Function at 0x10006c7e
Capabilities:
Query or enumerate registry value
Read .ini file
Set registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x94
mov eax, dword [0x10098dd4]
mov ecx, dword [0x10098dd8]
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete byte [ebp - 0x31]
cmp ecx, 0xa
setl byte [ebp - 0x32]
xor esi, esi
mov ecx, 0xf5ea8b3e
cmp ecx, 0xfeb56398
jle 0x10006d94
cmp ecx, 0x47342d71
jg 0x10006dfe
cmp ecx, 0x229f610e
jg 0x10006f2d
cmp ecx, 0xcc19fb5
jg 0x10007142
cmp ecx, 0x127e184
jle 0x1000754c
cmp ecx, 0x4eaeb45
jle 0x10007b47
cmp ecx, 0x4eaeb46
je 0x100084c5
cmp ecx, 0x6f3245a
je 0x100084d8
cmp ecx, 0xadd950d
jne 0x10006cb5
mov ecx, dword [ebp - 0x1c]
mov eax, dword [0x10098dd4]
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
not eax
and edx, 0xa1ee61ac
mov ebx, eax
and ebx, 0x5e119e53
or ebx, edx
mov ecx, dword [ecx]
xor ebx, 0x5e119e52
and eax, 0xfffffffe
or eax, ebx
xor eax, 0x9af55563
xor eax, 0x650aaa9c
setne dl
sete ah
cmp dword [0x10098dd8], 0xa
mov dword [ebp - 0x9c], ecx
setl al
setge cl
and ah, cl
and al, dl
or al, ah
or cl, dl
mov edx, ecx
xor dl, al
mov edx, 0x564e4d13
mov edi, 0xdce41000
cmovne edx, edi
test cl, cl
mov ecx, 0x564e4d13
jmp 0x10008f8e
cmp ecx, 0xbbec0e9e
jle 0x10006e73
cmp ecx, 0xe0aec8b3
jg 0x10006fdb
cmp ecx, 0xd1d3f5af
jg 0x100071e3
cmp ecx, 0xc65f7b9b
jle 0x1000759f
cmp ecx, 0xc9ac54eb
jle 0x10007b71
cmp ecx, 0xc9ac54ec
je 0x10008542
cmp ecx, 0xce8cafdb
je 0x1000854c
cmp ecx, 0xcead9fa9
jne 0x10006cb5
mov ecx, 0x98f945b7
jmp 0x10006cb5
cmp ecx, 0x686ab807
jle 0x10007037
cmp ecx, 0x728a15ea
jg 0x10007235
cmp ecx, 0x6a8fbeb0
jle 0x100075d9
cmp ecx, 0x6dbf56f0
jle 0x10007c64
cmp ecx, 0x6dbf56f1
je 0x100085b5
cmp ecx, 0x6de87391
je 0x100085bf
cmp ecx, 0x710bc250
jne 0x10006cb5
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x18]
cmp dword [eax], 1
mov ecx, 0xdda8385c
mov eax, 0xff5ba540
cmove ecx, eax
jmp 0x10006cb5
cmp ecx, 0x9d358797
jle 0x100070cd
cmp ecx, 0xaa6ffbc3
jg 0x10007286
cmp ecx, 0xa03a53ed
jle 0x1000762c
cmp ecx, 0xa0c7fef9
jle 0x10007c8f
cmp ecx, 0xa0c7fefa
je 0x10008629
cmp ecx, 0xa571ae5d
je 0x10008633
cmp ecx, 0xaa4a818b
jne 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x76ec6d07
and eax, 0x891392f8
or eax, edx
xor eax, 0x891392f9
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10098dd8], 0xa
setge dl
setl ah
mov dh, ah
xor dh, cl
and dh, ah
and dl, al
and ah, cl
or ah, dl
mov al, dh
xor al, ah
test ah, ah
mov ecx, 0x5f08ff12
mov edi, 0xb06fb137
cmovne ecx, edi
test dh, dh
mov edx, 0x5f08ff12
jmp 0x10008941
cmp ecx, 0x366a5ecc
jg 0x100072e2
cmp ecx, 0x2983c57a
jle 0x1000765a
cmp ecx, 0x2b823768
jle 0x10007cbc
cmp ecx, 0x2b823769
je 0x100086a7
cmp ecx, 0x2e4d0d8a
je 0x100086c7
cmp ecx, 0x35298740
jne 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
setne al
sete cl
cmp dword [0x10098dd8], 0xa
setl dl
setge ah
and cl, ah
and dl, al
or dl, cl
or ah, al
mov al, ah
xor al, dl
test ah, ah
mov ecx, 0xe4376f50
mov edi, 0x7b85bede
cmovne ecx, edi
test dl, dl
cmove ecx, edi
test al, al
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x5c], eax
mov eax, 0xe4376f50
cmove ecx, eax
jmp 0x10006cb5
cmp ecx, 0xf2d055de
jg 0x1000737a
cmp ecx, 0xe4376f4f
jle 0x100076c5
cmp ecx, 0xe6c0b252
jle 0x10007cfe
cmp ecx, 0xe6c0b253
je 0x100086d4
cmp ecx, 0xe9fae8da
je 0x100086de
cmp ecx, 0xee74dbb7
jne 0x10006cb5
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov ecx, 0xf622e672
jmp 0x10006cb5
cmp ecx, 0x5e7d2981
jle 0x10007427
cmp ecx, 0x62db235d
jle 0x1000774c
cmp ecx, 0x65cfa418
jle 0x10007d7b
cmp ecx, 0x65cfa419
je 0x100086e8
cmp ecx, 0x671ce0db
je 0x10008719
cmp ecx, 0x6769419e
jne 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098dd8], 0xa
setl dl
setge ch
and cl, ch
and dl, al
or dl, cl
or ch, al
mov al, ch
xor al, dl
test ch, 1
mov ecx, 0x369edb00
mov edi, 0x375af650
cmovne ecx, edi
test dl, dl
cmove ecx, edi
test al, 1
mov eax, 0x369edb00
cmove ecx, eax
jmp 0x10006cb5
cmp ecx, 0x89ab08dc
jle 0x100074af
cmp ecx, 0x918183d9
jle 0x1000777a
cmp ecx, 0x98f945b6
jle 0x10007d9d
cmp ecx, 0x98f945b7
je 0x10008735
cmp ecx, 0x9ac8915c
je 0x10008785
cmp ecx, 0x9c7d3cea
jne 0x10006cb5
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
push 0x3d
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_StrChrW]
mov ecx, dword [ebp - 0x10]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
cmp dword [eax], 0
mov ecx, 0x23182367
mov eax, 0x229f610f
cmove ecx, eax
jmp 0x10006cb5
cmp ecx, 0x13456239
jle 0x100077b6
cmp ecx, 0x160cb83a
jle 0x10007dbf
cmp ecx, 0x160cb83b
je 0x10008797
cmp ecx, 0x1992558b
je 0x100087a1
cmp ecx, 0x2075a057
jne 0x10006cb5
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xf084577f
mov edx, eax
and edx, 0xf7ba880
or edx, ecx
xor edx, 0xf7ba881
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
setne cl
sete dl
cmp dword [0x10098dd8], 0xa
