Function at 0x41b380
Capabilities:
Delete directory
Delete file
Delete registry key
Delete registry value
Enumerate files on windows
Get common file path
Persist via run registry key
Query or enumerate registry key
Query or enumerate registry value
Resolve function by parsing pe exports
Set file attributes

Disassembly:
mov eax, 0x1598
call fcn.004226e0
mov eax, dword [0x43c730]
xor eax, esp
mov dword [esp + 0x1594], eax
mov eax, dword [esp + 0x159c]
push ebp
xor ebp, ebp
mov dword [esp + 0x2c], eax
cmp eax, ebp
je 0x41d7fc
push ebx
push esi
push edi
push 0x40e
lea ecx, [esp + 0x119a]
xor eax, eax
push ebp
push ecx
mov dword [esp + 0x4c], ebp
mov word [esp + 0x11a0], ax
call fcn.00422290
push 0x206
lea eax, [esp + 0xd96]
xor edx, edx
push ebp
push eax
mov word [esp + 0xd9c], dx
call fcn.00422290
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
add esp, 0x18
push str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerDesktopNamespace1CDB2949_8F65_4355_8456_263E7C208A5D
xor ebx, ebx
push 0x80000001
mov dword [esp + 0x3c], ebx
call esi
push str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerDesktopNamespace1CDB2949_8F65_4355_8456_263E7C208A5D
push 0x80000002
call esi
push 0x206
lea edx, [esp + 0x3be]
xor ecx, ecx
push ebp
push edx
mov word [esp + 0x3c4], cx
call fcn.00422290
push str.regsvr32.exe__u__s_nvshell.dll
lea eax, [esp + 0x3c8]
push 0x208
push eax
call fcn.00419b60
lea ecx, [esp + 0x3d0]
push ebp
push ecx
call fcn.00418c60
push 0x206
lea eax, [esp + 0x3de]
xor edx, edx
push ebp
push eax
mov word [esp + 0x3e4], dx
call fcn.00422290
push str.regsvr32.exe__u__s_nvwdmcpl.dll
lea ecx, [esp + 0x3e8]
push 0x208
push ecx
call fcn.00419b60
lea edx, [esp + 0x3f0]
push ebp
push edx
call fcn.00418c60
add esp, 0x40
push str.nview.dll
call fcn.00404550
mov esi, eax
add esp, 4
cmp esi, ebp
je 0x41b4fb
push str.NVGetDirectory
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
cmp edi, ebp
je 0x41b4f4
push 0x104
push 2
lea eax, [esp + 0x119c]
push eax
call edi
push 0x104
push ebp
lea ecx, [esp + 0x13a4]
push ecx
call edi
push 0x104
push 1
lea edx, [esp + 0xd8c]
push edx
call edi
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [esp + 0x14]
push eax
push 0xf003f
push ebp
push str.SoftwareNVIDIA_CorporationGlobal_nView
push 0x80000002
mov dword [esp + 0x28], ebp
call esi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x41b578
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push ebp
push ebp
push str.nvepclnt
push eax
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], 4
call edi
test eax, eax
jne 0x41b56d
cmp dword [esp + 0x18], ebp
je 0x41b55d
mov ebx, 1
mov dword [esp + 0x34], ebx
mov ecx, dword [esp + 0x14]
push str.nvepclnt
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [esp + 0x14]
push eax
push 0x20019
push ebp
push str.SoftwareNVIDIA_CorporationNVDeploy
push 0x80000002
call esi
test eax, eax
jne 0x41b5d6
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push ebp
push ebp
push str.Ignore_nvepclnt
push eax
mov dword [esp + 0x30], ebp
mov dword [esp + 0x34], 4
call edi
test eax, eax
jne 0x41b5c7
cmp dword [esp + 0x18], ebp
je 0x41b5c7
xor ebx, ebx
mov dword [esp + 0x34], ebx
mov ecx, dword [esp + 0x14]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ecx
call edi
jmp 0x41b5dc
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp ebx, ebp
je 0x41b5fb
push ebp
push str.NVDeployClientClass
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, ebp
je 0x41b5fb
push ebp
push ebp
push 0x7e
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push str.NVIDIA_TwinView_Window
push str.NVIDIA_TwinView_Window
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
je 0x41b64a
push 1
call fcn.00419bd0
mov eax, dword [0x44645c]
add esp, 4
mov dword [esp + 0x1c], ebp
cmp eax, ebp
je 0x41b62f
lea edx, [esp + 0x1c]
push edx
push 2
call eax
mov eax, dword [0x4464d4]
cmp eax, ebp
je 0x41b63f
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x4464d4], ebp
call fcn.00419910
lea eax, [esp + 0x10]
push eax
push 0xf003f
push ebp
push str.SoftwareMicrosoftWindowsCurrentVersionRun_nview
push 0x80000002
mov dword [esp + 0x24], ebp
call esi
test eax, eax
jne 0x41b686
mov ecx, dword [esp + 0x10]
push ecx
call edi
push str.SoftwareMicrosoftWindowsCurrentVersionRun_nview
push 0x80000002
mov dword [esp + 0x18], ebp
call fcn.00418dc0
add esp, 8
lea edx, [esp + 0x10]
push edx
push 0xf003f
push ebp
push str.SoftwareMicrosoftWindowsCurrentVersionRun
push 0x80000002
call esi
test eax, eax
jne 0x41b6d6
mov eax, dword [esp + 0x10]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push 0x435180
push eax
call ebx
mov ecx, dword [esp + 0x10]
push str.nwiz
push ecx
call ebx
mov edx, dword [esp + 0x10]
push str.NVRotateSysTray
push edx
call ebx
mov eax, dword [esp + 0x10]
push eax
call edi
mov dword [esp + 0x10], ebp
lea ecx, [esp + 0x10]
push ecx
push 0xf003f
push ebp
push str.SoftwareNVIDIA_CorporationGlobal_nView
push 0x80000002
call esi
test eax, eax
jne 0x41b70e
mov edx, dword [esp + 0x10]
push edx
call edi
push str.SoftwareNVIDIA_CorporationGlobal_nView
push 0x80000002
mov dword [esp + 0x18], ebp
call fcn.00418dc0
add esp, 8
lea eax, [esp + 0x10]
push eax
push 0x20019
push ebp
push str.SoftwareNVIDIA_CorporationGlobal_nViewInstalled
push 0x80000002
call esi
test eax, eax
jne 0x41b74e
mov ecx, dword [esp + 0x10]
push ecx
mov dword [esp + 0x44], 1
call edi
push str.SoftwareNVIDIA_CorporationGlobal_nViewInstalled
push 0x80000002
mov dword [esp + 0x18], ebp
call fcn.00418dc0
add esp, 8
push 0x206
lea eax, [esp + 0x3be]
xor edx, edx
push ebp
push eax
mov word [esp + 0x3c4], dx
call fcn.00422290
add esp, 0xc
push 0x104
lea ecx, [esp + 0x3bc]
push ecx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push 0x4343ec
push 0x208
lea edx, [esp + 0x3c0]
push edx
call fcn.00419ab0
push str.mvenable.txt
push 0x208
lea eax, [esp + 0x3c0]
push eax
call fcn.00419ab0
lea ecx, [esp + 0x3b8]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea edx, [esp + 0x10]
push edx
push 0x20019
push ebp
push str.SoftwareNVIDIA_CorporationGlobal_nViewInstalled
call fcn.00418b80
push eax
call esi
test eax, eax
jne 0x41b7ff
mov eax, dword [esp + 0x10]
push eax
mov dword [esp + 0x44], 1
call edi
push str.SoftwareNVIDIA_CorporationGlobal_nViewInstalled
mov dword [esp + 0x14], ebp
call fcn.00418b80
push eax
call fcn.00418dc0
add esp, 8
mov eax, dword [0x4464d4]
cmp eax, ebp
je 0x41b81a
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x4464d4], ebp
call fcn.00419910
push str.NVIDIA_TwinView_Window
push str.NVIDIA_TwinView_Window
call dword [sym.imp.USER32.dll_FindWindowW]
cmp eax, ebp
je 0x41b83a
push ebp
push 1
push 0x16
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegFlushKey]
push 0x80000001
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ebp
mov dword [esp + 0x28], 0xff
mov dword [esp + 0x34], ebp
mov dword [esp + 0x30], ebp
call ebx
lea ecx, [esp + 0x54]
push ecx
push 0x20
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
lea edx, [esp + 0x58]
push edx
push str.SeRestorePrivilege
push ebp
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
mov ecx, dword [esp + 0x5c]
push ebp
push ebp
mov edi, eax
mov eax, dword [esp + 0x60]
push 0x10
lea edx, [esp + 0x6c]
push edx
neg edi
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x64]
push ebp
sbb edi, edi
push eax
inc edi
mov dword [esp + 0x78], 1
mov dword [esp + 0x80], ecx
mov dword [esp + 0x84], 2
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
lea ecx, [esp + 0x20]
push ecx
neg eax
push 0x20019
sbb eax, eax
push ebp
inc eax
push str.SoftwareMicrosoftWindows_NTCurrentVersionProfileList
or edi, eax
push 0x80000002
mov dword [esp + 0x64], edi
call esi
test eax, eax
jne 0x41bc97
lea edx, [esp + 0x48]
push edx
mov edx, dword [esp + 0x24]
push ebp
push ebp
push ebp
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x998]
push ecx
push ebp
push edx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
cmp eax, 0x103
je 0x41bc82
lea esp, [esp]
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x28]
push eax
push 0x20019
push ebp
lea ecx, [esp + 0x990]
push ecx
push edx
call esi
test eax, eax
jne 0x41bc45
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [esp + 0x3c]
push eax
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0xf90]
push ecx
lea edx, [esp + 0x20]
push edx
push ebp
push str.ProfileImagePath
push eax
mov dword [esp + 0x30], 1
mov dword [esp + 0x54], 0x208
xor ebx, ebx
call edi
test eax, eax
je 0x41ba53
lea ecx, [esp + 0x48]
push ecx
mov ecx, dword [esp + 0x34]
push ebp
push ebp
push ebp
lea edx, [esp + 0x34]
push edx
mov edx, dword [esp + 0x3c]
lea eax, [esp + 0x998]
push eax
push ecx
push edx
mov dword [esp + 0x44], 0xff
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
cmp eax, 0x103
je 0x41ba4d
mov edx, dword [esp + 0x28]
mov eax, 1
sub dword [esp + 0x2c], eax
add dword [esp + 0x30], eax
lea eax, [esp + 0x44]
push eax
push 0x20019
push ebp
lea ecx, [esp + 0x990]
push ecx
push edx
call esi
test eax, eax
jne 0x41ba7a
lea eax, [esp + 0x3c]
push eax
mov eax, dword [esp + 0x48]
lea ecx, [esp + 0xf90]
push ecx
lea edx, [esp + 0x20]
push edx
push ebp
push str.ProfileImagePath
push eax
mov dword [esp + 0x30], 1
mov dword [esp + 0x54], 0x208
call edi
test eax, eax
jne 0x41ba40
lea ecx, [esp + 0x984]
push ecx
push 0x434dec
lea edx, [esp + 0x3c0]
push 0x1fe
push edx
lea ebx, [eax + 1]
call fcn.00419b60
add esp, 0x10
mov eax, dword [esp + 0x44]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x41ba7a
mov dword [esp + 0x30], ebp
jmp 0x41ba7a
lea ecx, [esp + 0x984]
push ecx
push 0x434dec
lea edx, [esp + 0x3c0]
push 0x1fe
push edx
mov ebx, 1
call fcn.00419b60
add esp, 0x10
lea eax, [esp + 0x14]
push eax
push 0xf003f
push ebp
lea ecx, [esp + 0x3c4]
push ecx
push 0x80000003
xor edi, edi
call esi
test eax, eax
jne 0x41baaa
mov edx, dword [esp + 0x14]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, 1
cmp ebx, ebp
je 0x41bc36
mov eax, dword [esp + 0x38]
push eax
push str._.255s
lea ecx, [esp + 0xb8c]
push 0x1fe
push ecx
call fcn.00419b60
lea edx, [esp + 0xb94]
push 0x5c
push edx
call fcn.00423246
lea edx, [esp + 0xfa6]
xor ecx, ecx
push 0x25
push edx
mov word [eax], cx
call fcn.00423246
push str.Ntuser.dat
add eax, 2
push eax
lea eax, [esp + 0xbac]
push eax
push str._s_s_s
lea ecx, [esp + 0xa0]
push 0x220
push ecx
call fcn.00419b60
add esp, 0x38
cmp edi, ebp
jne 0x41bb40
lea edx, [esp + 0x70]
push edx
lea eax, [esp + 0x3bc]
push eax
push 0x80000003
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
cmp eax, ebp
jne 0x41bc36
lea ecx, [esp + 0x14]
push ecx
push 0xf003f
push ebp
lea edx, [esp + 0x3c4]
push edx
push 0x80000003
call esi
test eax, eax
jne 0x41bc1f
mov ecx, dword [esp + 0x14]
lea eax, [esp + 0x10]
push eax
push 0xf003f
push ebp
push str.SoftwareNVIDIA_CorporationGlobal
push ecx
call esi
test eax, eax
jne 0x41bbb8
mov edx, dword [esp + 0x10]
push 0x435180
push edx
call fcn.00418dc0
mov eax, dword [esp + 0x18]
push str.TABView
push eax
call fcn.00418dc0
mov ecx, dword [esp + 0x20]
add esp, 0x10
push ecx
call dword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [esp + 0x10], ebp
mov eax, dword [esp + 0x14]
push str.SoftwareNVIDIA_CorporationGlobal_nViewInstalled
push eax
call fcn.00418dc0
mov ecx, dword [esp + 0x1c]
push str.SoftwareMicrosoftWindowsCurrentVersionRun_nview
push ecx
call fcn.00418dc0
mov eax, dword [esp + 0x24]
add esp, 0x10
lea edx, [esp + 0x1c]
push edx
push 0xf003f
push ebp
push str.SoftwareMicrosoftWindowsCurrentVersionRun
push eax
call esi
mov ecx, dword [esp + 0x1c]
push 0x435180
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov edx, dword [esp + 0x1c]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edx
call ebx
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.ADVAPI32.dll_RegFlushKey]
mov ecx, dword [esp + 0x14]
push ecx
call ebx
cmp edi, ebp
jne 0x41bc36
lea edx, [esp + 0x3b8]
push edx
push 0x80000003
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
mov eax, dword [esp + 0x28]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [esp + 0x50]
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x48]
push ecx
push ebp
push ebp
push ebp
lea edx, [esp + 0x34]
push edx
mov edx, dword [esp + 0x34]
lea ecx, [esp + 0x998]
inc eax
push ecx
push eax
push edx
mov dword [esp + 0x44], 0xff
mov dword [esp + 0x4c], eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
cmp eax, 0x103
jne 0x41b920
mov eax, dword [esp + 0x20]
push eax
mov ebx, 1
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x41bd49
lea ecx, [esp + 0x10]
push ecx
push 0xf003f
push ebp
push str.SoftwareNVIDIA_CorporationGlobal
push 0x80000001
call esi
test eax, eax
jne 0x41bce9
mov edx, dword [esp + 0x10]
push 0x435180
push edx
call fcn.00418dc0
mov eax, dword [esp + 0x18]
push str.TABView
push eax
call fcn.00418dc0
mov ecx, dword [esp + 0x20]
add esp, 0x10
push ecx
call ebx
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [esp + 0x10], ebp
push str.SoftwareNVIDIA_CorporationGlobal_nViewInstalled
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
push str.SoftwareMicrosoftWindowsCurrentVersionRun_nview
push 0x80000001
call fcn.00418dc0
add esp, 8
lea eax, [esp + 0x1c]
push eax
push 0xf003f
push ebp
push str.SoftwareMicrosoftWindowsCurrentVersionRun
push 0x80000001
call esi
mov ecx, dword [esp + 0x1c]
push 0x435180
push ecx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x80000001
call ebx
mov ebx, 1
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
cmp edi, ebp
je 0x41bd9f
mov ecx, dword [0x43dae4]
push 0x32
lea eax, [esp + 0x704]
push eax
push 0x3cff
push ecx
call esi
mov eax, dword [0x43dae4]
push 0xc8
lea edx, [esp + 0xb88]
push edx
push 0x804
push eax
call esi
push ebp
lea ecx, [esp + 0x704]
push ecx
lea edx, [esp + 0xb8c]
push edx
push ebp
call fcn.004157a0
add esp, 0x10
push 0x206
lea ecx, [esp + 0x3be]
xor eax, eax
push ebp
push ecx
mov word [esp + 0x3c4], ax
call fcn.00422290
mov eax, dword [0x435e4c]
mov edx, dword [str.dmcpl.dll]
mov ecx, dword [0x435e50]
mov dword [esp + 0x80], eax
mov eax, dword [0x435e58]
mov dword [esp + 0x84], ecx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x7c], edx
mov edx, dword [0x435e54]
xor eax, eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x88], edx
mov dword [esp + 0x98], ebp
mov ecx, 6
mov esi, str.nvsysrot.dll
lea edi, [esp + 0x9c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [str.nview.dll]
xor ecx, ecx
mov word [esp + 0xb6], cx
mov dword [esp + 0xb8], ebx
mov ecx, 6
mov esi, str.nvTuiCpl.cpl
lea edi, [esp + 0xbc]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x434c10]
movsw word es:[edi], word [esi]
xor edx, edx
mov dword [esp + 0xdc], eax
mov eax, dword [0x434c18]
mov dword [esp + 0xe0], ecx
mov ecx, dword [0x434c1c]
mov word [esp + 0xd6], dx
mov edx, dword [0x434c14]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xec], ecx
mov ecx, dword [0x435e00]
add esp, 0xc
xor eax, eax
mov dword [esp + 0xd8], edx
mov edx, dword [str.nview64.dll]
mov dword [esp + 0xe4], eax
mov dword [esp + 0xe8], eax
mov eax, dword [0x435dfc]
mov dword [esp + 0xf8], ecx
mov ecx, dword [0x435e0c]
mov dword [esp + 0xf0], edx
mov edx, dword [0x435e04]
mov dword [esp + 0xf4], eax
mov eax, dword [0x435e08]
mov dword [esp + 0x104], ecx
mov ecx, dword [0x435de8]
mov dword [esp + 0xfc], edx
mov edx, dword [str.nvShell.dll]
mov dword [esp + 0x100], eax
mov eax, dword [0x435de4]
mov dword [esp + 0x118], ecx
mov ecx, dword [0x435df4]
mov dword [esp + 0x110], edx
mov edx, dword [0x435dec]
mov dword [esp + 0x114], eax
mov eax, dword [0x435df0]
mov dword [esp + 0x124], ecx
mov dword [esp + 0xcc], ebp
mov dword [esp + 0xec], ebp
mov dword [esp + 0x108], ebp
mov dword [esp + 0x10c], ebp
mov dword [esp + 0x11c], edx
mov dword [esp + 0x120], eax
mov dword [esp + 0x128], ebp
mov dword [esp + 0x12c], ebp
mov ecx, 6
mov esi, str.nvwdmcpl.dll
lea edi, [esp + 0x130]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor edx, edx
mov word [esp + 0x14a], dx
mov dword [esp + 0x14c], ebp
mov edx, dword [0x435db0]
mov ecx, 6
mov esi, str.nvdspsch.exe
lea edi, [esp + 0x150]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, dword [str.nviewx.dll]
xor eax, eax
mov word [esp + 0x16a], ax
mov eax, dword [0x435db4]
mov dword [esp + 0x178], eax
movzx eax, word [0x435dc0]
mov dword [esp + 0x170], ecx
mov ecx, dword [0x435db8]
mov word [esp + 0x184], ax
mov dword [esp + 0x17c], ecx
mov ecx, dword [str.nvwimg.dll]
mov dword [esp + 0x174], edx
mov edx, dword [0x435dbc]
xor eax, eax
mov dword [esp + 0x186], eax
mov word [esp + 0x18a], ax
mov eax, dword [0x435d80]
mov dword [esp + 0x190], ecx
mov ecx, dword [0x435d84]
mov dword [esp + 0x198], eax
movzx eax, word [0x435d8c]
mov dword [esp + 0x180], edx
mov edx, dword [0x435d7c]
mov dword [esp + 0x19c], ecx
mov dword [esp + 0x194], edx
mov edx, dword [0x435d88]
mov word [esp + 0x1a4], ax
mov dword [esp + 0x1a0], edx
xor eax, eax
mov dword [esp + 0x1a6], eax
mov word [esp + 0x1aa], ax
mov dword [esp + 0x16c], ebp
mov dword [esp + 0x18c], ebp
mov dword [esp + 0x1ac], ebp
mov ecx, 6
mov esi, str.nvwimg64.dll
lea edi, [esp + 0x1b0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor ecx, ecx
mov word [esp + 0x1ca], cx
mov dword [esp + 0x1cc], ebp
mov ecx, 6
mov esi, str.nvAppBar.exe
lea edi, [esp + 0x1d0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor edx, edx
mov word [esp + 0x1ea], dx
mov edx, dword [0x435d2c]
mov dword [esp + 0x1ec], ebp
mov ecx, 6
mov esi, str.keystone.exe
lea edi, [esp + 0x1f0]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [str.nvwddi.dll]
movsw word es:[edi], word [esi]
mov word [esp + 0x20a], ax
mov eax, dword [0x435d30]
mov dword [esp + 0x210], ecx
mov ecx, dword [0x435d34]
mov dword [esp + 0x214], edx
mov edx, dword [0x435d38]
mov dword [esp + 0x218], eax
movzx eax, word [0x435d3c]
mov dword [esp + 0x20c], ebp
mov dword [esp + 0x21c], ecx
mov dword [esp + 0x220], edx
mov word [esp + 0x224], ax
xor eax, eax
mov dword [esp + 0x226], eax
mov word [esp + 0x22a], ax
mov dword [esp + 0x22c], ebx
mov ecx, 6
mov esi, str.nvwddi64.dll
lea edi, [esp + 0x230]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [str.nwiz.exe]
xor ecx, ecx
mov word [esp + 0x24a], cx
mov dword [esp + 0x24c], ebx
mov ecx, 6
mov esi, str.nvnt4cpl.dll
lea edi, [esp + 0x250]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, dword [0x434400]
mov dword [esp + 0x274], ecx
movzx ecx, word [0x43440c]
mov dword [esp + 0x270], eax
mov eax, dword [0x434408]
mov dword [esp + 0x27c], eax
mov word [esp + 0x280], cx
mov ecx, dword [0x435cc4]
xor eax, eax
mov dword [esp + 0x282], eax
mov dword [esp + 0x286], eax
mov word [esp + 0x28a], ax
mov eax, dword [0x435cc0]
mov dword [esp + 0x298], ecx
movzx ecx, word [0x435cd0]
xor edx, edx
mov word [esp + 0x26a], dx
mov edx, dword [0x434404]
mov dword [esp + 0x278], edx
mov edx, dword [str.nwiz30.exe]
mov dword [esp + 0x294], eax
mov eax, dword [0x435ccc]
mov word [esp + 0x2a4], cx
mov dword [esp + 0x290], edx
mov edx, dword [0x435cc8]
mov dword [esp + 0x2a0], eax
mov dword [esp + 0x29c], edx
mov dword [esp + 0x26c], ebx
mov dword [esp + 0x28c], ebp
xor eax, eax
mov dword [esp + 0x2a6], eax
mov word [esp + 0x2aa], ax
mov dword [esp + 0x2ac], ebp
mov ecx, 6
mov esi, str.oemdspif.dll
lea edi, [esp + 0x2b0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor edx, edx
mov word [esp + 0x2ca], dx
mov dword [esp + 0x2cc], ebx
mov ecx, 6
mov esi, str.hpqvdisp.dll
lea edi, [esp + 0x2d0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov word [esp + 0x2ea], ax
mov dword [esp + 0x2ec], ebx
mov ecx, 6
mov esi, str.nvepclnt.exe
lea edi, [esp + 0x2f0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor ecx, ecx
mov word [esp + 0x30a], cx
mov dword [esp + 0x30c], 3
mov dword [esp + 0x18], ebp
cmp dword [esp + 0x18], ebp
jne 0x41c302
mov edx, dword [esp + 0x38]
push edx
push 0x208
lea eax, [esp + 0x3c0]
push eax
call fcn.00419a20
jmp 0x41c345
push str.kernel32
xor edi, edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, eax
cmp esi, ebp
je 0x41c3a5
push str.GetSystemWow64DirectoryW
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebp
je 0x41c33a
push 0x104
lea ecx, [esp + 0x3bc]
push ecx
call eax
mov edi, eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp edi, ebp
je 0x41c3a5
lea esi, [esp + 0x8c]
mov edi, 0x15
mov eax, dword [esi]
test al, 1
je 0x41c360
cmp dword [esp + 0x15b0], ebp
jne 0x41c39e
test al, 2
je 0x41c36a
cmp dword [esp + 0x34], ebp
je 0x41c39e
lea edx, [esi - 0x1c]
push edx
lea eax, [esp + 0x3bc]
push eax
push 0x4343f0
lea ecx, [esp + 0x770]
push 0x220
push ecx
call fcn.00419b60
add esp, 0x14
push ebp
lea edx, [esp + 0x768]
push edx
call fcn.0041a3a0
add esi, 0x20
sub edi, ebx
jne 0x41c351
mov eax, dword [esp + 0x18]
add eax, ebx
cmp eax, 2
mov dword [esp + 0x18], eax
jl 0x41c2e3
cmp dword [esp + 0x40], ebp
je 0x41c414
mov ecx, dword [0x43dae4]
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
push 0xc8
lea eax, [esp + 0xb88]
push eax
push 0x803
push ecx
call esi
mov eax, dword [0x43dae4]
push 0x32
lea edx, [esp + 0x704]
push edx
push 0x3d00
push eax
call esi
push 0x40004
lea ecx, [esp + 0x704]
push ecx
lea edx, [esp + 0xb8c]
push edx
push ebp
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x41c419
mov eax, 6
mov dword [esp + 0x20], ebp
cmp eax, 6
je 0x41c42a
mov dword [esp + 0x20], 2
mov ebx, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x41c440
mov esi, dword [esp + 0x20]
mov eax, dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp esi, 2
jne 0x41c482
lea ecx, [esp + 0xd84]
push ecx
call eax
cmp eax, 0xa
jl 0x41c63e
lea edx, [esp + 0xd84]
push edx
push 0x208
lea eax, [esp + 0x3c0]
push eax
call fcn.00419a20
push str.PerMonitorWallpaper.bmp
jmp 0x41c4f5
cmp esi, ebp
jne 0x41c4c1
lea eax, [esp + 0x1194]
push eax
push 0x208
lea ecx, [esp + 0x3c0]
push ecx
call fcn.00419a20
push str..tvp
lea edx, [esp + 0x3bc]
push edx
push 0x4343f0
push 0x220
lea eax, [esp + 0x774]
push eax
jmp 0x41c50f
lea ecx, [esp + 0x139c]
push ecx
call eax
cmp eax, 0xa
jle 0x41c517
imul esi, esi, 0x208
lea edx, [esp + esi + 0x1194]
push edx
push 0x208
lea eax, [esp + 0x3c0]
push eax
call fcn.00419a20
push str..tvp
lea ecx, [esp + 0x3bc]
push ecx
push 0x4343f0
push 0x220
lea edx, [esp + 0x774]
push edx
call fcn.00419b60
add esp, 0x14
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x768]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
mov esi, eax
cmp esi, 0xffffffff
je 0x41c60c
lea edx, [esp + 0x9c]
push edx
lea eax, [esp + 0x3bc]
push eax
push 0x4343f0
lea ecx, [esp + 0x770]
push 0x220
push ecx
call fcn.00419b60
add esp, 0x14
push 0x80
lea edx, [esp + 0x768]
push edx
call ebx
lea eax, [esp + 0x764]
push eax
call edi
test eax, eax
jne 0x41c58a
push ebp
lea ecx, [esp + 0x768]
push ecx
call fcn.0041a3a0
lea edx, [esp + 0x70]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
je 0x41c605
lea ebx, [ebx]
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x3bc]
push ecx
push 0x4343f0
lea edx, [esp + 0x770]
push 0x220
push edx
call fcn.00419b60
add esp, 0x14
push 0x80
lea eax, [esp + 0x768]
push eax
call ebx
lea ecx, [esp + 0x764]
push ecx
call edi
test eax, eax
jne 0x41c5f5
push ebp
lea edx, [esp + 0x768]
push edx
call fcn.0041a3a0
lea eax, [esp + 0x70]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
test eax, eax
jne 0x41c5a0
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
lea ecx, [esp + 0x3b8]
push ecx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
test eax, eax
jne 0x41c62c
push ebp
lea edx, [esp + 0x3bc]
push edx
call fcn.0041a3a0
mov eax, dword [esp + 0x20]
inc eax
mov dword [esp + 0x20], eax
cmp eax, 3
jb 0x41c440
mov eax, dword [0x43dae4]
cmp eax, ebp
je 0x41c656
cmp eax, dword [0x4464d0]
je 0x41c656
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov ecx, dword [0x434964]
mov eax, dword [str.NVWRSAR.DLL]
mov edx, dword [0x434968]
mov dword [esp + 0x74], ecx
mov ecx, dword [0x434970]
mov dword [esp + 0x80], ecx
mov ecx, dword [0x43457c]
mov dword [esp + 0x70], eax
mov eax, dword [0x43496c]
mov dword [esp + 0x78], edx
mov edx, dword [0x434974]
mov dword [esp + 0x90], ecx
mov ecx, dword [0x434588]
mov dword [esp + 0x7c], eax
mov eax, dword [str.NVWRSCS.DLL]
mov dword [esp + 0x84], edx
mov edx, dword [0x434580]
mov dword [esp + 0x9c], ecx
mov ecx, dword [0x4348c4]
mov dword [esp + 0x8c], eax
mov eax, dword [0x434584]
mov dword [esp + 0x94], edx
mov edx, dword [0x43458c]
mov dword [esp + 0xac], ecx
mov ecx, dword [0x4348d0]
mov dword [esp + 0x98], eax
mov eax, dword [str.NVWRSDA.DLL]
mov dword [esp + 0xa0], edx
mov edx, dword [0x4348c8]
mov dword [esp + 0xb8], ecx
mov ecx, dword [0x43485c]
mov dword [esp + 0xa8], eax
mov eax, dword [0x4348cc]
mov dword [esp + 0xb0], edx
mov edx, dword [0x4348d4]
mov dword [esp + 0xc8], ecx
mov ecx, dword [0x434868]
mov dword [esp + 0xb4], eax
mov eax, dword [str.NVWRSDE.DLL]
mov dword [esp + 0xbc], edx
mov edx, dword [0x434860]
mov dword [esp + 0xd4], ecx
mov ebx, dword [0x4347d0]
mov dword [esp + 0xc4], eax
mov eax, dword [0x434864]
mov dword [esp + 0xcc], edx
mov edx, dword [0x43486c]
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd8], edx
mov edx, dword [0x4347cc]
mov dword [esp + 0x88], ebp
mov dword [esp + 0xa4], ebp
mov dword [esp + 0xc0], ebp
mov dword [esp + 0xdc], ebp
mov ecx, 6
mov esi, str.NVWRSENG.DLL
lea edi, [esp + 0xe0]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x4347d4]
movsw word es:[edi], word [esi]
mov dword [esp + 0x108], ecx
mov ecx, dword [0x4347d8]
mov dword [esp + 0x10c], ecx
mov ecx, dword [0x4347dc]
xor eax, eax
mov word [esp + 0xfa], ax
mov eax, dword [str.NVWRSES.DLL]
mov dword [esp + 0x110], ecx
mov dword [esp + 0xfc], eax
mov dword [esp + 0x100], edx
mov dword [esp + 0x104], ebx
mov dword [esp + 0x114], ebp
mov ecx, 6
mov esi, str.NVWRSESM.DLL
lea edi, [esp + 0x118]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor ecx, ecx
mov word [esp + 0x132], cx
mov dword [esp + 0x134], eax
mov dword [esp + 0x138], edx
mov edx, dword [0x4347d4]
mov eax, dword [0x4347d8]
mov ecx, dword [0x4347dc]
mov dword [esp + 0x140], edx
mov edx, dword [str.NVWRSFI.DLL]
mov dword [esp + 0x144], eax
mov eax, dword [0x43482c]
mov dword [esp + 0x148], ecx
mov ecx, dword [0x434830]
mov esi, dword [0x434804]
mov edi, dword [0x434808]
mov dword [esp + 0x150], edx
mov edx, dword [0x434834]
mov dword [esp + 0x154], eax
mov eax, dword [0x434838]
mov dword [esp + 0x158], ecx
mov ecx, dword [0x43483c]
mov dword [esp + 0x15c], edx
mov edx, dword [0x434800]
mov dword [esp + 0x160], eax
mov eax, dword [str.NVWRSFR.DLL]
mov dword [esp + 0x164], ecx
mov ecx, dword [0x4347fc]
mov dword [esp + 0x174], edx
mov dword [esp + 0x190], edx
mov edx, dword [str.NVWRSEL.DLL]
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], ecx
mov dword [esp + 0x188], eax
mov eax, dword [0x43454c]
mov dword [esp + 0x18c], ecx
mov ecx, dword [0x434550]
mov dword [esp + 0x1a4], edx
mov edx, dword [0x434554]
mov dword [esp + 0x1a8], eax
mov eax, dword [0x434558]
mov dword [esp + 0x1ac], ecx
mov ecx, dword [0x43455c]
mov dword [esp + 0x1b0], edx
mov edx, dword [str.NVWRSHE.DLL]
mov dword [esp + 0x1b4], eax
mov eax, dword [0x43451c]
mov dword [esp + 0x1b8], ecx
mov ecx, dword [0x434520]
mov dword [esp + 0x1c0], edx
mov edx, dword [0x434524]
mov dword [esp + 0x1c4], eax
mov eax, dword [0x434528]
mov dword [esp + 0x1c8], ecx
mov ecx, dword [0x43452c]
mov dword [esp + 0x1cc], edx
mov edx, dword [str.NVWRSHU.DLL]
mov dword [esp + 0x1d0], eax
mov eax, dword [0x4344ec]
mov dword [esp + 0x1d4], ecx
mov ecx, dword [0x4344f0]
mov dword [esp + 0x1dc], edx
mov edx, dword [0x4344f4]
mov dword [esp + 0x13c], ebx
mov ebx, dword [0x43480c]
mov dword [esp + 0x1e0], eax
mov eax, dword [0x4344f8]
mov dword [esp + 0x1e4], ecx
mov ecx, dword [0x4344fc]
mov dword [esp + 0x1e8], edx
mov edx, dword [str.NVWRSIT.DLL]
mov dword [esp + 0x14c], ebp
mov dword [esp + 0x168], ebp
mov dword [esp + 0x178], esi
mov dword [esp + 0x17c], edi
mov dword [esp + 0x180], ebx
mov dword [esp + 0x184], ebp
mov dword [esp + 0x194], esi
mov dword [esp + 0x198], edi
mov dword [esp + 0x19c], ebx
mov dword [esp + 0x1a0], ebp
mov dword [esp + 0x1bc], ebp
mov dword [esp + 0x1d8], ebp
mov dword [esp + 0x1ec], eax
mov dword [esp + 0x1f0], ecx
mov dword [esp + 0x1f4], ebp
mov eax, dword [0x434764]
mov ecx, dword [0x434768]
mov dword [esp + 0x1f8], edx
mov edx, dword [0x43476c]
mov dword [esp + 0x1fc], eax
mov eax, dword [0x434770]
mov dword [esp + 0x200], ecx
mov ecx, dword [0x434774]
mov dword [esp + 0x204], edx
mov edx, dword [str.NVWRSJA.DLL]
mov dword [esp + 0x208], eax
mov eax, dword [0x434734]
mov dword [esp + 0x20c], ecx
mov ecx, dword [0x434738]
mov dword [esp + 0x214], edx
mov edx, dword [0x43473c]
mov dword [esp + 0x218], eax
mov eax, dword [0x434740]
mov dword [esp + 0x21c], ecx
mov ecx, dword [0x434744]
mov dword [esp + 0x220], edx
mov edx, dword [str.NVWRSKO.DLL]
mov dword [esp + 0x224], eax
mov eax, dword [0x434704]
mov dword [esp + 0x228], ecx
mov ecx, dword [0x434708]
mov dword [esp + 0x230], edx
mov edx, dword [0x43470c]
mov dword [esp + 0x234], eax
mov eax, dword [0x434710]
mov dword [esp + 0x238], ecx
mov ecx, dword [0x434714]
mov dword [esp + 0x23c], edx
mov edx, dword [str.NVWRSNL.DLL]
mov dword [esp + 0x240], eax
mov eax, dword [0x4346d4]
mov dword [esp + 0x244], ecx
mov ecx, dword [0x4346d8]
mov dword [esp + 0x24c], edx
mov edx, dword [0x4346dc]
mov dword [esp + 0x250], eax
mov eax, dword [0x4346e0]
mov dword [esp + 0x254], ecx
mov ecx, dword [0x4346e4]
mov dword [esp + 0x258], edx
mov edx, dword [str.NVWRSNO.DLL]
mov dword [esp + 0x25c], eax
mov eax, dword [0x4346a4]
mov dword [esp + 0x260], ecx
mov ecx, dword [0x4346a8]
mov dword [esp + 0x268], edx
mov edx, dword [0x4346ac]
mov dword [esp + 0x26c], eax
mov eax, dword [0x4346b0]
mov dword [esp + 0x270], ecx
mov ecx, dword [0x4346b4]
mov dword [esp + 0x274], edx
mov edx, dword [str.NVWRSPL.DLL]
mov dword [esp + 0x278], eax
mov eax, dword [0x4344bc]
mov dword [esp + 0x27c], ecx
mov ecx, dword [0x4344c0]
mov dword [esp + 0x284], edx
mov edx, dword [0x4344c4]
mov dword [esp + 0x288], eax
mov eax, dword [0x4344c8]
mov dword [esp + 0x28c], ecx
mov ecx, dword [0x4344cc]
mov dword [esp + 0x290], edx
mov edx, dword [str.NVWRSPT.DLL]
mov dword [esp + 0x294], eax
mov eax, dword [0x4345e4]
mov dword [esp + 0x210], ebp
mov dword [esp + 0x22c], ebp
mov dword [esp + 0x248], ebp
mov dword [esp + 0x264], ebp
mov dword [esp + 0x280], ebp
mov dword [esp + 0x298], ecx
mov dword [esp + 0x29c], ebp
mov dword [esp + 0x2a0], edx
mov dword [esp + 0x2a4], eax
mov ecx, dword [0x4345e8]
mov edx, dword [0x4345ec]
mov eax, dword [0x4345f0]
mov dword [esp + 0x2a8], ecx
mov ecx, dword [0x4345f4]
mov dword [esp + 0x2b4], ecx
mov dword [esp + 0x2ac], edx
mov dword [esp + 0x2b0], eax
mov eax, dword [str.NVWRSRU.DLL]
mov dword [esp + 0x2b8], ebp
mov ecx, 6
mov esi, str.NVWRSPTB.DLL
lea edi, [esp + 0x2bc]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, dword [0x434674]
xor edx, edx
mov word [esp + 0x2d6], dx
mov edx, dword [0x434678]
mov dword [esp + 0x2d8], eax
mov eax, dword [0x43467c]
mov dword [esp + 0x2dc], ecx
mov ecx, dword [0x434680]
mov dword [esp + 0x2e0], edx
mov edx, dword [0x434684]
mov dword [esp + 0x2e4], eax
mov eax, dword [str.NVWRSSK.DLL]
mov dword [esp + 0x2e8], ecx
mov ecx, dword [0x43448c]
mov dword [esp + 0x2ec], edx
mov edx, dword [0x434490]
mov dword [esp + 0x2f4], eax
mov eax, dword [0x434494]
mov dword [esp + 0x2f8], ecx
mov ecx, dword [0x434498]
mov dword [esp + 0x2fc], edx
mov edx, dword [0x43449c]
mov dword [esp + 0x300], eax
mov eax, dword [str.NVWRSSL.DLL]
mov dword [esp + 0x304], ecx
mov ecx, dword [0x43445c]
mov dword [esp + 0x308], edx
mov edx, dword [0x434460]
mov dword [esp + 0x310], eax
mov eax, dword [0x434464]
mov dword [esp + 0x314], ecx
mov ecx, dword [0x434468]
mov dword [esp + 0x318], edx
mov edx, dword [0x43446c]
mov dword [esp + 0x31c], eax
mov eax, dword [str.NVWRSSV.DLL]
mov dword [esp + 0x320], ecx
mov ecx, dword [0x434644]
mov dword [esp + 0x324], edx
mov edx, dword [0x434648]
mov dword [esp + 0x32c], eax
mov eax, dword [0x43464c]
mov dword [esp + 0x330], ecx
mov ecx, dword [0x434650]
mov dword [esp + 0x334], edx
mov edx, dword [0x434654]
mov dword [esp + 0x338], eax
mov eax, dword [str.NVWRSTH.DLL]
mov dword [esp + 0x33c], ecx
mov ecx, dword [0x434614]
mov dword [esp + 0x340], edx
mov edx, dword [0x434618]
mov dword [esp + 0x348], eax
mov eax, dword [0x43461c]
mov dword [esp + 0x34c], ecx
mov ecx, dword [0x434620]
mov dword [esp + 0x350], edx
mov edx, dword [0x434624]
mov dword [esp + 0x2f0], ebp
mov dword [esp + 0x30c], ebp
mov dword [esp + 0x328], ebp
mov dword [esp + 0x344], ebp
mov dword [esp + 0x354], eax
mov dword [esp + 0x358], ecx
mov dword [esp + 0x35c], edx
mov dword [esp + 0x360], ebp
mov ecx, dword [0x43442c]
mov eax, dword [str.NVWRSTR.DLL]
mov edx, dword [0x434430]
mov dword [esp + 0x368], ecx
mov ecx, dword [0x434438]
mov dword [esp + 0x364], eax
mov eax, dword [0x434434]
mov dword [esp + 0x374], ecx
mov dword [esp + 0x36c], edx
mov edx, dword [0x43443c]
mov dword [esp + 0x370], eax
mov dword [esp + 0x378], edx
mov dword [esp + 0x37c], ebp
mov ecx, 6
mov esi, str.NVWRSZHC.DLL
lea edi, [esp + 0x380]
rep movsd dword es:[edi], dword [esi]
mov ebx, dword [esp + 0x38]
movsw word es:[edi], word [esi]
xor eax, eax
mov word [esp + 0x39a], ax
mov ecx, 6
mov esi, str.NVWRSZHT.DLL
lea edi, [esp + 0x39c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor ecx, ecx
mov word [esp + 0x3b6], cx
lea esi, [esp + 0x70]
lea edi, [eax + 0x1e]
lea ebx, [ebx]
push esi
push ebx
push 0x4343f0
lea edx, [esp + 0x770]
push 0x220
push edx
call fcn.00419b60
add esp, 0x14
push ebp
lea eax, [esp + 0x768]
push eax
call fcn.0041a3a0
add esi, 0x1c
sub edi, 1
jne 0x41cee0
mov ecx, dword [str.NVWCPAR.chm]
mov edx, dword [0x43494c]
mov eax, dword [0x434950]
mov dword [esp + 0x3b8], ecx
mov ecx, dword [0x434954]
mov dword [esp + 0x3c4], ecx
mov ecx, dword [str.NVWCPCS.chm]
mov dword [esp + 0x3bc], edx
mov edx, dword [0x434958]
mov dword [esp + 0x3c0], eax
mov eax, dword [0x43495c]
mov dword [esp + 0x3d4], ecx
mov ecx, dword [0x43456c]
mov dword [esp + 0x3c8], edx
mov edx, dword [0x434564]
mov dword [esp + 0x3cc], eax
mov eax, dword [0x434568]
mov dword [esp + 0x3e0], ecx
mov ecx, dword [str.NVWCPDA.chm]
mov dword [esp + 0x3d8], edx
mov edx, dword [0x434570]
mov dword [esp + 0x3dc], eax
mov eax, dword [0x434574]
mov dword [esp + 0x3f0], ecx
mov ecx, dword [0x4348b4]
mov dword [esp + 0x3e4], edx
mov edx, dword [0x4348ac]
mov dword [esp + 0x3e8], eax
mov eax, dword [0x4348b0]
mov dword [esp + 0x3fc], ecx
mov ecx, dword [str.NVWCPDE.chm]
mov dword [esp + 0x3f4], edx
mov edx, dword [0x4348b8]
mov dword [esp + 0x3f8], eax
mov eax, dword [0x4348bc]
mov dword [esp + 0x40c], ecx
mov ecx, dword [0x43484c]
mov dword [esp + 0x400], edx
mov edx, dword [0x434844]
mov dword [esp + 0x404], eax
mov eax, dword [0x434848]
mov dword [esp + 0x418], ecx
mov dword [esp + 0x410], edx
mov edx, dword [0x434850]
mov dword [esp + 0x414], eax
mov eax, dword [0x434854]
mov ebx, dword [0x4347b8]
mov dword [esp + 0x41c], edx
mov edx, dword [0x4347b4]
mov dword [esp + 0x420], eax
mov eax, dword [str.NVWCPES.chm]
mov dword [esp + 0x3d0], ebp
mov dword [esp + 0x3ec], ebp
mov dword [esp + 0x408], ebp
mov dword [esp + 0x424], ebp
mov ecx, 6
mov esi, str.NVWCPENG.chm
lea edi, [esp + 0x428]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor ecx, ecx
mov word [esp + 0x442], cx
mov ecx, dword [0x4347bc]
mov dword [esp + 0x450], ecx
mov ecx, dword [0x4347c0]
mov dword [esp + 0x454], ecx
mov ecx, dword [0x4347c4]
mov dword [esp + 0x458], ecx
mov dword [esp + 0x444], eax
mov dword [esp + 0x448], edx
mov dword [esp + 0x44c], ebx
mov dword [esp + 0x45c], ebp
mov ecx, 6
mov esi, str.NVWCPESM.chm
lea edi, [esp + 0x460]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor ecx, ecx
mov word [esp + 0x47a], cx
mov dword [esp + 0x47c], eax
mov dword [esp + 0x480], edx
mov edx, dword [0x4347bc]
mov eax, dword [0x4347c0]
mov ecx, dword [0x4347c4]
mov dword [esp + 0x488], edx
mov edx, dword [str.NVWCPFI.chm]
mov dword [esp + 0x48c], eax
mov eax, dword [0x434814]
mov dword [esp + 0x490], ecx
mov ecx, dword [0x434818]
mov esi, dword [0x4347ec]
mov edi, dword [0x4347f0]
mov dword [esp + 0x498], edx
mov edx, dword [0x43481c]
mov dword [esp + 0x49c], eax
mov eax, dword [0x434820]
mov dword [esp + 0x4a0], ecx
mov ecx, dword [0x434824]
mov dword [esp + 0x4a4], edx
mov edx, dword [0x4347e8]
mov dword [esp + 0x4a8], eax
mov eax, dword [str.NVWCPFR.chm]
mov dword [esp + 0x4ac], ecx
mov ecx, dword [0x4347e4]
mov dword [esp + 0x4bc], edx
mov dword [esp + 0x4d8], edx
mov edx, dword [str.NVWCPEL.chm]
mov dword [esp + 0x4b4], eax
mov dword [esp + 0x4b8], ecx
mov dword [esp + 0x4d0], eax
mov eax, dword [0x434534]
mov dword [esp + 0x4d4], ecx
mov ecx, dword [0x434538]
mov dword [esp + 0x4ec], edx
mov edx, dword [0x43453c]
mov dword [esp + 0x4f0], eax
mov eax, dword [0x434540]
mov dword [esp + 0x4f4], ecx
mov ecx, dword [0x434544]
mov dword [esp + 0x4f8], edx
mov edx, dword [str.NVWCPHE.chm]
mov dword [esp + 0x4fc], eax
mov eax, dword [0x434504]
mov dword [esp + 0x500], ecx
mov ecx, dword [0x434508]
mov dword [esp + 0x508], edx
mov edx, dword [0x43450c]
mov dword [esp + 0x50c], eax
mov eax, dword [0x434510]
mov dword [esp + 0x510], ecx
mov ecx, dword [0x434514]
mov dword [esp + 0x514], edx
mov edx, dword [str.NVWCPHU.chm]
mov dword [esp + 0x518], eax
mov eax, dword [0x4344d4]
mov dword [esp + 0x51c], ecx
mov ecx, dword [0x4344d8]
mov dword [esp + 0x524], edx
mov edx, dword [0x4344dc]
mov dword [esp + 0x484], ebx
mov ebx, dword [0x4347f4]
mov dword [esp + 0x528], eax
mov eax, dword [0x4344e0]
mov dword [esp + 0x52c], ecx
mov ecx, dword [0x4344e4]
mov dword [esp + 0x530], edx
mov edx, dword [str.NVWCPIT.chm]
mov dword [esp + 0x494], ebp
mov dword [esp + 0x4b0], ebp
mov dword [esp + 0x4c0], esi
mov dword [esp + 0x4c4], edi
mov dword [esp + 0x4c8], ebx
mov dword [esp + 0x4cc], ebp
mov dword [esp + 0x4dc], esi
mov dword [esp + 0x4e0], edi
mov dword [esp + 0x4e4], ebx
mov dword [esp + 0x4e8], ebp
mov dword [esp + 0x504], ebp
mov dword [esp + 0x520], ebp
mov dword [esp + 0x534], eax
mov dword [esp + 0x538], ecx
mov dword [esp + 0x53c], ebp
mov eax, dword [0x43474c]
mov ecx, dword [0x434750]
mov dword [esp + 0x540], edx
mov edx, dword [0x434754]
mov dword [esp + 0x544], eax
mov eax, dword [0x434758]
mov dword [esp + 0x548], ecx
mov ecx, dword [0x43475c]
mov dword [esp + 0x54c], edx
mov edx, dword [str.NVWCPJA.chm]
mov dword [esp + 0x550], eax
mov eax, dword [0x43471c]
mov dword [esp + 0x554], ecx
mov ecx, dword [0x434720]
mov dword [esp + 0x55c], edx
mov edx, dword [0x434724]
mov dword [esp + 0x560], eax
mov eax, dword [0x434728]
mov dword [esp + 0x564], ecx
mov ecx, dword [0x43472c]
mov dword [esp + 0x568], edx
mov edx, dword [str.NVWCPKO.chm]
mov dword [esp + 0x56c], eax
mov eax, dword [0x4346ec]
mov dword [esp + 0x570], ecx
mov ecx, dword [0x4346f0]
mov dword [esp + 0x578], edx
mov edx, dword [0x4346f4]
mov dword [esp + 0x57c], eax
mov eax, dword [0x4346f8]
mov dword [esp + 0x580], ecx
mov ecx, dword [0x4346fc]
mov dword [esp + 0x584], edx
mov edx, dword [str.NVWCPNL.chm]
mov dword [esp + 0x588], eax
mov eax, dword [0x4346bc]
mov dword [esp + 0x58c], ecx
mov ecx, dword [0x4346c0]
mov dword [esp + 0x594], edx
mov edx, dword [0x4346c4]
mov dword [esp + 0x598], eax
mov eax, dword [0x4346c8]
mov dword [esp + 0x59c], ecx
mov ecx, dword [0x4346cc]
mov dword [esp + 0x5a0], edx
mov edx, dword [str.NVWCPNO.chm]
mov dword [esp + 0x5a4], eax
mov eax, dword [0x43468c]
mov dword [esp + 0x5a8], ecx
mov ecx, dword [0x434690]
mov dword [esp + 0x5b0], edx
mov edx, dword [0x434694]
mov dword [esp + 0x5b4], eax
mov eax, dword [0x434698]
mov dword [esp + 0x5b8], ecx
mov ecx, dword [0x43469c]
mov dword [esp + 0x5bc], edx
mov edx, dword [str.NVWCPPL.chm]
mov dword [esp + 0x5c0], eax
mov eax, dword [0x4344a4]
mov dword [esp + 0x5c4], ecx
mov ecx, dword [0x4344a8]
mov dword [esp + 0x5cc], edx
mov edx, dword [0x4344ac]
mov dword [esp + 0x5d0], eax
mov eax, dword [0x4344b0]
mov dword [esp + 0x5d4], ecx
mov ecx, dword [0x4344b4]
mov dword [esp + 0x5d8], edx
mov edx, dword [str.NVWCPPT.chm]
mov dword [esp + 0x5dc], eax
mov eax, dword [0x4345cc]
mov dword [esp + 0x558], ebp
mov dword [esp + 0x574], ebp
mov dword [esp + 0x590], ebp
mov dword [esp + 0x5ac], ebp
mov dword [esp + 0x5c8], ebp
mov dword [esp + 0x5e0], ecx
mov dword [esp + 0x5e4], ebp
mov dword [esp + 0x5e8], edx
mov dword [esp + 0x5ec], eax
mov ecx, dword [0x4345d0]
mov edx, dword [0x4345d4]
mov eax, dword [0x4345d8]
mov dword [esp + 0x5f0], ecx
mov ecx, dword [0x4345dc]
mov dword [esp + 0x5fc], ecx
mov dword [esp + 0x5f4], edx
mov dword [esp + 0x5f8], eax
mov eax, dword [str.NVWCPRU.chm]
mov dword [esp + 0x600], ebp
mov ecx, 6
mov esi, str.NVWCPPTB.chm
lea edi, [esp + 0x604]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov ecx, dword [0x43465c]
xor edx, edx
mov word [esp + 0x61e], dx
mov edx, dword [0x434660]
mov dword [esp + 0x620], eax
mov eax, dword [0x434664]
mov dword [esp + 0x624], ecx
mov ecx, dword [0x434668]
mov dword [esp + 0x628], edx
mov edx, dword [0x43466c]
mov dword [esp + 0x62c], eax
mov eax, dword [str.NVWCPSK.chm]
mov dword [esp + 0x630], ecx
mov ecx, dword [0x434474]
mov dword [esp + 0x634], edx
mov edx, dword [0x434478]
mov dword [esp + 0x63c], eax
mov eax, dword [0x43447c]
mov dword [esp + 0x640], ecx
mov ecx, dword [0x434480]
mov dword [esp + 0x644], edx
mov edx, dword [0x434484]
mov dword [esp + 0x648], eax
mov eax, dword [str.NVWCPSL.chm]
mov dword [esp + 0x64c], ecx
mov ecx, dword [0x434444]
mov dword [esp + 0x650], edx
mov edx, dword [0x434448]
mov dword [esp + 0x658], eax
mov eax, dword [0x43444c]
mov dword [esp + 0x65c], ecx
mov ecx, dword [0x434450]
mov dword [esp + 0x660], edx
mov edx, dword [0x434454]
mov dword [esp + 0x664], eax
mov eax, dword [str.NVWCPSV.chm]
mov dword [esp + 0x668], ecx
mov ecx, dword [0x43462c]
mov dword [esp + 0x66c], edx
mov edx, dword [0x434630]
mov dword [esp + 0x674], eax
mov eax, dword [0x434634]
mov dword [esp + 0x678], ecx
mov ecx, dword [0x434638]
mov dword [esp + 0x67c], edx
mov edx, dword [0x43463c]
mov dword [esp + 0x680], eax
mov eax, dword [str.NVWCPTH.chm]
mov dword [esp + 0x684], ecx
mov ecx, dword [0x4345fc]
mov dword [esp + 0x688], edx
mov edx, dword [0x434600]
mov dword [esp + 0x690], eax
mov eax, dword [0x434604]
mov dword [esp + 0x694], ecx
mov ecx, dword [0x434608]
mov dword [esp + 0x698], edx
mov edx, dword [0x43460c]
mov dword [esp + 0x638], ebp
mov dword [esp + 0x654], ebp
mov dword [esp + 0x670], ebp
mov dword [esp + 0x68c], ebp
mov dword [esp + 0x69c], eax
mov dword [esp + 0x6a0], ecx
mov dword [esp + 0x6a4], edx
mov dword [esp + 0x6a8], ebp
mov ecx, dword [0x434414]
mov eax, dword [str.NVWCPTR.chm]
mov edx, dword [0x434418]
mov dword [esp + 0x6b0], ecx
mov ecx, dword [0x434420]
mov dword [esp + 0x6ac], eax
mov eax, dword [0x43441c]
mov dword [esp + 0x6b4], edx
mov edx, dword [0x434424]
mov dword [esp + 0x6bc], ecx
mov dword [esp + 0x6b8], eax
mov dword [esp + 0x6c0], edx
mov dword [esp + 0x6c4], ebp
mov ecx, 6
mov esi, str.NVWCPZHC.chm
lea edi, [esp + 0x6c8]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor eax, eax
mov word [esp + 0x6e2], ax
mov ecx, 6
mov esi, str.NVWCPZHT.chm
lea edi, [esp + 0x6e4]
rep movsd dword es:[edi], dword [esi]
lea edx, [esp + 0xf8c]
xor ecx, ecx
push 0x104
movsw word es:[edi], word [esi]
push edx
mov word [esp + 0x706], cx
call fcn.004041a0
add esp, 8
lea esi, [esp + 0x3b8]
mov edi, 0x1e
jmp 0x41d7c0
push esi
lea eax, [esp + 0xf90]
push eax
push 0x4343f0
lea ecx, [esp + 0x770]
push 0x220
push ecx
call fcn.00419b60
add esp, 0x14
push ebp
lea edx, [esp + 0x768]
push edx
call fcn.0041a3a0
add esi, 0x1c
sub edi, 1
jne 0x41d7c0
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1598]
pop ebp
xor ecx, esp
call fcn.00422272
add esp, 0x1598
ret