Function at 0x1000c344
Capabilities:
Check os version
Get disk size
Identify system language via api
Read .ini file
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10087c83
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x10d4
call fcn.100824d0
push esi
push edi
mov dword [ebp - 0x1a4], 0xc70c
mov dword [ebp - 0x148], 0xd44ad374
push 1
lea ecx, [ebp - 0x948]
call fcn.10019b12
and dword [ebp - 4], 0
push 1
lea ecx, [ebp - 0xca4]
call fcn.10019b12
mov byte [ebp - 4], 1
mov dword [ebp - 0x5c], 0
jmp 0x1000c3ae
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1000c3ca
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x948]
call fcn.10019b7f
mov dword [eax], 0xfecafe8
jmp 0x1000c3a7
mov dword [ebp - 0x5c], 0
jmp 0x1000c3da
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1000c3f6
push dword [ebp - 0x5c]
lea ecx, [ebp - 0xca4]
call fcn.10019b7f
mov dword [eax], 1
jmp 0x1000c3d3
push 0
lea ecx, [ebp - 0x948]
call fcn.10019b7f
cmp dword [eax], 0
je 0x1000c411
mov eax, 0xf5a2
test eax, eax
jne 0x1000c423
cmp dword [ebp - 0x1a4], 0
jne 0x1000c423
and dword [ebp - 0x4f0], 0
jmp 0x1000c42d
mov dword [ebp - 0x4f0], 1
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x4f0], eax
jl 0x1000c447
mov dword [ebp - 0x920], 1
jmp 0x1000c44e
and dword [ebp - 0x920], 0
cmp dword [ebp - 0x920], 0x9f48
jl 0x1000c466
mov dword [ebp - 0x930], 1
jmp 0x1000c46d
and dword [ebp - 0x930], 0
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jne 0x1000c494
mov eax, 0x8dacb314
test eax, eax
jne 0x1000c494
and dword [ebp - 0x938], 0
jmp 0x1000c49e
mov dword [ebp - 0x938], 1
push 0
lea ecx, [ebp - 0x948]
call fcn.10019b7f
mov ecx, dword [ebp - 0x938]
cmp ecx, dword [eax]
jle 0x1000c4c1
mov dword [ebp - 0x394], 1
jmp 0x1000c4c8
and dword [ebp - 0x394], 0
push 0
lea ecx, [ebp - 0x948]
call fcn.10019b7f
mov ecx, dword [ebp - 0x394]
cmp ecx, dword [eax]
jle 0x1000c4eb
mov dword [ebp - 0x8e0], 1
jmp 0x1000c4f2
and dword [ebp - 0x8e0], 0
push 0
lea ecx, [ebp - 0xca4]
call fcn.10019b7f
mov dword [ebp - 0x2d8], eax
push 0
lea ecx, [ebp - 0x948]
call fcn.10019b7f
mov ecx, dword [ebp - 0x2d8]
mov ecx, dword [ecx]
sub ecx, dword [eax]
mov dword [ebp - 0xa18], ecx
mov eax, dword [ebp - 0x8e0]
mov dword [ebp - 0xa7c], eax
mov eax, dword [ebp - 0x2d8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2d8]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa18]
cmp eax, dword [ebp - 0xa7c]
jl 0x1000c559
mov dword [ebp - 0x39c], 1
jmp 0x1000c560
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x39c]
jl 0x1000c57a
mov dword [ebp - 0x8e8], 1
jmp 0x1000c581
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x8e8]
add eax, 0x520f
cmp dword [ebp - 0x1a4], eax
jge 0x1000c5a5
or eax, 0xffffffff
je 0x1000c5a5
mov dword [ebp - 0x3a4], 1
jmp 0x1000c5ac
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x3a4]
jle 0x1000c5c6
mov dword [ebp - 0x8f0], 1
jmp 0x1000c5cd
and dword [ebp - 0x8f0], 0
push 0
lea ecx, [ebp - 0x948]
call fcn.10019b7f
mov ecx, dword [ebp - 0x8f0]
cmp ecx, dword [eax]
jl 0x1000c5f0
mov dword [ebp - 0x3ac], 1
jmp 0x1000c5f7
and dword [ebp - 0x3ac], 0
push 0
lea ecx, [ebp - 0x948]
call fcn.10019b7f
mov ecx, dword [ebp - 0x3ac]
mov dword [eax], ecx
mov dword [ebp - 0x148], 0xfffffff3
jmp 0x1000c625
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xffffffea
jle 0x1000c675
mov byte [ebp - 0xe3], 0
movzx eax, byte [ebp - 0xe3]
test eax, eax
je 0x1000c65b
push 0x995
push 0
push 0x1e1c
push 0x708
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov byte [ebp - 0x106], 0
movzx eax, byte [ebp - 0x106]
test eax, eax
je 0x1000c673
call dword [sym.imp.USER32.dll_GetMessageTime]
jmp 0x1000c618
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xca4]
call fcn.10019b7a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x948]
call fcn.10019b7a
mov dword [ebp - 0x64], 0x860b4ffb
mov dword [ebp - 0xa8], 5
mov dword [ebp - 0x27c], 0xffffffff
mov dword [ebp - 0xf24], 0x6a8
push 1
lea ecx, [ebp - 0xfd0]
call fcn.10019b12
mov dword [ebp - 4], 2
mov dword [ebp - 0xaa4], 0x91cd3c6e
mov dword [ebp - 0x8c], 0
jmp 0x1000c6ef
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1000c70b
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xb0c], 2
jmp 0x1000c6e2
mov dword [ebp - 0x8c], 0
jmp 0x1000c724
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1000c743
push dword [ebp - 0x8c]
lea ecx, [ebp - 0xfd0]
call fcn.10019b7f
or dword [eax], 0xffffffff
jmp 0x1000c717
mov dword [ebp - 0x64], 0
jmp 0x1000c753
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jg 0x1000c810
mov dword [ebp - 0x18c], 0x33992443
mov dword [ebp - 0xe18], 0
mov dword [ebp - 0xe20], 0
mov dword [ebp - 0x18c], 0
jmp 0x1000c794
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 2
