Function at 0x431a74
Capabilities:
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xa8
mov dword [ebp - 0x10], 0x78a13529
xor ebx, ebx
mov eax, dword [ebp - 0x10]
cmp eax, 0xfae101d4
jg 0x431af1
cmp eax, 0xbbaf56ef
jg 0x431b73
cmp eax, 0xa3f991dd
jle 0x431c65
cmp eax, 0xb1345af8
jg 0x431e0a
cmp eax, 0xa7abf9ad
jg 0x432083
cmp eax, 0xa3f991de
je 0x432477
cmp eax, 0xa5ab1a75
je 0x4324a3
cmp eax, 0xa5ae260f
jne 0x431a89
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
imul eax, dword [ebp - 0x58]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0xb2a1aad2
jmp 0x431a89
cmp eax, 0x3e41e8cc
jg 0x431bef
cmp eax, 0x1f5e02cc
jg 0x431cd0
cmp eax, 0x1249dc0a
jle 0x431e4b
cmp eax, 0x1454c45c
jg 0x4320dd
cmp eax, 0x1249dc0b
je 0x4324d7
cmp eax, 0x12ec38b2
je 0x43250b
cmp eax, 0x13203bff
jne 0x431a89
push ebx
push dword [ebp - 0x1c]
push dword [ebp - 0x34]
push dword [ebp - 0x7c]
push ebx
push dword [ebp + 8]
push dword [ebp - 0x4c]
call dword [sym.imp.GDI32.dll_GetDIBits]
push dword [ebp - 0x4c]
push ebx
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x10], 0x43f3a4c8
jmp 0x431a89
cmp eax, 0xdd05e703
jg 0x431d34
cmp eax, 0xc9db41b3
jle 0x431ea7
cmp eax, 0xd2d87be8
jg 0x43210a
cmp eax, 0xc9db41b4
je 0x432528
cmp eax, 0xcce8375a
je 0x432551
cmp eax, 0xd138e464
jne 0x431a89
mov eax, dword [ebp - 0x18]
shr eax, 0xe
imul eax, eax, 0xdf
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x202d
dec edx
shr eax, 0xb
and eax, 0x7c00
mov dword [ebp - 0x18], eax
mov eax, 0x1cb59434
cmp ecx, edx
je 0x432c9d
mov eax, 0x9abe1bad
jmp 0x432c9d
cmp eax, 0x6116253e
jg 0x431d9a
cmp eax, 0x4d070cd2
jle 0x431ef7
cmp eax, 0x53c42fa3
jg 0x43215b
cmp eax, 0x4d070cd3
je 0x432593
cmp eax, 0x4d18c8eb
je 0x4325cb
cmp eax, 0x51cc038d
jne 0x431a89
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0xfb]
imul ecx, ecx
imul edx, ecx, 0x5001
add eax, eax
add eax, 0x181
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x669fd9f
cmp edx, ecx
je 0x432c9d
mov eax, 0xb1345af9
jmp 0x432c9d
cmp eax, 0x90e56cac
jle 0x431f46
cmp eax, 0x99073e88
jg 0x4321a0
cmp eax, 0x90e56cad
je 0x4325e2
cmp eax, 0x96f251ba
je 0x432612
cmp eax, 0x970e455e
jne 0x431a89
mov eax, dword [ebp - 0x18]
shr eax, 1
lea ecx, [eax + 0xdd]
add eax, 0xb9
imul ecx, ecx
imul edx, ecx, 0xf4d
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xb18be8c0
cmp ecx, edx
je 0x432c9d
mov eax, 0xc12d797a
jmp 0x432c9d
cmp eax, 0x2cacadd4
jle 0x431fad
cmp eax, 0x35868863
jg 0x4321e0
cmp eax, 0x2cacadd5
je 0x43263c
cmp eax, 0x3252fe02
je 0x43265d
cmp eax, 0x327a55ad
jne 0x431a89
mov esi, 0x28
push esi
push 8
push dword [ebp - 0x5c]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax], esi
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0xb1bedde3
jmp 0x431a89
cmp eax, 0xecb12a5e
jle 0x431fe5
cmp eax, 0xeed850a5
jg 0x43221d
cmp eax, 0xecb12a5f
je 0x432697
cmp eax, 0xed59c7bc
je 0x4326ac
cmp eax, 0xedfbd3cf
jne 0x431a89
imul ecx, dword [ebp - 0x18], 0x7887
lea eax, [ecx - 0xe5]
imul ecx, ecx
imul edx, ecx, 0x46f9
dec edx
shr eax, 9
mov dword [ebp - 0x18], eax
mov eax, 0xaa3358b0
cmp edx, ecx
jne 0x432608
jmp 0x432c9d
cmp eax, 0x6a667c0e
jle 0x43203c
cmp eax, 0x75fa0829
jg 0x432277
cmp eax, 0x6a667c0f
je 0x4326da
cmp eax, 0x6b73c1cb
je 0x4326ef
cmp eax, 0x759ec4e8
jne 0x431a89
mov edi, dword [ebp - 0x14]
mov eax, 0xffffff0a
add edi, eax
shr edi, 4
add edi, 0xc6
mov dword [ebp - 0x14], edi
push edi
push 0x4a19
call fcn.00433260
add esp, 8
push edi
call fcn.0043331a
add esp, 4
mov dword [ebp - 0x10], 0xf071e868
jmp 0x431a89
cmp eax, 0xb2a1aad1
jg 0x4322ad
cmp eax, 0xb1345af9
je 0x432709
cmp eax, 0xb18be8c0
je 0x432728
cmp eax, 0xb1bedde3
jne 0x431a89
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x60]
mov dword [eax + 4], ecx
mov dword [ebp - 0x10], 0xaa3358b0
jmp 0x431a89
cmp eax, 0x86512f
jle 0x4322d2
cmp eax, 0x865130
je 0x43275a
cmp eax, 0x669fd9f
je 0x432781
cmp eax, 0x85db58b
jne 0x431a89
mov eax, dword [ebp - 0x14]
lea eax, [eax + eax*4]
shl eax, 9
add eax, 0xfffb9600
mov dword [ebp - 0x14], eax
push 0x5c53
push 0x207b
push eax
call fcn.00431a74
add esp, 0xc
mov dword [ebp - 0x10], 0x5eacfb8f
jmp 0x431a89
cmp eax, 0xc275a18e
jle 0x432302
cmp eax, 0xc275a18f
je 0x4327a2
cmp eax, 0xc37141f3
je 0x4327bb
cmp eax, 0xc391cfcc
jne 0x431a89
mov eax, dword [ebp - 0x14]
shr eax, 8
imul eax, eax, 0xdd
mov dword [ebp - 0x14], eax
push eax
call fcn.0043331a
add esp, 4
mov dword [ebp - 0x10], 0x3de22966
jmp 0x431a89
cmp eax, 0x4034fc6b
jle 0x432333
cmp eax, 0x4034fc6c
je 0x4327d3
cmp eax, 0x4131dcee
je 0x4327e8
cmp eax, 0x43f3a4c8
jne 0x431a89
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax*4]
add eax, 0x36
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov dword [ebp - 0x10], 0xe4f922e9
jmp 0x431a89
cmp eax, 0x87a2011d
jle 0x43236c
cmp eax, 0x87a2011e
je 0x4327f4
cmp eax, 0x8b71f59c
je 0x432809
cmp eax, 0x8f266a9c
jne 0x431a89
mov edi, dword [ebp - 0x14]
shl edi, 5
add edi, 0x3d
mov dword [ebp - 0x14], edi
push edi
call fcn.0043331a
add esp, 4
push 0x3fc2
push edi
call fcn.00433260
add esp, 8
mov eax, 0x551defdf
cmp edi, 5
jl 0x432c9d
mov eax, 0x1cb59434
jmp 0x432c9d
cmp eax, 0x244621e1
jle 0x4323bf
cmp eax, 0x244621e2
je 0x43281d
cmp eax, 0x28c86b29
je 0x432871
cmp eax, 0x2c387bd3
jne 0x431a89
mov dword [ebp - 0x10], 0x28c86b29
jmp 0x431a89
cmp eax, 0xe1932558
jle 0x43240a
cmp eax, 0xe1932559
je 0x432891
cmp eax, 0xe4f922e9
je 0x4328d6
cmp eax, 0xe6761c7c
jne 0x431a89
imul esi, dword [ebp - 0x14], 0x17340
add esi, 0xfffc82ae
mov dword [ebp - 0x14], esi
call fcn.00432efe
mov eax, 0x1454c45d
cmp esi, 0xca
jge 0x432867
jmp 0x432c9d
cmp eax, 0x63c138bf
jle 0x432437
cmp eax, 0x63c138c0
je 0x43290b
cmp eax, 0x6753933f
je 0x432928
cmp eax, 0x69962771
jne 0x431a89
imul eax, dword [ebp - 0x18], 0x2a24
add eax, 0x14a
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x2c387bd3
jmp 0x431a89
cmp eax, 0xa7abf9ae
je 0x432948
cmp eax, 0xaa3358b0
je 0x432991
cmp eax, 0xaeaab18d
jne 0x431a89
mov eax, dword [ebp - 0x18]
mov ecx, 0xa6
add eax, ecx
imul ecx, eax, 0x5a0000
imul eax, eax
imul edx, eax, 0x4289
dec edx
add ecx, 0xab000
mov dword [ebp - 0x18], ecx
mov ecx, 0x37be87e8
cmp eax, edx
je 0x4320d5
mov ecx, 0xb8b656b8
mov dword [ebp - 0x10], ecx
jmp 0x431a89
cmp eax, 0x1454c45d
je 0x4329a5
cmp eax, 0x1cb59434
je 0x4329d9
cmp eax, 0x1e35e006
jne 0x431a89
mov dword [ebp - 0x10], 0x6a667c0f
jmp 0x431a89
cmp eax, 0xd2d87be9
je 0x432a11
cmp eax, 0xd4622810
je 0x432a35
cmp eax, 0xd5da0a40
jne 0x431a89
mov esi, dword [ebp - 0x14]
add esi, 0x65
shr esi, 5
mov dword [ebp - 0x14], esi
push 0x33b6
push esi
call fcn.004332b2
add esp, 8
mov eax, 0x75fa082a
cmp esi, 0xfe
jne 0x4328cc
jmp 0x432c9d
cmp eax, 0x53c42fa4
je 0x432a55
cmp eax, 0x551defdf
je 0x432a88
cmp eax, 0x5eacfb8f
jne 0x431a89
mov eax, dword [ebp - 0x14]
shr eax, 5
lea ecx, [eax + eax*4]
lea ecx, [ecx + ecx*4]
add ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, 0x626988b8
cmp ecx, 0x60
jae 0x4328cc
jmp 0x432c9d
cmp eax, 0x99073e89
je 0x432ac9
cmp eax, 0x9978191a
je 0x432aef
cmp eax, 0x9abe1bad
jne 0x431a89
mov eax, dword [ebp - 0x90]
lea eax, [eax*4 + 0x36]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x10], 0xfae101d5
jmp 0x431a89
cmp eax, 0x35868864
je 0x432b08
cmp eax, 0x37be87e8
je 0x432b49
cmp eax, 0x3de22966
jne 0x431a89
movzx eax, word [ebp - 0x22]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0xb0]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x626988b8
jmp 0x431a89
cmp eax, 0xeed850a6
je 0x432b68
cmp eax, 0xf071e868
je 0x432b7e
cmp eax, 0xf1b7cb62
jne 0x431a89
mov edi, dword [ebp - 0x14]
shl edi, 9
add edi, 0xffff5400
mov eax, edi
shr eax, 0x18
mov dword [ebp - 0x14], eax
call fcn.00432efe
call fcn.00432dad
mov eax, 0xe1932559
cmp edi, 0x7b000000
jb 0x432c9d
mov eax, 0xeed850a6
jmp 0x432c9d
cmp eax, 0x75fa082a
je 0x432bac
cmp eax, 0x7831e23a
je 0x432bcd
cmp eax, 0x78a13529
jne 0x431a89
push eax
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0xaeaab18d
jmp 0x431a89
cmp eax, 0xb2a1aad2
je 0x432beb
cmp eax, 0xb8b656b8
jne 0x432cc1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0x1249dc0b
jmp 0x431a89
cmp eax, 0xfae101d5
je 0x432c0a
cmp eax, 0xfbc3114d
jne 0x431a89
mov eax, dword [ebp - 0x18]
shl eax, 0x19
or eax, 0xd6
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xa3f991de
jmp 0x431a89
cmp eax, 0xbbaf56f0
je 0x432c1d
cmp eax, 0xc12d797a
jne 0x431a89
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp - 0x54]
mov ecx, 0xe
xchg esi, eax
rep movsb byte es:[edi], byte [esi]
xchg esi, eax
mov dword [ebp - 0x10], 0xfbc3114d
jmp 0x431a89
cmp eax, 0x3e41e8cd
je 0x432c29
cmp eax, 0x3ece5d17
jne 0x431a89
mov eax, dword [ebp - 0x14]
lea ecx, [eax*8 + 0x50]
mov dword [ebp - 0x14], ecx
mov eax, 0x78a13529
cmp ecx, 0x8b
jl 0x432abf
jmp 0x432c9d
cmp eax, 0x81fa49ba
je 0x432c3e
cmp eax, 0x838668fd
jne 0x431a89
mov eax, dword [ebp - 0x14]
lea edi, [eax + eax]
add edi, 0xfffffdf8
and edi, 0xfffffffc
mov dword [ebp - 0x14], edi
push 0x410f
push 0x2d42
push edi
call fcn.00431a74
add esp, 0xc
mov eax, 0x3ece5d17
cmp edi, 0x73
jb 0x432c9d
mov eax, 0x78a13529
jmp 0x432c9d
cmp eax, 0x1f5e02cd
je 0x432c5b
cmp eax, 0x22eb69f6
jne 0x431a89
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0xf2]
imul ecx, ecx
imul edx, ecx, 0x1f1d
imul eax, eax, 0x59
add eax, 0x973b
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xf1b7cb62
cmp edx, ecx
je 0x432c9d
mov eax, 0x4034fc6c
jmp 0x432c9d
cmp eax, 0xdd05e704
je 0x432c70
cmp eax, 0xe098560e
jne 0x431a89
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x10], 0xd138e464
jmp 0x431a89
cmp eax, 0x6116253f
je 0x432ca5
cmp eax, 0x626988b8
jne 0x431a89
mov eax, dword [ebp - 0x44]
mov eax, dword [eax]
imul eax, dword [ebp - 0x40]
add eax, 0x1f
and eax, 0xffffffe0
sar eax, 3
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0xac]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0xa5ae260f
jmp 0x431a89
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
lea eax, [eax*4 + 0x28]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
add eax, 0xe
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x10], 0x51cc038d
jmp 0x431a89
imul ecx, dword [ebp - 0x18], 0x9e
shr ecx, 0xe
imul eax, ecx, 0xf1000000
imul ecx, ecx
imul edx, ecx, 0x15e5
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x4034fc6c
cmp edx, ecx
je 0x432c9d
mov eax, 0x6116253f
jmp 0x432c9d
lea eax, [ebp - 0xb4]
push eax
push 0x18
push dword [ebp + 8]
call dword [sym.imp.GDI32.dll_GetObjectW]
movzx eax, word [ebp - 0xa4]
movzx ecx, word [ebp - 0xa2]
mov word [ebp - 0x36], ax
mov word [ebp - 0x38], cx
mov dword [ebp - 0x10], 0x9978191a
jmp 0x431a89
mov eax, dword [ebp - 0x70]
mov dword [eax], 0
mov eax, dword [ebp - 0x20]
mov word [eax], 0x4d42
mov dword [ebp - 0x10], 0x75fa082a
jmp 0x431a89
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push dword [ebp - 0x50]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov dword [ebp - 0x10], 0x970e455e
jmp 0x431a89
mov edi, dword [ebp - 0x14]
shl edi, 0xc
add edi, 0x65fd7
mov dword [ebp - 0x14], edi
push 0x5683
push 0x5774
push edi
call fcn.00431a74
add esp, 0xc
call fcn.00432efe
mov eax, 0x78a13529
cmp edi, 0xf5
jl 0x432c9d
mov eax, 0xed59c7bc
jmp 0x432c9d
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x10], ebx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
mov dword [eax + 0x14], ecx
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x18], ebx
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x1c], ebx
movzx ecx, word [ebp - 0x22]
mov eax, 0xc37141f3
cmp cx, 0x10
jb 0x432c9d
mov eax, 0x4131dcee
jmp 0x432c9d
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x10], 0xe098560e
jmp 0x431a89
imul esi, dword [ebp - 0x14], 0x1e0000
mov dword [ebp - 0x14], esi
push esi
push 0x4ac9
call fcn.00433260
add esp, 8
mov eax, 0x1249dc0b
cmp esi, 0x50
jge 0x432c9d
mov eax, 0x4d070cd3
jmp 0x432c9d
mov eax, dword [ebp - 0x18]
add eax, eax
and eax, 0xffffe
imul eax, eax, 0x9f
add eax, 0x5fa6
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xecb12a5f
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x3c], eax
jmp 0x431a89
imul ecx, dword [ebp - 0x14], 0x136000
mov dword [ebp - 0x14], ecx
mov eax, 0x865130
test ecx, ecx
je 0x432c9d
mov eax, 0x6753933f
jmp 0x432c9d
mov eax, dword [ebp - 0x14]
lea edi, [eax + eax*2]
shl edi, 9
add edi, 0x139ce
mov dword [ebp - 0x14], edi
push edi
push 0x191
push 0x23cf
call fcn.00431a74
add esp, 0xc
push edi
call fcn.0043331a
add esp, 4
mov dword [ebp - 0x10], 0xa5ae260f
jmp 0x431a89
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x10], 0xbbaf56f0
jmp 0x431a89
imul eax, dword [ebp - 0x14], 0xbb92
add eax, 0xfffe3e8a
mov dword [ebp - 0x14], eax
push eax
push 0xb58
push 0x200a
call fcn.00432cfa
add esp, 0xc
mov dword [ebp - 0x10], 0x78a13529
jmp 0x431a89
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0x327a55ad
jmp 0x431a89
mov eax, dword [ebp - 0x14]
shl eax, 0x15
or eax, 0x1c4000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xa5ae260f
jmp 0x431a89
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x84]
mov edi, dword [ebp - 0x88]
xchg esi, eax
rep movsb byte es:[edi], byte [esi]
xchg esi, eax
mov dword [ebp - 0x10], 0x4d18c8eb
jmp 0x431a89
imul esi, dword [ebp - 0x14], 0x82d80
add esi, 0xffffff1c
mov dword [ebp - 0x14], esi
call fcn.00432efe
call fcn.00432dad
mov eax, 0xa7abf9ae
cmp esi, 0x6c
jb 0x432c9d
mov eax, 0x6b73c1cb
jmp 0x432c9d
mov ecx, dword [ebp - 0x14]
shr ecx, 5
and ecx, 0x7fffff
mov dword [ebp - 0x14], ecx
mov eax, 0x99073e89
cmp ecx, 0x3f
jae 0x432c9d
mov eax, 0x90e56cad
jmp 0x432c9d
mov ecx, dword [ebp - 0x14]
mov eax, ecx
shr eax, 6
mov dword [ebp - 0x14], eax
mov eax, 0x8f266a9c
cmp ecx, 0x1e40
jb 0x4328cc
jmp 0x432c9d
movzx eax, word [ebp - 0x36]
imul ax, word [ebp - 0x38]
mov word [ebp - 0x22], ax
mov dword [ebp - 0x10], 0x3de22966
jmp 0x431a89
mov eax, dword [ebp - 0x18]
shl eax, 0x13
add eax, 0xffffffde
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x81fa49ba
jmp 0x431a89
mov eax, dword [ebp - 0x1c]
add eax, 8
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x8b71f59c
jmp 0x431a89
mov dword [ebp - 0x10], 0x3e41e8cd
jmp 0x431a89
mov eax, dword [ebp - 0x74]
add eax, 0x36
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x1cb59434
jmp 0x431a89
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x68]
mov dword [ecx], eax
mov dword [ebp - 0x10], 0xd2d87be9
jmp 0x431a89
mov edi, dword [ebp - 0x14]
shr edi, 0xb
add edi, 0x71
shr edi, 0xb
and edi, 0xfffffff0
add edi, 0xfffffed1
mov dword [ebp - 0x14], edi
push edi
push 0x1cf1
push 0x5ff
call fcn.00431a74
add esp, 0xc
push edi
push 0x30f7
call fcn.00433260
add esp, 8
mov eax, 0x3de22966
cmp edi, 0xbe
jb 0x432c9d
mov eax, 0x6a667c0f
jmp 0x432c9d
push 0
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x2c]
movzx eax, word [eax]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0x13203bff
jmp 0x431a89
mov esi, dword [ebp - 0x14]
add esi, 0xffffff94
mov edi, esi
shr edi, 8
mov dword [ebp - 0x14], edi
push edi
push 0x47d9
push 0x2e05
call fcn.00431a74
add esp, 0xc
push edi
call fcn.0043331a
add esp, 4
mov eax, 0x244621e2
cmp esi, 0x4600
jae 0x432c9d
mov eax, 0xaa3358b0
jmp 0x432c9d
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0xe5]
imul ecx, ecx
imul edx, ecx, 0x5863
dec edx
imul eax, eax, 0x4a
add eax, 0xffffdbde
mov dword [ebp - 0x18], eax
mov eax, 0x3de22966
cmp ecx, edx
je 0x432c9d
mov eax, 0xc9db41b4
jmp 0x432c9d
push dword [ebp - 0x28]
push 0
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0x69962771
jmp 0x431a89
mov eax, dword [ebp - 0x1c]
mov word [eax + 0xc], 1
mov eax, dword [ebp - 0x1c]
movzx ecx, word [ebp - 0x22]
mov word [eax + 0xe], cx
mov dword [ebp - 0x10], 0xedfbd3cf
jmp 0x431a89
imul edi, dword [ebp - 0x14], 0xcdb8
add edi, 0x58ac
mov dword [ebp - 0x14], edi
push 0x61
push edi
call fcn.00433260
add esp, 8
push 0x3c86
push 0x49b4
push edi
call fcn.00432cfa
add esp, 0xc
mov eax, 0x1cb59434
cmp edi, 0xef
jge 0x432c9d
mov eax, 0x8b71f59c
jmp 0x432c9d
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0x22eb69f6
jmp 0x431a89
mov edi, dword [ebp - 0x14]
shr edi, 3
and edi, 0x3fff
mov dword [ebp - 0x14], edi
call fcn.00432dad
call fcn.00432dad
mov eax, 0xd5da0a40
cmp edi, 0xe2
jae 0x432c9d
mov eax, 0x28c86b29
jmp 0x432c9d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x48]
mov dword [eax + 0xa], ecx
mov eax, dword [ebp - 0x20]
mov word [eax + 6], bx
mov eax, dword [ebp - 0x20]
mov word [eax + 8], bx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x20]
mov dword [ecx + 2], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0x63c138c0
jmp 0x431a89
imul eax, dword [ebp - 0x18], 0xc8000
add eax, 0xbf67fdf
shr eax, 0x1b
and eax, 0xfffffffe
lea eax, [eax + eax*2]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x6753933f
jmp 0x431a89
mov eax, dword [ebp - 0x18]
shr eax, 0xf
imul eax, eax, 0x6600
add eax, 0xffffad00
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x12ec38b2
jmp 0x431a89
imul edi, dword [ebp - 0x14], 0x39
add edi, 0x6f
shr edi, 0xc
mov dword [ebp - 0x14], edi
push 0x3978
push edi
call fcn.00433260
add esp, 8
mov eax, 0xc275a18f
cmp edi, 0x47
je 0x432c9d
mov eax, 0x838668fd
jmp 0x432c9d
mov edi, dword [ebp - 0x14]
add edi, 0xffffffdf
mov esi, edi
shr esi, 0x16
mov dword [ebp - 0x14], esi
call fcn.00432efe
push 0x6064
push esi
push 0x2300
call fcn.00431a74
add esp, 0xc
mov eax, 0x4034fc6c
cmp edi, 0x16800000
jae 0x432c9d
mov eax, 0x3de22966
jmp 0x432c9d
mov esi, dword [ebp - 0x14]
and esi, 0x3f
shl esi, 0xd
or esi, 0x73
mov dword [ebp - 0x14], esi
call fcn.00432dad
mov eax, 0xc275a18f
cmp esi, 0xed
jb 0x432b3f
jmp 0x432c9d
imul eax, dword [ebp - 0x18], 0x380
shr eax, 3
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xc275a18f
jmp 0x431a89
mov edi, dword [ebp - 0x14]
shr edi, 9
add edi, 0xffffff3f
mov dword [ebp - 0x14], edi
push edi
push 0x5ac1
call fcn.00433260
add esp, 8
push edi
call fcn.0043331a
add esp, 4
mov eax, 0x4034fc6c
cmp edi, 0xc3
jae 0x432c9d
mov eax, 0x1249dc0b
jmp 0x432c9d
mov eax, dword [ebp - 0x14]
shl eax, 0xd
add eax, 0xe6000
and eax, 0xfff80000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x78a13529
jmp 0x431a89
imul eax, dword [ebp - 0x14], 0x69e1
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x1249dc0b
jmp 0x431a89
mov esi, dword [ebp - 0x14]
add esi, 0x67
mov dword [ebp - 0x14], esi
call fcn.00432efe
call fcn.00432efe
mov eax, 0xdd05e704
cmp esi, 0xa6
jge 0x432c9d
mov eax, 0xc391cfcc
jmp 0x432c9d
mov eax, dword [ebp - 0x1c]
add eax, 0x20
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x9c]
shl eax, 2
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x87a2011e
jmp 0x431a89
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x94]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x10], 0xa5ab1a75
jmp 0x431a89
mov eax, dword [ebp - 0x18]
shl eax, 0xa
add eax, 0x7ffc1000
and eax, 0x7ffff000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x1e35e006
jmp 0x431a89
and dword [ebp - 0x18], 0x1ffff
mov dword [ebp - 0x10], 0x7831e23a
jmp 0x431a89
mov dword [ebp - 0x10], 0x1f5e02cd
jmp 0x431a89
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x20]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0x96f251ba
jmp 0x431a89
mov ecx, dword [ebp - 0x40]
xor eax, eax
inc eax
shl eax, cl
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0x20], eax
mov dword [ebp - 0x10], 0xecb12a5f
mov dword [ebp - 0x3c], eax
jmp 0x431a89
mov eax, dword [ebp - 0x1c]
add eax, 0x24
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0xd4622810
jmp 0x431a89
mov eax, dword [ebp - 0x14]
mov ecx, 0xc5
add eax, ecx
shr eax, 0xd
and eax, 0xfffffffe
imul esi, eax, 0x52
mov dword [ebp - 0x14], esi
call fcn.00432dad
mov eax, 0x78a13529
cmp esi, 0xe7
jae 0x432c9d
mov eax, 0xb1bedde3
mov dword [ebp - 0x10], eax
jmp 0x431a89
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov edi, dword [ebp - 0x98]
xchg esi, eax
rep movsb byte es:[edi], byte [esi]
xchg esi, eax
mov dword [ebp - 0x10], 0xb351f17d
jmp 0x431a89
cmp eax, 0xb351f17d
jne 0x431a89
mov esi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
call esi
xor ebx, ebx
mov edi, dword [sym.imp.KERNEL32.dll_HeapFree]
push dword [ebp - 0x34]
push ebx
push eax
call edi
call esi
push dword [ebp - 0x1c]
push ebx
push eax
call edi
mov eax, dword [ebp - 0x20]
xor eax, eax
inc eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret