Function at 0x10008587
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2324
call fcn.1000fbf0
mov dword [ebp - 0x231c], ecx
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x2b8], 0x10017270
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x2bc], str.Forth
mov dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x231c]
mov ecx, dword [eax + 0x124]
push ecx
push 0x1001a340
mov ecx, dword [ebp - 0x231c]
add ecx, 0x128
call fcn.10001980
push eax
mov ecx, dword [ebp - 0x231c]
add ecx, 0x20
call fcn.1000edb0
mov dword [ebp - 0x2c8], eax
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0x2b4], eax
mov edx, dword [ebp - 0x2b4]
add edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2b4], edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.10001e00
add esp, 8
mov dword [ebp - 0x21c], eax
mov edx, dword [ebp - 0x231c]
mov eax, dword [edx + 4]
cmp eax, dword [ebp - 0x21c]
jne 0x10008445
push 0
call dword [sym.imp.KERNEL32.dll_FindAtomA]
movzx ecx, ax
mov dword [ebp - 0x2b4], ecx
mov edx, 0x3d
sub edx, dword [ebp - 0x210]
imul edx, dword [ebp - 0x2b4]
mov dword [ebp - 0x2b4], edx
mov al, 1
jmp 0x1000905a
mov eax, dword [ebp - 0x231c]
mov ecx, dword [ebp - 0x21c]
mov dword [eax + 4], ecx
mov byte [ebp - 0x212], 0
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x118]
call fcn.10006690
mov eax, dword [ebp - 0x2b8]
push eax
lea ecx, [ebp - 0x208]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x108], 1
mov byte [ebp - 0x11d], 0
lea edx, [ebp - 0x210]
push edx
push 0
call dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x2b4], eax
mov byte [ebp - 0x211], 0
lea ecx, [ebp - 0x211]
push ecx
lea edx, [ebp - 0x108]
push edx
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 4]
push ecx
lea edx, [ebp - 0x2c4]
push edx
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x118]
call fcn.100066d0
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x10009036
mov ecx, dword [ebp - 0x2c4]
cmp ecx, dword [ebp - 0x2c8]
je 0x1000853c
cmp dword [ebp - 0x2c4], 0xffffffff
jne 0x10009001
lea edx, [ebp - 0x100]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
sub eax, 2
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x2320], eax
mov ecx, dword [ebp - 0x2320]
sub ecx, 1
mov dword [ebp - 0x2320], ecx
cmp dword [ebp - 0x2320], 9
ja case.default.0x10008580
mov edx, dword [ebp - 0x2320]
jmp dword [edx*4 + 0x10009060]
cmp dword [ebp - 4], 0x16
jbe 0x100085a6
mov eax, dword [ebp - 0x108]
push eax
mov ecx, dword [ebp - 0x2c0]
push ecx
mov ecx, dword [ebp - 0x231c]
call fcn.10009c60
mov byte [ebp - 0x212], 1
jmp case.default.0x10008580
mov dword [ebp - 0x2dc], 0
push 0x1001a2d4
lea ecx, [ebp - 0x5e0]
call fcn.10001980
mov dword [ebp - 0x970], eax
mov edx, dword [ebp - 0x231c]
add edx, 0x20
mov dword [ebp - 0x96c], edx
mov dword [ebp - 0x964], 4
mov dword [ebp - 0x960], 0
mov dword [ebp - 0x968], 4
lea eax, [ebp - 0x968]
