Function at 0x10096da0
Capabilities:
Encode data using base64
Get session user name
Parse pe header
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100fe20b
mov eax, dword fs:[0]
push eax
sub esp, 0x324
mov eax, dword [0x1013c014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x300], 0
push 0xc8
lea eax, [ebp - 0xd8]
mov dword [ebp - 4], 0
push 0
push eax
call fcn.100d6eb0
add esp, 0xc
lea ecx, [ebp - 0x308]
push 0x20119
push str.Software360WallPaperOpenShellOpenShell
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.10013210
mov edi, dword [ebp - 0x308]
test eax, eax
jne 0x10096e92
lea eax, [ebp - 0x2f0]
mov dword [ebp - 0x2f0], 0xc8
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x30c]
push eax
push 0
push str.DefaultLanguage
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x10096e89
mov eax, dword [ebp - 0x30c]
cmp eax, 1
je 0x10096e6e
cmp eax, 2
jne 0x10096e89
mov eax, dword [ebp - 0x2f0]
test eax, eax
je 0x10096e89
test al, 1
jne 0x10096e89
shr eax, 1
cmp word [ebp + eax*2 - 0xda], 0
je 0x10096e92
xor eax, eax
mov word [ebp - 0xd8], ax
xor eax, eax
lea ecx, [ebp - 0x2e8]
mov word [ebp - 0x2e8], ax
lea eax, [ebp - 0xd8]
push eax
call fcn.100684c0
push 0
lea edx, [ebp - 0x2e8]
mov byte [ebp - 4], 1
mov ecx, str.Language
call fcn.100aaab0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x2e8]
add esp, 4
push eax
call esi
mov dword [ebp - 4], 0xffffffff
test edi, edi
je 0x10096ee7
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor ebx, ebx
mov ecx, str.MenuStyle
mov dword [ebp - 0x30c], ebx
call fcn.100aa9b0
test eax, eax
je 0x10096f0d
cmp word [eax + 0x38], 3
jne 0x10096f0d
mov ebx, dword [eax + 0x40]
mov dword [ebp - 0x30c], ebx
mov ecx, str.MaxRecentDocuments
call fcn.100aa9b0
mov ecx, str.MaxRecentDocuments2
mov edi, eax
call fcn.100aa9b0
mov ecx, str.SortRecentDocuments
mov dword [eax + 0x30], edi
call fcn.100aa9b0
mov ecx, str.SortRecentDocuments2
mov edi, eax
call fcn.100aa9b0
mov ecx, str.ControlPanelCategories
mov dword [eax + 0x30], edi
call fcn.100aa9b0
mov ecx, str.ControlPanelCategories2
mov edi, eax
call fcn.100aa9b0
mov ecx, str.ConfirmLogOff
mov dword [eax + 0x30], edi
call fcn.100aa9b0
mov ecx, str.ConfirmLogOff2
mov edi, eax
call fcn.100aa9b0
mov dword [eax + 0x30], edi
call fcn.10096180
mov ecx, ebx
call fcn.1008d2b0
mov ecx, str.OverrideDPI
call fcn.100aa9b0
mov ebx, dword [eax + 0x40]
test ebx, ebx
jne 0x10096fad
push ebx
call dword [sym.imp.USER32.dll_GetDC]
mov edi, eax
push 0x5a
push edi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push edi
push 0
mov ebx, eax
call dword [sym.imp.USER32.dll_ReleaseDC]
jmp 0x10096fc3
cmp ebx, 0x60
jge 0x10096fb9
mov edi, 0x10
jmp 0x1009701e
mov eax, 0x1e0
cmp ebx, eax
cmovg ebx, eax
mov edi, 0x10
cmp ebx, 0xf0
jl 0x10096fd7
mov edi, 0x28
jmp 0x1009701e
cmp ebx, 0xd8
jl 0x10096fe6
mov edi, 0x24
jmp 0x1009701e
cmp ebx, 0xc0
jl 0x10096ff5
mov edi, 0x20
jmp 0x1009701e
cmp ebx, 0xa8
jl 0x10097004
mov edi, 0x1c
jmp 0x1009701e
cmp ebx, 0x90
jl 0x10097013
mov edi, 0x18
jmp 0x1009701e
cmp ebx, 0x78
mov eax, 0x14
cmovge edi, eax
mov ebx, 3
mov dword [ebp - 0x2e0], edi
mov word [ebp - 0x2e8], bx
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 2
mov ecx, str.SmallIconSize
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
lea eax, [edi + edi]
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], eax
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], ebx
mov ecx, str.LargeIconSize
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ebx, dword [sym.imp.USER32.dll_SystemParametersInfoW]
lea eax, [ebp - 0x310]
push 0
push eax
push 0
push 0x6a
call ebx
mov eax, dword [ebp - 0x310]
mov edi, 3
mov word [ebp - 0x2e8], di
mov dword [ebp - 0x2e0], eax
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 4
mov ecx, str.MenuDelay
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 0
lea eax, [ebp - 0x310]
push eax
push 0
push 0x66
call ebx
mov eax, dword [ebp - 0x310]
mov word [ebp - 0x2e8], di
mov dword [ebp - 0x2e0], eax
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 5
mov ecx, str.AllProgramsDelay
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
xor edi, edi
lea eax, [ebp - 0x32c]
push edi
push eax
push edi
push 0x1002
call ebx
cmp dword [ebp - 0x32c], edi
je 0x10097156
push edi
lea eax, [ebp - 0x2ec]
push eax
push edi
push 0x1012
call ebx
mov edi, dword [ebp - 0x2ec]
neg edi
sbb edi, edi
add edi, 2
mov ecx, 3
mov dword [ebp - 0x2e0], edi
mov word [ebp - 0x2e8], cx
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 6
mov ecx, str.MainMenuAnimation
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov eax, 3
mov dword [ebp - 0x2e0], edi
mov word [ebp - 0x2e8], ax
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 7
mov ecx, str.SubMenuAnimation
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 0
lea eax, [ebp - 0x330]
push eax
push 0
push 0x1014
call ebx
mov eax, dword [ebp - 0x330]
mov edi, 3
neg eax
mov word [ebp - 0x2e8], di
sbb eax, eax
and eax, 0x190
mov dword [ebp - 0x2e0], eax
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 8
mov ecx, str.MenuFadeSpeed
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ebx, dword [sym.imp.SHELL32.dll_SHRestricted]
push 0x40000006
call ebx
test eax, eax
mov word [ebp - 0x2e8], di
mov dword [ebp - 0x2e0], 0
setne al
push eax
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 9
mov ecx, str.Favorites
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 0x40000003
call ebx
mov word [ebp - 0x2e8], di
test eax, eax
je 0x1009728a
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 4], 0xa
push 1
jmp 0x1009729d
mov dword [ebp - 0x2e0], 2
mov dword [ebp - 4], 0xb
push 0
