Function at 0x4253c0
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xbc
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
xor edi, edi
mov dword [ebp - 0x14], edx
mov esi, dword [ebx + 0x8f]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x94], edi
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x9c], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 8], esi
cmp dword [ebx + 0x2b], edi
je 0x427902
cmp dword [ebx + 0x4b], 0xffffffff
je 0x427902
mov eax, dword [ebx + 0x17]
add eax, 0x1000
push eax
call fcn.004c4a00
add esp, 4
mov dword [ebp - 0xb8], eax
test eax, eax
je 0x427902
push edi
push edi
push 3
push edi
push 7
push SysReAllocString
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xbc], eax
cmp eax, 0xffffffff
je 0x4278f4
push edi
lea ecx, [ebx + 0x17]
push ecx
push dword [ecx]
push dword [ebp - 0xb8]
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x4278e8
mov eax, dword [ebx + 0x33]
mov edx, 0x200
mov dword [ebp - 0xc], edi
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x18], ecx
mov ecx, dword [eax + 0x3c]
test ecx, ecx
mov eax, dword [eax + 0x38]
cmove ecx, edx
test eax, eax
mov dword [ebp - 4], ecx
mov ecx, 0x1000
cmove eax, ecx
mov ecx, 0x80
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 0x121]
cmp edx, ecx
jbe 0x425541
mov dword [ebp - 0xc], edi
cmp ecx, 0x400
jae 0x425541
mov eax, dword [eax + 0x11d]
cmp dword [ecx + eax], 0x68636952
je 0x42553a
mov eax, dword [ebp - 0x14]
add ecx, 8
cmp ecx, edx
jb 0x425514
mov dword [ebp - 0xc], edi
jmp 0x425541
mov dword [ebp - 0xc], 1
mov eax, dword [ebx + 0x33]
mov ecx, 1
cmp cx, word [eax + 0x5c]
jne 0x425558
mov dword [ebp - 0x1c], 3
jmp 0x42556a
mov ecx, 0x2000
test word [eax + 0x16], cx
mov ecx, edi
setne cl
inc ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebx + 0x2b]
xor edx, edx
mov dword [ebp - 0x14], eax
test eax, eax
je 0x4255b9
mov ecx, dword [ebx + 0x37]
add ecx, 0x24
xor esi, esi
nop
cmp dword [ecx - 0x14], 0
lea ecx, [ecx + 0x28]
mov eax, dword [ecx - 0x28]
mov ebx, 1
cmove edi, ebx
and eax, 0xa0000000
cmp eax, 0xa0000000
mov eax, dword [ebp - 0x20]
cmove edx, ebx
dec eax
test dword [ecx - 0x44], eax
mov eax, ebx
cmove esi, eax
sub dword [ebp - 0x14], eax
jne 0x425580
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x10], esi
mov esi, dword [ebp - 8]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x1c]
mov dword [ecx + 4], eax
mov dword [ecx], str.xfrwpetype
mov dword [ecx + 8], str.secaln
mov eax, dword [ebp - 0x20]
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], str.filaln
mov eax, dword [ebp - 4]
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x18], str.mjrlnk
mov eax, dword [ebx + 0x33]
movzx eax, byte [eax + 0x1a]
mov dword [ecx + 0x1c], eax
mov dword [ecx + 0x20], str.mnrlnk
mov eax, dword [ebx + 0x33]
movzx eax, byte [eax + 0x1b]
mov dword [ecx + 0x24], eax
mov dword [ecx + 0x28], 0x533d34
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x1c]
mov dword [ecx + 0x2c], eax
mov dword [ecx + 0x30], str.soid
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x20]
mov dword [ecx + 0x34], eax
mov dword [ecx + 0x38], str.soud
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x24]
mov dword [ecx + 0x3c], eax
mov dword [ecx + 0x40], 0x533d48
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x2c]
mov dword [ecx + 0x44], eax
mov dword [ecx + 0x48], 0x533d4c
mov dword [ecx + 0x4c], 0
mov dword [ecx + 0x50], 0x533d50
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x50]
mov dword [ecx + 0x54], eax
mov dword [ecx + 0x58], 0x533d54
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x54]
mov dword [ecx + 0x5c], eax
mov dword [ecx + 0x60], str.sosr
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x60]
mov dword [ecx + 0x64], eax
mov dword [ecx + 0x68], str.sosc
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x68]
mov dword [ecx + 0x6c], eax
mov dword [ecx + 0x70], str.sohr
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x70]
mov dword [ecx + 0x74], eax
mov dword [ecx + 0x78], str.sohc
mov eax, dword [ebx + 0x33]
mov eax, dword [eax + 0x78]
mov dword [ecx + 0x7c], eax
xor eax, eax
mov dword [ecx + 0x80], str.nfsec
cmp dword [ebx + 0x4b], eax
setne al
mov dword [ecx + 0x84], eax
mov dword [ecx + 0x8c], edi
xor edi, edi
mov dword [ecx + 0x88], str.fhzrss
mov dword [ecx + 0x90], str.fsecwrite
mov eax, dword [ebx + 0x37]
mov eax, dword [eax + 0x24]
and eax, 0x80000000
cmp edi, eax
sbb eax, eax
neg eax
mov dword [ecx + 0x94], eax
mov dword [ecx + 0x98], str.haswxsec
mov dword [ecx + 0x9c], edx
mov dword [ecx + 0xa0], str.fsecexec
mov eax, dword [ebx + 0x37]
mov eax, dword [eax + 0x24]
shr eax, 0x1d
xor edx, edx
not eax
and eax, 1
mov dword [ecx + 0xa4], eax
mov dword [ecx + 0xa8], str.vsizealn
mov eax, dword [ebp - 0x10]
mov dword [ecx + 0xac], eax
mov dword [ecx + 0xb0], str.hassdsec
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xa8]
sbb eax, eax
neg eax
mov dword [ecx + 0xb4], eax
mov dword [ecx + 0xb8], str.hassdexp
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0x88]
sbb eax, eax
neg eax
mov dword [ecx + 0xbc], eax
mov dword [ecx + 0xc0], str.hassddbg
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xb8]
sbb eax, eax
neg eax
mov dword [ecx + 0xc4], eax
mov dword [ecx + 0xc8], str.hassdrsc
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0x98]
sbb eax, eax
neg eax
mov dword [ecx + 0xcc], eax
mov dword [ecx + 0xd0], str.hassdbimp
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xe0]
sbb eax, eax
neg eax
mov dword [ecx + 0xd4], eax
mov dword [ecx + 0xd8], str.hassiat
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xe8]
sbb eax, eax
neg eax
mov dword [ecx + 0xdc], eax
mov dword [ecx + 0xe0], str.hassdimp
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xf0]
sbb eax, eax
neg eax
mov dword [ecx + 0xe4], eax
mov dword [ecx + 0xe8], str.hasscom
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xf8]
sbb eax, eax
neg eax
mov dword [ecx + 0xec], eax
mov dword [ecx + 0xf0], str.hasstls
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xd0]
sbb eax, eax
neg eax
mov dword [ecx + 0xf4], eax
mov dword [ecx + 0xf8], str.hassbrlc
mov eax, dword [ebx + 0x33]
cmp edx, dword [eax + 0xb0]
sbb eax, eax
neg eax
mov dword [ecx + 0xfc], eax
mov dword [ecx + 0x100], str.fsize
mov eax, dword [ebx + 0x13]
mov dword [ecx + 0x104], eax
mov eax, dword [ebp - 0xc]
mov dword [ecx + 0x108], str.frich
mov dword [ecx + 0x10c], eax
mov dword [ecx + 0x110], str.stid
movzx eax, word [ebx + 0xc]
mov dword [ecx + 0x114], eax
mov dword [ecx + 0x118], str.sread
mov eax, dword [ebx + 0x2b]
mov dword [ecx + 0x11c], eax
mov dword [ecx + 0x120], str.expfcnt
mov eax, dword [ebx + 0x3b]
mov dword [ecx + 0x124], eax
mov dword [ecx + 0x128], str.expncnt
mov eax, dword [ebx + 0x3f]
mov dword [ecx + 0x12c], eax
mov dword [ecx + 0x130], str.entsecpos
mov eax, dword [ebx + 0x4b]
inc eax
mov dword [ecx + 0x134], eax
mov dword [ecx + 0x138], str.enttsecpos
mov eax, dword [ebx + 0x53]
inc eax
mov dword [ecx + 0x13c], eax
mov dword [ecx + 0x140], str.eppospct
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x425919
mov eax, dword [ebx + 0x33]
imul eax, dword [eax + 0x28], 0x64
div ecx
jmp 0x42591b
xor eax, eax
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x144], eax
mov dword [edx + 0x148], str.impfcnt
movzx eax, word [ebx + 0xa7]
mov dword [edx + 0x14c], eax
mov dword [edx + 0x150], str.impdllcnt
movzx eax, word [ebx + 0xc1]
mov dword [edx + 0x154], eax
test esi, esi
je 0x425b11
mov dword [edx + 0x158], str.riapih
lea ecx, [esi + 0x17]
mov eax, dword [esi + 5]
mov dword [edx + 0x15c], eax
mov dword [edx + 0x160], str.riapicp
movzx eax, word [esi + 9]
mov dword [edx + 0x164], eax
mov dword [edx + 0x168], str.riapisz
movzx eax, word [esi + 0xb]
mov dword [edx + 0x16c], eax
mov dword [edx + 0x170], str.riapvsz
movzx eax, word [esi + 0x11]
mov dword [edx + 0x174], eax
mov dword [edx + 0x178], str.riapvcp
movzx eax, word [esi + 0xb7]
mov dword [edx + 0x17c], eax
mov dword [edx + 0x180], str.riapvcn
mov edx, ecx
lea edi, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x4259d2
sub edx, edi
call fcn.00422e40
mov ebx, dword [ebp + 0xc]
lea ecx, [esi + 0x57]
mov edx, ecx
mov dword [ebx + 0x184], eax
mov dword [ebx + 0x188], str.riapvpn
lea edi, [edx + 1]
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x425a00
sub edx, edi
call fcn.00422e40
lea ecx, [esi + 0x97]
mov dword [ebx + 0x18c], eax
mov edx, ecx
mov dword [ebx + 0x190], str.riapvofn
lea esi, [edx + 1]
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x425a30
sub edx, esi
call fcn.00422e40
mov esi, dword [ebp + 0x14]
mov edi, 0x33
mov edx, dword [ebp - 8]
mov dword [ebx + 0x194], eax
xor eax, eax
mov dword [ebp - 0x10], eax
lea ebx, [edi - 0x32]
mov dword [ebp - 4], esi
test dword [edx + 1], ebx
je 0x425a88
push eax
push str.rirf_u
push esi
call fcn.00422df0
mov ecx, dword [ebp + 0xc]
inc eax
mov edx, dword [ebp - 8]
add esp, 0xc
add esi, eax
mov eax, dword [ebp - 4]
mov dword [ecx + edi*8], eax
mov eax, dword [ebp - 0x10]
mov dword [ecx + edi*8 + 4], 1
inc eax
rol ebx, 1
inc edi
mov dword [ebp - 0x10], eax
cmp eax, 0x20
jb 0x425a57
xor ebx, ebx
xor ecx, ecx
mov dword [ebp - 0xc], ecx
nop dword [eax + eax]
movzx eax, byte [edx + 0xb9]
mov dword [ebp - 4], esi
cmp ebx, eax
jae 0x425afc
push ebx
push str.riblbn_u
push esi
call fcn.00422df0
mov ecx, dword [ebp + 0xc]
inc eax
add esi, eax
add esp, 0xc
mov eax, dword [ebp - 4]
mov dword [ecx + edi*8], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
mov eax, dword [eax + 0xba]
add ecx, eax
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 4], eax
nop
mov al, byte [edx]
inc edx
test al, al
jne 0x425ae0
sub edx, dword [ebp - 4]
call fcn.00422e40
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 8]
mov dword [ecx + edi*8 + 4], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x18
inc ebx
inc edi
mov dword [ebp - 0xc], ecx
cmp ecx, 0x60
jb 0x425aa0
mov ebx, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
jmp 0x425b19
mov esi, dword [ebp + 0x14]
mov edi, 0x57
movzx eax, word [ebx + 0xc]
mov ecx, 0x3ea
mov dword [ebp - 0xc], esi
cmp cx, ax
jne 0x425b8c
mov ecx, dword [ebx + 0x93]
mov dword [ebp - 0x18], ecx
test ecx, ecx
je 0x425b8c
mov dword [edx + edi*8], str.dstbmfn
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 4], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x425b46
sub edx, dword [ebp - 4]
call fcn.00422e40
mov ecx, dword [ebp + 0xc]
mov dword [ecx + edi*8 + 4], eax
mov dword [ecx + edi*8 + 8], str.dstbpnfo
mov ecx, dword [ebp - 0x18]
add ecx, 0x20
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 4], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x425b72
sub edx, dword [ebp - 4]
call fcn.00422e40
mov edx, dword [ebp + 0xc]
mov dword [edx + edi*8 + 0xc], eax
movzx eax, word [ebx + 0xc]
mov ecx, 0x3e8
add edi, 2
cmp cx, ax
jne 0x425d4c
mov eax, dword [ebx + 0x93]
mov dword [ebp - 8], eax
test eax, eax
je 0x425d4c
mov dword [edx + edi*8], str.vbstbpname
mov ecx, dword [eax]
test ecx, ecx
je 0x425bdc
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 4], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x425bc3
sub edx, dword [ebp - 4]
call fcn.00422e40
mov edx, dword [ebp + 0xc]
mov ecx, eax
mov eax, dword [ebp - 8]
jmp 0x425bde
xor ecx, ecx
mov dword [edx + edi*8 + 4], ecx
mov dword [edx + edi*8 + 8], str.vbstbpexename
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x425c19
mov edx, ecx
lea eax, [edx + 1]
mov dword [ebp - 4], eax
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x425c00
sub edx, dword [ebp - 4]
call fcn.00422e40
mov edx, dword [ebp + 0xc]
mov ecx, eax
mov eax, dword [ebp - 8]
jmp 0x425c1b
xor ecx, ecx
mov dword [edx + edi*8 + 0xc], ecx
add edi, 2
mov dword [edx + edi*8], str.vbstbprjclsid
mov ecx, dword [eax + 8]
test ecx, ecx
je 0x425c49
push 0
mov edx, 0x10
call fcn.00422e10
mov edx, dword [ebp + 0xc]
mov ecx, eax
mov eax, dword [ebp - 8]
add esp, 4
jmp 0x425c4b
xor ecx, ecx
mov dword [edx + edi*8 + 4], ecx
mov dword [edx + edi*8 + 8], str.vbstbprjpthnfo
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x425c87
mov edx, ecx
lea eax, [edx + 2]
mov dword [ebp - 4], eax
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x425c66
sub edx, dword [ebp - 4]
sar edx, 1
push 0
add edx, edx
call fcn.00422e10
mov edx, dword [ebp + 0xc]
add esp, 4
jmp 0x425c89
xor eax, eax
mov dword [edx + edi*8 + 0xc], eax
lea ecx, [edi + 2]
mov eax, dword [ebp + 0xc]
lea ecx, [edx + ecx*8]
lea edx, [edx + edi*8]
add edx, 0x14
lea eax, [eax + edi*8]
add eax, 0x18
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x1c
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x24
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x2c
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x20
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x28
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x30
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x34
mov dword [ebp - 0x48], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x38
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x3c
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x40
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x44
mov dword [ebp - 0x50], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x48
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x4c
mov dword [ebp - 0x18], eax
lea eax, [edi + 0xa]
mov dword [ebp - 4], eax
jmp 0x425e06
lea eax, [edi + 0xc]
mov dword [ebp - 4], eax
lea ecx, [edi + 4]
mov eax, dword [ebp + 0xc]
lea ecx, [edx + ecx*8]
lea edx, [edx + edi*8]
add edx, 0x24
lea eax, [eax + edi*8]
add eax, 0x28
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x2c
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x34
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x3c
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x30
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x38
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x40
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x44
mov dword [ebp - 0x48], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x48
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x4c
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x50
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x54
mov dword [ebp - 0x50], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x58
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 0xc]
lea eax, [eax + edi*8]
add eax, 0x5c
mov dword [ebp - 0x18], eax
mov dword [ecx], str.entsecrsz
xor edi, edi
mov eax, dword [ebx + 0x4b]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x37]
mov eax, dword [eax + ecx*8 + 0x10]
mov dword [edx], eax
xor edx, edx
mov eax, dword [ebp - 0x10]
mov dword [eax], str.entsecvsz
mov eax, dword [ebx + 0x4b]
lea ecx, [eax + eax*4]
mov eax, dword [ebx + 0x37]
mov eax, dword [eax + ecx*8 + 8]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
cmp dword [ebx + 0x2b], edx
jbe 0x425e6e
mov esi, dword [ebp - 8]
xor ecx, ecx
mov eax, dword [ebx + 0x37]
mov eax, dword [ecx + eax + 0x10]
cmp edi, eax
jae 0x425e62
mov dword [esi], eax
mov edi, eax
mov eax, dword [ebx + 0x37]
mov esi, dword [ebp - 0x1c]
mov eax, dword [ecx + eax + 8]
mov dword [esi], eax
mov esi, dword [ebp - 8]
inc edx
add ecx, 0x28
cmp edx, dword [ebx + 0x2b]
jb 0x425e44
mov esi, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
mov dword [eax], str.lrgsecrsz
mov eax, dword [ebp - 0x44]
mov dword [eax], str.lrgsecvsz
mov edi, dword [ebx + 0x97]
test edi, edi
je 0x425f39
mov eax, dword [ebp - 0x28]
lea ecx, [edi + 2]
mov edx, ecx
mov dword [eax], str.dsigsname
lea eax, [edx + 1]
mov dword [ebp - 0x28], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x425ea2
sub edx, dword [ebp - 0x28]
call fcn.00422e40
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
lea ecx, [edi + 0x82]
mov eax, dword [ebp - 0x2c]
mov edx, ecx
mov dword [eax], str.dsiginame
lea eax, [edx + 1]
mov dword [ebp - 0x2c], eax
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x425ed0
sub edx, dword [ebp - 0x2c]
call fcn.00422e40
mov ecx, dword [ebp - 0x4c]
mov dword [ecx], eax
lea ecx, [edi + 0x10a]
mov eax, dword [ebp - 0x24]
mov edx, ecx
mov dword [eax], str.dsigscntry
lea eax, [edx + 1]
mov dword [ebp - 0x24], eax
nop dword [eax + eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x425f00
sub edx, dword [ebp - 0x24]
call fcn.00422e40
mov ecx, dword [ebp - 0x50]
push 0
mov dword [ecx], eax
lea ecx, [edi + 0x113]
mov eax, dword [ebp - 0x54]
mov dword [eax], str.dsigssrno
movzx edx, byte [edi + 0x112]
call fcn.00422e10
mov ecx, dword [ebp - 0x18]
add esp, 4
mov dword [ecx], eax
mov ecx, dword [ebx + 0xa9]
test ecx, ecx
je 0x425f58
mov edx, ecx
lea edi, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x425f48
sub edx, edi
call fcn.00422e40
jmp 0x425f5a
xor eax, eax
mov ecx, dword [ebp - 4]
mov edx, dword [ebp + 0xc]
mov dword [edx + ecx*8 + 4], eax
inc ecx
mov edi, dword [ebx + 0xad]
mov dword [ebp - 8], ecx
test edi, edi
je 0x425fc9
xor ebx, ebx
cmp byte [edi], 0
mov dword [ebp - 4], esi
je 0x425fba
push ebx
push str.expfname_u
push esi
call fcn.00422df0
mov ecx, dword [ebp + 0xc]
inc eax
mov edx, dword [ebp - 8]
add esp, 0xc
add esi, eax
mov eax, dword [ebp - 4]
mov dword [ecx + edx*8], eax
lea ecx, [edi + 1]
movzx edx, byte [edi]
push 0
call fcn.00422e10
mov edx, dword [ebp + 0xc]
add esp, 4
mov ecx, dword [ebp - 8]
mov dword [edx + ecx*8 + 4], eax
movzx eax, byte [edi]
inc edi
add edi, eax
inc ebx
inc ecx
mov dword [ebp - 8], ecx
cmp ebx, 6
jb 0x425f74
mov ebx, dword [ebp + 8]
jmp 0x425fcf
add ecx, 6
mov dword [ebp - 8], ecx
mov eax, dword [ebx + 0x9b]
mov dword [ebp - 4], eax
test eax, eax
je 0x4278e0
mov edi, dword [ebx + 0xa3]
xor esi, esi
shr edi, 2
test edi, edi
je 0x426434
mov edx, eax
mov eax, dword [edx + esi*4]
movzx ecx, al
cmp ecx, 6
je 0x427888
cmp ecx, 1
je 0x427888
cmp ecx, 0x13
jne 0x42601e
mov dword [ebp - 0x6c], 1
jmp 0x426425
cmp ecx, 0x10
jne 0x42602f
mov dword [ebp - 0x70], 1
jmp 0x426425
cmp ecx, 9
je 0x42787c
cmp ecx, 0x32
je 0x42787c
cmp ecx, 0x1f
jne 0x426052
mov dword [ebp - 0x7c], 1
jmp 0x426425
cmp ecx, 0x18
je 0x427870
cmp ecx, 0x19
je 0x427870
cmp ecx, 0xc
je 0x427864
cmp ecx, 0xe
je 0x427864
cmp ecx, 0x12
jne 0x42608a
mov dword [ebp - 0x84], 1
jmp 0x426425
cmp eax, 0x82a18d0a
ja 0x426d92
je 0x427855
cmp eax, 0x44d0ac0a
ja 0x426827
je 0x427855
cmp eax, 0x1bfd1307
ja 0x426374
je 0x426368
cmp eax, 0x127e4e0a
ja 0x426221
je 0x427855
cmp eax, 0x6e5610a
ja 0x42617d
je 0x427855
cmp eax, 0x4b3260a
ja 0x426139
je 0x426154
cmp eax, 0x3437307
ja 0x42611e
je 0x426343
cmp eax, 0x1e8b10a
je 0x427855
cmp eax, 0x262cc0a
je 0x426112
cmp eax, 0x262da0a
jne 0x426425
mov dword [ebp - 0x68], 1
jmp 0x426425
cmp eax, 0x3bea307
je 0x426425
cmp eax, 0x4343d0a
je 0x427855
jmp 0x426425
cmp eax, 0x5041b0a
ja 0x42616a
je 0x426154
cmp eax, 0x4b3300a
je 0x426154
cmp eax, 0x5040d0a
jne 0x426425
mov dword [ebp - 0x30], 1
mov dword [ebp - 0xa8], 1
jmp 0x426425
cmp eax, 0x50e0a0a
je 0x426112
cmp eax, 0x50e1c0a
je 0x426112
jmp 0x426425
cmp eax, 0xff79f0a
ja 0x4261d4
je 0x426112
cmp eax, 0xa71210a
ja 0x4261b9
je 0x427855
cmp eax, 0x7393c0a
je 0x427799
cmp eax, 0x7d8990a
je 0x427855
cmp eax, 0x995810a
je 0x427855
jmp 0x426425
cmp eax, 0xbfc960a
je 0x426112
cmp eax, 0xf44d60a
je 0x427855
jmp 0x426425
cmp eax, 0x1033ff0a
ja 0x4261fc
je 0x427855
cmp eax, 0x100b330a
je 0x427855
cmp eax, 0x1033e90a
je 0x427855
jmp 0x426425
cmp eax, 0x10f76d07
je 0x427830
cmp eax, 0x12200908
jne 0x426425
mov dword [ebp - 0xac], 1
jmp 0x426425
cmp eax, 0x1886a60a
ja 0x4262d0
je 0x427855
cmp eax, 0x1430330a
ja 0x42628d
je 0x426112
cmp eax, 0x1351780a
ja 0x426272
je 0x427855
cmp eax, 0x12e86e07
je 0x426d1b
cmp eax, 0x12e87807
je 0x426d1b
cmp eax, 0x1328c707
je 0x4277eb
jmp 0x426425
cmp eax, 0x13b8520a
je 0x427855
cmp eax, 0x1430250a
je 0x426112
jmp 0x426425
cmp eax, 0x166ecc0a
ja 0x4262b5
je 0x426112
cmp eax, 0x1454a70a
je 0x427855
cmp eax, 0x15f43a0a
je 0x427855
jmp 0x426425
cmp eax, 0x166eda0a
je 0x426112
cmp eax, 0x17d7b107
je 0x42704f
jmp 0x426425
cmp eax, 0x1911330a
ja 0x426320
je 0x426112
cmp eax, 0x18d7700a
ja 0x426305
je 0x427855
cmp eax, 0x18ccdd0a
je 0x427855
cmp eax, 0x18d7660a
je 0x427855
jmp 0x426425
cmp eax, 0x18e8860a
je 0x427855
cmp eax, 0x1911250a
je 0x426112
jmp 0x426425
cmp eax, 0x1ac4ad0a
ja 0x426352
je 0x427855
cmp eax, 0x19ab510a
je 0x427855
cmp eax, 0x1a062207
jne 0x426425
mov dword [ebp - 0xa0], 1
jmp 0x426425
cmp eax, 0x1ac4bb0a
je 0x427855
cmp eax, 0x1bfd0507
jne 0x426425
mov dword [ebp - 0x5c], 1
jmp 0x426425
cmp eax, 0x2e23aa0a
ja 0x4266e5
je 0x427855
cmp eax, 0x264f6b0a
ja 0x426647
je 0x427855
cmp eax, 0x20874f0a
ja 0x4263eb
je 0x426154
cmp eax, 0x1e1a8c0a
ja 0x4263d3
je 0x427855
cmp eax, 0x1c196d0a
je 0x4276c0
cmp eax, 0x1c197b0a
je 0x4276c0
cmp eax, 0x1d865d07
je 0x427830
jmp 0x426425
cmp eax, 0x1f5a490a
je 0x427855
cmp eax, 0x1ff64607
je 0x427830
jmp 0x426425
cmp eax, 0x22651b07
ja 0x426410
je 0x426368
cmp eax, 0x21300f0a
je 0x4276c0
cmp eax, 0x2130190a
je 0x4276c0
jmp 0x426425
cmp eax, 0x22f24807
je 0x42641e
cmp eax, 0x22f25e07
jne 0x426425
mov dword [ebp - 0x34], 1
inc esi
cmp esi, edi
jb 0x425ff5
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp - 8]
mov dword [edx + ecx*8], str.iaNative
mov eax, dword [ebp - 0x58]
mov dword [edx + ecx*8 + 4], eax
mov dword [edx + ecx*8 + 8], str.iaFileIO
mov eax, dword [ebp - 0x5c]
mov dword [edx + ecx*8 + 0xc], eax
mov dword [edx + ecx*8 + 0x10], str.iaFileCopy
mov eax, dword [ebp - 0x60]
mov dword [edx + ecx*8 + 0x14], eax
mov dword [edx + ecx*8 + 0x18], str.iaFileDelete
mov eax, dword [ebp - 0x64]
mov dword [edx + ecx*8 + 0x1c], eax
mov dword [edx + ecx*8 + 0x20], str.iaRegistry
mov eax, dword [ebp - 0x68]
mov dword [edx + ecx*8 + 0x24], eax
mov dword [edx + ecx*8 + 0x28], str.iaNetwork
mov eax, dword [ebp - 0x6c]
mov dword [edx + ecx*8 + 0x2c], eax
mov dword [edx + ecx*8 + 0x30], str.iaURL
mov eax, dword [ebp - 0x70]
mov dword [edx + ecx*8 + 0x34], eax
mov dword [edx + ecx*8 + 0x38], str.iaUI
mov eax, dword [ebp - 0x74]
mov dword [edx + ecx*8 + 0x3c], eax
mov dword [edx + ecx*8 + 0x40], str.iaGraphics
mov eax, dword [ebp - 0x78]
mov dword [edx + ecx*8 + 0x44], eax
mov dword [edx + ecx*8 + 0x48], str.iaNetApi
mov eax, dword [ebp - 0x7c]
mov dword [edx + ecx*8 + 0x4c], eax
mov eax, dword [ebp - 0x80]
mov dword [edx + ecx*8 + 0x54], eax
mov dword [edx + ecx*8 + 0x50], str.iaOle
mov eax, dword [ebp - 0x84]
mov dword [edx + ecx*8 + 0x5c], eax
mov eax, dword [ebp - 0x88]
mov dword [edx + ecx*8 + 0x58], str.iaPrinting
mov dword [edx + ecx*8 + 0x64], eax
mov eax, dword [ebp - 0x8c]
mov dword [edx + ecx*8 + 0x60], str.iaSecurity
mov dword [edx + ecx*8 + 0x6c], eax
mov eax, dword [ebp - 0x90]
mov dword [edx + ecx*8 + 0x68], str.iaIPC
mov dword [edx + ecx*8 + 0x74], eax
mov eax, dword [ebp - 0x94]
mov dword [edx + ecx*8 + 0x70], str.iaSynchronization
mov dword [edx + ecx*8 + 0x7c], eax
mov eax, dword [ebp - 0x98]
mov dword [edx + ecx*8 + 0x78], str.iaThreading
mov dword [edx + ecx*8 + 0x84], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + ecx*8 + 0x80], str.iaProcessCreate
mov dword [edx + ecx*8 + 0x8c], eax
mov eax, dword [ebp - 0xa0]
mov dword [edx + ecx*8 + 0x88], str.iaProcessEnum
mov dword [edx + ecx*8 + 0x94], eax
mov eax, dword [ebp - 0xa4]
mov dword [edx + ecx*8 + 0x90], str.iaRemoteThread
mov dword [edx + ecx*8 + 0x9c], eax
mov eax, dword [ebp - 0x30]
mov dword [edx + ecx*8 + 0x98], str.iaRemoteMemory
mov dword [edx + ecx*8 + 0xa4], eax
mov eax, dword [ebp - 0xa8]
mov dword [edx + ecx*8 + 0xa0], str.iaServiceRead
mov dword [edx + ecx*8 + 0xac], eax
mov eax, dword [ebp - 0xac]
mov dword [edx + ecx*8 + 0xa8], str.iaServiceWrite
mov dword [edx + ecx*8 + 0xb4], eax
mov eax, dword [ebp - 0xb0]
mov dword [edx + ecx*8 + 0xb0], str.iaWindowsHook
mov dword [edx + ecx*8 + 0xbc], eax
lea eax, [ecx + 0x18]
mov dword [edx + ecx*8 + 0xb8], str.iaDebuggerCheck
mov ecx, dword [ebp - 0x34]
mov dword [edx + eax*8 + 4], ecx
mov ecx, dword [ebp - 0x38]
mov dword [edx + eax*8], str.iaLoadLib
mov dword [edx + eax*8 + 0xc], ecx
mov ecx, dword [ebp - 0x40]
mov dword [edx + eax*8 + 8], str.iaGetProcAddr
mov dword [edx + eax*8 + 0x10], str.iaVAlloc
mov dword [edx + eax*8 + 0x14], ecx
mov ecx, dword [ebp - 0xb4]
mov dword [edx + eax*8 + 0x1c], ecx
mov ecx, dword [ebp - 0x3c]
mov dword [edx + eax*8 + 0x18], str.iaVAllocEx
mov dword [edx + eax*8 + 0x24], ecx
lea ecx, [eax + 5]
mov dword [edx + eax*8 + 0x20], str.iaVProtect
jmp 0x4278e3
cmp eax, 0x2ab2800a
ja 0x4266a2
je 0x427855
cmp eax, 0x2a47960a
ja 0x426687
je 0x426154
cmp eax, 0x290ca207
je 0x427799
cmp eax, 0x290cb407
je 0x427799
cmp eax, 0x2a47800a
je 0x426154
jmp 0x426425
cmp eax, 0x2a53e40a
je 0x426112
cmp eax, 0x2a53f20a
je 0x426112
jmp 0x426425
cmp eax, 0x2d47610a
ja 0x4266ca
je 0x426112
cmp eax, 0x2ab2960a
je 0x427855
cmp eax, 0x2d2f020a
je 0x427855
jmp 0x426425
cmp eax, 0x2d47770a
je 0x426112
cmp eax, 0x2e090d0a
je 0x427855
jmp 0x426425
cmp eax, 0x3b541a0a
ja 0x426794
je 0x426112
cmp eax, 0x39440607
ja 0x426751
je 0x426d1b
cmp eax, 0x35aa2f0a
ja 0x426736
je 0x427855
cmp eax, 0x32d11a07
je 0x426368
cmp eax, 0x34537507
je 0x426343
cmp eax, 0x3517620a
je 0x427855
jmp 0x426425
cmp eax, 0x35aa390a
je 0x427855
cmp eax, 0x38cc6f0a
je 0x427855
jmp 0x426425
cmp eax, 0x3a18310a
ja 0x426779
je 0x426112
cmp eax, 0x39441007
je 0x426d1b
cmp eax, 0x3a18270a
je 0x426112
jmp 0x426425
cmp eax, 0x3a563f0a
je 0x427855
cmp eax, 0x3b540c0a
je 0x426112
jmp 0x426425
cmp eax, 0x428df007
ja 0x4267e4
je 0x4277eb
cmp eax, 0x3fd5e10a
ja 0x4267c9
je 0x427855
cmp eax, 0x3c7b210a
je 0x426112
cmp eax, 0x3c7b370a
je 0x426112
jmp 0x426425
cmp eax, 0x3feb870a
je 0x427855
cmp eax, 0x3feb910a
je 0x427855
jmp 0x426425
cmp eax, 0x43fbc20a
ja 0x42680c
je 0x4276c0
cmp eax, 0x43c57807
je 0x4278d4
cmp eax, 0x43e69d0a
je 0x427855
jmp 0x426425
cmp eax, 0x43fbd40a
je 0x4276c0
cmp eax, 0x445c740a
je 0x426112
jmp 0x426425
cmp eax, 0x66ae8b0a
ja 0x426ae2
je 0x426112
cmp eax, 0x54038007
ja 0x426999
je 0x426d1b
cmp eax, 0x4eab090a
ja 0x4268f8
je 0x426112
cmp eax, 0x4bd87e11
ja 0x4268b5
je 0x4277eb
cmp eax, 0x46fa360a
ja 0x42689a
je 0x4276c0
cmp eax, 0x45e9000a
je 0x426112
cmp eax, 0x45e9160a
je 0x426112
cmp eax, 0x46fa200a
je 0x4276c0
jmp 0x426425
cmp eax, 0x49bafd0a
je 0x426112
cmp eax, 0x4b64110a
je 0x427855
jmp 0x426425
cmp eax, 0x4cdf760a
ja 0x4268dd
je 0x427855
cmp eax, 0x4c26600a
je 0x427855
cmp eax, 0x4cdf600a
je 0x427855
jmp 0x426425
cmp eax, 0x4d8d4907
je 0x4272d0
cmp eax, 0x4e7ad50a
je 0x4276c0
jmp 0x426425
cmp eax, 0x5145cb0a
ja 0x426956
je 0x427855
cmp eax, 0x50fee20a
ja 0x42693b
je 0x4276c0
cmp eax, 0x4eab1f0a
je 0x426112
cmp eax, 0x4f8fc307
je 0x42692f
cmp eax, 0x4f8fd507
jne 0x426425
mov dword [ebp - 0x60], 1
jmp 0x426425
cmp eax, 0x50fef40a
je 0x4276c0
cmp eax, 0x5133410a
je 0x427855
jmp 0x426425
cmp eax, 0x51b16607
ja 0x42697e
je 0x427830
cmp eax, 0x5145dd0a
je 0x427855
cmp eax, 0x514e830a
je 0x426112
jmp 0x426425
cmp eax, 0x51b17007
je 0x427830
cmp eax, 0x534d1d0a
je 0x427855
jmp 0x426425
cmp eax, 0x5e3b7b07
ja 0x426a48
je 0x427830
cmp eax, 0x5b4b860a
ja 0x426a05
je 0x4276c0
cmp eax, 0x56f8ee0a
ja 0x4269ea
je 0x426112
cmp eax, 0x54039607
je 0x426d1b
cmp eax, 0x5593920a
je 0x427855
cmp eax, 0x56275d0a
je 0x427855
jmp 0x426425
cmp eax, 0x56f8f80a
je 0x426112
cmp eax, 0x595fba0a
je 0x427855
jmp 0x426425
cmp eax, 0x5b671f0a
ja 0x426a2d
je 0x427855
cmp eax, 0x5b4b900a
je 0x4276c0
cmp eax, 0x5b67090a
je 0x427855
jmp 0x426425
cmp eax, 0x5db4010a
je 0x427855
cmp eax, 0x5e3b6d07
je 0x427830
jmp 0x426425
cmp eax, 0x60815e0a
ja 0x426a9f
je 0x426112
cmp eax, 0x606a4207
ja 0x426a84
je 0x426d1b
cmp eax, 0x5eefc50a
je 0x427855
cmp eax, 0x5f2e1707
jne 0x426425
mov dword [ebp - 0x38], 1
jmp 0x426425
cmp eax, 0x606a5407
je 0x426d1b
cmp eax, 0x6081480a
je 0x426112
jmp 0x426425
cmp eax, 0x6581780a
ja 0x426ac7
je 0x427855
cmp eax, 0x61134307
je 0x427830
cmp eax, 0x635fef0a
je 0x427855
jmp 0x426425
cmp eax, 0x65b7710a
je 0x427855
cmp eax, 0x6686520a
je 0x426112
jmp 0x426425
cmp eax, 0x77ac050a
ja 0x426c35
je 0x427855
cmp eax, 0x7092560a
ja 0x426ba2
je 0x427855
cmp eax, 0x6d157a0a
ja 0x426b5f
je 0x426154
cmp eax, 0x6937c30a
ja 0x426b44
je 0x427855
cmp eax, 0x66ae9d0a
je 0x426112
cmp eax, 0x6819650a
je 0x427855
cmp eax, 0x6854930a
je 0x427855
jmp 0x426425
cmp eax, 0x6937d50a
je 0x427855
cmp eax, 0x6d156c0a
je 0x426154
jmp 0x426425
cmp eax, 0x6f1c7d0d
ja 0x426b87
je 0x427799
cmp eax, 0x6d26830a
je 0x427855
cmp eax, 0x6f1c6b0d
je 0x427799
jmp 0x426425
cmp eax, 0x6ff82c0a
je 0x427855
cmp eax, 0x6ff83a0a
je 0x427855
jmp 0x426425
cmp eax, 0x74208007
ja 0x426bf2
je 0x42692f
cmp eax, 0x7393030a
ja 0x426bd7
je 0x426112
cmp eax, 0x71c0b30a
je 0x427855
cmp eax, 0x736f900a
je 0x427855
jmp 0x426425
cmp eax, 0x73b13d0a
je 0x426112
cmp eax, 0x73e1880a
je 0x427855
jmp 0x426425
cmp eax, 0x767d9b0a
ja 0x426c1a
je 0x427855
cmp eax, 0x74209607
je 0x42692f
cmp eax, 0x748a650a
je 0x427855
jmp 0x426425
cmp eax, 0x777dcb07
je 0x427830
cmp eax, 0x777ddd07
je 0x427830
jmp 0x426425
cmp eax, 0x7c4d5d0a
ja 0x426cef
je 0x427855
cmp eax, 0x7991aa0a
ja 0x426cac
je 0x427855
cmp eax, 0x77e63f0a
ja 0x426c86
je 0x427855
cmp eax, 0x77ac130a
je 0x427855
cmp eax, 0x77dbbb0a
je 0x426112
cmp eax, 0x77e6290a
je 0x427855
jmp 0x426425
cmp eax, 0x78acf707
je 0x426c9d
cmp eax, 0x78e70a0a
je 0x427855
jmp 0x426425
mov dword [ebp - 0xb4], 1
jmp 0x426425
cmp eax, 0x7b19e80a
ja 0x426cd4
je 0x427855
cmp eax, 0x7991bc0a
je 0x427855
cmp eax, 0x7b02260a
je 0x427855
jmp 0x426425
cmp eax, 0x7c1dae0a
je 0x426112
cmp eax, 0x7c1db80a
je 0x426112
jmp 0x426425
cmp eax, 0x7de58a0a
ja 0x426d45
je 0x427855
cmp eax, 0x7cb89b0a
ja 0x426d2a
je 0x427855
cmp eax, 0x7c9c0f07
je 0x426d1b
cmp eax, 0x7c9c1907
jne 0x426425
mov dword [ebp - 0x90], 1
jmp 0x426425
cmp eax, 0x7d10e10a
je 0x426112
cmp eax, 0x7d10f70a
je 0x426112
jmp 0x426425
cmp eax, 0x8025e50a
ja 0x426d6d
je 0x4276c0
cmp eax, 0x7de59c0a
je 0x427855
cmp eax, 0x7ff73b0a
je 0x427855
jmp 0x426425
cmp eax, 0x8025f30a
je 0x4276c0
cmp eax, 0x8180d407
jne 0x426425
mov dword [ebp - 0x94], 1
jmp 0x426425
cmp eax, 0xc8a0250a
ja 0x4272fa
je 0x427855
cmp eax, 0xab24230a
ja 0x42705b
je 0x426112
cmp eax, 0x991a120a
ja 0x426f12
je 0x427855
cmp eax, 0x9007f20a
ja 0x426e74
je 0x427855
cmp eax, 0x86c9350a
ja 0x426e31
je 0x426112
cmp eax, 0x8492fb07
ja 0x426e16
je 0x426343
cmp eax, 0x8402fb0a
je 0x4276c0
cmp eax, 0x848e280a
je 0x4276c0
cmp eax, 0x848e3e0a
je 0x4276c0
jmp 0x426425
cmp eax, 0x86a07e0a
je 0x427855
cmp eax, 0x86c9230a
je 0x426112
jmp 0x426425
cmp eax, 0x88efdb0a
ja 0x426e59
je 0x426112
cmp eax, 0x87a17f08
je 0x426212
cmp eax, 0x88efcd0a
je 0x426112
jmp 0x426425
cmp eax, 0x8b7cc90a
je 0x427855
cmp eax, 0x8b7cdf0a
je 0x427855
jmp 0x426425
cmp eax, 0x9356de0a
ja 0x426ecf
je 0x427855
cmp eax, 0x90da5e0a
ja 0x426eb4
je 0x427855
cmp eax, 0x901dc30a
je 0x427855
cmp eax, 0x9089cb08
je 0x426212
cmp eax, 0x9089dd08
je 0x426212
jmp 0x426425
cmp eax, 0x9101b507
je 0x426d83
cmp eax, 0x92b0e20a
je 0x427855
jmp 0x426425
cmp eax, 0x9524fd0a
ja 0x426ef7
je 0x426112
cmp eax, 0x940f910a
je 0x426112
cmp eax, 0x94bd4c0a
je 0x427855
jmp 0x426425
cmp eax, 0x97c17a0a
je 0x427855
cmp eax, 0x991a040a
je 0x427855
jmp 0x426425
cmp eax, 0xa370e90a
ja 0x426fc1
je 0x4276c0
cmp eax, 0xa06fe00a
ja 0x426f7e
je 0x427855
cmp eax, 0x9e3d7f0a
ja 0x426f63
je 0x427855
cmp eax, 0x9b61fa0a
je 0x4276c0
cmp eax, 0x9bb6b90a
je 0x427855
cmp eax, 0x9dbc290a
je 0x427855
jmp 0x426425
cmp eax, 0x9e661a07
je 0x427830
cmp eax, 0x9e971107
je 0x427830
jmp 0x426425
cmp eax, 0xa279680a
ja 0x426fa6
je 0x4276c0
cmp eax, 0xa06ff60a
je 0x427855
cmp eax, 0xa125950a
je 0x427855
jmp 0x426425
cmp eax, 0xa2797e0a
je 0x4276c0
cmp eax, 0xa36b970a
je 0x427855
jmp 0x426425
cmp eax, 0xa6c99c0a
ja 0x427011
je 0x4276c0
cmp eax, 0xa549d70a
ja 0x426ff6
je 0x427855
cmp eax, 0xa370ff0a
je 0x4276c0
cmp eax, 0xa4320f0a
je 0x427855
jmp 0x426425
cmp eax, 0xa629fc0a
je 0x4276c0
cmp eax, 0xa6c98a0a
je 0x4276c0
jmp 0x426425
cmp eax, 0xa8c4c40d
ja 0x427039
je 0x427799
cmp eax, 0xa799400d
je 0x427799
cmp eax, 0xa79ce10a
je 0x427855
jmp 0x426425
cmp eax, 0xa8c4d20d
je 0x427799
cmp eax, 0xa919a007
jne 0x426425
mov dword [ebp - 0x3c], 1
jmp 0x426425
cmp eax, 0xb941ae0a
ja 0x4271ae
je 0x426112
cmp eax, 0xb247920a
ja 0x42711b
je 0x426112
cmp eax, 0xad2cc90a
ja 0x4270d8
je 0x427855
cmp eax, 0xabef380a
ja 0x4270bd
je 0x427855
cmp eax, 0xab24350a
je 0x426112
cmp eax, 0xab72410a
je 0x427855
cmp eax, 0xab72570a
je 0x427855
jmp 0x426425
cmp eax, 0xac4a010a
je 0x427855
cmp eax, 0xac4a170a
je 0x427855
jmp 0x426425
cmp eax, 0xafd8c80a
ja 0x427100
je 0x427855
cmp eax, 0xad2cdf0a
je 0x427855
cmp eax, 0xae69090a
je 0x427855
jmp 0x426425
cmp eax, 0xb20d990a
je 0x427855
cmp eax, 0xb247840a
je 0x426112
jmp 0x426425
cmp eax, 0xb7448f0a
ja 0x42716b
je 0x427855
cmp eax, 0xb5b85f0a
ja 0x427150
je 0x426112
cmp eax, 0xb26a130a
je 0x427855
cmp eax, 0xb5b8490a
je 0x426112
jmp 0x426425
cmp eax, 0xb698ae0a
je 0x426112
cmp eax, 0xb698b80a
je 0x426112
jmp 0x426425
cmp eax, 0xb7fdbb0a
ja 0x427193
je 0x427855
cmp eax, 0xb744990a
je 0x427855
cmp eax, 0xb7fdad0a
je 0x427855
jmp 0x426425
cmp eax, 0xb901810a
je 0x426154
cmp eax, 0xb901970a
je 0x426154
jmp 0x426425
cmp eax, 0xc0fbca0a
ja 0x42725d
je 0x427855
cmp eax, 0xbdbbde0a
ja 0x42721a
je 0x426112
cmp eax, 0xbbc87e0a
ja 0x4271ff
je 0x426112
cmp eax, 0xb99f830a
je 0x427855
cmp eax, 0xb99f950a
je 0x427855
cmp eax, 0xbbc8680a
je 0x426112
jmp 0x426425
cmp eax, 0xbd09600a
je 0x427855
cmp eax, 0xbdbbc80a
je 0x426112
jmp 0x426425
cmp eax, 0xc01b600a
ja 0x427242
je 0x427855
cmp eax, 0xbdc03a0a
je 0x426154
cmp eax, 0xbfa3dd07
je 0x427449
jmp 0x426425
cmp eax, 0xc0c2200a
je 0x427855
cmp eax, 0xc0c2360a
je 0x427855
jmp 0x426425
cmp eax, 0xc2887d0a
ja 0x4272ad
je 0x426112
cmp eax, 0xc1c8900a
ja 0x427292
je 0x427855
cmp eax, 0xc0fbdc0a
je 0x427855
cmp eax, 0xc110760a
je 0x427855
jmp 0x426425
cmp eax, 0xc1d85a0a
je 0x427855
cmp eax, 0xc2886b0a
je 0x426112
jmp 0x426425
cmp eax, 0xc5941a0a
ja 0x4272df
je 0x427855
cmp eax, 0xc4146a07
je 0x4277eb
cmp eax, 0xc4612307
jne 0x426425
mov dword [ebp - 0xa4], 1
jmp 0x426425
cmp eax, 0xc6986c07
je 0x427799
cmp eax, 0xc6987a07
je 0x427799
jmp 0x426425
cmp eax, 0xe9852807
ja 0x4275b5
je 0x426d1b
cmp eax, 0xdb0e5308
ja 0x427473
je 0x426212
cmp eax, 0xd0b29307
ja 0x4273cb
je 0x426d1b
cmp eax, 0xced60a0a
ja 0x427388
je 0x426112
cmp eax, 0xccd4e10a
ja 0x42736d
je 0x427855
cmp eax, 0xc8a0330a
je 0x427855
cmp eax, 0xcc3cee0a
je 0x427855
cmp eax, 0xcc3cf80a
je 0x427855
jmp 0x426425
cmp eax, 0xce10260a
je 0x427855
cmp eax, 0xce10300a
je 0x427855
jmp 0x426425
cmp eax, 0xcfeab80a
ja 0x4273b0
je 0x4276c0
cmp eax, 0xced61c0a
je 0x426112
cmp eax, 0xcfeaae0a
je 0x4276c0
jmp 0x426425
cmp eax, 0xd0126e0a
je 0x426112
cmp eax, 0xd0b28507
je 0x426d1b
jmp 0x426425
cmp eax, 0xd5c5c508
ja 0x427426
je 0x426212
cmp eax, 0xd35aed0a
ja 0x42740b
je 0x427855
cmp eax, 0xd221cd0a
je 0x427855
cmp eax, 0xd2870607
je 0x42641e
cmp eax, 0xd2871007
jne 0x426425
jmp 0x42641e
cmp eax, 0xd3f6b507
je 0x4277eb
cmp eax, 0xd4e4cc07
je 0x427830
jmp 0x426425
cmp eax, 0xd6f0c00d
ja 0x427458
je 0x427799
cmp eax, 0xd5c5d308
je 0x426212
cmp eax, 0xd6178107
jne 0x426425
mov dword [ebp - 0xb0], 1
jmp 0x426425
cmp eax, 0xd6f0d60d
je 0x427799
cmp eax, 0xd89f870a
je 0x427855
jmp 0x426425
cmp eax, 0xe074e20a
ja 0x427522
je 0x427855
cmp eax, 0xddfbcc0a
ja 0x4274df
je 0x426112
cmp eax, 0xdd91eb0a
ja 0x4274c4
je 0x4276c0
cmp eax, 0xdc1b0e0a
je 0x427855
cmp eax, 0xdd38240d
je 0x427799
cmp eax, 0xdd38320d
je 0x427799
jmp 0x426425
cmp eax, 0xdd91fd0a
je 0x4276c0
cmp eax, 0xddad3e0a
je 0x427855
jmp 0x426425
cmp eax, 0xdf735707
ja 0x427507
je 0x426d1b
cmp eax, 0xdf12ad0a
je 0x427855
cmp eax, 0xdf734107
je 0x426d1b
jmp 0x426425
cmp eax, 0xdf877c0a
je 0x4276c0
cmp eax, 0xdfd35807
je 0x427799
jmp 0x426425
cmp eax, 0xe2736a0a
ja 0x427572
je 0x427855
cmp eax, 0xe0fa800a
ja 0x427557
je 0x427855
cmp eax, 0xe074f40a
je 0x427855
cmp eax, 0xe0f8a00a
je 0x427855
jmp 0x426425
cmp eax, 0xe20bae0a
je 0x426112
cmp eax, 0xe20bb80a
je 0x426112
jmp 0x426425
cmp eax, 0xe75cb20a
ja 0x42759a
je 0x427855
cmp eax, 0xe2737c0a
je 0x427855
cmp eax, 0xe3d8c80a
je 0x427855
jmp 0x426425
cmp eax, 0xe8fa0807
je 0x426d1b
cmp eax, 0xe8fa1e07
je 0x426d1b
jmp 0x426425
cmp eax, 0xf591230a
ja 0x427712
je 0x426112
cmp eax, 0xee0e7c0a
ja 0x427675
je 0x427855
cmp eax, 0xebff200a
ja 0x427632
je 0x427855
cmp eax, 0xeb71c80a
ja 0x427617
je 0x427799
cmp eax, 0xe9853e07
je 0x426d1b
cmp eax, 0xea5a5c0a
je 0x427855
cmp eax, 0xea60240d
je 0x427799
jmp 0x426425
cmp eax, 0xeb71de07
je 0x427799
cmp eax, 0xeb71de0a
je 0x427799
jmp 0x426425
cmp eax, 0xec94560a
ja 0x42765a
je 0x426112
cmp eax, 0xebff360a
je 0x427855
cmp eax, 0xec94400a
je 0x426112
jmp 0x426425
cmp eax, 0xecaeae0a
je 0x426112
cmp eax, 0xecaeb80a
je 0x426112
jmp 0x426425
cmp eax, 0xf1a9df0a
ja 0x4276cc
je 0x427855
cmp eax, 0xefe00407
ja 0x4276aa
je 0x426d1b
cmp eax, 0xee66830a
je 0x427855
cmp eax, 0xee66950a
je 0x427855
jmp 0x426425
cmp eax, 0xefe01207
je 0x426d1b
cmp eax, 0xf07beb0a
jne 0x426425
mov dword [ebp - 0x30], 1
jmp 0x426425
cmp eax, 0xf3a53e07
ja 0x4276f7
je 0x4276eb
cmp eax, 0xf310900a
je 0x427855
cmp eax, 0xf3a52807
jne 0x426425
mov dword [ebp - 0x64], 1
jmp 0x426425
cmp eax, 0xf42f650a
je 0x426112
cmp eax, 0xf42f730a
je 0x426112
jmp 0x426425
cmp eax, 0xfc8d750a
ja 0x4277c3
je 0x426112
cmp eax, 0xf8ccd107
ja 0x427776
je 0x426d1b
cmp eax, 0xf786a90a
ja 0x42775b
je 0x427855
cmp eax, 0xf591350a
je 0x426112
cmp eax, 0xf59f240d
je 0x427799
cmp eax, 0xf59f320d
je 0x427799
jmp 0x426425
cmp eax, 0xf786bf0a
je 0x427855
cmp eax, 0xf8ccc707
je 0x426d1b
jmp 0x426425
cmp eax, 0xfaa6ae0a
ja 0x4277a8
je 0x427855
cmp eax, 0xf9477e0a
je 0x427855
cmp eax, 0xf9bc320a
jne 0x426425
mov dword [ebp - 0x98], 1
jmp 0x426425
cmp eax, 0xfb22370a
je 0x427855
cmp eax, 0xfc8d630a
je 0x426112
jmp 0x426425
cmp eax, 0xfea34c0a
ja 0x42780d
je 0x426112
cmp eax, 0xfe36000a
ja 0x4277fa
je 0x427855
cmp eax, 0xfd49f40a
je 0x427855
cmp eax, 0xfd81eb07
jne 0x426425
mov dword [ebp - 0x9c], 1
jmp 0x426425
cmp eax, 0xfe4d800a
je 0x427855
cmp eax, 0xfe4d960a
je 0x427855
jmp 0x426425
cmp eax, 0xff856a07
ja 0x42783f
je 0x426d1b
cmp eax, 0xfea35a0a
je 0x426112
cmp eax, 0xff372407
jne 0x426425
mov dword [ebp - 0x8c], 1
jmp 0x426425
cmp eax, 0xff857c07
je 0x426d1b
cmp eax, 0xff8d920a
jne 0x426425
mov dword [ebp - 0x88], 1
jmp 0x426425
mov dword [ebp - 0x74], 1
jmp 0x426425
mov dword [ebp - 0x80], 1
jmp 0x426425
mov dword [ebp - 0x78], 1
jmp 0x426425
mov dword [ebp - 0x58], 1
cmp eax, 0x8176ea06
ja 0x4278be
je 0x426a78
cmp eax, 0x43c5706
je 0x426a78
cmp eax, 0x6afc6006
jne 0x426425
mov dword [ebp - 0x3c], 1
jmp 0x426425
cmp eax, 0x93642506
je 0x42641e
cmp eax, 0xd22d7006
jne 0x426425
mov dword [ebp - 0x40], 1
jmp 0x426425
add ecx, 0x1e
mov eax, dword [ebp + 0x10]
mov dword [eax], ecx
push dword [ebp - 0xbc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0xb8]
call fcn.004c4990
add esp, 4
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret