Function at 0x4301bc
Capabilities:
Create process on windows
Get geographical location
Get memory capacity
Get system information on windows
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x758
push esi
mov dword [ebp - 0x58], 3
mov dword [ebp - 0x70], 0x17059141
mov dword [ebp - 0x444], 0xfffffffa
mov dword [ebp - 0x58], 0x16
jmp 0x4301ee
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x16
je 0x430302
mov dword [ebp - 0xc0], 5
push 2
lea ecx, [ebp - 0x510]
call fcn.00433d51
mov dword [ebp - 0x11c], 0
jmp 0x430228
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x430247
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x510]
call fcn.00433e3f
or dword [eax], 0xffffffff
jmp 0x43021b
cmp dword [ebp - 0x58], 0
je 0x430267
cmp dword [ebp - 0x58], 0
je 0x43025e
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xc0], eax
jle 0x430276
cmp dword [ebp - 0xc0], 0
jne 0x430276
cmp dword [ebp - 0x70], 0
jne 0x430276
and dword [ebp - 0x1e8], 0
jmp 0x430280
mov dword [ebp - 0x1e8], 1
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x1e8]
add eax, 0x2132
mov dword [ebp - 0x444], eax
mov dword [ebp - 0xc0], 0
jmp 0x4302ad
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jg 0x4302f2
mov dword [ebp - 0x70], 0
jmp 0x4302c6
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jg 0x4302f0
push dword [ebp - 0x70]
lea ecx, [ebp - 0x510]
call fcn.00433e3f
mov esi, eax
push dword [ebp - 0x70]
lea ecx, [ebp - 0x510]
call fcn.00433e3f
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x4302bf
jmp 0x4302a0
lea ecx, [ebp - 0x510]
call fcn.00433e23
jmp 0x4301e7
and dword [ebp - 0x1c], 0
mov dword [ebp - 0x38], 2
push 2
lea ecx, [ebp - 0x434]
call fcn.00433d51
mov dword [ebp - 0x1a4], 0x8d72
mov dword [ebp - 0xfc], 0xfffc
mov dword [ebp - 0x20], 0
jmp 0x43033e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x43035a
push dword [ebp - 0x20]
lea ecx, [ebp - 0x434]
call fcn.00433e3f
mov dword [eax], 0xfffffffd
jmp 0x430337
mov dword [ebp - 0x20], 0
jmp 0x43036a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x430380
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x19c], 9
jmp 0x430363
mov dword [ebp - 0x38], 0xfffffff2
jmp 0x430390
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffe2
jne 0x4305ab
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x540], 0x2715ee56
mov dword [ebp - 0x53c], 0x2715ee56
mov dword [ebp - 0x538], 0x2715ee56
mov dword [ebp - 0x534], 0x2715ee56
lea ecx, [ebp - 0x189]
call fcn.00433e4e
push eax
lea eax, [ebp - 0x530]
push eax
lea eax, [ebp - 0x540]
push eax
lea ecx, [ebp - 0x71c]
call fcn.00433e51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x644]
call fcn.00433dfd
mov dword [ebp - 0x174], 0
jmp 0x43041a
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x430436
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x1f0], 0x4288a137
jmp 0x43040d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1f0], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3fc], eax
push 0
lea ecx, [ebp - 0x434]
call fcn.00433e3f
mov ecx, dword [ebp - 0x3fc]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f0]
imul eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x3d4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3d4]
mov dword [ebp + eax - 0x19c], ecx
cmp dword [ebp - 0x3d4], 0
je 0x430561
cmp dword [ebp - 0x124], 0xffff
jae 0x4304cd
mov dword [ebp - 0x1cc], 1
jmp 0x4304d4
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x124], 0xdfec
jl 0x4304f8
mov dword [ebp - 0x4a0], 1
jmp 0x4304ff
and dword [ebp - 0x4a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f0]
mov dword [ebp - 0x5d8], eax
mov eax, 0xe3f9
test eax, eax
jne 0x430527
mov dword [ebp - 0x4b0], 1
jmp 0x43052e
and dword [ebp - 0x4b0], 0
push 0
lea ecx, [ebp - 0x434]
call fcn.00433e3f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f0]
mov dword [ebp - 0x6d4], eax
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x430561
mov dword [ebp - 0x3dc], 1
jmp 0x430568
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x3dc], eax
jne 0x43057f
mov dword [ebp - 0x1d4], 1
jmp 0x430586
and dword [ebp - 0x1d4], 0
push 1
lea ecx, [ebp - 0x644]
call fcn.00433e3f
mov ecx, dword [ebp - 0x1d4]
mov dword [eax], ecx
lea ecx, [ebp - 0x644]
call fcn.00433e23
jmp 0x430389
cmp dword [ebp - 0x38], 0
je 0x4305cf
push 0
lea ecx, [ebp - 0x434]
call fcn.00433e3f
cmp dword [eax], 0
je 0x4305cf
mov dword [ebp - 0x3e4], 1
jmp 0x4305d6
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x3e4], eax
jge 0x430643
cmp dword [ebp - 0xfc], 0
je 0x430609
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x19c], 0
je 0x430609
mov dword [ebp - 0x1dc], 1
jmp 0x430610
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0x1dc]
jne 0x43062a
mov dword [ebp - 0x3ec], 1
jmp 0x430631
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x3ec], eax
je 0x43077a
mov dword [ebp - 0x194], 0x851f
mov dword [ebp - 0x1b0], 0xfffc
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0xfc], eax
jge 0x430671
mov dword [ebp - 0x3f4], 1
jmp 0x430678
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
sub eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x1b0]
jl 0x430698
mov dword [ebp - 0x1fc], 1
jmp 0x43069f
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
sub eax, dword [ebp - 0xfc]
jne 0x4306bc
cmp dword [ebp - 0x38], 0
jne 0x4306bc
and dword [ebp - 0x4b8], 0
jmp 0x4306c6
mov dword [ebp - 0x4b8], 1
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x638], eax
imul eax, dword [ebp - 0x1b0], 0x19ef
cmp eax, dword [ebp - 0x1a4]
jne 0x4306f0
mov dword [ebp - 0x1f4], 1
jmp 0x4306f7
and dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x1f4], 0x32e5
jle 0x43070f
mov dword [ebp - 0x2f8], 1
jmp 0x430716
and dword [ebp - 0x2f8], 0
push 0
lea ecx, [ebp - 0x434]
call fcn.00433e3f
mov eax, dword [eax]
imul eax, dword [ebp - 0x2f8]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x19c]
je 0x430747
mov dword [ebp - 0x1f8], 1
jmp 0x43074e
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x1f8], eax
jge 0x430768
mov dword [ebp - 0x3f8], 1
jmp 0x43076f
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x38], eax
jmp 0x43078e
mov byte [ebp - 0x62], 0
movzx eax, byte [ebp - 0x62]
test eax, eax
je 0x43078e
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
lea ecx, [ebp - 0x434]
call fcn.00433e23
mov dword [ebp - 0x300], 0xe124
mov dword [ebp - 0x5bc], 0xf4864854
mov dword [ebp - 0x5c4], 0xfffffffd
mov dword [ebp - 0x5cc], 0x3e91cb64
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x4dc], 0x2e7b
mov dword [ebp - 0x4cc], 9
mov dword [ebp - 0x4e4], 5
mov dword [ebp - 0x200], 0x8d3f
mov dword [ebp - 0x4ec], 0xfffffffc
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x43081a
push 0
push 1
push 0x2667
push 0
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
mov dword [ebp - 0x4cc], 0x9d707d8e
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x5e4], eax
imul eax, dword [ebp - 0x4e4], 0
imul eax, dword [ebp - 0x300]
sub eax, dword [ebp - 0x200]
cmp eax, dword [ebp - 0x200]
je 0x43085e
cmp dword [ebp - 0x300], 0
jne 0x43085e
and dword [ebp - 0x208], 0
jmp 0x430868
mov dword [ebp - 0x208], 1
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x4ec], eax
mov dword [ebp - 0x12c], 0xba394643
mov dword [ebp - 0x210], 0xfe012d2c
mov dword [ebp - 0x154], 0
jmp 0x4308a1
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 4
jge 0x4308bd
mov eax, dword [ebp - 0x154]
mov dword [ebp + eax*4 - 0x73c], 7
jmp 0x430894
mov dword [ebp - 0x12c], 3
jmp 0x4308d6
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x43097a
mov dword [ebp - 0x16c], 0x17f75960
mov dword [ebp - 0x380], 8
mov dword [ebp - 0x16c], 0
jmp 0x430910
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jg 0x430968
mov dword [ebp - 0xdc], 0xda622a14
mov dword [ebp - 0xdc], 3
jmp 0x43093c
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jl 0x430959
mov eax, dword [ebp - 0xdc]
cmp dword [ebp + eax*4 - 0x73c], 0
je 0x430957
jmp 0x430959
jmp 0x43092f
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
jmp 0x430903
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
jmp 0x4308c9
mov dword [ebp - 0x134], 0xfffffffb
mov dword [ebp - 0x134], 0xffffffef
jmp 0x43099d
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xfffffff1
je 0x4309ef
mov dword [ebp - 0x15c], 1
mov dword [ebp - 0x15c], 0xb
jmp 0x4309c9
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xfffffffe
jle 0x4309ed
mov byte [ebp - 0x60], 0
movzx eax, byte [ebp - 0x60]
test eax, eax
je 0x4309eb
push 0x17ec
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
jmp 0x4309bc
jmp 0x430990
mov dword [ebp - 0x554], 9
mov dword [ebp - 0x550], 9
mov dword [ebp - 0x54c], 9
mov dword [ebp - 0x548], 9
lea ecx, [ebp - 0x181]
call fcn.00433e4e
push eax
lea eax, [ebp - 0x544]
push eax
lea eax, [ebp - 0x554]
push eax
lea ecx, [ebp - 0x744]
call fcn.00433e51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x654]
call fcn.00433dfd
mov dword [ebp - 0x3c0], 8
mov dword [ebp - 0x308], 0x2703
mov dword [ebp - 0x4f4], 0x2f9d44c0
push 0
lea ecx, [ebp - 0x654]
call fcn.00433e3f
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x308]
sub eax, 0x2daa
cmp eax, 9
jg 0x430a9f
mov dword [ebp - 0x218], 1
jmp 0x430aa6
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x218], eax
jge 0x430ac0
mov dword [ebp - 0x220], 1
jmp 0x430ac7
and dword [ebp - 0x220], 0
imul eax, dword [ebp - 0x3c0], 0xffff
cmp eax, dword [ebp - 0x220]
je 0x430ae5
mov dword [ebp - 0x310], 1
jmp 0x430aec
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x4f4], eax
mov byte [ebp - 0x64], 0
movzx eax, byte [ebp - 0x64]
test eax, eax
je 0x430b16
push 0xad
push 0x2170
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
lea ecx, [ebp - 0x654]
call fcn.00433e23
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0xbc], 0xf1fe
mov dword [ebp - 0xb4], 0xfbc781ce
mov dword [ebp - 0x144], 0xfffffff7
mov dword [ebp - 0xb8], 0x96950a4b
mov dword [ebp - 0x80], 0x9ff9e6b9
mov dword [ebp - 0x390], 7
mov dword [ebp - 0x5f4], 0xfffffffa
mov dword [ebp - 0x4ac], 0x906852db
mov dword [ebp - 0x10c], 0
jmp 0x430b90
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jge 0x430bac
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x41c], 0x9beab1d6
jmp 0x430b83
cmp dword [ebp - 0xb4], 0
jne 0x430bc1
mov dword [ebp - 0x228], 1
jmp 0x430bc8
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], eax
jg 0x430be2
mov dword [ebp - 0x498], 1
jmp 0x430be9
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x5fc], eax
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x228]
add eax, 0xe912
mov dword [ebp - 0x144], eax
je 0x430c21
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x430c21
mov dword [ebp - 0x388], 1
jmp 0x430c28
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xb8], eax
jg 0x430c4e
mov dword [ebp - 0x230], 1
jmp 0x430c55
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x230], eax
jge 0x430c6f
mov dword [ebp - 0x318], 1
jmp 0x430c76
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x318], eax
jle 0x430c90
mov dword [ebp - 0x238], 1
jmp 0x430c97
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x238]
je 0x431096
mov dword [ebp - 0x78], 0x68906353
mov dword [ebp - 0x17c], 0x935cb514
mov dword [ebp - 0x330], 8
push 4
lea ecx, [ebp - 0x664]
call fcn.00433d51
mov dword [ebp - 0x190], 0xffff
mov dword [ebp - 0x13c], 0
jmp 0x430cf4
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 4
jge 0x430d13
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x664]
call fcn.00433e3f
or dword [eax], 0xffffffff
jmp 0x430ce7
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x604], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x41c]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x614], eax
mov eax, 0x5475
test eax, eax
jne 0x430d56
cmp dword [ebp - 0xbc], 0
jne 0x430d56
and dword [ebp - 0x470], 0
jmp 0x430d60
mov dword [ebp - 0x470], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x41c]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x61c], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x62c], eax
cmp dword [ebp - 0x78], 0
je 0x430fa3
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x328], 0
push 4
lea ecx, [ebp - 0x504]
call fcn.00433d51
mov dword [ebp - 0x3c], 0
jmp 0x430dcc
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x430de2
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x518], 0
jmp 0x430dc5
mov dword [ebp - 0x3c], 0
jmp 0x430df2
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x430e0e
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x504]
call fcn.00433e3f
mov dword [eax], 1
jmp 0x430deb
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x518]
inc eax
mov dword [ebp - 0x3e0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp + eax - 0x518], ecx
mov eax, dword [ebp - 0x17c]
add eax, dword [ebp - 0x3e0]
mov ecx, dword [ebp - 0x80]
add ecx, eax
cmp ecx, dword [ebp - 0x78]
jl 0x430e57
mov dword [ebp - 0x240], 1
jmp 0x430e5e
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x78], eax
jne 0x430e81
mov dword [ebp - 0x3c8], 1
jmp 0x430e88
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x634], eax
cmp dword [ebp - 0x390], 1
jge 0x430ea6
mov dword [ebp - 0x320], 1
jmp 0x430ead
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x188]
imul eax, dword [ebp - 0x320]
cmp eax, 0xa7db
jg 0x430ecd
mov dword [ebp - 0x248], 1
jmp 0x430ed4
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0x97689278
je 0x430eec
mov dword [ebp - 0x454], 1
jmp 0x430ef3
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jbe 0x430f14
mov dword [ebp - 0x250], 1
jmp 0x430f1b
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x328], eax
mov esi, dword [ebp - 0x328]
push 1
lea ecx, [ebp - 0x504]
call fcn.00433e3f
cmp esi, dword [eax]
jge 0x430f4a
mov dword [ebp - 0x258], 1
jmp 0x430f51
and dword [ebp - 0x258], 0
push 1
lea ecx, [ebp - 0x504]
call fcn.00433e3f
mov ecx, dword [ebp - 0x258]
cmp ecx, dword [eax]
je 0x430f74
mov dword [ebp - 0x260], 1
jmp 0x430f7b
and dword [ebp - 0x260], 0
mov esi, dword [ebp - 0x3c8]
sub esi, dword [ebp - 0x260]
push 1
lea ecx, [ebp - 0x504]
call fcn.00433e3f
mov dword [eax], esi
lea ecx, [ebp - 0x504]
call fcn.00433e23
jmp 0x430fac
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x330], 0xb58e
je 0x430fd1
mov dword [ebp - 0x4a8], 1
jmp 0x430fd8
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
imul eax, dword [ebp - 0x330]
test eax, eax
jne 0x431010
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x6c8], eax
cmp dword [ebp - 0x78], 0
jne 0x431010
and dword [ebp - 0x268], 0
jmp 0x43101a
mov dword [ebp - 0x268], 1
mov eax, dword [ebp - 0x268]
neg eax
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x41c]
cmp eax, 1
jge 0x43104c
mov dword [ebp - 0x398], 1
jmp 0x431053
and dword [ebp - 0x398], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x41c]
cmp dword [ebp - 0x398], eax
jg 0x431075
xor eax, eax
jne 0x431075
and dword [ebp - 0x45c], 0
jmp 0x43107f
mov dword [ebp - 0x45c], 1
mov dword [ebp - 0x4ac], 0
lea ecx, [ebp - 0x664]
call fcn.00433e23
jmp 0x4310f5
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x4310b5
push 0
push 0x355
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov dword [ebp - 0x80], 0
jmp 0x4310c5
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jg 0x4310f5
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x4310f3
push 0
push 0
push 0x1b4f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemInt]
jmp 0x4310be
mov eax, dword [ebp - 0x1b4]
movzx eax, word [eax]
cmp eax, 0x5a4d
je 0x4313f1
mov dword [ebp - 0x6d0], 0xfffffff6
mov dword [ebp - 0x6d8], 0x2c29a3df
mov dword [ebp - 0x6f4], 1
mov dword [ebp - 0x6f0], 0xfddd3f46
mov dword [ebp - 0x5c0], 0x2491e29e
or dword [ebp - 0x52c], 0xffffffff
or dword [ebp - 0x528], 0xffffffff
or dword [ebp - 0x524], 0xffffffff
or dword [ebp - 0x520], 0xffffffff
lea ecx, [ebp - 0x1a5]
call fcn.00433e4e
push eax
lea eax, [ebp - 0x51c]
push eax
lea eax, [ebp - 0x52c]
push eax
lea ecx, [ebp - 0x74c]
call fcn.00433e51
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x714]
call fcn.00433dfd
mov dword [ebp - 0x5d4], 0xfd2d
mov dword [ebp - 0x6b8], 1
mov dword [ebp - 0x34], 0
jmp 0x4311b0
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x4311c6
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x72c], 0x785b6478
jmp 0x4311a9
mov dword [ebp - 0x34], 0
jmp 0x4311d6
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x4311ec
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x674], 0x13cef33
jmp 0x4311cf
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x674]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x674], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x72c], 0x3b26d5d6
lea ecx, [ebp - 0x714]
call fcn.00433e23
mov dword [ebp - 0x44], 0x4f84b811
mov dword [ebp - 0x88], 0xfffffff8
mov dword [ebp - 0x18], 0x3e713e19
mov dword [ebp - 0x164], 0
jmp 0x431254
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x431270
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x4c4], 0xfffffffe
jmp 0x431247
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x431284
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
cmp dword [ebp - 0x44], 0
je 0x431319
cmp dword [ebp - 0x44], 0
jne 0x4312af
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x44], 0
jne 0x4312af
and dword [ebp - 0x270], 0
jmp 0x4312b9
mov dword [ebp - 0x270], 1
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x270], eax
jle 0x4312d3
mov dword [ebp - 0x464], 1
jmp 0x4312da
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x88], 0xffffffff
je 0x4312f8
mov dword [ebp - 0x338], 1
jmp 0x4312ff
and dword [ebp - 0x338], 0
push 5
pop eax
sub eax, dword [ebp - 0x338]
add eax, dword [ebp - 0x18]
je 0x431319
mov dword [ebp - 0x278], 1
jmp 0x431320
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 1
ja 0x431386
mov dword [ebp - 0x18], 0
jmp 0x431339
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x14
je 0x431384
mov dword [ebp - 0x44], 0
jmp 0x43134f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x431365
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x4c4], 0
jmp 0x431348
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x431382
push 0x1134
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
jmp 0x431332
jmp 0x4313ea
mov dword [ebp - 0x88], 0
jmp 0x43139f
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jg 0x4313ea
mov dword [ebp - 0x4f8], 0xfffffffd
mov dword [ebp - 0x4f8], 0xffffffff
mov dword [ebp - 0x18], 1
jmp 0x4313cc
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x4313e8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x4c4]
mov dword [ebp + ecx*4 - 0x4c4], eax
jmp 0x4313c5
jmp 0x431392
xor eax, eax
jmp 0x433493
mov dword [ebp - 0x118], 0xfffffff7
mov dword [ebp - 0x46c], 0xbd035c57
mov dword [ebp - 0x5d0], 0x415f
mov dword [ebp - 0x6bc], 0x128f3b8c
mov dword [ebp - 0x5b8], 0xfffffff6
mov dword [ebp - 0x290], 0x6b586fa6
mov dword [ebp - 0x114], 0
jmp 0x431446
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 3
jge 0x431462
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x758], 0x45b3659
jmp 0x431439
mov dword [ebp - 0x118], 0
jmp 0x43147b
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jg 0x43159f
mov dword [ebp - 0x3f0], 0x357f451d
mov dword [ebp - 0x280], 2
mov dword [ebp - 0xc4], 0x700d62e6
mov dword [ebp - 0x658], 0xbc227363
mov dword [ebp - 0x3f0], 0xce55459e
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x280], eax
je 0x4314e6
mov eax, 0x51c6
test eax, eax
jne 0x4314e6
and dword [ebp - 0x340], 0
jmp 0x4314f0
mov dword [ebp - 0x340], 1
mov eax, dword [ebp - 0x46c]
cmp eax, dword [ebp - 0x340]
jge 0x43150a
mov dword [ebp - 0x288], 1
jmp 0x431511
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 0x690f
jg 0x431529
mov dword [ebp - 0x3a0], 1
jmp 0x431530
and dword [ebp - 0x3a0], 0
imul eax, dword [ebp - 0x3a0], 0x97a8
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc4], 0
jmp 0x431559
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xfffffff8
jge 0x43159a
mov dword [ebp - 0x4b4], 0xfffffff6
mov dword [ebp - 0x5e0], 0xffffffff
mov dword [ebp - 0x6c0], 0x7f17245c
cmp dword [ebp - 0x4b4], 0
je 0x43158b
jmp 0x43159a
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
jmp 0x43154c
jmp 0x43146e
mov eax, dword [ebp - 0x1b4]
mov ecx, dword [ebp + 8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xf0], ecx
mov eax, dword [ebp - 0xf0]
cmp dword [eax], 0x4550
je 0x431bec
mov dword [ebp - 0xf4], 0xfffffff9
mov dword [ebp - 0x4e0], 0xf5f49900
cmp dword [ebp - 0xf4], 0
je 0x431693
mov dword [ebp - 0x120], 0
jmp 0x4315fd
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x431619
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x474], 0xf46db505
jmp 0x4315f0
mov dword [ebp - 0xf4], 0
jmp 0x431632
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jg 0x431691
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xd0], 0
jmp 0x43165e
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jg 0x43168f
mov byte [ebp - 0x66], 0
movzx eax, byte [ebp - 0x66]
test eax, eax
je 0x43167b
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0xd0]
cmp dword [ebp + eax*4 - 0x474], 0
je 0x43168d
jmp 0x431651
jmp 0x431651
jmp 0x431625
jmp 0x43169d
mov dword [ebp - 0x4e0], 0xf737a9a9
mov dword [ebp - 4], 0xfffffffb
mov dword [ebp - 0x90], 0x28405cef
mov dword [ebp - 0xec], 0x457a23a
mov dword [ebp - 0x128], 0xa603d2cf
mov dword [ebp - 0xcc], 0xd9236f91
mov dword [ebp - 0x370], 0x74484a86
mov dword [ebp - 0x5a4], 0x93ac4895
mov dword [ebp - 0x5a0], 0x93ac4895
mov dword [ebp - 0x59c], 0x93ac4895
mov dword [ebp - 0x598], 0x93ac4895
mov eax, dword [ebp - 4]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 4]
cmp eax, dword [ebp - 4]
je 0x43171f
mov dword [ebp - 0x348], 1
jmp 0x431726
and dword [ebp - 0x348], 0
imul eax, dword [ebp - 0x348], 0x89d9
cmp eax, dword [ebp - 4]
jg 0x431741
mov dword [ebp - 0x298], 1
jmp 0x431748
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x298], eax
je 0x43175f
mov dword [ebp - 0x3d0], 1
jmp 0x431766
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x3d0], eax
je 0x43177d
mov dword [ebp - 0x2a0], 1
jmp 0x431784
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x2a0]
cmp eax, 8
jle 0x43179f
mov dword [ebp - 0x47c], 1
jmp 0x4317a6
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x668], eax
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
je 0x4317e1
cmp dword [ebp - 0xec], 0
je 0x4317e1
mov eax, 0xe9942c3b
test eax, eax
je 0x4317e1
mov dword [ebp - 0x350], 1
jmp 0x4317e8
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x350], eax
jle 0x431802
mov dword [ebp - 0x2a8], 1
jmp 0x431809
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x2a8], eax
jle 0x431829
cmp dword [ebp - 0x90], 0
je 0x431829
mov dword [ebp - 0x3a8], 1
jmp 0x431830
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x3a8]
add eax, dword [ebp - 4]
cmp eax, 0x1131e34f
jg 0x431850
mov dword [ebp - 0x2b0], 1
jmp 0x431857
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 9
jb 0x43186c
mov dword [ebp - 0x358], 1
jmp 0x431873
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
sub eax, 0xfff9
cmp eax, dword [ebp - 4]
jle 0x43188f
mov dword [ebp - 0x2b8], 1
jmp 0x431896
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x2b8], eax
jl 0x4318b0
mov dword [ebp - 0x3e8], 1
jmp 0x4318b7
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x3e8], eax
jg 0x4318ce
mov dword [ebp - 0x2c0], 1
jmp 0x4318d5
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x2c0], eax
jne 0x4318ec
mov dword [ebp - 0x360], 1
jmp 0x4318f3
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x360], 0xfffffff7
jne 0x431908
mov dword [ebp - 0x2c8], 1
jmp 0x43190f
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x90], eax
jge 0x431932
mov dword [ebp - 0x3b0], 1
jmp 0x431939
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x3b0], eax
jge 0x431953
mov dword [ebp - 0x2d0], 1
jmp 0x43195a
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
je 0x4319b2
cmp dword [ebp - 0x90], 0
je 0x4319b2
mov dword [ebp - 0x4bc], 5
cmp dword [ebp - 0x128], 0x83ce
jl 0x43199a
mov dword [ebp - 0x368], 1
jmp 0x4319a1
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x4bc], eax
jmp 0x431bad
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x594], 1
mov dword [ebp - 0x590], 1
mov dword [ebp - 0x58c], 1
mov dword [ebp - 0x588], 1
push 2
lea ecx, [ebp - 0x56c]
call fcn.00433d51
mov dword [ebp - 0x28], 0
jmp 0x431a01
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x431a17
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x484], 0x842a457a
jmp 0x4319fa
mov dword [ebp - 0x28], 0
jmp 0x431a27
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x431a43
push dword [ebp - 0x28]
lea ecx, [ebp - 0x56c]
call fcn.00433e3f
mov dword [eax], 0xb5dcfd1f
jmp 0x431a20
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x431a6c
push 0x1f1e
push 0
push 0x1ffe
push 0x8a8
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
cmp dword [ebp - 0x104], 0
je 0x431b40
mov dword [ebp - 0xcc], 0x2573
mov eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x104]
cmp eax, 1
je 0x431aa0
mov dword [ebp - 0x198], 1
jmp 0x431aa7
and dword [ebp - 0x198], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x198]
mov dword [ebp + eax - 0x594], ecx
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x2d8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp + eax - 0x484], ecx
mov eax, dword [ebp - 0x104]
imul eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x2d8]
jl 0x431b05
mov dword [ebp - 0x3d8], 1
jmp 0x431b0c
and dword [ebp - 0x3d8], 0
cmp dword [ebp - 0x3d8], 0x369e1d62
jg 0x431b24
mov dword [ebp - 0x4f0], 1
jmp 0x431b2b
and dword [ebp - 0x4f0], 0
cmp dword [ebp - 0x104], 0
je 0x431b40
mov dword [ebp - 0x2e0], 1
jmp 0x431b47
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0
jne 0x431b86
cmp dword [ebp - 0xec], 0
je 0x431b86
mov eax, 0x3e35
test eax, eax
je 0x431b86
mov dword [ebp - 0x2e8], 1
jmp 0x431b8d
and dword [ebp - 0x2e8], 0
push 1
lea ecx, [ebp - 0x56c]
call fcn.00433e3f
mov ecx, dword [ebp - 0x2e8]
mov dword [eax], ecx
lea ecx, [ebp - 0x56c]
call fcn.00433e23
mov dword [ebp - 0xcc], 0
cmp dword [ebp - 0xcc], 9
jne 0x431bcc
mov dword [ebp - 0x3b8], 1
jmp 0x431bd3
and dword [ebp - 0x3b8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp + eax - 0x5a4], ecx
xor eax, eax
jmp 0x433493
mov dword [ebp - 0x130], 1
mov dword [ebp - 0x48c], 0xffffffff
mov dword [ebp - 0x98], 2
mov dword [ebp - 0x4c8], 0xfe8e60a2
mov dword [ebp - 0x130], 0
jmp 0x431c2d
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jge 0x431f7b
mov dword [ebp - 0xa0], 0x6de713a4
mov dword [ebp - 0xd4], 0xffffffff
mov dword [ebp - 0xa0], 0
jmp 0x431c67
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xfffffff9
jne 0x431f76
push 2
lea ecx, [ebp - 0x414]
call fcn.00433d51
mov dword [ebp - 0x14], 0x526d2e85
mov dword [ebp - 0xd8], 0x20d7
push 4
lea ecx, [ebp - 0x584]
call fcn.00433d51
mov dword [ebp - 0x30], 0
jmp 0x431caf
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x431ccb
push dword [ebp - 0x30]
lea ecx, [ebp - 0x414]
call fcn.00433e3f
mov dword [eax], 5
jmp 0x431ca8
mov dword [ebp - 0x30], 0
jmp 0x431cdb
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x431cf7
push dword [ebp - 0x30]
lea ecx, [ebp - 0x584]
call fcn.00433e3f
mov dword [eax], 0x3ae4
jmp 0x431cd4
mov dword [ebp - 0x14], 0
jmp 0x431d07
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x431e46
push dword [ebp - 0x14]
lea ecx, [ebp - 0x414]
call fcn.00433e3f
push 1
lea ecx, [ebp - 0x414]
call fcn.00433e3f
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xd8], eax
je 0x431d46
mov dword [ebp - 0x2f0], 1
jmp 0x431d4d
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x48c]
cmp dword [ebp - 0x2f0], eax
je 0x431d67
mov dword [ebp - 0x378], 1
jmp 0x431d6e
and dword [ebp - 0x378], 0
push 1
lea ecx, [ebp - 0x414]
call fcn.00433e3f
mov ecx, dword [ebp - 0x378]
cmp ecx, dword [eax]
jne 0x431d91
mov dword [ebp - 0x1c0], 1
jmp 0x431d98
and dword [ebp - 0x1c0], 0
mov esi, 0x583dc0e3
sub esi, dword [ebp - 0x1c0]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x414]
call fcn.00433e3f
cmp esi, dword [eax]
jle 0x431dc1
mov dword [ebp - 0x1e4], 1
jmp 0x431dc8
and dword [ebp - 0x1e4], 0
mov esi, dword [ebp - 0x1e4]
inc esi
push dword [ebp - 0x14]
lea ecx, [ebp - 0x414]
call fcn.00433e3f
cmp esi, dword [eax]
jg 0x431ded
mov dword [ebp - 0x1e0], 1
jmp 0x431df4
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0x98]
jle 0x431e15
mov dword [ebp - 0x204], 1
jmp 0x431e1c
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0xd4], eax
push 3
lea ecx, [ebp - 0x584]
call fcn.00433e3f
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x98], eax
jmp 0x431d00
mov dword [ebp - 0xd4], 3
jmp 0x431e5f
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x431f5b
mov dword [ebp - 0xd8], 1
jmp 0x431e85
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x431f4a
mov dword [ebp - 0x138], 0
jmp 0x431eab
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 4
jge 0x431ec7
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x708], 1
jmp 0x431e9e
mov dword [ebp - 0x98], 0
jmp 0x431ee0
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jg 0x431f2a
mov dword [ebp - 0x14], 0
jmp 0x431ef9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x431f28
mov byte [ebp - 0x68], 0
movzx eax, byte [ebp - 0x68]
test eax, eax
je 0x431f26
push 0
push 0x1814
push 0x1664
push 0x226
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
jmp 0x431ef2
jmp 0x431ed3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x708]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x708], eax
jmp 0x431e78
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x4c8], eax
jmp 0x431e52
lea ecx, [ebp - 0x584]
call fcn.00433e23
lea ecx, [ebp - 0x414]
call fcn.00433e23
jmp 0x431c5a
jmp 0x431c20
push 1
push 0x77bb
push 0
push dword [ebp - 0xf0]
push 0x20fe
push 1
push 0x39fe
lea eax, [ebp - 0x180]
push eax
push 0x11be
push 1
push 0x7e07
call fcn.00427a2c
add esp, 0x2c
push 3
lea ecx, [ebp - 0x684]
call fcn.00433d51
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x110], 0
jmp 0x431fde
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jge 0x432000
push dword [ebp - 0x110]
lea ecx, [ebp - 0x684]
call fcn.00433e3f
mov dword [eax], 0x28c1
jmp 0x431fd1
mov dword [ebp - 0x50], 2
jmp 0x432010
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x432047
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x432045
push 0
push 0
push 0
push 0
push 0x1314
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
jmp 0x432009
mov dword [ebp - 0x50], 0
jmp 0x432057
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x1a
jl 0x432073
mov byte [ebp - 0x6a], 0
movzx eax, byte [ebp - 0x6a]
test eax, eax
je 0x432071
push 0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
jmp 0x432050
lea ecx, [ebp - 0x684]
call fcn.00433e23
cmp dword [ebp - 0x180], 0
jne 0x43208e
xor eax, eax
jmp 0x433493
push 1
lea ecx, [ebp - 0x408]
call fcn.00433d51
mov dword [ebp - 0x24], 0x3838a1f9
mov dword [ebp - 0xe0], 0x8bd85027
mov dword [ebp - 0x1ac], 0xacb314b8
mov dword [ebp - 0x22c], 0xfffffff6
mov dword [ebp - 0x25c], 0x35cf
mov dword [ebp - 0x264], 0xffffffff
mov dword [ebp - 8], 0
jmp 0x4320e4
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x432100
push dword [ebp - 8]
lea ecx, [ebp - 0x408]
call fcn.00433e3f
mov dword [eax], 0x6192
jmp 0x4320dd
mov dword [ebp - 8], 0
jmp 0x432110
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x432126
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1bc], 0xec752f67
jmp 0x432109
mov dword [ebp - 8], 0
jmp 0x432136
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x43214c
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x49c], 0xd68e
jmp 0x43212f
mov dword [ebp - 0x24], 0
jmp 0x43215c
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x4323f0
mov dword [ebp - 0x5b4], 0x10fecafe
mov dword [ebp - 0x5b0], 0x10fecafe
mov dword [ebp - 0x5ac], 0x10fecafe
mov dword [ebp - 0x5a8], 0x10fecafe
mov dword [ebp - 0x5f0], 0xca8fecf7
mov dword [ebp - 0x1a0], 0xf93b
mov dword [ebp - 0x140], 0
jmp 0x4321bb
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 1
jge 0x4321d7
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0x6c4], 0x4dc41fd9
jmp 0x4321ae
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x4322e2
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x1fc6
jne 0x432207
mov dword [ebp - 0x20c], 1
jmp 0x43220e
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0xe0], eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x408]
call fcn.00433e3f
cmp dword [eax], 0
je 0x43227f
push dword [ebp - 0x24]
lea ecx, [ebp - 0x408]
call fcn.00433e3f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1bc], 0x522abf7c
jle 0x43225a
mov dword [ebp - 0x494], 1
jmp 0x432261
and dword [ebp - 0x494], 0
mov eax, 0xfe9f
test eax, eax
je 0x432271
cmp dword [ebp - 0x1ac], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x5b4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1bc], 0xffffffff
jl 0x43229b
mov dword [ebp - 0x214], 1
jmp 0x4322a2
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 1
je 0x4322b7
mov dword [ebp - 0x21c], 1
jmp 0x4322be
and dword [ebp - 0x21c], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x408]
call fcn.00433e3f
mov ecx, dword [ebp - 0x21c]
cmp ecx, dword [eax]
jl 0x4322e2
mov dword [ebp - 0x224], 1
jmp 0x4322e9
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
je 0x43231c
push 0
lea ecx, [ebp - 0x408]
call fcn.00433e3f
cmp dword [eax], 0
je 0x43231c
mov dword [ebp - 0x234], 1
jmp 0x432323
and dword [ebp - 0x234], 0
mov eax, 0x822b1658
sub eax, dword [ebp - 0x234]
je 0x4323cc
push 2
lea ecx, [ebp - 0x4d8]
call fcn.00433d51
mov dword [ebp - 0x148], 0
jmp 0x43235a
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jge 0x432379
push dword [ebp - 0x148]
lea ecx, [ebp - 0x4d8]
call fcn.00433e3f
and dword [eax], 0
jmp 0x43234d
push 1
lea ecx, [ebp - 0x4d8]
call fcn.00433e3f
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x23c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x4d8]
call fcn.00433e3f
cmp dword [eax], 0
je 0x4323bf
lea ecx, [ebp - 0x4d8]
call fcn.00433e23
jmp 0x432155
lea ecx, [ebp - 0x4d8]
call fcn.00433e23
jmp 0x4323eb
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x4323eb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
jmp 0x432155
push 0
lea ecx, [ebp - 0x408]
call fcn.00433e3f
cmp dword [eax], 0
jne 0x43240e
mov dword [ebp - 0x274], 1
jmp 0x432415
and dword [ebp - 0x274], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1bc], 0
jne 0x432480
mov eax, 0xe1984bbc
test eax, eax
je 0x432462
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x5f8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1bc]
mov dword [ebp - 0x678], eax
cmp dword [ebp - 0xe0], 0
je 0x432462
mov dword [ebp - 0x244], 1
jmp 0x432469
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x1ac]
add eax, dword [ebp - 0x244]
jne 0x432480
and dword [ebp - 0x24c], 0
jmp 0x43248a
mov dword [ebp - 0x24c], 1
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x24c], eax
jge 0x4324a4
mov dword [ebp - 0x254], 1
jmp 0x4324ab
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x24], eax
je 0x4324cb
mov dword [ebp - 0x4e8], 1
jmp 0x4324d2
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x600], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1bc]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x608], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x49c], 0xffffffff
cmp dword [ebp - 0x25c], 0xffffffff
jle 0x432523
mov dword [ebp - 0x26c], 1
jmp 0x43252a
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0x26c], eax
jg 0x432544
mov dword [ebp - 0x27c], 1
jmp 0x43254b
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x274]
cmp eax, dword [ebp - 0x27c]
je 0x432565
mov dword [ebp - 0x284], 1
jmp 0x43256c
and dword [ebp - 0x284], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1bc]
cmp dword [ebp - 0x284], eax
jge 0x432596
cmp dword [ebp - 0xe0], 0
je 0x432596
mov dword [ebp - 0x28c], 1
jmp 0x43259d
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
neg eax
je 0x4325bb
mov byte [ebp - 0x6c], 0
movzx eax, byte [ebp - 0x6c]
test eax, eax
je 0x4325b9
call dword [sym.imp.USER32.dll_EndMenu]
jmp 0x4325d7
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x4325d7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
lea ecx, [ebp - 0x408]
call fcn.00433e23
lea eax, [ebp - 0x180]
push eax
push 0x24f2
push 1
push dword [ebp - 0x1b4]
push 0x35da
lea eax, [ebp - 0x1c]
push eax
push 1
push 1
push 1
push dword [ebp - 0xf0]
push 1
push 0x5112
lea eax, [ebp - 0x688]
push eax
push 0x376c
push 0x25d4
call fcn.0042ec92
add esp, 0x3c
mov dword [ebp - 0xa8], 0x76820624
mov dword [ebp - 0x610], 0xe5849968
mov dword [ebp - 0x6cc], 0xe40424b9
push 4
lea ecx, [ebp - 0x694]
call fcn.00433d51
mov dword [ebp - 0x4a4], 6
mov dword [ebp - 0x150], 0
jmp 0x432679
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 4
jge 0x43269b
push dword [ebp - 0x150]
lea ecx, [ebp - 0x694]
call fcn.00433e3f
mov dword [eax], 0x65f4b3f
jmp 0x43266c
mov dword [ebp - 0xa8], 0
jmp 0x4326b4
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jg 0x4326dd
mov byte [ebp - 0x5e], 0
movzx eax, byte [ebp - 0x5e]
test eax, eax
je 0x4326db
push 0
push 0x1812
push 0xc6b
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
jmp 0x4326a7
cmp dword [ebp - 0xa8], 1
jge 0x4326f2
mov dword [ebp - 0x294], 1
jmp 0x4326f9
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 0x1bb1300c
jne 0x432711
mov dword [ebp - 0x29c], 1
jmp 0x432718
and dword [ebp - 0x29c], 0
cmp dword [ebp - 0x29c], 0x2967684a
jl 0x432730
mov dword [ebp - 0x2a4], 1
jmp 0x432737
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x4a4], eax
lea ecx, [ebp - 0x694]
call fcn.00433e23
push 1
push 0x1165
push dword [ebp + 8]
push 0
push 0x5c49
push 0x208e
push 0xfb5
push 1
push 0x867
push 1
push dword [ebp - 0x1c]
push 0x2d7b
push 0x67f6
push 0
push 0x5991
push dword [ebp - 0xf0]
call fcn.00428959
add esp, 0x40
push 2
lea ecx, [ebp - 0x560]
call fcn.00433d51
mov dword [ebp - 0x618], 0x34d00693
mov dword [ebp - 0x40], 0
jmp 0x4327c7
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x4327e3
push dword [ebp - 0x40]
lea ecx, [ebp - 0x560]
call fcn.00433e3f
mov dword [eax], 0x9f9b
jmp 0x4327c0
mov dword [ebp - 0x40], 0
jmp 0x4327f3
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x432809
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xe8], 0xffffffff
jmp 0x4327ec
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe8], 1
jmp 0x432837
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe8], 0
jl 0x43287c
mov dword [ebp - 0x44c], 0xfe5f36f6
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0xe8]
lea ecx, [ebp - 0x560]
call fcn.00433e3f
cmp dword [eax], 0
je 0x432870
jmp 0x43287c
mov dword [ebp - 0x44c], 2
jmp 0x43281c
lea ecx, [ebp - 0x560]
call fcn.00433e23
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x180]
sub ecx, dword [eax + 0x34]
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x2c], 0xac204e2d
push 1
lea ecx, [ebp - 0x428]
call fcn.00433d51
mov dword [ebp - 0xf8], 0xb5cf0adc
mov dword [ebp - 0x2c4], 0xe731e7bf
mov dword [ebp - 0x304], 0x389f
mov dword [ebp - 0x31c], 0x97802932
mov dword [ebp - 0x334], 1
mov dword [ebp - 0x458], 0
mov dword [ebp - 0x48], 0
jmp 0x4328fc
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x432918
push dword [ebp - 0x48]
lea ecx, [ebp - 0x428]
call fcn.00433e3f
mov dword [eax], 0xfffffffb
jmp 0x4328f5
mov dword [ebp - 0x48], 0
jmp 0x432928
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x43293e
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x440], 0x68dd
jmp 0x432921
mov dword [ebp - 0x2c], 0
jmp 0x43294e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x17
jne 0x43296d
mov byte [ebp - 0x5f], 0
movzx eax, byte [ebp - 0x5f]
test eax, eax
je 0x43296b
push 0x204d
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x432947
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x698], eax
push 0
lea ecx, [ebp - 0x428]
call fcn.00433e3f
mov eax, dword [eax]
sub eax, 8
je 0x432b5e
mov eax, dword [ebp - 0x2c]
add eax, 0xd66d
jne 0x4329a8
push 5
pop eax
test eax, eax
jne 0x4329a8
and dword [ebp - 0x450], 0
jmp 0x4329b2
mov dword [ebp - 0x450], 1
cmp dword [ebp - 0x2c], 0xef3cf687
jne 0x4329c7
mov dword [ebp - 0x2ac], 1
jmp 0x4329ce
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 8
jl 0x4329e3
mov dword [ebp - 0x2b4], 1
jmp 0x4329ea
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x432a0e
cmp dword [ebp - 0xf8], 0
jne 0x432a20
cmp dword [ebp - 0xf8], 0
jne 0x432a20
and dword [ebp - 0x2bc], 0
jmp 0x432a2a
mov dword [ebp - 0x2bc], 1
mov eax, dword [ebp - 0x2bc]
sub eax, 0xc93e
mov dword [ebp - 0x2c4], eax
jne 0x432a4f
cmp dword [ebp - 0xf8], 0
jne 0x432a4f
and dword [ebp - 0x2cc], 0
jmp 0x432a59
mov dword [ebp - 0x2cc], 1
push 0
lea ecx, [ebp - 0x428]
call fcn.00433e3f
mov ecx, dword [ebp - 0x2cc]
cmp ecx, dword [eax]
jne 0x432a7c
mov dword [ebp - 0x2d4], 1
jmp 0x432a83
and dword [ebp - 0x2d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x440]
cmp dword [ebp - 0x2d4], eax
jg 0x432aa4
mov dword [ebp - 0x2dc], 1
jmp 0x432aab
and dword [ebp - 0x2dc], 0
cmp dword [ebp - 0x2dc], 0xa0be
jle 0x432ac3
mov dword [ebp - 0x2e4], 1
jmp 0x432aca
and dword [ebp - 0x2e4], 0
mov esi, dword [ebp - 0x2e4]
neg esi
push 4
pop eax
shl eax, 1
sub esi, dword [ebp + eax - 0x440]
push 4
pop eax
imul eax, eax, 0
imul esi, dword [ebp + eax - 0x440]
push 0
lea ecx, [ebp - 0x428]
call fcn.00433e3f
cmp esi, dword [eax]
jge 0x432b09
mov dword [ebp - 0x2ec], 1
jmp 0x432b10
and dword [ebp - 0x2ec], 0
push 0
lea ecx, [ebp - 0x428]
call fcn.00433e3f
mov ecx, dword [ebp - 0x2ec]
cmp ecx, dword [eax]
je 0x432b33
mov dword [ebp - 0x2f4], 1
jmp 0x432b3a
and dword [ebp - 0x2f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x440]
imul eax, dword [ebp - 0x2f4]
test eax, eax
je 0x432b5e
mov dword [ebp - 0x2fc], 1
jmp 0x432b65
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x304]
cmp dword [ebp - 0x2fc], eax
jg 0x432b7f
mov dword [ebp - 0x30c], 1
jmp 0x432b86
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x304]
cmp dword [ebp - 0x30c], eax
jle 0x432ba0
mov dword [ebp - 0x314], 1
jmp 0x432ba7
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x31c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x440]
cmp dword [ebp - 0x31c], eax
je 0x432bd4
mov dword [ebp - 0x324], 1
jmp 0x432bdb
and dword [ebp - 0x324], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x440]
cmp dword [ebp - 0x324], eax
je 0x432bfc
mov dword [ebp - 0x32c], 1
jmp 0x432c03
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x458], eax
lea ecx, [ebp - 0x428]
call fcn.00433e23
cmp dword [ebp - 0x33c], 0
je 0x432c5c
push 1
push dword [ebp - 0x1c]
push 0x4c7
push 0x3d5b
push 0x17ff
push 0
push 0
push 1
push 0x6222
push dword [ebp - 0x33c]
call fcn.0040e57b
add esp, 0x28
push 3
lea ecx, [ebp - 0x578]
call fcn.00433d51
mov dword [ebp - 0x160], 0x32b1cecb
mov dword [ebp - 0x158], 0
jmp 0x432c8c
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 3
jge 0x432cab
push dword [ebp - 0x158]
lea ecx, [ebp - 0x578]
call fcn.00433e3f
and dword [eax], 0
jmp 0x432c7f
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x432cbf
push 0
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x160], 2
jmp 0x432cd8
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jl 0x432d42
mov dword [ebp - 0x100], 0
mov byte [ebp - 0x63], 0
movzx eax, byte [ebp - 0x63]
test eax, eax
je 0x432d04
push 0x17ec
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
mov dword [ebp - 0x100], 0
jmp 0x432d1d
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jg 0x432d40
push dword [ebp - 0x100]
lea ecx, [ebp - 0x578]
call fcn.00433e3f
cmp dword [eax], 0
je 0x432d3e
jmp 0x432d40
jmp 0x432d10
jmp 0x432ccb
lea ecx, [ebp - 0x578]
call fcn.00433e23
push dword [ebp - 0x1c]
call fcn.00419fe3
pop ecx
test eax, eax
jne 0x432d61
xor eax, eax
jmp 0x433493
push 2
lea ecx, [ebp - 0x6a4]
call fcn.00433d51
mov dword [ebp - 0x170], 1
mov dword [ebp - 0x168], 0
jmp 0x432d91
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 2
jge 0x432db3
push dword [ebp - 0x168]
lea ecx, [ebp - 0x6a4]
call fcn.00433e3f
mov dword [eax], 0xfff7
jmp 0x432d84
mov dword [ebp - 0x170], 0
jmp 0x432dcc
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jg 0x432df1
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x432def
push 1
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
jmp 0x432dbf
lea ecx, [ebp - 0x6a4]
call fcn.00433e23
push 1
push 0x316c
push 0xd28
push 1
push 0x2e07
push 0x7ddd
push 0x74f6
push 0x4d11
push 0
push 0x58d5
push 0x4a
push 1
push 0x48ac
push 0x204f
push 0
push 0x37c1
push dword [ebp - 0x1c]
call fcn.00415413
add esp, 0x44
mov dword [ebp - 0x10], 0xd313dd33
mov dword [ebp - 0xb0], 0x3d12ef61
mov dword [ebp - 0x178], 0
jmp 0x432e6f
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 4
jge 0x432e8b
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x6ec], 1
jmp 0x432e62
mov dword [ebp - 0x10], 0
jmp 0x432e9b
cmp dword [ebp - 0x10], 0xe
jne 0x433354
mov dword [ebp - 0x54], 0x2afe01bd
mov dword [ebp - 0xc], 0xda585283
mov dword [ebp - 0x5c], 0xa83d87e3
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 0x29add925
mov dword [ebp - 0x54], 0
jmp 0x432ede
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xfffffffd
jne 0x433000
mov dword [ebp - 0x108], 0x34d8a94b
mov dword [ebp - 0x448], 0xfffffff8
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x10]
sub eax, 0x2fca3a8d
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x108], eax
jl 0x432f2a
mov dword [ebp - 0x344], 1
jmp 0x432f31
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x344]
je 0x432f48
mov dword [ebp - 0x34c], 1
jmp 0x432f4f
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x108]
lea eax, [ecx + eax - 0x1af88fbb]
test eax, eax
jne 0x432f7e
cmp dword [ebp - 0x108], 0
jne 0x432f7e
and dword [ebp - 0x354], 0
jmp 0x432f88
mov dword [ebp - 0x354], 1
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x354]
cmp dword [ebp - 0x108], eax
jg 0x432faa
xor eax, eax
inc eax
je 0x432faa
mov dword [ebp - 0x35c], 1
jmp 0x432fb1
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x460]
cmp eax, dword [ebp - 0x468]
jg 0x432fe7
mov dword [ebp - 0x364], 1
jmp 0x432fee
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
dec eax
mov dword [ebp - 0x448], eax
jmp 0x432ed7
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x6f8], eax
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x6ec], 0x4d90
mov eax, 0xaa1e
add eax, 0x4d90
mov dword [ebp - 0x54], eax
je 0x43303c
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x43303c
mov dword [ebp - 0x36c], 1
jmp 0x433043
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x36c]
je 0x43305a
mov dword [ebp - 0x374], 1
jmp 0x433061
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0x374]
test eax, eax
je 0x433084
cmp dword [ebp - 0xb0], 0
je 0x433084
mov dword [ebp - 0x37c], 1
jmp 0x43308b
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x37c], eax
jl 0x4330a2
mov dword [ebp - 0x384], 1
jmp 0x4330a9
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xc8], eax
jg 0x4330cc
mov dword [ebp - 0x38c], 1
jmp 0x4330d3
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0x10], 0xffffffff
jle 0x4330f1
mov dword [ebp - 0x394], 1
jmp 0x4330f8
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0xfffffff8
jae 0x43310d
mov dword [ebp - 0x478], 1
jmp 0x433114
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0xc], 0x71f2aed5
je 0x433132
mov dword [ebp - 0x39c], 1
jmp 0x433139
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x39c]
neg eax
cmp eax, dword [ebp - 0xb0]
jne 0x433155
mov dword [ebp - 0x3a4], 1
jmp 0x43315c
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x3a4], eax
jge 0x433176
mov dword [ebp - 0x3ac], 1
jmp 0x43317d
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
sub eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0xc]
je 0x43319a
mov dword [ebp - 0x3b4], 1
jmp 0x4331a1
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0x3ec6
jle 0x4331c8
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x6ec], 0
je 0x4331c8
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0x3bc], 0
jle 0x4331e4
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
cmp dword [eax + 0x28], 0
je 0x4333ab
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x180]
add ecx, dword [eax + 0x28]
mov dword [ebp - 0x1d0], ecx
jne 0x43337c
xor eax, eax
jmp 0x433493
push 0
push 1
push 0xdeadbeef
call dword [ebp - 0x1d0]
mov dword [ebp - 0x490], eax
cmp dword [ebp - 0x490], 0
jne 0x4333a1
xor eax, eax
jmp 0x433493
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x10], 1
push 3
lea ecx, [ebp - 0x6b4]
call fcn.00433d51
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x14c], 0
jmp 0x4333d8
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jge 0x4333fa
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x6b4]
call fcn.00433e3f
mov dword [eax], 0x28c1
jmp 0x4333cb
mov dword [ebp - 0x4c], 2
jmp 0x43340a
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x43343b
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x433439
push 0
push 0
push 0
push 0
push 0x1314
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
jmp 0x433403
mov dword [ebp - 0x4c], 0
jmp 0x43344b
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x1a
jl 0x433467
mov byte [ebp - 0x6b], 0
movzx eax, byte [ebp - 0x6b]
test eax, eax
je 0x433465
push 0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
jmp 0x433444
lea ecx, [ebp - 0x6b4]
call fcn.00433e23
mov eax, dword [ebp - 0x1c]
cmp dword [eax + 0x10], 0
je 0x433486
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1d8], eax
jmp 0x43348d
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
pop esi
mov esp, ebp
pop ebp
ret