Function at 0x11078eb0
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x111de4f5
mov eax, dword fs:[0]
push eax
sub esp, 0x564
mov eax, dword [0x11279148]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x1127aa58]
push str.cl32main
mov dword [ebp - 0x548], eax
call fcn.11123360
push 8
call fcn.111709c0
add esp, 8
mov dword [ebp - 0x53c], eax
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp eax, ebx
je 0x11078f24
mov ecx, dword [0x1127aa44]
push ecx
mov ecx, eax
call fcn.111b82f0
mov esi, eax
mov dword [ebp - 0x53c], eax
jmp 0x11078f2c
xor esi, esi
mov dword [ebp - 0x53c], esi
mov dword [ebp - 0x568], esi
mov ecx, esi
mov dword [ebp - 4], 1
call fcn.111b8450
push 0x20
lea edx, [ebp - 0xac]
push edx
push 0x56
mov ecx, esi
call fcn.111b8460
mov edi, dword [sym.imp.MSVCR100.dll__wcsicmp]
test eax, eax
je 0x11078fa0
lea eax, [ebp - 0xac]
push str.istaService
push eax
call edi
add esp, 8
test eax, eax
jne 0x11078f7b
mov dword [0x1127ad00], 1
lea ecx, [ebp - 0xac]
push str.istaUI
push ecx
call edi
add esp, 8
test eax, eax
jne 0x11078fa0
mov dword [0x1127acfc], 1
mov dword [0x1127ad00], ebx
mov ecx, esi
call fcn.111b8450
push 0x20
lea edx, [ebp - 0xac]
push edx
push 0x54
mov ecx, esi
call fcn.111b8460
test eax, eax
je 0x11078fd3
lea eax, [ebp - 0xac]
push eax
call dword [sym.imp.MSVCR100.dll__wtoi]
add esp, 4
inc eax
mov dword [0x1127ad10], eax
cmp dword [0x1127ad00], ebx
jne 0x11079007
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
mov eax, dword [edx + 0xbc]
call eax
test eax, eax
je 0x11079046
push ebx
push ebx
push 6
call fcn.111bb9f0
add esp, 0xc
test eax, eax
je 0x11079046
cmp dword [0x1127acfc], ebx
jne 0x1107904e
mov eax, 0x1127ac64
mov dword [0x1127ad00], 1
add eax, 0xfffffffe
lea esp, [esp]
mov cx, word [eax + 2]
add eax, 2
cmp cx, bx
jne 0x11079020
mov ecx, dword [str.Vista]
mov edx, dword [0x1120c40c]
mov dword [eax], ecx
mov ecx, dword [0x1120c410]
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
cmp dword [0x1127acfc], ebx
je 0x11079074
push 0x2000
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x11079074
push str.Session_shutting_down__exiting..._n
call fcn.111bd7b0
add esp, 4
push 0x2000
call fcn.110773b0
cmp dword [0x1127ad00], ebx
je 0x11079091
call fcn.11066150
test al, al
je 0x11079091
call fcn.11066240
push 0x63
call fcn.110773b0
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
call eax
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [0x1127b844], eax
cmp eax, ebx
jne 0x110790c5
push 0x8ae
push str.CLIENT32.CPP
push str.gClient.hNotifyEvent
call fcn.11067750
push 4
call fcn.111709c0
add esp, 4
mov dword [ebp - 0x540], eax
mov byte [ebp - 4], 2
cmp eax, ebx
je 0x110790ef
mov ecx, dword [0x1127b844]
push ecx
push 1
mov ecx, eax
call fcn.111712f0
jmp 0x110790f1
xor eax, eax
push 4
mov byte [ebp - 4], 1
mov dword [0x1127aa64], eax
call fcn.111709c0
add esp, 4
mov dword [ebp - 0x540], eax
mov byte [ebp - 4], 3
cmp eax, ebx
je 0x11079124
mov edx, dword [0x1127b844]
push edx
push 1
mov ecx, eax
call fcn.111712f0
jmp 0x11079126
xor eax, eax
mov edx, dword [0x1127aa64]
mov ecx, dword [0x1127aa60]
push ebx
push edx
push 0x20000000
mov dword [0x1127b840], eax
mov eax, dword [ecx]
mov eax, dword [eax + 8]
push 0x110a6970
push 0x20000105
mov byte [ebp - 4], 1
call eax
mov eax, dword [0x1127aa64]
mov ecx, dword [0x1127aa60]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
push ebx
push eax
push 0x20000000
push 0x110659d0
push 0x3000010c
call edx
mov edx, dword [0x1127aa64]
mov ecx, dword [0x1127aa60]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
push ebx
push edx
push 0x20000000
push 0x110772b0
push 0x30000110
call eax
mov eax, dword [0x1127aa64]
mov ecx, dword [0x1127aa60]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
push ebx
push eax
push 0x20000000
push fcn.11076ae0
push 0x3000011d
call edx
mov edx, dword [0x1127aa64]
mov ecx, dword [0x1127aa60]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
push ebx
push edx
push 0x20000000
push 0x1106d240
push 0x3000011e
call eax
mov eax, dword [0x1127aa64]
mov ecx, dword [0x1127aa60]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
push ebx
push eax
push 0x20000000
push 0x11066110
push 0x3000012b
call edx
mov edx, dword [0x1127aa64]
mov ecx, dword [0x1127aa60]
mov eax, dword [ecx]
mov eax, dword [eax + 8]
push ebx
push edx
push ebx
push 0x1106dbf0
push 0x10000121
call eax
push 0x58
call fcn.111709c0
add esp, 4
mov dword [ebp - 0x540], eax
mov byte [ebp - 4], 4
cmp eax, ebx
je 0x11079266
mov ecx, dword [0x1127aa60]
mov edx, dword [ebp - 0x548]
push ebx
push 0x11270c48
push 1
push ebx
push 0xffffffffffffffff
push ecx
push edx
mov ecx, eax
call fcn.110bfd50
mov edi, eax
mov dword [ebp - 0x550], eax
jmp 0x1107926e
xor edi, edi
mov dword [ebp - 0x550], edi
push edi
mov byte [ebp - 4], 1
call fcn.1107cb50
push 0x24
mov dword [0x1127aa68], edi
call fcn.111709c0
add esp, 8
mov dword [ebp - 0x540], eax
mov byte [ebp - 4], 5
cmp eax, ebx
je 0x110792ad
mov ecx, dword [0x1127aa60]
push 0x1120c380
push 1
push ecx
mov ecx, eax
call fcn.110beb60
jmp 0x110792af
xor eax, eax
mov ebx, dword [sym.imp.USER32.dll_FindWindowW]
push 0
push 0x1127ac64
mov byte [ebp - 4], 1
mov dword [0x1127aa6c], eax
mov dword [0x1127c7c4], 1
mov dword [0x1127ad0c], 0xffffffff
call ebx
mov esi, eax
mov dword [ebp - 0x540], esi
test esi, esi
je 0x11079413
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc0]
call eax
test eax, eax
je 0x11079413
lea ecx, [ebp - 0x544]
push ecx
push esi
mov dword [ebp - 0x544], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [ebp - 0x544]
push eax
push eax
push str.Info._Client_already_running__pid_d__x_x__n
call fcn.111bd7b0
mov edx, dword [ebp - 0x544]
add esp, 0xc
push edx
push 0
push 0x100400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
je 0x11079413
xor eax, eax
push eax
push eax
push eax
push 0x100
lea ecx, [ebp - 0x32c]
push ecx
push esi
mov word [ebp - 0x32c], ax
call fcn.110fc0e0
mov edi, eax
push edi
lea edx, [ebp - 0x32c]
push edx
push str.Info._Client_running_as_user_s__type_d_n
call fcn.111bd7b0
add esp, 0x24
cmp edi, 1
jle 0x110793c5
push str.Info._Trying_to_close_client_n
call fcn.111bd7b0
mov eax, dword [ebp - 0x540]
add esp, 4
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x7530
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x110793c5
push str.closed_ok_n
call fcn.111bd7b0
add esp, 4
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0x1127ac64
call ebx
mov esi, eax
xor eax, eax
mov dword [ebp - 0x540], esi
mov dword [ebp - 0x544], eax
test esi, esi
je 0x110793fd
lea ecx, [ebp - 0x544]
push ecx
push esi
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [ebp - 0x544]
push eax
push eax
push esi
push str.hClientRunning___x__pid_d__x_x__n
call fcn.111bd7b0
mov edi, dword [ebp - 0x550]
add esp, 0x10
push str.Bridge
mov ecx, edi
call fcn.110bf1d0
push str.Client
mov ecx, edi
call fcn.110bf1d0
push str.View
mov ecx, edi
call fcn.110bf1d0
cmp dword [0x1127ad00], 0
jne 0x11079453
call fcn.11065670
mov dword [ebp - 0x54c], 0xc08
test al, al
je 0x1107945d
mov dword [ebp - 0x54c], 9
mov dword [ebp - 0x538], str.NSM.LIC
call fcn.111be6b0
test al, al
je 0x1107947c
mov dword [ebp - 0x538], str.NSA.LIC
jmp 0x1107948f
call fcn.11067ea0
test al, al
je 0x1107948f
mov dword [ebp - 0x538], str.IKS.LIC
mov edx, dword [ebp - 0x538]
push 1
push edx
call fcn.111bb700
mov ebx, eax
mov dword [ebp - 0x570], ebx
push 1
push str.NSW.LIC
mov byte [ebp - 4], 6
call fcn.111bb700
mov esi, eax
add esp, 0x10
mov dword [ebp - 0x56c], esi
mov byte [ebp - 4], 7
call fcn.111babb0
test al, al
jne 0x110794e3
push 0
push esi
call fcn.111be4e0
add esp, 8
test eax, eax
je 0x110794e3
mov esi, 1
jmp 0x110794e5
xor esi, esi
call fcn.111babb0
test al, al
jne 0x11079507
push 0
push ebx
call fcn.111be4e0
add esp, 8
mov dword [ebp - 0x554], 1
test eax, eax
jne 0x11079511
mov dword [ebp - 0x554], 0
call fcn.111babb0
test al, al
jne 0x11079547
test esi, esi
je 0x11079547
mov ebx, dword [ebp - 0x53c]
mov ecx, ebx
call fcn.111b8450
push 0xa
lea eax, [ebp - 0x64]
push eax
push 0x53
mov ecx, ebx
call fcn.111b8460
test eax, eax
je 0x11079545
mov ebx, str.NSW.LIC
jmp 0x1107954d
xor esi, esi
mov ebx, dword [ebp - 0x538]
call fcn.111babb0
test al, al
jne 0x11079649
cmp dword [ebp - 0x554], 0
jne 0x1107956b
test esi, esi
je 0x11079649
mov edx, dword [ebp - 0x54c]
push ebx
lea ecx, [ebp - 0x538]
push ecx
push 0
push edx
mov ecx, edi
mov dword [ebp - 0x538], 0
call fcn.110c1440
test eax, eax
jne 0x11079665
call fcn.11123260
push eax
mov eax, dword [ebp - 0x538]
push ebx
push eax
push str.Error_x_x_reading__s__sesh_d_n
call fcn.111bd7b0
mov esi, 0x91
add esp, 0x10
cmp dword [ebp - 0x538], esi
jne 0x11079600
mov ecx, edi
call fcn.110bf870
test al, al
jne 0x110795ef
mov ecx, edi
call fcn.110bf890
test al, al
jne 0x110795ef
test byte [ebp - 0x54c], 1
jne 0x110795ef
push ebx
lea ecx, [ebp - 0x538]
push ecx
push 0
push 0
mov ecx, edi
call fcn.110c1440
cmp dword [ebp - 0x538], esi
jne 0x11079600
mov byte [0x1127ad28], 1
jmp 0x11079665
cmp dword [0x1127ad00], 0
jne 0x1107963d
call fcn.11065670
test al, al
jne 0x1107963d
cmp dword [0x1127acfc], 0
jne 0x11079624
cmp dword [0x1127ad10], 0
je 0x11079636
push 0x7d0
push 0x1127ae98
call fcn.1114d3c0
add esp, 8
push 1
call fcn.110773b0
mov dword [0x1127ad04], 1
jmp 0x11079665
cmp byte [0x1127ad8d], 0
jne 0x11079665
call fcn.111babb0
test al, al
jne 0x11079665
mov dword [0x1127aa4c], 1
push edi
call fcn.11064bf0
add esp, 4
call fcn.111b8710
cmp eax, 0x37
jne 0x1107968f
push 1
call fcn.11068bb0
push 6
call fcn.11068bb0
push eax
call fcn.111b8720
add esp, 0xc
cmp dword [0x1127ad00], 0
je 0x1107969d
call fcn.111529a0
call fcn.11065b70
cmp dword [0x1127aa48], 0x50002
jge 0x110796b8
push 1
call fcn.111b6a60
add esp, 4
call fcn.111b8710
cmp eax, 0x14
jl 0x110796cc
mov dword [str.nsm32.chm], 0x1120c218
call fcn.11077c50
mov ecx, dword [0x1127aa68]
push 0
push 2
push str.ShutdownLevel
push str.Client
call fcn.110bbc00
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
lea ecx, [ebp - 0x564]
call fcn.1113dd30
mov ecx, dword [0x1127aa68]
mov edx, dword [ecx]
mov edx, dword [edx + 8]
push 0
lea eax, [ebp - 0x564]
push eax
push str._checksum
push str._License
mov byte [ebp - 4], 8
call edx
mov ecx, dword [0x1127aa68]
call fcn.110bf8e0
test al, al
je 0x110798ba
cmp dword [0x1127ac2c], 0
jne 0x110798ba
cmp dword [0x1127aa4c], 0
jne 0x110798ba
call dword [sym.imp.pcichek.dll_IsILS]
mov esi, eax
mov eax, dword [0x1127ad00]
push eax
push esi
push str.IsILS_returned__d__isvistaservice__d_n
call fcn.111bd7b0
add esp, 0xc
test esi, esi
je 0x110798ba
cmp dword [0x1127ad00], 0
jne 0x110798b0
call fcn.11065670
test al, al
jne 0x110798b0
push str.Error._Wrong_hardware._Terminating_n
call fcn.111bd7b0
lea eax, [esi + 9]
add esp, 4
cmp eax, 7
ja case.default.0x110797a6
jmp dword [eax*4 + 0x1107b0ac]
mov eax, 0x3fd
jmp 0x110797e3
mov eax, 0x3fe
jmp 0x110797e3
mov eax, 0x3ff
jmp 0x110797e3
mov eax, 0x401
jmp 0x110797e3
mov eax, 0x402
jmp 0x110797e3
mov eax, 0x404
jmp 0x110797e3
mov eax, 0x406
jmp 0x110797e3
mov eax, 0x407
push eax
call fcn.111bccb0
add esp, 4
push eax
lea ecx, [ebp - 0x60]
call fcn.1113ccd0
push 0x1120c160
push 7
mov byte [ebp - 4], 9
call fcn.11068bb0
add esp, 4
push eax
call dword [sym.imp.MSVCR100.dll__wcsicmp]
add esp, 8
test eax, eax
jne 0x1107983a
push 0x1120c158
push str.Intel
lea ecx, [ebp - 0x60]
call fcn.1113d1c0
push 0x1120c158
push str.Intel_r_
lea ecx, [ebp - 0x60]
call fcn.1113d1c0
lea ecx, [ebp - 0x60]
call fcn.1104dac0
push eax
push str.Intel_error___s__n
call fcn.111bd7b0
mov edi, dword [ebp - 0x548]
mov esi, dword [edi]
add esp, 8
lea ecx, [ebp - 0x60]
call fcn.1104dac0
mov ecx, dword [esi + 4]
push eax
push 0
push 0x3f7
push edi
call ecx
add esp, 0x10
cmp dword [0x1127acfc], 0
jne 0x11079883
cmp dword [0x1127ad10], 0
je 0x11079895
push 0x7d0
push 0x1127ae98
call fcn.1114d3c0
add esp, 8
push 1
call fcn.110773b0
push 0xa00
push str.CLIENT32.CPP
push 0x11203bcc
call fcn.11067750
mov dword [0x1127ad04], 1
push 7
mov esi, 0x1120c160
call fcn.11068bb0
add esp, 4
lea esp, [esp]
mov cx, word [eax]
cmp cx, word [esi]
jne 0x110798f6
test cx, cx
je 0x110798f2
mov cx, word [eax + 2]
cmp cx, word [esi + 2]
jne 0x110798f6
add eax, 4
add esi, 4
test cx, cx
jne 0x110798d0
xor eax, eax
jmp 0x110798fb
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x110799ba
cmp dword [0x1127ac2c], eax
jne 0x110799ba
cmp dword [0x1127aa4c], eax
jne 0x110799ba
call dword [sym.imp.pcichek.dll_IsJPIK]
mov edx, dword [0x1127ad00]
push edx
mov esi, eax
push esi
push str.IsJPIK_returned__d__isvistaservice__d_n
call fcn.111bd7b0
add esp, 0xc
cmp esi, 0x63
jne 0x11079948
call fcn.11067ea0
test al, al
je 0x1107994c
jmp 0x110799ba
test esi, esi
je 0x110799ba
cmp dword [0x1127ad00], 0
jne 0x110799b0
call fcn.11065670
test al, al
jne 0x110799b0
push str.Error._Wrong_hardware._Terminating_n
call fcn.111bd7b0
mov eax, dword [ebp - 0x548]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push str.Unsupported_Platform
push 0
push 0x3f7
push eax
call edx
add esp, 0x14
cmp dword [0x1127acfc], 0
jne 0x11079997
cmp dword [0x1127ad10], 0
je 0x110799a9
push 0x7d0
push 0x1127ae98
call fcn.1114d3c0
add esp, 8
push 1
call fcn.110773b0
mov dword [0x1127ad04], 1
cmp dword [0x1127acfc], 0
jne 0x110799cc
cmp dword [0x1127ad10], 0
je 0x110799e5
push 0
push 2
push 6
call fcn.111bb9f0
add esp, 0xc
test eax, eax
je 0x110799e5
mov byte [0x1127ab45], 1
call fcn.111bbd10
test eax, eax
je 0x11079a13
mov ecx, dword [0x1127aa68]
push 0
push 0xffffffffffffffff
push str.win8ui
push str._debug
call fcn.110bbc00
test eax, eax
js 0x11079a13
setne al
mov byte [0x1127ab45], al
cmp dword [0x1127aa48], 0x160003
jl 0x11079a37
cmp dword [0x1127ad00], 0
je 0x11079a37
mov ecx, dword [0x1127b220]
push 0
push 0
call fcn.1115d5e0
mov edx, dword [ebp - 0x564]
mov eax, dword [edx]
lea ecx, [ebp - 0x564]
call eax
test al, al
jne 0x11079a5f
push 0x266
push str.e:_nsmsrc_nsm14101410fctl32NSMString.h
push str.IsA__
call fcn.11067750
mov ecx, dword [ebp - 0x558]
push 0x10
push 0
push ecx
call dword [sym.imp.MSVCR100.dll_wcstoul]
xor esi, esi
add esp, 0xc
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x538], esi
call fcn.111b8710
cmp eax, 0x37
jne 0x11079abe
mov edx, dword [0x1127aa10]
mov edi, dword [sym.imp.USER32.dll_LoadIconW]
push 0x4c1
push edx
call edi
mov esi, eax
mov eax, dword [0x1127aa10]
push 0x4c2
push eax
call edi
mov dword [ebp - 0x538], eax
mov dword [str.nsm32.chm], 0x1120c06c
cmp byte [0x1127ad8d], 0
je 0x11079af3
push 1
push 0x1120c050
call fcn.111bb700
mov ecx, dword [0x1127aa10]
add esp, 8
push 0
mov edi, eax
push edi
push ecx
call dword [sym.imp.SHELL32.dll_ExtractIconW]
push edi
mov esi, eax
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
call fcn.111ba4b0
mov edi, eax
call fcn.111ba4e0
mov ebx, eax
test esi, esi
je 0x11079b10
test edi, edi
je 0x11079b10
push edi
call dword [sym.imp.USER32.dll_DestroyIcon]
cmp dword [ebp - 0x538], 0
je 0x11079b24
test ebx, ebx
je 0x11079b24
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
test esi, esi
je 0x11079b31
push esi
call fcn.111ba4d0
add esp, 4
cmp dword [ebp - 0x538], 0
je 0x11079b49
mov edx, dword [ebp - 0x538]
push edx
call fcn.111ba510
add esp, 4
cmp dword [0x1127aa54], 0
mov ebx, dword [ebp - 0x550]
je 0x11079b9f
push 0
push 0xffffffffffffffff
push str.EnableGradientCaptions
push str.View
mov ecx, ebx
call fcn.110bbc00
test eax, eax
jns 0x11079b9f
push 3
push 1
push str.EnableGradientCaptions
push str.View
mov ecx, 0x1127aa10
call fcn.11065190
mov ecx, dword [ebx + 0x2c]
push 3
push 1
push str.EnableGradientCaptions
push str.View
call fcn.110bbd40
push 0
push 0x3c
push str.AssertTimeout
push str.General
mov ecx, ebx
call fcn.110bbc00
push eax
call fcn.11123230
add esp, 4
push 0
push 0xffffffffffffffff
push str.MiniDumpType
push str._debug
mov ecx, ebx
call fcn.110bbc00
test eax, eax
js 0x11079bdf
push eax
call fcn.111b9fd0
add esp, 4
push 0
push 1
push str.RestartAfterError
push str.General
mov ecx, ebx
call fcn.110bbc00
push 0
mov dword [0x1127acec], eax
call fcn.11069ec0
add esp, 4
test al, al
je 0x11079c5d
push 1
call fcn.11069ec0
add esp, 4
test al, al
je 0x11079c2d
push 3
push 1
push str.DisableConsoleClient
push 0x11218928
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 0
push str.DisableTSAdmin
push 0x11218928
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableAudio
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
call fcn.11144250
test al, al
je 0x11079cbf
push 3
push 1
push str.DisableAudio
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableAudioFilter
push str.Audio
mov ecx, 0x1127aa10
call fcn.11065190
mov eax, dword [0x1127aa48]
add eax, 0xffedfffd
cmp eax, 0x50000
ja 0x11079cbf
push 3
push 1
push str.DisableConsoleClient
push 0x11218928
mov ecx, 0x1127aa10
call fcn.11065190
cmp dword [0x1127acfc], 0
je 0x11079d19
call fcn.11123260
test eax, eax
jne 0x11079d19
push 3
push 1
push str.DisableAudio
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableRunplugin
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push 0x1120a004
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
call fcn.111bbe50
test eax, eax
je 0x11079d4f
cmp dword [0x1127acfc], 0
je 0x11079d4f
cmp dword [0x1127aa48], 0x180003
jge 0x11079d4f
push 3
push 1
push 0x1120a004
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 0
push 2
push 6
call fcn.111bb9f0
add esp, 0xc
test eax, eax
je 0x11079dd2
push 3
push 1
push 0x1120bf78
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
lea ecx, [ebp - 0x53c]
call fcn.11113780
lea ecx, [ebp - 0x53c]
mov byte [ebp - 4], 0xa
call fcn.111137a0
test al, al
jne 0x11079dc3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.Error__d._Cannot_init_kbfilter__setting_showkbenable1_n
call fcn.111bd7b0
add esp, 8
push 3
push 1
push 0x1120bee8
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
lea ecx, [ebp - 0x53c]
mov byte [ebp - 4], 8
call fcn.11113790
call fcn.111b8710
cmp eax, 0x23
jne 0x11079e70
push 3
push 1
push str.DisableJoinClass
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableReplayMenu
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableRequestHelp
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableJournal
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableJournalMenu
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableAudio
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
call fcn.111b8710
cmp eax, 0x37
jne 0x11079f26
push 3
push 1
push str.DisableJoinClass
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableReplayMenu
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableRequestHelp
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableJournal
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableJournalMenu
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.DisableAudio
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 3
push 1
push str.NoFTWhenLoggedOff
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
call fcn.111babb0
test al, al
jne 0x11079f6c
cmp dword [0x1127ad10], 0
jne 0x11079f6c
push 0
push str.InstalledBy
push str.SoftwareNetSupport_Ltdclient32
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.11143c30
add esp, 0x10
test eax, eax
je 0x11079f6c
push 3
push eax
push str.installedBy
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
push 0
push 0
push str.DisableHelp
push str.Client
mov ecx, ebx
call fcn.110bbc00
mov esi, eax
test esi, esi
jne 0x11079fb1
mov ecx, dword [str.nsm32.chm]
push 1
push ecx
call fcn.111bb700
mov edi, eax
push esi
push edi
call fcn.111be4e0
add esp, 0x10
test eax, eax
jne 0x11079fa8
lea esi, [eax + 1]
push edi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 4
push 0
push 1
push 0x1120be44
push str.General
mov ecx, ebx
mov dword [0x1127c7c4], esi
call fcn.110bbc00
xor edx, edx
push edx
push 0x208
lea ecx, [ebp - 0x534]
push ecx
mov word [ebp - 0x534], dx
mov esi, eax
mov eax, dword [ebx]
mov edx, dword [eax + 4]
push 0x1120be2c
push str.General
mov ecx, ebx
call edx
cmp dword [0x1127ad10], 0
je 0x1107a042
cmp word [ebp - 0x534], 0
mov esi, 1
jne 0x1107a042
push 0
push 0
push 6
call fcn.111bb9f0
add esp, 0xc
test eax, eax
mov eax, str.Windows_Ding.wav
jne 0x1107a02b
mov eax, str.Windows_XP_Ding.wav
lea edx, [ebp - 0x534]
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x1107a033
lea eax, [ebp - 0x534]
push eax
push esi
call fcn.111b8ca0
add esp, 8
cmp dword [0x1127b880], 0
jne 0x1107a06e
mov eax, dword [ebp - 0x540]
test eax, eax
je 0x1107a06e
push eax
call fcn.11078d90
add esp, 4
cmp word [0x1127aa48], 3
jne 0x1107a0a7
cmp dword [0x1127aa48], 0xd0003
jl 0x1107a0a7
push 0
push 0
push str.UseLegacyPrintCapture
push str.Client
mov ecx, ebx
call fcn.110bbc00
test eax, eax
jne 0x1107a0a7
mov dword [0x1127acf0], 1
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp al, 5
jne 0x1107a0dc
call fcn.111a3db0
mov ecx, dword [0x1127aa68]
neg eax
sbb eax, eax
push 0
inc eax
push eax
push str.DisableAudioFilter
push str.Audio
call fcn.110bbc00
push eax
call fcn.11032210
add esp, 4
mov ecx, dword [0x1127b220]
call fcn.11150040
cmp dword [0x1127aa4c], 0
jne 0x1107a6d8
lea ecx, [ebp - 0x240]
push ecx
mov dword [ebp - 0x240], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [0x1127aa48]
cmp eax, 0x10001
jne 0x1107a139
xor eax, eax
lea esp, [esp]
movzx ecx, word [eax + str.Windows_95]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a120
jmp 0x1107a664
cmp eax, 0x20001
jne 0x1107a169
xor eax, eax
jmp 0x1107a150
movzx ecx, word [eax + str.Windows_98]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a150
jmp 0x1107a664
cmp eax, 0x30001
jne 0x1107a199
xor eax, eax
jmp 0x1107a180
movzx ecx, word [eax + str.Windows_Millennium]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a180
jmp 0x1107a664
cmp eax, 0x50002
jne 0x1107a1c9
xor eax, eax
jmp 0x1107a1b0
movzx ecx, word [eax + 0x1120bd54]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a1b0
jmp 0x1107a664
cmp eax, 0xa0003
je 0x1107a1de
cmp eax, 0xb0003
je 0x1107a1de
cmp eax, 0xc0003
jne 0x1107a1f4
xor ecx, ecx
movzx edx, word [ecx + str.Windows_NT]
mov word [ebp + ecx - 0x50], dx
add ecx, 2
test dx, dx
jne 0x1107a1e0
cmp eax, 0xd0003
jne 0x1107a219
xor eax, eax
lea ecx, [ecx]
movzx ecx, word [eax + str.Windows_2000]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a200
jmp 0x1107a664
cmp eax, 0xe0003
jne 0x1107a249
xor eax, eax
jmp 0x1107a230
movzx ecx, word [eax + str.Windows_XP]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a230
jmp 0x1107a664
cmp eax, 0xf0003
jne 0x1107a279
xor eax, eax
jmp 0x1107a260
movzx ecx, word [eax + str.Windows_2003]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a260
jmp 0x1107a664
cmp eax, 0x100003
jne 0x1107a2a9
xor eax, eax
jmp 0x1107a290
movzx ecx, word [eax + str.Windows_XP_x64]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a290
jmp 0x1107a664
cmp eax, 0x110003
jne 0x1107a2d9
xor eax, eax
jmp 0x1107a2c0
movzx ecx, word [eax + str.Windows_2003_x64]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a2c0
jmp 0x1107a664
cmp eax, 0x120003
jne 0x1107a309
xor eax, eax
jmp 0x1107a2f0
movzx ecx, word [eax + str.Windows_Vista]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a2f0
jmp 0x1107a664
cmp eax, 0x130003
jne 0x1107a339
xor eax, eax
jmp 0x1107a320
movzx ecx, word [eax + str.Windows_Vista_x64]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a320
jmp 0x1107a664
cmp eax, 0x140003
jne 0x1107a369
xor eax, eax
jmp 0x1107a350
movzx ecx, word [eax + str.Windows_2008]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a350
jmp 0x1107a664
cmp eax, 0x150003
jne 0x1107a399
xor eax, eax
jmp 0x1107a380
movzx ecx, word [eax + str.Windows_2008_x64]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a380
jmp 0x1107a664
cmp eax, 0x160003
jne 0x1107a3c9
xor eax, eax
jmp 0x1107a3b0
movzx ecx, word [eax + str.Windows_7]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a3b0
jmp 0x1107a664
cmp eax, 0x170003
jne 0x1107a3f9
xor eax, eax
jmp 0x1107a3e0
movzx ecx, word [eax + str.Windows_7_x64]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a3e0
jmp 0x1107a664
cmp eax, 0x180003
jne 0x1107a429
xor eax, eax
jmp 0x1107a410
movzx ecx, word [eax + str.Windows_8]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a410
jmp 0x1107a664
cmp eax, 0x190003
jne 0x1107a459
xor eax, eax
jmp 0x1107a440
movzx ecx, word [eax + str.Windows_8_x64]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a440
jmp 0x1107a664
cmp eax, 0x1a0003
jne 0x1107a489
xor eax, eax
jmp 0x1107a470
movzx ecx, word [eax + str.Windows_2012]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a470
jmp 0x1107a664
cmp eax, 0x1b0003
jne 0x1107a4b9
xor eax, eax
jmp 0x1107a4a0
movzx ecx, word [eax + str.Windows_8.1]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a4a0
jmp 0x1107a664
cmp eax, 0x1c0003
jne 0x1107a4e9
xor eax, eax
jmp 0x1107a4d0
movzx ecx, word [eax + str.Windows_8.1_x64]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a4d0
jmp 0x1107a664
cmp eax, 0x1d0003
jne 0x1107a519
xor eax, eax
jmp 0x1107a500
movzx ecx, word [eax + str.Windows_2012_R2]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a500
jmp 0x1107a664
cmp eax, 0x1e0003
jne 0x1107a549
xor eax, eax
jmp 0x1107a530
movzx ecx, word [eax + str.Windows_10]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a530
jmp 0x1107a664
cmp eax, 0x1f0003
jne 0x1107a579
xor eax, eax
jmp 0x1107a560
movzx ecx, word [eax + str.Windows_10_x64]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a560
jmp 0x1107a664
cmp eax, 0x200003
jne 0x1107a5a9
xor eax, eax
jmp 0x1107a590
movzx ecx, word [eax + str.Windows_2016]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a590
jmp 0x1107a664
cmp eax, 0x230003
jne 0x1107a5d9
xor eax, eax
jmp 0x1107a5c0
movzx ecx, word [eax + str.Windows_2019]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a5c0
jmp 0x1107a664
cmp eax, 0x240003
jne 0x1107a609
xor eax, eax
jmp 0x1107a5f0
movzx ecx, word [eax + str.Windows_2022]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a5f0
jmp 0x1107a664
cmp eax, 0x250003
jne 0x1107a639
xor eax, eax
jmp 0x1107a620
movzx ecx, word [eax + str.Windows_11]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a620
jmp 0x1107a664
cmp eax, 0x280004
jne 0x1107a664
xor eax, eax
jmp 0x1107a650
movzx ecx, word [eax + str.Windows_CE]
mov word [ebp + eax - 0x50], cx
add eax, 2
test cx, cx
jne 0x1107a650
mov ecx, ebx
call fcn.110bbf40
test eax, eax
mov eax, str.V15.10.3
jne 0x1107a67d
mov eax, str.V14.10.3
mov edx, dword [0x1127aa58]
mov esi, dword [edx]
mov ecx, dword [ebp - 0x230]
mov edx, dword [ebp - 0x234]
push ecx
push edx
mov edx, dword [ebp - 0x238]
lea ecx, [ebp - 0x22c]
push ecx
mov ecx, dword [ebp - 0x23c]
push edx
push ecx
lea edx, [ebp - 0x50]
push edx
push eax
call fcn.111b8750
mov ecx, dword [esi + 4]
push eax
mov eax, dword [0x1127aa58]
push 0
push 0x41c
push eax
call ecx
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
mov eax, dword [edx + 0xf8]
add esp, 0x2c
call eax
cmp dword [0x1127aa48], 0xa0003
jl 0x1107a70e
mov ecx, dword [0x1127aa68]
push 0
push 0
push str.TracePriv
push 0x1120ba74
call fcn.110bbc00
test eax, eax
je 0x1107a70e
call fcn.11064e20
mov ecx, dword [0x1127aa68]
push 0
push 0
push str.StartupDelay
push str.Client
call fcn.110bbc00
lea esi, [eax + eax*4]
add esi, esi
test esi, esi
jle 0x1107a7b4
mov edi, dword [sym.imp.USER32.dll_PeekMessageW]
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageW]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
push 0x3a98
push 0
push 2
call eax
dec esi
cmp dword [0x1127aa48], 0x50002
jge 0x1107a7aa
cmp dword [0x1127aa4c], 0
jne 0x1107a7aa
push 1
push 9
push 0
push 0
lea ecx, [ebp - 0x6c]
push ecx
call edi
test eax, eax
je 0x1107a7aa
lea edx, [ebp - 0x6c]
push edx
call ebx
push 1
push 9
push 0
push 0
lea eax, [ebp - 0x6c]
push eax
call edi
test eax, eax
jne 0x1107a792
test esi, esi
jg 0x1107a740
mov ebx, dword [ebp - 0x550]
cmp dword [0x1127aa48], 0xd0003
jge 0x1107a844
cmp dword [0x1127b880], 0
jne 0x1107a844
mov ecx, dword [0x1127aa68]
xor esi, esi
push esi
push esi
push str.ScreenScrape
push str.Client
call fcn.110bbc00
test eax, eax
je 0x1107a7f7
mov esi, 2
mov ecx, dword [0x1127aa48]
add ecx, 0xfffefffe
cmp ecx, 0x3ffff
ja 0x1107a812
or esi, 4
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x48]
push 0
push 0
push esi
call eax
test eax, eax
jne 0x1107a844
push 3
push 1
push str.ScreenScrape
push str.Client
mov ecx, 0x1127aa10
call fcn.11065190
mov edi, 2
call fcn.11069f60
test al, al
jne 0x1107a85b
mov edi, 4
cmp byte [0x1127ad8d], 0
je 0x1107a86b
or edi, 0x10
cmp dword [0x1127acfc], 0
jne 0x1107a885
cmp dword [0x1127ad00], 0
je 0x1107a941
call fcn.11065210
cmp dword [0x1127acfc], 0
je 0x1107a8eb
push 0xb4
call fcn.111709c0
add esp, 4
mov dword [ebp - 0x53c], eax
mov byte [ebp - 4], 0xb
test eax, eax
je 0x1107a8d0
mov ecx, dword [ebp - 0x548]
push edi
push 0x1127aa8c
push ecx
push ebx
mov ecx, eax
call fcn.111c5d50
jmp 0x1107a8d2
xor eax, eax
mov byte [ebp - 4], 8
mov esi, eax
call fcn.1114cf20
push eax
call fcn.111635b0
add esp, 4
jmp 0x1107a939
cmp dword [0x1127ad00], 0
je 0x1107a941
push 0x98
call fcn.111709c0
add esp, 4
mov dword [ebp - 0x53c], eax
mov byte [ebp - 4], 0xc
test eax, eax
je 0x1107a931
mov edx, dword [ebp - 0x548]
push edi
push 0x1127aa8c
push edx
push ebx
mov ecx, eax
call fcn.111c0f50
jmp 0x1107a933
xor eax, eax
mov byte [ebp - 4], 8
mov esi, eax
test esi, esi
jne 0x1107a97f
push 0x78
call fcn.111709c0
add esp, 4
mov dword [ebp - 0x53c], eax
mov byte [ebp - 4], 0xd
test eax, eax
je 0x1107a977
mov ecx, dword [ebp - 0x548]
push edi
push 0x1127aa8c
push ecx
push ebx
mov ecx, eax
call fcn.11062e30
jmp 0x1107a979
xor eax, eax
mov byte [ebp - 4], 8
mov esi, eax
mov ecx, dword [0x1127aa68]
mov dword [0x1127ab0c], esi
call fcn.110bfc40
push 3
push 0
push str.Ready
push 0x11218828
mov ecx, 0x1127aa10
mov ebx, eax
call fcn.11065190
push 0x3e8
push 0x1e
push 1
call fcn.11068bd0
add esp, 0xc
test al, al
jne 0x1107a9dd
cmp dword [0x1127ad04], 0
jne 0x1107a9dd
push str.Error._Could_not_load_transports___perhaps_another_client_is_running_n
call fcn.111bd7b0
add esp, 4
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
push 0
push 0
push 4
call eax
cmp dword [0x1127aa4c], 0
jne 0x1107aa1b
cmp dword [0x1127acfc], 0
jne 0x1107aa1b
push 0
push 0
push 0x3e8
call fcn.11067670
add esp, 0xc
call fcn.111b2090
push 0
call fcn.111b6a60
add esp, 4
cmp dword [0x1127aa4c], 0
jne 0x1107aa49
cmp dword [0x1127acfc], 0
jne 0x1107aa49
call fcn.11068fa0
push 4
call fcn.111709c0
add esp, 4
mov dword [ebp - 0x53c], eax
mov byte [ebp - 4], 0xe
test eax, eax
je 0x1107aa9f
mov ecx, dword [0x1127ab0c]
mov edx, dword [0x1127aa58]
push 0x11064b90
push 0x11069640
push str.Client
push 0x1127ab4c
push 0x1127aa8c
push ecx
mov ecx, dword [0x1127aa68]
push edx
push ecx
mov ecx, eax
call fcn.1116f6e0
jmp 0x1107aaa1
xor eax, eax
push 0
push 1
push 0x11064970
mov ecx, 0x1127b848
mov byte [ebp - 4], 8
mov dword [0x1127ac24], eax
call fcn.11170830
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
mov ecx, dword [0x1127aa68]
push 0
push 0
push str.ScreenScrape
push str.Client
call fcn.110bbc00
mov ecx, dword [0x1127aa68]
push 0
push 0x80
push str.PriorityClass
push str.Client
call fcn.110bbc00
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov ecx, dword [0x1127aa68]
push 0
push 0
push str.AlwaysOnTop
push str.Client
call fcn.110bbc00
test eax, eax
je 0x1107ab43
mov edx, dword [0x1127ab38]
push 0x13
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
cmp dword [0x1127ace4], 0
jne 0x1107ab60
mov ecx, dword [0x1127b21c]
mov eax, dword [ecx]
mov edx, dword [eax + 0xc8]
call edx
cmp dword [0x1127acfc], 0
jne 0x1107abd4
mov ecx, dword [0x1127ab0c]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
push 2
push eax
call dword [sym.imp.MSVCR100.dll_strchr]
add esp, 8
test eax, eax
je 0x1107abd4
push 0x64
call fcn.111709c0
add esp, 4
mov dword [ebp - 0x53c], eax
mov byte [ebp - 4], 0xf
test eax, eax
je 0x1107abb6
mov ecx, eax
call fcn.110b69b0
jmp 0x1107abb8
xor eax, eax
push 0
push 1
push 0x110b7220
mov ecx, eax
mov byte [ebp - 4], 8
mov dword [0x1127ac60], eax
call fcn.11170830
push eax
call esi
mov ecx, dword [0x1127b21c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x124]
push 0
call edx
cmp dword [0x1127ad00], 0
jne 0x1107ac26
push 0x3c
call fcn.111709c0
add esp, 4
mov dword [ebp - 0x53c], eax
mov byte [ebp - 4], 0x10
test eax, eax
je 0x1107ac1b
mov ecx, eax
call fcn.11141850
jmp 0x1107ac1d
xor eax, eax
mov byte [ebp - 4], 8
mov dword [0x1127ad34], eax
push 4
push 0
push 5
call fcn.111bb9f0
add esp, 0xc
test eax, eax
je 0x1107ad15
mov ecx, dword [0x1127aa68]
push 0
push 0
push str.EnableSmartcardLogon
push str.Client
call fcn.110bbc00
test eax, eax
jne 0x1107ac9d
mov ecx, dword [0x1127aa68]
push eax
push eax
push str.UseNTSecurity
push str.Client
call fcn.110bbc00
test eax, eax
je 0x1107ad15
mov ecx, dword [0x1127aa68]
push 0
push 0
push str.EnableSmartcardAuth
push str.Client
call fcn.110bbc00
test eax, eax
je 0x1107ad15
push 0x30
call fcn.111709c0
add esp, 4
mov dword [ebp - 0x53c], eax
mov byte [ebp - 4], 0x11
test eax, eax
je 0x1107acc5
mov ecx, eax
call fcn.11197d00
jmp 0x1107acc7
xor eax, eax
mov byte [ebp - 4], 8
mov dword [0x1127ad30], eax
test eax, eax
je 0x1107ad15
cmp dword [0x1127ad00], 0
jne 0x1107ad15
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x14]
call eax
test al, al
jne 0x1107ad03
mov ecx, dword [0x1127ad30]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
call eax
mov ecx, dword [0x1127ad30]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
push 0x1388
call eax
push 0x1e
call fcn.111a4c90
add esp, 4
xor eax, eax
movzx ecx, word [eax + 0x1127ac64]
mov word [ebp + eax - 0x12c], cx
add eax, 2
test cx, cx
jne 0x1107ad21
cmp dword [0x1127ad00], 0
je 0x1107ae57
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x154]
call eax
test al, al
je 0x1107ae4a
mov edi, 0x1000
call fcn.111babb0
test al, al
je 0x1107ad74
mov edi, 0x8000
cmp byte [0x1127ad8d], 0
je 0x1107ad8b
mov eax, str.DNAWClass
jmp 0x1107ada2
call fcn.111babb0
test al, al
mov eax, str.CICWClass
jne 0x1107ada2
mov eax, 0x111fa894
push eax
lea ecx, [ebp - 0x12c]
push str.Global_sAdmin
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
test edi, edi
je 0x1107ae97
mov ecx, dword [0x1127aa68]
push 0
push 1
push str.UseIPC
push str.Client
call fcn.110bbc00
test eax, eax
je 0x1107ae97
push 0
push 0
push 5
call fcn.111bb9f0
add esp, 0xc
test eax, eax
je 0x1107ae97
mov ecx, dword [0x1127aa68]
push 0
push 0
push str.TraceIPC
push str._debug
call fcn.110bbc00
push 0x318
mov dword [0x1127b894], eax
call fcn.111709c0
mov esi, eax
add esp, 4
mov dword [ebp - 0x53c], esi
mov byte [ebp - 4], 0x12
test esi, esi
je 0x1107ae61
mov ecx, esi
call fcn.111062e0
mov dword [esi], vtable.IPCClient32.0
mov ecx, esi
jmp 0x1107ae63
cmp dword [0x1127ad00], 0
jne 0x1107ae97
mov edi, 0x80000
jmp 0x1107adc0
xor ecx, ecx
push 0
push edi
push 0
push 0x1127ab38
lea edx, [ebp - 0x12c]
push edx
mov byte [ebp - 4], 8
mov dword [0x1127ad18], ecx
call fcn.11106c20
lea eax, [ebp - 0x12c]
push eax
push str.Create_IPC___s_
call fcn.111bd7b0
add esp, 8
call fcn.111a3db0
test eax, eax
jne 0x1107aea9
call fcn.11067cb0
call fcn.111a5250
push 0
push 3
push 6
call fcn.111bb9f0
add esp, 0xc
test eax, eax
je 0x1107af0b
cmp dword [0x1127acfc], 0
jne 0x1107af2b
cmp dword [0x1127ad10], 0
jne 0x1107af18
mov ecx, dword [0x1127aa68]
push 0
push 0x151d
push str.ListenPort
push str.TCPIP
call fcn.110bbc00
mov ecx, dword [0x1127b21c]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x17c]
call eax
cmp dword [0x1127acfc], 0
jne 0x1107af2b
call fcn.111b8710
cmp eax, 0x14
jge 0x1107af2b
call fcn.1106fe40
call fcn.11065ab0
call fcn.1106c7a0
push 3
push 1
push str.Ready
push 0x11218828
mov ecx, 0x1127aa10
call fcn.11065190
sub ebx, dword [ebp - 0x54c]
je 0x1107afa6
cmp dword [0x1127ad00], 0
jne 0x1107af9c
call fcn.11065670
test al, al
jne 0x1107af9c
mov eax, dword [0x1127aa5c]
mov ecx, dword [eax]
mov edx, dword [ecx + 4]
push 0x82
push str.client32u.ini
push 0x20000000
push 0x1f49
push eax
call edx
add esp, 0x14
jmp 0x1107afa6
mov dword [0x1127ad04], 1
mov ecx, dword [0x1127b21c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
push 0x111fb618
push 0
push str.NSMWControl32
call edx
mov esi, dword [sym.imp.USER32.dll_PostMessageW]
test eax, eax
je 0x1107afd9
push 0
push 0
push 0x693
push eax
call esi
mov ecx, dword [0x1127b21c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
push 0x111fb618
push 0
push str.NSSWControl32
call edx
test eax, eax
je 0x1107b006
push 0
push 0
push 0x693
push eax
call esi
mov ecx, dword [0x1127b21c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x40]
push 0x111fb618
push 0
push str.NSTWControl32
call edx
test eax, eax
je 0x1107b033
push 0
push 0
push 0x693
push eax
call esi
push str.Ready_n
mov dword [0x1127aa70], 1
call fcn.111bd7b0
mov ecx, dword [0x1127ac60]
add esp, 4
xor esi, esi
test ecx, ecx
je 0x1107b061
call fcn.110b6a20
mov esi, eax
push esi
push str._d_reconn_items_n
call fcn.111bd7b0
add esp, 8
test esi, esi
je 0x1107b091
mov ecx, dword [0x1127ac60]
push 0
push 0
call fcn.110b6a90
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x1127ab0c]
mov eax, dword [ecx]
mov edx, dword [eax + 0x5c]
push 0xffffffffffffffff
call edx
call fcn.11064880
push 0
call fcn.110773b0
ficom word [edi - 0x6828eef9]
pop es
adc eax, edx
xchg edi, eax
pop es
adc ecx, ecx
xchg edi, eax
pop es
adc edx, eax
xchg edi, eax
pop es
adc dword [ebx - 0x4beef869], edi
xchg edi, eax
pop es
adc dword [ebp - 0x33eef869], ebp
int3