Function at 0x10019ef6
Capabilities:
Enumerate gui resources
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007de9b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x354
mov dword [ebp - 0x10], 0x8cff0ea7
mov dword [ebp - 0x44], 5
mov dword [ebp - 0x38], 0x881dda8d
mov dword [ebp - 0x10], 0
jmp 0x10019f39
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffea
jl 0x1001a2d8
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x30], 0
jmp 0x10019f5a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10019f70
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xe0], 0xfffffffd
jmp 0x10019f53
mov dword [ebp - 0x30], 0
jmp 0x10019f80
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10019f96
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x324], 0x37c57f39
jmp 0x10019f79
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x104], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x104]
mov dword [ebp + eax - 0x324], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x104]
sub ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
add edx, ecx
cmp edx, dword [ebp + eax - 0xe0]
jl 0x10019fda
mov dword [ebp - 0x1e0], 1
jmp 0x10019fe1
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x1e0]
je 0x10019ff8
mov dword [ebp - 0x16c], 1
jmp 0x10019fff
and dword [ebp - 0x16c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe0]
cmp dword [ebp - 0x16c], eax
je 0x1001a020
mov dword [ebp - 0x1d8], 1
jmp 0x1001a027
and dword [ebp - 0x1d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe0]
add eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x38], eax
jl 0x1001a051
mov dword [ebp - 0xf0], 1
jmp 0x1001a058
and dword [ebp - 0xf0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe0]
cmp dword [ebp - 0xf0], eax
jg 0x1001a079
mov dword [ebp - 0x168], 1
jmp 0x1001a080
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x168]
add eax, 9
cmp eax, dword [ebp - 0x10]
jle 0x1001a09a
mov dword [ebp - 0xf8], 1
jmp 0x1001a0a1
and dword [ebp - 0xf8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe0]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0x10]
imul eax, eax, 0xfff9
cmp dword [ebp - 0x44], eax
jle 0x1001a0d1
mov dword [ebp - 0x1c4], 1
jmp 0x1001a0d8
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x5c], eax
mov eax, 0x17e5c285
sub eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x10]
jg 0x1001a0fa
mov dword [ebp - 0x100], 1
jmp 0x1001a101
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x100]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xe0]
jge 0x1001a125
mov dword [ebp - 0x174], 1
jmp 0x1001a12c
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x174], eax
jl 0x1001a143
mov dword [ebp - 0x108], 1
jmp 0x1001a14a
and dword [ebp - 0x108], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe0]
imul eax, dword [ebp - 0x108]
imul eax, eax, 0
add eax, 0x77fc7df3
sub eax, dword [ebp - 0x10]
je 0x1001a2a7
mov dword [ebp - 0x238], 0xffff
mov dword [ebp - 0x314], 0xffffffff
mov dword [ebp - 0x5c], 0
jmp 0x1001a193
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x16
jl 0x1001a2a5
mov dword [ebp - 0x1ac], 0xb9d3
mov dword [ebp - 0x38], 0
jmp 0x1001a1b7
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x19
jg 0x1001a2a0
mov dword [ebp - 0xa8], 0x20c3d8d5
mov dword [ebp - 0x118], 0x84a4e7fb
mov dword [ebp - 0x2b0], 6
mov dword [ebp - 0x2ac], 6
mov dword [ebp - 0x2a8], 6
mov dword [ebp - 0x2a4], 6
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x1001a211
push 0
call fcn.1001b734
pop ecx
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa8]
inc ecx
mov dword [ebp - 0xa8], ecx
test eax, eax
jne 0x1001a24f
cmp dword [ebp - 0x1ac], 0
je 0x1001a246
cmp dword [ebp - 0xa8], 0
jne 0x1001a24f
and dword [ebp - 0x110], 0
jmp 0x1001a259
mov dword [ebp - 0x110], 1
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x110], eax
jl 0x1001a273
mov dword [ebp - 0x17c], 1
jmp 0x1001a27a
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
