Function at 0x433da9
Capabilities:
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0xb8
push ebx
push esi
xor ebx, ebx
cmp dword [ebp + 0x74], ebx
mov esi, ecx
push edi
mov dword [ebp + 0x60], esi
jne 0x433dc9
mov eax, dword [esi + 0x28]
mov dword [ebp + 0x74], eax
call fcn.00440aa7
lea ecx, [ebp + 0x70]
call fcn.0040f813
test byte [esi + 0xc], 1
je 0x433de8
cmp dword [0x4dae64], ebx
mov byte [ebp + 0x4f], 1
jg 0x433dec
mov byte [ebp + 0x4f], 0
mov edi, dword [ebp + 0x70]
cmp word [edi], 0x40
jne 0x433dfe
inc edi
inc edi
mov dword [ebp + 0x70], edi
mov byte [ebp + 0x4f], 0
mov dword [ebp + 0x64], 0x80004001
cmp word [edi], bx
je 0x434d40
and dword [ebp + 0x34], 0
and dword [ebp + 0x50], 0
xor bl, bl
cmp word [edi], 0x2d
mov byte [ebp + 0x5f], 0
je 0x434012
cmp byte [ebp + 0x4f], 0
je 0x433e85
test byte [esi + 0xc], 2
je 0x433e3f
push edi
lea ecx, [ebp + 0x34]
call fcn.0044dfe2
mov eax, dword [eax]
jmp 0x433e52
push 1
push 0
lea eax, [ebp + 0x34]
push eax
push edi
mov ecx, esi
call fcn.00455dfb
mov eax, dword [ebp + 0x34]
test bl, bl
mov dword [ebp + 0x50], eax
jne 0x433e7b
test byte [esi + 0xc], 0x14
je 0x433e7b
xor edi, edi
push edi
push dword [ebp + 0x7c]
mov ecx, esi
push 0x11
push edi
push eax
call fcn.0041afa3
test byte [esi + 0xc], 0x10
jne 0x433e85
mov dword [ebp + 0x50], edi
jmp 0x433e85
test byte [esi + 0xc], 8
jne 0x433e85
mov byte [ebp + 0x5f], 2
xor edi, edi
test bl, bl
mov dword [ebp + 0x48], edi
jne 0x43402d
lea ecx, [ebp + 0x70]
mov byte [ebp + 0x43], 0xa
call fcn.0040f813
lea ecx, [ebp + 0x3c]
call fcn.00444a10
mov edi, dword [ebp + 0x70]
mov dword [ebp + 0x38], 0x7d
xor eax, eax
jmp 0x433eb7
inc edi
inc edi
inc eax
cmp word [edi], 0x5e
je 0x433eb4
dec eax
test ax, ax
jl 0x433ef3
inc eax
movsx esi, ax
mov ecx, dword [ebp + 0x60]
and dword [ebp + 0x70], 0
push 1
push 0
lea eax, [ebp + 0x70]
push eax
push edi
call fcn.00455dfb
mov eax, dword [ebp + 0x48]
mov edi, dword [ebp + 0x70]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x70], eax
call fcn.0043e48d
dec esi
jne 0x433ec7
lea eax, [ebp + 0x58]
push eax
xor esi, esi
mov dword [ebp + 0x58], edi
call fcn.00405a01
mov eax, dword [ebp + 0x58]
sub eax, edi
sar eax, 1
dec eax
pop ecx
mov ecx, edi
js 0x43406c
inc eax
cmp word [ecx], 0x25
jne 0x433f1a
inc esi
inc ecx
inc ecx
dec eax
jne 0x433f13
cmp si, 2
jl 0x43406c
lea eax, [ebp + 0x58]
push eax
mov dword [ebp + 0x58], edi
call fcn.00405a01
mov esi, dword [ebp + 0x58]
pop ecx
push esi
lea ecx, [ebp + 0x54]
call fcn.0044df7a
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov ecx, dword [ebp + 0x60]
mov ebx, eax
xor eax, eax
push 1
mov dword [ebp + 0x44], eax
push eax
mov word [esi], ax
lea eax, [ebp + 0x44]
push eax
push edi
call fcn.00455dfb
mov eax, dword [ebp + 0x44]
mov dword [ebp + 0x70], eax
movzx eax, word [eax]
jmp 0x433f82
cmp ax, 0x40
jne 0x433f89
add dword [ebp + 0x70], 2
mov eax, dword [ebp + 0x70]
mov ax, word [eax]
mov byte [ebp + 0x4f], 0
test ax, ax
jne 0x433f6e
jmp 0x433f8f
cmp word [edi], 0x2d
je 0x433fef
push dword [ebp + 0x70]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov esi, eax
lea eax, [esi + ebx + 3]
push eax
lea ecx, [ebp + 0x48]
call fcn.00444a55
mov edi, dword [ebp + 0x48]
push esi
push dword [ebp + 0x70]
push edi
call fcn.00405988
mov eax, dword [ebp + 0x48]
inc ebx
push ebx
push dword [ebp + 0x54]
lea eax, [eax + esi*2]
push eax
call fcn.00405988
mov eax, dword [ebp + 0x48]
add esp, 0x18
cmp word [eax], 0x5e
lea ecx, [ebp + 0x44]
jne 0x43405f
dec byte [ebp + 0x43]
js 0x43404b
call fcn.0043e48d
lea ecx, [ebp + 0x54]
call fcn.0043e48d
jmp 0x433eb0
lea ecx, [ebp + 0x44]
call fcn.0043e48d
lea ecx, [ebp + 0x54]
call fcn.0043e48d
lea ecx, [ebp + 0x3c]
call fcn.0043e48d
lea ecx, [ebp + 0x48]
call fcn.0043e48d
mov esi, dword [ebp + 0x60]
mov bl, byte [edi]
inc edi
inc edi
cmp word [edi], 0x20
mov dword [ebp + 0x70], edi
jne 0x433e26
inc edi
inc edi
mov dword [ebp + 0x70], edi
jmp 0x433e26
cmp dword [ebp + 0x50], edi
je 0x434043
push edi
push dword [ebp + 0x7c]
mov ecx, esi
push 0x21
push edi
push dword [ebp + 0x50]
call fcn.0041afa3
mov dword [ebp + 0x64], edi
jmp 0x43583a
mov dword [ebp + 0x64], 0x80070057
call fcn.0043e48d
lea ecx, [ebp + 0x54]
jmp 0x435431
call fcn.0043e48d
lea ecx, [ebp + 0x54]
call fcn.0043e48d
mov ax, word [edi]
cmp ax, 0x28
jne 0x43407f
push 0x29
pop esi
mov word [edi], 0x7b
jmp 0x434088
cmp ax, 0x7b
jne 0x4340c1
mov esi, dword [ebp + 0x38]
push edi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
lea eax, [edi + eax*2 - 2]
cmp si, word [eax]
jne 0x43409c
and word [eax], 0
mov eax, dword [ebp + 0x48]
mov ecx, dword [ebp + 0x60]
and dword [ebp + 0x48], 0
push 1
mov dword [ebp + 0x70], eax
push 0
lea eax, [ebp + 0x48]
push eax
push edi
call fcn.004549e1
lea ecx, [ebp + 0x70]
call fcn.0043e48d
jmp 0x4340cf
cmp dword [ebp + 0x48], edi
je 0x4340cf
push edi
lea ecx, [ebp + 0x48]
call fcn.0044e03e
mov eax, dword [ebp + 0x48]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x70], eax
call fcn.0040f813
mov esi, dword [ebp + 0x70]
mov ax, word [esi]
cmp ax, 0x23
je 0x434d28
test ax, ax
je 0x434d28
cmp ax, 0x7b
je 0x43585a
cmp ax, 0x5b
jne 0x434111
cmp word [esi + 2], 0x5d
je 0x43585a
cmp ax, 0x46
mov edi, esi
mov dword [ebp + 0x58], edi
mov ebx, esi
jne 0x43413a
cmp word [esi + 2], 0x49
jne 0x43413a
cmp word [esi + 4], 0x4e
jne 0x43413a
cmp word [esi + 6], 0x44
jne 0x43413a
cmp word [esi + 8], 0x20
je 0x43414e
mov ecx, dword [ebp + 0x60]
push 1
push 0
lea eax, [ebp + 0x3c]
push eax
push esi
call fcn.00455dfb
mov ebx, dword [ebp + 0x3c]
mov ax, word [esi]
and dword [ebp + 0x54], 0
push 0x22
pop ecx
cmp ax, cx
push 0x7c
mov dword [ebp + 0x44], ecx
pop edx
je 0x43416b
cmp ax, dx
mov dword [ebp + 0x44], edx
jne 0x4341c4
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov cx, word [ebp + 0x44]
cmp word [esi], cx
lea eax, [esi + eax*2 - 2]
jne 0x434196
mov ecx, dword [ebp + 0x44]
cmp word [eax], cx
jne 0x434196
inc edi
inc edi
dec eax
dec eax
inc dword [ebp + 0x54]
cmp word [edi], cx
mov dword [ebp + 0x58], edi
je 0x434182
and word [eax + 2], 0
cmp dword [ebp + 0x54], 0
jle 0x4341b0
push ebx
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
sub eax, dword [ebp + 0x54]
and word [ebx + eax*2], 0
lea ecx, [ebp + 0x58]
call fcn.0040f813
mov edi, dword [ebp + 0x58]
mov eax, edi
sub eax, esi
sar eax, 1
lea ebx, [ebx + eax*2]
lea esi, [ebp + 0x54]
mov dword [ebp + 0x54], edi
call fcn.004130da
mov eax, dword [ebp + 0x54]
sub eax, edi
sar eax, 1
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x54], ebx
call fcn.004130da
mov esi, dword [ebp + 0x54]
mov eax, esi
sub eax, ebx
sar eax, 1
push edi
mov dword [ebp + 0x38], eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], esi
call fcn.0040f813
mov esi, dword [ebp + 0x44]
xor eax, eax
cmp esi, 3
mov dword [ebp + 0x2c], eax
jl 0x4342cf
cmp esi, 0x7f
jg 0x4342cf
xor ecx, ecx
mov cx, word [edi]
push ecx
call fcn.00414914
add esp, 4
test al, al
mov al, cl
je 0x434231
and al, 0xdf
jmp 0x434238
cmp cx, 0xff
ja 0x43423d
lea ecx, [ebp + 0x2d]
jmp 0x434247
mov esi, dword [ebp + 0x44]
mov byte [ebp + 0x2d], ch
lea ecx, [ebp + 0x2e]
inc esi
xor edx, edx
mov dx, word [edi + 2]
mov byte [ebp + 0x2c], al
push edx
call fcn.00414914
add esp, 4
test al, al
mov al, dl
je 0x434266
and al, 0xdf
mov byte [ecx], al
inc ecx
jmp 0x434274
mov byte [ecx], al
inc ecx
cmp dx, 0xff
jbe 0x434274
mov byte [ecx], dh
inc ecx
inc esi
xor edx, edx
mov dx, word [edi + 4]
push edx
call fcn.00414914
add esp, 4
test al, al
mov al, dl
je 0x434290
and al, 0xdf
mov byte [ecx], al
inc ecx
jmp 0x43429e
mov byte [ecx], al
inc ecx
cmp dx, 0xff
jbe 0x43429e
mov byte [ecx], dh
inc ecx
inc esi
cmp dword [ebp + 0x44], 4
jl 0x4342cc
xor edx, edx
mov dx, word [edi + 6]
push edx
call fcn.00414914
add esp, 4
test al, al
mov al, dl
je 0x4342bf
and al, 0xdf
mov byte [ecx], al
jmp 0x4342cc
cmp dx, 0xff
mov byte [ecx], al
jbe 0x4342cc
mov byte [ecx + 1], dh
inc esi
mov eax, dword [ebp + 0x2c]
mov edx, dword [ebp + 0x44]
shl esi, 8
or esi, edx
cmp esi, 0x303
jne 0x43433b
cmp eax, 0x444553
je 0x434325
cmp eax, 0x524944
je 0x434312
cmp eax, 0x544553
jne 0x43563a
push dword [ebp + 0x74]
add edi, 6
push edi
push 1
add ebx, 6
mov ecx, dword [ebp + 0x60]
push ebx
call fcn.00420427
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
push 0
add edi, 6
push edi
call fcn.00478cc3
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 6
push edi
call fcn.0045e342
jmp 0x434cfb
cmp esi, 0x606
jne 0x434394
cmp eax, 0x45524854
jne 0x43563a
push 6
push edi
push str.THREAD
call fcn.0043f884
add esp, 0xc
test al, al
je 0x43563a
cmp byte [ebp + 0x5f], 0
je 0x434380
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041afa3
add edi, 0xc
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push edi
call fcn.00482237
jmp 0x434cfb
cmp esi, 0x404
jne 0x43563a
mov ecx, 0x4d455449
cmp eax, ecx
ja 0x434be2
je 0x434bc1
mov ecx, 0x455a4953
cmp eax, ecx
ja 0x434815
je 0x434801
mov ecx, 0x45444948
cmp eax, ecx
ja 0x43462f
je 0x434618
mov ecx, 0x44494c53
cmp eax, ecx
ja 0x43452f
je 0x434518
cmp eax, 0x43454a45
je 0x434507
cmp eax, 0x43455845
je 0x4344ee
cmp eax, 0x434c4143
je 0x4344db
cmp eax, 0x4350544e
je 0x4344ca
cmp eax, 0x44414552
je 0x43448d
cmp eax, 0x44414f4c
je 0x434448
cmp eax, 0x44415049
jne 0x43563a
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045b015
jmp 0x434cfb
cmp byte [ebp + 0x5f], 0
je 0x434462
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041afa3
add edi, 8
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x74], edi
call fcn.0040f813
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
call fcn.00422182
mov ecx, dword [ebp + 0x60]
push 1
mov dword [ebp + 0x64], eax
call fcn.0046d51e
jmp 0x4357c9
push 4
push ebx
push str.READ
call fcn.0043f884
add esp, 0xc
test al, al
je 0x434789
cmp dword [ebp + 0x38], 4
je 0x4344b6
cmp word [ebx + 8], 0x2d
jne 0x434789
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046efce
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004501d2
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.0048c753
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
xor eax, eax
push eax
push eax
push eax
push eax
add edi, 8
push edi
push ecx
push eax
call fcn.0040a660
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004561a6
jmp 0x434cfb
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047ebd5
jmp 0x434cfb
cmp eax, 0x444d4152
je 0x434608
cmp eax, 0x444e4152
je 0x4345f4
cmp eax, 0x444e4553
je 0x4345e7
cmp eax, 0x444e4946
je 0x4345ac
cmp eax, 0x44524854
je 0x43458a
cmp eax, 0x4542414c
jne 0x43563a
cmp dword [ebp + 0x74], 0
je 0x434789
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0048726e
jmp 0x434cfb
cmp byte [ebp + 0x5f], 0
je 0x4345a4
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041afa3
add edi, 8
jmp 0x434383
cmp byte [ebp + 0x5f], 0
je 0x4345c6
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041afa3
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x7c]
add edi, 8
cmp word [edi], 0x7c
jne 0x4345e2
push 0
push edi
call fcn.00424f7b
jmp 0x434cfb
push dword [ebp + 0x78]
jmp 0x4345d7
push dword [ebp + 0x58]
call fcn.00429b62
jmp 0x434f7b
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047316f
jmp 0x434cfb
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0041978e
jmp 0x434cfb
push 1
push str.Hide
push dword [ebp + 0x58]
call fcn.00412bfc
add esp, 0xc
jmp 0x434cfb
mov ecx, 0x454d4f43
cmp eax, ecx
ja 0x4346db
je 0x43472d
cmp eax, 0x45444f43
je 0x4346c8
cmp eax, 0x45455254
je 0x4346b4
cmp eax, 0x45474150
je 0x4346a7
cmp eax, 0x454c4946
je 0x434695
cmp eax, 0x454d414e
je 0x434aed
cmp eax, 0x454d4954
jne 0x43563a
cmp dword [ebp + 0x74], 0
je 0x434789
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0048771e
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x58]
call fcn.004294c8
jmp 0x434cfb
push dword [ebp + 0x58]
call fcn.0041e869
jmp 0x434f7b
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0048bbaf
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.0046115f
jmp 0x434cfb
cmp eax, 0x454d4f48
je 0x4347f0
cmp eax, 0x45534142
je 0x4347df
cmp eax, 0x45544144
je 0x4347cb
cmp eax, 0x45544953
je 0x4347b7
cmp eax, 0x45544f4e
je 0x43472d
cmp eax, 0x45564948
jne 0x43563a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046a8c9
jmp 0x434cfb
add ebx, 8
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x74], ebx
call fcn.0040f813
mov esi, dword [ebp + 0x74]
mov ax, word [esi]
cmp ax, 0x31
jb 0x43474d
cmp ax, 0x39
jbe 0x434761
mov edi, dword [sym.imp.shlwapi.dll_StrCmpNIW]
push 2
push 0x4c5c58
push esi
call edi
test eax, eax
jne 0x43476a
mov byte [0x4d92c0], 1
jmp 0x434785
cmp word [esi], 0x30
je 0x43477e
push 3
push 0x4c5c50
push esi
call edi
test eax, eax
jne 0x434785
mov byte [0x4d92c0], 0
and dword [ebp + 0x64], 0
mov eax, dword [ebp + 0x64]
test eax, eax
je 0x434798
mov ecx, dword [ebp + 0x60]
mov ecx, dword [ecx + 0x30]
mov dword [ecx], eax
xor edi, edi
cmp eax, edi
jge 0x4357d1
push eax
lea eax, [ebp - 0x50]
push str.0x_p
push eax
call dword [sym.imp.user32.dll_wsprintfW]
jmp 0x4357dd
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0048ef89
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004728c4
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0048c5c1
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004785c8
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0044ab21
jmp 0x434cfb
mov ecx, 0x4b4d554e
cmp eax, ecx
ja 0x4349eb
je 0x4349de
mov ecx, 0x49474552
cmp eax, ecx
ja 0x434931
je 0x43491e
cmp eax, 0x46544547
je 0x43490a
cmp eax, 0x46545550
je 0x4348f6
cmp eax, 0x46574246
je 0x4348e6
cmp eax, 0x47414d49
je 0x4348c9
cmp eax, 0x48534148
je 0x4348b6
cmp eax, 0x48544150
je 0x4348a6
cmp eax, 0x49444152
jne 0x43563a
cmp dword [ebp + 0x74], 0
je 0x434789
cmp edx, 4
jne 0x434789
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047e483
jmp 0x434cfb
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0042c3d7
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.0048d554
jmp 0x434cfb
cmp edx, 4
jne 0x434789
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0048bf69
jmp 0x434cfb
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00416c49
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00474562
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00473218
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.0045fb94
jmp 0x434cfb
sub eax, 0x49564544
je 0x4349ce
sub eax, 0x901
je 0x4349bd
sub eax, 0xec070e
je 0x4349a9
sub eax, 0x100f9f9
je 0x434996
sub eax, 7
je 0x434982
sub eax, 0x1f8f0
jne 0x43563a
cmp dword [ebp + 0x74], 0
je 0x434789
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047e1d9
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004953cf
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.00476be8
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00452674
jmp 0x434cfb
push dword [ebp + 0x74]
add edi, 8
push edi
push 0
add ebx, 8
jmp 0x434304
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00430962
jmp 0x434cfb
push dword [ebp + 0x58]
call fcn.00412428
jmp 0x434f7b
mov ecx, 0x4c4c4143
cmp eax, ecx
ja 0x434abb
je 0x434a9a
cmp eax, 0x4b4e494c
je 0x434a89
cmp eax, 0x4b4e4c46
je 0x434a75
cmp eax, 0x4b534944
je 0x434a64
cmp eax, 0x4b544f48
je 0x434a51
cmp eax, 0x4c424154
je 0x434a3d
cmp eax, 0x4c454853
jne 0x43563a
push dword [ebp + 0x58]
call fcn.0042f4dd
jmp 0x434f7b
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00490a88
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.00419052
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00494bb9
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046a1f7
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0041762b
jmp 0x434cfb
mov eax, dword [ebp + 0x58]
cmp word [eax], 0x24
jne 0x43579d
push edi
push 0
add eax, 2
push eax
push dword [ebp + 0x60]
call fcn.0042c76e
jmp 0x434cfb
cmp eax, 0x4c4c4157
je 0x434bb4
cmp eax, 0x4c4c494b
je 0x434b3d
cmp eax, 0x4c525453
je 0x434b29
cmp eax, 0x4c534441
je 0x434b15
cmp eax, 0x4d414554
je 0x434b01
cmp eax, 0x4d414e46
jne 0x43563a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046a10f
jmp 0x434cfb
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0041abb1
jmp 0x4357c6
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046c447
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00470bd8
jmp 0x434cfb
xor ebx, ebx
add edi, 8
inc ebx
cmp word [edi], 0x2a
jne 0x434b5c
inc edi
inc edi
cmp word [edi], 0x2a
jne 0x434b5c
push 2
pop ebx
add edi, ebx
cmp word [edi], 0x2a
je 0x434b54
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], edi
call fcn.0040f813
mov edi, dword [ebp + 0x58]
mov ax, word [edi]
cmp ax, 0x5c
je 0x434ba2
cmp ax, 0x40
je 0x434ba2
mov esi, str.svr
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
push eax
push edi
push esi
call fcn.0043f82d
add esp, 0xc
test al, al
jne 0x434ba2
mov ecx, dword [ebp + 0x60]
push edi
call fcn.00429d67
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
push ebx
push dword [ebp + 0x74]
push edi
call fcn.00459ed2
jmp 0x434cfb
push dword [ebp + 0x58]
call fcn.0041972f
jmp 0x434f7b
cmp dword [ebp + 0x74], 0
je 0x434789
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0048b6af
jmp 0x434cfb
mov ecx, 0x534f504c
cmp eax, ecx
ja 0x435005
je 0x434fef
mov ecx, 0x504f4f4c
cmp eax, ecx
ja 0x434e7b
je 0x434e47
mov ecx, 0x4e574f44
cmp eax, ecx
ja 0x434d7e
je 0x434d71
cmp eax, 0x4d495444
je 0x434d5d
cmp eax, 0x4d524f46
je 0x434d4c
cmp eax, 0x4e49414d
je 0x434cac
cmp eax, 0x4e495053
je 0x434c98
cmp eax, 0x4e495753
je 0x434c7d
cmp eax, 0x4e524353
je 0x434c6c
cmp eax, 0x4e554f4d
jne 0x43563a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00496d2f
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046ac5f
jmp 0x434cfb
cmp dword [ebp + 0x74], 0
je 0x434789
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047e8ba
jmp 0x434cfb
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00488103
jmp 0x434cfb
cmp byte [ebp + 0x5f], 0
je 0x434cc6
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041afa3
mov edi, dword [ebp + 0x58]
jmp 0x434ce1
push 3
push edi
push 0x4c080c
call fcn.0043f82d
add esp, 0xc
test al, al
jne 0x434ced
inc edi
inc edi
cmp word [edi], 0x2a
je 0x434ccb
cmp word [edi], 0
jne 0x434d03
add ebx, 8
push ebx
mov ecx, 0x4db0e0
call fcn.0042f77e
mov dword [ebp + 0x64], eax
jmp 0x434789
mov esi, 0x4dac80
push str.PECMD
mov ecx, esi
call fcn.0044e03e
push ebx
mov ecx, esi
call fcn.00444a7c
mov eax, dword [ebp + 0x60]
mov word [eax + 0x88], 2
lea ecx, [ebp + 0x3c]
call fcn.0043e48d
lea ecx, [ebp + 0x48]
call fcn.0043e48d
lea ecx, [ebp + 0x34]
call fcn.0043e48d
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00468a66
jmp 0x434cfb
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045ae17
jmp 0x434cfb
push dword [ebp + 0x58]
call fcn.0042a58a
jmp 0x434f7b
cmp eax, 0x4f474f4c
je 0x434e39
cmp eax, 0x4f4d454d
je 0x434e18
cmp eax, 0x50494350
je 0x434e04
cmp eax, 0x504c4548
je 0x434dd6
cmp eax, 0x504d4554
je 0x434dc2
cmp eax, 0x504e5055
jne 0x43563a
add ebx, 8
push ebx
call fcn.0045682a
jmp 0x434f7b
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046d58f
jmp 0x434cfb
push 5
push 0x12e
push dword [0x4dac7c]
call dword [sym.imp.KERNEL32.DLL_FindResourceW]
test eax, eax
je 0x434d28
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.0042c44e
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00480c1a
jmp 0x434cfb
cmp dword [ebp + 0x74], 0
je 0x434789
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045a679
jmp 0x434cfb
add ebx, 8
push ebx
call fcn.004300be
jmp 0x434f7b
cmp byte [ebp + 0x5f], 0
je 0x434e61
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041afa3
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x78]
add edi, 8
push dword [ebp + 0x74]
push edi
call fcn.00424dca
jmp 0x434cfb
mov ecx, 0x5254534c
cmp eax, ecx
ja 0x434f46
je 0x434f32
sub eax, 0x50534944
je 0x434f22
sub eax, 0x1edf90c
je 0x434f04
sub eax, 3
je 0x434eee
sub eax, 0x41102
je 0x434ee0
sub eax, 0x3f0f1
je 0x434ecc
sub eax, 7
jne 0x43563a
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0041c02b
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00468f97
jmp 0x434cfb
add edi, 8
push edi
call fcn.0041258e
jmp 0x434f7b
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047ee2e
jmp 0x434cfb
cmp dword [ebp + 0x74], 0
je 0x434789
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047e75e
jmp 0x434cfb
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.004271a6
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00470da5
jmp 0x434cfb
sub eax, 0x5254534d
je 0x434fdb
sub eax, 5
je 0x434fc7
dec eax
je 0x434fc3
sub eax, 0xedee01
je 0x434fa5
sub eax, 0x50df8
je 0x434f81
sub eax, 0x70606
jne 0x43563a
add edi, 8
push edi
call fcn.00412580
pop ecx
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
xor eax, eax
cmp dword [ebp + 0x50], eax
sete al
add ebx, 8
or eax, dword [ebp + 0x7c]
push eax
push ebx
call fcn.0041b2e5
and dword [ebp + 0x50], 0
mov dword [ebp + 0x64], eax
jmp 0x434789
cmp dword [ebp + 0x74], 0
je 0x434789
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00487b56
jmp 0x434cfb
push 1
jmp 0x434ff1
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00470ef6
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00471f76
jmp 0x434cfb
push 0
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00471120
jmp 0x434cfb
mov ecx, 0x5453494c
cmp eax, ecx
ja 0x435479
je 0x43544f
mov ecx, 0x54494e49
cmp eax, ecx
ja 0x4350ee
je 0x4350de
cmp eax, 0x534f5052
je 0x4350ca
cmp eax, 0x53504954
je 0x4350b6
cmp eax, 0x53504d43
je 0x4350a2
cmp eax, 0x5353454d
je 0x43508e
cmp eax, 0x54494157
je 0x43507e
cmp eax, 0x54494445
jne 0x43563a
cmp dword [ebp + 0x74], 0
je 0x434789
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045a1df
jmp 0x434cfb
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0042b485
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0048973e
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045ebb2
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00488339
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004718bf
jmp 0x434cfb
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0042073c
jmp 0x434cfb
cmp eax, 0x54495257
je 0x43543b
cmp eax, 0x54495845
je 0x435169
cmp eax, 0x544d4644
je 0x435155
cmp eax, 0x544e4950
je 0x435141
cmp eax, 0x544e4f46
je 0x435134
cmp eax, 0x54524150
jne 0x43563a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00463bfb
jmp 0x434cfb
push dword [ebp + 0x58]
call fcn.004195b7
jmp 0x434f7b
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046b51c
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00453ec7
jmp 0x434cfb
lea ecx, [ebx + 8]
mov dx, word [ecx]
cmp dx, 0x3d
jne 0x4351fd
xor esi, esi
add ebx, 0xa
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x64], esi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x74], ebx
call fcn.0040f813
push dword [ebp + 0x74]
push str.error
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
je 0x4351ac
mov ecx, dword [ebp + 0x60]
mov eax, dword [ecx + 0x30]
mov eax, dword [eax]
jmp 0x4351e3
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x74]
push eax
call fcn.004515da
test eax, eax
pop ecx
pop ecx
jg 0x4351dd
mov eax, dword [ebp + 0x74]
cmp word [eax], si
je 0x4351dd
mov ecx, dword [ebp + 0x60]
push esi
push 0xffffffffffffffff
push esi
push eax
call fcn.00410c6f
cmp eax, esi
je 0x4351dd
mov eax, dword [eax + 4]
jmp 0x4351e0
mov eax, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x60]
mov edx, dword [ecx + 0x30]
mov dword [edx], eax
mov dword [ecx + 0x8c], eax
mov dword [ebp + 0x64], eax
mov byte [ecx + 0x8a], 1
jmp 0x434798
mov eax, edx
call fcn.00402d55
test al, al
jne 0x435211
test dx, dx
jne 0x434789
mov dword [ebp + 0x78], ecx
lea ecx, [ebp + 0x78]
call fcn.0040f813
mov edi, dword [ebp + 0x60]
mov eax, dword [edi + 0x8c]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x54], eax
xor ebx, ebx
call fcn.00444a10
push 0x2c
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.0044785b
mov eax, dword [ebp + 0x78]
add esp, 0xc
cmp word [eax], 0x2c
jne 0x435262
add dword [ebp + 0x78], 2
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.004515da
pop ecx
pop ecx
mov ebx, eax
mov eax, dword [ebp + 0x70]
cmp word [eax], 0
jne 0x435272
push 0x40
jmp 0x4353ca
push eax
push 0x4c5c28
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
je 0x43528b
xor esi, esi
inc esi
jmp 0x4353cb
push dword [ebp + 0x70]
push 0x4c4b74
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
jne 0x435283
push dword [ebp + 0x70]
push str.FILE
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
jne 0x4352c4
push dword [ebp + 0x70]
push 0x4c3710
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
je 0x4352cb
push 2
jmp 0x4353ca
push dword [ebp + 0x70]
push str.FORX
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
jne 0x4352f1
push dword [ebp + 0x70]
push 0x4c5c14
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
je 0x4352f8
push 4
jmp 0x4353ca
push dword [ebp + 0x70]
push str.LOOP
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
jne 0x43531e
push dword [ebp + 0x70]
push 0x4c5c08
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
je 0x435325
push 8
jmp 0x4353ca
push dword [ebp + 0x70]
push 0x4c0f5c
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
jne 0x43534b
push dword [ebp + 0x70]
push str.BLOCK
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
je 0x43534f
push 0x10
jmp 0x4353ca
push dword [ebp + 0x70]
push str.ToWIN
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
je 0x435369
mov esi, 0x80
jmp 0x4353cb
push dword [ebp + 0x70]
push 0x4c5bf4
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
je 0x43539b
push 1
push dword [ebp + 0x74]
mov esi, 0x80
or word [edi + 0x88], si
push 0x4c0770
mov ecx, edi
call fcn.00459ed2
jmp 0x4353cb
push dword [ebp + 0x70]
push str.CONTINUE
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
je 0x4353b5
mov esi, 0x100
jmp 0x4353cb
push dword [ebp + 0x70]
push str.BREAK
call fcn.0043f8c3
test al, al
pop ecx
pop ecx
je 0x43542e
push 0x20
pop esi
or word [edi + 0x88], si
xor esi, esi
cmp ebx, esi
jle 0x4353f0
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp + 0x54]
mov dword [eax], ecx
mov eax, dword [ebp + 0x54]
mov dword [edi + 0x8c], eax
mov byte [edi + 0x8a], 1
cmp byte [ebp + 0x5f], 0
je 0x435407
push esi
push dword [ebp + 0x7c]
mov ecx, edi
push 0x11
push esi
push dword [ebp + 0x50]
call fcn.0041afa3
lea ecx, [ebp + 0x70]
call fcn.0043e48d
lea ecx, [ebp + 0x3c]
call fcn.0043e48d
lea ecx, [ebp + 0x48]
call fcn.0043e48d
lea ecx, [ebp + 0x34]
call fcn.0043e48d
mov eax, esi
jmp 0x434d42
lea ecx, [ebp + 0x70]
call fcn.0043e48d
jmp 0x434789
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046fd89
jmp 0x434cfb
cmp dword [ebp + 0x74], 0
je 0x434789
cmp edx, 4
jne 0x434789
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00487cc9
jmp 0x434cfb
mov ecx, 0x56524553
cmp eax, ecx
ja 0x435543
je 0x435533
sub eax, 0x54554853
je 0x435526
sub eax, 0x2fcf3
je 0x435512
sub eax, 0xe
je 0x435501
sub eax, 0xf5fff9
je 0x4354f0
sub eax, 0x10cfa
je 0x4354d0
sub eax, 0x102f1ff
jne 0x43563a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004693c6
jmp 0x434cfb
cmp dword [ebp + 0x74], 0
je 0x434789
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add ebx, 8
push ebx
call fcn.004878ee
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0047886d
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00430265
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046a025
jmp 0x434cfb
push dword [ebp + 0x58]
call fcn.0042a70e
jmp 0x434f7b
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.004162c5
jmp 0x434cfb
cmp eax, 0x574f4853
je 0x435626
cmp eax, 0x574f5242
je 0x435610
cmp eax, 0x58454649
je 0x4355d5
cmp eax, 0x58524f46
je 0x4355a1
cmp eax, 0x59434552
je 0x435590
cmp eax, 0x59454b48
jne 0x43563a
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00487fc5
jmp 0x434cfb
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00456471
jmp 0x434cfb
cmp byte [ebp + 0x5f], 0
je 0x4355bb
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041afa3
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x78]
add edi, 8
push dword [ebp + 0x74]
push edi
call fcn.0047f76c
jmp 0x434cfb
cmp byte [ebp + 0x5f], 0
je 0x4355ef
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041afa3
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x7c]
add edi, 8
cmp word [edi], 0x7c
jne 0x43560b
push 0
push edi
call fcn.00424f65
jmp 0x434cfb
push dword [ebp + 0x78]
jmp 0x435600
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045f3c4
jmp 0x434cfb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00492c4d
jmp 0x434cfb
xor esi, esi
mov dword [ebp + 0x64], esi
mov ax, word [ebx]
cmp ax, 0x24
mov dword [ebp + 0x58], ebx
jne 0x43565e
push esi
push esi
add ebx, 2
push ebx
push dword [ebp + 0x60]
call fcn.0042c76e
jmp 0x434789
cmp ax, si
je 0x434789
push 0x40
pop ecx
cmp ax, cx
mov dword [ebp + 0x54], esi
mov dword [ebp + 0x78], esi
jne 0x43567e
add ebx, 2
mov dword [ebp + 0x54], ecx
mov dword [ebp + 0x58], ebx
mov ecx, dword [ebp + 0x58]
xor eax, eax
mov ax, word [ecx]
cmp ax, 0x2a
je 0x435698
cmp ax, 0x2d
je 0x435698
cmp ax, 0x2b
jne 0x43569b
mov dword [ebp + 0x78], eax
mov ebx, dword [ebp + 0x60]
mov eax, dword [ebx + 0x1c]
mov dword [ebp + 0x30], eax
lea eax, [ebp + 0x30]
push eax
lea eax, [ebp + 0x38]
push eax
push ecx
mov ecx, ebx
mov dword [ebp + 0x38], esi
call fcn.004211dc
mov eax, dword [ebp + 0x78]
or eax, dword [ebp + 0x54]
test ax, ax
jne 0x4357a2
cmp dword [ebp + 0x38], esi
jge 0x4357a2
push dword [ebp + 0x44]
lea ecx, [ebp + 0x78]
push edi
call fcn.0044df97
mov eax, dword [ebp + 0x44]
cmp eax, esi
jle 0x435701
lea ecx, [ebp + 0x64]
push ecx
lea eax, [edi + eax*2]
push eax
push dword [ebp + 0x78]
push dword [ebp + 0x74]
push ebx
call fcn.0040f3bd
add esp, 0x14
test al, al
jne 0x435795
push 1
push esi
lea eax, [ebp + 0x3c]
push eax
push dword [ebp + 0x70]
mov ecx, ebx
call fcn.00455dfb
mov eax, dword [ebp + 0x3c]
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], eax
call fcn.0040f813
mov edi, dword [ebp + 0x58]
push esi
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x54]
push eax
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x38], esi
call fcn.0041a299
add esp, 0xc
push dword [ebp + 0x38]
lea ecx, [ebp + 0x70]
push dword [ebp + 0x54]
call fcn.0044df97
lea eax, [ebp + 0x70]
push eax
mov word [ebp + 0x76], si
call fcn.00410096
cmp eax, 1
pop ecx
mov ecx, ebx
jne 0x435778
push edi
call fcn.00422182
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x64], eax
call fcn.0043e48d
lea ecx, [ebp + 0x78]
call fcn.0043e48d
jmp 0x4357c9
push esi
push esi
push esi
push 1
lea eax, [ebp + 0x76]
push eax
push ebx
push dword [ebp + 0x3c]
call fcn.0040a660
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x64], eax
call fcn.0043e48d
lea ecx, [ebp + 0x78]
jmp 0x435431
mov ebx, dword [ebp + 0x60]
xor esi, esi
cmp byte [ebp + 0x5f], 0
je 0x4357b9
push esi
push dword [ebp + 0x7c]
mov ecx, ebx
push 0x11
push esi
push dword [ebp + 0x50]
call fcn.0041afa3
push dword [ebp + 0x74]
mov ecx, ebx
push dword [ebp + 0x58]
call fcn.0042f735
mov dword [ebp + 0x64], eax
mov eax, dword [ebp + 0x64]
jmp 0x434798
cdq
push edx
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.0049a8ca
mov esi, dword [ebp + 0x60]
add esp, 0xc
test byte [esi + 9], 0xf
jne 0x4357f9
lea eax, [ebp - 0x50]
push eax
push 0x4c37b4
mov ecx, esi
call fcn.0044414b
lea eax, [ebp - 0x50]
push eax
push 0x4c37b0
mov ecx, esi
call fcn.0044414b
cmp dword [0x4dae64], edi
mov byte [0x4daf84], 1
jle 0x43582f
cmp dword [ebp + 0x50], edi
je 0x43582f
push edi
push dword [ebp + 0x7c]
mov ecx, esi
push edi
push dword [ebp + 0x64]
push dword [ebp + 0x50]
call fcn.0041afa3
lea ecx, [ebp + 0x3c]
call fcn.0043e48d
mov esi, dword [ebp + 0x60]
test byte [esi + 0xd], 1
je 0x435852
push dword [ebp + 0x34]
call fcn.0043e39b
push dword [ebp + 0x48]
call fcn.0043e39b
pop ecx
pop ecx
mov esi, dword [ebp + 0x64]
jmp 0x435417
mov edi, dword [ebp + 0x60]
movzx eax, word [edi + 0x2c]
push 0
push eax
push esi
call fcn.00412aa4
add esp, 0xc
or esi, 1
push esi
mov ecx, edi
call fcn.00483177
mov esi, eax
jmp 0x43540f