Function at 0x696888
Capabilities:
Persist via netsh registry key
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x14
push 0
push 0
dec ecx
jne 0x696890
push ebx
push esi
push edi
mov edi, eax
lea ebx, [ebp - 8]
lea esi, [ebp - 4]
xor eax, eax
push ebp
push 0x69cd1b
push dword fs:[eax]
mov dword fs:[eax], esp
push ebx
push esi
push 0
push 0xf003f
push 0
push 0
push 0
mov eax, dword [0x6e310c]
call fcn.0040508c
push eax
mov eax, dword [0x6e3100]
push eax
call sub.advapi32.dll_RegCreateKeyExA
test eax, eax
jne 0x69ccd3
mov eax, dword [0x6e30cc]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cd2c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e30d0]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cd34
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e30e4]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69cd40
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e33c4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cd4c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x7efcf8]
cmp byte [eax + 0x22b], 2
jne 0x69697a
mov eax, dword [0x6e4318]
mov eax, dword [eax]
mov dword [ebx], eax
jmp 0x696984
mov eax, dword [0x7efcf8]
mov eax, dword [eax + 0x40]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cd5c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x7efcf8]
cmp byte [eax + 0x22b], 2
jne 0x6969b1
mov eax, dword [0x6e4740]
mov eax, dword [eax]
mov dword [ebx], eax
jmp 0x6969bb
mov eax, dword [0x7efcf8]
mov eax, dword [eax + 0x44]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cd64
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x7efcf8]
cmp byte [eax + 0x22b], 2
jne 0x6969e8
mov eax, dword [0x6e3ac4]
mov eax, dword [eax]
mov dword [ebx], eax
jmp 0x6969f2
mov eax, dword [0x7efcf8]
mov eax, dword [eax + 0x48]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cd6c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x7efcf8]
cmp byte [eax + 0x22b], 2
jne 0x696a1f
mov eax, dword [0x6e3a10]
mov eax, dword [eax]
mov dword [ebx], eax
jmp 0x696a29
mov eax, dword [0x7efcf8]
mov eax, dword [eax + 0x4c]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cd78
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x7efcf8]
cmp byte [eax + 0x22b], 2
jne 0x696a53
mov dword [ebx], 1
jmp 0x696a57
xor eax, eax
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cd84
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4838]
mov eax, dword [eax]
cmp byte [eax + 0x57], 1
jne 0x696a9c
mov eax, dword [0x6e4838]
mov eax, dword [eax]
mov eax, dword [eax + 0x40]
mov edx, dword [0x6e59b4]
mov dword [edx], eax
mov eax, dword [0x6e4838]
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov edx, dword [0x6e5ddc]
mov dword [edx], eax
mov eax, dword [0x6e528c]
cmp byte [eax], 0
jne 0x696ab1
mov eax, dword [0x6e59b4]
mov eax, dword [eax]
mov dword [ebx], eax
jmp 0x696aba
mov eax, dword [0x6e4338]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cd90
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e528c]
cmp byte [eax], 0
jne 0x696ae3
mov eax, dword [0x6e5ddc]
mov eax, dword [eax]
mov dword [ebx], eax
jmp 0x696aed
mov eax, dword [0x6e4338]
mov eax, dword [eax + 4]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cda0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e528c]
cmp byte [eax], 0
jne 0x696b19
mov eax, dword [0x6e4838]
mov eax, dword [eax]
mov eax, dword [eax + 0x48]
mov dword [ebx], eax
jmp 0x696b23
mov eax, dword [0x6e4338]
mov eax, dword [eax + 8]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cdac
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e528c]
cmp byte [eax], 0
jne 0x696b4f
mov eax, dword [0x6e4838]
mov eax, dword [eax]
mov eax, dword [eax + 0x4c]
mov dword [ebx], eax
jmp 0x696b59
mov eax, dword [0x6e4338]
mov eax, dword [eax + 0xc]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cdb4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e64b4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cdc0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e334c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cdd0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4f04]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cde0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6740]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cdec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3278]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cdf8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3b70]
mov eax, dword [eax]
cmp byte [eax + 0x57], 1
jne 0x696c2f
mov eax, dword [0x6e3b70]
mov eax, dword [eax]
mov eax, dword [eax + 0x40]
mov edx, dword [0x6e4c50]
mov dword [edx], eax
mov eax, dword [0x6e3b70]
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov edx, dword [0x6e5124]
mov dword [edx], eax
mov eax, dword [0x6e4c50]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ce08
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5124]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ce10
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3b70]
mov eax, dword [eax]
movzx eax, byte [eax + 0x57]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ce18
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e601c]
cmp dword [eax], 0xffffffff
jne 0x696c9f
mov eax, dword [0x6e4220]
mov eax, dword [eax]
mov dword [ebx], eax
jmp 0x696ca8
mov eax, dword [0x6e601c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ce20
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3934]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ce2c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3d78]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ce3c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3bb8]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ce48
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3fc8]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ce58
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e323c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ce64
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e31a0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ce70
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e62b4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ce7c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3a4c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ce98
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3e54]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cea4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e66d8]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ceb0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6634]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cebc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e42f0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cec8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3dc0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ced4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5630]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cee4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e408c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cef4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3ba0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cf00
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e53f0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cf10
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e32c8]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cf1c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e62e8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cf28
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5efc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cf3c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5614]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cf48
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5a7c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cf54
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4d94]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cf60
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4cdc]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cf70
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5f98]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cf80
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6410]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cf90
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5c90]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cfa0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4710]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cfb0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3e50]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cfc0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4838]
mov eax, dword [eax]
movzx eax, byte [eax + 0x57]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cfd4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3e98]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cfe0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e500c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cfec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4de8]
mov eax, dword [eax + 0x34]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69cff4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4b14]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d004
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e64c8]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d00c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3654]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d01c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4dbc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d030
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5238]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d03c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e382c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d04c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e38a0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d058
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e55f4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d068
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5aac]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d07c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e47e8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d090
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3990]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d0a0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5d38]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d0b4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5f18]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d0cc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6444]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d0e0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e598c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d0f4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4410]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d108
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x7efcf8]
mov eax, dword [eax + 0x3fc]
movzx eax, byte [eax + 0x69]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d11c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x7efcf8]
mov eax, dword [eax + 0x3fc]
mov eax, dword [eax + 0x40]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d130
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5474]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d140
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6174]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d154
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e56ec]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d164
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4ba8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d174
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4bd4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d18c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e50bc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d1a4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3704]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d1b8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3ab8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d1c8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e56b4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d1e0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3240]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d1f0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4ce4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d200
