Function at 0x10064b40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x1b0
lea eax, [esp + 0x110]
push eax
call fcn.1005d340
add esp, 4
cmp dword [esp + 0x110], 4
jne 0x10064d91
mov ecx, dword [esp + 0x11c]
mov ebx, dword [esp + 0x114]
mov eax, dword [esp + 0x118]
mov dword [esp + 0x6c], 4
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov edx, ecx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ebx
shl edx, 7
add edx, ebx
test ecx, ecx
mov dword [esp + 0x44], edx
je 0x10064ef0
lea eax, [ebx + 0x80]
lea edi, [esp + 0x128]
mov ecx, 0x1f
mov esi, ebx
mov dword [esp + 0x40], eax
rep movsd dword es:[edi], dword [esi]
movzx eax, byte [ebx + 0x7c]
mov byte [esp + 0x1a4], al
movzx eax, byte [ebx + 0x7d]
test al, al
je 0x10064f04
lea esi, [esp + 0x128]
mov dword [esp], 0
mov dword [esp + 8], 4
mov ecx, 0x1f
lea edi, [esp + 0x90]
movzx edx, word [ebx + 0x7e]
rep movsd dword es:[edi], dword [esi]
mov esi, 0
mov edi, 4
movzx ecx, byte [esp + 0x1a4]
mov byte [esp + 0x10c], cl
mov byte [esp + 0x10d], al
mov word [esp + 0x10e], dx
mov edx, dword [esp + 0xd8]
mov eax, dword [esp + 0xd0]
test edx, edx
je 0x10064cde
xor ebx, ebx
cmp edx, 0x5555556
mov dword [esp + 4], eax
setb al
jae 0x10066025
lea ecx, [edx*8]
mov bl, al
lea esi, [ecx + ecx*2]
shl ebx, 2
test esi, esi
js 0x10066025
je 0x10064cd0
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
mov dword [esp + 0x18], edx
test eax, eax
jne 0x10064caa
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10066016
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov edx, dword [esp + 0x18]
mov edi, eax
test edi, edi
jne 0x10064cda
jmp 0x10066016
mov edi, ebx
test edi, edi
je 0x10066016
mov eax, dword [esp + 4]
mov ebx, edx
push esi
push eax
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov esi, dword [esp]
cmp esi, dword [esp + 0x70]
jne 0x10064d10
lea ecx, [esp + 0x6c]
mov edx, esi
call fcn.10064820
mov ecx, dword [esp + 0x6c]
mov esi, dword [esp + 0x74]
jmp 0x10064d14
mov ecx, dword [esp + 8]
lea eax, [esi + esi*2]
inc esi
mov dword [esp + 8], ecx
mov dword [ecx + eax*4], edi
mov dword [ecx + eax*4 + 4], ebx
mov dword [ecx + eax*4 + 8], ebx
mov dword [esp + 0x74], esi
lea ecx, [esp + 0x90]
call fcn.10063fa0
mov ebx, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
cmp ebx, edx
je 0x10065dfb
lea eax, [ebx + 0x80]
mov dword [esp], esi
mov ecx, 0x1f
mov esi, ebx
mov dword [esp + 0x40], eax
lea eax, [esp + 0x128]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov esi, eax
movzx eax, byte [ebx + 0x7c]
mov byte [esp + 0x1a4], al
movzx eax, byte [ebx + 0x7d]
test al, al
jne 0x10064c00
sub ebx, 0xffffff80
mov esi, edx
sub esi, ebx
jne 0x10064f1c
jmp 0x10064f2d
movq xmm0, qword [esp + 0x120]
movsd xmm2, qword [esp + 0x110]
movsd xmm1, qword [esp + 0x118]
lea eax, [esp + 0x128]
mov dword [esp + 0x90], 0x1024515c
mov dword [esp + 0x94], 1
mov dword [esp + 0xa0], 0
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
mov dword [esp + 0x2c], 0x1005e8f0
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], 1
movq qword [esp + 0x138], xmm0
movsd qword [esp + 0x130], xmm1
movsd qword [esp + 0x128], xmm2
lea ecx, [esp + 0x90]
lea eax, [esp + 0x38]
push ecx
push eax
call fcn.1001ac00
add esp, 8
movq xmm0, qword [esp + 0x38]
mov eax, dword [esp + 0x40]
mov edi, dword [0x103564a0]
mov ebx, dword [0x1035648c]
movq qword [esp + 0x28], xmm0
mov dword [esp + 0x30], eax
mov dword [esp + 0x98], eax
movq qword [esp + 0x90], xmm0
movzx eax, byte [edi]
mov eax, dword [ebx]
test eax, eax
jne 0x10064e6e
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1006606a
mov dword [ebx], eax
push 0xc
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x1006606a
mov esi, eax
mov eax, dword [esp + 0x30]
mov dword [esi + 8], eax
movq xmm0, qword [esp + 0x28]
movq qword [esi], xmm0
movzx eax, byte [edi]
mov eax, dword [ebx]
test eax, eax
jne 0x10064eab
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10066078
mov dword [ebx], eax
push 0xc
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10066078
mov dword [eax], esi
mov esi, dword [ebp + 8]
mov dword [eax + 4], 0x102450a4
mov byte [eax + 8], 0x27
mov dword [esi + 8], eax
mov dword [esi + 4], 3
mov dword [esi], 0
lea ecx, [esp + 0x128]
call fcn.10063ef0
mov eax, esi
jmp 0x10065df3
mov eax, 4
xor esi, esi
cmp dword [esp + 0x3c], 0
mov dword [esp + 8], eax
jne 0x10064f3f
jmp 0x10064f51
mov dword [esp + 8], 4
mov dword [esp], 0
sub ebx, 0xffffff80
mov esi, edx
sub esi, ebx
je 0x10064f2d
shr esi, 7
nop
mov ecx, ebx
call fcn.10063fa0
sub ebx, 0xffffff80
dec esi
jne 0x10064f20
mov eax, dword [esp + 8]
mov esi, dword [esp]
cmp dword [esp + 0x3c], 0
mov dword [esp + 8], eax
je 0x10064f51
mov eax, dword [0x1035648c]
push dword [esp + 0x38]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov edx, dword [esp + 8]
mov eax, dword [esp + 0x70]
lea ecx, [esi + esi*2]
test esi, esi
mov dword [esp + 0x5c], 4
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
lea ecx, [edx + ecx*4]
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], eax
mov eax, edx
mov dword [esp + 0x98], edx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x9c], ecx
je 0x100650b2
mov dword [esp], 0
mov dword [esp + 0x18], 4
jmp 0x10064fce
mov eax, dword [esp + 0x1c]
cmp eax, dword [esp + 0x10]
je 0x1006510f
mov esi, dword [eax]
lea ecx, [eax + 0xc]
mov dword [esp + 0x1c], ecx
test esi, esi
je 0x100650b8
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x14], esi
test eax, eax
mov dword [esp + 0xc], ecx
je 0x10065090
lea eax, [eax + eax*2]
lea edi, [esi + eax*8]
jmp 0x10065021
mov eax, dword [esp]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 4]
mov dword [ecx + eax*8], ebx
mov dword [ecx + eax*8 + 4], edx
inc eax
mov dword [esp], eax
mov dword [esp + 0x64], eax
add esi, 0x18
cmp esi, edi
je 0x10065090
movzx eax, byte [esi]
cmp al, 2
je 0x10065090
test al, 1
jne 0x1006501a
mov ebx, dword [esi + 1]
mov eax, dword [esi + 0x14]
cmp bl, 0xa
mov dword [esp + 4], eax
je 0x10065067
movzx eax, bl
movd xmm0, ebx
cmp eax, 0xac
je 0x1006505b
cmp eax, 0xc0
jne 0x1006501a
movd eax, xmm0
cmp ah, 0xa8
jne 0x1006501a
jmp 0x10065067
movd eax, xmm0
and ah, 0xf0
cmp ah, 0x10
jne 0x1006501a
mov eax, dword [esp]
cmp eax, dword [esp + 0x60]
jne 0x10065000
mov edx, dword [esp]
lea ecx, [esp + 0x5c]
call fcn.10064780
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x18], eax
mov dword [esp], ecx
jmp 0x10065000
cmp dword [esp + 0xc], 0
je 0x10064fc0
push dword [esp + 0x14]
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
jmp 0x10064fc0
xor ebx, ebx
mov esi, eax
jmp 0x100650bf
mov ebx, dword [esp]
mov esi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov edx, 0xaaaaaaab
mov dword [esp + 0x98], esi
mov dword [esp], ebx
mov eax, ecx
sub eax, esi
mul edx
cmp ecx, esi
je 0x1006510f
mov edi, edx
add esi, 4
shr edi, 3
jmp 0x100650f6
add esi, 0xc
dec edi
je 0x1006510f
cmp dword [esi], 0
je 0x100650f0
push dword [esi - 4]
push 0
mov ecx, dword [0x1035648c]
push dword [ecx]
call sub.KERNEL32.dll_HeapFree
jmp 0x100650f0
cmp dword [esp + 0x94], 0
je 0x1006512b
mov eax, dword [0x1035648c]
push dword [esp + 8]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x60]
cmp dword [esp], 0
mov dword [esp + 0x28], 4
mov dword [esp + 0x2c], 0
mov dword [esp + 0x10], ecx
mov dword [esp + 0x20], eax
je 0x100654ae
mov ecx, dword [esp]
xor esi, esi
mov dword [esp + 8], 4
mov dword [esp + 0x14], 0
lea ecx, [eax + ecx*8]
mov dword [esp + 0xc], ecx
mov ecx, eax
jmp 0x1006519a
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], esi
cmp ecx, dword [esp + 0xc]
mov dword [esp + 0x28], eax
je 0x100654be
mov eax, dword [ecx + 4]
cmp al, 0x20
ja 0x10065fae
mov ebx, esi
mov esi, dword [ecx]
mov dword [esp + 0x1c], ecx
mov ecx, eax
movzx edi, al
mov edx, 0xffffffff
neg cl
shl edx, cl
test edi, edi
mov ecx, eax
cmove edx, edi
mov edi, 0xffffffff
bswap esi
shr edi, cl
mov ecx, 0
and edx, esi
cmp al, 0x20
cmove edi, ecx
or edi, esi
cmp al, 0x1e
mov esi, edi
ja 0x10065200
inc edx
mov eax, 0xffffffff
cmove edx, eax
sub esi, 1
bswap edx
cmovb esi, ecx
jmp 0x10065202
bswap edx
mov eax, dword [esp + 0x14]
add dword [esp + 0x1c], 8
bswap esi
mov dword [esp + 0x4c], edx
mov dword [esp + 0x18], esi
mov dword [esp + 0x50], esi
lea eax, [eax*4]
lea eax, [eax + eax*2]
mov dword [esp], eax
jmp 0x10065258
mov ebx, esi
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 8]
mov edx, dword [esp]
inc dword [esp + 0x14]
mov dword [ecx + edx + 8], eax
movq xmm0, qword [esp + 0x38]
movq qword [ecx + edx], xmm0
add edx, 0xc
mov dword [esp], edx
mov edx, edi
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
mov esi, ebx
xor ebx, ebx
bswap eax
bswap ecx
cmp eax, ecx
mov ecx, 0xff
seta bl
sbb ebx, 0
setne al
movzx eax, al
cmovs eax, ecx
test al, al
je 0x100652b0
movzx eax, al
cmp eax, 0xff
lea eax, [esp + 0x38]
jne 0x10065180
mov edi, edx
mov ecx, 0xffffffff
bswap edi
inc edi
cmove edi, ecx
bswap edi
mov dword [esp + 0x4c], edi
jmp 0x100652d1
mov edi, 0x1000000
lea eax, [esp + 0x38]
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0x1000000
mov dword [esp + 0x18], 0
lea ecx, [esp + 0x128]
mov dword [esp + 0x128], 1
mov dword [esp + 0x12c], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xa0], 0x20
mov byte [esp + 0xb0], 3
mov dword [esp + 0x90], 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x38], edx
mov dword [esp + 0x130], 0
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], 0x10244e0c
lea ecx, [esp + 0x90]
push ecx
push eax
call fcn.100250e0
add esp, 8
test al, al
jne 0x10065eac
mov eax, dword [esp + 0x128]
test eax, eax
je 0x10065180
cmp dword [esp + 0x14], esi
movsd xmm0, qword [esp + 0x12c]
mov dword [esp + 0x38], eax
movlps qword [esp + 0x3c], xmm0
jne 0x10065230
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
xor edx, edx
bswap eax
bswap ecx
cmp eax, ecx
mov ecx, 0xff
seta dl
sbb edx, 0
setne al
movzx eax, al
cmovs eax, ecx
cmp al, 0xff
je 0x10065480
movzx ecx, al
xor eax, eax
test ecx, ecx
jne 0x100653c1
mov eax, 1
inc eax
mov ebx, 0xffffffff
je 0x100653cb
mov ebx, eax
add ebx, esi
jb 0x10065eef
lea eax, [esi + esi]
cmp eax, ebx
cmova ebx, eax
cmp ebx, 5
jae 0x100653e5
mov ebx, 4
xor edx, edx
cmp ebx, 0xaaaaaab
lea eax, [ebx*4]
mov dword [esp + 4], esi
setb dl
shl edx, 2
test esi, esi
je 0x1006542c
lea ecx, [esi*4]
mov esi, dword [esp + 8]
lea ecx, [ecx + ecx*2]
mov dword [esp + 0x90], esi
mov dword [esp + 0x98], ecx
lea esi, [esp + 0x128]
mov ecx, 4
jmp 0x10065435
xor ecx, ecx
lea esi, [esp + 0x128]
lea eax, [eax + eax*2]
mov dword [esp + 0x94], ecx
mov ecx, esi
lea esi, [esp + 0x90]
push esi
push eax
call fcn.10064600
add esp, 8
cmp dword [esp + 0x128], 0
mov eax, dword [esp + 0x12c]
je 0x10065477
cmp eax, 0x80000001
jne 0x10065ee3
mov ebx, dword [esp + 4]
jmp 0x10065232
mov dword [esp + 8], eax
jmp 0x10065232
mov eax, dword [esp + 0x18]
mov ecx, edi
bswap ecx
bswap eax
sub eax, ecx
mov ecx, 0
cmovb eax, ecx
mov ecx, 0xffffffff
inc eax
cmove eax, ecx
inc eax
mov ebx, 0xffffffff
jne 0x100653c9
jmp 0x100653cb
mov dword [esp + 0x14], 0
mov dword [esp + 8], 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x10], 0
mov dword [esp + 0x30], eax
je 0x100654df
mov eax, dword [0x1035648c]
push dword [esp + 0x20]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov esi, dword [esp + 0x14]
cmp esi, 0x15
jae 0x10065506
cmp esi, 1
jbe 0x10065ddd
mov ecx, dword [esp + 8]
mov edx, esi
push 1
call fcn.10064290
add esp, 4
jmp 0x10065c51
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x1006552e
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10066086
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
mov ecx, dword [esp + 0x14]
shr ecx, 1
mov dword [esp + 0x84], ecx
lea ecx, [ecx*4]
lea ecx, [ecx + ecx*2]
push ecx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
mov dword [esp + 0x1c], eax
je 0x10066086
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x10065582
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1006609c
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push pe_nt_image_headers32
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
mov dword [esp + 0xc], eax
je 0x1006609c
mov eax, dword [esp + 8]
xor edi, edi
mov dword [esp + 0x54], 0x10
lea ecx, [eax + 0x20]
add eax, 0xfffffff4
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x78], ecx
xor ecx, ecx
jmp 0x100655d5
mov edi, 1
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x14]
cmp ecx, eax
jae 0x10065c24
mov esi, eax
mov dword [esp + 0x48], edi
mov edx, ecx
lea edi, [ecx + ecx*2]
sub esi, ecx
mov ecx, dword [esp + 8]
mov dword [esp + 0x10], edx
cmp esi, 2
lea ecx, [ecx + edi*4]
mov dword [esp + 0x20], ecx
jae 0x10065600
mov edi, dword [esp + 0x48]
jmp 0x100657e0
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 8]
mov ebx, dword [ecx + 0xc]
mov dword [esp + 0x24], edi
mov edi, edx
mov dword [esp + 4], edx
sub edi, eax
cmovb eax, edx
push eax
push dword [ecx]
mov dword [esp + 8], ebx
push ebx
call sub.msvcrt.dll_memcmp
add esp, 0xc
test eax, eax
mov dword [esp + 0x18], esi
cmovne edi, eax
test edi, edi
mov dword [esp + 0x58], edi
js 0x10065657
mov ecx, dword [esp + 0x24]
cmp esi, 2
jne 0x10065679
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x48]
mov esi, 2
lea eax, [edx + 2]
jmp 0x100657e0
mov ecx, dword [esp + 0x24]
cmp esi, 2
jne 0x100656cd
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x48]
mov ecx, dword [esp + 0x20]
mov esi, 2
lea eax, [edx + 2]
jmp 0x10065739
mov eax, dword [esp + 0x78]
mov edi, 2
lea ebx, [eax + ecx*4]
nop word cs:[eax + eax]
nop
mov eax, dword [ebx]
mov ecx, dword [esp + 4]
mov edx, dword [ebx - 8]
mov esi, eax
mov dword [esp + 4], eax
sub esi, ecx
cmovb ecx, eax
push ecx
push dword [esp + 4]
mov dword [esp + 8], edx
push edx
call sub.msvcrt.dll_memcmp
add esp, 0xc
test eax, eax
cmovne esi, eax
test esi, esi
js 0x1006571d
mov eax, dword [esp + 0x18]
inc edi
add ebx, 0xc
cmp eax, edi
jne 0x10065690
jmp 0x1006571b
mov eax, dword [esp + 0x78]
mov edi, 2
lea ebx, [eax + ecx*4]
nop dword [eax]
mov eax, dword [ebx]
mov ecx, dword [esp + 4]
mov edx, dword [ebx - 8]
mov esi, eax
mov dword [esp + 4], eax
sub esi, ecx
cmovb ecx, eax
push ecx
push dword [esp + 4]
mov dword [esp + 8], edx
push edx
call sub.msvcrt.dll_memcmp
add esp, 0xc
test eax, eax
cmovne esi, eax
test esi, esi
jns 0x1006571d
mov eax, dword [esp + 0x18]
inc edi
add ebx, 0xc
cmp eax, edi
jne 0x100656e0
mov edi, eax
mov edx, dword [esp + 0x10]
cmp dword [esp + 0x58], 0
mov esi, edi
mov ecx, dword [esp + 0x20]
lea eax, [edi + edx]
mov edi, dword [esp + 0x48]
jns 0x100657e0
cmp eax, edx
jb 0x10066046
cmp eax, dword [esp + 0x14]
ja 0x1006602f
cmp esi, 2
jb 0x100657e0
mov ebx, ecx
mov ecx, esi
mov dword [esp + 0x34], eax
mov eax, esi
mov dword [esp + 0x18], ecx
add ecx, edx
mov edx, dword [esp + 0x7c]
shr eax, 1
mov esi, ebx
lea ecx, [ecx + ecx*2]
lea ecx, [edx + ecx*4]
mov edx, ebx
nop word cs:[eax + eax]
nop
mov esi, dword [edx + 8]
mov dword [esp + 0x98], esi
movsd xmm0, qword [edx]
movsd qword [esp + 0x90], xmm0
mov esi, dword [ecx + 8]
mov dword [edx + 8], esi
movsd xmm0, qword [ecx]
movsd qword [edx], xmm0
add edx, 0xc
mov esi, dword [esp + 0x98]
mov dword [ecx + 8], esi
movq xmm0, qword [esp + 0x90]
movq qword [ecx], xmm0
add ecx, 0xfffffff4
dec eax
jne 0x10065780
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x18]
nop word cs:[eax + eax]
nop dword [eax + eax]
mov ecx, esi
mov esi, eax
sub esi, edx
jb 0x10065fd9
cmp eax, dword [esp + 0x14]
ja 0x10065fd9
jae 0x10065840
cmp ecx, 0xa
jae 0x10065840
mov eax, dword [esp + 0x14]
lea esi, [edx + 0xa]
cmp esi, eax
cmovae esi, eax
mov dword [esp + 0x34], esi
sub esi, edx
jb 0x1006600b
mov eax, 1
mov ebx, ecx
cmp ecx, 2
cmovb ebx, eax
mov ecx, dword [esp + 0x20]
mov edx, esi
push ebx
call fcn.10064290
add esp, 4
mov edx, dword [esp + 0x10]
cmp edi, dword [esp + 0x54]
je 0x1006584a
jmp 0x100658c3
mov dword [esp + 0x34], eax
cmp edi, dword [esp + 0x54]
jne 0x100658c3
lea eax, [edi + edi]
mov dword [esp + 0x54], eax
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x10065879
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10065ff2
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
mov ecx, edi
shl ecx, 4
push ecx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10065ff2
lea ecx, [edi*8]
push ecx
mov ebx, dword [esp + 0x10]
push ebx
push eax
mov dword [esp + 0xc], eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
push ebx
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [esp]
mov edx, dword [esp + 0x10]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
mov dword [eax + edi*8], esi
mov dword [eax + edi*8 + 4], edx
inc edi
cmp edi, 2
jae 0x1006594b
jmp 0x100655c5
mov dword [esp + 0x18], esi
mov esi, dword [esp + 0x1c]
mov ebx, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
sub eax, esi
push eax
push esi
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0x58]
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
add ecx, ebx
mov dword [esp + 0xc], edx
mov dword [edx + eax*8 + 8], ecx
mov ecx, dword [esp + 0x8c]
mov dword [edx + eax*8 + 0xc], ecx
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x88]
not eax
add ecx, eax
lea eax, [edx + 8]
shl ecx, 3
push ecx
push eax
push edx
call sub.msvcrt.dll_memmove
add esp, 0xc
mov edi, dword [esp + 0x48]
cmp edi, 1
jbe 0x100655c0
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + edi*8 - 8]
mov ecx, dword [ecx + edi*8 - 4]
add ecx, eax
cmp ecx, dword [esp + 0x14]
je 0x100659b0
mov ecx, dword [esp + 0xc]
mov edx, dword [ecx + edi*8 - 0x10]
cmp edx, eax
jbe 0x100659b0
cmp edi, 3
jb 0x10065c10
lea ecx, [edi - 3]
lea esi, [edx + eax]
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0xc]
mov ecx, dword [ecx + edi*8 - 0x18]
cmp ecx, esi
jbe 0x10065bff
cmp edi, 4
jb 0x10065c1a
mov esi, dword [esp + 0xc]
add edx, ecx
cmp dword [esi + edi*8 - 0x20], edx
mov edx, dword [esp + 0x10]
jbe 0x100659c0
jmp 0x100655c5
cmp edi, 3
jb 0x100659c4
mov ecx, dword [esp + 0xc]
lea edx, [edi - 3]
mov ecx, dword [ecx + edi*8 - 0x18]
cmp ecx, eax
jb 0x100659c7
lea edx, [edi - 2]
cmp edi, edx
jbe 0x10065f46
lea eax, [edx + 1]
cmp edi, eax
jbe 0x10065f09
mov eax, dword [esp + 0xc]
mov esi, dword [eax + edx*8 + 8]
mov ecx, dword [eax + edx*8 + 4]
mov eax, dword [eax + edx*8 + 0xc]
add eax, esi
mov dword [esp + 0x58], esi
mov ebx, eax
sub ebx, ecx
jb 0x10065f1b
cmp eax, dword [esp + 0x14]
mov dword [esp + 0x20], edi
ja 0x10065f2f
mov esi, dword [esp + 0xc]
mov dword [esp + 0x10], edx
mov dword [esp + 0x8c], ecx
lea eax, [eax + eax*2]
lea ecx, [ecx + ecx*2]
mov dword [esp + 0x80], eax
mov eax, ebx
mov esi, dword [esi + edx*8]
mov edx, dword [esp + 8]
lea edi, [edx + ecx*4]
mov edx, esi
lea ecx, [esi + esi*2]
sub eax, edx
mov dword [esp], edi
lea edi, [edi + ecx*4]
mov dword [esp + 0x24], edx
mov ecx, eax
mov ecx, dword [esp + 0x20]
cmp eax, edx
mov dword [esp + 4], eax
mov eax, dword [esp + 0xc]
lea ecx, [ecx - 1]
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x10]
lea eax, [eax + ecx*8]
mov dword [esp + 0x88], eax
jae 0x10065b30
mov eax, dword [esp + 4]
lea eax, [eax*4]
lea esi, [eax + eax*2]
push esi
push edi
mov ebx, dword [esp + 0x24]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
add esi, ebx
cmp dword [esp + 0x24], 0
mov dword [esp + 0x18], esi
jle 0x100658e4
cmp dword [esp + 4], 0
jle 0x100658e4
mov eax, dword [esp + 0x7c]
mov ecx, dword [esp + 0x80]
mov esi, dword [esp + 0x18]
lea eax, [eax + ecx*4]
mov dword [esp + 4], eax
nop dword [eax + eax]
mov eax, dword [esi - 4]
mov ecx, dword [edi - 4]
mov ebx, eax
sub ebx, ecx
cmovb ecx, eax
push ecx
push dword [edi - 0xc]
push dword [esi - 0xc]
call sub.msvcrt.dll_memcmp
add esp, 0xc
test eax, eax
cmovne ebx, eax
xor eax, eax
test ebx, ebx
mov ecx, ebx
setns al
sar ecx, 0x1f
neg eax
lea ecx, [ecx + ecx*2]
test ebx, ebx
lea edi, [edi + ecx*4]
lea eax, [eax + eax*2]
mov ecx, dword [esp + 4]
lea esi, [esi + eax*4]
mov eax, edi
cmovns eax, esi
cmp edi, dword [esp]
movq xmm0, qword [eax]
movq qword [ecx], xmm0
mov eax, dword [eax + 8]
mov dword [ecx + 8], eax
jbe 0x100658e0
add dword [esp + 4], 0xfffffff4
cmp esi, dword [esp + 0x1c]
ja 0x10065ac0
jmp 0x100658e0
mov esi, dword [esp + 0x24]
lea eax, [esi*4]
lea eax, [eax + eax*2]
mov dword [esp + 0x18], eax
push eax
push dword [esp + 4]
push dword [esp + 0x24]
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x1c]
add dword [esp + 0x18], eax
test esi, esi
mov eax, esi
jle 0x10065bf1
cmp ebx, eax
jle 0x10065be3
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0x80]
mov esi, dword [esp + 0x1c]
lea eax, [eax + ecx*4]
mov dword [esp + 4], eax
nop
mov eax, dword [edi + 8]
mov ecx, dword [esi + 8]
mov ebx, eax
sub ebx, ecx
cmovb ecx, eax
push ecx
push dword [esi]
push dword [edi]
call sub.msvcrt.dll_memcmp
add esp, 0xc
test eax, eax
mov ecx, edi
mov edx, dword [esp]
cmovne ebx, eax
xor eax, eax
test ebx, ebx
cmovns ecx, esi
setns al
movq xmm0, qword [ecx]
lea eax, [eax + eax*2]
lea esi, [esi + eax*4]
movq qword [edx], xmm0
mov ecx, dword [ecx + 8]
mov dword [edx + 8], ecx
add edx, 0xc
cmp esi, dword [esp + 0x18]
mov dword [esp], edx
jae 0x10065bdd
shr ebx, 0x1f
lea eax, [ebx + ebx*2]
lea edi, [edi + eax*4]
cmp edi, dword [esp + 4]
jb 0x10065b80
mov ebx, dword [esp + 0x24]
jmp 0x10065be9
mov esi, dword [esp + 0x1c]
mov ebx, eax
mov edi, dword [esp]
jmp 0x100658ec
mov esi, dword [esp + 0x1c]
mov edi, dword [esp]
mov ebx, eax
jmp 0x100658ec
mov edx, dword [esp + 0x10]
cmp ecx, eax
jae 0x100659c4
jmp 0x100659c7
mov edi, 2
jmp 0x100655c5
mov edi, 3
jmp 0x100655c5
push dword [esp + 0xc]
push 0
mov esi, dword [0x1035648c]
push dword [esi]
call sub.KERNEL32.dll_HeapFree
push dword [esp + 0x1c]
push 0
push dword [esi]
call sub.KERNEL32.dll_HeapFree
mov esi, dword [esp + 0x30]
cmp esi, 2
jb 0x10065ddd
mov ecx, dword [esp + 0x28]
dec esi
mov edx, 1
lea ebx, [ecx + 0xc]
mov dword [esp], ecx
jmp 0x10065c87
movq xmm0, qword [ebx]
mov eax, dword [ebx + 8]
inc edx
mov dword [ecx + edi*4 + 8], eax
movq qword [ecx + edi*4], xmm0
add ebx, 0xc
dec esi
je 0x10065ce6
mov eax, dword [ebx + 8]
lea edi, [edx + edx*2]
cmp eax, dword [ecx + edi*4 - 4]
jne 0x10065c70
mov ecx, dword [esp]
lea ecx, [ecx + edi*4 - 0xc]
mov dword [esp + 4], ecx
mov ecx, dword [ebx]
push eax
mov eax, dword [esp + 8]
push dword [eax]
mov dword [esp + 0x20], ecx
push ecx
mov dword [esp + 0x10], edx
call sub.msvcrt.dll_memcmp
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
add esp, 0xc
test eax, eax
jne 0x10065c70
mov eax, dword [esp + 0x18]
cmp dword [ebx + 4], 0
je 0x10065c81
push eax
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov edx, dword [esp + 4]
mov ecx, dword [esp]
jmp 0x10065c81
cmp edx, 0x400
mov dword [esp + 0x30], edx
jbe 0x10065ddd
lea eax, [esp + 0x68]
mov dword [esp + 0x90], 0x10245128
mov dword [esp + 0x94], 1
mov dword [esp + 4], edx
mov dword [esp + 0x68], edx
mov dword [esp + 0xa0], 0
mov dword [esp + 0x38], eax
lea eax, [esp + 0x38]
mov dword [esp + 0x3c], 0x1002d590
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], 1
lea ecx, [esp + 0x90]
lea eax, [esp + 0x128]
push ecx
push eax
call fcn.1001ac00
add esp, 8
movq xmm0, qword [esp + 0x128]
mov eax, dword [esp + 0x130]
mov ebx, dword [0x103564a0]
mov esi, dword [0x1035648c]
movq qword [esp + 0x38], xmm0
mov dword [esp + 0x40], eax
mov dword [esp + 0x98], eax
movq qword [esp + 0x90], xmm0
movzx eax, byte [ebx]
mov eax, dword [esi]
test eax, eax
jne 0x10065dab
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x100660b2
mov dword [esi], eax
push 0xc
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x100660b2
mov ecx, dword [esp + 0x40]
mov edi, eax
mov dword [eax + 8], ecx
movq xmm0, qword [esp + 0x38]
movq qword [eax], xmm0
movzx eax, byte [ebx]
mov eax, dword [esi]
test eax, eax
je 0x10065e13
mov ebx, edi
jmp 0x10065e24
mov eax, dword [esp + 0x30]
mov ecx, dword [ebp + 8]
movq xmm0, qword [esp + 0x28]
mov dword [ecx + 8], eax
mov eax, ecx
movq qword [ecx], xmm0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 8]
cmp dword [esp + 0x3c], 0
mov dword [esp + 8], eax
jne 0x10064f3f
jmp 0x10064f51
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x100660c0
mov ebx, edi
mov dword [esi], eax
push 0xc
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x100660c0
mov ecx, dword [ebp + 8]
mov dword [eax], ebx
mov dword [eax + 4], 0x102450a4
mov byte [eax + 8], 0x27
mov edi, dword [esp + 4]
mov dword [ecx + 8], eax
mov dword [ecx + 4], 3
mov eax, ecx
mov dword [ecx], 0
mov ecx, dword [esp]
lea ebx, [ecx + 4]
jmp 0x10065e76
add ebx, 0xc
dec edi
je 0x10065e8f
cmp dword [ebx], 0
je 0x10065e70
push dword [ebx - 4]
push 0
push dword [esi]
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [esp]
mov eax, dword [ebp + 8]
jmp 0x10065e70
cmp dword [esp + 0x2c], 0
je 0x10065df3
push ecx
push 0
push dword [esi]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [ebp + 8]
jmp 0x10065df3
mov eax, dword [esp + 0x14]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 8]
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], eax
lea eax, [esp + 0x68]
push 0x10244ea8
push 0x10245048
push eax
push 0x37
push 0x10244e24
call fcn.10026bb0
add esp, 0x14
jmp 0x100660cc
mov esi, dword [esp + 4]
test eax, eax
jne 0x10065f88
mov eax, dword [esp + 8]
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], eax
call fcn.1001a7a0
jmp 0x100660cc
mov eax, 0x10244f40
mov dword [esp + 0x90], 0x10244e04
jmp 0x10065f56
push 0x10244f50
push eax
push ecx
call fcn.1002a1f0
add esp, 0xc
jmp 0x100660cc
push 0x10244f50
push dword [esp + 0x18]
push eax
call fcn.1002a190
add esp, 0xc
jmp 0x100660cc
mov dword [esp + 0x90], 0x10244e04
mov eax, 0x10244f30
lea ecx, [esp + 0x90]
mov dword [ecx + 4], 1
mov dword [ecx + 0x10], 0
mov dword [ecx + 8], 0x10244e0c
mov dword [ecx + 0xc], 0
push eax
push ecx
call fcn.10026810
add esp, 8
jmp 0x100660cc
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x130]
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], edx
push ecx
push eax
call fcn.1001a7e0
add esp, 8
jmp 0x100660cc
mov eax, dword [esp + 0x14]
mov dword [esp + 0x30], eax
lea eax, [esp + 0x68]
push 0x1024514c
push 0x10245084
push eax
push 0x2b
push 0x10245058
call fcn.10026bb0
add esp, 0x14
jmp 0x100660cc
push 0x10244ff8
push 0x2c
push 0x10244fcc
call fcn.10026890
add esp, 0xc
jmp 0x100660cc
push 0x10244fac
push 0x2b
push 0x10244f60
call fcn.10026890
add esp, 0xc
jmp 0x100660cc
mov ecx, dword [esp + 0xc]
mov eax, 0x10244fbc
jmp 0x10066053
push esi
push ebx
call fcn.1001a7e0
add esp, 8
jmp 0x100660cc
call fcn.1001a7a0
jmp 0x100660cc
push 0x10244f20
push dword [esp + 0x18]
push eax
call fcn.1002a190
add esp, 0xc
jmp 0x100660cc
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x34], eax
mov eax, 0x10244f20
mov dword [esp + 0xc], ecx
push eax
push dword [esp + 0x38]
push dword [esp + 0x18]
call fcn.1002a1f0
add esp, 0xc
jmp 0x100660cc
push 0xc
push 4
call fcn.1001a7e0
add esp, 8
jmp 0x100660cc
push 0xc
push 4
call fcn.1001a7e0
add esp, 8
jmp 0x100660cc
push 0x10244f8c
push 0x2b
push 0x10244f60
call fcn.10026890
add esp, 0xc
jmp 0x100660cc
push 0x10244f9c
push 0x2b
push 0x10244f60
call fcn.10026890
add esp, 0xc
jmp 0x100660cc
push 0xc
push 4
call fcn.1001a7e0
add esp, 8
jmp 0x100660cc
push 0xc
push 4
call fcn.1001a7e0
add esp, 8
ud2