push eax
lea ecx, [ebp - 0x2dc]
push ecx
lea edx, [ebp - 0x964]
push edx
mov eax, dword [ebp - 0x970]
push eax
mov ecx, dword [ebp - 0x96c]
push ecx
mov edx, dword [ebp - 0x96c]
mov eax, dword [edx + 0x100]
push eax
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
mov dword [ebp - 0x960], eax
mov ecx, dword [ebp - 4]
cmp ecx, dword [ebp - 0x2dc]
jbe 0x1000881b
mov edx, dword [ebp - 0x231c]
mov eax, dword [ebp - 4]
mov dword [edx + 0x434], eax
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x9a4], ecx
push 0x1001a2d4
lea ecx, [ebp - 0x5e0]
call fcn.10001980
mov dword [ebp - 0x9a0], eax
mov edx, dword [ebp - 0x231c]
add edx, 0x20
mov dword [ebp - 0x99c], edx
mov dword [ebp - 0x994], 0
mov dword [ebp - 0x998], 4
mov eax, dword [ebp - 0x998]
push eax
lea ecx, [ebp - 0x9a4]
push ecx
push 4
mov edx, dword [ebp - 0x9a0]
push edx
mov eax, dword [ebp - 0x99c]
push eax
mov ecx, dword [ebp - 0x99c]
mov edx, dword [ecx + 0x100]
push edx
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov dword [ebp - 0x994], eax
lea eax, [ebp - 0x6e8]
push eax
mov ecx, dword [ebp - 0x2c0]
push ecx
mov ecx, dword [ebp - 0x231c]
call fcn.1000d670
mov dword [ebp - 0x6ec], 0
lea edx, [ebp - 0x210]
push edx
push 0
call dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x2b4], eax
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x2324], ecx
cmp dword [ebp - 0x2324], 8
je 0x10008770
cmp dword [ebp - 0x2324], 9
je 0x1000877c
cmp dword [ebp - 0x2324], 0xa
je 0x100087a9
jmp 0x100087c9
mov dword [ebp - 0x6ec], 1
jmp 0x100087c9
mov dword [ebp - 0x6ec], 2
lea ecx, [ebp - 0x210]
push ecx
push 0
call dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [ebp - 0x20c], eax
mov edx, dword [ebp - 0x210]
mov dword [ebp - 0x2b4], edx
jmp 0x100087c9
mov dword [ebp - 0x6ec], 3
jmp 0x100087c9
mov edx, dword [ebp - 0x6ec]
push edx
movzx eax, byte [ebp - 0x211]
push eax
push 0
mov ecx, dword [ebp - 0x108]
push ecx
lea edx, [ebp - 0x6e8]
push edx
mov ecx, dword [ebp - 0x231c]
call fcn.1000a510
mov eax, dword [ebp - 0x2bc]
push eax
lea ecx, [ebp - 0x100]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x2bc]
push edx
lea eax, [ebp - 0x100]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatA]
mov byte [ebp - 0x212], 1
jmp case.default.0x10008580
mov ecx, dword [ebp - 0x124]
push ecx
push 0x1001a37c
mov ecx, dword [ebp - 0x231c]
add ecx, 0x128
call fcn.10001980
push eax
mov edx, dword [ebp - 0x231c]
add edx, 0x20
push edx
mov ecx, dword [ebp - 0x231c]
call fcn.1000d420
movzx eax, al
test eax, eax
je 0x10008a1d
mov dword [ebp - 0x6f0], 0
push 0x1001a384
mov ecx, dword [ebp - 0x231c]
add ecx, 0x128
call fcn.10001980
mov dword [ebp - 0x9f8], eax
mov ecx, dword [ebp - 0x231c]
add ecx, 0x20
mov dword [ebp - 0x9f4], ecx
mov dword [ebp - 0x9ec], 4
mov dword [ebp - 0x9e8], 0
mov dword [ebp - 0x9f0], 4
lea edx, [ebp - 0x9f0]
push edx
lea eax, [ebp - 0x6f0]
push eax
lea ecx, [ebp - 0x9ec]
push ecx
mov edx, dword [ebp - 0x9f8]
push edx
mov eax, dword [ebp - 0x9f4]
push eax
mov ecx, dword [ebp - 0x9f4]
mov edx, dword [ecx + 0x100]
push edx
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x210], eax
lea ecx, [ebp - 0x210]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov byte [ebp - 0x208], al
cmp dword [ebp - 0x6f0], 0
jne 0x10008a1d
mov edx, dword [ebp - 0x218]
push edx
call dword [sym.imp.GDI32.dll_GetBkMode]
mov eax, dword [ebp - 0x231c]
mov dword [eax + 0x434], 0
mov dword [ebp - 0xa2c], 1
push 0x1001a384
mov ecx, dword [ebp - 0x231c]
add ecx, 0x128
call fcn.10001980
mov dword [ebp - 0xa28], eax
mov ecx, dword [ebp - 0x231c]
add ecx, 0x20
mov dword [ebp - 0xa24], ecx
mov dword [ebp - 0xa1c], 0
mov dword [ebp - 0xa20], 4
mov edx, dword [ebp - 0xa20]
push edx
lea eax, [ebp - 0xa2c]
push eax
push 4
mov ecx, dword [ebp - 0xa28]
push ecx
mov edx, dword [ebp - 0xa24]
push edx
mov eax, dword [ebp - 0xa24]
mov ecx, dword [eax + 0x100]
push ecx
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov dword [ebp - 0xa1c], eax
mov edx, dword [ebp - 0x218]
push edx
call dword [sym.imp.GDI32.dll_GetBkColor]
lea eax, [ebp - 0x7f8]
push eax
mov ecx, dword [ebp - 0x2c0]
push ecx
mov ecx, dword [ebp - 0x231c]
call fcn.1000d670
lea edx, [ebp - 0x2d8]
push edx
push 0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x210], eax
push 0
push 0
push 0
mov ecx, dword [ebp - 0x108]
push ecx
lea edx, [ebp - 0x7f8]
push edx
mov ecx, dword [ebp - 0x231c]
call fcn.1000a510
jmp case.default.0x10008580
mov dword [ebp - 0x7fc], 0
mov ecx, dword [ebp - 0x231c]
add ecx, 0x20
mov dword [ebp - 0xa3c], ecx
mov dword [ebp - 0xa34], 4
mov dword [ebp - 0xa30], 0
mov dword [ebp - 0xa38], 4
lea edx, [ebp - 0xa38]
push edx
lea eax, [ebp - 0x7fc]
push eax
lea ecx, [ebp - 0xa34]
push ecx
push 0x10017440
mov edx, dword [ebp - 0xa3c]
push edx
mov eax, dword [ebp - 0xa3c]
mov ecx, dword [eax + 0x100]
push ecx
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
mov dword [ebp - 0xa30], eax
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0x2b4], eax
mov edx, dword [ebp - 0x2b4]
add edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2b4], edx
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x7fc]
jbe 0x10008beb
mov ecx, dword [ebp - 0x2bc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edx, dword [ebp - 0x104]
lea eax, [edx + eax + 1]
mov dword [ebp - 0x104], eax
mov ecx, dword [ebp - 0x2c0]
mov dword [ebp - 0xa44], ecx
mov edx, dword [ebp - 0x231c]
add edx, 0x438
mov dword [ebp - 0xa40], edx
push 0
push 0
push 0
mov eax, dword [ebp - 0xa44]
push eax
mov ecx, dword [ebp - 0xa40]
mov edx, dword [ecx]
shl edx, 4
mov eax, dword [ebp - 0xa40]
lea ecx, [eax + edx + 4]
call fcn.1000eca0
mov ecx, dword [ebp - 0xa40]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0xa40]
mov dword [eax], edx
push 0x1001a328
mov ecx, dword [ebp - 0x231c]
add ecx, 0x128
call fcn.10001980
push eax
mov ecx, dword [ebp - 0x231c]
add ecx, 0x20
push ecx
mov ecx, dword [ebp - 0x231c]
add ecx, 0x438
call fcn.1000efe0
mov edx, dword [ebp - 4]
mov dword [ebp - 0x1284], edx
mov eax, dword [ebp - 0x231c]
add eax, 0x20
mov dword [ebp - 0x1280], eax
mov dword [ebp - 0x1278], 0
mov dword [ebp - 0x127c], 4
mov ecx, dword [ebp - 0x127c]
push ecx
lea edx, [ebp - 0x1284]
push edx
push 4
push 0x10017440
mov eax, dword [ebp - 0x1280]
push eax
mov ecx, dword [ebp - 0x1280]
mov edx, dword [ecx + 0x100]
push edx
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov dword [ebp - 0x1278], eax
lea eax, [ebp - 0x100]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
sub eax, 2
mov dword [ebp - 0x104], eax
mov byte [ebp - 0x212], 1
jmp case.default.0x10008580
cmp dword [ebp - 4], 0x16
jbe 0x10008c71
mov ecx, dword [ebp - 0x2c0]
push ecx
mov ecx, dword [ebp - 0x231c]
add ecx, 0x438
call fcn.1000eee0
push 0x1001a328
mov ecx, dword [ebp - 0x231c]
add ecx, 0x128
call fcn.10001980
push eax
mov edx, dword [ebp - 0x231c]
add edx, 0x20
push edx
mov ecx, dword [ebp - 0x231c]
add ecx, 0x438
call fcn.1000efe0
mov eax, dword [ebp - 0x218]
push eax
call dword [sym.imp.GDI32.dll_GetBkMode]
mov byte [ebp - 0x212], 1
jmp case.default.0x10008580
mov dword [ebp - 0x800], 0
mov ecx, dword [ebp - 0x231c]
add ecx, 0x20
mov dword [ebp - 0x1acc], ecx
mov dword [ebp - 0x1ac4], 4
mov dword [ebp - 0x1ac0], 0
mov dword [ebp - 0x1ac8], 4
lea edx, [ebp - 0x1ac8]
push edx
lea eax, [ebp - 0x800]
push eax
lea ecx, [ebp - 0x1ac4]
push ecx
push 0x1001743c
mov edx, dword [ebp - 0x1acc]
push edx
mov eax, dword [ebp - 0x1acc]
mov ecx, dword [eax + 0x100]
push ecx
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
mov dword [ebp - 0x1ac0], eax
mov edx, dword [ebp - 0x2bc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [ebp - 0x104]
lea edx, [ecx + eax + 1]
mov dword [ebp - 0x104], edx
mov eax, dword [ebp - 0x800]
cmp eax, dword [ebp - 4]
jae 0x10008efd
lea ecx, [ebp - 0x2d8]
push ecx
push 0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x210], edx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1adc], eax
mov ecx, dword [ebp - 0x231c]
add ecx, 0x20
mov dword [ebp - 0x1ad8], ecx
mov dword [ebp - 0x1ad0], 0
mov dword [ebp - 0x1ad4], 4
mov edx, dword [ebp - 0x1ad4]
push edx
lea eax, [ebp - 0x1adc]
push eax
push 4
push 0x1001743c
mov ecx, dword [ebp - 0x1ad8]
push ecx
mov edx, dword [ebp - 0x1ad8]
mov eax, dword [edx + 0x100]
push eax
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov dword [ebp - 0x1ad0], eax
mov ecx, dword [ebp - 0x231c]
add ecx, 0xb1c
mov dword [ebp - 0x1ae4], ecx
mov dword [ebp - 0x1ae0], 0
jmp 0x10008dc9
mov edx, dword [ebp - 0x1ae0]
add edx, 1
mov dword [ebp - 0x1ae0], edx
mov eax, dword [ebp - 0x1ae4]
mov ecx, dword [ebp - 0x1ae0]
cmp ecx, dword [eax]
jae 0x10008df3
mov edx, dword [ebp - 0x1ae0]
shl edx, 4
mov eax, dword [ebp - 0x1ae4]
lea ecx, [eax + edx + 4]
call fcn.1000ee50
jmp 0x10008dba
mov ecx, dword [ebp - 0x1ae4]
mov dword [ecx], 0
mov edx, dword [ebp - 0x231c]
add edx, 0x1200
mov dword [ebp - 0x1aec], edx
mov dword [ebp - 0x1ae8], 0
jmp 0x10008e2c
mov eax, dword [ebp - 0x1ae8]
add eax, 1
mov dword [ebp - 0x1ae8], eax
mov ecx, dword [ebp - 0x1aec]
mov edx, dword [ebp - 0x1ae8]
cmp edx, dword [ecx]
jae 0x10008e56
mov eax, dword [ebp - 0x1ae8]
shl eax, 4
mov ecx, dword [ebp - 0x1aec]
lea ecx, [ecx + eax + 4]
call fcn.1000ee50
jmp 0x10008e1d
mov edx, dword [ebp - 0x1aec]
mov dword [edx], 0
push 0x1001a330
mov ecx, dword [ebp - 0x231c]
add ecx, 0x128
call fcn.10001980
push eax
mov eax, dword [ebp - 0x231c]
add eax, 0x20
push eax
mov ecx, dword [ebp - 0x231c]
add ecx, 0xb1c
call fcn.1000efe0
push 0x1001a338
mov ecx, dword [ebp - 0x231c]
add ecx, 0x128
call fcn.10001980
push eax
mov ecx, dword [ebp - 0x231c]
add ecx, 0x20
push ecx
mov ecx, dword [ebp - 0x231c]
add ecx, 0x1200
call fcn.1000efe0
lea edx, [ebp - 0x208]
push edx
lea eax, [ebp - 0x2b0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp - 0x104]
push ecx
push 0x100172a0
lea edx, [ebp - 0x208]
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov byte [ebp - 0x11d], 1
jmp case.default.0x10008580
movzx eax, byte [ebp - 0x11d]
test eax, eax
je case.default.0x10008580
lea ecx, [ebp - 0x908]
push ecx
mov edx, dword [ebp - 0x2c0]
push edx
mov ecx, dword [ebp - 0x231c]
call fcn.1000d670
mov eax, dword [ebp - 0x2bc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov ecx, dword [ebp - 0x104]
lea edx, [ecx + eax + 1]
mov dword [ebp - 0x104], edx
push 0
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0x124]
push ecx
lea edx, [ebp - 0x908]
push edx
mov ecx, dword [ebp - 0x231c]
add ecx, 0xb1c
call fcn.1000eea0
push 0
mov eax, dword [ebp - 0x108]
push eax
push 0
push str.empty
mov ecx, dword [ebp - 0x231c]
add ecx, 0x1200
call fcn.1000eea0
push 0x1001a330
mov ecx, dword [ebp - 0x231c]
add ecx, 0x128
call fcn.10001980
push eax
mov ecx, dword [ebp - 0x231c]
add ecx, 0x20
push ecx
mov ecx, dword [ebp - 0x231c]
add ecx, 0xb1c
call fcn.1000efe0
push 0
call dword [sym.imp.USER32.dll_IsWindowVisible]
mov dword [ebp - 0x2b4], eax
push 0x1001a338
mov ecx, dword [ebp - 0x231c]
add ecx, 0x128
call fcn.10001980
push eax
mov edx, dword [ebp - 0x231c]
add edx, 0x20
push edx
mov ecx, dword [ebp - 0x231c]
add ecx, 0x1200
call fcn.1000efe0
jmp 0x10009031
lea eax, [ebp - 0x208]
push eax
lea ecx, [ebp - 0x2b0]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp - 0x104]
push edx
push 0x100172a0
lea eax, [ebp - 0x208]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
jmp 0x100084dc
mov byte [ebp - 0x212], 1
mov cl, byte [ebp - 0x212]
mov byte [ebp - 0x909], cl
lea ecx, [ebp - 0x118]
call fcn.100066c0
mov al, byte [ebp - 0x909]
mov esp, ebp
pop ebp
ret 4