Function at 0x1013a4f
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x2a6c
call fcn.0101abd0
mov eax, dword [0x101ed2c]
push ebx
push esi
push edi
xor esi, esi
mov dword [ebp - 4], eax
push 0xa
pop ebx
mov eax, 0x1001a74
mov dword [ebp - 0x2a6c], eax
mov dword [ebp - 0x2a68], eax
mov dword [ebp - 0x2a64], eax
mov dword [ebp - 0x2a60], eax
xor eax, eax
push 0xd
xor edx, edx
inc edx
pop ecx
mov dword [ebp - 0x2a5c], ebx
mov word [ebp - 0x2a58], si
mov word [ebp - 0x2a56], si
mov word [ebp - 0x2a54], si
mov word [ebp - 0x2a52], si
mov dword [ebp - 0x2a50], edx
mov dword [ebp - 0x2a4c], edx
mov dword [ebp - 0x2a48], 3
lea edi, [ebp - 0x2a44]
rep stosd dword es:[edi], eax
mov eax, 0x1001a6c
mov dword [ebp - 0x2a10], eax
mov dword [ebp - 0x2a0c], eax
mov eax, 0x1001a60
mov dword [ebp - 0x2a08], eax
mov dword [ebp - 0x2a04], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x2a00], ebx
mov word [ebp - 0x29fc], dx
mov word [ebp - 0x29fa], dx
mov word [ebp - 0x29f8], 8
mov word [ebp - 0x29f6], 8
mov dword [ebp - 0x29f4], edx
mov dword [ebp - 0x29f0], edx
mov dword [ebp - 0x29ec], 3
mov dword [ebp - 0x29e8], esi
mov dword [ebp - 0x29e4], 2
mov dword [ebp - 0x29e0], edx
mov dword [ebp - 0x29dc], esi
mov dword [ebp - 0x29d8], esi
mov dword [ebp - 0x29d4], esi
lea edi, [ebp - 0x29d0]
rep stosd dword es:[edi], eax
mov eax, 0x1001a58
mov dword [ebp - 0x29b4], eax
mov dword [ebp - 0x29b0], eax
mov eax, 0x1001a4c
mov dword [ebp - 0x29ac], eax
mov dword [ebp - 0x29a8], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2974]
mov dword [ebp - 0x29a4], ebx
mov word [ebp - 0x29a0], dx
mov word [ebp - 0x299e], 0x13
mov word [ebp - 0x299c], 8
mov word [ebp - 0x299a], 8
mov dword [ebp - 0x2998], esi
mov dword [ebp - 0x2994], edx
mov dword [ebp - 0x2990], 3
mov dword [ebp - 0x298c], esi
mov dword [ebp - 0x2988], 2
mov dword [ebp - 0x2984], GetKeyboardType
mov dword [ebp - 0x2980], esi
mov dword [ebp - 0x297c], esi
mov dword [ebp - 0x2978], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001a44
mov dword [ebp - 0x2958], eax
mov dword [ebp - 0x2954], eax
push 7
mov eax, 0x1001a38
mov dword [ebp - 0x2950], eax
mov dword [ebp - 0x294c], eax
xor eax, eax
pop ecx
mov dword [ebp - 0x2948], ebx
mov word [ebp - 0x2944], dx
mov word [ebp - 0x2942], 0x1c
mov word [ebp - 0x2940], 8
mov word [ebp - 0x293e], 8
mov dword [ebp - 0x293c], esi
mov dword [ebp - 0x2938], edx
mov dword [ebp - 0x2934], 3
mov dword [ebp - 0x2930], esi
mov dword [ebp - 0x292c], 2
mov dword [ebp - 0x2928], GetKeyboardType
mov dword [ebp - 0x2924], esi
mov dword [ebp - 0x2920], esi
mov dword [ebp - 0x291c], esi
lea edi, [ebp - 0x2918]
rep stosd dword es:[edi], eax
mov eax, 0x1001a30
mov dword [ebp - 0x28fc], eax
mov dword [ebp - 0x28f8], eax
mov eax, 0x1001a24
mov dword [ebp - 0x28f4], eax
mov dword [ebp - 0x28f0], eax
xor eax, eax
push 7
pop ecx
mov dword [ebp - 0x28ec], ebx
mov word [ebp - 0x28e8], dx
mov word [ebp - 0x28e6], 0x25
mov word [ebp - 0x28e4], 8
mov word [ebp - 0x28e2], 8
mov dword [ebp - 0x28e0], esi
mov dword [ebp - 0x28dc], edx
mov dword [ebp - 0x28d8], 3
mov dword [ebp - 0x28d4], esi
mov dword [ebp - 0x28d0], 2
mov dword [ebp - 0x28cc], GetKeyboardType
mov dword [ebp - 0x28c8], esi
mov dword [ebp - 0x28c4], esi
mov dword [ebp - 0x28c0], esi
lea edi, [ebp - 0x28bc]
rep stosd dword es:[edi], eax
mov eax, 0x1001a1c
mov dword [ebp - 0x28a0], eax
mov dword [ebp - 0x289c], eax
mov eax, 0x1001a10
mov dword [ebp - 0x2898], eax
mov dword [ebp - 0x2894], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2860]
mov dword [ebp - 0x2890], ebx
mov word [ebp - 0x288c], dx
mov word [ebp - 0x288a], GetLastError
mov word [ebp - 0x2888], 8
mov word [ebp - 0x2886], 8
mov dword [ebp - 0x2884], esi
mov dword [ebp - 0x2880], edx
mov dword [ebp - 0x287c], 3
mov dword [ebp - 0x2878], esi
mov dword [ebp - 0x2874], 2
mov dword [ebp - 0x2870], GetKeyboardType
mov dword [ebp - 0x286c], esi
mov dword [ebp - 0x2868], esi
mov dword [ebp - 0x2864], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001a08
mov dword [ebp - 0x2844], eax
mov dword [ebp - 0x2840], eax
mov eax, 0x10019fc
mov dword [ebp - 0x283c], eax
mov dword [ebp - 0x2838], eax
mov dword [ebp - 0x2834], ebx
xor eax, eax
push 7
pop ecx
mov word [ebp - 0x2830], dx
mov word [ebp - 0x282e], GetKeyboardType
mov word [ebp - 0x282c], 8
mov word [ebp - 0x282a], 8
mov dword [ebp - 0x2828], esi
mov dword [ebp - 0x2824], edx
mov dword [ebp - 0x2820], 3
mov dword [ebp - 0x281c], esi
mov dword [ebp - 0x2818], 2
mov dword [ebp - 0x2814], GetKeyboardType
mov dword [ebp - 0x2810], esi
mov dword [ebp - 0x280c], esi
mov dword [ebp - 0x2808], esi
lea edi, [ebp - 0x2804]
rep stosd dword es:[edi], eax
mov eax, 0x10019f4
mov dword [ebp - 0x27e8], eax
mov dword [ebp - 0x27e4], eax
mov eax, 0x10019e8
mov dword [ebp - 0x27e0], eax
mov dword [ebp - 0x27dc], eax
xor eax, eax
push 7
pop ecx
mov dword [ebp - 0x27d8], ebx
mov word [ebp - 0x27d4], dx
mov word [ebp - 0x27d2], 0x45
mov word [ebp - 0x27d0], 8
mov word [ebp - 0x27ce], 8
mov dword [ebp - 0x27cc], esi
mov dword [ebp - 0x27c8], edx
mov dword [ebp - 0x27c4], 3
mov dword [ebp - 0x27c0], esi
mov dword [ebp - 0x27bc], 2
mov dword [ebp - 0x27b8], GetKeyboardType
mov dword [ebp - 0x27b4], esi
mov dword [ebp - 0x27b0], esi
mov dword [ebp - 0x27ac], esi
lea edi, [ebp - 0x27a8]
rep stosd dword es:[edi], eax
mov eax, 0x10019e0
mov dword [ebp - 0x278c], eax
mov dword [ebp - 0x2788], eax
mov eax, 0x10019d4
mov dword [ebp - 0x2784], eax
mov dword [ebp - 0x2780], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x274c]
mov dword [ebp - 0x277c], ebx
mov word [ebp - 0x2778], dx
mov word [ebp - 0x2776], reloc.USER32.dll_DefWindowProcW
mov word [ebp - 0x2774], 8
mov word [ebp - 0x2772], 8
mov dword [ebp - 0x2770], esi
mov dword [ebp - 0x276c], edx
mov dword [ebp - 0x2768], 3
mov dword [ebp - 0x2764], esi
mov dword [ebp - 0x2760], 2
mov dword [ebp - 0x275c], GetKeyboardType
mov dword [ebp - 0x2758], esi
mov dword [ebp - 0x2754], esi
mov dword [ebp - 0x2750], esi
rep stosd dword es:[edi], eax
mov eax, 0x10019cc
mov dword [ebp - 0x2730], eax
mov dword [ebp - 0x272c], eax
mov eax, 0x10019c0
mov dword [ebp - 0x2728], eax
mov dword [ebp - 0x2724], eax
mov dword [ebp - 0x2720], ebx
mov word [ebp - 0x271c], dx
mov word [ebp - 0x271a], reloc.USER32.dll_CheckDlgButton
mov word [ebp - 0x2718], 8
mov word [ebp - 0x2716], 8
mov dword [ebp - 0x2714], esi
mov dword [ebp - 0x2710], edx
xor eax, eax
push 7
pop ecx
mov dword [ebp - 0x270c], 3
mov dword [ebp - 0x2708], esi
mov dword [ebp - 0x2704], 2
mov dword [ebp - 0x2700], reloc.USER32.dll_GetKeyboardType
mov dword [ebp - 0x26fc], esi
mov dword [ebp - 0x26f8], esi
mov dword [ebp - 0x26f4], esi
lea edi, [ebp - 0x26f0]
rep stosd dword es:[edi], eax
mov eax, 0x10019b8
mov dword [ebp - 0x26d4], eax
mov dword [ebp - 0x26d0], eax
mov eax, 0x10019ac
mov dword [ebp - 0x26cc], eax
mov dword [ebp - 0x26c8], eax
xor eax, eax
push 7
pop ecx
mov dword [ebp - 0x26c4], ebx
mov word [ebp - 0x26c0], dx
mov word [ebp - 0x26be], BitBlt
mov word [ebp - 0x26bc], 8
mov word [ebp - 0x26ba], 8
mov dword [ebp - 0x26b8], esi
mov dword [ebp - 0x26b4], edx
mov dword [ebp - 0x26b0], 3
mov dword [ebp - 0x26ac], esi
mov dword [ebp - 0x26a8], 2
mov dword [ebp - 0x26a4], 0x43
mov dword [ebp - 0x26a0], esi
mov dword [ebp - 0x269c], esi
mov dword [ebp - 0x2698], esi
lea edi, [ebp - 0x2694]
rep stosd dword es:[edi], eax
mov eax, 0x10019a4
mov dword [ebp - 0x2678], eax
mov dword [ebp - 0x2674], eax
mov eax, 0x1001998
mov dword [ebp - 0x2670], eax
mov dword [ebp - 0x266c], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x2638]
mov dword [ebp - 0x2668], 6
mov word [ebp - 0x2664], dx
mov word [ebp - 0x2662], reloc.ADVAPI32.dll_SetSecurityDescriptorDacl
mov word [ebp - 0x2660], 8
mov word [ebp - 0x265e], 8
mov dword [ebp - 0x265c], esi
mov dword [ebp - 0x2658], edx
mov dword [ebp - 0x2654], 3
mov dword [ebp - 0x2650], esi
mov dword [ebp - 0x264c], 2
mov dword [ebp - 0x2648], 0x44
mov dword [ebp - 0x2644], esi
mov dword [ebp - 0x2640], esi
mov dword [ebp - 0x263c], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001990
mov dword [ebp - 0x261c], eax
mov dword [ebp - 0x2618], eax
mov eax, 0x1001984
mov dword [ebp - 0x2614], eax
mov dword [ebp - 0x2610], eax
mov dword [ebp - 0x260c], ebx
mov word [ebp - 0x2608], dx
mov word [ebp - 0x2606], GetTextMetricsW
mov word [ebp - 0x2604], 8
mov word [ebp - 0x2602], 8
mov dword [ebp - 0x2600], esi
mov dword [ebp - 0x25fc], edx
mov dword [ebp - 0x25f8], 3
mov dword [ebp - 0x25f4], esi
mov dword [ebp - 0x25f0], 2
mov dword [ebp - 0x25ec], reloc.USER32.dll_CheckDlgButton
mov dword [ebp - 0x25e8], esi
mov dword [ebp - 0x25e4], esi
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x25e0], esi
lea edi, [ebp - 0x25dc]
rep stosd dword es:[edi], eax
mov eax, 0x100197c
mov dword [ebp - 0x25c0], eax
mov dword [ebp - 0x25bc], eax
push 7
pop ecx
mov eax, 0x1001970
mov dword [ebp - 0x25b8], eax
mov dword [ebp - 0x25b4], eax
xor eax, eax
mov dword [ebp - 0x25b0], ebx
mov word [ebp - 0x25ac], dx
mov word [ebp - 0x25aa], 0x80
mov word [ebp - 0x25a8], 8
mov word [ebp - 0x25a6], 8
mov dword [ebp - 0x25a4], esi
mov dword [ebp - 0x25a0], edx
mov dword [ebp - 0x259c], 3
mov dword [ebp - 0x2598], esi
mov dword [ebp - 0x2594], 2
mov dword [ebp - 0x2590], RegOpenKeyExA
mov dword [ebp - 0x258c], esi
mov dword [ebp - 0x2588], esi
mov dword [ebp - 0x2584], esi
lea edi, [ebp - 0x2580]
rep stosd dword es:[edi], eax
mov eax, reloc.ADVAPI32.dll_FreeSid
mov dword [ebp - 0x2564], eax
mov dword [ebp - 0x2560], eax
mov eax, 0x1001958
mov dword [ebp - 0x255c], eax
mov dword [ebp - 0x2558], eax
push 7
mov eax, pe_nt_image_headers32
mov dword [ebp - 0x2534], eax
mov dword [ebp - 0x252c], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x2524]
mov dword [ebp - 0x2554], 9
