Function at 0x1000c5c9
Capabilities:
Check os version
Get disk size
Read .ini file
Set registry value
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10089956
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x136c
call fcn.100714c0
push esi
push edi
mov dword [ebp - 0xe8], 0xffffffff
mov dword [ebp - 0x16c], 0xfffffff7
mov dword [ebp - 0x1a8], 0x7d228d5f
mov dword [ebp - 0x1fc], 0xfffffff8
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x164], 0x69ff4caa
mov dword [ebp - 0x49c], 0x3ec3
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x1124], 0x3cdc1821
mov dword [ebp - 0x11d0], 2
mov dword [ebp - 0x10f4], 0x8915ced7
mov dword [ebp - 0x1f8], 0
jmp 0x1000c674
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x1000c690
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x1350], 0xdb2213aa
jmp 0x1000c667
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x6974edf0
jle 0x1000c6b4
mov dword [ebp - 0xa80], 1
jmp 0x1000c6bb
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0xa80]
jge 0x1000c6db
cmp dword [ebp - 0x1a8], 0
jne 0x1000c6db
and dword [ebp - 0xb10], 0
jmp 0x1000c6e5
mov dword [ebp - 0xb10], 1
mov eax, dword [ebp - 0xb10]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x3a8], eax
jne 0x1000c717
mov dword [ebp - 0xb18], 1
jmp 0x1000c71e
and dword [ebp - 0xb18], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0xb18], eax
jge 0x1000c738
mov dword [ebp - 0xb98], 1
jmp 0x1000c73f
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
add eax, dword [ebp - 0xe8]
je 0x1000c76c
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x1000c76c
mov dword [ebp - 0xb20], 1
jmp 0x1000c773
and dword [ebp - 0xb20], 0
cmp dword [ebp - 0xb20], 0xffffffff
jae 0x1000c788
mov dword [ebp - 0xb28], 1
jmp 0x1000c78f
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0xb28]
jle 0x1000c7a9
mov dword [ebp - 0xb30], 1
jmp 0x1000c7b0
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0xb30], eax
jne 0x1000c7ca
mov dword [ebp - 0xb38], 1
jmp 0x1000c7d1
and dword [ebp - 0xb38], 0
cmp dword [ebp - 0xb38], 0xffffffff
jle 0x1000c7e6
mov dword [ebp - 0xb40], 1
jmp 0x1000c7ed
and dword [ebp - 0xb40], 0
imul eax, dword [ebp - 0xb40], 0x7c0e
test eax, eax
jge 0x1000c807
mov dword [ebp - 0xafc], 1
jmp 0x1000c80e
and dword [ebp - 0xafc], 0
mov eax, dword [ebp - 0x49c]
cmp dword [ebp - 0xafc], eax
jg 0x1000c828
mov dword [ebp - 0x98c], 1
jmp 0x1000c82f
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x98c]
jg 0x1000c849
mov dword [ebp - 0x48c], 1
jmp 0x1000c850
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0x31dda87b
jg 0x1000c868
mov dword [ebp - 0x994], 1
jmp 0x1000c86f
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x2b4], eax
jg 0x1000c895
mov dword [ebp - 0xc2c], 1
jmp 0x1000c89c
and dword [ebp - 0xc2c], 0
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x11d8], eax
cmp dword [ebp - 0x164], 0
je 0x1000c9a1
mov dword [ebp - 0x434], 0xf8f5
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x10fc], eax
mov eax, 0xcdd5
test eax, eax
je 0x1000c8e9
cmp dword [ebp - 0x434], 0
je 0x1000c8e9
mov dword [ebp - 0xc34], 1
jmp 0x1000c8f0
and dword [ebp - 0xc34], 0
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0xfa8], eax
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0xfac], eax
mov eax, dword [ebp - 0x434]
cmp dword [ebp - 0x1fc], eax
je 0x1000c922
mov dword [ebp - 0x494], 1
jmp 0x1000c929
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x1fc]
imul eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x164]
je 0x1000c94a
mov dword [ebp - 0x99c], 1
jmp 0x1000c951
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0x99c]
je 0x1000c96b
mov dword [ebp - 0x9a4], 1
jmp 0x1000c972
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0x49c]
cmp dword [ebp - 0x9a4], eax
jl 0x1000c98c
mov dword [ebp - 0x4a4], 1
jmp 0x1000c993
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x164], eax
jmp 0x1000c9e8
mov dword [ebp - 0x16c], 1
jmp 0x1000c9ba
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
jl 0x1000c9e8
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x1000c9e6
push 0
push 0x894
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
jmp 0x1000c9ad
mov dword [ebp - 0x3a8], 0
push 2
lea ecx, [ebp - 0xf64]
call fcn.10019343
and dword [ebp - 4], 0
mov dword [ebp - 0x9c], 0x11e7bff4
mov dword [ebp - 0xf0], 0xfffffffe
mov dword [ebp - 0x408], 0xfffffff6
mov dword [ebp - 0x3b0], 0xe01e6e83
mov dword [ebp - 0x9cc], 1
mov dword [ebp - 0xc3c], 0xfffffffe
mov dword [ebp - 0x204], 0
jmp 0x1000ca58
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 2
jge 0x1000ca7a
push dword [ebp - 0x204]
lea ecx, [ebp - 0xf64]
call fcn.100193d1
mov dword [eax], 0x2e31d83
jmp 0x1000ca4b
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jne 0x1000cb27
cmp dword [ebp - 0xf0], 0
jne 0x1000caac
push 8
pop eax
test eax, eax
jne 0x1000caac
and dword [ebp - 0x9ac], 0
jmp 0x1000cab6
mov dword [ebp - 0x9ac], 1
cmp dword [ebp - 0x9ac], 0x1993
je 0x1000cace
mov dword [ebp - 0x4ac], 1
jmp 0x1000cad5
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x4ac], eax
jne 0x1000caf5
cmp dword [ebp - 0xf0], 0
jne 0x1000caf5
and dword [ebp - 0x9b4], 0
jmp 0x1000caff
mov dword [ebp - 0x9b4], 1
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x9b4]
imul eax, eax, 0xffffffff
cmp eax, 0xc8b4
jg 0x1000cb1e
cmp dword [ebp - 0xf0], 0
jne 0x1000cb27
and dword [ebp - 0x4b4], 0
jmp 0x1000cb31
mov dword [ebp - 0x4b4], 1
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x4b4], eax
jl 0x1000cb4b
mov dword [ebp - 0x9bc], 1
jmp 0x1000cb52
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x9bc]
sub eax, dword [ebp - 0x408]
jne 0x1000cb81
cmp dword [ebp - 0x3b0], 0
jne 0x1000cb81
cmp dword [ebp - 0x9cc], 0
jne 0x1000cb81
and dword [ebp - 0x4bc], 0
jmp 0x1000cb8b
mov dword [ebp - 0x4bc], 1
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x408]
cmp eax, 0x71d69170
jg 0x1000cbb6
mov dword [ebp - 0x9c4], 1
jmp 0x1000cbbd
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x3b0]
add eax, dword [ebp - 0x9c4]
cmp eax, 0x372625aa
jge 0x1000cbe2
cmp dword [ebp - 0xf0], 0
jne 0x1000cbe2
and dword [ebp - 0x4c4], 0
jmp 0x1000cbec
mov dword [ebp - 0x4c4], 1
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x4c4], eax
jge 0x1000cc06
mov dword [ebp - 0x4cc], 1
jmp 0x1000cc0d
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x9cc]
cmp dword [ebp - 0x4cc], eax
jne 0x1000cc27
mov dword [ebp - 0x9d4], 1
jmp 0x1000cc2e
and dword [ebp - 0x9d4], 0
push 0
lea ecx, [ebp - 0xf64]
call fcn.100193d1
mov dword [eax], 1
imul eax, dword [ebp - 0x9d4], 0xffffffff
cmp eax, 1
je 0x1000cc59
mov dword [ebp - 0x4d4], 1
jmp 0x1000cc60
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0xc3c], eax
mov eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x9c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf64]
call fcn.100193cc
mov dword [ebp - 0xf8], 0xffffffff
push 2
lea ecx, [ebp - 0xce0]
call fcn.10019343
mov dword [ebp - 4], 1
mov dword [ebp - 0x33c], 0
jmp 0x1000ccc4
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 2
jge 0x1000cce6
push dword [ebp - 0x33c]
lea ecx, [ebp - 0xce0]
call fcn.100193d1
mov dword [eax], 7
jmp 0x1000ccb7
push 1
lea ecx, [ebp - 0xce0]
call fcn.100193d1
and dword [eax], 0
jmp 0x1000cd1c
push 1
lea ecx, [ebp - 0xce0]
call fcn.100193d1
mov dword [ebp - 0x9dc], eax
mov eax, dword [ebp - 0x9dc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x9dc]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xce0]
call fcn.100193d1
cmp dword [eax], 0x15
jle 0x1000cdd7
mov dword [ebp - 0x20c], 0x76e6bacd
mov dword [ebp - 0x20c], 0
jmp 0x1000cd55
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0xffffffeb
je 0x1000cdd2
mov dword [ebp - 0x2bc], 0xd94543be
mov byte [ebp - 0x154], 0
movzx eax, byte [ebp - 0x154]
test eax, eax
je 0x1000cd87
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetMenu]
mov dword [ebp - 0x2bc], 0
jmp 0x1000cda0
mov eax, dword [ebp - 0x2bc]
dec eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0xfffffff9
jl 0x1000cdcd
mov byte [ebp - 0xd3], 0
movzx eax, byte [ebp - 0xd3]
test eax, eax
je 0x1000cdcb
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
jmp 0x1000cd93
jmp 0x1000cd48
jmp 0x1000ccf8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xce0]
call fcn.100193cc
mov dword [ebp - 0x168], 0xfffffff7
push 1
lea ecx, [ebp - 0xcf0]
call fcn.10019343
mov dword [ebp - 4], 2
mov dword [ebp - 0xff8], 0xfffffffe
mov dword [ebp - 0x1000], 5
mov dword [ebp - 0x1008], 0x65256810
mov dword [ebp - 0x214], 0
jmp 0x1000ce3b
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x1000ce5d
push dword [ebp - 0x214]
lea ecx, [ebp - 0xcf0]
call fcn.100193d1
mov dword [eax], 0x5d6c05ba
jmp 0x1000ce2e
push 0
lea ecx, [ebp - 0xcf0]
call fcn.100193d1
and dword [eax], 0
jmp 0x1000ce93
push 0
lea ecx, [ebp - 0xcf0]
call fcn.100193d1
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x4dc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4dc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xcf0]
call fcn.100193d1
cmp dword [eax], 2
jl 0x1000d03d
mov dword [ebp - 0x314], 0xb4074dd
mov dword [ebp - 0x1010], 0xffffffff
mov dword [ebp - 0x1018], 0x9aaed6b6
mov dword [ebp - 0x1020], 6
mov dword [ebp - 0x1028], 0xffffffff
mov dword [ebp - 0x1030], 0xa9bca7b
mov dword [ebp - 0x1038], 0x6b43d271
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x1000cf09
push 0
call dword [sym.imp.GDI32.dll_GetObjectType]
mov dword [ebp - 0x314], 0
jmp 0x1000cf22
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x19
jge 0x1000d038
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x1040], 0xfffffffb
push 3
lea ecx, [ebp - 0x1178]
call fcn.10019343
mov byte [ebp - 4], 3
mov dword [ebp - 0x9e4], 7
mov dword [ebp - 0x21c], 0
jmp 0x1000cf77
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x1000cf99
push dword [ebp - 0x21c]
lea ecx, [ebp - 0x1178]
call fcn.100193d1
mov dword [eax], 0x63ab1943
jmp 0x1000cf6a
mov dword [ebp - 0x2c4], 0
jmp 0x1000cfb2
mov eax, dword [ebp - 0x2c4]
dec eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0xffffffe2
jg 0x1000d024
mov dword [ebp - 0x1048], 0x9598aaf0
mov dword [ebp - 0x1050], 0xd5befa1e
mov dword [ebp - 0x1058], 0x491ba6b4
mov dword [ebp - 0x1060], 0xffffffff
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1000d015
push 0
push 0xc09
push 0x2658
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
mov eax, dword [ebp - 0x9e4]
inc eax
mov dword [ebp - 0x9e4], eax
jmp 0x1000cfa5
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1178]
call fcn.100193cc
jmp 0x1000cf15
jmp 0x1000ce6f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcf0]
call fcn.100193cc
mov dword [ebp - 0x1d8], 0x7d228d5f
mov dword [ebp - 0x344], 0xfffffff8
mov dword [ebp - 0x184], 0xd29be1d9
mov dword [ebp - 0x4e4], 0xf3d37a5b
mov dword [ebp - 0x4ec], 0xfffffffb
mov dword [ebp - 0xc78], 0xcb972524
mov dword [ebp - 0x68], 0
jmp 0x1000d098
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x1000d0ae
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x1300], 0xc59cdc34
jmp 0x1000d091
mov dword [ebp - 0x68], 0
jmp 0x1000d0be
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x1000d0d4
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x1348], 0xfd43ddca
jmp 0x1000d0b7
mov byte [ebp - 0x156], 0
movzx eax, byte [ebp - 0x156]
test eax, eax
je 0x1000d102
push 0x247e
push 0x15b8
push 0x1238
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1068], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x9ec], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x9ec]
mov dword [ebp + eax - 0x1300], ecx
mov eax, dword [ebp - 0x9ec]
mov dword [ebp - 0x4ec], eax
imul eax, dword [ebp - 0x4ec], 0
cmp eax, 0xfffffffb
jge 0x1000d15c
mov dword [ebp - 0x9f4], 1
jmp 0x1000d163
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x184]
cmp eax, dword [ebp - 0x9f4]
jle 0x1000d186
cmp dword [ebp - 0xc78], 0
je 0x1000d186
mov dword [ebp - 0x43c], 1
jmp 0x1000d18d
and dword [ebp - 0x43c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x43c]
mov dword [ebp + eax - 0x1348], ecx
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x43c], eax
jg 0x1000d1ba
mov dword [ebp - 0x4f4], 1
jmp 0x1000d1c1
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x184]
cmp eax, dword [ebp - 0x4f4]
je 0x1000d1db
mov dword [ebp - 0x9fc], 1
jmp 0x1000d1e2
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x9fc]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0x18c], 0x69ff4caa
mov dword [ebp - 0xa8], 0xe0648261
mov dword [ebp - 0x224], 0
jmp 0x1000d225
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x1000d241
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x128c], 0xe4fc2285
jmp 0x1000d218
mov dword [ebp - 0xa8], 0x13
jmp 0x1000d25a
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x12
jge 0x1000d284
mov dword [ebp - 0x4fc], 0x446df37d
cmp dword [ebp - 0x4fc], 0
je 0x1000d278
jmp 0x1000d284
mov dword [ebp - 0x4fc], 8
jmp 0x1000d24d
mov dword [ebp - 0xa8], 0x15
jmp 0x1000d29d
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x12
je 0x1000d309
mov dword [ebp - 0x1c8], 0x72d9ee1c
mov dword [ebp - 0x1070], 0x4c59cdc3
mov dword [ebp - 0x1c8], 0
jmp 0x1000d2d3
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jg 0x1000d307
mov dword [ebp - 0xa04], 5
mov eax, dword [ebp - 0xa04]
inc eax
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp + eax*4 - 0x128c], 0
je 0x1000d305
jmp 0x1000d2c6
jmp 0x1000d2c6
jmp 0x1000d290
mov dword [ebp - 0x5a4], 0x3ec3
mov dword [ebp - 0x14], 0xfc07e17f
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x354], 0
jmp 0x1000d33d
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 1
jge 0x1000d359
mov eax, dword [ebp - 0x354]
mov dword [ebp + eax*4 - 0x1078], 0x255d
jmp 0x1000d330
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1080], eax
mov eax, dword [ebp - 0x14]
sub eax, 0xa
cmp eax, 0x2d91
jl 0x1000d37b
mov dword [ebp - 0x504], 1
jmp 0x1000d382
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x504], eax
je 0x1000d399
mov dword [ebp - 0xa0c], 1
jmp 0x1000d3a0
and dword [ebp - 0xa0c], 0
cmp dword [ebp - 0xa0c], 0xffff
ja 0x1000d3b8
mov dword [ebp - 0x50c], 1
jmp 0x1000d3bf
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x50c], eax
jg 0x1000d3d9
cmp dword [ebp - 0x14], 0
jne 0x1000d3d9
and dword [ebp - 0xc80], 0
jmp 0x1000d3e3
mov dword [ebp - 0xc80], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1088], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1090], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1098], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x174], eax
push 6
pop eax
sub eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
imul ecx, eax
cmp ecx, dword [ebp - 0x14]
jne 0x1000d4cf
mov dword [ebp - 0x22c], 0
jmp 0x1000d43b
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 3
jge 0x1000d457
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x12c8], 0xf6cbcb1a
jmp 0x1000d42e
mov dword [ebp - 0x14], 0
jmp 0x1000d467
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x1000d496
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x12c8], 0
je 0x1000d47c
jmp 0x1000d496
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x1000d494
call dword [sym.imp.USER32.dll_DestroyCaret]
jmp 0x1000d460
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x1000d4cd
push 0x1138
push 0x1914
push 0x105d
push 0x6e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
jmp 0x1000d52c
mov dword [ebp - 0x14], 0
jmp 0x1000d4df
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x2f
jg 0x1000d52c
mov dword [ebp - 0x174], 0
jmp 0x1000d4fe
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jne 0x1000d52a
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1000d528
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
jmp 0x1000d4f1
jmp 0x1000d4d8
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x2cc], 3
mov dword [ebp - 0xe80], 0xcba2afe0
mov dword [ebp - 0xe7c], 0xcba2afe0
mov dword [ebp - 0xe78], 0xcba2afe0
mov dword [ebp - 0xe74], 0xcba2afe0
lea ecx, [ebp - 0x449]
call fcn.1000c383
push eax
lea eax, [ebp - 0xe70]
push eax
lea eax, [ebp - 0xe80]
push eax
lea ecx, [ebp - 0x12d0]
call fcn.100193e0
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x12a4]
call fcn.100193a2
mov dword [ebp - 4], 4
mov dword [ebp - 0x2cc], 0x1b
jmp 0x1000d5bd
mov eax, dword [ebp - 0x2cc]
dec eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x19
jg 0x1000d6f3
push 4
lea ecx, [ebp - 0xb88]
call fcn.10019343
mov byte [ebp - 4], 5
mov dword [ebp - 0x88], 0
jmp 0x1000d5f4
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x1000d616
push dword [ebp - 0x88]
lea ecx, [ebp - 0xb88]
call fcn.100193d1
mov dword [eax], 0x690f1d89
jmp 0x1000d5e7
mov dword [ebp - 0x88], 0
jmp 0x1000d62f
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x1000d64b
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x1318], 0x7834d8a9
jmp 0x1000d622
push 3
lea ecx, [ebp - 0xb88]
call fcn.100193d1
mov dword [eax], 3
jmp 0x1000d684
push 3
lea ecx, [ebp - 0xb88]
call fcn.100193d1
mov dword [ebp - 0xa14], eax
mov eax, dword [ebp - 0xa14]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xa14]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0xb88]
call fcn.100193d1
cmp dword [eax], 0
jl 0x1000d6bb
mov byte [ebp - 0x158], 0
movzx eax, byte [ebp - 0x158]
test eax, eax
je 0x1000d6b9
push 0
push 0x1c84
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
jmp 0x1000d660
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1318], 0
je 0x1000d6df
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb88]
call fcn.100193cc
jmp 0x1000d5b0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb88]
call fcn.100193cc
jmp 0x1000d5b0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12a4]
call fcn.100193cc
mov dword [ebp - 0x10a0], 0x3cdc1821
mov dword [ebp - 0x10a8], 2
mov dword [ebp - 0xe58], 0x78e045dc
mov dword [ebp - 0xe54], 0x78e045dc
mov dword [ebp - 0xe50], 0x78e045dc
mov dword [ebp - 0xe4c], 0x78e045dc
lea ecx, [ebp - 0x42a]
call fcn.1000c383
push eax
lea eax, [ebp - 0xe48]
push eax
lea eax, [ebp - 0xe58]
push eax
lea ecx, [ebp - 0x1360]
call fcn.100193e0
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd00]
call fcn.100193a2
mov dword [ebp - 4], 6
mov dword [ebp - 0xc88], 0xfffffffd
mov dword [ebp - 0xb8], 0xf16de6ea
mov dword [ebp - 0x17c], 0xec7e011b
mov dword [ebp - 0x194], 0x2d748aee
mov dword [ebp - 0xa34], 0x307758a8
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x1b0], 0x600bf094
mov dword [ebp - 0x234], 0
jmp 0x1000d7d6
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 3
jge 0x1000d7f2
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x380], 0x7a4a12b5
jmp 0x1000d7c9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x380], 0
je 0x1000d825
push 7
pop eax
test eax, eax
je 0x1000d825
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x380], 0
je 0x1000d825
mov dword [ebp - 0x514], 1
jmp 0x1000d82c
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0xc88]
cmp dword [ebp - 0x514], eax
jl 0x1000d846
mov dword [ebp - 0xa1c], 1
jmp 0x1000d84d
and dword [ebp - 0xa1c], 0
push 3
lea ecx, [ebp - 0xd00]
call fcn.100193d1
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa1c]
jg 0x1000d870
mov dword [ebp - 0x51c], 1
jmp 0x1000d877
and dword [ebp - 0x51c], 0
imul eax, dword [ebp - 0x51c], 0x89b4
test eax, eax
jne 0x1000d89a
cmp dword [ebp - 0xb8], 0
je 0x1000d89a
mov dword [ebp - 0xa24], 1
jmp 0x1000d8a1
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0x17c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x380]
cmp dword [ebp - 0x17c], eax
jge 0x1000d8cd
mov dword [ebp - 0x524], 1
jmp 0x1000d8d4
and dword [ebp - 0x524], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x380]
cmp dword [ebp - 0x524], eax
jge 0x1000d90c
cmp dword [ebp - 0x17c], 0
jne 0x1000d90c
push 3
lea ecx, [ebp - 0xd00]
call fcn.100193d1
cmp dword [eax], 0
jne 0x1000d90c
and dword [ebp - 0xa2c], 0
jmp 0x1000d916
mov dword [ebp - 0xa2c], 1
cmp dword [ebp - 0xa2c], 0x64e6
jg 0x1000d92e
mov dword [ebp - 0x52c], 1
jmp 0x1000d935
and dword [ebp - 0x52c], 0
push 2
lea ecx, [ebp - 0xd00]
call fcn.100193d1
mov ecx, dword [ebp - 0x52c]
cmp ecx, dword [eax]
jl 0x1000d958
mov dword [ebp - 0xc90], 1
jmp 0x1000d95f
and dword [ebp - 0xc90], 0
cmp dword [ebp - 0xb8], 0
jne 0x1000d975
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x380], 0
mov esi, dword [ebp - 0x17c]
push 2
lea ecx, [ebp - 0xd00]
call fcn.100193d1
cmp esi, dword [eax]
je 0x1000d998
mov dword [ebp - 0xc98], 1
jmp 0x1000d99f
and dword [ebp - 0xc98], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x380]
mov dword [ebp - 0x10b0], eax
cmp dword [ebp - 0x194], 0x4e630971
jge 0x1000d9c9
mov dword [ebp - 0xca0], 1
jmp 0x1000d9d0
and dword [ebp - 0xca0], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x10b8], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0xa34], eax
cmp dword [ebp - 0xa34], 0x1422
jg 0x1000da0c
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x380], 0
jne 0x1000da0c
and dword [ebp - 0x534], 0
jmp 0x1000da16
mov dword [ebp - 0x534], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x380]
cmp dword [ebp - 0x534], eax
je 0x1000da37
mov dword [ebp - 0xa3c], 1
jmp 0x1000da3e
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0xa3c]
mov dword [ebp - 0x18], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x380]
cmp eax, dword [ebp - 0x18]
je 0x1000da64
mov dword [ebp - 0x53c], 1
jmp 0x1000da6b
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0
je 0x1000de54
mov dword [ebp - 0xa44], 0x38be40e
push 2
lea ecx, [ebp - 0xf34]
call fcn.10019343
mov byte [ebp - 4], 7
mov dword [ebp - 0x31c], 0
jmp 0x1000dab8
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 2
jge 0x1000dada
push dword [ebp - 0x31c]
lea ecx, [ebp - 0xf34]
call fcn.100193d1
mov dword [eax], 0x4edb
jmp 0x1000daab
mov dword [ebp - 0x194], 0
jmp 0x1000daf3
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jg 0x1000ddf4
mov dword [ebp - 0x2d4], 0xfffb
mov dword [ebp - 0x3b8], 0xcbd95d60
mov dword [ebp - 0x18], 2
jmp 0x1000db24
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1000ddef
push 2
lea ecx, [ebp - 0xb7c]
call fcn.10019343
mov byte [ebp - 4], 8
mov dword [ebp - 0xca8], 0
mov dword [ebp - 0x23c], 0
jmp 0x1000db62
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 2
jge 0x1000db81
push dword [ebp - 0x23c]
lea ecx, [ebp - 0xb7c]
call fcn.100193d1
and dword [eax], 0
jmp 0x1000db55
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x380], 0
je 0x1000dbac
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa44], eax
cmp dword [ebp - 0xa44], 0
je 0x1000dbac
mov dword [ebp - 0x55c], 1
jmp 0x1000dbb3
and dword [ebp - 0x55c], 0
push 0
lea ecx, [ebp - 0xb7c]
call fcn.100193d1
mov dword [eax], 0xb447
push 0
lea ecx, [ebp - 0xb7c]
call fcn.100193d1
cmp dword [eax], 0xe206
je 0x1000dbe7
mov dword [ebp - 0x544], 1
jmp 0x1000dbee
and dword [ebp - 0x544], 0
cmp dword [ebp - 0x544], 1
je 0x1000dc03
mov dword [ebp - 0xa4c], 1
jmp 0x1000dc0a
and dword [ebp - 0xa4c], 0
push 0
lea ecx, [ebp - 0xb7c]
call fcn.100193d1
mov ecx, dword [ebp - 0xa4c]
cmp ecx, dword [eax]
jge 0x1000dc3a
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x380], 0
je 0x1000dc3a
mov dword [ebp - 0x54c], 1
jmp 0x1000dc41
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x3b8]
cmp dword [ebp - 0x54c], eax
jl 0x1000dc5b
mov dword [ebp - 0xa54], 1
jmp 0x1000dc62
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xa54], eax
jge 0x1000dc79
mov dword [ebp - 0x554], 1
jmp 0x1000dc80
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x554]
jle 0x1000dc97
mov dword [ebp - 0xa5c], 1
jmp 0x1000dc9e
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0xa5c]
mov dword [ebp - 0xca8], eax
mov dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0
je 0x1000dcd0
push 2
pop eax
test eax, eax
je 0x1000dcd0
mov dword [ebp - 0xcb0], 1
jmp 0x1000dcd7
and dword [ebp - 0xcb0], 0
mov eax, 0xffff
test eax, eax
je 0x1000dcf5
cmp dword [ebp - 0xb8], 0
je 0x1000dcf5
mov dword [ebp - 0xcb8], 1
jmp 0x1000dcfc
and dword [ebp - 0xcb8], 0
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x10c0], eax
cmp dword [ebp - 0x17c], 0xfff9
jbe 0x1000dd2c
mov dword [ebp - 0xcc0], 1
jmp 0x1000dd33
and dword [ebp - 0xcc0], 0
mov esi, dword [ebp - 0x2d4]
push 1
lea ecx, [ebp - 0xf34]
call fcn.100193d1
cmp esi, dword [eax]
jge 0x1000dd5c
cmp dword [ebp - 0x3b8], 0
jne 0x1000dd5c
and dword [ebp - 0xa64], 0
jmp 0x1000dd66
mov dword [ebp - 0xa64], 1
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0xa64], eax
jl 0x1000dd80
mov dword [ebp - 0x564], 1
jmp 0x1000dd87
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x380]
cmp dword [ebp - 0x564], eax
jl 0x1000ddae
cmp dword [ebp - 0x1b0], 0
je 0x1000ddae
mov dword [ebp - 0xa6c], 1
jmp 0x1000ddb5
and dword [ebp - 0xa6c], 0
mov eax, dword [ebp - 0xa6c]
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x2d4], 0
je 0x1000dddb
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb7c]
call fcn.100193cc
jmp 0x1000ddef
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb7c]
call fcn.100193cc
jmp 0x1000db1d
jmp 0x1000dae6
mov dword [ebp - 0xb8], 0xffffffe3
jmp 0x1000de0d
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x38
je 0x1000de43
mov byte [ebp - 0x15a], 0
movzx eax, byte [ebp - 0x15a]
test eax, eax
je 0x1000de41
push 0
push 0x2518
push 0
push 0x15e3
push 0xbc1
call dword [sym.imp.GDI32.dll_ExtCreatePen]
jmp 0x1000de00
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xf34]
call fcn.100193cc
jmp 0x1000de86
mov dword [ebp - 0x18], 0
jmp 0x1000de64
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x1000de86
mov byte [ebp - 0xdb], 0
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x1000de84
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
jmp 0x1000de5d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd00]
call fcn.100193cc
mov dword [ebp - 0x10c8], 0x8915ced7
mov dword [ebp - 0x244], 0
jmp 0x1000deb8
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 2
jge 0x1000ded4
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x1378], 0xdb2213aa
jmp 0x1000deab
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x6974edf0
jle 0x1000def8
mov dword [ebp - 0x56c], 1
jmp 0x1000deff
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x56c]
jge 0x1000df1f
cmp dword [ebp - 0x1d8], 0
jne 0x1000df1f
and dword [ebp - 0xa74], 0
jmp 0x1000df29
mov dword [ebp - 0xa74], 1
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x3c0], eax
jne 0x1000df5b
mov dword [ebp - 0x574], 1
jmp 0x1000df62
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x574], eax
jge 0x1000df7c
mov dword [ebp - 0xcc8], 1
jmp 0x1000df83
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
add eax, dword [ebp - 0xf8]
je 0x1000dfb0
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x1000dfb0
mov dword [ebp - 0xa7c], 1
jmp 0x1000dfb7
and dword [ebp - 0xa7c], 0
cmp dword [ebp - 0xa7c], 0xffffffff
jae 0x1000dfcc
mov dword [ebp - 0x57c], 1
jmp 0x1000dfd3
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x57c]
jle 0x1000dfed
mov dword [ebp - 0xa84], 1
jmp 0x1000dff4
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xa84], eax
jne 0x1000e00e
mov dword [ebp - 0x584], 1
jmp 0x1000e015
and dword [ebp - 0x584], 0
cmp dword [ebp - 0x584], 0xffffffff
jle 0x1000e02a
mov dword [ebp - 0xa8c], 1
jmp 0x1000e031
and dword [ebp - 0xa8c], 0
imul eax, dword [ebp - 0xa8c], 0x7c0e
test eax, eax
jge 0x1000e04b
mov dword [ebp - 0x58c], 1
jmp 0x1000e052
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0x58c], eax
jg 0x1000e06c
mov dword [ebp - 0xa94], 1
jmp 0x1000e073
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0xa94]
jg 0x1000e08d
mov dword [ebp - 0x594], 1
jmp 0x1000e094
and dword [ebp - 0x594], 0
cmp dword [ebp - 0x594], 0x31dda87b
jg 0x1000e0ac
mov dword [ebp - 0xa9c], 1
jmp 0x1000e0b3
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0xa9c]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x24c], eax
jg 0x1000e0d9
mov dword [ebp - 0xcd0], 1
jmp 0x1000e0e0
and dword [ebp - 0xcd0], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x10d0], eax
cmp dword [ebp - 0x18c], 0
je 0x1000e1e5
mov dword [ebp - 0x410], 0xf8f5
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x10d8], eax
mov eax, 0xcdd5
test eax, eax
je 0x1000e12d
cmp dword [ebp - 0x410], 0
je 0x1000e12d
mov dword [ebp - 0xc24], 1
jmp 0x1000e134
and dword [ebp - 0xc24], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x10e0], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x10e8], eax
mov eax, dword [ebp - 0x410]
cmp dword [ebp - 0x344], eax
je 0x1000e166
mov dword [ebp - 0x59c], 1
jmp 0x1000e16d
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x344]
imul eax, dword [ebp - 0x59c]
cmp eax, dword [ebp - 0x18c]
je 0x1000e18e
mov dword [ebp - 0xaa4], 1
jmp 0x1000e195
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x24c]
cmp eax, dword [ebp - 0xaa4]
je 0x1000e1af
mov dword [ebp - 0xaac], 1
jmp 0x1000e1b6
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0xaac], eax
jl 0x1000e1d0
mov dword [ebp - 0x5ac], 1
jmp 0x1000e1d7
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x18c], eax
jmp 0x1000e22c
mov dword [ebp - 0x168], 1
jmp 0x1000e1fe
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jl 0x1000e22c
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x1000e22a
push 0
push 0x894
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
jmp 0x1000e1f1
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0x10f0], 0xfff8
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x1000e284
push 0x1a66
push 0x5ec
push 0x2307
push 0x21e6
push 0xb3
push 0x1521
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
mov byte [ebp - 0x149], 0
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x1000e2a7
push 0
push 0
push 0xe7e
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x188], 0xfffffff7
mov dword [ebp - 0x1b8], 0x7d228d5f
mov dword [ebp - 0x2c], 0x97a4
mov dword [ebp - 0xb0], 0xfbefa5f9
mov dword [ebp - 0xc04], 9
mov dword [ebp - 0xbb0], 0x4d2fc5c3
mov dword [ebp - 0x5d4], 4
mov dword [ebp - 0x121c], 0x5701
mov dword [ebp - 0x1218], 0x5701
mov dword [ebp - 0x1214], 0x5701
mov dword [ebp - 0x1210], 0x5701
mov dword [ebp - 0x2dc], 0
jmp 0x1000e335
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 3
jge 0x1000e351
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0xd10], 6
jmp 0x1000e328
cmp dword [ebp - 0x2c], 0
je 0x1000e3ef
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xab4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xab4]
mov dword [ebp + eax - 0xd10], ecx
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xab4], eax
jle 0x1000e38e
mov dword [ebp - 0x5b4], 1
jmp 0x1000e395
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x5b4]
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jne 0x1000e3bc
xor eax, eax
inc eax
jne 0x1000e3bc
and dword [ebp - 0xabc], 0
jmp 0x1000e3c6
mov dword [ebp - 0xabc], 1
xor eax, eax
sub eax, dword [ebp - 0xabc]
cmp eax, 1
jl 0x1000e3ef
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd10], 0
je 0x1000e3ef
mov dword [ebp - 0x5bc], 1
jmp 0x1000e3f6
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0xc04]
cmp dword [ebp - 0x5bc], eax
jle 0x1000e410
mov dword [ebp - 0xac4], 1
jmp 0x1000e417
and dword [ebp - 0xac4], 0
cmp dword [ebp - 0xac4], 0xd3ecf04b
jbe 0x1000e42f
mov dword [ebp - 0xba8], 1
jmp 0x1000e436
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10f8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd10], 0
je 0x1000e524
mov dword [ebp - 0x254], 0
jmp 0x1000e46c
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 4
jge 0x1000e488
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x1270], 0x632c5b64
jmp 0x1000e45f
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x1270]
mov dword [ebp + ecx - 0x1270], eax
mov dword [ebp - 0xb0], 0
jmp 0x1000e4ba
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jg 0x1000e51f
mov byte [ebp - 0xdf], 0
movzx eax, byte [ebp - 0xdf]
test eax, eax
je 0x1000e4dd
push 0
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
mov dword [ebp - 0x2c], 0
jmp 0x1000e4ed
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x1000e51d
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x1000e51b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
jmp 0x1000e4e6
jmp 0x1000e4ad
jmp 0x1000e68c
mov dword [ebp - 0x324], 0
jmp 0x1000e53d
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 1
jge 0x1000e559
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0xd44], 0xa164e62b
jmp 0x1000e530
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x5c4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c4]
mov dword [ebp + eax - 0xd44], ecx
mov eax, dword [ebp - 0xbb0]
cmp eax, dword [ebp - 0x5c4]
jl 0x1000e598
cmp dword [ebp - 0x5d4], 0
jne 0x1000e598
and dword [ebp - 0xacc], 0
jmp 0x1000e5a2
mov dword [ebp - 0xacc], 1
imul eax, dword [ebp - 0xacc], 0xe6ea
cmp dword [ebp - 0xb0], eax
jl 0x1000e5c0
mov dword [ebp - 0x5cc], 1
jmp 0x1000e5c7
and dword [ebp - 0x5cc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd10]
cmp dword [ebp - 0x5cc], eax
je 0x1000e5e7
mov dword [ebp - 0xad4], 1
jmp 0x1000e5ee
and dword [ebp - 0xad4], 0
cmp dword [ebp - 0xad4], 0xa6e483bb
jne 0x1000e606
mov dword [ebp - 0xc8c], 1
jmp 0x1000e60d
and dword [ebp - 0xc8c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5d4]
mov dword [ebp + eax - 0xd10], ecx
mov dword [ebp - 0x2c], 0
jmp 0x1000e630
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x17
je 0x1000e68c
mov byte [ebp - 0x15c], 0
movzx eax, byte [ebp - 0x15c]
test eax, eax
je 0x1000e663
push 0x46e
push 0
push 0x8f7
push 0x1b97
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov byte [ebp - 0xe3], 0
movzx eax, byte [ebp - 0xe3]
test eax, eax
je 0x1000e68a
push 0
push 0x247d
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x1000e629
mov dword [ebp - 0x2fc], 0xfffffff8
mov dword [ebp - 0x3d8], 0
mov dword [ebp - 0x180], 0x69ff4caa
mov dword [ebp - 0x8f0], 0x3ec3
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x25c], 0
jmp 0x1000e6d4
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 1
jge 0x1000e6f0
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x5e4], 0xb6bc3ec3
jmp 0x1000e6c7
mov dword [ebp - 0x40], 0
jmp 0x1000e700
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x19
je 0x1000e800
push 2
lea ecx, [ebp - 0xde8]
call fcn.10019343
mov dword [ebp - 4], 9
mov dword [ebp - 0xadc], 0x3989226c
mov dword [ebp - 0x70], 0
jmp 0x1000e738
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1000e74e
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xfb8], 8
jmp 0x1000e731
mov dword [ebp - 0x70], 0
jmp 0x1000e75e
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1000e77a
push dword [ebp - 0x70]
lea ecx, [ebp - 0xde8]
call fcn.100193d1
mov dword [eax], 1
jmp 0x1000e757
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1100], eax
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0xfb8]
push 1
lea ecx, [ebp - 0xde8]
call fcn.100193d1
mov dword [eax], esi
cmp dword [ebp - 0x40], 6
jne 0x1000e7cf
mov dword [ebp - 0xadc], 0xffffffff
mov esi, dword [ebp - 0xadc]
push 0
lea ecx, [ebp - 0xde8]
call fcn.100193d1
add esi, dword [eax]
jne 0x1000e7cf
and dword [ebp - 0x5dc], 0
jmp 0x1000e7d9
mov dword [ebp - 0x5dc], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5dc]
mov dword [ebp + eax - 0x5e4], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xde8]
call fcn.100193cc
jmp 0x1000e6f9
mov dword [ebp - 0x40], 0xfffffff0
jmp 0x1000e810
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffeb
jne 0x1000e857
mov dword [ebp - 0xbb8], 0x5969a22d
cmp dword [ebp - 0xbb8], 0
je 0x1000e83b
cmp dword [ebp - 0x40], 0
je 0x1000e83b
mov dword [ebp - 0xae4], 1
jmp 0x1000e842
and dword [ebp - 0xae4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xae4]
mov dword [ebp + eax - 0x5e4], ecx
jmp 0x1000e809
mov dword [ebp - 0x294], 1
push 2
lea ecx, [ebp - 0xed4]
call fcn.10019343
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xa0], 0x11e7bff4
mov dword [ebp - 0x100], 0xfffffffe
mov dword [ebp - 0x438], 0xfffffff6
mov dword [ebp - 0x3c8], 0xe01e6e83
mov dword [ebp - 0x608], 1
mov dword [ebp - 0xcf4], 0xfffffffe
mov dword [ebp - 0x2e4], 0
jmp 0x1000e8ca
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 2
jge 0x1000e8ec
push dword [ebp - 0x2e4]
lea ecx, [ebp - 0xed4]
call fcn.100193d1
mov dword [eax], 0x2e31d83
jmp 0x1000e8bd
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jne 0x1000e999
cmp dword [ebp - 0x100], 0
jne 0x1000e91e
push 8
pop eax
test eax, eax
jne 0x1000e91e
and dword [ebp - 0xaec], 0
jmp 0x1000e928
mov dword [ebp - 0xaec], 1
cmp dword [ebp - 0xaec], 0x1993
je 0x1000e940
mov dword [ebp - 0x5ec], 1
jmp 0x1000e947
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x5ec], eax
jne 0x1000e967
mov dword [ebp - 0xb08], 1
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xb08], eax
jl 0x1000e9bd
mov dword [ebp - 0x5f8], 1
jmp 0x1000e9c4
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x5f8]
sub eax, dword [ebp - 0x438]
jne 0x1000e9f3
cmp dword [ebp - 0x3c8], 0
jne 0x1000e9f3
mov dword [ebp - 0x8b4], 1
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x438]
cmp eax, 0x71d69170
jg 0x1000ea28