Function at 0x42a3fa
Capabilities:
Create pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x284
push esi
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x42afd7
mov dword [ebp - 0x10], 0xa61928c1
mov dword [ebp - 0x180], 8
mov dword [ebp - 0xac], 0
mov byte [ebp - 0x25], 0
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x42a446
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
mov dword [ebp - 0x10], 8
jmp 0x42a456
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe9
jne 0x42a655
push 3
lea ecx, [ebp - 0x190]
call fcn.004133eb
mov dword [ebp - 0xfc], 2
mov dword [ebp - 0x14], 0
jmp 0x42a487
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x42a4a3
push dword [ebp - 0x14]
lea ecx, [ebp - 0x190]
call fcn.004134d9
mov dword [eax], 3
jmp 0x42a480
mov dword [ebp - 0x14], 0
jmp 0x42a4b3
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x42a4c9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x274], 0x9281c1d9
jmp 0x42a4ac
cmp dword [ebp - 0x10], 0
je 0x42a4e4
cmp dword [ebp - 0x180], 0
je 0x42a4e4
mov dword [ebp - 0x194], 1
jmp 0x42a4eb
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x260], eax
mov eax, 0xd5de1fc6
test eax, eax
jne 0x42a518
push 0
lea ecx, [ebp - 0x190]
call fcn.004134d9
cmp dword [eax], 0
jne 0x42a518
and dword [ebp - 0x10c], 0
jmp 0x42a522
mov dword [ebp - 0x10c], 1
push 0
lea ecx, [ebp - 0x190]
call fcn.004134d9
mov ecx, dword [ebp - 0x10c]
cmp ecx, dword [eax]
jg 0x42a545
mov dword [ebp - 0x1a8], 1
jmp 0x42a54c
and dword [ebp - 0x1a8], 0
mov esi, dword [ebp - 0x180]
push 0
lea ecx, [ebp - 0x190]
call fcn.004134d9
sub esi, dword [eax]
mov dword [ebp - 0xfc], esi
jne 0x42a578
cmp dword [ebp - 0x10], 0
jne 0x42a578
and dword [ebp - 0x9c], 0
jmp 0x42a582
mov dword [ebp - 0x9c], 1
cmp dword [ebp - 0x9c], 0xfffffffb
jl 0x42a597
mov dword [ebp - 0x118], 1
jmp 0x42a59e
and dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0xdb5cabfc
jae 0x42a5b6
mov dword [ebp - 0xa4], 1
jmp 0x42a5bd
and dword [ebp - 0xa4], 0
push 0
lea ecx, [ebp - 0x190]
call fcn.004134d9
mov ecx, dword [ebp - 0xa4]
cmp ecx, dword [eax]
jne 0x42a5e0
mov dword [ebp - 0x120], 1
jmp 0x42a5e7
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jg 0x42a60d
mov dword [ebp - 0x128], 1
jmp 0x42a614
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x128], eax
je 0x42a62b
mov dword [ebp - 0xb4], 1
jmp 0x42a632
and dword [ebp - 0xb4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb4]
mov dword [ebp + eax - 0x274], ecx
lea ecx, [ebp - 0x190]
call fcn.004134bd
jmp 0x42a44f
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x60], 9
push 2
lea ecx, [ebp - 0x234]
call fcn.004133eb
push 3
lea ecx, [ebp - 0x1e4]
call fcn.004133eb
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x18], 0
jmp 0x42a699
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x42a6b5
push dword [ebp - 0x18]
lea ecx, [ebp - 0x234]
call fcn.004134d9
mov dword [eax], 0x14c405b4
jmp 0x42a692
mov dword [ebp - 0x18], 0
jmp 0x42a6c5
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x42a6e1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1e4]
call fcn.004134d9
mov dword [eax], 0xdcba
jmp 0x42a6be
cmp dword [ebp - 0x60], 0
je 0x42a700
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x42a6fb
push 0
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
jmp 0x42a858
mov dword [ebp - 0xc4], 0x61f66568
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x138], 0xfffffffb
mov dword [ebp - 0x44], 0
jmp 0x42a72b
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x42a73e
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x80], 1
jmp 0x42a724
push 0
lea ecx, [ebp - 0x1e4]
call fcn.004134d9
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x130]
mov dword [ecx], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x264], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x80], 0
je 0x42a7b9
cmp dword [ebp - 0xc4], 0
je 0x42a79c
push 1
lea ecx, [ebp - 0x234]
call fcn.004134d9
cmp dword [eax], 0
jne 0x42a79c
and dword [ebp - 0xbc], 0
jmp 0x42a7a6
mov dword [ebp - 0xbc], 1
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
mov esi, dword [ebp - 0xc4]
push 0
lea ecx, [ebp - 0x1e4]
call fcn.004134d9
cmp esi, dword [eax]
jge 0x42a7dc
mov dword [ebp - 0x140], 1
jmp 0x42a7e3
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x140]
jge 0x42a7fa
mov dword [ebp - 0x1ac], 1
jmp 0x42a801
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x60], 0
je 0x42a81c
mov eax, 0xa5b04204
test eax, eax
je 0x42a81c
mov dword [ebp - 0xcc], 1
jmp 0x42a823
and dword [ebp - 0xcc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x80]
cmp dword [ebp - 0xcc], eax
jge 0x42a83e
mov dword [ebp - 0x58], 1
jmp 0x42a842
and dword [ebp - 0x58], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x58]
mov dword [ebp + eax - 0x80], ecx
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x78]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
lea ecx, [ebp - 0x1e4]
call fcn.004134bd
lea ecx, [ebp - 0x234]
call fcn.004134bd
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x228], 0xc700
mov dword [ebp - 0x224], 0xc700
mov dword [ebp - 0x220], 0xc700
mov dword [ebp - 0x21c], 0xc700
lea ecx, [ebp - 0x65]
call fcn.004134e8
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x228]
push eax
lea ecx, [ebp - 0x27c]
call fcn.004134eb
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1f0]
call fcn.00413497
mov dword [ebp - 0x1a0], 0xffffffff
mov dword [ebp - 0x34], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jne 0x42a913
mov dword [ebp - 0x168], 1
jmp 0x42a91a
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x1c], 0xe19e95d1
jbe 0x42a93e
cmp dword [ebp - 0x1c], 0
je 0x42a93e
mov dword [ebp - 0xd4], 1
jmp 0x42a945
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xd4], eax
jg 0x42a95c
mov dword [ebp - 0x150], 1
jmp 0x42a963
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x150], eax
jl 0x42a97a
mov dword [ebp - 0xdc], 1
jmp 0x42a981
and dword [ebp - 0xdc], 0
push 1
lea ecx, [ebp - 0x1f0]
call fcn.004134d9
mov ecx, dword [ebp - 0xdc]
cmp ecx, dword [eax]
jle 0x42a9a4
mov dword [ebp - 0x158], 1
jmp 0x42a9ab
and dword [ebp - 0x158], 0
cmp dword [ebp - 0x158], 0x6d21
jge 0x42a9d5
push 1
lea ecx, [ebp - 0x1f0]
call fcn.004134d9
cmp dword [eax], 0
je 0x42a9d5
mov dword [ebp - 0xe4], 1
jmp 0x42a9dc
and dword [ebp - 0xe4], 0
cmp dword [ebp - 0xe4], 8
je 0x42a9f1
mov dword [ebp - 0x160], 1
jmp 0x42a9f8
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x160], eax
jg 0x42aa12
mov dword [ebp - 0xec], 1
jmp 0x42aa19
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x168]
cmp eax, dword [ebp - 0x34]
je 0x42aa3d
mov dword [ebp - 0xf4], 1
jmp 0x42aa44
and dword [ebp - 0xf4], 0
push 1
lea ecx, [ebp - 0x1f0]
call fcn.004134d9
mov ecx, dword [ebp - 0xf4]
sub ecx, dword [eax]
je 0x42aa90
mov dword [ebp - 0x34], 0
jmp 0x42aa6b
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff6
jne 0x42aa8e
mov byte [ebp - 0x2f], 0
movzx eax, byte [ebp - 0x2f]
test eax, eax
je 0x42aa8c
push 0x23ad
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
jmp 0x42aa64
jmp 0x42aac4
mov byte [ebp - 0x30], 0
movzx eax, byte [ebp - 0x30]
test eax, eax
je 0x42aac4
push 0
push 0x8cf
push 0x2496
push 0x742
push 0x150e
push 0x6ed
push 0x53c
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
lea ecx, [ebp - 0x1f0]
call fcn.004134bd
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 4], 0xf82d83d7
mov dword [ebp - 0x24], 0xd5467356
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0xc], 0
jmp 0x42ab00
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x42ab16
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x90], 0xffffffff
jmp 0x42aaf9
mov dword [ebp - 0xc], 0
jmp 0x42ab26
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x42ab3c
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x200], 0xffffffff
jmp 0x42ab1f
mov dword [ebp - 0xc], 0
jmp 0x42ab4c
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x42ab62
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x244], 0x76fbfcc0
jmp 0x42ab45
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x90], 0
je 0x42ad42
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x90], 0
jne 0x42abec
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x90], 0
jne 0x42aba5
cmp dword [ebp - 4], 0
jne 0x42aba5
and dword [ebp - 0x170], 0
jmp 0x42abaf
mov dword [ebp - 0x170], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x90]
cmp dword [ebp - 0x170], eax
jle 0x42abd0
mov dword [ebp - 0x178], 1
jmp 0x42abd7
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x42abec
and dword [ebp - 0x70], 0
jmp 0x42abf3
mov dword [ebp - 0x70], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x70]
mov dword [ebp + eax - 0x200], ecx
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x90]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x90]
je 0x42ac34
mov dword [ebp - 0x144], 1
jmp 0x42ac3b
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0x6c0b
je 0x42ac53
mov dword [ebp - 0x104], 1
jmp 0x42ac5a
and dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0x3ee6
jne 0x42ac72
mov dword [ebp - 0x184], 1
jmp 0x42ac79
and dword [ebp - 0x184], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x184]
sub ecx, dword [ebp + eax - 0x90]
mov dword [ebp - 0x94], ecx
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x94]
mov dword [ebp + eax - 0x244], ecx
mov eax, dword [ebp - 0x94]
add eax, 0x279e56
push 4
pop ecx
imul ecx, ecx, 3
cmp dword [ebp + ecx - 0x90], eax
jle 0x42accb
mov dword [ebp - 0x14c], 1
jmp 0x42acd2
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x14c], eax
jge 0x42ace9
mov dword [ebp - 0x114], 1
jmp 0x42acf0
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x114]
je 0x42ad07
mov dword [ebp - 0x1d8], 1
jmp 0x42ad0e
and dword [ebp - 0x1d8], 0
mov eax, 0x6899
cmp eax, 1
jl 0x42ad24
mov dword [ebp - 0x16c], 1
jmp 0x42ad2b
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
sub eax, 7
je 0x42ad42
mov dword [ebp - 0x11c], 1
jmp 0x42ad49
and dword [ebp - 0x11c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x90]
imul eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 4]
jle 0x42ad6d
mov dword [ebp - 0x154], 1
jmp 0x42ad74
and dword [ebp - 0x154], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x154]
mov dword [ebp + eax - 0x90], ecx
mov dword [ebp - 4], 0
jmp 0x42ad97
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jg 0x42af9c
mov dword [ebp - 0x48], 0x57e8f534
mov dword [ebp - 0x2c], 3
jmp 0x42adb8
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x42af97
mov dword [ebp - 0x20], 0x5375bb79
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x90], 0
je 0x42af66
mov dword [ebp - 0x134], 0xa8b036c8
mov dword [ebp - 0x24], 0
jmp 0x42adf4
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x42af64
mov eax, dword [ebp - 0x48]
neg eax
mov ecx, dword [ebp - 4]
cmp eax, dword [ebp + ecx*4 - 0x200]
je 0x42ae18
mov dword [ebp - 0x5c], 1
jmp 0x42ae1c
and dword [ebp - 0x5c], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x90], ecx
cmp dword [ebp - 0x5c], 0xfffffffb
jae 0x42ae3b
mov dword [ebp - 0x124], 1
jmp 0x42ae42
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x124], eax
jl 0x42ae59
mov dword [ebp - 0x17c], 1
jmp 0x42ae60
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x200]
sub eax, dword [ebp - 0x17c]
cmp eax, 0x6604
jge 0x42ae83
mov dword [ebp - 0x1c0], 1
jmp 0x42ae8a
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x244], 0x14c7c747
jne 0x42aecd
mov dword [ebp - 0x12c], 1
jmp 0x42aed4
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0xffffffff
jae 0x42aee6
mov dword [ebp - 0x64], 1
jmp 0x42aeea
and dword [ebp - 0x64], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x244], ecx
cmp dword [ebp - 0x64], 0
jne 0x42af13
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x90], 0
jne 0x42af13
and dword [ebp - 0x15c], 0
jmp 0x42af1d
mov dword [ebp - 0x15c], 1
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x15c]
sub ecx, dword [ebp + eax*4 - 0x200]
sub ecx, dword [ebp - 0x48]
imul ecx, dword [ebp - 0x20]
cmp ecx, dword [ebp - 0x134]
jle 0x42af48
mov dword [ebp - 0x174], 1
jmp 0x42af4f
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x200], ecx
jmp 0x42aded
jmp 0x42af92
mov dword [ebp - 0x20], 3
jmp 0x42af76
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x42af92
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x244]
mov dword [ebp + ecx*4 - 0x90], eax
jmp 0x42af6f
jmp 0x42adb1
jmp 0x42ad90
mov eax, dword [ebp - 0x40]
mov dword [eax], 0
jmp 0x42afb2
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
mov eax, dword [ebp - 0x40]
cmp dword [eax], 2
jge 0x42afd2
mov eax, dword [ebp - 0x40]
push dword [eax]
mov ecx, dword [ebp - 0x1b0]
call fcn.004134d9
mov dword [eax], 0xd69f4288
jmp 0x42afa7
jmp 0x42b488
mov dword [ebp - 0x214], 0xfffffffd
mov dword [ebp - 0x210], 0xfffffffd
mov dword [ebp - 0x20c], 0xfffffffd
mov dword [ebp - 0x208], 0xfffffffd
lea ecx, [ebp - 0x79]
call fcn.004134e8
push eax
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x284]
call fcn.004134eb
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1bc]
call fcn.00413497
mov dword [ebp - 0x38], 0x184c506d
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x38], 3
jmp 0x42b052
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x42b13c
mov dword [ebp - 0x3c], 0xfffffffb
mov dword [ebp - 0x3c], 0
jmp 0x42b073
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x42b137
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1bc]
call fcn.004134d9
cmp dword [eax], 0
jne 0x42b0b8
push 0
lea ecx, [ebp - 0x1bc]
call fcn.004134d9
push 3
lea ecx, [ebp - 0x1bc]
call fcn.004134d9
cmp dword [eax], 0xffffffff
jl 0x42b0b8
and dword [ebp - 0x13c], 0
jmp 0x42b0c2
mov dword [ebp - 0x13c], 1
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x13c], eax
jle 0x42b0d9
mov dword [ebp - 0x164], 1
jmp 0x42b0e0
and dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0x8659
je 0x42b108
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1bc]
call fcn.004134d9
cmp dword [eax], 0
jne 0x42b108
and dword [ebp - 0xf8], 0
jmp 0x42b112
mov dword [ebp - 0xf8], 1
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1d0], eax
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x42b132
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
jmp 0x42b06c
jmp 0x42b04b
lea ecx, [ebp - 0x1bc]
call fcn.004134bd
mov dword [ebp - 0x74], 1
push 3
lea ecx, [ebp - 0x54]
call fcn.004133eb
mov dword [ebp - 0x6c], 0xd7d2
mov dword [ebp - 0xc0], 0xfffffffe
push 1
lea ecx, [ebp - 0x1cc]
call fcn.004133eb
mov dword [ebp - 0xd0], 0x21c760fc
mov dword [ebp - 0xe0], 0xd777
mov dword [ebp - 8], 0
jmp 0x42b19a
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x42b1b3
push dword [ebp - 8]
lea ecx, [ebp - 0x54]
call fcn.004134d9
mov dword [eax], 0x5934215e
jmp 0x42b193
mov dword [ebp - 8], 0
jmp 0x42b1c3
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x42b1d9
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x19c], 0x69376522
jmp 0x42b1bc
mov dword [ebp - 8], 0
jmp 0x42b1e9
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x42b205
push dword [ebp - 8]
lea ecx, [ebp - 0x1cc]
call fcn.004134d9
mov dword [eax], 0xae5685e9
jmp 0x42b1e2
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x248], eax
push 0
lea ecx, [ebp - 0x54]
call fcn.004134d9
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x258], eax
push 0
lea ecx, [ebp - 0x54]
call fcn.004134d9
mov esi, eax
push 0
lea ecx, [ebp - 0x54]
call fcn.004134d9
mov ecx, dword [esi]
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x74]
jne 0x42b24c
mov dword [ebp - 0x100], 1
jmp 0x42b253
and dword [ebp - 0x100], 0
push 0
lea ecx, [ebp - 0x54]
call fcn.004134d9
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [eax]
jne 0x42b273
mov dword [ebp - 0x108], 1
jmp 0x42b27a
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
dec eax
je 0x42b295
cmp dword [ebp - 0x6c], 0
je 0x42b295
mov dword [ebp - 0x110], 1
jmp 0x42b29c
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x110], eax
je 0x42b2b3
mov dword [ebp - 0x98], 1
jmp 0x42b2ba
and dword [ebp - 0x98], 0
push 2
lea ecx, [ebp - 0x54]
call fcn.004134d9
mov ecx, dword [ebp - 0x98]
add ecx, dword [eax]
neg ecx
mov dword [ebp - 0xa0], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa0]
mov dword [ebp + eax - 0x19c], ecx
cmp dword [ebp - 0xa0], 0xfffffffa
jg 0x42b2fc
mov dword [ebp - 0xa8], 1
jmp 0x42b303
and dword [ebp - 0xa8], 0
mov esi, dword [ebp - 0xa8]
neg esi
push 2
lea ecx, [ebp - 0x54]
call fcn.004134d9
cmp esi, dword [eax]
jl 0x42b332
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x19c], 0
jne 0x42b332
and dword [ebp - 0xb0], 0
jmp 0x42b33c
mov dword [ebp - 0xb0], 1
cmp dword [ebp - 0xb0], 0xffffffff
je 0x42b351
mov dword [ebp - 0xb8], 1
jmp 0x42b358
and dword [ebp - 0xb8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19c]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0xc0], eax
jl 0x42b382
mov dword [ebp - 0xc8], 1
jmp 0x42b389
and dword [ebp - 0xc8], 0
push 0
lea ecx, [ebp - 0x1cc]
call fcn.004134d9
mov ecx, dword [ebp - 0xc8]
sub ecx, dword [eax]
mov dword [ebp - 0xd0], ecx
mov esi, dword [ebp - 0xd0]
push 0
lea ecx, [ebp - 0x1cc]
call fcn.004134d9
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x1cc]
call fcn.004134d9
cmp esi, dword [eax]
jge 0x42b3dd
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x42b3dd
mov dword [ebp - 0xd8], 1
jmp 0x42b3e4
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xe0], eax
mov esi, dword [ebp - 0xe0]
push 0
lea ecx, [ebp - 0x54]
call fcn.004134d9
cmp dword [eax], esi
je 0x42b410
mov dword [ebp - 0xe8], 1
jmp 0x42b417
and dword [ebp - 0xe8], 0
imul esi, dword [ebp - 0xe8], 0x6ea1
push 0
lea ecx, [ebp - 0x54]
call fcn.004134d9
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x54]
call fcn.004134d9
cmp esi, dword [eax]
je 0x42b448
mov dword [ebp - 0xf0], 1
jmp 0x42b44f
and dword [ebp - 0xf0], 0
push 1
lea ecx, [ebp - 0x54]
call fcn.004134d9
mov esi, dword [ebp - 0xf0]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x54]
call fcn.004134d9
mov dword [eax], esi
lea ecx, [ebp - 0x1cc]
call fcn.004134bd
lea ecx, [ebp - 0x54]
call fcn.004134bd
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
pop esi
mov esp, ebp
pop ebp
ret