Function at 0x50a490
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7a2f99
mov eax, dword fs:[0]
push eax
mov eax, 0x3048
call fcn.006e70d0
mov eax, dword [0x8ca144]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x69
mov eax, dword [ebp + 8]
mov esi, str.8HUWISmtHtSinFrnc0cUUSmXL6hZOrfHQiZ1OaU9AhG0in5rVVR6HN7XcKTR5iVtwnEqDd1wBp2z71Yy1mF5C0LjkS1a7lJLF6g8rtYkQp6zKpXlJhk9ChdBKbLMWqRvkvuwJCR9XaoudbVAdov7fo82jleLJhmECECz8uB473HeuRdrLRhx8rHyIsVqFInsBh5suGJDunyFCaZREsGHiZ6k0jB9duCYIWW6cXagt0myhsy3LMPoGqeNRG2qoWs6s4SP95q7prAUlPAPaF96FwOY87vP0bUUCbbYWS2OYmDyJk0tmHL9RswGg61E3F92l1s8mbra5K40v96H8pnBlwZM1pEaYTkiJbiCrs9dV9PDH62ixjUhzUzO27wBbT751t9sYZOTUTmqL546bhh9kewoA6nGTJ7fQptPQz
mov ebx, dword [ebp + 0xc]
lea edi, [ebp - 0x1518]
mov dword [ebp - 0x3038], eax
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7b
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.rtkEvfqr21F3JASYJS2MRwaxeefC1WmWxCiDpX8OHuVNZxHah7WWbmK7uCAeBYxPov4yaaJgLzjTTATF6XA9FqZ4GdoffrBVTcQukn1EwKAaoMaaKF4imxk9Y49mTQyyJ1KG0oxGCvXVa5phdwAS6COF0zmvPTD4kCs4Mm5yNUekFvW3eoUatI9nHtg83wJhk4nCKavGVseOAX7dsuXq3D8FEYfA4BFAJmB2sdhoZJ5QbHUcet69gOishONReOJIJkOnkePhdG9NkMXb6aUcaI1naVqvrjhuJFxXx1PwvS8HogP2BIdGYSMMh8hl7PaZV40mTVCUgsvNA76wdbabFaSgBkBIr2Qqni7kULjpGxr0MUOsGAH2O7wqPPgYfKlDCPwyTRH1j9LQZYUNTYMO1YzPdWWwrsglOwp0GazalUMyzQzy074F33siRd6PwzPLvawynybecvk0X14lP6HxwSmnSczQWozHxYUUcn3PlYq
lea edi, [ebp - 0x2798]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7c
lea edi, [ebp - 0x2b7c]
mov esi, str.zIcCfzTCTyEVEV4ByQPkEaguBvQzejBkLFA6mAgHKps5N6Ih3wDlTPt9hDbn1L7zi4RMejGpgfLtfQRrmxuQYer9zcH5BDRWoP7VVb8smHlWt5lrfnY0rLb4O7cXqhEyjp8GrLqfPuGRrycwCt0NR4JkKK8p6oR07cfSqMMxhpN0jLQJXEOjCcczgqKGjlXw8Vc7hkB7zniw24lRMAEAuRAY0AAhnLgvub5KCMrFGU7bEb0nxsa0t7TAgRSaR0bWUAzUybEQDt0DhbHrxH81ydt14bjURr34zhtNNsLltl4mfT3o7J2Ozs6xLZ7CHBo14pBr8I3zh0946dSDJPDIHZHUpKu3ScnAL3uazxue8VbamcNdIc433diean8wkRRapqSKlAnPX6zCwyZ0BZ24DsVVVtPnjBoccckjo4tlOHgsx0yLePNcnfWOsgujVnokSPozXTKckMUpGk5fywUUCpGJ9R3dOqM368qLmulYH5OyD07Ax
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x75
movsw word es:[edi], word [esi]
mov esi, str.98THpqcjSO7sWG2JAmNIXFzzlIHvJT0PTNQWVIBAXqzYzwS1WauSJZvtlokHHdOCeQzotXHTjo7bRQmaVhuNhEhQdlPxDt2jnskrPNQj8vBihQcu355lpD9I4ma6oUcF7kpe9wOV4nclUf5oqYAtHsYpxTNfDrHDxCUNlQawwwsxYzNN1WZuZEsizOwprsKoZIty9oeksMxPHHGsmoFR3Q5skkfsQf2M5X9qbm2EilMxCVJgxEjUOK5p8ERv1r5qBnqEgO0t8f9TTXMWi8O4K9g8f50HKkdH3JRsntuyuDk36zPWkxzz9oikgeoEhUKBp7qbPnVXRvJ38S5sZTnGzF0Bs65JFqqjknBoAwpUHGMrrQZoyWBNx54OjHgdAdif3MICy4KyqrmM35nJOp0WGUA6hIlX21CRFxNT8vP7nk5OeBERmN46DuD8ds2SWx0bsFyoi2YGgYFkCAn5uS8
lea edi, [ebp - 0x1c30]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x60
lea edi, [ebp - 0xdc0]
mov esi, str.i3J7y3i2CYHO7rYiX3Vjvspy87wqKjCmmyAHbS0o0PpZeQAK3U0XEQ1TQuusKtIbBuOlt2GhgUil8YUjiUlQJN5huBYuZr5g9MmM9azyocsnt1OxQ1xNoa7YdJJbXvBv1vMnYuqDWW3zj3Et6D4p8aBkpf30k8ORDqonLN9wtqJ0qtOuMAkDseiKQIgmqxITvhHalzCMHP7vsxUMzEdmdsiT8pShRwOg3BpEAq7UIEY8e0PSQOksDFyMdNFWqumdVLGAxQYq5GbbmTBrrubKZqueQcLeF6qI8XWmOQGOYkOwgc0jdgOHSMRjfWLV2tzE1oyHHFXehWUFGKSNSBgpGgUiWDX6YuYQ5pv7H8rYghp0f28DHPh1aYhiVcdYtFP466
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x3a
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.gaTOVGWkiFVONuEdm5io6NDqJLdL5HzX7sbHTLtnj2pu51GYHHyKqmfsz8Zna2ThDmDSIj7ifQhPfkPE9kZ7TelR5zhtz3yspJiNL7mhLxuHhfomS5q24oNjOeS6c5wWInfV08mqhCu8Li9Uhkpf9MYzysx9Cw65SLEEX4xiyyHA3Ak2H9xpmUdBKwttZShtucmqASgtgZc3Wk2HQ56XHOJgR9vgiVdBxEeLFTG3X
lea edi, [ebp - 0x5d8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6f
movsw word es:[edi], word [esi]
mov esi, str.9QETdLVq9Gq2HvpyfG11zBAvwP07sQ4Ikbz1VONkRyHTlyXuePWLjb1h1SeC9tWhzzyFWKdhtw93OO9K3FHPCibU4VYIao6Vu4bJAbE9hGiIX4M9w4KycAdn2t6DFPtL1BRGWgOvEIUZ45F68LtizpLmqljQs93v8tQMGPCNf4o0koJjagrKWj1L4H6J4EBbLOMhoirD0fEyaBiol1oP7sdqF4MqReqj5WIhNMbyCafohmyQzhog6g8bOUyZt30iJ4IqjppEyCn5yN5dBUIufkfFpkeo1nOKECkVUyKg5Nit5wrPy6IBN60IxsAcKxBZXi60CsPT2Mjme6Kct5u8UGwqXwzC4b2UgTstHSFKnUPaqyaCxsKU4jEwg8t9gNCmYje8QmS9NI7YDKME05GDTvle2kT3dIhxUAxUbsWkBRoAoZyKVw1kvILAkPRTSv
lea edi, [ebp - 0x1894]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x67
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.5zcevSEv1QE8oFDLOr5jk4kduFRwHrSskDBNyE10un7ggU1dF5z2SKI8LDeQKHT7lwdfFNtrsSonSIoWVvklqJUcPKUz0jOSd1pTXhCLBG03Z2vasIvSMOoqIJ09OR0Gs94eduq9VgFNXnzkkbC7kfbOGOAWhzeQgoxWHYTvditgMuREpXBKIXweryYikb4tzgmgrGQk81zRB4M0ee57cZvcMjp1Zj8Ve781jeJbl88vWtcQd3PxdbmQygqkznD7oZoSoKwut9kO7fSck7sexkr6JEce3PbkG8ap77kXd3IPwoQu2UAGQbBIWt2yCcEbvoB7y7nZTb4d5Vu3dBPElqyuZdp0tbVKpHG1cmR6KY7L9EvsXBrS62JVrynitCIaGQqdbqCwbNTSECyNw32KRHnFTtnW
lea edi, [ebp - 0x1370]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x71
movsb byte es:[edi], byte [esi]
mov esi, str.gj2JjafkFAapgWzYY25EMa8mVz1dVVQujSm7yc9c6wCgiiBOO8TIpu8PYmClW7xI9f9e7fCTp84lQ7koTvMQEqyZCjM1OKiOgDMMDbRjWSmSx0da2cgaPqbIX5EX1CNC3eIjwxgQOZQkbtOKStAyV7Iktpptf98kZGcg9PCSZ5ZvP0wcGKVtutNIEyVekQelBlf29foMjsZHazOCOo86QMaUBvZs6fXbu65TLdbSMaGoafWyZVzGnel2IqWh0FL0RjgBLydUWf5EDnlSwD1dHCXKUZlqRFdVa2979MNczeMCP6SSxaMqpuyQ8st3tedLtYoR8sKPMntEuAIjlRS7bk390d8E3kdkPtlhYnVROckCOG76xYZO7fuHBM7bKRXszrYNCAZaPkFJ0umo33qY6YTezYfKx9TL2GPYIHQnDJt38O8v6KSRkt4ypql4lQ9Q72la
lea edi, [ebp - 0x1a5c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7a
movsb byte es:[edi], byte [esi]
mov esi, str.oC2UXkTRTHz2yVtbXYWhYC8cQY6fJQlHfGTAECiElq8VX0JLNqh0CzdUkrXlI1uU4a8TSY3DKQuNWNWEr1eY5xj9JqZNARBuShRGQoMyCANw8mq7Law5RaFeeOlWe4ekJ7zVuKlrfrrJGj6c3hP1GDlFXgXx8ryITGKsYIuDKBjo8cxUHrT8zLfhrldgXrmDmbC0R2LoPjWxiRbx0LASKOk1mh5AmiH8ldbpNQlX6QKFXp1SsQQVgoAlnyCUr7dSI3r1EHev2NwrWnOJ1eswkqJWqu8gTNsiTgncWIE3JIH49tHkxz6tN1zXxVvyLyQe5ztABbMJJukvHMNr2F6Xo2StAtxshgiJkECek7qIoCMYD9zBV5NBR4Dxx22s5WoYYHizhVehZwH0y9bdjJ5JCDKPxnlEuc0yrkXQzikRm6iMcud6dgAwtMzC8FSoaBs1vKyd49AdP8lX1TUdrTN9RQRxckmtVb9JT3aHrMhJ8c
lea edi, [ebp - 0x23c0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7c
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.uF3h6KhFUtEyaFbfgcHpDvMbmV0Hp1w8hKNyWESsGdSqgS3ild2q6x8wwCIEepDsPqIRo1vZt17wid9I3VvPE8fdhSqjsapJ1pU8ws9fDUk8PkEClHJsPqwWMIPd3GRlJP0zbbuWae1zEOG0aaCvFRwOZOmGga03cEhKMeXVM3QmF4Q8dGB8GPDrwsuw4OGpFXFjASVxjNLzLbjwUD15Cm01W7cTh6YtXSJ1MovBpxfIxoHcqnuszRM7y10sOuyMtdShM0e5or75RsrqQerqPGW8VKrskeRs1DikfiC27ZLhqrkBTyQWn5Z3uW6mudthicEvI6ElijzsJmDFsg9HldqDMx5jC36yxKsD5x3FW1Pp93cCbNQN8RDbeaLH3kXoOxmcDaZTAIyGBosPurehl4uhgbfxQv7d0X0r5LRkSeWPTIO0o8Y3mR5Mg42F9gi44R414Qouy8HqaloTFsRugjdMyuKopjRJ4gumbAZTeU9i57A
lea edi, [ebp - 0x2988]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6e
lea edi, [ebp - 0x16d4]
mov esi, str.J3MYO4GN9Bcex2vLRhdF8RHoFqYjE17MwN1wjX9SG7dpQT98NIgLWrAN9sVhYhLxGzv1zhBnMG05t7Fzi4tx4MHKY2u4aasNEvRiPn6gxIAwGWKZi9TEaORHk1PYkbJN239FPxTSziv9kxvhvRr4HKMsPl4uJ72RvdpsJuTfD4WoaamTX1IrADZYPonAp8BKejrX1vwRSOwPPGXp5ZgtaQXHSw45KQSVjWXaEAv4GbfIWsojsrsv83HJe0jVU9ZD5my7xuA0ybwMRXF6qlV3uFkxnok515k7rz4TACDAbecvs4iQSheOF4Q9YC2K6JuwxQw3IUO00GEJidWIB6StSzIVywf1TjaM88p6i4dCeHdVnTnfOzDMQzbhZees2RmfF6GmPZUqGIR1wXz8p02zBGNr3F8xE1Zcy0ZozD65gPR75fIHjgKmaOpKX5
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x79
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.ONrKLF5o64aCbO4qywCRzPZxJ8JwUetSBLeszyDUx5XK65UK32p6FzIkYPnRb5Hg6AqlZOMu1RWF99104G1ku7qWrWnXa8PFSzUUrhkWUk9wxIdZuFqpSKF0bCAQFMp0rAzM86Ab2N4a1i6cVK32nSKERmttOM1E5zKEse0wpSj3kRiS6ZFKJiq3NhvtyZYY5W0NxQ88WcxIxOg1tTb4Z2zuTVtuvKixdLEByDPBh68kitaSiXwfthbFyltXSpxytQx3FKDSAEU2I04AVrFXXY4MLQtdeJx5h0leJvIcBBMg78D9iA6hfG9KT0wnnTN6Wm0YWVsdBsGp7bTsFMjmdgm9Gtzup4f1kHMoCLlaI4XzTlzOLv9A4U8FCZDM1yPyBNKdJaiYK5KvDoO0hTEgK9hdjm96hKyADfQCZAL4dUMKTEn5akASpwVWYsFrZQfqwGuYIOKl1InvouErO83UC5kpNaHx8GYm9UB
lea edi, [ebp - 0x21d4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5f
lea edi, [ebp - 0xc3c]
mov esi, str.VBCDX9NN2gtfKBXwP76Hq4BheMAkK8ngspoJRXELpC0MLj1Vi5O6bi9K9vsj3xGcxzgOkbGtrnoiPLfzTPUTufdXs4wJH8Oh0YaSoHmkONhYNn9MuoU7INmZGvZiqttCRZ8oyPajFWfLeeYEKglvHzQY7NgfsvRIT9Dh9SE5qoSm2hMdvZFePMYVOJO5wdhu3yze4pbcrF2UjwP1XngiyJ0bCSTlpOp8uhBETdNTgeUpUU7MvC6cbOn2vhjEvyfbzUu1UPcX8besPi87FC41NDS7gWu8YWwA22S2dNz7PSMsCMNOLSw3bguHIaMza2gTeU1KWEvcti5JiBICDXgPPAvRSUVjKq14nexzCJIgXyJY9qPbtdMuanZsG3YMH
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7a
movsw word es:[edi], word [esi]
mov esi, str.SWN47aVlyhatGC3C9tCrarQhzqle8vRp3ByQPXLLgmtSAosAKjga7aBVWGEx0yimNTo5N8H1EFJMpHqzwWHBDCg4ZVM56fFQlV5g1rKO9fZw4Zg1Rxs6WsXastqDZZI6OZQeLnEFj6Xkl5QoZF1a7K62TjbbhXL8E5P0SLve4Eaq4kIobCGoWmrdAPbKyPGxyFoU0mBzG6OPoceND179b5mu8JQ1Bz5kT9FNd3XEKxdxbgZedpEOv3eNtNlSgNJbkpOE952MiiIqTF7QsMGvxzVtpwmOLE2xDQU7ZcKl6GrwEEwXg73f39HpQyfWv8zHQrfV92FBt1mrkMdVjXHjE9v5vNgpMegYXI3JZUqCYAEguPmoT9pLfhjIcHROK5kNoEXo2kXwlQZfQzFqg6W8SETJNRPvyPsKdmxfEuWD8WsuI8eptQ3PnYZ7uU6nZlA8ZjBK7EvLdliS1dFCx0jdw03Htn6tmkZKYypWJqbPBB
lea edi, [ebp - 0x25ac]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x40
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.yv4bhXPy3RDeLdgk03Ir6BpKak5KgF5ob66ITREJbDAgsaA2Br0CFAgudmJEkYS68wiaVqQ6Lg8pBRkC4tuIgbxr7wDCoFY045SQ1of3Ta3e6oHsaTkbQi3Yj7d7lqu0WkhEGNZywL6FCuAUwYKmXRK66UYHaE5RoVO0D4Pz6y4ecYxFWCMVwtjnAVC85XFbwOZAe9Pfk3nDPb7bTEQBOIZrx3V8bqX07KcgSMP3IZz82xNkAYOGSSQaZh1c9hED
mov dword [ebp - 0x3024], 0
lea edi, [ebp - 0x6dc]
mov dword [ebp - 0x3020], 0
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x78
mov dword [ebp - 0x301c], 0
movsb byte es:[edi], byte [esi]
mov esi, str.ka2YDOGBhIARcjpPNEpDfnPa9T7UER7Ib5FT2ltHGcTPwkk7wPyn6NlAKKj7RvqcYlSAuQJWEOVbdTtJAPNyPp605PqI650BzBcB3WxGXJytHfmQN9TFaIIeMZvxmTbavltTBuOD5MfcDJWXtkHgzcegHmmX7HkNayuxXZgXqRpTLPnAcOToBMgNTLdzpDmUW3Wc7nAvhYjVV6VeekT7XTePcDWjxmv6PF7pDpxMJ0JPi1489pnpOdAHYswMjSjyo2aGJifay1Q3mUuFkdguaZ3xqDr5pWhn824VrcvIP16WdHw6b5GDyA9lirynJFJ2Y1pvWe0bO5vxjY2xsitWanYCyFrDDbpelwlCSJzSKIowfVCVwTExlB4v8OB0ijzStPVI369VVn9orWxNv1yhSSpnUUDr8MWaV6hze8218hoiDiTVBmYaWIK95YX6744GWLtyXX7yB5NBLDU8sJVWZkNnrjFCl6Vfm
lea edi, [ebp - 0x2d60]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x51
movsw word es:[edi], word [esi]
mov esi, str.65CUamuBG6jLXB3lRLLslscbFW7Geb0ozfKg4flZMLw1ZmOfONxZSpI5QhFmrKZxJC8CVaCrBVa1wGRESClhXgqeM6TwuYw3354wtwWSD32ZPg5zJ3KelS6BJ1uwTlY1w8BdE21OVU6lxrC5xr53tu4RCTEzQSd3D4z62q0Y7sDRsKc87KfkPHba3XNfKNWFKSb9M9LJHqAqprN7jB839kBRONbuBMY1TcXQKEnZRXuwLJP3dNWMJp4htSKLHIkFzVyNEMVvZbH53r6mEvp7tjwtbVtLZ3I8S3E61eMY2fBITANmGYjQy3v5mlwDW3bqZm3tjY
lea edi, [ebp - 0x824]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x78
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.5c2eZgtwA90Bu2Q3cuClWwWij3EarcMxVby4ARAVlil5WiedHCHxY7AdOtES44ZjMsDdV90BcubPwBE28YJ0mjflzZ9SdTvQWPFK6Hzzilb1LoxvlisERr2bmZg4XajSOYdDA0OI93LdKffgGG4bS4wKvJgHEBbuETrSfYhZe2kYW60YlQDV7mjjWnCc3unYyEIkLbkqqvV6s7Wdq6ExjlQC50aKxmKGnKORlmR1EZ8AUTPuMlqlvEezlm6xkPIRk7773ZvSUoG4A6tTyEn5XZmcFZN675BtBZbot8TadK2GMcpEn4WCXcJI92l2XivOrN63LLzZKsRelu7DLt00RkxLwSF45aiMZXJ2jUPnhg4uLHZkNEz9ObjYPEnZCogv8fohIgggCwD5H3CEn7A91Us2bj5ok8WaDyDjEBoUXMFnuzAPw7TA60oC7OOl2K3vGhFTVVEJHwHESAjvxegQm2E0hTBUrYHW
lea edi, [ebp - 0x1ff0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x32
movsb byte es:[edi], byte [esi]
mov esi, str.U8yoTP21HTg4oezzXmuksv1QBPUwHjWzwOe3DkdvxIuZTz3Eh0fpuGCDNXTvvUtexHLE9NkSIXKM3fYSf20P2W74gZZFaBhl6RwhB9klLfmm8Q7ydZypYPbOGmELZmqQNRZiDDPbKbdXl4nx9qB6DiluUJc70IpW8XmiEHdubRXe8gcTy7H1pMiNM5q7lWGf58l3USovA
lea edi, [ebp - 0x4ec]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x1518]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x2e08]
call fcn.00405a50
lea eax, [ebp - 0x2e08]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2e08]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x2798]
push eax
lea ecx, [ebp - 0x2e20]
call fcn.00405a50
lea eax, [ebp - 0x2e20]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2e20]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x2b7c]
push eax
lea ecx, [ebp - 0x2e38]
call fcn.00405a50
lea eax, [ebp - 0x2e38]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2e38]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x1c30]
push eax
lea ecx, [ebp - 0x2e50]
call fcn.00405a50
lea eax, [ebp - 0x2e50]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2e50]
call fcn.00405ba0
lea eax, [ebp - 0xdc0]
push eax
lea ecx, [ebp - 0x2e68]
call fcn.00405a50
lea eax, [ebp - 0x2e68]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2e68]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x5d8]
push eax
lea ecx, [ebp - 0x2e80]
call fcn.00405a50
lea eax, [ebp - 0x2e80]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2e80]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x1894]
push eax
lea ecx, [ebp - 0x2e98]
call fcn.00405a50
lea eax, [ebp - 0x2e98]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2e98]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x1370]
push eax
lea ecx, [ebp - 0x2df0]
call fcn.00405a50
lea eax, [ebp - 0x2df0]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2df0]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x1a5c]
push eax
lea ecx, [ebp - 0x2eb0]
call fcn.00405a50
lea eax, [ebp - 0x2eb0]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2eb0]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x23c0]
push eax
lea ecx, [ebp - 0x2ec8]
call fcn.00405a50
lea eax, [ebp - 0x2ec8]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2ec8]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x2988]
push eax
lea ecx, [ebp - 0x2ee0]
call fcn.00405a50
lea eax, [ebp - 0x2ee0]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2ee0]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x16d4]
push eax
lea ecx, [ebp - 0x2ef8]
call fcn.00405a50
lea eax, [ebp - 0x2ef8]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2ef8]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x21d4]
push eax
lea ecx, [ebp - 0x2f10]
call fcn.00405a50
lea eax, [ebp - 0x2f10]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2f10]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0xc3c]
push eax
lea ecx, [ebp - 0x2f28]
call fcn.00405a50
lea eax, [ebp - 0x2f28]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2f28]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x25ac]
push eax
lea ecx, [ebp - 0x2f40]
call fcn.00405a50
lea eax, [ebp - 0x2f40]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2f40]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x6dc]
push eax
lea ecx, [ebp - 0x2f58]
call fcn.00405a50
lea eax, [ebp - 0x2f58]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2f58]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x2d60]
push eax
lea ecx, [ebp - 0x2dd8]
call fcn.00405a50
lea eax, [ebp - 0x2dd8]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2dd8]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x824]
push eax
lea ecx, [ebp - 0x2f70]
call fcn.00405a50
lea eax, [ebp - 0x2f70]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2f70]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x1ff0]
push eax
lea ecx, [ebp - 0x2f88]
call fcn.00405a50
lea eax, [ebp - 0x2f88]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2f88]
mov byte [ebp - 4], 0
call fcn.00405ba0
lea eax, [ebp - 0x4ec]
push eax
lea ecx, [ebp - 0x2d78]
call fcn.00405a50
lea eax, [ebp - 0x2d78]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x3024]
call fcn.004082f0
lea ecx, [ebp - 0x2d78]
mov byte [ebp - 4], 0
call fcn.00405ba0
cmp dword [ebp - 0x3038], 0
je 0x50b01c
mov dword [ebp - 0x3030], 0
mov dword [ebp - 0x302c], 0
mov dword [ebp - 0x3028], 0
call fcn.00402330
lea eax, [ebp - 0x2fa0]
push 0xf3
push eax
call fcn.00407b10
mov ecx, eax
call fcn.00513180
cmp dword [eax + 0x14], 8
jb 0x50ab1a
mov eax, dword [eax]
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [ebp - 0x3030]
push ecx
push 0xf003f
push 0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call edi
lea ecx, [ebp - 0x2fa0]
mov esi, eax
call fcn.00402680
test esi, esi
jne 0x50b01c
call fcn.006ef3b9
lea eax, [ebp - 0x2fb8]
push 0xf4
push eax
call fcn.00407b10
mov ecx, eax
call fcn.00513180
cmp dword [eax + 0x14], 8
jb 0x50ab70
mov eax, dword [eax]
lea ecx, [ebp - 0x302c]
push ecx
push 0xf003f
push 0
push eax
push dword [ebp - 0x3030]
call edi
lea ecx, [ebp - 0x2fb8]
mov esi, eax
call fcn.00402680
test esi, esi
je 0x50abf0
lea eax, [ebp - 0x2fd0]
push 0xf4
push eax
call fcn.00407b10
mov ecx, eax
call fcn.00513180
cmp dword [eax + 0x14], 8
jb 0x50abb8
mov eax, dword [eax]
push 0
lea ecx, [ebp - 0x302c]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push eax
push dword [ebp - 0x3030]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea ecx, [ebp - 0x2fd0]
mov esi, eax
call fcn.00402680
test esi, esi
jne 0x50b01c
mov dword [ebp - 0x3054], 0
mov dword [ebp - 0x3050], 0
mov dword [ebp - 0x304c], 0
mov ecx, 0x51
mov byte [ebp - 4], 0x15
mov esi, str.40k9KMA8ujiw6XUFqlyzaLoF7iATHjT0tSIybfup4h3QnMbehXC6qZosfvlsP6wjqk7agXUgswtLGoMCtVynE4I1padoFtJbGSDi9L8LarHwZyY9lHGXzeqkCF2u5EIdOo3rqbjnbO6rtlERTx939OSvBbfiQeihb9tA0OloOnn8lf1yiwcjS2LNqeIGC5Q1GByNJ6EsEerL63yyRNLxOw5MUnTOZBJr9E0bSijXzvfutDFxpwS8eLHwaWZbh4Hr94d4nGnJKnbgc9k8ZyuksTFMCONVGGyrXDiEeKtR7WOfVXlAnfOT5UIWronAF3suigKB
lea edi, [ebp - 0x96c]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x96c]
push eax
lea ecx, [ebp - 0x2d90]
movsb byte es:[edi], byte [esi]
call fcn.00405a50
lea eax, [ebp - 0x2d90]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x3054]
call fcn.004082f0
lea ecx, [ebp - 0x2d90]
mov byte [ebp - 4], 0x15
call fcn.00405ba0
lea eax, [ebp - 0x2fe8]
push 0xf5
push eax
call fcn.00407b10
mov ecx, eax
call fcn.00513180
cmp dword [eax + 0x14], 8
jb 0x50ac7c
mov eax, dword [eax]
lea ecx, [ebp - 0x3028]
push ecx
push 0xf003f
push 0
push eax
push dword [ebp - 0x302c]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [ebp - 0x2fe8]
mov esi, eax
call fcn.00402680
test esi, esi
je 0x50ad00
lea eax, [ebp - 0x3000]
push 0xf5
push eax
call fcn.00407b10
mov ecx, eax
call fcn.00513180
cmp dword [eax + 0x14], 8
jb 0x50acc8
mov eax, dword [eax]
push 0
lea ecx, [ebp - 0x3028]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push eax
push dword [ebp - 0x302c]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea ecx, [ebp - 0x3000]
mov esi, eax
call fcn.00402680
test esi, esi
jne 0x50b011
push 0x104
lea eax, [ebp - 0x114]
push 0
push eax
call fcn.0074fc20
mov eax, dword [ebp - 0x3038]
add esp, 0xc
cmp dword [eax + 0x14], 8
jb 0x50ad24
mov eax, dword [eax]
lea ecx, [ebp - 0x114]
push ecx
push eax
call fcn.00737153
push 0x104
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.0074fc20
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x3034], 0xbb8
add esp, 0x14
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x50ad60
lea eax, [ebp - 0x3034]
sub ecx, edx
push eax
lea eax, [ebp - 0x420]
push eax
push ecx
lea eax, [ebp - 0x114]
push eax
call fcn.00731973
call fcn.0073a8b6
push 0x208
mov dword [ebp - 0x3048], eax
lea eax, [ebp - 0x11d0]
push 0
push eax
call fcn.0074fc20
lea eax, [ebp - 0x11d0]
push eax
lea eax, [ebp - 0x420]
push eax
call fcn.00736b0c
add esp, 0x24
lea eax, [ebp - 0x3048]
push 4
push eax
push 4
push 0
lea eax, [ebp - 0x11d0]
push eax
push dword [ebp - 0x3028]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
call fcn.00402330
test ebx, ebx
je 0x50af13
call fcn.00402330
push 0x104
lea eax, [ebp - 0x31c]
push 0
push eax
call fcn.0074fc20
push 0x208
lea eax, [ebp - 0xfc8]
push 0
push eax
call fcn.0074fc20
push 0x104
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.0074fc20
add esp, 0x24
xor ecx, ecx
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x114]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x219], al
test al, al
jne 0x50ae30
call fcn.006eebd1
lea eax, [ebp - 0x3018]
push 0xf6
push eax
call fcn.00407b10
mov ecx, eax
call fcn.00513100
cmp dword [eax + 0x14], 0x10
jb 0x50ae6a
mov eax, dword [eax]
mov esi, eax
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x50ae70
lea edi, [ebp - 0x218]
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x50ae80
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x3018]
call fcn.00405ba0
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x3034], 0xbb8
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x50aeb4
lea eax, [ebp - 0x3034]
sub ecx, edx
push eax
lea eax, [ebp - 0x31c]
push eax
push ecx
lea eax, [ebp - 0x218]
push eax
call fcn.00731973
lea eax, [ebp - 0xfc8]
push eax
lea eax, [ebp - 0x31c]
push eax
call fcn.00736b0c
add esp, 0x18
cmp dword [ebx + 0x14], 8
jb 0x50aef6
mov ebx, dword [ebx]
push 0x104
push ebx
push 1
push 0
lea eax, [ebp - 0xfc8]
push eax
push dword [ebp - 0x3028]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [ebp - 0x3028], 0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
je 0x50af8e
lea ecx, [ebp - 0x3044]
call fcn.00413760
mov ecx, 0x76
mov byte [ebp - 4], 0x17
mov esi, str.xUJRM3rGW4RX3dkEqUq3e2DNksr47UYsK4tj7sSk4qmCZmX4rzqrBht6dmDcrIGmzTD7MdQJ0lEUWaqvCOpU9gf1Wotxr1mvWohMwwBhaqy6KtOar1vxGkhrxu7XbOer1Sbure3HGUhLG6bq0py8sm4wgytfNkKdRQYNpQSS5aKD3iT1bIVzuaIPgoR8BiIC72WWluJJ10Arpcb8JspC4nyr9wNYI0cMGFjTt1FKQdRUk7JesUxHMObJXSq0sy5KLClQR3VKFzK7Q2rek0ZlQV0ujSYYLeBAHFlx9ETwvcCddPhhQRArqpP8HXY0wLzcq3ZWP0YaasS0EzPl0UeKHP2tPggE9T5G91FYsXYOWmOLRImv4PDh5MlbZSblCNMkroqZuvMKBRrB8hcUFn6FAvXThMGgD8ZoCb57pAssezRGxjdTTtVAUegVQa0UzmZpZ0zyKsDIeDf5NdlGr2S01I0C
lea edi, [ebp - 0x1e0c]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1e0c]
push eax
lea ecx, [ebp - 0x2da8]
movsb byte es:[edi], byte [esi]
call fcn.00405a50
lea eax, [ebp - 0x2da8]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x3044]
call fcn.004082f0
lea ecx, [ebp - 0x2da8]
call fcn.00405ba0
push dword [ebp - 0x3028]
call ebx
lea ecx, [ebp - 0x3044]
mov byte [ebp - 4], 0x15
call fcn.00405be0
cmp dword [ebp - 0x302c], 0
je 0x50b004
lea ecx, [ebp - 0x3044]
call fcn.00413760
mov ecx, 0x53
mov byte [ebp - 4], 0x19
mov esi, str.LO3MiM9UGWHehWV4Ff9B6jLati613DrhJ7mWbIJGdEdElJS7yI9x5QAJrM9VDPm4fuCOvYYQRrIkuzraJbJ4qXfp8peDbOhu3TFXpgYjEuo1ZscglBBhQdspywNMXkKGvB2HvBtIbrnGIHnK4PA3pNb3A6yMjNzfwVp5XYCiADRWFYOCC7semDPnXYHSTPzG42i83oBRR1yo0WZjlGg10e2HzKsjJkkYdbmgZScuI6RMZbrGtXWxBPKpph5vLHlvzQPk4aH2pF5i52m0iBa4Jm7te6lNApMNJivJ8eangM8q6k65JRE7WziKgnqyek46GeKsVHQCWCG7C
lea edi, [ebp - 0xabc]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xabc]
push eax
lea ecx, [ebp - 0x2dc0]
movsw word es:[edi], word [esi]
call fcn.00405a50
lea eax, [ebp - 0x2dc0]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x3044]
call fcn.004082f0
lea ecx, [ebp - 0x2dc0]
call fcn.00405ba0
push dword [ebp - 0x302c]
call ebx
lea ecx, [ebp - 0x3044]
mov byte [ebp - 4], 0x15
call fcn.00405be0
call fcn.006f2a08
push dword [ebp - 0x3030]
call ebx
lea ecx, [ebp - 0x3054]
call fcn.00405be0
lea ecx, [ebp - 0x3024]
call fcn.00405be0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006e70bb
mov esp, ebp
pop ebp
ret 8