Function at 0x421e7f
Capabilities:
Allocate thread local storage
Identify system language via api
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x208
mov dword [esp], 0
call sub.KERNEL32.DLL_GetModuleHandleW
sub esp, 4
mov dword [0x8dfe08], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1000
mov dword [esp], 0
call sub.KERNEL32.DLL_HeapCreate
sub esp, 0xc
mov dword [0x8dfe04], eax
mov dword [0x8dfe0c], 0x46d020
call fcn.0043ae20
call fcn.0043a880
call fcn.004397ad
call fcn.004379a0
call fcn.00434124
call fcn.004338b0
call fcn.00432e97
call fcn.00431e01
call fcn.00430e97
call fcn.0042f91d
call fcn.0042ece9
call fcn.0042e121
call fcn.0042dc8f
call fcn.0042d3a8
call fcn.0042c600
call fcn.0042a879
call fcn.00428e4f
call fcn.00426063
call fcn.00425e74
call fcn.00425ac7
call fcn.004258bf
call fcn.00424f7d
call fcn.00424217
mov dword [esp + 4], str.v1.5.0
mov dword [esp], 0x8dff00
call fcn.0043ad30
sub esp, 8
call fcn.0043a9d0
mov dword [esp], str.W10_Digital_Activation
call fcn.0043ac30
sub esp, 4
mov eax, dword [0x8dff00]
mov dword [esp], eax
call fcn.0043ac30
sub esp, 4
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfe78
call fcn.0043aba0
sub esp, 8
call fcn.0043a9d0
mov dword [esp], str.___________________
call fcn.0043ac30
sub esp, 4
mov eax, dword [0x8dfe78]
mov dword [esp], eax
call fcn.0043ac30
sub esp, 4
mov dword [esp], str._____r_n
call fcn.0043ac30
sub esp, 4
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dff0c
call fcn.0043aba0
sub esp, 8
call fcn.004264e2
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], 0x46d38a
mov eax, dword [ebp - 0x2c]
mov dword [esp + 4], eax
mov dword [esp], 0xffffffff
call fcn.00431680
sub esp, 8
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [0x8dfe48], eax
mov dword [esp + 8], 0xc
mov dword [esp + 4], str.Microsoft_Sans_Serif
mov dword [esp], 0
call fcn.004398c3
sub esp, 0xc
mov dword [ebp - 0x34], eax
mov dword [esp + 8], 9
mov dword [esp + 4], str.Segoe_UI
mov dword [esp], 1
call fcn.004398c3
sub esp, 0xc
mov dword [ebp - 0x38], eax
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0xc8
call fcn.004389b0
sub esp, 8
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8e03b4
call fcn.0043aba0
sub esp, 8
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0xc8
call fcn.004389b0
sub esp, 8
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8e03b8
call fcn.0043aba0
sub esp, 8
mov eax, dword [0x8e03b4]
mov dword [ebp - 0x3c], eax
mov edx, str.PROCESSOR_ARCHITECTURE
mov dword [esp + 8], 0xc8
mov eax, dword [ebp - 0x3c]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.KERNEL32.DLL_GetEnvironmentVariableW
sub esp, 0xc
mov dword [ebp - 0x40], eax
mov eax, dword [0x8e03b8]
mov dword [ebp - 0x44], eax
mov edx, str.PROCESSOR_ARCHITEW6432
mov dword [esp + 8], 0xc8
mov eax, dword [ebp - 0x44]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.KERNEL32.DLL_GetEnvironmentVariableW
sub esp, 0xc
mov dword [ebp - 0x48], eax
mov eax, dword [0x8e039c]
mov dword [ebp - 0x4c], eax
mov edx, str.SYSTEMDRIVE
mov dword [esp + 8], 0x64
mov eax, dword [ebp - 0x4c]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.KERNEL32.DLL_GetEnvironmentVariableW
sub esp, 0xc
mov dword [ebp - 0x50], eax
mov eax, dword [0x8e03b4]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], str.AMD64
mov dword [ebp - 0xc], 0
mov eax, dword [ebp - 0x54]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x58]
mov dword [esp], eax
call fcn.0043acc0
test eax, eax
jne 0x422194
mov eax, dword [0x8e03b8]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], str.AMD64
mov eax, dword [ebp - 0x5c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x60]
mov dword [esp], eax
call fcn.0043acc0
test eax, eax
je 0x42219e
jmp 0x422195
nop
mov dword [ebp - 0xc], 1
jmp 0x42219f
nop
cmp dword [ebp - 0xc], 0
je 0x4221be
mov dword [esp + 4], 0x8d9980
mov dword [esp], 0x8e03a8
call fcn.0043ad30
sub esp, 8
jmp 0x4221d6
nop
mov dword [esp + 4], 0x8da7c8
mov dword [esp], 0x8e03a8
call fcn.0043ad30
sub esp, 8
mov dword [0x8dfe38], 0
call fcn.004264e2
mov dword [ebp - 0x64], eax
mov dword [esp + 4], 0x8e03e0
mov dword [esp], 0x8dfe74
call fcn.0043ad30
sub esp, 8
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x3e8
call fcn.004389b0
sub esp, 8
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfedc
call fcn.0043aba0
sub esp, 8
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x3e8
call fcn.004389b0
sub esp, 8
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfeb0
call fcn.0043aba0
sub esp, 8
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x3e8
call fcn.004389b0
sub esp, 8
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dff04
call fcn.0043aba0
sub esp, 8
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x3e8
call fcn.004389b0
sub esp, 8
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfee8
call fcn.0043aba0
sub esp, 8
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x3e8
call fcn.004389b0
sub esp, 8
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfe34
call fcn.0043aba0
sub esp, 8
mov dword [esp + 4], 0x8e03e0
mov dword [esp], 0x8dfe80
call fcn.0043ad30
sub esp, 8
mov dword [esp + 4], str.HWID
mov dword [esp], 0x8dff08
call fcn.0043ad30
sub esp, 8
mov dword [esp + 4], str.KMS38
mov dword [esp], 0x8dfed0
call fcn.0043ad30
sub esp, 8
mov dword [0x8dfe94], 0
mov eax, dword [0x8dfedc]
mov dword [ebp - 0x68], eax
mov edx, str.TEMP
mov dword [esp + 8], 0x3e8
mov eax, dword [ebp - 0x68]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.KERNEL32.DLL_GetEnvironmentVariableW
sub esp, 0xc
mov dword [ebp - 0x6c], eax
mov eax, dword [0x8dfee8]
mov dword [ebp - 0x70], eax
mov edx, str.WINDIR
mov dword [esp + 8], 0x3e8
mov eax, dword [ebp - 0x70]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.KERNEL32.DLL_GetEnvironmentVariableW
sub esp, 0xc
mov dword [ebp - 0x74], eax
mov eax, dword [0x8dfeb0]
mov dword [ebp - 0x78], eax
mov edx, str.PROCESSOR_ARCHITECTURE
mov dword [esp + 8], 0x3e8
mov eax, dword [ebp - 0x78]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.KERNEL32.DLL_GetEnvironmentVariableW
sub esp, 0xc
mov dword [ebp - 0x7c], eax
mov eax, dword [0x8dff04]
mov dword [ebp - 0x80], eax
mov edx, str.PROCESSOR_ARCHITEW6432
mov dword [esp + 8], 0x3e8
mov eax, dword [ebp - 0x80]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.KERNEL32.DLL_GetEnvironmentVariableW
sub esp, 0xc
mov dword [ebp - 0x84], eax
mov eax, dword [0x8dfedc]
mov dword [ebp - 0x88], eax
mov edx, str.TEMP
mov dword [esp + 8], 0x3e8
mov eax, dword [ebp - 0x88]
mov dword [esp + 4], eax
mov dword [esp], edx
call sub.KERNEL32.DLL_GetEnvironmentVariableW
sub esp, 0xc
mov dword [ebp - 0x8c], eax
mov dword [esp + 4], 0x100
mov dword [esp], 1
call fcn.00420cd8
sub esp, 8
mov dword [ebp - 0x90], eax
mov eax, dword [0x8dfeb0]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x98], str.AMD64
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x94]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x98]
mov dword [esp], eax
call fcn.0043acc0
test eax, eax
jne 0x4224d6
mov eax, dword [0x8dff04]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa0], str.AMD64
mov eax, dword [ebp - 0x9c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xa0]
mov dword [esp], eax
call fcn.0043acc0
test eax, eax
je 0x4224e0
jmp 0x4224d7
nop
mov dword [ebp - 0x10], 1
jmp 0x4224e1
nop
cmp dword [ebp - 0x10], 0
je 0x422500
mov dword [esp + 4], 0x8d9980
mov dword [esp], 0x8dfeac
call fcn.0043ad30
sub esp, 8
jmp 0x422518
nop
mov dword [esp + 4], 0x8da7c8
mov dword [esp], 0x8dfeac
call fcn.0043ad30
sub esp, 8
call fcn.0043a9d0
call fcn.0043a9d0
mov eax, dword [0x8dfee8]
mov dword [esp], eax
call fcn.0043ac30
sub esp, 4
mov dword [esp], str.Temp
call fcn.0043ac30
sub esp, 4
call fcn.0043ab20
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
mov dword [esp], eax
call fcn.0042bc64
sub esp, 4
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], edx
call fcn.0043aa80
mov eax, dword [ebp - 0xb0]
mov edx, dword [ebp - 0xac]
xor eax, 0xfffffffe
not edx
or eax, edx
test eax, eax
jne 0x4225c3
call fcn.0043a9d0
mov eax, dword [0x8dfee8]
mov dword [esp], eax
call fcn.0043ac30
sub esp, 4
mov dword [esp], str.Temp
call fcn.0043ac30
sub esp, 4
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfedc
call fcn.0043aba0
sub esp, 8
jmp 0x4225c4
nop
call fcn.0043a9d0
mov eax, dword [0x8dfee8]
mov dword [esp], eax
call fcn.0043ac30
sub esp, 4
mov dword [esp], str.System32
call fcn.0043ac30
sub esp, 4
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfe34
call fcn.0043aba0
sub esp, 8
call fcn.0043a9d0
call fcn.0043a9d0
mov eax, dword [0x8dfee8]
mov dword [esp], eax
call fcn.0043ac30
sub esp, 4
mov dword [esp], str.Sysnativecmd.exe
call fcn.0043ac30
sub esp, 4
call fcn.0043ab20
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
mov dword [esp], eax
call fcn.0042bc64
sub esp, 4
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], edx
call fcn.0043aa80
mov edx, 0
mov eax, 0
cmp edx, dword [ebp - 0xc0]
sbb eax, dword [ebp - 0xbc]
jge 0x4226ac
call fcn.0043a9d0
mov eax, dword [0x8dfee8]
mov dword [esp], eax
call fcn.0043ac30
sub esp, 4
mov dword [esp], str.Sysnative
call fcn.0043ac30
sub esp, 4
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfee8
call fcn.0043aba0
sub esp, 8
jmp 0x4226e9
nop
call fcn.0043a9d0
mov eax, dword [0x8dfee8]
mov dword [esp], eax
call fcn.0043ac30
sub esp, 4
mov dword [esp], str.System32
call fcn.0043ac30
sub esp, 4
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfee8
call fcn.0043aba0
sub esp, 8
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x8d642c
mov dword [esp + 4], str.BuildLab
mov dword [esp], str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
call fcn.004189e1
sub esp, 0x10
mov dword [ebp - 0xc4], eax
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfe98
call fcn.0043aba0
sub esp, 8
mov eax, dword [0x8dfe98]
mov dword [esp + 4], 0x8d642c
mov dword [esp], eax
call fcn.00438ac0
sub esp, 8
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
mov dword [0x8dfec8], eax
mov eax, dword [0x8dfec8]
test eax, eax
jle 0x4227ca
nop
call fcn.0043a9d0
call fcn.0043a9d0
mov eax, dword [0x8dfec8]
sub eax, 1
mov dword [ebp - 0xcc], eax
call fcn.0043aa20
mov edx, dword [0x8dfe98]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0xcc]
mov dword [esp + 8], eax
mov dword [esp + 4], 1
mov dword [esp], edx
call fcn.00438b10
sub esp, 0x10
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfe98
call fcn.0043aba0
sub esp, 8
jmp 0x4227cb
nop
mov eax, dword [0x8dfe98]
mov dword [esp], eax
call fcn.00438870
sub esp, 4
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], edx
mov eax, dword [ebp - 0xd8]
mov dword [0x8dfe2c], eax
mov eax, dword [0x8dfe2c]
cmp eax, 0x2710
jle 0x42281a
mov dword [esp + 4], 0x8d65f4
mov dword [esp], 0x8dfefc
call fcn.0043ad30
sub esp, 8
jmp 0x422949
nop
mov eax, dword [0x8dfe2c]
cmp eax, 0x257f
jle 0x422844
nop
mov dword [esp + 4], 0x8dc9cc
mov dword [esp], 0x8dfefc
call fcn.0043ad30
sub esp, 8
jmp 0x422949
nop
mov dword [ebp - 0x14], 0
mov eax, dword [0x8dfe2c]
cmp eax, 0x23ef
jle 0x42286e
mov eax, dword [0x8dfe2c]
cmp eax, 0x2453
jg 0x422871
nop
mov dword [ebp - 0x14], 1
jmp 0x422872
nop
jmp 0x422872
nop
cmp dword [ebp - 0x14], 0
je 0x422895
nop
mov dword [esp + 4], 0x8d65cc
mov dword [esp], 0x8dfefc
call fcn.0043ad30
sub esp, 8
jmp 0x422949
nop
mov dword [ebp - 0x18], 0
mov eax, dword [0x8dfe2c]
cmp eax, 0x1daf
jle 0x4228bf
mov eax, dword [0x8dfe2c]
cmp eax, 0x1e13
jg 0x4228c2
nop
mov dword [ebp - 0x18], 1
jmp 0x4228c3
nop
jmp 0x4228c3
nop
cmp dword [ebp - 0x18], 0
je 0x4228e3
nop
mov dword [esp + 4], 0x8d65c8
mov dword [esp], 0x8dfefc
call fcn.0043ad30
sub esp, 8
jmp 0x422949
nop
mov dword [ebp - 0x1c], 0
mov eax, dword [0x8dfe2c]
cmp eax, 0xa27
jle 0x42290d
mov eax, dword [0x8dfe2c]
cmp eax, 0xf9f
jg 0x422910
nop
mov dword [ebp - 0x1c], 1
jmp 0x422911
nop
jmp 0x422911
nop
cmp dword [ebp - 0x1c], 0
je 0x422931
nop
mov dword [esp + 4], 0x8d9988
mov dword [esp], 0x8dfefc
call fcn.0043ad30
sub esp, 8
jmp 0x422949
nop
mov dword [esp + 4], 0x8d65c8
mov dword [esp], 0x8dfefc
call fcn.0043ad30
sub esp, 8
call fcn.0043a9d0
call fcn.0043a9d0
call sub.KERNEL32.DLL_GetUserDefaultLangID
mov dword [ebp - 0xdc], eax
call fcn.0043aa20
mov ecx, eax
mov eax, dword [ebp - 0xdc]
cdq
mov dword [esp + 8], ecx
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.004392c0
sub esp, 0xc
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfea0
call fcn.0043aba0
sub esp, 8
mov eax, dword [0x8dfea0]
mov dword [esp], eax
call fcn.00438ae0
sub esp, 4
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jne 0x4229f4
call fcn.0043a9d0
mov dword [esp], 0x8d6474
call fcn.0043ac30
sub esp, 4
mov eax, dword [0x8dfea0]
mov dword [esp], eax
call fcn.0043ac30
sub esp, 4
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfea0
call fcn.0043aba0
sub esp, 8
jmp 0x4229f5
nop
mov eax, dword [0x8dfea0]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe8], str.0419
mov eax, dword [ebp - 0xe4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xe8]
mov dword [esp], eax
call fcn.0043acc0
test eax, eax
je 0x422a3f
mov dword [esp + 4], 0x8d6d14
mov dword [esp], 0x8dfea0
call fcn.0043ad30
sub esp, 8
jmp 0x422a57
nop
mov dword [esp + 4], 0x8d83fc
mov dword [esp], 0x8dfea0
call fcn.0043ad30
sub esp, 8
mov dword [0x8dff10], 0
mov dword [0x8dff14], 0
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x8d642c
mov dword [esp + 4], str.ProductName
mov dword [esp], str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
call fcn.004189e1
sub esp, 0x10
mov dword [ebp - 0xec], eax
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfe68
call fcn.0043aba0
sub esp, 8
mov eax, dword [0x8dfe68]
mov dword [esp + 4], str.2015
mov dword [esp], eax
call fcn.00438ac0
sub esp, 8
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jle 0x422aee
mov dword [0x8dff10], 1
jmp 0x422b24
nop
mov eax, dword [0x8dfe68]
mov dword [esp + 4], str.LTSC
mov dword [esp], eax
call fcn.00438ac0
sub esp, 8
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jle 0x422b23
nop
mov dword [0x8dff14], 1
jmp 0x422b24
nop
mov dword [0x8dfed8], 0
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x8d642c
mov dword [esp + 4], str.EditionID
mov dword [esp], str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
call fcn.004189e1
sub esp, 0x10
mov dword [ebp - 0xf8], eax
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfe6c
call fcn.0043aba0
sub esp, 8
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x8d642c
mov dword [esp + 4], str.CurrentBuild
mov dword [esp], str.HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows_NTCurrentVersion
call fcn.004189e1
sub esp, 0x10
mov dword [ebp - 0xfc], eax
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfe88
call fcn.0043aba0
sub esp, 8
mov dword [0x8dfe54], 0
call fcn.00425a53
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
sub eax, 1
mov dword [0x8dfe4c], eax
mov eax, dword [0x8dfe4c]
test eax, eax
js 0x422d1a
mov dword [0x8dfea4], 0
mov edx, dword [0x8dfe4c]
mov eax, dword [0x8dfea4]
cmp edx, eax
jl 0x422d1d
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov edx, dword [0x8dfea4]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.00425a67
sub esp, 8
call fcn.0043ab20
mov dword [ebp - 0x104], eax
call fcn.0043aa20
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x104]
mov dword [esp], eax
call fcn.004383f0
sub esp, 8
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfeb4
call fcn.0043aba0
sub esp, 8
mov dword [ebp - 0x1e4], 0
mov eax, dword [0x8dfeb4]
mov dword [esp + 4], eax
lea eax, [ebp - 0x1e4]
mov dword [esp], eax
call fcn.0043a980
sub esp, 8
mov eax, dword [ebp - 0x1e4]
mov dword [esp + 4], str._ACTIVATE
mov dword [esp], eax
call fcn.0043acc0
test eax, eax
je 0x422cd0
mov dword [0x8dfe54], 1
jmp 0x422cf7
mov eax, dword [ebp - 0x1e4]
mov dword [esp + 4], str._KMS38
mov dword [esp], eax
call fcn.0043acc0
test eax, eax
je 0x422cf6
mov dword [0x8dfe94], 1
jmp 0x422cf7
nop
mov eax, dword [ebp - 0x1e4]
mov dword [esp], eax
call fcn.0043ac90
sub esp, 4
mov eax, dword [0x8dfea4]
add eax, 1
mov dword [0x8dfea4], eax
jmp 0x422c08
nop
jmp 0x422d1e
nop
mov eax, dword [0x8dfe6c]
mov dword [esp], eax
call fcn.0040829c
sub esp, 4
mov dword [ebp - 0x108], eax
mov eax, dword [0x8dfefc]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x110], 0x8d65f4
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x10c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x110]
mov dword [esp], eax
call fcn.0043acc0
test eax, eax
je 0x422d77
mov eax, dword [0x8dfed8]
test eax, eax
jne 0x422d81
jmp 0x422d78
nop
mov dword [ebp - 0x20], 1
jmp 0x422d82
nop
cmp dword [ebp - 0x20], 0
je 0x422dd8
mov dword [esp + 4], str.Not_found_the_appropriate_edition_____r_n_r_nWindows_10_11_Core_r_nWindows_10_11_Core_N_r_nWindows_10_11_CoreSingleLanguage_r_nWindows_10_11_CoreSingleLanguage_N_r_nWindows_10_11_Professional_r_nWindows_10_11_Professional_N_r_nWindows_10_11_ProfessionalEducation_r_nWindows_10_11_ProfessionalEducation_N_r_nWindows_10_11_ProfessionalWorkstation_r_nWindows_10_11_ProfessionalWorkstation_N_r_nWindows_10_11_Education_r_nWindows_10_11_Education_N_r_nWindows_10_11_Enterprise_r_nWindows_10_11_Enterprise_N_r_nWindows_10_Enterprise_LTSB_r_nWindows_10_Enterprise_LTSB_N_r_nWindows_10_Enterprise_LTSC_r_nWindows_10_IoT_Enterprise_r_nWindows_10_IoT_Enterprise_LTSC
mov dword [esp], 0x8dfe84
call fcn.0043ad30
sub esp, 8
mov eax, dword [0x8dfe54]
test eax, eax
jne 0x422dd0
mov eax, dword [0x8dfe84]
mov dword [esp + 8], 0x10
mov dword [esp + 4], eax
mov dword [esp], str.Error_
call fcn.00424f3a
sub esp, 0xc
mov dword [ebp - 0x114], eax
jmp 0x422dd1
nop
call fcn.00423602
jmp 0x422dd9
nop
mov dword [0x8dfec0], 0
mov dword [0x8dfe30], 0
mov dword [0x8dfe50], 0
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x8d642c
mov dword [esp + 4], str.AppsUseLightTheme
mov dword [esp], str.HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionThemesPersonalize
call fcn.004189e1
sub esp, 0x10
mov dword [ebp - 0x118], eax
call fcn.0043aa20
mov dword [esp + 4], eax
mov dword [esp], 0x8dfed4
call fcn.0043aba0
sub esp, 8
mov eax, dword [0x8dfed4]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x120], 0x8d6474
mov eax, dword [ebp - 0x11c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x120]
mov dword [esp], eax
call fcn.0043acc0
test eax, eax
je 0x422e8e
mov dword [0x8dfe30], 1
mov dword [0x8dfe50], 1
jmp 0x422e8f
nop
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0042efc8
sub esp, 0xc
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [0x8dfee4], eax
mov dword [esp + 8], 0xff
mov dword [esp + 4], 0xff
mov dword [esp], 0xff
call fcn.0042efc8
sub esp, 0xc
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [0x8dfe8c], eax
mov dword [esp + 8], 0x20
mov dword [esp + 4], 0x20
mov dword [esp], 0x20
call fcn.0042efc8
sub esp, 0xc
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov dword [0x8dfe44], eax
mov dword [0x8dfecc], 1
mov dword [esp + 8], 0x808080
mov dword [esp + 4], 1
mov dword [esp], 0
call sub.GDI32.dll_CreatePen
sub esp, 0xc
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [0x8dfe7c], eax
mov dword [esp + 8], 0xcc872c
mov dword [esp + 4], 1
mov dword [esp], 0
call sub.GDI32.dll_CreatePen
sub esp, 0xc
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [0x8dfebc], eax
mov dword [esp + 0xc], 7
mov dword [esp + 8], 0
mov dword [esp + 4], 0x8e03e4
mov dword [esp], 0x1f
call fcn.00431e20
sub esp, 0x10
mov dword [esp + 0x10], 0x200
mov dword [esp + 0xc], 0x8e044c
mov dword [esp + 8], 0
mov dword [esp + 4], 7
mov dword [esp], 0x2d
call fcn.0042dcae
sub esp, 0x14
mov dword [esp + 0x10], 0x200
mov dword [esp + 0xc], 0x8e0450
mov dword [esp + 8], 0
mov dword [esp + 4], 0x15
mov dword [esp], 4
call fcn.0042dcae
sub esp, 0x14
mov dword [esp + 0x10], 0x200
mov dword [esp + 0xc], 0x8e0454
mov dword [esp + 8], 0
mov dword [esp + 4], 0x15
mov dword [esp], 4
call fcn.0042dcae
sub esp, 0x14
mov dword [esp + 0x10], 0x200
mov dword [esp + 0xc], 0x8e0458
mov dword [esp + 8], 0
mov dword [esp + 4], 0x15
mov dword [esp], 4
call fcn.0042dcae
sub esp, 0x14
mov dword [0x8dfe1c], 2
mov dword [0x8dfe20], 1
mov dword [esp + 0x10], 0x8dfe18
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x15
mov dword [esp + 4], 4
mov dword [esp], 2
call fcn.0042edb9
sub esp, 0x14
mov dword [esp + 0xc], 0x15
mov dword [esp + 8], 0
mov dword [esp + 4], 0x8e03ec
mov dword [esp], 4
call fcn.00431e20
sub esp, 0x10
mov dword [ebp - 0x138], 0x8ca67e
mov eax, dword [ebp - 0x138]
mov dword [esp + 4], eax
mov dword [esp], 0xffffffff
call fcn.00431680
sub esp, 8
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
mov dword [0x8dfe38], eax
mov eax, dword [0x8dfe38]
mov dword [esp], eax
call fcn.00407af1
sub esp, 4
mov dword [ebp - 0x140], eax
mov eax, dword [0x8dfe48]
mov dword [esp], eax
call fcn.00407af1
sub esp, 4
mov dword [ebp - 0x144], eax
mov eax, dword [0x8dfe54]
test eax, eax
jle 0x42315e
mov dword [esp], 0
call fcn.00403e13
sub esp, 4
mov dword [ebp - 0x148], eax
call fcn.00423602
jmp 0x423425
nop
mov dword [esp + 0xc], 0xa0
mov dword [esp + 8], 0x1e0
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.00401020
sub esp, 0x10
mov dword [ebp - 0x14c], eax
mov edx, dword [0x8dfe78]
mov eax, dword [0x8dfec4]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0042a8e4
sub esp, 8
mov dword [ebp - 0x150], eax
mov eax, dword [0x8dfea0]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x158], 0x8d6d14
mov eax, dword [ebp - 0x154]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x158]
mov dword [esp], eax
call fcn.0043acc0
test eax, eax
je 0x42321b
mov eax, dword [0x8dfe70]
mov dword [esp + 4], 0x8dcf40
mov dword [esp], eax
call fcn.00428ef5
sub esp, 8
mov dword [ebp - 0x15c], eax
mov eax, dword [0x8dfe5c]
mov dword [esp + 4], 0x8db140
mov dword [esp], eax
call fcn.00428ef5
sub esp, 8
mov dword [ebp - 0x160], eax
jmp 0x42323a
nop
mov eax, dword [0x8dfe5c]
mov dword [esp + 4], str.Go_to_the_program_support_forum
mov dword [esp], eax
call fcn.00428ef5
sub esp, 8
mov dword [ebp - 0x164], eax
mov eax, dword [0x8dfec4]
mov dword [esp], eax
call fcn.0042a90d
sub esp, 4
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov dword [esp], eax
call fcn.0042f049
sub esp, 4
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
je 0x42331f
mov dword [esp], 1
call fcn.00439744
sub esp, 4
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov dword [esp], eax
call fcn.0042f929
sub esp, 4
mov dword [ebp - 0x174], eax
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043a9d0
call fcn.0043aa20
mov edx, dword [0x8dfe5c]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.004290b2
sub esp, 8
call fcn.0043ab20
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
mov dword [esp], eax
call fcn.0042f940
sub esp, 4
mov dword [ebp - 0x17c], eax
call fcn.0043aa80
mov eax, dword [ebp - 0x17c]
mov dword [esp], eax
call fcn.0042e192
sub esp, 4
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [0x8dfe9c], eax
call fcn.0042f7d1
mov dword [ebp - 0x184], eax
jmp 0x423320
nop
mov eax, dword [0x8dfec4]
mov dword [esp], eax
call fcn.0042aa06
sub esp, 4
mov dword [ebp - 0x188], eax
mov edx, dword [0x8dfe9c]
mov eax, dword [ebp - 0x188]
sub eax, edx
mov edx, eax
shr edx, 0x1f
add eax, edx
sar eax, 1
mov dword [ebp - 0x18c], eax
mov edx, dword [0x8dfe9c]
mov eax, dword [0x8dfe5c]
mov dword [esp + 0x10], 0xffff0001
mov dword [esp + 0xc], edx
mov dword [esp + 8], 0xffff0001
mov edx, dword [ebp - 0x18c]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004295f3
sub esp, 0x14
mov dword [ebp - 0x190], eax
mov edx, dword [0x8dff08]
mov eax, dword [0x8dfe58]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call fcn.004292de
sub esp, 0xc
mov dword [ebp - 0x194], eax
mov edx, dword [0x8dfed0]
mov eax, dword [0x8dfe58]
mov dword [esp + 8], edx
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call fcn.004292de
sub esp, 0xc
mov dword [ebp - 0x198], eax
mov eax, dword [0x8dfe94]
test eax, eax
jle 0x423406
mov eax, dword [0x8dfe58]
mov dword [esp + 4], 1
mov dword [esp], eax
call fcn.00428f96
sub esp, 8
mov dword [ebp - 0x19c], eax
jmp 0x423425
nop
mov eax, dword [0x8dfe58]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00428f96
sub esp, 8
mov dword [ebp - 0x1a0], eax
call fcn.0042a07b
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x24], 0
cmp dword [ebp - 0x1a4], 0x6d
jle 0x423453
mov eax, dword [0x8dfe50]
test eax, eax
jle 0x423456
nop
mov dword [ebp - 0x24], 1
jmp 0x423457
nop
jmp 0x423457
nop
cmp dword [ebp - 0x24], 0
je 0x423530
call fcn.00410795
mov dword [ebp - 0x1a8], eax
mov dword [esp + 4], str.dwmapi
mov dword [esp], 0
call fcn.00425f60
sub esp, 8
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
je 0x423533
mov dword [esp + 4], str.DwmSetWindowAttribute
mov dword [esp], 0
call fcn.00425fba
sub esp, 8
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
mov dword [0x8dfe60], eax
mov eax, dword [0x8dfec4]
mov dword [esp], eax
call fcn.0042a632
sub esp, 4
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b8], 0x8dfe50
mov eax, dword [0x8dfe60]
mov dword [esp + 0xc], 4
mov edx, dword [ebp - 0x1b8]
mov dword [esp + 8], edx
mov dword [esp + 4], 0x14
mov edx, dword [ebp - 0x1b4]
mov dword [esp], edx
call eax
mov dword [ebp - 0x1bc], eax
mov dword [esp], 0
call fcn.00426016
sub esp, 4
mov dword [ebp - 0x1c0], eax
call fcn.0040e2ef
mov dword [ebp - 0x1c4], eax
jmp 0x423534
nop
jmp 0x423534
nop
mov eax, dword [0x8dfec4]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0042aaf3
sub esp, 8
mov dword [ebp - 0x1c8], eax
call fcn.0042a64e
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1cc]
mov dword [0x8dfea8], eax
mov eax, dword [0x8dfea8]
test eax, eax
je 0x4235cf
call fcn.0042d2d1
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1d4], eax
mov eax, dword [0x8dfec4]
cmp dword [ebp - 0x1d4], eax
jne 0x4235ae
mov eax, dword [0x8dfea8]
mov dword [esp], eax
call fcn.0040a2ce
sub esp, 4
mov dword [ebp - 0x1dc], eax
nop
jmp 0x4235e5
mov dword [0x8dfea8], 0
mov dword [esp], 5
call fcn.0042a1fe
sub esp, 4
mov dword [ebp - 0x1d8], eax
jmp 0x4235e5
nop
mov dword [esp], 5
call fcn.0042a1fe
sub esp, 4
mov dword [ebp - 0x1e0], eax
mov eax, dword [0x8dfea8]
cmp eax, 0x333c
je 0x4235f7
nop
jmp 0x423552
nop
call fcn.00423602
nop
leave
ret 0x10