Function at 0x43d3c8
Capabilities:
Delete registry value
Persist via run registry key
Set registry value

Disassembly:
push 0xffffffffffffffff
push 0x5db7df
mov eax, dword fs:[0]
push eax
sub esp, 0x524
mov eax, dword [0x65f810]
xor eax, esp
mov dword [esp + 0x520], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x65f810]
xor eax, esp
push eax
lea eax, [esp + 0x538]
mov dword fs:[0], eax
push 0x206
mov ebp, ecx
xor ebx, ebx
lea ecx, [esp + 0x12a]
xor eax, eax
push ebx
push ecx
mov word [esp + 0x130], ax
call fcn.00578cb0
mov ecx, dword [0x5f1298]
mov edx, dword [str.LOGIN]
mov eax, dword [0x5f1294]
mov dword [esp + 0x38], ecx
mov ecx, 6
mov esi, str.GAMELOCATION
lea edi, [esp + 0x5c]
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x30], edx
mov edx, dword [str.DATACOLLECT]
mov dword [esp + 0xa0], edx
mov edx, dword [0x5f1268]
movsw word es:[edi], word [esi]
mov dword [esp + 0xac], edx
mov edx, dword [str.GAMESET]
mov dword [esp + 0x34], eax
mov eax, dword [0x5f1260]
mov dword [esp + 0x3c], edx
mov edx, dword [0x5f1258]
mov ecx, 6
mov esi, str.UPDATEOPTION
lea edi, [esp + 0xb8]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [0x5f1264]
mov dword [esp + 0xa8], ecx
mov ecx, dword [0x5f1270]
mov dword [esp + 0xa4], eax
mov eax, dword [0x5f126c]
mov dword [esp + 0xb4], ecx
mov ecx, dword [0x5f1254]
mov dword [esp + 0x48], edx
mov edx, dword [0x5f1224]
mov dword [esp + 0xb0], eax
mov eax, dword [0x5f1250]
mov dword [esp + 0x44], ecx
mov ecx, dword [0x5f1220]
mov dword [esp + 0x94], edx
mov edx, dword [str.GAMERUN]
mov dword [esp + 0x40], eax
mov eax, dword [str.UPDATERUN]
mov dword [esp + 0x90], ecx
mov ecx, dword [0x5f122c]
mov dword [esp + 0x4c], edx
mov edx, dword [0x5f1218]
mov dword [esp + 0x8c], eax
mov eax, dword [0x5f1228]
mov dword [esp + 0x9c], ecx
mov ecx, dword [0x5f1214]
mov dword [esp + 0x58], edx
mov edx, dword [0x5f1200]
mov dword [esp + 0x98], eax
mov eax, dword [0x5f1210]
mov dword [esp + 0x54], ecx
mov ecx, dword [0x5f11fc]
mov dword [esp + 0x80], edx
mov edx, dword [ebp + 0xe8]
add esp, 0xc
mov dword [esp + 0x44], eax
mov eax, dword [str.OTHERSET]
mov dword [esp + 0x70], ecx
mov cx, word [0x5f1208]
push edx
mov dword [esp + 0x70], eax
mov eax, dword [0x5f1204]
sub esp, 0x1c
movsw word es:[edi], word [esi]
mov word [esp + 0x9c], cx
mov ecx, esp
mov esi, 7
mov dword [esp + 0x98], eax
mov dword [esp + 0x40], esp
mov dword [ecx + 0x18], esi
push 0xb
xor eax, eax
mov dword [ecx + 0x14], ebx
push str.VerLanguage
mov word [ecx + 4], ax
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x54], esp
push esi
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.GAMEVER
mov dword [esp + 0x584], ebx
mov word [ecx + 4], dx
call fcn.00439ce0
or edi, 0xffffffff
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0x16c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 9
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.AutoLogin
mov word [ecx + 4], dx
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
mov word [ecx + 4], ax
lea eax, [esp + 0x60]
lea edx, [eax + 2]
mov dword [esp + 0x50], esp
mov dword [esp + 0x57c], 1
mov dword [esp + 0x50], edx
nop
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43cf10
sub eax, dword [esp + 0x50]
sar eax, 1
push eax
lea eax, [esp + 0x64]
push eax
call fcn.00439ce0
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov ecx, dword [ebp + 0x168]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 0xb
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.SaveAccount
mov word [ecx + 4], dx
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
mov word [ecx + 4], ax
lea eax, [esp + 0x60]
lea edx, [eax + 2]
mov dword [esp + 0x50], esp
mov dword [esp + 0x57c], 2
mov dword [esp + 0x50], edx
lea ecx, [ecx]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43cf90
sub eax, dword [esp + 0x50]
sar eax, 1
push eax
lea eax, [esp + 0x64]
push eax
call fcn.00439ce0
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
cmp dword [ebp + 0x168], 1
jne 0x43d1b7
cmp dword [ebp + 0x144], 8
jb 0x43cfd8
mov eax, dword [ebp + 0x130]
jmp 0x43cfde
lea eax, [ebp + 0x130]
lea ecx, [esp + 0x124]
push ecx
mov ecx, dword [0x66d460]
push eax
call fcn.00454440
mov ecx, eax
call fcn.004537f0
sub esp, 0x1c
mov ecx, esp
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
lea eax, [esp + 0x140]
mov word [ecx + 4], dx
lea edx, [eax + 2]
mov dword [esp + 0x34], esp
mov dword [esp + 0x30], edx
lea esp, [esp]
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43d020
sub eax, dword [esp + 0x30]
sar eax, 1
push eax
lea eax, [esp + 0x144]
push eax
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push 9
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.LoginName
mov dword [esp + 0x580], 3
mov word [ecx + 4], dx
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
mov word [ecx + 4], ax
lea eax, [esp + 0x78]
lea edx, [eax + 2]
mov dword [esp + 0x68], esp
mov byte [esp + 0x594], 4
mov dword [esp + 0x68], edx
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43d093
sub eax, dword [esp + 0x68]
sar eax, 1
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.00439ce0
mov ecx, ebp
mov dword [esp + 0x594], edi
call fcn.00439220
push 0x104
lea ecx, [esp + 0x128]
push ebx
push ecx
call fcn.00578cb0
add esp, 0xc
cmp dword [ebp + 0x160], 8
jb 0x43d0e4
mov eax, dword [ebp + 0x14c]
jmp 0x43d0ea
lea eax, [ebp + 0x14c]
mov ecx, dword [0x66d460]
lea edx, [esp + 0x124]
push edx
push eax
call fcn.00454440
mov ecx, eax
call fcn.004537f0
sub esp, 0x1c
mov ecx, esp
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
mov word [ecx + 4], ax
lea eax, [esp + 0x140]
lea edx, [eax + 2]
mov dword [esp + 0x34], esp
mov dword [esp + 0x30], edx
jmp 0x43d130
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43d130
sub eax, dword [esp + 0x30]
sar eax, 1
push eax
lea eax, [esp + 0x144]
push eax
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push 8
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.LoginPwd
mov dword [esp + 0x580], 5
mov word [ecx + 4], dx
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
mov word [ecx + 4], ax
lea eax, [esp + 0x78]
lea edx, [eax + 2]
mov dword [esp + 0x68], esp
mov byte [esp + 0x594], 6
mov dword [esp + 0x68], edx
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43d1a3
sub eax, dword [esp + 0x68]
jmp 0x43d2d4
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x5f0e20
mov word [ecx + 4], dx
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push 9
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.LoginName
mov dword [esp + 0x580], esi
mov word [ecx + 4], ax
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
lea eax, [esp + 0x78]
mov word [ecx + 4], dx
lea edx, [eax + 2]
mov dword [esp + 0x68], esp
mov byte [esp + 0x594], 8
mov dword [esp + 0x68], edx
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43d227
sub eax, dword [esp + 0x68]
sar eax, 1
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.00439ce0
mov ecx, ebp
mov dword [esp + 0x594], edi
call fcn.00439220
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push ebx
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x5f0e20
mov word [ecx + 4], dx
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push 8
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.LoginPwd
mov dword [esp + 0x580], 9
mov word [ecx + 4], ax
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
lea eax, [esp + 0x78]
mov word [ecx + 4], dx
lea edx, [eax + 2]
mov dword [esp + 0x68], esp
mov byte [esp + 0x594], 0xa
mov dword [esp + 0x68], edx
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43d2c5
sub eax, dword [esp + 0x68]
sar eax, 1
push eax
lea eax, [esp + 0x7c]
push eax
call fcn.00439ce0
mov ecx, ebp
mov dword [esp + 0x594], edi
call fcn.00439220
mov ecx, dword [ebp + 0x1c]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push 8
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push 0x5f1168
mov word [ecx + 4], dx
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
mov word [ecx + 4], ax
lea eax, [esp + 0x8c]
lea edx, [eax + 2]
mov dword [esp + 0x50], esp
mov dword [esp + 0x57c], 0xb
mov dword [esp + 0x50], edx
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43d342
sub eax, dword [esp + 0x50]
sar eax, 1
push eax
lea eax, [esp + 0x90]
push eax
call fcn.00439ce0
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0x34]
dec eax
mov dword [esp + 0x14], eax
cmp eax, dword [ebp + 0x34]
jbe 0x43d385
call fcn.00579468
mov eax, dword [esp + 0x14]
cmp dword [ebp + 0x38], 8
jb 0x43d390
mov ecx, dword [ebp + 0x24]
jmp 0x43d393
lea ecx, [ebp + 0x24]
cmp word [ecx + eax*2], 0x5c
je 0x43d3d4
mov eax, dword [ebp + 0x34]
dec eax
mov dword [esp + 0x14], eax
cmp eax, dword [ebp + 0x34]
jbe 0x43d3b0
call fcn.00579468
mov eax, dword [esp + 0x14]
cmp dword [ebp + 0x38], 8
lea ecx, [ebp + 0x20]
jb 0x43d3be
mov edx, dword [ecx + 4]
jmp 0x43d3c1
lea edx, [ecx + 4]
cmp word [edx + eax*2], 0x2f
je 0x43d3d4
push 1
push 0x5f1164
call fcn.00439740
push edi
lea eax, [ebp + 0x20]
push ebx
push eax
lea ecx, [ebp + 0x3c]
cmp dword [ebp + 0xe8], ebx
je 0x43d3e8
lea ecx, [ebp + 0x58]
call fcn.00439be0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push edi
push ebx
lea eax, [ebp + 0x20]
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push eax
mov word [ecx + 4], dx
call fcn.00439be0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push esi
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.wowPath
mov dword [esp + 0x580], 0xc
mov word [ecx + 4], ax
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
lea eax, [esp + 0xa4]
mov word [ecx + 4], dx
lea edx, [eax + 2]
mov dword [esp + 0x68], esp
mov byte [esp + 0x594], 0xd
mov dword [esp + 0x68], edx
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43d463
sub eax, dword [esp + 0x68]
sar eax, 1
push eax
lea eax, [esp + 0xa8]
push eax
call fcn.00439ce0
mov ecx, ebp
mov dword [esp + 0x594], edi
call fcn.00439220
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push edi
lea eax, [ebp + 0x3c]
push ebx
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push eax
mov word [ecx + 4], dx
call fcn.00439be0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push 9
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.wowPathCN
mov dword [esp + 0x580], 0xe
mov word [ecx + 4], ax
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
lea eax, [esp + 0xa4]
mov word [ecx + 4], dx
lea edx, [eax + 2]
mov dword [esp + 0x68], esp
mov byte [esp + 0x594], 0xf
mov dword [esp + 0x68], edx
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43d507
sub eax, dword [esp + 0x68]
sar eax, 1
push eax
lea eax, [esp + 0xa8]
push eax
call fcn.00439ce0
mov ecx, ebp
mov dword [esp + 0x594], edi
call fcn.00439220
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push edi
lea eax, [ebp + 0x58]
push ebx
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push eax
mov word [ecx + 4], dx
call fcn.00439be0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push 9
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.wowPathTW
mov dword [esp + 0x580], 0x10
mov word [ecx + 4], ax
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
lea eax, [esp + 0xa4]
mov word [ecx + 4], dx
lea edx, [eax + 2]
mov dword [esp + 0x68], esp
mov byte [esp + 0x594], 0x11
mov dword [esp + 0x68], edx
jmp 0x43d5b0
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43d5b0
sub eax, dword [esp + 0x68]
sar eax, 1
push eax
lea eax, [esp + 0xa8]
push eax
call fcn.00439ce0
mov ecx, ebp
mov dword [esp + 0x594], edi
call fcn.00439220
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push edi
lea eax, [ebp + 0x74]
push ebx
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push eax
mov word [ecx + 4], dx
call fcn.00439be0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push 8
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.PlugPath
mov dword [esp + 0x580], 0x12
mov word [ecx + 4], ax
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
lea eax, [esp + 0xa4]
mov word [ecx + 4], dx
lea edx, [eax + 2]
mov dword [esp + 0x68], esp
mov byte [esp + 0x594], 0x13
mov dword [esp + 0x68], edx
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43d654
sub eax, dword [esp + 0x68]
sar eax, 1
push eax
lea eax, [esp + 0xa8]
push eax
call fcn.00439ce0
mov ecx, ebp
mov dword [esp + 0x594], edi
call fcn.00439220
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push edi
lea eax, [ebp + 0x90]
push ebx
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push eax
mov word [ecx + 4], dx
call fcn.00439be0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push 6
xor eax, eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push str.DKPURL
mov dword [esp + 0x580], 0x14
mov word [ecx + 4], ax
call fcn.00439ce0
sub esp, 0x1c
mov ecx, esp
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
lea eax, [esp + 0xa4]
mov word [ecx + 4], dx
lea edx, [eax + 2]
mov dword [esp + 0x68], esp
mov byte [esp + 0x594], 0x15
mov dword [esp + 0x68], edx
jmp 0x43d700
mov dx, word [eax]
add eax, 2
cmp dx, bx
jne 0x43d700
sub eax, dword [esp + 0x68]
sar eax, 1
push eax
lea eax, [esp + 0xa8]
push eax
call fcn.00439ce0
mov ecx, ebp
mov dword [esp + 0x594], edi
call fcn.00439220
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x34], esp
push edi
lea eax, [ebp + 0xac]
push ebx
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push eax
mov word [ecx + 4], dx
call fcn.00439be0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
push str.DKPID
mov dword [esp + 0x57c], 0x16
call fcn.0043c210
sub esp, 0x1c
lea eax, [esp + 0xa4]
mov ecx, esp
mov dword [esp + 0x70], esp
push eax
mov byte [esp + 0x598], 0x17
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x594], edi
call fcn.00439220
mov ecx, dword [ebp + 0xec]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.option2
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0xe8]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x18
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0xf0]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.updateOnce
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0xe8]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x19
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0xf4]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.updateUnit
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0xe8]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x1a
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0x170]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.acceptproc
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0xe8]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x1b
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0xf8]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.option2
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0xbc]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x1c
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
push 0x104
lea eax, [esp + 0x128]
push ebx
push eax
call fcn.00578cb0
add esp, 0xc
cmp dword [ebp + 0xe0], 8
jb 0x43d92e
mov eax, dword [ebp + 0xcc]
jmp 0x43d934
lea eax, [ebp + 0xcc]
lea ecx, [esp + 0x124]
push ecx
mov ecx, dword [0x66d460]
push eax
call fcn.00454440
mov ecx, eax
call fcn.004537f0
sub esp, 0x1c
lea edx, [esp + 0x140]
mov ecx, esp
mov dword [esp + 0x38], esp
push edx
call fcn.0043c210
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push str.AutoAccount
mov dword [esp + 0x57c], 0x1d
call fcn.0043c210
sub esp, 0x1c
lea eax, [esp + 0x84]
mov ecx, esp
mov dword [esp + 0x74], esp
push eax
mov byte [esp + 0x598], 0x1e
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x594], edi
call fcn.00439220
mov ecx, dword [ebp + 0xe4]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.EnAutoAccount
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x1f
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0x128]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.unkownAddOn
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0xa8]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x20
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0xfc]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.option
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0xd0]
mov ecx, esp
mov dword [esp + 0x54], esp
mov dword [esp + 0x57c], 0x21
push edx
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0x100]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.imagetype
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x22
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0x104]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.TrackQuality
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x23
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0x108]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.isUserName
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0x6c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x24
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x38], esp
push edi
lea eax, [ebp + 0x10c]
push ebx
xor edx, edx
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x14], ebx
push eax
mov word [ecx + 4], dx
call fcn.00439be0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x50], esp
push str.UserName
mov dword [esp + 0x57c], 0x25
call fcn.0043c210
sub esp, 0x1c
mov byte [esp + 0x594], 0x26
mov ecx, esp
lea eax, [esp + 0x84]
mov dword [esp + 0x74], esp
push eax
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x594], edi
call fcn.00439220
mov ecx, dword [ebp + 0x178]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.MoheTip
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0x7c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x27
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0x180]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.CrackRun2
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0x7c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x28
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0x174]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.ModelEdit
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0x7c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x29
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0x184]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.PipRun
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0x7c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x2a
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0x188]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.64BitClinet
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0x7c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x2b
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
mov eax, dword [ebp + 0x18c]
push eax
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x3c], esp
push str.RunWow
call fcn.0043c210
sub esp, 0x1c
lea edx, [esp + 0x7c]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
mov dword [esp + 0x580], 0x2c
call fcn.0043c210
mov ecx, ebp
mov dword [esp + 0x57c], edi
call fcn.004392e0
cmp dword [ebp + 0xf8], 1
mov ecx, 0x17
mov esi, str.SoftwareMicrosoftWindowsCurrentVersionRun
lea edi, [esp + 0xc8]
rep movsd dword es:[edi], dword [esi]
jne 0x43de08
push 0x206
lea ecx, [esp + 0x332]
xor eax, eax
push ebx
push ecx
mov word [esp + 0x338], ax
call fcn.00578cb0
lea edx, [esp + 0x338]
push edx
call fcn.0045b850
add esp, 0x10
lea eax, [esp + 0x20]
push eax
push 0x20006
push ebx
lea ecx, [esp + 0xd4]
push ecx
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea edx, [esp + 0x32c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
mov ecx, dword [esp + 0x20]
add eax, eax
push eax
lea eax, [esp + 0x330]
push eax
push 1
push ebx
push 0x5f0f14
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, dword [esp + 0x20]
push edx
jmp 0x43de3b
lea eax, [esp + 0x14]
push eax
push 0x20006
push ebx
lea ecx, [esp + 0xd4]
push ecx
push SysReAllocStringLen
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edx, dword [esp + 0x14]
push 0x5f0f14
push edx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov eax, dword [esp + 0x14]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, 1
mov ecx, dword [esp + 0x538]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x520]
xor ecx, esp
call fcn.005792fc
add esp, 0x530
ret