Function at 0x433f41
Capabilities:
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0xb8
push ebx
push esi
xor ebx, ebx
cmp dword [ebp + 0x74], ebx
mov esi, ecx
push edi
mov dword [ebp + 0x60], esi
jne 0x433f61
mov eax, dword [esi + 0x28]
mov dword [ebp + 0x74], eax
call fcn.00440d30
lea ecx, [ebp + 0x70]
call fcn.0040f904
test byte [esi + 0xc], 1
je 0x433f80
cmp dword [0x4dbe7c], ebx
mov byte [ebp + 0x4f], 1
jg 0x433f84
mov byte [ebp + 0x4f], 0
mov edi, dword [ebp + 0x70]
cmp word [edi], 0x40
jne 0x433f96
inc edi
inc edi
mov dword [ebp + 0x70], edi
mov byte [ebp + 0x4f], 0
mov dword [ebp + 0x64], 0x80004001
cmp word [edi], bx
je 0x434ed8
and dword [ebp + 0x34], 0
and dword [ebp + 0x50], 0
xor bl, bl
cmp word [edi], 0x2d
mov byte [ebp + 0x5f], 0
je 0x4341aa
cmp byte [ebp + 0x4f], 0
je 0x43401d
test byte [esi + 0xc], 2
je 0x433fd7
push edi
lea ecx, [ebp + 0x34]
call fcn.0044e6d5
mov eax, dword [eax]
jmp 0x433fea
push 1
push 0
lea eax, [ebp + 0x34]
push eax
push edi
mov ecx, esi
call fcn.00456647
mov eax, dword [ebp + 0x34]
test bl, bl
mov dword [ebp + 0x50], eax
jne 0x434013
test byte [esi + 0xc], 0x14
je 0x434013
xor edi, edi
push edi
push dword [ebp + 0x7c]
mov ecx, esi
push 0x11
push edi
push eax
call fcn.0041b021
test byte [esi + 0xc], 0x10
jne 0x43401d
mov dword [ebp + 0x50], edi
jmp 0x43401d
test byte [esi + 0xc], 8
jne 0x43401d
mov byte [ebp + 0x5f], 2
xor edi, edi
test bl, bl
mov dword [ebp + 0x48], edi
jne 0x4341c5
lea ecx, [ebp + 0x70]
mov byte [ebp + 0x43], 0xa
call fcn.0040f904
lea ecx, [ebp + 0x3c]
call fcn.00444e32
mov edi, dword [ebp + 0x70]
mov dword [ebp + 0x38], 0x7d
xor eax, eax
jmp 0x43404f
inc edi
inc edi
inc eax
cmp word [edi], 0x5e
je 0x43404c
dec eax
test ax, ax
jl 0x43408b
inc eax
movsx esi, ax
mov ecx, dword [ebp + 0x60]
and dword [ebp + 0x70], 0
push 1
push 0
lea eax, [ebp + 0x70]
push eax
push edi
call fcn.00456647
mov eax, dword [ebp + 0x48]
mov edi, dword [ebp + 0x70]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x70], eax
call fcn.0043e679
dec esi
jne 0x43405f
lea eax, [ebp + 0x58]
push eax
xor esi, esi
mov dword [ebp + 0x58], edi
call fcn.00405b4a
mov eax, dword [ebp + 0x58]
sub eax, edi
sar eax, 1
dec eax
pop ecx
mov ecx, edi
js 0x434204
inc eax
cmp word [ecx], 0x25
jne 0x4340b2
inc esi
inc ecx
inc ecx
dec eax
jne 0x4340ab
cmp si, 2
jl 0x434204
lea eax, [ebp + 0x58]
push eax
mov dword [ebp + 0x58], edi
call fcn.00405b4a
mov esi, dword [ebp + 0x58]
pop ecx
push esi
lea ecx, [ebp + 0x54]
call fcn.0044e66d
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp + 0x60]
mov ebx, eax
xor eax, eax
push 1
mov dword [ebp + 0x44], eax
push eax
mov word [esi], ax
lea eax, [ebp + 0x44]
push eax
push edi
call fcn.00456647
mov eax, dword [ebp + 0x44]
mov dword [ebp + 0x70], eax
movzx eax, word [eax]
jmp 0x43411a
cmp ax, 0x40
jne 0x434121
add dword [ebp + 0x70], 2
mov eax, dword [ebp + 0x70]
mov ax, word [eax]
mov byte [ebp + 0x4f], 0
test ax, ax
jne 0x434106
jmp 0x434127
cmp word [edi], 0x2d
je 0x434187
push dword [ebp + 0x70]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
lea eax, [esi + ebx + 3]
push eax
lea ecx, [ebp + 0x48]
call fcn.00444e77
mov edi, dword [ebp + 0x48]
push esi
push dword [ebp + 0x70]
push edi
call fcn.00405b32
mov eax, dword [ebp + 0x48]
inc ebx
push ebx
push dword [ebp + 0x54]
lea eax, [eax + esi*2]
push eax
call fcn.00405b32
mov eax, dword [ebp + 0x48]
add esp, 0x18
cmp word [eax], 0x5e
lea ecx, [ebp + 0x44]
jne 0x4341f7
dec byte [ebp + 0x43]
js 0x4341e3
call fcn.0043e679
lea ecx, [ebp + 0x54]
call fcn.0043e679
jmp 0x434048
lea ecx, [ebp + 0x44]
call fcn.0043e679
lea ecx, [ebp + 0x54]
call fcn.0043e679
lea ecx, [ebp + 0x3c]
call fcn.0043e679
lea ecx, [ebp + 0x48]
call fcn.0043e679
mov esi, dword [ebp + 0x60]
mov bl, byte [edi]
inc edi
inc edi
cmp word [edi], 0x20
mov dword [ebp + 0x70], edi
jne 0x433fbe
inc edi
inc edi
mov dword [ebp + 0x70], edi
jmp 0x433fbe
cmp dword [ebp + 0x50], edi
je 0x4341db
push edi
push dword [ebp + 0x7c]
mov ecx, esi
push 0x21
push edi
push dword [ebp + 0x50]
call fcn.0041b021
mov dword [ebp + 0x64], edi
jmp 0x4359d2
mov dword [ebp + 0x64], 0x80070057
call fcn.0043e679
lea ecx, [ebp + 0x54]
jmp 0x4355c9
call fcn.0043e679
lea ecx, [ebp + 0x54]
call fcn.0043e679
mov ax, word [edi]
cmp ax, 0x28
jne 0x434217
push 0x29
pop esi
mov word [edi], 0x7b
jmp 0x434220
cmp ax, 0x7b
jne 0x434259
mov esi, dword [ebp + 0x38]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [edi + eax*2 - 2]
cmp si, word [eax]
jne 0x434234
and word [eax], 0
mov eax, dword [ebp + 0x48]
mov ecx, dword [ebp + 0x60]
and dword [ebp + 0x48], 0
push 1
mov dword [ebp + 0x70], eax
push 0
lea eax, [ebp + 0x48]
push eax
push edi
call fcn.0045522d
lea ecx, [ebp + 0x70]
call fcn.0043e679
jmp 0x434267
cmp dword [ebp + 0x48], edi
je 0x434267
push edi
lea ecx, [ebp + 0x48]
call fcn.0044e731
mov eax, dword [ebp + 0x48]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x70], eax
call fcn.0040f904
mov esi, dword [ebp + 0x70]
mov ax, word [esi]
cmp ax, 0x23
je 0x434ec0
test ax, ax
je 0x434ec0
cmp ax, 0x7b
je 0x4359f2
cmp ax, 0x5b
jne 0x4342a9
cmp word [esi + 2], 0x5d
je 0x4359f2
cmp ax, 0x46
mov edi, esi
mov dword [ebp + 0x58], edi
mov ebx, esi
jne 0x4342d2
cmp word [esi + 2], 0x49
jne 0x4342d2
cmp word [esi + 4], 0x4e
jne 0x4342d2
cmp word [esi + 6], 0x44
jne 0x4342d2
cmp word [esi + 8], 0x20
je 0x4342e6
mov ecx, dword [ebp + 0x60]
push 1
push 0
lea eax, [ebp + 0x3c]
push eax
push esi
call fcn.00456647
mov ebx, dword [ebp + 0x3c]
mov ax, word [esi]
and dword [ebp + 0x54], 0
push 0x22
pop ecx
cmp ax, cx
push 0x7c
mov dword [ebp + 0x44], ecx
pop edx
je 0x434303
cmp ax, dx
mov dword [ebp + 0x44], edx
jne 0x43435c
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov cx, word [ebp + 0x44]
cmp word [esi], cx
lea eax, [esi + eax*2 - 2]
jne 0x43432e
mov ecx, dword [ebp + 0x44]
cmp word [eax], cx
jne 0x43432e
inc edi
inc edi
dec eax
dec eax
inc dword [ebp + 0x54]
cmp word [edi], cx
mov dword [ebp + 0x58], edi
je 0x43431a
and word [eax + 2], 0
cmp dword [ebp + 0x54], 0
jle 0x434348
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
sub eax, dword [ebp + 0x54]
and word [ebx + eax*2], 0
lea ecx, [ebp + 0x58]
call fcn.0040f904
mov edi, dword [ebp + 0x58]
mov eax, edi
sub eax, esi
sar eax, 1
lea ebx, [ebx + eax*2]
lea esi, [ebp + 0x54]
mov dword [ebp + 0x54], edi
call fcn.00413143
mov eax, dword [ebp + 0x54]
sub eax, edi
sar eax, 1
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x54], ebx
call fcn.00413143
mov esi, dword [ebp + 0x54]
mov eax, esi
sub eax, ebx
sar eax, 1
push edi
mov dword [ebp + 0x38], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], esi
call fcn.0040f904
mov esi, dword [ebp + 0x44]
xor eax, eax
cmp esi, 3
mov dword [ebp + 0x2c], eax
jl 0x434467
cmp esi, 0x7f
jg 0x434467
xor ecx, ecx
mov cx, word [edi]
push ecx
call fcn.00414989
add esp, 4
test al, al
mov al, cl
je 0x4343c9
and al, 0xdf
jmp 0x4343d0
cmp cx, 0xff
ja 0x4343d5
lea ecx, [ebp + 0x2d]
jmp 0x4343df
mov esi, dword [ebp + 0x44]
mov byte [ebp + 0x2d], ch
lea ecx, [ebp + 0x2e]
inc esi
xor edx, edx
mov dx, word [edi + 2]
mov byte [ebp + 0x2c], al
push edx
call fcn.00414989
add esp, 4
test al, al
mov al, dl
je 0x4343fe
and al, 0xdf
mov byte [ecx], al
inc ecx
jmp 0x43440c
mov byte [ecx], al
inc ecx
cmp dx, 0xff
jbe 0x43440c
mov byte [ecx], dh
inc ecx
inc esi
xor edx, edx
mov dx, word [edi + 4]
push edx
call fcn.00414989
add esp, 4
test al, al
mov al, dl
je 0x434428
and al, 0xdf
mov byte [ecx], al
inc ecx
jmp 0x434436
mov byte [ecx], al
inc ecx
cmp dx, 0xff
jbe 0x434436
mov byte [ecx], dh
inc ecx
inc esi
cmp dword [ebp + 0x44], 4
jl 0x434464
xor edx, edx
mov dx, word [edi + 6]
push edx
call fcn.00414989
add esp, 4
test al, al
mov al, dl
je 0x434457
and al, 0xdf
mov byte [ecx], al
jmp 0x434464
cmp dx, 0xff
mov byte [ecx], al
jbe 0x434464
mov byte [ecx + 1], dh
inc esi
mov eax, dword [ebp + 0x2c]
mov edx, dword [ebp + 0x44]
shl esi, 8
or esi, edx
cmp esi, 0x303
jne 0x4344d3
cmp eax, 0x444553
je 0x4344bd
cmp eax, 0x524944
je 0x4344aa
cmp eax, 0x544553
jne 0x4357d2
push dword [ebp + 0x74]
add edi, 6
push edi
push 1
add ebx, 6
mov ecx, dword [ebp + 0x60]
push ebx
call fcn.0042047e
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
push 0
add edi, 6
push edi
call fcn.0047a070
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 6
push edi
call fcn.0045eba4
jmp 0x434e93
cmp esi, 0x606
jne 0x43452c
cmp eax, 0x45524854
jne 0x4357d2
push 6
push edi
push str.THREAD
call fcn.0043fac4
add esp, 0xc
test al, al
je 0x4357d2
cmp byte [ebp + 0x5f], 0
je 0x434518
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b021
add edi, 0xc
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push edi
call fcn.00483734
jmp 0x434e93
cmp esi, 0x404
jne 0x4357d2
mov ecx, 0x4d455449
cmp eax, ecx
ja 0x434d7a
je 0x434d59
mov ecx, 0x455a4953
cmp eax, ecx
ja 0x4349ad
je 0x434999
mov ecx, 0x45444948
cmp eax, ecx
ja 0x4347c7
je 0x4347b0
mov ecx, 0x44494c53
cmp eax, ecx
ja 0x4346c7
je 0x4346b0
cmp eax, 0x43454a45
je 0x43469f
cmp eax, 0x43455845
je 0x434686
cmp eax, 0x434c4143
je 0x434673
cmp eax, 0x4350544e
je 0x434662
cmp eax, 0x44414552
je 0x434625
cmp eax, 0x44414f4c
je 0x4345e0
cmp eax, 0x44415049
jne 0x4357d2
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045b877
jmp 0x434e93
cmp byte [ebp + 0x5f], 0
je 0x4345fa
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b021
add edi, 8
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x74], edi
call fcn.0040f904
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
call fcn.004221d9
mov ecx, dword [ebp + 0x60]
push 1
mov dword [ebp + 0x64], eax
call fcn.0046e8cd
jmp 0x435961
push 4
push ebx
push str.READ
call fcn.0043fac4
add esp, 0xc
test al, al
je 0x434921
cmp dword [ebp + 0x38], 4
je 0x43464e
cmp word [ebx + 8], 0x2d
jne 0x434921
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00470381
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004508d0
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.0048dcf3
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
xor eax, eax
push eax
push eax
push eax
push eax
add edi, 8
push edi
push ecx
push eax
call fcn.0040a810
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004569f2
jmp 0x434e93
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0048004d
jmp 0x434e93
cmp eax, 0x444d4152
je 0x4347a0
cmp eax, 0x444e4152
je 0x43478c
cmp eax, 0x444e4553
je 0x43477f
cmp eax, 0x444e4946
je 0x434744
cmp eax, 0x44524854
je 0x434722
cmp eax, 0x4542414c
jne 0x4357d2
cmp dword [ebp + 0x74], 0
je 0x434921
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.004887a7
jmp 0x434e93
cmp byte [ebp + 0x5f], 0
je 0x43473c
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b021
add edi, 8
jmp 0x43451b
cmp byte [ebp + 0x5f], 0
je 0x43475e
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b021
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x7c]
add edi, 8
cmp word [edi], 0x7c
jne 0x43477a
push 0
push edi
call fcn.00424fd2
jmp 0x434e93
push dword [ebp + 0x78]
jmp 0x43476f
push dword [ebp + 0x58]
call fcn.00429bb4
jmp 0x435113
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047451c
jmp 0x434e93
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0041980c
jmp 0x434e93
push 1
push str.Hide
push dword [ebp + 0x58]
call fcn.00412c65
add esp, 0xc
jmp 0x434e93
mov ecx, 0x454d4f43
cmp eax, ecx
ja 0x434873
je 0x4348c5
cmp eax, 0x45444f43
je 0x434860
cmp eax, 0x45455254
je 0x43484c
cmp eax, 0x45474150
je 0x43483f
cmp eax, 0x454c4946
je 0x43482d
cmp eax, 0x454d414e
je 0x434c85
cmp eax, 0x454d4954
jne 0x4357d2
cmp dword [ebp + 0x74], 0
je 0x434921
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00488c57
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x58]
call fcn.0042951a
jmp 0x434e93
push dword [ebp + 0x58]
call fcn.0041e8ca
jmp 0x435113
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0048d14f
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.004619c1
jmp 0x434e93
cmp eax, 0x454d4f48
je 0x434988
cmp eax, 0x45534142
je 0x434977
cmp eax, 0x45544144
je 0x434963
cmp eax, 0x45544953
je 0x43494f
cmp eax, 0x45544f4e
je 0x4348c5
cmp eax, 0x45564948
jne 0x4357d2
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046bc78
jmp 0x434e93
add ebx, 8
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x74], ebx
call fcn.0040f904
mov esi, dword [ebp + 0x74]
mov ax, word [esi]
cmp ax, 0x31
jb 0x4348e5
cmp ax, 0x39
jbe 0x4348f9
mov edi, dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
push 2
push 0x4c6cd8
push esi
call edi
test eax, eax
jne 0x434902
mov byte [0x4da2d8], 1
jmp 0x43491d
cmp word [esi], 0x30
je 0x434916
push 3
push 0x4c6cd0
push esi
call edi
test eax, eax
jne 0x43491d
mov byte [0x4da2d8], 0
and dword [ebp + 0x64], 0
mov eax, dword [ebp + 0x64]
test eax, eax
je 0x434930
mov ecx, dword [ebp + 0x60]
mov ecx, dword [ecx + 0x30]
mov dword [ecx], eax
xor edi, edi
cmp eax, edi
jge 0x435969
push eax
lea eax, [ebp - 0x50]
push str.0x_p
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
jmp 0x435975
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00490590
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00473c71
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0048db61
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00479975
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0044b257
jmp 0x434e93
mov ecx, 0x4b4d554e
cmp eax, ecx
ja 0x434b83
je 0x434b76
mov ecx, 0x49474552
cmp eax, ecx
ja 0x434ac9
je 0x434ab6
cmp eax, 0x46544547
je 0x434aa2
cmp eax, 0x46545550
je 0x434a8e
cmp eax, 0x46574246
je 0x434a7e
cmp eax, 0x47414d49
je 0x434a61
cmp eax, 0x48534148
je 0x434a4e
cmp eax, 0x48544150
je 0x434a3e
cmp eax, 0x49444152
jne 0x4357d2
cmp dword [ebp + 0x74], 0
je 0x434921
cmp edx, 4
jne 0x434921
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047f8fb
jmp 0x434e93
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0042c430
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.0048eb5b
jmp 0x434e93
cmp edx, 4
jne 0x434921
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0048d509
jmp 0x434e93
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00416ccf
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0047590f
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004745c5
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.004603f6
jmp 0x434e93
sub eax, 0x49564544
je 0x434b66
sub eax, 0x901
je 0x434b55
sub eax, 0xec070e
je 0x434b41
sub eax, 0x100f9f9
je 0x434b2e
sub eax, 7
je 0x434b1a
sub eax, 0x1f8f0
jne 0x4357d2
cmp dword [ebp + 0x74], 0
je 0x434921
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0047f651
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00496ae9
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.00477f95
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00452d79
jmp 0x434e93
push dword [ebp + 0x74]
add edi, 8
push edi
push 0
add ebx, 8
jmp 0x43449c
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00430afb
jmp 0x434e93
push dword [ebp + 0x58]
call fcn.00412491
jmp 0x435113
mov ecx, 0x4c4c4143
cmp eax, ecx
ja 0x434c53
je 0x434c32
cmp eax, 0x4b4e494c
je 0x434c21
cmp eax, 0x4b4e4c46
je 0x434c0d
cmp eax, 0x4b534944
je 0x434bfc
cmp eax, 0x4b544f48
je 0x434be9
cmp eax, 0x4c424154
je 0x434bd5
cmp eax, 0x4c454853
jne 0x4357d2
push dword [ebp + 0x58]
call fcn.0042f676
jmp 0x435113
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0049208f
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
push 0
add edi, 8
push edi
call fcn.004190d0
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004962d3
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046b5a6
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004176b1
jmp 0x434e93
mov eax, dword [ebp + 0x58]
cmp word [eax], 0x24
jne 0x435935
push edi
push 0
add eax, 2
push eax
push dword [ebp + 0x60]
call fcn.0042c7c7
jmp 0x434e93
cmp eax, 0x4c4c4157
je 0x434d4c
cmp eax, 0x4c4c494b
je 0x434cd5
cmp eax, 0x4c525453
je 0x434cc1
cmp eax, 0x4c534441
je 0x434cad
cmp eax, 0x4d414554
je 0x434c99
cmp eax, 0x4d414e46
jne 0x4357d2
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046b4be
jmp 0x434e93
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0041ac2f
jmp 0x43595e
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046d7f6
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00471f8b
jmp 0x434e93
xor ebx, ebx
add edi, 8
inc ebx
cmp word [edi], 0x2a
jne 0x434cf4
inc edi
inc edi
cmp word [edi], 0x2a
jne 0x434cf4
push 2
pop ebx
add edi, ebx
cmp word [edi], 0x2a
je 0x434cec
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], edi
call fcn.0040f904
mov edi, dword [ebp + 0x58]
mov ax, word [edi]
cmp ax, 0x5c
je 0x434d3a
cmp ax, 0x40
je 0x434d3a
mov esi, str.svr
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push edi
push esi
call fcn.0043fa6d
add esp, 0xc
test al, al
jne 0x434d3a
mov ecx, dword [ebp + 0x60]
push edi
call fcn.00429db9
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
push ebx
push dword [ebp + 0x74]
push edi
call fcn.0045a71e
jmp 0x434e93
push dword [ebp + 0x58]
call fcn.004197ad
jmp 0x435113
cmp dword [ebp + 0x74], 0
je 0x434921
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0048cc4f
jmp 0x434e93
mov ecx, 0x534f504c
cmp eax, ecx
ja 0x43519d
je 0x435187
mov ecx, 0x504f4f4c
cmp eax, ecx
ja 0x435013
je 0x434fdf
mov ecx, 0x4e574f44
cmp eax, ecx
ja 0x434f16
je 0x434f09
cmp eax, 0x4d495444
je 0x434ef5
cmp eax, 0x4d524f46
je 0x434ee4
cmp eax, 0x4e49414d
je 0x434e44
cmp eax, 0x4e495053
je 0x434e30
cmp eax, 0x4e495753
je 0x434e15
cmp eax, 0x4e524353
je 0x434e04
cmp eax, 0x4e554f4d
jne 0x4357d2
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00498481
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046c00e
jmp 0x434e93
cmp dword [ebp + 0x74], 0
je 0x434921
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047fd32
jmp 0x434e93
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0048963c
jmp 0x434e93
cmp byte [ebp + 0x5f], 0
je 0x434e5e
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b021
mov edi, dword [ebp + 0x58]
jmp 0x434e79
push 3
push edi
push 0x4c1874
call fcn.0043fa6d
add esp, 0xc
test al, al
jne 0x434e85
inc edi
inc edi
cmp word [edi], 0x2a
je 0x434e63
cmp word [edi], 0
jne 0x434e9b
add ebx, 8
push ebx
mov ecx, 0x4dc0f8
call fcn.0042f917
mov dword [ebp + 0x64], eax
jmp 0x434921
mov esi, 0x4dbc94
push str.PECMD
mov ecx, esi
call fcn.0044e731
push ebx
mov ecx, esi
call fcn.00444e9e
mov eax, dword [ebp + 0x60]
mov word [eax + 0x88], 2
lea ecx, [ebp + 0x3c]
call fcn.0043e679
lea ecx, [ebp + 0x48]
call fcn.0043e679
lea ecx, [ebp + 0x34]
call fcn.0043e679
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00469e12
jmp 0x434e93
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045b679
jmp 0x434e93
push dword [ebp + 0x58]
call fcn.0042a5dc
jmp 0x435113
cmp eax, 0x4f474f4c
je 0x434fd1
cmp eax, 0x4f4d454d
je 0x434fb0
cmp eax, 0x50494350
je 0x434f9c
cmp eax, 0x504c4548
je 0x434f6e
cmp eax, 0x504d4554
je 0x434f5a
cmp eax, 0x504e5055
jne 0x4357d2
add ebx, 8
push ebx
call fcn.00457076
jmp 0x435113
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046e93e
jmp 0x434e93
push 5
push 0x12e
push dword [0x4dbc90]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x434ec0
mov ecx, dword [ebp + 0x60]
push 0
add ebx, 8
push ebx
call fcn.0042c4a7
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00482113
jmp 0x434e93
cmp dword [ebp + 0x74], 0
je 0x434921
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045aedb
jmp 0x434e93
add ebx, 8
push ebx
call fcn.00430257
jmp 0x435113
cmp byte [ebp + 0x5f], 0
je 0x434ff9
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b021
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x78]
add edi, 8
push dword [ebp + 0x74]
push edi
call fcn.00424e21
jmp 0x434e93
mov ecx, 0x5254534c
cmp eax, ecx
ja 0x4350de
je 0x4350ca
sub eax, 0x50534944
je 0x4350ba
sub eax, 0x1edf90c
je 0x43509c
sub eax, 3
je 0x435086
sub eax, 0x41102
je 0x435078
sub eax, 0x3f0f1
je 0x435064
sub eax, 7
jne 0x4357d2
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0041c0a9
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046a343
jmp 0x434e93
add edi, 8
push edi
call fcn.004125f7
jmp 0x435113
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.004802a6
jmp 0x434e93
cmp dword [ebp + 0x74], 0
je 0x434921
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0047fbd6
jmp 0x434e93
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.004271fd
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00472158
jmp 0x434e93
sub eax, 0x5254534d
je 0x435173
sub eax, 5
je 0x43515f
dec eax
je 0x43515b
sub eax, 0xedee01
je 0x43513d
sub eax, 0x50df8
je 0x435119
sub eax, 0x70606
jne 0x4357d2
add edi, 8
push edi
call fcn.004125e9
pop ecx
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
xor eax, eax
cmp dword [ebp + 0x50], eax
sete al
add ebx, 8
or eax, dword [ebp + 0x7c]
push eax
push ebx
call fcn.0041b363
and dword [ebp + 0x50], 0
mov dword [ebp + 0x64], eax
jmp 0x434921
cmp dword [ebp + 0x74], 0
je 0x434921
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0048908f
jmp 0x434e93
push 1
jmp 0x435189
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004722a6
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00473323
jmp 0x434e93
push 0
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004724cd
jmp 0x434e93
mov ecx, 0x5453494c
cmp eax, ecx
ja 0x435611
je 0x4355e7
mov ecx, 0x54494e49
cmp eax, ecx
ja 0x435286
je 0x435276
cmp eax, 0x534f5052
je 0x435262
cmp eax, 0x53504954
je 0x43524e
cmp eax, 0x53504d43
je 0x43523a
cmp eax, 0x5353454d
je 0x435226
cmp eax, 0x54494157
je 0x435216
cmp eax, 0x54494445
jne 0x4357d2
cmp dword [ebp + 0x74], 0
je 0x434921
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045aa41
jmp 0x434e93
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0042b4d7
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0048acde
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045f414
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00489872
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00472c6c
jmp 0x434e93
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.00420793
jmp 0x434e93
cmp eax, 0x54495257
je 0x4355d3
cmp eax, 0x54495845
je 0x435301
cmp eax, 0x544d4644
je 0x4352ed
cmp eax, 0x544e4950
je 0x4352d9
cmp eax, 0x544e4f46
je 0x4352cc
cmp eax, 0x54524150
jne 0x4357d2
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.004648bb
jmp 0x434e93
push dword [ebp + 0x58]
call fcn.00419635
jmp 0x435113
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0046c8cb
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0045470a
jmp 0x434e93
lea ecx, [ebx + 8]
mov dx, word [ecx]
cmp dx, 0x3d
jne 0x435395
xor esi, esi
add ebx, 0xa
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x64], esi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x74], ebx
call fcn.0040f904
push dword [ebp + 0x74]
push str.error
call fcn.0043fb03
test al, al
pop ecx
pop ecx
je 0x435344
mov ecx, dword [ebp + 0x60]
mov eax, dword [ecx + 0x30]
mov eax, dword [eax]
jmp 0x43537b
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x74]
push eax
call fcn.00451cdf
test eax, eax
pop ecx
pop ecx
jg 0x435375
mov eax, dword [ebp + 0x74]
cmp word [eax], si
je 0x435375
mov ecx, dword [ebp + 0x60]
push esi
push 0xffffffffffffffff
push esi
push eax
call fcn.00410d4d
cmp eax, esi
je 0x435375
mov eax, dword [eax + 4]
jmp 0x435378
mov eax, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x60]
mov edx, dword [ecx + 0x30]
mov dword [edx], eax
mov dword [ecx + 0x8c], eax
mov dword [ebp + 0x64], eax
mov byte [ecx + 0x8a], 1
jmp 0x434930
mov eax, edx
call fcn.0040f8eb
test al, al
jne 0x4353a9
test dx, dx
jne 0x434921
mov dword [ebp + 0x78], ecx
lea ecx, [ebp + 0x78]
call fcn.0040f904
mov edi, dword [ebp + 0x60]
mov eax, dword [edi + 0x8c]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x54], eax
xor ebx, ebx
call fcn.00444e32
push 0x2c
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.00447c46
mov eax, dword [ebp + 0x78]
add esp, 0xc
cmp word [eax], 0x2c
jne 0x4353fa
add dword [ebp + 0x78], 2
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.00451cdf
pop ecx
pop ecx
mov ebx, eax
mov eax, dword [ebp + 0x70]
cmp word [eax], 0
jne 0x43540a
push 0x40
jmp 0x435562
push eax
push 0x4c6ca8
call fcn.0043fb03
test al, al
pop ecx
pop ecx
je 0x435423
xor esi, esi
inc esi
jmp 0x435563
push dword [ebp + 0x70]
push 0x4c5bf4
call fcn.0043fb03
test al, al
pop ecx
pop ecx
jne 0x43541b
push dword [ebp + 0x70]
push str.FILE
call fcn.0043fb03
test al, al
pop ecx
pop ecx
jne 0x43545c
push dword [ebp + 0x70]
push 0x4c4790
call fcn.0043fb03
test al, al
pop ecx
pop ecx
je 0x435463
push 2
jmp 0x435562
push dword [ebp + 0x70]
push str.FORX
call fcn.0043fb03
test al, al
pop ecx
pop ecx
jne 0x435489
push dword [ebp + 0x70]
push 0x4c6c94
call fcn.0043fb03
test al, al
pop ecx
pop ecx
je 0x435490
push 4
jmp 0x435562
push dword [ebp + 0x70]
push str.LOOP
call fcn.0043fb03
test al, al
pop ecx
pop ecx
jne 0x4354b6
push dword [ebp + 0x70]
push 0x4c6c88
call fcn.0043fb03
test al, al
pop ecx
pop ecx
je 0x4354bd
push 8
jmp 0x435562
push dword [ebp + 0x70]
push 0x4c1fc4
call fcn.0043fb03
test al, al
pop ecx
pop ecx
jne 0x4354e3
push dword [ebp + 0x70]
push str.BLOCK
call fcn.0043fb03
test al, al
pop ecx
pop ecx
je 0x4354e7
push 0x10
jmp 0x435562
push dword [ebp + 0x70]
push str.ToWIN
call fcn.0043fb03
test al, al
pop ecx
pop ecx
je 0x435501
mov esi, 0x80
jmp 0x435563
push dword [ebp + 0x70]
push 0x4c6c74
call fcn.0043fb03
test al, al
pop ecx
pop ecx
je 0x435533
push 1
push dword [ebp + 0x74]
mov esi, 0x80
or word [edi + 0x88], si
push 0x4c17d8
mov ecx, edi
call fcn.0045a71e
jmp 0x435563
push dword [ebp + 0x70]
push str.CONTINUE
call fcn.0043fb03
test al, al
pop ecx
pop ecx
je 0x43554d
mov esi, pe_nt_image_headers32
jmp 0x435563
push dword [ebp + 0x70]
push str.BREAK
call fcn.0043fb03
test al, al
pop ecx
pop ecx
je 0x4355c6
push 0x20
pop esi
or word [edi + 0x88], si
xor esi, esi
cmp ebx, esi
jle 0x435588
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp + 0x54]
mov dword [eax], ecx
mov eax, dword [ebp + 0x54]
mov dword [edi + 0x8c], eax
mov byte [edi + 0x8a], 1
cmp byte [ebp + 0x5f], 0
je 0x43559f
push esi
push dword [ebp + 0x7c]
mov ecx, edi
push 0x11
push esi
push dword [ebp + 0x50]
call fcn.0041b021
lea ecx, [ebp + 0x70]
call fcn.0043e679
lea ecx, [ebp + 0x3c]
call fcn.0043e679
lea ecx, [ebp + 0x48]
call fcn.0043e679
lea ecx, [ebp + 0x34]
call fcn.0043e679
mov eax, esi
jmp 0x434eda
lea ecx, [ebp + 0x70]
call fcn.0043e679
jmp 0x434921
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.0047113c
jmp 0x434e93
cmp dword [ebp + 0x74], 0
je 0x434921
cmp edx, 4
jne 0x434921
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00489202
jmp 0x434e93
mov ecx, 0x56524553
cmp eax, ecx
ja 0x4356db
je 0x4356cb
sub eax, 0x54554853
je 0x4356be
sub eax, 0x2fcf3
je 0x4356aa
sub eax, 0xe
je 0x435699
sub eax, 0xf5fff9
je 0x435688
sub eax, 0x10cfa
je 0x435668
sub eax, 0x102f1ff
jne 0x4357d2
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046a772
jmp 0x434e93
cmp dword [ebp + 0x74], 0
je 0x434921
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add ebx, 8
push ebx
call fcn.00488e27
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.00479c1a
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
add edi, 8
push edi
call fcn.004303fe
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.0046b3d4
jmp 0x434e93
push dword [ebp + 0x58]
call fcn.0042a760
jmp 0x435113
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x60]
call fcn.0041634b
jmp 0x434e93
cmp eax, 0x574f4853
je 0x4357be
cmp eax, 0x574f5242
je 0x4357a8
cmp eax, 0x58454649
je 0x43576d
cmp eax, 0x58524f46
je 0x435739
cmp eax, 0x59434552
je 0x435728
cmp eax, 0x59454b48
jne 0x4357d2
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.004894fe
jmp 0x434e93
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00456cbd
jmp 0x434e93
cmp byte [ebp + 0x5f], 0
je 0x435753
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b021
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x78]
add edi, 8
push dword [ebp + 0x74]
push edi
call fcn.00480c4b
jmp 0x434e93
cmp byte [ebp + 0x5f], 0
je 0x435787
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b021
mov ecx, dword [ebp + 0x60]
push dword [ebp + 0x7c]
add edi, 8
cmp word [edi], 0x7c
jne 0x4357a3
push 0
push edi
call fcn.00424fbc
jmp 0x434e93
push dword [ebp + 0x78]
jmp 0x435798
mov ecx, dword [ebp + 0x60]
push 0
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045fc26
jmp 0x434e93
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x60]
add ebx, 8
push ebx
call fcn.00494254
jmp 0x434e93
xor esi, esi
mov dword [ebp + 0x64], esi
mov ax, word [ebx]
cmp ax, 0x24
mov dword [ebp + 0x58], ebx
jne 0x4357f6
push esi
push esi
add ebx, 2
push ebx
push dword [ebp + 0x60]
call fcn.0042c7c7
jmp 0x434921
cmp ax, si
je 0x434921
push 0x40
pop ecx
cmp ax, cx
mov dword [ebp + 0x54], esi
mov dword [ebp + 0x78], esi
jne 0x435816
add ebx, 2
mov dword [ebp + 0x54], ecx
mov dword [ebp + 0x58], ebx
mov ecx, dword [ebp + 0x58]
xor eax, eax
mov ax, word [ecx]
cmp ax, 0x2a
je 0x435830
cmp ax, 0x2d
je 0x435830
cmp ax, 0x2b
jne 0x435833
mov dword [ebp + 0x78], eax
mov ebx, dword [ebp + 0x60]
mov eax, dword [ebx + 0x1c]
mov dword [ebp + 0x30], eax
lea eax, [ebp + 0x30]
push eax
lea eax, [ebp + 0x38]
push eax
push ecx
mov ecx, ebx
mov dword [ebp + 0x38], esi
call fcn.00421233
mov eax, dword [ebp + 0x78]
or eax, dword [ebp + 0x54]
test ax, ax
jne 0x43593a
cmp dword [ebp + 0x38], esi
jge 0x43593a
push dword [ebp + 0x44]
lea ecx, [ebp + 0x78]
push edi
call fcn.0044e68a
mov eax, dword [ebp + 0x44]
cmp eax, esi
jle 0x435899
lea ecx, [ebp + 0x64]
push ecx
lea eax, [edi + eax*2]
push eax
push dword [ebp + 0x78]
push dword [ebp + 0x74]
push ebx
call fcn.0040f42a
add esp, 0x14
test al, al
jne 0x43592d
push 1
push esi
lea eax, [ebp + 0x3c]
push eax
push dword [ebp + 0x70]
mov ecx, ebx
call fcn.00456647
mov eax, dword [ebp + 0x3c]
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], eax
call fcn.0040f904
mov edi, dword [ebp + 0x58]
push esi
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x54]
push eax
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x38], esi
call fcn.0041a317
add esp, 0xc
push dword [ebp + 0x38]
lea ecx, [ebp + 0x70]
push dword [ebp + 0x54]
call fcn.0044e68a
lea eax, [ebp + 0x70]
push eax
mov word [ebp + 0x76], si
call fcn.00410171
cmp eax, 1
pop ecx
mov ecx, ebx
jne 0x435910
push edi
call fcn.004221d9
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x64], eax
call fcn.0043e679
lea ecx, [ebp + 0x78]
call fcn.0043e679
jmp 0x435961
push esi
push esi
push esi
push 1
lea eax, [ebp + 0x76]
push eax
push ebx
push dword [ebp + 0x3c]
call fcn.0040a810
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x64], eax
call fcn.0043e679
lea ecx, [ebp + 0x78]
jmp 0x4355c9
mov ebx, dword [ebp + 0x60]
xor esi, esi
cmp byte [ebp + 0x5f], 0
je 0x435951
push esi
push dword [ebp + 0x7c]
mov ecx, ebx
push 0x11
push esi
push dword [ebp + 0x50]
call fcn.0041b021
push dword [ebp + 0x74]
mov ecx, ebx
push dword [ebp + 0x58]
call fcn.0042f8ce
mov dword [ebp + 0x64], eax
mov eax, dword [ebp + 0x64]
jmp 0x434930
cdq
push edx
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.0049b796
mov esi, dword [ebp + 0x60]
add esp, 0xc
test byte [esi + 9], 0xf
jne 0x435991
lea eax, [ebp - 0x50]
push eax
push 0x4c4834
mov ecx, esi
call fcn.0044451e
lea eax, [ebp - 0x50]
push eax
push 0x4c4830
mov ecx, esi
call fcn.0044451e
cmp dword [0x4dbe7c], edi
mov byte [0x4dbf9c], 1
jle 0x4359c7
cmp dword [ebp + 0x50], edi
je 0x4359c7
push edi
push dword [ebp + 0x7c]
mov ecx, esi
push edi
push dword [ebp + 0x64]
push dword [ebp + 0x50]
call fcn.0041b021
lea ecx, [ebp + 0x3c]
call fcn.0043e679
mov esi, dword [ebp + 0x60]
test byte [esi + 0xd], 1
je 0x4359ea
push dword [ebp + 0x34]
call fcn.0043e587
push dword [ebp + 0x48]
call fcn.0043e587
pop ecx
pop ecx
mov esi, dword [ebp + 0x64]
jmp 0x4355af
mov edi, dword [ebp + 0x60]
movzx eax, word [edi + 0x2c]
push 0
push eax
push esi
call fcn.00412b0d
add esp, 0xc
or esi, 1
push esi
mov ecx, edi
call fcn.00484674
mov esi, eax
jmp 0x4355a7