Function at 0x433eec
Capabilities:
Create pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x278
push ebx
push esi
xor eax, eax
mov byte [ebp - 0x35], dl
push edi
mov dword [ebp - 0x28], ecx
mov dword [ebp - 8], eax
jmp 0x433f16
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0xb0], 5
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x433f05
push 2
pop esi
push 1
mov dword [ebp - 8], eax
pop edi
jmp 0x433f31
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x44], edi
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x433f27
mov dword [ebp - 0x40], esi
cmp dword [ebp - 0x40], eax
jl 0x433fd4
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x34], 0x81dda8db
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x433f5f
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
xor eax, eax
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp + ecx*4 - 0xb0]
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
neg edx
sbb edx, edx
xor ebx, ebx
neg edx
mov ecx, dword [ebp + ecx*4 - 0xb0]
add ecx, edx
cmp ecx, 0x61be360d
mov ecx, dword [ebp - 0x40]
setl bl
xor edx, edx
cmp ebx, ecx
sete dl
mov dword [ebp - 0x20], edx
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp + ecx*4 - 0xb0]
mov ecx, dword [ebp - 0x40]
imul edx, ecx
mov ecx, dword [ebp - 0x40]
add edx, ecx
mov ecx, dword [ebp - 0xb0]
add edx, ecx
mov ecx, dword [ebp - 0x40]
cmp edx, dword [ebp + ecx*4 - 0xb0]
je 0x433fc2
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x34], ecx
dec dword [ebp - 0x40]
jns 0x433f42
mov dword [ebp - 0x14], 0xffffffff
lea ecx, [ebp - 0x118]
push edi
call fcn.00433b79
mov dword [ebp - 0x18], 0xf592758e
xor eax, eax
mov dword [ebp - 8], 0xd40a1650
mov dword [ebp - 0x34], esi
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], 0xd580090a
mov dword [ebp - 0xc], eax
jmp 0x43401f
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x118]
mov dword [ecx + edx*4], 0x3cdf98a5
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x43400c
push 4
mov dword [ebp - 0x14], 0xffffffe6
pop ebx
jmp 0x434187
mov dword [ebp - 0x1c], 0xefc07e17
mov dword [ebp - 0x2c], 0xbce008fb
mov dword [ebp - 0xc], 0xfd06bde6
mov dword [ebp - 0x3c], 0x7e815f84
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], 0x59ec1348
mov dword [ebp - 0x20], 9
mov dword [ebp - 0x48], 3
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jg 0x434181
mov dword [ebp - 0x30], 0x13a6c9cd
mov dword [ebp - 0x18], 0x16488a9
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0x18], 0xd9e62b56
mov dword [ebp - 0x19c], edi
mov dword [ebp - 0x198], edi
mov dword [ebp - 0x194], edi
mov dword [ebp - 0x190], edi
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x118]
cmp dword [ecx + edx*4], eax
jne 0x43417e
mov ecx, dword [ebp - 0x14]
xor ebx, ebx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x34]
cmp edx, ecx
setge bl
dec dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x118]
mov ecx, dword [ecx + edx*4]
mov edx, 0xb60f9aa2
imul ecx, ebx
add ecx, 6
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0xc]
add ecx, 3
cmp edx, ecx
mov ecx, dword [ebp - 0x190]
sbb edx, edx
xor ebx, ebx
neg edx
cmp edx, ecx
setle bl
cmp dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0xc], ebx
sbb ecx, ecx
xor ebx, ebx
neg ecx
cmp ecx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x20]
setg bl
xor edx, edx
cmp ecx, ebx
setl dl
xor ecx, ecx
cmp edx, 0x9236
setle cl
xor ebx, ebx
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
cmp edx, ecx
setge bl
mov dword [ebp - 8], ebx
xor ebx, ebx
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
cmp edx, ecx
setle bl
neg ebx
neg ebx
sbb ebx, ebx
inc ebx
cmp ebx, dword [ebp - 0x48]
jle 0x434162
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x3c]
xor edx, edx
mov ecx, dword [ebp - 0x18]
test ecx, ecx
sets dl
mov dword [ebp - 0x3c], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x434079
push 4
pop ebx
dec dword [ebp - 0x24]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xa
jne 0x434033
lea ecx, [ebp - 0x118]
call fcn.00433c4b
mov dword [ebp - 0x1c], 0xfffffffd
xor eax, eax
mov dword [ebp - 0xc], 0x598aaf0a
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 8], eax
jmp 0x4341c9
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x94], 0x1c5534bf
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x4341b8
mov dword [ebp - 8], eax
jmp 0x4341e1
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x70], 0x1fa4c821
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x4341d3
mov dword [ebp - 8], eax
jmp 0x4341fc
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x210], 3
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x4341eb
mov dword [ebp - 8], eax
jmp 0x434213
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0xb4], edi
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x434206
mov ecx, dword [ebp - 0x88]
xor ebx, ebx
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0xc]
cmp ecx, edx
setge bl
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x1c]
jne 0x43425c
cmp dword [ebp - 0xc], eax
jne 0x43425c
mov ecx, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x8c]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x90]
mov ecx, dword [ebp - 0xc]
cmp ecx, edi
mov ecx, dword [ebp - 0x1c]
setle dl
xor ebx, ebx
neg edx
cmp edx, ecx
setg bl
sub ebx, dword [ebp - 0x8c]
neg ebx
sbb ebx, ebx
inc ebx
mov dword [ebp - 0xb4], ebx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x4342b6
push edi
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
mov ebx, dword [0x4af5ec]
lea ecx, [ebp - 0x10c]
push esi
mov dword [ebp - 0x34], ebx
call fcn.00433b79
mov dword [ebp - 8], 0x490c4d8e
xor esi, esi
mov dword [ebp - 0x3c], esi
push 2
mov dword [ebp - 0x18], edi
mov dword [ebp - 0xc], esi
pop edx
jmp 0x4342f5
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], 0xd3df
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x4342e2
mov dword [ebp - 8], esi
jmp 0x4343f9
push edi
lea ecx, [ebp - 0xe8]
call fcn.00433b79
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], 0x2625aa9c
mov dword [ebp - 0xc], esi
jmp 0x434330
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xe8]
mov dword [eax + ecx*4], 0x60edac7a
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x43431d
mov edx, dword [ebp - 0xe8]
xor eax, eax
cmp dword [edx], 0x1ee01e6e
mov edx, dword [edx]
setl al
inc eax
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, edx
setle cl
xor eax, eax
add ecx, 0x75dfcc9f
cmp ecx, edx
mov ecx, 0x818ebcce
setl al
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0x4c93
setne cl
xor eax, eax
cmp ecx, 0x672a6dfe
setle al
imul eax, dword [ebp - 8]
test eax, eax
jne 0x43439b
mov eax, dword [ebp - 8]
mov edi, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [eax + ecx*4]
mov dword [edx + edi*4], eax
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x3c]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0xe8]
setl dl
xor ecx, ecx
cmp edx, dword [eax]
mov eax, dword [ebp - 0x3c]
setge cl
cmp ecx, 0x9ac04bb9
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0xe8]
call fcn.00433c4b
inc dword [ebp - 8]
xor edi, edi
inc edi
cmp dword [ebp - 8], edi
jle 0x434302
lea ecx, [ebp - 0x10c]
call fcn.00433c4b
mov edi, dword [ebp + 8]
xor eax, eax
push 2
mov dword [ebp - 0xc], eax
pop edx
mov dword [edi], eax
mov dword [edi + 4], eax
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
jmp 0x43442f
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x78], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x434425
mov dword [ebp - 0x78], 0xfffffffd
jmp 0x434452
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x43444f
push eax
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
xor eax, eax
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], 4
jne 0x43443d
cmp byte [ebp - 0x35], 0
je 0x4345f6
cmp ebx, 1
jne 0x4345f6
mov dword [ebp - 0x20], 0xfffffffe
xor ebx, ebx
mov dword [ebp - 0x1c], 0xade2167f
mov dword [ebp - 0x18], 0xef9f3b06
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
cmp edx, ecx
setne bl
mov dword [ebp - 0x1c], ebx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], eax
je 0x4345bc
push dword [ebp + 8]
movdqa xmm0, xmmword [0xaa1310]
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x18], eax
push ecx
mov dword [ebp - 0x18], 0x205300ce
lea ecx, [ebp - 0x250]
mov dword [ebp - 0x18], 0xfffffff8
push ecx
mov dword [ebp - 0x18], 0x4879
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x18], 0xfffffffa
push eax
movdqu xmmword [ebp - 0x250], xmm0
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
call fcn.00433cbc
mov eax, dword [ebp - 0x14]
xor esi, esi
sub eax, dword [ebp - 0x1c]
je 0x43455f
mov dword [ebp - 0xc], 0xeb4c
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0xc], esi
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
sub edx, 0x8633
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
add ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0xc]
test ecx, ecx
jne 0x434557
cmp dword [ebp - 0x1c], esi
je 0x43455a
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
jmp 0x4345af
mov dword [ebp - 0x18], esi
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 0x18], 0xfffffff8
push 4
call fcn.00433b79
mov dword [ebp - 0xc], esi
jmp 0x434595
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1d4]
mov dword [eax + ecx*4], 0xef8169c1
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x434582
mov eax, dword [ebp - 0xc0]
lea ecx, [ebp - 0x1d4]
inc dword [eax + 8]
call fcn.00433c4b
lea ecx, [ebp - 0xc0]
call fcn.00433c4b
jmp 0x4345e3
mov dword [ebp - 0x24], 0xfffffffb
mov dword [ebp - 0x18], 0x21f997ec
mov dword [ebp - 0x24], 0x2e25
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
xor esi, esi
mov dword [ebp - 0x1c], ecx
mov ebx, dword [ebp - 0x34]
mov dword [edi + 8], 4
mov dword [edi + 0xc], 0x4af5ec
jmp 0x4345f8
xor esi, esi
push 2
pop edi
push edi
lea ecx, [ebp - 0x180]
call fcn.00433b79
mov dword [ebp - 0xc], 0x5c184c50
mov dword [ebp - 0x18], 0x9949dfcf
mov dword [ebp - 0xc], esi
jmp 0x43462d
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x180]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x43461a
mov dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], esi
jl 0x43465d
mov eax, dword [ebp - 0xc]
xor edx, edx
mov edi, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x180]
mov eax, dword [ecx + eax*4]
cmp eax, dword [ecx + edi*4]
setle dl
mov dword [ebp - 0x18], edx
dec dword [ebp - 0xc]
jns 0x43463e
lea ecx, [ebp - 0x180]
call fcn.00433c4b
mov edi, dword [ebp - 0x28]
cmp edi, ebx
jge 0x435616
mov dword [ebp - 8], 0x9da4d073
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0xc], 0x591
mov dword [ebp - 0x1c], 0x21324561
mov dword [ebp - 0x14], 0x61d594d0
mov dword [ebp - 0x14], esi
xor esi, esi
inc esi
mov dword [ebp - 0x18], 0x92f1e5c8
push esi
call fcn.00433b79
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x4346c2
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1ec]
mov dword [ecx + edx*4], 0xfc24
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x4346af
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 8]
jge 0x4346d6
mov edx, eax
cmp dword [ebp - 0xc], eax
je 0x4346d8
mov edx, esi
mov ecx, dword [ebp - 8]
xor ebx, ebx
add ecx, edx
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 8]
cmp ecx, edx
mov edx, dword [ebp - 8]
setle bl
sub edx, 0x82ff40fc
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, ebx
setne cl
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], eax
je 0x434717
mov ecx, esi
cmp dword [ebp - 0xc], eax
jne 0x434719
mov ecx, eax
mov dword [ebp - 0x14], ecx
or edx, 0xffffffff
mov ecx, dword [ebp - 0x14]
sub edx, ecx
imul edx, dword [ebp - 0x18]
test edx, edx
je 0x434753
mov ecx, dword [ebp - 0x1c]
xor ebx, ebx
mov edx, dword [ebp - 8]
sub edx, ecx
mov ecx, dword [ebp - 0x1c]
cmp edx, ecx
setle bl
xor ecx, ecx
cmp ebx, 0x695c
setl cl
cmp ecx, 0xf9a4
mov ecx, esi
jge 0x434755
mov ecx, eax
neg ecx
xor edx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
cmp ecx, esi
setge dl
sub edx, dword [ebp - 8]
je 0x4347b4
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x18c]
call fcn.00433b79
xor esi, esi
mov dword [ebp - 0xc], esi
jmp 0x434792
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18c]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jl 0x43477f
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x18c]
mov dword [eax + 4], 0x10cbbbc2
call fcn.00433c4b