jg 0x1000c80b
mov dword [ebp - 0xe28], 0xd2086bd0
mov dword [ebp - 0xe58], 0xffffffff
mov dword [ebp - 0x8f8], 0xca420452
mov eax, dword [ebp - 0x8f8]
inc eax
mov dword [ebp - 0x8f8], eax
mov dword [ebp - 0xa8], 0
jmp 0x1000c7e1
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jg 0x1000c806
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0xb0c]
mov dword [ebp + ecx*4 - 0xb0c], eax
jmp 0x1000c7d4
jmp 0x1000c787
jmp 0x1000c74c
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xa8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb0c]
cmp eax, dword [ebp - 0xa8]
jg 0x1000c83f
mov dword [ebp - 0x3b4], 1
jmp 0x1000c846
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0x2f144811
je 0x1000c85e
mov dword [ebp - 0x900], 1
jmp 0x1000c865
and dword [ebp - 0x900], 0
cmp dword [ebp - 0x900], 0xef90
je 0x1000c87d
mov dword [ebp - 0x3bc], 1
jmp 0x1000c884
and dword [ebp - 0x3bc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb0c]
mov dword [ebp - 0x27c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0c]
cmp dword [ebp - 0x27c], eax
jle 0x1000c8c0
mov eax, 0x5bd5
test eax, eax
je 0x1000c8c0
mov dword [ebp - 0x908], 1
jmp 0x1000c8c7
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x3bc]
imul eax, dword [ebp - 0x908]
test eax, eax
je 0x1000c8f3
mov dword [ebp - 0xa84], 0x95610a1
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0xa84], eax
jmp 0x1000c9bf
mov dword [ebp - 0x918], 0xf57440e7
mov dword [ebp - 0xa8c], 6
mov dword [ebp - 0xa94], 0xaa7f
xor eax, eax
jne 0x1000c927
cmp dword [ebp - 0xa8c], 0
jne 0x1000c927
and dword [ebp - 0x3c4], 0
jmp 0x1000c931
mov dword [ebp - 0x3c4], 1
mov eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x3c4]
jle 0x1000c94b
mov dword [ebp - 0x910], 1
jmp 0x1000c952
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x910]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x918]
sub eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0xa94]
jge 0x1000c97a
xor eax, eax
inc eax
jne 0x1000c97a
and dword [ebp - 0xa9c], 0
jmp 0x1000c984
mov dword [ebp - 0xa9c], 1
mov eax, dword [ebp - 0x918]
mov dword [ebp - 0xe60], eax
mov eax, 0x98c3
cmp eax, 1
jne 0x1000c9a6
mov dword [ebp - 0x3f8], 1
jmp 0x1000c9ad
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
sub eax, dword [ebp - 0xaa4]
mov dword [ebp - 0xa8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfd0]
call fcn.10019b7a
mov dword [ebp - 0x194], 0xc70c
mov dword [ebp - 0x158], 0xd44ad374
mov dword [ebp - 0x284], 0
push 2
lea ecx, [ebp - 0xb1c]
call fcn.10019b12
mov dword [ebp - 4], 3
mov dword [ebp - 0x3dc], 0x35b263d1
mov dword [ebp - 0x2e4], 0x53589fe5
mov dword [ebp - 0xab4], 0x196e6c8c
mov dword [ebp - 0x1dc], 0
jmp 0x1000ca37
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 2
jge 0x1000ca59
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0xb1c]
call fcn.10019b7f
mov dword [eax], 1
jmp 0x1000ca2a
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0xe68], eax
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x284], eax
jl 0x1000ca7f
mov dword [ebp - 0x3d4], 1
jmp 0x1000ca86
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x2e4]
dec eax
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x3d4]
sub eax, dword [ebp - 0x2e4]
jne 0x1000cabf
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0xe70], eax
mov eax, 0x4956e74e
test eax, eax
jne 0x1000cabf
and dword [ebp - 0x694], 0
jmp 0x1000cac9
mov dword [ebp - 0x694], 1
mov eax, dword [ebp - 0x3dc]
cmp dword [ebp - 0x694], eax
je 0x1000cae3
mov dword [ebp - 0xaac], 1
jmp 0x1000caea
and dword [ebp - 0xaac], 0
push 0
lea ecx, [ebp - 0xb1c]
call fcn.10019b7f
push 0
lea ecx, [ebp - 0xb1c]
call fcn.10019b7f
cmp dword [ebp - 0x3dc], 0
jne 0x1000cb1f
mov eax, 0x7736
test eax, eax
jne 0x1000cb1f
and dword [ebp - 0x7f4], 0
jmp 0x1000cb29
mov dword [ebp - 0x7f4], 1
cmp dword [ebp - 0x7f4], 0x43ee
jg 0x1000cb41
mov dword [ebp - 0x3e4], 1
jmp 0x1000cb48
and dword [ebp - 0x3e4], 0
push 0
lea ecx, [ebp - 0xb1c]
call fcn.10019b7f
mov ecx, dword [ebp - 0x3e4]
mov dword [eax], ecx
mov dword [ebp - 0xab4], 0xe283d1f0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb1c]
call fcn.10019b7a
push 1
lea ecx, [ebp - 0x968]
call fcn.10019b12
mov dword [ebp - 4], 4
push 1
lea ecx, [ebp - 0xcb0]
call fcn.10019b12
mov byte [ebp - 4], 5
mov dword [ebp - 0x94], 0
jmp 0x1000cbb4
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x1000cbd6
push dword [ebp - 0x94]
lea ecx, [ebp - 0x968]
call fcn.10019b7f
mov dword [eax], 0xfecafe8
jmp 0x1000cba7
mov dword [ebp - 0xe78], 0xfa860b4f
mov dword [ebp - 0xe80], 0x7bf0b96c
mov dword [ebp - 0xe88], 0xba33
mov dword [ebp - 0xe90], 0x250e6da5
mov dword [ebp - 0xe98], 2
mov dword [ebp - 0xea0], 0x2086bd08
mov dword [ebp - 0xea8], 0xffffffff
mov dword [ebp - 0xeb0], 0x7d2703d9
mov dword [ebp - 0xeb8], 1
mov dword [ebp - 0xec0], 0
mov dword [ebp - 0xec8], 1
mov dword [ebp - 0xed0], 0xffffffff
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x1e4], 0
jmp 0x1000cc71
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 2
jge 0x1000cc8d
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x10a8], 0x2daab72b
jmp 0x1000cc64
mov byte [ebp - 0x108], 0
movzx eax, byte [ebp - 0x108]
test eax, eax
je 0x1000ccae
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, dword [ebp - 0x69c]
dec eax
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x94], 0
jmp 0x1000ccd4
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x1000ccf6
push dword [ebp - 0x94]
lea ecx, [ebp - 0xcb0]
call fcn.10019b7f
mov dword [eax], 1
jmp 0x1000ccc7
mov dword [ebp - 0x19c], 0
push 4
lea ecx, [ebp - 0x958]
call fcn.10019b12
mov byte [ebp - 4], 6
mov dword [ebp - 0x374], 0xaf72
mov dword [ebp - 0x174], 0xf791
mov dword [ebp - 0x33c], 0x32e26595
mov dword [ebp - 0x2ec], 0xfff7
mov dword [ebp - 0xad4], 0xffff
mov dword [ebp - 0x6c4], 0xfffa
mov dword [ebp - 0x14], 0
jmp 0x1000cd5d
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1000cd79
push dword [ebp - 0x14]
lea ecx, [ebp - 0x958]
call fcn.10019b7f
mov dword [eax], 0x7a9a9718
jmp 0x1000cd56
mov dword [ebp - 0x14], 0
jmp 0x1000cd89
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000cd9f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xba0], 1
jmp 0x1000cd82
mov dword [ebp - 0x14], 0
jmp 0x1000cdaf
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000cdc5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xc24], 0x8a87
jmp 0x1000cda8
push 3
lea ecx, [ebp - 0x958]
call fcn.10019b7f
mov eax, dword [eax]
neg eax
jne 0x1000cef7
push 3
lea ecx, [ebp - 0x958]
call fcn.10019b7f
mov esi, eax
push 2
lea ecx, [ebp - 0x958]
call fcn.10019b7f
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x1000ce0a
mov dword [ebp - 0x3f4], 1
jmp 0x1000ce11
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xed8], eax
cmp dword [ebp - 0x174], 0x21342f3d
je 0x1000ce35
mov dword [ebp - 0x3ec], 1
jmp 0x1000ce3c
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x3ec], eax
jne 0x1000ce53
cmp dword [ebp - 0x174], 0
je 0x1000ce68
cmp dword [ebp - 0x374], 0
je 0x1000ce68
mov dword [ebp - 0x8a4], 1
jmp 0x1000ce6f
and dword [ebp - 0x8a4], 0
mov esi, dword [ebp - 0x174]
add esi, dword [ebp - 0x8a4]
push 1
lea ecx, [ebp - 0x958]
call fcn.10019b7f
cmp esi, dword [eax]
jg 0x1000ce98
mov dword [ebp - 0x6a4], 1
jmp 0x1000ce9f
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x3f4]
sub eax, dword [ebp - 0x6a4]
jne 0x1000cebf
mov eax, 0xedb39523
test eax, eax
jne 0x1000cebf
and dword [ebp - 0x3fc], 0
jmp 0x1000cec9
mov dword [ebp - 0x3fc], 1
cmp dword [ebp - 0x3fc], 0xffffffff
je 0x1000cede
mov dword [ebp - 0x7fc], 1
jmp 0x1000cee5
and dword [ebp - 0x7fc], 0
cmp dword [ebp - 0x7fc], 1
jne 0x1000cef7
and dword [ebp - 0x404], 0
jmp 0x1000cf01
mov dword [ebp - 0x404], 1
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x33c]
imul eax, dword [ebp - 0x404]
cmp dword [ebp - 0x19c], eax
je 0x1000cf2f
mov dword [ebp - 0x6ac], 1
jmp 0x1000cf36
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0
je 0x1000cf60
cmp dword [ebp - 0x33c], 0
je 0x1000cf60
mov dword [ebp - 0x40c], 1
jmp 0x1000cf67
and dword [ebp - 0x40c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x40c]
mov dword [ebp + eax - 0xba0], ecx
cmp dword [ebp - 0x374], 0
jne 0x1000cf8f
mov dword [ebp - 0x414], 1
jmp 0x1000cf96
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0xee0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc24]
mov dword [ebp - 0xee8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc24], 0
je 0x1000cfda
cmp dword [ebp - 0x2ec], 0
je 0x1000cfda
mov dword [ebp - 0xabc], 1
jmp 0x1000cfe1
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0xef0], eax
push 3
lea ecx, [ebp - 0x958]
call fcn.10019b7f
mov dword [eax], 1
xor eax, eax
inc eax
neg eax
cmp eax, dword [ebp - 0x174]
jg 0x1000d019
mov dword [ebp - 0x8fc], 1
jmp 0x1000d020
and dword [ebp - 0x8fc], 0
cmp dword [ebp - 0x8fc], 0x988f
jl 0x1000d038
mov dword [ebp - 0x6b4], 1
jmp 0x1000d03f
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x414]
cmp eax, dword [ebp - 0x6b4]
jg 0x1000d062
mov eax, 0x3766
test eax, eax
je 0x1000d062
mov dword [ebp - 0x41c], 1
jmp 0x1000d069
and dword [ebp - 0x41c], 0
cmp dword [ebp - 0x41c], 0x3c39
jg 0x1000d081
mov dword [ebp - 0x804], 1
jmp 0x1000d088
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x174]
cmp dword [ebp - 0x804], eax
jl 0x1000d0a2
mov dword [ebp - 0x424], 1
jmp 0x1000d0a9
and dword [ebp - 0x424], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xba0]
cmp eax, dword [ebp - 0x424]
jle 0x1000d375
mov dword [ebp - 0x42c], 1
mov dword [ebp - 0x168], 1
push 2
lea ecx, [ebp - 0xa08]
call fcn.10019b12
mov byte [ebp - 4], 7
mov dword [ebp - 0x444], 0x62be9700
mov dword [ebp - 0xadc], 0xa4961f08
mov dword [ebp - 0x28c], 0
jmp 0x1000d114
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 2
jge 0x1000d136
push dword [ebp - 0x28c]
lea ecx, [ebp - 0xa08]
call fcn.10019b7f
mov dword [eax], 0x5314
jmp 0x1000d107
mov byte [ebp - 0x10b], 0
movzx eax, byte [ebp - 0x10b]
test eax, eax
je 0x1000d15e
push 0
push 0
push 0x25b8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
cmp dword [ebp - 0x168], 0
jne 0x1000d1ef
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0xef8], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x168], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xba0]
cmp dword [ebp - 0x168], eax
je 0x1000d1a3
mov dword [ebp - 0xac4], 1
jmp 0x1000d1aa
and dword [ebp - 0xac4], 0
cmp dword [ebp - 0x168], 0x1eb61364
jge 0x1000d1c2
mov dword [ebp - 0xacc], 1
jmp 0x1000d1c9
and dword [ebp - 0xacc], 0
push 1
lea ecx, [ebp - 0xa08]
call fcn.10019b7f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc24], 0
jne 0x1000d1ef
and dword [ebp - 0x6bc], 0
jmp 0x1000d1f9
mov dword [ebp - 0x6bc], 1
cmp dword [ebp - 0x6bc], 0x52f506a5
jg 0x1000d211
mov dword [ebp - 0x2f4], 1
jmp 0x1000d218
and dword [ebp - 0x2f4], 0
push 2
lea ecx, [ebp - 0x958]
call fcn.10019b7f
mov ecx, dword [ebp - 0x2f4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x2f4], eax
jge 0x1000d247
mov dword [ebp - 0x8ac], 1
jmp 0x1000d24e
and dword [ebp - 0x8ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xba0]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
cmp eax, dword [ebp - 0x8ac]
jle 0x1000d27b
mov dword [ebp - 0x434], 1
jmp 0x1000d282
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x6c4], eax
cmp dword [ebp - 0x6c4], 0xffffffff
jbe 0x1000d2b3
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc24], 0
je 0x1000d2b3
mov dword [ebp - 0x43c], 1
jmp 0x1000d2ba
and dword [ebp - 0x43c], 0
push 1
lea ecx, [ebp - 0xa08]
call fcn.10019b7f
mov ecx, dword [ebp - 0x43c]
cmp ecx, dword [eax]
jg 0x1000d2dd
mov dword [ebp - 0x80c], 1
jmp 0x1000d2e4
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x80c]
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0
jne 0x1000d309
push 9
pop eax
test eax, eax
jne 0x1000d309
and dword [ebp - 0x6cc], 0
jmp 0x1000d313
mov dword [ebp - 0x6cc], 1
mov esi, dword [ebp - 0xad4]
push 1
lea ecx, [ebp - 0xa08]
call fcn.10019b7f
mov ecx, dword [ebp - 0x6cc]
imul ecx, dword [eax]
add esi, ecx
imul esi, esi, 9
push 0
lea ecx, [ebp - 0xa08]
call fcn.10019b7f
cmp esi, dword [eax]
jle 0x1000d351
mov dword [ebp - 0x44c], 1
jmp 0x1000d358
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0xadc], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xa08]
call fcn.10019b7a
jmp 0x1000d399
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x1000d399
push 0x12e1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x958]
call fcn.10019b7a
push 0
lea ecx, [ebp - 0x968]
call fcn.10019b7f
cmp dword [eax], 0
je 0x1000d3c3
mov eax, 0xf5a2
test eax, eax
jne 0x1000d3d5
cmp dword [ebp - 0x194], 0
jne 0x1000d3d5
and dword [ebp - 0x94c], 0
jmp 0x1000d3df
mov dword [ebp - 0x94c], 1
mov eax, dword [ebp - 0x194]
cmp dword [ebp - 0x94c], eax
jl 0x1000d3f9
mov dword [ebp - 0x454], 1
jmp 0x1000d400
and dword [ebp - 0x454], 0
cmp dword [ebp - 0x454], 0x9f48
jl 0x1000d418
mov dword [ebp - 0x6d4], 1
jmp 0x1000d41f
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jne 0x1000d446
mov eax, 0x8dacb314
test eax, eax
jne 0x1000d446
and dword [ebp - 0x45c], 0
jmp 0x1000d450
mov dword [ebp - 0x45c], 1
push 0
lea ecx, [ebp - 0x968]
call fcn.10019b7f
mov ecx, dword [ebp - 0x45c]
cmp ecx, dword [eax]
jle 0x1000d473
mov dword [ebp - 0x814], 1
jmp 0x1000d47a
and dword [ebp - 0x814], 0
push 0
lea ecx, [ebp - 0x968]
call fcn.10019b7f
mov ecx, dword [ebp - 0x814]
cmp ecx, dword [eax]
jle 0x1000d49d
mov dword [ebp - 0x464], 1
jmp 0x1000d4a4
and dword [ebp - 0x464], 0
push 0
lea ecx, [ebp - 0xcb0]
call fcn.10019b7f
mov dword [ebp - 0x364], eax
push 0
lea ecx, [ebp - 0x968]
call fcn.10019b7f
mov ecx, dword [ebp - 0x364]
mov ecx, dword [ecx]
sub ecx, dword [eax]
mov dword [ebp - 0xae4], ecx
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0xaec], eax
mov eax, dword [ebp - 0x364]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x364]
mov dword [ecx], eax
mov eax, dword [ebp - 0xae4]
cmp eax, dword [ebp - 0xaec]
jl 0x1000d50b
mov dword [ebp - 0x6dc], 1
jmp 0x1000d512
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x6dc]
jl 0x1000d52c
mov dword [ebp - 0x46c], 1
jmp 0x1000d533
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
add eax, 0x520f
cmp dword [ebp - 0x194], eax
jge 0x1000d557
or eax, 0xffffffff
je 0x1000d557
mov dword [ebp - 0x8b4], 1
jmp 0x1000d55e
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x8b4]
jle 0x1000d578
mov dword [ebp - 0x474], 1
jmp 0x1000d57f
and dword [ebp - 0x474], 0
push 0
lea ecx, [ebp - 0x968]
call fcn.10019b7f
mov ecx, dword [ebp - 0x474]
cmp ecx, dword [eax]
jl 0x1000d5a2
mov dword [ebp - 0x6e4], 1
jmp 0x1000d5a9
and dword [ebp - 0x6e4], 0
push 0
lea ecx, [ebp - 0x968]
call fcn.10019b7f
mov ecx, dword [ebp - 0x6e4]
mov dword [eax], ecx
mov dword [ebp - 0xf00], 0xfffa
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x1000d5ef
push 0
push 0x1bc0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov byte [ebp - 0x10a], 0
movzx eax, byte [ebp - 0x10a]
test eax, eax
je 0x1000d612
push 0
push 0
push 0x34f
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [ebp - 0x158], 0xfffffff3
jmp 0x1000d62b
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xffffffea
jle 0x1000d67b
mov byte [ebp - 0x10c], 0
movzx eax, byte [ebp - 0x10c]
test eax, eax
je 0x1000d661
push 0x995
push 0
push 0x1e1c
push 0x708
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov byte [ebp - 0xff], 0
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x1000d679
call dword [sym.imp.USER32.dll_GetMessageTime]
jmp 0x1000d61e
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xcb0]
call fcn.10019b7a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x968]
call fcn.10019b7a
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x34], 1
mov dword [ebp - 0xaf4], 0x507b3925
mov dword [ebp - 0x1ec], 0
jmp 0x1000d6ca
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 1
jge 0x1000d6e6
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x184], 8
jmp 0x1000d6bd
mov dword [ebp - 0x24], 0xe
jmp 0x1000d6f6
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jle 0x1000d705
mov dword [ebp - 0x34], 0
jmp 0x1000d6ef
mov dword [ebp - 0x34], 0
jmp 0x1000d715
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1000da14
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x494], 0
mov byte [ebp - 0xe7], 0
movzx eax, byte [ebp - 0xe7]
test eax, eax
je 0x1000d74a
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x24], 0
jmp 0x1000d75a
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1000da0f
mov dword [ebp - 0x49c], 0xcc65ad6c
mov dword [ebp - 0x4b4], 0xffffffff
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp + ecx*4 - 0x184]
cmp dword [ebp + eax*4 - 0x184], ecx
jg 0x1000d79a
mov dword [ebp - 0x47c], 1
jmp 0x1000d7a1
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x1000d7c2
cmp dword [ebp - 0x24], 0
je 0x1000d7c2
mov dword [ebp - 0x81c], 1
jmp 0x1000d7c9
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x81c], eax
jg 0x1000d7e0
mov dword [ebp - 0x484], 1
jmp 0x1000d7e7
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 0x484]
add eax, ecx
mov ecx, dword [ebp - 0x34]
cmp eax, dword [ebp + ecx*4 - 0x184]
je 0x1000d81a
cmp dword [ebp - 0x34], 0
je 0x1000d81a
cmp dword [ebp - 0x30], 0
je 0x1000d81a
mov dword [ebp - 0x6ec], 1
jmp 0x1000d821
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x6ec]
je 0x1000d83e
cmp dword [ebp - 0x30], 0
je 0x1000d83e
mov dword [ebp - 0x48c], 1
jmp 0x1000d845
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0
jb 0x1000d85a
mov dword [ebp - 0x904], 1
jmp 0x1000d861
and dword [ebp - 0x904], 0
cmp dword [ebp - 0x904], 0xffffffff
jne 0x1000d876
mov dword [ebp - 0x6f4], 1
jmp 0x1000d87d
and dword [ebp - 0x6f4], 0
mov dword [ebp - 0x494], 0xb79f
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x6f4]
mov edx, dword [ebp - 0x24]
sub ecx, dword [ebp + edx*4 - 0x184]
imul eax, ecx
mov ecx, dword [ebp - 0x34]
cmp eax, dword [ebp + ecx*4 - 0x184]
je 0x1000d99f
mov dword [ebp - 0x2fc], 1
mov dword [ebp - 0x49c], 1
mov eax, dword [ebp - 0x49c]
cmp dword [ebp - 0x2fc], eax
jl 0x1000d8e1
mov dword [ebp - 0x4ac], 1
jmp 0x1000d8e8
and dword [ebp - 0x4ac], 0
cmp dword [ebp - 0x2fc], 1
jg 0x1000d8fd
mov dword [ebp - 0x824], 1
jmp 0x1000d904
and dword [ebp - 0x824], 0
cmp dword [ebp - 0x824], 4
jle 0x1000d919
mov dword [ebp - 0x4a4], 1
jmp 0x1000d920
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 0xf12afbca
jbe 0x1000d938
mov dword [ebp - 0x6fc], 1
jmp 0x1000d93f
and dword [ebp - 0x6fc], 0
imul eax, dword [ebp - 0x6fc], 0xffff
cmp dword [ebp - 0x4ac], eax
jge 0x1000d95d
mov dword [ebp - 0x8bc], 1
jmp 0x1000d964
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x2fc]
cmp dword [ebp - 0x4b4], eax
jl 0x1000d98a
mov dword [ebp - 0x704], 1
jmp 0x1000d991
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0xaf4], eax
jmp 0x1000da0a
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x1000d9d0
push 0
push 0
push 0x162c
push 0
push 0x141c
push 0
push 0x13a4
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov dword [ebp - 0x30], 0
jmp 0x1000d9e0
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1000da0a
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1000da08
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
jmp 0x1000d9d9
jmp 0x1000d753
jmp 0x1000d70e
mov dword [ebp - 0x190], 0xc70c
push 3
lea ecx, [ebp - 0xbb8]
call fcn.10019b12
mov dword [ebp - 4], 8
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x294], 0
jmp 0x1000da55
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 3
jge 0x1000da77
push dword [ebp - 0x294]
lea ecx, [ebp - 0xbb8]
call fcn.10019b7f
mov dword [eax], 0x825e7a66
jmp 0x1000da48
mov dword [ebp - 0x178], 2
jmp 0x1000da90
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jl 0x1000dbac
push 4
lea ecx, [ebp - 0xb2c]
call fcn.10019b12
mov byte [ebp - 4], 9
mov dword [ebp - 0xafc], 0
mov dword [ebp - 0x1f4], 0
jmp 0x1000dad1
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 4
jge 0x1000daf3
push dword [ebp - 0x1f4]
lea ecx, [ebp - 0xb2c]
call fcn.10019b7f
mov dword [eax], 0x4d073ff8
jmp 0x1000dac4
push dword [ebp - 0x178]
lea ecx, [ebp - 0xbb8]
call fcn.10019b7f
mov esi, eax
push dword [ebp - 0x178]
lea ecx, [ebp - 0xbb8]
call fcn.10019b7f
mov ecx, dword [esi]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xb2c]
call fcn.10019b7f
mov dword [eax], 2
jmp 0x1000db54
push 0
lea ecx, [ebp - 0xb2c]
call fcn.10019b7f
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x4bc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x4bc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xb2c]
call fcn.10019b7f
cmp dword [eax], 0
jl 0x1000db98
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x1000db8c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetParent]
mov dword [ebp - 0xafc], 0xe58d020b
jmp 0x1000db30
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xb2c]
call fcn.10019b7a
jmp 0x1000da83
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbb8]
call fcn.10019b7a
mov dword [ebp - 0x170], 0xd44ad374
push 1
lea ecx, [ebp - 0x9c0]
call fcn.10019b12
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xf08], 0xcc86f803
mov dword [ebp - 0x6c], 0
jmp 0x1000dbf3
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1000dc09
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x204], 0xc2e0cf57
jmp 0x1000dbec
mov dword [ebp - 0x6c], 0
jmp 0x1000dc19
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1000dc35
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x9c0]
call fcn.10019b7f
mov dword [eax], 0xfffffffd
jmp 0x1000dc12
mov byte [ebp - 0xeb], 0
movzx eax, byte [ebp - 0xeb]
test eax, eax
je 0x1000dc56
push 0xcd0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
push 0
lea ecx, [ebp - 0x9c0]
call fcn.10019b7f
and dword [eax], 0
jmp 0x1000dc8c
push 0
lea ecx, [ebp - 0x9c0]
call fcn.10019b7f
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x82c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x82c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x9c0]
call fcn.10019b7f
cmp dword [eax], 0
jg 0x1000df67
mov dword [ebp - 0xcc], 0xb11accba
mov dword [ebp - 0xf10], 0x979cd329
mov dword [ebp - 0x70c], 1
mov dword [ebp - 0xcc], 0
jmp 0x1000dcd9
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x1000df4b
mov dword [ebp - 0xb4], 8
mov dword [ebp - 0xb68], 0
mov dword [ebp - 0xb4], 0
jmp 0x1000dd13
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jg 0x1000de42
mov dword [ebp - 0x29c], 0x6d0374c7
mov dword [ebp - 0x29c], 0
jmp 0x1000dd43
mov eax, dword [ebp - 0x29c]
dec eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0
jl 0x1000de3d
mov dword [ebp - 0x1fc], 0
jmp 0x1000dd69
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 3
jge 0x1000dd85
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xc18], 0
jmp 0x1000dd5c
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1000dda9
push 0x13c4
push 0x1c95
push 0
call dword [sym.imp.USER32.dll_EnableMenuItem]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc18], 0
jmp 0x1000ddd7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc18]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc18], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc18], 0
jl 0x1000de38
mov dword [ebp - 0x2a4], 0x79f6a715
mov dword [ebp - 0x4c4], 0xe75d
mov dword [ebp - 0x2a4], 0
jmp 0x1000de14
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0
jg 0x1000de36
mov dword [ebp - 0xf18], 1
mov eax, dword [ebp - 0x4c4]
inc eax
mov dword [ebp - 0x4c4], eax
jmp 0x1000de07
jmp 0x1000ddbc
jmp 0x1000dd36
jmp 0x1000dd06
mov dword [ebp - 0xb4], 0
jmp 0x1000de5b
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jg 0x1000df46
push 0
lea ecx, [ebp - 0x9c0]
call fcn.10019b7f
cmp dword [eax], 0x526c
jl 0x1000de89
mov dword [ebp - 0x4cc], 1
jmp 0x1000de90
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0xf20], eax
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp + eax*4 - 0x204]
mov dword [ebp - 0xf28], eax
mov eax, dword [ebp - 0xb68]
mov dword [ebp - 0xf30], eax
cmp dword [ebp - 0x70c], 2
je 0x1000ded0
mov dword [ebp - 0x934], 1
jmp 0x1000ded7
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x934]
je 0x1000def1
mov dword [ebp - 0x4d4], 1
jmp 0x1000def8
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp + eax*4 - 0x204]
cmp eax, dword [ebp - 0x4d4]
je 0x1000df19
mov dword [ebp - 0x714], 1
jmp 0x1000df20
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp + eax*4 - 0x204]
imul eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0xcc]
mov dword [ebp + ecx*4 - 0x204], eax
jmp 0x1000de4e
jmp 0x1000dccc
push 0
lea ecx, [ebp - 0x9c0]
call fcn.10019b7f
cmp dword [eax], 0
je 0x1000df62
jmp 0x1000dc68
jmp 0x1000dc68
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c0]
call fcn.10019b7a
push 1
lea ecx, [ebp - 0x978]
call fcn.10019b12
mov dword [ebp - 4], 0xb
push 1
lea ecx, [ebp - 0xcec]
call fcn.10019b12
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x160], 6
mov dword [ebp - 0x188], 0xb2c41ac3
mov dword [ebp - 0x2ac], 0
jmp 0x1000dfc8
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 3
jge 0x1000dfe4
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0xcc8], 9
jmp 0x1000dfbb
mov dword [ebp - 0x160], 0
jmp 0x1000dffd
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xffffffe5
jg 0x1000e119
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0x9c], 0
jmp 0x1000e02d
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jg 0x1000e0fc
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0xcc8]
mov dword [ebp - 0xf38], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcc8], 6
jne 0x1000e069
mov dword [ebp - 0x4dc], 1
jmp 0x1000e070
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x9c], 0
je 0x1000e08e
cmp dword [ebp - 0x9c], 0
jb 0x1000e08e
mov dword [ebp - 0x834], 1
jmp 0x1000e095
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x4dc]
sub eax, dword [ebp - 0x834]
je 0x1000e0b8
cmp dword [ebp - 0x160], 0
je 0x1000e0b8
mov dword [ebp - 0xb00], 1
jmp 0x1000e0bf
and dword [ebp - 0xb00], 0
cmp dword [ebp - 0x160], 0xf823
jl 0x1000e0d7
mov dword [ebp - 0x4e4], 1
jmp 0x1000e0de
and dword [ebp - 0x4e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc8]
add eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x188], eax
jmp 0x1000e020
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x9c], eax
jmp 0x1000dff0
cmp dword [ebp - 0x188], 0xfffffff7
jl 0x1000e12e
mov dword [ebp - 0x71c], 1
jmp 0x1000e135
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x74], 0
jmp 0x1000e151
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1000e16d
push dword [ebp - 0x74]
lea ecx, [ebp - 0x978]
call fcn.10019b7f
mov dword [eax], 0xfecafe8
jmp 0x1000e14a
mov dword [ebp - 0x74], 0
jmp 0x1000e17d
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1000e199
push dword [ebp - 0x74]
lea ecx, [ebp - 0xcec]
call fcn.10019b7f
mov dword [eax], 1
jmp 0x1000e176
mov dword [ebp - 0xf40], 0xd6f2
mov dword [ebp - 0xf48], 0x20f89b5
mov dword [ebp - 0xf50], 0x32ffab8c
mov dword [ebp - 0xf58], 0x152c58fb
mov dword [ebp - 0xf60], 0xc8748afa
push 1
lea ecx, [ebp - 0xfe0]
call fcn.10019b12
mov byte [ebp - 4], 0xd
mov dword [ebp - 0xf68], 0x369
mov dword [ebp - 0xf70], 0x43631e19
mov dword [ebp - 0x4ec], 0xffff
mov dword [ebp - 0x20c], 0
jmp 0x1000e213
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x1000e235
push dword [ebp - 0x20c]
lea ecx, [ebp - 0xfe0]
call fcn.10019b7f
mov dword [eax], 0x1d962ee6
jmp 0x1000e206
mov eax, dword [ebp - 0x4ec]
dec eax
mov dword [ebp - 0x4ec], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xfe0]
call fcn.10019b7a
push 0
lea ecx, [ebp - 0x978]
call fcn.10019b7f
cmp dword [eax], 0
je 0x1000e26c
mov eax, 0xf5a2
test eax, eax
jne 0x1000e27e
cmp dword [ebp - 0x190], 0
jne 0x1000e27e
and dword [ebp - 0x8c4], 0
jmp 0x1000e288
mov dword [ebp - 0x8c4], 1
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x8c4], eax
jl 0x1000e2a2
mov dword [ebp - 0x4f4], 1
jmp 0x1000e2a9
and dword [ebp - 0x4f4], 0
cmp dword [ebp - 0x4f4], 0x9f48
jl 0x1000e2c1
mov dword [ebp - 0x724], 1
jmp 0x1000e2c8
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jne 0x1000e2ef
mov eax, 0x8dacb314
test eax, eax
jne 0x1000e2ef
and dword [ebp - 0x4fc], 0
jmp 0x1000e2f9
mov dword [ebp - 0x4fc], 1
push 0
lea ecx, [ebp - 0x978]
call fcn.10019b7f
mov ecx, dword [ebp - 0x4fc]
cmp ecx, dword [eax]
jle 0x1000e31c
mov dword [ebp - 0x83c], 1
jmp 0x1000e323
and dword [ebp - 0x83c], 0
push 0
lea ecx, [ebp - 0x978]
call fcn.10019b7f
mov ecx, dword [ebp - 0x83c]
cmp ecx, dword [eax]
jle 0x1000e346
mov dword [ebp - 0x504], 1
jmp 0x1000e34d
and dword [ebp - 0x504], 0
push 0
lea ecx, [ebp - 0xcec]
call fcn.10019b7f
mov dword [ebp - 0x344], eax
push 0
lea ecx, [ebp - 0x978]
call fcn.10019b7f
mov ecx, dword [ebp - 0x344]
mov ecx, dword [ecx]
sub ecx, dword [eax]
mov dword [ebp - 0xa24], ecx
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0xa60], eax
mov eax, dword [ebp - 0x344]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x344]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa24]
cmp eax, dword [ebp - 0xa60]
jl 0x1000e3b4
mov dword [ebp - 0x72c], 1
jmp 0x1000e3bb
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x190]
cmp eax, dword [ebp - 0x72c]
jl 0x1000e3d5
mov dword [ebp - 0x50c], 1
jmp 0x1000e3dc
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
add eax, 0x520f
cmp dword [ebp - 0x190], eax
jge 0x1000e400
or eax, 0xffffffff
je 0x1000e400
mov dword [ebp - 0x90c], 1
jmp 0x1000e407
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x190]
cmp eax, dword [ebp - 0x90c]
jle 0x1000e421
mov dword [ebp - 0x514], 1
jmp 0x1000e428
and dword [ebp - 0x514], 0
push 0
lea ecx, [ebp - 0x978]
call fcn.10019b7f
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [eax]
jl 0x1000e44b
mov dword [ebp - 0x734], 1
jmp 0x1000e452
and dword [ebp - 0x734], 0
push 0
lea ecx, [ebp - 0x978]
call fcn.10019b7f
mov ecx, dword [ebp - 0x734]
mov dword [eax], ecx
mov dword [ebp - 0x170], 0xfffffff3
jmp 0x1000e480
cmp dword [ebp - 0x170], 0xffffffea
jle 0x1000eaa7
mov byte [ebp - 0xed], 0
mov dword [ebp - 0x214], 0
push 2
lea ecx, [ebp - 0xb3c]
call fcn.10019b12
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x524], 0x35b263d1
mov dword [ebp - 0x304], 0x53589fe5
mov dword [ebp - 0xb80], 0x196e6c8c
mov dword [ebp - 0x2b4], 0
jmp 0x1000e4e6
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 2
jge 0x1000e508
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0xb3c]
call fcn.10019b7f
mov dword [eax], 1
jmp 0x1000e4d9
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0xf78], eax
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x214], eax
jl 0x1000e52e
mov dword [ebp - 0x51c], 1
jmp 0x1000e535
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x304]
dec eax
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x51c]
sub eax, dword [ebp - 0x304]
jne 0x1000e56e
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0xf80], eax
mov eax, 0x4956e74e
test eax, eax
jne 0x1000e56e
and dword [ebp - 0x844], 0
jmp 0x1000e578
mov dword [ebp - 0x844], 1
mov eax, dword [ebp - 0x524]
cmp dword [ebp - 0x844], eax
je 0x1000e592
mov dword [ebp - 0xa58], 1
jmp 0x1000e599
and dword [ebp - 0xa58], 0
push 0
lea ecx, [ebp - 0xb3c]
call fcn.10019b7f
push 0
lea ecx, [ebp - 0xb3c]
call fcn.10019b7f
cmp dword [ebp - 0x524], 0
jne 0x1000e5ce
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xcec]
call fcn.10019b7a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x978]
call fcn.10019b7a
mov dword [ebp - 0x1074], 5
mov dword [ebp - 0xd2c], 1
mov dword [ebp - 0xecc], 0xfffffff8
mov dword [ebp - 0xd34], 1
mov dword [ebp - 0xf8c], 0xfffffff9
mov dword [ebp - 0xd3c], 0
mov dword [ebp - 0x754], 0xfffffffc
mov dword [ebp - 0xed4], 0xbc07c207
mov dword [ebp - 0x2c4], 0
jmp 0x1000eb2e
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 1
jge 0x1000eb4a
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xd44], 0xd526d2e8
jmp 0x1000eb21
mov byte [ebp - 0x125], 0
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x1000eb70
push 0
push 0x2556
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
mov eax, dword [ebp - 0x754]
dec eax
mov dword [ebp - 0x754], eax
mov dword [ebp - 0x384], 0x38ec
mov dword [ebp - 0xaf0], 1
mov dword [ebp - 0x224], 0x4981ff29
mov dword [ebp - 0x30c], 0xfffffffc
mov dword [ebp - 0xb90], 0x7c7ab89b
mov dword [ebp - 0xa4c], 0xfffffffc
mov dword [ebp - 0x1014], 0x29b85755
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0xd4c], eax
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0xedc], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0xd54], eax
cmp dword [ebp - 0x224], 0
jne 0x1000ebfe
or eax, 0xffffffff
jne 0x1000ebfe
and dword [ebp - 0x55c], 0
jmp 0x1000ec08
mov dword [ebp - 0x55c], 1
mov eax, dword [ebp - 0xaf0]
cmp eax, dword [ebp - 0x55c]
jl 0x1000ec28
cmp dword [ebp - 0x224], 0
jne 0x1000ec28
mov dword [ebp - 0x854], 1
mov eax, dword [ebp - 0x854]
sub eax, dword [ebp - 0x30c]
imul eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x384], eax
je 0x1000ec5d