Function at 0xa6cd10
Capabilities:
Persist via contextmenuhandlers registry key
Persist via default file association registry key
Persist via filter handlers registry key
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xabc50e
mov eax, dword fs:[0]
push eax
sub esp, 0x484
mov eax, dword [0xae6d50]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x47c], edi
mov dword [ebp - 0x428], 7
mov dword [ebp - 0x42c], ebx
mov word [ebp - 0x43c], ax
lea ecx, [ebp - 0x478]
push ecx
push 0x20019
push ebx
push 0xac8d98
push 0x80000002
mov dword [ebp - 4], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edx, dword [ebp - 0x478]
push edx
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, ebx
je 0xa6cdfe
push 1
push 0xac3064
mov esi, 0xac8dc4
mov ecx, 0xac8d98
call fcn.00a69a40
push 0xac8dd8
push edi
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 0x10
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6cddf
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6cddf
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6cdfe
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6cdf7
or eax, 4
push ebx
push eax
call fcn.00a52d10
push 1
push 0xac3064
mov esi, 0xac8e60
mov ecx, 0xac8eb0
call fcn.00a69a40
push 1
push 0xac8f34
mov esi, 0xac8f00
mov ecx, 0xac8d98
call fcn.00a69a40
add esp, 0x10
mov ecx, 0xac3064
mov ebx, 0xac8d98
mov edx, 0x80000002
lea esi, [ebp - 0x458]
call fcn.00a69920
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 1
call fcn.00a51560
xor ebx, ebx
mov byte [ebp - 4], bl
cmp dword [ebp - 0x444], 8
jb 0xa6ce74
mov edx, dword [ebp - 0x458]
push edx
call fcn.00a9e60d
add esp, 4
push 1
push 0xac8d98
mov edi, 0xac8dc4
mov esi, 0xac3064
call fcn.00a697e0
add esp, 8
test eax, eax
je 0xa6cf69
push 0xac8f50
push ecx
lea eax, [ebp - 0x43c]
push eax
push ecx
mov ecx, dword [ebp - 0x47c]
push 0xac8f58
push ecx
call fcn.00a64730
add esp, 0xc
push eax
call fcn.00a649f0
add esp, 0xc
push eax
call fcn.00a65080
mov esi, eax
mov edx, dword [esi]
mov eax, dword [edx + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6cef0
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6cef0
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6cf0f
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6cf08
or eax, 4
push ebx
push eax
call fcn.00a52d10
mov edx, dword [ebp - 0x47c]
push 0xac8fc8
push edx
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6cf4a
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6cf4a
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6cf69
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6cf62
or eax, 4
push ebx
push eax
call fcn.00a52d10
mov edx, 0xac9044
lea ecx, [ebp - 0x420]
call fcn.00a69630
lea edx, [ebp - 0x420]
push edx
push 0x80000002
call fcn.00a69680
add esp, 8
test eax, eax
je 0xa6cfeb
mov eax, dword [ebp - 0x47c]
push 0xac9080
push eax
call fcn.00a64730
mov esi, eax
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6cfcc
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6cfcc
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6cfeb
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6cfe4
or eax, 4
push ebx
push eax
call fcn.00a52d10
mov edx, 0xac90f8
lea ecx, [ebp - 0x420]
call fcn.00a69630
lea edx, [ebp - 0x420]
push edx
push 0x80000002
call fcn.00a69680
add esp, 8
test eax, eax
je 0xa6d06d
mov eax, dword [ebp - 0x47c]
push 0xac9140
push eax
call fcn.00a64730
mov esi, eax
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6d04e
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6d04e
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6d06d
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6d066
or eax, 4
push ebx
push eax
call fcn.00a52d10
lea edx, [ebp - 0x478]
push edx
push 0x20019
push ebx
push 0xac91c4
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, eax
mov eax, dword [ebp - 0x478]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, ebx
je 0xa6d144
push 1
push 0xac3064
mov esi, 0xac91f8
mov ecx, 0xac9208
call fcn.00a69a40
push 1
push 0xac9768
mov ecx, 0xac9208
call fcn.00a69a40
push 1
push 0xac3064
mov ecx, 0xac9260
call fcn.00a69a40
push 1
push 0xac9768
mov ecx, 0xac9260
call fcn.00a69a40
mov ecx, dword [ebp - 0x47c]
push 0xac92c0
push ecx
call fcn.00a64730
mov esi, eax
mov edx, dword [esi]
mov eax, dword [edx + 4]
add esp, 0x28
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6d125
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6d125
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6d144
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6d13d
or eax, 4
push ebx
push eax
call fcn.00a52d10
push 1
push 0xac3064
mov esi, 0xac9350
mov ecx, 0xac91c4
call fcn.00a69a40
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
add esp, 8
push ebx
lea edx, [ebp - 0x478]
push edx
push ebx
push 0xf013f
push ebx
push ebx
push ebx
push 0xac91c4
push 0x80000002
mov dword [ebp - 0x488], 0x738
mov dword [ebp - 0x490], ebx
call esi
cmp eax, ebx
jne 0xa6d1c5
mov ecx, dword [ebp - 0x478]
push 4
lea eax, [ebp - 0x488]
push eax
push 3
push ebx
push 0xac9368
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0xa6d1d4
mov edx, dword [ebp - 0x478]
push edx
jmp 0xa6d1d2
mov eax, dword [ebp - 0x478]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push eax
call edi
push ebx
lea ecx, [ebp - 0x478]
push ecx
push ebx
push 0xf013f
push ebx
push ebx
push ebx
push 0xac9380
push 0x80000002
call esi
cmp eax, ebx
jne 0xa6d220
mov eax, dword [ebp - 0x478]
push 4
lea edx, [ebp - 0x490]
push edx
push 3
push ebx
push 0xac9368
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0xa6d229
mov ecx, dword [ebp - 0x478]
push ecx
jmp 0xa6d227
mov edx, dword [ebp - 0x478]
push edx
call edi
push 2
push 0xacaaf4
mov esi, 0xacaaa0
mov ecx, 0xac91c4
call fcn.00a69a40
push 1
push 0xac3064
mov esi, 0xac93c8
mov ecx, 0xac93d0
call fcn.00a69a40
push 1
push 0xacaf64
mov esi, 0xac3064
mov ecx, 0xacaf80
call fcn.00a69a40
push 1
push 0xacb020
mov esi, 0xacafd0
mov ecx, 0xacb040
call fcn.00a69a40
push 1
push 0xac3064
mov esi, 0xacb0a4
mov ecx, 0xacb0d0
call fcn.00a69a40
push 1
push 0xacb124
mov esi, 0xac3064
mov ecx, 0xacb0d0
call fcn.00a69a40
push 1
push 0xacb188
mov esi, 0xacb138
mov ecx, 0xacb0d0
call fcn.00a69a40
push 1
push 0xac3064
mov esi, 0xacb1b0
mov ecx, 0xacb1d0
call fcn.00a69a40
add esp, 0x40
push 1
push 0xac3064
mov esi, 0xacb240
mov ecx, 0xacb290
call fcn.00a69a40
push 1
push 0xac3064
mov esi, 0xac9508
mov ecx, 0xac9558
call fcn.00a69a40
push 1
push 0xac3064
mov esi, 0xac9678
mov ecx, 0xac96c8
call fcn.00a69a40
push 1
push 0xac9208
mov edi, 0xac91f8
mov esi, 0xac3064
call fcn.00a697e0
add esp, 0x20
test eax, eax
je 0xa6d395
mov eax, dword [ebp - 0x47c]
push 0xac9788
push eax
call fcn.00a64730
mov esi, eax
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6d376
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6d376
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6d395
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6d38e
or eax, 4
push ebx
push eax
call fcn.00a52d10
push 1
push 0xac9208
mov edi, 0xac91f8
mov esi, 0xac9768
call fcn.00a697e0
add esp, 8
test eax, eax
je 0xa6d40c
mov edx, dword [ebp - 0x47c]
push 0xacab18
push edx
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6d3ed
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6d3ed
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6d40c
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6d405
or eax, 4
push ebx
push eax
call fcn.00a52d10
push 1
push 0xac9260
mov edi, 0xac91f8
mov esi, 0xac3064
call fcn.00a697e0
add esp, 8
test eax, eax
je 0xa6d483
mov edx, dword [ebp - 0x47c]
push 0xac9850
push edx
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6d464
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6d464
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6d483
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6d47c
or eax, 4
push ebx
push eax
call fcn.00a52d10
push 1
push 0xac9260
mov edi, 0xac91f8
mov esi, 0xac9768
call fcn.00a697e0
add esp, 8
test eax, eax
je 0xa6d4fa
mov edx, dword [ebp - 0x47c]
push 0xacabf8
push edx
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6d4db
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6d4db
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6d4fa
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6d4f3
or eax, 4
push ebx
push eax
call fcn.00a52d10
lea edx, [ebp - 0x478]
push edx
push 0x20019
push ebx
push 0xac9918
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, eax
mov eax, dword [ebp - 0x478]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, ebx
jne 0xa6d7a1
cmp dword [ebp - 0x428], 8
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x42c], ebx
jae 0xa6d549
lea eax, [ebp - 0x43c]
xor ecx, ecx
mov word [eax], cx
mov ecx, 0xac3064
mov ebx, 0xac9918
mov edx, 0x80000001
lea esi, [ebp - 0x474]
call fcn.00a69920
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 2
call fcn.00a51560
mov byte [ebp - 4], 0
cmp dword [ebp - 0x460], 8
jb 0xa6d594
mov edx, dword [ebp - 0x474]
push edx
call fcn.00a9e60d
add esp, 4
mov ebx, dword [ebp - 0x47c]
push 0xac8f50
push ecx
lea eax, [ebp - 0x43c]
push eax
push ecx
push 0xac9948
push ebx
call fcn.00a64730
add esp, 0xc
push eax
call fcn.00a649f0
add esp, 0xc
push eax
call fcn.00a65080
mov esi, eax
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6d5ef
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6d5ef
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0xa6d610
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0xa6d608
or eax, 4
push 0
push eax
call fcn.00a52d10
mov edx, 0xac9918
lea ecx, [ebp - 0x420]
call fcn.00a69630
lea edx, [ebp - 0x420]
push edx
push 0x80000001
call fcn.00a69680
add esp, 8
test eax, eax
je 0xa6d68e
push 0xac99c0
push ebx
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6d66d
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6d66d
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0xa6d68e
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0xa6d686
or eax, 4
push 0
push eax
call fcn.00a52d10
push 0x11
xor edx, edx
push 0xac9a28
lea ecx, [ebp - 0x458]
mov dword [ebp - 0x444], 7
mov dword [ebp - 0x448], 0
mov word [ebp - 0x458], dx
call fcn.00a51740
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 3
call fcn.00a61f30
cmp dword [ebp - 0x444], 8
mov edx, dword [ebp - 0x458]
jae 0xa6d6ec
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x420]
call fcn.00a69630
lea ecx, [ebp - 0x420]
push ecx
push 0x80000001
call fcn.00a69680
add esp, 8
test eax, eax
je 0xa6d783
push 0xac9a4c
push ecx
lea edx, [ebp - 0x43c]
push edx
push ecx
push 0xac9a7c
push ebx
call fcn.00a64730
add esp, 0xc
push eax
call fcn.00a649f0
add esp, 0xc
push eax
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6d764
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6d764
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0xa6d783
or edi, dword [ecx + 0xc]
cmp dword [ecx + 0x38], 0
jne 0xa6d77b
or edi, 4
push 0
push edi
call fcn.00a52d10
mov byte [ebp - 4], 0
cmp dword [ebp - 0x444], 8
jb 0xa6d79f
mov edx, dword [ebp - 0x458]
push edx
call fcn.00a9e60d
add esp, 4
xor ebx, ebx
lea eax, [ebp - 0x478]
push eax
push 0x20019
push ebx
push 0xac9ab4
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, dword [ebp - 0x478]
push ecx
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, ebx
je 0xa6d841
push 1
push 0xac3064
mov esi, 0xac9ae0
mov ecx, 0xac9ab4
call fcn.00a69a40
mov edx, dword [ebp - 0x47c]
push 0xac9af0
push edx
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 0x10
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6d822
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6d822
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6d841
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6d83a
or eax, 4
push ebx
push eax
call fcn.00a52d10
cmp dword [ebp - 0x428], 8
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x42c], ebx
jae 0xa6d85c
lea eax, [ebp - 0x43c]
xor edx, edx
mov word [eax], dx
mov ecx, 0xac3064
mov ebx, 0xac9ab4
mov edx, 0x80000002
lea esi, [ebp - 0x474]
call fcn.00a69920
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 4
call fcn.00a51560
xor ebx, ebx
mov byte [ebp - 4], bl
cmp dword [ebp - 0x460], 8
jb 0xa6d8a8
mov eax, dword [ebp - 0x474]
push eax
call fcn.00a9e60d
add esp, 4
push 1
push 0xac9ab4
mov edi, 0xac9ae0
mov esi, 0xac3064
call fcn.00a697e0
add esp, 8
test eax, eax
je 0xa6d99d
mov edx, dword [ebp - 0x47c]
push 0xac8f50
push ecx
lea ecx, [ebp - 0x43c]
push ecx
push ecx
push 0xac9b78
push edx
call fcn.00a64730
add esp, 0xc
push eax
call fcn.00a649f0
add esp, 0xc
push eax
call fcn.00a65080
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6d924
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6d924
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6d943
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6d93c
or eax, 4
push ebx
push eax
call fcn.00a52d10
mov edx, dword [ebp - 0x47c]
push 0xac9be0
push edx
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6d97e
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6d97e
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6d99d
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6d996
or eax, 4
push ebx
push eax
call fcn.00a52d10
push 1
push 0xac3064
mov esi, 0xac9c60
mov ecx, 0xac9cb0
call fcn.00a69a40
add esp, 8
lea edx, [ebp - 0x478]
push edx
push 0x20019
push ebx
push 0xac9d04
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, eax
mov eax, dword [ebp - 0x478]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, ebx
je 0xa6da9c
push 2
push 0xac3064
mov esi, 0xac9d38
mov ecx, 0xac9d88
call fcn.00a69a40
push 1
push 0xac3064
mov esi, 0xac91f8
mov ecx, 0xac9de0
call fcn.00a69a40
push 2
push 0xac3064
mov esi, 0xac9e38
mov ecx, 0xac9e88
call fcn.00a69a40
push 2
push 0xac3064
mov esi, 0xacace0
mov ecx, 0xacad38
call fcn.00a69a40
mov ecx, dword [ebp - 0x47c]
push 0xac9af0
push ecx
call fcn.00a64730
mov esi, eax
mov edx, dword [esi]
mov eax, dword [edx + 4]
add esp, 0x28
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6da7d
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6da7d
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6da9c
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6da95
or eax, 4
push ebx
push eax
call fcn.00a52d10
push 1
push 0xac3064
mov esi, 0xac9ee4
mov ecx, 0xac9d04
call fcn.00a69a40
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
add esp, 8
push ebx
lea edx, [ebp - 0x478]
push edx
push ebx
push 0xf013f
push ebx
push ebx
push ebx
push 0xac9d04
push 0x80000002
mov dword [ebp - 0x48c], 0x430
mov dword [ebp - 0x484], ebx
call esi
cmp eax, ebx
jne 0xa6db1d
mov ecx, dword [ebp - 0x478]
push 4
lea eax, [ebp - 0x48c]
push eax
push 3
push ebx
push 0xac9368
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
jne 0xa6db2c
mov edx, dword [ebp - 0x478]
push edx
jmp 0xa6db2a
mov eax, dword [ebp - 0x478]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push eax
call edi
push ebx
lea ecx, [ebp - 0x478]
push ecx
push ebx
push 0xf013f
push ebx
push ebx
push ebx
push 0xac9f30
push 0x80000002
call esi
cmp eax, ebx
jne 0xa6db78
mov eax, dword [ebp - 0x478]
push 4
lea edx, [ebp - 0x484]
push edx
push 3
push ebx
push 0xac9368
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0xa6db81
mov ecx, dword [ebp - 0x478]
push ecx
jmp 0xa6db7f
mov edx, dword [ebp - 0x478]
push edx
call edi
push 2
push 0xacaaf4
mov esi, 0xacade8
mov ecx, 0xac9d04
call fcn.00a69a40
push 2
push 0xac9d88
mov edi, 0xac9d38
mov esi, 0xac3064
call fcn.00a697e0
add esp, 0x10
test eax, eax
je 0xa6dc0e
mov eax, dword [ebp - 0x47c]
push 0xac9f78
push eax
call fcn.00a64730
mov esi, eax
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6dbef
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6dbef
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6dc0e
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6dc07
or eax, 4
push ebx
push eax
call fcn.00a52d10
push 1
push 0xac9de0
mov edi, 0xac91f8
mov esi, 0xac3064
call fcn.00a697e0
add esp, 8
test eax, eax
je 0xa6dc85
mov edx, dword [ebp - 0x47c]
push 0xaca028
push edx
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6dc66
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6dc66
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6dc85
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6dc7e
or eax, 4
push ebx
push eax
call fcn.00a52d10
push 2
push 0xac9e88
mov edi, 0xac9e38
mov esi, 0xac3064
call fcn.00a697e0
add esp, 8
test eax, eax
je 0xa6dcfc
mov edx, dword [ebp - 0x47c]
push 0xaca0d8
push edx
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6dcdd
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6dcdd
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6dcfc
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6dcf5
or eax, 4
push ebx
push eax
call fcn.00a52d10
push 2
push 0xacad38
mov edi, 0xacace0
mov esi, 0xac3064
call fcn.00a697e0
add esp, 8
test eax, eax
je 0xa6dd73
mov edx, dword [ebp - 0x47c]
push 0xaca0d8
push edx
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6dd54
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6dd54
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6dd73
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6dd6c
or eax, 4
push ebx
push eax
call fcn.00a52d10
push 2
push 0xac3064
mov esi, 0xacae40
mov ecx, 0xaca1d8
call fcn.00a69a40
push 1
push 0xacaf64
mov esi, 0xac3064
mov ecx, 0xacb318
call fcn.00a69a40
push 1
push 0xacb020
mov esi, 0xacafd0
mov ecx, 0xacb368
call fcn.00a69a40
push 1
push 0xac3064
mov esi, 0xacb0a4
mov ecx, 0xacb3d0
call fcn.00a69a40
push 1
push 0xacb124
mov esi, 0xac3064
mov ecx, 0xacb3d0
call fcn.00a69a40
push 1
push 0xacb188
mov esi, 0xacb138
mov ecx, 0xacb3d0
call fcn.00a69a40
push 1
push 0xac3064
mov esi, 0xacb428
mov ecx, 0xacb478
call fcn.00a69a40
push 1
push 0xac3064
mov esi, 0xacb1b0
mov ecx, 0xacb508
call fcn.00a69a40
add esp, 0x40
push 1
push 0xac3064
mov esi, 0xacb240
mov ecx, 0xacb578
call fcn.00a69a40
push 1
push 0xac3064
mov esi, 0xac9508
mov ecx, 0xaca228
call fcn.00a69a40
push 1
push 0xac3064
mov esi, 0xac9678
mov ecx, 0xaca288
call fcn.00a69a40
add esp, 0x18
lea edx, [ebp - 0x478]
push edx
push 0x20019
push ebx
push 0xaca328
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, eax
mov eax, dword [ebp - 0x478]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, ebx
jne 0xa6e114
cmp dword [ebp - 0x428], 8
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x42c], ebx
jae 0xa6deba
lea eax, [ebp - 0x43c]
xor ecx, ecx
mov word [eax], cx
mov ecx, 0xac3064
mov ebx, 0xaca328
mov edx, 0x80000001
lea esi, [ebp - 0x474]
call fcn.00a69920
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 5
call fcn.00a51560
mov byte [ebp - 4], 0
cmp dword [ebp - 0x460], 8
jb 0xa6df05
mov edx, dword [ebp - 0x474]
push edx
call fcn.00a9e60d
add esp, 4
mov ebx, dword [ebp - 0x47c]
push 0xac8f50
push ecx
lea eax, [ebp - 0x43c]
push eax
push ecx
push 0xaca358
push ebx
call fcn.00a64730
add esp, 0xc
push eax
call fcn.00a649f0
add esp, 0xc
push eax
call fcn.00a65080
mov esi, eax
mov ecx, dword [esi]
mov eax, dword [ecx + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6df60
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6df60
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0xa6df81
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0xa6df79
or eax, 4
push 0
push eax
call fcn.00a52d10
mov edx, 0xaca328
lea ecx, [ebp - 0x420]
call fcn.00a69630
lea edx, [ebp - 0x420]
push edx
push 0x80000001
call fcn.00a69680
add esp, 8
test eax, eax
je 0xa6dfff
push 0xaca3d0
push ebx
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6dfde
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6dfde
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0xa6dfff
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0xa6dff7
or eax, 4
push 0
push eax
call fcn.00a52d10
push 0x11
xor edx, edx
push 0xac9a28
lea ecx, [ebp - 0x458]
mov dword [ebp - 0x444], 7
mov dword [ebp - 0x448], 0
mov word [ebp - 0x458], dx
call fcn.00a51740
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 6
call fcn.00a61f30
cmp dword [ebp - 0x444], 8
mov edx, dword [ebp - 0x458]
jae 0xa6e05d
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x420]
call fcn.00a69630
lea ecx, [ebp - 0x420]
push ecx
push 0x80000001
call fcn.00a69680
add esp, 8
test eax, eax
je 0xa6e0f6
push 0xac9a4c
push ecx
lea edx, [ebp - 0x43c]
push edx
push ecx
push 0xac9a7c
push ebx
call fcn.00a64730
add esp, 0xc
push eax
call fcn.00a649f0
add esp, 0xc
push eax
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6e0d5
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6e0d5
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0xa6e0f6
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0xa6e0ee
or eax, 4
push 0
push eax
call fcn.00a52d10
mov byte [ebp - 4], 0
cmp dword [ebp - 0x444], 8
jb 0xa6e112
mov edx, dword [ebp - 0x458]
push edx
call fcn.00a9e60d
add esp, 4
xor ebx, ebx
lea eax, [ebp - 0x478]
push eax
push 0x20019
push ebx
push 0xaca438
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, dword [ebp - 0x478]
push ecx
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, ebx
je 0xa6e1b4
push 1
push 0xac3064
mov esi, 0xaca464
mov ecx, 0xaca438
call fcn.00a69a40
mov edx, dword [ebp - 0x47c]
push 0xaca478
push edx
call fcn.00a64730
mov esi, eax
mov eax, dword [esi]
mov eax, dword [eax + 4]
add esp, 0x10
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6e195
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6e195
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
cmp edi, ebx
je 0xa6e1b4
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], ebx
jne 0xa6e1ad
or eax, 4
push ebx
push eax
call fcn.00a52d10
cmp dword [ebp - 0x428], 8
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x42c], ebx
jae 0xa6e1cf
lea eax, [ebp - 0x43c]
xor edx, edx
mov word [eax], dx
mov ecx, 0xac3064
mov ebx, 0xaca438
mov edx, 0x80000002
lea esi, [ebp - 0x474]
call fcn.00a69920
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 7
call fcn.00a51560
mov byte [ebp - 4], 0
cmp dword [ebp - 0x460], 8
jb 0xa6e21a
mov eax, dword [ebp - 0x474]
push eax
call fcn.00a9e60d
add esp, 4
push 1
push 0xaca438
mov edi, 0xaca464
mov esi, 0xac3064
call fcn.00a697e0
add esp, 8
test eax, eax
je 0xa6e30d
mov ebx, dword [ebp - 0x47c]
push 0xac8f50
push ecx
lea ecx, [ebp - 0x43c]
push ecx
push ecx
push 0xaca500
push ebx
call fcn.00a64730
add esp, 0xc
push eax
call fcn.00a649f0
add esp, 0xc
push eax
call fcn.00a65080
mov esi, eax
mov edx, dword [esi]
mov eax, dword [edx + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6e296
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6e296
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0xa6e2b7
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0xa6e2af
or eax, 4
push 0
push eax
call fcn.00a52d10
push 0xacae90
push ebx
call fcn.00a64730
mov esi, eax
mov edx, dword [esi]
mov eax, dword [edx + 4]
add esp, 8
xor edi, edi
test byte [eax + esi + 0xc], 6
jne 0xa6e2ec
mov eax, dword [eax + esi + 0x38]
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
cmp eax, 0xffffffff
jne 0xa6e2ec
mov edi, 4
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
add ecx, esi
test edi, edi
je 0xa6e30d
mov eax, dword [ecx + 0xc]
or eax, edi
cmp dword [ecx + 0x38], 0
jne 0xa6e305
or eax, 4
push 0
push eax
call fcn.00a52d10
push 1
push 0xac3064
mov esi, 0xac8e60
mov ecx, 0xaca5e8
call fcn.00a69a40
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
add esp, 8
lea edx, [ebp - 0x478]
push edx
push 0x20019
push 0
push 0xaca63c
push 0x80000002
call ebx
mov esi, eax
mov eax, dword [ebp - 0x478]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
je 0xa6e389
push 1
push 0xac3064
mov esi, 0xac91f8
mov ecx, 0xaca670
call fcn.00a69a40
mov ecx, dword [ebp - 0x47c]
push 0xaca6c8
push ecx
call fcn.00a64730
push eax
call fcn.00a53070
add esp, 0x14
push 1
push 0xac3064
mov esi, 0xaca758
mov ecx, 0xaca63c
call fcn.00a69a40
lea edx, [ebp - 0x480]
push edx
mov ecx, 0xaca63c
mov dword [ebp - 0x480], 0x30
call fcn.00a69b30
add esp, 0xc
push 0xac9368
mov ecx, 0xaca780
mov edx, 0x80000002
call fcn.00a69ac0
add esp, 4
push 2
push 0xacaaf4
mov esi, 0xacaf10
mov ecx, 0xaca63c
call fcn.00a69a40
push 2
push 0xac3064
mov esi, 0xaca7c8
mov ecx, 0xaca810
call fcn.00a69a40
push 1
push 0xac3064
mov esi, 0xac9508
mov ecx, 0xaca860
call fcn.00a69a40
push 1
push 0xaca670
mov edi, 0xac91f8
mov esi, 0xac3064
call fcn.00a697e0
add esp, 0x20
test eax, eax
je 0xa6e44d
mov eax, dword [ebp - 0x47c]
push 0xaca8c0
push eax
call fcn.00a64730
push eax
call fcn.00a53070
add esp, 0xc
lea ecx, [ebp - 0x478]
push ecx
push 0x20019
push 0
push 0xaca990
push 0x80000001
call ebx
mov edx, dword [ebp - 0x478]
push edx
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0xa6e628
cmp dword [ebp - 0x428], 8
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x42c], esi
jae 0xa6e499
lea eax, [ebp - 0x43c]
xor ecx, ecx
mov word [eax], cx
mov ecx, 0xac3064
mov ebx, 0xaca990
mov edx, 0x80000001
lea esi, [ebp - 0x474]
call fcn.00a69920
mov ebx, 8
push eax
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], bl
call fcn.00a51560
mov byte [ebp - 4], 0
cmp dword [ebp - 0x460], ebx
jb 0xa6e4e7
mov edx, dword [ebp - 0x474]
push edx
call fcn.00a9e60d
add esp, 4
mov esi, dword [ebp - 0x47c]
push 0xac8f50
push ecx
lea eax, [ebp - 0x43c]
push eax
push ecx
push 0xaca9c0
push esi
call fcn.00a64730
add esp, 0xc
push eax
call fcn.00a649f0
add esp, 0xc
push eax
call fcn.00a65080
push eax
call fcn.00a53070
add esp, 0xc
mov edx, 0xaca990
lea ecx, [ebp - 0x420]
call fcn.00a69630
lea ecx, [ebp - 0x420]
push ecx
push 0x80000001
call fcn.00a69680
add esp, 8
test eax, eax
je 0xa6e55d
push 0xacaa38
push esi
call fcn.00a64730
push eax
call fcn.00a53070
add esp, 0xc
push 0x11
xor edx, edx
push 0xac9a28
lea ecx, [ebp - 0x458]
mov dword [ebp - 0x444], 7
mov dword [ebp - 0x448], 0
mov word [ebp - 0x458], dx
call fcn.00a51740
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 9
call fcn.00a61f30
mov edx, dword [ebp - 0x458]
cmp dword [ebp - 0x444], ebx
jae 0xa6e5ba
lea edx, [ebp - 0x458]
lea ecx, [ebp - 0x420]
call fcn.00a69630
lea ecx, [ebp - 0x420]
push ecx
push 0x80000001
call fcn.00a69680
add esp, 8
test eax, eax
je 0xa6e611
push 0xac9a4c
push ecx
lea edx, [ebp - 0x43c]
push edx
push ecx
push 0xac9a7c
push esi
call fcn.00a64730
add esp, 0xc
push eax
call fcn.00a649f0
add esp, 0xc
push eax
call fcn.00a64730
push eax
call fcn.00a53070
add esp, 0xc
cmp dword [ebp - 0x444], ebx
jb 0xa6e628
mov eax, dword [ebp - 0x458]
push eax
call fcn.00a9e60d
add esp, 4
cmp dword [ebp - 0x428], 8
jb 0xa6e640
mov ecx, dword [ebp - 0x43c]
push ecx
call fcn.00a9e60d
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00a9e488
mov esp, ebp
pop ebp
ret