Function at 0x4340c4
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x290
movdqa xmm0, xmmword [0xab8c00]
xor eax, eax
push ebx
push esi
push edi
push dword [ebp + 8]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x220]
push ecx
lea ecx, [ebp - 0x230]
mov byte [ebp - 0x39], dl
push ecx
push eax
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x88], eax
movdqu xmmword [ebp - 0x230], xmm0
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], eax
call fcn.00433e94
mov dword [ebp - 0x18], 0xc8094a18
xor edi, edi
mov dword [ebp - 0x1c], 0xa29822cb
inc edi
push 2
pop ebx
mov dword [ebp - 0x1c], ebx
xor eax, eax
mov dword [ebp - 0x1c], 0x45b0e82c
mov dword [ebp - 0x1c], 0x921b0ae2
mov dword [ebp - 0x1c], 0xfffffffd
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], 0x20c4365d
mov dword [ebp - 0x1c], 9
mov dword [ebp - 0x1c], 8
push 3
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], eax
pop esi
jmp 0x434205
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x1c], 0xfffffff9
mov dword [ebp - 0x1c], 0xb03e3869
mov dword [ebp - 8], eax
jmp 0x43419a
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x290], 0xfffffff9
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x434189
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x88]
cmp dword [ecx + edx*4], eax
je 0x4341d6
mov dword [ebp - 0x28], 0xafd94fe5
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], eax
jl 0x434202
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x88]
mov dword [ecx + esi*4], edx
dec dword [ebp - 0x28]
jns 0x4341bd
push 3
pop esi
jmp 0x434202
mov dword [ebp - 0x1c], 0xfffffffa
mov dword [ebp - 0x34], 0x275c
mov dword [ebp - 8], eax
jmp 0x4341fa
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x25c], 0xbd55fd0a
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x4341e9
inc dword [ebp - 0x34]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x43416f
lea ecx, [ebp - 0x88]
call fcn.00433e23
push esi
lea ecx, [ebp - 0x110]
call fcn.00433d51
mov dword [ebp - 0x18], 8
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x28], 0x928d
push 4
call fcn.00433d51
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x434256
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x110]
mov dword [ecx + edx*4], ebx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x434247
mov dword [ebp - 0xc], eax
jmp 0x43426f
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x128]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x434260
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jg 0x4342e5
mov ebx, dword [ebp - 0x128]
mov dword [ebp - 0x1c], 0xba7b7e80
mov dword [ebp - 0x34], 0xfffffffb
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x110]
mov esi, dword [ebp - 0x110]
mov ecx, dword [ecx + edx*4]
mov dword [esi + edi*4], ecx
mov ecx, dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x61fc42ff
jle 0x4342c4
cmp dword [ebp - 0x28], eax
jne 0x4342c4
xor edi, edi
mov ecx, eax
inc edi
jmp 0x4342c9
xor edi, edi
inc edi
mov ecx, edi
cmp dword [ebp - 0x34], 0xd02268f6
mov dword [ebx + 4], ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x434283
push 2
pop ebx
lea ecx, [ebp - 0x128]
call fcn.00433e23
lea ecx, [ebp - 0x110]
call fcn.00433e23
mov dword [ebp - 0x14], 0x318d5816
lea ecx, [ebp - 0x5c]
push ebx
call fcn.00433d51
mov dword [ebp - 0xc], 8
or eax, 0xffffffff
mov dword [ebp - 0x18], 0x4abc2489
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x38], 0xc3a871d1
mov dword [ebp - 8], eax
jmp 0x43433d
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x5c]
mov dword [ecx + edx*4], 0xfffffffe
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x43432d
cmp dword [ebp - 0x14], eax
jne 0x43436c
mov edx, dword [ebp - 0x5c]
xor ebx, ebx
mov ecx, dword [edx + 4]
cmp ecx, dword [edx]
mov edx, edi
mov ecx, dword [ebp - 0xc]
setg bl
dec dword [ebp - 0xc]
cmp ecx, ebx
mov ecx, dword [ebp - 0x5c]
cmove edx, eax
cmp edx, dword [ecx]
je 0x43436f
mov esi, eax
jmp 0x434371
mov ecx, dword [ebp - 0x5c]
mov esi, edi
mov dword [ecx], esi
xor edx, edx
mov ecx, dword [ebp - 0x14]
neg esi
cmp esi, ecx
mov ebx, 0x6ddf
setg dl
mov dword [ebp - 0x18], edx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x14]
cmp ecx, 0xfffffffd
jge 0x434522
mov dword [ebp - 0x24], 0x642e5f0e
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x28], 0x86a67606
mov dword [ebp - 0x20], edi
push 2
call fcn.00433d51
mov dword [ebp - 0xbc], ebx
xor eax, eax
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 8], eax
jmp 0x4343e6
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0xf8]
mov dword [ecx + edx*4], 0xfffffff9
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x4343d3
mov esi, dword [ebp - 0x5c]
cmp dword [esi + 4], eax
jne 0x43443f
cmp dword [ebp - 0x20], eax
jne 0x4343fc
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
add ecx, dword [esi + 4]
jne 0x43440b
cmp dword [ebp - 0x14], eax
jne 0x43440b
mov edi, eax
mov ecx, dword [ebp - 0x20]
xor edx, edx
cmp edi, ecx
mov ecx, dword [ebp - 0x20]
setl dl
xor ebx, ebx
cmp edx, dword [esi + 4]
setl bl
sub ebx, ecx
mov ecx, dword [ebp - 0xc]
cmp ebx, 0xcf2842c5
sbb edx, edx
xor ebx, ebx
inc edx
cmp edx, ecx
mov edx, eax
setge bl
xor edi, edi
inc edi
add ebx, dword [esi + 4]
je 0x434441
mov edx, edi
dec dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
xor ecx, ecx
cmp edx, 0xfffffffb
setge cl
or edx, 0xffffffff
xor ebx, ebx
cmp ecx, edx
mov ecx, dword [ebp - 0x20]
setne bl
xor edx, edx
cmp ebx, ecx
setne dl
xor ebx, ebx
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xf8]
cmp edx, dword [ecx]
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
setl bl
add ecx, ebx
add edx, ecx
je 0x434492
mov ecx, edi
cmp dword [ebp - 0xbc], eax
jne 0x434494
mov ecx, eax
mov edx, dword [ebp - 0x2c]
imul edx, ecx
mov ecx, dword [ebp - 0x5c]
imul edx, dword [ecx]
xor ecx, ecx
neg edx
cmp edx, dword [esi + 4]
mov edx, dword [ebp - 0x2c]
setl cl
imul edx, ecx
neg edx
sbb edx, edx
inc edx
cmp edx, dword [ebp - 0x38]
jge 0x4344bd
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xb4]
cmp dword [ebp - 0x2c], ecx
jl 0x4344d2
mov ecx, eax
cmp dword [ebp - 0xb8], eax
je 0x4344d4
mov ecx, edi
or edx, 0xffffffff
cmp ecx, edx
mov ecx, dword [ebp - 0xf8]
sbb esi, esi
xor edx, edx
neg esi
imul esi, dword [ecx]
add esi, 7
cmp esi, 0xf37d
setne dl
xor ecx, ecx
cmp edx, 0xf1d
setg cl
mov dword [ebp - 0x14], ecx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x434513
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
lea ecx, [ebp - 0xf8]
call fcn.00433e23
xor eax, eax
jmp 0x434535
mov dword [ebp - 0x18], eax
jmp 0x43452f
cmp dword [ebp - 0xc], eax
jne 0x434535
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 8
jl 0x434527
mov dword [ebp - 0x14], eax
jmp 0x434554
mov dword [ebp - 0xc], eax
jmp 0x43454b
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x5c]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x43453f
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xa
jl 0x43453a
lea ecx, [ebp - 0x5c]
call fcn.00433e23
mov dword [ebp - 0x24], edi
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc], 0xfbce008f
mov dword [ebp - 0x18], 0xfffffffe
mov dword [ebp - 0x20], 4
push 3
call fcn.00433d51
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0xf5175d1b
mov dword [ebp - 8], eax
jmp 0x4345a7
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0xc8]
mov dword [ecx + edx*4], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x434598
mov ecx, dword [ebp - 0x24]
xor ebx, ebx
mov edx, 0x509c
sub edx, ecx
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
cmp edx, ecx
sete bl
xor ecx, ecx
cmp ebx, 0x3622ba39
setne cl
or edx, 0xffffffff
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
cmp edx, ecx
mov ecx, dword [ebp - 0x24]
sbb esi, esi
xor edx, edx
neg esi
sub esi, 2
cmp ecx, esi
mov ecx, dword [ebp - 0xc8]
setle dl
mov dword [ecx], edx
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc8]
neg edx
sbb edx, edx
xor ebx, ebx
inc edx
cmp edx, dword [ecx]
mov ecx, dword [ebp - 0xc]
setg bl
inc ebx
neg ebx
sbb ebx, ebx
inc ebx
sub ebx, ecx
imul ebx, dword [ebp - 0x18]
imul ecx, ebx, 0xcffe2
test ecx, ecx
je 0x434641
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x34]
jmp 0x43472e
mov ecx, 0xfffd
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x184], ecx
mov dword [ebp - 0x180], ecx
mov dword [ebp - 8], eax
jmp 0x434674
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x98], 0x39f4802d
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x434663
mov dword [ebp - 0x18], eax
jmp 0x434724
mov dword [ebp - 0x38], 8
mov dword [ebp - 8], eax
jmp 0x43469e
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x94], 0x4a126529
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x43468d
mov dword [ebp - 0x20], 0xd
jmp 0x43471b
or ecx, 0xffffffff
mov dword [ebp - 0x38], 0xff510212
mov dword [ebp - 0x180], ecx
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x38]
sub ecx, 0xa50e
je 0x4346d5
mov esi, edi
cmp dword [ebp - 0x30], eax
jne 0x4346d7
mov esi, eax
