Function at 0x4339ab
Capabilities:
Extract resource via kernel32 functions
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x21c
push ebx
push esi
push edi
mov dword [ebp - 0xc], 0xfffffffb
xor ebx, ebx
push 1
mov dword [ebp - 0x3c], 0xb7928fbc
mov byte [ebp - 0x31], dl
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0xc], ebx
pop esi
jmp 0x4339e2
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x214], esi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x4339d5
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0xc], 0xffffffe7
jmp 0x433a4e
mov dword [ebp - 4], ebx
mov dword [ebp - 4], 0xfffffffe
jmp 0x433a29
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x433a26
push 0x9d0
push 0x1527
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawEdge]
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x11
je 0x433a03
mov dword [ebp - 4], esi
cmp dword [ebp - 4], ebx
jl 0x433a4b
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x433a46
push ebx
call dword [sym.imp.GDI32.dll_GetObjectType]
dec dword [ebp - 4]
jns 0x433a37
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffed
jge 0x4339f7
mov dword [ebp - 4], 0xfffffff8
lea ecx, [ebp - 0x128]
push 3
call fcn.00433638
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x1c], 0xb2dd2c99
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0xfffffffe
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x1c], 0x8fb828c2
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x1c], 0xfffffff8
push 3
mov dword [ebp - 0x28], ebx
mov dword [ebp - 8], ebx
pop edx
jmp 0x433abc
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0x21e1d82c
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x433aa9
mov dword [ebp - 8], ebx
jmp 0x433ad7
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1d8], 0x66da9a16
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x433ac6
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 0x128]
mov eax, dword [ebp - 4]
mov dword [esi + 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
dec dword [ebp - 0x14]
test eax, eax
jne 0x433b56
mov eax, dword [ebp - 4]
mov ecx, 0x95c3c62e
sub eax, dword [ebp - 4]
cmp ecx, eax
mov eax, dword [ebp - 0xc]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setge dl
mov dword [esi + 4], edx
mov dword [ebp - 0x1d0], edx
cmp edx, dword [ebp - 4]
jge 0x433b2d
cmp dword [ebp - 0xc], ebx
je 0x433b2d
xor esi, esi
inc esi
mov edx, esi
jmp 0x433b32
xor esi, esi
mov edx, ebx
inc esi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jne 0x433b4e
mov eax, ebx
cmp dword [ebp - 0x1d0], ebx
je 0x433b50
mov eax, esi
inc eax
jne 0x433b56
mov eax, dword [ebp - 0x1c]
xor esi, esi
xor ecx, ecx
inc esi
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x1c]
cmp eax, 0x1edbcc77
mov eax, dword [ebp - 0x18]
setg cl
add eax, 7
add eax, ecx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jne 0x433b80
mov eax, ebx
cmp dword [ebp - 0xc], ebx
je 0x433b82
mov eax, esi
push 0xfffffffffffffff9
pop ecx
cmp ecx, eax
push 0xfffffffffffffffa
sbb eax, eax
xor edx, edx
neg eax
sub eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0xc]
add eax, 2
imul eax, dword [ebp - 0xc]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
cmp eax, ecx
setle dl
imul eax, edx, 0x46a2
xor edx, edx
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 4]
setge dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setne bl
sub ebx, 0xb8cd
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, eax
pop ebx
setne cl
xor eax, eax
cmp ecx, ebx
lea ecx, [ebp - 0x128]
setle al
imul eax, dword [ebp - 0x30]
imul eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
add eax, 0x5214f334
mov dword [ebp - 0x28], eax
call fcn.0043370a
push esi
lea ecx, [ebp - 0xb0]
call fcn.00433638
mov dword [ebp - 0x14], 0xfffffff6
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x1c], ebx
push esi
call fcn.00433638
mov dword [ebp - 0x28], 0x55d5
xor edx, edx
mov dword [ebp - 0x30], 0x87778e10
mov dword [ebp - 0x24], 0x8e00
mov dword [ebp - 8], edx
jmp 0x433c65
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0xb0]
mov dword [eax + ecx*4], 0x5960
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x433c52
mov dword [ebp - 8], edx
jmp 0x433c7f
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x170]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x433c6f
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xb0]
sub eax, dword [ecx]
mov esi, dword [ecx]
neg eax
sbb eax, eax
xor ebx, ebx
inc eax
cmp eax, 0x4643cdf9
lea ecx, [esi + 0x2b56]
mov eax, dword [ebp - 0x28]
setge bl
sub eax, 0x90ae735
neg eax
sbb eax, eax
xor edx, edx
inc eax
add ecx, eax
mov eax, dword [ebp - 0x170]
cmp ecx, dword [eax]
setle dl
xor ecx, ecx
cmp edx, esi
setne cl
xor eax, eax
cmp ebx, ecx
sete al
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb0]
imul ecx, dword [eax]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x170]
call fcn.0043370a
lea ecx, [ebp - 0xb0]
call fcn.0043370a
xor esi, esi
mov dword [ebp - 8], 0x8a59c176
inc esi
lea ecx, [ebp - 0x17c]
mov dword [ebp - 4], esi
push esi
call fcn.00433638
mov dword [ebp - 0x18], 0x80f3bba6
xor ebx, ebx
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x3c], 0x66883ce7
mov dword [ebp - 0xc], ebx
jmp 0x433d55
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x17c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x433d46
mov eax, dword [ebp - 8]
xor edx, edx
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp ecx, eax
mov eax, dword [ebp - 8]
setl dl
sub edx, 0xfff6
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 8]
setle cl
sub eax, ecx
je 0x433d92
cmp dword [ebp - 8], ebx
je 0x433d92
mov eax, esi
cmp dword [ebp - 4], ebx
jne 0x433d94
mov eax, ebx
mov edx, dword [ebp - 8]
xor ecx, ecx
sub edx, eax
add edx, dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp edx, eax
setne cl
add ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 8]
jle 0x433db1
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp dword [ebp - 8], ebx
je 0x433df0
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x433dc9
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x433e98
push 0x24ac
push ebx
push 0x1be1
push 0x72e
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
jmp 0x433e98
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x1c], 0x8c5cecce
mov dword [ebp - 8], 0xe
jmp 0x433e2d
mov dword [ebp - 4], ebx
jmp 0x433e24
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x433e21
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x39
jl 0x433e08
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x31
jg 0x433e03
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x17c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 4]
jge 0x433e50
mov edx, ebx
cmp dword [ebp - 0x14], ebx
je 0x433e52
mov edx, esi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 4]
setne cl
sub eax, ecx
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 8]
setge dl
xor ecx, ecx
cmp edx, 0xffffffff
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 4]
setl dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x18], ebx
jmp 0x433edc
push esi
lea ecx, [ebp - 0x14c]
call fcn.00433638
mov dword [ebp - 0xc], ebx
jmp 0x433ec1
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], 0xa1265296
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x433eae
mov eax, dword [ebp - 0x14c]
lea ecx, [ebp - 0x14c]
inc dword [eax]
call fcn.0043370a
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff8
jg 0x433e9d
lea ecx, [ebp - 0x17c]
call fcn.0043370a
mov edi, dword [0x4b35ec]
lea ecx, [ebp - 0xbc]
push 2
mov dword [ebp - 0x3c], edi
call fcn.00433638
mov dword [ebp - 4], 0x9bdba76a
push 2
mov dword [ebp - 0x1c], esi
mov dword [ebp - 8], ebx
pop edx
jmp 0x433f28
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0xbc]
mov dword [eax + ecx*4], 7
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x433f15
mov dword [ebp - 8], ebx
jmp 0x433f43
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x21c], 0x6dfe535
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x433f32
mov dword [ebp - 4], esi
cmp dword [ebp - 4], ebx
jl 0x434064
mov esi, dword [ebp - 0xbc]
mov dword [ebp - 0xc], 0x2d7b
xor edx, edx
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x28], 0x6237
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 0xc36b
setne al
add eax, 0x6fa6
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x28]
dec eax
neg eax
sbb eax, eax
neg eax
imul eax, eax, 9
sub eax, dword [ebp - 4]
neg eax
sbb eax, eax
xor edx, edx
inc eax
add eax, dword [ebp - 0xc]
cmp eax, 0x739032f8
mov eax, dword [ebp - 0xbc]
setge dl
xor ecx, ecx
cmp dword [eax], edx
setle cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, 0xb721
setg al
xor edx, edx
cmp eax, dword [esi + 4]
mov eax, dword [ebp - 4]
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, 0x9029efec
setg cl
cmp eax, ecx
sbb eax, eax
inc eax
cmp eax, 0xe4fcd58f
jb 0x434016
mov dword [ebp - 0x1c], ebx
inc dword [ebp - 0x1c]
jmp 0x434058
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x104]
push 4
call fcn.00433638
mov dword [ebp - 0xc], ebx
jmp 0x43403e
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x104]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x43402b
mov eax, dword [ebp - 0x104]
lea ecx, [ebp - 0x104]
inc dword [eax + 0xc]
call fcn.0043370a
dec dword [ebp - 4]
jns 0x433f5a
xor esi, esi
inc esi
lea ecx, [ebp - 0xbc]
call fcn.0043370a
mov ebx, dword [ebp + 8]
xor ecx, ecx
mov dword [ebx], ecx
mov dword [ebx + 4], ecx
mov dword [ebx + 8], ecx
mov dword [ebx + 0xc], ecx
cmp byte [ebp - 0x31], cl
je 0x43420a
cmp edi, esi
jne 0x43420a
mov dword [ebp - 0x1c], 0x67215912
mov dword [ebp - 0x14], 0x49c9fb37
mov dword [ebp - 0x28], 0x83989226
mov dword [ebp - 4], ecx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], 0x33037736
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20], 0x2046130
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x20], 0xc6a002b5
mov dword [ebp - 8], 0xc279a1af
mov dword [ebp - 0x20], 0x3ec6b4e
mov dword [ebp - 0xc], ecx
jmp 0x4340ea
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x40], esi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x4340e0
cmp dword [ebp - 0x1c], ecx
jne 0x434116
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x24], ecx
jne 0x434105
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x28]
inc dword [ebp - 0x18]
test eax, eax
jne 0x434116
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x6ea3d881
mov dword [ebp - 0x14], 0x99612158
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x28], 0x7f9f41ad
mov dword [ebp - 0x28], 0xffffffff
push 3
call fcn.00433638
mov dword [ebp - 0x28], 0xb48fe2d5
xor esi, esi
mov dword [ebp - 0x28], 0xc0d357e8
mov dword [ebp - 0xc], esi
jmp 0x434170
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1b8]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x43415d
dec dword [ebp - 0x30]
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x14], esi
jl 0x4341a8
xor ebx, ebx
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x43419e
push 0xe7c
push ebx
push ebx
push 0x32e
push ebx
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
dec dword [ebp - 0x14]
jns 0x434183
mov ebx, dword [ebp + 8]
xor esi, esi
lea ecx, [ebp - 0x1b8]
call fcn.0043370a
cmp dword [ebp - 8], esi
je 0x4341f3
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x24]
dec eax
add ecx, eax
mov eax, dword [ebp - 4]
cmp ecx, eax
mov eax, dword [ebp - 8]
setge dl
sub eax, edx
je 0x4341e2
cmp dword [ebp - 0x40], esi
je 0x4341e2
xor ecx, ecx
inc ecx
jmp 0x4341e4
mov ecx, esi
mov eax, dword [ebp - 0x18]
sub eax, ecx
cmp eax, 0xdf0d
jl 0x4341f3
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 4], eax
mov dword [ebx + 8], 4
mov dword [ebx + 0xc], 0x4b35ec
mov dword [ebp - 0x18], 9
lea ecx, [ebp - 0x84]
mov dword [ebp - 4], 0xfffffffc
mov dword [ebp - 0x20], 0xc33c017f
push 2
call fcn.00433638
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 8], ebx
jmp 0x434249
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x84]
mov dword [eax + ecx*4], 0x15bb0028
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x434236
mov dword [ebp - 8], ebx
jmp 0x434265
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1ec], 0xe3113783
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x434254
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xfffffff7
jg 0x43437d
xor esi, esi
inc esi
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x1c], 0x92c5eb20
mov dword [ebp - 0x28], esi
mov dword [ebp - 0xc], 0xe3f2f34e
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x24], esi
mov eax, dword [ebp - 0x24]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x14]
inc dword [ebp - 0x14]
test eax, eax
jne 0x4342b0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x84]
cmp dword [eax], ecx
jge 0x4342c9
mov eax, dword [ebp - 0x1e8]
mov eax, dword [ebp - 0xc]
mov edx, esi
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x1c]
sub edx, eax
mov eax, dword [ebp - 0x84]
imul edx, dword [eax]
mov eax, dword [ebp - 0x20]
cmp edx, eax
mov eax, dword [ebp - 0x84]
setle cl
xor edx, edx
cmp ecx, 6
setne dl
xor ecx, ecx
mov dword [eax], edx
mov eax, dword [ebp - 0x28]
cmp edx, eax
mov eax, dword [ebp - 0x30]
setle cl
xor ebx, ebx
cmp ecx, eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
setge bl
xor edx, edx
cmp ecx, eax
setg dl
add ebx, edx
cmp dword [ebp - 4], ebx
jge 0x434369
xor ebx, ebx
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x434340
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x78f
push ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0xc], ebx
jmp 0x434362
mov dword [ebp - 4], ebx
jmp 0x434359
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x84]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x43434a
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jle 0x434345
jmp 0x434370
xor ebx, ebx
cmp dword [ebp - 0x18], ebx
jne 0x43437d
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff7
jle 0x43427b
lea ecx, [ebp - 0x84]
call fcn.0043370a
mov esi, dword [ebp - 0x2c]
cmp esi, edi
jge 0x4352ae
mov dword [ebp - 0x18], 0xfc0
lea ecx, [ebp - 0x1cc]
push 2
mov dword [ebp - 0xc], 0x8d020bd2
pop edi
mov dword [ebp - 0x20], 0x4902314a
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], 0xffffffff
push edi
call fcn.00433638
mov dword [ebp - 8], ebx
jmp 0x4343d4
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x48], 0x1705
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x4343c6
mov dword [ebp - 8], ebx
jmp 0x4343f1
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x1cc]
mov dword [eax + ecx*4], 0x233967be
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x4343de
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0x18]
test eax, eax
jne 0x434411
cmp dword [ebp - 0x48], ebx
jne 0x434411
xor edi, edi
mov edx, ebx
inc edi
jmp 0x434416
xor edi, edi
inc edi
mov edx, edi
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 4]
setle cl
xor edx, edx
add eax, ecx
cmp eax, 0x992f
mov eax, dword [ebp - 0x48]
setg dl
xor ecx, ecx
cmp eax, edx
setne cl
xor edx, edx
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
cmp eax, edx
setg cl
add ecx, 0x5966e63d
neg ecx
sbb ecx, ecx
inc ecx
imul ecx, dword [ebp - 0xc]
imul eax, ecx, 0xe2b7
cmp eax, dword [ebp - 0xc]
jle 0x434512
mov dword [ebp - 0x14], 0xc09
mov dword [ebp - 8], 0x783de769
mov dword [ebp - 0x24], 0x426cefc6
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x1c], ebx
jne 0x4344ef
cmp dword [ebp - 8], ebx
jne 0x4344e0
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x48]
jne 0x4344a1
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
cmp eax, 0xfffffffd
mov eax, dword [ebp - 8]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 8]
dec dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 7
setge al
mov dword [ebp - 4], eax
jmp 0x4345bb
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x1c], 0xfffffffd
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], 0xff52682f
mov dword [ebp - 0x18], ebx
jmp 0x43453f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x20c], 0xc815f77f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x43452e
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0x21
jge 0x4345b8
mov ebx, 0xffff
mov dword [ebp - 0x14], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 4]
add eax, ebx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, 0x7d86
setne cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x14]
sub edx, 0x6def04e4
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x4cdc86d9
setge al
mov dword [ebp - 4], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x21
jl 0x434553
inc dword [ebp - 0x24]
lea ecx, [ebp - 0x1cc]
call fcn.0043370a
xor edx, edx
mov ebx, 0x4b35f0
mov dword [ebp - 8], ebx
mov dword [ebp - 0x28], edx
test esi, esi
jle 0x434b8c
push 2
pop esi
mov dword [ebp - 0x1c], 0x4fd9e2a8
mov dword [ebp - 0xc], 0x8a527335
mov dword [ebp - 0xc], edx
jmp 0x4345ff
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x5c], 0x39beb064
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x4345f1
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x58]
neg ecx
sbb ecx, ecx
inc ecx
add eax, ecx
je 0x434629
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x58]
sub ecx, eax
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], 0x444
jne 0x434629
mov edx, edi
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp eax, edx
setg cl
xor esi, esi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0xc], esi
jmp 0x43464b
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x5c], 5
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x43463d
mov edi, dword [ebx]
lea ecx, [ebp - 0x1e4]
push 2
call fcn.00433638
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0xc], esi
jmp 0x43467f
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1e4]
mov dword [eax + ecx*4], 0x5b57
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x43466c
mov dword [ebp - 0xc], esi
cmp dword [ebp - 0xc], 1
jg 0x4346ae
xor ebx, ebx
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x4346a0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 1
jle 0x434690
mov ebx, dword [ebp - 8]
xor esi, esi
lea ecx, [ebp - 0x1e4]
call fcn.0043370a
add ebx, 4
lea ecx, [ebp - 0x134]
push 4
mov dword [ebp - 8], ebx
call fcn.00433638
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], esi
jmp 0x4346eb
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x4346d8
mov dword [ebp - 0x18], esi
jmp 0x434707
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf0], 0xfebaeef2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x4346f6
mov dword [ebp - 0xe8], esi
cmp dword [ebp - 0xe8], 3
jg 0x4348bd
xor ebx, ebx
mov dword [ebp - 0x14], 0xfffffffd
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x434740
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 3
jg 0x4348a7
xor esi, esi
inc esi
mov dword [ebp - 0x24], esi
lea ecx, [ebp - 0x164]
push 4
call fcn.00433638
mov dword [ebp - 0xc], ebx
jmp 0x434774
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x164]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x434765
push 3
pop eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jl 0x43486f
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jl 0x434866
mov dword [ebp - 0xc], 0xfffffffc
mov dword [ebp - 0xc], ebx
jmp 0x434854
push 2
lea ecx, [ebp - 0xc8]
call fcn.00433638
mov dword [ebp - 4], ebx
jmp 0x4347d0
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 6
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x4347bd
mov eax, dword [ebp - 0xc8]
mov dword [eax], 3
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x134]
cmp dword [eax + ecx*4], ebx
jne 0x43481f
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x434815
push ebx
push 0x744
push ebx
push 0xaea
push 0x230a
push ebx
push 0x600
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov eax, dword [ebp - 0xc8]
dec dword [eax]
jns 0x4347e2
cmp dword [ebp - 0x18], ebx
je 0x43482b
mov ecx, esi
cmp dword [ebp - 0x20], ebx
jne 0x43482d
mov ecx, ebx
mov eax, dword [ebp - 0x24]
imul eax, ecx
cmp eax, 0xa31e468a
mov eax, dword [ebp - 0x164]
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
lea ecx, [ebp - 0xc8]
call fcn.0043370a
inc dword [ebp - 0xc]
push 3
pop eax
cmp dword [ebp - 0xc], eax
jle 0x4347ab
dec dword [ebp - 0x18]
jns 0x43479c
dec dword [ebp - 0x24]
jns 0x434789
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x43488f
push ebx
push 0xa98
push 0x2c8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
lea ecx, [ebp - 0x164]
call fcn.0043370a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x434750
inc dword [ebp - 0xe8]
cmp dword [ebp - 0xe8], 3
jle 0x434722
mov ebx, dword [ebp - 8]
lea ecx, [ebp - 0x134]
call fcn.0043370a
mov esi, dword [ebx]
lea ecx, [ebp - 0x140]
mov dword [ebp - 0xc], 0x76820624
mov dword [ebp - 0x30], 0x90e69cd1
mov dword [ebp - 4], 0
push 3
call fcn.00433638
xor edx, edx
mov dword [ebp - 0x14], edx
jmp 0x434906
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], 0xa6d983a5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x4348f3
mov dword [ebp - 0xc], 0xfffffffd
jmp 0x434a57
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x18], 0x1b
cmp dword [ebp - 0x18], 5
jne 0x434a54
xor ecx, ecx
inc ecx
mov eax, 0x8067
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x1c], 0xfffffffa
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x14], edx
jmp 0x434961
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x38], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x434957
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], 3
jg 0x434a47
mov dword [ebp - 4], 0xfffffffd
mov dword [ebp - 4], edx
jmp 0x43498e
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x6c], edx
jne 0x434994
mov eax, dword [ebp - 0x18]
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jle 0x43497f
cmp dword [ebp - 0x18], edx
je 0x4349d4
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xc]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 4]
neg ecx
sbb ecx, ecx
xor eax, eax
cmp ecx, 0xa644
setne al
xor ecx, ecx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 4]
cmp eax, 0x1181
setl cl
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x6c]
test eax, eax
mov eax, dword [ebp - 0x38]
setne cl
mov eax, dword [ebp + eax*4 - 0x6c]
sub ecx, eax
lea eax, [ecx + 0x356e]
mov ecx, dword [ebp - 0x68]
imul ecx, eax
imul eax, ecx, 0xbfb4
add eax, 0x64bb91d4
cmp eax, 0xfffffffd
jl 0x434a0c
cmp dword [ebp - 0xc], edx
je 0x434a0f
xor edx, edx
inc edx
mov eax, dword [ebp - 0x38]
push 0
mov ecx, dword [ebp + eax*4 - 0x6c]
mov eax, dword [ebp - 0x38]
sub ecx, edx
neg ecx
pop edx
sbb ecx, ecx
mov eax, dword [ebp + eax*4 - 0x6c]
neg ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 3
jle 0x434973
xor ecx, ecx
inc ecx
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 5
je 0x434933
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jle 0x434918
mov dword [ebp - 4], edx
jmp 0x434a79
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], 0x8a064f57
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x434a66
lea ecx, [ebp - 0x140]
call fcn.0043370a
add ebx, 4
mov dword [ebp - 8], ebx
test esi, esi
jne 0x434a9a
add ebx, 8
mov dword [ebp - 8], ebx
push 3
lea ecx, [ebp - 0x1f8]
call fcn.00433638
xor edx, edx
mov dword [ebp - 0x18], edx
jmp 0x434ac1
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1f8]
mov dword [eax + ecx*4], 0xbbca6318
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x434aae
push 2
mov dword [ebp - 0x18], edx
pop esi
jmp 0x434add
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x54], 0x39beb064
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x434acf
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], esi
jg 0x434b66
xor ebx, ebx
mov dword [ebp - 0x14], ebx
jmp 0x434b02
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe0], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x434af1
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x434b2f
push ebx
push 0xe5b
push 0xa91
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
mov dword [ebp - 0xdc], esi
cmp dword [ebp - 0xdc], ebx
jl 0x434b5b
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x434b53
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
dec dword [ebp - 0xdc]
jns 0x434b3d
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], esi
jle 0x434aec
mov ebx, dword [ebp - 8]
lea ecx, [ebp - 0x1f8]
call fcn.0043370a
mov eax, dword [ebp - 0x28]
add ebx, edi
push 0
pop edx
inc eax
mov dword [ebp - 8], ebx
push 1
mov dword [ebp - 0x28], eax
pop edi
cmp eax, dword [ebp - 0x2c]
jl 0x4345de
xor esi, esi
inc esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], edx
jmp 0x434ba8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x204], 0x76038591
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x434b97
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0xffffffe2
jge 0x434c61
mov edi, 0x88eb
xor ebx, ebx
mov dword [ebp - 0xc], 0x22124f84
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x2c], 0xa9b64fda
push 3
call fcn.00433638
mov dword [ebp - 0x14], ebx
jmp 0x434bf5
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x434be2
mov dword [ebp - 0xc], ebx
jmp 0x434c3e
mov dword [ebp - 0x20], 7
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x204], edi
mov dword [ebp - 0x2c], edi
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 4]
sub edx, eax
mov eax, dword [ebp - 0xc]
neg edx
sbb edx, edx
inc edx
dec eax
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp edx, eax
mov eax, dword [ebp - 0x158]
setl cl
mov dword [eax], ecx
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xfffffffa
jge 0x434c00
lea ecx, [ebp - 0x158]
call fcn.0043370a
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffe2
jl 0x434bc2
mov ebx, dword [ebp - 8]
xor edx, edx
mov edi, dword [ebx]
lea ecx, [ebp - 0x188]
mov dword [ebp - 4], 6
mov dword [ebp - 0xc], 0x73948b08
mov dword [ebp - 0x1c], edx
push esi
mov dword [ebp - 0x24], edi
call fcn.00433638
mov dword [ebp - 0x14], 0
jmp 0x434c9f
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x188]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x434c8c
mov dword [ebp - 4], 0xfffffffe
cmp dword [ebp - 4], 0x1c
jne 0x434d4e
xor ebx, ebx
mov dword [ebp - 0xc], 0x29bf39
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x20], 9
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], ebx
je 0x434d0e
mov dword [ebp - 0x14], 0xffffffff
xor edx, edx
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg dl
mov dword [ebp - 0x20], edx
jmp 0x434d3e
mov dword [ebp - 0x18], 2
jmp 0x434d38
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 0xc], ebx
jl 0x434d35
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x434d30
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnionRect]
dec dword [ebp - 0xc]
jns 0x434d1f
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff8
jne 0x434d17
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x1c
je 0x434cb7
mov ebx, dword [ebp - 8]
xor eax, eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], eax
jg 0x434e4f
xor ebx, ebx
push 2
pop esi
push esi
lea ecx, [ebp - 0x110]
call fcn.00433638
push esi
lea ecx, [ebp - 0x11c]
call fcn.00433638
mov dword [ebp - 0x28], 0xf793
mov dword [ebp - 0x18], ebx
jmp 0x434d98
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x434d85
mov dword [ebp - 0x18], ebx
jmp 0x434db5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0x72920796
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x434da2
mov edx, dword [ebp - 0x110]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x11c]
cmp dword [edx + 4], eax
setle cl
mov dword [esi + 4], ecx
cmp dword [edx + 4], ebx
je 0x434e19
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
dec eax
neg eax
sbb eax, eax
neg eax
imul ecx, eax, 0xfffffff6
mov eax, dword [ebp - 0x188]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, dword [esi + 4]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0xc], ecx
jmp 0x434e27
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x434e27
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
lea ecx, [ebp - 0x11c]
call fcn.0043370a
lea ecx, [ebp - 0x110]
call fcn.0043370a
inc dword [ebp - 4]
cmp dword [ebp - 4], ebx
jle 0x434d5e
mov ebx, dword [ebp - 8]
xor esi, esi
inc esi
lea ecx, [ebp - 0x188]
call fcn.0043370a
push 3
lea ecx, [ebp - 0x1a0]
call fcn.00433638
mov dword [ebp - 0x20], 0xedad94e8
xor edx, edx
mov dword [ebp - 0x20], 0xace4b0ad
mov dword [ebp - 0x20], 0x34bdac84
mov dword [ebp - 0x20], 0x6753f3ac
mov dword [ebp - 0x20], 0xf2ef51ae
mov dword [ebp - 0x2c], 0x30498d20
mov dword [ebp - 0x20], 0x34aafbeb
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], 0x855c
mov dword [ebp - 0x2c], esi
mov dword [ebp - 8], edx
jmp 0x434ebf
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x1a0]
mov dword [eax + ecx*4], 0x6432
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x434eac
push 2
mov dword [ebp - 8], edx
pop ecx
jmp 0x434ede
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xf8], 0xfffffffa
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x434ecd
mov dword [ebp - 8], edx
jmp 0x434ef6
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x4c], 0x4c266d8f
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x434ee8
mov dword [ebp - 8], edx
jmp 0x434f0d
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1c0], esi
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x434f00
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp eax, 0x26a0
mov eax, dword [ebp - 0x1c]
setne cl
inc dword [ebp - 0x1c]
cmp eax, ecx
mov eax, esi
cmovne eax, edx
imul eax, eax, 0xf0ab
test eax, eax
jne 0x434f3b
cmp dword [ebp - 0x20], edx
je 0x434f42
mov eax, esi
cmp dword [ebp - 0x4c], edx
jne 0x434f44
mov eax, edx
mov esi, dword [ebp - 0x1a0]
xor edx, edx
cmp eax, dword [esi + 8]
mov eax, dword [ebp - 0xf8]
sete dl
xor ecx, ecx
imul edx, dword [esi + 8]
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x1bc]
setle cl
imul eax, ecx
test eax, eax
je 0x434f7d
cmp dword [esi + 8], 0
je 0x434f7d
xor eax, eax
inc eax
jmp 0x434f7f
xor eax, eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xf4]
dec eax
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp dword [esi + 8], eax
mov eax, dword [ebp - 0x2c]
sete dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x1a0]
call fcn.0043370a
mov esi, dword [ebx + 4]
lea ecx, [ebp - 0xd4]
push 3
call fcn.00433638
xor edx, edx
mov dword [ebp - 4], 0xef20fe6e
mov dword [ebp - 0x14], edx
jmp 0x434fdf
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xd4]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x434fcc
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 2
jg 0x43501a
mov edx, dword [ebp - 0xd4]
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x20], 1
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax + ecx*4]
mov dword [edx + 4], eax
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jle 0x434ff4
mov dword [ebp - 4], 0xfffffff6
jmp 0x435079
mov dword [ebp - 0x20], 0x4d63
lea ecx, [ebp - 0x1ac]
push 1
call fcn.00433638
xor edx, edx
mov dword [ebp - 0x2c], 0x7e71f09a
mov dword [ebp - 0x14], edx
jmp 0x435054
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1ac]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x435045
inc dword [ebp - 0x2c]
mov byte [ebp - 0xd], dl
cmp byte [ebp - 0xd], dl
je 0x43506b
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
lea ecx, [ebp - 0x1ac]
call fcn.0043370a
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x11
jle 0x435023
lea ecx, [ebp - 0xd4]
call fcn.0043370a
add ebx, 8
lea ecx, [ebp - 0x9c]
push 2
mov dword [ebp - 8], ebx
call fcn.00433638
mov dword [ebp - 4], 0xf20fe6e3
xor edx, edx
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x20], 0xf088
mov dword [ebp - 0x14], edx
jmp 0x4350cc
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x9c]
mov dword [eax + ecx*4], 0x1177e8ed
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4350b9
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 1
jg 0x4351c5
xor ebx, ebx
mov dword [ebp - 0x1c], 0x3f9b
lea ecx, [ebp - 0x194]
push 2
call fcn.00433638
mov dword [ebp - 0x20], 0xc895
mov dword [ebp - 0x20], 0x507af9ca
mov dword [ebp - 0x14], ebx
jmp 0x43511b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x194]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x435108
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x9c]
mov eax, dword [edx + eax*4]
cmp eax, dword [edx + ecx*4]
jle 0x435146
cmp dword [edx], ebx
jne 0x435146
mov edx, ebx
jmp 0x435149
xor edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x194]
setge dl
mov dword [eax], edx
test edx, edx
jne 0x435178
mov eax, dword [ebp - 0x9c]
cmp dword [eax + 4], ebx
jne 0x435178
mov eax, ebx
jmp 0x43517b
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], bl
je 0x4351aa
push ebx
push 0x1e1e
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea ecx, [ebp - 0x194]
call fcn.0043370a
inc dword [ebp - 4]
cmp dword [ebp - 4], 1
jle 0x4350e1
mov ebx, dword [ebp - 8]
lea ecx, [ebp - 0x9c]
call fcn.0043370a
test esi, esi
jne 0x4352ae
cmp byte [ebp - 0x31], 0
je 0x4351ed
cmp dword [ebp - 0x3c], 1
jne 0x4351ed
mov ecx, dword [ebp + 8]
lea eax, [edi + 0x10]
add dword [ecx + 8], eax
mov ecx, dword [ebp - 8]
mov ebx, dword [ebx]
push edi
mov eax, dword [ecx + 4]
add ecx, 8
mov dword [ebp - 0x3c], eax
mov dword [ebp - 8], ecx
call fcn.0048c252
mov esi, dword [ebp - 0x24]
mov edi, eax
xor eax, eax
mov dword [ebp - 0x20], edi
pop ecx
mov dword [ebp - 0xa4], eax
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0xa4]
push eax
push esi
call fcn.0046c318
xor ecx, ecx
test esi, esi
mov esi, dword [ebp - 0x78]
jle 0x43528b
mov eax, ecx
and eax, 0x80000001
jns 0x435245
dec eax
or eax, 0xfffffffe
inc eax
neg eax
sbb eax, eax
and eax, ebx
add eax, ecx
add eax, ebx
imul eax, dword [ebp - 0x3c]
cdq
idiv dword [ebp - 0x24]
xor eax, eax
cmp word [esi + edx*2], ax
je 0x435271
xor edi, edi
lea eax, [edx + 1]
cdq
idiv dword [ebp - 0x24]
cmp word [esi + edx*2], di
jne 0x435261
mov edi, dword [ebp - 0x20]
xor eax, eax
inc eax
mov word [esi + edx*2], ax
mov eax, dword [ebp - 8]
mov al, byte [edx + eax]
mov byte [ecx + edi], al
inc ecx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
jl 0x435237
jmp 0x43528e
mov eax, dword [ebp - 0x24]
mov ebx, dword [ebp + 8]
mov dword [ebx], eax
mov dword [ebx + 4], edi
test esi, esi
je 0x4352b1
push esi
call fcn.0048d746
xor eax, eax
pop ecx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
jmp 0x4352b1
mov ebx, dword [ebp + 8]
push 2
lea ecx, [ebp - 0x90]
call fcn.00433638
xor edx, edx
mov dword [ebp - 4], 0xfffffff9
mov dword [ebp - 0x14], edx
jmp 0x4352df
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x90]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x4352cc
xor ecx, ecx
inc ecx
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], edx
jl 0x435365
mov edi, dword [ebp - 0x90]
xor ebx, ebx
mov dword [ebp - 0x14], ebx
jmp 0x43530e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa0], 0x5e2de4bf
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x4352fd
mov eax, dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov esi, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x90]
push 1
cmp dword [edx + eax*4], ebx
setg cl
xor eax, eax
cmp ecx, dword [edi + 4]
setle al
xor ecx, ecx
cmp dword [edx + esi*4], eax
mov eax, 0x9737e0d1
mov edx, dword [ebp - 0xa0]
sete cl
cmp eax, ecx
mov ecx, dword [ebp - 0x90]
sbb eax, eax
inc eax
add edx, eax
mov dword [ecx], edx
dec dword [ebp - 4]
pop ecx
jns 0x4352f8
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0x90]
call fcn.0043370a
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret