Function at 0x498920
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f02ac
mov eax, dword fs:[0]
push eax
mov eax, 0x62dc
call fcn.004dfa50
mov eax, dword [0x56f734]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x626c], ecx
mov dword [ebp - 0x6030], 0
lea ecx, [ebp - 0x6028]
call fcn.004d37d0
mov dword [ebp - 4], 1
push 0x17
push 0
push 0x50fdac
lea ecx, [ebp - 0x6028]
call fcn.00454610
mov dword [ebp - 0x6080], eax
cmp dword [ebp - 0x6080], 0
jge 0x4989c5
push 0
mov ecx, dword [ebp + 8]
call fcn.004d37a0
mov eax, dword [ebp - 0x6030]
or eax, 1
mov dword [ebp - 0x6030], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6028]
call fcn.004085a0
mov eax, dword [ebp + 8]
jmp 0x49ae2b
mov ecx, dword [0x56d528]
push ecx
lea ecx, [ebp - 0x6264]
call fcn.00408500
mov dword [ebp - 0x6178], eax
mov edx, dword [ebp - 0x6178]
mov dword [ebp - 0x6260], edx
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x6260]
push eax
lea ecx, [ebp - 0x62e8]
call fcn.004544a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x62e8]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x62d0], esp
mov edx, dword [0x56d524]
push edx
call fcn.00408500
mov dword [ebp - 0x6268], eax
mov eax, dword [ebp - 0x6268]
mov dword [ebp - 0x62d8], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x6028]
call fcn.004300a0
mov byte [ebp - 4], 3
mov ecx, eax
call fcn.00454d00
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x62e8]
call fcn.00413490
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6264]
call fcn.004085e0
lea ecx, [ebp - 0x6024]
call fcn.004d37d0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x602c]
call fcn.004d37d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6044]
call fcn.004d37d0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x604c]
call fcn.004d37d0
mov byte [ebp - 4], 8
push str.registry
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_286]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x605c]
call fcn.00408500
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x62d4], esp
lea edx, [ebp - 0x605c]
push edx
call fcn.0049b210
mov dword [ebp - 0x624c], eax
mov eax, dword [ebp - 0x624c]
mov dword [ebp - 0x62a8], eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x6120]
push ecx
lea ecx, [ebp - 0x6028]
call fcn.004300a0
mov byte [ebp - 4], 0xa
mov ecx, eax
call fcn.004549e0
mov dword [ebp - 0x6118], eax
mov edx, dword [ebp - 0x6118]
mov dword [ebp - 0x61fc], edx
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x61fc]
push eax
lea ecx, [ebp - 0x6024]
call fcn.0049b080
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6120]
call fcn.0045a680
lea ecx, [ebp - 0x6024]
push ecx
push 0
call fcn.00407fd0
add esp, 8
movzx edx, al
test edx, edx
je 0x498bfc
push 0
mov ecx, dword [ebp + 8]
call fcn.004d37a0
mov eax, dword [ebp - 0x6030]
or eax, 1
mov dword [ebp - 0x6030], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x605c]
call fcn.004085e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x604c]
call fcn.004085a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6044]
call fcn.004085a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x602c]
call fcn.004085a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6024]
call fcn.004085a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6028]
call fcn.004085a0
mov eax, dword [ebp + 8]
jmp 0x49ae2b
lea ecx, [ebp - 0x6024]
call fcn.004de0a0
push eax
lea ecx, [ebp - 0x6204]
push ecx
lea ecx, [ebp - 0x6028]
call fcn.004300a0
mov ecx, eax
call fcn.004548a0
mov dword [ebp - 0x6234], eax
mov edx, dword [ebp - 0x6234]
mov dword [ebp - 0x6128], edx
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x6128]
push eax
lea ecx, [ebp - 0x602c]
call fcn.00442930
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6204]
call fcn.004085a0
lea ecx, [ebp - 0x602c]
push ecx
push 0
call fcn.00407fd0
add esp, 8
movzx edx, al
test edx, edx
je 0x498cff
push 0
mov ecx, dword [ebp + 8]
call fcn.004d37a0
mov eax, dword [ebp - 0x6030]
or eax, 1
mov dword [ebp - 0x6030], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x605c]
call fcn.004085e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x604c]
call fcn.004085a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6044]
call fcn.004085a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x602c]
call fcn.004085a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6024]
call fcn.004085a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6028]
call fcn.004085a0
mov eax, dword [ebp + 8]
jmp 0x49ae2b
lea ecx, [ebp - 0x602c]
push ecx
lea ecx, [ebp - 0x6044]
call fcn.00442930
lea edx, [ebp - 0x602c]
push edx
lea ecx, [ebp - 0x604c]
call fcn.00442930
mov byte [ebp - 0x605d], 1
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_286]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_8594]
push str.regkey
lea ecx, [ebp - 0x6074]
call dword [sym.imp.mfc120u.dll_Ordinal_286]
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x6064], 0
mov dword [ebp - 0x6034], 0xffffffff
mov dword [ebp - 0x60ac], 0xffffffff
movzx ecx, byte [ebp - 0x605d]
test ecx, ecx
je 0x49ad80
mov byte [ebp - 0x6039], 0
push 0
lea ecx, [ebp - 0x6074]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x6064], eax
cmp dword [ebp - 0x6064], 0xffffffff
je 0x498fee
mov edx, dword [ebp - 0x6064]
push edx
push 0x52cb90
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x6034], eax
cmp dword [ebp - 0x6034], 0
jl 0x498fdb
mov eax, dword [ebp - 0x6034]
push eax
push 0x52cb94
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x6034], eax
cmp dword [ebp - 0x6034], 0
jl 0x498fdb
mov ecx, dword [ebp - 0x6034]
push ecx
push 0x52cb98
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x60d4], eax
cmp dword [ebp - 0x60d4], 0
jl 0x498efe
mov edx, dword [ebp - 0x60d4]
mov dword [ebp - 0x6034], edx
mov eax, dword [ebp - 0x6034]
push eax
push 0x52cba4
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x6034], eax
cmp dword [ebp - 0x6034], 0
jl 0x498ef9
mov ecx, dword [ebp - 0x6034]
sub ecx, dword [ebp - 0x6064]
add ecx, 1
push ecx
mov edx, dword [ebp - 0x6064]
push edx
lea eax, [ebp - 0x60bc]
push eax
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_8639]
mov byte [ebp - 4], 0x10
push 0x52cba8
push 0x52cbac
lea ecx, [ebp - 0x60bc]
call dword [sym.imp.mfc120u.dll_Ordinal_12634]
push 0
push 0x52cbb0
lea ecx, [ebp - 0x60bc]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x60ac], eax
cmp dword [ebp - 0x60ac], 0xffffffff
jne 0x498ee9
mov dword [ebp - 0x6034], 0xffffffff
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x60bc]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
jmp 0x498fdb
mov ecx, dword [ebp - 0x6034]
push ecx
push 0x52cbcc
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x6034], eax
cmp dword [ebp - 0x6034], 0
jl 0x498fdb
mov byte [ebp - 0x6039], 1
mov edx, dword [ebp - 0x6034]
push edx
push 0x52cbe0
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x6034], eax
cmp dword [ebp - 0x6034], 0
jl 0x498fdb
mov eax, dword [ebp - 0x6034]
sub eax, dword [ebp - 0x6064]
add eax, 1
push eax
mov ecx, dword [ebp - 0x6064]
push ecx
lea edx, [ebp - 0x60c4]
push edx
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_8639]
mov byte [ebp - 4], 0x11
push 0x52cbe4
push 0x52cbe8
lea ecx, [ebp - 0x60c4]
call dword [sym.imp.mfc120u.dll_Ordinal_12634]
push 0
push 0x52cbec
lea ecx, [ebp - 0x60c4]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x60ac], eax
cmp dword [ebp - 0x60ac], 0xffffffff
jne 0x498fcb
mov dword [ebp - 0x6034], 0xffffffff
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x60c4]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
cmp dword [ebp - 0x6034], 0xffffffff
jne 0x498fee
mov dword [ebp - 0x6064], 0xffffffff
cmp dword [ebp - 0x6064], 0
jl 0x49ad74
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
sub eax, dword [ebp - 0x6064]
push eax
lea eax, [ebp - 0x6138]
push eax
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov dword [ebp - 0x6130], eax
mov ecx, dword [ebp - 0x6130]
mov dword [ebp - 0x625c], ecx
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x625c]
push edx
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6138]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push 0x52ca4a
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_290]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
mov ecx, dword [ebp - 0x6034]
sub ecx, dword [ebp - 0x6064]
sub eax, ecx
sub eax, 2
push eax
lea edx, [ebp - 0x606c]
push edx
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x14
push 0
push 0x52cc10
lea ecx, [ebp - 0x606c]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x60f8], eax
cmp dword [ebp - 0x60f8], 0
jl 0x49911c
mov eax, dword [ebp - 0x60f8]
sub eax, 1
push eax
lea ecx, [ebp - 0x623c]
push ecx
lea ecx, [ebp - 0x606c]
call dword [sym.imp.mfc120u.dll_Ordinal_8242]
mov dword [ebp - 0x620c], eax
mov edx, dword [ebp - 0x620c]
mov dword [ebp - 0x6140], edx
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x6140]
push eax
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x623c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov dword [ebp - 0x6088], 0
push 0x52cc14
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_286]
mov byte [ebp - 4], 0x16
push 0
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x60a8], eax
cmp dword [ebp - 0x60a8], 0
jl 0x499171
mov dword [ebp - 0x6088], reloc.OLEAUT32.dll_SysReAllocString
jmp 0x4991b6
push str.hkcu
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_1520]
push 0
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x60a8], eax
cmp dword [ebp - 0x60a8], 0
jl 0x4991b6
mov dword [ebp - 0x6088], VariantCopy
cmp dword [ebp - 0x6088], 0
jne 0x49929e
push 0
mov ecx, dword [ebp + 8]
call fcn.004d37a0
mov ecx, dword [ebp - 0x6030]
or ecx, 1
mov dword [ebp - 0x6030], ecx
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x606c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x6074]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x605c]
call fcn.004085e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x604c]
call fcn.004085a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6044]
call fcn.004085a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x602c]
call fcn.004085a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6024]
call fcn.004085a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6028]
call fcn.004085a0
mov eax, dword [ebp + 8]
jmp 0x49ae2b
lea edx, [ebp - 0x6048]
push edx
lea ecx, [ebp - 0x6068]
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x17
push 0x52cc2c
push 0x52cc30
lea ecx, [ebp - 0x6068]
call dword [sym.imp.mfc120u.dll_Ordinal_12634]
lea ecx, [ebp - 0x6068]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
mov esi, eax
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
sub esi, eax
sub esi, dword [ebp - 0x60a8]
sub esi, 1
push esi
lea eax, [ebp - 0x607c]
push eax
lea ecx, [ebp - 0x6068]
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x607c]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
mov dword [ebp - 0x6278], eax
lea ecx, [ebp - 0x607c]
push ecx
lea ecx, [ebp - 0x6078]
call dword [sym.imp.mfc120u.dll_Ordinal_280]
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x6088], 0x80000002
jne 0x499349
mov dword [ebp - 0x6100], 0x20119
jmp 0x499353
mov dword [ebp - 0x6100], 0x20019
lea edx, [ebp - 0x60a4]
push edx
mov eax, dword [ebp - 0x6100]
push eax
push 0
lea ecx, [ebp - 0x6078]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
mov ecx, dword [ebp - 0x6088]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x60b0], eax
cmp dword [ebp - 0x6088], 0x80000002
jne 0x4993c6
cmp dword [ebp - 0x60b0], 0
je 0x4993c6
lea edx, [ebp - 0x60a4]
push edx
push 0x20219
push 0
lea ecx, [ebp - 0x6078]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
mov eax, dword [ebp - 0x6088]
push eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x60b0], eax
cmp dword [ebp - 0x60b0], 0
jne 0x4993da
movzx ecx, byte [ebp - 0x6039]
test ecx, ecx
je 0x4993f6
cmp dword [ebp - 0x60b0], 0
je 0x49ac94
movzx edx, byte [ebp - 0x6039]
test edx, edx
je 0x49ac94
push 0x52cc34
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1520]
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x6084]
call fcn.00408500
mov byte [ebp - 4], 0x1a
push ecx
mov ecx, esp
mov dword [ebp - 0x62c4], esp
lea eax, [ebp - 0x6084]
push eax
call fcn.0049b210
mov dword [ebp - 0x6148], eax
mov ecx, dword [ebp - 0x6148]
mov dword [ebp - 0x6280], ecx
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0x6254]
push edx
lea ecx, [ebp - 0x6028]
call fcn.004300a0
mov byte [ebp - 4], 0x1a
mov ecx, eax
call fcn.004549e0
mov dword [ebp - 0x6214], eax
mov eax, dword [ebp - 0x6214]
mov dword [ebp - 0x6150], eax
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x6150]
push ecx
lea ecx, [ebp - 0x6024]
call fcn.0049b080
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6254]
call fcn.0045a680
lea edx, [ebp - 0x6024]
push edx
push 0
call fcn.00407fd0
add esp, 8
movzx eax, al
test eax, eax
je 0x4995d8
push 0
mov ecx, dword [ebp + 8]
call fcn.004d37a0
mov ecx, dword [ebp - 0x6030]
or ecx, 1
mov dword [ebp - 0x6030], ecx
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x6084]
call fcn.004085e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x6078]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x607c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x6068]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x606c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x6074]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x605c]
call fcn.004085e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x604c]
call fcn.004085a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6044]
call fcn.004085a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x602c]
call fcn.004085a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6024]
call fcn.004085a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6028]
call fcn.004085a0
mov eax, dword [ebp + 8]
jmp 0x49ae2b
lea ecx, [ebp - 0x6024]
call fcn.004de0a0
push eax
lea edx, [ebp - 0x6160]
push edx
lea ecx, [ebp - 0x6044]
call fcn.004300a0
mov ecx, eax
call fcn.004548a0
mov dword [ebp - 0x6158], eax
mov eax, dword [ebp - 0x6158]
mov dword [ebp - 0x621c], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x621c]
push ecx
lea ecx, [ebp - 0x602c]
call fcn.00442930
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6160]
call fcn.004085a0
lea edx, [ebp - 0x602c]
push edx
push 0
call fcn.00407fd0
add esp, 8
movzx eax, al
test eax, eax
je 0x49976a
push 0
mov ecx, dword [ebp + 8]
call fcn.004d37a0
mov ecx, dword [ebp - 0x6030]
or ecx, 1
mov dword [ebp - 0x6030], ecx
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x6084]
call fcn.004085e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x6078]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x607c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x6068]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x606c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x6074]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x605c]
call fcn.004085e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x604c]
call fcn.004085a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6044]
call fcn.004085a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x602c]
call fcn.004085a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6024]
call fcn.004085a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6028]
call fcn.004085a0
mov eax, dword [ebp + 8]
jmp 0x49ae2b
lea edx, [ebp - 0x602c]
push edx
lea ecx, [ebp - 0x6044]
call fcn.00442930
lea eax, [ebp - 0x6050]
push eax
lea ecx, [ebp - 0x602c]
call fcn.004300a0
mov ecx, eax
call fcn.004302a0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x1f
movzx ecx, byte [ebp - 0x6039]
test ecx, ecx
je 0x4997c7
push 0x52cc44
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_1520]
jmp 0x4997d8
push 0x52cc58
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_1520]
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x6098]
call fcn.00408500
mov byte [ebp - 4], 0x20
push ecx
mov ecx, esp
mov dword [ebp - 0x62b0], esp
lea edx, [ebp - 0x6098]
push edx
call fcn.0049b210
mov dword [ebp - 0x6244], eax
mov eax, dword [ebp - 0x6244]
mov dword [ebp - 0x6288], eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x6170]
push ecx
lea ecx, [ebp - 0x6028]
call fcn.004300a0
mov byte [ebp - 4], 0x20
mov ecx, eax
call fcn.0045a7a0
mov dword [ebp - 0x6168], eax
mov edx, dword [ebp - 0x6168]
mov dword [ebp - 0x6224], edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x6224]
push eax
lea ecx, [ebp - 0x6038]
call fcn.0045a4e0
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x6170]
call fcn.0045a680
lea ecx, [ebp - 0x6038]
push ecx
push 0
call fcn.00407ff0
add esp, 8
movzx edx, al
test edx, edx
je 0x49993d
lea ecx, [ebp - 0x6038]
call fcn.004de0a0
push eax
lea eax, [ebp - 0x61e8]
push eax
lea ecx, [ebp - 0x6050]
call fcn.004300a0
mov ecx, eax
call fcn.0045a850
mov dword [ebp - 0x61e4], eax
mov ecx, dword [ebp - 0x61e4]
mov dword [ebp - 0x610c], ecx
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x610c]
call fcn.004ab520
movzx edx, al
mov dword [ebp - 0x6080], edx
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x61e8]
call fcn.004085a0
cmp dword [ebp - 0x6080], 0
jl 0x49993d
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push ecx
mov ecx, esp
mov dword [ebp - 0x62c8], esp
push eax
call fcn.00408500
mov dword [ebp - 0x6180], eax
mov eax, dword [ebp - 0x6180]
mov dword [ebp - 0x6290], eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x6038]
call fcn.004300a0
mov byte [ebp - 4], 0x24
mov ecx, eax
call fcn.004547d0
push 0
push 0x52cc64
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x6108], eax
cmp dword [ebp - 0x6108], 0
jl 0x49ac3b
mov ecx, dword [ebp - 0x6108]
push ecx
lea edx, [ebp - 0x608c]
push edx
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_8638]
mov byte [ebp - 4], 0x27
push 0
push str.regval__notexist
lea ecx, [ebp - 0x608c]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x60cc], eax
cmp dword [ebp - 0x60cc], 0
jl 0x49a11a
mov eax, dword [ebp - 0x60cc]
add eax, 0x11
push eax
lea ecx, [ebp - 0x6070]
push ecx
lea ecx, [ebp - 0x608c]
call dword [sym.imp.mfc120u.dll_Ordinal_8638]
mov byte [ebp - 4], 0x28
push 0
push 0x52cc98
lea ecx, [ebp - 0x6070]
call dword [sym.imp.mfc120u.dll_Ordinal_4621]
mov dword [ebp - 0x60fc], eax
cmp dword [ebp - 0x60fc], 0
jle 0x499a3d
mov edx, dword [ebp - 0x60fc]
push edx
lea eax, [ebp - 0x61f8]
push eax
lea ecx, [ebp - 0x6070]
call dword [sym.imp.mfc120u.dll_Ordinal_8242]
mov dword [ebp - 0x61f0], eax
mov ecx, dword [ebp - 0x61f0]
mov dword [ebp - 0x6188], ecx
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x6188]
push edx
lea ecx, [ebp - 0x6070]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x61f8]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
push 0x52cc9c
push 0x52cca0
lea ecx, [ebp - 0x6070]
call dword [sym.imp.mfc120u.dll_Ordinal_12634]
push 0x52cca4
push 0x52cca8
lea ecx, [ebp - 0x6070]
call dword [sym.imp.mfc120u.dll_Ordinal_12634]
mov dword [ebp - 0x6190], 0x1000
mov dword [ebp - 0x6200], 0
lea eax, [ebp - 0x6190]
push eax
lea ecx, [ebp - 0x601c]
push ecx
lea edx, [ebp - 0x6200]
push edx
push 0
lea ecx, [ebp - 0x6070]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
mov eax, dword [ebp - 0x60a4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x6198], eax
cmp dword [ebp - 0x6198], 0
je 0x49a105
push 0x52ccac
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1520]
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x60b8]
call fcn.00408500
mov byte [ebp - 4], 0x2a
push ecx
mov ecx, esp
mov dword [ebp - 0x62b8], esp
lea edx, [ebp - 0x60b8]
push edx
call fcn.0049b210
mov dword [ebp - 0x6208], eax
mov eax, dword [ebp - 0x6208]
mov dword [ebp - 0x6298], eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x61a8]
push ecx
lea ecx, [ebp - 0x6028]
call fcn.004300a0
mov byte [ebp - 4], 0x2a
mov ecx, eax
call fcn.004549e0
mov dword [ebp - 0x61a0], eax
mov edx, dword [ebp - 0x61a0]
mov dword [ebp - 0x6210], edx
mov byte [ebp - 4], 0x2c
mov eax, dword [ebp - 0x6210]
push eax
lea ecx, [ebp - 0x6024]
call fcn.0049b080
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x61a8]
call fcn.0045a680
lea ecx, [ebp - 0x6024]
push ecx
push 0
call fcn.00407fd0
add esp, 8
movzx edx, al
test edx, edx
je 0x499d0f
push 0
mov ecx, dword [ebp + 8]
call fcn.004d37a0
mov eax, dword [ebp - 0x6030]
or eax, 1
mov dword [ebp - 0x6030], eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x60b8]
call fcn.004085e0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x6070]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x608c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x6038]
call fcn.004085a0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x6098]
call fcn.004085e0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6050]
call fcn.004085a0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x6084]
call fcn.004085e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x6078]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x607c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x6068]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x606c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x6074]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x605c]
call fcn.004085e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x604c]
call fcn.004085a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6044]
call fcn.004085a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x602c]
call fcn.004085a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6024]
call fcn.004085a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6028]
call fcn.004085a0
mov eax, dword [ebp + 8]
jmp 0x49ae2b
lea ecx, [ebp - 0x6024]
call fcn.004de0a0
push eax
lea ecx, [ebp - 0x6220]
push ecx
lea ecx, [ebp - 0x6044]
call fcn.004300a0
mov ecx, eax
call fcn.004548a0
mov dword [ebp - 0x6218], eax
mov edx, dword [ebp - 0x6218]
mov dword [ebp - 0x61b0], edx
mov byte [ebp - 4], 0x2d
mov eax, dword [ebp - 0x61b0]
push eax
lea ecx, [ebp - 0x602c]
call fcn.00442930
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x6220]
call fcn.004085a0
lea ecx, [ebp - 0x602c]
push ecx
push 0
call fcn.00407fd0
add esp, 8
movzx edx, al
test edx, edx
je 0x499f0d
push 0
mov ecx, dword [ebp + 8]
call fcn.004d37a0
mov eax, dword [ebp - 0x6030]
or eax, 1
mov dword [ebp - 0x6030], eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x60b8]
call fcn.004085e0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x6070]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x608c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x6038]
call fcn.004085a0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x6098]
call fcn.004085e0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6050]
call fcn.004085a0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x6084]
call fcn.004085e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x6078]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x607c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x6068]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x606c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x6074]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x605c]
call fcn.004085e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x604c]
call fcn.004085a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6044]
call fcn.004085a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x602c]
call fcn.004085a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6024]
call fcn.004085a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6028]
call fcn.004085a0
mov eax, dword [ebp + 8]
jmp 0x49ae2b
lea ecx, [ebp - 0x61c0]
push ecx
lea ecx, [ebp - 0x6024]
call fcn.004300a0
mov ecx, eax
call fcn.004302a0
mov dword [ebp - 0x61b8], eax
mov edx, dword [ebp - 0x61b8]
mov dword [ebp - 0x6228], edx
mov byte [ebp - 4], 0x2e
mov eax, dword [ebp - 0x6228]
push eax
lea ecx, [ebp - 0x6050]
call fcn.00442930
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x61c0]
call fcn.004085a0
push str.notexist
lea ecx, [ebp - 0x60f4]
call dword [sym.imp.mfc120u.dll_Ordinal_286]
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x60f4]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x60dc]
call fcn.00408500
mov byte [ebp - 4], 0x30
push ecx
mov ecx, esp
mov dword [ebp - 0x62cc], esp
lea edx, [ebp - 0x60dc]
push edx
call fcn.0049b210
mov dword [ebp - 0x6230], eax
mov eax, dword [ebp - 0x6230]
mov dword [ebp - 0x62a0], eax
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x61d0]
push ecx
lea ecx, [ebp - 0x6028]
call fcn.004300a0
mov byte [ebp - 4], 0x30
mov ecx, eax
call fcn.0045a7a0
mov dword [ebp - 0x61c8], eax
mov edx, dword [ebp - 0x61c8]
mov dword [ebp - 0x6238], edx
mov byte [ebp - 4], 0x32
mov eax, dword [ebp - 0x6238]
push eax
lea ecx, [ebp - 0x6038]
call fcn.00464c80
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x61d0]
call fcn.0045a680
lea ecx, [ebp - 0x6038]
push ecx
push 0
call fcn.00407ff0
add esp, 8
movzx edx, al
test edx, edx
je 0x49a0d7
lea ecx, [ebp - 0x6038]
call fcn.004de0a0
push eax
lea eax, [ebp - 0x6248]
push eax
lea ecx, [ebp - 0x6050]
call fcn.004300a0
mov ecx, eax
call fcn.0045a850
mov dword [ebp - 0x6240], eax
mov ecx, dword [ebp - 0x6240]
mov dword [ebp - 0x61d8], ecx
mov byte [ebp - 4], 0x33
mov ecx, dword [ebp - 0x61d8]
call fcn.004ab520
movzx edx, al
mov dword [ebp - 0x6080], edx
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x6248]
call fcn.004085a0
cmp dword [ebp - 0x6080], 0
jl 0x49a0d7
lea ecx, [ebp - 0x6070]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push ecx
mov ecx, esp
mov dword [ebp - 0x62c0], esp
push eax
call fcn.00408500
mov dword [ebp - 0x61e0], eax
mov eax, dword [ebp - 0x61e0]
mov dword [ebp - 0x6270], eax
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x6038]
call fcn.004300a0
mov byte [ebp - 4], 0x30
mov ecx, eax
call fcn.004547d0
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x60dc]
call fcn.004085e0
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x60f4]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x60b8]
call fcn.004085e0
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x6070]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
jmp 0x49ac2b
mov dword [ebp - 0x60c8], 0
mov dword [ebp - 0x60d8], 0x1000
mov dword [ebp - 0x60e0], 0x1000
mov dword [ebp - 0x60c0], 0
mov ecx, 2
imul edx, ecx, 0
mov dword [ebp - 0x60e4], edx
cmp dword [ebp - 0x60e4], 0x2002
jae 0x49a15e
jmp 0x49a163
call fcn.004dfc08
xor eax, eax
mov ecx, dword [ebp - 0x60e4]
mov word [ebp + ecx - 0x4018], ax
mov edx, 2
imul eax, edx, 0
mov dword [ebp - 0x6104], eax
cmp dword [ebp - 0x6104], 0x2002
jae 0x49a18f
jmp 0x49a194
call fcn.004dfc08
xor ecx, ecx
mov edx, dword [ebp - 0x6104]
mov word [ebp + edx - 0x2014], cx
lea ecx, [ebp - 0x6094]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x6090]
call dword [sym.imp.mfc120u.dll_Ordinal_296]
mov byte [ebp - 4], 0x36
mov byte [ebp - 0x603a], 0
mov dword [ebp - 0x609c], 0
lea eax, [ebp - 0x60e0]
push eax
lea ecx, [ebp - 0x2014]
push ecx
lea edx, [ebp - 0x609c]
push edx
push 0
lea eax, [ebp - 0x60d8]
push eax
lea ecx, [ebp - 0x4018]
push ecx
mov edx, dword [ebp - 0x60c8]
push edx
mov eax, dword [ebp - 0x60a4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
jne 0x49abfe
cmp dword [ebp - 0x609c], 1
jne 0x49a25a
lea ecx, [ebp - 0x4018]
push ecx
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_1520]
lea edx, [ebp - 0x2014]
push edx
push 0x52ccd0
lea eax, [ebp - 0x6094]
push eax
call dword [sym.imp.mfc120u.dll_Ordinal_4772]
add esp, 0xc
mov byte [ebp - 0x603a], 1
jmp 0x49a317
cmp dword [ebp - 0x609c], 4
je 0x49a270
cmp dword [ebp - 0x609c], 0xb
jne 0x49a317
lea ecx, [ebp - 0x4018]
push ecx
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_1520]
lea edx, [ebp - 0x2014]
mov dword [ebp - 0x60b4], edx
mov eax, 1
imul ecx, eax, 0
mov edx, dword [ebp - 0x60b4]
movzx eax, byte [edx + ecx]
mov ecx, 1
shl ecx, 0
mov edx, dword [ebp - 0x60b4]
movzx ecx, byte [edx + ecx]
shl ecx, 8
add eax, ecx
mov edx, 1
shl edx, 1
mov ecx, dword [ebp - 0x60b4]
movzx edx, byte [ecx + edx]
shl edx, 8
shl edx, 8
add eax, edx
mov ecx, 1
imul edx, ecx, 3
mov ecx, dword [ebp - 0x60b4]
movzx edx, byte [ecx + edx]
shl edx, 8
shl edx, 8
shl edx, 8
add eax, edx
mov dword [ebp - 0x60c0], eax
mov eax, dword [ebp - 0x60c0]
push eax
push 0x52ccd8
lea ecx, [ebp - 0x6094]
push ecx
call dword [sym.imp.mfc120u.dll_Ordinal_4772]
add esp, 0xc
mov byte [ebp - 0x603a], 1
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_8594]
lea ecx, [ebp - 0x6094]
call dword [sym.imp.mfc120u.dll_Ordinal_8594]
movzx edx, byte [ebp - 0x603a]
test edx, edx
je 0x49ab63
push str.regval
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1520]
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x60a0]
call fcn.00408500
mov byte [ebp - 4], 0x37
push ecx
mov ecx, esp
mov dword [ebp - 0x6274], esp
lea eax, [ebp - 0x60a0]
push eax
call fcn.0049b210
mov dword [ebp - 0x6250], eax
mov ecx, dword [ebp - 0x6250]
mov dword [ebp - 0x627c], ecx
mov byte [ebp - 4], 0x38
lea edx, [ebp - 0x622c]
push edx
lea ecx, [ebp - 0x6028]
call fcn.004300a0
mov byte [ebp - 4], 0x37
mov ecx, eax
call fcn.004549e0
mov dword [ebp - 0x6258], eax
mov eax, dword [ebp - 0x6258]
mov dword [ebp - 0x61ec], eax
mov byte [ebp - 4], 0x39
mov ecx, dword [ebp - 0x61ec]
push ecx
lea ecx, [ebp - 0x6024]
call fcn.0049b080
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x622c]
call fcn.0045a680
lea edx, [ebp - 0x6024]
push edx
push 0
call fcn.00407fd0
add esp, 8
movzx eax, al
test eax, eax
je 0x49a59c
push 0
mov ecx, dword [ebp + 8]
call fcn.004d37a0
mov ecx, dword [ebp - 0x6030]
or ecx, 1
mov dword [ebp - 0x6030], ecx
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x60a0]
call fcn.004085e0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x6090]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x6094]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x608c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x6038]
call fcn.004085a0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x6098]
call fcn.004085e0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6050]
call fcn.004085a0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x6084]
call fcn.004085e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x6078]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x607c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x6068]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x606c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x6074]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x605c]
call fcn.004085e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x604c]
call fcn.004085a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6044]
call fcn.004085a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x602c]
call fcn.004085a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6024]
call fcn.004085a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6028]
call fcn.004085a0
mov eax, dword [ebp + 8]
jmp 0x49ae2b
lea ecx, [ebp - 0x6024]
call fcn.004de0a0
push eax
lea edx, [ebp - 0x6114]
push edx
lea ecx, [ebp - 0x6044]
call fcn.004300a0
mov ecx, eax
call fcn.004548a0
mov dword [ebp - 0x61f4], eax
mov eax, dword [ebp - 0x61f4]
mov dword [ebp - 0x6110], eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x6110]
push ecx
lea ecx, [ebp - 0x602c]
call fcn.00442930
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x6114]
call fcn.004085a0
lea edx, [ebp - 0x602c]
push edx
push 0
call fcn.00407fd0
add esp, 8
movzx eax, al
test eax, eax
je 0x49a7aa
push 0
mov ecx, dword [ebp + 8]
call fcn.004d37a0
mov ecx, dword [ebp - 0x6030]
or ecx, 1
mov dword [ebp - 0x6030], ecx
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x60a0]
call fcn.004085e0
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x6090]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x6094]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x608c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x6038]
call fcn.004085a0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x6098]
call fcn.004085e0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6050]
call fcn.004085a0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x6084]
call fcn.004085e0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x6078]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x607c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x6068]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x606c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x6074]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x605c]
call fcn.004085e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x604c]
call fcn.004085a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6044]
call fcn.004085a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x602c]
call fcn.004085a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6024]
call fcn.004085a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6028]
call fcn.004085a0
mov eax, dword [ebp + 8]
jmp 0x49ae2b
lea edx, [ebp - 0x612c]
push edx
lea ecx, [ebp - 0x6024]
call fcn.004300a0
mov ecx, eax
call fcn.004302a0
mov dword [ebp - 0x611c], eax
mov eax, dword [ebp - 0x611c]
mov dword [ebp - 0x6124], eax
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x6124]
push ecx
lea ecx, [ebp - 0x6050]
call fcn.00442930
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x612c]
call fcn.004085a0
push 0x52ccf0
lea ecx, [ebp - 0x6090]
call dword [sym.imp.mfc120u.dll_Ordinal_1520]
lea ecx, [ebp - 0x6090]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x60d0]
call fcn.00408500
mov byte [ebp - 4], 0x3c
push ecx
mov ecx, esp
mov dword [ebp - 0x6284], esp
lea edx, [ebp - 0x60d0]
push edx
call fcn.0049b210
mov dword [ebp - 0x6134], eax
mov eax, dword [ebp - 0x6134]
mov dword [ebp - 0x628c], eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x614c]
push ecx
lea ecx, [ebp - 0x6028]
call fcn.004300a0
mov byte [ebp - 4], 0x3c
mov ecx, eax
call fcn.0045a7a0
mov dword [ebp - 0x613c], eax
mov edx, dword [ebp - 0x613c]
mov dword [ebp - 0x6144], edx
mov byte [ebp - 4], 0x3e
mov eax, dword [ebp - 0x6144]
push eax
lea ecx, [ebp - 0x6038]
call fcn.00464c80
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x614c]
call fcn.0045a680
lea ecx, [ebp - 0x6038]
push ecx
push 0
call fcn.00407ff0
add esp, 8
movzx edx, al
test edx, edx
je 0x49a970
lea ecx, [ebp - 0x6038]
call fcn.004de0a0
push eax
lea eax, [ebp - 0x6164]
push eax
lea ecx, [ebp - 0x6050]
call fcn.004300a0
mov ecx, eax
call fcn.0045a850
mov dword [ebp - 0x6154], eax
mov ecx, dword [ebp - 0x6154]
mov dword [ebp - 0x615c], ecx
mov byte [ebp - 4], 0x3f
mov ecx, dword [ebp - 0x615c]
call fcn.004ab520
movzx edx, al
mov dword [ebp - 0x6080], edx
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x6164]
call fcn.004085a0
cmp dword [ebp - 0x6080], 0
jl 0x49a970
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push ecx
mov ecx, esp
mov dword [ebp - 0x6294], esp
push eax
call fcn.00408500
mov dword [ebp - 0x616c], eax
mov eax, dword [ebp - 0x616c]
mov dword [ebp - 0x629c], eax
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x6038]
call fcn.004300a0
mov byte [ebp - 4], 0x3c
mov ecx, eax
call fcn.004547d0
lea ecx, [ebp - 0x6184]
push ecx
lea ecx, [ebp - 0x6024]
call fcn.004300a0
mov ecx, eax
call fcn.004302a0
mov dword [ebp - 0x6174], eax
mov edx, dword [ebp - 0x6174]
mov dword [ebp - 0x617c], edx
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0x617c]
push eax
lea ecx, [ebp - 0x6050]
call fcn.00442930
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x6184]
call fcn.004085a0
push 0x52ccfc
lea ecx, [ebp - 0x6090]
call dword [sym.imp.mfc120u.dll_Ordinal_1520]
lea ecx, [ebp - 0x6090]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push eax
lea ecx, [ebp - 0x60ec]
call fcn.00408500
mov byte [ebp - 4], 0x42
push ecx
mov ecx, esp
mov dword [ebp - 0x62a4], esp
lea edx, [ebp - 0x60ec]
push edx
call fcn.0049b210
mov dword [ebp - 0x618c], eax
mov eax, dword [ebp - 0x618c]
mov dword [ebp - 0x62ac], eax
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x61a4]
push ecx
lea ecx, [ebp - 0x6028]
call fcn.004300a0
mov byte [ebp - 4], 0x42
mov ecx, eax
call fcn.0045a7a0
mov dword [ebp - 0x6194], eax
mov edx, dword [ebp - 0x6194]
mov dword [ebp - 0x619c], edx
mov byte [ebp - 4], 0x44
mov eax, dword [ebp - 0x619c]
push eax
lea ecx, [ebp - 0x6038]
call fcn.00464c80
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x61a4]
call fcn.0045a680
lea ecx, [ebp - 0x6038]
push ecx
push 0
call fcn.00407ff0
add esp, 8
movzx edx, al
test edx, edx
je 0x49ab36
lea ecx, [ebp - 0x6038]
call fcn.004de0a0
push eax
lea eax, [ebp - 0x61bc]
push eax
lea ecx, [ebp - 0x6050]
call fcn.004300a0
mov ecx, eax
call fcn.0045a850
mov dword [ebp - 0x61ac], eax
mov ecx, dword [ebp - 0x61ac]
mov dword [ebp - 0x61b4], ecx
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x61b4]
call fcn.004ab520
movzx edx, al
mov dword [ebp - 0x6080], edx
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x61bc]
call fcn.004085a0
cmp dword [ebp - 0x6080], 0
jl 0x49ab36
lea ecx, [ebp - 0x6094]
call dword [sym.imp.mfc120u.dll_Ordinal_1658]
push ecx
mov ecx, esp
mov dword [ebp - 0x62b4], esp
push eax
call fcn.00408500
mov dword [ebp - 0x61c4], eax
mov eax, dword [ebp - 0x61c4]
mov dword [ebp - 0x62bc], eax
mov byte [ebp - 4], 0x46
lea ecx, [ebp - 0x6038]
call fcn.004300a0
mov byte [ebp - 4], 0x42
mov ecx, eax
call fcn.004547d0
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x60ec]
call fcn.004085e0
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x60d0]
call fcn.004085e0
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x60a0]
call fcn.004085e0
mov byte [ebp - 0x603a], 0
mov dword [ebp - 0x60d8], 0x1000
mov dword [ebp - 0x60e0], 0x1000
mov ecx, 2
imul edx, ecx, 0
mov dword [ebp - 0x60e8], edx
cmp dword [ebp - 0x60e8], 0x2002
jae 0x49ab9a
jmp 0x49ab9f
call fcn.004dfc08
xor eax, eax
mov ecx, dword [ebp - 0x60e8]
mov word [ebp + ecx - 0x4018], ax
mov edx, 2
imul eax, edx, 0
mov dword [ebp - 0x60f0], eax
cmp dword [ebp - 0x60f0], 0x2002
jae 0x49abcb
jmp 0x49abd0
call fcn.004dfc08
xor ecx, ecx
mov edx, dword [ebp - 0x60f0]
mov word [ebp + edx - 0x2014], cx
mov dword [ebp - 0x609c], 0
mov eax, dword [ebp - 0x60c8]
add eax, 1
mov dword [ebp - 0x60c8], eax
jmp 0x49a1d5
mov ecx, dword [ebp - 0x60a4]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x6090]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x6094]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x608c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov edx, dword [ebp - 0x6088]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x6038]
call fcn.004085a0
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x6098]
call fcn.004085e0
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x6054]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x6050]
call fcn.004085a0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x6084]
call fcn.004085e0
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
mov esi, eax
lea ecx, [ebp - 0x6074]
call dword [sym.imp.mfc120u.dll_Ordinal_5787]
sub esi, eax
sub esi, 1
push esi
lea eax, [ebp - 0x61dc]
push eax
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_12792]
mov dword [ebp - 0x61cc], eax
mov ecx, dword [ebp - 0x61cc]
mov dword [ebp - 0x61d4], ecx
mov byte [ebp - 4], 0x47
mov edx, dword [ebp - 0x61d4]
push edx
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_1518]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x61dc]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
lea eax, [ebp - 0x604c]
push eax
lea ecx, [ebp - 0x6044]
call fcn.00442930
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x6078]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x607c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x6068]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x6058]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x606c]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x6048]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
jmp 0x49ad7b
mov byte [ebp - 0x605d], 0
jmp 0x498d7d
lea ecx, [ebp - 0x6028]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0042fe40
mov edx, dword [ebp - 0x6030]
or edx, 1
mov dword [ebp - 0x6030], edx
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x6074]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x6020]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x605c]
call fcn.004085e0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x6040]
call dword [sym.imp.mfc120u.dll_Ordinal_1042]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x604c]
call fcn.004085a0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x6044]
call fcn.004085a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x602c]
call fcn.004085a0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x6024]
call fcn.004085a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6028]
call fcn.004085a0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004df9ac
mov esp, ebp
pop ebp
ret 8