Function at 0x430888
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78c
push esi
push edi
push 3
lea ecx, [ebp - 0x664]
call fcn.00433b79
push 3
lea ecx, [ebp - 0x45c]
call fcn.00433b79
mov dword [ebp - 0x38], 0
jmp 0x4308bd
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x4308d9
push dword [ebp - 0x38]
lea ecx, [ebp - 0x664]
call fcn.00433c67
mov dword [eax], 0x3342eb90
jmp 0x4308b6
mov dword [ebp - 0x38], 0
jmp 0x4308e9
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x430902
push dword [ebp - 0x38]
lea ecx, [ebp - 0x45c]
call fcn.00433c67
and dword [eax], 0
jmp 0x4308e2
mov byte [ebp - 0x94], 0
movzx eax, byte [ebp - 0x94]
test eax, eax
je 0x43091c
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
push 0
lea ecx, [ebp - 0x45c]
call fcn.00433c67
and dword [eax], 0
jmp 0x430952
push 0
lea ecx, [ebp - 0x45c]
call fcn.00433c67
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x238]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x238]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x45c]
call fcn.00433c67
cmp dword [eax], 2
jg 0x430995
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x43097f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov byte [ebp - 0x6b], 0
movzx eax, byte [ebp - 0x6b]
test eax, eax
je 0x430993
push 0
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
jmp 0x43092e
lea ecx, [ebp - 0x45c]
call fcn.00433c4b
lea ecx, [ebp - 0x664]
call fcn.00433c4b
and dword [ebp - 0x24], 0
mov dword [ebp - 0x44], 0x4e2db58
mov dword [ebp - 0xbc], 0xfffffffd
mov dword [ebp - 0x43c], 0xffffffff
push 1
lea ecx, [ebp - 0x674]
call fcn.00433b79
mov dword [ebp - 0x108], 0
jmp 0x4309f0
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x430a12
push dword [ebp - 0x108]
lea ecx, [ebp - 0x674]
call fcn.00433c67
mov dword [eax], 0xfffffff7
jmp 0x4309e3
mov dword [ebp - 0x44], 0xa
jmp 0x430a22
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 8
jg 0x430ac6
push 2
lea ecx, [ebp - 0x53c]
call fcn.00433b79
mov dword [ebp - 0xd4], 0
jmp 0x430a52
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x430a74
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x53c]
call fcn.00433c67
mov dword [eax], 0xc3a0b8ee
jmp 0x430a45
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xbc], 0
jmp 0x430a96
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x13
jg 0x430ab6
push 0
lea ecx, [ebp - 0x53c]
call fcn.00433c67
mov eax, dword [eax]
mov dword [ebp - 0x43c], eax
jmp 0x430a89
lea ecx, [ebp - 0x53c]
call fcn.00433c4b
jmp 0x430a1b
mov dword [ebp - 0x44], 0
jmp 0x430ad6
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jg 0x430af8
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x430af6
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x430acf
lea ecx, [ebp - 0x674]
call fcn.00433c4b
push 1
lea ecx, [ebp - 0xa8]
call fcn.00433b79
mov dword [ebp - 8], 1
mov dword [ebp - 0xc4], 0x9329bfae
mov dword [ebp - 0x48], 0x50ba4309
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0xc8], 0
jmp 0x430b55
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x430b77
push dword [ebp - 0xc8]
lea ecx, [ebp - 0xa8]
call fcn.00433c67
mov dword [eax], 0x5b57fd54
jmp 0x430b48
mov dword [ebp - 8], 0
jmp 0x430b87
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jg 0x4312f9
mov dword [ebp - 0x70], 3
mov dword [ebp - 0x78], 0xc2b42d22
mov dword [ebp - 0xe4], 0xc8e9bdcc
cmp dword [ebp - 8], 1
je 0x430bbd
push dword [ebp - 8]
lea ecx, [ebp - 0xa8]
call fcn.00433c67
push 0
lea ecx, [ebp - 0xa8]
call fcn.00433c67
push dword [ebp - 8]
lea ecx, [ebp - 0xa8]
call fcn.00433c67
mov esi, eax
push dword [ebp - 8]
lea ecx, [ebp - 0xa8]
call fcn.00433c67
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x430bfa
mov dword [ebp - 0x3c8], 1
jmp 0x430c01
and dword [ebp - 0x3c8], 0
push dword [ebp - 8]
lea ecx, [ebp - 0xa8]
call fcn.00433c67
mov esi, dword [eax]
sub esi, dword [ebp - 0x3c8]
push 0
lea ecx, [ebp - 0xa8]
call fcn.00433c67
imul esi, dword [eax]
test esi, esi
jne 0x430c37
mov dword [ebp - 0x18c], 1
jmp 0x430c3e
and dword [ebp - 0x18c], 0
push 0
lea ecx, [ebp - 0xa8]
call fcn.00433c67
mov ecx, dword [ebp - 0x18c]
cmp ecx, dword [eax]
je 0x430c61
mov dword [ebp - 0x3c0], 1
jmp 0x430c68
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x3c0], 0x9dcb7be7
jne 0x430c80
mov dword [ebp - 0x188], 1
jmp 0x430c87
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
sub eax, dword [ebp - 0xc4]
cmp eax, 0x214c
jle 0x430ca6
mov dword [ebp - 0x2bc], 1
jmp 0x430cad
and dword [ebp - 0x2bc], 0
push dword [ebp - 8]
lea ecx, [ebp - 0xa8]
call fcn.00433c67
mov ecx, dword [ebp - 0x2bc]
add ecx, dword [eax]
je 0x430cd4
cmp dword [ebp - 8], 0
je 0x430cd4
mov eax, 0x3b947e29
test eax, eax
jne 0x430cef
push 0
lea ecx, [ebp - 0xa8]
call fcn.00433c67
cmp dword [eax], 0
jne 0x430cef
and dword [ebp - 0x194], 0
jmp 0x430cf9
mov dword [ebp - 0x194], 1
mov eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x48]
je 0x430d23
push dword [ebp - 8]
lea ecx, [ebp - 0xa8]
call fcn.00433c67
cmp dword [eax], 0
je 0x430d23
mov dword [ebp - 0x354], 1
jmp 0x430d2a
and dword [ebp - 0x354], 0
push dword [ebp - 8]
lea ecx, [ebp - 0xa8]
call fcn.00433c67
mov eax, dword [eax]
cmp eax, dword [ebp - 0x354]
jg 0x430d55
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x430d55
mov dword [ebp - 0x19c], 1
jmp 0x430d5c
and dword [ebp - 0x19c], 0
push dword [ebp - 8]
lea ecx, [ebp - 0xa8]
call fcn.00433c67
mov eax, dword [eax]
cmp eax, dword [ebp - 0x19c]
jg 0x430d80
mov dword [ebp - 0x2c4], 1
jmp 0x430d87
and dword [ebp - 0x2c4], 0
push 0
lea ecx, [ebp - 0xa8]
call fcn.00433c67
mov ecx, dword [ebp - 0x2c4]
cmp ecx, dword [eax]
jle 0x430daa
mov dword [ebp - 0x1a4], 1
jmp 0x430db1
and dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1a4], 0xbbfefa2e
jae 0x430dc9
mov dword [ebp - 0x3c4], 1
jmp 0x430dd0
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x3c4]
jns 0x430dea
mov dword [ebp - 0x1ac], 1
jmp 0x430df1
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xf5f
jge 0x430e15
cmp dword [ebp - 0x118], 0
jne 0x430e15
and dword [ebp - 0x2cc], 0
jmp 0x430e1f
mov dword [ebp - 0x2cc], 1
cmp dword [ebp - 0x2cc], 0xfffffffb
jl 0x430e47
push dword [ebp - 8]
lea ecx, [ebp - 0xa8]
call fcn.00433c67
cmp dword [eax], 0
je 0x430e47
mov dword [ebp - 0x1b4], 1
jmp 0x430e4e
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x1b4], eax
jl 0x430e65
mov dword [ebp - 0x35c], 1
jmp 0x430e6c
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0xc4], 0
jmp 0x430e91
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jg 0x4312f4
push 4
lea ecx, [ebp - 0x3d8]
call fcn.00433b79
mov dword [ebp - 0x98], 0xc72ea128
mov dword [ebp - 0x110], 0xc6b039b7
mov dword [ebp - 0xdc], 0
jmp 0x430ed8
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 4
jge 0x430ef7
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x3d8]
call fcn.00433c67
or dword [eax], 0xffffffff
jmp 0x430ecb
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x5cc], eax
mov dword [ebp - 0xe4], 0
mov esi, dword [ebp - 0xe4]
push dword [ebp - 8]
lea ecx, [ebp - 0xa8]
call fcn.00433c67
add esi, dword [eax]
mov edi, dword [ebp - 0x98]
push 2
lea ecx, [ebp - 0x3d8]
call fcn.00433c67
mov eax, dword [eax]
lea eax, [edi + eax - 0x5aa71f2d]
cmp esi, eax
jl 0x430f65
mov dword [ebp - 0x1bc], 1
jmp 0x430f6c
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 8], eax
je 0x430f8f
mov dword [ebp - 0x2d4], 1
jmp 0x430f96
and dword [ebp - 0x2d4], 0
imul eax, dword [ebp - 0x2d4], 0xffff
cmp eax, 0x1ab3
je 0x430fb3
mov dword [ebp - 0x1c4], 1
jmp 0x430fba
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x1c4], eax
jle 0x430fd1
mov dword [ebp - 0x3a4], 1
jmp 0x430fd8
and dword [ebp - 0x3a4], 0
push 0
lea ecx, [ebp - 0x3d8]
call fcn.00433c67
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax]
je 0x431285
mov dword [ebp - 0x134], 0xffff
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x134], eax
jg 0x431017
mov dword [ebp - 0x1cc], 1
jmp 0x43101e
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x1cc]
jge 0x43103e
mov dword [ebp - 0x1fc], 1
jmp 0x431045
and dword [ebp - 0x1fc], 0
push 2
lea ecx, [ebp - 0x3d8]
call fcn.00433c67
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0x43106f
mov dword [ebp - 0x2dc], 1
jmp 0x431076
and dword [ebp - 0x2dc], 0
cmp dword [ebp - 0x2dc], 0x1aff
jge 0x43108e
mov dword [ebp - 0x1d4], 1
jmp 0x431095
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
sub eax, 0xfff7
jne 0x4310ae
mov dword [ebp - 0x364], 1
jmp 0x4310b5
and dword [ebp - 0x364], 0
cmp dword [ebp - 0x364], 0xfffffff9
jg 0x4310ca
mov dword [ebp - 0x1dc], 1
jmp 0x4310d1
and dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0xffffffff
jne 0x4310e6
mov dword [ebp - 0x2e4], 1
jmp 0x4310ed
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x2e4], eax
jg 0x431110
cmp dword [ebp - 0xe4], 0
je 0x431110
mov dword [ebp - 0x1e4], 1
jmp 0x431117
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x1e4], eax
jle 0x431134
cmp dword [ebp - 0x98], 0
jne 0x431134
and dword [ebp - 0x3f0], 0
jmp 0x43113e
mov dword [ebp - 0x3f0], 1
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x3f0]
test eax, eax
je 0x43116a
push 2
lea ecx, [ebp - 0x3d8]
call fcn.00433c67
cmp dword [eax], 0
je 0x43116a
mov dword [ebp - 0x1ec], 1
jmp 0x431171
and dword [ebp - 0x1ec], 0
push 0
lea ecx, [ebp - 0x3d8]
call fcn.00433c67
mov ecx, dword [ebp - 0x1ec]
cmp ecx, dword [eax]
jle 0x431194
mov dword [ebp - 0x2ec], 1
jmp 0x43119b
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x2ec]
jge 0x4311be
push 2
pop eax
test eax, eax
jne 0x4311be
xor eax, eax
inc eax
jne 0x4311be
and dword [ebp - 0x434], 0
jmp 0x4311c8
mov dword [ebp - 0x434], 1
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x5d4], eax
push 2
lea ecx, [ebp - 0x3d8]
call fcn.00433c67
mov esi, eax
push dword [ebp - 8]
lea ecx, [ebp - 0xa8]
call fcn.00433c67
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x431203
mov dword [ebp - 0x1f4], 1
jmp 0x43120a
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x1f4], eax
jge 0x431224
mov dword [ebp - 0x36c], 1
jmp 0x43122b
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0
je 0x431252
push 0
lea ecx, [ebp - 0xa8]
call fcn.00433c67
cmp dword [eax], 0
je 0x431252
mov dword [ebp - 0x2f4], 1
jmp 0x431259
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x1fc]
cmp eax, dword [ebp - 0x2f4]
jg 0x431273
mov dword [ebp - 0x204], 1
jmp 0x43127a
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x48], eax
jmp 0x4312e4
mov dword [ebp - 0x70], 0
jmp 0x431295
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jg 0x4312e4
mov dword [ebp - 0x3ac], 0xffffffff
mov dword [ebp - 0x78], 0
jmp 0x4312b5
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x4312e2
mov dword [ebp - 0x48], 0
jmp 0x4312cb
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x4312e0
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
jmp 0x4312c4
jmp 0x4312ae
jmp 0x43128e
lea ecx, [ebp - 0x3d8]
call fcn.00433c4b
jmp 0x430e84
jmp 0x430b80
lea ecx, [ebp - 0xa8]
call fcn.00433c4b
mov dword [ebp - 0x5dc], 1
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x431325
push 0xfa1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 0x64], 0
movzx eax, byte [ebp - 0x64]
test eax, eax
je 0x431348
push 0x1770
push 0
push 0x24e3
push 0x3b7
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [ebp + 8]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x234], 0xfffffff8
mov dword [ebp - 0xec], 0
jmp 0x43138c
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jge 0x4313a8
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x74c], 0xe77da19
jmp 0x43137f
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x4313bc
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jl 0x4313d9
mov dword [ebp - 0x20c], 1
jmp 0x4313e0
and dword [ebp - 0x20c], 0
cmp dword [ebp - 0x20c], 0
jb 0x4313f5
mov dword [ebp - 0x2fc], 1
jmp 0x4313fc
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2fc]
add ecx, 0x49f4
imul eax, ecx
cmp eax, 1
jl 0x431423
xor eax, eax
je 0x431423
mov dword [ebp - 0x41c], 1
jmp 0x43142a
and dword [ebp - 0x41c], 0
or eax, 0xffffffff
je 0x4316c2
mov dword [ebp - 0x21c], 0
push 3
lea ecx, [ebp - 0x3fc]
call fcn.00433b79
mov dword [ebp - 0x120], 0
jmp 0x431463
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 3
jge 0x431482
push dword [ebp - 0x120]
lea ecx, [ebp - 0x3fc]
call fcn.00433c67
or dword [eax], 0xffffffff
jmp 0x431456
mov byte [ebp - 0x66], 0
movzx eax, byte [ebp - 0x66]
test eax, eax
je 0x4314a0
push 0xc37
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
cmp dword [ebp - 0x28], 0
jne 0x431675
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
mov eax, 0xeaa473ec
test eax, eax
jae 0x4314cc
mov dword [ebp - 0x444], 1
jmp 0x4314d3
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x5ec], eax
cmp dword [ebp - 0x164], 0
je 0x4314f9
xor eax, eax
inc eax
je 0x4314f9
mov dword [ebp - 0x214], 1
jmp 0x431500
and dword [ebp - 0x214], 0
push 2
lea ecx, [ebp - 0x3fc]
call fcn.00433c67
mov ecx, dword [ebp - 0x214]
cmp ecx, dword [eax]
jge 0x431523
mov dword [ebp - 0x374], 1
jmp 0x43152a
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0xffffffff
jle 0x43153f
mov dword [ebp - 0x304], 1
jmp 0x431546
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x21c]
cmp dword [ebp - 0x304], eax
jne 0x431560
mov dword [ebp - 0x224], 1
jmp 0x431567
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 0xb88cdf8a
jbe 0x43157f
mov dword [ebp - 0x3cc], 1
jmp 0x431586
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x3cc], eax
jl 0x4315a3
push 1
lea ecx, [ebp - 0x3fc]
call fcn.00433c67
cmp dword [eax], 0
je 0x4315b5
cmp dword [ebp - 0x28], 0
je 0x4315b5
mov dword [ebp - 0x22c], 1
jmp 0x4315bc
and dword [ebp - 0x22c], 0
mov esi, dword [ebp - 0x28]
imul esi, dword [ebp - 0x22c]
push 0
lea ecx, [ebp - 0x3fc]
call fcn.00433c67
cmp esi, dword [eax]
jl 0x4315e3
mov dword [ebp - 0x30c], 1
jmp 0x4315ea
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
sub eax, dword [ebp - 0x28]
jne 0x43160d
mov dword [ebp - 0x37c], 1
jmp 0x431614
and dword [ebp - 0x37c], 0
cmp dword [ebp - 0x37c], 0x7735
jg 0x43162c
mov dword [ebp - 0x23c], 1
jmp 0x431633
and dword [ebp - 0x23c], 0
mov esi, dword [ebp - 0x23c]
dec esi
push 1
lea ecx, [ebp - 0x3fc]
call fcn.00433c67
imul esi, dword [eax]
test esi, esi
jne 0x43165a
mov dword [ebp - 0x314], 1
jmp 0x431661
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x314], eax
jne 0x431675
and dword [ebp - 0x244], 0
jmp 0x43167f
mov dword [ebp - 0x244], 1
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x244]
je 0x431696
mov dword [ebp - 0x3b4], 1
jmp 0x43169d
and dword [ebp - 0x3b4], 0
push 1
lea ecx, [ebp - 0x3fc]
call fcn.00433c67
mov ecx, dword [ebp - 0x3b4]
mov dword [eax], ecx
lea ecx, [ebp - 0x3fc]
call fcn.00433c4b
jmp 0x431745
mov dword [ebp - 0x2c], 0
jmp 0x4316d2
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffffe
jg 0x43171f
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x431706
push 0
push 0x1aa6
push 0x1d08
push 0x1a80
push 0xe53
call dword [sym.imp.GDI32.dll_CreateBitmap]
mov byte [ebp - 0x68], 0
movzx eax, byte [ebp - 0x68]
test eax, eax
je 0x43171d
push 0x14a4
call dword [sym.imp.KERNEL32.dll_TlsFree]
jmp 0x4316cb
mov dword [ebp - 0x2c], 0
jmp 0x43172f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x431745
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x74c], 0x67dcaf6d
jmp 0x431728
mov eax, dword [ebp - 0x148]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x431b26
mov dword [ebp - 0xf4], 0xffffffff
push 1
lea ecx, [ebp - 0x684]
call fcn.00433b79
mov dword [ebp - 0x31c], 0xef7d
push 1
lea ecx, [ebp - 0x530]
call fcn.00433b79
mov dword [ebp - 0xc], 0
jmp 0x431797
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x4317ad
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x5f4], 0
jmp 0x431790
mov dword [ebp - 0xc], 0
jmp 0x4317bd
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x4317d6
push dword [ebp - 0xc]
lea ecx, [ebp - 0x684]
call fcn.00433c67
and dword [eax], 0
jmp 0x4317b6
mov dword [ebp - 0xc], 0
jmp 0x4317e6
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x431802
push dword [ebp - 0xc]
lea ecx, [ebp - 0x530]
call fcn.00433c67
mov dword [eax], 1
jmp 0x4317df
mov dword [ebp - 0xf4], 0
jmp 0x43181b
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jl 0x4319a3
push 2
lea ecx, [ebp - 0x46c]
call fcn.00433b79
mov dword [ebp - 0xfc], 0x8ef6b8f
mov dword [ebp - 0x5fc], 0xffffffff
mov dword [ebp - 0x44c], 0xfffffff7
mov dword [ebp - 0x128], 0
jmp 0x43186c
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jge 0x43188e
push dword [ebp - 0x128]
lea ecx, [ebp - 0x46c]
call fcn.00433c67
mov dword [eax], 0xfffffff7
jmp 0x43185f
push 1
lea ecx, [ebp - 0x46c]
call fcn.00433c67
and dword [eax], 0
jmp 0x4318c4
push 1
lea ecx, [ebp - 0x46c]
call fcn.00433c67
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x24c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x46c]
call fcn.00433c67
cmp dword [eax], 0
jg 0x4318fb
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x4318f9
push 1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x4318a0
mov dword [ebp - 0xfc], 0
jmp 0x431914
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jl 0x431993
mov dword [ebp - 0x604], 1
mov dword [ebp - 0x60c], 0xb6f65e79
mov dword [ebp - 0x614], 8
mov dword [ebp - 0x61c], 0x47d2038e
mov dword [ebp - 0x624], 0xaf7f3e76
mov dword [ebp - 0x72c], 0xe7975358
mov dword [ebp - 0x728], 0xe7975358
mov dword [ebp - 0x724], 0xe7975358
mov dword [ebp - 0x720], 0xe7975358
mov eax, dword [ebp - 0x31c]
dec eax
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x44c], 0x1e283d1f
jmp 0x431907
lea ecx, [ebp - 0x46c]
call fcn.00433c4b
jmp 0x43180e
push 0
lea ecx, [ebp - 0x530]
call fcn.00433c67
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x254]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x254]
mov dword [ecx], eax
lea ecx, [ebp - 0x530]
call fcn.00433c4b
lea ecx, [ebp - 0x684]
call fcn.00433c4b
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0x62c], 0xffff
mov dword [ebp - 0x40], 0
jmp 0x431a01
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x431a17
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x59c], 0xf378
jmp 0x4319fa
mov dword [ebp - 0x40], 0
jmp 0x431a27
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x431a3d
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x634], 0xffffffff
jmp 0x431a20
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb0]
mov dword [ebp + eax - 0x59c], ecx
mov dword [ebp - 0xb0], 1
jmp 0x431a69
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x431b1f
mov dword [ebp - 0x130], 0
xor eax, eax
inc eax
je 0x431aa8
mov dword [ebp - 0x4c0], 0x23fa3a92
mov dword [ebp - 0x4ac], 0
imul eax, dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4ac], eax
jmp 0x431abf
mov dword [ebp - 0x384], 0xffff
mov eax, dword [ebp - 0x384]
dec eax
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x130], 0
jmp 0x431ad8
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jg 0x431b1a
mov dword [ebp - 0x424], 1
mov byte [ebp - 0x6a], 0
movzx eax, byte [ebp - 0x6a]
test eax, eax
je 0x431b0d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
cmp dword [ebp - 0x424], 0
je 0x431b18
jmp 0x431b1a
jmp 0x431acb
jmp 0x431a5c
xor eax, eax
jmp 0x433afd
mov dword [ebp - 0x1c], 0x1afa
push 1
lea ecx, [ebp - 0x3e8]
call fcn.00433b79
mov dword [ebp - 0xc0], 0xc6548aab
mov dword [ebp - 0x80], 0xffffffff
push 2
lea ecx, [ebp - 0x524]
call fcn.00433b79
mov dword [ebp - 0x88], 0xfffffff8
mov dword [ebp - 4], 0
jmp 0x431b72
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x431b8b
push dword [ebp - 4]
lea ecx, [ebp - 0x3e8]
call fcn.00433c67
or dword [eax], 0xffffffff
jmp 0x431b6b
mov dword [ebp - 4], 0
jmp 0x431b9b
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x431bb1
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x47c], 0x7c0ec0dc
jmp 0x431b94
mov dword [ebp - 4], 0
jmp 0x431bc1
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x431bdd
push dword [ebp - 4]
lea ecx, [ebp - 0x524]
call fcn.00433c67
mov dword [eax], 0x24ca9a92
jmp 0x431bba
mov dword [ebp - 4], 0
jmp 0x431bed
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x431c03
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x764], 0x75d104dd
jmp 0x431be6
cmp dword [ebp - 0x1c], 1
jg 0x431cc7
cmp dword [ebp - 0x1c], 0
je 0x431c2b
cmp dword [ebp - 0x1c], 0
jbe 0x431c2b
cmp dword [ebp - 0x1c], 0
je 0x431c2b
mov dword [ebp - 0x144], 1
jmp 0x431c32
and dword [ebp - 0x144], 0
push 0
lea ecx, [ebp - 0x3e8]
call fcn.00433c67
mov ecx, dword [ebp - 0x144]
mov dword [eax], ecx
cmp dword [ebp - 0x144], 2
jle 0x431c5c
mov dword [ebp - 0x25c], 1
jmp 0x431c63
and dword [ebp - 0x25c], 0
cmp dword [ebp - 0x25c], 0xffff
jne 0x431c7b
mov dword [ebp - 0x324], 1
jmp 0x431c82
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x324]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jne 0x431c9c
mov dword [ebp - 0x264], 1
jmp 0x431ca3
and dword [ebp - 0x264], 0
imul eax, dword [ebp - 0x264], 0xa97f
add eax, dword [ebp - 0xc0]
imul eax, dword [ebp - 0x1c]
test eax, eax
je 0x431cc7
mov dword [ebp - 0x3ec], 1
jmp 0x431cce
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
sub eax, 5
cmp eax, dword [ebp - 0x1c]
jne 0x431ce8
mov dword [ebp - 0x26c], 1
jmp 0x431cef
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
sub eax, dword [ebp - 0xc0]
imul eax, eax, 0xfff8
test eax, eax
jne 0x431d17
mov eax, 0x37f4
test eax, eax
jne 0x431d17
and dword [ebp - 0x32c], 0
jmp 0x431d21
mov dword [ebp - 0x32c], 1
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x32c]
test eax, eax
jne 0x431d4a
push 0
lea ecx, [ebp - 0x3e8]
call fcn.00433c67
cmp dword [eax], 0
jne 0x431d4a
and dword [ebp - 0x274], 0
jmp 0x431d54
mov dword [ebp - 0x274], 1
cmp dword [ebp - 0x274], 0xd50c
jle 0x431d6c
mov dword [ebp - 0x38c], 1
jmp 0x431d73
and dword [ebp - 0x38c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x38c]
mov dword [ebp + eax - 0x47c], ecx
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x1c], eax
jl 0x431d9a
mov dword [ebp - 0x3bc], 1
jmp 0x431da1
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0x80], 0x44bd
je 0x431db6
mov dword [ebp - 0x27c], 1
jmp 0x431dbd
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x27c], 0x6f32215f
jl 0x431dd5
mov dword [ebp - 0x334], 1
jmp 0x431ddc
and dword [ebp - 0x334], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x47c]
imul eax, dword [ebp - 0x334]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x47c]
jne 0x431e09
mov dword [ebp - 0x284], 1
jmp 0x431e10
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x284], eax
jle 0x431e27
mov dword [ebp - 0x28c], 1
jmp 0x431e2e
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x3bc]
cmp eax, dword [ebp - 0x28c]
jge 0x431e48
mov dword [ebp - 0x33c], 1
jmp 0x431e4f
and dword [ebp - 0x33c], 0
push 0
lea ecx, [ebp - 0x3e8]
call fcn.00433c67
mov eax, dword [eax]
cmp eax, dword [ebp - 0x33c]
jle 0x431e72
mov dword [ebp - 0x294], 1
jmp 0x431e79
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x294], eax
jne 0x431e96
cmp dword [ebp - 0x1c], 0
je 0x431e96
mov dword [ebp - 0x394], 1
jmp 0x431e9d
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x394], eax
jne 0x431eb7
mov dword [ebp - 0x29c], 1
jmp 0x431ebe
and dword [ebp - 0x29c], 0
cmp dword [ebp - 0x29c], 7
jle 0x431f07
mov eax, 0x7518db06
test eax, eax
je 0x431f07
mov byte [ebp - 0x92], 0
movzx eax, byte [ebp - 0x92]
test eax, eax
je 0x431f02
push 0x1a86
push 0x344
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFrameControl]
jmp 0x432359
mov dword [ebp - 0xb8], 0x1ffde63b
mov dword [ebp - 0x2a4], 5
mov dword [ebp - 0x14c], 0xfff9
mov dword [ebp - 0x438], 0xd184116
mov dword [ebp - 0x430], 7
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x63c], eax
mov eax, dword [ebp - 0x80]
shl eax, 2
test eax, eax
jne 0x431f61
cmp dword [ebp - 0xb8], 0
jne 0x431f61
and dword [ebp - 0x344], 0
jmp 0x431f6b
mov dword [ebp - 0x344], 1
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x644], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x64c], eax
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x432169
mov dword [ebp - 0x418], 0xea0fefe6
mov dword [ebp - 0x414], 0xea0fefe6
mov dword [ebp - 0x410], 0xea0fefe6
mov dword [ebp - 0x40c], 0xea0fefe6
mov dword [ebp - 0x34c], 0xfffffffd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x418]
mov dword [ebp - 0x654], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x418]
sub eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x34c]
jl 0x432006
mov dword [ebp - 0x3dc], 1
jmp 0x43200d
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x3dc], eax
jne 0x432027
mov dword [ebp - 0x2ac], 1
jmp 0x43202e
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
neg eax
cmp eax, dword [ebp - 0x34c]
jle 0x43204a
mov dword [ebp - 0x2b4], 1
jmp 0x432051
and dword [ebp - 0x2b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x418]
cmp eax, dword [ebp - 0x2b4]
jne 0x432072
mov dword [ebp - 0x39c], 1
jmp 0x432079
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x39c], eax
jge 0x432099
cmp dword [ebp - 0x14c], 0
je 0x432099
mov dword [ebp - 0x428], 1
jmp 0x4320a0
and dword [ebp - 0x428], 0
push 0
lea ecx, [ebp - 0x3e8]
call fcn.00433c67
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x418]
mov dword [ebp - 0x710], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x47c]
imul eax, dword [ebp - 0xc0]
mov dword [ebp - 0x184], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x184]
mov dword [ebp + eax - 0x47c], ecx
cmp dword [ebp - 0x184], 0
jne 0x432108
cmp dword [ebp - 0xb8], 0
jne 0x432108
and dword [ebp - 0x190], 0
jmp 0x432112
mov dword [ebp - 0x190], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x418]
cmp dword [ebp - 0x190], eax
jl 0x432133
mov dword [ebp - 0x15c], 1
jmp 0x43213a
and dword [ebp - 0x15c], 0
push 0
lea ecx, [ebp - 0x524]
call fcn.00433c67
mov ecx, dword [ebp - 0x15c]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x3e8]
call fcn.00433c67
mov ecx, dword [ebp - 0x15c]
mov dword [eax], ecx
jmp 0x432359
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x718], 0x55fca997
mov dword [ebp - 0x49c], 0xe742402b
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x198], eax
push 0
lea ecx, [ebp - 0x3e8]
call fcn.00433c67
mov ecx, dword [ebp - 0x198]
mov dword [eax], ecx
cmp dword [ebp - 0x198], 0
jne 0x4321cf
cmp dword [ebp - 0x14c], 0
jne 0x4321cf
and dword [ebp - 0x1a0], 0
jmp 0x4321d9
mov dword [ebp - 0x1a0], 1
cmp dword [ebp - 0x1a0], 0xffffffff
jl 0x4321ee
mov dword [ebp - 0x1c8], 1
jmp 0x4321f5
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
jne 0x43225d
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x80], eax
jge 0x43221b
mov dword [ebp - 0x1a8], 1
jmp 0x432222
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x1a8], eax
jl 0x432242
cmp dword [ebp - 0x80], 0
je 0x432242
mov dword [ebp - 0x1b0], 1
jmp 0x432249
and dword [ebp - 0x1b0], 0
imul eax, dword [ebp - 0x1b0], 5
test eax, eax
jne 0x43225d
and dword [ebp - 0x1b8], 0
jmp 0x432267
mov dword [ebp - 0x1b8], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x764]
imul eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0xb8]
jl 0x43228f
mov dword [ebp - 0x1c0], 1
jmp 0x432296
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
add eax, 0x4e38
cmp dword [ebp - 0x1c8], eax
jg 0x4322b5
mov dword [ebp - 0x1d0], 1
jmp 0x4322bc
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
sub eax, 0x16b4
sub eax, dword [ebp - 0x49c]
cmp eax, 0x37f86866
jle 0x4322e0
mov dword [ebp - 0x1d8], 1
jmp 0x4322e7
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x430]
cmp dword [ebp - 0x1d8], eax
jl 0x432301
mov dword [ebp - 0x4bc], 1
jmp 0x432308
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0x9c]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x88], 0xffffffe3
jmp 0x432333
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xa
je 0x432359
mov byte [ebp - 0x6c], 0
movzx eax, byte [ebp - 0x6c]
test eax, eax
je 0x432357
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
jmp 0x432326
lea ecx, [ebp - 0x524]
call fcn.00433c4b
lea ecx, [ebp - 0x3e8]
call fcn.00433c4b
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0x11c], 0x4fd3df75
mov dword [ebp - 0x6d8], 0x44ad72d7
mov dword [ebp - 0x104], 0
jmp 0x4323ae
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x4323ca
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x758], 0x90a35f39
jmp 0x4323a1
mov dword [ebp - 0x11c], 0
jmp 0x4323e3
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xffffffe2
jge 0x43242d
mov dword [ebp - 0xac], 0x2e31d83
mov dword [ebp - 0xac], 0
jmp 0x43240f
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jge 0x43242b
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x758], 0x37a3a11c
jmp 0x432402
jmp 0x4323d6
mov eax, dword [ebp - 0xb4]
cmp dword [eax], 0x4550
je 0x4325ac
push 1
lea ecx, [ebp - 0x694]
call fcn.00433b79
mov dword [ebp - 0x630], 1
mov dword [ebp - 0x564], 0xfffffffc
mov dword [ebp - 0x730], 0xc25f
mov dword [ebp - 0x56c], 0x312fbb6b
mov dword [ebp - 0x638], 0x38330377
mov dword [ebp - 0x14], 0
jmp 0x43248e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x4324aa
push dword [ebp - 0x14]
lea ecx, [ebp - 0x694]
call fcn.00433c67
mov dword [eax], 1
jmp 0x432487
mov dword [ebp - 0x14], 0
jmp 0x4324ba
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x4324d0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4cc], 0
jmp 0x4324b3
mov dword [ebp - 0x14], 0
jmp 0x4324e0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x4324f6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x574], 0xffffffff
jmp 0x4324d9
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x4cc], 0
jmp 0x432524
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4cc]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x4cc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4cc], 0
jl 0x43259a
mov dword [ebp - 0x6c8], 0x9c9fb37b
mov dword [ebp - 0x57c], 0x12e1dfe0
mov dword [ebp - 0x640], 0x2d83d783
mov dword [ebp - 0x584], 0xfffffffe
mov dword [ebp - 0x70c], 0xffffffff
mov dword [ebp - 0x1e0], 0xdb785b64
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x432588
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
jmp 0x432509
lea ecx, [ebp - 0x694]
call fcn.00433c4b
xor eax, eax
jmp 0x433afd
mov dword [ebp - 0x58c], 0x28c176b0
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x4325d4
push 0xcc9
push 0x159f
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov byte [ebp - 0x62], 0
movzx eax, byte [ebp - 0x62]
test eax, eax
je 0x4325fb
push 0
push 0xba7
push 0x1e83
push 0x1026
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
push 1
push 0x67e0
lea eax, [ebp - 0xe8]
push eax
push 0x761f
push 0x64
push 0x626a
push 0x7e5e
push 0x4356
push dword [ebp - 0xb4]
push 0x6101
push 0x20a8
push 0x4f51
push 0x4f7d
push 1
push 0x6d03
push 0
push 1
push 0x75a7
push 1
call fcn.00423c65
add esp, 0x4c
mov dword [ebp - 0x16c], 0xfffffffe
mov dword [ebp - 0x58], 0xade2167f
mov dword [ebp - 0x648], 0xef9f3b06
mov eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x16c], eax
je 0x432688
mov dword [ebp - 0x1e8], 1
jmp 0x43268f
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
je 0x4328e4
mov dword [ebp - 0x154], 0xffffffff
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x5b0], 0x205300ce
mov dword [ebp - 0x5a0], 0xfffffff8
mov dword [ebp - 0x5b4], 0x4879
mov dword [ebp - 0x5ac], 0xfffffffc
mov dword [ebp - 0x5bc], 0xfffffffa
mov dword [ebp - 0x504], 0xf5ff74f5
mov dword [ebp - 0x500], 0xf5ff74f5
mov dword [ebp - 0x4fc], 0xf5ff74f5
mov dword [ebp - 0x4f8], 0xf5ff74f5
lea ecx, [ebp - 0x165]
call fcn.00433c76
push eax
lea eax, [ebp - 0x4f4]
push eax
lea eax, [ebp - 0x504]
push eax
lea ecx, [ebp - 0x76c]
call fcn.00433c79
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6b4]
call fcn.00433c25
mov eax, dword [ebp - 0x154]
sub eax, dword [ebp - 0x58]
je 0x432842
mov dword [ebp - 0x10c], 0xeb4c
mov dword [ebp - 0x440], 0xfffffff6
mov dword [ebp - 0x10c], 0
cmp dword [ebp - 0x58], 0xaf5bfb66
jae 0x43278d
mov dword [ebp - 0x1f0], 1
jmp 0x432794
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x1f0]
jl 0x4327ae
mov dword [ebp - 0x4a4], 1
jmp 0x4327b5
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x16c], 0x8633
jne 0x4327d9
mov dword [ebp - 0x1f8], 1
jmp 0x4327e0
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x1f8], eax
jl 0x4327fa
mov dword [ebp - 0x200], 1
jmp 0x432801
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x154]
add eax, dword [ebp - 0x200]
imul eax, dword [ebp - 0x10c]
test eax, eax
jne 0x432827
cmp dword [ebp - 0x58], 0
jne 0x432827
and dword [ebp - 0x208], 0
jmp 0x432831
mov dword [ebp - 0x208], 1
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x440], eax
jmp 0x4328d7
mov dword [ebp - 0x5b8], 0
mov dword [ebp - 0x650], 0xfffffffd
mov dword [ebp - 0x5c0], 0xfffffff8
push 4
lea ecx, [ebp - 0x6a4]
call fcn.00433b79
mov dword [ebp - 0x12c], 0
jmp 0x432886
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 4
jge 0x4328a8
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x6a4]
call fcn.00433c67
mov dword [eax], 0xef8169c1
jmp 0x432879
push 2
lea ecx, [ebp - 0x6b4]
call fcn.00433c67
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x210]
mov dword [ecx], eax
lea ecx, [ebp - 0x6a4]
call fcn.00433c4b
lea ecx, [ebp - 0x6b4]
call fcn.00433c4b
jmp 0x43292c
mov dword [ebp - 0x218], 0xfffffffb
mov dword [ebp - 0x4b4], 0x21f997ec
mov dword [ebp - 0x218], 0x2e25
mov eax, dword [ebp - 0x4b4]
cmp dword [ebp - 0x218], eax
jne 0x43291c
mov dword [ebp - 0x220], 1
jmp 0x432923
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0xe8], 0
jne 0x43293c
xor eax, eax
jmp 0x433afd
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x54], 0x7736
mov dword [ebp - 0x90], 0x4f98cafa
mov dword [ebp - 0x20], 0x3ee67684
mov dword [ebp - 0x270], 0xfffffff7
mov dword [ebp - 0x124], 0x918c6a86
mov dword [ebp - 0x450], 0xfffe
push 1
lea ecx, [ebp - 0x554]
call fcn.00433b79
mov dword [ebp - 0x10], 0
jmp 0x432996
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x4329ac
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x740], 0xffffffff
jmp 0x43298f
mov dword [ebp - 0x10], 0
jmp 0x4329bc
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x4329d2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x4e4], 0xffffffff
jmp 0x4329b5
mov dword [ebp - 0x10], 0
jmp 0x4329e2
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x4329fb
push dword [ebp - 0x10]
lea ecx, [ebp - 0x554]
call fcn.00433c67
and dword [eax], 0
jmp 0x4329db
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x4c], eax
jne 0x432a0f
mov dword [ebp - 0x228], 1
jmp 0x432a16
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x228], eax
jg 0x432a2d
mov dword [ebp - 0x230], 1
jmp 0x432a34
and dword [ebp - 0x230], 0
imul eax, dword [ebp - 0x230], 0x2f92
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffff
jg 0x432a53
mov dword [ebp - 0x448], 1
jmp 0x432a5a
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x71c], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x20], eax
jge 0x432a77
mov dword [ebp - 0x180], 1
jmp 0x432a7e
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0xb26d5d64
jb 0x432a96
mov dword [ebp - 0x240], 1
jmp 0x432a9d
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x240], eax
jl 0x432aba
cmp dword [ebp - 0x20], 0
je 0x432aba
mov dword [ebp - 0x248], 1
jmp 0x432ac1
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x248], eax
jle 0x432ad8
mov dword [ebp - 0x494], 1
jmp 0x432adf
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x250], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x250]
mov dword [ebp + eax - 0x740], ecx
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x250], eax
jg 0x432b27
mov dword [ebp - 0x258], 1
jmp 0x432b2e
and dword [ebp - 0x258], 0
cmp dword [ebp - 0x258], 0x129e
jl 0x432b46
mov dword [ebp - 0x260], 1
jmp 0x432b4d
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x260]
jne 0x432b67
cmp dword [ebp - 0x20], 0
jne 0x432b67
and dword [ebp - 0x268], 0
jmp 0x432b71
mov dword [ebp - 0x268], 1
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x4c], 1
jbe 0x432b98
cmp dword [ebp - 0x270], 0
je 0x432b98
mov dword [ebp - 0x278], 1
jmp 0x432b9f
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x278]
jne 0x432bb6
mov dword [ebp - 0x138], 1
jmp 0x432bbd
and dword [ebp - 0x138], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x138]
mov dword [ebp + eax - 0x4e4], ecx
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x138], eax
jle 0x432be6
mov dword [ebp - 0x280], 1
jmp 0x432bed
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x280], eax
jg 0x432c04
mov dword [ebp - 0x288], 1
jmp 0x432c0b
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x288], eax
jl 0x432c22
mov dword [ebp - 0x290], 1
jmp 0x432c29
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x290], eax
jle 0x432c43
mov dword [ebp - 0x298], 1
jmp 0x432c4a
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x20], 0
jmp 0x432c66
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jg 0x432e57
mov dword [ebp - 0x2d0], 0xfffffff7
mov dword [ebp - 0x2b0], 0xdf115cd6
mov dword [ebp - 0x90], 0
jmp 0x432c9d
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jg 0x432e52
mov dword [ebp - 0x498], 0xe00c
mov dword [ebp - 0x114], 0
jmp 0x432ccd
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jge 0x432ce9
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x5a8], 0x3d7aff79
jmp 0x432cc0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4e4]
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x2d0], 0
je 0x432d19
cmp dword [ebp - 0x450], 0
je 0x432d19
mov dword [ebp - 0x2a0], 1
jmp 0x432d20
and dword [ebp - 0x2a0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x740]
add eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x740], ecx
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x4e4]
imul eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0x54]
jne 0x432d7a
mov dword [ebp - 0x2b8], 1
jmp 0x432d81
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x2c0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2c0]
mov dword [ebp + eax - 0x4e4], ecx
cmp dword [ebp - 0x2c0], 0xffffffff
jge 0x432dc0
mov dword [ebp - 0x140], 1
jmp 0x432dc7
and dword [ebp - 0x140], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x140]
mov dword [ebp + eax - 0x5a8], ecx
cmp dword [ebp - 0x140], 6
je 0x432def
mov dword [ebp - 0x2c8], 1
jmp 0x432df6
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x498]
cmp dword [ebp - 0x2c8], eax
jg 0x432e10
mov dword [ebp - 0x2d8], 1
jmp 0x432e17
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x2d8], eax
je 0x432e31
mov dword [ebp - 0x2e0], 1
jmp 0x432e38
and dword [ebp - 0x2e0], 0
push 0
lea ecx, [ebp - 0x554]
call fcn.00433c67
mov ecx, dword [ebp - 0x2e0]
mov dword [eax], ecx
jmp 0x432c90
jmp 0x432c5f
lea ecx, [ebp - 0x554]
call fcn.00433c4b
push dword [ebp - 0xb4]
push 1
push 0x48e9
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x148]
push 1
push 1
push 0x4e9e
push 0x259f
lea eax, [ebp - 0x5d0]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.0042f8aa
add esp, 0x2c
mov dword [ebp - 0x6e8], 0x9ac78948
mov dword [ebp - 0x558], 0x4a12b57e
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x5e0], 0xfffffffb
mov dword [ebp - 0x6fc], 0xfffffff7
mov dword [ebp - 0x5e8], 0xbf38c088
mov dword [ebp - 0x678], 1
mov dword [ebp - 0x5f0], 0xfffffffc
mov dword [ebp - 0x6f8], 0x19570a50
mov dword [ebp - 0x5f8], 0xfffffff7
mov dword [ebp - 0x688], 0x733e34b6
mov dword [ebp - 0x2e8], 1
mov dword [ebp - 0x30], 0
jmp 0x432f25
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x432f3b
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x78c], 0xffffffff
jmp 0x432f1e
mov dword [ebp - 0x30], 0
jmp 0x432f4b
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x432f61
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x784], 4
jmp 0x432f44
mov eax, dword [ebp - 0x2e8]
dec eax
mov dword [ebp - 0x2e8], eax
push 0
push 0x44e4
push 1
push dword [ebp + 8]
push 0x704f
push 0x386e
push 0x3850
push dword [ebp - 0xb4]
push dword [ebp - 0x24]
push 0x387c
push 0x4d22
push 0x35f
push 1
push 1
call fcn.00415350
add esp, 0x38
push 2
lea ecx, [ebp - 0x48c]
call fcn.00433b79
mov dword [ebp - 0x5c], 0xdf2f4a8b
mov dword [ebp - 0x158], 0x801fc3ee
mov dword [ebp - 0x600], 1
mov dword [ebp - 0x150], 1
mov dword [ebp - 0x318], 0xfffffffc
mov dword [ebp - 0x460], 0xe96b779c
push 1
lea ecx, [ebp - 0x6d4]
call fcn.00433b79
push 2
lea ecx, [ebp - 0x4d8]
call fcn.00433b79
mov dword [ebp - 0x2f0], 0x5537
mov dword [ebp - 0x518], 0x95921ba5
mov dword [ebp - 0x514], 0x95921ba5
mov dword [ebp - 0x510], 0x95921ba5
mov dword [ebp - 0x50c], 0x95921ba5
lea ecx, [ebp - 0x139]
call fcn.00433c76
push eax
lea eax, [ebp - 0x508]
push eax
lea eax, [ebp - 0x518]
push eax
lea ecx, [ebp - 0x774]
call fcn.00433c79
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6c4]
call fcn.00433c25
mov dword [ebp - 0x18], 0
jmp 0x433084
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x4330a0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x48c]
call fcn.00433c67
mov dword [eax], 0xea75c96
jmp 0x43307d
mov dword [ebp - 0x18], 0
jmp 0x4330b0
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x4330cc
push dword [ebp - 0x18]
lea ecx, [ebp - 0x6d4]
call fcn.00433c67
mov dword [eax], 0x858f9c25
jmp 0x4330a9
mov dword [ebp - 0x18], 0
jmp 0x4330dc
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x4330f8
push dword [ebp - 0x18]
lea ecx, [ebp - 0x4d8]
call fcn.00433c67
mov dword [eax], 1
jmp 0x4330d5
mov dword [ebp - 0x5c], 0
jmp 0x433108
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jg 0x433166
mov dword [ebp - 0x100], 0
jmp 0x433127
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x433143
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x77c], 9
jmp 0x43311a
mov eax, dword [ebp - 0x2f0]
dec eax
mov dword [ebp - 0x2f0], eax
push 1
lea ecx, [ebp - 0x4d8]
call fcn.00433c67
cmp dword [eax], 0
je 0x433164
jmp 0x433166
jmp 0x433101
cmp dword [ebp - 0x158], 0
jne 0x433202
push 0
lea ecx, [ebp - 0x4d8]
call fcn.00433c67
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x700], eax
push 1
lea ecx, [ebp - 0x48c]
call fcn.00433c67
cmp dword [ebp - 0x5c], 0x2a6add33
jle 0x4331ae
mov dword [ebp - 0x2f8], 1
jmp 0x4331b5
and dword [ebp - 0x2f8], 0
mov esi, dword [ebp - 0x2f8]
sub esi, dword [ebp - 0x460]
push 1
lea ecx, [ebp - 0x48c]
call fcn.00433c67
cmp esi, dword [eax]
jg 0x4331de
mov dword [ebp - 0x300], 1
jmp 0x4331e5
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x5c], eax
jle 0x433202
and dword [ebp - 0x308], 0
jmp 0x43320c
mov dword [ebp - 0x308], 1
mov eax, dword [ebp - 0x308]
neg eax
je 0x433234
push 0
lea ecx, [ebp - 0x6c4]
call fcn.00433c67
cmp dword [eax], 0
je 0x433234
mov dword [ebp - 0x310], 1
jmp 0x43323b
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0
jne 0x43325f
cmp dword [ebp - 0x5c], 0
jne 0x43325f
and dword [ebp - 0x320], 0
jmp 0x433269
mov dword [ebp - 0x320], 1
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x150], eax
mov esi, dword [ebp - 0x150]
push 1
lea ecx, [ebp - 0x48c]
call fcn.00433c67
cmp esi, dword [eax]
jle 0x433298
mov dword [ebp - 0x328], 1
jmp 0x43329f
and dword [ebp - 0x328], 0
cmp dword [ebp - 0x328], 1
ja 0x4332b4
mov dword [ebp - 0x330], 1
jmp 0x4332bb
and dword [ebp - 0x330], 0
cmp dword [ebp - 0x330], 0
jb 0x4332d0
mov dword [ebp - 0x338], 1
jmp 0x4332d7
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x338]
neg eax
mov dword [ebp - 0x158], eax
lea ecx, [ebp - 0x6c4]
call fcn.00433c4b
lea ecx, [ebp - 0x4d8]
call fcn.00433c4b
lea ecx, [ebp - 0x6d4]
call fcn.00433c4b
lea ecx, [ebp - 0x48c]
call fcn.00433c4b
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0xe8]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x350], ecx
push 1
lea ecx, [ebp - 0x408]
call fcn.00433b79
mov dword [ebp - 0x4a8], 0x2aba
mov dword [ebp - 0x3c], 0
jmp 0x43334d
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x433369
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x408]
call fcn.00433c67
mov dword [eax], 0xfffffff6
jmp 0x433346
mov dword [ebp - 0x3c], 0
jmp 0x433379
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x43338f
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x17c], 0x53606de7
jmp 0x433372
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x17c], 0
jmp 0x4333bd
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x17c]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x17c], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x17c], 0
jl 0x433513
mov dword [ebp - 0x470], 0xfffffffd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x17c]
mov dword [ebp - 0x608], eax
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x17c]
lea ecx, [ebp - 0x408]
call fcn.00433c67
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x17c]
mov dword [ebp - 0x698], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x17c]
mov dword [ebp - 0x610], eax
mov eax, 0xf2ba167c
test eax, eax
jne 0x43344d
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x17c], 0
jne 0x43344d
and dword [ebp - 0x340], 0
jmp 0x433457
mov dword [ebp - 0x340], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x17c]
cmp dword [ebp - 0x340], eax
jge 0x433478
mov dword [ebp - 0x348], 1
jmp 0x43347f
and dword [ebp - 0x348], 0
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x17c]
lea ecx, [ebp - 0x408]
call fcn.00433c67
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x17c]
add ecx, dword [ebp - 0x348]
push 4
pop edx
imul edx, edx, 3
sub ecx, dword [ebp + edx - 0x17c]
cmp dword [eax], ecx
jg 0x4334c7
mov dword [ebp - 0x4a0], 1
jmp 0x4334ce
and dword [ebp - 0x4a0], 0
push 0
lea ecx, [ebp - 0x408]
call fcn.00433c67
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x17c]
mov dword [ebp - 0x708], eax
push 4
pop eax
imul eax, eax, 3
push dword [ebp + eax - 0x17c]
lea ecx, [ebp - 0x408]
call fcn.00433c67
mov eax, dword [eax]
mov dword [ebp - 0x470], eax
jmp 0x4333a2
push 0
lea ecx, [ebp - 0x408]
call fcn.00433c67
mov eax, dword [eax]
mov dword [ebp - 0x4a8], eax
lea ecx, [ebp - 0x408]
call fcn.00433c4b
cmp dword [ebp - 0x350], 0
je 0x43355f
push 1
push 0x3625
push dword [ebp - 0x350]
push 0xc0e
push 1
push 1
push dword [ebp - 0x24]
push 1
call fcn.004094cd
add esp, 0x20
mov dword [ebp - 0x60], 0xffffffff
mov dword [ebp - 0x60], 0
jmp 0x433576
cmp dword [ebp - 0x60], 0xfffffffa
jle 0x43361c
mov dword [ebp - 0xcc], 0xa290be4
mov dword [ebp - 0x480], 0
cmp dword [ebp - 0x60], 2
jbe 0x4335a6
mov dword [ebp - 0x358], 1
jmp 0x4335ad
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jne 0x4335d6
mov byte [ebp - 0x63], 0
movzx eax, byte [ebp - 0x63]
test eax, eax
je 0x433644
push 0
push 0x1aa6
push 0x1d08
push 0x1a80
push 0xe53
call dword [sym.imp.GDI32.dll_CreateBitmap]
push dword [ebp - 0x24]
call fcn.0041eb32
pop ecx
test eax, eax
jne 0x433658
pop edi
pop esi
mov esp, ebp
pop ebp
ret