Function at 0x42dac2
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x858
push esi
mov dword [ebp - 0x130], 0x3367f5ed
mov dword [ebp - 0xb4], 4
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0xf8], 0
jmp 0x42db0a
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x42db26
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x4f4], 0
jmp 0x42dafd
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x130], eax
jge 0x42db40
mov dword [ebp - 0x51c], 1
jmp 0x42db47
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x130], eax
jle 0x42db6d
mov dword [ebp - 0x58c], 1
jmp 0x42db74
and dword [ebp - 0x58c], 0
mov dword [ebp - 0x48c], 0xffffffff
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x758], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x76c], eax
push 4
pop eax
shl eax, 0
mov ecx, 0xb66f
sub ecx, dword [ebp + eax - 0x4f4]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x4f4]
je 0x42dc3f
mov dword [ebp - 0xa0], 0x4f5a
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x14], 0
jmp 0x42dbe9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x42dc3d
mov dword [ebp - 0xa0], 0
jmp 0x42dc08
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jg 0x42dc3b
mov eax, dword [ebp - 0xa0]
cmp dword [ebp + eax*4 - 0x4f4], 0
je 0x42dc23
jmp 0x42dc3b
mov byte [ebp - 0x66], 0
movzx eax, byte [ebp - 0x66]
test eax, eax
je 0x42dc39
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
jmp 0x42dbfb
jmp 0x42dbe2
jmp 0x42dc8a
mov dword [ebp - 0xb4], 0
jmp 0x42dc58
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xfffffff9
jg 0x42dc8a
mov dword [ebp - 0x14], 0
jmp 0x42dc71
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x42dc88
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x4f4], 0
je 0x42dc86
jmp 0x42dc88
jmp 0x42dc6a
jmp 0x42dc4b
and dword [ebp - 0x24], 0
mov dword [ebp - 0x6c], 0xa4a1
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xc8], 0xe263
mov dword [ebp - 0x74], 8
mov dword [ebp - 0x204], 0xf7f77771
mov eax, dword [ebp - 0x6c]
add eax, 6
mov dword [ebp - 0x100], eax
je 0x42dcdb
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x42dcdb
mov dword [ebp - 0x3f8], 1
jmp 0x42dce2
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0xc8]
add eax, 0x574b
cmp eax, dword [ebp - 0xc8]
jg 0x42dd01
mov dword [ebp - 0x4d8], 1
jmp 0x42dd08
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x4d8], eax
jl 0x42dd25
cmp dword [ebp - 0x6c], 0
je 0x42dd25
mov dword [ebp - 0x4e0], 1
jmp 0x42dd2c
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x4e0]
jg 0x42dd46
mov dword [ebp - 0x4dc], 1
jmp 0x42dd4d
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0x4a71a6e4
jne 0x42dd65
mov dword [ebp - 0x3d4], 1
jmp 0x42dd6c
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x3d4], eax
jge 0x42dd83
mov dword [ebp - 0x1dc], 1
jmp 0x42dd8a
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x74]
imul eax, dword [ebp - 0x1dc]
sub eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x74]
jg 0x42ddb2
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x42ddb2
and dword [ebp - 0x594], 0
jmp 0x42ddbc
mov dword [ebp - 0x594], 1
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x774], eax
cmp dword [ebp - 0x6c], 0x8214
jne 0x42ddda
mov dword [ebp - 0x3f0], 1
jmp 0x42dde1
and dword [ebp - 0x3f0], 0
cmp dword [ebp - 0x3f0], 0
jl 0x42ddfc
cmp dword [ebp - 0x74], 0
je 0x42ddfc
mov dword [ebp - 0x1e4], 1
jmp 0x42de03
and dword [ebp - 0x1e4], 0
cmp dword [ebp - 0x1e4], 0x4d02
je 0x42de1b
mov dword [ebp - 0x1ec], 1
jmp 0x42de22
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x3f8]
cmp eax, dword [ebp - 0x1ec]
jle 0x42de3c
mov dword [ebp - 0x400], 1
jmp 0x42de43
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x400]
neg eax
jne 0x42de53
cmp dword [ebp - 0x6c], 0
je 0x42de6e
mov dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x5a8], eax
jmp 0x42df44
mov dword [ebp - 0x158], 0x5701832d
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0xc8], eax
jne 0x42de9b
mov dword [ebp - 0x1f4], 1
jmp 0x42dea2
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x158]
imul eax, dword [ebp - 0x1f4]
cmp eax, 0xfffffff6
jae 0x42dec0
mov dword [ebp - 0x408], 1
jmp 0x42dec7
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x408], eax
jle 0x42dee1
mov dword [ebp - 0x1fc], 1
jmp 0x42dee8
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x74]
add ecx, dword [ebp - 0x1fc]
imul ecx, dword [ebp - 0x74]
imul eax, ecx
cmp eax, dword [ebp - 0x204]
jle 0x42df12
mov dword [ebp - 0x5b8], 1
jmp 0x42df19
and dword [ebp - 0x5b8], 0
cmp dword [ebp - 0x158], 0x485bdf60
je 0x42df31
mov dword [ebp - 0x410], 1
jmp 0x42df38
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x138], 0x1e559696
mov dword [ebp - 0x108], 0
jmp 0x42df67
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x42df83
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x77c], 0xfffd
jmp 0x42df5a
mov dword [ebp - 0x138], 0
jmp 0x42df9c
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jg 0x42e006
mov dword [ebp - 0x110], 7
mov dword [ebp - 0x5c0], 7
mov dword [ebp - 0x110], 0
jmp 0x42dfd2
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jl 0x42e004
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x42dff8
push 0x14c3
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov dword [ebp - 0x5c0], 0x56a3367f
jmp 0x42dfc5
jmp 0x42df8f
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x42e02c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_UpdateColors]
push 2
lea ecx, [ebp - 0x684]
call fcn.00431e27
mov dword [ebp - 0xac], 0xffffffff
mov dword [ebp - 0x5c8], 0xf5cd53bc
mov dword [ebp - 0x7dc], 0xfffffff8
mov dword [ebp - 0x50], 0
jmp 0x42e067
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x42e083
push dword [ebp - 0x50]
lea ecx, [ebp - 0x684]
call fcn.00431f15
mov dword [eax], 0xa0256915
jmp 0x42e060
mov dword [ebp - 0x50], 0
jmp 0x42e093
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x42e0a9
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x858], 0xffffffff
jmp 0x42e08c
push 1
lea ecx, [ebp - 0x684]
call fcn.00431f15
mov eax, dword [eax]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0xac], 0
jmp 0x42e0e3
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xffffffea
jg 0x42e1d1
mov dword [ebp - 0x708], 0x7b5bf2d3
push 2
lea ecx, [ebp - 0x798]
call fcn.00431e27
mov dword [ebp - 0x638], 0x3e75
mov dword [ebp - 0x634], 0x3e75
mov dword [ebp - 0x630], 0x3e75
mov dword [ebp - 0x62c], 0x3e75
lea ecx, [ebp - 0x165]
call fcn.00431f24
push eax
lea eax, [ebp - 0x628]
push eax
lea eax, [ebp - 0x638]
push eax
lea ecx, [ebp - 0x838]
call fcn.00431f27
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x818]
call fcn.00431ed3
mov dword [ebp - 0x418], 1
mov dword [ebp - 0x150], 0
jmp 0x42e187
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 2
jge 0x42e1a9
push dword [ebp - 0x150]
lea ecx, [ebp - 0x798]
call fcn.00431f15
mov dword [eax], 1
jmp 0x42e17a
mov eax, dword [ebp - 0x418]
dec eax
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x818]
call fcn.00431ef9
lea ecx, [ebp - 0x798]
call fcn.00431ef9
jmp 0x42e0d6
lea ecx, [ebp - 0x684]
call fcn.00431ef9
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x460], 0xf7d59448
mov dword [ebp - 0x57c], 0xdf2ffa36
mov dword [ebp - 0x56c], 5
mov dword [ebp - 0x118], 0
jmp 0x42e221
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jge 0x42e23d
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x1bc], 0xd7feae21
jmp 0x42e214
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42e397
cmp dword [ebp - 0x20], 0xffff
jbe 0x42e262
mov dword [ebp - 0x20c], 1
jmp 0x42e269
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20]
lea eax, [eax*4 + 0x53d42374]
cmp eax, 3
jl 0x42e284
mov dword [ebp - 0x420], 1
jmp 0x42e28b
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x420]
jg 0x42e2a5
mov dword [ebp - 0x214], 1
jmp 0x42e2ac
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0x68de
je 0x42e397
mov dword [ebp - 0x428], 0xa969ac54
mov dword [ebp - 0x430], 0xaf8716b5
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x70c], eax
cmp dword [ebp - 0x428], 0
je 0x42e32b
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x42e30f
cmp dword [ebp - 0x20], 0
je 0x42e30f
mov dword [ebp - 0x21c], 1
jmp 0x42e316
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 0xfffffffc
jl 0x42e32b
mov dword [ebp - 0x224], 1
jmp 0x42e332
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x430]
add eax, dword [ebp - 0x224]
cmp eax, 0x75158018
jl 0x42e35a
mov eax, 0x58efa97
test eax, eax
je 0x42e35a
mov dword [ebp - 0x438], 1
jmp 0x42e361
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x438], eax
je 0x42e378
mov dword [ebp - 0x22c], 1
jmp 0x42e37f
and dword [ebp - 0x22c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x22c]
mov dword [ebp + eax - 0x1bc], ecx
jmp 0x42e62e
mov dword [ebp - 0x28], 0x62d50c85
mov dword [ebp - 0x530], 0x9e95372
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jle 0x42e3bc
mov dword [ebp - 0x5d0], 1
jmp 0x42e3c3
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x71c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x724], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x20]
cmp dword [ebp + eax - 0x1bc], ecx
jle 0x42e3f6
mov dword [ebp - 0x440], 1
jmp 0x42e3fd
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0x6ac3
jne 0x42e415
mov dword [ebp - 0x234], 1
jmp 0x42e41c
and dword [ebp - 0x234], 0
cmp dword [ebp - 0x234], 0xfff7
jbe 0x42e434
mov dword [ebp - 0x448], 1
jmp 0x42e43b
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x448], eax
je 0x42e452
mov dword [ebp - 0x5d8], 1
jmp 0x42e459
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x7c], eax
jge 0x42e476
mov dword [ebp - 0x23c], 1
jmp 0x42e47d
and dword [ebp - 0x23c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1bc]
cmp dword [ebp - 0x23c], eax
jg 0x42e49e
mov dword [ebp - 0x450], 1
jmp 0x42e4a5
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x57c]
cmp dword [ebp - 0x450], eax
jle 0x42e4bf
mov dword [ebp - 0x244], 1
jmp 0x42e4c6
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x244], eax
jl 0x42e4dd
mov dword [ebp - 0x458], 1
jmp 0x42e4e4
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x734], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1bc]
cmp dword [ebp - 0x28], eax
jle 0x42e514
mov dword [ebp - 0x24c], 1
jmp 0x42e51b
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x73c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1bc], 0
jne 0x42e549
mov dword [ebp - 0x254], 1
jmp 0x42e550
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x56c]
cmp dword [ebp - 0x460], eax
jl 0x42e56a
mov dword [ebp - 0x52c], 1
jmp 0x42e571
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x744], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1bc]
mov dword [ebp - 0x74c], eax
cmp dword [ebp - 0x7c], 0
jne 0x42e5ae
mov eax, 0x91c6c8ec
test eax, eax
jne 0x42e5ae
and dword [ebp - 0x468], 0
jmp 0x42e5b8
mov dword [ebp - 0x468], 1
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x468]
cmp eax, 0xcf1a
jne 0x42e5d4
mov dword [ebp - 0x25c], 1
jmp 0x42e5db
and dword [ebp - 0x25c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1bc]
cmp eax, dword [ebp - 0x25c]
jle 0x42e5fc
mov dword [ebp - 0x470], 1
jmp 0x42e603
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 0x6d6a
jne 0x42e61b
mov dword [ebp - 0x264], 1
jmp 0x42e622
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x140], 0xbd7b1c2a
push 3
lea ecx, [ebp - 0x69c]
call fcn.00431e27
mov dword [ebp - 0x538], 0xfffffffb
mov dword [ebp - 0x4c], 0
jmp 0x42e65f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x42e67b
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x69c]
call fcn.00431f15
mov dword [eax], 0x6544d187
jmp 0x42e658
mov dword [ebp - 0x4c], 0
jmp 0x42e68b
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x42e6a1
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x584], 0x4ee87f6f
jmp 0x42e684
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x140], eax
jle 0x42e6bb
mov dword [ebp - 0x26c], 1
jmp 0x42e6c2
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x140], 0
jne 0x42e6dd
cmp dword [ebp - 0x140], 0
jne 0x42e6dd
and dword [ebp - 0x478], 0
jmp 0x42e6e7
mov dword [ebp - 0x478], 1
cmp dword [ebp - 0x478], 0xa1bf
jl 0x42e6ff
mov dword [ebp - 0x480], 1
jmp 0x42e706
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x26c]
add eax, dword [ebp - 0x480]
mov dword [ebp - 0x178], eax
push 1
lea ecx, [ebp - 0x69c]
call fcn.00431f15
mov ecx, dword [ebp - 0x178]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x178]
mov dword [ebp + eax - 0x584], ecx
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x538], eax
lea ecx, [ebp - 0x69c]
call fcn.00431ef9
mov eax, dword [ebp + 8]
mov dword [ebp - 0x194], eax
push 1
lea ecx, [ebp - 0x6a8]
call fcn.00431e27
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x120], 0
jmp 0x42e790
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x42e7b2
push dword [ebp - 0x120]
lea ecx, [ebp - 0x6a8]
call fcn.00431f15
mov dword [eax], 0x48bbca63
jmp 0x42e783
mov dword [ebp - 0xd0], 0
jmp 0x42e7cb
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jge 0x42e7ea
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x6a8]
call fcn.00431f15
and dword [eax], 0
jmp 0x42e7be
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x42e802
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
lea ecx, [ebp - 0x6a8]
call fcn.00431ef9
mov eax, dword [ebp - 0x194]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x42eca0
mov dword [ebp - 0x1c0], 0x265ab3e9
mov dword [ebp - 0x274], 1
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x588], 1
mov dword [ebp - 0x180], 0xe17c1097
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x540], 0x7af2c9a1
mov dword [ebp - 0x5d4], 0
mov dword [ebp - 0x160], 0
jmp 0x42e88a
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x42e8a6
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x5a0], 5
jmp 0x42e87d
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 8
jbe 0x42e8c7
mov dword [ebp - 0x498], 1
jmp 0x42e8ce
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x1c0]
neg eax
mov dword [ebp - 0x488], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x488]
mov dword [ebp + eax - 0x5a0], ecx
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x488], eax
jge 0x42e916
mov dword [ebp - 0x27c], 1
jmp 0x42e91d
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x588], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5a0]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jne 0x42e958
cmp dword [ebp - 0x180], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x5a0], 0xfffffffa
je 0x42e974
mov dword [ebp - 0x490], 1
jmp 0x42e97b
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x540]
cmp dword [ebp - 0x180], eax
jl 0x42e9a1
mov dword [ebp - 0x284], 1
jmp 0x42e9a8
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x284], eax
jle 0x42e9c2
mov dword [ebp - 0x28c], 1
jmp 0x42e9c9
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x498]
sub eax, dword [ebp - 0x28c]
jne 0x42e9e9
mov eax, 0xf545
test eax, eax
jne 0x42e9e9
and dword [ebp - 0x4a0], 0
jmp 0x42e9f3
mov dword [ebp - 0x4a0], 1
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x5d4], eax
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x190], 0xfffffff6
mov dword [ebp - 0x2b4], 0x58331c58
mov dword [ebp - 0x1a8], 0x89bdd777
mov dword [ebp - 0x754], 0xf928d9ba
mov dword [ebp - 0x548], 0x4129b857
and dword [ebp - 0x660], 0
and dword [ebp - 0x65c], 0
and dword [ebp - 0x658], 0
and dword [ebp - 0x654], 0
lea ecx, [ebp - 0x1ad]
call fcn.00431f24
push eax
lea eax, [ebp - 0x650]
push eax
lea eax, [ebp - 0x660]
push eax
lea ecx, [ebp - 0x820]
call fcn.00431f27
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5b4]
call fcn.00431ed3
mov dword [ebp - 0x188], 5
mov dword [ebp - 0x4b8], 0xffff
mov dword [ebp - 0x4c0], 0x1f6e
mov dword [ebp - 0xf0], 1
cmp dword [ebp - 0xf0], 0
je 0x42ead1
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
push 3
lea ecx, [ebp - 0x5b4]
call fcn.00431f15
mov esi, eax
push 1
lea ecx, [ebp - 0x5b4]
call fcn.00431f15
imul eax, dword [eax], 0xce7a
cmp dword [esi], eax
jle 0x42eb03
mov dword [ebp - 0x294], 1
jmp 0x42eb0a
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x1a8]
add eax, dword [ebp - 0x294]
cmp eax, 0xfffffffb
jb 0x42eb27
mov dword [ebp - 0x4a8], 1
jmp 0x42eb2e
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x4a8], eax
je 0x42eb48
mov dword [ebp - 0x29c], 1
jmp 0x42eb4f
and dword [ebp - 0x29c], 0
cmp dword [ebp - 0x29c], 0x8e54
je 0x42eb67
mov dword [ebp - 0x4b0], 1
jmp 0x42eb6e
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b8]
cmp dword [ebp - 0x4b0], eax
je 0x42eb88
mov dword [ebp - 0x2a4], 1
jmp 0x42eb8f
and dword [ebp - 0x2a4], 0
mov esi, dword [ebp - 0x2a4]
sub esi, dword [ebp - 0x4b8]
add esi, dword [ebp - 0x548]
push 2
lea ecx, [ebp - 0x5b4]
call fcn.00431f15
cmp esi, dword [eax]
jl 0x42ebbe
mov dword [ebp - 0x2ac], 1
jmp 0x42ebc5
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x4c0]
cmp dword [ebp - 0xf0], eax
je 0x42ebeb
mov dword [ebp - 0x590], 1
jmp 0x42ebf2
and dword [ebp - 0x590], 0
mov eax, 0x1c19
sub eax, dword [ebp - 0x2b4]
add eax, 0xffff
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x1a8], eax
jne 0x42ec2e
mov dword [ebp - 0x4c8], 1
jmp 0x42ec35
and dword [ebp - 0x4c8], 0
imul eax, dword [ebp - 0x4c8], 0
cmp eax, 0xffffffff
je 0x42ec53
cmp dword [ebp - 0x190], 0
jne 0x42ec53
and dword [ebp - 0x4d0], 0
jmp 0x42ec5d
mov dword [ebp - 0x4d0], 1
cmp dword [ebp - 0x4d0], 0xfffffff9
jb 0x42ec72
mov dword [ebp - 0x2c0], 1
jmp 0x42ec79
and dword [ebp - 0x2c0], 0
push 2
lea ecx, [ebp - 0x5b4]
call fcn.00431f15
mov ecx, dword [ebp - 0x2c0]
mov dword [eax], ecx
lea ecx, [ebp - 0x5b4]
call fcn.00431ef9
xor eax, eax
jmp 0x431387
push 2
lea ecx, [ebp - 0x7a8]
call fcn.00431e27
mov dword [ebp - 0x60], 0xfffffff6
mov dword [ebp - 0x5bc], 0
mov dword [ebp - 0xf4], 0
jmp 0x42ecd7
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x42ecf9
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x7a8]
call fcn.00431f15
mov dword [eax], 1
jmp 0x42ecca
mov dword [ebp - 0x60], 0
jmp 0x42ed09
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jg 0x42ed41
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x42ed3f
push 0xfd8
push 0x19bc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_LineTo]
jmp 0x42ed02
mov dword [ebp - 0x60], 0
jmp 0x42ed51
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xfffffff6
je 0x42ed6f
mov dword [ebp - 0x550], 1
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x5bc], eax
jmp 0x42ed4a
lea ecx, [ebp - 0x7a8]
call fcn.00431ef9
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xcc], ecx
mov eax, dword [ebp - 0xcc]
cmp dword [eax], 0x4550
je 0x42f0ca
mov dword [ebp - 0x58], 0x60477862
mov dword [ebp - 0x5c], 3
mov dword [ebp - 0x174], 0x3d97867a
mov dword [ebp - 0x64c], 0x1b78cd90
mov dword [ebp - 0x648], 0x1b78cd90
mov dword [ebp - 0x644], 0x1b78cd90
mov dword [ebp - 0x640], 0x1b78cd90
lea ecx, [ebp - 0x1ae]
call fcn.00431f24
push eax
lea eax, [ebp - 0x63c]
push eax
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x828]
call fcn.00431f27
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6d8]
call fcn.00431ed3
mov dword [ebp - 0x58], 0
jmp 0x42ee23
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffef
jne 0x42ef87
mov dword [ebp - 0x700], 0xfffffffe
mov dword [ebp - 0x6fc], 0xfffffffe
mov dword [ebp - 0x6f8], 0xfffffffe
mov dword [ebp - 0x6f4], 0xfffffffe
mov dword [ebp - 0x75c], 0xb66febfb
mov dword [ebp - 0x2d0], 0x3dc99cdf
mov dword [ebp - 0x198], 1
mov dword [ebp - 0x1b4], 0x11bb
mov eax, 0xb95ae649
test eax, eax
je 0x42eef6
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x2d0], eax
jl 0x42eead
mov dword [ebp - 0x3e8], 1
jmp 0x42eeb4
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0xffffffff
ja 0x42eec9
mov dword [ebp - 0x2c8], 1
jmp 0x42eed0
and dword [ebp - 0x2c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x700]
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp - 0x2c8]
add eax, ecx
je 0x42eef6
mov dword [ebp - 0x3e0], 1
jmp 0x42eefd
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x2d0]
cmp eax, dword [ebp - 0x198]
jg 0x42ef23
mov dword [ebp - 0x558], 1
jmp 0x42ef2a
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x1b4], 0xfbfc
je 0x42ef4b
mov dword [ebp - 0x3e4], 1
jmp 0x42ef52
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
sub eax, dword [ebp - 0x198]
cmp eax, 1
jb 0x42ef6f
mov dword [ebp - 0x2d8], 1
jmp 0x42ef76
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x174], eax
jmp 0x42ee1c
cmp dword [ebp - 0x58], 0
jne 0x42eff7
cmp dword [ebp - 0x5c], 0x7e4ddbb7
jle 0x42efa2
mov dword [ebp - 0x464], 1
jmp 0x42efa9
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
sub eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x5c]
jne 0x42efc3
mov dword [ebp - 0x2e0], 1
jmp 0x42efca
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x2e0], eax
jle 0x42efe1
mov dword [ebp - 0x598], 1
jmp 0x42efe8
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x5c], 0
jne 0x42eff7
and dword [ebp - 0x3ec], 0
jmp 0x42f001
mov dword [ebp - 0x3ec], 1
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x3ec]
je 0x42f018
mov dword [ebp - 0x16c], 1
jmp 0x42f01f
and dword [ebp - 0x16c], 0
push 2
lea ecx, [ebp - 0x6d8]
call fcn.00431f15
mov ecx, dword [ebp - 0x16c]
mov dword [eax], ecx
cmp dword [ebp - 0x16c], 0x1a932da3
jge 0x42f05e
push 0
lea ecx, [ebp - 0x6d8]
call fcn.00431f15
cmp dword [eax], 0
je 0x42f05e
mov dword [ebp - 0x2e8], 1
jmp 0x42f065
and dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2e8], 0x5d0
jl 0x42f07d
mov dword [ebp - 0x4a4], 1
jmp 0x42f084
and dword [ebp - 0x4a4], 0
mov dword [ebp - 0x174], 0xc2e3
mov eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0x4a4]
je 0x42f0a8
mov dword [ebp - 0x2f0], 1
jmp 0x42f0af
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x5c], eax
lea ecx, [ebp - 0x6d8]
call fcn.00431ef9
xor eax, eax
jmp 0x431387
push 2
lea ecx, [ebp - 0x7c8]
call fcn.00431e27
mov dword [ebp - 0x104], 0xa66fe7d8
mov dword [ebp - 0x770], 0xbe13
mov dword [ebp - 0x778], 0x18d303f0
mov dword [ebp - 0x780], 1
mov dword [ebp - 0x3f4], 0xec62bb2c
mov dword [ebp - 0xfc], 0
jmp 0x42f122
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x42f144
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x7c8]
call fcn.00431f15
mov dword [eax], 0xfffffffa
jmp 0x42f115
mov dword [ebp - 0x104], 1
jmp 0x42f15d
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x42f211
mov dword [ebp - 0x788], 0x3b9da4d0
push 1
lea ecx, [ebp - 0x7b8]
call fcn.00431e27
mov dword [ebp - 0x7ec], 0xbc254e7f
mov dword [ebp - 0x2f8], 0x62d17f49
mov dword [ebp - 0x40], 0
jmp 0x42f1a5
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x42f1c1
push dword [ebp - 0x40]
lea ecx, [ebp - 0x7b8]
call fcn.00431f15
mov dword [eax], 9
jmp 0x42f19e
mov dword [ebp - 0x40], 0
jmp 0x42f1d1
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x42f1e7
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x7f4], 0xf06e85fc
jmp 0x42f1ca
mov eax, dword [ebp - 0x3f4]
dec eax
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
lea ecx, [ebp - 0x7b8]
call fcn.00431ef9
jmp 0x42f150
lea ecx, [ebp - 0x7c8]
call fcn.00431ef9
push 1
lea eax, [ebp - 0x15c]
push eax
push 1
push 0x6e72
push 0x52bd
push 1
push dword [ebp - 0xcc]
push 1
push 1
push 0x397a
push 0
call fcn.0042839d
add esp, 0x2c
mov dword [ebp - 0x84], 0x182eac45
push 4
lea ecx, [ebp - 0x1cc]
call fcn.00431e27
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x10], 0xfffffffa
mov dword [ebp - 0xa4], 0x137d3709
push 3
lea ecx, [ebp - 0x6e4]
call fcn.00431e27
mov dword [ebp - 0xc], 0
jmp 0x42f298
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x42f2b4
push dword [ebp - 0xc]
lea ecx, [ebp - 0x1cc]
call fcn.00431f15
mov dword [eax], 0xfffffffc
jmp 0x42f291
mov dword [ebp - 0xc], 0
jmp 0x42f2c4
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x42f2e0
push dword [ebp - 0xc]
lea ecx, [ebp - 0x6e4]
call fcn.00431f15
mov dword [eax], 0xffff
jmp 0x42f2bd
mov dword [ebp - 0xc], 0
jmp 0x42f2f0
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x42f306
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x764], 0x302220c9
jmp 0x42f2e9
cmp dword [ebp - 0x64], 0
jne 0x42f3ce
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x7fc], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x804], eax
mov eax, 0x18c8
test eax, eax
je 0x42f340
cmp dword [ebp - 0x10], 0
je 0x42f340
mov dword [ebp - 0x46c], 1
jmp 0x42f347
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
sub eax, dword [ebp - 0x10]
jne 0x42f361
cmp dword [ebp - 0x64], 0
jne 0x42f361
and dword [ebp - 0x300], 0
jmp 0x42f36b
mov dword [ebp - 0x300], 1
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x300], eax
jle 0x42f385
mov dword [ebp - 0x3fc], 1
jmp 0x42f38c
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x3fc]
sub eax, dword [ebp - 0x10]
imul eax, eax, 0x6082
cmp eax, dword [ebp - 0x64]
jl 0x42f3b2
mov dword [ebp - 0x308], 1
jmp 0x42f3b9
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0x5835a7ab
jg 0x42f3ce
and dword [ebp - 0x4c4], 0
jmp 0x42f3d8
mov dword [ebp - 0x4c4], 1
cmp dword [ebp - 0x4c4], 1
ja 0x42f3ed
mov dword [ebp - 0x310], 1
jmp 0x42f3f4
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x310]
imul eax, eax, 0x104
test eax, eax
jne 0x42f419
mov eax, 0x3a72
test eax, eax
jne 0x42f419
and dword [ebp - 0x404], 0
jmp 0x42f423
mov dword [ebp - 0x404], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x404], eax
jne 0x42f449
cmp dword [ebp - 0x84], 0
je 0x42f449
cmp dword [ebp - 0x64], 0
je 0x42f449
mov dword [ebp - 0x318], 1
jmp 0x42f450
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x318]
jle 0x42f467
mov dword [ebp - 0x474], 1
jmp 0x42f46e
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0xa4], eax
jle 0x42f49a
mov eax, 0x1afec1e1
test eax, eax
je 0x42f49a
mov dword [ebp - 0x320], 1
jmp 0x42f4a1
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x320], eax
jg 0x42f4be
cmp dword [ebp - 0x10], 0
jne 0x42f4be
and dword [ebp - 0x40c], 0
jmp 0x42f4c8
mov dword [ebp - 0x40c], 1
cmp dword [ebp - 0x40c], 0xb705
je 0x42f4e0
mov dword [ebp - 0x4ac], 1
jmp 0x42f4e7
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x328], eax
push 3
lea ecx, [ebp - 0x1cc]
call fcn.00431f15
mov ecx, dword [ebp - 0x328]
mov dword [eax], ecx
mov eax, dword [ebp - 0x328]
cmp eax, dword [ebp - 0x4ac]
jle 0x42f522
mov dword [ebp - 0x330], 1
jmp 0x42f529
and dword [ebp - 0x330], 0
cmp dword [ebp - 0x330], 0xfff7
jb 0x42f541
mov dword [ebp - 0x414], 1
jmp 0x42f548
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
sub eax, 0x7283a7b2
je 0x42f81e
mov dword [ebp - 0x10c], 0
jmp 0x42f572
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x42f58e
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x6f0], 0xb1495dd6
jmp 0x42f565
mov dword [ebp - 0x10], 0
jmp 0x42f59e
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x42f7ff
mov dword [ebp - 0x338], 0x6f576105
mov dword [ebp - 0x17c], 0x85d55a9d
mov dword [ebp - 0x350], 0x784865e5
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6f0]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x704], eax
push 3
lea ecx, [ebp - 0x1cc]
call fcn.00431f15
cmp dword [ebp - 0x17c], 0xc545f0a8
ja 0x42f609
mov dword [ebp - 0x47c], 1
jmp 0x42f610
and dword [ebp - 0x47c], 0
push 0
lea ecx, [ebp - 0x6e4]
call fcn.00431f15
mov eax, dword [eax]
cmp eax, dword [ebp - 0x47c]
jge 0x42f633
mov dword [ebp - 0x340], 1
jmp 0x42f63a
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0xa4], eax
jge 0x42f660
mov dword [ebp - 0x41c], 1
jmp 0x42f667
and dword [ebp - 0x41c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6f0]
cmp dword [ebp - 0x41c], eax
jg 0x42f688
mov dword [ebp - 0x348], 1
jmp 0x42f68f
and dword [ebp - 0x348], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1cc]
call fcn.00431f15
mov ecx, dword [ebp - 0x348]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x17c]
je 0x42f6b9
mov dword [ebp - 0x4d4], 1
jmp 0x42f6c0
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x350], eax
mov esi, dword [ebp - 0x350]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1cc]
call fcn.00431f15
cmp dword [eax], esi
jne 0x42f6f0
mov dword [ebp - 0x424], 1
jmp 0x42f6f7
and dword [ebp - 0x424], 0
cmp dword [ebp - 0x424], 0
jae 0x42f70c
mov dword [ebp - 0x358], 1
jmp 0x42f713
and dword [ebp - 0x358], 0
cmp dword [ebp - 0x358], 1
ja 0x42f728
mov dword [ebp - 0x484], 1
jmp 0x42f72f
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 0x4a9f
je 0x42f747
mov dword [ebp - 0x360], 1
jmp 0x42f74e
and dword [ebp - 0x360], 0
push 3
lea ecx, [ebp - 0x1cc]
call fcn.00431f15
mov ecx, dword [ebp - 0x360]
cmp ecx, dword [eax]
jl 0x42f771
mov dword [ebp - 0x42c], 1
jmp 0x42f778
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x42c], eax
jg 0x42f792
mov dword [ebp - 0x368], 1
jmp 0x42f799
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x368], eax
jne 0x42f7b0
mov dword [ebp - 0x4b4], 1
jmp 0x42f7b7
and dword [ebp - 0x4b4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4b4]
mov dword [ebp + eax - 0x6f0], ecx
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x42f7fa
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0x2370
push 0x2110
push 0xa3f
push 0x25a5
push 0
call dword [sym.imp.USER32.dll_TrackPopupMenu]
jmp 0x42f597
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x42f819
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x42f991
mov dword [ebp - 0x114], 3
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x10], 0xfff9
ja 0x42f849
mov dword [ebp - 0x378], 1
jmp 0x42f850
and dword [ebp - 0x378], 0
cmp dword [ebp - 0x114], 0
jne 0x42f86b
cmp dword [ebp - 0x114], 0
jne 0x42f86b
and dword [ebp - 0x370], 0
jmp 0x42f875
mov dword [ebp - 0x370], 1
push 2
lea ecx, [ebp - 0x1cc]
call fcn.00431f15
mov ecx, dword [ebp - 0x370]
cmp ecx, dword [eax]
jl 0x42f898
mov dword [ebp - 0x434], 1
jmp 0x42f89f
and dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 1
jge 0x42f8b4
mov dword [ebp - 0x1d0], 1
jmp 0x42f8bb
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x378]
cmp eax, dword [ebp - 0x1d0]
jne 0x42f8d5
mov dword [ebp - 0x380], 1
jmp 0x42f8dc
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 0x3f408375
jl 0x42f8f4
mov dword [ebp - 0x184], 1
jmp 0x42f8fb
and dword [ebp - 0x184], 0
push 3
lea ecx, [ebp - 0x1cc]
call fcn.00431f15
mov ecx, dword [ebp - 0x184]
mov dword [eax], ecx
cmp dword [ebp - 0x184], 0
jne 0x42f928
cmp dword [ebp - 0x64], 0
jne 0x42f928
and dword [ebp - 0x43c], 0
jmp 0x42f932
mov dword [ebp - 0x43c], 1
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x43c], eax
jle 0x42f94c
mov dword [ebp - 0x388], 1
jmp 0x42f953
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 0x9fa4
jg 0x42f96b
mov dword [ebp - 0x4cc], 1
jmp 0x42f972
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0xa4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa4]
mov dword [ebp + eax - 0x764], ecx
lea ecx, [ebp - 0x6e4]
call fcn.00431ef9
lea ecx, [ebp - 0x1cc]
call fcn.00431ef9
cmp dword [ebp - 0x15c], 0
jne 0x42ffa7
mov dword [ebp - 4], 0
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x48], 0xffffffff
push 1
lea ecx, [ebp - 0x50c]
call fcn.00431e27
mov dword [ebp - 0x11c], 0
jmp 0x42f9ef
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jge 0x42fa11
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x50c]
call fcn.00431f15
mov dword [eax], 0xcd1ac8c6
jmp 0x42f9e2
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 4], eax
jge 0x42fa25
mov dword [ebp - 0x3a0], 1
jmp 0x42fa2c
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x7cc], eax
cmp dword [ebp - 4], 0x92079655
jbe 0x42fa4a
mov dword [ebp - 0x390], 1
jmp 0x42fa51
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x390], eax
jge 0x42fa68
mov dword [ebp - 0x444], 1
jmp 0x42fa6f
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
dec eax
cmp eax, dword [ebp - 0x18]
jge 0x42fa87
mov dword [ebp - 0x398], 1
jmp 0x42fa8e
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x398], eax
jge 0x42faa5
mov dword [ebp - 0x560], 1
jmp 0x42faac
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x784], eax
cmp dword [ebp - 0x18], 0xffff
jb 0x42faca
mov dword [ebp - 0x494], 1
jmp 0x42fad1
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x494], eax
jge 0x42fae8
mov dword [ebp - 0x44c], 1
jmp 0x42faef
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x3a0]
cmp eax, dword [ebp - 0x44c]
jne 0x42fb09
mov dword [ebp - 0x3a8], 1
jmp 0x42fb10
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x3a8], 0xffffffff
je 0x42fb25
mov dword [ebp - 0x4bc], 1
jmp 0x42fb2c
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x4bc]
cmp eax, dword [ebp - 4]
je 0x42fb47
mov dword [ebp - 0x3b0], 1
jmp 0x42fb4e
and dword [ebp - 0x3b0], 0
cmp dword [ebp - 0x3b0], 2
jl 0x42fb63
mov dword [ebp - 0x5cc], 1
jmp 0x42fb6a
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 4], eax
jg 0x42fb87
mov dword [ebp - 0x454], 1
jmp 0x42fb8e
and dword [ebp - 0x454], 0
push 0
lea ecx, [ebp - 0x50c]
call fcn.00431f15
mov ecx, dword [ebp - 0x454]
cmp ecx, dword [eax]
jne 0x42fbb1
mov dword [ebp - 0x3b8], 1
jmp 0x42fbb8
and dword [ebp - 0x3b8], 0
imul eax, dword [ebp - 0x3b8], 0xfb38
cmp dword [ebp - 4], eax
jg 0x42fbd3
mov dword [ebp - 0x49c], 1
jmp 0x42fbda
and dword [ebp - 0x49c], 0
cmp dword [ebp - 0x49c], 0xffffffff
jg 0x42fbef
mov dword [ebp - 0x568], 1
jmp 0x42fbf6
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x7e0], eax
push 0
lea ecx, [ebp - 0x50c]
call fcn.00431f15
mov dword [ebp - 0x3c0], eax
push 0
lea ecx, [ebp - 0x50c]
call fcn.00431f15
mov ecx, dword [ebp - 0x3c0]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c0]
cmp dword [eax], 0xf20bab1f
ja 0x42fc43
mov dword [ebp - 0x45c], 1
jmp 0x42fc4a
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x45c]
test eax, eax
je 0x42fc8c
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x42fc8a
push 0
push 0x1162
push 0x1dd1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
jmp 0x42fcd9
mov dword [ebp - 0x48], 0xffffffff
jmp 0x42fc9c
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x13
jg 0x42fcd9
mov dword [ebp - 0x5a4], 0xfffffffb
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x42fccc
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
cmp dword [ebp - 0x5a4], 0
je 0x42fcd7
jmp 0x42fcd9
jmp 0x42fc95
mov dword [ebp - 0x48], 0
jmp 0x42fce9
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x42fd35
mov dword [ebp - 4], 0
jmp 0x42fcff
cmp dword [ebp - 4], 0
jg 0x42fd33
mov dword [ebp - 0x18], 0
jmp 0x42fd15
cmp dword [ebp - 0x18], 1
jge 0x42fd31
push dword [ebp - 0x18]
lea ecx, [ebp - 0x50c]
call fcn.00431f15
mov dword [eax], 0x218ad385
jmp 0x42fd0e
jmp 0x42fcf8
jmp 0x42fce2
lea ecx, [ebp - 0x50c]
call fcn.00431ef9
push 3
lea ecx, [ebp - 0x6c0]
call fcn.00431e27
mov dword [ebp - 0x718], 0x9be1d925
mov dword [ebp - 0xe8], 0
push 3
lea ecx, [ebp - 0x7d8]
call fcn.00431e27
mov dword [ebp - 0xbc], 0xfe662db8
mov dword [ebp - 0x3c8], 6
mov dword [ebp - 8], 0
jmp 0x42fd92
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x42fdae
push dword [ebp - 8]
lea ecx, [ebp - 0x6c0]
call fcn.00431f15
mov dword [eax], 0xfffffffe
jmp 0x42fd8b
mov dword [ebp - 8], 0
jmp 0x42fdbe
cmp dword [ebp - 8], 4
jge 0x42fdd4
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x848], 0xdf37d45d
jmp 0x42fdb7
mov dword [ebp - 8], 0
jmp 0x42fde4
push 2
lea ecx, [ebp - 0x690]
call fcn.00431e27
push 3
lea ecx, [ebp - 0x518]
call fcn.00431e27
mov dword [ebp - 0x34], 0
jmp 0x42ffd1
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x42ffea
push dword [ebp - 0x34]
lea ecx, [ebp - 0x690]
call fcn.00431f15
and dword [eax], 0
jmp 0x42ffca
mov dword [ebp - 0x34], 0
jmp 0x42fffa
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x430016
push dword [ebp - 0x34]
lea ecx, [ebp - 0x518]
call fcn.00431f15
mov dword [eax], 0xade19d29
jmp 0x42fff3
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x430032
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 1
lea ecx, [ebp - 0x518]
call fcn.00431f15
and dword [eax], 0
jmp 0x430068
push 1
lea ecx, [ebp - 0x518]
call fcn.00431f15
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2b8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x518]
call fcn.00431f15
cmp dword [eax], 2
jge 0x43009c
push 1
lea ecx, [ebp - 0x518]
call fcn.00431f15
push dword [eax]
lea ecx, [ebp - 0x690]
call fcn.00431f15
mov dword [eax], 1
jmp 0x430044
lea ecx, [ebp - 0x518]
call fcn.00431ef9
lea ecx, [ebp - 0x690]
call fcn.00431ef9
push 1
push 0xa4d
push 0x71ca
push 1
lea eax, [ebp - 0x78c]
push eax
push 0x2e51
push 0x5b3c
push 0x3f57
push dword [ebp - 0x194]
push dword [ebp - 0xcc]
push 1
lea eax, [ebp - 0x24]
push eax
push 0x6950
push 0x3a13
push 1
push 0x57af
lea eax, [ebp - 0x15c]
push eax
push 0x44c1
push 0x8df
call fcn.0042c74f
add esp, 0x4c
mov dword [ebp - 0x124], 1
mov dword [ebp - 0x124], 0
jmp 0x430135
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xfffffff3
jge 0x43015a
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x430158
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x430128
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x430174
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
push 0x4253
push 0
push dword [ebp - 0x24]
push 0
push 1
push 0x460
push 0x1410
push 0x2eeb
push dword [ebp + 8]
push dword [ebp - 0xcc]
push 0x2264
call fcn.0040a17d
add esp, 0x2c
mov dword [ebp - 0x8c], 0xa4a1
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0xc4], 0xe263
mov dword [ebp - 0x94], 8
mov dword [ebp - 0x32c], 0xf7f77771
mov eax, dword [ebp - 0x8c]
add eax, 6
mov dword [ebp - 0x12c], eax
je 0x4301fd
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x4301fd
mov dword [ebp - 0x2f4], 1
jmp 0x430204
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0xc4]
add eax, 0x574b
cmp eax, dword [ebp - 0xc4]
jg 0x430223
mov dword [ebp - 0x2bc], 1
jmp 0x43022a
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x2bc], eax
jl 0x43024d
cmp dword [ebp - 0x8c], 0
je 0x43024d
mov dword [ebp - 0x2c4], 1
jmp 0x430254
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x2c4]
jg 0x43026e
mov dword [ebp - 0x2cc], 1
jmp 0x430275
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 0x4a71a6e4
jne 0x43028d
mov dword [ebp - 0x2d4], 1
jmp 0x430294
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x2d4], eax
jge 0x4302ae
mov dword [ebp - 0x2dc], 1
jmp 0x4302b5
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x2dc]
sub eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x94]
jg 0x4302e6
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x4302e6
and dword [ebp - 0x5c4], 0
jmp 0x4302f0
mov dword [ebp - 0x5c4], 1
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x720], eax
cmp dword [ebp - 0x8c], 0x8214
jne 0x430314
mov dword [ebp - 0x2e4], 1
jmp 0x43031b
and dword [ebp - 0x2e4], 0
cmp dword [ebp - 0x2e4], 0
jl 0x430339
cmp dword [ebp - 0x94], 0
je 0x430339
mov dword [ebp - 0x2ec], 1
jmp 0x430340
and dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x2ec], 0x4d02
je 0x430358
mov dword [ebp - 0x2fc], 1
jmp 0x43035f
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2f4]
cmp eax, dword [ebp - 0x2fc]
jle 0x430379
mov dword [ebp - 0x304], 1
jmp 0x430380
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x304]
neg eax
jne 0x430393
cmp dword [ebp - 0x8c], 0
je 0x4303ae
mov dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x578], eax
jmp 0x43048d
mov dword [ebp - 0x134], 0x5701832d
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x7e4], eax
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0xc4], eax
jne 0x4303de
mov dword [ebp - 0x30c], 1
jmp 0x4303e5
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x134]
imul eax, dword [ebp - 0x30c]
cmp eax, 0xfffffff6
jae 0x430403
mov dword [ebp - 0x314], 1
jmp 0x43040a
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x314], eax
jle 0x430424
mov dword [ebp - 0x31c], 1
jmp 0x43042b
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x94]
add ecx, dword [ebp - 0x31c]
imul ecx, dword [ebp - 0x94]
imul eax, ecx
cmp eax, dword [ebp - 0x32c]
jle 0x43045b
mov dword [ebp - 0x580], 1
jmp 0x430462
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x134], 0x485bdf60
je 0x43047a
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x15c]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x334], ecx
je 0x4304d6
push 0x2d73
push 0x6b47
push 0x3c12
push 1
push dword [ebp - 0x334]
push dword [ebp - 0x24]
push 1
push 0x53fb
push 1
push 0x532b
push 0
call fcn.00425206
add esp, 0x2c
mov dword [ebp - 0x13c], 0xec79e672
mov dword [ebp - 0x354], 0xbf90a233
mov dword [ebp - 0xa8], 9
mov dword [ebp - 0xec], 9
mov dword [ebp - 0x374], 0xae73
push 4
lea ecx, [ebp - 0x5f0]
call fcn.00431e27
mov dword [ebp - 0x53c], 0xffffffff
mov dword [ebp - 0x728], 0xfffe
mov dword [ebp - 0x3c], 0
jmp 0x430539
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x43054f
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x19c], 0xfffffffa
jmp 0x430532
mov dword [ebp - 0x3c], 0
jmp 0x43055f
cmp dword [ebp - 0x3c], 4
jge 0x43057b
pop esi
mov esp, ebp
pop ebp
ret