Function at 0x423ca0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ecx, eax
push edi
mov edi, edx
push esi
push ebx
sub esp, 0x10c
mov ebx, dword [edx + 0x14]
mov dword [esp + 0x5c], eax
mov eax, dword [eax + 8]
mov dword [esp + 0x38], edx
mov esi, dword [eax + 0x178]
mov dword [esp + 0x68], ebx
mov edx, dword [esi + 0x44]
mov dword [esp + 0x78], esi
mov dword [esp + 0x58], edx
movzx edx, byte [esi + 0xf0]
mov esi, edx
movzx edx, byte [edi]
and esi, 1
mov dword [esp + 0x48], esi
test byte [ecx + 0x40], 0x40
je 0x423d18
test dl, 1
jne 0x423cf8
cmp eax, dword [ebx + 0x10]
je 0x424048
mov dword [esp], 5
call fcn.00402b90
xor eax, eax
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
ret
and edx, 8
jne 0x423eb0
mov ebx, dword [esp + 0x5c]
mov ebp, dword [ebx + 0x64]
test ebp, ebp
je 0x423ebe
mov dword [esp + 0x50], 0
jmp 0x423e20
test byte [ebp + 0x14], 2
jne 0x4265ae
mov esi, dword [ebp + 0x30]
mov edi, dword [ebp + 0x34]
mov dword [esp], ebx
mov eax, esi
mov edx, edi
add eax, 1
adc edx, 0
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00404cf0
test eax, eax
je 0x423d04
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], edi
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], eax
mov dword [esp + 4], ebp
mov dword [esp], ebx
mov dword [esp + 0x40], eax
call fcn.00405900
test eax, eax
je 0x423d04
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x48]
mov edi, dword [esp + 0x38]
mov byte [edx + esi], 0
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x28], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], edx
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x10], ebp
mov dword [esp + 0xc], 0x1000
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.0045e8b0
test eax, eax
je 0x423d04
test byte [edi], 1
jne 0x423e15
mov dword [ebp + 0x30], 0
mov dword [ebp + 0x34], 0
mov ebp, dword [ebp + 0xc]
test ebp, ebp
je 0x424238
mov esi, dword [ebp]
mov dword [esp + 8], 0xd
mov dword [esp + 4], 0x489011
mov dword [esp], esi
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x423e15
lea eax, [esi + 0xd]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x50]
test eax, eax
je 0x423d40
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x10]
cmp dword [ebx + 8], eax
jne 0x423d40
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], 0
mov dword [esp], eax
call fcn.0045de00
test eax, eax
je 0x423d40
mov eax, dword [eax + 0xc]
sub eax, 3
cmp eax, 1
ja 0x423d40
jmp 0x423e07
mov eax, dword [esp + 0x68]
cmp dword [eax + 0x1c], 1
je 0x425699
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x70], 0
mov dword [esp + 0x50], 0
mov ecx, dword [eax + 0xa4]
lea eax, [ecx + 0x78]
mov dword [esp + 0x64], eax
mov edi, dword [esp + 0x64]
mov esi, dword [ecx + 0x368]
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov edx, dword [edi + 0x1c]
mov eax, dword [edi + 0x18]
shrd eax, edx, 4
shr edx, 4
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], edx
test esi, esi
jne 0x423f37
mov edi, dword [edi + 0x2c]
xor ebp, ebp
mov dword [esp + 0x44], ebp
sub eax, edi
mov dword [esp + 0x40], edi
sbb edx, ebp
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], edx
mov edi, dword [esp + 0x80]
mov ebp, dword [esp + 0x84]
mov eax, edi
or eax, ebp
jne 0x424268
mov ebp, dword [esp + 0x50]
test ebp, ebp
jne 0x42563f
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x50]
mov edx, dword [eax + 8]
mov eax, dword [edx + 0x178]
mov ebp, dword [eax + 0x50]
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
test ecx, ecx
jne 0x424030
cmp dword [eax + 0x10], edx
jne 0x423f8b
test ebp, ebp
jne 0x426247
mov edi, dword [esp + 0x38]
mov ecx, dword [eax + 0x1c]
movzx edx, byte [edi]
test dl, dl
js 0x423fa6
mov ebx, dword [eax + 0x10]
cmp dword [ebx + 4], 5
je 0x426185
and edx, 1
jne 0x424030
cmp dword [eax + 0x1c], 1
jne 0x42403a
mov eax, dword [esp + 0x5c]
mov ebx, dword [eax + 0x64]
mov eax, dword [esp + 0x68]
lea esi, [eax + 0x5c]
test ebx, ebx
je 0x4261aa
test byte [ebx + 0x13], 0x20
je 0x424022
cmp dword [ebx + 0x40], 0x484fc0
je 0x424022
mov edi, dword [ebx + 0x94]
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
lea eax, [edi + 0xc4]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00462040
test eax, eax
je 0x423d04
mov edi, dword [edi + 0xc4]
test edi, edi
je 0x424022
movzx eax, word [ebx + 0x14]
and ax, 0xfe3f
or al, 0x80
mov word [ebx + 0x14], ax
mov ebx, dword [ebx + 0xc]
test ebx, ebx
jne 0x423fcf
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
cmp dword [eax + 0x1c], 1
je 0x4261aa
mov eax, 1
jmp 0x423d06
and edx, 8
jne 0x424068
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x5c]
mov dword [esp + 0x50], 1
mov ebp, dword [eax + 0x64]
test ebp, ebp
jne 0x423e20
mov eax, dword [esp + 0x68]
cmp dword [eax + 0x1c], 1
jne 0x423d04
mov dword [esp + 0xf4], 0
mov eax, dword [esp + 0x5c]
mov dword [esp + 0xf8], 0
mov eax, dword [eax + 0x64]
test eax, eax
je 0x4240a9
movzx eax, word [eax + 0x14]
and ax, 0x1c0
cmp ax, 0x100
je 0x423d04
mov eax, dword [esp + 0x5c]
mov edx, dword [eax + 4]
mov eax, dword [eax + 0xa4]
mov edi, dword [eax + 0x360]
mov dword [esp + 0x40], edi
test edi, edi
je 0x425d11
cmp byte [edi], 0
je 0x4256f0
mov dword [esp + 0x70], 0
mov edi, 1
mov ebp, dword [esp + 0x5c]
mov dword [esp + 4], 0x488ff8
mov dword [esp], ebp
call fcn.00405300
mov ebx, eax
test eax, eax
je 0x42583a
mov eax, dword [eax + 0x30]
mov edx, dword [ebx + 0x34]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00403e60
mov esi, eax
test eax, eax
je 0x423d04
mov eax, dword [ebx + 0x30]
mov edx, dword [ebx + 0x34]
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], ebp
call fcn.00405900
test eax, eax
je 0x42422b
mov ebp, dword [esp + 0x5c]
mov dword [esp + 4], ebx
mov dword [esp], ebp
call fcn.00431b60
cmp eax, 0xffffffff
je 0x42422b
mov edx, dword [ebp + 0xa4]
mov ecx, ebp
mov edx, dword [edx + 0x50]
mov eax, dword [edx + eax*4]
mov edx, dword [ebx + 0x34]
mov eax, dword [eax + 0x28]
mov dword [esp + 0x54], eax
mov eax, dword [ebx + 0x30]
shrd eax, edx, 3
shl eax, 3
add eax, esi
mov dword [esp + 0x3c], eax
cmp esi, eax
jae 0x4257fa
mov dword [esp + 0x50], esi
mov ebp, esi
mov esi, ecx
mov dword [esp + 0x60], edi
jmp 0x4241e7
mov eax, ebx
xor eax, 1
or eax, edi
je 0x425c2f
mov eax, ebx
xor eax, 0x1d
or eax, edi
je 0x425b6c
mov eax, dword [esp + 0xf8]
test eax, eax
jne 0x4241d8
xor ebx, 0xf
or ebx, edi
je 0x42609d
mov eax, dword [esp + 0x3c]
add ebp, 8
cmp ebp, eax
jae 0x4257f2
mov eax, dword [esi + 8]
mov dword [esp], ebp
call dword [eax + 0x4c]
mov ebx, eax
mov eax, dword [esi + 8]
mov edi, edx
lea edx, [ebp + 4]
mov dword [esp], edx
call dword [eax + 0x4c]
mov edx, eax
mov eax, ebx
xor eax, 0xe
or eax, edi
jne 0x4241a8
mov eax, dword [esp + 0x54]
mov dword [esp + 8], edx
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.0042ed90
mov dword [esp + 0x40], eax
test eax, eax
jne 0x4241d8
mov esi, dword [esp + 0x50]
mov dword [esp], esi
call sub.msvcrt.dll_free
jmp 0x423d04
mov edi, dword [esp + 0x50]
mov eax, dword [esp + 0x38]
test edi, edi
jne 0x425691
test byte [eax], 8
jne 0x426879
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x70], 0
mov ecx, dword [eax + 0xa4]
jmp 0x423ed8
mov eax, dword [esp + 0x40]
mov edi, dword [esp + 0x80]
mov dword [esp + 0x18], 0
mov esi, dword [esp + 0x5c]
mov dword [esp + 0x14], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x64]
mov dword [esp + 0x10], 0
mov ebp, dword [esp + 0x84]
mov dword [esp + 8], edi
mov dword [esp + 4], eax
mov dword [esp], esi
mov dword [esp + 0xa0], edi
call fcn.0042ee80
mov dword [esp + 0x98], eax
test eax, eax
je 0x423d04
mov eax, edi
mov edx, ebp
mov dword [esp], esi
shld edx, edi, 2
shl eax, 2
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.00404cf0
mov dword [esp + 0x3c], eax
mov edi, eax
test eax, eax
je 0x424e57
mov eax, dword [esi + 0xa4]
mov ebx, dword [esp + 0x50]
mov dword [eax + 0x354], edi
test ebx, ebx
jne 0x4257d9
mov dword [esp + 0x9c], 0
xor esi, esi
mov eax, dword [esp + 0xa0]
mov edi, dword [esp + 0x98]
shl eax, 5
add eax, edi
mov dword [esp + 0x60], eax
cmp edi, eax
jae 0x426578
mov eax, dword [esp + 0x50]
mov ebp, edi
mov dword [esp + 0x90], 0
mov dword [esp + 0x94], 0
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x8c], 0
xor eax, 1
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], eax
jmp 0x4246bf
cmp byte [esp + 0x54], 2
jne 0x424392
mov dword [esp + 0xc8], pe_nt_image_headers32
test eax, eax
jne 0x4247a0
mov dword [esp + 0xc4], str.UND
mov eax, dword [ebp + 0x10]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x64]
mov eax, dword [eax + 0x28]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.0042ed90
mov dword [esp + 0xcc], eax
test eax, eax
je 0x424e14
cmp dword [ebp + 0x18], 0xfff2
je 0x424768
mov edx, dword [esp + 0x58]
test edx, edx
je 0x42443b
lea eax, [esp + 0xf8]
mov dword [esp + 8], ebp
mov dword [esp + 0x18], eax
lea eax, [esp + 0xc4]
mov dword [esp + 0x14], eax
lea eax, [esp + 0xc8]
mov dword [esp + 0x10], eax
lea eax, [esp + 0xcc]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x38]
mov dword [esp], edi
mov dword [esp + 4], eax
mov eax, dword [esp + 0x58]
call eax
test eax, eax
je 0x424e14
mov eax, dword [esp + 0xcc]
test eax, eax
je 0x4246a3
mov ebx, dword [esp + 0xc4]
test ebx, ebx
je 0x424e08
mov dword [esp + 0x40], 0
cmp ebx, 0x485080
je 0x42446a
mov eax, dword [ebx + 0x10]
shr eax, 0xf
xor eax, 1
and eax, 1
mov dword [esp + 0x40], eax
mov dword [esp + 0xd0], 0
mov eax, dword [edi + 8]
mov eax, dword [eax + 0x178]
movzx eax, byte [eax + 0xf0]
shr al, 1
and eax, 1
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x10]
cmp dword [eax + 4], 5
jne 0x424c40
test esi, esi
je 0x424c58
lea eax, [esp + 0xf0]
mov dword [esp + 4], esi
mov dword [esp + 8], eax
mov dword [esp], edi
call fcn.0042eb90
movzx edx, word [esp + 0xf0]
mov ebx, dword [esp + 0xcc]
mov ecx, edx
mov eax, edx
and ecx, 0x7fff
and ax, 0x7fff
mov dword [esp + 0x6c], ecx
test dx, dx
js 0x424508
mov ecx, ebx
test dx, 0x7ffe
je 0x42462c
cmp dword [esp + 0xc4], 0x484fc0
je 0x42462c
mov ecx, dword [edi + 0xa4]
cmp dword [ebp + 0x18], 0
mov dword [esp + 0x74], ecx
je 0x425321
mov eax, dword [ecx + 0x29c]
mov ecx, dword [esp + 0x6c]
cmp eax, ecx
jb 0x424dd7
test dx, 0x7ffe
je 0x42530c
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x88], edx
lea eax, [eax + eax*4]
shl eax, 3
add eax, dword [ecx + 0x39c]
mov eax, dword [eax - 0x10]
mov dword [esp], eax
mov dword [esp + 0x7c], eax
call sub.msvcrt.dll_strlen
mov edx, dword [esp + 0x88]
mov dword [esp + 0x74], eax
mov dword [esp], ebx
mov dword [esp + 0x88], edx
call sub.msvcrt.dll_strlen
mov edx, dword [esp + 0x88]
mov ebx, eax
mov eax, dword [esp + 0x74]
movsx edx, dx
not edx
add eax, ebx
shr edx, 0x1f
lea edx, [eax + edx + 2]
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp], edi
call fcn.00404cf0
mov ecx, eax
test eax, eax
je 0x424e14
mov eax, dword [esp + 0xcc]
mov dword [esp + 8], ebx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 0x88], ecx
call sub.msvcrt.dll_memcpy
mov ecx, dword [esp + 0x88]
add ebx, ecx
mov byte [ebx], 0x40
lea eax, [ebx + 1]
cmp word [esp + 0xf0], 0
js 0x4245fc
mov edx, dword [ebp + 0x18]
test edx, edx
je 0x4245fc
mov byte [ebx + 1], 0x40
lea eax, [ebx + 2]
mov edx, dword [esp + 0x74]
mov dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp], eax
add edx, 1
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call sub.msvcrt.dll_memcpy
mov ecx, dword [esp + 0x88]
mov dword [esp + 0xcc], ecx
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 0x20], eax
lea eax, [esp + 0xd0]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0xd4]
mov dword [esp + 0x18], eax
lea eax, [esp + 0xd8]
mov dword [esp + 0x14], eax
lea eax, [esp + 0xf4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xf8]
mov dword [esp + 8], eax
lea eax, [esp + 0xc4]
mov dword [esp + 4], eax
mov eax, edi
call fcn.00421180
test eax, eax
je 0x424e14
mov ebx, dword [esp + 0xf4]
test ebx, ebx
je 0x4247f0
lea eax, [esi + 2]
add dword [esp + 0x3c], 4
add ebp, 0x20
test esi, esi
cmovne esi, eax
mov eax, dword [esp + 0x60]
cmp ebp, eax
jae 0x4258ac
mov eax, dword [ebp]
mov edx, dword [ebp + 4]
mov dword [esp + 0xc8], 0
mov dword [esp + 0xc4], 0
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xfc], edx
mov dword [eax], 0
movzx eax, byte [ebp + 0x14]
mov dword [esp + 0xd8], 0
shr al, 4
mov byte [esp + 0x54], al
mov ecx, eax
je 0x4246a3
mov eax, dword [ebp + 0x18]
cmp cl, 1
jne 0x424380
test eax, eax
je 0x42439a
cmp eax, 0xfff2
je 0x4252ea
lea edx, [eax - 0xff00]
mov dword [esp + 0xc8], 2
cmp edx, 0xff
ja 0x424c70
cmp eax, 0xfff1
jne 0x4243a5
mov dword [esp + 0xc4], str.ABS
jmp 0x4243a5
movzx eax, byte [ebp + 0x14]
and eax, 0xf
cmp al, 6
jne 0x4243db
mov dword [esp + 4], 0x48901f
mov dword [esp], edi
call fcn.00405300
mov ebx, eax
test eax, eax
je 0x425eb0
mov dword [esp + 0xc4], ebx
jmp 0x42444a
lea edx, [eax - 0xff00]
cmp edx, 0xff
ja 0x424c70
cmp eax, 0xfff1
je 0x424754
cmp eax, 0xfff2
jne 0x4243a5
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [esp + 0xc4], 0x485140
mov dword [esp + 0xf8], eax
mov dword [esp + 0xfc], edx
jmp 0x4243a5
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0xd8]
mov eax, dword [eax]
test ecx, ecx
cmove ebx, dword [esp + 0x40]
mov dword [esp + 0x88], ecx
mov edx, dword [eax + 0xc]
lea ecx, [edx - 6]
cmp ecx, 1
ja 0x42482e
lea esi, cs:[esi]
nop
mov eax, dword [eax + 0x18]
mov edx, dword [eax + 0xc]
lea ecx, [edx - 6]
cmp ecx, 1
jbe 0x424820
cmp edx, 4
ja 0x424cae
cmp edx, 2
jbe 0x4252f7
mov edx, dword [eax + 0x20]
mov dword [esp + 0x74], 0
mov ecx, dword [edx + 0x9c]
mov dword [esp + 0x7c], ecx
mov edx, dword [edi + 0xa4]
mov edx, dword [edx + 0x39c]
test edx, edx
je 0x424890
mov ecx, dword [esp + 0x88]
test ecx, ecx
jne 0x424890
mov ecx, dword [esp + 0x6c]
cmp ecx, 1
jbe 0x424890
test bl, 1
je 0x424890
lea ecx, [ecx + ecx*4]
lea edx, [edx + ecx*8 - 0x28]
mov dword [eax + 0x40], edx
lea esi, cs:[esi]
mov dword [esp + 0x40], ebx
mov eax, dword [esp + 0x48]
mov ebx, dword [esp + 0x3c]
mov dword [esp + 0x20], 0
mov edx, dword [esp + 0xfc]
mov dword [esp + 0x1c], 0
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0xf8]
mov dword [esp + 0x28], ebx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x18], edx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 4], edi
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.0045e8b0
test eax, eax
je 0x424e14
mov ebx, dword [ebx]
mov eax, dword [ebx + 0xc]
lea edx, [eax - 6]
cmp edx, 1
ja 0x42491e
mov ebx, dword [ebx + 0x18]
mov eax, dword [ebx + 0xc]
lea edx, [eax - 6]
cmp edx, 1
jbe 0x424910
cmp dword [ebp + 0x18], 0xfff2
mov ecx, dword [esp + 0x3c]
sete dl
cmp eax, 5
sete al
mov dword [ecx], ebx
mov ecx, dword [esp + 0x50]
and edx, eax
mov eax, dword [esp + 0x40]
and eax, ecx
mov dword [esp + 0x6c], eax
je 0x4249f0
test byte [esp + 0xc8], 0x80
je 0x4249f0
movzx eax, byte [ebp + 0x14]
and eax, 0xf
cmp al, 2
je 0x4249f0
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x10]
cmp dword [eax + 4], 5
je 0x425b11
test dl, dl
je 0x4246a3
mov dword [esp + 0x6c], 0
mov eax, dword [ebp]
mov edx, dword [ebp + 4]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00404390
cmp dword [esp + 0x74], eax
mov dword [esp + 0x88], eax
mov eax, dword [ebx + 0x20]
jb 0x4257b7
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x38]
mov edx, dword [ebp + 4]
mov eax, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
mov ecx, dword [ecx + 4]
mov dword [esp + 0xb0], ecx
mov ecx, dword [ebp]
xor ecx, 1
or ecx, edx
je 0x426156
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0xa4]
mov dword [edx], ecx
jmp 0x424a03
mov dword [esp + 0x6c], 0
test dl, dl
jne 0x42498b
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
mov eax, dword [eax + 0x10]
cmp dword [eax + 4], 5
jne 0x4246a3
mov eax, dword [esp + 0x74]
test eax, eax
jne 0x424ced
cmp dword [ebp + 0x18], 0xfff2
je 0x424ced
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x74], eax
or eax, edx
mov dword [esp + 0x88], edx
je 0x424a82
mov eax, dword [ebx + 0x64]
mov ecx, dword [esp + 0x40]
mov edx, dword [ebx + 0x60]
mov dword [esp + 0xa4], eax
test ecx, ecx
jne 0x42556c
mov ecx, dword [ebx + 0xc]
movzx eax, byte [ebp + 0x14]
mov dword [esp + 0x7c], ecx
mov ecx, dword [esp + 0xa4]
or edx, ecx
jne 0x4254d6
mov eax, dword [esp + 0x74]
mov dword [ebx + 0x60], eax
mov eax, dword [esp + 0x88]
mov dword [ebx + 0x64], eax
cmp dword [ebx + 0xc], 5
je 0x4254c5
movzx eax, byte [ebp + 0x14]
mov edx, eax
and edx, 0xf
jne 0x4253c0
movzx ecx, word [ebx + 0x6a]
movzx edx, byte [ebp + 0x15]
test dl, dl
je 0x425439
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x425445
movzx eax, byte [ebx + 0x69]
cmp dword [esp + 0x40], 0
mov byte [esp + 0x74], al
mov eax, edx
je 0x42550f
and edx, 0xfffffffc
and eax, 3
mov byte [esp + 0x7c], dl
movzx edx, byte [esp + 0x74]
and edx, 3
jne 0x42572a
or al, byte [esp + 0x7c]
mov byte [ebx + 0x69], al
mov eax, dword [esp + 0x38]
movzx eax, byte [eax]
mov byte [esp + 0x74], al
mov eax, dword [esp + 0x40]
test eax, eax
je 0x425532
mov eax, 2
test byte [esp + 0x74], 8
jne 0x424e6b
xor edx, edx
test cl, 0xc
setne dl
mov dword [esp + 0x54], edx
or eax, ecx
mov word [ebx + 0x6a], ax
mov eax, dword [esp + 0x40]
test eax, eax
jne 0x424e7c
cmp dword [ebx + 0xc], 5
je 0x424e7c
mov eax, dword [esp + 0x54]
test eax, eax
je 0x4246a3
cmp dword [ebx + 0x2c], 0xffffffff
je 0x425d27
movzx eax, byte [ebx + 0x69]
and eax, 3
sub eax, 1
cmp eax, 1
jbe 0x425cef
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x70]
and eax, ecx
je 0x4246a3
test byte [ebx + 0x6a], 1
je 0x425636
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
cmp dword [eax + 0x1c], 1
jne 0x424e14
mov ebx, dword [esp + 0x68]
mov eax, dword [ebx + 0x40]
mov dword [esp], eax
call fcn.0043bac0
mov dword [esp + 8], 0
mov dword [esp + 0x6c], eax
mov eax, dword [edi + 0xa4]
mov dword [esp + 0x70], edx
mov eax, dword [eax + 0x364]
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x40]
mov dword [esp], eax
call fcn.0043b7e0
mov dword [esp + 0x40], eax
and eax, edx
mov dword [esp + 0x54], edx
cmp eax, 0xffffffff
je 0x424e14
mov eax, dword [ebx + 0x40]
mov dword [esp], eax
call fcn.0043bac0
mov ecx, dword [esp + 0x70]
mov ebx, eax
mov eax, dword [esp + 0x6c]
xor edx, ecx
xor eax, ebx
or eax, edx
je 0x426480
mov eax, dword [esp + 0x40]
mov dword [esp + 4], 1
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00423970
test eax, eax
je 0x424e14
mov dword [esp + 0x70], 0
jmp 0x4246a3
mov dword [esp + 0x7c], 0
mov dword [esp + 0x74], 0
jmp 0x424894
mov dword [esp + 0x6c], 0
mov ecx, dword [esp + 0xcc]
jmp 0x42462c
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00430e10
mov dword [esp + 0xc4], eax
test eax, eax
je 0x424754
test byte [edi + 0x40], 0x42
je 0x4243a5
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x18]
sub dword [esp + 0xf8], eax
sbb dword [esp + 0xfc], edx
jmp 0x4243a5
cmp edx, 5
jne 0x4252f7
mov edx, dword [eax + 0x20]
mov ecx, dword [edx + 4]
mov ecx, dword [ecx + 0x9c]
mov dword [esp + 0x7c], ecx
mov ecx, dword [edx]
mov dword [esp + 0x74], ecx
jmp 0x424855
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xa4]
cmp dword [esp + 0xb0], 5
mov dword [ecx], eax
jne 0x4246a3
cmp dword [ebx + 0xc], 5
je 0x4254ac
mov edx, dword [ebx + 0x1c]
mov eax, dword [ebx + 0x18]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00474ce0
lea edx, [eax - 1]
mov eax, dword [ebx + 0x20]
mov ecx, dword [eax + 0x9c]
test byte [ecx + 0x40], 0x40
jne 0x424d23
mov eax, dword [eax + 0x44]
cmp edx, eax
cmova edx, eax
mov eax, dword [esp + 0x7c]
mov ecx, edi
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x74]
test eax, eax
je 0x425b38
mov eax, dword [esp + 0x74]
cmp edx, eax
jae 0x424a29
mov eax, dword [0x483014]
mov dword [esp + 0xb0], edx
mov dword [esp + 0xb4], ecx
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0x88]
mov dword [esp], eax
call fcn.00402cb0
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x88], eax
mov dword [esp], ecx
call fcn.00402cb0
mov ecx, dword [esp + 0x88]
mov dword [esp], 0x489070
mov dword [esp + 0xc], eax
mov eax, 1
mov dword [esp + 0x14], ecx
movzx ecx, byte [esp + 0x74]
mov edx, eax
shl edx, cl
mov ecx, dword [esp + 0xcc]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], ecx
mov ecx, edx
shl eax, cl
mov dword [esp + 4], eax
mov eax, dword [esp + 0xa4]
call eax
jmp 0x424a29
mov edi, eax
mov eax, dword [esp + 0x5c]
mov esi, dword [0x483014]
mov dword [esp], eax
call fcn.00402cb0
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x6c]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edi
mov dword [esp + 4], eax
mov dword [esp], 0x489028
call esi
mov dword [esp], 0x10
call fcn.00402b90
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x424e2e
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov ecx, dword [esp + 0x9c]
test ecx, ecx
je 0x424e48
mov eax, dword [esp + 0x9c]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov edx, dword [esp + 0x98]
test edx, edx
je 0x423d04
mov eax, dword [esp + 0x98]
mov dword [esp], eax
call sub.msvcrt.dll_free
jmp 0x423d04
mov eax, ecx
or eax, 2
mov word [ebx + 0x6a], ax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], 0x40
mov edx, dword [esp + 0xd8]
mov dword [esp], eax
mov dword [esp + 0xdc], edx
mov dword [esp + 0x88], edx
mov dword [esp + 0x74], eax
call sub.msvcrt.dll_strchr
mov dword [esp + 0x7c], eax
test eax, eax
je 0x42527b
cmp byte [eax + 1], 0x40
jne 0x42527b
mov edx, dword [esp + 0x38]
mov eax, dword [edx + 0x14]
mov edx, dword [esp + 0x88]
test edx, edx
jne 0x425742
mov edx, dword [edi + 8]
mov ecx, dword [edx + 0x178]
mov edx, dword [edi + 0x40]
mov dword [esp + 0xb0], ecx
movzx ecx, byte [ecx + 0xf0]
mov dword [esp + 0xb8], edx
mov edx, dword [esp + 0x7c]
and ecx, 1
mov dword [esp], eax
mov byte [esp + 0xa4], cl
mov ecx, dword [esp + 0x74]
sub edx, ecx
mov dword [esp + 0x88], edx
add edx, 1
mov dword [esp + 4], edx
call fcn.00406110
mov ecx, eax
test eax, eax
je 0x424e14
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x74]
mov dword [esp], ecx
mov dword [esp + 0xb4], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov edx, dword [esp + 0x38]
mov byte [ecx + eax], 0
mov eax, dword [esp + 0xc4]
mov dword [esp], ebp
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0x20], eax
lea eax, [esp + 0xe4]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0xe0]
mov dword [esp + 0x18], eax
lea eax, [esp + 0xdc]
mov dword [esp + 0x14], eax
lea eax, [esp + 0xe8]
mov dword [esp + 0x10], eax
lea eax, [esp + 0xec]
mov dword [esp + 0xc], eax
lea eax, [esp + 0xf8]
mov dword [esp + 8], eax
lea eax, [esp + 0xf4]
mov dword [esp + 4], eax
mov eax, edi
call fcn.00421180
test eax, eax
je 0x424e14
movzx eax, byte [esp + 0xa4]
mov edx, dword [esp + 0xb8]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xe8]
and edx, 0x40
mov dword [esp + 0xb8], edx
test eax, eax
jne 0x425104
mov eax, dword [esp + 0xdc]
mov edx, dword [esp + 0xec]
mov ecx, dword [esp + 0xbc]
test eax, eax
je 0x4263f1
mov eax, dword [edx + 0xc]
sub eax, 6
cmp eax, 1
ja 0x425063
mov edx, dword [edx + 0x18]
mov eax, dword [edx + 0xc]
sub eax, 6
cmp eax, 1
jbe 0x42504e
mov dword [esp + 0xec], edx
movzx eax, word [ebx + 0x6a]
mov dword [ebx + 0xc], 6
mov dword [ebx + 0x18], edx
test al, 8
je 0x425091
and eax, 0xfffffff7
mov word [ebx + 0x6a], ax
movzx eax, word [edx + 0x6a]
mov ecx, eax
or ecx, 4
mov word [edx + 0x6a], cx
test al, 3
jne 0x42654f
mov dword [esp + 0xec], ebx
mov eax, ebx
test byte [eax + 0x6a], 0xa
jne 0x426528
mov dword [esp + 8], eax
mov edx, dword [eax + 0x18]
mov dword [esp + 0xa4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], edx
mov dword [esp], eax
call dword [eax + 0x90]
mov eax, dword [esp + 0x54]
test eax, eax
jne 0x425104
mov eax, dword [esp + 0xb8]
test eax, eax
mov eax, dword [esp + 0xa4]
jne 0x42678a
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x54], 1
test byte [ecx], 8
jne 0x425104
movzx eax, word [eax + 0x6a]
shr ax, 2
and eax, 1
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x74]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov dword [esp + 4], eax
mov dword [esp + 0xbc], eax
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
mov dword [esp], eax
call fcn.00406110
test eax, eax
je 0x424e14
mov ecx, dword [esp + 0x88]
mov dword [esp], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x74]
mov dword [esp + 4], ecx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0xbc]
add ecx, eax
mov eax, dword [esp + 0x88]
mov dword [esp], ecx
sub edx, eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 8], edx
add eax, 1
mov dword [esp + 4], eax
call sub.msvcrt.dll_memcpy
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x38]
mov dword [esp], ebp
mov eax, dword [esp + 0xc4]
mov dword [esp + 0xe0], 0
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0xe4]
mov dword [esp + 0x1c], ecx
lea ecx, [esp + 0xe0]
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0xdc]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0xe8]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0xec]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0xf8]
mov dword [esp + 8], ecx
lea ecx, [esp + 0xf4]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0xa4]
mov dword [esp + 0xf4], eax
mov eax, edi
mov dword [esp + 0xe4], 0
call fcn.00421180
test eax, eax
je 0x424e14
mov ecx, dword [esp + 0xe8]
test ecx, ecx
jne 0x42527b
mov edx, dword [esp + 0xdc]
mov eax, dword [esp + 0xec]
test edx, edx
je 0x4265d8
mov eax, dword [eax + 0xc]
sub eax, 3
cmp eax, 1
jbe 0x42527b
mov dword [esp], edi
mov edx, dword [0x483014]
mov dword [esp + 0x74], edx
call fcn.00402cb0
mov ecx, dword [esp + 0xa4]
mov dword [esp], 0x489134
mov dword [esp + 4], eax
mov edx, dword [esp + 0x74]
mov dword [esp + 8], ecx
call edx
mov ecx, dword [esp + 0x40]
test dword [esp + 0xac], ecx
je 0x4252d9
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], 0x40
mov dword [esp], eax
call sub.msvcrt.dll_strchr
test eax, eax
je 0x4252d9
cmp byte [eax + 1], 0x40
je 0x4252d9
mov eax, dword [esp + 0x8c]
test eax, eax
je 0x426071
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x8c]
add dword [esp + 0x90], 1
adc dword [esp + 0x94], 0
mov dword [ecx + eax*4], ebx
mov eax, dword [esp + 0x54]
test eax, eax
je 0x424b63
jmp 0x424b46
test eax, eax
jne 0x4247c4
jmp 0x42439a
mov dword [esp + 0x7c], 0
mov dword [esp + 0x74], 0
jmp 0x424855
mov dword [esp + 0x74], 0
mov dword [esp + 0x7c], 0x489010
jmp 0x42456e
mov ecx, dword [esp + 0x74]
mov ecx, dword [ecx + 0x3a0]
test ecx, ecx
je 0x425382
mov edx, dword [ecx + 0x18]
test edx, edx
jne 0x425347
jmp 0x42537b
mov edx, dword [edx + 0x14]
test edx, edx
je 0x42537b
cmp word [edx + 6], ax
jne 0x425340
mov eax, dword [edx + 0x10]
mov dword [esp + 0x7c], eax
test eax, eax
je 0x425382
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
mov ebx, eax
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call sub.msvcrt.dll_strlen
mov dword [esp + 0x74], eax
lea edx, [ebx + eax + 2]
jmp 0x424598
mov ecx, dword [ecx + 0x1c]
test ecx, ecx
jne 0x42532f
mov eax, dword [esp + 0x5c]
mov esi, dword [0x483014]
mov dword [esp], eax
call fcn.00402cb0
mov edi, dword [esp + 0x6c]
mov dword [esp + 8], ebx
mov dword [esp + 4], eax
mov dword [esp + 0xc], edi
mov dword [esp], 0x48904c
call esi
mov dword [esp], 0x10
call fcn.00402b90
jmp 0x424e14
cmp dword [esp + 0x40], 0
movsx ecx, byte [ebx + 0x68]
je 0x4254e5
test cl, cl
je 0x42542d
movzx eax, dl
cmp ecx, eax
je 0x42542d
mov ecx, dword [esp + 0xd4]
test ecx, ecx
jne 0x42542d
mov dword [esp], edi
mov edx, dword [0x483014]
mov dword [esp + 0x74], edx
call fcn.00402cb0
mov edx, dword [esp + 0x74]
mov dword [esp + 0x10], eax
movzx eax, byte [ebp + 0x14]
and eax, 0xf
mov dword [esp + 0xc], eax
movsx eax, byte [ebx + 0x68]
mov dword [esp], 0x4890f8
mov dword [esp + 8], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
call edx
movzx edx, byte [ebp + 0x14]
and edx, 0xf
movzx ecx, word [ebx + 0x6a]
mov byte [ebx + 0x68], dl
jmp 0x424a9f
mov eax, dword [esp + 0x50]
test eax, eax
je 0x424aeb
mov edx, dword [esp + 0x40]
test edx, edx
je 0x42546d
mov eax, 8
test cl, 3
je 0x42547b
mov eax, ecx
or eax, 8
mov word [ebx + 0x6a], ax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x54], eax
jmp 0x424e7c
mov eax, 4
test cl, 3
jne 0x425712
mov edx, dword [ebx + 0x38]
test byte [esp + 0x6c], 1
jne 0x4257cc
test edx, edx
je 0x4257cc
cmp dword [edx + 0x2c], 0xffffffff
mov dword [esp + 0x6c], 0
setne dl
movzx edx, dl
mov dword [esp + 0x54], edx
jmp 0x424b1e
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x74], eax
or eax, edx
mov dword [esp + 0x88], edx
jne 0x424a3e
mov eax, dword [ebx + 0x18]
mov edx, dword [ebx + 0x1c]
mov dword [ebx + 0x60], eax
mov dword [ebx + 0x64], edx
jmp 0x424a8c
cmp dword [esp + 0x7c], 5
je 0x4254c5
test al, 0xf
je 0x424a9b
cmp byte [ebx + 0x68], 0
movzx edx, byte [ebp + 0x15]
movzx ecx, word [ebx + 0x6a]
je 0x425708
test dl, dl
je 0x42551b
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x42546d
movzx eax, byte [ebx + 0x69]
mov byte [esp + 0x74], al
mov eax, edx
movzx edx, byte [esp + 0x74]
jmp 0x424acc
mov eax, dword [esp + 0x50]
test eax, eax
jne 0x42546d
mov eax, dword [esp + 0x38]
movzx eax, byte [eax]
mov byte [esp + 0x74], al
cmp byte [esp + 0x54], 2
mov eax, 1
mov edx, 0x11
cmovne eax, edx
test byte [esp + 0x74], 8
je 0x424b12
or eax, ecx
cmp dword [ebx + 0xc], 5
mov word [ebx + 0x6a], ax
jne 0x424b46
mov dword [esp + 0x54], 1
jmp 0x424e7c
mov ecx, dword [esp + 0xa4]
mov eax, edx
or eax, ecx
je 0x424a71
mov ecx, dword [esp + 0x88]
mov eax, dword [esp + 0x74]
mov dword [esp + 0xb0], ecx
xor eax, edx
mov ecx, dword [esp + 0xa4]
mov edx, dword [esp + 0xb0]
xor edx, ecx
or eax, edx
je 0x424a71
mov eax, dword [esp + 0xd0]
test eax, eax
jne 0x424a71
mov dword [esp], edi
mov edx, dword [0x483014]
mov dword [esp + 0xa4], edx
call fcn.00402cb0
mov ecx, dword [ebp + 8]
mov dword [esp + 0x74], eax
mov dword [esp + 0x88], ecx
mov ecx, dword [esp + 0x7c]
mov dword [esp], ecx
call fcn.00402cb0
mov ecx, dword [esp + 0x74]
mov edx, dword [esp + 0xa4]
mov dword [esp + 0xc], eax
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x88]
mov dword [esp + 0x10], ecx
mov eax, dword [ebx + 0x60]
mov dword [esp], 0x4890b4
mov dword [esp + 8], eax
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], eax
call edx
mov eax, dword [ebp + 8]
mov dword [esp + 0x74], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x88], eax
jmp 0x424a71
mov dword [esp + 0x70], eax
jmp 0x4246a3
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00437d70
test eax, eax
je 0x423d04
mov dword [esp + 0x98], 0
mov dword [esp + 0x3c], 0
mov eax, dword [esp + 0x5c]
mov ebp, dword [eax + 0xa4]
mov ecx, dword [ebp + 0x314]
test ecx, ecx
jne 0x425f11
mov eax, dword [esp + 0x80]
mov dword [esp + 0xa0], eax
jmp 0x424305
mov eax, dword [eax + 0x14]
jmp 0x42406c
mov edi, dword [esp + 0x68]
mov edi, dword [edi + 0x20]
mov dword [esp + 0x50], edi
test edi, edi
jne 0x423ebe
mov edi, dword [esp + 0x5c]
mov eax, dword [eax + 0x10]
cmp dword [edi + 8], eax
jne 0x423ebe
mov eax, dword [esp + 0x38]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.004235f0
test eax, eax
je 0x423d04
mov dword [esp + 0x70], 0
mov ecx, dword [edi + 0xa4]
jmp 0x423ed8
mov esi, dword [eax + 0x364]
xor eax, eax
test esi, esi
setne al
xor edi, edi
mov dword [esp + 0x70], eax
jmp 0x4240de
and eax, 0xf
mov edx, eax
jmp 0x425431
mov eax, ecx
or eax, 4
cmp dword [ebx + 0xc], 5
mov word [ebx + 0x6a], ax
jne 0x424b46
jmp 0x42555f
cmp al, dl
mov byte [esp + 0x74], dl
cmovbe edx, eax
test al, al
movzx eax, byte [esp + 0x74]
cmovne eax, edx
jmp 0x424ae4
mov ecx, dword [esp + 0x74]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 1
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.0045de00
mov dword [esp + 0xec], eax
test eax, eax
je 0x4263ca
cmp eax, ebx
je 0x42527b
xor ecx, ecx
jmp 0x425795
mov eax, dword [eax + 0x18]
mov ecx, 1
cmp eax, ebx
je 0x42527b
mov edx, dword [eax + 0xc]
sub edx, 6
cmp edx, 1
jbe 0x425785
test cl, cl
je 0x4257ab
mov dword [esp + 0xec], eax
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
jmp 0x424ed8
mov ecx, dword [esp + 0x88]
mov dword [eax], ecx
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
jmp 0x424a03
mov dword [esp + 0x54], 0
jmp 0x424b1e
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.00437d70
test eax, eax
jne 0x425666
jmp 0x424e57
mov edi, dword [esp + 0x60]
mov esi, dword [esp + 0x50]
mov dword [esp], esi
call sub.msvcrt.dll_free
mov ecx, dword [esp + 0xf8]
test ecx, ecx
je 0x4266e9
mov dword [esp + 0xf4], ecx
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0xec]
test eax, eax
je 0x426236
lea esi, [esi]
mov edx, eax
mov eax, dword [eax]
test eax, eax
jne 0x425830
mov dword [edx], ecx
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.004052c0
mov eax, dword [esp + 0x68]
mov ebp, dword [eax + 0x20]
test ebp, ebp
je 0x425ef0
test edi, edi
jne 0x425fb2
mov eax, dword [esp + 0x40]
cmp byte [eax], 0
je 0x426043
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax + 0xa4]
mov eax, dword [esp + 0x40]
mov edi, dword [ecx + 0x30c]
mov dword [ecx + 0x360], eax
test edi, edi
jne 0x425895
mov dword [esp + 0x50], 1
jmp 0x423ed8
lea eax, [ecx + 0x150]
mov dword [esp + 0x50], 1
mov dword [esp + 0x64], eax
jmp 0x423edf
mov edi, dword [esp + 0x8c]
test edi, edi
je 0x4259d6
mov edi, dword [esp + 0x90]
mov ebp, dword [esp + 0x94]
xor ecx, ecx
xor ebx, ebx
mov eax, edi
mov edi, ecx
or eax, ebp
mov ebp, ebx
jne 0x425904
jmp 0x4259c7
mov edx, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
add edi, 1
adc ebp, 0
mov eax, edx
mov edx, ecx
xor eax, edi
xor edx, ebp
or eax, edx
je 0x4259c7
mov ecx, dword [esp + 0x8c]
lea eax, [edi*4]
mov esi, dword [ecx + eax]
mov edx, dword [esi + 4]
mov dword [esp + 4], 0x40
mov dword [esp], edx
mov dword [esp + 0x3c], edx
call sub.msvcrt.dll_strchr
mov ebx, eax
test eax, eax
je 0x4258e0
mov eax, dword [esi + 0xc]
sub eax, 3
cmp eax, 1
ja 0x4258e0
mov edx, dword [esp + 0x3c]
sub ebx, edx
mov eax, ebx
cdq
add eax, 1
adc edx, 0
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00403e60
mov ecx, eax
mov eax, dword [esi + 4]
mov dword [esp + 8], ebx
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 0x3c], ecx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x3c]
mov byte [eax + ebx], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov eax, dword [eax + 0x14]
mov dword [esp], eax
call fcn.0045de00
mov ebx, eax
test eax, eax
je 0x4259b6
mov eax, dword [esi + 0xc]
cmp dword [ebx + 0xc], eax
je 0x425d80
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call sub.msvcrt.dll_free
jmp 0x4258e0
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov eax, dword [esp + 0x9c]
test eax, eax
je 0x4259e9
mov dword [esp], eax
call sub.msvcrt.dll_free
mov esi, dword [esp + 0x98]
test esi, esi
je 0x425a03
mov eax, dword [esp + 0x98]
mov dword [esp], eax
call sub.msvcrt.dll_free
mov ebx, dword [esp + 0xa8]
test ebx, ebx
je 0x423f5b
mov ecx, dword [esp + 0xa0]
mov edi, dword [esp + 0x5c]
shl ecx, 2
mov dword [esp + 0x58], ecx
mov ecx, dword [esp + 0xa8]
lea esi, cs:[esi]
mov esi, ecx
mov ecx, dword [ecx + 0x38]
mov eax, dword [esi + 0xc]
mov dword [esi + 0x38], 0
sub eax, 3
cmp eax, 3
ja 0x425af0
mov eax, dword [esi + 0x18]
mov ebx, dword [esp + 0x58]
mov ebp, dword [esi + 0x20]
mov dword [esp + 0x48], eax
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x54], eax
mov eax, dword [edi + 0xa4]
mov eax, dword [eax + 0x354]
lea edx, [eax + ebx]
cmp eax, edx
jae 0x425ad0
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], edi
jmp 0x425a87
add eax, 4
cmp eax, edx
jae 0x425ae0
mov ebx, dword [eax]
test ebx, ebx
je 0x425a80
cmp ebx, esi
je 0x425a80
cmp dword [ebx + 0xc], 3
jne 0x425a80
cmp dword [ebx + 0x20], ebp
jne 0x425a80
mov ecx, dword [esp + 0x48]
mov edi, dword [esp + 0x54]
xor ecx, dword [ebx + 0x18]
xor edi, dword [ebx + 0x1c]
or ecx, edi
jne 0x425a80
cmp dword [esi + 0x2c], 0xffffffff
mov ecx, dword [esp + 0x3c]
mov dword [esi + 0x38], ebx
mov edi, dword [esp + 0x40]
mov eax, dword [ebx + 0x2c]
je 0x425e78
cmp eax, 0xffffffff
je 0x4261f3
nop
test ecx, ecx
jne 0x425a30
jmp 0x423f5b
mov ecx, dword [esp + 0x3c]
mov edi, dword [esp + 0x40]
jmp 0x425ad0
mov dword [esp + 4], 0x95b
mov dword [esp], 0x488dee
mov dword [esp + 0x3c], ecx
call fcn.00402e90
mov ecx, dword [esp + 0x3c]
jmp 0x425a4b
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x42605b
mov dword [esp + 0x6c], 0
test dl, dl
je 0x424a10
jmp 0x42498b
mov eax, dword [ebp]
mov dword [esp + 0xa4], edx
mov edx, dword [ebp + 4]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00404390
mov dword [esp + 0x88], edi
mov ecx, dword [esp + 0x7c]
mov dword [esp + 0x74], eax
mov edx, dword [esp + 0xa4]
jmp 0x424d3c
mov dword [esp + 4], 0xc
mov dword [esp + 8], 0
mov dword [esp], esi
mov dword [esp + 0x64], edx
call fcn.00404cf0
mov edx, dword [esp + 0x64]
mov dword [esp], esi
mov ebx, eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.0042ed90
test ebx, ebx
je 0x424227
test eax, eax
je 0x424227
mov dword [esp], eax
mov dword [esp + 0x6c], eax
call sub.msvcrt.dll_strlen
mov dword [esp + 8], 0
lea ecx, [eax + 1]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 0x64], ecx
call fcn.00404cf0
mov edi, eax
test eax, eax
je 0x424227
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x6c]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
call sub.msvcrt.dll_memcpy
mov dword [ebx], 0
mov eax, dword [esp + 0xf8]
mov dword [ebx + 8], edi
mov dword [ebx + 4], esi
test eax, eax
je 0x426228
lea esi, cs:[esi]
nop
mov edx, eax
mov eax, dword [eax]
test eax, eax
jne 0x425c20
mov dword [edx], ebx
jmp 0x4241d8
mov dword [esp + 4], 0xc
mov dword [esp + 8], 0
mov dword [esp], esi
mov dword [esp + 0x64], edx
call fcn.00404cf0
mov edx, dword [esp + 0x64]
mov dword [esp], esi
mov ebx, eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.0042ed90
test ebx, ebx
je 0x424227
test eax, eax
je 0x424227
mov dword [esp], eax
mov dword [esp + 0x6c], eax
call sub.msvcrt.dll_strlen
mov dword [esp + 8], 0
lea ecx, [eax + 1]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 0x64], ecx
call fcn.00404cf0
mov edi, eax
test eax, eax
je 0x424227
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x6c]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0x68]
mov dword [ebx], 0
mov dword [ebx + 8], edi
mov eax, dword [eax + 0x50]
mov dword [ebx + 4], esi
test eax, eax
je 0x426311
lea esi, [esi]
mov edx, eax
mov eax, dword [eax]
test eax, eax
jne 0x425ce0
mov dword [edx], ebx
jmp 0x4241d8
mov eax, dword [esp + 0x38]
mov dword [esp + 8], 1
mov dword [esp + 4], ebx
mov dword [esp], eax
mov eax, dword [esp + 0x78]
call dword [eax + 0x94]
jmp 0x424b63
mov dword [esp + 0x40], edx
mov edi, 1
mov dword [esp + 0x70], 0
jmp 0x4240de
mov eax, dword [esp + 0x38]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.0043a910
test eax, eax
je 0x424e14
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x424b63
test byte [esp + 0x6c], 1
jne 0x424b63
cmp dword [eax + 0x2c], 0xffffffff
jne 0x424b63
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.0043a910
test eax, eax
jne 0x424b63
jmp 0x424e14
mov eax, dword [ebx + 0x18]
mov edx, dword [ebx + 0x1c]
xor eax, dword [esi + 0x18]
xor edx, dword [esi + 0x1c]
or eax, edx
jne 0x4259b6
mov eax, dword [esi + 0x20]
cmp dword [ebx + 0x20], eax
jne 0x4259b6
mov eax, dword [esp + 0x38]
mov dword [esp + 8], 1
mov dword [esp + 4], ebx
mov dword [esp], eax
mov eax, dword [esp + 0x78]
call dword [eax + 0x94]
mov eax, dword [esp + 0x78]
mov dword [ebx + 0xc], 6
mov dword [ebx + 0x18], esi
mov dword [esp], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
call dword [eax + 0x90]
mov eax, dword [esp + 0x5c]
mov eax, dword [eax + 0xa4]
mov ecx, dword [eax + 0x354]
test ecx, ecx
je 0x4259b6
mov eax, dword [esp + 0x80]
mov edx, dword [esp + 0x84]
or eax, edx
je 0x4259b6
mov dword [esp + 0x4c], ebp
mov ebp, esi
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], edi
jmp 0x425e5f
add dword [esp + 0x40], 1
mov esi, dword [esp + 0x40]
adc dword [esp + 0x44], 0
mov edi, dword [esp + 0x44]
add ecx, 4
mov dword [esp + 0x54], esi
mov eax, dword [esp + 0x80]
mov esi, edi
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0x54]
xor edx, esi
xor eax, edi
or eax, edx
je 0x42686c
cmp dword [ecx], ebx
jne 0x425e26
mov esi, ebp
mov edi, dword [esp + 0x48]
mov ebp, dword [esp + 0x4c]
mov dword [ecx], esi
jmp 0x4259b6
cmp eax, 0xffffffff
je 0x425ad0
mov eax, dword [esp + 0x38]
mov dword [esp + 4], esi
mov dword [esp + 0x3c], ecx
mov dword [esp], eax
call fcn.0043a910
mov ecx, dword [esp + 0x3c]
test eax, eax
jne 0x425ad0
jmp 0x423d04
mov dword [esp + 4], 0x48901f
mov dword [esp], edi
call fcn.004055c0
mov ebx, eax
test eax, eax
je 0x424e14
mov dword [esp + 8], 0x809001
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00405690
test eax, eax
jne 0x424791
jmp 0x424e14
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.004235f0
test eax, eax
jne 0x425855
jmp 0x423d04
mov eax, dword [ebp + 0x1f8]
mov edx, dword [ebp + 0x1fc]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00403e60
mov dword [esp + 0x9c], eax
mov edi, eax
test eax, eax
je 0x424e48
mov ebx, dword [ebp + 0x1f8]
mov esi, dword [ebp + 0x1fc]
mov dword [esp + 0xc], 0
mov eax, dword [ebp + 0x210]
mov edx, dword [ebp + 0x214]
mov ebp, dword [esp + 0x5c]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp], ebp
call fcn.0045a860
test eax, eax
jne 0x424e39
mov dword [esp + 0xc], ebp
mov dword [esp + 4], ebx
mov dword [esp + 8], esi
mov dword [esp], edi
call fcn.0045a310
xor eax, ebx
xor edx, esi
or eax, edx
jne 0x424e39
mov eax, dword [esp + 0x40]
add eax, eax
lea esi, [edi + eax]
mov eax, dword [esp + 0x80]
mov dword [esp + 0xa0], eax
jmp 0x424312
mov edi, dword [esp + 0x68]
mov eax, dword [edi + 0x40]
mov dword [esp], eax
call fcn.0043bac0
mov dword [esp + 8], 0
mov ebx, eax
mov eax, dword [esp + 0x40]
mov esi, edx
mov dword [esp + 4], eax
mov eax, dword [edi + 0x40]
mov dword [esp], eax
call fcn.0043b7e0
mov dword [esp + 0x3c], eax
and eax, edx
mov dword [esp + 0x50], edx
cmp eax, 0xffffffff
je 0x423d04
mov eax, dword [edi + 0x40]
mov dword [esp], eax
call fcn.0043bac0
xor eax, ebx
xor edx, esi
or eax, edx
je 0x42631f
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], 1
mov dword [esp + 8], 0
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.00423970
test eax, eax
jne 0x42585d
jmp 0x423d04
mov eax, dword [esp + 0x5c]
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.00475270
mov dword [esp + 0x40], eax
jmp 0x42586a
mov eax, dword [esp + 0xa8]
mov dword [esp + 0xa8], ebx
mov dword [ebx + 0x38], eax
jmp 0x425b24
mov eax, dword [esp + 0x60]
mov dword [esp + 4], 0
sub eax, ebp
sar eax, 5
lea eax, [eax*4 + 4]
mov dword [esp], eax
call fcn.00403e60
mov dword [esp + 0x8c], eax
jmp 0x4252b8
mov dword [esp + 4], 0xc
mov dword [esp + 8], 0
mov dword [esp], esi
mov dword [esp + 0x64], edx
call fcn.00404cf0
mov edx, dword [esp + 0x64]
mov dword [esp], esi
mov ebx, eax
mov eax, dword [esp + 0x54]
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call fcn.0042ed90
test ebx, ebx
je 0x424227
test eax, eax
je 0x424227
mov dword [esp], eax
mov dword [esp + 0x6c], eax
call sub.msvcrt.dll_strlen
mov dword [esp + 8], 0
lea ecx, [eax + 1]
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 0x64], ecx
call fcn.00404cf0
mov edi, eax
test eax, eax
je 0x424227
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x6c]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
call sub.msvcrt.dll_memcpy
mov eax, dword [esp + 0xf4]
mov dword [ebx + 8], edi
mov dword [ebx + 4], esi
mov dword [ebx], 0
test eax, eax
je 0x4265ca
mov edx, eax
mov eax, dword [eax]
test eax, eax
jne 0x426147
mov dword [edx], ebx
jmp 0x4241d8
mov eax, dword [esp + 0x74]
test eax, eax
jne 0x424cd2
mov eax, dword [esp + 0xa4]
mov ecx, dword [esp + 0x88]
cmp dword [esp + 0xb0], 5
mov dword [eax], ecx
jne 0x4246a3
jmp 0x424a1c
cmp ecx, 1
jne 0x42403a
mov eax, dword [edi + 4]
mov dword [esp + 0x3c], eax
and eax, 0xfffffffd
cmp eax, 1
jne 0x4267b3
and edx, 1
je 0x423fb9
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], 8
mov dword [esp + 8], 0
mov dword [esp], eax
call fcn.00404cf0
test eax, eax
je 0x423d04
mov edi, dword [esp + 0x68]
movd xmm1, dword [esp + 0x5c]
movd xmm0, dword [edi + 0xf4]
punpckldq xmm0, xmm1
movq qword [eax], xmm0
mov dword [edi + 0xf4], eax
jmp 0x42403a
mov eax, dword [esp + 0x38]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.0043a910
test eax, eax
je 0x423d04
cmp dword [ebx + 0x2c], 0xffffffff
mov ecx, dword [esp + 0x3c]
je 0x425ad0
cmp dword [esi + 0x2c], 0xffffffff
jne 0x425ad0
jmp 0x425e81
lea edx, [esp + 0xf8]
mov dword [edx], ebx
jmp 0x4241d8
mov eax, dword [esp + 0x68]
lea edx, [eax + 0xec]
mov dword [edx], ecx
jmp 0x42583a
mov edi, dword [esp + 0x5c]
mov ebx, dword [edi + 0x64]
test ebx, ebx
je 0x423f8b
mov esi, dword [esp + 0x38]
mov eax, dword [ebx + 0x10]
test al, 4
je 0x4262fa
mov edx, dword [ebx + 0x50]
test edx, edx
je 0x4262fa
mov edx, dword [esi + 4]
and edx, 0xfffffffd
cmp edx, 1
jne 0x426282
test eax, 0x10000
jne 0x4262fa
cmp dword [ebx + 0x40], 0x484fc0
je 0x4262fa
movzx eax, byte [esi + 1]
mov edi, dword [esp + 0x5c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
shr al, 5
mov dword [esp + 4], ebx
and eax, 1
mov dword [esp], edi
mov dword [esp + 0x10], eax
call fcn.00423a80
test eax, eax
je 0x423d04
mov dword [esp], edi
mov dword [esp + 0xc], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], esi
call ebp
mov ecx, dword [ebx + 0x94]
mov edx, dword [esp + 0x3c]
mov edi, eax
cmp dword [ecx + 0xb0], edx
je 0x4262f2
mov dword [esp], edx
call sub.msvcrt.dll_free
test edi, edi
je 0x423d04
mov ebx, dword [ebx + 0xc]
test ebx, ebx
jne 0x42625a
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
jmp 0x423f8b
mov eax, dword [esp + 0x68]
lea edx, [eax + 0x50]
mov dword [edx], ebx
jmp 0x4241d8
mov eax, dword [esp + 0x68]
mov dword [esp + 4], 0x488ff8
mov eax, dword [eax + 0x24]
mov dword [esp], eax
call fcn.00405300
mov ebx, eax
test eax, eax
je 0x42679a
mov esi, dword [ebx + 0x74]
mov eax, dword [ebx + 0x30]
add eax, esi
mov ebx, eax
cmp esi, eax
jb 0x426363
jmp 0x42600a
add esi, 8
cmp esi, ebx
jae 0x42600a
mov eax, dword [esp + 0x68]
mov ebp, dword [eax + 0x24]
mov eax, dword [ebp + 8]
mov dword [esp], esi
call dword [eax + 0x4c]
mov edi, eax
mov eax, dword [ebp + 8]
mov dword [esp + 0x54], edx
lea edx, [esi + 4]
mov dword [esp], edx
call dword [eax + 0x4c]
mov ebp, eax
mov ecx, edx
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x50]
xor eax, ebp
xor edx, ecx
or eax, edx
jne 0x426358
mov edx, dword [esp + 0x54]
mov eax, edi
xor eax, 1
or eax, edx
jne 0x426358
mov eax, dword [esp + 0x3c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x68]
mov eax, dword [eax + 0x40]
mov dword [esp], eax
call fcn.0043b990
jmp 0x42403a
mov dword [esp + 4], 0x434
mov dword [esp], 0x488dee
mov dword [esp + 0x88], eax
call fcn.00402e90
mov eax, dword [esp + 0x88]
jmp 0x425781
lea eax, [esp + 0xf0]
mov dword [esp + 0x20], 0
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x14], 0
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], 0x484f00
mov dword [esp + 0xc], 0x2000
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], eax
mov dword [esp + 0xf0], edx
call fcn.0045e8b0
test eax, eax
je 0x424e14
mov eax, dword [esp + 0xf0]
mov dword [esp + 0xec], eax
mov edx, dword [eax + 0xc]
cmp edx, 6
jne 0x425104
jmp 0x42509a
mov eax, dword [esp + 0x68]
mov dword [esp + 4], 0x488ff8
mov eax, dword [eax + 0x24]
mov dword [esp], eax
call fcn.00405300
test eax, eax
je 0x426769
mov ebx, dword [eax + 0x74]
mov ecx, dword [eax + 0x30]
add ecx, ebx
mov dword [esp + 0x6c], ecx
cmp ebx, ecx
jae 0x424bfc
mov dword [esp + 0x7c], esi
mov eax, dword [esp + 0x68]
mov esi, dword [eax + 0x24]
mov eax, dword [esi + 8]
mov dword [esp], ebx
call dword [eax + 0x4c]
mov dword [esp + 0x70], eax
mov eax, dword [esi + 8]
mov dword [esp + 0x74], edx
lea edx, [ebx + 4]
mov dword [esp], edx
call dword [eax + 0x4c]
mov esi, eax
mov ecx, edx
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x54]
xor eax, esi
xor edx, ecx
or eax, edx
jne 0x4264fe
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x74]
xor eax, 1
or eax, edx
je 0x426512
mov eax, dword [esp + 0x6c]
add ebx, 8
cmp ebx, eax
jb 0x4264b7
mov esi, dword [esp + 0x7c]
jmp 0x424bfc
mov dword [esp + 4], 0x8fc
mov dword [esp], 0x488dee
call fcn.00402e90
jmp 0x4264fe
mov dword [esp + 4], 0x499
mov dword [esp], 0x488dee
mov dword [esp + 0xa4], eax
call fcn.00402e90
mov eax, dword [esp + 0xa4]
jmp 0x4250a4
mov eax, dword [esp + 0x38]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0043a910
test eax, eax
je 0x424e14
mov dword [esp + 0xec], ebx
mov edx, dword [ebx + 0xc]
mov eax, ebx
jmp 0x42646b
mov eax, dword [esp + 0x9c]
test eax, eax
je 0x426885
mov dword [esp], eax
call sub.msvcrt.dll_free
mov ebp, dword [esp + 0x98]
mov dword [esp + 0xa8], 0
test ebp, ebp
jne 0x4259f4
jmp 0x423f5b
mov dword [esp + 8], 0x489400
mov dword [esp + 4], 0x56d
mov dword [esp], 0x488dee
call fcn.00402ec0
lea edx, [esp + 0xf4]
mov dword [edx], ebx
jmp 0x4241d8
mov dword [esp + 0xf0], eax
lea eax, [esp + 0xf0]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x14], 0
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x18], 0
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x10], 0x484f00
mov dword [esp + 0xc], 0x2000
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.0045e8b0
test eax, eax
je 0x424e14
mov eax, dword [esp + 0xf0]
cmp dword [eax + 0xc], 6
mov dword [esp + 0xec], eax
jne 0x42527b
test byte [eax + 0x6a], 0xa
jne 0x426748
mov dword [esp + 8], eax
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], ebx
mov dword [esp], eax
call dword [eax + 0x90]
cmp dword [esp + 0x54], 0
mov eax, dword [esp + 0x74]
jne 0x426703
cmp dword [esp + 0xb8], 0
jne 0x4266fd
mov ecx, dword [esp + 0x38]
test byte [ecx], 8
jne 0x426703
test byte [eax + 0x6a], 4
jne 0x426703
mov eax, dword [esp + 0x50]
xor eax, 1
test dword [esp + 0x40], eax
je 0x424b63
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], 0x40
mov dword [esp], eax
call sub.msvcrt.dll_strchr
test eax, eax
je 0x424b63
cmp byte [eax + 1], 0x40
jne 0x4252a9
jmp 0x424b63
mov ecx, dword [esp + 0xf4]
test ecx, ecx
je 0x42583a
jmp 0x425818
test byte [eax + 0x6a], 1
je 0x4266aa
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x40]
xor eax, 1
and ecx, eax
mov dword [esp + 0x54], ecx
je 0x424b46
mov eax, dword [esp + 0xcc]
mov dword [esp + 4], 0x40
mov dword [esp], eax
call sub.msvcrt.dll_strchr
test eax, eax
je 0x424b46
cmp byte [eax + 1], 0x40
jne 0x4252a9
jmp 0x424b46
mov dword [esp + 4], 0x4e7
mov dword [esp], 0x488dee
mov dword [esp + 0x74], eax
call fcn.00402e90
mov eax, dword [esp + 0x74]
jmp 0x42666a
mov dword [esp + 4], 0x8f1
mov dword [esp], 0x488dee
mov dword [esp + 0x6c], eax
call fcn.00402e90
mov eax, dword [esp + 0x6c]
jmp 0x42649f
movzx eax, word [eax + 0x6a]
and eax, 1
mov dword [esp + 0x54], eax
jmp 0x425104
mov dword [esp + 4], 0x667
mov dword [esp], 0x488dee
call fcn.00402e90
jmp 0x426340
mov edi, dword [esp + 0x5c]
mov dword [esp + 4], 0x48917b
mov dword [esp], edi
call fcn.00405300
mov ebx, eax
test eax, eax
je 0x4268ae
test byte [eax + 0x13], 0x20
jne 0x4268ae
cmp dword [eax + 0x40], 0x484fc0
je 0x4268ae
mov dword [esp + 4], 0x489181
mov dword [esp], edi
call fcn.00405300
test eax, eax
je 0x4268ae
mov esi, dword [ebx + 0x94]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], ebx
lea edx, [esi + 0xc4]
mov dword [esp], edi
add eax, 0x58
mov dword [esp + 0x10], edx
mov dword [esp + 4], eax
call fcn.00460800
test eax, eax
je 0x423d04
mov edi, dword [esp + 0x38]
movzx eax, byte [edi]
mov edx, eax
mov byte [esp + 0x3c], al
mov eax, dword [edi + 0x14]
and edx, 1
cmp dword [esi + 0xc4], 0
je 0x4268a1
movzx ecx, word [ebx + 0x14]
and cx, 0xfe3f
or ecx, 0x40
mov word [ebx + 0x14], cx
test dl, dl
je 0x423faf
jmp 0x424030
mov edi, dword [esp + 0x48]
mov ebp, dword [esp + 0x4c]
jmp 0x4259b6
mov eax, dword [esp + 0x38]
mov eax, dword [eax + 0x14]
jmp 0x423eb4
mov eax, dword [esp + 0x98]
test eax, eax
je 0x423f5b
mov dword [esp], eax
call sub.msvcrt.dll_free
jmp 0x423f5b
test dl, dl
je 0x423faf
jmp 0x424030
mov edi, dword [esp + 0x38]
mov eax, dword [edi + 0x14]
test byte [edi], 1
je 0x423faf
jmp 0x424030