Function at 0x431f63
Capabilities:
Check os version
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x258
push ebx
push esi
push edi
push 3
pop esi
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x19c]
push esi
mov byte [ebp - 0x31], dl
call fcn.00431bf0
xor edi, edi
lea ecx, [ebp - 0x16c]
inc edi
push edi
call fcn.00431bf0
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x431fa9
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x19c]
mov dword [ecx + edx*4], edi
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x431f9a
mov dword [ebp - 8], eax
jmp 0x431fc4
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x118], 0x5252cb13
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x431fb3
mov dword [ebp - 8], eax
jmp 0x431fe2
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x16c]
mov dword [ecx + edx*4], 0xf985589b
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x431fcf
push 2
pop ecx
mov dword [ebp - 0x118], eax
push 0xffffffffffffffff
pop edx
cmp dword [ebp - 0x118], ecx
jg 0x432095
mov dword [ebp - 8], 0x2263
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 8], edx
mov dword [ebp - 8], eax
cmp dword [ebp - 8], ecx
jg 0x432080
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], eax
jl 0x432075
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x16c]
sub edx, 0xa7b7
neg edx
sbb edx, edx
inc edx
mov dword [ecx], edx
mov ecx, dword [ebp - 8]
mov esi, dword [ebp - 8]
imul edx, dword [ebp - 8], 6
sub edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x19c]
neg edx
sbb edx, edx
xor ebx, ebx
inc edx
cmp dword [ecx + esi*4], edx
mov ecx, dword [ebp - 0x18]
sete bl
xor edx, edx
cmp ebx, ecx
setne dl
mov dword [ebp - 0x20], edx
dec dword [ebp - 0x18]
jns 0x432027
push 2
pop ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jle 0x432018
or edx, 0xffffffff
inc dword [ebp - 0x118]
cmp dword [ebp - 0x118], ecx
jle 0x431fff
push 3
pop esi
lea ecx, [ebp - 0x16c]
call fcn.00431cc2
lea ecx, [ebp - 0x19c]
call fcn.00431cc2
mov dword [ebp - 0x1c], 0xe17c
xor eax, eax
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x24], 0x6173948b
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x2c], 0x22e974a5
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x4320e2
push eax
push eax
call dword [sym.imp.GDI32.dll_CopyEnhMetaFileA]
xor eax, eax
mov edx, dword [ebp - 0x3c]
xor ebx, ebx
mov ecx, dword [ebp - 0x3c]
cmp edx, ecx
setg bl
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x20]
cmp dword [ebp - 0x24], ecx
jg 0x4320fd
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
or edx, 0xffffffff
xor ebx, ebx
cmp ecx, edx
mov ecx, dword [ebp - 0x1c]
setge bl
xor edx, edx
cmp ecx, ebx
setl dl
inc edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x14], 0x469ad59e
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0xc], eax
jmp 0x432144
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0xa4], 0xfffffffa
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x432133
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [ebp - 0x14], eax
je 0x432181
dec dword [ebp - 0x68]
mov ecx, dword [ebp - 0x68]
je 0x432181
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x4322bd
push 0x267e
push 0x1de7
call ebx
push eax
call dword [sym.imp.USER32.dll_CheckDlgButton]
jmp 0x4322bb
push esi
lea ecx, [ebp - 0xe4]
call fcn.00431bf0
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x4321a3
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xe4]
mov dword [ecx + edx*4], edi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x432194
mov dword [ebp - 0x14], eax
jmp 0x4322a7
mov dword [ebp - 8], 0xfffffff6
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 8], eax
cmp dword [ebp - 8], eax
jg 0x432269
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0x18], eax
jmp 0x43222f
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp + ecx*4 - 0x68]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x6c]
sub edx, ecx
mov ecx, dword [ebp - 0xe4]
mov dword [ecx], edx
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp + ecx*4 - 0xa4]
lea ecx, [edx - 0x4d0e834a]
xor edx, edx
cmp ecx, 0x62a7
setne dl
sub edx, esi
je 0x432214
mov ecx, edi
cmp dword [ebp - 0x60], eax
jne 0x432216
mov ecx, eax
mov dword [ebp - 0x1c], ecx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x43222c
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x4321d6
cmp dword [ebp - 0x14], eax
jne 0x432245
mov ecx, dword [ebp - 0xe4]
mov esi, eax
cmp dword [ecx], eax
jne 0x432247
mov esi, edi
mov ecx, dword [ebp - 0x68]
xor edx, edx
cmp ecx, esi
setl dl
mov dword [ebp - 0x1c], edx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], eax
jle 0x4321ca
push 3
pop esi
mov dword [ebp - 8], eax
jmp 0x43229f
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x432283
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x43229c
push eax
push 0x19b
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
xor eax, eax
inc dword [ebp - 8]
cmp dword [ebp - 8], eax
jle 0x43226e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jle 0x4321b0
lea ecx, [ebp - 0xe4]
call fcn.00431cc2
xor eax, eax
dec dword [ebp - 0x3c]
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], eax
jmp 0x4322d5
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0xd8], edi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x4322c8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], esi
jg 0x4323ae
push esi
lea ecx, [ebp - 0x190]
call fcn.00431bf0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0xc], 0
jmp 0x432312
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x190]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x432303
mov eax, dword [ebp - 0x190]
xor edx, edx
mov dword [eax + 4], 0xb792
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + eax*4 - 0xd8]
mov eax, dword [ebp - 0xd0]
cmp eax, ecx
mov eax, dword [ebp - 8]
setg dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xd8]
cmp edx, eax
setg cl
cmp edi, ecx
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 4
mov eax, dword [ebp - 8]
setne cl
xor ebx, ebx
mov eax, dword [ebp + eax*4 - 0xd8]
cmp ecx, eax
mov eax, dword [ebp - 8]
setle bl
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0xd8]
imul eax, dword [ebp - 8], 0xb792
cmp ecx, eax
mov eax, dword [ebp - 0xd8]
setl dl
xor ecx, ecx
sub edx, ebx
cmp edx, eax
setle cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x190]
call fcn.00431cc2
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jle 0x4322e7
xor eax, eax
mov esi, dword [0x4a65ec]
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0xc], edi
or ebx, 0xffffffff
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x30], 0x5799333c
mov dword [ebp - 0x28], 0xe495761b
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], 0x7bdd4840
push edi
mov dword [ebp - 0x3c], esi
call fcn.00431bf0
push 2
lea ecx, [ebp - 0x154]
call fcn.00431bf0
xor eax, eax
mov dword [ebp - 0x14], 0x77fc
mov dword [ebp - 8], eax
jmp 0x43241b
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1ec]
mov dword [ecx + edx*4], ebx
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x43240c
mov dword [ebp - 8], eax
jmp 0x432438
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x154]
mov dword [ecx + edx*4], 0x4eb0
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x432425
mov dword [ebp - 0xc], 0xffffffe7
cmp dword [ebp - 0xc], 0xffffffe2
je 0x432528
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x4ffd8143
mov dword [ebp - 0x28], 0x61e33ecd
mov dword [ebp - 0x1c], 0xdad4f6c5
mov dword [ebp - 8], eax
jmp 0x43248b
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0xb0], 0xfffffff7
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x43247a
mov dword [ebp - 8], eax
jmp 0x4324a6
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0xa8], 0x57f3
