Function at 0x434f28
Capabilities:
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0xb8
push ebx
push esi
xor ebx, ebx
cmp dword [ebp + 0x74], ebx
mov esi, ecx
push edi
mov dword [ebp + 0x64], esi
jne 0x434f48
mov eax, dword [esi + 0x28]
mov dword [ebp + 0x74], eax
call fcn.004425a1
lea ecx, [ebp + 0x70]
call fcn.0040fb41
test byte [esi + 0xc], 1
je 0x434f67
cmp dword [0x4e2e74], ebx
mov byte [ebp + 0x4f], 1
jg 0x434f6b
mov byte [ebp + 0x4f], 0
mov edi, dword [ebp + 0x70]
cmp word [edi], 0x40
jne 0x434f7d
inc edi
inc edi
mov dword [ebp + 0x70], edi
mov byte [ebp + 0x4f], 0
mov dword [ebp + 0x60], 0x80004001
cmp word [edi], bx
je 0x435ebf
and dword [ebp + 0x34], 0
and dword [ebp + 0x50], 0
xor bl, bl
cmp word [edi], 0x2d
mov byte [ebp + 0x5f], 0
je 0x435191
cmp byte [ebp + 0x4f], 0
je 0x435004
test byte [esi + 0xc], 2
je 0x434fbe
push edi
lea ecx, [ebp + 0x34]
call fcn.0045066c
mov eax, dword [eax]
jmp 0x434fd1
push 1
push 0
lea eax, [ebp + 0x34]
push eax
push edi
mov ecx, esi
call fcn.0045937c
mov eax, dword [ebp + 0x34]
test bl, bl
mov dword [ebp + 0x50], eax
jne 0x434ffa
test byte [esi + 0xc], 0x14
je 0x434ffa
xor edi, edi
push edi
push dword [ebp + 0x7c]
mov ecx, esi
push 0x11
push edi
push eax
call fcn.0041b6b8
test byte [esi + 0xc], 0x10
jne 0x435004
mov dword [ebp + 0x50], edi
jmp 0x435004
test byte [esi + 0xc], 8
jne 0x435004
mov byte [ebp + 0x5f], 2
xor edi, edi
test bl, bl
mov dword [ebp + 0x48], edi
jne 0x4351ac
lea ecx, [ebp + 0x70]
mov byte [ebp + 0x43], 0xa
call fcn.0040fb41
lea ecx, [ebp + 0x3c]
call fcn.0044658e
mov edi, dword [ebp + 0x70]
mov dword [ebp + 0x38], 0x7d
xor eax, eax
jmp 0x435036
inc edi
inc edi
inc eax
cmp word [edi], 0x5e
je 0x435033
dec eax
test ax, ax
jl 0x435072
inc eax
movsx esi, ax
mov ecx, dword [ebp + 0x64]
and dword [ebp + 0x70], 0
push 1
push 0
lea eax, [ebp + 0x70]
push eax
push edi
call fcn.0045937c
mov eax, dword [ebp + 0x48]
mov edi, dword [ebp + 0x70]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x70], eax
call fcn.0043fe25
dec esi
jne 0x435046
lea eax, [ebp + 0x58]
push eax
xor esi, esi
mov dword [ebp + 0x58], edi
call fcn.00405c44
mov eax, dword [ebp + 0x58]
sub eax, edi
sar eax, 1
dec eax
pop ecx
mov ecx, edi
js 0x4351eb
inc eax
cmp word [ecx], 0x25
jne 0x435099
inc esi
inc ecx
inc ecx
dec eax
jne 0x435092
cmp si, 2
jl 0x4351eb
lea eax, [ebp + 0x58]
push eax
mov dword [ebp + 0x58], edi
call fcn.00405c44
mov esi, dword [ebp + 0x58]
pop ecx
push esi
lea ecx, [ebp + 0x54]
call fcn.004505eb
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp + 0x64]
mov ebx, eax
xor eax, eax
push 1
mov dword [ebp + 0x44], eax
push eax
mov word [esi], ax
lea eax, [ebp + 0x44]
push eax
push edi
call fcn.0045937c
mov eax, dword [ebp + 0x44]
mov dword [ebp + 0x70], eax
movzx eax, word [eax]
jmp 0x435101
cmp ax, 0x40
jne 0x435108
add dword [ebp + 0x70], 2
mov eax, dword [ebp + 0x70]
mov ax, word [eax]
mov byte [ebp + 0x4f], 0
test ax, ax
jne 0x4350ed
jmp 0x43510e
cmp word [edi], 0x2d
je 0x43516e
push dword [ebp + 0x70]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
lea eax, [esi + ebx + 3]
push eax
lea ecx, [ebp + 0x48]
call fcn.004465d3
mov edi, dword [ebp + 0x48]
push esi
push dword [ebp + 0x70]
push edi
call fcn.00405c0c
mov eax, dword [ebp + 0x48]
inc ebx
push ebx
push dword [ebp + 0x54]
lea eax, [eax + esi*2]
push eax
call fcn.00405c0c
mov eax, dword [ebp + 0x48]
add esp, 0x18
cmp word [eax], 0x5e
lea ecx, [ebp + 0x44]
jne 0x4351de
dec byte [ebp + 0x43]
js 0x4351ca
call fcn.0043fe25
lea ecx, [ebp + 0x54]
call fcn.0043fe25
jmp 0x43502f
lea ecx, [ebp + 0x44]
call fcn.0043fe25
lea ecx, [ebp + 0x54]
call fcn.0043fe25
lea ecx, [ebp + 0x3c]
call fcn.0043fe25
lea ecx, [ebp + 0x48]
call fcn.0043fe25
mov esi, dword [ebp + 0x64]
mov bl, byte [edi]
inc edi
inc edi
cmp word [edi], 0x20
mov dword [ebp + 0x70], edi
jne 0x434fa5
inc edi
inc edi
mov dword [ebp + 0x70], edi
jmp 0x434fa5
cmp dword [ebp + 0x50], edi
je 0x4351c2
push edi
push dword [ebp + 0x7c]
mov ecx, esi
push 0x21
push edi
push dword [ebp + 0x50]
call fcn.0041b6b8
mov dword [ebp + 0x60], edi
jmp 0x4369bc
mov dword [ebp + 0x60], 0x80070057
call fcn.0043fe25
lea ecx, [ebp + 0x54]
jmp 0x4365b3
call fcn.0043fe25
lea ecx, [ebp + 0x54]
call fcn.0043fe25
mov ax, word [edi]
cmp ax, 0x28
jne 0x4351fe
push 0x29
pop esi
mov word [edi], 0x7b
jmp 0x435207
cmp ax, 0x7b
jne 0x435240
mov esi, dword [ebp + 0x38]
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [edi + eax*2 - 2]
cmp si, word [eax]
jne 0x43521b
and word [eax], 0
mov eax, dword [ebp + 0x48]
mov ecx, dword [ebp + 0x64]
and dword [ebp + 0x48], 0
push 1
mov dword [ebp + 0x70], eax
push 0
lea eax, [ebp + 0x48]
push eax
push edi
call fcn.00457f62
lea ecx, [ebp + 0x70]
call fcn.0043fe25
jmp 0x43524e
cmp dword [ebp + 0x48], edi
je 0x43524e
push edi
lea ecx, [ebp + 0x48]
call fcn.004506c8
mov eax, dword [ebp + 0x48]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x70], eax
call fcn.0040fb41
mov esi, dword [ebp + 0x70]
mov ax, word [esi]
cmp ax, 0x23
je 0x435ea7
test ax, ax
je 0x435ea7
cmp ax, 0x7b
je 0x4369dc
cmp ax, 0x5b
jne 0x435290
cmp word [esi + 2], 0x5d
je 0x4369dc
cmp ax, 0x46
mov edi, esi
mov dword [ebp + 0x58], edi
mov ebx, esi
jne 0x4352b9
cmp word [esi + 2], 0x49
jne 0x4352b9
cmp word [esi + 4], 0x4e
jne 0x4352b9
cmp word [esi + 6], 0x44
jne 0x4352b9
cmp word [esi + 8], 0x20
je 0x4352cd
mov ecx, dword [ebp + 0x64]
push 1
push 0
lea eax, [ebp + 0x3c]
push eax
push esi
call fcn.0045937c
mov ebx, dword [ebp + 0x3c]
mov ax, word [esi]
and dword [ebp + 0x54], 0
push 0x22
pop ecx
cmp ax, cx
push 0x7c
mov dword [ebp + 0x44], ecx
pop edx
je 0x4352ea
cmp ax, dx
mov dword [ebp + 0x44], edx
jne 0x435343
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov cx, word [ebp + 0x44]
cmp word [esi], cx
lea eax, [esi + eax*2 - 2]
jne 0x435315
mov ecx, dword [ebp + 0x44]
cmp word [eax], cx
jne 0x435315
inc edi
inc edi
dec eax
dec eax
inc dword [ebp + 0x54]
cmp word [edi], cx
mov dword [ebp + 0x58], edi
je 0x435301
and word [eax + 2], 0
cmp dword [ebp + 0x54], 0
jle 0x43532f
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
sub eax, dword [ebp + 0x54]
and word [ebx + eax*2], 0
lea ecx, [ebp + 0x58]
call fcn.0040fb41
mov edi, dword [ebp + 0x58]
mov eax, edi
sub eax, esi
sar eax, 1
lea ebx, [ebx + eax*2]
lea esi, [ebp + 0x54]
mov dword [ebp + 0x54], edi
call fcn.00413632
mov eax, dword [ebp + 0x54]
sub eax, edi
sar eax, 1
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x54], ebx
call fcn.00413632
mov esi, dword [ebp + 0x54]
mov eax, esi
sub eax, ebx
sar eax, 1
push edi
mov dword [ebp + 0x38], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], esi
call fcn.0040fb41
mov esi, dword [ebp + 0x44]
xor eax, eax
cmp esi, 3
mov dword [ebp + 0x2c], eax
jl 0x43544e
cmp esi, 0x7f
jg 0x43544e
xor ecx, ecx
mov cx, word [edi]
push ecx
call fcn.00414e71
add esp, 4
test al, al
mov al, cl
je 0x4353b0
and al, 0xdf
jmp 0x4353b7
cmp cx, 0xff
ja 0x4353bc
lea ecx, [ebp + 0x2d]
jmp 0x4353c6
mov esi, dword [ebp + 0x44]
mov byte [ebp + 0x2d], ch
lea ecx, [ebp + 0x2e]
inc esi
xor edx, edx
mov dx, word [edi + 2]
mov byte [ebp + 0x2c], al
push edx
call fcn.00414e71
add esp, 4
test al, al
mov al, dl
je 0x4353e5
and al, 0xdf
mov byte [ecx], al
inc ecx
jmp 0x4353f3
mov byte [ecx], al
inc ecx
cmp dx, 0xff
jbe 0x4353f3
mov byte [ecx], dh
inc ecx
inc esi
xor edx, edx
mov dx, word [edi + 4]
push edx
call fcn.00414e71
add esp, 4
test al, al
mov al, dl
je 0x43540f
and al, 0xdf
mov byte [ecx], al
inc ecx
jmp 0x43541d
mov byte [ecx], al
inc ecx
cmp dx, 0xff
jbe 0x43541d
mov byte [ecx], dh
inc ecx
inc esi
cmp dword [ebp + 0x44], 4
jl 0x43544b
xor edx, edx
mov dx, word [edi + 6]
push edx
call fcn.00414e71
add esp, 4
test al, al
mov al, dl
je 0x43543e
and al, 0xdf
mov byte [ecx], al
jmp 0x43544b
cmp dx, 0xff
mov byte [ecx], al
jbe 0x43544b
mov byte [ecx + 1], dh
inc esi
mov eax, dword [ebp + 0x2c]
mov edx, dword [ebp + 0x44]
shl esi, 8
or esi, edx
cmp esi, 0x303
jne 0x4354ba
cmp eax, 0x444553
je 0x4354a4
cmp eax, 0x524944
je 0x435491
cmp eax, 0x544553
jne 0x4367bc
push dword [ebp + 0x74]
add edi, 6
push edi
push 1
add ebx, 6
mov ecx, dword [ebp + 0x64]
push ebx
call fcn.00421302
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
push 0
add edi, 6
push edi
call fcn.0047c631
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x74]
add edi, 6
push edi
call fcn.00461e38
jmp 0x435e7a
cmp esi, 0x606
jne 0x435513
cmp eax, 0x45524854
jne 0x4367bc
push 6
push edi
push 0x4ccde8
call fcn.00441277
add esp, 0xc
test al, al
je 0x4367bc
cmp byte [ebp + 0x5f], 0
je 0x4354ff
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b6b8
add edi, 0xc
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push edi
call fcn.00488084
jmp 0x435e7a
cmp esi, 0x404
jne 0x4367bc
mov ecx, 0x4d455449
cmp eax, ecx
ja 0x435d61
je 0x435d40
mov ecx, 0x455a4953
cmp eax, ecx
ja 0x435994
je 0x435980
mov ecx, 0x45444948
cmp eax, ecx
ja 0x4357ae
je 0x435797
mov ecx, 0x44494c53
cmp eax, ecx
ja 0x4356ae
je 0x435697
cmp eax, 0x43454a45
je 0x435686
cmp eax, 0x43455845
je 0x43566d
cmp eax, 0x434c4143
je 0x43565a
cmp eax, 0x4350544e
je 0x435649
cmp eax, 0x44414552
je 0x43560c
cmp eax, 0x44414f4c
je 0x4355c7
cmp eax, 0x44415049
jne 0x4367bc
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045eab3
jmp 0x435e7a
cmp byte [ebp + 0x5f], 0
je 0x4355e1
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b6b8
add edi, 8
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x74], edi
call fcn.0040fb41
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
call fcn.004236b4
mov ecx, dword [ebp + 0x64]
push 1
mov dword [ebp + 0x60], eax
call fcn.00470bd7
jmp 0x43694b
push 4
push ebx
push str.READ
call fcn.00441277
add esp, 0xc
test al, al
je 0x435908
cmp dword [ebp + 0x38], 4
je 0x435635
cmp word [ebx + 8], 0x2d
jne 0x435908
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.0047260f
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.00452875
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
push 0
add edi, 8
push edi
call fcn.0049253e
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
xor eax, eax
push eax
push eax
push eax
push eax
add edi, 8
push edi
push ecx
push eax
call fcn.0040a949
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.00459abe
jmp 0x435e7a
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00482d15
jmp 0x435e7a
cmp eax, 0x444d4152
je 0x435787
cmp eax, 0x444e4152
je 0x435773
cmp eax, 0x444e4553
je 0x435766
cmp eax, 0x444e4946
je 0x43572b
cmp eax, 0x44524854
je 0x435709
cmp eax, 0x4542414c
jne 0x4367bc
cmp dword [ebp + 0x74], 0
je 0x435908
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0048d30f
jmp 0x435e7a
cmp byte [ebp + 0x5f], 0
je 0x435723
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b6b8
add edi, 8
jmp 0x435502
cmp byte [ebp + 0x5f], 0
je 0x435745
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b6b8
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x7c]
add edi, 8
cmp word [edi], 0x7c
jne 0x435761
push 0
push edi
call fcn.00426640
jmp 0x435e7a
push dword [ebp + 0x78]
jmp 0x435756
push dword [ebp + 0x58]
call fcn.0042aa6e
jmp 0x4360fa
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.00476b90
jmp 0x435e7a
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x64]
call fcn.00419e9b
jmp 0x435e7a
push 1
push str.Hide
push dword [ebp + 0x58]
call fcn.00413154
add esp, 0xc
jmp 0x435e7a
mov ecx, 0x454d4f43
cmp eax, ecx
ja 0x43585a
je 0x4358ac
cmp eax, 0x45444f43
je 0x435847
cmp eax, 0x45455254
je 0x435833
cmp eax, 0x45474150
je 0x435826
cmp eax, 0x454c4946
je 0x435814
cmp eax, 0x454d414e
je 0x435c6c
cmp eax, 0x454d4954
jne 0x4367bc
cmp dword [ebp + 0x74], 0
je 0x435908
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0048d7bf
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x58]
call fcn.0042a3d4
jmp 0x435e7a
push dword [ebp + 0x58]
call fcn.0041f71d
jmp 0x4360fa
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.0049199a
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
push 0
add edi, 8
push edi
call fcn.00484953
jmp 0x435e7a
cmp eax, 0x454d4f48
je 0x43596f
cmp eax, 0x45534142
je 0x43595e
cmp eax, 0x45544144
je 0x43594a
cmp eax, 0x45544953
je 0x435936
cmp eax, 0x45544f4e
je 0x4358ac
cmp eax, 0x45564948
jne 0x4367bc
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0046df50
jmp 0x435e7a
add ebx, 8
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x74], ebx
call fcn.0040fb41
mov esi, dword [ebp + 0x74]
mov ax, word [esi]
cmp ax, 0x31
jb 0x4358cc
cmp ax, 0x39
jbe 0x4358e0
mov edi, dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
push 2
push 0x4ccdd8
push esi
call edi
test eax, eax
jne 0x4358e9
mov byte [0x4e12d0], 1
jmp 0x435904
cmp word [esi], 0x30
je 0x4358fd
push 3
push 0x4ccdd0
push esi
call edi
test eax, eax
jne 0x435904
mov byte [0x4e12d0], 0
and dword [ebp + 0x60], 0
mov eax, dword [ebp + 0x60]
test eax, eax
je 0x435917
mov ecx, dword [ebp + 0x64]
mov ecx, dword [ecx + 0x30]
mov dword [ecx], eax
xor edi, edi
cmp eax, edi
jge 0x436953
push eax
lea eax, [ebp - 0x50]
push str.0x_p
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
jmp 0x43695f
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.00495046
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.004762e5
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.004923ac
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.0047bf36
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0044cb2f
jmp 0x435e7a
mov ecx, 0x4b4d554e
cmp eax, ecx
ja 0x435b6a
je 0x435b5d
mov ecx, 0x49474552
cmp eax, ecx
ja 0x435ab0
je 0x435a9d
cmp eax, 0x46544547
je 0x435a89
cmp eax, 0x46545550
je 0x435a75
cmp eax, 0x46574246
je 0x435a65
cmp eax, 0x47414d49
je 0x435a48
cmp eax, 0x48534148
je 0x435a35
cmp eax, 0x48544150
je 0x435a25
cmp eax, 0x49444152
jne 0x4367bc
cmp dword [ebp + 0x74], 0
je 0x435908
cmp edx, 4
jne 0x435908
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.004825c3
jmp 0x435e7a
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x64]
call fcn.0042d517
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
push 0
add ebx, 8
push ebx
call fcn.00493554
jmp 0x435e7a
cmp edx, 4
jne 0x435908
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.00491d54
jmp 0x435e7a
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x64]
call fcn.004175a5
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.00477f83
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.00476c39
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
push 0
add edi, 8
push edi
call fcn.00463863
jmp 0x435e7a
sub eax, 0x49564544
je 0x435b4d
sub eax, 0x901
je 0x435b3c
sub eax, 0xec070e
je 0x435b28
sub eax, 0x100f9f9
je 0x435b15
sub eax, 7
je 0x435b01
sub eax, 0x1f8f0
jne 0x4367bc
cmp dword [ebp + 0x74], 0
je 0x435908
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00482319
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0049b97a
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
push 0
add ebx, 8
push ebx
call fcn.0047a23c
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.004550b1
jmp 0x435e7a
push dword [ebp + 0x74]
add edi, 8
push edi
push 0
add ebx, 8
jmp 0x435483
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x64]
call fcn.00431adf
jmp 0x435e7a
push dword [ebp + 0x58]
call fcn.00412980
jmp 0x4360fa
mov ecx, 0x4c4c4143
cmp eax, ecx
ja 0x435c3a
je 0x435c19
cmp eax, 0x4b4e494c
je 0x435c08
cmp eax, 0x4b4e4c46
je 0x435bf4
cmp eax, 0x4b534944
je 0x435be3
cmp eax, 0x4b544f48
je 0x435bd0
cmp eax, 0x4c424154
je 0x435bbc
cmp eax, 0x4c454853
jne 0x4367bc
push dword [ebp + 0x58]
call fcn.00430d0b
jmp 0x4360fa
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.00496dd9
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
push 0
add edi, 8
push edi
call fcn.0041999c
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0049b164
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.0046d67f
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.00417f7a
jmp 0x435e7a
mov eax, dword [ebp + 0x58]
cmp word [eax], 0x24
jne 0x43691f
push edi
push 0
add eax, 2
push eax
push dword [ebp + 0x64]
call fcn.0042de53
jmp 0x435e7a
cmp eax, 0x4c4c4157
je 0x435d33
cmp eax, 0x4c4c494b
je 0x435cbc
cmp eax, 0x4c525453
je 0x435ca8
cmp eax, 0x4c534441
je 0x435c94
cmp eax, 0x4d414554
je 0x435c80
cmp eax, 0x4d414e46
jne 0x4367bc
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0046d597
jmp 0x435e7a
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.0041b2ce
jmp 0x436948
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0046faf5
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0047442d
jmp 0x435e7a
xor ebx, ebx
add edi, 8
inc ebx
cmp word [edi], 0x2a
jne 0x435cdb
inc edi
inc edi
cmp word [edi], 0x2a
jne 0x435cdb
push 2
pop ebx
add edi, ebx
cmp word [edi], 0x2a
je 0x435cd3
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], edi
call fcn.0040fb41
mov edi, dword [ebp + 0x58]
mov ax, word [edi]
cmp ax, 0x5c
je 0x435d21
cmp ax, 0x40
je 0x435d21
mov esi, 0x4ccdc8
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push edi
push esi
call fcn.00441220
add esp, 0xc
test al, al
jne 0x435d21
mov ecx, dword [ebp + 0x64]
push edi
call fcn.0042ac73
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
push ebx
push dword [ebp + 0x74]
push edi
call fcn.0045d8ca
jmp 0x435e7a
push dword [ebp + 0x58]
call fcn.00419e3c
jmp 0x4360fa
cmp dword [ebp + 0x74], 0
je 0x435908
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0049149a
jmp 0x435e7a
mov ecx, 0x534f504c
cmp eax, ecx
ja 0x436184
je 0x43616e
mov ecx, 0x504f4f4c
cmp eax, ecx
ja 0x435ffa
je 0x435fc6
mov ecx, 0x4e574f44
cmp eax, ecx
ja 0x435efd
je 0x435ef0
cmp eax, 0x4d495444
je 0x435edc
cmp eax, 0x4d524f46
je 0x435ecb
cmp eax, 0x4e49414d
je 0x435e2b
cmp eax, 0x4e495053
je 0x435e17
cmp eax, 0x4e495753
je 0x435dfc
cmp eax, 0x4e524353
je 0x435deb
cmp eax, 0x4e554f4d
jne 0x4367bc
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.0049d460
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0046e2e6
jmp 0x435e7a
cmp dword [ebp + 0x74], 0
je 0x435908
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.004829fa
jmp 0x435e7a
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0048e1a4
jmp 0x435e7a
cmp byte [ebp + 0x5f], 0
je 0x435e45
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b6b8
mov edi, dword [ebp + 0x58]
jmp 0x435e60
push 3
push edi
push 0x4c78c4
call fcn.00441220
add esp, 0xc
test al, al
jne 0x435e6c
inc edi
inc edi
cmp word [edi], 0x2a
je 0x435e4a
cmp word [edi], 0
jne 0x435e82
add ebx, 8
push ebx
mov ecx, 0x4e3110
call fcn.00430fac
mov dword [ebp + 0x60], eax
jmp 0x435908
mov esi, 0x4e2c8c
push 0x4ccdb8
mov ecx, esi
call fcn.004506c8
push ebx
mov ecx, esi
call fcn.004465fa
mov eax, dword [ebp + 0x64]
mov word [eax + 0x88], 2
lea ecx, [ebp + 0x3c]
call fcn.0043fe25
lea ecx, [ebp + 0x48]
call fcn.0043fe25
lea ecx, [ebp + 0x34]
call fcn.0043fe25
xor eax, eax
pop edi
pop esi
pop ebx
add ebp, 0x68
leave
ret 0x10
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0046be03
jmp 0x435e7a
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045e8b5
jmp 0x435e7a
push dword [ebp + 0x58]
call fcn.0042b499
jmp 0x4360fa
cmp eax, 0x4f474f4c
je 0x435fb8
cmp eax, 0x4f4d454d
je 0x435f97
cmp eax, 0x50494350
je 0x435f83
cmp eax, 0x504c4548
je 0x435f55
cmp eax, 0x504d4554
je 0x435f41
cmp eax, 0x504e5055
jne 0x4367bc
add ebx, 8
push ebx
call fcn.0045a142
jmp 0x4360fa
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.00470c48
jmp 0x435e7a
push 5
push 0x12e
push dword [0x4e2c88]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x435ea7
mov ecx, dword [ebp + 0x64]
push 0
add ebx, 8
push ebx
call fcn.0042d58e
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.00486a4d
jmp 0x435e7a
cmp dword [ebp + 0x74], 0
je 0x435908
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045e087
jmp 0x435e7a
add ebx, 8
push ebx
call fcn.0042d140
jmp 0x4360fa
cmp byte [ebp + 0x5f], 0
je 0x435fe0
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b6b8
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x78]
add edi, 8
push dword [ebp + 0x74]
push edi
call fcn.00426487
jmp 0x435e7a
mov ecx, 0x5254534c
cmp eax, ecx
ja 0x4360c5
je 0x4360b1
sub eax, 0x50534944
je 0x4360a1
sub eax, 0x1edf90c
je 0x436083
sub eax, 3
je 0x43606d
sub eax, 0x41102
je 0x43605f
sub eax, 0x3f0f1
je 0x43604b
sub eax, 7
jne 0x4367bc
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x64]
call fcn.0041c796
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0046c335
jmp 0x435e7a
add edi, 8
push edi
call fcn.00412ae6
jmp 0x4360fa
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00482f6e
jmp 0x435e7a
cmp dword [ebp + 0x74], 0
je 0x435908
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0048289e
jmp 0x435e7a
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x64]
call fcn.00428092
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.004745fa
jmp 0x435e7a
sub eax, 0x5254534d
je 0x43615a
sub eax, 5
je 0x436146
dec eax
je 0x436142
sub eax, 0xedee01
je 0x436124
sub eax, 0x50df8
je 0x436100
sub eax, 0x70606
jne 0x4367bc
add edi, 8
push edi
call fcn.00412ad8
pop ecx
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
xor eax, eax
cmp dword [ebp + 0x50], eax
sete al
add ebx, 8
or eax, dword [ebp + 0x7c]
push eax
push ebx
call fcn.0041b9fa
and dword [ebp + 0x50], 0
mov dword [ebp + 0x60], eax
jmp 0x435908
cmp dword [ebp + 0x74], 0
je 0x435908
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0048dbf7
jmp 0x435e7a
push 1
jmp 0x436170
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.00474748
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.00475936
jmp 0x435e7a
push 0
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.00474ada
jmp 0x435e7a
mov ecx, 0x5453494c
cmp eax, ecx
ja 0x4365fb
je 0x4365d1
mov ecx, 0x54494e49
cmp eax, ecx
ja 0x43626d
je 0x43625d
cmp eax, 0x534f5052
je 0x436249
cmp eax, 0x53504954
je 0x436235
cmp eax, 0x53504d43
je 0x436221
cmp eax, 0x5353454d
je 0x43620d
cmp eax, 0x54494157
je 0x4361fd
cmp eax, 0x54494445
jne 0x4367bc
cmp dword [ebp + 0x74], 0
je 0x435908
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0045dbed
jmp 0x435e7a
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x64]
call fcn.0042c40d
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.0048f803
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0046286d
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.0048e3da
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.0047527f
jmp 0x435e7a
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x64]
call fcn.00421617
jmp 0x435e7a
cmp eax, 0x54495257
je 0x4365bd
cmp eax, 0x54495845
je 0x4362eb
cmp eax, 0x544d4644
je 0x4362d7
cmp eax, 0x544e4950
je 0x4362c3
cmp eax, 0x544e4f46
je 0x4362b3
cmp eax, 0x54524150
jne 0x4367bc
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.004667d2
jmp 0x435e7a
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x64]
call fcn.00422189
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.0046ebca
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.004572fa
jmp 0x435e7a
lea ecx, [ebx + 8]
mov dx, word [ecx]
cmp dx, 0x3d
jne 0x43637f
xor esi, esi
add ebx, 0xa
lea ecx, [ebp + 0x74]
mov dword [ebp + 0x60], esi
mov dword [ebp + 0x70], esi
mov dword [ebp + 0x74], ebx
call fcn.0040fb41
push dword [ebp + 0x74]
push 0x4ccdb0
call fcn.004412b6
test al, al
pop ecx
pop ecx
je 0x43632e
mov ecx, dword [ebp + 0x64]
mov eax, dword [ecx + 0x30]
mov eax, dword [eax]
jmp 0x436365
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x74]
push eax
call fcn.00453e89
test eax, eax
pop ecx
pop ecx
jg 0x43635f
mov eax, dword [ebp + 0x74]
cmp word [eax], si
je 0x43635f
mov ecx, dword [ebp + 0x64]
push esi
push 0xffffffffffffffff
push esi
push eax
call fcn.00411019
cmp eax, esi
je 0x43635f
mov eax, dword [eax + 4]
jmp 0x436362
mov eax, dword [ebp + 0x70]
mov ecx, dword [ebp + 0x64]
mov edx, dword [ecx + 0x30]
mov dword [edx], eax
mov dword [ecx + 0x8c], eax
mov dword [ebp + 0x60], eax
mov byte [ecx + 0x8a], 1
jmp 0x435917
mov eax, edx
call fcn.004b1b03
test al, al
jne 0x436393
test dx, dx
jne 0x435908
mov dword [ebp + 0x78], ecx
lea ecx, [ebp + 0x78]
call fcn.0040fb41
mov edi, dword [ebp + 0x64]
mov eax, dword [edi + 0x8c]
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x54], eax
xor ebx, ebx
call fcn.0044658e
push 0x2c
lea eax, [ebp + 0x70]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.004494ac
mov eax, dword [ebp + 0x78]
add esp, 0xc
cmp word [eax], 0x2c
jne 0x4363e4
add dword [ebp + 0x78], 2
lea eax, [ebp + 0x54]
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.00453e89
pop ecx
pop ecx
mov ebx, eax
mov eax, dword [ebp + 0x70]
cmp word [eax], 0
jne 0x4363f4
push 0x40
jmp 0x43654c
push eax
push 0x4ccda8
call fcn.004412b6
test al, al
pop ecx
pop ecx
je 0x43640d
xor esi, esi
inc esi
jmp 0x43654d
push dword [ebp + 0x70]
push 0x4cbcf4
call fcn.004412b6
test al, al
pop ecx
pop ecx
jne 0x436405
push dword [ebp + 0x70]
push 0x4ccda0
call fcn.004412b6
test al, al
pop ecx
pop ecx
jne 0x436446
push dword [ebp + 0x70]
push 0x4ca844
call fcn.004412b6
test al, al
pop ecx
pop ecx
je 0x43644d
push 2
jmp 0x43654c
push dword [ebp + 0x70]
push str.FORX
call fcn.004412b6
test al, al
pop ecx
pop ecx
jne 0x436473
push dword [ebp + 0x70]
push 0x4ccd94
call fcn.004412b6
test al, al
pop ecx
pop ecx
je 0x43647a
push 4
jmp 0x43654c
push dword [ebp + 0x70]
push 0x4ccd8c
call fcn.004412b6
test al, al
pop ecx
pop ecx
jne 0x4364a0
push dword [ebp + 0x70]
push 0x4ccd88
call fcn.004412b6
test al, al
pop ecx
pop ecx
je 0x4364a7
push 8
jmp 0x43654c
push dword [ebp + 0x70]
push 0x4c8014
call fcn.004412b6
test al, al
pop ecx
pop ecx
jne 0x4364cd
push dword [ebp + 0x70]
push 0x4ccd80
call fcn.004412b6
test al, al
pop ecx
pop ecx
je 0x4364d1
push 0x10
jmp 0x43654c
push dword [ebp + 0x70]
push str.ToWIN
call fcn.004412b6
test al, al
pop ecx
pop ecx
je 0x4364eb
mov esi, 0x80
jmp 0x43654d
push dword [ebp + 0x70]
push 0x4ccd74
call fcn.004412b6
test al, al
pop ecx
pop ecx
je 0x43651d
push 1
push dword [ebp + 0x74]
mov esi, 0x80
or word [edi + 0x88], si
push 0x4c7828
mov ecx, edi
call fcn.0045d8ca
jmp 0x43654d
push dword [ebp + 0x70]
push 0x4ccd68
call fcn.004412b6
test al, al
pop ecx
pop ecx
je 0x436537
mov esi, 0x100
jmp 0x43654d
push dword [ebp + 0x70]
push str.BREAK
call fcn.004412b6
test al, al
pop ecx
pop ecx
je 0x4365b0
push 0x20
pop esi
or word [edi + 0x88], si
xor esi, esi
cmp ebx, esi
jle 0x436572
mov eax, dword [edi + 0x30]
mov ecx, dword [ebp + 0x54]
mov dword [eax], ecx
mov eax, dword [ebp + 0x54]
mov dword [edi + 0x8c], eax
mov byte [edi + 0x8a], 1
cmp byte [ebp + 0x5f], 0
je 0x436589
push esi
push dword [ebp + 0x7c]
mov ecx, edi
push 0x11
push esi
push dword [ebp + 0x50]
call fcn.0041b6b8
lea ecx, [ebp + 0x70]
call fcn.0043fe25
lea ecx, [ebp + 0x3c]
call fcn.0043fe25
lea ecx, [ebp + 0x48]
call fcn.0043fe25
lea ecx, [ebp + 0x34]
call fcn.0043fe25
mov eax, esi
jmp 0x435ec1
lea ecx, [ebp + 0x70]
call fcn.0043fe25
jmp 0x435908
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.004735d9
jmp 0x435e7a
cmp dword [ebp + 0x74], 0
je 0x435908
cmp edx, 4
jne 0x435908
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0048dd6a
jmp 0x435e7a
mov ecx, 0x56524553
cmp eax, ecx
ja 0x4366c5
je 0x4366b5
sub eax, 0x54554853
je 0x4366a8
sub eax, 0x2fcf3
je 0x436694
sub eax, 0xe
je 0x436683
sub eax, 0xf5fff9
je 0x436672
sub eax, 0x10cfa
je 0x436652
sub eax, 0x102f1ff
jne 0x4367bc
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0046c764
jmp 0x435e7a
cmp dword [ebp + 0x74], 0
je 0x435908
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x74]
add ebx, 8
push ebx
call fcn.0048d98f
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.0047c1db
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
add edi, 8
push edi
call fcn.0042d865
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.0046d4ad
jmp 0x435e7a
push dword [ebp + 0x58]
call fcn.0042b61d
jmp 0x4360fa
push dword [ebp + 0x58]
mov ecx, dword [ebp + 0x64]
call fcn.00416c21
jmp 0x435e7a
cmp eax, 0x574f4853
je 0x4367a8
cmp eax, 0x574f5242
je 0x436792
cmp eax, 0x58454649
je 0x436757
cmp eax, 0x58524f46
je 0x436723
cmp eax, 0x59434552
je 0x436712
cmp eax, 0x59454b48
jne 0x4367bc
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.0048e066
jmp 0x435e7a
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.00459d89
jmp 0x435e7a
cmp byte [ebp + 0x5f], 0
je 0x43673d
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b6b8
push dword [ebp + 0x7c]
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x78]
add edi, 8
push dword [ebp + 0x74]
push edi
call fcn.00483970
jmp 0x435e7a
cmp byte [ebp + 0x5f], 0
je 0x436771
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x7c]
push 0x11
push 0
push dword [ebp + 0x50]
call fcn.0041b6b8
mov ecx, dword [ebp + 0x64]
push dword [ebp + 0x7c]
add edi, 8
cmp word [edi], 0x7c
jne 0x43678d
push 0
push edi
call fcn.0042662a
jmp 0x435e7a
push dword [ebp + 0x78]
jmp 0x436782
mov ecx, dword [ebp + 0x64]
push 0
push dword [ebp + 0x74]
add edi, 8
push edi
call fcn.00463093
jmp 0x435e7a
push dword [ebp + 0x74]
mov ecx, dword [ebp + 0x64]
add ebx, 8
push ebx
call fcn.004990d2
jmp 0x435e7a
xor esi, esi
mov dword [ebp + 0x60], esi
mov ax, word [ebx]
cmp ax, 0x24
mov dword [ebp + 0x58], ebx
jne 0x4367e0
push esi
push esi
add ebx, 2
push ebx
push dword [ebp + 0x64]
call fcn.0042de53
jmp 0x435908
cmp ax, si
je 0x435908
push 0x40
pop ecx
cmp ax, cx
mov dword [ebp + 0x54], esi
mov dword [ebp + 0x78], esi
jne 0x436800
add ebx, 2
mov dword [ebp + 0x54], ecx
mov dword [ebp + 0x58], ebx
mov ecx, dword [ebp + 0x58]
xor eax, eax
mov ax, word [ecx]
cmp ax, 0x2a
je 0x43681a
cmp ax, 0x2d
je 0x43681a
cmp ax, 0x2b
jne 0x43681d
mov dword [ebp + 0x78], eax
mov ebx, dword [ebp + 0x64]
mov eax, dword [ebx + 0x1c]
mov dword [ebp + 0x30], eax
lea eax, [ebp + 0x30]
push eax
lea eax, [ebp + 0x38]
push eax
push ecx
mov ecx, ebx
mov dword [ebp + 0x38], esi
call fcn.004226eb
mov eax, dword [ebp + 0x78]
or eax, dword [ebp + 0x54]
test ax, ax
jne 0x436924
cmp dword [ebp + 0x38], esi
jge 0x436924
push dword [ebp + 0x44]
lea ecx, [ebp + 0x78]
push edi
call fcn.00450608
mov eax, dword [ebp + 0x44]
cmp eax, esi
jle 0x436883
lea ecx, [ebp + 0x60]
push ecx
lea eax, [edi + eax*2]
push eax
push dword [ebp + 0x78]
push dword [ebp + 0x74]
push ebx
call fcn.0040f6a6
add esp, 0x14
test al, al
jne 0x436917
push 1
push esi
lea eax, [ebp + 0x3c]
push eax
push dword [ebp + 0x70]
mov ecx, ebx
call fcn.0045937c
mov eax, dword [ebp + 0x3c]
lea ecx, [ebp + 0x58]
mov dword [ebp + 0x58], eax
call fcn.0040fb41
mov edi, dword [ebp + 0x58]
push esi
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x54]
push eax
mov dword [ebp + 0x54], edi
mov dword [ebp + 0x38], esi
call fcn.0041a9b6
add esp, 0xc
push dword [ebp + 0x38]
lea ecx, [ebp + 0x70]
push dword [ebp + 0x54]
call fcn.00450608
lea eax, [ebp + 0x70]
push eax
mov word [ebp + 0x76], si
call fcn.00410428
cmp eax, 1
pop ecx
mov ecx, ebx
jne 0x4368fa
push edi
call fcn.004236b4
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x60], eax
call fcn.0043fe25
lea ecx, [ebp + 0x78]
call fcn.0043fe25
jmp 0x43694b
push esi
push esi
push esi
push 1
lea eax, [ebp + 0x76]
push eax
push ebx
push dword [ebp + 0x3c]
call fcn.0040a949
lea ecx, [ebp + 0x70]
mov dword [ebp + 0x60], eax
call fcn.0043fe25
lea ecx, [ebp + 0x78]
jmp 0x4365b3
mov ebx, dword [ebp + 0x64]
xor esi, esi
cmp byte [ebp + 0x5f], 0
je 0x43693b
push esi
push dword [ebp + 0x7c]
mov ecx, ebx
push 0x11
push esi
push dword [ebp + 0x50]
call fcn.0041b6b8
push dword [ebp + 0x74]
mov ecx, ebx
push dword [ebp + 0x58]
call fcn.00430f63
mov dword [ebp + 0x60], eax
mov eax, dword [ebp + 0x60]
jmp 0x435917
cdq
push edx
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.004a129d
mov esi, dword [ebp + 0x64]
add esp, 0xc
test byte [esi + 9], 0xf
jne 0x43697b
lea eax, [ebp - 0x50]
push eax
push 0x4ca8e8
mov ecx, esi
call fcn.00445c44
lea eax, [ebp - 0x50]
push eax
push 0x4ca8e4
mov ecx, esi
call fcn.00445c44
cmp dword [0x4e2e74], edi
mov byte [0x4e2fb4], 1
jle 0x4369b1
cmp dword [ebp + 0x50], edi
je 0x4369b1
push edi
push dword [ebp + 0x7c]
mov ecx, esi
push edi
push dword [ebp + 0x60]
push dword [ebp + 0x50]
call fcn.0041b6b8
lea ecx, [ebp + 0x3c]
call fcn.0043fe25
mov esi, dword [ebp + 0x64]
test byte [esi + 0xd], 1
je 0x4369d4
push dword [ebp + 0x34]
call fcn.0043fdd1
push dword [ebp + 0x48]
call fcn.0043fdd1
pop ecx
pop ecx
mov esi, dword [ebp + 0x60]
jmp 0x436599
mov edi, dword [ebp + 0x64]
movzx eax, word [edi + 0x2c]
push 0
push eax
push esi
call fcn.00412ffc
add esp, 0xc
or esi, 1
push esi
mov ecx, edi
call fcn.004890d6
mov esi, eax
jmp 0x436591