Function at 0x42cba1
Capabilities:
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0xb4
push ebx
push esi
xor ebx, ebx
cmp dword [ebp + 0x74], ebx
mov esi, ecx
push edi
mov dword [ebp + 0x60], esi
jne 0x42cbc1
mov eax, dword [esi + 0x28]
mov dword [ebp + 0x74], eax
call fcn.00439bdb
lea ecx, [ebp + 0x70]
call fcn.0040de83
test byte [esi + 0xc], 1
je 0x42cbe0
cmp dword [0x4bde94], ebx
mov byte [ebp + 0x4b], 1
jne 0x42cbe4
mov byte [ebp + 0x4b], 0
mov edi, dword [ebp + 0x70]
cmp word [edi], 0x40
jne 0x42cbf6
inc edi
inc edi
mov dword [ebp + 0x70], edi
mov byte [ebp + 0x4b], 0
mov dword [ebp + 0x64], 0x80004001
cmp word [edi], bx
je 0x42dafa
and dword [ebp + 0x38], 0
and dword [ebp + 0x4c], 0
xor bl, bl
cmp word [edi], 0x2d
mov byte [ebp + 0x5f], 0
je 0x42ce02
cmp byte [ebp + 0x4b], 0
je 0x42cc7c
test byte [esi + 0xc], 2
je 0x42cc37
push edi
lea ecx, [ebp + 0x38]
call fcn.0044584c
mov eax, dword [eax]
jmp 0x42cc4a
push 1
push 0
lea eax, [ebp + 0x38]
push eax
push edi
mov ecx, esi
call fcn.0044c0fc
mov eax, dword [ebp + 0x38]
test bl, bl
mov dword [ebp + 0x4c], eax
jne 0x42cc72
test byte [esi + 0xc], 0x14
je 0x42cc72
push dword [ebp + 0x7c]
mov ecx, esi
push 0x11
push 0
push eax
call fcn.0041abe7
test byte [esi + 0xc], 0x10
jne 0x42cc7c
and dword [ebp + 0x4c], 0
jmp 0x42cc7c
test byte [esi + 0xc], 8
jne 0x42cc7c
mov byte [ebp + 0x5f], 2
xor edi, edi
test bl, bl
mov dword [ebp + 0x44], edi
jne 0x42ce1d
lea ecx, [ebp + 0x70]
mov byte [ebp + 0x43], 0xa
call fcn.0040de83
lea ecx, [ebp + 0x3c]
call fcn.0043d47d
mov edi, dword [ebp + 0x70]
xor eax, eax
jmp 0x42cca7
inc edi
inc edi
inc eax
cmp word [edi], 0x5e
je 0x42cca4
dec eax
test ax, ax
jl 0x42cce3
inc eax
movsx esi, ax
mov ecx, dword [ebp + 0x60]
and dword [ebp + 0x70], 0
push 1
push 0
lea eax, [ebp + 0x70]
push eax
push edi
call fcn.0044c0fc
mov eax, dword [ebp + 0x44]
mov edi, dword [ebp + 0x70]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x44], edi
mov dword [ebp + 0x70], eax
call fcn.00437960
dec esi
jne 0x42ccb7
lea eax, [ebp + 0x58]
push eax
xor esi, esi
mov dword [ebp + 0x58], edi
call fcn.004050f3
mov eax, dword [ebp + 0x58]
sub eax, edi
sar eax, 1
dec eax
pop ecx
mov ecx, edi
js 0x42ce5b
inc eax
cmp word [ecx], 0x25
jne 0x42cd0a
inc esi
inc ecx
inc ecx
dec eax
jne 0x42cd03
cmp si, 2
jl 0x42ce5b
lea eax, [ebp + 0x58]
push eax
mov dword [ebp + 0x58], edi
call fcn.004050f3
mov esi, dword [ebp + 0x58]
pop ecx
push esi
lea ecx, [ebp + 0x54]
call fcn.004457e4
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov ecx, dword [ebp + 0x60]
mov ebx, eax
xor eax, eax
push 1
mov dword [ebp + 0x50], eax
push eax
mov word [esi], ax
lea eax, [ebp + 0x50]
push eax
push edi
call fcn.0044c0fc
mov eax, dword [ebp + 0x50]
mov dword [ebp + 0x70], eax
movzx eax, word [eax]
jmp 0x42cd72
cmp ax, 0x40
jne 0x42cd79
add dword [ebp + 0x70], 2
mov eax, dword [ebp + 0x70]
mov ax, word [eax]
mov byte [ebp + 0x4b], 0
test ax, ax
jne 0x42cd5e
jmp 0x42cd7f
cmp word [edi], 0x2d
je 0x42cddf
push dword [ebp + 0x70]
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov esi, eax
lea eax, [esi + ebx + 3]
push eax
lea ecx, [ebp + 0x44]
call fcn.0043d4c2
mov edi, dword [ebp + 0x44]
push esi
push dword [ebp + 0x70]
push edi
call fcn.00405064
mov eax, dword [ebp + 0x44]
inc ebx
push ebx
push dword [ebp + 0x54]
lea eax, [eax + esi*2]
push eax
call fcn.00405064
mov eax, dword [ebp + 0x44]
add esp, 0x18
cmp word [eax], 0x5e
lea ecx, [ebp + 0x50]
jne 0x42ce4e
dec byte [ebp + 0x43]
js 0x42ce3a
call fcn.00437960
lea ecx, [ebp + 0x54]
call fcn.00437960
jmp 0x42cca0
lea ecx, [ebp + 0x50]
call fcn.00437960
lea ecx, [ebp + 0x54]
call fcn.00437960
lea ecx, [ebp + 0x3c]
call fcn.00437960
lea ecx, [ebp + 0x44]
call fcn.00437960
mov esi, dword [ebp + 0x60]
mov bl, byte [edi]
inc edi
inc edi
cmp word [edi], 0x20
mov dword [ebp + 0x70], edi
jne 0x42cc1e
inc edi
inc edi
mov dword [ebp + 0x70], edi
jmp 0x42cc1e
cmp dword [ebp + 0x4c], edi
je 0x42ce32
push dword [ebp + 0x7c]
mov ecx, esi
push 0x21
push edi
push dword [ebp + 0x4c]
call fcn.0041abe7
mov dword [ebp + 0x64], edi
jmp 0x42e5b8
mov dword [ebp + 0x64], 0x80070057
call fcn.00437960
lea ecx, [ebp + 0x54]
jmp 0x42e1dc
call fcn.00437960
lea ecx, [ebp + 0x54]
call fcn.00437960
mov ax, word [edi]
cmp ax, 0x28
je 0x42ce6a
cmp ax, 0x7b
jne 0x42ce8f
mov eax, dword [ebp + 0x44]
mov ecx, dword [ebp + 0x60]
and dword [ebp + 0x44], 0
push 1
mov dword [ebp + 0x70], eax
push 0
lea eax, [ebp + 0x44]
push eax
push edi
call fcn.0044b30d
lea ecx, [ebp + 0x70]
call fcn.00437960
jmp 0x42ce9d
cmp dword [ebp + 0x44], edi
je 0x42ce9d
push edi
lea ecx, [ebp + 0x44]
call fcn.004458a8
mov eax, dword [ebp + 0x44]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x70], eax
call fcn.0040de83
mov esi, dword [ebp + 0x70]
mov ax, word [esi]
cmp ax, 0x23
je 0x42dae2
test ax, ax
je 0x42dae2
cmp ax, 0x28
je 0x42e5de
cmp ax, 0x7b
je 0x42e5d8
cmp ax, 0x5b
jne 0x42cee9
cmp word [esi + 2], 0x5d
je 0x42e5d8
cmp ax, 0x46
mov edi, esi
mov dword [ebp + 0x58], edi
mov ebx, esi
jne 0x42cf12
cmp word [esi + 2], 0x49
jne 0x42cf12
cmp word [esi + 4], 0x4e
jne 0x42cf12
cmp word [esi + 6], 0x44
jne 0x42cf12
cmp word [esi + 8], 0x20
je 0x42cf26
mov ecx, dword [ebp + 0x60]
push 1
push 0
lea eax, [ebp + 0x3c]
push eax
push esi
call fcn.0044c0fc
mov ebx, dword [ebp + 0x3c]
mov ax, word [esi]
and dword [ebp + 0x54], 0
push 0x22
pop ecx
cmp ax, cx
push 0x7c
mov dword [ebp + 0x50], ecx
pop edx
je 0x42cf43
cmp ax, dx
mov dword [ebp + 0x50], edx
jne 0x42cf9c
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov cx, word [ebp + 0x50]
cmp word [esi], cx
lea eax, [esi + eax*2 - 2]
jne 0x42cf6e
mov ecx, dword [ebp + 0x50]
cmp word [eax], cx
jne 0x42cf6e
inc edi
inc edi
dec eax
dec eax
inc dword [ebp + 0x54]
cmp word [edi], cx
mov dword [ebp + 0x58], edi
je 0x42cf5a
and word [eax + 2], 0
cmp dword [ebp + 0x54], 0
jle 0x42cf88
push ebx
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
sub eax, dword [ebp + 0x54]
and word [ebx + eax*2], 0
lea ecx, [ebp + 0x58]
call fcn.0040de83
mov edi, dword [ebp + 0x58]
mov eax, edi
sub eax, esi
sar eax, 1
lea ebx, [ebx + eax*2]
lea esi, [ebp + 0x54]
mov dword [ebp + 0x54], edi
call fcn.00411173
mov eax, dword [ebp + 0x54]
sub eax, edi
sar eax, 1
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x54], ebx
call fcn.00411173
mov esi, dword [ebp + 0x54]
mov eax, esi
sub eax, ebx
sar eax, 1
push edi
mov dword [ebp + 0x54], eax
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], esi
call fcn.0040de83
mov esi, dword [ebp + 0x50]
xor eax, eax
cmp esi, 3
mov dword [ebp + 0x30], eax
jl 0x42d0a7
cmp esi, 0x7f
jg 0x42d0a7
xor ecx, ecx
mov cx, word [edi]
push ecx
call fcn.004127eb
add esp, 4
test al, al
mov al, cl
je 0x42d009
and al, 0xdf
jmp 0x42d010
cmp cx, 0xff
ja 0x42d015
lea ecx, [ebp + 0x31]
jmp 0x42d01f
mov esi, dword [ebp + 0x50]
mov byte [ebp + 0x31], ch
lea ecx, [ebp + 0x32]
inc esi
xor edx, edx
mov dx, word [edi + 2]
mov byte [ebp + 0x30], al
push edx
call fcn.004127eb
add esp, 4
test al, al
mov al, dl
je 0x42d03e
and al, 0xdf
mov byte [ecx], al
inc ecx
jmp 0x42d04c
mov byte [ecx], al
inc ecx
cmp dx, 0xff
jbe 0x42d04c
mov byte [ecx], dh
inc ecx
inc esi
xor edx, edx
mov dx, word [edi + 4]
push edx
call fcn.004127eb
add esp, 4
test al, al
mov al, dl
je 0x42d068
and al, 0xdf
mov byte [ecx], al
inc ecx
jmp 0x42d076
mov byte [ecx], al
inc ecx
cmp dx, 0xff
jbe 0x42d076
mov byte [ecx], dh
inc ecx
inc esi
cmp dword [ebp + 0x50], 4
jl 0x42d0a4
xor edx, edx
mov dx, word [edi + 6]
push edx
call fcn.004127eb
add esp, 4
test al, al
mov al, dl
je 0x42d097
and al, 0xdf
mov byte [ecx], al
jmp 0x42d0a4
cmp dx, 0xff
mov byte [ecx], al
jbe 0x42d0a4
mov byte [ecx + 1], dh
inc esi
mov eax, dword [ebp + 0x30]
mov edx, dword [ebp + 0x50]
shl esi, 8
or esi, edx
cmp esi, 0x303
jne 0x42d113
cmp eax, 0x444553
je 0x42d0fd
cmp eax, 0x524944
je 0x42d0ea
cmp eax, 0x544553
jne 0x42d44f
push dword [ebp + 0x74]
add edi, 6
push edi
push 1
add ebx, 6
mov ecx, dword [ebp + 0x60]
push ebx
call fcn.00420b71
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
push 0
add edi, 6
push edi
call fcn.0046b65e
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 6
push edi
call fcn.004539a3
jmp 0x42dab5
cmp esi, 0x606
jne 0x42d16a
cmp eax, 0x45524854
jne 0x42d44f
push 6
push edi
push str.THREAD
call fcn.00438b8f
add esp, 0xc
test al, al
je 0x42d44f
cmp byte [ebp + 0x5f], 0
je 0x42d156
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041abe7
add edi, 0xc
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push edi
call fcn.00474f3c
jmp 0x42dab5
cmp esi, 0x404
jne 0x42d44f
mov ecx, 0x4d455449
cmp eax, ecx
ja 0x42d9b9
je 0x42d998
mov ecx, 0x46544547
cmp eax, ecx
ja 0x42d60e
je 0x42d5fa
mov ecx, 0x45444948
cmp eax, ecx
ja 0x42d3fe
je 0x42d3e7
mov ecx, 0x44494c53
cmp eax, ecx
ja 0x42d302
je 0x42d2eb
cmp eax, 0x43454a45
je 0x42d2da
cmp eax, 0x43455845
je 0x42d2c2
cmp eax, 0x434c4143
je 0x42d2af
cmp eax, 0x4350544e
je 0x42d29e
cmp eax, 0x44414552
je 0x42d261
cmp eax, 0x44414f4c
je 0x42d21e
cmp eax, 0x44415049
jne 0x42d44f
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00450e88
jmp 0x42dab5
cmp byte [ebp + 0x5f], 0
je 0x42d236
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041abe7
add edi, 8
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x74], edi
call fcn.0040de83
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
call fcn.0042ee8f
mov ecx, dword [ebp + 0x60]
push 1
mov dword [ebp + 0x64], eax
call fcn.0045fd6c
jmp 0x42e548
push 4
push ebx
push str.READ
call fcn.00438b8f
add esp, 0xc
test al, al
je 0x42d472
cmp dword [ebp + 0x54], 4
je 0x42d28a
cmp word [ebx + 8], 0x2d
jne 0x42d472
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00461146
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00447aa5
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.0047b74f
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
xor eax, eax
push eax
push eax
push eax
add edi, 8
push edi
push ecx
push eax
call fcn.004094d9
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0044c572
jmp 0x42dab5
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00479822
jmp 0x42dab5
cmp eax, 0x444d4152
je 0x42d3d7
cmp eax, 0x444e4152
je 0x42d3c3
cmp eax, 0x444e4553
je 0x42d3b6
cmp eax, 0x444e4946
je 0x42d37d
cmp eax, 0x44524854
je 0x42d35d
cmp eax, 0x4542414c
jne 0x42d44f
cmp dword [ebp + 0x74], 0
je 0x42d472
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00478133
jmp 0x42dab5
cmp byte [ebp + 0x5f], 0
je 0x42d375
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041abe7
add edi, 8
jmp 0x42d159
cmp byte [ebp + 0x5f], 0
je 0x42d395
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041abe7
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x7c]
add edi, 8
cmp word [edi], 0x7c
jne 0x42d3b1
push 0
push edi
call fcn.004258b0
jmp 0x42dab5
push dword [ebp + 0x78]
jmp 0x42d3a6
push dword [ebp + 0x58]
call fcn.00415a7f
jmp 0x42dd30
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00464ee8
jmp 0x42dab5
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00418291
jmp 0x42dab5
push 1
push str.Hide
push dword [ebp + 0x58]
call fcn.00410d20
add esp, 0xc
jmp 0x42dab5
mov ecx, 0x454d4f48
cmp eax, ecx
ja 0x42d4fe
je 0x42d4ed
cmp eax, 0x45444f43
je 0x42d4da
cmp eax, 0x45474150
je 0x42d4cd
cmp eax, 0x454c4946
je 0x42d4bd
cmp eax, 0x454d414e
je 0x42d8c4
cmp eax, 0x454d4954
je 0x42d4a0
cmp eax, 0x454d4f43
je 0x42d560
xor ecx, ecx
mov dword [ebp + 0x64], ecx
mov ax, word [ebx]
cmp ax, 0x24
mov dword [ebp + 0x58], ebx
jne 0x42e3e1
push ecx
push ecx
add ebx, 2
push ebx
push dword [ebp + 0x60]
call fcn.00420d78
mov eax, dword [ebp + 0x64]
test eax, eax
je 0x42d481
mov ecx, dword [ebp + 0x60]
mov ecx, dword [ecx + 0x30]
mov dword [ecx], eax
xor edi, edi
cmp eax, edi
jge 0x42e550
push eax
lea eax, [ebp - 0x4c]
push str.0x_p
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
jmp 0x42e55c
cmp dword [ebp + 0x74], 0
je 0x42d472
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00478574
jmp 0x42dab5
push 0
push dword [ebp + 0x58]
call fcn.00414c9e
pop ecx
jmp 0x42dd30
push dword [ebp + 0x58]
call fcn.0041f4b5
jmp 0x42dd30
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.004571ac
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046afb4
jmp 0x42dab5
cmp eax, 0x45534142
je 0x42d5e9
cmp eax, 0x45544144
je 0x42d5d5
cmp eax, 0x45544953
je 0x42d5c1
cmp eax, 0x45544f4e
je 0x42d560
cmp eax, 0x45564948
je 0x42d54c
cmp eax, 0x455a4953
jne 0x42d44f
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004427b4
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045e6ac
jmp 0x42dab5
add ebx, 8
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x74], ebx
call fcn.0040de83
mov edi, dword [ebp + 0x74]
mov ax, word [edi]
cmp ax, 0x31
jb 0x42d580
cmp ax, 0x39
jbe 0x42d594
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
push 2
push 0x4a96d8
push edi
call esi
test eax, eax
jne 0x42d59d
mov byte [0x4bc2a4], 1
jmp 0x42d5b8
cmp word [edi], 0x30
je 0x42d5b1
push 3
push 0x4a96d0
push edi
call esi
test eax, eax
jne 0x42d5b8
mov byte [0x4bc2a4], 0
and dword [ebp + 0x64], 0
jmp 0x42d472
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0045ec6c
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00464676
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0047ae0f
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00464f91
jmp 0x42dab5
mov ecx, 0x4b4d554e
cmp eax, ecx
ja 0x42d7c2
je 0x42d7b5
mov ecx, 0x49474552
cmp eax, ecx
ja 0x42d708
je 0x42d6f5
cmp eax, 0x46545550
je 0x42d6e1
cmp eax, 0x46574246
je 0x42d6d1
cmp eax, 0x47414d49
je 0x42d6b4
cmp eax, 0x48534148
je 0x42d6a1
cmp eax, 0x48544150
je 0x42d694
cmp eax, 0x49444152
jne 0x42d44f
cmp dword [ebp + 0x74], 0
je 0x42d472
cmp edx, 4
jne 0x42d472
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0046f03c
jmp 0x42dab5
push dword [ebp + 0x58]
call fcn.0041bb53
jmp 0x42dd30
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.0047cbbb
jmp 0x42dab5
cmp edx, 4
jne 0x42d472
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0047906b
jmp 0x42dab5
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.004144f0
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004660f3
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.00455cd6
jmp 0x42dab5
sub eax, 0x49564544
je 0x42d7a5
sub eax, 0x901
je 0x42d794
sub eax, 0xec070e
je 0x42d780
sub eax, 0x100f9f9
je 0x42d76d
sub eax, 7
je 0x42d759
sub eax, 0x1f8f0
jne 0x42d44f
cmp dword [ebp + 0x74], 0
je 0x42d472
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0046ee0a
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00479a7b
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.00469849
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004491e0
jmp 0x42dab5
push dword [ebp + 0x74]
add edi, 8
push edi
push 0
add ebx, 8
jmp 0x42d0dc
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00429370
jmp 0x42dab5
push dword [ebp + 0x58]
call fcn.00410567
jmp 0x42dd30
mov ecx, 0x4c4c4143
cmp eax, ecx
ja 0x42d892
je 0x42d871
cmp eax, 0x4b4e494c
je 0x42d860
cmp eax, 0x4b4e4c46
je 0x42d84c
cmp eax, 0x4b534944
je 0x42d83b
cmp eax, 0x4b544f48
je 0x42d828
cmp eax, 0x4c424154
je 0x42d814
cmp eax, 0x4c454853
jne 0x42d44f
push dword [ebp + 0x58]
call fcn.00423f53
jmp 0x42dd30
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0047e6ff
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.00417b80
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00480982
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0045e25d
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00415176
jmp 0x42dab5
mov eax, dword [ebp + 0x58]
cmp word [eax], 0x24
jne 0x42e51e
push edi
push 0
add eax, 2
push eax
push dword [ebp + 0x60]
call fcn.00420d78
jmp 0x42dab5
cmp eax, 0x4c4c4157
je 0x42d98b
cmp eax, 0x4c4c494b
je 0x42d914
cmp eax, 0x4c525453
je 0x42d900
cmp eax, 0x4c534441
je 0x42d8ec
cmp eax, 0x4d414554
je 0x42d8d8
cmp eax, 0x4d414e46
jne 0x42d44f
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045e175
jmp 0x42dab5
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00419632
jmp 0x42e545
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045f102
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00462bc8
jmp 0x42dab5
xor ebx, ebx
add edi, 8
inc ebx
cmp word [edi], 0x2a
jne 0x42d933
inc edi
inc edi
cmp word [edi], 0x2a
jne 0x42d933
push 2
pop ebx
add edi, ebx
cmp word [edi], 0x2a
je 0x42d92b
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], edi
call fcn.0040de83
mov edi, dword [ebp + 0x58]
mov ax, word [edi]
cmp ax, 0x5c
je 0x42d979
cmp ax, 0x40
je 0x42d979
mov esi, str.svr
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
push eax
push edi
push esi
call fcn.00438b38
add esp, 0xc
test al, al
jne 0x42d979
mov ecx, dword [ebp + 0x60]
push edi
call fcn.00416411
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
push ebx
push dword [ebp + 0x74]
push edi
call fcn.0044ffb7
jmp 0x42dab5
push dword [ebp + 0x58]
call fcn.00418232
jmp 0x42dd30
cmp dword [ebp + 0x74], 0
je 0x42d472
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047e191
jmp 0x42dab5
mov ecx, 0x534f504c
cmp eax, ecx
ja 0x42ddb1
je 0x42dd9b
mov ecx, 0x504e5055
cmp eax, ecx
ja 0x42dc15
je 0x42dc07
mov ecx, 0x4e554f4d
cmp eax, ecx
ja 0x42db3f
je 0x42db2b
cmp eax, 0x4d495444
je 0x42db17
cmp eax, 0x4d524f46
je 0x42db06
cmp eax, 0x4e49414d
je 0x42da68
cmp eax, 0x4e495053
je 0x42da54
cmp eax, 0x4e495753
je 0x42da39
cmp eax, 0x4e524353
jne 0x42d44f
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045e8d9
jmp 0x42dab5
cmp dword [ebp + 0x74], 0
je 0x42d472
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047897d
jmp 0x42dab5
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.004795ec
jmp 0x42dab5
cmp byte [ebp + 0x5f], 0
je 0x42da80
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041abe7
mov esi, dword [ebp + 0x58]
jmp 0x42da9b
push 3
push esi
push 0x4a450c
call fcn.00438b38
add esp, 0xc
test al, al
jne 0x42daa7
inc esi
inc esi
cmp word [esi], 0x2a
je 0x42da85
cmp word [esi], 0
jne 0x42dabd
add ebx, 8
push ebx
mov ecx, 0x4bdfa0
call fcn.0042ba65
mov dword [ebp + 0x64], eax
jmp 0x42d472
mov esi, 0x4bdc1c
push str.PECMD
mov ecx, esi
call fcn.004458a8
push ebx
mov ecx, esi
call fcn.0043d4e9
mov eax, dword [ebp + 0x60]
mov word [eax + 0x88], 2
lea ecx, [ebp + 0x3c]
call fcn.00437960
lea ecx, [ebp + 0x44]
call fcn.00437960
lea ecx, [ebp + 0x38]
call fcn.00437960
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045d102
jmp 0x42dab5
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00450c8a
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004814ac
jmp 0x42dab5
cmp eax, 0x4e574f44
je 0x42dbfa
cmp eax, 0x4f474f4c
je 0x42dbec
cmp eax, 0x4f4d454d
je 0x42dbcb
cmp eax, 0x50494350
je 0x42dbb7
cmp eax, 0x504c4548
je 0x42db89
cmp eax, 0x504d4554
jne 0x42d44f
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045fdda
jmp 0x42dab5
push 5
push 0x12e
push dword [0x4bde84]
call dword [sym.imp.KERNEL32.DLL_FindResourceW]
test eax, eax
je 0x42dae2
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.0042c21c
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00472bfe
jmp 0x42dab5
cmp dword [ebp + 0x74], 0
je 0x42d472
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045063b
jmp 0x42dab5
add ebx, 8
push ebx
call fcn.0042c485
jmp 0x42dd30
push dword [ebp + 0x58]
call fcn.004169f8
jmp 0x42dd30
add ebx, 8
push ebx
call fcn.0044cbc8
jmp 0x42dd30
mov ecx, 0x5254534c
cmp eax, ecx
ja 0x42dcfb
je 0x42dce7
sub eax, 0x504f4f4c
je 0x42dcb5
sub eax, 0x3f9f8
je 0x42dca5
sub eax, 0x1edf90c
je 0x42dc87
sub eax, 0x41105
je 0x42dc79
sub eax, 0x3f0f1
je 0x42dc65
sub eax, 7
jne 0x42d44f
push dword [ebp + 0x58]
call fcn.0041bb2d
jmp 0x42dd30
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045d631
jmp 0x42dab5
add edi, 8
push edi
call fcn.004106cd
jmp 0x42dd30
cmp dword [ebp + 0x74], 0
je 0x42d472
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046f2a6
jmp 0x42dab5
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0041e33d
jmp 0x42dab5
cmp byte [ebp + 0x5f], 0
je 0x42dccd
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041abe7
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x78]
add edi, 8
push dword [ebp + 0x74]
push edi
call fcn.0041a68b
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00462d5b
jmp 0x42dab5
sub eax, 0x5254534d
je 0x42dd87
sub eax, 5
je 0x42dd73
dec eax
je 0x42dd6f
sub eax, 0xedee01
je 0x42dd51
sub eax, 0x50df8
je 0x42dd36
sub eax, 0x70606
jne 0x42d44f
add edi, 8
push edi
call fcn.004106bf
pop ecx
jmp 0x42dab5
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0041af1e
and dword [ebp + 0x4c], 0
mov dword [ebp + 0x64], eax
jmp 0x42d472
cmp dword [ebp + 0x74], 0
je 0x42d472
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047e58c
jmp 0x42dab5
push 1
jmp 0x42dd9d
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00462eac
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00463da6
jmp 0x42dab5
push 0
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00462ff4
jmp 0x42dab5
mov ecx, 0x5453494c
cmp eax, ecx
ja 0x42e224
je 0x42e1fa
mov ecx, 0x54494e49
cmp eax, ecx
ja 0x42de9a
je 0x42de8a
cmp eax, 0x534f5052
je 0x42de76
cmp eax, 0x53504954
je 0x42de62
cmp eax, 0x53504d43
je 0x42de4e
cmp eax, 0x5353454d
je 0x42de3a
cmp eax, 0x54494157
je 0x42de2a
cmp eax, 0x54494445
jne 0x42d44f
cmp dword [ebp + 0x74], 0
je 0x42d472
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045021d
jmp 0x42dab5
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.004258c6
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004744ca
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00454f26
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046f402
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00463743
jmp 0x42dab5
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00422f8b
jmp 0x42dab5
cmp eax, 0x54495257
je 0x42e1e6
cmp eax, 0x54495845
je 0x42df15
cmp eax, 0x544d4644
je 0x42df01
cmp eax, 0x544e4950
je 0x42deed
cmp eax, 0x544e4f46
je 0x42dee0
cmp eax, 0x54524150
jne 0x42d44f
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00458e0f
jmp 0x42dab5
push dword [ebp + 0x58]
call fcn.004180d8
jmp 0x42dd30
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0044a1bd
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0044aa51
jmp 0x42dab5
lea ecx, [ebx + 8]
mov dx, word [ecx]
cmp dx, 0x3d
jne 0x42dfa9
xor esi, esi
add ebx, 0xa
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x64], esi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x74], ebx
call fcn.0040de83
push dword [ebp + 0x74]
push str.error
call fcn.00438bce
test al, al
pop ecx
pop ecx
je 0x42df58
mov ecx, dword [ebp + 0x60]
mov eax, dword [ecx + 0x30]
mov eax, dword [eax]
jmp 0x42df8f
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x74]
push eax
call fcn.004488bd
test eax, eax
pop ecx
pop ecx
jg 0x42df89
mov eax, dword [ebp + 0x74]
cmp word [eax], si
je 0x42df89
mov ecx, dword [ebp + 0x60]
push esi
push 0xffffffffffffffff
push esi
push eax
call fcn.0040ef74
cmp eax, esi
je 0x42df89
mov eax, dword [eax + 4]
jmp 0x42df8c
mov eax, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x60]
mov edx, dword [ecx + 0x30]
mov dword [edx], eax
mov dword [ecx + 0x8c], eax
mov dword [ebp + 0x64], eax
mov byte [ecx + 0x8a], 1
jmp 0x42d481
mov eax, edx
call fcn.00482120
test al, al
jne 0x42dfbd
test dx, dx
jne 0x42d472
mov dword [ebp + 0x78], ecx
lea ecx, [ebp + 0x78]
call fcn.0040de83
mov edi, dword [ebp + 0x60]
mov eax, dword [edi + 0x8c]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x54], eax
xor ebx, ebx
call fcn.0043d47d
push 0x2c
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.0043fe29
mov eax, dword [ebp + 0x78]
add esp, 0xc
cmp word [eax], 0x2c
jne 0x42e00e
add dword [ebp + 0x78], 2
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.004488bd
pop ecx
pop ecx
mov ebx, eax
mov eax, dword [ebp + 0x70]
cmp word [eax], 0
jne 0x42e01e
push 0x40
jmp 0x42e176
push eax
push 0x4a96a8
call fcn.00438bce
test al, al
pop ecx
pop ecx
je 0x42e037
xor esi, esi
inc esi
jmp 0x42e177
push dword [ebp + 0x70]
push 0x4a6ddc
call fcn.00438bce
test al, al
pop ecx
pop ecx
jne 0x42e02f
push dword [ebp + 0x70]
push str.FILE
call fcn.00438bce
test al, al
pop ecx
pop ecx
jne 0x42e070
push dword [ebp + 0x70]
push 0x4a75b8
call fcn.00438bce
test al, al
pop ecx
pop ecx
je 0x42e077
push 2
jmp 0x42e176
push dword [ebp + 0x70]
push str.FORX
call fcn.00438bce
test al, al
pop ecx
pop ecx
jne 0x42e09d
push dword [ebp + 0x70]
push 0x4a9694
call fcn.00438bce
test al, al
pop ecx
pop ecx
je 0x42e0a4
push 4
jmp 0x42e176
push dword [ebp + 0x70]
push str.LOOP
call fcn.00438bce
test al, al
pop ecx
pop ecx
jne 0x42e0ca
push dword [ebp + 0x70]
push 0x4a9688
call fcn.00438bce
test al, al
pop ecx
pop ecx
je 0x42e0d1
push 8
jmp 0x42e176
push dword [ebp + 0x70]
push 0x4a4be0
call fcn.00438bce
test al, al
pop ecx
pop ecx
jne 0x42e0f7
push dword [ebp + 0x70]
push str.BLOCK
call fcn.00438bce
test al, al
pop ecx
pop ecx
je 0x42e0fb
push 0x10
jmp 0x42e176
push dword [ebp + 0x70]
push str.ToWIN
call fcn.00438bce
test al, al
pop ecx
pop ecx
je 0x42e115
mov esi, 0x80
jmp 0x42e177
push dword [ebp + 0x70]
push 0x4a9674
call fcn.00438bce
test al, al
pop ecx
pop ecx
je 0x42e147
push 1
push dword [ebp + 0x74]
mov esi, 0x80
or word [edi + 0x88], si
push 0x4a44ac
mov ecx, edi
call fcn.0044ffb7
jmp 0x42e177
push dword [ebp + 0x70]
push str.CONTINUE
call fcn.00438bce
test al, al
pop ecx
pop ecx
je 0x42e161
mov esi, 0x100
jmp 0x42e177
push dword [ebp + 0x70]
push str.BREAK
call fcn.00438bce
test al, al
pop ecx
pop ecx
je 0x42e1d9
push 0x20
pop esi
or word [edi + 0x88], si
xor esi, esi
cmp ebx, esi
jle 0x42e19c
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp + 0x54]
mov dword [eax], ecx
mov eax, dword [ebp + 0x54]
mov dword [edi + 0x8c], eax
mov byte [edi + 0x8a], 1
cmp byte [ebp + 0x5f], 0
je 0x42e1b2
push dword [ebp + 0x7c]
mov ecx, edi
push 0x11
push esi
push dword [ebp + 0x4c]
call fcn.0041abe7
lea ecx, [ebp + 0x70]
call fcn.00437960
lea ecx, [ebp + 0x3c]
call fcn.00437960
lea ecx, [ebp + 0x44]
call fcn.00437960
lea ecx, [ebp + 0x38]
call fcn.00437960
mov eax, esi
jmp 0x42dafc
lea ecx, [ebp + 0x70]
call fcn.00437960
jmp 0x42d472
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00461dd0
jmp 0x42dab5
cmp dword [ebp + 0x74], 0
je 0x42d472
cmp edx, 4
jne 0x42d472
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00478c97
jmp 0x42dab5
mov ecx, 0x56524553
cmp eax, ecx
ja 0x42e2ee
je 0x42e2de
sub eax, 0x54554853
je 0x42e2d1
sub eax, 0x2fcf3
je 0x42e2bd
sub eax, 0xe
je 0x42e2ac
sub eax, 0xf5fff9
je 0x42e29b
sub eax, 0x10cfa
je 0x42e27b
sub eax, 0x102f1ff
jne 0x42d44f
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045da65
jmp 0x42dab5
cmp dword [ebp + 0x74], 0
je 0x42d472
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add ebx, 8
push ebx
call fcn.00478715
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046b22c
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0042c62c
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045e08b
jmp 0x42dab5
push dword [ebp + 0x58]
call fcn.00416b1d
jmp 0x42dd30
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00413b9e
jmp 0x42dab5
cmp eax, 0x574f4853
je 0x42e3cd
cmp eax, 0x574f5242
je 0x42e3b7
cmp eax, 0x58454649
je 0x42e37e
cmp eax, 0x58524f46
je 0x42e34c
cmp eax, 0x59434552
je 0x42e33b
cmp eax, 0x59454b48
jne 0x42d44f
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00478f2d
jmp 0x42dab5
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0044c83d
jmp 0x42dab5
cmp byte [ebp + 0x5f], 0
je 0x42e364
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041abe7
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x78]
add edi, 8
push dword [ebp + 0x74]
push edi
call fcn.00471d24
jmp 0x42dab5
cmp byte [ebp + 0x5f], 0
je 0x42e396
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041abe7
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x7c]
add edi, 8
cmp word [edi], 0x7c
jne 0x42e3b2
push 0
push edi
call fcn.0042589a
jmp 0x42dab5
push dword [ebp + 0x78]
jmp 0x42e3a7
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00455656
jmp 0x42dab5
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047ea50
jmp 0x42dab5
cmp ax, cx
je 0x42d472
push 0x40
xor esi, esi
pop ecx
cmp ax, cx
mov dword [ebp + 0x78], esi
jne 0x42e400
add ebx, 2
mov dword [ebp + 0x78], ecx
mov dword [ebp + 0x58], ebx
mov eax, dword [ebp + 0x58]
movzx eax, word [eax]
cmp ax, 0x2a
je 0x42e418
cmp ax, 0x2d
je 0x42e418
cmp ax, 0x2b
jne 0x42e41a
mov esi, eax
mov ebx, dword [ebp + 0x60]
mov eax, dword [ebx + 0x1c]
and dword [ebp + 0x54], 0
mov dword [ebp + 0x34], eax
lea eax, [ebp + 0x34]
push eax
lea eax, [ebp + 0x54]
push eax
push dword [ebp + 0x58]
mov ecx, ebx
call fcn.004241a4
or esi, dword [ebp + 0x78]
test si, si
jne 0x42e521
cmp dword [ebp + 0x54], 0
jge 0x42e521
push dword [ebp + 0x50]
lea ecx, [ebp + 0x78]
push edi
call fcn.00445801
mov eax, dword [ebp + 0x50]
xor esi, esi
cmp eax, esi
jle 0x42e483
lea ecx, [ebp + 0x64]
push ecx
lea eax, [edi + eax*2]
push eax
push dword [ebp + 0x78]
push dword [ebp + 0x74]
push ebx
call fcn.0040da43
add esp, 0x14
test al, al
jne 0x42e516
push 1
push esi
lea eax, [ebp + 0x3c]
push eax
push dword [ebp + 0x70]
mov ecx, ebx
call fcn.0044c0fc
mov eax, dword [ebp + 0x3c]
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], eax
call fcn.0040de83
mov edi, dword [ebp + 0x58]
push esi
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x50]
push eax
mov dword [ebp + 0x50], edi
mov dword [ebp + 0x54], esi
call fcn.00418d74
add esp, 0xc
push dword [ebp + 0x54]
lea ecx, [ebp + 0x70]
push dword [ebp + 0x50]
call fcn.00445801
lea eax, [ebp + 0x70]
push eax
mov word [ebp + 0x76], si
call fcn.0040e669
cmp eax, 1
pop ecx
mov ecx, ebx
jne 0x42e4fa
push edi
call fcn.0042ee8f
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x64], eax
call fcn.00437960
lea ecx, [ebp + 0x78]
call fcn.00437960
jmp 0x42e548
push esi
push esi
push 1
lea eax, [ebp + 0x76]
push eax
push ebx
push dword [ebp + 0x3c]
call fcn.004094d9
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x64], eax
call fcn.00437960
lea ecx, [ebp + 0x78]
jmp 0x42e1dc
mov ebx, dword [ebp + 0x60]
cmp byte [ebp + 0x5f], 0
je 0x42e538
push dword [ebp + 0x7c]
mov ecx, ebx
push 0x11
push 0
push dword [ebp + 0x4c]
call fcn.0041abe7
push dword [ebp + 0x74]
mov ecx, ebx
push dword [ebp + 0x58]
call fcn.004245e6
mov dword [ebp + 0x64], eax
mov eax, dword [ebp + 0x64]
jmp 0x42d481
cdq
push edx
push eax
lea eax, [ebp - 0x4c]
push eax
call fcn.004842fa
mov esi, dword [ebp + 0x60]
add esp, 0xc
test byte [esi + 9], 0xf
jne 0x42e578
lea eax, [ebp - 0x4c]
push eax
push 0x4a769c
mov ecx, esi
call fcn.0043cd78
lea eax, [ebp - 0x4c]
push eax
push 0x4a7698
mov ecx, esi
call fcn.0043cd78
cmp dword [0x4bde94], edi
mov byte [0x4bde70], 1
je 0x42e5ad
cmp dword [ebp + 0x4c], edi
je 0x42e5ad
push dword [ebp + 0x7c]
mov ecx, esi
push edi
push dword [ebp + 0x64]
push dword [ebp + 0x4c]
call fcn.0041abe7
lea ecx, [ebp + 0x3c]
call fcn.00437960
mov esi, dword [ebp + 0x60]
test byte [esi + 0xd], 1
je 0x42e5d0
push dword [ebp + 0x38]
call fcn.00437932
push dword [ebp + 0x44]
call fcn.00437932
pop ecx
pop ecx
mov esi, dword [ebp + 0x64]
jmp 0x42e1c2
cmp ax, 0x28
jne 0x42e5f5
inc esi
inc esi
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
lea eax, [esi + eax*2 - 2]
cmp word [eax], 0x29
jne 0x42e5f5
and word [eax], 0
mov edi, dword [ebp + 0x60]
movzx eax, word [edi + 0x2c]
push 0
push eax
push esi
call fcn.00410bc9
add esp, 0xc
or esi, 1
push esi
mov ecx, edi
call fcn.004755f4
mov esi, eax
jmp 0x42e1ba