Function at 0x42cae7
Capabilities:
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0xb4
push ebx
push esi
xor ebx, ebx
cmp dword [ebp + 0x74], ebx
mov esi, ecx
push edi
mov dword [ebp + 0x60], esi
jne 0x42cb07
mov eax, dword [esi + 0x28]
mov dword [ebp + 0x74], eax
call fcn.00439aed
lea ecx, [ebp + 0x70]
call fcn.0040ddcf
test byte [esi + 0xc], 1
je 0x42cb26
cmp dword [0x4bde94], ebx
mov byte [ebp + 0x4b], 1
jne 0x42cb2a
mov byte [ebp + 0x4b], 0
mov edi, dword [ebp + 0x70]
cmp word [edi], 0x40
jne 0x42cb3c
inc edi
inc edi
mov dword [ebp + 0x70], edi
mov byte [ebp + 0x4b], 0
mov dword [ebp + 0x64], 0x80004001
cmp word [edi], bx
je 0x42da40
and dword [ebp + 0x38], 0
and dword [ebp + 0x4c], 0
xor bl, bl
cmp word [edi], 0x2d
mov byte [ebp + 0x5f], 0
je 0x42cd48
cmp byte [ebp + 0x4b], 0
je 0x42cbc2
test byte [esi + 0xc], 2
je 0x42cb7d
push edi
lea ecx, [ebp + 0x38]
call fcn.004457ae
mov eax, dword [eax]
jmp 0x42cb90
push 1
push 0
lea eax, [ebp + 0x38]
push eax
push edi
mov ecx, esi
call fcn.0044c04c
mov eax, dword [ebp + 0x38]
test bl, bl
mov dword [ebp + 0x4c], eax
jne 0x42cbb8
test byte [esi + 0xc], 0x14
je 0x42cbb8
push dword [ebp + 0x7c]
mov ecx, esi
push 0x11
push 0
push eax
call fcn.0041ab5d
test byte [esi + 0xc], 0x10
jne 0x42cbc2
and dword [ebp + 0x4c], 0
jmp 0x42cbc2
test byte [esi + 0xc], 8
jne 0x42cbc2
mov byte [ebp + 0x5f], 2
xor edi, edi
test bl, bl
mov dword [ebp + 0x44], edi
jne 0x42cd63
lea ecx, [ebp + 0x70]
mov byte [ebp + 0x43], 0xa
call fcn.0040ddcf
lea ecx, [ebp + 0x3c]
call fcn.0043d3a5
mov edi, dword [ebp + 0x70]
xor eax, eax
jmp 0x42cbed
inc edi
inc edi
inc eax
cmp word [edi], 0x5e
je 0x42cbea
dec eax
test ax, ax
jl 0x42cc29
inc eax
movsx esi, ax
mov ecx, dword [ebp + 0x60]
and dword [ebp + 0x70], 0
push 1
push 0
lea eax, [ebp + 0x70]
push eax
push edi
call fcn.0044c04c
mov eax, dword [ebp + 0x44]
mov edi, dword [ebp + 0x70]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x44], edi
mov dword [ebp + 0x70], eax
call fcn.00437884
dec esi
jne 0x42cbfd
lea eax, [ebp + 0x58]
push eax
xor esi, esi
mov dword [ebp + 0x58], edi
call fcn.00405061
mov eax, dword [ebp + 0x58]
sub eax, edi
sar eax, 1
dec eax
pop ecx
mov ecx, edi
js 0x42cda1
inc eax
cmp word [ecx], 0x25
jne 0x42cc50
inc esi
inc ecx
inc ecx
dec eax
jne 0x42cc49
cmp si, 2
jl 0x42cda1
lea eax, [ebp + 0x58]
push eax
mov dword [ebp + 0x58], edi
call fcn.00405061
mov esi, dword [ebp + 0x58]
pop ecx
push esi
lea ecx, [ebp + 0x54]
call fcn.00445746
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp + 0x60]
mov ebx, eax
xor eax, eax
push 1
mov dword [ebp + 0x50], eax
push eax
mov word [esi], ax
lea eax, [ebp + 0x50]
push eax
push edi
call fcn.0044c04c
mov eax, dword [ebp + 0x50]
mov dword [ebp + 0x70], eax
movzx eax, word [eax]
jmp 0x42ccb8
cmp ax, 0x40
jne 0x42ccbf
add dword [ebp + 0x70], 2
mov eax, dword [ebp + 0x70]
mov ax, word [eax]
mov byte [ebp + 0x4b], 0
test ax, ax
jne 0x42cca4
jmp 0x42ccc5
cmp word [edi], 0x2d
je 0x42cd25
push dword [ebp + 0x70]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
lea eax, [esi + ebx + 3]
push eax
lea ecx, [ebp + 0x44]
call fcn.0043d3ea
mov edi, dword [ebp + 0x44]
push esi
push dword [ebp + 0x70]
push edi
call fcn.00405049
mov eax, dword [ebp + 0x44]
inc ebx
push ebx
push dword [ebp + 0x54]
lea eax, [eax + esi*2]
push eax
call fcn.00405049
mov eax, dword [ebp + 0x44]
add esp, 0x18
cmp word [eax], 0x5e
lea ecx, [ebp + 0x50]
jne 0x42cd94
dec byte [ebp + 0x43]
js 0x42cd80
call fcn.00437884
lea ecx, [ebp + 0x54]
call fcn.00437884
jmp 0x42cbe6
lea ecx, [ebp + 0x50]
call fcn.00437884
lea ecx, [ebp + 0x54]
call fcn.00437884
lea ecx, [ebp + 0x3c]
call fcn.00437884
lea ecx, [ebp + 0x44]
call fcn.00437884
mov esi, dword [ebp + 0x60]
mov bl, byte [edi]
inc edi
inc edi
cmp word [edi], 0x20
mov dword [ebp + 0x70], edi
jne 0x42cb64
inc edi
inc edi
mov dword [ebp + 0x70], edi
jmp 0x42cb64
cmp dword [ebp + 0x4c], edi
je 0x42cd78
push dword [ebp + 0x7c]
mov ecx, esi
push 0x21
push edi
push dword [ebp + 0x4c]
call fcn.0041ab5d
mov dword [ebp + 0x64], edi
jmp 0x42e4fe
mov dword [ebp + 0x64], 0x80070057
call fcn.00437884
lea ecx, [ebp + 0x54]
jmp 0x42e122
call fcn.00437884
lea ecx, [ebp + 0x54]
call fcn.00437884
mov ax, word [edi]
cmp ax, 0x28
je 0x42cdb0
cmp ax, 0x7b
jne 0x42cdd5
mov eax, dword [ebp + 0x44]
mov ecx, dword [ebp + 0x60]
and dword [ebp + 0x44], 0
push 1
mov dword [ebp + 0x70], eax
push 0
lea eax, [ebp + 0x44]
push eax
push edi
call fcn.0044b25d
lea ecx, [ebp + 0x70]
call fcn.00437884
jmp 0x42cde3
cmp dword [ebp + 0x44], edi
je 0x42cde3
push edi
lea ecx, [ebp + 0x44]
call fcn.0044580a
mov eax, dword [ebp + 0x44]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x70], eax
call fcn.0040ddcf
mov esi, dword [ebp + 0x70]
mov ax, word [esi]
cmp ax, 0x23
je 0x42da28
test ax, ax
je 0x42da28
cmp ax, 0x28
je 0x42e524
cmp ax, 0x7b
je 0x42e51e
cmp ax, 0x5b
jne 0x42ce2f
cmp word [esi + 2], 0x5d
je 0x42e51e
cmp ax, 0x46
mov edi, esi
mov dword [ebp + 0x58], edi
mov ebx, esi
jne 0x42ce58
cmp word [esi + 2], 0x49
jne 0x42ce58
cmp word [esi + 4], 0x4e
jne 0x42ce58
cmp word [esi + 6], 0x44
jne 0x42ce58
cmp word [esi + 8], 0x20
je 0x42ce6c
mov ecx, dword [ebp + 0x60]
push 1
push 0
lea eax, [ebp + 0x3c]
push eax
push esi
call fcn.0044c04c
mov ebx, dword [ebp + 0x3c]
mov ax, word [esi]
and dword [ebp + 0x54], 0
push 0x22
pop ecx
cmp ax, cx
push 0x7c
mov dword [ebp + 0x50], ecx
pop edx
je 0x42ce89
cmp ax, dx
mov dword [ebp + 0x50], edx
jne 0x42cee2
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov cx, word [ebp + 0x50]
cmp word [esi], cx
lea eax, [esi + eax*2 - 2]
jne 0x42ceb4
mov ecx, dword [ebp + 0x50]
cmp word [eax], cx
jne 0x42ceb4
inc edi
inc edi
dec eax
dec eax
inc dword [ebp + 0x54]
cmp word [edi], cx
mov dword [ebp + 0x58], edi
je 0x42cea0
and word [eax + 2], 0
cmp dword [ebp + 0x54], 0
jle 0x42cece
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
sub eax, dword [ebp + 0x54]
and word [ebx + eax*2], 0
lea ecx, [ebp + 0x58]
call fcn.0040ddcf
mov edi, dword [ebp + 0x58]
mov eax, edi
sub eax, esi
sar eax, 1
lea ebx, [ebx + eax*2]
lea esi, [ebp + 0x54]
mov dword [ebp + 0x54], edi
call fcn.004110d9
mov eax, dword [ebp + 0x54]
sub eax, edi
sar eax, 1
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x54], ebx
call fcn.004110d9
mov esi, dword [ebp + 0x54]
mov eax, esi
sub eax, ebx
sar eax, 1
push edi
mov dword [ebp + 0x54], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], esi
call fcn.0040ddcf
mov esi, dword [ebp + 0x50]
xor eax, eax
cmp esi, 3
mov dword [ebp + 0x30], eax
jl 0x42cfed
cmp esi, 0x7f
jg 0x42cfed
xor ecx, ecx
mov cx, word [edi]
push ecx
call fcn.00412751
add esp, 4
test al, al
mov al, cl
je 0x42cf4f
and al, 0xdf
jmp 0x42cf56
cmp cx, 0xff
ja 0x42cf5b
lea ecx, [ebp + 0x31]
jmp 0x42cf65
mov esi, dword [ebp + 0x50]
mov byte [ebp + 0x31], ch
lea ecx, [ebp + 0x32]
inc esi
xor edx, edx
mov dx, word [edi + 2]
mov byte [ebp + 0x30], al
push edx
call fcn.00412751
add esp, 4
test al, al
mov al, dl
je 0x42cf84
and al, 0xdf
mov byte [ecx], al
inc ecx
jmp 0x42cf92
mov byte [ecx], al
inc ecx
cmp dx, 0xff
jbe 0x42cf92
mov byte [ecx], dh
inc ecx
inc esi
xor edx, edx
mov dx, word [edi + 4]
push edx
call fcn.00412751
add esp, 4
test al, al
mov al, dl
je 0x42cfae
and al, 0xdf
mov byte [ecx], al
inc ecx
jmp 0x42cfbc
mov byte [ecx], al
inc ecx
cmp dx, 0xff
jbe 0x42cfbc
mov byte [ecx], dh
inc ecx
inc esi
cmp dword [ebp + 0x50], 4
jl 0x42cfea
xor edx, edx
mov dx, word [edi + 6]
push edx
call fcn.00412751
add esp, 4
test al, al
mov al, dl
je 0x42cfdd
and al, 0xdf
mov byte [ecx], al
jmp 0x42cfea
cmp dx, 0xff
mov byte [ecx], al
jbe 0x42cfea
mov byte [ecx + 1], dh
inc esi
mov eax, dword [ebp + 0x30]
mov edx, dword [ebp + 0x50]
shl esi, 8
or esi, edx
cmp esi, 0x303
jne 0x42d059
cmp eax, 0x444553
je 0x42d043
cmp eax, 0x524944
je 0x42d030
cmp eax, 0x544553
jne 0x42d395
push dword [ebp + 0x74]
add edi, 6
push edi
push 1
add ebx, 6
mov ecx, dword [ebp + 0x60]
push ebx
call fcn.00420aa6
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
push 0
add edi, 6
push edi
call fcn.0046b57d
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 6
push edi
call fcn.0045392f
jmp 0x42d9fb
cmp esi, 0x606
jne 0x42d0b0
cmp eax, 0x45524854
jne 0x42d395
push 6
push edi
push str.THREAD
call fcn.00438aa1
add esp, 0xc
test al, al
je 0x42d395
cmp byte [ebp + 0x5f], 0
je 0x42d09c
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041ab5d
add edi, 0xc
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push edi
call fcn.00474e74
jmp 0x42d9fb
cmp esi, 0x404
jne 0x42d395
mov ecx, 0x4d455449
cmp eax, ecx
ja 0x42d8ff
je 0x42d8de
mov ecx, 0x46544547
cmp eax, ecx
ja 0x42d554
je 0x42d540
mov ecx, 0x45444948
cmp eax, ecx
ja 0x42d344
je 0x42d32d
mov ecx, 0x44494c53
cmp eax, ecx
ja 0x42d248
je 0x42d231
cmp eax, 0x43454a45
je 0x42d220
cmp eax, 0x43455845
je 0x42d208
cmp eax, 0x434c4143
je 0x42d1f5
cmp eax, 0x4350544e
je 0x42d1e4
cmp eax, 0x44414552
je 0x42d1a7
cmp eax, 0x44414f4c
je 0x42d164
cmp eax, 0x44415049
jne 0x42d395
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00450e15
jmp 0x42d9fb
cmp byte [ebp + 0x5f], 0
je 0x42d17c
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041ab5d
add edi, 8
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x74], edi
call fcn.0040ddcf
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
call fcn.0042edd5
mov ecx, dword [ebp + 0x60]
push 1
mov dword [ebp + 0x64], eax
call fcn.0045fcd8
jmp 0x42e48e
push 4
push ebx
push str.READ
call fcn.00438aa1
add esp, 0xc
test al, al
je 0x42d3b8
cmp dword [ebp + 0x54], 4
je 0x42d1d0
cmp word [ebx + 8], 0x2d
jne 0x42d3b8
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004610b2
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004479e9
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.0047b6c3
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
xor eax, eax
push eax
push eax
push eax
add edi, 8
push edi
push ecx
push eax
call fcn.00409460
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0044c4c2
jmp 0x42d9fb
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00479770
jmp 0x42d9fb
cmp eax, 0x444d4152
je 0x42d31d
cmp eax, 0x444e4152
je 0x42d309
cmp eax, 0x444e4553
je 0x42d2fc
cmp eax, 0x444e4946
je 0x42d2c3
cmp eax, 0x44524854
je 0x42d2a3
cmp eax, 0x4542414c
jne 0x42d395
cmp dword [ebp + 0x74], 0
je 0x42d3b8
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047807b
jmp 0x42d9fb
cmp byte [ebp + 0x5f], 0
je 0x42d2bb
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041ab5d
add edi, 8
jmp 0x42d09f
cmp byte [ebp + 0x5f], 0
je 0x42d2db
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041ab5d
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x7c]
add edi, 8
cmp word [edi], 0x7c
jne 0x42d2f7
push 0
push edi
call fcn.004257ec
jmp 0x42d9fb
push dword [ebp + 0x78]
jmp 0x42d2ec
push dword [ebp + 0x58]
call fcn.00415a03
jmp 0x42dc76
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00464e61
jmp 0x42d9fb
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00418212
jmp 0x42d9fb
push 1
push str.Hide
push dword [ebp + 0x58]
call fcn.00410c86
add esp, 0xc
jmp 0x42d9fb
mov ecx, 0x454d4f48
cmp eax, ecx
ja 0x42d444
je 0x42d433
cmp eax, 0x45444f43
je 0x42d420
cmp eax, 0x45474150
je 0x42d413
cmp eax, 0x454c4946
je 0x42d403
cmp eax, 0x454d414e
je 0x42d80a
cmp eax, 0x454d4954
je 0x42d3e6
cmp eax, 0x454d4f43
je 0x42d4a6
xor ecx, ecx
mov dword [ebp + 0x64], ecx
mov ax, word [ebx]
cmp ax, 0x24
mov dword [ebp + 0x58], ebx
jne 0x42e327
push ecx
push ecx
add ebx, 2
push ebx
push dword [ebp + 0x60]
call fcn.00420cad
mov eax, dword [ebp + 0x64]
test eax, eax
je 0x42d3c7
mov ecx, dword [ebp + 0x60]
mov ecx, dword [ecx + 0x30]
mov dword [ecx], eax
xor edi, edi
cmp eax, edi
jge 0x42e496
push eax
lea eax, [ebp - 0x4c]
push str.0x_p
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
jmp 0x42e4a2
cmp dword [ebp + 0x74], 0
je 0x42d3b8
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.004784bc
jmp 0x42d9fb
push 0
push dword [ebp + 0x58]
call fcn.00414c22
pop ecx
jmp 0x42dc76
push dword [ebp + 0x58]
call fcn.0041f3f1
jmp 0x42dc76
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.004571a5
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046aed3
jmp 0x42d9fb
cmp eax, 0x45534142
je 0x42d52f
cmp eax, 0x45544144
je 0x42d51b
cmp eax, 0x45544953
je 0x42d507
cmp eax, 0x45544f4e
je 0x42d4a6
cmp eax, 0x45564948
je 0x42d492
cmp eax, 0x455a4953
jne 0x42d395
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004426dc
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045e618
jmp 0x42d9fb
add ebx, 8
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x74], ebx
call fcn.0040ddcf
mov edi, dword [ebp + 0x74]
mov ax, word [edi]
cmp ax, 0x31
jb 0x42d4c6
cmp ax, 0x39
jbe 0x42d4da
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
push 2
push 0x4a9688
push edi
call esi
test eax, eax
jne 0x42d4e3
mov byte [0x4bc2a4], 1
jmp 0x42d4fe
cmp word [edi], 0x30
je 0x42d4f7
push 3
push 0x4a9680
push edi
call esi
test eax, eax
jne 0x42d4fe
mov byte [0x4bc2a4], 0
and dword [ebp + 0x64], 0
jmp 0x42d3b8
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0045ebd8
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004645ef
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0047ad83
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00464f0a
jmp 0x42d9fb
mov ecx, 0x4b4d554e
cmp eax, ecx
ja 0x42d708
je 0x42d6fb
mov ecx, 0x49474552
cmp eax, ecx
ja 0x42d64e
je 0x42d63b
cmp eax, 0x46545550
je 0x42d627
cmp eax, 0x46574246
je 0x42d617
cmp eax, 0x47414d49
je 0x42d5fa
cmp eax, 0x48534148
je 0x42d5e7
cmp eax, 0x48544150
je 0x42d5da
cmp eax, 0x49444152
jne 0x42d395
cmp dword [ebp + 0x74], 0
je 0x42d3b8
cmp edx, 4
jne 0x42d3b8
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0046ef74
jmp 0x42d9fb
push dword [ebp + 0x58]
call fcn.0041bac9
jmp 0x42dc76
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.0047cb03
jmp 0x42d9fb
cmp edx, 4
jne 0x42d3b8
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00478fb3
jmp 0x42d9fb
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00414474
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00466049
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.00455ccf
jmp 0x42d9fb
sub eax, 0x49564544
je 0x42d6eb
sub eax, 0x901
je 0x42d6da
sub eax, 0xec070e
je 0x42d6c6
sub eax, 0x100f9f9
je 0x42d6b3
sub eax, 7
je 0x42d69f
sub eax, 0x1f8f0
jne 0x42d395
cmp dword [ebp + 0x74], 0
je 0x42d3b8
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0046ed42
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004799c9
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.00469768
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00449130
jmp 0x42d9fb
push dword [ebp + 0x74]
add edi, 8
push edi
push 0
add ebx, 8
jmp 0x42d022
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.004292b6
jmp 0x42d9fb
push dword [ebp + 0x58]
call fcn.004104b3
jmp 0x42dc76
mov ecx, 0x4c4c4143
cmp eax, ecx
ja 0x42d7d8
je 0x42d7b7
cmp eax, 0x4b4e494c
je 0x42d7a6
cmp eax, 0x4b4e4c46
je 0x42d792
cmp eax, 0x4b534944
je 0x42d781
cmp eax, 0x4b544f48
je 0x42d76e
cmp eax, 0x4c424154
je 0x42d75a
cmp eax, 0x4c454853
jne 0x42d395
push dword [ebp + 0x58]
call fcn.00423e88
jmp 0x42dc76
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0047e653
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.00417b01
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004808d6
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0045e1c9
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004150fa
jmp 0x42d9fb
mov eax, dword [ebp + 0x58]
cmp word [eax], 0x24
jne 0x42e464
push edi
push 0
add eax, 2
push eax
push dword [ebp + 0x60]
call fcn.00420cad
jmp 0x42d9fb
cmp eax, 0x4c4c4157
je 0x42d8d1
cmp eax, 0x4c4c494b
je 0x42d85a
cmp eax, 0x4c525453
je 0x42d846
cmp eax, 0x4c534441
je 0x42d832
cmp eax, 0x4d414554
je 0x42d81e
cmp eax, 0x4d414e46
jne 0x42d395
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045e0e1
jmp 0x42d9fb
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004195a8
jmp 0x42e48b
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045f06e
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00462b41
jmp 0x42d9fb
xor ebx, ebx
add edi, 8
inc ebx
cmp word [edi], 0x2a
jne 0x42d879
inc edi
inc edi
cmp word [edi], 0x2a
jne 0x42d879
push 2
pop ebx
add edi, ebx
cmp word [edi], 0x2a
je 0x42d871
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], edi
call fcn.0040ddcf
mov edi, dword [ebp + 0x58]
mov ax, word [edi]
cmp ax, 0x5c
je 0x42d8bf
cmp ax, 0x40
je 0x42d8bf
mov esi, str.svr
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push edi
push esi
call fcn.00438a4a
add esp, 0xc
test al, al
jne 0x42d8bf
mov ecx, dword [ebp + 0x60]
push edi
call fcn.00416392
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
push ebx
push dword [ebp + 0x74]
push edi
call fcn.0044ff44
jmp 0x42d9fb
push dword [ebp + 0x58]
call fcn.004181b3
jmp 0x42dc76
cmp dword [ebp + 0x74], 0
je 0x42d3b8
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047e0eb
jmp 0x42d9fb
mov ecx, 0x534f504c
cmp eax, ecx
ja 0x42dcf7
je 0x42dce1
mov ecx, 0x504e5055
cmp eax, ecx
ja 0x42db5b
je 0x42db4d
mov ecx, 0x4e554f4d
cmp eax, ecx
ja 0x42da85
je 0x42da71
cmp eax, 0x4d495444
je 0x42da5d
cmp eax, 0x4d524f46
je 0x42da4c
cmp eax, 0x4e49414d
je 0x42d9ae
cmp eax, 0x4e495053
je 0x42d99a
cmp eax, 0x4e495753
je 0x42d97f
cmp eax, 0x4e524353
jne 0x42d395
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045e845
jmp 0x42d9fb
cmp dword [ebp + 0x74], 0
je 0x42d3b8
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004788c5
jmp 0x42d9fb
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047953a
jmp 0x42d9fb
cmp byte [ebp + 0x5f], 0
je 0x42d9c6
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041ab5d
mov esi, dword [ebp + 0x58]
jmp 0x42d9e1
push 3
push esi
push 0x4a44c0
call fcn.00438a4a
add esp, 0xc
test al, al
jne 0x42d9ed
inc esi
inc esi
cmp word [esi], 0x2a
je 0x42d9cb
cmp word [esi], 0
jne 0x42da03
add ebx, 8
push ebx
mov ecx, 0x4bdfa0
call fcn.0042b9ab
mov dword [ebp + 0x64], eax
jmp 0x42d3b8
mov esi, 0x4bdc1c
push str.PECMD
mov ecx, esi
call fcn.0044580a
push ebx
mov ecx, esi
call fcn.0043d411
mov eax, dword [ebp + 0x60]
mov word [eax + 0x88], 2
lea ecx, [ebp + 0x3c]
call fcn.00437884
lea ecx, [ebp + 0x44]
call fcn.00437884
lea ecx, [ebp + 0x38]
call fcn.00437884
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045d06e
jmp 0x42d9fb
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00450c17
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00481400
jmp 0x42d9fb
cmp eax, 0x4e574f44
je 0x42db40
cmp eax, 0x4f474f4c
je 0x42db32
cmp eax, 0x4f4d454d
je 0x42db11
cmp eax, 0x50494350
je 0x42dafd
cmp eax, 0x504c4548
je 0x42dacf
cmp eax, 0x504d4554
jne 0x42d395
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045fd46
jmp 0x42d9fb
push 5
push 0x12e
push dword [0x4bde84]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x42da28
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.0042c162
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00472b36
jmp 0x42d9fb
cmp dword [ebp + 0x74], 0
je 0x42d3b8
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.004505c8
jmp 0x42d9fb
add ebx, 8
push ebx
call fcn.0042c3cb
jmp 0x42dc76
push dword [ebp + 0x58]
call fcn.00416979
jmp 0x42dc76
add ebx, 8
push ebx
call fcn.0044cb18
jmp 0x42dc76
mov ecx, 0x5254534c
cmp eax, ecx
ja 0x42dc41
je 0x42dc2d
sub eax, 0x504f4f4c
je 0x42dbfb
sub eax, 0x3f9f8
je 0x42dbeb
sub eax, 0x1edf90c
je 0x42dbcd
sub eax, 0x41105
je 0x42dbbf
sub eax, 0x3f0f1
je 0x42dbab
sub eax, 7
jne 0x42d395
push dword [ebp + 0x58]
call fcn.0041baa3
jmp 0x42dc76
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045d59d
jmp 0x42d9fb
add edi, 8
push edi
call fcn.00410619
jmp 0x42dc76
cmp dword [ebp + 0x74], 0
je 0x42d3b8
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046f1de
jmp 0x42d9fb
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0041e279
jmp 0x42d9fb
cmp byte [ebp + 0x5f], 0
je 0x42dc13
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041ab5d
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x78]
add edi, 8
push dword [ebp + 0x74]
push edi
call fcn.0041a601
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00462cd4
jmp 0x42d9fb
sub eax, 0x5254534d
je 0x42dccd
sub eax, 5
je 0x42dcb9
dec eax
je 0x42dcb5
sub eax, 0xedee01
je 0x42dc97
sub eax, 0x50df8
je 0x42dc7c
sub eax, 0x70606
jne 0x42d395
add edi, 8
push edi
call fcn.0041060b
pop ecx
jmp 0x42d9fb
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0041ae94
and dword [ebp + 0x4c], 0
mov dword [ebp + 0x64], eax
jmp 0x42d3b8
cmp dword [ebp + 0x74], 0
je 0x42d3b8
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047e4e0
jmp 0x42d9fb
push 1
jmp 0x42dce3
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00462e25
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00463d1f
jmp 0x42d9fb
push 0
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00462f6d
jmp 0x42d9fb
mov ecx, 0x5453494c
cmp eax, ecx
ja 0x42e16a
je 0x42e140
mov ecx, 0x54494e49
cmp eax, ecx
ja 0x42dde0
je 0x42ddd0
cmp eax, 0x534f5052
je 0x42ddbc
cmp eax, 0x53504954
je 0x42dda8
cmp eax, 0x53504d43
je 0x42dd94
cmp eax, 0x5353454d
je 0x42dd80
cmp eax, 0x54494157
je 0x42dd70
cmp eax, 0x54494445
jne 0x42d395
cmp dword [ebp + 0x74], 0
je 0x42d3b8
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.004501aa
jmp 0x42d9fb
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00425802
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00474402
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00454ea5
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046f33a
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004636bc
jmp 0x42d9fb
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00422ec0
jmp 0x42d9fb
cmp eax, 0x54495257
je 0x42e12c
cmp eax, 0x54495845
je 0x42de5b
cmp eax, 0x544d4644
je 0x42de47
cmp eax, 0x544e4950
je 0x42de33
cmp eax, 0x544e4f46
je 0x42de26
cmp eax, 0x54524150
jne 0x42d395
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00458dd1
jmp 0x42d9fb
push dword [ebp + 0x58]
call fcn.00418059
jmp 0x42dc76
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0044a10d
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0044a9a1
jmp 0x42d9fb
lea ecx, [ebx + 8]
mov dx, word [ecx]
cmp dx, 0x3d
jne 0x42deef
xor esi, esi
add ebx, 0xa
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x64], esi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x74], ebx
call fcn.0040ddcf
push dword [ebp + 0x74]
push str.error
call fcn.00438ae0
test al, al
pop ecx
pop ecx
je 0x42de9e
mov ecx, dword [ebp + 0x60]
mov eax, dword [ecx + 0x30]
mov eax, dword [eax]
jmp 0x42ded5
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x74]
push eax
call fcn.0044880d
test eax, eax
pop ecx
pop ecx
jg 0x42decf
mov eax, dword [ebp + 0x74]
cmp word [eax], si
je 0x42decf
mov ecx, dword [ebp + 0x60]
push esi
push 0xffffffffffffffff
push esi
push eax
call fcn.0040eec0
cmp eax, esi
je 0x42decf
mov eax, dword [eax + 4]
jmp 0x42ded2
mov eax, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x60]
mov edx, dword [ecx + 0x30]
mov dword [edx], eax
mov dword [ecx + 0x8c], eax
mov dword [ebp + 0x64], eax
mov byte [ecx + 0x8a], 1
jmp 0x42d3c7
mov eax, edx
call fcn.004820ac
test al, al
jne 0x42df03
test dx, dx
jne 0x42d3b8
mov dword [ebp + 0x78], ecx
lea ecx, [ebp + 0x78]
call fcn.0040ddcf
mov edi, dword [ebp + 0x60]
mov eax, dword [edi + 0x8c]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x54], eax
xor ebx, ebx
call fcn.0043d3a5
push 0x2c
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.0043fd51
mov eax, dword [ebp + 0x78]
add esp, 0xc
cmp word [eax], 0x2c
jne 0x42df54
add dword [ebp + 0x78], 2
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.0044880d
pop ecx
pop ecx
mov ebx, eax
mov eax, dword [ebp + 0x70]
cmp word [eax], 0
jne 0x42df64
push 0x40
jmp 0x42e0bc
push eax
push 0x4a9658
call fcn.00438ae0
test al, al
pop ecx
pop ecx
je 0x42df7d
xor esi, esi
inc esi
jmp 0x42e0bd
push dword [ebp + 0x70]
push 0x4a6d8c
call fcn.00438ae0
test al, al
pop ecx
pop ecx
jne 0x42df75
push dword [ebp + 0x70]
push 0x4a9650
call fcn.00438ae0
test al, al
pop ecx
pop ecx
jne 0x42dfb6
push dword [ebp + 0x70]
push 0x4a7568
call fcn.00438ae0
test al, al
pop ecx
pop ecx
je 0x42dfbd
push 2
jmp 0x42e0bc
push dword [ebp + 0x70]
push str.FORX
call fcn.00438ae0
test al, al
pop ecx
pop ecx
jne 0x42dfe3
push dword [ebp + 0x70]
push 0x4a9644
call fcn.00438ae0
test al, al
pop ecx
pop ecx
je 0x42dfea
push 4
jmp 0x42e0bc
push dword [ebp + 0x70]
push str.LOOP
call fcn.00438ae0
test al, al
pop ecx
pop ecx
jne 0x42e010
push dword [ebp + 0x70]
push 0x4a9638
call fcn.00438ae0
test al, al
pop ecx
pop ecx
je 0x42e017
push 8
jmp 0x42e0bc
push dword [ebp + 0x70]
push 0x4a4b90
call fcn.00438ae0
test al, al
pop ecx
pop ecx
jne 0x42e03d
push dword [ebp + 0x70]
push str.BLOCK
call fcn.00438ae0
test al, al
pop ecx
pop ecx
je 0x42e041
push 0x10
jmp 0x42e0bc
push dword [ebp + 0x70]
push str.ToWIN
call fcn.00438ae0
test al, al
pop ecx
pop ecx
je 0x42e05b
mov esi, 0x80
jmp 0x42e0bd
push dword [ebp + 0x70]
push 0x4a9624
call fcn.00438ae0
test al, al
pop ecx
pop ecx
je 0x42e08d
push 1
push dword [ebp + 0x74]
mov esi, 0x80
or word [edi + 0x88], si
push 0x4a4460
mov ecx, edi
call fcn.0044ff44
jmp 0x42e0bd
push dword [ebp + 0x70]
push str.CONTINUE
call fcn.00438ae0
test al, al
pop ecx
pop ecx
je 0x42e0a7
mov esi, pe_nt_image_headers32
jmp 0x42e0bd
push dword [ebp + 0x70]
push str.BREAK
call fcn.00438ae0
test al, al
pop ecx
pop ecx
je 0x42e11f
push 0x20
pop esi
or word [edi + 0x88], si
xor esi, esi
cmp ebx, esi
jle 0x42e0e2
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp + 0x54]
mov dword [eax], ecx
mov eax, dword [ebp + 0x54]
mov dword [edi + 0x8c], eax
mov byte [edi + 0x8a], 1
cmp byte [ebp + 0x5f], 0
je 0x42e0f8
push dword [ebp + 0x7c]
mov ecx, edi
push 0x11
push esi
push dword [ebp + 0x4c]
call fcn.0041ab5d
lea ecx, [ebp + 0x70]
call fcn.00437884
lea ecx, [ebp + 0x3c]
call fcn.00437884
lea ecx, [ebp + 0x44]
call fcn.00437884
lea ecx, [ebp + 0x38]
call fcn.00437884
mov eax, esi
jmp 0x42da42
lea ecx, [ebp + 0x70]
call fcn.00437884
jmp 0x42d3b8
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00461d49
jmp 0x42d9fb
cmp dword [ebp + 0x74], 0
je 0x42d3b8
cmp edx, 4
jne 0x42d3b8
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00478bdf
jmp 0x42d9fb
mov ecx, 0x56524553
cmp eax, ecx
ja 0x42e234
je 0x42e224
sub eax, 0x54554853
je 0x42e217
sub eax, 0x2fcf3
je 0x42e203
sub eax, 0xe
je 0x42e1f2
sub eax, 0xf5fff9
je 0x42e1e1
sub eax, 0x10cfa
je 0x42e1c1
sub eax, 0x102f1ff
jne 0x42d395
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045d9d1
jmp 0x42d9fb
cmp dword [ebp + 0x74], 0
je 0x42d3b8
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add ebx, 8
push ebx
call fcn.0047865d
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046b14b
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0042c572
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045dff7
jmp 0x42d9fb
push dword [ebp + 0x58]
call fcn.00416a9e
jmp 0x42dc76
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00413b22
jmp 0x42d9fb
cmp eax, 0x574f4853
je 0x42e313
cmp eax, 0x574f5242
je 0x42e2fd
cmp eax, 0x58454649
je 0x42e2c4
cmp eax, 0x58524f46
je 0x42e292
cmp eax, 0x59434552
je 0x42e281
cmp eax, 0x59454b48
jne 0x42d395
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00478e75
jmp 0x42d9fb
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0044c78d
jmp 0x42d9fb
cmp byte [ebp + 0x5f], 0
je 0x42e2aa
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041ab5d
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x78]
add edi, 8
push dword [ebp + 0x74]
push edi
call fcn.00471c5c
jmp 0x42d9fb
cmp byte [ebp + 0x5f], 0
je 0x42e2dc
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041ab5d
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x7c]
add edi, 8
cmp word [edi], 0x7c
jne 0x42e2f8
push 0
push edi
call fcn.004257d6
jmp 0x42d9fb
push dword [ebp + 0x78]
jmp 0x42e2ed
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045564f
jmp 0x42d9fb
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047e9a4
jmp 0x42d9fb
cmp ax, cx
je 0x42d3b8
push 0x40
xor esi, esi
pop ecx
cmp ax, cx
mov dword [ebp + 0x78], esi
jne 0x42e346
add ebx, 2
mov dword [ebp + 0x78], ecx
mov dword [ebp + 0x58], ebx
mov eax, dword [ebp + 0x58]
movzx eax, word [eax]
cmp ax, 0x2a
je 0x42e35e
cmp ax, 0x2d
je 0x42e35e
cmp ax, 0x2b
jne 0x42e360
mov esi, eax
mov ebx, dword [ebp + 0x60]
mov eax, dword [ebx + 0x1c]
and dword [ebp + 0x54], 0
mov dword [ebp + 0x34], eax
lea eax, [ebp + 0x34]
push eax
lea eax, [ebp + 0x54]
push eax
push dword [ebp + 0x58]
mov ecx, ebx
call fcn.004240e0
or esi, dword [ebp + 0x78]
test si, si
jne 0x42e467
cmp dword [ebp + 0x54], 0
jge 0x42e467
push dword [ebp + 0x50]
lea ecx, [ebp + 0x78]
push edi
call fcn.00445763
mov eax, dword [ebp + 0x50]
xor esi, esi
cmp eax, esi
jle 0x42e3c9
lea ecx, [ebp + 0x64]
push ecx
lea eax, [edi + eax*2]
push eax
push dword [ebp + 0x78]
push dword [ebp + 0x74]
push ebx
call fcn.0040d9ca
add esp, 0x14
test al, al
jne 0x42e45c
push 1
push esi
lea eax, [ebp + 0x3c]
push eax
push dword [ebp + 0x70]
mov ecx, ebx
call fcn.0044c04c
mov eax, dword [ebp + 0x3c]
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], eax
call fcn.0040ddcf
mov edi, dword [ebp + 0x58]
push esi
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x50]
push eax
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x54], esi
call fcn.00418cf5
add esp, 0xc
push dword [ebp + 0x54]
lea ecx, [ebp + 0x70]
push dword [ebp + 0x50]
call fcn.00445763
lea eax, [ebp + 0x70]
push eax
mov word [ebp + 0x76], si
call fcn.0040e5b5
cmp eax, 1
pop ecx
mov ecx, ebx
jne 0x42e440
push edi
call fcn.0042edd5
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x64], eax
call fcn.00437884
lea ecx, [ebp + 0x78]
call fcn.00437884
jmp 0x42e48e
push esi
push esi
push 1
lea eax, [ebp + 0x76]
push eax
push ebx
push dword [ebp + 0x3c]
call fcn.00409460
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x64], eax
call fcn.00437884
lea ecx, [ebp + 0x78]
jmp 0x42e122
mov ebx, dword [ebp + 0x60]
cmp byte [ebp + 0x5f], 0
je 0x42e47e
push dword [ebp + 0x7c]
mov ecx, ebx
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041ab5d
push dword [ebp + 0x74]
mov ecx, ebx
push dword [ebp + 0x58]
call fcn.00424522
mov dword [ebp + 0x64], eax
mov eax, dword [ebp + 0x64]
jmp 0x42d3c7
cdq
push edx
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.00484286
mov esi, dword [ebp + 0x60]
add esp, 0xc
test byte [esi + 9], 0xf
jne 0x42e4be
lea eax, [ebp - 0x4c]
push eax
push 0x4a764c
mov ecx, esi
call fcn.0043cc80
lea eax, [ebp - 0x4c]
push eax
push 0x4a7648
mov ecx, esi
call fcn.0043cc80
cmp dword [0x4bde94], edi
mov byte [0x4bde70], 1
je 0x42e4f3
cmp dword [ebp + 0x4c], edi
je 0x42e4f3
push dword [ebp + 0x7c]
mov ecx, esi
push edi
push dword [ebp + 0x64]
push dword [ebp + 0x4c]
call fcn.0041ab5d
lea ecx, [ebp + 0x3c]
call fcn.00437884
mov esi, dword [ebp + 0x60]
test byte [esi + 0xd], 1
je 0x42e516
push dword [ebp + 0x38]
call fcn.00437856
push dword [ebp + 0x44]
call fcn.00437856
pop ecx
pop ecx
mov esi, dword [ebp + 0x64]
jmp 0x42e108
cmp ax, 0x28
jne 0x42e53b
inc esi
inc esi
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [esi + eax*2 - 2]
cmp word [eax], 0x29
jne 0x42e53b
and word [eax], 0
mov edi, dword [ebp + 0x60]
movzx eax, word [edi + 0x2c]
push 0
push eax
push esi
call fcn.00410b2f
add esp, 0xc
or esi, 1
push esi
mov ecx, edi
call fcn.0047553c
mov esi, eax
jmp 0x42e100