xor esi, esi
inc esi
jmp 0x434824
mov dword [ebp - 0x24], 0x3de76903
mov dword [ebp - 0xc], 0x1d
jmp 0x43481b
mov dword [ebp - 0x1c], eax
jmp 0x4347e2
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x4347df
push 0x1fd3
call dword [sym.imp.USER32.dll_PostQuitMessage]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x4347c9
mov dword [ebp - 0x14], 0xffffffe6
jmp 0x434812
mov dword [ebp - 8], eax
cmp dword [ebp - 8], eax
jl 0x43480f
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x43480a
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
dec dword [ebp - 8]
jns 0x4347f8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x19
je 0x4347f0
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xd
jne 0x4347c4
inc dword [ebp - 0x24]
lea ecx, [ebp - 0x1ec]
call fcn.00433c4b
xor eax, eax
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x14], eax
mov ebx, 0x4af5f0
cmp dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x1c], ebx
jle 0x434895
push 2
pop edi
mov dword [ebp - 0x20], 0xa290be4
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
cmp edi, ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x20], ecx
jne 0x43486e
mov ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 0x14]
jl 0x43486e
mov esi, eax
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x14]
add ecx, 0xffff0008
add ecx, edx
xor edx, edx
cmp esi, ecx
push 1
setne dl
mov dword [ebp - 0x18], edx
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffa
pop esi
jg 0x43484c
mov edi, dword [ebp - 0x28]
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x4348ba
push eax
push 0x1aa6
push 0x1d08
push 0x1a80
push 0xe53
call dword [sym.imp.GDI32.dll_CreateBitmap]
xor eax, eax
mov dword [ebp - 0x30], eax
test edi, edi
jle 0x434ff2
push dword [ebp + 8]
lea ecx, [ebp - 0x220]
mov dword [ebp - 0xcc], eax
push ecx
lea ecx, [ebp - 0x230]
mov dword [ebp - 0xc8], eax
push ecx
xorps xmm0, xmm0
mov dword [ebp - 0xc4], eax
push eax
lea ecx, [ebp - 0xcc]
movdqu xmmword [ebp - 0x230], xmm0
call fcn.00433cbc
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x168]
call fcn.00433b79
xor eax, eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 3
mov dword [ebp - 0x18], 0x5da2ca33
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 8], eax
jmp 0x434947
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x168]
mov dword [ecx + edx*4], 0x29000d4e
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x434934
mov dword [ebp - 8], eax
jmp 0x434962
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x12c], 0xcd04
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x434951
mov edi, dword [ebp - 0x168]
mov dword [edi + 4], eax
mov edx, dword [edi + 4]
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x18], 1
mov esi, dword [ecx + edx*4]
xor ecx, ecx
cmp esi, edx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], ebx
setge cl
mov dword [ebp - 0x18], 0xba8d7d2a
xor ebx, ebx
cmp ecx, 3
push 2
setle bl
imul ecx, edx, 0x59a3b216
xor edx, edx
cmp ecx, esi
setle dl
xor ecx, ecx
cmp ebx, edx
pop ebx
setge cl
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jg 0x434a1e
xor esi, esi
mov dword [ebp - 0x18], 0xfffffffb
lea ecx, [ebp - 0x1ac]
push ebx
call fcn.00433b79
mov dword [ebp - 0x14], esi
jmp 0x4349fd
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1ac]
mov dword [eax + ecx*4], 0x11aa84cb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x4349ea
dec dword [ebp - 0x128]
lea ecx, [ebp - 0x1ac]
call fcn.00433c4b
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jle 0x4349d2
xor eax, eax
inc dword [edi + 4]
cmp dword [edi + 4], 3
jle 0x434970
lea ecx, [ebp - 0x168]
call fcn.00433c4b
lea ecx, [ebp - 0xcc]
call fcn.00433c4b
mov ebx, dword [ebp - 0x1c]
xor esi, esi
mov eax, dword [ebx]
mov dword [ebp - 0xc], 0xfffffff8
mov dword [ebp - 0x48], eax
mov dword [ebp - 0xc], esi
jmp 0x434a68
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x268], 0x88d0d3f7
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x434a57
mov dword [ebp - 0xc], 5
jmp 0x434ae2
push 3
lea ecx, [ebp - 0x174]
call fcn.00433b79
push 2
mov dword [ebp - 8], esi
pop ecx
jmp 0x434a9d
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1f4], 0x905d
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x434a8c
mov dword [ebp - 8], esi
jmp 0x434ab6
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], esi
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x434aa7
mov ecx, dword [ebp - 0x1f0]
mov eax, dword [ebp - 0x174]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x174]
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x268], eax
call fcn.00433c4b
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffe3
jle 0x434a77
xor edi, edi
mov dword [ebp - 0xc], 0xfffffffe
inc edi
mov dword [ebp - 0x18], 0x3e90a624
mov dword [ebp - 0x18], 0x21ded680
lea ecx, [ebp - 0x1e0]
push edi
call fcn.00433b79
push 2
mov dword [ebp - 8], esi
pop edx
jmp 0x434b25
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x258], 0xfffffffa
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x434b14
mov dword [ebp - 8], esi
jmp 0x434b3e
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x1e0]
mov dword [eax + ecx*4], esi
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x434b2f
mov dword [ebp - 8], esi
jmp 0x434b59
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x134], 0x74ca7790
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x434b48
mov dword [ebp - 0xc], 0xfffffffd
jmp 0x434bf2
push edi
lea ecx, [ebp - 0x1c8]
call fcn.00433b79
push 4
lea ecx, [ebp - 0x200]
call fcn.00433b79
xor eax, eax
mov dword [ebp - 0x24], 0xffff
mov dword [ebp - 8], eax
jmp 0x434ba4
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c8]
mov dword [ecx + edx*4], 0x647d
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x434b91
mov dword [ebp - 8], eax
jmp 0x434bc1
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x200]
mov dword [ecx + edx*4], 0xfffffffc
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x434bae
dec dword [ebp - 0x24]
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x434bd9
push eax
call dword [sym.imp.GDI32.dll_CreatePalette]
lea ecx, [ebp - 0x200]
call fcn.00433c4b
lea ecx, [ebp - 0x1c8]
call fcn.00433c4b
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 9
je 0x434b6a
inc dword [ebp - 0x130]
lea ecx, [ebp - 0x1e0]
call fcn.00433c4b
mov edi, dword [ebx + 4]
xor eax, eax
mov dword [ebp - 0x1c], 0x91a049fe
mov dword [ebp - 0x2c], 0xf84b8114
mov dword [ebp - 0x18], edi
mov dword [ebp - 0xc], eax
jmp 0x434c39
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x278], 0x39ed080c
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x434c28
mov dword [ebp - 0x1c], 0xfffffffa
cmp dword [ebp - 0x1c], 0xffffffed
je 0x434cdf
xor edi, edi
xor esi, esi
inc edi
mov dword [ebp - 0x2c], edi
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x2c], 0x653d4237
mov dword [ebp - 0x2c], 0xcc25bfc8
mov dword [ebp - 0x2c], 0x64276038
mov dword [ebp - 0x2c], 0xda7ef5d8
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x2c], 0x969ac54c
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xe713e19f
mov dword [ebp - 0x2c], edi
push 4
call fcn.00433b79
mov dword [ebp - 0xc], esi
jmp 0x434cb3
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x15c]
mov dword [eax + ecx*4], 0xd8af
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x434ca0
mov eax, dword [ebp - 0x15c]
lea ecx, [ebp - 0x15c]
dec dword [eax + 0xc]
call fcn.00433c4b
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffed
jne 0x434c55
mov edi, dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 8], 0x5f88e10e
add ebx, 8
mov dword [ebp - 0x24], 0xa74db503
mov dword [ebp - 0x18], 0xbdd1
push 2
mov dword [ebp - 0x2c], 0xddf936bb
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0xc], eax
pop edx
jmp 0x434d17
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x6c], 0xc45cdbe8
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x434d09
cmp dword [ebp - 0x68], eax
je 0x434e92
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x1c], 0x318d5816
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x434d50
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x434e5f
mov dword [ebp - 0x14], 0x5dae5a6
mov dword [ebp - 0xc], 0x73417203
mov dword [ebp - 0x18], 0x2db7
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x17
jle 0x434e19
xor edx, edx
mov ecx, 0x8fe24307
inc edx
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x1b8], ecx
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], eax
jl 0x434e0c
mov dword [ebp - 0x18], 0x2324015f
imul ecx, dword [ebp - 8], 0xa22
inc dword [ebp - 8]
test ecx, ecx
jne 0x434dc1
mov ecx, dword [ebp - 8]
mov ecx, eax
cmp dword [ebp - 0x1c], eax
je 0x434dca
mov ecx, edx
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0xc], eax
jmp 0x434dfd
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x434dfa
cmp dword [ebp - 0xc], edx
jle 0x434dd8
dec dword [ebp - 0x20]
jns 0x434da9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x17
jg 0x434d82
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x434e5c
push 0x1122
push 0x111d
push 0x245c
push 0x2544
push 0x21b2
push 0x13fd
push 0x10e4
push 0x244d
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Arc]
xor eax, eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe3
jg 0x434d58
push 8
pop esi
test edi, edi
jne 0x434e72
add ebx, esi
xor esi, esi
lea ecx, [ebp - 0x124]
inc esi
push esi
call fcn.00433b79
xor eax, eax
mov dword [ebp - 0x18], 0x2aba
mov dword [ebp - 8], eax
jmp 0x434f67
mov dword [ebp - 0x24], 0xae86a676
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x3c], 0xcc8c
mov dword [ebp - 0xc], eax
jmp 0x434ebd
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x220], 0x6069
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x434eac
mov ecx, dword [ebp - 0x68]
mov esi, 0xed69
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x21c]
mov dword [ebp - 0x24], 0x642e5f0e
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 8]
sub esi, ecx
sub esi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x3c]
neg esi
push 8
sbb esi, esi
xor edx, edx
inc esi
cmp esi, ecx
pop esi
setne dl
cmp esi, edx
push 0xa
sbb edx, edx
xor ebx, ebx
neg edx
add edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
cmp edx, ecx
mov ecx, dword [ebp - 0x18]
setl bl
xor edx, edx
cmp ebx, ecx
mov ecx, dword [ebp - 0x21c]
setge dl
cmp edx, 0x8b3176a1
sbb edx, edx
xor ebx, ebx
neg edx
cmp edx, ecx
mov ecx, dword [ebp - 0x24]
pop edx
setge bl
sub edx, ebx
add ecx, edx
jne 0x434f46
cmp dword [ebp - 0x68], eax
je 0x434f49
xor eax, eax
inc eax
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
jmp 0x434e6c
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x124]
mov dword [ecx + edx*4], 0xfffffff6
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x434f54
mov dword [ebp - 8], eax
jmp 0x434f7f
push dword [ebp + 8]
movdqa xmm0, xmmword [0xaa12f0]
lea ecx, [ebp - 0x230]
push ecx
lea ecx, [ebp - 0x240]
mov dword [ebp - 0xf4], eax
push ecx
push eax
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xf0], eax
movdqu xmmword [ebp - 0x240], xmm0
mov dword [ebp - 0xec], eax
call fcn.00433cbc
xor eax, eax
mov dword [ebp - 0xc], 0xfffffff6
mov dword [ebp - 0xc], eax
jmp 0x435073
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x435070
push eax
push 0xa4a
push 0xf63
push 0xcf5
push 0x180
push 0xb8a
push 0x639
push eax
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
xor eax, eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jle 0x43503f
lea ecx, [ebp - 0xf4]
call fcn.00433c4b
mov edi, dword [ebx]
lea ecx, [ebp - 0x64]
xor esi, esi
mov dword [ebp - 0x2c], edi
inc esi
push esi
call fcn.00433b79
xor eax, eax
mov dword [ebp - 0x18], 0x1eca6c84
mov dword [ebp - 0x18], eax
mov dword [ebp - 8], eax
jmp 0x4350b3
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0xdc], esi
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x4350a6
mov dword [ebp - 8], eax
jmp 0x4350ce
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x64]
mov dword [ecx + edx*4], 0x6fe7d8a8
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x4350be
mov dword [ebp - 8], eax
jmp 0x4350e9
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x1a0], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x4350d8
mov ecx, dword [ebp - 0x64]
mov dword [ecx], 3
mov dword [ebp - 0x28], 0xa0d018d3
mov dword [ebp - 0x30], 0x83a0f0f5
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x43511f
push esi
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
xor eax, eax
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
cmp dword [ebp + ecx*4 - 0xdc], 0xffffffff
jb 0x435195
mov ecx, dword [ebp - 0x28]
xor ebx, ebx
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
mov ecx, dword [ebp + ecx*4 - 0xdc]
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
mov ecx, dword [ebp + ecx*4 - 0xdc]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
mov ecx, dword [ebp + ecx*4 - 0xdc]
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x64]
mov ecx, dword [ecx]
mov ecx, dword [ebp + ecx*4 - 0xdc]
imul ecx, dword [ebp - 0x30]
imul edx, ecx, 0xe1f6
mov ecx, dword [ebp - 0x28]
cmp edx, ecx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x64]
setl bl
imul ebx, ecx
mov ecx, dword [edx]
mov dword [ebp + ecx*4 - 0xdc], ebx
test ebx, ebx
je 0x435198
mov ecx, esi
jmp 0x43519a
mov edx, dword [ebp - 0x64]
mov ecx, eax
dec dword [edx]
mov dword [ebp - 0x18], ecx
jns 0x4350f7
lea ecx, [ebp - 0x64]
call fcn.00433c4b
add dword [ebp - 0x1c], 4
lea ecx, [ebp - 0x100]
mov dword [ebp - 8], 0xcaf14c90
push 3
call fcn.00433b79
push 2
pop ebx
push ebx
lea ecx, [ebp - 0xa0]
call fcn.00433b79
mov dword [ebp - 0x20], 0xc23782e
xor eax, eax
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x18], 0x4ffad677
mov dword [ebp - 0x14], eax
jmp 0x435206
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x100]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x4351f7
mov dword [ebp - 0x14], eax
jmp 0x435224
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xa0]
mov dword [ecx + edx*4], 0x9209a488
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x435211
mov ecx, dword [ebp - 8]
xor edx, edx
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
cmp ecx, 0x7736
setg dl
imul esi, edx, 0x3eef
sub esi, dword [ebp - 8]
neg esi
sbb esi, esi
xor edx, edx
inc esi
sub esi, dword [ebp - 8]
mov ecx, dword [ebp - 8]
cmp esi, ecx
mov ecx, dword [ebp - 8]
setg dl
xor ebx, ebx
cmp edx, ecx
mov ecx, 0xe6c8cac3
setg bl
cmp ecx, ebx
mov ecx, dword [ebp - 8]
sbb edx, edx
xor ebx, ebx
neg edx
cmp edx, ecx
mov ecx, dword [ebp - 0x100]
setne bl
mov dword [ecx], ebx
xor ebx, ebx
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 8]
cmp edx, ecx
mov esi, dword [ebp - 0xa0]
setne bl
mov dword [ebp - 0x24], esi
mov dword [esi + 4], ebx
xor ebx, ebx
mov esi, dword [ebp - 8]
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 8]
sub esi, dword [ecx]
mov ecx, dword [ebp - 8]
add edx, esi
cmp edx, ecx
setge bl
sub ebx, dword [ebp - 8]
neg ebx
sbb ebx, ebx
inc ebx
mov dword [ebp - 0x20], ebx
jne 0x4352d1
cmp dword [ebp - 8], eax
jne 0x4352d1
mov esi, eax
jmp 0x4352d4
xor esi, esi
inc esi
mov ecx, dword [ebp - 8]
xor edx, edx
mov ebx, dword [ebp - 0x24]
cmp esi, ecx
setge dl
imul edx, dword [ebp - 8]
mov dword [ebp - 0x28], edx
cmp dword [ebx + 4], eax
je 0x435344
xor ebx, ebx
mov dword [ebp - 0x30], 1
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 8]
cmp edx, ecx
setne bl
imul ecx, ebx, 0x6cf
xor ebx, ebx
test ecx, ecx
mov ecx, dword [ebp - 0x28]
sets bl
xor edx, edx
cmp ebx, ecx
mov ecx, dword [ebp - 0x100]
mov ebx, dword [ebp - 0x24]
setl dl
mov dword [ecx + 8], edx
mov ecx, dword [ebp - 8]
mov esi, dword [ebp - 0x20]
sub esi, dword [ebx + 4]
mov ecx, dword [ebp - 0x20]
neg esi
sbb esi, esi
xor edx, edx
inc esi
cmp esi, ecx
sete dl
cmp dword [ebp - 8], edx
jne 0x435344
xor eax, eax
inc eax
xor ecx, ecx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 8]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebx + 4]
mov eax, dword [ebp - 0xa0]
setle cl
mov dword [eax], ecx
lea ecx, [ebp - 0xa0]
call fcn.00433c4b
lea ecx, [ebp - 0x100]
call fcn.00433c4b
mov ebx, dword [ebp - 0x1c]
xor eax, eax
mov esi, dword [ebx]
mov dword [ebp - 0x14], 0xa3622ba3
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], 4
cmp dword [ebp - 0x14], eax
je 0x4353e4
mov dword [ebp - 0x30], 0x7e17f759
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x18], 0x47adf1ad
cmp dword [ebp - 0x30], eax
je 0x4353d3
mov ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x4353d3
xor ecx, ecx
inc ecx
jmp 0x4353d5
mov ecx, eax
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], 0xfffffff6
jmp 0x435459
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0xc], 0x88a97331
mov dword [ebp - 8], 9
cmp dword [ebp - 0x28], 1
sbb ecx, ecx
xor ebx, ebx
inc ecx
imul ecx, dword [ebp - 0x28]
imul ecx, dword [ebp - 0x14]
imul ecx, ecx, 0xffff78b3
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
cmp ecx, edx
setg bl
mov dword [ebp - 8], ebx
xor ebx, ebx
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
imul ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x20], ecx
neg dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
cmp edx, ecx
setl bl
mov dword [ebp - 0x18], ebx
mov ebx, dword [ebp - 0x1c]
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x435471
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
xor eax, eax
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x30], 0xe34aafbe
mov dword [ebp - 0xc], eax
jmp 0x435495
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x144], 0x9b55
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x435484
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x435542
xor edi, edi
inc edi
mov dword [ebp - 0x20], 0xfffffff7
xor edx, edx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x18], 0xdb370cc3
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x144]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setne dl
imul edx, edx, 0xf885
sub edx, 0x498d20b
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp + eax*4 - 0x144]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
add edx, 2
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x144]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x144]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x4354ab
mov edi, dword [ebp - 0x2c]
test esi, esi
jne 0x435616
cmp byte [ebp - 0x35], 0
je 0x43555f
cmp dword [ebp - 0x34], 1
jne 0x43555f
mov ecx, dword [ebp + 8]
lea eax, [edi + 0x10]
add dword [ecx + 8], eax
mov eax, dword [ebx + 4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebx + 8]
add ebx, 0xc
push edi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], ebx
call fcn.004882a5
mov dword [ebp - 0x34], eax
xor eax, eax
pop ecx
mov dword [ebp - 0xa4], eax
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0xa4]
push eax
push edi
call fcn.0046c001
mov ebx, dword [ebp - 0x84]
xor esi, esi
mov ecx, esi
test edi, edi
jle 0x4355f4
mov eax, ecx
and eax, 0x80000001
jns 0x4355be
dec eax
or eax, 0xfffffffe
inc eax
neg eax
sbb eax, eax
and eax, dword [ebp - 0x18]
add eax, ecx
add eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x2c]
jmp 0x4355d3
lea eax, [edx + 1]
cdq
idiv edi
cmp word [ebx + edx*2], si
jne 0x4355d0
xor eax, eax
inc eax
mov word [ebx + edx*2], ax
mov eax, dword [ebp - 0x1c]
mov al, byte [edx + eax]
mov edx, dword [ebp - 0x34]
mov byte [ecx + edx], al
inc ecx
cmp ecx, edi
jl 0x4355b0
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x34]
mov dword [ecx], edi
mov dword [ecx + 4], eax
test ebx, ebx
je 0x435616
push ebx
call fcn.00489796
pop ecx
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0xc], 0x477862fd
lea ecx, [ebp - 0x150]
push 4
call fcn.00433b79
xor eax, eax
mov dword [ebp - 0x18], 0xc9b996a5
mov dword [ebp - 0xc], eax
jmp 0x43564b
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x150]
mov dword [ecx + edx*4], 0xac3dc99c
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x435638
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xffffffeb
jle 0x4356b6
xor ebx, ebx
inc ebx
mov dword [ebp - 0x34], 0x67f5ed9a
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], eax
je 0x43568d
mov ecx, dword [ebp - 0x28]
xor edx, edx
cmp ecx, 0x5c2dd78f
setge dl
imul edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x150]
mov dword [ecx + 0xc], edx
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x4356ad
push 0x1166
push eax
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor eax, eax
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xffffffeb
jg 0x43565d
lea ecx, [ebp - 0x150]
call fcn.00433c4b
mov eax, dword [ebp + 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret