Function at 0x100153ba
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100799ae
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x2f0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 8]
test eax, eax
je 0x10016650
lea eax, [ebp + 0x18]
mov dword [ebp - 0x198], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x19c]
movzx eax, byte [eax]
test eax, eax
je 0x100165e8
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd8], 0x5098
mov dword [ebp - 0x15c], 0x1000b2c8
cmp dword [ebp - 0xd8], 0x53c3
jle 0x100154ba
and dword [ebp - 0x74], 0
jmp 0x1001546b
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x3d11
jge 0x100154ba
and dword [ebp - 0x54], 0
jmp 0x10015481
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x1cdc
jge 0x100154b8
mov eax, dword [ebp - 0x74]
cdq
idiv dword [ebp - 0x54]
mov eax, edx
cdq
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], edx
push dword [ebp - 0x1a0]
push dword [ebp - 0x1a4]
mov ecx, 0x10622758
call fcn.1001ac77
jmp 0x1001547a
jmp 0x10015464
push 3
lea ecx, [ebp - 0xf4]
call fcn.1001af80
and dword [ebp - 4], 0
mov byte [ebp - 4], 1
cmp dword [ebp - 0xd8], 0x4f98
jge 0x100154eb
mov edx, dword [ebp - 0x15c]
mov ecx, 0x10622758
call fcn.1001d971
jmp 0x10015507
and dword [ebp - 4], 0
jmp 0x10015511
mov dword [ebp - 0xb8], 0xe46552de
push 2
lea ecx, [ebp - 0x1f4]
call fcn.1001af80
mov byte [ebp - 4], 3
mov dword [ebp - 0x228], 0x3c25a1b5
mov dword [ebp - 0x108], 1
lea eax, [ebp - 0xf4]
push eax
push 0x78fc
push 0x101d
push 0
push 0x985
lea eax, [ebp - 0x190]
push eax
push 0x315f
push 1
call fcn.10012bf3
add esp, 0x20
push 0x2c63
push 0x501a
push 1
lea eax, [ebp - 0x190]
push eax
push 0x2bc0
push 0xb3f
push 0
push 0x68b4
lea eax, [ebp - 0x1f4]
push eax
push 1
call fcn.10013e67
add esp, 0x28
push 1
lea ecx, [ebp - 0xf4]
call fcn.1001b01e
mov dword [eax], 0x12
jmp 0x100155dc
push 1
lea ecx, [ebp - 0xf4]
call fcn.1001b01e
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xd4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xf4]
call fcn.1001b01e
cmp dword [eax], 0x15
jle 0x10015751
push 1
lea ecx, [ebp - 0x1b8]
call fcn.1001af80
mov byte [ebp - 4], 4
mov dword [ebp - 0x2c], 0x210b999f
push 0x14ec
push 0xc0b
lea eax, [ebp - 0x1b8]
push eax
push 0
push 1
lea eax, [ebp - 0x208]
push eax
call fcn.100149fb
add esp, 0x18
mov dword [ebp - 0x2c], 0
jmp 0x1001563e
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x100156f8
mov dword [ebp - 0x114], 0x5a60d005
push 1
lea ecx, [ebp - 0x1dc]
call fcn.1001af80
mov byte [ebp - 4], 5
push 0x20c1
push 1
push 0x1256
push 0
push 0x5026
push 0x6d0f
push 0x6af0
lea eax, [ebp - 0x210]
push eax
push 0x5883
push 0xb29
push 0xa33
lea eax, [ebp - 0x1dc]
push eax
push 0x5478
push 1
push 0x3b8e
call fcn.100131a4
add esp, 0x3c
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0xf4]
push eax
push 1
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x1dc]
push eax
lea eax, [ebp - 0x2c]
push eax
push 0
lea eax, [ebp - 0xb8]
push eax
call fcn.10015124
add esp, 0x20
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x1dc]
call fcn.1001b002
jmp 0x10015637
push 0x17ed
push 0
lea eax, [ebp - 0x1b8]
push eax
push 0x5e50
push 1
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0x1f4]
push eax
push 0x6ed2
lea eax, [ebp - 0xb8]
push eax
push 0x6302
lea eax, [ebp - 0x2c]
push eax
push 0x64e2
call fcn.10017548
add esp, 0x30
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1b8]
call fcn.1001b002
jmp 0x100155b8
push 0x536c
push 1
push 0x23de
push 0x4864
lea eax, [ebp - 0x108]
push eax
push 1
push 0x7feb
push 1
push 0x13a
call fcn.10013a42
add esp, 0x24
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1f4]
call fcn.1001b002
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf4]
call fcn.1001b002
mov eax, dword [0x1080bf48]
and eax, 1
jne 0x100157d4
mov eax, dword [0x1080bf48]
or eax, 1
mov dword [0x1080bf48], eax
mov dword [ebp - 4], 6
mov ecx, 0x1080bf50
call fcn.1001b2c2
push 0x1007af7f
call fcn.10060f79
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xa0], 0xd1454bcd
mov dword [ebp - 0x14], 0x6f44401d
mov dword [ebp - 0x68], 0
jmp 0x100157f5
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x10015808
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x20], 0x68ec0ae9
jmp 0x100157ee
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x20], 0xf
jmp 0x1001582d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x20], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0xfffffff0
jl 0x10015974
push 3
lea ecx, [ebp - 0xe8]
call fcn.1001af80
mov dword [ebp - 4], 7
mov dword [ebp - 0x218], 0x2d3f
push 0x7d17
push 0x2a04
push 1
push 1
push 0x4bc
push 0x4b41
lea eax, [ebp - 0xe8]
push eax
push 0xae6
lea eax, [ebp - 0x220]
push eax
call fcn.10013ba5
add esp, 0x24
push 2
lea ecx, [ebp - 0xe8]
call fcn.1001b01e
mov dword [eax], 0xb
jmp 0x100158c8
push 2
lea ecx, [ebp - 0xe8]
call fcn.1001b01e
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x90]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xe8]
call fcn.1001b01e
cmp dword [eax], 2
jg 0x10015942
mov dword [ebp - 0x158], 1
push 2
lea ecx, [ebp - 0xe8]
call fcn.1001b01e
cmp dword [eax], 0
je 0x1001592e
mov dword [ebp - 0x204], 0xa0d72276
mov dword [ebp - 0x230], 0xa5166941
mov dword [ebp - 0x238], 1
lea eax, [ebp - 0x158]
push eax
push 1
push 1
push 0x354c
call fcn.10013daa
add esp, 0x10
jmp 0x1001593d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
je 0x1001593d
jmp 0x10015942
jmp 0x100158a4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
je 0x10015960
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8]
call fcn.1001b002
jmp 0x10015974
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8]
call fcn.1001b002
jmp 0x10015818
mov dword [ebp - 0x14], 0
jmp 0x10015984
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x10015aff
mov dword [ebp - 0x110], 0x16e289aa
mov dword [ebp - 0x118], 0x7293cc9d
mov eax, 0x3d5943e2
test eax, eax
je 0x10015a92
cmp dword [ebp - 0x14], 0
je 0x100159ca
mov eax, 0xe6337258
test eax, eax
je 0x100159ca
mov dword [ebp - 0xd0], 1
jmp 0x100159d1
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x20]
cmp dword [ebp - 0xd0], eax
jg 0x100159ec
mov dword [ebp - 0x98], 1
jmp 0x100159f3
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x98]
sub ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax*4 - 0x20]
jl 0x10015a11
mov dword [ebp - 0xc0], 1
jmp 0x10015a18
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x110], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x20]
cmp ecx, dword [ebp + eax - 0x20]
jg 0x10015a43
mov dword [ebp - 0x184], 1
jmp 0x10015a4a
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x20]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x14]
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x14]
mov edx, dword [ebp + edx*4 - 0x20]
sub edx, dword [ebp - 0xa0]
add edx, dword [ebp + ecx - 0x20]
imul edx, dword [ebp + eax*4 - 0x20]
test edx, edx
je 0x10015a92
mov dword [ebp - 0xdc], 1
jmp 0x10015a99
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xdc]
sub ecx, dword [ebp + eax*4 - 0x20]
mov dword [ebp - 0xa8], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa8]
mov dword [ebp + eax - 0x20], ecx
cmp dword [ebp - 0xa8], 0x89d6
jle 0x10015ad3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
mov eax, 0xeb927eed
cmp eax, 0xb7f45b6
jbe 0x10015aea
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov dword [ebp - 0x118], eax
jmp 0x1001597d
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
call fcn.1000fcf9
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x250], 0xfffffffa
mov dword [ebp - 0x258], 0xfffffffd
mov dword [ebp - 0x20c], 0xc1ec2db2
mov dword [ebp - 0x2a0], 0xb8114768
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x25c], 0x9978f3c3
mov dword [ebp - 0x21c], 0xffffffff
mov dword [ebp - 0x280], 0
mov dword [ebp - 0x224], 0
push 3
lea ecx, [ebp - 0x268]
call fcn.1001af80
mov dword [ebp - 4], 8
mov dword [ebp - 0x26c], 0xa165
mov dword [ebp - 0xc8], 0xf1a969ac
push 0x3d80
lea eax, [ebp - 0x22c]
push eax
push 1
push 0x3411
push 0x7af2
push 0x3404
push 1
lea eax, [ebp - 0x268]
push eax
push 0x1641
push 1
call fcn.10013e67
add esp, 0x28
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x268]
call fcn.1001b002
cmp dword [ebp - 0x5c], 6
jae 0x10015c55
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x29c]
push eax
mov ecx, 0x1080bf50
call fcn.1001b0fb
push eax
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x234]
push eax
mov ecx, 0x1080bf50
call fcn.1001b109
mov ecx, eax
call fcn.1001b11e
movzx eax, al
test eax, eax
je 0x10015c55
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x120], eax
lea eax, [ebp - 0x120]
push eax
mov ecx, 0x1080bf50
call fcn.1001b316
push eax
mov ecx, dword [ebp - 0xcc]
call fcn.1001ae2e
jmp 0x100166e4
mov dword [ebp - 0x24], 0
mov dword [ebp - 0xb0], 0x3f1a0734
mov dword [ebp - 0x34], 0xaf7806aa
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0xb0]
jle 0x10015c8d
mov dword [ebp - 0x94], 1
jmp 0x10015c94
and dword [ebp - 0x94], 0
cmp dword [ebp - 0x24], 0xfffffffa
jg 0x10015ca6
mov dword [ebp - 0x84], 1
jmp 0x10015cad
and dword [ebp - 0x84], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x24]
jge 0x10015cc7
mov dword [ebp - 0x88], 1
jmp 0x10015cce
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x24]
jge 0x10015ce8
mov dword [ebp - 0x8c], 1
jmp 0x10015cef
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x8c], eax
jge 0x10015d06
mov dword [ebp - 0x9c], 1
jmp 0x10015d0d
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x9c]
jle 0x10015d27
mov dword [ebp - 0xa4], 1
jmp 0x10015d2e
and dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
add eax, 0xffff
cmp dword [ebp - 0x24], eax
jle 0x10015d4a
mov dword [ebp - 0xac], 1
jmp 0x10015d51
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xac], eax
je 0x10015d68
mov dword [ebp - 0xb4], 1
jmp 0x10015d6f
and dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xb4], eax
jge 0x10015d86
mov dword [ebp - 0xbc], 1
jmp 0x10015d8d
and dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0x34]
je 0x10015df4
mov dword [ebp - 0x1a8], 0xfffffffe
mov dword [ebp - 0x128], 0xdcfd8f27
lea eax, [ebp - 0x1a8]
push eax
push 0x25d6
push 0x7475
push 1
lea eax, [ebp - 0x128]
push eax
push 0x1056
push 1
push 0x7766
push 0x4d5d
lea eax, [ebp - 0x34]
push eax
push 1
push 0x3b4e
call fcn.10012711
add esp, 0x30
push 0
call fcn.10019a11
pop ecx
jmp 0x10015e26
mov byte [ebp - 0x25], 0
push 0x15eb
lea eax, [ebp - 0x25]
push eax
push 0x4377
push 0x579b
push 0x1edf
push 1
push 0x2eda
push 0x28b3
push 1
call fcn.10013fcf
add esp, 0x24
lea ecx, [ebp - 0x298]
call fcn.1001adb4
mov dword [ebp - 4], 9
mov dword [ebp - 0x70], 0xfffffffb
mov dword [ebp - 0x60], 0
jmp 0x10015e4f
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10015e65
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x2e8], 0xfffffff8
jmp 0x10015e48
mov dword [ebp - 0x70], 0
jmp 0x10015e75
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x17
jl 0x10015ed3
mov dword [ebp - 0x130], 0x25260
mov dword [ebp - 0x16c], 1
lea eax, [ebp - 0x16c]
push eax
push 0xa93
lea eax, [ebp - 0x130]
push eax
push 1
push 0x53c2
push 0
call fcn.10016a53
add esp, 0x18
mov byte [ebp - 0x27], 0
push 1
push 0x7b3
push 0x31ff
push 1
lea eax, [ebp - 0x27]
push eax
call fcn.10014942
add esp, 0x14
jmp 0x10015e6e
mov eax, dword [ebp - 0x5c]
xor edx, edx
push 2
pop ecx
div ecx
test edx, edx
jne 0x10016404
mov dword [ebp - 0x58], 0xe83c7730
push 3
lea ecx, [ebp - 0x1d0]
call fcn.1001af80
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x18], 0
jmp 0x10015f0d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10015f23
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2b8], 0xfffffff6
jmp 0x10015f06
mov dword [ebp - 0x18], 0
jmp 0x10015f33
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10015f4f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1d0]
call fcn.1001b01e
mov dword [eax], 6
jmp 0x10015f2c
mov dword [ebp - 0x58], 2
jmp 0x10015f5f
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x10015f87
push 0x3ff7
push 0x2c8b
push 0x973
push 1
push 1
push 0x50e1
call fcn.100149fb
add esp, 0x18
jmp 0x10015f58
push 4
pop esi
shl esi, 0
push 0
lea ecx, [ebp - 0x1d0]
call fcn.1001b01e
mov eax, dword [eax]
mov dword [ebp + esi - 0x2b8], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1d0]
call fcn.1001b002
lea eax, [ebp - 0x2dc]
push eax
call fcn.1000e5a8
pop ecx
mov esi, eax
lea edi, [ebp - 0x2c4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x2c4]
lea edi, [ebp - 0x2d0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x44], 0xffffffff
push 4
lea ecx, [ebp - 0x1c4]
call fcn.1001af80
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x174], 0
push 2
lea ecx, [ebp - 0x200]
call fcn.1001af80
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x18c]
push eax
push 0x7f53
push 0x28f6
push 0x51ea
push 0x4302
push 0x42e
lea eax, [ebp - 0x1c4]
push eax
push 0x170b
push 1
push 1
push 0x3ee9
push 0x20f1
push 0x258
push 0x2d06
push 1
push 0x19f8
call fcn.10014b00
add esp, 0x40
push 0x32b5
push 0x58b9
push 0x5a64
push 0xfe2
push 0x5b64
lea eax, [ebp - 0x18c]
push eax
push 0x556c
push 1
push 0x5fc
push 0
lea eax, [ebp - 0x200]
push eax
call fcn.10019bb2
add esp, 0x2c
mov dword [ebp - 0x44], 3
jmp 0x100160ac
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jg 0x100161ce
mov dword [ebp - 0x50], 0x6432a276
mov dword [ebp - 0x140], 0xfffffff7
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x50], 0xfffffff7
jmp 0x100160e1
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xd
je 0x100161a5
push 1
lea ecx, [ebp - 0x1e8]
call fcn.1001af80
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x138], 3
mov dword [ebp - 0xf8], 0xfffffffe
mov dword [ebp - 0x148], 8
push 0x7e43
push 1
lea eax, [ebp - 0x1e8]
push eax
push 1
push 1
lea eax, [ebp - 0x27c]
push eax
push 0x130a
call fcn.10012da7
add esp, 0x1c
lea eax, [ebp - 0x1c4]
push eax
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x138]
push eax
push 0x3feb
lea eax, [ebp - 0x174]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x200]
push eax
push 1
lea eax, [ebp - 0x44]
push eax
push 0
lea eax, [ebp - 0x50]
push eax
call fcn.10013711
add esp, 0x34
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1e8]
call fcn.1001b002
jmp 0x100160da
push 1
push 0x3141
lea eax, [ebp - 0x17c]
push eax
push 0x4b2e
push 1
push 1
push 0x6aa9
call fcn.10012eb4
add esp, 0x1c
jmp 0x100160a5
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x200]
call fcn.1001b002
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1c4]
call fcn.1001b002
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
call fcn.1000fd13
mov dword [ebp - 0x150], eax
lea eax, [ebp - 0x2d0]
push eax
push dword [ebp - 0x150]
push dword [ebp - 0x5c]
lea eax, [ebp - 0x300]
push eax
call fcn.100104f0
add esp, 0x10
mov dword [ebp - 0x194], eax
push dword [ebp - 0x194]
lea ecx, [ebp - 0x298]
call fcn.1001adc7
lea ecx, [ebp - 0x300]
call fcn.1001ae24
cmp dword [ebp - 0x5c], 6
jae 0x10016404
mov dword [ebp - 0x23c], 0xd33a
mov dword [ebp - 0x100], 0x2145
cmp dword [ebp - 0x100], 0xdd7
jge 0x10016320
lea eax, [ebp - 0x104]
push eax
push 0x1000b10c
call fcn.10060cbb
pop ecx
pop ecx
mov dword [ebp - 0x7c], 1
jmp 0x1001628e
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x104]
jg 0x10016320
lea eax, [ebp - 0x10c]
push eax
push 0x1000b10c
call fcn.10060cbb
pop ecx
pop ecx
and dword [ebp - 0x80], 0
and dword [ebp - 0x78], 0
jmp 0x100162c1
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x10c]
jge 0x100162fb
lea eax, [ebp - 0xfc]
push eax
push 0x1000b210
call fcn.10060cbb
pop ecx
pop ecx
xor eax, eax
inc eax
imul eax, eax, 0
movsx eax, byte [ebp + eax - 0xfc]
cmp eax, 0x6c
jne 0x100162f9
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
jmp 0x100162ba
mov eax, dword [ebp - 0x80]
and eax, 1
je 0x10016310
push 0x1000b358
call fcn.10060fa3
pop ecx
jmp 0x1001631b
push 0x1000b360
call fcn.10060fa3
pop ecx
jmp 0x10016287
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x24c], 0xe8c9f369
push 3
lea ecx, [ebp - 0x278]
call fcn.1001af80
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x2a8], 0xfffffff9
mov dword [ebp - 0x11c], 0x451d52aa
push 1
push 0x5b87
push 0x209
lea eax, [ebp - 0x254]
push eax
push 0x79a3
push 0x41ea
push 1
push 1
push 0x654b
push 0x57fb
lea eax, [ebp - 0x278]
push eax
call fcn.10012fc4
add esp, 0x2c
push 0x4497
push 0x69cd
push 0
push 0x3c28
lea eax, [ebp - 0x11c]
push eax
push 0x969
push 0
push 0x56ac
push 0x784a
push 1
call fcn.10013e67
add esp, 0x28
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x278]
call fcn.1001b002
push dword [ebp - 0x3c]
push 0x1080bf50
lea eax, [ebp - 0x298]
push eax
push 1
push 1
call fcn.10015076
add esp, 0x14
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x124], 0xcdc345fe
mov dword [ebp - 0x64], 0
jmp 0x10016425
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10016438
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x6c], 0xfffffffc
jmp 0x1001641e
mov byte [ebp - 0x28], 0
movzx eax, byte [ebp - 0x28]
test eax, eax
je 0x1001648e
push 0x7867
push 1
push 0x375a
push 1
push 0x2fea
push 0x5623
push 0x77b9
push 0x52f1
push 0x7f30
push 0x2b8c
push 0x560d
push 0x2988
push 0x5ba2
push 1
push 0x552c
call fcn.100131a4
add esp, 0x3c
mov dword [ebp - 0x40], 0
jmp 0x1001649e
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x100165b1
mov dword [ebp - 0x38], 2
mov byte [ebp - 0x26], 0
movzx eax, byte [ebp - 0x26]
test eax, eax
je 0x100164fe
push 0x1eb6
push 0x4b15
push 0x77c2
push 0x2509
push 0x12d8
push 0x4130
push 0x4a39
push 0x4fae
push 0x7197
push 1
push 0x4c0
push 1
push 0x351d
call fcn.10013711
add esp, 0x34
mov dword [ebp - 0x38], 0
jmp 0x1001650e
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x100165ac
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x4c], 0
jmp 0x1001652f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x10016599
mov dword [ebp - 0x30], 0xba07e4fc
mov dword [ebp - 0x30], 0
jmp 0x1001654c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jg 0x10016597
push 0x6732
push 1
push 1
push 1
push 0x2661
call fcn.10015290
add esp, 0x14
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x6c]
add eax, 0xf3d3
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x6c], ecx
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x124], eax
jmp 0x10016545
jmp 0x10016528
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x6c]
mov ecx, dword [ebp - 0x40]
mov dword [ebp + ecx*4 - 0x6c], eax
jmp 0x10016507
jmp 0x10016497
lea eax, [ebp - 0x298]
push eax
mov ecx, dword [ebp - 0xcc]
call fcn.1001ae2e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x298]
call fcn.1001ae24
jmp 0x100166e4
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x48]
mov dword [eax], 0
jmp 0x1001662b
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
mov eax, dword [ebp - 0x48]
cmp dword [eax], 2
jge 0x1001664b
mov eax, dword [ebp - 0x48]
push dword [eax]
mov ecx, dword [ebp - 0x14c]
call fcn.1001b01e
mov dword [eax], 0xe033c22
jmp 0x10016620
jmp 0x100166e4
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x160], eax
lea eax, [ebp + 0xc]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x154]
movzx eax, byte [eax]
test eax, eax
je 0x100166ad
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
movzx eax, byte [eax]
test eax, eax
je 0x100166ab
push 0x6751
push 0
call fcn.100100f2
pop ecx
pop ecx
jmp 0x100166e4
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
movzx eax, byte [eax]
test eax, eax
je 0x100166e4
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret