Function at 0x4a0ebc
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x55
push 0
push 0
dec ecx
jne 0x4a0ec4
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x4a2598
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x4ac8dc]
call fcn.004a0160
lea edx, [ebp - 0x13c]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0046043c
mov eax, dword [ebp - 0x13c]
lea edx, [ebp - 0x138]
call fcn.00409558
lea eax, [ebp - 0x138]
mov edx, 0x4a25b4
call fcn.00404b80
mov eax, dword [ebp - 0x138]
call fcn.004093d4
test al, al
je 0x4a1209
lea edx, [ebp - 0x144]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0046043c
mov eax, dword [ebp - 0x144]
lea edx, [ebp - 0x140]
call fcn.00409558
lea eax, [ebp - 0x140]
mov edx, 0x4a25b4
call fcn.00404b80
mov ecx, dword [ebp - 0x140]
mov dl, 1
mov eax, dword [0x4613f0]
call fcn.004614a0
mov ebx, eax
push 0
lea eax, [ebp - 0x148]
push eax
mov ecx, 0x4a25cc
mov edx, 0x4a25e0
mov eax, ebx
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x148]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ffb4
push 0
lea eax, [ebp - 0x14c]
push eax
mov ecx, 0x4a25f4
mov edx, 0x4a25e0
mov eax, ebx
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x14c]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
call fcn.0043ffb4
push 0
lea eax, [ebp - 0x150]
push eax
mov ecx, 0x4a2608
mov edx, 0x4a25e0
mov eax, ebx
mov esi, dword [eax]
call dword [esi]
mov edx, dword [ebp - 0x150]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x320]
call fcn.0043ffb4
mov eax, ebx
call fcn.00403b54
cmp dword [0x4ac904], 0
je 0x4a11c7
mov eax, dword [0x4ac904]
call fcn.004093d4
test al, al
je 0x4a11c7
cmp dword [0x4ac90c], 1
je 0x4a103e
cmp dword [0x4ac90c], 2
jne 0x4a1045
mov al, 0xa0
call fcn.0049ecec
cmp dword [0x4ac90c], 1
jne 0x4a1106
lea edx, [ebp - 0x154]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
lea eax, [ebp - 0x154]
mov edx, 0x4a261c
call fcn.00404b80
mov eax, dword [ebp - 0x154]
call fcn.004093d4
test al, al
je 0x4a1106
push 3
lea edx, [ebp - 0x158]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
mov eax, dword [ebp - 0x158]
push eax
lea edx, [ebp - 0x15c]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
lea eax, [ebp - 0x15c]
mov edx, 0x4a261c
call fcn.00404b80
mov eax, dword [ebp - 0x15c]
push eax
push 0x4a2630
push dword [0x4ac904]
push 0x4a2644
lea eax, [ebp - 0x160]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0x160]
pop eax
pop ecx
call fcn.0048e750
cmp dword [0x4ac90c], 2
jne 0x4a11c7
lea edx, [ebp - 0x164]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
call fcn.0043ff84
lea eax, [ebp - 0x164]
mov edx, 0x4a2650
call fcn.00404b80
mov eax, dword [ebp - 0x164]
call fcn.004093d4
test al, al
je 0x4a11c7
push 3
lea edx, [ebp - 0x168]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
mov eax, dword [ebp - 0x168]
push eax
lea edx, [ebp - 0x16c]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
call fcn.0043ff84
lea eax, [ebp - 0x16c]
mov edx, 0x4a2650
call fcn.00404b80
mov eax, dword [ebp - 0x16c]
push eax
push 0x4a2664
push dword [0x4ac904]
push 0x4a2644
lea eax, [ebp - 0x170]
mov edx, 3
call fcn.00404c38
mov edx, dword [ebp - 0x170]
pop eax
pop ecx
call fcn.0048e750
lea edx, [ebp - 0x174]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x320]
call fcn.0043ff84
mov eax, dword [ebp - 0x174]
call fcn.004090b8
push eax
call sub.kernel32.dll_Sleep_1
cmp dword [0x4ac90c], 1
je 0x4a1202
cmp dword [0x4ac90c], 2
jne 0x4a1209
mov al, 0xa0
call fcn.0049ecfc
cmp byte [0x4ac8f4], 0
jne 0x4a1a90
xor eax, eax
mov dword [0x4ac918], eax
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [0x4ac8cc]
test eax, eax
jl 0x4a1367
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], 0x4abc88
lea eax, [ebp - 0x10]
call fcn.004048c0
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x2c]
mov edx, dword [edx]
call fcn.00404958
push 0x4ac918
push 0x2000000
push 0
mov eax, dword [ebp - 8]
call fcn.00404d70
push eax
push 0x80000002
call sub.advapi32.dll_RegOpenKeyExA_1
mov dword [ebp - 0x18], 0x101
mov dword [ebp - 0x1c], 1
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x131]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
mov eax, dword [0x4ac8d4]
call fcn.00404d70
push eax
mov eax, dword [0x4ac918]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x4a12ba
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x131]
mov ecx, 0x101
call fcn.00404b28
mov dword [ebp - 0x18], 4
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
mov eax, dword [0x4ac8d4]
call fcn.00404d70
push eax
mov eax, dword [0x4ac918]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x4a12f4
mov eax, dword [0x4ac918]
push eax
call sub.advapi32.dll_RegCloseKey_1
mov eax, dword [ebp - 0x10]
call fcn.00404b78
test eax, eax
je 0x4a135a
mov eax, dword [0x4ac8d0]
test eax, eax
jl 0x4a135a
inc eax
mov dword [ebp - 0x28], eax
mov ebx, 0x4ab888
lea edx, [ebp - 0x178]
mov eax, dword [ebp - 0x10]
call fcn.00408ba8
mov eax, dword [ebp - 0x178]
push eax
lea edx, [ebp - 0x17c]
mov eax, dword [ebx]
call fcn.00408ba8
mov edx, dword [ebp - 0x17c]
pop eax
call fcn.00404cbc
jne 0x4a1352
mov edx, dword [ebp - 8]
mov eax, 0x80000002
call fcn.004a07f0
inc dword [ebp - 0xc]
add ebx, 4
dec dword [ebp - 0x28]
jne 0x4a1312
add dword [ebp - 0x2c], 4
dec dword [ebp - 0x24]
jne 0x4a123a
mov eax, dword [0x4ac890]
call fcn.00404b78
test eax, eax
je 0x4a16f0
cmp byte [0x4ac900], 0
jne 0x4a16f0
mov eax, 0x4ac894
mov edx, 0x4a2674
call fcn.00404b80
lea eax, [ebp - 0x180]
mov ecx, dword [0x4ac890]
mov edx, dword [0x4ac894]
call fcn.00404bc4
mov eax, dword [ebp - 0x180]
call fcn.004093d4
test al, al
jne 0x4a1410
push 0x10
lea ecx, [ebp - 0x184]
mov edx, 0x4a2680
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x184]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x188]
mov edx, 0x4a2694
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x188]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004047d0
jmp 0x4a17d2
cmp byte [0x4ac8c8], 0
je 0x4a1420
mov al, 1
call fcn.0049fbf4
cmp byte [0x4ac8c9], 0
je 0x4a1433
mov eax, dword [0x4ac8e0]
call fcn.0049f32c
push 0
mov ecx, dword [0x4ac894]
mov edx, dword [0x4ac898]
mov eax, dword [0x4ac890]
call fcn.0048e750
call fcn.004a076c
cmp byte [0x4ac89c], 0
je 0x4a14ae
push 0x10
lea ecx, [ebp - 0x18c]
mov edx, 0x4a2680
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x18c]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x190]
mov edx, 0x4a26b0
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x190]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004047d0
jmp 0x4a17d2
cmp byte [0x4ac8c9], 0
je 0x4a14ca
cmp dword [0x4ac8e4], 0
je 0x4a14ca
mov eax, dword [0x4ac8e4]
call fcn.0049f32c
cmp byte [0x4ac8c8], 0
je 0x4a14da
xor eax, eax
call fcn.0049fbf4
cmp byte [0x4ac910], 0
je 0x4a152b
cmp dword [0x4ac888], 1
jne 0x4a14f0
xor ebx, ebx
jmp 0x4a14f2
mov bl, 3
push ebx
lea edx, [ebp - 0x198]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0046043c
mov eax, dword [ebp - 0x198]
lea edx, [ebp - 0x194]
call fcn.00409558
mov ecx, dword [ebp - 0x194]
mov edx, 0x4a26cc
mov eax, 0x4a26dc
call fcn.0048e750
cmp byte [0x4ac908], 0
je 0x4a1693
cmp dword [0x4ac904], 0
je 0x4a1693
mov eax, dword [0x4ac904]
call fcn.004093d4
test al, al
je 0x4a1693
cmp dword [0x4ac90c], 1
jne 0x4a15f5
lea edx, [ebp - 0x19c]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
lea eax, [ebp - 0x19c]
mov edx, 0x4a261c
call fcn.00404b80
mov eax, dword [ebp - 0x19c]
call fcn.004093d4
test al, al
je 0x4a15f5
push 3
lea edx, [ebp - 0x1a0]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
mov eax, dword [ebp - 0x1a0]
push eax
lea edx, [ebp - 0x1a4]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
lea eax, [ebp - 0x1a4]
mov edx, 0x4a261c
call fcn.00404b80
mov eax, dword [ebp - 0x1a4]
mov edx, 0x4a26f0
pop ecx
call fcn.0048e750
cmp dword [0x4ac90c], 2
jne 0x4a1693
lea edx, [ebp - 0x1a8]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
call fcn.0043ff84
lea eax, [ebp - 0x1a8]
mov edx, 0x4a2650
call fcn.00404b80
mov eax, dword [ebp - 0x1a8]
call fcn.004093d4
test al, al
je 0x4a1693
push 3
lea edx, [ebp - 0x1ac]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
mov eax, dword [ebp - 0x1ac]
push eax
lea edx, [ebp - 0x1b0]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
call fcn.0043ff84
lea eax, [ebp - 0x1b0]
mov edx, 0x4a2650
call fcn.00404b80
mov eax, dword [ebp - 0x1b0]
mov edx, 0x4a2704
pop ecx
call fcn.0048e750
cmp byte [0x4ac88c], 0
jne 0x4a17d2
push 0x40
lea ecx, [ebp - 0x1b4]
mov edx, 0x4a2714
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x1b4]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x1b8]
mov edx, 0x4a2724
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x1b8]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
jmp 0x4a17d2
cmp byte [0x4ac88c], 0
jne 0x4a17d2
push 0x40
lea ecx, [ebp - 0x1bc]
mov edx, 0x4a2714
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x1bc]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x1c4]
mov edx, 0x4a2734
mov eax, dword [0x4ac8fc]
call fcn.0049f194
push dword [ebp - 0x1c4]
push 0x4a2744
lea edx, [ebp - 0x1c8]
mov eax, dword [0x4ac8d0]
call fcn.00409014
push dword [ebp - 0x1c8]
push 0x4a2750
lea ecx, [ebp - 0x1cc]
mov edx, 0x4a275c
mov eax, dword [0x4ac8fc]
call fcn.0049f194
push dword [ebp - 0x1cc]
push 0x4a276c
lea ecx, [ebp - 0x1d0]
mov edx, 0x4a2778
mov eax, dword [0x4ac8fc]
call fcn.0049f194
push dword [ebp - 0x1d0]
push 0x4a2744
lea edx, [ebp - 0x1d4]
mov eax, dword [ebp - 0xc]
call fcn.00409014
push dword [ebp - 0x1d4]
lea eax, [ebp - 0x1c0]
mov edx, 9
call fcn.00404c38
mov eax, dword [ebp - 0x1c0]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
cmp byte [0x4ac900], 0
je 0x4a1a90
cmp byte [0x4ac8c8], 0
je 0x4a17ef
mov al, 1
call fcn.0049fbf4
cmp byte [0x4ac8c9], 0
je 0x4a1802
mov eax, dword [0x4ac8e0]
call fcn.0049f32c
call fcn.004a076c
push 0x40
lea ecx, [ebp - 0x1d8]
mov edx, 0x4a2714
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x1d8]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x1dc]
mov edx, 0x4a2790
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x1dc]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
cmp byte [0x4ac8c9], 0
je 0x4a186e
cmp dword [0x4ac8e4], 0
je 0x4a186e
mov eax, dword [0x4ac8e4]
call fcn.0049f32c
cmp byte [0x4ac8c8], 0
je 0x4a187e
xor eax, eax
call fcn.0049fbf4
cmp byte [0x4ac910], 0
je 0x4a18cf
cmp dword [0x4ac888], 1
jne 0x4a1894
xor ebx, ebx
jmp 0x4a1896
mov bl, 3
push ebx
lea edx, [ebp - 0x1e4]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0046043c
mov eax, dword [ebp - 0x1e4]
lea edx, [ebp - 0x1e0]
call fcn.00409558
mov ecx, dword [ebp - 0x1e0]
mov edx, 0x4a26cc
mov eax, 0x4a26dc
call fcn.0048e750
cmp byte [0x4ac908], 0
je 0x4a1a37
cmp dword [0x4ac904], 0
je 0x4a1a37
mov eax, dword [0x4ac904]
call fcn.004093d4
test al, al
je 0x4a1a37
cmp dword [0x4ac90c], 1
jne 0x4a1999
lea edx, [ebp - 0x1e8]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
lea eax, [ebp - 0x1e8]
mov edx, 0x4a261c
call fcn.00404b80
mov eax, dword [ebp - 0x1e8]
call fcn.004093d4
test al, al
je 0x4a1999
push 3
lea edx, [ebp - 0x1ec]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
mov eax, dword [ebp - 0x1ec]
push eax
lea edx, [ebp - 0x1f0]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
lea eax, [ebp - 0x1f0]
mov edx, 0x4a261c
call fcn.00404b80
mov eax, dword [ebp - 0x1f0]
mov edx, 0x4a26f0
pop ecx
call fcn.0048e750
cmp dword [0x4ac90c], 2
jne 0x4a1a37
lea edx, [ebp - 0x1f4]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
call fcn.0043ff84
lea eax, [ebp - 0x1f4]
mov edx, 0x4a2650
call fcn.00404b80
mov eax, dword [ebp - 0x1f4]
call fcn.004093d4
test al, al
je 0x4a1a37
push 3
lea edx, [ebp - 0x1f8]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
mov eax, dword [ebp - 0x1f8]
push eax
lea edx, [ebp - 0x1fc]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
call fcn.0043ff84
lea eax, [ebp - 0x1fc]
mov edx, 0x4a2650
call fcn.00404b80
mov eax, dword [ebp - 0x1fc]
mov edx, 0x4a2704
pop ecx
call fcn.0048e750
cmp byte [0x4ac88c], 0
jne 0x4a1a8b
push 0x40
lea ecx, [ebp - 0x200]
mov edx, 0x4a2714
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x200]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x204]
mov edx, 0x4a2724
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x204]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004047d0
cmp byte [0x4ac8f4], 0
je 0x4a248c
xor eax, eax
mov dword [0x4ac918], eax
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [0x4ac8cc]
test eax, eax
jl 0x4a1d72
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], 0x4abc88
lea eax, [ebp - 0x10]
call fcn.004048c0
lea eax, [ebp - 8]
mov edx, dword [ebp - 0x2c]
mov edx, dword [edx]
call fcn.00404958
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0049ed0c
push 0x4ac918
push 0x2000000
push 0
mov eax, dword [ebp - 8]
call fcn.00404d70
push eax
push 0x80000002
call sub.advapi32.dll_RegOpenKeyExA_1
mov dword [ebp - 0x18], 0x101
mov dword [ebp - 0x1c], 1
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x131]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
mov eax, dword [0x4ac8d4]
call fcn.00404d70
push eax
mov eax, dword [0x4ac918]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x4a1b4e
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x131]
mov ecx, 0x101
call fcn.00404b28
mov dword [ebp - 0x18], 4
mov eax, dword [ebp - 0x10]
call fcn.00404b78
test eax, eax
je 0x4a1d58
mov eax, dword [0x4ac8d0]
test eax, eax
jl 0x4a1d58
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x30], 0x4ab888
lea edx, [ebp - 0x208]
mov eax, dword [ebp - 0x10]
call fcn.00408ba8
mov eax, dword [ebp - 0x208]
push eax
lea edx, [ebp - 0x20c]
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
call fcn.00408ba8
mov edx, dword [ebp - 0x20c]
pop eax
call fcn.00404cbc
jne 0x4a1d4b
mov edi, dword [0x4ac8f8]
test edi, edi
jle 0x4a1d40
mov dword [ebp - 0x18], 0x101
mov dword [ebp - 0x1c], 1
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x131]
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
mov eax, dword [0x4ac8d8]
call fcn.00404d70
push eax
mov eax, dword [0x4ac918]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x4a1c0e
lea eax, [ebp - 0x14]
lea edx, [ebp - 0x131]
mov ecx, 0x101
call fcn.00404b28
mov dword [ebp - 0x18], 4
mov eax, dword [ebp - 0x14]
call fcn.00404b78
test eax, eax
je 0x4a1d39
mov esi, dword [0x4ac8f8]
dec esi
test esi, esi
jl 0x4a1d39
inc esi
mov ebx, 0x4ac488
lea edx, [ebp - 0x210]
mov eax, dword [ebp - 0x14]
call fcn.00408ba8
mov eax, dword [ebp - 0x210]
push eax
lea edx, [ebp - 0x214]
mov eax, dword [ebx]
call fcn.00408ba8
mov edx, dword [ebp - 0x214]
pop eax
call fcn.00404cbc
jne 0x4a1d2f
lea eax, [ebp - 0x20]
mov edx, dword [ebx]
call fcn.00404958
mov al, byte [0x4a27a4]
push eax
lea eax, [ebp - 0x218]
push eax
mov ecx, 0x4a27b0
mov edx, 0x4a27bc
mov eax, dword [ebp - 0x20]
call fcn.0040dc08
mov edx, dword [ebp - 0x218]
lea eax, [ebp - 0x20]
call fcn.00404958
mov al, byte [0x4a27a4]
push eax
lea eax, [ebp - 0x21c]
push eax
mov ecx, 0x4a27c8
mov edx, 0x4a27d4
mov eax, dword [ebp - 0x20]
call fcn.0040dc08
mov edx, dword [ebp - 0x21c]
lea eax, [ebp - 0x20]
call fcn.00404958
mov al, byte [0x4a27a4]
push eax
lea eax, [ebp - 0x220]
push eax
mov ecx, 0x4a27e0
mov edx, 0x4a27ec
mov eax, dword [ebp - 0x20]
call fcn.0040dc08
mov edx, dword [ebp - 0x220]
lea eax, [ebp - 0x20]
call fcn.00404958
mov eax, dword [ebp - 0x20]
call fcn.00404b78
inc eax
push eax
mov eax, dword [ebp - 0x20]
call fcn.00404d70
push eax
push 1
push 0
mov eax, dword [0x4ac8d8]
call fcn.00404d70
push eax
mov eax, dword [0x4ac918]
push eax
call sub.advapi32.dll_RegSetValueExA
inc dword [ebp - 0xc]
add ebx, 4
dec esi
jne 0x4a1c3a
dec edi
jne 0x4a1bc2
mov eax, dword [0x4ac918]
push eax
call sub.advapi32.dll_RegCloseKey_1
add dword [ebp - 0x30], 4
dec dword [ebp - 0x28]
jne 0x4a1b7d
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.0049ed0c
add dword [ebp - 0x2c], 4
dec dword [ebp - 0x24]
jne 0x4a1ac1
mov eax, dword [0x4ac890]
call fcn.00404b78
test eax, eax
je 0x4a20ec
cmp byte [0x4ac900], 0
jne 0x4a20ec
lea eax, [ebp - 0x224]
mov ecx, dword [0x4ac890]
mov edx, dword [0x4ac894]
call fcn.00404bc4
mov eax, dword [ebp - 0x224]
call fcn.004093d4
test al, al
jne 0x4a1e0c
push 0x10
lea ecx, [ebp - 0x228]
mov edx, 0x4a2680
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x228]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x22c]
mov edx, 0x4a2694
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x22c]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004047d0
jmp 0x4a21ce
cmp byte [0x4ac8c8], 0
je 0x4a1e1c
mov al, 1
call fcn.0049fbf4
cmp byte [0x4ac8c9], 0
je 0x4a1e2f
mov eax, dword [0x4ac8e0]
call fcn.0049f32c
push 0
mov ecx, dword [0x4ac894]
mov edx, dword [0x4ac898]
mov eax, dword [0x4ac890]
call fcn.0048e750
cmp byte [0x4ac89c], 0
je 0x4a1ea5
push 0x10
lea ecx, [ebp - 0x230]
mov edx, 0x4a2680
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x230]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x234]
mov edx, 0x4a26b0
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x234]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004047d0
jmp 0x4a21ce
cmp byte [0x4ac8c9], 0
je 0x4a1ec1
cmp dword [0x4ac8e4], 0
je 0x4a1ec1
mov eax, dword [0x4ac8e4]
call fcn.0049f32c
cmp byte [0x4ac8c8], 0
je 0x4a1ed1
xor eax, eax
call fcn.0049fbf4
cmp byte [0x4ac910], 0
je 0x4a1f22
cmp dword [0x4ac888], 1
jne 0x4a1ee7
xor ebx, ebx
jmp 0x4a1ee9
mov bl, 3
push ebx
lea edx, [ebp - 0x23c]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0046043c
mov eax, dword [ebp - 0x23c]
lea edx, [ebp - 0x238]
call fcn.00409558
mov ecx, dword [ebp - 0x238]
mov edx, 0x4a26cc
mov eax, 0x4a26dc
call fcn.0048e750
cmp byte [0x4ac908], 0
je 0x4a208a
cmp dword [0x4ac904], 0
je 0x4a208a
mov eax, dword [0x4ac904]
call fcn.004093d4
test al, al
je 0x4a208a
cmp dword [0x4ac90c], 1
jne 0x4a1fec
lea edx, [ebp - 0x240]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
lea eax, [ebp - 0x240]
mov edx, 0x4a261c
call fcn.00404b80
mov eax, dword [ebp - 0x240]
call fcn.004093d4
test al, al
je 0x4a1fec
push 3
lea edx, [ebp - 0x244]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
mov eax, dword [ebp - 0x244]
push eax
lea edx, [ebp - 0x248]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
lea eax, [ebp - 0x248]
mov edx, 0x4a261c
call fcn.00404b80
mov eax, dword [ebp - 0x248]
mov edx, 0x4a26f0
pop ecx
call fcn.0048e750
cmp dword [0x4ac90c], 2
jne 0x4a208a
lea edx, [ebp - 0x24c]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
call fcn.0043ff84
lea eax, [ebp - 0x24c]
mov edx, 0x4a2650
call fcn.00404b80
mov eax, dword [ebp - 0x24c]
call fcn.004093d4
test al, al
je 0x4a208a
push 3
lea edx, [ebp - 0x250]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
mov eax, dword [ebp - 0x250]
push eax
lea edx, [ebp - 0x254]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
call fcn.0043ff84
lea eax, [ebp - 0x254]
mov edx, 0x4a2650
call fcn.00404b80
mov eax, dword [ebp - 0x254]
mov edx, 0x4a2704
pop ecx
call fcn.0048e750
call fcn.004a0868
cmp byte [0x4ac88c], 0
jne 0x4a21ce
push 0x40
lea ecx, [ebp - 0x258]
mov edx, 0x4a2714
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x258]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x25c]
mov edx, 0x4a2724
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x25c]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
jmp 0x4a21ce
cmp byte [0x4ac88c], 0
jne 0x4a21ce
push 0x40
lea ecx, [ebp - 0x260]
mov edx, 0x4a2714
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x260]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x268]
mov edx, 0x4a2734
mov eax, dword [0x4ac8fc]
call fcn.0049f194
push dword [ebp - 0x268]
push 0x4a2744
lea edx, [ebp - 0x26c]
mov eax, dword [0x4ac8d0]
call fcn.00409014
push dword [ebp - 0x26c]
push 0x4a2750
lea ecx, [ebp - 0x270]
mov edx, 0x4a275c
mov eax, dword [0x4ac8fc]
call fcn.0049f194
push dword [ebp - 0x270]
push 0x4a276c
lea ecx, [ebp - 0x274]
mov edx, 0x4a2778
mov eax, dword [0x4ac8fc]
call fcn.0049f194
push dword [ebp - 0x274]
push 0x4a2744
lea edx, [ebp - 0x278]
mov eax, dword [ebp - 0xc]
call fcn.00409014
push dword [ebp - 0x278]
lea eax, [ebp - 0x264]
mov edx, 9
call fcn.00404c38
mov eax, dword [ebp - 0x264]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
cmp byte [0x4ac900], 0
je 0x4a248c
cmp byte [0x4ac8c8], 0
je 0x4a21eb
mov al, 1
call fcn.0049fbf4
cmp byte [0x4ac8c9], 0
je 0x4a21fe
mov eax, dword [0x4ac8e0]
call fcn.0049f32c
push 0x40
lea ecx, [ebp - 0x27c]
mov edx, 0x4a2714
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x27c]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x280]
mov edx, 0x4a2790
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x280]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
cmp byte [0x4ac8c9], 0
je 0x4a2265
cmp dword [0x4ac8e4], 0
je 0x4a2265
mov eax, dword [0x4ac8e4]
call fcn.0049f32c
cmp byte [0x4ac8c8], 0
je 0x4a2275
xor eax, eax
call fcn.0049fbf4
cmp byte [0x4ac910], 0
je 0x4a22c6
cmp dword [0x4ac888], 1
jne 0x4a228b
xor ebx, ebx
jmp 0x4a228d
mov bl, 3
push ebx
lea edx, [ebp - 0x288]
mov eax, dword [0x4a9a40]
mov eax, dword [eax]
call fcn.0046043c
mov eax, dword [ebp - 0x288]
lea edx, [ebp - 0x284]
call fcn.00409558
mov ecx, dword [ebp - 0x284]
mov edx, 0x4a26cc
mov eax, 0x4a26dc
call fcn.0048e750
cmp byte [0x4ac908], 0
je 0x4a242e
cmp dword [0x4ac904], 0
je 0x4a242e
mov eax, dword [0x4ac904]
call fcn.004093d4
test al, al
je 0x4a242e
cmp dword [0x4ac90c], 1
jne 0x4a2390
lea edx, [ebp - 0x28c]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
lea eax, [ebp - 0x28c]
mov edx, 0x4a261c
call fcn.00404b80
mov eax, dword [ebp - 0x28c]
call fcn.004093d4
test al, al
je 0x4a2390
push 3
lea edx, [ebp - 0x290]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
mov eax, dword [ebp - 0x290]
push eax
lea edx, [ebp - 0x294]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
lea eax, [ebp - 0x294]
mov edx, 0x4a261c
call fcn.00404b80
mov eax, dword [ebp - 0x294]
mov edx, 0x4a26f0
pop ecx
call fcn.0048e750
cmp dword [0x4ac90c], 2
jne 0x4a242e
lea edx, [ebp - 0x298]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
call fcn.0043ff84
lea eax, [ebp - 0x298]
mov edx, 0x4a2650
call fcn.00404b80
mov eax, dword [ebp - 0x298]
call fcn.004093d4
test al, al
je 0x4a242e
push 3
lea edx, [ebp - 0x29c]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x310]
call fcn.0043ff84
mov eax, dword [ebp - 0x29c]
push eax
lea edx, [ebp - 0x2a0]
mov eax, dword [0x4a9acc]
mov eax, dword [eax]
mov eax, dword [eax + 0x318]
call fcn.0043ff84
lea eax, [ebp - 0x2a0]
mov edx, 0x4a2650
call fcn.00404b80
mov eax, dword [ebp - 0x2a0]
mov edx, 0x4a2704
pop ecx
call fcn.0048e750
call fcn.004a0868
cmp byte [0x4ac88c], 0
jne 0x4a2487
push 0x40
lea ecx, [ebp - 0x2a4]
mov edx, 0x4a2714
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x2a4]
call fcn.00404d70
push eax
lea ecx, [ebp - 0x2a8]
mov edx, 0x4a2724
mov eax, dword [0x4ac8fc]
call fcn.0049f194
mov eax, dword [ebp - 0x2a8]
call fcn.00404d70
push eax
push 0
call sub.user32.dll_MessageBoxA_1
call fcn.004047d0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4a25a2
lea eax, [ebp - 0x2a8]
mov edx, 2
call fcn.004048e4
lea eax, [ebp - 0x2a0]
mov edx, 6
call fcn.004048e4
lea eax, [ebp - 0x288]
mov edx, 0xd
call fcn.004048e4
lea eax, [ebp - 0x254]
mov edx, 6
call fcn.004048e4
lea eax, [ebp - 0x23c]
mov edx, 0x10
call fcn.004048e4
lea eax, [ebp - 0x1fc]
mov edx, 6
call fcn.004048e4
lea eax, [ebp - 0x1e4]
mov edx, 0xd
call fcn.004048e4
lea eax, [ebp - 0x1b0]
mov edx, 6
call fcn.004048e4
lea eax, [ebp - 0x198]
mov edx, 9
call fcn.004048e4
lea eax, [ebp - 0x174]
call fcn.004048c0
lea eax, [ebp - 0x170]
call fcn.004048c0
lea eax, [ebp - 0x16c]
mov edx, 3
call fcn.004048e4
lea eax, [ebp - 0x160]
call fcn.004048c0
lea eax, [ebp - 0x15c]
mov edx, 3
call fcn.004048e4
lea eax, [ebp - 0x150]
mov edx, 7
call fcn.004048e4
lea eax, [ebp - 0x20]
call fcn.004048c0
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004048e4
lea eax, [ebp - 8]
call fcn.004048c0
ret