Function at 0x424c9c
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x218
mov eax, dword [ebp + 8]
lea esi, [esp + 0xa8]
lea edi, [esp + 0x150]
mov ebx, ecx
mov dword [esi + 0xc], edx
mov ecx, edi
mov edx, esi
mov dword [esi + 0x10], eax
and dword [esi + 0x14], 0
and dword [esi], 0
mov dword [esi + 4], 1
and dword [esi + 8], 0
mov byte [esi + 0x18], 0x80
call fcn.004fa562
cmp byte [edi], 0
je 0x424cfd
mov eax, dword [esp + 0x154]
mov dword [ebx], eax
mov dword [ebx + 0x30], 0x80000001
jmp 0x425893
cmp byte [esp + 0x151], 0
je 0x425240
movzx eax, byte [esp + 0x152]
mov dword [esp + 0xa4], ebx
cmp eax, 0x5b
je 0x425114
cmp eax, 0x7b
jne 0x425292
dec byte [esp + 0xc0]
je 0x42526e
lea eax, [esp + 0xb4]
lea ecx, [esp + 0xe9]
mov bl, 1
mov byte [esp + 0xf], 7
mov byte [esp + 0x17], 6
mov byte [esp + 8], 7
mov dword [esp + 0x10], 0x80000001
inc dword [eax + 8]
mov al, 7
mov byte [ecx - 1], al
lea ecx, [esp + 0xd1]
mov byte [ecx - 1], al
mov cl, 7
mov byte [esp + 7], cl
lea ecx, [esp + 0x78]
mov edx, esi
call fcn.004fa562
cmp byte [esp + 0x78], 0
jne 0x425237
cmp byte [esp + 0x79], 0
je 0x42557e
mov al, byte [esp + 0x7a]
movzx ecx, al
cmp ecx, 0x2c
je 0x424db7
cmp ecx, 0x7d
je 0x42524c
test bl, bl
jne 0x424de7
jmp 0x4255d4
test bl, bl
jne 0x424de7
inc dword [esp + 0xbc]
lea ecx, [esp + 0x18]
mov edx, esi
call fcn.004fa562
cmp byte [esp + 0x18], 0
jne 0x425289
cmp byte [esp + 0x19], 0
je 0x425671
mov al, byte [esp + 0x1a]
cmp al, 0x22
jne 0x42548c
inc dword [esp + 0xbc]
and dword [esp + 0xb0], 0
lea ecx, [esp + 0x18]
lea edx, [esp + 0xb4]
push esi
call fcn.004f9e64
pop eax
mov ebx, dword [esp + 0x1c]
cmp dword [esp + 0x18], 2
je 0x425689
mov edi, dword [esp + 0x20]
mov ecx, ebx
mov edx, edi
push 3
push str.cmdargsevtstruct_Payloadstruct_Payload_with_5_elements
call fcn.0044f299
pop ecx
pop edx
test al, al
jne 0x424eb7
mov ecx, ebx
mov edx, edi
push 4
push 0x5af45f
call fcn.0044f299
pop ecx
pop edx
test al, al
jne 0x424ef6
mov ecx, ebx
mov edx, edi
push 4
push 0x5cd46d
call fcn.0044f299
pop ecx
pop edx
test al, al
jne 0x424faf
mov ecx, ebx
mov edx, edi
push 3
push 0x5af463
call fcn.0044f299
pop ecx
pop edx
test al, al
jne 0x425068
mov ecx, ebx
mov edx, edi
push 5
push str.nonce
call fcn.0044f299
pop ecx
pop edx
test al, al
jne 0x4250ab
mov ecx, esi
call fcn.00423ab0
xor ebx, ebx
test eax, eax
je 0x424d78
jmp 0x425687
cmp byte [esp + 7], 7
jne 0x425a06
mov ecx, esi
call fcn.004fac17
test eax, eax
jne 0x4255fc
lea ecx, [esp + 0x18]
mov edx, esi
call fcn.004246a4
cmp byte [esp + 0x18], 0
jne 0x425600
mov al, byte [esp + 0x19]
xor ebx, ebx
mov byte [esp + 7], al
jmp 0x424d78
cmp byte [esp + 0xf], 7
jne 0x425a10
lea ecx, [esp + 0x18]
mov edx, esi
call fcn.00423d5f
mov bl, byte [esp + 0x18]
cmp bl, 7
je 0x425289
lea ecx, [esp + 0x19]
