Function at 0x455cd6
Capabilities:
Encode data using base64
Parse credit card information
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0x94
push ebx
push esi
push edi
mov dword [ebp + 0x18], ecx
push ecx
lea ecx, [ebp - 0x24]
call fcn.0043f504
mov eax, dword [ebp + 0x78]
mov dword [ebp - 4], eax
xor ebx, ebx
lea eax, [ebp + 0x78]
push eax
mov byte [ebp + 0x32], 0xff
mov byte [ebp + 0x47], bl
mov byte [ebp + 0x46], bl
mov dword [ebp - 8], ebx
call fcn.004379a9
push 0xa
lea eax, [ebp + 0x78]
push eax
push str.___initram
call fcn.0043f1bd
add esp, 0x10
test al, al
jne 0x45617b
mov dword [ebp + 0x60], ebx
mov esi, dword [ebp + 0x78]
mov ax, word [esi]
cmp ax, 0x2d
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x38], 0xfffffff0
mov byte [ebp + 0x6f], 0
mov byte [ebp + 0x53], 0
mov byte [ebp + 0x66], 0
mov byte [ebp + 0x6e], 0
mov byte [ebp + 0x23], 0
mov byte [ebp + 0x5f], 0
mov byte [ebp + 0x67], 0
mov dword [ebp + 0x4c], ebx
mov cl, 0x2a
jne 0x455d65
mov cl, al
movsx ecx, cl
movzx eax, ax
cmp ecx, eax
mov dword [ebp + 0x2c], ecx
jne 0x455f7a
movzx eax, word [esi + 2]
cmp dword [ebp + 0x2c], eax
jne 0x455f7a
xor eax, eax
lea ecx, [esi + 4]
mov ax, word [ecx]
mov edx, eax
and dx, 0xffdf
cmp dx, 0x48
je 0x455f7a
call fcn.00482120
test al, al
jne 0x455f7a
xor edi, edi
mov esi, ecx
inc edi
push edi
push esi
push 0x4acce0
mov dword [ebp + 0x78], esi
call fcn.00438b8f
add esp, 0xc
test al, al
je 0x455e0d
lea eax, [ebp + 0x78]
add esi, 2
push eax
mov dword [ebp + 0x24], esi
call fcn.0040507c
cmp word [esi], 0x3a
pop ecx
je 0x455de3
or dword [ebp + 0x4c], 7
jmp 0x455f6b
lea eax, [ebp + 0x58]
push eax
inc esi
lea eax, [ebp + 0x24]
inc esi
push eax
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x24], esi
call fcn.0043a0e5
test eax, eax
pop ecx
pop ecx
jle 0x455f6b
mov eax, dword [ebp + 0x58]
or dword [ebp + 0x4c], eax
jmp 0x455f6b
push 2
push esi
push 0x4accdc
call fcn.00438b8f
add esp, 0xc
test al, al
lea eax, [ebp + 0x78]
je 0x455e59
add esi, 4
push eax
mov dword [ebp + 0xc], esi
call fcn.0040507c
lea eax, [ebp + 0x58]
push eax
lea eax, [ebp + 0xc]
push eax
mov dword [ebp + 0x58], ebx
call fcn.004488bd
add esp, 0xc
test eax, eax
jle 0x455f6b
mov eax, dword [ebp + 0x58]
mov dword [ebp + 0x34], eax
mov dword [ebp + 0x38], ebx
jmp 0x455f6b
push 2
pop esi
push esi
push eax
push 0x4a803c
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x455e78
mov byte [ebp + 0x66], 1
jmp 0x455f6b
push 4
lea eax, [ebp + 0x78]
push eax
push str.byte
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x455e98
mov byte [ebp + 0x5f], 1
jmp 0x455f6b
push edi
lea eax, [ebp + 0x78]
push eax
push 0x4a7584
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x455eb7
mov byte [ebp + 0x6e], 3
jmp 0x455f6b
push esi
lea eax, [ebp + 0x78]
push eax
push 0x4accd8
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x455ed6
or byte [ebp + 0x6e], 1
jmp 0x455f6b
push esi
lea eax, [ebp + 0x78]
push eax
push 0x4accd4
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x455ef2
or byte [ebp + 0x6e], 2
jmp 0x455f6b
push 4
lea eax, [ebp + 0x78]
push eax
push str.name
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x455f0f
mov byte [ebp + 0x23], 1
jmp 0x455f6b
push edi
lea eax, [ebp + 0x78]
push eax
push 0x4accc8
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x455f2a
inc byte [ebp + 0x47]
jmp 0x455f6b
push edi
lea eax, [ebp + 0x78]
push eax
push 0x4accc4
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x455f45
inc byte [ebp + 0x46]
jmp 0x455f6b
push esi
lea eax, [ebp + 0x78]
push eax
push 0x4accc0
call fcn.0043f1bd
add esp, 0xc
test al, al
je 0x455f61
mov byte [ebp + 0x67], 1
jmp 0x455f6b
lea eax, [ebp + 0x78]
push eax
call fcn.0040507c
pop ecx
mov esi, dword [ebp + 0x78]
movzx eax, word [esi]
cmp dword [ebp + 0x2c], eax
je 0x455d76
lea ecx, [ebp + 0x10]
call fcn.0043d47d
lea ecx, [ebp - 0x14]
call fcn.0043d47d
lea ecx, [ebp + 0x14]
call fcn.0043d47d
