Function at 0x42f3b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push edi
lea edi, [esp + 8]
and esp, 0xfffffff0
push dword [edi - 4]
push ebp
mov ebp, esp
push edi
push esi
lea eax, [ebp - 0x60]
push ebx
mov esi, 0x2a
sub esp, 0xcc
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x9c], ecx
lea ecx, [ebp - 0x80]
mov dword [esp + 4], 0
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x94]
mov dword [ebp - 0x64], 1
mov word [ebp - 0x60], si
mov dword [ebp - 0x94], 0x1b
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x94]
mov ebx, 0x6967
mov dword [ebp - 0x80], eax
sub esp, 8
mov dword [ebp - 0x78], edx
mov dword [eax], 0x65636341
mov dword [eax + 4], 0x432d7373
mov dword [eax + 8], 0x72746e6f
mov dword [eax + 0xc], 0x412d6c6f
mov dword [eax + 0x10], 0x776f6c6c
mov dword [eax + 0x14], 0x69724f2d
mov word [eax + 0x18], bx
mov byte [eax + 0x1a], 0x6e
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x7c], eax
mov byte [edx + eax], 0
mov esi, dword [ebp - 0x80]
lea eax, [ebp - 0x40]
mov ebx, dword [ebp - 0x7c]
mov dword [ebp - 0x48], eax
mov eax, esi
add eax, ebx
je 0x42f47b
test esi, esi
je 0x431372
cmp ebx, 0xf
mov dword [ebp - 0x90], ebx
ja 0x430210
cmp ebx, 1
jne 0x4306b0
movzx eax, byte [esi]
mov byte [ebp - 0x40], al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x44], ebx
mov byte [eax + ebx], 0
lea eax, [ebp - 0x28]
mov esi, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x64]
mov dword [ebp - 0x30], eax
mov eax, esi
add eax, ebx
setne dl
test esi, esi
sete al
test dl, al
jne 0x43137e
cmp ebx, 0xf
mov dword [ebp - 0x8c], ebx
ja 0x4301c0
cmp ebx, 1
jne 0x4307f0
movzx eax, byte [esi]
mov byte [ebp - 0x28], al
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], ebx
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x9c]
mov edi, dword [eax + 0x14]
add eax, 0x10
mov dword [ebp - 0xa8], eax
test edi, edi
je 0x42fe50
mov eax, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0xac], eax
jmp 0x42f51e
mov eax, dword [edi + 0xc]
xor ecx, ecx
test eax, eax
je 0x42f56f
mov edi, eax
mov ebx, dword [edi + 0x14]
mov eax, dword [edi + 0x10]
cmp esi, ebx
mov edx, ebx
mov dword [ebp - 0xa0], eax
cmovbe edx, esi
test edx, edx
je 0x42f55b
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xac]
mov dword [esp + 8], edx
mov dword [ebp - 0xa4], edx
mov dword [esp], eax
call sub.msvcrt.dll_putc
test eax, eax
mov edx, dword [ebp - 0xa4]
jne 0x42f55f
mov eax, esi
sub eax, ebx
test eax, eax
jns 0x42f513
mov eax, dword [edi + 8]
mov ecx, 1
test eax, eax
jne 0x42f51c
test cl, cl
jne 0x42fe52
test edx, edx
je 0x42f59b
mov eax, dword [ebp - 0xac]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call sub.msvcrt.dll_putc
test eax, eax
jne 0x42f59f
mov eax, ebx
sub eax, esi
test eax, eax
js 0x430090
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x28]
cmp eax, ecx
je 0x42f5b9
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x40]
cmp eax, ecx
je 0x42f5cb
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x80]
lea ecx, [ebp - 0x78]
cmp eax, ecx
je 0x42f5dd
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x60]
cmp eax, ecx
je 0x42f5ef
mov dword [esp], eax
call fcn.006ff4f0
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x68]
mov dword [esp + 4], 0
mov dword [ebp - 0x48], 0x16
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x48]
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x48]
mov ecx, 0x4554
mov dword [ebp - 0x68], eax
sub esp, 8
mov dword [ebp - 0x60], edx
mov word [eax + 0x14], cx
lea ecx, [ebp - 0x80]
mov dword [eax], 0x2c544547
mov dword [eax + 4], 0x54555020
mov dword [eax + 8], 0x4f50202c
mov dword [eax + 0xc], 0x202c5453
mov dword [eax + 0x10], 0x454c4544
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x64], eax
mov byte [edx + eax], 0
lea eax, [ebp - 0x78]
mov dword [esp + 4], 0
mov dword [ebp - 0x94], 0x1c
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x94]
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x80], eax
sub esp, 8
mov dword [ebp - 0x78], edx
mov dword [eax], 0x65636341
mov dword [eax + 4], 0x432d7373
mov dword [eax + 8], 0x72746e6f
mov dword [eax + 0xc], 0x412d6c6f
mov dword [eax + 0x10], 0x776f6c6c
mov dword [eax + 0x14], 0x74654d2d
mov dword [eax + 0x18], 0x73646f68
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x7c], eax
mov byte [edx + eax], 0
lea eax, [ebp - 0x40]
mov esi, dword [ebp - 0x80]
mov ebx, dword [ebp - 0x7c]
mov dword [ebp - 0x48], eax
mov eax, esi
add eax, ebx
je 0x42f6e8
test esi, esi
je 0x431322
cmp ebx, 0xf
mov dword [ebp - 0x90], ebx
ja 0x430520
cmp ebx, 1
jne 0x4307e0
movzx eax, byte [esi]
mov byte [ebp - 0x40], al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x44], ebx
mov byte [eax + ebx], 0
lea eax, [ebp - 0x28]
mov esi, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x64]
mov dword [ebp - 0x30], eax
mov eax, esi
add eax, ebx
setne dl
test esi, esi
sete al
test dl, al
jne 0x43132e
cmp ebx, 0xf
mov dword [ebp - 0x8c], ebx
ja 0x430434
cmp ebx, 1
jne 0x4307d0
movzx eax, byte [esi]
mov byte [ebp - 0x28], al
