Function at 0x1004f4c0
Capabilities:
Get system information on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xffffffc0
sub esp, 0x9c0
mov esi, ecx
lea ecx, [esp + 0x4b8]
mov edx, esi
mov dword [esp + 0x90], esi
call fcn.1004afb0
lea ecx, [esp + 0x388]
mov edx, esi
call fcn.1004b0d0
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x1004f51c
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1005145c
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push 0x1900
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x1005145c
xor ecx, ecx
mov edx, 0xffffe700
nop dword [eax + eax]
mov dword [eax + edx + 0x1900], ecx
inc ecx
add edx, 0x20
jne 0x1004f540
movdqa xmm0, xmmword [0x101e04d0]
movdqa xmm1, xmmword [0x101e04e0]
mov dword [esp + 0xc0], 0
mov dword [esp + 0x100], 0
movdqa xmmword [esp + 0x140], xmm0
mov byte [esp + 0x150], 0
mov dword [esp + 0x154], 4
mov dword [esp + 0x158], 0
mov dword [esp + 0x15c], 0
mov dword [esp + 0x160], 4
mov dword [esp + 0x164], 0
mov dword [esp + 0x168], 0
mov byte [esp + 0x16c], 1
mov dword [esp + 0x170], 0
mov byte [esp + 0x174], 0
mov dword [esp + 0x178], 4
mov dword [esp + 0x17c], 0
movdqa xmmword [esp + 0x180], xmm1
mov byte [esp + 0x190], 1
mov dword [esp + 0x194], eax
mov eax, dword [0x103564a0]
mov dword [esp + 0x198], 0xc8
mov dword [esp + 0x1c0], 1
mov dword [esp + 0x1c4], 1
mov byte [esp + 0x1c8], 0
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x1004f660
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10051470
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push 0x180
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10051470
mov ecx, eax
and ecx, 0xffffffc0
mov dword [ecx + 0x3c], eax
add ecx, 0x40
lea esi, [esp + 0xc0]
push 0x140
push esi
mov dword [esp + 0x34], ecx
push ecx
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov dword [esp + 0xc0], 1
mov dword [esp + 0xc4], 1
mov dword [esp + 0xc8], 0
mov dword [esp + 0xd0], 0
lea eax, [esp + 0x40]
push esi
push eax
call fcn.1017c960
add esp, 8
mov edx, dword [esp + 0x458]
lea esi, [esp + 0xc0]
mov ecx, esi
push dword [esp + 0x460]
call fcn.100456e0
add esp, 4
lea eax, [esp + 0x78]
push esi
push eax
call fcn.10066670
add esp, 8
mov edx, dword [esp + 0x3c8]
lea ecx, [esp + 0x84]
push dword [esp + 0x3d0]
call fcn.100456e0
add esp, 4
mov edx, dword [esp + 0x3d4]
lea ecx, [esp + 0x4c]
push dword [esp + 0x3dc]
call fcn.100456e0
add esp, 4
mov edx, dword [esp + 0x3e0]
lea ecx, [esp + 0x30]
push dword [esp + 0x3e8]
call fcn.100456e0
add esp, 4
mov esi, dword [esp + 0x410]
mov ebx, dword [esp + 0x418]
lea edi, [esp + 0x560]
mov edx, esi
mov ecx, edi
push ebx
call fcn.1004ae60
add esp, 4
lea eax, [esp + 0x58]
mov dword [esp + 0x58], edi
mov dword [esp + 0xc0], 0x101e2a34
mov dword [esp + 0xc4], 2
mov dword [esp + 0xd0], 0
mov dword [esp + 0x5c], 0x10045410
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], 1
lea eax, [esp + 0xc0]
lea ecx, [esp + 0x810]
push eax
push ecx
call fcn.1001ac00
add esp, 8
cmp dword [esp + 0x564], 0
je 0x1004f7fc
push dword [esp + 0x560]
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov esi, dword [esp + 0x410]
mov ebx, dword [esp + 0x418]
mov eax, dword [esp + 0x818]
movq xmm0, qword [esp + 0x810]
movq qword [esp + 0x58], xmm0
mov dword [esp + 0x60], eax
mov edx, esi
lea ecx, [esp + 0x560]
push ebx
call fcn.1004ae60
add esp, 4
movsd xmm0, qword [esp + 0x78]
mov edi, dword [esp + 0x80]
movzx eax, word [esp + 0x483]
movzx ecx, byte [esp + 0x482]
movzx edx, byte [esp + 0x48c]
mov esi, dword [esp + 0x428]
mov ebx, 1
mov dword [esp + 0x24], 1
movsd qword [esp + 0xc4], xmm0
mov dword [esp + 0xcc], edi
movsd xmm0, qword [esp + 0x84]
mov edi, dword [esp + 0x8c]
movsd qword [esp + 0xd0], xmm0
mov dword [esp + 0xd8], edi
movsd xmm0, qword [esp + 0x4c]
mov edi, dword [esp + 0x54]
movsd qword [esp + 0xdc], xmm0
mov dword [esp + 0xe4], edi
mov edi, dword [esp + 0x38]
movsd xmm0, qword [esp + 0x30]
mov dword [esp + 0xf0], edi
movsd qword [esp + 0xe8], xmm0
mov edi, dword [esp + 0x60]
movsd xmm0, qword [esp + 0x58]
mov dword [esp + 0xfc], edi
movsd qword [esp + 0xf4], xmm0
movq xmm0, qword [esp + 0x560]
mov edi, dword [esp + 0x568]
mov dword [esp + 0x108], edi
movq qword [esp + 0x100], xmm0
mov word [esp + 0x10c], ax
mov byte [esp + 0x10e], cl
mov byte [esp + 0x10f], dl
mov dword [esp + 0xc0], esi
mov esi, dword [esp + 0x43c]
mov edi, dword [esp + 0x434]
test esi, esi
je 0x1004f96f
js 0x10051519
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x1004f95c
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x100514ff
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push esi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov ebx, eax
test eax, eax
je 0x100514ff
push esi
push edi
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov edi, dword [esp + 0x424]
mov dword [esp + 0x810], ebx
mov dword [esp + 0x20], ebx
mov ebx, dword [esp + 0x41c]
mov dword [esp + 0x814], esi
mov dword [esp + 0x818], esi
test edi, edi
je 0x1004f9e8
js 0x10051520
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x1004f9d3
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1005150c
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
mov dword [esp + 0x24], eax
je 0x1005150c
push edi
push ebx
mov ebx, dword [esp + 0x2c]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
test esi, esi
mov dword [esp + 0x560], ebx
mov dword [esp + 0x564], edi
mov dword [esp + 0x568], edi
je 0x1004fa69
lea ebx, [esp + 0x560]
mov edx, edi
mov ecx, ebx
push esi
call fcn.10044b80
add esp, 4
mov edi, dword [esp + 0x568]
mov eax, dword [esp + 0x560]
add eax, edi
push esi
mov ebx, dword [esp + 0x24]
push ebx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
movq xmm0, qword [esp + 0x560]
add edi, esi
mov dword [esp + 0x38], edi
movq qword [esp + 0x30], xmm0
push ebx
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
jmp 0x1004fa8e
add ebx, edi
push esi
push dword [esp + 0x24]
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
movq xmm0, qword [esp + 0x560]
add edi, esi
mov dword [esp + 0x38], edi
movq qword [esp + 0x30], xmm0
mov edx, dword [esp + 0x410]
lea ebx, [esp + 0x560]
lea esi, [esp + 0x810]
mov ecx, esi
push dword [esp + 0x418]
call fcn.1004ae60
add esp, 4
lea eax, [esp + 0x4c]
mov dword [esp + 0x4c], esi
mov dword [esp + 0x560], 0x101e2a34
mov dword [esp + 0x564], 2
mov dword [esp + 0x570], 0
mov dword [esp + 0x50], 0x10045410
mov dword [esp + 0x568], eax
mov dword [esp + 0x56c], 1
push ebx
lea eax, [esp + 0x5c]
push eax
call fcn.1001ac00
add esp, 8
cmp dword [esp + 0x814], 0
je 0x1004fb24
push dword [esp + 0x810]
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
movsd xmm0, qword [esp + 0x58]
mov edi, dword [esp + 0x478]
mov eax, dword [esp + 0x60]
movzx edx, byte [esp + 0x48b]
movzx ecx, byte [esp + 0x493]
mov esi, dword [esp + 0x38]
mov ebx, dword [esp + 0x470]
movsd qword [esp + 0x56c], xmm0
movq xmm0, qword [esp + 0x30]
test edi, edi
mov dword [esp + 0x574], eax
mov dword [esp + 0x568], esi
mov byte [esp + 0x20], dl
mov byte [esp + 0xa0], cl
movq qword [esp + 0x560], xmm0
je 0x1004fbce
js 0x10051527
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x1004fbaf
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1004fbbe
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
jne 0x1004fbd3
push edi
push 1
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
mov esi, 1
push edi
push ebx
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov al, 1
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], edi
mov dword [esp + 0x60], edi
mov dword [esp + 0x24], eax
movzx eax, byte [esp + 0xa0]
movzx ecx, byte [esp + 0x20]
push dword [esp + 0x2c]
push 0
lea edx, [esp + 0x60]
push edx
push eax
push ecx
lea ebx, [esp + 0x574]
push ebx
lea edi, [esp + 0xd8]
push edi
lea esi, [esp + 0x82c]
push esi
call fcn.10185530
add esp, 0x20
lea ecx, [esp + 0x388]
lea eax, [esp + 0x6f8]
push 0x118
push ecx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
push 0x198
push esi
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x48]
lock inc dword [eax + 0x3c]
push 0x2b0
push ebx
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x1004fc95
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10051484
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push 0x2b0
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10051484
mov esi, eax
push 0x2b0
push ebx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x24], 0
push 0x101e0740
push esi
call fcn.1003cb10
add esp, 8
lea esi, [esp + 0x810]
test eax, eax
jne 0x100514a9
lea ecx, [esp + 0x40]
call fcn.10041240
cmp byte [esp + 0x540], 1
jne 0x1004fdf6
mov dword [esp + 0xc0], str._INFOENC__Fast_mode_detected__assigning_4_times_as_many_threadsT1
mov dword [esp + 0xc4], 1
mov dword [esp + 0xd0], 0
mov dword [esp + 0xc8], str.a_sequencefailed_to_write_whole_buffer
mov dword [esp + 0xcc], 0
push edi
call fcn.1005f950
add esp, 4
pxor xmm0, xmm0
mov dword [esp + 0xe0], 0
movdqa xmmword [esp + 0xd0], xmm0
movdqa xmmword [esp + 0xc0], xmm0
push edi
call sub.KERNEL32.dll_GetSystemInfo
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x560], esi
mov dword [esp + 0xc0], 0x101e3404
mov dword [esp + 0xc4], 1
mov dword [esp + 0xd0], 0
mov dword [esp + 0xc8], ebx
mov dword [esp + 0x564], 0x1002d590
mov dword [esp + 0xcc], 1
mov dword [esp + 0x810], eax
push edi
call fcn.1005f950
add esp, 4
mov ecx, dword [esp + 0x810]
mov eax, 4
cmp ecx, 5
cmovae eax, ecx
shl eax, 2
cmp byte [esp + 0x540], 1
mov ecx, 1
mov dword [esp + 0x98], eax
je 0x1004fea1
jmp 0x1004feea
pxor xmm0, xmm0
mov dword [esp + 0xe0], 0
movdqa xmmword [esp + 0xd0], xmm0
movdqa xmmword [esp + 0xc0], xmm0
push edi
call sub.KERNEL32.dll_GetSystemInfo
mov eax, dword [esp + 0xd4]
mov dword [esp + 0x560], esi
mov dword [esp + 0xc0], 0x101e3404
mov dword [esp + 0xc4], 1
mov dword [esp + 0xd0], 0
mov dword [esp + 0xc8], ebx
mov dword [esp + 0x564], 0x1002d590
mov dword [esp + 0xcc], 1
mov dword [esp + 0x810], eax
push edi
call fcn.1005f950
add esp, 4
mov ecx, dword [esp + 0x810]
mov eax, 4
cmp ecx, 5
cmovae eax, ecx
cmp byte [esp + 0x540], 1
mov ecx, 1
mov dword [esp + 0x98], eax
jne 0x1004feea
mov dword [esp + 0xc0], str._INFOENC__Fast_mode_detected__ignoring_HDD_thread_limit
mov dword [esp + 0xc4], 1
mov dword [esp + 0xd0], 0
mov dword [esp + 0xc8], str.a_sequencefailed_to_write_whole_buffer
mov dword [esp + 0xcc], 0
push edi
call fcn.1005f950
add esp, 4
mov eax, dword [esp + 0x98]
mov ecx, eax
test eax, eax
mov dword [esp + 0x9c], ecx
je 0x100514d3
mov dword [esp + 0xc0], 1
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], 0
mov dword [esp + 0xd0], 0
push edi
lea eax, [esp + 0x7c]
push eax
call fcn.1017c960
add esp, 8
lea eax, [esp + 0x98]
mov dword [esp + 0xc0], 0x101e3204
mov dword [esp + 0xc4], 1
mov dword [esp + 0xd0], 0
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], 1
mov dword [esp + 0x560], eax
mov dword [esp + 0x564], 0x1002d590
push edi
call fcn.1005f950
add esp, 4
mov eax, dword [esp + 0x9c]
test eax, eax
je 0x100514e9
mov dword [esp + 0xc0], 1
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], 0
mov dword [esp + 0xd0], 0
push edi
lea eax, [esp + 0x88]
push eax
call fcn.1017c960
add esp, 8
lea eax, [esp + 0x9c]
mov dword [esp + 0xc0], 0x101e3234
mov dword [esp + 0xc4], 1
mov dword [esp + 0xd0], 0
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], 1
mov dword [esp + 0x560], eax
mov dword [esp + 0x564], 0x1002d590
push edi
call fcn.1005f950
add esp, 4
call fcn.101517c0
mov dword [esp + 0xb8], eax
mov eax, dword [0x103564a0]
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], edx
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x10050063
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10051498
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push 0x10
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10051498
mov ebx, eax
mov dword [eax], 1
mov dword [eax + 4], 1
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x3c], 0x64
mov dword [esp + 0x28], ebx
add eax, 0x8c
mov dword [esp + 0xbc], eax
nop
pxor xmm0, xmm0
mov dword [esp + 0x568], 0x3b9aca00
mov dword [esp + 0xd0], 0
movdqa xmmword [esp + 0xc0], xmm0
mov edi, dword [esp + 0x2c]
xor esi, esi
mov ecx, dword [edi]
mov dword [esp + 0xa0], 1
mov dword [esp + 0x20], 0
jmp 0x1005011e
call sub.KERNEL32.dll_SwitchToThread
nop word cs:[eax + eax]
nop
mov edi, dword [esp + 0x2c]
inc esi
mov ecx, dword [edi]
mov eax, dword [esp + 0xa0]
add ebx, eax
add eax, 2
mov dword [esp + 0x20], ebx
mov dword [esp + 0xa0], eax
cmp esi, 6
mov edx, 6
mov dword [esp + 0x24], esi
mov ebx, dword [edi + 0xd4]
cmovb edx, esi
mov esi, dword [edi + 0x88]
xor eax, eax
sub eax, dword [edi + 0x84]
imul edx, edx
mov dword [esp + 0x4a0], ebx
dec esi
and esi, ecx
mov edi, esi
shl edi, 5
mov dword [esp + 0x94], edi
mov ebx, dword [ebx + edi]
mov edi, ecx
inc ecx
cmp ecx, ebx
jne 0x100501c0
mov ecx, dword [esp + 0x2c]
inc esi
cmp esi, dword [ecx + 0x80]
jb 0x1005017b
and eax, edi
add eax, dword [ecx + 0x84]
mov ebx, eax
mov eax, edi
lock cmpxchg dword [ecx], ebx
mov esi, dword [esp + 0x24]
je 0x10050380
mov ebx, dword [esp + 0x20]
cmp esi, 6
mov eax, 6
cmovb eax, esi
test eax, eax
je 0x10050100
nop word cs:[eax + eax]
nop dword [eax]
pause
dec edx
jne 0x100501b0
jmp 0x10050100
cmp ebx, edi
jne 0x10050210
mfence
mov ecx, dword [esp + 0x2c]
mov eax, dword [ecx + 0x40]
mov esi, dword [ecx + 0x88]
mov ebx, dword [esp + 0x20]
mov ecx, esi
not ecx
and ecx, eax
cmp ecx, edi
je 0x10050240
mov esi, dword [esp + 0x24]
mov eax, 6
cmp esi, 6
cmovb eax, esi
test eax, eax
je 0x10050100
nop dword [eax]
pause
dec edx
jne 0x10050200
jmp 0x10050100
mov esi, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
cmp esi, 7
jae 0x100500f0
test esi, esi
je 0x10050100
mov eax, ebx
nop dword [eax + eax]
pause
dec eax
jne 0x10050230
jmp 0x10050100
test esi, eax
jne 0x10051045
mov edi, dword [esp + 0x568]
cmp edi, 0x3b9aca00
je 0x1005028e
mov eax, dword [esp + 0x564]
mov ebx, dword [esp + 0x560]
mov dword [esp + 0x24], eax
call fcn.101517c0
cmp eax, ebx
mov esi, edx
sbb edx, dword [esp + 0x24]
jb 0x1005028e
xor esi, dword [esp + 0x24]
xor eax, ebx
or esi, eax
jne 0x10051045
cmp ecx, edi
jae 0x10051045
lea eax, [esp + 0xc0]
mov dword [esp + 0x810], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x814], eax
lea eax, [esp + 0x560]
mov dword [esp + 0x818], eax
push 0
call fcn.10168570
add esp, 4
mov esi, eax
test eax, eax
je 0x10050318
mov edi, dword [esi]
mov dword [esi], 0
test edi, edi
je 0x1005033b
mov dword [esp + 0x388], edi
mov dword [edi + 0xc], 0
mov dword [edi + 0x10], 0
lea ecx, [esp + 0x810]
lea edx, [esp + 0x388]
call fcn.1003e900
mov ecx, dword [esi]
mov dword [esi], edi
test ecx, ecx
je 0x100500d3
lock dec dword [ecx]
jne 0x100500d3
call fcn.10043f70
jmp 0x100500d3
call fcn.10151130
mov edi, eax
mov dword [esp + 0x388], eax
lea ecx, [esp + 0x810]
lea edx, [esp + 0x388]
call fcn.1003e900
jmp 0x1005035c
call fcn.10151130
mov edi, eax
mov dword [esp + 0x388], eax
lea ecx, [esp + 0x810]
lea edx, [esp + 0x388]
call fcn.1003e900
lock dec dword [edi]
jne 0x100500d3
mov ecx, edi
call fcn.10043f70
jmp 0x100500d3
mov esi, dword [esp + 0x4a0]
mov eax, dword [esp + 0x94]
mov edx, edi
lea ecx, [esi + eax]
mov dword [esp + 0x24], ecx
mov dword [esp + 0xc0], ecx
mov ecx, dword [esp + 0x2c]
add edx, dword [ecx + 0x84]
mov dword [esp + 0xc4], edx
mov ecx, dword [esi + eax + 8]
mov ebx, dword [esi + eax + 4]
mov edi, dword [esi + eax + 0x10]
mov dword [esp + 0xa0], ecx
mov ecx, dword [esi + eax + 0xc]
mov dword [esp + 0x20], ecx
mov ecx, dword [esi + eax + 0x1c]
mov dword [esp + 0x818], ecx
movsd xmm0, qword [esi + eax + 0x14]
mov eax, dword [esp + 0x24]
movsd qword [esp + 0x810], xmm0
mov dword [eax], edx
mov ecx, dword [esp + 0xbc]
call fcn.1003e030
mov eax, dword [esp + 0x818]
movsd xmm0, qword [esp + 0x810]
cmp ebx, 3
mov dword [esp + 0x390], eax
movsd qword [esp + 0x388], xmm0
je 0x10051045
mov eax, dword [esp + 0x390]
lea ecx, [esp + 0x60]
movsd xmm0, qword [esp + 0x388]
mov edx, dword [esp + 0x538]
mov dword [ecx + 0x10], eax
mov eax, dword [esp + 0xa0]
movsd qword [ecx + 8], xmm0
mov dword [esp + 0x58], ebx
movups xmm0, xmmword [esp + 0x518]
mov ecx, dword [esp + 0x53c]
mov ebx, dword [esp + 0x548]
mov dword [esp + 0x94], edx
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x20]
movaps xmmword [esp + 0xa0], xmm0
movdqu xmm0, xmmword [esp + 0x528]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], edi
mov edi, dword [esp + 0x550]
movzx eax, byte [esp + 0x540]
movdqa xmmword [esp + 0x4a0], xmm0
test edi, edi
mov byte [esp + 0x24], al
je 0x10050500
js 0x1005134e
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x100504dd
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10051324
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
jne 0x10050505
jmp 0x10051324
mov esi, 1
push edi
push ebx
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
cmp dword [esp + 0x4b8], 2
mov eax, 2
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
je 0x1005065c
mov eax, dword [esp + 0x4e0]
lea edx, [esp + 0x4c0]
cmp eax, 5
jb 0x10050550
mov eax, dword [esp + 0x4bc]
mov edx, dword [esp + 0x4c0]
lea ecx, [esp + 0x388]
push eax
call fcn.1003bf50
add esp, 4
mov edi, dword [esp + 0x510]
lea ebx, [esp + 0x4f0]
cmp edi, 5
jb 0x10050581
mov edi, dword [esp + 0x4ec]
mov ebx, dword [esp + 0x4f0]
lea esi, [esp + 0x560]
mov edx, ebx
mov ecx, esi
push edi
call fcn.1003bf50
add esp, 4
movsd xmm1, qword [esp + 0x580]
lea eax, [esp + 0xec]
lea ecx, [esp + 0x38c]
movq xmm0, qword [esp + 0x588]
movsd xmm2, qword [esp + 0x578]
movsd xmm3, qword [esp + 0x560]
mov edi, esi
lea esi, [esp + 0xc0]
movsd qword [eax + 0x20], xmm1
movsd xmm1, qword [esp + 0x570]
movsd qword [eax + 0x18], xmm2
movq qword [eax + 0x28], xmm0
movsd qword [eax], xmm3
movsd xmm2, qword [ecx]
movsd qword [eax + 0x10], xmm1
movsd xmm1, qword [esp + 0x568]
movsd qword [eax + 8], xmm1
movsd xmm1, qword [ecx + 8]
movsd qword [esp + 0xc0], xmm2
movsd xmm2, qword [ecx + 0x18]
mov eax, dword [esp + 0x388]
movsd qword [esp + 0xc8], xmm1
movsd xmm1, qword [ecx + 0x10]
movsd qword [esp + 0xd8], xmm2
movsd qword [esp + 0xd0], xmm1
movq xmm1, qword [ecx + 0x20]
mov ecx, dword [ecx + 0x28]
mov dword [esp + 0xe8], ecx
movq qword [esp + 0xe0], xmm1
mov ecx, 0x17
rep movsd dword es:[edi], dword [esi]
movaps xmm0, xmmword [esp + 0xa0]
mov ecx, dword [esp + 0x94]
lea esi, [esp + 0x8a0]
lea edi, [esp + 0x814]
movzx edx, byte [esp + 0x558]
mov ebx, dword [esp + 0x554]
movups xmmword [esp + 0x870], xmm0
movaps xmm0, xmmword [esp + 0x4a0]
movups xmmword [esp + 0x880], xmm0
mov dword [esp + 0x890], ecx
mov ecx, dword [esp + 0x20]
movq xmm0, qword [esp + 0x30]
mov dword [esp + 0x894], ecx
movzx ecx, byte [esp + 0x24]
mov byte [esp + 0x898], cl
mov ecx, dword [esp + 0x38]
movq qword [esi], xmm0
mov dword [esi + 8], ecx
mov dword [esp + 0x810], eax
mov ecx, 0x17
lea esi, [esp + 0x560]
rep movsd dword es:[edi], dword [esi]
mov byte [esp + 0x8b0], dl
mov dword [esp + 0x8ac], ebx
mov eax, dword [esp + 0x28]
lock inc dword [eax]
jle 0x10051320
mov esi, dword [esp + 0x90]
lea ecx, [esp + 0x4c]
mov edx, esi
call fcn.1004ac50
mov edi, dword [esi + 0xf0]
movzx eax, byte [esi + 0x101]
mov ebx, dword [esi + 0xe8]
test edi, edi
mov byte [esp + 0x24], al
je 0x10050770
js 0x10051344
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x1005075a
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10051334
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
jne 0x10050775
jmp 0x10051334
mov esi, 1
push edi
push ebx
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
cmp dword [esp + 0x58], 0
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], edi
je 0x10050a70
mov esi, dword [esp + 0x80]
lea edi, [esp + 0xc0]
lea ebx, [esp + 0x388]
mov eax, dword [esi + 0x3c]
cmp eax, dword [esp + 0x3c]
jne 0x1005084c
nop dword [eax]
mov eax, dword [esi + 0x3c]
lea edx, [esp + 0x3c]
lea ecx, [esp + 0x560]
mov dword [esp + 0x560], ebx
mov dword [esp + 0x564], 0x1002d590
mov dword [esp + 0xc0], 0x101e3330
mov dword [esp + 0xc4], 3
mov dword [esp + 0xd0], 0
mov dword [esp + 0x568], edx
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x56c], 0x1002d590
mov dword [esp + 0xcc], 2
mov dword [esp + 0x388], eax
push edi
call fcn.1005f950
add esp, 4
push 0x3e8
call sub.KERNEL32.dll_Sleep
mov eax, dword [esi + 0x3c]
cmp eax, dword [esp + 0x3c]
je 0x100507c0
lea eax, [esp + 0x60]
lea edx, [esp + 0x40]
lea ecx, [esp + 0x3c]
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esp + 0xc0], edx
mov dword [esp + 0xc4], 0x1003eea0
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], 0x1002d590
mov dword [esp + 0xd0], ecx
mov dword [esp + 0x560], 0x101e32fc
mov dword [esp + 0x564], 3
mov dword [esp + 0x570], 0
mov dword [esp + 0x568], edi
mov dword [esp + 0xd4], 0x1002d590
mov dword [esp + 0x56c], 3
mov dword [esp + 0x388], eax
lea ebx, [esp + 0x560]
push ebx
call fcn.1005f950
add esp, 4
cmp byte [esp + 0x70], 0
je 0x10050d50
mov eax, dword [esp + 0x38]
movsd xmm0, qword [esp + 0x30]
lea ecx, [esp + 0x618]
mov dword [ecx + 8], eax
lea eax, [esp + 0x60]
movsd qword [ecx], xmm0
movsd xmm0, qword [eax]
movq xmm1, qword [eax + 8]
movq qword [ecx - 8], xmm1
movsd qword [ecx - 0x10], xmm0
push 0xa8
lea eax, [esp + 0x814]
push eax
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
movsd xmm0, qword [esp + 0x4c]
mov eax, dword [esp + 0x54]
movsd qword [esp + 0x388], xmm0
mov dword [esp + 0x390], eax
lock inc dword [esi + 0x3c]
push 0xc4
push ebx
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0xec]
movsd xmm0, qword [esp + 0x388]
mov dword [esp + 0x184], eax
mov eax, dword [esp + 0x390]
movsd qword [ecx + 0x9c], xmm0
mov dword [ecx + 0xa4], eax
movzx eax, byte [esp + 0x24]
mov byte [esp + 0x194], al
movzx eax, byte [esp + 0x42]
mov byte [ecx + 0xab], al
movzx eax, word [esp + 0x40]
mov word [ecx + 0xa9], ax
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x100509d7
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10051358
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push 0xd8
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10051358
mov esi, eax
push 0xc4
push ebx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ebx, dword [esp + 0x28]
mov dword [esi + 0xc4], ebx
movq xmm0, qword [esp + 0x388]
movq qword [esi + 0xc8], xmm0
mov eax, dword [esp + 0x390]
mov dword [esi + 0xd0], eax
movzx eax, byte [esp + 0x24]
mov byte [esi + 0xd4], al
movzx eax, byte [esp + 0x42]
mov byte [esi + 0xd7], al
movzx eax, word [esp + 0x40]
mov word [esi + 0xd5], ax
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
push 0x101e0730
push esi
call fcn.1003cb10
add esp, 8
test eax, eax
je 0x100500b0
jmp 0x1005136c
mov esi, dword [esp + 0x8c]
lea edi, [esp + 0xc0]
lea ebx, [esp + 0x388]
mov eax, dword [esi + 0x3c]
cmp eax, dword [esp + 0x3c]
jne 0x10050b2c
nop word cs:[eax + eax]
nop dword [eax]
mov eax, dword [esi + 0x3c]
lea edx, [esp + 0x3c]
lea ecx, [esp + 0x560]
mov dword [esp + 0x560], ebx
mov dword [esp + 0x564], 0x1002d590
mov dword [esp + 0xc0], 0x101e32b8
mov dword [esp + 0xc4], 3
mov dword [esp + 0xd0], 0
mov dword [esp + 0x568], edx
mov dword [esp + 0xc8], ecx
mov dword [esp + 0x56c], 0x1002d590
mov dword [esp + 0xcc], 2
mov dword [esp + 0x388], eax
push edi
call fcn.1005f950
add esp, 4
push 0x3e8
call sub.KERNEL32.dll_Sleep
mov eax, dword [esi + 0x3c]
cmp eax, dword [esp + 0x3c]
je 0x10050aa0
lea eax, [esp + 0x60]
lea edx, [esp + 0x40]
lea ecx, [esp + 0x3c]
mov dword [esp + 0x40], eax
mov eax, dword [esi + 0x3c]
mov dword [esp + 0xc0], edx
mov dword [esp + 0xc4], 0x1003eea0
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], 0x1002d590
mov dword [esp + 0xd0], ecx
mov dword [esp + 0x560], 0x101e3278
mov dword [esp + 0x564], 3
mov dword [esp + 0x570], 0
mov dword [esp + 0x568], edi
mov dword [esp + 0xd4], 0x1002d590
mov dword [esp + 0x56c], 3
mov dword [esp + 0x388], eax
lea ebx, [esp + 0x560]
push ebx
call fcn.1005f950
add esp, 4
cmp byte [esp + 0x70], 0
je 0x10050eb9
mov eax, dword [esp + 0x38]
movsd xmm0, qword [esp + 0x30]
lea ecx, [esp + 0x618]
mov dword [ecx + 8], eax
lea eax, [esp + 0x60]
movsd qword [ecx], xmm0
movsd xmm0, qword [eax]
movq xmm1, qword [eax + 8]
movq qword [ecx - 8], xmm1
movsd qword [ecx - 0x10], xmm0
push 0xa8
lea eax, [esp + 0x814]
push eax
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
movsd xmm0, qword [esp + 0x4c]
mov eax, dword [esp + 0x54]
movsd qword [esp + 0x388], xmm0
mov dword [esp + 0x390], eax
lock inc dword [esi + 0x3c]
push 0xc4
push ebx
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0xec]
movsd xmm0, qword [esp + 0x388]
mov dword [esp + 0x184], eax
mov eax, dword [esp + 0x390]
movsd qword [ecx + 0x9c], xmm0
mov dword [ecx + 0xa4], eax
movzx eax, byte [esp + 0x24]
mov byte [esp + 0x194], al
movzx eax, byte [esp + 0x42]
mov byte [ecx + 0xab], al
movzx eax, word [esp + 0x40]
mov word [ecx + 0xa9], ax
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x10050cb7
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x100513ad
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push 0xd8
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x100513ad
mov esi, eax
push 0xc4
push ebx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ebx, dword [esp + 0x28]
mov dword [esi + 0xc4], ebx
movq xmm0, qword [esp + 0x388]
movq qword [esi + 0xc8], xmm0
mov eax, dword [esp + 0x390]
mov dword [esi + 0xd0], eax
movzx eax, byte [esp + 0x24]
mov byte [esi + 0xd4], al
movzx eax, byte [esp + 0x42]
mov byte [esi + 0xd7], al
movzx eax, word [esp + 0x40]
mov word [esi + 0xd5], ax
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x84]
push 0x101e0730
push esi
call fcn.1003cb10
add esp, 8
test eax, eax
je 0x100500b0
jmp 0x100513ee
lea eax, [esp + 0x60]
movsd xmm0, qword [eax]
movq xmm1, qword [eax + 8]
lea eax, [esp + 0x618]
movq qword [eax - 8], xmm1
movsd qword [eax - 0x10], xmm0
push 0xa8
lea eax, [esp + 0x814]
push eax
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
movsd xmm0, qword [esp + 0x4c]
mov eax, dword [esp + 0x54]
movsd qword [esp + 0x388], xmm0
mov dword [esp + 0x390], eax
lock inc dword [esi + 0x3c]
push 0xb8
push ebx
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0xec]
movsd xmm0, qword [esp + 0x388]
mov dword [esp + 0x178], eax
mov eax, dword [esp + 0x390]
movsd qword [ecx + 0x90], xmm0
mov dword [ecx + 0x98], eax
movzx eax, byte [esp + 0x24]
mov byte [esp + 0x188], al
mov eax, dword [esp + 0x43]
mov dword [ecx + 0xa0], eax
mov eax, dword [esp + 0x40]
mov dword [ecx + 0x9d], eax
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x10050e29
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x10051399
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push 0xd0
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x10051399
mov esi, eax
push 0xb8
push ebx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ebx, dword [esp + 0x28]
mov dword [esi + 0xb8], ebx
movq xmm0, qword [esp + 0x388]
movq qword [esi + 0xbc], xmm0
mov eax, dword [esp + 0x390]
mov dword [esi + 0xc4], eax
movzx eax, byte [esp + 0x24]
mov byte [esi + 0xc8], al
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x43]
mov dword [esi + 0xcc], ecx
mov dword [esi + 0xc9], eax
mov edx, dword [esp + 0x7c]
mov ecx, dword [esp + 0x78]
push 0x101e0720
push esi
call fcn.1003cb10
add esp, 8
test eax, eax
je 0x10051023
jmp 0x100513c1
lea eax, [esp + 0x60]
movsd xmm0, qword [eax]
movq xmm1, qword [eax + 8]
lea eax, [esp + 0x618]
movq qword [eax - 8], xmm1
movsd qword [eax - 0x10], xmm0
push 0xa8
lea eax, [esp + 0x814]
push eax
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
movsd xmm0, qword [esp + 0x4c]
mov eax, dword [esp + 0x54]
movsd qword [esp + 0x388], xmm0
mov dword [esp + 0x390], eax
lock inc dword [esi + 0x3c]
push 0xb8
push ebx
push edi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x28]
lea ecx, [esp + 0xec]
movsd xmm0, qword [esp + 0x388]
mov dword [esp + 0x178], eax
mov eax, dword [esp + 0x390]
movsd qword [ecx + 0x90], xmm0
mov dword [ecx + 0x98], eax
movzx eax, byte [esp + 0x24]
mov byte [esp + 0x188], al
mov eax, dword [esp + 0x43]
mov dword [ecx + 0xa0], eax
mov eax, dword [esp + 0x40]
mov dword [ecx + 0x9d], eax
mov eax, dword [0x103564a0]
movzx eax, byte [eax]
mov eax, dword [0x1035648c]
mov eax, dword [eax]
test eax, eax
jne 0x10050f92
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1005141b
mov ecx, dword [0x1035648c]
mov dword [ecx], eax
push 0xd0
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
test eax, eax
je 0x1005141b
mov esi, eax
push 0xb8
push ebx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ebx, dword [esp + 0x28]
mov dword [esi + 0xb8], ebx
movq xmm0, qword [esp + 0x388]
movq qword [esi + 0xbc], xmm0
mov eax, dword [esp + 0x390]
mov dword [esi + 0xc4], eax
movzx eax, byte [esp + 0x24]
mov byte [esi + 0xc8], al
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x43]
mov dword [esi + 0xcc], ecx
mov dword [esi + 0xc9], eax
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x84]
push 0x101e0720
push esi
call fcn.1003cb10
add esp, 8
test eax, eax
jne 0x1005142f
cmp dword [esp + 0x34], 0
je 0x100500b0
push dword [esp + 0x30]
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
jmp 0x100500b0
mov dword [esp + 0xc0], str._INFO__Traversal_thread_completed.
mov dword [esp + 0xc4], 1
mov dword [esp + 0xd0], 0
mov dword [esp + 0xc8], str.a_sequencefailed_to_write_whole_buffer
mov dword [esp + 0xcc], 0
lea edi, [esp + 0xc0]
push edi
call fcn.1005f950
add esp, 4
lea ebx, [esp + 0x388]
mov dword [esp + 0xc0], 0x101e33ac
mov dword [esp + 0xc4], 1
mov dword [esp + 0xd0], 0
mov dword [esp + 0xc8], str.a_sequencefailed_to_write_whole_buffer
mov dword [esp + 0xcc], 0
push edi
call fcn.1005f950
add esp, 4
lea eax, [esp + 0x78]
push eax
call fcn.1017cd50
add esp, 4
lea eax, [esp + 0x84]
push eax
call fcn.1017cd50
add esp, 4
mov eax, dword [esp + 0x28]
movq xmm0, qword [eax + 8]
pshufd xmm1, xmm0, 0x55
movd dword [esp + 0x58], xmm0
movd dword [esp + 0x5c], xmm1
call fcn.101517c0
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], edx
mov dword [esp + 0xc8], ecx
push dword [esp + 0xb0]
push dword [esp + 0xb8]
push dword [esp + 0xc0]
push edi
call fcn.10151850
add esp, 0x10
xor esi, esi
cmp ecx, 0x3b9aca00
mov dword [esp + 0x560], 0x101e33d4
mov dword [esp + 0x564], 2
mov dword [esp + 0x570], edi
mov dword [esp + 0x574], 2
mov dword [esp + 0x568], ebx
mov dword [esp + 0xc0], 2
mov dword [esp + 0xc8], 2
mov dword [esp + 0xd0], 0x20
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov byte [esp + 0xdc], 3
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 4
mov dword [esp + 0xe8], 2
mov dword [esp + 0xf0], 0x20
mov dword [esp + 0xf4], 1
mov dword [esp + 0xf8], 0
mov byte [esp + 0xfc], 3
mov dword [esp + 0x56c], 2
cmove eax, esi
cmove edx, esi
cmove ecx, esi
mov dword [esp + 0x810], eax
lea eax, [esp + 0x58]
mov dword [esp + 0x814], edx
mov dword [esp + 0x818], ecx
mov dword [esp + 0x388], eax
lea eax, [esp + 0x810]
mov dword [esp + 0x38c], fcn.1002d7d0
mov dword [esp + 0x390], eax
mov dword [esp + 0x394], fcn.1002b590
lea eax, [esp + 0x560]
push eax
call fcn.1005f950
add esp, 4
mov ecx, dword [esp + 0x28]
lock dec dword [ecx]
mov esi, dword [esp + 0x90]
jne 0x1005127f
call fcn.10043f50
lea ecx, [esp + 0x84]
call fcn.10041240
lea ecx, [esp + 0x78]
call fcn.10041240
mov ecx, dword [esp + 0x2c]
call fcn.10042810
cmp dword [esp + 0x54c], 0
je 0x100512bc
push dword [esp + 0x548]
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0x4b8], 2
je 0x10051304
cmp dword [esp + 0x4e0], 5
jb 0x100512e5
push dword [esp + 0x4c0]
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0x510], 5
jb 0x10051304
push dword [esp + 0x4f0]
push 0
mov eax, dword [0x1035648c]
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov ecx, esi
call fcn.10043190
add esi, 0xa4
mov ecx, esi
call fcn.10042160
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
ud2
push edi
push 1
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
push edi
push 1
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
call fcn.1001a7a0
jmp 0x1005152c
call fcn.1001a7a0
jmp 0x1005152c
push 0xd8
push 8
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], edx
push 0x101e0710
push 0x101e0f10
push edi
push 0x32
push 0x101e0684
call fcn.10026bb0
add esp, 0x14
jmp 0x1005152c
push 0xd0
push 8
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
push 0xd8
push 8
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], edx
push 0x101e0710
push 0x101e0f10
push edi
push 0x32
push 0x101e0684
call fcn.10026bb0
add esp, 0x14
jmp 0x1005152c
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], edx
push 0x101e0710
push 0x101e0f10
push edi
push 0x32
push 0x101e0684
call fcn.10026bb0
add esp, 0x14
jmp 0x1005152c
push 0xd0
push 8
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], edx
push 0x101e0710
push 0x101e0f10
push edi
push 0x32
push 0x101e0684
call fcn.10026bb0
add esp, 0x14
jmp 0x1005152c
push 0x1900
push 4
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
push 0x140
push 0x40
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
push 0x2b0
push 8
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
push 0x10
push 8
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], edx
push 0x101e0710
push 0x101e0f10
push edi
push 0x32
push 0x101e0684
call fcn.10026bb0
add esp, 0x14
jmp 0x1005152c
push 0x1034e28c
push 0x21
push 0x1034e20f
call fcn.10026890
add esp, 0xc
jmp 0x1005152c
push 0x1034e28c
push 0x21
push 0x1034e20f
call fcn.10026890
add esp, 0xc
jmp 0x1005152c
push esi
push 1
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
push edi
push 1
call fcn.1001a7e0
add esp, 8
jmp 0x1005152c
call fcn.1001a7a0
jmp 0x1005152c
call fcn.1001a7a0
jmp 0x1005152c
call fcn.1001a7a0
ud2