sub eax, dword [ebp - 0x44]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2b0], eax
jmp 0x1001a1b0
jmp 0x1001a18c
jmp 0x1001a2c4
mov dword [ebp - 0x230], 0x2420
cmp dword [ebp - 0x38], 0
je 0x1001a2b9
jmp 0x1001a2d8
cmp dword [ebp - 0x230], 0
je 0x1001a2c4
jmp 0x1001a2d8
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x38]
mov dword [ebp + eax - 0x324], ecx
jmp 0x10019f32
mov dword [ebp - 0x44], 0xfffffff0
jmp 0x1001a2e8
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffffb
jle 0x1001a304
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x1001a302
push 0
call fcn.1001b87f
pop ecx
jmp 0x1001a2e1
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x1c], 0
jmp 0x1001a31b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1001a32e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7c], 0x4fd3df75
jmp 0x1001a314
mov dword [ebp - 0x1c], 0
jmp 0x1001a33e
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1001a354
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x84], 0xfff7
jmp 0x1001a337
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7c], 0
jmp 0x1001a379
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0xfffffffb
je 0x1001a470
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0
jmp 0x1001a3a1
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x1001a46b
mov dword [ebp - 0xb8], 0
jmp 0x1001a3c4
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x1001a3e0
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x1ec], 1
jmp 0x1001a3b7
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x84]
mov dword [ebp + ecx*4 - 0x84], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1ec], 0
jmp 0x1001a422
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ec]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1ec], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1ec], 0
jg 0x1001a466
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ec]
cmp dword [ebp + eax*4 - 0x84], 0
je 0x1001a44b
jmp 0x1001a466
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1ec]
cmp dword [ebp + eax*4 - 0x84], 0
je 0x1001a464
jmp 0x1001a466
jmp 0x1001a407
jmp 0x1001a39a
jmp 0x1001a364
lea eax, [ebp - 0x158]
push eax
push 0
call fcn.1001ba23
pop ecx
pop ecx
cmp dword [ebp - 0x158], 0
je 0x1001b1b0
mov dword [ebp - 0x14], 8
mov dword [ebp - 0xd4], 0x57257ea0
mov dword [ebp - 0x60], 5
mov dword [ebp - 0x1bc], 8
mov dword [ebp - 0x150], 0xa8ccedb7
mov dword [ebp - 0x1fc], 0xd20578cc
mov dword [ebp - 0x4c], 0xcd1d2a6f
mov dword [ebp - 0x28], 0
jmp 0x1001a4da
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1001a4f0
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x280], 0xfffffff6
jmp 0x1001a4d3
mov dword [ebp - 0x28], 0
jmp 0x1001a500
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1001a516
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x228], 0xffffffff
jmp 0x1001a4f9
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0xd4]
test eax, eax
je 0x1001a542
cmp dword [ebp - 0xd4], 0
je 0x1001a542
mov dword [ebp - 0x1d4], 1
jmp 0x1001a549
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x1d4]
jl 0x1001a560
mov dword [ebp - 0x1f0], 1
jmp 0x1001a567
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x14], 0x8039d6b9
jae 0x1001a58e
mov dword [ebp - 0x120], 1
jmp 0x1001a595
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x120], eax
jne 0x1001a5ac
mov dword [ebp - 0x184], 1
jmp 0x1001a5b3
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x184], eax
jle 0x1001a5ca
mov dword [ebp - 0x128], 1
jmp 0x1001a5d1
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x128], eax
jg 0x1001a5e8
mov dword [ebp - 0x270], 1
jmp 0x1001a5ef
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x60], 0xfff8
jbe 0x1001a66f
mov dword [ebp - 0x30c], 0x92f1e5c8
mov dword [ebp - 0x2e4], 0x4d4e2b79
mov dword [ebp - 0x1b4], 0x2891
mov dword [ebp - 0xb0], 0
jmp 0x1001a641
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x1001a65d
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x32c], 0x254e7f13
jmp 0x1001a634
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
jmp 0x1001a832
mov dword [ebp - 0x244], 0x1ed30906
mov dword [ebp - 0x8c], 0
jmp 0x1001a692
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x1001a6ae
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x288], 0xfffffff8
jmp 0x1001a685
mov dword [ebp - 0x60], 0
jmp 0x1001a6be
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jg 0x1001a832
mov dword [ebp - 0x130], 0x6e9f81a7
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x204], 6
mov eax, dword [ebp - 0x60]
cmp dword [ebp + eax*4 - 0x280], 0x846e1d67
je 0x1001a702
mov dword [ebp - 0x18c], 1
jmp 0x1001a709
and dword [ebp - 0x18c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x228]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x18c], eax
jle 0x1001a736
mov dword [ebp - 0x1cc], 1
jmp 0x1001a73d
and dword [ebp - 0x1cc], 0
mov dword [ebp - 0x138], 0xdd5d57d3
cmp dword [ebp - 0x138], 0
jne 0x1001a75c
mov dword [ebp - 0x140], 1
jmp 0x1001a763
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x1cc]
cmp eax, dword [ebp - 0x140]
jne 0x1001a77d
mov dword [ebp - 0x194], 1
jmp 0x1001a784
and dword [ebp - 0x194], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x288]
add eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x1fc]
jg 0x1001a7ab
mov dword [ebp - 0x148], 1
jmp 0x1001a7b2
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x6e2e
jg 0x1001a7d6
mov dword [ebp - 0x240], 1
jmp 0x1001a7dd
and dword [ebp - 0x240], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x288]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x244], eax
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1001a82d
push 0x755a
push 0x466b
push 0
push 0xd9a
call fcn.100238e3
add esp, 0x10
jmp 0x1001a6b7
mov dword [ebp - 0x4c], 0
jmp 0x1001a842
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x1001a88b
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x280]
inc eax
test eax, eax
jg 0x1001a863
mov dword [ebp - 0x19c], 1
jmp 0x1001a86a
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x280], ecx
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x280], 0
je 0x1001a889
jmp 0x1001a83b
jmp 0x1001a83b
push dword [ebp + 8]
lea ecx, [ebp - 0x2c8]
call fcn.100161ba
and dword [ebp - 4], 0
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x2c8]
call fcn.100168c2
push dword [eax]
lea eax, [ebp - 0x350]
push eax
lea ecx, [ebp - 0x2c8]
call fcn.100168d6
push dword [eax]
lea eax, [ebp - 0x34c]
push eax
lea ecx, [ebp - 0x2c8]
call fcn.100168c2
push dword [eax]
mov edx, 0x10017ed3
lea ecx, [ebp - 0x348]
call fcn.1002403a
add esp, 0xc
mov dword [ebp - 0x20c], 0xffffffff
mov dword [ebp - 0x26c], 0xffffffff
cmp dword [ebp - 0x20c], 0
je 0x1001a921
push 0x36d0
lea eax, [ebp - 0x26c]
push eax
push 0
call fcn.1001b991
add esp, 0xc
jmp 0x1001a93b
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1001a93b
push 0x3813
push 0
call fcn.10019d5c
pop ecx
pop ecx
mov eax, dword [ebp - 0x158]
mov eax, dword [eax + 0xc]
add eax, 0x14
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0xa4], 0
jmp 0x1001a96d
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x1001a989
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xc4], 0xb5f5
jmp 0x1001a960
mov dword [ebp - 0x20], 1
jmp 0x1001a999
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1001aba7
mov dword [ebp - 0xac], 0x7c8a6b95
mov dword [ebp - 0x2a0], 0xfffffffc
mov dword [ebp - 0x29c], 0xfffffffc
mov dword [ebp - 0x298], 0xfffffffc
mov dword [ebp - 0x294], 0xfffffffc
mov dword [ebp - 0x94], 0
jmp 0x1001a9ee
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x1001aa0a
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x290], 0xffffffff
jmp 0x1001a9e1
mov dword [ebp - 0xac], 1
jmp 0x1001aa23
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x1001aba2
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0xc4], 0
jne 0x1001aa4c
cmp dword [ebp - 0x20], 0
jne 0x1001aa4c
and dword [ebp - 0x214], 0
jmp 0x1001aa56
mov dword [ebp - 0x214], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc4], 0xffffffff
jg 0x1001aa72
mov dword [ebp - 0x250], 1
jmp 0x1001aa79
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xc4]
mov dword [ebp - 0x1dc], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1dc]
mov dword [ebp + eax - 0x2a0], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x1dc], eax
je 0x1001aac5
mov dword [ebp - 0x160], 1
jmp 0x1001aacc
and dword [ebp - 0x160], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x160], eax
jle 0x1001aaed
mov dword [ebp - 0x1a4], 1
jmp 0x1001aaf4
and dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1a4], 0xfffffff7
je 0x1001ab09
mov dword [ebp - 0xe8], 1
jmp 0x1001ab10
and dword [ebp - 0xe8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xe8]
mov dword [ebp + eax - 0x290], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc4], 0
je 0x1001ab4a
mov dword [ebp - 0x21c], 1
cmp dword [ebp - 0x21c], 0
je 0x1001ab48
jmp 0x1001aba2
jmp 0x1001ab9d
mov dword [ebp - 0x18], 0x64c9d8d9
mov dword [ebp - 0x18], 0
jmp 0x1001ab61
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1001ab77
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc4], 0x26f3
jmp 0x1001ab5a
mov dword [ebp - 0x18], 1
jmp 0x1001ab87
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1001ab9d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x290], 3
jmp 0x1001ab80
jmp 0x1001aa16
jmp 0x1001a992
lea eax, [ebp - 0x20]
push eax
push 0x3f6b
push 0
call fcn.1001b76a
add esp, 0xc
and dword [ebp - 0xcc], 0
mov dword [ebp - 0xd8], 0xffff
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x11c], 0x63372585
mov dword [ebp - 0x9c], 0
jmp 0x1001ac06
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x1001ac22
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xd0], 0xdc1b6eab
jmp 0x1001abf9
cmp dword [ebp - 0xd8], 0
jne 0x1001aceb
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1001acba
cmp dword [ebp - 0xd8], 0
jne 0x1001ac55
mov eax, 0x6eea
test eax, eax
jne 0x1001ac55
and dword [ebp - 0xec], 0
jmp 0x1001ac5f
mov dword [ebp - 0xec], 1
mov eax, dword [ebp - 0xd8]
add eax, dword [ebp - 0xec]
cmp dword [ebp - 0x6c], eax
je 0x1001ac7c
mov dword [ebp - 0xf4], 1
jmp 0x1001ac83
and dword [ebp - 0xf4], 0
cmp dword [ebp - 0xf4], 0
jl 0x1001ac98
mov dword [ebp - 0xfc], 1
jmp 0x1001ac9f
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xb4], eax
imul eax, dword [ebp - 0xb4], 0x9cd4
add eax, dword [ebp - 0x6c]
jne 0x1001acc9
cmp dword [ebp - 0x54], 0
jne 0x1001acc9
and dword [ebp - 0xe4], 0
jmp 0x1001acd3
mov dword [ebp - 0xe4], 1
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x54]
jg 0x1001aceb
and dword [ebp - 0x10c], 0
jmp 0x1001acf5
mov dword [ebp - 0x10c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x10c]
mov dword [ebp + eax - 0xd0], ecx
mov dword [ebp - 0x54], 0xfffffffa
jmp 0x1001ad18
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffed
jle 0x1001ade7
mov dword [ebp - 0x254], 1
mov dword [ebp - 0x224], 1
mov dword [ebp - 0x268], 0xfffffff9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd0], 0
jne 0x1001ad87
cmp dword [ebp - 0x6c], 0
je 0x1001ad7e
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x114], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x114]
mov dword [ebp + eax - 0xd0], ecx
cmp dword [ebp - 0x114], 0
jne 0x1001ad87
and dword [ebp - 0x124], 0
jmp 0x1001ad91
mov dword [ebp - 0x124], 1
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0xb4]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x124], eax
jge 0x1001adcf
mov dword [ebp - 0x12c], 1
jmp 0x1001add6
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x268], eax
jmp 0x1001ad11
mov eax, dword [ebp - 0x134]
mov eax, dword [eax]
mov dword [ebp - 0xbc], eax
jmp 0x1001ae05
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x134]
je 0x1001b1a1
mov dword [ebp - 0x70], 2
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x74], 0
jmp 0x1001ae42
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x1001ae58
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x360], 1
jmp 0x1001ae3b
mov dword [ebp - 0x70], 3
jmp 0x1001ae68
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x1001ae92
mov dword [ebp - 0x340], 1
lea eax, [ebp - 0x22c]
push eax
push 1
call fcn.10019d5c
pop ecx
pop ecx
cmp dword [ebp - 0x70], 0
je 0x1001ae90
jmp 0x1001ae92
jmp 0x1001ae61
lea eax, [ebp - 0xbc]
push eax
push 0
lea eax, [ebp - 0xcc]
push eax
call fcn.1001b94c
add esp, 0xc
mov eax, dword [ebp - 0xcc]
push dword [eax + 0x28]
lea ecx, [ebp - 0x2e0]
call fcn.10023c6d
mov byte [ebp - 4], 1
mov dword [ebp - 0xc8], 3
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x1f4], 0x273942
mov dword [ebp - 0x34], 0x1c29
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x34]
je 0x1001b046
mov dword [ebp - 0x64], 1
mov dword [ebp - 0x78], 0
jmp 0x1001af0a
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1001af20
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x234], 1
jmp 0x1001af03
mov dword [ebp - 0x34], 0xffffffe6
jmp 0x1001af30
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff0
jle 0x1001af77
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x1001af5d
push 0x1d6
push 0
push 0x4f8
push 0xf02
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov byte [ebp - 0x40], 0
movzx eax, byte [ebp - 0x40]
test eax, eax
je 0x1001af75
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
jmp 0x1001af29
cmp dword [ebp - 0x64], 0
je 0x1001b00c
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x64], eax
jg 0x1001af98
mov dword [ebp - 0x13c], 1
jmp 0x1001af9f
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 1
jae 0x1001afb4
mov dword [ebp - 0x274], 1
jmp 0x1001afbb
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x330], eax
mov eax, 0xa056
imul eax, eax, 0xb552
cmp eax, 0xdc2a82a1
jae 0x1001afeb
mov dword [ebp - 0x144], 1
jmp 0x1001aff2
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x144]
test eax, eax
je 0x1001b00c
mov dword [ebp - 0x14c], 1
jmp 0x1001b013
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x14c], eax
jne 0x1001b02a
mov dword [ebp - 0x154], 1
jmp 0x1001b031
and dword [ebp - 0x154], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x154]
mov dword [ebp + eax - 0x234], ecx
jmp 0x1001b084
mov dword [ebp - 0x1f8], 0xffffffff
mov dword [ebp - 0x23c], 0x1639956a
push 0
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1f8]
push eax
call fcn.10019d91
add esp, 0x18
lea eax, [ebp - 0x308]
push eax
lea ecx, [ebp - 0x2e0]
call fcn.100168c2
push dword [eax]
lea eax, [ebp - 0x344]
push eax
lea ecx, [ebp - 0x2e0]
call fcn.100168d6
push dword [eax]
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0x2e0]
call fcn.100168c2
push dword [eax]
mov edx, 0x10017ed3
lea ecx, [ebp - 0x338]
call fcn.1002403a
add esp, 0xc
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x2c8]
call fcn.100240a3
movzx eax, al
test eax, eax
je 0x1001b18d
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x80], 0
jmp 0x1001b106
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x1001b11c
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x200], 0x1bd97a8
jmp 0x1001b0ff
mov dword [ebp - 0x68], 0xfffffffb
jmp 0x1001b12c
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xfffffff1
jl 0x1001b14e
cmp dword [ebp - 0x68], 0
je 0x1001b13a
jmp 0x1001b14e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x200], 0
je 0x1001b14c
jmp 0x1001b14e
jmp 0x1001b125
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ecx + eax + 0x10]
mov dword [ebp - 0x208], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2e0]
call fcn.1001623f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c8]
call fcn.1001623f
mov eax, dword [ebp - 0x208]
jmp 0x1001b5b7
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2e0]
call fcn.1001623f
jmp 0x1001adf7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c8]
call fcn.1001623f
mov dword [ebp - 0x2c], 0xf6af1124
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x2c], 0xfffffff6
jmp 0x1001b1d1
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffff3
jle 0x1001b5a3
mov dword [ebp - 0x90], 0xfa75c19c
mov dword [ebp - 0x88], 0
jmp 0x1001b1fe
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1001b21a
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x24c], 0x8a99
jmp 0x1001b1f1
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x1001b234
push 0
push 0x137f
call fcn.1001b5c5
pop ecx
pop ecx
mov dword [ebp - 0x90], 0x10
jmp 0x1001b24d
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x14
jl 0x1001b59e
mov dword [ebp - 0x24], 0x29ea4144
mov dword [ebp - 0x1b0], 0
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x1001b29a
push 1
push 0x427a
push 0x13df
push 0x2229
push 0x3f9b
push 0x2f3f
call fcn.10019d91
add esp, 0x18
mov dword [ebp - 0x24], 0
jmp 0x1001b2aa
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xa
jg 0x1001b599
mov dword [ebp - 0xa0], 0xeaba4a2c
mov dword [ebp - 0x98], 0
jmp 0x1001b2d7
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x1001b2f3
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x264], 3
jmp 0x1001b2ca
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x264], 0
jmp 0x1001b321
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x264]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x264], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x264], 0xffffffe7
jg 0x1001b594
mov dword [ebp - 0x210], 0xfffffffb
cmp dword [ebp - 0x2c], 0
je 0x1001b4f7
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x24c], 0xfffffffe
cmp eax, dword [ebp - 0x24]
jg 0x1001b368
mov dword [ebp - 0x15c], 1
jmp 0x1001b36f
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x15c], eax
jge 0x1001b38c
cmp dword [ebp - 0x24], 0
jne 0x1001b38c
and dword [ebp - 0x164], 0
jmp 0x1001b396
mov dword [ebp - 0x164], 1
cmp dword [ebp - 0x164], 0xfffffffc
jb 0x1001b3ab
mov dword [ebp - 0x170], 1
jmp 0x1001b3b2
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
sub eax, dword [ebp - 0x2c]
dec eax
cmp eax, 0x461302d
je 0x1001b3cf
mov dword [ebp - 0x178], 1
jmp 0x1001b3d6
and dword [ebp - 0x178], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x264]
cmp eax, dword [ebp - 0x178]
jle 0x1001b3f6
mov dword [ebp - 0x180], 1
jmp 0x1001b3fd
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
sub eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0x24]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x264]
cmp eax, dword [ebp - 0x24]
jg 0x1001b42c
mov dword [ebp - 0x188], 1
jmp 0x1001b433
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0x188]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x24c]
jg 0x1001b45b
mov dword [ebp - 0x190], 1
jmp 0x1001b462
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x190], eax
jl 0x1001b47c
mov dword [ebp - 0x198], 1
jmp 0x1001b483
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x198], 0
jle 0x1001b498
mov dword [ebp - 0x1a0], 1
jmp 0x1001b49f
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x1a0], eax
jg 0x1001b4b9
mov dword [ebp - 0x1a8], 1
jmp 0x1001b4c0
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x1a8]
add eax, 5
jne 0x1001b4e4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24c], 0
jne 0x1001b4e4
and dword [ebp - 0x218], 0
jmp 0x1001b4ee
mov dword [ebp - 0x218], 1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x1b0], eax
je 0x1001b51a
mov eax, 0xc0d3
test eax, eax
je 0x1001b51a
mov dword [ebp - 0x1b8], 1
jmp 0x1001b521
and dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1b8], 0xfff9
jae 0x1001b539
mov dword [ebp - 0x1c0], 1
jmp 0x1001b540
and dword [ebp - 0x1c0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x264]
cmp dword [ebp - 0x1c0], eax
jne 0x1001b561
mov dword [ebp - 0x220], 1
jmp 0x1001b568
and dword [ebp - 0x220], 0
xor eax, eax
inc eax
cmp eax, 9
jbe 0x1001b57c
mov dword [ebp - 0x1c8], 1
jmp 0x1001b583
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x1d0], eax
jmp 0x1001b306
jmp 0x1001b2a3
jmp 0x1001b240
jmp 0x1001b1ca
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1d0]
push eax
call fcn.10019ed7
pop ecx
pop ecx
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret