Function at 0x401000
Capabilities:
Read .ini file

Disassembly:
push 0x7f89
push 0
call sub.user32.dll_LoadCursorA
mov dword [0x412d15], eax
call sub.KERNEL32.DLL_GetProcessHeap
mov dword [0x412c39], eax
push 0
call sub.KERNEL32.DLL_GetModuleHandleA
mov dword [0x412abc], eax
push 0xc
call sub.gdi32.dll_GetStockObject
mov dword [0x412d21], eax
push 0
call sub.gdi32.dll_GetStockObject
mov dword [0x412d58], eax
push 0x100
push 0x411c0b
push 0
call sub.KERNEL32.DLL_GetModuleFileNameA
or eax, eax
je 0x401065
dec eax
cmp byte [eax + 0x411c0b], 0x5c
jne 0x401050
mov byte [eax + 0x411c0b], 0
push str.Config.ini
push 0x411c0b
call sub.KERNEL32.DLL_lstrcatA
push 0xe
push 0x410490
push 0x411d17
call sub.KERNEL32.DLL_lstrcpynA
mov ecx, 0x154
mov eax, 0x18
dec ecx
dec eax
mov dl, byte [ecx + str._f_f_te]
xor dl, byte [eax + str.InternetGetConnectedState]
mov byte [ecx + str._f_f_te], dl
or ecx, ecx
je 0x4010ad
or eax, eax
je 0x40108a
jmp 0x40108f
push 0x411c0b
push 0x20
push 0x411e57
push 0x4112fa
push 0x411fd7
push 0x410113
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x401104
push 0x411c0b
push 0x20
push 0x411e77
push 0x4112fa
push 0x411fe0
push 0x410113
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x401104
push eax
call fcn.00409707
mov dword [0x412d1d], eax
or eax, eax
je 0x40111a
push 0
push 0x408c08
push 0
push 9
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
mov dword [0x412938], 0x104
push 0
push 0x40117b
push 0
push 1
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
mov byte [0x412cd7], 0
cmp byte [0x412c28], 0xff
je 0x40111a
cmp byte [0x412c28], 0xfe
je 0x40111a
cmp byte [0x412c28], 0xfd
jne 0x40116f
push 0x10
push str.ERROR
push str.Memory_Allocation_failed__
push 0
call sub.user32.dll_MessageBoxA
push 0
call sub.KERNEL32.DLL_ExitProcess
call sub.comctl32.dll_InitCommonControls
push ebp
mov ebp, esp
add esp, 0xfffffffc
mov eax, dword [ebp + 0x10]
cmp dword [ebp + 0xc], 0x113
jne 0x4012c2
cmp dword [ebp + 0x10], 3
jne 0x4011ea
mov eax, dword [0x412cfd]
mov ecx, dword [0x412d01]
cmp dword [0x412d05], eax
jne 0x4011b6
cmp dword [0x412d09], ecx
je 0x40515e
mov dword [0x412d05], eax
mov dword [0x412d09], ecx
push ecx
push eax
push str._i_files___i_folders_found
push 0x411907
call sub.user32.dll_wsprintfA
add esp, 0x10
push 0x411907
push dword [0x412b88]
call sub.user32.dll_SetWindowTextA
jmp 0x40515e
cmp dword [ebp + 0x10], 2
jne 0x40515e
inc dword [0x412c9d]
cmp dword [0x412c9d], 0xa
jne 0x401213
mov dword [0x412c9d], 0
inc dword [0x412ca1]
cmp dword [0x412ca1], 6
jne 0x40122c
mov dword [0x412ca1], 0
inc dword [0x412ca5]
cmp dword [0x412ca5], 0xa
jne 0x401245
mov dword [0x412ca5], 0
inc dword [0x412ca9]
cmp dword [0x412ca9], 6
jne 0x40125e
mov dword [0x412ca9], 0
inc dword [0x412cad]
cmp dword [0x412cb1], 0xa
jne 0x401277
mov dword [0x412cad], 0
inc dword [0x412cb1]
push dword [0x412c9d]
push dword [0x412ca1]
push dword [0x412ca5]
push dword [0x412ca9]
push dword [0x412cad]
push dword [0x412cb1]
push str.Elapsed_time:___i_i:_i_i:_i_i
push 0x411907
call sub.user32.dll_wsprintfA
add esp, 0x20
push 0x411907
push dword [0x412ae8]
call sub.user32.dll_SetWindowTextA
jmp 0x40515e
cmp dword [ebp + 0xc], 0x53
jne 0x40130c
push 0x100
push 0x4116ff
push 0
call sub.KERNEL32.DLL_GetModuleFileNameA
add eax, 0x4116ff
dec eax
cmp byte [eax], 0x5c
jne 0x4012de
mov byte [eax + 1], 0
push str.Documentation.chm
push 0x4116ff
call sub.KERNEL32.DLL_lstrcatA
push 3
push 0
push 0
push eax
push 0
push 0
call sub.shell32.dll_ShellExecuteA
jmp 0x40515e
cmp dword [ebp + 0xc], 0xf
jne 0x40142b
push 0x412890
push dword [ebp + 8]
call sub.user32.dll_BeginPaint
mov dword [0x412ccd], eax
cmp byte [0x412c28], 1
je 0x40133a
cmp byte [0x412c28], 0xe
jne 0x401378
push dword [0x412d58]
push 0x412d48
push eax
call sub.user32.dll_FillRect
push 0xcc0020
push 0
push 0
push dword [0x412d44]
push 0x113
push 0xb2
push 0
push 0
push dword [0x412ccd]
call sub.gdi32.dll_BitBlt
jmp 0x401419
cmp byte [0x412c28], 0
jbe 0x401419
push dword [0x412d58]
push 0x412824
push eax
call sub.user32.dll_FillRect
cmp byte [0x412c28], 6
jne 0x401419
cmp byte [0x412cd1], 1
jne 0x401419
push 0
push 0
push 0x147
push dword [0x412bb0]
call sub.user32.dll_SendMessageA
xor ecx, ecx
cmp eax, 1
jne 0x4013d3
mov ecx, dword [0x41282c]
sub ecx, dword [0x412cc5]
sar ecx, 1
jmp 0x4013e5
cmp eax, 2
jne 0x4013e5
sub ecx, dword [0x412cc5]
add ecx, dword [0x41282c]
dec ecx
push 0
push dword [0x412cbd]
push dword [0x412cc1]
push dword [0x412cc9]
push 0
push 0
push 0
push dword [0x412cc9]
push dword [0x412cc5]
push 0
push ecx
push dword [0x412ccd]
call sub.gdi32.dll_SetDIBitsToDevice
push 0x412890
push dword [ebp + 8]
call sub.user32.dll_EndPaint
jmp 0x40515e
cmp dword [ebp + 0xc], 0x200
jne 0x401500
mov eax, dword [ebp + 0x14]
mov ecx, eax
shr ecx, 0x10
and eax, 0xffff
cmp byte [0x412c28], 2
jne 0x40515e
cmp byte [0x412c87], 0
jne 0x401466
mov dword [0x412c20], eax
mov dword [0x412c24], ecx
mov edx, 0x411d17
cmp byte [edx], 0
je 0x40515e
mov edx, 0x411d57
cmp byte [edx], 0
je 0x40515e
push ecx
push eax
push 0x412aac
call sub.user32.dll_PtInRect
or eax, eax
je 0x4014ca
cmp dword [0x412d19], 0x1b34e4
je 0x40515e
mov dword [0x412d19], 0x1b34e4
push dword [ebp + 8]
call sub.user32.dll_SetCapture
cmp dword [0x412d15], 0
je 0x4014e9
push dword [0x412d15]
call sub.user32.dll_SetCursor
jmp 0x4014e9
cmp dword [0x412d19], 0xff2f2f
je 0x40515e
mov dword [0x412d19], 0xff2f2f
call sub.user32.dll_ReleaseCapture
push 0
push 0x412aac
push dword [0x412ac0]
call sub.user32.dll_InvalidateRect
jmp 0x40515e
cmp dword [ebp + 0xc], 0x201
jne 0x40152c
mov byte [0x412c87], 1
cmp dword [0x412d19], 0x1b34e4
jne 0x40515e
mov byte [0x412d2f], 1
jmp 0x40515e
cmp dword [ebp + 0xc], 0x202
jne 0x401586
mov byte [0x412c87], 0
cmp byte [0x412d2f], 0
je 0x40515e
cmp dword [0x412d19], 0x1b34e4
jne 0x40515e
push 5
push 0
push 0
push 0x411d57
push str.Open
push 0
call sub.shell32.dll_ShellExecuteA
mov dword [0x412d19], 0xff2f2f
mov byte [0x412d2f], 0
jmp 0x40515e
cmp dword [ebp + 0xc], 0x110
jne 0x40350f
push dword [ebp + 8]
pop dword [0x412ac0]
push str._InstallSimple_3.1_PRO
push dword [0x412ac0]
call sub.user32.dll_SetWindowTextA
cmp byte [0x412c28], 0
je 0x4015d6
push 5
push 0
push 0
push dword [0x412828]
push dword [0x412824]
push 0
push dword [0x412ac0]
call sub.user32.dll_SetWindowPos
jmp 0x401654
push 0x412a20
call sub.KERNEL32.DLL_GetLocalTime
mov ax, word [0x412a22]
mov bx, 0x1e
mul bx
add word [0x412a26], ax
push 0x411c0b
push 5
push 0x4116ff
push 0x4112fa
push str.AutoUpdate
push 0x410113
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x40163d
push 0x4116ff
call fcn.0040ea38
or eax, eax
je 0x401654
xor ecx, ecx
mov cx, word [0x412a26]
sub ecx, eax
cmp ecx, 0xfffffffa
jl 0x40163d
cmp ecx, 6
jg 0x40163d
jmp 0x401654
push 0x412c95
push 0x20
push 0
push 0x40974b
push 0
push 0
call sub.KERNEL32.DLL_CreateThread
call sub.user32.dll_GetDialogBaseUnits
movzx eax, ax
sub eax, 8
mov dword [0x412d30], eax
mov dword [0x412824], 0xa
mov dword [0x412828], 0xc2
add dword [0x412828], eax
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a04], 0
mov dword [0x412a08], 0x65
mov byte [0x412a0c], 4
mov word [0x412a0e], 0
mov dword [0x412a10], 0
mov dword [0x412a14], 0
push 0x14
push 0
push 0
push 0x16
push 0x16
push 1
push 0x412a04
push 0xd
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bc0], eax
push 0x80
push 0x1e
push 0x96
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
push dword [0x412abc]
pop dword [0x412a18]
mov dword [0x412a1c], 0xe
push 0x412a18
push 1
push 0x413
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 1
mov dword [0x412a08], 2
push 0x412a04
push 1
push 0x414
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a1c], 0xf
push 0x412a18
push 1
push 0x413
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 2
mov dword [0x412a08], 3
push 0x412a04
push 1
push 0x414
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a1c], 0xb
push 0x412a18
push 1
push 0x413
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 3
mov dword [0x412a08], 4
push 0x412a04
push 1
push 0x414
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a1c], 0x10
push 0x412a18
push 1
push 0x413
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 4
mov dword [0x412a08], 5
push 0x412a04
push 1
push 0x414
push dword [0x412bc0]
call sub.user32.dll_SendMessageA
mov eax, dword [0x412d30]
mov dword [0x412824], 0xc3
add dword [0x412824], eax
mov dword [0x412828], 0x3c
add dword [0x412828], eax
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a04], 0
mov dword [0x412a08], 7
push 0x14
push 0
push 0
push 0x10
push 0x10
push 1
push 0x412a04
push 0x11
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bc4], eax
push 0x80
push 0x16
push 0x32
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
mov dword [0x412a1c], 0x12
push 0x412a18
push 1
push 0x413
push dword [0x412bc4]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 1
mov dword [0x412a08], 6
push 0x412a04
push 1
push 0x414
push dword [0x412bc4]
call sub.user32.dll_SendMessageA
mov eax, dword [0x412d30]
mov dword [0x412824], 0xc3
add dword [0x412824], eax
mov dword [0x412828], 0x64
add dword [0x412828], eax
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a04], 0
mov dword [0x412a08], 8
push 0x14
push 0
push 0
push 0x10
push 0x10
push 1
push 0x412a04
push 0x11
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bc8], eax
push 0x80
push 0x16
push 0x32
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
mov dword [0x412a1c], 9
push 0x412a18
push 1
push 0x413
push dword [0x412bc8]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 1
mov dword [0x412a08], 0xc
push 0x412a04
push 1
push 0x414
push dword [0x412bc8]
call sub.user32.dll_SendMessageA
mov eax, dword [0x412d30]
shl eax, 1
mov dword [0x412824], 0x108
add dword [0x412824], eax
mov dword [0x412828], 0xa5
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a04], 0
mov dword [0x412a08], 9
push 0x14
push 0
push 0
push 0x16
push 0x16
push 1
push 0x412a04
push 0x13
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bcc], eax
push 0x80
push 0x1e
push 0x5a
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
mov dword [0x412a1c], 0x14
push 0x412a18
push 1
push 0x413
push dword [0x412bcc]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 1
