mov edi, dword [eax + 8]
add esi, 4
add edi, 4
rep movsd dword es:[edi], dword [esi]
jmp 0x64aae90f
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], 0x64ac0781
mov dword [esp + 8], str.GdipDeleteRegion
mov dword [esp + 4], 0x64ab5130
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_12
jmp 0x64aae690
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 4]
mov dword [ebp - 0x58], eax
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 4]
mov dword [esp], eax
call sym.gdiplus.dll_GdipClonePath
sub esp, 8
test eax, eax
je 0x64aae90f
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebx + 4]
mov dword [esp], eax
call sym._delete_element
mov dword [ebx + 4], 0
jmp 0x64aae99d
sub edx, 0x10000002
cmp edx, 1
jbe 0x64aae66b
mov edx, dword [ebp - 0x48]
mov eax, dword [edx + 8]
mov dword [eax + 4], 0
mov eax, dword [edx + 8]
mov dword [eax + 8], 0
mov eax, dword [ebp - 0x50]
mov esi, dword [edx + 8]
mov edi, dword [eax + 4]
mov eax, dword [esi + 4]
test eax, eax
je 0x64aaef38
mov edx, dword [edi]
mov dword [eax], edx
cmp edx, 0x10000001
je 0x64aaeec1
ja 0x64aaed79
cmp edx, 0x10000000
jne 0x64aaed88
mov eax, dword [esi + 4]
mov ecx, 4
lea esi, [edi + 4]
add eax, 4
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x50]
mov eax, dword [eax + 8]
mov edx, dword [edx + 8]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], edx
test ecx, ecx
je 0x64aaf170
mov eax, dword [ebp - 0x54]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [edx], eax
cmp eax, 0x10000001
je 0x64aaf0b2
ja 0x64aaeff4
cmp eax, 0x10000000
jne 0x64aaf002
mov eax, dword [ebp - 0x54]
mov esi, dword [ebp - 0x50]
mov ecx, 4
mov edi, dword [eax + 8]
add esi, 4
add edi, 4
rep movsd dword es:[edi], dword [esi]
jmp 0x64aae66b
mov dword [esp + 8], 0x14
mov dword [esp + 4], 8
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4c]
call eax
mov edx, dword [ebp - 0x48]
sub esp, 0xc
mov dword [edx + 8], eax
test eax, eax
jne 0x64aae926
mov dword [ebp - 0x3c], 3
jmp 0x64aae99d
sub eax, 0x10000002
cmp eax, 1
jbe 0x64aaea34
mov edx, dword [ebp - 0x5c]
mov eax, dword [edx + 4]
mov dword [eax + 4], 0
mov eax, dword [edx + 4]
mov dword [eax + 8], 0
mov eax, dword [ebp - 0x58]
mov edi, dword [edx + 4]
mov ecx, dword [eax + 4]
mov eax, dword [edi + 4]
test eax, eax
je 0x64aaefb0
mov edx, dword [ecx]
mov dword [eax], edx
cmp edx, 0x10000001
je 0x64aaef12
ja 0x64aaee6c
cmp edx, 0x10000000
jne 0x64aaee7b
mov edi, dword [edi + 4]
lea esi, [ecx + 4]
mov ecx, 4
add edi, 4
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x60], eax
lea edx, [eax + 8]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 8]
call sym._clone_element
test eax, eax
je 0x64aaea34
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x5c]
mov eax, dword [ebx + 4]
mov dword [esp], eax
call sym._delete_element
mov dword [ebx + 4], 0
jmp 0x64aaeaf1
mov eax, dword [ebp - 0x48]
mov eax, dword [eax + 8]
mov dword [ebp - 0x4c], eax
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 4]
mov dword [esp], eax
call sym.gdiplus.dll_GdipClonePath
sub esp, 8
test eax, eax
je 0x64aae66b
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x48]
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sym._delete_element
mov dword [ebx + 8], 0
jmp 0x64aae99d
mov eax, dword [ebp - 0x5c]
mov eax, dword [eax + 4]
mov dword [ebp - 0x60], eax
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 4]
mov dword [esp], eax
call sym.gdiplus.dll_GdipClonePath
sub esp, 8
test eax, eax
jne 0x64aaeca5
jmp 0x64aaea34
mov dword [esp + 8], 0x14
mov dword [esp + 4], 8
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4c]
call eax
mov edx, eax
mov eax, dword [ebp - 0x5c]
sub esp, 0xc
mov dword [eax + 4], edx
test edx, edx
jne 0x64aae9f0
mov dword [ebp - 0x3c], 3
jmp 0x64aaeaf1
sub edx, 0x10000002
cmp edx, 1
jbe 0x64aaeb79
mov eax, dword [esi + 4]
xor edx, edx
xor ecx, ecx
mov dword [eax + 4], edx
mov eax, dword [esi + 4]
mov dword [eax + 8], ecx
mov eax, dword [esi + 4]
lea edx, [eax + 4]
mov eax, dword [edi + 4]
call sym._clone_element
test eax, eax
je 0x64aaf097
mov dword [ebp - 0x3c], eax
mov eax, dword [esi + 4]
mov dword [esp], eax
call sym._delete_element
mov dword [esi + 4], 0
jmp 0x64aaecee
sub edx, 0x10000002
cmp edx, 1
jbe 0x64aae90f
mov edx, dword [ebp - 0x58]
xor ecx, ecx
xor esi, esi
mov eax, dword [edx + 8]
mov dword [eax + 4], ecx
mov eax, dword [edx + 8]
mov dword [eax + 8], esi
mov edi, dword [edx + 8]
mov eax, dword [ebp - 0x54]
cmp dword [edi + 4], 0
mov ecx, dword [eax + 4]
je 0x64aaf1aa
mov edx, dword [edi + 4]
mov eax, dword [ecx]
mov dword [edx], eax
cmp eax, 0x10000001
je 0x64aaf14e
ja 0x64aaf0dd
cmp eax, 0x10000000
jne 0x64aaf0eb
mov edi, dword [edi + 4]
lea esi, [ecx + 4]
mov ecx, 4
add edi, 4
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 8]
mov dword [ebp - 0x5c], eax
lea edx, [eax + 8]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 8]
call sym._clone_element
test eax, eax
je 0x64aae90f
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x58]
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sym._delete_element
mov dword [ebx + 8], 0
jmp 0x64aaeaf1
sub edx, 0x10000002
cmp edx, 1
jbe 0x64aaec86
mov eax, dword [edi + 4]
xor edx, edx
xor esi, esi
mov dword [ebp - 0x60], ecx
mov dword [eax + 4], edx
mov eax, dword [edi + 4]
mov dword [eax + 8], esi
mov eax, dword [edi + 4]
lea edx, [eax + 4]
mov eax, dword [ecx + 4]
call sym._clone_element
mov ecx, dword [ebp - 0x60]
test eax, eax
mov esi, eax
je 0x64aaf131
mov eax, dword [edi + 4]
mov dword [esp], eax
call sym._delete_element
xor eax, eax
mov dword [ebp - 0x3c], esi
mov dword [edi + 4], eax
jmp 0x64aaeca8
mov eax, dword [esi + 4]
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [edi + 4]
mov dword [esp], eax
call sym.gdiplus.dll_GdipClonePath
push edi
push edi
test eax, eax
jne 0x64aaedae
jmp 0x64aaeb79
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 8]
mov dword [ebp - 0x5c], eax
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 4]
mov dword [esp], eax
call sym.gdiplus.dll_GdipClonePath
push edi
push edi
test eax, eax
jne 0x64aaee4f
jmp 0x64aae90f
mov eax, dword [edi + 4]
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [ecx + 4]
mov dword [esp], eax
call sym.gdiplus.dll_GdipClonePath
mov esi, eax
push edx
push edx
test eax, eax
jne 0x64aaeea9
jmp 0x64aaec86
mov dword [esp + 8], 0x14
mov dword [esp + 4], 8
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4c]
call eax
mov dword [esi + 4], eax
sub esp, 0xc
test eax, eax
jne 0x64aaeb45
mov dword [ebp - 0x3c], 3
jmp 0x64aaecee
mov dword [esp + 8], 0x14
mov dword [esp + 4], 8
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4c]
call eax
mov edx, dword [ebp - 0x58]
sub esp, 0xc
mov dword [edx + 8], eax
test eax, eax
jne 0x64aaea51
jmp 0x64aaed6d
mov dword [ebp - 0x60], ecx
mov eax, dword fs:[0x18]
mov dword [esp + 8], 0x14
mov dword [esp + 4], 8
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4c]
call eax
mov ecx, dword [ebp - 0x60]
sub esp, 0xc
test eax, eax
mov dword [edi + 4], eax
jne 0x64aaec54
mov dword [ebp - 0x3c], 3
jmp 0x64aaeca8
sub eax, 0x10000002
cmp eax, 1
jbe 0x64aae66b
mov edx, dword [ebp - 0x54]
xor esi, esi
xor edi, edi
mov eax, dword [edx + 8]
mov dword [eax + 4], esi
mov eax, dword [edx + 8]
mov dword [eax + 8], edi
mov edi, dword [edx + 8]
mov eax, dword [ebp - 0x50]
cmp dword [edi + 4], 0
mov ecx, dword [eax + 4]
je 0x64aaf293
mov edx, dword [edi + 4]
mov eax, dword [ecx]
mov dword [edx], eax
cmp eax, 0x10000001
je 0x64aaf258
ja 0x64aaf20b
cmp eax, 0x10000000
jne 0x64aaf219
mov edi, dword [edi + 4]
lea esi, [ecx + 4]
mov ecx, 4
add edi, 4
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 8]
mov dword [ebp - 0x4c], eax
lea edx, [eax + 8]
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 8]
call sym._clone_element
mov esi, eax
test eax, eax
je 0x64aae66b
mov ebx, dword [ebp - 0x54]
mov eax, dword [ebx + 8]
mov dword [esp], eax
call sym._delete_element
xor eax, eax
mov dword [ebp - 0x3c], esi
mov dword [ebx + 8], eax
jmp 0x64aaecee
mov eax, dword [esi + 4]
lea edx, [eax + 8]
mov eax, dword [edi + 8]
call sym._clone_element
test eax, eax
jne 0x64aaedae
jmp 0x64aaeb79
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 8]
mov dword [ebp - 0x4c], eax
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [eax + 4]
mov dword [esp], eax
call sym.gdiplus.dll_GdipClonePath
mov esi, eax
push edx
push edx
test eax, eax
jne 0x64aaf07c
jmp 0x64aae66b
sub eax, 0x10000002
cmp eax, 1
jbe 0x64aaee30
mov eax, dword [edi + 4]
xor edx, edx
xor esi, esi
mov dword [ebp - 0x5c], ecx
mov dword [eax + 4], edx
mov eax, dword [edi + 4]
mov dword [eax + 8], esi
mov eax, dword [edi + 4]
lea edx, [eax + 4]
mov eax, dword [ecx + 4]
call sym._clone_element
mov ecx, dword [ebp - 0x5c]
test eax, eax
mov esi, eax
je 0x64aaf1ee
mov eax, dword [edi + 4]
mov dword [esp], eax
call sym._delete_element
xor eax, eax
mov dword [ebp - 0x3c], esi
mov dword [edi + 4], eax
jmp 0x64aaee52
mov eax, dword [edi + 4]
lea edx, [eax + 8]
mov eax, dword [ecx + 8]
call sym._clone_element
mov esi, eax
test eax, eax
jne 0x64aaeea9
jmp 0x64aaec86
mov eax, dword [edi + 4]
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [ecx + 4]
mov dword [esp], eax
call sym.gdiplus.dll_GdipClonePath
mov esi, eax
push edx
push edx
test eax, eax
jne 0x64aaf119
jmp 0x64aaee30
mov dword [esp + 8], 0x14
mov dword [esp + 4], 8
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4c]
call eax
mov edx, dword [ebp - 0x54]
sub esp, 0xc
mov dword [edx + 8], eax
test eax, eax
jne 0x64aaeb96
jmp 0x64aaef6a
mov dword [ebp - 0x5c], ecx
mov eax, dword fs:[0x18]
mov dword [esp + 8], 0x14
mov dword [esp + 4], 8
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4c]
call eax
mov ecx, dword [ebp - 0x5c]
sub esp, 0xc
test eax, eax
mov dword [edi + 4], eax
jne 0x64aaedfd
mov dword [ebp - 0x3c], 3
jmp 0x64aaee52
mov eax, dword [edi + 4]
lea edx, [eax + 8]
mov eax, dword [ecx + 8]
call sym._clone_element
mov esi, eax
test eax, eax
jne 0x64aaf119
jmp 0x64aaee30
sub eax, 0x10000002
cmp eax, 1
jbe 0x64aaf05b
mov eax, dword [edi + 4]
xor esi, esi
xor edx, edx
mov dword [ebp - 0x4c], ecx
mov dword [eax + 4], esi
mov eax, dword [edi + 4]
mov dword [eax + 8], edx
mov eax, dword [edi + 4]
lea edx, [eax + 4]
mov eax, dword [ecx + 4]
call sym._clone_element
mov ecx, dword [ebp - 0x4c]
test eax, eax
mov esi, eax
je 0x64aaf27a
mov eax, dword [edi + 4]
mov dword [esp], eax
call sym._delete_element
xor edx, edx
mov dword [edi + 4], edx
jmp 0x64aaf07c
mov eax, dword [edi + 4]
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [ecx + 4]
mov dword [esp], eax
call sym.gdiplus.dll_GdipClonePath
mov esi, eax
push ecx
push ecx
test eax, eax
jne 0x64aaf243
jmp 0x64aaf05b
mov eax, dword [edi + 4]
lea edx, [eax + 8]
mov eax, dword [ecx + 8]
call sym._clone_element
mov esi, eax
test eax, eax
jne 0x64aaf243
jmp 0x64aaf05b
mov dword [ebp - 0x58], ecx
mov eax, dword fs:[0x18]
mov dword [esp + 8], 0x14
mov dword [esp + 4], 8
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
mov eax, dword [ebp - 0x4c]
call eax
mov ecx, dword [ebp - 0x58]
sub esp, 0xc
test eax, eax
mov dword [edi + 4], eax
jne 0x64aaf028
mov esi, 3
jmp 0x64aaf07c