Function at 0x40f290
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x42a60e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x184
mov al, byte [esp + 2]
push ebx
push ebp
push esi
xor ebp, ebp
push edi
push ebp
lea ecx, [esp + 0xe8]
mov byte [esp + 0x17], 0
mov byte [esp + 0xe8], al
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0xec]
call fcn.00402050
mov cl, byte [esp + 0x12]
push ebp
mov byte [esp + 0xc8], cl
lea ecx, [esp + 0xc8]
mov dword [esp + 0x1a0], ebp
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0xcc]
call fcn.00402050
mov dl, byte [esp + 0x12]
push ebp
lea ecx, [esp + 0x48]
mov byte [esp + 0x1a0], 1
mov byte [esp + 0x48], dl
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0x4c]
call fcn.00402050
mov al, byte [esp + 0x12]
push ebp
lea ecx, [esp + 0x138]
mov byte [esp + 0x1a0], 2
mov byte [esp + 0x138], al
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0x13c]
call fcn.00402050
mov cl, byte [esp + 0x12]
push ebp
mov byte [esp + 0x78], cl
lea ecx, [esp + 0x78]
mov byte [esp + 0x1a0], 3
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0x7c]
call fcn.00402050
mov dl, byte [esp + 0x12]
push ebp
lea ecx, [esp + 0x148]
mov byte [esp + 0x1a0], 4
mov byte [esp + 0x148], dl
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0x14c]
call fcn.00402050
push str.hpfC32
lea eax, [esp + 0x108]
push 0x432550
push eax
mov byte [esp + 0x1a8], 5
call fcn.004023f0
add esp, 0xc
mov esi, dword [esp + 0x1a4]
mov byte [esp + 0x19c], 6
cmp dword [esi + 8], ebp
jne 0x40f46b
push str.sDriverName.empty__
push str.Error______s
push 0xa3
jmp 0x41019c
call fcn.0041da50
cmp eax, 6
jne 0x40f489
push str.eOsVersion__OsVersionType_Unknown
push str.Error______s
push 0xa7
jmp 0x41019c
cmp eax, 2
jg 0x40ffd0
mov cl, byte [esp + 0x12]
push ebp
mov byte [esp + 0x18], cl
lea ecx, [esp + 0x18]
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0x1c]
call fcn.00402050
mov dl, byte [esp + 0x12]
push ebp
lea ecx, [esp + 0x58]
mov byte [esp + 0x1a0], 7
mov byte [esp + 0x58], dl
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0x5c]
call fcn.00402050
mov al, byte [esp + 0x12]
push ebp
lea ecx, [esp + 0x68]
mov byte [esp + 0x1a0], 8
mov byte [esp + 0x68], al
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0x6c]
call fcn.00402050
mov cl, byte [esp + 0x12]
push ebp
mov byte [esp + 0x88], cl
lea ecx, [esp + 0x88]
mov byte [esp + 0x1a0], 9
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0x8c]
call fcn.00402050
mov dl, byte [esp + 0x12]
push ebp
lea ecx, [esp + 0x38]
mov byte [esp + 0x1a0], 0xa
mov byte [esp + 0x38], dl
call fcn.00402000
mov edi, str.Driver
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.Driver
lea ecx, [esp + 0x3c]
call fcn.00402050
mov al, byte [esp + 0x12]
push ebp
lea ecx, [esp + 0xf8]
mov byte [esp + 0x1a0], 0xb
mov byte [esp + 0xf8], al
call fcn.00402000
mov edi, str.SystemCurrentControlSetServicesClass_
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.SystemCurrentControlSetServicesClass_
lea ecx, [esp + 0xfc]
call fcn.00402050
mov cl, byte [esp + 0x12]
push ebp
mov byte [esp + 0x98], cl
lea ecx, [esp + 0x98]
mov byte [esp + 0x1a0], 0xc
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0x9c]
call fcn.00402050
mov dl, byte [esp + 0x12]
push ebp
lea ecx, [esp + 0xa8]
mov byte [esp + 0x1a0], 0xd
mov byte [esp + 0xa8], dl
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0xac]
call fcn.00402050
mov al, byte [esp + 0x12]
push ebp
lea ecx, [esp + 0x128]
mov byte [esp + 0x1a0], 0xe
mov byte [esp + 0x128], al
call fcn.00402000
mov edi, str.ClassGuid
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.ClassGuid
lea ecx, [esp + 0x12c]
call fcn.00402050
mov cl, byte [esp + 0x12]
push ebp
mov byte [esp + 0xb8], cl
lea ecx, [esp + 0xb8]
mov byte [esp + 0x1a0], 0xf
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0xbc]
call fcn.00402050
mov dl, byte [esp + 0x12]
push ebp
lea ecx, [esp + 0xd8]
mov byte [esp + 0x1a0], 0x10
mov byte [esp + 0xd8], dl
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x431f30
lea ecx, [esp + 0xdc]
call fcn.00402050
push 0x42d8ac
lea eax, [esp + 0x158]
push 0x432900
push eax
mov byte [esp + 0x1a8], 0x11
call fcn.004023f0
push esi
lea ecx, [esp + 0x34]
mov bl, 0x12
push eax
push ecx
mov byte [esp + 0x1b4], bl
call fcn.00402520
add esp, 0x18
mov edx, dword [0x42b140]
lea ecx, [esp + 0x14]
push edx
push ebp
push eax
mov byte [esp + 0x1a8], 0x13
call fcn.00401e00
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x1a0], bl
call fcn.00402000
push 1
lea ecx, [esp + 0x158]
mov byte [esp + 0x1a0], 0x11
call fcn.00402000
cmp dword [esp + 0x1c], ebp
jne 0x40f7c4
push str.sRegKeyFactory.empty__
push str.Error______s
push 0xbd
jmp 0x40f8f5
push 0x80000002
lea eax, [esp + 0x58]
push 1
push eax
lea ecx, [esp + 0x20]
push 0x4327c0
push ecx
call fcn.0041b4e0
add esp, 0x14
test al, al
jne 0x40f804
push 0x80000002
lea edx, [esp + 0x58]
push 1
push edx
lea eax, [esp + 0x20]
push 0x432840
push eax
call fcn.0041b4e0
add esp, 0x14
cmp dword [esp + 0x5c], ebp
je 0x40fe9b
mov eax, dword [esp + 0x58]
cmp eax, ebp
jne 0x40f81b
mov eax, 0x42b144
push eax
push str.sDeviceId___s
push ebp
push 0x4321c8
call fcn.004183b0
lea ecx, [esp + 0x64]
lea edx, [esp + 0x34]
push ecx
push str.ENUMPARENUM_
push edx
call fcn.00405e50
add esp, 0x1c
mov ecx, dword [0x42b140]
mov byte [esp + 0x19c], 0x14
push ecx
push ebp
push eax
lea ecx, [esp + 0x70]
call fcn.00401e00
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x1a0], 0x11
call fcn.00402000
cmp dword [esp + 0x6c], ebp
jne 0x40f887
push str.sRegKeyLptEnum.empty__
push str.Error______s
push 0xc8
jmp 0x40f8f5
push 0x80000002
lea edx, [esp + 0x68]
push 1
push edx
call fcn.0041bab0
lea eax, [esp + 0x60]
lea ecx, [esp + 0x30]
push eax
push str.ENUMLPTENUM_
push ecx
call fcn.00405e50
add esp, 0x18
mov edx, dword [0x42b140]
lea ecx, [esp + 0x64]
push edx
push ebp
push eax
mov byte [esp + 0x1a8], 0x15
call fcn.00401e00
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x1a0], 0x11
call fcn.00402000
cmp dword [esp + 0x6c], ebp
jne 0x40fa07
push str.sRegKeyLptEnum.empty__
push str.Error______s
push 0xcb
push str...ghoul_uninstall.cpp
push ebp
push 0x4321c8
call fcn.00418600
add esp, 0x18
lea ecx, [esp + 0xd4]
mov byte [esp + 0x19c], 0x10
push 1
call fcn.00402000
push 1
lea ecx, [esp + 0xb8]
mov byte [esp + 0x1a0], 0xf
call fcn.00402000
push 1
lea ecx, [esp + 0x128]
mov byte [esp + 0x1a0], 0xe
call fcn.00402000
push 1
lea ecx, [esp + 0xa8]
mov byte [esp + 0x1a0], 0xd
call fcn.00402000
push 1
lea ecx, [esp + 0x98]
mov byte [esp + 0x1a0], 0xc
call fcn.00402000
push 1
lea ecx, [esp + 0xf8]
mov byte [esp + 0x1a0], 0xb
call fcn.00402000
push 1
lea ecx, [esp + 0x38]
mov byte [esp + 0x1a0], 0xa
call fcn.00402000
push 1
lea ecx, [esp + 0x88]
mov byte [esp + 0x1a0], 9
call fcn.00402000
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x1a0], 8
call fcn.00402000
push 1
lea ecx, [esp + 0x58]
mov byte [esp + 0x1a0], 7
call fcn.00402000
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x1a0], 6
call fcn.00402000
cmp dword [esi + 8], ebp
jne 0x4104c5
mov eax, str.NULL
push eax
push str.CleanupRegistry___s__Failed
jmp 0x41049a
push 0x80000002
lea eax, [esp + 0x68]
push 1
push eax
call fcn.0041bab0
add esp, 0xc
mov cl, byte [esp + 0x12]
push ebp
mov byte [esp + 0x28], cl
lea ecx, [esp + 0x28]
call fcn.00402000
mov edi, str.HardwareID
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.HardwareID
lea ecx, [esp + 0x2c]
call fcn.00402050
mov dl, byte [esp + 0x12]
push ebp
lea ecx, [esp + 0x158]
mov byte [esp + 0x1a0], 0x16
mov byte [esp + 0x158], dl
call fcn.00402000
mov edi, str.ENUMUSBPRINT
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push str.ENUMUSBPRINT
lea ecx, [esp + 0x15c]
call fcn.00402050
push 1
lea eax, [esp + 0x48]
push 0x80000002
lea ecx, [esp + 0x5c]
push eax
lea edx, [esp + 0x30]
push ecx
lea eax, [esp + 0x164]
push edx
push eax
mov byte [esp + 0x1b4], 0x17
call fcn.0041ca30
add esp, 0x18
cmp al, 1
lea ecx, [esp + 0x154]
mov byte [esp + 0x19c], 0x16
push 1
sete bl
call fcn.00402000
push 1
lea ecx, [esp + 0x28]
mov byte [esp + 0x1a0], 0x11
call fcn.00402000
test bl, bl
je 0x40fe46
mov ecx, dword [esp + 0x58]
cmp ecx, ebp
jne 0x40fafd
mov ecx, 0x42b144
mov eax, dword [esp + 0x48]
cmp eax, ebp
jne 0x40fb0a
mov eax, 0x42b144
push ecx
push eax
push str.Found_Key___s_matching_DeviceID___s
push ebp
push 0x4321c8
call fcn.004183b0
push 0x80000002
lea ecx, [esp + 0xac]
push 1
lea edx, [esp + 0x50]
push ecx
lea eax, [esp + 0x64]
push edx
push eax
call fcn.0041b4e0
add esp, 0x28
cmp al, 1
jne 0x40fda3
cmp dword [esp + 0x9c], ebp
je 0x40fda3
mov eax, dword [esp + 0x98]
cmp eax, ebp
jne 0x40fb62
mov eax, 0x42b144
push eax
push str._tClassDriver___s
push ebp
push 0x4321c8
call fcn.004183b0
lea ecx, [esp + 0xa4]
lea edx, [esp + 0x104]
push ecx
lea eax, [esp + 0x198]
push edx
push eax
call fcn.00402520
add esp, 0x1c
mov ecx, dword [0x42b140]
mov byte [esp + 0x19c], 0x18
push ecx
push ebp
push eax
lea ecx, [esp + 0x90]
call fcn.00401e00
push 1
lea ecx, [esp + 0x188]
mov byte [esp + 0x1a0], 0x11
call fcn.00402000
mov eax, dword [esp + 0x88]
cmp eax, ebp
jne 0x40fbd6
mov eax, 0x42b144
push eax
push str._tDeleting_key:__s
push ebp
push 0x4321c8
call fcn.004183b0
push 0x80000002
lea edx, [esp + 0x98]
push 1
push edx
call fcn.0041bab0
mov eax, dword [0x42b140]
add esp, 0x1c
lea ecx, [esp + 0x84]
mov byte [esp + 0x12], 0x5c
push 1
push eax
lea eax, [esp + 0x1a]
push eax
call fcn.00410990
cmp eax, dword [0x42b140]
je 0x40fc6d
push eax
lea ecx, [esp + 0x178]
push ebp
push ecx
lea ecx, [esp + 0x90]
call fcn.004106b0
mov edx, dword [0x42b140]
lea ecx, [esp + 0xa4]
push edx
push ebp
push eax
mov byte [esp + 0x1a8], 0x19
call fcn.00401e00
push 1
lea ecx, [esp + 0x178]
mov byte [esp + 0x1a0], 0x11
call fcn.00402000
push 0x80000002
lea eax, [esp + 0xa8]
push ebp
push eax
call fcn.0041c320
add esp, 0xc
cmp al, 1
jne 0x40fda3
mov eax, dword [esp + 0xa8]
cmp eax, ebp
jne 0x40fc9b
mov eax, 0x42b144
push eax
push str._tDeleting_key:__s
push ebp
push 0x4321c8
call fcn.004183b0
push 0x80000002
lea ecx, [esp + 0xb8]
push ebp
push ecx
call fcn.0041bab0
push 0x80000002
lea edx, [esp + 0xd4]
push 1
lea eax, [esp + 0x148]
push edx
lea ecx, [esp + 0x6c]
push eax
push ecx
call fcn.0041b4e0
add esp, 0x30
cmp al, 1
jne 0x40fda3
cmp dword [esp + 0xbc], ebp
je 0x40fda3
mov eax, dword [esp + 0xb8]
cmp eax, ebp
jne 0x40fd08
mov eax, 0x42b144
push eax
push str._tClassGuid___s
push ebp
push 0x4321c8
call fcn.004183b0
lea edx, [esp + 0xc4]
lea eax, [esp + 0x104]
push edx
lea ecx, [esp + 0x178]
push eax
push ecx
call fcn.00402520
add esp, 0x1c
mov edx, dword [0x42b140]
lea ecx, [esp + 0xd4]
push edx
push ebp
push eax
mov byte [esp + 0x1a8], 0x1a
call fcn.00401e00
push 1
lea ecx, [esp + 0x168]
mov byte [esp + 0x1a0], 0x11
call fcn.00402000
mov eax, dword [esp + 0xd8]
cmp eax, ebp
jne 0x40fd7c
mov eax, 0x42b144
push eax
push str._tDeleting_key:__s
push ebp
push 0x4321c8
call fcn.004183b0
push 0x80000002
lea eax, [esp + 0xe8]
push ebp
push eax
call fcn.0041bab0
add esp, 0x1c
mov eax, dword [0x42b140]
push 1
lea ecx, [esp + 0x16]
push eax
push ecx
lea ecx, [esp + 0x50]
mov byte [esp + 0x1e], 0x5c
call fcn.00410990
cmp eax, dword [0x42b140]
je 0x40fe0c
push eax
lea edx, [esp + 0x118]
push ebp
push edx
lea ecx, [esp + 0x50]
call fcn.004106b0
mov ecx, dword [0x42b140]
mov byte [esp + 0x19c], 0x1b
push ecx
push ebp
push eax
lea ecx, [esp + 0x80]
call fcn.00401e00
push 1
lea ecx, [esp + 0x118]
mov byte [esp + 0x1a0], 0x11
call fcn.00402000
push 0x80000002
lea edx, [esp + 0x48]
push 1
push edx
call fcn.0041bab0
mov eax, dword [esp + 0x54]
add esp, 0xc
cmp eax, ebp
jne 0x40fe2d
mov eax, 0x42b144
push eax
push str.Deleted_Key:__s
push ebp
push 0x4321c8
call fcn.004183b0
add esp, 0x10
jmp 0x40fa1b
cmp dword [esp + 0x7c], ebp
je 0x40fe9b
push 0x80000002
lea eax, [esp + 0x78]
push ebp
push eax
call fcn.0041c320
add esp, 0xc
cmp al, 1
jne 0x40fe9b
push 0x80000002
lea ecx, [esp + 0x78]
push 1
push ecx
call fcn.0041bab0
mov eax, dword [esp + 0x84]
add esp, 0xc
cmp eax, ebp
jne 0x40fe87
mov eax, 0x42b144
push eax
push str.Deleted_Key:__s
push ebp
push 0x4321c8
call fcn.004183b0
add esp, 0x10
push 0x80000002
lea edx, [esp + 0x18]
push 1
push edx
call fcn.0041bab0
push 0x80000002
push ebp
push 0x432900
call fcn.0041c320
add esp, 0x18
cmp al, 1
jne 0x40fed6
push 0x80000002
push ebp
push 0x432900
call fcn.0041bab0
add esp, 0xc
push 0x80000002
push 1
push 0x432760
call fcn.0041bab0
add esp, 0xc
lea ecx, [esp + 0xd4]
mov byte [esp + 0x19c], 0x10
push 1
call fcn.00402000
push 1
lea ecx, [esp + 0xb8]
mov byte [esp + 0x1a0], 0xf
call fcn.00402000
push 1
lea ecx, [esp + 0x128]
mov byte [esp + 0x1a0], 0xe
call fcn.00402000
push 1
lea ecx, [esp + 0xa8]
mov byte [esp + 0x1a0], 0xd
call fcn.00402000
push 1
lea ecx, [esp + 0x98]
mov byte [esp + 0x1a0], 0xc
call fcn.00402000
push 1
lea ecx, [esp + 0xf8]
mov byte [esp + 0x1a0], 0xb
call fcn.00402000
push 1
lea ecx, [esp + 0x38]
mov byte [esp + 0x1a0], 0xa
call fcn.00402000
push 1
lea ecx, [esp + 0x88]
mov byte [esp + 0x1a0], 9
call fcn.00402000
push 1
lea ecx, [esp + 0x68]
mov byte [esp + 0x1a0], 8
call fcn.00402000
push 1
lea ecx, [esp + 0x58]
mov byte [esp + 0x1a0], 7
call fcn.00402000
push 1
lea ecx, [esp + 0x18]
mov byte [esp + 0x1a0], 6
call fcn.00402000
lea eax, [esp + 0x104]
push 0x80000002
push eax
call fcn.0041c270
add esp, 8
cmp al, 1
jne 0x410024
push 0x80000002
lea ecx, [esp + 0x108]
push 1
push ecx
call fcn.0041bab0
mov eax, dword [esp + 0x114]
add esp, 0xc
cmp eax, ebp
jne 0x410010
mov eax, 0x42b144
push eax
push str.Deleted_Key:__s
push ebp
push 0x4321c8
call fcn.004183b0
add esp, 0x10
push 0x80000002
push 1
push 0x432830
call fcn.0041bab0
push 0x42d8ac
lea edx, [esp + 0x174]
push 0x432a80
push edx
call fcn.004023f0
push esi
push eax
lea eax, [esp + 0x134]
mov bl, 0x1c
push eax
mov byte [esp + 0x1c0], bl
call fcn.00402520
add esp, 0x24
mov ecx, dword [0x42b140]
mov byte [esp + 0x19c], 0x1d
push ecx
push ebp
push eax
lea ecx, [esp + 0xf0]
call fcn.00401e00
push 1
lea ecx, [esp + 0x118]
mov byte [esp + 0x1a0], bl
call fcn.00402000
push 1
lea ecx, [esp + 0x168]
mov byte [esp + 0x1a0], 6
call fcn.00402000
cmp dword [esp + 0xec], ebp
jne 0x4100cc
push str.sRegKeyAccessoryFlags.empty__
push str.Error______s
push 0x125
jmp 0x41019c
push 0x80000002
lea edx, [esp + 0xe8]
push 1
push edx
call fcn.0041bab0
push 0x80000002
push ebp
push 0x432a80
call fcn.0041c320
add esp, 0x18
cmp al, 1
jne 0x41010a
push 0x80000002
push ebp
push 0x432a80
call fcn.0041bab0
add esp, 0xc
push 0x42d8ac
lea eax, [esp + 0x168]
push 0x432a80
push eax
call fcn.004023f0
push esi
lea ecx, [esp + 0x124]
mov bl, 0x1e
push eax
push ecx
mov byte [esp + 0x1b4], bl
call fcn.00402520
add esp, 0x18
mov edx, dword [0x42b140]
lea ecx, [esp + 0xe4]
push edx
push ebp
push eax
mov byte [esp + 0x1a8], 0x1f
call fcn.00401e00
push 1
lea ecx, [esp + 0x118]
mov byte [esp + 0x1a0], bl
call fcn.00402000
push 1
lea ecx, [esp + 0x168]
mov byte [esp + 0x1a0], 6
call fcn.00402000
cmp dword [esp + 0xec], ebp
jne 0x4101b4
push str.sRegKeyAccessoryFlags.empty__
push str.Error______s
push 0x12c
push str...ghoul_uninstall.cpp
push ebp
push 0x4321c8
call fcn.00418600
add esp, 0x18
jmp 0x40f9ee
push 0x80000001
lea eax, [esp + 0xe8]
push 1
push eax
call fcn.0041bab0
push 0x80000001
push ebp
push 0x432a80
call fcn.0041c320
add esp, 0x18
cmp al, 1
jne 0x4101f2
push 0x80000001
push ebp
push 0x432a80
call fcn.0041bab0
add esp, 0xc
push 0x80000002
lea ecx, [esp + 0xc8]
push 1
push ecx
push 0x432590
push 0x432610
call fcn.0041b4e0
mov edi, str.true
or ecx, 0xffffffff
xor eax, eax
add esp, 0x14
repne scasb al, byte es:[edi]
mov edx, dword [esp + 0xcc]
not ecx
dec ecx
push ecx
push str.true
push edx
push ebp
lea ecx, [esp + 0xd4]
call fcn.00402e10
cmp eax, ebp
jne 0x410483
mov al, byte [esp + 0x12]
push ebp
lea ecx, [esp + 0x18]
mov byte [esp + 0x18], al
call fcn.00402000
mov edi, 0x431f30
or ecx, 0xffffffff
xor eax, eax
push 1
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
lea ecx, [esp + 0x18]
push ebx
call fcn.004020f0
test al, al
je 0x4102a4
mov edi, dword [esp + 0x18]
mov ecx, ebx
mov edx, ecx
mov esi, 0x431f30
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + 0x1a4]
mov dword [esp + 0x1c], ebx
mov byte [eax + ebx], 0
push 0x42d8ac
lea ecx, [esp + 0x118]
push 0x432610
push ecx
mov byte [esp + 0x1a8], 0x20
call fcn.004023f0
push esi
lea edx, [esp + 0x34]
push eax
push edx
mov byte [esp + 0x1b4], 0x21
call fcn.00402520
add esp, 0x18
mov ecx, dword [0x42b140]
mov byte [esp + 0x19c], 0x22
push ecx
push ebp
push eax
lea ecx, [esp + 0x20]
call fcn.00401e00
mov eax, dword [esp + 0x28]
cmp eax, ebp
je 0x410319
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x410310
cmp al, 0xff
je 0x410310
dec al
mov byte [ecx], al
jmp 0x410319
push ecx
call fcn.0042213c
add esp, 4
mov eax, dword [esp + 0x118]
mov dword [esp + 0x28], ebp
cmp eax, ebp
mov dword [esp + 0x2c], ebp
mov dword [esp + 0x30], ebp
mov byte [esp + 0x19c], 0x20
je 0x410355
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x41034c
cmp al, 0xff
je 0x41034c
dec al
mov byte [ecx], al
jmp 0x410355
push ecx
call fcn.0042213c
add esp, 4
cmp dword [esp + 0x1c], ebp
jne 0x41036f
push str.sRegKeyGlueDriver.empty__
push str.Error______s
push 0x13e
jmp 0x41040c
mov edi, str.false
or ecx, 0xffffffff
xor eax, eax
mov dl, byte [esp + 0x12]
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov byte [esp + 0x34], dl
push ecx
push str.false
lea ecx, [esp + 0x3c]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebp
mov dword [esp + 0x48], ebp
call fcn.00402050
push 0x80000002
lea eax, [esp + 0x38]
push 1
push eax
lea ecx, [esp + 0x20]
push 0x432580
push ecx
mov byte [esp + 0x1b0], 0x23
call fcn.0041b780
add esp, 0x14
mov byte [esp + 0x19c], 0x20
test al, al
mov eax, dword [esp + 0x38]
sete bl
cmp eax, ebp
je 0x4103f9
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x4103f0
cmp al, 0xff
je 0x4103f0
dec al
mov byte [ecx], al
jmp 0x4103f9
push ecx
call fcn.0042213c
add esp, 4
test bl, bl
je 0x410457
push str.RegSetStringValue__sRegKeyGlueDriver__g_sSwitchRegistryCleanup___false_____false
push str.Error______s
push 0x140
push str...ghoul_uninstall.cpp
push ebp
push 0x4321c8
call fcn.00418600
mov ecx, dword [esp + 0x30]
add esp, 0x18
cmp ecx, ebp
mov byte [esp + 0x19c], 6
je 0x40f9ee
mov al, byte [ecx - 1]
test al, al
je 0x410448
cmp al, 0xff
je 0x410448
dec al
mov byte [ecx - 1], al
jmp 0x40f9ee
dec ecx
push ecx
call fcn.0042213c
add esp, 4
jmp 0x40f9ee
mov ecx, dword [esp + 0x18]
mov byte [esp + 0x19c], 6
cmp ecx, ebp
je 0x410483
mov al, byte [ecx - 1]
test al, al
je 0x410479
cmp al, 0xff
je 0x410479
dec al
mov byte [ecx - 1], al
jmp 0x410483
dec ecx
push ecx
call fcn.0042213c
add esp, 4
mov eax, dword [esi + 4]
mov byte [esp + 0x13], 1
cmp eax, ebp
jne 0x410494
mov eax, 0x42b144
push eax
push str.CleanupRegistry___s__Successful
push ebp
push 0x4321c8
call fcn.004183b0
mov ecx, dword [esp + 0x118]
add esp, 0x10
cmp ecx, ebp
je 0x4104e3
mov al, byte [ecx - 1]
test al, al
je 0x4104d9
cmp al, 0xff
je 0x4104d9
dec al
mov byte [ecx - 1], al
jmp 0x4104e3
mov eax, dword [esi + 4]
cmp eax, ebp
jne 0x4104d1
mov eax, 0x42b144
push eax
push str.CleanupRegistry___s__Failed
jmp 0x41049a
dec ecx
push ecx
call fcn.0042213c
add esp, 4
mov ecx, dword [esp + 0x148]
mov dword [esp + 0x108], ebp
cmp ecx, ebp
mov dword [esp + 0x10c], ebp
mov dword [esp + 0x110], ebp
je 0x41051f
mov al, byte [ecx - 1]
test al, al
je 0x410515
cmp al, 0xff
je 0x410515
dec al
mov byte [ecx - 1], al
jmp 0x41051f
dec ecx
push ecx
call fcn.0042213c
add esp, 4
mov ecx, dword [esp + 0x78]
mov dword [esp + 0x148], ebp
cmp ecx, ebp
mov dword [esp + 0x14c], ebp
mov dword [esp + 0x150], ebp
je 0x410558
mov al, byte [ecx - 1]
test al, al
je 0x41054e
cmp al, 0xff
je 0x41054e
dec al
mov byte [ecx - 1], al
jmp 0x410558
dec ecx
push ecx
call fcn.0042213c
add esp, 4
mov ecx, dword [esp + 0x138]
mov dword [esp + 0x78], ebp
cmp ecx, ebp
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x80], ebp
je 0x41058e
mov al, byte [ecx - 1]
test al, al
je 0x410584
cmp al, 0xff
je 0x410584
dec al
mov byte [ecx - 1], al
jmp 0x41058e
dec ecx
push ecx
call fcn.0042213c
add esp, 4
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x138], ebp
cmp ecx, ebp
mov dword [esp + 0x13c], ebp
mov dword [esp + 0x140], ebp
je 0x4105c7
mov al, byte [ecx - 1]
test al, al
je 0x4105bd
cmp al, 0xff
je 0x4105bd
dec al
mov byte [ecx - 1], al
jmp 0x4105c7
dec ecx
push ecx
call fcn.0042213c
add esp, 4
mov ecx, dword [esp + 0xc8]
mov dword [esp + 0x48], ebp
cmp ecx, ebp
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ebp
je 0x4105fa
mov al, byte [ecx - 1]
test al, al
je 0x4105f0
cmp al, 0xff
je 0x4105f0
dec al
mov byte [ecx - 1], al
jmp 0x4105fa
dec ecx
push ecx
call fcn.0042213c
add esp, 4
mov ecx, dword [esp + 0xe8]
pop edi
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc8], ebp
mov dword [esp + 0xcc], ebp
pop esi
cmp ecx, ebp
pop ebp
pop ebx
je 0x41063a
mov al, byte [ecx - 1]
test al, al
je 0x410630
cmp al, 0xff
je 0x410630
dec al
mov byte [ecx - 1], al
jmp 0x41063a
dec ecx
push ecx
call fcn.0042213c
add esp, 4
mov ecx, dword [esp + 0x184]
mov al, byte [esp + 3]
mov dword fs:[0], ecx
add esp, 0x190
ret