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], ebx
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x9c]
mov edi, dword [eax + 0x14]
test edi, edi
je 0x42fe10
mov eax, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0xac], eax
jmp 0x42f78b
mov eax, dword [edi + 0xc]
xor ecx, ecx
test eax, eax
je 0x42f7dc
mov edi, eax
mov ebx, dword [edi + 0x14]
mov eax, dword [edi + 0x10]
cmp esi, ebx
mov edx, ebx
mov dword [ebp - 0xa0], eax
cmovbe edx, esi
test edx, edx
je 0x42f7c8
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xac]
mov dword [esp + 8], edx
mov dword [ebp - 0xa4], edx
mov dword [esp], eax
call sub.msvcrt.dll_putc
test eax, eax
mov edx, dword [ebp - 0xa4]
jne 0x42f7cc
mov eax, esi
sub eax, ebx
test eax, eax
jns 0x42f780
mov eax, dword [edi + 8]
mov ecx, 1
test eax, eax
jne 0x42f789
test cl, cl
mov eax, dword [ebp - 0x9c]
jne 0x42fe16
test edx, edx
je 0x42f80e
mov eax, dword [ebp - 0xac]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call sub.msvcrt.dll_putc
test eax, eax
jne 0x42f812
mov eax, ebx
sub eax, esi
test eax, eax
js 0x42ff90
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x28]
cmp eax, ecx
je 0x42f82c
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x40]
cmp eax, ecx
je 0x42f83e
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x80]
lea ecx, [ebp - 0x78]
cmp eax, ecx
je 0x42f850
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x60]
cmp eax, ecx
je 0x42f862
mov dword [esp], eax
call fcn.006ff4f0
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x68]
mov dword [esp + 4], 0
mov dword [ebp - 0x48], 0x1b
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x48]
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x68], eax
sub esp, 8
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x60], edx
mov edx, 0x7079
mov dword [eax], 0x68747541
mov dword [eax + 4], 0x7a69726f
mov dword [eax + 8], 0x6f697461
mov dword [eax + 0xc], 0x43202c6e
mov dword [eax + 0x10], 0x65746e6f
mov dword [eax + 0x14], 0x542d746e
mov word [eax + 0x18], dx
mov byte [eax + 0x1a], 0x65
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x64], eax
mov byte [edx + eax], 0
lea eax, [ebp - 0x78]
mov dword [esp + 4], 0
mov dword [ebp - 0x94], 0x1c
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x94]
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x80], eax
sub esp, 8
mov dword [ebp - 0x78], edx
mov dword [eax], 0x65636341
mov dword [eax + 4], 0x432d7373
mov dword [eax + 8], 0x72746e6f
mov dword [eax + 0xc], 0x412d6c6f
mov dword [eax + 0x10], 0x776f6c6c
mov dword [eax + 0x14], 0x6165482d
mov dword [eax + 0x18], 0x73726564
mov eax, dword [ebp - 0x94]
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x7c], eax
mov byte [edx + eax], 0
lea eax, [ebp - 0x40]
mov esi, dword [ebp - 0x80]
mov ebx, dword [ebp - 0x7c]
mov dword [ebp - 0x48], eax
mov eax, esi
add eax, ebx
je 0x42f966
test esi, esi
je 0x431301
cmp ebx, 0xf
mov dword [ebp - 0x90], ebx
ja 0x4304d0
cmp ebx, 1
jne 0x4307c0
movzx eax, byte [esi]
mov byte [ebp - 0x40], al
lea eax, [ebp - 0x40]
mov dword [ebp - 0x44], ebx
mov byte [eax + ebx], 0
lea eax, [ebp - 0x28]
mov esi, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x64]
mov dword [ebp - 0x30], eax
mov eax, esi
add eax, ebx
setne dl
test esi, esi
sete al
test dl, al
jne 0x43130d
cmp ebx, 0xf
mov dword [ebp - 0x8c], ebx
ja 0x430480
cmp ebx, 1
jne 0x4307b0
movzx eax, byte [esi]
mov byte [ebp - 0x28], al
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], ebx
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x9c]
mov edi, dword [eax + 0x14]
test edi, edi
je 0x42fdd3
mov eax, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0xac], eax
jmp 0x42fa00
mov eax, dword [edi + 0xc]
xor ecx, ecx
test eax, eax
je 0x42fa51
mov edi, eax
mov ebx, dword [edi + 0x14]
mov eax, dword [edi + 0x10]
cmp esi, ebx
mov edx, ebx
mov dword [ebp - 0xa0], eax
cmovbe edx, esi
test edx, edx
je 0x42fa3d
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xac]
mov dword [esp + 8], edx
mov dword [ebp - 0xa4], edx
mov dword [esp], eax
call sub.msvcrt.dll_putc
test eax, eax
mov edx, dword [ebp - 0xa4]
jne 0x42fa41
mov eax, esi
sub eax, ebx
test eax, eax
jns 0x42f9f5
mov eax, dword [edi + 8]
mov ecx, 1
test eax, eax
jne 0x42f9fe
test cl, cl
mov eax, dword [ebp - 0x9c]
jne 0x42fdd9
test edx, edx
je 0x42fa83
mov eax, dword [ebp - 0xac]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call sub.msvcrt.dll_putc
test eax, eax
jne 0x42fa87
mov eax, ebx
sub eax, esi
test eax, eax
js 0x42fe90
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x28]
cmp eax, ecx
je 0x42faa1
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x40]
cmp eax, ecx
je 0x42fab3
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x80]
lea ecx, [ebp - 0x78]
cmp eax, ecx
je 0x42fac5
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x60]
cmp eax, ecx
je 0x42fad7
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x9c]
mov edi, dword [eax + 8]
mov esi, dword [eax + 0x28]
cmp edi, 0x18f
jg 0x430260
test esi, esi
je 0x430190
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x68]
mov dword [esp + 4], 0
mov dword [ebp - 0x48], 0x10
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x48]
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x68], eax
sub esp, 8
mov dword [ebp - 0x60], edx
mov dword [eax], 0x6c707061
mov dword [eax + 4], 0x74616369
mov dword [eax + 8], 0x2f6e6f69
mov dword [eax + 0xc], 0x6e6f736a
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x64], eax
mov byte [edx + eax], 0
lea eax, [ebp - 0x78]
mov esi, dword [ebp - 0x68]
mov ebx, dword [ebp - 0x64]
mov dword [ebp - 0x78], 0x746e6f43
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x74], 0x2d746e65
mov dword [ebp - 0x70], 0x65707954
mov dword [ebp - 0x7c], 0xc
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x28]
mov byte [ebp - 0x6c], 0
mov dword [ebp - 0x40], 0x746e6f43
mov dword [ebp - 0x3c], 0x2d746e65
mov dword [ebp - 0x30], eax
mov eax, esi
mov dword [ebp - 0x38], 0x65707954
add eax, ebx
mov dword [ebp - 0x44], 0xc
mov byte [ebp - 0x34], 0
setne dl
test esi, esi
sete al
test dl, al
jne 0x4313c2
cmp ebx, 0xf
mov dword [ebp - 0x8c], ebx
ja 0x430800
cmp ebx, 1
jne 0x430b00
movzx eax, byte [esi]
mov byte [ebp - 0x28], al
lea eax, [ebp - 0x28]
mov dword [ebp - 0x2c], ebx
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x9c]
mov edi, dword [eax + 0x14]
test edi, edi
je 0x430570
mov eax, dword [ebp - 0x48]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0xac], eax
jmp 0x42fc0c
mov eax, dword [edi + 0xc]
xor ecx, ecx
test eax, eax
je 0x42fc5d
mov edi, eax
mov ebx, dword [edi + 0x14]
mov eax, dword [edi + 0x10]
cmp esi, ebx
mov edx, ebx
mov dword [ebp - 0xa0], eax
cmovbe edx, esi
test edx, edx
je 0x42fc49
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xac]
mov dword [esp + 8], edx
mov dword [ebp - 0xa4], edx
mov dword [esp], eax
call sub.msvcrt.dll_putc
test eax, eax
mov edx, dword [ebp - 0xa4]
jne 0x42fc4d
mov eax, esi
sub eax, ebx
test eax, eax
jns 0x42fc01
mov eax, dword [edi + 8]
mov ecx, 1
test eax, eax
jne 0x42fc0a
test cl, cl
mov eax, dword [ebp - 0x9c]
jne 0x430576
test edx, edx
je 0x42fc8f
mov eax, dword [ebp - 0xac]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call sub.msvcrt.dll_putc
test eax, eax
jne 0x42fc93
mov eax, ebx
sub eax, esi
test eax, eax
js 0x4305b0
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x28]
cmp eax, ecx
je 0x42fcad
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x40]
cmp eax, ecx
je 0x42fcbf
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x80]
lea ecx, [ebp - 0x78]
cmp eax, ecx
je 0x42fcd1
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x60]
cmp eax, ecx
je 0x42fce3
mov dword [esp], eax
call fcn.006ff4f0
lea eax, [ebp - 0x68]
pxor xmm0, xmm0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0x1000
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x9c]
movaps xmmword [ebp - 0x68], xmm0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
lea ecx, [eax + 0x28]
lea eax, [ebp - 0x48]
mov dword [esp], eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0x100
mov byte [ebp - 0x28], 0
mov byte [ebp - 0x27], 0x20
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x2c], 0xa
mov dword [ebp - 0x20], 1
call fcn.00657d90
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x5c]
sub esp, 4
mov eax, dword [ebp - 0x60]
mov esi, ecx
mov ebx, edx
sub esi, edx
sub ebx, eax
test esi, esi
jle 0x430d23
lea eax, [edx + 1]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x5c], eax
mov byte [edx], 0
mov eax, dword [ebp - 0x60]
mov dword [esp + 4], ebx
sub dword [ebp - 0x5c], 1
mov dword [esp], eax
call fcn.00434310
mov eax, dword [ebp - 0x3c]
sub esp, 8
mov dword [esp], eax
call fcn.00548438
mov eax, dword [ebp - 0x40]
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x60]
mov dword [esp], eax
call fcn.00548438
mov eax, dword [ebp - 0x64]
mov dword [esp], eax
call fcn.006ff4f0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret
mov edi, dword [ebp - 0xa8]
cmp dword [eax + 0x18], edi
je 0x42fe98
mov dword [esp], edi
call fcn.006f74c0
mov esi, dword [ebp - 0x44]
mov ebx, dword [eax + 0x14]
mov ecx, dword [ebp - 0x48]
mov eax, dword [eax + 0x10]
cmp esi, ebx
mov edx, ebx
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xa0], eax
cmovbe edx, esi
jmp 0x42fa5f
mov edi, dword [ebp - 0xa8]
cmp dword [eax + 0x18], edi
je 0x42ff98
mov dword [esp], edi
call fcn.006f74c0
mov esi, dword [ebp - 0x44]
mov ebx, dword [eax + 0x14]
mov ecx, dword [ebp - 0x48]
mov eax, dword [eax + 0x10]
cmp ebx, esi
mov edx, esi
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xa0], eax
cmovbe edx, ebx
jmp 0x42f7ea
mov edi, eax
mov eax, dword [ebp - 0x9c]
cmp dword [eax + 0x18], edi
je 0x430098
mov dword [esp], edi
call fcn.006f74c0
mov esi, dword [ebp - 0x44]
mov ebx, dword [eax + 0x14]
mov ecx, dword [ebp - 0x48]
mov eax, dword [eax + 0x10]
cmp esi, ebx
mov edx, ebx
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xa0], eax
cmovbe edx, esi
jmp 0x42f577
test edi, edi
je 0x42fa8f
cmp dword [ebp - 0xa8], edi
mov byte [ebp - 0xa0], 1
jne 0x430a45
mov dword [esp], pe_nt_image_headers32
call fcn.006ff530
mov ebx, eax
lea eax, [eax + 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0xa4], eax
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x48]
mov ecx, eax
mov dword [ebp - 0xac], eax
add ecx, esi
je 0x42fedf
test eax, eax
je 0x431395
cmp esi, 0xf
mov dword [ebp - 0x88], esi
ja 0x4306c0
cmp esi, 1
jne 0x430cf3
mov eax, dword [ebp - 0xac]
movzx eax, byte [eax]
mov byte [ebx + 0x18], al
mov eax, dword [ebp - 0xa4]
mov dword [ebx + 0x14], esi
mov byte [eax + esi], 0
lea eax, [ebx + 0x30]
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x2c]
mov dword [ebx + 0x28], eax
mov edx, ecx
mov dword [ebp - 0xac], ecx
add edx, esi
je 0x42ff30
test ecx, ecx
je 0x431289
cmp esi, 0xf
mov dword [ebp - 0x84], esi
ja 0x430b60
cmp esi, 1
jne 0x430cd0
mov ecx, dword [ebp - 0xac]
movzx edx, byte [ecx]
mov byte [ebx + 0x30], dl
mov dword [ebx + 0x2c], esi
mov byte [eax + esi], 0
mov eax, dword [ebp - 0xa8]
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], eax
movzx eax, byte [ebp - 0xa0]
mov dword [esp], eax
call fcn.006f83c0
mov eax, dword [ebp - 0x9c]
add dword [eax + 0x20], 1
jmp 0x42fa8f
test edi, edi
je 0x42f81a
cmp dword [ebp - 0xa8], edi
mov byte [ebp - 0xa0], 1
jne 0x430a82
mov dword [esp], pe_nt_image_headers32
call fcn.006ff530
mov ebx, eax
lea eax, [eax + 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0xa4], eax
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x48]
mov ecx, eax
mov dword [ebp - 0xac], eax
add ecx, esi
je 0x42ffdf
test eax, eax
je 0x4313b1
cmp esi, 0xf
mov dword [ebp - 0x88], esi
ja 0x430760
cmp esi, 1
jne 0x430ce0
mov eax, dword [ebp - 0xac]
movzx eax, byte [eax]
mov byte [ebx + 0x18], al
mov eax, dword [ebp - 0xa4]
mov dword [ebx + 0x14], esi
mov byte [eax + esi], 0
lea eax, [ebx + 0x30]
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x2c]
mov dword [ebx + 0x28], eax
mov edx, ecx
mov dword [ebp - 0xac], ecx
add edx, esi
je 0x430030
test ecx, ecx
je 0x4312d6
cmp esi, 0xf
mov dword [ebp - 0x84], esi
ja 0x430bb0
cmp esi, 1
jne 0x430caa
mov ecx, dword [ebp - 0xac]
movzx edx, byte [ecx]
mov byte [ebx + 0x30], dl
mov dword [ebx + 0x2c], esi
mov byte [eax + esi], 0
mov eax, dword [ebp - 0xa8]
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], eax
movzx eax, byte [ebp - 0xa0]
mov dword [esp], eax
call fcn.006f83c0
mov eax, dword [ebp - 0x9c]
add dword [eax + 0x20], 1
jmp 0x42f81a
test edi, edi
je 0x42f5a7
cmp dword [ebp - 0xa8], edi
mov byte [ebp - 0xa0], 1
jne 0x430ac0
mov dword [esp], pe_nt_image_headers32
call fcn.006ff530
mov ebx, eax
lea eax, [eax + 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0xa4], eax
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x48]
mov ecx, eax
mov dword [ebp - 0xac], eax
add ecx, esi
je 0x4300df
test eax, eax
je 0x4313a3
cmp esi, 0xf
mov dword [ebp - 0x88], esi
ja 0x430710
cmp esi, 1
jne 0x430d10
mov eax, dword [ebp - 0xac]
movzx eax, byte [eax]
mov byte [ebx + 0x18], al
mov eax, dword [ebp - 0xa4]
mov dword [ebx + 0x14], esi
mov byte [eax + esi], 0
lea eax, [ebx + 0x30]
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x2c]
mov dword [ebx + 0x28], eax
mov edx, ecx
mov dword [ebp - 0xac], ecx
add edx, esi
je 0x430130
test ecx, ecx
je 0x4312e2
cmp esi, 0xf
mov dword [ebp - 0x84], esi
ja 0x430b10
cmp esi, 1
jne 0x430cc0
mov ecx, dword [ebp - 0xac]
movzx edx, byte [ecx]
mov byte [ebx + 0x30], dl
mov dword [ebx + 0x2c], esi
mov byte [eax + esi], 0
mov eax, dword [ebp - 0xa8]
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], eax
movzx eax, byte [ebp - 0xa0]
mov dword [esp], eax
call fcn.006f83c0
mov eax, dword [ebp - 0x9c]
add dword [eax + 0x20], 1
jmp 0x42f5a7
mov ecx, dword [ebp - 0x9c]
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.00434310
sub esp, 8
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
lea esp, [edi - 8]
pop edi
ret
lea eax, [ebp - 0x8c]
lea ecx, [ebp - 0x30]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x8c]
sub esp, 8
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.msvcrt.dll_putchar
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x30]
jmp 0x42f4e4
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x48]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x90]
sub esp, 8
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x40], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.msvcrt.dll_putchar
mov ebx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x48]
jmp 0x42f49c
mov ebx, dword [eax + 0x30]
mov eax, esi
shl eax, 5
mov dword [ebp - 0xa0], eax
lea edx, [ebx + eax]
cmp edx, ebx
je 0x4302c4
mov eax, ebx
jmp 0x43028d
cmp byte [eax + 0xd], 7
je 0x43029d
add eax, 0x20
cmp edx, eax
je 0x4302c4
test byte [eax + 0xf], 0x10
mov ecx, eax
jne 0x430280
cmp dword [eax], 6
jne 0x430286
mov ecx, dword [eax + 8]
cmp ecx, str.status
je 0x430401
cmp dword [ecx], 0x74617473
jne 0x430286
cmp word [ecx + 4], 0x7375
je 0x430401
add eax, 0x20
cmp edx, eax
jne 0x43028d
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x40], 0
mov ecx, dword [eax + 0x38]
mov dword [ebp - 0xa4], ecx
xor ecx, ecx
mov word [ebp - 0x5c], cx
xor ecx, ecx
mov word [ebp - 0x3c], cx
mov ecx, dword [eax + 0x2c]
cmp ecx, esi
ja 0x430890
test ecx, ecx
jne 0x430846
test ebx, ebx
je 0x4310ab
mov dword [ebp - 0xac], 0x10
mov dword [ebp - 0xb0], 0x200
mov eax, dword [ebp - 0xa4]
mov esi, dword [eax]
mov eax, dword [esi + 4]
mov dword [ebp - 0xb8], eax
add eax, 0x10
mov dword [ebp - 0xa0], eax
mov eax, dword [esi]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xa0]
sub eax, ecx
add eax, esi
cmp ebx, eax
je 0x431089
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb8]
add eax, edx
cmp dword [ebp - 0xb4], eax
jae 0x430f0a
mov eax, dword [ebp - 0xa4]
mov esi, edx
cmp dword [eax + 4], edx
cmovae esi, dword [eax + 4]
mov eax, dword [eax + 0xc]
test eax, eax
mov dword [ebp - 0xa0], esi
jne 0x4303bd
mov dword [esp], 1
mov dword [ebp - 0xb4], edx
mov dword [ebp - 0xb0], ecx
call fcn.006ff530
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xb4]
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xa0]
add eax, 0x10
jne 0x430eb2
mov eax, dword [ebp - 0x9c]
xor ebx, ebx
mov eax, dword [eax + 0x28]
mov edx, eax
mov dword [ebp - 0xa0], eax
shl edx, 5
jmp 0x430875
cmp byte [ebx + 0xd], 8
je 0x430411
add ebx, 0x20
cmp edx, ebx
je 0x430913
test byte [ebx + 0xf], 0x10
mov eax, ebx
jne 0x4303f0
cmp dword [ebx], 5
jne 0x4303f6
mov eax, dword [ebx + 8]
cmp eax, 0x746891
je 0x430426
cmp dword [eax], 0x6f727265
jne 0x4303f6
cmp byte [eax + 4], 0x72
jne 0x4303f6
mov eax, dword [ebp - 0x9c]
mov esi, dword [eax + 0x28]
jmp 0x42faef
lea eax, [ebp - 0x8c]
lea ecx, [ebp - 0x30]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x8c]
sub esp, 8
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.msvcrt.dll_putchar
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x30]
jmp 0x42f751
lea eax, [ebp - 0x8c]
lea ecx, [ebp - 0x30]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x8c]
sub esp, 8
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.msvcrt.dll_putchar
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x30]
jmp 0x42f9cf
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x48]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x90]
sub esp, 8
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x40], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.msvcrt.dll_putchar
mov ebx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x48]
jmp 0x42f987
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x48]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x90]
sub esp, 8
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x40], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.msvcrt.dll_putchar
mov ebx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x48]
jmp 0x42f709
mov edi, dword [ebp - 0xa8]
cmp dword [eax + 0x18], edi
je 0x4305b8
mov dword [esp], edi
call fcn.006f74c0
mov esi, dword [ebp - 0x44]
mov ebx, dword [eax + 0x14]
mov ecx, dword [ebp - 0x48]
mov eax, dword [eax + 0x10]
cmp ebx, esi
mov edx, esi
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xa0], eax
cmovbe edx, ebx
jmp 0x42fc6b
test edi, edi
je 0x42fc9b
cmp dword [ebp - 0xa8], edi
mov byte [ebp - 0xa0], 1
jne 0x430c83
mov dword [esp], pe_nt_image_headers32
call fcn.006ff530
mov ebx, eax
lea eax, [eax + 0x18]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0xa4], eax
mov dword [ebx + 0x10], eax
mov eax, dword [ebp - 0x48]
mov ecx, eax
mov dword [ebp - 0xac], eax
add ecx, esi
je 0x4305ff
test eax, eax
je 0x431271
cmp esi, 0xf
mov dword [ebp - 0x88], esi
ja 0x430d62
cmp esi, 1
jne 0x430e90
mov eax, dword [ebp - 0xac]
movzx eax, byte [eax]
mov byte [ebx + 0x18], al
mov eax, dword [ebp - 0xa4]
mov dword [ebx + 0x14], esi
mov byte [eax + esi], 0
lea eax, [ebx + 0x30]
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x2c]
mov dword [ebx + 0x28], eax
mov edx, ecx
mov dword [ebp - 0xac], ecx
add edx, esi
je 0x430650
test ecx, ecx
je 0x431295
cmp esi, 0xf
mov dword [ebp - 0x84], esi
ja 0x430dae
cmp esi, 1
jne 0x430e82
mov ecx, dword [ebp - 0xac]
movzx edx, byte [ecx]
mov byte [ebx + 0x30], dl
mov dword [ebx + 0x2c], esi
mov byte [eax + esi], 0
mov eax, dword [ebp - 0xa8]
mov dword [esp + 8], edi
mov dword [esp + 4], ebx
mov dword [esp + 0xc], eax
movzx eax, byte [ebp - 0xa0]
mov dword [esp], eax
call fcn.006f83c0
mov eax, dword [ebp - 0x9c]
add dword [eax + 0x20], 1
jmp 0x42fc9b
test ebx, ebx
lea eax, [ebp - 0x40]
je 0x42f49c
jmp 0x430238
lea eax, [ebp - 0x88]
lea ecx, [ebx + 0x10]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x88]
sub esp, 8
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x18], edx
mov ecx, dword [ebp - 0xac]
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_putchar
mov esi, dword [ebp - 0x88]
mov eax, dword [ebx + 0x10]
jmp 0x42ff09
lea eax, [ebp - 0x88]
lea ecx, [ebx + 0x10]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x88]
sub esp, 8
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x18], edx
mov ecx, dword [ebp - 0xac]
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_putchar
mov esi, dword [ebp - 0x88]
mov eax, dword [ebx + 0x10]
jmp 0x430109
lea eax, [ebp - 0x88]
lea ecx, [ebx + 0x10]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x88]
sub esp, 8
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x18], edx
mov ecx, dword [ebp - 0xac]
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_putchar
mov esi, dword [ebp - 0x88]
mov eax, dword [ebx + 0x10]
jmp 0x430009
test ebx, ebx
lea eax, [ebp - 0x28]
je 0x42f9cf
jmp 0x4304a8
test ebx, ebx
lea eax, [ebp - 0x40]
je 0x42f987
jmp 0x4304f8
test ebx, ebx
lea eax, [ebp - 0x28]
je 0x42f751
jmp 0x43045c
test ebx, ebx
lea eax, [ebp - 0x40]
je 0x42f709
jmp 0x430548
test ebx, ebx
lea eax, [ebp - 0x28]
je 0x42f4e4
jmp 0x4301e8
lea eax, [ebp - 0x8c]
lea ecx, [ebp - 0x30]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x8c]
sub esp, 8
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], edx
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.msvcrt.dll_putchar
mov ebx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x30]
jmp 0x42fbdb
lea eax, [ecx + 1]
shr eax, 1
add eax, ecx
cmp ecx, eax
mov dword [ebp - 0xac], eax
jae 0x430890
shl eax, 5
shl ecx, 5
test ebx, ebx
je 0x431223
test eax, eax
jne 0x431210
mov edx, dword [ebp - 0xa0]
xor ebx, ebx
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xac]
mov dword [eax + 0x30], ebx
mov dword [eax + 0x2c], ecx
mov esi, esi
lea edi, [edi]
mov eax, 0x405
mov dword [ebp - 0x60], str.status
mov dword [ebp - 0x68], 6
mov word [ebp - 0x5a], ax
mov dword [edx], 6
mov eax, dword [ebp - 0x64]
mov esi, dword [ebp - 0x9c]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x60]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x5c]
mov dword [edx + 0xc], eax
mov eax, dword [esi + 0x28]
mov dword [ebp - 0x48], edi
shl eax, 5
add ebx, eax
mov eax, edi
cdq
mov eax, 0x1f6
mov dword [ebp - 0x44], edx
mov word [ebp - 0x3a], ax
mov dword [ebx + 0x10], edi
mov eax, dword [ebp - 0x44]
mov dword [ebx + 0x14], eax
mov eax, dword [ebp - 0x40]
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebx + 0x1c], eax
mov eax, dword [esi + 0x28]
mov ebx, dword [esi + 0x30]
lea edx, [eax + 1]
mov dword [ebp - 0xa0], eax
mov dword [esi + 0x28], edx
shl edx, 5
add edx, ebx
cmp edx, ebx
jne 0x430401
mov ebx, dword [ebp - 0x9c]
mov eax, dword [ebx + 0x38]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebx + 8]
mov dword [esp], eax
call fcn.004240b0
mov dword [esp], eax
mov esi, eax
call sub.msvcrt.dll_strstr
xor edx, edx
mov dword [ebp - 0xa4], eax
xor eax, eax
mov word [ebp - 0x5c], ax
mov word [ebp - 0x3c], dx
mov edx, ebx
mov eax, dword [ebx + 0x28]
mov ebx, dword [ebx + 0x2c]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
cmp eax, ebx
mov ecx, eax
jb 0x430c00
mov edx, dword [ebp - 0x9c]
test ebx, ebx
mov edx, dword [edx + 0x30]
jne 0x430e32
test edx, edx
mov dword [ebp - 0xac], 0x10
je 0x431004
mov dword [ebp - 0xb0], 0x200
mov edi, dword [ebp - 0xa0]
mov ecx, dword [edi]
mov edi, dword [ecx + 4]
mov dword [ebp - 0xb8], edi
add edi, 0x10
mov dword [ebp - 0xb4], edi
mov edi, dword [ecx]
mov dword [ebp - 0xbc], edi
mov edi, dword [ebp - 0xb4]
sub edi, ebx
add edi, ecx
cmp edx, edi
je 0x430fe2
mov edi, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb8]
add eax, edi
cmp eax, dword [ebp - 0xbc]
jbe 0x430f8e
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax + 0xc]
cmp dword [eax + 4], edi
cmovae edi, dword [eax + 4]
test ecx, ecx
jne 0x430a2a
mov dword [esp], 1
mov dword [ebp - 0xb4], edx
call fcn.006ff530
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov eax, edi
add eax, 0x10
jne 0x430f4a
mov eax, dword [ebp - 0x9c]
xor edx, edx
mov eax, dword [eax + 0x28]
jmp 0x430e6b
mov esi, dword [ebp - 0x44]
mov ebx, dword [edi + 0x14]
cmp esi, ebx
mov eax, ebx
cmovbe eax, esi
test eax, eax
je 0x430a70
mov dword [esp + 8], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call sub.msvcrt.dll_putc
test eax, eax
jne 0x430a74
mov eax, esi
sub eax, ebx
shr eax, 0x1f
mov dword [ebp - 0xa0], eax
jmp 0x42feab
mov esi, dword [ebp - 0x44]
mov ebx, dword [edi + 0x14]
cmp esi, ebx
mov eax, ebx
cmovbe eax, esi
test eax, eax
je 0x430aad
mov dword [esp + 8], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call sub.msvcrt.dll_putc
test eax, eax
jne 0x430ab1
mov eax, esi
sub eax, ebx
shr eax, 0x1f
mov dword [ebp - 0xa0], eax
jmp 0x42ffab
mov esi, dword [ebp - 0x44]
mov ebx, dword [edi + 0x14]
cmp esi, ebx
mov eax, ebx
cmovbe eax, esi
test eax, eax
je 0x430aeb
mov dword [esp + 8], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call sub.msvcrt.dll_putc
test eax, eax
jne 0x430aef
mov eax, esi
sub eax, ebx
shr eax, 0x1f
mov dword [ebp - 0xa0], eax
jmp 0x4300ab
test ebx, ebx
lea eax, [ebp - 0x28]
je 0x42fbdb
jmp 0x430828
lea eax, [ebp - 0x84]
lea ecx, [ebx + 0x28]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x84]
sub esp, 8
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x30], edx
mov ecx, dword [ebp - 0xac]
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_putchar
mov esi, dword [ebp - 0x84]
mov eax, dword [ebx + 0x28]
jmp 0x430154
lea eax, [ebp - 0x84]
lea ecx, [ebx + 0x28]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x84]
sub esp, 8
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x30], edx
mov ecx, dword [ebp - 0xac]
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_putchar
mov esi, dword [ebp - 0x84]
mov eax, dword [ebx + 0x28]
jmp 0x42ff54
lea eax, [ebp - 0x84]
lea ecx, [ebx + 0x28]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x84]
sub esp, 8
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x30], edx
mov ecx, dword [ebp - 0xac]
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_putchar
mov esi, dword [ebp - 0x84]
mov eax, dword [ebx + 0x28]
jmp 0x430054
mov edx, dword [edx + 0x30]
shl eax, 5
mov edi, 0x405
mov dword [ebp - 0x40], 0x746891
add eax, edx
mov word [ebp - 0x3a], di
mov dword [ebp - 0x48], 5
mov dword [eax], 5
mov ecx, dword [ebp - 0x44]
mov edi, dword [ebp - 0x9c]
mov dword [eax + 4], ecx
mov ecx, dword [ebp - 0x40]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x3c]
mov dword [eax + 0xc], ecx
mov eax, dword [edi + 0x28]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x60], esi
shl eax, 5
add eax, edx
mov edx, 0x405
mov dword [ebp - 0x68], ecx
mov word [ebp - 0x5a], dx
mov dword [eax + 0x10], ecx
mov edx, dword [ebp - 0x64]
mov dword [eax + 0x14], edx
mov edx, dword [ebp - 0x60]
mov dword [eax + 0x18], edx
mov edx, dword [ebp - 0x5c]
mov dword [eax + 0x1c], edx
mov eax, dword [edi + 0x28]
lea esi, [eax + 1]
mov dword [ebp - 0xa0], eax
mov dword [edi + 0x28], esi
jmp 0x42faef
mov esi, dword [ebp - 0x44]
mov ebx, dword [edi + 0x14]
cmp esi, ebx
mov eax, ebx
cmovbe eax, esi
test eax, eax
jne 0x430dfa
mov eax, esi
sub eax, ebx
shr eax, 0x1f
mov dword [ebp - 0xa0], eax
jmp 0x4305cb
test esi, esi
je 0x430054
jmp 0x430bd8
test esi, esi
je 0x430154
jmp 0x430b38
test esi, esi
je 0x42ff54
jmp 0x430b88
test esi, esi
mov eax, dword [ebp - 0xa4]
je 0x430009
jmp 0x430788
test esi, esi
mov eax, dword [ebp - 0xa4]
je 0x42ff09
jmp 0x4306e8
test esi, esi
mov eax, dword [ebp - 0xa4]
je 0x430109
jmp 0x430738
test eax, eax
je 0x430e1d
sub ecx, eax
mov edi, ebx
lea esi, [ecx + 1]
shr esi, 1
add ecx, esi
lea esi, [edi + 1]
cmp esi, ecx
cmovb esi, ecx
test esi, esi
je 0x430ea3
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.msvcrt.dll_srand
mov dword [ebp - 0x60], eax
lea edx, [eax + edi]
add eax, esi
mov dword [ebp - 0x58], eax
jmp 0x42fd76
lea eax, [ebp - 0x88]
lea ecx, [ebx + 0x10]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x88]
sub esp, 8
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x18], edx
mov ecx, dword [ebp - 0xac]
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_putchar
mov esi, dword [ebp - 0x88]
mov eax, dword [ebx + 0x10]
jmp 0x430629
lea eax, [ebp - 0x84]
lea ecx, [ebx + 0x28]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.006cfa40
mov edx, dword [ebp - 0x84]
sub esp, 8
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x30], edx
mov ecx, dword [ebp - 0xac]
mov dword [esp + 8], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_putchar
mov esi, dword [ebp - 0x84]
mov eax, dword [ebx + 0x28]
jmp 0x430674
mov dword [esp + 8], eax
mov eax, dword [edi + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call sub.msvcrt.dll_putc
test eax, eax
je 0x430c98
jmp 0x430c9c
mov esi, dword [ebp - 0x68]
mov edi, ebx
test esi, esi
je 0x430fc3
mov ecx, dword [ebp - 0x54]
jmp 0x430d36
lea edi, [ebx + 1]
shr edi, 1
add edi, ebx
cmp ebx, edi
mov dword [ebp - 0xac], edi
jae 0x430c03
shl edi, 5
shl ebx, 5
test edx, edx
je 0x4311b8
test edi, edi
je 0x4311b1
cmp ebx, edi
mov dword [ebp - 0xb0], edi
jb 0x4309a4
mov edi, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xac]
mov dword [edi + 0x30], edx
mov dword [edi + 0x2c], ecx
jmp 0x430c03
test esi, esi
je 0x430674
jmp 0x430dd6
test esi, esi
mov eax, dword [ebp - 0xa4]
je 0x430629
jmp 0x430d8a
mov dword [esp], eax
call fcn.00548438
xor eax, eax
jmp 0x430d52
mov dword [esp], eax
mov dword [ebp - 0xb4], edx
mov dword [ebp - 0xb0], ecx
call sub.msvcrt.dll_memset
test eax, eax
mov esi, eax
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ebp - 0xb4]
je 0x4303cc
mov eax, dword [ebp - 0xa0]
mov dword [esi + 4], 0
mov dword [ebp - 0xa0], 0x10
mov dword [esi], eax
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xa4]
mov dword [eax], esi
mov eax, edx
mov dword [esi + 4], eax
add esi, dword [ebp - 0xa0]
je 0x4303cc
test ecx, ecx
je 0x430f2d
mov dword [esp + 8], ecx
mov dword [esp + 4], ebx
mov dword [esp], esi
call sub.msvcrt.dll_putchar
mov eax, dword [ebp - 0x9c]
mov ebx, esi
mov eax, dword [eax + 0x28]
mov edx, eax
mov dword [ebp - 0xa0], eax
shl edx, 5
add edx, esi
jmp 0x430875
mov dword [esp], eax
mov dword [ebp - 0xb4], edx
call sub.msvcrt.dll_memset
test eax, eax
mov ecx, eax
mov edx, dword [ebp - 0xb4]
je 0x430a35
mov dword [ecx], edi
mov edi, dword [ebp - 0xa0]
mov dword [ecx + 4], 0
mov dword [ebp - 0xb4], 0x10
mov eax, dword [edi]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [edi], ecx
mov edi, dword [ebp - 0xb4]
mov dword [ecx + 4], eax
add edi, ecx
je 0x430a35
test ebx, ebx
je 0x430fb3
mov dword [esp + 8], ebx
mov dword [esp + 4], edx
mov dword [esp], edi
call sub.msvcrt.dll_putchar
mov eax, dword [ebp - 0x9c]
mov edx, edi
mov eax, dword [eax + 0x28]
jmp 0x430e6b
mov dword [esp], 1
call fcn.006ff530
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov edi, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
sub edi, eax
jmp 0x430e2a
mov edi, dword [ebp - 0xb8]
sub edi, ebx
add edi, dword [ebp - 0xb0]
cmp edi, dword [ebp - 0xbc]
ja 0x4309d8
mov dword [ecx + 4], edi
jmp 0x430e6b
mov edi, 0x200
mov ebx, dword [ebp - 0xa0]
mov eax, edi
mov ebx, dword [ebx]
test ebx, ebx
je 0x43101e
add eax, dword [ebx + 4]
cmp eax, dword [ebx]
jbe 0x431076
mov ecx, dword [ebp - 0xa0]
mov eax, edi
cmp dword [ecx + 4], edi
cmovae eax, dword [ecx + 4]
mov ebx, eax
mov eax, dword [ecx + 0xc]
test eax, eax
je 0x4311d6
mov eax, ebx
add eax, 0x10
je 0x430a35
mov dword [esp], eax
call sub.msvcrt.dll_memset
test eax, eax
je 0x430a35
mov ecx, dword [ebp - 0xa0]
mov dword [eax], ebx
mov dword [eax + 4], 0
mov ebx, dword [ecx]
mov dword [eax + 8], ebx
mov dword [ecx], eax
mov ebx, eax
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + 0x28]
mov eax, dword [ebx + 4]
lea edx, [ebx + eax + 0x10]
add eax, edi
mov dword [ebx + 4], eax
mov eax, ecx
jmp 0x430e6b
mov eax, dword [ebp - 0xb8]
sub eax, ecx
add eax, dword [ebp - 0xb0]
cmp dword [ebp - 0xb4], eax
jb 0x430357
mov dword [esi + 4], eax
jmp 0x430875
mov eax, 0x200
mov dword [ebp - 0xac], 0x10
mov esi, eax
mov eax, dword [ebp - 0xa4]
mov edx, dword [eax]
test edx, edx
je 0x4310d1
mov eax, dword [edx + 4]
add eax, esi
cmp eax, dword [edx]
jbe 0x43111e
mov eax, dword [ebp - 0xa4]
mov ebx, esi
cmp dword [eax + 4], esi
cmovae ebx, dword [eax + 4]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4311f3
mov eax, ebx
add eax, 0x10
je 0x4303cc
mov dword [esp], eax
call sub.msvcrt.dll_memset
test eax, eax
je 0x4303cc
mov ecx, dword [ebp - 0xa4]
mov dword [eax], ebx
mov dword [eax + 4], 0
mov edx, dword [ecx]
mov dword [eax + 8], edx
mov edx, eax
mov dword [ecx], eax
mov eax, dword [edx + 4]
lea ebx, [edx + eax + 0x10]
add eax, esi
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + 0x28]
mov edx, eax
mov dword [ebp - 0xa0], eax
shl edx, 5
add edx, ebx
jmp 0x430875
mov ebx, eax
mov eax, dword [ebp - 0x48]
lea edi, [ebp - 0x40]
cmp eax, edi
je 0x431159
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x80]
lea edi, [ebp - 0x78]
cmp eax, edi
je 0x43116b
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x68]
lea edi, [ebp - 0x60]
cmp eax, edi
je 0x43117d
mov dword [esp], eax
call fcn.006ff4f0
mov dword [esp], ebx
call fcn.0053a5b0
mov esi, eax
mov eax, dword [ebx + 0x10]
cmp dword [ebp - 0xa4], eax
je 0x43119a
mov dword [esp], eax
call fcn.006ff4f0
mov eax, esi
mov dword [esp], eax
call fcn.006ff710
mov dword [esp], ebx
call fcn.006ff4f0
call fcn.006ffd80
xor edx, edx
jmp 0x430e6b
test edi, edi
je 0x430e6b
jmp 0x431009
lea ecx, [ebp - 0x48]
call fcn.006c0ad0
jmp 0x431159
mov dword [esp], 1
call fcn.006ff530
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
jmp 0x43103a
mov dword [esp], 1
call fcn.006ff530
mov ecx, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
jmp 0x4310eb
cmp ecx, eax
mov dword [ebp - 0xb0], eax
jae 0x430875
jmp 0x430323
test eax, eax
mov edx, dword [ebp - 0xa0]
jne 0x4310ba
jmp 0x430875
mov dword [esp], eax
call fcn.006ff710
mov dword [esp], ebx
call fcn.006ff4f0
call fcn.006ffd80
jmp 0x43119c
mov dword [esp], 0x746860
call fcn.006f75f0
mov ebx, eax
call fcn.006ff900
jmp 0x4311cc
mov dword [esp], 0x746860
call fcn.006f75f0
mov dword [esp], 0x746860
call fcn.006f75f0
mov esi, eax
mov eax, dword [ebx + 0x10]
cmp dword [ebp - 0xa4], eax
je 0x4312b6
mov dword [esp], eax
call fcn.006ff4f0
mov eax, esi
jmp 0x431236
mov dword [esp], 0x746860
call fcn.006f75f0
mov dword [esp], 0x746860
call fcn.006f75f0
jmp 0x431145
mov ebx, eax
jmp 0x431159
mov dword [esp], 0x746860
call fcn.006f75f0
mov dword [esp], 0x746860
call fcn.006f75f0
mov ebx, eax
jmp 0x43116b
mov dword [esp], 0x746860
call fcn.006f75f0
mov dword [esp], 0x746860
call fcn.006f75f0
mov ebx, eax
mov eax, dword [ebp - 0x3c]
mov dword [esp], eax
call fcn.00548438
mov eax, dword [ebp - 0x40]
mov dword [esp], eax
call fcn.006ff4f0
mov eax, dword [ebp - 0x60]
mov dword [esp], eax
call fcn.00548438
mov eax, dword [ebp - 0x64]
mov dword [esp], eax
call fcn.006ff4f0
mov dword [esp], ebx
call fcn.0053a5b0
jmp 0x4312f8
mov dword [esp], 0x746860
call fcn.006f75f0
mov dword [esp], 0x746860
call fcn.006f75f0
jmp 0x431319
mov ebx, eax
jmp 0x4311cc
mov dword [esp], 0x746860
call fcn.006f75f0
jmp 0x43138c
mov dword [esp], 0x746860
call fcn.006f75f0
jmp 0x43138c
mov dword [esp], 0x746860
call fcn.006f75f0
jmp 0x431145
mov dword [esp], 0x746860
call fcn.006f75f0
mov esi, eax
mov eax, dword [ebx + 0x10]
cmp dword [ebp - 0xa4], eax
je 0x4313e3
mov dword [esp], eax
call fcn.006ff4f0
mov eax, esi
mov dword [esp], eax
call fcn.006ff710
mov dword [esp], ebx
call fcn.006ff4f0
call fcn.006ffd80
jmp 0x4313e5