Function at 0x1880daf9
Capabilities:
Check os version
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
mov eax, 0x1882c06f
call fcn.1882a764
sub esp, 0xa2c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, dword [ebp + 8]
push 0x110
xor ebx, ebx
push ebx
lea eax, [ebp - 0x614]
push eax
call fcn.18819090
add esp, 0xc
mov dword [ebp - 0x618], 0x114
lea eax, [ebp - 0x618]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 8]
push eax
push ebx
push ebx
push str.First_Run
push dword [ebp + 0xc]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
call esi
mov dword [ebp - 0x14], 0xc
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xc]
push eax
push ebx
push ebx
push str.Language
push dword [ebp + 0xc]
call esi
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.AutoStart
push dword [ebp + 0xc]
call esi
test eax, eax
jne 0x1880dba7
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x19], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x1c]
push eax
push ebx
push ebx
push str.AutoStartDelay
push dword [ebp + 0xc]
call esi
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.LicCheckFailedMsgShown
push dword [ebp + 0xc]
call esi
test eax, eax
jne 0x1880dbea
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x20], al
lea eax, [edi + 0x40]
push eax
push dword [ebp + 0xc]
push str.DebugOutput
call fcn.18811903
lea eax, [edi + 0x41]
push eax
push dword [ebp + 0xc]
push str.UmTbarWin7LegacyMode
call fcn.18811903
lea eax, [edi + 0x42]
push eax
push dword [ebp + 0xc]
push str.UseUiAcc
call fcn.18811903
mov dword [ebp - 0x18], ebx
lea eax, [ebp - 0x18]
push eax
push 9
push ebx
push str.AppCompat
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880de76
mov word [ebp - 0x500], ax
push 0x206
push ebx
lea eax, [ebp - 0x4fe]
push eax
call fcn.18819090
add esp, 0xc
mov dword [ebp - 0x5c], ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x500]
push eax
push ebx
jmp 0x1880de55
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x2c]
push eax
push 1
push ebx
lea eax, [ebp - 0x500]
push eax
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880de40
mov word [ebp - 0xa38], ax
push 0x206
push ebx
lea eax, [ebp - 0xa36]
push eax
call fcn.18819090
add esp, 0xc
push 0x214
push ebx
lea eax, [ebp - 0x830]
push eax
call fcn.18819090
add esp, 0xc
lea eax, [ebp - 0x500]
push eax
mov eax, 0x208
lea ecx, [ebp - 0xa38]
call fcn.188014a8
lea eax, [ebp - 0xa38]
cmp word [ebp - 0xa38], bx
je 0x1880dcfe
cmp word [eax], 0x2f
jne 0x1880dcf6
push 0x5c
pop ecx
mov word [eax], cx
add eax, 2
cmp word [eax], bx
jne 0x1880dcea
lea eax, [ebp - 0x625]
push eax
push dword [ebp - 0x2c]
push str.AlternativeBtnMethod
call fcn.18811903
lea eax, [ebp - 0x628]
push eax
push dword [ebp - 0x2c]
push str.Buttons
call fcn.18811903
mov dword [ebp - 0x34], ebx
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x2c]
push str.BtnSpacing
call fcn.1881199f
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x620], eax
lea eax, [ebp - 0x626]
push eax
push dword [ebp - 0x2c]
push str.DragMaximizedWnd
call fcn.18811903
lea eax, [ebp - 0x624]
push eax
push dword [ebp - 0x2c]
push str.ForceBtns
call fcn.18811903
lea eax, [ebp - 0x627]
push eax
push dword [ebp - 0x2c]
push str.MenuCommands
call fcn.18811903
lea eax, [ebp - 0x830]
push eax
push dword [ebp - 0x2c]
push str.AppName
mov eax, 0x104
call fcn.18811a08
mov eax, dword [edi + 0x28]
lea ecx, [ebp - 0xa38]
cmp ecx, eax
jae 0x1880ddf3
mov ecx, dword [edi + 0x24]
lea edx, [ebp - 0xa38]
cmp ecx, edx
ja 0x1880ddf3
mov eax, edx
sub eax, ecx
cdq
mov ecx, 0x41c
idiv ecx
mov dword [ebp - 0x34], eax
mov ecx, dword [edi + 0x28]
cmp ecx, dword [edi + 0x2c]
jne 0x1880ddda
lea esi, [edi + 0x24]
call fcn.18813702
mov eax, dword [ebp - 0x34]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
imul eax, eax, 0x41c
add eax, dword [edi + 0x24]
mov edx, dword [edi + 0x28]
mov dword [ebp - 4], ebx
cmp edx, ebx
je 0x1880de2c
mov esi, eax
mov edi, edx
jmp 0x1880de1c
cmp eax, dword [edi + 0x2c]
jne 0x1880de06
lea esi, [edi + 0x24]
call fcn.18813702
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [edi + 0x28]
mov dword [ebp - 4], 1
cmp eax, ebx
je 0x1880de2c
lea esi, [ebp - 0xa38]
mov edi, eax
mov ecx, 0x107
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp + 8]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
or dword [ebp - 4], 0xffffffff
add dword [edi + 0x28], 0x41c
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc dword [ebp - 0x5c]
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x500]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x18]
mov dword [ebp - 0x24], 0x104
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
je 0x1880dc71
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x34]
push eax
push ebx
push ebx
push str.DispChangeConfirmTimeout
push dword [ebp + 0xc]
call esi
lea eax, [ebp - 0x18]
push eax
push 1
push ebx
push str.Hotkeys
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880df90
mov dword [ebp - 0x5c], ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x5c]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x5c], ebx
jbe 0x1880df87
push 0xa
push 0xb
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x24]
call fcn.188199d5
add esp, 0x10
mov dword [ebp - 0x14], 0x41c
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0xa38]
push eax
push ebx
push ebx
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880df78
push 4
lea eax, [ebp - 0xa38]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.18819480
add esp, 0xc
mov eax, dword [ebp - 0x34]
sub eax, ebx
je 0x1880df3e
dec eax
je 0x1880df33
dec eax
je 0x1880df37
dec eax
jne 0x1880df78
push 0x10
jmp 0x1880df40
mov eax, 0x41c
jmp 0x1880df41
push 0xc
pop eax
push eax
mov dword [ebp - 0x14], eax
call fcn.1881910a
mov dword [ebp - 0x28], eax
pop ecx
cmp eax, ebx
je 0x1880df78
push dword [ebp - 0x14]
lea eax, [ebp - 0xa38]
push eax
push dword [ebp - 0x28]
call fcn.18819480
add esp, 0xc
lea esi, [edi + 0x44]
lea ecx, [ebp - 0x28]
call fcn.18813402
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x5c]
jb 0x1880ded4
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Hotkeys_Action_Column_Width
push dword [ebp + 0xc]
call esi
test eax, eax
jne 0x1880dfb5
mov eax, dword [ebp - 0x1c]
mov dword [edi + 0x54], eax
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Hotkeys_Hotkey_Column_Width
push dword [ebp + 0xc]
call esi
test eax, eax
jne 0x1880dfda
mov eax, dword [ebp - 0x1c]
mov dword [edi + 0x58], eax
mov dword [ebp - 0x14], 0x208
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x5c]
push eax
push ebx
push ebx
push str.Hotkeys_Run_App_Directory
push dword [ebp + 0xc]
call esi
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Resize_to_Fit
push dword [ebp + 0xc]
call esi
test eax, eax
jne 0x1880e020
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x264], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Move_Maximized_Windows_With_Mouse
push dword [ebp + 0xc]
call esi
test eax, eax
jne 0x1880e04b
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x265], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Maximize_to_Desktop_Workspace
push dword [ebp + 0xc]
call esi
test eax, eax
jne 0x1880e076
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x266], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Save_Desktop_Icons
push dword [ebp + 0xc]
call esi
test eax, eax
jne 0x1880e0a1
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x267], al
cmp dword [ebp + 0x10], 1
jb 0x1880e6bb
lea eax, [ebp - 0x18]
push eax
push 9
push ebx
push str.Smart_Taskbar
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880e6bb
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Enabled
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880e0f3
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x268], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Mode
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880e11b
mov eax, dword [ebp - 0x1c]
mov dword [edi + 0x26c], eax
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Process_Priority
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880e143
mov eax, dword [ebp - 0x1c]
mov dword [edi + 0x290], eax
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x294]
push eax
push ebx
push ebx
push str.Show_Desktop_Hover_Time
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x298]
push eax
push ebx
push ebx
push str.WinTbarDockMonitor
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x28], ebx
mov eax, str.Taskbars
je 0x1880e194
mov eax, str.Deskbars
lea ecx, [ebp - 0x24]
push ecx
push 9
push ebx
push eax
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880e6a5
mov word [ebp - 0x8c], ax
lea edi, [ebp - 0x8a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x34], ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x8c]
push eax
push ebx
jmp 0x1880e67b
mov dword [ebp - 0x30], ebx
lea eax, [ebp - 0x30]
push eax
push 1
push ebx
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880e666
cmp dword [ebp - 0x28], ebx
jne 0x1880e24b
push 0x28
call fcn.1881910a
pop ecx
mov dword [ebp - 0x40], eax
push 2
pop ecx
mov dword [ebp - 4], ecx
cmp eax, ebx
je 0x1880e23e
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov byte [ebp - 4], 3
mov dword [eax + 0x10], 4
mov dword [eax + 0x14], ebx
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x20], ecx
mov byte [ebp - 4], 4
mov byte [eax + 0x24], bl
mov byte [ebp - 4], cl
jmp 0x1880e240
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov edi, eax
mov dword [ebp - 0x2c], edi
jmp 0x1880e294
push 0x24
call fcn.1881910a
pop ecx
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 5
cmp eax, ebx
je 0x1880e289
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov byte [ebp - 4], 6
mov dword [eax + 0x10], 4
mov dword [eax + 0x14], ebx
push 2
pop ecx
mov dword [eax + 0x18], ecx
mov dword [eax + 0x1c], ecx
mov dword [eax + 0x20], ecx
mov byte [ebp - 4], 5
jmp 0x1880e28b
xor eax, eax
or dword [ebp - 4], 0xffffffff
mov edi, eax
mov dword [ebp - 0x2c], eax
cmp edi, ebx
je 0x1880e766
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x20], 4
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x3c]
push eax
push ebx
push ebx
push str.Always_On_Top
push dword [ebp - 0x30]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
call esi
test eax, eax
jne 0x1880e2ca
mov eax, dword [ebp - 0x3c]
mov dword [edi + 0x18], eax
mov dword [ebp - 0x20], 4
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x3c]
push eax
push ebx
push ebx
push str.Auto_Hide
push dword [ebp - 0x30]
call esi
test eax, eax
jne 0x1880e2ef
mov eax, dword [ebp - 0x3c]
mov dword [edi + 0x1c], eax
mov dword [ebp - 0x20], 4
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x3c]
push eax
push ebx
push ebx
push str.Dock_Edge
push dword [ebp - 0x30]
call esi
test eax, eax
jne 0x1880e314
mov eax, dword [ebp - 0x3c]
mov dword [edi + 0x10], eax
mov dword [ebp - 0x20], 4
lea eax, [ebp - 0x20]
push eax
lea eax, [edi + 0x14]
push eax
push ebx
push ebx
push str.Dock_Monitor
push dword [ebp - 0x30]
call esi
mov dword [ebp - 0x20], 4
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x3c]
push eax
push ebx
push ebx
push str.Locked
push dword [ebp - 0x30]
call esi
test eax, eax
jne 0x1880e354
mov eax, dword [ebp - 0x3c]
mov dword [edi + 0x20], eax
cmp dword [ebp - 0x28], ebx
jne 0x1880e381
mov dword [ebp - 0x20], 4
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x3c]
push eax
push ebx
push ebx
push str.Disabled
push dword [ebp - 0x30]
call esi
test eax, eax
jne 0x1880e381
cmp dword [ebp - 0x3c], ebx
setne al
mov byte [edi + 0x24], al
mov dword [ebp - 0x5c], ebx
lea eax, [ebp - 0x5c]
push eax
push 9
push ebx
push str.Toolbars
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880e629
mov dword [ebp - 0x64], ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x8c]
push eax
push ebx
jmp 0x1880e608
mov dword [ebp - 0x6c], ebx
lea eax, [ebp - 0x6c]
push eax
push 1
push ebx
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x5c]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880e5f3
push 0x30
push ebx
lea eax, [ebp - 0xc0]
push eax
call fcn.18819090
add esp, 0xc
xor eax, eax
mov word [ebp - 0x2f0], ax
push 0xc8
push ebx
lea eax, [ebp - 0x2ee]
push eax
call fcn.18819090
add esp, 0xc
mov dword [ebp - 0x20], 0xc8
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2f0]
push eax
push ebx
push ebx
push str.Class
push dword [ebp - 0x6c]
call esi
test eax, eax
jne 0x1880e441
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
push 0x10
push 0x1882d2dc
lea eax, [ebp - 0xc0]
push eax
call fcn.18819bab
add esp, 0xc
test eax, eax
je 0x1880e5ea
mov dword [ebp - 0x20], 4
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x98]
push eax
push ebx
push ebx
push str.Index
push dword [ebp - 0x6c]
call esi
mov dword [ebp - 0x20], 4
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x3c]
push eax
push ebx
push ebx
push str.On_New_Row
push dword [ebp - 0x6c]
call esi
test eax, eax
jne 0x1880e4a8
cmp dword [ebp - 0x3c], ebx
setne al
mov byte [ebp - 0x93], al
mov dword [ebp - 0x20], 4
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x3c]
push eax
push ebx
push ebx
push str.Show_Title
push dword [ebp - 0x6c]
call esi
test eax, eax
jne 0x1880e4d3
cmp dword [ebp - 0x3c], ebx
setne al
mov byte [ebp - 0x94], al
mov dword [ebp - 0x20], 0xc8
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2f0]
push eax
push ebx
push ebx
push str.Size
push dword [ebp - 0x6c]
call esi
test eax, eax
jne 0x1880e517
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xa0]
push eax
push str._d__d
lea eax, [ebp - 0x2f0]
push eax
call fcn.1881b1ad
add esp, 0x10
mov dword [ebp - 0x20], 0xc8
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x2f0]
push eax
push ebx
push ebx
push str.Storage_Id
push dword [ebp - 0x6c]
call esi
test eax, eax
jne 0x1880e54d
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp - 0x2f0]
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
mov eax, dword [edi + 4]
lea ecx, [ebp - 0xc0]
cmp ecx, eax
jae 0x1880e5a8
mov ecx, dword [edi]
lea edx, [ebp - 0xc0]
cmp ecx, edx
ja 0x1880e5a8
mov eax, edx
sub eax, ecx
cdq
push 0x30
pop ecx
idiv ecx
mov dword [ebp - 0x40], eax
mov ecx, dword [edi + 4]
cmp ecx, dword [edi + 8]
jne 0x1880e58f
mov esi, dword [ebp - 0x2c]
call fcn.188136ab
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
imul eax, eax, 0x30
add eax, dword [edi]
mov edx, dword [edi + 4]
mov dword [ebp - 4], 8
cmp edx, ebx
je 0x1880e5e2
mov esi, eax
mov edi, edx
jmp 0x1880e5d4
cmp eax, dword [edi + 8]
jne 0x1880e5be
mov esi, dword [ebp - 0x2c]
call fcn.188136ab
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, dword [ebp - 0x2c]
mov eax, dword [edi + 4]
mov dword [ebp - 4], 9
cmp eax, ebx
je 0x1880e5e2
lea esi, [ebp - 0xc0]
mov edi, eax
push 0xc
pop ecx
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, dword [ebp - 0x2c]
or dword [ebp - 4], 0xffffffff
add dword [edi + 4], 0x30
push dword [ebp - 0x6c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc dword [ebp - 0x64]
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x64]
push dword [ebp - 0x5c]
mov dword [ebp - 0x70], 0xb
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
je 0x1880e3b9
push dword [ebp - 0x5c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [ebp + 8]
mov ecx, dword [ebp - 0x2c]
cmp dword [ebp - 0x28], ebx
jne 0x1880e641
add esi, 0x270
call fcn.18813474
jmp 0x1880e64c
add esi, 0x280
call fcn.1881356b
push dword [ebp - 0x2c]
call fcn.18807f13
push dword [ebp - 0x2c]
call fcn.18818d0d
pop ecx
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc dword [ebp - 0x34]
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x34]
push dword [ebp - 0x24]
mov dword [ebp - 0x70], 0xb
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
je 0x1880e1d7
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp + 8]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jb 0x1880e182
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x18]
push eax
push 1
push ebx
push str.TaskbarExt
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880e957
lea eax, [edi + 0x29c]
push eax
push dword [ebp - 0x18]
push str.EnableThinnerVertTbars
call fcn.18811903
mov dword [ebp - 0x5c], ebx
lea eax, [ebp - 0x5c]
push eax
push dword [ebp - 0x18]
push str.RemoveStartBtn
call fcn.1881199f
mov eax, dword [ebp - 0x5c]
mov dword [edi + 0x2a0], eax
mov dword [ebp - 0x24], ebx
lea eax, [ebp - 0x24]
push eax
push 9
push ebx
push str.Taskbars
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
je 0x1880e7a2
cmp eax, 2
je 0x1880e94e
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], str...UMSettings.cpp
mov dword [ebp - 0x50], 0x41f
mov dword [ebp - 0x4c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], eax
push 5
pop ecx
lea esi, [ebp - 0x58]
lea edi, [ebp - 0x1a8]
rep movsd dword es:[edi], dword [esi]
push 0x18836bec
lea eax, [ebp - 0x1a8]
jmp 0x1880e79c
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], str...UMSettings.cpp
mov dword [ebp - 0x50], 0x393
mov dword [ebp - 0x4c], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], eax
push 5
pop ecx
lea esi, [ebp - 0x58]
lea edi, [ebp - 0x1bc]
rep movsd dword es:[edi], dword [esi]
push 0x18836bec
lea eax, [ebp - 0x1bc]
push eax
call fcn.1881d33f
xor eax, eax
mov word [ebp - 0x8c], ax
lea edi, [ebp - 0x8a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x8c]
push eax
push ebx
jmp 0x1880e868
mov dword [ebp - 0x34], ebx
lea eax, [ebp - 0x34]
push eax
push 1
push ebx
lea eax, [ebp - 0x8c]
push eax
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x1880e8c6
push 0xa
push ebx
lea eax, [ebp - 0x8c]
push eax
call fcn.1881943c
add esp, 0xc
mov esi, eax
cmp esi, ebx
je 0x1880e901
cmp esi, 0xffffffff
je 0x1880e901
mov dword [ebp - 0x28], ebx
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x34]
push str.VertTbarWidth
call fcn.1881199f
push dword [ebp - 0x34]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x44], esi
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x40], eax
mov esi, dword [ebp + 8]
add esi, 0x2a4
lea ecx, [ebp - 0x44]
mov edx, esi
call fcn.188140d7
push eax
push esi
lea esi, [ebp - 0x74]
call fcn.18813ef8
inc edi
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x8c]
push eax
push edi
push dword [ebp - 0x24]
mov dword [ebp - 0x64], 0xb
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
cmp eax, ebx
je 0x1880e7cd
cmp eax, 0x103
je 0x1880e93c
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], str...UMSettings.cpp
mov dword [ebp - 0x50], 0x43d
mov dword [ebp - 0x4c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], eax
push 5
pop ecx
lea esi, [ebp - 0x58]
lea edi, [ebp - 0x20c]
rep movsd dword es:[edi], dword [esi]
push 0x18836bec
lea eax, [ebp - 0x20c]
jmp 0x1880e79c
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], str...UMSettings.cpp
mov dword [ebp - 0x50], 0x42b
mov dword [ebp - 0x4c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], eax
push 5
pop ecx
lea esi, [ebp - 0x58]
lea edi, [ebp - 0x1d0]
rep movsd dword es:[edi], dword [esi]
push 0x18836bec
lea eax, [ebp - 0x1d0]
jmp 0x1880e79c
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], str...UMSettings.cpp
mov dword [ebp - 0x50], 0x42f
mov dword [ebp - 0x4c], esi
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], eax
push 5
pop ecx
lea esi, [ebp - 0x58]
lea edi, [ebp - 0x194]
rep movsd dword es:[edi], dword [esi]
push 0x18836bec
lea eax, [ebp - 0x194]
jmp 0x1880e79c
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp + 8]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x18]
push eax
push 1
push ebx
push str.Shortcuts
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880ea5c
mov dword [ebp - 0x14], 0x208
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x4bc]
push eax
push ebx
push ebx
push str.Application_Directory
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x14], 0x208
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x6c4]
push eax
push ebx
push ebx
push str.Link_Directory
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x14], 0x208
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x8cc]
push eax
push ebx
push ebx
push str.Start_Menu_Link_Directory
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x14], 0x208
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xad4]
push eax
push ebx
push ebx
push str.Save_Shortcut_Directory
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x14], 0x208
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xcdc]
push eax
push ebx
push ebx
push str.Save_Profile_Directory
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Use_Shortcuts_Shell_Extension
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880ea35
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0xee4], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xee8]
push eax
push ebx
push ebx
push str.Launch_Delay_After_Display_Settings_Change
push dword [ebp - 0x18]
call esi
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x18]
push eax
push 1
push ebx
push str.Screen_Saver
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880ec5c
mov dword [ebp - 0x24], ebx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x4fc]
push eax
push ebx
push ebx
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x158]
push eax
push ebx
jmp 0x1880eb95
lea eax, [ebp - 0x158]
push eax
call fcn.188191b8
pop ecx
mov dword [ebp - 0x500], eax
cmp eax, ebx
jle 0x1880eb77
lea edx, [ebp - 0x500]
cmp edx, dword [edi + 0xef0]
jae 0x1880eb21
mov ecx, dword [edi + 0xeec]
cmp ecx, edx
ja 0x1880eb21
mov eax, edx
sub eax, ecx
cdq
mov ecx, 0x20c
idiv ecx
mov dword [ebp - 0x40], eax
mov ecx, dword [edi + 0xef0]
cmp ecx, dword [edi + 0xef4]
jne 0x1880eafe
lea esi, [edi + 0xeec]
call fcn.1881380b
mov eax, dword [ebp - 0x40]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
imul eax, eax, 0x20c
add eax, dword [edi + 0xeec]
mov edx, dword [edi + 0xef0]
mov dword [ebp - 4], 0xa
cmp edx, ebx
je 0x1880eb69
mov esi, eax
mov edi, edx
jmp 0x1880eb59
mov ecx, dword [edi + 0xef0]
cmp ecx, dword [edi + 0xef4]
jne 0x1880eb40
lea esi, [edi + 0xeec]
call fcn.1881380b
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [edi + 0xef0]
mov dword [ebp - 4], 0xb
cmp eax, ebx
je 0x1880eb69
lea esi, [ebp - 0x500]
mov edi, eax
mov ecx, 0x83
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp + 8]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
or dword [ebp - 4], 0xffffffff
add dword [edi + 0xef0], 0x20c
inc dword [ebp - 0x24]
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x4fc]
push eax
push ebx
push ebx
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x158]
push eax
push dword [ebp - 0x24]
push dword [ebp - 0x18]
mov dword [ebp - 0x64], 0x64
mov dword [ebp - 0x34], 0x104
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
je 0x1880ea9a
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xefc]
push eax
push ebx
push ebx
push str.Background_Color
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Primary_in_Preview_Mode
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880ebfd
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0xf00], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Disable_Secondary_Monitors
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880ec28
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0xf01], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Advanced_Mode
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880ec53
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0xf02], al
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x18]
push eax
push 1
push ebx
push str.Wallpaper
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880ed14
mov dword [ebp - 0x14], 0x208
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0xf04]
push eax
push ebx
push ebx
push str.Image_Directory
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x14], 0x208
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x110c]
push eax
push ebx
push ebx
push str.CurrentWallpaper
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Automatically_Adjust_Wallpaper
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880ece0
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1314], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Legacy_Game_Fix
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880ed0b
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1315], al
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x18]
push eax
push 1
push ebx
push str.Window_Buttons
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880edd9
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Move_Window_Button
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880ed5c
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1316], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Maximize_to_Desktop_Button
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880ed87
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1317], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x1318]
push eax
push ebx
push ebx
push str.Button_Spacing
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Dont_Add_Buttons_to_Dialogs
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880edd0
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x131c], al
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x18]
push eax
push 1
push ebx
push str.Window_Menu
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880ee7d
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Move_Window_Command
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880ee21
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x131d], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Maximize_to_Desktop_Command
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880ee4c
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x131e], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Menu_Position
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880ee74
mov eax, dword [ebp - 0x1c]
mov dword [edi + 0x1320], eax
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x18]
push eax
push 1
push ebx
push str.Customization
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880eef9
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x1324]
push eax
push ebx
push ebx
push str.Optional_Menu_Items
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x1328]
push eax
push ebx
push ebx
push str.Double_Click_Action
push dword [ebp - 0x18]
call esi
mov dword [ebp - 0x14], 0x208
lea eax, [ebp - 0x14]
push eax
lea eax, [edi + 0x132c]
push eax
push ebx
push ebx
push str.System_Tray_Icon
push dword [ebp - 0x18]
call esi
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x18]
push eax
push 1
push ebx
push str.Mirroring
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp dword [ebp + 0x10], 2
jb 0x1880f3d0
test eax, eax
jne 0x1880f6ad
lea eax, [edi + 0x1534]
push eax
push dword [ebp - 0x18]
push str.Mode
call fcn.1881197c
lea eax, [edi + 0x1b14]
push eax
push dword [ebp - 0x18]
push str.Start_with_UltraMon
call fcn.18811903
mov dword [ebp - 0x20], ebx
lea eax, [ebp - 0x20]
push eax
push 1
push ebx
push str.Monitor
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880f102
mov dword [ebp - 0x28], ebx
lea eax, [ebp - 0x28]
push eax
push ebx
push ebx
push ebx
push str.Mirror_Monitors
push dword [ebp - 0x20]
call esi
cmp dword [ebp - 0x28], ebx
jbe 0x1880f0eb
add dword [ebp - 0x28], 2
mov eax, dword [ebp - 0x28]
shr eax, 1
xor ecx, ecx
push 2
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.18819abb
pop ecx
mov edi, eax
mov dword [ebp - 0x5c], edi
cmp edi, ebx
jne 0x1880efe7
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], str...UMSettings.cpp
mov dword [ebp - 0x50], 0x4ff
mov dword [ebp - 0x4c], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], eax
push 5
pop ecx
lea esi, [ebp - 0x58]
lea edi, [ebp - 0x16c]
rep movsd dword es:[edi], dword [esi]
push 0x18836bec
lea eax, [ebp - 0x16c]
jmp 0x1880e79c
push dword [ebp - 0x28]
push ebx
push edi
call fcn.18819090
add esp, 0xc
lea eax, [ebp - 0x28]
push eax
push edi
push ebx
push ebx
push str.Mirror_Monitors
push dword [ebp - 0x20]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
call esi
cmp word [edi], bx
je 0x1880f0df
mov dword [ebp - 0x24], ebx
lea eax, [ebp - 0x24]
push eax
push 0x18835198
push dword [ebp - 0x5c]
call fcn.1881b1cf
mov edi, dword [ebp + 8]
add esp, 0xc
cmp eax, ebx
je 0x1880f0e2
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x64], ebx
lea ecx, [ebp - 0x64]
push ecx
lea ecx, [ebp - 0x34]
push ecx
push 0x1883519c
push eax
call fcn.1881b1ad
add esp, 0x10
cmp eax, 2
jne 0x1880f08a
mov dword [ebp - 4], 0xc
wait
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x40], eax
lea esi, [edi + 0x1538]
lea ecx, [ebp - 0x44]
mov edx, esi
call fcn.188140d7
push eax
push esi
lea esi, [ebp - 0x74]
call fcn.18813e32
wait
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x24]
push eax
mov eax, 0x18835198
push eax
push ebx
call fcn.1881b1cf
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
jmp 0x1880f02b
mov edi, dword [ebp + 8]
push dword [ebp - 0x5c]
call fcn.18819a19
pop ecx
lea eax, [edi + 0x1548]
push dword [ebp - 0x20]
call fcn.18811cb1
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x20]
push eax
push 1
push ebx
push 0x18835024
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880f18c
lea eax, [edi + 0x155c]
push eax
push dword [ebp - 0x20]
push 0x188348c0
mov eax, 0x104
call fcn.18811a08
lea eax, [edi + 0x1764]
push eax
push dword [ebp - 0x20]
push str.WndTitle
mov eax, 0xc8
call fcn.18811a08
lea eax, [edi + 0x18f4]
push eax
push dword [ebp - 0x20]
push str.WndClass
mov eax, 0xc8
call fcn.18811a08
lea eax, [edi + 0x1a84]
push eax
push dword [ebp - 0x20]
call fcn.18811f20
lea eax, [edi + 0x1a90]
push dword [ebp - 0x20]
call fcn.18811cb1
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x20]
push eax
push 1
push ebx
push str.Desktop
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880f22f
mov word [ebp - 0x108], ax
push 0x76
push ebx
lea eax, [ebp - 0x106]
push eax
call fcn.18819090
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
push dword [ebp - 0x20]
push str.Area
push 0x3c
pop eax
call fcn.18811a08
lea eax, [edi + 0x1ab0]
push eax
lea eax, [edi + 0x1aac]
push eax
lea eax, [edi + 0x1aa8]
push eax
lea eax, [edi + 0x1aa4]
push eax
push str._d__d__d__d
lea eax, [ebp - 0x108]
push eax
call fcn.1881b1ad
add esp, 0x18
lea eax, [edi + 0x1ab4]
push eax
push dword [ebp - 0x20]
call fcn.18811f20
lea eax, [edi + 0x1ac0]
push dword [ebp - 0x20]
call fcn.18811cb1
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x20]
push eax
push 1
push ebx
push str.Mouse
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880f26e
lea eax, [edi + 0x1ad4]
push eax
push dword [ebp - 0x20]
call fcn.18811f20
lea eax, [edi + 0x1ae0]
push dword [ebp - 0x20]
call fcn.18811cb1
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x20]
push eax
push 1
push ebx
push str.MonPreview
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880f6a4
mov dword [ebp - 0x30], ebx
lea eax, [ebp - 0x30]
push eax
push 1
push ebx
push str.Options
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880f3c2
lea eax, [edi + 0x1af4]
push eax
push dword [ebp - 0x30]
push str.DontMirrorPointer
call fcn.18811903
xor eax, eax
mov word [ebp - 0x158], ax
push 0xc6
push ebx
lea eax, [ebp - 0x156]
push eax
call fcn.18819090
add esp, 0xc
lea eax, [ebp - 0x158]
push eax
push dword [ebp - 0x30]
push str.ScreenUpdateRate
push 0x64
pop eax
call fcn.18811a08
cmp word [ebp - 0x158], bx
je 0x1880f310
lea eax, [ebp - 0x158]
push eax
call fcn.1881b335
pop ecx
fstp dword [edi + 0x1af8]
lea eax, [edi + 0x1afc]
push eax
push dword [ebp - 0x30]
push str.Disable_Video_Overlays
call fcn.18811903
lea eax, [edi + 0x1afd]
push eax
push dword [ebp - 0x30]
push str.AlwaysOnTop
call fcn.18811903
lea eax, [edi + 0x1afe]
push eax
push dword [ebp - 0x30]
push str.HideTbarBtn
call fcn.18811903
xor eax, eax
mov word [ebp - 0x158], ax
lea eax, [ebp - 0x158]
push eax
push dword [ebp - 0x30]
push str.WndPos
push 0x64
pop eax
call fcn.18811a08
cmp word [ebp - 0x158], bx
je 0x1880f3a5
lea eax, [edi + 0x1b0c]
push eax
lea eax, [edi + 0x1b08]
push eax
lea eax, [edi + 0x1b04]
push eax
lea eax, [edi + 0x1b00]
push eax
push str._d__d__d__d
lea eax, [ebp - 0x158]
push eax
call fcn.1881b1ad
add esp, 0x18
lea eax, [edi + 0x1b10]
push eax
push dword [ebp - 0x30]
push str.Maximized
call fcn.18811903
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1880f6a4
test eax, eax
jne 0x1880f5b0
mov dword [ebp - 0x14], ebx
lea eax, [ebp - 0x14]
push eax
push ebx
push ebx
push ebx
push str.Mirror_Monitors
push dword [ebp - 0x18]
call esi
mov eax, dword [ebp - 0x14]
cmp eax, ebx
jbe 0x1880f4d0
xor edx, edx
push 0x18
pop ecx
div ecx
mov dword [ebp - 0x40], eax
xor ecx, ecx
push 0x18
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.18819abb
pop ecx
mov edi, eax
mov dword [ebp - 0x64], edi
cmp edi, ebx
jne 0x1880f45a
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], str...UMSettings.cpp
mov dword [ebp - 0x50], 0x57a
mov dword [ebp - 0x4c], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], eax
push 5
pop ecx
lea esi, [ebp - 0x58]
lea edi, [ebp - 0x1e4]
rep movsd dword es:[edi], dword [esi]
push 0x18836bec
lea eax, [ebp - 0x1e4]
jmp 0x1880e79c
lea eax, [ebp - 0x14]
push eax
push edi
push ebx
push ebx
push str.Mirror_Monitors
push dword [ebp - 0x18]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
call esi
mov eax, dword [ebp - 0x40]
cmp eax, ebx
jle 0x1880f4c4
add edi, 0xc
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x34], eax
mov edi, dword [ebp + 8]
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
cmp eax, ebx
jle 0x1880f4b9
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ecx - 4]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x40], eax
lea esi, [edi + 0x1538]
lea ecx, [ebp - 0x44]
mov edx, esi
call fcn.188140d7
push eax
push esi
lea esi, [ebp - 0x60]
call fcn.18813e32
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
add dword [ebp - 0x24], 0x18
dec dword [ebp - 0x34]
jne 0x1880f484
jmp 0x1880f4c7
mov edi, dword [ebp + 8]
push dword [ebp - 0x64]
call fcn.18819a19
pop ecx
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Hide_Pointer
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880f4fb
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1548], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Start_with_UltraMon
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880f526
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1b14], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Mirror_Horizontally
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880f551
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1559], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Mirror_Vertically
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880f57c
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x155a], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Disable_Video_Overlays
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880f5a7
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1558], al
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x18]
push eax
push 1
push ebx
push str.Monitor_Preview
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880f6ad
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Hide_Pointer
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880f5f8
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1af4], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Disable_Video_Overlays
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880f623
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1afc], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Start_with_UltraMon
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880f64e
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1b14], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Always_On_Top
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880f679
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1afd], al
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Hide_Taskbar_Button
push dword [ebp - 0x18]
call esi
test eax, eax
jne 0x1880f6a4
cmp dword [ebp - 0x1c], ebx
setne al
mov byte [edi + 0x1afe], al
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp + 0x10], 3
jb 0x1880f800
lea eax, [ebp - 0x18]
push eax
push 1
push ebx
push str.IgnoredMonitors
push dword [ebp + 0xc]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x1880f99a
mov word [ebp - 0x8c], ax
lea edi, [ebp - 0x8a]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
mov dword [ebp + 0x10], ebx
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 0x10]
push eax
push ebx
push ebx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x8c]
push eax
push ebx
jmp 0x1880f75a
push 0xa
push ebx
lea eax, [ebp - 0x8c]
push eax
call fcn.1881943c
add esp, 0xc
cmp eax, ebx
je 0x1880f7b7
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x40], eax
mov esi, dword [ebp + 8]
add esi, 0x1b18
lea ecx, [ebp - 0x44]
mov edx, esi
call fcn.188140d7
push eax
push esi
lea esi, [ebp - 0x68]
call fcn.18813ef8
inc edi
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp + 0x10]
push eax
push ebx
push ebx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x8c]
push eax
push edi
push dword [ebp - 0x18]
mov dword [ebp - 0x34], 0xb
mov dword [ebp + 0xc], 4
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
cmp eax, ebx
je 0x1880f703
cmp eax, 0x103
je 0x1880f7f2
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], str...UMSettings.cpp
mov dword [ebp - 0x50], 0x5db
mov dword [ebp - 0x4c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], eax
push 5
pop ecx
lea esi, [ebp - 0x58]
lea edi, [ebp - 0x180]
rep movsd dword es:[edi], dword [esi]
push 0x18836bec
lea eax, [ebp - 0x180]
jmp 0x1880e79c
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], str...UMSettings.cpp
mov dword [ebp - 0x50], 0x5d1
mov dword [ebp - 0x4c], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x48], eax
push 5
pop ecx
lea esi, [ebp - 0x58]
lea edi, [ebp - 0x220]
rep movsd dword es:[edi], dword [esi]
push 0x18836bec
lea eax, [ebp - 0x220]
jmp 0x1880e79c
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x1880f99a
mov dword [ebp - 0x14], 4
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push ebx
push str.Ignore_Enabled_Monitors
push dword [ebp + 0xc]
call esi
test eax, eax
jne 0x1880f89e
cmp dword [ebp - 0x1c], ebx
je 0x1880f89e
lea eax, [ebp - 0xf0]
push eax
call fcn.18801742
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0xf0]
push eax
call fcn.1880198b
cmp dword [ebp - 0xdc], ebx
je 0x1880f88e
mov dword [ebp + 0xc], ebx
xor eax, eax
inc eax
mov ecx, dword [ebp + 0xc]
shl eax, cl
test dword [ebp - 0xdc], eax
je 0x1880f885
mov eax, ecx
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], 2
lea esi, [edi + 0x1b18]
lea ecx, [ebp - 0x44]
mov edx, esi
call fcn.188140d7
push eax
push esi
lea esi, [ebp - 0x38]
call fcn.18813ef8
inc dword [ebp + 0xc]
cmp dword [ebp + 0xc], 0x20
jb 0x1880f84e
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0xf0]
push eax
call fcn.188017f9
cmp dword [ebp - 0x614], 6
ja 0x1880f8b6
jne 0x1880f8b2
cmp dword [ebp - 0x610], 2
jae 0x1880f8b6
xor al, al
jmp 0x1880f8b8
mov al, 1
cmp byte [edi + 0x268], bl
jne 0x1880f8cd
cmp al, bl
je 0x1880f8cd
cmp byte [edi + 0x41], bl
je 0x1880f99a
mov dword [ebp + 8], ebx
mov eax, dword [edi + 0x274]
sub eax, dword [edi + 0x270]
cdq
push 0x28
pop ecx
idiv ecx
test eax, eax
je 0x1880f99a
mov dword [ebp + 0xc], ebx
mov ecx, dword [edi + 0x270]
add ecx, dword [ebp + 0xc]
cmp byte [ecx + 0x24], bl
je 0x1880f978
lea esi, [edi + 0x1b18]
mov edx, dword [esi + 4]
mov eax, dword [edx + 4]
mov dword [ebp + 0x10], edx
cmp byte [eax + 0x15], bl
jne 0x1880f929
mov edx, dword [ecx + 0x14]
cmp dword [eax + 0xc], edx
jae 0x1880f91c
mov eax, dword [eax + 8]
jmp 0x1880f921
mov dword [ebp + 0x10], eax
mov eax, dword [eax]
cmp byte [eax + 0x15], bl
je 0x1880f90f
mov edx, dword [ebp + 0x10]
mov dword [ebp + 0x10], edx
cmp edx, dword [esi + 4]
je 0x1880f93e
mov eax, dword [ecx + 0x14]
cmp eax, dword [edx + 0xc]
jb 0x1880f93e
lea eax, [ebp + 0x10]
jmp 0x1880f947
mov eax, dword [esi + 4]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
mov eax, dword [eax]
cmp eax, dword [edi + 0x1b1c]
je 0x1880f957
or dword [eax + 0x10], 1
jmp 0x1880f978
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], 1
lea ecx, [ebp - 0x38]
mov edx, esi
call fcn.188140d7
push eax
push esi
lea esi, [ebp - 0x68]
call fcn.18813ef8
inc dword [ebp + 8]
add dword [ebp + 0xc], 0x28
mov eax, dword [edi + 0x274]
sub eax, dword [edi + 0x270]
cdq
push 0x28
pop ecx
idiv ecx
cmp dword [ebp + 8], eax
jb 0x1880f8ed
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret 0xc