Function at 0x1007c7e0
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1017c54a
mov eax, dword fs:[0]
push eax
sub esp, 0x374
mov eax, dword [0x10207514]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x2b4], esi
mov eax, dword [ebp + 8]
xor edi, edi
mov dword [ebp - 0x2b0], edi
push eax
lea ecx, [ebp - 0x124]
call fcn.10007960
mov dword [ebp - 4], edi
cmp dword [ebp - 0x114], edi
je 0x1007f82c
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x7c], esi
test esi, esi
je 0x1007c856
mov eax, dword [esi]
test eax, eax
je 0x1007c856
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [ebp - 4], 1
lea edx, [ebp - 0x124]
cmp dword [ebp - 0x110], 8
cmovae edx, dword [ebp - 0x124]
push dword [ebp - 0x114]
lea ecx, [ebp - 0x10c]
call fcn.1010a390
add esp, 4
mov byte [ebp - 4], 2
add esi, 0x14
mov ecx, dword [ebp - 0xfc]
cmp ecx, dword [esi + 0x10]
jne 0x1007c8fb
mov edx, esi
cmp dword [esi + 0x14], 8
jb 0x1007c89e
mov edx, dword [esi]
lea ecx, [ebp - 0x10c]
cmp dword [ebp - 0xf8], 8
cmovae ecx, dword [ebp - 0x10c]
call fcn.100ffc80
test al, al
je 0x1007c8f5
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10c]
call fcn.10009450
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x2b4]
test eax, eax
je 0x1007f82c
mov eax, dword [eax]
test eax, eax
je 0x1007c8e9
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x7c], 0
jmp 0x1007f82c
mov ecx, dword [ebp - 0xfc]
lea eax, [ebp - 0x10c]
cmp esi, eax
je 0x1007c91c
cmp dword [ebp - 0xf8], 8
cmovae eax, dword [ebp - 0x10c]
push ecx
push eax
mov ecx, esi
call fcn.100094b0
mov esi, dword [ebp - 0x2b4]
mov dword [ebp - 0x2c4], esi
lea edx, [ebp - 0x124]
lea ecx, [ebp - 0xf4]
call fcn.100ff3f0
mov byte [ebp - 4], 3
push 0x74
push 0
lea eax, [ebp - 0x2a8]
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x20], 0x100
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.10132e60
mov byte [ebp - 4], 4
xorps xmm0, xmm0
movups xmmword [ebp - 0x70], xmm0
movq qword [ebp - 0x60], xmm0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov byte [ebp - 4], 8
mov byte [ebp - 4], 9
push ecx
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x2a8]
call fcn.10132fa0
mov byte [ebp - 0x2c9], al
mov dword [ebp - 4], 8
test al, al
je 0x1007f6e9
cmp byte [ebp - 0x68], 7
jne 0x1007f6e9
push 0x101bb4ee
push str.switch
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007f681
push 0x101bb4ee
push str.switch
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
test eax, eax
je 0x1007f681
push 0x101bff46
push str.sub_switch
lea ecx, [ebp - 0x70]
call fcn.101310c0
cmp byte [eax + 8], 7
jne 0x1007cc64
xorps xmm0, xmm0
movups xmmword [ebp - 0x40], xmm0
movq qword [ebp - 0x30], xmm0
push 0x101bff46
push str.sub_switch
lea ecx, [ebp - 0x70]
call fcn.101310c0
push eax
lea ecx, [ebp - 0x40]
call fcn.1012fe90
mov byte [ebp - 4], 0xb
push 0x101bff62
push str.enable_adprotect_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007ca9f
push 0x101bff62
push str.enable_adprotect_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
cmp eax, 1
sete al
mov byte [esi + 0x2c], al
push 0x101bff7a
push str.enable_fsmon_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007cade
push 0x101bff7a
push str.enable_fsmon_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
cmp eax, 1
sete al
mov byte [esi + 0x2d], al
push 0x101bfedf
push str.enable_downloader_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007cb1d
push 0x101bfedf
push str.enable_downloader_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
cmp eax, 1
sete al
mov byte [esi + 0x2e], al
push 0x101bfef7
push str.enable_Inslpt_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007cb5c
push 0x101bfef7
push str.enable_Inslpt_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
cmp eax, 1
sete al
mov byte [esi + 0x2f], al
push 0x101bff1a
push str.enable_empty_recycle_bin_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007cb9b
push 0x101bff1a
push str.enable_empty_recycle_bin_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
cmp eax, 1
sete al
mov byte [esi + 0x30], al
push 0x101bff3a
push str.enable_eyeprotection_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007cbda
push 0x101bff3a
push str.enable_eyeprotection_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
cmp eax, 1
sete al
mov byte [esi + 0x31], al
push 0x101bffef
push str.enable_filedelete_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007cc19
push 0x101bffef
push str.enable_filedelete_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
cmp eax, 1
sete al
mov byte [esi + 0x32], al
push 0x101c000f
push str.enable_rightclick_mgr_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007cc58
push 0x101c000f
push str.enable_rightclick_mgr_recommend
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
cmp eax, 1
sete al
mov byte [esi + 0x33], al
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x40]
call fcn.10130030
lea eax, [esi + 0x9c]
mov dword [ebp - 0x2c4], eax
mov ecx, eax
call fcn.100838c0
push 0x101c0024
push str.downloader_parameter
lea ecx, [ebp - 0x70]
call fcn.101310c0
cmp byte [eax + 8], 6
jne 0x1007ce8d
push 0x101c0024
push str.downloader_parameter
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov edx, eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
lea eax, [ebp - 0x28]
push eax
mov ecx, edx
call fcn.10131b40
movlpd qword [ebp - 0x1c], xmm0
lea eax, [ebp - 0x1c]
push eax
mov ecx, edx
call fcn.10131b80
mov edi, dword [ebp - 0x2c4]
mov eax, dword [ebp - 0x28]
cmp byte [ebp - 0x24], 0
je 0x1007ccde
mov cl, byte [ebp - 0x18]
jmp 0x1007cce4
cmp eax, dword [ebp - 0x1c]
sete cl
test cl, cl
jne 0x1007ce81
xorps xmm0, xmm0
movups xmmword [ebp - 0x94], xmm0
movq qword [ebp - 0x84], xmm0
add eax, 0x18
push eax
lea ecx, [ebp - 0x94]
call fcn.1012fe90
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
xor esi, esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], 7
xor eax, eax
mov word [ebp - 0x40], ax
mov byte [ebp - 4], 0xd
push 0x101c0033
push str.business_id
lea ecx, [ebp - 0x94]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007cd7b
push 0x101c0033
push str.business_id
lea ecx, [ebp - 0x94]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
mov dword [ebp - 0x20], eax
push 0x101bff83
push str.exe_url
lea ecx, [ebp - 0x94]
call fcn.101310c0
cmp byte [eax + 8], 4
jne 0x1007ce36
push 0x101bff83
push str.exe_url
lea ecx, [ebp - 0x94]
call fcn.101310c0
lea ecx, [ebp - 0x58]
push ecx
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0xe
mov edx, eax
lea ecx, [ebp - 0xac]
call fcn.100ff360
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x40]
call fcn.100127c0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xac]
call fcn.10009450
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x1007ce21
inc edx
mov ecx, dword [ebp - 0x58]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007ce17
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007ce17
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
dec eax
cmp eax, 7
ja 0x1007ce59
test esi, esi
je 0x1007ce59
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x20]
push eax
mov ecx, edi
call fcn.100839a0
mov ecx, eax
call fcn.10007880
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x40]
call fcn.10009450
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x94]
call fcn.10130030
lea ecx, [ebp - 0x28]
call fcn.100125a0
jmp 0x1007ccd0
mov edi, dword [ebp - 0x2b0]
mov esi, dword [ebp - 0x2b4]
lea eax, [esi + 0xa4]
mov esi, dword [eax]
push dword [esi + 4]
mov ecx, eax
call fcn.10084700
mov edx, dword [ebp - 0x2b4]
mov eax, dword [edx + 0xa4]
mov dword [eax + 4], esi
mov eax, dword [edx + 0xa4]
mov dword [eax], esi
mov eax, dword [edx + 0xa4]
mov dword [eax + 8], esi
mov dword [edx + 0xa8], 0
push 0x101bffa0
push str.downloader_parameter_scene_2
lea ecx, [ebp - 0x70]
call fcn.101310c0
cmp byte [eax + 8], 6
jne 0x1007d0e0
push 0x101bffa0
push str.downloader_parameter_scene_2
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov edx, eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
lea eax, [ebp - 0x28]
push eax
mov ecx, edx
call fcn.10131b40
movlpd qword [ebp - 0x1c], xmm0
lea eax, [ebp - 0x1c]
push eax
mov ecx, edx
call fcn.10131b80
mov edi, dword [ebp - 0x1c]
nop
mov eax, dword [ebp - 0x28]
cmp byte [ebp - 0x24], 0
je 0x1007cf2e
mov cl, byte [ebp - 0x18]
jmp 0x1007cf33
cmp eax, edi
sete cl
test cl, cl
jne 0x1007d0da
xorps xmm0, xmm0
movups xmmword [ebp - 0x94], xmm0
movq qword [ebp - 0x84], xmm0
add eax, 0x18
push eax
lea ecx, [ebp - 0x94]
call fcn.1012fe90
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
xor esi, esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x2c], 7
xor eax, eax
mov word [ebp - 0x40], ax
mov byte [ebp - 4], 0x11
push 0x101c0033
push str.business_id
lea ecx, [ebp - 0x94]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007cfca
push 0x101c0033
push str.business_id
lea ecx, [ebp - 0x94]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
mov dword [ebp - 0x20], eax
push 0x101bff83
push str.exe_url
lea ecx, [ebp - 0x94]
call fcn.101310c0
cmp byte [eax + 8], 4
jne 0x1007d085
push 0x101bff83
push str.exe_url
lea ecx, [ebp - 0x94]
call fcn.101310c0
lea ecx, [ebp - 0x58]
push ecx
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x12
mov edx, eax
lea ecx, [ebp - 0xac]
call fcn.100ff360
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x40]
call fcn.100127c0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xac]
call fcn.10009450
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x1007d070
inc edx
mov ecx, dword [ebp - 0x58]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007d066
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007d066
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
dec eax
cmp eax, 7
ja 0x1007d0b2
test esi, esi
je 0x1007d0b2
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x2b4]
lea ecx, [ecx + 0xa4]
call fcn.100839a0
mov ecx, eax
call fcn.10007880
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x40]
call fcn.10009450
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x94]
call fcn.10130030
lea ecx, [ebp - 0x28]
call fcn.100125a0
jmp 0x1007cf20
mov edi, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x2b4]
mov esi, dword [eax + 0xac]
push dword [esi + 4]
lea ecx, [eax + 0xac]
call fcn.10084610
mov edx, dword [ebp - 0x2b4]
mov eax, dword [edx + 0xac]
mov dword [eax + 4], esi
mov eax, dword [edx + 0xac]
mov dword [eax], esi
mov eax, dword [edx + 0xac]
mov dword [eax + 8], esi
mov dword [edx + 0xb0], 0
push 0x101bffbc
push str.scene_2_change_condition
lea ecx, [ebp - 0x70]
call fcn.101310c0
cmp byte [eax + 8], 6
jne 0x1007d4fa
push 0x101bffbc
push str.scene_2_change_condition
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov edx, eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
movsx ecx, byte [edx + 8]
lea esi, [ecx - 6]
cmp esi, 1
ja 0x1007d179
mov eax, dword [edx]
test eax, eax
je 0x1007d179
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
xor cl, cl
jmp 0x1007d17e
mov cl, 1
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x18], cl
cmp esi, 1
ja 0x1007d192
mov edi, dword [edx]
test edi, edi
je 0x1007d192
mov edi, dword [edi]
xor dl, dl
jmp 0x1007d196
xor edi, edi
mov dl, 1
mov byte [ebp - 0x2a9], dl
nop dword [eax]
test cl, cl
je 0x1007d1a8
mov cl, dl
jmp 0x1007d1ad
cmp eax, edi
sete cl
test cl, cl
jne 0x1007d4f4
xorps xmm0, xmm0
movups xmmword [ebp - 0x40], xmm0
movq qword [ebp - 0x30], xmm0
add eax, 0x18
push eax
lea ecx, [ebp - 0x40]
call fcn.1012fe90
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x20], 0
or esi, 0xffffffff
mov dword [ebp - 0x2c4], esi
push 0x101c0033
push str.business_id
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007d21a
push 0x101c0033
push str.business_id
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xc0], 0
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0xc0]
push eax
mov ecx, dword [ebp - 0x2b4]
lea ecx, [ecx + 0xa4]
call fcn.10062de0
mov eax, dword [ebp - 0xc0]
mov ecx, dword [ebp - 0x2b4]
cmp eax, dword [ecx + 0xa4]
je 0x1007d4cf
cmp dword [eax + 0x24], 0
je 0x1007d4cf
push 0x101bffd1
push str.total_popup_count
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.101318e0
test al, al
je 0x1007d2a0
push 0x101bffd1
push str.total_popup_count
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10130440
mov esi, eax
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x20]
dec ecx
cmp ecx, 7
ja 0x1007d4cf
test esi, esi
js 0x1007d4cf
mov byte [ebp - 4], 0x15
push 0x48
call fcn.10161f74
add esp, 4
mov esi, eax
mov dword [ebp - 0x2b8], esi
mov byte [ebp - 4], 0x16
mov dword [esi + 4], 1
mov dword [esi + 8], 1
mov dword [esi], vtable.std::_Ref_count_obj_class_RC::RCPopupSceneTemplate_1__.0
lea eax, [esi + 0x10]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0
mov byte [ebp - 4], 0x17
mov dword [ebp - 0xbc], vtable.std::_Func_impl_no_alloc_class__lambda_8e8326fa8c3895416dcfcea9deea60e2___bool___.0
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp - 0xb8], ecx
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x98], ecx
mov byte [ebp - 4], 0x18
mov dword [eax], vtable.RC::ISceneChangedCondition.0
mov byte [ebp - 4], 0x19
mov dword [eax], vtable.RC::RCPopupSceneTemplate_1_.0
lea ecx, [eax + 8]
mov dword [ebp - 0x2d0], ecx
mov dword [ecx + 0x24], 0
mov byte [ebp - 4], 0x1b
mov dword [eax + 0x30], 1
lea eax, [ebp - 0xbc]
push eax
call fcn.100865e0
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x98]
test ecx, ecx
je 0x1007d383
mov edx, dword [ecx]
lea eax, [ebp - 0xbc]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov dword [ebp - 0x98], 0
mov byte [ebp - 4], 0x15
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
or dword [ebp - 0x2b0], 2
lea edx, [esi + 0x10]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x2b4]
mov eax, dword [ecx + 0xac]
mov esi, eax
mov ecx, dword [esi + 4]
cmp byte [ecx + 0xd], 0
jne 0x1007d40d
nop word [eax + eax]
mov edx, dword [ebp - 0x20]
cmp dword [ecx + 0x10], edx
jge 0x1007d3fd
mov ecx, dword [ecx + 8]
jmp 0x1007d401
mov esi, ecx
mov ecx, dword [ecx]
cmp byte [ecx + 0xd], 0
mov edx, dword [ebp - 0xc0]
je 0x1007d3f0
cmp esi, eax
je 0x1007d419
mov eax, dword [ebp - 0x20]
cmp eax, dword [esi + 0x10]
jge 0x1007d466
lea eax, [ebp - 0x20]
mov dword [ebp - 0x2c4], eax
push ecx
lea eax, [ebp - 0x2c4]
push eax
push ecx
mov ecx, dword [ebp - 0x2b4]
lea ecx, [ecx + 0xac]
call fcn.10086e30
push eax
add eax, 0x10
push eax
push esi
lea eax, [ebp - 0x2c0]
push eax
mov ecx, dword [ebp - 0x2b4]
lea ecx, [ecx + 0xac]
call fcn.10086ee0
mov esi, dword [ebp - 0x2c0]
mov edx, dword [ebp - 0xc0]
lea ecx, [esi + 0x14]
mov esi, dword [ecx + 4]
cmp dword [ecx + 8], esi
je 0x1007d48e
mov dword [esi], edx
mov eax, dword [ebp - 0x2b8]
mov dword [esi + 4], eax
mov dword [ebp - 0x78], 0
xor esi, esi
mov dword [ebp - 0x74], esi
add dword [ecx + 4], 8
jmp 0x1007d49b
lea eax, [ebp - 0x78]
push eax
push esi
call fcn.100854d0
mov esi, dword [ebp - 0x74]
mov byte [ebp - 4], 0x15
test esi, esi
je 0x1007d4c4
or eax, 0xffffffff
lock xadd dword [esi + 4], eax
jne 0x1007d4c4
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
or eax, 0xffffffff
lock xadd dword [esi + 8], eax
jne 0x1007d4c4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
and dword [ebp - 0x2b0], 0xfffffffd
mov byte [ebp - 4], 0x14
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x40]
call fcn.10130030
lea ecx, [ebp - 0x1c]
call fcn.100125a0
mov cl, byte [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dl, byte [ebp - 0x2a9]
jmp 0x1007d1a0
mov edi, dword [ebp - 0x2b0]
push 0x101c00b1
push str.popup_timeout_seconds
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007d53b
push 0x101c00b1
push str.popup_timeout_seconds
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10130440
mov esi, dword [ebp - 0x2b4]
mov dword [esi + 0x34], eax
jmp 0x1007d541
mov esi, dword [ebp - 0x2b4]
push 0x101c00d1
push str.recent_noremind_interval_days
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007d57a
push 0x101c00d1
push str.recent_noremind_interval_days
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10130440
mov dword [esi + 0x38], eax
push 0x101c00f2
push str.closebtn_clicked_interval_days
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007d5b3
push 0x101c00f2
push str.closebtn_clicked_interval_days
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10130440
mov dword [esi + 0x3c], eax
push 0x101c010e
push str.timeout_exit_interval_days
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007d5ef
push 0x101c010e
push str.timeout_exit_interval_days
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10130440
mov dword [esi + 0xb8], eax
push 0x101c004e
push str.disable_recommend_interval
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007d632
push 0x101c004e
push str.disable_recommend_interval
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10130440
cdq
mov dword [esi + 0xc0], eax
mov dword [esi + 0xc4], edx
push 0x101c006b
push str.popup_install_interval_days
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007d66b
push 0x101c006b
push str.popup_install_interval_days
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov ecx, eax
call fcn.10130440
mov dword [esi + 0x40], eax
mov eax, dword [esi + 0x44]
mov dword [esi + 0x48], eax
mov eax, dword [esi + 0x50]
mov dword [esi + 0x54], eax
push 0x101c0087
push str.advert_protect_filter_rules
lea ecx, [ebp - 0x70]
call fcn.101310c0
cmp byte [eax + 8], 7
jne 0x1007d8cf
push 0x101c0087
push str.advert_protect_filter_rules
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov esi, eax
mov dword [ebp - 0x2c0], esi
push 0x101b8ab3
push str.software_id
mov ecx, esi
call fcn.101310c0
cmp byte [eax + 8], 6
jne 0x1007d7c1
push 0x101b8ab3
push str.software_id
mov ecx, esi
call fcn.101310c0
mov edx, eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
movsx ecx, byte [edx + 8]
lea esi, [ecx - 6]
cmp esi, 1
ja 0x1007d700
mov eax, dword [edx]
test eax, eax
je 0x1007d700
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
xor cl, cl
jmp 0x1007d705
mov cl, 1
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x18], cl
cmp esi, 1
ja 0x1007d719
mov esi, dword [edx]
test esi, esi
je 0x1007d719
mov esi, dword [esi]
xor dl, dl
jmp 0x1007d71d
xor esi, esi
mov dl, 1
mov byte [ebp - 0x2a9], dl
test cl, cl
je 0x1007d72b
mov cl, dl
jmp 0x1007d730
cmp eax, esi
sete cl
test cl, cl
jne 0x1007d7bb
xorps xmm0, xmm0
movups xmmword [ebp - 0x58], xmm0
movq qword [ebp - 0x48], xmm0
add eax, 0x18
push eax
lea ecx, [ebp - 0x58]
call fcn.1012fe90
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x58]
call fcn.10131960
test al, al
je 0x1007d796
lea ecx, [ebp - 0x58]
call fcn.10130630
mov edx, eax
mov dword [ebp - 0x2b8], edx
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [eax + 0x48]
cmp dword [eax + 0x4c], ecx
je 0x1007d786
mov dword [ecx], edx
add dword [eax + 0x48], 4
jmp 0x1007d796
lea edx, [ebp - 0x2b8]
push edx
push ecx
lea ecx, [eax + 0x44]
call fcn.1004e900
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58]
call fcn.10130030
lea ecx, [ebp - 0x1c]
call fcn.100125a0
mov cl, byte [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dl, byte [ebp - 0x2a9]
jmp 0x1007d723
mov esi, dword [ebp - 0x2c0]
push 0x101c0099
push str.recognize_rule_id
mov ecx, esi
call fcn.101310c0
cmp byte [eax + 8], 6
jne 0x1007d8cf
push 0x101c0099
push str.recognize_rule_id
mov ecx, esi
call fcn.101310c0
mov edx, eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
movsx ecx, byte [edx + 8]
lea esi, [ecx - 6]
cmp esi, 1
ja 0x1007d814
mov eax, dword [edx]
test eax, eax
je 0x1007d814
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
xor cl, cl
jmp 0x1007d819
mov cl, 1
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x18], cl
cmp esi, 1
ja 0x1007d82d
mov esi, dword [edx]
test esi, esi
je 0x1007d82d
mov esi, dword [esi]
xor dl, dl
jmp 0x1007d831
xor esi, esi
mov dl, 1
mov byte [ebp - 0x2a9], dl
test cl, cl
je 0x1007d83f
mov cl, dl
jmp 0x1007d844
cmp eax, esi
sete cl
test cl, cl
jne 0x1007d8cf
xorps xmm0, xmm0
movups xmmword [ebp - 0x58], xmm0
movq qword [ebp - 0x48], xmm0
add eax, 0x18
push eax
lea ecx, [ebp - 0x58]
call fcn.1012fe90
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x58]
call fcn.10131960
test al, al
je 0x1007d8aa
lea ecx, [ebp - 0x58]
call fcn.10130630
mov edx, eax
mov dword [ebp - 0x2b8], edx
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [eax + 0x54]
cmp dword [eax + 0x58], ecx
je 0x1007d89a
mov dword [ecx], edx
add dword [eax + 0x54], 4
jmp 0x1007d8aa
lea edx, [ebp - 0x2b8]
push edx
push ecx
lea ecx, [eax + 0x50]
call fcn.1004e900
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58]
call fcn.10130030
lea ecx, [ebp - 0x1c]
call fcn.100125a0
mov cl, byte [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dl, byte [ebp - 0x2a9]
jmp 0x1007d837
push 0x101c017a
push str.fsmon_filter_rules
lea ecx, [ebp - 0x70]
call fcn.101310c0
cmp byte [eax + 8], 7
jne 0x1007d938
push 0x101c017a
push str.fsmon_filter_rules
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov esi, eax
push 0x101c0194
push str.click_scan_interval_days
mov ecx, esi
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007d938
push 0x101c0194
push str.click_scan_interval_days
mov ecx, esi
call fcn.101310c0
mov ecx, eax
call fcn.10130630
mov ecx, dword [ebp - 0x2b4]
mov dword [ecx + 0x5c], eax
push 0x101c01b1
push str.eyes_protect_filter_rules
lea ecx, [ebp - 0x70]
call fcn.101310c0
cmp byte [eax + 8], 7
jne 0x1007d9a3
push 0x101c01b1
push str.eyes_protect_filter_rules
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov esi, eax
push 0x101c01c9
push str.used_duration_seconds
mov ecx, esi
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007d9a3
push 0x101c01c9
push str.used_duration_seconds
mov ecx, esi
call fcn.101310c0
mov ecx, eax
call fcn.10130630
mov esi, dword [ebp - 0x2b4]
mov dword [esi + 0x64], eax
jmp 0x1007d9a9
mov esi, dword [ebp - 0x2b4]
push ecx
mov edx, dword [esi + 0x6c]
mov ecx, dword [esi + 0x68]
call fcn.10085bb0
add esp, 4
mov eax, dword [esi + 0x68]
mov dword [esi + 0x6c], eax
push 0x101c0127
push str.filedelete_filter_rules
lea ecx, [ebp - 0x70]
call fcn.101310c0
cmp byte [eax + 8], 7
jne 0x1007dde4
push 0x101c0127
push str.filedelete_filter_rules
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov esi, eax
push 0x101c0134
push str.sys_pop_info
mov ecx, esi
call fcn.101310c0
cmp byte [eax + 8], 6
jne 0x1007dde4
push 0x101c0134
push str.sys_pop_info
mov ecx, esi
call fcn.101310c0
mov edx, eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
movsx ecx, byte [edx + 8]
lea esi, [ecx - 6]
cmp esi, 1
ja 0x1007da41
mov eax, dword [edx]
test eax, eax
je 0x1007da41
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
xor cl, cl
jmp 0x1007da46
mov cl, 1
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x18], cl
cmp esi, 1
ja 0x1007da5a
mov esi, dword [edx]
test esi, esi
je 0x1007da5a
mov esi, dword [esi]
xor dl, dl
jmp 0x1007da5e
xor esi, esi
mov dl, 1
mov byte [ebp - 0x2a9], dl
test cl, cl
je 0x1007da6c
mov cl, dl
jmp 0x1007da71
cmp eax, esi
sete cl
test cl, cl
jne 0x1007dde4
add eax, 0x18
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1d4], 7
xor ecx, ecx
mov word [ebp - 0x1e8], cx
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x1c0], ecx
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x1c0], ecx
mov dword [ebp - 0x1bc], 7
mov word [ebp - 0x1d0], cx
mov byte [ebp - 4], 0x22
push 0x101bb799
push str.title
mov ecx, eax
call fcn.10131350
test eax, eax
jne 0x1007daf5
call fcn.1012f080
cmp byte [eax + 8], 4
jne 0x1007dc13
push 0x101bb799
push str.title
mov ecx, dword [ebp - 0x20]
call fcn.10131350
test eax, eax
jne 0x1007db1a
call fcn.1012f080
lea ecx, [ebp - 0x58]
push ecx
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x25
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
jb 0x1007db34
mov eax, dword [eax]
push 0xfde9
push ecx
mov edx, eax
lea ecx, [ebp - 0x94]
call fcn.100fed60
add esp, 8
or edi, 8
mov dword [ebp - 0x2b0], edi
and edi, 0xfffffff7
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 4], 0x24
or edi, 4
mov dword [ebp - 0x2b0], edi
lea ecx, [ebp - 0x1e8]
call fcn.10009450
movups xmm0, xmmword [ebp - 0x94]
movups xmmword [ebp - 0x1e8], xmm0
movq xmm0, qword [ebp - 0x84]
movq qword [ebp - 0x1d8], xmm0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 7
xor eax, eax
mov word [ebp - 0x94], ax
and edi, 0xfffffffb
mov dword [ebp - 0x2b0], edi
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x94]
call fcn.10009450
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x1007dc01
inc edx
mov ecx, dword [ebp - 0x58]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007dbf7
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007dbf7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
push 0x101c0140
push str.wndclass
mov ecx, dword [ebp - 0x20]
call fcn.10131350
test eax, eax
jne 0x1007dc2e
call fcn.1012f080
cmp byte [eax + 8], 4
jne 0x1007dd4c
push 0x101c0140
push str.wndclass
mov ecx, dword [ebp - 0x20]
call fcn.10131350
test eax, eax
jne 0x1007dc53
call fcn.1012f080
lea ecx, [ebp - 0x308]
push ecx
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x28
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
jb 0x1007dc70
mov eax, dword [eax]
push 0xfde9
push ecx
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.100fed60
add esp, 8
or edi, 0x20
mov dword [ebp - 0x2b0], edi
and edi, 0xffffffdf
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 4], 0x27
or edi, 0x10
mov dword [ebp - 0x2b0], edi
lea ecx, [ebp - 0x1d0]
call fcn.10009450
movups xmm0, xmmword [ebp - 0x40]
movups xmmword [ebp - 0x1d0], xmm0
movq xmm0, qword [ebp - 0x30]
movq qword [ebp - 0x1c0], xmm0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 7
xor eax, eax
mov word [ebp - 0x40], ax
and edi, 0xffffffef
mov dword [ebp - 0x2b0], edi
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x40]
call fcn.10009450
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x2f4]
cmp edx, 0x10
jb 0x1007dd31
inc edx
mov ecx, dword [ebp - 0x308]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007dd27
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007dd27
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 0xf
mov byte [ebp - 0x308], 0
mov ecx, dword [ebp - 0x2b4]
add ecx, 0x68
mov eax, dword [ecx + 4]
mov dword [ebp - 0x2b8], eax
cmp dword [ecx + 8], eax
je 0x1007dda0
mov dword [ebp - 0x2d0], eax
lea ecx, [ebp - 0x1e8]
push ecx
mov ecx, eax
call fcn.10007960
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0x1d0]
push eax
mov ecx, dword [ebp - 0x2b8]
add ecx, 0x18
call fcn.10007960
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x2b4]
add dword [eax + 0x6c], 0x30
jmp 0x1007ddad
lea edx, [ebp - 0x1e8]
push edx
push eax
call fcn.10085250
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1d0]
call fcn.10009450
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1e8]
call fcn.10009450
lea ecx, [ebp - 0x1c]
call fcn.100125a0
mov cl, byte [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dl, byte [ebp - 0x2a9]
jmp 0x1007da64
push 0x101c0165
push str.right_click_mgr_condition_control
lea ecx, [ebp - 0x70]
call fcn.101310c0
cmp byte [eax + 8], 7
jne 0x1007e0c7
push 0x101c0165
push str.right_click_mgr_condition_control
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov esi, eax
mov dword [ebp - 0x2c0], esi
push 0x101c0216
push str.system_started_seconds
mov ecx, esi
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007de57
push 0x101c0216
push str.system_started_seconds
mov ecx, esi
call fcn.101310c0
mov ecx, eax
call fcn.10130630
mov ecx, dword [ebp - 0x2b4]
mov dword [ecx + 0x74], eax
push 0x101c0238
push str.right_menu_item_non_system_count
mov ecx, esi
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007de94
push 0x101c0238
push str.right_menu_item_non_system_count
mov ecx, esi
call fcn.101310c0
mov ecx, eax
call fcn.10130630
mov ecx, dword [ebp - 0x2b4]
mov dword [ecx + 0x78], eax
push 0x101c024f
push str.popup_delay_seconds
mov ecx, esi
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007ded3
push 0x101c024f
push str.popup_delay_seconds
mov ecx, esi
call fcn.101310c0
mov ecx, eax
call fcn.10130630
mov ecx, dword [ebp - 0x2b4]
mov dword [ecx + 0x7c], eax
jmp 0x1007ded9
mov ecx, dword [ebp - 0x2b4]
mov eax, dword [ecx + 0x84]
mov dword [ebp - 0x2b8], eax
mov esi, dword [ecx + 0x80]
cmp esi, eax
je 0x1007df0e
nop
mov ecx, esi
call fcn.10009450
add esi, 0x18
cmp esi, dword [ebp - 0x2b8]
jne 0x1007def0
mov ecx, dword [ebp - 0x2b4]
mov esi, dword [ecx + 0x80]
mov dword [ecx + 0x84], esi
push 0x101c0268
push str.clicked_class_name_level
mov esi, dword [ebp - 0x2c0]
mov ecx, esi
call fcn.101310c0
cmp byte [eax + 8], 6
jne 0x1007e0c7
push 0x101c0268
push str.clicked_class_name_level
mov ecx, esi
call fcn.101310c0
mov edx, eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
movsx ecx, byte [edx + 8]
lea esi, [ecx - 6]
cmp esi, 1
ja 0x1007df6d
mov eax, dword [edx]
test eax, eax
je 0x1007df6d
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
xor cl, cl
jmp 0x1007df72
mov cl, 1
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x18], cl
cmp esi, 1
ja 0x1007df86
mov esi, dword [edx]
test esi, esi
je 0x1007df86
mov esi, dword [esi]
xor dl, dl
jmp 0x1007df8a
xor esi, esi
mov dl, 1
mov byte [ebp - 0x2a9], dl
test cl, cl
je 0x1007df98
mov cl, dl
jmp 0x1007df9d
cmp eax, esi
sete cl
test cl, cl
jne 0x1007e0c7
lea ecx, [eax + 0x18]
cmp byte [ecx + 8], 4
jne 0x1007e0ae
lea eax, [ebp - 0x58]
push eax
call fcn.10130290
mov byte [ebp - 4], 0x2f
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
jb 0x1007dfca
mov eax, dword [eax]
push 0xfde9
push ecx
mov edx, eax
lea ecx, [ebp - 0xac]
call fcn.100fed60
add esp, 8
or edi, 0x80
mov dword [ebp - 0x2b0], edi
and edi, 0xffffff7f
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 4], 0x2e
or edi, 0x40
mov dword [ebp - 0x2b0], edi
mov byte [ebp - 4], 0x30
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x1007e042
inc edx
mov ecx, dword [ebp - 0x58]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007e038
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007e038
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [eax + 0x84]
cmp dword [eax + 0x88], ecx
je 0x1007e083
lea eax, [ebp - 0xac]
push eax
call fcn.10007960
mov eax, dword [ebp - 0x2b4]
add dword [eax + 0x84], 0x18
jmp 0x1007e096
lea edx, [ebp - 0xac]
push edx
push ecx
lea ecx, [eax + 0x80]
call fcn.10019e60
and edi, 0xffffffbf
mov dword [ebp - 0x2b0], edi
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xac]
call fcn.10009450
lea ecx, [ebp - 0x1c]
call fcn.100125a0
mov cl, byte [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dl, byte [ebp - 0x2a9]
jmp 0x1007df90
mov ecx, dword [ebp - 0x2b4]
mov eax, dword [ecx + 0x94]
mov dword [ebp - 0x2b8], eax
mov esi, dword [ecx + 0x90]
cmp esi, eax
je 0x1007e104
mov ecx, esi
call fcn.1007f8a0
add esi, 0x94
cmp esi, dword [ebp - 0x2b8]
jne 0x1007e0e3
mov ecx, dword [ebp - 0x2b4]
mov esi, dword [ecx + 0x90]
mov dword [ecx + 0x94], esi
push 0x101c01dd
push str.window_info_mutex
lea ecx, [ebp - 0x70]
call fcn.101310c0
cmp byte [eax + 8], 6
jne 0x1007ebd9
push 0x101c01dd
push str.window_info_mutex
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov edx, eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
movsx ecx, byte [edx + 8]
lea esi, [ecx - 6]
cmp esi, 1
ja 0x1007e15f
mov eax, dword [edx]
test eax, eax
je 0x1007e15f
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
xor cl, cl
jmp 0x1007e164
mov cl, 1
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x18], cl
cmp esi, 1
ja 0x1007e178
mov esi, dword [edx]
test esi, esi
je 0x1007e178
mov esi, dword [esi]
xor dl, dl
jmp 0x1007e17c
xor esi, esi
mov dl, 1
mov byte [ebp - 0x2a9], dl
test cl, cl
je 0x1007e18a
mov cl, dl
jmp 0x1007e18f
cmp eax, esi
sete cl
test cl, cl
jne 0x1007ebd9
xorps xmm0, xmm0
movups xmmword [ebp - 0x40], xmm0
movq qword [ebp - 0x30], xmm0
add eax, 0x18
push eax
lea ecx, [ebp - 0x40]
call fcn.1012fe90
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 7
xor eax, eax
mov word [ebp - 0x1b4], ax
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x188], 7
mov word [ebp - 0x19c], ax
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], 7
mov word [ebp - 0x184], ax
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], 7
mov word [ebp - 0x16c], ax
mov byte [ebp - 4], 0x35
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], 7
mov word [ebp - 0x154], ax
mov byte [ebp - 4], 0x36
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], 7
mov word [ebp - 0x13c], ax
mov byte [ebp - 4], 0x38
push 0x101c01e2
push 0x101c01e0
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007eb5a
push 0x101c01e2
push 0x101c01e0
lea ecx, [ebp - 0x40]
call fcn.101310c0
mov ecx, eax
call fcn.10130630
mov dword [ebp - 0x1b8], eax
push 0x101c01f0
push str.product_name
lea ecx, [ebp - 0x40]
call fcn.101310c0
cmp byte [eax + 8], 4
jne 0x1007e43a
push 0x101c01f0
push str.product_name
lea ecx, [ebp - 0x40]
call fcn.101310c0
lea ecx, [ebp - 0x380]
push ecx
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x41
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
jb 0x1007e340
mov eax, dword [eax]
push 0xfde9
push ecx
mov edx, eax
lea ecx, [ebp - 0x94]
call fcn.100fed60
add esp, 8
or edi, 0x200
mov dword [ebp - 0x2b0], edi
and edi, 0xfffffdff
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 4], 0x40
or edi, 0x100
mov dword [ebp - 0x2b0], edi
lea ecx, [ebp - 0x1b4]
call fcn.10009450
movups xmm0, xmmword [ebp - 0x94]
movups xmmword [ebp - 0x1b4], xmm0
movq xmm0, qword [ebp - 0x84]
movq qword [ebp - 0x1a4], xmm0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 7
xor eax, eax
mov word [ebp - 0x94], ax
and edi, 0xfffffeff
mov dword [ebp - 0x2b0], edi
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0x94]
call fcn.10009450
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x36c]
cmp edx, 0x10
jb 0x1007e41f
inc edx
mov ecx, dword [ebp - 0x380]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007e415
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007e415
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x36c], 0xf
mov byte [ebp - 0x380], 0
push 0x101c01fd
push str.signature
lea ecx, [ebp - 0x40]
call fcn.101310c0
cmp byte [eax + 8], 4
jne 0x1007e582
push 0x101c01fd
push str.signature
lea ecx, [ebp - 0x40]
call fcn.101310c0
lea ecx, [ebp - 0x218]
push ecx
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x44
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
jb 0x1007e485
mov eax, dword [eax]
push 0xfde9
push ecx
mov edx, eax
lea ecx, [ebp - 0x338]
call fcn.100fed60
add esp, 8
or edi, 0x800
mov dword [ebp - 0x2b0], edi
and edi, 0xfffff7ff
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 4], 0x43
or edi, 0x400
mov dword [ebp - 0x2b0], edi
lea ecx, [ebp - 0x19c]
call fcn.10009450
movups xmm0, xmmword [ebp - 0x338]
movups xmmword [ebp - 0x19c], xmm0
movq xmm0, qword [ebp - 0x328]
movq qword [ebp - 0x18c], xmm0
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 7
xor eax, eax
mov word [ebp - 0x338], ax
and edi, 0xfffffbff
mov dword [ebp - 0x2b0], edi
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x338]
call fcn.10009450
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x204]
cmp edx, 0x10
jb 0x1007e567
inc edx
mov ecx, dword [ebp - 0x218]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007e55d
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007e55d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 0xf
mov byte [ebp - 0x218], 0
push 0x101c02c4
push str.process_path
lea ecx, [ebp - 0x40]
call fcn.101310c0
cmp byte [eax + 8], 4
jne 0x1007e6ca
push 0x101c02c4
push str.process_path
lea ecx, [ebp - 0x40]
call fcn.101310c0
lea ecx, [ebp - 0x2e8]
push ecx
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x47
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
jb 0x1007e5cd
mov eax, dword [eax]
push 0xfde9
push ecx
mov edx, eax
lea ecx, [ebp - 0x350]
call fcn.100fed60
add esp, 8
or edi, 0x2000
mov dword [ebp - 0x2b0], edi
and edi, 0xffffdfff
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 4], 0x46
or edi, 0x1000
mov dword [ebp - 0x2b0], edi
lea ecx, [ebp - 0x184]
call fcn.10009450
movups xmm0, xmmword [ebp - 0x350]
movups xmmword [ebp - 0x184], xmm0
movq xmm0, qword [ebp - 0x340]
movq qword [ebp - 0x174], xmm0
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 7
xor eax, eax
mov word [ebp - 0x350], ax
and edi, 0xffffefff
mov dword [ebp - 0x2b0], edi
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x350]
call fcn.10009450
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x2d4]
cmp edx, 0x10
jb 0x1007e6af
inc edx
mov ecx, dword [ebp - 0x2e8]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007e6a5
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007e6a5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d4], 0xf
mov byte [ebp - 0x2e8], 0
push 0x101c02d4
push str.window_title
lea ecx, [ebp - 0x40]
call fcn.101310c0
cmp byte [eax + 8], 4
jne 0x1007e812
push 0x101c02d4
push str.window_title
lea ecx, [ebp - 0x40]
call fcn.101310c0
lea ecx, [ebp - 0x320]
push ecx
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x4a
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
jb 0x1007e715
mov eax, dword [eax]
push 0xfde9
push ecx
mov edx, eax
lea ecx, [ebp - 0x368]
call fcn.100fed60
add esp, 8
or edi, 0x8000
mov dword [ebp - 0x2b0], edi
and edi, 0xffff7fff
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 4], 0x49
or edi, 0x4000
mov dword [ebp - 0x2b0], edi
lea ecx, [ebp - 0x16c]
call fcn.10009450
movups xmm0, xmmword [ebp - 0x368]
movups xmmword [ebp - 0x16c], xmm0
movq xmm0, qword [ebp - 0x358]
movq qword [ebp - 0x15c], xmm0
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x354], 7
xor eax, eax
mov word [ebp - 0x368], ax
and edi, 0xffffbfff
mov dword [ebp - 0x2b0], edi
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0x368]
call fcn.10009450
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x30c]
cmp edx, 0x10
jb 0x1007e7f7
inc edx
mov ecx, dword [ebp - 0x320]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007e7ed
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007e7ed
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x30c], 0xf
mov byte [ebp - 0x320], 0
push 0x101c02e4
push str.command_line
lea ecx, [ebp - 0x40]
call fcn.101310c0
cmp byte [eax + 8], 4
jne 0x1007e95a
push 0x101c02e4
push str.command_line
lea ecx, [ebp - 0x40]
call fcn.101310c0
lea ecx, [ebp - 0xdc]
push ecx
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x4d
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
jb 0x1007e85d
mov eax, dword [eax]
push 0xfde9
push ecx
mov edx, eax
lea ecx, [ebp - 0x308]
call fcn.100fed60
add esp, 8
or edi, 0x20000
mov dword [ebp - 0x2b0], edi
and edi, 0xfffdffff
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 4], 0x4c
or edi, 0x10000
mov dword [ebp - 0x2b0], edi
lea ecx, [ebp - 0x154]
call fcn.10009450
movups xmm0, xmmword [ebp - 0x308]
movups xmmword [ebp - 0x154], xmm0
movq xmm0, qword [ebp - 0x2f8]
movq qword [ebp - 0x144], xmm0
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x2f4], 7
xor eax, eax
mov word [ebp - 0x308], ax
and edi, 0xfffeffff
mov dword [ebp - 0x2b0], edi
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x308]
call fcn.10009450
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x1007e93f
inc edx
mov ecx, dword [ebp - 0xdc]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007e935
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007e935
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
push 0x101c02f5
push str.original_name
lea ecx, [ebp - 0x40]
call fcn.101310c0
cmp byte [eax + 8], 4
jne 0x1007ea8d
push 0x101c02f5
push str.original_name
lea ecx, [ebp - 0x40]
call fcn.101310c0
lea ecx, [ebp - 0xac]
push ecx
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x50
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
jb 0x1007e9a5
mov eax, dword [eax]
push 0xfde9
push ecx
mov edx, eax
lea ecx, [ebp - 0x58]
call fcn.100fed60
add esp, 8
or edi, 0x80000
mov dword [ebp - 0x2b0], edi
and edi, 0xfff7ffff
mov dword [ebp - 0x2b0], edi
mov dword [ebp - 4], 0x4f
or edi, 0x40000
mov dword [ebp - 0x2b0], edi
lea ecx, [ebp - 0x13c]
call fcn.10009450
movups xmm0, xmmword [ebp - 0x58]
movups xmmword [ebp - 0x13c], xmm0
movq xmm0, qword [ebp - 0x48]
movq qword [ebp - 0x12c], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
xor eax, eax
mov word [ebp - 0x58], ax
and edi, 0xfffbffff
mov dword [ebp - 0x2b0], edi
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x58]
call fcn.10009450
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x98]
cmp edx, 0x10
jb 0x1007ea72
inc edx
mov ecx, dword [ebp - 0xac]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007ea68
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007ea68
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
cmp dword [ebp - 0x1a4], 0
jne 0x1007ead7
cmp dword [ebp - 0x18c], 0
jne 0x1007ead7
cmp dword [ebp - 0x174], 0
jne 0x1007ead7
cmp dword [ebp - 0x15c], 0
jne 0x1007ead7
cmp dword [ebp - 0x144], 0
jne 0x1007ead7
cmp dword [ebp - 0x12c], 0
jne 0x1007ead7
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1b8]
call fcn.1007f8a0
jmp 0x1007ebb4
mov ecx, dword [ebp - 0x2b4]
add ecx, 0x90
mov eax, dword [ecx + 4]
cmp dword [ecx + 8], eax
je 0x1007eb0b
lea ecx, [ebp - 0x1b8]
push ecx
mov ecx, eax
call fcn.100813c0
mov eax, dword [ebp - 0x2b4]
add dword [eax + 0x94], 0x94
jmp 0x1007eb18
lea edx, [ebp - 0x1b8]
push edx
push eax
call fcn.100856b0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x13c]
call fcn.10009450
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x154]
call fcn.10009450
mov byte [ebp - 4], 0x53
lea ecx, [ebp - 0x16c]
call fcn.10009450
mov byte [ebp - 4], 0x52
lea ecx, [ebp - 0x184]
call fcn.10009450
mov byte [ebp - 4], 0x51
jmp 0x1007eb9a
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x13c]
call fcn.10009450
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x154]
call fcn.10009450
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x16c]
call fcn.10009450
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x184]
call fcn.10009450
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x19c]
call fcn.10009450
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x1b4]
call fcn.10009450
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x40]
call fcn.10130030
lea ecx, [ebp - 0x1c]
call fcn.100125a0
mov cl, byte [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dl, byte [ebp - 0x2a9]
jmp 0x1007e182
push 0x101c0279
push str.evade_product
lea ecx, [ebp - 0x70]
call fcn.101310c0
cmp byte [eax + 8], 6
jne 0x1007f0db
push 0x101c0279
push str.evade_product
lea ecx, [ebp - 0x70]
call fcn.101310c0
mov edx, eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x78], xmm0
movsx ecx, byte [edx + 8]
lea esi, [ecx - 6]
cmp esi, 1
ja 0x1007ec2e
mov eax, dword [edx]
test eax, eax
je 0x1007ec2e
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
xor cl, cl
jmp 0x1007ec33
mov cl, 1
mov eax, dword [ebp - 0x78]
mov byte [ebp - 0x74], cl
cmp esi, 1
ja 0x1007ec47
mov edi, dword [edx]
test edi, edi
je 0x1007ec47
mov edi, dword [edi]
xor ch, ch
jmp 0x1007ec4b
xor edi, edi
mov ch, 1
mov byte [ebp - 0x2b9], ch
test cl, cl
je 0x1007ec59
mov cl, ch
jmp 0x1007ec5e
cmp eax, edi
sete cl
test cl, cl
jne 0x1007f0db
lea esi, [eax + 0x18]
mov dword [ebp - 0x2b8], esi
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 7
xor eax, eax
mov word [ebp - 0x200], ax
mov byte [ebp - 4], 0x57
push 0x101c0286
push 0x101c027c
mov ecx, esi
call fcn.101310c0
cmp byte [eax + 8], 4
jne 0x1007ede1
push 0x101c0286
push 0x101c027c
mov ecx, esi
call fcn.101310c0
lea ecx, [ebp - 0xac]
push ecx
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x5a
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
jb 0x1007eced
mov eax, dword [eax]
push 0xfde9
push ecx
mov edx, eax
lea ecx, [ebp - 0x58]
call fcn.100fed60
add esp, 8
mov esi, dword [ebp - 0x2b0]
or esi, 0x200000
mov dword [ebp - 0x2b0], esi
and esi, 0xffdfffff
mov dword [ebp - 0x2b0], esi
mov dword [ebp - 4], 0x59
or esi, 0x100000
mov dword [ebp - 0x2b0], esi
lea ecx, [ebp - 0x200]
call fcn.10009450
movups xmm0, xmmword [ebp - 0x58]
movups xmmword [ebp - 0x200], xmm0
movq xmm0, qword [ebp - 0x48]
movq qword [ebp - 0x1f0], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 7
xor eax, eax
mov word [ebp - 0x58], ax
and esi, 0xffefffff
mov dword [ebp - 0x2b0], esi
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x58]
call fcn.10009450
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0x98]
cmp edx, 0x10
jb 0x1007edc0
inc edx
mov ecx, dword [ebp - 0xac]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007edb6
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007edb6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x98], 0xf
mov byte [ebp - 0xac], 0
mov esi, dword [ebp - 0x2b8]
xorps xmm0, xmm0
movlpd qword [ebp - 0x28], xmm0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
call fcn.10026200
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x5d
push 0x101c0290
push str.channels
mov ecx, esi
call fcn.101310c0
cmp byte [eax + 8], 6
jne 0x1007efa1
push 0x101c0290
push str.channels
mov ecx, esi
call fcn.101310c0
mov edx, eax
xorps xmm0, xmm0
movlpd qword [ebp - 0x1c], xmm0
movsx ecx, byte [edx + 8]
lea esi, [ecx - 6]
cmp esi, 1
ja 0x1007ee56
mov eax, dword [edx]
test eax, eax
je 0x1007ee56
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
xor cl, cl
jmp 0x1007ee5b
mov cl, 1
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x18], cl
cmp esi, 1
ja 0x1007ee6f
mov esi, dword [edx]
test esi, esi
je 0x1007ee6f
mov esi, dword [esi]
xor dl, dl
jmp 0x1007ee73
xor esi, esi
mov dl, 1
mov byte [ebp - 0x2a9], dl
nop dword [eax]
test cl, cl
je 0x1007ee88
mov cl, dl
jmp 0x1007ee8d
cmp eax, esi
sete cl
test cl, cl
jne 0x1007efa1
lea ecx, [eax + 0x18]
lea eax, [ebp - 0xdc]
push eax
call fcn.10130290
mov byte [ebp - 4], 0x60
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0x10
jb 0x1007eeb3
mov eax, dword [eax]
push 0xfde9
push ecx
mov edx, eax
lea ecx, [ebp - 0x320]
call fcn.100fed60
add esp, 8
mov eax, dword [ebp - 0x2b0]
or eax, 0x800000
mov dword [ebp - 0x2b0], eax
and eax, 0xff7fffff
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 4], 0x5f
or eax, 0x400000
mov dword [ebp - 0x2b0], eax
push dword [ebp - 0x2d0]
lea eax, [ebp - 0x320]
push eax
push ecx
lea eax, [ebp - 0x2c8]
push eax
lea ecx, [ebp - 0x28]
call fcn.10085e50
and dword [ebp - 0x2b0], 0xffbfffff
mov byte [ebp - 4], 0x5e
lea ecx, [ebp - 0x320]
call fcn.10009450
mov byte [ebp - 4], 0x5d
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x1007ef6d
inc edx
mov ecx, dword [ebp - 0xdc]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007ef63
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007ef63
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
lea ecx, [ebp - 0x1c]
call fcn.100125a0
mov cl, byte [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dl, byte [ebp - 0x2a9]
jmp 0x1007ee80
mov esi, dword [ebp - 0x2b4]
add esi, 0xd8
mov dword [ebp - 0x2d0], esi
push esi
call dword [sym.imp.MSVCP140.dll__Mtx_lock]
add esp, 4
test eax, eax
je 0x1007efcb
push eax
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
add esp, 4
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x2f0]
call fcn.10007960
mov byte [ebp - 4], 0x63
lea eax, [ebp - 0x2d8]
mov dword [ebp - 0x2b8], eax
push ecx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x2d8]
call fcn.10026520
mov byte [ebp - 4], 0x62
or dword [ebp - 0x2b0], 0x1000000
mov eax, dword [ebp - 0x2b4]
lea ecx, [ebp - 0x2f0]
push ecx
lea ecx, [eax + 0xd0]
call fcn.10073730
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xc4]
push eax
mov ecx, dword [ebp - 0x2b4]
lea ecx, [ecx + 0xd0]
call fcn.100737b0
and dword [ebp - 0x2b0], 0xfeffffff
mov byte [ebp - 4], 0x66
lea eax, [ebp - 0x2d8]
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 0x69
mov eax, dword [ebp - 0x2d8]
push eax
push dword [eax]
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x2d8]
call fcn.10024400
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0x2d8]
call fcn.100229c0
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x2f0]
call fcn.10009450
mov byte [ebp - 4], 0x5d
mov ecx, esi
call fcn.10003f80
mov byte [ebp - 4], 0x57
lea ecx, [ebp - 0x28]
call fcn.10021080
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x200]
call fcn.10009450
lea ecx, [ebp - 0x78]
call fcn.100125a0
mov cl, byte [ebp - 0x74]
mov eax, dword [ebp - 0x78]
mov ch, byte [ebp - 0x2b9]
jmp 0x1007ec51
mov esi, dword [ebp - 0x2b4]
lea ecx, [esi + 0x108]
call fcn.100841a0
push str.product_install_interval_restrict
lea ecx, [ebp - 0x70]
call fcn.10131460
cmp byte [eax + 8], 7
jne 0x1007f440
push 0x18
lea ecx, [ebp - 0x58]
call sym.SdInstallProtect.dll_public:_void___thiscall_RC::DM::RCCloudDataUser::__autoclassinit2_unsigned_int_
push str.product_install_interval_restrict
lea ecx, [ebp - 0x70]
call fcn.10131460
push eax
lea ecx, [ebp - 0x58]
call fcn.1012fe90
mov byte [ebp - 4], 0x6b
push str.restrict_switch
lea ecx, [ebp - 0x58]
call fcn.10131460
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007f1e5
add esi, 0x114
push str.restrict_switch
lea ecx, [ebp - 0x58]
call fcn.10131460
mov ecx, eax
call fcn.10130630
cmp eax, 1
sete al
mov byte [esi], al
push 4
mov ecx, 0x10212884
call fcn.1012e9a0
mov edi, eax
test edi, edi
je 0x1007f1df
lea ecx, [ebp - 0xac]
call fcn.10007940
mov byte [ebp - 4], 0x6c
push esi
push 0x101c0388
lea eax, [ebp - 0xac]
push eax
call fcn.1001ef90
push 0x285
push str.RC::RCSafeCasesRecommendManager::UpdateCloudConfiguration
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_rtpsystem_srclibrtglobalutils_safecasesrecommend_rcsafecasesrecommendmanager.cpp
lea eax, [ebp - 0xac]
push eax
push 4
mov ecx, 0x10212884
call fcn.1012e9e0
cmp edi, 1
jbe 0x1007f1d0
lea eax, [ebp - 0xac]
push eax
mov ecx, 0x10212884
call fcn.1012ed00
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0xac]
call fcn.10009450
mov esi, dword [ebp - 0x2b4]
push str.product_info_list
lea ecx, [ebp - 0x58]
call fcn.10131460
cmp byte [eax + 8], 6
jne 0x1007f434
push str.product_info_list
lea ecx, [ebp - 0x58]
call fcn.10131460
mov edx, eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.1007bb50
mov eax, ecx
push eax
mov ecx, edx
call fcn.10131b40
push ecx
lea ecx, [ebp - 0x1c]
call fcn.1007bb50
mov eax, ecx
push eax
mov ecx, edx
call fcn.10131b80
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x28]
call fcn.1004caf0
test al, al
je 0x1007f434
nop word [eax + eax]
mov esi, dword [ebp - 0x28]
add esi, 0x18
lea ecx, [ebp - 0xdc]
call fcn.10007940
mov byte [ebp - 4], 0x6d
xor edi, edi
mov dword [ebp - 0x2c4], edi
push 0x101c027c
mov ecx, esi
call fcn.10131460
cmp byte [eax + 8], 4
jne 0x1007f2d8
lea eax, [ebp - 0x2e8]
push eax
push 0x101c027c
mov ecx, esi
call fcn.10131460
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x6e
mov edx, eax
lea ecx, [ebp - 0x320]
call fcn.100ff360
mov byte [ebp - 4], 0x6f
push eax
lea ecx, [ebp - 0xdc]
call fcn.100127c0
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x320]
call fcn.10009450
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x2e8]
call fcn.10007b00
push str.interval_days
mov ecx, esi
call fcn.10131460
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007f30a
push str.interval_days
mov ecx, esi
call fcn.10131460
mov ecx, eax
call fcn.10130630
mov edi, eax
mov dword [ebp - 0x2c4], edi
push 4
mov ecx, 0x10212884
call fcn.1012e9a0
mov esi, eax
test esi, esi
je 0x1007f3a6
lea ecx, [ebp - 0xac]
call fcn.10007940
mov byte [ebp - 4], 0x70
lea ecx, [ebp - 0xdc]
call fcn.10007840
mov dword [ebp - 0x2b8], eax
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x2b8]
push eax
push 0x101c0308
lea eax, [ebp - 0xac]
push eax
call fcn.10085480
push 0x299
push str.RC::RCSafeCasesRecommendManager::UpdateCloudConfiguration
push str.d:jenkinsworkspacepc_2345mpcsafe_build_rhinoprotect_rtpsystem_srclibrtglobalutils_safecasesrecommend_rcsafecasesrecommendmanager.cpp
lea eax, [ebp - 0xac]
push eax
push 4
mov ecx, 0x10212884
call fcn.1012e9e0
cmp esi, 1
jbe 0x1007f397
lea eax, [ebp - 0xac]
push eax
mov ecx, 0x10212884
call fcn.1012ed00
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0xac]
call fcn.10009450
push edi
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x21c]
call fcn.1007ba10
mov byte [ebp - 4], 0x71
mov esi, dword [ebp - 0x2b4]
lea eax, [esi + 0x118]
push eax
lea ecx, [ebp - 0x2c0]
call fcn.100077a0
mov byte [ebp - 4], 0x72
lea eax, [ebp - 0x21c]
push eax
lea ecx, [esi + 0x108]
call fcn.10084230
mov byte [ebp - 4], 0x71
mov ecx, dword [ebp - 0x2c0]
call fcn.10003f80
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x21c]
call fcn.10009450
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0xdc]
call fcn.10009450
lea ecx, [ebp - 0x28]
call fcn.100125a0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x28]
call fcn.1004caf0
test al, al
jne 0x1007f250
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x58]
call fcn.10130030
lea ecx, [esi + 0x148]
call fcn.10083780
push str.popup_info_display
lea ecx, [ebp - 0x70]
call fcn.10131460
cmp byte [eax + 8], 6
jne 0x1007f652
push str.popup_info_display
lea ecx, [ebp - 0x70]
call fcn.10131460
mov edx, eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.1007bb50
mov eax, ecx
push eax
mov ecx, edx
call fcn.10131b40
push ecx
lea ecx, [ebp - 0x1c]
call fcn.1007bb50
mov eax, ecx
push eax
mov ecx, edx
call fcn.10131b80
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x28]
call fcn.1004caf0
test al, al
je 0x1007f652
nop dword [eax + eax]
push 0x18
lea ecx, [ebp - 0x40]
call sym.SdInstallProtect.dll_public:_void___thiscall_RC::DM::RCCloudDataUser::__autoclassinit2_unsigned_int_
mov eax, dword [ebp - 0x28]
add eax, 0x18
push eax
lea ecx, [ebp - 0x40]
call fcn.1012fe90
mov byte [ebp - 4], 0x74
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x234]
call fcn.1007f930
mov byte [ebp - 4], 0x75
push str.business_id
lea ecx, [ebp - 0x40]
call fcn.10131460
mov ecx, eax
call fcn.10131960
test al, al
je 0x1007f512
push str.business_id
lea ecx, [ebp - 0x40]
call fcn.10131460
mov ecx, eax
call fcn.10130630
mov dword [ebp - 0x20], eax
push str.main_title
lea ecx, [ebp - 0x40]
call fcn.10131460
cmp byte [eax + 8], 4
jne 0x1007f57f
lea eax, [ebp - 0xdc]
push eax
push str.main_title
lea ecx, [ebp - 0x40]
call fcn.10131460
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x76
mov edx, eax
lea ecx, [ebp - 0xac]
call fcn.100ff360
mov byte [ebp - 4], 0x77
push eax
lea ecx, [ebp - 0x234]
call fcn.100127c0
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0xac]
call fcn.10009450
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0xdc]
call fcn.10007b00
push str.sub_title
lea ecx, [ebp - 0x40]
call fcn.10131460
cmp byte [eax + 8], 4
jne 0x1007f5ec
lea eax, [ebp - 0x2e8]
push eax
push str.sub_title
lea ecx, [ebp - 0x40]
call fcn.10131460
mov ecx, eax
call fcn.10130290
mov byte [ebp - 4], 0x78
mov edx, eax
lea ecx, [ebp - 0x320]
call fcn.100ff360
mov byte [ebp - 4], 0x79
push eax
lea ecx, [ebp - 0x21c]
call fcn.100127c0
mov byte [ebp - 4], 0x78
lea ecx, [ebp - 0x320]
call fcn.10009450
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0x2e8]
call fcn.10007b00
mov eax, dword [ebp - 0x20]
dec eax
cmp eax, 7
ja 0x1007f61b
cmp dword [ebp - 0x224], 0
je 0x1007f61b
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [esi + 0x148]
call fcn.10084120
mov ecx, eax
call fcn.1007f9d0
mov byte [ebp - 4], 0x74
lea ecx, [ebp - 0x234]
call fcn.10038ea0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x40]
call fcn.10130030
lea ecx, [ebp - 0x28]
call fcn.100125a0
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x28]
call fcn.1004caf0
test al, al
jne 0x1007f4b0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x70]
call fcn.10130030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2a8]
call fcn.1004d2d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xf4]
call fcn.10007b00
jmp 0x1007f811
lea ecx, [ebp - 0x2c4]
call fcn.1007f860
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x70]
call fcn.10130030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2a8]
call fcn.1004d2d0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0xe0]
cmp edx, 0x10
jb 0x1007f7f6
inc edx
mov ecx, dword [ebp - 0xf4]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007f7ec
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007f7ec
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x70]
call fcn.10130030
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2a8]
call fcn.1004d2d0
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0xe0]
cmp edx, 0x10
jb 0x1007f752
inc edx
mov ecx, dword [ebp - 0xf4]
mov eax, ecx
cmp edx, 0x1000
jb 0x1007f748
add edx, 0x23
mov ecx, dword [ecx - 4]
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x1007f748
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0xf
mov byte [ebp - 0xf4], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10c]
call fcn.10009450
mov byte [ebp - 4], 0
mov eax, dword [esi]
jmp 0x1007c8de
push edx
push ecx
call fcn.10161fa4
add esp, 8
mov byte [ebp - 0xf4], 0
mov dword [ebp - 0xe0], 0xf
mov dword [ebp - 0xe4], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10c]
call fcn.10009450
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x7c]
call fcn.1000e4b0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x124]
call fcn.10009450
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10161f63
mov esp, ebp
pop ebp
ret 4