Function at 0x440250
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x164
mov byte [esp + 0x1b], 0
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, ecx
sub edx, eax
cmp edx, 1
ja 0x44027b
mov byte [esp + 0x1b], 0
xor ebp, ebp
jmp case.0x4402bb.58
mov dl, byte [eax]
cmp dl, 0x67
jne 0x4402a5
cmp byte [eax + 1], 0x73
jne 0x4402a5
add eax, 2
mov edx, ecx
xor ebp, ebp
sub edx, eax
mov dword [esi], eax
mov byte [esp + 0x1b], 1
cmp edx, 2
jb case.0x4402bb.58
mov dl, byte [eax]
jmp 0x4402aa
mov byte [esp + 0x1b], 0
movsx edx, dl
xor ebp, ebp
add edx, 0xffffffcf
cmp edx, 0x43
ja case.0x4402bb.58
jmp dword [edx*4 + 0x46f518]
mov ecx, esi
call 0x4435e0
jmp 0x44127a
movsx ecx, byte [eax + 1]
add ecx, 0xffffffaa
cmp ecx, 0x20
ja case.0x4402bb.58
jmp dword [ecx*4 + 0x46fa60]
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x114], 0x470825
mov dword [esp + 0x118], 0x470827
movsd xmm0, qword [esp + 0x114]
jmp 0x44126e
movsx ecx, byte [eax + 1]
add ecx, 0xffffff9b
cmp ecx, 0x12
ja case.0x4402bb.58
jmp dword [ecx*4 + 0x46f628]
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
jmp 0x440a76
movsx edx, byte [eax + 1]
cmp edx, 0x6c
je 0x440771
cmp edx, 0x78
jne case.0x4402bb.58
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov ecx, esi
call fcn.00440250
test eax, eax
mov dword [esp + 0x14], eax
je 0x44138f
lea eax, [esp + 0x14]
lea edx, [esp + 0xc]
mov ecx, esi
mov dword [esp], eax
call 0x443de0
jmp 0x44127a
movsx ecx, byte [eax + 1]
add ecx, 0xffffff9f
cmp ecx, 0x17
ja case.0x4402bb.58
jmp dword [ecx*4 + 0x46f8e4]
mov ecx, esi
call 0x4441b0
jmp 0x44127a
sub ecx, eax
cmp ecx, 2
jb 0x440873
mov dl, byte [eax + 1]
cmp dl, 0x70
jne 0x440859
mov ecx, esi
call 0x442870
jmp 0x44127a
movsx ecx, byte [eax + 1]
add ecx, 0xffffff9d
cmp ecx, 0x13
ja case.0x4402bb.58
jmp dword [ecx*4 + 0x46fae4]
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.0043be00
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov ecx, esi
call fcn.00440250
test eax, eax
mov dword [esp + 0x14], eax
je 0x44138f
lea eax, [esp + 0x14]
lea edx, [esp + 0xc]
mov ecx, esi
mov dword [esp], eax
call 0x442ff0
jmp 0x44127a
movsx ecx, byte [eax + 1]
cmp ecx, 0x4f
je 0x44087f
cmp ecx, 0x71
je 0x4408a8
cmp ecx, 0x6f
jne case.0x4402bb.58
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x10c], 0x470828
mov dword [esp + 0x110], 0x470829
movsd xmm0, qword [esp + 0x10c]
jmp 0x44126e
movsx ecx, byte [eax + 1]
cmp ecx, 0x74
je 0x440830
cmp ecx, 0x65
jne case.0x4402bb.58
add eax, 2
mov dword [esi], eax
mov dword [esp + 0xf4], 0x470830
mov dword [esp + 0xf8], 0x470832
movsd xmm0, qword [esp + 0xf4]
jmp 0x44126e
mov ecx, esi
call 0x441440
jmp 0x44127a
mov ecx, esi
call fcn.0043f1a0
jmp 0x44127a
movsx ecx, byte [eax + 1]
add ecx, 0xffffffad
cmp ecx, 0x21
ja case.0x4402bb.58
jmp dword [ecx*4 + 0x46f9d8]
add eax, 2
mov dword [esi], eax
mov dword [esp + 0xd4], 0x47083b
mov dword [esp + 0xd8], 0x47083e
movsd xmm0, qword [esp + 0xd4]
jmp 0x44126e
movsx ecx, byte [eax + 1]
add ecx, 0xffffffae
cmp ecx, 0x20
ja case.0x4402bb.58
jmp dword [ecx*4 + 0x46f860]
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x74], 0x470861
mov dword [esp + 0x78], 0x470863
movsd xmm0, qword [esp + 0x74]
jmp 0x44126e
movsx ecx, byte [eax + 1]
add ecx, 0xffffffb2
cmp ecx, 0x2c
ja case.0x4402bb.58
jmp dword [ecx*4 + 0x46fb34]
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x144], 0x4707f1
mov dword [esp + 0x148], 0x4707f3
movsd xmm0, qword [esp + 0x144]
jmp 0x44126e
movsx edx, byte [eax + 1]
add edx, 0xffffffb0
cmp edx, 0x2a
ja case.0x4402bb.58
jmp dword [edx*4 + 0x46f674]
add eax, 2
lea edi, [esi + 0x14]
mov dword [esi], eax
mov dword [esp + 0x20], edi
mov edx, dword [esi + 0xc]
sub edx, dword [esi + 8]
sar edx, 2
mov dword [esp + 0x24], edx
jmp 0x440707
cmp byte [eax + 1], 0x75
jne case.0x4402bb.58
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov ecx, esi
call fcn.00440250
test eax, eax
mov dword [esp + 0x14], eax
je 0x44138f
mov ecx, esi
call fcn.00440250
test eax, eax
mov dword [esp + 0x28], eax
je 0x44138f
lea eax, [esp + 0x28]
lea edx, [esp + 0xc]
mov ecx, esi
mov dword [esp + 4], eax
lea eax, [esp + 0x14]
mov dword [esp], eax
call fcn.00444600
jmp 0x44127a
movsx edx, byte [eax + 1]
add edx, 0xffffffb4
cmp edx, 0x28
ja case.0x4402bb.58
jmp dword [edx*4 + 0x46f7bc]
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x5c], 0x47086a
mov dword [esp + 0x60], 0x47086c
movsd xmm0, qword [esp + 0x5c]
jmp 0x44126e
movsx edx, byte [eax + 1]
add edx, 0xffffffb7
cmp edx, 0x24
ja case.0x4402bb.58
jmp dword [edx*4 + 0x46f944]
add eax, 2
mov dword [esi], eax
mov dword [esp + 0xbc], 0x470843
mov dword [esp + 0xc0], 0x470845
movsd xmm0, qword [esp + 0xbc]
jmp 0x44126e
movsx ecx, byte [eax + 1]
add ecx, 0xffffffb3
cmp ecx, 0x26
ja case.0x4402bb.58
jmp dword [ecx*4 + 0x46f720]
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x3c], 0x470886
mov dword [esp + 0x40], 0x470888
movsd xmm0, qword [esp + 0x3c]
jmp 0x44126e
mov dword [esp + 4], eax
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ebp, eax
test eax, eax
mov dword [esi + 8], eax
je 0x441396
lea eax, [ebp + edi]
sar edi, 1
lea ecx, [ebp + edi*4]
mov edi, eax
xor ebp, ebp
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], ecx
lea eax, [edi + 4]
mov dword [esi + 0xc], eax
mov dword [edi], ebx
mov eax, dword [esi]
mov ecx, dword [esi + 4]
cmp eax, ecx
je 0x440714
cmp byte [eax], 0x45
je 0x4412b0
mov ecx, esi
call fcn.0043db00
test eax, eax
je case.0x4402bb.58
mov edi, dword [esi + 0xc]
mov ebx, eax
cmp edi, dword [esi + 0x10]
jne 0x4406fa
mov ecx, dword [esi + 8]
sub edi, ecx
cmp dword [esp + 0x20], ecx
lea eax, [edi + edi]
jne 0x4406cd
mov dword [esp + 0x1c], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x441396
mov ebp, eax
test edi, edi
je 0x440769
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], edi
mov dword [esp], ebp
mov dword [esp + 4], eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
mov dword [esi + 8], ebp
jmp 0x4406e6
add eax, 2
lea edi, [esi + 0x14]
mov dword [esi], eax
mov dword [esp + 0x20], edi
mov edx, dword [esi + 0xc]
sub edx, dword [esi + 8]
sar edx, 2
mov dword [esp + 0x24], edx
jmp 0x4407c6
mov dword [esp + 4], eax
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ebp, eax
test eax, eax
mov dword [esi + 8], eax
je 0x441396
lea eax, [ebp + edi]
sar edi, 1
lea ecx, [ebp + edi*4]
mov edi, eax
xor ebp, ebp
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], ecx
lea eax, [edi + 4]
mov dword [esi + 0xc], eax
mov dword [edi], ebx
mov eax, dword [esi]
mov ecx, dword [esi + 4]
cmp eax, ecx
je 0x4407d3
cmp byte [eax], 0x45
je 0x440ec3
mov ecx, esi
call 0x443e60
test eax, eax
je case.0x4402bb.58
mov edi, dword [esi + 0xc]
mov ebx, eax
cmp edi, dword [esi + 0x10]
jne 0x4407b9
mov ecx, dword [esi + 8]
sub edi, ecx
cmp dword [esp + 0x20], ecx
lea eax, [edi + edi]
jne 0x44078c
mov dword [esp + 0x1c], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x441396
mov ebp, eax
test edi, edi
je 0x440828
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], edi
mov dword [esp], ebp
mov dword [esp + 4], eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
mov dword [esi + 8], ebp
jmp 0x4407a5
add eax, 2
mov dword [esi], eax
mov dword [esp + 0xec], 0x470833
mov dword [esp + 0xf0], 0x470834
movsd xmm0, qword [esp + 0xec]
jmp 0x44126e
cmp ecx, 3
jb 0x440873
cmp dl, 0x4c
jne 0x440873
movsx eax, byte [eax + 2]
add eax, 0xffffffd0
cmp eax, 9
jbe 0x4403c8
mov ecx, esi
call 0x442a80
jmp 0x44127a
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x104], 0x47082a
mov dword [esp + 0x108], 0x47082c
movsd xmm0, qword [esp + 0x104]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0xfc], 0x47082d
mov dword [esp + 0x100], 0x47082f
movsd xmm0, qword [esp + 0xfc]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0xdc], 0x470838
mov dword [esp + 0xe0], 0x47083a
movsd xmm0, qword [esp + 0xdc]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x84], 0x47085c
mov dword [esp + 0x88], 0x47085e
movsd xmm0, qword [esp + 0x84]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0xe4], 0x470835
mov dword [esp + 0xe8], 0x470837
movsd xmm0, qword [esp + 0xe4]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0xcc], 0x47083f
mov dword [esp + 0xd0], 0x470840
movsd xmm0, qword [esp + 0xcc]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x7c], 0x47085f
mov dword [esp + 0x80], 0x470860
movsd xmm0, qword [esp + 0x7c]
jmp 0x44126e
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.0043be00
xor ebp, ebp
test eax, eax
mov dword [esp + 0x14], eax
je case.0x4402bb.58
mov eax, dword [esi + 0xc]
lea ecx, [esi + 0x14]
mov dword [esp + 0x20], ecx
sub eax, dword [esi + 8]
sar eax, 2
mov dword [esp + 0x24], eax
jmp 0x4409fd
mov dword [esp + 4], eax
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov ebp, eax
test eax, eax
mov dword [esi + 8], eax
je 0x441396
lea eax, [ebp + edi]
sar edi, 1
lea ecx, [ebp + edi*4]
mov edi, eax
xor ebp, ebp
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], ecx
lea eax, [edi + 4]
mov dword [esi + 0xc], eax
mov dword [edi], ebx
mov eax, dword [esi]
cmp eax, dword [esi + 4]
je 0x440a0d
cmp byte [eax], 0x45
je 0x4412ee
mov ecx, esi
call 0x443e60
test eax, eax
je case.0x4402bb.58
mov edi, dword [esi + 0xc]
mov ebx, eax
cmp edi, dword [esi + 0x10]
jne 0x4409f5
mov ecx, dword [esi + 8]
sub edi, ecx
cmp dword [esp + 0x20], ecx
lea eax, [edi + edi]
jne 0x4409c8
mov dword [esp + 0x1c], ecx
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x441396
mov ebp, eax
test edi, edi
je 0x440a62
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], edi
mov dword [esp], ebp
mov dword [esp + 4], eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
mov dword [esi + 8], ebp
jmp 0x4409e1
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.0043be00
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
lea eax, [esp + 0xc]
mov ecx, esi
mov edx, str.typeid__
jmp 0x441059
add eax, 2
mov ecx, esi
mov edx, 0x4708ba
mov dword [esi], eax
call fcn.00444ad0
jmp 0x44127a
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
lea edx, [esp + 0xc]
mov ecx, esi
call fcn.00444b50
jmp 0x44127a
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x134], 0x47080b
mov dword [esp + 0x138], 0x47080c
movsd xmm0, qword [esp + 0x134]
jmp 0x44126e
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
xor ebp, ebp
test eax, eax
mov dword [esp + 0x14], eax
je case.0x4402bb.58
mov eax, dword [esi + 0xc]
lea ecx, [esi + 0x14]
mov dword [esp + 0x20], ecx
sub eax, dword [esi + 8]
sar eax, 2
mov dword [esp + 0x1c], eax
jmp 0x440b59
mov dword [esp + 4], eax
mov dword [esp], edi
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
test eax, eax
mov dword [esi + 8], eax
je 0x441396
lea edx, [eax + ebp]
sar ebp, 1
lea ecx, [eax + ebp*4]
mov ebp, edx
mov dword [esi + 0xc], edx
mov dword [esi + 0x10], ecx
lea eax, [ebp + 4]
mov dword [esi + 0xc], eax
mov dword [ebp], ebx
mov eax, dword [esi]
cmp eax, dword [esi + 4]
je 0x440b69
cmp byte [eax], 0x45
je 0x44132f
mov ecx, esi
call fcn.00440250
test eax, eax
je 0x44138f
mov ebp, dword [esi + 0xc]
mov ebx, eax
cmp ebp, dword [esi + 0x10]
jne 0x440b50
mov edi, dword [esi + 8]
sub ebp, edi
cmp dword [esp + 0x20], edi
lea eax, [ebp + ebp]
jne 0x440b29
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
test eax, eax
je 0x441396
test ebp, ebp
je 0x440bb9
mov dword [esp + 4], edi
mov dword [esp + 8], ebp
mov dword [esp], eax
mov edi, eax
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
mov eax, edi
mov dword [esi + 8], eax
jmp 0x440b40
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x12c], 0x47080d
mov dword [esp + 0x130], 0x47080e
movsd xmm0, qword [esp + 0x12c]
jmp 0x441177
mov ecx, esi
call 0x443110
jmp 0x44127a
add eax, 2
mov dword [esi], eax
mov dword [esp + 0xac], 0x470846
mov dword [esp + 0xb0], 0x470848
movsd xmm0, qword [esp + 0xac]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0xc4], 0x470841
mov dword [esp + 0xc8], 0x470842
movsd xmm0, qword [esp + 0xc4]
jmp 0x44126e
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.0043be00
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov ecx, esi
call fcn.00440250
test eax, eax
mov dword [esp + 0x14], eax
je 0x44138f
lea eax, [esp + 0x14]
lea edx, [esp + 0xc]
mov ecx, esi
mov dword [esp], eax
call fcn.00444690
jmp 0x44127a
add eax, 2
mov dword [esi], eax
mov dword [esp + 0xb4], 0x47081c
mov dword [esp + 0xb8], 0x47081d
movsd xmm0, qword [esp + 0xb4]
jmp 0x44126e
lea edx, [eax + 2]
cmp edx, ecx
mov dword [esi], edx
je 0x4410d0
cmp byte [edx], 0x5f
jne 0x4410d0
add eax, 3
mov dword [esi], eax
mov dword [esp + 0xa4], 0x470849
mov dword [esp + 0xa8], 0x47084b
movsd xmm0, qword [esp + 0xa4]
jmp 0x441177
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x2c], 0x47088c
mov dword [esp + 0x30], 0x47088f
movsd xmm0, qword [esp + 0x2c]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x44], 0x470884
mov dword [esp + 0x48], 0x470885
movsd xmm0, qword [esp + 0x44]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x34], 0x470889
mov dword [esp + 0x38], 0x47088b
movsd xmm0, qword [esp + 0x34]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x9c], 0x47084c
mov dword [esp + 0xa0], 0x47084e
movsd xmm0, qword [esp + 0x9c]
jmp 0x44126e
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
lea edx, [esp + 0xc]
mov ecx, esi
call fcn.00444570
jmp 0x44127a
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x94], 0x470841
mov dword [esp + 0x98], 0x470842
movsd xmm0, qword [esp + 0x94]
jmp 0x441177
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x8c], 0x47084f
mov dword [esp + 0x90], 0x470850
movsd xmm0, qword [esp + 0x8c]
jmp 0x441177
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x64], 0x470868
mov dword [esp + 0x68], 0x470869
movsd xmm0, qword [esp + 0x64]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x6c], 0x470864
mov dword [esp + 0x70], 0x470867
movsd xmm0, qword [esp + 0x6c]
jmp 0x44126e
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov ecx, esi
call fcn.00440250
test eax, eax
mov dword [esp + 0x14], eax
je 0x44138f
lea eax, [esp + 0x14]
mov dword [esp], 0x470870
jmp 0x4411fa
lea edx, [eax + 2]
cmp edx, ecx
mov dword [esi], edx
je 0x441289
cmp byte [edx], 0x5f
jne 0x441289
add eax, 3
mov dword [esi], eax
mov dword [esp + 0x54], 0x47086d
mov dword [esp + 0x58], 0x47086f
movsd xmm0, qword [esp + 0x54]
jmp 0x441177
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x4c], 0x470868
mov dword [esp + 0x50], 0x470869
movsd xmm0, qword [esp + 0x4c]
jmp 0x441177
inc eax
mov edi, dword [esp + 0x24]
mov ecx, esi
mov dword [esi], eax
mov edx, dword [esi + 8]
mov eax, dword [esi + 0xc]
shl edi, 2
add edx, edi
mov dword [esp], eax
call fcn.00446750
add edi, dword [esi + 8]
mov ecx, esi
mov dword [esi + 0xc], edi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
lea edx, [esp + 0x14]
mov dword [esp], eax
call 0x4440a0
jmp 0x44127a
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x13c], 0x4707f4
mov dword [esp + 0x140], 0x4707f5
movsd xmm0, qword [esp + 0x13c]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x15c], 0x4707ec
mov dword [esp + 0x160], 0x4707ee
movsd xmm0, qword [esp + 0x15c]
jmp 0x44126e
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x154], 0x4707ef
mov dword [esp + 0x158], 0x4707f0
movsd xmm0, qword [esp + 0x154]
jmp 0x441177
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x14c], 0x4707ef
mov dword [esp + 0x150], 0x4707f0
movsd xmm0, qword [esp + 0x14c]
jmp 0x44126e
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.0043be00
jmp 0x440fc2
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
lea eax, [esp + 0xc]
mov ecx, esi
mov edx, str.alignof__
mov dword [esp], eax
call 0x4413a0
jmp 0x44127a
add eax, 2
cmp ecx, eax
mov dword [esi], eax
je case.0x4402bb.58
mov al, byte [eax]
cmp al, 0x66
je 0x441370
cmp al, 0x54
jne case.0x4402bb.58
mov ecx, esi
call fcn.0043f1a0
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
lea edx, [esp + 0xc]
mov ecx, esi
call fcn.004448c0
jmp 0x44127a
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.0043be00
jmp 0x441042
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
lea eax, [esp + 0xc]
mov ecx, esi
mov edx, str.sizeof__
mov dword [esp], eax
call fcn.00444820
jmp 0x44127a
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.0043be00
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov ecx, esi
call fcn.00440250
test eax, eax
mov dword [esp + 0x14], eax
je 0x44138f
lea eax, [esp + 0x14]
lea edx, [esp + 0xc]
mov ecx, esi
mov dword [esp], eax
call fcn.00444720
jmp 0x44127a
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
lea edx, [esp + 0xc]
mov ecx, esi
call fcn.004447b0
jmp 0x44127a
mov ecx, esi
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov dword [esp], 0x470849
jmp 0x4412a3
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov byte [esp + 0x14], 1
jmp 0x4411a5
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.0043be00
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov ecx, esi
call fcn.00440250
test eax, eax
mov dword [esp + 0x14], eax
je 0x44138f
lea eax, [esp + 0x14]
lea edx, [esp + 0xc]
mov ecx, esi
mov dword [esp], eax
call 0x443550
jmp 0x44127a
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x124], 0x47081c
mov dword [esp + 0x128], 0x47081d
movsd xmm0, qword [esp + 0x124]
