Function at 0x100d251e
Capabilities:
Compare security identifiers
Get keyboard layout
Query or enumerate registry key
Read .ini file

Disassembly:
mov eax, 0x10149b59
call fcn.1013e250
sub esp, 0x13c
push ebx
push esi
mov dword [ebp - 0x34], 0x5e3edfa8
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x2c], 0x391cb4e7
push edi
mov dword [ebp - 0x24], 0x5a9864ba
mov dword [ebp - 0x10], 0xade0980d
mov dword [ebp - 0x20], 0x5c1d1022
push 2
call fcn.10013ee8
xor ebx, ebx
lea ecx, [ebp - 0x54]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], 0xca3691f6
mov dword [ebp - 0x28], 0x32e26595
push 1
call fcn.10013ee8
mov byte [ebp - 4], 1
mov dword [ebp - 0x20], 0xcd85
mov dword [ebp - 0x1c], ebx
jmp 0x100d259b
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x60]
mov dword [eax + ecx*4], 0xaf72b572
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100d258b
mov dword [ebp - 0x1c], ebx
jmp 0x100d25b3
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100d25a6
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100d260e
push 0x7d0
push 0x1a45
push 0x1f12
push ebx
push 0x144f
push 0xe65
call edi
push eax
call esi
push eax
push 0x370
push 0xdd2
push 0x26f7
push 0x1da5
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x10]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x54]
mov ecx, dword [eax]
lea eax, [ecx + 1]
cmp eax, 1
ja 0x100d2632
test ecx, ecx
jne 0x100d2632
mov eax, ebx
jmp 0x100d2635
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x28]
imul ecx, eax
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x28]
cmp ecx, eax
jge 0x100d264a
xor ecx, ecx
inc ecx
jmp 0x100d264c
mov ecx, ebx
xor eax, eax
cmp ecx, 0x3b91
setg al
xor ecx, ecx
inc ecx
cmp eax, ecx
jbe 0x100d2666
cmp dword [ebp - 0x10], ebx
je 0x100d2666
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x54]
push 4
cmp dword [eax], ebx
je 0x100d27c1
mov dword [ebp - 0x1c], 0xce724d25
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0x15
pop ebx
je 0x100d27b6
mov dword [ebp - 0x20], 0xffffffff
lea ecx, [ebp - 0xa8]
push ebx
call fcn.10013ee8
mov byte [ebp - 4], 2
mov dword [ebp - 0x24], 0
jmp 0x100d26be
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], 0x7874d2d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x100d26ab
mov dword [ebp - 0x24], 0
cmp dword [ebp - 0x24], 0x1c
jne 0x100d278e
mov esi, dword [ebp - 0xa8]
mov dword [ebp - 0x34], esi
push 3
lea ecx, [ebp - 0xc0]
call fcn.10013ee8
xor edx, edx
mov dword [ebp - 0x18], edx
jmp 0x100d2704
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], 0xeb613644
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100d26f1
cmp dword [ebp - 0x1c], edx
jne 0x100d2718
cmp dword [esi + 8], edx
jne 0x100d2718
mov ebx, edx
jmp 0x100d271b
xor ebx, ebx
inc ebx
mov esi, dword [esi + 8]
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov edi, dword [ebp - 0xc0]
sub esi, dword [edi + 8]
cmp ecx, eax
setl dl
sub esi, edx
sub esi, ebx
sub esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
sub esi, 9
neg esi
sbb esi, esi
xor ecx, ecx
neg esi
cmp eax, esi
mov esi, dword [ebp - 0x34]
setg cl
sub ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, dword [esi + 8]
lea ecx, [ebp - 0xc0]
setle al
mov dword [edi + 8], eax
call fcn.100144eb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1c
je 0x100d26dd
push 4
pop ebx
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 1
call fcn.100144eb
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x15
jne 0x100d268b
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
jmp 0x100d2860
mov dword [ebp - 0x24], 0xfd11e6ac
mov eax, 0x9fb0e7fb
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
pop ebx
jl 0x100d282b
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
push 2
pop ecx
sub ecx, eax
jne 0x100d2811
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
inc ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], ecx
dec dword [ebp - 0x18]
jns 0x100d27ee
imul eax, dword [ebp - 0x24], 0xc6b9
test eax, eax
je 0x100d284e
cmp dword [edx + 4], 0
jne 0x100d284a
cmp dword [ebp - 0x18], 0
jne 0x100d284a
mov eax, dword [ebp - 0x60]
cmp dword [eax], 0
je 0x100d284e
mov edx, ecx
jmp 0x100d2850
xor edx, edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0xe8], ecx
lea ecx, [ebp - 0x54]
call fcn.100144eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.100144eb
mov dword [ebp - 0x1c], 0xfffffff6
xor ecx, ecx
mov dword [ebp - 0x20], 0xfffffffa
inc ecx
mov dword [ebp - 0x28], 0x5cc7
xor edx, edx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x2c], 0xdc4b
mov dword [ebp - 0x10], edx
jmp 0x100d28ab
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x44], 0x8bbca631
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100d289d
mov dword [ebp - 0x1c], edx
jmp 0x100d29e9
mov dword [ebp - 0x24], 0x94ff5452
mov dword [ebp - 0x18], 0x3799040c
mov dword [ebp - 0x20], 0xde90
mov dword [ebp - 0x10], edx
jmp 0x100d28e4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x144], 0xfffffff8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100d28d3
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x44], ecx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x24], eax
jge 0x100d2912
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x44]
cmp eax, 1
setge cl
neg ecx
je 0x100d293d
cmp dword [ebp - 0x20], edx
je 0x100d293d
xor ecx, ecx
inc ecx
jmp 0x100d293f
mov ecx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, dword [ebp + eax*4 - 0x44]
je 0x100d2955
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x44], edx
jne 0x100d2955
mov ecx, edx
jmp 0x100d2958
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 0xd3ed
setge al
cmp eax, 0x5ad058bb
jle 0x100d2971
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x18], 0xfe64
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
inc ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x28]
jne 0x100d29b8
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x100d29e3
push edx
push 0x1a9b
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
xor ecx, ecx
inc ecx
jmp 0x100d29e3
mov dword [ebp - 0x18], edx
jmp 0x100d29de
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x100d29d2
push edx
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
xor ecx, ecx
xor edx, edx
inc ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x13c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x100d29bd
inc dword [ebp - 0x1c]
push 0
pop edx
cmp dword [ebp - 0x1c], ecx
jle 0x100d28b9
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, 0x209f
push 2
setl cl
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0xcc]
call fcn.10013ee8
mov dword [ebp - 0x10], 7
xor edx, edx
mov dword [ebp - 0x2c], 0x2c40a98c
mov dword [ebp - 0x10], edx
jmp 0x100d2a33
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xcc]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100d2a24
mov eax, dword [ebp - 0xcc]
mov dword [eax], edx
mov dword [ebp - 0x10], 0x18
jmp 0x100d2a72
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x100d2a5c
push edx
call dword [sym.imp.USER32.dll_SetCursor]
xor edx, edx
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x100d2a6f
push edx
push edx
call dword [sym.imp.ADVAPI32.dll_EqualSid]
xor edx, edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x1d
jg 0x100d2a4a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.100144eb
cmp byte [0x110e2d40], 0
jne 0x100d34ca
mov dword [ebp - 0x10], 0xb743d837
mov eax, 0x643b8a2
mov dword [ebp - 0x20], 0xfa147b80
xor ecx, ecx
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x20], 0xfbe58499
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xdc], 0x6088
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
sub eax, 0x279c
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sets cl
mov dword [ebp - 0x20], ecx
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setg dl
sub dword [ebp - 0x10], edx
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x100d2b18
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov byte [0x110e2d40], 1
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x20], 0x19ac196a
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x34], 0xfffffff9
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x100d2b8d
push 0x7d0
push 0x1a45
push 0x1f12
push 0
push 0x144f
push 0xe65
call edi
push eax
call esi
push eax
push 0x370
push 0xdd2
push 0x26f7
push 0x1da5
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
mov dword [ebp - 0x20], 0
xor edx, edx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setg dl
xor eax, eax
add edx, dword [ebp - 0x10]
cmp edx, 0x4ad744d0
setl al
xor ecx, ecx
cmp eax, 0xb9a7
mov eax, dword [ebp - 0x20]
setne cl
sub eax, ecx
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov dword [ebp - 0x1c], 0x5a136951
mov esi, ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x10], ecx
jmp 0x100d2c01
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x30], 0x8ec0ae97
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x100d2bf3
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ecx
jl 0x100d2c89
mov dword [ebp - 0x20], 0xbf0ddd9c
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x30], ecx
jne 0x100d2c3c
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x30], ecx
jne 0x100d2c3c
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x30], ecx
jne 0x100d2c3c
mov edi, ecx
jmp 0x100d2c3f
xor edi, edi
inc edi
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp edx, eax
push 0
setne cl
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
add eax, 9
add ecx, eax
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp + eax*4 - 0x30], edi
mov eax, dword [ebp - 0x10]
imul eax, ecx
xor ecx, ecx
cmp edi, eax
sete cl
mov dword [ebp - 0x10], ecx
dec dword [ebp - 0x1c]
pop ecx
jns 0x100d2c0f
mov eax, dword [ebp - 0x1c]
mov ecx, 0x2227
mov dword [ebp - 0x30], eax
call fcn.10015af8
test al, al
je 0x100d2ca6
and dword [0x110e4658], esi
xor esi, esi
inc esi
mov ecx, 0x2224
call fcn.10015af8
test al, al
je 0x100d2cbb
mov dword [0x110e465c], esi
inc esi
mov dword [0x110e4660], esi
lea ecx, [ebp - 0x138]
inc esi
mov dword [0x110e4664], esi
inc esi
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x28], 3
push ebx
call fcn.10013ee8
push 1
lea ecx, [ebp - 0x9c]
mov dword [ebp - 4], ebx
call fcn.10013ee8
xor edx, edx
mov byte [ebp - 4], 5
mov dword [ebp - 0x18], edx
jmp 0x100d2d0d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x138]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100d2cfe
mov dword [ebp - 0x18], edx
jmp 0x100d2d2a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x9c]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x100d2d17
mov eax, dword [ebp - 0x1c]
mov ecx, 0xe3cf9575
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add eax, 0x39f7747
cmp ecx, eax
sbb eax, eax
neg eax
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jne 0x100d2d60
cmp dword [ebp - 0x1c], edx
jne 0x100d2d60
mov ecx, edx
jmp 0x100d2d63
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x28]
imul eax, ecx
push 0xfffffffffffffffd
pop edi
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0xfffffff0
jmp 0x100d2f31
mov dword [ebp - 0x24], 0xfff6
lea ecx, [ebp - 0xf8]
push 1
call fcn.10013ee8
mov byte [ebp - 4], 6
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x10], 0
jmp 0x100d2dbb
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 0xe1c2a91
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x100d2da8
mov dword [ebp - 0x1c], 0xffffffe2
cmp dword [ebp - 0x1c], 0x11
jne 0x100d2f18
mov edi, 0xffff
mov dword [ebp - 0x10], 5
lea ecx, [ebp - 0x90]
push ebx
call fcn.10013ee8
mov dword [ebp - 0x18], 0
jmp 0x100d2e06
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100d2df3
mov eax, dword [ebp - 0x1c]
cmp edi, eax
sbb eax, eax
neg eax
cmp eax, edi
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setne dl
add edx, dword [ebp - 0x10]
neg edx
sub edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
sub eax, 8
inc edx
cmp eax, edx
je 0x100d2e8e
mov dword [ebp - 0x24], 0
jmp 0x100d2e80
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x100d2e68
push 0x1e31
push 0x5c1
push 0xbfd
push 0xfa1
call dword [sym.imp.GDI32.dll_CreateRectRgn]
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x100d2e7d
push 0x206
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0
jle 0x100d2e44
cmp dword [ebp - 0x10], 0
je 0x100d2ef5
jmp 0x100d2efd
mov dword [ebp - 0x18], 0x20be
xor edx, edx
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x20], 0xc894628a
mov dword [ebp - 0x18], 0xbf7d
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setge dl
add edx, 0x7ba6da08
je 0x100d2ed8
cmp dword [ebp - 0x10], 0xd983a5c2
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x10]
jl 0x100d2ed8
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x68], ecx
mov eax, dword [ebp - 0x9c]
dec dword [eax]
lea ecx, [ebp - 0x90]
call fcn.100144eb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x11
je 0x100d2dd7
push 0xfffffffffffffffd
pop edi
mov dword [ebp - 0x70], 0
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 5
call fcn.100144eb
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffef
jl 0x100d2d7b
lea ecx, [ebp - 0x9c]
call fcn.100144eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x138]
call fcn.100144eb
mov ecx, 0x21ee
call fcn.10015af8
test al, al
je 0x100d2f6a
mov dword [0x110e4668], esi
inc esi
mov ecx, 0x21ed
call fcn.10015af8
test al, al
je 0x100d2fbc
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x10], 0
jmp 0x100d2faf
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x100d2fa6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 9
jne 0x100d2f8f
mov dword [0x110e466c], esi
inc esi
call fcn.100eb787
test al, al
je 0x100d30bd
mov dword [0x110e4650], esi
inc esi
call fcn.100ea918
test al, al
je 0x100d30bd
mov dword [ebp - 0x18], 0xb26bdde0
xor edi, edi
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x20], 0xfffffff8
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], 0xfffffff6
je 0x100d30b3
mov ebx, 0xffff
mov dword [ebp - 0x20], 0x23ed15de
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x24], 0xa8f9
push 3
call fcn.10013ee8
mov dword [ebp - 0x10], edi
jmp 0x100d3040
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x84]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100d302d
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
cmp ebx, eax
mov eax, dword [ebp - 0x20]
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setl cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], edi
jne 0x100d308b
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x84]
mov eax, dword [ebp - 0x84]
or dword [eax + 8], 0xffffffff
call fcn.100144eb
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff6
jne 0x100d300d
push 4
pop ebx
push 0xfffffffffffffffd
mov dword [0x110e4654], esi
inc esi
pop edi
call fcn.100bd38a
xor edx, edx
test al, al
je 0x100d311a
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x2c], 0xb65720b9
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x10], edx
jmp 0x100d30eb
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x100], 0x1d14cd49
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100d30da
mov dword [ebp - 0x10], edx
jmp 0x100d310d
mov dword [ebp - 0x2c], edx
xor ecx, ecx
mov eax, dword [ebp - 0x10]
cmp eax, 1
setge cl
mov dword [ebp - 0x100], ecx
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe2
jle 0x100d30f6
mov dword [0x110e4680], esi
inc esi
mov dword [ebp - 0x1c], 0xd4e793
mov dword [ebp - 0x10], edx
jmp 0x100d3134
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x78], 0x102071b1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100d3126
mov dword [ebp - 0x1c], edx
jmp 0x100d319c
mov dword [ebp - 0x20], 0x9be5411a
mov dword [ebp - 0x10], edx
jmp 0x100d3158
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x110], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100d314b
mov eax, dword [ebp - 0x1c]
sub eax, ebx
imul eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x1c]
jne 0x100d316e
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, 0x859495e0
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
push 0
setge dl
mov dword [ebp + eax*4 - 0x78], edx
inc dword [ebp - 0x1c]
pop edx
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x1c], ecx
jle 0x100d313f
call fcn.100b76a8
xor ebx, ebx
test al, al
je 0x100d325f
mov dword [ebp - 0x28], 0xe456
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x20], 0xbc7dcd66
mov dword [ebp - 0x24], ebx
push 3
call fcn.10013ee8
mov dword [ebp - 0x20], 0x198ab79a
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x10], ebx
jmp 0x100d31f3
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 0x167c28ca
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100d31e0
cmp dword [ebp - 0x24], ebx
jne 0x100d3207
cmp dword [ebp - 0x28], ebx
jne 0x100d3207
mov ecx, ebx
jmp 0x100d320a
xor ecx, ecx
inc ecx
xor eax, eax
mov dword [ebp - 0x20], 1
cmp ecx, 0xa9dade66
mov ecx, dword [ebp - 0x20]
push 0
setne al
sub ecx, eax
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0xb4]
mov dword [eax + 4], ecx
pop eax
setne al
xor edx, edx
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
lea ecx, [ebp - 0xb4]
setle dl
mov dword [ebp - 0x2c], edx
call fcn.100144eb
mov dword [0x110e4684], esi
inc esi
mov ecx, 0x22ac
call fcn.10015af8
test al, al
je 0x100d344a
mov dword [ebp - 0x20], 0x192fe2cc
mov dword [ebp - 0x18], ebx
jmp 0x100d328b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3c], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100d327d
xor ecx, ecx
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x100d32a7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x48], 0x3a50eb6b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100d3299
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], ebx
je 0x100d3355
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x2c], edi
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x10]
jl 0x100d32f0
cmp dword [ebp - 0x10], ebx
je 0x100d32f0
xor ecx, ecx
inc ecx
jmp 0x100d32f2
mov ecx, ebx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
push 0xfffffffffffffffe
pop edi
cmp edi, ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setl dl
imul edx, dword [ebp - 0x20]
cmp edx, 1
sbb ecx, ecx
inc ecx
imul ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, edi
mov ecx, dword [ebp - 0x10]
setge al
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x10]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
add edx, eax
mov eax, dword [ebp - 0x3c]
cmp edx, eax
setle cl
mov dword [ebp - 0x2c], ecx
jmp 0x100d343a
mov dword [ebp - 0x28], 5
mov eax, 0x505d01cd
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xbe2ff5ff
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x7a2e255b
mov dword [ebp - 0x2c], 0xa5c1b09c
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x2c], 0xfbdedbec
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x28], ebx
jmp 0x100d3431
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x10c]
push 2
call fcn.10013ee8
push 2
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x100d33d9
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x100d33c9
xor ecx, ecx
inc ecx
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
jl 0x100d341d
mov dword [ebp - 0x24], 0x638299fa
mov dword [ebp - 0x24], ebx
jmp 0x100d3413
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], ebx
jmp 0x100d340b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3c], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x100d33fd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x100d33f5
dec dword [ebp - 0x18]
jns 0x100d33e9
dec dword [ebp - 0x20]
lea ecx, [ebp - 0x10c]
call fcn.100144eb
inc dword [ebp - 0x28]
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x28], ecx
jle 0x100d33b1
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov dword [0x110e4688], esi
inc esi
mov dword [ebp - 0x48], eax
push 2
lea ecx, [ebp - 0x11c]
call fcn.10013ee8
mov dword [ebp - 0x10], ebx
jmp 0x100d346f
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0xa684
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100d345c
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100d348e
push ebx
push 0x1f2
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100d34a9
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x2582
push ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
lea ecx, [ebp - 0x11c]
call fcn.100144eb
call fcn.100e77b1
mov ecx, dword [0x110e468c]
test al, al
cmovne ecx, esi
mov dword [0x110e468c], ecx
mov eax, dword [ebp + 8]
mov esi, 0x110e4650
push 0x10
pop ecx
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret