Function at 0x10051f99
Capabilities:
Query or enumerate registry value
Query service status

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100838b1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2e0
mov dword [ebp - 0x178], 0x9696
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x1c0], 0xa756a336
mov dword [ebp - 0x298], 0xffffffff
mov dword [ebp - 0x2c0], 0
push 2
lea ecx, [ebp - 0x2b4]
call fcn.10018cbc
and dword [ebp - 4], 0
mov dword [ebp - 0xb0], 0xfffa
mov dword [ebp - 0xa8], 0x1eb64d0
mov dword [ebp - 0x90], 0
jmp 0x10052027
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x10052049
push dword [ebp - 0x90]
lea ecx, [ebp - 0x2b4]
call fcn.10018d20
mov dword [eax], 6
jmp 0x1005201a
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x1e8]
jge 0x10052095
mov dword [ebp - 0x19c], 1
jmp 0x1005209c
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x178]
sub ecx, dword [ebp - 0x19c]
sub eax, ecx
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 0x2f], 0
movzx eax, byte [ebp - 0x2f]
test eax, eax
je 0x100520ca
push 0
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b4]
call fcn.10018d1b
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1005281b
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x98], 0
jmp 0x10052105
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x10052121
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1f8], 0xb457
jmp 0x100520f8
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x10052135
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov dword [ebp - 0x70], 0
jmp 0x10052145
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x11
jl 0x1005225b
push 3
lea ecx, [ebp - 0x208]
call fcn.10018cbc
mov dword [ebp - 4], 1
mov dword [ebp - 0x8c], 0
jmp 0x1005217c
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1005219e
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x208]
call fcn.10018d20
mov dword [eax], 0xfebb6748
jmp 0x1005216f
push 0
lea ecx, [ebp - 0x208]
call fcn.10018d20
and dword [eax], 0
jmp 0x100521d4
push 0
lea ecx, [ebp - 0x208]
call fcn.10018d20
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x148]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x208]
call fcn.10018d20
cmp dword [eax], 0
jl 0x1005222f
mov dword [ebp - 0x5c], 0xfffffffb
mov dword [ebp - 0x5c], 0
jmp 0x100521fd
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10052213
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x1f8], 0
jmp 0x100521f6
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x1005222d
push 0
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
jmp 0x100521b0
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x10052247
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x208]
call fcn.10018d1b
jmp 0x1005213e
push 3
lea ecx, [ebp - 0x230]
call fcn.10018cbc
mov dword [ebp - 4], 2
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x20], 0
jmp 0x10052286
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100522a2
push dword [ebp - 0x20]
lea ecx, [ebp - 0x230]
call fcn.10018d20
mov dword [eax], 0x4a8c
jmp 0x1005227f
mov dword [ebp - 0x20], 0
jmp 0x100522b2
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100522c8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x23c], 3
jmp 0x100522ab
mov dword [ebp - 0x28], 0
jmp 0x100522d8
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x10052307
mov dword [ebp - 0x194], 0x82a1836c
mov dword [ebp - 0x194], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x194]
mov dword [ebp + eax - 0x23c], ecx
jmp 0x100522d1
push 0
lea ecx, [ebp - 0x230]
call fcn.10018d20
mov ecx, dword [ebp - 0x28]
cmp dword [eax], ecx
jle 0x10052327
mov dword [ebp - 0xe8], 1
jmp 0x1005232e
and dword [ebp - 0xe8], 0
cmp dword [ebp - 0xe8], 0x110e
jne 0x10052346
mov dword [ebp - 0x1a0], 1
jmp 0x1005234d
and dword [ebp - 0x1a0], 0
cmp dword [ebp - 0x1a0], 0x61fc2da8
jle 0x10052365
mov dword [ebp - 0x1cc], 1
jmp 0x1005236c
and dword [ebp - 0x1cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x23c]
mov dword [ebp - 0x268], eax
mov eax, 0x8a06
sub eax, dword [ebp - 0x28]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x23c]
jne 0x100523a1
mov dword [ebp - 0xc8], 1
jmp 0x100523a8
and dword [ebp - 0xc8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xc8]
mov dword [ebp + eax - 0x23c], ecx
push 0
lea ecx, [ebp - 0x230]
call fcn.10018d20
mov ecx, dword [ebp - 0xc8]
add ecx, dword [eax]
cmp dword [ebp - 0x28], ecx
jge 0x100523e0
mov dword [ebp - 0xf0], 1
jmp 0x100523e7
and dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 0xe327
je 0x100523ff
mov dword [ebp - 0x150], 1
jmp 0x10052406
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x28], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x230]
call fcn.10018d1b
mov byte [ebp - 0x33], 0
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x100], 0xa61bf079
mov dword [ebp - 0x1e0], 0xb489f7a9
mov dword [ebp - 0x14], 0
jmp 0x1005244d
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x10052463
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x218], 0
jmp 0x10052446
mov dword [ebp - 0x14], 0
jmp 0x10052473
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10052489
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x290], 0x89d2
jmp 0x1005246c
mov dword [ebp - 0x2c], 0
jmp 0x10052499
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x100525d7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x218], 0
je 0x100524c3
xor eax, eax
je 0x100524c3
mov dword [ebp - 0xf8], 1
jmp 0x100524ca
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 1
jle 0x100524df
mov dword [ebp - 0x180], 1
jmp 0x100524e6
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x218]
cmp eax, dword [ebp - 0x100]
jl 0x10052510
mov dword [ebp - 0x158], 1
jmp 0x10052517
and dword [ebp - 0x158], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
cmp eax, dword [ebp - 0x158]
je 0x10052538
mov dword [ebp - 0x108], 1
jmp 0x1005253f
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x218]
cmp eax, dword [ebp - 0x108]
jg 0x1005255d
mov dword [ebp - 0x1c4], 1
jmp 0x10052564
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x218], 0xffff
jbe 0x10052580
mov dword [ebp - 0x198], 1
jmp 0x10052587
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0x9beab1d6
ja 0x100525a6
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x100525a6
mov dword [ebp - 0x110], 1
jmp 0x100525ad
and dword [ebp - 0x110], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x218]
imul eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x2c]
imul eax, dword [ebp + ecx*4 - 0x218]
mov dword [ebp - 0x1e0], eax
jmp 0x10052492
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x1005277c
mov dword [ebp - 0x94], 0x24a8c6a5
mov dword [ebp - 0x270], 0xfffffff6
mov dword [ebp - 0x278], 0x7be9fb1c
mov dword [ebp - 0x280], 0x5739
mov dword [ebp - 0x288], 0xffffffff
mov dword [ebp - 0x294], 0xedd1edb6
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x78], 0
jmp 0x10052639
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1005264f
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x2ec], 0x1078932
jmp 0x10052632
mov dword [ebp - 0x94], 0x17
jmp 0x10052668
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xfffffff6
jle 0x10052758
mov dword [ebp - 0x60], 2
push 2
lea ecx, [ebp - 0x248]
call fcn.10018cbc
mov dword [ebp - 4], 3
mov dword [ebp - 0x80], 0
jmp 0x100526a0
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x100526b9
push dword [ebp - 0x80]
lea ecx, [ebp - 0x248]
call fcn.10018d20
and dword [eax], 0
jmp 0x10052699
cmp dword [ebp - 0x60], 0
je 0x100526d3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x248]
call fcn.10018d1b
jmp 0x10052758
mov dword [ebp - 0x60], 0
jmp 0x100526e3
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jg 0x10052744
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x54], 1
jmp 0x10052700
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10052742
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x1005272b
push 0x186e
push 0xc9a
push 0
push 0x21da
push 0
call dword [sym.imp.USER32.dll_GetMenuStringW]
push dword [ebp - 0x54]
lea ecx, [ebp - 0x248]
call fcn.10018d20
cmp dword [eax], 0
je 0x10052740
jmp 0x100526f9
jmp 0x100526f9
jmp 0x100526dc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x248]
call fcn.10018d1b
jmp 0x1005265b
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
push 0xa30
push 0x1cba
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [ebp - 0x9c], 0xe1757117
mov dword [ebp - 0x9c], 0x14
jmp 0x1005279f
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xfffffffa
jge 0x10052816
mov dword [ebp - 0x88], 5
mov dword [ebp - 0x1f4], 0xb363f9e9
mov byte [ebp - 0x30], 0
movzx eax, byte [ebp - 0x30]
test eax, eax
je 0x100527d7
push 0
push 0x15d2
push 0
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
mov dword [ebp - 0x88], 0
jmp 0x100527f0
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xfffffffa
jl 0x10052811
mov dword [ebp - 0x1d4], 0x9b79
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x1d4], eax
jmp 0x100527e3
jmp 0x10052792
jmp 0x10053349
mov dword [ebp - 0x1dc], 0x97e780ca
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x170], 0x3631e19e
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0x18], 0
jmp 0x1005285a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10052870
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc4], 0xfffffffc
jmp 0x10052853
mov dword [ebp - 0x18], 0
jmp 0x10052880
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10052896
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b0], 0x58bdfadf
jmp 0x10052879
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
add eax, dword [ebp - 0xb8]
je 0x1005291d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xc4], 0
jb 0x100528e6
mov dword [ebp - 0x118], 1
jmp 0x100528ed
and dword [ebp - 0x118], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
add eax, dword [ebp - 0x118]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x1b0]
test eax, eax
je 0x1005291d
mov dword [ebp - 0x188], 1
jmp 0x10052924
and dword [ebp - 0x188], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x188]
add ecx, 0x2fc4eb
cmp dword [ebp + eax - 0xc4], ecx
jge 0x10052958
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b0], 0
jne 0x10052958
and dword [ebp - 0x1ec], 0
jmp 0x10052962
mov dword [ebp - 0x1ec], 1
cmp dword [ebp - 0x10], 0
jne 0x10052978
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x10052978
and dword [ebp - 0x120], 0
jmp 0x10052982
mov dword [ebp - 0x120], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x120], eax
jne 0x100529a2
mov dword [ebp - 0x168], 1
jmp 0x100529a9
and dword [ebp - 0x168], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x168]
mov dword [ebp + eax - 0x1b0], ecx
mov dword [ebp - 0x10], 0
jmp 0x100529cc
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x10052b44
mov dword [ebp - 0x138], 0x289ed5b6
mov byte [ebp - 0x32], 0
movzx eax, byte [ebp - 0x32]
test eax, eax
je 0x100529fe
push 0x19f4
push 0x2499
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xc4]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp + ecx*4 - 0x1b0]
cmp dword [ebp + eax*4 - 0xc4], ecx
je 0x10052a30
mov dword [ebp - 0x128], 1
jmp 0x10052a37
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xc4]
cmp dword [ebp - 0x128], eax
jle 0x10052a55
mov dword [ebp - 0x140], 1
jmp 0x10052a5c
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xc4]
add eax, dword [ebp - 0x1dc]
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0xc4]
jge 0x10052a84
mov dword [ebp - 0x1a4], 1
jmp 0x10052a8b
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1a4], eax
jg 0x10052aa2
mov dword [ebp - 0x130], 1
jmp 0x10052aa9
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 7
jae 0x10052ad6
mov dword [ebp - 0x190], 1
jmp 0x10052add
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x1b0]
add eax, dword [ebp - 0x190]
je 0x10052b04
mov eax, 0x52ad14ca
test eax, eax
je 0x10052b04
mov dword [ebp - 0xdc], 1
jmp 0x10052b0b
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0xdc]
jge 0x10052b25
mov dword [ebp - 0xe0], 1
jmp 0x10052b2c
and dword [ebp - 0xe0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe0]
mov dword [ebp + eax - 0x1b0], ecx
jmp 0x100529c5
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1d8], eax
push 2
lea ecx, [ebp - 0x224]
call fcn.10018cbc
mov dword [ebp - 4], 4
mov dword [ebp - 0x44], 0xdf2f4a8b
mov dword [ebp - 0x64], 0
jmp 0x10052b78
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10052b94
push dword [ebp - 0x64]
lea ecx, [ebp - 0x224]
call fcn.10018d20
mov dword [eax], 0xf0ea75c9
jmp 0x10052b71
mov dword [ebp - 0x44], 0
jmp 0x10052ba4
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jg 0x10052bd6
push dword [ebp - 0x44]
lea ecx, [ebp - 0x224]
call fcn.10018d20
cmp dword [eax], 0
je 0x10052bbf
jmp 0x10052bd6
push dword [ebp - 0x44]
lea ecx, [ebp - 0x224]
call fcn.10018d20
cmp dword [eax], 0
je 0x10052bd4
jmp 0x10052bd6
jmp 0x10052b9d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x224]
call fcn.10018d1b
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0xa4], 0
jmp 0x10052c0c
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x10052c28
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xd8], 0xe57ad95e
jmp 0x10052bff
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd8], 0xc204e2db
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0xd8]
cmp eax, 0xfffffff7
je 0x10052c65
mov dword [ebp - 0xe4], 1
jmp 0x10052c6c
and dword [ebp - 0xe4], 0
imul eax, dword [ebp - 0xe4], 0x6baf
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0xd8]
jl 0x10052e3b
mov dword [ebp - 0xac], 0x361a
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x12c], 0x6a5b5cf0
mov dword [ebp - 0xa0], 0
jmp 0x10052cc3
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x10052cdf
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x2bc], 0xcadfb1af
jmp 0x10052cb6
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x24], 0xffff
mov eax, dword [ebp - 0x24]
neg eax
mov ecx, dword [ebp - 0xac]
sub ecx, eax
mov dword [ebp - 0xec], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xec]
mov dword [ebp + eax - 0x2bc], ecx
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xec], eax
je 0x10052d32
mov dword [ebp - 0xf4], 1
jmp 0x10052d39
and dword [ebp - 0xf4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
imul eax, dword [ebp - 0xf4]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xd8]
je 0x10052d67
mov dword [ebp - 0xfc], 1
jmp 0x10052d6e
and dword [ebp - 0xfc], 0
cmp dword [ebp - 0xfc], 0xb90f
jne 0x10052d86
mov dword [ebp - 0x104], 1
jmp 0x10052d8d
and dword [ebp - 0x104], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp dword [ebp - 0x104], eax
jle 0x10052dae
mov dword [ebp - 0x10c], 1
jmp 0x10052db5
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x114], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp dword [ebp - 0x114], eax
je 0x10052de2
mov dword [ebp - 0x11c], 1
jmp 0x10052de9
and dword [ebp - 0x11c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
imul eax, dword [ebp - 0x11c]
cmp eax, 0xffff
jae 0x10052e10
mov dword [ebp - 0x124], 1
jmp 0x10052e17
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x12c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x12c]
mov dword [ebp + eax - 0xd8], ecx
jmp 0x10053100
mov dword [ebp - 0x6c], 0xdee94ccb
mov dword [ebp - 0x50], 0x5e3970c0
mov dword [ebp - 0x74], 0x744fa755
cmp dword [ebp - 0x6c], 0xfff9
je 0x10052e65
mov dword [ebp - 0x134], 1
jmp 0x10052e6c
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x134], eax
jle 0x10052e89
mov eax, 0xdcfe
test eax, eax
jne 0x10052e89
and dword [ebp - 0xb4], 0
jmp 0x10052e93
mov dword [ebp - 0xb4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4]
mov dword [ebp + eax - 0xd8], ecx
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xb4], eax
jg 0x10052ebd
mov dword [ebp - 0x13c], 1
jmp 0x10052ec4
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x24]
neg eax
cmp eax, dword [ebp - 0x74]
jne 0x10052ee3
mov dword [ebp - 0x1fc], 1
jmp 0x10052eea
and dword [ebp - 0x1fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp dword [ebp - 0x24], eax
jl 0x10052f08
mov dword [ebp - 0x144], 1
jmp 0x10052f0f
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0
ja 0x10052f24
mov dword [ebp - 0x14c], 1
jmp 0x10052f2b
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x14c], eax
jg 0x10052f42
mov dword [ebp - 0x154], 1
jmp 0x10052f49
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x154], eax
je 0x10052f60
mov dword [ebp - 0x15c], 1
jmp 0x10052f67
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
sub eax, 0xd0294e
cmp eax, dword [ebp - 0x4c]
jg 0x10052f83
mov dword [ebp - 0x164], 1
jmp 0x10052f8a
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jae 0x10052fa5
mov dword [ebp - 0x1e4], 1
jmp 0x10052fac
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
je 0x10052fcc
mov dword [ebp - 0x16c], 1
jmp 0x10052fd3
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x16c]
jle 0x10052fea
mov dword [ebp - 0x1c8], 1
jmp 0x10052ff1
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x4c], 0
je 0x100530ea
mov dword [ebp - 0x68], 0
jmp 0x1005300b
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10053021
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x254], 0x6abe
jmp 0x10053004
cmp dword [ebp - 0x6c], 0
je 0x100530d4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd8], 0x4b5a
jle 0x1005304a
mov dword [ebp - 0x17c], 1
jmp 0x10053051
and dword [ebp - 0x17c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x254]
mov dword [ebp - 0x2a0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x50]
cmp dword [ebp + eax - 0x254], ecx
je 0x10053081
mov dword [ebp - 0x1d0], 1
jmp 0x10053088
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x274], eax
mov eax, 0x6db78960
test eax, eax
ja 0x100530a6
mov dword [ebp - 0x174], 1
jmp 0x100530ad
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x174]
test eax, eax
jne 0x100530cd
cmp dword [ebp - 0x50], 0
je 0x100530cd
mov dword [ebp - 0x184], 1
jmp 0x100530d4
and dword [ebp - 0x184], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x254], 0xaf71
mov dword [ebp - 0x74], eax
jmp 0x10053100
mov byte [ebp - 0x34], 0
movzx eax, byte [ebp - 0x34]
test eax, eax
je 0x10053100
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [eax], 0
jmp 0x1005311f
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
mov eax, dword [ebp - 0x48]
cmp dword [eax], 4
jg 0x10053242
mov dword [ebp - 0x2c4], 0x47dfa860
mov dword [ebp - 0x27c], 0xffffffff
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x284], 1
mov dword [ebp - 0x84], 2
mov dword [ebp - 0x2c8], 0
push 3
lea ecx, [ebp - 0x260]
call fcn.10018cbc
mov dword [ebp - 4], 5
mov dword [ebp - 0x3c], 0xca420452
mov dword [ebp - 0x7c], 0
jmp 0x10053192
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x100531ae
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x260]
call fcn.10018d20
mov dword [eax], 0xab274bf9
jmp 0x1005318b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0
jmp 0x100531c5
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jg 0x10053224
mov dword [ebp - 0x84], 2
jmp 0x100531e4
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x10053222
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x260]
call fcn.10018d20
cmp dword [eax], 0
je 0x10053202
jmp 0x10053222
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x10053220
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
jmp 0x100531d7
jmp 0x100531be
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x260]
call fcn.10018d1b
mov eax, dword [ebp - 0x48]
cmp dword [eax], 0
je 0x1005323d
jmp 0x10053242
jmp 0x10053114
push 3
lea ecx, [ebp - 0x1bc]
call fcn.10018cbc
mov dword [ebp - 4], 6
mov dword [ebp - 0x1c], 0
jmp 0x10053266
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1005327c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2e0], 0xc93b4e1
jmp 0x1005325f
mov dword [ebp - 0x1c], 0
jmp 0x1005328c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x100532a8
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1bc]
call fcn.10018d20
mov dword [eax], 0x4643cdf9
jmp 0x10053285
push 0
lea ecx, [ebp - 0x1bc]
call fcn.10018d20
and dword [eax], 0
jmp 0x100532de
push 0
lea ecx, [ebp - 0x1bc]
call fcn.10018d20
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x18c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1bc]
call fcn.10018d20
cmp dword [eax], 3
jg 0x1005333a
mov dword [ebp - 0x58], 0xfbb4ebb0
mov dword [ebp - 0x58], 0
jmp 0x10053307
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x1005331d
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x2e0], 0x8ce3e63e
jmp 0x10053300
push 0
lea ecx, [ebp - 0x1bc]
call fcn.10018d20
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x2e0], 0
je 0x10053338
jmp 0x1005333a
jmp 0x100532ba
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1bc]
call fcn.10018d1b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret