Function at 0x4340b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x128
mov ebx, dword [ecx]
mov ebp, ecx
mov dword [esp + 0xc], edx
cmp dword [ebx + 0xf8], 0x80000000
jne 0x4340fc
cmp dword [ebx + 0x98], 0x80000000
lea eax, [ebx + 0x9c]
lea edx, [ebx + 0x11c]
lea ecx, [ebx + 0xa0]
lea esi, [ebx + 0x120]
cmovne edx, eax
cmovne esi, ecx
mov eax, dword [edx]
mov ecx, dword [esi]
jmp 0x434108
mov eax, dword [ebx + 0xfc]
mov ecx, dword [ebx + 0x100]
mov edx, dword [ebp + 4]
test ecx, ecx
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], ecx
mov dword [esp + 0xa4], edx
je 0x434207
movsd xmm0, qword [edx + 0x2a]
movsd xmm1, qword [edx + 0x30]
lea edi, [esp + 0x40]
lea ecx, [edx + 0x2a]
mov byte [esp + 0x40], 3
mov byte [esp + 0x44], 3
mov byte [esp + 0x48], 3
mov word [esp + 0x4c], 0
mov edx, edi
movsd qword [esp + 0x76], xmm1
movsd qword [esp + 0x70], xmm0
call fcn.00432310
mov ecx, 0x93d1f8
mov edx, str.e_0m
test al, al
mov dword [esp + 0x80], 0x80e9c4
mov dword [esp + 0x84], 4
mov dword [esp + 0x90], 0
mov dword [esp + 0x88], edi
mov dword [esp + 0x8c], 3
cmovne edx, ecx
xor al, 1
mov ecx, dword [esp + 0xc]
movzx eax, al
mov dword [esp + 0x34], edx
mov edx, 0x80d168
shl eax, 2
mov dword [esp + 0x38], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x114]
mov dword [esp + 0x44], 0x41c4a0
mov dword [esp + 0x48], eax
lea eax, [esp + 0x34]
mov dword [esp + 0x4c], 0x41c480
mov dword [esp + 0x50], eax
lea eax, [esp + 0x80]
mov dword [esp + 0x54], 0x41c480
push eax
call fcn.00464980
mov edx, dword [esp + 0xa8]
add esp, 4
cmp dword [esp + 0x140], 0
mov dword [esp + 0x28], ebx
jne 0x4344b8
mov edi, dword [ebx + 0x48]
imul esi, dword [ebx + 0x4c], 0x134
lea eax, [edx + 0x38]
mov dword [esp + 0x24], ebp
mov dword [esp + 0xa8], eax
add esi, edi
mov dword [esp + 0xac], esi
nop word [eax + eax]
cmp edi, esi
je 0x4344b8
mov eax, edi
add edi, 0x134
mov ecx, dword [eax + 0x120]
test ecx, ecx
jne 0x434263
cmp dword [eax + 0x34], 0x110000
je 0x434240
test ecx, ecx
je 0x4342a0
mov edx, dword [eax + 0x124]
cmp edx, 7
je 0x434281
cmp edx, 4
jne 0x4342a0
cmp dword [ecx], 0x706c6568
jne 0x4342a0
jmp 0x434240
mov edx, dword [ecx]
mov ecx, dword [ecx + 3]
mov ebp, edi
mov edi, 0x73726576
xor edx, edi
mov edi, 0x6e6f6973
xor ecx, edi
mov edi, ebp
mov ebp, dword [esp + 0x24]
or ecx, edx
je 0x434240
movzx ecx, byte [eax + 0x130]
cmp ecx, 5
jae 0x4343dd
test byte [eax + 0x11c], 5
jne 0x434240
mov ecx, dword [ebx + 0x70]
mov dword [esp + 0x6c], edi
test ecx, ecx
je 0x4343eb
mov edx, dword [esp + 0x28]
mov edi, dword [eax + 0x118]
mov ebp, dword [edx + 0x6c]
mov edx, dword [eax + 0x114]
lea eax, [ecx + ecx*2]
shl ecx, 4
shl eax, 4
mov dword [esp], edx
add eax, ebp
lea esi, [ebp + 0x24]
lea edx, [ecx + ecx*2]
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x2c], edx
jmp 0x43431e
mov ebp, dword [esp + 8]
cmp ebp, dword [esp + 0x10]
je 0x4343eb
mov esi, dword [ebp + 8]
lea eax, [ebp + 0x30]
mov dword [esp + 8], eax
test esi, esi
je 0x434310
mov ebx, dword [ebp + 4]
shl esi, 3
add ebx, 4
jmp 0x434348
add ebx, 8
add esi, 0xfffffff8
je 0x434310
cmp dword [ebx], edi
jne 0x434340
push edi
push dword [esp + 4]
push dword [ebx - 4]
call fcn.007be090
add esp, 0xc
test eax, eax
jne 0x434340
mov eax, dword [ebp + 0x24]
mov edx, dword [ebp + 0x28]
mov ebx, dword [esp + 0x2c]
mov esi, dword [esp + 0x18]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1c]
nop word cs:[eax + eax]
test ebx, ebx
je 0x434310
cmp dword [eax + 0x28], edx
mov ebp, eax
jne 0x4343b0
push edx
push dword [esp + 0x18]
push dword [esi]
mov dword [esp + 0x10], esi
mov esi, edx
call fcn.007be090
mov edx, esi
mov esi, dword [esp + 0x10]
add esp, 0xc
test eax, eax
sete cl
jmp 0x4343b2
xor ecx, ecx
lea eax, [ebp + 0x30]
add esi, 0x30
add ebx, 0xffffffd0
test cl, cl
je 0x434380
cmp byte [ebp + 0x2c], 0
je 0x434380
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
mov esi, dword [esp + 0xac]
mov edi, dword [esp + 0x6c]
jmp 0x434240
cmp ecx, 9
jne 0x434240
jmp 0x4342b0
mov ecx, dword [esp + 0xa8]
lea ebx, [esp + 0x40]
mov edx, ebx
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 6]
mov byte [esp + 0x40], 3
mov byte [esp + 0x44], 3
mov byte [esp + 0x48], 3
mov word [esp + 0x4c], 0
movsd qword [esp + 0x76], xmm1
movsd qword [esp + 0x70], xmm0
call fcn.00432310
mov ecx, 0x93d1f8
mov edx, str.e_0m
test al, al
mov dword [esp + 0x40], 0x80e9f0
mov dword [esp + 0x44], 3
mov dword [esp + 0x50], 0
cmovne edx, ecx
xor al, 1
mov ecx, dword [esp + 0xc]
movzx eax, al
mov dword [esp + 0x34], edx
mov edx, 0x80d168
shl eax, 2
mov dword [esp + 0x38], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x80], eax
lea eax, [esp + 0x34]
mov dword [esp + 0x84], 0x41c4a0
mov dword [esp + 0x88], eax
lea eax, [esp + 0x80]
mov dword [esp + 0x8c], 0x41c480
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 2
push ebx
call fcn.00464980
add esp, 4
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
mov eax, dword [ebp + 8]
test eax, eax
mov dword [esp + 0x104], eax
je 0x4344d2
mov ecx, dword [eax + 4]
mov dword [esp + 0x24], ecx
mov ecx, dword [eax + 8]
jmp 0x4344fb
lea ecx, [esp + 0x40]
mov edx, ebx
call fcn.00439360
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x100], eax
mov dword [esp + 0xec], edx
mov dword [esp + 0x24], edx
test ecx, ecx
mov edx, 0
mov esi, 4
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 4
mov dword [esp + 0xa0], 0
mov dword [esp + 0x2c], 4
mov eax, ecx
mov dword [esp + 0x68], ecx
je 0x434952
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x24]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*4]
mov dword [esp + 0x6c], eax
jmp 0x43457d
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x9c]
add eax, 0x14
mov dword [ecx + edx*8], esi
mov dword [ecx + edx*8 + 4], edi
inc edx
mov esi, ecx
cmp eax, dword [esp + 0x6c]
mov dword [esp + 0xa0], edx
mov dword [esp + 0x24], eax
je 0x434952
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 4
mov dword [esp + 0x78], 0
xor ecx, ecx
mov edx, 4
movzx eax, byte [0x94bfc5]
call fcn.0071ee80
test eax, eax
je 0x435c86
mov esi, eax
mov eax, dword [esp + 0x24]
lea edi, [eax + 0xc]
mov dword [esi], edi
mov dword [esp + 0x80], 1
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 4
mov dword [esp + 0x84], esi
mov dword [esp + 0x48], 0
mov eax, dword [ebx + 0x4c]
test eax, eax
je 0x434840
mov ecx, dword [ebx + 0x48]
imul eax, eax, 0x134
xor edx, edx
mov dword [esp], 4
mov dword [esp + 0x1c], eax
mov eax, 1
mov dword [esp + 0x10], ecx
jmp 0x434637
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x88]
mov esi, dword [esp + 0x14]
test eax, eax
je 0x434810
lea ecx, [eax - 1]
mov dword [esp + 0x14], esi
test edx, edx
mov dword [esp + 4], edx
mov dword [esp + 0x88], ecx
mov ecx, dword [esp]
mov esi, dword [esi + eax*4 - 4]
mov eax, edx
je 0x4346a0
mov eax, dword [esp + 4]
mov edi, dword [esi + 4]
xor ebp, ebp
lea ebx, [eax*4]
jmp 0x434677
add ebp, 4
cmp ebx, ebp
je 0x4346a0
mov eax, dword [ecx + ebp]
cmp dword [eax + 4], edi
jne 0x434670
push edi
push dword [esi]
push dword [eax]
call fcn.007be090
mov ecx, dword [esp + 0xc]
add esp, 0xc
test eax, eax
jne 0x434670
jmp 0x434620
mov edx, dword [esp + 4]
cmp edx, dword [esp + 0x70]
jne 0x4346c0
lea ecx, [esp + 0x70]
call fcn.0075a1c0
mov eax, dword [esp + 0x74]
mov edx, dword [esp + 0x78]
jmp 0x4346c3
mov eax, dword [esp]
mov dword [eax + edx*4], esi
inc edx
mov ebp, dword [esp + 0x1c]
mov ebx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 0x78], edx
mov dword [esp + 4], edx
mov edi, dword [esi]
mov esi, dword [esi + 4]
jmp 0x434702
add ebx, 0x134
add ebp, 0xfffffecc
je 0x434620
cmp dword [ebx + 0x118], esi
jne 0x4346f0
push esi
push edi
push dword [ebx + 0x114]
call fcn.007be090
add esp, 0xc
test eax, eax
jne 0x4346f0
mov ecx, dword [ebx + 0x68]
mov esi, dword [ebx + 0x64]
shl ecx, 4
add ecx, esi
mov edx, dword [esp + 4]
mov eax, esi
nop
cmp eax, ecx
je 0x434624
cmp dword [eax], 0
lea esi, [eax + 0x10]
mov eax, esi
jne 0x434730
mov eax, dword [esi - 8]
mov edi, dword [esi - 4]
mov ebx, dword [esp + 0x1c]
mov ebp, dword [esp + 0x10]
mov dword [esp + 0x18], ecx
mov dword [esp + 8], eax
jmp 0x43476e
add ebp, 0x134
add ebx, 0xfffffecc
je 0x4347d2
cmp dword [ebp + 0x118], edi
jne 0x434760
push edi
push dword [esp + 0xc]
push dword [ebp + 0x114]
call fcn.007be090
add esp, 0xc
test eax, eax
jne 0x434760
cmp dword [ebp + 0x68], 0
je 0x4347d2
mov edx, dword [esp + 0x88]
cmp edx, dword [esp + 0x80]
jne 0x4347b6
lea ecx, [esp + 0x80]
call fcn.0075a1c0
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x84]
add ebp, 0x114
mov dword [eax + edx*4], ebp
inc edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x88], edx
mov edx, dword [esp + 0x48]
cmp edx, dword [esp + 0x40]
jne 0x4347e9
lea ecx, [esp + 0x40]
call fcn.004c7a80
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 8]
mov dword [eax + edx*8], ecx
mov ecx, dword [esp + 0x18]
mov dword [eax + edx*8 + 4], edi
inc edx
mov dword [esp + 0x48], edx
jmp 0x434729
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x48]
cmp dword [esp + 0x80], 0
mov dword [esp + 4], eax
mov dword [esp], ecx
je 0x434876
mov esi, dword [esp + 0x84]
jmp 0x434867
lea ecx, [esp + 0x70]
xor edx, edx
mov dword [esp + 4], 0
call fcn.0075a1c0
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0x78]
mov dword [esp], 4
xor ebx, ebx
mov dword [eax + ecx*4], edi
push esi
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x70], 0
je 0x43488f
push dword [esp + 0x74]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
test ebx, ebx
je 0x434900
mov ebp, dword [esp]
mov edx, dword [esp + 0xa0]
lea ebx, [ebp + ebx*8]
jmp 0x4348cd
mov eax, dword [esp + 0x9c]
add ebp, 8
mov dword [eax + edx*8], esi
mov dword [eax + edx*8 + 4], edi
inc edx
cmp ebp, ebx
mov dword [esp + 0xa0], edx
je 0x434900
mov esi, dword [ebp]
mov edi, dword [ebp + 4]
cmp edx, dword [esp + 0x98]
jne 0x4348b0
lea ecx, [esp + 0x98]
call fcn.004c7a80
mov edx, dword [esp + 0xa0]
jmp 0x4348b0
cmp dword [esp + 4], 0
je 0x434918
push dword [esp]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0xa0]
mov ebx, dword [esp + 0x28]
mov esi, dword [eax + 0xc]
mov edi, dword [eax + 0x10]
cmp edx, dword [esp + 0x98]
jne 0x434550
lea ecx, [esp + 0x98]
call fcn.004c7a80
mov edx, dword [esp + 0xa0]
jmp 0x434550
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x13c]
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc8], 4
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 4
mov dword [esp + 0xcc], 0
mov dword [esp + 0xb8], 0
mov dword [esp + 0x18], esi
add eax, 0x2a
mov dword [esp + 0x10], ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0xd0], eax
lea eax, [esi + edx*8]
xor esi, esi
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x140]
lea eax, [ecx + eax*8]
mov dword [esp + 0x24], eax
nop
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov dword [esp + 4], esi
jmp 0x4349f0
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x28]
mov esi, dword [esp + 4]
test ecx, ecx
je 0x434a10
cmp ecx, dword [esp + 0x6c]
je 0x434a10
lea edi, [ecx + 8]
mov dword [esp + 0x1c], eax
mov ebp, ecx
jmp 0x434a2f
test eax, eax
je 0x434ce0
cmp eax, dword [esp + 0x24]
je 0x434ce0
lea ecx, [eax + 8]
mov ebp, eax
xor edi, edi
mov eax, ecx
mov dword [esp + 0x1c], ecx
mov edx, dword [ebx + 0x70]
mov ecx, edi
mov dword [esp + 0x18], edi
test edx, edx
je 0x4349f0
mov edi, dword [ebx + 0x6c]
mov ebx, dword [ebp]
mov dword [esp], ebp
mov ebp, dword [ebp + 4]
shl edx, 4
lea esi, [edx + edx*2]
add edi, 0x28
jmp 0x434a6c
add edi, 0x30
add esi, 0xffffffd0
je 0x4349e0
cmp dword [edi], ebp
jne 0x434a60
push ebp
push ebx
push dword [edi - 4]
call fcn.007be090
add esp, 0xc
test eax, eax
jne 0x434a60
mov esi, dword [esp + 0x28]
mov edi, dword [esp]
lea ecx, [esp + 0x11c]
mov edx, esi
push edi
call fcn.00439ae0
add esp, 4
lea ecx, [esp + 0x108]
mov edx, esi
push edi
call fcn.00439db0
add esp, 4
mov ecx, dword [esp + 0xb8]
mov eax, dword [esp + 0xb4]
mov ebp, dword [esp + 0x2c]
test ecx, ecx
mov dword [esp + 0x14], eax
mov eax, ecx
mov dword [esp + 8], ecx
je 0x434b50
mov eax, dword [esp + 0x10c]
mov ebx, dword [esp + 0x110]
mov dword [esp], eax
mov eax, dword [esp + 0x14]
lea esi, [eax + 8]
mov eax, dword [esp + 8]
lea eax, [eax*4]
lea edi, [eax + eax*2]
jmp 0x434b08
add esi, 0xc
add edi, 0xfffffff4
je 0x434b50
cmp dword [esi], ebx
jne 0x434b00
push ebx
push dword [esp + 4]
push dword [esi - 4]
call fcn.007be090
mov ebp, dword [esp + 0x38]
add esp, 0xc
test eax, eax
jne 0x434b00
cmp dword [esp + 0x108], 0
mov esi, dword [esp + 4]
je 0x434bbc
push dword [esp]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ebp, dword [esp + 0x2c]
jmp 0x434bbc
mov edx, dword [esp + 8]
cmp edx, dword [esp + 0xb0]
jne 0x434b90
lea ecx, [esp + 0xb0]
call fcn.0045d970
mov ebp, dword [esp + 0x2c]
mov edi, dword [esp + 0xb4]
mov edx, dword [esp + 0xb8]
mov esi, dword [esp + 4]
jmp 0x434b98
mov esi, dword [esp + 4]
mov edi, dword [esp + 0x14]
mov ecx, dword [esp + 0x110]
lea eax, [edx + edx*2]
inc edx
mov dword [edi + eax*4 + 8], ecx
movsd xmm0, qword [esp + 0x108]
movsd qword [edi + eax*4], xmm0
mov dword [esp + 0xb8], edx
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x120]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0x124]
mov dword [esp + 0xa8], ecx
test eax, eax
je 0x434cb0
lea eax, [ecx + eax*8]
mov dword [esp + 0x14], eax
jmp 0x434c14
mov eax, dword [esp]
mov dword [ebp + esi*8], eax
mov dword [ebp + esi*8 + 4], ebx
inc esi
mov dword [esp + 0xcc], esi
mov ecx, dword [esp + 8]
add ecx, 8
cmp ecx, dword [esp + 0x14]
je 0x434cb0
mov eax, dword [ecx]
mov ebx, dword [ecx + 4]
test esi, esi
mov dword [esp + 8], ecx
mov dword [esp + 4], esi
mov dword [esp], eax
je 0x434c70
mov eax, dword [esp + 4]
xor edi, edi
lea esi, [eax*8]
jmp 0x434c47
add edi, 8
cmp esi, edi
je 0x434c70
cmp dword [ebp + edi + 4], ebx
jne 0x434c40
push ebx
push dword [esp + 4]
push dword [ebp + edi]
call fcn.007be090
add esp, 0xc
test eax, eax
jne 0x434c40
mov esi, dword [esp + 4]
jmp 0x434c03
mov esi, dword [esp + 4]
cmp esi, dword [esp + 0xc4]
jne 0x434bf0
lea ecx, [esp + 0xc4]
mov edx, esi
call fcn.004c7a80
mov ebp, dword [esp + 0xc8]
mov esi, dword [esp + 0xcc]
jmp 0x434bf0
cmp dword [esp + 0xac], 0
mov ebx, dword [esp + 0x28]
mov dword [esp + 0x2c], ebp
je 0x4349d0
push dword [esp + 0xa8]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4349d0
mov ebp, dword [esp + 0xc8]
mov edi, dword [esp + 0x9c]
mov eax, dword [esp + 0xa0]
lea ecx, [esi*8]
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 4
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 4
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe8], 0
mov dword [esp + 0xf0], 0
mov dword [esp + 0x30], 4
xor edx, edx
mov esi, 4
mov dword [esp + 0xa8], ecx
lea eax, [edi + eax*8]
add ebp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0xac], ebp
jmp 0x434dc6
lea ecx, [esp + 0xd4]
call fcn.0045d970
mov esi, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
mov ebx, dword [esp + 0x28]
mov ecx, dword [esp + 0xfc]
lea eax, [edx + edx*2]
mov edi, dword [esp + 8]
inc edx
mov dword [esi + eax*4 + 8], ecx
movsd xmm0, qword [esp + 0xf4]
movsd qword [esi + eax*4], xmm0
mov dword [esp + 0xdc], edx
lea eax, [esi + 8]
mov dword [esp + 0x6c], esi
mov dword [esp + 0x1c], edx
mov ecx, edi
mov dword [esp + 0x18], eax
lea eax, [edx*4]
lea eax, [eax + eax*2]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x10]
jmp 0x434dfc
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x28]
test ecx, ecx
je 0x434e20
cmp ecx, dword [esp + 0x14]
je 0x434e20
lea edi, [ecx + 8]
mov dword [esp + 0x10], eax
mov edx, ecx
jmp 0x434e3f
test eax, eax
je 0x435048
cmp eax, dword [esp + 0x24]
je 0x435048
lea ecx, [eax + 8]
mov edx, eax
xor edi, edi
mov eax, ecx
mov dword [esp + 0x10], ecx
mov esi, dword [ebx + 0x4c]
mov ecx, edi
mov dword [esp + 8], edi
test esi, esi
je 0x434dfc
mov eax, dword [edx]
mov edi, dword [ebx + 0x48]
imul esi, esi, 0x134
mov dword [esp], eax
mov eax, dword [edx + 4]
jmp 0x434e6e
add edi, 0x134
add esi, 0xfffffecc
je 0x434df0
cmp dword [edi + 0x118], eax
jne 0x434e60
mov ebp, dword [edi + 0x114]
push eax
push dword [esp + 4]
push ebp
mov ebx, eax
call fcn.007be090
add esp, 0xc
test eax, eax
mov eax, ebx
jne 0x434e60
cmp dword [esp + 4], 0
mov dword [esp], ebp
je 0x434ed8
mov esi, dword [esp + 0xa8]
mov ebp, dword [esp + 0xac]
jmp 0x434eb8
add ebp, 8
add esi, 0xfffffff8
je 0x434ed8
cmp dword [ebp], eax
jne 0x434eb0
push eax
push dword [esp + 4]
push dword [ebp - 4]
call fcn.007be090
add esp, 0xc
test eax, eax
mov eax, ebx
jne 0x434eb0
jmp 0x434df0
movzx eax, byte [esp + 0x144]
lea ecx, [esp + 0xf4]
mov edx, edi
push eax
push dword [esp + 0xa8]
call fcn.00431f30
add esp, 8
cmp dword [edi + 0x14], 0
jne 0x434fae
cmp dword [esp + 0x1c], 0
je 0x434f90
mov edi, dword [esp + 0xf8]
mov esi, dword [esp + 0xfc]
mov ebx, dword [esp + 0x2c]
mov ebp, dword [esp + 0x18]
jmp 0x434f38
add ebp, 0xc
add ebx, 0xfffffff4
je 0x434f90
cmp dword [ebp], esi
jne 0x434f30
push esi
push edi
push dword [ebp - 4]
call fcn.007be090
add esp, 0xc
test eax, eax
jne 0x434f30
cmp dword [esp + 0xf4], 0
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x10]
mov ebx, dword [esp + 0x28]
je 0x434dfc
push edi
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x10]
jmp 0x434dfc
mov edx, dword [esp + 0x1c]
cmp edx, dword [esp + 0xd4]
je 0x434d80
mov ebx, dword [esp + 0x28]
mov esi, dword [esp + 0x6c]
jmp 0x434d9e
mov edi, dword [edi + 0x18]
mov eax, dword [esp + 0xf0]
lea edx, [edi + 1]
cmp eax, edx
jae 0x434fe2
lea eax, [esp + 0x40]
mov dword [esp + 0x40], 0x80000000
lea ecx, [esp + 0xe0]
push eax
call fcn.00439960
add esp, 4
mov eax, dword [esp + 0xe8]
mov ebx, dword [esp + 0x28]
cmp edi, eax
jae 0x435c6c
mov ecx, dword [esp + 0xe4]
mov dword [esp + 0xf0], eax
lea eax, [edi + edi*2]
test dword [ecx + eax*4], 0x7fffffff
lea esi, [ecx + eax*4]
mov dword [esp + 0x30], ecx
je 0x435020
push dword [esi + 4]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0xfc]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 8]
mov dword [esi + 8], eax
movsd xmm0, qword [esp + 0xf4]
movsd qword [esi], xmm0
mov esi, dword [esp + 0x6c]
jmp 0x434dc6
mov eax, dword [ebx + 0x48]
imul ebp, dword [ebx + 0x4c], 0x134
mov dword [esp + 4], eax
add ebp, eax
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0xcc]
mov edi, dword [esp + 0xc8]
mov dword [esp + 0x30], eax
mov dword [esp + 8], ecx
lea ecx, [ecx*8]
add edi, 4
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 4]
nop word cs:[eax + eax]
nop
cmp ecx, ebp
je 0x4356b3
mov esi, ecx
add ecx, 0x134
cmp dword [esi + 0x120], 0
jne 0x435090
cmp dword [esi + 0x34], 0x110000
jne 0x435090
mov edx, dword [esi + 0x11c]
test dl, 4
mov dword [esp + 0x10], edx
jne 0x435090
cmp dword [esp + 8], 0
mov dword [esp + 0x18], edi
mov dword [esp + 4], ecx
mov dword [esp + 0x2c], ebp
je 0x435130
mov ecx, dword [esi + 0x114]
mov ebx, dword [esi + 0x118]
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov dword [esp], ecx
jmp 0x4350f8
add ebp, 8
add edi, 0xfffffff8
je 0x435130
cmp dword [ebp], ebx
jne 0x4350f0
push ebx
push dword [esp + 4]
push dword [ebp - 4]
call fcn.007be090
add esp, 0xc
test eax, eax
jne 0x4350f0
mov ebp, dword [esp + 0x2c]
mov ecx, dword [esp + 4]
mov edi, dword [esp + 0x18]
jmp 0x435090
cmp dword [esi + 0x14], 0
je 0x435c95
mov edi, dword [esi + 0x18]
mov edx, dword [esp + 0xe8]
lea eax, [edi + 1]
cmp edx, eax
jae 0x435170
mov edx, eax
lea eax, [esp + 0x40]
mov dword [esp + 0x40], 0x80000000
lea ecx, [esp + 0xe0]
push eax
call fcn.00439960
add esp, 4
mov edx, dword [esp + 0xe8]
mov ebp, dword [esp + 0x2c]
cmp edi, edx
jae 0x435c7a
mov ecx, dword [esp + 0xe4]
lea eax, [edi + edi*2]
mov edi, dword [ecx + eax*4]
lea edx, [ecx + eax*4]
mov eax, ecx
mov dword [esp], edx
cmp edi, 0x80000000
jne 0x4351db
and dword [esp + 0x10], 0x100
mov dword [esp + 0x30], eax
jne 0x43537b
lea ecx, [esp + 0x40]
mov edx, esi
push 0
push dword [esp + 0xa8]
call fcn.00431f30
add esp, 8
mov eax, dword [esp + 0x48]
movsd xmm0, qword [esp + 0x40]
mov dword [esp + 0x3c], eax
movsd qword [esp + 0x34], xmm0
jmp 0x4355f7
test dword [esp + 0x10], 0x100
je 0x43505c
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x30], eax
mov eax, dword [edx + 4]
mov ebx, dword [edx + 8]
mov dword [edx], 0x80000000
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 1
mov dword [esp + 0x3c], 0
lea esi, [esp + 0x40]
mov edx, esi
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 6]
mov byte [esp + 0x40], 3
mov byte [esp + 0x44], 3
mov byte [esp + 0x48], 3
mov dword [esp + 8], eax
mov word [esp + 0x4c], 0
movsd qword [esp + 0x76], xmm1
movsd qword [esp + 0x70], xmm0
call fcn.00432310
test al, al
mov ecx, str.e_0m
mov edx, 0x93d1f8
mov dword [esp + 0x40], 0x80eab0
mov dword [esp + 0x44], 3
mov dword [esp + 0x50], 0
cmovne ecx, edx
xor al, 1
mov edx, 0x80d168
movzx eax, al
mov dword [esp + 0xbc], ecx
lea ecx, [esp + 0x34]
shl eax, 2
mov dword [esp + 0xc0], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x80], eax
lea eax, [esp + 0xbc]
mov dword [esp + 0x84], 0x41c4a0
mov dword [esp + 0x88], eax
lea eax, [esp + 0x80]
mov dword [esp + 0x8c], 0x41c480
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 2
push esi
call fcn.00464980
add esp, 4
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x3c]
mov ecx, ebx
sub eax, esi
cmp eax, ebx
jb 0x435683
mov eax, dword [esp + 0x38]
add eax, esi
push ebx
push dword [esp + 0xc]
push eax
call fcn.007bd9b0
add esp, 0xc
add esi, ebx
mov ecx, dword [esp]
mov dword [esp + 0x3c], esi
mov dword [esp + 0x48], esi
movsd xmm0, qword [esp + 0x34]
movsd qword [esp + 0x40], xmm0
test dword [ecx], 0x7fffffff
je 0x435340
push dword [ecx + 4]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp]
mov eax, dword [esp + 0x48]
test edi, edi
mov dword [esp + 0x10], 1
mov dword [ecx + 8], eax
movsd xmm0, qword [esp + 0x40]
movsd qword [ecx], xmm0
je 0x43563b
push dword [esp + 8]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp]
jmp 0x43563b
mov ecx, dword [esp + 0xd0]
movzx eax, byte [esp + 0x23]
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 1
mov dword [esp + 0x3c], 0
lea edx, [esp + 0x41]
lea edi, [esp + 0x40]
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 6]
mov byte [esp + 0x40], 3
mov byte [edx + 2], al
movzx eax, word [esp + 0x21]
mov word [edx], ax
movzx eax, byte [esp + 0x23]
mov byte [esp + 0x44], 3
movsd qword [esp + 0x76], xmm1
movsd qword [esp + 0x70], xmm0
mov byte [edx + 6], al
movzx eax, word [esp + 0x21]
mov word [edx + 4], ax
movzx eax, byte [esp + 0x23]
mov byte [esp + 0x48], 3
mov byte [edx + 0xa], al
movzx eax, word [esp + 0x21]
mov word [edx + 8], ax
mov edx, edi
mov word [esp + 0x4c], 0
call fcn.00432310
test al, al
mov ecx, str.e_0m
mov edx, 0x93d1f8
mov dword [esp + 0x40], 0x80eacc
mov dword [esp + 0x44], 3
mov dword [esp + 0x50], 0
cmovne ecx, edx
xor al, 1
mov edx, 0x80d168
movzx eax, al
mov dword [esp + 0xbc], ecx
lea ecx, [esp + 0x34]
shl eax, 2
mov dword [esp + 0xc0], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x80], eax
lea eax, [esp + 0xbc]
mov dword [esp + 0x84], 0x41c4a0
mov dword [esp + 0x88], eax
lea eax, [esp + 0x80]
mov dword [esp + 0x8c], 0x41c480
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 2
push edi
call fcn.00464980
add esp, 4
mov ecx, edi
mov edx, esi
push 1
push dword [esp + 0xa8]
call fcn.00431f30
add esp, 8
mov eax, dword [esp + 0x34]
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x48]
mov ebx, dword [esp + 0x44]
sub eax, esi
cmp eax, edi
jb 0x43569b
mov eax, dword [esp + 0x38]
add eax, esi
push edi
push ebx
push eax
call fcn.007bd9b0
add esp, 0xc
add esi, edi
cmp dword [esp + 0x40], 0
mov dword [esp + 0x3c], esi
je 0x4354f3
push ebx
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0xd0]
movzx eax, byte [esp + 0x23]
lea edx, [esp + 0x41]
lea esi, [esp + 0x40]
movsd xmm0, qword [ecx]
movsd xmm1, qword [ecx + 6]
mov byte [esp + 0x40], 3
mov byte [edx + 2], al
movzx eax, word [esp + 0x21]
mov word [edx], ax
movzx eax, byte [esp + 0x23]
mov byte [esp + 0x44], 3
movsd qword [esp + 0x76], xmm1
movsd qword [esp + 0x70], xmm0
mov byte [edx + 6], al
movzx eax, word [esp + 0x21]
mov word [edx + 4], ax
movzx eax, byte [esp + 0x23]
mov byte [esp + 0x48], 3
mov byte [edx + 0xa], al
movzx eax, word [esp + 0x21]
mov word [edx + 8], ax
mov edx, esi
mov word [esp + 0x4c], 0
call fcn.00432310
test al, al
mov ecx, str.e_0m
mov edx, 0x93d1f8
mov dword [esp + 0x40], 0x80d3e8
mov dword [esp + 0x44], 2
mov dword [esp + 0x50], 0
cmovne ecx, edx
xor al, 1
mov edx, 0x80d168
movzx eax, al
mov dword [esp + 0xbc], ecx
lea ecx, [esp + 0x34]
shl eax, 2
mov dword [esp + 0xc0], eax
lea eax, [esp + 0x70]
mov dword [esp + 0x80], eax
lea eax, [esp + 0xbc]
mov dword [esp + 0x84], 0x41c4a0
mov dword [esp + 0x88], eax
lea eax, [esp + 0x80]
mov dword [esp + 0x8c], 0x41c480
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 2
push esi
call fcn.00464980
add esp, 4
mov eax, dword [esp + 0x3c]
movsd xmm0, qword [esp + 0x34]
mov ecx, dword [esp]
mov dword [esp + 0x48], eax
movsd qword [esp + 0x40], xmm0
test dword [ecx], 0x7fffffff
je 0x43562a
push dword [ecx + 4]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp]
mov eax, dword [esp + 0x48]
mov dword [ecx + 8], eax
movsd xmm0, qword [esp + 0x40]
movsd qword [ecx], xmm0
mov eax, dword [esp + 0x30]
cmp dword [esp + 0x10], 0
je 0x43505c
cmp byte [esp + 0x144], 0
jne 0x43505c
test dword [ecx], 0x7fffffff
je 0x435678
push dword [ecx + 4]
push 0
push dword [0x94bf18]
mov esi, eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp]
mov eax, esi
mov dword [ecx], 0x80000000
jmp 0x43505c
lea ecx, [esp + 0x34]
mov edx, esi
push ebx
call fcn.007c54d0
add esp, 4
mov esi, dword [esp + 0x3c]
jmp 0x4352f7
lea ecx, [esp + 0x34]
mov edx, esi
push edi
call fcn.007c54d0
add esp, 4
mov esi, dword [esp + 0x3c]
jmp 0x4354c6
cmp byte [esp + 0x144], 0
je 0x435997
mov eax, dword [esp + 0xd4]
mov ecx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xd8]
mov dword [esp + 0x18], eax
lea eax, [ecx + ecx*2]
test ecx, ecx
mov dword [esp + 0x10], ebx
lea eax, [ebx + eax*4]
mov dword [esp + 0x14], eax
je 0x4357c5
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
lea ebx, [eax + 0xc]
jmp 0x435713
lea eax, [ebx - 0xc]
add ebx, 0xc
add eax, 0xc
cmp eax, dword [esp + 0x14]
je 0x43580e
mov eax, dword [ebx - 0xc]
cmp eax, 0x80000000
je 0x4357c5
mov ebp, dword [ecx]
mov esi, dword [ecx + 8]
mov edi, dword [ebx - 4]
mov edx, dword [ebx - 8]
mov dword [esp + 4], eax
mov dword [esp], ebp
sub ebp, esi
cmp ebp, edi
jb 0x43578a
mov ebp, dword [ecx + 4]
lea eax, [ebp + esi]
push edi
mov dword [esp + 0xc], edx
push edx
push eax
call fcn.007bd9b0
mov ecx, dword [esp + 0x18]
add esp, 0xc
mov edx, dword [esp]
add esi, edi
mov dword [ecx + 8], esi
cmp edx, esi
je 0x4357ab
mov byte [ebp + esi], 0x20
inc esi
cmp dword [esp + 4], 0
mov dword [ecx + 8], esi
je 0x435700
push dword [esp + 8]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0xc]
jmp 0x435700
mov ecx, dword [esp + 0xc]
mov ebp, edx
mov edx, esi
push edi
call fcn.007c54d0
mov ecx, dword [esp + 0x10]
mov edx, ebp
add esp, 4
mov eax, dword [ecx]
mov esi, dword [ecx + 8]
mov dword [esp], eax
jmp 0x435739
mov ecx, dword [esp + 0xc]
push 1
call fcn.007c54d0
mov ecx, dword [esp + 0x10]
add esp, 4
mov ebp, dword [ecx + 4]
mov esi, dword [ecx + 8]
jmp 0x43575f
mov edi, dword [esp + 0x14]
mov ecx, 0xaaaaaaab
mov eax, edi
sub eax, ebx
mul ecx
cmp edi, ebx
je 0x43580e
mov esi, edx
add ebx, 4
shr esi, 3
jmp 0x4357f6
add ebx, 0xc
dec esi
je 0x43580e
cmp dword [ebx - 4], 0
je 0x4357f0
push dword [ebx]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4357f0
cmp dword [esp + 0x18], 0
je 0x435827
push dword [esp + 0x10]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0xb0]
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x10], ebx
lea ecx, [eax + eax*2]
test eax, eax
lea ecx, [ebx + ecx*4]
mov dword [esp + 0x14], ecx
je 0x435935
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
lea ebx, [eax + 0xc]
jmp 0x435883
lea eax, [ebx - 0xc]
add ebx, 0xc
add eax, 0xc
cmp eax, dword [esp + 0x14]
je 0x43597e
mov eax, dword [ebx - 0xc]
cmp eax, 0x80000000
je 0x435935
mov ebp, dword [ecx]
mov esi, dword [ecx + 8]
mov edi, dword [ebx - 4]
mov edx, dword [ebx - 8]
mov dword [esp + 4], eax
mov dword [esp], ebp
sub ebp, esi
cmp ebp, edi
jb 0x4358fa
mov ebp, dword [ecx + 4]
lea eax, [ebp + esi]
push edi
mov dword [esp + 0xc], edx
push edx
push eax
call fcn.007bd9b0
mov ecx, dword [esp + 0x18]
add esp, 0xc
mov edx, dword [esp]
add esi, edi
mov dword [ecx + 8], esi
cmp edx, esi
je 0x43591b
mov byte [ebp + esi], 0x20
inc esi
cmp dword [esp + 4], 0
mov dword [ecx + 8], esi
je 0x435870
push dword [esp + 8]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0xc]
jmp 0x435870
mov ecx, dword [esp + 0xc]
mov ebp, edx
mov edx, esi
push edi
call fcn.007c54d0
mov ecx, dword [esp + 0x10]
mov edx, ebp
add esp, 4
mov eax, dword [ecx]
mov esi, dword [ecx + 8]
mov dword [esp], eax
jmp 0x4358a9
mov ecx, dword [esp + 0xc]
push 1
call fcn.007c54d0
mov ecx, dword [esp + 0x10]
add esp, 4
mov ebp, dword [ecx + 4]
mov esi, dword [ecx + 8]
jmp 0x4358cf
mov edi, dword [esp + 0x14]
mov ecx, 0xaaaaaaab
mov eax, edi
sub eax, ebx
mul ecx
cmp edi, ebx
je 0x43597e
mov esi, edx
add ebx, 4
shr esi, 3
jmp 0x435966
add ebx, 0xc
dec esi
je 0x43597e
cmp dword [ebx - 4], 0
je 0x435960
push dword [ebx]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x435960
cmp dword [esp + 0x18], 0
je 0x435997
push dword [esp + 0x10]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0xe8]
mov edx, dword [esp + 0x30]
mov eax, dword [esp + 0xe0]
mov dword [esp + 0x40], 0x80000001
mov dword [esp + 0x4c], 0x80000001
lea ecx, [ecx + ecx*2]
mov dword [esp + 0x58], edx
mov dword [esp + 0x5c], edx
mov dword [esp + 0x60], eax
mov eax, edx
lea ebx, [edx + ecx*4]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x64], ebx
mov ebp, dword [esp + 0x44]
mov edi, dword [esp + 0x48]
nop dword [eax]
cmp eax, ebx
je 0x435ac7
mov esi, dword [eax]
cmp esi, 0x80000001
je 0x435ac2
mov ebp, dword [eax + 4]
mov edi, dword [eax + 8]
mov edx, eax
add eax, 0xc
cmp esi, 0x80000000
je 0x4359e0
mov dword [esp + 0x30], edx
mov eax, dword [ecx]
mov edx, dword [ecx + 8]
mov dword [esp], eax
sub eax, edx
cmp eax, edi
jb 0x435a84
mov eax, dword [ecx + 4]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
add eax, edx
push edi
push ebp
push eax
call fcn.007bd9b0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
add esp, 0xc
mov eax, dword [esp]
add ecx, edi
mov dword [edx + 8], ecx
cmp eax, ecx
je 0x435aa2
mov edx, dword [esp + 4]
mov eax, dword [esp + 0x30]
mov byte [edx + ecx], 0x20
mov edx, dword [esp + 0xc]
inc ecx
add eax, 0xc
test esi, esi
mov dword [edx + 8], ecx
mov ecx, edx
je 0x4359e0
push ebp
push 0
push dword [0x94bf18]
mov esi, eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0xc]
mov eax, esi
jmp 0x4359e0
mov ecx, dword [esp + 0xc]
push edi
call fcn.007c54d0
mov ecx, dword [esp + 0x10]
add esp, 4
mov eax, dword [ecx]
mov edx, dword [ecx + 8]
mov dword [esp], eax
jmp 0x435a1b
mov ecx, dword [esp + 0xc]
mov edx, eax
push 1
call fcn.007c54d0
mov edx, dword [esp + 0x10]
add esp, 4
mov eax, dword [edx + 4]
mov ecx, dword [edx + 8]
mov dword [esp + 4], eax
jmp 0x435a47
add eax, 0xc
mov ebx, eax
lea ecx, [esp + 0x40]
mov dword [esp + 0x44], ebp
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], 0x80000001
mov dword [esp + 0x40], 0x80000001
mov dword [esp + 0x5c], ebx
call fcn.004398a0
cmp byte [esp + 0x144], 0
je 0x435aff
mov ecx, dword [esp + 0x68]
jmp 0x435bbf
mov esi, dword [esp + 0xd8]
cmp dword [esp + 0x1c], 0
mov ecx, dword [esp + 0x68]
je 0x435b45
lea edi, [esi + 4]
jmp 0x435b29
add edi, 0xc
dec dword [esp + 0x1c]
je 0x435b45
cmp dword [edi - 4], 0
je 0x435b20
push dword [edi]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0x68]
jmp 0x435b20
cmp dword [esp + 0xd4], 0
je 0x435b62
push esi
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0x68]
mov edi, dword [esp + 0xb8]
mov esi, dword [esp + 0xb4]
test edi, edi
je 0x435ba2
lea ebx, [esi + 4]
jmp 0x435b86
add ebx, 0xc
dec edi
je 0x435ba2
cmp dword [ebx - 4], 0
je 0x435b80
push dword [ebx]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0x68]
jmp 0x435b80
cmp dword [esp + 0xb0], 0
je 0x435bbf
push esi
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0x68]
cmp dword [esp + 0xc4], 0
je 0x435be2
push dword [esp + 0xc8]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0x68]
cmp dword [esp + 0x98], 0
je 0x435c05
push dword [esp + 0x9c]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, dword [esp + 0x68]
cmp dword [esp + 0x104], 0
jne 0x435c61
test ecx, ecx
je 0x435c42
mov eax, dword [esp + 0xec]
lea esi, [eax + 4]
jmp 0x435c26
add esi, 0x14
dec ecx
je 0x435c42
cmp dword [esi - 4], 0
je 0x435c20
push dword [esi]
push 0
push dword [0x94bf18]
mov edi, ecx
call dword [sym.imp.kernel32.dll_HeapFree]
mov ecx, edi
jmp 0x435c20
cmp dword [esp + 0x100], 0
je 0x435c61
push dword [esp + 0xec]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
add esp, 0x128
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, edi
mov edx, eax
push 0x80eae4
call fcn.007c1be0
mov ecx, edi
push 0x80eaa0
call fcn.007c1be0
mov ecx, 4
mov edx, 4
call fcn.007c1490
mov ecx, 0x80ea90
call fcn.007c1fe0
int3