Function at 0x435c90
Capabilities:
Encrypt data using speck
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x340
call 0x435ca4
pop eax
mov edi, edx
mov ebx, ecx
mov dword [esp + 0x34], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
test eax, eax
je 0x435cf9
mov edx, dword [edi]
lea esi, [esp + 0x1a0]
mov ecx, esi
push eax
push dword [edi + 4]
call fcn.00439070
add esp, 8
lea ecx, [esp + 0xe0]
mov edx, esi
call fcn.00439f50
movzx eax, byte [esp + 0xe0]
cmp al, 0x4b
jne 0x436080
mov eax, dword [esp + 0xe4]
mov dword [esp + 0x74], ebx
jmp 0x435d15
mov eax, dword [edi + 0x6c]
test eax, eax
je 0x4360cc
mov dword [esp + 0x74], ebx
lock inc dword [eax - 8]
jle 0x437f8a
add eax, 0xfffffff8
mov dword [esp + 8], eax
mov ecx, dword [ebp + 8]
cmp byte [edi + 0x70], 0
mov dword [esp + 0x114], edi
movsd xmm3, qword [esp + 0x2d0]
movsd xmm2, qword [esp + 0x2b4]
movsd xmm1, qword [ecx + 8]
mov edx, dword [ecx + 0x20]
setne bl
movsd xmm0, qword [ecx]
movsd qword [esp + 0x250], xmm1
movsd xmm1, qword [ecx + 0x10]
mov eax, edx
movsd qword [esp + 0x248], xmm0
movq xmm0, qword [esp + 0x2e8]
shr eax, 0x10
cmp ax, 5
setae bh
and edx, 0xff00
xor eax, eax
movsd qword [esp + 0x258], xmm1
movsd xmm1, qword [ecx + 0x18]
cmp edx, 0x800
sete al
xor edi, edi
test bl, bh
lea esi, [eax*8 + 8]
lea edx, [eax*8 + 0xc]
cmove esi, edi
cmove edx, edi
mov edi, dword [ecx + 8]
xor eax, eax
movsd qword [esp + 0x260], xmm1
movsd xmm1, qword [ecx + 0x20]
add edi, 0xfffffffd
movsd qword [esp + 0x268], xmm1
movsd xmm1, qword [ecx + 0x28]
cmp edi, 2
mov edi, dword [esp + 8]
setb al
movsd qword [esp + 0x270], xmm1
movsd xmm1, qword [esp + 0x2e0]
mov dword [esp + 0x290], edi
mov dword [esp + 0x278], 0
mov dword [esp + 0x280], 0
mov dword [esp + 0x288], 0
mov dword [esp + 0x28c], 0
mov dword [esp + 0x294], esi
mov dword [esp + 0x298], 0
mov dword [esp + 0x29c], edx
mov dword [esp + 0x2a0], edx
mov dword [esp + 0x1b0], 0x2f
mov dword [esp + 0x1b4], 0
mov edx, dword [esp + 0x2bc]
movq qword [esp + 0x1e0], xmm0
movsd qword [esp + 0x1c8], xmm3
lea esi, [esp + 0x248]
add edi, 8
movsd qword [esp + 0x1d8], xmm1
movsd xmm1, qword [esp + 0x2d8]
movsd qword [esp + 0x1d0], xmm1
mov dword [esp + 0x214], edx
mov edx, dword [esp + 0x2b0]
movq xmm1, qword [esp + 0x2a8]
movsd qword [esp + 0x20c], xmm2
mov dword [esp + 0x22c], edx
movq qword [esp + 0x224], xmm1
mov dword [esp + 0x1a0], eax
mov eax, dword [ecx + 0x14]
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1ac], eax
mov eax, dword [ecx + 0x10]
mov dword [esp + 0x1a8], eax
mov eax, dword [esp + 0x260]
mov ebx, dword [esp + 0x264]
mov dword [esp + 0x98], eax
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], esi
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa8], 0
mov dword [esp + 0xc4], 0
lea ecx, [esp + 0xe0]
lea edx, [esp + 0x98]
call fcn.00434880
movzx eax, byte [esp + 0xe0]
mov ebx, dword [esp + 0x74]
cmp al, 0x4b
jne 0x435f92
lea esi, [esp + 0xe0]
lea edi, [esp + 0x98]
nop dword [eax]
cmp byte [esp + 0xe1], 0
mov eax, dword [esp + 0xa8]
je 0x43612b
test eax, eax
jne 0x436133
mov ecx, esi
mov edx, edi
call fcn.00434880
movzx eax, byte [esp + 0xe0]
cmp al, 0x4b
je 0x435f60
movzx ecx, byte [esp + 0xe1]
mov byte [ebx + 8], al
movzx esi, word [esp + 0xe2]
mov edx, dword [esp + 0xe8]
mov byte [ebx + 9], cl
mov ecx, dword [esp + 0xe4]
mov word [ebx + 0xa], si
mov dword [ebx + 0xc], ecx
mov ecx, dword [esp + 0xec]
mov dword [ebx + 0x10], edx
mov dword [ebx + 0x14], ecx
mov dword [ebx + 4], 0
mov dword [ebx], 2
mov eax, dword [esp + 0x290]
lock dec dword [eax]
jne 0x435fef
mov ecx, dword [esp + 0x290]
call fcn.0042da80
mov eax, dword [esp + 0x1b0]
xor eax, 0x2f
or eax, dword [esp + 0x1b4]
je 0x4360c4
cmp dword [esp + 0x200], 0
je 0x436024
push dword [esp + 0x204]
push 0
push dword [0x4760c0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0x20c], 0
je 0x436042
push dword [esp + 0x210]
push 0
push dword [0x4760c0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0x218], 0
je 0x436060
push dword [esp + 0x21c]
push 0
push dword [0x4760c0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0x224], 0
je 0x4360c4
push dword [esp + 0x228]
push 0
push dword [0x4760c0]
call sub.kernel32.dll_HeapFree
jmp 0x4360c4
mov ecx, dword [esp + 0xe4]
mov edx, dword [esp + 0xe8]
mov esi, dword [esp + 0xec]
movzx edi, word [esp + 0xe1]
mov ah, byte [esp + 0xe3]
mov word [ebx + 9], di
mov byte [ebx + 0xb], ah
mov byte [ebx + 8], al
mov dword [ebx + 0xc], ecx
mov dword [ebx + 0x14], esi
mov dword [ebx + 0x10], edx
mov dword [ebx + 4], 0
mov dword [ebx], 2
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edx, dword [edi]
lea esi, [esp + 0x1a0]
mov ecx, esi
push 0
push dword [edi + 4]
call fcn.00439070
add esp, 8
lea ecx, [esp + 0x98]
mov edx, esi
call fcn.00439f50
movzx eax, byte [esp + 0x98]
cmp al, 0x4b
jne 0x43614e
mov ecx, dword [esp + 0x9c]
xor eax, eax
lea edx, [ecx + 8]
lock cmpxchg dword [edi + 0x6c], edx
mov dword [esp + 0x74], ebx
jne 0x4366fb
mov dword [esp + 8], ecx
lock inc dword [ecx]
jg 0x435d19
jmp 0x437f8a
test eax, eax
je 0x4366eb
mov edi, dword [esp + 0xb0]
mov ecx, dword [esp + 0xac]
cmp dword [edi], 0
je 0x436187
mov ebx, dword [edi + 0xc]
mov edi, dword [edi + 8]
jmp 0x436196
movzx ecx, byte [esp + 0x9b]
mov esi, dword [esp + 0xa4]
mov edx, dword [esp + 0xa0]
mov byte [esp + 0xe3], cl
movzx ecx, word [esp + 0x99]
mov word [esp + 0xe1], cx
mov ecx, dword [esp + 0x9c]
jmp 0x436095
mov ebx, dword [edi + 4]
cmp ebx, 6
jae 0x43733a
add edi, 8
mov dword [esp + 0x150], eax
lea eax, [esp + 0xa8]
mov dword [esp + 0x154], ecx
mov dword [esp + 0x158], edi
mov dword [esp + 0x15c], ebx
movaps xmm0, xmmword [0x463290]
add edi, 0x10
dec ebx
mov dword [esp + 0x7c], 0
mov dword [esp + 0x14c], 0x2e
mov dword [esp + 0x148], 0
mov dword [esp + 8], 0
mov dword [esp + 0x160], eax
mov eax, dword [esp + 0x1a0]
movaps xmmword [esp + 0x2c0], xmm0
movaps xmmword [esp + 0x60], xmm0
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov dword [esp + 4], eax
jmp 0x436234
add edi, 0x10
dec ebx
cmp ebx, 0xffffffff
je 0x436536
lea eax, [edi - 0x10]
movsd xmm0, qword [eax]
movsd xmm1, qword [eax + 8]
mov eax, dword [esp + 0x160]
movsd qword [esp + 0x40], xmm1
movsd qword [esp + 0x38], xmm0
mov eax, dword [eax + 0xc]
lea ecx, [esp + 0xe0]
lea esi, [esp + 0x38]
lea edx, [esp + 0x150]
push esi
push dword [eax + 0x20]
call fcn.0042df10
add esp, 8
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xe4]
mov edx, eax
xor edx, 0x2e
or edx, ecx
je 0x436582
lea edx, [esp + 0xe8]
mov dword [esp + 0x158], edi
mov dword [esp + 0x15c], ebx
movsd xmm0, qword [edx]
movq xmm1, qword [edx + 8]
mov dword [esp + 0xe4], ecx
mov dword [esp + 0xe0], eax
movq qword [edx + 8], xmm1
movsd qword [edx], xmm0
movsd qword [esp + 0x178], xmm0
movq qword [esp + 0x180], xmm1
movzx eax, word [esp + 0xf0]
cmp eax, 0x71
jle 0x436350
cmp eax, 0x2130
jg 0x4363b0
add eax, 0xffffff8e
cmp eax, 0x1a
ja 0x436230
mov eax, dword [eax*4 + 0x438124]
add eax, dword [esp + 0x34]
jmp eax
add eax, 0xfffffffd
cmp eax, 0x18
ja 0x436230
mov eax, dword [eax*4 + 0x4380c0]
add eax, dword [esp + 0x34]
jmp eax
cmp eax, 0x2131
je 0x4364bd
cmp eax, 0x2132
je 0x4363fe
cmp eax, 0x2133
jne 0x436230
lea ecx, [esp + 0x38]
lea edx, [esp + 0xe0]
call fcn.0042fb00
mov eax, dword [esp + 0x38]
xor eax, 0xb
or eax, dword [esp + 0x3c]
jne 0x436230
mov eax, dword [esp + 0x40]
mov dword [esp + 0x298], eax
jmp 0x436230
lea ecx, [esp + 0x38]
lea edx, [esp + 0xe0]
call fcn.0042fb00
mov eax, dword [esp + 0x38]
xor eax, 0x17
or eax, dword [esp + 0x3c]
jne 0x436230
mov eax, dword [esp + 0x40]
mov dword [esp + 0x2a0], eax
jmp 0x436230
mov eax, dword [esp + 0x14]
or eax, dword [esp + 4]
jne 0x436230
lea ecx, [esp + 0x38]
lea edx, [esp + 0xe0]
call fcn.0042fb00
mov eax, dword [esp + 0x38]
mov dword [esp + 4], 0
xor eax, 0x2d
or eax, dword [esp + 0x3c]
jne 0x436529
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x1a4], 0
mov dword [esp + 0x1a0], 1
mov dword [esp + 0x14], 1
mov dword [esp + 0x1ac], ecx
mov dword [esp + 0x1a8], eax
jmp 0x436230
mov dword [esp + 0x14], 0
jmp 0x436230
mov eax, dword [esp + 0x160]
cmp dword [eax + 0x14], 0
jne 0x436556
mov ecx, dword [esp + 0x150]
sub ecx, dword [eax]
mov dword [eax + 0x14], 1
mov dword [eax + 0x18], ecx
movdqa xmm1, xmmword [esp + 0x60]
mov ebx, dword [esp + 0x74]
mov edx, dword [esp + 0x114]
movd ecx, xmm1
pshufd xmm0, xmm1, 0x55
movd eax, xmm0
xor ecx, 0x2e
or ecx, eax
jne 0x4365c4
xor esi, esi
jmp 0x43660e
lea eax, [esp + 0xe8]
movq xmm0, qword [eax]
movq xmm1, qword [eax + 8]
mov eax, dword [esp + 0x74]
movq qword [esp + 0x178], xmm0
movq qword [esp + 0x180], xmm1
movq qword [eax + 0x10], xmm1
movq qword [eax + 8], xmm0
mov dword [eax + 4], 0
mov dword [eax], 2
jmp 0x435fd7
movzx eax, byte [esp + 0x269]
movdqu xmmword [esp + 0x318], xmm1
lea esi, [esp + 0x318]
lea ecx, [esp + 0x98]
push esi
push dword [esp + 0x298]
push eax
call fcn.0042d860
add esp, 0xc
xor esi, esi
cmp byte [esp + 0x98], 0x4b
jne 0x436607
mov esi, dword [esp + 0x9c]
mov eax, dword [esp + 0xa0]
movdqa xmm1, xmmword [esp + 0x2c0]
mov dword [esp + 0x278], esi
mov dword [esp + 0x60], eax
mov dword [esp + 0x27c], eax
movd ecx, xmm1
pshufd xmm0, xmm1, 0x55
movd eax, xmm0
xor ecx, 0x2e
or ecx, eax
jne 0x436657
cmp dword [esp + 8], 0
mov dword [esp + 0x280], 0
je 0x43671d
xor edi, edi
jmp 0x4366c4
movzx eax, byte [esp + 0x269]
movdqu xmmword [esp + 0x328], xmm1
mov edx, dword [esp + 0x114]
lea edi, [esp + 0x328]
lea ecx, [esp + 0x98]
push edi
push dword [esp + 0x298]
push eax
call fcn.0042d860
add esp, 0xc
xor edi, edi
cmp byte [esp + 0x98], 0x4b
mov eax, dword [esp + 0xa0]
jne 0x4366a8
mov edi, dword [esp + 0x9c]
cmp dword [esp + 8], 0
mov dword [esp + 0x280], edi
mov dword [esp + 0x2c0], eax
mov dword [esp + 0x284], eax
je 0x43671d
mov ecx, dword [esp + 0x114]
mov eax, dword [ecx + 0x20]
mov edx, dword [ecx + 0x24]
mov ecx, dword [esp + 0x130]
sub edx, ecx
jae 0x436a57
xor edi, edi
mov bl, 0x13
mov edx, eax
jmp 0x436aec
mov byte [ebx + 8], 0x42
mov dword [ebx + 0xc], 0
jmp 0x435fca
lock dec dword [ecx]
mov esi, eax
jne 0x436707
call fcn.0042da80
lock inc dword [esi - 8]
jle 0x437f8a
add esi, 0xfffffff8
mov dword [esp + 8], esi
jmp 0x435d19
movsd xmm1, qword [esp + 0x2e0]
mov eax, dword [esp + 0x2bc]
movsd xmm0, qword [esp + 0x2e8]
movsd xmm3, qword [esp + 0x2d0]
movsd xmm2, qword [esp + 0x2b4]
mov dword [esp + 0x14], 0
mov dword [esp + 4], 0x2f
movsd qword [esp + 0x160], xmm1
movsd xmm1, qword [esp + 0x2d8]
mov dword [esp + 0x180], eax
mov eax, dword [esp + 0x2b0]
movsd qword [esp + 0x168], xmm0
movsd qword [esp + 0x150], xmm3
movsd qword [esp + 0x178], xmm2
movsd qword [esp + 0x158], xmm1
movq xmm1, qword [esp + 0x2a8]
mov dword [esp + 0x190], eax
mov dword [esp + 8], eax
movq qword [esp + 0x188], xmm1
mov eax, dword [esp + 0x1b0]
xor eax, 0x2f
or eax, dword [esp + 0x1b4]
je 0x436844
cmp dword [esp + 0x200], 0
je 0x4367ea
push dword [esp + 0x204]
push 0
push dword [0x4760c0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0x20c], 0
je 0x436808
push dword [esp + 0x210]
push 0
push dword [0x4760c0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0x218], 0
je 0x436826
push dword [esp + 0x21c]
push 0
push dword [0x4760c0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0x224], 0
je 0x436844
push dword [esp + 0x228]
push 0
push dword [0x4760c0]
call sub.kernel32.dll_HeapFree
mov eax, dword [esp + 4]
movsd xmm0, qword [esp + 0x168]
lea ecx, [esp + 0x1c8]
movq xmm1, qword [esp + 0x158]
mov dword [esp + 0x1b0], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1b4], eax
mov dword [esp + 0x1b8], esi
mov dword [esp + 0x1bc], edi
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c0], 0
movsd qword [ecx + 0x18], xmm0
movsd xmm0, qword [esp + 0x160]
mov eax, dword [esp + 0x12c]
movq qword [ecx + 8], xmm1
movsd qword [ecx + 0x10], xmm0
movsd xmm0, qword [esp + 0x150]
movsd qword [ecx], xmm0
mov dword [esp + 0x1e8], eax
mov eax, dword [esp + 0x144]
movsd xmm0, qword [esp + 0x178]
mov dword [esp + 0x1ec], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x1f0], eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x1f4], eax
mov eax, dword [esp + 0xdc]
mov dword [esp + 0x1f8], eax
mov eax, dword [esp + 0x2c0]
mov dword [esp + 0x1fc], eax
mov eax, dword [esp + 0xd8]
mov dword [esp + 0x200], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x204], eax
mov eax, dword [esp + 0x108]
mov dword [esp + 0x208], eax
mov eax, dword [esp + 0x180]
movsd qword [ecx + 0x44], xmm0
movsd xmm0, qword [esp + 0x188]
mov dword [ecx + 0x4c], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x218], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x21c], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x220], eax
mov eax, dword [esp + 0x190]
movsd qword [ecx + 0x5c], xmm0
mov dword [ecx + 0x64], eax
movzx eax, byte [esp + 0x2e]
mov ecx, dword [esp + 0x14c]
mov byte [esp + 0x230], al
movzx eax, byte [esp + 0x2f]
mov edx, ecx
xor edx, 0x2e
or edx, dword [esp + 0x148]
mov byte [esp + 0x231], al
mov eax, dword [esp + 8]
mov word [esp + 0x232], ax
mov eax, dword [esp + 0x130]
mov dword [esp + 0x234], eax
mov eax, dword [esp + 0x110]
mov dword [esp + 0x238], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x23c], eax
movzx eax, byte [esp + 0x94]
mov byte [esp + 0x240], al
movzx eax, byte [esp + 0x97]
mov byte [esp + 0x241], al
movzx eax, byte [esp + 0x4f]
mov byte [esp + 0x242], al
movzx eax, byte [esp + 0x96]
mov byte [esp + 0x243], al
movzx eax, byte [esp + 0x95]
mov byte [esp + 0x244], al
movzx eax, byte [esp + 0x4e]
mov byte [esp + 0x245], al
jne 0x436a69
lea eax, [esp + 0x1a0]
push 0x108
push eax
push ebx
call sub.msvcrt.dll_memcpy
add esp, 0xc
jmp 0x4360c4
add eax, ecx
cmp edx, 4
jae 0x436a9a
mov ecx, eax
xor edi, edi
mov bl, 0x13
shr ecx, 8
jmp 0x436ace
mov eax, ecx
and al, 0x3f
cmp al, 0xc
je 0x436b30
and ecx, 0x3f
jne 0x436b5e
mov edi, dword [esp + 0x70]
shr edi, 8
xor esi, esi
mov cl, 1
xor ebx, ebx
xor edx, edx
mov dword [esp + 0x34], 0
jmp 0x436bcc
movzx ecx, byte [esp + 0x268]
mov dword [esp + 0xdc], edi
lea edi, [edx - 4]
lea ebx, [eax + 4]
mov byte [esp + 0x2f], 4
mov byte [esp + 0x2e], cl
mov ecx, dword [eax]
cmp ecx, 0xffffffef
jbe 0x436b1a
cmp ecx, 0xffffffff
je 0x436c36
xor ecx, ecx
mov bl, 0x10
xor edi, edi
mov byte [esp + 0x50], al
mov eax, edi
mov word [esp + 0x55], di
mov dword [esp + 0x51], ecx
shld edi, ecx, 8
shr eax, 0x10
mov byte [esp + 0x57], al
mov edx, dword [esp + 0x50]
shl esi, 8
movzx eax, bl
mov ecx, dword [esp + 0x74]
or eax, esi
mov esi, dword [esp + 0x1c]
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], esi
mov dword [ecx + 0x10], edx
mov dword [ecx + 0x14], edi
mov dword [ecx + 4], 0
mov dword [ecx], 2
jmp 0x435fd7
mov eax, ecx
cmp edi, eax
jae 0x436d13
mov edx, ebx
xor edi, edi
mov bl, 0x13
mov dword [esp + 0x1c], edx
jmp 0x436aec
mov eax, dword [esp + 0x114]
mov ebx, dword [esp + 0x298]
mov esi, dword [eax + 0xc]
mov ecx, dword [eax + 8]
sub esi, ebx
jae 0x436b74
mov al, 0x13
mov dword [esp + 0x9f], ecx
mov dword [esp + 0xa3], 0
jmp 0x436b91
mov dword [esp + 0x70], eax
xor esi, esi
xor ebx, ebx
xor ecx, ecx
mov dword [esp + 0x34], 0
xor edx, edx
jmp 0x436bcc
movzx eax, byte [esp + 0x268]
mov byte [esp + 8], al
movzx edi, al
mov eax, dword [esp + 0x70]
mul edi
jno 0x436c9f
mov al, 0x35
mov dword [esp + 8], eax
movzx ecx, byte [esp + 0xa2]
movzx edi, word [esp + 0xa0]
movzx eax, byte [esp + 0x9f]
xor ebx, ebx
mov esi, 1
shl ecx, 0x10
mov dword [esp + 0x70], eax
or edi, ecx
mov ecx, dword [esp + 0xa3]
mov dword [esp + 0x7c], ecx
mov ecx, dword [esp + 8]
mov eax, edx
movzx ecx, cl
shl edi, 8
shl eax, 8
or ecx, eax
movzx eax, byte [esp + 0x70]
or eax, edi
or esi, ebx
je 0x436c12
mov esi, dword [esp + 0x74]
mov edi, dword [esp + 0x34]
mov dword [esi + 8], ecx
mov ecx, dword [esp + 0x7c]
shld edi, edx, 8
mov dword [esi + 0xc], edi
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], ecx
mov dword [esi + 4], 0
mov dword [esi], 2
jmp 0x435fd7
mov ebx, dword [esp + 0x74]
cmp ecx, 1
jne 0x436a3c
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x288], eax
mov dword [esp + 0x28c], ecx
jmp 0x436a3c
cmp edi, 8
jae 0x436cf2
mov dword [esp + 0x3f], ebx
xor edi, edi
mov bl, 0x13
movzx eax, byte [esp + 0x42]
movq xmm0, qword [esp + 0x38]
mov byte [esp + 0xa2], al
movzx eax, word [esp + 0x40]
movd esi, xmm0
mov word [esp + 0xa0], ax
movq qword [esp + 0x98], xmm0
shufps xmm0, xmm0, 0x55
mov dword [esp + 0xa3], 0
movd eax, xmm0
shld eax, esi, 8
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x9f]
mov ecx, eax
shr ecx, 8
jmp 0x436ace
mov edx, esi
add ecx, ebx
sub edx, eax
jb 0x436b48
dec edi
cmp edi, 7
ja 0x436e9d
mov ebx, dword [esp + 0x34]
add ecx, eax
add ebx, dword [edi*4 + 0x4381ec]
jmp ebx
cmp dword [ebx + 4], 0
jne 0x436d6c
mov edi, dword [ebx]
add eax, 0xc
add edx, 0xfffffff4
mov byte [esp + 0x2f], 8
mov ebx, eax
mov eax, edi
mov edi, edx
cmp edi, eax
jb 0x436b24
cmp eax, 2
mov edx, ebx
jae 0x436d23
mov bl, 0x13
xor edi, edi
jmp 0x4366e6
movzx edi, word [edx]
mov dword [esp + 0x110], eax
mov eax, edi
add eax, 0xfffffffa
cmp ax, 0xfffc
jae 0x436d44
movzx edx, di
mov bl, 0x11
xor edi, edi
jmp 0x4366e6
mov eax, dword [esp + 0x110]
add edx, 2
cmp di, 4
lea eax, [eax - 2]
jbe 0x436d77
test eax, eax
je 0x436d1a
cmp dword [esp + 0x110], 3
jne 0x436dd9
mov edx, ebx
add edx, 3
jmp 0x436d1a
xor ecx, ecx
mov bl, 0x35
xor edi, edi
jmp 0x436ace
mov dword [esp + 8], edx
cmp ecx, 0xfffffff0
jb 0x436f25
cmp eax, 8
jae 0x436ed4
mov esi, dword [esp + 8]
mov bl, 0x13
mov dword [esp + 0x9f], esi
and esi, 0xffffff00
movq xmm0, qword [esp + 0x98]
movdqa xmm1, xmm0
movd ecx, xmm0
movdqa xmmword [esp + 0x300], xmm0
shufps xmm1, xmm0, 0x55
movzx edx, byte [esp + 0x307]
movd eax, xmm1
shld eax, ecx, 8
mov ecx, esi
mov dword [esp + 0x1c], eax
jmp 0x436f38
lea edx, [ebx + 4]
movzx eax, byte [ebx + 2]
mov dword [esp + 0x24], edx
mov dword [esp + 8], edx
cmp byte [ebx + 3], 0
je 0x436f0e
mov bl, 0x41
jmp 0x4366e6
movzx eax, byte [esp + 8]
movzx ecx, word [esp + 0x9c]
mov byte [esp + 0x98], al
movzx eax, byte [esp + 0x9e]
mov edx, dword [esp + 0x98]
shl eax, 0x10
or ecx, eax
mov al, 0x17
mov dword [esp + 0x34], ecx
mov dword [esp + 8], eax
jmp 0x436b95
mov ecx, eax
mov eax, dword [esp + 8]
cmp dword [eax + 4], 0
jne 0x436f08
mov edx, dword [eax]
add eax, 8
add ecx, 0xfffffff8
mov dword [esp + 0x5c], eax
mov eax, edx
jmp 0x436f62
mov bl, 0x35
xor ecx, ecx
jmp 0x436f38
mov edx, dword [esp + 0x110]
mov byte [esp + 0x2e], al
lea eax, [edx - 4]
cmp ecx, 0xfffffff0
jae 0x436d84
cmp eax, 4
jae 0x436f48
mov edx, dword [esp + 8]
mov bl, 0x13
mov ecx, edx
and ecx, 0xffffff00
movzx edx, dl
movd esi, xmm0
xor edi, edi
or edx, ecx
jmp 0x436aec
mov ecx, eax
mov eax, dword [esp + 8]
add ecx, 0xfffffffc
lea edx, [eax + 4]
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], ecx
mov dword [esp + 0x5c], edx
mov eax, dword [eax]
sub ecx, eax
jb 0x436ff4
test eax, eax
mov dword [esp + 0x19c], ecx
mov dword [esp + 8], edi
mov dword [esp + 0x10c], eax
je 0x436ff4
mov eax, dword [esp + 0x5c]
movzx eax, byte [eax]
test al, al
mov byte [esp + 0x97], al
je 0x437001
mov eax, dword [esp + 0x10c]
cmp word [esp + 8], 4
mov byte [esp + 0x4f], 1
lea ecx, [eax - 1]
mov eax, dword [esp + 0x5c]
lea eax, [eax + 1]
jb 0x436fdd
test ecx, ecx
je 0x43705b
mov eax, dword [esp + 0x10c]
lea ecx, [eax - 2]
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x28], ecx
movzx eax, byte [eax + 1]
test al, al
mov byte [esp + 0x4f], al
je 0x437051
mov eax, dword [esp + 0x5c]
add eax, 2
test ecx, ecx
je 0x43705b
lea edi, [eax + 1]
cmp ecx, 1
mov dword [esp + 0x24], edi
jne 0x437008
mov edx, edi
jmp 0x436d1a
mov edx, dword [esp + 0x5c]
mov bl, 0x13
xor edi, edi
jmp 0x4366e6
mov bl, 0x1a
jmp 0x4366e6
movzx edx, byte [eax]
mov edi, ecx
add edi, 0xfffffffe
mov dword [esp + 0x28], edi
je 0x437058
mov dh, byte [eax + 1]
lea edi, [eax + 3]
mov dword [esp + 0x24], edi
mov byte [esp + 0x96], dh
mov dh, byte [eax + 2]
test dh, dh
mov byte [esp + 0x95], dh
je 0x437064
test dl, dl
setne byte [esp + 0x94]
cmp ecx, 3
jne 0x43706b
mov ebx, edi
xor edi, edi
mov edx, ebx
mov bl, 0x13
jmp 0x436aec
mov bl, 0x1b
jmp 0x4366e6
add eax, 2
mov bl, 0x13
xor edi, edi
jmp 0x4366e4
mov bl, 0x1c
jmp 0x4366e6
movzx edx, byte [eax + 3]
test dl, dl
mov byte [esp + 0x4e], dl
je 0x4370b1
movzx ebx, byte [esp + 0x4e]
lea edx, [ecx - 4]
lea edi, [eax + 4]
mov dword [esp + 0x12c], edi
dec bl
movzx ebx, bl
sub edx, ebx
mov edi, ebx
mov dword [esp + 0x144], ebx
jae 0x4370b8
mov eax, dword [esp + 0x12c]
mov bl, 0x13
xor edi, edi
mov edx, eax
mov dword [esp + 0x1c], eax
jmp 0x436aec
mov bl, 0x1d
jmp 0x4366e6
mov edi, dword [esp + 0x12c]
mov ebx, dword [esp + 0x144]
cmp word [esp + 8], 4
mov dword [esp + 0x118], 0
mov dword [esp + 0x11c], 8
mov dword [esp + 0x120], 0
lea edi, [edi + ebx]
mov dword [esp + 0x24], edi
mov dword [esp], edi
mov dword [esp + 0x28], edx
ja 0x4371d3
test edx, edx
je 0x43730c
add eax, ecx
mov dword [esp + 4], 0
mov dword [esp + 0x14], 8
mov dword [esp + 0x1c], edi
mov edi, dword [esp]
xor ebx, ebx
cmp byte [edi + ebx], 0
je 0x437138
lea ecx, [edi + ebx + 1]
inc ebx
cmp ecx, eax
jne 0x437124
jmp 0x4372ca
mov eax, ebx
lea ecx, [edi + ebx + 1]
not eax
mov dword [esp + 0x24], ecx
add edx, eax
test ebx, ebx
mov dword [esp + 0x28], edx
je 0x437610
mov eax, dword [esp + 4]
cmp eax, dword [esp + 0x118]
jne 0x437185
mov edx, dword [esp + 4]
lea ecx, [esp + 0x118]
call fcn.0043b100
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x120]
mov dword [esp + 0x14], eax
mov dword [esp + 4], ecx
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x1c], edi
mov eax, ecx
inc ecx
shl eax, 4
mov dword [esp + 4], ecx
mov dword [edx + eax + 4], 0
mov dword [edx + eax], 0x1f
mov dword [edx + eax + 8], edi
mov dword [edx + eax + 0xc], ebx
mov dword [esp + 0x120], ecx
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x28]
mov dword [esp], eax
add eax, edx
test edx, edx
jne 0x43711b
jmp 0x43730c
lea ecx, [esp + 0x98]
lea edx, [esp + 0x24]
call fcn.0043a0f0
movzx eax, byte [esp + 0x98]
cmp al, 0x4b
mov dword [esp + 0x18], eax
jne 0x4372cf
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x9c]
mov edx, dword [esp + 0xa0]
mov dword [esp], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0xd8], eax
mov dword [esp + 0x78], edx
test ecx, ecx
je 0x437353
mov eax, ecx
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp]
mov dword [esp + 0x30], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x108], ecx
lea ecx, [edx + eax]
dec eax
inc edx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], eax
mov dword [esp], edx
xor ecx, ecx
mov eax, dword [esp]
cmp ecx, 0x3f
movzx eax, byte [eax - 1]
mov byte [esp + 4], al
jne 0x437273
cmp byte [esp + 4], 2
jae 0x43735b
movzx ebx, byte [esp + 4]
xor edi, edi
mov eax, 0
mov edx, ebx
and dl, 0x7f
movzx edx, dl
shld edi, edx, cl
shl edx, cl
test cl, 0x20
cmovne edi, edx
cmovne edx, eax
or dword [esp + 0x48], edi
or dword [esp + 0x30], edx
test bl, bl
jns 0x4373d2
add ecx, 7
inc dword [esp]
add dword [esp + 0x14], 0xffffffff
jb 0x437258
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0
mov dword [esp], eax
jmp 0x437353
mov dword [esp], edi
jmp 0x43730c
movzx eax, byte [esp + 0x9b]
movzx esi, word [esp + 0x99]
mov edi, dword [esp + 0xa4]
mov bl, 1
shl eax, 0x10
or esi, eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x50], eax
mov dword [esp], eax
mov dword [esp + 0x54], edi
jmp 0x437388
mov eax, dword [esp]
mov dword [esp + 0x78], 2
xor edi, edi
mov dword [esp + 0xd8], 0
xor ebx, ebx
mov dword [esp + 0x50], eax
mov al, 0x13
mov dword [esp + 0x54], 0
mov dword [esp + 0x18], eax
jmp 0x437388
mov edx, 5
mov ecx, ebx
push 0x464850
call fcn.00407aa0
add esp, 4
jmp 0x437f8a
mov al, 0x13
mov dword [esp + 0x18], eax
jmp 0x437370
mov eax, dword [esp]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x28], eax
mov al, 6
mov dword [esp + 0x18], eax
mov eax, dword [esp]
movzx esi, byte [esp + 4]
xor edi, edi
xor ebx, ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
cmp dword [esp + 0x118], 0
je 0x4373a6
push dword [esp + 0x11c]
push 0
push dword [0x4760c0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0xd8], 0
sete al
or bl, al
jne 0x4373c6
push dword [esp + 0x78]
push 0
push dword [0x4760c0]
call sub.kernel32.dll_HeapFree
mov edx, dword [esp]
mov ebx, dword [esp + 0x18]
jmp 0x436aec
mov ecx, dword [esp + 0x30]
mov eax, dword [esp]
mov edx, dword [esp + 0x14]
or ecx, dword [esp + 0x48]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], edx
je 0x4375e8
cmp dword [esp + 0x108], 0
je 0x437f74
movzx eax, byte [esp + 0x2f]
movzx ecx, byte [esp + 0x2e]
mov dword [esp + 0xc], 0
mov dword [esp + 0xd0], 8
mov dword [esp + 0x104], 0
mov dword [esp + 0xd4], 0
shl eax, 8
lea eax, [eax + ecx + 0x50000]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x108]
lea eax, [eax*4]
mov dword [esp + 0x10], eax
add dword [esp + 0x104], 1
mov dword [esp + 4], 0x2e
mov dword [esp + 0x14], 0
adc dword [esp + 0xd4], 0
xor ebx, ebx
mov eax, dword [esp + 0x78]
movzx eax, word [eax + ebx + 2]
lea ecx, [esp + 0x98]
lea edx, [esp + 0x24]
push eax
push dword [esp + 0x94]
call fcn.0043a490
add esp, 8
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0xa0]
mov edi, dword [esp + 0xac]
or eax, dword [esp + 0x9c]
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x1c], eax
mov dword [esp], ecx
jne 0x4375cf
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0x20]
cmp word [eax + ebx], 1
cmove ecx, dword [esp]
cmove edx, edi
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x14]
mov dword [esp + 0xdc], ecx
mov ecx, dword [esp + 4]
cmove edx, dword [esp + 0x1c]
cmove ecx, dword [esp + 0x18]
add ebx, 4
cmp dword [esp + 0x10], ebx
mov dword [esp + 0x14], edx
mov dword [esp + 4], ecx
jne 0x437475
mov eax, dword [esp + 4]
xor eax, 0x2e
or eax, dword [esp + 0x14]
je 0x437f74
mov eax, dword [esp + 0xc]
cmp eax, dword [esp + 0x118]
jne 0x437568
mov edx, dword [esp + 0xc]
lea ecx, [esp + 0x118]
call fcn.0043b100
mov eax, dword [esp + 0x11c]
mov ecx, dword [esp + 0x120]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xd0]
mov edi, dword [esp + 4]
mov eax, ecx
inc ecx
shl eax, 4
mov dword [esp + 0xc], ecx
mov dword [edx + eax], edi
mov edi, dword [esp + 0x14]
mov dword [edx + eax + 4], edi
mov edi, dword [esp + 0xdc]
mov dword [edx + eax + 8], edi
mov edi, dword [esp + 0x20]
mov dword [edx + eax + 0xc], edi
mov edi, dword [esp + 0x104]
mov edx, dword [esp + 0xd4]
mov dword [esp + 0x120], ecx
cmp edi, dword [esp + 0x30]
sbb edx, dword [esp + 0x48]
jb 0x437453
mov dword [esp + 0xdc], 0
jmp 0x43762e
mov esi, dword [esp + 0x18]
mov eax, dword [esp]
mov dword [esp + 0x54], edi
xor ebx, ebx
shr esi, 8
mov dword [esp + 0x50], eax
jmp 0x437388
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 8
mov dword [esp + 0x40], 0
mov dword [esp + 0xdc], 0
jmp 0x437847
mov dword [esp + 0x78], 2
mov dword [esp + 0x108], 0
mov dword [esp + 0xd8], 0
cmp word [esp + 8], 5
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 8
mov dword [esp + 0x40], 0
jae 0x437847
test esi, esi
mov eax, 0x2e
mov ecx, 0x1f
cmove ecx, eax
mov eax, dword [esp + 0x24]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [esp + 0x28]
test eax, eax
je 0x437eb6
mov ecx, dword [esp]
mov dword [esp + 0x14], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x48], 8
add ecx, eax
mov edx, dword [esp + 0x20]
mov edi, dword [esp]
xor ebx, ebx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], edi
mov edx, dword [esp + 0x20]
cmp byte [edx + ebx], 0
je 0x4376c2
mov edx, dword [esp + 0x20]
lea edx, [edx + ebx + 1]
inc ebx
cmp edx, ecx
jne 0x4376a6
jmp 0x43797d
mov ecx, ebx
not ecx
add eax, ecx
mov ecx, dword [esp + 0x20]
test ebx, ebx
lea ecx, [ecx + ebx + 1]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
je 0x437f38
lea ecx, [esp + 0x98]
lea edx, [esp + 0x24]
push ebx
push dword [esp + 0x24]
call fcn.0042ca90
add esp, 8
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 0xa4]
mov edi, dword [esp + 0xac]
mov dword [esp + 0x90], eax
xor eax, 0x2e
mov dword [esp + 0x10], ecx
mov dword [esp + 0x1c], edx
or eax, ecx
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x18], eax
mov dword [esp], ecx
je 0x437f55
lea eax, [esp + 0xb0]
mov ecx, dword [esp + 0x30]
movsd xmm1, qword [eax + 0x10]
movq xmm0, qword [eax + 0x18]
movsd xmm2, qword [eax]
cmp ecx, dword [esp + 0x38]
movsd qword [esp + 0xf0], xmm1
movq xmm1, qword [eax + 8]
movq qword [esp + 0xf8], xmm0
movsd qword [esp + 0xe0], xmm2
movq qword [esp + 0xe8], xmm1
jne 0x4377a8
mov edx, dword [esp + 0x30]
lea ecx, [esp + 0x38]
call fcn.0042cdb0
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x48], eax
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x48]
mov ecx, dword [esp + 0x10]
imul eax, edx, 0x38
inc edx
mov dword [ebx + eax + 4], ecx
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x30], edx
mov dword [ebx + eax], ecx
mov ecx, dword [esp + 0x18]
mov dword [ebx + eax + 8], ecx
mov ecx, dword [esp + 0x1c]
mov dword [ebx + eax + 0xc], ecx
mov ecx, dword [esp]
mov dword [ebx + eax + 0x10], ecx
mov dword [ebx + eax + 0x14], edi
movsd xmm0, qword [esp + 0xe0]
movq xmm1, qword [esp + 0xe8]
movsd qword [ebx + eax + 0x18], xmm0
movq qword [ebx + eax + 0x20], xmm1
movsd xmm0, qword [esp + 0xf0]
movsd qword [ebx + eax + 0x28], xmm0
movq xmm0, qword [esp + 0xf8]
movq qword [ebx + eax + 0x30], xmm0
mov dword [esp + 0x40], edx
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
mov dword [esp + 0x1c], edx
mov dword [esp], ecx
add ecx, eax
test eax, eax
jne 0x437695
jmp 0x437eb6
lea ecx, [esp + 0x98]
lea edx, [esp + 0x24]
call fcn.0043a0f0
movzx eax, byte [esp + 0x98]
cmp al, 0x4b
mov dword [esp + 0x18], eax
jne 0x437935
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x9c]
mov edx, dword [esp + 0xa0]
mov dword [esp], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x30], eax
mov dword [esp + 0x20], edx
test ecx, ecx
je 0x437975
mov eax, ecx
mov ecx, dword [esp + 0xa4]
mov esi, dword [esp]
mov dword [esp + 0x14], 0
mov dword [esp + 0x90], 0
mov ebx, 0
mov dword [esp + 0x48], ecx
lea ecx, [esi + eax]
dec eax
inc esi
mov dword [esp + 0x1c], ecx
mov dword [esp + 4], eax
xor ecx, ecx
movzx eax, byte [esi - 1]
cmp ecx, 0x3f
mov edx, esi
mov byte [esp + 0x60], al
jne 0x4378e5
cmp byte [esp + 0x60], 2
jae 0x437989
movzx eax, byte [esp + 0x60]
xor edi, edi
mov edx, eax
and dl, 0x7f
movzx edx, dl
shld edi, edx, cl
shl edx, cl
test cl, 0x20
cmovne edi, edx
cmovne edx, ebx
or dword [esp + 0x90], edi
or dword [esp + 0x14], edx
test al, al
jns 0x4379b8
add ecx, 7
inc esi
add dword [esp + 4], 0xffffffff
jb 0x4378cb
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], 0
mov dword [esp], eax
jmp 0x437975
movzx eax, byte [esp + 0x9b]
movzx esi, word [esp + 0x99]
mov edi, dword [esp + 0xa4]
mov bl, 1
shl eax, 0x10
or esi, eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xa0]
mov dword [esp + 0x50], eax
mov dword [esp], eax
mov dword [esp + 0x54], edi
jmp 0x437ef5
mov al, 0x13
mov dword [esp + 0x18], eax
jmp 0x43799b
mov eax, dword [esp + 0x20]
mov dword [esp], eax
jmp 0x437eb6
mov eax, dword [esp + 4]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], eax
mov al, 6
mov dword [esp + 0x18], eax
mov eax, dword [esp]
movzx esi, byte [esp + 0x60]
xor edi, edi
xor ebx, ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0
jmp 0x437ef5
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 4]
mov dword [esp + 0x24], esi
or ecx, dword [esp + 0x90]
mov dword [esp + 0x28], eax
je 0x437e1e
cmp dword [esp + 0x48], 0
je 0x437f80
movzx eax, byte [esp + 0x2f]
movzx ecx, byte [esp + 0x2e]
mov dword [esp + 0x100], 0
mov dword [esp + 0x134], 8
mov dword [esp + 0x13c], 0
mov dword [esp + 0x138], 0
shl eax, 8
lea esi, [eax + ecx + 0x50000]
mov eax, dword [esp + 0x48]
lea eax, [eax*4]
mov dword [esp + 0x104], eax
add dword [esp + 0x13c], 1
pxor xmm0, xmm0
mov dword [esp + 0xd4], 0x2e
mov dword [esp + 0xd0], 0
mov dword [esp + 0x140], 0
mov dword [esp + 0x60], 0
mov dword [esp + 4], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x8c], 0
mov dword [esp + 0x88], 0
movdqa xmmword [esp + 0x2f0], xmm0
adc dword [esp + 0x138], 0
xor ebx, ebx
jmp 0x437ae5
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov dword [esp + 4], ecx
add ebx, 4
cmp dword [esp + 0x104], ebx
je 0x437d22
mov eax, dword [esp + 4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x20]
movzx eax, word [eax + ebx + 2]
lea ecx, [esp + 0x98]
lea edx, [esp + 0x24]
push eax
push esi
call fcn.0043a490
add esp, 8
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0xa0]
mov edi, dword [esp + 0xac]
or eax, dword [esp + 0x9c]
mov dword [esp + 0x18], ecx
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0xa8]
mov dword [esp + 0x1c], eax
mov dword [esp], ecx
jne 0x437ee1
mov eax, dword [esp + 0x20]
movzx ecx, word [eax + ebx]
dec ecx
cmp ecx, 4
ja 0x437ac5
mov ecx, dword [ecx*4 + 0x438190]
mov eax, dword [esp]
add ecx, dword [esp + 0x34]
shr eax, 8
jmp ecx
mov eax, dword [esp + 0xd4]
xor eax, 0x2e
or eax, dword [esp + 0xd0]
je 0x437f80
mov eax, dword [esp + 0x100]
cmp eax, dword [esp + 0x38]
jne 0x437d6c
mov edx, dword [esp + 0x100]
lea ecx, [esp + 0x38]
call fcn.0042cdb0
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
mov dword [esp + 0x134], eax
mov dword [esp + 0x100], ecx
mov ecx, dword [esp + 0x100]
mov edx, dword [esp + 0x134]
mov edi, dword [esp + 0xd0]
movdqa xmm0, xmmword [esp + 0x2f0]
imul eax, ecx, 0x38
inc ecx
mov dword [edx + eax + 4], edi
mov edi, dword [esp + 0xd4]
mov dword [esp + 0x100], ecx
mov dword [edx + eax], edi
mov edi, dword [esp + 0x198]
mov dword [edx + eax + 8], edi
mov edi, dword [esp + 0x140]
mov dword [edx + eax + 0xc], edi
mov edi, dword [esp + 0x60]
mov dword [edx + eax + 0x10], edi
mov edi, dword [esp + 4]
mov dword [edx + eax + 0x14], edi
mov edi, dword [esp + 0x80]
mov dword [edx + eax + 0x1c], edi
mov edi, dword [esp + 0x84]
mov dword [edx + eax + 0x18], edi
mov edi, dword [esp + 0x88]
mov dword [edx + eax + 0x24], edi
mov edi, dword [esp + 0x8c]
mov dword [edx + eax + 0x20], edi
mov edi, dword [esp + 0x13c]
movdqu xmmword [edx + eax + 0x28], xmm0
mov edx, dword [esp + 0x138]
mov dword [esp + 0x40], ecx
cmp edi, dword [esp + 0x14]
sbb edx, dword [esp + 0x90]
jb 0x437a32
mov dword [esp + 0x14], 0
mov dword [esp + 4], 0x2e
mov dword [esp + 0x60], 0
movsd xmm0, qword [esp + 0x118]
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x120]
mov ecx, dword [esp + 0x40]
mov ebx, dword [esp + 0x74]
mov edi, dword [esp + 0x60]
movsd qword [esp + 0x178], xmm0
movsd xmm0, qword [esp + 0x38]
add eax, dword [esp + 0x10c]
mov dword [esp + 0x180], edx
mov dword [esp + 0x190], ecx
movsd qword [esp + 0x188], xmm0
xorps xmm0, xmm0
mov dword [esp + 0x5c], eax
movaps xmmword [esp + 0x150], xmm0
movaps xmmword [esp + 0x160], xmm0
mov eax, dword [esp + 0x1b0]
xor eax, 0x2f
or eax, dword [esp + 0x1b4]
jne 0x4367cc
jmp 0x436844
mov eax, dword [esp]
mov dword [esp + 0x20], 2
xor edi, edi
mov dword [esp + 0x50], eax
mov al, 0x13
mov dword [esp + 0x54], 0
mov dword [esp + 0x18], eax
mov dword [esp + 0x30], 0
xor ebx, ebx
jmp 0x437ef5
mov esi, dword [esp + 0x18]
mov eax, dword [esp]
xor ebx, ebx
mov dword [esp + 0x50], eax
shr esi, 8
mov dword [esp + 0x54], edi
cmp dword [esp + 0x38], 0
je 0x437f0d
push dword [esp + 0x3c]
push 0
push dword [0x4760c0]
call sub.kernel32.dll_HeapFree
cmp dword [esp + 0x30], 0
sete al
or bl, al
je 0x437f20
xor ebx, ebx
jmp 0x437388
push dword [esp + 0x20]
push 0
push dword [0x4760c0]
call sub.kernel32.dll_HeapFree
xor ebx, ebx
jmp 0x437388
mov dword [esp + 0x20], 2
mov dword [esp + 0x30], 0
mov dword [esp + 0x48], 0
jmp 0x437e36
mov esi, dword [esp + 0x18]
mov eax, dword [esp]
mov dword [esp + 0x20], 2
shr esi, 8
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edi
jmp 0x437ed5
mov ecx, 0x465d20
call fcn.00408ba0
jmp 0x437f8a
mov ecx, 0x465d10
call fcn.00408ba0
ud2