mov edi, dword [esp + 0x1c]
mov al, byte [ecx + 2]
movzx edx, word [ecx]
movsd xmm0, qword [ecx + 7]
movsd xmm1, qword [ecx + 0xf]
lea ecx, [esp + 0xe8]
mov byte [esp + 0x92], al
mov word [esp + 0x90], dx
movsd qword [esp + 0x78], xmm0
movsd qword [esp + 0x80], xmm1
call fcn.00423d84
mov al, byte [esp + 0x92]
lea ecx, [esp + 0xe9]
mov byte [esp + 0xe8], bl
movsd xmm0, qword [esp + 0x78]
movsd xmm1, qword [esp + 0x80]
mov byte [ecx + 2], al
movzx eax, word [esp + 0x90]
mov word [ecx], ax
mov dword [esp + 0xec], edi
movsd qword [ecx + 0xf], xmm1
movsd qword [ecx + 7], xmm0
mov cl, byte [esp + 7]
mov eax, ebx
xor ebx, ebx
mov byte [esp + 0xf], al
jmp 0x424d74
cmp byte [esp + 8], 7
jne 0x425a1a
lea ecx, [esp + 0x18]
mov edx, esi
call fcn.00423d5f
mov bl, byte [esp + 0x18]
cmp bl, 7
je 0x425289
lea ecx, [esp + 0x19]
mov edi, dword [esp + 0x1c]
mov al, byte [ecx + 2]
movzx edx, word [ecx]
movsd xmm0, qword [ecx + 7]
movsd xmm1, qword [ecx + 0xf]
lea ecx, [esp + 0xd0]
mov byte [esp + 0x92], al
mov word [esp + 0x90], dx
movsd qword [esp + 0x78], xmm0
movsd qword [esp + 0x80], xmm1
call fcn.00423d84
mov al, byte [esp + 0x92]
lea ecx, [esp + 0xd1]
mov byte [esp + 0xd0], bl
movsd xmm0, qword [esp + 0x78]
movsd xmm1, qword [esp + 0x80]
mov byte [ecx + 2], al
movzx eax, word [esp + 0x90]
mov word [ecx], ax
mov dword [esp + 0xd4], edi
movsd qword [ecx + 0xf], xmm1
movsd qword [ecx + 7], xmm0
mov cl, byte [esp + 7]
mov eax, ebx
xor ebx, ebx
mov byte [esp + 8], al
jmp 0x424d74
cmp byte [esp + 0x17], 6
jne 0x425a24
mov ecx, esi
call fcn.004fac17
test eax, eax
jne 0x425687
lea ecx, [esp + 0x18]
mov edx, esi
call fcn.00423ed4
cmp byte [esp + 0x18], 0
jne 0x425289
mov al, byte [esp + 0x19]
mov cl, byte [esp + 7]
xor ebx, ebx
mov byte [esp + 0x17], al
jmp 0x424d74
cmp dword [esp + 0x10], 0x80000001
jne 0x425a36
mov ecx, esi
call fcn.004fac17
test eax, eax
jne 0x42560f
lea ecx, [esp + 0x18]
mov edx, esi
call fcn.00423d9d
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
cmp eax, 0x80000001
je 0x42569e
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x60]
mov dword [esp + 0x10], eax
mov dword [esp + 0x10c], ecx
mov ecx, 0x80000001
call fcn.00423d8e
mov cl, byte [esp + 7]
mov eax, ebx
xor ebx, ebx
mov dword [esp + 0x60], eax
jmp 0x424d74
dec byte [esp + 0xc0]
je 0x42526e
inc dword [esp + 0xbc]
lea edi, [esp + 0xd0]
mov edx, esi
mov dword [esp + 0x64], esi
mov byte [esp + 0x68], 1
mov ecx, edi
call fcn.004fa562
cmp byte [edi], 0
je 0x42514f
mov eax, dword [esp + 0xd4]
jmp 0x4251ab
cmp byte [esp + 0xd1], 0
je 0x42554c
cmp byte [esp + 0xd2], 0x5d
je 0x425567
lea esi, [esp + 0x18]
lea edx, [esp + 0xa8]
mov byte [esp + 0x68], 0
mov ecx, esi
call fcn.004246a4
cmp byte [esi], 0
jne 0x4251a7
lea esi, [esp + 0x18]
lea edx, [esp + 0x64]
mov al, byte [esi + 1]
mov ecx, esi
mov byte [esp + 7], al
call fcn.00423971
mov al, byte [esi]
cmp al, 8
jne 0x4252b2
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], eax
mov ebx, 0x80000001
lea ecx, [esp + 0xa8]
inc byte [ecx + 0x18]
call fcn.004fac6c
mov ecx, dword [esp + 8]
lea edx, [esp + 0x1c]
mov dword [edx - 4], ecx
push 0xb
pop ecx
lea esi, [esp + 0x17c]
mov edi, edx
cmp ebx, 0x80000001
rep movsd dword es:[edi], dword [esi]
mov dword [edx + 0x2c], ebx
mov esi, eax
mov ecx, dword [esp + 0x60]
mov dword [edx + 0x34], ecx
mov ecx, dword [esp + 0x10]
mov dword [edx + 0x30], ecx
mov cl, byte [esp + 0xf]
mov ch, byte [esp + 7]
mov byte [edx + 0x38], cl
mov byte [edx + 0x39], ch
mov dword [edx + 0x3c], eax
je 0x425781
test esi, esi
jne 0x42579b
lea eax, [esp + 0x4c]
push 0xb
pop ecx
lea edi, [esp + 0x150]
lea esi, [esp + 0x17c]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [eax + 8]
movsd xmm0, qword [eax]
jmp 0x4257cb
mov ebx, dword [esp + 0x7c]
jmp 0x425689
lea edx, [esp + 0x18]
mov dword [edx], 5
jmp 0x425278
cmp byte [esp + 7], 7
je 0x4255e3
mov bl, byte [esp + 0xf]
cmp bl, 7
jne 0x42535e
push 6
pop ecx
xor eax, eax
jmp 0x4253a3
lea edx, [esp + 0x18]
mov dword [edx], 0x18
lea ecx, [esp + 0xa8]
call fcn.005a41e3
jmp 0x424cef
mov ebx, dword [esp + 0x1c]
jmp 0x425689
lea ecx, [esp + 0xa8]
lea edx, [esp + 0xcf]
push 0x5aefbc
call fcn.0059f516
pop ecx
mov ecx, eax
jmp 0x4258b9
mov cl, byte [esp + 0x1b]
movsd xmm0, qword [esp + 0x20]
cmp al, 7
mov byte [esp + 0x72], cl
movzx ecx, word [esp + 0x19]
movsd qword [esp + 0x90], xmm0
movsd xmm0, qword [esp + 0x28]
mov word [esp + 0x70], cx
mov ecx, dword [esp + 0x1c]
movsd qword [esp + 0x98], xmm0
je 0x425669
mov dl, byte [esp + 0x72]
movsd xmm0, qword [esp + 0x90]
movsd xmm1, qword [esp + 0x98]
lea esi, [esp + 0x18]
mov byte [esp + 0xeb], dl
movzx edx, word [esp + 0x70]
mov word [esp + 0xe9], dx
movsd qword [esp + 0xf0], xmm0
movsd qword [esp + 0xf8], xmm1
mov byte [esp + 0xe8], al
mov dword [esp + 0xec], ecx
lea edx, [esp + 0x64]
mov ecx, esi
call fcn.00423971
mov al, byte [esi]
cmp al, 8
jne 0x4254a7
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], eax
jmp 0x425658
movzx eax, byte [esp + 0xeb]
movzx ecx, word [esp + 0xe9]
lea edx, [esp + 0xe9]
movsd xmm0, qword [edx + 3]
movsd xmm1, qword [edx + 0xb]
mov edx, dword [edx + 0x13]
shl ecx, 8
shl eax, 0x18
or eax, ecx
movzx ecx, bl
movsd qword [esp + 0x78], xmm0
movsd qword [esp + 0x80], xmm1
mov dword [esp + 0x88], edx
mov bl, byte [esp + 8]
mov edx, dword [esp + 0x10]
mov bh, byte [esp + 0x17]
mov dword [esp + 8], ecx
mov cl, 6
cmp bl, 7
je 0x4253f5
lea esi, [esp + 0xd1]
mov cl, byte [esi + 2]
movsd xmm0, qword [esi + 3]
movsd xmm1, qword [esi + 0xb]
mov byte [esp + 0x92], cl
movzx ecx, word [esi]
movsd qword [esp + 0x18], xmm0
movsd qword [esp + 0x20], xmm1
mov word [esp + 0x90], cx
mov ecx, dword [esi + 0x13]
mov dword [esp + 0x28], ecx
mov ecx, ebx
mov byte [esp + 0xf], cl
cmp bh, 6
movzx ecx, bh
push 5
pop ebx
cmovne ebx, ecx
or dword [esp + 8], eax
mov eax, dword [esp + 0x88]
movsd xmm0, qword [esp + 0x78]
movsd xmm1, qword [esp + 0x80]
mov ecx, dword [esp + 0x28]
cmp edx, 0x80000001
mov edi, 0x80000000
cmovne edi, edx
mov dword [esp + 0x148], eax
movzx eax, word [esp + 0x90]
movsd qword [esp + 0x140], xmm1
movsd qword [esp + 0x138], xmm0
movsd xmm0, qword [esp + 0x18]
movsd xmm1, qword [esp + 0x20]
mov dword [esp + 0x130], ecx
mov word [esp + 0x6c], ax
mov al, byte [esp + 0x92]
movsd qword [esp + 0x120], xmm0
movsd qword [esp + 0x128], xmm1
mov byte [esp + 0x6e], al
jmp 0x4256cd
movzx eax, al
lea edx, [esp + 0x18]
cmp eax, 0x7d
jne 0x42558d
mov dword [edx], 0x15
jmp 0x42567b
mov cl, byte [esp + 0x1b]
movsd xmm0, qword [esp + 0x20]
cmp al, 7
mov byte [esp + 0x76], cl
movzx ecx, word [esp + 0x19]
movsd qword [esp + 0x78], xmm0
movsd xmm0, qword [esp + 0x28]
mov word [esp + 0x74], cx
mov ecx, dword [esp + 0x1c]
movsd qword [esp + 0x80], xmm0
je 0x4259af
mov dl, byte [esp + 0x76]
movsd xmm0, qword [esp + 0x78]
movsd xmm1, qword [esp + 0x80]
mov esi, dword [esp + 0x64]
lea edi, [esp + 0xc4]
mov byte [esp + 0xd3], dl
movzx edx, word [esp + 0x74]
mov word [esp + 0xd1], dx
movsd qword [esp + 0xd8], xmm0
movsd qword [esp + 0xe0], xmm1
mov byte [esp + 0xd0], al
mov dword [esp + 0xd4], ecx
mov ecx, edi
mov edx, esi
call fcn.004fa562
cmp byte [edi], 0
je 0x425598
mov eax, dword [esp + 0xc8]
jmp 0x425648
lea edx, [esp + 0x18]
lea ecx, [esp + 0xa8]
mov dword [edx], 2
call fcn.005a41e3
jmp 0x4251ab
xor ecx, ecx
mov edx, 0x5af494
push 0x5aebb0
call fcn.0059f6c0
pop ecx
jmp 0x4251ab
lea edx, [esp + 0x18]
mov dword [edx], 3
jmp 0x42567b
mov dword [edx], 0x11
jmp 0x42567b
cmp byte [esp + 0xc5], 0
je 0x4259f7
mov al, byte [esp + 0xc6]
movzx ecx, al
cmp ecx, 0x2c
je 0x425616
cmp ecx, 0x5d
je 0x425ad1
cmp byte [esp + 0x68], 0
jne 0x425621
lea edx, [esp + 0x18]
mov dword [edx], 7
jmp 0x425ac5
lea edx, [esp + 0x18]
mov dword [edx], 8
jmp 0x42567b
push 3
pop edx
mov ecx, str.cmdargsevtstruct_Payloadstruct_Payload_with_5_elements
call fcn.0059f74f
mov ebx, eax
mov byte [esp + 7], 7
jmp 0x425689
mov ebx, eax
jmp 0x425604
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x10]
mov byte [esp + 7], 7
jmp 0x42568d
mov ebx, eax
jmp 0x42569e
cmp byte [esp + 0x68], 0
je 0x425982
mov byte [esp + 0x68], 0
cmp al, 0x5d
je 0x425abb
lea edi, [esp + 0x18]
mov edx, esi
mov ecx, edi
call fcn.00423ed4
cmp byte [edi], 0
je 0x4258ca
mov eax, dword [esp + 0x1c]
mov dword [esp + 8], eax
lea ecx, [esp + 0xd0]
call fcn.00423967
lea ecx, [esp + 0xe8]
call fcn.00423967
jmp 0x4251af
xor ecx, ecx
inc ecx
jmp 0x425569
lea edx, [esp + 0x18]
mov dword [edx], 5
lea ecx, [esp + 0xa8]
call fcn.005a41e3
mov ebx, eax
mov ecx, dword [esp + 0x10]
cmp ecx, 0x80000001
je 0x42569e
mov edx, dword [esp + 0x60]
call fcn.0040272a
cmp byte [esp + 8], 7
je 0x4256b1
lea ecx, [esp + 0xd0]
call fcn.00423967
cmp byte [esp + 0xf], 7
mov dword [esp + 8], ebx
je 0x4256c8
lea ecx, [esp + 0xe8]
call fcn.00423967
mov edi, 0x80000001
lea ecx, [esp + 0xa8]
inc byte [ecx + 0x18]
call fcn.004fad26
mov esi, eax
mov eax, dword [esp + 8]
movsd xmm0, qword [esp + 0x138]
movsd xmm1, qword [esp + 0x140]
mov edx, dword [esp + 0x10c]
mov cl, byte [esp + 7]
cmp edi, 0x80000001
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x148]
movsd qword [esp + 0x1c], xmm0
movsd qword [esp + 0x24], xmm1
movsd xmm0, qword [esp + 0x120]
movsd xmm1, qword [esp + 0x128]
mov dword [esp + 0x2c], eax
mov al, byte [esp + 0xf]
mov byte [esp + 0x30], al
movzx eax, word [esp + 0x6c]
mov word [esp + 0x31], ax
mov al, byte [esp + 0x6e]
mov byte [esp + 0x33], al
mov eax, dword [esp + 0x130]
movsd qword [esp + 0x34], xmm0
movsd qword [esp + 0x3c], xmm1
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], edx
mov byte [esp + 0x54], bl
mov byte [esp + 0x55], cl
mov dword [esp + 0x58], esi
jne 0x425797
mov ebx, 0x80000001
test esi, esi
je 0x4257db
lea eax, [esp + 0x58]
push eax
call fcn.00423a73
pop eax
jmp 0x4257db
test esi, esi
je 0x4257af
lea ecx, [esp + 0x18]
call fcn.0042394a
mov ebx, 0x80000001
mov dword [esp + 8], esi
jmp 0x4257db
lea eax, [esp + 0x1c]
push 0xb
pop ecx
mov ebx, edi
lea edi, [esp + 0x150]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [eax + 0x38]
movsd xmm0, qword [eax + 0x30]
mov dword [esp + 0x108], ecx
movsd qword [esp + 0x100], xmm0
cmp ebx, 0x80000001
je 0x4258ae
push 0xb
pop edx
lea edi, [esp + 0x1e8]
lea esi, [esp + 0x150]
mov ecx, edx
rep movsd dword es:[edi], dword [esi]
lea esi, [esp + 0x1e8]
mov eax, dword [esp + 0x108]
movsd xmm0, qword [esp + 0x100]
mov ecx, dword [esp + 8]
mov dword [esp + 0x118], eax
lea eax, [esp + 0x1ac]
movsd qword [esp + 0x110], xmm0
mov dword [eax - 4], ecx
mov ecx, edx
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov dword [eax + 0x2c], ebx
mov ecx, dword [esp + 0x118]
movsd xmm0, qword [esp + 0x110]
mov dword [eax + 0x38], ecx
lea ecx, [esp + 0xa8]
movsd qword [eax + 0x30], xmm0
call fcn.004fa523
test eax, eax
je 0x425880
mov ecx, dword [esp + 0xa4]
mov dword [ecx], eax
mov dword [ecx + 0x30], 0x80000001
lea ecx, [esp + 0x1a8]
call fcn.0042394a
jmp 0x425893
push 0x10
pop ecx
mov edi, dword [esp + 0xa4]
lea esi, [esp + 0x1a8]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [esp + 0xa8]
mov edx, dword [esp + 0xac]
call fcn.00422701
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [esp + 8]
mov ebx, dword [esp + 0xa4]
lea edx, [esp + 0xa8]
call fcn.005a422b
jmp 0x424cef
mov al, byte [esp + 0x19]
lea edi, [esp + 0xc4]
mov edx, esi
mov ecx, edi
mov byte [esp + 0xf], al
call fcn.004fa562
cmp byte [edi], 0
je 0x4259c7
mov eax, dword [esp + 0xc8]
mov dword [esp + 8], eax
mov ecx, 0x80000002
cmp ecx, 0x80000002
je 0x42564c
cmp ecx, 0x80000001
je 0x425ad5
lea eax, [esp + 0xec]
lea esi, [esp + 0x18]
mov ebx, ecx
mov ecx, dword [esp + 8]
movsd xmm2, qword [esp + 0xd0]
movsd xmm1, qword [eax + 8]
mov edx, dword [eax - 4]
movsd xmm0, qword [eax]
mov eax, dword [eax + 0x10]
mov dword [esp + 0x10], ecx
movsd qword [esi + 8], xmm1
movsd xmm1, qword [esp + 0xe0]
movsd qword [esi], xmm0
mov dword [esi + 0x10], eax
movsd qword [esi + 0x14], xmm2
movsd qword [esi + 0x24], xmm1
movsd xmm1, qword [esp + 0xd8]
movsd qword [esi + 0x1c], xmm1
push 0xb
pop ecx
lea edi, [esp + 0x17c]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 8], edx
jmp 0x4251b4
inc dword [esi + 0x14]
lea edi, [esp + 0x18]
mov edx, esi
mov ecx, edi
call fcn.004fa562
cmp byte [edi], 0
jne 0x425644
cmp byte [esp + 0x19], 0
je 0x425b06
mov al, byte [esp + 0x1a]
jmp 0x425626
push 2
pop ecx
mov edx, 0x5af494
push 0x5aebb0
call fcn.0059f6c0
pop ecx
jmp 0x425355
cmp byte [esp + 0xc5], 0
je 0x425aed
mov al, byte [esp + 0xc6]
movzx ecx, al
cmp ecx, 0x2c
je 0x425a4e
cmp ecx, 0x5d
jne 0x425a77
mov ecx, 0x80000001
jmp 0x4258fb
lea edx, [esp + 0x18]
mov dword [edx], 2
jmp 0x425ac5
push 3
pop edx
mov ecx, str.cmdargsevtstruct_Payloadstruct_Payload_with_5_elements
jmp 0x425a2c
push 4
pop edx
mov ecx, 0x5af45f
jmp 0x425a2c
push 4
pop edx
mov ecx, 0x5cd46d
jmp 0x425a2c
push 3
pop edx
mov ecx, 0x5af463
call fcn.0059f710
jmp 0x425687
push 5
pop edx
mov ecx, str.nonce
call fcn.0059f710
mov ecx, dword [esp + 0x10]
mov ebx, eax
jmp 0x425695
cmp byte [esp + 0x68], 0
jne 0x425a82
inc dword [esi + 0x14]
lea edi, [esp + 0x18]
mov edx, esi
mov ecx, edi
call fcn.004fa562
cmp byte [edi], 0
je 0x425af9
mov eax, dword [esp + 0x1c]
jmp 0x4258f2
cmp byte [esp + 0x68], 0
je 0x425b12
mov byte [esp + 0x68], 0
cmp al, 0x5d
je 0x425abb
lea edi, [esp + 0x18]
mov edx, esi
mov ecx, edi
call fcn.00423d9d
mov ecx, dword [edi]
cmp ecx, 0x80000001
je 0x425644
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
mov dword [esp + 8], eax
mov dword [esp + 0x60], edx
jmp 0x4258fb
lea edx, [esp + 0x18]
mov dword [edx], 0x15
mov ecx, esi
call fcn.005a41e3
jmp 0x425648
push 3
jmp 0x425ad7
push 4
pop ecx
mov edx, 0x5af494
push 0x5aebb0
call fcn.0059f6c0
pop ecx
jmp 0x425648
lea edx, [esp + 0x18]
mov dword [edx], 2
jmp 0x425b1c
cmp byte [esp + 0x19], 0
je 0x425b06
mov al, byte [esp + 0x1a]
jmp 0x425a87
lea edx, [esp + 0x18]
mov dword [edx], 5
jmp 0x425ac5
lea edx, [esp + 0x18]
mov dword [edx], 7
mov ecx, esi
call fcn.005a41e3
jmp 0x4258f2