Function at 0x4b9de0
Capabilities:
Get common file path
Get session user name
Shutdown system

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f286c
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1398
call fcn.0041ead0
mov eax, dword [0x70f200]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x135c], esi
xor eax, eax
push eax
push str.Quick_User_Manager
mov dword [ebp - 0x1370], eax
mov dword [ebp - 0x136c], eax
call fcn.0045f680
mov ecx, esi
call fcn.0043e530
test al, al
je 0x4bbc43
push 1
push str.https:__www.carifred.com_uvk_help_quick_user_manager.php
lea ecx, [esi + 0x119c]
call fcn.005dc260
mov edi, dword [esi + 0x14e4]
mov ecx, edi
movsd xmm1, qword [0x6edb08]
push 9
push str.Arial
push 0
push 0x190
mov dword [ebp - 0x1384], edi
call fcn.005c42b0
push dword [esi + 0x1438]
mov ecx, edi
call fcn.005c44a0
mov ecx, dword [esi + 0x100]
call fcn.005d2f10
push ecx
push 6
push 0xffffffffffffffff
push 0xff000000
push 0x4b
push 0x11d
push 5
mov edx, 0x1cc
mov dword [ebp - 0x12d4], eax
mov ecx, eax
call fcn.005d22b0
push ecx
mov ecx, dword [ebp - 0x12d4]
mov edx, 5
push 6
push 0xffffffffffffffff
push 0xff000000
push 0x1cc
push 0x16d
push 0x55
call fcn.005d22b0
push ecx
mov ecx, dword [ebp - 0x12d4]
mov edx, 0x177
push 6
push 0xffffffffffffffff
push 0xff000000
push 0x1cc
push 0x172
push 0x55
call fcn.005d22b0
push 0xffffffffffffffff
push 0xffffffffffffffff
push dword [ebp - 0x12d4]
mov ecx, edi
call fcn.005c44c0
mov ecx, dword [ebp - 0x12d4]
test ecx, ecx
je 0x4b9f3a
mov eax, dword [ecx]
push 1
call dword [eax]
movaps xmm0, xmmword [0x6edec0]
mov ecx, edi
push 0x400
movups xmmword [ebp - 0xb8], xmm0
movups xmmword [ebp - 0xa8], xmm0
movups xmmword [ebp - 0x98], xmm0
movups xmmword [ebp - 0x88], xmm0
movups xmmword [ebp - 0x78], xmm0
movups xmmword [ebp - 0x68], xmm0
movups xmmword [ebp - 0x58], xmm0
movups xmmword [ebp - 0x48], xmm0
movups xmmword [ebp - 0x38], xmm0
movups xmmword [ebp - 0x28], xmm0
call fcn.005c4340
push ecx
push 0xffffffffffffffff
push 0x40
push 0x40
push 8
push 8
push 0
push 0x40
push 0x40
push 0x8c
mov ecx, esi
call fcn.00436420
push eax
mov ecx, edi
call fcn.005c0240
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x1e
push 0x10e
push 0xa
push 0x5a
push str.Quick_User_Manager
mov ecx, edi
call fcn.005c0890
movsd xmm0, qword [0x6edb40]
sub esp, 0xc
movsd qword [esp + 4], xmm0
push 0
push ecx
push 0x190
push 0xffffffffffffffff
mov ecx, edi
call fcn.005beb10
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x14
push 0x154
push 0x28
push 0x5a
push str.All_the_user_account_setup_options_in_one_place.
mov ecx, edi
call fcn.005c0890
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x3c
push 0x5a
push 0
push 0x14
push 0x14
push 0xdc
mov ecx, esi
call fcn.00436420
push eax
mov ecx, edi
call fcn.005c0240
movsd xmm1, qword [0x6edb08]
mov ecx, edi
push 9
push str.Arial
push 4
push 0x190
call fcn.005c42b0
push dword [esi + 0x1438]
mov ecx, edi
call fcn.005c44a0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0xfa
push 0x3e
push 0x78
push str.Launch_Account_Profile_Fixer
call fcn.005c0890
push 0x7f89
push 0
mov dword [ebp - 0xb0], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
push eax
push 0xffffffffffffffff
mov ecx, edi
call fcn.005bebd0
push 0
push str.Repair_severe_issues_without_reinstalling_Windows
push 0xffffffffffffffff
mov ecx, esi
call fcn.0045b370
xor eax, eax
mov dword [ebp - 0x12d0], 3
push 0x5e
push eax
mov word [ebp - 0x12c0], ax
lea eax, [ebp - 0x12be]
push eax
mov dword [ebp - 0x12cc], 0
mov dword [ebp - 0x12c8], 0x10
mov dword [ebp - 0x12c4], 0x10
call fcn.00420090
add esp, 0xc
xor eax, eax
mov word [ebp - 0x1260], ax
push 0x1046
push eax
lea eax, [ebp - 0x125e]
push eax
call fcn.00420090
add esp, 0xc
mov ecx, edi
push 0
call fcn.005c44a0
movsd xmm1, qword [0x6edaf8]
push 9
push str.Arial
push 0
push 0x190
call fcn.005c42b0
push 0xffffff
mov ecx, edi
call fcn.005c44b0
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x14
push 0x1d6
push ecx
push 0x7d
mov ecx, esi
call fcn.004363b0
push eax
mov ecx, edi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x12
push 0x64
push 0x15
push 0x1ef
push str._a_href___Online_help__F1___a_
mov ecx, edi
call fcn.005c07e0
mov esi, eax
lea eax, [ebp - 0x12d0]
push eax
push 0
mov dword [ebp - 0xac], esi
push 0x702
push 0xffffffffffffffff
mov ecx, edi
call fcn.005befd0
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x32
push 0x1d6
push ecx
mov ecx, dword [ebp - 0x135c]
push 0x94
call fcn.004363b0
push eax
mov ecx, edi
call fcn.005c0240
mov ecx, dword [ebp - 0x135c]
push 0
push str.View_online_help.
push 0xffffffffffffffff
call fcn.0045b370
push ecx
push 0xffffffffffffffff
push 0x12
push 0x64
push 0x33
push 0x1ef
push str._a_href___Refresh_list__F5___a_
mov ecx, edi
call fcn.005c07e0
mov ecx, dword [ebp - 0x135c]
push 0
push str.Refresh_the_user_list.
push 0xffffffffffffffff
mov dword [ebp - 0xa8], eax
call fcn.0045b370
lea eax, [ebp - 0x12d0]
mov ecx, edi
push eax
push 0
push 0x702
push 0xffffffffffffffff
call fcn.005befd0
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x14
push 0x262
push ecx
mov ecx, dword [ebp - 0x135c]
push 0x80
call fcn.004363b0
push eax
mov ecx, edi
call fcn.005c0240
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x64
push 0x15
push 0x27b
push str.2.2.0.0
mov ecx, edi
call fcn.005c0890
push ecx
push 0xffffffffffffffff
push 0x14
push 0x14
push 0x32
push 0x262
push ecx
mov ecx, dword [ebp - 0x135c]
push 0xb3
mov dword [ebp - 0xa4], eax
call fcn.004363b0
push eax
mov ecx, edi
call fcn.005c0240
push ecx
push 0xffffffffffffffff
push 0x12
push 0x64
push 0x33
push 0x27b
push str._a_href___Home__a_
mov ecx, edi
call fcn.005c07e0
mov dword [ebp - 0xa0], eax
mov ecx, edi
lea eax, [ebp - 0x12d0]
push eax
push 0
push 0x702
push 0xffffffffffffffff
call fcn.005befd0
mov ecx, dword [ebp - 0x135c]
push 0
push str.Go_back_to_the_home_page.
push 0xffffffffffffffff
call fcn.0045b370
mov eax, dword [ebp - 0x135c]
mov ecx, edi
movsd xmm1, qword [0x6edb08]
push 9
push str.Arial
push 0
push 0x190
mov dword [eax + 0x11bc], esi
call fcn.005c42b0
push 0
mov ecx, edi
call fcn.005c44a0
push 0xffffff
call fcn.005c44b0
push 0x400
call fcn.005c4340
push 0x10020
push 0x1000000c
push 0x1bd
push 0x161
push 0x5f
push 0xc
push 0x62794c
push str.Account_nameUser_nameAccount_type
call fcn.005c0620
mov esi, eax
mov ecx, edi
push esi
mov dword [ebp - 0x94], esi
call fcn.005c5730
push 0
push 4
push 0x108e
push eax
mov dword [ebp - 0x1368], eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x135c]
push 0
push esi
call fcn.0043db50
lea eax, [ebp - 0x218]
mov dword [ebp - 0x218], 0x28
push eax
push 0
push 0x10a2
push dword [ebp - 0x1368]
xorps xmm0, xmm0
mov dword [ebp - 0x214], 3
mov dword [ebp - 0x210], 3
mov dword [ebp - 0x20c], 0x14a
mov dword [ebp - 0x208], 0x38
mov dword [ebp - 0x204], 2
movups xmmword [ebp - 0x200], xmm0
call dword [sym.imp.USER32.dll_SendMessageW]
xorps xmm0, xmm0
mov dword [ebp - 0x12d8], 0x101
lea ecx, [ebp - 0x134]
movq qword [ebp - 0x134], xmm0
mov dword [ebp - 0x12c], 0
call fcn.005dc5e0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x14c]
xorps xmm0, xmm0
mov dword [ebp - 0x144], 0
movq qword [ebp - 0x14c], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x1e8], 0
lea ecx, [ebp - 0x1f0]
movq qword [ebp - 0x1f0], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0xf4], 0
lea ecx, [ebp - 0xfc]
movq qword [ebp - 0xfc], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x138], 0
lea ecx, [ebp - 0x140]
movq qword [ebp - 0x140], xmm0
call fcn.005dc5e0
xorps xmm0, xmm0
mov dword [ebp - 0x180], 0
lea ecx, [ebp - 0x188]
movq qword [ebp - 0x188], xmm0
call fcn.005dc5e0
push 0x104
push 0
push 0
push 0x104
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 5
call fcn.005db9a0
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push str._shell32.dll
lea ecx, [ebp - 0x134]
call fcn.005da780
lea eax, [ebp - 0x12d8]
push eax
push 0
push 0
push dword [ebp - 0x12d8]
lea ecx, [ebp - 0x188]
call fcn.005db9a0
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
push 0x30
push 0xa0
lea ecx, [ebp - 0x134]
call fcn.005dc190
push eax
push 0
push esi
mov ecx, edi
call fcn.005bea70
push 0x30
push 0xa0
lea ecx, [ebp - 0x134]
call fcn.005dc190
push eax
push 1
push esi
mov ecx, edi
call fcn.005bea70
push fcn.005dc430
push fcn.005dc5e0
push 3
push 0xc
lea eax, [ebp - 0xf0]
push eax
call fcn.0041e804
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 6
call fcn.0059bed0
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x91
push 0x6b
push 0x18b
push str.User_account_name:
mov ecx, edi
mov dword [ebp - 0x1398], str.Guest
mov dword [ebp - 0x1394], 0x697e78
mov dword [ebp - 0x1390], str.Administrator
mov dword [ebp - 0x1360], 0xffffffff
call fcn.005c0890
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x91
push 0x89
push 0x18b
push str.User_display_name:
mov ecx, edi
call fcn.005c0890
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x12
push 0x91
push 0xa8
push 0x18b
push str.User_privilege:
mov ecx, edi
call fcn.005c0890
push 0
push 0x10800080
push 0x14
push 0xbe
push 0x69
push 0x21c
push 0
mov ecx, edi
call fcn.005c0a40
push 0x40
push eax
mov ecx, edi
mov dword [ebp - 0x90], eax
call fcn.005bd3f0
push 0
push 0x10800080
push 0x14
push 0xbe
push 0x87
push 0x21c
push 0
mov ecx, edi
call fcn.005c0a40
sub esp, 8
mov dword [ebp - 0x8c], eax
mov ecx, edi
push 0x10000003
push 0x14
push 0xbe
push 0xa5
push 0x21c
push str.Guest_nStandard_user_nAdministrator
call fcn.005c1650
push 0x800
push 0xffffffffffffffff
mov ecx, edi
mov dword [ebp - 0x88], eax
call fcn.005bda80
push 0xffffffffffffffff
mov esi, dword [ebp - 0x135c]
push 0xaf5030
push 0
push edi
push 0
push 0
push ecx
push 0xfa
push 0xe1
push 0x18b
push str._The_account_is_disabled
mov ecx, esi
call fcn.0045fc60
push 0xffffffffffffffff
push 0xaf5030
push 0
push edi
push 0
push 0
push ecx
push 0xfa
push 0xf5
push 0x18b
push str._The_account_is_locked_out
mov ecx, esi
mov dword [ebp - 0x7c], eax
call fcn.0045fc60
push 0xffffffffffffffff
push 0xaf5030
push 0
push edi
push 0
push 0
push ecx
push 0xfa
push 0x109
push 0x18b
push str._Password_can_not_be_changed
mov ecx, esi
mov dword [ebp - 0x78], eax
call fcn.0045fc60
push 0xffffffffffffffff
push 0xaf5030
push 0
push edi
push 0
push 0
push ecx
push 0xfa
push 0x11d
push 0x18b
push str._Password_is_not_required
mov ecx, esi
mov dword [ebp - 0x74], eax
call fcn.0045fc60
push 0xffffffffffffffff
push 0xaf5030
push 0
push edi
push 0
push 0
push ecx
push 0xfa
push 0x131
push 0x18b
push str._Password_never_expires
mov ecx, esi
mov dword [ebp - 0x70], eax
call fcn.0045fc60
push 0xffffffffffffffff
push 0xaf5030
push 0
push edi
push 0
push 0
push ecx
push 0xfa
push 0x145
push 0x18b
mov dword [ebp - 0x6c], eax
push str._Password_is_expired
mov ecx, esi
call fcn.0045fc60
push 0xffffffffffffffff
push 0xaf5030
push 0
push edi
push 0
push 0
push ecx
push 0xfa
push 0x159
push 0x18b
push str._Auto_logon_this_user
mov ecx, esi
mov dword [ebp - 0x68], eax
call fcn.0045fc60
push 0xffffffffffffffff
push 0xaf5030
push 0
push edi
push 0
push 0
push ecx
push 0x12c
push 0x16d
push 0x18b
push str._Remove_user_from_the_welcome_screen
mov ecx, esi
mov dword [ebp - 0x64], eax
call fcn.0045fc60
push ecx
push 0xffffffffffffffff
push 0x1a
push 0x14f
push 0x195
push 0x18b
push str.Move_Restore_user_personal_folders
mov ecx, edi
mov dword [ebp - 0x60], eax
call fcn.005c1a50
push ecx
push 0xffffffffffffffff
push 0x1a
push 0xa0
push 0x1b8
push 0x18b
push str.Save_changes
mov ecx, edi
mov dword [ebp - 0x44], eax
call fcn.005c1a50
push ecx
push 0xffffffffffffffff
push 0x1a
push 0xa0
push 0x1b8
push 0x23a
push str.Change_picture
mov ecx, edi
mov dword [ebp - 0x40], eax
call fcn.005c1a50
push ecx
push 0xffffffffffffffff
push 0x1a
push 0xa0
push 0x1db
push 0x18b
push str.Set_password
mov ecx, edi
mov dword [ebp - 0x3c], eax
call fcn.005c1a50
push ecx
push 0xffffffffffffffff
push 0x1a
push 0xa0
push 0x1db
push 0x23a
push str.Remove_password
mov ecx, edi
mov dword [ebp - 0x38], eax
call fcn.005c1a50
mov dword [ebp - 0x34], eax
push ecx
push 0xffffffffffffffff
push 0x1a
push 0xa0
push 0x1fe
push 0x18b
push str.Delete_user_account
mov ecx, edi
call fcn.005c1a50
push ecx
push 0xffffffffffffffff
push 0x1a
push 0xa0
push 0x1fe
push 0x23a
push str.Create_user_account
mov ecx, edi
mov dword [ebp - 0x30], eax
call fcn.005c1a50
mov dword [ebp - 0x2c], eax
mov eax, 0xa
mov dword [ebp - 0x12d4], eax
mov ecx, dword [ebp + eax*4 - 0xb8]
test ecx, ecx
jle 0x4ba8fe
push 0x40
push ecx
mov ecx, edi
call fcn.005bd3f0
mov eax, dword [ebp - 0x12d4]
inc eax
mov dword [ebp - 0x12d4], eax
cmp eax, 0x23
jl 0x4ba8e3
lea eax, [ebp - 0xb8]
mov ecx, esi
push eax
call fcn.004b9ae0
push 0
mov ecx, edi
mov dword [ebp - 0x138c], eax
call fcn.005c4340
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xa
push 0xa
push 0xffffffffffffffec
push 0xffffffffffffffec
push 0
call fcn.005c0890
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xa
push 0xa
push 0xffffffffffffffec
push 0xffffffffffffffec
push 0
mov ecx, edi
mov esi, eax
call fcn.005c0890
mov word [ebp - 0xc2], ax
mov ecx, 0x70
mov eax, 0x1b
mov word [ebp - 0xca], cx
mov word [ebp - 0xbe], ax
mov ecx, 0x74
mov ax, word [ebp - 0xa0]
mov word [ebp - 0xbc], ax
lea eax, [ebp - 0xcc]
push 3
mov word [ebp - 0xc4], cx
mov ecx, edi
push eax
mov byte [ebp - 0xcc], 1
mov word [ebp - 0xc8], si
mov byte [ebp - 0xc6], 1
mov byte [ebp - 0xc0], 1
call fcn.005c47a0
mov esi, dword [ebp - 0x135c]
mov ecx, esi
mov byte [ebp - 0x1352], 0
call fcn.0045f300
nop word [eax + eax]
push 1
mov ecx, esi
call fcn.004771c0
test eax, eax
jne 0x4ba9d0
xorps xmm0, xmm0
mov dword [ebp - 0x120], eax
movq qword [ebp - 0x128], xmm0
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], eax
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 7
call fcn.0059df90
mov dword [ebp - 0x12d4], eax
test eax, eax
je 0x4bab42
sub esp, 8
mov ecx, esi
push 0x8c
push 0x190
push 0
push edi
push 1
push str.Quick_User_Manager_found_one_or_more_corrupted_profile_registry_keys._r_n_r_nDo_you_want_to_fix_them_
call fcn.0043e2e0
cmp eax, 1
jne 0x4bab42
sub esp, 8
mov ecx, esi
push 0x46
push 0x1c2
push edi
push str.Fixing_corrupted_user_profiles...
call fcn.0043da60
xor eax, eax
mov dword [ebp - 0x1358], 0
cmp dword [ebp - 0x12d4], eax
jbe 0x4baad0
mov edi, dword [ebp - 0x12d4]
nop word [eax + eax]
lea ecx, [eax + 1]
mov dword [ebp - 0x1364], ecx
cmp dword [ebp - 0x128], eax
ja 0x4baa99
mov dword [ebp - 0x128], ecx
jmp 0x4baa9f
mov dword [ebp - 0x1364], ecx
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0x120]
lea ecx, [eax + ecx*4]
call fcn.005dc190
mov ecx, eax
call fcn.0059da40
movzx eax, al
add dword [ebp - 0x1358], eax
mov eax, dword [ebp - 0x1364]
cmp eax, edi
jb 0x4baa80
mov edi, dword [ebp - 0x1384]
lea ecx, [esi + 0x14f0]
call fcn.005b6b30
mov eax, dword [ebp - 0x12d4]
sub esp, 8
mov ecx, esi
cmp dword [ebp - 0x1358], eax
jne 0x4bab29
push 0xb4
push 0x1c2
push 0
push edi
push 1
push str.The_corrupted_user_profiles_were_successfully_fixed._Changes_will_be_effective_after_you_log_out_of_the_affected_profile_s_._r_n_r_nDo_you_want_to_log_out_now_
call fcn.0043e2e0
cmp eax, 1
jne 0x4bab42
push 0
push 0
mov byte [esi + 0x1f80], 0
call dword [sym.imp.USER32.dll_ExitWindowsEx]
mov byte [ebp - 0x1352], 0
jmp 0x4bbbab
push 0x8c
push 0x190
push 0
push edi
push 4
push str.Sorry__some_of_the_corrupted_profile_registry_keys_could_not_be_fixed
call fcn.0043e2e0
push 0
mov ecx, esi
call fcn.004771c0
test eax, eax
je 0x4bbb98
mov eax, dword [esi + 0x14a8]
lea ecx, [esi + 0x14a8]
cmp eax, 0xfffffffa
je 0x4bbb98
cmp dword [esi + 0x14d8], edi
jne 0x4bab42
cmp eax, dword [ebp - 0xa8]
jne 0x4bab88
lea eax, [ebp - 0xb8]
mov ecx, esi
push eax
call fcn.004b9ae0
jmp 0x4bab42
cmp eax, dword [ebp - 0xa0]
je 0x4bbb8e
cmp eax, 0xffffffeb
jne 0x4babd6
mov ecx, dword [ebp - 0x94]
cmp dword [esi + 0x14b4], ecx
jne 0x4bac81
movsd xmm0, qword [0x6edb08]
comisd xmm0, xmmword [esi + 8]
jbe 0x4bab42
cmp dword [ebp - 0x138c], 8
jle 0x4bab42
push 0
push ecx
mov ecx, esi
call fcn.0043e280
jmp 0x4bab42
cmp eax, 0xffffffd2
jne 0x4bac5c
push 2
push 0xffffffffffffffff
push 0x100c
push dword [ebp - 0x1368]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x1360], eax
cmp eax, 0xffffffff
jne 0x4bab42
push 0
push 0
push dword [ebp - 0x90]
mov ecx, edi
call fcn.005bcd30
push 0
push 0
push dword [ebp - 0x8c]
mov ecx, edi
call fcn.005bcd30
mov eax, 0xb
mov dword [ebp - 0x1364], eax
mov ecx, dword [ebp + eax*4 - 0xb8]
test ecx, ecx
jle 0x4bac4b
push 0x48
push ecx
mov ecx, edi
call fcn.005bd3f0
mov eax, dword [ebp - 0x1364]
inc eax
mov dword [ebp - 0x1364], eax
cmp eax, 0x23
jl 0x4bac30
jmp 0x4bab42
cmp eax, 0xffffffd3
jne 0x4bac81
mov eax, dword [esi + 0x14b8]
mov ecx, esi
push eax
mov dword [ebp - 0x1360], eax
lea eax, [ebp - 0xb8]
push eax
call fcn.004b94d0
jmp 0x4bab42
mov edx, dword [ebp - 0xb0]
cmp eax, edx
jne 0x4bac99
push 0
mov ecx, esi
call fcn.0046ace0
jmp 0x4bab42
cmp eax, dword [ebp - 0x7c]
je 0x4bba80
cmp eax, dword [ebp - 0x78]
je 0x4bba80
mov ecx, dword [ebp - 0x60]
cmp eax, ecx
jne 0x4bad08
push 4
push ecx
mov ecx, edi
call fcn.005bc500
mov ecx, edi
test eax, eax
je 0x4bacd1
push 0x48
push dword [ebp - 0x64]
call fcn.005bd3f0
jmp 0x4bab42
push 4
push dword [ebp - 0x7c]
call fcn.005bc500
test eax, eax
jne 0x4bab42
push 4
push dword [ebp - 0x78]
mov ecx, edi
call fcn.005bc500
test eax, eax
jne 0x4bab42
push 0x20
push dword [ebp - 0x64]
mov ecx, edi
call fcn.005bd3f0
jmp 0x4bab42
cmp eax, dword [ebp - 0x44]
jne 0x4bae10
push dword [ebp - 0x90]
mov ecx, edi
call fcn.005bc230
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dbeb0
test al, al
jne 0x4bab42
push 0
push ecx
push dword [ebp - 0x8c]
xorps xmm0, xmm0
mov dword [ebp - 0x1bc], 0
mov ecx, edi
movq qword [ebp - 0x1c4], xmm0
call fcn.005bc230
add esp, 4
lea ecx, [ebp - 0x1c4]
push eax
call fcn.005dc570
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x11c]
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
push dword [ebp - 0x2c]
movups xmmword [ebp - 0x11c], xmm0
push dword [ebp - 0xb0]
movups xmmword [ebp - 0x10c], xmm0
push edi
call fcn.005b8800
mov edx, dword [ebp - 0x1360]
push ecx
mov ecx, dword [ebp - 0x1368]
call fcn.005c9a40
push eax
lea ecx, [ebp - 0x1388]
call fcn.005c6590
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 0xb
call fcn.005dc190
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc190
push eax
push dword [ebp - 0x1388]
mov ecx, esi
call fcn.004b59b0
lea ecx, [ebp - 0x1388]
call fcn.005c6580
lea ecx, [ebp - 0x11c]
call fcn.005b8790
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 4], 7
call fcn.005dc430
jmp 0x4bab42
cmp eax, dword [ebp - 0x40]
jne 0x4bb2a7
push dword [ebp - 0x90]
mov ecx, edi
call fcn.005bc230
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dbeb0
test al, al
jne 0x4bab42
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
lea ecx, [ebp - 0x1e4]
push dword [ebp - 0x2c]
movups xmmword [ebp - 0x1e4], xmm0
push dword [ebp - 0xb0]
movups xmmword [ebp - 0x1d4], xmm0
push edi
call fcn.005b8800
sub esp, 8
mov byte [ebp - 4], 0xc
mov ecx, esi
push 0x8c
push 0x190
push 0
push edi
push 1
push str.Are_you_sure_you_want_to_apply_the_seleted_settings_to_this_user_account_
call fcn.0043e2e0
test eax, eax
jne 0x4baea9
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 7
call fcn.005b8790
jmp 0x4bab42
lea eax, [ebp - 0x12d4]
mov dword [ebp - 0x1358], 0
push eax
push 3
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0x12d4], 0
call fcn.005dc190
push eax
push 0
call dword [sym.imp.NETAPI32.dll_NetUserGetInfo]
test eax, eax
jne 0x4bb0b6
push eax
push eax
push 0x147
push dword [ebp - 0x88]
mov ecx, edi
call fcn.005befd0
mov esi, dword [ebp - 0x12d4]
mov edi, eax
cmp edi, dword [esi + 0xc]
je 0x4baf3a
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc190
mov edx, edi
mov ecx, eax
call fcn.0059c2d0
mov ecx, dword [ebp - 0x1358]
test al, al
mov esi, dword [ebp - 0x12d4]
mov eax, 2
cmove ecx, eax
mov dword [ebp - 0x1358], ecx
push dword [ebp - 0x8c]
mov ecx, 0x1d
lea edi, [ebp - 0x1350]
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x1384]
mov ecx, edi
call fcn.005bc230
push eax
lea ecx, [ebp - 0x140]
call fcn.005dc1c0
push dword [ebp - 0x132c]
lea ecx, [ebp - 0x140]
call fcn.005dc480
test al, al
je 0x4baf8c
lea ecx, [ebp - 0x140]
call fcn.005dc190
mov dword [ebp - 0x132c], eax
push 4
push dword [ebp - 0x7c]
mov ecx, edi
call fcn.005bc500
test eax, eax
je 0x4bafa5
or dword [ebp - 0x1338], 2
jmp 0x4bafac
and dword [ebp - 0x1338], 0xfffffffd
push 4
push dword [ebp - 0x78]
mov ecx, edi
call fcn.005bc500
test eax, eax
je 0x4bafc5
or dword [ebp - 0x1338], 0x10
jmp 0x4bafcc
and dword [ebp - 0x1338], 0xffffffef
push 4
push dword [ebp - 0x74]
mov ecx, edi
call fcn.005bc500
test eax, eax
je 0x4bafe5
or dword [ebp - 0x1338], 0x40
jmp 0x4bafec
and dword [ebp - 0x1338], 0xffffffbf
push 4
push dword [ebp - 0x70]
mov ecx, edi
call fcn.005bc500
test eax, eax
je 0x4bb005
or dword [ebp - 0x1338], 0x20
jmp 0x4bb00c
and dword [ebp - 0x1338], 0xffffffdf
push 4
push dword [ebp - 0x6c]
mov ecx, edi
call fcn.005bc500
test eax, eax
mov eax, dword [ebp - 0x1338]
je 0x4bb029
or eax, 0x10000
jmp 0x4bb02e
and eax, 0xfffeffff
mov ecx, dword [ebp - 0x12d4]
mov dword [ebp - 0x1338], eax
mov dword [ebp - 0x174], 0
cmp eax, dword [ecx + 0x18]
jne 0x4bb069
mov eax, dword [ebp - 0x132c]
cmp eax, dword [ecx + 0x24]
jne 0x4bb069
push ecx
call dword [sym.imp.NETAPI32.dll_NetApiBufferFree]
mov esi, dword [ebp - 0x135c]
mov eax, dword [ebp - 0x1358]
jmp 0x4bb0b8
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x1350]
push eax
push 3
lea ecx, [ebp - 0xfc]
call fcn.005dc190
push eax
push 0
call dword [sym.imp.NETAPI32.dll_NetUserSetInfo]
push dword [ebp - 0x12d4]
mov esi, eax
call dword [sym.imp.NETAPI32.dll_NetApiBufferFree]
mov eax, dword [ebp - 0x1358]
test esi, esi
mov esi, dword [ebp - 0x135c]
je 0x4bb0b8
or eax, 4
mov dword [ebp - 0x1358], eax
jmp 0x4bb0b8
xor eax, eax
mov dword [ebp - 0x136c], eax
call fcn.0059bc70
xorps xmm0, xmm0
mov byte [ebp - 0x1351], al
lea ecx, [ebp - 0x170]
movq qword [ebp - 0x170], xmm0
mov dword [ebp - 0x168], 0
call fcn.0059bdf0
push 8
mov byte [ebp - 4], 0xd
mov ecx, edi
push dword [ebp - 0x64]
call fcn.005bc500
test eax, eax
je 0x4bb14a
lea ecx, [ebp - 0xfc]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x170]
call fcn.005dc4c0
test al, al
je 0x4bb14a
cmp byte [ebp - 0x1351], 0
je 0x4bb14a
xor edx, edx
mov ecx, 0x62439c
call fcn.0059b9e0
mov ecx, dword [ebp - 0x1358]
or ecx, 8
test al, al
cmovne ecx, dword [ebp - 0x1358]
mov dword [ebp - 0x1358], ecx
jmp 0x4bb1f5
push 4
push dword [ebp - 0x64]
mov ecx, edi
call fcn.005bc500
test eax, eax
je 0x4bb1f5
lea ecx, [ebp - 0xfc]
call fcn.005dc190
push eax
lea ecx, [ebp - 0x170]
call fcn.005dc480
test al, al
jne 0x4bb181
cmp byte [ebp - 0x1351], al
jne 0x4bb1f5
mov edx, dword [ebp - 0x1360]
push ecx
mov ecx, dword [ebp - 0x1368]
call fcn.005c9a40
push 0
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x1364], eax
call fcn.005dc190
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc190
push eax
push dword [ebp - 0x1364]
mov ecx, esi
call fcn.004b8c30
mov ecx, dword [ebp - 0x1358]
or ecx, 8
test al, al
mov eax, dword [ebp - 0x1364]
cmovne ecx, dword [ebp - 0x136c]
mov dword [ebp - 0x1358], ecx
test eax, eax
je 0x4bb1f5
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
mov eax, dword [ebp - 0x1358]
mov dword [ebp - 0x1358], eax
push 4
push dword [ebp - 0x60]
mov ecx, edi
call fcn.005bc500
cmp eax, 4
lea ecx, [ebp - 0xfc]
setne byte [ebp - 0x1351]
call fcn.005dc190
mov dl, byte [ebp - 0x1351]
mov ecx, eax
call fcn.0059a910
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 0x1351], al
call fcn.005b8600
push dword [ebp - 0x1360]
lea eax, [ebp - 0xb8]
mov ecx, esi
push eax
call fcn.004b94d0
mov ecx, dword [ebp - 0x1358]
mov eax, str.Some_of_the_selected_settings_could_not_be_applied._r_nThe_fields_were_updated_to_reflect_the_successfull_changes.
or ecx, 0x10
cmp byte [ebp - 0x1351], 0
cmovne ecx, dword [ebp - 0x1358]
test ecx, ecx
mov ecx, str.The_selected_settings_were_successfully_applied.
cmove eax, ecx
sub esp, 8
mov ecx, esi
push 0x8c
push 0x190
push 0
push edi
push 4
push eax
call fcn.0043e2e0
lea ecx, [ebp - 0x170]
call fcn.005dc430
lea ecx, [ebp - 0x1e4]
mov byte [ebp - 4], 7
call fcn.005b8790
jmp 0x4bab42
cmp eax, dword [ebp - 0x3c]
jne 0x4bb3c8
push dword [ebp - 0x90]
mov ecx, edi
call fcn.005bc230
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dbeb0
test al, al
jne 0x4bab42
push 0
push ecx
push dword [ebp - 0x8c]
xorps xmm0, xmm0
mov dword [ebp - 0x1b0], 0
mov ecx, edi
movq qword [ebp - 0x1b8], xmm0
call fcn.005bc230
add esp, 4
lea ecx, [ebp - 0x1b8]
push eax
call fcn.005dc570
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x11c]
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
push dword [ebp - 0x2c]
movups xmmword [ebp - 0x11c], xmm0
push dword [ebp - 0xb0]
movups xmmword [ebp - 0x10c], xmm0
push edi
call fcn.005b8800
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0xf
call fcn.005dc190
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc190
push eax
mov ecx, esi
call fcn.004b8260
lea ecx, [ebp - 0xfc]
call fcn.005dc190
mov ecx, eax
call fcn.0059b8a0
push eax
lea ecx, [ebp - 0x1380]
call fcn.005c6510
mov eax, dword [ebp - 0x1380]
test eax, eax
je 0x4bb39e
push eax
push eax
push dword [ebp - 0x1360]
mov ecx, edi
push dword [ebp - 0x94]
call fcn.005ba580
lea ecx, [ebp - 0x1380]
call fcn.005c6500
lea ecx, [ebp - 0x11c]
call fcn.005b8790
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 7
call fcn.005dc430
jmp 0x4bab42
cmp eax, dword [ebp - 0x38]
jne 0x4bb4fd
push dword [ebp - 0x90]
mov ecx, edi
call fcn.005bc230
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dbeb0
test al, al
jne 0x4bab42
push 0
push ecx
push dword [ebp - 0x8c]
xorps xmm0, xmm0
mov dword [ebp - 0x1a4], 0
mov ecx, edi
movq qword [ebp - 0x1ac], xmm0
call fcn.005bc230
add esp, 4
lea ecx, [ebp - 0x1ac]
push eax
call fcn.005dc570
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x11c]
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
push dword [ebp - 0x2c]
movups xmmword [ebp - 0x11c], xmm0
push dword [ebp - 0xb0]
movups xmmword [ebp - 0x10c], xmm0
push edi
call fcn.005b8800
mov edx, dword [ebp - 0x1360]
push ecx
mov ecx, dword [ebp - 0x1368]
call fcn.005c9a40
push eax
lea ecx, [ebp - 0x137c]
call fcn.005c6590
push 1
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x12
call fcn.005dc190
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc190
push eax
push dword [ebp - 0x137c]
mov ecx, esi
call fcn.004b8c30
lea ecx, [ebp - 0x11c]
mov esi, eax
call fcn.005b8600
test esi, esi
mov esi, dword [ebp - 0x135c]
je 0x4bb4d3
push dword [ebp - 0x1360]
lea eax, [ebp - 0xb8]
mov ecx, esi
push eax
call fcn.004b94d0
lea ecx, [ebp - 0x137c]
call fcn.005c6580
lea ecx, [ebp - 0x11c]
call fcn.005b8790
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 7
call fcn.005dc430
jmp 0x4bab42
cmp eax, dword [ebp - 0x34]
jne 0x4bb69f
push dword [ebp - 0x90]
mov ecx, edi
call fcn.005bc230
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dbeb0
test al, al
jne 0x4bab42
push 0
push ecx
push dword [ebp - 0x8c]
xorps xmm0, xmm0
mov dword [ebp - 0x198], 0
mov ecx, edi
movq qword [ebp - 0x1a0], xmm0
call fcn.005bc230
add esp, 4
lea ecx, [ebp - 0x1a0]
push eax
call fcn.005dc570
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x11c]
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
push dword [ebp - 0x2c]
movups xmmword [ebp - 0x11c], xmm0
push dword [ebp - 0xb0]
movups xmmword [ebp - 0x10c], xmm0
push edi
call fcn.005b8800
sub esp, 8
mov byte [ebp - 4], 0x14
xorps xmm0, xmm0
mov dword [ebp - 0x150], 0
lea ecx, [ebp - 0x1a0]
movq qword [ebp - 0x158], xmm0
push 0
push 0
push 0
push str._account_
call fcn.005dc190
push eax
push str.want_to_remove_the_password_for_the
push str.use_the__Set_password__feature_instead._r_n_r_nAre_you_sure_you
push str.in_this_account_will_be_lost._r_n_r_nTo_prevent_this_situation_
push str.EFS_encrypted_files__personal_certificates_and_stored_passwords
push str.If_you_remove_the_password_for_this_account__all
lea ecx, [ebp - 0x158]
call fcn.005dc520
sub esp, 8
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x158]
push 0xdc
push 0x190
push 0
push edi
push 1
call fcn.005dc190
push eax
mov ecx, esi
call fcn.0043e2e0
cmp eax, 1
jne 0x4bb675
push 0
push 0
lea ecx, [ebp - 0xfc]
call fcn.005dc190
mov edx, eax
lea ecx, [esi + 0x14a8]
call fcn.0059c220
test eax, eax
mov ecx, str.An_error_occurred_while_removing_the_password_for_this_account.
mov eax, str.The_password_for_the_selected_account_was_successfully_removed.
cmove ecx, eax
push ecx
lea ecx, [ebp - 0x158]
call fcn.005dc510
sub esp, 8
lea ecx, [ebp - 0x158]
push 0x8c
push 0x190
push 0
push edi
push 4
call fcn.005dc190
push eax
mov ecx, esi
call fcn.0043e2e0
lea ecx, [ebp - 0x158]
call fcn.005dc430
lea ecx, [ebp - 0x11c]
call fcn.005b8790
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 7
call fcn.005dc430
jmp 0x4bab42
cmp eax, dword [ebp - 0x30]
jne 0x4bb844
push dword [ebp - 0x90]
mov ecx, edi
call fcn.005bc230
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc1c0
mov ecx, eax
call fcn.005dbeb0
test al, al
jne 0x4bab42
push 0
push ecx
push dword [ebp - 0x8c]
xorps xmm0, xmm0
mov dword [ebp - 0x18c], 0
mov ecx, edi
movq qword [ebp - 0x194], xmm0
call fcn.005bc230
add esp, 4
lea ecx, [ebp - 0x194]
push eax
call fcn.005dc570
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x11c]
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
push dword [ebp - 0x2c]
movups xmmword [ebp - 0x11c], xmm0
push dword [ebp - 0xb0]
movups xmmword [ebp - 0x10c], xmm0
push edi
call fcn.005b8800
mov edx, dword [ebp - 0x1360]
push ecx
mov ecx, dword [ebp - 0x1368]
call fcn.005c9a40
push eax
lea ecx, [ebp - 0x1378]
call fcn.005c6590
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 0x18
call fcn.005dc190
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc190
push eax
push dword [ebp - 0x1378]
mov ecx, esi
call fcn.004b7b60
ret
invalid
dec dword [ebp - 0x11b73]
dec dword [ebx - 0x31891710]
invalid
invalid
test esi, esi
je 0x4bb7fd
mov esi, dword [ebp - 0x94]
mov ecx, edi
push 0
push dword [ebp - 0x1360]
push esi
call fcn.005bb970
push 2
push 0xffffffffffffffff
push esi
mov ecx, edi
call fcn.005bb4c0
mov dword [ebp - 0x1360], eax
cmp eax, 0xffffffff
jne 0x4bb82d
push 0
push 0
push dword [ebp - 0x90]
mov ecx, edi
call fcn.005bcd30
push 0
push 0
push dword [ebp - 0x8c]
mov ecx, edi
call fcn.005bcd30
mov esi, 0xb
mov eax, dword [ebp + esi*4 - 0xb8]
test eax, eax
jle 0x4bb7f7
push 0x48
push eax
mov ecx, edi
call fcn.005bd3f0
inc esi
cmp esi, 0x23
jl 0x4bb7e2
mov esi, dword [ebp - 0x135c]
lea ecx, [ebp - 0x1378]
call fcn.005c6580
lea ecx, [ebp - 0x11c]
call fcn.005b8790
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 7
call fcn.005dc430
jmp 0x4bab42
mov esi, dword [ebp - 0x135c]
mov ecx, esi
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.004b94d0
jmp 0x4bb803
mov ecx, dword [ebp - 0x2c]
cmp eax, ecx
jne 0x4bab42
push 0xd
push dword [esi + 0x11bc]
xorps xmm0, xmm0
push ecx
push edx
push edi
lea ecx, [ebp - 0x11c]
movups xmmword [ebp - 0x11c], xmm0
movups xmmword [ebp - 0x10c], xmm0
call fcn.005b8800
xorps xmm0, xmm0
mov dword [ebp - 0x15c], 0
lea ecx, [ebp - 0x164]
movq qword [ebp - 0x164], xmm0
call fcn.005dc5e0
lea eax, [ebp - 0xfc]
mov byte [ebp - 4], 0x1a
push eax
mov ecx, esi
call fcn.004b6e10
mov dword [ebp - 0x136c], eax
cmp eax, 2
jbe 0x4bb8d2
lea ecx, [ebp - 0x164]
call fcn.005dc430
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 7
call fcn.005b8790
jmp 0x4bab42
push 0
push dword [ebp - 0x94]
lea ecx, [ebp - 0xfc]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0
call fcn.005dc190
push eax
mov ecx, edi
call fcn.005bbb80
mov dword [ebp - 0x1358], eax
cmp eax, 0xffffffff
jne 0x4bb91f
lea ecx, [ebp - 0x164]
call fcn.005dc430
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 7
call fcn.005b8790
jmp 0x4bab42
push 1
lea ecx, [ebp - 0xfc]
call fcn.005dc190
mov ecx, dword [ebp - 0x1358]
push eax
push ecx
push dword [ebp - 0x94]
mov ecx, edi
call fcn.005ba4f0
push str.User_Account
lea ecx, [ebp - 0x14c]
call fcn.005dc510
mov eax, dword [ebp - 0x136c]
lea ecx, [ebp - 0x14c]
sub esp, 0xc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + eax*4 - 0x1398]
call fcn.005da510
push 2
lea ecx, [ebp - 0x14c]
call fcn.005dc190
push eax
push dword [ebp - 0x1358]
mov ecx, edi
push dword [ebp - 0x94]
call fcn.005ba4f0
lea ecx, [ebp - 0xfc]
call fcn.005dc190
mov ecx, eax
call fcn.0059b8a0
push eax
lea ecx, [ebp - 0x1374]
call fcn.005c6510
mov eax, dword [ebp - 0x1374]
test eax, eax
je 0x4bb9da
push eax
push eax
push dword [ebp - 0x1358]
mov ecx, edi
push dword [ebp - 0x94]
call fcn.005ba580
movsd xmm0, qword [0x6edab8]
mov eax, 0x14
comisd xmm0, xmmword [esi + 8]
mov ecx, dword [ebp - 0x1358]
mov dword [ebp - 0x1d4], ecx
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x1cc], ecx
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x1c8], ecx
mov ecx, 0x10
mov dword [ebp - 0x178], 2
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x1d0], 1
cmova eax, ecx
mov dword [ebp - 0x1d8], eax
lea eax, [ebp - 0x1d8]
push eax
push 0
push 0x10a4
push dword [ebp - 0x1368]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x1374]
call fcn.005c6500
lea ecx, [ebp - 0x164]
call fcn.005dc430
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 7
call fcn.005b8790
jmp 0x4bab42
push 4
push dword [ebp - 0x7c]
mov ecx, edi
call fcn.005bc500
test eax, eax
jne 0x4bbb7d
push 4
push dword [ebp - 0x78]
mov ecx, edi
call fcn.005bc500
test eax, eax
jne 0x4bbb7d
push 1
push dword [ebp - 0x1360]
mov ecx, edi
push dword [ebp - 0x94]
call fcn.005bb510
push eax
lea ecx, [ebp - 0xfc]
call fcn.005dc1c0
lea ecx, [ebp - 0x13a4]
call fcn.0059bdf0
mov esi, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xfc]
mov eax, dword [ebp - 0x1370]
or eax, 1
mov dword [ebp - 0x1370], eax
mov dword [ebp - 0x136c], eax
call fcn.005dc190
push eax
mov ecx, esi
call fcn.005dc4c0
test al, al
je 0x4bbb16
call fcn.0059bc70
mov byte [ebp - 0x1351], 1
test al, al
jne 0x4bbb1d
mov byte [ebp - 0x1351], 0
mov dword [ebp - 4], 7
mov eax, dword [ebp - 0x1370]
test al, 1
je 0x4bbb42
and eax, 0xfffffffe
lea ecx, [ebp - 0x13a4]
mov dword [ebp - 0x1370], eax
call fcn.005dc430
cmp byte [ebp - 0x1351], 0
mov esi, dword [ebp - 0x64]
je 0x4bbb58
push 4
push esi
mov ecx, edi
call fcn.005bd3f0
push 4
push dword [ebp - 0x60]
mov ecx, edi
call fcn.005bc500
test eax, eax
jne 0x4bbb72
push 0x20
push esi
mov ecx, edi
call fcn.005bd3f0
mov esi, dword [ebp - 0x135c]
jmp 0x4bab42
push 0x48
push dword [ebp - 0x64]
mov ecx, edi
call fcn.005bd3f0
jmp 0x4bab42
mov al, 1
mov byte [ebp - 0x1352], al
jmp 0x4bbb9e
mov al, byte [ebp - 0x1352]
xor al, 1
mov ecx, esi
movzx eax, al
push eax
call fcn.0045f260
mov edi, dword [ebp - 0x120]
test edi, edi
je 0x4bbbe2
push fcn.005dc430
mov byte [ebp - 4], 0x1b
lea esi, [edi - 4]
push dword [esi]
push 0xc
push edi
call fcn.0041e45b
mov eax, dword [edi - 4]
lea eax, [eax + eax*2]
lea eax, [eax*4 + 4]
push eax
push esi
call fcn.0041e1c8
add esp, 8
push fcn.005dc430
push 3
push 0xc
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 5
push eax
call fcn.0041e45b
lea ecx, [ebp - 0x188]
call fcn.005dc430
lea ecx, [ebp - 0x140]
call fcn.005dc430
lea ecx, [ebp - 0xfc]
call fcn.005dc430
lea ecx, [ebp - 0x1f0]
call fcn.005dc430
lea ecx, [ebp - 0x14c]
call fcn.005dc430
lea ecx, [ebp - 0x134]
call fcn.005dc430
mov al, byte [ebp - 0x1352]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041e1b5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret