Function at 0x41d7d0
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4c65ed
mov eax, dword fs:[0]
push eax
sub esp, 0x98
mov eax, dword [0x51eee0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp + 0xc]
push 0
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x6c], 0
call fcn.00442860
push str.success
lea ecx, [ebp - 0x90]
mov dword [ebp - 4], 0
call fcn.00442820
lea eax, [ebp - 0x90]
push eax
push 0x4d968c
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 1
call fcn.00442d00
mov ecx, eax
call fcn.00442b10
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0
call fcn.00442a70
mov eax, dword [0x51eab0]
mov ecx, 0x51eab0
call dword [eax + 0xc]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x74], ebx
mov eax, dword [0x51eab0]
mov ecx, 0x51eab0
mov byte [ebp - 4], 2
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x68], eax
mov eax, dword [0x51eab0]
mov ecx, 0x51eab0
mov byte [ebp - 4], 3
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x80], edi
mov eax, dword [0x51eab0]
mov ecx, 0x51eab0
mov byte [ebp - 4], 4
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x7c], esi
mov ecx, dword [ebp - 0x54]
push str.hive
mov dword [ebp - 0x70], 0
mov byte [ebp - 4], 6
call fcn.00442de0
sub esp, 0x18
mov ecx, eax
push esp
call fcn.004435b0
lea eax, [ebp - 0x64]
push eax
call fcn.0044ee90
add esp, 0x1c
mov edx, dword [eax]
lea ecx, [ebx - 0x10]
lea eax, [edx - 0x10]
mov byte [ebp - 4], 7
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x60], ecx
cmp eax, ecx
je 0x41d957
cmp dword [ecx + 0xc], 0
lea ebx, [ecx + 0xc]
jl 0x41d948
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x41d948
push dword [ebp - 0x50]
call fcn.00404840
add esp, 4
mov dword [ebp - 0x50], eax
or ecx, 0xffffffff
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x41d940
mov edx, dword [ebp - 0x60]
push edx
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x50]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x74], ebx
jmp 0x41d957
push dword [edx - 0xc]
lea ecx, [ebp - 0x74]
push edx
call fcn.00409950
mov ebx, dword [ebp - 0x74]
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41d978
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
push ecx
mov ecx, dword [ebx]
mov dword [ebp - 0x60], esp
mov eax, dword [ecx]
mov dword [ebp - 0x64], ebx
call dword [eax + 0x10]
cmp dword [ebx + 0xc], 0
lea edx, [ebx + 0xc]
mov ecx, eax
jl 0x41d9a5
cmp ecx, dword [ebx]
jne 0x41d9a5
mov ecx, ebx
mov eax, 1
lock xadd dword [edx], eax
jmp 0x41d9e8
mov eax, dword [ecx]
push 2
push dword [ebx + 4]
call dword [eax]
mov edx, eax
mov dword [ebp - 0x50], edx
test edx, edx
jne 0x41d9bc
call fcn.0040c2e0
mov eax, dword [ebx + 4]
mov dword [edx + 4], eax
mov ecx, dword [ebx + 4]
lea eax, [ecx*2 + 2]
push eax
lea eax, [ebx + 0x10]
push eax
lea eax, [ecx*2 + 2]
push eax
lea eax, [edx + 0x10]
push eax
call fcn.004a7195
mov ecx, dword [ebp - 0x50]
add esp, 0x10
lea eax, [ecx + 0x10]
mov ecx, dword [ebp - 0x60]
mov dword [ecx], eax
call fcn.004155d0
add esp, 4
mov dword [ebp - 0x60], eax
test eax, eax
jne 0x41db1f
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x64]
push str.writeReg_hive_error_
push eax
call fcn.0040b800
add esp, 0xc
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 8
call fcn.0044ef60
add esp, 8
push eax
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 9
call fcn.00442780
push 0x4d968c
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xa
call fcn.00442d00
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00442b10
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 9
call fcn.00442a70
cmp dword [ebp - 0x18], 0x10
jb 0x41da7e
push dword [ebp - 0x2c]
call fcn.004a5bbe
add esp, 4
mov edx, dword [ebp - 0x64]
add edx, 0xfffffff0
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41da9f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 4
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41dabf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41dadc
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x68]
add edx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41dafc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
lea eax, [ebx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41db16
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
jmp 0x41e316
mov ecx, dword [ebp - 0x54]
push 0x4d9ab8
call fcn.00442de0
sub esp, 0x18
mov ecx, eax
push esp
call fcn.004435b0
lea eax, [ebp - 0x58]
push eax
call fcn.0044ee90
add esp, 0x1c
mov edx, dword [eax]
mov ebx, dword [ebp - 0x68]
lea eax, [edx - 0x10]
lea ecx, [ebx - 0x10]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x78], ecx
cmp eax, ecx
je 0x41dbaa
cmp dword [ecx + 0xc], 0
lea ebx, [ecx + 0xc]
jl 0x41db9b
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x41db9b
push dword [ebp - 0x50]
call fcn.00404840
add esp, 4
mov dword [ebp - 0x50], eax
or ecx, 0xffffffff
lock xadd dword [ebx], ecx
dec ecx
test ecx, ecx
jg 0x41db93
mov edx, dword [ebp - 0x78]
push edx
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x50]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x68], ebx
jmp 0x41dbaa
push dword [edx - 0xc]
lea ecx, [ebp - 0x68]
push edx
call fcn.00409950
mov ebx, dword [ebp - 0x68]
mov edx, dword [ebp - 0x58]
add edx, 0xfffffff0
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41dbcb
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x54]
push 0x4d9abc
call fcn.00442de0
sub esp, 0x18
mov ecx, eax
push esp
call fcn.004435b0
lea eax, [ebp - 0x50]
push eax
call fcn.0044ee90
add esp, 0x1c
mov edx, dword [eax]
lea ecx, [edi - 0x10]
lea eax, [edx - 0x10]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x78], ecx
cmp eax, ecx
je 0x41dc53
cmp dword [ecx + 0xc], 0
lea edi, [ecx + 0xc]
jl 0x41dc44
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x41dc44
push dword [ebp - 0x58]
call fcn.00404840
add esp, 4
mov dword [ebp - 0x58], eax
or ecx, 0xffffffff
lock xadd dword [edi], ecx
dec ecx
test ecx, ecx
jg 0x41dc3c
mov edx, dword [ebp - 0x78]
push edx
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x58]
lea edi, [eax + 0x10]
mov dword [ebp - 0x80], edi
jmp 0x41dc53
push dword [edx - 0xc]
lea ecx, [ebp - 0x80]
push edx
call fcn.00409950
mov edi, dword [ebp - 0x80]
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41dc74
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x54]
xor eax, eax
push 0x4d9b70
mov dword [ebp - 0x50], eax
call fcn.00442de0
mov ecx, eax
call fcn.00443de0
mov ecx, dword [ebp - 0x54]
push 0x4d9b70
test al, al
je 0x41dcad
call fcn.00442de0
mov ecx, eax
call fcn.004434b0
mov dword [ebp - 0x70], eax
jmp 0x41dd71
call fcn.00442de0
mov ecx, eax
call fcn.00443e50
test al, al
je 0x41e158
mov ecx, dword [ebp - 0x54]
push 0x4d9b70
mov dword [ebp - 0x50], 1
call fcn.00442de0
sub esp, 0x18
mov ecx, eax
push esp
call fcn.004435b0
lea eax, [ebp - 0x5c]
push eax
call fcn.0044ee90
add esp, 0x1c
mov edx, dword [eax]
lea ecx, [esi - 0x10]
lea eax, [edx - 0x10]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x78], ecx
cmp eax, ecx
je 0x41dd50
cmp dword [ecx + 0xc], 0
lea esi, [ecx + 0xc]
jl 0x41dd41
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x41dd41
push dword [ebp - 0x58]
call fcn.00404840
add esp, 4
mov dword [ebp - 0x58], eax
or ecx, 0xffffffff
lock xadd dword [esi], ecx
dec ecx
test ecx, ecx
jg 0x41dd39
mov edx, dword [ebp - 0x78]
push edx
mov ecx, dword [edx]
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x58]
lea esi, [eax + 0x10]
mov dword [ebp - 0x7c], esi
jmp 0x41dd50
push dword [edx - 0xc]
lea ecx, [ebp - 0x7c]
push edx
call fcn.00409950
mov esi, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41dd71
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x54]
push 0x4d9ac4
call fcn.00443e00
test al, al
je 0x41dd98
mov ecx, dword [ebp - 0x54]
push 0x4d9ac4
call fcn.00442de0
mov ecx, eax
call fcn.004434b0
jmp 0x41dd9a
xor eax, eax
mov ecx, 0x2001f
mov dword [ebp - 0x54], 0xf003f
cmp eax, 0x20
jne 0x41ddb9
mov ecx, 0x2021f
mov dword [ebp - 0x54], 0xf023f
jmp 0x41ddca
cmp eax, 0x40
jne 0x41ddca
mov ecx, 0x2011f
mov dword [ebp - 0x54], 0xf013f
lea eax, [ebp - 0x6c]
push eax
push ecx
push 0
push ebx
push dword [ebp - 0x60]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, 2
jne 0x41ddfb
push 0
lea eax, [ebp - 0x6c]
push eax
push 0
push dword [ebp - 0x54]
push 0
push 0
push 0
push ebx
push dword [ebp - 0x60]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
test eax, eax
je 0x41df4e
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0043e100
add esp, 8
push eax
lea eax, [ebp - 0x60]
push str.writeReg_RegOpenKeyEx_or_RegCreateKeyEx_
push eax
mov byte [ebp - 4], 0x11
call fcn.0040b800
add esp, 0xc
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x13
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41de47
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0044ef60
add esp, 8
push eax
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x14
call fcn.00442780
push 0x4d968c
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x15
call fcn.00442d00
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00442b10
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x14
call fcn.00442a70
cmp dword [ebp - 0x18], 0x10
jb 0x41dea9
push dword [ebp - 0x2c]
call fcn.004a5bbe
add esp, 4
mov edx, dword [ebp - 0x60]
add edx, 0xfffffff0
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41deca
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 4
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41deea
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41df07
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [ebx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41df24
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x64]
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41db16
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
jmp 0x41e316
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x41df5f
push 4
lea eax, [ebp - 0x70]
push eax
push 4
jmp 0x41df76
cmp eax, 1
jne 0x41e0d5
mov eax, dword [esi - 0xc]
lea eax, [eax*2 + 2]
push eax
push esi
push 1
push 0
push edi
push dword [ebp - 0x6c]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
je 0x41e0d5
push eax
lea eax, [ebp - 0x5c]
push eax
call fcn.0043e100
add esp, 8
push eax
lea eax, [ebp - 0x50]
push str.writeReg_RegSetValueEx_
push eax
mov byte [ebp - 4], 0x16
call fcn.0040b800
add esp, 0xc
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x18
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41dfce
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0044ef60
add esp, 8
push eax
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x19
call fcn.00442780
push 0x4d968c
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x1a
call fcn.00442d00
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00442b10
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x19
call fcn.00442a70
cmp dword [ebp - 0x18], 0x10
jb 0x41e030
push dword [ebp - 0x2c]
call fcn.004a5bbe
add esp, 4
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e051
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 4
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e071
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e08e
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [ebx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e0ab
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x64]
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41db16
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
jmp 0x41e316
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov dword [ebp - 4], 4
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e0f8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e115
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [ebx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e132
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x64]
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e316
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x41e316
push str.writeReg_invalid_value_type
lea ecx, [ebp - 0x50]
call fcn.00401ff0
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 0xe
call fcn.0044ef60
add esp, 8
push eax
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xf
call fcn.00442780
push 0x4d968c
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x10
call fcn.00442d00
lea ecx, [ebp - 0x90]
push ecx
mov ecx, eax
call fcn.00442b10
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xf
call fcn.00442a70
cmp dword [ebp - 0x18], 0x10
jb 0x41e1cb
push dword [ebp - 0x2c]
call fcn.004a5bbe
add esp, 4
mov edx, dword [ebp - 0x50]
add edx, 0xfffffff0
mov byte [ebp - 4], 6
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e1ec
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea edx, [esi - 0x10]
or esi, 0xffffffff
mov byte [ebp - 4], 4
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e20c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edi + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e229
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
add ebx, 0xfffffff0
mov byte [ebp - 4], 2
lea eax, [ebx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e246
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x64]
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41db16
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
jmp 0x41e316
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x41e32b
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x4c]
call fcn.004449b0
mov byte [ebp - 4], 0x1f
call fcn.00417ae0
test al, al
jne 0x41e348
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
mov eax, dword [0x51eab0]
mov ecx, 0x51eab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x20
call fcn.004478c0
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x21
jb 0x41e380
mov edx, dword [edx]
sub esp, 0x18
mov edi, esp
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], 0
mov byte [edi], 0
cmp byte [edx], 0
jne 0x41e39f
xor ecx, ecx
jmp 0x41e3ad
mov ecx, edx
lea ebx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e3a4
sub ecx, ebx
push ecx
push edx
mov ecx, edi
call fcn.00401460
lea eax, [ebp - 0x5c]
push eax
call fcn.0044ee90
add esp, 0x1c
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0x22
call fcn.00402af0
mov edx, dword [ebp - 0x5c]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x21
lea eax, [edx + 0xc]
mov ecx, esi
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e3ef
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x18], 0x10
mov byte [ebp - 4], 0x20
jb 0x41e404
push dword [ebp - 0x2c]
call fcn.004a5bbe
add esp, 4
call fcn.00417940
test al, al
jne 0x41e464
movd xmm4, dword [0x520340]
movsd xmm3, qword [0x4d95e8]
movsd xmm6, qword [0x4d95f0]
movsd xmm5, qword [0x4d95e0]
xorps xmm2, xmm2
cvtdq2pd xmm4, xmm4
addsd xmm2, xmm3
movapd xmm0, xmm2
mulsd xmm0, xmm2
comisd xmm0, xmm4
jbe 0x41e44e
subsd xmm2, xmm3
divsd xmm3, xmm6
movapd xmm1, xmm2
mulsd xmm1, xmm2
movapd xmm0, xmm4
subsd xmm0, xmm1
comisd xmm0, xmm5
ja 0x41e434
mov edi, dword [ebp - 0x94]
mov esi, dword [ebp - 0x70]
mov eax, 8
mov word [edi], ax
push dword [esi - 0xc]
push esi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
test eax, eax
jne 0x41e488
call fcn.0040c2e0
add esi, 0xfffffff0
mov dword [edi + 8], eax
mov byte [ebp - 4], 0x1f
lea eax, [esi + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x41e4a9
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x34], 0x10
mov byte [ebp - 4], 0
mov dword [ebp - 0x4c], 0x4d9684
jb 0x41e4c5
push dword [ebp - 0x48]
call fcn.004a5bbe
add esp, 4
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 0x38], 0
mov byte [ebp - 0x48], 0
call fcn.00444ab0
lea ecx, [ebp - 0xa4]
mov dword [ebp - 4], 0xffffffff
call fcn.00442a70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004a63c4
mov esp, ebp
pop ebp
ret