Function at 0x40117b
Capabilities:
Accept command line arguments
Create process on windows
Create thread
Delete file
Encode data using base64
Get file size
Get graphical window text
Hide graphical window
Read .ini file
Self delete
Set current directory
Set registry value

Disassembly:
push 0x7f89
push 0
call sub.user32.dll_LoadCursorA
mov dword [0x412d15], eax
call sub.KERNEL32.DLL_GetProcessHeap
mov dword [0x412c39], eax
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
mov dword [0x412abc], eax
push 0xc
call sub.gdi32.dll_GetStockObject
mov dword [0x412d21], eax
push 0
call sub.gdi32.dll_GetStockObject
mov dword [0x412d58], eax
push 0x100
push 0x411c0b
push 0
call sub.KERNEL32.DLL_GetModuleFileNameA
or eax, eax
je 0x401065
dec eax
cmp byte [eax + 0x411c0b], 0x5c
jne 0x401050
mov byte [eax + 0x411c0b], 0
push str.Config.ini
push 0x411c0b
call sub.KERNEL32.DLL_lstrcatA
push 0xe
push 0x410490
push 0x411d17
call sub.KERNEL32.DLL_lstrcpynA
mov ecx, 0x154
mov eax, 0x18
dec ecx
dec eax
mov dl, byte [ecx + str._f_f_te]
xor dl, byte [eax + str.InternetGetConnectedState]
mov byte [ecx + str._f_f_te], dl
or ecx, ecx
je 0x4010ad
or eax, eax
je 0x40108a
jmp 0x40108f
push 0x411c0b
push 0x20
push 0x411e57
push 0x4112fa
push 0x411fd7
push 0x410113
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x401104
push 0x411c0b
push 0x20
push 0x411e77
push 0x4112fa
push 0x411fe0
push 0x410113
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x401104
push eax
call fcn.00409707
mov dword [0x412d1d], eax
or eax, eax
je 0x40111a
push 0
push 0x408c08
push 0
push 9
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
mov dword [0x412938], 0x104
push 0
push 0x40117b
push 0
push 1
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
mov byte [0x412cd7], 0
cmp byte [0x412c28], 0xff
je 0x40111a
cmp byte [0x412c28], 0xfe
je 0x40111a
cmp byte [0x412c28], 0xfd
jne 0x40116f
push 0x10
push str.ERROR
push str.Memory_Allocation_failed__
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.KERNEL32.DLL_ExitProcess
call sub.comctl32.dll_InitCommonControls
push ebp
mov ebp, esp
add esp, 0xfffffffc
mov eax, dword [ebp + 0x10]
cmp dword [ebp + 0xc], 0x113
jne 0x4012c2
cmp dword [ebp + 0x10], 3
jne 0x4011ea
mov eax, dword [0x412cfd]
mov ecx, dword [0x412d01]
cmp dword [0x412d05], eax
jne 0x4011b6
cmp dword [0x412d09], ecx
je 0x40515e
mov dword [0x412d05], eax
mov dword [0x412d09], ecx
push ecx
push eax
push str._i_files___i_folders_found
push 0x411907
call sub.user32.dll_wsprintfA
add esp, 0x10
push 0x411907
push dword [0x412b88]
call sub.user32.dll_SetWindowTextA
jmp 0x40515e
cmp dword [ebp + 0x10], 2
jne 0x40515e
inc dword [0x412c9d]
cmp dword [0x412c9d], 0xa
jne 0x401213
mov dword [0x412c9d], 0
inc dword [0x412ca1]
cmp dword [0x412ca1], 6
jne 0x40122c
mov dword [0x412ca1], 0
inc dword [0x412ca5]
cmp dword [0x412ca5], 0xa
jne 0x401245
mov dword [0x412ca5], 0
inc dword [0x412ca9]
cmp dword [0x412ca9], 6
jne 0x40125e
mov dword [0x412ca9], 0
inc dword [0x412cad]
cmp dword [0x412cb1], 0xa
jne 0x401277
mov dword [0x412cad], 0
inc dword [0x412cb1]
push dword [0x412c9d]
push dword [0x412ca1]
push dword [0x412ca5]
push dword [0x412ca9]
push dword [0x412cad]
push dword [0x412cb1]
push str.Elapsed_time:___i_i:_i_i:_i_i
push 0x411907
call sub.user32.dll_wsprintfA
add esp, 0x20
push 0x411907
push dword [0x412ae8]
call sub.user32.dll_SetWindowTextA
jmp 0x40515e
cmp dword [ebp + 0xc], 0x53
jne 0x40130c
push 0x100
push 0x4116ff
push 0
call sub.KERNEL32.DLL_GetModuleFileNameA
add eax, 0x4116ff
dec eax
cmp byte [eax], 0x5c
jne 0x4012de
mov byte [eax + 1], 0
push str.Documentation.chm
push 0x4116ff
call sub.KERNEL32.DLL_lstrcatA
push 3
push 0
push 0
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x40515e
cmp dword [ebp + 0xc], 0xf
jne 0x40142b
push 0x412890
push dword [ebp + 8]
call sub.user32.dll_BeginPaint
mov dword [0x412ccd], eax
cmp byte [0x412c28], 1
je 0x40133a
cmp byte [0x412c28], 0xe
jne 0x401378
push dword [0x412d58]
push 0x412d48
push eax
call sub.user32.dll_FillRect
push 0xcc0020
push 0
push 0
push dword [0x412d44]
push 0x113
push 0xb2
push 0
push 0
push dword [0x412ccd]
call sub.gdi32.dll_BitBlt
jmp 0x401419
cmp byte [0x412c28], 0
jbe 0x401419
push dword [0x412d58]
push 0x412824
push eax
call sub.user32.dll_FillRect
cmp byte [0x412c28], 6
jne 0x401419
cmp byte [0x412cd1], 1
jne 0x401419
push 0
push 0
push 0x147
push dword [0x412bb0]
call sub.user32.dll_SendMessageA
xor ecx, ecx
cmp eax, 1
jne 0x4013d3
mov ecx, dword [0x41282c]
sub ecx, dword [0x412cc5]
sar ecx, 1
jmp 0x4013e5
cmp eax, 2
jne 0x4013e5
sub ecx, dword [0x412cc5]
add ecx, dword [0x41282c]
dec ecx
push 0
push dword [0x412cbd]
push dword [0x412cc1]
push dword [0x412cc9]
push 0
push 0
push 0
push dword [0x412cc9]
push dword [0x412cc5]
push 0
push ecx
push dword [0x412ccd]
call sub.gdi32.dll_SetDIBitsToDevice
push 0x412890
push dword [ebp + 8]
call sub.user32.dll_EndPaint
jmp 0x40515e
cmp dword [ebp + 0xc], 0x200
jne 0x401500
mov eax, dword [ebp + 0x14]
mov ecx, eax
shr ecx, 0x10
and eax, 0xffff
cmp byte [0x412c28], 2
jne 0x40515e
cmp byte [0x412c87], 0
jne 0x401466
mov dword [0x412c20], eax
mov dword [0x412c24], ecx
mov edx, 0x411d17
cmp byte [edx], 0
je 0x40515e
mov edx, 0x411d57
cmp byte [edx], 0
je 0x40515e
push ecx
push eax
push 0x412aac
call sub.user32.dll_PtInRect
or eax, eax
je 0x4014ca
cmp dword [0x412d19], 0x1b34e4
je 0x40515e
mov dword [0x412d19], 0x1b34e4
push dword [ebp + 8]
call sub.user32.dll_SetCapture
cmp dword [0x412d15], 0
je 0x4014e9
push dword [0x412d15]
call sub.user32.dll_SetCursor
jmp 0x4014e9
cmp dword [0x412d19], 0xff2f2f
je 0x40515e
mov dword [0x412d19], 0xff2f2f
call sub.user32.dll_ReleaseCapture
push 0
push 0x412aac
push dword [0x412ac0]
call sub.user32.dll_InvalidateRect
jmp 0x40515e
cmp dword [ebp + 0xc], 0x201
jne 0x40152c
mov byte [0x412c87], 1
cmp dword [0x412d19], 0x1b34e4
jne 0x40515e
mov byte [0x412d2f], 1
jmp 0x40515e
cmp dword [ebp + 0xc], 0x202
jne 0x401586
mov byte [0x412c87], 0
cmp byte [0x412d2f], 0
je 0x40515e
cmp dword [0x412d19], 0x1b34e4
jne 0x40515e
push 5
push 0
push 0
push 0x411d57
push str.Open
push 0
call sub.shell32.dll_ShellExecuteA
mov dword [0x412d19], 0xff2f2f
mov byte [0x412d2f], 0
jmp 0x40515e
cmp dword [ebp + 0xc], 0x110
jne 0x40350f
push dword [ebp + 8]
pop dword [0x412ac0]
push str._InstallSimple_3.1_PRO
push dword [0x412ac0]
call sub.user32.dll_SetWindowTextA
cmp byte [0x412c28], 0
je 0x4015d6
push 5
push 0
push 0
push dword [0x412828]
push dword [0x412824]
push 0
push dword [0x412ac0]
call sub.user32.dll_SetWindowPos
jmp 0x401654
push 0x412a20
call sub.KERNEL32.DLL_GetLocalTime
mov ax, word [0x412a22]
mov bx, 0x1e
mul bx
add word [0x412a26], ax
push 0x411c0b
push 5
push 0x4116ff
push 0x4112fa
push str.AutoUpdate
push 0x410113
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x40163d
push 0x4116ff
call fcn.0040ea38
or eax, eax
je 0x401654
xor ecx, ecx
mov cx, word [0x412a26]
sub ecx, eax
cmp ecx, 0xfffffffa
jl 0x40163d
cmp ecx, 6
jg 0x40163d
jmp 0x401654
push 0x412c95
push 0x20
push 0
push 0x40974b
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
call sub.user32.dll_GetDialogBaseUnits
movzx eax, ax
sub eax, 8
mov dword [0x412d30], eax
mov dword [0x412824], 0xa
mov dword [0x412828], 0xc2
add dword [0x412828], eax
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a04], 0
mov dword [0x412a08], 0x65
mov byte [0x412a0c], 4
mov word [0x412a0e], 0
mov dword [0x412a10], 0
mov dword [0x412a14], 0
push 0x14
push 0
push 0
push 0x16
push 0x16
push 1
push 0x412a04
push 0xd
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bc0], eax
push 0x80
push 0x1e
push 0x96
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
push dword [0x412abc]
pop dword [0x412a18]
mov dword [0x412a1c], 0xe
push 0x412a18
push 1
push 0x413
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 1
mov dword [0x412a08], 2
push 0x412a04
push 1
push 0x414
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a1c], 0xf
push 0x412a18
push 1
push 0x413
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 2
mov dword [0x412a08], 3
push 0x412a04
push 1
push 0x414
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a1c], 0xb
push 0x412a18
push 1
push 0x413
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 3
mov dword [0x412a08], 4
push 0x412a04
push 1
push 0x414
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a1c], 0x10
push 0x412a18
push 1
push 0x413
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 4
mov dword [0x412a08], 5
push 0x412a04
push 1
push 0x414
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov eax, dword [0x412d30]
mov dword [0x412824], 0xc3
add dword [0x412824], eax
mov dword [0x412828], 0x3c
add dword [0x412828], eax
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a04], 0
mov dword [0x412a08], 7
push 0x14
push 0
push 0
push 0x10
push 0x10
push 1
push 0x412a04
push 0x11
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bc4], eax
push 0x80
push 0x16
push 0x32
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
mov dword [0x412a1c], 0x12
push 0x412a18
push 1
push 0x413
push dword [0x412bc4]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 1
mov dword [0x412a08], 6
push 0x412a04
push 1
push 0x414
push dword [0x412bc4]
call sub.user32.dll_SendMessageA
mov eax, dword [0x412d30]
mov dword [0x412824], 0xc3
add dword [0x412824], eax
mov dword [0x412828], 0x64
add dword [0x412828], eax
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a04], 0
mov dword [0x412a08], 8
push 0x14
push 0
push 0
push 0x10
push 0x10
push 1
push 0x412a04
push 0x11
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bc8], eax
push 0x80
push 0x16
push 0x32
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
mov dword [0x412a1c], 9
push 0x412a18
push 1
push 0x413
push dword [0x412bc8]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 1
mov dword [0x412a08], 0xc
push 0x412a04
push 1
push 0x414
push dword [0x412bc8]
call sub.user32.dll_SendMessageA
mov eax, dword [0x412d30]
shl eax, 1
mov dword [0x412824], 0x108
add dword [0x412824], eax
mov dword [0x412828], 0xa5
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a04], 0
mov dword [0x412a08], 9
push 0x14
push 0
push 0
push 0x16
push 0x16
push 1
push 0x412a04
push 0x13
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bcc], eax
push 0x80
push 0x1e
push 0x5a
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
mov dword [0x412a1c], 0x14
push 0x412a18
push 1
push 0x413
push dword [0x412bcc]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 1
mov dword [0x412a08], 0xa
push 0x412a04
push 1
push 0x414
push dword [0x412bcc]
call sub.user32.dll_SendMessageA
mov dword [0x412a1c], 0x15
push 0x412a18
push 1
push 0x413
push dword [0x412bcc]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 2
mov dword [0x412a08], 0xb
push 0x412a04
push 1
push 0x414
push dword [0x412bcc]
call sub.user32.dll_SendMessageA
push 0
push 6
push 0x401
push dword [0x412bc4]
call sub.user32.dll_SendMessageA
mov eax, dword [0x412d30]
mov dword [0x412824], 0xc3
add dword [0x412824], eax
mov dword [0x412828], 0x8c
add dword [0x412828], eax
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a04], 0
mov dword [0x412a08], 0xd
push 0x14
push 0
push 0
push 0x10
push 0x10
push 1
push 0x412a04
push 0x11
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bd0], eax
push 0x80
push 0x16
push 0x46
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
mov dword [0x412a1c], 9
push 0x412a18
push 1
push 0x413
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 1
mov dword [0x412a08], 0xe
push 0x412a04
push 1
push 0x414
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
mov dword [0x412a1c], 0x12
push 0x412a18
push 1
push 0x413
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 2
mov dword [0x412a08], 0x96
push 0x412a04
push 1
push 0x414
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
push 0
push 0xe
push 0x401
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
mov eax, dword [0x412d30]
sar eax, 1
mov dword [0x412824], 0xcd
add dword [0x412824], eax
mov dword [0x412828], 0x59
add dword [0x412828], eax
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a04], 0
mov dword [0x412a08], 0x97
push 0x14
push 0
push 0
push 0x10
push 0x10
push 1
push 0x412a04
push 0x16
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [ebp + 8]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bd4], eax
push 0x80
push 0x18
push 0x18
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
mov dword [0x412a08], 0x98
push 0x14
push 0
push 0
push 0x10
push 0x10
push 1
push 0x412a04
push 0xa
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bd8], eax
mov eax, dword [0x412d30]
mov dword [0x412824], 0x131
add dword [0x412824], eax
mov dword [0x412828], 0x35
add dword [0x412828], eax
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a08], 0x99
push 0x14
push 0
push 0
push 0x10
push 0x10
push 1
push 0x412a04
push 0x11
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bdc], eax
push 0x80
push 0x16
push 0x18
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
push 0
push 0
push 0x31
push dword [ebp + 8]
call sub.user32.dll_SendMessageA
mov dword [0x412d38], eax
push 0x4116ff
push 0x100
push eax
call sub.gdi32.dll_GetObjectA
mov eax, dword [0x4116ff]
push eax
cmp eax, 0xfffffff5
jle 0x401e1f
mov eax, 0xfffffff5
push eax
sub eax, 4
push str.Arial
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push eax
call sub.gdi32.dll_CreateFontA
mov dword [0x412d34], eax
pop eax
sub eax, 2
push str.Arial
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push eax
call sub.gdi32.dll_CreateFontA
mov dword [0x412c14], eax
pop eax
push 0x41171b
push 0
push 0
push 0
push 0
push 1
push 0
push 1
push 0
push dword [0x41170f]
push 0
push 0
push 0
push dword [0x4116ff]
call sub.gdi32.dll_CreateFontA
mov dword [0x412d3c], eax
push 0x8e
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ac4], eax
push 0xa
push 3
push 0x10
push 0x10
push 0x10
call sub.comctl32.dll_ImageList_Create
mov dword [0x412c18], eax
push 2
push dword [0x412abc]
call sub.user32.dll_LoadBitmapA
push eax
push 0
push eax
push dword [0x412c18]
call sub.comctl32.dll_ImageList_Add
call sub.gdi32.dll_DeleteObject
push 3
push dword [0x412abc]
call sub.user32.dll_LoadBitmapA
push eax
push 0
push eax
push dword [0x412c18]
call sub.comctl32.dll_ImageList_Add
call sub.gdi32.dll_DeleteObject
push 4
push dword [0x412abc]
call sub.user32.dll_LoadBitmapA
push eax
push 0
push eax
push dword [0x412c18]
call sub.comctl32.dll_ImageList_Add
call sub.gdi32.dll_DeleteObject
push 8
push dword [0x412abc]
call sub.user32.dll_LoadBitmapA
push eax
push 0
push eax
push dword [0x412c18]
call sub.comctl32.dll_ImageList_Add
call sub.gdi32.dll_DeleteObject
push dword [0x412c18]
push 0
push 0x1109
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
push 0x90
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b40], eax
push 0x4020
push 0
push 0x1036
push eax
call sub.user32.dll_SendMessageA
mov dword [0x412c76], 0
mov dword [0x41294c], 6
mov dword [0x412958], 0x410da4
mov dword [0x412954], 0x75
push 0x41294c
push 0
push 0x101b
push dword [0x412b40]
call sub.user32.dll_SendMessageA
mov dword [0x412958], 0x410da9
mov dword [0x412954], 0x42
push 0x41294c
push 0
push 0x101b
push dword [0x412b40]
call sub.user32.dll_SendMessageA
mov dword [0x412958], 0x410d9a
mov dword [0x412954], 0x78
push 0x41294c
push 0
push 0x101b
push dword [0x412b40]
call sub.user32.dll_SendMessageA
mov dword [0x412958], 0x410d96
mov dword [0x412954], 0x9e
push 0x41294c
push 0
push 0x101b
push dword [0x412b40]
call sub.user32.dll_SendMessageA
mov dword [0x412d48], 0
mov dword [0x412d4c], 0
mov dword [0x412d50], 0x14c
mov dword [0x412d54], 0xbb
push 0x412d48
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
push 0
call sub.gdi32.dll_CreateCompatibleDC
mov dword [0x412d44], eax
push 1
push dword [0x412abc]
call sub.user32.dll_LoadBitmapA
push eax
push dword [0x412d44]
call sub.gdi32.dll_SelectObject
push 3
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412acc], eax
push 0x64
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b90], eax
push 0x66
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b9c], eax
push 0x67
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ba0], eax
push 0x65
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b94], eax
push 0x6b
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ba8], eax
push 0x6c
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412bac], eax
push 0x6e
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412bb8], eax
push 0x6f
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412bbc], eax
push 6
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ad4], eax
push 8
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b8c], eax
push 0xb
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412adc], eax
push 0xc
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ae0], eax
push 0xd
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ae4], eax
push 0xe
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ae8], eax
push 0x91
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412aec], eax
push 0x8d
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b88], eax
push 0x92
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412be0], eax
push 0x93
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412be4], eax
push 0x94
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412be8], eax
push 0xf
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412af8], eax
push 0x10
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412af0], eax
push eax
call sub.user32.dll_SetFocus
push 0x11
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412af4], eax
push 0x12
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412afc], eax
push 0x14
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b00], eax
push 0x15
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b08], eax
push 0x17
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b0c], eax
push 0x18
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b10], eax
push 0x19
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b14], eax
push 0x1a
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b18], eax
push 0x1b
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b1c], eax
push 0x1e
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b20], eax
push 0x1f
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b24], eax
push 0x23
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b34], eax
push 0x17e
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b3c], eax
push 0x16
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b5c], eax
push 9
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b60], eax
push 0xa
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b68], eax
push 0x17d
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412bfc], eax
push 0x27
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b70], eax
push 0x28
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b74], eax
push str.Any_Windows
push 0
push 0x143
push eax
call sub.user32.dll_SendMessageA
push str.Windows_10
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_8.1
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_8
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_7
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_Vista
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_2003
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_XP
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_2000
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_Me
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_98
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_95
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_NT_4.0
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_NT_3.51
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push 0
push 0
push 0x14e
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push 0x34
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b78], eax
push 0x35
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b7c], eax
push 0x3c
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412c0c], eax
push 0x3d
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b04], eax
push 0x3e
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412c04], eax
push 0x6c
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412bac], eax
push 7
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ad8], eax
push str.Create_your_installation_packages_in_seconds__r_nAnswer_only_on_some_questions_and_fill_required_values.
push eax
call sub.user32.dll_SetWindowTextA
push 0x25
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b6c], eax
push 0
push 0x100
push 0xc5
push eax
call sub.user32.dll_SendMessageA
push 0x24
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b38], eax
push 0
push 0x100
push 0xc5
push eax
call sub.user32.dll_SendMessageA
push 0x20
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b28], eax
push 0
push 0xffff
push 0xc5
push eax
call sub.user32.dll_SendMessageA
push 0x21
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b30], eax
push 0
push 0xffff
push 0xc5
push eax
call sub.user32.dll_SendMessageA
push 0x36
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b80], eax
xor ecx, ecx
mov eax, str.x.x_and_above
mov edx, dword [ecx*4 + str.1.0_1.1_2.0_3.0_3.5_4.0_4.5]
mov dword [eax], edx
inc ecx
push ecx
push eax
push 0
push 0x143
push dword [0x412b80]
call sub.user32.dll_SendMessageA
pop ecx
cmp ecx, 7
jne 0x40258b
push 0
push 0
push 0x14e
push dword [0x412b80]
call sub.user32.dll_SendMessageA
push 4
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412c10], eax
push 0
push dword [0x412d34]
push 0x30
push eax
call sub.user32.dll_SendMessageA
push 5
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ad0], eax
push 0
push dword [0x412c14]
push 0x30
push eax
call sub.user32.dll_SendMessageA
push 0x22
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b2c], eax
push 0
push 0xffff
push 0xc5
push eax
call sub.user32.dll_SendMessageA
push str.Thank_you_for_using_our_software.
push dword [0x412b2c]
call sub.user32.dll_SetWindowTextA
push 0x26
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b64], eax
push str.System_Drive
push 0
push 0x143
push eax
call sub.user32.dll_SendMessageA
push str.Program_Files
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.Common_Files
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.Windows
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.System
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.User_Profile
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.Application_Data
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.My_Documents
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push 0x410d64
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.Current_Directory
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.Dont_use__
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push 0
push 1
push 0x14e
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push 0x3f
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412c08], eax
push str._SetupPath_
push 0
push 0x143
push eax
call sub.user32.dll_SendMessageA
push str._ProgramFiles_
push 0
push 0x143
push dword [0x412c08]
call sub.user32.dll_SendMessageA
push str._Windows_
push 0
push 0x143
push dword [0x412c08]
call sub.user32.dll_SendMessageA
push str._System_
push 0
push 0x143
push dword [0x412c08]
call sub.user32.dll_SendMessageA
push str.http:__
push 0
push 0x143
push dword [0x412c08]
call sub.user32.dll_SendMessageA
push 0x6d
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412bb0], eax
push str.Left
push 0
push 0x143
push eax
call sub.user32.dll_SendMessageA
push str.Center
push 0
push 0x143
push dword [0x412bb0]
call sub.user32.dll_SendMessageA
push str.Right
push 0
push 0x143
push dword [0x412bb0]
call sub.user32.dll_SendMessageA
push 0
push 2
push 0x14e
push dword [0x412bb0]
call sub.user32.dll_SendMessageA
push 0x68
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ba4], eax
push str.1_sec
push 0
push 0x143
push dword [0x412ba4]
call sub.user32.dll_SendMessageA
mov eax, str.1_sec
inc byte [eax]
cmp byte [eax], 0x3a
jne 0x402841
mov byte [eax], 0x31
push 0
push 2
push 0x14e
push dword [0x412ba4]
call sub.user32.dll_SendMessageA
mov dword [0x412824], 0
mov dword [0x412828], 0
mov dword [0x41282c], 0x14c
mov dword [0x412830], 0x26
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412834], 0xe
mov dword [0x412838], 0x90
mov dword [0x41283c], 0x13c
mov dword [0x412840], 0x9c
push 0x412834
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
push 0x2000
push 8
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapAlloc
mov dword [0x412c3d], eax
add eax, 0x100
mov dword [0x412c41], eax
cmp byte [0x412c28], 0xff
je 0x4034fe
cmp byte [0x412c28], 0xfe
je 0x40296d
call sub.KERNEL32.DLL_GetCommandLineA
push eax
push eax
call sub.KERNEL32.DLL_lstrlenA
mov ecx, eax
xor edx, edx
pop esi
lodsb al, byte [esi]
cmp al, 0x22
jne 0x402933
inc edx
cmp edx, 3
jne 0x40293d
mov ebx, esi
inc edx
jmp 0x40294b
cmp edx, 5
jne 0x40294b
mov byte [esi - 1], 0
mov ecx, 1
dec ecx
jne 0x40292d
cmp edx, 3
jl 0x402960
push ebx
push 0x411a0b
call sub.KERNEL32.DLL_lstrcpyA
jmp 0x40296d
cmp byte [0x412c28], 0xfe
jne 0x403505
push 0
push 0x411a0b
call sub.KERNEL32.DLL__lopen
mov dword [0x412c7e], eax
cmp eax, 0xffffffff
je 0x4034fe
push 0
push eax
call sub.KERNEL32.DLL_GetFileSize
mov dword [0x412c2d], eax
cmp eax, 0x10
jl 0x4034f3
inc eax
push eax
push 8
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapAlloc
mov dword [0x412c4d], eax
push dword [0x412c2d]
push eax
push dword [0x412c7e]
call sub.KERNEL32.DLL__hread
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.WindowTitle
push str.Setup
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x4029fc
push dword [0x412c4d]
push dword [0x412b20]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.ProductName
push str.Setup
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402a35
push dword [0x412c4d]
push dword [0x412b24]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0x40
push 0x411d17
push 0x4112fa
push str.BandText
push str.Setup
call sub.KERNEL32.DLL_GetPrivateProfileStringA
push 0x411a0b
push 0x100
push 0x411d57
push 0x4112fa
push str.BandLink
push str.Setup
call sub.KERNEL32.DLL_GetPrivateProfileStringA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.SplashScreen
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402ab1
push dword [0x412c4d]
push dword [0x412b9c]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.SplashScreenDelay
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402b19
mov eax, dword [0x412c4d]
mov ecx, 2
cmp byte [eax], 0x31
jne 0x402aec
xor ecx, ecx
jmp 0x402b06
cmp byte [eax], 0x32
jne 0x402af4
dec ecx
jmp 0x402b06
cmp byte [eax], 0x34
jne 0x402afc
inc ecx
jmp 0x402b06
cmp byte [eax], 0x35
jne 0x402b06
mov ecx, 4
push 0
push ecx
push 0x14e
push dword [0x412ba4]
call sub.user32.dll_SendMessageA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.Header
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402b52
push dword [0x412c4d]
push dword [0x412ba8]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.HeaderFontColor
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
mov byte [0x412d25], 0
mov eax, dword [0x412c4d]
cmp word [eax], 0x2d
jne 0x402b92
inc byte [0x412d25]
xor eax, eax
jmp 0x402b9d
push dword [0x412c4d]
call fcn.0040ea38
mov dword [0x412a7c], eax
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.WizardBitmap
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402bdb
push dword [0x412c4d]
push dword [0x412bbc]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.WizardFontColor
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402c13
push dword [0x412c4d]
call fcn.0040ea38
mov dword [0x412d26], eax
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.HeaderJustify
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402c7e
push str.Left
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
je 0x402c6b
push str.Center
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402c66
inc eax
jmp 0x402c6b
mov eax, 2
push 0
push eax
push 0x14e
push dword [0x412bb0]
call sub.user32.dll_SendMessageA
push str._r_n_FirstMessage__r_n
call fcn.0040929c
or eax, eax
je 0x402c9d
push ecx
push eax
push dword [0x412b28]
call sub.user32.dll_SetWindowTextA
pop eax
mov byte [eax], 0xd
push str._r_n_LastMessage__r_n
call fcn.0040929c
or eax, eax
je 0x402cbc
push ecx
push eax
push dword [0x412b2c]
call sub.user32.dll_SetWindowTextA
pop eax
mov byte [eax], 0xd
push str._r_n_LicenseAgreement__r_n
call fcn.0040929c
or eax, eax
je 0x402cdb
push ecx
push eax
push dword [0x412b30]
call sub.user32.dll_SetWindowTextA
pop eax
mov byte [eax], 0xd
lea eax, [0x411907]
mov byte [eax], 0
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.SourceFolder
push str.SetupFiles
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402d2d
push dword [0x412c4d]
push dword [0x412b34]
call sub.user32.dll_SetWindowTextA
push dword [0x412c4d]
push 0x411907
call sub.KERNEL32.DLL_lstrcpyA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.SpecialFolder
push str.SetupFiles
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402e84
push str.System_Drive
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
je 0x402e71
push str.Program_Files
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402d8b
inc eax
jmp 0x402e71
push str.Common_Files
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402da9
mov eax, 2
jmp 0x402e71
push str.Windows
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402dc7
mov eax, 3
jmp 0x402e71
push str.System
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402de5
mov eax, 4
jmp 0x402e71
push str.User_Profile
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402e00
mov eax, 5
jmp 0x402e71
push str.Application_Data
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402e1b
mov eax, 6
jmp 0x402e71
push str.My_Documents
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402e36
mov eax, 7
jmp 0x402e71
push 0x410d64
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402e51
mov eax, 8
jmp 0x402e71
push str.Current_Directory
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402e6c
mov eax, 9
jmp 0x402e71
mov eax, 0xa
push 0
push eax
push 0x14e
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.SetupPath
push str.SetupFiles
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402ebd
push dword [0x412c4d]
push dword [0x412b6c]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.SetupFile
push str.SetupFiles
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402ef6
push dword [0x412c4d]
push dword [0x412b3c]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push 0x4112a5
push 0x410553
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402f2f
push dword [0x412c4d]
push dword [0x412b38]
call sub.user32.dll_SetWindowTextA
push str._r_n_Registry__r_n
call fcn.0040929c
sub ecx, eax
or ecx, ecx
je 0x403111
inc eax
cmp byte [eax], 0
je 0x403111
cmp byte [eax - 1], 0x5b
jne 0x402f43
mov edx, eax
inc eax
cmp byte [eax], 0x5d
jne 0x402f55
mov byte [eax], 0
pushal
push dword [0x412c76]
inc dword [0x412c76]
mov dword [0x41296c], 5
pop dword [0x412970]
mov dword [0x41298c], 0
mov dword [0x412974], 0
mov dword [0x412980], edx
push 0x41296c
push 0
push 0x1007
push dword [0x412b40]
call sub.user32.dll_SendMessageA
popal
inc eax
cmp word [eax], 0xa0d
jne 0x403111
inc eax
inc eax
cmp byte [eax], 0x5b
je 0x402f53
cmp byte [eax], 0x22
je 0x402fcd
cmp byte [eax], 0x40
je 0x403007
inc eax
jmp 0x402fbb
mov edx, eax
inc edx
inc eax
cmp byte [eax], 0x22
jne 0x402fd0
mov byte [eax], 0
pushal
mov eax, dword [0x412c76]
dec eax
mov dword [0x412980], edx
mov dword [0x412974], 1
push 0x41296c
push eax
push 0x102e
push dword [0x412b40]
call sub.user32.dll_SendMessageA
popal
inc eax
cmp word [eax], 0x223d
jne 0x403047
inc eax
inc eax
mov edx, eax
cmp word [eax], 0x5c5c
je 0x403021
cmp word [eax], 0x225c
jne 0x40302e
pushal
mov ecx, eax
inc ecx
push ecx
push eax
call sub.KERNEL32.DLL_lstrcpyA
popal
inc eax
cmp byte [eax], 0x22
je 0x40303d
cmp word [eax], 0xa0d
je 0x403079
inc eax
jmp 0x403013
mov byte [eax], 0
mov ebx, str.REG_SZ
jmp 0x4030b0
cmp dword [eax], 0x6f77643d
jne 0x403079
add eax, 7
mov edx, eax
add eax, 8
mov byte [eax], 0
mov ebx, str.REG_DWORD
pushal
push edx
call fcn.0040ea70
push 0x4116ff
push eax
call fcn.0040eac0
popal
mov edx, 0x4116ff
jmp 0x4030b0
pushal
mov eax, dword [0x412c76]
dec eax
mov dword [0x412980], 0
mov dword [0x412974], 1
push 0x41296c
push eax
push 0x102e
push dword [0x412b40]
call sub.user32.dll_SendMessageA
popal
jmp 0x402f43
pushal
mov eax, dword [0x412c76]
dec eax
mov dword [0x412980], ebx
mov dword [0x412974], 2
push 0x41296c
push eax
push 0x102e
push dword [0x412b40]
call sub.user32.dll_SendMessageA
popal
pushal
mov eax, dword [0x412c76]
dec eax
mov dword [0x412980], edx
mov dword [0x412974], 3
push 0x41296c
push eax
push 0x102e
push dword [0x412b40]
call sub.user32.dll_SendMessageA
popal
jmp 0x402f43
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.OperatingSystem
push str.Requirements
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x403157
push dword [0x412c4d]
call fcn.0040ea38
push 0
push eax
push 0x14e
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.NetFramework
push str.Requirements
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x4031e6
mov eax, dword [0x412c4d]
xor ecx, ecx
cmp dword [eax], 0x302e31
je 0x4031c4
inc ecx
cmp dword [eax], 0x312e31
je 0x4031c4
inc ecx
cmp dword [eax], 0x302e32
je 0x4031c4
inc ecx
cmp dword [eax], 0x302e33
je 0x4031c4
inc ecx
cmp dword [eax], 0x352e33
je 0x4031c4
inc ecx
cmp dword [eax], 0x302e34
je 0x4031c4
inc ecx
cmp dword [eax], 0x352e34
jne 0x4031e6
push 0
push ecx
push 0x14e
push dword [0x412b80]
call sub.user32.dll_SendMessageA
push 1
push 0x35
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.NetFrameworkLink
push str.Requirements
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x40321e
push dword [0x412c4d]
push str.http:__www.microsoft.com_en_us_download_details.aspx_id17718
call sub.KERNEL32.DLL_lstrcpyA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.AdminRights
push str.Requirements
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x40325f
mov eax, dword [0x412c4d]
cmp byte [eax], 0x30
je 0x40325f
push 1
push 0x34
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.RunCommand
push str.AfterInstalling
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x4032a7
push dword [0x412c4d]
push dword [0x412c08]
call sub.user32.dll_SetWindowTextA
push 1
push 0x3e
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.Reboot
push str.AfterInstalling
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x4032e8
mov eax, dword [0x412c4d]
cmp byte [eax], 0x30
je 0x4032e8
push 1
push 0x3c
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
cmp byte [0x411907], 0
je 0x4034e0
push 0x411907
call sub.KERNEL32.DLL_SetCurrentDirectoryA
or eax, eax
je 0x4034e0
push 0x411907
push dword [0x412c3d]
call sub.KERNEL32.DLL_lstrcpyA
push eax
call sub.KERNEL32.DLL_lstrlenA
mov dword [0x412c82], eax
mov dword [0x4128f0], 0
mov dword [0x4128f4], 0xffff0000
mov dword [0x4128f8], 0x23
mov dword [0x412908], 0x411607
mov dword [0x412910], 0
mov dword [0x412914], 0
push 0x4128f0
push 0
push 0x1100
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
mov dword [0x412c1c], eax
mov byte [0x412c94], 0
push 1
push dword [0x412ac4]
call fcn.00406e5b
push dword [0x412c1c]
push 2
push 0x1102
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
push dword [0x412c1c]
pop dword [0x4128f0]
mov dword [0x4128f4], 0xffff0001
mov dword [0x412908], 0x410e62
mov dword [0x412910], 0xfffffffe
mov dword [0x412914], 1
push 0x4128f0
push 0
push 0x1100
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
mov dword [0x412c2d], eax
mov dword [0x412924], 0x18
mov dword [0x412930], 0x10
mov dword [0x41292c], 0x10
mov dword [0x412928], eax
push 0x412924
push 0
push 0x110d
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
push 0x411a0b
push 0x100
push dword [0x412c4d]
push 0x4112fa
push str.Uninstall.exe
push str.Shortcuts
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x4034e0
mov esi, dword [0x412c4d]
mov ecx, dword [0x412c41]
cmp dword [ecx], 0
je 0x403472
add ecx, 9
jmp 0x403468
mov edx, dword [0x412c2d]
mov dword [ecx], edx
lodsb al, byte [esi]
cmp al, 0x64
jne 0x403485
mov byte [ecx + 4], 1
jmp 0x4034ab
cmp al, 0x73
jne 0x40348f
mov byte [ecx + 5], 1
jmp 0x4034ab
cmp al, 0x6d
jne 0x403499
mov byte [ecx + 6], 1
jmp 0x4034ab
cmp al, 0x70
jne 0x4034a3
mov byte [ecx + 7], 1
jmp 0x4034ab
cmp al, 0x71
jne 0x4034ab
mov byte [ecx + 8], 1
cmp al, 0
jne 0x40347a
mov dword [0x412928], edx
mov dword [0x41293c], 2
mov dword [0x412924], 0x12
push 0x412924
push 0
push 0x110d
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
push dword [0x412c4d]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
push dword [0x412c7e]
call sub.KERNEL32.DLL__lclose
mov byte [0x412c28], 1
call fcn.00405164
jmp 0x40515e
cmp dword [ebp + 0xc], 0x111
jne 0x404ccb
mov edx, eax
shr edx, 0x10
cmp dx, 1
jne 0x40353e
push 0
push 0x412824
push dword [0x412ac0]
call sub.user32.dll_InvalidateRect
jmp 0x403c2f
cmp dx, 0x300
jne 0x403973
mov eax, dword [ebp + 0x14]
cmp dword [0x412ba8], eax
jne 0x4036cb
mov byte [0x412cd7], 0
cmp byte [0x412cd1], 0
je 0x403582
push dword [0x412c55]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
mov byte [0x412cd1], 0
push 0
push 0x412824
push dword [0x412ac0]
call sub.user32.dll_InvalidateRect
push 0x104
push 0x4116ff
push dword [0x412ba8]
call sub.user32.dll_GetWindowTextA
or eax, eax
je 0x40515e
inc byte [0x412cd7]
push 0
push 0x4116ff
call sub.KERNEL32.DLL__lopen
cmp eax, 0xffffffff
je 0x40515e
mov dword [0x412c29], eax
push 0
push eax
call sub.KERNEL32.DLL_GetFileSize
mov dword [0x412cb5], eax
inc byte [0x412cd7]
push eax
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapAlloc
mov dword [0x412c55], eax
or eax, eax
jne 0x40360b
push dword [0x412c29]
call sub.KERNEL32.DLL__lclose
jmp 0x40515e
push dword [0x412cb5]
push eax
push dword [0x412c29]
call sub.KERNEL32.DLL__hread
push dword [0x412c29]
call sub.KERNEL32.DLL__lclose
mov ecx, dword [0x412c55]
mov ax, word [ecx]
mov edx, dword [ecx + 2]
inc byte [0x412cd7]
cmp dword [0x412cb5], edx
jne 0x40515e
cmp ax, 0x4d42
jne 0x40515e
mov eax, 0xe
add eax, ecx
mov dword [0x412cbd], eax
mov esi, eax
add ecx, dword [ecx + 0xa]
mov dword [0x412cc1], ecx
xor eax, eax
cmp dword [esi], 0xc
jne 0x40367d
mov ax, word [esi + 4]
mov dword [0x412cc5], eax
mov ax, word [esi + 6]
jmp 0x40368f
mov eax, dword [esi + 4]
mov dword [0x412cc5], eax
mov eax, dword [esi + 8]
cmp eax, 1
jae 0x40368f
neg eax
mov dword [0x412cc9], eax
inc byte [0x412cd7]
cmp dword [0x412cc5], 0x1f2
jbe 0x4036b0
mov dword [0x412cc5], 0x1f2
cmp eax, 0x3c
jbe 0x4036bf
mov dword [0x412cc9], 0x3c
mov byte [0x412cd1], 1
jmp 0x403c2f
cmp dword [0x412b9c], eax
jne 0x40381f
cmp dword [0x412cd3], 0
je 0x4036fd
push dword [0x412c59]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
mov dword [0x412cd3], 0
push 0x104
push 0x4116ff
push dword [0x412b9c]
call sub.user32.dll_GetWindowTextA
or eax, eax
je 0x403727
push 0
push 0x4116ff
call sub.KERNEL32.DLL__lopen
cmp eax, 0xffffffff
jne 0x40374a
push 0
push 6
push 0x401
push dword [0x412bc4]
call sub.user32.dll_SendMessageA
mov dword [0x412cd3], 0
jmp 0x40515e
mov dword [0x412c29], eax
push 0
push eax
call sub.KERNEL32.DLL_GetFileSize
mov dword [0x412cd3], eax
push eax
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapAlloc
or eax, eax
je 0x403727
mov dword [0x412c59], eax
push dword [0x412cd3]
push eax
push dword [0x412c29]
call sub.KERNEL32.DLL__hread
push dword [0x412c29]
call sub.KERNEL32.DLL__lclose
mov ecx, dword [0x412c59]
mov ax, word [ecx]
mov edx, dword [ecx + 2]
cmp dword [0x412cd3], edx
je 0x4037bc
push dword [0x412c59]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
jmp 0x403727
cmp ax, 0x4d42
jne 0x4037a4
mov eax, 0xe
add eax, ecx
mov dword [0x412cdd], eax
mov esi, eax
add ecx, dword [ecx + 0xa]
mov dword [0x412ce1], ecx
xor eax, eax
cmp dword [esi], 0xc
jne 0x4037ef
mov ax, word [esi + 4]
mov dword [0x412ce5], eax
mov ax, word [esi + 6]
jmp 0x403801
mov eax, dword [esi + 4]
mov dword [0x412ce5], eax
mov eax, dword [esi + 8]
cmp eax, 1
jae 0x403801
neg eax
mov dword [0x412ce9], eax
push 1
push 6
push 0x401
push dword [0x412bc4]
call sub.user32.dll_SendMessageA
jmp 0x403c2f
cmp dword [0x412bbc], eax
jne 0x403c2f
cmp dword [0x412cb9], 0
je 0x403851
push dword [0x412c5d]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
mov dword [0x412cb9], 0
push 0x104
push 0x4116ff
push dword [0x412bbc]
call sub.user32.dll_GetWindowTextA
or eax, eax
je 0x40387b
push 0
push 0x4116ff
call sub.KERNEL32.DLL__lopen
cmp eax, 0xffffffff
jne 0x40389e
push 0
push 0xe
push 0x401
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
mov dword [0x412cb9], 0
jmp 0x40515e
mov dword [0x412c29], eax
push 0
push eax
call sub.KERNEL32.DLL_GetFileSize
mov dword [0x412cb9], eax
push eax
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapAlloc
or eax, eax
je 0x40387b
mov dword [0x412c5d], eax
push dword [0x412cb9]
push eax
push dword [0x412c29]
call sub.KERNEL32.DLL__hread
push dword [0x412c29]
call sub.KERNEL32.DLL__lclose
mov ecx, dword [0x412c5d]
mov ax, word [ecx]
mov edx, dword [ecx + 2]
cmp dword [0x412cb9], edx
je 0x403910
push dword [0x412c5d]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
jmp 0x40387b
cmp ax, 0x4d42
jne 0x4038f8
mov eax, 0xe
add eax, ecx
mov dword [0x412ced], eax
mov esi, eax
add ecx, dword [ecx + 0xa]
mov dword [0x412cf1], ecx
xor eax, eax
cmp dword [esi], 0xc
jne 0x403943
mov ax, word [esi + 4]
mov dword [0x412cf5], eax
mov ax, word [esi + 6]
jmp 0x403955
mov eax, dword [esi + 4]
mov dword [0x412cf5], eax
mov eax, dword [esi + 8]
cmp eax, 1
jae 0x403955
neg eax
mov dword [0x412cf9], eax
push 1
push 0xe
push 0x401
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
jmp 0x403c2f
cmp ax, 0x25
je 0x40397f
cmp ax, 0x26
jne 0x403989
call fcn.004090b7
jmp 0x403c2f
cmp ax, 0x35
jne 0x4039c7
push 0x35
push dword [0x412ac0]
call sub.user32.dll_IsDlgButtonChecked
cmp eax, 1
jne 0x4039a8
mov eax, 5
jmp 0x4039aa
xor eax, eax
push eax
push dword [0x412bd4]
push eax
push dword [0x412b80]
call sub.user32.dll_ShowWindow
call sub.user32.dll_ShowWindow
jmp 0x403c2f
cmp ax, 0x3e
jne 0x403a14
push 0x3e
push dword [0x412ac0]
call sub.user32.dll_IsDlgButtonChecked
cmp eax, 1
jne 0x4039f5
push 0
push 0x3c
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
mov eax, 5
jmp 0x4039f7
xor eax, eax
push eax
push dword [0x412bdc]
push eax
push dword [0x412c08]
call sub.user32.dll_ShowWindow
call sub.user32.dll_ShowWindow
jmp 0x403c2f
cmp ax, 0x3c
jne 0x403a30
push 0
push 0x3e
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
jmp 0x4039f5
cmp ax, 0xf
jne 0x403a77
cmp byte [0x412c28], 0xd
jne 0x405154
push dword [0x412c7e]
call sub.KERNEL32.DLL_CloseHandle
push 0x104
push 0x4116ff
push dword [0x412b3c]
call sub.user32.dll_GetWindowTextA
push 0x4116ff
call sub.KERNEL32.DLL_DeleteFileA
jmp 0x405154
cmp ax, 0x10
jne 0x403a89
pushal
call fcn.00405164
popal
jmp 0x403c2f
cmp ax, 0x11
jne 0x403a99
call fcn.00407395
jmp 0x403c2f
cmp ax, 0x12
jne 0x403abe
push 0
push 0x407efa
push dword [0x412ac0]
push 3
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x403c2f
cmp ax, 0x14
jne 0x403b6a
push dword [ebp + 8]
pop dword [0x4128d0]
mov dword [0x4128d4], 0
mov dword [0x4128d8], 0
mov dword [0x4128dc], 0x410cc3
mov dword [0x4128e0], 0x15
push 0x40946c
pop dword [0x4128e4]
mov dword [0x4128ec], 0
push 0x4128d0
call sub.shell32.dll_SHBrowseForFolderA
or eax, eax
je 0x40515e
push 0x4116ff
push eax
call sub.shell32.dll_SHGetPathFromIDListA
or eax, eax
je 0x40515e
push 0x4116ff
push dword [0x412b34]
call sub.user32.dll_SetWindowTextA
push 0x4116ff
call sub.KERNEL32.DLL_lstrlenA
add eax, 0x4116ff
dec eax
cmp byte [eax - 1], 0x5c
jne 0x403b52
push eax
push dword [0x412b6c]
call sub.user32.dll_SetWindowTextA
jmp 0x403c2f
cmp ax, 0x3d
jne 0x403c2f
push 0x100
push 0x411803
push dword [0x412b3c]
call sub.user32.dll_GetWindowTextA
or eax, eax
je 0x403ba2
dec eax
or eax, eax
je 0x403b9b
cmp byte [eax + 0x411803], 0x5c
jne 0x403b8d
mov byte [eax + 0x411803], 0
mov dword [0x412870], 0x411803
mov byte [0x4116ff], 0
mov dword [0x412844], 0x4c
mov dword [0x412878], 0x28180e
mov eax, dword [0x412ac0]
mov dword [0x412848], eax
mov eax, dword [0x412abc]
mov dword [0x41284c], eax
mov dword [0x412850], 0x410ed4
mov dword [0x412860], 0x4116ff
mov dword [0x412864], 0x104
mov dword [0x412874], 0
mov dword [0x412880], 0x410ee9
push 0x412844
call sub.comdlg32.dll_GetSaveFileNameA
or eax, eax
je 0x40515e
push 0x4116ff
push dword [0x412b3c]
call sub.user32.dll_SetWindowTextA
cmp dword [ebp + 0x10], 5
je 0x4012c8
cmp dword [ebp + 0x10], 7
je 0x404996
cmp dword [ebp + 0x10], 0x65
jne 0x403cb0
mov byte [0x412c28], 0xff
push dword [0x412c59]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
push dword [0x412c55]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
push dword [0x412c3d]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
push 0x412824
push dword [0x412ac0]
call sub.user32.dll_GetWindowRect
push dword [0x412ac0]
call sub.user32.dll_DestroyWindow
mov byte [0x412cd1], 0
jmp 0x40515e
cmp dword [ebp + 0x10], 2
jne 0x403d30
mov byte [0x411a0b], 0
mov dword [0x412844], 0x4c
mov dword [0x412878], 0x28180c
mov eax, dword [0x412ac0]
mov dword [0x412848], eax
mov eax, dword [0x412abc]
mov dword [0x41284c], eax
mov dword [0x412850], 0x410eaa
mov dword [0x412860], 0x411a0b
mov dword [0x412864], 0x104
mov dword [0x412874], 0
push 0x412844
call sub.comdlg32.dll_GetOpenFileNameA
or eax, eax
je 0x40515e
mov byte [0x412c28], 0xfe
jmp 0x403c50
cmp dword [ebp + 0x10], 3
jne 0x404927
mov byte [0x4116ff], 0
mov dword [0x412844], 0x4c
mov dword [0x412878], 0x28180e
mov eax, dword [0x412ac0]
mov dword [0x412848], eax
mov eax, dword [0x412abc]
mov dword [0x41284c], eax
mov dword [0x412850], 0x410eaa
mov dword [0x412860], 0x4116ff
mov dword [0x412864], 0x104
mov dword [0x412874], 0
mov dword [0x412870], 0
mov dword [0x412880], 0x410ecd
push 0x412844
call sub.comdlg32.dll_GetSaveFileNameA
or eax, eax
je 0x40515e
push 0
push 0x4116ff
call sub.KERNEL32.DLL__lcreat
mov dword [0x412c7e], eax
push 0x30
push str.__InstallSimple_project_r_n_r_n_Setup__r_nWindowTitle
push eax
call sub.KERNEL32.DLL__hwrite
push 0x104
push 0x4116ff
push dword [0x412b20]
call sub.user32.dll_GetWindowTextA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 2
push 0x4112fb
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xc
push 0x410ffe
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x104
push 0x4116ff
push dword [0x412b24]
call sub.user32.dll_GetWindowTextA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x411d17
call sub.KERNEL32.DLL_lstrlenA
or eax, eax
je 0x403ea7
push eax
push 0xb
push str._r_nBandText
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x411d17
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x411d57
call sub.KERNEL32.DLL_lstrlenA
or eax, eax
je 0x403ea7
push eax
push 0xb
push str._r_nBandLink
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x411d57
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x1d
push str._r_n_r_n_Graphics__r_nSplashScreen
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x104
push 0x4116ff
push dword [0x412b9c]
call sub.user32.dll_GetWindowTextA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x14
push str._r_nSplashScreenDelay
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0
push 0
push 0x147
push dword [0x412ba4]
call sub.user32.dll_SendMessageA
add eax, 0x31
mov dword [0x412c29], eax
push 1
push 0x412c29
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 9
push str._r_nHeader
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x104
push 0x4116ff
push dword [0x412ba8]
call sub.user32.dll_GetWindowTextA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x10
push str._r_nHeaderJustify
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0
push 0
push 0x147
push dword [0x412bb0]
call sub.user32.dll_SendMessageA
mov ecx, str.Left
mov edx, 4
cmp eax, 1
jne 0x403f98
mov ecx, str.Center
mov edx, 6
jmp 0x403fa7
cmp eax, 2
jne 0x403fa7
mov ecx, str.Right
mov edx, 5
push edx
push ecx
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x12
push str._r_nHeaderFontColor
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x4116ff
push dword [0x412a7c]
call fcn.0040eac0
mov eax, 0x4116ff
xor ecx, ecx
cmp byte [0x412d25], 0
je 0x403fee
mov word [eax], 0x2d
inc ecx
jmp 0x403ff6
dec ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x403fef
push ecx
push eax
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xf
push str._r_nWizardBitmap
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x104
push 0x4116ff
push dword [0x412bbc]
call sub.user32.dll_GetWindowTextA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x12
push str._r_nWizardFontColor
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x4116ff
push dword [0x412d26]
call fcn.0040eac0
push 0x4116ff
call sub.KERNEL32.DLL_lstrlenA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x14
push str._r_n_r_n_FirstMessage__r_n
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xffff
push 8
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapAlloc
mov dword [0x412c45], eax
push 0xffff
push eax
push dword [0x412b28]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x11
push str._r_n_LastMessage__r_n
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xffff
push dword [0x412c45]
push dword [0x412b2c]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
or eax, eax
je 0x404114
push 2
push 0x4112fb
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x16
push str._r_n_LicenseAgreement__r_n
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xffff
push dword [0x412c45]
push dword [0x412b30]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
or eax, eax
je 0x404164
push 2
push 0x4112fb
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x1d
push str._r_n_SetupFiles__r_nSourceFolder
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x200
push dword [0x412c45]
push dword [0x412b34]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x10
push str._r_nSpecialFolder
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0
push 0
push 0x147
push dword [0x412b64]
call sub.user32.dll_SendMessageA
or eax, eax
jne 0x4041d4
push 0xc
push str.System_Drive
jmp 0x404259
cmp eax, 1
jne 0x4041e2
push 0xd
push str.Program_Files
jmp 0x404259
cmp eax, 2
jne 0x4041f0
push 0xc
push str.Common_Files
jmp 0x404259
cmp eax, 3
jne 0x4041fe
push 7
push str.Windows
jmp 0x404259
cmp eax, 4
jne 0x40420c
push 6
push str.System
jmp 0x404259
cmp eax, 5
jne 0x40421a
push 0xc
push str.User_Profile
jmp 0x404259
cmp eax, 6
jne 0x404228
push 0x10
push str.Application_Data
jmp 0x404259
cmp eax, 7
jne 0x404236
push 0xc
push str.My_Documents
jmp 0x404259
cmp eax, 8
jne 0x404244
push 7
push 0x410d64
jmp 0x404259
cmp eax, 9
jne 0x404252
push 0x11
push str.Current_Directory
jmp 0x404259
push 0xb
push str.Dont_use__
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xc
push str._r_nSetupPath
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x100
push dword [0x412c45]
push dword [0x412b6c]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xc
push str._r_nSetupFile
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x100
push dword [0x412c45]
push dword [0x412b3c]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x1e
push str._r_n_r_n_Shortcuts__r_nProgramGroup
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x100
push dword [0x412c45]
push dword [0x412b38]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 2
push 0x4112fb
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push dword [0x412c45]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
mov esi, dword [0x412c41]
cmp dword [esi], 0
je 0x404471
push esi
mov dword [0x412924], 0x11
push dword [esi]
pop dword [0x412928]
mov dword [0x412934], 0x4116ff
push 0x412924
push 0
push 0x110c
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
or eax, eax
jne 0x404384
pop esi
jmp 0x404469
push dword [esi]
pop eax
push eax
push 3
push 0x110a
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
or eax, eax
je 0x4043ff
cmp dword [0x412c1c], eax
je 0x4043ff
push eax
mov dword [0x412924], 0x11
mov dword [0x412928], eax
mov dword [0x412934], 0x411803
push 0x412924
push 0
push 0x110c
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
push 0x410e60
push dword [0x412934]
call sub.KERNEL32.DLL_lstrcatA
push 0x4116ff
push eax
call sub.KERNEL32.DLL_lstrcatA
push eax
push 0x4116ff
call sub.KERNEL32.DLL_lstrcpyA
jmp 0x404386
push 0x4116ff
call sub.KERNEL32.DLL_lstrlenA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 1
push 0x411304
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
pop esi
xor eax, eax
xor ecx, ecx
cmp byte [ecx + esi + 4], 0
je 0x40444f
inc eax
pushal
lea ecx, [ecx + str.dsmpq]
push 1
push ecx
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
popal
inc ecx
cmp ecx, 5
jne 0x404431
push esi
push 2
push 0x4112fb
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
pop esi
add esi, 9
jmp 0x40433d
push 0xe
push str._r_n_Registry__r_n
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0
push 0
push 0x1004
push dword [0x412b40]
call sub.user32.dll_SendMessageA
dec eax
mov dword [0x412c7a], eax
cmp dword [0x412c7a], 0xffffffff
je 0x40469e
mov eax, 0x411a0b
mov byte [eax], 0x5b
inc eax
push eax
mov dword [0x412980], eax
mov dword [0x41296c], 1
mov dword [0x412984], 0x104
mov dword [0x412974], 0
push 0x41296c
push dword [0x412c7a]
push 0x102d
push dword [0x412b40]
call sub.user32.dll_SendMessageA
pop ecx
mov dword [ecx + eax], 0xa0d5d
add eax, 4
push eax
push 0x411a0b
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov eax, 0x411a0b
mov byte [eax], 0x22
inc eax
push eax
mov dword [0x412980], eax
mov dword [0x412974], 1
push 0x41296c
push dword [0x412c7a]
push 0x102d
push dword [0x412b40]
call sub.user32.dll_SendMessageA
pop ecx
or eax, eax
je 0x404551
mov dword [ecx + eax], 0x22
inc eax
jmp 0x404555
mov byte [ecx - 1], 0x40
mov byte [ecx + eax], 0x3d
add eax, 2
push eax
push 0x411a0b
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov dword [0x412980], 0x411a0b
mov dword [0x412974], 2
push 0x41296c
push dword [0x412c7a]
push 0x102d
push dword [0x412b40]
call sub.user32.dll_SendMessageA
cmp eax, 6
jne 0x40462c
mov eax, 0x411a0b
mov byte [eax], 0x22
push 1
push eax
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov dword [0x412980], 0x4116ff
mov dword [0x412974], 3
push 0x41296c
push dword [0x412c7a]
push 0x102d
push dword [0x412b40]
call sub.user32.dll_SendMessageA
mov ebx, 0x4116ff
mov ecx, 0x411a0b
xor esi, esi
or eax, eax
je 0x404613
mov dl, byte [ebx]
cmp dl, 0x5c
je 0x404606
cmp dl, 0x22
jne 0x40460b
mov byte [esi + ecx], 0x5c
inc esi
mov byte [esi + ecx], dl
inc esi
inc ebx
dec eax
jne 0x4045fa
mov dword [esi + ecx], 0xa0d22
add esi, 3
push esi
push ecx
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
jmp 0x404693
push 6
push str.dword:
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov dword [0x412980], 0x4116ff
mov dword [0x412974], 3
push 0x41296c
push dword [0x412c7a]
push 0x102d
push dword [0x412b40]
call sub.user32.dll_SendMessageA
mov esi, 0x4116ff
push esi
call fcn.0040ea38
push esi
push eax
call fcn.0040eb1c
mov word [esi + 8], 0xa0d
push 0xa
push esi
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
dec dword [0x412c7a]
jmp 0x40449d
push 0x12
push str._r_n_Requirements__r_n
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xf
push str.OperatingSystem
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov dword [0x4116ff], 0x3d
mov dword [0x412c29], 2
push 0
push 0
push 0x147
push dword [0x412b74]
call sub.user32.dll_SendMessageA
cmp eax, 0xa
jl 0x4046f5
inc dword [0x412c29]
push 0x411700
push eax
call fcn.0040eac0
mov eax, dword [0x412c29]
mov word [eax + 0x4116ff], 0xa0d
inc eax
inc eax
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xc
push str.NetFramework
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 1
push 0x411304
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x35
push dword [0x412ac0]
call sub.user32.dll_IsDlgButtonChecked
cmp eax, 1
jne 0x404792
push 4
push 0x412cd8
push dword [0x412b80]
call sub.user32.dll_GetWindowTextA
push 3
push 0x412cd8
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov word [0x412cd8], 0xa0d
mov dword [0x412cd8], 0xa0d
push 2
jmp 0x40479e
mov dword [0x412cd8], 0xa0d30
push 3
push 0x412cd8
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x10
push str.NetFrameworkLink
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 1
push 0x411304
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push str.http:__www.microsoft.com_en_us_download_details.aspx_id17718
call sub.KERNEL32.DLL_lstrlenA
push eax
push str.http:__www.microsoft.com_en_us_download_details.aspx_id17718
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov dword [0x412cd8], 0xa0d
push 2
push 0x412cd8
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xb
push str.AdminRights
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x34
push dword [0x412ac0]
call sub.user32.dll_IsDlgButtonChecked
mov ecx, 0x412cd8
mov dword [ecx], 0xa0d303d
cmp eax, 1
jne 0x40483d
mov word [ecx], 0x313d
push 4
push ecx
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x15
push str._r_n_AfterInstalling__r_n
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xa
push str.RunCommand
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 1
push 0x411304
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x3e
push dword [0x412ac0]
call sub.user32.dll_IsDlgButtonChecked
cmp eax, 1
jne 0x4048b9
push 0x104
push 0x4116ff
push dword [0x412c08]
call sub.user32.dll_GetWindowTextA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov dword [0x412cd8], 0xa0d
push 2
push 0x412cd8
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 6
push str.Reboot
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x3c
push dword [0x412ac0]
call sub.user32.dll_IsDlgButtonChecked
mov ecx, 0x412cd8
mov dword [ecx], 0xa0d303d
cmp eax, 1
jne 0x404909
mov word [ecx], 0x313d
push 4
push ecx
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push dword [0x412c7e]
call sub.KERNEL32.DLL__lclose
jmp 0x40515e
cmp dword [ebp + 0x10], 4
jne 0x40494c
push 0
push 0x40824a
push dword [0x412ac0]
push 5
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0x10], 8
je 0x40495c
cmp dword [ebp + 0x10], 0xd
jne 0x404a38
push 0x100
push 0x411803
push 0
call sub.KERNEL32.DLL_GetModuleFileNameA
or eax, eax
je 0x404996
dec eax
cmp byte [eax + 0x411803], 0x5c
jne 0x40496d
mov byte [eax + 0x411804], 0
push str.images
push 0x411803
call sub.KERNEL32.DLL_lstrcatA
mov dword [0x412870], eax
mov byte [0x4116ff], 0
mov dword [0x412844], 0x4c
mov dword [0x412878], 0x28180c
push dword [0x412ac0]
pop dword [0x412848]
push dword [0x412abc]
pop dword [0x41284c]
mov dword [0x412850], 0x410e8e
mov dword [0x412860], 0x4116ff
mov dword [0x412864], 0x104
mov dword [0x412874], 0
push 0x412844
call sub.comdlg32.dll_GetOpenFileNameA
mov dword [0x412870], 0
or eax, eax
je 0x40515e
mov eax, dword [0x412b9c]
cmp dword [ebp + 0x10], 7
je 0x404a28
mov eax, dword [0x412ba8]
cmp dword [ebp + 0x10], 8
je 0x404a28
mov eax, dword [0x412bbc]
push 0x4116ff
push eax
call sub.user32.dll_SetWindowTextA
jmp 0x40515e
cmp dword [ebp + 0x10], 6
jne 0x404a67
cmp dword [0x412cd3], 0
je 0x404a67
push dword [ebp + 0x10]
push 0x40817c
push dword [0x412ac0]
push 4
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0x10], 9
jne 0x404a96
mov eax, 0xffffffff
mov dword [0x412c7a], eax
push 0
push 0x407821
push dword [0x412ac0]
push 2
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0x10], 0xa
jne 0x404ab7
push 2
push 0xffffffffffffffff
push 0x100c
push dword [0x412b40]
call sub.user32.dll_SendMessageA
jmp 0x404a72
cmp dword [ebp + 0x10], 0xb
jne 0x404af7
push 2
push 0xffffffffffffffff
push 0x100c
push dword [0x412b40]
call sub.user32.dll_SendMessageA
push 0
push eax
push 0x1008
push dword [0x412b40]
call sub.user32.dll_SendMessageA
or eax, eax
je 0x40515e
dec dword [0x412c76]
jmp 0x40515e
cmp dword [ebp + 0x10], 0xc
jne 0x404ba4
mov eax, 0x4116ff
mov ecx, 0x10
dec ecx
mov dword [eax + ecx*4], 0xffffff
jne 0x404b0b
mov dword [0x412a80], eax
mov dword [0x412a70], 0x24
push dword [ebp + 8]
pop dword [0x412a74]
push dword [0x412abc]
pop dword [0x412a78]
push 0x4095d0
pop dword [0x412a8c]
mov dword [0x412a88], 0
mov dword [0x412a90], 0
mov dword [0x412a84], 0x13
push 0x412a70
call sub.comdlg32.dll_ChooseColorA
xor esi, esi
cmp byte [0x412d25], 1
je 0x404b78
inc esi
push esi
push dword [0x412ad0]
call sub.user32.dll_ShowWindow
push esi
push dword [0x412ad4]
call sub.user32.dll_ShowWindow
push 0
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_InvalidateRect
jmp 0x40515e
cmp dword [ebp + 0x10], 0xe
jne 0x404c26
mov eax, 0x4116ff
mov ecx, 0x10
dec ecx
mov dword [eax + ecx*4], 0xffffff
jne 0x404bb4
mov dword [0x412a80], eax
mov dword [0x412a70], 0x24
push dword [ebp + 8]
pop dword [0x412a74]
push dword [0x412abc]
pop dword [0x412a78]
push dword [0x412d26]
pop dword [0x412a7c]
push 0x4095d0
pop dword [0x412a8c]
mov dword [0x412a88], 1
mov dword [0x412a84], 0x13
push 0x412a70
call sub.comdlg32.dll_ChooseColorA
mov eax, dword [0x412a7c]
mov dword [0x412d26], eax
jmp 0x40515e
cmp dword [ebp + 0x10], 0x96
jne 0x404c4e
push 0
push 0x408659
push dword [0x412ac0]
push 6
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0x10], 0x97
jne 0x404c76
push 0
push 0x408a3a
push dword [0x412ac0]
push 7
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0x10], 0x98
jne 0x404c9f
push dword [ebp + 0x10]
push 0x408aa9
push dword [0x412ac0]
push 8
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0x10], 0x99
jne 0x40515e
push 0
push 0x408d9e
push dword [0x412ac0]
push 0xa
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0xc], 0x4e
jne 0x4050b1
mov eax, dword [ebp + 0x14]
cmp dword [eax + 8], 0xfffffdf8
jne 0x404dd6
cmp dword [eax + 4], 0x65
jne 0x404cf7
mov dword [eax + 0xc], str.Create_new_project
jmp 0x404dd6
cmp dword [eax + 4], 2
jne 0x404d09
mov dword [eax + 0xc], str.Open_existing_project
jmp 0x404dd6
cmp dword [eax + 4], 3
jne 0x404d1b
mov dword [eax + 0xc], str.Save_project
jmp 0x404dd6
cmp dword [eax + 4], 4
jne 0x404d2d
mov dword [eax + 0xc], 0x410113
jmp 0x404dd6
cmp dword [eax + 4], 5
jne 0x404d3f
mov dword [eax + 0xc], str.Help
jmp 0x404dd6
cmp dword [eax + 4], 7
je 0x404d51
cmp dword [eax + 4], 8
je 0x404d51
cmp dword [eax + 4], 0xd
jne 0x404d5a
mov dword [eax + 0xc], str.Open_file
jmp 0x404dd6
cmp dword [eax + 4], 6
je 0x404d69
cmp dword [eax + 4], 0x96
jne 0x404d72
mov dword [eax + 0xc], str.Preview
jmp 0x404dd6
cmp dword [eax + 4], 9
jne 0x404d81
mov dword [eax + 0xc], str.Add_registry_value
jmp 0x404dd6
cmp dword [eax + 4], 0xa
jne 0x404d90
mov dword [eax + 0xc], str.Edit_selected_item
jmp 0x404dd6
cmp dword [eax + 4], 0xb
jne 0x404d9f
mov dword [eax + 0xc], str.Delete_item
jmp 0x404dd6
cmp dword [eax + 4], 0xc
je 0x404dab
cmp dword [eax + 4], 0xe
jne 0x404db4
mov dword [eax + 0xc], str.Edit_font_color
jmp 0x404dd6
cmp dword [eax + 4], 0x97
jne 0x404dc6
mov dword [eax + 0xc], 0x410f9c
jmp 0x404dd6
cmp dword [eax + 4], 0x99
jne 0x404dd6
mov dword [eax + 0xc], str.Browse_installation_files
mov eax, dword [ebp + 0x14]
cmp dword [eax + 8], 0xfffffffd
jne 0x404e01
push 2
push 0xffffffffffffffff
push 0x100c
push dword [0x412b40]
call sub.user32.dll_SendMessageA
cmp eax, 0xffffffff
jne 0x404a72
jmp 0x40515e
cmp dword [eax + 8], 0xfffffe6e
jne 0x40515e
mov edx, dword [eax + 0x14]
mov dword [0x412c29], edx
mov ecx, dword [eax + 0x3c]
or ecx, ecx
je 0x404e24
mov dword [0x412c8c], ecx
mov byte [0x412c75], 0
or edx, edx
je 0x404f38
mov dword [0x412924], 0x50
mov dword [0x412928], edx
push 0x412924
push 0
push 0x110c
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
cmp dword [0x412944], 0
jne 0x404f38
mov esi, dword [0x412c41]
lodsd eax, dword [esi]
cmp dword [0x412c29], eax
je 0x404e7b
add esi, 5
jmp 0x404e6d
push esi
push 0x17
push dword [ebp + 8]
call sub.user32.dll_IsDlgButtonChecked
pop esi
mov byte [esi], al
cmp eax, 1
jne 0x404e94
inc byte [0x412c75]
inc esi
push esi
push 0x18
push dword [ebp + 8]
call sub.user32.dll_IsDlgButtonChecked
pop esi
mov byte [esi], al
cmp eax, 1
jne 0x404eae
inc byte [0x412c75]
inc esi
push esi
push 0x19
push dword [ebp + 8]
call sub.user32.dll_IsDlgButtonChecked
pop esi
mov byte [esi], al
cmp eax, 1
jne 0x404ec8
inc byte [0x412c75]
inc esi
push esi
push 0x1a
push dword [ebp + 8]
call sub.user32.dll_IsDlgButtonChecked
pop esi
mov byte [esi], al
cmp eax, 1
jne 0x404ee2
inc byte [0x412c75]
inc esi
push esi
push 0x1b
push dword [ebp + 8]
call sub.user32.dll_IsDlgButtonChecked
pop esi
mov byte [esi], al
cmp eax, 1
jne 0x404efc
inc byte [0x412c75]
cmp byte [0x412c75], 0
jne 0x404f38
mov edx, esi
sub edx, 8
mov eax, edx
cmp dword [eax + 9], 0
je 0x404f17
add eax, 9
jmp 0x404f0c
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov cl, byte [eax + 8]
mov byte [edx + 8], cl
mov dword [eax], 0
mov dword [eax + 4], 0
mov byte [eax + 8], 0
mov dword [0x412924], 0x50
push dword [0x412c8c]
pop dword [0x412928]
push 0x412924
push 0
push 0x110c
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
mov esi, dword [0x412c41]
cmp dword [0x412944], 0
je 0x404f7c
add esi, 0x1efb
jmp 0x404f94
mov ecx, dword [0x412c8c]
lodsd eax, dword [esi]
cmp eax, ecx
je 0x404f94
add esi, 5
or eax, eax
jne 0x404f82
mov dword [esi - 9], ecx
sub esi, 5
mov edx, 0
lodsb al, byte [esi]
or al, al
je 0x404fa3
mov edx, 1
push esi
push edx
push 0x17
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
pop esi
mov edx, 0
lodsb al, byte [esi]
or al, al
je 0x404fc2
mov edx, 1
push esi
push edx
push 0x18
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
pop esi
mov edx, 0
lodsb al, byte [esi]
or al, al
je 0x404fe1
mov edx, 1
push esi
push edx
push 0x19
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
pop esi
mov edx, 0
lodsb al, byte [esi]
or al, al
je 0x405000
mov edx, 1
push esi
push edx
push 0x1a
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
pop esi
mov edx, 0
lodsb al, byte [esi]
or al, al
je 0x40501f
mov edx, 1
push esi
push edx
push 0x1b
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
pop esi
mov eax, dword [0x412c1c]
cmp dword [0x412c29], eax
je 0x40515e
push dword [0x412c29]
push 4
push 0x110a
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
or eax, eax
jne 0x40515e
cmp byte [0x412c75], 0
je 0x405075
mov dword [0x41293c], 2
jmp 0x40507f
mov dword [0x41293c], 0xfffffffe
mov dword [0x412924], 0x12
push dword [0x412c29]
pop dword [0x412928]
push 0x412924
push 0
push 0x110d
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
jmp 0x40515e
cmp dword [ebp + 0xc], 0x138
jne 0x40514e
push dword [ebp + 0x14]
call sub.user32.dll_GetDlgCtrlID
mov ecx, dword [0x412d19]
cmp eax, 0x94
je 0x40512e
cmp eax, 7
je 0x405137
cmp eax, 0x91
je 0x405137
mov ecx, dword [0x412d2a]
cmp eax, 0x17d
je 0x40512e
cmp eax, 4
je 0x4050fb
cmp eax, 5
je 0x4050fb
cmp eax, 6
jne 0x40515e
xor ecx, ecx
cmp byte [0x412c28], 6
jne 0x40512e
cmp byte [0x412d25], 1
je 0x405110
inc ecx
push ecx
push ecx
push dword [0x412ad0]
call sub.user32.dll_ShowWindow
push dword [0x412ad4]
call sub.user32.dll_ShowWindow
mov ecx, dword [0x412a7c]
push ecx
push dword [ebp + 0x10]
call sub.gdi32.dll_SetTextColor
push 1
push dword [ebp + 0x10]
call sub.gdi32.dll_SetBkMode
push 5
call sub.gdi32.dll_GetStockObject
leave
ret 0x10
cmp dword [ebp + 0xc], 0x10
jne 0x40515e
push 0
push dword [ebp + 8]
call sub.user32.dll_EndDialog
xor eax, eax
leave
ret 0x10