Function at 0x430140
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x54494d
mov eax, dword fs:[0]
push eax
mov eax, 0x2428
call fcn.00474db0
mov eax, dword [0x673114]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x5e
mov eax, dword [ebp + 0xc]
mov esi, str.1FpGsLcn0ndstksBFyFInsU80LTezf9jZEBIvTahCikjDAfMspjXhKGzOjv5wGGDQGZoRYTw3wYicgVN8wSAXtIITCn7PshuIsbpnnxrnYb6GnSgJ5Ef3eOhRhTD7vS9OwxH5GQqhsrPtKASsuQmzIQK2CxBA4pshri1A4XuediA6BhU9zEjUctWXcAoDi3kxuG0YkS4lSuBNZNzig8P0wfXanu3oeIOS1xHrh59B3Wxghd6JTzwBjNQW9JN7se3e7kzvoxKxjEUtSGlOiUwoOPkVIXQEhbqIL9i0JevphiWg9hRKd3O4Chq6sqhMiNQloTYt1c5UANBeaUwlTv4deviMUC3VPAp5AhqCH31frFwhAK1h9jWyenl8
mov ebx, dword [ebp + 8]
lea edi, [ebp - 0xad0]
mov dword [ebp - 0x2430], eax
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x48
movsw word es:[edi], word [esi]
mov esi, str.ClvjjbgSqm73HXboEMfcntt7HegsuoOa7KabNZLjc88GVMmA4kPoZl9q2wdDshqXSuzixxmxXtYxjlvCXVPBt6rRJpjN3Oqtpu0dVJf4bMJnXvS7291qLIy9DVMZjn6Ox9kszr0bghB5olutvTTzJCDv8Gup5QgU4VbgSdS6LbVZE7pXwKbHjD8FO9q5xXNv5xDAgWH9kB5WFPHWOzg6F0I6Bm04pJXhwaTYSITFf4TZJnOSrEouCWD3DfkpV0eHRlW5Gs9Hpmj0qsmjZa3FY5wk4E6hdL9s
lea edi, [ebp - 0x33c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x50
movsb byte es:[edi], byte [esi]
mov esi, str.jv5EtdW6eNsTqwZU0QPUiB2Btc9W5sI3MoeWVpRg3HOmWoM36tPwWgQ6ZnRO2xGPXfSVL32nm0NrygIS5SBTRvTfz3uu5zd8rikZc7ehVTErVnID6F9Co0sVk21EX1CM6DrSznQVFvTut9zEazwYu4paYPXCuDSVhgzkYa1NrGfGoIxPmkDlKdhzC8TYrFl6xagq3oulbhv3ym8tPFPRD5tfwxTG0QWFJAIOS75QtSbX9yZWb9feLR9cMIynPe2WTlMo8KNM4m294zv8GV0kMD4ygnQ5CoyQI9MpXf1jKpPtR3V2fd8L1VXayl0uOCA6Pp
lea edi, [ebp - 0x480]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x63
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.9WiyDdnnlhMFsi7hAiptObqOk24oogph2SvaaIUTsYyOeJJT3Cdt2d2zejfsEhrcMBF34wgDWpFXQdZVc5unwtgoIkyoSyilxSmIkwAKZJGnoRCHI1qoNaMboAmnhmUj40W6ypMBt1cFFtGay593QJw2svLUqIpI3aMJq3QiMwmDpKxDJzontLzMokt2j4KZAhIx5BCcJIWMKtWSmTF4cBDAbgSmwYpleNmkBkdqEzYd5brg29SyVxlzvBVCmKWX0ba01yt1HlqBoOucoNypm0kbJir93et3hKa7LrG0LTePbTRvalYYo1zWNgmaDwwUIcgmUYFRWR1B0HQ2GpOPHvPzNxexzM5faWXGTMg3iE3vHi37rVLpH4mz9qyflDTCp6LXjp5ZNvo
lea edi, [ebp - 0x954]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4f
lea edi, [ebp - 0x5c0]
mov esi, str.nBJLdCJ9EDbodgNT8ICAog2EZgaV7jNcWtRyCgVqABm8uMXC5BEwgCxwyHrOPzLBoJA3sw93ceMB2rn9tdoBQV04WfsXhyI2AzeaSlDKcfxV51ZAYXo8g6v2KY0ydVCgqQgnKBv54b373ly8AUipBK9f2yKPcUBBsU7YSnRrD52PISPaRcIfT22eUJ9vzB6qHZfO8oa83uYtr7wWp6NlnaN2Gbd8FdWcwsRRsJ6cQuAKTtOHzjdx7L3Ym2tXxNQqTQ07DHpfiYGLvYrqP4KENSlAcwhm8YhSTdfUrAgXGjLVt8Q8NOuiHy5w3cMU
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x34
movsb byte es:[edi], byte [esi]
mov esi, str.YhRNxREWwB1ubDJQ0LwvtJPJER3FNYuSmnEyyaYXmwLIRxdOwae5gUrId1h8M5Z9JpDQhf88q5yhGEWuVN7SGNykq3yr2Rc5nuHhxtM3lqOc3PtER1ze3VUVVXtcdUD6loSNAU9LXwKVL5dr4cbqwkrftixN8LDczDWhvtmyIdJaCspWHujqWAR7ElugWOd3RdF3aDubrjt7TGP
lea edi, [ebp - 0xba0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x55
lea edi, [ebp - 0x1870]
mov esi, str.XP7AqvFPzDfLVlphNYWqaH83CJuvbrp9tX0iDtFZisN56uGHA3wp2k7BJ15dWeGhAVgO3ZHYsnnASedfdG8I7INKSP4RFc8UQlMjyVagMoPqrdXLXxjWFKih17EndxgiCQLyw54DLIELoHBeAe8INUMMsIJIrlYvL6NImJr7u15z9HfCHu7T4Bg31c022nzK4gYzuBpYJqdfk1qPxnh7g1YvclRJgd9zlHBw1w09Vi5IfjyfFDOYCzhzQVUhEp4cxzCKiXX03OheSNK0OlPcjaqabiRCyb2ItbxSJtMyKgmZ7nzjqDMXU3bnWLlx9raL9i9nlUuCeGllkHUCe7jxgU
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x58
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.xaIyBVsw1By8ojNAP0Cw8R4TZrpC3XxDjV5S1MqvF1sSdhQSbFiEi3LWFptw5oKeDGPZNt16ZDHpuFsV37ZsemLhUX0apQALr8c8qpmearbhLzncb1DasrMnQSOn6ctQEgmmWaX65skrngaHawah4n9BVr7M6z7GQBnEBN2knWoDv3MbBBuxj0C7HOUhjvCIX154MyN00W69h6cLCtLkPD22bSZpZGKULRhTjoOHQhuaLjskxSSC6RVHHEO5iN0jlSXCCPUxyZeDiGunDFhTeE5LxDyIjQoc3mjGu53VyfATmHkQsJpH9lSZK20W29STr4mgiZ798z9ttgu0giS3cSCbcFH81syyr
lea edi, [ebp - 0x1b30]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x71
movsw word es:[edi], word [esi]
mov esi, str.Smu6FFNQvel5Gwq7SITZmUnv19HhbOB1lLsQNmbCmC7ZDO0XHkg0QtDMploPQ6cy5uYcLHPiWmr9FTzfJIEDeAYngqIw6XGvkL51JZr43lfjakoKb9fUisWYAOByJ5BhDdz12pSW4HSQpMqCXqbK1GIpSttXWxULufXNWRKrXLkTqQNzHBQenH1aydVYRPHfDE4aRwm2GgZLvgTbLH4sukZRbdL7ejE1NpaHlR4Me7Xu6RQw6yllBHVtv3fLEoAuaSNPgtp4PloRe4w1SK6ocPe8Qoz67DwPYargyRgpRsmTf4aXlyQCdHV68J0fnDEUtYaZKDGTpaID78k3dq63innEXuBfkJL6xsplDVNpmDyOxGcZWA4IT0gm447Xk1KsvtOkhEbQoiogcktSViyUAR5YLwIcA0vT38xFoG02BnDG2dhtPIgmYN9GsoN2qy1lr8k
lea edi, [ebp - 0x1e58]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x45
lea edi, [ebp - 0xf60]
mov esi, str.qYqeF11VdhUnmZyEcr640ys4wrLRiOjN3IH7Fy8DN84Jrwnj7hRyXonX6xucko7s30sXIjNDp6DcLdNKv8ZLroly9PuxPXQ4DFLLo82uYZrIMDWyfBj4eGOtVU7vnKJkrmGc5ZbTgqftzA1Ax62laOmfQJnWw8Qj8zubObqRJru2E4uYUcAiu3DTr0WJTdgLwmj73BZq6frP2lqDCEiZUscdWg4DmEOnzgfcayjhfn2smtrr3VVmUSN31G6mZ0tWXpUxf6U5kb8ysqC1LC9Xs
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3b
movsw word es:[edi], word [esi]
mov esi, str.CycLSN3d1tkzhRiRQopSFah4r4q5vyb4PV3SetEzQLEug9Gi9vrjoc7DmLdvx6yzA9RxH8ICuQBzf8xYmt2G5PEzRVijN86dOkUJR1H6ZV6Anzrarymzik3PSW1PX2NXVcAD2Avt11aoYxxJzCxa9nbhWP2sAmoSPtQt8jVDjMDReIdqIzFNkZa1Z9ghhiDfhwcOf6hPDR8DprFlYPVUOEeB5tdHZOWD9TOlcB9od7k
lea edi, [ebp - 0xe48]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x41
lea edi, [ebp - 0x1064]
mov esi, str.phBjqoJJH0xY36HxJ8dMFR8E5q2MYX4HaS41krcdlLqx3mHjhYfxyC2Y6iqTOeWP5qwtGjI1mWUDjr36E7WDRE5xzQfPZOwOU2PEfK01jcZKxcnjp4wxK8LVfa7etMI3Z5nHEmLGQ6Df35Xm4DEJEHwkfFOchpqTxmQlLuoLXtX3YH9MabWMTuyqAqxcDgOBAObnuCZT1ZPe66b2ahCRwCIfbSizdyfXmlqDqOolo3JGPG6V30ou9xVAU5JWtv5kv4M
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x36
lea edi, [ebp - 0xc7c]
mov esi, str.XEJJ44RaXA9Mz7auq2IwncHrfrKbM257ZWsgvMewFht5leKMfG7vQzu3QTZ19KsEwRRdDzQK9a0R9a93aZ7O1kCKweMQKYaYB5DBL7dynCJjRY8CGWU6TrKQipxfa76wi0ciPQka27snbWqbvoQosdfP0Bap7kkOPxI9yM50UKSzcdP3y2Ukr3HS5hlObxs5yyAtaP4oXaJvd2qLTTYPSEpXzh
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x56
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.ms0Qf0bcArA9shuHZxOUMhf2A0AmW4iEnz9eA0SGMsqIRsy6yXsp79JYO84qapnMktRkuRhWBBTTaybi9HiUYquA2hVC9BAeSaBXhdm5XWgpYcpalktYrJr9qwVfxIisNjpDMiHvaS6oKHz6VtETDw5xjh7uyoGwYK0uVXiqHowQABkzoAJl0uwIUKds0XrA6QLFCLKbzRncPCiomzvVFW8Dt1y3zs8ySppkeFJnWg1C0UBhIAHViE2FFJhSwTPtanIDvnUIc3hmjvRrx72dnpafllhUjo5oDmROjUWs8XuQbxneToSMFgzUkjhdeS7SmF3qEAh1XGNF3tpP3ZsubgnFj
lea edi, [ebp - 0x19cc]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x75
movsw word es:[edi], word [esi]
mov esi, str.E8NnypGYuHiemegtkRTT3qIFFpOCkYw25QRJkQVVHdMKIMNm60MlFvv7APTWvI4u46FeFdCf0OI8EfZ5sBkIRWrjA2cLxKGjQFPX1EO1Xmmk5FJI4o7tZFeAtJgOD9IpCJS83sj18CN0vt2P8jDlNopXU4MJK5NMD37ZzvBPD8W5P1NXAUKr7U7DkBoNE18j9MHqEVMFusU34dMUkrMe0uaNLSvT0zdMtojNd23Ony84QJqYIQoMeX5FOMxoZe5xaqnbEuj90fN0iqmNhQDmi1Pm0DeoJKsjdjOSrawwWUtzjAUels55vXDDGFcRjtueBKn148ldfTTGoPy3qVT0yXqsjNRbAuT4QSsgjNbpuj2sMTQwB5zdp2qqfyL4H6v9vtqecPDIkigbPoi2sXvtcOM81duwLBkqXEockbDeB82SyrwZDBznzNTNqNsSWQ5pSo5XtKm7qXnD0mAZnuzrQ
lea edi, [ebp - 0x21fc]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x72
movsw word es:[edi], word [esi]
mov esi, str.f2clCUL0bgdDkTnyJkIskmyYZmjg66U8y7Keao7nmnbqNK1J7xh4nDkPkKtIrvMDwdTmHtTQyk0cV8xU8o0VT9o9IMM92qaCxRCvq5pAHanmx5nNlgQVbvtMlGBaxFepxREClsCVTyabd71t92U3ubYEsCHfkZEuaQNQfMVvpxffSDRAIgvfrLhgqcsKWOdEbncKPP8Feb8VFrOTOw9toaYcNIyHv4q1Nl2jJ8yyl19UFPq5va3T2mdchNd8sS7JAJr4uZsZbHnUnqj9SZunCbc4OccvxOtvVZwnTwV4dooQDU0rG0DoqjakavFJuzryy2E9n0S65dox2DJF93nalyTVr7hHUeWZ9Xuvx5ER0c6YnTerUIkygyXaatVQ8MwJEKPgZJ1bBkP5InTTAOO0wpZan7EKR5ShIa5mc6YW00eLoHoF47MyuzoXVHSIKNFlaULQF8K3i
lea edi, [ebp - 0x2024]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, 0x37
mov dword [ebp - 0x241c], 0
mov esi, str.49SBUoaxQw0iHmQmAc9Mzi3LQErgPQYBjahoVu3Oxd5BDfyg35bJy9RzKnwca1Neal21Ll8fyniNR4QLHbPQXfp3MJ5iinmqgI1kBzCzW8VOp2hU3bavJW8RjqLhRslTeKfOffLFZ6RKpfapoiZiZx3mEaz1c6oZ9alKxwSnXvr2vx2rJxSv985hipIMO7FCtoQ0bLaFthqTqL2d3SoBOouz3WTu
mov dword [ebp - 0x2418], 0
lea edi, [ebp - 0xd5c]
mov dword [ebp - 0x2414], 0
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x78
movsb byte es:[edi], byte [esi]
mov esi, str.nLYvbaADw9hkfLzAvnzgvegobrFAXtdnZ4XmgGUsmNzcfQBGtOOnWuopxl2YI0eH1XmiG5c6fCTak6L9fB1FxZpquYJJa5RTfSxSCVLDv1E9qkz77RrvVWSk0J5ibEokMAgp5pd4V93zmwL55d2PzYdYSFsGUso9QRomJ4M3Z8KR3j4o6BNWshqrzxW60iVQpNh9oVkkxnrbeKPJ0G4brCuB28E3UQDIhET7xrDMxtLHlGGrZnxzXsdx260TMRUKwIUD6dmGqh6d4lvczHH83dv6FKENoWZgDjuV9pTeYpw3TOB7bZIOHZoT71koEFC26sS9wlUFTKhxs6WduvaVwE6Hzj4MMXlSDcvaZYz4fnQzJP6OXSHQ65QuxtvwFBKwCD2qH6rDwDlN3Tx3DVxz5p6EUcvtyS7UiabjeJjdpcIksdIfsHo7fomwNBa4CvBxRq7cCnkeCpfASZBpw07Fedd62TrTRa2f
lea edi, [ebp - 0x23e0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x59
movsb byte es:[edi], byte [esi]
mov esi, str.umc2qNoP9MakDIEeJdLrLT9nsuZzOOvvEm64RkXDS0piuw8JyN9K7S9UPpxRiSwtJ8ZzsB8oSy9eWEW98hvJBM2e1sCqxzw9MkhmrpEaLY1qVsDAWGxokZRaQ9NNaw6Tz6JqJxOto3aZJGdCnGNsy4y3ZVGhHMhfiqQ9kdHDmQu3i6tarCAfXDVLN8kikK1ugMTvEbTxPlm0NRQxYzo7pMIBSGRKefbif3rmRFZnW28Iqag9Pa8eFIM9zuumdvSHUXa9DE2Yu8gvNnwes4C2oWkGKmZ1pAHkxPlExroWILc2y6U7yurefCBcaCeXtynThvTvBaQUQrcbkogm3TBfQGmNWODucmQzv0i
lea edi, [ebp - 0x1c94]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4f
lea edi, [ebp - 0x11a4]
mov esi, str.M7yhbQU1QnElUPopMcsbjioWmL1LCnby8Z42E9KW5Lq69uzdzRPSpJKEswvAfB15gSmmK8o5RaTsQWgYU0snM1nNL5SCIG9gEIjRf3dys5HpyQ3IZc8CKehkiR7pxfyUMyiaY4NjnmurZ82Bjky1htTe5KEJ9Z4Qmf4aoFnS5hNu7i8zOq6sO2NdDLvVA3l47HJXnhu0OTfOAZxrQNAa5t7MXimNngMUgasenigbFYPGty8UpojnkGTHxM83ovT8evaoKZW9bQGQCcOb1PiVw5tPqm2j7UhUgWg0jExR7FX1IsFHoFtJHpKIIlynp3
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0xad0], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x23e4], 0xf
mov dword [ebp - 0x23e8], 0
mov byte [ebp - 0x23f8], 0
jne 0x43034f
xor ecx, ecx
jmp 0x430361
lea ecx, [ebp - 0xad0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430358
sub ecx, edx
push ecx
lea eax, [ebp - 0xad0]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.00407d30
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4303ac
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
cmp byte [ebp - 0x33c], 0
mov dword [ebp - 0x23e4], 0xf
mov dword [ebp - 0x23e8], 0
mov byte [ebp - 0x23f8], 0
jne 0x4303d4
xor ecx, ecx
jmp 0x4303e9
lea ecx, [ebp - 0x33c]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4303e0
sub ecx, edx
push ecx
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.00407d30
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430434
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
cmp byte [ebp - 0x480], 0
mov dword [ebp - 0x23e4], 0xf
mov dword [ebp - 0x23e8], 0
mov byte [ebp - 0x23f8], 0
jne 0x43045c
xor ecx, ecx
jmp 0x43046e
lea ecx, [ebp - 0x480]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430465
sub ecx, edx
push ecx
lea eax, [ebp - 0x480]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.00407d30
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4304b9
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
cmp byte [ebp - 0x954], 0
mov dword [ebp - 0x23e4], 0xf
mov dword [ebp - 0x23e8], 0
mov byte [ebp - 0x23f8], 0
jne 0x4304e1
xor ecx, ecx
jmp 0x4304f9
lea ecx, [ebp - 0x954]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4304f0
sub ecx, edx
push ecx
lea eax, [ebp - 0x954]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.00407d30
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430544
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
cmp byte [ebp - 0x5c0], 0
mov dword [ebp - 0x23e4], 0xf
mov dword [ebp - 0x23e8], 0
mov byte [ebp - 0x23f8], 0
jne 0x43056c
xor ecx, ecx
jmp 0x43057e
lea ecx, [ebp - 0x5c0]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430575
sub ecx, edx
push ecx
lea eax, [ebp - 0x5c0]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.00407d30
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4305c9
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
lea eax, [ebp - 0xba0]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430613
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
lea eax, [ebp - 0x1870]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x43065d
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
lea eax, [ebp - 0x1b30]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4306a7
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
lea eax, [ebp - 0x1e58]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4306f1
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
lea eax, [ebp - 0xf60]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x43073b
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
lea eax, [ebp - 0xe48]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430785
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
lea eax, [ebp - 0x1064]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4307cf
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
lea eax, [ebp - 0xc7c]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
mov eax, dword [ebp - 0x23e4]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430819
inc eax
lea ecx, [ebp - 0x23f8]
push eax
push dword [ebp - 0x23f8]
call fcn.00407e30
lea eax, [ebp - 0x19cc]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
lea ecx, [ebp - 0x23f8]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0x21fc]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
lea ecx, [ebp - 0x23f8]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0x2024]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
lea ecx, [ebp - 0x23f8]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0xd5c]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
lea ecx, [ebp - 0x23f8]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0x23e0]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
lea ecx, [ebp - 0x23f8]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0x1c94]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
lea ecx, [ebp - 0x23f8]
mov byte [ebp - 4], 0
call fcn.00405930
lea eax, [ebp - 0x11a4]
push eax
lea ecx, [ebp - 0x23f8]
call fcn.004057d0
lea eax, [ebp - 0x23f8]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x241c]
call fcn.00407f90
lea ecx, [ebp - 0x23f8]
mov byte [ebp - 4], 0
call fcn.00405930
test ebx, ebx
je 0x430e1f
mov dword [ebp - 0x2428], 0
mov dword [ebp - 0x2420], 0
mov dword [ebp - 0x2424], 0
call fcn.0047ebdc
lea eax, [ebp - 0x2410]
push 0xf3
push eax
call fcn.004077c0
mov ecx, eax
call fcn.0043a840
cmp dword [eax + 0x14], 8
jb 0x4309e5
mov eax, dword [eax]
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [ebp - 0x2428]
push ecx
push 0xf003f
push 0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call edi
lea ecx, [ebp - 0x2410]
mov esi, eax
call fcn.004024b0
test esi, esi
jne 0x430e1f
call fcn.00402160
lea eax, [ebp - 0x2410]
push 0xf4
push eax
call fcn.004077c0
mov ecx, eax
call fcn.0043a840
cmp dword [eax + 0x14], 8
jb 0x430a3b
mov eax, dword [eax]
lea ecx, [ebp - 0x2420]
push ecx
push 0xf003f
push 0
push eax
push dword [ebp - 0x2428]
call edi
lea ecx, [ebp - 0x2410]
mov esi, eax
call fcn.004024b0
test esi, esi
je 0x430abb
lea eax, [ebp - 0x2410]
push 0xf4
push eax
call fcn.004077c0
mov ecx, eax
call fcn.0043a840
cmp dword [eax + 0x14], 8
jb 0x430a83
mov eax, dword [eax]
push 0
lea ecx, [ebp - 0x2420]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push eax
push dword [ebp - 0x2428]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea ecx, [ebp - 0x2410]
mov esi, eax
call fcn.004024b0
test esi, esi
jne 0x430e1f
call fcn.00402160
lea eax, [ebp - 0x2410]
push 0xf5
push eax
call fcn.004077c0
mov ecx, eax
call fcn.0043a840
cmp dword [eax + 0x14], 8
jb 0x430ae0
mov eax, dword [eax]
lea ecx, [ebp - 0x2424]
push ecx
push 0xf003f
push 0
push eax
push dword [ebp - 0x2420]
call edi
lea ecx, [ebp - 0x2410]
mov esi, eax
call fcn.004024b0
test esi, esi
je 0x430b60
lea eax, [ebp - 0x2410]
push 0xf5
push eax
call fcn.004077c0
mov ecx, eax
call fcn.0043a840
cmp dword [eax + 0x14], 8
jb 0x430b28
mov eax, dword [eax]
push 0
lea ecx, [ebp - 0x2424]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push eax
push dword [ebp - 0x2420]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea ecx, [ebp - 0x2410]
mov esi, eax
call fcn.004024b0
test esi, esi
jne 0x430e1f
push 0x104
lea eax, [ebp - 0x114]
push 0
push eax
call fcn.004f14e0
add esp, 0xc
cmp dword [ebx + 0x14], 8
jb 0x430b7e
mov ebx, dword [ebx]
lea eax, [ebp - 0x114]
push eax
push ebx
call fcn.004dae62
push 0x104
lea eax, [ebp - 0x7c8]
push 0
push eax
call fcn.004f14e0
add esp, 0x14
call fcn.00402160
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x242c], 0xbb8
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430bc0
lea eax, [ebp - 0x242c]
sub ecx, edx
push eax
lea eax, [ebp - 0x7c8]
push eax
push ecx
lea eax, [ebp - 0x114]
push eax
call fcn.004d5cda
call fcn.004dd2cb
push 0x208
mov dword [ebp - 0x2434], eax
lea eax, [ebp - 0x1510]
push 0
push eax
call fcn.004f14e0
lea eax, [ebp - 0x1510]
push eax
lea eax, [ebp - 0x7c8]
push eax
call fcn.004da81b
add esp, 0x24
call fcn.00402160
push 4
lea eax, [ebp - 0x2434]
push eax
push 4
push 0
lea eax, [ebp - 0x1510]
push eax
push dword [ebp - 0x2424]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, dword [ebp - 0x2430]
test ebx, ebx
je 0x430d73
call fcn.00402160
push 0x104
lea eax, [ebp - 0x6c4]
push 0
push eax
call fcn.004f14e0
push 0x208
lea eax, [ebp - 0x1718]
push 0
push eax
call fcn.004f14e0
push 0x104
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.004f14e0
add esp, 0x24
xor ecx, ecx
nop
mov al, byte [ebp + ecx - 0x114]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x219], al
test al, al
jne 0x430c90
lea eax, [ebp - 0x2410]
push 0xf6
push eax
call fcn.004077c0
mov ecx, eax
call fcn.0043a7c0
mov edx, eax
cmp dword [edx + 0x14], 0x10
jb 0x430cc7
mov edx, dword [edx]
mov esi, edx
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x430cd0
lea edi, [ebp - 0x218]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x430ce0
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x2410]
call fcn.00405930
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x242c], 0xbb8
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430d14
lea eax, [ebp - 0x242c]
sub ecx, edx
push eax
lea eax, [ebp - 0x6c4]
push eax
push ecx
lea eax, [ebp - 0x218]
push eax
call fcn.004d5cda
lea eax, [ebp - 0x1718]
push eax
lea eax, [ebp - 0x6c4]
push eax
call fcn.004da81b
add esp, 0x18
cmp dword [ebx + 0x14], 8
jb 0x430d56
mov ebx, dword [ebx]
push 0x104
push ebx
push 1
push 0
lea eax, [ebp - 0x1718]
push eax
push dword [ebp - 0x2424]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [ebp - 0x2424], 0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
je 0x430d8f
call fcn.00402160
push dword [ebp - 0x2424]
call ebx
cmp dword [ebp - 0x2420], 0
je 0x430da5
call fcn.00402160
push dword [ebp - 0x2420]
call ebx
mov dword [ebp - 0x23ec], 0
mov dword [ebp - 0x23e8], 0
mov dword [ebp - 0x23e4], 0
mov ecx, 0x59
mov byte [ebp - 4], 0x15
mov esi, str.CLTsh829trpCQYeloQ1S0Go0eMFNrjLMAT3qJ9lr6sCx2Wq22irPAro2mp5lt7wt5PyZwNtAqRHlJ2XgnBuLHSKjGcbaKqI1yJpQANOQ7fHCv7E8mV7ppPSbJdNUyleLxpQs6hsXeL3iT27vJOzzvUPucPmTeExsCr1yRnGWRFWI4pNxTLSqaZaJlZpqWOxczmNSbDeMStUEXXwhtGiCfxoZlFhrAaVgXGi1rFgdWkYWAeMKYh5pB2lFJo0stJOxxK7Im6CN5aDkorCAVRkxTbAYGDPuIJHMrQRkt1M6epjPgEPxgKtF1lkrpvH3dCRjUm3X0CwNvivhTfQSM4VgIEfmiM9ld662m83
lea edi, [ebp - 0x1308]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1308]
push eax
lea ecx, [ebp - 0x2410]
call fcn.004057d0
lea eax, [ebp - 0x2410]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x23ec]
call fcn.00407f90
lea ecx, [ebp - 0x2410]
call fcn.00405930
push dword [ebp - 0x2428]
call ebx
lea ecx, [ebp - 0x23ec]
call fcn.00405970
lea ecx, [ebp - 0x241c]
call fcn.00405970
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00474d9e
mov esp, ebp
pop ebp
ret 8