Function at 0x46e2d1
Capabilities:
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x218
push esi
xor esi, esi
mov dword [esp + 0x34], ecx
inc esi
xor eax, eax
push edi
mov edi, edx
mov dword [esp + 0x14], esi
mov dword [esp + 0x30], edi
mov dword [esp + 0x14], eax
jmp 0x46e30b
mov ecx, dword [esp + 0x14]
mov dword [esp + ecx*4 + 0x1d8], 0x3dd3
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
jl 0x46e2f8
mov dword [esp + 0x14], 2
cmp dword [esp + 0x14], eax
jl 0x46e38d
mov dword [esp + 0x10], 8
mov dword [esp + 0x10], 2
cmp dword [esp + 0x10], eax
jl 0x46e387
mov ecx, dword [esp + 0x14]
cmp dword [esp + ecx*4 + 0x1d8], eax
jne 0x46e387
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x46e381
push eax
push 0xbf7
push 0x938
push 0x1a99
push 0x2423
push 0xf9d
push 0x63f
push 0x18b4
push 0xed
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
xor eax, eax
dec dword [esp + 0x10]
jns 0x46e336
dec dword [esp + 0x14]
jns 0x46e320
mov dword [esp + 0x1c], esi
lea ecx, [esp + 0xe0]
mov dword [esp + 0x10], 6
mov dword [esp + 8], 0xe01b
push 4
call fcn.00434460
xor eax, eax
mov dword [esp + 8], eax
jmp 0x46e3ca
mov ecx, dword [esp + 8]
mov dword [esp + ecx*4 + 0xb8], 0x90f9
inc dword [esp + 8]
cmp dword [esp + 8], esi
jl 0x46e3b7
push 4
mov dword [esp + 0xc], eax
pop esi
jmp 0x46e3eb
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0xe0]
mov dword [ecx + edx*4], eax
inc dword [esp + 8]
cmp dword [esp + 8], esi
jl 0x46e3d9
push 0xffffffffffffffff
mov dword [esp + 0xc], eax
pop edx
jmp 0x46e409
mov ecx, dword [esp + 8]
mov dword [esp + ecx*4 + 0x1e4], edx
inc dword [esp + 8]
cmp dword [esp + 8], esi
jl 0x46e3fa
mov ecx, dword [esp + 0x1c]
add ecx, dword [esp + 0x1c]
je 0x46e41d
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0x1c]
neg esi
sbb esi, esi
xor edx, edx
inc esi
cmp esi, ecx
mov ecx, dword [esp + 0x1c]
setne dl
mov dword [esp + 0x18], edx
xor edx, edx
cmp ecx, dword [esp + 0x18]
setl dl
mov dword [esp + 8], edx
mov dword [esp + 8], eax
cmp dword [esp + 8], eax
jg 0x46e5b7
mov dword [esp + 0x20], 1
mov dword [esp + 0x10], eax
jmp 0x46e59b
mov dword [esp + 0x18], 0xd2ac30bc
mov dword [esp + 0x1c], eax
jmp 0x46e58d
mov dword [esp + 0x24], 0x19d87263
mov dword [esp + 0x14], 0xfffffffa
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x46e49f
push 0x1580
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor eax, eax
mov dword [esp + 0x24], eax
cmp dword [esp + 0x24], eax
jl 0x46e589
mov dword [esp + 0x14], eax
jmp 0x46e4c3
mov ecx, dword [esp + 0x14]
mov dword [esp + ecx*4 + 0x3c], 1
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 2
jl 0x46e4b3
mov dword [esp + 0x40], eax
cmp dword [esp + 0x40], eax
jg 0x46e57f
mov esi, dword [esp + 0xe0]
mov dword [esp + 0x28], esi
mov ecx, dword [esp + 0x10]
xor edx, edx
cmp ecx, 0xfffffffb
mov ecx, dword [esp + 0x18]
push 0
setg dl
cmp edx, ecx
pop edx
setl dl
add edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
cmp edx, ecx
mov ecx, dword [esp + 0x20]
push 0
pop edx
setl dl
imul edx, dword [esi + 4]
imul ecx, edx
test ecx, ecx
je 0x46e525
cmp dword [esp + 0x20], eax
je 0x46e525
xor esi, esi
inc esi
jmp 0x46e527
mov esi, eax
mov dword [esp + 0x1ec], esi
xor edx, edx
mov ecx, dword [esp + 0x40]
cmp esi, ecx
mov ecx, dword [esp + 0x10]
mov edi, dword [esp + 0x40]
setl dl
mov dword [esp + 0x14], edx
xor edx, edx
cmp dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x40]
setg dl
sub edi, edx
xor edx, edx
mov esi, dword [esp + ecx*4 + 0xb8]
mov ecx, dword [esp + 0x18]
imul ecx, edi
cmp esi, ecx
mov esi, dword [esp + 0x28]
setne dl
mov dword [esp + 0x14], edx
inc dword [esp + 0x40]
cmp dword [esp + 0x40], eax
jle 0x46e4e3
dec dword [esp + 0x24]
jns 0x46e4ad
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], eax
jle 0x46e476
inc dword [esp + 0x10]
cmp dword [esp + 0x10], eax
jle 0x46e465
inc dword [esp + 8]
cmp dword [esp + 8], eax
jle 0x46e454
mov edi, dword [esp + 0x30]
lea ecx, [esp + 0xe0]
call fcn.00434532
mov eax, dword [0xaaec24]
xor esi, esi
inc esi
test al, 1
jne 0x46e653
or eax, esi
mov dword [0xaaec24], eax
xor eax, eax
push eax
push eax
mov dword [0xaaec30], eax
mov dword [0xaaec34], eax
call fcn.004042d3
mov ecx, eax
mov dword [0xaaec4c], 0x3f800000
mov dword [0xaaec30], ecx
xor eax, eax
mov dword [esp + 0x98], ecx
lea ecx, [esp + 0x98]
push ecx
push 0x10
push eax
mov dword [0xaaec38], eax
mov ecx, 0xaaec38
mov dword [0xaaec40], eax
mov dword [0xaaec3c], eax
lea eax, [esp + 0x1b4]
push eax
call fcn.00404009
push 0x4b30d3
mov dword [0xaaec44], 7
mov dword [0xaaec48], 8
call fcn.0048f38f
pop ecx
imul eax, dword [esp + 0x38], 0x2710
add eax, edi
mov dword [esp + 0x78], eax
xor eax, eax
mov dword [esp + 0x2c], 6
mov dword [esp + 0x2c], 0xa3df603f
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], eax
jmp 0x46e690
mov ecx, dword [esp + 0x14]
mov dword [esp + ecx*4 + 0x200], 0xa654fddd
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 4
jl 0x46e67d
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], al
je 0x46e6b7
push eax
push 0xb79
push 0x144e
push 0x103d
call dword [sym.imp.KERNEL32.dll_RaiseException]
inc dword [esp + 0x18]
lea eax, [esp + 0x78]
push eax
call fcn.0046fb0b
mov edi, dword [eax]
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x28], 0x3268dd2a
mov dword [esp + 0x18], 0x33ba
mov dword [esp + 0x1c], edi
mov dword [esp + 0x14], eax
jmp 0x46e6fe
mov ecx, dword [esp + 0x14]
mov dword [esp + ecx*4 + 0x1f4], 0xfffffffa
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
jl 0x46e6eb
mov dword [esp + 0x10], 2
cmp dword [esp + 0x10], eax
jl 0x46e81a
push 2
lea ecx, [esp + 0x12c]
call fcn.00434460
mov dword [esp + 0x2c], 2
lea ecx, [esp + 0x19c]
push 3
call fcn.00434460
mov eax, 0x80293238
mov dword [esp + 0x2c], 5
mov dword [esp + 0x174], eax
mov dword [esp + 0x178], eax
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], eax
xor eax, eax
mov dword [esp + 8], eax
jmp 0x46e782
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x128]
mov dword [ecx + edx*4], 0xfff9
inc dword [esp + 8]
cmp dword [esp + 8], 2
jl 0x46e76c
push 3
mov dword [esp + 0xc], eax
pop edx
jmp 0x46e7a4
mov ecx, dword [esp + 8]
mov eax, dword [esp + 0x19c]
mov dword [eax + ecx*4], edx
inc dword [esp + 8]
cmp dword [esp + 8], edx
jl 0x46e792
mov ecx, dword [esp + 0x20]
xor edx, edx
mov eax, dword [esp + 0x10]
cmp ecx, eax
mov ecx, 0xd1ac8c6d
setl dl
mov dword [esp + 0x28], edx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp ecx, eax
mov eax, dword [esp + 0x128]
sbb ecx, ecx
neg ecx
sub ecx, dword [eax + 4]
mov eax, dword [esp + 0x18]
imul edx, ecx, 0xfa18
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [esp + 0x178], ecx
lea ecx, [esp + 0x19c]
call fcn.00434532
lea ecx, [esp + 0x128]
call fcn.00434532
dec dword [esp + 0x10]
jns 0x46e717
xor eax, eax
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x10], ecx
test edi, edi
je 0x46ea54
mov dword [esp + 8], 0x84c506d4
mov dword [esp + 0x28], 0x91e60e77
mov dword [esp + 0x24], esi
mov dword [esp + 0x30], 4
mov dword [esp + 0x10], 0x9dba5c12
mov dword [esp + 8], eax
jmp 0x46e864
mov ecx, dword [esp + 8]
mov dword [esp + ecx*4 + 0x54], 0x7fd5
inc dword [esp + 8]
cmp dword [esp + 8], 3
jl 0x46e854
mov dword [esp + 8], eax
jmp 0x46e884
mov ecx, dword [esp + 8]
mov dword [esp + ecx*4 + 0x14c], 9
inc dword [esp + 8]
cmp dword [esp + 8], 3
jl 0x46e871
mov dword [esp + 8], 2
cmp dword [esp + 8], eax
jl 0x46ea48
mov edi, 0xffff
mov dword [esp + 0x20], 9
mov ecx, dword [esp + 8]
push 0
mov ecx, dword [esp + ecx*4 + 0x58]
mov ecx, dword [esp + 0x2c]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + ecx*4 + 0x58]
mov ecx, dword [esp + 0xc]
sub edx, dword [esp + ecx*4 + 0x58]
add edx, dword [esp + 0x28]
mov dword [esp + 0x34], edx
mov ecx, dword [esp + 0xc]
mov ecx, dword [esp + ecx*4 + 0x58]
neg ecx
cmp edi, ecx
mov ecx, dword [esp + 0xc]
sbb esi, esi
neg esi
mov ecx, dword [esp + ecx*4 + 0x58]
neg esi
neg esi
sbb esi, esi
xor edx, edx
inc esi
cmp esi, ecx
mov ecx, dword [esp + 0x28]
setne dl
imul edx, edx, 5
cmp edx, ecx
mov ecx, dword [esp + 0x154]
pop edx
setge dl
cmp edx, ecx
mov ecx, dword [esp + 0x150]
push 0
pop edx
setge dl
cmp edx, ecx
push 0
pop ecx
setle cl
xor edx, edx
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 8]
mov ecx, dword [esp + ecx*4 + 0x54]
cmp dword [esp + 0x30], ecx
setge dl
xor ecx, ecx
imul edx, dword [esp + 0x54]
cmp edx, 0xffffffff
setle cl
xor edx, edx
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x10]
imul ecx, dword [esp + 0x30]
cmp ecx, 0xd33
setle dl
xor ecx, ecx
cmp ecx, edx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, 0xe7c6
setl dl
cmp edx, 1
jge 0x46e9d5
mov dword [esp + 0x18], 0x9e7721ca
lea ecx, [esp + 0x158]
push 3
call fcn.00434460
mov dword [esp + 0x14], 0
jmp 0x46e9a8
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x158]
mov dword [eax + ecx*4], 0xd8805e53
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
jl 0x46e992
dec dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x158]
mov dword [eax + 8], ecx
lea ecx, [esp + 0x158]
call fcn.00434532
xor eax, eax
jmp 0x46ea3a
mov dword [esp + 0x18], eax
mov dword [esp + 0x30], 2
mov ecx, dword [esp + 8]
mov ecx, dword [esp + ecx*4 + 0x54]
cmp dword [esp + 0x20], eax
je 0x46ea01
mov ecx, dword [esp + 0x150]
cmp dword [esp + 0x5c], eax
je 0x46ea01
xor esi, esi
inc esi
jmp 0x46ea03
mov esi, eax
mov ecx, dword [esp + 0x58]
xor edx, edx
cmp ecx, esi
mov ecx, dword [esp + 0x20]
setg dl
mov dword [esp + 0x30], edx
xor edx, edx
cmp ecx, dword [esp + 0x30]
mov ecx, dword [esp + 0x18]
setge dl
mov dword [esp + 0x30], edx
xor edx, edx
cmp dword [esp + 0x30], ecx
setge dl
sub edx, 0x7bdcac8e
mov dword [esp + 0x30], edx
dec dword [esp + 8]
jns 0x46e8a2
mov edi, dword [esp + 0x1c]
mov dword [esp + 0x9c], edi
jmp 0x46fa87
push 3
pop esi
mov dword [esp + 0x28], 0x1e2c0d37
lea ecx, [esp + 0x110]
mov dword [esp + 0x2c], 0x1cdcb363
mov dword [esp + 0x20], 0x3e64f147
push esi
call fcn.00434460
mov dword [esp + 0x18], 0x1e9c96c7
xor eax, eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 2
mov dword [esp + 0x14], eax
jmp 0x46eaae
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x110]
mov dword [ecx + edx*4], 0x28fbc781
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x46ea98
mov ecx, dword [esp + 0x110]
xor edi, edi
inc edi
mov edx, edi
mov dword [ecx], edi
mov ecx, dword [esp + 0x18]
add ecx, dword [esp + 0x28]
dec dword [esp + 0x18]
cmp ecx, 0x4980
mov ecx, dword [esp + 0x10]
cmove edx, eax
sub edx, ecx
je 0x46eb75
mov dword [esp + 0x18], 0x2820
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], al
je 0x46eafe
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
xor eax, eax
mov dword [esp + 0x14], eax
jmp 0x46eb6c
mov dword [esp + 0x2c], 0xc36c
mov dword [esp + 0x10], 0xfffffff8
jmp 0x46eb61
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x46eb31
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
xor eax, eax
mov ecx, dword [esp + 0x18]
inc ecx
cmp ecx, 5
sbb ecx, ecx
inc ecx
cmp ecx, 0x4b66
jg 0x46eb4c
mov edx, edi
cmp dword [esp + 0x18], eax
jne 0x46eb4e
mov edx, eax
xor ecx, ecx
cmp edx, 0x5c5b
setl cl
mov dword [esp + 0x20], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0x3c
jle 0x46eb16
dec dword [esp + 0x14]
cmp dword [esp + 0x14], 0xffffffeb
jl 0x46eb04
jmp 0x46eb86
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], al
je 0x46eb86
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [esp + 0x110]
call fcn.00434532
mov eax, dword [0xaaec24]
test al, 2
jne 0x46ec20
or eax, 2
mov dword [0xaaec24], eax
xor eax, eax
push eax
push eax
mov dword [0xaaec50], eax
mov dword [0xaaec54], eax
call fcn.004042d3
mov ecx, eax
mov dword [0xaaec6c], 0x3f800000
mov dword [0xaaec50], ecx
xor eax, eax
mov dword [esp + 0xd4], ecx
lea ecx, [esp + 0xd4]
push ecx
push 0x10
push eax
mov dword [0xaaec58], eax
mov ecx, 0xaaec58
mov dword [0xaaec60], eax
mov dword [0xaaec5c], eax
lea eax, [esp + 0xc8]
push eax
call fcn.00404009
push 0x4b30ce
mov dword [0xaaec64], 7
mov dword [0xaaec68], 8
call fcn.0048f38f
pop ecx
or eax, 0xffffffff
mov dword [esp + 0x1c], eax
xor eax, eax
mov dword [esp + 0x10], 0xbb66efe0
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
jmp 0x46edde
push 2
lea ecx, [esp + 0x80]
call fcn.00434460
xor eax, eax
mov dword [esp + 8], 0x7555b7ce
mov dword [esp + 8], eax
jmp 0x46ec6f
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x7c]
mov dword [ecx + edx*4], 0x7e8b72fd
inc dword [esp + 8]
cmp dword [esp + 8], 2
jl 0x46ec5c
mov dword [esp + 8], eax
jmp 0x46ec8f
mov ecx, dword [esp + 8]
mov dword [esp + ecx*4 + 0x184], 0x64b
inc dword [esp + 8]
cmp dword [esp + 8], esi
jl 0x46ec7c
mov dword [esp + 8], eax
cmp dword [esp + 8], edi
jg 0x46ed7d
mov dword [esp + 0x14], eax
jmp 0x46ecb8
mov ecx, dword [esp + 0x14]
mov dword [esp + ecx*4 + 0x1ac], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], esi
jl 0x46eca9
mov ecx, dword [esp + 8]
mov esi, dword [esp + 8]
mov edx, dword [esp + 0x7c]
mov ecx, dword [edx + ecx*4]
mov dword [edx + esi*4], ecx
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 0x184]
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x7c]
mov dword [ecx + edx*4], eax
mov dword [esp + 0x1ac], eax
mov ecx, dword [esp + 8]
cmp dword [esp + 0x1c], eax
je 0x46ed08
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x7c]
cmp dword [ecx + edx*4], eax
jne 0x46ed0a
mov edi, eax
mov edx, dword [esp + 8]
mov esi, dword [esp + 0x10]
mov ecx, dword [esp + 0x7c]
push 0
sub esi, dword [ecx + edx*4]
xor edx, edx
mov ecx, dword [esp + 0x1b0]
cmp esi, ecx
mov ecx, dword [esp + 0x18c]
setne dl
sub ecx, edx
mov dword [esp + 0x14], ecx
mov esi, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x80]
cmp ecx, dword [edx + esi*4]
pop edx
setge dl
xor ecx, ecx
cmp edi, edx
push 3
setge cl
xor edi, edi
mov dword [esp + 0x1c], ecx
inc edi
mov esi, dword [esp + 0xc]
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x80]
mov dword [ecx + esi*4], edx
inc dword [esp + 0xc]
pop esi
cmp dword [esp + 8], edi
jle 0x46eca3
mov dword [esp + 0x10], eax
jmp 0x46edca
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x46eda6
push eax
push 0xb79
push 0x144e
push 0x103d
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x46edc6
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
xor eax, eax
push eax
push eax
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
xor eax, eax
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0x19
jge 0x46ed83
lea ecx, [esp + 0x7c]
call fcn.00434532
dec dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0xfffffff9
jle 0x46ec3e
xorps xmm0, xmm0
lea ecx, [esp + 0x104]
movdqu xmmword [esp + 0xc4], xmm0
mov dword [esp + 0x44], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], edi
mov dword [esp + 0x50], edi
push esi
call fcn.00434460
or eax, 0xffffffff
mov dword [esp + 0x18], eax
xor eax, eax
mov dword [esp + 0x18], 0x712c5197
mov dword [esp + 8], eax
jmp 0x46ee3f
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x104]
mov dword [ecx + edx*4], 0xd6364d64
inc dword [esp + 8]
cmp dword [esp + 8], esi
jl 0x46ee29
mov dword [esp + 8], eax
jmp 0x46ee5e
mov ecx, dword [esp + 8]
mov dword [esp + ecx*4 + 0xc0], 0xb15a8df0
inc dword [esp + 8]
cmp dword [esp + 8], edi
jl 0x46ee4b
cmp dword [esp + 0x4c], 0x64a9
jl 0x46ee76
mov esi, eax
cmp dword [esp + 0x4c], eax
jne 0x46ee78
mov esi, edi
mov ecx, dword [esp + 0x44]
xor edx, edx
cmp esi, ecx
mov ecx, dword [esp + 0x104]
setg dl
mov dword [ecx], edx
mov ecx, dword [esp + 0x4c]
mov esi, dword [esp + 0x44]
mov ecx, dword [esp + 0x4c]
neg esi
sbb esi, esi
xor edx, edx
neg esi
cmp esi, ecx
setge dl
mov dword [esp + 0xc0], edx
mov ecx, dword [esp + 0x4c]
imul ecx, edx
test ecx, ecx
jne 0x46eebf
mov ecx, eax
cmp dword [esp + 0x44], eax
je 0x46eec1
mov ecx, edi
mov eax, dword [esp + 0x4c]
xor edx, edx
add eax, ecx
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x4c]
cmp eax, ecx
setl dl
mov dword [esp + 0x18], edx
mov ecx, dword [esp + 0x18]
sub ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x4c]
neg ecx
sbb ecx, ecx
inc ecx
add eax, ecx
lea ecx, [esp + 0x104]
mov dword [esp + 0x44], eax
call fcn.00434532
lea eax, [esp + 0x38]
push eax
call fcn.0046fb6d
push 2
lea ecx, [esp + 0x194]
mov esi, dword [eax]
mov dword [esp + 0x1c], 0xbc383c67
mov dword [esp + 0x18], esi
call fcn.00434460
xor eax, eax
mov dword [esp + 0x18], 0xf26af903
mov dword [esp + 8], eax
jmp 0x46ef46
mov ecx, dword [esp + 8]
mov dword [esp + ecx*4 + 0x88], eax
inc dword [esp + 8]
cmp dword [esp + 8], 4
jl 0x46ef37
mov dword [esp + 8], eax
jmp 0x46ef63
mov ecx, dword [esp + 8]
mov dword [esp + ecx*4 + 0x34], 0xffffffff
inc dword [esp + 8]
cmp dword [esp + 8], edi
jl 0x46ef53
mov dword [esp + 8], eax
jmp 0x46ef85
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x190]
mov dword [ecx + edx*4], 0xfffffffe
inc dword [esp + 8]
cmp dword [esp + 8], 2
jl 0x46ef6f
mov dword [esp + 0x90], eax
cmp dword [esp + 0x90], 0xffffffef
jle 0x46f080
mov dword [esp + 0x20], 5
mov dword [esp + 0x10], 0xdd013d0
mov ecx, dword [esp + 0x90]
mov dword [esp + 0x20], ecx
cmp dword [esp + 0x20], eax
jne 0x46efcd
mov ecx, eax
cmp dword [esp + 0x90], eax
je 0x46efcf
mov ecx, edi
cmp dword [esp + 0x10], eax
jne 0x46efdd
mov edx, eax
cmp dword [esp + 0x34], eax
je 0x46efdf
mov edx, edi
mov dword [esp + 0x18], ecx
xor ecx, ecx
cmp edx, 0xfffffffe
push 0
setg cl
xor edx, edx
sub ecx, 4
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x14]
cmp ecx, dword [esp + 0x2c]
mov ecx, dword [esp + 0x14]
setge dl
cmp edx, ecx
pop ecx
setge cl
xor edx, edx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x18]
cmp ecx, dword [esp + 0x28]
setle dl
xor ecx, ecx
cmp edx, 0xffffffff
setle cl
imul ecx, dword [esp + 0x34]
add ecx, 0x9904
je 0x46f035
mov ecx, dword [esp + 0x18]
mov ecx, dword [esp + 0x34]
mov ecx, dword [esp + 0x10]
imul ecx, dword [esp + 0x20]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x18]
cmp dword [esp + 0x34], 0xc6dd3ed2
mov ecx, dword [esp + 0x90]
sbb esi, esi
xor edx, edx
inc esi
cmp ecx, esi
setl dl
mov dword [esp + 0x10], edx
dec dword [esp + 0x90]
cmp dword [esp + 0x90], 0xffffffef
jg 0x46efa1
mov esi, dword [esp + 0x14]
lea ecx, [esp + 0x190]
call fcn.00434532
cmp byte [ebp + 0xc], 0
jne 0x46f09a
test esi, esi
jne 0x46f4e4
mov dword [esp + 0x24], 0xfddd3f46
lea ecx, [esp + 0x140]
mov dword [esp + 0x18], 0xfffffffd
push edi
call fcn.00434460
or eax, 0xffffffff
mov dword [esp + 0x28], eax
xor eax, eax
mov dword [esp + 0x18], 0x2d1a4e66
mov dword [esp + 0x18], eax
mov dword [esp + 0x10], eax
jmp 0x46f0e8
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x140]
mov dword [eax + ecx*4], 0x3026d8d
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x46f0d2
mov eax, dword [esp + 0x24]
xor edx, edx
mov eax, dword [esp + 0x24]
mov dword [esp + 0x18], edi
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x140]
mov dword [eax], ecx
mov eax, dword [esp + 0x24]
cmp eax, ecx
mov eax, dword [esp + 0x24]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x28]
setne cl
mov dword [esp + 0x18], ecx
xor ecx, ecx
cmp dword [esp + 0x18], eax
setl cl
mov dword [esp + 0x18], ecx
lea ecx, [esp + 0x140]
mov eax, dword [esp + 0x18]
mov dword [esp + 0x18], eax
call fcn.00434532
mov dl, byte [ebp + 0xc]
lea eax, [esp + 0x210]
mov ecx, dword [esp + 0x38]
push eax
call fcn.004347d3
mov esi, eax
lea edi, [esp + 0xc8]
pop ecx
push 3
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [esp + 0xc], 0x84c506d4
xor edi, edi
mov dword [esp + 0x2c], 0x91e60e77
inc edi
mov dword [esp + 0x28], edi
xor eax, eax
mov dword [esp + 0x1c], 4
mov dword [esp + 0x20], 0x9dba5c12
mov dword [esp + 0xc], eax
pop esi
jmp 0x46f1aa
mov ecx, dword [esp + 8]
mov dword [esp + ecx*4 + 0x60], 0x7fd5
inc dword [esp + 8]
cmp dword [esp + 8], esi
jl 0x46f19a
mov dword [esp + 8], eax
jmp 0x46f1c9
mov ecx, dword [esp + 8]
mov dword [esp + ecx*4 + 0x134], 9
inc dword [esp + 8]
cmp dword [esp + 8], esi
jl 0x46f1b6
mov dword [esp + 8], 2
cmp dword [esp + 8], eax
jl 0x46f38c
mov edi, 0xffff
mov dword [esp + 0x20], 9
mov ecx, dword [esp + 8]
push 0
mov ecx, dword [esp + ecx*4 + 0x64]
mov ecx, dword [esp + 0x2c]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + ecx*4 + 0x64]
mov ecx, dword [esp + 0xc]
sub edx, dword [esp + ecx*4 + 0x64]
add edx, dword [esp + 0x28]
mov dword [esp + 0x1c], edx
mov ecx, dword [esp + 0xc]
mov ecx, dword [esp + ecx*4 + 0x64]
neg ecx
cmp edi, ecx
mov ecx, dword [esp + 0xc]
sbb esi, esi
neg esi
mov ecx, dword [esp + ecx*4 + 0x64]
neg esi
neg esi
sbb esi, esi
xor edx, edx
inc esi
cmp esi, ecx
mov ecx, dword [esp + 0x28]
setne dl
imul edx, edx, 5
cmp edx, ecx
mov ecx, dword [esp + 0x13c]
pop edx
setge dl
cmp edx, ecx
mov ecx, dword [esp + 0x138]
push 0
pop edx
setge dl
cmp edx, ecx
push 0
pop ecx
setle cl
xor edx, edx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 8]
mov ecx, dword [esp + ecx*4 + 0x60]
cmp dword [esp + 0x18], ecx
setge dl
xor ecx, ecx
imul edx, dword [esp + 0x60]
cmp edx, 0xffffffff
setle cl
xor edx, edx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x1c]
imul ecx, dword [esp + 0x18]
cmp ecx, 0xd33
setle dl
xor ecx, ecx
cmp ecx, edx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, 0xe7c6
setl dl
cmp edx, 1
jge 0x46f31a
push 3
pop esi
mov dword [esp + 0x18], 0x9e7721ca
lea ecx, [esp + 0x11c]
push esi
call fcn.00434460
mov dword [esp + 0x10], 0
jmp 0x46f2ee
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x11c]
mov dword [eax + ecx*4], 0xd8805e53
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x46f2d8
dec dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x11c]
mov dword [eax + 8], ecx
lea ecx, [esp + 0x11c]
call fcn.00434532
xor eax, eax
jmp 0x46f37f
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], 2
mov ecx, dword [esp + 8]
mov ecx, dword [esp + ecx*4 + 0x60]
cmp dword [esp + 0x20], eax
je 0x46f346
mov ecx, dword [esp + 0x138]
cmp dword [esp + 0x68], eax
je 0x46f346
xor esi, esi
inc esi
jmp 0x46f348
mov esi, eax
mov ecx, dword [esp + 0x64]
xor edx, edx
cmp ecx, esi
mov ecx, dword [esp + 0x20]
setg dl
mov dword [esp + 0x18], edx
xor edx, edx
cmp ecx, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
setge dl
mov dword [esp + 0x18], edx
xor edx, edx
cmp dword [esp + 0x18], ecx
setge dl
sub edx, 0x7bdcac8e
mov dword [esp + 0x18], edx
dec dword [esp + 8]
jns 0x46f1e6
xor edi, edi
inc edi
cmp byte [ebp + 0xc], 0
je 0x46f4e0
cmp dword [esp + 0xcc], 0
je 0x46f4e0
mov ecx, dword [esp + 0xd0]
or edx, 0xffffffff
mov dword [esp + 8], 0x80c170c
mov dword [esp + 0x10], eax
mov dword [esp + 0xa0], ecx
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
cmp edx, ecx
mov ecx, dword [esp + 8]
sbb esi, esi
add esi, 0xfffffc91
neg esi
push 0
sbb esi, esi
xor edx, edx
inc esi
cmp esi, ecx
mov ecx, dword [esp + 0xc]
setle dl
mov dword [esp + 0x2c], edx
xor edx, edx
cmp dword [esp + 0x2c], ecx
setne dl
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
cmp ecx, edx
mov ecx, dword [esp + 0xc]
pop edx
setl dl
cmp edx, ecx
push 0
pop ecx
setne cl
xor edx, edx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 8]
cmp dword [esp + 0x28], ecx
setl dl
cmp edx, dword [esp + 8]
je 0x46f491
push 0xfffffffffffffffd
pop ecx
mov dword [esp + 0x164], ecx
mov dword [esp + 0x168], ecx
mov dword [esp + 0x16c], ecx
push 3
mov dword [esp + 0x174], ecx
mov dword [esp + 0x14], eax
pop esi
jmp 0x46f489
mov dword [esp + 8], esi
cmp dword [esp + 8], eax
jl 0x46f47a
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x46f474
call dword [sym.imp.USER32.dll_DestroyCaret]
xor eax, eax
dec dword [esp + 8]
jns 0x46f461
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + ecx*4 + 0x164]
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jle 0x46f457
jmp 0x46f4bb
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x46f4bb
push eax
push 0x11a4
push 0xb8c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
mov byte [esp + 0xf], 0
cmp byte [esp + 0xf], 0
je 0x46f4d2
push 0x21fd
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
mov eax, dword [esp + 0xcc]
mov dword [esp + 0xa4], eax
mov esi, dword [esp + 0x14]
mov dword [esp + 0x1c], 0x64a6847d
mov dword [esp + 0x1c], 0
jmp 0x46f548
push edi
lea ecx, [esp + 0xf0]
call fcn.00434460
xor eax, eax
mov dword [esp + 0x2c], 5
mov dword [esp + 0x10], eax
jmp 0x46f529
mov edx, dword [esp + 0x10]
mov ecx, dword [esp + 0xec]
mov dword [ecx + edx*4], 0xdba33992
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x46f513
mov ecx, dword [esp + 0xec]
mov dword [ecx], eax
lea ecx, [esp + 0xec]
call fcn.00434532
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0x18
jg 0x46f4f6
test esi, esi
jne 0x46f57e
cmp dword [esp + 0xc4], esi
jle 0x46f57e
mov ecx, dword [esp + 0xc8]
test ecx, ecx
je 0x46f57e
call fcn.0046dd3a
mov esi, eax
lea eax, [esp + 0x38]
push eax
mov dword [esp + 0x18], esi
call fcn.0046fb6d
mov dword [eax], esi
push dword [esp + 0xbc]
movdqa xmm0, xmmword [0xaa76f0]
lea ecx, [esp + 0x1dc]
push ecx
xor eax, eax
lea ecx, [esp + 0x1d0]
push ecx
push eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x7c], eax
movdqu xmmword [esp + 0x1d8], xmm0
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
call fcn.004345a3
mov dword [esp + 8], 0xa18885c6
or eax, 0xffffffff
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 0x28], 0xfd8b
mov dword [esp + 8], eax
cmp dword [esp + 8], 3
jg 0x46f789
mov esi, dword [esp + 0x6c]
mov dword [esp + 0x2c], esi
mov dword [esp + 0x18], 8
mov dword [esp + 0x20], 0x41a4
mov dword [esp + 0x18], 0xb6068be3
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x6c]
imul ecx, dword [ecx + edx*4], 3
test ecx, ecx
jne 0x46f620
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
xor edx, edx
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + 8]
mov dword [esp + 0x18], edi
mov ecx, dword [esp + 0x18]
cmp ecx, 0x76df3e2e
setle dl
sub edx, dword [esi + 8]
jne 0x46f650
mov ecx, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + 0x10]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
cmp dword [esi + 8], eax
je 0x46f682
mov dword [esp + 0x18], 0x632c
dec dword [esp + 0x18]
jmp 0x46f77a
mov dword [esp + 0x24], 0x691cfe0c
mov dword [esp + 0x10], eax
jmp 0x46f6a3
mov ecx, dword [esp + 0x10]
mov dword [esp + ecx*4 + 0xd8], 0x6953c535
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x46f690
mov dword [esp + 0x10], 3
cmp dword [esp + 0x10], eax
jl 0x46f77a
mov dword [esp + 0x1c], 0xe497d6a5
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x20], ecx
cmp dword [esp + 0xd8], eax
je 0x46f768
mov dword [esp + 0x18], 0xfca19ab6
mov dword [esp + 0x1c], eax
jmp 0x46f760
mov edx, dword [esp + 8]
mov ecx, dword [esp + 0x6c]
cmp dword [ecx + edx*4], eax
je 0x46f748
imul ecx, dword [esp + 0x20], 0xaf4
test ecx, ecx
je 0x46f706
cmp dword [esp + 0x18], eax
jne 0x46f708
mov edi, eax
mov ecx, dword [esp + 8]
xor edx, edx
mov dword [esp + 0x24], eax
mov esi, dword [esp + 8]
mov ecx, dword [esp + 0x24]
cmp ecx, edi
mov ecx, dword [esp + 0x18]
setle dl
cmp edx, ecx
mov ecx, dword [esp + 0x6c]
push 0
pop edx
setg dl
xor edi, edi
inc edi
sub edx, dword [ecx + esi*4]
je 0x46f748
cmp dword [esp + 0x18], eax
jne 0x46f76c
cmp dword [esp + 0xd8], eax
jne 0x46f76c
jmp 0x46f75c
mov byte [esp + 0xf], al
cmp byte [esp + 0xf], 0
je 0x46f75c
push eax
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
xor eax, eax
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], edi
jle 0x46f6e7
jmp 0x46f76c
mov dword [esp + 0x18], edi
dec dword [esp + 0x10]
jns 0x46f6bc
mov esi, dword [esp + 0x2c]
inc dword [esp + 8]
cmp dword [esp + 8], 3
jle 0x46f5f4
lea ecx, [esp + 0x6c]
call fcn.00434532
lea ecx, [esp + 0xc4]
call fcn.00435f31
mov dword [esp + 0x24], 0xffff
mov dword [esp + 0x10], 0x34ca
mov dword [esp + 0x18], 0x3f9150fa
mov dword [esp + 0x1c], 9
mov dword [esp + 0x20], 0xa8f1edd1
mov dword [esp + 0x2c], 0xd3d47825
mov dword [esp + 0x2c], edi
mov byte [esp + 0xf], 0
cmp byte [esp + 0xf], 0
je 0x46f7f7
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
sub eax, 4
neg eax
sbb eax, eax
xor edx, edx
inc eax
add eax, dword [esp + 0x1c]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
cmp ecx, eax
setge dl
mov dword [esp + 0x2c], edx
xor edx, edx
mov ecx, dword [esp + 0x1c]
imul ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
cmp ecx, eax
mov eax, dword [esp + 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x10]
setl cl
mov dword [esp + 0x2c], ecx
xor ecx, ecx
cmp dword [esp + 0x2c], eax
setg cl
add ecx, dword [esp + 0x10]
jne 0x46f878
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x2c], eax
test ecx, ecx
je 0x46f8a6
mov edx, dword [esp + 0x30]
call fcn.0046e0ce
mov esi, eax
lea eax, [esp + 0x78]
push eax
mov dword [esp + 0xa0], esi
call fcn.0046fb0b
mov dword [eax], esi
mov dword [esp + 8], 0xfffffff9
lea ecx, [esp + 0xf8]
mov dword [esp + 0x14], 0xfffffffb
mov dword [esp + 0x18], 0xfffffff6
push 3
call fcn.00434460
xor eax, eax
mov dword [esp + 0x14], eax
jmp 0x46f8e6
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0xf8]
mov dword [ecx + edx*4], eax
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 3
jl 0x46f8d4
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 8]
mov ecx, dword [esp + 8]
cmp edx, ecx
push 0
pop ecx
setge cl
sub dword [esp + 8], ecx
mov ecx, dword [esp + 8]
mov dword [esp + 0x14], ecx
cmp dword [esp + 0x14], eax
je 0x46f980
or ecx, 0xffffffff
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], 0xffff
mov dword [esp + 0x2c], 6
cmp dword [esp + 0x14], eax
je 0x46f942
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x18], 0x36378284
jge 0x46f946
mov eax, dword [esp + 8]
mov eax, dword [esp + 0x14]
xor ecx, ecx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 8]
mov eax, dword [esp + 8]
mov eax, dword [esp + 0x14]
neg eax
cmp eax, 0xa275
setl cl
sub ecx, dword [esp + 0x18]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [esp + 0x14], ecx
jmp 0x46fa7b
mov ecx, 0x7d7132c2
mov dword [esp + 0xa8], ecx
mov dword [esp + 0xac], ecx
mov dword [esp + 0xb0], ecx
mov dword [esp + 0xb4], ecx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x14], eax
jmp 0x46f9be
mov ecx, dword [esp + 0x14]
mov dword [esp + ecx*4 + 0x1b8], 0xfffffffa
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 4
jl 0x46f9ab
mov ecx, dword [esp + 0xb4]
xor edx, edx
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x14]
mov ecx, dword [esp + 8]
mov ecx, dword [esp + 0x14]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 8]
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x18]
test ecx, ecx
mov ecx, dword [esp + 0xb4]
setg dl
mov dword [esp + 0x2c], edx
xor edx, edx
cmp dword [esp + 0x2c], ecx
setge dl
xor ecx, ecx
cmp edx, 0x128b80b
setne cl
test ecx, ecx
jle 0x46fa1e
mov edx, edi
cmp dword [esp + 0x14], eax
jne 0x46fa20
mov edx, eax
mov ecx, dword [esp + 0x1c4]
sub edx, ecx
jne 0x46fa36
mov edx, eax
cmp dword [esp + 0xb0], eax
je 0x46fa38
mov edx, edi
mov ecx, dword [esp + 0xb4]
add ecx, edx
jne 0x46fa49
cmp dword [esp + 0x18], eax
je 0x46fa4b
mov eax, edi
mov ecx, dword [esp + 0xf8]
xor edx, edx
cmp eax, dword [ecx + 4]
mov ecx, 0xa0ede8b3
setg dl
cmp edx, edi
sbb eax, eax
inc eax
cmp ecx, eax
mov eax, dword [esp + 0x1c4]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0xf8]
call fcn.00434532
mov eax, dword [ebp + 8]
lea esi, [esp + 0x9c]
mov edi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov esp, ebp
pop ebp
ret