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x432495
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
inc dword [ebp - 0x1c]
cmp edx, ecx
jne 0x4324bd
cmp dword [ebp - 0x2c], eax
je 0x4324c0
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0xa8]
mov edx, 0xfffa
mov ecx, dword [ebp - 0x24]
neg esi
push 0xffffffffffffffff
sbb esi, esi
inc esi
cmp edx, ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, esi
mov ecx, dword [ebp - 0x154]
setne dl
xor ebx, ebx
cmp edx, edi
setle bl
xor edx, edx
cmp ebx, dword [ecx]
mov ecx, dword [ebp - 0x14]
setge dl
xor ebx, ebx
add ecx, edx
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x30]
cmp edx, ecx
setl bl
mov dword [ebp - 0x2c], ebx
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 0x2c], ecx
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffe2
pop ebx
jne 0x43244f
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x154]
call fcn.00431cc2
lea ecx, [ebp - 0x1ec]
call fcn.00431cc2
mov ebx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x1c], 0x256915a
mov dword [ebp - 0xc], eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], eax
jmp 0x43256b
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x238], 0xfffffffe
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x43255a
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], eax
jl 0x43258e
mov dword [ebp - 0x20], 0xfffffffa
cmp dword [ebp - 0x20], eax
jne 0x43258e
dec dword [ebp - 0x1c]
jns 0x43257d
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x4325c0
push 0xc97
push 0x1bbf
push 0xb4
push 0x139b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_ExcludeClipRect]
xor ebx, ebx
inc ebx
cmp byte [ebp - 0x31], 0
je 0x43287f
cmp esi, ebx
jne 0x43287f
push ebx
lea ecx, [ebp - 0x78]
call fcn.00431bf0
mov dword [ebp - 0xc], 0x2e755073
xor eax, eax
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x24], 0x8d6db9
mov dword [ebp - 8], eax
jmp 0x432608
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x50], 0xfffffff9
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x4325fa
mov dword [ebp - 8], eax
jmp 0x432623
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x78]
mov dword [ecx + edx*4], 0xfffffffa
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x432613
mov ecx, dword [ebp - 0x78]
mov dword [ecx], ebx
mov ecx, dword [ecx]
xor edx, edx
mov dword [ebp - 0x1c], 0xc60e
mov dword [ebp - 0x20], 6
mov ecx, dword [ebp + ecx*4 - 0x50]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
mov ecx, dword [ebp + ecx*4 - 0x50]
mov ecx, dword [ebp - 0x1c]
cmp ecx, 0xb2fc257a
setne dl
cmp ebx, edx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
mov ecx, dword [ebp + ecx*4 - 0x50]
cmp ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x78]
jg 0x432684
mov edx, eax
cmp dword [ecx], eax
je 0x432686
mov edx, ebx
dec dword [ecx]
mov dword [ebp - 0x20], edx
jns 0x43262d
mov eax, dword [ebp - 0xc]
xor ecx, ecx
cmp eax, 0x10b8a
setle cl
sub ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x30]
setne dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
imul ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x78]
mov esi, dword [eax]
mov eax, dword [ebp - 0x30]
imul ecx, ecx, 0x4e81
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
xor ebx, ebx
imul edx, esi
cmp esi, edx
setne bl
xor ecx, ecx
cmp ebx, eax
setle cl
xor edx, edx
cmp ecx, 0x328db1ae
lea ecx, [ebp - 0x78]
setge dl
xor eax, eax
cmp edx, 0xfffffffc
setl al
mov dword [ebp - 0xc], eax
call fcn.00431cc2
mov dword [ebp - 8], 0xfffffff6
xor edx, edx
mov dword [ebp - 0x14], 0xfffb
mov dword [ebp - 0xc], 0x8f87662b
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp ecx, eax
mov ebx, dword [ebp + 8]
setg dl
sub edx, 0xc4365dea
neg edx
mov dword [ebx + 8], 4
sbb edx, edx
xor eax, eax
inc edx
sub edx, dword [ebp - 8]
cmp edx, 0xffff
setne al
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
xor eax, eax
cmp dword [ebp - 8], 3
jne 0x432856
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], 8
mov dword [ebp - 8], 0xffffffe2
jmp 0x4327c0
mov dword [ebp - 0x20], 0x8b874bdb
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x4327ba
push 0x1b47
push 0x1469
push 0xaab
call dword [sym.imp.KERNEL32.dll_HeapCreate]
xor eax, eax
mov ecx, dword [ebp - 0x20]
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x35
jg 0x432793
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xf
je 0x432875
xor edx, edx
inc edx
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2c]
neg ecx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0xc], 0xe
jmp 0x432845
mov dword [ebp - 0x18], eax
jmp 0x432809
mov ecx, dword [ebp - 0x18]
mov dword [ebp + ecx*4 - 0x1e0], 0x50eb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x4327f8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], eax
jg 0x432842
mov dword [ebp - 0x24], 0x4929
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x432834
push 0xcc2
push eax
call dword [sym.imp.USER32.dll_CharUpperBuffW]
xor eax, eax
inc dword [ebp - 0x24]
inc dword [ebp - 8]
cmp dword [ebp - 8], eax
jle 0x432816
xor edx, edx
inc edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x11
jg 0x4327f3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xf
jne 0x4327d6
jmp 0x432875
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x432875
push eax
push 0x440
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
mov dword [ebx + 0xc], 0x4a65ec
xor ebx, ebx
inc ebx
push 2
lea ecx, [ebp - 0x148]
call fcn.00431bf0
xor eax, eax
mov dword [ebp - 0x28], 0xace4b0ad
mov dword [ebp - 8], eax
jmp 0x4328ad
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x148]
mov dword [ecx + edx*4], 3
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x43289a
mov dword [ebp - 8], eax
jmp 0x4328c9
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x254], 0xe34aafbe
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x4328b8
mov ecx, dword [ebp - 0x148]
mov dword [ecx + 4], eax
lea ecx, [ebp - 0x148]
call fcn.00431cc2
mov esi, dword [ebp - 0x38]
cmp esi, dword [ebp - 0x3c]
jge 0x43345d
push dword [ebp + 8]
movdqa xmm0, xmmword [0xa98390]
lea ecx, [ebp - 0x200]
push ecx
xor eax, eax
lea ecx, [ebp - 0x210]
push ecx
push eax
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x108], eax
movdqu xmmword [ebp - 0x210], xmm0
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x100], eax
call fcn.00431d33
mov dword [ebp - 0xc], 0xfffffffe
mov dword [ebp - 0xc], 0
jmp 0x432953
mov byte [ebp - 0xd], 0
cmp byte [ebp - 0xd], 0
je 0x432950
call dword [sym.imp.KERNEL32.dll_GetLastError]
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jle 0x432940
lea ecx, [ebp - 0x108]
call fcn.00431cc2
xor eax, eax
mov dword [ebp - 8], ebx
mov edi, 0x4a65f0
mov dword [ebp - 0xc], eax
jmp 0x432980
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0xc8], ebx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x432973
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jg 0x432a62
push 3
lea ecx, [ebp - 0x184]
call fcn.00431bf0
push 3
mov dword [ebp - 0x20], 0
mov dword [ebp - 0xc], 0
pop edx
jmp 0x4329c2
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x184]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x4329b3
mov eax, dword [ebp - 0x184]
xor edx, edx
mov dword [eax + 4], 0xb792
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + eax*4 - 0xc8]
mov eax, dword [ebp - 0xc0]
cmp eax, ecx
mov eax, dword [ebp - 8]
setg dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xc8]
cmp edx, eax
setg cl
cmp ebx, ecx
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 4
mov eax, dword [ebp - 8]
setne cl
xor ebx, ebx
mov eax, dword [ebp + eax*4 - 0xc8]
cmp ecx, eax
mov eax, dword [ebp - 8]
setle bl
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0xc8]
imul eax, dword [ebp - 8], 0xb792
cmp ecx, eax
mov eax, dword [ebp - 0xc8]
setl dl
xor ecx, ecx
sub edx, ebx
cmp edx, eax
setle cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x184]
call fcn.00431cc2
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
push 1
pop ebx
jle 0x432993
xor eax, eax
test esi, esi
jle 0x432e90
push 2
lea ecx, [ebp - 0xfc]
call fcn.00431bf0
mov dword [ebp - 0x1c], 0x8cf5a8b0
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 0x24], 0xfffffff6
or eax, 0xffffffff
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x28], 0xb2f67ab6
mov dword [ebp - 0x28], 0x2c005d9c
push 3
call fcn.00431bf0
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x432ac0
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0xfc]
mov dword [ecx + edx*4], 0x39e3cf95
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x432aad
mov dword [ebp - 8], eax
jmp 0x432ade
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1d4]
mov dword [ecx + edx*4], 0xcd17cd95
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x432acb
mov dword [ebp - 8], eax
jmp 0x432af3
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x54], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x432ae9
mov esi, dword [ebp - 0xfc]
mov edx, dword [esi + 4]
test edx, edx
jne 0x432b36
mov dword [ebp - 0x1c], 0xe2bfbd3a
mov ecx, dword [ebp - 0x1c]
mov edx, dword [esi + 4]
test edx, edx
jne 0x432b22
mov ecx, dword [ebp - 0xfc]
cmp dword [ecx], eax
mov ecx, eax
je 0x432b24
mov ecx, ebx
add ecx, edx
neg ecx
je 0x432b2d
mov ecx, dword [ebp - 0x1c]
mov edx, dword [esi + 4]
test edx, edx
jne 0x432b36
mov ebx, eax
xor ecx, ecx
cmp ebx, edx
setge cl
cmp ecx, edx
jl 0x432b4d
cmp dword [ebp - 0x1c], eax
jne 0x432b4d
xor ebx, ebx
mov ecx, eax
inc ebx
jmp 0x432b52
xor ebx, ebx
inc ebx
mov ecx, ebx
xor edx, edx
cmp ecx, dword [esi + 4]
setle dl
xor ecx, ecx
cmp edx, 0xe871d976
setne cl
or edx, 0xffffffff
cmp ecx, edx
jle 0x432b71
cmp dword [esi + 4], eax
je 0x432b73
mov eax, ebx
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x1d4]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x54]
call fcn.00431cc2
lea ecx, [ebp - 0xfc]
call fcn.00431cc2
push dword [ebp + 8]
mov eax, dword [edi]
lea ecx, [ebp - 0x1f0]
push ecx
lea ecx, [ebp - 0x200]
mov dword [ebp - 0x2c], eax
xor eax, eax
xorps xmm0, xmm0
push ecx
push eax
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
movdqu xmmword [ebp - 0x200], xmm0
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
call fcn.00431d33
mov eax, dword [ebp - 0xa0]
lea ecx, [ebp - 0xa0]
and dword [eax], 0
call fcn.00431cc2
mov dword [ebp - 8], 0xc5b1510a
mov dword [ebp - 0x28], 0x9220c436
push 5
pop eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], eax
xor eax, eax
mov dword [ebp - 0x20], 0x687c4177
mov dword [ebp - 0x28], 0x74d4
mov dword [ebp - 0xc], eax
jmp 0x432c39
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x21c], 0xd6158f87
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x432c28
mov ecx, dword [ebp - 8]
or edx, 0xffffffff
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
imul ecx, dword [ebp - 8]
cmp edx, ecx
mov ecx, dword [ebp - 8]
sbb edx, edx
xor ebx, ebx
neg edx
add edx, ecx
mov dword [ebp - 0x1b8], edx
mov ecx, dword [ebp - 8]
cmp edx, ecx
setne bl
add ebx, 0x1665
sub ebx, dword [ebp - 0x20]
mov esi, dword [edi + 4]
neg ebx
sbb ebx, ebx
inc ebx
mov dword [ebp - 0x21c], ebx
xor ebx, ebx
mov dword [ebp - 8], 0xe1c97412
inc ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0x1054d814
mov dword [ebp - 0x1c], 0xfad0d727
mov dword [ebp - 8], 0x5faafe30
cmp dword [ebp - 8], eax
je 0x432cd3
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp - 8]
mov ecx, ebx
jmp 0x432cd5
mov ecx, eax
imul ecx, ecx, 0x99da
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x432d1b
push 0x64b
push 0xd07
push 0x1d17
push 0x2283
push eax
call dword [sym.imp.USER32.dll_SetRect]
xor eax, eax
or edx, 0xffffffff
add edi, 8
push 0xffffffffffffffe6
pop ecx
mov dword [ebp - 0xc], edx
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], ecx
je 0x432d5a
mov dword [ebp - 0x20], 0xd05b
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x432d48
push eax
call dword [sym.imp.USER32.dll_SetKeyboardState]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x20], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffe6
jne 0x432d2f
or edx, 0xffffffff
test esi, esi
jne 0x432d61
add edi, 8
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x14], 7
push 2
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
pop esi
jmp 0x432d84
mov ecx, dword [ebp - 0x14]
mov dword [ebp + ecx*4 - 0x44], 0x60cbeb96
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x432d76
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], 8
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0xc], eax
jmp 0x432e7b
mov dword [ebp - 8], 0x4e2b79dc
mov dword [ebp - 0x20], 0x2449ef
mov dword [ebp - 0x14], eax
jmp 0x432ddc
mov ecx, dword [ebp - 0x14]
mov dword [ebp + ecx*4 - 0x22c], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x432dcf
mov ecx, dword [ebp - 0x18]
xor ebx, ebx
mov ecx, dword [ebp - 8]
cmp ecx, 0x5aba9a98
mov dword [ebp - 0x22c], ecx
setge bl
sub ebx, 0xfffffff6
add ebx, dword [ebp - 0x18]
mov edx, dword [ebp - 8]
neg ebx
mov ecx, dword [ebp - 8]
sbb ebx, ebx
inc ebx
sub edx, ebx
neg edx
sbb edx, edx
xor ebx, ebx
inc edx
cmp edx, ecx
mov ecx, dword [ebp - 8]
setge bl
xor edx, edx
cmp ebx, ecx
setne dl
cmp edx, 0xb4b5a9ce
je 0x432e2d
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x18]
xor ebx, ebx
inc ebx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], eax
jl 0x432e75
mov dword [ebp - 0x20], 0x259c
mov dword [ebp - 8], eax
jmp 0x432e6b
mov dword [ebp - 0x18], eax
jmp 0x432e63
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp + ecx*4 - 0x44]
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x44], edx
mov ecx, dword [ebp - 0x20]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x432e4f
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jle 0x432e4a
dec dword [ebp - 0x14]
jns 0x432e3e
inc dword [ebp - 0xc]
push 0xffffffffffffffff
pop edx
cmp dword [ebp - 0xc], esi
je 0x432dbc
add edi, dword [ebp - 0x2c]
dec dword [ebp - 0x38]
jne 0x432a6a
or esi, 0xffffffff
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x28], 0xa3a92bd4
mov dword [ebp - 0x28], 0xa2ae7b79
mov dword [ebp - 0xc], eax
jmp 0x432ec1
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x244], 0x95e3b372
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x432eb0
mov dword [ebp - 0x14], 0xffffffe8
jmp 0x432f0c
mov dword [ebp - 0x28], 0x1accbad8
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x28], 0x223b16aa
mov dword [ebp - 0x24], eax
mov dword [ebp - 0xc], eax
jmp 0x432f01
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x1f0], ebx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jl 0x432ef4
inc dword [ebp - 0x24]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xa
jl 0x432ed0
mov ebx, dword [edi]
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x14], 0xfffffffc
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x28], 0xc9ebf495
mov dword [ebp - 0xc], 0xc4475ee4
push 4
mov dword [ebp - 0x1c], ebx
call fcn.00431bf0
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x432f52
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x160]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x432f43
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
je 0x432f9a
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], 0x42ca8cda
mov dword [ebp - 0x28], esi
xor esi, esi
inc esi
mov dword [ebp - 0x28], 0x29f58382
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x28], esi
inc dword [ebp - 0x24]
mov ecx, dword [ebp - 0x160]
inc dword [ecx]
jmp 0x432fb8
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x432fb2
push eax
push eax
push 0x603
push eax
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
xor eax, eax
xor esi, esi
inc esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0xc], eax
jmp 0x432fd7
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x432fd4
push 0x25f1
push eax
call dword [sym.imp.USER32.dll_GetSubMenu]
xor eax, eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x1b
jl 0x432fbd
lea ecx, [ebp - 0x160]
call fcn.00431cc2
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x432ff9
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x5c], esi
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x432fef
mov dword [ebp - 8], eax
jmp 0x433014
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x94], 0xfffffffd
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x433003
mov dword [ebp - 0x90], eax
jmp 0x433036
mov edx, dword [ebp + ecx*4 - 0x5c]
mov ecx, dword [ebp - 0x90]
mov dword [ebp + ecx*4 - 0x5c], edx
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], eax
mov ecx, dword [ebp - 0x90]
jle 0x433022
mov dword [ebp - 0x94], ecx
mov ecx, dword [edi + 4]
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x18], 0xffffffe3
jmp 0x433129
mov dword [ebp - 0x14], 0x9000d4e7
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffff5
jl 0x433126
mov dword [ebp - 0x1ac], 0x7e55059b
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x1a8], 0x7e55059b
mov dword [ebp - 0x1a4], 0x7e55059b
mov dword [ebp - 0x1a0], 0x7e55059b
push 2
call fcn.00431bf0
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x4330c6
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x178]
mov dword [ecx + edx*4], 0x1bab5934
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x4330b3
mov edx, dword [ebp - 0x178]
mov dword [edx + 4], eax
mov ecx, dword [edx + 4]
inc dword [edx + 4]
cmp dword [edx + 4], 4
mov dword [ebp + ecx*4 - 0x1ac], 0xfffffffa
jl 0x4330d5
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x43310c
push 0x99a
push eax
push 0x65e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
lea ecx, [ebp - 0x178]
call fcn.00431cc2
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff5
jge 0x433077
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff9
jge 0x433063
add edi, 8
lea ecx, [ebp - 0xf0]
push 2
mov dword [ebp - 0x48], edi
call fcn.00431bf0
mov dword [ebp - 0x18], 0xfffffff8
lea ecx, [ebp - 0x130]
mov dword [ebp - 0xc], 0xd402da3c
push esi
call fcn.00431bf0
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x433177
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0xf0]
or dword [ecx + edx*4], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x433167
mov dword [ebp - 8], eax
jmp 0x433195
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x130]
mov dword [ecx + edx*4], 0xfffffffc
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x433182
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], eax
jl 0x43336e
mov ecx, dword [ebp - 0xf0]
mov edi, ecx
mov dword [ebp - 0x20], ecx
push 2
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x1c8]
pop ebx
mov dword [ebp - 8], esi
mov dword [ebp - 0x30], 0x7b5c6eff
push ebx
call fcn.00431bf0
or eax, 0xffffffff
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x2c], esi
push ebx
call fcn.00431bf0
xor eax, eax
mov dword [ebp - 0xb8], 0x20b2de47
mov dword [ebp - 8], eax
jmp 0x433209
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c8]
mov dword [ecx + edx*4], 0x780ca9f8
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x4331f6
mov dword [ebp - 8], eax
jmp 0x433226
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x124]
mov dword [ecx + edx*4], 8
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x433213
dec dword [ebp - 0x14]
or edx, 0xffffffff
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2c]
cmp edx, ecx
mov ecx, dword [ebp - 0xf0]
sbb edx, edx
xor ebx, ebx
neg edx
cmp dword [ecx + esi*4], edx
mov ecx, dword [ebp - 0x14]
setg bl
xor edx, edx
cmp ecx, ebx
setne dl
xor ebx, ebx
cmp edx, 0xd64ea33a
mov dword [edi + 4], edx
sete bl
sub ebx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x130]
neg ebx
sbb ebx, ebx
inc ebx
neg ebx
mov dword [ecx], ebx
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffed
je 0x433343
xor ebx, ebx
inc ebx
or edi, 0xffffffff
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0xac], 0xe0512ed4
mov dword [ebp - 8], 3
jmp 0x433329
mov dword [ebp - 0x58], 0xceaa
mov dword [ebp - 0xc], eax
jmp 0x433320
mov dword [ebp - 0x2c], 0x50e8f7cf
mov dword [ebp - 0x14], eax
jmp 0x433313
mov dword [ebp - 0x38], 0x17a68fa
cmp dword [ebp - 0x38], eax
jne 0x433318
mov ecx, dword [ebp - 0x38]
mov esi, ebx
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x24]
inc dword [ebp - 0x24]
cmp edx, ecx
mov dword [ebp - 0x38], edi
mov ecx, dword [ebp - 0x38]
cmovle esi, eax
mov ecx, dword [ebp - 0xac]
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2c]
cmp ecx, esi
mov ecx, dword [ebp - 0x124]
setne dl
xor ebx, ebx
cmp edx, dword [ecx]
mov ecx, dword [ebp - 0xb8]
setne bl
imul ecx, ebx
xor ebx, ebx
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x14]
inc ebx
cmp dword [ebp - 0x14], ebx
jne 0x4332b9
cmp dword [ebp - 0x58], eax
jne 0x433326
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x26
jle 0x4332ad
inc dword [ebp - 8]
cmp dword [ebp - 8], 0xe
jl 0x4332a1
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffed
jne 0x433288
mov edi, dword [ebp - 0x20]
lea ecx, [ebp - 0x124]
call fcn.00431cc2
lea ecx, [ebp - 0x1c8]
call fcn.00431cc2
dec dword [ebp - 0x18]
push 0
pop eax
push 1
pop esi
jns 0x4331b1
mov edi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x1c]
lea ecx, [ebp - 0x130]
call fcn.00431cc2
lea ecx, [ebp - 0xf0]
call fcn.00431cc2
cmp dword [ebp - 0x28], 0
jne 0x43345d
cmp byte [ebp - 0x31], 0
je 0x4333a2
cmp dword [ebp - 0x3c], esi
jne 0x4333a2
mov ecx, dword [ebp + 8]
lea eax, [ebx + 0x10]
add dword [ecx + 8], eax
mov eax, dword [edi]
mov dword [ebp - 0x28], eax
mov eax, dword [edi + 4]
push ebx
mov dword [ebp - 0x48], eax
call fcn.0047f37f
mov dword [ebp - 0x20], eax
xor eax, eax
pop ecx
mov dword [ebp - 0xb4], eax
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0xb4]
push eax
push ebx
call fcn.00463169
xor ecx, ecx
test ebx, ebx
mov ebx, dword [ebp - 0x84]
mov esi, ecx
jle 0x433434
mov eax, esi
and eax, 0x80000001
jns 0x4333fa
dec eax
or eax, 0xfffffffe
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x28]
add eax, esi
add eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x48]
jmp 0x43340f
lea eax, [edx + 1]
cdq
idiv dword [ebp - 0x1c]
cmp word [ebx + edx*2], cx
jne 0x43340c
xor eax, eax
inc eax
mov word [ebx + edx*2], ax
mov al, byte [edx + edi + 8]
mov edx, dword [ebp - 0x20]
mov byte [esi + edx], al
inc esi
mov eax, dword [ebp - 0x1c]
cmp esi, eax
jl 0x4333ec
jmp 0x433437
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp + 8]
mov dword [esi], eax
mov eax, dword [ebp - 0x20]
mov dword [esi + 4], eax
test ebx, ebx
je 0x433460
push ebx
call fcn.00480876
xor eax, eax
pop ecx
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
jmp 0x433460
mov esi, dword [ebp + 8]
mov dword [ebp + 8], 8
lea ecx, [ebp - 0x13c]
push 3
call fcn.00431bf0
xor eax, eax
mov dword [ebp + 8], eax
jmp 0x43348c
mov ecx, dword [ebp + 8]
mov dword [ebp + ecx*4 - 0x1dc], 0xfff7
inc dword [ebp + 8]
cmp dword [ebp + 8], 2
jl 0x43347b
mov dword [ebp + 8], eax
jmp 0x4334a6
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0x13c]
mov dword [ecx + edx*4], eax
inc dword [ebp + 8]
cmp dword [ebp + 8], 3
jl 0x433497
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + 8], eax
mov dword [ebp + 8], 0xfffffff7
cmp dword [ebp + 8], 0x1c
jl 0x4334d7
mov ecx, dword [ebp - 0x13c]
or eax, 0xffffffff
mov dword [ecx + 4], eax
inc dword [ebp + 8]
cmp dword [ebp + 8], 0x1c
jge 0x4334cb
lea ecx, [ebp - 0x13c]
call fcn.00431cc2
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret