Function at 0x10042b16
Capabilities:
Modify service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008b2d8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x218
push esi
push edi
and dword [ebp - 0x224], 0
push 6
pop ecx
xor eax, eax
lea edi, [ebp - 0x220]
rep stosd dword es:[edi], eax
push 0x1c
lea eax, [ebp - 0x224]
push eax
push dword [ebp + 8]
push 0x1ecc
push 0x1fba
call fcn.10053fb8
pop ecx
pop ecx
call eax
test eax, eax
je 0x100439c8
mov dword [ebp - 0x4c], 1
push 3
lea ecx, [ebp - 0x160]
call fcn.1001a32c
and dword [ebp - 4], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x3c], 3
push 3
lea ecx, [ebp - 0x200]
call fcn.1001a32c
mov byte [ebp - 4], 1
push 0x42e0
lea eax, [ebp - 0x164]
push eax
push 1
lea eax, [ebp - 0x160]
push eax
push 0x6b24
push 0x6450
push 0x4506
call fcn.10040c80
add esp, 0x1c
lea eax, [ebp - 0x164]
push eax
push 0x4f1
push 0
lea eax, [ebp - 0x200]
push eax
call fcn.10044544
add esp, 0x10
imul eax, dword [ebp - 0x4c], 0xb0cb
test eax, eax
je 0x10042c21
push 1
lea ecx, [ebp - 0x160]
call fcn.1001a399
cmp dword [eax], 0
je 0x10042c21
mov dword [ebp - 0x110], 1
jmp 0x10042c28
and dword [ebp - 0x110], 0
cmp dword [ebp - 0x74], 0
jne 0x10042d2b
cmp dword [ebp - 0x4c], 0xa7a81a82
push 2
lea ecx, [ebp - 0x160]
call fcn.1001a399
cmp dword [eax], 0xfffffffc
jg 0x10042c57
mov dword [ebp - 0x11c], 1
jmp 0x10042c5e
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x11c], eax
jl 0x10042c75
mov dword [ebp - 0x148], 1
jmp 0x10042c7c
and dword [ebp - 0x148], 0
push 2
lea ecx, [ebp - 0x160]
call fcn.1001a399
mov ecx, dword [ebp - 0x148]
imul ecx, dword [eax]
test ecx, ecx
jne 0x10042ca8
cmp dword [ebp - 0x4c], 0
je 0x10042ca8
mov dword [ebp - 0x88], 1
jmp 0x10042caf
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x88], eax
jg 0x10042cc6
mov dword [ebp - 0xf8], 1
jmp 0x10042ccd
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 1
jb 0x10042ce2
mov dword [ebp - 0x90], 1
jmp 0x10042ce9
and dword [ebp - 0x90], 0
push 1
lea ecx, [ebp - 0x160]
call fcn.1001a399
mov ecx, dword [ebp - 0x90]
cmp ecx, dword [eax]
jne 0x10042d0c
mov dword [ebp - 0x100], 1
jmp 0x10042d13
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jne 0x10042d2b
and dword [ebp - 0x98], 0
jmp 0x10042d35
mov dword [ebp - 0x98], 1
cmp dword [ebp - 0x98], 0xfffffff7
jne 0x10042d4a
mov dword [ebp - 0x108], 1
jmp 0x10042d51
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x10042d72
cmp dword [ebp - 0x6c], 0
je 0x10042d72
mov dword [ebp - 0xa0], 1
jmp 0x10042d79
and dword [ebp - 0xa0], 0
imul eax, dword [ebp - 0xa0], 0xffffffff
cmp eax, dword [ebp - 0x74]
jne 0x10042d91
mov dword [ebp - 0xa8], 1
jmp 0x10042d98
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0xa8]
jl 0x10042db2
mov dword [ebp - 0x118], 1
jmp 0x10042db9
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x118], eax
jg 0x10042dd0
mov dword [ebp - 0xb0], 1
jmp 0x10042dd7
and dword [ebp - 0xb0], 0
cmp dword [ebp - 0xb0], 0xffffffff
jae 0x10042e4d
push 1
lea ecx, [ebp - 0x1cc]
call fcn.1001a32c
mov byte [ebp - 4], 2
push 0xdfe
lea eax, [ebp - 0x1cc]
push eax
push 0x5694
push 1
lea eax, [ebp - 0x1d4]
push eax
push 0x4b0f
call fcn.10040d32
add esp, 0x18
push 0
lea ecx, [ebp - 0x1cc]
call fcn.1001a399
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x120]
mov dword [ecx], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1cc]
call fcn.1001a394
jmp 0x10042e6d
mov dword [ebp - 0x3c], 0
jmp 0x10042e5d
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jne 0x10042e6d
push 1
call fcn.10041b34
pop ecx
jmp 0x10042e56
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x200]
call fcn.1001a394
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x160]
call fcn.1001a394
mov dword [ebp - 0x184], 0xee
mov dword [ebp - 0x44], 0x8cafa32f
mov dword [ebp - 0x28], 0x478c38ec
mov dword [ebp - 0x5c], 0xfffffff6
push 1
lea ecx, [ebp - 0x154]
call fcn.1001a32c
mov dword [ebp - 4], 3
mov dword [ebp - 0x24], 0
jmp 0x10042ece
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10042ee1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x7c], 0x3df603fa
