Function at 0x411ce0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x128
mov eax, dword [ebp + 8]
test eax, eax
je 0x411d28
cmp eax, 0x666666
ja 0x412f64
shl eax, 6
lea esi, [eax + eax*4]
test esi, esi
js 0x412f6b
mov dword [ebp - 0x8c], ecx
je 0x411d32
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
je 0x411d39
mov edi, edx
jmp 0x411d4d
mov eax, 8
jmp 0x412dea
mov eax, 8
jmp 0x411d60
mov edi, edx
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412f72
mov dword [0x5c6108], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
mov edx, edi
je 0x412f72
mov esi, dword [ebp + 8]
mov edi, edx
mov dword [ebp - 0x68], eax
lea ecx, [esi + esi*4]
mov dword [ebp - 0xb4], esi
shl ecx, 6
add ecx, edx
mov edx, edi
mov dword [ebp - 0xc4], ecx
xor ecx, ecx
jmp 0x412137
lea edi, [esi*8]
mov eax, 4
mov esi, dword [ebp - 0x10]
mov ebx, dword [ebp - 0x40]
dec dword [ebp - 0xb4]
mov dword [ebp - 0x14], eax
lea ecx, [esi + 0x140]
mov dword [ebp - 0x24], ecx
lea ecx, [ebx + 1]
mov dword [ebp - 0x20], ecx
push edi
push edx
push eax
call sym._memcpy
add esp, 0xc
mov ecx, dword [esi + 0x70]
movzx eax, byte [esi + 0x13d]
mov edi, dword [esi + 0x68]
mov edx, dword [esi + 0x2c]
movsd xmm0, qword [ebp - 0xc0]
mov dword [ebp - 0xc8], ecx
mov ecx, dword [esi + 0x74]
mov byte [ebp - 0x88], al
mov eax, dword [esi + 0x6c]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [esi + 0x78]
mov dword [ebp - 0x54], eax
mov eax, dword [esi + 0x28]
mov esi, dword [ebp - 0xf8]
movsd qword [ebp - 0x134], xmm0
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x12c], ecx
lea ecx, [ebx + ebx*4]
mov ebx, dword [ebp - 0x68]
shl ecx, 6
cmp dword [ebp - 0xb4], 0
mov dword [ebx + ecx], esi
mov esi, dword [ebp - 0xf4]
mov dword [ebx + ecx + 4], esi
mov esi, dword [ebp - 0xd4]
mov dword [ebx + ecx + 8], esi
mov esi, dword [ebp - 0xf0]
mov dword [ebx + ecx + 0xc], esi
mov esi, dword [ebp - 0xec]
mov dword [ebx + ecx + 0x10], esi
mov esi, dword [ebp - 0xd8]
mov dword [ebx + ecx + 0x14], esi
mov esi, dword [ebp - 0xdc]
mov dword [ebx + ecx + 0x18], esi
mov esi, dword [ebp - 0xe0]
mov dword [ebx + ecx + 0x1c], esi
mov esi, dword [ebp - 0xe4]
mov dword [ebx + ecx + 0x20], esi
mov esi, dword [ebp - 0xe8]
mov dword [ebx + ecx + 0x24], esi
mov dword [ebx + ecx + 0x28], eax
mov eax, dword [ebp - 0x120]
mov dword [ebx + ecx + 0x2c], edx
mov edx, dword [ebp - 0xcc]
mov dword [ebx + ecx + 0x30], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebx + ecx + 0x34], eax
mov eax, dword [ebp - 0x124]
mov dword [ebx + ecx + 0x3c], eax
mov eax, dword [ebp - 0x128]
mov dword [ebx + ecx + 0x38], eax
mov eax, dword [ebp - 0x110]
mov dword [ebx + ecx + 0x40], eax
mov eax, dword [ebp - 0x114]
mov dword [ebx + ecx + 0x44], eax
mov eax, dword [ebp - 0x118]
mov dword [ebx + ecx + 0x48], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebx + ecx + 0x4c], eax
mov eax, dword [ebp - 0x100]
mov dword [ebx + ecx + 0x50], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebx + ecx + 0x54], eax
mov eax, dword [ebp - 0x70]
mov dword [ebx + ecx + 0x58], eax
mov eax, dword [ebp - 0x94]
mov dword [ebx + ecx + 0x5c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebx + ecx + 0x60], eax
mov eax, dword [ebp - 0x90]
mov dword [ebx + ecx + 0x64], eax
mov eax, dword [ebp - 0x54]
mov dword [ebx + ecx + 0x68], edi
mov dword [ebx + ecx + 0x6c], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebx + ecx + 0x70], eax
mov dword [ebx + ecx + 0x74], edx
mov edx, dword [ebp - 0x10]
mov eax, ebx
mov dword [ebx + ecx + 0x78], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + ecx + 0x7c], edx
mov edx, dword [ebp - 0xd0]
mov dword [ebx + ecx + 0x80], edx
mov edx, dword [ebp - 0x50]
mov dword [ebx + ecx + 0x84], edx
mov edx, dword [ebp - 0x48]
mov dword [ebx + ecx + 0x88], edx
mov dword [ebx + ecx + 0x8c], edx
mov edx, dword [ebp - 0xb0]
mov dword [ebx + ecx + 0x90], edx
mov edx, dword [ebp - 0x2c]
mov dword [ebx + ecx + 0x94], edx
mov dword [ebx + ecx + 0x98], edx
mov edx, dword [ebp - 0x1c]
mov dword [ebx + ecx + 0x9c], edx
mov edx, dword [ebp - 0x44]
mov dword [ebx + ecx + 0xa0], edx
mov dword [ebx + ecx + 0xa4], edx
mov edx, dword [ebp - 0x64]
mov dword [ebx + ecx + 0xa8], edx
mov edx, dword [ebp - 0x4c]
mov dword [ebx + ecx + 0xac], edx
mov dword [ebx + ecx + 0xb0], edx
mov edx, dword [ebp - 0x60]
mov dword [ebx + ecx + 0xb4], edx
mov edx, dword [ebp - 0x80]
mov dword [ebx + ecx + 0xb8], edx
mov dword [ebx + ecx + 0xbc], edx
mov edx, dword [ebp - 0x5c]
mov dword [ebx + ecx + 0xc0], edx
mov edx, dword [ebp - 0x7c]
mov dword [ebx + ecx + 0xc4], edx
mov dword [ebx + ecx + 0xc8], edx
mov edx, dword [ebp - 0x34]
mov dword [ebx + ecx + 0xcc], edx
mov edx, dword [ebp - 0x30]
mov dword [ebx + ecx + 0xd0], edx
mov dword [ebx + ecx + 0xd4], edx
mov edx, dword [ebp - 0xac]
mov dword [ebx + ecx + 0xd8], edx
mov edx, dword [ebp - 0x28]
mov dword [ebx + ecx + 0xdc], edx
mov dword [ebx + ecx + 0xe0], edx
mov edx, dword [ebp - 0xa8]
mov dword [ebx + ecx + 0xe4], edx
mov edx, dword [ebp - 0x78]
mov dword [ebx + ecx + 0xe8], edx
mov dword [ebx + ecx + 0xec], edx
mov edx, dword [ebp - 0xa4]
mov dword [ebx + ecx + 0xf0], edx
mov edx, dword [ebp - 0x74]
mov dword [ebx + ecx + 0xf4], edx
mov dword [ebx + ecx + 0xf8], edx
mov edx, dword [ebp - 0x12c]
mov dword [ebx + ecx + 0x104], edx
mov edx, dword [ebp - 0x9c]
movsd xmm0, qword [ebp - 0x134]
movsd qword [ebx + ecx + 0xfc], xmm0
mov dword [ebx + ecx + 0x108], edx
mov edx, dword [ebp - 0xa0]
mov dword [ebx + ecx + 0x10c], edx
mov dword [ebx + ecx + 0x110], edx
mov edx, dword [ebp - 0x98]
mov dword [ebx + ecx + 0x114], edx
mov edx, dword [ebp - 0x6c]
mov dword [ebx + ecx + 0x118], edx
mov dword [ebx + ecx + 0x11c], edx
mov edx, dword [ebp - 0x58]
mov dword [ebx + ecx + 0x120], edx
mov edx, dword [ebp - 0x84]
mov dword [ebx + ecx + 0x124], edx
mov dword [ebx + ecx + 0x128], edx
mov edx, dword [ebp - 0x14]
mov dword [ebx + ecx + 0x12c], edx
mov edx, dword [ebp - 0x18]
mov dword [ebx + ecx + 0x130], edx
mov dword [ebx + ecx + 0x134], edx
mov edx, dword [ebp - 0x108]
mov dword [ebx + ecx + 0x138], edx
movzx edx, byte [ebp - 0x35]
mov byte [ebx + ecx + 0x13c], dl
movzx edx, byte [ebp - 0x88]
mov byte [ebx + ecx + 0x13d], dl
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
je 0x412de4
cmp edx, dword [ebp - 0xc4]
je 0x412de4
mov eax, dword [edx + 0x3c]
mov edi, dword [edx + 0x8c]
mov dword [ebp - 0x50], 8
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x124], eax
mov eax, dword [edx + 0x38]
test edi, edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x128], eax
movzx eax, byte [edx + 0x13c]
mov byte [ebp - 0x35], al
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x120], eax
mov eax, dword [edx + 0x34]
mov dword [ebp - 0x10c], eax
mov eax, dword [edx + 0x40]
mov dword [ebp - 0x110], eax
mov eax, dword [edx + 0x44]
mov dword [ebp - 0x114], eax
mov eax, dword [edx + 0x48]
mov dword [ebp - 0x118], eax
mov eax, dword [edx + 0x4c]
mov dword [ebp - 0x11c], eax
mov eax, 8
je 0x4122b7
cmp edi, 0xfffffff
ja 0x412e86
lea esi, [edi*8]
test esi, esi
js 0x412e86
mov eax, dword [edx + 0x84]
mov dword [ebp - 0x18], eax
je 0x412220
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x412200
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412f0e
mov dword [0x5c6108], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
jne 0x412225
jmp 0x412f0e
mov eax, 8
mov esi, edi
lea ecx, [edi - 1]
mov dword [ebp - 0x50], eax
and esi, 0x1fffffff
cmp esi, ecx
cmovae esi, ecx
xor edx, edx
cmp esi, 4
jb 0x412284
mov ecx, dword [ebp - 0x18]
mov ebx, edi
sub eax, ecx
cmp eax, 0x10
mov eax, ecx
jb 0x41228b
inc esi
mov ecx, 2
mov ebx, edi
mov edi, dword [ebp - 0x50]
mov eax, esi
mov edx, esi
and eax, 1
cmove eax, ecx
xor esi, esi
sub edx, eax
mov eax, dword [ebp - 0x18]
sub ebx, edx
lea ecx, [eax + edx*8]
nop
movups xmm0, xmmword [eax + esi*8]
movups xmmword [edi + esi*8], xmm0
add esi, 2
cmp edx, esi
jne 0x412270
mov edi, dword [ebp - 0x48]
jmp 0x41228b
mov eax, dword [ebp - 0x18]
mov ebx, edi
mov ecx, eax
lea esi, [eax + edi*8]
mov edi, dword [ebp - 0x50]
mov eax, 8
lea edx, [edi + edx*8]
mov edi, dword [ebp - 0x10]
nop dword [eax]
cmp ecx, esi
je 0x4122b5
movsd xmm0, qword [ecx]
add ecx, 8
dec ebx
movsd qword [edx], xmm0
lea edx, [edx + 8]
jne 0x4122a0
mov edx, edi
mov esi, dword [edx + 0x98]
mov ecx, dword [edx + 0x138]
test esi, esi
mov dword [ebp - 0x108], ecx
mov dword [ebp - 0x2c], esi
je 0x4123b8
mov eax, dword [ebp - 0x2c]
cmp eax, 0xfffffff
ja 0x412e2c
lea esi, [eax*8]
test esi, esi
js 0x412e2c
mov ebx, dword [edx + 0x90]
je 0x412330
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x41231b
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412f56
mov dword [0x5c6108], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
jne 0x412335
jmp 0x412f56
mov eax, 8
mov edi, dword [ebp - 0x2c]
mov esi, edi
lea ecx, [edi - 1]
and esi, 0x1fffffff
cmp esi, ecx
cmovae esi, ecx
xor edx, edx
cmp esi, 4
jb 0x412391
mov ecx, eax
sub ecx, ebx
cmp ecx, 0x10
mov ecx, ebx
jb 0x412393
inc esi
mov edi, dword [ebp - 0x2c]
mov edx, 2
mov ecx, esi
and ecx, 1
cmove ecx, edx
mov edx, esi
xor esi, esi
sub edx, ecx
sub edi, edx
lea ecx, [ebx + edx*8]
nop word cs:[eax + eax]
movups xmm0, xmmword [ebx + esi*8]
movups xmmword [eax + esi*8], xmm0
add esi, 2
cmp edx, esi
jne 0x412380
jmp 0x412393
mov ecx, ebx
mov esi, dword [ebp - 0x2c]
lea edx, [eax + edx*8]
lea esi, [ebx + esi*8]
nop dword [eax]
cmp ecx, esi
je 0x4123b5
movsd xmm0, qword [ecx]
add ecx, 8
dec edi
movsd qword [edx], xmm0
lea edx, [edx + 8]
jne 0x4123a0
mov edx, dword [ebp - 0x10]
mov edi, dword [edx + 0xa4]
mov dword [ebp - 0xb0], eax
mov eax, 8
mov dword [ebp - 0x64], 8
test edi, edi
mov dword [ebp - 0x44], edi
je 0x4124da
cmp edi, 0xfffffff
ja 0x412e54
lea esi, [edi*8]
test esi, esi
js 0x412e54
mov ebx, dword [edx + 0x9c]
je 0x412440
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x412420
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412ec4
mov dword [0x5c6108], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
mov dword [ebp - 0x1c], eax
jne 0x412447
jmp 0x412ec4
mov dword [ebp - 0x1c], 8
mov esi, edi
lea eax, [edi - 1]
and esi, 0x1fffffff
cmp esi, eax
cmovae esi, eax
xor edx, edx
cmp esi, 4
jb 0x4124a4
mov eax, dword [ebp - 0x1c]
mov ecx, ebx
sub eax, ebx
cmp eax, 0x10
mov eax, edi
jb 0x4124a8
inc esi
mov ecx, 2
mov eax, esi
mov edx, esi
and eax, 1
cmove eax, ecx
xor esi, esi
sub edx, eax
mov eax, edi
mov edi, dword [ebp - 0x1c]
sub eax, edx
lea ecx, [ebx + edx*8]
nop word [eax + eax]
movups xmm0, xmmword [ebx + esi*8]
movups xmmword [edi + esi*8], xmm0
add esi, 2
cmp edx, esi
jne 0x412490
mov edi, dword [ebp - 0x44]
jmp 0x4124a8
mov eax, edi
mov ecx, ebx
lea esi, [ebx + edi*8]
mov edi, dword [ebp - 0x1c]
lea edx, [edi + edx*8]
mov edi, dword [ebp - 0x10]
nop word cs:[eax + eax]
nop
cmp ecx, esi
je 0x4124d5
movsd xmm0, qword [ecx]
add ecx, 8
dec eax
movsd qword [edx], xmm0
lea edx, [edx + 8]
jne 0x4124c0
mov eax, dword [ebp - 0x1c]
mov edx, edi
mov dword [ebp - 0x1c], eax
mov eax, dword [edx + 0xb0]
test eax, eax
mov dword [ebp - 0x4c], eax
je 0x4125a0
cmp eax, 0x7ffffff
ja 0x412e04
shl eax, 4
test eax, eax
mov dword [ebp - 0x14], eax
js 0x412e04
mov edi, edx
mov edi, dword [edx + 0xa8]
je 0x412550
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x412533
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412ef1
mov dword [0x5c6108], eax
push dword [ebp - 0x14]
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
mov dword [ebp - 0x64], eax
jne 0x412557
jmp 0x412ef1
mov dword [ebp - 0x64], 8
mov esi, dword [ebp - 0x4c]
xor eax, eax
nop dword [eax]
cmp dword [ebp - 0x14], eax
je 0x41259d
mov ecx, dword [edi]
mov edx, dword [edi + 8]
dec esi
mov dword [ebp - 0x24], ecx
mov ecx, dword [edi + 4]
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x20], ecx
mov ecx, dword [edi + 0xc]
lea edi, [edi + 0x10]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x64]
mov dword [ecx + eax], ebx
mov ebx, dword [ebp - 0x20]
mov dword [ecx + eax + 4], ebx
mov ebx, dword [ebp - 0x18]
mov dword [ecx + eax + 8], edx
mov dword [ecx + eax + 0xc], ebx
lea eax, [eax + 0x10]
jne 0x412560
mov edx, dword [ebp - 0x10]
mov esi, dword [edx + 0xbc]
mov dword [ebp - 0x5c], 8
mov dword [ebp - 0x60], 8
test esi, esi
mov dword [ebp - 0x80], esi
je 0x412670
cmp esi, 0x7ffffff
ja 0x412e36
mov eax, esi
shl eax, 4
test eax, eax
mov dword [ebp - 0x14], eax
js 0x412e36
mov edi, edx
mov edi, dword [edx + 0xb4]
je 0x412620
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x412607
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412f2a
mov dword [0x5c6108], eax
push dword [ebp - 0x14]
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
mov dword [ebp - 0x60], eax
jne 0x412627
jmp 0x412f2a
mov dword [ebp - 0x60], 8
xor eax, eax
mov edx, esi
nop dword [eax + eax]
cmp dword [ebp - 0x14], eax
je 0x41266d
mov ecx, dword [edi]
mov ebx, dword [edi + 4]
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [edi + 8]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
mov ecx, dword [edi + 0xc]
lea edi, [edi + 0x10]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x60]
mov dword [ecx + eax], esi
mov dword [ecx + eax + 4], ebx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x24]
mov dword [ecx + eax + 8], esi
mov dword [ecx + eax + 0xc], ebx
lea eax, [eax + 0x10]
jne 0x412630
mov edx, dword [ebp - 0x10]
mov esi, dword [edx + 0xc8]
test esi, esi
mov dword [ebp - 0x7c], esi
je 0x412730
cmp esi, 0x7ffffff
ja 0x412e5e
mov eax, esi
shl eax, 4
test eax, eax
mov dword [ebp - 0x14], eax
js 0x412e5e
mov edi, edx
mov edi, dword [edx + 0xc0]
je 0x4126e0
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x4126c9
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412ea1
mov dword [0x5c6108], eax
push dword [ebp - 0x14]
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
mov dword [ebp - 0x5c], eax
jne 0x4126e7
jmp 0x412ea1
mov dword [ebp - 0x5c], 8
xor eax, eax
mov edx, esi
nop dword [eax + eax]
cmp dword [ebp - 0x14], eax
je 0x41272d
mov ecx, dword [edi]
mov ebx, dword [edi + 4]
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [edi + 8]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
mov ecx, dword [edi + 0xc]
lea edi, [edi + 0x10]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x5c]
mov dword [ecx + eax], esi
mov dword [ecx + eax + 4], ebx
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x24]
mov dword [ecx + eax + 8], esi
mov dword [ecx + eax + 0xc], ebx
lea eax, [eax + 0x10]
jne 0x4126f0
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xd4]
mov edi, 8
mov ebx, 8
test eax, eax
mov dword [ebp - 0x30], eax
je 0x412848
cmp eax, 0xfffffff
ja 0x412e0e
lea esi, [eax*8]
test esi, esi
js 0x412e0e
mov ebx, dword [edx + 0xcc]
je 0x4127b0
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x41278f
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412ee3
mov dword [0x5c6108], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
mov dword [ebp - 0x34], eax
jne 0x4127b7
jmp 0x412ee3
mov dword [ebp - 0x34], 8
mov ecx, dword [ebp - 0x30]
mov esi, ecx
lea eax, [ecx - 1]
and esi, 0x1fffffff
cmp esi, eax
cmovae esi, eax
xor edx, edx
cmp esi, 4
jb 0x412816
mov eax, dword [ebp - 0x34]
sub eax, ebx
cmp eax, 0x10
mov eax, ecx
mov ecx, ebx
jb 0x41281a
inc esi
mov ecx, 2
mov edi, dword [ebp - 0x34]
mov eax, esi
mov edx, esi
and eax, 1
cmove eax, ecx
xor esi, esi
sub edx, eax
mov eax, dword [ebp - 0x30]
lea ecx, [ebx + edx*8]
sub eax, edx
nop
movups xmm0, xmmword [ebx + esi*8]
movups xmmword [edi + esi*8], xmm0
add esi, 2
cmp edx, esi
jne 0x412800
mov edi, 8
jmp 0x41281a
mov eax, ecx
mov ecx, ebx
mov esi, dword [ebp - 0x30]
lea esi, [ebx + esi*8]
mov ebx, dword [ebp - 0x34]
lea edx, [ebx + edx*8]
nop word cs:[eax + eax]
cmp ecx, esi
je 0x412845
movsd xmm0, qword [ecx]
add ecx, 8
dec eax
movsd qword [edx], xmm0
lea edx, [edx + 8]
jne 0x412830
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 0xe0]
mov dword [ebp - 0x34], ebx
test eax, eax
mov dword [ebp - 0x28], eax
je 0x412948
mov eax, dword [ebp - 0x28]
cmp eax, 0xfffffff
ja 0x412e40
lea esi, [eax*8]
test esi, esi
js 0x412e40
mov ebx, dword [edx + 0xd8]
je 0x4128c0
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x4128a3
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412f1c
mov dword [0x5c6108], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov edi, eax
test eax, eax
jne 0x4128c5
jmp 0x412f1c
mov edi, 8
mov ecx, dword [ebp - 0x28]
mov esi, ecx
lea eax, [ecx - 1]
and esi, 0x1fffffff
cmp esi, eax
cmovae esi, eax
xor edx, edx
cmp esi, 4
jb 0x412921
mov eax, edi
sub eax, ebx
cmp eax, 0x10
mov eax, ecx
mov ecx, ebx
jb 0x412925
inc esi
mov ecx, 2
mov eax, esi
mov edx, esi
and eax, 1
cmove eax, ecx
xor esi, esi
sub edx, eax
mov eax, dword [ebp - 0x28]
lea ecx, [ebx + edx*8]
sub eax, edx
nop dword [eax + eax]
movups xmm0, xmmword [ebx + esi*8]
movups xmmword [edi + esi*8], xmm0
add esi, 2
cmp edx, esi
jne 0x412910
jmp 0x412925
mov eax, ecx
mov ecx, ebx
mov esi, dword [ebp - 0x28]
lea edx, [edi + edx*8]
lea esi, [ebx + esi*8]
nop
cmp ecx, esi
je 0x412945
movsd xmm0, qword [ecx]
add ecx, 8
dec eax
movsd qword [edx], xmm0
lea edx, [edx + 8]
jne 0x412930
mov edx, dword [ebp - 0x10]
mov ecx, edx
mov dword [ebp - 0xac], edi
mov edx, dword [edx + 0x7c]
mov eax, dword [ecx + 0x50]
mov edi, dword [ecx + 0xe4]
mov dword [ebp - 0x104], edx
mov dword [ebp - 0x100], eax
mov eax, dword [ecx + 0x54]
mov dword [ebp - 0xfc], eax
mov eax, ecx
mov ecx, dword [ecx + 0xec]
test ecx, ecx
mov dword [ebp - 0x78], ecx
je 0x4129e0
cmp ecx, 0xaaaaaaa
ja 0x412e68
lea eax, [ecx*4]
lea esi, [eax + eax*2]
test esi, esi
js 0x412e68
je 0x4129ea
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x4129c2
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412e90
mov dword [0x5c6108], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
jne 0x4129ef
jmp 0x412e90
lea eax, [ecx*4]
lea esi, [eax + eax*2]
mov eax, 4
push esi
push edi
mov dword [ebp - 0xa8], eax
push eax
call sym._memcpy
add esp, 0xc
mov eax, dword [ebp - 0x10]
mov edi, dword [eax + 0xf0]
mov eax, dword [eax + 0xf8]
test eax, eax
mov dword [ebp - 0x74], eax
je 0x412a70
cmp eax, 0xfffffff
ja 0x412e18
lea esi, [eax*8]
test esi, esi
js 0x412e18
je 0x412a77
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x412a54
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412ed5
mov dword [0x5c6108], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
jne 0x412a7c
jmp 0x412ed5
lea esi, [eax*8]
mov eax, 4
push esi
push edi
mov dword [ebp - 0xa4], eax
push eax
call sym._memcpy
add esp, 0xc
mov esi, dword [ebp - 0x10]
mov edx, dword [esi + 4]
mov eax, dword [esi]
mov dword [ebp - 0xf4], edx
mov edx, dword [esi + 0xfc]
mov dword [ebp - 0xf8], eax
lea ecx, [ebp - 0xc0]
push dword [esi + 0x104]
call sym.__LT_alloc..vec..Vec_LT_T_C_A_GT__u20_as_u20_core..clone..Clone_GT_::clone::h18d041422cd1a5ab
add esp, 4
mov eax, dword [esi + 0x110]
mov edi, dword [esi + 0x108]
test eax, eax
mov dword [ebp - 0xa0], eax
je 0x412b30
cmp eax, 0xfffffff
ja 0x412e72
lea esi, [eax*8]
test esi, esi
js 0x412e72
je 0x412b37
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x412b0f
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412f48
mov dword [0x5c6108], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
jne 0x412b3c
jmp 0x412f48
lea esi, [eax*8]
mov eax, 4
push esi
push edi
mov dword [ebp - 0x9c], eax
push eax
call sym._memcpy
add esp, 0xc
mov edx, dword [ebp - 0x10]
xor esi, esi
mov ecx, dword [edx + 0x14]
mov eax, dword [edx + 0xc]
mov edi, dword [edx + 8]
mov dword [ebp - 0xd8], ecx
mov ecx, dword [edx + 0x18]
mov dword [ebp - 0xf0], eax
mov eax, dword [edx + 0x10]
mov dword [ebp - 0xdc], ecx
mov ecx, dword [edx + 0x1c]
mov dword [ebp - 0xec], eax
mov eax, dword [edx + 0x58]
mov dword [ebp - 0xe0], ecx
mov ecx, dword [edx + 0x20]
test eax, eax
mov dword [ebp - 0xe4], ecx
mov ecx, dword [edx + 0x24]
mov dword [ebp - 0xe8], ecx
mov ecx, 0
je 0x412bb4
mov ecx, dword [edx + 0x5c]
mov dword [ebp - 0x94], ecx
mov ecx, eax
lock inc dword [eax]
jle 0x412e00
mov ebx, dword [edx + 0x60]
mov dword [ebp - 0xd4], edi
test ebx, ebx
je 0x412bd5
mov eax, dword [edx + 0x64]
mov esi, ebx
mov dword [ebp - 0x90], eax
lock inc dword [ebx]
jle 0x412e00
mov eax, dword [edx + 0x11c]
mov dword [ebp - 0x70], ecx
mov ecx, dword [edx + 0x80]
mov edi, dword [edx + 0x114]
mov dword [ebp - 0x3c], esi
test eax, eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0xd0], ecx
je 0x412c50
cmp eax, 0xfffffff
ja 0x412e4a
lea esi, [eax*8]
test esi, esi
js 0x412e4a
je 0x412c57
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x412c38
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412f00
mov dword [0x5c6108], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
jne 0x412c5c
jmp 0x412f00
lea esi, [eax*8]
mov eax, 4
push esi
push edi
mov dword [ebp - 0x98], eax
push eax
call sym._memcpy
add esp, 0xc
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + 0x128]
test edx, edx
mov dword [ebp - 0x84], edx
je 0x412cf0
cmp edx, 0x5555555
ja 0x412e7c
lea eax, [edx*8]
lea eax, [eax + eax*2]
test eax, eax
mov dword [ebp - 0x54], eax
js 0x412e7c
mov edi, dword [ecx + 0x120]
je 0x412d00
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
test eax, eax
jne 0x412ccb
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412f39
mov dword [0x5c6108], eax
push dword [ebp - 0x54]
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
mov dword [ebp - 0x58], eax
jne 0x412d07
jmp 0x412f39
mov dword [ebp - 0x58], 8
jmp 0x412d70
mov dword [ebp - 0x58], 8
mov edx, dword [ebp - 0x84]
xor eax, eax
nop
cmp dword [ebp - 0x54], eax
je 0x412d6d
mov ecx, dword [edi]
mov ebx, dword [edi + 8]
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, dword [edi + 4]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x24], ecx
mov ecx, dword [edi + 0xc]
mov dword [ebp - 0x20], ecx
mov ecx, dword [edi + 0x10]
mov dword [ebp - 0x14], ecx
mov ecx, dword [edi + 0x14]
lea edi, [edi + 0x18]
mov dword [ebp - 0x88], ecx
mov ecx, dword [ebp - 0x58]
mov dword [ecx + eax], esi
mov esi, dword [ebp - 0x24]
mov dword [ecx + eax + 4], esi
mov esi, dword [ebp - 0x20]
mov dword [ecx + eax + 8], ebx
mov ebx, dword [ebp - 0x88]
mov dword [ecx + eax + 0xc], esi
mov esi, dword [ebp - 0x14]
mov dword [ecx + eax + 0x10], esi
mov dword [ecx + eax + 0x14], ebx
lea eax, [eax + 0x18]
jne 0x412d10
mov ecx, dword [ebp - 0x10]
mov esi, dword [ecx + 0x134]
mov edx, dword [ecx + 0x12c]
test esi, esi
mov dword [ebp - 0x18], esi
je 0x411d90
cmp esi, 0xfffffff
ja 0x412e22
lea edi, [esi*8]
test edi, edi
js 0x412e22
je 0x411d97
movzx eax, byte [0x5c6170]
mov eax, dword [0x5c6108]
mov ebx, edx
test eax, eax
jne 0x412dcc
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x412eb3
mov dword [0x5c6108], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x412eb3
mov edx, ebx
jmp 0x411d9c
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp + 8]
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov dword [ecx + 8], edx
add esp, 0x128
pop esi
pop edi
pop ebx
pop ebp
ret
ud2
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
jmp 0x412f62
mov ecx, 4
mov edx, esi
call dbg.handle_alloc_error
jmp 0x412f62
mov edx, dword [ebp - 0x14]
mov ecx, 8
call dbg.handle_alloc_error
jmp 0x412f62
mov ecx, 4
mov edx, edi
call dbg.handle_alloc_error
jmp 0x412f62
mov ecx, 8
mov edx, esi
call dbg.handle_alloc_error
jmp 0x412f62
mov ecx, 4
mov edx, esi
call dbg.handle_alloc_error
jmp 0x412f62
mov ecx, 8
mov edx, esi
call dbg.handle_alloc_error
jmp 0x412f62
mov edx, dword [ebp - 0x14]
mov ecx, 8
call dbg.handle_alloc_error
jmp 0x412f62
mov ecx, 4
mov edx, esi
call dbg.handle_alloc_error
jmp 0x412f62
mov ecx, 8
mov edx, esi
call dbg.handle_alloc_error
jmp 0x412f62
mov ecx, 8
mov edx, esi
call dbg.handle_alloc_error
jmp 0x412f62
mov edx, dword [ebp - 0x14]
mov ecx, 8
call dbg.handle_alloc_error
jmp 0x412f62
mov edx, dword [ebp - 0x54]
mov ecx, 8
call dbg.handle_alloc_error
jmp 0x412f62
mov ecx, 4
mov edx, esi
call dbg.handle_alloc_error
jmp 0x412f62
mov ecx, 8
mov edx, esi
call dbg.handle_alloc_error
ud2
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
ud2
call sym.alloc::raw_vec::capacity_overflow::hd0578b62e5d0dfac
ud2
mov ecx, 8
mov edx, esi
call dbg.handle_alloc_error
ud2