Function at 0x101937d0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0xf70
mov dword [esp + 0xcc], ecx
mov ecx, dword [edx + 0x40]
mov eax, dword [edx + 0x5c]
mov edi, ecx
sub edi, eax
jb 0x10195649
cmp edi, dword [edx + 0x18]
mov dword [esp + 0x54], edx
mov dword [esp + 0x104], edi
jne 0x101939de
cmp ecx, eax
jbe 0x1019557d
mov ecx, dword [esp + 0x54]
imul eax, eax, 0x260
mov esi, dword [ecx + 0x38]
cmp dword [esi + eax], 3
je 0x101939de
add esi, eax
lea ecx, [esp + 0x620]
mov edx, esi
call fcn.101910c0
mov eax, dword [esp + 0x620]
xor eax, 3
or eax, dword [esp + 0x624]
jne 0x10193860
mov dword [esp + 8], 0
mov edi, 8
xor eax, eax
jmp 0x101939a3
mov dword [esp + 0xc], esi
lea edi, [esp + 0x130]
lea esi, [esp + 0x620]
mov ecx, 0x1a
mov eax, dword [0x103564a0]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [0x1035648c]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x1019389c
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x101956e2
mov dword [esi], eax
push 0x1a0
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x101956e2
lea edx, [esp + 0x620]
mov ecx, 0x1a
mov edi, eax
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov edi, 1
mov dword [esp + 0x3c0], eax
mov dword [esp + 0x3c4], 4
mov dword [esp + 0x30], eax
mov dword [esp + 0x3c8], 1
mov dword [esp + 8], 0x68
jmp 0x10193935
mov eax, dword [esp + 0x3c0]
mov ebx, dword [esp + 8]
lea edx, [esp + 0x620]
mov dword [esp + 0x30], eax
mov ecx, 0x1a
mov esi, edx
lea edi, [eax + ebx]
add ebx, 0x68
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 8], ebx
mov edi, dword [esp + 0x40]
inc edi
mov dword [esp + 0x3c8], edi
mov esi, dword [esp + 0xc]
mov ecx, edx
mov edx, esi
call fcn.101910c0
mov eax, dword [esp + 0x620]
mov dword [esp + 0x40], edi
xor eax, 3
or eax, dword [esp + 0x624]
je 0x10193990
mov ecx, 0x1a
lea edi, [esp + 0x130]
lea esi, [esp + 0x620]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x30]
cmp edx, dword [esp + 0x3c4]
jne 0x10193907
lea ecx, [esp + 0x3c0]
call fcn.10191020
jmp 0x10193900
mov eax, dword [esp + 0x3c4]
mov edi, dword [esp + 0x30]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x40]
imul ebx, eax, 0x68
add ebx, edi
mov ecx, esi
call fcn.101906b0
mov eax, dword [esp + 8]
mov dword [esi], 3
mov dword [esi + 4], edi
mov dword [esi + 8], eax
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], ebx
add esi, 0x14
lea eax, [esp + 0x130]
push 0x24c
push eax
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [ebp + 8]
mov esi, dword [eax + 0x50]
mov ecx, dword [eax + 0x48]
lea eax, [esp + 0x130]
push esi
mov dword [esp + 0xb8], ecx
push ecx
push eax
call fcn.101584e0
add esp, 0xc
mov edx, dword [esp + 0x130]
mov dword [esp + 0x70], esi
cmp edx, 2
mov dword [esp + 0x30], edx
jne 0x10193a8b
mov eax, dword [esp + 0x138]
mov ebx, dword [esp + 0x134]
test esi, esi
mov ecx, esi
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x54]
mov eax, dword [eax + 0x60]
mov dword [esp + 8], eax
je 0x10193b28
js 0x101956a6
mov eax, dword [0x103564a0]
mov esi, dword [0x1035648c]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x10193a64
call sub.KERNEL32.dll_GetProcessHeap
mov ecx, dword [esp + 0x70]
test eax, eax
je 0x10193a79
mov dword [esi], eax
push ecx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov ecx, dword [esp + 0x70]
test eax, eax
jne 0x10193b2d
mov edi, ebx
push ecx
push 1
call fcn.1001a7e0
add esp, 8
jmp 0x101956f1
mov eax, dword [esp + 0x134]
movsd xmm0, qword [esp + 0x144]
movzx ebx, byte [esp + 0x14c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x138]
movaps xmmword [esp + 0x90], xmm0
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 0xc], eax
movzx eax, word [esp + 0x14d]
mov word [esp + 0x64], ax
movzx eax, byte [esp + 0x14f]
mov byte [esp + 0x66], al
movzx eax, byte [esp + 0x154]
mov byte [esp + 0x1c], al
mov eax, dword [esp + 0x150]
mov dword [esp + 0x14], eax
lea eax, [esp + 0x155]
lea ecx, [esp + 0xd35]
push 0x237
push eax
push ecx
call sub.msvcrt.dll_memcpy
movdqa xmm0, xmmword [esp + 0x9c]
add esp, 0xc
jmp 0x10193b71
mov eax, 1
push ecx
push dword [esp + 0xb8]
mov dword [esp + 0x14], eax
push eax
mov esi, ecx
call sub.msvcrt.dll_memcpy
add esp, 0xc
movzx eax, word [esp + 0x130]
movd xmm0, esi
mov dword [esp + 0x10], ebx
mov byte [esp + 0x1c], 2
xor ebx, ebx
pshufd xmm0, xmm0, 0x50
mov word [esp + 0x64], ax
movzx eax, byte [esp + 0x132]
mov byte [esp + 0x66], al
mov eax, dword [esp + 0xc]
mov esi, dword [esp + 0x54]
mov dword [esp + 0x630], eax
movzx eax, word [esp + 0x64]
movq qword [esp + 0x634], xmm0
mov byte [esp + 0x63c], bl
mov edi, dword [esi + 0x60]
mov word [esp + 0x63d], ax
movzx eax, byte [esp + 0x66]
mov byte [esp + 0x63f], al
lea eax, [esp + 0x645]
lea ecx, [esp + 0xd35]
push 0x237
push ecx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov dword [esp + 0x87c], edi
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 8]
mov edx, dword [esp + 0x40]
cmp dword [esi + 0x10], 0
movzx eax, byte [esp + 0x1c]
mov dword [esp + 0x620], ecx
mov dword [esp + 0x624], edi
mov dword [esp + 0x62c], edx
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x628], edi
mov dword [esp + 0x640], edx
mov byte [esp + 0x644], al
je 0x101951cf
lea eax, [esi + 0x10]
mov dword [esp + 0x10c], eax
lea eax, [esp + 0x620]
lea esi, [esp + 0xad4]
push 0x260
push eax
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0xad4]
cmp eax, 3
jne 0x10193d5d
mov ebx, dword [esp + 0xae0]
cmp ebx, dword [esp + 0xae4]
je 0x1019516f
lea eax, [ebx + 0x68]
mov dword [esp + 0xae0], eax
mov eax, dword [ebx]
movzx edx, byte [ebx + 0x20]
mov esi, dword [ebx + 4]
movq xmm0, qword [ebx + 0x14]
mov dword [esp + 0x28], eax
mov eax, dword [ebx + 8]
mov byte [esp + 8], dl
mov edx, dword [ebx + 0xc]
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 0x10]
mov dword [esp + 0xc], edx
mov edx, dword [ebx + 0x24]
mov dword [esp + 0x40], eax
mov eax, dword [ebx + 0x1c]
mov dword [esp + 0x83], edx
mov edx, dword [ebx + 0x21]
mov dword [esp + 0x60], eax
mov dword [esp + 0x80], edx
movzx edx, word [ebx + 0x29]
movzx eax, byte [ebx + 0x28]
mov word [esp + 0x24], dx
movzx edx, byte [ebx + 0x2b]
mov byte [esp + 0x26], dl
mov edx, dword [ebx + 0x2c]
movsd xmm1, qword [ebx + 0x50]
mov ecx, dword [ebx + 0x40]
movq xmm2, qword [ebx + 0x30]
mov dword [esp + 0x58], edx
mov edx, dword [ebx + 0x3c]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x2c], edx
mov edx, dword [ebx + 0x38]
mov dword [esp + 0x5c], edx
mov edx, dword [ebx + 0x44]
movsd qword [esp + 0xe8], xmm1
movsd xmm1, qword [ebx + 0x48]
mov dword [esp + 0x10], edx
movsd qword [esp + 0xe0], xmm1
mov ecx, dword [ebx + 0x60]
mov edi, dword [ebx + 0x58]
movzx edx, byte [ebx + 0x67]
mov dword [esp + 0x14], ecx
movzx ecx, byte [ebx + 0x64]
mov dword [esp + 0x90], edi
mov edi, dword [ebx + 0x5c]
mov byte [esp + 0x1a], dl
movzx edx, word [ebx + 0x65]
mov bh, al
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0xa0], edi
mov word [esp + 0x18], dx
mov edx, ecx
xor edx, 3
or edx, esi
jne 0x10193fe9
jmp 0x1019516f
cmp eax, 2
jne 0x10193e04
mov bh, byte [esp + 0xaf8]
mov byte [esp + 0xaf8], 3
cmp bh, 3
je 0x1019516f
mov eax, dword [esp + 0xad8]
movq xmm0, qword [esp + 0xae4]
xor esi, esi
mov ecx, 2
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xadc]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xae0]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xaec]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0xaf1]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0xaf4]
mov dword [esp + 0x83], eax
movzx eax, word [esp + 0xaf9]
mov word [esp + 0x24], ax
movzx eax, byte [esp + 0xaf0]
mov byte [esp + 8], al
movzx eax, byte [esp + 0xafb]
mov byte [esp + 0x26], al
mov dword [esp + 0x30], eax
jmp 0x10193fe9
mov edi, dword [esp + 0xd30]
push esi
lea eax, [esp + 0x134]
push eax
call fcn.10157e70
add esp, 8
cmp dword [esp + 0x130], 0
je 0x10193fc9
mov esi, dword [esp + 0x134]
mov eax, dword [esp + 0x13c]
mov ebx, dword [esp + 0x138]
test esi, esi
mov dword [esp + 0x40], eax
je 0x101950ca
lea eax, [esp + 0x140]
lea ecx, [esp + 0x3cc]
push 0x248
push eax
push ecx
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x40]
mov dword [esp + 0x3c0], esi
mov dword [esp + 0x3c4], ebx
mov dword [esp + 0x3c8], eax
lea eax, [esp + 0x3c0]
lea ecx, [esp + 0x880]
push eax
push ecx
call fcn.10149fc0
add esp, 8
mov eax, dword [esp + 0x3e4]
movdqu xmm0, xmmword [esp + 0x3c8]
mov ecx, dword [esp + 0x3c4]
mov edx, dword [esp + 0x3e8]
movq xmm2, qword [esp + 0x3d8]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x3e0]
movdqa xmmword [esp + 0x130], xmm0
pshufd xmm3, xmm0, 0xff
mov esi, ecx
shl esi, 0x15
sar esi, 0x1f
mov dword [esp + 0x2c], eax
movdqa xmmword [esp + 0x3a0], xmm0
mov eax, dword [esp + 0x131]
movzx ebx, byte [esp + 0x3a0]
mov bh, byte [esp + 0x3a8]
movq xmm0, qword [esp + 0x880]
movsd xmm1, qword [esp + 0x888]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x134]
movsd qword [esp + 0x118], xmm1
movq qword [esp + 0x110], xmm0
mov dword [esp + 0xd3], eax
movzx eax, word [esp + 0x139]
mov word [esp + 0x78], ax
movzx eax, byte [esp + 0x13b]
mov byte [esp + 0x7a], al
mov eax, ecx
mov ecx, dword [esp + 0x3c0]
lock dec dword [ecx]
mov dword [esp + 0xa0], edx
jne 0x10193f9b
mov dword [esp + 0x10], esi
mov esi, eax
movdqa xmmword [esp + 0x40], xmm2
movdqa xmmword [esp + 0x30], xmm3
call fcn.10190c70
mov eax, esi
movdqa xmm3, xmmword [esp + 0x30]
movdqa xmm2, xmmword [esp + 0x40]
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0xa0]
inc edi
and esi, edx
mov byte [esp + 8], bl
movd dword [esp + 0x58], xmm3
mov dword [esp + 0xc], 0
mov dword [esp + 0x40], 0
xor ecx, ecx
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], edi
xor esi, esi
jmp 0x101950e5
mov dword [esp + 0x30], 0
pxor xmm0, xmm0
mov ecx, 3
xor esi, esi
mov edx, ecx
xor edx, 3
or edx, esi
je 0x1019516f
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x130], ecx
mov dword [esp + 0x134], esi
movsd xmm1, qword [esp + 0xe8]
mov dword [esp + 0x138], eax
mov eax, dword [esp + 0xc]
mov dword [esp + 0x13c], eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x140], eax
mov eax, dword [esp + 0x60]
movq qword [esp + 0x144], xmm0
movq xmm0, qword [esp + 0xe0]
mov dword [esp + 0x14c], eax
movzx eax, byte [esp + 8]
mov byte [esp + 0x150], al
mov eax, dword [esp + 0x80]
mov dword [esp + 0x151], eax
mov eax, dword [esp + 0x83]
mov dword [esp + 0x154], eax
movzx eax, word [esp + 0x24]
mov byte [esp + 0x158], bh
mov word [esp + 0x159], ax
movzx eax, byte [esp + 0x26]
mov byte [esp + 0x15b], al
mov eax, dword [esp + 0x58]
mov dword [esp + 0x15c], eax
mov eax, dword [esp + 0x5c]
movq qword [esp + 0x160], xmm2
mov dword [esp + 0x168], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x16c], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x170], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x174], eax
mov eax, dword [esp + 0x90]
movsd qword [esp + 0x180], xmm1
movq qword [esp + 0x178], xmm0
mov dword [esp + 0x188], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x18c], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x190], eax
mov eax, dword [esp + 0x30]
mov byte [esp + 0x194], al
movzx eax, word [esp + 0x18]
mov word [esp + 0x195], ax
movzx eax, byte [esp + 0x1a]
mov byte [esp + 0x197], al
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x1019414b
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1019567f
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push 0x1a0
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x1019567f
lea edx, [esp + 0x130]
mov ecx, 0x1a
mov edi, eax
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], 4
mov dword [esp + 0xc4], 1
push 0x260
lea eax, [esp + 0xad8]
push eax
push edx
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ebx, 1
mov dword [esp + 0x20], eax
jmp 0x101941d8
imul edi, ebx, 0x68
mov ecx, 0x1a
lea esi, [esp + 0x3c0]
inc ebx
add edi, dword [esp + 0xbc]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xc4], ebx
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x40]
mov eax, dword [esp + 0x130]
mov dword [esp + 0x30], edi
cmp eax, 3
jne 0x101942f0
mov edx, dword [esp + 0x13c]
cmp edx, dword [esp + 0x140]
je 0x10194802
lea eax, [edx + 0x68]
mov dword [esp + 0x13c], eax
movzx ebx, byte [edx + 0x20]
mov eax, dword [edx + 8]
movsd xmm1, qword [edx + 0x14]
mov edi, dword [edx]
mov ecx, dword [edx + 4]
mov byte [esp + 0xc], bl
mov ebx, esi
mov esi, dword [edx + 0x1c]
mov dword [esp + 0x14], eax
mov eax, dword [edx + 0x10]
mov dword [esp + 0x90], esi
mov esi, dword [edx + 0x24]
mov dword [esp + 0x1c], eax
mov eax, dword [edx + 0xc]
mov dword [esp + 0x7b], esi
mov dword [esp + 0x10], eax
mov esi, dword [edx + 0x21]
mov dword [esp + 0x78], esi
movzx esi, word [edx + 0x29]
movzx eax, byte [edx + 0x28]
mov word [esp + 0x18], si
mov esi, ebx
mov byte [esp + 8], al
movzx ebx, byte [edx + 0x2b]
mov byte [esp + 0x1a], bl
mov eax, dword [edx + 0x2c]
movsd xmm0, qword [edx + 0x30]
mov dword [esp + 0x8c], eax
mov eax, dword [edx + 0x3c]
movaps xmmword [esp + 0xa0], xmm0
movsd xmm0, qword [edx + 0x50]
mov dword [esp + 0x88], eax
mov eax, dword [edx + 0x38]
mov dword [esp + 0x74], eax
mov eax, dword [edx + 0x40]
mov dword [esp + 0x28], eax
mov eax, dword [edx + 0x44]
movsd qword [esp + 0xd8], xmm0
movsd xmm0, qword [edx + 0x48]
mov dword [esp + 0x58], eax
movsd qword [esp + 0xd0], xmm0
mov eax, dword [edx + 0x58]
movzx ebx, byte [edx + 0x67]
mov dword [esp + 0x2c], eax
mov eax, dword [edx + 0x5c]
mov dword [esp + 0x5c], eax
mov eax, dword [edx + 0x60]
mov dword [esp + 0x60], eax
movzx eax, byte [edx + 0x64]
mov byte [esp + 0x6a], bl
movzx edx, word [edx + 0x65]
mov dword [esp + 0x20], eax
mov eax, ecx
mov ecx, edi
mov word [esp + 0x68], dx
jmp 0x1019469a
cmp eax, 2
jne 0x10194390
movzx eax, byte [esp + 0x154]
mov byte [esp + 0x154], 3
cmp al, 3
mov byte [esp + 8], al
je 0x10194802
mov eax, dword [esp + 0x134]
lea ecx, [esp + 0x155]
movsd xmm1, qword [esp + 0x140]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x13c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x148]
mov dword [esp + 0x90], eax
mov eax, dword [ecx - 8]
mov dword [esp + 0x78], eax
mov eax, dword [ecx - 5]
mov dword [esp + 0x7b], eax
movzx eax, word [ecx]
mov word [esp + 0x18], ax
movzx eax, byte [esp + 0x14c]
mov byte [esp + 0xc], al
movzx eax, byte [ecx + 2]
mov ecx, 2
mov byte [esp + 0x1a], al
xor eax, eax
jmp 0x101946ae
mov ebx, dword [esp + 0x38c]
mov dword [esp + 0x40], esi
lea eax, [esp + 0x130]
push eax
lea eax, [esp + 0x3c4]
push eax
call fcn.10157e70
add esp, 8
cmp dword [esp + 0x3c0], 0
mov esi, dword [esp + 0x108]
mov edx, dword [esp + 0xb8]
je 0x10194562
mov edi, dword [esp + 0x3c4]
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x3c8]
mov eax, dword [esp + 0x3cc]
test edi, edi
je 0x1019457a
push 0x248
mov esi, eax
lea eax, [esp + 0x3d4]
push eax
lea eax, [esp + 0x894]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov dword [esp + 0x880], edi
mov dword [esp + 0x888], esi
mov dword [esp + 0x884], ebx
lea eax, [esp + 0x880]
push eax
lea eax, [esp + 0x114]
push eax
call fcn.10149fc0
add esp, 8
mov eax, dword [esp + 0x8a4]
movdqu xmm2, xmmword [esp + 0x888]
movsd xmm0, qword [esp + 0x898]
mov ebx, dword [esp + 0x884]
mov edi, dword [esp + 0x8a8]
lea ecx, [esp + 0x3e9]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x8a0]
movdqa xmmword [esp + 0x3c0], xmm2
movaps xmmword [esp + 0x3b0], xmm0
mov dword [esp + 0xf8], eax
movdqa xmmword [esp + 0x390], xmm2
movzx eax, byte [esp + 0x390]
mov esi, dword [ecx - 0x28]
movzx edx, word [ecx - 0x20]
movsd xmm0, qword [esp + 0x110]
movsd xmm1, qword [esp + 0x118]
mov byte [esp + 0xc], al
movzx eax, byte [esp + 0x398]
mov dword [esp + 0x100], ebx
shl ebx, 0x15
mov word [esp + 0x6c], dx
movsd qword [esp + 0xe0], xmm0
movsd qword [esp + 0xe8], xmm1
sar ebx, 0x1f
mov byte [esp + 8], al
mov eax, dword [ecx - 0x25]
movzx ecx, byte [ecx - 0x1e]
mov byte [esp + 0x6e], cl
mov ecx, dword [esp + 0x880]
mov dword [esp + 0x83], eax
mov dword [esp + 0x80], esi
lock dec dword [ecx]
mov esi, dword [esp + 0x30]
jne 0x10194528
movdqa xmmword [esp + 0x40], xmm2
call fcn.10190c70
movdqa xmm2, xmmword [esp + 0x40]
mov eax, dword [esp + 0x14]
pshufd xmm0, xmm2, 0xff
and ebx, edi
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], 0
xor ecx, ecx
mov dword [esp + 0xc8], 0
movd dword [esp + 0xb8], xmm0
inc eax
mov dword [esp + 0x40], eax
mov eax, esi
jmp 0x101945b1
movaps xmm1, xmmword [esp + 0x120]
mov esi, dword [esp + 0x40]
xor eax, eax
mov ecx, 3
jmp 0x1019469a
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0xf4]
mov ecx, 2
mov edi, esi
mov dword [esp + 0xc8], 0
mov byte [esp + 0xc], 2
mov byte [esp + 8], 2
mov dword [esp + 0xb8], edx
inc eax
mov esi, dword [esp + 0x83]
mov edx, dword [esp + 0x80]
mov dword [esp + 0x30], eax
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x100]
movsd xmm1, qword [esp + 0xe8]
movsd xmm0, qword [esp + 0xe0]
mov dword [esp + 0x20], 0
mov dword [esp + 0x108], edi
mov dword [esp + 0x5c], edi
mov dword [esp + 0xf4], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0x7b], esi
mov dword [esp + 0x78], edx
movzx edx, word [esp + 0x6c]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xfc]
movsd qword [esp + 0xd8], xmm1
movaps xmm1, xmmword [esp + 0x120]
movsd qword [esp + 0xd0], xmm0
xorps xmm0, xmm0
mov esi, dword [esp + 0x40]
mov word [esp + 0x18], dx
movzx edx, byte [esp + 0x6e]
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0xf8]
unpcklps xmm1, xmm0
movaps xmm0, xmmword [esp + 0x3b0]
mov dword [esp + 0x60], esi
mov byte [esp + 0x1a], dl
movzx edx, word [esp + 0x24]
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0xb8]
movaps xmmword [esp + 0xa0], xmm0
mov word [esp + 0x68], dx
movzx edx, byte [esp + 0x26]
mov dword [esp + 0x8c], eax
mov eax, dword [esp + 0xc8]
mov byte [esp + 0x6a], dl
mov edx, ecx
xor edx, 3
or edx, eax
je 0x10194802
mov ebx, dword [esp + 0xc4]
mov dword [esp + 0x3c4], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x3c0], ecx
lea ecx, [esp + 0x3e9]
movaps xmm0, xmmword [esp + 0xa0]
movaps xmmword [esp + 0x120], xmm1
mov dword [esp + 0x40], esi
cmp dword [esp + 0xc0], ebx
movzx esi, word [esp + 0x68]
movzx edx, byte [esp + 0x6a]
mov dword [esp + 0x3c8], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x3cc], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x3d0], eax
mov eax, dword [esp + 0x90]
movlps qword [esp + 0x3d4], xmm1
movsd xmm1, qword [esp + 0xd8]
mov dword [esp + 0x3dc], eax
movzx eax, byte [esp + 0xc]
mov byte [esp + 0x3e0], al
mov eax, dword [esp + 0x7b]
mov dword [ecx - 5], eax
mov eax, dword [esp + 0x78]
mov dword [ecx - 8], eax
movzx eax, byte [esp + 8]
mov byte [esp + 0x3e8], al
movzx eax, byte [esp + 0x1a]
mov byte [ecx + 2], al
movzx eax, word [esp + 0x18]
mov word [ecx], ax
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x3ec], eax
mov eax, dword [esp + 0x88]
movlps qword [esp + 0x3f0], xmm0
movq xmm0, qword [esp + 0xd0]
mov dword [esp + 0x3fc], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x3f8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x400], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x404], eax
mov eax, dword [esp + 0x2c]
movsd qword [ecx + 0x27], xmm1
movq qword [ecx + 0x1f], xmm0
mov dword [esp + 0x418], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x41c], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x420], eax
mov eax, dword [esp + 0x20]
mov byte [esp + 0x424], al
mov word [ecx + 0x3c], si
mov byte [ecx + 0x3e], dl
jne 0x101941b0
lea ecx, [esp + 0xbc]
mov edx, ebx
call fcn.10191020
jmp 0x101941b0
lea ecx, [esp + 0x130]
call fcn.101906b0
movq xmm0, qword [esp + 0xbc]
mov edi, dword [esp + 0xc4]
lea ecx, [esp + 0x10c]
mov dword [esp + 0x880], ecx
movq qword [esp + 0x3c0], xmm0
cmp edi, 0x15
mov dword [esp + 0x3c8], edi
mov eax, dword [esp + 0x3c0]
mov dword [esp + 0x2c], eax
jae 0x10194874
cmp edi, 1
jbe 0x101950c1
mov esi, dword [esp + 0x2c]
mov edx, edi
lea eax, [esp + 0x880]
mov ecx, esi
push eax
push 1
call fcn.10190a70
add esp, 8
jmp 0x10195198
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x1019489c
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x101956b6
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
mov ecx, edi
shr ecx, 1
mov dword [esp + 0x8c], ecx
imul ecx, ecx, 0x68
push ecx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
mov dword [esp + 0xc], eax
je 0x101956b6
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x101948e7
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x101956cc
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push pe_nt_image_headers32
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x101956cc
mov ecx, dword [esp + 0x2c]
xor ebx, ebx
mov dword [esp + 0x74], 0x10
mov dword [esp + 0x14], 0
mov dword [esp + 0xa0], edi
lea edx, [ecx + 0xd0]
add ecx, 0xffffff98
mov dword [esp + 0x58], ecx
lea ecx, [esp + 0x130]
mov dword [esp + 0x88], edx
mov dword [esp + 0x120], ecx
mov ecx, edi
jmp 0x1019495b
mov dword [esp + 0x14], 1
mov ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0xa0]
cmp ebx, ecx
jae 0x10195091
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x2c]
mov edx, ecx
imul edi, ebx, 0x68
mov dword [esp + 0x10], ebx
sub edx, ebx
cmp edx, 2
lea eax, [eax + edi]
mov dword [esp + 0x20], eax
jae 0x10194990
mov ebx, edx
jmp 0x10194b10
mov esi, dword [eax + 0x68]
mov ebx, dword [eax + 0x6c]
mov ecx, eax
mov dword [esp + 8], edx
mov eax, esi
mov dword [esp + 0x40], ebx
xor eax, 2
or eax, ebx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
jne 0x101949c0
xor eax, 2
or eax, ecx
je 0x101949f9
jmp 0x10194a7d
xor eax, 2
or eax, ecx
je 0x101949f9
mov eax, dword [esp + 0x20]
lea ecx, [eax + 0x68]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x880]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov edx, dword [edx + 0x10]
push eax
push dword [esp + 0x34]
push dword [ecx]
call edx
add esp, 0xc
mov edx, dword [esp + 8]
cmp al, 0xff
je 0x10194a7d
mov ebx, 2
cmp edx, 3
jb 0x10194b10
add edi, dword [esp + 0x88]
jmp 0x10194a2c
or ecx, eax
mov eax, dword [esp + 8]
mov esi, dword [esp + 0x30]
jne 0x10194b10
inc ebx
add edi, 0x68
cmp eax, ebx
je 0x10194b07
mov edx, dword [edi]
mov ecx, esi
mov esi, dword [edi + 4]
mov eax, dword [esp + 0x40]
xor ecx, 2
mov dword [esp + 0x30], edx
xor edx, 2
mov dword [esp + 0x40], esi
or edx, esi
je 0x10194a10
or ecx, eax
mov eax, dword [esp + 8]
mov esi, dword [esp + 0x30]
je 0x10194a20
mov ecx, dword [esp + 0x880]
lea eax, [edi - 0x68]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov edx, dword [edx + 0x10]
push eax
push edi
push dword [ecx]
call edx
add esp, 0xc
cmp al, 0xff
mov eax, dword [esp + 8]
jne 0x10194a20
jmp 0x10194b10
mov eax, 2
cmp edx, 3
jb 0x1019500c
add edi, dword [esp + 0x88]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x30], 2
jmp 0x10194ac0
or esi, ecx
je 0x10194afe
mov eax, dword [esp + 0x30]
mov esi, dword [esp + 0x40]
mov ecx, dword [esp + 0x1c]
add edi, 0x68
inc eax
cmp edx, eax
mov dword [esp + 0x30], eax
je 0x1019500a
mov eax, dword [edi]
mov ebx, dword [edi + 4]
xor esi, 2
mov dword [esp + 0x40], eax
xor eax, 2
mov dword [esp + 0x1c], ebx
or eax, ebx
je 0x10194aa0
or esi, ecx
je 0x10194afe
mov ecx, dword [esp + 0x880]
lea eax, [edi - 0x68]
mov ecx, dword [ecx]
mov edx, dword [ecx + 4]
mov edx, dword [edx + 0x10]
push eax
push edi
push dword [ecx]
call edx
add esp, 0xc
mov edx, dword [esp + 8]
cmp al, 0xff
je 0x10194aa4
mov eax, dword [esp + 0x30]
jmp 0x1019500c
mov ebx, eax
nop dword [eax]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x30], ebx
add ebx, ecx
mov esi, ebx
sub esi, ecx
jb 0x10195610
cmp ebx, dword [esp + 0xa0]
ja 0x10195610
jae 0x10194b79
cmp dword [esp + 0x30], 0xa
jae 0x10194b79
mov eax, dword [esp + 0xa0]
lea ebx, [ecx + 0xa]
cmp ebx, eax
cmovae ebx, eax
mov esi, ebx
sub esi, ecx
jb 0x10195642
mov edi, dword [esp + 0x30]
mov eax, 1
cmp edi, 2
cmovb edi, eax
mov ecx, dword [esp + 0x20]
mov edx, esi
lea eax, [esp + 0x880]
push eax
push edi
call fcn.10190a70
add esp, 8
mov edi, dword [esp + 0x14]
mov dword [esp + 0x28], ebx
cmp edi, dword [esp + 0x74]
jne 0x10194c10
lea eax, [edi + edi]
mov dword [esp + 0x74], eax
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x10194bba
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10195629
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
mov edi, dword [esp + 0x14]
mov ecx, edi
shl ecx, 4
push ecx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10195629
mov ebx, eax
lea eax, [edi*8]
push eax
push dword [esp + 0x94]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
push dword [esp + 0x90]
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov eax, ebx
mov ebx, dword [esp + 0x28]
jmp 0x10194c17
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x10]
mov dword [eax + edi*8], esi
mov dword [eax + edi*8 + 4], ecx
inc edi
cmp edi, 2
mov dword [esp + 0x14], edi
jb 0x1019494c
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0xa0]
mov dword [esp + 0x90], eax
jmp 0x10194ccb
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0xc]
mov eax, ebx
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x90]
mov edi, dword [esp + 0x20]
lea ecx, [esi - 1]
mov dword [esp + 0x40], ecx
lea ecx, [ebx + edi*8]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x10]
sub ecx, edx
push ecx
push edx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x30]
add eax, dword [esp + 0x1c]
mov dword [ebx + edi*8 + 8], eax
mov eax, dword [esp + 0x5c]
mov dword [ebx + edi*8 + 0xc], eax
not edi
lea eax, [ecx + 8]
add edi, esi
shl edi, 3
push edi
push eax
push ecx
call sub.msvcrt.dll_memmove
add esp, 0xc
mov edx, dword [esp + 0x40]
mov esi, dword [esp + 0xa0]
mov eax, ebx
cmp edx, 1
jbe 0x10194940
mov edi, dword [eax + edx*8 - 8]
mov ecx, dword [eax + edx*8 - 4]
mov dword [esp + 0x14], edx
add ecx, edi
cmp ecx, esi
je 0x10194d30
mov ebx, dword [eax + edx*8 - 0x10]
cmp ebx, edi
jbe 0x10194d30
cmp edx, 3
jb 0x10194fe9
lea ecx, [edx - 3]
lea esi, [ebx + edi]
mov dword [esp + 0x20], ecx
mov ecx, dword [eax + edx*8 - 0x18]
cmp ecx, esi
jbe 0x10194fcd
cmp edx, 4
jb 0x10194ff6
mov eax, dword [esp + 0x90]
add ebx, ecx
cmp dword [eax + edx*8 - 0x20], ebx
mov ebx, dword [esp + 0x20]
jbe 0x10194d3c
jmp 0x10194948
cmp edx, 3
jb 0x10194d44
mov ecx, dword [eax + edx*8 - 0x18]
lea ebx, [edx - 3]
mov edx, dword [esp + 0x14]
cmp ecx, edi
jb 0x10194d47
lea ebx, [edx - 2]
cmp edx, ebx
jbe 0x1019558e
lea ecx, [ebx + 1]
cmp edx, ecx
mov ecx, dword [esp + 0xa0]
jbe 0x101955ce
mov edx, dword [eax + ebx*8 + 4]
mov edi, dword [eax + ebx*8 + 8]
mov eax, dword [eax + ebx*8 + 0xc]
add eax, edi
mov esi, eax
sub esi, edx
jb 0x101955a0
cmp eax, ecx
mov dword [esp + 0x60], edi
ja 0x101955b4
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x20], ebx
mov edi, esi
mov dword [esp + 0x5c], edx
imul eax, eax, 0x68
mov dword [esp + 0x40], eax
mov ebx, dword [ecx + ebx*8]
imul ecx, edx, 0x68
add ecx, dword [esp + 0x2c]
imul edx, ebx, 0x68
sub edi, ebx
mov dword [esp + 0x1c], ebx
cmp edi, ebx
lea ebx, [ecx + edx]
mov dword [esp + 0x30], ecx
jae 0x10194eb0
imul esi, edi, 0x68
push esi
push ebx
push dword [esp + 0x14]
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x1c]
add esi, ecx
test eax, eax
mov dword [esp + 0x130], ecx
mov dword [esp + 0x10], esi
jle 0x10194c54
test edi, edi
jle 0x10194c54
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x10]
add eax, dword [esp + 0x58]
mov dword [esp + 0x40], eax
nop word cs:[eax + eax]
nop
mov eax, dword [edx - 0x68]
mov ecx, dword [ebx - 0x64]
mov edi, edx
xor eax, 2
or eax, dword [edx - 0x64]
mov eax, dword [ebx - 0x68]
jne 0x10194e30
xor eax, 2
or eax, ecx
setne cl
jmp 0x10194e63
xor eax, 2
or eax, ecx
jne 0x10194e40
xor ecx, ecx
jmp 0x10194e63
mov edx, dword [esp + 0x880]
lea eax, [edi - 0x68]
lea ecx, [ebx - 0x68]
mov edx, dword [edx]
mov esi, dword [edx + 4]
mov esi, dword [esi + 0x10]
push ecx
push eax
push dword [edx]
call esi
add esp, 0xc
cmp al, 0xff
sete cl
movzx eax, cl
mov edx, edi
imul esi, eax, 0x68
neg eax
imul eax, eax, 0x68
lea edx, [esi + edi - 0x68]
add ebx, eax
mov eax, dword [esp + 0x40]
test cl, cl
mov esi, edx
mov ecx, 0x1a
cmovne esi, ebx
mov edi, eax
rep movsd dword es:[edi], dword [esi]
cmp ebx, dword [esp + 0x30]
jbe 0x10194c50
add eax, 0xffffff98
cmp edx, dword [esp + 0xc]
mov dword [esp + 0x40], eax
ja 0x10194e10
jmp 0x10194c50
push edx
push ecx
push dword [esp + 0x14]
mov edi, edx
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x1c]
add edi, dword [esp + 0xc]
test eax, eax
mov dword [esp + 0x10], edi
mov dword [esp + 0x134], edi
jle 0x10194fc0
cmp esi, eax
jle 0x10194fc0
mov eax, dword [esp + 0x40]
mov edi, dword [esp + 0xc]
add eax, dword [esp + 0x2c]
mov dword [esp + 0x40], eax
nop word cs:[eax + eax]
nop dword [eax]
mov eax, dword [ebx]
mov ecx, edi
mov ecx, dword [edi + 4]
xor eax, 2
or eax, dword [ebx + 4]
mov eax, dword [edi]
jne 0x10194f20
xor eax, 2
or eax, ecx
je 0x10194f43
jmp 0x10194f60
xor eax, 2
or eax, ecx
je 0x10194f43
mov eax, dword [esp + 0x880]
mov eax, dword [eax]
mov ecx, dword [eax + 4]
mov ecx, dword [ecx + 0x10]
push edi
push ebx
push dword [eax]
call ecx
add esp, 0xc
cmp al, 0xff
je 0x10194f60
mov dword [esp + 8], 0
mov eax, edi
mov esi, edi
jmp 0x10194f6a
mov al, 1
mov esi, ebx
mov dword [esp + 8], eax
mov eax, edi
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 8]
xor cl, 1
movzx ecx, cl
imul ecx, ecx, 0x68
add eax, ecx
mov ecx, 0x1a
mov edi, edx
add edx, 0x68
rep movsd dword es:[edi], dword [esi]
mov edi, eax
mov dword [esp + 0x30], edx
cmp eax, dword [esp + 0x10]
jae 0x10194fa9
movzx eax, byte [esp + 8]
imul eax, eax, 0x68
add ebx, eax
cmp ebx, dword [esp + 0x40]
jb 0x10194f00
mov eax, dword [esp + 0x30]
mov edx, edi
jmp 0x10194c5a
mov edx, dword [esp + 0xc]
mov eax, dword [esp + 0x30]
jmp 0x10194c5a
mov eax, dword [esp + 0x90]
mov ebx, dword [esp + 0x20]
mov edx, dword [esp + 0x14]
cmp ecx, edi
jae 0x10194d44
jmp 0x10194d47
mov dword [esp + 0x14], 2
jmp 0x10194948
mov eax, dword [esp + 0x90]
mov dword [esp + 0x14], 3
jmp 0x10194948
mov eax, edx
mov ecx, dword [esp + 0x10]
mov ebx, eax
mov dword [esp + 0x30], eax
add ebx, ecx
jb 0x1019566a
cmp ebx, dword [esp + 0xa0]
mov edx, dword [esp + 0x20]
ja 0x10195650
mov eax, dword [esp + 0x30]
cmp eax, 2
jb 0x10194b1a
mov dword [esp + 0x28], ebx
mov ebx, eax
add eax, ecx
imul eax, eax, 0x68
shr ebx, 1
add eax, dword [esp + 0x58]
nop dword [eax]
mov ecx, 0x1a
lea edi, [esp + 0x130]
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov edi, edx
mov ecx, 0x1a
mov esi, eax
add edx, 0x68
rep movsd dword es:[edi], dword [esi]
mov edi, eax
mov ecx, 0x1a
lea esi, [esp + 0x130]
add eax, 0xffffff98
dec ebx
rep movsd dword es:[edi], dword [esi]
jne 0x10195050
mov ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
jmp 0x10194b1a
push eax
push 0
mov esi, dword [0x1035648c]
push dword [esi]
call sub.KERNEL32.dll_HeapFree
push dword [esp + 0xc]
push 0
push dword [esi]
call sub.KERNEL32.dll_HeapFree
mov esi, dword [esp + 0x3c0]
mov edi, dword [esp + 0x3c8]
jmp 0x10195198
mov esi, dword [esp + 0x2c]
jmp 0x10195198
inc edi
mov dword [esp + 0xc], ebx
xor esi, esi
mov ecx, 2
mov bh, 2
mov byte [esp + 8], 2
mov dword [esp + 0x14], edi
mov dword [esp + 0x1c], edi
mov edi, dword [esp + 0xd3]
mov edx, dword [esp + 0xd0]
movq xmm0, qword [esp + 0x110]
movsd xmm1, qword [esp + 0x118]
mov dword [esp + 0x30], 0
mov dword [esp + 0x90], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x83], edi
mov dword [esp + 0x80], edx
movzx edx, word [esp + 0x78]
movq qword [esp + 0xe0], xmm0
pxor xmm0, xmm0
movsd qword [esp + 0xe8], xmm1
mov word [esp + 0x24], dx
movzx edx, byte [esp + 0x7a]
mov byte [esp + 0x26], dl
movzx edx, word [esp + 0x6c]
mov word [esp + 0x18], dx
movzx edx, byte [esp + 0x6e]
mov byte [esp + 0x1a], dl
mov edx, ecx
xor edx, 3
or edx, esi
jne 0x10193fe9
mov dword [esp + 0x3c0], 8
mov dword [esp + 0x3c4], 0
lea ecx, [esp + 0xad4]
call fcn.101906b0
mov esi, 8
xor edi, edi
mov eax, dword [esp + 0x3c4]
imul ecx, edi, 0x68
mov dword [esp + 0x620], 3
mov dword [esp + 0x624], esi
add ecx, esi
mov dword [esp + 0x628], eax
mov dword [esp + 0x62c], esi
mov esi, dword [esp + 0x54]
mov dword [esp + 0x630], ecx
cmp byte [esi + 0x24], 0
mov edi, esi
je 0x101954f8
movdqa xmm0, xmmword [0x1034f620]
mov dword [esp + 0x14c], 0
mov word [esp + 0x150], 0
mov dword [esp + 0x130], 0
movdqu xmmword [esp + 0x138], xmm0
mov dword [esp + 0x148], 0
mov byte [esp + 0x14c], 1
mov dword [esp + 0x138], 0x2000000
mov edx, dword [esp + 0xb4]
lea eax, [esp + 0x130]
lea ecx, [esp + 0x880]
push eax
push dword [esp + 0x74]
call fcn.10158120
add esp, 8
cmp byte [esp + 0x880], 4
mov ecx, dword [esp + 0x54]
jne 0x10195263
mov edi, dword [esp + 0x884]
jmp 0x10195279
mov eax, dword [esp + 0x880]
mov edi, dword [esp + 0x884]
cmp al, 4
jne 0x1019538b
pxor xmm0, xmm0
mov dword [esp + 0x160], 0
movdqa xmmword [esp + 0x150], xmm0
movdqa xmmword [esp + 0x140], xmm0
movdqa xmmword [esp + 0x130], xmm0
lea eax, [esp + 0x130]
push eax
push edi
call sub.KERNEL32.dll_GetFileInformationByHandle
mov ebx, dword [esp + 0x70]
test eax, eax
je 0x10195376
movd xmm0, dword [esp + 0x15c]
movss xmm1, dword [esp + 0x160]
movaps xmm3, xmmword [0x1034f630]
movd xmm2, edi
mov esi, dword [esp + 0x14c]
test ebx, ebx
punpckldq xmm0, xmm2
pxor xmm2, xmm2
movss xmm3, xmm1
punpckldq xmm2, xmm0
orps xmm3, xmm2
movups xmmword [esp + 0x3d0], xmm3
mov dword [esp + 0x3c4], 0
mov dword [esp + 0x3c0], 1
mov dword [esp + 0x3c8], esi
mov dword [esp + 0x3cc], 0
je 0x101953b6
js 0x101956af
mov eax, dword [0x103564a0]
mov edi, dword [0x1035648c]
movzx eax, byte [eax]
mov eax, dword [edi]
test eax, eax
jne 0x10195355
call sub.KERNEL32.dll_GetProcessHeap
mov ebx, dword [esp + 0x70]
test eax, eax
je 0x10195366
mov dword [edi], eax
push ebx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov ebx, dword [esp + 0x70]
test eax, eax
jne 0x101953bb
push ebx
push 1
call fcn.1001a7e0
add esp, 8
jmp 0x101956f1
call sub.KERNEL32.dll_GetLastError
mov esi, eax
push edi
call sub.KERNEL32.dll_CloseHandle
mov ecx, dword [esp + 0x54]
xor eax, eax
mov edi, esi
mov ecx, dword [ecx + 0x60]
mov edx, dword [esp + 0xcc]
mov dword [edx], ecx
mov dword [edx + 8], edi
mov dword [edx + 4], eax
mov byte [edx + 0x18], 2
mov byte [edx + 0x20], 2
lea ecx, [esp + 0x620]
call fcn.101906b0
jmp 0x10195575
mov eax, 1
push ebx
push dword [esp + 0xb8]
push eax
mov edi, eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x3dc]
movq xmm0, qword [esp + 0x3d4]
mov ecx, edi
mov edx, dword [esp + 0x3cc]
mov dword [esp + 0x14c], eax
mov eax, edi
movq qword [esp + 0x144], xmm0
shr eax, 0x18
mov byte [esp + 0x153], al
mov eax, edi
mov edi, dword [esp + 0x54]
shr eax, 8
mov word [esp + 0x151], ax
mov eax, ebx
mov dword [esp + 0x154], ebx
shr eax, 0x18
mov byte [esp + 0x15b], al
mov eax, ebx
shr eax, 8
mov word [esp + 0x159], ax
mov dword [esp + 0x134], 0
mov dword [esp + 0x130], 1
mov dword [esp + 0x138], esi
mov dword [esp + 0x13c], edx
mov edx, dword [edi + 0x4c]
mov esi, dword [esp + 0x3d0]
cmp edx, dword [edi + 0x48]
mov dword [esp + 0x140], esi
mov byte [esp + 0x150], cl
mov byte [esp + 0x158], bl
mov dword [esp + 0x15c], 0
jne 0x10195492
lea ecx, [edi + 0x44]
call fcn.10190ed0
mov edx, dword [edi + 0x4c]
mov eax, dword [edi + 0x44]
movsd xmm0, qword [esp + 0x158]
lea ecx, [edx + edx*2]
inc edx
shl ecx, 4
movsd qword [eax + ecx + 0x28], xmm0
movsd xmm0, qword [esp + 0x150]
movsd qword [eax + ecx + 0x20], xmm0
movsd xmm0, qword [esp + 0x148]
movsd qword [eax + ecx + 0x18], xmm0
movsd xmm0, qword [esp + 0x140]
movsd qword [eax + ecx + 0x10], xmm0
movq xmm0, qword [esp + 0x130]
movsd xmm1, qword [esp + 0x138]
movsd qword [eax + ecx + 8], xmm1
movq qword [eax + ecx], xmm0
mov dword [edi + 0x4c], edx
lea eax, [esp + 0x620]
push 0x260
push eax
lea eax, [esp + 0x138]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov esi, dword [edi + 0x40]
cmp esi, dword [edi + 0x3c]
jne 0x1019552a
lea ecx, [edi + 0x38]
mov edx, esi
call fcn.10190e30
mov esi, dword [edi + 0x40]
imul eax, esi, 0x260
add eax, dword [edi + 0x38]
push 0x260
lea ecx, [esp + 0x134]
push ecx
push eax
call sub.msvcrt.dll_memmove
mov ecx, dword [esp + 0x60]
add esp, 0xc
mov eax, dword [esp + 0x104]
inc esi
mov dword [ecx + 0x40], esi
cmp eax, dword [ecx + 0x18]
jne 0x1019556a
mov eax, dword [ecx + 0x5c]
inc eax
je 0x10195690
mov dword [ecx + 0x5c], eax
mov eax, dword [esp + 0xcc]
mov byte [eax + 0x20], 3
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 0x1034f910
push ecx
push eax
call fcn.10026930
add esp, 0xc
ud2
mov dword [esp + str.Index_out_of_bounds], 0x1034f654
mov eax, 0x1034f6bc
jmp 0x101955de
push 0x1034f6dc
push eax
push edx
call fcn.1002a1f0
add esp, 0xc
jmp 0x101956f1
push 0x1034f6dc
push dword [esp + 0xa4]
push eax
call fcn.1002a190
add esp, 0xc
jmp 0x101956f1
mov eax, 0x1034f6cc
mov dword [esp + str.Index_out_of_bounds], 0x1034f654
mov ecx, dword [esp + 0x120]
mov dword [ecx + 4], 1
mov dword [ecx + 0x10], 0
mov dword [ecx + 8], 0x1034f65c
mov dword [ecx + 0xc], 0
push eax
push ecx
call fcn.10026810
add esp, 8
jmp 0x101956f1
push 0x1034f784
push 0x2c
push str.assertion_failed:_end___start__end___len_
call fcn.10026890
add esp, 0xc
jmp 0x101956f1
push 0x1034f738
push 0x2b
push str.called__Option::unwrap____on_a__None__value
call fcn.10026890
add esp, 0xc
jmp 0x101956f1
mov eax, 0x1034f748
jmp 0x1019566f
push 0x1034f900
jmp 0x10195695
push 0x1034f6ac
push dword [esp + 0xa4]
push ebx
call fcn.1002a190
add esp, 0xc
jmp 0x101956f1
mov eax, 0x1034f6ac
push eax
push ebx
push dword [esp + 0x18]
call fcn.1002a1f0
add esp, 0xc
jmp 0x101956f1
push 0x1a0
push 8
call fcn.1001a7e0
add esp, 8
jmp 0x101956f1
push 0x1034f920
push 0x2b
push str.called__Option::unwrap____on_a__None__value
call fcn.10026890
add esp, 0xc
ud2
mov edi, ebx
call fcn.1001a7a0
jmp 0x101956f1
call fcn.1001a7a0
jmp 0x101956f1
push 0x1034f718
push 0x2b
push str.called__Option::unwrap____on_a__None__value
call fcn.10026890
add esp, 0xc
jmp 0x101956f1
push 0x1034f728
push 0x2b
push str.called__Option::unwrap____on_a__None__value
call fcn.10026890
add esp, 0xc
jmp 0x101956f1
push 0x1a0
push 8
call fcn.1001a7e0
add esp, 8
ud2