Function at 0x431b32
Capabilities:
Authenticate hmac
Clear file content
Delete registry key
Encrypt data using speck
Extract resource via kernel32 functions
Get common file path
Get disk information
Get disk size
Get file size
Get keyboard layout
Get session user name
Query environment variable
Query or enumerate registry value
Read .ini file
Set environment variable
Terminate process

Disassembly:
mov eax, 0x4ae401
call fcn.004adbe8
sub esp, 0xce8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov byte [ebp - 0x64], dl
mov dword [ebp - 0x154], ecx
push 3
pop ebx
push ebx
lea ecx, [ebp - 0x4e0]
call fcn.0042fb3f
mov dword [ebp - 0x30], 0xb64b5c6f
xor eax, eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x2c], 0xed1e12aa
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x431b95
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4e0]
mov dword [eax + ecx*4], 0xfff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x431b7b
xor eax, eax
mov dword [ebp - 0x18], eax
xor edi, edi
inc edi
jmp 0x431bae
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x250], 0x2c5b641b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x431b9d
mov eax, dword [ebp - 0x4e0]
xor esi, esi
cmp dword [eax + 4], esi
jne 0x431bd7
mov eax, dword [ebp - 0x30]
push 4
pop ecx
sub ecx, eax
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x250], eax
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x431bf4
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea ecx, [ebp - 0x4e0]
call fcn.0042fc11
mov dword [ebp - 0x67c], 0xa5d6c05b
mov dword [ebp - 0x678], 0xa5d6c05b
mov dword [ebp - 0x674], 0xa5d6c05b
mov dword [ebp - 0x670], 0xa5d6c05b
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x34], 0x188e17b8
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x2c], 0x66d2
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x431c67
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x128], 0x8da8e97e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x431c4e
xor eax, eax
mov dword [ebp - 0x124], eax
jmp 0x431c9c
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x431c96
xor esi, esi
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x67c], esi
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 4
jl 0x431c81
xor eax, eax
inc dword [ebp - 0x124]
cmp dword [ebp - 0x124], ebx
jle 0x431c6f
mov dword [ebp - 0x20], eax
jmp 0x431cda
mov dword [ebp - 0x3c], 0xfffffffd
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x34], 0
jmp 0x431cd1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xc
je 0x431cc2
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffa
jle 0x431ca9
push ebx
lea ecx, [ebp - 0x4ec]
call fcn.0042fb3f
mov dword [ebp - 0x44], edi
mov dword [ebp - 0xec], edi
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xe0], edi
xor eax, eax
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x431d1d
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
xor eax, eax
inc dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0xb64b5c6f
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x2c], 0xed1e12aa
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x431d53
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4ec]
mov dword [eax + ecx*4], 0xfff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x431d39
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x431d69
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x264], 0x2c5b641b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x431d58
mov eax, dword [ebp - 0x4ec]
xor esi, esi
cmp dword [eax + 4], esi
jne 0x431d92
mov eax, dword [ebp - 0x30]
push 4
pop ecx
sub ecx, eax
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x264], eax
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x431daf
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea ecx, [ebp - 0x4ec]
call fcn.0042fc11
mov dword [ebp - 0x20], 0x5d6c05ba
mov dword [ebp - 0x44], 0xde0b4074
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x431de4
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x431de1
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
xor eax, eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffe
jle 0x431dcf
push ebx
lea ecx, [ebp - 0x534]
call fcn.0042fb3f
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x81c], xmm0
lea ecx, [ebp - 0x81c]
lea eax, [ebp - 0x80c]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x504]
call fcn.0042fbeb
mov eax, dword [ebp - 0x504]
xor esi, esi
mov dword [eax], esi
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x431e3f
push 0x20f6
push 0x556
call dword [sym.imp.GDI32.dll_RestoreDC]
mov eax, dword [ebp - 0x504]
inc dword [eax]
cmp dword [eax], 0xf
jle 0x431e25
lea ecx, [ebp - 0x504]
call fcn.0042fc11
mov dword [ebp - 0x2c], 0x777
cmp dword [ebp - 0x2c], 0x781
jle 0x431e91
xor esi, esi
xor edi, edi
mov eax, edi
and eax, esi
cdq
push edx
push eax
mov ecx, 0xabbe58
call fcn.0042fa2a
inc edi
cmp edi, 0x6868
jl 0x431e6b
inc esi
cmp esi, 0x5f16
jl 0x431e69
xor edi, edi
inc edi
mov dword [ebp - 0x30], 0xb64b5c6f
and dword [ebp - 4], 0
cmp dword [ebp - 0x2c], 0x3bd
jge 0x431eb4
mov edx, str.thb_deelv_kysotri_dhh_uqfwjaz_qvntq_yne_ouotxtwaq_unjuqxf
mov ecx, 0xabbe58
call fcn.004313d0
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x431ee3
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x2c], 0xa1c17c77
mov dword [ebp - 0x24], 0xfe81720d
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x431f0e
push eax
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, ecx
setg dl
cmp edx, dword [ebp - 0x38]
jl 0x431f35
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, edi
setle cl
mov dword [ebp - 0x24], ecx
xor eax, eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x18], 0x576c3a0b
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x2c], 0xba22e974
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x58], 0x703c
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x44], 0x51ac06e3
push edi
lea ecx, [ebp - 0x740]
call fcn.0042fb3f
mov dword [ebp - 0x20], 0
jmp 0x431fa0
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x740]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x431f8d
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setl dl
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x58]
add ecx, dword [ebp - 0x58]
imul ecx, dword [ebp - 0x18]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x34], 0xfffffff1
cmp dword [ebp - 0x34], 0x29
jge 0x43223f
mov dword [ebp - 0x24], 0xa77b69c9
mov dword [ebp - 0x1c], 0x7a87
cmp dword [ebp - 0x1c], 0x7b33
jle 0x43208f
xor ebx, ebx
mov dword [ebp - 0x58], ebx
xor edi, edi
mov dword [ebp - 0x2c], edi
xor esi, esi
mov eax, ebx
cdq
idiv edi
mov eax, edx
mov dword [ebp - 0x24], eax
lea ebx, [eax + esi]
mov edi, 0x1b1d
mov eax, ebx
cdq
push edx
push eax
mov ecx, 0xabbe58
call fcn.0042fa2a
inc ebx
dec edi
jne 0x43202f
inc esi
cmp esi, 0x14d
mov eax, dword [ebp - 0x24]
jl 0x432027
mov edi, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x476f
mov ebx, dword [ebp - 0x58]
jl 0x43201b
inc ebx
mov dword [ebp - 0x58], ebx
cmp ebx, 0x15ea
jl 0x432016
push 0x19a
push 0x191b
push 0x22d3
push 0xa97
xor esi, esi
push esi
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
xor edi, edi
inc edi
or ebx, 0xffffffff
mov dword [ebp - 4], 2
cmp dword [ebp - 0x1c], 0x771d
jge 0x4320ae
mov edx, str.kdufwxw_octag_uodzx_wdrbslghd_pcnp_xqzwi
mov ecx, 0xabbe58
call fcn.004313d0
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x4320da
mov dword [ebp - 0x28], 0x89fa
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x432101
xor esi, esi
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x91c], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x4320ec
xor eax, eax
mov dword [ebp - 0x38], 0x10
cmp dword [ebp - 0x38], 0x1d
jl 0x432234
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x432132
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2c0], 0x1094
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x43211a
xor eax, eax
mov dword [ebp - 0x18], 0x14
jmp 0x432155
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x432152
push eax
push 0x115e
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1f
jl 0x43213b
mov dword [ebp - 0x1c], 0x2c2b
cmp dword [ebp - 0x1c], 0x2fad
jle 0x4321d9
mov ebx, eax
mov edi, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x58], 0x45b4
xor esi, esi
or eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xa5c]
call fcn.004018f3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x432195
mov eax, dword [eax]
push eax
call fcn.00498447
pop ecx
push esi
push 1
lea ecx, [ebp - 0xa5c]
call fcn.0042ff1b
mov eax, dword [ebp - 0x2c]
add eax, edi
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x58]
jne 0x43217b
inc edi
xor eax, eax
cmp edi, 0x18c7
jl 0x43216f
inc ebx
cmp ebx, 0x5895
jl 0x43216d
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
xor edi, edi
inc edi
or ebx, 0xffffffff
mov eax, dword [ebp - 0x2c0]
cmp ebx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0x1c], 0x2a2d
jge 0x432202
push str.cxgbvyyk_tiyatz_tvcylmul_mdrwpwcat_zgsixy_wrbzs_uiae
call fcn.00498447
pop ecx
mov dword [ebp - 4], ebx
jmp 0x43222a
inc dword [ebp - 0x38]
xor eax, eax
jmp 0x432108
inc dword [ebp - 0x28]
inc dword [ebp - 0x34]
jmp 0x431ff0
lea ecx, [ebp - 0x740]
call fcn.0042fc11
mov dword [ebp - 0x58], 0xed1e12aa
mov dword [ebp - 0x69c], 0xa5d6c05b
mov dword [ebp - 0x698], 0xa5d6c05b
mov dword [ebp - 0x694], 0xa5d6c05b
mov dword [ebp - 0x690], 0xa5d6c05b
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x34], 0x188e17b8
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x2c], 0x66d2
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x4322b9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x110], 0x8da8e97e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x4322a0
xor eax, eax
mov dword [ebp - 0x10c], eax
push 3
pop edx
jmp 0x4322f1
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x4322eb
xor esi, esi
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x69c], esi
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 4
jl 0x4322d6
xor eax, eax
inc dword [ebp - 0x10c]
cmp dword [ebp - 0x10c], edx
jle 0x4322c4
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffffa
jg 0x43233b
mov dword [ebp - 0x3c], 0xfffffffd
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x34], 0
jmp 0x43232a
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xc
je 0x43231b
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffa
jle 0x432302
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edx
jge 0x43235d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x534]
mov dword [eax + ecx*4], 0xfff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x432343
xor eax, eax
mov dword [ebp - 0x44], edi
mov dword [ebp - 0xec], edi
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xe0], edi
mov dword [ebp - 0x2c], eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x43238d
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
xor eax, eax
inc dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
jmp 0x4323a6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x268], 0x2c5b641b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x432395
mov eax, dword [ebp - 0x534]
xor esi, esi
cmp dword [eax + 4], esi
jne 0x4323cf
mov eax, dword [ebp - 0x30]
push 4
pop ecx
sub ecx, eax
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x34], 0xe91a049f
mov dword [ebp - 0x34], 0xfffffff5
jmp 0x432433
mov dword [ebp - 0x38], 8
mov dword [ebp - 0x24], 0x3f365653
mov dword [ebp - 0x38], 0x1c
jmp 0x43242a
mov dword [ebp - 0x20], esi
jmp 0x432418
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x954], 0x509978f3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x432407
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xffffffea
jne 0x432402
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffe6
jge 0x4323eb
mov byte [ebp - 0x11], 0
mov dword [ebp - 0x38], 0xe91a049f
mov dword [ebp - 0x38], 0xfffffff5
cmp dword [ebp - 0x38], 0xffffffe6
jl 0x432584
mov dword [ebp - 0x1c], 8
mov dword [ebp - 0x24], 0x3f365653
mov dword [ebp - 0x1c], 0x1c
cmp dword [ebp - 0x1c], 0xffffffea
je 0x43257c
mov dword [ebp - 0x20], 0
jmp 0x43248e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x9bc], 0x509978f3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x43247d
mov dword [ebp - 0x2c], 0x1c57
cmp dword [ebp - 0x2c], 0x1e9e
jle 0x432528
xor edx, edx
mov dword [ebp - 0x20], edx
xor eax, eax
mov dword [ebp - 0x30], eax
xor ebx, ebx
xor edi, edi
mov ecx, ebx
shl eax, cl
mov dword [ebp - 0x24], eax
xor esi, esi
mov eax, edi
and eax, edx
and eax, dword [ebp - 0x24]
cdq
push edx
push eax
lea ecx, [ebp - 0xba0]
call fcn.004018f3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4324de
mov eax, dword [eax]
push eax
call fcn.00498447
pop ecx
push esi
push 1
lea ecx, [ebp - 0xba0]
call fcn.0042ff1b
inc edi
cmp edi, 0x33af
mov edx, dword [ebp - 0x20]
jl 0x4324bf
inc ebx
cmp ebx, 0xc1b
mov eax, dword [ebp - 0x30]
jl 0x4324b4
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x1538
jl 0x4324b2
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x298c
jl 0x4324ad
xor edi, edi
inc edi
or ebx, 0xffffffff
mov eax, dword [ebp - 0x9b4]
mov dword [ebp - 0x24], eax
mov dword [ebp - 4], 6
cmp dword [ebp - 0x2c], 0x1c0a
jge 0x43254c
push str.thvxjjia_ycsfzm_rwmyenzdl_lduh_htgmgs_axwhponq_rldmvwq_xxnzagdsd_fozrcupx_hjlsqbzbj_kcq_ssh_iltdhp
call fcn.00498447
pop ecx
mov dword [ebp - 4], ebx
jmp 0x432574
dec dword [ebp - 0x1c]
jmp 0x43246a
dec dword [ebp - 0x38]
jmp 0x43244b
cmp byte [ebp - 0x11], 0
je 0x432623
push 4
lea ecx, [ebp - 0x188]
call fcn.0042fb3f
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x18], 0
jmp 0x4325ba
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x188]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x4325ab
mov dword [ebp - 0x18], 0
jmp 0x4325d6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x228], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x4325c9
mov dword [ebp - 0x28], 0
xor esi, esi
cmp dword [ebp - 0x28], 3
jg 0x432611
mov dword [ebp - 0x2c], edi
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x188]
cmp dword [eax + ecx*4], esi
je 0x4326cf
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x188]
cmp dword [eax + ecx*4], esi
je 0x432756
lea ecx, [ebp - 0x188]
call fcn.0042fc11
push esi
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
lea ecx, [ebp - 0x534]
call fcn.0042fc11
push edi
lea ecx, [ebp - 0x54c]
call fcn.0042fb3f
mov dword [ebp - 0x18], 0x18885c6f
mov dword [ebp - 0x2c], 0x7a98815c
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x34], 0xca968364
mov dword [ebp - 0x24], 0x51938d10
mov dword [ebp - 0x44], edi
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x432684
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x54c]
mov dword [eax + ecx*4], 0x198a8f93
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x43266a
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jl 0x4326a2
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x43269d
call dword [sym.imp.USER32.dll_CreatePopupMenu]
xor eax, eax
dec dword [ebp - 0x18]
jns 0x43268c
mov eax, dword [ebp - 0x54c]
xor esi, esi
cmp dword [eax], esi
je 0x43275e
mov dword [ebp - 0x2c], 0x456e
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], esi
je 0x43275e
mov edx, edi
jmp 0x432760
push 3
lea ecx, [ebp - 0x51c]
call fcn.0042fb3f
mov dword [ebp - 0x20], 0
jmp 0x4326f4
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x51c]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x4326e5
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x188]
mov dword [eax + edx*4], ecx
test ecx, ecx
je 0x432741
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x188]
xor esi, esi
cmp dword [eax + ecx*4], esi
je 0x43272b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov ecx, ebx
sub ecx, eax
je 0x432741
mov eax, edi
jmp 0x432745
xor eax, eax
xor esi, esi
mov dword [ebp - 0x228], eax
lea ecx, [ebp - 0x51c]
call fcn.0042fc11
inc dword [ebp - 0x28]
jmp 0x4325e4
xor edx, edx
mov dword [ebp - 0x2c], edi
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add eax, edx
add ecx, eax
xor edx, edx
cmp ecx, edi
setg dl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, edx
setne cl
inc ecx
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x18], ecx
je 0x4328c2
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x4c], 0x2a907865
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0x34], esi
jmp 0x4328b6
mov dword [ebp - 0x58], 0xfffffffe
mov dword [ebp - 0x6dc], 0x9820b275
mov dword [ebp - 0x6d8], 0x9820b275
mov dword [ebp - 0x6d4], 0x9820b275
mov dword [ebp - 0x6d0], 0x9820b275
mov dword [ebp - 0x3c], 0x2ce6c1cc
mov dword [ebp - 0x18], 0
cmp dword [ebp - 0x18], 4
jl 0x4328b0
mov dword [ebp - 0x2c], 0xacda2a4f
mov dword [ebp - 0x20], 0
jmp 0x43280e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x38c], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x432801
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x1c]
jne 0x432837
mov eax, dword [ebp - 0x384]
dec dword [ebp - 0x384]
test eax, eax
jne 0x432837
xor edx, edx
jmp 0x432839
mov edx, edi
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x24], ecx
xor esi, esi
mov dword [ebp - 0x30], esi
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x58]
xor ebx, ebx
cmp eax, edx
setge bl
mov eax, dword [ebp - 0x388]
sub eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, ebx
setle cl
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], esi
je 0x432883
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1c], 0xb0a94fe8
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x6d4]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x4c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
push 0xffffffffffffffff
pop ebx
jge 0x4327f1
or ebx, ebx
mov eax, dword [ebp - 0x58]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jle 0x4327aa
jmp 0x4328fa
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x4328d7
push 0x247a
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x4328fa
push eax
push 0x52d
push 0x1cbd
push 0x10b
push 0x1132
call dword [sym.imp.USER32.dll_SetScrollRange]
lea ecx, [ebp - 0x54c]
call fcn.0042fc11
push edi
lea ecx, [ebp - 0x564]
call fcn.0042fb3f
mov dword [ebp - 0x18], 0x18885c6f
mov dword [ebp - 0x2c], 0x7a98815c
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x34], 0xca968364
mov dword [ebp - 0x24], 0x51938d10
mov dword [ebp - 0x44], edi
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x43295b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x564]
mov dword [eax + ecx*4], 0x198a8f93
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x432941
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jl 0x432979
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x432974
call dword [sym.imp.USER32.dll_CreatePopupMenu]
xor eax, eax
dec dword [ebp - 0x18]
jns 0x432963
mov eax, dword [ebp - 0x564]
xor esi, esi
cmp dword [eax], esi
je 0x43299b
mov dword [ebp - 0x2c], 0x456e
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], esi
je 0x43299b
mov edx, edi
jmp 0x43299d
xor edx, edx
mov dword [ebp - 0x2c], edi
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add eax, edx
add ecx, eax
xor edx, edx
cmp ecx, edi
setg dl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, edx
setne cl
inc ecx
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x18], ecx
je 0x432afb
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x4c], 0x2a907865
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0x34], esi
jmp 0x432aef
mov dword [ebp - 0x58], 0xfffffffe
mov dword [ebp - 0x6bc], 0x9820b275
mov dword [ebp - 0x6b8], 0x9820b275
mov dword [ebp - 0x6b4], 0x9820b275
mov dword [ebp - 0x6b0], 0x9820b275
mov dword [ebp - 0x3c], 0x2ce6c1cc
mov dword [ebp - 0x18], 0
jmp 0x432adc
mov dword [ebp - 0x2c], 0xacda2a4f
mov dword [ebp - 0x20], 0
jmp 0x432a46
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x320], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x432a39
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x1c]
jne 0x432a6f
mov eax, dword [ebp - 0x318]
dec dword [ebp - 0x318]
test eax, eax
jne 0x432a6f
xor edx, edx
jmp 0x432a71
mov edx, edi
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x24], ecx
xor esi, esi
mov dword [ebp - 0x30], esi
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x58]
xor ebx, ebx
cmp eax, edx
setge bl
mov eax, dword [ebp - 0x31c]
sub eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, ebx
setle cl
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], esi
je 0x432abb
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1c], 0xb0a94fe8
sbb edx, edx
neg edx
mov eax, dword [ebp - 0x6b4]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x4c], ecx
inc dword [ebp - 0x18]
push 0xffffffffffffffff
pop ebx
cmp dword [ebp - 0x18], 4
jge 0x432a29
mov eax, dword [ebp - 0x58]
inc dword [ebp - 0x34]
push 0xffffffffffffffff
pop ebx
cmp dword [ebp - 0x34], 3
jle 0x4329e7
jmp 0x432b2c
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
jne 0x4328cc
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x432b2c
push eax
push 0x52d
push 0x1cbd
push 0x10b
push 0x1132
call dword [sym.imp.USER32.dll_SetScrollRange]
lea ecx, [ebp - 0x564]
call fcn.0042fc11
mov dword [ebp - 0xfc], 0x2e91a04
mov dword [ebp - 0xf8], 0x2e91a04
mov dword [ebp - 0xf4], 0x2e91a04
mov dword [ebp - 0xf0], 0x2e91a04
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x28], 4
mov dword [ebp - 0xf0], 0x1d
jmp 0x432c1b
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x20], 0
jmp 0x432b9d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x904], 0x18d9dce
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x432b8c
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x900], eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x432c10
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x432c06
push eax
push 0xc23
push eax
push 0x24e5
push 0x16d0
call dword [sym.imp.GDI32.dll_ExtCreatePen]
xor eax, eax
mov dword [ebp - 0x30], 0xb35d5697
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x432be4
dec dword [ebp - 0xf0]
cmp dword [ebp - 0xf0], 0xfffffffe
jg 0x432b7c
mov dword [ebp - 0x28], 0
jmp 0x432c7a
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x2c], 0xbd1a6f32
cmp dword [ebp - 0xf4], 0
jne 0x432c4d
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
neg eax
jne 0x432c5a
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x12
jne 0x432c31
mov dword [ebp - 0x48], 0xfffffff8
or ebx, 0xffffffff
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], 0x12cd0ab
mov dword [ebp - 0x20], 0
jmp 0x432cab
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x78], 6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x432c9d
mov dword [ebp - 0x48], 0xfffffff3
cmp dword [ebp - 0x48], 0xffffffe6
jg 0x432e47
mov dword [ebp - 0x2c], 0x31c587c7
mov dword [ebp - 0x2c], 0x74f7
cmp dword [ebp - 0x2c], 0x7693
jle 0x432d1c
xor edi, edi
xor esi, esi
mov eax, edi
mov ecx, esi
sar eax, cl
cdq
push edx
push eax
mov ecx, 0xabbe58
call fcn.0042fa2a
inc esi
cmp esi, 0x3ba1
jl 0x432cdc
inc edi
cmp edi, 0x1695
jl 0x432cda
xor esi, esi
push esi
push 0x21bd
push 0x735
push 0x4e9
call dword [sym.imp.GDI32.dll_SetPixel]
xor edi, edi
inc edi
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 4], 8
cmp dword [ebp - 0x2c], 0x72df
jge 0x432d42
mov edx, str.swluen_dgb_zatbsp_oypgiwvcg_fpcgqendc_mffcuw_pmi_clui_ttw_lglzce_pcpkf_ezaktmf_alxhk_amztbxzfj
mov ecx, 0xabbe58
call fcn.004313d0
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x432d6e
mov dword [ebp - 0x2c], 0x2718b962
mov dword [ebp - 0x3c], 3
mov dword [ebp - 0x54], 5
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x432da5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x174], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x432d8c
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x432dc3
xor esi, esi
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x914], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x432db0
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x48]
sub ecx, eax
mov dword [ebp - 0x24], ecx
jne 0x432dd9
mov eax, dword [ebp - 0x170]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2c], 0x80d68f98
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
sub edx, 2
add edx, dword [ebp - 0x48]
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x48]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x174]
xor ecx, ecx
cmp edx, eax
setne cl
mov eax, dword [ebp - 0x48]
sub ecx, eax
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x170]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x48]
xor eax, eax
mov dword [ebp - 0x910], eax
cmp dword [ebp - 0x48], eax
jne 0x432e47
dec dword [ebp - 0x48]
jmp 0x432cb7
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x48]
xor edx, edx
cmp ecx, eax
setg dl
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp eax, 0xdcbd
setl dl
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp eax, edx
setg cl
mov eax, dword [ebp - 0x78]
add ecx, eax
mov eax, dword [ebp - 0x48]
xor edx, edx
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x78]
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x48]
sub edx, eax
sub edx, dword [ebp - 0x78]
xor ecx, ecx
cmp edx, 0xe20
setle cl
mov eax, dword [ebp - 0x38]
xor edx, edx
cmp eax, ecx
setl dl
mov eax, dword [ebp - 0x78]
sub edx, eax
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x140], 0x2e91a04
mov dword [ebp - 0x13c], 0x2e91a04
mov dword [ebp - 0x138], 0x2e91a04
mov dword [ebp - 0x134], 0x2e91a04
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x134], 0x1d
cmp dword [ebp - 0x134], 0xfffffffe
jle 0x4331e5
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0x6047
cmp dword [ebp - 0x30], 0x6223
jle 0x432f7e
push eax
push 0x24a1
push eax
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
xor eax, eax
mov dword [ebp - 0x20], eax
xor edi, edi
xor esi, esi
xor ebx, ebx
mov dword [ebp - 0x2c], 0x2ccc
add eax, edi
or eax, ebx
cdq
push edx
push eax
mov ecx, 0xabbe58
call fcn.0042fa2a
add ebx, esi
dec dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
jne 0x432f46
inc esi
cmp esi, 0x1325
jl 0x432f3d
inc edi
cmp edi, 0x2ede
jl 0x432f3b
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x19a9
jl 0x432f39
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x30], 0x5fc8
jge 0x432f9d
mov edx, str.sgqujxswd_xadzp_fmocpkr_sym_jal_tibyu_yirjb
mov ecx, 0xabbe58
call fcn.004313d0
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
xor eax, eax
xor edi, edi
inc edi
mov dword [ebp - 0x20], eax
jmp 0x432fd8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x92c], 0x18d9dce
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x432fc7
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x928], eax
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], edi
jge 0x4331d8
mov dword [ebp - 0x1c], 0x17ee
cmp dword [ebp - 0x1c], 0x1b56
jle 0x433094
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x4c], 0x7c
mov esi, eax
mov ebx, dword [ebp - 0x30]
mov edi, eax
mov dword [ebp - 0x2c], 0x56df
mov eax, ebx
and eax, edi
cdq
push edx
push eax
mov ecx, 0xabbe58
call fcn.0042fa2a
add edi, esi
dec dword [ebp - 0x2c]
jne 0x433051
inc esi
cmp esi, 0x6035
push 0
pop eax
jl 0x433048
mov ebx, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x30]
add ecx, ebx
mov dword [ebp - 0x30], ecx
dec dword [ebp - 0x4c]
jne 0x433043
inc ebx
mov dword [ebp - 0x58], ebx
cmp ebx, 0x493e
jl 0x433039
xor edi, edi
inc edi
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x43317d
mov dword [ebp - 0x4c], 0x4309
cmp dword [ebp - 0x4c], 0x458e
jle 0x433126
mov ecx, eax
mov dword [ebp - 0x30], eax
mov ebx, eax
mov dword [ebp - 0x2c], eax
mov edi, eax
mov dword [ebp - 0x24], ecx
mov ecx, ebx
mov ebx, dword [ebp - 0x24]
shl ebx, cl
xor esi, esi
mov eax, ebx
mov ecx, edi
shl eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0xa8c]
call fcn.004018f3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4330e7
mov eax, dword [eax]
push eax
call fcn.00498447
pop ecx
push esi
push 1
lea ecx, [ebp - 0xa8c]
call fcn.0042ff1b
inc edi
cmp edi, 0x69f8
jl 0x4330c9
mov ebx, dword [ebp - 0x2c]
inc ebx
mov dword [ebp - 0x2c], ebx
cmp ebx, 0x61f9
push 0
pop eax
mov ecx, dword [ebp - 0x30]
jl 0x4330bb
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x6925
jl 0x4330b6
push eax
push 0xc23
push eax
push 0x24e5
push 0x16d0
call dword [sym.imp.GDI32.dll_ExtCreatePen]
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x4c], 0x412b
jge 0x433158
push str.jvedkeg_nqzcyiouk_asp
call fcn.00498447
pop ecx
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
xor edi, edi
inc edi
jmp 0x433180
or ebx, 0xffffffff
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x1c], 0x16a0
jge 0x43319f
mov edx, str.wnionvw_aegig_cmjyzpmuu_rmvbejbsv
mov ecx, 0xabbe58
call fcn.004313d0
mov dword [ebp - 4], ebx
jmp 0x4331c7
mov dword [ebp - 0x30], 0xb35d5697
inc dword [ebp - 0x28]
xor eax, eax
jmp 0x43301d
dec dword [ebp - 0x134]
xor eax, eax
jmp 0x432f07
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x12
je 0x43323f
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x2c], 0xbd1a6f32
cmp dword [ebp - 0x138], eax
jne 0x433209
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
neg eax
jne 0x433216
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x12
push 0
pop eax
jne 0x4331ee
mov dword [ebp - 0x450], 0x61928c17
mov dword [ebp - 0x44c], 0x61928c17
mov dword [ebp - 0x448], 0x61928c17
mov dword [ebp - 0x444], 0x61928c17
mov dword [ebp - 0x18], 0xca8fecf7
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x43328e
xor esi, esi
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xcc], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x433279
xor eax, eax
mov dword [ebp - 0xc8], 3
cmp dword [ebp - 0xc8], eax
jl 0x4332f2
lea esi, [ebp - 0x7c8]
lea eax, [ebp - 0x7b8]
mov dword [ebp - 0x44], edi
movdqa xmm0, xmmword [0xaaf870]
movdqu xmmword [ebp - 0x7c8], xmm0
push ecx
push eax
push esi
lea ecx, [ebp - 0x8b4]
call fcn.0042fbeb
mov dword [ebp - 0x2c], 0x5154
inc dword [ebp - 0x2c]
lea ecx, [ebp - 0x8b4]
call fcn.0042fc11
dec dword [ebp - 0xc8]
lea eax, [ebp - 0x7b8]
jns 0x4332ac
xor eax, eax
mov dword [ebp - 0x18], 0xffffffe7
cmp dword [ebp - 0x18], 0xffffffed
jne 0x433530
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x1c], 0xd90538e0
mov dword [ebp - 0x24], 0x732bab2
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x433336
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa8], 0xfffffffb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x43331d
xor eax, eax
mov dword [ebp - 0xa4], edi
cmp dword [ebp - 0xa4], 0x1b
je 0x4334ab
mov dword [ebp - 0x3f0], 0x5d76270
mov dword [ebp - 0x3ec], 0x5d76270
mov dword [ebp - 0x3e8], 0x5d76270
mov dword [ebp - 0x3e4], 0x5d76270
dec dword [ebp - 0x3e4]
mov dword [ebp - 0x38], 0xfffffff1
cmp dword [ebp - 0x38], 0x18
jg 0x4334a0
mov dword [ebp - 0x58], 0xabf7c2f5
cmp dword [ebp - 0x448], eax
je 0x4333ab
mov eax, dword [ebp - 0xc8]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x58], eax
jmp 0x433493
mov dword [ebp - 0x4c], 0x43f
cmp dword [ebp - 0x4c], 0x53c
jle 0x433436
push 0x881
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
xor ebx, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2c], 0x1e66
xor edi, edi
xor esi, esi
lea eax, [edi + ebx]
cdq
push edx
push eax
lea ecx, [ebp - 0xc9c]
call fcn.004018f3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4333f4
mov eax, dword [eax]
push eax
call fcn.00498447
pop ecx
push esi
push 1
lea ecx, [ebp - 0xc9c]
call fcn.0042ff1b
inc edi
cmp edi, 0x2cc7
jl 0x4333d9
dec ebx
dec dword [ebp - 0x2c]
jne 0x4333d5
mov ebx, dword [ebp - 0x30]
inc ebx
mov dword [ebp - 0x30], ebx
cmp ebx, 0x2fc8
jl 0x4333cb
push esi
call dword [sym.imp.USER32.dll_CharUpperW]
xor eax, eax
xor edi, edi
inc edi
or ebx, 0xffffffff
mov byte [ebp - 0x11], al
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x4c], 0x20e
jge 0x433454
push str.vtiodabk_uln_bbuzox_fukv_vxdgyc_opcsuwvy_zkxtnb
call fcn.00498447
pop ecx
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x433480
cmp byte [ebp - 0x11], 0
je 0x433493
push 0xa6d
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, dword [ebp - 0x58]
inc dword [ebp - 0x38]
xor eax, eax
jmp 0x43337e
inc dword [ebp - 0xa4]
jmp 0x43333c
mov eax, dword [ebp - 0xa8]
xor esi, esi
mov dword [ebp - 0x450], esi
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa8]
dec eax
neg eax
sbb eax, eax
neg eax
imul eax, eax, 0x2f33
test eax, eax
je 0x4334f7
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xa4], 0x2708cdb
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0x2708cdb
setg cl
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], esi
jne 0x433519
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], 0x28c51f7e
inc dword [ebp - 0x18]
xor eax, eax
jmp 0x4332f9
mov dword [ebp - 0x488], 0x61928c17
mov dword [ebp - 0x484], 0x61928c17
mov dword [ebp - 0x480], 0x61928c17
mov dword [ebp - 0x47c], 0x61928c17
mov dword [ebp - 0x18], 0xca8fecf7
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x43357f
xor esi, esi
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xdc], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x43356a
xor eax, eax
mov dword [ebp - 0xd8], 3
cmp dword [ebp - 0xd8], eax
jl 0x4335e3
lea esi, [ebp - 0x7e4]
lea eax, [ebp - 0x7d4]
mov dword [ebp - 0x44], edi
movdqa xmm0, xmmword [0xaaf870]
movdqu xmmword [ebp - 0x7e4], xmm0
push ecx
push eax
push esi
lea ecx, [ebp - 0x8a8]
call fcn.0042fbeb
mov dword [ebp - 0x2c], 0x5154
inc dword [ebp - 0x2c]
lea ecx, [ebp - 0x8a8]
call fcn.0042fc11
dec dword [ebp - 0xd8]
lea eax, [ebp - 0x7d4]
jns 0x43359d
xor eax, eax
mov dword [ebp - 0x18], 0xffffffe7
cmp dword [ebp - 0x18], 0xffffffed
jne 0x433801
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x4c], 0xd90538e0
mov dword [ebp - 0x24], 0x732bab2
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x433627
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xb4], 0xfffffffb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x43360e
xor eax, eax
mov dword [ebp - 0xb0], edi
cmp dword [ebp - 0xb0], 0x1b
je 0x43377c
mov dword [ebp - 0x410], 0x5d76270
mov dword [ebp - 0x40c], 0x5d76270
mov dword [ebp - 0x408], 0x5d76270
mov dword [ebp - 0x404], 0x5d76270
dec dword [ebp - 0x404]
mov dword [ebp - 0x38], 0xfffffff1
cmp dword [ebp - 0x38], 0x18
jg 0x433771
mov dword [ebp - 0x2c], 0xabf7c2f5
cmp dword [ebp - 0x480], eax
je 0x433699
mov eax, dword [ebp - 0xd8]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
jmp 0x4336af
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x4336b1
push 0xa6d
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
mov dword [ebp - 0x30], 0x6153
cmp dword [ebp - 0x30], 0x615e
jle 0x43371d
push 0xa36
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
xor ebx, ebx
xor edi, edi
xor esi, esi
lea eax, [edi + ebx]
cdq
push edx
push eax
lea ecx, [ebp - 0x9e4]
call fcn.004018f3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4336ee
mov eax, dword [eax]
push eax
call fcn.00498447
pop ecx
push esi
push 1
lea ecx, [ebp - 0x9e4]
call fcn.0042ff1b
inc edi
cmp edi, 0x5dd2
jl 0x4336d3
inc ebx
cmp ebx, 0x4bdd
jl 0x4336cf
xor edi, edi
inc edi
or ebx, 0xffffffff
jmp 0x43371f
xor esi, esi
cmp dword [ebp - 0x2c], esi
jne 0x433767
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x30], 0x5dc6
jge 0x43373f
push str.tcb_umbc_yjwho
call fcn.00498447
pop ecx
mov dword [ebp - 4], ebx
jmp 0x433767
inc dword [ebp - 0x38]
xor eax, eax
jmp 0x43366f
inc dword [ebp - 0xb0]
jmp 0x43362d
mov eax, dword [ebp - 0xb4]
xor esi, esi
mov dword [ebp - 0x488], esi
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb4]
dec eax
neg eax
sbb eax, eax
neg eax
imul eax, eax, 0x2f33
test eax, eax
je 0x4337c8
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xb0], 0x2708cdb
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0x2708cdb
setg cl
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], esi
jne 0x4337ea
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x24], 0x28c51f7e
inc dword [ebp - 0x18]
xor eax, eax
jmp 0x4335ea
push edi
lea ecx, [ebp - 0x624]
call fcn.0042fb3f
mov dword [ebp - 0x4c], 0x4504
cmp dword [ebp - 0x4c], 0x4784
jle 0x43388c
xor edx, edx
mov dword [ebp - 0x30], edx
xor ebx, ebx
mov dword [ebp - 0x2c], ebx
xor edi, edi
mov ecx, ebx
mov ebx, edx
sar ebx, cl
xor esi, esi
mov eax, edi
xor eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xbe8]
call fcn.004018f3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x43384d
mov eax, dword [eax]
push eax
call fcn.00498447
pop ecx
push esi
push 1
lea ecx, [ebp - 0xbe8]
call fcn.0042ff1b
inc edi
cmp edi, 0x2153
jl 0x433831
mov ebx, dword [ebp - 0x2c]
inc ebx
mov dword [ebp - 0x2c], ebx
cmp ebx, 0x7f0d
mov edx, dword [ebp - 0x30]
jl 0x433827
inc edx
mov dword [ebp - 0x30], edx
cmp edx, 0x740f
jl 0x433822
xor edi, edi
inc edi
mov dword [ebp - 0x24], 0xade19d29
movdqa xmm0, xmmword [0xaaf830]
movdqu xmmword [ebp - 0x83c], xmm0
lea ecx, [ebp - 0x83c]
lea eax, [ebp - 0x82c]
push ecx
push eax
push ecx
lea ecx, [ebp - 0x79c]
call fcn.0042fbeb
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x79c]
mov dword [eax + 4], ecx
xor eax, eax
test ecx, ecx
jne 0x433932
mov dword [ebp - 0x68c], 9
mov dword [ebp - 0x688], 9
mov dword [ebp - 0x684], 9
mov dword [ebp - 0x680], 9
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x24], 0x7d8cf4c5
mov dword [ebp - 0x2c], 0x5145ccb9
mov dword [ebp - 0x20], eax
jmp 0x43391e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xcf4], 8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x43390d
dec dword [ebp - 0x2c]
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0x24], eax
jmp 0x433962
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x43394c
push eax
push 0x1fb9
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x433962
push eax
push eax
push 0x204
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
lea ecx, [ebp - 0x79c]
call fcn.0042fc11
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x4c], 0x4149
jge 0x433988
push str.qmaytqhk_btoml_ebgdc_hwuceo_dbwjr_ceyohp_khzekmr_rmjdprjl_mrexba_qar_xyfrkxnfz
call fcn.00498447
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
jmp 0x4339b3
mov dword [ebp - 0x28], 0x18885c6f
mov dword [ebp - 0x58], 0x5be9
cmp dword [ebp - 0x58], 0x5da2
jle 0x433a1d
mov edi, eax
jmp 0x4339d0
xor eax, eax
mov ebx, eax
mov dword [ebp - 0x2c], 0x2883
xor esi, esi
mov eax, ebx
cdq
push edx
push eax
lea ecx, [ebp - 0xae0]
call fcn.004018f3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x4339f5
mov eax, dword [eax]
push eax
call fcn.00498447
pop ecx
push esi
push 1
lea ecx, [ebp - 0xae0]
call fcn.0042ff1b
add ebx, edi
dec dword [ebp - 0x2c]
jne 0x4339db
inc edi
cmp edi, 0x168d
jl 0x4339ce
xor edi, edi
inc edi
mov dword [ebp - 0x18], 0x24a8c6a5
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x28], 0xadeb9459
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x30], 0xe8ca4045
mov dword [ebp - 0x20], 0
jmp 0x433a52
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x3b8], 0xb1b9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x433a41
mov dword [ebp - 0x18], 0xffffffeb
cmp dword [ebp - 0x18], 0x16
jge 0x433b96
mov dword [ebp - 0x38], 0x661c4438
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x20], 2
jge 0x433a8f
xor esi, esi
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x80], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x433a7f
cmp dword [ebp - 0x18], 0
jne 0x433ae3
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
xor ecx, ecx
cmp eax, edi
setge cl
sub ecx, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
inc ecx
imul ecx, dword [ebp - 0x80]
sub ecx, 0x290b
jne 0x433ae3
xor eax, eax
jmp 0x433ae5
mov eax, edi
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
mov ecx, 0xffff6d7c
sub ecx, eax
mov eax, dword [ebp - 0x80]
add eax, ecx
mov ecx, dword [ebp - 0x28]
add ecx, eax
sub ecx, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x4c]
xor edx, edx
cmp eax, ecx
setl dl
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setl cl
add ecx, dword [ebp - 0x80]
xor edx, edx
cmp ecx, 0x1f0b
setne dl
mov eax, dword [ebp - 0x3b8]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x34], 0
jne 0x433b60
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x3b8]
cmp dword [ebp - 0x80], edi
jae 0x433b60
xor ecx, ecx
jmp 0x433b62
mov ecx, edi
mov eax, dword [ebp - 0x80]
add ecx, eax
mov eax, dword [ebp - 0x4c]
xor edx, edx
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 0xffff
jne 0x433b82
cmp dword [ebp - 0x28], eax
mov ecx, edi
jne 0x433b84
mov ecx, eax
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x16
jl 0x433a69
jmp 0x433b98
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x433ba9
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x58], 0x5b37
jge 0x433bc4
push str.lrnrd_qmqtbftc_rreebvj_csgurxwg_brvbdxeuq_zgekzxvtd_vxdvwf_ccjiphat_mnwjdj_vfm_udpultuue_pccfefjxe_dcd
call fcn.00498447
pop ecx
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
xor eax, eax
jmp 0x433bf3
mov dword [ebp - 0x40], 0x7a98815c
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x48], 0xca968364
mov dword [ebp - 0x24], 0x51938d10
mov dword [ebp - 0x4c], 0x77dd6887
mov dword [ebp - 0x24], 0xf14c90d2
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x44], 0x71dfd947
mov dword [ebp - 0x38], 0xeefb6f65
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x2c], 0x6a3735b2
mov dword [ebp - 0x30], 0xac31
mov dword [ebp - 0x24], 0x14fa
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x433c64
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x7ec], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x433c4f
xor eax, eax
cmp dword [ebp - 0x4c], eax
mov esi, eax
je 0x433c6d
mov esi, edi
mov dword [ebp - 0x2c], 0xfffffffe
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x38]
sub edx, eax
neg edx
sbb edx, edx
inc edx
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
setg cl
cmp dword [ebp - 0x2c], ecx
je 0x433c9a
cmp dword [ebp - 0x3c], 0
je 0x433c9a
mov ecx, edi
jmp 0x433c9c
xor ecx, ecx
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x30]
cmp eax, ecx
jne 0x433caa
mov ecx, edi
jmp 0x433cac
xor ecx, ecx
mov eax, dword [ebp - 0x7e8]
xor edx, edx
cmp ecx, eax
setle dl
mov eax, dword [ebp - 0x4c]
add eax, esi
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x38], 0xffffffef
jmp 0x433ce1
mov dword [ebp - 0x24], 0x6928694a
cmp dword [ebp - 0x24], 0
jne 0x433ce7
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xfffffff4
jle 0x433cd1
mov dword [ebp - 0x44], edi
push edi
lea ecx, [ebp - 0x338]
call fcn.0042fb3f
mov dword [ebp - 0x18], 0
jmp 0x433d10
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa08], 0x624039b6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x433cff
mov dword [ebp - 0x18], 0
jmp 0x433d32
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x338]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x433d1f
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x433d4c