Function at 0x68be8c
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x1b
push 0
push 0
dec ecx
jne 0x68be94
push ecx
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x693cbd
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 8]
push eax
push 0xf003f
push 0
mov eax, dword [0x6e310c]
call fcn.0040508c
push eax
mov eax, dword [0x6e3100]
push eax
call sub.advapi32.dll_RegOpenKeyExA_1
test eax, eax
jne 0x693c55
push 1
call sub.kernel32.dll_SetErrorMode
mov dword [ebp - 0x24], eax
mov eax, 4
call fcn.00402b48
mov esi, eax
mov eax, 4
call fcn.00402b48
mov ebx, eax
mov dword [esi], 4
mov dword [ebx], 4
mov byte [ebp - 0x19], 1
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693ccc
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68bf33
mov eax, dword [0x6e30cc]
cmp eax, dword [ebp - 0xc]
jne 0x68bf33
mov byte [ebp - 0x19], 0
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693cd4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68bf57
mov eax, dword [0x6e6724]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693ce4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68bf7b
mov eax, dword [0x6e33c4]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693cf4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68bf9f
mov eax, dword [0x6e3e7c]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693d04
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68bfc3
mov eax, dword [0x6e4670]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693d14
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68bfe7
mov eax, dword [0x6e4db0]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693d20
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c00e
mov edx, dword [ebp - 0xc]
mov eax, dword [0x7efcf8]
call fcn.0046cb04
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693d28
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c035
mov edx, dword [ebp - 0xc]
mov eax, dword [0x7efcf8]
call fcn.0046cb28
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693d30
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c059
mov eax, dword [0x6e5614]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693d3c
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c07d
mov eax, dword [0x6e5a7c]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693d48
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c0a1
mov eax, dword [0x6e4d94]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693d58
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c0c5
mov eax, dword [0x6e4cdc]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693d68
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c0e9
mov eax, dword [0x6e5f98]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693d78
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c10d
mov eax, dword [0x6e6410]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693d88
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c131
mov eax, dword [0x6e5c90]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693d98
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c155
mov eax, dword [0x6e4710]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693da8
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c179
mov eax, dword [0x6e3e50]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693dbc
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c19d
mov eax, dword [0x6e59b4]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693dcc
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c1c1
mov eax, dword [0x6e5ddc]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693dd8
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c1e5
mov eax, dword [0x6e64b4]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693de8
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c209
mov eax, dword [0x6e334c]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693df8
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c22d
mov eax, dword [0x6e4f04]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e04
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c251
mov eax, dword [0x6e6740]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e10
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c275
mov eax, dword [0x6e3278]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e20
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c299
mov eax, dword [0x6e4c50]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e28
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c2bd
mov eax, dword [0x6e5124]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e30
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c2e6
mov eax, dword [ebp - 0xc]
cmp al, 1
jne 0x68c2e6
mov eax, dword [0x6e4a58]
mov byte [eax], 1
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e38
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c316
mov eax, dword [0x6e4220]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
mov eax, dword [0x6e3b70]
mov eax, dword [eax]
call fcn.0052b4b0
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e44
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c33a
mov eax, dword [0x6e3934]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e54
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c35e
mov eax, dword [0x6e3d78]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e60
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c382
mov eax, dword [0x6e3bb8]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e70
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c3a6
mov eax, dword [0x6e3fc8]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e7c
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c3ca
mov eax, dword [0x6e323c]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e88
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c3ee
mov eax, dword [0x6e31a0]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693e94
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c413
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e62b4]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693eb0
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c437
mov eax, dword [0x6e3a4c]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693ebc
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c45b
mov eax, dword [0x6e3e54]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693ec8
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c47f
mov eax, dword [0x6e66d8]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693ed4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c4a3
mov eax, dword [0x6e6634]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693ee0
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c4c7
mov eax, dword [0x6e42f0]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693eec
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c4eb
mov eax, dword [0x6e3dc0]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693efc
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c50f
mov eax, dword [0x6e5630]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693f0c
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c533
mov eax, dword [0x6e408c]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693f18
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c557
mov eax, dword [0x6e3ba0]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693f28
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c57b
mov eax, dword [0x6e53f0]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693f34
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c59f
mov eax, dword [0x6e32c8]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693f40
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c5c4
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e62e8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693f54
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c5e9
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e5efc]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693f60
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c612
mov eax, dword [0x6e4838]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.0046cb50
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693f68
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c63b
mov eax, dword [0x6e4838]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
call fcn.0046cb74
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693f74
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c664
mov eax, dword [ebp - 0xc]
cmp al, 1
jne 0x68c664
mov eax, dword [0x6e57e4]
mov byte [eax], 1
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693f80
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c68d
mov eax, dword [ebp - 0xc]
cmp al, 1
jne 0x68c68d
mov eax, dword [0x6e4a94]
mov byte [eax], 1
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693f8c
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c6b1
mov eax, dword [0x6e500c]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693f94
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c6d6
mov eax, dword [0x6e4de8]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0x34], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693fa4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c6f8
mov eax, dword [ebp - 0xc]
call fcn.006cdec4
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693fac
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c71c
mov eax, dword [0x6e64c8]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693fbc
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c741
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e3654]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693fd0
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c766
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e4dbc]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693fdc
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c7b5
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e5238]
mov byte [edx], al
xor eax, eax
mov dword [ebp - 0xc], eax
mov edi, dword [0x6e49b8]
mov eax, dword [edi]
test eax, eax
je 0x68c7a9
mov edx, dword [0x6e5238]
mov dl, byte [edx]
call fcn.0047f9bc
inc dword [ebp - 0xc]
add edi, 4
cmp dword [ebp - 0xc], 6
jne 0x68c796
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693fec
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c7da
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e382c]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x693ff8
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c7fe
mov eax, dword [0x6e38a0]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694008
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c823
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e55f4]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x69401c
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c848
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e5aac]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694030
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c86d
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e47e8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694040
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c892
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e3990]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694054
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c8b7
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e5d38]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x69406c
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c8dc
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e5f18]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694080
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c901
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e6444]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694094
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c926
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e598c]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6940a8
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c94a
mov eax, dword [0x6e4410]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6940bc
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68c9da
mov eax, dword [ebp - 0xc]
mov edx, dword [0x7efcf8]
mov edx, dword [edx + 0x3fc]
mov byte [edx + 0x69], al
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e4838]
mov edx, dword [edx]
mov edx, dword [edx + 0x308]
mov byte [edx + 0x69], al
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e4838]
mov edx, dword [edx]
mov edx, dword [edx + 0x318]
mov byte [edx + 0x69], al
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e3b70]
mov edx, dword [edx]
mov edx, dword [edx + 0x324]
mov byte [edx + 0x69], al
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e5490]
mov edx, dword [edx]
mov edx, dword [edx + 0x30c]
mov byte [edx + 0x69], al
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e5490]
mov edx, dword [edx]
mov edx, dword [edx + 0x310]
mov byte [edx + 0x69], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6940d0
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68ca64
mov eax, dword [0x7efcf8]
mov eax, dword [eax + 0x3fc]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0x40], edx
mov eax, dword [0x6e4838]
mov eax, dword [eax]
mov eax, dword [eax + 0x308]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0x40], edx
mov eax, dword [0x6e4838]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0x40], edx
mov eax, dword [0x6e3b70]
mov eax, dword [eax]
mov eax, dword [eax + 0x324]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0x40], edx
mov eax, dword [0x6e5490]
mov eax, dword [eax]
mov eax, dword [eax + 0x30c]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0x40], edx
mov eax, dword [0x6e5490]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0x40], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6940e0
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68ca89
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e5474]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6940f4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68caae
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e6174]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6940f4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cad3
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e6174]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694104
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68caf8
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e56ec]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694114
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cb1d
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e4bd4]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x69412c
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cb42
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e4ba8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694144
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cb67
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e50bc]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694158
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cb8c
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e3704]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694168
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cbb1
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e3ab8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694180
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cbd5
mov eax, dword [0x6e56b4]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694190
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cbf9
mov eax, dword [0x6e3240]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6941a0
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cc1e
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e4ce4]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6941b0
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cc43
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e4c28]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6941c4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cc68
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e46bc]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6941d4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cc8d
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e41dc]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6941e0
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68ccb2
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e49b0]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6941f4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68ccd7
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e502c]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694204
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68ccfc
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e60a8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694218
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cd20
mov eax, dword [0x6e5a1c]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694224
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cd45
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e4684]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694234
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cd6a
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e4a24]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694248
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cd8f
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e55c8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694258
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cdb4
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e596c]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694268
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cdd9
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e4acc]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694278
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cdfe
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e5398]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694288
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68ce23
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e6564]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694294
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68ce48
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e52d8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6942a4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68ce6d
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e6714]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6942b8
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68ce92
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e3994]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6942c8
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68ceb7
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e5cd0]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6942dc
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cedc
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e63e0]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6942f0
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cf01
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e58b8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694300
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cf26
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e3828]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694310
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cf4b
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e49f8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694320
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cf70
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e60ec]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x69432c
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cf95
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e44c8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694338
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cfba
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e3abc]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x69434c
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68cfdf
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e658c]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694360
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d004
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e654c]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694374
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d029
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e628c]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694384
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d04e
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e423c]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694398
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d073
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e3ed8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6943a4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d098
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e482c]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6943b4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d0bd
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e3504]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6943c4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d0e2
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e3820]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6943d4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d107
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e43c8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6943e4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d12c
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e35f8]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x6943f4
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d151
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e5068]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694408
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d176
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e6408]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694418
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d19a
mov eax, dword [0x6e55c0]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x69442c
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d1bf
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e3cbc]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694440
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d1e4
mov eax, dword [ebp - 0xc]
mov edx, dword [0x6e4634]
mov byte [edx], al
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694450
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d208
mov eax, dword [0x6e3bb4]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694460
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d22c
mov eax, dword [0x6e4d50]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push 0
push 0x694470
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x68d250
call fcn.00600a38
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x693cc4
lea eax, [ebp - 0xdc]
mov edx, 6
call fcn.00404bc4
lea eax, [ebp - 0xc4]
mov edx, 4
call fcn.004052f0
lea eax, [ebp - 0xb4]
mov edx, 0x14
call fcn.00404bc4
lea eax, [ebp - 0x60]
mov edx, 7
call fcn.00404bc4
lea eax, [ebp - 0x28]
call fcn.00406cb4
lea eax, [ebp - 0x18]
call fcn.004052d8
lea eax, [ebp - 0x14]
call fcn.00404ba0
ret