jmp 0x10042ec7
mov dword [ebp - 0x24], 0
jmp 0x10042ef1
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10042f0d
push dword [ebp - 0x24]
lea ecx, [ebp - 0x154]
call fcn.1001a399
mov dword [eax], 1
jmp 0x10042eea
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x7c], 0
je 0x10043010
mov eax, 0x912491e2
test eax, eax
je 0x10042ff1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0
jne 0x10042fd2
mov dword [ebp - 0x44], 0x3672
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x7c]
imul ecx, dword [ebp - 0x44]
sub ecx, dword [ebp + eax - 0x7c]
jne 0x10042f6c
cmp dword [ebp - 0x28], 0
jne 0x10042f6c
and dword [ebp - 0xb8], 0
jmp 0x10042f76
mov dword [ebp - 0xb8], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb8]
add ecx, dword [ebp + eax - 0x7c]
mov dword [ebp - 0x128], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x128]
mov dword [ebp + eax - 0x7c], ecx
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x128], eax
je 0x10042fb3
mov dword [ebp - 0xc0], 1
jmp 0x10042fba
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jne 0x10042fd2
and dword [ebp - 0x130], 0
jmp 0x10042fdc
mov dword [ebp - 0x130], 1
cmp dword [ebp - 0x130], 3
jge 0x10042ff1
mov dword [ebp - 0xc8], 1
jmp 0x10042ff8
and dword [ebp - 0xc8], 0
cmp dword [ebp - 0xc8], 0xcd54
jge 0x10043010
mov dword [ebp - 0x138], 1
jmp 0x10043017
and dword [ebp - 0x138], 0
push 0
lea ecx, [ebp - 0x154]
call fcn.1001a399
mov ecx, dword [ebp - 0x138]
imul ecx, dword [eax]
test ecx, ecx
je 0x10043055
mov dword [ebp - 0x174], 0
mov esi, dword [ebp - 0x174]
push 0
lea ecx, [ebp - 0x154]
call fcn.1001a399
mov dword [eax], esi
jmp 0x10043134
mov dword [ebp - 0x140], 0x6d5d64f6
mov dword [ebp - 0x28], 0
jmp 0x1004306f
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jg 0x10043134
push dword [ebp - 0x28]
lea ecx, [ebp - 0x154]
call fcn.1001a399
mov ecx, dword [ebp - 0x28]
cmp dword [eax], ecx
jle 0x100430ee
mov dword [ebp - 0x44], 0
jmp 0x1004309e
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jg 0x100430dc
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x100430c9
push 0x7069
push 1
push 0xbcc
push 0x4217
call fcn.10041b62
add esp, 0x10
mov byte [ebp - 0x32], 0
lea eax, [ebp - 0x32]
push eax
push 0
call fcn.10044422
pop ecx
pop ecx
jmp 0x10043097
push 1
lea eax, [ebp - 0x140]
push eax
call fcn.10042881
pop ecx
pop ecx
jmp 0x1004312f
mov dword [ebp - 0x17c], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x154]
call fcn.1001a399
mov eax, dword [eax]
add eax, 0x4d4b
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x17c], eax
push 0
lea eax, [ebp - 0x140]
push eax
push 0x287c
call fcn.10044604
add esp, 0xc
jmp 0x10043068
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x154]
call fcn.1001a394
mov eax, dword [ebp - 0x210]
and eax, dword [ebp - 0x184]
jne 0x1004315d
mov dword [ebp - 0xd4], 1
jmp 0x10043164
and dword [ebp - 0xd4], 0
mov al, byte [ebp - 0xd4]
mov byte [ebp - 0x15], al
mov dword [ebp - 0x10], 0x462d5e48
mov dword [ebp - 0x40], 1
mov dword [ebp - 0xfc], 0xfffffff7
mov dword [ebp - 0x1f0], 5
mov dword [ebp - 0x10], 0
jmp 0x1004319f
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x1d
jge 0x100435b4
push 2
lea ecx, [ebp - 0x19c]
call fcn.1001a32c
mov dword [ebp - 4], 4
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0x104], 0xffffffff
lea eax, [ebp - 0x20]
push eax
push 0x20c
push 0x64a3
lea eax, [ebp - 0x19c]
push eax
push 0x29c3
push 0
call fcn.10046612
add esp, 0x18
mov dword [ebp - 0x20], 0
jmp 0x1004320c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10043222
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1b4], 0xfffffff8
jmp 0x10043205
mov dword [ebp - 0x20], 0
jmp 0x10043232
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10043248
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1dc], 0
jmp 0x1004322b
push 1
lea ecx, [ebp - 0x19c]
call fcn.1001a399
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x10043268
xor eax, eax
je 0x1004346b
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0xf4], 0x20725fc1
mov dword [ebp - 0x1c], 0xffffffe5
jmp 0x10043289
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffff1
je 0x10043466
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x58], 0x5f58cdc1
cmp dword [ebp - 0x10], 0
mov esi, dword [ebp - 0x10]
push 1
lea ecx, [ebp - 0x19c]
call fcn.1001a399
cmp esi, dword [eax]
jg 0x100432c2
mov dword [ebp - 0x60], 1
jmp 0x100432c6
and dword [ebp - 0x60], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x60]
mov dword [ebp + eax - 0x1b4], ecx
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x60], eax
jl 0x100432e9
mov dword [ebp - 0x114], 1
jmp 0x100432f0
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x48], eax
je 0x1004330d
mov dword [ebp - 0xdc], 1
jmp 0x10043314
and dword [ebp - 0xdc], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x10]
je 0x10043337
mov eax, 0x4102
test eax, eax
je 0x10043337
mov dword [ebp - 0x134], 1
jmp 0x1004333e
and dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 0
jne 0x10043356
cmp dword [ebp - 0x48], 0
jne 0x10043356
and dword [ebp - 0xe4], 0
jmp 0x10043360
mov dword [ebp - 0xe4], 1
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xe4], eax
jge 0x10043374
mov dword [ebp - 0x80], 1
jmp 0x10043378
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x80], eax
jge 0x1004338c
mov dword [ebp - 0x16c], 1
jmp 0x10043393
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x1c]
mov dword [ebp - 0x58], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1dc]
cmp dword [ebp - 0x58], eax
jl 0x100433c7
mov dword [ebp - 0xec], 1
jmp 0x100433ce
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xd8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1b4], 0
jne 0x100433f0
cmp dword [ebp - 0x48], 0x119
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xefae07d7
jle 0x1004340b
mov dword [ebp - 0x144], 1
jmp 0x10043412
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x144], eax
jle 0x10043429
mov dword [ebp - 0x170], 1
jmp 0x10043430
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x48], 0x95c1f4ac
je 0x10043451
mov dword [ebp - 0x124], 1
jmp 0x10043458
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x40], eax
jmp 0x10043282
jmp 0x100435a0
mov dword [ebp - 0x64], 1
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x64]
dec ecx
mov dword [ebp - 0x64], ecx
test eax, eax
jne 0x10043578
mov dword [ebp - 0xfc], 4
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xfc], eax
jl 0x100434ab
mov dword [ebp - 0x10c], 1
jmp 0x100434b2
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10], 0xc50ec319
ja 0x100434c7
mov dword [ebp - 0x13c], 1
jmp 0x100434ce
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
sub eax, dword [ebp - 0x104]
add eax, dword [ebp - 0x40]
neg eax
imul eax, dword [ebp - 0x104]
test eax, eax
je 0x10043503
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b4], 0
jne 0x10043503
and dword [ebp - 0x12c], 0
jmp 0x1004350d
mov dword [ebp - 0x12c], 1
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x12c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1b4]
jg 0x10043532
mov dword [ebp - 0xcc], 1
jmp 0x10043539
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0xcc]
jge 0x10043553
mov dword [ebp - 0xd0], 1
jmp 0x1004355a
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0xd0]
lea eax, [ecx + eax + 0x8dce]
cmp eax, dword [ebp - 0x1c]
je 0x10043578
and dword [ebp - 0x18c], 0
jmp 0x10043582
mov dword [ebp - 0x18c], 1
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1ec], eax
push 1
lea ecx, [ebp - 0x19c]
call fcn.1001a399
mov eax, dword [eax]
mov dword [ebp - 0xd8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x19c]
call fcn.1001a394
jmp 0x10043198
mov dword [ebp - 0x10], 2
jmp 0x100435c4
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xfffffff7
jl 0x100435f5
mov dword [ebp - 0x178], 0x41f
mov byte [ebp - 0x34], 0
movzx eax, byte [ebp - 0x34]
test eax, eax
je 0x100435e8
push 1
call fcn.100428bf
pop ecx
cmp dword [ebp - 0x178], 0
je 0x100435f3
jmp 0x100435f5
jmp 0x100435bd
mov eax, dword [ebp - 0x210]
and eax, 0x101
je 0x10043606
mov byte [ebp - 0x15], 1
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x68], 0x2f0f5b87
push 4
lea ecx, [ebp - 0x1a8]
call fcn.1001a32c
mov dword [ebp - 4], 5
push 0x1f
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x1a8]
push eax
push 1
call fcn.100428ef
add esp, 0x10
mov dword [ebp - 0x14], 0xffffffe9
jmp 0x10043652
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x17
je 0x100439b4
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x50], 0x40eb4495
mov dword [ebp - 0x2c], 0x8e2294b
cmp dword [ebp - 0x14], 0
je 0x1004375f
cmp dword [ebp - 0x70], 0
je 0x100436d3
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x14], eax
jl 0x10043695
mov dword [ebp - 0xe0], 1
jmp 0x1004369c
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
add eax, 0xf9be
cmp eax, 0x1d6a
je 0x100436c0
mov dword [ebp - 0xe8], 1
jmp 0x100436c7
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 0xb441
jle 0x100436d7
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jne 0x100436eb
mov dword [ebp - 0x190], 1
jmp 0x100436f2
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x2c]
jne 0x10043716
mov dword [ebp - 0xf0], 1
jmp 0x1004371d
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xf0], eax
jl 0x10043734
mov dword [ebp - 0x180], 1
jmp 0x1004373b
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1e8], eax
mov eax, 0x547
test eax, eax
jne 0x10043753
cmp dword [ebp - 0x14], 0
je 0x1004375f
mov dword [ebp - 0x84], 1
jmp 0x10043766
and dword [ebp - 0x84], 0
imul eax, dword [ebp - 0x84], 0xfffffff8
test eax, eax
je 0x1004391e
push 1
lea ecx, [ebp - 0x1c0]
call fcn.1001a32c
mov byte [ebp - 4], 6
mov dword [ebp - 0x30], 0
jmp 0x10043796
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x100437af
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1c0]
call fcn.1001a399
and dword [eax], 0
jmp 0x1004378f
mov dword [ebp - 0x30], 0
jmp 0x100437bf
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x100437d5
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x208], 0x24a1329
jmp 0x100437b8
cmp dword [ebp - 0x14], 5
jge 0x100437e7
mov dword [ebp - 0xb4], 1
jmp 0x100437ee
and dword [ebp - 0xb4], 0
xor eax, eax
jne 0x10043884
push 0
lea ecx, [ebp - 0x1c0]
call fcn.1001a399
mov dword [eax], 0x1e07
mov eax, 0x19c
imul eax, eax, 0x1e07
cmp eax, 5
jne 0x10043825
mov dword [ebp - 0x8c], 1
jmp 0x1004382c
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x8c], eax
jne 0x10043843
mov dword [ebp - 0x94], 1
jmp 0x1004384a
and dword [ebp - 0x94], 0
imul eax, dword [ebp - 0x94], 0x8718
cmp eax, 1
jge 0x10043865
mov dword [ebp - 0x9c], 1
jmp 0x1004386c
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x10043884
and dword [ebp - 0xa4], 0
jmp 0x1004388e
mov dword [ebp - 0xa4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x208]
cmp dword [ebp - 0xa4], eax
jg 0x100438af
mov dword [ebp - 0xac], 1
jmp 0x100438b6
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xac], eax
jl 0x100438cd
mov dword [ebp - 0xbc], 1
jmp 0x100438d4
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x14]
jl 0x100438f1
mov dword [ebp - 0xc4], 1
jmp 0x100438f8
and dword [ebp - 0xc4], 0
push 0
lea ecx, [ebp - 0x1a8]
call fcn.1001a399
mov ecx, dword [ebp - 0xc4]
mov dword [eax], ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1c0]
call fcn.1001a394
jmp 0x1004397e
mov dword [ebp - 0x168], 6
mov dword [ebp - 0x188], 0x58efe572
lea eax, [ebp - 0x50]
push eax
push 1
lea eax, [ebp - 0x2c]
push eax
push 0x5424
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x1a8]
push eax
call fcn.1004297e
add esp, 0x28
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x1004397e
push 1
call fcn.10042adf
pop ecx
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x100439af
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0xcc8
push 0x1c98
push 0xa2a
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
jmp 0x1004364b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a8]
call fcn.1001a394
mov al, byte [ebp - 0x15]
jmp 0x100439ca
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret