Function at 0x425e60
Capabilities:
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x3d0
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov edx, dword [0x567b10]
xor edx, ebp
mov dword [esp + 0x3c8], edx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x74], eax
cmp byte [0x569250], 0
jne 0x425ec0
push str.LLVM_DISABLE_SYMBOLIZATION
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
add esp, 4
test eax, eax
jne 0x425ec0
lea esi, [esp + 0x70]
mov ecx, esi
push 0
push 0xf
push str.llvm_symbolizer
call fcn.00422e50
cmp eax, 0xffffffff
je 0x425eda
xor ebx, ebx
mov ecx, dword [esp + 0x3c8]
xor ecx, ebp
call fcn.00533ace
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [0x568c58]
mov ecx, dword [0x5698e8]
mov edx, dword fs:[0x2c]
mov ecx, dword [edx + ecx*4]
cmp eax, dword [ecx + 0xc]
jg 0x426d2b
or byte [esp + 0x3c4], 1
mov dword [esp + 0x3ac], 0
mov dword [esp + 0x3b0], 0x567398
push str.LLVM_SYMBOLIZER_PATH
call dword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
add esp, 4
test eax, eax
je 0x425f9f
mov edi, eax
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
lea ebx, [esp + 0x78]
push 0
push 0
push eax
push edi
push ebx
call fcn.0043ad10
add esp, 0x14
lea ecx, [esp + 0x3ac]
push ebx
call fcn.00426d80
test byte [esp + 0x90], 1
jne 0x425fdb
mov eax, dword [esp + 0x8c]
cmp eax, 0x10
jb 0x425fdb
mov ecx, dword [esp + 0x78]
lea edi, [eax + 1]
cmp edi, 0x1000
jb 0x425f93
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x426d64
add eax, 0x24
mov edi, eax
mov ecx, edx
push edi
push ecx
call fcn.00533ac0
add esp, 8
jmp 0x425fdb
mov eax, dword [esp + 0x74]
test eax, eax
je 0x425fdb
lea edi, [esp + 0x270]
push 2
push eax
push dword [esp + 0x78]
push edi
call fcn.0042c270
add esp, 0x10
cmp dword [esp + 0x274], 0
je 0x425fdb
lea ebx, [esp + 0x78]
push 1
push edi
push 0xf
push str.llvm_symbolizer
jmp 0x425f40
mov al, byte [esp + 0x3c4]
test al, 1
je 0x426059
lea edi, [esp + 0x78]
push 0
push 0
push 0xf
push str.llvm_symbolizer
push edi
call fcn.0043ad10
add esp, 0x14
lea ecx, [esp + 0x3ac]
push edi
call fcn.00426d80
test byte [esp + 0x90], 1
jne 0x426052
mov eax, dword [esp + 0x8c]
cmp eax, 0x10
jb 0x426052
mov ecx, dword [esp + 0x78]
lea edi, [eax + 1]
cmp edi, 0x1000
jb 0x426048
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x426d64
add eax, 0x24
mov edi, eax
mov ecx, edx
push edi
push ecx
call fcn.00533ac0
add esp, 8
mov al, byte [esp + 0x3c4]
test al, 1
jne 0x42615a
mov word [esp + 0x80], 0x105
mov dword [esp + 0x78], esi
lea eax, [esp + 0x78]
lea ebx, [esp + 0x270]
push 0
push eax
push ebx
call fcn.004310d0
add esp, 0xc
cmp dword [esp + 0x270], 0
je 0x426169
lea eax, [esp + 0x394]
push 0
push 0
push eax
call fcn.0042fc30
add esp, 0xc
mov dword [esp + 0x35c], 0
mov dword [esp + 0x360], 0
lea eax, [esp + 0x370]
mov dword [esp + 0x364], eax
mov dword [esp + 0x368], 0
mov dword [esp + 0x36c], 4
lea eax, [esp + 0x38c]
mov dword [esp + 0x380], eax
movaps xmm0, xmmword [0x536710]
movups xmmword [esp + 0x384], xmm0
lea eax, [esp + 0x358]
mov dword [esp + 0x6c], eax
mov esi, dword [ebp + 0x14]
test esi, esi
je 0x4261c7
cmp esi, 0x40000000
jae 0x426d6a
lea ebx, [esi*4]
cmp esi, 0x400
jb 0x4261e0
cmp esi, 0x3ffffff8
jae 0x426d6f
lea eax, [ebx + 0x23]
push eax
call fcn.00533f15
add esp, 4
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x4261eb
xor ebx, ebx
test al, 1
je 0x426c80
jmp 0x425ec2
mov ecx, 0xf
mov eax, dword [esp + 0x70]
test eax, eax
je 0x4266e0
mov esi, dword [esp + 0x74]
mov dword [esp + 0x3a8], ecx
mov dword [esp + 0x3a4], 0
mov byte [esp + 0x394], 0
cmp esi, 0xf
jbe 0x4266ff
sub esp, 0xc
mov cl, byte [esp + 0x27c]
mov byte [esp + 4], cl
mov dword [esp + 8], eax
mov dword [esp], esi
lea ecx, [esp + 0x3a0]
call fcn.00404140
jmp 0x4260a8
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
xor eax, eax
xor ecx, ecx
jmp 0x426272
push ebx
call fcn.00533f15
add esp, 4
mov edi, eax
push ebx
push 0
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esp + 8], edi
lea eax, [edi + esi*4]
mov dword [esp + 0xc], eax
mov esi, dword [ebp + 0x14]
test esi, esi
je 0x426249
cmp esi, 0x40000000
jae 0x426d74
lea ebx, [esi*4]
cmp esi, 0x400
jb 0x42624f
cmp esi, 0x3ffffff8
jae 0x426d6f
lea eax, [ebx + 0x23]
push eax
call fcn.00533f15
add esp, 4
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
mov eax, ecx
jmp 0x426258
xor eax, eax
xor ecx, ecx
jmp 0x42626b
push ebx
call fcn.00533f15
add esp, 4
push ebx
push 0
push eax
mov edi, eax
call sub.VCRUNTIME140.dll_memset
mov eax, edi
add esp, 0xc
lea ecx, [edi + esi*4]
lea ebx, [esp + 0x270]
mov esi, dword [0x5692d8]
test esi, esi
mov dword [esp + 0x18], ecx
je 0x4263ab
mov edx, eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
mov eax, dword [esp + 8]
mov dword [esp + 0x80], eax
mov dword [esp + 0x14], edx
mov dword [esp + 0x84], edx
lea eax, [esp + 0x6c]
mov dword [esp + 0x88], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea edi, [esp + 0x78]
push edi
push 0x4285c0
push eax
call esi
lea esi, [esp + 0x338]
mov dword [esp + 0x32c], esi
mov dword [esp + 0x330], 0
mov dword [esp + 0x334], 0x20
lea eax, [esp + 0x30c]
mov dword [esp + 0x300], eax
mov dword [esp + 0x304], 0
mov dword [esp + 0x308], 0x20
mov dword [esp + 0x78], str.symbolizer_input
mov word [esp + 0x80], 0x103
lea eax, [esp + 0x32c]
lea ecx, [esp + 0x68]
push eax
push ecx
push 0
push 0x535402
push edi
push ebx
call fcn.0042e5e0
add esp, 0x18
mov dword [esp + 0x78], str.symbolizer_output
mov word [esp + 0x80], 0x103
lea eax, [esp + 0x300]
push eax
push 0
push 0x535402
push edi
push ebx
call fcn.0042e7b0
add esp, 0x14
mov eax, dword [esp + 0x330]
lea edx, [eax + 1]
cmp edx, dword [esp + 0x334]
ja 0x426cc9
mov ecx, dword [esp + 0x32c]
mov byte [ecx + eax], 0
mov eax, dword [esp + 0x32c]
mov word [esp + 0x80], 0x101
cmp byte [eax], 0
je 0x4263ba
mov dword [esp + 0x78], eax
mov al, 3
jmp 0x4263bc
xor ebx, ebx
mov edi, dword [esp + 8]
mov esi, dword [esp + 0xc]
jmp 0x426bc3
mov al, 1
mov edi, dword [esp + 8]
mov byte [esp + 0x80], al
lea eax, [esp + 0x27c]
mov dword [esp + 0x270], eax
mov dword [esp + 0x274], 0
mov dword [esp + 0x278], 0x80
mov byte [esp + 0x2fc], 1
lea ecx, [esp + 0x78]
push ebx
call fcn.004385c0
mov eax, dword [esp + 0x304]
lea edx, [eax + 1]
cmp edx, dword [esp + 0x308]
ja 0x426ce5
mov ecx, dword [esp + 0x300]
mov byte [ecx + eax], 0
mov eax, dword [esp + 0x300]
mov word [esp + 0x80], 0x101
cmp byte [eax], 0
je 0x42643d
mov dword [esp + 0x78], eax
mov al, 3
jmp 0x42643f
mov al, 1
mov byte [esp + 0x80], al
lea eax, [esp + 0x1ec]
mov dword [esp + 0x1e0], eax
mov dword [esp + 0x1e4], 0
mov dword [esp + 0x1e8], 0x80
mov byte [esp + 0x26c], 1
lea eax, [esp + 0x1e0]
lea ecx, [esp + 0x78]
push eax
call fcn.004385c0
lea ecx, [esp + 0x78]
push 0
push 0
push 1
push dword [esp + 0x74]
call fcn.004177a0
cmp dword [ebp + 0x14], 0
jle 0x426558
xor esi, esi
jmp 0x4264b7
mov byte [ecx], 0xa
add dword [eax + 0x10], 1
add esi, 1
cmp esi, dword [ebp + 0x14]
jge 0x426558
mov ebx, dword [edi + esi*4]
test ebx, ebx
je 0x4264ab
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edi, eax
mov ecx, dword [esp + 0x84]
mov eax, dword [esp + 0x88]
sub ecx, eax
cmp ecx, edi
jae 0x4264ec
lea ecx, [esp + 0x78]
push edi
push ebx
call fcn.00416e70
mov ecx, eax
jmp 0x42650a
lea ecx, [esp + 0x78]
test edi, edi
je 0x42650a
push edi
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add dword [esp + 0x88], edi
lea ecx, [esp + 0x78]
mov eax, dword [ecx + 0x10]
cmp dword [ecx + 0xc], eax
je 0x42651b
mov byte [eax], 0x20
add dword [ecx + 0x10], 1
jmp 0x426529
push 1
push 0x537085
call fcn.00416e70
mov ecx, eax
mov edi, dword [esp + 8]
mov eax, dword [esp + 0x14]
push dword [eax + esi*4]
call fcn.00416d40
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0xc], ecx
jne 0x4264a4
mov ecx, eax
push 1
push 0x535f6b
call fcn.00416e70
jmp 0x4264ab
lea ebx, [esp + 0x78]
mov ecx, ebx
call fcn.00418600
mov eax, dword [esp + 0x32c]
mov ecx, dword [esp + 0x330]
mov dword [esp + 0x1bc], eax
mov dword [esp + 0x1c0], ecx
mov byte [esp + 0x1c4], 1
mov eax, dword [esp + 0x300]
mov ecx, dword [esp + 0x304]
mov dword [esp + 0x1c8], eax
mov dword [esp + 0x1cc], ecx
mov byte [esp + 0x1d0], 1
mov dword [esp + 0x1d4], 0x535402
mov dword [esp + 0x1d8], 0
mov byte [esp + 0x1dc], 1
movsd xmm0, qword [0x537a9c]
movsd qword [esp + 0x1b0], xmm0
movups xmm0, xmmword [0x537a8c]
movaps xmmword [esp + 0x1a0], xmm0
movups xmm0, xmmword [0x537a7c]
movaps xmmword [esp + 0x190], xmm0
mov byte [esp + 0x5c], 0
mov byte [esp + 0x64], 0
mov eax, dword [esp + 0x3bc]
cmp dword [esp + 0x3c0], 0xf
jbe 0x42661c
mov ecx, dword [esp + 0x3ac]
jmp 0x426623
lea ecx, [esp + 0x3ac]
mov esi, dword [esp + 0xc]
sub esp, 0x3c
mov edx, dword [esp + 0xa0]
mov dword [esp + 0x18], edx
movsd xmm0, qword [esp + 0x98]
movsd qword [esp + 0x10], xmm0
movaps xmm0, xmmword [0x537970]
movups xmmword [esp + 0x20], xmm0
lea edx, [esp + 0x1f8]
mov dword [esp + 0x1c], edx
lea edx, [esp + 0x1cc]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0x38], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0xc], 5
call fcn.004397f0
add esp, 0x3c
test eax, eax
je 0x4266a0
xor ebx, ebx
jmp 0x426ae3
mov eax, dword [esp + 0x304]
lea edx, [eax + 1]
cmp edx, dword [esp + 0x308]
ja 0x426d08
mov ecx, dword [esp + 0x300]
mov byte [ecx + eax], 0
mov eax, dword [esp + 0x300]
mov word [esp + 0x80], 0x101
cmp byte [eax], 0
je 0x426725
mov dword [esp + 0x78], eax
mov al, 3
jmp 0x426727
mov dword [esp + 0x3a8], ecx
mov dword [esp + 0x3a4], 0
mov byte [esp + 0x394], 0
jmp 0x4260a8
mov dword [esp + 0x3a4], esi
lea ecx, [esp + 0x394]
push esi
push eax
push ecx
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
mov byte [esp + esi + 0x394], 0
jmp 0x4260a8
mov al, 1
mov byte [esp + 0x80], al
sub esp, 0x18
movaps xmm0, xmmword [0x536750]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], ebx
lea eax, [esp + 0x19c]
mov dword [esp], eax
call fcn.004189c0
add esp, 0x18
mov al, byte [esp + 0x18c]
test al, 1
jne 0x426aa4
mov eax, dword [esp + 0x184]
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
sub eax, ecx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], eax
lea eax, [esp + 0x84]
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0x20
lea ecx, [esp + 0x54]
push 1
push 0xffffffffffffffff
push 1
push 0x535f6b
push ebx
call fcn.00423750
mov eax, dword [esp + 0x78]
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
cmp dword [ebp + 0x14], 0
mov bl, 1
jle 0x426ab2
mov dword [esp + 0xc], esi
xor ecx, ecx
lea edx, [esp + 0x50]
mov dword [esp + 0x10], eax
mov eax, edx
lea edx, [ebp + 0x10]
lea edi, [esp + 0x4c]
mov esi, dword [ebp + 0x18]
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], eax
lea eax, [ebp + 0x14]
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], edx
mov dword [esp + 0x48], edi
mov eax, dword [esp + 8]
cmp dword [eax + ecx*4], 0
je 0x426a44
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x7c]
lea ecx, [eax + ecx*8]
mov edi, dword [esp + 0x10]
cmp edi, ecx
je 0x426aa8
add edi, 8
jmp 0x42684e
mov byte [eax], 0xa
add dword [edi + 0x10], 1
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x7c]
lea ecx, [eax + ecx*8]
mov esi, dword [esp + 0x10]
lea edi, [esi + 0x10]
add esi, 8
cmp esi, ecx
lea edx, [ebp + 0x10]
je 0x426aa8
mov esi, dword [edi - 4]
test esi, esi
mov dword [esp + 0x10], edi
je 0x426a73
mov eax, dword [edi - 8]
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x38]
call fcn.00426ea0
mov edx, dword [esp + 0x1c]
cmp esi, 1
je 0x426880
movzx eax, word [edx]
cmp eax, 0x3f3f
je 0x4268cd
mov edi, dword [ebp + 0x18]
mov ecx, dword [edi + 0xc]
mov eax, dword [edi + 0x10]
sub ecx, eax
cmp ecx, esi
jae 0x42689d
mov ecx, edi
push esi
push edx
call fcn.00416e70
mov esi, dword [eax + 0x10]
jmp 0x4268b0
push esi
push edx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, dword [edi + 0x10]
mov dword [edi + 0x10], esi
mov eax, edi
cmp esi, dword [eax + 0xc]
mov edi, dword [esp + 0x10]
jae 0x4268c4
lea ecx, [esi + 1]
mov dword [eax + 0x10], ecx
mov byte [esi], 0x20
jmp 0x4268cd
mov ecx, eax
push 0x20
call fcn.00416dd0
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x7c]
lea ecx, [eax + ecx*8]
cmp edi, ecx
je 0x426aa8
mov eax, dword [edi]
mov esi, dword [edi + 4]
cmp esi, 2
jb 0x4268f5
movzx ecx, word [eax]
cmp ecx, 0x3f3f
je 0x42692d
mov edi, dword [ebp + 0x18]
mov edx, dword [edi + 0xc]
mov ecx, dword [edi + 0x10]
sub edx, ecx
cmp edx, esi
jae 0x426912
mov ecx, edi
push esi
push eax
call fcn.00416e70
jmp 0x426a25
test esi, esi
je 0x426a25
push esi
push eax
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add dword [edi + 0x10], esi
jmp 0x426a25
mov ecx, dword [ebp + 0x18]
mov eax, dword [ecx + 0x10]
cmp dword [ecx + 0xc], eax
je 0x426943
mov byte [eax], 0x28
add dword [ecx + 0x10], 1
mov edi, ecx
jmp 0x426951
push 1
push 0x537aa4
call fcn.00416e70
mov edi, eax
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 8]
mov esi, dword [ecx + eax*4]
test esi, esi
je 0x42696b
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
jmp 0x42696d
xor eax, eax
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 0x10]
sub ecx, edx
cmp ecx, eax
jae 0x426989
mov ecx, edi
push eax
push esi
call fcn.00416e70
mov edi, eax
mov edx, dword [eax + 0x10]
jmp 0x4269a2
test eax, eax
je 0x4269a2
push eax
push esi
push edx
mov esi, eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add esi, dword [edi + 0x10]
mov dword [edi + 0x10], esi
mov edx, esi
cmp edx, dword [edi + 0xc]
jae 0x4269b2
lea ecx, [edx + 1]
mov dword [edi + 0x10], ecx
mov byte [edx], 0x2b
jmp 0x4269bd
mov ecx, edi
push 0x2b
call fcn.00416dd0
mov edi, eax
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + eax*4]
mov dword [esp + 0x20], eax
sar eax, 0x1f
mov dword [esp + 0x24], eax
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x30], 0
mov word [esp + 0x34], 1
mov byte [esp + 0x36], 1
mov ecx, edi
lea eax, [esp + 0x20]
push eax
call fcn.00417320
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0xc], ecx
je 0x426a14
mov byte [ecx], 0x29
add dword [eax + 0x10], 1
jmp 0x426a22
mov ecx, eax
push 1
push 0x537aa6
call fcn.00416e70
mov edi, dword [ebp + 0x18]
mov eax, dword [edi + 0x10]
cmp dword [edi + 0xc], eax
jne 0x426827
mov ecx, edi
push 1
push 0x535f6b
call fcn.00416e70
jmp 0x42682e
lea ecx, [esp + 0x38]
call fcn.00426ea0
mov ecx, dword [ebp + 0x18]
mov eax, dword [ecx + 0x10]
cmp eax, dword [ecx + 0xc]
jae 0x426a66
lea ecx, [eax + 1]
mov edx, dword [ebp + 0x18]
mov dword [edx + 0x10], ecx
mov byte [eax], 0xa
jmp 0x426a70
mov ecx, dword [ebp + 0x18]
push 0xa
call fcn.00416dd0
lea edx, [ebp + 0x10]
mov ecx, dword [esp + 0x4c]
add ecx, 1
mov dword [esp + 0x4c], ecx
cmp ecx, dword [ebp + 0x14]
lea eax, [esp + 0x50]
lea edi, [esp + 0x4c]
jl 0x4267e3
mov eax, dword [esp + 0x78]
mov edi, dword [esp + 8]
lea ecx, [esp + 0x84]
mov esi, dword [esp + 0xc]
jmp 0x426ab9
xor ebx, ebx
jmp 0x426ace
xor ebx, ebx
mov edi, dword [esp + 8]
mov esi, dword [esp + 0xc]
lea ecx, [esp + 0x84]
cmp eax, ecx
je 0x426ac7
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov al, byte [esp + 0x18c]
test al, 1
jne 0x426ae3
mov ecx, dword [esp + 0x184]
test ecx, ecx
je 0x426ae3
mov eax, dword [ecx]
push 1
call dword [eax]
cmp byte [esp + 0x26c], 0
je 0x426b19
mov word [esp + 0x80], 0x106
lea eax, [esp + 0x1e0]
mov dword [esp + 0x78], eax
push 1
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x198]
push eax
call fcn.0042fef0
add esp, 0xc
mov eax, dword [esp + 0x1e0]
lea ecx, [esp + 0x1ec]
cmp eax, ecx
je 0x426b35
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
cmp byte [esp + 0x2fc], 0
je 0x426b6b
mov word [esp + 0x80], 0x106
lea eax, [esp + 0x270]
mov dword [esp + 0x78], eax
push 1
lea eax, [esp + 0x7c]
push eax
lea eax, [esp + 0x1e8]
push eax
call fcn.0042fef0
add esp, 0xc
mov eax, dword [esp + 0x270]
lea ecx, [esp + 0x27c]
cmp eax, ecx
je 0x426b87
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov eax, dword [esp + 0x300]
lea ecx, [esp + 0x30c]
cmp eax, ecx
je 0x426ba3
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov eax, dword [esp + 0x32c]
lea ecx, [esp + 0x338]
cmp eax, ecx
je 0x426bbf
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
mov eax, dword [esp + 0x14]
test eax, eax
je 0x426bf7
mov ecx, dword [esp + 0x18]
sub ecx, eax
mov edx, ecx
cmp ecx, 0x1000
jb 0x426bed
mov ecx, eax
mov eax, dword [eax - 4]
add ecx, 0xfffffffc
sub ecx, eax
cmp ecx, 0x20
jae 0x426d64
add edx, 0x23
push edx
push eax
call fcn.00533ac0
add esp, 8
test edi, edi
je 0x426c25
sub esi, edi
cmp esi, 0x1000
jb 0x426c1b
mov eax, dword [edi - 4]
add edi, 0xfffffffc
sub edi, eax
cmp edi, 0x20
jae 0x426d64
add esi, 0x23
mov edi, eax
push esi
push edi
call fcn.00533ac0
add esp, 8
lea ecx, [esp + 0x358]
call fcn.0040abd0
mov eax, dword [esp + 0x3a8]
cmp eax, 0x10
jb 0x426c71
mov ecx, dword [esp + 0x394]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x426c67
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x426d64
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.00533ac0
add esp, 8
mov al, byte [esp + 0x3c4]
test al, 1
jne 0x425ec2
mov eax, dword [esp + 0x3c0]
cmp eax, 0x10
jb 0x425ec2
mov ecx, dword [esp + 0x3ac]
lea esi, [eax + 1]
cmp esi, 0x1000
jb 0x426cba
mov edx, dword [ecx - 4]
add ecx, 0xfffffffc
sub ecx, edx
cmp ecx, 0x20
jae 0x426d64
add eax, 0x24
mov esi, eax
mov ecx, edx
push esi
push ecx
call fcn.00533ac0
add esp, 8
jmp 0x425ec2
lea ecx, [esp + 0x32c]
push 1
push edx
push esi
call fcn.00424880
mov eax, dword [esp + 0x330]
jmp 0x426382
lea ecx, [esp + 0x300]
push 1
push edx
lea eax, [esp + 0x314]
push eax
call fcn.00424880
mov eax, dword [esp + 0x304]
jmp 0x426414
lea ecx, [esp + 0x300]
push 1
push edx
lea eax, [esp + 0x314]
push eax
call fcn.00424880
mov eax, dword [esp + 0x304]
jmp 0x4266b7
push 0x568c58
call fcn.00533bee
add esp, 4
cmp dword [0x568c58], 0xffffffff
jne 0x425efb
push 0x428340
call fcn.00533f00
add esp, 4
push 0x568c58
call fcn.00533ba4
add esp, 4
jmp 0x425efb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
call fcn.00420ba0
call fcn.00403bd0
call fcn.00420ba0
int3