lea ecx, [ebp + 4]
call fcn.0043d47d
lea ecx, [ebp]
call fcn.0043d47d
xor eax, eax
mov ax, word [esi]
mov ecx, eax
or ecx, 0x20
cmp cx, 0x6e
je 0x455ff4
cmp cx, 0x75
je 0x455ff4
cmp cx, 0x62
je 0x455ff4
cmp ax, 0x5e
je 0x455ff4
cmp ax, 0x2b
je 0x455ff4
cmp ax, 0x23
je 0x455ff4
cmp ax, 0x40
je 0x455ff4
cmp ax, 0x24
je 0x455ff4
cmp ax, 0x2a
je 0x455ff4
cmp ax, 0x7e
je 0x455ff4
cmp ax, 0x2e
je 0x455ff4
cmp ax, 0x3f
jne 0x45600c
mov al, byte [esi]
inc esi
inc esi
test al, al
mov byte [ebp + 0x6f], al
mov dword [ebp + 0x78], esi
je 0x45600c
movzx ecx, word [esi]
movsx eax, al
cmp eax, ecx
je 0x456012
cmp word [esi], 0x24
jne 0x45601c
mov al, byte [esi]
inc esi
inc esi
mov byte [ebp + 0x53], al
mov dword [ebp + 0x78], esi
cmp byte [ebp + 0x6f], 0x41
jl 0x45602c
cmp byte [ebp + 0x6f], 0x5a
jg 0x45602c
or byte [ebp + 0x6f], 0x20
lea eax, [ebp + 0x78]
push eax
call fcn.004379a9
mov edi, dword [ebp + 0x78]
mov dword [esp], 0x4accb8
push edi
mov dword [ebp + 0x1c], edi
call dword [sym.imp.SHLWAPI.dll_StrStrW]
mov esi, eax
cmp esi, ebx
je 0x456052
lea edi, [esi + 4]
mov edx, edi
mov dword [ebp + 0x40], edx
cmp word [edi], bx
je 0x4560e5
mov ax, word [edx]
cmp ax, 0x2c
je 0x45609c
cmp ax, 0x3d
je 0x4560e5
cmp ax, 0x21
jne 0x456090
lea eax, [edx + 2]
mov dword [ebp + 0x24], eax
lea eax, [ebp + 0x24]
push eax
call fcn.004379a9
mov eax, dword [ebp + 0x24]
cmp word [eax], bx
pop ecx
je 0x4560e5
lea edx, [eax - 2]
inc edx
inc edx
mov dword [ebp + 0x40], edx
cmp word [edx], bx
jne 0x456060
jmp 0x4560e5
add edx, 2
push 0x3d
push edx
call dword [sym.imp.SHLWAPI.dll_StrChrW]
cmp eax, ebx
je 0x4560b0
mov edx, eax
jmp 0x4560dd
mov eax, dword [ebp + 0x40]
add eax, 2
push 0x21
push eax
call dword [sym.imp.SHLWAPI.dll_StrChrW]
mov edx, eax
cmp edx, ebx
je 0x4560e2
lea eax, [edx + 2]
mov dword [ebp + 0x24], eax
lea eax, [ebp + 0x24]
push eax
call fcn.004379a9
mov eax, dword [ebp + 0x24]
cmp word [eax], bx
pop ecx
jne 0x4560e2
mov dword [ebp + 0x40], edx
jmp 0x4560e5
mov edx, dword [ebp + 0x40]
mov ax, word [edx]
cmp ax, 0x2c
je 0x4560fa
cmp ax, 0x3d
je 0x4560fa
cmp ax, 0x21
jne 0x45610e
mov al, byte [edx]
mov word [edx], bx
add dword [ebp + 0x40], 2
test al, al
mov byte [ebp + 0x33], al
jne 0x456194
inc byte [ebp + 0x32]
cmp byte [ebp + 0x32], 0
jg 0x45618a
mov ecx, dword [ebp + 0x18]
push 1
push ebx
lea eax, [ebp - 8]
push eax
push dword [ebp - 4]
call fcn.0044c0fc
mov eax, dword [ebp - 8]
lea ecx, [ebp]
mov dword [ebp + 0x78], eax
call fcn.00437960
lea ecx, [ebp + 4]
call fcn.00437960
lea ecx, [ebp + 0x14]
call fcn.00437960
lea ecx, [ebp - 0x14]
call fcn.00437960
lea ecx, [ebp + 0x10]
call fcn.00437960
lea eax, [ebp + 0x78]
push eax
call fcn.004379a9
push 0xa
lea eax, [ebp + 0x78]
push eax
push str.___initram
call fcn.0043f1bd
add esp, 0x10
test al, al
je 0x455d2c
push 3
call fcn.00410dab
pop ecx
xor esi, esi
jmp 0x457190
mov esi, 0x80070057
jmp 0x457168
cmp esi, ebx
mov dword [ebp - 0xc], ebx
jne 0x4561ad
push 0x5c
push ebx
push edi
mov edi, dword [sym.imp.SHLWAPI.dll_StrRChrW]
call edi
mov esi, eax
cmp esi, ebx
je 0x456205
mov ecx, dword [ebp + 0x18]
push 1
push ebx
lea eax, [ebp + 0x10]
push eax
push dword [ebp + 0x78]
mov word [esi], bx
call fcn.0044c0fc
mov eax, dword [ebp + 0x10]
push 0x5c
push eax
mov dword [ebp + 0x1c], eax
call dword [sym.imp.SHLWAPI.dll_StrChrW]
cmp eax, ebx
jne 0x4561df
mov esi, 0x80070057
jmp 0x457160
mov ecx, dword [ebp + 0x18]
mov word [eax], bx
inc eax
inc eax
push 1
mov dword [ebp + 0x68], eax
push ebx
lea eax, [ebp - 0xc]
push eax
add esi, 2
push esi
call fcn.0044c0fc
mov eax, dword [ebp - 0xc]
mov dword [ebp + 0x54], eax
jmp 0x456288
push 1
push 0x2c
lea eax, [ebp + 0x1c]
push eax
lea ecx, [ebp - 0x24]
call fcn.0044e524
push ebx
lea ecx, [ebp + 0x10]
push ecx
push eax
call fcn.0043fe29
mov eax, dword [ebp + 0x10]
add esp, 0xc
push 0x5c
push eax
mov dword [ebp + 0x1c], eax
call dword [sym.imp.SHLWAPI.dll_StrChrW]
mov esi, eax
cmp esi, ebx
je 0x4561d5
mov word [esi], bx
inc esi
inc esi
push 0x4accb8
push esi
mov dword [ebp + 0x68], esi
call dword [sym.imp.SHLWAPI.dll_StrStrW]
cmp byte [ebp + 0x6e], 0
mov dword [ebp + 0x54], eax
je 0x456266
cmp eax, ebx
jne 0x45627b
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
lea eax, [esi + eax*2]
mov dword [ebp + 0x54], eax
cmp eax, ebx
jne 0x45627b
push 0x5c
push ebx
push esi
call edi
cmp eax, ebx
mov dword [ebp + 0x54], eax
je 0x4561d5
cmp word [eax], bx
je 0x456288
mov word [eax], bx
inc eax
inc eax
mov dword [ebp + 0x54], eax
cmp word [eax], 0x5c
jne 0x456293
inc eax
inc eax
mov dword [ebp + 0x54], eax
cmp byte [ebp + 0x23], 0
mov dword [ebp + 0x24], ebx
je 0x4562b7
lea eax, [ebp + 0x24]
push eax
lea eax, [ebp + 0x40]
push eax
push dword [ebp + 0x18]
call fcn.0044b08b
mov eax, dword [ebp + 0x24]
add esp, 0xc
mov dword [ebp + 0x40], eax
jmp 0x4562ba
mov eax, dword [ebp + 0x40]
cmp byte [ebp + 0x33], 0x2c
jne 0x45634b
push 1
push 0x2c
lea eax, [ebp + 0x40]
push eax
lea ecx, [ebp - 0x24]
call fcn.0044e524
push ebx
lea ecx, [ebp + 0x14]
push ecx
push eax
call fcn.0043fe29
mov ecx, dword [ebp + 0x18]
add esp, 0xc
push ebx
lea eax, [ebp + 0x14]
push eax
call fcn.00402d87
cmp byte [ebp + 0x6f], 0x2e
jne 0x45632d
mov eax, dword [ebp + 0x40]
cmp word [eax], 0x2c
jne 0x45632d
add dword [ebp + 0x40], 2
push 1
push 0x2c
lea eax, [ebp + 0x40]
push eax
lea ecx, [ebp - 0x24]
call fcn.0044e524
push ebx
lea ecx, [ebp]
push ecx
push eax
call fcn.0043fe29
mov ecx, dword [ebp + 0x18]
add esp, 0xc
push ebx
lea eax, [ebp]
push eax
call fcn.00402d87
mov eax, dword [ebp + 0x14]
cmp word [eax], bx
jne 0x456444
push str.RegDat
lea ecx, [ebp + 0x14]
call fcn.0044584c
jmp 0x456444
cmp byte [ebp + 0x33], 0x21
je 0x456444
cmp word [eax], bx
jne 0x45637e
cmp byte [ebp + 0x6f], 0x24
je 0x45639d
cmp byte [ebp + 0x6f], 0x2a
je 0x45637e
cmp byte [ebp + 0x6f], 0x7e
je 0x45637e
cmp byte [ebp + 0x46], 0
je 0x456444
mov dword [ebp + 0x60], eax
jmp 0x456444
cmp byte [ebp + 0x6f], 0x24
je 0x45639d
cmp byte [ebp + 0x6f], 0x2a
je 0x45639d
cmp byte [ebp + 0x6f], 0x7e
je 0x45639d
lea eax, [ebp + 0x40]
push eax
call fcn.004379a9
mov eax, dword [ebp + 0x40]
pop ecx
push eax
lea ecx, [ebp + 0x2c]
call fcn.004457e4
mov edx, dword [ebp + 0x2c]
lea eax, [ebp + 0x78]
push eax
mov dword [ebp + 0x78], edx
call fcn.004379a9
cmp byte [ebp + 0x7c], 0
pop ecx
je 0x4563c7
push edx
lea ecx, [ebp + 4]
call fcn.0044584c
jmp 0x4563d7
mov ecx, dword [ebp + 0x18]
push 1
push ebx
lea eax, [ebp + 4]
push eax
push edx
call fcn.0044b30d
mov eax, dword [ebp + 4]
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x7c], eax
lea eax, [ebp + 0x7c]
push eax
call fcn.004379a9
cmp byte [ebp + 0x6f], 0
pop ecx
jne 0x456422
push dword [ebp + 0x78]
push 0x4acca0
call dword [sym.imp.KERNEL32.DLL_lstrcmpW]
test eax, eax
jne 0x45640b
mov dword [ebp + 0x60], 0x4a39d4
jmp 0x45643c
mov ecx, dword [ebp + 0x7c]
mov ax, word [ecx]
cmp ax, 0x23
je 0x45641d
cmp ax, 0x40
jne 0x45643c
mov dword [ebp + 0x60], ecx
jmp 0x45643c
cmp byte [ebp + 0x6f], 0x23
je 0x45642e
cmp byte [ebp + 0x6f], 0x40
jne 0x45643c
mov eax, dword [ebp + 0x7c]
cmp word [eax], bx
mov dword [ebp + 0x60], eax
jne 0x45643c
mov dword [ebp + 0x60], ebx
lea ecx, [ebp + 0x2c]
call fcn.00437960
mov edi, dword [ebp + 0x1c]
mov esi, dword [sym.imp.KERNEL32.DLL_lstrcmpiW]
push str.HKLM
push edi
call esi
test eax, eax
je 0x4564fb
push str.HKEY_LOCAL_MACHINE
push edi
call esi
test eax, eax
je 0x4564fb
push str.HKCU
push edi
call esi
test eax, eax
je 0x4564f2
push str.HKEY_CURRENT_USER
push edi
call esi
test eax, eax
je 0x4564f2
push str.HKCR
push edi
call esi
test eax, eax
je 0x4564e9
push str.HKEY_CLASSES_ROOT
push edi
call esi
test eax, eax
je 0x4564e9
push 0x4acc04
push edi
call esi
test eax, eax
je 0x4564e0
push str.HKEY_USERS
push edi
call esi
test eax, eax
je 0x4564e0
push str.HKCC
push edi
call esi
test eax, eax
je 0x4564d7
push str.HKEY_CURRENT_CONFIG
push edi
call esi
test eax, eax
je 0x4564d7
mov esi, 0x80070057
jmp 0x457158
mov dword [ebp + 0x78], 0x80000005
jmp 0x456502
mov dword [ebp + 0x78], 0x80000003
jmp 0x456502
mov dword [ebp + 0x78], 0x80000000
jmp 0x456502
mov dword [ebp + 0x78], 0x80000001
jmp 0x456502
mov dword [ebp + 0x78], 0x80000002
mov eax, dword [ebp + 0x14]
cmp word [eax], bx
je 0x456c12
cmp byte [ebp + 0x6f], 0x2e
je 0x45651d
cmp byte [ebp + 0x6f], 0x3f
mov dword [ebp + 0x3c], ebx
jne 0x45652a
cmp byte [ebp + 0x6f], 0x3f
mov dword [ebp + 0x3c], 1
je 0x456539
cmp dword [ebp + 0x3c], ebx
je 0x456534
cmp word [eax], bx
je 0x456539
mov dword [ebp + 0x4c], ebx
jmp 0x456540
mov dword [ebp + 0x4c], 1
push ebx
call dword [sym.imp.KERNEL32.DLL_SetLastError]
push 0x64
lea ecx, [ebp + 0x48]
mov dword [ebp + 0xc], ebx
call fcn.0043d49b
lea ecx, [ebp + 0x58]
call fcn.0043d47d
cmp byte [ebp + 0x6f], 0x2e
lea eax, [ebp + 0x58]
je 0x456568
lea eax, [ebp + 0x48]
push 0x1000
lea ecx, [ebp + 0x60]
mov dword [ebp + 0x28], eax
call fcn.0043d373
cmp byte [ebp + 0x6e], 0
lea eax, [ebp + 0x7c]
mov dword [ebp + 0x1c], 0xfff
mov dword [ebp + 0x7c], ebx
mov dword [ebp - 4], ebx
push eax
je 0x456708
push 9
push ebx
push dword [ebp + 0x68]
mov dword [ebp + 0x3c], ebx
push dword [ebp + 0x78]
mov dword [ebp + 0x54], ebx
mov dword [ebp + 0x4c], ebx
mov dword [ebp + 0x2c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp + 0x7c], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push ebx
push ebx
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x54]
push eax
push ebx
push ebx
push ebx
push dword [ebp + 0x7c]
call esi
push ebx
push ebx
push ebx
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp + 0x2c]
push eax
push ebx
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x54]
push eax
push ebx
push ebx
push ebx
push dword [ebp + 0x7c]
call esi
mov dword [ebp + 0x78], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp + 0x4c], eax
jae 0x4565fa
mov dword [ebp + 0x4c], eax
mov eax, dword [ebp + 0x4c]
lea eax, [eax*4 + 0x20]
mov dword [ebp - 0x10], eax
shr eax, 1
add eax, 8
push eax
lea ecx, [ebp + 0x38]
call fcn.0043d49b
mov esi, dword [ebp + 0x38]
mov word [esi], 0xd
mov word [esi + 2], 0xa
lea ebx, [esi + 4]
mov word [ebx], 0x76
lea edi, [esi + 8]
mov word [esi + 6], 0x20
and word [edi], 0
cmp byte [ebp + 0x6e], 3
mov dword [ebp + 0x68], ebx
je 0x456643
mov edi, ebx
cmp dword [ebp + 0x78], 0
jne 0x4566ec
test byte [ebp + 0x6e], 1
je 0x45669a
and dword [ebp + 0x78], 0
cmp dword [ebp + 0x2c], 0
jle 0x45669a
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x3c], eax
xor eax, eax
push eax
push eax
push eax
push eax
mov word [edi], ax
lea eax, [ebp + 0x3c]
push eax
push edi
push dword [ebp + 0x78]
push dword [ebp + 0x7c]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
jne 0x45668f
push dword [ebp + 0x68]
lea ecx, [ebp + 0x48]
call fcn.0043d4e9
mov dword [ebp + 0x68], esi
inc dword [ebp + 0x78]
mov eax, dword [ebp + 0x78]
cmp eax, dword [ebp + 0x2c]
jl 0x45665d
test byte [ebp + 0x6e], 2
mov word [ebx], 0x6b
je 0x4566ec
and dword [ebp + 0x78], 0
cmp dword [ebp + 0x54], 0
jle 0x4566ec
xor ebx, ebx
mov eax, dword [ebp - 0x10]
push ebx
push ebx
push ebx
push ebx
mov dword [ebp + 0x3c], eax
lea eax, [ebp + 0x3c]
push eax
push edi
push dword [ebp + 0x78]
mov word [edi], bx
push dword [ebp + 0x7c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x4566e1
push dword [ebp + 0x68]
lea ecx, [ebp + 0x48]
call fcn.0043d4e9
mov dword [ebp + 0x68], esi
inc dword [ebp + 0x78]
mov eax, dword [ebp + 0x78]
cmp eax, dword [ebp + 0x54]
jl 0x4566b1
cmp dword [ebp + 0x7c], 0
je 0x4566fb
push dword [ebp + 0x7c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp + 0x38]
call fcn.00437960
jmp 0x456bbf
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp + 0x60]
push eax
push dword [ebp + 0x54]
push dword [ebp + 0x68]
push dword [ebp + 0x78]
call fcn.0044126a
mov esi, dword [ebp + 0x7c]
add esp, 0x18
cmp esi, ebx
mov edi, eax
je 0x45678b
mov eax, dword [ebp + 0x54]
cmp word [eax], bx
jne 0x456750
cmp esi, 2
jne 0x456750
cmp edi, 0xfffffffe
jne 0x456750
cmp dword [ebp + 0x3c], ebx
je 0x456bc1
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x4acbb4
jmp 0x456761
cmp dword [ebp + 0x3c], ebx
mov dword [ebp + 0xc], esi
je 0x45676e
push 0xffffffffffffffff
push 0xffffffffffffffff
push str.ERROR
mov ecx, dword [ebp + 0x28]
call fcn.0043d538
jmp 0x456bc1
lea ecx, [ebp + 0x60]
call fcn.00437960
lea ecx, [ebp + 0x58]
call fcn.00437960
lea ecx, [ebp + 0x48]
call fcn.00437960
jmp 0x457158
cmp dword [ebp + 0x38], ebx
jl 0x4567aa
jg 0x456797
cmp dword [ebp + 0x34], ebx
jb 0x4567aa
cmp dword [ebp + 0x34], edi
jne 0x4567a1
cmp dword [ebp + 0x38], ebx
je 0x4567aa
mov dword [ebp + 0x68], 1
jmp 0x4567ad
mov dword [ebp + 0x68], ebx
cmp edi, 1
mov byte [ebp + 0x7f], 0
mov byte [ebp + 0x7b], 0xff
mov eax, str.REG_SZ
jne 0x4567c9
mov byte [ebp + 0x7f], 0x24
mov byte [ebp + 0x7b], 0
jmp 0x4567e7
cmp edi, 6
jne 0x4567d9
mov eax, str.REG_LINK
mov byte [ebp + 0x7f], 0x5e
jmp 0x4567e7
cmp edi, 0x15
jne 0x45683d
mov eax, str.REG_MUI_SZ
mov byte [ebp + 0x7f], 0x75
cmp dword [ebp + 0x3c], ebx
je 0x456802
mov ecx, dword [ebp + 0x28]
push 0xffffffffffffffff
push 0xffffffffffffffff
push eax
call fcn.0043d538
cmp dword [ebp + 0x4c], ebx
jne 0x456bc1
cmp dword [ebp + 0x68], ebx
jne 0x456b5a
cmp dword [ebp + 0x38], ebx
jg 0x45682c
jl 0x456817
cmp dword [ebp + 0x34], ebx
jae 0x45682c
mov al, byte [ebp + 0x6f]
cmp byte [ebp + 0x7f], al
je 0x45682c
cmp al, 0x2e
je 0x45682c
cmp byte [ebp + 0x7b], al
jne 0x456b5a
mov eax, dword [ebp + 0x48]
mov ecx, dword [ebp + 0x60]
mov dword [ebp + 0x48], ecx
mov dword [ebp + 0x60], eax
jmp 0x456bbf
cmp edi, 0xb
jne 0x4568a3
cmp dword [ebp + 0x3c], ebx
je 0x456861
mov ecx, dword [ebp + 0x28]
push 0xffffffffffffffff
push 0xffffffffffffffff
push str.REG_QWORD
call fcn.0043d538
cmp dword [ebp + 0x4c], ebx
jne 0x456bc1
cmp dword [ebp + 0x68], ebx
jne 0x456b5a
cmp dword [ebp + 0x38], ebx
jg 0x456886
jl 0x456876
cmp dword [ebp + 0x34], ebx
jae 0x456886
cmp byte [ebp + 0x6f], 0x2b
je 0x456886
cmp byte [ebp + 0x6f], 0x2e
jne 0x456b5a
mov eax, dword [ebp + 0x60]
push str.0x_I64x
push dword [eax + 4]
push dword [eax]
push dword [ebp + 0x48]
call fcn.004842d2
add esp, 0x10
jmp 0x456bbf
cmp edi, 4
mov esi, dword [ebp + 0x60]
jne 0x4568f0
cmp dword [ebp + 0x3c], ebx
je 0x4568ca
mov ecx, dword [ebp + 0x28]
push 0xffffffffffffffff
push 0xffffffffffffffff
push str.REG_DWORD
call fcn.0043d538
cmp dword [ebp + 0x4c], ebx
jne 0x456bc1
cmp dword [ebp + 0x68], ebx
jne 0x456b5a
cmp dword [ebp + 0x38], ebx
jg 0x45694f
jl 0x4568df
cmp dword [ebp + 0x34], ebx
jae 0x45694f
cmp byte [ebp + 0x6f], 0x23
je 0x45694f
cmp byte [ebp + 0x6f], 0x2e
je 0x45694f
jmp 0x456b5a
cmp edi, 5
jne 0x456967
cmp dword [ebp + 0x3c], ebx
je 0x456914
mov ecx, dword [ebp + 0x28]
push 0xffffffffffffffff
push 0xffffffffffffffff
push str.REG_DWORD_BIG_ENDIAN
call fcn.0043d538
cmp dword [ebp + 0x4c], ebx
jne 0x456bc1
cmp dword [ebp + 0x68], ebx
jne 0x456b5a
cmp dword [ebp + 0x38], ebx
jg 0x456939
jl 0x456929
cmp dword [ebp + 0x34], ebx
jae 0x456939
cmp byte [ebp + 0x6f], 0x62
je 0x456939
cmp byte [ebp + 0x6f], 0x2e
jne 0x456b5a
mov cl, byte [esi + 3]
mov al, byte [esi]
mov byte [esi], cl
mov byte [esi + 3], al
mov cl, byte [esi + 2]
mov al, byte [esi + 1]
mov byte [esi + 1], cl
mov byte [esi + 2], al
push dword [esi]
push str.0x_x
push dword [ebp + 0x48]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
jmp 0x456bbf
cmp edi, 2
jne 0x4569d5
cmp dword [ebp + 0x3c], ebx
je 0x45698b
mov ecx, dword [ebp + 0x28]
push 0xffffffffffffffff
push 0xffffffffffffffff
push str.REG_EXPAND_SZ
call fcn.0043d538
cmp dword [ebp + 0x4c], ebx
jne 0x456bc1
cmp dword [ebp + 0x68], ebx
jne 0x456b5a
cmp dword [ebp + 0x38], ebx
jg 0x4569b0
jl 0x4569a0
cmp dword [ebp + 0x34], ebx
jae 0x4569b0
cmp byte [ebp + 0x6f], 0x7e
je 0x4569b0
cmp byte [ebp + 0x6f], 0x2e
jne 0x456b5a
cmp byte [ebp + 0x53], 0
je 0x45682c
mov eax, dword [ebp + 0x60]
push 1
push ebx
lea ecx, [ebp + 0x48]
push ecx
mov ecx, dword [ebp + 0x18]
push eax
mov dword [ebp + 0x40], eax
call fcn.0044c0fc
jmp 0x456bbf
cmp edi, 7
jne 0x456ab8
cmp dword [ebp + 0x3c], ebx
je 0x4569fd
mov ecx, dword [ebp + 0x28]
push 0xffffffffffffffff
push 0xffffffffffffffff
push str.REG_MULTI_SZ
call fcn.0043d538
cmp dword [ebp + 0x4c], ebx
jne 0x456bc1
cmp dword [ebp + 0x68], ebx
jne 0x456b5a
cmp dword [ebp + 0x38], ebx
jg 0x456a22
jl 0x456a12
cmp dword [ebp + 0x34], ebx
jae 0x456a22
cmp byte [ebp + 0x6f], 0x2a
je 0x456a22
cmp byte [ebp + 0x6f], 0x2e
jne 0x456b5a
mov esi, dword [ebp + 0x1c]
shr esi, 1
lea eax, [esi*4 + 6]
push eax
lea ecx, [ebp + 0x48]
call fcn.0043d4c2
mov ecx, dword [ebp + 0x60]
mov eax, dword [ebp + 0x48]
lea esi, [ecx + esi*2]
jmp 0x456aac
cmp byte [ebp + 0x53], 0x2a
jne 0x456a73
cmp word [ecx], 0x5c
jne 0x456a73
lea edx, [ecx + 2]
mov di, word [edx]
cmp di, 0x30
je 0x456a65
cmp di, 0x5c
je 0x456a65
cmp di, bx
jne 0x456a73
mov word [eax], 0x5c
mov ecx, edx
mov dx, word [ecx]
inc eax
inc eax
jmp 0x456a7b
mov dx, word [ecx]
cmp dx, bx
je 0x456a84
mov word [eax], dx
inc eax
inc eax
inc ecx
inc ecx
jmp 0x456aac
inc ecx
inc ecx
cmp byte [ebp + 0x53], 0x24
jne 0x456a9e
cmp ecx, esi
jae 0x456ab0
mov word [eax], 0xd
inc eax
inc eax
mov word [eax], 0xa
jmp 0x456aaa
mov word [eax], 0x5c
inc eax
inc eax
mov word [eax], 0x30
inc eax
inc eax
cmp ecx, esi
jb 0x456a42
mov word [eax], bx
jmp 0x456bbf
cmp edi, 3
jne 0x456ac4
mov eax, str.REG_BINARY
jmp 0x456af1
cmp edi, ebx
jne 0x456acf
mov eax, str.REG_NONE
jmp 0x456af1
cmp edi, 8
jne 0x456adb
mov eax, str.REG_RESOURCE_LIST
jmp 0x456af1
cmp edi, 9
jne 0x456ae7
mov eax, str.REG_FULL_RESOURCE_DESCRIPTOR
jmp 0x456af1
cmp edi, 0xa
jne 0x456b12
mov eax, str.REG_RESOURCE_REQUIREMENTS_LIST
cmp dword [ebp + 0x3c], ebx
je 0x456b0c
mov ecx, dword [ebp + 0x28]
push 0xffffffffffffffff
push 0xffffffffffffffff
push eax
call fcn.0043d538
cmp dword [ebp + 0x4c], ebx
jne 0x456bc1
mov byte [ebp + 0x7f], 0x40
jmp 0x456b3d
cmp dword [ebp + 0x3c], ebx
je 0x456b3d
mov esi, dword [ebp + 0x28]
push 0x32
mov ecx, esi
call fcn.0043d4c2
push edi
push str.0x_lx
push dword [esi]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp dword [ebp + 0x4c], ebx
jne 0x456bc1
cmp dword [ebp + 0x38], ebx
jg 0x456b55
jl 0x456b49
cmp dword [ebp + 0x34], ebx
jae 0x456b55
mov al, byte [ebp + 0x6f]
cmp byte [ebp + 0x7f], al
je 0x456b55
cmp al, 0x2e
jne 0x456b5a
cmp dword [ebp + 0x68], ebx
je 0x456b77
lea ecx, [ebp + 0x60]
call fcn.00437960
lea ecx, [ebp + 0x58]
call fcn.00437960
lea ecx, [ebp + 0x48]
call fcn.00437960
jmp 0x4564cd
mov eax, dword [ebp + 0x1c]
lea eax, [eax + eax*4 + 7]
push eax
lea ecx, [ebp + 0x48]
call fcn.0043d4c2
mov edi, dword [ebp + 0x48]
mov esi, dword [ebp + 0x60]
xor ebx, ebx
mov word [edi], bx
mov word [edi + 2], bx
cmp dword [ebp + 0x1c], ebx
mov dword [ebp - 4], 1
jle 0x456bbf
movzx eax, byte [esi]
push eax
push str._0x_02X
push edi
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
inc esi
inc ebx
add edi, 0xa
cmp ebx, dword [ebp + 0x1c]
jl 0x456ba2
xor ebx, ebx
mov eax, dword [ebp + 0x14]
cmp word [eax], bx
je 0x456bdc
mov edx, dword [ebp + 0x48]
mov ecx, dword [ebp - 4]
lea ecx, [edx + ecx*2]
push ecx
mov ecx, dword [ebp + 0x18]
push eax
call fcn.0043cd78
mov eax, dword [ebp]
cmp word [eax], bx
je 0x456bf2
mov ecx, dword [ebp + 0x28]
push dword [ecx]
mov ecx, dword [ebp + 0x18]
push eax
call fcn.0043cd78
lea ecx, [ebp + 0x60]
call fcn.00437960
lea ecx, [ebp + 0x58]
call fcn.00437960
lea ecx, [ebp + 0x48]
call fcn.00437960
mov esi, dword [ebp + 0xc]
jmp 0x457158
mov edi, dword [ebp + 0x60]
cmp edi, ebx
je 0x4570d0
cmp byte [ebp + 0x47], 0
mov dword [ebp + 0x7c], ebx
jne 0x456c2c
cmp byte [ebp + 0x46], 0
je 0x456c7d
push ebx
lea eax, [ebp + 0x2c]
push eax
movzx eax, word [0x4bdbc8]
push ebx
or eax, 0x2001b
push eax
xor eax, eax
cmp byte [ebp + 0x47], al
mov dword [ebp + 0x2c], ebx
setne al
push eax
push ebx
push ebx
push dword [ebp + 0x68]
push dword [ebp + 0x78]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp dword [ebp + 0x2c], ebx
mov esi, eax
je 0x456c69
push dword [ebp + 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp byte [ebp + 0x47], 2
jge 0x4570c3
cmp byte [ebp + 0x46], 0
jne 0x4570c3
mov cl, byte [ebp + 0x6f]
cmp cl, 0x2b
je 0x456c9b
test cl, cl
jne 0x456ce6
mov ax, word [edi]
cmp ax, 0x2b
jne 0x456d1a
inc edi
inc edi
mov dword [ebp + 0x60], edi
cmp byte [ebp + 0x5f], 0
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], ebx
lea esi, [ebp + 8]
je 0x45704e
movsx eax, byte [ebp + 0x66]
push eax
lea eax, [ebp + 0x7c]
push eax
push edi
call fcn.00441359
mov esi, dword [ebp + 0x7c]
add esp, 0xc
push 8
push esi
push 0xb
cmp byte [ebp + 0x67], 0
push dword [ebp + 0x54]
push dword [ebp + 0x68]
push dword [ebp + 0x78]
je 0x4570b9
call dword [0x4be108]
jmp 0x4570c1
cmp cl, 0x23
je 0x456d29
cmp cl, 0x62
jne 0x456dca
cmp byte [ebp + 0x5f], 0
mov dword [ebp + 0x58], ebx
lea esi, [ebp + 0x58]
je 0x456d53
movsx eax, byte [ebp + 0x66]
push eax
lea eax, [ebp + 0x7c]
push eax
push edi
call fcn.00441359
mov esi, dword [ebp + 0x7c]
add esp, 0xc
jmp 0x456dc0
cmp ax, 0x23
jne 0x456df1
inc edi
inc edi
mov dword [ebp + 0x60], edi
cmp byte [ebp + 0x5f], 0
mov dword [ebp + 0x4c], ebx
lea esi, [ebp + 0x4c]
je 0x456ff3
movsx eax, byte [ebp + 0x66]
push eax
lea eax, [ebp + 0x7c]
push eax
push edi
call fcn.00441359
mov esi, dword [ebp + 0x7c]
add esp, 0xc
jmp 0x457044
cmp byte [ebp + 0x66], 0
je 0x456d90
xor ecx, ecx
mov cx, word [edi]
mov eax, ecx
call fcn.0043cfe9
test al, al
je 0x456f3c
cmp cx, 0x30
jne 0x456d84
mov ax, word [edi + 2]
or ax, 0x20
cmp ax, 0x78
jne 0x456d84
add edi, 4
push edi
call fcn.0043df10
pop ecx
mov dword [ebp + 0x58], eax
jmp 0x456da8
lea eax, [ebp + 0x58]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004488bd
cmp eax, 1
pop ecx
pop ecx
jl 0x4570a9
mov al, byte [ebp + 0x58]
mov cl, byte [ebp + 0x5b]
mov byte [ebp + 0x58], cl
mov cl, byte [ebp + 0x5a]
mov byte [ebp + 0x5b], al
mov al, byte [ebp + 0x59]
mov byte [ebp + 0x59], cl
mov byte [ebp + 0x5a], al
push 4
push esi
push 5
jmp 0x456cc8
cmp cl, 0x2a
je 0x456e00
cmp cl, 0x7e
je 0x456eb7
cmp cl, 0x40
je 0x456f0a
cmp cl, 0x6e
jne 0x456f12
xor esi, esi
jmp 0x456f0d
cmp ax, 0x2a
jne 0x456eaf
inc edi
inc edi
mov dword [ebp + 0x60], edi
cmp byte [ebp + 0x5f], 0
push 7
pop esi
mov dword [ebp + 0x38], ebx
jne 0x456f80
mov esi, dword [ebp + 0x60]
push esi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov ebx, eax
lea eax, [ebx + 0x10]
push eax
lea ecx, [ebp + 0x7c]
xor edi, edi
call fcn.0043d4c2
mov edx, dword [ebp + 0x7c]
lea ecx, [esi + ebx*2]
cmp esi, ecx
mov eax, esi
mov dword [ebp + 0xc], ecx
jae 0x456e76
and word [edx], 0
cmp byte [ebp + 0x53], 0x2a
jne 0x456f9c
cmp word [eax], 0x5c
jne 0x456fd0
lea ecx, [eax + 2]
cmp word [ecx], 0x5c
jne 0x456fd0
mov eax, ecx
mov cx, word [eax]
mov word [edx], cx
inc edx
inc edx
inc eax
inc eax
xor edi, edi
cmp eax, dword [ebp + 0xc]
jb 0x456e39
cmp edi, 1
jge 0x456e7d
and word [edx], 0
inc edi
inc edx
inc edx
test ebx, ebx
jle 0x456e9d
cmp edi, 2
jge 0x456e9d
push 2
pop esi
sub esi, edi
xor eax, eax
mov ecx, esi
shr ecx, 1
mov edi, edx
rep stosd dword es:[edi], eax
adc ecx, ecx
rep stosw word es:[edi], ax
lea edx, [edx + esi*2]
and word [edx], 0
sub edx, dword [ebp + 0x7c]
push edx
push dword [ebp + 0x7c]
push 7
jmp 0x456cc8
cmp ax, 0x7e
jne 0x456f02
inc edi
inc edi
cmp byte [ebp + 0x5f], 0
push 2
pop esi
mov dword [ebp + 0x38], ebx
jne 0x456f80
push edi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
inc eax
push eax
lea ecx, [ebp + 0x7c]
call fcn.0043d4c2
cmp word [edi], bx
mov esi, dword [ebp + 0x7c]
mov ecx, edi
mov eax, esi
je 0x456f72
mov dx, word [ecx]
cmp dx, 0x5c
jne 0x456f62
cmp word [ecx + 2], 0x30
jne 0x456f62
mov word [eax], bx
inc eax
inc eax
add ecx, 4
jmp 0x456f69
cmp ax, 0x40
jne 0x456f12
inc edi
inc edi
push 3
pop esi
mov dword [ebp + 0x38], ebx
jmp 0x456f80
cmp dword [ebp + 0x38], ebx
jg 0x456f7d
jl 0x456f20
mov esi, dword [ebp + 0x34]
cmp esi, ebx
jae 0x456f80
cmp cl, 0x5e
jne 0x456f29
push 6
jmp 0x456f30
cmp cl, 0x75
jne 0x456f33
push 0x15
pop esi
jmp 0x456f4c
test cl, cl
je 0x456f49
cmp cl, 0x24
je 0x456f49
lea ecx, [ebp + 0x7c]
call fcn.00437960
jmp 0x4564cd
xor esi, esi
inc esi
cmp byte [ebp + 0x5f], 0
mov dword [ebp + 0x38], ebx
jne 0x456f80
push edi
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
shl eax, 1
push eax
push edi
jmp 0x456f96
mov word [eax], dx
inc eax
inc eax
inc ecx
inc ecx
cmp word [ecx], bx
jne 0x456ee8
sub eax, esi
push eax
push esi
push 2
jmp 0x456cc8
mov esi, dword [ebp + 0x34]
movsx eax, byte [ebp + 0x66]
push eax
lea eax, [ebp + 0x7c]
push eax
push edi
call fcn.00441359
add esp, 0xc
push eax
push dword [ebp + 0x7c]
push esi
jmp 0x456cc8
cmp byte [ebp + 0x53], 0x24
jne 0x456fd0
mov cx, word [eax]
cmp cx, 0xd
jne 0x456fb8
lea esi, [eax + 2]
cmp word [esi], 0xa
jne 0x456fb8
mov eax, esi
jmp 0x456fc2
cmp cx, 0xa
jne 0x456e63
and word [edx], 0
inc eax
inc eax
inc edx
inc edx
inc edi
jmp 0x456e6c
mov cx, word [eax]
cmp cx, 0x5c
jne 0x456e63
cmp word [eax + 2], 0x30
jne 0x456e63
and word [edx], 0
inc edx
inc edx
add eax, 4
jmp 0x456fca
cmp byte [ebp + 0x66], 0
je 0x457030
xor ecx, ecx
mov cx, word [edi]
mov eax, ecx
call fcn.0043cfe9
test al, al
je 0x456f3c
cmp cx, 0x30
jne 0x457024
mov ax, word [edi + 2]
or ax, 0x20
cmp ax, 0x78
jne 0x457024
add edi, 4
push edi
call fcn.0043df10
pop ecx
mov dword [ebp + 0x4c], eax
jmp 0x457044
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.004488bd
cmp eax, 1
pop ecx
pop ecx
jl 0x4570a9
push 4
push esi
push 4
jmp 0x456cc8
cmp byte [ebp + 0x66], 0
je 0x457091
xor ecx, ecx
mov cx, word [edi]
mov eax, ecx
call fcn.0043cfe9
test al, al
je 0x456f3c
cmp cx, 0x30
jne 0x45707f
mov ax, word [edi + 2]
or ax, 0x20
cmp ax, 0x78
jne 0x45707f
add edi, 4
push edi
call fcn.0043df10
pop ecx
mov dword [ebp + 8], eax
mov dword [ebp + 0xc], edx
jmp 0x456cc3
lea eax, [ebp + 8]
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.00448773
cmp eax, 1
pop ecx
pop ecx
jge 0x456cc3
lea ecx, [ebp + 0x7c]
call fcn.00437960
xor esi, esi
inc esi
jmp 0x457158
call fcn.00438a61
add esp, 0x18
mov esi, eax
lea ecx, [ebp + 0x7c]
call fcn.00437960
jmp 0x457158
cmp byte [ebp + 0x33], 0x21
jne 0x457102
mov eax, dword [ebp + 0x54]
cmp word [eax], bx
jne 0x457102
cmp dword [ebp + 0x4c], ebx
je 0x4570f3
push dword [ebp + 0x4c]
push dword [ebp + 0x68]
push dword [ebp + 0x78]
call fcn.00446da1
jmp 0x45714c
push dword [ebp + 0x68]
push dword [ebp + 0x78]
call fcn.00446ba0
pop ecx
pop ecx
jmp 0x45714f
cmp dword [ebp + 0x4c], ebx
je 0x45713e
push ebx
lea eax, [ebp + 0x7c]
push eax
movzx eax, word [0x4bdbc8]
push ebx
or eax, 0x2001b
push eax
push ebx
push ebx
push ebx
push dword [ebp + 0x68]
mov dword [ebp + 0x7c], ebx
push dword [ebp + 0x78]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
cmp dword [ebp + 0x7c], ebx
mov esi, eax
je 0x457151
push dword [ebp + 0x7c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x457151
push dword [ebp + 0x54]
push dword [ebp + 0x68]
push dword [ebp + 0x78]
call fcn.00438aad
add esp, 0xc
mov esi, eax
cmp esi, 2
jne 0x457158
xor esi, esi
lea ecx, [ebp + 0x24]
call fcn.00437960
lea ecx, [ebp - 0xc]
call fcn.00437960
lea ecx, [ebp]
call fcn.00437960
lea ecx, [ebp + 4]
call fcn.00437960
lea ecx, [ebp + 0x14]
call fcn.00437960
lea ecx, [ebp - 0x14]
call fcn.00437960
lea ecx, [ebp + 0x10]
call fcn.00437960
lea ecx, [ebp - 8]
call fcn.00437960
lea ecx, [ebp - 0x24]
call fcn.00437960
pop edi
mov eax, esi
pop esi
pop ebx
add ebp, 0x70
leave
ret 8