Function at 0x10041bbe
Capabilities:
Create pipe
Get common file path

Disassembly:
mov eax, 0x100635d8
call fcn.10061878
sub esp, 0x278
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0x74], ecx
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x2c], 0x25cb
push 1
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0x198], ebx
call fcn.10005365
mov dword [ebp - 4], ebx
or edi, 0xffffffff
mov dword [ebp - 0x28], 0xa96141e4
xor edx, edx
mov dword [ebp - 0x24], ebx
inc edx
mov dword [ebp - 0x34], 0xdab9737e
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x20], ebx
jmp 0x10041c2e
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], 0xb7161ab6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10041c1b
mov dword [ebp - 0x20], ebx
jmp 0x10041c42
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x70], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10041c38
mov edx, dword [ebp - 0x70]
mov ecx, 0x3b01d91e
imul edx, dword [ebp - 0x24]
neg edx
sbb edx, edx
neg edx
dec dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
sub ecx, eax
add ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10c]
cmp ecx, edi
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
xor eax, eax
cmp ecx, edx
sete al
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
je 0x10041d4a
mov dword [ebp - 0x38], 0xfffffffd
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x34], ebx
push 2
call fcn.10005365
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x1c], ebx
jmp 0x10041cbb
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x118]
mov dword [eax + ecx*4], 0xe522
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10041ca8
mov eax, dword [ebp - 0x70]
xor ecx, ecx
cmp eax, 0x7963f6d1
setne cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov esi, dword [ebp - 0x118]
mov eax, dword [ebp - 0x28]
cmp eax, dword [esi + 4]
mov eax, dword [ebp - 0x2c]
setle dl
xor ecx, ecx
cmp eax, edx
setl cl
shl ecx, 2
test ecx, ecx
jne 0x10041d0a
cmp dword [esi + 4], ebx
je 0x10041d19
mov eax, dword [ebp - 0x118]
cmp dword [eax], ebx
je 0x10041d19
xor eax, eax
inc eax
jmp 0x10041d1b
mov eax, ebx
mov ecx, dword [esi + 4]
imul ecx, eax
mov eax, dword [ebp - 0x10c]
add ecx, 0xb89
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x38]
cmp eax, 1
setg cl
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x118]
call fcn.100053c7
jmp 0x10041d6c
mov dword [ebp - 0x1c], ebx
jmp 0x10041d60
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x120], 0x9ba1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10041d4f
dec dword [ebp - 0x120]
lea ecx, [ebp - 0x10c]
mov dword [ebp - 4], edi
call fcn.100053c7
push 0x47
mov dword [ebp - 0x4c], 0x67030100
mov dword [ebp - 0x48], 0x250371e9
mov dword [ebp - 0x44], 0x30053e06
mov dword [ebp - 0x40], 0x3020001
mov word [ebp - 0x3c], 0xe04
pop eax
mov word [ebp - 0x148], ax
mov dword [ebp - 0x24], 0xf5540d7f
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], 0x14
cmp dword [ebp - 0x24], 0xffffffe7
jne 0x10041f80
mov esi, 0xbe67e784
push 1
lea ecx, [ebp - 0xac]
call fcn.10005365
mov dword [ebp - 0x2c], edi
xor edx, edx
mov dword [ebp - 0x30], 7
inc edx
mov dword [ebp - 0x2c], 0x38a8
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x20], ebx
jmp 0x10041dfe
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10041def
mov dword [ebp - 0x20], ebx
jmp 0x10041e15
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x248], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10041e08
cmp dword [ebp - 0x24], ebx
je 0x10041f24
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x1c], 0xfffffffa
mov dword [ebp - 0x34], 2
mov dword [ebp - 0x20], ebx
jmp 0x10041f03
mov dword [ebp - 0x30], 0x86992f1e
xor edx, edx
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x1c], ebx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0x231
setge al
cmp eax, 0x2a83a0f0
je 0x10041e70
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xac]
dec ecx
imul ecx, dword [eax]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
sub eax, 7
je 0x10041ef5
mov dword [ebp - 0x30], 5
mov eax, dword [ebp - 0x34]
cmp esi, eax
mov eax, dword [ebp - 0x24]
sbb edx, edx
sub eax, 0x6d76e0bd
inc edx
xor ecx, ecx
cmp edx, eax
setl cl
sub ecx, 0x218a5f22
mov dword [ebp - 0x2c], ecx
jne 0x10041ec0
cmp dword [ebp - 0x30], ebx
jne 0x10041ec0
mov eax, ebx
jmp 0x10041ec3
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x28]
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xac]
setne cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x30]
cmp edx, dword [eax]
setle cl
mov dword [ebp - 0x1c], ecx
jmp 0x10041f00
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff8
jge 0x10041e3d
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10041f68
push 0x59a
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
jmp 0x10041f68
cmp dword [ebp - 0x30], ebx
je 0x10041f30
mov esi, edx
cmp dword [ebp - 0x2c], ebx
jne 0x10041f32
mov esi, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, 0x268d
setg cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], esi
jle 0x10041f4e
cmp dword [ebp - 0x28], ebx
jne 0x10041f4e
mov edx, ebx
xor eax, eax
mov esi, 0xbe67e784
cmp edx, edi
sete al
sub eax, dword [ebp - 0x248]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0xac]
call fcn.100053c7
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe7
je 0x10041dc6
push 2
pop edi
mov esi, ebx
mov dword [ebp - 0x34], edi
cmp edi, 0x12
jae 0x100424b1
mov dword [ebp - 0x28], 0xd06c
mov dword [ebp - 0x30], 0x16df251d
mov dword [ebp - 0x30], 0x362
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], 0xa
jmp 0x10041fc9
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10041fc6
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_EqualSid]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x11
jl 0x10041fb5
movzx eax, byte [ebp - 0x4c]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x100420ee
movzx eax, byte [ebp + edi - 0x4c]
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0x20], ebx
dec edi
mov dword [ebp - 0x2c], 0xec46bc22
add edi, eax
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x38], 0xfffffffc
lea esi, [eax + 1]
push 2
call fcn.10005365
xor edx, edx
mov dword [ebp - 0x24], ebx
inc edx
jmp 0x1004202b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb4], 0xe1cc0e42
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x1004201a
mov dword [ebp - 0x24], ebx
jmp 0x10042044
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c4]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10042035
cmp dword [ebp - 0x20], ebx
jne 0x100420ad
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
cmp eax, 0xfdb7
mov eax, 0x2d7b
setge cl
sub eax, ecx
sub eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
cmp eax, 0xfffffffe
jl 0x10042078
mov eax, ebx
cmp dword [ebp - 0x20], ebx
je 0x1004207a
mov eax, edx
xor edx, edx
cmp eax, 0x7045b365
setl dl
xor ecx, ecx
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setg cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
cmp eax, 0x37828451
setl cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
setl dl
add ecx, 0x8f0b
add ecx, edx
xor edx, edx
cmp eax, ecx
lea ecx, [ebp - 0x1c4]
setge dl
mov dword [ebp - 0xb4], edx
call fcn.100053c7
jmp 0x100424a9
movzx edx, byte [ebp + edi - 0x4b]
mov eax, edi
push dword [ebp - 0x50]
sub eax, esi
movdqa xmm0, xmmword [0x10070cf0]
movdqu xmmword [ebp - 0x214], xmm0
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], ebx
movzx eax, byte [ebp + eax - 0x4e]
mov dword [ebp - 0xb8], ebx
movzx ecx, word [ebp + eax*2 - 0x148]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x4c]
add ecx, edx
mov word [ebp + eax*2 - 0x148], cx
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x214]
mov dword [ebp - 0x20], 0xbac64a68
push eax
push ebx
lea ecx, [ebp - 0xc0]
call fcn.100080c4
mov dword [ebp - 4], 1
mov dword [ebp - 0x24], 0xadf86095
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x24], 0x56cc
cmp dword [ebp - 0x24], 0x5769
jle 0x100421f9
mov ecx, ebx
mov dword [ebp - 0x1c], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x2c], 0x1cc8
and eax, edi
or eax, ecx
lea ecx, [ebp - 0x26c]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100421b7
mov eax, dword [eax]
push eax
call fcn.100497ec
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x26c]
call fcn.100058e2
mov eax, dword [ebp - 0x28]
add edi, esi
dec dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
jne 0x1004219b
inc esi
cmp esi, 0x860
jl 0x10042192
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x748d
jl 0x10042190
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x4075
jl 0x1004218b
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xd
jg 0x100422f9
mov dword [ebp - 0x1c], 9
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 3
jg 0x100422f1
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100422e9
mov dword [ebp - 0x28], 0x22b3
cmp dword [ebp - 0x28], 0x2504
jle 0x1004227d
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x2c], 0x7200
mov dword [ebp - 0x38], eax
mov edi, ebx
mov ecx, edi
shl eax, cl
mov ecx, 0x1007d818
cdq
push edx
push eax
call fcn.1000513b
mov eax, dword [ebp - 0x38]
inc edi
cmp edi, 0x465c
jl 0x10042247
add eax, esi
dec dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
jne 0x10042245
inc esi
cmp esi, 0xe5c
jl 0x10042239
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
push 0xfb
push ebx
push 0x124a
push 0x16cb
push 0x1cc7
push ebx
push 0x252d
push 0x8fd
push 0x26c8
call dword [sym.imp.USER32.dll_DrawIconEx]
mov byte [ebp - 4], 2
cmp dword [ebp - 0x28], 0x222f
jge 0x100422e2
mov edx, str.qmbiz_cpxvtbk_owzmi_wqr_hoaako_qartkilqq_zpvr_bbbxvduce_skgg_yuuxt_wbtfw_occ
mov ecx, 0x1007d818
call fcn.100077d7
jmp 0x100422e2
mov dword [ebp - 4], 1
inc dword [ebp - 0x1c]
jmp 0x10042210
inc dword [ebp - 0x20]
jmp 0x100421fc
cmp dword [ebp - 0x24], 0x53fe
jge 0x1004230d
push str.mmk_guisvos_jif_uzlk_qootzi_llh_sbbqqi
call fcn.100497ec
pop ecx
mov dword [ebp - 4], 1
mov dword [ebp - 0x20], 6
jmp 0x1004248b
mov dword [ebp - 0x38], 0x37c1
lea ecx, [ebp - 0x16c]
mov dword [ebp - 0x1c], 0xf145ba13
push 3
call fcn.10005365
mov byte [ebp - 4], 6
mov dword [ebp - 0x1c], ebx
jmp 0x10042354
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x16c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10042344
mov eax, dword [ebp - 0x38]
xor edx, edx
mov dword [ebp - 0x1c], 0xfa32a17d
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, 0xaab72b21
setg dl
xor ecx, ecx
imul edx, dword [ebp - 0x20]
sub eax, edx
cmp eax, 0x2a28
setg cl
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], ebx
jmp 0x1004246f
push dword [ebp - 0x50]
movdqa xmm0, xmmword [0x10070cd0]
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x204]
mov dword [ebp - 0x100], ebx
push eax
push ebx
lea ecx, [ebp - 0x100]
mov dword [ebp - 0xfc], ebx
movdqu xmmword [ebp - 0x204], xmm0
mov dword [ebp - 0xf8], ebx
call fcn.100080c4
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x30], 0x7127b1aa
push 1
call fcn.10005365
xor edx, edx
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x1004240f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x154]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100423fc
mov dword [ebp - 0x38], edx
xor edx, edx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xc0]
cmp dword [eax], ecx
sete dl
mov dword [ebp - 0x38], edx
xor edx, edx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x154]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x16c]
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x154]
call fcn.100053c7
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 6
call fcn.100053c7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x16
jge 0x1004239d
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 1
call fcn.100053c7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x14
jne 0x10042320
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
call fcn.100053c7
mov edi, dword [ebp - 0x34]
mov esi, ebx
add edi, 2
jmp 0x10041f85
mov dword [ebp - 0x28], 0xac789480
lea ecx, [ebp - 0x160]
push 2
call fcn.10005365
push 3
lea ecx, [ebp - 0x184]
mov dword [ebp - 4], 8
call fcn.10005365
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x30], 0x9a733e34
push 1
call fcn.10005365
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x1c], 0x1a64
cmp dword [ebp - 0x1c], 0x1d38
jle 0x1004256e
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, edi
mov dword [ebp - 0x30], ebx
cdq
mov edi, ebx
idiv esi
mov ebx, dword [ebp - 0x34]
mov esi, edx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1007d818
xor eax, ebx
cdq
push edx
push eax
call fcn.1000513b
inc edi
cmp edi, 0x402b
jl 0x10042521
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x2c], esi
push 0
pop ebx
cmp esi, 0x4976
jl 0x10042512
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x5164
jl 0x1004250d
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x690d
jl 0x10042508
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x1c], 0x19e6
jge 0x100425a8
mov edx, str.uryhzwefp_ypqusd_vvivwot_vww
mov ecx, 0x1007d818
call fcn.100077d7
jmp 0x100425a8
mov dword [ebp - 0x20], ebx
jmp 0x100425c0
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x160]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x100425ad
mov dword [ebp - 0x20], ebx
jmp 0x100425de
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x184]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100425cb
mov dword [ebp - 0x20], ebx
jmp 0x100425f7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6c], 0x9c71
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x100425e9
mov dword [ebp - 0x20], ebx
jmp 0x10042610
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x7c], 0x92c6eed1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10042602
mov dword [ebp - 0x20], ebx
jmp 0x1004262e
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xdc]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x1004261b
dec dword [ebp - 0x7c]
xor edx, edx
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0xdc]
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x160]
setg dl
xor ecx, ecx
cmp edx, dword [eax]
setg cl
xor edx, edx
mov dword [eax], ecx
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0xdc]
lea ecx, [ebp - 0xdc]
setne dl
sub edx, 0xffff
add edx, dword [eax]
neg edx
sbb edx, edx
add edx, 0xb06c0e27
mov dword [eax], edx
call fcn.100053c7
lea ecx, [ebp - 0x184]
call fcn.100053c7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x160]
call fcn.100053c7
xor eax, eax
lea ecx, [ebp - 0x178]
push 2
mov word [ebp - 0x13a], ax
call fcn.10005365
mov dword [ebp - 0x30], 0x1dbeccce
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x100426e3
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x178]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100426d4
mov eax, dword [ebp - 0x178]
lea ecx, [ebp - 0x178]
mov dword [eax], 0x1c
call fcn.100053c7
xor eax, eax
mov dword [ebp - 0x19c], 7
mov word [ebp - 0x1b0], ax
lea ecx, [ebp - 0x1b0]
lea eax, [ebp - 0x148]
mov dword [ebp - 0x1a0], ebx
push eax
call fcn.10005926
push 1
lea ecx, [ebp - 0xe8]
mov dword [ebp - 4], 0xd
call fcn.10005365
mov dword [ebp - 0x1c], ebx
jmp 0x10042757
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe8]
mov dword [eax + ecx*4], 0x1f7e2799
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10042744
mov eax, dword [ebp - 0xe8]
mov dword [eax], ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10042778
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1004278d
push ebx
push 0x144b
call dword [sym.imp.USER32.dll_EndPaint]
mov eax, dword [ebp - 0xe8]
inc dword [eax]
cmp dword [eax], 2
jl 0x10042765
lea ecx, [ebp - 0xe8]
call fcn.100053c7
push dword [ebp - 0xb0]
xor eax, eax
lea edi, [ebp - 0x148]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x1f4]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.100085df
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x1c], 0x2c9cc141
mov dword [ebp - 0x194], 0xffffffff
mov dword [ebp - 0x190], 0xffffffff
mov dword [ebp - 0x18c], 0xffffffff
push 2
mov dword [ebp - 0x188], 0xffffffff
mov dword [ebp - 0x24], ebx
pop ecx
jmp 0x1004280e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1b8], 0xfff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x100427fd
mov dword [ebp - 0x24], ebx
jmp 0x10042826
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x68], 0x801897a4
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10042818
mov dword [ebp - 0x64], ebx
jmp 0x100428aa
mov dword [ebp - 0x30], 0x19ac
mov dword [ebp - 0x30], 0xc08872fa
mov dword [ebp - 0x1c], 0x289
mov dword [ebp - 0x30], 0x8819570a
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x30], 0xffbefa5f
mov dword [ebp - 0x2c], 0x2ba7
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1004287a
push 0xcf0
push 0x23dd
call dword [sym.imp.USER32.dll_MonitorFromWindow]
inc dword [ebp - 0x2c]
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x1c], ebx
jl 0x100428a7
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100428a2
push 0x110e
push 0x918
call dword [sym.imp.USER32.dll_GetWindowLongW]
dec dword [ebp - 0x1c]
jns 0x10042889
inc dword [ebp - 0x64]
cmp dword [ebp - 0x64], 1
jle 0x10042830
mov dword [ebp - 0x1c], ebx
jmp 0x100428e1
mov dword [ebp - 0x30], 0x8e04
xor ecx, ecx
mov dword [ebp - 0x2c], 0x9892657c
mov eax, dword [ebp - 0x30]
test eax, eax
sets cl
imul eax, ecx, 0x9a16
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x1b8], ebx
jne 0x100428e7
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff6
jle 0x100428b5
mov dword [ebp - 0x28], 3
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1004290b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x254], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100428fa
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10042936
push 1
push 0x6d7
push 0x21e8
push 0x181b
push 0x22f7
call dword [sym.imp.USER32.dll_SetScrollRange]
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 2
jg 0x10042a43
mov dword [ebp - 0x1c], 0xc9cc1417
mov dword [ebp - 0x2c], 0xc7555b7c
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 2
jg 0x10042a3b
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10042993
push ebx
push 0x13aa
push 0x56e
push 0x792
push 0x212b
push 0xf66
push 0x2703
push ebx
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov byte [ebp - 0x15], bl
mov dword [ebp - 0x34], 0x487b
cmp dword [ebp - 0x34], 0x4a83
jle 0x100429da
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov edi, esi
mov esi, 0x87e
mov eax, edi
mov ecx, 0x1007d818
cdq
push edx
push eax
call fcn.1000513b
dec edi
dec esi
jne 0x100429b2
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x5bde
jl 0x100429ab
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
cmp byte [ebp - 0x15], 0
je 0x100429f2
push ebx
push 0x59a
push ebx
push 0x2675
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x34], 0x4834
jge 0x10042a2c
mov edx, str.lfrfce_hwcj_eqamfskh_ins_mbjpanny_iygdwpo_mko_arxj_fbgjow_wxmsrdtrt_ljahintss_tgqnu
mov ecx, 0x1007d818
call fcn.100077d7
jmp 0x10042a2c
mov dword [ebp - 4], 0xe
inc dword [ebp - 0x1c]
jmp 0x1004295a
inc dword [ebp - 0x28]
jmp 0x10042939
mov dword [ebp - 0x20], 0xf5540d7f
mov dword [ebp - 0x38], 0x64af
cmp dword [ebp - 0x38], 0x65b5
jle 0x10042ab8
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
cdq
mov edi, ebx
idiv esi
mov dword [ebp - 0x30], edx
mov esi, ebx
mov ebx, dword [ebp - 0x30]
mov eax, edi
mov ecx, 0x1007d818
cdq
idiv esi
lea eax, [ebx + edx]
cdq
push edx
push eax
call fcn.1000513b
inc esi
cmp esi, 0x77eb
jl 0x10042a71
inc edi
push 0
pop ebx
cmp edi, 0x4c7e
jl 0x10042a6c
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x5fbf
jl 0x10042a64
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x7d8c
jl 0x10042a5f
mov dword [ebp - 0x1c], 0xffffffff
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x38], 0x6477
jge 0x10042af9
mov edx, str.brgqbofsb_jmal_jzfd
mov ecx, 0x1007d818
call fcn.100077d7
jmp 0x10042af9
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x20], 0x14
cmp dword [ebp - 0x20], 0xffffffe7
jne 0x10042d5a
push 1
lea ecx, [ebp - 0xa0]
call fcn.10005365
mov byte [ebp - 4], 0x13
xor edx, edx
mov dword [ebp - 0x2c], 0xffffffff
inc edx
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x2c], 0x38a8
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x24], ebx
jmp 0x10042b51
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10042b42
mov dword [ebp - 0x24], ebx
jmp 0x10042b6c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x23c], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10042b5b
cmp dword [ebp - 0x20], ebx
je 0x10042d03
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0xfffffff8
jl 0x10042cec
mov dword [ebp - 0x30], 0x86992f1e
xor edx, edx
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0x231
setge al
cmp eax, 0x2a83a0f0
je 0x10042bcc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa0]
dec ecx
imul ecx, dword [eax]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
sub eax, 7
je 0x10042cd9
mov dword [ebp - 0x34], 0x1efb
cmp dword [ebp - 0x34], 0x2278
jle 0x10042c2c
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov edi, esi
mov esi, 0x9cb
mov eax, edi
mov ecx, 0x1007d818
cdq
push edx
push eax
call fcn.1000513b
dec edi
dec esi
jne 0x10042c0a
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x1da7
jl 0x10042c03
mov dword [ebp - 0x30], 5
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x34], 0x1e5e
jge 0x10042c6d
mov edx, str.qzupl_bbm_rucqegl_ojc_eqkg_trbbroug_iutrcpad_gxgvkxtq_jqqwp_ciwwzdx_aap
mov ecx, 0x1007d818
call fcn.100077d7
jmp 0x10042c6d
mov dword [ebp - 4], 0x13
mov esi, 0xbe67e784
mov eax, dword [ebp - 0x38]
cmp esi, eax
mov eax, dword [ebp - 0x20]
sbb edx, edx
sub eax, 0x6d76e0bd
inc edx
xor ecx, ecx
cmp edx, eax
setl cl
sub ecx, 0x218a5f22
mov dword [ebp - 0x2c], ecx
jne 0x10042ca4
cmp dword [ebp - 0x30], ebx
jne 0x10042ca4
mov eax, ebx
jmp 0x10042ca7
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x1c]
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xa0]
setne cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x30]
cmp edx, dword [eax]
setle cl
mov dword [ebp - 0x24], ecx
jmp 0x10042ce4
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x28]
jmp 0x10042b8f
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10042d43
push 0x59a
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
jmp 0x10042d43
cmp dword [ebp - 0x30], ebx
je 0x10042d0f
mov esi, edx
cmp dword [ebp - 0x2c], ebx
jne 0x10042d11
mov esi, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, 0x268d
setg cl
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], esi
jle 0x10042d2d
cmp dword [ebp - 0x1c], ebx
jne 0x10042d2d
mov edx, ebx
xor eax, eax
cmp edx, 0xffffffff
sete al
sub eax, dword [ebp - 0x23c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xe
call fcn.100053c7
dec dword [ebp - 0x20]
jmp 0x10042b07
push 0x5c
pop eax
mov word [ebp - 0x60], ax
xor eax, eax
mov byte [ebp - 0x58], bl
mov byte [ebp - 0x57], bl
mov word [ebp - 0x5e], ax
mov dword [ebp - 0x28], 0x928c176b
mov dword [ebp - 0x34], 0xeb7bfbc3
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 1
jg 0x10043004
mov edi, dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
mov esi, 0xe6b87c26
push 1
lea ecx, [ebp - 0xf4]
call fcn.10005365
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x24], 0xfe04822b
mov dword [ebp - 0x1c], ebx
jmp 0x10042dc3
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xf4]
mov dword [eax + ecx*4], 0x9ac7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10042db0
mov dword [ebp - 0x24], ebx
jmp 0x10042fdf
push dword [ebp - 0x50]
movdqa xmm0, xmmword [0x10070cb0]
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x224]
mov dword [ebp - 0x88], ebx
push eax
push ebx
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x84], ebx
movdqu xmmword [ebp - 0x224], xmm0
mov dword [ebp - 0x80], ebx
call fcn.100080c4
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x30], 0xe2e4bcb8
mov dword [ebp - 0x1c], ebx
jmp 0x10042e31
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x94], 0x7b4bc66
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10042e20
mov dword [ebp - 0x90], ebx
cmp dword [ebp - 0x90], ebx
jl 0x10042fc0
mov dword [ebp - 0x1c], 0x4ad37400
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x10042f9d
mov dword [ebp - 0x38], 0x223dec99
mov dword [ebp - 0x30], 0x4064544a
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x88]
mov dword [eax], 1
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], ebx
jl 0x10042f94
mov dword [ebp - 0x20], 3
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xc4], esi
mov dword [ebp - 0x20], ebx
jmp 0x10042ec0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x230], 9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10042eaf
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 3
jg 0x10042f8b
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x1c]
neg eax
je 0x10042ee3
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc8]
sub ecx, 0xfffffffa
neg ecx
sbb ecx, ecx
inc dword [ebp - 0xc8]
cmp eax, ecx
je 0x10042f05
xor esi, esi
inc esi
jmp 0x10042f07
mov esi, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp eax, esi
mov eax, dword [ebp - 0x88]
setg cl
mov dword [eax + edx*4], ecx
xor edx, edx
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setge dl
xor ecx, ecx
imul edx, dword [ebp - 0x90]
mov eax, dword [ebp - 0xf4]
cmp dword [eax + esi*4], edx
sete cl
xor edx, edx
imul esi, ecx, 0xbab2
mov dword [ebp - 0x230], esi
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xf4]
cmp esi, dword [eax + ecx*4]
setg dl
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
add eax, 2
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x10042ed3
mov esi, 0xe6b87c26
dec dword [ebp - 0x38]
jns 0x10042e8b
dec dword [ebp - 0x1c]
jns 0x10042e5c
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10042fb4
push 0x684
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
dec dword [ebp - 0x90]
jns 0x10042e49
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10042fd1
push ebx
push 0xb0b
call edi
lea ecx, [ebp - 0x88]
call fcn.100053c7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x10042dd1
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0xe
call fcn.100053c7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 1
jle 0x10042d93
xor eax, eax
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
lea ecx, [ebp - 0x138]
lea eax, [ebp - 0x60]
mov dword [ebp - 0x128], ebx
push eax
call fcn.10005926
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x38], 0x1fda
cmp dword [ebp - 0x38], 0x2132
jle 0x100430e7
push ebx
push 0x693
push 0x13da
call dword [sym.imp.GDI32.dll_CreatePen]
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, esi
mov dword [ebp - 0x1c], ebx
mov edx, edi
mov esi, ebx
shl edx, cl
mov dword [ebp - 0x30], edx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x284]
or eax, edx
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1004308f
mov eax, dword [eax]
push eax
call fcn.100497ec
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x284]
call fcn.100058e2
mov edx, dword [ebp - 0x30]
inc edi
cmp edi, 0x106b
jl 0x1004306f
inc esi
cmp esi, 0x40e0
jl 0x1004306d
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x5e83
jl 0x1004305f
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x54b6
jl 0x1004305a
push 0x1567
push 0x332
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
cmp dword [ebp - 0x38], 0x1cda
mov dword [ebp - 0x60], ebx
jge 0x100430fe
push str.yqgmj_ofsnxc_vtvp
call fcn.100497ec
pop ecx
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x1c], ebx
jmp 0x1004311b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x50], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10043111
mov dword [ebp - 0x1c], ebx
jmp 0x10043161
mov dword [ebp - 0x30], 0x2eaa29c1
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10043146
push 0x110e
push 0x918
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x50]
cmp eax, 1
setge cl
add ecx, 0x7fd1e814
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10043126
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1004317c
push 0x314
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
push 0x5f
pop eax
mov word [ebp - 0x54], ax
lea ecx, [ebp - 0x1dc]
xor eax, eax
mov byte [ebp - 0x5c], bl
mov word [ebp - 0x52], ax
mov word [ebp - 0x1dc], ax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 0x5b], 0x25
mov dword [ebp - 0x1c8], 7
mov dword [ebp - 0x1cc], ebx
call fcn.10005926
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x34], 0xa6801fc3
mov dword [ebp - 0x2c], 0xde2bbef7
cmp dword [ebp - 0x30], ebx
je 0x100431f0
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100431fd
push 0x25e6
push 0x2674
push ebx
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x100431fd
mov dword [ebp - 0x2c], 0xfff6
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x28], 5
jmp 0x10043235
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10043232
push ebx
push 0xb0b
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xa
je 0x1004321d
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
push dword [ebp - 0x128]
cmp dword [ebp - 0x124], 8
lea eax, [ebp - 0x138]
push ebx
cmovae eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x1f4]
push eax
call fcn.1000f2a1
cmp eax, 0xffffffff
je 0x10043287
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1dc]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1f4]
call fcn.10011498
jmp 0x10043241
mov ecx, dword [ebp - 0x74]
lea eax, [ebp - 0x1f4]
push eax
lea edx, [ebp - 0x1b0]
call fcn.100436ce
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1dc]
call fcn.100059ae
push ebx
push 1
lea ecx, [ebp - 0x138]
call fcn.100059ae
push ebx
push 1
lea ecx, [ebp - 0x1f4]
call fcn.100059ae
push ebx
push 1
lea ecx, [ebp - 0x1b0]
call fcn.100059ae
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x74]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret