Function at 0x4228e0
Capabilities:
Compute adler32 checksum
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xe8
mov eax, dword [0x43c034]
xor eax, esp
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0xec]
mov ecx, dword [esp + 0xf0]
mov edx, dword [esp + 0x100]
push ebx
mov ebx, dword [esp + 0x100]
push ebp
push esi
mov esi, dword [esp + 0x100]
mov dword [esp + 0x10], eax
or eax, 0xffffffff
mov dword [esp + 0x14], eax
mov dword [esp + 0x68], edx
mov eax, dword [esi]
add eax, ecx
mov dword [esp + 0x58], ecx
mov dword [esp + 0x20], eax
mov eax, dword [edx]
mov dword [esp + 0x1c], ecx
mov ecx, ebx
push edi
mov dword [esp + 0x64], esi
lea edx, [eax + ebx]
mov dword [esp + 0x50], ebx
mov dword [esp + 0x44], edx
mov edx, dword [esp + 0x114]
and edx, 4
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x68], edx
je 0x42296d
mov dword [esp + 0x48], 0xffffffff
xor edi, edi
jmp 0x422986
sub eax, dword [esp + 0x108]
lea edi, [eax + ebx]
lea eax, [edi - 1]
mov dword [esp + 0x48], eax
test edi, eax
jne 0x423f9a
cmp ebx, dword [esp + 0x108]
jb 0x423f9a
mov eax, dword [esp + 0x14]
mov ebx, dword [eax + 0x20]
mov ebp, dword [eax + 0x28]
mov edx, dword [eax + 0x38]
mov esi, dword [eax + 4]
mov dword [esp + 0x3c], ebp
mov ebp, dword [eax + 0x3c]
mov dword [esp + 0x28], ebx
mov ebx, dword [eax + 0x24]
mov eax, dword [eax]
mov dword [esp + 0x4c], ebp
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], ebx
cmp eax, 0x35
ja case.0x4229d3.4
movzx eax, byte [eax + 0x42404c]
jmp dword [eax*4 + 0x423fc8]
mov ecx, dword [esp + 0x14]
xor ebx, ebx
mov eax, dword [esp + 0x114]
xor edx, edx
xor esi, esi
mov dword [esp + 0x3c], 0
mov dword [esp + 0x30], ebx
mov dword [ecx + 0xc], 0
mov dword [ecx + 8], 0
mov dword [esp + 0x28], ebx
mov dword [esp + 0x10], edx
mov dword [ecx + 0x1c], 1
mov dword [ecx + 0x10], 1
test al, 1
je 0x422afe
jmp 0x422a30
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x114]
mov ebx, ebp
cmp ebx, dword [esp + 0x24]
mov ebx, dword [esp + 0x30]
jb 0x422a52
test al, 2
mov edi, 1
mov eax, 0xfffffffc
mov dword [ecx], edi
cmovne eax, edi
jmp 0x423d60
movzx eax, byte [ebp]
inc ebp
mov dword [ecx + 8], eax
jmp 0x422a60
mov ecx, dword [esp + 0x14]
cmp ebp, dword [esp + 0x24]
jb 0x422a86
test byte [esp + 0x114], 2
mov eax, 0xfffffffc
mov edi, 1
mov dword [ecx], 2
cmovne eax, edi
jmp 0x423d60
movzx ebx, byte [ebp]
xor edx, edx
mov dword [ecx + 0xc], ebx
inc ebp
mov ecx, dword [ecx + 8]
mov eax, ecx
shl eax, 8
add eax, ebx
mov dword [esp + 0x38], 0x1f
div dword [esp + 0x38]
mov dword [esp + 0x20], ebp
test edx, edx
jne 0x422abf
test bl, 0x20
jne 0x422abf
mov eax, ecx
and al, 0xf
cmp al, 8
jne 0x422abf
xor ebx, ebx
jmp 0x422ac4
mov ebx, 1
cmp dword [esp + 0x68], 0
mov dword [esp + 0x30], ebx
jne 0x422af6
shr ecx, 4
mov eax, 1
add ecx, 8
shl eax, cl
cmp eax, 0x8000
ja 0x422aeb
cmp edi, eax
jb 0x422aeb
xor eax, eax
jmp 0x422af0
mov eax, 1
or ebx, eax
mov dword [esp + 0x30], ebx
test ebx, ebx
jne case.0x4229d3.36
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
jmp 0x4232a5
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], 0xffffffff
mov dword [eax], 0x24
jmp 0x423db0
cmp ebp, dword [esp + 0x24]
jae 0x423b66
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
inc ebp
or edx, eax
mov dword [esp + 0x20], ebp
mov eax, dword [esp + 0x3c]
add esi, 8
mov dword [esp + 0x10], edx
cmp esi, eax
jb case.0x4229d3.18
mov ecx, eax
mov edi, 1
shl edi, cl
sub esi, eax
dec edi
mov dword [esp + 0x58], esi
and edi, edx
shr edx, cl
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x10], edx
movsx eax, byte [ecx + 0x434884]
add edi, eax
mov eax, dword [esp + 0x14]
cmp ecx, 0x10
jne 0x422b84
movzx ecx, byte [eax + ebx + 0x2923]
add eax, ebx
jmp 0x422b88
xor ecx, ecx
add eax, ebx
push edi
push ecx
add eax, 0x2924
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
add ebx, edi
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov eax, dword [edi + 0x30]
mov ecx, dword [edi + 0x2c]
add eax, ecx
mov dword [esp + 0x30], ebx
cmp ebx, eax
jae 0x422cf6
cmp esi, 0xf
jae 0x422c7f
mov eax, dword [esp + 0x24]
sub eax, ebp
cmp eax, 2
jge 0x422c56
mov eax, edx
and eax, 0x3ff
movsx edi, word [edi + eax*2 + 0x1ca0]
test edi, edi
js 0x422bf2
sar edi, 9
test edi, edi
je case.0x4229d3.16
cmp esi, edi
jae 0x422c7b
jmp case.0x4229d3.16
cmp esi, 0xa
jbe case.0x4229d3.16
mov ecx, 0xa
nop dword [eax]
mov ebp, dword [esp + 0x14]
mov eax, edx
shr eax, cl
not edi
and eax, 1
inc ecx
add eax, edi
movsx edi, word [ebp + eax*2 + 0x24a0]
mov ebp, dword [esp + 0x20]
test edi, edi
jns 0x422c7b
lea eax, [ecx + 1]
cmp esi, eax
jae 0x422c00
cmp ebp, dword [esp + 0x24]
jae 0x42392f
movzx eax, byte [ebp]
mov ecx, esi
mov edi, dword [esp + 0x14]
inc ebp
shl eax, cl
add esi, 8
or edx, eax
mov dword [esp + 0x20], ebp
mov dword [esp + 0x10], edx
cmp esi, 0xf
jb 0x422bce
jmp 0x422c7f
movzx edx, byte [ebp + 1]
lea ecx, [esi + 8]
movzx eax, byte [ebp]
add ebp, 2
shl edx, cl
mov ecx, esi
shl eax, cl
or edx, eax
mov dword [esp + 0x20], ebp
or dword [esp + 0x10], edx
add esi, 0x10
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov eax, edx
and eax, 0x3ff
movsx eax, word [edi + eax*2 + 0x1ca0]
mov dword [esp + 0x28], eax
test eax, eax
js 0x422ca6
mov ecx, eax
sar ecx, 9
and eax, 0x1ff
mov dword [esp + 0x28], eax
jmp 0x422cd4
mov ebx, dword [esp + 0x28]
mov ecx, 0xa
nop
mov eax, edx
not ebx
shr eax, cl
inc ecx
and eax, 1
add eax, ebx
movsx ebx, word [edi + eax*2 + 0x24a0]
test ebx, ebx
js 0x422cb0
mov dword [esp + 0x28], ebx
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0x28]
shr edx, cl
sub esi, ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x58], esi
cmp eax, 0x10
jae 0x42390d
mov byte [edi + ebx + 0x2924], al
inc ebx
jmp 0x422ba2
jne 0x423bfa
push ecx
lea eax, [edi + 0x2924]
push eax
lea eax, [edi + 0x40]
push eax
call sub.msvcrt.dll_memcpy
mov eax, dword [edi + 0x2c]
push dword [edi + 0x30]
add eax, 0x2924
add eax, edi
push eax
lea eax, [edi + 0xde0]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0x18
lea eax, [edi + 0x18]
dec dword [eax]
mov dword [esp + 0x40], eax
mov eax, dword [eax]
test eax, eax
jns 0x42366d
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x44]
mov edi, dword [esp + 0x24]
sub edi, ebp
cmp edi, 4
jl 0x422e5a
sub eax, ecx
cmp eax, 2
jl 0x422e5a
cmp esi, 0xf
jae 0x422d7c
movzx eax, word [ebp]
mov ecx, esi
shl eax, cl
add ebp, 2
or edx, eax
mov dword [esp + 0x20], ebp
add esi, 0x10
mov edi, dword [esp + 0x14]
mov eax, edx
and eax, 0x3ff
movsx ebx, word [edi + eax*2 + 0x160]
test ebx, ebx
js 0x422d9a
mov ecx, ebx
sar ecx, 9
jmp 0x422db8
mov ecx, 0xa
nop
mov eax, edx
not ebx
shr eax, cl
inc ecx
and eax, 1
add eax, ebx
movsx ebx, word [edi + eax*2 + 0x960]
test ebx, ebx
js 0x422da0
shr edx, cl
sub esi, ecx
mov dword [esp + 0x10], edx
test ebx, 0x100
jne 0x422f94
cmp esi, 0xf
jae 0x422de5
movzx eax, word [ebp]
mov ecx, esi
shl eax, cl
add ebp, 2
or edx, eax
mov dword [esp + 0x20], ebp
add esi, 0x10
mov eax, edx
and eax, 0x3ff
movsx eax, word [edi + eax*2 + 0x160]
mov dword [esp + 0x34], eax
test eax, eax
js 0x422e03
mov edi, eax
sar edi, 9
jmp 0x422e2e
mov edi, 0xa
mov ecx, edi
mov eax, edx
shr eax, cl
inc edi
mov ecx, dword [esp + 0x34]
and eax, 1
not ecx
add eax, ecx
mov ecx, dword [esp + 0x14]
movsx eax, word [ecx + eax*2 + 0x960]
mov dword [esp + 0x34], eax
test eax, eax
js 0x422e08
mov ecx, edi
sub esi, edi
shr edx, cl
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x10], edx
mov byte [ecx], bl
lea edi, [ecx + 1]
test eax, 0x100
jne 0x422f8a
add ecx, 2
mov byte [edi], al
mov dword [esp + 0x1c], ecx
jmp 0x422d45
cmp esi, 0xf
jae 0x422f17
cmp edi, 2
jge 0x422ef2
mov ecx, dword [esp + 0x14]
mov eax, edx
and eax, 0x3ff
movsx edi, word [ecx + eax*2 + 0x160]
test edi, edi
js 0x422e94
sar edi, 9
test edi, edi
je case.0x4229d3.23
cmp esi, edi
jae 0x422f17
jmp case.0x4229d3.23
cmp esi, 0xa
jbe case.0x4229d3.23
mov ecx, 0xa
nop
mov eax, edx
not edi
mov edx, dword [esp + 0x14]
shr eax, cl
inc ecx
and eax, 1
add eax, edi
movsx edi, word [edx + eax*2 + 0x960]
mov edx, dword [esp + 0x10]
test edi, edi
jns 0x422f17
lea eax, [ecx + 1]
cmp esi, eax
jae 0x422ea0
cmp ebp, dword [esp + 0x24]
jae 0x423953
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
inc ebp
or edx, eax
mov dword [esp + 0x20], ebp
add esi, 8
mov dword [esp + 0x10], edx
cmp esi, 0xf
jb 0x422e6c
jmp 0x422f17
movzx edx, byte [ebp + 1]
lea ecx, [esi + 8]
movzx eax, byte [ebp]
add ebp, 2
shl edx, cl
mov ecx, esi
shl eax, cl
or edx, eax
mov dword [esp + 0x20], ebp
or dword [esp + 0x10], edx
add esi, 0x10
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov eax, edx
and eax, 0x3ff
movsx ebx, word [edi + eax*2 + 0x160]
test ebx, ebx
js 0x422f3b
mov ecx, ebx
sar ecx, 9
and ebx, 0x1ff
jmp 0x422f58
mov ecx, 0xa
mov eax, edx
not ebx
shr eax, cl
inc ecx
and eax, 1
add eax, ebx
movsx ebx, word [edi + eax*2 + 0x960]
test ebx, ebx
js 0x422f40
shr edx, cl
sub esi, ecx
mov dword [esp + 0x10], edx
cmp ebx, 0x100
jae 0x422f94
mov ecx, dword [esp + 0x1c]
jmp 0x422f72
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 0x44]
cmp ecx, eax
jae 0x423977
mov byte [ecx], bl
inc ecx
mov dword [esp + 0x1c], ecx
jmp 0x422d49
mov dword [esp + 0x1c], edi
mov ebx, eax
mov edi, dword [esp + 0x14]
and ebx, 0x1ff
mov dword [esp + 0x30], ebx
cmp ebx, 0x100
je 0x42329b
lea eax, [ebx*4 - 0x404]
mov ecx, dword [eax + 0x4346f0]
mov ebx, dword [eax + 0x434670]
mov dword [esp + 0x3c], ecx
test ecx, ecx
je 0x423005
cmp esi, ecx
jae 0x422ff1
cmp ebp, dword [esp + 0x24]
jae 0x423b42
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
inc ebp
mov ecx, dword [esp + 0x3c]
or edx, eax
add esi, 8
mov dword [esp + 0x20], ebp
mov dword [esp + 0x10], edx
cmp esi, ecx
jb case.0x4229d3.25
mov eax, 1
sub esi, ecx
shl eax, cl
dec eax
and eax, edx
shr edx, cl
mov dword [esp + 0x10], edx
add ebx, eax
cmp esi, 0xf
jae 0x4230c3
mov eax, dword [esp + 0x24]
sub eax, ebp
cmp eax, 2
jge 0x42309e
mov ecx, dword [esp + 0x14]
mov eax, edx
and eax, 0x3ff
movsx edi, word [ecx + eax*2 + 0xf00]
test edi, edi
js 0x423045
sar edi, 9
test edi, edi
je case.0x4229d3.26
cmp esi, edi
jae 0x4230c3
jmp case.0x4229d3.26
cmp esi, 0xa
jbe case.0x4229d3.26
mov ecx, 0xa
nop
mov eax, edx
not edi
mov edx, dword [esp + 0x14]
shr eax, cl
inc ecx
and eax, 1
add eax, edi
movsx edi, word [edx + eax*2 + 0x1700]
mov edx, dword [esp + 0x10]
test edi, edi
jns 0x4230c3
lea eax, [ecx + 1]
cmp esi, eax
jae 0x423050
cmp ebp, dword [esp + 0x24]
jae 0x423adf
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
inc ebp
or edx, eax
mov dword [esp + 0x20], ebp
add esi, 8
mov dword [esp + 0x10], edx
cmp esi, 0xf
jb 0x42301d
jmp 0x4230c3
movzx edx, byte [ebp + 1]
lea ecx, [esi + 8]
movzx eax, byte [ebp]
add ebp, 2
shl edx, cl
mov ecx, esi
shl eax, cl
or edx, eax
mov dword [esp + 0x20], ebp
or dword [esp + 0x10], edx
add esi, 0x10
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
mov eax, edx
and eax, 0x3ff
movsx edi, word [edi + eax*2 + 0xf00]
test edi, edi
js 0x4230e7
mov ecx, edi
sar ecx, 9
and edi, 0x1ff
jmp 0x42310c
mov ebp, dword [esp + 0x14]
mov ecx, 0xa
mov eax, edx
not edi
shr eax, cl
inc ecx
and eax, 1
add eax, edi
movsx edi, word [ebp + eax*2 + 0x1700]
test edi, edi
js 0x4230f0
mov ebp, dword [esp + 0x20]
mov eax, dword [edi*4 + 0x434770]
sub esi, ecx
shr edx, cl
mov ecx, dword [edi*4 + 0x4347f0]
mov dword [esp + 0x10], edx
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x28], eax
test ecx, ecx
je 0x423174
cmp esi, ecx
jae 0x42315a
cmp ebp, dword [esp + 0x24]
jae 0x423b03
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
inc ebp
mov ecx, dword [esp + 0x3c]
or edx, eax
add esi, 8
mov dword [esp + 0x20], ebp
mov dword [esp + 0x10], edx
cmp esi, ecx
jb case.0x4229d3.27
mov eax, 1
sub esi, ecx
shl eax, cl
dec eax
and eax, edx
shr edx, cl
add dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x10], edx
mov ecx, dword [esp + 0x1c]
mov edi, ecx
sub edi, dword [esp + 0x108]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x4c], edi
cmp eax, edi
jbe 0x423198
cmp dword [esp + 0x68], 0
jne case.0x4229d3.37
sub edi, eax
and edi, dword [esp + 0x48]
add edi, dword [esp + 0x108]
cmp ecx, edi
mov eax, edi
cmova eax, ecx
add eax, ebx
cmp eax, dword [esp + 0x44]
jbe 0x4231f8
mov edi, dword [esp + 0x28]
mov eax, ebx
dec ebx
test eax, eax
je 0x422d41
jmp 0x4231c9
mov edi, dword [esp + 0x28]
cmp ecx, dword [esp + 0x44]
jae 0x423b27
mov eax, dword [esp + 0x4c]
mov edx, dword [esp + 0x108]
sub eax, edi
and eax, dword [esp + 0x48]
inc dword [esp + 0x4c]
mov al, byte [eax + edx]
mov edx, dword [esp + 0x10]
mov byte [ecx], al
inc ecx
mov dword [esp + 0x1c], ecx
jmp 0x4231b8
cmp ebx, 9
jb 0x423254
cmp ebx, dword [esp + 0x28]
ja 0x423259
mov eax, ebx
and eax, 0xfffffff8
add eax, edi
mov dword [esp + 0x38], eax
nop
mov eax, dword [edi]
mov dword [ecx], eax
mov eax, dword [edi + 4]
add edi, 8
mov dword [ecx + 4], eax
add ecx, 8
cmp edi, dword [esp + 0x38]
jb 0x423210
and ebx, 7
mov dword [esp + 0x1c], ecx
cmp ebx, 3
jae 0x423254
test ebx, ebx
je 0x422d41
mov al, byte [edi]
mov byte [ecx], al
cmp ebx, 1
jbe 0x423249
mov al, byte [edi + 1]
mov byte [ecx + 1], al
add ecx, ebx
mov dword [esp + 0x1c], ecx
jmp 0x422d41
cmp ebx, 2
jbe 0x423232
lea ecx, [ebx - 3]
mov eax, 0xaaaaaaab
mul ecx
mov ecx, dword [esp + 0x1c]
shr edx, 1
inc edx
nop word [eax + eax]
movzx eax, byte [edi]
sub ebx, 3
mov byte [ecx], al
movzx eax, byte [edi + 1]
mov byte [ecx + 1], al
movzx eax, byte [edi + 2]
add edi, 3
mov byte [ecx + 2], al
add ecx, 3
sub edx, 1
jne 0x423270
mov edx, dword [esp + 0x10]
mov dword [esp + 0x1c], ecx
jmp 0x423232
test byte [edi + 0x14], 1
jne 0x423acd
cmp esi, 3
jae 0x4232d3
cmp ebp, dword [esp + 0x24]
jae 0x42398e
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
inc ebp
or edx, eax
mov dword [esp + 0x20], ebp
add esi, 8
mov dword [esp + 0x10], edx
cmp esi, 3
jb case.0x4229d3.3
mov edi, dword [esp + 0x14]
mov eax, edx
lea ecx, [edi + 0x18]
and eax, 7
shr edx, 3
sub esi, 3
mov dword [edi + 0x14], eax
shr eax, 1
mov dword [esp + 0x10], edx
mov dword [esp + 0x58], esi
mov dword [esp + 0x40], ecx
mov dword [ecx], eax
jne 0x4234cc
mov eax, esi
and eax, 7
cmp esi, eax
jae 0x423330
cmp ebp, dword [esp + 0x24]
jae 0x4239b2
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
add esi, 8
or edx, eax
inc ebp
mov eax, esi
mov dword [esp + 0x20], ebp
and eax, 7
mov dword [esp + 0x10], edx
cmp esi, eax
jb case.0x4229d3.5
mov edi, dword [esp + 0x14]
mov ecx, esi
and ecx, 7
shr edx, cl
sub esi, ecx
mov dword [esp + 0x10], edx
xor ebx, ebx
cmp ebx, 4
jae 0x4233aa
test esi, esi
je case.0x4229d3.7
cmp esi, 8
jae 0x423376
cmp ebp, dword [esp + 0x24]
jae 0x4239d6
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
inc ebp
or edx, eax
mov dword [esp + 0x20], ebp
add esi, 8
mov dword [esp + 0x10], edx
cmp esi, 8
jb case.0x4229d3.6
mov edi, dword [esp + 0x14]
mov byte [edi + ebx + 0x2920], dl
sub esi, 8
shr edx, 8
inc ebx
mov dword [esp + 0x10], edx
jmp 0x42333f
cmp ebp, dword [esp + 0x24]
jae 0x4239fa
mov edi, dword [esp + 0x14]
mov al, byte [ebp]
inc ebp
mov dword [esp + 0x20], ebp
mov byte [edi + ebx + 0x2920], al
inc ebx
jmp 0x42333f
movzx ebx, byte [edi + 0x2921]
movzx eax, byte [edi + 0x2920]
movzx ecx, byte [edi + 0x2923]
shl ebx, 8
or ebx, eax
shl ecx, 8
movzx eax, byte [edi + 0x2922]
or ecx, eax
mov dword [esp + 0x30], ebx
xor ecx, 0xffff
cmp ebx, ecx
jne 0x423b8e
mov ecx, dword [esp + 0x1c]
test ebx, ebx
je 0x4234bf
test esi, esi
je case.0x4229d3.9
cmp esi, 8
jae 0x42341c
cmp ebp, dword [esp + 0x24]
jae 0x423a1e
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
inc ebp
or edx, eax
mov dword [esp + 0x20], ebp
add esi, 8
mov dword [esp + 0x10], edx
cmp esi, 8
jb case.0x4229d3.51
mov ecx, dword [esp + 0x1c]
movzx eax, dl
shr edx, 8
sub esi, 8
mov dword [esp + 0x28], eax
mov dword [esp + 0x10], edx
jmp 0x423437
mov eax, dword [esp + 0x28]
cmp ecx, dword [esp + 0x44]
jae 0x423a42
mov byte [ecx], al
inc ecx
dec ebx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x30], ebx
jmp 0x4233e6
test ebx, ebx
je 0x4234bf
mov edx, dword [esp + 0x44]
cmp ecx, edx
jb 0x42347a
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], 2
mov dword [eax], 9
jmp 0x423db0
mov edx, dword [esp + 0x44]
mov eax, dword [esp + 0x24]
cmp ebp, eax
jae 0x423a5d
mov ecx, edx
sub eax, ebp
mov edx, dword [esp + 0x1c]
mov edi, ebx
sub ecx, edx
cmp ecx, eax
cmovae ecx, eax
cmp ecx, ebx
cmovb edi, ecx
push edi
push ebp
push edx
call sub.msvcrt.dll_memcpy
mov ecx, dword [esp + 0x28]
add ebp, edi
add ecx, edi
mov dword [esp + 0x2c], ebp
add esp, 0xc
mov dword [esp + 0x1c], ecx
sub ebx, edi
mov dword [esp + 0x30], ebx
jmp 0x42344f
mov edx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
jmp 0x42329b
cmp eax, 3
je 0x423ba9
cmp eax, 1
jne 0x42355c
mov eax, dword [esp + 0x14]
add edi, 0x40
movaps xmm0, xmmword [0x4350c0]
push 0x90
push 8
mov dword [eax + 0x2c], pe_nt_image_headers32
mov dword [eax + 0x30], 0x20
movups xmmword [eax + 0xde0], xmm0
push edi
movups xmmword [eax + 0xdf0], xmm0
call sub.msvcrt.dll_memset
push 0x70
add edi, 0x90
push 9
push edi
call sub.msvcrt.dll_memset
movaps xmm0, xmmword [str._a_a_a_a_a_a_a_a_a_a_a_a_a_a_a_au]
add esp, 0x18
mov eax, dword [esp + 0x40]
movups xmmword [edi + 0x70], xmm0
movq qword [edi + 0x80], xmm0
mov dword [edi + 0x88], 0x8080808
mov dword [edi + 0x8c], 0x8080808
mov edi, dword [esp + 0x14]
jmp 0x422d33
xor ebx, ebx
cmp ebx, 3
jae 0x4235e7
movsx eax, byte [ebx + 0x434890]
cmp esi, eax
jae 0x42359d
cmp ebp, dword [esp + 0x24]
jae 0x423a85
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
inc ebp
or edx, eax
mov dword [esp + 0x20], ebp
movsx eax, byte [ebx + 0x434890]
add esi, 8
mov dword [esp + 0x10], edx
cmp esi, eax
jb case.0x4229d3.11
mov cl, byte [ebx + 0x434890]
mov edx, 1
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
shl edx, cl
dec edx
and edx, edi
mov dword [eax + ebx*4 + 0x2c], edx
movsx ecx, byte [ebx + 0x434890]
mov eax, dword [ebx*4 + 0x434884]
sub esi, ecx
shr edi, cl
add eax, edx
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x58], esi
mov dword [edi + ebx*4 + 0x2c], eax
inc ebx
jmp 0x42355e
push pe_nt_image_headers32
lea eax, [edi + 0x1b80]
push 0
push eax
call sub.msvcrt.dll_memset
mov edx, dword [esp + 0x1c]
add esp, 0xc
xor ebx, ebx
mov dword [esp + 0x30], ebx
cmp ebx, dword [edi + 0x34]
jae 0x42365e
cmp esi, 3
jae 0x42363a
cmp ebp, dword [esp + 0x24]
jae 0x423aa9
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
inc ebp
or edx, eax
mov dword [esp + 0x20], ebp
add esi, 8
mov dword [esp + 0x10], edx
cmp esi, 3
jb case.0x4229d3.14
mov edi, dword [esp + 0x14]
movzx eax, byte [ebx + 0x434870]
mov ecx, edx
and ecx, 7
shr edx, 3
sub esi, 3
mov dword [esp + 0x10], edx
mov dword [esp + 0x58], esi
inc ebx
mov byte [eax + edi + 0x1b80], cl
jmp 0x423603
mov dword [edi + 0x34], 0x13
lea eax, [edi + 0x18]
jmp 0x422d2f
imul eax, eax, 0xda0
push 0x40
push 0
add eax, 0x40
add edi, eax
lea eax, [esp + 0xbc]
push eax
mov dword [esp + 0x24], edi
call sub.msvcrt.dll_memset
push 0xc80
lea eax, [edi + 0x120]
push 0
push eax
call sub.msvcrt.dll_memset
mov eax, dword [esp + 0x58]
add esp, 0x18
xor ecx, ecx
mov edi, dword [eax]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x38], edi
mov edx, dword [eax + edi*4 + 0x2c]
test edx, edx
je 0x4236d0
mov edi, dword [esp + 0x18]
nop
movzx eax, byte [ecx + edi]
inc ecx
inc dword [esp + eax*4 + 0xb4]
cmp ecx, edx
jb 0x4236c0
xor edi, edi
mov edx, 4
xor ecx, ecx
mov dword [esp + 0x74], ecx
mov dword [esp + 0x70], ecx
mov dword [esp + 0x54], ecx
mov dword [esp + 0x34], ecx
nop dword [eax]
mov eax, dword [esp + edx + 0xb4]
add ecx, eax
add ecx, ecx
add edi, eax
mov eax, dword [esp + edx + 0xb8]
add dword [esp + 0x34], eax
mov dword [esp + edx + 0x74], ecx
add ecx, eax
mov eax, dword [esp + edx + 0xbc]
add ecx, ecx
add dword [esp + 0x54], eax
mov dword [esp + edx + 0x78], ecx
add ecx, eax
add ecx, ecx
mov dword [esp + edx + 0x7c], ecx
add edx, 0xc
cmp edx, 0x3c
jbe 0x4236f0
mov eax, dword [esp + 0x54]
add eax, dword [esp + 0x34]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x60], edi
mov ecx, dword [esp + 0x60]
mov edi, dword [esp + 0x38]
add ecx, eax
cmp dword [esp + 0x2c], 0x10000
je 0x42375c
cmp ecx, 1
ja case.0x4229d3.35
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2c], 0xffffffff
mov dword [esp + 0x60], 0
cmp dword [eax + edi*4 + 0x2c], 0
jbe 0x423862
mov ebp, dword [esp + 0x2c]
mov ebx, dword [esp + 0x60]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x40]
mov esi, dword [esp + 0x14]
nop
movzx edi, byte [ebx + eax]
xor edx, edx
test edi, edi
je 0x423849
mov ecx, dword [esp + edi*4 + 0x70]
mov dword [esp + 0x38], ecx
mov dword [esp + 0x54], edi
lea eax, [ecx + 1]
mov dword [esp + edi*4 + 0x70], eax
mov eax, dword [esp + 0x48]
and ecx, 1
add edx, edx
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x54]
or edx, ecx
mov ecx, dword [esp + 0x38]
dec eax
shr ecx, 1
mov dword [esp + 0x54], eax
mov dword [esp + 0x38], ecx
test eax, eax
jne 0x4237b1
cmp edi, 0xa
ja 0x42387a
mov eax, edi
shl eax, 9
or eax, ebx
movzx eax, ax
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x48], eax
cmp edx, 0x400
jae 0x423841
mov ecx, edi
mov eax, 1
mov edi, dword [esp + 0x60]
shl eax, cl
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x2c], eax
add eax, eax
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x48], ecx
mov ecx, dword [esp + 0x2c]
lea eax, [eax + edx*2]
add eax, 0x120
nop dword [eax]
mov word [eax], di
add edx, ecx
add eax, dword [esp + 0x38]
cmp edx, 0x400
jb 0x423830
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x40]
mov edi, dword [ecx]
inc ebx
cmp ebx, dword [esi + edi*4 + 0x2c]
jb 0x423790
mov esi, dword [esp + 0x58]
mov ebx, dword [esp + 0x30]
mov ebp, dword [esp + 0x20]
mov eax, dword [esp + 0x40]
cmp edi, 2
mov edi, dword [esp + 0x14]
jne 0x422d2d
xor ebx, ebx
jmp 0x422b9e
mov ecx, dword [esp + 0x18]
mov eax, edx
and eax, 0x3ff
movsx ecx, word [ecx + eax*2 + 0x120]
test ecx, ecx
jne 0x4238a2
mov ecx, dword [esp + 0x18]
mov word [ecx + eax*2 + 0x120], bp
mov ecx, ebp
sub ebp, 2
mov eax, dword [esp + 0x34]
shr edx, 9
mov dword [esp + 0x48], eax
cmp edi, 0xb
jbe 0x4238f5
add edi, 0xfffffff5
mov dword [esp + 0x48], eax
nop dword [eax]
shr edx, 1
mov eax, edx
and eax, 1
sub eax, ecx
mov ecx, dword [esp + 0x18]
movzx ecx, word [ecx + eax*2 + 0x91e]
test cx, cx
jne 0x4238ed
mov ecx, dword [esp + 0x18]
mov word [ecx + eax*2 + 0x91e], bp
mov ecx, ebp
sub ebp, 2
jmp 0x4238f0
movsx ecx, cx
sub edi, 1
jne 0x4238c0
mov eax, dword [esp + 0x18]
shr edx, 1
and edx, 1
sub edx, ecx
mov word [eax + edx*2 + 0x91e], bx
jmp 0x423845
jne 0x423917
test ebx, ebx
je 0x423bdf
movsx eax, byte [eax + 0x434658]
mov dword [esp + 0x3c], eax
cmp esi, eax
jae 0x422b4a
jmp case.0x4229d3.18
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0x10
jmp 0x423d60
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0x17
jmp 0x423d60
mov dword [edi], 0x18
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], 2
jmp 0x423db0
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 3
jmp 0x423d60
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 5
jmp 0x423d60
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 6
jmp 0x423d60
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 7
jmp 0x423d60
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0x33
jmp 0x423d60
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], 2
mov dword [eax], 0x34
jmp 0x423db0
test byte [esp + 0x114], 2
mov ecx, 1
mov edx, dword [esp + 0x10]
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0x26
jmp 0x423d60
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0xb
jmp 0x423d60
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0xe
jmp 0x423d60
mov eax, esi
and eax, 7
cmp esi, eax
jae 0x423c51
jmp 0x423c30
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0x1a
jmp 0x423d60
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0x1b
jmp 0x423d60
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], 2
mov dword [eax], 0x35
jmp 0x423db0
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0x19
jmp 0x423d60
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0x12
jmp 0x423d60
mov edi, dword [esp + 0x14]
mov dword [edi], 0x27
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], 0xffffffff
jmp 0x423db0
mov edi, dword [esp + 0x14]
mov dword [edi], 0xa
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], 0xffffffff
jmp 0x423db0
mov eax, dword [esp + 0x14]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], 0xffffffff
mov dword [eax], 0x23
jmp 0x423db0
mov edi, dword [esp + 0x14]
mov dword [edi], 0x11
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], 0xffffffff
jmp 0x423db0
mov edi, dword [esp + 0x14]
or eax, 0xffffffff
mov dword [edi], 0x15
mov edi, dword [esp + 0x10]
mov dword [esp + 0x18], eax
jmp 0x423db0
mov edi, dword [esp + 0x10]
or eax, 0xffffffff
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
mov dword [eax], 0x25
jmp 0x423db0
mov edi, dword [esp + 0x14]
nop
cmp ebp, dword [esp + 0x24]
jae 0x423ca3
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
add esi, 8
or edx, eax
inc ebp
mov eax, esi
mov dword [esp + 0x10], edx
and eax, 7
cmp esi, eax
jb 0x423c30
mov eax, dword [esp + 0x5c]
mov ecx, esi
and ecx, 7
shr edx, cl
sub esi, ecx
mov dword [esp + 0x10], edx
cmp ebp, eax
jbe 0x423c73
cmp esi, 8
jb 0x423c73
dec ebp
sub esi, 8
cmp ebp, eax
ja 0x423c66
mov edi, dword [esp + 0x10]
xor edx, edx
mov ecx, esi
xor eax, eax
bts edx, ecx
cmp ecx, 0x20
cmovae eax, edx
xor edx, eax
dec edx
and edi, edx
test byte [esp + 0x114], 1
mov dword [esp + 0x10], edi
je 0x423da0
xor ebx, ebx
mov edx, edi
jmp 0x423ce2
test byte [esp + 0x114], 2
mov eax, 0xfffffffc
mov ecx, 1
mov dword [edi], 0x20
cmovne eax, ecx
jmp 0x423d60
cmp ebp, dword [esp + 0x24]
jae 0x423d41
movzx ecx, byte [ebp]
inc ebp
mov edi, dword [esp + 0x14]
mov eax, dword [edi + 0x10]
shl eax, 8
or eax, ecx
inc ebx
mov dword [edi + 0x10], eax
cmp ebx, 4
jae case.0x4229d3.34
test esi, esi
je case.0x4229d3.42
cmp esi, 8
jae 0x423d11
cmp ebp, dword [esp + 0x24]
jae 0x423d20
movzx eax, byte [ebp]
mov ecx, esi
shl eax, cl
add esi, 8
or edx, eax
inc ebp
mov dword [esp + 0x10], edx
cmp esi, 8
jb case.0x4229d3.41
movzx ecx, dl
shr edx, 8
sub esi, 8
mov dword [esp + 0x10], edx
jmp 0x423cd2
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0x29
jmp 0x423d60
test byte [esp + 0x114], 2
mov ecx, 1
mov eax, 0xfffffffc
cmovne eax, ecx
mov ecx, dword [esp + 0x14]
mov dword [ecx], 0x2a
mov dword [esp + 0x18], eax
mov ecx, eax
cmp eax, 1
je case.0x4229d3.4
mov eax, dword [esp + 0x1c]
mov edi, edx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x4c], eax
cmp ecx, 0xfffffffc
je 0x423dcb
jmp 0x423db0
mov edi, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
mov dword [eax], 0x22
mov eax, dword [esp + 0x5c]
cmp ebp, eax
jbe 0x423dcb
cmp esi, 8
jb 0x423dcb
dec ebp
sub esi, 8
cmp ebp, eax
ja 0x423db8
jmp 0x423dcb
mov edi, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
xor ecx, ecx
xor eax, eax
bts ecx, esi
cmp esi, 0x20
cmovae eax, ecx
mov dword [edx + 0x24], ebx
sub ebp, dword [esp + 0x5c]
xor ecx, eax
mov eax, dword [esp + 0x28]
dec ecx
mov ebx, dword [esp + 0x18]
and ecx, edi
mov dword [edx + 0x20], eax
mov eax, dword [esp + 0x3c]
mov dword [edx + 0x28], eax
mov eax, dword [esp + 0x4c]
mov dword [edx + 0x3c], eax
mov eax, dword [esp + 0x64]
mov dword [edx + 0x38], ecx
mov ecx, dword [esp + 0x1c]
sub ecx, dword [esp + 0x50]
test byte [esp + 0x114], 9
mov dword [edx + 4], esi
mov dword [eax], ebp
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x1c], ecx
mov dword [eax], ecx
je 0x423f96
test ebx, ebx
js 0x423f96
mov edi, dword [edx + 0x1c]
mov eax, 0x5e6ea9af
mul ecx
movzx esi, di
shr edx, 0xb
imul eax, edx, 0x15b0
mov edx, ecx
shr edi, 0x10
sub edx, eax
mov dword [esp + 0x34], edx
test ecx, ecx
je 0x423f71
nop
xor ebp, ebp
cmp edx, 7
jbe 0x423ec6
mov ecx, dword [esp + 0x50]
mov ebx, 7
sub ebx, ecx
movzx eax, byte [ecx]
add ebp, 8
add esi, eax
movzx eax, byte [ecx + 1]
add edi, esi
add esi, eax
movzx eax, byte [ecx + 2]
add edi, esi
add esi, eax
movzx eax, byte [ecx + 3]
add edi, esi
add esi, eax
movzx eax, byte [ecx + 4]
add edi, esi
add esi, eax
movzx eax, byte [ecx + 5]
add edi, esi
add esi, eax
movzx eax, byte [ecx + 6]
add edi, esi
add esi, eax
movzx eax, byte [ecx + 7]
add ecx, 8
add edi, esi
add esi, eax
add edi, esi
lea eax, [ecx + ebx]
cmp eax, edx
jb 0x423e72
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x1c]
xor ebx, ebx
cmp ebp, edx
jae 0x423f32
mov eax, edx
sub eax, ebp
cmp eax, 2
jb 0x423f1b
mov ecx, dword [esp + 0x50]
sub edx, ebp
sub edx, 2
shr edx, 1
inc edx
lea eax, [edx*2]
add eax, ebp
mov ebp, ebx
mov dword [esp + 0x64], eax
movzx eax, byte [ecx]
add esi, eax
movzx eax, byte [ecx + 1]
add ebp, esi
add ecx, 2
add esi, eax
add ebx, esi
sub edx, 1
jne 0x423ef0
mov eax, dword [esp + 0x64]
mov dword [esp + 0x50], ecx
mov ecx, dword [esp + 0x1c]
cmp eax, dword [esp + 0x34]
jae 0x423f2d
jmp 0x423f1d
mov ebp, ebx
mov edx, dword [esp + 0x50]
movzx eax, byte [edx]
add esi, eax
add edi, esi
inc edx
mov dword [esp + 0x50], edx
lea eax, [ebx + ebp]
add edi, eax
mov eax, 0x80078071
mul esi
shr edx, 0xf
imul eax, edx, 0xffff000f
add esi, eax
mov eax, 0x80078071
mul edi
shr edx, 0xf
imul eax, edx, 0xffff000f
mov edx, 0x15b0
add edi, eax
sub ecx, dword [esp + 0x34]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x34], edx
jne 0x423e60
mov ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
shl edi, 0x10
add edi, esi
mov dword [eax + 0x1c], edi
test ebx, ebx
jne 0x423f96
test byte [esp + 0x114], 1
je 0x423f96
cmp edi, dword [eax + 0x10]
mov ecx, 0xfffffffe
cmovne ebx, ecx
mov eax, ebx
jmp 0x423faf
mov eax, dword [esp + 0x6c]
mov dword [eax], 0
mov eax, 0xfffffffd
mov dword [esi], 0
mov ecx, dword [esp + 0xf4]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00428a51
add esp, 0xe8
ret