Function at 0x422e70
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xbc
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor edi, edi
mov dword [ebp - 0x14], edx
mov esi, dword [ebx + 0x8b]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x94], edi
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x9c], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 8], esi
cmp dword [ebx + 0x2b], edi
je 0x4253b2
cmp dword [ebx + 0x4b], 0xffffffff
je 0x4253b2
mov eax, dword [ebx + 0x17]
add eax, 0x1000
push eax
call fcn.004c4a00
add esp, 4
mov dword [ebp - 0xb8], eax
test eax, eax
je 0x4253b2
push edi
push edi
push 3
push edi
push 7
push SysReAllocString
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xbc], eax
cmp eax, 0xffffffff
je 0x4253a4
push edi
lea ecx, [ebx + 0x17]
push ecx
push dword [ecx]
push dword [ebp - 0xb8]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x425398
mov eax, dword [ebx + 0x33]
mov edx, 0x200
mov dword [ebp - 0xc], edi
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x18], ecx
mov ecx, dword [eax + 0x3c]
test ecx, ecx
mov eax, dword [eax + 0x38]
cmove ecx, edx
test eax, eax
mov dword [ebp - 4], ecx
mov ecx, 0x1000
cmove eax, ecx
mov ecx, 0x80
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 0x121]
cmp edx, ecx
jbe 0x422ff1
mov dword [ebp - 0xc], edi
cmp ecx, 0x400
jae 0x422ff1
mov eax, dword [eax + 0x11d]
cmp dword [ecx + eax], 0x68636952
je 0x422fea
mov eax, dword [ebp - 0x14]
add ecx, 8
cmp ecx, edx
jb 0x422fc4
mov dword [ebp - 0xc], edi
jmp 0x422ff1
mov dword [ebp - 0xc], 1
mov eax, dword [ebx + 0x33]
mov ecx, 1
cmp cx, word [eax + 0x5c]
jne 0x423008
mov dword [ebp - 0x1c], 3
jmp 0x42301a
mov ecx, 0x2000
test word [eax + 0x16], cx
mov ecx, edi
setne cl
inc ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebx + 0x2b]
xor edx, edx
mov dword [ebp - 0x14], eax
test eax, eax
je 0x423069
mov ecx, dword [ebx + 0x37]
add ecx, 0x24
xor esi, esi
nop
cmp dword [ecx - 0x14], 0
lea ecx, [ecx + 0x28]
mov eax, dword [ecx - 0x28]
mov ebx, 1
cmove edi, ebx
and eax, 0xa0000000
cmp eax, 0xa0000000
mov eax, dword [ebp - 0x20]
cmove edx, ebx
dec eax
test dword [ecx - 0x44], eax
mov eax, ebx
cmove esi, eax
sub dword [ebp - 0x14], eax
jne 0x423030
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x10], esi
mov esi, dword [ebp - 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x1c]
mov dword [ecx + 4], eax
mov dword [ecx], str.xfrwpetype
mov dword [ecx + 8], str.secaln
mov eax, dword [ebp - 0x20]
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], str.filaln
mov eax, dword [ebp - 4]
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x18], str.mjrlnk
mov eax, dword [ebx + 0x33]
movzx eax, byte [eax + 0x1a]
mov dword [ecx + 0x1c], eax
mov dword [ecx + 0x20], str.mnrlnk
mov eax, dword [ebx + 0x33]
movzx eax, byte [eax + 0x1b]
mov dword [ecx + 0x24], eax
mov dword [ecx + 0x28], 0x533d34
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x2c], eax
mov dword [ecx + 0x30], str.soid
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x20]
mov dword [ecx + 0x34], eax
mov dword [ecx + 0x38], str.soud
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x24]
mov dword [ecx + 0x3c], eax
mov dword [ecx + 0x40], 0x533d48
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x2c]
mov dword [ecx + 0x44], eax
mov dword [ecx + 0x48], 0x533d4c
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x30]
mov dword [ecx + 0x4c], eax
mov dword [ecx + 0x50], 0x533d50
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x50]
mov dword [ecx + 0x54], eax
mov dword [ecx + 0x58], 0x533d54
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x54]
mov dword [ecx + 0x5c], eax
mov dword [ecx + 0x60], str.sosr
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x60]
mov dword [ecx + 0x64], eax
mov dword [ecx + 0x68], str.sosc
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x64]
mov dword [ecx + 0x6c], eax
mov dword [ecx + 0x70], str.sohr
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x68]
mov dword [ecx + 0x74], eax
mov dword [ecx + 0x78], str.sohc
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x6c]
mov dword [ecx + 0x7c], eax
xor eax, eax
mov dword [ecx + 0x80], str.nfsec
cmp dword [ebx + 0x4b], eax
setne al
mov dword [ecx + 0x84], eax
mov dword [ecx + 0x8c], edi
xor edi, edi
mov dword [ecx + 0x88], str.fhzrss
mov dword [ecx + 0x90], str.fsecwrite
mov eax, dword [ebx + 0x37]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
cmp edi, eax
sbb eax, eax
neg eax
mov dword [ecx + 0x94], eax
mov dword [ecx + 0x98], str.haswxsec
mov dword [ecx + 0x9c], edx
mov dword [ecx + 0xa0], str.fsecexec
mov eax, dword [ebx + 0x37]
xor edx, edx
mov eax, dword [eax + 0x24]
shr eax, 0x1d
not eax
and eax, 1
mov dword [ecx + 0xa4], eax
mov dword [ecx + 0xa8], str.vsizealn
mov eax, dword [ebp - 0x10]
mov dword [ecx + 0xac], eax
mov dword [ecx + 0xb0], str.hassdsec
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0x98]
sbb eax, eax
neg eax
mov dword [ecx + 0xb4], eax
mov dword [ecx + 0xb8], str.hassdexp
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0x78]
sbb eax, eax
neg eax
mov dword [ecx + 0xbc], eax
mov dword [ecx + 0xc0], str.hassddbg
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xa8]
sbb eax, eax
neg eax
mov dword [ecx + 0xc4], eax
mov dword [ecx + 0xc8], str.hassdrsc
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0x88]
sbb eax, eax
neg eax
mov dword [ecx + 0xcc], eax
mov dword [ecx + 0xd0], str.hassdbimp
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xd0]
sbb eax, eax
neg eax
mov dword [ecx + 0xd4], eax
mov dword [ecx + 0xd8], str.hassiat
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xd8]
sbb eax, eax
neg eax
mov dword [ecx + 0xdc], eax
mov dword [ecx + 0xe0], str.hassdimp
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xe0]
sbb eax, eax
neg eax
mov dword [ecx + 0xe4], eax
mov dword [ecx + 0xe8], str.hasscom
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xe8]
sbb eax, eax
neg eax
mov dword [ecx + 0xec], eax
mov dword [ecx + 0xf0], str.hasstls
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xc0]
sbb eax, eax
neg eax
mov dword [ecx + 0xf4], eax
mov dword [ecx + 0xf8], str.hassbrlc
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xa0]
sbb eax, eax
neg eax
mov dword [ecx + 0xfc], eax
mov dword [ecx + 0x100], str.fsize
mov eax, dword [ebx + 0x13]
mov dword [ecx + 0x104], eax
mov eax, dword [ebp - 0xc]
mov dword [ecx + 0x108], str.frich
mov dword [ecx + 0x10c], eax
mov dword [ecx + 0x110], str.stid
movzx eax, word [ebx + 0xc]
mov dword [ecx + 0x114], eax
mov dword [ecx + 0x118], str.sread
mov eax, dword [ebx + 0x2b]
mov dword [ecx + 0x11c], eax
mov dword [ecx + 0x120], str.expfcnt
mov eax, dword [ebx + 0x3b]
mov dword [ecx + 0x124], eax
mov dword [ecx + 0x128], str.expncnt
mov eax, dword [ebx + 0x3f]
mov dword [ecx + 0x12c], eax
mov dword [ecx + 0x130], str.entsecpos
mov eax, dword [ebx + 0x4b]
inc eax
mov dword [ecx + 0x134], eax
mov dword [ecx + 0x138], str.enttsecpos
mov eax, dword [ebx + 0x53]
inc eax
mov dword [ecx + 0x13c], eax
mov dword [ecx + 0x140], str.eppospct
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x4233c8
mov eax, dword [ebx + 0x33]
imul eax, dword [eax + 0x28], 0x64
div ecx
jmp 0x4233ca
xor eax, eax
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x144], eax
mov dword [edx + 0x148], str.impfcnt
movzx eax, word [ebx + 0xa3]
mov dword [edx + 0x14c], eax
mov dword [edx + 0x150], str.impdllcnt
movzx eax, word [ebx + 0xbd]
mov dword [edx + 0x154], eax
test esi, esi
je 0x4235c1
mov dword [edx + 0x158], str.riapih
lea ecx, [esi + 0x17]
mov eax, dword [esi + 5]
mov dword [edx + 0x15c], eax
mov dword [edx + 0x160], str.riapicp
movzx eax, word [esi + 9]
mov dword [edx + 0x164], eax
mov dword [edx + 0x168], str.riapisz
movzx eax, word [esi + 0xb]
mov dword [edx + 0x16c], eax
mov dword [edx + 0x170], str.riapvsz
movzx eax, word [esi + 0x11]
mov dword [edx + 0x174], eax
mov dword [edx + 0x178], str.riapvcp
movzx eax, word [esi + 0xb7]
mov dword [edx + 0x17c], eax
mov dword [edx + 0x180], str.riapvcn
mov edx, ecx
lea edi, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x423481
sub edx, edi
call fcn.00422e40
mov ebx, dword [ebp + 0xc]
lea ecx, [esi + 0x57]
mov edx, ecx
mov dword [ebx + 0x184], eax
mov dword [ebx + 0x188], str.riapvpn
lea edi, [edx + 1]
nop word [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x4234b0
sub edx, edi
call fcn.00422e40
lea ecx, [esi + 0x97]
mov dword [ebx + 0x18c], eax
mov edx, ecx
mov dword [ebx + 0x190], str.riapvofn
lea esi, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x4234e0
sub edx, esi
call fcn.00422e40
mov esi, dword [ebp + 0x14]
mov edi, 0x33
mov edx, dword [ebp - 8]
mov dword [ebx + 0x194], eax
xor eax, eax
mov dword [ebp - 0x10], eax
lea ebx, [edi - 0x32]
mov dword [ebp - 4], esi
test dword [edx + 1], ebx
je 0x423538
push eax
push str.rirf_u
push esi
call fcn.00422df0
mov ecx, dword [ebp + 0xc]
inc eax
mov edx, dword [ebp - 8]
add esp, 0xc
add esi, eax
mov eax, dword [ebp - 4]
mov dword [ecx + edi*8], eax
mov eax, dword [ebp - 0x10]
mov dword [ecx + edi*8 + 4], 1
inc eax
rol ebx, 1
inc edi
mov dword [ebp - 0x10], eax
cmp eax, 0x20
jb 0x423507
xor ebx, ebx
xor ecx, ecx
mov dword [ebp - 0xc], ecx
nop dword [eax + eax]
movzx eax, byte [edx + 0xb9]
mov dword [ebp - 4], esi
cmp ebx, eax
jae 0x4235ac
push ebx
push str.riblbn_u
push esi
call fcn.00422df0
mov ecx, dword [ebp + 0xc]
inc eax
add esi, eax
add esp, 0xc
mov eax, dword [ebp - 4]
mov dword [ecx + edi*8], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
mov eax, dword [eax + 0xba]
add ecx, eax
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 4], eax
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x423590
sub edx, dword [ebp - 4]
call fcn.00422e40
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 8]
mov dword [ecx + edi*8 + 4], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x18
inc ebx
inc edi
mov dword [ebp - 0xc], ecx
cmp ecx, 0x60
jb 0x423550
mov ebx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
jmp 0x4235c9
mov esi, dword [ebp + 0x14]
mov edi, 0x57
movzx eax, word [ebx + 0xc]
mov ecx, 0x3ea
mov dword [ebp - 0xc], esi
cmp cx, ax
jne 0x42363c
mov ecx, dword [ebx + 0x8f]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x42363c
mov dword [edx + edi*8], str.dstbmfn
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 4], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x4235f6
sub edx, dword [ebp - 4]
call fcn.00422e40
mov ecx, dword [ebp + 0xc]
mov dword [ecx + edi*8 + 4], eax
mov dword [ecx + edi*8 + 8], str.dstbpnfo
mov ecx, dword [ebp - 0x18]
add ecx, 0x20
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 4], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x423622
sub edx, dword [ebp - 4]
call fcn.00422e40
mov edx, dword [ebp + 0xc]
mov dword [edx + edi*8 + 0xc], eax
movzx eax, word [ebx + 0xc]
mov ecx, 0x3e8
add edi, 2
cmp cx, ax
jne 0x4237fc
mov eax, dword [ebx + 0x8f]
mov dword [ebp - 8], eax
test eax, eax
je 0x4237fc
mov dword [edx + edi*8], str.vbstbpname
mov ecx, dword [eax]
test ecx, ecx
je 0x42368c
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 4], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x423673
sub edx, dword [ebp - 4]
call fcn.00422e40
mov edx, dword [ebp + 0xc]
mov ecx, eax
mov eax, dword [ebp - 8]
jmp 0x42368e
xor ecx, ecx
mov dword [edx + edi*8 + 4], ecx
mov dword [edx + edi*8 + 8], str.vbstbpexename
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x4236c9
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 4], eax
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x4236b0
sub edx, dword [ebp - 4]
call fcn.00422e40
mov edx, dword [ebp + 0xc]
mov ecx, eax
mov eax, dword [ebp - 8]
jmp 0x4236cb
xor ecx, ecx
mov dword [edx + edi*8 + 0xc], ecx
add edi, 2
mov dword [edx + edi*8], str.vbstbprjclsid
mov ecx, dword [eax + 8]
test ecx, ecx
je 0x4236f9
push 0
mov edx, 0x10
call fcn.00422e10
mov edx, dword [ebp + 0xc]
mov ecx, eax
mov eax, dword [ebp - 8]
add esp, 4
jmp 0x4236fb
xor ecx, ecx
mov dword [edx + edi*8 + 4], ecx
mov dword [edx + edi*8 + 8], str.vbstbprjpthnfo
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x423737
mov edx, ecx
lea eax, [edx + 2]
mov dword [ebp - 4], eax
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x423716
sub edx, dword [ebp - 4]
sar edx, 1
push 0
add edx, edx
call fcn.00422e10
mov edx, dword [ebp + 0xc]
add esp, 4
jmp 0x423739
xor eax, eax
mov dword [edx + edi*8 + 0xc], eax
lea ecx, [edi + 2]
mov eax, dword [ebp + 0xc]
lea ecx, [edx + ecx*8]
lea edx, [edx + edi*8]
add edx, 0x14
lea eax, [eax + edi*8]
add eax, 0x18
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x1c
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x24
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x2c
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x20
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x28
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x30
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x34
mov dword [ebp - 0x48], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x38
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x3c
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x40
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x44
mov dword [ebp - 0x50], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x48
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x4c
mov dword [ebp - 0x18], eax
lea eax, [edi + 0xa]
mov dword [ebp - 4], eax
jmp 0x4238b6
lea eax, [edi + 0xc]
mov dword [ebp - 4], eax
lea ecx, [edi + 4]
mov eax, dword [ebp + 0xc]
lea ecx, [edx + ecx*8]
lea edx, [edx + edi*8]
add edx, 0x24
lea eax, [eax + edi*8]
add eax, 0x28
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x2c
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x34
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x3c
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x30
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x38
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x40
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x44
mov dword [ebp - 0x48], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x48
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x4c
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x50
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x54
mov dword [ebp - 0x50], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x58
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x5c
mov dword [ebp - 0x18], eax
mov dword [ecx], str.entsecrsz
xor edi, edi
mov eax, dword [ebx + 0x4b]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x37]
mov eax, dword [eax + ecx*8 + 0x10]
mov dword [edx], eax
xor edx, edx
mov eax, dword [ebp - 0x10]
mov dword [eax], str.entsecvsz
mov eax, dword [ebx + 0x4b]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x37]
mov eax, dword [eax + ecx*8 + 8]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
cmp dword [ebx + 0x2b], edx
jbe 0x42391e
mov esi, dword [ebp - 8]
xor ecx, ecx
mov eax, dword [ebx + 0x37]
mov eax, dword [ecx + eax + 0x10]
cmp edi, eax
jae 0x423912
mov dword [esi], eax
mov edi, eax
mov eax, dword [ebx + 0x37]
mov esi, dword [ebp - 0x1c]
mov eax, dword [ecx + eax + 8]
mov dword [esi], eax
mov esi, dword [ebp - 8]
inc edx
add ecx, 0x28
cmp edx, dword [ebx + 0x2b]
jb 0x4238f4
mov esi, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
mov dword [eax], str.lrgsecrsz
mov eax, dword [ebp - 0x44]
mov dword [eax], str.lrgsecvsz
mov edi, dword [ebx + 0x93]
test edi, edi
je 0x4239e9
mov eax, dword [ebp - 0x28]
lea ecx, [edi + 2]
mov edx, ecx
mov dword [eax], str.dsigsname
lea eax, [edx + 1]
mov dword [ebp - 0x28], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x423952
sub edx, dword [ebp - 0x28]
call fcn.00422e40
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
lea ecx, [edi + 0x82]
mov eax, dword [ebp - 0x2c]
mov edx, ecx
mov dword [eax], str.dsiginame
lea eax, [edx + 1]
mov dword [ebp - 0x2c], eax
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x423980
sub edx, dword [ebp - 0x2c]
call fcn.00422e40
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
lea ecx, [edi + 0x10a]
mov eax, dword [ebp - 0x24]
mov edx, ecx
mov dword [eax], str.dsigscntry
lea eax, [edx + 1]
mov dword [ebp - 0x24], eax
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x4239b0
sub edx, dword [ebp - 0x24]
call fcn.00422e40
mov ecx, dword [ebp - 0x50]
push 0
mov dword [ecx], eax
lea ecx, [edi + 0x113]
mov eax, dword [ebp - 0x54]
mov dword [eax], str.dsigssrno
movzx edx, byte [edi + 0x112]
call fcn.00422e10
mov ecx, dword [ebp - 0x18]
add esp, 4
mov dword [ecx], eax
mov ecx, dword [ebx + 0xa5]
test ecx, ecx
je 0x423a08
mov edx, ecx
lea edi, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x4239f8
sub edx, edi
call fcn.00422e40
jmp 0x423a0a
xor eax, eax
mov ecx, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
mov dword [edx + ecx*8 + 4], eax
inc ecx
mov edi, dword [ebx + 0xa9]
mov dword [ebp - 8], ecx
test edi, edi
je 0x423a79
xor ebx, ebx
cmp byte [edi], 0
mov dword [ebp - 4], esi
je 0x423a6a
push ebx
push str.expfname_u
push esi
call fcn.00422df0
mov ecx, dword [ebp + 0xc]
inc eax
mov edx, dword [ebp - 8]
add esp, 0xc
add esi, eax
mov eax, dword [ebp - 4]
mov dword [ecx + edx*8], eax
lea ecx, [edi + 1]
movzx edx, byte [edi]
push 0
call fcn.00422e10
mov edx, dword [ebp + 0xc]
add esp, 4
mov ecx, dword [ebp - 8]
mov dword [edx + ecx*8 + 4], eax
movzx eax, byte [edi]
inc edi
add edi, eax
inc ebx
inc ecx
mov dword [ebp - 8], ecx
cmp ebx, 6
jb 0x423a24
mov ebx, dword [ebp + 8]
jmp 0x423a7f
add ecx, 6
mov dword [ebp - 8], ecx
mov eax, dword [ebx + 0x97]
mov dword [ebp - 4], eax
test eax, eax
je 0x425390
mov edi, dword [ebx + 0x9f]
xor esi, esi
shr edi, 2
test edi, edi
je 0x423ee4
mov edx, eax
mov eax, dword [edx + esi*4]
movzx ecx, al
cmp ecx, 6
je 0x425338
cmp ecx, 1
je 0x425338
cmp ecx, 0x13
jne 0x423ace
mov dword [ebp - 0x6c], 1
jmp 0x423ed5
cmp ecx, 0x10
jne 0x423adf
mov dword [ebp - 0x70], 1
jmp 0x423ed5
cmp ecx, 9
je 0x42532c
cmp ecx, 0x32
je 0x42532c
cmp ecx, 0x1f
jne 0x423b02
mov dword [ebp - 0x7c], 1
jmp 0x423ed5
cmp ecx, 0x18
je 0x425320
cmp ecx, 0x19
je 0x425320
cmp ecx, 0xc
je 0x425314
cmp ecx, 0xe
je 0x425314
cmp ecx, 0x12
jne 0x423b3a
mov dword [ebp - 0x84], 1
jmp 0x423ed5
cmp eax, 0x82a18d0a
ja 0x424842
je 0x425305
cmp eax, 0x44d0ac0a
ja 0x4242d7
je 0x425305
cmp eax, 0x1bfd1307
ja 0x423e24
je 0x423e18
cmp eax, 0x127e4e0a
ja 0x423cd1
je 0x425305
cmp eax, 0x6e5610a
ja 0x423c2d
je 0x425305
cmp eax, 0x4b3260a
ja 0x423be9
je 0x423c04
cmp eax, 0x3437307
ja 0x423bce
je 0x423df3
cmp eax, 0x1e8b10a
je 0x425305
cmp eax, 0x262cc0a
je 0x423bc2
cmp eax, 0x262da0a
jne 0x423ed5
mov dword [ebp - 0x68], 1
jmp 0x423ed5
cmp eax, 0x3bea307
je 0x423ed5
cmp eax, 0x4343d0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x5041b0a
ja 0x423c1a
je 0x423c04
cmp eax, 0x4b3300a
je 0x423c04
cmp eax, 0x5040d0a
jne 0x423ed5
mov dword [ebp - 0x30], 1
mov dword [ebp - 0xa8], 1
jmp 0x423ed5
cmp eax, 0x50e0a0a
je 0x423bc2
cmp eax, 0x50e1c0a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0xff79f0a
ja 0x423c84
je 0x423bc2
cmp eax, 0xa71210a
ja 0x423c69
je 0x425305
cmp eax, 0x7393c0a
je 0x425249
cmp eax, 0x7d8990a
je 0x425305
cmp eax, 0x995810a
je 0x425305
jmp 0x423ed5
cmp eax, 0xbfc960a
je 0x423bc2
cmp eax, 0xf44d60a
je 0x425305
jmp 0x423ed5
cmp eax, 0x1033ff0a
ja 0x423cac
je 0x425305
cmp eax, 0x100b330a
je 0x425305
cmp eax, 0x1033e90a
je 0x425305
jmp 0x423ed5
cmp eax, 0x10f76d07
je 0x4252e0
cmp eax, 0x12200908
jne 0x423ed5
mov dword [ebp - 0xac], 1
jmp 0x423ed5
cmp eax, 0x1886a60a
ja 0x423d80
je 0x425305
cmp eax, 0x1430330a
ja 0x423d3d
je 0x423bc2
cmp eax, 0x1351780a
ja 0x423d22
je 0x425305
cmp eax, 0x12e86e07
je 0x4247cb
cmp eax, 0x12e87807
je 0x4247cb
cmp eax, 0x1328c707
je 0x42529b
jmp 0x423ed5
cmp eax, 0x13b8520a
je 0x425305
cmp eax, 0x1430250a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x166ecc0a
ja 0x423d65
je 0x423bc2
cmp eax, 0x1454a70a
je 0x425305
cmp eax, 0x15f43a0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x166eda0a
je 0x423bc2
cmp eax, 0x17d7b107
je 0x424aff
jmp 0x423ed5
cmp eax, 0x1911330a
ja 0x423dd0
je 0x423bc2
cmp eax, 0x18d7700a
ja 0x423db5
je 0x425305
cmp eax, 0x18ccdd0a
je 0x425305
cmp eax, 0x18d7660a
je 0x425305
jmp 0x423ed5
cmp eax, 0x18e8860a
je 0x425305
cmp eax, 0x1911250a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x1ac4ad0a
ja 0x423e02
je 0x425305
cmp eax, 0x19ab510a
je 0x425305
cmp eax, 0x1a062207
jne 0x423ed5
mov dword [ebp - 0xa0], 1
jmp 0x423ed5
cmp eax, 0x1ac4bb0a
je 0x425305
cmp eax, 0x1bfd0507
jne 0x423ed5
mov dword [ebp - 0x5c], 1
jmp 0x423ed5
cmp eax, 0x2e23aa0a
ja 0x424195
je 0x425305
cmp eax, 0x264f6b0a
ja 0x4240f7
je 0x425305
cmp eax, 0x20874f0a
ja 0x423e9b
je 0x423c04
cmp eax, 0x1e1a8c0a
ja 0x423e83
je 0x425305
cmp eax, 0x1c196d0a
je 0x425170
cmp eax, 0x1c197b0a
je 0x425170
cmp eax, 0x1d865d07
je 0x4252e0
jmp 0x423ed5
cmp eax, 0x1f5a490a
je 0x425305
cmp eax, 0x1ff64607
je 0x4252e0
jmp 0x423ed5
cmp eax, 0x22651b07
ja 0x423ec0
je 0x423e18
cmp eax, 0x21300f0a
je 0x425170
cmp eax, 0x2130190a
je 0x425170
jmp 0x423ed5
cmp eax, 0x22f24807
je 0x423ece
cmp eax, 0x22f25e07
jne 0x423ed5
mov dword [ebp - 0x34], 1
inc esi
cmp esi, edi
jb 0x423aa5
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp - 8]
mov dword [edx + ecx*8], str.iaNative
mov eax, dword [ebp - 0x58]
mov dword [edx + ecx*8 + 4], eax
mov dword [edx + ecx*8 + 8], str.iaFileIO
mov eax, dword [ebp - 0x5c]
mov dword [edx + ecx*8 + 0xc], eax
mov dword [edx + ecx*8 + 0x10], str.iaFileCopy
mov eax, dword [ebp - 0x60]
mov dword [edx + ecx*8 + 0x14], eax
mov dword [edx + ecx*8 + 0x18], str.iaFileDelete
mov eax, dword [ebp - 0x64]
mov dword [edx + ecx*8 + 0x1c], eax
mov dword [edx + ecx*8 + 0x20], str.iaRegistry
mov eax, dword [ebp - 0x68]
mov dword [edx + ecx*8 + 0x24], eax
mov dword [edx + ecx*8 + 0x28], str.iaNetwork
mov eax, dword [ebp - 0x6c]
mov dword [edx + ecx*8 + 0x2c], eax
mov dword [edx + ecx*8 + 0x30], str.iaURL
mov eax, dword [ebp - 0x70]
mov dword [edx + ecx*8 + 0x34], eax
mov dword [edx + ecx*8 + 0x38], str.iaUI
mov eax, dword [ebp - 0x74]
mov dword [edx + ecx*8 + 0x3c], eax
mov dword [edx + ecx*8 + 0x40], str.iaGraphics
mov eax, dword [ebp - 0x78]
mov dword [edx + ecx*8 + 0x44], eax
mov dword [edx + ecx*8 + 0x48], str.iaNetApi
mov eax, dword [ebp - 0x7c]
mov dword [edx + ecx*8 + 0x4c], eax
mov eax, dword [ebp - 0x80]
mov dword [edx + ecx*8 + 0x54], eax
mov dword [edx + ecx*8 + 0x50], str.iaOle
mov eax, dword [ebp - 0x84]
mov dword [edx + ecx*8 + 0x5c], eax
mov eax, dword [ebp - 0x88]
mov dword [edx + ecx*8 + 0x58], str.iaPrinting
mov dword [edx + ecx*8 + 0x64], eax
mov eax, dword [ebp - 0x8c]
mov dword [edx + ecx*8 + 0x60], str.iaSecurity
mov dword [edx + ecx*8 + 0x6c], eax
mov eax, dword [ebp - 0x90]
mov dword [edx + ecx*8 + 0x68], str.iaIPC
mov dword [edx + ecx*8 + 0x74], eax
mov eax, dword [ebp - 0x94]
mov dword [edx + ecx*8 + 0x70], str.iaSynchronization
mov dword [edx + ecx*8 + 0x7c], eax
mov eax, dword [ebp - 0x98]
mov dword [edx + ecx*8 + 0x78], str.iaThreading
mov dword [edx + ecx*8 + 0x84], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + ecx*8 + 0x80], str.iaProcessCreate
mov dword [edx + ecx*8 + 0x8c], eax
mov eax, dword [ebp - 0xa0]
mov dword [edx + ecx*8 + 0x88], str.iaProcessEnum
mov dword [edx + ecx*8 + 0x94], eax
mov eax, dword [ebp - 0xa4]
mov dword [edx + ecx*8 + 0x90], str.iaRemoteThread
mov dword [edx + ecx*8 + 0x9c], eax
mov eax, dword [ebp - 0x30]
mov dword [edx + ecx*8 + 0x98], str.iaRemoteMemory
mov dword [edx + ecx*8 + 0xa4], eax
mov eax, dword [ebp - 0xa8]
mov dword [edx + ecx*8 + 0xa0], str.iaServiceRead
mov dword [edx + ecx*8 + 0xac], eax
mov eax, dword [ebp - 0xac]
mov dword [edx + ecx*8 + 0xa8], str.iaServiceWrite
mov dword [edx + ecx*8 + 0xb4], eax
mov eax, dword [ebp - 0xb0]
mov dword [edx + ecx*8 + 0xb0], str.iaWindowsHook
mov dword [edx + ecx*8 + 0xbc], eax
lea eax, [ecx + 0x18]
mov dword [edx + ecx*8 + 0xb8], str.iaDebuggerCheck
mov ecx, dword [ebp - 0x34]
mov dword [edx + eax*8 + 4], ecx
mov ecx, dword [ebp - 0x38]
mov dword [edx + eax*8], str.iaLoadLib
mov dword [edx + eax*8 + 0xc], ecx
mov ecx, dword [ebp - 0x40]
mov dword [edx + eax*8 + 8], str.iaGetProcAddr
mov dword [edx + eax*8 + 0x10], str.iaVAlloc
mov dword [edx + eax*8 + 0x14], ecx
mov ecx, dword [ebp - 0xb4]
mov dword [edx + eax*8 + 0x1c], ecx
mov ecx, dword [ebp - 0x3c]
mov dword [edx + eax*8 + 0x18], str.iaVAllocEx
mov dword [edx + eax*8 + 0x24], ecx
lea ecx, [eax + 5]
mov dword [edx + eax*8 + 0x20], str.iaVProtect
jmp 0x425393
cmp eax, 0x2ab2800a
ja 0x424152
je 0x425305
cmp eax, 0x2a47960a
ja 0x424137
je 0x423c04
cmp eax, 0x290ca207
je 0x425249
cmp eax, 0x290cb407
je 0x425249
cmp eax, 0x2a47800a
je 0x423c04
jmp 0x423ed5
cmp eax, 0x2a53e40a
je 0x423bc2
cmp eax, 0x2a53f20a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x2d47610a
ja 0x42417a
je 0x423bc2
cmp eax, 0x2ab2960a
je 0x425305
cmp eax, 0x2d2f020a
je 0x425305
jmp 0x423ed5
cmp eax, 0x2d47770a
je 0x423bc2
cmp eax, 0x2e090d0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x3b541a0a
ja 0x424244
je 0x423bc2
cmp eax, 0x39440607
ja 0x424201
je 0x4247cb
cmp eax, 0x35aa2f0a
ja 0x4241e6
je 0x425305
cmp eax, 0x32d11a07
je 0x423e18
cmp eax, 0x34537507
je 0x423df3
cmp eax, 0x3517620a
je 0x425305
jmp 0x423ed5
cmp eax, 0x35aa390a
je 0x425305
cmp eax, 0x38cc6f0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x3a18310a
ja 0x424229
je 0x423bc2
cmp eax, 0x39441007
je 0x4247cb
cmp eax, 0x3a18270a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x3a563f0a
je 0x425305
cmp eax, 0x3b540c0a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x428df007
ja 0x424294
je 0x42529b
cmp eax, 0x3fd5e10a
ja 0x424279
je 0x425305
cmp eax, 0x3c7b210a
je 0x423bc2
cmp eax, 0x3c7b370a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x3feb870a
je 0x425305
cmp eax, 0x3feb910a
je 0x425305
jmp 0x423ed5
cmp eax, 0x43fbc20a
ja 0x4242bc
je 0x425170
cmp eax, 0x43c57807
je 0x425384
cmp eax, 0x43e69d0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x43fbd40a
je 0x425170
cmp eax, 0x445c740a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x66ae8b0a
ja 0x424592
je 0x423bc2
cmp eax, 0x54038007
ja 0x424449
je 0x4247cb
cmp eax, 0x4eab090a
ja 0x4243a8
je 0x423bc2
cmp eax, 0x4bd87e11
ja 0x424365
je 0x42529b
cmp eax, 0x46fa360a
ja 0x42434a
je 0x425170
cmp eax, 0x45e9000a
je 0x423bc2
cmp eax, 0x45e9160a
je 0x423bc2
cmp eax, 0x46fa200a
je 0x425170
jmp 0x423ed5
cmp eax, 0x49bafd0a
je 0x423bc2
cmp eax, 0x4b64110a
je 0x425305
jmp 0x423ed5
cmp eax, 0x4cdf760a
ja 0x42438d
je 0x425305
cmp eax, 0x4c26600a
je 0x425305
cmp eax, 0x4cdf600a
je 0x425305
jmp 0x423ed5
cmp eax, 0x4d8d4907
je 0x424d80
cmp eax, 0x4e7ad50a
je 0x425170
jmp 0x423ed5
cmp eax, 0x5145cb0a
ja 0x424406
je 0x425305
cmp eax, 0x50fee20a
ja 0x4243eb
je 0x425170
cmp eax, 0x4eab1f0a
je 0x423bc2
cmp eax, 0x4f8fc307
je 0x4243df
cmp eax, 0x4f8fd507
jne 0x423ed5
mov dword [ebp - 0x60], 1
jmp 0x423ed5
cmp eax, 0x50fef40a
je 0x425170
cmp eax, 0x5133410a
je 0x425305
jmp 0x423ed5
cmp eax, 0x51b16607
ja 0x42442e
je 0x4252e0
cmp eax, 0x5145dd0a
je 0x425305
cmp eax, 0x514e830a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x51b17007
je 0x4252e0
cmp eax, 0x534d1d0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x5e3b7b07
ja 0x4244f8
je 0x4252e0
cmp eax, 0x5b4b860a
ja 0x4244b5
je 0x425170
cmp eax, 0x56f8ee0a
ja 0x42449a
je 0x423bc2
cmp eax, 0x54039607
je 0x4247cb
cmp eax, 0x5593920a
je 0x425305
cmp eax, 0x56275d0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x56f8f80a
je 0x423bc2
cmp eax, 0x595fba0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x5b671f0a
ja 0x4244dd
je 0x425305
cmp eax, 0x5b4b900a
je 0x425170
cmp eax, 0x5b67090a
je 0x425305
jmp 0x423ed5
cmp eax, 0x5db4010a
je 0x425305
cmp eax, 0x5e3b6d07
je 0x4252e0
jmp 0x423ed5
cmp eax, 0x60815e0a
ja 0x42454f
je 0x423bc2
cmp eax, 0x606a4207
ja 0x424534
je 0x4247cb
cmp eax, 0x5eefc50a
je 0x425305
cmp eax, 0x5f2e1707
jne 0x423ed5
mov dword [ebp - 0x38], 1
jmp 0x423ed5
cmp eax, 0x606a5407
je 0x4247cb
cmp eax, 0x6081480a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x6581780a
ja 0x424577
je 0x425305
cmp eax, 0x61134307
je 0x4252e0
cmp eax, 0x635fef0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x65b7710a
je 0x425305
cmp eax, 0x6686520a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x77ac050a
ja 0x4246e5
je 0x425305
cmp eax, 0x7092560a
ja 0x424652
je 0x425305
cmp eax, 0x6d157a0a
ja 0x42460f
je 0x423c04
cmp eax, 0x6937c30a
ja 0x4245f4
je 0x425305
cmp eax, 0x66ae9d0a
je 0x423bc2
cmp eax, 0x6819650a
je 0x425305
cmp eax, 0x6854930a
je 0x425305
jmp 0x423ed5
cmp eax, 0x6937d50a
je 0x425305
cmp eax, 0x6d156c0a
je 0x423c04
jmp 0x423ed5
cmp eax, 0x6f1c7d0d
ja 0x424637
je 0x425249
cmp eax, 0x6d26830a
je 0x425305
cmp eax, 0x6f1c6b0d
je 0x425249
jmp 0x423ed5
cmp eax, 0x6ff82c0a
je 0x425305
cmp eax, 0x6ff83a0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x74208007
ja 0x4246a2
je 0x4243df
cmp eax, 0x7393030a
ja 0x424687
je 0x423bc2
cmp eax, 0x71c0b30a
je 0x425305
cmp eax, 0x736f900a
je 0x425305
jmp 0x423ed5
cmp eax, 0x73b13d0a
je 0x423bc2
cmp eax, 0x73e1880a
je 0x425305
jmp 0x423ed5
cmp eax, 0x767d9b0a
ja 0x4246ca
je 0x425305
cmp eax, 0x74209607
je 0x4243df
cmp eax, 0x748a650a
je 0x425305
jmp 0x423ed5
cmp eax, 0x777dcb07
je 0x4252e0
cmp eax, 0x777ddd07
je 0x4252e0
jmp 0x423ed5
cmp eax, 0x7c4d5d0a
ja 0x42479f
je 0x425305
cmp eax, 0x7991aa0a
ja 0x42475c
je 0x425305
cmp eax, 0x77e63f0a
ja 0x424736
je 0x425305
cmp eax, 0x77ac130a
je 0x425305
cmp eax, 0x77dbbb0a
je 0x423bc2
cmp eax, 0x77e6290a
je 0x425305
jmp 0x423ed5
cmp eax, 0x78acf707
je 0x42474d
cmp eax, 0x78e70a0a
je 0x425305
jmp 0x423ed5
mov dword [ebp - 0xb4], 1
jmp 0x423ed5
cmp eax, 0x7b19e80a
ja 0x424784
je 0x425305
cmp eax, 0x7991bc0a
je 0x425305
cmp eax, 0x7b02260a
je 0x425305
jmp 0x423ed5
cmp eax, 0x7c1dae0a
je 0x423bc2
cmp eax, 0x7c1db80a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x7de58a0a
ja 0x4247f5
je 0x425305
cmp eax, 0x7cb89b0a
ja 0x4247da
je 0x425305
cmp eax, 0x7c9c0f07
je 0x4247cb
cmp eax, 0x7c9c1907
jne 0x423ed5
mov dword [ebp - 0x90], 1
jmp 0x423ed5
cmp eax, 0x7d10e10a
je 0x423bc2
cmp eax, 0x7d10f70a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x8025e50a
ja 0x42481d
je 0x425170
cmp eax, 0x7de59c0a
je 0x425305
cmp eax, 0x7ff73b0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x8025f30a
je 0x425170
cmp eax, 0x8180d407
jne 0x423ed5
mov dword [ebp - 0x94], 1
jmp 0x423ed5
cmp eax, 0xc8a0250a
ja 0x424daa
je 0x425305
cmp eax, 0xab24230a
ja 0x424b0b
je 0x423bc2
cmp eax, 0x991a120a
ja 0x4249c2
je 0x425305
cmp eax, 0x9007f20a
ja 0x424924
je 0x425305
cmp eax, 0x86c9350a
ja 0x4248e1
je 0x423bc2
cmp eax, 0x8492fb07
ja 0x4248c6
je 0x423df3
cmp eax, 0x8402fb0a
je 0x425170
cmp eax, 0x848e280a
je 0x425170
cmp eax, 0x848e3e0a
je 0x425170
jmp 0x423ed5
cmp eax, 0x86a07e0a
je 0x425305
cmp eax, 0x86c9230a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x88efdb0a
ja 0x424909
je 0x423bc2
cmp eax, 0x87a17f08
je 0x423cc2
cmp eax, 0x88efcd0a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0x8b7cc90a
je 0x425305
cmp eax, 0x8b7cdf0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x9356de0a
ja 0x42497f
je 0x425305
cmp eax, 0x90da5e0a
ja 0x424964
je 0x425305
cmp eax, 0x901dc30a
je 0x425305
cmp eax, 0x9089cb08
je 0x423cc2
cmp eax, 0x9089dd08
je 0x423cc2
jmp 0x423ed5
cmp eax, 0x9101b507
je 0x424833
cmp eax, 0x92b0e20a
je 0x425305
jmp 0x423ed5
cmp eax, 0x9524fd0a
ja 0x4249a7
je 0x423bc2
cmp eax, 0x940f910a
je 0x423bc2
cmp eax, 0x94bd4c0a
je 0x425305
jmp 0x423ed5
cmp eax, 0x97c17a0a
je 0x425305
cmp eax, 0x991a040a
je 0x425305
jmp 0x423ed5
cmp eax, 0xa370e90a
ja 0x424a71
je 0x425170
cmp eax, 0xa06fe00a
ja 0x424a2e
je 0x425305
cmp eax, 0x9e3d7f0a
ja 0x424a13
je 0x425305
cmp eax, 0x9b61fa0a
je 0x425170
cmp eax, 0x9bb6b90a
je 0x425305
cmp eax, 0x9dbc290a
je 0x425305
jmp 0x423ed5
cmp eax, 0x9e661a07
je 0x4252e0
cmp eax, 0x9e971107
je 0x4252e0
jmp 0x423ed5
cmp eax, 0xa279680a
ja 0x424a56
je 0x425170
cmp eax, 0xa06ff60a
je 0x425305
cmp eax, 0xa125950a
je 0x425305
jmp 0x423ed5
cmp eax, 0xa2797e0a
je 0x425170
cmp eax, 0xa36b970a
je 0x425305
jmp 0x423ed5
cmp eax, 0xa6c99c0a
ja 0x424ac1
je 0x425170
cmp eax, 0xa549d70a
ja 0x424aa6
je 0x425305
cmp eax, 0xa370ff0a
je 0x425170
cmp eax, 0xa4320f0a
je 0x425305
jmp 0x423ed5
cmp eax, 0xa629fc0a
je 0x425170
cmp eax, 0xa6c98a0a
je 0x425170
jmp 0x423ed5
cmp eax, 0xa8c4c40d
ja 0x424ae9
je 0x425249
cmp eax, 0xa799400d
je 0x425249
cmp eax, 0xa79ce10a
je 0x425305
jmp 0x423ed5
cmp eax, 0xa8c4d20d
je 0x425249
cmp eax, 0xa919a007
jne 0x423ed5
mov dword [ebp - 0x3c], 1
jmp 0x423ed5
cmp eax, 0xb941ae0a
ja 0x424c5e
je 0x423bc2
cmp eax, 0xb247920a
ja 0x424bcb
je 0x423bc2
cmp eax, 0xad2cc90a
ja 0x424b88
je 0x425305
cmp eax, 0xabef380a
ja 0x424b6d
je 0x425305
cmp eax, 0xab24350a
je 0x423bc2
cmp eax, 0xab72410a
je 0x425305
cmp eax, 0xab72570a
je 0x425305
jmp 0x423ed5
cmp eax, 0xac4a010a
je 0x425305
cmp eax, 0xac4a170a
je 0x425305
jmp 0x423ed5
cmp eax, 0xafd8c80a
ja 0x424bb0
je 0x425305
cmp eax, 0xad2cdf0a
je 0x425305
cmp eax, 0xae69090a
je 0x425305
jmp 0x423ed5
cmp eax, 0xb20d990a
je 0x425305
cmp eax, 0xb247840a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0xb7448f0a
ja 0x424c1b
je 0x425305
cmp eax, 0xb5b85f0a
ja 0x424c00
je 0x423bc2
cmp eax, 0xb26a130a
je 0x425305
cmp eax, 0xb5b8490a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0xb698ae0a
je 0x423bc2
cmp eax, 0xb698b80a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0xb7fdbb0a
ja 0x424c43
je 0x425305
cmp eax, 0xb744990a
je 0x425305
cmp eax, 0xb7fdad0a
je 0x425305
jmp 0x423ed5
cmp eax, 0xb901810a
je 0x423c04
cmp eax, 0xb901970a
je 0x423c04
jmp 0x423ed5
cmp eax, 0xc0fbca0a
ja 0x424d0d
je 0x425305
cmp eax, 0xbdbbde0a
ja 0x424cca
je 0x423bc2
cmp eax, 0xbbc87e0a
ja 0x424caf
je 0x423bc2
cmp eax, 0xb99f830a
je 0x425305
cmp eax, 0xb99f950a
je 0x425305
cmp eax, 0xbbc8680a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0xbd09600a
je 0x425305
cmp eax, 0xbdbbc80a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0xc01b600a
ja 0x424cf2
je 0x425305
cmp eax, 0xbdc03a0a
je 0x423c04
cmp eax, 0xbfa3dd07
je 0x424ef9
jmp 0x423ed5
cmp eax, 0xc0c2200a
je 0x425305
cmp eax, 0xc0c2360a
je 0x425305
jmp 0x423ed5
cmp eax, 0xc2887d0a
ja 0x424d5d
je 0x423bc2
cmp eax, 0xc1c8900a
ja 0x424d42
je 0x425305
cmp eax, 0xc0fbdc0a
je 0x425305
cmp eax, 0xc110760a
je 0x425305
jmp 0x423ed5
cmp eax, 0xc1d85a0a
je 0x425305
cmp eax, 0xc2886b0a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0xc5941a0a
ja 0x424d8f
je 0x425305
cmp eax, 0xc4146a07
je 0x42529b
cmp eax, 0xc4612307
jne 0x423ed5
mov dword [ebp - 0xa4], 1
jmp 0x423ed5
cmp eax, 0xc6986c07
je 0x425249
cmp eax, 0xc6987a07
je 0x425249
jmp 0x423ed5
cmp eax, 0xe9852807
ja 0x425065
je 0x4247cb
cmp eax, 0xdb0e5308
ja 0x424f23
je 0x423cc2
cmp eax, 0xd0b29307
ja 0x424e7b
je 0x4247cb
cmp eax, 0xced60a0a
ja 0x424e38
je 0x423bc2
cmp eax, 0xccd4e10a
ja 0x424e1d
je 0x425305
cmp eax, 0xc8a0330a
je 0x425305
cmp eax, 0xcc3cee0a
je 0x425305
cmp eax, 0xcc3cf80a
je 0x425305
jmp 0x423ed5
cmp eax, 0xce10260a
je 0x425305
cmp eax, 0xce10300a
je 0x425305
jmp 0x423ed5
cmp eax, 0xcfeab80a
ja 0x424e60
je 0x425170
cmp eax, 0xced61c0a
je 0x423bc2
cmp eax, 0xcfeaae0a
je 0x425170
jmp 0x423ed5
cmp eax, 0xd0126e0a
je 0x423bc2
cmp eax, 0xd0b28507
je 0x4247cb
jmp 0x423ed5
cmp eax, 0xd5c5c508
ja 0x424ed6
je 0x423cc2
cmp eax, 0xd35aed0a
ja 0x424ebb
je 0x425305
cmp eax, 0xd221cd0a
je 0x425305
cmp eax, 0xd2870607
je 0x423ece
cmp eax, 0xd2871007
jne 0x423ed5
jmp 0x423ece
cmp eax, 0xd3f6b507
je 0x42529b
cmp eax, 0xd4e4cc07
je 0x4252e0
jmp 0x423ed5
cmp eax, 0xd6f0c00d
ja 0x424f08
je 0x425249
cmp eax, 0xd5c5d308
je 0x423cc2
cmp eax, 0xd6178107
jne 0x423ed5
mov dword [ebp - 0xb0], 1
jmp 0x423ed5
cmp eax, 0xd6f0d60d
je 0x425249
cmp eax, 0xd89f870a
je 0x425305
jmp 0x423ed5
cmp eax, 0xe074e20a
ja 0x424fd2
je 0x425305
cmp eax, 0xddfbcc0a
ja 0x424f8f
je 0x423bc2
cmp eax, 0xdd91eb0a
ja 0x424f74
je 0x425170
cmp eax, 0xdc1b0e0a
je 0x425305
cmp eax, 0xdd38240d
je 0x425249
cmp eax, 0xdd38320d
je 0x425249
jmp 0x423ed5
cmp eax, 0xdd91fd0a
je 0x425170
cmp eax, 0xddad3e0a
je 0x425305
jmp 0x423ed5
cmp eax, 0xdf735707
ja 0x424fb7
je 0x4247cb
cmp eax, 0xdf12ad0a
je 0x425305
cmp eax, 0xdf734107
je 0x4247cb
jmp 0x423ed5
cmp eax, 0xdf877c0a
je 0x425170
cmp eax, 0xdfd35807
je 0x425249
jmp 0x423ed5
cmp eax, 0xe2736a0a
ja 0x425022
je 0x425305
cmp eax, 0xe0fa800a
ja 0x425007
je 0x425305
cmp eax, 0xe074f40a
je 0x425305
cmp eax, 0xe0f8a00a
je 0x425305
jmp 0x423ed5
cmp eax, 0xe20bae0a
je 0x423bc2
cmp eax, 0xe20bb80a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0xe75cb20a
ja 0x42504a
je 0x425305
cmp eax, 0xe2737c0a
je 0x425305
cmp eax, 0xe3d8c80a
je 0x425305
jmp 0x423ed5
cmp eax, 0xe8fa0807
je 0x4247cb
cmp eax, 0xe8fa1e07
je 0x4247cb
jmp 0x423ed5
cmp eax, 0xf591230a
ja 0x4251c2
je 0x423bc2
cmp eax, 0xee0e7c0a
ja 0x425125
je 0x425305
cmp eax, 0xebff200a
ja 0x4250e2
je 0x425305
cmp eax, 0xeb71c80a
ja 0x4250c7
je 0x425249
cmp eax, 0xe9853e07
je 0x4247cb
cmp eax, 0xea5a5c0a
je 0x425305
cmp eax, 0xea60240d
je 0x425249
jmp 0x423ed5
cmp eax, 0xeb71de07
je 0x425249
cmp eax, 0xeb71de0a
je 0x425249
jmp 0x423ed5
cmp eax, 0xec94560a
ja 0x42510a
je 0x423bc2
cmp eax, 0xebff360a
je 0x425305
cmp eax, 0xec94400a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0xecaeae0a
je 0x423bc2
cmp eax, 0xecaeb80a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0xf1a9df0a
ja 0x42517c
je 0x425305
cmp eax, 0xefe00407
ja 0x42515a
je 0x4247cb
cmp eax, 0xee66830a
je 0x425305
cmp eax, 0xee66950a
je 0x425305
jmp 0x423ed5
cmp eax, 0xefe01207
je 0x4247cb
cmp eax, 0xf07beb0a
jne 0x423ed5
mov dword [ebp - 0x30], 1
jmp 0x423ed5
cmp eax, 0xf3a53e07
ja 0x4251a7
je 0x42519b
cmp eax, 0xf310900a
je 0x425305
cmp eax, 0xf3a52807
jne 0x423ed5
mov dword [ebp - 0x64], 1
jmp 0x423ed5
cmp eax, 0xf42f650a
je 0x423bc2
cmp eax, 0xf42f730a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0xfc8d750a
ja 0x425273
je 0x423bc2
cmp eax, 0xf8ccd107
ja 0x425226
je 0x4247cb
cmp eax, 0xf786a90a
ja 0x42520b
je 0x425305
cmp eax, 0xf591350a
je 0x423bc2
cmp eax, 0xf59f240d
je 0x425249
cmp eax, 0xf59f320d
je 0x425249
jmp 0x423ed5
cmp eax, 0xf786bf0a
je 0x425305
cmp eax, 0xf8ccc707
je 0x4247cb
jmp 0x423ed5
cmp eax, 0xfaa6ae0a
ja 0x425258
je 0x425305
cmp eax, 0xf9477e0a
je 0x425305
cmp eax, 0xf9bc320a
jne 0x423ed5
mov dword [ebp - 0x98], 1
jmp 0x423ed5
cmp eax, 0xfb22370a
je 0x425305
cmp eax, 0xfc8d630a
je 0x423bc2
jmp 0x423ed5
cmp eax, 0xfea34c0a
ja 0x4252bd
je 0x423bc2
cmp eax, 0xfe36000a
ja 0x4252aa
je 0x425305
cmp eax, 0xfd49f40a
je 0x425305
cmp eax, 0xfd81eb07
jne 0x423ed5
mov dword [ebp - 0x9c], 1
jmp 0x423ed5
cmp eax, 0xfe4d800a
je 0x425305
cmp eax, 0xfe4d960a
je 0x425305
jmp 0x423ed5
cmp eax, 0xff856a07
ja 0x4252ef
je 0x4247cb
cmp eax, 0xfea35a0a
je 0x423bc2
cmp eax, 0xff372407
jne 0x423ed5
mov dword [ebp - 0x8c], 1
jmp 0x423ed5
cmp eax, 0xff857c07
je 0x4247cb
cmp eax, 0xff8d920a
jne 0x423ed5
mov dword [ebp - 0x88], 1
jmp 0x423ed5
mov dword [ebp - 0x74], 1
jmp 0x423ed5
mov dword [ebp - 0x80], 1
jmp 0x423ed5
mov dword [ebp - 0x78], 1
jmp 0x423ed5
mov dword [ebp - 0x58], 1
cmp eax, 0x8176ea06
ja 0x42536e
je 0x424528
cmp eax, 0x43c5706
je 0x424528
cmp eax, 0x6afc6006
jne 0x423ed5
mov dword [ebp - 0x3c], 1
jmp 0x423ed5
cmp eax, 0x93642506
je 0x423ece
cmp eax, 0xd22d7006
jne 0x423ed5
mov dword [ebp - 0x40], 1
jmp 0x423ed5
add ecx, 0x1e
mov eax, dword [ebp + 0x10]
mov dword [eax], ecx
push dword [ebp - 0xbc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0xb8]
call fcn.004c4990
add esp, 4
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret