Function at 0x433455
Capabilities:
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0xb8
push ebx
push esi
xor ebx, ebx
cmp dword [ebp + 0x74], ebx
mov esi, ecx
push edi
mov dword [ebp + 0x60], esi
jne 0x433475
mov eax, dword [esi + 0x28]
mov dword [ebp + 0x74], eax
call fcn.004400bd
lea ecx, [ebp + 0x70]
call fcn.0040f369
test byte [esi + 0xc], 1
je 0x433494
cmp dword [0x4d7e6c], ebx
mov byte [ebp + 0x4f], 1
jg 0x433498
mov byte [ebp + 0x4f], 0
mov edi, dword [ebp + 0x70]
cmp word [edi], 0x40
jne 0x4334aa
inc edi
inc edi
mov dword [ebp + 0x70], edi
mov byte [ebp + 0x4f], 0
mov dword [ebp + 0x64], 0x80004001
cmp word [edi], bx
je 0x4343ec
and dword [ebp + 0x34], 0
and dword [ebp + 0x50], 0
xor bl, bl
cmp word [edi], 0x2d
mov byte [ebp + 0x5f], 0
je 0x4336be
cmp byte [ebp + 0x4f], 0
je 0x433531
test byte [esi + 0xc], 2
je 0x4334eb
push edi
lea ecx, [ebp + 0x34]
call fcn.0044cddc
mov eax, dword [eax]
jmp 0x4334fe
push 1
push 0
lea eax, [ebp + 0x34]
push eax
push edi
mov ecx, esi
call fcn.00454bdd
mov eax, dword [ebp + 0x34]
test bl, bl
mov dword [ebp + 0x50], eax
jne 0x433527
test byte [esi + 0xc], 0x14
je 0x433527
xor edi, edi
push edi
push dword [ebp + 0x7c]
mov ecx, esi
push 0x11
push edi
push eax
call fcn.0041bcb9
test byte [esi + 0xc], 0x10
jne 0x433531
mov dword [ebp + 0x50], edi
jmp 0x433531
test byte [esi + 0xc], 8
jne 0x433531
mov byte [ebp + 0x5f], 2
xor edi, edi
test bl, bl
mov dword [ebp + 0x48], edi
jne 0x4336d9
lea ecx, [ebp + 0x70]
mov byte [ebp + 0x43], 0xa
call fcn.0040f369
lea ecx, [ebp + 0x3c]
call fcn.00443f5b
mov edi, dword [ebp + 0x70]
mov dword [ebp + 0x38], 0x7d
xor eax, eax
jmp 0x433563
inc edi
inc edi
inc eax
cmp word [edi], 0x5e
je 0x433560
dec eax
test ax, ax
jl 0x43359f
inc eax
movsx esi, ax
mov ecx, dword [ebp + 0x60]
and dword [ebp + 0x70], 0
push 1
push 0
lea eax, [ebp + 0x70]
push eax
push edi
call fcn.00454bdd
mov eax, dword [ebp + 0x48]
mov edi, dword [ebp + 0x70]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x70], eax
call fcn.0043db4f
dec esi
jne 0x433573
lea eax, [ebp + 0x58]
push eax
xor esi, esi
mov dword [ebp + 0x58], edi
call fcn.00405615
mov eax, dword [ebp + 0x58]
sub eax, edi
sar eax, 1
dec eax
pop ecx
mov ecx, edi
js 0x433718
inc eax
cmp word [ecx], 0x25
jne 0x4335c6
inc esi
inc ecx
inc ecx
dec eax
jne 0x4335bf
cmp si, 2
jl 0x433718
lea eax, [ebp + 0x58]
push eax
mov dword [ebp + 0x58], edi
call fcn.00405615
mov esi, dword [ebp + 0x58]
pop ecx
push esi
lea ecx, [ebp + 0x54]
call fcn.0044cd74
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov ecx, dword [ebp + 0x60]
mov ebx, eax
xor eax, eax
push 1
mov dword [ebp + 0x44], eax
push eax
mov word [esi], ax
lea eax, [ebp + 0x44]
push eax
push edi
call fcn.00454bdd
mov eax, dword [ebp + 0x44]
mov dword [ebp + 0x70], eax
movzx eax, word [eax]
jmp 0x43362e
cmp ax, 0x40
jne 0x433635
add dword [ebp + 0x70], 2
mov eax, dword [ebp + 0x70]
mov ax, word [eax]
mov byte [ebp + 0x4f], 0
test ax, ax
jne 0x43361a
jmp 0x43363b
cmp word [edi], 0x2d
je 0x43369b
push dword [ebp + 0x70]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov esi, eax
lea eax, [esi + ebx + 3]
push eax
lea ecx, [ebp + 0x48]
call fcn.00443fa0
mov edi, dword [ebp + 0x48]
push esi
push dword [ebp + 0x70]
push edi
call fcn.004055fd
mov eax, dword [ebp + 0x48]
inc ebx
push ebx
push dword [ebp + 0x54]
lea eax, [eax + esi*2]
push eax
call fcn.004055fd
mov eax, dword [ebp + 0x48]
add esp, 0x18
cmp word [eax], 0x5e
lea ecx, [ebp + 0x44]
jne 0x43370b
dec byte [ebp + 0x43]
js 0x4336f7
call fcn.0043db4f
lea ecx, [ebp + 0x54]
call fcn.0043db4f
jmp 0x43355c
lea ecx, [ebp + 0x44]
call fcn.0043db4f
lea ecx, [ebp + 0x54]
call fcn.0043db4f
lea ecx, [ebp + 0x3c]
call fcn.0043db4f
lea ecx, [ebp + 0x48]
call fcn.0043db4f
mov esi, dword [ebp + 0x60]
mov bl, byte [edi]
inc edi
inc edi
cmp word [edi], 0x20
mov dword [ebp + 0x70], edi
jne 0x4334d2
inc edi
inc edi
mov dword [ebp + 0x70], edi
jmp 0x4334d2
cmp dword [ebp + 0x50], edi
je 0x4336ef
push edi
push dword [ebp + 0x7c]
mov ecx, esi
push 0x21
push edi
push dword [ebp + 0x50]
call fcn.0041bcb9
mov dword [ebp + 0x64], edi
jmp 0x434ee6
mov dword [ebp + 0x64], 0x80070057
call fcn.0043db4f
lea ecx, [ebp + 0x54]
jmp 0x434add
call fcn.0043db4f
lea ecx, [ebp + 0x54]
call fcn.0043db4f
mov ax, word [edi]
cmp ax, 0x28
jne 0x43372b
push 0x29
pop esi
mov word [edi], 0x7b
jmp 0x433734
cmp ax, 0x7b
jne 0x43376d
mov esi, dword [ebp + 0x38]
push edi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
lea eax, [edi + eax*2 - 2]
cmp si, word [eax]
jne 0x433748
and word [eax], 0
mov eax, dword [ebp + 0x48]
mov ecx, dword [ebp + 0x60]
and dword [ebp + 0x48], 0
push 1
mov dword [ebp + 0x70], eax
push 0
lea eax, [ebp + 0x48]
push eax
push edi
call fcn.004537c3
lea ecx, [ebp + 0x70]
call fcn.0043db4f
jmp 0x43377b
cmp dword [ebp + 0x48], edi
je 0x43377b
push edi
lea ecx, [ebp + 0x48]
call fcn.0044ce38
mov eax, dword [ebp + 0x48]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x70], eax
call fcn.0040f369
mov esi, dword [ebp + 0x70]
mov ax, word [esi]
cmp ax, 0x23
je 0x4343d4
test ax, ax
je 0x4343d4
cmp ax, 0x7b
je 0x434f06
cmp ax, 0x5b
jne 0x4337bd
cmp word [esi + 2], 0x5d
je 0x434f06
cmp ax, 0x46
mov edi, esi
mov dword [ebp + 0x58], edi
mov ebx, esi
jne 0x4337e6
cmp word [esi + 2], 0x49
jne 0x4337e6
cmp word [esi + 4], 0x4e
jne 0x4337e6
cmp word [esi + 6], 0x44
jne 0x4337e6
cmp word [esi + 8], 0x20
je 0x4337fa
mov ecx, dword [ebp + 0x60]
push 1
push 0
lea eax, [ebp + 0x3c]
push eax
push esi
call fcn.00454bdd
mov ebx, dword [ebp + 0x3c]
mov ax, word [esi]
and dword [ebp + 0x54], 0
push 0x22
pop ecx
cmp ax, cx
push 0x7c
mov dword [ebp + 0x44], ecx
pop edx
je 0x433817
cmp ax, dx
mov dword [ebp + 0x44], edx
jne 0x433870
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov cx, word [ebp + 0x44]
cmp word [esi], cx
lea eax, [esi + eax*2 - 2]
jne 0x433842
mov ecx, dword [ebp + 0x44]
cmp word [eax], cx
jne 0x433842
inc edi
inc edi
dec eax
dec eax
inc dword [ebp + 0x54]
cmp word [edi], cx
mov dword [ebp + 0x58], edi
je 0x43382e
and word [eax + 2], 0
cmp dword [ebp + 0x54], 0
jle 0x43385c
push ebx
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
sub eax, dword [ebp + 0x54]
and word [ebx + eax*2], 0
lea ecx, [ebp + 0x58]
call fcn.0040f369
mov edi, dword [ebp + 0x58]
mov eax, edi
sub eax, esi
sar eax, 1
lea ebx, [ebx + eax*2]
lea esi, [ebp + 0x54]
mov dword [ebp + 0x54], edi
call fcn.00412b1e
mov eax, dword [ebp + 0x54]
sub eax, edi
sar eax, 1
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x54], ebx
call fcn.00412b1e
mov esi, dword [ebp + 0x54]
mov eax, esi
sub eax, ebx
sar eax, 1
push edi
mov dword [ebp + 0x38], eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], esi
call fcn.0040f369
mov esi, dword [ebp + 0x44]
xor eax, eax
cmp esi, 3
mov dword [ebp + 0x2c], eax
jl 0x43397b
cmp esi, 0x7f
jg 0x43397b
xor ecx, ecx
mov cx, word [edi]
push ecx
call fcn.0041433f
add esp, 4
test al, al
mov al, cl
je 0x4338dd
and al, 0xdf
jmp 0x4338e4
cmp cx, 0xff
ja 0x4338e9
lea ecx, [ebp + 0x2d]
jmp 0x4338f3
mov esi, dword [ebp + 0x44]
mov byte [ebp + 0x2d], ch
lea ecx, [ebp + 0x2e]
inc esi
xor edx, edx
mov dx, word [edi + 2]
mov byte [ebp + 0x2c], al
push edx
call fcn.0041433f
add esp, 4
test al, al
mov al, dl
je 0x433912
and al, 0xdf
mov byte [ecx], al
inc ecx
jmp 0x433920
mov byte [ecx], al
inc ecx
cmp dx, 0xff
jbe 0x433920
mov byte [ecx], dh
inc ecx
inc esi
xor edx, edx
mov dx, word [edi + 4]
push edx
call fcn.0041433f
add esp, 4
test al, al
mov al, dl
je 0x43393c
and al, 0xdf
mov byte [ecx], al
inc ecx
jmp 0x43394a
mov byte [ecx], al
inc ecx
cmp dx, 0xff
jbe 0x43394a
mov byte [ecx], dh
inc ecx
inc esi
cmp dword [ebp + 0x44], 4
jl 0x433978
xor edx, edx
mov dx, word [edi + 6]
push edx
call fcn.0041433f
add esp, 4
test al, al
mov al, dl
je 0x43396b
and al, 0xdf
mov byte [ecx], al
jmp 0x433978
cmp dx, 0xff
mov byte [ecx], al
jbe 0x433978
mov byte [ecx + 1], dh
inc esi
mov eax, dword [ebp + 0x2c]
mov edx, dword [ebp + 0x44]
shl esi, 8
or esi, edx
cmp esi, 0x303
jne 0x4339e7
cmp eax, 0x444553
je 0x4339d1
cmp eax, 0x524944
je 0x4339be
cmp eax, 0x544553
jne 0x434ce6
push dword [ebp + 0x74]
add edi, 6
push edi
push 1
add ebx, 6
mov ecx, dword [ebp + 0x60]
push ebx
call fcn.004210d4
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
push 0
add edi, 6
push edi
call fcn.00476dd4
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 6
push edi
call fcn.0045d0d8
jmp 0x4343a7
cmp esi, 0x606
jne 0x433a40
cmp eax, 0x45524854
jne 0x434ce6
push 6
push edi
push 0x4c2b78
call fcn.0043eeea
add esp, 0xc
test al, al
je 0x434ce6
cmp byte [ebp + 0x5f], 0
je 0x433a2c
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041bcb9
add edi, 0xc
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push edi
call fcn.00480232
jmp 0x4343a7
cmp esi, 0x404
jne 0x434ce6
mov ecx, 0x4d455449
cmp eax, ecx
ja 0x43428e
je 0x43426d
mov ecx, 0x455a4953
cmp eax, ecx
ja 0x433ec1
je 0x433ead
mov ecx, 0x45444948
cmp eax, ecx
ja 0x433cdb
je 0x433cc4
mov ecx, 0x44494c53
cmp eax, ecx
ja 0x433bdb
je 0x433bc4
cmp eax, 0x43454a45
je 0x433bb3
cmp eax, 0x43455845
je 0x433b9a
cmp eax, 0x434c4143
je 0x433b87
cmp eax, 0x4350544e
je 0x433b76
cmp eax, 0x44414552
je 0x433b39
cmp eax, 0x44414f4c
je 0x433af4
cmp eax, 0x44415049
jne 0x434ce6
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00459dab
jmp 0x4343a7
cmp byte [ebp + 0x5f], 0
je 0x433b0e
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041bcb9
add edi, 8
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x74], edi
call fcn.0040f369
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
call fcn.00422e2f
mov ecx, dword [ebp + 0x60]
push 1
mov dword [ebp + 0x64], eax
call fcn.0046b6f3
jmp 0x434e75
push 4
push ebx
push 0x4c2b70
call fcn.0043eeea
add esp, 0xc
test al, al
je 0x433e35
cmp dword [ebp + 0x38], 4
je 0x433b62
cmp word [ebx + 8], 0x2d
jne 0x433e35
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046d1a3
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0044efb4
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.0048a70c
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
xor eax, eax
push eax
push eax
push eax
push eax
add edi, 8
push edi
push ecx
push eax
call fcn.0040a2d5
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00454f88
jmp 0x4343a7
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047cc5b
jmp 0x4343a7
cmp eax, 0x444d4152
je 0x433cb4
cmp eax, 0x444e4152
je 0x433ca0
cmp eax, 0x444e4553
je 0x433c93
cmp eax, 0x444e4946
je 0x433c58
cmp eax, 0x44524854
je 0x433c36
cmp eax, 0x4542414c
jne 0x434ce6
cmp dword [ebp + 0x74], 0
je 0x433e35
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00485257
jmp 0x4343a7
cmp byte [ebp + 0x5f], 0
je 0x433c50
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041bcb9
add edi, 8
jmp 0x433a2f
cmp byte [ebp + 0x5f], 0
je 0x433c72
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041bcb9
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x7c]
add edi, 8
cmp word [edi], 0x7c
jne 0x433c8e
push 0
push edi
call fcn.00424957
jmp 0x4343a7
push dword [ebp + 0x78]
jmp 0x433c83
push dword [ebp + 0x58]
call fcn.0042953e
jmp 0x434627
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00471370
jmp 0x4343a7
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.004191c1
jmp 0x4343a7
push 1
push 0x4c0200
push dword [ebp + 0x58]
call fcn.00412640
add esp, 0xc
jmp 0x4343a7
mov ecx, 0x454d4f43
cmp eax, ecx
ja 0x433d87
je 0x433dd9
cmp eax, 0x45444f43
je 0x433d74
cmp eax, 0x45455254
je 0x433d60
cmp eax, 0x45474150
je 0x433d53
cmp eax, 0x454c4946
je 0x433d41
cmp eax, 0x454d414e
je 0x434199
cmp eax, 0x454d4954
jne 0x434ce6
cmp dword [ebp + 0x74], 0
je 0x433e35
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.004856fc
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x58]
call fcn.00428ea4
jmp 0x4343a7
push dword [ebp + 0x58]
call fcn.0041f520
jmp 0x434627
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00489b68
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.0045fe8d
jmp 0x4343a7
cmp eax, 0x454d4f48
je 0x433e9c
cmp eax, 0x45534142
je 0x433e8b
cmp eax, 0x45544144
je 0x433e77
cmp eax, 0x45544953
je 0x433e63
cmp eax, 0x45544f4e
je 0x433dd9
cmp eax, 0x45564948
jne 0x434ce6
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00468bac
jmp 0x4343a7
add ebx, 8
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x74], ebx
call fcn.0040f369
mov esi, dword [ebp + 0x74]
mov ax, word [esi]
cmp ax, 0x31
jb 0x433df9
cmp ax, 0x39
jbe 0x433e0d
mov edi, dword [sym.imp.SHLWAPI.DLL_StrCmpNIW]
push 2
push 0x4c2b68
push esi
call edi
test eax, eax
jne 0x433e16
mov byte [0x4d62d8], 1
jmp 0x433e31
cmp word [esi], 0x30
je 0x433e2a
push 3
push 0x4c2b60
push esi
call edi
test eax, eax
jne 0x433e31
mov byte [0x4d62d8], 0
and dword [ebp + 0x64], 0
mov eax, dword [ebp + 0x64]
test eax, eax
je 0x433e44
mov ecx, dword [ebp + 0x60]
mov ecx, dword [ecx + 0x30]
mov dword [ecx], eax
xor edi, edi
cmp eax, edi
jge 0x434e7d
push eax
lea eax, [ebp - 0x50]
push 0x4c21d8
push eax
call dword [sym.imp.USER32.DLL_wsprintfW]
jmp 0x434e89
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0048cf42
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00470ac5
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0048a57a
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004766d9
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00449912
jmp 0x4343a7
mov ecx, 0x4b4d554e
cmp eax, ecx
ja 0x434097
je 0x43408a
mov ecx, 0x49474552
cmp eax, ecx
ja 0x433fdd
je 0x433fca
cmp eax, 0x46544547
je 0x433fb6
cmp eax, 0x46545550
je 0x433fa2
cmp eax, 0x46574246
je 0x433f92
cmp eax, 0x47414d49
je 0x433f75
cmp eax, 0x48534148
je 0x433f62
cmp eax, 0x48544150
je 0x433f52
cmp eax, 0x49444152
jne 0x434ce6
cmp dword [ebp + 0x74], 0
je 0x433e35
cmp edx, 4
jne 0x433e35
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047c509
jmp 0x4343a7
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0042bcd7
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.0048b50d
jmp 0x4343a7
cmp edx, 4
jne 0x433e35
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00489f22
jmp 0x4343a7
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.004166c7
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00472763
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00471419
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.0045e92a
jmp 0x4343a7
sub eax, 0x49564544
je 0x43407a
sub eax, 0x901
je 0x434069
sub eax, 0xec070e
je 0x434055
sub eax, 0x100f9f9
je 0x434042
sub eax, 7
je 0x43402e
sub eax, 0x1f8f0
jne 0x434ce6
cmp dword [ebp + 0x74], 0
je 0x433e35
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047c25f
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00493388
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.00474de9
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00451456
jmp 0x4343a7
push dword [ebp + 0x74]
add edi, 8
push edi
push 0
add ebx, 8
jmp 0x4339b0
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0043000e
jmp 0x4343a7
push dword [ebp + 0x58]
call fcn.00411e6c
jmp 0x434627
mov ecx, 0x4c4c4143
cmp eax, ecx
ja 0x434167
je 0x434146
cmp eax, 0x4b4e494c
je 0x434135
cmp eax, 0x4b4e4c46
je 0x434121
cmp eax, 0x4b534944
je 0x434110
cmp eax, 0x4b544f48
je 0x4340fd
cmp eax, 0x4c424154
je 0x4340e9
cmp eax, 0x4c454853
jne 0x434ce6
push dword [ebp + 0x58]
call fcn.0042eb89
jmp 0x434627
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0048ea41
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.00418a85
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00492b72
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046874c
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004170a9
jmp 0x4343a7
mov eax, dword [ebp + 0x58]
cmp word [eax], 0x24
jne 0x434e49
push edi
push 0
add eax, 2
push eax
push dword [ebp + 0x60]
call fcn.0042c06e
jmp 0x4343a7
cmp eax, 0x4c4c4157
je 0x434260
cmp eax, 0x4c4c494b
je 0x4341e9
cmp eax, 0x4c525453
je 0x4341d5
cmp eax, 0x4c534441
je 0x4341c1
cmp eax, 0x4d414554
je 0x4341ad
cmp eax, 0x4d414e46
jne 0x434ce6
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00468664
jmp 0x4343a7
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0041a5e4
jmp 0x434e72
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046a6b1
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046edd9
jmp 0x4343a7
xor ebx, ebx
add edi, 8
inc ebx
cmp word [edi], 0x2a
jne 0x434208
inc edi
inc edi
cmp word [edi], 0x2a
jne 0x434208
push 2
pop ebx
add edi, ebx
cmp word [edi], 0x2a
je 0x434200
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], edi
call fcn.0040f369
mov edi, dword [ebp + 0x58]
mov ax, word [edi]
cmp ax, 0x5c
je 0x43424e
cmp ax, 0x40
je 0x43424e
mov esi, 0x4c2b58
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
push eax
push edi
push esi
call fcn.0043ee93
add esp, 0xc
test al, al
jne 0x43424e
mov ecx, dword [ebp + 0x60]
push edi
call fcn.00429743
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
push ebx
push dword [ebp + 0x74]
push edi
call fcn.00458cb4
jmp 0x4343a7
push dword [ebp + 0x58]
call fcn.00419162
jmp 0x434627
cmp dword [ebp + 0x74], 0
je 0x433e35
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00489668
jmp 0x4343a7
mov ecx, 0x534f504c
cmp eax, ecx
ja 0x4346b1
je 0x43469b
mov ecx, 0x504f4f4c
cmp eax, ecx
ja 0x434527
je 0x4344f3
mov ecx, 0x4e574f44
cmp eax, ecx
ja 0x43442a
je 0x43441d
cmp eax, 0x4d495444
je 0x434409
cmp eax, 0x4d524f46
je 0x4343f8
cmp eax, 0x4e49414d
je 0x434358
cmp eax, 0x4e495053
je 0x434344
cmp eax, 0x4e495753
je 0x434329
cmp eax, 0x4e524353
je 0x434318
cmp eax, 0x4e554f4d
jne 0x434ce6
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00494bae
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00468ec9
jmp 0x4343a7
cmp dword [ebp + 0x74], 0
je 0x433e35
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047c940
jmp 0x4343a7
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.004860e1
jmp 0x4343a7
cmp byte [ebp + 0x5f], 0
je 0x434372
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041bcb9
mov edi, dword [ebp + 0x58]
jmp 0x43438d
push 3
push edi
push 0x4bd7b4
call fcn.0043ee93
add esp, 0xc
test al, al
jne 0x434399
inc edi
inc edi
cmp word [edi], 0x2a
je 0x434377
cmp word [edi], 0
jne 0x4343af
add ebx, 8
push ebx
mov ecx, 0x4d80e8
call fcn.0042ee2a
mov dword [ebp + 0x64], eax
jmp 0x433e35
mov esi, 0x4d7c88
push 0x4c2b48
mov ecx, esi
call fcn.0044ce38
push ebx
mov ecx, esi
call fcn.00443fc7
mov eax, dword [ebp + 0x60]
mov word [eax + 0x88], 2
lea ecx, [ebp + 0x3c]
call fcn.0043db4f
lea ecx, [ebp + 0x48]
call fcn.0043db4f
lea ecx, [ebp + 0x34]
call fcn.0043db4f
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00466fbb
jmp 0x4343a7
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00459bad
jmp 0x4343a7
push dword [ebp + 0x58]
call fcn.00429f66
jmp 0x434627
cmp eax, 0x4f474f4c
je 0x4344e5
cmp eax, 0x4f4d454d
je 0x4344c4
cmp eax, 0x50494350
je 0x4344b0
cmp eax, 0x504c4548
je 0x434482
cmp eax, 0x504d4554
je 0x43446e
cmp eax, 0x504e5055
jne 0x434ce6
add ebx, 8
push ebx
call fcn.0045560c
jmp 0x434627
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046b764
jmp 0x4343a7
push 5
push 0x12e
push dword [0x4d7c84]
call dword [sym.imp.KERNEL32.DLL_FindResourceW]
test eax, eax
je 0x4343d4
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.0042bd4e
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0047ec15
jmp 0x4343a7
cmp dword [ebp + 0x74], 0
je 0x433e35
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045940f
jmp 0x4343a7
add ebx, 8
push ebx
call fcn.0042f76a
jmp 0x434627
cmp byte [ebp + 0x5f], 0
je 0x43450d
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041bcb9
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x78]
add edi, 8
push dword [ebp + 0x74]
push edi
call fcn.0041b73f
jmp 0x4343a7
mov ecx, 0x5254534c
cmp eax, ecx
ja 0x4345f2
je 0x4345de
sub eax, 0x50534944
je 0x4345ce
sub eax, 0x1edf90c
je 0x4345b0
sub eax, 3
je 0x43459a
sub eax, 0x41102
je 0x43458c
sub eax, 0x3f0f1
je 0x434578
sub eax, 7
jne 0x434ce6
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0041cd41
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004674ec
jmp 0x4343a7
add edi, 8
push edi
call fcn.00411fd2
jmp 0x434627
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047ceb4
jmp 0x4343a7
cmp dword [ebp + 0x74], 0
je 0x433e35
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047c7e4
jmp 0x4343a7
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00426b82
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046efa6
jmp 0x4343a7
sub eax, 0x5254534d
je 0x434687
sub eax, 5
je 0x434673
dec eax
je 0x43466f
sub eax, 0xedee01
je 0x434651
sub eax, 0x50df8
je 0x43462d
sub eax, 0x70606
jne 0x434ce6
add edi, 8
push edi
call fcn.00411fc4
pop ecx
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
xor eax, eax
cmp dword [ebp + 0x50], eax
sete al
add ebx, 8
or eax, dword [ebp + 0x7c]
push eax
push ebx
call fcn.0041bffb
and dword [ebp + 0x50], 0
mov dword [ebp + 0x64], eax
jmp 0x433e35
cmp dword [ebp + 0x74], 0
je 0x433e35
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00485b34
jmp 0x4343a7
push 1
jmp 0x43469d
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046f0f7
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00470177
jmp 0x4343a7
push 0
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046f321
jmp 0x4343a7
mov ecx, 0x5453494c
cmp eax, ecx
ja 0x434b25
je 0x434afb
mov ecx, 0x54494e49
cmp eax, ecx
ja 0x43479a
je 0x43478a
cmp eax, 0x534f5052
je 0x434776
cmp eax, 0x53504954
je 0x434762
cmp eax, 0x53504d43
je 0x43474e
cmp eax, 0x5353454d
je 0x43473a
cmp eax, 0x54494157
je 0x43472a
cmp eax, 0x54494445
jne 0x434ce6
cmp dword [ebp + 0x74], 0
je 0x433e35
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00458f75
jmp 0x4343a7
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0042ae61
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00487718
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045d948
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00486317
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046fac0
jmp 0x4343a7
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.004213e9
jmp 0x4343a7
cmp eax, 0x54495257
je 0x434ae7
cmp eax, 0x54495845
je 0x434815
cmp eax, 0x544d4644
je 0x434801
cmp eax, 0x544e4950
je 0x4347ed
cmp eax, 0x544e4f46
je 0x4347e0
cmp eax, 0x54524150
jne 0x434ce6
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00462150
jmp 0x4343a7
push dword [ebp + 0x58]
call fcn.00418fea
jmp 0x434627
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00469786
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00452ca9
jmp 0x4343a7
lea ecx, [ebx + 8]
mov dx, word [ecx]
cmp dx, 0x3d
jne 0x4348a9
xor esi, esi
add ebx, 0xa
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x64], esi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x74], ebx
call fcn.0040f369
push dword [ebp + 0x74]
push 0x4c2b40
call fcn.0043ef29
test al, al
pop ecx
pop ecx
je 0x434858
mov ecx, dword [ebp + 0x60]
mov eax, dword [ecx + 0x30]
mov eax, dword [eax]
jmp 0x43488f
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x74]
push eax
call fcn.004503bc
test eax, eax
pop ecx
pop ecx
jg 0x434889
mov eax, dword [ebp + 0x74]
cmp word [eax], si
je 0x434889
mov ecx, dword [ebp + 0x60]
push esi
push 0xffffffffffffffff
push esi
push eax
call fcn.00410728
cmp eax, esi
je 0x434889
mov eax, dword [eax + 4]
jmp 0x43488c
mov eax, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x60]
mov edx, dword [ecx + 0x30]
mov dword [edx], eax
mov dword [ecx + 0x8c], eax
mov dword [ebp + 0x64], eax
mov byte [ecx + 0x8a], 1
jmp 0x433e44
mov eax, edx
call fcn.0043daaf
test al, al
jne 0x4348bd
test dx, dx
jne 0x433e35
mov dword [ebp + 0x78], ecx
lea ecx, [ebp + 0x78]
call fcn.0040f369
mov edi, dword [ebp + 0x60]
mov eax, dword [edi + 0x8c]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x54], eax
xor ebx, ebx
call fcn.00443f5b
push 0x2c
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.00446d58
mov eax, dword [ebp + 0x78]
add esp, 0xc
cmp word [eax], 0x2c
jne 0x43490e
add dword [ebp + 0x78], 2
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.004503bc
pop ecx
pop ecx
mov ebx, eax
mov eax, dword [ebp + 0x70]
cmp word [eax], 0
jne 0x43491e
push pe_nt_image_headers32
jmp 0x434a76
push eax
push 0x4c2b38
call fcn.0043ef29
test al, al
pop ecx
pop ecx
je 0x434937
xor esi, esi
inc esi
jmp 0x434a77
push dword [ebp + 0x70]
push 0x4c1b0c
call fcn.0043ef29
test al, al
pop ecx
pop ecx
jne 0x43492f
push dword [ebp + 0x70]
push 0x4c2b30
call fcn.0043ef29
test al, al
pop ecx
pop ecx
jne 0x434970
push dword [ebp + 0x70]
push 0x4c06f4
call fcn.0043ef29
test al, al
pop ecx
pop ecx
je 0x434977
push 2
jmp 0x434a76
push dword [ebp + 0x70]
push 0x4c2b28
call fcn.0043ef29
test al, al
pop ecx
pop ecx
jne 0x43499d
push dword [ebp + 0x70]
push 0x4c2b24
call fcn.0043ef29
test al, al
pop ecx
pop ecx
je 0x4349a4
push 4
jmp 0x434a76
push dword [ebp + 0x70]
push 0x4c2b1c
call fcn.0043ef29
test al, al
pop ecx
pop ecx
jne 0x4349ca
push dword [ebp + 0x70]
push 0x4c2b18
call fcn.0043ef29
test al, al
pop ecx
pop ecx
je 0x4349d1
push 8
jmp 0x434a76
push dword [ebp + 0x70]
push 0x4bdf04
call fcn.0043ef29
test al, al
pop ecx
pop ecx
jne 0x4349f7
push dword [ebp + 0x70]
push 0x4c2b10
call fcn.0043ef29
test al, al
pop ecx
pop ecx
je 0x4349fb
push 0x10
jmp 0x434a76
push dword [ebp + 0x70]
push 0x4c2b08
call fcn.0043ef29
test al, al
pop ecx
pop ecx
je 0x434a15
mov esi, 0x80
jmp 0x434a77
push dword [ebp + 0x70]
push 0x4c2b04
call fcn.0043ef29
test al, al
pop ecx
pop ecx
je 0x434a47
push 1
push dword [ebp + 0x74]
mov esi, 0x80
or word [edi + 0x88], si
push 0x4bd718
mov ecx, edi
call fcn.00458cb4
jmp 0x434a77
push dword [ebp + 0x70]
push 0x4c2af8
call fcn.0043ef29
test al, al
pop ecx
pop ecx
je 0x434a61
mov esi, 0x100
jmp 0x434a77
push dword [ebp + 0x70]
push 0x4c2af0
call fcn.0043ef29
test al, al
pop ecx
pop ecx
je 0x434ada
push 0x20
pop esi
or word [edi + 0x88], si
xor esi, esi
cmp ebx, esi
jle 0x434a9c
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp + 0x54]
mov dword [eax], ecx
mov eax, dword [ebp + 0x54]
mov dword [edi + 0x8c], eax
mov byte [edi + 0x8a], 1
cmp byte [ebp + 0x5f], 0
je 0x434ab3
push esi
push dword [ebp + 0x7c]
mov ecx, edi
push 0x11
push esi
push dword [ebp + 0x50]
call fcn.0041bcb9
lea ecx, [ebp + 0x70]
call fcn.0043db4f
lea ecx, [ebp + 0x3c]
call fcn.0043db4f
lea ecx, [ebp + 0x48]
call fcn.0043db4f
lea ecx, [ebp + 0x34]
call fcn.0043db4f
mov eax, esi
jmp 0x4343ee
lea ecx, [ebp + 0x70]
call fcn.0043db4f
jmp 0x433e35
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046df8a
jmp 0x4343a7
cmp dword [ebp + 0x74], 0
je 0x433e35
cmp edx, 4
jne 0x433e35
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00485ca7
jmp 0x4343a7
mov ecx, 0x56524553
cmp eax, ecx
ja 0x434bef
je 0x434bdf
sub eax, 0x54554853
je 0x434bd2
sub eax, 0x2fcf3
je 0x434bbe
sub eax, 0xe
je 0x434bad
sub eax, 0xf5fff9
je 0x434b9c
sub eax, 0x10cfa
je 0x434b7c
sub eax, 0x102f1ff
jne 0x434ce6
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046791b
jmp 0x4343a7
cmp dword [ebp + 0x74], 0
je 0x433e35
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add ebx, 8
push ebx
call fcn.004858cc
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0047697e
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0042f911
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046857a
jmp 0x4343a7
push dword [ebp + 0x58]
call fcn.0042a0ea
jmp 0x434627
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00415d43
jmp 0x4343a7
cmp eax, 0x574f4853
je 0x434cd2
cmp eax, 0x574f5242
je 0x434cbc
cmp eax, 0x58454649
je 0x434c81
cmp eax, 0x58524f46
je 0x434c4d
cmp eax, 0x59434552
je 0x434c3c
cmp eax, 0x59454b48
jne 0x434ce6
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00485fa3
jmp 0x4343a7
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00455253
jmp 0x4343a7
cmp byte [ebp + 0x5f], 0
je 0x434c67
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041bcb9
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x78]
add edi, 8
push dword [ebp + 0x74]
push edi
call fcn.0047d7f2
jmp 0x4343a7
cmp byte [ebp + 0x5f], 0
je 0x434c9b
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041bcb9
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x7c]
add edi, 8
cmp word [edi], 0x7c
jne 0x434cb7
push 0
push edi
call fcn.00424941
jmp 0x4343a7
push dword [ebp + 0x78]
jmp 0x434cac
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045e15a
jmp 0x4343a7
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00490c06
jmp 0x4343a7
xor esi, esi
mov dword [ebp + 0x64], esi
mov ax, word [ebx]
cmp ax, 0x24
mov dword [ebp + 0x58], ebx
jne 0x434d0a
push esi
push esi
add ebx, 2
push ebx
push dword [ebp + 0x60]
call fcn.0042c06e
jmp 0x433e35
cmp ax, si
je 0x433e35
push pe_nt_image_headers32
pop ecx
cmp ax, cx
mov dword [ebp + 0x54], esi
mov dword [ebp + 0x78], esi
jne 0x434d2a
add ebx, 2
mov dword [ebp + 0x54], ecx
mov dword [ebp + 0x58], ebx
mov ecx, dword [ebp + 0x58]
xor eax, eax
mov ax, word [ecx]
cmp ax, 0x2a
je 0x434d44
cmp ax, 0x2d
je 0x434d44
cmp ax, 0x2b
jne 0x434d47
mov dword [ebp + 0x78], eax
mov ebx, dword [ebp + 0x60]
mov eax, dword [ebx + 0x1c]
mov dword [ebp + 0x30], eax
lea eax, [ebp + 0x30]
push eax
lea eax, [ebp + 0x38]
push eax
push ecx
mov ecx, ebx
mov dword [ebp + 0x38], esi
call fcn.00421e89
mov eax, dword [ebp + 0x78]
or eax, dword [ebp + 0x54]
test ax, ax
jne 0x434e4e
cmp dword [ebp + 0x38], esi
jge 0x434e4e
push dword [ebp + 0x44]
lea ecx, [ebp + 0x78]
push edi
call fcn.0044cd91
mov eax, dword [ebp + 0x44]
cmp eax, esi
jle 0x434dad
lea ecx, [ebp + 0x64]
push ecx
lea eax, [edi + eax*2]
push eax
push dword [ebp + 0x78]
push dword [ebp + 0x74]
push ebx
call fcn.0040eeef
add esp, 0x14
test al, al
jne 0x434e41
push 1
push esi
lea eax, [ebp + 0x3c]
push eax
push dword [ebp + 0x70]
mov ecx, ebx
call fcn.00454bdd
mov eax, dword [ebp + 0x3c]
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], eax
call fcn.0040f369
mov edi, dword [ebp + 0x58]
push esi
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x54]
push eax
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x38], esi
call fcn.00419ccc
add esp, 0xc
push dword [ebp + 0x38]
lea ecx, [ebp + 0x70]
push dword [ebp + 0x54]
call fcn.0044cd91
lea eax, [ebp + 0x70]
push eax
mov word [ebp + 0x76], si
call fcn.0040fbec
cmp eax, 1
pop ecx
mov ecx, ebx
jne 0x434e24
push edi
call fcn.00422e2f
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x64], eax
call fcn.0043db4f
lea ecx, [ebp + 0x78]
call fcn.0043db4f
jmp 0x434e75
push esi
push esi
push esi
push 1
lea eax, [ebp + 0x76]
push eax
push ebx
push dword [ebp + 0x3c]
call fcn.0040a2d5
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x64], eax
call fcn.0043db4f
lea ecx, [ebp + 0x78]
jmp 0x434add
mov ebx, dword [ebp + 0x60]
xor esi, esi
cmp byte [ebp + 0x5f], 0
je 0x434e65
push esi
push dword [ebp + 0x7c]
mov ecx, ebx
push 0x11
push esi
push dword [ebp + 0x50]
call fcn.0041bcb9
push dword [ebp + 0x74]
mov ecx, ebx
push dword [ebp + 0x58]
call fcn.0042ede1
mov dword [ebp + 0x64], eax
mov eax, dword [ebp + 0x64]
jmp 0x433e44
cdq
push edx
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.00497eb9
mov esi, dword [ebp + 0x60]
add esp, 0xc
test byte [esi + 9], 0xf
jne 0x434ea5
lea eax, [ebp - 0x50]
push eax
push 0x4c0798
mov ecx, esi
call fcn.00443666
lea eax, [ebp - 0x50]
push eax
push 0x4c0794
mov ecx, esi
call fcn.00443666
cmp dword [0x4d7e6c], edi
mov byte [0x4d7f8c], 1
jle 0x434edb
cmp dword [ebp + 0x50], edi
je 0x434edb
push edi
push dword [ebp + 0x7c]
mov ecx, esi
push edi
push dword [ebp + 0x64]
push dword [ebp + 0x50]
call fcn.0041bcb9
lea ecx, [ebp + 0x3c]
call fcn.0043db4f
mov esi, dword [ebp + 0x60]
test byte [esi + 0xd], 1
je 0x434efe
push dword [ebp + 0x34]
call fcn.0043da5b
push dword [ebp + 0x48]
call fcn.0043da5b
pop ecx
pop ecx
mov esi, dword [ebp + 0x64]
jmp 0x434ac3
mov edi, dword [ebp + 0x60]
movzx eax, word [edi + 0x2c]
push 0
push eax
push esi
call fcn.004124e8
add esp, 0xc
or esi, 1
push esi
mov ecx, edi
call fcn.00481171
mov esi, eax
jmp 0x434abb