mov ecx, esi
movsd qword [esp], xmm0
call 0x442f60
jmp 0x44127a
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov byte [esp + 0x14], 0
lea eax, [esp + 0x14]
lea edx, [esp + 0xc]
mov ecx, esi
mov dword [esp + 4], eax
lea eax, [esp + 0x1b]
mov dword [esp], eax
call 0x4434c0
jmp 0x44127a
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov ecx, esi
call fcn.00440250
test eax, eax
mov dword [esp + 0x14], eax
je 0x44138f
lea eax, [esp + 0x14]
mov dword [esp], 0x47081e
mov dword [esp + 4], eax
lea edx, [esp + 0xc]
mov ecx, esi
call 0x443cb0
jmp 0x44127a
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov ecx, esi
call fcn.00440250
test eax, eax
mov dword [esp + 0x14], eax
je 0x44138f
lea eax, [esp + 0x14]
lea edx, [esp + 0xc]
mov ecx, esi
mov dword [esp], eax
call 0x443d50
jmp 0x44127a
add eax, 2
mov dword [esi], eax
mov dword [esp + 0x11c], 0x470823
mov dword [esp + 0x120], 0x470824
movsd xmm0, qword [esp + 0x11c]
mov ecx, esi
movsd qword [esp], xmm0
call 0x442eb0
mov ebp, eax
mov eax, ebp
add esp, 0x164
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, esi
call fcn.00440250
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
mov dword [esp], 0x47086d
lea edx, [esp + 0xc]
mov ecx, esi
call 0x444120
jmp 0x44127a
inc eax
mov edi, dword [esp + 0x24]
mov ecx, esi
mov dword [esi], eax
mov edx, dword [esi + 8]
mov eax, dword [esi + 0xc]
shl edi, 2
add edx, edi
mov dword [esp], eax
call fcn.00446750
add edi, dword [esi + 8]
mov ecx, esi
mov dword [esi + 0xc], edi
mov dword [esp + 0x10], edx
lea edx, [esp + 0xc]
mov dword [esp + 0xc], eax
call fcn.004449c0
mov dword [esp + 0xc], eax
jmp 0x44137f
inc eax
mov edi, dword [esp + 0x24]
mov ecx, esi
mov dword [esi], eax
mov edx, dword [esi + 8]
mov eax, dword [esi + 0xc]
shl edi, 2
add edx, edi
mov dword [esp], eax
call fcn.00446750
add edi, dword [esi + 8]
mov ecx, esi
mov dword [esi + 0xc], edi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
lea edx, [esp + 0x14]
mov dword [esp], eax
call fcn.00444a40
jmp 0x44127a
inc eax
mov edi, dword [esp + 0x1c]
mov ecx, esi
mov dword [esi], eax
mov edx, dword [esi + 8]
mov eax, dword [esi + 0xc]
shl edi, 2
add edx, edi
mov dword [esp], eax
call fcn.00446750
add edi, dword [esi + 8]
mov ecx, esi
mov dword [esi + 0xc], edi
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
lea edx, [esp + 0x14]
mov dword [esp], eax
call 0x443080
jmp 0x44127a
mov ecx, esi
call 0x442870
test eax, eax
mov dword [esp + 0xc], eax
je 0x44138f
lea edx, [esp + 0xc]
mov ecx, esi
call fcn.00444930
jmp 0x44127a
xor ebp, ebp
jmp case.0x4402bb.58
call fcn.00421650
nop dword [eax + eax]
push ebp
push ebx
push edi
push esi
mov ebx, dword [ecx + 0x116c]
mov edi, ecx
mov esi, edx
mov ecx, dword [ebx + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x4413df
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x441435
mov dword [eax], ebx
xor ecx, ecx
mov ebx, eax
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ebx, dword [edi + 0x116c]
mov ebp, dword [ebx + 4]
lea edi, [ebx + ebp - 0x18]
push esi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ecx, dword [esp + 0x14]
add eax, esi
mov ecx, dword [ecx]
mov dword [ebx + ebp - 0x14], 0x101012f
mov dword [ebx + ebp - 0x18], 0x4716d4
mov dword [ebx + ebp - 0x10], esi
mov dword [ebx + ebp - 0xc], eax
mov eax, edi
mov dword [ebx + ebp - 8], ecx
mov dword [ebx + ebp - 4], 0x4707ea
mov dword [ebx + ebp], 0x4707eb
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.00421650
nop word [eax + eax]
push ebp
push ebx
push edi
push esi
sub esp, 0x14
mov ebp, dword [ecx]
mov ebx, dword [ecx + 4]
xor edi, edi
cmp ebp, ebx
je case.0x441478.84
cmp byte [ebp], 0x4c
jne case.0x441478.84
lea eax, [ebp + 1]
mov esi, ecx
mov dword [ecx], eax
mov ecx, ebx
sub ecx, eax
je case.0x441478.85
movsx eax, byte [eax]
lea edx, [eax - 0x54]
cmp edx, 0x25
ja case.0x441478.85
jmp dword [edx*4 + 0x46fbe8]
cmp ecx, 2
jb case.0x441478.84
cmp al, 0x5f
jne case.0x441478.84
cmp byte [ebp + 2], 0x5a
jne case.0x441478.84
add ebp, 3
mov ecx, esi
mov dword [esi], ebp
call fcn.0043b490
test eax, eax
je case.0x441478.84
mov ecx, dword [esi]
cmp ecx, dword [esi + 4]
je case.0x441478.84
cmp byte [ecx], 0x45
jne case.0x441478.84
inc ecx
mov dword [esi], ecx
jmp 0x441557
mov ecx, esi
call fcn.0043be00
test eax, eax
mov dword [esp + 0x10], eax
je 0x442011
mov ecx, dword [esi]
mov edx, dword [esi + 4]
xor edi, edi
cmp edx, ecx
je 0x44151e
movsx ebx, byte [ecx]
add ebx, 0xffffffd0
cmp ebx, 9
ja 0x44151e
lea ebp, [ecx + 1]
nop word cs:[eax + eax]
mov ebx, ebp
cmp edx, ebp
mov dword [esi], ebp
je 0x44155e
movsx edi, byte [ebx]
lea ebp, [ebx + 1]
add edi, 0xffffffd0
cmp edi, 0xa
mov edi, 0
jb 0x441500
dec ebp
jmp 0x441524
mov ebx, ecx
xor ebp, ebp
xor ecx, ecx
cmp ebx, edx
mov dword [esp + 0xc], ebp
mov dword [esp + 8], ecx
je case.0x441478.84
cmp byte [ebx], 0x45
jne case.0x441478.84
inc ebx
cmp ecx, ebp
mov dword [esi], ebx
je 0x441557
lea eax, [esp + 8]
lea edx, [esp + 0x10]
mov ecx, esi
push eax
call fcn.00444c40
add esp, 4
mov edi, eax
jmp case.0x441478.84
mov ebp, edx
jmp 0x441524
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x441581
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x441581
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x442018
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x442018
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x44159b
dec eax
mov ebp, eax
jmp 0x44201c
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x4415d8
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x4415d8
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x4420ad
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x4420ad
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x4415f2
dec eax
mov ebp, eax
jmp 0x4420b1
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x44162f
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x44162f
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x442142
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x442142
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x441649
dec eax
mov ebp, eax
jmp 0x442146
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x441686
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x441686
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x4421d7
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x4421d7
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x4416a0
dec eax
mov ebp, eax
jmp 0x4421db
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x4416dd
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x4416dd
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x44226c
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x44226c
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x4416f7
dec eax
mov ebp, eax
jmp 0x442270
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x441734
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x441734
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x442301
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x442301
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x44174e
dec eax
mov ebp, eax
jmp 0x442305
lea ecx, [ebp + 2]
mov eax, ebx
sub eax, ecx
mov dword [esi], ecx
cmp eax, 0x11
jb case.0x441478.84
movsx eax, byte [ebp + 2]
mov dword [esp + 4], ecx
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 3]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 4]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 5]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 6]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 7]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 8]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 9]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 0xa]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 0xb]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0xc]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0xd]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0xe]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0xf]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0x10]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0x11]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
lea eax, [ebp + 0x12]
cmp eax, ebx
mov dword [esi], eax
mov dword [esp], eax
je 0x442011
mov eax, dword [esp]
mov edi, 0
cmp byte [eax], 0x45
jne case.0x441478.84
add ebp, 0x13
mov dword [esi], ebp
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x441943
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x10
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea edi, [eax + ecx - 8]
mov dword [eax + ecx - 4], 0x101013f
mov dword [eax + ecx - 8], 0x470a80
mov edx, dword [esp + 4]
mov dword [eax + ecx], edx
mov edx, dword [esp]
mov dword [eax + ecx + 4], edx
jmp case.0x441478.84
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x441998
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x441998
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x442396
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x442396
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x4419b2
dec eax
mov ebp, eax
jmp 0x44239a
lea ecx, [ebp + 2]
mov eax, ebx
sub eax, ecx
mov dword [esi], ecx
cmp eax, 0x15
jb case.0x441478.84
movsx eax, byte [ebp + 2]
mov dword [esp + 4], ecx
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 3]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 4]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 5]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 6]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 7]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 8]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 9]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 0xa]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 0xb]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0xc]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0xd]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0xe]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0xf]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0x10]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0x11]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0x12]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0x13]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0x14]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
movsx eax, byte [ebp + 0x15]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x442011
lea eax, [ebp + 0x16]
cmp eax, ebx
mov dword [esi], eax
mov dword [esp], eax
je 0x442011
mov eax, dword [esp]
mov edi, 0
cmp byte [eax], 0x45
jne case.0x441478.84
add ebp, 0x17
mov dword [esi], ebp
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x441bff
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x10
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010140
lea edi, [eax + ecx - 8]
mov dword [eax + ecx - 8], 0x470af4
jmp 0x441966
lea ecx, [ebp + 2]
mov eax, ebx
sub eax, ecx
mov dword [esi], ecx
cmp eax, 9
jb case.0x441478.84
movsx eax, byte [ebp + 2]
mov dword [esp + 4], ecx
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 3]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 4]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 5]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 6]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 7]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 8]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
movsx eax, byte [ebp + 9]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je case.0x441478.84
lea eax, [ebp + 0xa]
cmp eax, ebx
mov dword [esi], eax
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
add ebp, 0xb
mov ebx, eax
mov dword [esi], ebp
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x441d45
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x10
mov edx, dword [esp + 4]
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x101013e
mov dword [eax + ecx - 8], 0x470a0c
mov dword [eax + ecx], edx
lea edi, [eax + ecx - 8]
mov dword [eax + ecx + 4], ebx
jmp case.0x441478.84
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x441d97
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x441d97
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x44242b
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x44242b
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x441db1
dec eax
mov ebp, eax
jmp 0x44242f
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x441dee
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x441dee
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x4424c0
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x4424c0
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x441e08
dec eax
mov ebp, eax
jmp 0x4424c4
cmp ecx, 3
jb case.0x441478.84
cmp al, 0x62
jne case.0x441478.84
mov al, byte [ebp + 2]
cmp al, 0x30
je 0x44283f
cmp al, 0x31
jne case.0x441478.84
cmp byte [ebp + 3], 0x45
jne case.0x441478.84
add ebp, 4
mov dword [esi], ebp
mov dword [esp + 8], 1
jmp 0x442852
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x441e85
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x441e85
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x442555
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x442555
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x441e9f
dec eax
mov ebp, eax
jmp 0x442559
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x441edc
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x441edc
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x4425ea
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x4425ea
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x441ef6
dec eax
mov ebp, eax
jmp 0x4425ee
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x441f33
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x441f33
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x44267f
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x44267f
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x441f4d
dec eax
mov ebp, eax
jmp 0x442683
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x441f8a
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x441f8a
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x442714
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x442714
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x441fa4
dec eax
mov ebp, eax
jmp 0x442718
lea edx, [ebp + 2]
mov eax, ebx
cmp edx, ebx
mov ecx, edx
mov dword [esi], edx
je 0x441fdd
cmp byte [edx], 0x6e
mov eax, edx
mov ecx, edx
jne 0x441fdd
add ebp, 3
mov eax, ebp
mov ecx, ebp
mov dword [esi], ebp
xor edi, edi
cmp ecx, ebx
je 0x4427a9
movsx ecx, byte [eax]
add ecx, 0xffffffd0
cmp ecx, 9
ja 0x4427a9
inc eax
cmp ebx, eax
mov dword [esi], eax
je 0x442011
movsx ecx, byte [eax]
inc eax
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x441ff7
dec eax
mov ebp, eax
jmp 0x4427ad
xor edi, edi
jmp case.0x441478.84
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x442075
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x470904
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x470906
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x44210a
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x47090b
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x470913
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x44219f
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x4708fd
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x4708fe
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x442234
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x470901
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x470903
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x4422c9
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x470907
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x47090a
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x44235e
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x4708cd
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x4708d8
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x4423f3
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x4708ff
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x470900
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x442488
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x470914
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x470925
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x44251d
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x4708e7
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x4708ec
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x4425b2
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x4708c8
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x4708cc
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x442647
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x4708fc
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x4708fc
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x4426dc
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x4708d9
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x4708e6
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x442771
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x4708c0
mov dword [eax + ecx - 0xc], 0x4708c7
jmp 0x44282d
xor ebp, ebp
xor edx, edx
cmp eax, ebx
je case.0x441478.84
cmp edx, ebp
je case.0x441478.84
cmp byte [eax], 0x45
jne case.0x441478.84
inc eax
mov ebx, edx
mov dword [esi], eax
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x4427fa
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442862
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x101013d
mov dword [eax + ecx - 0x18], 0x470930
mov dword [eax + ecx - 0x10], 0x4708ed
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 0xc], 0x4708fb
mov dword [eax + ecx - 8], ebx
mov dword [eax + ecx - 4], ebp
mov eax, edi
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
cmp byte [ebp + 3], 0x45
jne case.0x441478.84
add ebp, 4
mov dword [esi], ebp
mov dword [esp + 8], 0
lea edx, [esp + 8]
mov ecx, esi
call fcn.00444bc0
jmp 0x441557
call fcn.00421650
nop word [eax + eax]
push ebp
push ebx
push edi
push esi
mov esi, ecx
mov edx, dword [ecx]
mov ecx, dword [ecx + 4]
xor eax, eax
mov edi, ecx
sub edi, edx
cmp edi, 2
jb 0x442a69
cmp byte [edx], 0x66
jne 0x442a69
cmp byte [edx + 1], 0x70
jne 0x4428c8
lea edi, [edx + 2]
cmp edi, ecx
mov dword [esi], edi
je 0x44291c
cmp byte [edi], 0x72
jne 0x4428ae
add edx, 3
mov edi, edx
mov dword [esi], edx
cmp edi, ecx
je 0x44291c
cmp byte [edi], 0x56
jne 0x4428ba
inc edi
mov dword [esi], edi
cmp edi, ecx
je 0x44291c
cmp byte [edi], 0x4b
jne 0x44291e
inc edi
mov dword [esi], edi
jmp 0x44291e
cmp byte [edx], 0x66
jne 0x442a69
cmp byte [edx + 1], 0x4c
jne 0x442a69
lea edi, [edx + 2]
xor eax, eax
cmp ecx, edi
mov dword [esi], edi
je 0x442968
movsx ebx, byte [edi]
add ebx, 0xffffffd0
cmp ebx, 9
ja 0x442968
add edx, 3
mov ebx, edx
cmp ecx, edx
mov dword [esi], edx
je 0x4429b6
movsx ebp, byte [ebx]
lea edx, [ebx + 1]
add ebp, 0xffffffd0
cmp ebp, 0xa
jb 0x4428f8
dec edx
cmp edi, edx
jne 0x442976
jmp 0x442a69
mov edi, ecx
xor eax, eax
cmp ecx, edi
je 0x4429f6
movsx edx, byte [edi]
add edx, 0xffffffd0
cmp edx, 9
ja 0x4429f6
lea ebx, [edi + 1]
nop word [eax + eax]
mov edx, ebx
cmp ecx, ebx
mov dword [esi], ebx
je 0x442a6e
movsx ebp, byte [edx]
lea ebx, [edx + 1]
add ebp, 0xffffffd0
cmp ebp, 0xa
jb 0x442940
dec ebx
cmp edx, ecx
jne 0x442a00
jmp 0x442a69
mov ebx, edi
xor edx, edx
xor edi, edi
cmp edi, edx
je 0x442a69
cmp ebx, ecx
je 0x442a69
cmp byte [ebx], 0x70
jne 0x442a69
lea edi, [ebx + 1]
cmp edi, ecx
mov dword [esi], edi
je 0x4429c1
cmp byte [edi], 0x72
jne 0x44299c
add ebx, 2
mov edi, ebx
mov dword [esi], ebx
cmp edi, ecx
je 0x4429c3
cmp byte [edi], 0x56
jne 0x4429a8
inc edi
mov dword [esi], edi
cmp edi, ecx
je 0x4429c3
cmp byte [edi], 0x4b
jne 0x4429c3
inc edi
mov dword [esi], edi
jmp 0x4429c3
mov edx, ecx
cmp edi, edx
jne 0x442976
jmp 0x442a69
mov edi, ecx
xor eax, eax
cmp ecx, edi
je 0x4429f6
movsx edx, byte [edi]
add edx, 0xffffffd0
cmp edx, 9
ja 0x4429f6
lea ebx, [edi + 1]
mov edx, ebx
cmp ecx, ebx
mov dword [esi], ebx
je 0x442a6e
movsx ebp, byte [edx]
lea ebx, [edx + 1]
add ebp, 0xffffffd0
cmp ebp, 0xa
jb 0x4429d7
jmp 0x44295a
mov edx, edi
xor ebx, ebx
xor edi, edi
cmp edx, ecx
je 0x442a69
cmp byte [edx], 0x5f
jne 0x442a69
inc edx
mov dword [esi], edx
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x442a3f
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442a76
mov dword [eax], ebp
xor ecx, ecx
mov ebp, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov ecx, dword [esi + 0x116c]
mov edx, dword [ecx + 4]
lea eax, [ecx + edx - 8]
mov dword [ecx + edx - 4], 0x1010136
mov dword [ecx + edx - 8], 0x470bd8
mov dword [ecx + edx + 4], ebx
mov dword [ecx + edx], edi
pop esi
pop edi
pop ebx
pop ebp
ret
mov ebx, ecx
cmp edx, ecx
jne 0x442a00
jmp 0x442a69
call fcn.00421650
nop dword [eax + eax]
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
xor edi, edi
cmp eax, ecx
je case.0x442b20.177
cmp byte [eax], 0x66
jne case.0x442b20.177
lea edx, [eax + 1]
cmp ecx, edx
mov dword [esi], edx
je case.0x442b20.177
mov dh, byte [edx]
mov dl, dh
add dl, 0xb4
cmp dl, 0x26
ja case.0x442b20.177
mov byte [esp + 4], dh
mov bl, 1
movzx edx, dl
mov dword [esp + 8], ebx
jmp dword [edx*4 + 0x46fc80]
mov dword [esp + 8], 0
lea edx, [eax + 2]
sub ecx, edx
mov dword [esi], edx
cmp ecx, 2
jb case.0x442b20.177
mov cl, byte [edx]
add cl, 0x9f
cmp cl, 0x11
ja case.0x442b20.177
movzx ecx, cl
jmp dword [ecx*4 + 0x46fd1c]
mov cl, byte [eax + 3]
add cl, 0xb2
cmp cl, 0x20
ja case.0x442b20.177
movzx ecx, cl
mov ebp, 0x4707ee
mov dword [esp], 0x4707ec
jmp dword [ecx*4 + 0x46ff18]
mov ebp, 0x4707f3
mov dword [esp], 0x4707f1
jmp case.0x442b20.159
mov cl, byte [eax + 3]
add cl, 0xb3
cmp cl, 0x26
ja case.0x442b20.177
movzx ecx, cl
mov ebp, 0x470885
mov dword [esp], 0x470884
jmp dword [ecx*4 + 0x46fd64]
mov ebp, 0x470888
mov dword [esp], 0x470886
jmp case.0x442b20.159
mov cl, byte [eax + 3]
cmp cl, 0x65
je 0x442ce5
cmp cl, 0x74
jne case.0x442b20.177
mov ebp, 0x470834
mov dword [esp], 0x470833
jmp case.0x442b20.159
mov cl, byte [eax + 3]
add cl, 0xad
cmp cl, 0x21
ja case.0x442b20.177
movzx ecx, cl
mov ebp, 0x470837
mov dword [esp], 0x470835
jmp dword [ecx*4 + 0x46fe90]
mov ebp, 0x47083e
mov dword [esp], 0x47083b
jmp case.0x442b20.159
mov cl, byte [eax + 3]
cmp cl, 0x4f
je 0x442d18
cmp cl, 0x6f
je 0x442d07
cmp cl, 0x71
jne case.0x442b20.177
mov ebp, 0x47082f
mov dword [esp], 0x47082d
jmp case.0x442b20.159
cmp byte [eax + 3], 0x6d
jne case.0x442b20.177
mov ebp, 0x47080c
mov dword [esp], 0x47080b
jmp case.0x442b20.159
mov cl, byte [eax + 3]
cmp cl, 0x56
je 0x442d3a
cmp cl, 0x73
je 0x442d29
cmp cl, 0x76
jne case.0x442b20.177
mov ebp, 0x470824
mov dword [esp], 0x470823
jmp case.0x442b20.159
mov cl, byte [eax + 3]
add cl, 0xb7
cmp cl, 0x23
ja case.0x442b20.177
movzx ecx, cl
mov ebp, 0x470842
mov dword [esp], 0x470841
jmp dword [ecx*4 + 0x46fe00]
mov ebp, 0x470845
mov dword [esp], 0x470843
jmp case.0x442b20.159
cmp byte [eax + 3], 0x65
jne case.0x442b20.177
mov ebp, 0x47084e
mov dword [esp], 0x47084c
jmp case.0x442b20.159
mov cl, byte [eax + 3]
cmp cl, 0x4c
je 0x442cf6
cmp cl, 0x6c
jne case.0x442b20.177
mov ebp, 0x470869
mov dword [esp], 0x470868
jmp case.0x442b20.159
mov cl, byte [eax + 3]
cmp cl, 0x52
je 0x442d59
cmp cl, 0x6f
je 0x442d4b
cmp cl, 0x72
jne case.0x442b20.177
mov ebp, 0x470860
mov dword [esp], 0x47085f
jmp case.0x442b20.159
mov ebp, 0x470832
mov dword [esp], 0x470830
jmp case.0x442b20.159
mov ebp, 0x47086c
mov dword [esp], 0x47086a
jmp case.0x442b20.159
mov ebp, 0x470829
mov dword [esp], 0x470828
jmp case.0x442b20.159
mov ebp, 0x47082c
mov dword [esp], 0x47082a
jmp case.0x442b20.159
mov ebp, 0x470820
mov dword [esp], 0x47081e
jmp case.0x442b20.159
mov ebp, 0x470827
mov dword [esp], 0x470825
jmp case.0x442b20.159
mov ebp, 0x47085e
mov dword [esp], 0x47085c
jmp case.0x442b20.159
mov ebp, 0x470863
mov dword [esp], 0x470861
jmp case.0x442b20.159
mov ebp, 0x47088f
mov dword [esp], 0x47088c
jmp case.0x442b20.159
mov ebp, 0x47088b
mov dword [esp], 0x470889
jmp case.0x442b20.159
mov ebp, 0x47083a
mov dword [esp], 0x470838
jmp case.0x442b20.159
mov ebp, 0x4707f5
mov dword [esp], 0x4707f4
jmp case.0x442b20.159
mov ebp, 0x470848
mov dword [esp], 0x470846
jmp case.0x442b20.159
mov ebp, 0x470840
mov dword [esp], 0x47083f
jmp case.0x442b20.159
mov ebp, 0x4707f0
mov dword [esp], 0x4707ef
jmp case.0x442b20.159
mov ebp, 0x47081d
mov dword [esp], 0x47081c
add eax, 4
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
test eax, eax
je case.0x442b20.177
mov ebx, eax
mov al, byte [esp + 4]
cmp al, 0x52
je 0x442df7
cmp al, 0x4c
jne 0x442e1d
mov ecx, esi
call fcn.00440250
test eax, eax
je 0x442e9d
cmp byte [esp + 8], 0
mov edi, eax
mov eax, ebx
mov dword [esp + 4], ebp
cmovne eax, edi
cmovne edi, ebx
mov ebx, eax
jmp 0x442e23
mov dword [esp + 4], ebp
xor edi, edi
mov ebp, dword [esi + 0x116c]
mov ecx, dword [ebp + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x442e5a
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442ea9
mov dword [eax], ebp
xor ecx, ecx
mov ebp, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov edx, dword [esp]
mov dword [ebp + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x1010139
mov dword [eax + ecx - 0x18], 0x470c44
mov dword [eax + ecx - 0x10], ebx
mov dword [eax + ecx - 0xc], edi
mov dword [eax + ecx - 8], edx
mov edx, dword [esp + 4]
lea edi, [eax + ecx - 0x18]
mov dword [eax + ecx - 4], edx
mov edx, dword [esp + 8]
mov byte [eax + ecx], dl
jmp case.0x442b20.177
xor edi, edi
mov eax, edi
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.00421650
nop
push ebp
push ebx
push edi
push esi
mov edi, ecx
call fcn.00440250
xor ebp, ebp
test eax, eax
je 0x442f47
mov ecx, edi
mov esi, eax
call fcn.00440250
test eax, eax
je 0x442f47
mov ebp, dword [edi + 0x116c]
mov ebx, eax
mov ecx, dword [ebp + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x442f0b
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442f4e
mov dword [eax], ebp
xor ecx, ecx
mov ebp, eax
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
add ecx, 0x20
lea eax, [esp + 0x14]
mov dword [ebp + 4], ecx
mov ecx, dword [edi + 0x116c]
mov edi, dword [eax]
mov eax, dword [eax + 4]
mov edx, dword [ecx + 4]
lea ebp, [ecx + edx - 0x18]
mov dword [ecx + edx - 0x14], 0x101012a
mov dword [ecx + edx - 0x18], 0x470d20
mov dword [ecx + edx - 0x10], esi
mov dword [ecx + edx - 0xc], edi
mov dword [ecx + edx - 8], eax
mov dword [ecx + edx - 4], ebx
mov eax, ebp
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.00421650
nop word cs:[eax + eax]
nop dword [eax]
push ebx
push edi
push esi
mov edi, ecx
call fcn.00440250
test eax, eax
je 0x442fe1
mov ebx, dword [edi + 0x116c]
mov esi, eax
mov ecx, dword [ebx + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x442fa7
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x442fe7
mov dword [eax], ebx
xor ecx, ecx
mov ebx, eax
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
add ecx, 0x20
lea edx, [esp + 0x10]
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
mov edi, dword [ecx + 4]
lea eax, [ecx + edi - 0x18]
mov dword [ecx + edi - 0x14], 0x1010135
mov dword [ecx + edi - 0x18], 0x470d88
mov dword [ecx + edi - 0x10], ebx
mov dword [ecx + edi - 0xc], edx
mov dword [ecx + edi - 8], esi
jmp 0x442fe3
xor eax, eax
pop esi
pop edi
pop ebx
ret
call fcn.00421650
nop dword [eax]
push ebx
push edi
push esi
mov ebx, dword [ecx + 0x116c]
mov edi, ecx
mov esi, edx
mov ecx, dword [ebx + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x44302e
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443075
mov dword [eax], ebx
xor ecx, ecx
mov ebx, eax
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
add ecx, 0x20
mov edx, dword [esp + 0x10]
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov esi, dword [esi]
mov edx, dword [edx]
mov edi, dword [ecx + 4]
mov dword [ecx + edi - 0x14], 0x1010130
mov dword [ecx + edi - 0x18], 0x470df0
mov dword [ecx + edi - 0x10], 0x470800
mov dword [ecx + edi - 0xc], 0x47080a
mov dword [ecx + edi - 8], esi
lea eax, [ecx + edi - 0x18]
mov dword [ecx + edi - 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.00421650
nop word [eax + eax]
push ebx
push edi
push esi
mov ebx, dword [ecx + 0x116c]
mov edi, ecx
mov esi, edx
mov ecx, dword [ebx + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x4430be
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x4430fc
mov dword [eax], ebx
xor ecx, ecx
mov ebx, eax
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
add ecx, 0x20
mov edx, dword [esp + 0x10]
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov esi, dword [esi]
mov ebx, dword [edx]
mov edx, dword [edx + 4]
mov edi, dword [ecx + 4]
mov dword [ecx + edi - 0x14], 0x1010132
mov dword [ecx + edi - 0x18], 0x470e54
mov dword [ecx + edi - 0x10], esi
lea eax, [ecx + edi - 0x18]
mov dword [ecx + edi - 0xc], ebx
mov dword [ecx + edi - 8], edx
pop esi
pop edi
pop ebx
ret
call fcn.00421650
nop word cs:[eax + eax]
nop dword [eax + eax]
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x50
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov esi, dword [eax]
mov eax, dword [ebp - 0x10]
mov edi, dword [eax + 4]
mov dword [ebp - 0x44], 0x421800
mov dword [ebp - 0x40], 0x4794dc
mov dword [ebp - 0x3c], ebp
mov dword [ebp - 0x34], esp
mov dword [ebp - 0x38], 0x44348f
sub edi, esi
lea ebx, [ebp - 0x5c]
push ebx
call fcn.00422850
add esp, 4
cmp edi, 2
jb 0x4431f4
cmp byte [esi], 0x63
jne 0x4431f4
cmp byte [esi + 1], 0x76
mov dword [ebp - 0x18], 0
jne 0x4431fb
mov eax, dword [ebp - 0x10]
add esi, 2
mov dword [eax], esi
mov eax, dword [ebp - 0x10]
mov cl, byte [eax + 0x168]
mov byte [ebp - 0x11], cl
mov byte [eax + 0x168], 0
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x58], 1
call fcn.0043be00
mov esi, eax
mov eax, dword [ebp - 0x10]
mov cl, byte [ebp - 0x11]
lea ebx, [ebp - 0x5c]
test esi, esi
mov byte [eax + 0x168], cl
je 0x4431fb
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + 4]
cmp eax, ecx
je 0x4432ce
cmp byte [eax], 0x5f
jne 0x4432ce
mov dword [ebp - 0x20], esi
inc eax
mov edx, dword [ebp - 0x10]
mov dword [edx], eax
mov edx, dword [ebp - 0x10]
mov esi, dword [ebp - 0x10]
mov esi, dword [esi + 0xc]
sub esi, dword [edx + 8]
sar esi, 2
mov dword [ebp - 0x24], esi
mov edx, dword [ebp - 0x10]
add edx, 0x14
mov dword [ebp - 0x1c], edx
jmp 0x443258
mov dword [ebp - 0x18], 0
push ebx
call fcn.004228b0
add esp, 4
mov eax, dword [ebp - 0x18]
add esp, 0x50
pop esi
pop edi
pop ebx
pop ebp
ret
push eax
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
add esp, 8
mov ecx, dword [ebp - 0x10]
mov ebx, eax
test ebx, ebx
mov dword [ecx + 8], ebx
je 0x443476
mov ecx, dword [ebp - 0x10]
lea eax, [ebx + esi]
sar esi, 1
mov dword [ecx + 0xc], eax
lea ecx, [ebx + esi*4]
mov esi, eax
lea ebx, [ebp - 0x5c]
mov edx, dword [ebp - 0x10]
mov dword [edx + 0x10], ecx
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
lea ecx, [esi + 4]
mov dword [edx + 0xc], ecx
mov dword [esi], edi
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx + 4]
cmp eax, ecx
je 0x443265
cmp byte [eax], 0x45
je 0x4433c2
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x58], 0xffffffff
call fcn.00440250
test eax, eax
je 0x4431fb
mov edi, eax
mov eax, dword [ebp - 0x10]
mov esi, dword [eax + 0xc]
mov eax, dword [ebp - 0x10]
cmp esi, dword [eax + 0x10]
jne 0x443242
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 8]
sub esi, ecx
cmp dword [ebp - 0x1c], ecx
lea eax, [esi + esi]
jne 0x44320f
mov dword [ebp - 0x28], ecx
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x44347b
mov ebx, eax
test esi, esi
je 0x4432c3
push esi
push dword [ebp - 0x28]
push ebx
call sub.api_ms_win_crt_private_l1_1_0.dll_memmove
add esp, 0xc
mov eax, dword [ebp - 0x10]
mov dword [eax + 8], ebx
jmp 0x443229
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x58], 0xffffffff
call fcn.00440250
test eax, eax
je 0x4431fb
mov dword [ebp - 0x20], esi
mov edi, eax
mov eax, dword [ebp - 0x10]
mov esi, dword [eax + 0x116c]
mov ecx, dword [esi + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x44332b
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443480
mov dword [eax], esi
mov dword [eax + 4], 0
mov esi, eax
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x116c], eax
xor ecx, ecx
add ecx, 0x10
mov dword [esi + 4], ecx
mov eax, dword [ebp - 0x10]
mov esi, dword [eax + 0x116c]
mov ebx, dword [esi + 4]
mov dword [esi + ebx - 8], edi
mov edi, dword [eax + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x44337f
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443485
mov dword [eax], edi
mov dword [eax + 4], 0
mov edi, eax
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x116c], eax
xor ecx, ecx
add ecx, 0x20
lea eax, [esi + ebx - 8]
mov dword [edi + 4], ecx
mov edi, 1
mov ecx, dword [ebp - 0x10]
mov esi, dword [ebp - 0x20]
mov ecx, dword [ecx + 0x116c]
mov edx, dword [ecx + 4]
mov dword [ecx + edx - 0x14], 0x1010137
mov dword [ecx + edx - 0x18], 0x470eb8
mov dword [ecx + edx - 0x10], esi
mov dword [ecx + edx - 0xc], eax
lea eax, [ecx + edx - 0x18]
mov dword [ecx + edx - 8], edi
jmp 0x44346b
mov ecx, dword [ebp - 0x10]
inc eax
mov dword [ecx], eax
mov esi, dword [ebp - 0x10]
mov ebx, dword [ebp - 0x24]
mov edx, dword [esi + 8]
mov edi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
shl ebx, 2
add edx, ebx
push dword [edi + 0xc]
call fcn.00446750
add esp, 4
add ebx, dword [esi + 8]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], edx
mov dword [edi + 0xc], ebx
mov eax, dword [ebp - 0x10]
mov esi, dword [eax + 0x116c]
mov ecx, dword [esi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x443430
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x44348a
mov dword [eax], esi
mov dword [eax + 4], 0
mov esi, eax
mov ecx, dword [ebp - 0x10]
mov dword [ecx + 0x116c], eax
xor ecx, ecx
add ecx, 0x20
mov edi, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x1c]
mov dword [esi + 4], ecx
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x20]
mov eax, dword [eax + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x1010137
mov dword [eax + ecx - 0x18], 0x470eb8
mov dword [eax + ecx - 0x10], edx
mov dword [eax + ecx - 8], ebx
mov dword [eax + ecx - 0xc], edi
lea eax, [eax + ecx - 0x18]
lea ebx, [ebp - 0x5c]
mov dword [ebp - 0x18], eax
jmp 0x4431fb
call fcn.00421650
call fcn.00421650
call fcn.00421650
call fcn.00421650
call fcn.00421650
mov eax, dword [ebp - 0x58]
cmp eax, 1
jb switch.0x0044349b
ud2
jmp dword [eax*4 + 0x46ff9c]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x10]
mov dl, byte [ebp - 0x11]
mov byte [ecx + 0x168], dl
mov dword [ebp - 0x58], 0xffffffff
push eax
call fcn.00422b50
nop
push ebp
push ebx
push edi
push esi
mov ebx, dword [ecx + 0x116c]
mov edi, ecx
mov esi, edx
mov ecx, dword [ebx + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x4434ff
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443541
mov dword [eax], ebx
xor ecx, ecx
mov ebx, eax
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
add ecx, 0x10
mov edx, dword [esp + 0x18]
mov ebp, dword [esp + 0x14]
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov esi, dword [esi]
mov bl, byte [ebp]
mov dl, byte [edx]
mov edi, dword [ecx + 4]
mov dword [ecx + edi - 4], 0x1010134
mov dword [ecx + edi - 8], 0x470f24
mov dword [ecx + edi], esi
mov byte [ecx + edi + 4], bl
lea eax, [ecx + edi - 8]
mov byte [ecx + edi + 5], dl
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.00421650
nop word cs:[eax + eax]
push ebx
push edi
push esi
mov ebx, dword [ecx + 0x116c]
mov edi, ecx
mov esi, edx
mov ecx, dword [ebx + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x44358e
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x4435d5
mov dword [eax], ebx
xor ecx, ecx
mov ebx, eax
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
add ecx, 0x20
mov edx, dword [esp + 0x10]
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov esi, dword [esi]
mov edx, dword [edx]
mov edi, dword [ecx + 4]
mov dword [ecx + edi - 0x14], 0x1010130
mov dword [ecx + edi - 0x18], 0x470df0
mov dword [ecx + edi - 0x10], 0x47080f
mov dword [ecx + edi - 0xc], 0x47081b
mov dword [ecx + edi - 8], esi
lea eax, [ecx + edi - 0x18]
mov dword [ecx + edi - 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.00421650
nop word [eax + eax]
push ebp
push ebx
push edi
push esi
sub esp, 0x10
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, ecx
sub edx, eax
cmp edx, 3
jae 0x443607
cmp edx, 2
jne 0x4436e4
mov dl, byte [eax]
jmp 0x4436b1
mov dl, byte [eax]
cmp dl, 0x73
jne 0x4436b1
cmp byte [eax + 1], 0x72
jne 0x4436e4
xor ebx, ebx
cmp byte [eax + 2], 0x4e
jne 0x44370f
add eax, 3
mov ecx, esi
mov dword [esi], eax
call fcn.00446a20
test eax, eax
je 0x443af9
mov ebp, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x443b0d
cmp byte [eax], 0x49
jne 0x443b0d
mov ecx, esi
xor edx, edx
mov dword [esp], ebp
xor ebp, ebp
call fcn.0043eaa0
test eax, eax
je 0x443afb
mov edi, dword [esi + 0x116c]
mov ebx, eax
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x443ad2
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
mov edx, dword [esp]
test eax, eax
je 0x443c9d
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
jmp 0x443ad5
cmp dl, 0x67
jne 0x4436fa
cmp byte [eax + 1], 0x73
jne 0x4436e4
add eax, 2
mov edx, ecx
sub edx, eax
mov dword [esi], eax
cmp edx, 2
jae 0x443996
mov ecx, esi
call fcn.00446b10
mov ebp, eax
test eax, eax
jne 0x4439bc
jmp 0x443af9
mov ecx, esi
call fcn.00446b10
mov ebp, eax
test eax, eax
jne 0x443afb
jmp 0x443af9
xor ebx, ebx
cmp dl, 0x73
jne 0x4439a3
cmp byte [eax + 1], 0x72
jne 0x4439a3
add eax, 2
cmp ecx, eax
mov dword [esi], eax
je 0x44377b
movsx eax, byte [eax]
add eax, 0xffffffd0
cmp eax, 9
ja 0x44377b
mov ecx, esi
mov dword [esp + 4], ebx
call fcn.00446d70
test eax, eax
mov dword [esp + 0xc], eax
je 0x443af9
mov ebx, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x443774
cmp byte [eax], 0x49
jne 0x443774
mov ecx, esi
xor edx, edx
xor ebp, ebp
call fcn.0043eaa0
test eax, eax
mov dword [esp + 8], eax
je 0x443afb
lea eax, [esp + 8]
lea edx, [esp + 0xc]
mov ecx, esi
push eax
call fcn.0043f120
add esp, 4
mov ebx, eax
xor ebp, ebp
jmp 0x44382c
mov ecx, esi
call fcn.00446a20
test eax, eax
je 0x443af9
mov ebp, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x443a54
cmp byte [eax], 0x49
jne 0x443a54
mov ecx, esi
xor edx, edx
mov dword [esp], ebp
xor ebp, ebp
call fcn.0043eaa0
test eax, eax
je 0x443afb
mov ebx, dword [esi + 0x116c]
mov edi, eax
mov ecx, dword [ebx + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x443a27
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
mov edx, dword [esp]
test eax, eax
je 0x443c9d
mov dword [eax], ebx
xor ecx, ecx
mov ebx, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
jmp 0x443a2a
add ecx, 0x10
mov dword [ebp + 4], ecx
mov ebp, dword [esp]
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x471f10
mov dword [eax + ecx], ebx
lea ebx, [eax + ecx - 8]
mov dword [eax + ecx + 4], edi
test ebp, ebp
je 0x443897
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x44386b
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443c9d
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x10
mov dword [edi + 4], ecx
mov ecx, dword [esi + 0x116c]
mov edx, dword [ecx + 4]
mov dword [ecx + edx - 4], 0x1010116
mov dword [ecx + edx - 8], 0x470fb0
lea eax, [ecx + edx - 8]
mov dword [ecx + edx], ebp
lea ecx, [ecx + edx + 4]
jmp 0x443901
cmp byte [esp + 4], 0
mov ebp, ebx
je 0x443905
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x4438db
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443c9d
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x10
mov dword [edi + 4], ecx
mov edx, dword [esi + 0x116c]
mov edi, dword [edx + 4]
lea ecx, [edx + edi]
lea eax, [edx + edi - 8]
mov dword [edx + edi - 4], 0x1010121
mov dword [edx + edi - 8], 0x471364
mov ebp, eax
mov dword [ecx], ebx
mov eax, dword [esi]
cmp eax, dword [esi + 4]
je 0x443915
cmp byte [eax], 0x45
je 0x443a22
mov ecx, esi
call fcn.00446d70
test eax, eax
je 0x443af9
mov ebx, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x44382c
cmp byte [eax], 0x49
jne 0x44382c
mov ecx, esi
xor edx, edx
mov dword [esp], ebp
xor ebp, ebp
call fcn.0043eaa0
test eax, eax
je 0x443afb
mov ebp, dword [esi + 0x116c]
mov edi, eax
mov ecx, dword [ebp + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x4437ff
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443c9d
mov dword [eax], ebp
xor ecx, ecx
mov ebp, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
jmp 0x4437ff
mov dl, byte [eax]
mov bl, 1
cmp dl, 0x73
je 0x443705
mov ecx, esi
call fcn.00446b10
test eax, eax
je 0x443af9
mov ebp, eax
test bl, bl
je 0x443afb
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x4439f7
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443c9d
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x10
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010121
mov dword [eax + ecx - 8], 0x471364
mov dword [eax + ecx], ebp
lea ebp, [eax + ecx - 8]
jmp 0x443afb
inc eax
mov dword [esi], eax
jmp 0x443a54
mov edx, dword [esp]
add ecx, 0x10
mov dword [ebx + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx - 8]
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x471f10
mov dword [eax + ecx], edx
mov dword [eax + ecx + 4], edi
mov ecx, esi
call fcn.00446b10
test eax, eax
je 0x443af9
mov ebx, dword [esi + 0x116c]
mov edi, eax
mov ecx, dword [ebx + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x443aa4
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443c9d
mov dword [eax], ebx
mov edx, ebp
xor ecx, ecx
mov ebx, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
jmp 0x443aa6
mov edx, ebp
add ecx, 0x10
mov dword [ebx + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
lea ebp, [eax + ecx - 8]
mov dword [eax + ecx - 4], 0x1010116
mov dword [eax + ecx - 8], 0x470fb0
mov dword [eax + ecx], edx
mov dword [eax + ecx + 4], edi
jmp 0x443afb
mov edx, dword [esp]
add ecx, 0x10
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x471f10
mov dword [eax + ecx], edx
jmp 0x443b05
xor ebp, ebp
mov eax, ebp
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
lea ebp, [eax + ecx - 8]
mov dword [eax + ecx + 4], ebx
mov eax, dword [esi]
cmp eax, dword [esi + 4]
je 0x443b1d
cmp byte [eax], 0x45
je 0x443c18
mov ecx, esi
call fcn.00446d70
test eax, eax
je 0x443af9
mov ebx, eax
mov eax, dword [esi]
cmp dword [esi + 4], eax
je 0x443bb6
cmp byte [eax], 0x49
jne 0x443bb6
mov ecx, esi
xor edx, edx
mov dword [esp], ebp
xor ebp, ebp
call fcn.0043eaa0
test eax, eax
je 0x443afb
mov ebp, dword [esi + 0x116c]
mov edi, eax
mov ecx, dword [ebp + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x443b89
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443c9d
mov dword [eax], ebp
xor ecx, ecx
mov ebp, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x10
mov dword [ebp + 4], ecx
mov ebp, dword [esp]
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010120
mov dword [eax + ecx - 8], 0x471f10
mov dword [eax + ecx], ebx
lea ebx, [eax + ecx - 8]
mov dword [eax + ecx + 4], edi
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x443bf1
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443c9d
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x10
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010116
mov dword [eax + ecx - 8], 0x470fb0
mov dword [eax + ecx], ebp
jmp 0x443b05
inc eax
mov ecx, esi
mov dword [esp], ebp
mov dword [esi], eax
call fcn.00446b10
test eax, eax
mov ebp, 0
je 0x443afb
mov edi, dword [esi + 0x116c]
mov ebx, eax
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x443c6b
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443c9d
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x10
mov edx, dword [esp]
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 4], 0x1010116
mov dword [eax + ecx - 8], 0x470fb0
mov dword [eax + ecx], edx
lea ebp, [eax + ecx - 8]
mov dword [eax + ecx + 4], ebx
jmp 0x443afb
call fcn.00421650
nop word cs:[eax + eax]
nop dword [eax]
push ebp
push ebx
push edi
push esi
mov ebx, dword [ecx + 0x116c]
mov edi, ecx
mov ebp, edx
mov ecx, dword [ebx + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x443cef
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443d44
mov dword [eax], ebx
xor ecx, ecx
mov ebx, eax
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ebx, dword [edi + 0x116c]
mov ebp, dword [ebp]
mov esi, dword [ebx + 4]
lea edi, [ebx + esi - 0x18]
push dword [esp + 0x14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ecx, dword [ecx]
add eax, edx
mov dword [ebx + esi - 0x14], 0x101012e
mov dword [ebx + esi - 0x18], 0x4713d4
mov dword [ebx + esi - 0x10], ebp
mov dword [ebx + esi - 0xc], edx
mov dword [ebx + esi - 8], eax
mov eax, edi
mov dword [ebx + esi - 4], ecx
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.00421650
nop dword [eax]
push ebx
push edi
push esi
mov ebx, dword [ecx + 0x116c]
mov edi, ecx
mov esi, edx
mov ecx, dword [ebx + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x443d8e
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443dd5
mov dword [eax], ebx
xor ecx, ecx
mov ebx, eax
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
add ecx, 0x20
mov edx, dword [esp + 0x10]
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov esi, dword [esi]
mov edx, dword [edx]
mov edi, dword [ecx + 4]
mov dword [ecx + edi - 0x14], 0x101012e
mov dword [ecx + edi - 0x18], 0x4713d4
mov dword [ecx + edi - 0x10], esi
mov dword [ecx + edi - 0xc], 0x470821
mov dword [ecx + edi - 8], 0x470822
lea eax, [ecx + edi - 0x18]
mov dword [ecx + edi - 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.00421650
nop word [eax + eax]
push ebx
push edi
push esi
mov ebx, dword [ecx + 0x116c]
mov edi, ecx
mov esi, edx
mov ecx, dword [ebx + 4]
lea eax, [ecx + 0x10]
cmp eax, 0xff8
jb 0x443e1e
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x443e54
mov dword [eax], ebx
xor ecx, ecx
mov ebx, eax
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
add ecx, 0x10
mov edx, dword [esp + 0x10]
mov dword [ebx + 4], ecx
mov ecx, dword [edi + 0x116c]
mov esi, dword [esi]
mov edx, dword [edx]
mov edi, dword [ecx + 4]
mov dword [ecx + edi - 4], 0x101012b
mov dword [ecx + edi - 8], 0x47143c
mov dword [ecx + edi], esi
lea eax, [ecx + edi - 8]
mov dword [ecx + edi + 4], edx
pop esi
pop edi
pop ebx
ret
call fcn.00421650
nop dword [eax]
push ebp
push ebx
push edi
push esi
push eax
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
sub ecx, eax
je 0x443f3e
cmp ecx, 1
je 0x443f3e
cmp byte [eax], 0x64
jne 0x443f3e
movsx ecx, byte [eax + 1]
cmp ecx, 0x58
je 0x443fe5
cmp ecx, 0x78
je 0x443f4c
cmp ecx, 0x69
jne 0x443f3e
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00446d70
xor edi, edi
test eax, eax
je 0x444082
mov ecx, esi
mov ebx, eax
call 0x443e60
test eax, eax
je 0x444082
mov edi, dword [esi + 0x116c]
mov ebp, eax
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x443f09
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x44408c
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x1010141
mov dword [eax + ecx - 0x18], 0x4714ac
mov dword [eax + ecx - 0x10], ebx
mov dword [eax + ecx - 0xc], ebp
lea edi, [eax + ecx - 0x18]
mov byte [eax + ecx - 8], 0
jmp 0x444082
mov ecx, esi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.00440250
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
xor edi, edi
test eax, eax
je 0x444082
mov ecx, esi
mov ebx, eax
call 0x443e60
test eax, eax
je 0x444082
mov edi, dword [esi + 0x116c]
mov ebp, eax
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x443fb0
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x44408c
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x116c]
mov ecx, dword [eax + 4]
mov dword [eax + ecx - 0x14], 0x1010141
mov dword [eax + ecx - 0x18], 0x4714ac
mov dword [eax + ecx - 0x10], ebx
mov dword [eax + ecx - 0xc], ebp
lea edi, [eax + ecx - 0x18]
mov byte [eax + ecx - 8], 1
jmp 0x444082
add eax, 2
mov ecx, esi
mov dword [esi], eax
call fcn.00440250
xor edi, edi
test eax, eax
je 0x444082
mov ecx, esi
mov ebx, eax
call fcn.00440250
test eax, eax
je 0x444082
mov ecx, esi
mov ebp, eax
call 0x443e60
test eax, eax
je 0x444082
mov edi, dword [esi + 0x116c]
mov ecx, dword [edi + 4]
lea edx, [ecx + 0x20]
cmp edx, 0xff8
jb 0x444053
mov dword [esp], eax
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x44408c
mov dword [eax], edi
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
mov edi, eax
mov eax, dword [esp]
xor ecx, ecx
add ecx, 0x20
mov dword [edi + 4], ecx
mov edx, dword [esi + 0x116c]
mov ecx, dword [edx + 4]
lea edi, [edx + ecx - 0x18]
mov dword [edx + ecx - 0x14], 0x1010142
mov dword [edx + ecx - 0x18], 0x471518
mov dword [edx + ecx - 0x10], ebx
mov dword [edx + ecx - 0xc], ebp
mov dword [edx + ecx - 8], eax
mov eax, edi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.00421650
nop word cs:[eax + eax]
nop dword [eax + eax]
push edi
push esi
mov edi, dword [ecx + 0x116c]
mov esi, ecx
mov ecx, dword [edi + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x4440db
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x44411a
mov dword [eax], edi
xor ecx, ecx
mov edi, eax
mov dword [eax + 4], 0
mov dword [esi + 0x116c], eax
add ecx, 0x20
mov edx, dword [esp + 0xc]
mov dword [edi + 4], ecx
mov ecx, dword [esi + 0x116c]
mov edi, dword [edx]
mov edx, dword [edx + 4]
mov esi, dword [ecx + 4]
mov dword [ecx + esi - 0x14], 0x1010138
mov dword [ecx + esi - 0x18], 0x47158c
mov dword [ecx + esi - 0x10], 0
lea eax, [ecx + esi - 0x18]
mov dword [ecx + esi - 0xc], edi
mov dword [ecx + esi - 8], edx
pop esi
pop edi
ret
call fcn.00421650
nop
push ebp
push ebx
push edi
push esi
mov ebx, dword [ecx + 0x116c]
mov edi, ecx
mov ebp, edx
mov ecx, dword [ebx + 4]
lea eax, [ecx + 0x20]
cmp eax, 0xff8
jb 0x44415f
push 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
test eax, eax
je 0x4441aa
mov dword [eax], ebx
xor ecx, ecx
mov ebx, eax
mov dword [eax + 4], 0
mov dword [edi + 0x116c], eax
add ecx, 0x20
mov dword [ebx + 4], ecx
mov ebx, dword [edi + 0x116c]
mov ebp, dword [ebp]
mov esi, dword [ebx + 4]
lea edi, [ebx + esi - 0x18]
push dword [esp + 0x14]
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov ecx, dword [esp + 0x14]
mov dword [ebx + esi - 0x14], 0x101012c
mov dword [ebx + esi - 0x18], 0x4715f8
mov dword [ebx + esi - 0x10], ebp
add eax, ecx
mov dword [ebx + esi - 0xc], ecx
mov dword [ebx + esi - 8], eax
mov eax, edi
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.00421650
nop
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov esi, ecx
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
xor ebp, ebp
mov edx, ecx
sub edx, eax
cmp edx, 2
jb 0x4444a6
mov dl, byte [eax]
xor ebp, ebp
cmp dl, 0x67
jne 0x4441fc
cmp byte [eax + 1], 0x73
jne 0x4444a6
add eax, 2
mov edx, ecx
sub edx, eax
mov dword [esi], eax
cmp edx, 2
jb 0x4444a6
mov dl, byte [eax]
mov bl, 1
mov dword [esp + 0x10], ebx
jmp 0x444204
mov dword [esp + 0x10], 0
mov dh, byte [eax + 1]
cmp dh, 0x61
sete byte [esp + 3]
cmp dl, 0x6e
jne 0x4444a6
cmp dh, 0x77
je 0x444226
cmp dh, 0x61
jne 0x4444a6
add eax, 2
lea edi, [esi + 0x14]
mov dword [esp + 4], esi
mov dword [esi], eax
mov dword [esp + 0xc], edi
mov edx, dword [esi + 0xc]
sub edx, dword [esi + 8]
sar edx, 2
mov dword [esp + 8], edx
jmp 0x444288
cmp eax, ecx
je 0x444291
cmp byte [eax], 0x5f
je 0x4442e5
mov ecx, esi
call fcn.00440250
test eax, eax
je 0x4444a6
mov eax, ebp
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
ret
jmp case.0x4460b4.2
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x20]
mov dword [ecx + 0x10], edx
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
mov dword [ecx + 0xc], edx
mov dword [ebp - 0x58], 0xffffffff
push eax
call fcn.00422b50
nop word cs:[eax + eax]
nop dword [eax]
push ecx
call fcn.0040e4b0
add esp, 4
ret