lea edx, [ebp - 0x2e8]
mov ecx, str.Documents
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 0x10000000
call ebx
push 0x40000032
mov edi, eax
call ebx
test edi, edi
jne 0x100972d5
test eax, eax
jne 0x100972d5
xor cl, cl
jmp 0x100972da
mov ecx, 1
mov eax, 3
mov word [ebp - 0x2e8], ax
xor eax, eax
cmp edi, 1
setne al
mov dword [ebp - 0x2e0], eax
push ecx
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0xc
mov ecx, 0x1011334c
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 2
call ebx
test eax, eax
mov ecx, 3
mov word [ebp - 0x2e8], cx
setne al
mov byte [ebp - 0x2ec], al
movzx eax, al
xor eax, 1
add eax, eax
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 4], 0xd
lea edx, [ebp - 0x2e8]
mov edi, dword [ebp - 0x2ec]
mov ecx, str.Shutdown
push edi
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov eax, 3
mov dword [ebp - 0x2e0], 0
mov word [ebp - 0x2e8], ax
push edi
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0xe
mov ecx, str.RemoteShutdown
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 0x40000067
call ebx
test eax, eax
mov edi, 3
mov word [ebp - 0x2e8], di
setne al
mov byte [ebp - 0x2ec], al
movzx eax, al
xor eax, 1
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 4], 0xf
lea edx, [ebp - 0x2e8]
push dword [ebp - 0x2ec]
mov ecx, str.Undock
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 0x10
call ebx
test eax, eax
setne byte [ebp - 0x2f0]
test eax, eax
jne 0x10097418
push 0x40000027
call ebx
test eax, eax
jne 0x10097418
xor al, al
jmp 0x1009741a
mov al, 1
mov byte [ebp - 0x2f4], al
movzx eax, al
xor eax, 1
mov word [ebp - 0x2e8], di
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 4], 0x10
lea edx, [ebp - 0x2e8]
push dword [ebp - 0x2f4]
mov ecx, 0x10113380
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
cmp byte [ebp - 0x2f0], 0
jne 0x10097474
push 0x40000031
call ebx
test eax, eax
jne 0x10097474
xor al, al
jmp 0x10097476
mov al, 1
mov byte [ebp - 0x2f4], al
movzx eax, al
xor eax, 1
mov word [ebp - 0x2e8], di
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 4], 0x11
lea edx, [ebp - 0x2e8]
push dword [ebp - 0x2f4]
mov ecx, str.Network
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
movzx eax, byte [ebp - 0x2f0]
xor eax, 1
mov word [ebp - 0x2e8], di
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 4], 0x12
lea edx, [ebp - 0x2e8]
push dword [ebp - 0x2f0]
mov ecx, str.Printers
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 0x40000043
call ebx
test eax, eax
mov word [ebp - 0x2e8], di
setne al
mov byte [ebp - 0x2ec], al
movzx eax, al
xor eax, 1
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 4], 0x13
lea edx, [ebp - 0x2e8]
push dword [ebp - 0x2ec]
mov ecx, 0x1010be0c
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 1
call ebx
test eax, eax
mov word [ebp - 0x2e8], di
setne al
movzx ebx, al
xor ebx, 1
mov byte [ebp - 0x2ec], al
mov dword [ebp - 0x2e0], ebx
mov dword [ebp - 4], 0x14
lea edx, [ebp - 0x2e8]
mov edi, dword [ebp - 0x2ec]
mov ecx, 0x101133c0
push edi
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov eax, 3
mov dword [ebp - 0x2e0], ebx
mov word [ebp - 0x2e8], ax
push edi
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x15
mov ecx, str.SearchAutoComplete
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ebx, dword [sym.imp.SHELL32.dll_SHRestricted]
push 0x80
call ebx
test eax, eax
mov edi, 3
mov word [ebp - 0x2e8], di
setne al
mov byte [ebp - 0x2ec], al
movzx eax, al
xor eax, 1
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 4], 0x16
lea edx, [ebp - 0x2e8]
push dword [ebp - 0x2ec]
mov ecx, str.Search
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 0x4000004f
call ebx
test eax, eax
mov word [ebp - 0x2e8], di
setne al
movzx ebx, al
xor ebx, 1
mov byte [ebp - 0x2ec], al
mov dword [ebp - 0x2e0], ebx
mov dword [ebp - 4], 0x17
lea edx, [ebp - 0x2e8]
mov edi, dword [ebp - 0x2ec]
mov ecx, str.UserFiles
push edi
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov eax, 3
mov dword [ebp - 0x2e0], ebx
mov word [ebp - 0x2e8], ax
push edi
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x18
mov ecx, str.UserDocuments
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov eax, 3
mov dword [ebp - 0x2e0], ebx
mov word [ebp - 0x2e8], ax
push edi
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x19
mov ecx, str.UserPictures
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 0x40000020
call dword [sym.imp.SHELL32.dll_SHRestricted]
test eax, eax
mov ecx, 3
mov word [ebp - 0x2e8], cx
setne al
movzx ebx, al
xor ebx, 1
mov byte [ebp - 0x2ec], al
mov dword [ebp - 0x2e0], ebx
mov dword [ebp - 4], 0x1a
mov edi, dword [ebp - 0x2ec]
push edi
lea edx, [ebp - 0x2e8]
mov ecx, str.EnableDragDrop
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov eax, 3
mov dword [ebp - 0x2e0], ebx
mov word [ebp - 0x2e8], ax
push edi
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x1b
mov ecx, str.EnableContextMenu
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 0x4000007e
call dword [sym.imp.SHELL32.dll_SHRestricted]
neg eax
mov ebx, 3
mov word [ebp - 0x2e8], bx
sbb eax, eax
inc eax
mov dword [ebp - 0x2e0], eax
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x1c
mov ecx, str.NumericSort
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
lea ecx, [ebp - 0x2ec]
call fcn.10096b50
mov dword [ebp - 4], 0x1d
xor ecx, ecx
mov eax, dword [eax]
mov word [ebp - 0x2e8], cx
lea ecx, [ebp - 0x2e8]
push eax
call fcn.100684c0
push 0
lea edx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x1e
mov ecx, str.MenuCaption
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov edx, dword [ebp - 0x2ec]
add edx, 0xfffffff0
mov dword [ebp - 4], 0x1f
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10097828
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x200
lea eax, [ebp - 0x2d8]
mov dword [ebp - 4], 0xffffffff
push 0
push eax
call fcn.100d6eb0
add esp, 0xc
mov dword [ebp - 0x314], 0x100
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x2d8]
push eax
push 3
call dword [sym.imp.Secur32.dll_GetUserNameExW]
test al, al
jne 0x10097887
lea eax, [ebp - 0x314]
mov dword [ebp - 0x314], 0x100
push eax
lea eax, [ebp - 0x2d8]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
xor eax, eax
lea ecx, [ebp - 0x2e8]
mov word [ebp - 0x2e8], ax
lea eax, [ebp - 0x2d8]
push eax
call fcn.100684c0
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x20
mov ecx, str.MenuUsername
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov cx, word [0x10159320]
mov edi, dword [sym.imp.KERNEL32.dll_GetVersion]
test cx, cx
jne 0x100978f4
call edi
mov ecx, eax
movzx eax, al
shr ecx, 8
movzx ecx, cl
shl ax, 8
or cx, ax
mov word [0x10159320], cx
mov edx, 0x602
cmp cx, dx
jb 0x10097ea9
mov ecx, str.WindowsMenu
call fcn.100aab40
mov ecx, str.AllProgramsSkin
call fcn.100aab40
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x21
mov ecx, str.CascadeAll
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.CascadeAll
call fcn.100aa9b0
push 0
xorps xmm0, xmm0
or dword [eax + 0x20], 8
lea eax, [ebp - 0x324]
push eax
push 0xc
push 0x42
mov dword [ebp - 0x324], 0xc
movq qword [ebp - 0x320], xmm0
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x100979a9
test byte [ebp - 0x320], 1
je 0x100979a9
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 1
mov dword [ebp - 4], 0x22
jmp 0x100979c1
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
mov dword [ebp - 4], 0x23
push 0
lea edx, [ebp - 0x2e8]
mov ecx, str.StartButtonType
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
push 0x5e
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov ebx, eax
mov ecx, str.EnableTouch
not bl
call fcn.100aa9b0
and bl, 1
je 0x10097a00
or dword [eax + 0x20], 8
jmp 0x10097a04
and dword [eax + 0x20], 0xfffffff7
mov di, word [0x10159320]
mov word [ebp - 0x2fa], di
test di, di
jne 0x10097a3f
mov edi, dword [sym.imp.KERNEL32.dll_GetVersion]
call edi
mov ecx, eax
movzx eax, al
shr ecx, 8
movzx edi, cl
shl ax, 8
or di, ax
mov word [ebp - 0x2fa], di
mov word [0x10159320], di
mov ecx, str.MouseClick
call fcn.100aa9b0
mov ecx, 0xa00
cmp di, cx
sbb ebx, ebx
and ebx, 0x15c
add ebx, 0xbdc
cmp di, cx
mov ecx, str.ShiftClick
mov dword [eax + 0x128], ebx
sbb edi, edi
and edi, 0x15c
add edi, 0xbdd
mov dword [eax + 0x12c], edi
call fcn.100aa9b0
mov ecx, str.WinKey
mov dword [eax + 0x128], ebx
mov dword [eax + 0x12c], edi
call fcn.100aa9b0
mov ecx, str.ShiftWin
mov dword [eax + 0x128], ebx
mov dword [eax + 0x12c], edi
call fcn.100aa9b0
mov ecx, str.MiddleClick
mov dword [eax + 0x128], ebx
mov dword [eax + 0x12c], edi
call fcn.100aa9b0
mov ecx, str.Hover
mov dword [eax + 0x128], ebx
mov dword [eax + 0x12c], edi
call fcn.100aa9b0
mov dword [eax + 0x128], ebx
mov bx, word [ebp - 0x2fa]
mov dword [eax + 0x12c], edi
mov eax, 0xa00
cmp bx, ax
jae 0x10097b15
mov ecx, str.WSMHotkey
call fcn.100aa9b0
mov dword [eax + 8], 0xd3a
mov dword [eax + 0xc], 0xd3b
jmp 0x10097b2d
mov ecx, str.OpenMouseMonitor
call fcn.100aa9b0
mov dword [eax + 8], 0xe0b
mov dword [eax + 0xc], 0xe0c
and dword [eax + 0x20], 0xfffeffff
mov ecx, str.ShiftRight
call fcn.100aa9b0
mov edi, dword [sym.imp.KERNEL32.dll_GetVersion]
and dword [eax + 0x20], 0xfffeffff
mov dword [eax + 8], 0xdd4
mov dword [eax + 0xc], 0xdd5
test bx, bx
jne 0x10097b79
call edi
mov ecx, eax
movzx eax, al
shr ecx, 8
movzx ebx, cl
shl ax, 8
or bx, ax
mov word [0x10159320], bx
mov eax, 0x603
cmp bx, ax
jb 0x10097e54
test bx, bx
jne 0x10097ba7
call edi
mov ecx, eax
movzx eax, al
shr ecx, 8
movzx ebx, cl
shl ax, 8
or bx, ax
mov word [0x10159320], bx
mov eax, 0xa00
cmp bx, ax
jb 0x10097c4e
mov edx, 0xe0a
call fcn.100aabb0
mov ebx, 3
mov dword [ebp - 0x2e0], 0
mov word [ebp - 0x2e8], bx
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x24
mov ecx, str.SkipMetro
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.SkipMetro
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x25
mov ecx, str.DisableHotCorner
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.DisableHotCorner
call fcn.100aa9b0
or dword [eax + 0x20], 8
jmp 0x10097c5d
mov edx, 0xdea
call fcn.100aabb0
mov ebx, 3
mov ecx, str.EnableStartButton
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
and dword [eax + 0x20], 0xfffeffff
mov dword [eax + 8], 0xd33
mov dword [eax + 0xc], 0xd34
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x26
mov ecx, str.EnableStartButton
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.SkipMetro
call fcn.100aa9b0
mov ebx, eax
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x300], 0
push 0x20019
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerStartPage
mov dword [ebp - 4], 0x27
lea ecx, [ebp - 0x308]
push SysReAllocString
mov dword [ebp - 0x2f0], 0
call fcn.10013210
test eax, eax
jne 0x10097d54
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x2ec], 4
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2f8]
push eax
push 0
push str.OpenAtLogon
push dword [ebp - 0x308]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x10097d4a
cmp dword [ebp - 0x2f8], 4
je 0x10097d54
xor ecx, ecx
mov dword [ebp - 0x2f0], ecx
jmp 0x10097d5a
mov ecx, dword [ebp - 0x2f0]
xor eax, eax
test ecx, ecx
mov ecx, 3
sete al
mov word [ebp - 0x2e8], cx
mov dword [ebp - 0x2e0], eax
add ebx, 0x38
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x2e8]
cmp ebx, eax
je 0x10097d94
push eax
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
js 0x10098ec1
lea eax, [ebp - 0x2e8]
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x308]
test eax, eax
je 0x10097db5
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, 3
mov cx, word [0x10159320]
test cx, cx
jne 0x10097de1
call edi
mov ecx, eax
movzx eax, al
shr ecx, 8
movzx ecx, cl
shl ax, 8
or cx, ax
mov word [0x10159320], cx
mov eax, 0xa00
cmp cx, ax
jae 0x1009866c
lea eax, [ebp - 0x2ec]
push eax
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x2f4]
push eax
lea edx, [ebp - 0x2fc]
lea ecx, [ebp - 0x2f8]
call fcn.1009dff0
mov ecx, dword [ebp - 0x2ec]
add esp, 0xc
test ecx, ecx
jle 0x1009833c
mov eax, dword [ebp - 0x2f8]
cdq
idiv ecx
mov ebx, eax
mov eax, dword [ebp - 0x2fc]
cdq
idiv ecx
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f4]
cdq
idiv ecx
mov edx, dword [ebp - 0x2f8]
jmp 0x1009834e
mov ebx, 3
mov dword [ebp - 0x2e0], 0
mov word [ebp - 0x2e8], bx
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x29
mov ecx, str.SearchMetroSettings
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.SearchMetroSettings
call fcn.100aa9b0
or dword [eax + 0x20], 8
jmp 0x10097dba
mov ecx, str.Metro
call fcn.100aab40
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x2a
mov ecx, str.SkipMetro
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.SkipMetro
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x2b
mov ecx, str.EnableStartButton
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x2c
mov ecx, str.AllTaskbars
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.AllTaskbars
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x2d
mov ecx, str.AllProgramsMetro
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.AllProgramsMetro
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x2e
mov ecx, str.HideProgramsMetro
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.HideProgramsMetro
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
mov dword [ebp - 4], 0x2f
lea edx, [ebp - 0x2e8]
push 0
mov ecx, str.ShowAppsMenu
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.ShowAppsMenu
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x30
mov ecx, str.InvertMetroIcons
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.InvertMetroIcons
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x31
mov ecx, str.AeroGlass
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.AeroGlass
call fcn.100aa9b0
mov ecx, str.EnableStartButton
or dword [eax + 0x20], 8
call fcn.100aa9b0
and dword [eax + 0x20], 0xfffeffff
mov dword [eax + 8], 0xd33
mov dword [eax + 0xc], 0xd34
call dword [sym.imp.UxTheme.dll_IsAppThemed]
neg eax
mov word [ebp - 0x2e8], bx
sbb eax, eax
inc eax
mov dword [ebp - 0x2e0], eax
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x32
mov ecx, str.StartButtonType
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.WinKey
call fcn.100aa9b0
mov ecx, str.WinKey
or dword [eax + 0x1a0], 8
call fcn.100aa9b0
mov ecx, str.ShiftWin
or dword [eax + 0x200], 8
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x1a0], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x33
mov ecx, str.RecentMetroApps
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.RecentMetroApps
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x34
mov ecx, str.SearchMetroApps
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.SearchMetroApps
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x35
mov ecx, str.SearchMetroSettings
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.SearchMetroSettings
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x36
mov ecx, str.HybridShutdown
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.HybridShutdown
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x37
mov ecx, str.EnableTouch
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.EnableTouch
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x38
mov ecx, str.StartScreenShortcut
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.StartScreenShortcut
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
mov dword [ebp - 4], 0x39
push 0
lea edx, [ebp - 0x2e8]
mov ecx, str.HighlightNewApps
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.HighlightNewApps
call fcn.100aa9b0
or dword [eax + 0x20], 8
jmp 0x10097dba
mov eax, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x2fc]
mov ebx, dword [ebp - 0x2f8]
mov ecx, 0xff
test ebx, ebx
jns 0x1009835b
xor ebx, ebx
jmp 0x10098360
cmp ebx, ecx
cmovg ebx, ecx
test edx, edx
jns 0x10098368
xor edx, edx
jmp 0x1009836d
cmp edx, ecx
cmovg edx, ecx
test eax, eax
jns 0x10098375
xor eax, eax
jmp 0x1009837d
cmp eax, 0xff
cmovg eax, ecx
mov edi, dword [ebp - 0x2f0]
test edi, edi
jge 0x10098393
mov dword [ebp - 0x2f8], 0
jmp 0x100983a2
cmp dword [ebp - 0x2f0], ecx
cmovg edi, ecx
mov dword [ebp - 0x2f8], edi
shl eax, 8
or eax, edx
shl eax, 8
or eax, ebx
mov ebx, 3
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], eax
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x3a
mov ecx, str.GlassColor
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
imul ecx, dword [ebp - 0x2ec], 0x64
mov eax, 0x80808081
mov word [ebp - 0x2e8], bx
imul ecx
add edx, ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov dword [ebp - 0x2e0], eax
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x3b
mov ecx, str.GlassIntensity
call fcn.100aaab0
add esp, 4
lea ecx, [ebp - 0x2e8]
push ecx
call esi
imul ecx, dword [ebp - 0x2f8], 0x64
mov eax, 0x80808081
mov word [ebp - 0x2e8], bx
imul ecx
add edx, ecx
mov ecx, 0x64
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [ebp - 0x2e0], ecx
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x3c
mov ecx, str.GlassBlending
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.GlassOpacity
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 1
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x3d
mov ecx, str.EnableGlass
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.EnableGlass
call fcn.100aa9b0
mov cx, word [0x10159320]
mov edi, dword [sym.imp.KERNEL32.dll_GetVersion]
or dword [eax + 0x20], 8
test cx, cx
jne 0x10098501
call edi
mov ecx, eax
movzx eax, al
shr ecx, 8
movzx ecx, cl
shl ax, 8
or cx, ax
mov word [0x10159320], cx
mov eax, 0x601
mov word [ebp - 0x2e8], bx
cmp ax, cx
sbb eax, eax
and eax, 0x1e
add eax, 0x19
mov dword [ebp - 0x2e0], eax
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x3e
mov ecx, str.TaskbarOpacity
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
mov cx, word [0x10159320]
test cx, cx
jne 0x10098571
call edi
mov ecx, eax
movzx eax, al
shr ecx, 8
movzx ecx, cl
shl ax, 8
or cx, ax
mov word [0x10159320], cx
mov eax, 0x601
cmp cx, ax
jbe 0x100985d5
call fcn.1009dec0
mov ecx, 0x13
mov word [ebp - 0x2e8], cx
mov ecx, eax
shr ecx, 0x10
movzx edx, cl
movzx ecx, al
and eax, 0xff00
shl ecx, 0x10
or edx, ecx
or edx, eax
mov dword [ebp - 0x2e0], edx
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x3f
mov ecx, str.TaskbarColor
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov cx, word [0x10159320]
test cx, cx
jne 0x100985f5
call edi
mov ecx, eax
movzx eax, al
shr ecx, 8
movzx ecx, cl
shl ax, 8
or cx, ax
mov word [0x10159320], cx
mov eax, 0x601
cmp cx, ax
ja 0x10098619
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 2
mov dword [ebp - 4], 0x40
jmp 0x10098642
mov ecx, str.TaskbarLook
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 1
or dword [eax + 0x140], 8
mov dword [ebp - 4], 0x41
push 0
lea edx, [ebp - 0x2e8]
mov ecx, str.TaskbarLook
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
jmp 0x10098827
lea eax, [ebp - 0x2f0]
push eax
lea edx, [ebp - 0x2f8]
lea ecx, [ebp - 0x2ec]
call fcn.1009e250
mov edi, dword [ebp - 0x2ec]
add esp, 4
mov ecx, 0xff
test edi, edi
jns 0x1009869a
xor edi, edi
jmp 0x1009869f
cmp edi, ecx
cmovg edi, ecx
mov edx, dword [ebp - 0x2f8]
test edx, edx
jns 0x100986ad
xor edx, edx
jmp 0x100986b2
cmp edx, ecx
cmovg edx, ecx
mov eax, dword [ebp - 0x2f0]
test eax, eax
jns 0x100986c0
xor eax, eax
jmp 0x100986c8
cmp eax, 0xff
cmovg eax, ecx
shl eax, 8
or eax, edx
mov word [ebp - 0x2e8], bx
shl eax, 8
or eax, edi
mov dword [ebp - 0x2e0], eax
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x42
mov ecx, str.GlassColor
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.GlassIntensity
call fcn.100aa9b0
mov ecx, str.GlassBlending
or dword [eax + 0x20], 8
call fcn.100aa9b0
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], 0
or dword [eax + 0x20], 8
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x43
mov ecx, str.AeroGlass
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.AeroGlass
call fcn.100aa9b0
lea ecx, [ebp - 0x2f9]
or dword [eax + 0x20], 8
call fcn.1009e2c0
xor ecx, ecx
mov word [ebp - 0x2e8], bx
mov edi, eax
and edi, 0xffffff
cmp byte [ebp - 0x2f9], cl
setne cl
mov dword [ebp - 0x2e0], ecx
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x44
mov ecx, str.TaskbarLook
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov word [ebp - 0x2e8], bx
mov dword [ebp - 0x2e0], edi
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x45
mov ecx, str.TaskbarColor
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
mov ecx, str.MouseClick
call fcn.100aa9b0
mov ecx, str.ShiftClick
and dword [eax + 0x1a0], 0xfffffff7
call fcn.100aa9b0
mov ecx, str.WinKey
and dword [eax + 0x1a0], 0xfffffff7
call fcn.100aa9b0
or dword [eax + 0x200], 8
call fcn.10081de0
mov bl, al
mov ecx, 0x10112ff4
xor eax, eax
test bl, bl
sete al
add eax, 0xd62
mov dword [ebp - 0x2ec], eax
call fcn.100aa9b0
test bl, bl
jne 0x10098857
or dword [eax + 0x20], 0x10000
jmp 0x1009885e
and dword [eax + 0x20], 0xfffeffff
mov ecx, dword [ebp - 0x2ec]
mov dword [eax + 0xc], ecx
xor eax, eax
push str.ItemsCOLUMN_PADDING__ProgramsMenu__AppsMenu__COLUMN_BREAK__FavoritesItem__RecentDocumentsItem__ComputerItem__SettingsMenu__SearchMenu__HelpItem__RunItem__SEPARATOR__LogOffItem__UndockItem__DisconnectItem__ShutdownBoxItem__SearchBoxItem_nProgramsMenu.Commandprograms_nProgramsMenu.Label_Menu.Programs_nProgramsMenu.Tip_Menu.ProgramsTip_nProgramsMenu.Iconshell32.dll_326_nAppsMenu.Commandapps_nAppsMenu.Label_Menu.Apps_nAppsMenu.Icon_2_nFavoritesItem.Commandfavorites_nFavoritesItem.Label_Menu.Favorites_nFavoritesItem.Iconimageres.dll_1024_nRecentDocumentsItem.Commandrecent_documents_nRecentDocumentsItem.ItemsUserFilesItem__UserDocumentsItem__UserPicturesItem_nRecentDocumentsItem.Label_Menu.Documents_nRecentDocumentsItem.Iconshell32.dll_327_nRecentDocumentsItem.SettingsITEMS_FIRST_nSettingsMenu.Commandsettings_nSettingsMenu.ItemsPCSettingsItem__ControlPanelItem__SEPARATOR__SecurityItem__NetworkItem__PrintersItem__TaskbarSettingsItem__ProgramsFeaturesItem__SEPARATOR__MenuSettingsItem_nSettingsMenu.Label_Menu.Settings_nSettingsMenu.Iconshell32.dll_330_nSearchMenu.Commandsearch_nSearchMenu.ItemsSearchFilesItem__SearchPrinterItem__SearchComputersItem__SearchPeopleItem_nSearchMenu.Label_Menu.Search_nSearchMenu.Iconshell32.dll_323_nComputerItem.Commandcomputer_nHelpItem.Commandhelp_nHelpItem.Label_Menu.Help_nHelpItem.Tip_Menu.HelpTip_nHelpItem.Iconimageres.dll_99_nRunItem.Commandrun_nRunItem.Label_Menu.Run_nRunItem.Tip_Menu.RunTip_nRunItem.Iconshell32.dll_328_nLogOffItem.Commandlogoff_nLogOffItem.Label_Menu.Logoff_nLogOffItem.Tip_Menu.LogOffTip_nLogOffItem.Iconshell32.dll_325_nUndockItem.Commandundock_nUndockItem.Label_Menu.Undock_nUndockItem.Tip_Menu.UndockTip_nUndockItem.Iconshell32.dll_331_nDisconnectItem.Commanddisconnect_nDisconnectItem.Label_Menu.Disconnect_nDisconnectItem.Tip_Menu.DisconnectTip_nDisconnectItem.Iconshell32.dll_329_nShutdownBoxItem.Commandshutdown_box_nShutdownBoxItem.Label_Menu.ShutdownBox_nShutdownBoxItem.Iconshell32.dll_329_nShutdownBoxItem.ItemsSwitchUserItem__LockItem__SleepItem__HibernateItem__RestartNUItem__RestartItem__ShutdownNUItem__ShutdownItem_nShutdownBoxItem.SettingsSPLIT_nSearchBoxItem.Commandsearch_box_nSearchBoxItem.Label_Menu.SearchBox_nSearchBoxItem.Iconnone_nSearchBoxItem.SettingsTRACK_RECENT__OPEN_UP_nUserFilesItem.Commanduser_files_nUserFilesItem.Tip_Menu.UserFilesTip_nUserDocumentsItem.Commanduser_documents_nUserDocumentsItem.Tip_Menu.UserDocumentsTip_nUserPicturesItem.Commanduser_pictures_nUserPicturesItem.Tip_Menu.UserPicturesTip_nControlPanelItem.Commandcontrol_panel_nControlPanelItem.Iconshell32.dll_137_nControlPanelItem.Label_Menu.ControlPanel_nControlPanelItem.Tip_Menu.ControlPanelTip_nControlPanelItem.SettingsTRACK_RECENT_nPCSettingsItem.Commandpc_settings_nPCSettingsItem.Linkshell:appsfolderwindows.immersivecontrolpanel_cw5n1h2txyewy_microsoft.windows.immersivecontrolpanel_nPCSettingsItem.Label_Menu.PCSettings_nPCSettingsItem.SettingsTRACK_RECENT_nSecurityItem.Commandwindows_security_nSecurityItem.Label_Menu.Security_nSecurityItem.Tip_Menu.SecurityTip_nSecurityItem.Iconshell32.dll_48_nNetworkItem.Commandnetwork_connections_nNetworkItem.Iconshell32.dll_257_nNetworkItem.Label_Menu.Network_nNetworkItem.Tip_Menu.NetworkTip_nPrintersItem.Commandprinters_nPrintersItem.Iconshell32.dll_138_nPrintersItem.Label_Menu.Printers_nPrintersItem.Tip_Menu.PrintersTip_nTaskbarSettingsItem.Commandtaskbar_settings_nTaskbarSettingsItem.Label_Menu.Taskbar_nTaskbarSettingsItem.Iconshell32.dll_40_nTaskbarSettingsItem.Tip_Menu.TaskbarTip_nProgramsFeaturesItem.Commandprograms_features_nProgramsFeaturesItem.Label_Menu.Features_nProgramsFeaturesItem.Iconshell32.dll_271_nProgramsFeaturesItem.Tip_Menu.FeaturesTip_nMenuSettingsItem.Commandmenu_settings_nMenuSettingsItem.Label_Menu.ClassicSettings_nMenuSettingsItem.Icon_1_nMenuSettingsItem.Tip_Menu.SettingsTip_nSearchFilesItem.Commandsearch_files_nSearchFilesItem.Label_Menu.SearchFiles_nSearchFilesItem.Tip_Menu.SearchFilesTip_nSearchFilesItem.Iconshell32.dll_134_nSea
lea ecx, [ebp - 0x2e8]
mov word [ebp - 0x2e8], ax
call fcn.100684c0
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x46
mov ecx, str.MenuItems1
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
xor eax, eax
lea ecx, [ebp - 0x2e8]
push str.ItemsCOLUMN_PADDING__ProgramsMenu__AppsMenu__SearchBoxItem__COLUMN_BREAK__FavoritesItem__UserFilesItem__UserDocumentsItem__UserPicturesItem__ComputerItem__RecentDocumentsItem__SEPARATOR__PCSettingsItem__ControlPanelItem__SecurityItem__NetworkItem__PrintersItem__SEPARATOR__SearchMenu__HelpItem__RunItem__COLUMN_PADDING__SEPARATOR__ShutdownBoxItem_nProgramsMenu.Commandprograms_nProgramsMenu.Label_Menu.Programs_nProgramsMenu.Iconshell32.dll_326_nAppsMenu.Commandapps_nAppsMenu.Label_Menu.Apps_nAppsMenu.Icon_2_nFavoritesItem.Commandfavorites_nFavoritesItem.Label_Menu.Favorites_nFavoritesItem.Iconimageres.dll_1024_nComputerItem.Commandcomputer_nRecentDocumentsItem.Commandrecent_documents_nRecentDocumentsItem.SettingsITEMS_FIRST_nSearchMenu.Commandsearch_nSearchMenu.ItemsSearchFilesItem__SearchPrinterItem__SearchComputersItem__SearchPeopleItem_nSearchMenu.Label_Menu.Search_nSearchMenu.Iconshell32.dll_323_nHelpItem.Commandhelp_nHelpItem.Label_Menu.Help_nHelpItem.Tip_Menu.HelpTip_nHelpItem.Iconimageres.dll_99_nRunItem.Commandrun_nRunItem.Label_Menu.Run_nRunItem.Tip_Menu.RunTip_nRunItem.Iconshell32.dll_328_nShutdownBoxItem.Commandshutdown_box_nShutdownBoxItem.Label_Menu.ShutdownBox_nShutdownBoxItem.Iconshell32.dll_329_nShutdownBoxItem.ItemsSwitchUserItem__LogOffItem__LockItem__SEPARATOR__SleepItem__HibernateItem__SEPARATOR__RestartNUItem__RestartItem__UndockItem__DisconnectItem__ShutdownNUItem__ShutdownItem_nShutdownBoxItem.SettingsSPLIT_nSearchBoxItem.Commandsearch_box_nSearchBoxItem.Label_Menu.SearchBox_nSearchBoxItem.Iconnone_nSearchBoxItem.SettingsTRACK_RECENT__OPEN_UP_nUserFilesItem.Commanduser_files_nUserFilesItem.Tip_Menu.UserFilesTip_nUserDocumentsItem.Commanduser_documents_nUserDocumentsItem.Tip_Menu.UserDocumentsTip_nUserPicturesItem.Commanduser_pictures_nUserPicturesItem.Tip_Menu.UserPicturesTip_nControlPanelItem.Commandcontrol_panel_nControlPanelItem.Iconshell32.dll_137_nControlPanelItem.Label_Menu.ControlPanel_nControlPanelItem.Tip_Menu.ControlPanelTip_nControlPanelItem.SettingsTRACK_RECENT_nPCSettingsItem.Commandpc_settings_nPCSettingsItem.Linkshell:appsfolderwindows.immersivecontrolpanel_cw5n1h2txyewy_microsoft.windows.immersivecontrolpanel_nPCSettingsItem.Label_Menu.PCSettings_nPCSettingsItem.SettingsTRACK_RECENT_nSecurityItem.Commandwindows_security_nSecurityItem.Iconshell32.dll_48_nSecurityItem.Label_Menu.Security_nSecurityItem.Tip_Menu.SecurityTip_nNetworkItem.Commandnetwork_connections_nNetworkItem.Iconshell32.dll_257_nNetworkItem.Label_Menu.Network_nNetworkItem.Tip_Menu.NetworkTip_nPrintersItem.Commandprinters_nPrintersItem.Iconshell32.dll_138_nPrintersItem.Label_Menu.Printers_nPrintersItem.Tip_Menu.PrintersTip_nSearchFilesItem.Commandsearch_files_nSearchFilesItem.Label_Menu.SearchFiles_nSearchFilesItem.Tip_Menu.SearchFilesTip_nSearchFilesItem.Iconshell32.dll_134_nSearchPrinterItem.Commandsearch_printer_nSearchPrinterItem.Label_Menu.SearchPrinter_nSearchPrinterItem.Tip_Menu.SearchPrintersTip_nSearchPrinterItem.Iconshell32.dll_1006_nSearchComputersItem.Commandsearch_computers_nSearchComputersItem.Label_Menu.SearchComputers_nSearchComputersItem.Tip_Menu.SearchComputersTip_nSearchComputersItem.Iconshell32.dll_135_nSearchPeopleItem.Commandsearch_people_nSearchPeopleItem.Label_Menu.SearchPeople_nSearchPeopleItem.Iconshell32.dll_269_nSwitchUserItem.Commandswitch_user_nSwitchUserItem.Label_Menu.SwitchUser_nSwitchUserItem.Tip_Menu.SwitchUserTip_nSwitchUserItem.Iconnone_nLockItem.Commandlock_nLockItem.Label_Menu.Lock_nLockItem.Tip_Menu.LockTip_nLockItem.Iconnone_nLogOffItem.Commandlogoff_nLogOffItem.Label_Menu.LogOffShort_nLogOffItem.Iconnone_nLogOffItem.Tip_Menu.LogOffTip_nSleepItem.Commandsleep_nSleepItem.Label_Menu.Sleep_nSleepItem.Tip_Menu.SleepTip_nSleepItem.Iconnone_nHibernateItem.Commandhibernate_nHibernateItem.Label_Menu.Hibernate_nHibernateItem.Tip_Menu.HibernateTip_nHibernateItem.Iconnone_nRestartNUItem.Commandrestart_noupdate_nRestartNUItem.Label_Menu.Restart_nRestartNUItem.Tip_Menu.RestartTip_nRestartNUItem.I
mov word [ebp - 0x2e8], ax
call fcn.100684c0
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x47
mov ecx, str.MenuItems2
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov cx, word [0x10159320]
mov edi, dword [sym.imp.KERNEL32.dll_GetVersion]
test cx, cx
jne 0x10098917
call edi
mov ecx, eax
movzx eax, al
shr ecx, 8
movzx ecx, cl
shl ax, 8
or cx, ax
mov word [0x10159320], cx
mov eax, 0x603
cmp cx, ax
jae 0x1009893c
mov ebx, str.Item1.Commanduser_files_nItem1.SettingsNOEXPAND_nItem2.Commandlib_documents_nItem2.SettingsNOEXPAND_nItem3.Commandlib_pictures_nItem3.SettingsNOEXPAND_nItem4.Commandlib_music_nItem4.SettingsNOEXPAND_nItem5.Commandlib_videos_nItem5.SettingsITEM_DISABLED_nItem6.Commandlib_tv_nItem6.SettingsITEM_DISABLED_nItem7.Commanddownloads_nItem7.SettingsITEM_DISABLED_nItem8.Commandhomegroup_nItem8.SettingsITEM_DISABLED_nItem9.Commandseparator_nItem10.Commandgames_nItem10.SettingsTRACK_RECENTNOEXPANDITEM_DISABLED_nItem11.Commandfavorites_nItem11.SettingsITEM_DISABLED_nItem12.Commandrecent_documents_nItem13.Commandcomputer_nItem13.SettingsNOEXPAND_nItem14.Commandnetwork_nItem14.SettingsITEM_DISABLED_nItem15.Commandnetwork_connections_nItem15.SettingsITEM_DISABLED_nItem16.Commandseparator_nItem17.Commandcontrol_panel_nItem17.SettingsTRACK_RECENT_nItem18.Commandpc_settings_nItem18.SettingsTRACK_RECENT_nItem19.Commandadmin_nItem19.SettingsTRACK_RECENTITEM_DISABLED_nItem20.Commanddevices_nItem20.SettingsNOEXPAND_nItem21.Commanddefaults_nItem22.Commandhelp_nItem23.Commandrun_nItem24.Commandapps_nItem24.SettingsITEM_DISABLED_nItem25.Commandwindows_security_n
mov dword [ebp - 0x2f8], str.Item10.SettingsTRACK_RECENTNOEXPANDITEM_DISABLED_n
mov dword [ebp - 0x2ec], str.Item10.SettingsTRACK_RECENTNOEXPAND_______________n
jmp 0x10098955
mov ebx, str.Item1.Commanduser_files_nItem1.SettingsNOEXPAND_nItem2.Commanduser_documents_nItem2.SettingsNOEXPAND_nItem3.Commanduser_pictures_nItem3.SettingsNOEXPAND_nItem4.Commanduser_music_nItem4.SettingsNOEXPAND_nItem5.Commanduser_videos_nItem5.SettingsITEM_DISABLED_nItem6.Commanddownloads_nItem6.SettingsITEM_DISABLED_nItem7.Commandhomegroup_nItem7.SettingsITEM_DISABLED_nItem8.Commandseparator_nItem9.Commandgames_nItem9.SettingsTRACK_RECENTNOEXPANDITEM_DISABLED_nItem10.Commandfavorites_nItem10.SettingsITEM_DISABLED_nItem11.Commandrecent_documents_nItem12.Commandcomputer_nItem12.SettingsNOEXPAND_nItem13.Commandnetwork_nItem13.SettingsITEM_DISABLED_nItem14.Commandnetwork_connections_nItem14.SettingsITEM_DISABLED_nItem15.Commandseparator_nItem16.Commandpc_settings_nItem16.SettingsTRACK_RECENT_nItem17.Commandcontrol_panel_nItem17.SettingsTRACK_RECENT_nItem18.Commandadmin_nItem18.SettingsTRACK_RECENTITEM_DISABLED_nItem19.Commanddevices_nItem19.SettingsNOEXPAND_nItem20.Commanddefaults_nItem21.Commandhelp_nItem22.Commandrun_nItem23.Commandapps_nItem23.SettingsITEM_DISABLED_nItem24.Commandwindows_security_n
mov dword [ebp - 0x2f8], str.Item9.SettingsTRACK_RECENTNOEXPANDITEM_DISABLED_n
mov dword [ebp - 0x2ec], str.Item9.SettingsTRACK_RECENTNOEXPAND_______________n
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 4], 0x48
call fcn.100b0830
test al, al
jne 0x10098a76
lea eax, [ebp - 0x2f0]
push eax
push 0
push 0
push 0x10103c50
call dword [sym.imp.SHELL32.dll_SHGetKnownFolderIDList]
test eax, eax
js 0x10098a76
mov eax, dword [ebp - 0x2f0]
test eax, eax
je 0x10098a76
cmp word [eax], 0
je 0x10098a76
mov ecx, ebx
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100989b0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ecx + 1]
push eax
lea ecx, [ebp - 0x308]
call fcn.1009a890
mov byte [ebp - 4], 0x49
mov edx, dword [ebp - 0x304]
sub edx, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x308]
sar edx, 1
push ebx
call fcn.100a4780
mov edx, dword [ebp - 0x2ec]
add esp, 4
mov ecx, edx
lea ebx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10098a00
sub ecx, ebx
mov ebx, dword [ebp - 0x308]
sar ecx, 1
lea eax, [ecx + ecx]
push eax
push edx
push dword [ebp - 0x2f8]
push ebx
call fcn.100d62b4
add esp, 8
push eax
call fcn.100d7080
add esp, 0xc
lea ecx, [ebp - 0x2e8]
xor eax, eax
mov word [ebp - 0x2e8], ax
push ebx
call fcn.100684c0
push 0
lea edx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x4a
mov ecx, str.MenuItems7
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
lea ecx, [ebp - 0x308]
call fcn.10021d40
jmp 0x10098aad
xor eax, eax
lea ecx, [ebp - 0x2e8]
push ebx
mov word [ebp - 0x2e8], ax
call fcn.100684c0
push 0
lea edx, [ebp - 0x2e8]
mov byte [ebp - 4], 0x4b
mov ecx, str.MenuItems7
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x2e8]
push eax
call esi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2f0]
test eax, eax
je 0x10098ac5
push eax
call dword [sym.imp.SHELL32.dll_ILFree]
call fcn.10021830
mov cx, word [0x10159320]
test cx, cx
jne 0x10098af1
call edi
mov ecx, eax
movzx eax, al
shr ecx, 8
movzx ecx, cl
shl ax, 8
or cx, ax
mov word [0x10159320], cx
mov ebx, 0x602
cmp cx, bx
jae 0x10098b0a
call dword [sym.imp.UxTheme.dll_IsAppThemed]
test eax, eax
sete al
test al, al
jmp 0x10098b41
push 0
lea eax, [ebp - 0x324]
mov dword [ebp - 0x324], 0xc
push eax
push 0xc
xorps xmm0, xmm0
push 0x42
movq qword [ebp - 0x320], xmm0
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x10098bbf
test byte [ebp - 0x320], 1
je 0x10098bbf
push 0
lea eax, [ebp - 0x324]
mov dword [ebp - 0x324], 0xc
push eax
push 0xc
xorps xmm0, xmm0
mov edi, str.Classic_Skin
push 0x42
mov dword [ebp - 0x2f0], edi
movq qword [ebp - 0x320], xmm0
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
test eax, eax
je 0x10098ba1
test byte [ebp - 0x320], 1
je 0x10098ba1
mov ebx, str.CAPTION1_nUSER_IMAGE0_nUSER_NAME0_nCENTER_NAME0_nSMALL_ICONS0_nTHICK_BORDER0_nSOLID_SELECTION1_n
mov dword [ebp - 0x2fc], str.NO_ICONS1_nUSER_IMAGE1_nUSER_NAME0_nCENTER_NAME0_nSMALL_ICONS0_nTHICK_BORDER0_nSOLID_SELECTION1_n
mov dword [ebp - 0x2f4], str.USER_IMAGE1_nSMALL_ICONS0_nTHICK_BORDER0_nSOLID_SELECTION1_n
jmp 0x10098cb2
mov ebx, str.CAPTION1_nUSER_IMAGE0_nUSER_NAME0_nCENTER_NAME0_nSMALL_ICONS0_nTHICK_BORDER0_nSOLID_SELECTION0_n
mov dword [ebp - 0x2fc], str.NO_ICONS1_nUSER_IMAGE1_nUSER_NAME0_nCENTER_NAME0_nSMALL_ICONS0_nTHICK_BORDER0_nSOLID_SELECTION0_n
mov dword [ebp - 0x2f4], str.USER_IMAGE1_nSMALL_ICONS0_nTHICK_BORDER0_nSOLID_SELECTION0_n
jmp 0x10098cb2
mov cx, word [0x10159320]
test cx, cx
jne 0x10098be6
call edi
mov ecx, eax
movzx eax, al
shr ecx, 8
movzx ecx, cl
shl ax, 8
or cx, ax
mov word [0x10159320], cx
cmp cx, bx
jae 0x10098c3e
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x2ec], 0
push eax
call dword [sym.imp.dwmapi.dll_DwmIsCompositionEnabled]
test eax, eax
js 0x10098c14
cmp dword [ebp - 0x2ec], 0
mov edi, str.Windows_Aero
jne 0x10098c19
mov edi, str.Windows_Basic
mov dword [ebp - 0x2f0], str.Windows_Aero
mov ebx, str.CAPTION1_nUSER_IMAGE0_nUSER_NAME0_nCENTER_NAME0_nSMALL_ICONS0_nLARGE_FONT0_nDISABLE_MASK0_nWHITE_SUBMENUS1_n
mov dword [ebp - 0x2fc], str.NO_ICONS1_nUSER_IMAGE1_nUSER_NAME0_nCENTER_NAME0_nSMALL_ICONS0_nLARGE_FONT0_nDISABLE_MASK0_nWHITE_SUBMENUS1_n
mov dword [ebp - 0x2f4], str.USER_IMAGE1_nSMALL_ICONS0_nLARGE_FONT0_nDISABLE_MASK0_nWHITE_SUBMENUS1_n
jmp 0x10098cb2
test cx, cx
jne 0x10098c5e
call edi
mov ecx, eax
movzx eax, al
shr ecx, 8
movzx ecx, cl
shl ax, 8
or cx, ax
mov word [0x10159320], cx
mov eax, 0xa00
cmp cx, ax
jae 0x10098c8e
mov edi, str.Windows_8
mov dword [ebp - 0x2fc], str.NO_ICONS1_nUSER_IMAGE1_nUSER_NAME0_nCENTER_NAME0_nSMALL_ICONS0_nLARGE_FONT0_nDISABLE_MASK0_nOPAQUE0_nGLASS_SHADOW0_nBLACK_TEXT0_nBLACK_FRAMES0_nWHITE_SUBMENUS1_n
mov dword [ebp - 0x2f0], edi
mov ebx, str.CAPTION1_nUSER_IMAGE0_nUSER_NAME0_nCENTER_NAME0_nSMALL_ICONS0_nLARGE_FONT0_nDISABLE_MASK0_nOPAQUE0_nWHITE_SUBMENUS1_n
mov dword [ebp - 0x2f4], str.USER_IMAGE1_nSMALL_ICONS0_nLARGE_FONT0_nDISABLE_MASK0_nOPAQUE0_nGLASS_SHADOW0_nBLACK_TEXT0_nBLACK_FRAMES0_nWHITE_SUBMENUS1_n
jmp 0x10098cb2
mov edi, str.Immersive
mov dword [ebp - 0x2fc], str.NO_ICONS1_nUSER_IMAGE1_nCENTER_NAME0_nSMALL_ICONS0_nLARGE_FONT0_nICON_FRAMES1_nOPAQUE0_n
mov dword [ebp - 0x2f0], edi
mov ebx, str.CAPTION1_nUSER_IMAGE0_nUSER_NAME0_nCENTER_NAME0_nSMALL_ICONS0_nLARGE_FONT0_nICON_FRAMES1_nOPAQUE0_n
mov dword [ebp - 0x2f4], str.USER_IMAGE1_nSMALL_ICONS0_nLARGE_FONT0_nICON_FRAMES1_nOPAQUE0_n
xor eax, eax
lea ecx, [ebp - 0x2e8]
push edi
mov word [ebp - 0x2e8], ax
call fcn.100684c0
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x4c
mov ecx, str.SkinC1
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
xor eax, eax
lea ecx, [ebp - 0x2e8]
push ebx
mov word [ebp - 0x2e8], ax
call fcn.100684c0
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x4d
mov ecx, str.SkinOptionsC1
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
xor eax, eax
lea ecx, [ebp - 0x2e8]
push edi
mov word [ebp - 0x2e8], ax
call fcn.100684c0
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x4e
mov ecx, str.SkinC2
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
push dword [ebp - 0x2fc]
xor eax, eax
lea ecx, [ebp - 0x2e8]
mov word [ebp - 0x2e8], ax
call fcn.100684c0
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x4f
mov ecx, str.SkinOptionsC2
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
push dword [ebp - 0x2f0]
xor eax, eax
lea ecx, [ebp - 0x2e8]
mov word [ebp - 0x2e8], ax
call fcn.100684c0
push 0
lea edx, [ebp - 0x2e8]
mov dword [ebp - 4], 0x50
mov ecx, str.SkinW7
call fcn.100aaab0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2e8]
push eax
call esi
xor eax, eax
push dword [ebp - 0x2f4]
lea ecx, [ebp - 0x328]
mov word [ebp - 0x328], ax
call fcn.100684c0
push 0
lea edx, [ebp - 0x328]
mov dword [ebp - 4], 0x51
mov ecx, str.SkinOptionsW7
call fcn.100aaab0
add esp, 4
lea eax, [ebp - 0x328]
push eax
call esi
mov ecx, dword [ebp - 0x30c]
xor edx, edx
test ecx, ecx
mov eax, 0x200
cmovne eax, edx
cmp ecx, 1
jne 0x10098e5e
mov eax, 0x400
jmp 0x10098e69
cmp ecx, 2
mov edx, 0x800
cmove eax, edx
cmp dword [0x1014e91c], eax
jne 0x10098e7d
cmp dword [0x1014e920], 0xe00
je 0x10098ea5
mov dword [0x1014e91c], eax
mov eax, dword [0x10148a7c]
mov dword [0x1014e920], 0xe00
test eax, eax
je 0x10098ea5
push 0
push 0
push 0x303
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100d4906
mov esp, ebp
pop ebp
ret
mov ecx, 0xa
mov dword [ebx + 8], eax
push eax
mov word [ebx], cx
call fcn.10013970
int3