mov ecx, dword [ebp - 0x98]
xor edx, edx
cmp ecx, esi
push 0
setle dl
xor ebx, ebx
cmp edx, 0xfffffffb
mov edx, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x34]
setge bl
cmp ecx, edx
pop ecx
setg cl
sub ecx, ebx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x94]
cmp dword [ebp - 0x38], ecx
setg dl
mov dword [ebp - 0x38], edx
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff8
jne 0x4346ad
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff6
jle 0x434681
lea ecx, [ebp - 0xc8]
call fcn.00433e23
mov edi, dword [0x4c39fc]
lea ecx, [ebp - 0x14c]
push 2
pop esi
or eax, 0xffffffff
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x30], eax
push esi
call fcn.00433d51
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x434771
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x14c]
mov dword [ecx + edx*4], 0xe5ccc90a
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x43475e
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x14c]
mov dword [ecx + 4], edx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x43479d
push 0x8bf
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea ecx, [ebp - 0x14c]
call fcn.00433e23
mov ebx, dword [ebp + 8]
lea ecx, [ebp - 0xe0]
xor eax, eax
push 3
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], eax
call fcn.00433d51
mov dword [ebp - 0x18], 8
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x2c], 0x928d
push 4
call fcn.00433d51
xor eax, eax
mov dword [ebp - 0xc], eax
jmp 0x4347f6
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xe0]
mov dword [ecx + edx*4], esi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x4347e7
mov dword [ebp - 0xc], eax
jmp 0x434810
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x164]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x434801
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jg 0x434884
mov ebx, dword [ebp - 0x164]
mov dword [ebp - 0x1c], 0xba7b7e80
mov dword [ebp - 0x34], 0xfffffffb
mov ecx, dword [ebp - 0x18]
mov edi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xe0]
mov esi, dword [ebp - 0xe0]
mov ecx, dword [ecx + edx*4]
mov dword [esi + edi*4], ecx
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x61fc42ff
jle 0x434862
cmp dword [ebp - 0x2c], eax
jne 0x434862
mov ecx, eax
jmp 0x434865
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x34], 0xd02268f6
mov dword [ebx + 4], ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x434824
mov ebx, dword [ebp + 8]
mov edi, dword [ebp - 0x38]
lea ecx, [ebp - 0x164]
call fcn.00433e23
lea ecx, [ebp - 0xe0]
call fcn.00433e23
xor esi, esi
cmp byte [ebp - 0x39], 0
je 0x434adb
inc esi
cmp edi, esi
jne 0x434ad7
mov dword [ebp - 0x18], 0xb3ae3556
or eax, 0xffffffff
mov dword [ebp - 0x1c], 0x44d513c6
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x1c], 0x28cae2fe
push 0xfffffffffffffffd
mov dword [ebp - 0x28], esi
pop edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x1c], 0x565e139a
mov dword [ebp - 8], eax
jmp 0x4348ef
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x6c], 0x1213072
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x4348e1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xd
jle 0x434ac7
mov dword [ebp - 0x24], 0xa473eb90
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x20], 0x588d0d3f
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x1c], 0x93009ce4
mov dword [ebp - 0x30], 0x560131b3
mov dword [ebp - 8], eax
jmp 0x43493d
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x210], edx
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x434930
push 3
pop ebx
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0xffffffee
je 0x434aa0
mov dword [ebp - 0xc], 0x207182b4
lea ecx, [ebp - 0x134]
mov dword [ebp - 8], 0xc7747bb7
push ebx
call fcn.00433d51
push esi
lea ecx, [ebp - 0x1d8]
call fcn.00433d51
xor eax, eax
mov dword [ebp - 0x1c], 0xffff
mov dword [ebp - 0x14], eax
jmp 0x434994
mov ecx, dword [ebp - 0x14]
mov dword [ebp + ecx*4 - 0x280], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x434987
mov dword [ebp - 0x14], eax
jmp 0x4349b1
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x134]
mov dword [ecx + edx*4], 0xfffffffa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x43499e
mov dword [ebp - 0x14], eax
jmp 0x4349ce
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1d8]
mov dword [ecx + edx*4], 0x7c2076ac
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x4349bb
mov dword [ebp - 0x14], eax
jmp 0x4349e9
mov ecx, dword [ebp - 0x14]
mov dword [ebp + ecx*4 - 0x250], 6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x4349d8
inc dword [ebp - 0x34]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xfffffffc
jne 0x434a78
mov dword [ebp - 0x28], 0xfffffff8
cmp dword [ebp - 0x1c], eax
jne 0x434a75
cmp dword [ebp - 0x2c], eax
jne 0x434a4a
mov ecx, dword [ebp - 0x24]
xor ebx, ebx
mov ecx, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], esi
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
cmp ecx, edx
setne bl
xor edx, edx
add ebx, 0x945d
mov dword [ebp - 0x20c], ebx
mov ecx, dword [ebp - 0x30]
cmp ebx, ecx
mov ecx, dword [ebp - 0x134]
setg dl
mov dword [ecx + 4], edx
mov ecx, eax
test edx, edx
je 0x434a4c
mov ecx, esi
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x28]
imul ecx, dword [ebp - 0xc]
test ecx, ecx
je 0x434a61
mov ecx, esi
cmp dword [ebp - 0x20], eax
jne 0x434a63
mov ecx, eax
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x28], ecx
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffffc
je 0x4349fb
push 3
pop ebx
lea ecx, [ebp - 0x1d8]
call fcn.00433e23
lea ecx, [ebp - 0x134]
call fcn.00433e23
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffee
jne 0x434953
push 0xfffffffffffffffd
xor eax, eax
pop edx
mov dword [ebp - 0x20], eax
jmp 0x434ab2
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp + ecx*4 - 0x6c]
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x434aa5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xd
jg 0x434901
mov ebx, dword [ebp + 8]
mov dword [ebx + 8], 4
mov dword [ebx + 0xc], 0x4c39fc
jmp 0x434ade
xor eax, eax
jmp 0x434ade
xor eax, eax
inc esi
or ecx, 0xffffffff
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x1c], 0xe3bf118c
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
sub ecx, 0x84cb
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0x30]
jne 0x434b20
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
test ecx, ecx
setg dl
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], eax
je 0x434b98
push dword [ebp + 8]
movdqa xmm0, xmmword [0xab8c40]
lea ecx, [ebp - 0x210]
push ecx
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x30], 0xa720
push ecx
push eax
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xec], eax
movdqu xmmword [ebp - 0x220], xmm0
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
call fcn.00433e94
mov dword [ebp - 0x30], 0x9d44
lea ecx, [ebp - 0xec]
inc dword [ebp - 0x30]
call fcn.00433e23
jmp 0x434bba
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x434baa
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x434bbc
push eax
call dword [sym.imp.USER32.dll_GetMenuItemCount]
xor eax, eax
mov ecx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x44]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
push 0xfffffffffffffffd
pop edx
cmp edx, ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x2c], ecx
cmp esi, edi
jge 0x4358e5
or edx, 0xffffffff
xor edi, edi
mov dword [ebp - 0xc], edx
inc edi
mov dword [ebp - 8], eax
jmp 0x434bf7
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x70], 0x824a
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x434be9
mov dword [ebp - 0xc], eax
jmp 0x434c0b
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x70], edi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x434c01
mov dword [ebp - 0xc], eax
jmp 0x434c1f
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x70], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jl 0x434c15
mov dword [ebp - 0x18], 0x9b55bb2c
mov ebx, 0x4c3a00
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1c], 0xfffffff9
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc], eax
jmp 0x434c4f
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x198], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x434c42
mov dword [ebp - 0xc], eax
jmp 0x434c6b
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x238], 0x534de6f8
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x434c5a
mov dword [ebp - 0x18], 0x1b
cmp dword [ebp - 0x18], 0x15
jg 0x434e1c
mov dword [ebp - 0x28], 0x417be18
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x1c], 0xd8ea5f34
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], 0xafbebf0a
mov dword [ebp - 0x1c], 0xfffffff9
mov dword [ebp - 0x1c], 0x34ccbb24
mov dword [ebp - 0x1c], 0x9a5a165f
push edi
call fcn.00433d51
xor eax, eax
mov dword [ebp - 0x30], 0x32dc718
mov dword [ebp - 8], eax
jmp 0x434cdc
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1f0]
mov dword [ecx + edx*4], 0xfffffff6
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x434cc9
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], eax
jl 0x434e02
mov dword [ebp - 0x20], 0xbd4dfbd6
mov dword [ebp - 8], eax
jmp 0x434d0e
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x268], 6
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x434cfd
mov dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], eax
jl 0x434df9
mov dword [ebp - 0x24], 0x7ecc2443
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 0x1c], 0xe8fe7528
mov dword [ebp - 0x1c], 0xb50f6b3
mov dword [ebp - 0x1c], edi
push edi
call fcn.00433d51
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x434d5e
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1cc]
mov dword [ecx + edx*4], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x434d4f
mov dword [ebp - 0x24], eax
jmp 0x434ddd
mov dword [ebp - 0x1c], 3
lea ecx, [ebp - 0x208]
mov dword [ebp - 0x1c], 0x2f88d967
mov dword [ebp - 0x1c], 0x51ae9a07
push edi
call fcn.00433d51
mov dword [ebp - 0x1c], 0x790f9584
mov dword [ebp - 0x1c], 0x41536c74
mov dword [ebp - 8], 0
jmp 0x434db3
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x208]
mov dword [eax + ecx*4], 0xcd3bed16
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x434da0
dec dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x198]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x198], ecx
lea ecx, [ebp - 0x208]
call fcn.00433e23
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x434d68
lea ecx, [ebp - 0x1cc]
call fcn.00433e23
dec dword [ebp - 0x20]
jns 0x434d24
xor eax, eax
dec dword [ebp - 0x28]
jns 0x434cf1
lea ecx, [ebp - 0x1f0]
call fcn.00433e23
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x15
jle 0x434c82
xor eax, eax
test esi, esi
jle 0x43516f
jmp 0x434e28
xor eax, eax
mov dword [ebp - 0x1c], 0xea7
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x434e41
push eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x434e57
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
xor eax, eax
mov edi, dword [ebx]
xor esi, esi
mov dword [ebp - 0x14], 0xe871
inc esi
mov dword [ebp - 0xc], 0xb441791e
add ebx, 4
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], 0x32111c1b
mov dword [ebp - 0x28], 0xd72f
mov dword [ebp - 0x20], 0xdaf140b3
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, eax
mov dword [ebp - 8], ebx
cmp dword [ebp - 0x14], eax
je 0x434ea0
mov ecx, esi
mov edx, dword [ebp - 0x14]
cmp ecx, 9
sbb ecx, ecx
neg ecx
sub edx, ecx
imul edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x14]
jne 0x434ebc
mov ecx, eax
cmp dword [ebp - 0x14], eax
je 0x434ebe
mov ecx, esi
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], eax
je 0x434f1b
mov dword [ebp - 0x14], 0xfffffffa
jmp 0x434f10
mov dword [ebp - 0xc], 0x1a
jmp 0x434f07
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x434eef
push 0x1d4a
push eax
call dword [sym.imp.USER32.dll_GetSubMenu]
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x434f04
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
xor eax, eax
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x18
jne 0x434ed8
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff1
jle 0x434ecf
jmp 0x434fae
mov dword [ebp - 0x2c], 0x3295
xor ebx, ebx
mov dword [ebp - 0x24], 0x56e3f0e2
mov dword [ebp - 0x1c], esi
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], ecx
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0xc]
sub edx, ecx
mov ecx, dword [ebp - 0x24]
cmp edx, ecx
setg bl
sub ebx, dword [ebp - 0x14]
neg ebx
sbb ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
je 0x434f69
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0xc]
xor ebx, ebx
mov ecx, dword [ebp - 0x14]
cmp ecx, edx
setl bl
sub ebx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, ecx
setg dl
xor ebx, ebx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x14]
cmp edx, ecx
setg bl
imul ecx, ebx, 0x2f10
test ecx, ecx
jne 0x434fa9
mov ecx, eax
cmp dword [ebp - 0x30], eax
je 0x434fab
mov ecx, esi
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x28]
xor ebx, ebx
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xc]
cmp edx, ecx
setne bl
test ebx, ebx
jns 0x434fd3
cmp dword [ebp - 0xc], eax
jne 0x434fd5
mov esi, eax
mov ecx, dword [ebp - 0x20]
xor edx, edx
sub esi, ecx
mov ecx, dword [ebp - 0x20]
cmp esi, ecx
setge dl
cmp edx, dword [ebp - 0x28]
jge 0x434ff3
cmp dword [ebp - 0x28], eax
je 0x434ff3
xor edx, edx
inc edx
jmp 0x434ff5
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov ebx, dword [ebp - 8]
cmp edx, eax
push 1
sete cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x104]
mov esi, dword [ebx]
call fcn.00433d51
mov dword [ebp - 0x18], 0x18885c6f
xor eax, eax
mov dword [ebp - 0x2c], 0x4f2a6ca0
mov dword [ebp - 0x24], eax
jmp 0x43503c
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x104]
mov dword [ecx + edx*4], 0x8f93
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x435029
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jl 0x4350c5
push 2
lea ecx, [ebp - 0x140]
call fcn.00433d51
xor eax, eax
mov dword [ebp - 0x1c], 0xced45b0e
mov dword [ebp - 0x24], eax
jmp 0x435074
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x140]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x435065
mov ecx, dword [ebp - 0x140]
xor ebx, ebx
mov edx, dword [ebp - 0x18]
mov dword [ecx], 1
mov ecx, dword [ebp - 0x104]
cmp dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x104]
setne bl
xor edx, edx
cmp ebx, dword [ecx + eax*4]
sete dl
sub edx, dword [ecx]
lea ecx, [ebp - 0x140]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x1c], edx
call fcn.00433e23
dec dword [ebp - 0x18]
jns 0x43504a
mov ebx, dword [ebp - 8]
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x104]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 1
call fcn.00433e23
add ebx, 4
test esi, esi
jne 0x4350ed
add ebx, 8
mov dword [ebp - 0x1c], 0x5568
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x1c], 0x713a473e
push 3
call fcn.00433d51
mov dword [ebp - 0x1c], 0xfffffffc
xor eax, eax
mov dword [ebp - 0x30], 0xa565
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 8], eax
jmp 0x43513e
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1e4]
mov dword [ecx + edx*4], 0x98311173
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x43512b
inc dword [ebp - 0x30]
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x435156
push eax
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea ecx, [ebp - 0x1e4]
call fcn.00433e23
add ebx, edi
dec dword [ebp - 0x44]
jne 0x434e26
xor edi, edi
inc edi
mov eax, dword [ebx]
mov dword [ebp - 0x24], eax
xor eax, eax
push 3
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 8], eax
pop esi
jmp 0x435193
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x50], 8
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x435185
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x1a
jl 0x435231
push esi
lea ecx, [ebp - 0x158]
call fcn.00433d51
mov dword [ebp - 0x30], 0x86e1459f
mov dword [ebp - 8], 0
jmp 0x4351d4
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], 0x3191b495
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x4351c1
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 0
jg 0x4351e5
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x158]
add ecx, 0x7a3f0aea
cmp ecx, dword [eax + 8]
lea ecx, [ebp - 0x158]
setg dl
xor eax, eax
cmp edx, 6
setne al
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x18], 0x9096a9cb
call fcn.00433e23
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 0x1a
jge 0x4351a5
xor eax, eax
push 2
pop esi
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], eax
jl 0x4352c9
push edi
lea ecx, [ebp - 0x11c]
call fcn.00433d51
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x435266
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x11c]
mov dword [ecx + edx*4], 0x37f5e175
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x435253
mov ecx, dword [ebp - 0x11c]
mov dword [ecx], eax
mov dword [ebp - 0x20], esi
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x43528f
push eax
push 0xecf
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x4352a2
mov ecx, dword [ebp - 0x20]
mov dword [ebp + ecx*4 - 0x50], 0xad702c91
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x435294
mov ecx, dword [ebp - 0x11c]
inc dword [ecx]
cmp dword [ecx], esi
jle 0x435273
lea ecx, [ebp - 0x11c]
call fcn.00433e23
dec dword [ebp - 0x18]
jns 0x435240
xor eax, eax
mov dword [ebp - 0xc], 0x9b55bb2c
or ecx, 0xffffffff
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], 0xfffffff9
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xc], eax
jmp 0x4352f2
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0x1fc], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x4352e5
mov dword [ebp - 0xc], eax
jmp 0x43530e
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x240], 0x534de6f8
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x4352fd
mov dword [ebp - 0xc], 0x1b
jmp 0x4354a4
mov dword [ebp - 0x28], 0x417be18
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c], 0xd8ea5f34
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], 0xafbebf0a
mov dword [ebp - 0x1c], 0xfffffff9
mov dword [ebp - 0x1c], 0x34ccbb24
mov dword [ebp - 0x1c], 0x9a5a165f
push edi
call fcn.00433d51
xor eax, eax
mov dword [ebp - 0x30], 0x32dc718
mov dword [ebp - 8], eax
jmp 0x435379
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1c0]
mov dword [ecx + edx*4], 0xfffffff6
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x435366
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], eax
jl 0x435496
mov dword [ebp - 0x18], 0xbd4dfbd6
mov dword [ebp - 8], eax
jmp 0x4353a7
mov ecx, dword [ebp - 8]
mov dword [ebp + ecx*4 - 0x274], 6
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x435396
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], eax
jl 0x43548d
mov dword [ebp - 0x20], 0x7ecc2443
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x1c], 0xe8fe7528
mov dword [ebp - 0x1c], 0xb50f6b3
mov dword [ebp - 0x1c], edi
push edi
call fcn.00433d51
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x4353f3
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 0x1b0]
mov dword [ecx + edx*4], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x4353e4
mov dword [ebp - 0x20], eax
jmp 0x435472
mov dword [ebp - 0x1c], 3
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x1c], 0x2f88d967
mov dword [ebp - 0x1c], 0x51ae9a07
push edi
call fcn.00433d51
mov dword [ebp - 0x1c], 0x790f9584
mov dword [ebp - 0x1c], 0x41536c74
mov dword [ebp - 8], 0
jmp 0x435448
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x1a4]
mov dword [eax + ecx*4], 0xcd3bed16
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x435435
dec dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x1fc]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1fc], ecx
lea ecx, [ebp - 0x1a4]
call fcn.00433e23
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x4353fd
lea ecx, [ebp - 0x1b0]
call fcn.00433e23
dec dword [ebp - 0x18]
jns 0x4353b9
xor eax, eax
dec dword [ebp - 0x28]
jns 0x43538a
lea ecx, [ebp - 0x1c0]
call fcn.00433e23
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0x15
jle 0x43531f
mov edi, dword [ebx + 4]
lea ecx, [ebp - 0x170]
push 3
mov dword [ebp - 0x30], edi
call fcn.00433d51
push 4
lea ecx, [ebp - 0x17c]
call fcn.00433d51
xor eax, eax
mov dword [ebp - 0x1c], 0x43d2717f
xor edx, edx
mov dword [ebp - 0x14], eax
inc edx
jmp 0x4354ed
mov ecx, dword [ebp - 0x14]
mov dword [ebp + ecx*4 - 0x40], 0xede0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x4354df
mov dword [ebp - 0x14], eax
jmp 0x43550a
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x170]
mov dword [ecx + edx*4], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x4354f7
mov dword [ebp - 0x14], eax
jmp 0x435525
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x17c]
or dword [ecx + edx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x435515
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x435540
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x435563
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x170]
mov dword [eax], 0x6d21
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x17c]
mov dword [eax + 0xc], ecx
lea ecx, [ebp - 0x17c]
call fcn.00433e23
lea ecx, [ebp - 0x170]
call fcn.00433e23
add ebx, 8
mov dword [ebp - 0x14], 0x318d5816
push esi
lea ecx, [ebp - 0x68]
mov dword [ebp - 8], ebx
call fcn.00433d51
mov dword [ebp - 0xc], 8
or eax, 0xffffffff
mov dword [ebp - 0x18], 0x4abc2489
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x1c], 0xc3a871d1
mov dword [ebp - 0x20], eax
jmp 0x4355d0
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x68]
mov dword [ecx + edx*4], 0xfffffffe
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x4355c0
xor ebx, ebx
cmp dword [ebp - 0x14], eax
jne 0x435608
mov edx, dword [ebp - 0x68]
mov ecx, dword [edx + 4]
cmp ecx, dword [edx]
mov ecx, dword [ebp - 0xc]
setg bl
dec dword [ebp - 0xc]
cmp ecx, ebx
je 0x4355f8
xor ebx, ebx
inc ebx
mov edx, ebx
jmp 0x4355fd
xor ebx, ebx
mov edx, eax
inc ebx
mov ecx, dword [ebp - 0x68]
cmp edx, dword [ecx]
je 0x43560c
mov esi, eax
jmp 0x43560e
mov ecx, dword [ebp - 0x68]
inc ebx
mov esi, ebx
mov edx, dword [ebp - 0x14]
mov dword [ecx], esi
neg esi
xor ecx, ecx
cmp esi, edx
push 0xfffffffffffffffd
setg cl
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x14]
pop edx
cmp ecx, edx
jge 0x4357d0
mov dword [ebp - 0x2c], 0x642e5f0e
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x44], 0x86a67606
mov dword [ebp - 0x20], ebx
push 2
call fcn.00433d51
mov eax, 0x6ddf
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x435685
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0xd4]
mov dword [ecx + edx*4], 0xfffffff9
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x435672
mov esi, dword [ebp - 0x68]
cmp dword [esi + 4], eax
jne 0x4356e2
cmp dword [ebp - 0x20], eax
jne 0x43569b
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
add ecx, dword [esi + 4]
jne 0x4356aa
mov edi, eax
cmp dword [ebp - 0x14], eax
je 0x4356ac
mov edi, ebx
mov ecx, dword [ebp - 0x20]
xor edx, edx
cmp edi, ecx
mov ecx, dword [ebp - 0x20]
setl dl
xor ebx, ebx
cmp edx, dword [esi + 4]
setl bl
sub ebx, ecx
mov ecx, dword [ebp - 0xc]
cmp ebx, 0xcf2842c5
sbb edx, edx
xor ebx, ebx
inc edx
cmp edx, ecx
setge bl
add ebx, dword [esi + 4]
jne 0x4356df
mov edx, eax
jmp 0x4356e4
xor ebx, ebx
inc ebx
mov edx, ebx
dec dword [ebp - 0x44]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
cmp edx, 0xfffffffb
setge cl
or edx, 0xffffffff
xor ebx, ebx
cmp ecx, edx
mov ecx, dword [ebp - 0x20]
setne bl
xor edx, edx
cmp ebx, ecx
setne dl
xor ebx, ebx
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xd4]
cmp edx, dword [ecx]
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x2c]
setl bl
add ecx, ebx
add edx, ecx
je 0x43573a
cmp dword [ebp - 0xac], eax
je 0x43573a
xor ebx, ebx
inc ebx
mov edi, ebx
jmp 0x43573f
xor ebx, ebx
mov edi, eax
inc ebx
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x68]
imul edx, dword [ecx]
xor ecx, ecx
imul edx, edi
neg edx
cmp edx, dword [esi + 4]
mov edx, dword [ebp - 0x34]
setl cl
imul edx, ecx
neg edx
sbb edx, edx
inc edx
cmp edx, dword [ebp - 0x1c]
jge 0x435768
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xa4]
cmp dword [ebp - 0x34], ecx
jl 0x43577d
mov ecx, eax
cmp dword [ebp - 0xa8], eax
je 0x43577f
mov ecx, ebx
or edx, 0xffffffff
cmp ecx, edx
mov ecx, dword [ebp - 0xd4]
sbb esi, esi
xor edx, edx
neg esi
imul esi, dword [ecx]
add esi, 7
cmp esi, 0xf37d
setne dl
xor ecx, ecx
cmp edx, 0xf1d
setg cl
mov dword [ebp - 0x14], ecx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x4357be
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
lea ecx, [ebp - 0xd4]
call fcn.00433e23
mov edi, dword [ebp - 0x30]
xor eax, eax
jmp 0x4357e3
mov dword [ebp - 0x18], eax
jmp 0x4357dd
cmp dword [ebp - 0xc], eax
jne 0x4357e3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 8
jl 0x4357d5
mov dword [ebp - 0x14], eax
jmp 0x435802
mov dword [ebp - 0xc], eax
jmp 0x4357f9
mov edx, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x68]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x4357ed
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xa
jl 0x4357e8
lea ecx, [ebp - 0x68]
call fcn.00433e23
test edi, edi
jne 0x4358e9
cmp byte [ebp - 0x39], 0
mov edi, dword [ebp - 0x24]
je 0x43582f
cmp dword [ebp - 0x38], ebx
jne 0x43582f
mov ecx, dword [ebp + 8]
lea eax, [edi + 0x10]
add dword [ecx + 8], eax
mov ecx, dword [ebp - 8]
push edi
mov eax, dword [ecx]
mov dword [ebp - 0x1c], eax
mov eax, dword [ecx + 4]
add ecx, 8
mov dword [ebp - 0x38], eax
mov dword [ebp - 8], ecx
call fcn.004918a1
mov ebx, eax
xor eax, eax
pop ecx
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
lea eax, [ebp - 0x8c]
push eax
push edi
call fcn.0046bd3c
xor ecx, ecx
test edi, edi
mov edi, dword [ebp - 0x7c]
mov esi, ecx
jle 0x4358bf
mov eax, esi
and eax, 0x80000001
jns 0x435886
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp + 8]
mov dword [edx], eax
mov dword [edx + 4], ebx
test edi, edi
je 0x4358ed
mov ebx, dword [ebp + 8]
jmp 0x4358ef
xor ecx, ecx
jmp 0x4358ef
xor ecx, ecx
jmp 0x4358e0
or eax, 0xffffffff
xor edx, edx
mov dword [ebp - 0x1c], eax
inc edx
push 0xfffffffffffffffd
pop esi
mov dword [ebp + 8], esi
mov dword [ebp - 0x38], esi
mov dword [ebp + 8], eax
mov dword [ebp + 8], 0x85ed0657
mov dword [ebp + 8], 0x40f2fdad
mov dword [ebp + 8], 0xd81479b6
mov dword [ebp + 8], eax
mov dword [ebp + 8], 0xbb9c
mov dword [ebp + 8], ecx
jmp 0x435939
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x9c], 0x145c1747
inc dword [ebp + 8]
cmp dword [ebp + 8], edx
jl 0x435928
mov dword [ebp + 8], ecx
jmp 0x435954
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x1b4], 0x8f9e
inc dword [ebp + 8]
cmp dword [ebp + 8], edx
jl 0x435943
mov ecx, dword [ebp - 0x1c]
mov eax, ebx
mov ecx, dword [ebp - 0x38]
neg ecx
cmp ecx, 0xbeaa32b1
pop edi
sbb ecx, ecx
neg ecx
pop esi
mov dword [ebp - 0x9c], ecx
pop ebx
mov esp, ebp
pop ebp
ret