mov word [ebp - 0x2550], dx
mov word [ebp - 0x254e], 0x8a
mov word [ebp - 0x254c], 8
mov word [ebp - 0x254a], 8
mov dword [ebp - 0x2548], edx
mov dword [ebp - 0x2544], edx
mov dword [ebp - 0x2540], edx
mov dword [ebp - 0x253c], esi
mov dword [ebp - 0x2538], 2
mov dword [ebp - 0x2530], GetLastError
mov dword [ebp - 0x2528], reloc.USER32.dll_GetMessageW
rep stosd dword es:[edi], eax
mov eax, reloc.comdlg32.dll_ChooseFontW
mov dword [ebp - 0x2508], eax
mov dword [ebp - 0x2504], eax
mov eax, 0x1001938
push 8
mov dword [ebp - 0x2500], eax
mov dword [ebp - 0x24fc], eax
pop eax
push 7
mov dword [ebp - 0x24f8], 0xf
mov word [ebp - 0x24f4], dx
mov word [ebp - 0x24f2], 0x93
mov word [ebp - 0x24f0], ax
mov word [ebp - 0x24ee], ax
mov dword [ebp - 0x24ec], edx
mov dword [ebp - 0x24e8], eax
mov dword [ebp - 0x24e4], edx
mov dword [ebp - 0x24e0], esi
mov dword [ebp - 0x24dc], 2
mov dword [ebp - 0x24d8], DefWindowProcW
mov dword [ebp - 0x24d4], esi
mov dword [ebp - 0x24d0], esi
mov dword [ebp - 0x24cc], esi
pop ecx
xor eax, eax
push 7
lea edi, [ebp - 0x24c8]
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - reloc.GDI32.dll_SetTextColor], 0x1001930
mov dword [ebp - reloc.GDI32.dll_CreateFontIndirectW], 0x1001928
mov dword [ebp - reloc.ADVAPI32.dll_CheckTokenMembership], 0x1001918
mov dword [ebp - reloc.ADVAPI32.dll_OpenThreadToken], 0x100190c
mov dword [ebp - 0x249c], ebx
mov word [ebp - 0x2498], dx
mov word [ebp - 0x2496], 0x9c
mov word [ebp - 0x2494], 8
mov word [ebp - 0x2492], 8
mov dword [ebp - 0x2490], edx
mov dword [ebp - 0x248c], edx
mov dword [ebp - 0x2488], edx
mov dword [ebp - 0x2484], edx
mov dword [ebp - 0x2480], 2
mov dword [ebp - 0x247c], 0xe1
mov dword [ebp - 0x2478], 0x10
mov dword [ebp - 0x2474], DefWindowProcW
mov dword [ebp - 0x2470], esi
lea edi, [ebp - 0x246c]
rep stosd dword es:[edi], eax
mov eax, reloc.ADVAPI32.dll_RegOpenKeyExA
mov dword [ebp - 0x2450], eax
mov dword [ebp - 0x2448], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x244c], 0x10018d4
mov dword [ebp - 0x2444], 0x10018cc
mov dword [ebp - 0x2440], ebx
mov word [ebp - 0x243c], 0xc
mov word [ebp - 0x243a], dx
mov word [ebp - 0x2438], 8
mov word [ebp - 0x2436], 8
mov dword [ebp - 0x2434], esi
mov dword [ebp - 0x2430], edx
mov dword [ebp - 0x242c], 3
mov dword [ebp - 0x2428], edx
mov dword [ebp - 0x2424], edx
mov dword [ebp - 0x2420], GetLastError
mov dword [ebp - 0x241c], esi
mov dword [ebp - 0x2418], esi
mov dword [ebp - 0x2414], esi
lea edi, [ebp - 0x2410]
rep stosd dword es:[edi], eax
mov eax, reloc.KERNEL32.dll_GetLastError
mov ecx, 0x10018c4
mov dword [ebp - 0x23f4], eax
mov dword [ebp - 0x23f0], ecx
mov dword [ebp - 0x23ec], eax
mov dword [ebp - 0x23e8], ecx
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x23b4]
mov dword [ebp - 0x23e4], ebx
mov word [ebp - 0x23e0], 0xc
mov word [ebp - 0x23de], bx
mov word [ebp - 0x23dc], 8
mov word [ebp - 0x23da], 8
mov dword [ebp - 0x23d8], esi
mov dword [ebp - 0x23d4], edx
mov dword [ebp - 0x23d0], 3
mov dword [ebp - 0x23cc], edx
mov dword [ebp - 0x23c8], edx
mov dword [ebp - 0x23c4], 2
mov dword [ebp - 0x23c0], esi
mov dword [ebp - 0x23bc], esi
mov dword [ebp - 0x23b8], esi
rep stosd dword es:[edi], eax
mov eax, reloc.KERNEL32.dll_lstrlenW
mov ecx, 0x10018bc
mov dword [ebp - 0x2398], eax
mov dword [ebp - 0x2394], ecx
mov dword [ebp - 0x2390], eax
mov dword [ebp - 0x238c], ecx
mov dword [ebp - 0x2388], ebx
push 3
pop eax
mov dword [ebp - 0x2374], eax
mov dword [ebp - 0x2368], eax
push 7
xor eax, eax
pop ecx
mov word [ebp - 0x2384], 0xc
mov word [ebp - 0x2382], 0x13
mov word [ebp - 0x2380], 8
mov word [ebp - 0x237e], 8
mov dword [ebp - 0x237c], esi
mov dword [ebp - 0x2378], edx
mov dword [ebp - 0x2370], edx
mov dword [ebp - 0x236c], edx
mov dword [ebp - 0x2364], esi
mov dword [ebp - 0x2360], esi
mov dword [ebp - 0x235c], esi
lea edi, [ebp - 0x2358]
rep stosd dword es:[edi], eax
mov eax, 0x10018b8
mov dword [ebp - 0x233c], eax
mov dword [ebp - 0x2334], eax
mov ecx, 0x10018b4
mov dword [ebp - 0x2338], ecx
mov dword [ebp - 0x2330], ecx
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x232c], ebx
mov word [ebp - 0x2328], 0xc
mov word [ebp - 0x2326], 0x1c
mov word [ebp - 0x2324], 8
mov word [ebp - 0x2322], 8
mov dword [ebp - 0x2320], esi
mov dword [ebp - 0x231c], edx
mov dword [ebp - 0x2318], 3
mov dword [ebp - 0x2314], edx
mov dword [ebp - 0x2310], edx
mov dword [ebp - 0x230c], 4
mov dword [ebp - 0x2308], esi
mov dword [ebp - 0x2304], esi
mov dword [ebp - 0x2300], esi
lea edi, [ebp - 0x22fc]
rep stosd dword es:[edi], eax
mov eax, 0x10018b0
mov ecx, 0x10018ac
mov dword [ebp - 0x22e0], eax
mov dword [ebp - 0x22d8], eax
mov dword [ebp - 0x22dc], ecx
mov dword [ebp - 0x22d4], ecx
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x22a0]
mov dword [ebp - 0x22d0], ebx
mov word [ebp - 0x22cc], 0xc
mov word [ebp - 0x22ca], 0x25
mov word [ebp - 0x22c8], 8
mov word [ebp - 0x22c6], 8
mov dword [ebp - 0x22c4], esi
mov dword [ebp - 0x22c0], edx
mov dword [ebp - 0x22bc], 3
mov dword [ebp - 0x22b8], edx
mov dword [ebp - 0x22b4], edx
mov dword [ebp - 0x22b0], 5
mov dword [ebp - 0x22ac], esi
mov dword [ebp - 0x22a8], esi
mov dword [ebp - 0x22a4], esi
rep stosd dword es:[edi], eax
mov eax, 0x10018a8
mov dword [ebp - 0x2284], eax
mov dword [ebp - 0x2280], 0x10018a4
mov dword [ebp - 0x227c], eax
mov dword [ebp - 0x2278], 0x100189c
mov dword [ebp - 0x2274], ebx
mov word [ebp - 0x2270], 0xc
mov word [ebp - 0x226e], GetLastError
mov word [ebp - 0x226c], 8
mov word [ebp - 0x226a], 8
mov dword [ebp - 0x2268], esi
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x2264], edx
mov dword [ebp - 0x2260], 3
mov dword [ebp - 0x225c], edx
mov dword [ebp - 0x2258], edx
mov dword [ebp - 0x2254], 6
mov dword [ebp - 0x2250], esi
mov dword [ebp - 0x224c], esi
mov dword [ebp - 0x2248], esi
push 7
lea edi, [ebp - 0x2244]
rep stosd dword es:[edi], eax
pop ecx
mov eax, 0x1001898
mov dword [ebp - 0x2228], eax
mov dword [ebp - 0x2220], eax
xor eax, eax
mov dword [ebp - 0x21f8], ecx
mov dword [ebp - 0x2224], 0x1001894
mov dword [ebp - reloc.ADVAPI32.dll_OpenThreadToken], 0x100188c
mov dword [ebp - 0x2218], ebx
mov word [ebp - 0x2214], 0xc
mov word [ebp - 0x2212], reloc.USER32.dll_GetMessageW
mov word [ebp - 0x2210], 8
mov word [ebp - 0x220e], 8
mov dword [ebp - 0x220c], esi
mov dword [ebp - 0x2208], edx
mov dword [ebp - 0x2204], 3
mov dword [ebp - 0x2200], edx
mov dword [ebp - 0x21fc], edx
mov dword [ebp - 0x21f4], esi
mov dword [ebp - 0x21f0], esi
mov dword [ebp - 0x21ec], esi
lea edi, [ebp - 0x21e8]
rep stosd dword es:[edi], eax
mov eax, reloc.USER32.dll_GetMessageW
mov dword [ebp - 0x21cc], eax
mov dword [ebp - 0x21c4], eax
push 8
pop eax
mov ecx, 0x1001884
mov dword [ebp - 0x21c8], ecx
mov dword [ebp - 0x21c0], ecx
mov word [ebp - 0x21b4], ax
mov word [ebp - 0x21b2], ax
mov dword [ebp - 0x219c], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x218c]
mov dword [ebp - 0x21bc], ebx
mov word [ebp - 0x21b8], 0xc
mov word [ebp - 0x21b6], GetKeyboardType
mov dword [ebp - 0x21b0], esi
mov dword [ebp - 0x21ac], edx
mov dword [ebp - 0x21a8], 3
mov dword [ebp - 0x21a4], edx
mov dword [ebp - 0x21a0], edx
mov dword [ebp - 0x2198], esi
mov dword [ebp - 0x2194], esi
mov dword [ebp - 0x2190], esi
rep stosd dword es:[edi], eax
mov ecx, 0x1001880
mov eax, 0x100187c
mov dword [ebp - 0x2170], ecx
mov dword [ebp - 0x216c], eax
mov dword [ebp - 0x2168], ecx
mov dword [ebp - 0x2164], eax
mov dword [ebp - 0x2160], ebx
mov word [ebp - 0x215c], 0xc
mov word [ebp - 0x215a], DefWindowProcW
mov word [ebp - 0x2158], 8
mov word [ebp - 0x2156], 8
mov dword [ebp - 0x2154], esi
mov dword [ebp - 0x2150], edx
mov dword [ebp - 0x214c], 3
mov dword [ebp - 0x2148], edx
mov dword [ebp - 0x2144], edx
mov dword [ebp - 0x2140], 9
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x213c], esi
mov dword [ebp - 0x2138], esi
mov dword [ebp - 0x2134], esi
push 7
lea edi, [ebp - 0x2130]
rep stosd dword es:[edi], eax
mov eax, reloc.USER32.dll_SetForegroundWindow
mov dword [ebp - 0x2114], eax
mov dword [ebp - 0x210c], eax
mov ecx, 0x1001874
mov dword [ebp - 0x2110], ecx
mov dword [ebp - 0x2108], ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x2104], ebx
mov word [ebp - 0x2100], 0xc
mov word [ebp - 0x20fe], CheckDlgButton
mov word [ebp - 0x20fc], 8
mov word [ebp - 0x20fa], 8
mov dword [ebp - 0x20f8], esi
mov dword [ebp - 0x20f4], edx
mov dword [ebp - 0x20f0], 3
mov dword [ebp - 0x20ec], edx
mov dword [ebp - 0x20e8], edx
mov dword [ebp - 0x20e4], ebx
mov dword [ebp - 0x20e0], esi
mov dword [ebp - 0x20dc], esi
mov dword [ebp - 0x20d8], esi
lea edi, [ebp - 0x20d4]
rep stosd dword es:[edi], eax
mov eax, reloc.KERNEL32.dll_WaitForMultipleObjects
mov ecx, 0x100186c
push 7
mov dword [ebp - 0x20b8], eax
mov dword [ebp - 0x20b0], eax
mov dword [ebp - 0x20b4], ecx
mov dword [ebp - 0x20ac], ecx
pop ecx
xor eax, eax
lea edi, [ebp - 0x2078]
mov dword [ebp - 0x20a8], ebx
mov word [ebp - 0x20a4], 0xc
mov word [ebp - 0x20a2], RegOpenKeyExA
mov word [ebp - 0x20a0], 8
mov word [ebp - 0x209e], 8
mov dword [ebp - 0x209c], esi
mov dword [ebp - 0x2098], edx
mov dword [ebp - 0x2094], 3
mov dword [ebp - 0x2090], edx
mov dword [ebp - 0x208c], edx
mov dword [ebp - 0x2088], 0xb
mov dword [ebp - 0x2084], esi
mov dword [ebp - 0x2080], esi
mov dword [ebp - 0x207c], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001868
push 0xc
mov dword [ebp - 0x205c], eax
mov ecx, 0x1001864
mov dword [ebp - 0x2054], eax
pop eax
mov dword [ebp - 0x2058], ecx
mov dword [ebp - 0x2050], ecx
mov dword [ebp - 0x204c], ebx
mov word [ebp - 0x2048], ax
mov word [ebp - 0x2046], BitBlt
mov word [ebp - 0x2044], 8
mov word [ebp - 0x2042], 8
mov dword [ebp - 0x2040], esi
mov dword [ebp - 0x203c], edx
mov dword [ebp - 0x2038], 3
mov dword [ebp - 0x2034], edx
mov dword [ebp - 0x2030], edx
mov dword [ebp - 0x202c], eax
mov dword [ebp - 0x2028], esi
mov dword [ebp - 0x2024], esi
mov dword [ebp - 0x2020], esi
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x201c]
rep stosd dword es:[edi], eax
push 7
mov eax, 0x1001860
mov dword [ebp - 0x2000], eax
mov dword [ebp - 0x1ff8], eax
xor eax, eax
pop ecx
mov dword [ebp - 0x1ffc], 0x100185c
mov dword [ebp - 0x1ff4], 0x1001854
mov dword [ebp - 0x1ff0], ebx
mov word [ebp - 0x1fec], 0xc
mov word [ebp - 0x1fea], SetSecurityDescriptorDacl
mov word [ebp - 0x1fe8], 8
mov word [ebp - 0x1fe6], 8
mov dword [ebp - 0x1fe4], esi
mov dword [ebp - 0x1fe0], edx
mov dword [ebp - 0x1fdc], 3
mov dword [ebp - 0x1fd8], edx
mov dword [ebp - 0x1fd4], edx
mov dword [ebp - 0x1fd0], 0xd
mov dword [ebp - 0x1fcc], esi
mov dword [ebp - 0x1fc8], esi
mov dword [ebp - 0x1fc4], esi
lea edi, [ebp - 0x1fc0]
rep stosd dword es:[edi], eax
mov eax, 0x1001a74
mov dword [ebp - 0x1fa4], eax
mov dword [ebp - 0x1fa0], eax
mov dword [ebp - 0x1f9c], eax
mov dword [ebp - 0x1f98], eax
xor eax, eax
push 0xc
pop ecx
mov dword [ebp - 0x1f94], ebx
mov word [ebp - 0x1f90], si
mov word [ebp - 0x1f8e], si
mov word [ebp - 0x1f8c], si
mov word [ebp - 0x1f8a], si
mov dword [ebp - 0x1f88], edx
mov dword [ebp - 0x1f84], edx
mov dword [ebp - 0x1f80], 4
mov dword [ebp - 0x1f7c], esi
lea edi, [ebp - 0x1f78]
rep stosd dword es:[edi], eax
mov eax, 0x1001848
mov dword [ebp - 0x1f48], eax
mov dword [ebp - 0x1f44], eax
mov eax, 0x100183c
mov dword [ebp - 0x1f40], eax
mov dword [ebp - 0x1f3c], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x1f08]
mov dword [ebp - 0x1f38], ebx
mov word [ebp - 0x1f34], 0xc
mov word [ebp - 0x1f32], GetTextMetricsW
mov word [ebp - 0x1f30], 8
mov word [ebp - 0x1f2e], 0x12
mov dword [ebp - 0x1f2c], edx
mov dword [ebp - 0x1f28], edx
mov dword [ebp - 0x1f24], 3
mov dword [ebp - 0x1f20], esi
mov dword [ebp - 0x1f1c], 2
mov dword [ebp - 0x1f18], 0xe
mov dword [ebp - 0x1f14], esi
mov dword [ebp - 0x1f10], esi
mov dword [ebp - 0x1f0c], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001814
mov dword [ebp - 0x1eec], eax
mov dword [ebp - 0x1ee8], eax
mov eax, 0x1001800
mov dword [ebp - 0x1ee4], eax
mov dword [ebp - 0x1ee0], eax
mov dword [ebp - 0x1edc], ebx
mov word [ebp - 0x1ed8], 0xc
mov word [ebp - 0x1ed6], 0x8a
push 7
xor eax, eax
pop ecx
mov word [ebp - 0x1ed4], 8
mov word [ebp - 0x1ed2], 8
mov dword [ebp - 0x1ed0], edx
mov dword [ebp - 0x1ecc], edx
mov dword [ebp - 0x1ec8], edx
mov dword [ebp - 0x1ec4], esi
mov dword [ebp - 0x1ec0], 2
mov dword [ebp - 0x1ebc], pe_nt_image_headers32
mov dword [ebp - 0x1eb8], CheckDlgButton
mov dword [ebp - 0x1eb4], esi
mov dword [ebp - 0x1eb0], esi
lea edi, [ebp - 0x1eac]
rep stosd dword es:[edi], eax
mov eax, 0x100171c
mov dword [ebp - 0x1e90], eax
mov dword [ebp - 0x1e8c], eax
push 7
mov eax, 0x100170c
mov dword [ebp - 0x1e88], eax
mov dword [ebp - 0x1e84], eax
xor eax, eax
pop ecx
mov dword [ebp - 0x1e80], ebx
mov word [ebp - 0x1e7c], 0xc
mov word [ebp - 0x1e7a], 0x93
mov word [ebp - 0x1e78], 8
mov word [ebp - 0x1e76], 8
mov dword [ebp - 0x1e74], edx
mov dword [ebp - 0x1e70], edx
mov dword [ebp - 0x1e6c], edx
mov dword [ebp - 0x1e68], esi
mov dword [ebp - 0x1e64], 2
mov dword [ebp - 0x1e60], pe_nt_image_headers32
mov dword [ebp - 0x1e5c], DefWindowProcW
mov dword [ebp - 0x1e58], esi
mov dword [ebp - 0x1e54], esi
lea edi, [ebp - 0x1e50]
rep stosd dword es:[edi], eax
mov eax, reloc.ADVAPI32.dll_FreeSid
mov dword [ebp - 0x1e34], eax
mov dword [ebp - 0x1e30], eax
mov eax, 0x10018f4
mov dword [ebp - 0x1e2c], eax
mov dword [ebp - 0x1e28], eax
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x1df4]
mov dword [ebp - 0x1e24], ebx
mov word [ebp - 0x1e20], 0xc
mov word [ebp - 0x1e1e], 0x9c
mov word [ebp - 0x1e1c], 8
mov word [ebp - 0x1e1a], 8
mov dword [ebp - 0x1e18], edx
mov dword [ebp - 0x1e14], edx
mov dword [ebp - 0x1e10], edx
mov dword [ebp - 0x1e0c], esi
mov dword [ebp - 0x1e08], 2
mov dword [ebp - 0x1e04], pe_nt_image_headers32
mov dword [ebp - 0x1e00], DefWindowProcW
mov dword [ebp - 0x1dfc], esi
mov dword [ebp - 0x1df8], esi
rep stosd dword es:[edi], eax
mov eax, reloc.ADVAPI32.dll_SetSecurityDescriptorDacl
mov dword [ebp - 0x1dd8], eax
mov dword [ebp - 0x1dd4], eax
mov eax, 0x1001820
push 8
mov dword [ebp - 0x1dd0], eax
mov dword [ebp - 0x1dcc], eax
pop eax
mov dword [ebp - 0x1dc8], eax
mov word [ebp - 0x1dc4], 0xc
mov word [ebp - 0x1dc2], 0xa6
mov word [ebp - 0x1dc0], ax
mov word [ebp - 0x1dbe], ax
mov dword [ebp - 0x1dbc], esi
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x1db8], ecx
mov dword [ebp - 0x1db4], edx
mov dword [ebp - 0x1db0], esi
mov dword [ebp - 0x1dac], 2
mov dword [ebp - 0x1da8], DefWindowProcW
mov dword [ebp - 0x1da4], esi
mov dword [ebp - 0x1da0], esi
mov dword [ebp - 0x1d9c], esi
lea edi, [ebp - 0x1d98]
rep stosd dword es:[edi], eax
mov eax, 0x100181c
mov dword [ebp - 0x1d7c], eax
mov dword [ebp - 0x1d78], eax
mov dword [ebp - 0x1d74], eax
mov dword [ebp - 0x1d70], eax
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x1d6c], ebx
mov word [ebp - 0x1d68], 0xc
mov word [ebp - 0x1d66], 0xaf
mov word [ebp - 0x1d64], 8
mov word [ebp - 0x1d62], 8
mov dword [ebp - 0x1d60], esi
mov dword [ebp - 0x1d5c], edx
mov dword [ebp - 0x1d58], edx
mov dword [ebp - 0x1d54], esi
mov dword [ebp - 0x1d50], 2
mov dword [ebp - 0x1d4c], pe_nt_image_headers32
mov dword [ebp - 0x1d48], GetMessageW
mov dword [ebp - 0x1d44], esi
mov dword [ebp - 0x1d40], esi
lea edi, [ebp - 0x1d3c]
rep stosd dword es:[edi], eax
mov eax, 0x100187c
push 7
mov dword [ebp - 0x1d20], eax
mov dword [ebp - 0x1d1c], eax
mov dword [ebp - 0x1d18], eax
mov dword [ebp - 0x1d14], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x1ce0]
mov dword [ebp - 0x1d10], ebx
mov word [ebp - 0x1d0c], 0xc
mov word [ebp - 0x1d0a], 0xb8
mov word [ebp - 0x1d08], 8
mov word [ebp - 0x1d06], 8
mov dword [ebp - 0x1d04], esi
mov dword [ebp - 0x1d00], edx
mov dword [ebp - 0x1cfc], edx
mov dword [ebp - 0x1cf8], esi
mov dword [ebp - 0x1cf4], 2
mov dword [ebp - 0x1cf0], pe_nt_image_headers32
mov dword [ebp - 0x1cec], reloc.USER32.dll_GetMessageW
mov dword [ebp - 0x1ce8], esi
mov dword [ebp - 0x1ce4], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001868
push 7
mov dword [ebp - 0x1cc4], eax
mov dword [ebp - 0x1cc0], eax
mov dword [ebp - 0x1cbc], eax
mov dword [ebp - 0x1cb8], eax
mov dword [ebp - 0x1cb4], ebx
mov word [ebp - 0x1cb0], 0xc
mov word [ebp - 0x1cae], 0xc1
mov word [ebp - 0x1cac], 8
mov word [ebp - 0x1caa], 8
mov dword [ebp - 0x1ca8], esi
mov dword [ebp - 0x1ca4], edx
mov dword [ebp - 0x1ca0], edx
mov dword [ebp - 0x1c9c], esi
mov dword [ebp - 0x1c98], edx
mov dword [ebp - 0x1c94], DefWindowProcW
mov dword [ebp - 0x1c90], esi
mov dword [ebp - 0x1c8c], esi
mov dword [ebp - 0x1c88], esi
pop ecx
xor eax, eax
lea edi, [ebp - 0x1c84]
rep stosd dword es:[edi], eax
mov eax, 0x10017f8
mov dword [ebp - 0x1c68], eax
mov dword [ebp - 0x1c64], eax
push 7
mov eax, 0x10017ec
mov dword [ebp - 0x1c60], eax
mov dword [ebp - 0x1c5c], eax
xor eax, eax
pop ecx
mov dword [ebp - 0x1c58], ebx
mov word [ebp - 0x1c54], 0x15
mov word [ebp - 0x1c52], dx
mov word [ebp - 0x1c50], 8
mov word [ebp - 0x1c4e], 0xd
mov dword [ebp - 0x1c4c], esi
mov dword [ebp - 0x1c48], edx
mov dword [ebp - 0x1c44], 3
mov dword [ebp - 0x1c40], esi
mov dword [ebp - 0x1c3c], 2
mov dword [ebp - 0x1c38], 0xf
mov dword [ebp - 0x1c34], esi
mov dword [ebp - 0x1c30], esi
mov dword [ebp - 0x1c2c], esi
lea edi, [ebp - 0x1c28]
rep stosd dword es:[edi], eax
mov eax, 0x10017e8
mov dword [ebp - 0x1c0c], eax
mov dword [ebp - 0x1c04], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x1c08], 0x10017e4
mov dword [ebp - 0x1c00], 0x10017dc
mov dword [ebp - 0x1bfc], ebx
mov word [ebp - 0x1bf8], 0x15
mov word [ebp - 0x1bf6], 0xf
mov word [ebp - 0x1bf4], 8
mov word [ebp - 0x1bf2], 8
mov dword [ebp - 0x1bf0], esi
mov dword [ebp - 0x1bec], edx
mov dword [ebp - 0x1be8], 3
mov dword [ebp - 0x1be4], edx
mov dword [ebp - 0x1be0], edx
mov dword [ebp - 0x1bdc], 0x10
mov dword [ebp - 0x1bd8], esi
mov dword [ebp - 0x1bd4], esi
mov dword [ebp - 0x1bd0], esi
lea edi, [ebp - 0x1bcc]
rep stosd dword es:[edi], eax
mov eax, 0x10017d8
mov dword [ebp - 0x1bb0], eax
mov dword [ebp - 0x1ba8], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x1b70]
mov dword [ebp - reloc.USER32.dll_CheckDlgButton], 0x10017d4
mov dword [ebp - 0x1ba4], 0x10017cc
mov dword [ebp - 0x1ba0], ebx
mov word [ebp - 0x1b9c], 0x15
mov word [ebp - 0x1b9a], 0x18
mov word [ebp - 0x1b98], 8
mov word [ebp - 0x1b96], 8
mov dword [ebp - 0x1b94], esi
mov dword [ebp - 0x1b90], edx
mov dword [ebp - 0x1b8c], 3
mov dword [ebp - 0x1b88], edx
mov dword [ebp - 0x1b84], edx
mov dword [ebp - 0x1b80], 0x11
mov dword [ebp - 0x1b7c], esi
mov dword [ebp - 0x1b78], esi
mov dword [ebp - 0x1b74], esi
rep stosd dword es:[edi], eax
mov eax, 0x10017c8
mov dword [ebp - 0x1b54], eax
mov dword [ebp - 0x1b50], 0x10017c4
mov dword [ebp - 0x1b4c], eax
mov dword [ebp - 0x1b48], 0x10017bc
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x1b44], ebx
mov word [ebp - 0x1b40], 0x15
mov word [ebp - 0x1b3e], 0x21
mov word [ebp - 0x1b3c], 8
mov word [ebp - 0x1b3a], 8
mov dword [ebp - 0x1b38], esi
mov dword [ebp - 0x1b34], edx
mov dword [ebp - 0x1b30], 3
mov dword [ebp - 0x1b2c], edx
mov dword [ebp - 0x1b28], edx
mov dword [ebp - 0x1b24], 0x12
mov dword [ebp - 0x1b20], esi
mov dword [ebp - 0x1b1c], esi
mov dword [ebp - 0x1b18], esi
lea edi, [ebp - 0x1b14]
rep stosd dword es:[edi], eax
push 7
mov eax, 0x10017b8
mov dword [ebp - 0x1af8], eax
mov dword [ebp - 0x1af0], eax
pop ecx
xor eax, eax
mov dword [ebp - 0x1af4], 0x10017b4
mov dword [ebp - 0x1aec], 0x10017ac
mov dword [ebp - 0x1ae8], ebx
mov word [ebp - 0x1ae4], 0x15
mov word [ebp - 0x1ae2], GetLastError
mov word [ebp - 0x1ae0], 8
mov word [ebp - 0x1ade], 8
mov dword [ebp - 0x1adc], esi
mov dword [ebp - 0x1ad8], edx
mov dword [ebp - 0x1ad4], 3
mov dword [ebp - 0x1ad0], edx
mov dword [ebp - 0x1acc], edx
mov dword [ebp - 0x1ac8], 0x13
mov dword [ebp - 0x1ac4], esi
mov dword [ebp - 0x1ac0], esi
mov dword [ebp - 0x1abc], esi
lea edi, [ebp - 0x1ab8]
rep stosd dword es:[edi], eax
mov eax, 0x10017a8
mov dword [ebp - 0x1a9c], eax
mov dword [ebp - 0x1a94], eax
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x1a5c]
mov dword [ebp - 0x1a98], 0x10017a4
mov dword [ebp - 0x1a90], 0x100179c
mov dword [ebp - 0x1a8c], ebx
mov word [ebp - 0x1a88], 0x15
mov word [ebp - 0x1a86], GetMessageW
mov word [ebp - 0x1a84], 8
mov word [ebp - 0x1a82], 8
mov dword [ebp - 0x1a80], esi
mov dword [ebp - 0x1a7c], edx
mov dword [ebp - 0x1a78], 3
mov dword [ebp - 0x1a74], edx
mov dword [ebp - 0x1a70], edx
mov dword [ebp - 0x1a6c], 0x14
mov dword [ebp - 0x1a68], esi
mov dword [ebp - 0x1a64], esi
mov dword [ebp - 0x1a60], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001798
push 0x15
mov dword [ebp - 0x1a40], eax
mov dword [ebp - 0x1a38], eax
pop eax
mov dword [ebp - 0x1a3c], 0x1001794
mov dword [ebp - 0x1a34], 0x100178c
mov dword [ebp - 0x1a30], ebx
mov word [ebp - 0x1a2c], ax
mov word [ebp - 0x1a2a], GetKeyboardType
mov word [ebp - 0x1a28], 8
mov word [ebp - 0x1a26], 8
mov dword [ebp - 0x1a24], esi
mov dword [ebp - 0x1a20], edx
mov dword [ebp - 0x1a10], eax
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x1a1c], 3
mov dword [ebp - 0x1a18], edx
mov dword [ebp - 0x1a14], edx
mov dword [ebp - 0x1a0c], esi
mov dword [ebp - 0x1a08], esi
mov dword [ebp - 0x1a04], esi
lea edi, [ebp - 0x1a00]
rep stosd dword es:[edi], eax
push 7
mov eax, reloc.GDI32.dll_CreatePenIndirect
mov dword [ebp - 0x19e4], eax
mov dword [ebp - 0x19dc], eax
pop ecx
xor eax, eax
mov dword [ebp - 0x19e0], 0x1001784
mov dword [ebp - 0x19d8], 0x100177c
mov dword [ebp - 0x19d4], ebx
mov word [ebp - 0x19d0], 0x15
mov word [ebp - 0x19ce], 0x45
mov word [ebp - 0x19cc], 8
mov word [ebp - 0x19ca], 8
mov dword [ebp - 0x19c8], esi
mov dword [ebp - 0x19c4], edx
mov dword [ebp - 0x19c0], 3
mov dword [ebp - 0x19bc], edx
mov dword [ebp - 0x19b8], edx
mov dword [ebp - 0x19b4], 0x16
mov dword [ebp - 0x19b0], esi
mov dword [ebp - 0x19ac], esi
mov dword [ebp - 0x19a8], esi
lea edi, [ebp - 0x19a4]
rep stosd dword es:[edi], eax
mov eax, 0x1001778
push 7
mov dword [ebp - 0x1988], eax
mov dword [ebp - 0x1980], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x1948]
mov dword [ebp - 0x1984], 0x1001774
mov dword [ebp - 0x197c], 0x100176c
mov dword [ebp - 0x1978], ebx
mov word [ebp - 0x1974], 0x15
mov word [ebp - 0x1972], reloc.USER32.dll_DefWindowProcW
mov word [ebp - 0x1970], 8
mov word [ebp - 0x196e], 8
mov dword [ebp - 0x196c], esi
mov dword [ebp - 0x1968], edx
mov dword [ebp - 0x1964], 3
mov dword [ebp - 0x1960], edx
mov dword [ebp - 0x195c], edx
mov dword [ebp - 0x1958], 0x17
mov dword [ebp - 0x1954], esi
mov dword [ebp - 0x1950], esi
mov dword [ebp - 0x194c], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001768
push 7
mov dword [ebp - 0x192c], eax
mov dword [ebp - 0x1928], 0x1001764
mov dword [ebp - 0x1924], eax
mov dword [ebp - 0x1920], 0x100175c
mov dword [ebp - 0x191c], ebx
mov word [ebp - 0x1918], 0x15
mov word [ebp - 0x1916], reloc.USER32.dll_CheckDlgButton
mov word [ebp - 0x1914], 8
mov word [ebp - 0x1912], 8
mov dword [ebp - 0x1910], esi
mov dword [ebp - 0x190c], edx
mov dword [ebp - 0x1908], 3
mov dword [ebp - 0x1904], edx
mov dword [ebp - 0x1900], edx
mov dword [ebp - 0x18fc], 0x18
mov dword [ebp - 0x18f8], esi
mov dword [ebp - 0x18f4], esi
mov dword [ebp - 0x18f0], esi
pop ecx
xor eax, eax
lea edi, [ebp - 0x18ec]
rep stosd dword es:[edi], eax
push 7
mov eax, reloc.ADVAPI32.dll_FreeSid
mov dword [ebp - 0x18d0], eax
mov dword [ebp - 0x18c8], eax
xor eax, eax
pop ecx
mov dword [ebp - 0x18cc], 0x1001754
mov dword [ebp - 0x18c4], 0x100174c
mov dword [ebp - 0x18c0], ebx
mov word [ebp - 0x18bc], 0x15
mov word [ebp - 0x18ba], reloc.ADVAPI32.dll_RegOpenKeyExA
mov word [ebp - 0x18b8], 8
mov word [ebp - 0x18b6], 8
mov dword [ebp - 0x18b4], esi
mov dword [ebp - 0x18b0], edx
mov dword [ebp - 0x18ac], 3
mov dword [ebp - 0x18a8], edx
mov dword [ebp - 0x18a4], edx
mov dword [ebp - 0x18a0], 0x19
mov dword [ebp - 0x189c], esi
mov dword [ebp - 0x1898], esi
mov dword [ebp - 0x1894], esi
lea edi, [ebp - 0x1890]
rep stosd dword es:[edi], eax
mov eax, 0x1001748
mov dword [ebp - 0x1874], eax
mov dword [ebp - 0x186c], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x1870], 0x1001744
mov dword [ebp - 0x1868], 0x100173c
mov dword [ebp - 0x1864], ebx
mov word [ebp - 0x1860], 0x15
mov word [ebp - 0x185e], SetSecurityDescriptorDacl
mov word [ebp - 0x185c], 8
mov word [ebp - 0x185a], 8
mov dword [ebp - 0x1858], esi
mov dword [ebp - 0x1854], edx
mov dword [ebp - 0x1850], 3
mov dword [ebp - 0x184c], edx
mov dword [ebp - 0x1848], edx
mov dword [ebp - 0x1844], 0x1a
mov dword [ebp - 0x1840], esi
mov dword [ebp - 0x183c], esi
mov dword [ebp - 0x1838], esi
lea edi, [ebp - 0x1834]
rep stosd dword es:[edi], eax
mov eax, 0x1001738
mov dword [ebp - 0x1818], eax
mov dword [ebp - 0x1810], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x17d8]
mov dword [ebp - reloc.KERNEL32.dll_LocalAlloc], 0x1001734
mov dword [ebp - 0x180c], 0x100172c
mov dword [ebp - 0x1808], ebx
mov word [ebp - 0x1804], 0x15
mov word [ebp - 0x1802], ChooseFontW
mov word [ebp - 0x1800], 8
mov word [ebp - 0x17fe], 8
mov dword [ebp - 0x17fc], esi
mov dword [ebp - 0x17f8], edx
mov dword [ebp - 0x17f4], 3
mov dword [ebp - 0x17f0], edx
mov dword [ebp - 0x17ec], edx
mov dword [ebp - 0x17e8], 0x1b
mov dword [ebp - 0x17e4], esi
mov dword [ebp - 0x17e0], esi
mov dword [ebp - 0x17dc], esi
rep stosd dword es:[edi], eax
mov ecx, 0x1001728
mov eax, 0x1001724
mov dword [ebp - 0x17bc], ecx
mov dword [ebp - 0x17b8], eax
mov dword [ebp - 0x17b4], ecx
mov dword [ebp - 0x17b0], eax
xor eax, eax
push 7
pop ecx
mov dword [ebp - 0x17ac], ebx
mov word [ebp - 0x17a8], 0x15
mov word [ebp - 0x17a6], GetTextMetricsW
mov word [ebp - 0x17a4], 8
mov word [ebp - 0x17a2], 0xd
mov dword [ebp - 0x17a0], esi
mov dword [ebp - 0x179c], edx
mov dword [ebp - 0x1798], 3
mov dword [ebp - 0x1794], edx
mov dword [ebp - 0x1790], edx
mov dword [ebp - 0x178c], GetLastError
mov dword [ebp - 0x1788], esi
mov dword [ebp - 0x1784], esi
mov dword [ebp - 0x1780], esi
lea edi, [ebp - 0x177c]
rep stosd dword es:[edi], eax
mov eax, 0x1001620
mov dword [ebp - 0x1760], eax
mov dword [ebp - 0x175c], eax
mov eax, 0x1001614
mov dword [ebp - 0x1758], eax
mov dword [ebp - 0x1754], eax
xor eax, eax
push 7
pop ecx
mov dword [ebp - 0x1750], ebx
mov word [ebp - 0x174c], 0x15
mov word [ebp - 0x174a], 0x8a
mov word [ebp - 0x1748], 8
mov word [ebp - 0x1746], 8
mov dword [ebp - 0x1744], edx
mov dword [ebp - 0x1740], edx
mov dword [ebp - 0x173c], edx
mov dword [ebp - 0x1738], esi
mov dword [ebp - 0x1734], 2
mov dword [ebp - 0x1730], pe_nt_image_headers32
mov dword [ebp - 0x172c], CheckDlgButton
mov dword [ebp - 0x1728], esi
mov dword [ebp - 0x1724], esi
lea edi, [ebp - 0x1720]
rep stosd dword es:[edi], eax
mov eax, 0x100160c
mov dword [ebp - 0x1704], eax
mov dword [ebp - 0x1700], eax
mov eax, 0x1001600
mov dword [ebp - 0x16fc], eax
mov dword [ebp - 0x16f8], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x16c4]
mov dword [ebp - 0x16f4], ebx
mov word [ebp - 0x16f0], 0x15
mov word [ebp - 0x16ee], 0x93
mov word [ebp - 0x16ec], 8
mov word [ebp - 0x16ea], 8
mov dword [ebp - 0x16e8], edx
mov dword [ebp - 0x16e4], edx
mov dword [ebp - 0x16e0], edx
mov dword [ebp - 0x16dc], esi
mov dword [ebp - 0x16d8], 2
mov dword [ebp - 0x16d4], pe_nt_image_headers32
mov dword [ebp - 0x16d0], CheckDlgButton
mov dword [ebp - 0x16cc], esi
mov dword [ebp - 0x16c8], esi
rep stosd dword es:[edi], eax
mov eax, reloc.ADVAPI32.dll_FreeSid
mov dword [ebp - 0x16a8], eax
mov dword [ebp - 0x16a4], eax
mov eax, 0x10018dc
mov dword [ebp - 0x16a0], eax
mov dword [ebp - 0x169c], eax
mov dword [ebp - 0x1698], ebx
mov word [ebp - 0x1694], 0x15
mov word [ebp - 0x1692], 0x9c
mov word [ebp - 0x1690], 8
mov word [ebp - 0x168e], 8
mov dword [ebp - 0x168c], edx
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x1688], edx
mov dword [ebp - 0x1684], edx
mov dword [ebp - 0x1680], esi
mov dword [ebp - 0x167c], 2
mov dword [ebp - 0x1678], pe_nt_image_headers32
mov dword [ebp - 0x1674], CheckDlgButton
mov dword [ebp - 0x1670], esi
mov dword [ebp - 0x166c], esi
lea edi, [ebp - 0x1668]
rep stosd dword es:[edi], eax
mov eax, reloc.USER32.dll_GetMessageW
mov dword [ebp - 0x164c], eax
mov dword [ebp - 0x1648], eax
mov dword [ebp - 0x1644], eax
mov dword [ebp - 0x1640], eax
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x163c], ebx
mov word [ebp - 0x1638], 0x15
mov word [ebp - 0x1636], 0xa6
mov word [ebp - 0x1634], 8
mov word [ebp - 0x1632], 8
mov dword [ebp - 0x1630], esi
mov dword [ebp - 0x162c], edx
mov dword [ebp - 0x1628], edx
mov dword [ebp - 0x1624], esi
mov dword [ebp - 0x1620], 2
mov dword [ebp - 0x161c], DefWindowProcW
mov dword [ebp - 0x1618], esi
mov dword [ebp - 0x1614], esi
mov dword [ebp - 0x1610], esi
lea edi, [ebp - 0x160c]
rep stosd dword es:[edi], eax
mov eax, 0x1001880
mov dword [ebp - 0x15f0], eax
mov dword [ebp - 0x15ec], eax
mov dword [ebp - 0x15e8], eax
mov dword [ebp - 0x15e4], eax
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x15b0]
mov dword [ebp - 0x15e0], ebx
mov word [ebp - 0x15dc], 0x15
mov word [ebp - 0x15da], 0xaf
mov word [ebp - 0x15d8], 8
mov word [ebp - 0x15d6], 8
mov dword [ebp - 0x15d4], esi
mov dword [ebp - 0x15d0], edx
mov dword [ebp - 0x15cc], edx
mov dword [ebp - 0x15c8], esi
mov dword [ebp - 0x15c4], 2
mov dword [ebp - 0x15c0], DefWindowProcW
mov dword [ebp - 0x15bc], esi
mov dword [ebp - 0x15b8], esi
mov dword [ebp - 0x15b4], esi
rep stosd dword es:[edi], eax
mov eax, reloc.USER32.dll_SetForegroundWindow
mov dword [ebp - 0x1594], eax
mov dword [ebp - 0x1590], eax
mov dword [ebp - 0x158c], eax
mov dword [ebp - 0x1588], eax
mov dword [ebp - 0x1584], ebx
mov word [ebp - 0x1580], 0x15
mov word [ebp - 0x157e], 0xb8
mov word [ebp - 0x157c], 8
mov word [ebp - 0x157a], 8
mov dword [ebp - 0x1578], esi
mov dword [ebp - 0x1574], edx
mov dword [ebp - 0x1570], edx
mov dword [ebp - 0x156c], esi
mov dword [ebp - 0x1568], 2
mov dword [ebp - 0x1564], DefWindowProcW
mov dword [ebp - 0x1560], esi
mov dword [ebp - 0x155c], esi
mov dword [ebp - 0x1558], esi
push 7
pop ecx
xor eax, eax
push 7
lea edi, [ebp - 0x1554]
rep stosd dword es:[edi], eax
mov eax, 0x100185c
mov dword [ebp - 0x1538], eax
mov dword [ebp - 0x1534], eax
pop ecx
mov eax, 0x1001854
mov dword [ebp - 0x1530], eax
mov dword [ebp - 0x152c], eax
xor eax, eax
mov dword [ebp - 0x1528], ebx
mov word [ebp - 0x1524], 0x15
mov word [ebp - 0x1522], 0xc1
mov word [ebp - 0x1520], 0x11
mov word [ebp - 0x151e], 8
mov dword [ebp - 0x151c], esi
mov dword [ebp - 0x1518], edx
mov dword [ebp - 0x1514], edx
mov dword [ebp - 0x1510], esi
mov dword [ebp - 0x150c], 2
mov dword [ebp - 0x1508], reloc.USER32.dll_DefWindowProcW
mov dword [ebp - 0x1504], esi
mov dword [ebp - 0x1500], esi
mov dword [ebp - 0x14fc], esi
lea edi, [ebp - 0x14f8]
rep stosd dword es:[edi], eax
mov eax, 0x1001700
mov dword [ebp - 0x14dc], eax
mov dword [ebp - 0x14d8], eax
push 2
mov eax, 0x10016ec
mov dword [ebp - 0x14d4], eax
mov dword [ebp - 0x14d0], eax
pop eax
push 7
mov dword [ebp - 0x14cc], eax
mov dword [ebp - 0x14bc], eax
mov dword [ebp - 0x14b0], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x149c]
mov word [ebp - 0x14c8], 0x1e
mov word [ebp - 0x14c6], dx
mov word [ebp - 0x14c4], 8
mov word [ebp - 0x14c2], 0x11
mov dword [ebp - 0x14c0], edx
mov dword [ebp - 0x14b8], 3
mov dword [ebp - 0x14b4], edx
mov dword [ebp - 0x14ac], GetKeyboardType
mov dword [ebp - 0x14a8], esi
mov dword [ebp - 0x14a4], esi
mov dword [ebp - 0x14a0], esi
rep stosd dword es:[edi], eax
mov eax, 0x10016e8
push 0x1e
mov dword [ebp - 0x1480], eax
mov dword [ebp - 0x1478], eax
pop eax
push 7
mov word [ebp - 0x146c], ax
mov dword [ebp - 0x1450], eax
mov dword [ebp - 0x147c], 0x10016e4
mov dword [ebp - 0x1474], 0x10016dc
mov dword [ebp - 0x1470], ebx
mov word [ebp - 0x146a], 0x13
mov word [ebp - 0x1468], 8
mov word [ebp - 0x1466], 8
mov dword [ebp - 0x1464], esi
mov dword [ebp - 0x1460], edx
mov dword [ebp - 0x145c], 3
mov dword [ebp - 0x1458], edx
mov dword [ebp - 0x1454], edx
mov dword [ebp - 0x144c], esi
mov dword [ebp - 0x1448], esi
mov dword [ebp - 0x1444], esi
pop ecx
xor eax, eax
lea edi, [ebp - 0x1440]
rep stosd dword es:[edi], eax
push 7
mov eax, reloc.comdlg32.dll_ChooseFontW
mov dword [ebp - 0x1424], eax
mov dword [ebp - 0x141c], eax
xor eax, eax
pop ecx
mov dword [ebp - 0x1420], 0x10016d4
mov dword [ebp - 0x1418], 0x10016cc
mov dword [ebp - 0x1414], ebx
mov word [ebp - 0x1410], 0x1e
mov word [ebp - 0x140e], 0x1c
mov word [ebp - 0x140c], 8
mov word [ebp - 0x140a], 8
mov dword [ebp - 0x1408], esi
mov dword [ebp - 0x1404], edx
mov dword [ebp - 0x1400], 3
mov dword [ebp - 0x13fc], edx
mov dword [ebp - 0x13f8], edx
mov dword [ebp - 0x13f4], 0x1f
mov dword [ebp - 0x13f0], esi
mov dword [ebp - 0x13ec], esi
mov dword [ebp - 0x13e8], esi
lea edi, [ebp - 0x13e4]
rep stosd dword es:[edi], eax
mov eax, 0x10016c8
mov dword [ebp - 0x13c8], eax
mov dword [ebp - 0x13c0], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x13c4], 0x10016c4
mov dword [ebp - 0x13bc], 0x10016bc
mov dword [ebp - 0x13b8], ebx
mov word [ebp - 0x13b4], 0x1e
mov word [ebp - 0x13b2], 0x25
mov word [ebp - 0x13b0], 8
mov word [ebp - 0x13ae], 8
mov dword [ebp - 0x13ac], esi
mov dword [ebp - 0x13a8], edx
mov dword [ebp - 0x13a4], 3
mov dword [ebp - 0x13a0], edx
mov dword [ebp - 0x139c], edx
mov dword [ebp - 0x1398], 0x20
mov dword [ebp - 0x1394], esi
mov dword [ebp - 0x1390], esi
mov dword [ebp - 0x138c], esi
lea edi, [ebp - 0x1388]
rep stosd dword es:[edi], eax
mov eax, 0x10016b8
mov dword [ebp - 0x136c], eax
mov dword [ebp - 0x1364], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x132c]
mov dword [ebp - 0x1368], 0x10016b4
mov dword [ebp - 0x1360], 0x10016ac
mov dword [ebp - 0x135c], ebx
mov word [ebp - 0x1358], 0x1e
mov word [ebp - 0x1356], GetLastError
mov word [ebp - 0x1354], 8
mov word [ebp - 0x1352], 8
mov dword [ebp - 0x1350], esi
mov dword [ebp - 0x134c], edx
mov dword [ebp - 0x1348], 3
mov dword [ebp - 0x1344], edx
mov dword [ebp - 0x1340], edx
mov dword [ebp - 0x133c], 0x21
mov dword [ebp - 0x1338], esi
mov dword [ebp - 0x1334], esi
mov dword [ebp - 0x1330], esi
rep stosd dword es:[edi], eax
mov eax, reloc.msvcrt.dll___setusermatherr
mov dword [ebp - 0x1310], eax
mov dword [ebp - 0x130c], 0x10016a4
mov dword [ebp - 0x1308], eax
mov dword [ebp - 0x1304], 0x100169c
mov dword [ebp - 0x1300], ebx
mov word [ebp - 0x12fc], 0x1e
mov word [ebp - 0x12fa], reloc.USER32.dll_GetMessageW
push 7
xor eax, eax
pop ecx
mov word [ebp - 0x12f8], 8
mov word [ebp - 0x12f6], 8
mov dword [ebp - 0x12f4], esi
mov dword [ebp - 0x12f0], edx
mov dword [ebp - 0x12ec], 3
mov dword [ebp - 0x12e8], edx
mov dword [ebp - 0x12e4], edx
mov dword [ebp - 0x12e0], 0x22
mov dword [ebp - 0x12dc], esi
mov dword [ebp - 0x12d8], esi
mov dword [ebp - 0x12d4], esi
lea edi, [ebp - 0x12d0]
rep stosd dword es:[edi], eax
mov eax, 0x1001698
mov dword [ebp - 0x12b4], eax
mov dword [ebp - 0x12ac], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x12b0], 0x1001694
mov dword [ebp - 0x12a8], 0x100168c
mov dword [ebp - 0x12a4], ebx
mov word [ebp - 0x12a0], 0x1e
mov word [ebp - 0x129e], GetKeyboardType
mov word [ebp - 0x129c], 8
mov word [ebp - 0x129a], 8
mov dword [ebp - 0x1298], esi
mov dword [ebp - 0x1294], edx
mov dword [ebp - 0x1290], 3
mov dword [ebp - 0x128c], edx
mov dword [ebp - 0x1288], edx
mov dword [ebp - 0x1284], 0x23
mov dword [ebp - 0x1280], esi
mov dword [ebp - 0x127c], esi
mov dword [ebp - 0x1278], esi
lea edi, [ebp - 0x1274]
rep stosd dword es:[edi], eax
mov eax, 0x1001688
mov dword [ebp - 0x1258], eax
mov dword [ebp - 0x1250], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x1218]
mov dword [ebp - 0x1254], 0x1001684
mov dword [ebp - 0x124c], 0x100167c
mov dword [ebp - 0x1248], ebx
mov word [ebp - 0x1244], 0x1e
mov word [ebp - 0x1242], DefWindowProcW
mov word [ebp - 0x1240], 8
mov word [ebp - 0x123e], 8
mov dword [ebp - 0x123c], esi
mov dword [ebp - 0x1238], edx
mov dword [ebp - 0x1234], 3
mov dword [ebp - 0x1230], edx
mov dword [ebp - 0x122c], edx
mov dword [ebp - 0x1228], 0x24
mov dword [ebp - 0x1224], esi
mov dword [ebp - 0x1220], esi
mov dword [ebp - 0x121c], esi
rep stosd dword es:[edi], eax
mov eax, reloc.GDI32.dll_BitBlt
mov dword [ebp - 0x11fc], eax
mov dword [ebp - 0x11f8], 0x1001674
mov dword [ebp - 0x11f4], eax
mov dword [ebp - 0x11f0], 0x100166c
mov dword [ebp - 0x11ec], ebx
mov word [ebp - 0x11e8], 0x1e
mov word [ebp - 0x11e6], CheckDlgButton
mov word [ebp - 0x11e4], 8
mov word [ebp - 0x11e2], 8
mov dword [ebp - 0x11e0], esi
mov dword [ebp - 0x11dc], edx
mov dword [ebp - 0x11d8], 3
mov dword [ebp - 0x11d4], edx
mov dword [ebp - 0x11d0], edx
mov dword [ebp - 0x11cc], 0x25
mov dword [ebp - 0x11c8], esi
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x11c4], esi
mov dword [ebp - 0x11c0], esi
lea edi, [ebp - 0x11bc]
rep stosd dword es:[edi], eax
push 7
mov eax, 0x1001668
mov dword [ebp - 0x11a0], eax
mov dword [ebp - 0x1198], eax
xor eax, eax
pop ecx
mov dword [ebp - 0x119c], 0x1001664
mov dword [ebp - 0x1194], 0x100165c
mov dword [ebp - 0x1190], ebx
mov word [ebp - 0x118c], 0x1e
mov word [ebp - 0x118a], RegOpenKeyExA
mov word [ebp - 0x1188], 8
mov word [ebp - 0x1186], 8
mov dword [ebp - 0x1184], esi
mov dword [ebp - 0x1180], edx
mov dword [ebp - 0x117c], 3
mov dword [ebp - 0x1178], edx
mov dword [ebp - 0x1174], edx
mov dword [ebp - 0x1170], 0x26
mov dword [ebp - 0x116c], esi
mov dword [ebp - 0x1168], esi
mov dword [ebp - 0x1164], esi
lea edi, [ebp - 0x1160]
rep stosd dword es:[edi], eax
mov eax, 0x1001658
mov dword [ebp - 0x1144], eax
mov dword [ebp - 0x113c], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x1140], 0x1001654
mov dword [ebp - 0x1138], 0x100164c
mov dword [ebp - 0x1134], ebx
mov word [ebp - 0x1130], 0x1e
mov word [ebp - 0x112e], BitBlt
mov word [ebp - 0x112c], 8
mov word [ebp - 0x112a], 8
mov dword [ebp - 0x1128], esi
mov dword [ebp - 0x1124], edx
mov dword [ebp - 0x1120], 3
mov dword [ebp - 0x111c], edx
mov dword [ebp - 0x1118], edx
mov dword [ebp - 0x1114], WaitForMultipleObjects
mov dword [ebp - 0x1110], esi
mov dword [ebp - 0x110c], esi
mov dword [ebp - 0x1108], esi
lea edi, [ebp - 0x1104]
rep stosd dword es:[edi], eax
mov ecx, 0x1001648
mov eax, 0x1001640
mov dword [ebp - 0x10e4], eax
mov dword [ebp - 0x10dc], eax
mov dword [ebp - 0x10e8], ecx
mov dword [ebp - 0x10e0], ecx
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x10a8]
mov dword [ebp - 0x10d8], ebx
mov word [ebp - 0x10d4], 0x1e
mov word [ebp - 0x10d2], SetSecurityDescriptorDacl
mov word [ebp - 0x10d0], 8
mov word [ebp - 0x10ce], 8
mov dword [ebp - 0x10cc], esi
mov dword [ebp - 0x10c8], edx
mov dword [ebp - 0x10c4], 3
mov dword [ebp - 0x10c0], edx
mov dword [ebp - 0x10bc], edx
mov dword [ebp - 0x10b8], GetLastError
mov dword [ebp - 0x10b4], esi
mov dword [ebp - 0x10b0], esi
mov dword [ebp - 0x10ac], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001728
mov dword [ebp - 0x108c], eax
mov dword [ebp - 0x1084], eax
push 7
xor eax, eax
mov ecx, 0x1001724
mov dword [ebp - 0x1088], ecx
mov dword [ebp - 0x1080], ecx
pop ecx
mov dword [ebp - 0x107c], ebx
mov word [ebp - 0x1078], 0x15
mov word [ebp - 0x1076], GetTextMetricsW
mov word [ebp - 0x1074], 8
mov word [ebp - 0x1072], 0xd
mov dword [ebp - 0x1070], esi
mov dword [ebp - 0x106c], edx
mov dword [ebp - 0x1068], 4
mov dword [ebp - 0x1064], edx
mov dword [ebp - 0x1060], edx
mov dword [ebp - 0x105c], GetLastError
mov dword [ebp - 0x1058], esi
mov dword [ebp - 0x1054], esi
mov dword [ebp - 0x1050], esi
lea edi, [ebp - 0x104c]
rep stosd dword es:[edi], eax
mov eax, 0x1001638
mov dword [ebp - 0x1030], eax
mov dword [ebp - 0x102c], eax
mov eax, 0x1001628
mov dword [ebp - 0x1028], eax
mov dword [ebp - 0x1024], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x1020], ebx
mov word [ebp - 0x101c], 0x1e
mov word [ebp - 0x101a], GetTextMetricsW
mov word [ebp - 0x1018], 8
mov word [ebp - 0x1016], 0x12
mov dword [ebp - 0x1014], esi
mov dword [ebp - 0x1010], edx
mov dword [ebp - 0x100c], 3
mov dword [ebp - 0x1008], esi
mov dword [ebp - 0x1004], 2
mov dword [ebp - 0x1000], 0x1c
mov dword [ebp - 0xffc], esi
mov dword [ebp - 0xff8], esi
mov dword [ebp - 0xff4], esi
lea edi, [ebp - 0xff0]
rep stosd dword es:[edi], eax
mov eax, 0x10018b0
mov dword [ebp - 0xfd4], eax
mov dword [ebp - 0xfd0], eax
mov dword [ebp - 0xfcc], eax
mov dword [ebp - 0xfc8], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0xf94]
mov dword [ebp - 0xfc4], ebx
mov word [ebp - 0xfc0], 0x1e
mov word [ebp - 0xfbe], 0xa6
mov word [ebp - 0xfbc], 8
mov word [ebp - 0xfba], 8
mov dword [ebp - 0xfb8], esi
mov dword [ebp - 0xfb4], edx
mov dword [ebp - 0xfb0], edx
mov dword [ebp - 0xfac], esi
mov dword [ebp - 0xfa8], 2
mov dword [ebp - 0xfa4], DefWindowProcW
mov dword [ebp - 0xfa0], esi
mov dword [ebp - 0xf9c], esi
mov dword [ebp - 0xf98], esi
rep stosd dword es:[edi], eax
mov eax, 0x10018a8
mov dword [ebp - 0xf78], eax
mov dword [ebp - 0xf74], eax
mov dword [ebp - 0xf70], eax
mov dword [ebp - 0xf6c], eax
mov dword [ebp - 0xf68], ebx
mov word [ebp - 0xf64], 0x1e
mov word [ebp - 0xf62], 0xaf
push 7
xor eax, eax
pop ecx
mov word [ebp - 0xf60], 8
mov word [ebp - 0xf5e], 8
mov dword [ebp - 0xf5c], esi
mov dword [ebp - 0xf58], edx
mov dword [ebp - 0xf54], edx
mov dword [ebp - 0xf50], esi
mov dword [ebp - 0xf4c], 2
mov dword [ebp - 0xf48], DefWindowProcW
mov dword [ebp - 0xf44], esi
mov dword [ebp - 0xf40], esi
mov dword [ebp - 0xf3c], esi
lea edi, [ebp - 0xf38]
rep stosd dword es:[edi], eax
mov eax, 0x1001898
mov dword [ebp - 0xf1c], eax
mov dword [ebp - 0xf18], eax
mov dword [ebp - 0xf14], eax
mov dword [ebp - 0xf10], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0xf0c], ebx
mov word [ebp - 0xf08], 0x1e
mov word [ebp - 0xf06], 0xb8
mov word [ebp - 0xf04], 8
mov word [ebp - 0xf02], 8
mov dword [ebp - 0xf00], esi
mov dword [ebp - 0xefc], edx
mov dword [ebp - 0xef8], edx
mov dword [ebp - 0xef4], esi
mov dword [ebp - 0xef0], 2
mov dword [ebp - 0xeec], DefWindowProcW
mov dword [ebp - 0xee8], esi
mov dword [ebp - 0xee4], esi
mov dword [ebp - 0xee0], esi
lea edi, [ebp - 0xedc]
rep stosd dword es:[edi], eax
mov eax, reloc.comdlg32.dll_ChooseFontW
mov dword [ebp - 0xec0], eax
mov dword [ebp - 0xebc], eax
mov eax, 0x1001a74
mov dword [ebp - 0xeb8], eax
mov dword [ebp - 0xeb4], eax
push 2
pop eax
mov dword [ebp - 0xea0], eax
mov dword [ebp - 0xe94], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0xe80]
mov dword [ebp - 0xeb0], esi
mov word [ebp - 0xeac], 0x27
mov word [ebp - 0xeaa], dx
mov word [ebp - 0xea8], 8
mov word [ebp - 0xea6], 0xc
mov dword [ebp - 0xea4], edx
mov dword [ebp - 0xe9c], 3
mov dword [ebp - 0xe98], edx
mov dword [ebp - 0xe90], GetLastError
mov dword [ebp - 0xe8c], esi
mov dword [ebp - 0xe88], esi
mov dword [ebp - 0xe84], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001b5c
mov dword [ebp - 0xe64], eax
mov dword [ebp - 0xe60], eax
mov dword [ebp - 0xe5c], eax
mov dword [ebp - 0xe58], eax
mov dword [ebp - 0xe54], ebx
mov word [ebp - 0xe50], 0x27
mov word [ebp - 0xe4e], 0xe
mov word [ebp - 0xe4c], 8
mov word [ebp - 0xe4a], 8
mov dword [ebp - 0xe48], esi
mov dword [ebp - 0xe44], edx
mov dword [ebp - 0xe40], 3
mov dword [ebp - 0xe3c], edx
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0xe38], edx
mov dword [ebp - 0xe34], CheckDlgButton
mov dword [ebp - 0xe30], esi
mov dword [ebp - 0xe2c], esi
mov dword [ebp - 0xe28], esi
lea edi, [ebp - 0xe24]
rep stosd dword es:[edi], eax
push 7
mov eax, 0x10015f0
mov dword [ebp - 0xe08], eax
mov dword [ebp - 0xe00], eax
pop ecx
xor eax, eax
mov dword [ebp - 0xe04], 0x10015ec
mov dword [ebp - 0xdfc], 0x10015e4
mov dword [ebp - 0xdf8], ebx
mov word [ebp - 0xdf4], 0x27
mov word [ebp - 0xdf2], 0x17
mov word [ebp - 0xdf0], 8
mov word [ebp - 0xdee], 8
mov dword [ebp - 0xdec], esi
mov dword [ebp - 0xde8], edx
mov dword [ebp - 0xde4], 3
mov dword [ebp - 0xde0], edx
mov dword [ebp - 0xddc], edx
mov dword [ebp - 0xdd8], GetLastError
mov dword [ebp - 0xdd4], esi
mov dword [ebp - 0xdd0], esi
mov dword [ebp - 0xdcc], esi
lea edi, [ebp - 0xdc8]
rep stosd dword es:[edi], eax
mov eax, 0x10015e0
mov dword [ebp - 0xdac], eax
mov dword [ebp - 0xda4], eax
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0xd6c]
mov dword [ebp - 0xda8], 0x10015dc
mov dword [ebp - 0xda0], 0x10015d4
mov dword [ebp - 0xd9c], ebx
mov word [ebp - 0xd98], 0x27
mov word [ebp - 0xd96], 0x20
mov word [ebp - 0xd94], 8
mov word [ebp - 0xd92], 8
mov dword [ebp - 0xd90], esi
mov dword [ebp - 0xd8c], edx
mov dword [ebp - 0xd88], 3
mov dword [ebp - 0xd84], edx
mov dword [ebp - 0xd80], edx
mov dword [ebp - 0xd7c], GetLastError
mov dword [ebp - 0xd78], esi
mov dword [ebp - 0xd74], esi
mov dword [ebp - 0xd70], esi
rep stosd dword es:[edi], eax
mov eax, reloc.GDI32.dll_CreateRoundRectRgn
push 7
mov dword [ebp - 0xd50], eax
mov dword [ebp - 0xd48], eax
mov dword [ebp - 0xd4c], 0x10015cc
mov dword [ebp - 0xd44], 0x10015c4
mov dword [ebp - 0xd40], ebx
mov word [ebp - 0xd3c], 0x27
mov word [ebp - 0xd3a], GetLastError
mov word [ebp - 0xd38], 8
mov word [ebp - 0xd36], 8
mov dword [ebp - 0xd34], esi
mov dword [ebp - 0xd30], edx
mov dword [ebp - 0xd2c], 3
mov dword [ebp - 0xd28], edx
mov dword [ebp - 0xd24], edx
mov dword [ebp - 0xd20], GetLastError
mov dword [ebp - 0xd1c], esi
mov dword [ebp - 0xd18], esi
mov dword [ebp - 0xd14], esi
pop ecx
xor eax, eax
lea edi, [ebp - 0xd10]
rep stosd dword es:[edi], eax
push 7
mov eax, 0x10015c0
mov dword [ebp - 0xcf4], eax
mov dword [ebp - 0xcec], eax
xor eax, eax
pop ecx
mov dword [ebp - 0xcf0], 0x10015bc
mov dword [ebp - 0xce8], 0x10015b4
mov dword [ebp - 0xce4], ebx
mov word [ebp - 0xce0], 0x27
mov word [ebp - 0xcde], reloc.KERNEL32.dll_lstrlenW
mov word [ebp - 0xcdc], 8
mov word [ebp - 0xcda], 8
mov dword [ebp - 0xcd8], esi
mov dword [ebp - 0xcd4], edx
mov dword [ebp - 0xcd0], 3
mov dword [ebp - 0xccc], edx
mov dword [ebp - 0xcc8], edx
mov dword [ebp - 0xcc4], GetLastError
mov dword [ebp - 0xcc0], esi
mov dword [ebp - 0xcbc], esi
mov dword [ebp - 0xcb8], esi
lea edi, [ebp - 0xcb4]
rep stosd dword es:[edi], eax
mov eax, 0x10015b0
mov dword [ebp - 0xc98], eax
mov dword [ebp - 0xc90], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - reloc.USER32.dll_GetKeyboardType], 0x10015ac
mov dword [ebp - 0xc8c], 0x10015a4
mov dword [ebp - 0xc88], ebx
mov word [ebp - 0xc84], 0x27
mov word [ebp - 0xc82], GetKeyboardType
mov word [ebp - 0xc80], 8
mov word [ebp - 0xc7e], 8
mov dword [ebp - 0xc7c], esi
mov dword [ebp - 0xc78], edx
mov dword [ebp - 0xc74], 3
mov dword [ebp - 0xc70], edx
mov dword [ebp - 0xc6c], edx
mov dword [ebp - 0xc68], reloc.KERNEL32.dll_WaitForMultipleObjects
mov dword [ebp - 0xc64], esi
mov dword [ebp - 0xc60], esi
mov dword [ebp - 0xc5c], esi
lea edi, [ebp - 0xc58]
rep stosd dword es:[edi], eax
mov eax, reloc.ADVAPI32.dll_SetSecurityDescriptorDacl
mov dword [ebp - 0xc3c], eax
mov dword [ebp - 0xc34], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0xbfc]
mov dword [ebp - reloc.USER32.dll_DefWindowProcW], 0x100159c
mov dword [ebp - 0xc30], 0x1001594
mov dword [ebp - 0xc2c], ebx
mov word [ebp - 0xc28], 0x27
mov word [ebp - 0xc26], 0x44
mov word [ebp - 0xc24], 8
mov word [ebp - 0xc22], 8
mov dword [ebp - 0xc20], esi
mov dword [ebp - 0xc1c], edx
mov dword [ebp - 0xc18], 3
mov dword [ebp - 0xc14], edx
mov dword [ebp - 0xc10], edx
mov dword [ebp - 0xc0c], reloc.KERNEL32.dll_GetLastError
mov dword [ebp - 0xc08], esi
mov dword [ebp - 0xc04], esi
mov dword [ebp - 0xc00], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001590
mov dword [ebp - 0xbe0], eax
mov dword [ebp - 0xbdc], 0x100158c
mov dword [ebp - 0xbd8], eax
mov dword [ebp - 0xbd4], 0x1001584
mov dword [ebp - 0xbd0], ebx
mov word [ebp - 0xbcc], 0x27
mov word [ebp - 0xbca], DefWindowProcW
push 7
xor eax, eax
pop ecx
mov word [ebp - 0xbc8], 8
mov word [ebp - 0xbc6], 8
mov dword [ebp - 0xbc4], esi
mov dword [ebp - 0xbc0], edx
mov dword [ebp - 0xbbc], 3
mov dword [ebp - 0xbb8], edx
mov dword [ebp - 0xbb4], edx
mov dword [ebp - 0xbb0], reloc.KERNEL32.dll_lstrlenW
mov dword [ebp - 0xbac], esi
mov dword [ebp - 0xba8], esi
mov dword [ebp - 0xba4], esi
lea edi, [ebp - 0xba0]
rep stosd dword es:[edi], eax
mov eax, 0x1001580
mov dword [ebp - 0xb84], eax
mov dword [ebp - 0xb7c], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0xb80], 0x100157c
mov dword [ebp - 0xb78], 0x1001574
mov dword [ebp - 0xb74], ebx
mov word [ebp - 0xb70], 0x27
mov word [ebp - 0xb6e], CheckDlgButton
mov word [ebp - 0xb6c], 8
mov word [ebp - 0xb6a], 8
mov dword [ebp - 0xb68], esi
mov dword [ebp - 0xb64], edx
mov dword [ebp - 0xb60], 3
mov dword [ebp - 0xb5c], edx
mov dword [ebp - 0xb58], edx
mov dword [ebp - 0xb54], GetMessageW
mov dword [ebp - 0xb50], esi
mov dword [ebp - 0xb4c], esi
mov dword [ebp - 0xb48], esi
lea edi, [ebp - 0xb44]
rep stosd dword es:[edi], eax
mov eax, 0x1001570
mov dword [ebp - 0xb28], eax
mov dword [ebp - 0xb20], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0xae8]
mov dword [ebp - 0xb24], 0x100156c
mov dword [ebp - 0xb1c], 0x1001564
mov dword [ebp - 0xb18], ebx
mov word [ebp - 0xb14], 0x27
mov word [ebp - 0xb12], RegOpenKeyExA
mov word [ebp - 0xb10], 8
mov word [ebp - 0xb0e], 8
mov dword [ebp - 0xb0c], esi
mov dword [ebp - 0xb08], edx
mov dword [ebp - 0xb04], 3
mov dword [ebp - 0xb00], edx
mov dword [ebp - 0xafc], edx
mov dword [ebp - 0xaf8], GetMessageW
mov dword [ebp - 0xaf4], esi
mov dword [ebp - 0xaf0], esi
mov dword [ebp - 0xaec], esi
rep stosd dword es:[edi], eax
mov eax, 0x100181c
mov dword [ebp - 0xacc], eax
mov dword [ebp - 0xac8], 0x1001560
mov dword [ebp - 0xac4], eax
mov dword [ebp - 0xac0], 0x1001558
mov dword [ebp - 0xabc], ebx
mov word [ebp - 0xab8], 0x27
mov word [ebp - 0xab6], SetSecurityDescriptorDacl
mov word [ebp - 0xab4], 8
mov word [ebp - 0xab2], 8
mov dword [ebp - 0xab0], esi
mov dword [ebp - 0xaac], edx
mov dword [ebp - 0xaa8], 3
mov dword [ebp - 0xaa4], edx
mov dword [ebp - 0xaa0], edx
mov dword [ebp - 0xa9c], GetMessageW
mov dword [ebp - 0xa98], esi
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0xa94], esi
mov dword [ebp - 0xa90], esi
lea edi, [ebp - 0xa8c]
rep stosd dword es:[edi], eax
mov eax, reloc.comdlg32.dll_ChooseFontW
mov dword [ebp - 0xa70], eax
mov dword [ebp - 0xa6c], eax
push 2
mov eax, 0x1001a74
mov dword [ebp - 0xa68], eax
mov dword [ebp - 0xa64], eax
pop eax
mov dword [ebp - 0xa50], eax
mov dword [ebp - 0xa44], eax
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0xa60], edx
mov word [ebp - 0xa5c], 0x27
mov word [ebp - 0xa5a], ChooseFontW
mov word [ebp - 0xa58], 8
mov word [ebp - 0xa56], 0x17
mov dword [ebp - 0xa54], edx
mov dword [ebp - 0xa4c], 3
mov dword [ebp - 0xa48], edx
mov dword [ebp - 0xa40], GetMessageW
mov dword [ebp - 0xa3c], esi
mov dword [ebp - 0xa38], esi
mov dword [ebp - 0xa34], esi
push 7
lea edi, [ebp - 0xa30]
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x1001540
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x1001528
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x1001518
mov dword [ebp - 0xa08], 0x100150c
mov dword [ebp - 0xa04], 0x10
mov word [ebp - 0xa00], 0x27
mov word [ebp - 0x9fe], 0x93
mov word [ebp - 0x9fc], 8
mov word [ebp - 0x9fa], 8
mov dword [ebp - 0x9f8], esi
mov dword [ebp - 0x9f4], 2
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0x9ec], esi
mov dword [ebp - 0x9e8], edx
mov dword [ebp - 0x9e4], pe_nt_image_headers32
mov dword [ebp - 0x9e0], DefWindowProcW
mov dword [ebp - 0x9dc], esi
mov dword [ebp - 0x9d8], esi
lea edi, [ebp - 0x9d4]
rep stosd dword es:[edi], eax
mov eax, reloc.KERNEL32.dll_GetLastError
mov dword [ebp - 0x9b8], eax
mov dword [ebp - 0x9b4], eax
mov dword [ebp - 0x9b0], eax
mov dword [ebp - 0x9ac], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x978]
mov dword [ebp - 0x9a8], ebx
mov word [ebp - 0x9a4], 0x27
mov word [ebp - 0x9a2], 0xa6
mov word [ebp - 0x9a0], 8
mov word [ebp - 0x99e], 8
mov dword [ebp - 0x99c], esi
mov dword [ebp - 0x998], edx
mov dword [ebp - 0x994], edx
mov dword [ebp - 0x990], esi
mov dword [ebp - 0x98c], 2
mov dword [ebp - 0x988], CheckDlgButton
mov dword [ebp - 0x984], esi
mov dword [ebp - 0x980], esi
mov dword [ebp - 0x97c], esi
rep stosd dword es:[edi], eax
mov eax, reloc.KERNEL32.dll_lstrlenW
mov dword [ebp - 0x95c], eax
mov dword [ebp - 0x958], eax
mov dword [ebp - 0x954], eax
mov dword [ebp - 0x950], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x94c], ebx
mov word [ebp - 0x948], 0x27
mov word [ebp - 0x946], 0xaf
mov word [ebp - 0x944], 8
mov word [ebp - 0x942], 8
mov dword [ebp - 0x940], esi
mov dword [ebp - 0x93c], edx
mov dword [ebp - 0x938], edx
mov dword [ebp - 0x934], esi
mov dword [ebp - 0x930], 2
mov dword [ebp - 0x92c], CheckDlgButton
mov dword [ebp - 0x928], esi
mov dword [ebp - 0x924], esi
mov dword [ebp - 0x920], esi
lea edi, [ebp - 0x91c]
rep stosd dword es:[edi], eax
mov eax, 0x10018b8
mov dword [ebp - 0x900], eax
mov dword [ebp - 0x8fc], eax
mov dword [ebp - 0x8f8], eax
mov dword [ebp - 0x8f4], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x8f0], ebx
mov word [ebp - 0x8ec], 0x27
mov word [ebp - 0x8ea], 0xb8
mov word [ebp - 0x8e8], 8
mov word [ebp - 0x8e6], 8
mov dword [ebp - 0x8e4], esi
mov dword [ebp - 0x8e0], edx
mov dword [ebp - 0x8dc], edx
mov dword [ebp - 0x8d8], esi
mov dword [ebp - 0x8d4], 2
mov dword [ebp - 0x8d0], CheckDlgButton
mov dword [ebp - 0x8cc], esi
mov dword [ebp - 0x8c8], esi
mov dword [ebp - 0x8c4], esi
lea edi, [ebp - 0x8c0]
rep stosd dword es:[edi], eax
mov eax, 0x1001638
mov dword [ebp - 0x8a4], eax
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 0x89c], eax
mov dword [ebp - 0x898], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x864]
mov dword [ebp - 0x894], ebx
mov word [ebp - 0x890], 0x27
mov word [ebp - 0x88e], 0xc1
mov word [ebp - 0x88c], 0x11
mov word [ebp - 0x88a], 8
mov dword [ebp - 0x888], edx
mov dword [ebp - 0x884], edx
mov dword [ebp - 0x880], edx
mov dword [ebp - 0x87c], esi
mov dword [ebp - 0x878], 2
mov dword [ebp - 0x874], pe_nt_image_headers32
mov dword [ebp - 0x870], 0x1c
mov dword [ebp - 0x86c], esi
mov dword [ebp - 0x868], esi
rep stosd dword es:[edi], eax
mov eax, reloc.GDI32.dll_CreateRoundRectRgn
mov dword [ebp - 0x848], eax
mov dword [ebp - 0x844], eax
mov eax, 0x1001a74
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x83c], eax
mov dword [ebp - 0x838], 4
mov word [ebp - 0x834], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x832], dx
mov word [ebp - 0x830], 8
push 2
pop eax
mov dword [ebp - 0x828], eax
mov dword [ebp - 0x81c], eax
push 7
pop ecx
xor eax, eax
push 0xc
mov word [ebp - 0x82e], 0xd
mov dword [ebp - 0x82c], edx
mov dword [ebp - 0x824], 3
mov dword [ebp - 0x820], edx
mov dword [ebp - 0x818], 0x1d
mov dword [ebp - 0x814], esi
mov dword [ebp - 0x810], esi
mov dword [ebp - 0x80c], esi
lea edi, [ebp - 0x808]
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - 0x7ec], 0x1001498
mov dword [ebp - 0x7e8], 0x1001484
mov dword [ebp - 0x7e4], 0x1001470
mov dword [ebp - 0x7e0], 0x1001464
mov dword [ebp - 0x7dc], 0xe
mov word [ebp - 0x7d8], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x7d6], 0xf
mov word [ebp - 0x7d4], 8
mov word [ebp - 0x7d2], 8
mov dword [ebp - 0x7d0], edx
mov dword [ebp - 0x7cc], 2
mov dword [ebp - 0x7c8], 3
mov dword [ebp - 0x7c4], edx
lea edi, [ebp - 0x7c0]
rep stosd dword es:[edi], eax
mov eax, 0x100145c
mov dword [ebp - 0x790], eax
mov dword [ebp - 0x78c], eax
push 2
mov eax, 0x1001a74
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x784], eax
pop eax
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x764], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x780], 6
mov word [ebp - 0x77c], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x77a], 0x18
mov word [ebp - 0x778], 8
mov word [ebp - 0x776], 0xd
mov dword [ebp - 0x774], edx
mov dword [ebp - 0x76c], 3
mov dword [ebp - 0x768], edx
mov dword [ebp - 0x760], SetForegroundWindow
mov dword [ebp - 0x75c], esi
mov dword [ebp - 0x758], esi
mov dword [ebp - 0x754], esi
lea edi, [ebp - 0x750]
rep stosd dword es:[edi], eax
mov eax, 0x1001a74
mov dword [ebp - 0x734], eax
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x72c], eax
mov dword [ebp - 0x728], eax
push 0xc
xor eax, eax
pop ecx
lea edi, [ebp - 0x708]
mov dword [ebp - 0x724], ebx
mov word [ebp - 0x720], si
mov word [ebp - 0x71e], si
mov word [ebp - 0x71c], si
mov word [ebp - 0x71a], si
mov dword [ebp - 0x718], edx
mov dword [ebp - 0x714], edx
mov dword [ebp - 0x710], 4
mov dword [ebp - 0x70c], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001a74
mov dword [ebp - 0x6d8], eax
mov dword [ebp - 0x6d4], eax
push 7
pop ecx
mov eax, 0x1001458
mov dword [ebp - 0x6d0], eax
mov dword [ebp - 0x6cc], eax
xor eax, eax
push 0xc
mov dword [ebp - 0x6c8], 3
mov word [ebp - 0x6c4], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x6c2], 0x26
mov word [ebp - 0x6c0], 8
mov word [ebp - 0x6be], GetMessageW
mov dword [ebp - 0x6bc], esi
mov dword [ebp - 0x6b8], edx
mov dword [ebp - 0x6b4], edx
mov dword [ebp - 0x6b0], esi
mov dword [ebp - 0x6ac], edx
mov dword [ebp - 0x6a8], reloc.USER32.dll_SetForegroundWindow
mov dword [ebp - 0x6a4], esi
mov dword [ebp - 0x6a0], esi
mov dword [ebp - 0x69c], esi
lea edi, [ebp - 0x698]
rep stosd dword es:[edi], eax
mov eax, 0x1001a74
mov dword [ebp - 0x67c], eax
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x674], eax
mov dword [ebp - 0x670], eax
pop ecx
xor eax, eax
mov dword [ebp - 0x66c], ebx
mov word [ebp - 0x668], si
mov word [ebp - 0x666], si
mov word [ebp - 0x664], si
mov word [ebp - 0x662], si
mov dword [ebp - 0x660], edx
mov dword [ebp - 0x65c], edx
mov dword [ebp - 0x658], 4
mov dword [ebp - 0x654], esi
lea edi, [ebp - 0x650]
rep stosd dword es:[edi], eax
mov eax, 0x1001a74
push 0xc
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x614], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x5f4]
mov dword [ebp - 0x610], ebx
mov word [ebp - 0x60c], si
mov word [ebp - 0x60a], si
mov word [ebp - 0x608], si
mov word [ebp - 0x606], si
mov dword [ebp - 0x604], edx
mov dword [ebp - 0x600], edx
mov dword [ebp - 0x5fc], 4
mov dword [ebp - 0x5f8], esi
rep stosd dword es:[edi], eax
mov eax, 0x100145c
push 7
pop ecx
mov dword [ebp - 0x5c4], eax
mov dword [ebp - 0x5c0], eax
mov eax, 0x1001a74
push 2
mov dword [ebp - 0x5bc], eax
mov dword [ebp - 0x5b8], eax
pop eax
mov dword [ebp - 0x5b4], ecx
mov word [ebp - 0x5b0], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x5ae], RegOpenKeyExA
mov word [ebp - 0x5ac], 8
mov word [ebp - 0x5aa], 0xd
mov dword [ebp - 0x5a8], edx
mov dword [ebp - 0x5a4], eax
mov dword [ebp - 0x5a0], edx
mov dword [ebp - 0x59c], edx
mov dword [ebp - 0x598], eax
xor eax, eax
push 0xc
mov dword [ebp - 0x594], pe_nt_image_headers32
mov dword [ebp - 0x590], SetForegroundWindow
mov dword [ebp - 0x58c], esi
mov dword [ebp - 0x588], esi
lea edi, [ebp - 0x584]
rep stosd dword es:[edi], eax
pop ecx
push 0xc
mov dword [ebp - 0x568], 0x1001498
mov dword [ebp - 0x564], 0x1001484
mov dword [ebp - 0x560], 0x1001470
mov dword [ebp - 0x55c], 0x100144c
mov dword [ebp - 0x558], 0xe
mov word [ebp - 0x554], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x552], SetSecurityDescriptorDacl
mov word [ebp - 0x550], 8
mov word [ebp - 0x54e], 8
mov dword [ebp - 0x54c], edx
mov dword [ebp - 0x548], 2
mov dword [ebp - 0x544], edx
mov dword [ebp - 0x540], edx
lea edi, [ebp - 0x53c]
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - 0x50c], 0x1001438
mov dword [ebp - 0x508], 0x1001424
mov dword [ebp - 0x504], 0x1001410
mov dword [ebp - reloc.msvcrt.dll_free], 0x1001408
mov dword [ebp - 0x4fc], 0xe
mov word [ebp - 0x4f8], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x4f6], ChooseFontW
mov word [ebp - 0x4f4], 8
mov word [ebp - 0x4f2], 8
mov dword [ebp - 0x4f0], edx
mov dword [ebp - 0x4ec], 2
mov dword [ebp - 0x4e8], edx
mov dword [ebp - 0x4e4], edx
lea edi, [ebp - 0x4e0]
rep stosd dword es:[edi], eax
mov eax, reloc.GDI32.dll_CreateRoundRectRgn
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4ac], eax
mov eax, 0x1001a74
push 2
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x4a4], eax
pop eax
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x484], eax
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x470]
mov dword [ebp - 0x4a0], 5
mov word [ebp - 0x49c], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x49a], GetTextMetricsW
mov word [ebp - 0x498], 8
mov word [ebp - 0x496], 0xd
mov dword [ebp - 0x494], edx
mov dword [ebp - 0x48c], edx
mov dword [ebp - 0x488], edx
mov dword [ebp - 0x480], pe_nt_image_headers32
mov dword [ebp - 0x47c], 0x10
mov dword [ebp - 0x478], esi
mov dword [ebp - 0x474], esi
rep stosd dword es:[edi], eax
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x10014f4
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x10014dc
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x10014c8
mov dword [ebp - 0x448], 0x10014b8
mov dword [ebp - 0x444], 0x10
mov word [ebp - 0x440], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x43e], 0x8a
mov word [ebp - 0x43c], 8
mov word [ebp - 0x43a], 8
mov dword [ebp - 0x438], esi
mov dword [ebp - 0x434], 2
mov dword [ebp - 0x430], edx
push 7
pop ecx
push 7
mov dword [ebp - 0x42c], esi
mov dword [ebp - 0x428], edx
mov dword [ebp - 0x424], pe_nt_image_headers32
mov dword [ebp - 0x420], DefWindowProcW
mov dword [ebp - 0x41c], esi
mov dword [ebp - 0x418], esi
lea edi, [ebp - 0x414]
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x10013f0
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x10013d8
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x10013c4
mov dword [ebp - 0x3ec], 0x10013b4
mov dword [ebp - 0x3e8], 0x10
mov word [ebp - 0x3e4], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x3e2], 0x93
mov word [ebp - 0x3e0], 8
mov word [ebp - 0x3de], 8
mov dword [ebp - 0x3dc], esi
mov dword [ebp - 0x3d8], 2
mov dword [ebp - 0x3d4], edx
mov dword [ebp - 0x3d0], esi
mov dword [ebp - 0x3cc], edx
mov dword [ebp - 0x3c8], pe_nt_image_headers32
mov dword [ebp - 0x3c4], CheckDlgButton
mov dword [ebp - 0x3c0], esi
mov dword [ebp - 0x3bc], esi
push 7
lea edi, [ebp - 0x3b8]
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x100139c
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x1001384
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x1001370
mov dword [ebp - 0x390], 0x1001360
mov dword [ebp - 0x38c], 0x10
mov word [ebp - 0x388], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x386], 0x9c
mov word [ebp - 0x384], 8
mov word [ebp - 0x382], 8
mov dword [ebp - 0x380], esi
mov dword [ebp - 0x37c], 2
mov dword [ebp - 0x378], edx
mov dword [ebp - 0x374], esi
mov dword [ebp - 0x370], edx
mov dword [ebp - 0x36c], pe_nt_image_headers32
mov dword [ebp - 0x368], DefWindowProcW
mov dword [ebp - 0x364], esi
mov dword [ebp - 0x360], esi
lea edi, [ebp - 0x35c]
rep stosd dword es:[edi], eax
mov eax, reloc.KERNEL32.dll_WaitForMultipleObjects
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], eax
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], eax
push 7
xor eax, eax
pop ecx
lea edi, [ebp - 0x300]
mov dword [ebp - 0x330], ebx
mov word [ebp - 0x32c], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x32a], 0xa6
mov word [ebp - 0x328], 8
mov word [ebp - 0x326], 0x11
mov dword [ebp - 0x324], esi
mov dword [ebp - 0x320], edx
mov dword [ebp - 0x31c], edx
mov dword [ebp - 0x318], esi
mov dword [ebp - 0x314], 2
mov dword [ebp - 0x310], CheckDlgButton
mov dword [ebp - 0x30c], esi
mov dword [ebp - 0x308], esi
mov dword [ebp - 0x304], esi
rep stosd dword es:[edi], eax
mov eax, 0x1001570
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], eax
push 2
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], ebx
pop ebx
push 7
xor eax, eax
pop ecx
mov word [ebp - 0x2d0], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x2ce], 0xb8
mov word [ebp - 0x2cc], 8
mov word [ebp - 0x2ca], 8
mov dword [ebp - 0x2c8], esi
mov dword [ebp - 0x2c4], edx
mov dword [ebp - 0x2c0], edx
mov dword [ebp - 0x2bc], esi
mov dword [ebp - 0x2b8], ebx
mov dword [ebp - 0x2b4], CheckDlgButton
mov dword [ebp - 0x2b0], esi
mov dword [ebp - 0x2ac], esi
mov dword [ebp - 0x2a8], esi
lea edi, [ebp - 0x2a4]
rep stosd dword es:[edi], eax
mov eax, 0x1001a74
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], eax
mov eax, 0x1001458
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], eax
push 7
xor eax, eax
pop ecx
mov dword [ebp - 0x278], 3
mov word [ebp - 0x274], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x272], 0x26
mov word [ebp - 0x270], 8
mov word [ebp - 0x26e], 0x26
mov dword [ebp - 0x26c], esi
mov dword [ebp - 0x268], edx
mov dword [ebp - 0x264], ebx
mov dword [ebp - 0x260], esi
mov dword [ebp - 0x25c], edx
mov dword [ebp - 0x258], reloc.USER32.dll_SetForegroundWindow
mov dword [ebp - 0x254], esi
mov dword [ebp - 0x250], esi
mov dword [ebp - 0x24c], esi
lea edi, [ebp - 0x248]
rep stosd dword es:[edi], eax
mov eax, 0x100145c
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x228], eax
mov eax, 0x1001a74
push 7
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x1ec]
mov dword [ebp - 0x21c], ecx
mov word [ebp - 0x218], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x216], DefWindowProcW
mov word [ebp - 0x214], 8
mov word [ebp - 0x212], 0xd
mov dword [ebp - 0x210], edx
mov dword [ebp - 0x20c], ebx
mov dword [ebp - 0x208], ebx
mov dword [ebp - 0x204], edx
mov dword [ebp - 0x200], ebx
mov dword [ebp - 0x1fc], pe_nt_image_headers32
mov dword [ebp - 0x1f8], SetForegroundWindow
mov dword [ebp - 0x1f4], esi
mov dword [ebp - 0x1f0], esi
rep stosd dword es:[edi], eax
mov dword [ebp - 0x1d0], 0x1001438
mov dword [ebp - 0x1cc], 0x1001424
mov dword [ebp - 0x1c8], 0x1001410
mov dword [ebp - reloc.msvcrt.dll_free], 0x1001408
mov dword [ebp - 0x1c0], 0xe
mov word [ebp - 0x1bc], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x1ba], RegOpenKeyExA
mov word [ebp - 0x1b8], 8
push 0xc
pop ecx
push 7
mov word [ebp - 0x1b6], 8
mov dword [ebp - 0x1b4], edx
mov dword [ebp - 0x1b0], ebx
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x1a8], edx
lea edi, [ebp - 0x1a4]
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x1001540
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x1001528
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x1001518
mov dword [ebp - 0x168], 0x100150c
mov dword [ebp - 0x164], 0x10
mov word [ebp - 0x160], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x15e], BitBlt
mov word [ebp - 0x15c], 8
mov word [ebp - 0x15a], 8
mov dword [ebp - 0x158], esi
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], esi
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], pe_nt_image_headers32
mov dword [ebp - 0x140], DefWindowProcW
mov dword [ebp - 0x13c], esi
mov dword [ebp - 0x138], esi
push 7
lea edi, [ebp - 0x134]
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x10013f0
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x10013d8
mov dword [ebp - reloc.USER32.dll_GetClientRect], 0x10013c4
mov dword [ebp - 0x10c], 0x10013b4
mov dword [ebp - 0x108], 0x10
mov word [ebp - 0x104], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0x102], SetSecurityDescriptorDacl
mov word [ebp - 0x100], 8
mov word [ebp - 0xfe], 8
mov dword [ebp - 0xfc], esi
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xec], edx
mov dword [ebp - 0xe8], pe_nt_image_headers32
mov dword [ebp - 0xe4], CheckDlgButton
mov dword [ebp - 0xe0], esi
mov dword [ebp - 0xdc], esi
lea edi, [ebp - 0xd8]
rep stosd dword es:[edi], eax
push 7
pop ecx
lea edi, [ebp - 0x7c]
mov dword [ebp - 0xbc], 0x10014f4
mov dword [ebp - 0xb8], 0x10014dc
mov dword [ebp - 0xb4], 0x10014c8
mov dword [ebp - 0xb0], 0x10014b8
mov dword [ebp - 0xac], 0x10
mov word [ebp - 0xa8], reloc.KERNEL32.dll_WaitForMultipleObjects
mov word [ebp - 0xa6], GetTextMetricsW
mov word [ebp - 0xa4], 8
mov word [ebp - 0xa2], 8
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x90], edx
mov dword [ebp - 0x8c], pe_nt_image_headers32
mov dword [ebp - 0x88], DefWindowProcW
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x80], esi
rep stosd dword es:[edi], eax
mov dword [ebp - 0x60], 0x100139c
mov dword [ebp - 0x5c], 0x1001384
mov dword [ebp - 0x58], 0x1001370
mov dword [ebp - 0x54], 0x1001360
mov dword [ebp - 0x50], 0x10
mov word [ebp - 0x4c], reloc.KERNEL32.dll_WaitForMultipleObjects
push 7
pop ecx
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov word [ebp - 0x4a], 0x7f
mov word [ebp - 0x48], 8
mov word [ebp - 0x46], 9
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], pe_nt_image_headers32
mov dword [ebp - 0x2c], DefWindowProcW
lea edi, [ebp - 0x20]
rep stosd dword es:[edi], eax
mov ecx, 0xa9a
lea esi, [ebp - 0x2a6c]
mov edi, 0x101c218
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0101a8d9
leave
ret