setl al
setge ah
and dl, ah
and al, cl
or al, dl
or ah, cl
mov cl, ah
xor cl, al
mov ecx, 0xa03a53ee
mov edx, 0x5e7d2982
cmovne ecx, edx
test ah, ah
mov edx, 0xa03a53ee
jmp 0x1000899a
cmp ecx, 0xdb9169b2
jle 0x100077e7
cmp ecx, 0xdd637897
jle 0x10007de1
cmp ecx, 0xdd637898
je 0x100087ab
cmp ecx, 0xdda8385c
je 0x100087ca
cmp ecx, 0xe0129cc6
jne 0x10006cb5
cmp byte [ebp - 0x34], 0
mov ecx, 0x86050855
mov eax, 0xfc79b55d
cmovne ecx, eax
jmp 0x10006cb5
cmp ecx, 0x7bf1b7a1
jle 0x10007815
cmp ecx, 0x7d9194ae
jle 0x10007e06
cmp ecx, 0x7d9194af
je 0x100087da
cmp ecx, 0x7f98fbe4
je 0x100087e4
cmp ecx, 0x7feb1fc8
jne 0x10006cb5
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x98], eax
mov ecx, 0xd9ae4e0c
jmp 0x10006cb5
cmp ecx, 0xb0b1b71d
jle 0x100078aa
cmp ecx, 0xb75a0530
jle 0x10007e8b
cmp ecx, 0xb75a0531
je 0x10008850
cmp ecx, 0xb8c277b3
je 0x10008868
cmp ecx, 0xb8e03136
jne 0x10006cb5
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x7c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
movzx eax, word [eax]
mov dword [ebp - 0x58], eax
mov ecx, 0x7bf1b7a2
jmp 0x10006cb5
cmp ecx, 0x3a9e5020
jle 0x10007922
cmp ecx, 0x3ef2c8fc
jle 0x10007f09
cmp ecx, 0x3ef2c8fd
je 0x100088c1
cmp ecx, 0x405c7cc3
je 0x100088d7
cmp ecx, 0x43180d5c
jne 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
setne al
cmp dword [0x10098dd8], 0xa
setge cl
setl dl
xor dl, al
mov ah, dl
xor ah, 1
and cl, al
or cl, ah
xor ah, cl
mov eax, 0x4a29d14e
mov edi, 0x4e534138
cmovne eax, edi
test cl, cl
mov ecx, 0x4a29d14e
cmovne ecx, eax
test dl, dl
cmovne ecx, eax
jmp 0x10006cb5
cmp ecx, 0xf622e671
jle 0x100079b2
cmp ecx, 0xf8d85a21
jle 0x10007f82
cmp ecx, 0xf8d85a22
je 0x100088ea
cmp ecx, 0xfbf641ed
je 0x10008949
cmp ecx, 0xfc79b55d
jne 0x10006cb5
mov eax, dword [ebp - 0x30]
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x6a551a31
mov edx, eax
and edx, 0x95aae5ce
or edx, ecx
xor edx, 0x95aae5cf
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete dl
setne ah
cmp dword [0x10098dd8], 0xa
setge al
setl cl
and ah, cl
and al, dl
or al, ah
mov ah, cl
xor ah, dl
or cl, dl
xor cl, 1
or cl, ah
mov edx, ecx
xor dl, al
mov edx, 0xab917d02
mov edi, 0x69f7ba07
cmovne edx, edi
test cl, cl
mov ecx, 0xab917d02
jmp 0x10008f8e
cmp ecx, 0x503bd35d
jle 0x10007a4a
cmp ecx, 0x5349100f
jle 0x10008006
cmp ecx, 0x53491010
je 0x100089a9
cmp ecx, 0x564e4d13
jne 0x10009345
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfded62a3
and eax, 0x2129d5c
or eax, edx
xor eax, 0x2129d5d
xor ecx, eax
test ecx, eax
setne al
cmp dword [0x10098dd8], 0xa
setge cl
mov edx, ecx
xor dl, al
or cl, al
mov eax, ecx
xor al, dl
mov eax, 0xfbf641ed
mov edi, 0xe9fae8da
cmovne eax, edi
test cl, cl
mov ecx, 0xfbf641ed
jmp 0x10008ada
cmp ecx, 0x852da627
jg 0x10007ad0
cmp ecx, 0x84720da5
jg 0x10008067
cmp ecx, 0x824eb979
je 0x100089c5
cmp ecx, 0x825aa4fd
jne 0x10006cb5
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x61c6cce0
mov edx, eax
and edx, 0x9e39331f
or edx, ecx
xor edx, 0x9e39331e
and eax, 0xfffffffe
or eax, edx
xor eax, 0x2a90c402
cmp eax, 0xd56f3bfd
sete al
cmp dword [0x10098dd8], 0xa
setl cl
xor al, cl
mov edx, eax
not dl
mov ebx, 0xe0aec8b4
mov edi, 0x7c3a16cd
cmovne ebx, edi
test dl, cl
mov ecx, 0xe0aec8b4
cmove ebx, ecx
cmovne ebx, edi
test al, al
cmovne ebx, edi
mov ecx, ebx
jmp 0x10006cb5
cmp ecx, 0xff5ba53f
jg 0x10008089
cmp ecx, 0xfeb56399
je 0x100089cf
cmp ecx, 0xff2f186e
jne 0x10006cb5
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x14]
sub ecx, dword [edx]
sar ecx, 1
sub eax, ecx
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov word [eax], 0
mov eax, dword [ebp - 0x10]
mov ecx, 0xd7e22205
jmp 0x10006cb5
cmp ecx, 0xc02ef637
jg 0x10008100
cmp ecx, 0xbbec0e9f
je 0x10008a3d
cmp ecx, 0xbd6f99f5
jne 0x10006cb5
cmp byte [ebp - 0x33], 0
mov ecx, 0xa571ae5d
mov eax, 0xb8c277b3
cmovne ecx, eax
jmp 0x10006cb5
cmp ecx, 0x69216de0
jg 0x1000812b
cmp ecx, 0x686ab808
je 0x10008a87
cmp ecx, 0x68e45623
jne 0x10006cb5
push esi
push dword [ebp - 0x1c]
push esi
push 0xf023f
push esi
push esi
push esi
push dword [ebp - 0x20]
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
mov ecx, 0xb0b1b71e
mov eax, 0xe2b5dbee
cmove ecx, eax
jmp 0x10006cb5
cmp ecx, 0x9eaceb00
jg 0x1000814d
cmp ecx, 0x9d358798
je 0x10008ae7
cmp ecx, 0x9e181102
jne 0x10006cb5
mov ecx, 0x60b0574e
jmp 0x10006cb5
cmp ecx, 0x25ac5f30
jg 0x1000816f
cmp ecx, 0x229f610f
je 0x10008af1
cmp ecx, 0x23182367
jne 0x10006cb5
mov eax, dword [ebp - 0x40]
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
not al
or al, 0xfe
cmp al, 0xff
setne al
cmp dword [0x10098dd8], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, ecx
xor al, dl
test cl, cl
mov ecx, 0xff2f186e
mov edi, 0xd7e22205
cmovne ecx, edi
test dl, dl
mov edx, 0xff2f186e
jmp 0x10008e3e
cmp ecx, 0xe19036e1
jg 0x10008194
cmp ecx, 0xe0aec8b4
je 0x10008b13
cmp ecx, 0xe0e64d65
jne 0x10006cb5
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp eax, 0x22
setne cl
lea eax, [ecx + ecx*2 + 1]
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
cmp dword [eax], 1
sete byte [ebp - 0x35]
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
and al, 1
cmp dword [0x10098dd8], 0xa
setge cl
mov edx, eax
xor dl, cl
or al, cl
mov dh, al
xor dh, dl
test al, al
mov ecx, 0x3ef2c8fd
mov eax, 0x62db235e
cmovne ecx, eax
test dl, dl
cmove ecx, eax
test dh, dh
mov eax, 0x3ef2c8fd
cmove ecx, eax
jmp 0x10006cb5
cmp ecx, 0x5f095d56
jg 0x100081c2
cmp ecx, 0x5e7d2982
je 0x10008b1d
cmp ecx, 0x5f08ff12
jne 0x10006cb5
mov ecx, 0xb06fb137
jmp 0x10006cb5
cmp ecx, 0x8c06f9ac
jg 0x1000822a
cmp ecx, 0x89ab08dd
je 0x10008b27
cmp ecx, 0x8be06e18
jne 0x10006cb5
mov eax, dword [ebp - 0x18]
cmp dword [eax], 1
mov ecx, 0x728a15eb
mov eax, 0xf613ba55
cmove ecx, eax
jmp 0x10006cb5
cmp ecx, 0x11c732da
jg 0x100082ad
cmp ecx, 0xcc19fb6
je 0x10008b34
cmp ecx, 0xd53aeca
jne 0x10006cb5
mov eax, dword [ebp - 0x3c]
mov ecx, 0x65cfa419
jmp 0x10006cb5
cmp ecx, 0xd7e22204
jg 0x10008338
cmp ecx, 0xd1d3f5b0
je 0x10008b3e
cmp ecx, 0xd56dc571
jne 0x10006cb5
mov ecx, 0xb8e03136
jmp 0x10006cb5
cmp ecx, 0x7980e0bc
jg 0x1000836f
cmp ecx, 0x728a15eb
je 0x10008b6f
cmp ecx, 0x74590428
jne 0x10006cb5
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xa1d5a8ce
mov edx, eax
and edx, 0x5e2a5731
or edx, ecx
xor edx, 0x5e2a5730
and eax, 0xfffffffe
or eax, edx
xor eax, 0x64c06eb2
cmp eax, 0x9b3f914d
sete al
cmp dword [0x10098dd8], 0xa
setl cl
xor al, cl
mov edx, eax
xor dl, 1
and cl, dl
xor dl, cl
mov edx, 0x2075a057
mov edi, 0x5e7d2982
cmovne edx, edi
test al, al
mov eax, edx
mov edi, 0x2075a057
cmovne eax, edi
test cl, cl
cmove eax, edx
mov ecx, eax
jmp 0x10006cb5
cmp ecx, 0xad423fe6
jg 0x1000839c
cmp ecx, 0xaa6ffbc4
je 0x10008b84
cmp ecx, 0xab917d02
jne 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10098dd8], 0xa
setl dl
setge ah
or ah, cl
xor dl, al
mov al, ah
xor al, dl
mov ebx, 0xa0c7fefa
mov ecx, 0x69f7ba07
cmovne ebx, ecx
test dl, dl
mov ecx, ebx
mov edx, 0xa0c7fefa
jmp 0x100082a0
cmp ecx, 0x375af64f
jg 0x1000842a
cmp ecx, 0x366a5ecd
je 0x10008b91
cmp ecx, 0x369edb00
jne 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
sete dl
setne ah
cmp dword [0x10098dd8], 0xa
setge al
setl cl
and ah, cl
and al, dl
or al, ah
mov ah, cl
xor ah, dl
or cl, dl
xor cl, 1
or cl, ah
mov edx, ecx
xor dl, al
test cl, cl
mov ecx, 0x91706b92
mov edi, 0xe6c0b253
cmovne ecx, edi
test al, al
cmove ecx, edi
test dl, dl
mov eax, 0x91706b92
cmove ecx, eax
jmp 0x10006cb5
cmp ecx, 0xf5ea8b3d
jg 0x10008458
cmp ecx, 0xf2d055df
je 0x10008bc4
cmp ecx, 0xf3d54fdf
jne 0x10006cb5
mov eax, dword [ebp - 0x14]
mov ecx, dword [0x10098dd4]
lea edx, [ecx + 1]
imul edx, ecx
mov ecx, edx
not ecx
and edx, 0xd16bbf67
mov ebx, ecx
and ebx, 0x2e944098
or ebx, edx
xor ebx, 0x2e944099
and ecx, 0xfffffffe
or ecx, ebx
xor ecx, 0x1aadc4f7
cmp ecx, 0xe5523b08
setne cl
cmp dword [0x10098dd8], 0xa
setge dl
mov dh, dl
or dh, cl
xor dl, cl
mov ebx, edx
xor bl, dh
test dl, dl
mov ecx, 0x2e4d0d8a
mov edi, 0x9d358798
cmovne ecx, edi
mov eax, dword [eax]
test dh, dh
mov edx, 0x2e4d0d8a
cmovne ecx, edx
mov dword [ebp - 0x78], eax
jmp 0x10007d71
cmp ecx, 0x4a98a8be
jg 0x10008481
cmp ecx, 0x47342d72
je 0x10008c15
cmp ecx, 0x4a29d14e
jne 0x10006cb5
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x4523230e
mov edx, eax
and edx, 0xbadcdcf1
or edx, ecx
xor edx, 0xbadcdcf0
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
sete al
cmp dword [0x10098dd8], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, 1
or cl, dl
mov eax, ecx
xor al, dl
mov eax, 0x918183da
mov edi, 0x63aa41e9
cmovne eax, edi
test cl, cl
mov ecx, 0x918183da
jmp 0x10008ada
cmp ecx, 0x8718b42e
jg 0x100084a3
cmp ecx, 0x852da628
je 0x10008c26
cmp ecx, 0x86050855
jne 0x10006cb5
mov eax, dword [ebp - 0x14]
mov ecx, dword [0x10098dd4]
mov eax, 0xaf2f6df
sub eax, ecx
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098dd8], 0xa
setl dl
setge dh
or dh, al
xor dl, cl
mov al, dh
xor al, dl
test al, 1
mov eax, 0xf8199d
mov ecx, 0x825aa4fd
cmovne eax, ecx
test dl, dl
mov ecx, eax
mov edi, 0xf8199d
cmovne ecx, edi
test dh, 1
cmovne ecx, eax
jmp 0x10006cb5
cmp ecx, 0x127e185
je 0x10008cbe
cmp ecx, 0x12c3200
jne 0x10006cb5
cmp dword [ebp - 0x60], 0
sete byte [ebp - 0x33]
mov ecx, 0xbd6f99f5
jmp 0x10006cb5
cmp ecx, 0xc65f7b9c
je 0x10008cc8
cmp ecx, 0xc8d4263d
jne 0x10006cb5
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0x14], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
mov eax, esp
mov dword [ebp - 0x10], eax
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [0x10098b2c]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
push str._astSS
push dword [eax]
push 0x10092e7e
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x4940f233
mov edx, eax
and edx, 0xb6bf0dcc
or edx, ecx
xor edx, 0xb6bf0dcd
and eax, 0xfffffffe
or eax, edx
xor eax, 0x3da4bbc
xor eax, 0xfc25b443
setne al
sete dl
cmp dword [0x10098dd8], 0xa
setge cl
xor dl, cl
or al, cl
mov ecx, edx
xor cl, al
mov ebx, 0x69216de1
mov ecx, 0x51fa8f79
cmovne ebx, ecx
test al, al
cmovne ecx, ebx
test dl, dl
cmovne ecx, ebx
jmp 0x10006cb5
cmp ecx, 0x6a8fbeb1
je 0x10008d2a
cmp ecx, 0x6c705b0d
jne 0x10006cb5
push dword [ebp - 0x80]
call dword [sym.imp.SHLWAPI.dll_PathUnquoteSpacesW]
mov ecx, 0xaa4a818b
jmp 0x10006cb5
cmp ecx, 0xa03a53ee
je 0x10008d3f
cmp ecx, 0xa07f816c
jne 0x10006cb5
mov eax, dword [ebp - 0x78]
cmp word [eax], 0
setne byte [ebp - 0x34]
mov ecx, 0x6769419e
jmp 0x10006cb5
cmp ecx, 0x2983c57b
je 0x10008d49
cmp ecx, 0x2a0014aa
jne 0x10006cb5
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push dword [eax]
push str.config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionW]
test eax, eax
mov ecx, 0x28ef2fef
mov eax, 0x7feb1fc8
cmove ecx, eax
jmp 0x10006cb5
cmp ecx, 0xe4376f50
je 0x10008d53
cmp ecx, 0xe57cbd4c
jne 0x10006cb5
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
sub esp, 0x208
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov ecx, dword [0x10098dd4]
lea edx, [ecx - 1]
imul edx, ecx
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
setne cl
cmp dword [0x10098dd8], 0xa
setge dl
mov dh, dl
or dh, cl
xor dl, cl
mov bl, dh
xor bl, dl
test dl, dl
mov ecx, 0x84720da6
mov edi, 0x43180d5c
cmovne ecx, edi
test dh, dh
mov edx, 0x84720da6
cmovne ecx, edx
mov dword [ebp - 0x1c], eax
test bl, bl
cmove ecx, edi
jmp 0x10006cb5
cmp ecx, 0x62db235e
je 0x10008dc8
cmp ecx, 0x63aa41e9
jne 0x10006cb5
mov ecx, 0x918183da
jmp 0x10006cb5
cmp ecx, 0x918183da
je 0x10008de9
cmp ecx, 0x98ced4af
jne 0x10006cb5
mov ecx, 0x68e45623
jmp 0x10006cb5
cmp ecx, 0x1345623a
je 0x10008e4b
cmp ecx, 0x1538e9b0
jne 0x10006cb5
mov ecx, 0x7feb1fc8
jmp 0x10006cb5
cmp ecx, 0xdb9169b3
je 0x10008e55
cmp ecx, 0xdce41000
jne 0x10006cb5
mov eax, dword [ebp - 0x1c]
mov ecx, 0xadd950d
jmp 0x10006cb5
cmp ecx, 0x7bf1b7a2
je 0x10008e5f
cmp ecx, 0x7c3a16cd
jne 0x10006cb5
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x3a183688
mov edx, eax
and edx, 0xc5e7c977
or edx, ecx
xor edx, 0xc5e7c976
and eax, 0xfffffffe
or eax, edx
xor eax, 0xab0d8716
xor eax, 0x54f278e9
setne al
sete cl
cmp dword [0x10098dd8], 0xa
setge dl
setl ah
xor ah, cl
or dl, al
mov al, dl
xor al, ah
mov ecx, 0x1992558b
mov edi, 0xe0aec8b4
cmovne ecx, edi
test dl, dl
mov edx, 0x1992558b
cmovne edx, ecx
test ah, ah
jmp 0x1000899f
cmp ecx, 0xb0b1b71e
je 0x10008eab
cmp ecx, 0xb3f1fa21
jne 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x3906d63d
and eax, 0xc6f929c2
or eax, edx
xor eax, 0x3906d63c
or eax, ecx
xor eax, 0xffffffff
sete dl
setne ah
cmp dword [0x10098dd8], 0xa
setl cl
xor ah, cl
mov al, cl
xor al, dl
xor ah, 1
or cl, dl
xor cl, 1
or cl, ah
mov edx, ecx
xor dl, al
mov edx, 0xe57cbd4c
mov edi, 0x84720da6
cmovne edx, edi
test cl, cl
mov ecx, 0xe57cbd4c
jmp 0x10008f8e
cmp ecx, 0x3a9e5021
je 0x10008eb8
cmp ecx, 0x3df76a39
jne 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xa1259966
and eax, 0x5eda6699
or eax, edx
xor eax, 0xa1259967
or eax, ecx
cmp eax, 0xffffffff
sete al
cmp dword [0x10098dd8], 0xa
setl cl
xor al, cl
mov edx, eax
mov ebx, 0xdb9169b3
mov edi, 0x9f39ccc4
cmovne ebx, edi
not dl
test dl, cl
cmovne ebx, edi
test al, al
mov eax, ebx
cmovne eax, edi
test dl, cl
cmove eax, ebx
mov ecx, eax
jmp 0x10006cb5
cmp ecx, 0xf622e672
je 0x10008ec5
cmp ecx, 0xf703d4b6
jne 0x10006cb5
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xea2b4cf8
mov edx, eax
and edx, 0x15d4b307
or edx, ecx
xor edx, 0x15d4b306
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
sete al
cmp dword [0x10098dd8], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, 1
or cl, dl
mov eax, ecx
xor al, dl
test cl, cl
mov ecx, 0x98ced4af
mov edi, 0x2983c57b
cmovne ecx, edi
test dl, dl
cmove ecx, edi
test al, al
mov eax, 0x98ced4af
cmove ecx, eax
jmp 0x10006cb5
cmp ecx, 0x503bd35e
je 0x10008ecf
cmp ecx, 0x51fa8f79
jne 0x10006cb5
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp dword [0x10098dd8], 0xa
setl dl
xor al, dl
mov ah, al
mov ebx, 0x2983c57b
mov edi, 0xf703d4b6
cmovne ebx, edi
not ah
test ah, dl
cmovne ebx, edi
test al, al
mov ecx, ebx
cmovne ecx, edi
test ah, dl
cmove ecx, ebx
jmp 0x10006cb5
cmp ecx, 0x84720da6
je 0x10008f28
cmp ecx, 0x8505ed35
jne 0x10006cb5
mov ecx, 0x1345623a
jmp 0x10006cb5
cmp ecx, 0xff5ba540
je 0x10008f32
cmp ecx, 0xf8199d
jne 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098dd8], 0xa
setl dl
setge ah
or ah, cl
xor dl, al
mov al, dl
xor al, ah
test dl, dl
mov ecx, 0x825aa4fd
mov edi, 0x7d9194af
cmovne ecx, edi
test ah, ah
mov edx, 0x825aa4fd
cmovne ecx, edx
test al, al
cmove ecx, edi
jmp 0x10006cb5
cmp ecx, 0xc02ef638
je 0x10008f96
cmp ecx, 0xc0441e12
jne 0x10006cb5
mov ecx, 0x366a5ecd
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x4c], eax
jmp 0x10006cb5
cmp ecx, 0x69216de1
je 0x10008ffe
cmp ecx, 0x69f7ba07
jne 0x10006cb5
mov ecx, 0xab917d02
jmp 0x10006cb5
cmp ecx, 0x9eaceb01
je 0x1000903f
cmp ecx, 0x9f39ccc4
jne 0x10006cb5
mov ecx, 0xa571ae5d
jmp 0x10006cb5
cmp ecx, 0x25ac5f31
je 0x1000905a
cmp ecx, 0x28ef2fef
jne 0x10006cb5
mov eax, dword [ebp - 0x14]
mov ecx, 0xee74dbb7
jmp 0x10006cb5
cmp ecx, 0xe19036e2
je 0x100090c5
cmp ecx, 0xe2b5dbee
jne 0x10006cb5
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov dword [eax], 1
mov ecx, 0xd53aeca
jmp 0x10006cb5
cmp ecx, 0x5f095d57
je 0x100090cf
cmp ecx, 0x60b0574e
jne 0x10006cb5
mov eax, dword [0x10098dd4]
lea ecx, [eax - 0x6cdbab6]
not ecx
imul ecx, eax
and ecx, 1
sete al
cmp dword [0x10098dd8], 0xa
setge dl
setl ah
and ah, cl
and al, dl
or al, ah
or dl, cl
mov ecx, edx
xor cl, al
mov ebx, 0xc8d4263d
mov ecx, 0x69216de1
cmovne ebx, ecx
test dl, dl
mov ecx, 0xc8d4263d
cmovne ecx, ebx
test al, al
cmove ecx, ebx
jmp 0x10006cb5
cmp ecx, 0x8c06f9ad
je 0x100090d9
cmp ecx, 0x91706b92
jne 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x1fa2fba0
and eax, 0xe05d045f
or eax, edx
xor eax, 0x1fa2fba1
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098dd8], 0xa
setl dl
setge ah
and al, ah
or ah, cl
and dl, cl
or dl, al
mov al, ah
xor al, dl
mov ebx, 0xfeb56399
mov ecx, 0xe6c0b253
cmovne ebx, ecx
test dl, dl
mov ecx, ebx
mov edx, 0xfeb56399
cmovne ecx, edx
test ah, ah
cmovne ecx, ebx
jmp 0x10006cb5
cmp ecx, 0x11c732db
je 0x1000913e
cmp ecx, 0x12226df7
jne 0x10006cb5
mov eax, dword [ebp - 0x14]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xee15af2d
and eax, 0x11ea50d2
or eax, edx
xor eax, 0x11ea50d3
xor ecx, eax
test ecx, eax
sete al
cmp dword [0x10098dd8], 0xa
setl dl
xor al, dl
mov ah, al
xor ah, 1
and dl, ah
xor ah, dl
test al, al
mov ecx, 0x4a98a8bf
mov edi, 0x824eb979
cmovne ecx, edi
test dl, dl
mov edx, 0x4a98a8bf
cmove ecx, edx
test ah, ah
cmove ecx, edi
jmp 0x10006cb5
cmp ecx, 0xd7e22205
je 0x1000914b
cmp ecx, 0xd9ae4e0c
jne 0x10006cb5
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push dword [ebp - 0x98]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov ecx, 0x3a9e5021
jmp 0x10006cb5
cmp ecx, 0x7980e0bd
je 0x100091e4
cmp ecx, 0x7b85bede
jne 0x10006cb5
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
mov ecx, 0xe4376f50
jmp 0x10006cb5
cmp ecx, 0xad423fe7
je 0x10009255
cmp ecx, 0xb06fb137
jne 0x10006cb5
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xe601f471
mov edx, eax
and edx, 0x19fe0b8e
or edx, ecx
xor edx, 0x19fe0b8f
and eax, 0xfffffffe
or eax, edx
xor eax, 0x4afc59f4
xor eax, 0xb503a60b
sete al
setne cl
cmp dword [0x10098dd8], 0xa
setl dl
setge ah
and al, ah
or ah, cl
and dl, cl
or dl, al
mov al, ah
xor al, dl
mov ebx, 0x160cb83b
mov ecx, 0x5f08ff12
cmovne ebx, ecx
test dl, dl
mov ecx, ebx
mov edx, 0x160cb83b
cmovne ecx, edx
test ah, ah
cmovne ecx, ebx
jmp 0x10006cb5
cmp ecx, 0x375af650
je 0x10009268
cmp ecx, 0x386e4856
jne 0x10006cb5
cmp byte [ebp - 0x36], 0
mov ecx, 0x6de87391
mov eax, 0x6a8fbeb1
cmovne ecx, eax
jmp 0x10006cb5
cmp ecx, 0xf5ea8b3e
je 0x10009272
cmp ecx, 0xf613ba55
jne 0x10006cb5
mov dword [ebp - 0x54], 0
mov ecx, 0x35298740
jmp 0x10006cb5
cmp ecx, 0x4a98a8bf
je 0x100092cc
cmp ecx, 0x4e534138
jne 0x10006cb5
mov ecx, 0xb3f1fa21
jmp 0x10006cb5
cmp ecx, 0x8718b42f
je 0x100092e6
cmp ecx, 0x87518009
jne 0x10006cb5
mov ecx, 0x53491010
jmp 0x10006cb5
mov ecx, 0x710bc250
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x50], eax
jmp 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xd4030510
and eax, 0x2bfcfaef
or eax, edx
xor eax, 0xd4030511
or eax, ecx
cmp eax, 0xffffffff
sete cl
cmp dword [0x10098dd8], 0xa
setl dl
xor cl, dl
mov dh, cl
not dh
mov eax, 0x89ab08dd
mov edi, 0x5f095d57
cmovne eax, edi
test dh, dl
cmovne eax, edi
test cl, cl
mov ecx, eax
cmovne ecx, edi
test dh, dl
mov edx, dword [ebp - 0x10]
mov edx, dword [edx]
mov dword [ebp - 0x94], edx
cmove ecx, eax
jmp 0x10006cb5
mov ecx, 0x6c705b0d
jmp 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x231738f2
and eax, 0xdce8c70d
or eax, edx
xor eax, 0x231738f3
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098dd8], 0xa
setge dl
setl ah
and ah, cl
and al, dl
or al, ah
or dl, cl
mov ecx, edx
xor cl, al
mov ebx, 0x1538e9b0
mov ecx, 0x6dbf56f1
cmovne ebx, ecx
test dl, dl
mov ecx, 0x1538e9b0
cmovne ecx, ebx
test al, al
cmove ecx, ebx
jmp 0x10006cb5
mov ecx, 0xce8cafdb
jmp 0x10006cb5
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x65189579
mov edx, eax
and edx, 0x9ae76a86
or edx, ecx
xor edx, 0x9ae76a87
and eax, 0xfffffffe
or eax, edx
xor eax, 0x7a267ecf
cmp eax, 0x85d98130
sete al
cmp dword [0x10098dd8], 0xa
setl dl
xor al, dl
mov ah, al
mov ebx, 0xe19036e2
mov edi, 0x503bd35e
cmovne ebx, edi
not ah
test ah, dl
cmovne ebx, edi
test al, al
mov ecx, ebx
cmovne ecx, edi
test ah, dl
cmove ecx, ebx
jmp 0x10006cb5
mov ecx, 0xf8d85a22
jmp 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xcd4ade0e
and eax, 0x32b521f1
or eax, edx
xor eax, 0xcd4ade0f
or eax, ecx
xor eax, 0xffffffff
sete dl
setne ah
cmp dword [0x10098dd8], 0xa
setge al
setl cl
and ah, cl
and al, dl
or al, ah
mov ah, cl
xor ah, dl
or cl, dl
xor cl, 1
or cl, ah
mov edx, ecx
xor dl, al
test cl, cl
mov ecx, 0xadd950d
mov edi, 0xdce41000
cmovne ecx, edi
test al, al
cmove ecx, edi
test dl, dl
mov eax, 0xadd950d
cmove ecx, eax
jmp 0x10006cb5
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
cmp dword [eax], 0
mov ecx, 0xd1d3f5b0
mov eax, 0x3a9e5021
cmove ecx, eax
jmp 0x10006cb5
mov eax, dword [ebp - 0x14]
mov ecx, 0xf3d54fdf
jmp 0x10006cb5
mov ecx, 0x91706b92
jmp 0x10006cb5
mov ecx, 0xfbf641ed
jmp 0x10006cb5
mov eax, dword [ebp - 0x3c]
mov dword [eax], esi
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x3c]
push esi
push dword [ebp - 0x48]
push esi
push str.Security.FixPass
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
mov ecx, 0xb8c277b3
mov eax, 0x9ac8915c
cmove ecx, eax
jmp 0x10006cb5
push dword [ebp - 0x84]
call dword [sym.imp.SHLWAPI.dll_StrToIntW]
mov dword [ebp - 0x88], eax
mov ecx, 0xad423fe7
jmp 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098dd8], 0xa
setl dl
setge ch
and cl, ch
or ch, al
and dl, al
or dl, cl
mov al, ch
xor al, dl
test dl, dl
mov edx, 0xcead9fa9
mov edi, 0x5dd0037e
cmovne edx, edi
test ch, 1
mov ecx, 0xcead9fa9
cmovne edx, ecx
test al, 1
cmove edx, edi
mov ecx, edx
jmp 0x10006cb5
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x60], eax
mov ecx, 0x12c3200
jmp 0x10006cb5
mov ecx, 0xc65f7b9c
jmp 0x10006cb5
mov ecx, 0xf8199d
jmp 0x10006cb5
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0x800
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov ecx, 0x852da628
jmp 0x10006cb5
mov ecx, 0x366a5ecd
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x4c], eax
jmp 0x10006cb5
mov ecx, 0x7f98fbe4
jmp 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x5f3a591b
and eax, 0xa0c5a6e4
or eax, edx
xor eax, 0xa0c5a6e5
xor ecx, eax
test ecx, eax
sete al
cmp dword [0x10098dd8], 0xa
setl cl
setge dl
xor dl, al
mov ah, cl
xor ah, al
or cl, al
xor cl, 1
or cl, ah
mov eax, edx
xor al, cl
test cl, cl
mov ecx, 0xce8cafdb
mov edi, 0x6dbf56f1
cmovne ecx, edi
test dl, dl
cmovne ecx, edi
test al, al
mov eax, 0xce8cafdb
cmovne ecx, eax
jmp 0x10006cb5
mov eax, dword [ebp - 0x8c]
add eax, eax
mov dword [ebp - 0x90], eax
mov ecx, 0x4eaeb46
jmp 0x10006cb5
mov eax, dword [ebp - 0x2c]
mov eax, dword [0x10098dd4]
lea edx, [eax + 1]
imul edx, eax
test dl, 1
sete ah
cmp dword [0x10098dd8], 0xa
setge al
setl cl
and dl, cl
and al, ah
or al, dl
mov edx, ecx
xor dl, ah
or cl, ah
xor cl, 1
or cl, dl
mov edx, ecx
xor dl, al
test cl, cl
mov ecx, 0x852da628
mov edi, 0xdd637898
cmovne ecx, edi
test al, al
cmove ecx, edi
test dl, dl
mov eax, 0x852da628
cmove ecx, eax
jmp 0x10006cb5
cmp byte [ebp - 0x35], 0
mov ecx, 0xc65f7b9c
mov eax, 0xbbec0e9f
cmovne ecx, eax
jmp 0x10006cb5
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
dec eax
mov dword [ebp - 0x74], eax
mov ecx, 0x2a0014aa
jmp 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10098dd8], 0xa
setge dl
setl ah
mov dh, ah
xor dh, cl
and dh, ah
and dl, al
and ah, cl
or ah, dl
mov al, ah
xor al, dh
test ah, ah
mov ecx, 0x4a98a8bf
mov edi, 0x12226df7
cmovne ecx, edi
test dh, dh
mov edx, 0x4a98a8bf
cmove ecx, edx
jmp 0x100090bb
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10098dd8], 0xa
setge dl
setl ah
and ah, cl
and al, dl
or al, ah
or dl, cl
mov ecx, edx
xor cl, al
mov ecx, 0x87518009
mov edi, 0xe9fae8da
cmovne ecx, edi
test dl, dl
mov edx, 0x87518009
cmovne edx, ecx
test al, al
cmove edx, ecx
mov ecx, edx
jmp 0x10006cb5
push dword [ebp - 0x9c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov ecx, 0xb0b1b71e
jmp 0x10006cb5
mov ecx, 0x9c7d3cea
jmp 0x10006cb5
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xfca489fc
mov edx, eax
and edx, 0x35b7603
or edx, ecx
xor edx, 0x35b7602
and eax, 0xfffffffe
or eax, edx
xor eax, 0x1266b73f
xor eax, 0xed9948c0
sete al
setne cl
cmp dword [0x10098dd8], 0xa
setl dl
setge ah
and al, ah
or ah, cl
and dl, cl
or dl, al
mov al, ah
xor al, dl
test dl, dl
mov ecx, 0x375af650
mov edx, 0xe0129cc6
cmovne ecx, edx
test ah, ah
mov edi, 0x375af650
jmp 0x10009248
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098dd8], 0xa
setl dl
setge dh
or dh, al
xor dl, cl
mov al, dh
xor al, dl
test dl, dl
mov ecx, 0xaa6ffbc4
mov edi, 0x8718b42f
cmovne ecx, edi
test dh, 1
mov edx, 0xaa6ffbc4
cmovne ecx, edx
test al, 1
cmove ecx, edi
jmp 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xae0c51c2
and eax, 0x51f3ae3d
or eax, edx
xor eax, 0x51f3ae3c
xor ecx, eax
test ecx, eax
setne al
cmp dword [0x10098dd8], 0xa
setge cl
mov edx, ecx
xor dl, al
or cl, al
mov eax, ecx
xor al, dl
mov eax, 0x8505ed35
mov edi, 0x127e185
cmovne eax, edi
test cl, cl
mov ecx, 0x8505ed35
cmovne ecx, eax
test dl, dl
cmove ecx, eax
jmp 0x10006cb5
mov ecx, 0xa07f816c
jmp 0x10006cb5
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx]
lea eax, [ecx + eax*2]
add eax, 2
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov ecx, 0x11c732db
jmp 0x10006cb5
mov ecx, 0x7c3a16cd
jmp 0x10006cb5
mov ecx, 0x2075a057
jmp 0x10006cb5
mov eax, dword [ebp - 0x10]
mov ecx, 0x6f3245a
jmp 0x10006cb5
mov ecx, 0x9eaceb01
jmp 0x10006cb5
push str..ini
push str.config
push dword [0x10098b98]
push 0x10092e7a
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x14
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x70], eax
mov ecx, 0x405c7cc3
jmp 0x10006cb5
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
mov ecx, 0x671ce0db
jmp 0x10006cb5
mov eax, dword [ebp - 0x10]
mov ecx, 0x8718b42f
jmp 0x10006cb5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
push dword [ebp - 0xa0]
push dword [ebp - 0x4c]
push dword [eax]
push 0
push dword [ecx]
push dword [edx]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
mov ecx, 0x229f610f
jmp 0x10006cb5
mov ecx, dword [0x10098dd4]
mov eax, ecx
not eax
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098dd8], 0xa
setl dl
xor al, dl
mov ch, al
xor ch, 1
or cl, dl
xor cl, 1
or cl, ch
xor ch, cl
test ch, 1
mov edx, 0xf3d54fdf
mov edi, 0x2e4d0d8a
cmovne edx, edi
test cl, 1
mov ecx, 0xf3d54fdf
cmovne ecx, edx
test al, 1
cmovne ecx, edx
jmp 0x10006cb5
mov dword [ebp - 0x50], 4
mov ecx, 0x710bc250
jmp 0x10006cb5
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0x800
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
add eax, eax
mov dword [ebp - 0x64], eax
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov ecx, dword [0x10098dd4]
lea edx, [ecx + 1]
imul edx, ecx
mov ecx, edx
not ecx
and edx, 0x42b8def0
mov ebx, ecx
and ebx, 0xbd47210f
or ebx, edx
xor ebx, 0xbd47210e
and ecx, 0xfffffffe
or ecx, ebx
xor ecx, 0xc1c0eed4
xor ecx, 0x3e3f112b
sete cl
setne dl
cmp dword [0x10098dd8], 0xa
setl ch
setge dh
and cl, dh
or dh, dl
and ch, dl
or ch, cl
mov cl, dh
xor cl, ch
mov ebx, 0xcc19fb6
mov edi, 0xdd637898
cmovne ebx, edi
test ch, ch
mov ecx, ebx
mov edi, 0xcc19fb6
cmovne ecx, edi
mov dword [ebp - 0x68], eax
test dh, dh
cmovne ecx, ebx
jmp 0x10006cb5
mov ecx, 0x686ab808
jmp 0x10006cb5
mov eax, dword [ebp - 0x44]
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x3f8c0b09
and eax, 0xc073f4f6
or eax, edx
xor eax, 0x3f8c0b08
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098dd8], 0xa
setl dl
setge ah
or ah, cl
xor dl, al
mov al, ah
xor al, dl
test dl, dl
mov ecx, 0x127e185
mov edx, 0x686ab808
cmovne ecx, edx
test ah, ah
mov edi, 0x127e185
jmp 0x10009248
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x8c], eax
mov ecx, 0xb75a0531
jmp 0x10006cb5
mov ecx, 0x25ac5f31
jmp 0x10006cb5
mov ecx, 0xf703d4b6
jmp 0x10006cb5
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
cmp dword [eax], 1
sete byte [ebp - 0x36]
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x6b992ee9
and eax, 0x9466d116
or eax, edx
xor eax, 0x6b992ee8
or eax, ecx
cmp eax, 0xffffffff
setne al
cmp dword [0x10098dd8], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov eax, 0x386e4856
mov edi, 0x7b85bede
cmovne eax, edi
test cl, cl
mov ecx, eax
mov edi, 0x386e4856
cmovne ecx, edi
test dl, dl
cmovne ecx, eax
jmp 0x10006cb5
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp eax, 0x22
setne cl
lea eax, [ecx + ecx*2 + 1]
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
mov ecx, 0xe0e64d65
jmp 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xb54d26e1
and eax, 0x4ab2d91e
or eax, edx
xor eax, 0x4ab2d91f
xor ecx, eax
test ecx, eax
setne al
cmp dword [0x10098dd8], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
test cl, cl
mov ecx, 0x63aa41e9
mov edi, 0x9e181102
cmovne ecx, edi
test dl, dl
mov edx, 0x63aa41e9
cmovne ecx, edx
test al, al
cmove ecx, edi
jmp 0x10006cb5
mov ecx, 0x8be06e18
jmp 0x10006cb5
mov ecx, 0x3df76a39
jmp 0x10006cb5
mov eax, dword [0x10098dd4]
lea edx, [eax - 1]
imul edx, eax
and edx, 1
sete ah
cmp dword [0x10098dd8], 0xa
setge ch
setl cl
mov al, ch
xor ch, dl
and dl, cl
and al, ah
or al, dl
or cl, ah
xor cl, 1
or cl, ch
mov edx, ecx
xor dl, al
mov edx, 0xe0e64d65
mov edi, 0x62db235e
cmovne edx, edi
test cl, cl
mov ecx, 0xe0e64d65
jmp 0x10008f8e
mov eax, dword [ebp - 0x1c]
mov ecx, 0x8c06f9ad
jmp 0x10006cb5
mov eax, dword [ebp - 0x24]
mov ecx, 0x7980e0bd
jmp 0x10006cb5
mov ecx, 0xf2d055df
jmp 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
cmp dword [0x10098dd8], 0xa
setl dl
xor al, dl
mov ah, al
xor ah, 1
and dl, ah
xor ah, dl
test al, al
mov ecx, 0xe19036e2
mov edi, 0x47342d72
cmovne ecx, edi
test dl, dl
mov edx, 0xe19036e2
cmove ecx, edx
test ah, ah
cmove ecx, edi
jmp 0x10006cb5
mov ecx, 0xe57cbd4c
jmp 0x10006cb5
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xb07b6624
and eax, 0x4f8499db
or eax, edx
xor eax, 0xb07b6625
or eax, ecx
xor eax, 0xffffffff
setne cl
sete dl
cmp dword [0x10098dd8], 0xa
setl al
setge ah
and dl, ah
and al, cl
or al, dl
or ah, cl
mov cl, ah
xor cl, al
mov edx, 0x6f3245a
mov ecx, 0x89ab08dd
cmovne edx, ecx
test ah, ah
mov ecx, 0x6f3245a
cmovne ecx, edx
jmp 0x1000924b
mov ecx, dword [0x10098dd4]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
setne cl
sete ah
cmp dword [0x10098dd8], 0xa
setl al
setge ch
mov edx, eax
or al, ah
and ah, ch
and dl, cl
or dl, ah
xor ch, cl
xor al, 1
or al, ch
mov ah, al
xor ah, dl
test al, al
mov ecx, 0x3df76a39
mov edi, 0xdb9169b3
cmovne ecx, edi
test dl, dl
cmove ecx, edi
test ah, ah
mov eax, 0x3df76a39
cmove ecx, eax
jmp 0x10006cb5
mov eax, dword [ebp - 0x28]
mov eax, dword [0x10098b2c]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
push str._astSS
push dword [eax]
push 0x10092e7e
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0
mov ecx, 0xc8d4263d
jmp 0x10006cb5
push dword [ebp - 0x64]
push 8
push dword [ebp - 0x68]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov dword [ebp - 0x6c], eax
mov ecx, 0x2b823769
jmp 0x10006cb5
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x3c98cd54
mov edx, eax
and edx, 0xc36732ab
or edx, ecx
xor edx, 0xc36732aa
and eax, 0xfffffffe
or eax, edx
xor eax, 0xa248db67
cmp eax, 0x5db72498
sete al
cmp dword [0x10098dd8], 0xa
setl dl
xor al, dl
mov ah, al
not ah
mov ecx, 0x74590428
mov edi, 0xc02ef638
cmovne ecx, edi
test ah, dl
mov edx, 0x74590428
cmove ecx, edx
cmovne ecx, edi
test al, al
cmovne ecx, edi
jmp 0x10006cb5
mov ecx, 0x503bd35e
jmp 0x10006cb5
mov ecx, 0xc0441e12
jmp 0x10006cb5
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x335e0c76
mov edx, eax
and edx, 0xcca1f389
or edx, ecx
xor edx, 0xcca1f388
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete cl
setne dl
cmp dword [0x10098dd8], 0xa
setge ah
setl ch
mov al, ch
xor al, dl
and al, ch
and ah, cl
and ch, dl
or ch, ah
mov cl, al
xor cl, ch
mov edx, 0xcead9fa9
mov edi, 0x98f945b7
jmp 0x10009241
mov eax, dword [ebp - 0x30]
mov ecx, 0xf2d055df
jmp 0x10006cb5
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x14]
sub ecx, dword [edx]
sar ecx, 1
sub eax, ecx
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov word [eax], 0
mov eax, dword [ebp - 0x10]
mov edx, dword [0x10098dd4]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
not edx
mov ebx, edx
and ebx, 0x8c324bf6
and ecx, 0x73cdb409
or ecx, ebx
mov eax, dword [eax]
add eax, 2
xor ecx, 0x73cdb408
xor edx, ecx
test edx, ecx
sete cl
setne dl
cmp dword [0x10098dd8], 0xa
setl ch
setge dh
and cl, dh
or dh, dl
and ch, dl
or ch, cl
mov dl, dh
xor dl, ch
test ch, ch
mov ecx, 0xff2f186e
mov edi, 0xd56dc571
cmovne ecx, edi
test dh, dh
mov ebx, 0xff2f186e
cmovne ecx, ebx
mov dword [ebp - 0x7c], eax
test dl, dl
cmove ecx, edi
jmp 0x10006cb5
mov eax, dword [ebp - 0x2c]
mov eax, dword [0x10098dd4]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x8e749c62
mov edx, eax
and edx, 0x718b639d
or edx, ecx
xor edx, 0x718b639c
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete cl
setne dl
cmp dword [0x10098dd8], 0xa
setge ah
setl ch
mov al, ch
xor al, dl
and al, ch
and ah, cl
and ch, dl
or ch, ah
mov cl, al
xor cl, ch
mov edx, 0x74590428
mov edi, 0x25ac5f31
cmovne edx, edi
test ch, ch
mov ecx, edx
cmovne ecx, edi
test al, al
cmove ecx, edx
jmp 0x10006cb5
mov ecx, 0x35298740
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x54], eax
jmp 0x10006cb5
mov ecx, 0x369edb00
jmp 0x10006cb5
mov al, byte [ebp - 0x31]
mov cl, byte [ebp - 0x32]
mov ah, al
xor ah, 1
mov edx, eax
and dl, ah
xor dl, 1
or dl, ah
xor dl, 1
or dl, al
mov ah, dl
xor ah, 1
and ah, cl
mov ch, al
xor ch, cl
or al, cl
xor cl, 1
and dl, cl
or dl, ah
xor al, 1
or al, ch
mov ecx, eax
xor cl, dl
test cl, 1
mov ebx, 0xb3f1fa21
mov ecx, 0x4e534138
cmovne ebx, ecx
test al, 1
mov ecx, 0xb3f1fa21
cmovne ecx, ebx
test dl, 1
cmove ecx, ebx
jmp 0x10006cb5
mov eax, dword [ebp - 0x14]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov ecx, 0x12226df7
jmp 0x10006cb5
mov eax, dword [ebp - 0x10]
mov ecx, dword [0x10098dd4]
lea ebx, [ecx - 1]
imul ebx, ecx
test bl, 1
sete ch
cmp dword [0x10098dd8], 0xa
setge dl
setl cl
and bl, cl
and dl, ch
or dl, bl
mov dh, cl
xor dh, ch
or cl, ch
xor cl, 1
or cl, dh
mov dh, cl
xor dh, dl
test cl, cl
mov ecx, 0xc9ac54ec
mov edi, 0xaa6ffbc4
cmovne ecx, edi
test dl, dl
mov eax, dword [eax]
cmove ecx, edi
mov dword [ebp - 0x80], eax
test dh, dh
mov eax, 0xc9ac54ec
cmove ecx, eax
jmp 0x10006cb5
cmp ecx, 0x5dd0037e
jne 0x10006cb5
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret