Function at 0x43ee40
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x168
mov ebp, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, ecx
sub edx, eax
xor edi, edi
cmp edx, 2
jae 0x43bde9
mov eax, edi
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
ret
cmp byte [eax], 0x67
jne 0x43be0a
cmp byte [eax + 1], 0x73
jne 0x43be0a
add eax, 2
mov dword [ebp], eax
mov edx, ecx
sub edx, eax
mov byte [esp + 0x1b], 1
cmp edx, 2
jb case.0x43be1a.58
jmp 0x43be0f
mov byte [esp + 0x1b], 0
movsx esi, byte [eax]
add esi, 0xffffffcf
cmp esi, 0x43
ja case.0x43be1a.58
jmp dword [esi*4 + 0x46966c]
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x43e7a0
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x43d080
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.0043acb0
movsx ecx, byte [eax + 1]
add ecx, 0xffffffb2
cmp ecx, 0x2c
ja case.0x43be1a.58
jmp dword [ecx*4 + 0x469c88]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x148], 0x46a6c5
mov dword [esp + 0x14c], 0x46a6c7
movsd xmm0, qword [esp + 0x148]
jmp 0x43ceb8
movsx ecx, byte [eax + 1]
add ecx, 0xffffff9d
cmp ecx, 0x13
ja case.0x43be1a.58
jmp dword [ecx*4 + 0x469c38]
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00437930
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0x14], eax
test eax, eax
je 0x43cfd1
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.0043e1f0
jmp 0x43cfca
movsx ecx, byte [eax + 1]
add ecx, 0xffffffaa
cmp ecx, 0x20
ja case.0x43be1a.58
jmp dword [ecx*4 + 0x469bb4]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x118], 0x46a6f9
mov dword [esp + 0x11c], 0x46a6fb
movsd xmm0, qword [esp + 0x118]
jmp 0x43ceb8
movsx ecx, byte [eax + 1]
cmp ecx, 0x4f
je 0x43c432
cmp ecx, 0x71
je 0x43c45c
cmp ecx, 0x6f
jne case.0x43be1a.58
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x110], 0x46a6fc
mov dword [esp + 0x114], 0x46a6fd
movsd xmm0, qword [esp + 0x110]
jmp 0x43ceb8
movzx ecx, byte [eax + 1]
cmp cl, 0x70
jne 0x43c308
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.0043d970
movsx ecx, byte [eax + 1]
cmp ecx, 0x74
je 0x43c333
cmp ecx, 0x65
jne case.0x43be1a.58
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xf8], 0x46a704
mov dword [esp + 0xfc], 0x46a706
movsd xmm0, qword [esp + 0xf8]
jmp 0x43ceb8
movsx edx, byte [eax + 1]
cmp edx, 0x6c
je 0x43c35d
cmp edx, 0x78
jne case.0x43be1a.58
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0x14], eax
test eax, eax
je 0x43cfd1
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43edc0
jmp 0x43cfca
movsx ecx, byte [eax + 1]
add ecx, 0xffffffad
cmp ecx, 0x21
ja case.0x43be1a.58
jmp dword [ecx*4 + 0x469b2c]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xd8], 0x46a70f
mov dword [esp + 0xdc], 0x46a712
movsd xmm0, qword [esp + 0xd8]
jmp 0x43ceb8
movsx edx, byte [eax + 1]
add edx, 0xffffffb7
cmp edx, 0x24
ja case.0x43be1a.58
jmp dword [edx*4 + 0x469a98]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xc0], 0x46a717
mov dword [esp + 0xc4], 0x46a719
movsd xmm0, qword [esp + 0xc0]
jmp 0x43ceb8
movsx ecx, byte [eax + 1]
add ecx, 0xffffff9f
cmp ecx, 0x17
ja case.0x43be1a.58
jmp dword [ecx*4 + 0x469a38]
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x43f1b0
movsx ecx, byte [eax + 1]
add ecx, 0xffffffae
cmp ecx, 0x20
ja case.0x43be1a.58
jmp dword [ecx*4 + 0x4699b4]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x78], 0x46a735
mov dword [esp + 0x7c], 0x46a737
movsd xmm0, qword [esp + 0x78]
jmp 0x43ceb8
movsx edx, byte [eax + 1]
add edx, 0xffffffb4
cmp edx, 0x28
ja case.0x43be1a.58
jmp dword [edx*4 + 0x469910]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x60], 0x46a73e
mov dword [esp + 0x64], 0x46a740
movsd xmm0, qword [esp + 0x60]
jmp 0x43ceb8
cmp byte [eax + 1], 0x75
jne case.0x43be1a.58
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0x14], eax
test eax, eax
je 0x43cfd1
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0x2c], eax
test eax, eax
je 0x43cfd1
lea eax, [esp + 0x2c]
mov dword [esp + 4], eax
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43f610
jmp 0x43cfca
movsx ecx, byte [eax + 1]
add ecx, 0xffffffb3
cmp ecx, 0x26
ja case.0x43be1a.58
jmp dword [ecx*4 + 0x469874]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x40], 0x46a75a
mov dword [esp + 0x44], 0x46a75c
movsd xmm0, qword [esp + 0x40]
jmp 0x43ceb8
movsx edx, byte [eax + 1]
add edx, 0xffffffb0
cmp edx, 0x2a
ja case.0x43be1a.58
jmp dword [edx*4 + 0x4697c8]
add eax, 2
mov dword [ebp], eax
mov edx, dword [ebp + 0xc]
sub edx, dword [ebp + 8]
sar edx, 2
mov dword [esp + 0x20], edx
lea edx, [ebp + 0x14]
mov dword [esp + 0x24], ebp
jmp 0x43c22d
mov edx, ebx
lea ecx, [esi + 4]
mov dword [ebp + 0xc], ecx
mov dword [esi], eax
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
cmp eax, ecx
je 0x43c23a
cmp byte [eax], 0x45
je 0x43cef3
mov ebx, edx
mov ecx, ebp
call fcn.00439760
test eax, eax
je case.0x43be1a.58
mov esi, dword [ebp + 0xc]
cmp esi, dword [ebp + 0x10]
jne 0x43c21d
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 8]
mov edi, esi
sub edi, eax
lea ecx, [edi + edi]
cmp eax, ebx
je 0x43c285
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ebp, eax
mov ecx, dword [esp + 0x24]
mov dword [ecx + 8], eax
test eax, eax
mov edx, ebx
jne 0x43c2b6
jmp 0x43cfd8
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x43cfd8
mov ebp, eax
mov edx, ebx
cmp esi, ebx
je 0x43c2af
mov dword [esp + 8], edi
mov dword [esp + 4], edx
mov dword [esp], ebp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov edx, ebx
mov ecx, dword [esp + 0x24]
mov dword [ecx + 8], ebp
mov eax, edi
sar eax, 2
sar edi, 1
lea esi, [eax*4]
add esi, ebp
lea eax, [edi*4]
add eax, ebp
mov dword [ecx + 0x10], eax
mov ebp, ecx
xor edi, edi
mov eax, dword [esp + 0x1c]
jmp 0x43c21f
movsx ecx, byte [eax + 1]
add ecx, 0xffffff9b
cmp ecx, 0x12
ja case.0x43be1a.58
jmp dword [ecx*4 + 0x46977c]
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
jmp 0x43c81e
cmp cl, 0x4c
jne 0x43c322
cmp edx, 3
jb 0x43c322
movsx eax, byte [eax + 2]
add eax, 0xffffffd0
cmp eax, 9
jbe 0x43bf86
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x43db60
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xf0], 0x46a707
mov dword [esp + 0xf4], 0x46a708
movsd xmm0, qword [esp + 0xf0]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov edx, dword [ebp + 0xc]
sub edx, dword [ebp + 8]
sar edx, 2
mov dword [esp + 0x20], edx
lea edx, [ebp + 0x14]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], ebp
jmp 0x43c3c6
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ecx, ebp
mov ebp, eax
mov dword [ecx + 8], eax
test eax, eax
je 0x43cfd8
mov eax, esi
sar eax, 2
sar esi, 1
lea edi, [eax*4]
add edi, ebp
lea eax, [esi*4]
add eax, ebp
mov dword [ecx + 0x10], eax
mov ebp, ecx
lea eax, [edi + 4]
mov dword [ebp + 0xc], eax
mov dword [edi], ebx
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
xor edi, edi
cmp eax, ecx
je 0x43c3d3
cmp byte [eax], 0x45
je 0x43caf8
mov ecx, ebp
call 0x43ee40
test eax, eax
je case.0x43be1a.58
mov ebx, eax
mov edi, dword [ebp + 0xc]
cmp edi, dword [ebp + 0x10]
jne 0x43c3b6
mov eax, dword [ebp + 8]
mov esi, edi
sub esi, eax
lea ecx, [esi + esi]
cmp eax, dword [esp + 0x1c]
jne 0x43c37d
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x43cfd8
mov ebp, eax
mov eax, dword [esp + 0x1c]
cmp edi, eax
je 0x43c426
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ebp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov ecx, dword [esp + 0x24]
mov dword [ecx + 8], ebp
jmp 0x43c398
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x108], 0x46a6fe
mov dword [esp + 0x10c], 0x46a700
movsd xmm0, qword [esp + 0x108]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x100], 0x46a701
mov dword [esp + 0x104], 0x46a703
movsd xmm0, qword [esp + 0x100]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xe8], 0x46a709
mov dword [esp + 0xec], 0x46a70b
movsd xmm0, qword [esp + 0xe8]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xe0], 0x46a70c
mov dword [esp + 0xe4], 0x46a70e
movsd xmm0, qword [esp + 0xe0]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xd0], 0x46a713
mov dword [esp + 0xd4], 0x46a714
movsd xmm0, qword [esp + 0xd0]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x88], 0x46a730
mov dword [esp + 0x8c], 0x46a732
movsd xmm0, qword [esp + 0x88]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x80], 0x46a733
mov dword [esp + 0x84], 0x46a734
movsd xmm0, qword [esp + 0x80]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0x14], eax
xor edi, edi
test eax, eax
je case.0x43be1a.58
mov eax, dword [ebp + 0xc]
sub eax, dword [ebp + 8]
sar eax, 2
mov dword [esp + 0x28], eax
lea esi, [ebp + 0x14]
mov dword [esp + 0x20], esi
jmp 0x43c5d0
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ebp, eax
mov dword [esi + 8], eax
test eax, eax
je 0x43cfd8
mov ecx, dword [esp + 0x1c]
mov eax, ecx
sar eax, 2
sar ecx, 1
lea edi, [eax*4]
add edi, ebp
lea eax, [ecx*4]
add eax, ebp
mov dword [esi + 0x10], eax
mov ebp, esi
mov esi, dword [esp + 0x20]
lea eax, [edi + 4]
mov dword [ebp + 0xc], eax
mov dword [edi], ebx
mov eax, dword [ebp]
cmp eax, dword [ebp + 4]
je 0x43c5e1
cmp byte [eax], 0x45
je 0x43cf32
mov ecx, ebp
call fcn.0043bdc0
test eax, eax
je 0x43cfd1
mov ebx, eax
mov edi, dword [ebp + 0xc]
cmp edi, dword [ebp + 0x10]
jne 0x43c5c8
mov eax, dword [ebp + 8]
mov ecx, edi
sub ecx, eax
mov dword [esp + 0x1c], ecx
add ecx, ecx
cmp eax, esi
mov esi, ebp
jne 0x43c589
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x43cfd8
mov ebp, eax
mov eax, dword [esp + 0x20]
cmp edi, eax
je 0x43c63f
mov ecx, dword [esp + 0x1c]
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], ebp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov dword [esi + 8], ebp
jmp 0x43c5a2
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x138], 0x46a6df
mov dword [esp + 0x13c], 0x46a6e0
movsd xmm0, qword [esp + 0x138]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x130], 0x46a6e1
mov dword [esp + 0x134], 0x46a6e2
movsd xmm0, qword [esp + 0x130]
jmp 0x43cdb7
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.0043e310
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xb0], 0x46a71a
mov dword [esp + 0xb4], 0x46a71c
movsd xmm0, qword [esp + 0xb0]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xc8], 0x46a715
mov dword [esp + 0xcc], 0x46a716
movsd xmm0, qword [esp + 0xc8]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xb8], 0x46a6f0
mov dword [esp + 0xbc], 0x46a6f1
movsd xmm0, qword [esp + 0xb8]
jmp 0x43ceb8
lea edx, [eax + 2]
mov dword [ebp], edx
cmp edx, ecx
je 0x43cd0d
cmp byte [edx], 0x5f
jne 0x43cd0d
add eax, 3
mov dword [ebp], eax
mov dword [esp + 0xa8], 0x46a71d
mov dword [esp + 0xac], 0x46a71f
movsd xmm0, qword [esp + 0xa8]
jmp 0x43cdb7
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x30], 0x46a760
mov dword [esp + 0x34], 0x46a763
movsd xmm0, qword [esp + 0x30]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00437930
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0x14], eax
test eax, eax
je 0x43cfd1
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43f6a0
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x48], 0x46a758
mov dword [esp + 0x4c], 0x46a759
movsd xmm0, qword [esp + 0x48]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x38], 0x46a75d
mov dword [esp + 0x3c], 0x46a75f
movsd xmm0, qword [esp + 0x38]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00437930
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
lea eax, [esp + 0xc]
mov dword [esp], eax
mov ecx, ebp
mov edx, str.typeid__
call fcn.0043f840
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00437930
mov dword [esp + 0x14], eax
xor edi, edi
test eax, eax
je case.0x43be1a.58
mov eax, dword [ebp + 0xc]
sub eax, dword [ebp + 8]
sar eax, 2
mov dword [esp + 0x20], eax
lea ecx, [ebp + 0x14]
mov dword [esp + 0x24], ebp
jmp 0x43c87d
mov ecx, ebx
lea edx, [esi + 4]
mov dword [ebp + 0xc], edx
mov dword [esi], eax
mov eax, dword [ebp]
cmp eax, dword [ebp + 4]
je 0x43c88e
cmp byte [eax], 0x45
je 0x43cf71
mov ebx, ecx
mov ecx, ebp
call 0x43ee40
test eax, eax
je case.0x43be1a.58
mov esi, dword [ebp + 0xc]
cmp esi, dword [ebp + 0x10]
jne 0x43c873
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 8]
mov edi, esi
sub edi, eax
lea ecx, [edi + edi]
cmp eax, ebx
je 0x43c8d7
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov edx, ebp
mov ebp, eax
mov dword [edx + 8], eax
test eax, eax
mov ecx, ebx
jne 0x43c908
jmp 0x43cfd8
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x43cfd8
mov ebp, eax
mov ecx, ebx
cmp esi, ebx
je 0x43c901
mov dword [esp + 8], edi
mov dword [esp + 4], ecx
mov dword [esp], ebp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov ecx, ebx
mov edx, dword [esp + 0x24]
mov dword [edx + 8], ebp
mov eax, edi
sar eax, 2
sar edi, 1
lea esi, [eax*4]
add esi, ebp
lea eax, [edi*4]
add eax, ebp
mov dword [edx + 0x10], eax
mov ebp, edx
xor edi, edi
mov eax, dword [esp + 0x1c]
jmp 0x43c875
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
mov edx, 0x46a78e
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x43fb10
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.0043fba0
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xa0], 0x46a720
mov dword [esp + 0xa4], 0x46a722
movsd xmm0, qword [esp + 0xa0]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x98], 0x46a715
mov dword [esp + 0x9c], 0x46a716
movsd xmm0, qword [esp + 0x98]
jmp 0x43cdb7
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x90], 0x46a723
mov dword [esp + 0x94], 0x46a724
movsd xmm0, qword [esp + 0x90]
jmp 0x43cdb7
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43f570
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x68], 0x46a73c
mov dword [esp + 0x6c], 0x46a73d
movsd xmm0, qword [esp + 0x68]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x70], 0x46a738
mov dword [esp + 0x74], 0x46a73b
movsd xmm0, qword [esp + 0x70]
jmp 0x43ceb8
lea edx, [eax + 2]
mov dword [ebp], edx
cmp edx, ecx
je 0x43cec9
cmp byte [edx], 0x5f
jne 0x43cec9
add eax, 3
mov dword [ebp], eax
mov dword [esp + 0x58], 0x46a741
mov dword [esp + 0x5c], 0x46a743
movsd xmm0, qword [esp + 0x58]
jmp 0x43cdb7
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x50], 0x46a73c
mov dword [esp + 0x54], 0x46a73d
movsd xmm0, qword [esp + 0x50]
jmp 0x43cdb7
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0x14], eax
test eax, eax
je 0x43cfd1
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp], 0x46a744
jmp 0x43ce40
inc eax
mov dword [ebp], eax
mov esi, dword [esp + 0x20]
shl esi, 2
mov edx, dword [ebp + 8]
add edx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov ecx, ebp
call fcn.00441820
add esi, dword [ebp + 8]
mov dword [ebp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43f080
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x140], 0x46a6c8
mov dword [esp + 0x144], 0x46a6c9
movsd xmm0, qword [esp + 0x140]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x160], 0x46a6c0
mov dword [esp + 0x164], 0x46a6c2
movsd xmm0, qword [esp + 0x160]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x158], 0x46a6c3
mov dword [esp + 0x15c], 0x46a6c4
movsd xmm0, qword [esp + 0x158]
jmp 0x43cdb7
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x150], 0x46a6c3
mov dword [esp + 0x154], 0x46a6c4
movsd xmm0, qword [esp + 0x150]
jmp 0x43ceb8
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00437930
jmp 0x43cbf7
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
lea eax, [esp + 0xc]
mov dword [esp], eax
mov ecx, ebp
mov edx, str.alignof__
call 0x43cfe0
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
cmp ecx, eax
je case.0x43be1a.58
movzx eax, byte [eax]
cmp eax, 0x66
je 0x43cfb0
cmp eax, 0x54
jne case.0x43be1a.58
mov ecx, ebp
call fcn.0043acb0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.0043f8e0
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00437930
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0x14], eax
test eax, eax
je 0x43cfd1
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43f730
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.0043f7c0
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00437930
jmp 0x43cce9
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
lea eax, [esp + 0xc]
mov dword [esp], eax
mov ecx, ebp
mov edx, str.sizeof__
call fcn.0043f840
jmp 0x43cfca
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov dword [esp], 0x46a71d
jmp 0x43cee3
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov byte [esp + 0x14], 1
jmp 0x43cde6
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00437930
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0x14], eax
test eax, eax
je 0x43cfd1
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.0043e710
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x128], 0x46a6f0
mov dword [esp + 0x12c], 0x46a6f1
movsd xmm0, qword [esp + 0x128]
movsd qword [esp], xmm0
mov ecx, ebp
call fcn.0043e150
jmp 0x43bdde
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov byte [esp + 0x14], 0
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
lea eax, [esp + 0x1b]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.0043e680
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0x14], eax
test eax, eax
je 0x43cfd1
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp], 0x46a6f2
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43ec90
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0x14], eax
test eax, eax
je 0x43cfd1
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43ed30
jmp 0x43cfca
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x120], 0x46a6f7
mov dword [esp + 0x124], 0x46a6f8
movsd xmm0, qword [esp + 0x120]
movsd qword [esp], xmm0
mov ecx, ebp
call fcn.0043e0a0
jmp 0x43bdde
mov ecx, ebp
call fcn.0043bdc0
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
mov dword [esp], 0x46a741
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x43f110
jmp 0x43cfca
inc eax
mov dword [ebp], eax
mov esi, dword [esp + 0x20]
shl esi, 2
mov edx, dword [ebp + 8]
add edx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov ecx, ebp
call fcn.00441820
add esi, dword [ebp + 8]
mov dword [ebp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.0043fa00
mov dword [esp + 0xc], eax
jmp 0x43cfbf
inc eax
mov dword [ebp], eax
mov esi, dword [esp + 0x28]
shl esi, 2
mov edx, dword [ebp + 8]
add edx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov ecx, ebp
call fcn.00441820
add esi, dword [ebp + 8]
mov dword [ebp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
mov dword [esp], eax
lea edx, [esp + 0x14]
mov ecx, ebp
call fcn.0043e280
jmp 0x43cfca
inc eax
mov dword [ebp], eax
mov esi, dword [esp + 0x20]
shl esi, 2
mov edx, dword [ebp + 8]
add edx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov ecx, ebp
call fcn.00441820
add esi, dword [ebp + 8]
mov dword [ebp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
mov dword [esp], eax
lea edx, [esp + 0x14]
mov ecx, ebp
call fcn.0043fa80
jmp 0x43cfca
mov ecx, ebp
call fcn.0043d970
mov dword [esp + 0xc], eax
test eax, eax
je 0x43cfd1
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.0043f960
mov edi, eax
jmp case.0x43be1a.58
xor edi, edi
jmp case.0x43be1a.58
call fcn.0041cc20
nop dword [eax]
push ebp
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43d022
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43d07a
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ebx, dword [edi + 0x116c]
mov ebp, dword [ebx + 4]
lea edi, [ebx + ebp]
add edi, 0xffffffe8
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
add eax, esi
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov dword [ebx + ebp - 0x14], 0x101012f
mov dword [ebx + ebp - 0x18], 0x46b5a8
mov dword [ebx + ebp - 0x10], esi
mov dword [ebx + ebp - 0xc], eax
mov dword [ebx + ebp - 8], ecx
mov dword [ebx + ebp - 4], 0x46a6be
mov dword [ebx + ebp], 0x46a6bf
mov eax, edi
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041cc20
nop
push ebp
push ebx
push edi
push esi
push eax
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, ecx
sub edx, eax
cmp edx, 3
jae 0x43e7cc
cmp edx, 2
je 0x43e88d
mov ecx, esi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
jmp 0x441ce0
movzx edx, byte [eax]
cmp dl, 0x73
jne 0x43e890
cmp byte [eax + 1], 0x72
jne 0x43e88d
cmp byte [eax + 2], 0x4e
jne 0x43e88d
add eax, 3
mov dword [esi], eax
mov ecx, esi
call fcn.00441af0
test eax, eax
je 0x43ec62
mov edi, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x43ebeb
cmp byte [eax], 0x49
jne 0x43ebeb
xor ebp, ebp
mov ecx, esi
xor edx, edx
call fcn.0043a5f0
test eax, eax
je 0x43ec64
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43e869
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43ec87
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x46bde4
jmp 0x43ebde
movzx edx, byte [eax]
cmp dl, 0x67
jne 0x43e8b0
cmp byte [eax + 1], 0x73
jne 0x43e8bd
add eax, 2
mov dword [esi], eax
mov edx, ecx
sub edx, eax
mov bl, 1
cmp edx, 2
jae 0x43e8b2
jmp 0x43ea31
xor ebx, ebx
cmp byte [eax], 0x73
jne 0x43ea31
jmp 0x43e8c8
xor ebx, ebx
cmp byte [eax], 0x73
jne 0x43ea31
cmp byte [eax + 1], 0x72
jne 0x43ea31
add eax, 2
mov dword [esi], eax
cmp ecx, eax
je 0x43eab5
movsx eax, byte [eax]
add eax, 0xffffffd0
cmp eax, 9
ja 0x43eab5
mov dword [esp], ebx
mov ecx, esi
call 0x441c30
test eax, eax
je 0x43ec62
mov ebx, eax
xor edi, edi
jmp 0x43e923
mov ecx, esi
call 0x441c30
mov ebx, eax
xor ebp, ebp
test eax, eax
je 0x43ec64
test edi, edi
je 0x43e9a0
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43e965
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43ec87
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov ecx, dword [esi + 0x116c]
mov edx, dword [ecx + 4]
lea eax, [ecx + edx]
add eax, 0xfffffff8
mov dword [ecx + edx - 4], 0x1010116
mov dword [ecx + edx - 8], 0x46ae84
mov dword [ecx + edx], edi
add ecx, edx
add ecx, 4
jmp 0x43ea10
cmp byte [esp], 0
je 0x43ea2d
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43e9e8
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43ec87
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
add ecx, 0x10
mov dword [edi + 4], ecx
mov edx, dword [esi + 0x116c]
mov edi, dword [edx + 4]
lea ecx, [edx + edi]
lea eax, [edx + edi]
add eax, 0xfffffff8
mov dword [edx + edi - 4], 0x1010121
mov dword [edx + edi - 8], 0x46b238
mov dword [ecx], ebx
mov edi, eax
mov eax, dword [esi]
cmp eax, dword [esi + 4]
je 0x43e910
cmp byte [eax], 0x45
jne 0x43e910
jmp 0x43eb5b
mov edi, ebx
jmp 0x43ea14
mov ecx, esi
call 0x441ce0
mov ebp, eax
test bl, bl
je 0x43ec64
test ebp, ebp
je 0x43ec64
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43ea88
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43ec87
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
add ecx, 0x10
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010121
mov dword [eax + ecx - 8], 0x46b238
mov dword [eax + ecx], ebp
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
jmp 0x43ec64
mov ecx, esi
call fcn.00441af0
test eax, eax
je 0x43ec62
mov edi, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x43eb5e
cmp byte [eax], 0x49
jne 0x43eb5e
xor ebp, ebp
mov ecx, esi
xor edx, edx
call fcn.0043a5f0
test eax, eax
je 0x43ec64
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43eb2d
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43ec87
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x46bde4
mov dword [eax + ecx], edi
lea edi, [eax + ecx]
add edi, 0xfffffff8
mov dword [eax + ecx + 4], ebx
jmp 0x43eb5e
inc eax
mov dword [esi], eax
mov ecx, esi
call 0x441ce0
test eax, eax
je 0x43ec62
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43ebad
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43ec87
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
mov dword [eax + ecx - 4], 0x1010116
mov dword [eax + ecx - 8], 0x46ae84
mov dword [eax + ecx], edi
mov dword [eax + ecx + 4], ebx
jmp 0x43ec64
mov dword [eax + ecx], edi
lea edi, [eax + ecx]
add edi, 0xfffffff8
mov dword [eax + ecx + 4], ebx
mov eax, dword [esi]
cmp eax, dword [esi + 4]
je 0x43ebf7
cmp byte [eax], 0x45
je 0x43ec6e
mov ecx, esi
call 0x441c30
test eax, eax
je 0x43ec62
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43ec3e
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43ec87
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010116
mov dword [eax + ecx - 8], 0x46ae84
jmp 0x43ebde
xor ebp, ebp
mov eax, ebp
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
inc eax
mov dword [esi], eax
mov ecx, esi
call 0x441ce0
mov ebp, 0
test eax, eax
jne 0x43eb6d
jmp 0x43ec64
call fcn.0041cc20
nop dword [eax]
push ebp
push ebx
push edi
push esi
mov ebp, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43ecd2
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43ed29
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ebx, dword [edi + 0x116c]
mov esi, dword [ebx + 4]
lea edi, [ebx + esi]
add edi, 0xffffffe8
mov ebp, dword [ebp]
push dword [esp + 0x14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edx, dword [esp + 0x14]
add eax, edx
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
mov dword [ebx + esi - 0x14], 0x101012e
mov dword [ebx + esi - 0x18], 0x46b2a8
mov dword [ebx + esi - 0x10], ebp
mov dword [ebx + esi - 0xc], edx
mov dword [ebx + esi - 8], eax
mov dword [ebx + esi - 4], ecx
mov eax, edi
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041cc20
nop
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43ed71
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43edba
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x10]
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xffffffe8
mov esi, dword [esi]
mov edx, dword [edx]
mov dword [ecx + edi - 0x14], 0x101012e
mov dword [ecx + edi - 0x18], 0x46b2a8
mov dword [ecx + edi - 0x10], esi
mov dword [ecx + edi - 0xc], 0x46a6f5
mov dword [ecx + edi - 8], 0x46a6f6
mov dword [ecx + edi - 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.0041cc20
nop
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x43ee01
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43ee39
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x10]
add ecx, 0x10
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xfffffff8
mov esi, dword [esi]
mov edx, dword [edx]
mov dword [ecx + edi - 4], 0x101012b
mov dword [ecx + edi - 8], 0x46b310
mov dword [ecx + edi], esi
mov dword [ecx + edi + 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.0041cc20
nop
push ebp
push ebx
push edi
push esi
push eax
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
sub ecx, eax
je 0x43ef23
cmp byte [eax], 0x64
jne 0x43ef23
cmp ecx, 2
jb 0x43ef23
movsx ecx, byte [eax + 1]
cmp ecx, 0x58
je 0x43ef31
cmp ecx, 0x78
je 0x43efe4
cmp ecx, 0x69
jne 0x43ef23
add eax, 2
mov dword [esi], eax
mov ecx, esi
call fcn.00441e80
xor edi, edi
test eax, eax
je 0x43f071
mov ebx, eax
mov ecx, esi
call 0x43ee40
test eax, eax
je 0x43f071
mov ebp, eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43eeec
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f07b
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea edi, [eax + ecx]
add edi, 0xffffffe8
mov dword [eax + ecx - 0x14], 0x1010141
mov dword [eax + ecx - 0x18], 0x46b380
mov dword [eax + ecx - 0x10], ebx
mov dword [eax + ecx - 0xc], ebp
mov byte [eax + ecx - 8], 0
jmp 0x43f071
mov ecx, esi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.0043bdc0
add eax, 2
mov dword [esi], eax
mov ecx, esi
call fcn.0043bdc0
xor edi, edi
test eax, eax
je 0x43f071
mov ebx, eax
mov ecx, esi
call fcn.0043bdc0
test eax, eax
je 0x43f071
mov ebp, eax
mov ecx, esi
call 0x43ee40
test eax, eax
je 0x43f071
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea edx, [ecx - 0xfd8]
cmp edx, 0xfffff007
ja 0x43efae
mov dword [esp], eax
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f07b
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
mov eax, dword [esp]
add ecx, 0x20
mov dword [edi + 4], ecx
mov edx, dword [esi + 0x116c]
mov ecx, dword [edx + 4]
lea edi, [edx + ecx]
add edi, 0xffffffe8
mov dword [edx + ecx - 0x14], 0x1010142
mov dword [edx + ecx - 0x18], 0x46b3ec
mov dword [edx + ecx - 0x10], ebx
mov dword [edx + ecx - 0xc], ebp
mov dword [edx + ecx - 8], eax
jmp 0x43f071
add eax, 2
mov dword [esi], eax
mov ecx, esi
call fcn.0043bdc0
xor edi, edi
test eax, eax
je 0x43f071
mov ebx, eax
mov ecx, esi
call 0x43ee40
test eax, eax
je 0x43f071
mov ebp, eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f03f
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f07b
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea edi, [eax + ecx]
add edi, 0xffffffe8
mov dword [eax + ecx - 0x14], 0x1010141
mov dword [eax + ecx - 0x18], 0x46b380
mov dword [eax + ecx - 0x10], ebx
mov dword [eax + ecx - 0xc], ebp
mov byte [eax + ecx - 8], 1
mov eax, edi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041cc20
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f0c1
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f0ff
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edx, dword [ecx + 4]
lea eax, [ecx + edx]
add eax, 0xffffffe8
mov edi, dword [esi]
mov esi, dword [esi + 4]
mov dword [ecx + edx - 0x14], 0x1010138
mov dword [ecx + edx - 0x18], 0x46b460
mov dword [ecx + edx - 0x10], 0
mov dword [ecx + edx - 0xc], edi
mov dword [ecx + edx - 8], esi
pop esi
pop edi
pop ebx
ret
call fcn.0041cc20
nop word cs:[eax + eax]
push ebp
push ebx
push edi
push esi
mov ebp, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f152
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f19f
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ebx, dword [edi + 0x116c]
mov esi, dword [ebx + 4]
lea edi, [ebx + esi]
add edi, 0xffffffe8
mov ebp, dword [ebp]
push dword [esp + 0x14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ecx, dword [esp + 0x14]
add eax, ecx
mov dword [ebx + esi - 0x14], 0x101012c
mov dword [ebx + esi - 0x18], 0x46b4cc
mov dword [ebx + esi - 0x10], ebp
mov dword [ebx + esi - 0xc], ecx
mov dword [ebx + esi - 8], eax
mov eax, edi
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041cc20
nop word cs:[eax + eax]
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov ebx, ecx
mov ecx, dword [ecx]
mov edx, dword [ebx + 4]
mov esi, edx
sub esi, ecx
xor eax, eax
cmp esi, 2
jb 0x43f4ac
cmp byte [ecx], 0x67
jne 0x43f1f7
xor eax, eax
cmp byte [ecx + 1], 0x73
jne 0x43f1f7
add ecx, 2
mov dword [ebx], ecx
mov esi, edx
sub esi, ecx
mov edi, ebx
mov bl, 1
mov dword [esp + 8], ebx
mov ebx, edi
cmp esi, 2
jae 0x43f1ff
jmp 0x43f4ac
mov dword [esp + 8], 0
cmp byte [ecx + 1], 0x61
sete al
cmp byte [ecx], 0x6e
jne 0x43f4aa
cmp byte [ecx + 1], 0x77
je 0x43f228
cmp byte [ecx], 0x6e
jne 0x43f4aa
cmp byte [ecx + 1], 0x61
jne 0x43f4aa
mov byte [esp + 3], al
add ecx, 2
mov dword [ebx], ecx
mov eax, dword [ebx + 0xc]
sub eax, dword [ebx + 8]
sar eax, 2
mov dword [esp + 0xc], eax
lea eax, [ebx + 0x14]
mov dword [esp + 4], eax
mov dword [esp + 0x10], ebx
jmp 0x43f289
push ecx
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ecx, ebx
add esp, 8
mov ebx, eax
mov dword [ecx + 8], eax
test eax, eax
je 0x43f562
mov eax, esi
sar eax, 2
sar esi, 1
lea ebp, [ebx + eax*4]
lea eax, [ebx + esi*4]
mov dword [ecx + 0x10], eax
mov ebx, ecx
lea eax, [ebp + 4]
mov dword [ebx + 0xc], eax
mov dword [ebp], edi
mov ecx, dword [ebx]
mov edx, dword [ebx + 4]
cmp ecx, edx
je 0x43f292
cmp byte [ecx], 0x5f
je 0x43f2ed
mov ecx, ebx
call fcn.0043bdc0
test eax, eax
je 0x43f4aa
mov edi, eax
mov ebp, dword [ebx + 0xc]
cmp ebp, dword [ebx + 0x10]
jne 0x43f27b
mov eax, dword [ebx + 8]
mov esi, ebp
sub esi, eax
lea ecx, [esi + esi]
cmp eax, dword [esp + 4]
jne 0x43f250
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f562
mov ebx, eax
mov eax, dword [esp + 4]
cmp ebp, eax
je 0x43f2e1
push esi
push eax
push ebx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0x10]
mov dword [ecx + 8], ebx
jmp 0x43f269
inc ecx
mov dword [ebx], ecx
mov esi, dword [esp + 0xc]
shl esi, 2
mov edx, dword [ebx + 8]
add edx, esi
mov ecx, ebx
push dword [ebx + 0xc]
call fcn.00441820
add esp, 4
mov edi, eax
mov ebp, edx
add esi, dword [ebx + 8]
mov dword [ebx + 0xc], esi
mov ecx, ebx
call fcn.00437930
test eax, eax
je 0x43f4aa
mov dword [esp + 0xc], eax
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov edx, eax
sub edx, ecx
cmp edx, 2
jb 0x43f35e
cmp byte [ecx], 0x70
jne 0x43f35e
cmp byte [ecx + 1], 0x69
jne 0x43f35e
mov dword [esp + 0x14], edi
add ecx, 2
mov dword [ebx], ecx
mov edx, dword [ebx + 0xc]
sub edx, dword [ebx + 8]
sar edx, 2
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], ebp
jmp 0x43f449
cmp ecx, eax
je 0x43f4aa
cmp byte [ecx], 0x45
mov eax, 0
jne 0x43f4ac
inc ecx
mov dword [ebx], ecx
mov esi, dword [ebx + 0x116c]
mov ecx, dword [esi + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f3b5
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f562
mov dword [eax], esi
mov dword [eax + 4], 0
mov dword [ebx + 0x116c], eax
xor ecx, ecx
mov esi, eax
add ecx, 0x20
mov dword [esi + 4], ecx
mov ecx, dword [ebx + 0x116c]
mov edx, dword [ecx + 4]
lea eax, [ecx + edx]
add eax, 0xffffffe8
mov dword [ecx + edx - 0x14], 0x1010133
mov dword [ecx + edx - 0x18], 0x46b534
mov dword [ecx + edx - 0xc], ebp
mov dword [ecx + edx - 0x10], edi
mov esi, dword [esp + 0xc]
mov dword [ecx + edx - 8], esi
mov dword [ecx + edx - 4], 0
mov dword [ecx + edx], 0
mov edx, dword [esp + 8]
mov byte [eax + 0x1c], dl
movzx ecx, byte [esp + 3]
mov byte [eax + 0x1d], cl
jmp 0x43f4ac
push ecx
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ecx, ebx
add esp, 8
mov ebx, eax
mov dword [ecx + 8], eax
test eax, eax
je 0x43f562
mov eax, ebp
sar eax, 2
sar ebp, 1
lea esi, [ebx + eax*4]
lea eax, [ebx + ebp*4]
mov dword [ecx + 0x10], eax
mov ebx, ecx
mov ebp, dword [esp + 0x1c]
lea eax, [esi + 4]
mov dword [ebx + 0xc], eax
mov dword [esi], edi
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
cmp ecx, eax
je 0x43f452
cmp byte [ecx], 0x45
je 0x43f4b4
mov ecx, ebx
call fcn.0043bdc0
test eax, eax
je 0x43f4aa
mov edi, eax
mov esi, dword [ebx + 0xc]
cmp esi, dword [ebx + 0x10]
jne 0x43f43c
mov eax, dword [ebx + 8]
mov ebp, esi
sub ebp, eax
mov ecx, ebp
add ecx, ebp
cmp eax, dword [esp + 4]
jne 0x43f40d
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f562
mov ebx, eax
mov eax, dword [esp + 4]
cmp esi, eax
je 0x43f49e
push ebp
push eax
push ebx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0x10]
mov dword [ecx + 8], ebx
jmp 0x43f426
xor eax, eax
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret
inc ecx
mov dword [ebx], ecx
mov esi, dword [esp + 0x18]
shl esi, 2
mov edx, dword [ebx + 8]
add edx, esi
mov ecx, ebx
push dword [ebx + 0xc]
call fcn.00441820
add esp, 4
mov dword [esp + 4], eax
mov edi, edx
add esi, dword [ebx + 8]
mov dword [ebx + 0xc], esi
mov esi, dword [ebx + 0x116c]
mov ecx, dword [esi + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f516
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f562
mov dword [eax], esi
mov dword [eax + 4], 0
mov dword [ebx + 0x116c], eax
xor ecx, ecx
mov esi, eax
mov edx, dword [esp + 8]
add ecx, 0x20
mov dword [esi + 4], ecx
mov eax, dword [ebx + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x1010133
mov dword [eax + ecx - 0x18], 0x46b534
mov dword [eax + ecx - 0xc], ebp
mov esi, dword [esp + 0x14]
mov dword [eax + ecx - 0x10], esi
mov esi, dword [esp + 0xc]
mov dword [eax + ecx - 8], esi
mov dword [eax + ecx], edi
mov esi, dword [esp + 4]
mov dword [eax + ecx - 4], esi
add eax, ecx
add eax, 0xffffffe8
jmp 0x43f3fd
call fcn.0041cc20
nop word [eax + eax]
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f5b1
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f5ff
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edx, dword [ecx + 4]
lea eax, [ecx + edx]
add eax, 0xffffffe8
mov esi, dword [esi]
mov dword [ecx + edx - 0x14], 0x101012f
mov dword [ecx + edx - 0x18], 0x46b5a8
mov dword [ecx + edx - 0x10], 0x46a725
mov dword [ecx + edx - 0xc], 0x46a72f
mov dword [ecx + edx - 8], esi
mov dword [ecx + edx - 4], 0x46a6be
mov dword [ecx + edx], 0x46a6bf
pop esi
pop edi
pop ebx
ret
call fcn.0041cc20
nop word cs:[eax + eax]
push ebp
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f652
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f697
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xffffffe8
mov esi, dword [esi]
mov ebx, dword [ebp]
mov edx, dword [edx]
mov dword [ecx + edi - 0x14], 0x101012d
mov dword [ecx + edi - 0x18], 0x46b614
mov dword [ecx + edi - 0x10], esi
mov dword [ecx + edi - 0xc], ebx
mov dword [ecx + edi - 8], edx
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041cc20
nop dword [eax]
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f6e1
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f72a
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x10]
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xffffffe8
mov esi, dword [esi]
mov edx, dword [edx]
mov dword [ecx + edi - 0x14], 0x1010130
mov dword [ecx + edi - 0x18], 0x46acc4
mov dword [ecx + edi - 0x10], 0x46a747
mov dword [ecx + edi - 0xc], 0x46a757
mov dword [ecx + edi - 8], esi
mov dword [ecx + edi - 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.0041cc20
nop
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x43f771
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x43f7ba
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x10]
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xffffffe8
mov esi, dword [esi]
mov edx, dword [edx]
mov dword [ecx + edi - 0x14], 0x1010130
mov dword [ecx + edi - 0x18], 0x46acc4
mov dword [ecx + edi - 0x10], 0x46a764
mov dword [ecx + edi - 0xc], 0x46a76f
mov dword [ecx + edi - 8], esi
mov dword [ecx + edi - 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.0041cc20
nop
push ebp
push ebx
push edi
push esi
mov edi, ecx
call fcn.00441e80
test eax, eax
je 0x441cce
mov esi, eax
mov eax, dword [edi]
cmp dword [edi + 4], eax
je 0x441cca
cmp byte [eax], 0x49
jne 0x441cca
xor ebp, ebp
mov ecx, edi
xor edx, edx
call fcn.0043a5f0
test eax, eax
je 0x441cd0
mov ebx, eax
mov ebp, dword [edi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x441c9c
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x441cd7
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [edi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x46bde4
mov dword [eax + ecx], esi
mov dword [eax + ecx + 4], ebx
jmp 0x441cd0
mov ebp, esi
jmp 0x441cd0
xor ebp, ebp
mov eax, ebp
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0041cc20
nop dword [eax]
push ebp
push ebx
push edi
push esi
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, ecx
sub edx, eax
je 0x441d07
movsx edi, byte [eax]
add edi, 0xffffffd0
cmp edi, 9
ja 0x441d07
mov ecx, esi
pop esi
pop edi
pop ebx
pop ebp
jmp 0x441c30
cmp edx, 2
jb 0x441d55
movzx edx, byte [eax]
cmp dl, 0x64
jne 0x441d45
cmp byte [eax + 1], 0x6e
jne 0x441d42
add eax, 2
mov dword [esi], eax
cmp ecx, eax
je 0x441e00
movsx eax, byte [eax]
add eax, 0xffffffd0
cmp eax, 9
ja 0x441e00
mov ecx, esi
call 0x441c30
jmp 0x441e07
movzx edx, byte [eax]
cmp dl, 0x6f
jne 0x441d55
cmp byte [eax + 1], 0x6e
jne 0x441d55
add eax, 2
mov dword [esi], eax
xor ebp, ebp
mov ecx, esi
xor edx, edx
call fcn.00442150
test eax, eax
je 0x441df9
mov edi, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x441df7
cmp byte [eax], 0x49
jne 0x441df7
xor ebp, ebp
mov ecx, esi
xor edx, edx
call fcn.0043a5f0
test eax, eax
je 0x441df9
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x441dc9
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x441e75
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x46bde4
mov dword [eax + ecx], edi
mov dword [eax + ecx + 4], ebx
jmp 0x441df9
mov ebp, edi
mov eax, ebp
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, esi
call fcn.00441af0
mov edi, eax
test eax, eax
je 0x441e71
mov ebx, dword [esi + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x441e47
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x441e75
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x10
mov dword [ebx + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
mov dword [eax + ecx - 4], 0x1010126
mov dword [eax + ecx - 8], 0x46aef0
mov dword [eax + ecx], edi
jmp 0x441df9
xor ebp, ebp
jmp 0x441df9
call fcn.0041cc20
nop word [eax + eax]