mov dword [0x412a08], 0xa
push 0x412a04
push 1
push 0x414
push dword [0x412bcc]
call sub.user32.dll_SendMessageA
mov dword [0x412a1c], 0x15
push 0x412a18
push 1
push 0x413
push dword [0x412bcc]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 2
mov dword [0x412a08], 0xb
push 0x412a04
push 1
push 0x414
push dword [0x412bcc]
call sub.user32.dll_SendMessageA
push 0
push 6
push 0x401
push dword [0x412bc4]
call sub.user32.dll_SendMessageA
mov eax, dword [0x412d30]
mov dword [0x412824], 0xc3
add dword [0x412824], eax
mov dword [0x412828], 0x8c
add dword [0x412828], eax
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a04], 0
mov dword [0x412a08], 0xd
push 0x14
push 0
push 0
push 0x10
push 0x10
push 1
push 0x412a04
push 0x11
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bd0], eax
push 0x80
push 0x16
push 0x46
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
mov dword [0x412a1c], 9
push 0x412a18
push 1
push 0x413
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 1
mov dword [0x412a08], 0xe
push 0x412a04
push 1
push 0x414
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
mov dword [0x412a1c], 0x12
push 0x412a18
push 1
push 0x413
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
mov dword [0x412a04], 2
mov dword [0x412a08], 0x96
push 0x412a04
push 1
push 0x414
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
push 0
push 0xe
push 0x401
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
mov eax, dword [0x412d30]
sar eax, 1
mov dword [0x412824], 0xcd
add dword [0x412824], eax
mov dword [0x412828], 0x59
add dword [0x412828], eax
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a04], 0
mov dword [0x412a08], 0x97
push 0x14
push 0
push 0
push 0x10
push 0x10
push 1
push 0x412a04
push 0x16
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [ebp + 8]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bd4], eax
push 0x80
push 0x18
push 0x18
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
mov dword [0x412a08], 0x98
push 0x14
push 0
push 0
push 0x10
push 0x10
push 1
push 0x412a04
push 0xa
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bd8], eax
mov eax, dword [0x412d30]
mov dword [0x412824], 0x131
add dword [0x412824], eax
mov dword [0x412828], 0x35
add dword [0x412828], eax
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412a08], 0x99
push 0x14
push 0
push 0
push 0x10
push 0x10
push 1
push 0x412a04
push 0x11
push dword [0x412abc]
push 0
push 1
push 0x40000944
push dword [0x412ac0]
call sub.comctl32.dll_CreateToolbarEx
mov dword [0x412bdc], eax
push 0x80
push 0x16
push 0x18
push dword [0x412828]
push dword [0x412824]
push 1
push eax
call sub.user32.dll_SetWindowPos
push 0
push 0
push 0x31
push dword [ebp + 8]
call sub.user32.dll_SendMessageA
mov dword [0x412d38], eax
push 0x4116ff
push 0x100
push eax
call sub.gdi32.dll_GetObjectA
mov eax, dword [0x4116ff]
push eax
cmp eax, 0xfffffff5
jle 0x401e1f
mov eax, 0xfffffff5
push eax
sub eax, 4
push str.Arial
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push eax
call sub.gdi32.dll_CreateFontA
mov dword [0x412d34], eax
pop eax
sub eax, 2
push str.Arial
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push eax
call sub.gdi32.dll_CreateFontA
mov dword [0x412c14], eax
pop eax
push 0x41171b
push 0
push 0
push 0
push 0
push 1
push 0
push 1
push 0
push dword [0x41170f]
push 0
push 0
push 0
push dword [0x4116ff]
call sub.gdi32.dll_CreateFontA
mov dword [0x412d3c], eax
push 0x8e
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ac4], eax
push 0xa
push 3
push 0x10
push 0x10
push 0x10
call sub.comctl32.dll_ImageList_Create
mov dword [0x412c18], eax
push 2
push dword [0x412abc]
call sub.user32.dll_LoadBitmapA
push eax
push 0
push eax
push dword [0x412c18]
call sub.comctl32.dll_ImageList_Add
call sub.gdi32.dll_DeleteObject
push 3
push dword [0x412abc]
call sub.user32.dll_LoadBitmapA
push eax
push 0
push eax
push dword [0x412c18]
call sub.comctl32.dll_ImageList_Add
call sub.gdi32.dll_DeleteObject
push 4
push dword [0x412abc]
call sub.user32.dll_LoadBitmapA
push eax
push 0
push eax
push dword [0x412c18]
call sub.comctl32.dll_ImageList_Add
call sub.gdi32.dll_DeleteObject
push 8
push dword [0x412abc]
call sub.user32.dll_LoadBitmapA
push eax
push 0
push eax
push dword [0x412c18]
call sub.comctl32.dll_ImageList_Add
call sub.gdi32.dll_DeleteObject
push dword [0x412c18]
push 0
push 0x1109
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
push 0x90
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b40], eax
push 0x4020
push 0
push 0x1036
push eax
call sub.user32.dll_SendMessageA
mov dword [0x412c76], 0
mov dword [0x41294c], 6
mov dword [0x412958], 0x410da4
mov dword [0x412954], 0x75
push 0x41294c
push 0
push 0x101b
push dword [0x412b40]
call sub.user32.dll_SendMessageA
mov dword [0x412958], 0x410da9
mov dword [0x412954], 0x42
push 0x41294c
push 0
push 0x101b
push dword [0x412b40]
call sub.user32.dll_SendMessageA
mov dword [0x412958], 0x410d9a
mov dword [0x412954], 0x78
push 0x41294c
push 0
push 0x101b
push dword [0x412b40]
call sub.user32.dll_SendMessageA
mov dword [0x412958], 0x410d96
mov dword [0x412954], 0x9e
push 0x41294c
push 0
push 0x101b
push dword [0x412b40]
call sub.user32.dll_SendMessageA
mov dword [0x412d48], 0
mov dword [0x412d4c], 0
mov dword [0x412d50], 0x14c
mov dword [0x412d54], 0xbb
push 0x412d48
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
push 0
call sub.gdi32.dll_CreateCompatibleDC
mov dword [0x412d44], eax
push 1
push dword [0x412abc]
call sub.user32.dll_LoadBitmapA
push eax
push dword [0x412d44]
call sub.gdi32.dll_SelectObject
push 3
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412acc], eax
push 0x64
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b90], eax
push 0x66
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b9c], eax
push 0x67
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ba0], eax
push 0x65
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b94], eax
push 0x6b
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ba8], eax
push 0x6c
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412bac], eax
push 0x6e
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412bb8], eax
push 0x6f
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412bbc], eax
push 6
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ad4], eax
push 8
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b8c], eax
push 0xb
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412adc], eax
push 0xc
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ae0], eax
push 0xd
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ae4], eax
push 0xe
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ae8], eax
push 0x91
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412aec], eax
push 0x8d
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b88], eax
push 0x92
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412be0], eax
push 0x93
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412be4], eax
push 0x94
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412be8], eax
push 0xf
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412af8], eax
push 0x10
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412af0], eax
push eax
call sub.user32.dll_SetFocus
push 0x11
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412af4], eax
push 0x12
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412afc], eax
push 0x14
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b00], eax
push 0x15
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b08], eax
push 0x17
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b0c], eax
push 0x18
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b10], eax
push 0x19
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b14], eax
push 0x1a
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b18], eax
push 0x1b
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b1c], eax
push 0x1e
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b20], eax
push 0x1f
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b24], eax
push 0x23
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b34], eax
push 0x17e
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b3c], eax
push 0x16
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b5c], eax
push 9
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b60], eax
push 0xa
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b68], eax
push 0x17d
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412bfc], eax
push 0x27
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b70], eax
push 0x28
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b74], eax
push str.Any_Windows
push 0
push 0x143
push eax
call sub.user32.dll_SendMessageA
push str.Windows_10
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_8.1
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_8
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_7
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_Vista
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_2003
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_XP
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_2000
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_Me
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_98
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_95
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_NT_4.0
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push str.Windows_NT_3.51
push 0
push 0x143
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push 0
push 0
push 0x14e
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push 0x34
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b78], eax
push 0x35
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b7c], eax
push 0x3c
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412c0c], eax
push 0x3d
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b04], eax
push 0x3e
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412c04], eax
push 0x6c
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412bac], eax
push 7
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ad8], eax
push str.Create_your_installation_packages_in_seconds__r_nAnswer_only_on_some_questions_and_fill_required_values.
push eax
call sub.user32.dll_SetWindowTextA
push 0x25
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b6c], eax
push 0
push 0x100
push 0xc5
push eax
call sub.user32.dll_SendMessageA
push 0x24
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b38], eax
push 0
push 0x100
push 0xc5
push eax
call sub.user32.dll_SendMessageA
push 0x20
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b28], eax
push 0
push 0xffff
push 0xc5
push eax
call sub.user32.dll_SendMessageA
push 0x21
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b30], eax
push 0
push 0xffff
push 0xc5
push eax
call sub.user32.dll_SendMessageA
push 0x36
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b80], eax
xor ecx, ecx
mov eax, str.x.x_and_above
mov edx, dword [ecx*4 + str.1.0_1.1_2.0_3.0_3.5_4.0_4.5]
mov dword [eax], edx
inc ecx
push ecx
push eax
push 0
push 0x143
push dword [0x412b80]
call sub.user32.dll_SendMessageA
pop ecx
cmp ecx, 7
jne 0x40258b
push 0
push 0
push 0x14e
push dword [0x412b80]
call sub.user32.dll_SendMessageA
push 4
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412c10], eax
push 0
push dword [0x412d34]
push 0x30
push eax
call sub.user32.dll_SendMessageA
push 5
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ad0], eax
push 0
push dword [0x412c14]
push 0x30
push eax
call sub.user32.dll_SendMessageA
push 0x22
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b2c], eax
push 0
push 0xffff
push 0xc5
push eax
call sub.user32.dll_SendMessageA
push str.Thank_you_for_using_our_software.
push dword [0x412b2c]
call sub.user32.dll_SetWindowTextA
push 0x26
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412b64], eax
push str.System_Drive
push 0
push 0x143
push eax
call sub.user32.dll_SendMessageA
push str.Program_Files
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.Common_Files
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.Windows
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.System
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.User_Profile
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.Application_Data
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.My_Documents
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push 0x410d64
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.Current_Directory
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push str.Dont_use__
push 0
push 0x143
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push 0
push 1
push 0x14e
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push 0x3f
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412c08], eax
push str._SetupPath_
push 0
push 0x143
push eax
call sub.user32.dll_SendMessageA
push str._ProgramFiles_
push 0
push 0x143
push dword [0x412c08]
call sub.user32.dll_SendMessageA
push str._Windows_
push 0
push 0x143
push dword [0x412c08]
call sub.user32.dll_SendMessageA
push str._System_
push 0
push 0x143
push dword [0x412c08]
call sub.user32.dll_SendMessageA
push str.http:__
push 0
push 0x143
push dword [0x412c08]
call sub.user32.dll_SendMessageA
push 0x6d
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412bb0], eax
push str.Left
push 0
push 0x143
push eax
call sub.user32.dll_SendMessageA
push str.Center
push 0
push 0x143
push dword [0x412bb0]
call sub.user32.dll_SendMessageA
push str.Right
push 0
push 0x143
push dword [0x412bb0]
call sub.user32.dll_SendMessageA
push 0
push 2
push 0x14e
push dword [0x412bb0]
call sub.user32.dll_SendMessageA
push 0x68
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x412ba4], eax
push str.1_sec
push 0
push 0x143
push dword [0x412ba4]
call sub.user32.dll_SendMessageA
mov eax, str.1_sec
inc byte [eax]
cmp byte [eax], 0x3a
jne 0x402841
mov byte [eax], 0x31
push 0
push 2
push 0x14e
push dword [0x412ba4]
call sub.user32.dll_SendMessageA
mov dword [0x412824], 0
mov dword [0x412828], 0
mov dword [0x41282c], 0x14c
mov dword [0x412830], 0x26
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
mov dword [0x412834], 0xe
mov dword [0x412838], 0x90
mov dword [0x41283c], 0x13c
mov dword [0x412840], 0x9c
push 0x412834
push dword [ebp + 8]
call sub.user32.dll_MapDialogRect
push 0x2000
push 8
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapAlloc
mov dword [0x412c3d], eax
add eax, 0x100
mov dword [0x412c41], eax
cmp byte [0x412c28], 0xff
je 0x4034fe
cmp byte [0x412c28], 0xfe
je 0x40296d
call sub.KERNEL32.DLL_GetCommandLineA
push eax
push eax
call sub.KERNEL32.DLL_lstrlenA
mov ecx, eax
xor edx, edx
pop esi
lodsb al, byte [esi]
cmp al, 0x22
jne 0x402933
inc edx
cmp edx, 3
jne 0x40293d
mov ebx, esi
inc edx
jmp 0x40294b
cmp edx, 5
jne 0x40294b
mov byte [esi - 1], 0
mov ecx, 1
dec ecx
jne 0x40292d
cmp edx, 3
jl 0x402960
push ebx
push 0x411a0b
call sub.KERNEL32.DLL_lstrcpyA
jmp 0x40296d
cmp byte [0x412c28], 0xfe
jne 0x403505
push 0
push 0x411a0b
call sub.KERNEL32.DLL__lopen
mov dword [0x412c7e], eax
cmp eax, 0xffffffff
je 0x4034fe
push 0
push eax
call sub.KERNEL32.DLL_GetFileSize
mov dword [0x412c2d], eax
cmp eax, 0x10
jl 0x4034f3
inc eax
push eax
push 8
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapAlloc
mov dword [0x412c4d], eax
push dword [0x412c2d]
push eax
push dword [0x412c7e]
call sub.KERNEL32.DLL__hread
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.WindowTitle
push str.Setup
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x4029fc
push dword [0x412c4d]
push dword [0x412b20]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.ProductName
push str.Setup
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402a35
push dword [0x412c4d]
push dword [0x412b24]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0x40
push 0x411d17
push 0x4112fa
push str.BandText
push str.Setup
call sub.KERNEL32.DLL_GetPrivateProfileStringA
push 0x411a0b
push 0x100
push 0x411d57
push 0x4112fa
push str.BandLink
push str.Setup
call sub.KERNEL32.DLL_GetPrivateProfileStringA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.SplashScreen
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402ab1
push dword [0x412c4d]
push dword [0x412b9c]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.SplashScreenDelay
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402b19
mov eax, dword [0x412c4d]
mov ecx, 2
cmp byte [eax], 0x31
jne 0x402aec
xor ecx, ecx
jmp 0x402b06
cmp byte [eax], 0x32
jne 0x402af4
dec ecx
jmp 0x402b06
cmp byte [eax], 0x34
jne 0x402afc
inc ecx
jmp 0x402b06
cmp byte [eax], 0x35
jne 0x402b06
mov ecx, 4
push 0
push ecx
push 0x14e
push dword [0x412ba4]
call sub.user32.dll_SendMessageA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.Header
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402b52
push dword [0x412c4d]
push dword [0x412ba8]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.HeaderFontColor
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
mov byte [0x412d25], 0
mov eax, dword [0x412c4d]
cmp word [eax], 0x2d
jne 0x402b92
inc byte [0x412d25]
xor eax, eax
jmp 0x402b9d
push dword [0x412c4d]
call fcn.0040ea38
mov dword [0x412a7c], eax
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.WizardBitmap
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402bdb
push dword [0x412c4d]
push dword [0x412bbc]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.WizardFontColor
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402c13
push dword [0x412c4d]
call fcn.0040ea38
mov dword [0x412d26], eax
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.HeaderJustify
push str.Graphics
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402c7e
push str.Left
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
je 0x402c6b
push str.Center
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402c66
inc eax
jmp 0x402c6b
mov eax, 2
push 0
push eax
push 0x14e
push dword [0x412bb0]
call sub.user32.dll_SendMessageA
push str._r_n_FirstMessage__r_n
call fcn.0040929c
or eax, eax
je 0x402c9d
push ecx
push eax
push dword [0x412b28]
call sub.user32.dll_SetWindowTextA
pop eax
mov byte [eax], 0xd
push str._r_n_LastMessage__r_n
call fcn.0040929c
or eax, eax
je 0x402cbc
push ecx
push eax
push dword [0x412b2c]
call sub.user32.dll_SetWindowTextA
pop eax
mov byte [eax], 0xd
push str._r_n_LicenseAgreement__r_n
call fcn.0040929c
or eax, eax
je 0x402cdb
push ecx
push eax
push dword [0x412b30]
call sub.user32.dll_SetWindowTextA
pop eax
mov byte [eax], 0xd
lea eax, [0x411907]
mov byte [eax], 0
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.SourceFolder
push str.SetupFiles
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402d2d
push dword [0x412c4d]
push dword [0x412b34]
call sub.user32.dll_SetWindowTextA
push dword [0x412c4d]
push 0x411907
call sub.KERNEL32.DLL_lstrcpyA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.SpecialFolder
push str.SetupFiles
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402e84
push str.System_Drive
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
je 0x402e71
push str.Program_Files
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402d8b
inc eax
jmp 0x402e71
push str.Common_Files
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402da9
mov eax, 2
jmp 0x402e71
push str.Windows
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402dc7
mov eax, 3
jmp 0x402e71
push str.System
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402de5
mov eax, 4
jmp 0x402e71
push str.User_Profile
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402e00
mov eax, 5
jmp 0x402e71
push str.Application_Data
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402e1b
mov eax, 6
jmp 0x402e71
push str.My_Documents
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402e36
mov eax, 7
jmp 0x402e71
push 0x410d64
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402e51
mov eax, 8
jmp 0x402e71
push str.Current_Directory
push dword [0x412c4d]
call sub.KERNEL32.DLL_lstrcmpA
or eax, eax
jne 0x402e6c
mov eax, 9
jmp 0x402e71
mov eax, 0xa
push 0
push eax
push 0x14e
push dword [0x412b64]
call sub.user32.dll_SendMessageA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.SetupPath
push str.SetupFiles
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402ebd
push dword [0x412c4d]
push dword [0x412b6c]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.SetupFile
push str.SetupFiles
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402ef6
push dword [0x412c4d]
push dword [0x412b3c]
call sub.user32.dll_SetWindowTextA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push 0x4112a5
push 0x410553
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x402f2f
push dword [0x412c4d]
push dword [0x412b38]
call sub.user32.dll_SetWindowTextA
push str._r_n_Registry__r_n
call fcn.0040929c
sub ecx, eax
or ecx, ecx
je 0x403111
inc eax
cmp byte [eax], 0
je 0x403111
cmp byte [eax - 1], 0x5b
jne 0x402f43
mov edx, eax
inc eax
cmp byte [eax], 0x5d
jne 0x402f55
mov byte [eax], 0
pushal
push dword [0x412c76]
inc dword [0x412c76]
mov dword [0x41296c], 5
pop dword [0x412970]
mov dword [0x41298c], 0
mov dword [0x412974], 0
mov dword [0x412980], edx
push 0x41296c
push 0
push 0x1007
push dword [0x412b40]
call sub.user32.dll_SendMessageA
popal
inc eax
cmp word [eax], 0xa0d
jne 0x403111
inc eax
inc eax
cmp byte [eax], 0x5b
je 0x402f53
cmp byte [eax], 0x22
je 0x402fcd
cmp byte [eax], 0x40
je 0x403007
inc eax
jmp 0x402fbb
mov edx, eax
inc edx
inc eax
cmp byte [eax], 0x22
jne 0x402fd0
mov byte [eax], 0
pushal
mov eax, dword [0x412c76]
dec eax
mov dword [0x412980], edx
mov dword [0x412974], 1
push 0x41296c
push eax
push 0x102e
push dword [0x412b40]
call sub.user32.dll_SendMessageA
popal
inc eax
cmp word [eax], 0x223d
jne 0x403047
inc eax
inc eax
mov edx, eax
cmp word [eax], 0x5c5c
je 0x403021
cmp word [eax], 0x225c
jne 0x40302e
pushal
mov ecx, eax
inc ecx
push ecx
push eax
call sub.KERNEL32.DLL_lstrcpyA
popal
inc eax
cmp byte [eax], 0x22
je 0x40303d
cmp word [eax], 0xa0d
je 0x403079
inc eax
jmp 0x403013
mov byte [eax], 0
mov ebx, str.REG_SZ
jmp 0x4030b0
cmp dword [eax], 0x6f77643d
jne 0x403079
add eax, 7
mov edx, eax
add eax, 8
mov byte [eax], 0
mov ebx, str.REG_DWORD
pushal
push edx
call fcn.0040ea70
push 0x4116ff
push eax
call fcn.0040eac0
popal
mov edx, 0x4116ff
jmp 0x4030b0
pushal
mov eax, dword [0x412c76]
dec eax
mov dword [0x412980], 0
mov dword [0x412974], 1
push 0x41296c
push eax
push 0x102e
push dword [0x412b40]
call sub.user32.dll_SendMessageA
popal
jmp 0x402f43
pushal
mov eax, dword [0x412c76]
dec eax
mov dword [0x412980], ebx
mov dword [0x412974], 2
push 0x41296c
push eax
push 0x102e
push dword [0x412b40]
call sub.user32.dll_SendMessageA
popal
pushal
mov eax, dword [0x412c76]
dec eax
mov dword [0x412980], edx
mov dword [0x412974], 3
push 0x41296c
push eax
push 0x102e
push dword [0x412b40]
call sub.user32.dll_SendMessageA
popal
jmp 0x402f43
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.OperatingSystem
push str.Requirements
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x403157
push dword [0x412c4d]
call fcn.0040ea38
push 0
push eax
push 0x14e
push dword [0x412b74]
call sub.user32.dll_SendMessageA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.NetFramework
push str.Requirements
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x4031e6
mov eax, dword [0x412c4d]
xor ecx, ecx
cmp dword [eax], 0x302e31
je 0x4031c4
inc ecx
cmp dword [eax], 0x312e31
je 0x4031c4
inc ecx
cmp dword [eax], 0x302e32
je 0x4031c4
inc ecx
cmp dword [eax], 0x302e33
je 0x4031c4
inc ecx
cmp dword [eax], 0x352e33
je 0x4031c4
inc ecx
cmp dword [eax], 0x302e34
je 0x4031c4
inc ecx
cmp dword [eax], 0x352e34
jne 0x4031e6
push 0
push ecx
push 0x14e
push dword [0x412b80]
call sub.user32.dll_SendMessageA
push 1
push 0x35
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.NetFrameworkLink
push str.Requirements
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x40321e
push dword [0x412c4d]
push str.http:__www.microsoft.com_en_us_download_details.aspx_id17718
call sub.KERNEL32.DLL_lstrcpyA
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.AdminRights
push str.Requirements
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x40325f
mov eax, dword [0x412c4d]
cmp byte [eax], 0x30
je 0x40325f
push 1
push 0x34
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.RunCommand
push str.AfterInstalling
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x4032a7
push dword [0x412c4d]
push dword [0x412c08]
call sub.user32.dll_SetWindowTextA
push 1
push 0x3e
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
push 0x411a0b
push 0xff
push dword [0x412c4d]
push 0x4112fa
push str.Reboot
push str.AfterInstalling
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x4032e8
mov eax, dword [0x412c4d]
cmp byte [eax], 0x30
je 0x4032e8
push 1
push 0x3c
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
cmp byte [0x411907], 0
je 0x4034e0
push 0x411907
call sub.KERNEL32.DLL_SetCurrentDirectoryA
or eax, eax
je 0x4034e0
push 0x411907
push dword [0x412c3d]
call sub.KERNEL32.DLL_lstrcpyA
push eax
call sub.KERNEL32.DLL_lstrlenA
mov dword [0x412c82], eax
mov dword [0x4128f0], 0
mov dword [0x4128f4], 0xffff0000
mov dword [0x4128f8], 0x23
mov dword [0x412908], 0x411607
mov dword [0x412910], 0
mov dword [0x412914], 0
push 0x4128f0
push 0
push 0x1100
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
mov dword [0x412c1c], eax
mov byte [0x412c94], 0
push 1
push dword [0x412ac4]
call fcn.00406e5b
push dword [0x412c1c]
push 2
push 0x1102
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
push dword [0x412c1c]
pop dword [0x4128f0]
mov dword [0x4128f4], 0xffff0001
mov dword [0x412908], 0x410e62
mov dword [0x412910], 0xfffffffe
mov dword [0x412914], 1
push 0x4128f0
push 0
push 0x1100
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
mov dword [0x412c2d], eax
mov dword [0x412924], 0x18
mov dword [0x412930], 0x10
mov dword [0x41292c], 0x10
mov dword [0x412928], eax
push 0x412924
push 0
push 0x110d
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
push 0x411a0b
push 0x100
push dword [0x412c4d]
push 0x4112fa
push str.Uninstall.exe
push str.Shortcuts
call sub.KERNEL32.DLL_GetPrivateProfileStringA
or eax, eax
je 0x4034e0
mov esi, dword [0x412c4d]
mov ecx, dword [0x412c41]
cmp dword [ecx], 0
je 0x403472
add ecx, 9
jmp 0x403468
mov edx, dword [0x412c2d]
mov dword [ecx], edx
lodsb al, byte [esi]
cmp al, 0x64
jne 0x403485
mov byte [ecx + 4], 1
jmp 0x4034ab
cmp al, 0x73
jne 0x40348f
mov byte [ecx + 5], 1
jmp 0x4034ab
cmp al, 0x6d
jne 0x403499
mov byte [ecx + 6], 1
jmp 0x4034ab
cmp al, 0x70
jne 0x4034a3
mov byte [ecx + 7], 1
jmp 0x4034ab
cmp al, 0x71
jne 0x4034ab
mov byte [ecx + 8], 1
cmp al, 0
jne 0x40347a
mov dword [0x412928], edx
mov dword [0x41293c], 2
mov dword [0x412924], 0x12
push 0x412924
push 0
push 0x110d
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
push dword [0x412c4d]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
push dword [0x412c7e]
call sub.KERNEL32.DLL__lclose
mov byte [0x412c28], 1
call fcn.00405164
jmp 0x40515e
cmp dword [ebp + 0xc], 0x111
jne 0x404ccb
mov edx, eax
shr edx, 0x10
cmp dx, 1
jne 0x40353e
push 0
push 0x412824
push dword [0x412ac0]
call sub.user32.dll_InvalidateRect
jmp 0x403c2f
cmp dx, 0x300
jne 0x403973
mov eax, dword [ebp + 0x14]
cmp dword [0x412ba8], eax
jne 0x4036cb
mov byte [0x412cd7], 0
cmp byte [0x412cd1], 0
je 0x403582
push dword [0x412c55]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
mov byte [0x412cd1], 0
push 0
push 0x412824
push dword [0x412ac0]
call sub.user32.dll_InvalidateRect
push 0x104
push 0x4116ff
push dword [0x412ba8]
call sub.user32.dll_GetWindowTextA
or eax, eax
je 0x40515e
inc byte [0x412cd7]
push 0
push 0x4116ff
call sub.KERNEL32.DLL__lopen
cmp eax, 0xffffffff
je 0x40515e
mov dword [0x412c29], eax
push 0
push eax
call sub.KERNEL32.DLL_GetFileSize
mov dword [0x412cb5], eax
inc byte [0x412cd7]
push eax
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapAlloc
mov dword [0x412c55], eax
or eax, eax
jne 0x40360b
push dword [0x412c29]
call sub.KERNEL32.DLL__lclose
jmp 0x40515e
push dword [0x412cb5]
push eax
push dword [0x412c29]
call sub.KERNEL32.DLL__hread
push dword [0x412c29]
call sub.KERNEL32.DLL__lclose
mov ecx, dword [0x412c55]
mov ax, word [ecx]
mov edx, dword [ecx + 2]
inc byte [0x412cd7]
cmp dword [0x412cb5], edx
jne 0x40515e
cmp ax, 0x4d42
jne 0x40515e
mov eax, 0xe
add eax, ecx
mov dword [0x412cbd], eax
mov esi, eax
add ecx, dword [ecx + 0xa]
mov dword [0x412cc1], ecx
xor eax, eax
cmp dword [esi], 0xc
jne 0x40367d
mov ax, word [esi + 4]
mov dword [0x412cc5], eax
mov ax, word [esi + 6]
jmp 0x40368f
mov eax, dword [esi + 4]
mov dword [0x412cc5], eax
mov eax, dword [esi + 8]
cmp eax, 1
jae 0x40368f
neg eax
mov dword [0x412cc9], eax
inc byte [0x412cd7]
cmp dword [0x412cc5], 0x1f2
jbe 0x4036b0
mov dword [0x412cc5], 0x1f2
cmp eax, 0x3c
jbe 0x4036bf
mov dword [0x412cc9], 0x3c
mov byte [0x412cd1], 1
jmp 0x403c2f
cmp dword [0x412b9c], eax
jne 0x40381f
cmp dword [0x412cd3], 0
je 0x4036fd
push dword [0x412c59]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
mov dword [0x412cd3], 0
push 0x104
push 0x4116ff
push dword [0x412b9c]
call sub.user32.dll_GetWindowTextA
or eax, eax
je 0x403727
push 0
push 0x4116ff
call sub.KERNEL32.DLL__lopen
cmp eax, 0xffffffff
jne 0x40374a
push 0
push 6
push 0x401
push dword [0x412bc4]
call sub.user32.dll_SendMessageA
mov dword [0x412cd3], 0
jmp 0x40515e
mov dword [0x412c29], eax
push 0
push eax
call sub.KERNEL32.DLL_GetFileSize
mov dword [0x412cd3], eax
push eax
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapAlloc
or eax, eax
je 0x403727
mov dword [0x412c59], eax
push dword [0x412cd3]
push eax
push dword [0x412c29]
call sub.KERNEL32.DLL__hread
push dword [0x412c29]
call sub.KERNEL32.DLL__lclose
mov ecx, dword [0x412c59]
mov ax, word [ecx]
mov edx, dword [ecx + 2]
cmp dword [0x412cd3], edx
je 0x4037bc
push dword [0x412c59]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
jmp 0x403727
cmp ax, 0x4d42
jne 0x4037a4
mov eax, 0xe
add eax, ecx
mov dword [0x412cdd], eax
mov esi, eax
add ecx, dword [ecx + 0xa]
mov dword [0x412ce1], ecx
xor eax, eax
cmp dword [esi], 0xc
jne 0x4037ef
mov ax, word [esi + 4]
mov dword [0x412ce5], eax
mov ax, word [esi + 6]
jmp 0x403801
mov eax, dword [esi + 4]
mov dword [0x412ce5], eax
mov eax, dword [esi + 8]
cmp eax, 1
jae 0x403801
neg eax
mov dword [0x412ce9], eax
push 1
push 6
push 0x401
push dword [0x412bc4]
call sub.user32.dll_SendMessageA
jmp 0x403c2f
cmp dword [0x412bbc], eax
jne 0x403c2f
cmp dword [0x412cb9], 0
je 0x403851
push dword [0x412c5d]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
mov dword [0x412cb9], 0
push 0x104
push 0x4116ff
push dword [0x412bbc]
call sub.user32.dll_GetWindowTextA
or eax, eax
je 0x40387b
push 0
push 0x4116ff
call sub.KERNEL32.DLL__lopen
cmp eax, 0xffffffff
jne 0x40389e
push 0
push 0xe
push 0x401
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
mov dword [0x412cb9], 0
jmp 0x40515e
mov dword [0x412c29], eax
push 0
push eax
call sub.KERNEL32.DLL_GetFileSize
mov dword [0x412cb9], eax
push eax
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapAlloc
or eax, eax
je 0x40387b
mov dword [0x412c5d], eax
push dword [0x412cb9]
push eax
push dword [0x412c29]
call sub.KERNEL32.DLL__hread
push dword [0x412c29]
call sub.KERNEL32.DLL__lclose
mov ecx, dword [0x412c5d]
mov ax, word [ecx]
mov edx, dword [ecx + 2]
cmp dword [0x412cb9], edx
je 0x403910
push dword [0x412c5d]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
jmp 0x40387b
cmp ax, 0x4d42
jne 0x4038f8
mov eax, 0xe
add eax, ecx
mov dword [0x412ced], eax
mov esi, eax
add ecx, dword [ecx + 0xa]
mov dword [0x412cf1], ecx
xor eax, eax
cmp dword [esi], 0xc
jne 0x403943
mov ax, word [esi + 4]
mov dword [0x412cf5], eax
mov ax, word [esi + 6]
jmp 0x403955
mov eax, dword [esi + 4]
mov dword [0x412cf5], eax
mov eax, dword [esi + 8]
cmp eax, 1
jae 0x403955
neg eax
mov dword [0x412cf9], eax
push 1
push 0xe
push 0x401
push dword [0x412bd0]
call sub.user32.dll_SendMessageA
jmp 0x403c2f
cmp ax, 0x25
je 0x40397f
cmp ax, 0x26
jne 0x403989
call fcn.004090b7
jmp 0x403c2f
cmp ax, 0x35
jne 0x4039c7
push 0x35
push dword [0x412ac0]
call sub.user32.dll_IsDlgButtonChecked
cmp eax, 1
jne 0x4039a8
mov eax, 5
jmp 0x4039aa
xor eax, eax
push eax
push dword [0x412bd4]
push eax
push dword [0x412b80]
call sub.user32.dll_ShowWindow
call sub.user32.dll_ShowWindow
jmp 0x403c2f
cmp ax, 0x3e
jne 0x403a14
push 0x3e
push dword [0x412ac0]
call sub.user32.dll_IsDlgButtonChecked
cmp eax, 1
jne 0x4039f5
push 0
push 0x3c
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
mov eax, 5
jmp 0x4039f7
xor eax, eax
push eax
push dword [0x412bdc]
push eax
push dword [0x412c08]
call sub.user32.dll_ShowWindow
call sub.user32.dll_ShowWindow
jmp 0x403c2f
cmp ax, 0x3c
jne 0x403a30
push 0
push 0x3e
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
jmp 0x4039f5
cmp ax, 0xf
jne 0x403a77
cmp byte [0x412c28], 0xd
jne 0x405154
push dword [0x412c7e]
call sub.KERNEL32.DLL_CloseHandle
push 0x104
push 0x4116ff
push dword [0x412b3c]
call sub.user32.dll_GetWindowTextA
push 0x4116ff
call sub.KERNEL32.DLL_DeleteFileA
jmp 0x405154
cmp ax, 0x10
jne 0x403a89
pushal
call fcn.00405164
popal
jmp 0x403c2f
cmp ax, 0x11
jne 0x403a99
call fcn.00407395
jmp 0x403c2f
cmp ax, 0x12
jne 0x403abe
push 0
push 0x407efa
push dword [0x412ac0]
push 3
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x403c2f
cmp ax, 0x14
jne 0x403b6a
push dword [ebp + 8]
pop dword [0x4128d0]
mov dword [0x4128d4], 0
mov dword [0x4128d8], 0
mov dword [0x4128dc], 0x410cc3
mov dword [0x4128e0], 0x15
push 0x40946c
pop dword [0x4128e4]
mov dword [0x4128ec], 0
push 0x4128d0
call sub.shell32.dll_SHBrowseForFolderA
or eax, eax
je 0x40515e
push 0x4116ff
push eax
call sub.shell32.dll_SHGetPathFromIDListA
or eax, eax
je 0x40515e
push 0x4116ff
push dword [0x412b34]
call sub.user32.dll_SetWindowTextA
push 0x4116ff
call sub.KERNEL32.DLL_lstrlenA
add eax, 0x4116ff
dec eax
cmp byte [eax - 1], 0x5c
jne 0x403b52
push eax
push dword [0x412b6c]
call sub.user32.dll_SetWindowTextA
jmp 0x403c2f
cmp ax, 0x3d
jne 0x403c2f
push 0x100
push 0x411803
push dword [0x412b3c]
call sub.user32.dll_GetWindowTextA
or eax, eax
je 0x403ba2
dec eax
or eax, eax
je 0x403b9b
cmp byte [eax + 0x411803], 0x5c
jne 0x403b8d
mov byte [eax + 0x411803], 0
mov dword [0x412870], 0x411803
mov byte [0x4116ff], 0
mov dword [0x412844], 0x4c
mov dword [0x412878], 0x28180e
mov eax, dword [0x412ac0]
mov dword [0x412848], eax
mov eax, dword [0x412abc]
mov dword [0x41284c], eax
mov dword [0x412850], 0x410ed4
mov dword [0x412860], 0x4116ff
mov dword [0x412864], 0x104
mov dword [0x412874], 0
mov dword [0x412880], 0x410ee9
push 0x412844
call sub.comdlg32.dll_GetSaveFileNameA
or eax, eax
je 0x40515e
push 0x4116ff
push dword [0x412b3c]
call sub.user32.dll_SetWindowTextA
cmp dword [ebp + 0x10], 5
je 0x4012c8
cmp dword [ebp + 0x10], 7
je 0x404996
cmp dword [ebp + 0x10], 0x65
jne 0x403cb0
mov byte [0x412c28], 0xff
push dword [0x412c59]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
push dword [0x412c55]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
push dword [0x412c3d]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
push 0x412824
push dword [0x412ac0]
call sub.user32.dll_GetWindowRect
push dword [0x412ac0]
call sub.user32.dll_DestroyWindow
mov byte [0x412cd1], 0
jmp 0x40515e
cmp dword [ebp + 0x10], 2
jne 0x403d30
mov byte [0x411a0b], 0
mov dword [0x412844], 0x4c
mov dword [0x412878], 0x28180c
mov eax, dword [0x412ac0]
mov dword [0x412848], eax
mov eax, dword [0x412abc]
mov dword [0x41284c], eax
mov dword [0x412850], 0x410eaa
mov dword [0x412860], 0x411a0b
mov dword [0x412864], 0x104
mov dword [0x412874], 0
push 0x412844
call sub.comdlg32.dll_GetOpenFileNameA
or eax, eax
je 0x40515e
mov byte [0x412c28], 0xfe
jmp 0x403c50
cmp dword [ebp + 0x10], 3
jne 0x404927
mov byte [0x4116ff], 0
mov dword [0x412844], 0x4c
mov dword [0x412878], 0x28180e
mov eax, dword [0x412ac0]
mov dword [0x412848], eax
mov eax, dword [0x412abc]
mov dword [0x41284c], eax
mov dword [0x412850], 0x410eaa
mov dword [0x412860], 0x4116ff
mov dword [0x412864], 0x104
mov dword [0x412874], 0
mov dword [0x412870], 0
mov dword [0x412880], 0x410ecd
push 0x412844
call sub.comdlg32.dll_GetSaveFileNameA
or eax, eax
je 0x40515e
push 0
push 0x4116ff
call sub.KERNEL32.DLL__lcreat
mov dword [0x412c7e], eax
push 0x30
push str.__InstallSimple_project_r_n_r_n_Setup__r_nWindowTitle
push eax
call sub.KERNEL32.DLL__hwrite
push 0x104
push 0x4116ff
push dword [0x412b20]
call sub.user32.dll_GetWindowTextA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 2
push 0x4112fb
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xc
push 0x410ffe
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x104
push 0x4116ff
push dword [0x412b24]
call sub.user32.dll_GetWindowTextA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x411d17
call sub.KERNEL32.DLL_lstrlenA
or eax, eax
je 0x403ea7
push eax
push 0xb
push str._r_nBandText
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x411d17
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x411d57
call sub.KERNEL32.DLL_lstrlenA
or eax, eax
je 0x403ea7
push eax
push 0xb
push str._r_nBandLink
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x411d57
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x1d
push str._r_n_r_n_Graphics__r_nSplashScreen
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x104
push 0x4116ff
push dword [0x412b9c]
call sub.user32.dll_GetWindowTextA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x14
push str._r_nSplashScreenDelay
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0
push 0
push 0x147
push dword [0x412ba4]
call sub.user32.dll_SendMessageA
add eax, 0x31
mov dword [0x412c29], eax
push 1
push 0x412c29
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 9
push str._r_nHeader
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x104
push 0x4116ff
push dword [0x412ba8]
call sub.user32.dll_GetWindowTextA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x10
push str._r_nHeaderJustify
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0
push 0
push 0x147
push dword [0x412bb0]
call sub.user32.dll_SendMessageA
mov ecx, str.Left
mov edx, 4
cmp eax, 1
jne 0x403f98
mov ecx, str.Center
mov edx, 6
jmp 0x403fa7
cmp eax, 2
jne 0x403fa7
mov ecx, str.Right
mov edx, 5
push edx
push ecx
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x12
push str._r_nHeaderFontColor
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x4116ff
push dword [0x412a7c]
call fcn.0040eac0
mov eax, 0x4116ff
xor ecx, ecx
cmp byte [0x412d25], 0
je 0x403fee
mov word [eax], 0x2d
inc ecx
jmp 0x403ff6
dec ecx
inc ecx
cmp byte [ecx + eax], 0
jne 0x403fef
push ecx
push eax
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xf
push str._r_nWizardBitmap
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x104
push 0x4116ff
push dword [0x412bbc]
call sub.user32.dll_GetWindowTextA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x12
push str._r_nWizardFontColor
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x4116ff
push dword [0x412d26]
call fcn.0040eac0
push 0x4116ff
call sub.KERNEL32.DLL_lstrlenA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x14
push str._r_n_r_n_FirstMessage__r_n
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xffff
push 8
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapAlloc
mov dword [0x412c45], eax
push 0xffff
push eax
push dword [0x412b28]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x11
push str._r_n_LastMessage__r_n
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xffff
push dword [0x412c45]
push dword [0x412b2c]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
or eax, eax
je 0x404114
push 2
push 0x4112fb
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x16
push str._r_n_LicenseAgreement__r_n
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xffff
push dword [0x412c45]
push dword [0x412b30]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
or eax, eax
je 0x404164
push 2
push 0x4112fb
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x1d
push str._r_n_SetupFiles__r_nSourceFolder
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x200
push dword [0x412c45]
push dword [0x412b34]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x10
push str._r_nSpecialFolder
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0
push 0
push 0x147
push dword [0x412b64]
call sub.user32.dll_SendMessageA
or eax, eax
jne 0x4041d4
push 0xc
push str.System_Drive
jmp 0x404259
cmp eax, 1
jne 0x4041e2
push 0xd
push str.Program_Files
jmp 0x404259
cmp eax, 2
jne 0x4041f0
push 0xc
push str.Common_Files
jmp 0x404259
cmp eax, 3
jne 0x4041fe
push 7
push str.Windows
jmp 0x404259
cmp eax, 4
jne 0x40420c
push 6
push str.System
jmp 0x404259
cmp eax, 5
jne 0x40421a
push 0xc
push str.User_Profile
jmp 0x404259
cmp eax, 6
jne 0x404228
push 0x10
push str.Application_Data
jmp 0x404259
cmp eax, 7
jne 0x404236
push 0xc
push str.My_Documents
jmp 0x404259
cmp eax, 8
jne 0x404244
push 7
push 0x410d64
jmp 0x404259
cmp eax, 9
jne 0x404252
push 0x11
push str.Current_Directory
jmp 0x404259
push 0xb
push str.Dont_use__
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xc
push str._r_nSetupPath
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x100
push dword [0x412c45]
push dword [0x412b6c]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xc
push str._r_nSetupFile
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x100
push dword [0x412c45]
push dword [0x412b3c]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x1e
push str._r_n_r_n_Shortcuts__r_nProgramGroup
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x100
push dword [0x412c45]
push dword [0x412b38]
call sub.user32.dll_GetWindowTextA
push eax
push dword [0x412c45]
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 2
push 0x4112fb
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push dword [0x412c45]
push 0
push dword [0x412c39]
call sub.KERNEL32.DLL_HeapFree
mov esi, dword [0x412c41]
cmp dword [esi], 0
je 0x404471
push esi
mov dword [0x412924], 0x11
push dword [esi]
pop dword [0x412928]
mov dword [0x412934], 0x4116ff
push 0x412924
push 0
push 0x110c
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
or eax, eax
jne 0x404384
pop esi
jmp 0x404469
push dword [esi]
pop eax
push eax
push 3
push 0x110a
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
or eax, eax
je 0x4043ff
cmp dword [0x412c1c], eax
je 0x4043ff
push eax
mov dword [0x412924], 0x11
mov dword [0x412928], eax
mov dword [0x412934], 0x411803
push 0x412924
push 0
push 0x110c
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
push 0x410e60
push dword [0x412934]
call sub.KERNEL32.DLL_lstrcatA
push 0x4116ff
push eax
call sub.KERNEL32.DLL_lstrcatA
push eax
push 0x4116ff
call sub.KERNEL32.DLL_lstrcpyA
jmp 0x404386
push 0x4116ff
call sub.KERNEL32.DLL_lstrlenA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 1
push 0x411304
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
pop esi
xor eax, eax
xor ecx, ecx
cmp byte [ecx + esi + 4], 0
je 0x40444f
inc eax
pushal
lea ecx, [ecx + str.dsmpq]
push 1
push ecx
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
popal
inc ecx
cmp ecx, 5
jne 0x404431
push esi
push 2
push 0x4112fb
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
pop esi
add esi, 9
jmp 0x40433d
push 0xe
push str._r_n_Registry__r_n
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0
push 0
push 0x1004
push dword [0x412b40]
call sub.user32.dll_SendMessageA
dec eax
mov dword [0x412c7a], eax
cmp dword [0x412c7a], 0xffffffff
je 0x40469e
mov eax, 0x411a0b
mov byte [eax], 0x5b
inc eax
push eax
mov dword [0x412980], eax
mov dword [0x41296c], 1
mov dword [0x412984], 0x104
mov dword [0x412974], 0
push 0x41296c
push dword [0x412c7a]
push 0x102d
push dword [0x412b40]
call sub.user32.dll_SendMessageA
pop ecx
mov dword [ecx + eax], 0xa0d5d
add eax, 4
push eax
push 0x411a0b
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov eax, 0x411a0b
mov byte [eax], 0x22
inc eax
push eax
mov dword [0x412980], eax
mov dword [0x412974], 1
push 0x41296c
push dword [0x412c7a]
push 0x102d
push dword [0x412b40]
call sub.user32.dll_SendMessageA
pop ecx
or eax, eax
je 0x404551
mov dword [ecx + eax], 0x22
inc eax
jmp 0x404555
mov byte [ecx - 1], 0x40
mov byte [ecx + eax], 0x3d
add eax, 2
push eax
push 0x411a0b
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov dword [0x412980], 0x411a0b
mov dword [0x412974], 2
push 0x41296c
push dword [0x412c7a]
push 0x102d
push dword [0x412b40]
call sub.user32.dll_SendMessageA
cmp eax, 6
jne 0x40462c
mov eax, 0x411a0b
mov byte [eax], 0x22
push 1
push eax
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov dword [0x412980], 0x4116ff
mov dword [0x412974], 3
push 0x41296c
push dword [0x412c7a]
push 0x102d
push dword [0x412b40]
call sub.user32.dll_SendMessageA
mov ebx, 0x4116ff
mov ecx, 0x411a0b
xor esi, esi
or eax, eax
je 0x404613
mov dl, byte [ebx]
cmp dl, 0x5c
je 0x404606
cmp dl, 0x22
jne 0x40460b
mov byte [esi + ecx], 0x5c
inc esi
mov byte [esi + ecx], dl
inc esi
inc ebx
dec eax
jne 0x4045fa
mov dword [esi + ecx], 0xa0d22
add esi, 3
push esi
push ecx
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
jmp 0x404693
push 6
push str.dword:
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov dword [0x412980], 0x4116ff
mov dword [0x412974], 3
push 0x41296c
push dword [0x412c7a]
push 0x102d
push dword [0x412b40]
call sub.user32.dll_SendMessageA
mov esi, 0x4116ff
push esi
call fcn.0040ea38
push esi
push eax
call fcn.0040eb1c
mov word [esi + 8], 0xa0d
push 0xa
push esi
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
dec dword [0x412c7a]
jmp 0x40449d
push 0x12
push str._r_n_Requirements__r_n
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xf
push str.OperatingSystem
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov dword [0x4116ff], 0x3d
mov dword [0x412c29], 2
push 0
push 0
push 0x147
push dword [0x412b74]
call sub.user32.dll_SendMessageA
cmp eax, 0xa
jl 0x4046f5
inc dword [0x412c29]
push 0x411700
push eax
call fcn.0040eac0
mov eax, dword [0x412c29]
mov word [eax + 0x4116ff], 0xa0d
inc eax
inc eax
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xc
push str.NetFramework
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 1
push 0x411304
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x35
push dword [0x412ac0]
call sub.user32.dll_IsDlgButtonChecked
cmp eax, 1
jne 0x404792
push 4
push 0x412cd8
push dword [0x412b80]
call sub.user32.dll_GetWindowTextA
push 3
push 0x412cd8
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov word [0x412cd8], 0xa0d
mov dword [0x412cd8], 0xa0d
push 2
jmp 0x40479e
mov dword [0x412cd8], 0xa0d30
push 3
push 0x412cd8
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x10
push str.NetFrameworkLink
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 1
push 0x411304
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push str.http:__www.microsoft.com_en_us_download_details.aspx_id17718
call sub.KERNEL32.DLL_lstrlenA
push eax
push str.http:__www.microsoft.com_en_us_download_details.aspx_id17718
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov dword [0x412cd8], 0xa0d
push 2
push 0x412cd8
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xb
push str.AdminRights
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x34
push dword [0x412ac0]
call sub.user32.dll_IsDlgButtonChecked
mov ecx, 0x412cd8
mov dword [ecx], 0xa0d303d
cmp eax, 1
jne 0x40483d
mov word [ecx], 0x313d
push 4
push ecx
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x15
push str._r_n_AfterInstalling__r_n
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0xa
push str.RunCommand
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 1
push 0x411304
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x3e
push dword [0x412ac0]
call sub.user32.dll_IsDlgButtonChecked
cmp eax, 1
jne 0x4048b9
push 0x104
push 0x4116ff
push dword [0x412c08]
call sub.user32.dll_GetWindowTextA
push eax
push 0x4116ff
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
mov dword [0x412cd8], 0xa0d
push 2
push 0x412cd8
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 6
push str.Reboot
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push 0x3c
push dword [0x412ac0]
call sub.user32.dll_IsDlgButtonChecked
mov ecx, 0x412cd8
mov dword [ecx], 0xa0d303d
cmp eax, 1
jne 0x404909
mov word [ecx], 0x313d
push 4
push ecx
push dword [0x412c7e]
call sub.KERNEL32.DLL__hwrite
push dword [0x412c7e]
call sub.KERNEL32.DLL__lclose
jmp 0x40515e
cmp dword [ebp + 0x10], 4
jne 0x40494c
push 0
push 0x40824a
push dword [0x412ac0]
push 5
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0x10], 8
je 0x40495c
cmp dword [ebp + 0x10], 0xd
jne 0x404a38
push 0x100
push 0x411803
push 0
call sub.KERNEL32.DLL_GetModuleFileNameA
or eax, eax
je 0x404996
dec eax
cmp byte [eax + 0x411803], 0x5c
jne 0x40496d
mov byte [eax + 0x411804], 0
push str.images
push 0x411803
call sub.KERNEL32.DLL_lstrcatA
mov dword [0x412870], eax
mov byte [0x4116ff], 0
mov dword [0x412844], 0x4c
mov dword [0x412878], 0x28180c
push dword [0x412ac0]
pop dword [0x412848]
push dword [0x412abc]
pop dword [0x41284c]
mov dword [0x412850], 0x410e8e
mov dword [0x412860], 0x4116ff
mov dword [0x412864], 0x104
mov dword [0x412874], 0
push 0x412844
call sub.comdlg32.dll_GetOpenFileNameA
mov dword [0x412870], 0
or eax, eax
je 0x40515e
mov eax, dword [0x412b9c]
cmp dword [ebp + 0x10], 7
je 0x404a28
mov eax, dword [0x412ba8]
cmp dword [ebp + 0x10], 8
je 0x404a28
mov eax, dword [0x412bbc]
push 0x4116ff
push eax
call sub.user32.dll_SetWindowTextA
jmp 0x40515e
cmp dword [ebp + 0x10], 6
jne 0x404a67
cmp dword [0x412cd3], 0
je 0x404a67
push dword [ebp + 0x10]
push 0x40817c
push dword [0x412ac0]
push 4
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0x10], 9
jne 0x404a96
mov eax, 0xffffffff
mov dword [0x412c7a], eax
push 0
push 0x407821
push dword [0x412ac0]
push 2
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0x10], 0xa
jne 0x404ab7
push 2
push 0xffffffffffffffff
push 0x100c
push dword [0x412b40]
call sub.user32.dll_SendMessageA
jmp 0x404a72
cmp dword [ebp + 0x10], 0xb
jne 0x404af7
push 2
push 0xffffffffffffffff
push 0x100c
push dword [0x412b40]
call sub.user32.dll_SendMessageA
push 0
push eax
push 0x1008
push dword [0x412b40]
call sub.user32.dll_SendMessageA
or eax, eax
je 0x40515e
dec dword [0x412c76]
jmp 0x40515e
cmp dword [ebp + 0x10], 0xc
jne 0x404ba4
mov eax, 0x4116ff
mov ecx, 0x10
dec ecx
mov dword [eax + ecx*4], 0xffffff
jne 0x404b0b
mov dword [0x412a80], eax
mov dword [0x412a70], 0x24
push dword [ebp + 8]
pop dword [0x412a74]
push dword [0x412abc]
pop dword [0x412a78]
push 0x4095d0
pop dword [0x412a8c]
mov dword [0x412a88], 0
mov dword [0x412a90], 0
mov dword [0x412a84], 0x13
push 0x412a70
call sub.comdlg32.dll_ChooseColorA
xor esi, esi
cmp byte [0x412d25], 1
je 0x404b78
inc esi
push esi
push dword [0x412ad0]
call sub.user32.dll_ShowWindow
push esi
push dword [0x412ad4]
call sub.user32.dll_ShowWindow
push 0
push 0x412824
push dword [ebp + 8]
call sub.user32.dll_InvalidateRect
jmp 0x40515e
cmp dword [ebp + 0x10], 0xe
jne 0x404c26
mov eax, 0x4116ff
mov ecx, 0x10
dec ecx
mov dword [eax + ecx*4], 0xffffff
jne 0x404bb4
mov dword [0x412a80], eax
mov dword [0x412a70], 0x24
push dword [ebp + 8]
pop dword [0x412a74]
push dword [0x412abc]
pop dword [0x412a78]
push dword [0x412d26]
pop dword [0x412a7c]
push 0x4095d0
pop dword [0x412a8c]
mov dword [0x412a88], 1
mov dword [0x412a84], 0x13
push 0x412a70
call sub.comdlg32.dll_ChooseColorA
mov eax, dword [0x412a7c]
mov dword [0x412d26], eax
jmp 0x40515e
cmp dword [ebp + 0x10], 0x96
jne 0x404c4e
push 0
push 0x408659
push dword [0x412ac0]
push 6
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0x10], 0x97
jne 0x404c76
push 0
push 0x408a3a
push dword [0x412ac0]
push 7
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0x10], 0x98
jne 0x404c9f
push dword [ebp + 0x10]
push 0x408aa9
push dword [0x412ac0]
push 8
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0x10], 0x99
jne 0x40515e
push 0
push 0x408d9e
push dword [0x412ac0]
push 0xa
push dword [0x412abc]
call sub.user32.dll_DialogBoxParamA
jmp 0x40515e
cmp dword [ebp + 0xc], 0x4e
jne 0x4050b1
mov eax, dword [ebp + 0x14]
cmp dword [eax + 8], 0xfffffdf8
jne 0x404dd6
cmp dword [eax + 4], 0x65
jne 0x404cf7
mov dword [eax + 0xc], str.Create_new_project
jmp 0x404dd6
cmp dword [eax + 4], 2
jne 0x404d09
mov dword [eax + 0xc], str.Open_existing_project
jmp 0x404dd6
cmp dword [eax + 4], 3
jne 0x404d1b
mov dword [eax + 0xc], str.Save_project
jmp 0x404dd6
cmp dword [eax + 4], 4
jne 0x404d2d
mov dword [eax + 0xc], 0x410113
jmp 0x404dd6
cmp dword [eax + 4], 5
jne 0x404d3f
mov dword [eax + 0xc], str.Help
jmp 0x404dd6
cmp dword [eax + 4], 7
je 0x404d51
cmp dword [eax + 4], 8
je 0x404d51
cmp dword [eax + 4], 0xd
jne 0x404d5a
mov dword [eax + 0xc], str.Open_file
jmp 0x404dd6
cmp dword [eax + 4], 6
je 0x404d69
cmp dword [eax + 4], 0x96
jne 0x404d72
mov dword [eax + 0xc], str.Preview
jmp 0x404dd6
cmp dword [eax + 4], 9
jne 0x404d81
mov dword [eax + 0xc], str.Add_registry_value
jmp 0x404dd6
cmp dword [eax + 4], 0xa
jne 0x404d90
mov dword [eax + 0xc], str.Edit_selected_item
jmp 0x404dd6
cmp dword [eax + 4], 0xb
jne 0x404d9f
mov dword [eax + 0xc], str.Delete_item
jmp 0x404dd6
cmp dword [eax + 4], 0xc
je 0x404dab
cmp dword [eax + 4], 0xe
jne 0x404db4
mov dword [eax + 0xc], str.Edit_font_color
jmp 0x404dd6
cmp dword [eax + 4], 0x97
jne 0x404dc6
mov dword [eax + 0xc], 0x410f9c
jmp 0x404dd6
cmp dword [eax + 4], 0x99
jne 0x404dd6
mov dword [eax + 0xc], str.Browse_installation_files
mov eax, dword [ebp + 0x14]
cmp dword [eax + 8], 0xfffffffd
jne 0x404e01
push 2
push 0xffffffffffffffff
push 0x100c
push dword [0x412b40]
call sub.user32.dll_SendMessageA
cmp eax, 0xffffffff
jne 0x404a72
jmp 0x40515e
cmp dword [eax + 8], 0xfffffe6e
jne 0x40515e
mov edx, dword [eax + 0x14]
mov dword [0x412c29], edx
mov ecx, dword [eax + 0x3c]
or ecx, ecx
je 0x404e24
mov dword [0x412c8c], ecx
mov byte [0x412c75], 0
or edx, edx
je 0x404f38
mov dword [0x412924], 0x50
mov dword [0x412928], edx
push 0x412924
push 0
push 0x110c
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
cmp dword [0x412944], 0
jne 0x404f38
mov esi, dword [0x412c41]
lodsd eax, dword [esi]
cmp dword [0x412c29], eax
je 0x404e7b
add esi, 5
jmp 0x404e6d
push esi
push 0x17
push dword [ebp + 8]
call sub.user32.dll_IsDlgButtonChecked
pop esi
mov byte [esi], al
cmp eax, 1
jne 0x404e94
inc byte [0x412c75]
inc esi
push esi
push 0x18
push dword [ebp + 8]
call sub.user32.dll_IsDlgButtonChecked
pop esi
mov byte [esi], al
cmp eax, 1
jne 0x404eae
inc byte [0x412c75]
inc esi
push esi
push 0x19
push dword [ebp + 8]
call sub.user32.dll_IsDlgButtonChecked
pop esi
mov byte [esi], al
cmp eax, 1
jne 0x404ec8
inc byte [0x412c75]
inc esi
push esi
push 0x1a
push dword [ebp + 8]
call sub.user32.dll_IsDlgButtonChecked
pop esi
mov byte [esi], al
cmp eax, 1
jne 0x404ee2
inc byte [0x412c75]
inc esi
push esi
push 0x1b
push dword [ebp + 8]
call sub.user32.dll_IsDlgButtonChecked
pop esi
mov byte [esi], al
cmp eax, 1
jne 0x404efc
inc byte [0x412c75]
cmp byte [0x412c75], 0
jne 0x404f38
mov edx, esi
sub edx, 8
mov eax, edx
cmp dword [eax + 9], 0
je 0x404f17
add eax, 9
jmp 0x404f0c
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov cl, byte [eax + 8]
mov byte [edx + 8], cl
mov dword [eax], 0
mov dword [eax + 4], 0
mov byte [eax + 8], 0
mov dword [0x412924], 0x50
push dword [0x412c8c]
pop dword [0x412928]
push 0x412924
push 0
push 0x110c
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
mov esi, dword [0x412c41]
cmp dword [0x412944], 0
je 0x404f7c
add esi, 0x1efb
jmp 0x404f94
mov ecx, dword [0x412c8c]
lodsd eax, dword [esi]
cmp eax, ecx
je 0x404f94
add esi, 5
or eax, eax
jne 0x404f82
mov dword [esi - 9], ecx
sub esi, 5
mov edx, 0
lodsb al, byte [esi]
or al, al
je 0x404fa3
mov edx, 1
push esi
push edx
push 0x17
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
pop esi
mov edx, 0
lodsb al, byte [esi]
or al, al
je 0x404fc2
mov edx, 1
push esi
push edx
push 0x18
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
pop esi
mov edx, 0
lodsb al, byte [esi]
or al, al
je 0x404fe1
mov edx, 1
push esi
push edx
push 0x19
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
pop esi
mov edx, 0
lodsb al, byte [esi]
or al, al
je 0x405000
mov edx, 1
push esi
push edx
push 0x1a
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
pop esi
mov edx, 0
lodsb al, byte [esi]
or al, al
je 0x40501f
mov edx, 1
push esi
push edx
push 0x1b
push dword [0x412ac0]
call sub.user32.dll_CheckDlgButton
pop esi
mov eax, dword [0x412c1c]
cmp dword [0x412c29], eax
je 0x40515e
push dword [0x412c29]
push 4
push 0x110a
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
or eax, eax
jne 0x40515e
cmp byte [0x412c75], 0
je 0x405075
mov dword [0x41293c], 2
jmp 0x40507f
mov dword [0x41293c], 0xfffffffe
mov dword [0x412924], 0x12
push dword [0x412c29]
pop dword [0x412928]
push 0x412924
push 0
push 0x110d
push dword [0x412ac4]
call sub.user32.dll_SendMessageA
jmp 0x40515e
cmp dword [ebp + 0xc], 0x138
jne 0x40514e
push dword [ebp + 0x14]
call sub.user32.dll_GetDlgCtrlID
mov ecx, dword [0x412d19]
cmp eax, 0x94
je 0x40512e
cmp eax, 7
je 0x405137
cmp eax, 0x91
je 0x405137
mov ecx, dword [0x412d2a]
cmp eax, 0x17d
je 0x40512e
cmp eax, 4
je 0x4050fb
cmp eax, 5
je 0x4050fb
cmp eax, 6
jne 0x40515e
xor ecx, ecx
cmp byte [0x412c28], 6
jne 0x40512e
cmp byte [0x412d25], 1
je 0x405110
inc ecx
push ecx
push ecx
push dword [0x412ad0]
call sub.user32.dll_ShowWindow
push dword [0x412ad4]
call sub.user32.dll_ShowWindow
mov ecx, dword [0x412a7c]
push ecx
push dword [ebp + 0x10]
call sub.gdi32.dll_SetTextColor
push 1
push dword [ebp + 0x10]
call sub.gdi32.dll_SetBkMode
push 5
call sub.gdi32.dll_GetStockObject
leave
ret 0x10
cmp dword [ebp + 0xc], 0x10
jne 0x40515e
push 0
push dword [ebp + 8]
call sub.user32.dll_EndDialog
xor eax, eax
leave
ret 0x10