Function at 0x42839d
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1e4
push esi
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x428fc4
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x188], eax
lea eax, [ebp + 8]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x1a4], eax
lea eax, [ebp + 0x30]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x130]
movzx eax, byte [eax]
test eax, eax
je 0x42841d
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a0], eax
push 0x5c77
push 0x1a1e
push 1
push 0x2973
push dword [ebp - 0x1a0]
call fcn.004290ee
add esp, 0x14
jmp 0x428fbf
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x144]
movzx eax, byte [eax]
test eax, eax
je 0x428fad
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x34], 0x9e820f9
mov dword [ebp - 0x3c], 0
jmp 0x428482
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x428495
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xc], 0xffff
jmp 0x42847b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x1c4], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xc]
cmp dword [ebp + eax - 0xc], ecx
je 0x4284c7
mov dword [ebp - 0xac], 1
jmp 0x4284ce
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x428697
mov dword [ebp - 0x48], 0xfffffff9
mov dword [ebp - 0x170], 0xc3421ad7
mov dword [ebp - 4], 0
jmp 0x428502
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jg 0x428692
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x14], 0
jmp 0x428523
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x428573
mov dword [ebp - 0x44], 0x36544d18
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xc], 0
je 0x42853c
jmp 0x428573
mov dword [ebp - 0x44], 0
jmp 0x42854c
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jg 0x428571
push 1
push 0x4f22
push 0x62c1
push 0x1815
push 1
push 1
call fcn.00420661
add esp, 0x18
jmp 0x428545
jmp 0x42851c
cmp dword [ebp - 0x48], 0x88f4
jl 0x428588
mov dword [ebp - 0x104], 1
jmp 0x42858f
and dword [ebp - 0x104], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 1
je 0x4285a8
mov dword [ebp - 0x12c], 1
jmp 0x4285af
and dword [ebp - 0x12c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp eax, dword [ebp - 0x12c]
jg 0x4285cd
mov dword [ebp - 0xd8], 1
jmp 0x4285d4
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xd8], eax
je 0x4285e8
mov dword [ebp - 0x5c], 1
jmp 0x4285ec
and dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x48]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0xc]
cmp eax, dword [ebp - 0x14]
jl 0x428611
mov dword [ebp - 0xfc], 1
jmp 0x428618
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
neg eax
je 0x42862e
cmp dword [ebp - 0x14], 0
jne 0x42862e
and dword [ebp - 0x64], 0
jmp 0x428635
mov dword [ebp - 0x64], 1
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x64]
cmp dword [ebp - 0x104], eax
je 0x42864c
mov dword [ebp - 0x6c], 1
jmp 0x428650
and dword [ebp - 0x6c], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x6c]
jne 0x428664
mov dword [ebp - 0x10c], 1
jmp 0x42866b
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 0x76b5a7dd
jg 0x428680
mov dword [ebp - 0x74], 1
jmp 0x428684
and dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x170], eax
jmp 0x4284fb
jmp 0x42877f
mov dword [ebp - 0x88], 0xffffffff
mov dword [ebp - 4], 0
jmp 0x4286b1
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jg 0x42877f
mov dword [ebp - 0x114], 0xffffffff
mov dword [ebp - 0x154], 1
mov dword [ebp - 0x114], 0xa5c12438
cmp dword [ebp - 0x114], 0xfffffffe
jb 0x4286eb
mov dword [ebp - 0x7c], 1
jmp 0x4286ef
and dword [ebp - 0x7c], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov ecx, dword [ebp + ecx*4 - 0xc]
cmp dword [ebp + eax*4 - 0xc], ecx
jl 0x42871f
cmp dword [ebp - 0x88], 0
je 0x428716
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xc], 0
je 0x428716
xor eax, eax
jne 0x42871f
and dword [ebp - 0x11c], 0
jmp 0x428729
mov dword [ebp - 0x11c], 1
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x154]
jl 0x428747
mov dword [ebp - 0x124], 1
jmp 0x42874e
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
neg eax
cmp eax, dword [ebp - 0x88]
je 0x42876a
mov dword [ebp - 0x118], 1
jmp 0x428771
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x34], eax
jmp 0x4286aa
mov dword [ebp - 4], 1
jmp 0x42878f
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x4289eb
mov dword [ebp - 0x108], 0xfffffffb
mov dword [ebp - 0x15c], 0
push 1
lea ecx, [ebp - 0x1c0]
call fcn.00431e27
push 0x54c2
push 0x1133
push 1
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x1cc]
push eax
push 1
push 0x67f9
push 0x2ec0
push 0x7de4
push 1
push 0x16b9
push 1
push 1
push 0x3a5c
push 0x71b
call fcn.00420295
add esp, 0x3c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x1d4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0x5372
je 0x42882e
mov dword [ebp - 0x90], 1
jmp 0x428835
and dword [ebp - 0x90], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 4]
mov ecx, dword [ebp + ecx*4 - 0xc]
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0xc]
imul edx, dword [ebp - 0x90]
sub ecx, edx
cmp dword [ebp + eax - 0xc], ecx
jge 0x428867
mov dword [ebp - 0xe0], 1
jmp 0x42886e
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0xe0]
neg ecx
neg ecx
push 4
pop edx
imul edx, edx, 0
sub ecx, dword [ebp + edx - 0xc]
cmp dword [ebp + eax*4 - 0xc], ecx
jle 0x428897
mov dword [ebp - 0x98], 1
jmp 0x42889e
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov ecx, dword [ebp + ecx*4 - 0xc]
neg ecx
cmp dword [ebp + eax*4 - 0xc], ecx
jge 0x4288c5
mov dword [ebp - 0x174], 1
jmp 0x4288cc
and dword [ebp - 0x174], 0
mov dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xc]
mov dword [ebp - 0x1dc], eax
xor eax, eax
inc eax
cmp eax, 0x7b26
je 0x428905
mov dword [ebp - 0x17c], 1
jmp 0x42890c
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xc]
mov dword [ebp - 0x1e4], eax
mov eax, 0xeff9b111
test eax, eax
je 0x428937
mov eax, 0xca918ca7
test eax, eax
je 0x428937
mov dword [ebp - 0xa0], 1
jmp 0x42893e
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xc]
cmp dword [ebp - 0xa0], eax
je 0x42895f
cmp dword [ebp - 0x34], 0
je 0x42895f
mov dword [ebp - 0x164], 1
jmp 0x428966
and dword [ebp - 0x164], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xc]
add eax, 0x1bb55255
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xc]
jle 0x42899a
mov dword [ebp - 0xe8], 1
jmp 0x4289a1
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 0xf2fdd045
jne 0x4289b9
mov dword [ebp - 0xa8], 1
jmp 0x4289c0
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x34], eax
mov esi, dword [ebp - 0x34]
push 0
lea ecx, [ebp - 0x1c0]
call fcn.00431f15
mov dword [eax], esi
lea ecx, [ebp - 0x1c0]
call fcn.00431ef9
jmp 0x428788
push 4
push 0x2000
mov eax, dword [ebp - 0x4c]
push dword [eax + 0x50]
mov eax, dword [ebp - 0x4c]
push dword [eax + 0x34]
push 0x23f9
push 0x26f8
call fcn.00406edc
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
mov dword [ebp - 0x18], 0x27213ec7
mov dword [ebp - 0x30], 0xd06721f7
mov dword [ebp - 0x184], 0xa9b22354
mov dword [ebp - 0x38], 0
jmp 0x428a3e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x428a51
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x28], 0xfffffff8
jmp 0x428a37
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x28], 0x1d
jmp 0x428a76
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x28], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0xffffffe8
je 0x428bff
mov dword [ebp - 0xd0], 7
mov dword [ebp - 0x110], 0x93bd5de1
cmp dword [ebp - 0x18], 0
jne 0x428b3a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x28], 0xffffffff
je 0x428abe
mov dword [ebp - 0x128], 1
jmp 0x428ac5
and dword [ebp - 0x128], 0
cmp dword [ebp - 0x128], 1
jae 0x428ada
mov dword [ebp - 0xb0], 1
jmp 0x428ae1
and dword [ebp - 0xb0], 0
cmp dword [ebp - 0xb0], 0xffffffff
je 0x428af6
mov dword [ebp - 0xf0], 1
jmp 0x428afd
and dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 0xef6e229e
jae 0x428b15
mov dword [ebp - 0xb8], 1
jmp 0x428b1c
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x428b3a
and dword [ebp - 0xc0], 0
jmp 0x428b44
mov dword [ebp - 0xc0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd0]
add ecx, dword [ebp - 0xc0]
cmp dword [ebp + eax - 0x28], ecx
jle 0x428b68
mov dword [ebp - 0xf8], 1
jmp 0x428b6f
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0x3718
jl 0x428b87
mov dword [ebp - 0xc8], 1
jmp 0x428b8e
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xc8], eax
jge 0x428ba5
mov dword [ebp - 0x120], 1
jmp 0x428bac
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
dec eax
je 0x428bce
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
je 0x428bce
mov dword [ebp - 0x100], 1
jmp 0x428bd5
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0x100]
jge 0x428bec
mov dword [ebp - 0x80], 1
jmp 0x428bf0
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x80]
mov dword [ebp - 0x30], eax
jmp 0x428a61
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x30]
mov dword [ebp + eax - 0x28], ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 1
jne 0x428c2b
mov dword [ebp - 0x84], 1
jmp 0x428c32
and dword [ebp - 0x84], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x84], eax
jne 0x428c50
mov dword [ebp - 0x8c], 1
jmp 0x428c57
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x8c]
add eax, 0xdf11
cmp eax, dword [ebp - 0x18]
jl 0x428c73
mov dword [ebp - 0x94], 1
jmp 0x428c7a
and dword [ebp - 0x94], 0
cmp dword [ebp - 0x94], 0x7635
jge 0x428c92
mov dword [ebp - 0x9c], 1
jmp 0x428c99
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0x18]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x28], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1e0], eax
push 5
pop eax
test eax, eax
jne 0x428cd0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x28], 0
or eax, 0xffffffff
jne 0x428ce1
mov dword [ebp - 0xa4], 1
jmp 0x428ce8
and dword [ebp - 0xa4], 0
cmp dword [ebp - 0xa4], 0xfd90538e
je 0x428d00
cmp dword [ebp - 0x18], 0
jne 0x428d00
and dword [ebp - 0x54], 0
jmp 0x428d07
mov dword [ebp - 0x54], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x54], eax
jge 0x428d1b
mov dword [ebp - 0xb4], 1
jmp 0x428d22
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x50]
cmp dword [eax], 0
jne 0x428fab
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x1b4], 0xbecc33ba
mov dword [ebp - 0x1b0], 0xbecc33ba
mov dword [ebp - 0x1ac], 0xbecc33ba
mov dword [ebp - 0x1a8], 0xbecc33ba
mov dword [ebp - 0x2c], 0
jmp 0x428d79
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffea
jle 0x428f6b
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0xc4], 0x7263b0a6
mov dword [ebp - 0x16c], 0xa26c
mov dword [ebp - 0x20], 0
jmp 0x428dae
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff3
jl 0x428f66
mov dword [ebp - 0x10], 0xf390197f
mov dword [ebp - 0x58], 0x74a52027
mov dword [ebp - 0x10], 0xfffffffc
jmp 0x428dd6
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x18
jl 0x428f61
mov dword [ebp - 0x40], 0x5898
mov dword [ebp - 0xbc], 0x886a6c65
mov dword [ebp - 0xec], 0xf0adc109
cmp dword [ebp - 0x40], 0
je 0x428f10
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xffffffff
jbe 0x428e27
mov dword [ebp - 0xcc], 1
jmp 0x428e2e
and dword [ebp - 0xcc], 0
mov dword [ebp - 0xc4], 0x1a6b
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0xcc]
jne 0x428e52
mov dword [ebp - 0xd4], 1
jmp 0x428e59
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0xd4]
jne 0x428e70
mov dword [ebp - 0xdc], 1
jmp 0x428e77
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xdc], eax
jne 0x428e91
cmp dword [ebp - 0x2c], 0
jne 0x428e91
and dword [ebp - 0xe4], 0
jmp 0x428e9b
mov dword [ebp - 0xe4], 1
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0xe4]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xfffffffc
je 0x428ec0
mov dword [ebp - 0xf4], 1
jmp 0x428ec7
and dword [ebp - 0xf4], 0
cmp dword [ebp - 0xf4], 0xffff
jb 0x428ee8
mov eax, 0x7b69
test eax, eax
jne 0x428ee8
cmp dword [ebp - 0x10], 0
jne 0x428ee8
and dword [ebp - 0x60], 0
jmp 0x428eef
mov dword [ebp - 0x60], 1
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x16c]
jle 0x428f10
mov dword [ebp - 0x18c], 1
jmp 0x428f17
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x20], 3
jl 0x428f2f
mov dword [ebp - 0x68], 1
jmp 0x428f33
and dword [ebp - 0x68], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x68]
cmp eax, 0x68dd2ac3
je 0x428f49
mov dword [ebp - 0x70], 1
jmp 0x428f4d
and dword [ebp - 0x70], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x70]
mov dword [ebp + eax - 0x1b4], ecx
jmp 0x428dcf
jmp 0x428da7
jmp 0x428d72
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 3
mov eax, dword [ebp + eax - 0x1b4]
mov dword [ebp + ecx - 0x1b4], eax
push 4
push 0x2000
mov eax, dword [ebp - 0x4c]
push dword [eax + 0x50]
push 0
push 0x23f9
push 0x26f8
call fcn.00406edc
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
jmp 0x428fbf
mov byte [ebp - 0x19], 0
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x428fbf
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
jmp 0x4290e9
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x180], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x194], eax
lea eax, [ebp + 0x28]
mov dword [ebp - 0x19c], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x19c]
movzx eax, byte [eax]
test eax, eax
je 0x42908e
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x134]
movzx eax, byte [eax]
test eax, eax
je 0x42906c
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
movzx eax, byte [eax]
test eax, eax
je 0x42906a
push 0x177c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
jmp 0x42908c
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
jmp 0x4290e9
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
movzx eax, byte [eax]
test eax, eax
je 0x4290c5
mov byte [ebp - 0x1a], 0
push 0
push 0x70be
lea eax, [ebp - 0x1a]
push eax
push 0x4db6
call fcn.004244a6
add esp, 0x10
jmp 0x4290e9
push 0x104c
push 0
push 0
push 0
push 0
push 0x177a
push 0x1df9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
pop esi
mov esp, ebp
pop ebp
ret