Function at 0x542070
Capabilities:
Enumerate pe sections
Receive data
Receive data on socket

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c17e0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push edi
xor cl, cl
mov al, byte [esi + 5]
mov dword [ebp - 0x10], esp
cmp al, 0x16
mov dword [ebp - 0x24], ebx
jne 0x5420a4
mov cl, 1
mov byte [ebx + 0x30e0], 1
mov eax, dword [esi + 0x18]
xor edi, edi
cmp eax, edi
jne 0x542183
test cl, cl
je 0x54218b
xor eax, eax
mov cl, byte [esi + 4]
mov al, byte [esi + 6]
push edi
lea eax, [eax + eax*4]
lea eax, [ebx + eax*8 + 0x3140]
mov byte [eax + 4], cl
mov dl, byte [esi + 5]
mov byte [eax + 5], dl
mov cl, byte [esi + 6]
mov byte [eax + 6], cl
mov edx, dword [esi + 8]
mov dword [eax + 8], edx
mov ecx, dword [esi + 0xc]
mov dword [eax + 0xc], ecx
mov dl, byte [esi + 0x10]
mov byte [eax + 0x10], dl
mov ecx, dword [esi + 0x14]
mov dword [eax + 0x14], ecx
mov edx, dword [esi + 0x18]
mov dword [eax + 0x18], edx
mov ecx, dword [esi + 0x1c]
mov dword [eax + 0x1c], ecx
mov edx, dword [esi + 0x20]
mov dword [eax + 0x20], edx
mov cl, byte [esi + 0x24]
xor edx, edx
mov byte [eax + 0x24], cl
mov dl, byte [esi + 6]
mov eax, dword [esi + 0x14]
mov dword [ebx + edx*4 + 0x4540], eax
xor eax, eax
mov al, byte [esi + 6]
add eax, 0x13c
lea ecx, [eax + eax*4]
xor eax, eax
mov dword [ebx + ecx*8], edi
mov al, byte [esi + 6]
lea edx, [eax + eax*4]
xor eax, eax
mov dword [ebx + edx*8 + 0x315c], edi
mov al, byte [esi + 6]
lea eax, [eax + eax*4]
mov byte [ebx + eax*8 + 0x3150], 0
mov dword [ebx + 0x5c], 0x15
mov dword [ebx + 0x3114], edi
mov dword [esi + 0x20], edi
mov ecx, dword [ebx + 0x30c0]
push ecx
mov ecx, ebx
call fcn.005092d0
test eax, eax
jne 0x5431bb
push esi
mov ecx, ebx
call fcn.00541d80
jmp 0x5431bb
test cl, cl
jne 0x5429b7
cmp eax, edi
mov byte [ebp - 0x12], 0
jbe 0x542392
cmp dword [esi + 0x20], edi
jne 0x542392
mov byte [ebx + 0x30d8], 0
mov edx, dword [ebx + 0x46cc]
add edx, 0xb
mov dword [esi + 0x1c], 0
mov dword [esi + 0x20], edx
mov dword [ebx + 0x30fc], 0xb
mov byte [ebx + 0x30dc], 0
mov byte [ebx + 0x30de], 0
mov al, byte [esi + 5]
mov edi, dword [ebx + 0x30c4]
cmp al, 8
mov byte [ebp - 0x12], 1
sete cl
shl cl, 2
cmp al, 9
mov al, byte [edi + 0x7dd]
sete dl
or cl, dl
or al, cl
mov byte [edi + 0x7dd], al
mov eax, dword [ebx + 0x30c4]
mov cl, byte [eax + 0x7dd]
test cl, 4
je 0x542219
test cl, 1
jne 0x542219
mov ecx, 1
jmp 0x54221b
xor ecx, ecx
mov byte [eax + 0x7dc], cl
mov eax, dword [esi + 0x18]
mov dword [ebp - 0x30], eax
mov al, byte [ebx + 0x30db]
test al, al
je 0x542333
mov al, byte [ebx + 0x30e2]
test al, al
je 0x542345
mov ecx, dword [esi + 0x14]
test ecx, ecx
jbe 0x542333
cmp ecx, dword [ebx + 0x98]
jne 0x542262
mov byte [ebx + 0x30e2], 0
jmp 0x542333
mov edx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x3c]
or edx, eax
jne 0x542333
mov al, byte [ebx + 0x97]
test al, al
jne 0x542333
mov eax, dword [ebx + 0x30c4]
mov edx, dword [eax + 0x68]
mov eax, dword [edx + 0x38]
test eax, eax
je 0x542333
mov edx, dword [eax + 0x1c]
mov dword [ebp - 4], 0
cmp ecx, edx
ja 0x5422b4
cmp eax, dword [ebx + 0x60]
jne 0x542329
cmp ecx, 0x2910
jbe 0x542329
mov esi, dword [ebp + 8]
mov eax, dword [0x6754d4]
mov dword [ebp - 0x28], eax
push ecx
lea ecx, [ebp - 0x28]
push 0x66caa0
push ecx
mov byte [ebp - 4], 1
call fcn.00593b08
mov edx, dword [ebp - 0x28]
add esp, 0xc
mov ecx, ebx
push edx
call fcn.00508d80
mov eax, dword [ebx + 0x30c4]
mov ecx, dword [eax + 0x68]
mov eax, dword [ebx + 0x60]
mov edx, dword [ecx + 0x38]
cmp edx, eax
jne 0x5422fc
push 0x66ca98
mov ecx, ebx
call fcn.00508d80
mov esi, dword [esi + 0x14]
lea ecx, [ebp - 0x28]
mov dword [ebx + 0x98], esi
mov dword [ebx + 0x4688], esi
mov byte [ebx + 0x30e2], 0
mov byte [ebp - 4], 0
call fcn.0059ad3d
jmp 0x542329
mov esi, dword [ebp + 8]
mov dword [ebp - 4], 0xffffffff
mov al, byte [ebx + 0x30e2]
test al, al
je 0x542345
mov eax, dword [ebx + 0x98]
jmp 0x542347
xor eax, eax
mov ecx, dword [esi + 0x14]
mov edi, dword [ebx + 0x46cc]
add ecx, eax
mov eax, dword [ebp - 0x30]
mov dword [ebx + 0x9c], ecx
mov dl, byte [esi + 5]
mov byte [edi], dl
inc edi
push eax
push edi
call fcn.00541140
mov ecx, dword [ebx + 0x9c]
add edi, eax
push ecx
push edi
call fcn.00541140
mov edx, dword [ebx + 0x9c]
add edi, eax
shr edx, 0x18
mov byte [edi], dl
inc edi
push 0
push edi
call fcn.00541140
add esp, 0x18
jmp 0x5423b0
mov al, byte [ebx + 0x30d8]
test al, al
je 0x5423aa
mov eax, dword [esi + 0x1c]
add eax, 0xb
mov dword [ebx + 0x30fc], eax
jmp 0x5423b0
mov dword [ebx + 0x30fc], edi
mov edi, dword [esi + 0x18]
mov eax, dword [esi + 0x1c]
mov edx, dword [ebx + 0x3104]
mov ecx, edi
sub ecx, eax
mov eax, dword [ebx + 0x3110]
test edx, edx
mov dword [ebp - 0x28], eax
jle 0x5423d2
mov eax, edx
mov dword [ebp - 0x28], eax
cmp ecx, eax
jge 0x5423db
mov eax, ecx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebx + 0x46d4]
mov edx, dword [ebx + 0x30fc]
mov dword [ebp - 0x30], ecx
sub ecx, edx
cmp eax, ecx
mov dword [ebp - 0x2c], eax
jle 0x54248f
cmp byte [esi + 5], 0x12
jne 0x54248d
cmp edi, 0x400000
jae 0x54248f
mov eax, dword [ebx + 0x46d0]
add edi, 0xf
test eax, eax
mov dword [ebx + 0x46d4], edi
je 0x542429
push eax
call fcn.00597102
add esp, 4
mov ecx, dword [ebx + 0x46d4]
push ecx
call fcn.005970d9
add esp, 4
mov dword [ebx + 0x46d0], eax
test eax, eax
jne 0x542458
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebx + 0x46cc]
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebx + 0x46d0]
mov ecx, dword [ebp + 8]
mov dword [ebx + 0x46cc], eax
add eax, 0xb
mov dword [ecx + 0x20], eax
mov eax, dword [ebp - 0x28]
mov esi, ecx
jmp 0x54248f
mov eax, ecx
cmp byte [esi + 5], 0x12
jne 0x54249c
mov byte [ebx + 0x30d8], 1
cmp dword [esi + 0x18], 5
ja 0x5424a9
mov byte [ebx + 0x30d8], 1
xor edi, edi
test eax, eax
mov dword [ebp - 0x1c], edi
je 0x542505
mov edx, dword [ebx + 0x46cc]
mov ecx, dword [ebx + 0x30fc]
push edi
push eax
mov eax, dword [ebx + 0x30c0]
add edx, ecx
push edx
push eax
call sub.WSOCK32.dll_recv
mov edi, eax
push 0x66ca8c
push edi
mov ecx, ebx
mov dword [ebp - 0x1c], edi
call fcn.00508e20
mov ecx, eax
test ecx, ecx
je 0x542505
sub eax, 0x2733
neg eax
sbb eax, eax
and eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [esi + 0x1c]
mov byte [ebp - 0x13], 0
add ecx, edi
mov dword [esi + 0x1c], ecx
mov eax, dword [ebx + 0x4650]
add eax, edi
mov dword [ebx + 0x4650], eax
mov eax, dword [ebp - 0x2c]
mov ecx, eax
sub ecx, edi
mov dword [ebx + 0x3104], ecx
mov ecx, dword [ebx + 0x30fc]
add ecx, edi
cmp edi, eax
mov dword [ebp - 0x20], ecx
je 0x54254a
mov al, byte [ebx + 0x30d8]
test al, al
je 0x542592
jmp 0x5431bb
mov dword [ebx + 0x5c], 0x15
mov dword [ebx + 0x3114], 0
mov eax, dword [esi + 0x18]
mov edx, dword [esi + 0x1c]
cmp edx, eax
jne 0x542592
lea edx, [ecx + 4]
cmp edx, dword [ebx + 0x46d4]
mov dword [ebp - 0x30], edx
jae 0x542592
lea edx, [eax + 0xb]
mov eax, dword [ebx + 0x46cc]
add eax, ecx
push edx
push eax
call fcn.00541170
mov edx, dword [ebp - 0x30]
add esp, 8
mov byte [ebp - 0x13], 1
mov dword [ebp - 0x20], edx
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x1c]
cmp ecx, eax
mov byte [ebp - 0x11], 1
jne 0x54266d
mov cl, byte [esi + 5]
cmp cl, 9
jne 0x54261a
cmp eax, 2
jne 0x5425d0
mov edx, dword [esi + 0x20]
mov dl, byte [edx]
and dl, 0xf0
cmp dl, 0x50
jne 0x5425d0
push 0x66ca70
mov ecx, ebx
call fcn.00508d80
mov byte [ebp - 0x11], 0
jmp 0x54261a
cmp cl, 9
jne 0x54261a
cmp eax, 5
ja 0x54261a
mov ecx, dword [0x6754d4]
mov dword [ebp - 0x28], ecx
push eax
lea edx, [ebp - 0x28]
push 0x66ca50
push edx
mov dword [ebp - 4], 3
call fcn.00593b08
mov eax, dword [ebp - 0x28]
add esp, 0xc
mov ecx, ebx
push eax
call fcn.00508d80
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x11], 0
mov dword [ebp - 4], 0xffffffff
call fcn.0059ad3d
cmp byte [esi + 5], 8
jne 0x542680
mov esi, dword [esi + 0x18]
cmp esi, 1
ja 0x542680
mov ecx, dword [0x6754d4]
mov dword [ebp - 0x28], ecx
push esi
lea edx, [ebp - 0x28]
push 0x66ca30
push edx
mov dword [ebp - 4], 4
call fcn.00593b08
mov eax, dword [ebp - 0x28]
add esp, 0xc
mov ecx, ebx
push eax
call fcn.00508d80
lea ecx, [ebp - 0x28]
mov byte [ebp - 0x11], 0
mov dword [ebp - 4], 0xffffffff
call fcn.0059ad3d
jmp 0x54288d
mov al, byte [ebx + 0x30d8]
test al, al
je 0x542691
mov byte [ebp - 0x11], 0
jmp 0x54288d
mov al, byte [ebp - 0x11]
test al, al
je 0x54288d
mov edi, dword [ebp - 0x1c]
mov esi, dword [ebp + 8]
mov al, byte [ebx + 0x30dc]
test al, al
je 0x54269f
mov byte [ebp - 0x11], 0
mov al, byte [ebx + 0x30db]
test al, al
je 0x5426f3
mov eax, dword [esi + 0x14]
test eax, eax
je 0x5426cb
mov cl, byte [ebx + 0x30e2]
test cl, cl
jne 0x5426c2
cmp dword [ebx + 0x98], eax
je 0x5426cb
mov byte [ebx + 0x30db], 0
jmp 0x5426f3
mov al, byte [ebx + 0x30df]
test al, al
je 0x5426e8
mov al, byte [ebx + 0x30dd]
test al, al
jne 0x5426e8
mov byte [ebx + 0x30db], 0
jmp 0x5426f3
mov byte [ebp - 0x11], 0
mov byte [ebx + 0x30dc], 1
mov al, byte [ebp - 0x12]
test al, al
je 0x54275b
test edi, edi
je 0x54275b
mov ecx, dword [ebx + 0x30c4]
mov al, byte [ecx + 0x7dc]
test al, al
je 0x542718
cmp byte [esi + 5], 8
je 0x54272d
test al, al
jne 0x54275b
cmp byte [esi + 5], 9
jne 0x54275b
mov edx, dword [ebx + 0x46cc]
mov al, byte [edx + 0xb]
and al, 0xf0
cmp al, 0x10
jne 0x54275b
mov ecx, dword [ebx + 0x38]
mov edx, dword [ebx + 0x3c]
mov eax, dword [ebx + 0x9c]
mov dword [ebx + 0x46a8], ecx
mov dword [ebx + 0x46ac], edx
mov dword [ebx + 0x46b0], eax
mov ecx, dword [esi + 0x18]
mov byte [ebx + 0x30de], 1
mov dword [ebx + 0x46b4], ecx
mov al, byte [ebx + 0x30dd]
test al, al
je 0x54286c
mov al, byte [ebx + 0x30dc]
test al, al
je 0x54286c
mov al, byte [ebx + 0x30de]
test al, al
je 0x54286c
mov esi, dword [ebx + 0x46b8]
test esi, esi
je 0x54286c
mov ecx, dword [ebx + 0x46bc]
mov eax, dword [ebx + 0x46c0]
mov edx, dword [ebp - 0x20]
sub ecx, eax
cmp ecx, edx
jb 0x5427aa
mov ecx, edx
mov edi, dword [ebx + 0x46cc]
add esi, eax
xor edx, edx
mov dword [ebp - 0x30], ecx
repe cmpsb byte [esi], byte es:[edi]
je 0x5427c0
sbb edx, edx
sbb edx, 0xffffffff
mov ecx, dword [ebx + 0x46bc]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp - 0x30]
add eax, edx
cmp eax, ecx
jb 0x54280d
mov eax, dword [ebx + 0x46b8]
mov byte [ebx + 0x30dd], 0
push eax
mov dword [ebp - 4], 5
call fcn.00597102
add esp, 4
jmp 0x5427fa
mov dword [ebp - 4], 0xffffffff
mov dword [ebx + 0x46b8], 0
jmp 0x542813
mov dword [ebx + 0x46c0], eax
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x54283e
push 0x66ca14
mov ecx, ebx
call fcn.00508d80
mov eax, 0x757b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov al, byte [ebx + 0x30dd]
test al, al
jne 0x54286c
mov eax, dword [ebx + 0x80]
mov byte [eax + 0x2b3], 1
mov ecx, dword [ebx + 0x30c4]
mov eax, dword [ecx + 0xec]
test eax, eax
jne 0x54286c
mov edx, dword [ecx]
push 1
call dword [edx + 0xc]
mov al, byte [ebp - 0x11]
test al, al
je 0x54288d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebx + 0x46cc]
push eax
push ecx
mov ecx, ebx
call fcn.00543450
test eax, eax
jne 0x5431bd
mov esi, dword [ebp + 8]
xor eax, eax
mov al, byte [esi + 6]
mov cl, byte [esi + 4]
lea edx, [eax + eax*4]
lea eax, [ebx + edx*8 + 0x3140]
mov byte [eax + 4], cl
mov dl, byte [esi + 5]
mov byte [eax + 5], dl
mov cl, byte [esi + 6]
mov byte [eax + 6], cl
mov edx, dword [esi + 8]
mov dword [eax + 8], edx
mov ecx, dword [esi + 0xc]
mov dword [eax + 0xc], ecx
mov dl, byte [esi + 0x10]
mov byte [eax + 0x10], dl
mov ecx, dword [esi + 0x14]
mov dword [eax + 0x14], ecx
mov edx, dword [esi + 0x18]
mov dword [eax + 0x18], edx
mov ecx, dword [esi + 0x1c]
mov dword [eax + 0x1c], ecx
mov edx, dword [esi + 0x20]
mov dword [eax + 0x20], edx
mov cl, byte [esi + 0x24]
mov byte [eax + 0x24], cl
mov eax, dword [esi + 0x18]
cmp dword [esi + 0x1c], eax
jne 0x542983
mov cl, byte [ebp - 0x13]
test cl, cl
jne 0x542920
mov cl, byte [ebp - 0x11]
test cl, cl
je 0x542920
add eax, 0xb
lea edx, [ebp + 8]
push eax
push edx
call fcn.00541170
add esp, 8
lea eax, [ebp + 8]
mov ecx, ebx
push 4
push eax
call fcn.00543450
test eax, eax
jne 0x5431bd
mov edx, dword [esi + 0x14]
xor ecx, ecx
mov cl, byte [esi + 6]
xor eax, eax
mov dword [ebx + ecx*4 + 0x4540], edx
mov al, byte [esi + 6]
add eax, 0x13c
lea eax, [eax + eax*4]
mov dword [ebx + eax*8], 0
xor eax, eax
mov al, byte [esi + 6]
lea ecx, [eax + eax*4]
xor eax, eax
mov dword [ebx + ecx*8 + 0x315c], 0
mov al, byte [esi + 6]
lea edx, [eax + eax*4]
mov byte [ebx + edx*8 + 0x3150], 0
mov al, byte [esi + 5]
cmp al, 0x12
jne 0x542983
mov byte [ebx + 0x30e3], 0
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x20]
push eax
push ecx
mov ecx, ebx
call fcn.00545520
mov edx, dword [esi + 0x1c]
mov eax, dword [esi + 0x18]
cmp edx, eax
mov dword [esi + 0x20], 0
je 0x5431b4
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
cmp ecx, eax
jne 0x5429a9
mov ecx, esi
jmp 0x5431af
mov ecx, dword [ebx + 0x46cc]
mov dword [esi + 0x20], ecx
jmp 0x5431b4
cmp eax, edi
jbe 0x5429fd
cmp dword [esi + 0x20], edi
jne 0x5429fd
mov byte [ebx + 0x30d8], 0
mov edx, dword [ebx + 0x46cc]
mov dword [esi + 0x20], edx
mov dword [esi + 0x1c], edi
mov dword [ebx + 0x30fc], edi
mov dword [ebx + 0x3100], edi
mov byte [ebx + 0x30da], 1
mov dword [ebx + 0x4680], edi
mov dword [ebx + 0x4678], 1
mov byte [ebx + 0x30de], 0
mov ecx, dword [esi + 0x18]
mov eax, dword [esi + 0x1c]
mov edx, dword [ebx + 0x3104]
sub ecx, eax
mov eax, dword [ebx + 0x3110]
cmp edx, edi
jle 0x542a17
mov eax, edx
cmp ecx, eax
jge 0x542a1d
mov eax, ecx
mov ecx, dword [ebx + 0x30fc]
mov edx, dword [ebx + 0x46d4]
sub edx, ecx
mov dword [ebp - 0x30], eax
cmp eax, edx
jle 0x542a34
mov eax, edx
push edi
push eax
mov eax, dword [ebx + 0x46cc]
add ecx, eax
mov eax, dword [ebx + 0x30c0]
push ecx
push eax
call sub.WSOCK32.dll_recv
push 0x66ca8c
push eax
mov ecx, ebx
mov dword [ebp - 0x28], eax
call fcn.00508e20
mov ecx, eax
cmp ecx, edi
je 0x542a7f
sub eax, 0x2733
neg eax
sbb eax, eax
and eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebx + 0x30fc]
add eax, ecx
mov ecx, dword [ebx + 0x46cc]
xor edi, edi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x1c], ecx
mov byte [ebp - 0x13], 1
jmp 0x542aa4
mov eax, dword [ebp - 0x18]
cmp edi, eax
jae 0x542eff
mov ecx, dword [ebx + 0x4678]
dec ecx
je 0x542ad4
dec ecx
je 0x542c55
dec ecx
je 0x542cd4
mov edi, dword [ebp - 0x18]
push 0x66c9f4
mov ecx, ebx
call fcn.00508d80
jmp 0x542aa1
lea ecx, [edi + 0xb]
cmp ecx, eax
mov dword [ebp - 0x20], ecx
jbe 0x542aec
mov edx, eax
sub edx, edi
mov edi, eax
mov dword [ebx + 0x30fc], edx
jmp 0x542aa4
mov eax, dword [ebp - 0x1c]
mov byte [ebx + 0x30dc], 0
mov byte [ebx + 0x30de], 0
movsx ecx, byte [eax + edi]
lea edx, [eax + edi + 1]
mov dword [ebx + 0x4674], ecx
push edx
call fcn.00540fa0
mov dword [ebx + 0x4684], eax
mov eax, dword [ebp - 0x1c]
lea ecx, [eax + edi + 4]
push ecx
call fcn.00540fa0
mov ecx, dword [ebp - 0x1c]
mov dword [ebx + 0x9c], eax
add esp, 8
movsx edx, byte [ecx + edi + 7]
shl edx, 0x18
or edx, eax
mov dword [ebx + 0x9c], edx
mov al, byte [ecx + edi]
mov edi, dword [ebx + 0x30c4]
cmp al, 8
sete cl
shl cl, 2
cmp al, 9
mov al, byte [edi + 0x7dd]
sete dl
or cl, dl
or al, cl
mov byte [edi + 0x7dd], al
mov eax, dword [ebx + 0x30c4]
mov cl, byte [eax + 0x7dd]
test cl, 4
je 0x542b83
test cl, 1
jne 0x542b83
mov ecx, 1
jmp 0x542b85
xor ecx, ecx
mov edi, dword [ebp - 0x20]
mov byte [eax + 0x7dc], cl
mov eax, dword [ebx + 0x4684]
mov dword [ebx + 0x30fc], 0
mov dword [ebx + 0x4680], eax
mov al, byte [ebx + 0x30db]
test al, al
mov dword [ebx + 0x4678], 2
je 0x542be2
mov eax, dword [ebx + 0x9c]
mov ecx, dword [ebx + 0x98]
cmp eax, ecx
jne 0x542bdb
mov al, byte [ebx + 0x30dd]
test al, al
je 0x542bdb
mov byte [ebx + 0x30dc], 1
jmp 0x542be2
mov byte [ebx + 0x30db], 0
mov ecx, dword [ebx + 0x30c4]
mov al, byte [ecx + 0x7dc]
test al, al
je 0x542bff
cmp dword [ebx + 0x4674], 8
je 0x542c19
test al, al
jne 0x542c55
cmp dword [ebp - 0x18], edi
jbe 0x542c55
cmp dword [ebx + 0x4674], 9
jne 0x542c55
mov edx, dword [ebp - 0x1c]
mov al, byte [edx + edi]
and al, 0xf0
cmp al, 0x10
jne 0x542c55
mov edx, dword [ebx + 0x38]
mov eax, dword [ebx + 0x3c]
xor ecx, ecx
add edx, edi
adc eax, ecx
sub edx, 0xb
sbb eax, ecx
mov ecx, dword [ebx + 0x9c]
mov dword [ebx + 0x46a8], edx
mov dword [ebx + 0x46ac], eax
mov eax, dword [ebx + 0x4684]
mov dword [ebx + 0x46b0], ecx
mov dword [ebx + 0x46b4], eax
mov byte [ebx + 0x30de], 1
mov edx, dword [ebx + 0x4680]
mov eax, dword [ebx + 0x30fc]
mov ecx, dword [ebp - 0x18]
add eax, edx
lea edx, [eax + edi]
cmp edx, ecx
jbe 0x542c93
sub eax, ecx
add eax, edi
mov dword [ebx + 0x4680], eax
mov eax, dword [ebx + 0x4674]
cmp eax, 0x12
jne 0x542c8c
mov eax, ecx
sub eax, edi
mov dword [ebx + 0x30fc], eax
mov edi, ecx
jmp 0x542aa1
cmp dword [ebx + 0x4674], 0x12
jne 0x542cb0
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebx + 0x4684]
add edx, edi
push ecx
push edx
mov ecx, ebx
call fcn.00545520
mov eax, dword [ebx + 0x4680]
mov edx, dword [ebx + 0x30fc]
add eax, edx
mov dword [ebx + 0x30fc], 0
add edi, eax
mov dword [ebx + 0x4678], 3
mov eax, dword [ebp - 0x18]
lea ecx, [edi + 4]
cmp ecx, eax
mov dword [ebp - 0x34], ecx
jbe 0x542d8a
mov ecx, dword [esi + 0x1c]
mov dword [ebp - 0x34], ecx
lea edx, [ecx + edi]
mov ecx, dword [esi + 0x18]
mov dword [ebp - 0x20], edx
add edx, 4
cmp edx, ecx
jbe 0x542ade
cmp dword [ebp - 0x20], ecx
jbe 0x542d63
mov edx, dword [0x6754d4]
mov dword [ebp + 8], edx
mov eax, dword [ebx + 0x4684]
push ecx
mov ecx, dword [ebp - 0x34]
push eax
push ecx
lea edx, [ebp + 8]
push 0x66c9a8
push edx
mov dword [ebp - 4], 7
call fcn.00593b08
mov eax, dword [ebp + 8]
add esp, 0x14
mov ecx, ebx
push eax
call fcn.00508d80
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call fcn.0059ad3d
mov eax, 0xfffffffe
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x66c994
mov ecx, ebx
call fcn.00508d80
mov ecx, dword [ebx + 0x4684]
mov edi, dword [ebp - 0x18]
add ecx, 0xb
mov byte [ebp - 0x13], 0
mov dword [ebx + 0x467c], ecx
jmp 0x542aa1
mov eax, dword [ebp - 0x1c]
add edi, eax
push edi
call fcn.00540fd0
mov ecx, dword [ebx + 0x4684]
add esp, 4
add ecx, 0xb
mov dword [ebx + 0x467c], eax
cmp eax, ecx
je 0x542dbb
push ecx
push edi
mov dword [ebx + 0x467c], ecx
call fcn.00541170
add esp, 8
mov edi, dword [ebp - 0x34]
mov dword [ebx + 0x30fc], 0
mov al, byte [ebx + 0x30dc]
mov dword [ebp - 0x20], edi
test al, al
mov dword [ebx + 0x4678], 1
je 0x542aa1
mov al, byte [ebx + 0x30dd]
test al, al
je 0x542ee5
mov al, byte [ebx + 0x30de]
test al, al
je 0x542ee5
mov esi, dword [ebx + 0x46b8]
test esi, esi
je 0x542ee5
mov eax, dword [ebx + 0x4684]
mov edx, edi
add eax, 0xf
cmp eax, edx
jae 0x542e1e
mov edx, eax
mov ecx, dword [ebx + 0x46bc]
mov eax, dword [ebx + 0x46c0]
sub ecx, eax
cmp ecx, edx
jb 0x542e32
mov ecx, edx
mov edi, dword [ebx + 0x46cc]
add esi, eax
sub edi, edx
mov edx, dword [ebp - 0x20]
add edi, edx
xor edx, edx
mov dword [ebp - 0x2c], ecx
repe cmpsb byte [esi], byte es:[edi]
je 0x542e4f
sbb edx, edx
sbb edx, 0xffffffff
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], edx
add eax, ecx
mov ecx, dword [ebx + 0x46bc]
cmp eax, ecx
jb 0x542e9c
mov eax, dword [ebx + 0x46b8]
mov byte [ebx + 0x30dd], 0
push eax
mov dword [ebp - 4], 8
call fcn.00597102
add esp, 4
jmp 0x542e89
mov dword [ebp - 4], 0xffffffff
mov dword [ebx + 0x46b8], 0
jmp 0x542ea2
mov dword [ebx + 0x46c0], eax
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x542eb7
push 0x66c974
mov ecx, ebx
call fcn.00508d80
jmp 0x542ee5
mov al, byte [ebx + 0x30dd]
test al, al
jne 0x542ee5
mov edx, dword [ebx + 0x80]
mov byte [edx + 0x2b3], 1
mov ecx, dword [ebx + 0x30c4]
mov eax, dword [ecx + 0xec]
test eax, eax
jne 0x542ee5
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x2c], ecx
mov byte [ebx + 0x30dc], 0
mov edi, ecx
jmp 0x542aa4
mov ecx, dword [ebx + 0x30fc]
test ecx, ecx
je 0x542f0e
sub eax, ecx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
mov edi, dword [esi + 0x1c]
add edi, eax
mov dword [esi + 0x1c], edi
mov edx, dword [ebx + 0x4650]
add edx, eax
mov dword [ebx + 0x4650], edx
mov edx, dword [ebp - 0x30]
sub edx, eax
mov al, byte [ebx + 0x30dc]
test al, al
mov dword [ebx + 0x3104], edx
jne 0x542f70
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebx + 0x46cc]
sub ecx, eax
add edx, eax
push ecx
push edx
mov ecx, ebx
call fcn.00543450
test eax, eax
je 0x54306b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov al, byte [ebx + 0x30dd]
test al, al
je 0x54306b
mov al, byte [ebx + 0x30de]
test al, al
je 0x54306b
mov eax, dword [ebx + 0x46b8]
test eax, eax
je 0x54306b
mov ecx, dword [ebx + 0x46bc]
mov eax, dword [ebx + 0x46c0]
mov edx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x2c]
sub ecx, eax
sub edx, esi
cmp ecx, edx
jb 0x542fb6
mov ecx, edx
mov edi, dword [ebx + 0x46cc]
mov edx, dword [ebx + 0x46b8]
add edi, esi
mov dword [ebp - 0x2c], ecx
lea esi, [eax + edx]
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x542fd5
sbb edx, edx
sbb edx, 0xffffffff
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], edx
add eax, ecx
mov ecx, dword [ebx + 0x46bc]
cmp eax, ecx
jb 0x543022
mov eax, dword [ebx + 0x46b8]
mov byte [ebx + 0x30dd], 0
push eax
mov dword [ebp - 4], 0xa
call fcn.00597102
add esp, 4
jmp 0x54300f
mov dword [ebp - 4], 0xffffffff
mov dword [ebx + 0x46b8], 0
jmp 0x543028
mov dword [ebx + 0x46c0], eax
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x54303d
push 0x66c954
mov ecx, ebx
call fcn.00508d80
jmp 0x54306b
mov al, byte [ebx + 0x30dd]
test al, al
jne 0x54306b
mov edx, dword [ebx + 0x80]
mov byte [edx + 0x2b3], 1
mov ecx, dword [ebx + 0x30c4]
mov eax, dword [ecx + 0xec]
test eax, eax
jne 0x54306b
mov eax, dword [ecx]
push 1
call dword [eax + 0xc]
mov ecx, dword [ebx + 0x30fc]
xor edi, edi
cmp ecx, edi
je 0x54308e
mov eax, dword [ebx + 0x46cc]
push ecx
mov ecx, dword [ebp - 0x18]
lea edx, [eax + ecx]
push edx
push eax
call fcn.0057f970
add esp, 0xc
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
cmp eax, edx
je 0x5430a7
mov al, byte [ebx + 0x30d8]
test al, al
je 0x5430c1
jmp 0x5431bb
mov eax, dword [ebx + 0x5c]
cmp eax, 7
je 0x5430c1
cmp eax, 1
je 0x5430c1
mov dword [ebx + 0x5c], 0x15
mov dword [ebx + 0x3114], edi
mov al, byte [ebp - 0x13]
test al, al
jne 0x5430fd
mov al, byte [ebx + 0x30dc]
test al, al
jne 0x5430fd
mov eax, dword [ebx + 0x467c]
lea ecx, [ebp - 0x34]
push eax
push ecx
call fcn.00541170
add esp, 8
lea edx, [ebp - 0x34]
mov ecx, ebx
push 4
push edx
call fcn.00543450
cmp eax, edi
jne 0x5431bd
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp + 8]
xor eax, eax
mov al, byte [ecx + 6]
lea eax, [eax + eax*4]
lea esi, [ebx + eax*8 + 0x3140]
mov al, byte [ecx + 4]
mov byte [esi + 4], al
mov al, byte [ecx + 5]
mov byte [esi + 5], al
mov al, byte [ecx + 6]
mov byte [esi + 6], al
mov eax, dword [ecx + 8]
mov dword [esi + 8], eax
mov eax, dword [ecx + 0xc]
mov dword [esi + 0xc], eax
mov al, byte [ecx + 0x10]
mov byte [esi + 0x10], al
mov eax, dword [ecx + 0x14]
mov dword [esi + 0x14], eax
mov eax, dword [ecx + 0x18]
mov dword [esi + 0x18], eax
mov eax, dword [ecx + 0x1c]
mov dword [esi + 0x1c], eax
mov eax, dword [ecx + 0x20]
mov dword [esi + 0x20], eax
mov al, byte [ecx + 0x24]
mov byte [esi + 0x24], al
mov eax, dword [ecx + 0x1c]
cmp eax, dword [ecx + 0x18]
jne 0x543197
mov esi, dword [ecx + 0x14]
xor eax, eax
mov al, byte [ecx + 6]
mov dword [ebx + eax*4 + 0x4540], esi
xor eax, eax
mov al, byte [ecx + 6]
add eax, 0x13c
lea eax, [eax + eax*4]
mov dword [ebx + eax*8], edi
xor eax, eax
mov al, byte [ecx + 6]
lea eax, [eax + eax*4]
mov dword [ebx + eax*8 + 0x315c], edi
xor eax, eax
mov al, byte [ecx + 6]
lea eax, [eax + eax*4]
mov byte [ebx + eax*8 + 0x3150], 0
mov eax, dword [ebp - 0x28]
cmp eax, edx
jne 0x5431a1
mov dword [ecx + 0x20], edi
mov esi, dword [ecx + 0x1c]
mov edi, dword [ecx + 0x18]
cmp esi, edi
je 0x5431b4
cmp eax, edx
jne 0x5431b4
call fcn.00546510
mov ecx, ebx
call fcn.00509a70
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4