Function at 0x42d170
Capabilities:
Accept command line arguments
Connect pipe
Create pipe
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb70
push esi
mov dword [ebp - 0x138], 1
mov dword [ebp - 0xa30], 0x8bac04ee
push 2
lea ecx, [ebp - 0xa24]
call fcn.00432b0d
push 1
lea ecx, [ebp - 0x908]
call fcn.00432b0d
mov dword [ebp - 0x24], 0
jmp 0x42d1b8
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x42d1ce
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb64], 1
jmp 0x42d1b1
mov dword [ebp - 0x24], 0
jmp 0x42d1de
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x42d1fa
push dword [ebp - 0x24]
lea ecx, [ebp - 0xa24]
call fcn.00432bfb
mov dword [eax], 0x405b4019
jmp 0x42d1d7
mov dword [ebp - 0x24], 0
jmp 0x42d20a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x42d226
push dword [ebp - 0x24]
lea ecx, [ebp - 0x908]
call fcn.00432bfb
mov dword [eax], 0x1867b8f5
jmp 0x42d203
mov dword [ebp - 0x138], 2
jmp 0x42d23f
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jl 0x42d266
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x42d264
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
jmp 0x42d232
push 0
lea ecx, [ebp - 0x908]
call fcn.00432bfb
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x4dc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4dc]
mov dword [ecx], eax
lea ecx, [ebp - 0x908]
call fcn.00432bdf
lea ecx, [ebp - 0xa24]
call fcn.00432bdf
and dword [ebp - 0x44], 0
push 3
lea ecx, [ebp - 0x1f4]
call fcn.00432b0d
mov dword [ebp - 0x20], 0x6aabecba
mov dword [ebp - 0x6dc], 0xffffffff
mov dword [ebp - 0x19c], 0
jmp 0x42d2db
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jge 0x42d2fd
push dword [ebp - 0x19c]
lea ecx, [ebp - 0x1f4]
call fcn.00432bfb
mov dword [eax], 0x313dd33a
jmp 0x42d2ce
mov dword [ebp - 0x20], 2
jmp 0x42d30d
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x42d541
mov dword [ebp - 0x784], 0x17245c2f
mov dword [ebp - 0x6cc], 0xfffffffc
mov dword [ebp - 0xec], 0x4433ac25
mov dword [ebp - 0x78c], 0xf0bd907c
mov dword [ebp - 0x794], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.00432bfb
mov esi, eax
push 2
lea ecx, [ebp - 0x1f4]
call fcn.00432bfb
mov ecx, dword [esi]
add ecx, dword [eax]
jne 0x42d4b2
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.00432bfb
mov esi, eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.00432bfb
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x42d3b3
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.00432bfb
cmp dword [eax], 0
je 0x42d3b3
mov dword [ebp - 0x76c], 1
jmp 0x42d3ba
and dword [ebp - 0x76c], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.00432bfb
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.00432bfb
cmp dword [eax], 0
jne 0x42d3f2
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.00432bfb
cmp dword [eax], 0
jne 0x42d3f2
cmp dword [ebp - 0x20], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.00432bfb
cmp dword [eax], 0xec46bc22
jae 0x42d414
mov dword [ebp - 0x6c4], 1
jmp 0x42d41b
and dword [ebp - 0x6c4], 0
push 1
lea ecx, [ebp - 0x1f4]
call fcn.00432bfb
mov ecx, dword [ebp - 0x6c4]
cmp ecx, dword [eax]
jge 0x42d43e
mov dword [ebp - 0x1f8], 1
jmp 0x42d445
and dword [ebp - 0x1f8], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1f4]
call fcn.00432bfb
mov ecx, dword [ebp - 0x1f8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x784], eax
mov dword [ebp - 0x6cc], 0x1031
cmp dword [ebp - 0x6cc], 0xfffffffb
jl 0x42d486
mov dword [ebp - 0x6d4], 1
jmp 0x42d48d
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x6dc], eax
cmp dword [ebp - 0x6dc], 0
jne 0x42d4b2
and dword [ebp - 0x58c], 0
jmp 0x42d4bc
mov dword [ebp - 0x58c], 1
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x58c], eax
je 0x42d4d6
mov dword [ebp - 0x518], 1
jmp 0x42d4dd
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x518], eax
jne 0x42d4f7
mov dword [ebp - 0x288], 1
jmp 0x42d4fe
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xec]
sub eax, dword [ebp - 0x78c]
cmp eax, 0xf1d8987f
jb 0x42d529
mov dword [ebp - 0x520], 1
jmp 0x42d530
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x794], eax
jmp 0x42d306
lea ecx, [ebp - 0x1f4]
call fcn.00432bdf
mov dword [ebp - 0x8fc], 0xbd94543b
mov dword [ebp - 0x8f8], 0xbd94543b
mov dword [ebp - 0x8f4], 0xbd94543b
mov dword [ebp - 0x8f0], 0xbd94543b
lea ecx, [ebp - 0x249]
call fcn.00432c0a
push eax
lea eax, [ebp - 0x8ec]
push eax
lea eax, [ebp - 0x8fc]
push eax
lea ecx, [ebp - 0xb50]
call fcn.00432c0d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa3c]
call fcn.00432bb9
mov dword [ebp - 0x528], 0x6ce0
mov dword [ebp - 0x200], 0x43af7806
mov dword [ebp - 0x258], 0xfffffffa
mov dword [ebp - 0x7f8], 0x88dcfd8f
mov dword [ebp - 0x140], 0
jmp 0x42d5ea
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x42d606
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x278], 0x4469
jmp 0x42d5dd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x278]
cmp dword [ebp - 0x528], eax
jg 0x42d627
mov dword [ebp - 0x290], 1
jmp 0x42d62e
and dword [ebp - 0x290], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x278]
cmp eax, dword [ebp - 0x290]
jl 0x42d64f
mov dword [ebp - 0x79c], 1
jmp 0x42d656
and dword [ebp - 0x79c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x278]
mov dword [ebp - 0xac4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x278], 0xab97
jle 0x42d687
mov dword [ebp - 0x7a4], 1
jmp 0x42d68e
and dword [ebp - 0x7a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x278]
mov dword [ebp - 0x9fc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x278]
mov dword [ebp - 0xacc], eax
mov dword [ebp - 0x200], 0x48dc
cmp dword [ebp - 0x200], 0
je 0x42d6d3
xor eax, eax
jne 0x42d6d3
and dword [ebp - 0x7f0], 0
jmp 0x42d6dd
mov dword [ebp - 0x7f0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x278]
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0xb08], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x278]
cmp dword [ebp - 0x200], eax
jne 0x42d71d
mov dword [ebp - 0x530], 1
jmp 0x42d724
and dword [ebp - 0x530], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x278]
mov dword [ebp - 0x298], eax
push 0
lea ecx, [ebp - 0xa3c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x298]
mov dword [eax], ecx
mov eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0x530]
jg 0x42d766
mov dword [ebp - 0x2a0], 1
jmp 0x42d76d
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
je 0x42d797
cmp dword [ebp - 0x258], 0
je 0x42d797
mov dword [ebp - 0x538], 1
jmp 0x42d79e
and dword [ebp - 0x538], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x538]
sub ecx, dword [ebp + eax - 0x278]
mov dword [ebp - 0x7f8], ecx
lea ecx, [ebp - 0xa3c]
call fcn.00432bdf
mov dword [ebp - 0x8e8], 9
mov dword [ebp - 0x8e4], 9
mov dword [ebp - 0x8e0], 9
mov dword [ebp - 0x8dc], 9
lea ecx, [ebp - 0x241]
call fcn.00432c0a
push eax
lea eax, [ebp - 0x8d8]
push eax
lea eax, [ebp - 0x8e8]
push eax
lea ecx, [ebp - 0xb48]
call fcn.00432c0d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa4c]
call fcn.00432bb9
mov dword [ebp - 0x11c], 0xd4081c29
mov dword [ebp - 0x11c], 0
jmp 0x42d842
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jg 0x42d952
mov dword [ebp - 0x1a4], 0
jmp 0x42d868
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jge 0x42d884
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x72c], 0xffffffff
jmp 0x42d85b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x72c], 0
jmp 0x42d8b2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x72c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x72c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x72c], 3
jg 0x42d94d
mov dword [ebp - 0x148], 0
push dword [ebp - 0x11c]
lea ecx, [ebp - 0xa4c]
call fcn.00432bfb
cmp dword [eax], 0
je 0x42d8e8
jmp 0x42d94d
mov dword [ebp - 0x148], 3
jmp 0x42d901
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jl 0x42d948
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x42d929
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
mov byte [ebp - 0x6e], 0
movzx eax, byte [ebp - 0x6e]
test eax, eax
je 0x42d946
push 0xd89
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreatePipe]
jmp 0x42d8f4
jmp 0x42d897
jmp 0x42d835
lea ecx, [ebp - 0xa4c]
call fcn.00432bdf
mov dword [ebp - 0x800], 3
mov dword [ebp - 0xa0c], 0xfffffff9
mov dword [ebp - 0xad0], 1
mov dword [ebp - 0xa40], 0x3629aa8
mov dword [ebp - 0xaf8], 0
mov dword [ebp - 0xb20], 0x66c93ee3
mov dword [ebp - 0xb1c], 0x66c93ee3
mov dword [ebp - 0xb18], 0x66c93ee3
mov dword [ebp - 0xb14], 0x66c93ee3
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x800], 0x24a8c6a5
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0xd8], 0xd5e48d32
push 2
lea ecx, [ebp - 0x950]
call fcn.00432b0d
mov dword [ebp - 0x2d8], 0x8d955a61
mov dword [ebp - 0x238], 0xfffffff9
mov dword [ebp - 0x1ac], 0
jmp 0x42da25
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x42da47
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0x950]
call fcn.00432bfb
mov dword [eax], 1
jmp 0x42da18
mov dword [ebp - 0xd8], 0
jmp 0x42da60
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x12
jg 0x42df35
push 2
lea ecx, [ebp - 0x89c]
call fcn.00432b0d
push 3
lea ecx, [ebp - 0x968]
call fcn.00432b0d
mov dword [ebp - 8], 0
jmp 0x42da97
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x42daad
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x8c0], 1
jmp 0x42da90
mov dword [ebp - 8], 0
jmp 0x42dabd
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x42dad0
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x3c], 1
jmp 0x42dab6
mov dword [ebp - 8], 0
jmp 0x42dae0
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x42daf6
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xa2c], 0x19c2b2e5
jmp 0x42dad9
mov dword [ebp - 8], 0
jmp 0x42db06
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x42db22
push dword [ebp - 8]
lea ecx, [ebp - 0x89c]
call fcn.00432bfb
mov dword [eax], 0x7dc23988
jmp 0x42daff
mov dword [ebp - 8], 0
jmp 0x42db32
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x42db4e
push dword [ebp - 8]
lea ecx, [ebp - 0x968]
call fcn.00432bfb
mov dword [eax], 0x13633e7a
jmp 0x42db2b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3c], 3
jmp 0x42db73
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0
jl 0x42df1a
mov dword [ebp - 0xf4], 0xc3707822
mov dword [ebp - 0xf4], 0
jmp 0x42dba7
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jg 0x42dd97
mov dword [ebp - 0xc4], 0xffffffff
mov dword [ebp - 0x808], 0x76e1ee67
mov byte [ebp - 0x6f], 0
movzx eax, byte [ebp - 0x6f]
test eax, eax
je 0x42dbfa
push 0
push 0
push 0
push 0x1a3f
push 0xe5d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
mov dword [ebp - 0xc4], 0
jmp 0x42dc13
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jg 0x42dd92
mov dword [ebp - 0x78], 0x5fac1226
mov dword [ebp - 0x78], 0
jmp 0x42dc37
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jg 0x42dd8d
mov eax, dword [ebp - 0x78]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3c]
cmp dword [ebp + eax*4 - 0x8c0], ecx
jle 0x42dd75
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x540]
mov dword [ebp + eax*4 - 0x8c0], ecx
cmp dword [ebp - 0x540], 0
jne 0x42dcfd
cmp dword [ebp - 0x78], 0
je 0x42dc9b
cmp dword [ebp - 0xc4], 0
je 0x42dc9b
mov dword [ebp - 0x2b0], 1
jmp 0x42dca2
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x2b0], eax
jne 0x42dcbc
mov dword [ebp - 0x548], 1
jmp 0x42dcc3
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xa50], eax
push 1
lea ecx, [ebp - 0x950]
call fcn.00432bfb
mov ecx, dword [ebp - 0x548]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8c0], 0
jne 0x42dcfd
and dword [ebp - 0x2b8], 0
jmp 0x42dd07
mov dword [ebp - 0x2b8], 1
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x2b8], eax
jg 0x42dd21
mov dword [ebp - 0x550], 1
jmp 0x42dd28
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 0x9a8551b3
jne 0x42dd4d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0
je 0x42dd4d
mov dword [ebp - 0x2c0], 1
jmp 0x42dd54
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x808], eax
mov eax, 0x8eb16e2c
test eax, eax
je 0x42dd75
mov dword [ebp - 0x558], 1
jmp 0x42dd7c
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x2d8], eax
jmp 0x42dc30
jmp 0x42dc06
jmp 0x42db9a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp + eax*4 - 0x8c0], 0
je 0x42def9
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xa2c], 0
xor eax, eax
jne 0x42ddd0
mov dword [ebp - 0x570], 1
jmp 0x42ddd7
and dword [ebp - 0x570], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0x2c8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp + eax - 0x8c0], ecx
cmp dword [ebp - 0x2c8], 0
je 0x42de42
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x238], eax
jle 0x42de21
mov dword [ebp - 0x560], 1
jmp 0x42de28
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x560], eax
jne 0x42de42
mov dword [ebp - 0x2d0], 1
jmp 0x42de49
and dword [ebp - 0x2d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp eax, dword [ebp - 0x2d0]
jg 0x42de67
mov dword [ebp - 0x208], 1
jmp 0x42de6e
and dword [ebp - 0x208], 0
push 0
lea ecx, [ebp - 0x89c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x208]
mov dword [eax], ecx
cmp dword [ebp - 0x208], 0xffffffff
jl 0x42de98
mov dword [ebp - 0x568], 1
jmp 0x42de9f
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x2d8], eax
push 0
lea ecx, [ebp - 0x89c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x570]
cmp ecx, dword [eax]
jl 0x42dece
mov dword [ebp - 0x2e0], 1
jmp 0x42ded5
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
sub eax, dword [ebp - 0x238]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3c]
jge 0x42def9
mov dword [ebp - 0x578], 1
jmp 0x42df00
and dword [ebp - 0x578], 0
push 2
lea ecx, [ebp - 0x968]
call fcn.00432bfb
mov ecx, dword [ebp - 0x578]
mov dword [eax], ecx
jmp 0x42db5e
lea ecx, [ebp - 0x968]
call fcn.00432bdf
lea ecx, [ebp - 0x89c]
call fcn.00432bdf
jmp 0x42da53
lea ecx, [ebp - 0x950]
call fcn.00432bdf
mov eax, dword [ebp - 0x214]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x42e502
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x5b8], 1
mov dword [ebp - 0x4c], 0
jmp 0x42df78
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x42df8e
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x6bc], 0xb101aae4
jmp 0x42df71
mov dword [ebp - 0x4c], 0
jmp 0x42df9e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x42dfb4
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x5b0], 0x64b5c6f8
jmp 0x42df97
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6bc]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x6bc]
cmp eax, dword [ebp - 0x114]
jge 0x42dfef
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6bc], 0
jne 0x42dfef
and dword [ebp - 0x580], 0
jmp 0x42dff9
mov dword [ebp - 0x580], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6bc]
neg eax
mov dword [ebp - 0x2e8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp + eax - 0x5b0], ecx
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x580]
jne 0x42e03b
mov dword [ebp - 0x2f0], 1
jmp 0x42e042
and dword [ebp - 0x2f0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6bc]
imul eax, dword [ebp - 0x2f0]
test eax, eax
je 0x42e063
cmp dword [ebp - 0x114], 0
jne 0x42e075
cmp dword [ebp - 0x5b8], 0
jne 0x42e075
and dword [ebp - 0x5a8], 0
jmp 0x42e07f
mov dword [ebp - 0x5a8], 1
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x5a8]
jge 0x42e099
mov dword [ebp - 0x2f8], 1
jmp 0x42e0a0
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x2f8]
jle 0x42e0ba
mov dword [ebp - 0x810], 1
jmp 0x42e0c1
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xad8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5b0]
mov dword [ebp - 0xa60], eax
mov eax, 0xcefb
cmp eax, 0xbc1b
jne 0x42e0f8
mov dword [ebp - 0x300], 1
jmp 0x42e0ff
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x2c], 0xe83c7730
mov dword [ebp - 0xfc], 0x3b16aac8
mov dword [ebp - 0x68], 0x7fb07d0
mov dword [ebp - 0x210], 0x67bc620
push 1
lea ecx, [ebp - 0xa5c]
call fcn.00432b0d
mov dword [ebp - 0x28], 0
jmp 0x42e14a
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x42e160
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x6ec], 0xfffffffe
jmp 0x42e143
mov dword [ebp - 0x28], 0
jmp 0x42e170
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x42e186
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x124], 0xffffffff
jmp 0x42e169
mov dword [ebp - 0x28], 0
jmp 0x42e196
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x42e1b2
push dword [ebp - 0x28]
lea ecx, [ebp - 0xa5c]
call fcn.00432bfb
mov dword [eax], 0xfff9
jmp 0x42e18f
mov dword [ebp - 0x2c], 2
jmp 0x42e1c2
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x42e21e
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x6ec], 0x8cb4
jl 0x42e1e4
mov dword [ebp - 0x308], 1
jmp 0x42e1eb
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x308], eax
jl 0x42e202
mov dword [ebp - 0x5c0], 1
jmp 0x42e209
and dword [ebp - 0x5c0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp + eax - 0x124], ecx
jmp 0x42e1bb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
mov dword [ebp - 0x310], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x310]
mov dword [ebp + eax - 0x124], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x310], eax
je 0x42e261
mov dword [ebp - 0x5d0], 1
jmp 0x42e268
and dword [ebp - 0x5d0], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x6ec], 0
jne 0x42e29c
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0x6ec], 0xffffffff
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jne 0x42e29c
cmp dword [ebp - 0xfc], 0
je 0x42e2b1
cmp dword [ebp - 0xfc], 0
je 0x42e2b1
mov dword [ebp - 0x5c8], 1
jmp 0x42e2b8
and dword [ebp - 0x5c8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5c8]
sub ecx, dword [ebp + eax - 0x6ec]
neg ecx
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x6ec]
je 0x42e2e7
mov dword [ebp - 0x318], 1
jmp 0x42e2ee
and dword [ebp - 0x318], 0
cmp dword [ebp - 0x318], 0x372ba29f
jle 0x42e306
mov dword [ebp - 0x320], 1
jmp 0x42e30d
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x5d0]
cmp eax, dword [ebp - 0x320]
je 0x42e327
mov dword [ebp - 0x5d8], 1
jmp 0x42e32e
and dword [ebp - 0x5d8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6ec]
cmp dword [ebp - 0x5d8], eax
jne 0x42e34e
mov dword [ebp - 0x328], 1
jmp 0x42e355
and dword [ebp - 0x328], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6ec]
add eax, dword [ebp - 0x328]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x6ec]
jg 0x42e382
mov dword [ebp - 0x5e0], 1
jmp 0x42e389
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x42e3a5
cmp dword [ebp - 0xfc], 0
je 0x42e489
mov dword [ebp - 0x250], 0xfffffff9
mov dword [ebp - 0x80], 0xffffffff
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x68], 0xdd4d14b7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
cmp dword [ebp - 0x68], eax
jge 0x42e3e8
mov dword [ebp - 0x330], 1
jmp 0x42e3ef
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x250]
cmp eax, dword [ebp - 0x330]
jle 0x42e45b
cmp dword [ebp - 0x80], 0xd4daed0f
jne 0x42e412
mov dword [ebp - 0x5e8], 1
jmp 0x42e419
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x5e8], eax
jg 0x42e430
mov dword [ebp - 0x338], 1
jmp 0x42e437
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x210]
imul eax, dword [ebp - 0x338]
sub eax, dword [ebp - 0x250]
cmp eax, dword [ebp - 0x80]
jg 0x42e45b
mov dword [ebp - 0x5f0], 1
jmp 0x42e462
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x250]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x124], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x80], eax
jmp 0x42e4f0
mov dword [ebp - 0x68], 2
jmp 0x42e499
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x42e4de
mov dword [ebp - 0x2c], 2
jmp 0x42e4af
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x42e4dc
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x42e4da
push 0x22df
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x42e4a8
jmp 0x42e492
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x42e4f0
call dword [sym.imp.USER32.dll_GetMessageTime]
lea ecx, [ebp - 0xa5c]
call fcn.00432bdf
xor eax, eax
jmp 0x43243b
mov dword [ebp - 0xb24], 0xfffffffe
mov dword [ebp - 0x998], 0xffffffff
mov dword [ebp - 0x340], 0xfe81
push 3
lea ecx, [ebp - 0xa6c]
call fcn.00432b0d
mov dword [ebp - 0x50], 0
jmp 0x42e53d
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x42e553
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xb70], 0x3eb905d0
jmp 0x42e536
mov dword [ebp - 0x50], 0
jmp 0x42e563
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x42e57c
push dword [ebp - 0x50]
lea ecx, [ebp - 0xa6c]
call fcn.00432bfb
or dword [eax], 0xffffffff
jmp 0x42e55c
mov eax, dword [ebp - 0x340]
dec eax
mov dword [ebp - 0x340], eax
lea ecx, [ebp - 0xa6c]
call fcn.00432bdf
mov eax, dword [ebp - 0x214]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x110], ecx
mov dword [ebp - 0x768], 0xfffffffc
mov dword [ebp - 0x764], 0xfffffffc
mov dword [ebp - 0x760], 0xfffffffc
mov dword [ebp - 0x75c], 0xfffffffc
mov dword [ebp - 0x1c], 0xe56f9b2c
mov dword [ebp - 0x220], 0x3260389a
mov dword [ebp - 0x218], 8
mov dword [ebp - 0x860], 7
push 1
lea ecx, [ebp - 0x8a8]
call fcn.00432b0d
mov dword [ebp - 0x150], 0
jmp 0x42e619
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 1
jge 0x42e63b
push dword [ebp - 0x150]
lea ecx, [ebp - 0x8a8]
call fcn.00432bfb
mov dword [eax], 5
jmp 0x42e60c
mov dword [ebp - 0x1c], 3
jmp 0x42e64b
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x42e94a
mov dword [ebp - 0xd0], 0xffffffff
mov dword [ebp - 0x9a0], 1
mov dword [ebp - 0x818], 0x8a2b8ea2
push 1
lea ecx, [ebp - 0x92c]
call fcn.00432b0d
mov dword [ebp - 0x1b4], 0
jmp 0x42e699
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x42e6bb
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x92c]
call fcn.00432bfb
mov dword [eax], 0xb7b8
jmp 0x42e68c
mov dword [ebp - 0xd0], 3
jmp 0x42e6d4
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x42e93a
push 4
lea ecx, [ebp - 0x914]
call fcn.00432b0d
mov dword [ebp - 0x240], 0xb756fd8c
mov dword [ebp - 0x820], 0xffffffff
mov dword [ebp - 0x608], 0xfffffffc
mov dword [ebp - 0x828], 0
mov dword [ebp - 0x158], 0
jmp 0x42e72f
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 4
jge 0x42e751
push dword [ebp - 0x158]
lea ecx, [ebp - 0x914]
call fcn.00432bfb
mov dword [eax], 0x12a2
jmp 0x42e722
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp + eax*4 - 0x768]
mov dword [ebp + ecx*4 - 0x768], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x768]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x768]
mov ecx, dword [ebp - 0x218]
add ecx, dword [ebp - 0x1c]
imul eax, ecx
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x218]
inc ecx
mov dword [ebp - 0x218], ecx
test eax, eax
je 0x42e7bc
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x42e7bc
mov dword [ebp - 0x5f8], 1
jmp 0x42e7c3
and dword [ebp - 0x5f8], 0
push 0
lea ecx, [ebp - 0x92c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x5f8]
cmp ecx, dword [eax]
jne 0x42e7e6
mov dword [ebp - 0x348], 1
jmp 0x42e7ed
and dword [ebp - 0x348], 0
cmp dword [ebp - 0x348], 0xfffffffb
jb 0x42e802
mov dword [ebp - 0x600], 1
jmp 0x42e809
and dword [ebp - 0x600], 0
push 2
lea ecx, [ebp - 0x914]
call fcn.00432bfb
mov ecx, dword [ebp - 0x600]
mov dword [eax], ecx
mov dword [ebp - 0x240], 0xfffffff7
mov eax, dword [ebp - 0x240]
sub eax, dword [ebp - 0x818]
cmp eax, 0x294b58fe
jg 0x42e847
mov dword [ebp - 0x350], 1
jmp 0x42e84e
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x240]
add eax, dword [ebp - 0x1c]
neg eax
cmp eax, dword [ebp - 0x608]
je 0x42e879
mov dword [ebp - 0x358], 1
jmp 0x42e880
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x608]
cmp dword [ebp - 0x358], eax
je 0x42e89a
mov dword [ebp - 0x610], 1
jmp 0x42e8a1
and dword [ebp - 0x610], 0
cmp dword [ebp - 0x610], 0
je 0x42e8b6
mov dword [ebp - 0x360], 1
jmp 0x42e8bd
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x360], eax
jne 0x42e8d7
mov dword [ebp - 0x618], 1
jmp 0x42e8de
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x828]
cmp dword [ebp - 0x618], eax
jle 0x42e8f8
mov dword [ebp - 0x368], 1
jmp 0x42e8ff
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 0x45c761b8
jne 0x42e917
mov dword [ebp - 0x620], 1
jmp 0x42e91e
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x860], eax
lea ecx, [ebp - 0x914]
call fcn.00432bdf
jmp 0x42e6c7
lea ecx, [ebp - 0x92c]
call fcn.00432bdf
jmp 0x42e644
cmp dword [ebp - 0x1c], 0
jne 0x42e95c
mov dword [ebp - 0x370], 1
jmp 0x42e963
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x370]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x768]
je 0x42e9c6
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jg 0x42e990
mov dword [ebp - 0x868], 1
jmp 0x42e997
and dword [ebp - 0x868], 0
push 0
lea ecx, [ebp - 0x8a8]
call fcn.00432bfb
push 0
lea ecx, [ebp - 0x8a8]
call fcn.00432bfb
cmp dword [eax], 0xb93b3bbb
jb 0x42e9c6
cmp dword [ebp - 0x220], 0
je 0x42e9c6
xor eax, eax
jne 0x42e9d5
cmp dword [ebp - 0x1c], 0
jne 0x42e9d5
and dword [ebp - 0x628], 0
jmp 0x42e9df
mov dword [ebp - 0x628], 1
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x8a8]
call fcn.00432bdf
mov eax, dword [ebp - 0x110]
cmp dword [eax], 0x4550
je 0x42f11c
mov dword [ebp - 0x268], 0x13dce9d0
mov dword [ebp - 0x264], 0x13dce9d0
mov dword [ebp - 0x260], 0x13dce9d0
mov dword [ebp - 0x25c], 0x13dce9d0
push 3
lea ecx, [ebp - 0x95c]
call fcn.00432b0d
mov dword [ebp - 0x60], 0
jmp 0x42ea4a
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x42ea60
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xc8], 0xffffffff
jmp 0x42ea43
mov dword [ebp - 0x60], 0
jmp 0x42ea70
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x42ea8c
push dword [ebp - 0x60]
lea ecx, [ebp - 0x95c]
call fcn.00432bfb
mov dword [eax], 0x31b54653
jmp 0x42ea69
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc8], 0
jmp 0x42eaba
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc8], 0x15
jne 0x42ef98
mov dword [ebp - 0xc], 0xfffffff7
mov dword [ebp - 0x160], 0xd018d30
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x1bc], 0
jmp 0x42eb02
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jge 0x42eb1e
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x168], 0x6c849023
jmp 0x42eaf5
mov dword [ebp - 0xc], 0
jmp 0x42eb2e
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jg 0x42ed5b
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x268]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x268], 0xfffffff9
jl 0x42eb61
mov dword [ebp - 0x378], 1
jmp 0x42eb68
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x244c3f4
jg 0x42eb8c
mov dword [ebp - 0x630], 1
jmp 0x42eb93
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jle 0x42ebb4
mov dword [ebp - 0x380], 1
jmp 0x42ebbb
and dword [ebp - 0x380], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
cmp eax, dword [ebp - 0x380]
jge 0x42ebdc
mov dword [ebp - 0x638], 1
jmp 0x42ebe3
and dword [ebp - 0x638], 0
imul eax, dword [ebp - 0x638], 0xffff
cmp dword [ebp - 0xc], eax
jle 0x42ebfe
mov dword [ebp - 0x870], 1
jmp 0x42ec05
and dword [ebp - 0x870], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x268]
mov dword [ebp - 0x9b0], eax
mov eax, dword [ebp - 0xc]
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax*4 - 0x268]
mov dword [ebp + ecx - 0x168], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x9b8], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x268]
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x268]
mov dword [ebp - 0x9c8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x168]
mov ecx, dword [ebp - 0xc]
add eax, dword [ebp + ecx*4 - 0x268]
mov ecx, dword [ebp - 0xc]
cmp eax, dword [ebp + ecx*4 - 0x268]
jle 0x42ec8a
mov dword [ebp - 0x388], 1
jmp 0x42ec91
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x268]
mov ecx, dword [ebp - 0x160]
add ecx, dword [ebp - 0x388]
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xc8]
cmp eax, dword [ebp - 0xc]
je 0x42ecd1
mov eax, 0x5721
test eax, eax
je 0x42ecd1
mov dword [ebp - 0x640], 1
jmp 0x42ecd8
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x268]
cmp dword [ebp - 0x640], eax
jg 0x42ecf6
mov dword [ebp - 0x390], 1
jmp 0x42ecfd
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x268]
cmp dword [ebp - 0x390], eax
jg 0x42ed1b
mov dword [ebp - 0x648], 1
jmp 0x42ed22
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x648], eax
jl 0x42ed3c
mov dword [ebp - 0x398], 1
jmp 0x42ed43
and dword [ebp - 0x398], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x398]
mov dword [ebp + eax - 0x168], ecx
jmp 0x42eb27
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x268], 0
je 0x42ef24
mov dword [ebp - 0x778], 6
mov dword [ebp - 0x88], 0xfffffff4
jmp 0x42ed91
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xfffffff2
jl 0x42ef22
mov dword [ebp - 0x77c], 0x7280
mov dword [ebp - 0xc], 0xffffffe6
jmp 0x42edb8
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xb
jne 0x42ef1d
mov dword [ebp - 0x854], 0xc130268d
mov dword [ebp - 0x3a0], 5
push 3
lea ecx, [ebp - 0x938]
call fcn.00432b0d
mov dword [ebp - 0x1c4], 0
jmp 0x42edfc
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
jge 0x42ee1b
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0x938]
call fcn.00432bfb
and dword [eax], 0
jmp 0x42edef
cmp dword [ebp - 0x854], 0
jne 0x42ee36
mov eax, 0x5c8b
test eax, eax
jne 0x42ee36
and dword [ebp - 0x650], 0
jmp 0x42ee40
mov dword [ebp - 0x650], 1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x168], 0xa770aacc
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0xa770aacc
jle 0x42ee75
mov dword [ebp - 0x658], 1
jmp 0x42ee7c
and dword [ebp - 0x658], 0
cmp dword [ebp - 0x658], 0x96da
jne 0x42ee94
mov dword [ebp - 0x3a8], 1
jmp 0x42ee9b
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x3a8], 0
jge 0x42eeb0
mov dword [ebp - 0x660], 1
jmp 0x42eeb7
and dword [ebp - 0x660], 0
push 0
lea ecx, [ebp - 0x95c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x660]
mov dword [eax], ecx
mov eax, 0xd3e8
sub eax, dword [ebp - 0x77c]
imul ecx, dword [ebp - 0x778], 0xcf6d
cmp eax, ecx
jg 0x42eef1
mov dword [ebp - 0x3b0], 1
jmp 0x42eef8
and dword [ebp - 0x3b0], 0
push 2
lea ecx, [ebp - 0x938]
call fcn.00432bfb
mov ecx, dword [ebp - 0x3b0]
mov dword [eax], ecx
lea ecx, [ebp - 0x938]
call fcn.00432bdf
jmp 0x42edb1
jmp 0x42ed84
jmp 0x42ef93
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x42ef53
push 0
push 0x1396
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x42ef93
push 0
push 0x8da
push 0
push 0
push 0x22e5
push 0x1611
push 0x1b45
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtTextOutA]
jmp 0x42ea9f
lea ecx, [ebp - 0x95c]
call fcn.00432bdf
push 2
lea ecx, [ebp - 0x838]
call fcn.00432b0d
mov dword [ebp - 0x9d0], 0xa73d2d67
mov dword [ebp - 0x1cc], 0
jmp 0x42efd3
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 2
jge 0x42eff5
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x838]
call fcn.00432bfb
mov dword [eax], 0xfffffffd
jmp 0x42efc6
push 0
lea ecx, [ebp - 0x838]
call fcn.00432bfb
and dword [eax], 0
jmp 0x42f02b
push 0
lea ecx, [ebp - 0x838]
call fcn.00432bfb
mov dword [ebp - 0x668], eax
mov eax, dword [ebp - 0x668]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x668]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x838]
call fcn.00432bfb
cmp dword [eax], 0xfffffff8
jl 0x42f10a
mov dword [ebp - 0x170], 0x7689351f
mov dword [ebp - 0x9d8], 0xffffffff
mov dword [ebp - 0x170], 0
jmp 0x42f06e
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 6
jge 0x42f105
mov dword [ebp - 0xcc], 0xbc50
mov dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xcc], 0xffffffe4
jmp 0x42f0b5
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 4
je 0x42f100
mov dword [ebp - 0x7b0], 0x95da2282
mov dword [ebp - 0x9e0], 0x370cc321
mov dword [ebp - 0x780], 0xfffffff6
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x9e8], eax
mov dword [ebp - 0x3b8], 1
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x780], eax
jmp 0x42f0a8
jmp 0x42f061
jmp 0x42f007
lea ecx, [ebp - 0x838]
call fcn.00432bdf
xor eax, eax
jmp 0x43243b
push 0x8c5
push 1
push 0x15f
lea eax, [ebp - 0x15c]
push eax
push dword [ebp - 0x110]
push 0x1b4a
push 0x3852
push 0x69b
push 0x3dd5
push 1
push 1
push 0x2c24
push 1
push 1
push 0x33f
call fcn.0041e559
add esp, 0x3c
mov dword [ebp - 0x228], 1
mov dword [ebp - 0x178], 0xd72d7671
mov dword [ebp - 0xe4], 0xfffffff7
mov dword [ebp - 0x670], 0x97bc8b42
mov dword [ebp - 0x26c], 0x55073046
mov dword [ebp - 0x688], 0
mov dword [ebp - 0x3d8], 0x9e63a5be
mov dword [ebp - 0x788], 0xb8f1fe3d
mov dword [ebp - 0x7c0], 0x6ed4bca9
mov dword [ebp - 0x1d4], 0
jmp 0x42f1d6
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 2
jge 0x42f1f2
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0xa18], 0xfffffffe
jmp 0x42f1c9
mov eax, dword [ebp - 0xe4]
add eax, 0xffff
imul eax, eax, 0xf595
imul eax, dword [ebp - 0xe4]
mov dword [ebp - 0x670], eax
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x670], eax
jle 0x42f22a
mov dword [ebp - 0x3c0], 1
jmp 0x42f231
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0x3c0], eax
jge 0x42f24b
mov dword [ebp - 0x7b8], 1
jmp 0x42f252
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0x26c], eax
jge 0x42f26c
mov dword [ebp - 0x678], 1
jmp 0x42f273
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x678], eax
jg 0x42f28d
mov dword [ebp - 0x3c8], 1
jmp 0x42f294
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x178]
imul ecx, dword [ebp - 0x3c8]
imul eax, ecx
cmp dword [ebp - 0x178], eax
jl 0x42f2be
mov dword [ebp - 0x680], 1
jmp 0x42f2c5
and dword [ebp - 0x680], 0
cmp dword [ebp - 0x680], 0
jle 0x42f2da
mov dword [ebp - 0x3d0], 1
jmp 0x42f2e1
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x688], eax
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3d8]
cmp dword [ebp - 0x228], eax
je 0x42f32b
mov dword [ebp - 0x690], 1
jmp 0x42f332
and dword [ebp - 0x690], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa18]
cmp dword [ebp - 0x690], eax
jge 0x42f353
mov dword [ebp - 0x3e0], 1
jmp 0x42f35a
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
sub eax, dword [ebp - 0x788]
mov dword [ebp - 0x7c0], eax
cmp dword [ebp - 0x15c], 0
jne 0x42fbee
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x34], 0xfffffff9
push 1
lea ecx, [ebp - 0x700]
call fcn.00432b0d
mov dword [ebp - 0xe8], 0x55261fc4
mov dword [ebp - 0x230], 0xfffffff7
mov dword [ebp - 0x1dc], 0
jmp 0x42f3c1
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 1
jge 0x42f3e3
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x700]
call fcn.00432bfb
mov dword [eax], 0xf985589b
jmp 0x42f3b4
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jl 0x42f3f7
mov dword [ebp - 0x698], 1
jmp 0x42f3fe
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x698], eax
jge 0x42f415
mov dword [ebp - 0x3e8], 1
jmp 0x42f41c
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x58]
inc eax
cmp eax, dword [ebp - 0x3e8]
jle 0x42f434
mov dword [ebp - 0x6a0], 1
jmp 0x42f43b
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x6a0]
neg eax
cmp eax, 0xffffffff
jge 0x42f454
mov dword [ebp - 0x790], 1
jmp 0x42f45b
and dword [ebp - 0x790], 0
mov eax, 0x934b0b4e
cmp eax, 0x6b17b722
je 0x42f473
mov dword [ebp - 0x3f0], 1
jmp 0x42f47a
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x3f0], eax
jl 0x42f491
mov dword [ebp - 0x6a8], 1
jmp 0x42f498
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x6b0], eax
push 0
lea ecx, [ebp - 0x700]
call fcn.00432bfb
mov ecx, dword [ebp - 0x6b0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x6b0]
add eax, 0x47642289
sub eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x58]
jge 0x42f4db
mov dword [ebp - 0x3fc], 1
jmp 0x42f4e2
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x34], 0
jmp 0x42f4fe
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x42f810
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x594], 0x61bcf2ec
mov dword [ebp - 0x41c], 0x865e5ab8
mov dword [ebp - 0x59c], 0xfffffffb
mov dword [ebp - 0x42c], 0x69674b17
mov dword [ebp - 0x798], 0xfffffff9
mov dword [ebp - 0x58], 0
jmp 0x42f554
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x42f661
mov dword [ebp - 0x248], 0xd7c584ed
mov esi, dword [ebp - 0x248]
inc esi
push dword [ebp - 0x34]
lea ecx, [ebp - 0x700]
call fcn.00432bfb
cmp esi, dword [eax]
jl 0x42f58d
mov dword [ebp - 0x584], 1
jmp 0x42f594
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0x584]
cmp eax, dword [ebp - 0x248]
jne 0x42f5b4
mov dword [ebp - 0x404], 1
jmp 0x42f5bb
and dword [ebp - 0x404], 0
cmp dword [ebp - 0x404], 3
jle 0x42f5d0
mov dword [ebp - 0x5a0], 1
jmp 0x42f5d7
and dword [ebp - 0x5a0], 0
push 0
lea ecx, [ebp - 0x700]
call fcn.00432bfb
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5a0]
jl 0x42f5fa
mov dword [ebp - 0x40c], 1
jmp 0x42f601
and dword [ebp - 0x40c], 0
cmp dword [ebp - 0x40c], 5
je 0x42f616
mov dword [ebp - 0x6c8], 1
jmp 0x42f61d
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x6c8], eax
jg 0x42f63b
xor eax, eax
je 0x42f63b
mov dword [ebp - 0x7c8], 1
jmp 0x42f642
and dword [ebp - 0x7c8], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x700]
call fcn.00432bfb
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x230], eax
jmp 0x42f54d
cmp dword [ebp - 0xd4], 0x4e0b
je 0x42f679
mov dword [ebp - 0x414], 1
jmp 0x42f680
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
jne 0x42f6b3
mov eax, 0x449b
test eax, eax
jne 0x42f6b3
and dword [ebp - 0x644], 0
jmp 0x42f6bd
mov dword [ebp - 0x644], 1
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x644]
cmp dword [ebp - 0xd4], eax
je 0x42f6de
mov dword [ebp - 0x424], 1
jmp 0x42f6e5
and dword [ebp - 0x424], 0
push 0
lea ecx, [ebp - 0x700]
call fcn.00432bfb
mov dword [eax], 0x5f5a
mov eax, dword [ebp - 0x424]
add eax, 0x5f5a
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0x9f0], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x9f8], eax
mov dword [ebp - 0x42c], 0x9cf94a22
cmp dword [ebp - 0x42c], 0xfffffffc
jne 0x42f74c
mov dword [ebp - 0x69c], 1
jmp 0x42f753
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x69c], eax
jg 0x42f76d
mov dword [ebp - 0x434], 1
jmp 0x42f774
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x434], eax
jg 0x42f78b
mov dword [ebp - 0x5a4], 1
jmp 0x42f792
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x5a4], eax
je 0x42f7ac
mov dword [ebp - 0x43c], 1
jmp 0x42f7b3
and dword [ebp - 0x43c], 0
cmp dword [ebp - 0x43c], 0x55
jne 0x42f7d1
cmp dword [ebp - 0xe8], 0
je 0x42f7d1
mov dword [ebp - 0x64c], 1
jmp 0x42f7d8
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x64c], eax
jg 0x42f7f8
cmp dword [ebp - 0xe8], 0
je 0x42f7f8
mov dword [ebp - 0x444], 1
jmp 0x42f7ff
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x798], eax
jmp 0x42f4f7
lea ecx, [ebp - 0x700]
call fcn.00432bdf
push 4
lea ecx, [ebp - 0x1e8]
call fcn.00432b0d
mov dword [ebp - 0x5b4], 0xfffffffd
mov dword [ebp - 0x654], 0x9b950315
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x7d0], 6
push 2
lea ecx, [ebp - 0x980]
call fcn.00432b0d
mov dword [ebp - 0x45c], 1
push 2
lea ecx, [ebp - 0xa8c]
call fcn.00432b0d
mov dword [ebp - 4], 0
jmp 0x42f884
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x42f89a
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa7c], 0
jmp 0x42f87d
mov dword [ebp - 4], 0
jmp 0x42f8aa
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 4
jge 0x42f8c6
push dword [ebp - 4]
lea ecx, [ebp - 0x1e8]
call fcn.00432bfb
mov dword [eax], 0x860b4ffb
jmp 0x42f8a3
mov dword [ebp - 4], 0
jmp 0x42f8d6
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x42f8ec
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xb34], 0x72b21a35
jmp 0x42f8cf
mov dword [ebp - 4], 0
jmp 0x42f8fc
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x42f915
push dword [ebp - 4]
lea ecx, [ebp - 0x980]
call fcn.00432bfb
and dword [eax], 0
jmp 0x42f8f5
mov dword [ebp - 4], 0
jmp 0x42f925
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x42f93e
push dword [ebp - 4]
lea ecx, [ebp - 0xa8c]
call fcn.00432bfb
and dword [eax], 0
jmp 0x42f91e
push 3
lea ecx, [ebp - 0x1e8]
call fcn.00432bfb
and dword [eax], 0
jmp 0x42f974
push 3
lea ecx, [ebp - 0x1e8]
call fcn.00432bfb
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x5ac]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5ac]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x1e8]
call fcn.00432bfb
cmp dword [eax], 2
jg 0x42fac9
mov dword [ebp - 0x184], 0x17e2f9d4
mov dword [ebp - 0xa00], 0xfffffff7
mov dword [ebp - 0xa08], 0
mov dword [ebp - 0xa10], 0x32a17d0b
mov dword [ebp - 0x1fc], 7
mov dword [ebp - 0x1b0], 0
jmp 0x42f9d5
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jge 0x42f9f1
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x944], 0xf145ba13
jmp 0x42f9c8
push 3
lea ecx, [ebp - 0x1e8]
call fcn.00432bfb
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0xa7c], 0
jne 0x42fa22
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
jne 0x42fa22
and dword [ebp - 0x44c], 0
jmp 0x42fa2c
mov dword [ebp - 0x44c], 1
push 3
lea ecx, [ebp - 0x1e8]
call fcn.00432bfb
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0xa7c]
cmp eax, dword [ebp - 0x44c]
je 0x42fa56
mov dword [ebp - 0x6e0], 1
jmp 0x42fa5d
and dword [ebp - 0x6e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x944]
imul eax, dword [ebp - 0x6e0]
imul eax, eax, 0xfffb
mov dword [ebp - 0x654], eax
mov dword [ebp - 0x184], 0
jmp 0x42fa96
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jg 0x42fac4
push 4
pop esi
shl esi, 0
push 3
lea ecx, [ebp - 0x1e8]
call fcn.00432bfb
mov eax, dword [eax]
mov ecx, dword [ebp + esi - 0x944]
mov dword [ebp + eax*4 - 0x944], ecx
jmp 0x42fa89
jmp 0x42f950
push 3
lea ecx, [ebp - 0x1e8]
call fcn.00432bfb
mov esi, dword [ebp - 0x7d0]
push 1
lea ecx, [ebp - 0x980]
call fcn.00432bfb
cmp esi, dword [eax]
jge 0x42faf9
mov dword [ebp - 0x454], 1
jmp 0x42fb00
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x204]
dec eax
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x5b4]
add eax, 0xebe1
mov dword [ebp - 0x45c], eax
imul esi, dword [ebp - 0x204], 0
add esi, dword [ebp - 0x45c]
push 2
lea ecx, [ebp - 0x1e8]
call fcn.00432bfb
cmp esi, dword [eax]
je 0x42fb54
mov dword [ebp - 0x7a0], 1
jmp 0x42fb5b
and dword [ebp - 0x7a0], 0
push 3
lea ecx, [ebp - 0x1e8]
call fcn.00432bfb
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0x464], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x464]
mov dword [ebp + eax - 0xb34], ecx
push 2
lea ecx, [ebp - 0x1e8]
call fcn.00432bfb
mov ecx, dword [ebp - 0x464]
cmp ecx, dword [eax]
jge 0x42fbaa
mov dword [ebp - 0x5bc], 1
jmp 0x42fbb1
and dword [ebp - 0x5bc], 0
push 2
lea ecx, [ebp - 0x1e8]
call fcn.00432bfb
mov ecx, dword [ebp - 0x5bc]
mov dword [eax], ecx
lea ecx, [ebp - 0xa8c]
call fcn.00432bdf
lea ecx, [ebp - 0x980]
call fcn.00432bdf
lea ecx, [ebp - 0x1e8]
call fcn.00432bdf
xor eax, eax
jmp 0x43243b
mov dword [ebp - 0x484], 0xffffffff
mov dword [ebp - 0xe0], 0xe57bf5cd
mov dword [ebp - 0x890], 0xfffffffc
mov dword [ebp - 0x88c], 0xfffffffc
mov dword [ebp - 0x888], 0xfffffffc
mov dword [ebp - 0x884], 0xfffffffc
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x1c8], 0xab3cf813
push 3
lea ecx, [ebp - 0x70c]
call fcn.00432b0d
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0x7d8], 0x2585fafe
mov dword [ebp - 0x48c], 0x2b783560
mov dword [ebp - 0x4a4], 0x18cc907f
mov dword [ebp - 0x188], 0
jmp 0x42fc96
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x42fcb5
push dword [ebp - 0x188]
lea ecx, [ebp - 0x70c]
call fcn.00432bfb
or dword [eax], 0xffffffff
jmp 0x42fc89
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x46c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x46c]
mov dword [ebp + eax - 0x890], ecx
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0xf8], eax
jge 0x42fd07
mov dword [ebp - 0x5c4], 1
jmp 0x42fd0e
and dword [ebp - 0x5c4], 0
or eax, 0xffffffff
je 0x42fd4c
cmp dword [ebp - 0x90], 0xd6b5
jle 0x42fd2b
mov dword [ebp - 0x6a4], 1
jmp 0x42fd32
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x6a4]
je 0x42fd4c
mov dword [ebp - 0x474], 1
jmp 0x42fd53
and dword [ebp - 0x474], 0
push 0
lea ecx, [ebp - 0x70c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x474]
cmp ecx, dword [eax]
jne 0x42fd76
mov dword [ebp - 0x47c], 1
jmp 0x42fd7d
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x5c4]
cmp eax, dword [ebp - 0x47c]
jle 0x42fd97
mov dword [ebp - 0x65c], 1
jmp 0x42fd9e
and dword [ebp - 0x65c], 0
push 1
lea ecx, [ebp - 0x70c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x65c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0xe0], eax
jle 0x42fde5
mov dword [ebp - 0x5cc], 1
jmp 0x42fdec
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x484]
add eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x7d8], eax
mov dword [ebp - 0x90], 0xffffffe8
jmp 0x42fe17
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jl 0x4301bb
mov dword [ebp - 0x6f4], 0xfd89
mov dword [ebp - 0x7a8], 1
mov dword [ebp - 0x66c], 0x9d6c8400
mov dword [ebp - 0x4ac], 0xc767dbf1
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x5ec], 0x84ade726
mov dword [ebp - 0x7e0], 0
mov dword [ebp - 0x7b4], 1
mov dword [ebp - 0x7bc], 7
mov byte [ebp - 0x70], 0
movzx eax, byte [ebp - 0x70]
test eax, eax
je 0x42fe94
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
mov eax, dword [ebp - 0x48c]
dec eax
mov dword [ebp - 0x48c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x890], 0
jne 0x42fec9
push 0
lea ecx, [ebp - 0x70c]
call fcn.00432bfb
cmp dword [eax], 0
je 0x42fec9
cmp dword [ebp - 0xf0], 0
mov dword [ebp - 0xf0], 0xffffffff
cmp dword [ebp - 0xf0], 0
je 0x42fef1
cmp dword [ebp - 0x7a8], 0
je 0x42fef1
mov dword [ebp - 0x6d0], 1
jmp 0x42fef8
and dword [ebp - 0x6d0], 0
cmp dword [ebp - 0x6d0], 0x5e2b1956
jge 0x42ff10
mov dword [ebp - 0x494], 1
jmp 0x42ff17
and dword [ebp - 0x494], 0
cmp dword [ebp - 0x494], 0x4ab7
jg 0x42ff34
xor eax, eax
inc eax
je 0x42ff34
mov dword [ebp - 0x5d4], 1
jmp 0x42ff3b
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x5ec]
cmp dword [ebp - 0xe0], eax
jle 0x42ff61
mov dword [ebp - 0x49c], 1
jmp 0x42ff68
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x4ac]
cmp dword [ebp - 0x49c], eax
jne 0x42ff82
mov dword [ebp - 0x664], 1
jmp 0x42ff89
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x4a4]
add eax, dword [ebp - 0x664]
cmp dword [ebp - 0x7e0], eax
jl 0x42ffa9
mov dword [ebp - 0x5dc], 1
jmp 0x42ffb0
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x4a4]
add eax, dword [ebp - 0x5dc]
cmp eax, 0x4a8a623b
jle 0x42ffcf
mov dword [ebp - 0x7e8], 1
jmp 0x42ffd6
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x4ac], 0xffffffff
jle 0x42fff4
cmp dword [ebp - 0x6f4], 0
je 0x42fff4
mov dword [ebp - 0x6ac], 1
jmp 0x42fffb
and dword [ebp - 0x6ac], 0
push 0
lea ecx, [ebp - 0x70c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x6ac]
cmp ecx, dword [eax]
jne 0x43001e
mov dword [ebp - 0x4b4], 1
jmp 0x430025
and dword [ebp - 0x4b4], 0
cmp dword [ebp - 0x4b4], 0x77bf
jge 0x43003d
mov dword [ebp - 0x5e4], 1
jmp 0x430044
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x5e4], eax
jg 0x43005e
mov dword [ebp - 0x4bc], 1
jmp 0x430065
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x66c], eax
cmp dword [ebp - 0x66c], 0
jne 0x43008a
push 8
pop eax
test eax, eax
jne 0x43008a
and dword [ebp - 0x4c4], 0
jmp 0x430094
mov dword [ebp - 0x4c4], 1
cmp dword [ebp - 0x4c4], 0xc9a5
jle 0x4300bb
mov eax, 0x7656
test eax, eax
jne 0x4300bb
cmp dword [ebp - 0x7b4], 0
jne 0x4300bb
and dword [ebp - 0x814], 0
jmp 0x4300c5
mov dword [ebp - 0x814], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x890]
mov dword [ebp - 0xad4], eax
cmp dword [ebp - 0x7bc], 0
je 0x4300e9
mov eax, 0xf6b0
test eax, eax
jne 0x4300fb
cmp dword [ebp - 0xe0], 0
jne 0x4300fb
and dword [ebp - 0x4cc], 0
jmp 0x430105
mov dword [ebp - 0x4cc], 1
mov eax, dword [ebp - 0x5ec]
cmp dword [ebp - 0x4cc], eax
jge 0x43011f
mov dword [ebp - 0x4d4], 1
jmp 0x430126
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x6f4]
cmp eax, dword [ebp - 0x4d4]
jne 0x430140
mov dword [ebp - 0x5f4], 1
jmp 0x430147
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 0x2a7322e5
jne 0x43015f
mov dword [ebp - 0x27c], 1
jmp 0x430166
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0xf8]
imul eax, dword [ebp - 0x27c]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
je 0x43019a
mov dword [ebp - 0x674], 1
jmp 0x4301a1
and dword [ebp - 0x674], 0
push 0
lea ecx, [ebp - 0x70c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x674]
mov dword [eax], ecx
jmp 0x42fe0a
lea ecx, [ebp - 0x70c]
call fcn.00432bdf
push dword [ebp - 0x214]
push 0x77ff
push 1
push 0x55bb
lea eax, [ebp - 0xadc]
push eax
push 1
push 0xc81
push 0x28cc
push 1
push 1
push 0x29f9
push 0x76e7
push dword [ebp - 0x110]
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x44]
push eax
push 0xc2e
call fcn.0042bfd1
add esp, 0x40
push 4
lea ecx, [ebp - 0x10c]
call fcn.00432b0d
mov dword [ebp - 0x10], 0xfffffff9
mov dword [ebp - 0x30], 0xe77e815f
mov dword [ebp - 0xa0], 0x71658a60
mov dword [ebp - 0x55c], 9
mov dword [ebp - 0x590], 0xfffffff7
mov dword [ebp - 0x54], 0
jmp 0x430260
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x43027c
push dword [ebp - 0x54]
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
mov dword [eax], 0xfffffffe
jmp 0x430259
mov dword [ebp - 0x54], 0
jmp 0x43028c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x4302a2
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x8b0], 0xf289
jmp 0x430285
mov dword [ebp - 0x10], 3
jmp 0x4302b2
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x430b2c
mov dword [ebp - 0x98], 0xefc07e17
mov dword [ebp - 0x1d8], 0xa8ed40a1
mov dword [ebp - 0xdc], 1
mov dword [ebp - 0x22c], 0x405cefd0
mov dword [ebp - 0x198], 0x9be056ef
mov dword [ebp - 0x98], 3
jmp 0x430307
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x430793
mov dword [ebp - 0x6c], 0xfffffff8
push 3
lea ecx, [ebp - 0x758]
call fcn.00432b0d
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x190], 0
jmp 0x43034b
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 3
jge 0x43036a
push dword [ebp - 0x190]
lea ecx, [ebp - 0x758]
call fcn.00432bfb
and dword [eax], 0
jmp 0x43033e
mov dword [ebp - 0x6c], 3
jmp 0x43037a
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x43060c
mov dword [ebp - 0x1b8], 0xbf90a233
mov dword [ebp - 0x7c4], 0xcbcb1a7a
mov dword [ebp - 0x1b8], 3
jmp 0x4303b1
mov eax, dword [ebp - 0x1b8]
dec eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
jl 0x430607
mov dword [ebp - 0x21c], 3
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xae4], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xaec], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x30]
add ecx, 0x942c
cmp dword [eax], ecx
jg 0x430401
mov dword [ebp - 0x4e4], 1
jmp 0x430408
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x4e4], eax
jg 0x43041f
mov dword [ebp - 0x5fc], 1
jmp 0x430426
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x5fc], eax
jle 0x43043d
mov dword [ebp - 0x4ec], 1
jmp 0x430444
and dword [ebp - 0x4ec], 0
push 2
lea ecx, [ebp - 0x758]
call fcn.00432bfb
mov ecx, dword [ebp - 0x4ec]
cmp ecx, dword [eax]
jne 0x430467
mov dword [ebp - 0x6b4], 1
jmp 0x43046e
and dword [ebp - 0x6b4], 0
push 0
lea ecx, [ebp - 0x758]
call fcn.00432bfb
mov ecx, dword [ebp - 0x6b4]
cmp ecx, dword [eax]
jl 0x430491
mov dword [ebp - 0x4f4], 1
jmp 0x430498
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x4f4], eax
jle 0x4304b2
mov dword [ebp - 0x604], 1
jmp 0x4304b9
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x604], 0x256c
je 0x4304d1
mov dword [ebp - 0x4fc], 1
jmp 0x4304d8
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x4fc], eax
jge 0x4304ef
mov dword [ebp - 0x67c], 1
jmp 0x4304f6
and dword [ebp - 0x67c], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
mov eax, dword [eax]
cmp eax, dword [ebp - 0x67c]
jle 0x430520
cmp dword [ebp - 0x224], 0
jne 0x430520
and dword [ebp - 0x504], 0
jmp 0x43052a
mov dword [ebp - 0x504], 1
imul eax, dword [ebp - 0x504], 9
cmp eax, 0xfff9
ja 0x43054d
cmp dword [ebp - 0x98], 0
je 0x43054d
mov dword [ebp - 0x858], 1
jmp 0x430554
and dword [ebp - 0x858], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0xaf4], eax
mov eax, dword [ebp - 0x21c]
dec eax
mov dword [ebp - 0x21c], eax
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
mov eax, dword [eax]
neg eax
mov ecx, dword [ebp - 0xdc]
add ecx, 0x6f91
cmp eax, ecx
jge 0x43059b
mov dword [ebp - 0x60c], 1
jmp 0x4305a2
and dword [ebp - 0x60c], 0
imul eax, dword [ebp - 0x60c], 0xffffffff
cmp eax, 0xa332
jl 0x4305c2
cmp dword [ebp - 0x30], 0
je 0x4305c2
mov dword [ebp - 0x50c], 1
jmp 0x4305c9
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x7c4], eax
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x430602
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x4303a4
jmp 0x430373
push dword [ebp - 0x10]
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
cmp dword [eax], 0
je 0x4306c4
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0xa0], eax
mov esi, dword [ebp - 0xa0]
push 1
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
mov dword [eax], esi
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0xafc], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xb04], eax
mov esi, dword [ebp - 0x10]
push 0
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
imul esi, dword [eax]
mov eax, 0xd3b05e26
sub eax, esi
jne 0x430696
mov eax, 0x79b6
test eax, eax
jne 0x430696
and dword [ebp - 0x6d8], 0
jmp 0x4306a0
mov dword [ebp - 0x6d8], 1
push dword [ebp - 0x10]
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x6d8]
cmp ecx, dword [eax]
jg 0x4306c4
mov dword [ebp - 0x514], 1
jmp 0x4306cb
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x514], eax
je 0x4306e2
mov dword [ebp - 0x614], 1
jmp 0x4306e9
and dword [ebp - 0x614], 0
push 1
lea ecx, [ebp - 0x758]
call fcn.00432bfb
mov ecx, dword [ebp - 0x614]
cmp ecx, dword [eax]
je 0x43070c
mov dword [ebp - 0x51c], 1
jmp 0x430713
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x22c]
cmp dword [ebp - 0x51c], eax
jle 0x43072d
mov dword [ebp - 0x684], 1
jmp 0x430734
and dword [ebp - 0x684], 0
cmp dword [ebp - 0x684], 0xdf3f1863
jae 0x43074c
mov dword [ebp - 0x81c], 1
jmp 0x430753
and dword [ebp - 0x81c], 0
push 0
lea ecx, [ebp - 0x758]
call fcn.00432bfb
mov ecx, dword [ebp - 0x10]
cmp dword [eax], ecx
jle 0x430773
mov dword [ebp - 0x524], 1
jmp 0x43077a
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x758]
call fcn.00432bdf
jmp 0x4302fa
mov dword [ebp - 0x30], 1
cmp dword [ebp - 0x30], 0
jne 0x430853
mov eax, dword [ebp - 0x22c]
dec eax
cmp eax, dword [ebp - 0xdc]
jge 0x4307bf
mov dword [ebp - 0x61c], 1
jmp 0x4307c6
and dword [ebp - 0x61c], 0
push 2
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x61c]
sub ecx, dword [ebp - 0xa0]
cmp dword [eax], ecx
je 0x4307ef
mov dword [ebp - 0x7cc], 1
jmp 0x4307f6
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xb0c], eax
push 0xfffffffffffffffc
pop eax
cmp eax, 0xa08
je 0x430815
mov dword [ebp - 0x52c], 1
jmp 0x43081c
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0xdc], eax
mov esi, dword [ebp - 0xdc]
imul esi, dword [ebp - 0xa0]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
mov eax, dword [eax]
inc eax
cmp eax, esi
jge 0x430853
and dword [ebp - 0x6c0], 0
jmp 0x43085d
mov dword [ebp - 0x6c0], 1
push dword [ebp - 0x10]
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x6c0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xb28], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xac8], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x994], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
cmp dword [eax], 0
je 0x4308bf
cmp dword [ebp - 0x198], 0
je 0x4308bf
mov dword [ebp - 0x864], 1
jmp 0x4308c6
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x99c], eax
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x198]
test eax, eax
je 0x430918
mov dword [ebp - 0x534], 0xb2a3
push dword [ebp - 0x10]
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
mov eax, dword [eax]
mov dword [ebp - 0x534], eax
mov eax, dword [ebp - 0x534]
sub eax, 0x34c778c5
neg eax
mov dword [ebp - 0x55c], eax
jmp 0x430b27
mov dword [ebp - 0x564], 3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8b0]
mov dword [ebp - 0x624], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x624]
mov dword [eax], ecx
mov eax, dword [ebp - 0x624]
sub eax, 0xc47fc0b
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0x30], 0
je 0x43096e
mov dword [ebp - 0x53c], 1
jmp 0x430975
and dword [ebp - 0x53c], 0
cmp dword [ebp - 0x53c], 7
jne 0x43098a
mov dword [ebp - 0x68c], 1
jmp 0x430991
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0x68c]
je 0x4309b4
mov eax, 0xb161ca2e
test eax, eax
je 0x4309b4
mov dword [ebp - 0x544], 1
jmp 0x4309bb
and dword [ebp - 0x544], 0
cmp dword [ebp - 0x544], 1
jl 0x4309d0
mov dword [ebp - 0x62c], 1
jmp 0x4309d7
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0xdc], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
cmp dword [eax], 0
jne 0x430a02
mov dword [ebp - 0x54c], 1
jmp 0x430a09
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x54c]
imul eax, eax, 0xd2c
cmp eax, 1
ja 0x430a29
mov dword [ebp - 0x6f0], 1
jmp 0x430a30
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x6f0]
je 0x430a4a
mov dword [ebp - 0x554], 1
jmp 0x430a51
and dword [ebp - 0x554], 0
cmp dword [ebp - 0x554], 0x37a7
jne 0x430a69
mov dword [ebp - 0x7d4], 1
jmp 0x430a70
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0xa70], eax
or eax, 0xffffffff
je 0x430a91
xor eax, eax
je 0x430a91
mov dword [ebp - 0x634], 1
jmp 0x430a98
and dword [ebp - 0x634], 0
imul eax, dword [ebp - 0x634], 0x4d83
cmp eax, dword [ebp - 0x55c]
jg 0x430ab6
mov dword [ebp - 0x694], 1
jmp 0x430abd
and dword [ebp - 0x694], 0
cmp dword [ebp - 0x694], 0
jae 0x430ad2
mov dword [ebp - 0x63c], 1
jmp 0x430ad9
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x564]
cmp dword [ebp - 0x63c], eax
jg 0x430af3
mov dword [ebp - 0x56c], 1
jmp 0x430afa
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
sub eax, 8
cmp eax, 0xfffffff7
je 0x430b14
mov dword [ebp - 0x588], 1
jmp 0x430b1b
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x1d8], eax
jmp 0x4302ab
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x9a4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8b0], 1
jb 0x430b54
mov dword [ebp - 0x574], 1
jmp 0x430b5b
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x574]
jg 0x430b6f
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x590], eax
mov eax, 0xda5
test eax, eax
jne 0x430b87
cmp dword [ebp - 0x10], 0
jne 0x430b87
and dword [ebp - 0x57c], 0
jmp 0x430b91
mov dword [ebp - 0x57c], 1
push 3
lea ecx, [ebp - 0x10c]
call fcn.00432bfb
mov ecx, dword [ebp - 0x57c]
cmp ecx, dword [eax]
jg 0x430bb4
mov dword [ebp - 0x598], 1
jmp 0x430bbb
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0xa0], eax
lea ecx, [ebp - 0x10c]
call fcn.00432bdf
push dword [ebp - 0x44]
push 1
push 0
push dword [ebp - 0x110]
push 1
push 1
push 0x39d0
push dword [ebp + 8]
push 0x5fde
push 0x64
push 0x229
push 0x3b65
push 0x5b59
call fcn.00413fea
add esp, 0x34
mov dword [ebp - 0x1a0], 0x2e91a049
mov dword [ebp - 0x1a0], 0
jmp 0x430c2c
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 9
jne 0x430d5c
mov dword [ebp - 0x12c], 0x22124f84
mov dword [ebp - 0x824], 1
mov dword [ebp - 0x12c], 0xfffffff6
jmp 0x430c66
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x13
jg 0x430d57
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0x100], 0
jmp 0x430c96
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xffffffea
jne 0x430d52
mov dword [ebp - 0x1c0], 0
jmp 0x430cbc
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 2
jge 0x430cd8
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x734], 0
jmp 0x430caf
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x734], 0
jmp 0x430d06
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x734]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x734], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x734], 0x16
jle 0x430d4d
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x824], eax
mov byte [ebp - 0x72], 0
movzx eax, byte [ebp - 0x72]
test eax, eax
je 0x430d4b
push 0x1ed6
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolygon]
jmp 0x430ceb
jmp 0x430c89
jmp 0x430c59
jmp 0x430c1f
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x15c]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x470], ecx
mov dword [ebp - 0xa8], 0xa48bbca6
mov dword [ebp - 0x880], 0x2301355f
mov dword [ebp - 0x87c], 0x2301355f
mov dword [ebp - 0x878], 0x2301355f
mov dword [ebp - 0x874], 0x2301355f
mov dword [ebp - 0x1d0], 0xfffffffd
mov dword [ebp - 0x7e4], 0xddb2097e
mov dword [ebp - 0x82c], 3
mov dword [ebp - 0xa8], 0xffffffeb
jmp 0x430dda
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xffffffe6
je 0x431087
mov dword [ebp - 0xb0], 6
mov dword [ebp - 0x64], 0x9a130dfd
mov dword [ebp - 0x410], 0x1ffb
mov dword [ebp - 0xb0], 0
jmp 0x430e1b
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0xfffffff9
jge 0x430fb8
mov dword [ebp - 0x1a8], 0x2a8d3a18
mov dword [ebp - 0x8d4], 1
mov dword [ebp - 0x8d0], 1
mov dword [ebp - 0x8cc], 1
mov dword [ebp - 0x8c8], 1
lea ecx, [ebp - 0x251]
call fcn.00432c0a
push eax
lea eax, [ebp - 0x8c4]
push eax
lea eax, [ebp - 0x8d4]
push eax
lea ecx, [ebp - 0xb58]
call fcn.00432c0d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x974]
call fcn.00432bb9
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x9ac], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xa80], eax
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x1a8], eax
jl 0x430ecd
mov dword [ebp - 0x234], 1
jmp 0x430ed4
and dword [ebp - 0x234], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x234]
mov dword [ebp + eax - 0x880], ecx
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x14b5
jle 0x430f05
mov dword [ebp - 0x3f4], 1
jmp 0x430f0c
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
sub eax, dword [ebp - 0x1a8]
cmp eax, 0xca77
jl 0x430f2b
mov dword [ebp - 0x3f8], 1
jmp 0x430f32
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x3f8], eax
jl 0x430f4c
mov dword [ebp - 0x400], 1
jmp 0x430f53
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x1d0], eax
jge 0x430f79
mov dword [ebp - 0x408], 1
jmp 0x430f80
and dword [ebp - 0x408], 0
push 2
lea ecx, [ebp - 0x974]
call fcn.00432bfb
mov ecx, dword [ebp - 0x408]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x974]
call fcn.00432bfb
mov dword [eax], 0xc5706b37
lea ecx, [ebp - 0x974]
call fcn.00432bdf
jmp 0x430e0e
cmp dword [ebp - 0x64], 0
jne 0x430fc2
cmp dword [ebp - 0x64], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0xb0], eax
jg 0x430fd9
mov dword [ebp - 0x7dc], 1
jmp 0x430fe0
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x9b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x880]
mov dword [ebp - 0xb00], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x9bc], eax
cmp dword [ebp - 0x410], 7
jbe 0x431020
mov dword [ebp - 0x418], 1
jmp 0x431027
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x410]
imul eax, dword [ebp - 0x418]
cmp dword [ebp - 0x1d0], eax
jg 0x431048
mov dword [ebp - 0x85c], 1
jmp 0x43104f
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xa90], eax
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x7e4]
cmp eax, 2
je 0x431072
mov dword [ebp - 0x420], 1
jmp 0x431079
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x64], eax
jmp 0x430dcd
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x880], 0xfffffff8
mov dword [ebp - 0x82c], 0xfffffff8
cmp dword [ebp - 0x470], 0
je 0x4312f1
mov dword [ebp - 0x744], 0xffb871c7
mov dword [ebp - 0x740], 0xffb871c7
mov dword [ebp - 0x73c], 0xffb871c7
mov dword [ebp - 0x738], 0xffb871c7
mov dword [ebp - 0x440], 0x3531f145
mov dword [ebp - 0x460], 0xfffffffc
mov dword [ebp - 0x7ec], 0xfffe
mov dword [ebp - 0x180], 0
jmp 0x43110e
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x43112a
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x724], 2
jmp 0x431101
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x724], 0x6f3f17e2
mov eax, 0x6f3f17e2
test eax, eax
jne 0x431197
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x724]
mov dword [ebp - 0x9c4], eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x428], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x428]
mov dword [ebp + eax - 0x724], ecx
cmp dword [ebp - 0x428], 0
je 0x43118e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x744], 0
jne 0x431197
and dword [ebp - 0x430], 0
jmp 0x4311a1
mov dword [ebp - 0x430], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x744]
imul eax, dword [ebp - 0x430]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x744]
jl 0x4311d1
mov dword [ebp - 0x438], 1
jmp 0x4311d8
and dword [ebp - 0x438], 0
cmp dword [ebp - 0x438], 1
je 0x4311fc
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x744], 0
je 0x4311fc
mov dword [ebp - 0x448], 1
jmp 0x431203
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x440]
cmp dword [ebp - 0x448], eax
jl 0x43121d
mov dword [ebp - 0x450], 1
jmp 0x431224
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 0x3f29c8dd
jl 0x431249
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x724], 0
jne 0x431249
and dword [ebp - 0x458], 0
jmp 0x431253
mov dword [ebp - 0x458], 1
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x460], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x744]
add eax, dword [ebp - 0x460]
push 4
pop ecx
shl ecx, 1
cmp dword [ebp + ecx - 0x744], eax
jge 0x43128b
mov dword [ebp - 0x468], 1
jmp 0x431292
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x7ec], eax
mov byte [ebp - 0x74], 0
movzx eax, byte [ebp - 0x74]
test eax, eax
je 0x4312bb
push 0
push 0
push 0x22fb
push 0
call dword [sym.imp.USER32.dll_AppendMenuA]
push 0
push dword [ebp - 0x44]
push 0x670b
push 0
push 1
push 0x7c31
push 0
push 0x5f2e
push 0xb79
push 1
push 1
push dword [ebp - 0x470]
push 0xe1c
call fcn.0042864d
add esp, 0x34
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0xb8], 0xeea53061
mov dword [ebp - 0xae8], 0xe848967
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x43132f
push 0
push 0
push 0x22fb
push 0
call dword [sym.imp.USER32.dll_AppendMenuA]
cmp dword [ebp - 0x14], 0
jne 0x431416
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jge 0x43134d
mov dword [ebp - 0x478], 1
jmp 0x431354
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x478], eax
jl 0x431377
cmp dword [ebp - 0x14], 0
je 0x431377
cmp dword [ebp - 0x14], 0
je 0x431377
mov dword [ebp - 0x480], 1
jmp 0x43137e
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
neg eax
cmp eax, dword [ebp - 0x14]
je 0x431397
mov dword [ebp - 0x488], 1
jmp 0x43139e
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x488], eax
je 0x4313b5
mov dword [ebp - 0x490], 1
jmp 0x4313bc
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x490], eax
jle 0x4313d3
mov dword [ebp - 0x498], 1
jmp 0x4313da
and dword [ebp - 0x498], 0
mov dword [ebp - 0xb8], 0x401d1b98
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x498]
jl 0x4313fe
mov dword [ebp - 0x86c], 1
jmp 0x431405
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
je 0x431416
and dword [ebp - 0x4a0], 0
jmp 0x431420
mov dword [ebp - 0x4a0], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x4a0], eax
je 0x43143a
cmp dword [ebp - 0x14], 0
jne 0x43143a
and dword [ebp - 0x4a8], 0
jmp 0x431444
mov dword [ebp - 0x4a8], 1
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x4a8]
add eax, ecx
sub eax, dword [ebp - 0x14]
jne 0x431464
xor eax, eax
jne 0x431464
and dword [ebp - 0x4b0], 0
jmp 0x43146e
mov dword [ebp - 0x4b0], 1
cmp dword [ebp - 0x4b0], 3
jg 0x431483
mov dword [ebp - 0x4b8], 1
jmp 0x43148a
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x4b8], 0x5ff44426
jle 0x4314a0
cmp dword [ebp - 0x14], 0
je 0x431613
mov dword [ebp - 0x4c0], 0x5b6d4f50
mov dword [ebp - 0x4d0], 0xffffffff
mov dword [ebp - 0x990], 0xc9d6c840
mov dword [ebp - 0x98c], 0xc9d6c840
mov dword [ebp - 0x988], 0xc9d6c840
mov dword [ebp - 0x984], 0xc9d6c840
mov dword [ebp - 0x17c], 0
jmp 0x4314f5
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x431511
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x18c], 0x89aa
jmp 0x4314e8
mov dword [ebp - 0xb8], 0xffffffe6
jmp 0x43152a
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x1d
jge 0x43160e
mov dword [ebp - 0x83c], 0x848298bb
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x431560
push 0
push 0x1e57
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18c]
cmp dword [ebp - 0xb8], eax
je 0x431581
mov dword [ebp - 0x7f4], 1
jmp 0x431588
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0x9cc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18c]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x4c0], eax
je 0x4315be
mov dword [ebp - 0x4c8], 1
jmp 0x4315c5
and dword [ebp - 0x4c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18c]
sub eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xaa0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, 0xdc509ca4
sub ecx, dword [ebp + eax - 0x18c]
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x990], ecx
jmp 0x43151d
jmp 0x43169c
push 2
lea ecx, [ebp - 0x920]
call fcn.00432b0d
mov dword [ebp - 0x7fc], 0xdfda84ad
mov dword [ebp - 0x194], 0
jmp 0x431643
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x431665
push dword [ebp - 0x194]
lea ecx, [ebp - 0x920]
call fcn.00432bfb
mov dword [eax], 0xfffffffc
jmp 0x431636
push 0
lea ecx, [ebp - 0x920]
call fcn.00432bfb
mov ecx, dword [ebp - 0x14]
add ecx, dword [eax]
mov dword [ebp - 0x7fc], ecx
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x431691
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
lea ecx, [ebp - 0x920]
call fcn.00432bdf
push dword [ebp - 0x44]
call fcn.0041b474
pop ecx
test eax, eax
jne 0x4318ab
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0x280], 0xfffffff8
mov dword [ebp - 0x23c], 0x377d6446
mov dword [ebp - 0x804], 0xffffffff
push 1
lea ecx, [ebp - 0xa9c]
call fcn.00432b0d
mov dword [ebp - 0x130], 0
jmp 0x431702
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jge 0x431724
push dword [ebp - 0x130]
lea ecx, [ebp - 0xa9c]
call fcn.00432bfb
mov dword [eax], 0xb818
jmp 0x4316f5
cmp dword [ebp - 0x48], 0
je 0x431807
mov eax, dword [ebp - 0x48]
add eax, 0x8bc0
imul eax, dword [ebp - 0x48]
test eax, eax
jne 0x431750
mov eax, 0x8172
test eax, eax
jne 0x431750
and dword [ebp - 0x4d8], 0
jmp 0x43175a
mov dword [ebp - 0x4d8], 1
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x4d8]
cmp eax, 0xae4f78d7
jne 0x431777
mov dword [ebp - 0x4e0], 1
jmp 0x43177e
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 0xb012
jge 0x431796
mov dword [ebp - 0x4e8], 1
jmp 0x43179d
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x4e8], eax
jg 0x4317b4
mov dword [ebp - 0x4f0], 1
jmp 0x4317bb
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 0xb15d
je 0x4317e5
cmp dword [ebp - 0x48], 0
je 0x4317e5
mov dword [ebp - 0x850], 1
jmp 0x4317ec
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x9d4], eax
cmp dword [ebp - 0x48], 0
je 0x431807
mov dword [ebp - 0x500], 1
jmp 0x43180e
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 4
jne 0x431823
mov dword [ebp - 0x508], 1
jmp 0x43182a
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x508]
jle 0x431841
mov dword [ebp - 0x510], 1
jmp 0x431848
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x280]
add eax, dword [ebp - 0x48]
cmp eax, 0xf300
je 0x431870
mov dword [ebp - 0x284], 1
jmp 0x431877
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x23c], 0xf6a191a8
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x804], eax
lea ecx, [ebp - 0xa9c]
call fcn.00432bdf
xor eax, eax
jmp 0x43243b
mov dword [ebp - 0x134], 0xca631852
mov dword [ebp - 0x134], 0xb
jmp 0x4318ce
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xfffffff7
jle 0x431a28
mov dword [ebp - 0x144], 1
push 3
lea ecx, [ebp - 0xaac]
call fcn.00432b0d
mov dword [ebp - 0x13c], 0
jmp 0x43190b
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jge 0x43192d
push dword [ebp - 0x13c]
lea ecx, [ebp - 0xaac]
call fcn.00432bfb
mov dword [eax], 3
jmp 0x4318fe
mov dword [ebp - 0x144], 0
jmp 0x431946
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xffffffeb
jne 0x431a18
push 2
lea ecx, [ebp - 0x848]
call fcn.00432b0d
mov dword [ebp - 0x14c], 0
jmp 0x431979
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 2
jge 0x43199b
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x848]
call fcn.00432bfb
mov dword [eax], 0xded68044
jmp 0x43196c
push 1
lea ecx, [ebp - 0x848]
call fcn.00432bfb
mov dword [eax], 2
jmp 0x4319d4
push 1
lea ecx, [ebp - 0x848]
call fcn.00432bfb
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x28c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x848]
call fcn.00432bfb
cmp dword [eax], 0
jl 0x431a08
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x431a06
push 1
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
jmp 0x4319b0
lea ecx, [ebp - 0x848]
call fcn.00432bdf
jmp 0x431939
lea ecx, [ebp - 0xaac]
call fcn.00432bdf
jmp 0x4318c1
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x431a7f
push 0x1629
push 0x8e1
push 0x1f9e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x1115
push 0x697
push 0xa2b
push 0x3fe
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x44]
push 1
push 0x73f9
push 0
push 1
call fcn.0040fc51
add esp, 0x14
mov dword [ebp - 0x71c], 0xffb871c7
mov dword [ebp - 0x718], 0xffb871c7
mov dword [ebp - 0x714], 0xffb871c7
mov dword [ebp - 0x710], 0xffb871c7
mov dword [ebp - 0x2ac], 0x3531f145
mov dword [ebp - 0x2cc], 0xfffffffc
mov dword [ebp - 0x84c], 0xfffe
mov dword [ebp - 0x154], 0
jmp 0x431af4
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 2
jge 0x431b10
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x74c], 2
jmp 0x431ae7
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x74c], 0x6f3f17e2
mov eax, 0x6f3f17e2
test eax, eax
jne 0x431b7d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x74c]
mov dword [ebp - 0xb10], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x294], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x294]
mov dword [ebp + eax - 0x74c], ecx
cmp dword [ebp - 0x294], 0
je 0x431b74
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x71c], 0
jne 0x431b7d
and dword [ebp - 0x29c], 0
jmp 0x431b87
mov dword [ebp - 0x29c], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x71c]
imul eax, dword [ebp - 0x29c]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x71c]
jl 0x431bb7
mov dword [ebp - 0x2a4], 1
jmp 0x431bbe
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 1
je 0x431be2
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x71c], 0
je 0x431be2
mov dword [ebp - 0x2b4], 1
jmp 0x431be9
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2ac]
cmp dword [ebp - 0x2b4], eax
jl 0x431c03
mov dword [ebp - 0x2bc], 1
jmp 0x431c0a
and dword [ebp - 0x2bc], 0
cmp dword [ebp - 0x2bc], 0x3f29c8dd
jl 0x431c2f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x74c], 0
jne 0x431c2f
and dword [ebp - 0x2c4], 0
jmp 0x431c39
mov dword [ebp - 0x2c4], 1
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x2cc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x71c]
add eax, dword [ebp - 0x2cc]
push 4
pop ecx
shl ecx, 1
cmp dword [ebp + ecx - 0x71c], eax
jge 0x431c71
mov dword [ebp - 0x2d4], 1
jmp 0x431c78
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x84c], eax
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x431ca7
push 0
push 0
push 0x22fb
push 0
call dword [sym.imp.USER32.dll_AppendMenuA]
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x43203c
mov dword [ebp - 0x9dc], 0x342e
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x431ce1
push 0
push 0x2211
push 0
call dword [sym.imp.GDI32.dll_GetObjectW]
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x431cf5
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x15c]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x2fc], 1
mov dword [ebp - 0x32c], 0xfffffff7
mov dword [ebp - 0x33c], 0xcce0
mov dword [ebp - 0x164], 0
jmp 0x431d47
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 1
jge 0x431d63
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x334], 1
jmp 0x431d3a
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x431d77
mov dword [ebp - 0x304], 1
jmp 0x431d7e
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jge 0x431d92
mov dword [ebp - 0x2dc], 1
jmp 0x431d99
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x2dc]
cmp eax, dword [ebp - 0x18]
jl 0x431db3
mov dword [ebp - 0x2e4], 1
jmp 0x431dba
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
add eax, 0x40a16501
cmp eax, 0xffff
je 0x431dd8
mov dword [ebp - 0x2ec], 1
jmp 0x431ddf
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2ec], eax
jle 0x431df6
mov dword [ebp - 0x2f4], 1
jmp 0x431dfd
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x2f4]
cmp eax, 0xadf1adb2
jne 0x431e1a
mov dword [ebp - 0x80c], 1
jmp 0x431e21
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x9e4], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0
je 0x431e5a
mov eax, 0x4255ebda
test eax, eax
je 0x431e5a
mov dword [ebp - 0x30c], 1
jmp 0x431e61
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x304]
cmp eax, dword [ebp - 0x30c]
jne 0x431e7b
mov dword [ebp - 0x314], 1
jmp 0x431e82
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x314], eax
jne 0x431e99
mov dword [ebp - 0x31c], 1
jmp 0x431ea0
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x31c], eax
jle 0x431eb7
mov dword [ebp - 0x324], 1
jmp 0x431ebe
and dword [ebp - 0x324], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x324]
mov dword [ebp + eax - 0x334], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x32c], eax
jne 0x431f1c
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x431f17
push 0
push 0x79a
push 0x21fd
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetPixel]
jmp 0x431fad
mov dword [ebp - 0x7ac], 0
mov dword [ebp - 0xaf0], 0x45beac3e
mov dword [ebp - 0x9ec], 8
push 2
lea ecx, [ebp - 0xabc]
call fcn.00432b0d
mov dword [ebp - 0x16c], 0
jmp 0x431f60
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 2
jge 0x431f82
push dword [ebp - 0x16c]
lea ecx, [ebp - 0xabc]
call fcn.00432bfb
mov dword [eax], 0x23cb8e00
jmp 0x431f53
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7ac]
mov dword [ebp + eax - 0x334], ecx
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
lea ecx, [ebp - 0xabc]
call fcn.00432bdf
cmp dword [ebp - 0x344], 0
jne 0x431fbd
xor eax, eax
jmp 0x43243b
mov dword [ebp - 0x118], 0xdada439b
mov dword [ebp - 0x118], 0xffffffff
mov dword [ebp - 0x118], 0
jmp 0x431fea
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x1d
jle 0x43200d
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x43200b
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x431fdd
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x344]
mov dword [ebp - 0x770], eax
cmp dword [ebp - 0x770], 0
jne 0x432032
xor eax, eax
jmp 0x43243b
mov eax, dword [ebp - 0x44]
mov dword [eax + 0x10], 1
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x5c], 8
mov dword [ebp - 0x35c], 0xffffffff
mov dword [ebp - 0x128], 0x8ef8a6eb
mov dword [ebp - 0x120], 0xfffffff8
mov dword [ebp - 0x40], 0
jmp 0x432078
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffffa
jne 0x4322ba
mov dword [ebp - 0x38], 0x29be1d92
mov dword [ebp - 0x38], 1
jmp 0x432099
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffea
jne 0x432118
mov dword [ebp - 0x174], 0
jmp 0x4320b8
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jge 0x4320d4
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0xb40], 0xcf2e
jmp 0x4320ab
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb40]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x432113
push 0x176e
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
jmp 0x432092
mov dword [ebp - 0x5c], 0xe2bf
cmp dword [ebp - 0x5c], 0
jne 0x432134
cmp dword [ebp - 0x5c], 0
jne 0x432134
and dword [ebp - 0x34c], 0
jmp 0x43213e
mov dword [ebp - 0x34c], 1
mov eax, dword [ebp - 0x34c]
add eax, 0x5ed50289
cmp eax, dword [ebp - 0x40]
jge 0x432160
cmp dword [ebp - 0x40], 0
je 0x432160
mov dword [ebp - 0x354], 1
jmp 0x432167
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x9f4], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x38], eax
jl 0x43219c
mov dword [ebp - 0x364], 1
jmp 0x4321a3
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x364], eax
jge 0x4321ba
mov dword [ebp - 0x36c], 1
jmp 0x4321c1
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0xffffffff
jge 0x4321d6
mov dword [ebp - 0x374], 1
jmp 0x4321dd
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x374], eax
jle 0x4321f4
mov dword [ebp - 0x37c], 1
jmp 0x4321fb
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x52bf
je 0x432228
cmp dword [ebp - 0x38], 0
jne 0x432228
cmp dword [ebp - 0x38], 0
jne 0x432228
and dword [ebp - 0x384], 0
jmp 0x432232
mov dword [ebp - 0x384], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x384], eax
jge 0x43224f
cmp dword [ebp - 0x120], 0
jne 0x43224f
and dword [ebp - 0x38c], 0
jmp 0x432259
mov dword [ebp - 0x38c], 1
mov eax, dword [ebp - 0x38c]
add eax, 0x116e074f
neg eax
mov ecx, 0xd8cf
sub ecx, eax
add ecx, 0x4f20
cmp dword [ebp - 0x38], ecx
jne 0x432284
mov dword [ebp - 0x394], 1
jmp 0x43228b
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x394], eax
jl 0x4322a2
mov dword [ebp - 0x39c], 1
jmp 0x4322a9
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x120], eax
jmp 0x432071
mov eax, 0x6658
test eax, eax
je 0x4323e5
cmp dword [ebp - 0x128], 2
jne 0x4322dc
mov dword [ebp - 0x3a4], 1
jmp 0x4322e3
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 0xffff
jbe 0x4322fb
mov dword [ebp - 0x774], 1
jmp 0x432302
and dword [ebp - 0x774], 0
cmp dword [ebp - 0x128], 0xd5ab
jle 0x43231a
mov dword [ebp - 0x3ac], 1
jmp 0x432321
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x3ac]
jg 0x432338
mov dword [ebp - 0x3b4], 1
jmp 0x43233f
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x3b4], eax
jle 0x432359
mov dword [ebp - 0x3bc], 1
jmp 0x432360
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x120]
add eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0x3bc]
je 0x432380
mov dword [ebp - 0x3c4], 1
jmp 0x432387
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x3c4], eax
jne 0x43239e
mov dword [ebp - 0x3cc], 1
jmp 0x4323a5
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
add eax, 0x63e3af2c
cmp eax, dword [ebp - 0x5c]
jle 0x4323c1
mov dword [ebp - 0x3d4], 1
jmp 0x4323c8
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x3d4]
cmp eax, 0xbc0b
jne 0x4323e5
mov dword [ebp - 0x3dc], 1
jmp 0x4323ec
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x3dc], eax
jg 0x432403
mov dword [ebp - 0x3e4], 1
jmp 0x43240a
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x44]
cmp dword [eax + 0x10], 0
je 0x43242e
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x3ec], eax
jmp 0x432435
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
pop esi
mov esp, ebp
pop ebp
ret