Function at 0x43a550
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
push edi
push ebx
sub esp, 0x1b8
mov eax, dword [0x4f195c]
mov esi, dword [ebp + 0xc]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp + 8]
cmp esi, 0xfffffffb
je 0x43c4d6
push 5
push ebx
lea eax, [ebp - 0x194]
push eax
push esi
call fcn.0045de60
mov edi, eax
add esp, 0x10
test edi, edi
je 0x43a5fb
test byte [ebp + 0x10], 1
je 0x43a5ea
movzx edx, byte [ebp + 0x13]
test edx, 0x80
je 0x43a5ce
lea ecx, [ebp + 0x23]
and ecx, 0xfffffffc
lea edx, [ecx + 4]
test byte [edx - 4], 0x10
je 0x43a5ce
add ecx, 7
and ecx, 0xfffffffc
mov edx, dword [ecx]
add ecx, 7
and ecx, 0xfffffffc
cmp byte [edx], 0x38
mov ebx, dword [ecx]
jne 0x43a5ce
cmp byte [edx + 2], 0x4e
je 0x43b437
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
movzx eax, di
cmp ecx, dword [0x4f195c]
jne 0x43b504
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
push str.unknown
push esi
push 2
push edi
call fcn.00464d00
add esp, 0x10
mov eax, dword [ebp - 0x194]
xor edx, edx
mov dword [eax + 0x98], edx
mov ecx, dword [ebp - 0x194]
mov dword [ecx + 0x10c], edx
mov edi, dword [ebp - 0x194]
and byte [edi + 0x199], 0xf7
mov ecx, dword [ebp - 0x194]
mov eax, dword [ecx + 0xd0]
mov edx, dword [ecx + 0xd4]
mov dword [ecx + 0xc8], eax
movzx eax, byte [ebp + 0x13]
mov dword [ecx + 0xcc], edx
test eax, 0x80
je 0x43a6fb
lea edx, [ebp + 0x23]
and edx, 0xfffffffc
mov ecx, dword [edx]
mov dword [ebp - 0x1b8], ecx
test cl, 0x20
je 0x43a66f
mov ecx, dword [ebp - 0x194]
or byte [ecx + 0x197], 0x40
test byte [ebp - 0x1b8], 0x10
je 0x43a705
add edx, 7
and edx, 0xfffffffc
mov edi, dword [edx]
add edx, 7
and edx, 0xfffffffc
cmp byte [edi], 0x38
mov eax, dword [edx]
mov dword [ebp - 0x1bc], eax
je 0x43beed
cmp byte [edi], 0xb
je 0x43bc47
cmp byte [edi], 0x38
je 0x43bb0c
cmp byte [edi], 0x38
je 0x43b9fb
cmp byte [edi], 0x38
je 0x43b8bc
cmp byte [edi], 0x38
je 0x43b76d
cmp byte [edi], 0x38
je 0x43b65c
cmp byte [edi], 0x38
je 0x43b552
cmp byte [edi], 1
je 0x43a6f5
push 0x244
push str.for_wseq_fmt.c
push 2
push 8
call fcn.00464d00
add esp, 0x10
movzx eax, byte [ebp + 0x13]
jmp 0x43a705
mov dword [ebp - 0x1b8], 0
mov ecx, dword [ebp - 0x194]
mov dword [ebp - 0x1b0], esi
movzx esi, byte [ebp + 0x10]
mov edi, esi
movzx edx, byte [ecx + 0x190]
and edi, 1
and edx, 0xfffffffe
or edx, edi
mov byte [ecx + 0x190], dl
mov edx, dword [ebp - 0x194]
mov dword [ebp - 0x1bc], esi
and esi, 2
movzx edi, byte [ebp + 0x12]
movzx ecx, byte [edx + 0x190]
and ecx, 0xfffffffd
or ecx, esi
mov esi, eax
mov byte [edx + 0x190], cl
mov ecx, dword [ebp - 0x194]
mov dword [ebp - 0x1b4], edi
shr edi, 1
movzx edx, byte [ecx + 0x192]
and edi, 0xffffffe0
and edx, 0xffffff9f
or edx, edi
mov edi, eax
mov byte [ecx + 0x192], dl
mov edx, dword [ebp - 0x194]
shl esi, 7
shr edi, 1
movzx ecx, byte [edx + 0x192]
and edi, 1
and ecx, 0x7f
or ecx, esi
xor esi, esi
mov byte [edx + 0x192], cl
mov ecx, dword [ebp - 0x194]
shl edi, 3
movzx edx, byte [ecx + 0x193]
and edx, 0xfffffff7
or edx, edi
mov byte [ecx + 0x193], dl
mov edx, dword [ebp - 0x194]
mov dword [edx + 0x140], esi
mov edx, dword [ebp - 0x194]
mov dword [edx + 0x148], esi
mov edx, dword [ebp - 0x194]
mov esi, dword [ebp - 0x1b0]
test byte [edx + 0x18d], 0x20
jne 0x43aa9d
cmp dword [edx + 0x118], 0xfffffffb
je 0x43aa9d
movzx ecx, byte [edx + 0x18c]
mov edi, dword [ebp - 0x1bc]
and ecx, 0xfffffffe
shr edi, 7
or ecx, edi
mov byte [edx + 0x18c], cl
mov edi, dword [ebp - 0x194]
mov dword [ebp - 0x1b0], esi
mov esi, dword [ebp - 0x1b4]
shr esi, 2
and esi, 1
movzx edx, byte [edi + 0x18c]
add esi, esi
and edx, 0xfffffffd
or edx, esi
mov esi, eax
shr esi, 3
mov byte [edi + 0x18c], dl
and esi, 1
mov edi, dword [ebp - 0x194]
movzx ecx, byte [edi + 0x18c]
lea edx, [esi*4]
and ecx, 0xfffffffb
or ecx, edx
mov byte [edi + 0x18c], cl
mov ecx, eax
mov edi, dword [ebp - 0x194]
shr ecx, 2
and ecx, 1
movzx edx, byte [edi + 0x18c]
shl ecx, 3
and edx, 0xfffffff7
or edx, ecx
mov byte [edi + 0x18c], dl
mov edx, eax
mov edi, dword [ebp - 0x194]
shr edx, 6
and edx, 1
movzx ecx, byte [edi + 0x18c]
shl edx, 4
and ecx, 0xffffffef
or ecx, edx
mov byte [edi + 0x18c], cl
mov ecx, esi
mov edi, dword [ebp - 0x194]
shl ecx, 5
shl esi, 3
movzx edx, byte [edi + 0x18c]
and edx, 0xffffffdf
or edx, ecx
mov byte [edi + 0x18c], dl
mov edx, eax
mov edi, dword [ebp - 0x194]
shr edx, 4
and edx, 1
movzx ecx, byte [edi + 0x195]
shl edx, 2
and ecx, 0xfffffffb
or ecx, edx
mov byte [edi + 0x195], cl
mov ecx, dword [ebp - 0x194]
shr eax, 5
and eax, 1
movzx edx, byte [ecx + 0x195]
and edx, 0xfffffff7
or edx, esi
mov esi, eax
mov byte [ecx + 0x195], dl
mov edi, dword [ebp - 0x194]
shl esi, 6
shl eax, 7
movzx ecx, byte [edi + 0x18c]
and ecx, 0xffffffbf
or ecx, esi
mov byte [edi + 0x18c], cl
mov ecx, dword [ebp - 0x194]
mov edi, dword [ebp - 0x1b8]
movzx edx, byte [ecx + 0x18c]
and edx, 0x7f
or edx, eax
mov eax, edi
mov byte [ecx + 0x18c], dl
and eax, 1
mov ecx, dword [ebp - 0x194]
movzx edx, byte [ecx + 0x18d]
and edx, 0xfffffffe
or edx, eax
mov byte [ecx + 0x18d], dl
mov edx, edi
mov esi, dword [ebp - 0x194]
shr edx, 1
and edx, 1
movzx eax, byte [esi + 0x195]
shl edx, 5
and eax, 0xffffffdf
or eax, edx
mov byte [esi + 0x195], al
mov eax, edi
mov edx, dword [ebp - 0x194]
shr eax, 2
and eax, 3
movzx ecx, byte [edx + 0x18d]
add eax, eax
and ecx, 0xfffffff9
or ecx, eax
mov eax, edi
mov byte [edx + 0x18d], cl
mov ecx, edi
mov esi, dword [ebp - 0x194]
and edi, 0xffffff80
shr eax, 9
and eax, 1
movzx edx, byte [esi + 0x198]
shl eax, 3
and edx, 0xfffffff7
or edx, eax
mov byte [esi + 0x198], dl
mov edx, dword [ebp - 0x194]
shr ecx, 0xa
mov dword [ebp - 0x1c4], ecx
movzx eax, byte [edx + 0x197]
and eax, 0x7f
or eax, edi
mov byte [edx + 0x197], al
mov ecx, dword [ebp - 0x194]
mov esi, dword [ebp - 0x1b0]
movzx eax, byte [ecx + 0x198]
btr eax, 4
jb 0x43aa23
mov edx, dword [ebp - 0x1c4]
and edx, 1
shl edx, 4
or eax, edx
mov byte [ecx + 0x198], al
mov ecx, dword [ebp - 0x194]
mov eax, 1
push eax
push 4
push eax
push ecx
call fcn.00445720
add esp, 0x10
test eax, eax
je 0x43aa97
mov ecx, dword [ebp - 0x194]
mov edx, dword [ecx + 0x20]
test edx, edx
je 0x43bf60
test byte [edx + 0x44], 2
je 0x43bf32
mov dword [edx + 0x38], eax
mov edx, dword [ebp - 0x194]
mov ecx, dword [edx + 0x20]
mov dword [ecx + 0x3c], eax
mov ebx, dword [ebp - 0x194]
mov edx, dword [ebx + 0x78]
test edx, edx
je 0x43aa7e
xor ecx, ecx
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x194]
mov dword [edx + 0x78], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
mov edx, dword [ebp - 0x194]
test byte [edx + 0x18d], 0x40
je 0x43ab08
mov eax, dword [edx + 0x20]
test eax, eax
je 0x43bfb6
test byte [eax + 0x44], 2
je 0x43bf83
mov edx, 0x2f
mov dword [eax + 0x38], edx
mov eax, dword [ebp - 0x194]
mov ecx, dword [eax + 0x20]
mov dword [ecx + 0x3c], edx
mov ebx, dword [ebp - 0x194]
mov eax, dword [ebx + 0x78]
test eax, eax
je 0x43aaea
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x194]
mov dword [eax + 0x78], edx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
mov eax, 0x2f
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
test byte [edx + 0x18e], 0x40
jne 0x43ab8a
cmp esi, 0xfffffffb
je 0x43ab8a
test edx, edx
je 0x43ab25
movzx eax, word [edx + 0x178]
test eax, eax
jg 0x43ab8a
mov eax, dword [edx + 0x20]
test eax, eax
je 0x43c011
test byte [eax + 0x44], 2
je 0x43bfde
mov dword [eax + 0x38], 0x101
mov eax, dword [ebp - 0x194]
mov edx, dword [eax + 0x20]
mov dword [edx + 0x3c], 0x1f
mov ecx, dword [ebp - 0x194]
mov eax, dword [ecx + 0x78]
test eax, eax
je 0x43ab6c
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x194]
mov dword [eax + 0x78], edx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
mov eax, 0x101
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
test byte [edx + 0x18f], 8
je 0x43ac0c
test byte [edx + 0x18c], 4
je 0x43aba7
je 0x43ac0c
cmp byte [edx + 0x17c], 1
jne 0x43ac0c
mov eax, dword [edx + 0x20]
test eax, eax
je 0x43c06c
test byte [eax + 0x44], 2
je 0x43c039
mov dword [eax + 0x38], 0x103
mov eax, dword [ebp - 0x194]
mov edx, dword [eax + 0x20]
mov dword [edx + 0x3c], 0x1f
mov ecx, dword [ebp - 0x194]
mov eax, dword [ecx + 0x78]
test eax, eax
je 0x43abee
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x194]
mov dword [eax + 0x78], edx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
mov eax, 0x103
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
push 0xc0
push 0
mov esi, dword [edx + 0x6c]
push esi
call fcn.004a08c0
add esp, 0xc
mov eax, dword [ebp - 0x1b8]
shr eax, 8
and eax, 1
movzx edx, byte [esi + 0xbd]
shl eax, 3
and edx, 0xfffffff7
mov edi, dword [ebp - 0x194]
or edx, eax
mov dword [esi], edi
mov byte [esi + 0xbd], dl
mov edx, dword [ebp - 0x194]
movzx eax, byte [edx + 0x189]
test eax, eax
je 0x43acb7
cmp eax, 1
je 0x43ac9e
cmp eax, 2
jne 0x43ac7e
movzx eax, byte [esi + 0xb8]
or eax, 4
and eax, 0xffffffe7
mov byte [esi + 0xb8], al
mov edx, dword [ebp - 0x194]
jmp 0x43acb7
cmp eax, 3
jne 0x43acb7
movzx eax, byte [esi + 0xb8]
and eax, 0xffffffeb
or eax, 8
mov byte [esi + 0xb8], al
mov edx, dword [ebp - 0x194]
jmp 0x43acb7
movzx eax, byte [esi + 0xb8]
and eax, 0xfffffff3
or eax, 0x10
mov byte [esi + 0xb8], al
mov edx, dword [ebp - 0x194]
movzx eax, byte [edx + 0x185]
test eax, eax
je 0x43ad42
dec eax
cmp eax, 4
ja 0x43ad42
movzx eax, byte [eax + 0x4c6450]
add eax, 0x43acdb
jmp eax
test byte [ebp + 0x10], 8
je 0x43adf4
mov eax, dword [ebp - 0x194]
movzx eax, byte [eax + 0x190]
test al, 1
jne 0x43ad6b
test al, 2
jne 0x43ad6b
not eax
and eax, 4
shr eax, 2
jmp 0x43ad6d
xor eax, eax
push eax
lea eax, [ebp - 0x198]
push eax
push dword [ebp + 0x1c]
call fcn.00467c30
add esp, 0xc
test eax, eax
je 0x43ade2
mov ecx, dword [ebp - 0x194]
mov edx, dword [ecx + 0x20]
test edx, edx
je 0x43c0c2
test byte [edx + 0x44], 2
je 0x43c094
mov dword [edx + 0x38], eax
mov edx, dword [ebp - 0x194]
mov ecx, dword [edx + 0x20]
mov dword [ecx + 0x3c], eax
mov ebx, dword [ebp - 0x194]
mov edx, dword [ebx + 0x78]
test edx, edx
je 0x43adc9
xor ecx, ecx
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x194]
mov dword [edx + 0x78], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
mov eax, dword [ebp - 0x198]
mov dword [esi + 8], eax
or byte [esi + 0xbb], 2
jmp 0x43adfa
mov eax, dword [ebp + 0x1c]
mov dword [esi + 8], eax
mov esi, dword [ebp - 0x194]
test byte [esi + 0x18f], 4
je 0x43af2b
mov edx, dword [esi + 0xc8]
mov eax, dword [esi + 0xcc]
sub edx, dword [esi + 0xd0]
sub eax, dword [esi + 0xd4]
or edx, eax
je 0x43af1e
test byte [esi + 0x191], 4
jne 0x43c2e2
push 0
mov edx, dword [esi + 0xc8]
lea eax, [ebp - 0x1a0]
push eax
mov ecx, dword [esi + 0xcc]
push edx
push dword [esi + 0xfc]
mov dword [eax - 4], edx
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, eax
mov dword [ebp - 0x1a4], ecx
cmp ecx, 0xffffffff
je 0x43c2b1
mov edx, dword [ebp - 0x1a0]
mov eax, 0xffffffff
sub ecx, eax
sub edx, eax
or ecx, edx
je 0x43c1ec
mov esi, dword [ebp - 0x194]
mov edx, dword [esi + 0xc8]
mov ecx, dword [esi + 0xcc]
mov dword [esi + 0xd0], edx
mov dword [esi + 0xd4], ecx
mov edx, dword [ebp - 0x194]
mov edi, dword [edx + 0xc8]
mov eax, dword [edx + 0xcc]
mov dword [edx + 0xd8], edi
mov dword [edx + 0xdc], eax
xor eax, eax
mov ecx, dword [ebp - 0x194]
mov dword [ecx + 0xe0], eax
mov dword [ecx + 0xe4], eax
mov edi, dword [ebp - 0x194]
mov esi, dword [edi + 0xe0]
mov dword [edi + 0x108], esi
mov edx, dword [ebp - 0x194]
and byte [edx + 0x191], 0xfd
mov ecx, dword [ebp - 0x194]
mov dword [ecx + 0xac], eax
mov esi, dword [ebp - 0x194]
mov eax, dword [esi + 0x90]
test eax, eax
je 0x43af1e
mov byte [eax + 0x1e], 0
mov esi, dword [ebp - 0x194]
or byte [esi + 0x191], 8
mov esi, dword [ebp - 0x194]
mov eax, dword [esi + 0x90]
test eax, eax
je 0x43af3f
cmp byte [eax + 0x1e], 0
jne 0x43b19a
test esi, esi
je 0x43af52
movzx eax, word [esi + 0x178]
test eax, eax
jg 0x43b186
push 0
push esi
call fcn.0046d250
add esp, 8
test eax, eax
je 0x43afb1
mov eax, dword [esi + 0x20]
test eax, eax
je 0x43c118
test byte [eax + 0x44], 2
je 0x43c0e5
mov edx, 0x26
mov dword [eax + 0x38], edx
mov eax, dword [esi + 0x20]
mov dword [eax + 0x3c], edx
mov eax, dword [esi + 0x78]
test eax, eax
je 0x43af93
xor edx, edx
mov dword [eax + 4], edx
mov dword [esi + 0x78], edx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
mov eax, 0x26
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
movsx edx, byte [esi + 0x17a]
cmp edx, 8
ja 0x43b0c3
movzx eax, byte [edx + 0x4c6458]
add eax, 0x43afd0
jmp eax
push 0x346
push str.for_wseq_fmt.c
push 2
push 8
call fcn.00464d00
add esp, 0x10
movzx eax, byte [esi + 0x18c]
mov edi, dword [esi + 0x4c]
test al, 4
je 0x43b102
test byte [esi + 0x18e], 0x40
je 0x43b102
test byte [esi + 0x18f], 8
je 0x43b102
cmp byte [esi + 0x17a], 1
je 0x43b14d
movsx eax, byte [esi + 0x17c]
cmp eax, 2
jne 0x43b129
movsx eax, byte [esi + 0x17a]
cmp eax, 7
je 0x43b14d
cmp eax, 6
je 0x43b14d
cmp eax, 8
je 0x43b14d
dec dword [esi + 0x54]
jmp 0x43b14d
cmp eax, 1
jne 0x43b14d
movsx eax, byte [esi + 0x17a]
cmp eax, 7
je 0x43b147
cmp eax, 6
je 0x43b147
cmp eax, 8
je 0x43b147
dec dword [esi + 0x54]
add edi, 5
mov dword [esi + 0x4c], edi
mov dword [esi + 0x58], edi
mov dword [esi + 0x5c], 0
mov esi, dword [ebp - 0x194]
test esi, esi
je 0x43b16c
movzx eax, word [esi + 0x178]
test eax, eax
jg 0x43b186
mov eax, dword [esi + 0x54]
sub eax, dword [esi + 0x4c]
push eax
push 0x20
push dword [esi + 0x4c]
call fcn.004a08c0
add esp, 0xc
mov esi, dword [ebp - 0x194]
mov eax, dword [esi + 0x4c]
mov dword [esi + 0x64], eax
mov ecx, dword [ebp - 0x194]
mov edx, dword [ecx + 0x4c]
mov dword [ecx + 0x5c], edx
jmp 0x43b1a0
mov eax, dword [esi + 0x4c]
mov dword [esi + 0x58], eax
mov edx, dword [ebp - 0x194]
mov eax, dword [edx + 0x90]
test eax, eax
je 0x43b1ec
cmp byte [eax + 0x1f], 0
je 0x43b1ec
push dword [edx + 0xfc]
call dword [sym.imp.KERNEL32.dll_GetFileType]
cmp eax, 2
je 0x43b1ec
mov edx, dword [ebp - 0x194]
mov eax, dword [edx + 0x90]
test eax, eax
je 0x43b1e1
mov byte [eax + 0x1f], 0
mov edx, dword [ebp - 0x194]
push 0
push edx
call fcn.0046d250
add esp, 8
test byte [ebp + 0x12], 8
jne 0x43b222
mov edx, dword [ebp - 0x194]
test edx, edx
je 0x43b20b
movzx eax, word [edx + 0x178]
test eax, eax
jg 0x43b40f
mov eax, dword [edx + 0x90]
test eax, eax
je 0x43b40f
mov byte [eax + 0x1e], 0
jmp 0x43b40f
lea eax, [ebp - 0x190]
push eax
lea edx, [ebp - 0x1b8]
push edx
lea ecx, [ebp + 0x18]
push ecx
lea esi, [ebp + 0x14]
push esi
call fcn.0046d580
add esp, 0x10
test eax, eax
jne 0x43b374
mov esi, dword [ebp - 0x1ac]
lea eax, [ebp - 0x19c]
push eax
push 0
mov edi, dword [eax - 0x1c]
lea edx, [esi + 1]
push edx
call fcn.00460c10
add esp, 0xc
test eax, eax
jne 0x43b374
test esi, esi
jle 0x43b29d
xor eax, eax
mov dword [ebp - 0x1a8], ebx
mov ebx, eax
movsx edx, byte [ebx + edi]
push edx
call fcn.004ad596
mov edx, dword [ebp - 0x19c]
add esp, 4
mov byte [edx + ebx], al
inc ebx
cmp ebx, esi
jl 0x43b27c
mov ebx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x19c]
mov byte [esi + eax], 0
mov edx, dword [ebp - 0x19c]
mov dword [ebp - 0x1c4], edx
cmp byte [edx + esi - 1], 0x20
jne 0x43b2da
mov eax, edx
cmp esi, 1
jle 0x43b2d4
mov byte [eax + esi - 1], 0
dec esi
mov eax, dword [ebp - 0x19c]
cmp byte [eax + esi - 1], 0x20
je 0x43b2bc
mov dword [ebp - 0x1c4], eax
mov edi, 0x4c64ec
mov esi, dword [ebp - 0x1c4]
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x43b305
test dl, dl
je 0x43b301
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x43b305
add edi, 2
add esi, 2
test dl, dl
jne 0x43b2e5
xor eax, eax
jmp 0x43b30a
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43b312
xor esi, esi
jmp 0x43b34b
mov edi, 0x4c64e8
mov esi, dword [ebp - 0x1c4]
mov dl, byte [edi]
cmp dl, byte [esi]
jne 0x43b33d
test dl, dl
je 0x43b339
mov dl, byte [edi + 1]
cmp dl, byte [esi + 1]
jne 0x43b33d
add edi, 2
add esi, 2
test dl, dl
jne 0x43b31d
xor eax, eax
jmp 0x43b342
sbb eax, eax
or eax, 1
test eax, eax
jne 0x43b35b
mov esi, 1
push dword [ebp - 0x1c4]
call fcn.00460cc0
add esp, 4
jmp 0x43b374
push dword [ebp - 0x1c4]
call fcn.00460cc0
add esp, 4
test eax, eax
jne 0x43b374
mov eax, 0x30
jmp 0x43b378
test eax, eax
je 0x43b3d6
mov ecx, dword [ebp - 0x194]
mov edx, dword [ecx + 0x20]
test edx, edx
je 0x43c1c9
test byte [edx + 0x44], 2
je 0x43c19b
mov dword [edx + 0x38], eax
mov edx, dword [ebp - 0x194]
mov ecx, dword [edx + 0x20]
mov dword [ecx + 0x3c], eax
mov ebx, dword [ebp - 0x194]
mov edx, dword [ebx + 0x78]
test edx, edx
je 0x43b3bd
xor ecx, ecx
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x194]
mov dword [edx + 0x78], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
test esi, esi
je 0x43b3f0
mov eax, dword [ebp - 0x194]
mov eax, dword [eax + 0x90]
test eax, eax
je 0x43b40f
mov byte [eax + 0x1e], 0
jmp 0x43b40f
mov eax, dword [ebp - 0x194]
mov edx, dword [eax + 0x90]
mov byte [edx + 0x1e], 1
mov ecx, dword [ebp - 0x194]
mov esi, dword [ecx + 0x90]
mov dword [esi + 0xc], ecx
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push ebx
call fcn.0043c680
add esp, 0xc
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
lea edx, [ebp - 0x1c4]
push edx
push esi
call fcn.0045f650
add esp, 8
test eax, eax
jne 0x43a5ce
mov esi, dword [ebp - 0x1c4]
xor ecx, ecx
mov dword [esi + 0x98], ecx
mov edx, dword [ebp - 0x1c4]
movzx esi, byte [ebp + 0x10]
and esi, 1
mov dword [edx + 0x10c], ecx
mov edx, dword [ebp - 0x1c4]
and byte [edx + 0x199], 0xf7
mov eax, dword [ebp - 0x1c4]
movzx edx, byte [eax + 0x190]
and edx, 0xfffffffe
or edx, esi
mov byte [eax + 0x190], dl
mov esi, dword [ebp - 0x1c4]
mov edx, dword [ebx]
mov dword [esi + 0x10c], edx
mov edx, dword [ebp - 0x1c4]
mov ebx, dword [ebx + 4]
mov dword [edx + 0x98], ebx
mov ebx, dword [ebp - 0x1c4]
mov edx, dword [ebx + 0x20]
test edx, edx
je 0x43b533
test byte [edx + 0x44], 2
je 0x43b509
mov dword [edx + 0x38], edi
mov edx, dword [ebp - 0x1c4]
mov ebx, dword [edx + 0x20]
mov dword [ebx + 0x3c], edi
mov esi, dword [ebp - 0x1c4]
mov edx, dword [esi + 0x78]
test edx, edx
je 0x43b4ed
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x1c4]
mov dword [edx + 0x78], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
mov eax, edi
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
call fcn.004a91cc
push edi
movzx eax, byte [ebx + 0x190]
push edi
and eax, 7
push eax
push 0xffffffffffffffff
push ebx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ebx
push edi
push edi
push 0
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
cmp byte [edi + 2], 0x53
jne 0x43a6da
push 3
mov edx, dword [ebp - 0x1bc]
lea eax, [ebp - 0x1c0]
push eax
push 0x53
push dword [edx]
push dword [edx + 4]
call fcn.004445d0
add esp, 0x14
test eax, eax
jne 0x43b5b8
mov ecx, dword [ebp - 0x194]
add edi, 4
movzx edx, byte [ecx + 0x189]
mov byte [ecx + 0x18a], dl
mov eax, dword [ebp - 0x194]
or byte [eax + 0x197], 0x20
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x1c0]
mov byte [edx + 0x189], al
jmp 0x43a6da
mov ecx, dword [ebp - 0x194]
mov edx, dword [ecx + 0x20]
test edx, edx
je 0x43b639
test byte [edx + 0x44], 2
je 0x43b60b
mov dword [edx + 0x38], eax
mov edx, dword [ebp - 0x194]
mov ecx, dword [edx + 0x20]
mov dword [ecx + 0x3c], eax
mov ebx, dword [ebp - 0x194]
mov edx, dword [ebx + 0x78]
test edx, edx
je 0x43b5f5
xor ecx, ecx
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x194]
mov dword [edx + 0x78], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push eax
push eax
movzx eax, byte [ecx + 0x190]
and eax, 7
push eax
push 0xffffffffffffffff
push ecx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ecx
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
cmp byte [edi + 2], 0x51
jne 0x43a6d1
push 3
mov edx, dword [ebp - 0x1bc]
lea eax, [ebp - 0x1c0]
push eax
push 0x51
push dword [edx]
push dword [edx + 4]
call fcn.004445d0
add esp, 0x14
test eax, eax
jne 0x43b6c9
mov ecx, dword [ebp - 0x194]
add edi, 4
add dword [ebp - 0x1bc], 8
movzx edx, byte [ecx + 0x185]
mov byte [ecx + 0x186], dl
mov eax, dword [ebp - 0x194]
or byte [eax + 0x197], 0x10
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x1c0]
mov byte [edx + 0x185], al
jmp 0x43a6d1
mov ecx, dword [ebp - 0x194]
mov edx, dword [ecx + 0x20]
test edx, edx
je 0x43b74a
test byte [edx + 0x44], 2
je 0x43b71c
mov dword [edx + 0x38], eax
mov edx, dword [ebp - 0x194]
mov ecx, dword [edx + 0x20]
mov dword [ecx + 0x3c], eax
mov ebx, dword [ebp - 0x194]
mov edx, dword [ebx + 0x78]
test edx, edx
je 0x43b706
xor ecx, ecx
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x194]
mov dword [edx + 0x78], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push eax
push eax
movzx eax, byte [ecx + 0x190]
and eax, 7
push eax
push 0xffffffffffffffff
push ecx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ecx
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
cmp byte [edi + 2], 0x3c
jne 0x43a6c8
push 3
mov edx, dword [ebp - 0x1bc]
lea eax, [ebp - 0x1c0]
push eax
push 0x3c
push dword [edx]
push dword [edx + 4]
call fcn.004445d0
add esp, 0x14
test eax, eax
jne 0x43b818
mov ecx, dword [ebp - 0x194]
movzx edx, byte [ecx + 0x192]
mov eax, edx
shr edx, 1
and eax, 0xfffffffb
and edx, 1
shl edx, 2
or eax, edx
mov byte [ecx + 0x192], al
mov eax, dword [ebp - 0x194]
or byte [eax + 0x197], 8
mov eax, dword [ebp - 0x1c0]
cmp eax, 2
jne 0x43b7f9
mov ecx, dword [ebp - 0x194]
movzx edx, byte [ebp + 0x12]
shr edx, 2
and edx, 1
movzx eax, byte [ecx + 0x192]
add edx, edx
and eax, 0xfffffffd
or eax, edx
mov byte [ecx + 0x192], al
jmp 0x43b809
cmp eax, 1
mov eax, dword [ebp - 0x194]
and byte [eax + 0x192], 0xfd
add dword [ebp - 0x1bc], 8
add edi, 4
jmp 0x43a6c8
mov ecx, dword [ebp - 0x194]
mov edx, dword [ecx + 0x20]
test edx, edx
je 0x43b899
test byte [edx + 0x44], 2
je 0x43b86b
mov dword [edx + 0x38], eax
mov edx, dword [ebp - 0x194]
mov ecx, dword [edx + 0x20]
mov dword [ecx + 0x3c], eax
mov ebx, dword [ebp - 0x194]
mov edx, dword [ebx + 0x78]
test edx, edx
je 0x43b855
xor ecx, ecx
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x194]
mov dword [edx + 0x78], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push eax
push eax
movzx eax, byte [ecx + 0x190]
and eax, 7
push eax
push 0xffffffffffffffff
push ecx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ecx
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
cmp byte [edi + 2], 0x3b
jne 0x43a6bf
push 3
mov edx, dword [ebp - 0x1bc]
lea eax, [ebp - 0x1c0]
push eax
push 0x3b
push dword [edx]
push dword [edx + 4]
call fcn.004445d0
add esp, 0x14
test eax, eax
jne 0x43b957
mov edx, dword [ebp - 0x194]
movzx eax, byte [edx + 0x17f]
mov byte [edx + 0x180], al
mov ecx, dword [ebp - 0x194]
or byte [ecx + 0x197], 4
mov eax, dword [ebp - 0x1c0]
cmp eax, 2
je 0x43b93b
cmp eax, 1
jne 0x43b927
mov eax, dword [ebp - 0x194]
mov byte [eax + 0x17f], 0x27
jmp 0x43b948
cmp eax, 3
jne 0x43b93b
mov eax, dword [ebp - 0x194]
mov byte [eax + 0x17f], 0x22
jmp 0x43b948
mov eax, dword [ebp - 0x194]
mov byte [eax + 0x17f], 0
add dword [ebp - 0x1bc], 8
add edi, 4
jmp 0x43a6bf
mov ecx, dword [ebp - 0x194]
mov edx, dword [ecx + 0x20]
test edx, edx
je 0x43b9d8
test byte [edx + 0x44], 2
je 0x43b9aa
mov dword [edx + 0x38], eax
mov edx, dword [ebp - 0x194]
mov ecx, dword [edx + 0x20]
mov dword [ecx + 0x3c], eax
mov ebx, dword [ebp - 0x194]
mov edx, dword [ebx + 0x78]
test edx, edx
je 0x43b994
xor ecx, ecx
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x194]
mov dword [edx + 0x78], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push eax
push eax
movzx eax, byte [ecx + 0x190]
and eax, 7
push eax
push 0xffffffffffffffff
push ecx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ecx
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
cmp byte [edi + 2], 0x52
jne 0x43a6b6
push 3
mov edx, dword [ebp - 0x1bc]
lea eax, [ebp - 0x1c0]
push eax
push 0x52
push dword [edx]
push dword [edx + 4]
call fcn.004445d0
add esp, 0x14
test eax, eax
jne 0x43ba68
mov ecx, dword [ebp - 0x194]
add edi, 4
add dword [ebp - 0x1bc], 8
movzx edx, byte [ecx + 0x187]
mov byte [ecx + 0x188], dl
mov eax, dword [ebp - 0x194]
or byte [eax + 0x197], 2
mov edx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x1c0]
mov byte [edx + 0x187], al
jmp 0x43a6b6
mov ecx, dword [ebp - 0x194]
mov edx, dword [ecx + 0x20]
test edx, edx
je 0x43bae9
test byte [edx + 0x44], 2
je 0x43babb
mov dword [edx + 0x38], eax
mov edx, dword [ebp - 0x194]
mov ecx, dword [edx + 0x20]
mov dword [ecx + 0x3c], eax
mov ebx, dword [ebp - 0x194]
mov edx, dword [ebx + 0x78]
test edx, edx
je 0x43baa5
xor ecx, ecx
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x194]
mov dword [edx + 0x78], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push eax
push eax
movzx eax, byte [ecx + 0x190]
and eax, 7
push eax
push 0xffffffffffffffff
push ecx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ecx
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
cmp byte [edi + 2], 6
jne 0x43a6ad
push 3
mov edx, dword [ebp - 0x1bc]
lea eax, [ebp - 0x1c0]
push eax
push 6
push dword [edx]
push dword [edx + 4]
call fcn.004445d0
add esp, 0x14
test eax, eax
jne 0x43bba3
mov ecx, dword [ebp - 0x194]
movzx edx, byte [ecx + 0x18f]
mov eax, edx
shr edx, 5
and eax, 0xffffffbf
and edx, 1
shl edx, 6
or eax, edx
mov byte [ecx + 0x18f], al
mov eax, dword [ebp - 0x194]
or byte [eax + 0x197], 1
mov eax, dword [ebp - 0x1c0]
cmp eax, 1
je 0x43bb87
cmp eax, 2
jne 0x43bb87
mov eax, dword [ebp - 0x194]
or byte [eax + 0x18f], 0x20
jmp 0x43bb94
mov eax, dword [ebp - 0x194]
and byte [eax + 0x18f], 0xdf
add dword [ebp - 0x1bc], 8
add edi, 4
jmp 0x43a6ad
mov ecx, dword [ebp - 0x194]
mov edx, dword [ecx + 0x20]
test edx, edx
je 0x43bc24
test byte [edx + 0x44], 2
je 0x43bbf6
mov dword [edx + 0x38], eax
mov edx, dword [ebp - 0x194]
mov ecx, dword [edx + 0x20]
mov dword [ecx + 0x3c], eax
mov ebx, dword [ebp - 0x194]
mov edx, dword [ebx + 0x78]
test edx, edx
je 0x43bbe0
xor ecx, ecx
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x194]
mov dword [edx + 0x78], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push eax
push eax
movzx eax, byte [ecx + 0x190]
and eax, 7
push eax
push 0xffffffffffffffff
push ecx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ecx
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
cmp byte [edi + 2], 0x4f
jne 0x43a6a4
mov eax, dword [ebp - 0x194]
test byte [eax + 0x18f], 4
jne 0x43bd34
test byte [eax + 0x18d], 0x20
jne 0x43bccf
mov edx, dword [eax + 0x20]
test edx, edx
je 0x43bdb7
test byte [edx + 0x44], 2
je 0x43bd84
mov eax, 0x6d
mov dword [edx + 0x38], eax
mov edx, dword [ebp - 0x194]
mov ecx, dword [edx + 0x20]
mov dword [ecx + 0x3c], eax
mov ebx, dword [ebp - 0x194]
mov eax, dword [ebx + 0x78]
test eax, eax
je 0x43bcb1
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x194]
mov dword [eax + 0x78], edx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
mov eax, 0x6d
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
mov edx, dword [eax + 0x20]
test edx, edx
je 0x43be0f
test byte [edx + 0x44], 2
je 0x43bddf
mov dword [edx + 0x38], 0x6e
mov eax, dword [ebp - 0x194]
mov edx, dword [eax + 0x20]
mov dword [edx + 0x3c], 0x1f
mov ecx, dword [ebp - 0x194]
mov eax, dword [ecx + 0x78]
test eax, eax
je 0x43bd16
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x194]
mov dword [eax + 0x78], edx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
mov eax, 0x6e
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
mov edx, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c4], edi
mov ecx, dword [edx]
add ecx, 0xffffffff
mov edi, dword [edx + 4]
adc edi, 0xffffffff
add edx, 8
mov dword [eax + 0xc8], ecx
mov dword [eax + 0xcc], edi
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1bc], edx
xor edx, edx
mov edi, dword [ebp - 0x1c4]
mov ecx, dword [eax + 0xcc]
sub ecx, edx
jl 0x43be34
add edi, 4
jmp 0x43a6a4
mov edx, 0x6d
push edx
movzx ecx, byte [eax + 0x190]
push edx
and ecx, 7
push ecx
push 0xffffffffffffffff
push eax
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push eax
mov eax, 0x6d
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push 0x1f
movzx edx, byte [eax + 0x190]
push 0x6e
and edx, 7
push edx
push 0xffffffffffffffff
push eax
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push eax
push 0x1f
push 0x6e
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
mov edx, dword [eax + 0x20]
test edx, edx
je 0x43bec5
test byte [edx + 0x44], 2
je 0x43be92
mov eax, 0x6f
mov dword [edx + 0x38], eax
mov edx, dword [ebp - 0x194]
mov ecx, dword [edx + 0x20]
mov dword [ecx + 0x3c], eax
mov ebx, dword [ebp - 0x194]
mov eax, dword [ebx + 0x78]
test eax, eax
je 0x43be74
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x194]
mov dword [eax + 0x78], edx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
mov eax, 0x6f
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
mov edx, 0x6f
push edx
movzx ecx, byte [eax + 0x190]
push edx
and ecx, 7
push ecx
push 0xffffffffffffffff
push eax
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push eax
mov eax, 0x6f
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
cmp byte [edi + 2], 0x4e
jne 0x43a69b
add edi, 4
mov ecx, dword [ebp - 0x194]
mov edx, dword [eax]
mov dword [ecx + 0x10c], edx
mov ecx, dword [ebp - 0x194]
mov edx, dword [eax + 4]
add eax, 8
mov dword [ebp - 0x1bc], eax
mov dword [ecx + 0x98], edx
mov edx, dword [ebp - 0x194]
and byte [edx + 0x199], 0xf7
jmp 0x43a69b
push eax
push eax
movzx eax, byte [ecx + 0x190]
and eax, 7
push eax
push 0xffffffffffffffff
push ecx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ecx
push eax
push eax
push 2
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
mov eax, 0x2f
push eax
movzx ecx, byte [edx + 0x190]
push eax
and ecx, 7
push ecx
push 0xffffffffffffffff
push edx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push edx
mov eax, 0x2f
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push 0x1f
movzx eax, byte [edx + 0x190]
push 0x101
and eax, 7
push eax
push 0xffffffffffffffff
push edx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push edx
push 0x1f
push 0x101
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push 0x1f
movzx eax, byte [edx + 0x190]
push 0x103
and eax, 7
push eax
push 0xffffffffffffffff
push edx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push edx
push 0x1f
push 0x103
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push eax
push eax
movzx eax, byte [ecx + 0x190]
and eax, 7
push eax
push 0xffffffffffffffff
push ecx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ecx
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
mov eax, 0x26
push eax
movzx edx, byte [esi + 0x190]
push eax
and edx, 7
push edx
push 0xffffffffffffffff
push esi
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push esi
mov eax, 0x26
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push eax
push eax
movzx eax, byte [ecx + 0x190]
and eax, 7
push eax
push 0xffffffffffffffff
push ecx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ecx
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [ebp - 0x194]
mov dword [edx + 0x100], eax
mov ecx, dword [ebp - 0x194]
mov eax, dword [ecx + 0x20]
test eax, eax
je 0x43c289
test byte [eax + 0x44], 2
je 0x43c256
mov edx, 0x26
mov dword [eax + 0x38], edx
mov eax, dword [ebp - 0x194]
mov ecx, dword [eax + 0x20]
mov dword [ecx + 0x3c], edx
mov ebx, dword [ebp - 0x194]
mov eax, dword [ebx + 0x78]
test eax, eax
je 0x43c240
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x194]
mov dword [eax + 0x78], edx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43afa4
mov eax, 0x26
push eax
movzx edx, byte [ecx + 0x190]
push eax
and edx, 7
push edx
push 0xffffffffffffffff
push ecx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ecx
mov eax, 0x26
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
je 0x43c2d1
mov eax, 0xffffffff
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], eax
jmp 0x43c1ec
mov ecx, dword [ebp - 0x1a4]
mov edx, dword [ebp - 0x1a0]
jmp 0x43ae78
mov eax, dword [esi + 0x48]
mov edx, dword [esi + 0x50]
mov ecx, dword [esi + 0x158]
sub edx, eax
mov dword [ebp - 0x1c4], edx
test ecx, ecx
je 0x43c308
cmp ecx, dword [ebp - 0x1c4]
jae 0x43c38e
jmp 0x43c319
cmp dword [ebp - 0x1c4], 0x20000
jbe 0x43c38e
mov ecx, 0x20000
mov edi, edx
mov dword [ebp - 0x1b8], ecx
mov dword [ebp - 0x1a8], ebx
mov ebx, eax
push 0
lea edx, [ebp - 0x1bc]
push edx
push dword [ebp - 0x1b8]
push ebx
push dword [esi + 0xfc]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x43c356
mov ebx, dword [ebp - 0x1a8]
mov ecx, 0xffffffff
jmp 0x43c3b8
mov edx, dword [esi + 0x158]
test edx, edx
mov ecx, dword [ebp - 0x1bc]
jne 0x43c36b
mov edx, 0x20000
sub edi, ecx
add ebx, ecx
cmp edi, edx
jae 0x43c379
mov dword [ebp - 0x1b8], edi
test edi, edi
je 0x43c381
test ecx, ecx
ja 0x43c329
mov ebx, dword [ebp - 0x1a8]
mov ecx, 1
jmp 0x43c3b8
push 0
lea edx, [ebp - 0x1bc]
push edx
push dword [ebp - 0x1c4]
push eax
push dword [esi + 0xfc]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, 0xffffffff
test eax, eax
je 0x43c3b8
mov ecx, 1
mov eax, dword [ebp - 0x1c4]
xor edx, edx
mov dword [esi + 0xc0], edx
mov dword [esi + 0xc4], edx
cdq
add eax, dword [esi + 0xd8]
mov edi, dword [esi + 0x48]
mov dword [esi + 0x50], edi
adc edx, dword [esi + 0xdc]
add edi, dword [esi + 0x110]
and byte [esi + 0x191], 0xfb
mov dword [esi + 0x54], edi
mov dword [esi + 0xd8], eax
mov dword [esi + 0xdc], edx
mov dword [esi + 0xd0], eax
mov dword [esi + 0xd4], edx
cmp ecx, 0xffffffff
je 0x43c417
mov esi, dword [ebp - 0x194]
jmp 0x43ae3a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esi + 0x100], eax
mov ecx, dword [ebp - 0x194]
mov eax, dword [ecx + 0x20]
test eax, eax
je 0x43c4ae
test byte [eax + 0x44], 2
je 0x43c47b
mov edx, 0x26
mov dword [eax + 0x38], edx
mov eax, dword [ebp - 0x194]
mov ecx, dword [eax + 0x20]
mov dword [ecx + 0x3c], edx
mov ebx, dword [ebp - 0x194]
mov eax, dword [ebx + 0x78]
test eax, eax
je 0x43c465
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x194]
mov dword [eax + 0x78], edx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43afa4
mov eax, 0x26
push eax
movzx edx, byte [ecx + 0x190]
push eax
and edx, 7
push edx
push 0xffffffffffffffff
push ecx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ecx
mov eax, 0x26
push eax
push eax
push 1
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push 5
push ebx
lea eax, [ebp - 0x194]
push eax
push 0xfffffffffffffffa
call fcn.0045de60
mov edi, eax
add esp, 0x10
test edi, edi
je 0x43a5fb
test byte [ebp + 0x10], 1
je 0x43c54c
movzx edx, byte [ebp + 0x13]
test edx, 0x80
je 0x43c530
lea ecx, [ebp + 0x23]
and ecx, 0xfffffffc
lea edx, [ecx + 4]
test byte [edx - 4], 0x10
je 0x43c530
add ecx, 7
and ecx, 0xfffffffc
mov edx, dword [ecx]
add ecx, 7
and ecx, 0xfffffffc
cmp byte [edx], 0x38
mov ebx, dword [ecx]
jne 0x43c530
cmp byte [edx + 2], 0x4e
je 0x43c560
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
movzx eax, di
cmp ecx, dword [0x4f195c]
jne 0x43b504
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
push str.unknown
push 0xfffffffffffffffb
push 2
push edi
call fcn.00464d00
jmp 0x43a5f8
lea edx, [ebp - 0x1c4]
push edx
push 0xfffffffffffffffb
call fcn.0045f650
add esp, 8
test eax, eax
jne 0x43c530
mov esi, dword [ebp - 0x1c4]
xor ecx, ecx
mov dword [esi + 0x98], ecx
mov edx, dword [ebp - 0x1c4]
movzx esi, byte [ebp + 0x10]
and esi, 1
mov dword [edx + 0x10c], ecx
mov edx, dword [ebp - 0x1c4]
and byte [edx + 0x199], 0xf7
mov eax, dword [ebp - 0x1c4]
movzx edx, byte [eax + 0x190]
and edx, 0xfffffffe
or edx, esi
mov byte [eax + 0x190], dl
mov esi, dword [ebp - 0x1c4]
mov edx, dword [ebx]
mov dword [esi + 0x10c], edx
mov edx, dword [ebp - 0x1c4]
mov ebx, dword [ebx + 4]
mov dword [edx + 0x98], ebx
mov ebx, dword [ebp - 0x1c4]
mov edx, dword [ebx + 0x20]
test edx, edx
je 0x43c657
test byte [edx + 0x44], 2
je 0x43c629
mov dword [edx + 0x38], edi
mov edx, dword [ebp - 0x1c4]
mov ebx, dword [edx + 0x20]
mov dword [ebx + 0x3c], edi
mov esi, dword [ebp - 0x1c4]
mov edx, dword [esi + 0x78]
test edx, edx
je 0x43c613
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x1c4]
mov dword [edx + 0x78], ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43b4fa
push edi
movzx eax, byte [ebx + 0x190]
push edi
and eax, 7
push eax
push 0xffffffffffffffff
push ebx
call fcn.0046e340
add esp, 0x14
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2
push ebx
push edi
push edi
push 0
call fcn.00463630
add esp, 0x10
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
cmp ecx, dword [0x4f195c]
jne 0x43b504
jmp 0x43a5e2