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4c28]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d210
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e46bc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d224
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5328]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d234
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e41dc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d244
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e49b0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d250
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e502c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d264
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e60a8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d274
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5a1c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d288
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4684]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d294
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4a24]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d2a4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e55c8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d2b8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e596c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d2c8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4acc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d2d8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5398]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d2e8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6564]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d2f8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e52d8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d304
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6714]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d314
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3994]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d328
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5cd0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d338
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e63e0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d34c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e58b8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d360
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3828]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d370
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e49f8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d380
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e60ec]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d390
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e44c8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d39c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3abc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d3a8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e658c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d3bc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e654c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d3d0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e628c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d3e4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e423c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d3f4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3ed8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d408
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e482c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d414
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3504]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d424
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3820]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d434
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e43c8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d444
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e35f8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d454
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5068]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d464
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6408]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d478
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e55c0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d488
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3cbc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d49c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4634]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d4b0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3bb4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d4c0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4d50]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d4d0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e481c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d4e0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e567c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d4ec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3284]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d4fc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e37a8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d50c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4d98]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d518
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e32c4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d528
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6678]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d534
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4e9c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d544
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e58a8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d558
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5620]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d564
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5d3c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d570
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4440]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d580
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3fa0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d590
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e37d8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d5a0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3ee4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d5ac
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e31a4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d5bc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e64ec]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d5c8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3d3c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d5d8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4274]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d5e8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e612c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d5f4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e37ec]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d604
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4074]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d614
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6348]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d624
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4e34]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d634
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e42e0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d644
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5ac4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d650
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e489c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d660
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3d0c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d670
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5fe0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d680
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3778]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d690
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4c90]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d6a0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3df4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d6b4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5848]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d6c4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e414c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d6d4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5ef8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d6e8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5bf8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d6f8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e40b8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d708
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3658]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d71c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4e0c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d730
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4104]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d740
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4fb0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d754
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3f40]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d768
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4b44]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d77c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5684]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d78c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4b90]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d798
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4360]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d7a8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4158]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d7b4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e41b8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d7c0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3f88]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d7d0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e64b8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d7dc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5694]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d7ec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e37f4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d7f8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e34f4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d808
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4830]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d818
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e52d4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d828
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e352c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d838
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3c98]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d848
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6320]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d854
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4b60]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d864
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6500]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d878
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4248]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d884
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4f14]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d894
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4a2c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d8a0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5444]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d8b0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5f64]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d8c0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3a0c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d8cc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e417c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d8dc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5884]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d8ec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e33e4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d900
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5e24]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d914
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6340]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d928
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e61e0]
cmp byte [eax], 0
jne 0x6981d1
mov eax, dword [0x6e46d8]
mov eax, dword [eax]
push eax
push 0x69d940
lea edx, [ebp - 0x30]
mov eax, dword [0x6e66d4]
call fcn.00409b74
push dword [ebp - 0x30]
push 0x69d964
lea eax, [ebp - 0x2c]
mov edx, 3
call fcn.00404f4c
mov edx, dword [ebp - 0x2c]
mov ecx, 0x69d978
mov eax, 0x80000001
call fcn.005f4cf0
call fcn.0040c86c
call fcn.00403118
sub eax, 0x7d
push eax
push 0x69d940
lea edx, [ebp - 0x38]
mov eax, dword [0x6e66d4]
call fcn.00409b74
push dword [ebp - 0x38]
push 0x69d964
lea eax, [ebp - 0x34]
mov edx, 3
call fcn.00404f4c
mov edx, dword [ebp - 0x34]
mov ecx, 0x69d988
mov eax, 0x80000001
call fcn.005f4cf0
mov eax, dword [0x6e6048]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d990
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e57f8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d9a4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3fd0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d9b8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4984]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d9c8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5f8c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d9dc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e390c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69d9ec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5b24]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69da00
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e41c0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69da10
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5bcc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69da20
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4834]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69da30
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5088]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69da3c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4d34]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69da48
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3b68]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69da54
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e59b0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69da64
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4ddc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69da78
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3888]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69da88
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5910]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69da98
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4a8c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69daac
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3580]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dabc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4610]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dad0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6704]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dae4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3e8c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69daf8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5b08]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69db08
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4fe8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69db1c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6034]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69db30
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3b44]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69db44
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4820]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69db58
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3350]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69db68
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5adc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69db78
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6594]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69db88
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5130]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69db94
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4bd8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dba0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5780]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dbb0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3ddc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dbc0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e54e0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dbd0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4aa8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dbe4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3db4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dbf4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3594]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dc04
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e54f4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dc14
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4408]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dc28
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5660]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dc38
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3320]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dc50
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5288]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dc60
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6478]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dc68
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4fb4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dc74
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e61a8]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dc7c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3358]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dc88
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5f38]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dc98
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e46b0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dca8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3b34]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dcbc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e40bc]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dccc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3408]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dcdc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e62a0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dcec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e63b0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dcfc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e61c0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dd10
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5338]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dd20
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3530]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dd2c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3400]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dd3c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e61a0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dd4c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3b48]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dd5c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5ef4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dd6c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5f30]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dd7c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e582c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dd88
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4580]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dd98
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e66dc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dda8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e61e4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ddb4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e38c4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ddc4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5820]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ddd0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5a38]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dde4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e640c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ddf4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3164]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69de04
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4864]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69de14
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3a5c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69de28
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4888]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69de38
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5840]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69de48
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e43a0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69de5c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6184]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69de70
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e41b4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69de80
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3560]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69de94
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4b0c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dea8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e48d0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dec0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5e34]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ded0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4924]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dee4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5e88]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69def4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4f0c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69df08
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4a20]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69df1c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4914]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69df30
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5e8c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69df40
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e398c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69df54
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5994]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69df64
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5434]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69df70
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e341c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69df7c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6140]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69df8c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3808]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69df98
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4210]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dfac
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4f6c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dfc0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6474]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dfd4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3588]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dfe8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5b84]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69dff4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5610]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e000
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e34fc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e014
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3a50]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e024
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4ea0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e038
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e41e4]
mov eax, dword [eax]
call fcn.0040a6a8
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e044
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4b58]
mov eax, dword [eax]
call fcn.0040a6a8
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e054
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e491c]
mov eax, dword [eax]
call fcn.0040a6a8
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e064
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e40e0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e074
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5c34]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e084
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e41a0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e094
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6688]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e0a4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4554]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e0b0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e485c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e0c0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4974]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e0d0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4c10]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e0e0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6124]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e0f0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e354c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e0fc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3aa4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e108
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e33e0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e118
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e607c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e12c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3d14]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e13c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5738]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e14c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e63bc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e158
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3750]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e164
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e529c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e174
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e65a0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e188
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e59e4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e194
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5114]
mov eax, dword [eax]
call fcn.0042de98
test al, 1
je 0x699072
mov dword [ebx], 1
jmp 0x699076
xor eax, eax
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e1a4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5114]
mov eax, dword [eax]
call fcn.0042de98
test al, 2
je 0x6990a2
mov dword [ebx], 1
jmp 0x6990a6
xor eax, eax
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e1b0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e55a0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e1c0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5ce0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e1cc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4310]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e1dc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3aa8]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e1ec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e504c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e200
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5114]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e218
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5114]
mov eax, dword [eax]
call fcn.0042de5c
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e234
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5114]
mov eax, dword [eax]
call fcn.0042df00
and eax, 0xff
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e24c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5144]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e264
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e33f4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e274
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e468c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e288
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e63dc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e298
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3fe4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e2b0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e583c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e2c0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e45bc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e2cc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e60a4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e2dc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e460c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e2ec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5f88]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e2fc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5c88]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e308
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4dd0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e314
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5ecc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e320
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3774]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e32c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5f68]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e338
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4414]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e344
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3360]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e350
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5b1c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e35c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6700]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e370
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4678]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e384
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3f18]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e398
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e581c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e3ac
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3e20]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e3bc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e41d0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e3c8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e345c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e3d8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5b48]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e3e4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6128]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e3f4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e46dc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e404
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e42dc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e414
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e538c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e424
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3b58]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e434
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6548]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e44c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3b84]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e45c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5ca4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e46c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e577c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e47c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e53d8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e488
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5fd0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e498
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4444]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e4a8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5ab0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e4bc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e33c0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e4cc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4f30]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e4dc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3fcc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e4ec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3770]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e4fc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e32b0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e510
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e47ec]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e520
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e52bc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e530
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e37d4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e540
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4d0c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e554
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e494c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e564
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3bc0]
mov eax, dword [eax]
mov edx, dword [0x6e64cc]
mov eax, dword [edx + eax*4]
movzx eax, byte [eax + 0x38]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e578
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4398]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e584
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4c5c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e590
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4bbc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e5a0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3a18]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e5b0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4320]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e5bc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4120]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e5c8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3b4c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e5d4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e37b4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e5e0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5df0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e5f0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4f44]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e600
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e57f0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e60c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5a4c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e618
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5394]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e624
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5b98]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e630
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e463c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e63c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e439c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e64c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4e70]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e65c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4214]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e66c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e377c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e680
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e54b8]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e690
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e63ac]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e6a0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, edi
call fcn.006668f4
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e6ac
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, edi
call fcn.00666904
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e6b8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, edi
call fcn.006668d4
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e6c4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, edi
call fcn.006668e4
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e6d0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6718]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e6dc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e36b0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e6e8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6268]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e6f4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e49fc]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e700
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4e40]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e70c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3d24]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e714
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4788]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e720
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6258]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e730
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5730]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e740
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5824]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e74c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6540]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e760
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4488]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e770
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e47f4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e784
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4edc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e798
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e48c0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e7a8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3ce4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e7bc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e65f8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e7d0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3c88]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e7e4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4364]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e7f8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5a0c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e808
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e39c0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e814
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3ea0]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e828
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6490]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e838
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5f40]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e84c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e557c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e860
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4e5c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e874
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e50c0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e884
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3d10]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e898
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6134]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e8a8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5d34]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e8b8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e632c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e8cc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e56c0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e8e0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4f74]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e8f4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5110]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e90c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5fa0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e918
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5f14]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e924
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3174]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e930
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4be8]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e93c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4680]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e94c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3328]
mov eax, dword [eax]
call fcn.0042df00
and eax, 0xff
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e95c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3ea0]
mov eax, dword [eax]
call fcn.0042df00
and eax, 0xff
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e970
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3dbc]
mov eax, dword [eax]
call fcn.0042df00
and eax, 0xff
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e984
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3328]
mov eax, dword [eax]
call fcn.0042de5c
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e994
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3fdc]
mov eax, dword [eax]
call fcn.0042de5c
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e9a4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3ea0]
mov eax, dword [eax]
call fcn.0042de5c
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e9b4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3dbc]
mov eax, dword [eax]
call fcn.0042ddb8
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e9c4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3740]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e9d4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5c20]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e9e8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4504]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69e9fc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4ea4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ea0c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4838]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
movzx eax, byte [eax + 0x292]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ea20
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4838]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
movzx eax, byte [eax + 0x28f]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ea30
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4838]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
movzx eax, byte [eax + 0x290]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ea3c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4838]
mov eax, dword [eax]
mov eax, dword [eax + 0x300]
movzx eax, byte [eax + 0x291]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ea4c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
xor eax, eax
mov dword [ebx], eax
mov eax, dword [0x6e3dbc]
mov eax, dword [eax]
call fcn.0042de98
test al, 1
je 0x69a126
inc dword [ebx]
mov eax, dword [0x6e3dbc]
mov eax, dword [eax]
call fcn.0042de98
test al, 2
je 0x69a139
add dword [ebx], 2
push 4
push ebx
push 4
push 0
push 0x69ea60
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
xor eax, eax
mov dword [ebx], eax
mov eax, dword [0x6e3328]
mov eax, dword [eax]
call fcn.0042de98
test al, 1
je 0x69a163
inc dword [ebx]
mov eax, dword [0x6e3328]
mov eax, dword [eax]
call fcn.0042de98
test al, 2
je 0x69a176
add dword [ebx], 2
push 4
push ebx
push 4
push 0
push 0x69ea70
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
xor eax, eax
mov dword [ebx], eax
mov eax, dword [0x6e3fdc]
mov eax, dword [eax]
call fcn.0042de98
test al, 1
je 0x69a1a0
inc dword [ebx]
mov eax, dword [0x6e3fdc]
mov eax, dword [eax]
call fcn.0042de98
test al, 2
je 0x69a1b3
add dword [ebx], 2
push 4
push ebx
push 4
push 0
push 0x69ea80
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
xor eax, eax
mov dword [ebx], eax
mov eax, dword [0x6e3ea0]
mov eax, dword [eax]
call fcn.0042de98
test al, 1
je 0x69a1dd
inc dword [ebx]
mov eax, dword [0x6e3ea0]
mov eax, dword [eax]
call fcn.0042de98
test al, 2
je 0x69a1f0
add dword [ebx], 2
push 4
push ebx
push 4
push 0
push 0x69ea94
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e39d0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eaa4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e53e8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eab4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3fe0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eac8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e578c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ead8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3484]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eae8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5700]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eaf8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4bb8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eb08
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e52fc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eb1c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3d84]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eb2c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5b50]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eb3c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4780]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eb4c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3edc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eb5c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5108]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eb70
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3458]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eb80
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4ff8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eb94
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e46e8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eba8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e58e0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ebb8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4714]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ebc8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3334]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ebdc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e32cc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ebec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5cfc]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ec00
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4084]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ec10
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5e40]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ec28
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6324]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ec3c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4d58]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ec50
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6368]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ec64
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6298]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ec78
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5138]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ec88
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4594]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eca0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e51b4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ecac
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4ba4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ecc4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e44f4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ecd4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e48d4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ecec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3e60]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ed00
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3c64]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ed10
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e61bc]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ed20
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3528]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ed34
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5d68]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ed48
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3418]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ed5c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6448]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ed70
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4824]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ed80
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e32a8]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ed8c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3a08]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ed9c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3fd8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69edb0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4148]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69edc8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5cb8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ede0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e452c]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69edf0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5f34]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ee00
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e50f0]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ee10
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e38f8]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ee20
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5350]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ee30
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3f44]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ee44
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5ce4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ee50
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e41a4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ee60
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3558]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ee70
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e53b8]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ee84
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e380c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ee98
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5e84]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eeac
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e46e0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eec0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e60e8]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eed8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4d88]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69eef0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e357c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ef04
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5028]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ef18
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5b04]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ef2c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3e88]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ef40
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e31d4]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ef50
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5650]
movzx eax, byte [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ef60
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4cd0]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ef70
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4070]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ef84
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e647c]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69ef9c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 4
mov eax, dword [0x6e4bac]
push eax
push 4
push 0
push 0x69efb0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 4
mov eax, dword [0x6e5174]
push eax
push 4
push 0
push 0x69efc0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e35b8]
push eax
push 3
push 0
push 0x69efd4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e3814]
push eax
push 3
push 0
push 0x69efe8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e52f8]
push eax
push 3
push 0
push 0x69effc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e3708]
push eax
push 3
push 0
push 0x69f00c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e5bd0]
push eax
push 3
push 0
push 0x69f018
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e622c]
push eax
push 3
push 0
push 0x69f02c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e6458]
push eax
push 3
push 0
push 0x69f03c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4960]
push eax
push 3
push 0
push 0x69f04c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e634c]
push eax
push 3
push 0
push 0x69f058
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e5308]
push eax
push 3
push 0
push 0x69f064
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4dc8]
push eax
push 3
push 0
push 0x69f074
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4ff0]
push eax
push 3
push 0
push 0x69f088
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e3448]
push eax
push 3
push 0
push 0x69f09c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4ec8]
push eax
push 3
push 0
push 0x69f0ac
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e3de8]
push eax
push 3
push 0
push 0x69f0b8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4454]
push eax
push 3
push 0
push 0x69f0cc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4654]
push eax
push 3
push 0
push 0x69f0dc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e60c8]
push eax
push 3
push 0
push 0x69f0ec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4560]
push eax
push 3
push 0
push 0x69f0f8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e3468]
push eax
push 3
push 0
push 0x69f104
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4dc4]
push eax
push 3
push 0
push 0x69f114
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4fec]
push eax
push 3
push 0
push 0x69f128
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e3444]
push eax
push 3
push 0
push 0x69f13c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4ec4]
push eax
push 3
push 0
push 0x69f14c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e3de4]
push eax
push 3
push 0
push 0x69f158
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4450]
push eax
push 3
push 0
push 0x69f16c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4650]
push eax
push 3
push 0
push 0x69f17c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e60c4]
push eax
push 3
push 0
push 0x69f18c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e455c]
push eax
push 3
push 0
push 0x69f198
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e3464]
push eax
push 3
push 0
push 0x69f1a4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4118]
push eax
push 3
push 0
push 0x69f1b4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4cc8]
push eax
push 3
push 0
push 0x69f1c4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 8
mov eax, dword [0x6e4a48]
push eax
push 3
push 0
push 0x69f1d4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 0xa
mov eax, dword [0x6e3618]
push eax
push 3
push 0
push 0x69f1e4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
push 0x10
mov eax, dword [0x6e5a8c]
push eax
push 3
push 0
push 0x69f1ec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov edi, dword [0x6e4c14]
mov edi, dword [edi]
dec edi
test edi, edi
jl 0x69af42
inc edi
mov dword [ebx], 0
mov eax, dword [0x6e4c20]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x6e3500]
mov dword [ebp - 0x20], eax
mov eax, dword [0x6e49e8]
mov dword [ebp - 0x24], eax
mov eax, dword [0x6e4ac0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x1c]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
lea edx, [ebp - 0x40]
mov eax, dword [ebx]
call fcn.0040a458
mov ecx, dword [ebp - 0x40]
lea eax, [ebp - 0x3c]
mov edx, 0x69f200
call fcn.00404ed8
mov eax, dword [ebp - 0x3c]
call fcn.0040508c
push eax
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x20]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
lea edx, [ebp - 0x48]
mov eax, dword [ebx]
call fcn.0040a458
mov ecx, dword [ebp - 0x48]
lea eax, [ebp - 0x44]
mov edx, 0x69f210
call fcn.00404ed8
mov eax, dword [ebp - 0x44]
call fcn.0040508c
push eax
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x24]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
lea edx, [ebp - 0x50]
mov eax, dword [ebx]
call fcn.0040a458
mov ecx, dword [ebp - 0x50]
lea eax, [ebp - 0x4c]
mov edx, 0x69f224
call fcn.00404ed8
mov eax, dword [ebp - 0x4c]
call fcn.0040508c
push eax
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [ebp - 0x28]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
lea edx, [ebp - 0x58]
mov eax, dword [ebx]
call fcn.0040a458
mov ecx, dword [ebp - 0x58]
lea eax, [ebp - 0x54]
mov edx, 0x69f23c
call fcn.00404ed8
mov eax, dword [ebp - 0x54]
call fcn.0040508c
push eax
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
inc dword [ebx]
add dword [ebp - 0x28], 4
add dword [ebp - 0x24], 4
add dword [ebp - 0x20], 4
add dword [ebp - 0x1c], 4
dec edi
jne 0x69adf1
mov eax, dword [0x6e47a8]
mov eax, dword [eax]
call fcn.00404e8c
push eax
mov eax, dword [0x6e47a8]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f250
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4140]
mov eax, dword [eax]
call fcn.00404e8c
push eax
mov eax, dword [0x6e4140]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f25c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3a48]
mov eax, dword [eax]
call fcn.00404e8c
push eax
mov eax, dword [0x6e3a48]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f268
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea ecx, [ebp - 0x10]
mov eax, dword [0x6e32d0]
mov eax, dword [eax]
mov dl, 0x7c
call fcn.005f186c
mov eax, dword [ebp - 0x10]
xor edx, edx
call fcn.00405664
jne 0x69afe9
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69aff4
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f288
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea edx, [ebp - 0xc]
mov eax, dword [0x6e5114]
mov eax, dword [eax]
call fcn.0042dde8
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f298
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea edx, [ebp - 0x5c]
mov eax, dword [0x6e4ce0]
mov eax, dword [eax]
call fcn.004a5150
mov eax, dword [ebp - 0x5c]
xor edx, edx
call fcn.00405664
jne 0x69b073
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b08d
lea edx, [ebp - 0x60]
mov eax, dword [0x6e4ce0]
mov eax, dword [eax]
call fcn.004a5150
mov eax, dword [ebp - 0x60]
lea edx, [ebp - 0xc]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f2b0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4720]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69b0cf
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b0de
lea edx, [ebp - 0xc]
mov eax, dword [0x6e4720]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f2b8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4a90]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69b120
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b12f
lea edx, [ebp - 0xc]
mov eax, dword [0x6e4a90]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f2c8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5470]
cmp dword [eax], 0
jne 0x69b16b
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b17b
lea eax, [ebp - 0xc]
mov edx, dword [0x6e5470]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f2d8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6630]
cmp dword [eax], 0
jne 0x69b1b7
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b1c7
lea eax, [ebp - 0xc]
mov edx, dword [0x6e6630]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f2ec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3c8c]
cmp dword [eax], 0
jne 0x69b203
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b213
lea eax, [ebp - 0xc]
mov edx, dword [0x6e3c8c]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f2fc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3f80]
cmp dword [eax], 0
jne 0x69b24f
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b25f
lea eax, [ebp - 0xc]
mov edx, dword [0x6e3f80]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f310
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3de0]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69b2a1
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b2b1
lea eax, [ebp - 0xc]
mov edx, dword [0x6e3de0]
mov edx, dword [edx]
call fcn.00404e54
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f324
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5ab8]
cmp dword [eax], 0
jne 0x69b2ed
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b2fd
lea eax, [ebp - 0xc]
mov edx, dword [0x6e5ab8]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f338
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4a14]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69b33f
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b34e
lea edx, [ebp - 0xc]
mov eax, dword [0x6e4a14]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f34c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e555c]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69b390
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b39f
lea edx, [ebp - 0xc]
mov eax, dword [0x6e555c]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f35c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3550]
cmp dword [eax], 0
jne 0x69b3db
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b3eb
lea eax, [ebp - 0xc]
mov edx, dword [0x6e3550]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f370
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e3e80]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f388
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e494c]
cmp dword [eax], 0xffffffff
jle 0x69b480
mov eax, dword [0x6e494c]
mov eax, dword [eax]
mov edx, dword [0x6e66a0]
mov edx, dword [edx]
cmp eax, dword [edx + 8]
jge 0x69b480
mov edx, dword [0x6e494c]
mov edx, dword [edx]
mov eax, dword [0x6e66a0]
mov eax, dword [eax]
call fcn.00435d60
mov edx, dword [eax + 4]
lea eax, [ebp - 0xc]
call fcn.00404c38
jmp 0x69b48d
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f394
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3974]
cmp dword [eax], 0xffffffff
jle 0x69b4ef
mov eax, dword [0x6e3974]
mov eax, dword [eax]
mov edx, dword [0x6e66a0]
mov edx, dword [edx]
cmp eax, dword [edx + 8]
jge 0x69b4ef
mov edx, dword [0x6e3974]
mov edx, dword [edx]
mov eax, dword [0x6e66a0]
mov eax, dword [eax]
call fcn.00435d60
mov edx, dword [eax + 4]
lea eax, [ebp - 0xc]
call fcn.00404c38
jmp 0x69b4fc
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f3a8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3164]
cmp dword [eax], 0xffffffff
jle 0x69b55e
mov eax, dword [0x6e3164]
mov eax, dword [eax]
mov edx, dword [0x6e66a0]
mov edx, dword [edx]
cmp eax, dword [edx + 8]
jge 0x69b55e
mov edx, dword [0x6e3164]
mov edx, dword [edx]
mov eax, dword [0x6e66a0]
mov eax, dword [eax]
call fcn.00435d60
mov edx, dword [eax + 4]
lea eax, [ebp - 0xc]
call fcn.00404c38
jmp 0x69b56b
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f3bc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e56b0]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f3cc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e3ff0]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f3d8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e3548]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f3e8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e5bf4]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f3f4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4f68]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69b679
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b688
lea edx, [ebp - 0xc]
mov eax, dword [0x6e4f68]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f404
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4738]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69b6ca
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b6d9
lea edx, [ebp - 0xc]
mov eax, dword [0x6e4738]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f414
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3554]
cmp dword [eax], 0
jne 0x69b715
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b725
lea eax, [ebp - 0xc]
mov edx, dword [0x6e3554]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f424
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5dc0]
mov eax, dword [eax]
cmp dword [eax + 8], 0
jne 0x69b764
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b773
lea edx, [ebp - 0xc]
mov eax, dword [0x6e5dc0]
mov eax, dword [eax]
call fcn.005fe5a8
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f434
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e3f08]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f444
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e5fdc]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f454
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e4954]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f464
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e53dc]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69b84e
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b85d
lea edx, [ebp - 0xc]
mov eax, dword [0x6e53dc]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f474
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e488c]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69b89f
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b8ae
lea edx, [ebp - 0xc]
mov eax, dword [0x6e488c]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f480
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6394]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69b8f0
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b8ff
lea edx, [ebp - 0xc]
mov eax, dword [0x6e6394]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f48c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5100]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69b941
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b950
lea edx, [ebp - 0xc]
mov eax, dword [0x6e5100]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f498
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e327c]
cmp dword [eax], 0
jne 0x69b98c
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69b99c
lea eax, [ebp - 0xc]
mov edx, dword [0x6e327c]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f4a4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e45c8]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69b9e1
lea eax, [ebp - 0xc]
mov edx, dword [0x6e5a90]
mov edx, dword [edx]
call fcn.00404c38
jmp 0x69b9f0
lea edx, [ebp - 0xc]
mov eax, dword [0x6e45c8]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f4b0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4880]
cmp dword [eax], 0
jne 0x69ba2c
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69ba3c
lea eax, [ebp - 0xc]
mov edx, dword [0x6e4880]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f4c0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e366c]
cmp dword [eax], 0
jne 0x69ba78
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69ba88
lea eax, [ebp - 0xc]
mov edx, dword [0x6e366c]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f4d4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e57c0]
cmp dword [eax], 0
jne 0x69bac4
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bad4
lea eax, [ebp - 0xc]
mov edx, dword [0x6e57c0]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f4e4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4c94]
cmp dword [eax], 0
jne 0x69bb10
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bb20
lea eax, [ebp - 0xc]
mov edx, dword [0x6e4c94]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f4f8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5598]
cmp dword [eax], 0
jne 0x69bb5c
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bb6c
lea eax, [ebp - 0xc]
mov edx, dword [0x6e5598]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f508
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5184]
cmp dword [eax], 0
jne 0x69bba8
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bbb8
lea eax, [ebp - 0xc]
mov edx, dword [0x6e5184]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f51c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5734]
cmp dword [eax], 0
jne 0x69bbf4
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bc04
lea eax, [ebp - 0xc]
mov edx, dword [0x6e5734]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f52c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3d8c]
cmp dword [eax], 0
jne 0x69bc40
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bc50
lea eax, [ebp - 0xc]
mov edx, dword [0x6e3d8c]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f53c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4298]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69bc92
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bca1
lea edx, [ebp - 0xc]
mov eax, dword [0x6e4298]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f54c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5d24]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69bce3
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bcf2
lea edx, [ebp - 0xc]
mov eax, dword [0x6e5d24]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f55c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5818]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69bd34
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bd43
lea edx, [ebp - 0xc]
mov eax, dword [0x6e5818]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f56c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5b44]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69bd85
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bd94
lea edx, [ebp - 0xc]
mov eax, dword [0x6e5b44]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f580
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3dd8]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69bdd6
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bde5
lea edx, [ebp - 0xc]
mov eax, dword [0x6e3dd8]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f58c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e453c]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69be27
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69be36
lea edx, [ebp - 0xc]
mov eax, dword [0x6e453c]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f598
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3db0]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69be78
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69be87
lea edx, [ebp - 0xc]
mov eax, dword [0x6e3db0]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f5a8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5528]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69bec9
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bed8
lea edx, [ebp - 0xc]
mov eax, dword [0x6e5528]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f5b8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e64f8]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69bf1a
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bf29
lea edx, [ebp - 0xc]
mov eax, dword [0x6e64f8]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f5cc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e57d8]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69bf6b
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bf7a
lea edx, [ebp - 0xc]
mov eax, dword [0x6e57d8]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f5dc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e31d8]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69bfbc
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69bfcb
lea edx, [ebp - 0xc]
mov eax, dword [0x6e31d8]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f5f0
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3a04]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c00d
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c01c
lea edx, [ebp - 0xc]
mov eax, dword [0x6e3a04]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f600
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3608]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c05e
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c06d
lea edx, [ebp - 0xc]
mov eax, dword [0x6e3608]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f618
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4a44]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c0af
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c0be
lea edx, [ebp - 0xc]
mov eax, dword [0x6e4a44]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f624
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e516c]
cmp dword [eax], 0
jne 0x69c0fa
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c10a
lea eax, [ebp - 0xc]
mov edx, dword [0x6e516c]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f630
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3984]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c14c
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c15b
lea edx, [ebp - 0xc]
mov eax, dword [0x6e3984]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f640
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e62c4]
mov edx, dword [edx]
call fcn.00404c38
cmp dword [ebp - 0xc], 0
jne 0x69c1a1
lea eax, [ebp - 0xc]
mov edx, 0x69f654
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f658
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e39d4]
mov edx, dword [edx]
call fcn.00404c38
cmp dword [ebp - 0xc], 0
jne 0x69c1e7
lea eax, [ebp - 0xc]
mov edx, 0x69f654
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f668
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e569c]
mov edx, dword [edx]
call fcn.00404c38
cmp dword [ebp - 0xc], 0
jne 0x69c22d
lea eax, [ebp - 0xc]
mov edx, 0x69f654
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f678
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea eax, [ebp - 0xc]
mov edx, dword [0x6e51ec]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f688
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e63a4]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c2a2
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c2b1
lea edx, [ebp - 0xc]
mov eax, dword [0x6e63a4]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f694
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5e7c]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c2f3
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c302
lea edx, [ebp - 0xc]
mov eax, dword [0x6e5e7c]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f6a8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6260]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c344
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c353
lea edx, [ebp - 0xc]
mov eax, dword [0x6e6260]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f6b8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3664]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c395
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c3a4
lea edx, [ebp - 0xc]
mov eax, dword [0x6e3664]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f6c8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3314]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c3e6
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c3f5
lea edx, [ebp - 0xc]
mov eax, dword [0x6e3314]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f6d8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4d4c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x69c446
lea ecx, [ebp - 0x10]
mov eax, dword [0x6e4d4c]
mov eax, dword [eax]
mov dl, 0x3e
call fcn.005f186c
lea edx, [ebp - 0xc]
mov eax, dword [ebp - 0x10]
call fcn.0040700c
jmp 0x69c453
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f6ec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea edx, [ebp - 0xc]
mov eax, dword [0x6e3c54]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f6fc
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea edx, [ebp - 0xc]
mov eax, dword [0x6e5d94]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f70c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e4884]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c4f9
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c508
lea edx, [ebp - 0xc]
mov eax, dword [0x6e4884]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f71c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5284]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c54a
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c559
lea edx, [ebp - 0xc]
mov eax, dword [0x6e5284]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f72c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5cf4]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
je 0x69c5dd
mov eax, dword [0x6e5cf4]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c5ab
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c5ba
lea edx, [ebp - 0xc]
mov eax, dword [0x6e5cf4]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f740
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea edx, [ebp - 0xc]
mov eax, dword [0x6e3328]
mov eax, dword [eax]
call fcn.0042dde8
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f750
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea edx, [ebp - 0xc]
mov eax, dword [0x6e3fdc]
mov eax, dword [eax]
call fcn.0042dde8
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f760
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea edx, [ebp - 0xc]
mov eax, dword [0x6e3ea0]
mov eax, dword [eax]
call fcn.0042dde8
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f770
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea edx, [ebp - 0xc]
mov eax, dword [0x6e3dbc]
mov eax, dword [eax]
call fcn.0042dde8
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f780
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e6398]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c6c4
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c6d3
lea edx, [ebp - 0xc]
mov eax, dword [0x6e6398]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f790
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e420c]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c715
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c724
lea edx, [ebp - 0xc]
mov eax, dword [0x6e420c]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f7a4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e5fc0]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c766
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c775
lea edx, [ebp - 0xc]
mov eax, dword [0x6e5fc0]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f7b4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e447c]
mov eax, dword [eax]
xor edx, edx
call fcn.00405664
jne 0x69c7b7
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c7c6
lea edx, [ebp - 0xc]
mov eax, dword [0x6e447c]
mov eax, dword [eax]
call fcn.0040700c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f7c4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e47e4]
cmp dword [eax], 0
jne 0x69c802
lea eax, [ebp - 0xc]
mov edx, 0x69f284
call fcn.00404c38
jmp 0x69c812
lea eax, [ebp - 0xc]
mov edx, dword [0x6e47e4]
mov edx, dword [edx]
call fcn.00404c38
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f7d4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
lea ecx, [ebp - 0xc]
mov eax, dword [0x6e4f2c]
mov eax, dword [eax]
mov dl, 0x7c
call fcn.005f1a3c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f7e4
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e47b4]
cmp dword [eax + 8], 0
jle 0x69c8f0
push 0x69f7f4
lea edx, [ebp - 0x64]
mov eax, dword [0x6e47b4]
mov eax, dword [eax]
call fcn.0040a458
push dword [ebp - 0x64]
push 0x69f800
lea edx, [ebp - 0x68]
mov eax, dword [0x6e47b4]
mov eax, dword [eax + 4]
call fcn.0040a458
push dword [ebp - 0x68]
push 0x69f800
lea edx, [ebp - 0x6c]
mov eax, dword [0x6e47b4]
mov eax, dword [eax + 8]
call fcn.0040a458
push dword [ebp - 0x6c]
push 0x69f80c
lea eax, [ebp - 0xc]
mov edx, 7
call fcn.00404f4c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f810
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e492c]
cmp dword [eax + 8], 0
jle 0x69c977
push 0x69f7f4
lea edx, [ebp - 0x70]
mov eax, dword [0x6e492c]
mov eax, dword [eax]
call fcn.0040a458
push dword [ebp - 0x70]
push 0x69f800
lea edx, [ebp - 0x74]
mov eax, dword [0x6e492c]
mov eax, dword [eax + 4]
call fcn.0040a458
push dword [ebp - 0x74]
push 0x69f800
lea edx, [ebp - 0x78]
mov eax, dword [0x6e492c]
mov eax, dword [eax + 8]
call fcn.0040a458
push dword [ebp - 0x78]
push 0x69f80c
lea eax, [ebp - 0xc]
mov edx, 7
call fcn.00404f4c
mov eax, dword [ebp - 0xc]
call fcn.00404e8c
push eax
lea eax, [ebp - 0xc]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f81c
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e52f4]
mov eax, dword [eax]
call fcn.00404e8c
push eax
mov eax, dword [0x6e52f4]
call fcn.004050e4
push eax
push 1
push 0
push 0x69f828
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, 0xe9
call fcn.00402b48
mov edi, eax
xor eax, eax
mov dword [ebx], eax
mov eax, dword [0x6e5f44]
mov dword [ebp - 0x28], eax
mov eax, dword [ebx]
mov edx, dword [ebp - 0x28]
mov dl, byte [edx]
mov byte [edi + eax], dl
inc dword [ebx]
inc dword [ebp - 0x28]
cmp dword [ebx], 0xe9
jne 0x69c9b8
push 0xe9
push edi
push 3
push 0
push 0x69f834
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
xor eax, eax
mov dword [ebx], eax
mov eax, dword [0x6e6290]
mov dword [ebp - 0x28], eax
mov eax, dword [ebx]
mov edx, dword [ebp - 0x28]
mov dl, byte [edx]
mov byte [edi + eax], dl
inc dword [ebx]
inc dword [ebp - 0x28]
cmp dword [ebx], 0xe9
jne 0x69c9f2
push 0xe9
push edi
push 3
push 0
push 0x69f848
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, edi
call fcn.00402b78
mov eax, dword [0x6e5744]
cmp byte [eax], 0
jne 0x69cacb
mov eax, dword [0x6e4618]
mov eax, dword [eax]
push eax
push 0x69f864
lea edx, [ebp - 0x80]
mov eax, dword [0x6e65ec]
call fcn.00409b74
push dword [ebp - 0x80]
push 0x69d964
lea eax, [ebp - 0x7c]
mov edx, 3
call fcn.00404f4c
mov edx, dword [ebp - 0x7c]
mov ecx, 0x69f890
mov eax, 0x80000001
call fcn.005f4cf0
call fcn.0040c86c
call fcn.00403118
sub eax, 0xac
push eax
push 0x69f864
lea edx, [ebp - 0x88]
mov eax, dword [0x6e65ec]
call fcn.00409b74
push dword [ebp - 0x88]
push 0x69d964
lea eax, [ebp - 0x84]
mov edx, 3
call fcn.00404f4c
mov edx, dword [ebp - 0x84]
mov ecx, 0x69f8a0
mov eax, 0x80000001
call fcn.005f4cf0
mov eax, dword [0x6e66a0]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69f8a8
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e66a0]
mov eax, dword [eax]
cmp dword [eax + 8], 0
jle 0x69cc57
mov eax, dword [0x6e66a0]
mov eax, dword [eax]
mov edi, dword [eax + 8]
dec edi
test edi, edi
jl 0x69cc57
inc edi
mov dword [ebx], 0
mov eax, dword [0x6e66a0]
mov eax, dword [eax]
mov edx, dword [ebx]
call fcn.00435d60
mov eax, dword [eax + 4]
call fcn.00404e8c
push eax
mov eax, dword [0x6e66a0]
mov eax, dword [eax]
mov edx, dword [ebx]
call fcn.00435d60
add eax, 4
call fcn.004050e4
push eax
push 1
push 0
lea edx, [ebp - 0x94]
mov eax, dword [ebx]
call fcn.0040a458
mov eax, dword [ebp - 0x94]
lea ecx, [ebp - 0x90]
mov edx, 4
call fcn.005d6ee8
mov ecx, dword [ebp - 0x90]
lea eax, [ebp - 0x8c]
mov edx, 0x69f8c4
call fcn.00404ed8
mov eax, dword [ebp - 0x8c]
call fcn.0040508c
push eax
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov dl, 1
mov eax, dword [0x4942dc]
call fcn.00403c40
mov dword [ebp - 0x18], eax
push 0
mov ecx, dword [ebp - 0x18]
mov dl, 1
mov eax, dword [0x41f43c]
call fcn.0042b1a8
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x69cbc2
sub eax, 0xffffffec
push eax
mov eax, dword [0x6e66a0]
mov eax, dword [eax]
mov edx, dword [ebx]
call fcn.00435d60
mov eax, dword [eax + 8]
push eax
call sub.ole32.dll_OleSaveToStream
test eax, eax
jne 0x69cc3e
mov eax, dword [ebp - 0x18]
mov edx, dword [eax]
call dword [edx]
push eax
mov eax, dword [ebp - 0x18]
mov eax, dword [eax + 4]
push eax
push 3
push 0
lea edx, [ebp - 0xa0]
mov eax, dword [ebx]
call fcn.0040a458
mov eax, dword [ebp - 0xa0]
lea ecx, [ebp - 0x9c]
mov edx, 4
call fcn.005d6ee8
mov ecx, dword [ebp - 0x9c]
lea eax, [ebp - 0x98]
mov edx, 0x69f8dc
call fcn.00404ed8
mov eax, dword [ebp - 0x98]
call fcn.0040508c
push eax
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [ebp - 0x14]
call fcn.00403c70
mov eax, dword [ebp - 0x18]
call fcn.00403c70
inc dword [ebx]
dec edi
jne 0x69cb16
mov eax, dword [0x6e3354]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69f8ec
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e61a4]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69f900
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3974]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69f914
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [0x6e3600]
mov eax, dword [eax]
mov dword [ebx], eax
push 4
push ebx
push 4
push 0
push 0x69f928
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegSetValueExA
mov eax, dword [esi]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x69cd22
lea eax, [ebp - 0xa0]
mov edx, 0x10
call fcn.00404bc4
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.004052f0
lea eax, [ebp - 0x58]
mov edx, 0xc
call fcn.00404bc4
lea eax, [ebp - 0x10]
call fcn.004052d8
lea eax, [ebp - 0xc]
call fcn.00404ba0
ret