Function at 0x414060
Capabilities:
Get process heap flags
Write file on windows

Disassembly:
push edi
lea edi, [esp + 8]
and esp, 0xfffffff8
push dword [edi - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov ebx, eax
sub esp, 0x47c
lea esi, [ebp - 0x46c]
lea edi, [ebp - 0x450]
mov eax, dword [eax + 0x18]
mov edx, dword [ebx + 0x1c]
mov dword [esp + 4], esi
mov dword [esp], edi
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], edx
call fcn.0041f870
test eax, eax
je 0x413774
mov edx, dword [ebp - 0x46c]
lea eax, [edx - 0xb]
cmp eax, 5
ja case.0x413739.13
jmp dword [eax*4 + 0x43e904]
lea eax, [ebp - 0x460]
mov dword [esp + 4], 4
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.00413300
test eax, eax
je 0x413774
mov eax, dword [ebp - 0x460]
mov dword [esp + 4], eax
mov dword [esp], 0x43e8c1
call fcn.004218d0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret
lea eax, [ebp - 0x458]
mov dword [esp + 4], 2
mov dword [esp + 8], eax
mov dword [esp], edi
call fcn.0041e2d0
test eax, eax
je 0x413774
mov edx, dword [ebp - 0x458]
cmp edx, 8
ja 0x413774
lea eax, [edx - 1]
test eax, edx
jne 0x413774
lea eax, [ebp - 0x460]
mov ecx, 1
mov dword [esp], eax
mov eax, ebx
call fcn.00413400
test eax, eax
je 0x413774
lea eax, [ebp - 0x468]
mov dword [esp + 4], 0xd
mov dword [esp + 8], eax
mov dword [esp], edi
call fcn.0041e2d0
test eax, eax
je 0x413f80
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x41c], 0
test eax, eax
je 0x413f80
lea esi, [ebp - 0x420]
xor edx, edx
mov dword [ebp - 0x470], esi
mov esi, edx
jmp 0x41384e
mov eax, dword [ebp - 0x468]
mov ecx, eax
cmp eax, 0x100
jbe 0x41382c
mov ecx, 0x100
mov edx, dword [ebp - 0x41c]
sub eax, ecx
add edx, 0x100
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x41c], edx
test eax, eax
je 0x413f78
cmp eax, 0x100
jbe 0x41385a
mov eax, 0x100
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x470]
mov dword [esp + 8], eax
mov dword [esp + 4], 7
mov dword [esp], edi
call fcn.0041e2d0
test eax, eax
je 0x413818
mov eax, dword [ebp - 0x44c]
mov ecx, dword [ebp - 0x420]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x468]
cmp ecx, eax
jbe 0x41389c
mov ecx, eax
xor ebx, ebx
test ecx, ecx
je 0x41381e
nop
mov eax, dword [ebp - 0x470]
mov eax, dword [eax + ebx*4 + 8]
mov dword [esp + 4], 0xb
mov dword [ebp - 0x448], eax
lea eax, [ebp - 0x440]
mov dword [esp + 8], eax
lea eax, [ebp - 0x448]
mov dword [esp], eax
call fcn.0041e2d0
test eax, eax
je 0x41392b
mov eax, dword [ebp - 0x440]
cmp ax, 0x10
je 0x413f00
ja 0x413eb8
cmp ax, 2
je 0x413ef0
cmp ax, 3
jne 0x413bc0
mov ecx, dword [ebp - 0x438]
mov edx, ecx
mov eax, dword [ebp - 0x45c]
sar edx, 0x1f
xor eax, edx
mov edx, dword [ebp - 0x460]
xor ecx, edx
or eax, ecx
je 0x413bd5
xor esi, esi
mov eax, dword [ebp - 0x468]
mov ecx, dword [ebp - 0x420]
inc ebx
cmp ecx, eax
jbe 0x41393e
mov ecx, eax
cmp ecx, ebx
ja 0x4138a8
jmp 0x41381e
lea eax, [ebp - 0x440]
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.0041fb20
test eax, eax
mov eax, dword [0x4ab5d8]
mov eax, dword [eax + 0x2c]
jne 0x413a80
add ebx, 8
mov edx, dword [0x4ab5d4]
mov dword [esp + 4], ebx
mov edx, dword [edx + 0xc]
mov dword [esp], edx
call dword [eax + 8]
mov dword [esp], str.Internal_symbol_error:_unable_to_access_memory_location__p
mov dword [esp + 4], eax
call fcn.004218d0
jmp 0x413774
lea eax, [ebp - 0x458]
mov dword [esp + 4], 2
mov dword [esp + 8], eax
mov dword [esp], edi
call fcn.0041e2d0
test eax, eax
je 0x413a40
lea eax, [ebp - 0x448]
mov dword [esp + 4], 5
mov dword [esp + 8], eax
mov dword [esp], edi
call fcn.0041e2d0
test eax, eax
je 0x413a40
mov eax, dword [ebp - 0x448]
mov edi, dword [ebp - 0x458]
cmp eax, 0xe
ja case.0x4139f9.0
jmp dword [eax*4 + 0x43e91c]
test byte [0x438750], 1
je 0x413774
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], 0x43e8ed
mov dword [esp + 8], str.print_typed_basic
mov dword [esp + 4], 0x438750
mov dword [esp], 0
call fcn.00412a50
jmp 0x413774
test byte [0x438750], 2
jne 0x413f48
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0x80003000
call dword [sym.imp.kernel32.dll_RaiseException]
lea edx, [ebp - 0x438]
lea ebx, [ebp - 0x428]
mov dword [esp + 4], edx
mov edx, dword [0x4ab5d4]
mov edx, dword [edx + 0xc]
mov dword [esp], edx
call dword [eax + 8]
mov dword [esp + 4], esi
mov dword [esp], ebx
mov dword [ebp - 0x460], eax
call fcn.0041f870
test eax, eax
je 0x41375e
cmp dword [ebp - 0x46c], 0x10
jne 0x41375e
lea eax, [ebp - 0x448]
mov dword [esp + 4], 5
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.0041e2d0
test eax, eax
je 0x41375e
lea eax, [ebp - 0x458]
mov dword [esp + 4], 2
mov dword [esp + 8], eax
mov dword [esp], ebx
call fcn.0041e2d0
test eax, eax
mov eax, dword [ebp - 0x460]
je 0x413764
test eax, eax
je 0x414024
mov ecx, dword [ebp - 0x448]
cmp ecx, 2
je 0x41400a
cmp ecx, 3
jne 0x413764
mov edx, dword [ebp - 0x458]
xor edx, 2
or edx, dword [ebp - 0x454]
jne 0x413764
xor edx, edx
cmp ecx, 3
sete dl
mov dword [esp + 0xc], edx
mov dl, byte [ebp - 0x440]
and edx, 1
lea edi, [ebp - 0x420]
mov dword [esp + 4], eax
mov eax, dword [0x4ab5d8]
mov dword [esp + 0x14], 0x400
mov dword [esp + 0x10], edi
mov dword [esp + 8], edx
mov dword [esp], eax
mov dword [ebp - 0x470], edi
call fcn.00412f00
test eax, eax
je 0x41403f
cmp dword [ebp - 0x448], 3
je 0x414035
mov eax, 0x43e800
mov edi, dword [ebp - 0x470]
mov dword [esp + 4], eax
mov dword [esp + 8], edi
mov dword [esp], str._s__s_
call fcn.004218d0
jmp 0x413774
test byte [0x438750], 1
jne 0x413f10
test esi, esi
je 0x413929
lea eax, [ebp - 0x464]
mov dword [esp + 4], 1
mov dword [esp + 8], eax
lea eax, [ebp - 0x448]
mov dword [esp], eax
call fcn.0041e2d0
test eax, eax
je 0x413c07
mov eax, dword [ebp - 0x464]
test eax, eax
jne 0x413fb6
mov esi, 1
jmp 0x41392b
test byte [0x438750], 1
je 0x413774
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Unsupported_basetype__lu_n
mov dword [esp + 8], str.print_typed_basic
mov dword [esp + 4], 0x438750
mov dword [esp], 0
call fcn.00412a50
jmp 0x413774
cmp edi, 8
ja 0x413774
lea eax, [edi - 1]
test eax, edi
jne 0x413774
lea eax, [ebp - 0x460]
mov ecx, 1
mov dword [esp], eax
mov edx, edi
mov eax, ebx
call fcn.00413400
test eax, eax
je 0x413774
mov eax, dword [ebp - 0x45c]
mov edx, dword [ebp - 0x460]
mov esi, eax
or esi, edx
je 0x413fa5
mov ecx, 8
or esi, 0xffffffff
sub ecx, edi
or edi, 0xffffffff
shl ecx, 3
shrd esi, edi, cl
shr edi, cl
test cl, 0x20
je 0x413cb9
mov esi, edi
xor edi, edi
and edx, esi
and eax, edi
mov dword [esp + 4], edx
mov dword [esp + 8], eax
mov dword [esp], 0x43e830
call fcn.004218d0
jmp 0x413774
cmp edi, 8
ja 0x413774
lea eax, [edi - 1]
test eax, edi
jne 0x413774
lea eax, [ebp - 0x460]
xor ecx, ecx
mov dword [esp], eax
jmp 0x413c74
cmp edi, 8
ja 0x413774
lea eax, [edi - 1]
test eax, edi
jne 0x413774
lea eax, [ebp - 0x460]
mov ecx, 1
mov dword [esp], eax
mov edx, edi
mov eax, ebx
call fcn.00413400
test eax, eax
je 0x413774
mov ebx, dword [ebp - 0x460]
mov esi, dword [ebp - 0x45c]
cmp edi, 2
jne 0x413d60
xor edx, edx
mov dx, bx
mov dword [esp], edx
mov dword [ebp - 0x470], edx
call dword [sym.imp.ucrtbase.dll_iswprint]
mov edx, dword [ebp - 0x470]
test eax, eax
jne 0x413ff5
mov eax, esi
or eax, ebx
je 0x413fa5
mov ecx, 8
or edx, 0xffffffff
sub ecx, edi
or eax, 0xffffffff
shl ecx, 3
shrd eax, edx, cl
shr edx, cl
test cl, 0x20
je 0x413d88
mov eax, edx
xor edx, edx
and ebx, eax
and esi, edx
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], 0x43e830
call fcn.004218d0
jmp 0x413774
cmp edi, 8
ja 0x413774
lea eax, [edi - 1]
test eax, edi
jne 0x413774
lea eax, [ebp - 0x460]
mov ecx, 1
mov dword [esp], eax
mov edx, edi
mov eax, ebx
call fcn.00413400
test eax, eax
je 0x413774
mov ebx, dword [ebp - 0x460]
mov esi, dword [ebp - 0x45c]
cmp edi, 1
jne 0x413d60
movsx edx, bl
mov dword [esp], edx
mov dword [ebp - 0x470], edx
call dword [sym.imp.ucrtbase.dll_isprint]
mov edx, dword [ebp - 0x470]
test eax, eax
je 0x413d60
mov dword [esp + 4], edx
mov dword [esp], str._c
call fcn.004218d0
jmp 0x413774
cmp edi, 8
ja 0x413774
lea eax, [edi - 1]
test eax, edi
jne 0x413774
lea eax, [ebp - 0x460]
mov ecx, 1
mov dword [esp], eax
mov edx, edi
mov eax, ebx
call fcn.00413400
test eax, eax
je 0x413774
mov eax, dword [ebp - 0x45c]
mov edx, 0x43e807
or eax, dword [ebp - 0x460]
jne 0x413e6d
mov edx, 0x43e80c
mov dword [esp + 4], edx
mov dword [esp], 0x43e7c0
call fcn.004218d0
jmp 0x413774
lea eax, [ebp - 0x420]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00413640
test eax, eax
je 0x413774
fld qword [ebp - 0x420]
mov dword [esp], 0x43e837
fstp qword [esp + 4]
call fcn.004218d0
jmp 0x413774
cmp ax, 0x14
jne 0x413bc0
mov eax, dword [ebp - 0x434]
mov ecx, dword [ebp - 0x45c]
mov edx, dword [ebp - 0x438]
mov esi, dword [ebp - 0x460]
xor eax, ecx
xor edx, esi
or eax, edx
jne 0x413929
jmp 0x413bd5
movsx ecx, word [ebp - 0x438]
jmp 0x41390c
movsx ecx, byte [ebp - 0x438]
jmp 0x41390c
and eax, 0xffff
mov dword [esp + 0xc], str.Unsupported_variant_type___u__n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.print_typed_basic
mov dword [esp + 4], 0x438750
mov dword [esp], 0
call fcn.00412a50
jmp 0x413bcd
mov dword [esp + 0xc], 0x43e814
mov dword [esp + 8], str.print_typed_basic
mov dword [esp + 4], 0x438750
mov dword [esp], 1
call fcn.00412a50
jmp 0x413a4d
test esi, esi
jne 0x413774
mov eax, dword [ebp - 0x460]
mov edx, dword [ebp - 0x45c]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp], 0x43e8e7
call fcn.004218d0
jmp 0x413774
mov dword [esp], 0x43e82e
call fcn.004218d0
jmp 0x413774
mov dword [esp + 4], eax
mov dword [esp], 0x43e8e3
call fcn.004218d0
mov edx, dword [ebp - 0x464]
mov eax, dword fs:[0x18]
mov dword [esp + 8], edx
mov dword [esp + 4], 0
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
jmp 0x413774
mov dword [esp + 4], edx
mov dword [esp], str.L_lc
call fcn.004218d0
jmp 0x413774
mov edx, dword [ebp - 0x458]
xor edx, 1
or edx, dword [ebp - 0x454]
jne 0x413764
jmp 0x413b45
mov dword [esp], 0x43e89b
call fcn.004218d0
jmp 0x41375e
mov eax, 0x43e812
jmp 0x413ba1
mov eax, dword [ebp - 0x460]
mov dword [esp], str._invalid_address__p_
mov dword [esp + 4], eax
call fcn.004218d0
jmp 0x413774
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x14
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov eax, dword [esi + 0x18]
cmp eax, 0xffffffff
je 0x414120
test bl, bl
jne 0x4140d0
cmp eax, 0xffffff1d
je 0x414098
lea esp, [ebp - 0xc]
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
jmp 0x4136e0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], esi
call fcn.0041fda0
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp], 0x43e8e7
call fcn.004218d0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [esp + 0x10]
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.0041fda0
lea ecx, [ebx - 0x62]
cmp cl, 0x16
ja case.0x4140f6.3
and ecx, 0xff
jmp dword [ecx*4 + 0x43e9c8]
movsx ebx, bl
mov dword [esp + 4], ebx
mov dword [esp], 0x43e98c
call fcn.004218d0
mov eax, dword [esi + 0x18]
jmp 0x414082
mov dword [ebp + 8], str.Unable_to_evaluate_expression_n
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004218d0
mov edi, edx
mov ebx, dword [esp + 0x10]
or edi, eax
jne 0x414198
mov dword [esp], 0x43e82e
call fcn.004218d0
jmp 0x4140c4
and eax, 0xffff
mov dword [esp], str._d___lc
mov dword [esp + 8], eax
mov dword [esp + 4], eax
call fcn.004218d0
jmp 0x4140c4
movsx eax, al
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov dword [esp], str._d___c
call fcn.004218d0
jmp 0x4140c4
mov ecx, 8
or edi, 0xffffffff
sub ecx, ebx
or esi, 0xffffffff
shl ecx, 3
shrd esi, edi, cl
shr edi, cl
test cl, 0x20
je 0x4141b6
mov esi, edi
xor edi, edi
and eax, esi
and edx, edi
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp], 0x43e830
call fcn.004218d0
jmp 0x4140c4