Function at 0x541090
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x168
mov ebp, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, ecx
sub edx, eax
xor edi, edi
cmp edx, 2
jae 0x5410b9
mov eax, edi
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
ret
cmp byte [eax], 0x67
jne 0x5410da
cmp byte [eax + 1], 0x73
jne 0x5410da
add eax, 2
mov dword [ebp], eax
mov edx, ecx
sub edx, eax
mov byte [esp + 0x1b], 1
cmp edx, 2
jb case.0x5410ea.58
jmp 0x5410df
mov byte [esp + 0x1b], 0
movsx esi, byte [eax]
add esi, 0xffffffcf
cmp esi, 0x43
ja case.0x5410ea.58
jmp dword [esi*4 + 0x59432c]
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x543a50
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x542350
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.0053ffa0
movsx ecx, byte [eax + 1]
add ecx, 0xffffffb2
cmp ecx, 0x2c
ja case.0x5410ea.58
jmp dword [ecx*4 + 0x594948]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x148], 0x595385
mov dword [esp + 0x14c], 0x595387
movsd xmm0, qword [esp + 0x148]
jmp 0x542188
movsx ecx, byte [eax + 1]
add ecx, 0xffffff9d
cmp ecx, 0x13
ja case.0x5410ea.58
jmp dword [ecx*4 + 0x5948f8]
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0053cc70
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0x14], eax
test eax, eax
je 0x5422a1
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.005434b0
jmp 0x54229a
movsx ecx, byte [eax + 1]
add ecx, 0xffffffaa
cmp ecx, 0x20
ja case.0x5410ea.58
jmp dword [ecx*4 + 0x594874]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x118], 0x5953b9
mov dword [esp + 0x11c], 0x5953bb
movsd xmm0, qword [esp + 0x118]
jmp 0x542188
movsx ecx, byte [eax + 1]
cmp ecx, 0x4f
je 0x541702
cmp ecx, 0x71
je 0x54172c
cmp ecx, 0x6f
jne case.0x5410ea.58
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x110], 0x5953bc
mov dword [esp + 0x114], 0x5953bd
movsd xmm0, qword [esp + 0x110]
jmp 0x542188
movzx ecx, byte [eax + 1]
cmp cl, 0x70
jne 0x5415d8
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.00542c40
movsx ecx, byte [eax + 1]
cmp ecx, 0x74
je 0x541603
cmp ecx, 0x65
jne case.0x5410ea.58
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xf8], 0x5953c4
mov dword [esp + 0xfc], 0x5953c6
movsd xmm0, qword [esp + 0xf8]
jmp 0x542188
movsx edx, byte [eax + 1]
cmp edx, 0x6c
je 0x54162d
cmp edx, 0x78
jne case.0x5410ea.58
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0x14], eax
test eax, eax
je 0x5422a1
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x544070
jmp 0x54229a
movsx ecx, byte [eax + 1]
add ecx, 0xffffffad
cmp ecx, 0x21
ja case.0x5410ea.58
jmp dword [ecx*4 + 0x5947ec]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xd8], 0x5953cf
mov dword [esp + 0xdc], 0x5953d2
movsd xmm0, qword [esp + 0xd8]
jmp 0x542188
movsx edx, byte [eax + 1]
add edx, 0xffffffb7
cmp edx, 0x24
ja case.0x5410ea.58
jmp dword [edx*4 + 0x594758]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xc0], 0x5953d7
mov dword [esp + 0xc4], 0x5953d9
movsd xmm0, qword [esp + 0xc0]
jmp 0x542188
movsx ecx, byte [eax + 1]
add ecx, 0xffffff9f
cmp ecx, 0x17
ja case.0x5410ea.58
jmp dword [ecx*4 + 0x5946f8]
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x544460
movsx ecx, byte [eax + 1]
add ecx, 0xffffffae
cmp ecx, 0x20
ja case.0x5410ea.58
jmp dword [ecx*4 + 0x594674]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x78], 0x5953f5
mov dword [esp + 0x7c], 0x5953f7
movsd xmm0, qword [esp + 0x78]
jmp 0x542188
movsx edx, byte [eax + 1]
add edx, 0xffffffb4
cmp edx, 0x28
ja case.0x5410ea.58
jmp dword [edx*4 + 0x5945d0]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x60], 0x5953fe
mov dword [esp + 0x64], 0x595400
movsd xmm0, qword [esp + 0x60]
jmp 0x542188
cmp byte [eax + 1], 0x75
jne case.0x5410ea.58
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0x14], eax
test eax, eax
je 0x5422a1
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0x2c], eax
test eax, eax
je 0x5422a1
lea eax, [esp + 0x2c]
mov dword [esp + 4], eax
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x5448c0
jmp 0x54229a
movsx ecx, byte [eax + 1]
add ecx, 0xffffffb3
cmp ecx, 0x26
ja case.0x5410ea.58
jmp dword [ecx*4 + 0x594534]
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x40], 0x59541a
mov dword [esp + 0x44], 0x59541c
movsd xmm0, qword [esp + 0x40]
jmp 0x542188
movsx edx, byte [eax + 1]
add edx, 0xffffffb0
cmp edx, 0x2a
ja case.0x5410ea.58
jmp dword [edx*4 + 0x594488]
add eax, 2
mov dword [ebp], eax
mov edx, dword [ebp + 0xc]
sub edx, dword [ebp + 8]
sar edx, 2
mov dword [esp + 0x20], edx
lea edx, [ebp + 0x14]
mov dword [esp + 0x24], ebp
jmp 0x5414fd
mov edx, ebx
lea ecx, [esi + 4]
mov dword [ebp + 0xc], ecx
mov dword [esi], eax
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
cmp eax, ecx
je 0x54150a
cmp byte [eax], 0x45
je 0x5421c3
mov ebx, edx
mov ecx, ebp
call fcn.0053ea40
test eax, eax
je case.0x5410ea.58
mov esi, dword [ebp + 0xc]
cmp esi, dword [ebp + 0x10]
jne 0x5414ed
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 8]
mov edi, esi
sub edi, eax
lea ecx, [edi + edi]
cmp eax, ebx
je 0x541555
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ebp, eax
mov ecx, dword [esp + 0x24]
mov dword [ecx + 8], eax
test eax, eax
mov edx, ebx
jne 0x541586
jmp 0x5422a8
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x5422a8
mov ebp, eax
mov edx, ebx
cmp esi, ebx
je 0x54157f
mov dword [esp + 8], edi
mov dword [esp + 4], edx
mov dword [esp], ebp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov edx, ebx
mov ecx, dword [esp + 0x24]
mov dword [ecx + 8], ebp
mov eax, edi
sar eax, 2
sar edi, 1
lea esi, [eax*4]
add esi, ebp
lea eax, [edi*4]
add eax, ebp
mov dword [ecx + 0x10], eax
mov ebp, ecx
xor edi, edi
mov eax, dword [esp + 0x1c]
jmp 0x5414ef
movsx ecx, byte [eax + 1]
add ecx, 0xffffff9b
cmp ecx, 0x12
ja case.0x5410ea.58
jmp dword [ecx*4 + 0x59443c]
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
jmp 0x541aee
cmp edx, 3
jb 0x5415f2
cmp cl, 0x4c
jne 0x5415f2
movsx eax, byte [eax + 2]
add eax, 0xffffffd0
cmp eax, 9
jbe 0x541256
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x542e30
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xf0], 0x5953c7
mov dword [esp + 0xf4], 0x5953c8
movsd xmm0, qword [esp + 0xf0]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov edx, dword [ebp + 0xc]
sub edx, dword [ebp + 8]
sar edx, 2
mov dword [esp + 0x20], edx
lea edx, [ebp + 0x14]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x24], ebp
jmp 0x541696
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ecx, ebp
mov ebp, eax
mov dword [ecx + 8], eax
test eax, eax
je 0x5422a8
mov eax, esi
sar eax, 2
sar esi, 1
lea edi, [eax*4]
add edi, ebp
lea eax, [esi*4]
add eax, ebp
mov dword [ecx + 0x10], eax
mov ebp, ecx
lea eax, [edi + 4]
mov dword [ebp + 0xc], eax
mov dword [edi], ebx
mov eax, dword [ebp]
mov ecx, dword [ebp + 4]
xor edi, edi
cmp eax, ecx
je 0x5416a3
cmp byte [eax], 0x45
je 0x541dc8
mov ecx, ebp
call 0x5440f0
test eax, eax
je case.0x5410ea.58
mov ebx, eax
mov edi, dword [ebp + 0xc]
cmp edi, dword [ebp + 0x10]
jne 0x541686
mov eax, dword [ebp + 8]
mov esi, edi
sub esi, eax
lea ecx, [esi + esi]
cmp eax, dword [esp + 0x1c]
jne 0x54164d
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x5422a8
mov ebp, eax
mov eax, dword [esp + 0x1c]
cmp edi, eax
je 0x5416f6
mov dword [esp + 8], esi
mov dword [esp + 4], eax
mov dword [esp], ebp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov ecx, dword [esp + 0x24]
mov dword [ecx + 8], ebp
jmp 0x541668
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x108], 0x5953be
mov dword [esp + 0x10c], 0x5953c0
movsd xmm0, qword [esp + 0x108]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x100], 0x5953c1
mov dword [esp + 0x104], 0x5953c3
movsd xmm0, qword [esp + 0x100]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xe8], 0x5953c9
mov dword [esp + 0xec], 0x5953cb
movsd xmm0, qword [esp + 0xe8]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xe0], 0x5953cc
mov dword [esp + 0xe4], 0x5953ce
movsd xmm0, qword [esp + 0xe0]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xd0], 0x5953d3
mov dword [esp + 0xd4], 0x5953d4
movsd xmm0, qword [esp + 0xd0]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x88], 0x5953f0
mov dword [esp + 0x8c], 0x5953f2
movsd xmm0, qword [esp + 0x88]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x80], 0x5953f3
mov dword [esp + 0x84], 0x5953f4
movsd xmm0, qword [esp + 0x80]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0x14], eax
xor edi, edi
test eax, eax
je case.0x5410ea.58
mov eax, dword [ebp + 0xc]
sub eax, dword [ebp + 8]
sar eax, 2
mov dword [esp + 0x28], eax
lea esi, [ebp + 0x14]
mov dword [esp + 0x20], esi
jmp 0x5418a0
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ebp, eax
mov dword [esi + 8], eax
test eax, eax
je 0x5422a8
mov ecx, dword [esp + 0x1c]
mov eax, ecx
sar eax, 2
sar ecx, 1
lea edi, [eax*4]
add edi, ebp
lea eax, [ecx*4]
add eax, ebp
mov dword [esi + 0x10], eax
mov ebp, esi
mov esi, dword [esp + 0x20]
lea eax, [edi + 4]
mov dword [ebp + 0xc], eax
mov dword [edi], ebx
mov eax, dword [ebp]
cmp eax, dword [ebp + 4]
je 0x5418b1
cmp byte [eax], 0x45
je 0x542202
mov ecx, ebp
call fcn.00541090
test eax, eax
je 0x5422a1
mov ebx, eax
mov edi, dword [ebp + 0xc]
cmp edi, dword [ebp + 0x10]
jne 0x541898
mov eax, dword [ebp + 8]
mov ecx, edi
sub ecx, eax
mov dword [esp + 0x1c], ecx
add ecx, ecx
cmp eax, esi
mov esi, ebp
jne 0x541859
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x5422a8
mov ebp, eax
mov eax, dword [esp + 0x20]
cmp edi, eax
je 0x54190f
mov ecx, dword [esp + 0x1c]
mov dword [esp + 8], ecx
mov dword [esp + 4], eax
mov dword [esp], ebp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov dword [esi + 8], ebp
jmp 0x541872
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x138], 0x59539f
mov dword [esp + 0x13c], 0x5953a0
movsd xmm0, qword [esp + 0x138]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x130], 0x5953a1
mov dword [esp + 0x134], 0x5953a2
movsd xmm0, qword [esp + 0x130]
jmp 0x542087
mov ecx, ebp
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.005435d0
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xb0], 0x5953da
mov dword [esp + 0xb4], 0x5953dc
movsd xmm0, qword [esp + 0xb0]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xc8], 0x5953d5
mov dword [esp + 0xcc], 0x5953d6
movsd xmm0, qword [esp + 0xc8]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xb8], 0x5953b0
mov dword [esp + 0xbc], 0x5953b1
movsd xmm0, qword [esp + 0xb8]
jmp 0x542188
lea edx, [eax + 2]
mov dword [ebp], edx
cmp edx, ecx
je 0x541fdd
cmp byte [edx], 0x5f
jne 0x541fdd
add eax, 3
mov dword [ebp], eax
mov dword [esp + 0xa8], 0x5953dd
mov dword [esp + 0xac], 0x5953df
movsd xmm0, qword [esp + 0xa8]
jmp 0x542087
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x30], 0x595420
mov dword [esp + 0x34], 0x595423
movsd xmm0, qword [esp + 0x30]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0053cc70
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0x14], eax
test eax, eax
je 0x5422a1
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x544950
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x48], 0x595418
mov dword [esp + 0x4c], 0x595419
movsd xmm0, qword [esp + 0x48]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x38], 0x59541d
mov dword [esp + 0x3c], 0x59541f
movsd xmm0, qword [esp + 0x38]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0053cc70
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
lea eax, [esp + 0xc]
mov dword [esp], eax
mov ecx, ebp
mov edx, str.typeid__
call fcn.00544af0
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0053cc70
mov dword [esp + 0x14], eax
xor edi, edi
test eax, eax
je case.0x5410ea.58
mov eax, dword [ebp + 0xc]
sub eax, dword [ebp + 8]
sar eax, 2
mov dword [esp + 0x20], eax
lea ecx, [ebp + 0x14]
mov dword [esp + 0x24], ebp
jmp 0x541b4d
mov ecx, ebx
lea edx, [esi + 4]
mov dword [ebp + 0xc], edx
mov dword [esi], eax
mov eax, dword [ebp]
cmp eax, dword [ebp + 4]
je 0x541b5e
cmp byte [eax], 0x45
je 0x542241
mov ebx, ecx
mov ecx, ebp
call 0x5440f0
test eax, eax
je case.0x5410ea.58
mov esi, dword [ebp + 0xc]
cmp esi, dword [ebp + 0x10]
jne 0x541b43
mov dword [esp + 0x1c], eax
mov eax, dword [ebp + 8]
mov edi, esi
sub edi, eax
lea ecx, [edi + edi]
cmp eax, ebx
je 0x541ba7
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov edx, ebp
mov ebp, eax
mov dword [edx + 8], eax
test eax, eax
mov ecx, ebx
jne 0x541bd8
jmp 0x5422a8
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x5422a8
mov ebp, eax
mov ecx, ebx
cmp esi, ebx
je 0x541bd1
mov dword [esp + 8], edi
mov dword [esp + 4], ecx
mov dword [esp], ebp
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
mov ecx, ebx
mov edx, dword [esp + 0x24]
mov dword [edx + 8], ebp
mov eax, edi
sar eax, 2
sar edi, 1
lea esi, [eax*4]
add esi, ebp
lea eax, [edi*4]
add eax, ebp
mov dword [edx + 0x10], eax
mov ebp, edx
xor edi, edi
mov eax, dword [esp + 0x1c]
jmp 0x541b45
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
mov edx, 0x59544e
add esp, 0x168
pop esi
pop edi
pop ebx
pop ebp
jmp 0x544dc0
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.00544e50
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0xa0], 0x5953e0
mov dword [esp + 0xa4], 0x5953e2
movsd xmm0, qword [esp + 0xa0]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x98], 0x5953d5
mov dword [esp + 0x9c], 0x5953d6
movsd xmm0, qword [esp + 0x98]
jmp 0x542087
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x90], 0x5953e3
mov dword [esp + 0x94], 0x5953e4
movsd xmm0, qword [esp + 0x90]
jmp 0x542087
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x544820
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x68], 0x5953fc
mov dword [esp + 0x6c], 0x5953fd
movsd xmm0, qword [esp + 0x68]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x70], 0x5953f8
mov dword [esp + 0x74], 0x5953fb
movsd xmm0, qword [esp + 0x70]
jmp 0x542188
lea edx, [eax + 2]
mov dword [ebp], edx
cmp edx, ecx
je 0x542199
cmp byte [edx], 0x5f
jne 0x542199
add eax, 3
mov dword [ebp], eax
mov dword [esp + 0x58], 0x595401
mov dword [esp + 0x5c], 0x595403
movsd xmm0, qword [esp + 0x58]
jmp 0x542087
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x50], 0x5953fc
mov dword [esp + 0x54], 0x5953fd
movsd xmm0, qword [esp + 0x50]
jmp 0x542087
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0x14], eax
test eax, eax
je 0x5422a1
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp], 0x595404
jmp 0x542110
inc eax
mov dword [ebp], eax
mov esi, dword [esp + 0x20]
shl esi, 2
mov edx, dword [ebp + 8]
add edx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov ecx, ebp
call fcn.00546ac0
add esi, dword [ebp + 8]
mov dword [ebp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x544330
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x140], 0x595388
mov dword [esp + 0x144], 0x595389
movsd xmm0, qword [esp + 0x140]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x160], 0x595380
mov dword [esp + 0x164], 0x595382
movsd xmm0, qword [esp + 0x160]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x158], 0x595383
mov dword [esp + 0x15c], 0x595384
movsd xmm0, qword [esp + 0x158]
jmp 0x542087
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x150], 0x595383
mov dword [esp + 0x154], 0x595384
movsd xmm0, qword [esp + 0x150]
jmp 0x542188
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0053cc70
jmp 0x541ec7
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
lea eax, [esp + 0xc]
mov dword [esp], eax
mov ecx, ebp
mov edx, str.alignof__
call 0x5422b0
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
cmp ecx, eax
je case.0x5410ea.58
movzx eax, byte [eax]
cmp eax, 0x66
je 0x542280
cmp eax, 0x54
jne case.0x5410ea.58
mov ecx, ebp
call fcn.0053ffa0
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.00544b90
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0053cc70
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0x14], eax
test eax, eax
je 0x5422a1
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x5449e0
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.00544a70
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0053cc70
jmp 0x541fb9
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
lea eax, [esp + 0xc]
mov dword [esp], eax
mov ecx, ebp
mov edx, str.sizeof__
call fcn.00544af0
jmp 0x54229a
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov dword [esp], 0x5953dd
jmp 0x5421b3
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov byte [esp + 0x14], 1
jmp 0x5420b6
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.0053cc70
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0x14], eax
test eax, eax
je 0x5422a1
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.005439c0
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x128], 0x5953b0
mov dword [esp + 0x12c], 0x5953b1
movsd xmm0, qword [esp + 0x128]
movsd qword [esp], xmm0
mov ecx, ebp
call fcn.00543410
jmp 0x5410ae
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov byte [esp + 0x14], 0
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
lea eax, [esp + 0x1b]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.00543930
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0x14], eax
test eax, eax
je 0x5422a1
lea eax, [esp + 0x14]
mov dword [esp + 4], eax
mov dword [esp], 0x5953b2
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x543f40
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0x14], eax
test eax, eax
je 0x5422a1
lea eax, [esp + 0x14]
mov dword [esp], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x543fe0
jmp 0x54229a
add eax, 2
mov dword [ebp], eax
mov dword [esp + 0x120], 0x5953b7
mov dword [esp + 0x124], 0x5953b8
movsd xmm0, qword [esp + 0x120]
movsd qword [esp], xmm0
mov ecx, ebp
call fcn.00543360
jmp 0x5410ae
mov ecx, ebp
call fcn.00541090
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
mov dword [esp], 0x595401
lea edx, [esp + 0xc]
mov ecx, ebp
call 0x5443c0
jmp 0x54229a
inc eax
mov dword [ebp], eax
mov esi, dword [esp + 0x20]
shl esi, 2
mov edx, dword [ebp + 8]
add edx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov ecx, ebp
call fcn.00546ac0
add esi, dword [ebp + 8]
mov dword [ebp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.00544cb0
mov dword [esp + 0xc], eax
jmp 0x54228f
inc eax
mov dword [ebp], eax
mov esi, dword [esp + 0x28]
shl esi, 2
mov edx, dword [ebp + 8]
add edx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov ecx, ebp
call fcn.00546ac0
add esi, dword [ebp + 8]
mov dword [ebp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
mov dword [esp], eax
lea edx, [esp + 0x14]
mov ecx, ebp
call fcn.00543540
jmp 0x54229a
inc eax
mov dword [ebp], eax
mov esi, dword [esp + 0x20]
shl esi, 2
mov edx, dword [ebp + 8]
add edx, esi
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
mov ecx, ebp
call fcn.00546ac0
add esi, dword [ebp + 8]
mov dword [ebp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
mov dword [esp], eax
lea edx, [esp + 0x14]
mov ecx, ebp
call fcn.00544d30
jmp 0x54229a
mov ecx, ebp
call fcn.00542c40
mov dword [esp + 0xc], eax
test eax, eax
je 0x5422a1
lea edx, [esp + 0xc]
mov ecx, ebp
call fcn.00544c10
mov edi, eax
jmp case.0x5410ea.58
xor edi, edi
jmp case.0x5410ea.58
call fcn.0049a9b0
nop dword [eax]
push ebp
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x5422f2
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x54234a
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ebx, dword [edi + 0x116c]
mov ebp, dword [ebx + 4]
lea edi, [ebx + ebp]
add edi, 0xffffffe8
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
add eax, esi
mov ecx, dword [esp + 0x14]
mov ecx, dword [ecx]
mov dword [ebx + ebp - 0x14], 0x101012f
mov dword [ebx + ebp - 0x18], 0x596268
mov dword [ebx + ebp - 0x10], esi
mov dword [ebx + ebp - 0xc], eax
mov dword [ebx + ebp - 8], ecx
mov dword [ebx + ebp - 4], 0x59537e
mov dword [ebx + ebp], 0x59537f
mov eax, edi
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0049a9b0
nop
push ebp
push ebx
push edi
push esi
push eax
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, ecx
sub edx, eax
cmp edx, 3
jae 0x543a7c
cmp edx, 2
je 0x543b3d
mov ecx, esi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
jmp 0x546f70
movzx edx, byte [eax]
cmp dl, 0x73
jne 0x543b40
cmp byte [eax + 1], 0x72
jne 0x543b3d
cmp byte [eax + 2], 0x4e
jne 0x543b3d
add eax, 3
mov dword [esi], eax
mov ecx, esi
call fcn.00546d80
test eax, eax
je 0x543f12
mov edi, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x543e9b
cmp byte [eax], 0x49
jne 0x543e9b
xor ebp, ebp
mov ecx, esi
xor edx, edx
call fcn.0053f8d0
test eax, eax
je 0x543f14
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x543b19
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x543f37
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x596aa4
jmp 0x543e8e
movzx edx, byte [eax]
cmp dl, 0x67
jne 0x543b60
cmp byte [eax + 1], 0x73
jne 0x543b6d
add eax, 2
mov dword [esi], eax
mov edx, ecx
sub edx, eax
mov bl, 1
cmp edx, 2
jae 0x543b62
jmp 0x543ce1
xor ebx, ebx
cmp byte [eax], 0x73
jne 0x543ce1
jmp 0x543b78
xor ebx, ebx
cmp byte [eax], 0x73
jne 0x543ce1
cmp byte [eax + 1], 0x72
jne 0x543ce1
add eax, 2
mov dword [esi], eax
cmp ecx, eax
je 0x543d65
movsx eax, byte [eax]
add eax, 0xffffffd0
cmp eax, 9
ja 0x543d65
mov dword [esp], ebx
mov ecx, esi
call 0x546ec0
test eax, eax
je 0x543f12
mov ebx, eax
xor edi, edi
jmp 0x543bd3
mov ecx, esi
call 0x546ec0
mov ebx, eax
xor ebp, ebp
test eax, eax
je 0x543f14
test edi, edi
je 0x543c50
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x543c15
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x543f37
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov ecx, dword [esi + 0x116c]
mov edx, dword [ecx + 4]
lea eax, [ecx + edx]
add eax, 0xfffffff8
mov dword [ecx + edx - 4], 0x1010116
mov dword [ecx + edx - 8], 0x595b44
mov dword [ecx + edx], edi
add ecx, edx
add ecx, 4
jmp 0x543cc0
cmp byte [esp], 0
je 0x543cdd
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x543c98
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x543f37
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
add ecx, 0x10
mov dword [edi + 4], ecx
mov edx, dword [esi + 0x116c]
mov edi, dword [edx + 4]
lea ecx, [edx + edi]
lea eax, [edx + edi]
add eax, 0xfffffff8
mov dword [edx + edi - 4], 0x1010121
mov dword [edx + edi - 8], 0x595ef8
mov dword [ecx], ebx
mov edi, eax
mov eax, dword [esi]
cmp eax, dword [esi + 4]
je 0x543bc0
cmp byte [eax], 0x45
jne 0x543bc0
jmp 0x543e0b
mov edi, ebx
jmp 0x543cc4
mov ecx, esi
call 0x546f70
mov ebp, eax
test bl, bl
je 0x543f14
test ebp, ebp
je 0x543f14
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x543d38
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x543f37
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
add ecx, 0x10
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010121
mov dword [eax + ecx - 8], 0x595ef8
mov dword [eax + ecx], ebp
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
jmp 0x543f14
mov ecx, esi
call fcn.00546d80
test eax, eax
je 0x543f12
mov edi, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x543e0e
cmp byte [eax], 0x49
jne 0x543e0e
xor ebp, ebp
mov ecx, esi
xor edx, edx
call fcn.0053f8d0
test eax, eax
je 0x543f14
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x543ddd
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x543f37
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x596aa4
mov dword [eax + ecx], edi
lea edi, [eax + ecx]
add edi, 0xfffffff8
mov dword [eax + ecx + 4], ebx
jmp 0x543e0e
inc eax
mov dword [esi], eax
mov ecx, esi
call 0x546f70
test eax, eax
je 0x543f12
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x543e5d
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x543f37
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
mov dword [eax + ecx - 4], 0x1010116
mov dword [eax + ecx - 8], 0x595b44
mov dword [eax + ecx], edi
mov dword [eax + ecx + 4], ebx
jmp 0x543f14
mov dword [eax + ecx], edi
lea edi, [eax + ecx]
add edi, 0xfffffff8
mov dword [eax + ecx + 4], ebx
mov eax, dword [esi]
cmp eax, dword [esi + 4]
je 0x543ea7
cmp byte [eax], 0x45
je 0x543f1e
mov ecx, esi
call 0x546ec0
test eax, eax
je 0x543f12
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x543eee
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x543f37
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010116
mov dword [eax + ecx - 8], 0x595b44
jmp 0x543e8e
xor ebp, ebp
mov eax, ebp
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
inc eax
mov dword [esi], eax
mov ecx, esi
call 0x546f70
mov ebp, 0
test eax, eax
jne 0x543e1d
jmp 0x543f14
call fcn.0049a9b0
nop dword [eax]
push ebp
push ebx
push edi
push esi
mov ebp, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x543f82
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x543fd9
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ebx, dword [edi + 0x116c]
mov esi, dword [ebx + 4]
lea edi, [ebx + esi]
add edi, 0xffffffe8
mov ebp, dword [ebp]
push dword [esp + 0x14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov edx, dword [esp + 0x14]
add eax, edx
mov ecx, dword [esp + 0x18]
mov ecx, dword [ecx]
mov dword [ebx + esi - 0x14], 0x101012e
mov dword [ebx + esi - 0x18], 0x595f68
mov dword [ebx + esi - 0x10], ebp
mov dword [ebx + esi - 0xc], edx
mov dword [ebx + esi - 8], eax
mov dword [ebx + esi - 4], ecx
mov eax, edi
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0049a9b0
nop
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x544021
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x54406a
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x10]
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xffffffe8
mov esi, dword [esi]
mov edx, dword [edx]
mov dword [ecx + edi - 0x14], 0x101012e
mov dword [ecx + edi - 0x18], 0x595f68
mov dword [ecx + edi - 0x10], esi
mov dword [ecx + edi - 0xc], 0x5953b5
mov dword [ecx + edi - 8], 0x5953b6
mov dword [ecx + edi - 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.0049a9b0
nop
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x5440b1
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x5440e9
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x10]
add ecx, 0x10
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xfffffff8
mov esi, dword [esi]
mov edx, dword [edx]
mov dword [ecx + edi - 4], 0x101012b
mov dword [ecx + edi - 8], 0x595fd0
mov dword [ecx + edi], esi
mov dword [ecx + edi + 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.0049a9b0
nop
push ebp
push ebx
push edi
push esi
push eax
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
sub ecx, eax
je 0x5441d3
cmp ecx, 2
jb 0x5441d3
cmp byte [eax], 0x64
jne 0x5441d3
movsx ecx, byte [eax + 1]
cmp ecx, 0x58
je 0x5441e1
cmp ecx, 0x78
je 0x544294
cmp ecx, 0x69
jne 0x5441d3
add eax, 2
mov dword [esi], eax
mov ecx, esi
call fcn.00547110
xor edi, edi
test eax, eax
je 0x544321
mov ebx, eax
mov ecx, esi
call 0x5440f0
test eax, eax
je 0x544321
mov ebp, eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x54419c
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x54432b
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea edi, [eax + ecx]
add edi, 0xffffffe8
mov dword [eax + ecx - 0x14], 0x1010141
mov dword [eax + ecx - 0x18], 0x596040
mov dword [eax + ecx - 0x10], ebx
mov dword [eax + ecx - 0xc], ebp
mov byte [eax + ecx - 8], 0
jmp 0x544321
mov ecx, esi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.00541090
add eax, 2
mov dword [esi], eax
mov ecx, esi
call fcn.00541090
xor edi, edi
test eax, eax
je 0x544321
mov ebx, eax
mov ecx, esi
call fcn.00541090
test eax, eax
je 0x544321
mov ebp, eax
mov ecx, esi
call 0x5440f0
test eax, eax
je 0x544321
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea edx, [ecx - 0xfd8]
cmp edx, 0xfffff007
ja 0x54425e
mov dword [esp], eax
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x54432b
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
mov eax, dword [esp]
add ecx, 0x20
mov dword [edi + 4], ecx
mov edx, dword [esi + 0x116c]
mov ecx, dword [edx + 4]
lea edi, [edx + ecx]
add edi, 0xffffffe8
mov dword [edx + ecx - 0x14], 0x1010142
mov dword [edx + ecx - 0x18], 0x5960ac
mov dword [edx + ecx - 0x10], ebx
mov dword [edx + ecx - 0xc], ebp
mov dword [edx + ecx - 8], eax
jmp 0x544321
add eax, 2
mov dword [esi], eax
mov ecx, esi
call fcn.00541090
xor edi, edi
test eax, eax
je 0x544321
mov ebx, eax
mov ecx, esi
call 0x5440f0
test eax, eax
je 0x544321
mov ebp, eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x5442ef
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x54432b
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov edi, eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea edi, [eax + ecx]
add edi, 0xffffffe8
mov dword [eax + ecx - 0x14], 0x1010141
mov dword [eax + ecx - 0x18], 0x596040
mov dword [eax + ecx - 0x10], ebx
mov dword [eax + ecx - 0xc], ebp
mov byte [eax + ecx - 8], 1
mov eax, edi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0049a9b0
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x544371
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x5443af
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edx, dword [ecx + 4]
lea eax, [ecx + edx]
add eax, 0xffffffe8
mov edi, dword [esi]
mov esi, dword [esi + 4]
mov dword [ecx + edx - 0x14], 0x1010138
mov dword [ecx + edx - 0x18], 0x596120
mov dword [ecx + edx - 0x10], 0
mov dword [ecx + edx - 0xc], edi
mov dword [ecx + edx - 8], esi
pop esi
pop edi
pop ebx
ret
call fcn.0049a9b0
nop word cs:[eax + eax]
push ebp
push ebx
push edi
push esi
mov ebp, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x544402
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x54444f
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ebx, dword [edi + 0x116c]
mov esi, dword [ebx + 4]
lea edi, [ebx + esi]
add edi, 0xffffffe8
mov ebp, dword [ebp]
push dword [esp + 0x14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ecx, dword [esp + 0x14]
add eax, ecx
mov dword [ebx + esi - 0x14], 0x101012c
mov dword [ebx + esi - 0x18], 0x59618c
mov dword [ebx + esi - 0x10], ebp
mov dword [ebx + esi - 0xc], ecx
mov dword [ebx + esi - 8], eax
mov eax, edi
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0049a9b0
nop word cs:[eax + eax]
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov ebx, ecx
mov ecx, dword [ecx]
mov edx, dword [ebx + 4]
mov esi, edx
sub esi, ecx
xor eax, eax
cmp esi, 2
jb 0x544763
cmp byte [ecx], 0x67
jne 0x5444a7
xor eax, eax
cmp byte [ecx + 1], 0x73
jne 0x5444a7
add ecx, 2
mov dword [ebx], ecx
mov esi, edx
sub esi, ecx
mov edi, ebx
mov bl, 1
mov dword [esp + 0xc], ebx
mov ebx, edi
cmp esi, 2
jae 0x5444af
jmp 0x544763
mov dword [esp + 0xc], 0
cmp byte [ecx + 1], 0x61
sete al
cmp byte [ecx], 0x6e
jne 0x544761
cmp byte [ecx + 1], 0x77
je 0x5444d8
cmp byte [ecx], 0x6e
jne 0x544761
cmp byte [ecx + 1], 0x61
jne 0x544761
mov byte [esp + 3], al
add ecx, 2
mov dword [ebx], ecx
mov eax, dword [ebx + 0xc]
sub eax, dword [ebx + 8]
sar eax, 2
mov dword [esp + 8], eax
lea eax, [ebx + 0x14]
mov dword [esp + 4], eax
mov dword [esp + 0x10], ebx
jmp 0x544539
push ecx
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ecx, ebx
add esp, 8
mov ebx, eax
mov dword [ecx + 8], eax
test eax, eax
je 0x54481b
mov eax, esi
sar eax, 2
sar esi, 1
lea ebp, [ebx + eax*4]
lea eax, [ebx + esi*4]
mov dword [ecx + 0x10], eax
mov ebx, ecx
lea eax, [ebp + 4]
mov dword [ebx + 0xc], eax
mov dword [ebp], edi
mov ecx, dword [ebx]
mov edx, dword [ebx + 4]
cmp ecx, edx
je 0x544542
cmp byte [ecx], 0x5f
je 0x54459d
mov ecx, ebx
call fcn.00541090
test eax, eax
je 0x544761
mov edi, eax
mov ebp, dword [ebx + 0xc]
cmp ebp, dword [ebx + 0x10]
jne 0x54452b
mov eax, dword [ebx + 8]
mov esi, ebp
sub esi, eax
lea ecx, [esi + esi]
cmp eax, dword [esp + 4]
jne 0x544500
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x54481b
mov ebx, eax
mov eax, dword [esp + 4]
cmp ebp, eax
je 0x544591
push esi
push eax
push ebx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0x10]
mov dword [ecx + 8], ebx
jmp 0x544519
inc ecx
mov dword [ebx], ecx
mov esi, dword [esp + 8]
shl esi, 2
mov edx, dword [ebx + 8]
add edx, esi
mov ecx, ebx
push dword [ebx + 0xc]
call fcn.00546ac0
add esp, 4
mov edi, eax
mov ebp, edx
add esi, dword [ebx + 8]
mov dword [ebx + 0xc], esi
mov ecx, ebx
call fcn.0053cc70
test eax, eax
je 0x544761
mov dword [esp + 8], eax
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
mov edx, eax
sub edx, ecx
cmp edx, 2
jb 0x54460e
cmp byte [ecx], 0x70
jne 0x54460e
cmp byte [ecx + 1], 0x69
jne 0x54460e
mov dword [esp + 0x14], edi
add ecx, 2
mov dword [ebx], ecx
mov edx, dword [ebx + 0xc]
sub edx, dword [ebx + 8]
sar edx, 2
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], ebp
jmp 0x5446fd
cmp ecx, eax
je 0x544761
cmp byte [ecx], 0x45
mov eax, 0
jne 0x544763
inc ecx
mov dword [ebx], ecx
mov esi, dword [ebx + 0x116c]
mov ecx, dword [esi + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x544665
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x54481b
mov dword [eax], esi
mov dword [eax + 4], 0
mov dword [ebx + 0x116c], eax
xor ecx, ecx
mov esi, eax
add ecx, 0x20
mov dword [esi + 4], ecx
mov edx, dword [ebx + 0x116c]
mov esi, dword [edx + 4]
lea ecx, [edx + esi]
add ecx, 8
lea eax, [edx + esi - 0x18]
mov dword [edx + esi - 0x14], 0x1010133
mov dword [edx + esi - 0x18], 0x5961f4
mov dword [edx + esi - 0xc], ebp
mov dword [edx + esi - 0x10], edi
mov edi, dword [esp + 8]
mov dword [edx + esi - 8], edi
mov dword [edx + esi - 4], 0
mov dword [edx + esi], 0
mov edx, dword [esp + 0xc]
mov byte [ecx - 4], dl
movzx edx, byte [esp + 3]
mov byte [ecx - 3], dl
jmp 0x544763
push ecx
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ecx, ebx
add esp, 8
mov ebx, eax
mov dword [ecx + 8], eax
test eax, eax
je 0x54481b
mov eax, ebp
sar eax, 2
sar ebp, 1
lea esi, [ebx + eax*4]
lea eax, [ebx + ebp*4]
mov dword [ecx + 0x10], eax
mov ebx, ecx
mov ebp, dword [esp + 0x1c]
lea eax, [esi + 4]
mov dword [ebx + 0xc], eax
mov dword [esi], edi
mov ecx, dword [ebx]
mov eax, dword [ebx + 4]
cmp ecx, eax
je 0x544706
cmp byte [ecx], 0x45
je 0x54476b
mov ecx, ebx
call fcn.00541090
test eax, eax
je 0x544761
mov edi, eax
mov esi, dword [ebx + 0xc]
cmp esi, dword [ebx + 0x10]
jne 0x5446f0
mov eax, dword [ebx + 8]
mov ebp, esi
sub ebp, eax
lea ecx, [ebp*2]
cmp eax, dword [esp + 4]
jne 0x5446c1
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x54481b
mov ebx, eax
mov eax, dword [esp + 4]
cmp esi, eax
je 0x544755
push ebp
push eax
push ebx
call sub.api_ms_win_crt_private_l1_1_0.dll_memcpy
add esp, 0xc
mov ecx, dword [esp + 0x10]
mov dword [ecx + 8], ebx
jmp 0x5446da
xor eax, eax
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret
inc ecx
mov dword [ebx], ecx
mov esi, dword [esp + 0x18]
shl esi, 2
mov edx, dword [ebx + 8]
add edx, esi
mov ecx, ebx
push dword [ebx + 0xc]
call fcn.00546ac0
add esp, 4
mov dword [esp + 4], eax
mov edi, edx
add esi, dword [ebx + 8]
mov dword [ebx + 0xc], esi
mov esi, dword [ebx + 0x116c]
mov ecx, dword [esi + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x5447cd
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x54481b
mov dword [eax], esi
mov dword [eax + 4], 0
mov dword [ebx + 0x116c], eax
xor ecx, ecx
mov esi, eax
add ecx, 0x20
mov dword [esi + 4], ecx
mov eax, dword [ebx + 0x116c]
mov edx, dword [eax + 4]
mov dword [eax + edx - 0x14], 0x1010133
mov dword [eax + edx - 0x18], 0x5961f4
mov dword [eax + edx - 0xc], ebp
mov ecx, dword [esp + 0x14]
mov dword [eax + edx - 0x10], ecx
mov ecx, dword [esp + 8]
mov dword [eax + edx - 8], ecx
mov dword [eax + edx], edi
mov ecx, dword [esp + 4]
mov dword [eax + edx - 4], ecx
lea ecx, [eax + edx]
add ecx, 8
add eax, edx
add eax, 0xffffffe8
jmp 0x5446ad
call fcn.0049a9b0
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x544861
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x5448af
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edx, dword [ecx + 4]
lea eax, [ecx + edx]
add eax, 0xffffffe8
mov esi, dword [esi]
mov dword [ecx + edx - 0x14], 0x101012f
mov dword [ecx + edx - 0x18], 0x596268
mov dword [ecx + edx - 0x10], 0x5953e5
mov dword [ecx + edx - 0xc], 0x5953ef
mov dword [ecx + edx - 8], esi
mov dword [ecx + edx - 4], 0x59537e
mov dword [ecx + edx], 0x59537f
pop esi
pop edi
pop ebx
ret
call fcn.0049a9b0
nop word cs:[eax + eax]
push ebp
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x544902
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x544947
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xffffffe8
mov esi, dword [esi]
mov ebx, dword [ebp]
mov edx, dword [edx]
mov dword [ecx + edi - 0x14], 0x101012d
mov dword [ecx + edi - 0x18], 0x5962d4
mov dword [ecx + edi - 0x10], esi
mov dword [ecx + edi - 0xc], ebx
mov dword [ecx + edi - 8], edx
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0049a9b0
nop dword [eax]
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x544991
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x5449da
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x10]
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xffffffe8
mov esi, dword [esi]
mov edx, dword [edx]
mov dword [ecx + edi - 0x14], 0x1010130
mov dword [ecx + edi - 0x18], 0x595984
mov dword [ecx + edi - 0x10], 0x595407
mov dword [ecx + edi - 0xc], 0x595417
mov dword [ecx + edi - 8], esi
mov dword [ecx + edi - 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.0049a9b0
nop
push ebx
push edi
push esi
mov esi, edx
mov edi, ecx
mov ebx, dword [ecx + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfd8]
cmp eax, 0xfffff007
ja 0x544a21
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x544a6a
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
mov edx, dword [esp + 0x10]
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi]
add eax, 0xffffffe8
mov esi, dword [esi]
mov edx, dword [edx]
mov dword [ecx + edi - 0x14], 0x1010130
mov dword [ecx + edi - 0x18], 0x595984
mov dword [ecx + edi - 0x10], 0x595424
mov dword [ecx + edi - 0xc], 0x59542f
mov dword [ecx + edi - 8], esi
mov dword [ecx + edi - 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.0049a9b0
nop
push ebp
push ebx
push edi
push esi
mov edi, ecx
call fcn.00547110
test eax, eax
je 0x546f5e
mov esi, eax
mov eax, dword [edi]
cmp dword [edi + 4], eax
je 0x546f5a
cmp byte [eax], 0x49
jne 0x546f5a
xor ebp, ebp
mov ecx, edi
xor edx, edx
call fcn.0053f8d0
test eax, eax
je 0x546f60
mov ebx, eax
mov ebp, dword [edi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x546f2c
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x546f67
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [edi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x596aa4
mov dword [eax + ecx], esi
mov dword [eax + ecx + 4], ebx
jmp 0x546f60
mov ebp, esi
jmp 0x546f60
xor ebp, ebp
mov eax, ebp
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0049a9b0
nop dword [eax]
push ebp
push ebx
push edi
push esi
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, ecx
sub edx, eax
je 0x546f97
movsx edi, byte [eax]
add edi, 0xffffffd0
cmp edi, 9
ja 0x546f97
mov ecx, esi
pop esi
pop edi
pop ebx
pop ebp
jmp 0x546ec0
cmp edx, 2
jb 0x546fe5
movzx edx, byte [eax]
cmp dl, 0x64
jne 0x546fd5
cmp byte [eax + 1], 0x6e
jne 0x546fd2
add eax, 2
mov dword [esi], eax
cmp ecx, eax
je 0x547090
movsx eax, byte [eax]
add eax, 0xffffffd0
cmp eax, 9
ja 0x547090
mov ecx, esi
call 0x546ec0
jmp 0x547097
movzx edx, byte [eax]
cmp dl, 0x6f
jne 0x546fe5
cmp byte [eax + 1], 0x6e
jne 0x546fe5
add eax, 2
mov dword [esi], eax
xor ebp, ebp
mov ecx, esi
xor edx, edx
call fcn.005473d0
test eax, eax
je 0x547089
mov edi, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x547087
cmp byte [eax], 0x49
jne 0x547087
xor ebp, ebp
mov ecx, esi
xor edx, edx
call fcn.0053f8d0
test eax, eax
je 0x547089
mov ebx, eax
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x547059
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x547105
mov dword [eax], ebp
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebp, eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x596aa4
mov dword [eax + ecx], edi
mov dword [eax + ecx + 4], ebx
jmp 0x547089
mov ebp, edi
mov eax, ebp
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, esi
call fcn.00546d80
mov edi, eax
test eax, eax
je 0x547101
mov ebx, dword [esi + 0x116c]
mov ecx, dword [ebx + 4]
lea eax, [ecx - 0xfe8]
cmp eax, 0xfffff007
ja 0x5470d7
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x547105
mov dword [eax], ebx
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
xor ecx, ecx
mov ebx, eax
add ecx, 0x10
mov dword [ebx + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx]
add ebp, 0xfffffff8
mov dword [eax + ecx - 4], 0x1010126
mov dword [eax + ecx - 8], 0x595bb0
mov dword [eax + ecx], edi
jmp 0x547089
xor ebp, ebp
jmp 0x547089
call fcn.0049a9b0
nop word [eax + eax]