Function at 0x4320e1
Capabilities:
Allocate thread local storage
Enumerate gui resources
Get common file path
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x168
push ebx
push esi
push edi
push 2
pop ebx
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0xd8]
push ebx
mov byte [ebp - 0x39], dl
call fcn.00431d6e
push ebx
lea ecx, [ebp - 0xa8]
call fcn.00431d6e
xor eax, eax
mov dword [ebp - 0x10], 0xa42
mov dword [ebp - 0xc], eax
jmp 0x43212c
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xd8]
or dword [ecx + edx*4], 0xffffffff
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jl 0x43211c
mov dword [ebp - 0xc], eax
jmp 0x432146
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xa8]
or dword [ecx + edx*4], 0xffffffff
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jl 0x432136
mov esi, dword [ebp - 0xd8]
xor edi, edi
push 4
inc edi
pop ecx
mov dword [esi + 4], ebx
mov dword [ebp - 8], eax
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x432178
push eax
push 0x1f45
push eax
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
push 4
xor eax, eax
pop ecx
mov dword [ebp - 8], edi
jmp 0x43223a
mov dword [ebp - 0x18], edi
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0x18], eax
je 0x43218e
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xa8]
mov dword [ecx], 0xfffffff6
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x18]
je 0x4321a5
mov ecx, dword [ebp - 0x10]
cmp dword [esi + 4], 0xffffffff
mov ecx, dword [ebp - 0xa8]
sbb edx, edx
xor ebx, ebx
neg edx
cmp edx, dword [ecx]
setne bl
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0xc], 0xffffffeb
jmp 0x43222e
mov dword [ebp - 0x10], eax
jmp 0x43220f
mov dword [ebp - 0x18], eax
jmp 0x4321f5
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], eax
jmp 0x4321ed
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x4321ea
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jle 0x4321d8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x4321d0
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x43220c
push eax
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jle 0x4321cb
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x43222b
push 0xd18
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor eax, eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x19
jl 0x4321c6
dec dword [ebp - 8]
push 4
pop ecx
cmp dword [ebp - 8], 0xfffffff5
jle 0x432180
inc dword [esi + 4]
cmp dword [esi + 4], 0x10
push 4
pop ecx
jl 0x43215a
lea ecx, [ebp - 0xa8]
call fcn.00431e40
lea ecx, [ebp - 0xd8]
call fcn.00431e40
push 2
mov dword [ebp - 0x1c], 0x91a049fe
xor esi, esi
pop ebx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xfffffffd
je 0x4322df
xor eax, eax
inc esi
mov dword [ebp - 8], 0xfffffff9
mov dword [ebp - 8], eax
jmp 0x43229f
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x128], 0xfffa
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x43228e
mov dword [ebp - 8], eax
cmp dword [ebp - 8], eax
jl 0x4322d4
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x4322bd
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
xor eax, eax
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x4322cf
push eax
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
xor eax, eax
dec dword [ebp - 8]
jns 0x4322ac
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffd
jne 0x432282
jmp 0x4322e0
inc esi
push ebx
lea ecx, [ebp - 0x114]
call fcn.00431d6e
mov dword [ebp - 0x10], esi
xor eax, eax
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], 0xbe18a167
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x30], 0xfc51
mov dword [ebp - 0x28], 0xc83be768
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x14], esi
mov dword [ebp - 0xc], eax
jmp 0x43234a
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x114]
mov dword [ecx + edx*4], 0x55bb2c21
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jl 0x432337
mov dword [ebp - 0xc], eax
jmp 0x432362
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x74], 0x195c588c
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jl 0x432354
mov dword [ebp - 0x10], eax
mov ecx, 0xffff
cmp dword [ebp - 0x10], esi
jg 0x4323d3
mov esi, dword [ebp - 0x114]
xor edi, edi
inc edi
mov dword [ebp - 0x38], 0x3f0bc502
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], eax
jne 0x432398
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
xor ebx, ebx
cmp dword [esi + 4], edi
setl bl
xor edx, edx
cmp ecx, ebx
setl dl
xor ebx, ebx
cmp edx, dword [esi + 4]
setle bl
xor ecx, ecx
cmp ebx, 0x9a07
setle cl
mov dword [ebp - 0x38], ecx
mov ecx, 0xffff
mov dword [ebp - 0xc], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jle 0x43237d
xor esi, esi
inc esi
cmp dword [ebp - 0x1c], eax
jne 0x432443
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
add eax, 0x3f0d
cmp eax, 0x9656d292
sbb edx, edx
sub edx, 0x5830af35
add edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg bl
xor ecx, ecx
cmp ebx, eax
setl cl
imul ecx, dword [ebp - 0x14]
test ecx, ecx
jne 0x43242b
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x74]
dec dword [ebp - 0x74]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x114]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
sub eax, 0x8071c333
neg eax
sbb eax, eax
inc eax
imul eax, eax, 0xfff8
mov dword [ebp - 0x14], eax
call fcn.00431e40
mov ebx, dword [0x4aa5ec]
xor eax, eax
mov dword [ebp - 8], 0xebaeef20
mov dword [ebp - 0x38], ebx
mov dword [ebp - 8], eax
jmp 0x43248e
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x118], esi
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x432481
mov dword [ebp - 8], eax
jmp 0x4324eb
mov dword [ebp - 0x18], 0xfffffff9
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x18], eax
jmp 0x4324e3
mov dword [ebp - 0x10], 0x9b79
inc dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
jmp 0x4324db
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x4324d8
push eax
push eax
push 0x91a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x4324b9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x4324aa
inc dword [ebp - 8]
cmp dword [ebp - 8], eax
jle 0x432498
mov edi, dword [ebp + 8]
mov dword [ebp - 0xc], 0x5e48d327
mov dword [ebp - 0x20], 0xe5a9864b
mov dword [ebp - 8], 0x821342f3
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x19
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
je 0x432617
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x1c], 6
cmp dword [ebp - 0x18], eax
je 0x432538
cmp dword [ebp - 0xc], eax
jne 0x43253a
mov esi, eax
mov ecx, dword [ebp - 0xc]
xor ebx, ebx
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
cmp edx, ecx
setg bl
xor ecx, ecx
cmp ebx, 0xfffffffb
setg cl
xor ebx, ebx
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
cmp edx, ecx
setle bl
xor ecx, ecx
add ebx, 0xb5af
cmp esi, 0xfac1
mov dword [ebp - 0x1c], ebx
setne cl
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x20], 0x61940c9b
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x24], 0x2f1efae0
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], eax
je 0x4325d0
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
je 0x4325d0
xor ecx, ecx
inc ecx
jmp 0x4325d2
mov ecx, eax
mov dword [ebp - 0x1c], ecx
mov esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc]
sub esi, 0xfffffffa
neg esi
sbb esi, esi
xor edx, edx
inc esi
cmp esi, ecx
setne dl
mov dword [ebp - 0x24], edx
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x432604
push 0x1119
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
xor eax, eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x19
push 1
pop esi
jne 0x432520
mov ebx, dword [ebp - 0x38]
cmp byte [ebp - 0x39], 0
je 0x43275a
cmp ebx, esi
jne 0x43275a
push dword [ebp + 8]
movdqa xmm0, xmmword [0xa9bf20]
lea ecx, [ebp - 0x14c]
push ecx
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x80], eax
push ecx
push eax
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x7c], eax
movdqu xmmword [ebp - 0x15c], xmm0
mov dword [ebp - 0x78], eax
call fcn.00431eb1
push esi
lea ecx, [ebp - 0x14c]
call fcn.00431d6e
xor esi, esi
mov dword [ebp - 8], esi
inc esi
jmp 0x432683
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], 0x43b2b74c
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x432670
mov eax, dword [ebp - 0x80]
lea ecx, [ebp - 0x14c]
mov dword [eax + 4], 0xfffffff7
call fcn.00431e40
lea ecx, [ebp - 0x80]
call fcn.00431e40
push 4
pop eax
mov dword [ebp - 0x20], 0x4643cdf9
lea ecx, [ebp - 0x124]
mov dword [ebp - 0x14], 9
push 3
mov dword [edi + 8], eax
call fcn.00431d6e
push esi
lea ecx, [ebp - 0x140]
call fcn.00431d6e
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x4326e9
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x124]
or dword [ecx + edx*4], 0xffffffff
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x4326d9
mov dword [ebp - 0xc], eax
jmp 0x432707
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x140]
mov dword [ecx + edx*4], 0x51da622a
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x4326f4
mov dword [ebp - 0xc], eax
jmp 0x43271b
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x40], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x432711
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x20]
dec dword [ebp - 0x40]
sub edx, ecx
mov edx, esi
cmovne edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x14], ecx
lea ecx, [ebp - 0x140]
call fcn.00431e40
lea ecx, [ebp - 0x124]
call fcn.00431e40
mov dword [edi + 0xc], 0x4aa5ec
push 2
pop ebx
mov dword [ebp - 0xc], 0x4801897a
lea ecx, [ebp - 0x134]
push ebx
call fcn.00431d6e
mov dword [ebp - 0x14], esi
xor eax, eax
mov dword [ebp - 0x24], 0xdbfd33f1
mov dword [ebp - 8], eax
jmp 0x432794
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x134]
mov dword [ecx + edx*4], 0xfffffffb
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x432781
mov byte [ebp - 1], al
cmp byte [ebp - 1], al
je 0x4327ab
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
xor eax, eax
cmp dword [ebp - 0xc], eax
je 0x4328fb
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x14
jl 0x432929
mov dword [ebp - 0x1c], 0xc08872fa
lea ecx, [ebp - 0x8c]
push 3
call fcn.00431d6e
mov dword [ebp - 0x18], esi
xor eax, eax
mov dword [ebp - 0x20], 0x3f0d3ecf
mov dword [ebp - 0x24], 0xe7374489
mov dword [ebp - 8], eax
jmp 0x432803
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x8c]
mov dword [ecx + edx*4], 0xfffffff8
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x4327f0
cmp dword [ebp - 0x1c], eax
je 0x43283d
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x8c]
mov dword [ecx + 8], edx
mov dword [ebp - 0x18], edx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x1c]
neg edx
sub edx, ecx
neg edx
sbb edx, edx
inc edx
cmp dword [ebp - 0x10], edx
je 0x43283f
mov esi, eax
mov ecx, dword [ebp - 0x1c]
xor edx, edx
cmp esi, ecx
sete dl
cmp edx, 9
jb 0x4328c3
mov dword [ebp - 0x20], 0xfe2
mov dword [ebp - 0x14], 0x1a88af16
cmp dword [ebp - 0x10], eax
jne 0x43286a
cmp dword [ebp - 0x18], eax
jne 0x43286a
mov esi, eax
jmp 0x43286f
xor ecx, ecx
lea esi, [ecx + 1]
mov ecx, dword [ebp - 0x1c]
xor edx, edx
cmp esi, ecx
setle dl
xor ebx, ebx
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x8c]
cmp edx, dword [ecx]
mov ecx, dword [ebp - 0xc]
setne bl
mov dword [ebp - 0x14], ebx
xor ebx, ebx
cmp dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x24]
setl bl
xor edx, edx
cmp ebx, ecx
setle dl
mov dword [ebp - 0x14], edx
mov byte [ebp - 1], al
cmp byte [ebp - 1], al
je 0x4328cb
push eax
push 0x22b2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
jmp 0x4328cb
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jne 0x4328e8
lea ecx, [ebp - 0x8c]
call fcn.00431e40
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x14
push 1
pop esi
jge 0x4327c4
jmp 0x4328f3
lea ecx, [ebp - 0x8c]
call fcn.00431e40
xor esi, esi
push 2
inc esi
pop ebx
jmp 0x432929
mov dword [ebp - 8], ebx
cmp dword [ebp - 0xc], eax
jne 0x432919
mov eax, dword [ebp - 0xc]
xor ecx, ecx
cmp eax, esi
setl cl
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 8], 6
lea ecx, [ebp - 0x134]
call fcn.00431e40
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x2c], eax
jge 0x433403
mov dword [ebp - 0x20], esi
lea ecx, [ebp - 0xb4]
xor esi, esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x28], 0xfffffff7
push ebx
call fcn.00431d6e
mov dword [ebp - 0x34], 0x1a7a
xor ebx, ebx
inc ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 8], esi
jmp 0x432986
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 0xadb2bc40
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x432973
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setg dl
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x28], esi
jne 0x4329b1
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x24]
inc dword [ebp - 0x1c]
test eax, eax
je 0x4329b1
mov esi, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, ebx
mov eax, dword [ebp - 0x30]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xb4]
setge dl
xor ebx, ebx
add edx, esi
cmp edx, 0xe45db0ff
setne bl
xor ecx, ecx
cmp ebx, dword [eax]
setl cl
mov dword [eax], ecx
lea ecx, [ebp - 0xb4]
call fcn.00431e40
xor eax, eax
mov edi, 0x4aa5f0
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0x1c17c774
mov dword [ebp - 0x24], 0x1a83
mov dword [ebp - 0x18], edi
mov dword [ebp - 8], eax
jmp 0x432a1d
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x60], 0xfffffff8
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x432a0f
mov edx, dword [ebp - 0xc]
xor ebx, ebx
mov ecx, dword [ebp - 0xc]
cmp edx, ecx
mov ecx, dword [ebp - 0xc]
setg bl
imul ecx, dword [ebp - 0xc]
xor edx, edx
cmp ebx, ecx
setne dl
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0xfff9
je 0x432a56
cmp dword [ebp - 8], eax
je 0x432a56
xor esi, esi
inc esi
mov edx, esi
jmp 0x432a5b
xor esi, esi
mov edx, eax
inc esi
mov ecx, dword [ebp - 0xc]
imul ecx, edx
xor edx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0xc]
cmp edx, ecx
sbb ecx, ecx
neg ecx
cmp ecx, dword [ebp - 0xc]
jl 0x432a8b
mov byte [ebp - 1], al
cmp byte [ebp - 1], al
je 0x432aea
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
xor eax, eax
jmp 0x432aea
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], esi
jg 0x432aea
mov edi, 0xb8f2ba16
mov ecx, dword [ebp - 0xc]
cmp dword [ebp + ecx*4 - 0x60], eax
jne 0x432ab0
mov ecx, dword [ebp - 0xc]
cmp dword [ebp + ecx*4 - 0x60], 0x15d3
mov ecx, eax
jne 0x432ab2
mov ecx, esi
cmp edi, ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 8], ecx
je 0x432ac9
mov dword [ebp - 0x14], 0xac89d73a
mov dword [ebp - 0x14], esi
jmp 0x432ad3
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x14], 0xf3004570
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x60], edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jle 0x432a98
mov edi, 0x4aa5f0
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x432afb
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
xor eax, eax
cmp dword [ebp - 0x2c], 0
jle 0x432fa8
jmp 0x432b09
xor eax, eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x14], 0x1c17c774
mov dword [ebp - 0x24], 0x1a83
mov dword [ebp - 8], eax
jmp 0x432b30
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x68], 0xfffffff8
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x432b22
mov edx, dword [ebp - 0xc]
xor ebx, ebx
mov ecx, dword [ebp - 0xc]
cmp edx, ecx
mov ecx, dword [ebp - 0xc]
setg bl
imul ecx, dword [ebp - 0xc]
xor edx, edx
cmp ebx, ecx
setne dl
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0xfff9
je 0x432b64
mov edx, esi
cmp dword [ebp - 8], eax
jne 0x432b66
mov edx, eax
mov ecx, dword [ebp - 0xc]
imul ecx, edx
xor edx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0xc]
cmp edx, ecx
sbb ecx, ecx
neg ecx
cmp ecx, dword [ebp - 0xc]
jl 0x432b96
mov byte [ebp - 1], al
cmp byte [ebp - 1], dl
je 0x432bf3
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
xor eax, eax
jmp 0x432bf3
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], esi
jg 0x432bf3
mov edi, 0xb8f2ba16
mov ecx, dword [ebp - 0xc]
cmp dword [ebp + ecx*4 - 0x68], eax
jne 0x432bbb
mov ecx, dword [ebp - 0xc]
cmp dword [ebp + ecx*4 - 0x68], 0x15d3
mov ecx, eax
jne 0x432bbd
mov ecx, esi
cmp edi, ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 8], ecx
je 0x432bd4
mov dword [ebp - 0x14], 0xac89d73a
mov dword [ebp - 0x14], esi
jmp 0x432bde
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x14], 0xf3004570
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x68], edx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jle 0x432ba3
mov edi, dword [ebp - 0x18]
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x432c04
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
xor eax, eax
mov ecx, dword [edi]
mov dword [ebp - 0x18], 0xcaf1
mov dword [ebp - 0x14], 0xe57f6cc9
mov dword [ebp - 0x28], 0x4956e74e
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], 0xf63588c5
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x24], 7
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x24], 0x3d1f0dfb
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], 0xcac31e13
push 3
call fcn.00431d6e
mov dword [ebp - 0x10], 0xb7c39c9d
xor eax, eax
mov dword [ebp - 0x24], 0x373c
mov dword [ebp - 8], eax
jmp 0x432c8d
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x108]
mov dword [ecx + edx*4], 0xfffffffb
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x432c7a
mov ecx, dword [ebp - 0x18]
xor ebx, ebx
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
cmp ecx, edx
mov ecx, dword [ebp - 0x10]
setl bl
inc dword [ebp - 0x10]
cmp ecx, ebx
mov ecx, dword [ebp - 0x28]
push 4
cmovg esi, eax
xor edx, edx
cmp esi, ecx
setl dl
xor ebx, ebx
mov dword [ebp - 8], edx
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
cmp edx, ecx
mov edx, dword [ebp - 0x18]
setle bl
pop ecx
cmp ecx, ebx
mov ecx, dword [ebp - 0x18]
sbb esi, esi
xor ebx, ebx
inc esi
cmp edx, ecx
setne bl
xor ecx, ecx
cmp ebx, esi
setne cl
xor edx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x1c]
cmp dword [ebp - 0x14], ecx
setne dl
mov dword [ebp - 0x10], edx
mov edx, 0xffff
mov ecx, dword [ebp - 0x10]
cmp edx, ecx
mov ecx, dword [ebp - 0x108]
sbb edx, edx
neg edx
imul edx, dword [ecx + 8]
mov ecx, dword [ebp - 0x30]
add ecx, edx
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 0x30]
cmp ecx, 0xa9cb
setg dl
xor ecx, ecx
inc ecx
xor ebx, ebx
cmp edx, ecx
mov ecx, dword [ebp - 0xc]
setg bl
xor edx, edx
cmp ebx, ecx
mov ecx, dword [ebp - 0x24]
setle dl
mov dword [ebp - 0x14], edx
xor edx, edx
cmp dword [ebp - 0x14], ecx
setle dl
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], 2
cmp dword [ebp - 0x10], eax
jl 0x432d76
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x432d71
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
dec dword [ebp - 0x10]
jns 0x432d60
lea ecx, [ebp - 0x108]
call fcn.00431e40
push 4
pop eax
add edi, eax
lea ecx, [ebp - 0xf0]
xor esi, esi
push 3
mov ebx, dword [edi]
add edi, eax
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], 0xffffffff
call fcn.00431d6e
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x432dc0
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0xf0]
mov dword [ecx + edx*4], 0x2c9ebf49
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x432dad
mov dword [ebp - 0xc], eax
jmp 0x432dd3
cmp dword [ebp - 0xc], eax
jne 0x432dd9
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x14
jg 0x432dcb
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 8
jne 0x432e40
mov esi, dword [ebp - 0xf0]
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x20], 0xfffffff7
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x432e08
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
xor eax, eax
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov dword [ebp - 0x28], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
test ecx, ecx
sets dl
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x20]
mov dword [esi + 4], ecx
mov ecx, dword [ebp - 0xc]
mov ecx, dword [esi + 4]
mov dword [ebp - 0x20], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 8
je 0x432de8
lea ecx, [ebp - 0xf0]
call fcn.00431e40
test ebx, ebx
jne 0x432e52
add edi, 8
push 4
pop ebx
push ebx
lea ecx, [ebp - 0x58]
call fcn.00431d6e
xor esi, esi
inc esi
xor eax, eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 8], eax
jmp 0x432e7b
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x58]
mov dword [ecx + edx*4], 9
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x432e6b
mov ecx, dword [ebp - 0x58]
xor ebx, ebx
mov edx, dword [ecx + 0xc]
cmp dword [ecx], edx
setg bl
sub ebx, dword [ecx]
neg ebx
sbb ebx, ebx
inc ebx
sub ebx, edx
je 0x432eb2
mov byte [ebp - 1], al
cmp byte [ebp - 1], al
je 0x432f91
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
jmp 0x432f91
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x14], esi
push 2
call fcn.00431d6e
xor eax, eax
mov dword [ebp - 0x24], 0xdba5
mov dword [ebp - 8], eax
jmp 0x432ee6
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x9c]
mov dword [ecx + edx*4], 6
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x432ed3
mov ecx, dword [ebp - 0x58]
cmp dword [ecx], eax
je 0x432ef8
cmp dword [ecx + 4], eax
jne 0x432efa
mov esi, eax
mov ecx, dword [ebp - 0x10]
cmp dword [ebp - 0x14], eax
jne 0x432f0d
mov ecx, dword [ebp - 0x58]
cmp dword [ecx], eax
jne 0x432f0d
mov ecx, eax
jmp 0x432f10
xor ecx, ecx
inc ecx
xor edx, edx
cmp esi, 0x1465ee6
sete dl
add ecx, 0xffffa0b7
imul edx, ecx
mov ecx, dword [ebp - 0x9c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
sub ecx, edx
je 0x432f4e
mov dword [ebp - 0x14], 0xe29a
mov dword [ebp - 0x24], 0xffffffff
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x24], ecx
jmp 0x432f65
mov byte [ebp - 1], al
cmp byte [ebp - 1], al
je 0x432f65
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x432f7d
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x9c]
mov dword [eax + ecx*4], 0xba430906
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x432f6a
lea ecx, [ebp - 0x9c]
call fcn.00431e40
xor esi, esi
inc esi
lea ecx, [ebp - 0x58]
call fcn.00431e40
add edi, dword [ebp - 0x34]
dec dword [ebp - 0x2c]
mov dword [ebp - 0x18], edi
jne 0x432b07
push 4
pop eax
push 3
mov dword [ebp - 0x28], 0xfb63
lea ecx, [ebp - 0xfc]
pop ebx
mov dword [ebp - 0x10], 0xfffffff6
xor esi, esi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x34], esi
push ebx
call fcn.00431d6e
mov dword [ebp - 0x1c], 0x2152
xor eax, eax
mov dword [ebp - 0x20], 9
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x24], 0xcadcda6a
mov dword [ebp - 0x24], eax
mov dword [ebp - 8], eax
jmp 0x43300d
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0xfc]
or dword [ecx + edx*4], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x432ffd
cmp dword [ebp - 0x28], eax
je 0x433057
dec dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x34]
jl 0x433041
mov esi, dword [ebp - 0x2c]
xor edx, edx
mov ecx, dword [ebp - 0x2c]
add esi, 9
cmp esi, ecx
setne dl
imul ecx, edx, 0x4326
test ecx, ecx
je 0x433041
xor ecx, ecx
inc ecx
jmp 0x433043
mov ecx, eax
imul edx, ecx, 0xfa48
mov ecx, dword [ebp - 0xfc]
mov dword [ecx], edx
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x20], 0x324015fb
mov dword [ebp - 0x10], 0x1a
cmp dword [ebp - 0x10], eax
jl 0x4330c8
mov dword [ebp - 8], 0xffffffff
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
test eax, eax
mov eax, dword [ebp - 0x14]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
imul ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
imul ecx, ecx, 9
cmp ecx, eax
setge dl
sub edx, dword [ebp - 8]
neg edx
sbb edx, edx
inc edx
imul eax, edx, 0x6309
inc eax
sub eax, dword [ebp - 8]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x10]
jns 0x43306d
lea ecx, [ebp - 0xfc]
call fcn.00431e40
mov edi, dword [edi]
xor eax, eax
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 8], eax
jmp 0x4330f4
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x168], 0x5596
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x4330e3
mov byte [ebp - 1], al
cmp byte [ebp - 1], al
je 0x433112
push eax
push 0x9c5
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xor eax, eax
mov ecx, dword [ebp - 0x168]
xor ebx, ebx
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x34], ecx
push 4
pop ecx
add esi, ecx
inc ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x18], esi
mov dword [ebp - 8], eax
jmp 0x433176
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x43315b
push eax
push 0xd68
push 0x892
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
xor eax, eax
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
je 0x433173
push 0xc13
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
xor eax, eax
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xffffffef
jne 0x433131
mov eax, dword [esi]
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x1c], 0xffffffff
push ebx
mov dword [ebp - 0x14], eax
call fcn.00431d6e
mov dword [ebp - 0x20], 0x8593f9be
xor esi, esi
mov dword [ebp - 0x28], 0x7a9d2e81
mov dword [ebp - 0x30], 0xeaa3e8f0
mov dword [ebp - 0x2c], 0xa5616d21
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 8], esi
jmp 0x4331d1
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], 0xe923e64f
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x4331be
mov ecx, dword [ebp - 0x1c]
xor ebx, ebx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc0]
setl bl
xor edx, edx
neg ebx
mov dword [eax], ebx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp edx, 0xa61bf079
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setge cl
xor edx, edx
cmp ecx, 0xcb27
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
add ecx, 2
test ecx, ecx
setg dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x28]
setne cl
xor edx, edx
cmp ecx, eax
setge dl
xor eax, eax
sub edx, 5
cmp edx, 0x5b689063
setge al
xor ecx, ecx
add eax, 0x547507a
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, 0x77e0
setne cl
mov dword [ebp - 0x2c], ecx
cmp ebx, dword [ebp - 0x2c]
jg 0x433281
cmp dword [ebp - 0x2c], esi
je 0x433281
xor eax, eax
inc eax
jmp 0x433283
mov eax, esi
xor ecx, ecx
inc ecx
cmp ecx, eax
lea ecx, [ebp - 0xc0]
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
call fcn.00431e40
mov ebx, dword [ebp - 0x18]
xor ecx, ecx
push 4
pop edx
add ebx, edx
mov dword [ebp - 0x10], 0xfe0a8eac
mov dword [ebp - 8], esi
inc ecx
jmp 0x4332be
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x90], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x4332b1
mov dword [ebp - 0x10], 9
cmp dword [ebp - 0x10], 0xffffffef
jg 0x433324
push ecx
lea ecx, [ebp - 0xcc]
call fcn.00431d6e
xor edx, edx
mov dword [ebp - 8], esi
inc edx
jmp 0x4332f7
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0xcc]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x4332e4
mov eax, dword [ebp - 0xcc]
lea ecx, [ebp - 0xcc]
mov eax, dword [eax]
mov dword [ebp - 0x90], eax
call fcn.00431e40
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffef
push 1
pop ecx
jle 0x4332d0
push 4
pop edx
mov dword [ebp - 0x10], 0xffffffff
cmp dword [ebp - 0x14], esi
jne 0x433407
cmp byte [ebp - 0x39], 0
je 0x433348
cmp dword [ebp - 0x38], ecx
jne 0x433348
mov ecx, dword [ebp + 8]
lea eax, [edi + 0x10]
add dword [ecx + 8], eax
mov eax, dword [ebx]
add ebx, edx
mov dword [ebp - 0x34], eax
push edi
mov eax, dword [ebx]
add ebx, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], ebx
call fcn.00483d7e
mov dword [ebp - 0x20], eax
xor eax, eax
pop ecx
mov dword [ebp - 0x6c], eax
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x6c]
push eax
push edi
call fcn.00467d44
xor esi, esi
mov ecx, esi
test edi, edi
jle 0x4333dc
mov eax, ecx
and eax, 0x80000001
jns 0x433394
dec eax
or eax, 0xfffffffe
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x34]
add eax, ecx
add eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x14]
cdq
idiv edi
mov eax, dword [ebp - 0x4c]
cmp word [eax + edx*2], si
je 0x4333c4
mov ebx, eax
lea eax, [edx + 1]
cdq
idiv edi
cmp word [ebx + edx*2], si
jne 0x4333b2
mov ebx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
xor esi, esi
inc esi
mov word [eax + edx*2], si
mov al, byte [edx + ebx]
mov edx, dword [ebp - 0x20]
push 0
pop esi
mov byte [ecx + edx], al
inc ecx
cmp ecx, edi
jl 0x433386
mov eax, dword [ebp + 8]
mov dword [eax], edi
mov edi, dword [ebp + 8]
mov eax, dword [ebp - 0x20]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x43340a
push eax
call fcn.00485266
pop ecx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x44], esi
jmp 0x43340a
xor esi, esi
jmp 0x43340a
mov edi, dword [ebp + 8]
xor eax, eax
lea ecx, [ebp - 0xe4]
inc eax
mov dword [ebp - 0x20], eax
mov dword [ebp + 8], esi
mov dword [ebp - 0x28], 0xfffffff7
push 2
call fcn.00431d6e
xor esi, esi
mov dword [ebp + 8], 0x1a7a
inc esi
xor eax, eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], esi
mov dword [ebp + 8], eax
jmp 0x433454
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0xe4]
mov dword [ecx + edx*4], 0xadb2bc40
inc dword [ebp + 8]
cmp dword [ebp + 8], 2
jl 0x433441
mov edx, dword [ebp - 0x20]
xor ebx, ebx
mov ecx, dword [ebp - 0x20]
cmp edx, ecx
setg bl
mov dword [ebp + 8], ebx
cmp dword [ebp - 0x28], eax
jne 0x43347f
mov ecx, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x34]
inc dword [ebp - 0x38]
test ecx, ecx
je 0x43347f
mov eax, esi
mov ecx, dword [ebp - 0x28]
xor edx, edx
cmp ecx, esi
mov ecx, dword [ebp - 0x14]
setle dl
xor ebx, ebx
cmp edx, ecx
mov ecx, dword [ebp - 0xe4]
setge bl
add ebx, eax
xor eax, eax
cmp ebx, 0xe45db0ff
setne al
xor edx, edx
cmp eax, dword [ecx]
setl dl
mov dword [ecx], edx
lea ecx, [ebp - 0xe4]
call fcn.00431e40
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret