Function at 0x428e0f
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3ec
push ebx
push esi
push edi
lea edi, [ebp - 0x13c]
xor eax, eax
mov ecx, 0x4b
rep stosd dword es:[edi], eax
lea eax, [ebp - 4]
push eax
push 0x20019
push 0
push 0x4758e4
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x428e7e
cmp dword [0x45e03c], 0
je 0x428e6c
push str._nERROR1__Server_to_send_to_has_NOT_been_set__Use_STLWA_NT__server__server__to_install.
call fcn.00452380
add esp, 4
push 0x475978
push 0xb4bbc0
call fcn.004530c0
add esp, 8
mov dword [ebp - 0xc], 0x64
lea eax, [ebp - 0x13c]
mov dword [eax], 0
mov dword [eax + 4], 0
mov word [eax + 8], 0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x13c]
push eax
push 0
push 0
push 0x47599c
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x428ed8
movsx eax, byte [ebp - 0x13c]
test eax, eax
jne 0x428ee4
mov byte [0xb4bb40], 0
jmp 0x428f68
lea edi, [ebp - 0x13c]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
lea eax, [ecx - 1]
cmp eax, 0xa
jae 0x428f68
lea eax, [ebp - 0x13c]
push eax
push 0xb4bb40
call fcn.00452540
add esp, 8
test eax, eax
je 0x428f3e
cmp dword [0x45e03c], 0
je 0x428f3e
lea eax, [ebp - 0x13c]
push eax
push str._n_CLIENT_GROUP_PREFIX___s__n
call fcn.00452380
add esp, 8
lea edi, [ebp - 0x13c]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov edx, edi
mov edi, 0xb4bb40
mov esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov dword [ebp - 0xc], 0x64
lea eax, [ebp - 0x13c]
mov dword [eax], 0
mov dword [eax + 4], 0
mov word [eax + 8], 0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x13c]
push eax
push 0
push 0
push 0x4759c4
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x428fc2
movsx eax, byte [ebp - 0x13c]
test eax, eax
jne 0x428fce
mov byte [0x5f93e0], 0
jmp 0x429099
lea edi, [ebp - 0x13c]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
lea eax, [ecx - 1]
cmp eax, 0x21
jae 0x429099
movsx eax, byte [ebp - 0x13c]
cmp eax, 0x20
jne 0x429032
movsx eax, byte [ebp - 0x13b]
test eax, eax
jne 0x429032
push 0x4759d4
push 0
call fcn.0042af0e
add esp, 8
push str._r_nLocation_Code_BLANK_resetA
call fcn.00452380
add esp, 4
mov byte [0x5f93e0], 0
jmp 0x429099
lea eax, [ebp - 0x13c]
push eax
push 0x5f93e0
call fcn.00452540
add esp, 8
test eax, eax
je 0x42906f
cmp dword [0x45e03c], 0
je 0x42906f
lea eax, [ebp - 0x13c]
push eax
push str._n_LOCATIONCODE___s__n
call fcn.00452380
add esp, 8
lea edi, [ebp - 0x13c]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov edx, edi
mov edi, 0x5f93e0
mov esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.004069c6
lea eax, [ebp - 0x13c]
mov dword [eax], 0
mov dword [eax + 4], 0
mov word [eax + 8], 0
mov dword [ebp - 0xc], 0x64
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x13c]
push eax
push 0
push 0
push 0x475a10
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 8], eax
cmp dword [0x45e03c], 0
je 0x429111
cmp dword [0x462224], 0
je 0x429111
lea eax, [ebp - 0x13c]
push eax
mov eax, dword [ebp - 8]
push eax
push str._n_SERVERNAME_on_read_is__d.__S_
call fcn.00452380
add esp, 0xc
cmp dword [ebp - 8], 0
je 0x429147
cmp dword [0x45e03c], 0
je 0x429135
push str._nERROR2__Server_to_send_to_has_NOT_been_set__Use_STLWA_NT__server__server__to_install.
call fcn.00452380
add esp, 4
push str..pipe_softrack
push 0xb4bbc0
call fcn.004530c0
add esp, 8
mov edi, 0x481d20
xor eax, eax
mov ecx, 0x1f4
rep stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0x767
lea eax, [ebp - 0xc]
push eax
mov eax, 0x481d20
add eax, 0x64
push eax
push 0
push 0
push str.CreateEXEList
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x429196
cmp dword [ebp - 8], 0xea
jne 0x42919d
mov byte [0x481d20], 0x78
cmp dword [ebp - 8], 0xea
jne 0x4291b1
mov byte [0x482487], 0
lea edi, [0x481d84]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
mov ax, word [0x475ad4]
mov word [edi - 1], ax
mov edi, 0x480f40
xor eax, eax
mov ecx, 0x1f4
rep stosd dword es:[edi], eax
mov dword [ebp - 0xc], 0x767
lea eax, [ebp - 0xc]
push eax
mov eax, 0x480f40
add eax, 0x64
push eax
push 0
push 0
push str.DoNotTrackEXEList
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x429219
cmp dword [ebp - 8], 0xea
jne 0x429220
mov byte [0x480f40], 0x79
cmp dword [ebp - 8], 0xea
jne 0x429234
mov byte [0x4816a7], 0
lea edi, [0x480fa4]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
mov ax, word [0x475aec]
mov word [edi - 1], ax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475af0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x429292
mov dword [0x4622e4], 0
jmp 0x42929a
mov eax, dword [ebp - 0x10]
mov dword [0x4622e4], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475afc
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4292df
mov dword [0x4622ec], 0
jmp 0x429307
mov eax, dword [ebp - 0x10]
mov dword [0x4622ec], eax
cmp dword [0x45e03c], 0
je 0x429307
mov eax, dword [0x4622ec]
push eax
push str._r_nNoADGroupTracking_Mode___d
call fcn.00452380
add esp, 8
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475b30
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x42934c
mov dword [0x462298], 0
jmp 0x429356
mov dword [0x462298], 1
cmp dword [0x45e03c], 0
je 0x429376
mov eax, dword [0x462298]
push eax
push str._r_nSBA1___d
call fcn.00452380
add esp, 8
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475b54
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4293bb
mov dword [0x46229c], 0
jmp 0x4293c5
mov dword [0x46229c], 1
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push str.FailOver
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x42940a
mov dword [0x4622a8], 0
jmp 0x429412
mov eax, dword [ebp - 0x10]
mov dword [0x4622a8], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475b74
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x429457
mov dword [0x462fa4], 0
jmp 0x42945f
mov eax, dword [ebp - 0x10]
mov dword [0x462fa4], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475b8c
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4294a4
mov dword [0x4622ac], 0
jmp 0x4294ac
mov eax, dword [ebp - 0x10]
mov dword [0x4622ac], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475ba0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4294f1
mov dword [0x4622b0], 0
jmp 0x4294f9
mov eax, dword [ebp - 0x10]
mov dword [0x4622b0], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475bb0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x42953e
mov dword [0x4622b4], 0
jmp 0x429546
mov eax, dword [ebp - 0x10]
mov dword [0x4622b4], eax
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push str.NoMSK
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x429584
mov dword [0x462168], 1
jmp 0x42958e
mov dword [0x462168], 0
mov dword [0x462168], 0
cmp dword [0x45e03c], 0
je 0x4295b8
mov eax, dword [0x462168]
push eax
push str._n_rMSK___d___0off__f_
call fcn.00452380
add esp, 8
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475bec
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4295f6
mov dword [0x462114], 0
jmp 0x429600
mov dword [0x462114], 1
cmp dword [0x45e03c], 0
je 0x42963a
mov eax, dword [0x462114]
push eax
push str._n_rNMTrack___d___0off_
call fcn.00452380
add esp, 8
cmp dword [0x462114], 0
je 0x42963a
push str._ZERO_METER_SET
call fcn.00452380
add esp, 4
cmp dword [0x462ec8], 0
jne 0x429b93
mov dword [0x462ec8], 1
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475c28
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x429696
mov dword [0x4622e8], 0
jmp 0x4296e5
mov eax, dword [ebp - 0x10]
mov dword [0x4622e8], eax
cmp dword [0x4622e8], 0xb4
jle 0x4296b8
mov dword [0x4622e8], 0xb4
cmp dword [0x45e03c], 0
je 0x4296e5
cmp dword [0x4622e8], 0
je 0x4296e5
mov eax, dword [0x4622e8]
push eax
push str._n_rWill_delay_load_by__d_seconds
call fcn.00452380
add esp, 8
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push str.AlwaysAllowRenames
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x42972a
mov dword [0x46216c], 0
jmp 0x429732
mov eax, dword [ebp - 0x10]
mov dword [0x46216c], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475c68
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x42976d
jmp 0x429775
mov eax, dword [ebp - 0x10]
mov dword [0x462170], eax
cmp dword [0x462170], 0
je 0x4297d5
lea edi, [ebp - 0x26c]
xor eax, eax
mov ecx, 0xc
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov byte [ebp - 0x26c], 0xe1
mov byte [ebp - 0x255], 1
push 0
lea eax, [ebp - 0x270]
push eax
push 0x96
lea eax, [ebp - 0x1d4]
push eax
push 0x96
lea eax, [ebp - 0x26c]
push eax
push 0xab350200
mov eax, dword [0x4622c0]
push eax
call fcn.004372d3
add esp, 0x20
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push str.IfSetTrackAllOpens
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x42981a
mov dword [0x462174], 0
jmp 0x429822
mov eax, dword [ebp - 0x10]
mov dword [0x462174], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push str.AllowIEAccess
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x429867
mov dword [0x46217c], 4
jmp 0x42986f
mov eax, dword [ebp - 0x10]
mov dword [0x46217c], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475ca0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4298b4
mov dword [0x462008], 0
jmp 0x4298bc
mov eax, dword [ebp - 0x10]
mov dword [0x462008], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475cb4
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x429901
mov dword [0x462194], 0
jmp 0x429909
mov eax, dword [ebp - 0x10]
mov dword [0x462194], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475cd4
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x42994e
mov dword [0x462118], 0
jmp 0x429958
mov dword [0x462118], 1
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475ce0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x42999d
mov dword [0x46212c], 0
jmp 0x4299a7
mov dword [0x46212c], 1
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475cf0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4299ec
mov dword [0x462128], 0
jmp 0x4299f6
mov dword [0x462128], 1
cmp dword [0x45e03c], 0
je 0x429a16
mov eax, dword [0x462128]
push eax
push str._n_rLSW01_Status:__d
call fcn.00452380
add esp, 8
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475d10
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x429a5b
mov dword [0x46211c], 0
jmp 0x429a65
mov dword [0x46211c], 1
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475d1c
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x429aaa
mov dword [0x462120], 0
jmp 0x429ab4
mov dword [0x462120], 1
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475d28
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x429af2
mov dword [0x462124], 0
jmp 0x429afc
mov dword [0x462124], 1
cmp dword [0x45e03c], 0
je 0x429b1c
mov eax, dword [0x462124]
push eax
push str._r_nVMLPM_:__d
call fcn.00452380
add esp, 8
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 4
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x475d40
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x429b61
mov dword [0x4622a0], 0
jmp 0x429b93
cmp dword [ebp - 0x10], 0x392
jne 0x429b7a
mov dword [ebp - 0x10], 0x1e0
jmp 0x429b8b
cmp dword [ebp - 0x10], 0x3c
jbe 0x429b8b
mov dword [ebp - 0x10], 0x3c
mov eax, dword [ebp - 0x10]
mov dword [0x4622a0], eax
cmp dword [0x462f30], 0
je 0x429ba5
jmp 0x429f0a
movsx eax, byte [ebp - 0x13c]
cmp eax, 0x5c
je 0x429bc5
movsx eax, byte [ebp - 0x13c]
cmp eax, 0x2f
jne 0x429be0
lea eax, [ebp - 0x13b]
push eax
lea eax, [ebp - 0x13c]
push eax
call fcn.004530c0
add esp, 8
jmp 0x429ba5
cmp dword [0x45e03c], 0
je 0x429c01
lea eax, [ebp - 0x13c]
push eax
push str._n_rUpdated_SENDTO:___S_
call fcn.00452380
add esp, 8
cmp dword [0x462194], 0
je 0x429d34
lea eax, [ebp - 0x13c]
push eax
push 0x475d68
lea eax, [ebp - 0x328]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x290]
mov dword [eax], 0
mov dword [eax + 4], 0
mov word [eax + 8], 0
lea eax, [ebp - 0x290]
push eax
lea eax, [ebp - 0x328]
push eax
call fcn.00408445
add esp, 8
cmp dword [0x45e03c], 0
je 0x429c97
xor eax, eax
mov al, byte [ebp - 0x28d]
push eax
xor eax, eax
mov al, byte [ebp - 0x28e]
push eax
xor eax, eax
mov al, byte [ebp - 0x28f]
push eax
xor eax, eax
mov al, byte [ebp - 0x290]
push eax
push str._n_rConverted_to_IP:___d._d._d._d_
call fcn.00452380
add esp, 0x14
mov dword [0x46219c], 1
cmp dword [ebp - 0x290], 0
jne 0x429ce0
cmp dword [0x462198], 0
je 0x429ce0
mov eax, dword [0x462198]
mov dword [ebp - 0x290], eax
cmp dword [0x45e03c], 0
je 0x429ce0
push str._r_nInitial_IP_conversion_was_0s__using_ALT_IP_ADDRESS
call fcn.00452380
add esp, 4
xor eax, eax
mov al, byte [ebp - 0x28d]
push eax
xor eax, eax
mov al, byte [ebp - 0x28e]
push eax
xor eax, eax
mov al, byte [ebp - 0x28f]
push eax
xor eax, eax
mov al, byte [ebp - 0x290]
push eax
push 0x475dc8
push 0x5f3f00
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
cmp dword [ebp - 0x290], 0
je 0x429d2f
mov eax, dword [ebp - 0x290]
mov dword [0x462198], eax
jmp 0x429e86
lea eax, [ebp - 0x13c]
push eax
push 0x475de0
lea eax, [ebp - 0x3ec]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edi, [ebp - 0x3ec]
mov ecx, 0xffffffff
sub eax, eax
repne scasb al, byte es:[edi]
not ecx
lea eax, [ecx - 1]
mov dword [ebp - 0x32c], eax
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x350], 0
cmp dword [ebp - 0x32c], 0x10
jge 0x429dd9
mov eax, dword [ebp - 0x32c]
cmp dword [ebp - 0x354], eax
jge 0x429dd9
cmp dword [0x4622c8], 0
je 0x429db1
xor eax, eax
jmp 0x429f1b
mov eax, dword [ebp - 0x354]
movsx eax, byte [ebp + eax - 0x3ec]
cmp eax, 0x2e
jne 0x429dce
inc dword [ebp - 0x350]
inc dword [ebp - 0x354]
jmp 0x429d8b
cmp dword [ebp - 0x350], 3
jne 0x429e86
lea eax, [ebp - 0x34c]
push eax
lea eax, [ebp - 0x3ec]
push eax
call fcn.00408445
add esp, 8
cmp dword [0x45e03c], 0
je 0x429e3a
xor eax, eax
mov al, byte [ebp - 0x349]
push eax
xor eax, eax
mov al, byte [ebp - 0x34a]
push eax
xor eax, eax
mov al, byte [ebp - 0x34b]
push eax
xor eax, eax
mov al, byte [ebp - 0x34c]
push eax
push str._n_rServerName_value_is_an_IP_address:___d._d._d._d_
call fcn.00452380
add esp, 0x14
mov dword [0x46219c], 1
xor eax, eax
mov al, byte [ebp - 0x349]
push eax
xor eax, eax
mov al, byte [ebp - 0x34a]
push eax
xor eax, eax
mov al, byte [ebp - 0x34b]
push eax
xor eax, eax
mov al, byte [ebp - 0x34c]
push eax
push 0x475e18
push 0x5f3f00
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
mov eax, dword [ebp - 0x34c]
mov dword [0x462198], eax
push 0x475e30
push 0xb4bbc0
call fcn.004530c0
add esp, 8
lea eax, [ebp - 0x13c]
push eax
push 0xb4bbc0
call fcn.00453080
add esp, 8
push 0x475e38
push 0xb4bbc0
call fcn.00453080
add esp, 8
lea eax, [ebp - 0x13c]
push eax
push 0x5acb60
call fcn.004530c0
add esp, 8
push 0x475e58
push 0x5ad500
call fcn.004530c0
add esp, 8
lea eax, [ebp - 0x13c]
push eax
push 0x5ad500
call fcn.00453080
add esp, 8
push 0x475e60
push 0x5ad500
call fcn.00453080
add esp, 8
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
jmp 0x429f1b
pop edi
pop esi
pop ebx
leave
ret