Function at 0x428360
Capabilities:
Check http status code
Delete registry value
Encrypt data using dpapi
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5aade8
mov eax, dword fs:[0]
push eax
mov eax, 0x113c
call fcn.005a80c0
mov eax, dword [0x5fa040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, 1
mov dword [ebp - 0x1134], edi
push dword [0x602d48]
push dword [0x602d44]
call fcn.0042c290
mov esi, dword [0x602d44]
add esp, 8
xor ebx, ebx
cmp esi, dword [0x602d48]
je 0x429f60
jmp 0x4283d0
cmp ebx, 0xc8
jge 0x42bd50
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPairOrig_d
push eax
call fcn.0042c270
xor eax, eax
lea ecx, [ebp - 0x438]
add esp, 0xc
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
push eax
push 0x5c0630
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
call fcn.004068c0
xor eax, eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428460
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x1128]
call fcn.004116e0
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x10e4]
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8c8c
call fcn.0040db30
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x10cc]
call fcn.0040db30
mov dword [ebp - 0x10b0], 0
mov dword [ebp - 0x10ac], 0
mov dword [ebp - 0x10a8], 0xffffffff
mov dword [ebp - 0x10a4], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8cac
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x43c]
cmp ecx, 7
jbe 0x42854c
mov edx, dword [ebp - 0x450]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x428542
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 7
mov word [ebp - 0x450], ax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x4285ad
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4285a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
lea eax, [esi + 4]
push eax
mov eax, dword [ebp - 0x1128]
lea ecx, [ebp - 0x1128]
call dword [eax + 0x18]
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPairCrypt_d
push eax
call fcn.0042c270
xor eax, eax
lea ecx, [ebp - 0x468]
add esp, 0xc
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
push eax
push 0x5c0630
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], eax
call fcn.004068c0
xor eax, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428640
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x10a0]
call fcn.004116e0
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x105c]
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8c8c
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x1044]
call fcn.0040db30
mov dword [ebp - 0x1028], 0
mov dword [ebp - 0x1024], 0
mov dword [ebp - 0x1020], 0xffffffff
mov dword [ebp - 0x101c], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8cac
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x42872c
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x428722
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x454]
cmp ecx, 7
jbe 0x42878d
mov edx, dword [ebp - 0x468]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x428783
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
lea eax, [esi + 0x1c]
push eax
mov eax, dword [ebp - 0x10a0]
lea ecx, [ebp - 0x10a0]
call dword [eax + 0x18]
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPairPass_d
push eax
call fcn.0042c270
xor eax, eax
lea ecx, [ebp - 0x468]
add esp, 0xc
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
push eax
push 0x5c0630
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], eax
call fcn.004068c0
xor eax, eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428820
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x1018]
call fcn.004116e0
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0xfd4]
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8c8c
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0xfbc]
call fcn.0040db30
mov dword [ebp - 0xfa0], 0
mov dword [ebp - 0xf9c], 0
mov dword [ebp - 0xf98], 0xffffffff
mov dword [ebp - 0xf94], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8cac
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x43c]
cmp ecx, 7
jbe 0x42890c
mov edx, dword [ebp - 0x450]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x428902
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 7
mov word [ebp - 0x450], ax
lea ecx, [ebp - 0x468]
call fcn.00406970
xor eax, eax
mov dword [ebp - 0x113c], 0
mov dword [ebp - 0x468], eax
lea ecx, [esi + 0x34]
mov dword [ebp - 0x1138], 0
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], 7
mov word [ebp - 0x468], ax
mov byte [ebp - 4], 0x15
or edi, 1
mov eax, dword [ecx + 0x10]
add eax, eax
mov dword [ebp - 0x1130], edi
cmp dword [ecx + 0x14], 7
mov dword [ebp - 0x1134], edi
mov dword [ebp - 0x1144], eax
jbe 0x4289a2
mov ecx, dword [ecx]
lea eax, [ebp - 0x113c]
mov dword [ebp - 0x1140], ecx
push eax
push 1
push 0
push 0
push 0
push str.CryptSyncRegPWs
lea eax, [ebp - 0x1144]
push eax
call dword [sym.imp.CRYPT32.dll_CryptProtectData]
test eax, eax
je 0x428aa5
lea eax, [ebp - 0x112c]
mov dword [ebp - 0x112c], 0
push eax
push 0
push 4
push dword [ebp - 0x113c]
push dword [ebp - 0x1138]
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringW]
test eax, eax
je 0x428aa5
mov eax, dword [ebp - 0x112c]
mov ecx, 2
inc eax
mul ecx
setb cl
movsx edi, cl
neg edi
or edi, eax
push edi
call fcn.0058813f
push edi
mov edi, eax
mov dword [ebp - 0x1134], eax
push 0
push edi
call fcn.0058ad30
mov eax, dword [ebp - 0x1130]
add esp, 0x10
or eax, 2
mov dword [ebp - 0x1148], edi
mov dword [ebp - 0x1134], eax
lea eax, [ebp - 0x112c]
mov dword [ebp - 4], 0x16
push eax
push edi
push 4
push dword [ebp - 0x113c]
push dword [ebp - 0x1138]
call dword [sym.imp.CRYPT32.dll_CryptBinaryToStringW]
test eax, eax
je 0x428a9c
push dword [ebp - 0x1138]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov ecx, edi
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428a80
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x468]
call fcn.00407980
push edi
call fcn.00588148
add esp, 4
mov dword [ebp - 4], 0x14
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x17
push eax
mov eax, dword [ebp - 0x1018]
lea ecx, [ebp - 0x1018]
call dword [eax + 0x18]
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x454]
cmp ecx, 7
jbe 0x428b0a
mov edx, dword [ebp - 0x468]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x428b00
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPairCryptOnly_d
push eax
call fcn.0042c270
xor eax, eax
lea ecx, [ebp - 0x468]
add esp, 0xc
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
push eax
push 0x5c0630
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], eax
call fcn.004068c0
xor eax, eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428b90
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0xf90]
call fcn.004116e0
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0xf4c]
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8c8c
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0xf34]
call fcn.0040db30
mov dword [ebp - 0xf18], 0
mov dword [ebp - 0xf14], 0
mov dword [ebp - 0xf10], 0xffffffff
mov dword [ebp - 0xf0c], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8cac
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x428c7c
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x428c72
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x454]
cmp ecx, 7
jbe 0x428cdd
mov edx, dword [ebp - 0x468]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x428cd3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
lea eax, [esi + 0x60]
push eax
lea ecx, [ebp - 0x468]
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x1f
push eax
mov eax, dword [ebp - 0xf90]
lea ecx, [ebp - 0xf90]
call dword [eax + 0x18]
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x1e
call fcn.00406970
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPairCopyOnly_d
push eax
call fcn.0042c270
xor eax, eax
lea ecx, [ebp - 0x468]
add esp, 0xc
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
push eax
push 0x5c0630
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], eax
call fcn.004068c0
xor eax, eax
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428d94
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0xf08]
call fcn.004116e0
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0xec4]
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8c8c
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0xeac]
call fcn.0040db30
mov dword [ebp - 0xe90], 0
mov dword [ebp - 0xe8c], 0
mov dword [ebp - 0xe88], 0xffffffff
mov dword [ebp - 0xe84], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8cac
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x43c]
cmp ecx, 7
jbe 0x428e80
mov edx, dword [ebp - 0x450]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x428e76
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 7
mov word [ebp - 0x450], ax
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0x454]
cmp ecx, 7
jbe 0x428ee1
mov edx, dword [ebp - 0x468]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x428ed7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
lea eax, [esi + 0x84]
push eax
lea ecx, [ebp - 0x468]
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x27
push eax
mov eax, dword [ebp - 0xf08]
lea ecx, [ebp - 0xf08]
call dword [eax + 0x18]
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x26
call fcn.00406970
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPairNoSync_d
push eax
call fcn.0042c270
xor eax, eax
lea ecx, [ebp - 0x468]
add esp, 0xc
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
push eax
push 0x5c0630
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], eax
call fcn.004068c0
xor eax, eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
jmp 0x428fa0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x428fa0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0xe80]
call fcn.004116e0
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x2a
push eax
lea ecx, [ebp - 0xe3c]
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8c8c
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0xe24]
call fcn.0040db30
mov dword [ebp - 0xe08], 0
mov dword [ebp - 0xe04], 0
mov dword [ebp - 0xe00], 0xffffffff
mov dword [ebp - 0xdfc], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8cac
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x42908c
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x429082
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x454]
cmp ecx, 7
jbe 0x4290ed
mov edx, dword [ebp - 0x468]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4290e3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
lea eax, [esi + 0xa8]
push eax
lea ecx, [ebp - 0x468]
call fcn.0040db30
mov edi, 0x1c
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x2f
push eax
mov eax, dword [ebp - 0xe80]
lea ecx, [ebp - 0xe80]
call dword [eax + 0x18]
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x2e
call fcn.00406970
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPairEncnames_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x218]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429171
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0xd38]
call fcn.004116e0
mov dword [ebp - 0xcf4], 1
mov dword [ebp - 0xcf0], 1
mov dword [ebp - 0xce8], 0
mov dword [ebp - 0xce4], 0
mov dword [ebp - 0xce0], 0xffffffff
mov dword [ebp - 0xcdc], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x43c]
cmp ecx, 7
jbe 0x42923b
mov edx, dword [ebp - 0x450]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x429231
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
lea ecx, [ebp - 0xd38]
movzx eax, byte [esi + 0x4c]
push eax
mov dword [ebp - 0x43c], 7
call fcn.004234a0
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPairEncnamesNew_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x218]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4292b0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x33
push eax
lea ecx, [ebp - 0xcd8]
call fcn.004116e0
mov dword [ebp - 0xc94], 0
mov dword [ebp - 0xc90], 0
mov dword [ebp - 0xc88], 0
mov dword [ebp - 0xc84], 0
mov dword [ebp - 0xc80], 0xffffffff
mov dword [ebp - 0xc7c], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x42937a
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x429370
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
lea ecx, [ebp - 0xcd8]
movzx eax, byte [esi + 0x4d]
push eax
mov dword [ebp - 0x424], 7
call fcn.004234a0
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPairDir_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x218]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
jmp 0x4293f0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4293f0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x36
push eax
lea ecx, [ebp - 0xc78]
call fcn.004116e0
mov dword [ebp - 0xc34], 0
mov dword [ebp - 0xc30], 0
mov dword [ebp - 0xc28], 0
mov dword [ebp - 0xc24], 0
mov dword [ebp - 0xc20], 0xffffffff
mov dword [ebp - 0xc1c], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov byte [ebp - 4], 0x38
mov ecx, dword [ebp - 0x43c]
cmp ecx, 7
jbe 0x4294ba
mov edx, dword [ebp - 0x450]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4294b0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
push dword [esi + 0x50]
xor eax, eax
mov dword [ebp - 0x440], 0
lea ecx, [ebp - 0xc78]
mov dword [ebp - 0x43c], 7
mov word [ebp - 0x450], ax
call fcn.004234a0
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPair7zExt_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x218]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429530
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x39
push eax
lea ecx, [ebp - 0xc18]
call fcn.004116e0
mov dword [ebp - 0xbd4], 0
mov dword [ebp - 0xbd0], 0
mov dword [ebp - 0xbc8], 0
mov dword [ebp - 0xbc4], 0
mov dword [ebp - 0xbc0], 0xffffffff
mov dword [ebp - 0xbbc], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov byte [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x4295fa
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x4295f0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
lea ecx, [ebp - 0xc18]
movzx eax, byte [esi + 0x54]
push eax
mov dword [ebp - 0x424], 7
call fcn.004234a0
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncUseGPG_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x218]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], eax
jmp 0x429670
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429670
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x468]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x3c
push eax
lea ecx, [ebp - 0xbb8]
call fcn.004116e0
mov dword [ebp - 0xb74], 0
mov dword [ebp - 0xb70], 0
mov dword [ebp - 0xb68], 0
mov dword [ebp - 0xb64], 0
mov dword [ebp - 0xb60], 0xffffffff
mov dword [ebp - 0xb5c], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
lea ecx, [ebp - 0x468]
mov byte [ebp - 4], 0x3e
call fcn.00406970
movzx eax, byte [esi + 0x55]
lea ecx, [ebp - 0xbb8]
push eax
call fcn.004234a0
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPairFAT_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x218]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429760
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x3f
push eax
lea ecx, [ebp - 0xb58]
call fcn.004116e0
mov dword [ebp - 0xb14], 0
mov dword [ebp - 0xb10], 0
mov dword [ebp - 0xb08], 0
mov dword [ebp - 0xb04], 0
mov dword [ebp - 0xb00], 0xffffffff
mov dword [ebp - 0xafc], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov byte [ebp - 4], 0x41
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x42982a
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x429820
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
lea ecx, [ebp - 0xb58]
movzx eax, byte [esi + 0x56]
push eax
mov dword [ebp - 0x424], 7
call fcn.004234a0
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncDeleted_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x218]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
jmp 0x4298a0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4298a0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x42
push eax
lea ecx, [ebp - 0xaf8]
call fcn.004116e0
mov dword [ebp - 0xab4], 1
mov dword [ebp - 0xab0], 1
mov dword [ebp - 0xaa8], 0
mov dword [ebp - 0xaa4], 0
mov dword [ebp - 0xaa0], 0xffffffff
mov dword [ebp - 0xa9c], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov byte [ebp - 4], 0x44
mov ecx, dword [ebp - 0x43c]
cmp ecx, 7
jbe 0x42996a
mov edx, dword [ebp - 0x450]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x429960
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
lea ecx, [ebp - 0xaf8]
movzx eax, byte [esi + 0x5c]
push eax
mov dword [ebp - 0x43c], 7
call fcn.004234a0
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPairCompressSize_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x218]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
jmp 0x4299e0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4299e0
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x45
push eax
lea ecx, [ebp - 0xa98]
call fcn.004116e0
mov dword [ebp - 0xa54], 0x64
mov dword [ebp - 0xa50], 0x64
mov dword [ebp - 0xa48], 0
mov dword [ebp - 0xa44], 0
mov dword [ebp - 0xa40], 0xffffffff
mov dword [ebp - 0xa3c], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov byte [ebp - 4], 0x47
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x429aaa
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x429aa0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
push dword [esi + 0x58]
xor eax, eax
mov dword [ebp - 0x428], 0
lea ecx, [ebp - 0xa98]
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
call fcn.004234a0
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncResetOriginalArchiveAttribute_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x218]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429b20
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x48
push eax
lea ecx, [ebp - 0xdf8]
call fcn.004116e0
mov dword [ebp - 0xdb4], 0
mov dword [ebp - 0xdb0], 0
mov dword [ebp - 0xda8], 0
mov dword [ebp - 0xda4], 0
mov dword [ebp - 0xda0], 0xffffffff
mov dword [ebp - 0xd9c], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x43c]
cmp ecx, 7
jbe 0x429bea
mov edx, dword [ebp - 0x450]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x429be0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
lea ecx, [ebp - 0xdf8]
movzx eax, byte [esi + 1]
push eax
mov dword [ebp - 0x43c], 7
call fcn.004234a0
push ebx
lea eax, [ebp - 0x218]
push str.SoftwareCryptSyncSyncPairEnabled_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x218]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
jmp 0x429c60
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429c60
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 1
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x4b
push eax
lea ecx, [ebp - 0xd98]
call fcn.004116e0
mov dword [ebp - 0xd54], 1
mov dword [ebp - 0xd50], 1
mov dword [ebp - 0xd48], 0
mov dword [ebp - 0xd44], 0
mov dword [ebp - 0xd40], 0xffffffff
mov dword [ebp - 0xd3c], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov byte [ebp - 4], 0x4d
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x429d2a
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x429d20
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
lea ecx, [ebp - 0xd98]
movzx eax, byte [esi]
push eax
mov dword [ebp - 0x424], 7
call fcn.004234a0
lea ecx, [ebp - 0xd78]
inc ebx
call fcn.00406970
lea ecx, [ebp - 0xd90]
call fcn.00406970
lea ecx, [ebp - 0xdd8]
call fcn.00406970
lea ecx, [ebp - 0xdf0]
call fcn.00406970
lea ecx, [ebp - 0xa78]
call fcn.00406970
lea ecx, [ebp - 0xa90]
call fcn.00406970
lea ecx, [ebp - 0xad8]
call fcn.00406970
lea ecx, [ebp - 0xaf0]
call fcn.00406970
lea ecx, [ebp - 0xb38]
call fcn.00406970
lea ecx, [ebp - 0xb50]
call fcn.00406970
lea ecx, [ebp - 0xb98]
call fcn.00406970
lea ecx, [ebp - 0xbb0]
call fcn.00406970
lea ecx, [ebp - 0xbf8]
call fcn.00406970
lea ecx, [ebp - 0xc10]
call fcn.00406970
lea ecx, [ebp - 0xc58]
call fcn.00406970
lea ecx, [ebp - 0xc70]
call fcn.00406970
lea ecx, [ebp - 0xcb8]
call fcn.00406970
lea ecx, [ebp - 0xcd0]
call fcn.00406970
lea ecx, [ebp - 0xd18]
call fcn.00406970
lea ecx, [ebp - 0xd30]
call fcn.00406970
lea ecx, [ebp - 0xe24]
call fcn.00406970
lea ecx, [ebp - 0xe3c]
call fcn.00406970
lea ecx, [ebp - 0xe60]
call fcn.00406970
lea ecx, [ebp - 0xe78]
call fcn.00406970
lea ecx, [ebp - 0xeac]
call fcn.00406970
lea ecx, [ebp - 0xec4]
call fcn.00406970
lea ecx, [ebp - 0xee8]
call fcn.00406970
lea ecx, [ebp - 0xf00]
call fcn.00406970
lea ecx, [ebp - 0xf34]
call fcn.00406970
lea ecx, [ebp - 0xf4c]
call fcn.00406970
lea ecx, [ebp - 0xf70]
call fcn.00406970
lea ecx, [ebp - 0xf88]
call fcn.00406970
lea ecx, [ebp - 0xfbc]
call fcn.00406970
lea ecx, [ebp - 0xfd4]
call fcn.00406970
lea ecx, [ebp - 0xff8]
call fcn.00406970
lea ecx, [ebp - 0x1010]
call fcn.00406970
lea ecx, [ebp - 0x1044]
call fcn.00406970
lea ecx, [ebp - 0x105c]
call fcn.00406970
lea ecx, [ebp - 0x1080]
call fcn.00406970
lea ecx, [ebp - 0x1098]
call fcn.00406970
lea ecx, [ebp - 0x10cc]
mov dword [ebp - 4], 0xffffffff
call fcn.00406970
lea ecx, [ebp - 0x10e4]
call fcn.00406970
lea ecx, [ebp - 0x1108]
call fcn.00406970
lea ecx, [ebp - 0x1120]
call fcn.00406970
add esi, 0xcc
cmp esi, dword [0x602d48]
jne 0x4283d0
cmp ebx, 0xc8
jge 0x42bd50
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
lea esp, [esp]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncSyncPairOrig_d
push eax
call fcn.0042c270
xor eax, eax
lea ecx, [ebp - 0x468]
add esp, 0xc
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
push eax
push 0x5c0630
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], eax
call fcn.004068c0
xor eax, eax
mov dword [ebp - 4], 0x4e
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x429ff2
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x4f
push eax
lea ecx, [ebp - 0x9d8]
call fcn.004116e0
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x50
push eax
lea ecx, [ebp - 0x994]
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8c8c
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0x97c]
call fcn.0040db30
mov dword [ebp - 0x960], 0
mov dword [ebp - 0x95c], 0
mov dword [ebp - 0x958], 0xffffffff
mov dword [ebp - 0x954], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8cac
lea ecx, [ebp - 0x450]
call fcn.00406970
mov byte [ebp - 4], 0x54
mov ecx, dword [ebp - 0x454]
cmp ecx, 7
jbe 0x42a0e9
mov edx, dword [ebp - 0x468]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42a0df
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
mov eax, dword [ebp - 0x99c]
or eax, 0x20006
mov byte [ebp - 0x996], 0
mov dword [ebp - 0x1130], eax
mov eax, dword [ebp - 0x9d8]
mov byte [ebp - 0x998], 1
mov dword [ebp - 0x112c], 0
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42a138
cmp dword [ebp - 0x9a4], 7
lea eax, [ebp - 0x9b8]
jbe 0x42a147
mov eax, dword [ebp - 0x9b8]
jmp 0x42a147
lea ecx, [ebp - 0x9b8]
push ecx
lea ecx, [ebp - 0x9d8]
call eax
lea ecx, [ebp - 0x112c]
push ecx
push dword [ebp - 0x1130]
push 0
push eax
push dword [ebp - 0x9d4]
call edi
mov eax, dword [ebp - 0x9d8]
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42a185
cmp dword [ebp - 0x9bc], 7
lea eax, [ebp - 0x9d0]
jbe 0x42a194
mov eax, dword [ebp - 0x9d0]
jmp 0x42a194
lea ecx, [ebp - 0x9d0]
push ecx
lea ecx, [ebp - 0x9d8]
call eax
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncSyncPairCrypt_d
push eax
call fcn.0042c270
xor eax, eax
lea ecx, [ebp - 0x468]
add esp, 0xc
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
push eax
push 0x5c0630
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], eax
call fcn.004068c0
xor eax, eax
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
jmp 0x42a230
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42a230
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x56
push eax
lea ecx, [ebp - 0x730]
call fcn.004116e0
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x57
push eax
lea ecx, [ebp - 0x6ec]
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8c8c
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x58
push eax
lea ecx, [ebp - 0x6d4]
call fcn.0040db30
mov dword [ebp - 0x6b8], 0
mov dword [ebp - 0x6b4], 0
mov dword [ebp - 0x6b0], 0xffffffff
mov dword [ebp - 0x6ac], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8cac
mov byte [ebp - 4], 0x5a
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x42a31c
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42a312
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
mov byte [ebp - 4], 0x5b
mov ecx, dword [ebp - 0x454]
cmp ecx, 7
jbe 0x42a37d
mov edx, dword [ebp - 0x468]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42a373
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
mov eax, dword [ebp - 0x6f4]
or eax, 0x20006
mov byte [ebp - 0x6ee], 0
mov dword [ebp - 0x1130], eax
mov eax, dword [ebp - 0x730]
mov byte [ebp - 0x6f0], 1
mov dword [ebp - 0x112c], 0
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42a3cc
cmp dword [ebp - 0x6fc], 7
lea eax, [ebp - 0x710]
jbe 0x42a3db
mov eax, dword [ebp - 0x710]
jmp 0x42a3db
lea ecx, [ebp - 0x710]
push ecx
lea ecx, [ebp - 0x730]
call eax
lea ecx, [ebp - 0x112c]
push ecx
push dword [ebp - 0x1130]
push 0
push eax
push dword [ebp - 0x72c]
call edi
mov eax, dword [ebp - 0x730]
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42a419
cmp dword [ebp - 0x714], 7
lea eax, [ebp - 0x728]
jbe 0x42a428
mov eax, dword [ebp - 0x728]
jmp 0x42a428
lea ecx, [ebp - 0x728]
push ecx
lea ecx, [ebp - 0x730]
call eax
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncSyncPairPass_d
push eax
call fcn.0042c270
xor eax, eax
lea ecx, [ebp - 0x468]
add esp, 0xc
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
push eax
push 0x5c0630
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], eax
call fcn.004068c0
xor eax, eax
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42a4c0
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x5d
push eax
lea ecx, [ebp - 0x7b8]
call fcn.004116e0
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x5e
push eax
lea ecx, [ebp - 0x774]
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8c8c
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x5f
push eax
lea ecx, [ebp - 0x75c]
call fcn.0040db30
mov dword [ebp - 0x740], 0
mov dword [ebp - 0x73c], 0
mov dword [ebp - 0x738], 0xffffffff
mov dword [ebp - 0x734], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8cac
mov byte [ebp - 4], 0x61
mov ecx, dword [ebp - 0x43c]
cmp ecx, 7
jbe 0x42a5ac
mov edx, dword [ebp - 0x450]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42a5a2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 7
mov word [ebp - 0x450], ax
mov byte [ebp - 4], 0x62
mov ecx, dword [ebp - 0x454]
cmp ecx, 7
jbe 0x42a60d
mov edx, dword [ebp - 0x468]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42a603
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
mov eax, dword [ebp - 0x77c]
or eax, 0x20006
mov byte [ebp - 0x776], 0
mov dword [ebp - 0x1130], eax
mov eax, dword [ebp - 0x7b8]
mov byte [ebp - 0x778], 1
mov dword [ebp - 0x112c], 0
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42a65c
cmp dword [ebp - 0x784], 7
lea eax, [ebp - 0x798]
jbe 0x42a66b
mov eax, dword [ebp - 0x798]
jmp 0x42a66b
lea ecx, [ebp - 0x798]
push ecx
lea ecx, [ebp - 0x7b8]
call eax
lea ecx, [ebp - 0x112c]
push ecx
push dword [ebp - 0x1130]
push 0
push eax
push dword [ebp - 0x7b4]
call edi
mov eax, dword [ebp - 0x7b8]
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42a6a9
cmp dword [ebp - 0x79c], 7
lea eax, [ebp - 0x7b0]
jbe 0x42a6b8
mov eax, dword [ebp - 0x7b0]
jmp 0x42a6b8
lea ecx, [ebp - 0x7b0]
push ecx
lea ecx, [ebp - 0x7b8]
call eax
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncSyncPairCryptOnly_d
push eax
call fcn.0042c270
xor eax, eax
lea ecx, [ebp - 0x468]
add esp, 0xc
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
push eax
push 0x5c0630
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], eax
call fcn.004068c0
xor eax, eax
mov byte [ebp - 4], 0x63
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42a750
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x64
push eax
lea ecx, [ebp - 0x840]
call fcn.004116e0
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x65
push eax
lea ecx, [ebp - 0x7fc]
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8c8c
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x66
push eax
lea ecx, [ebp - 0x7e4]
call fcn.0040db30
mov dword [ebp - 0x7c8], 0
mov dword [ebp - 0x7c4], 0
mov dword [ebp - 0x7c0], 0xffffffff
mov dword [ebp - 0x7bc], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8cac
mov byte [ebp - 4], 0x68
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x42a83c
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42a832
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
mov byte [ebp - 4], 0x69
mov ecx, dword [ebp - 0x454]
cmp ecx, 7
jbe 0x42a89d
mov edx, dword [ebp - 0x468]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42a893
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
mov eax, dword [ebp - 0x804]
or eax, 0x20006
mov byte [ebp - 0x7fe], 0
mov dword [ebp - 0x1130], eax
mov eax, dword [ebp - 0x840]
mov byte [ebp - 0x800], 1
mov dword [ebp - 0x112c], 0
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42a8ec
cmp dword [ebp - 0x80c], 7
lea eax, [ebp - 0x820]
jbe 0x42a8fb
mov eax, dword [ebp - 0x820]
jmp 0x42a8fb
lea ecx, [ebp - 0x820]
push ecx
lea ecx, [ebp - 0x840]
call eax
lea ecx, [ebp - 0x112c]
push ecx
push dword [ebp - 0x1130]
push 0
push eax
push dword [ebp - 0x83c]
call edi
mov eax, dword [ebp - 0x840]
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42a939
cmp dword [ebp - 0x824], 7
lea eax, [ebp - 0x838]
jbe 0x42a948
mov eax, dword [ebp - 0x838]
jmp 0x42a948
lea ecx, [ebp - 0x838]
push ecx
lea ecx, [ebp - 0x840]
call eax
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncSyncPairCopyOnly_d
push eax
call fcn.0042c270
xor eax, eax
lea ecx, [ebp - 0x468]
add esp, 0xc
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
push eax
push 0x5c0630
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], eax
call fcn.004068c0
xor eax, eax
mov byte [ebp - 4], 0x6a
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42a9e0
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x6b
push eax
lea ecx, [ebp - 0x8c8]
call fcn.004116e0
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x6c
push eax
lea ecx, [ebp - 0x884]
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8c8c
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x6d
push eax
lea ecx, [ebp - 0x86c]
call fcn.0040db30
mov dword [ebp - 0x850], 0
mov dword [ebp - 0x84c], 0
mov dword [ebp - 0x848], 0xffffffff
mov dword [ebp - 0x844], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8cac
mov byte [ebp - 4], 0x6f
mov ecx, dword [ebp - 0x43c]
cmp ecx, 7
jbe 0x42aacc
mov edx, dword [ebp - 0x450]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42aac2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov dword [ebp - 0x43c], 7
mov word [ebp - 0x450], ax
mov byte [ebp - 4], 0x70
mov ecx, dword [ebp - 0x454]
cmp ecx, 7
jbe 0x42ab2d
mov edx, dword [ebp - 0x468]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42ab23
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
mov eax, dword [ebp - 0x88c]
or eax, 0x20006
mov byte [ebp - 0x886], 0
mov dword [ebp - 0x1130], eax
mov eax, dword [ebp - 0x8c8]
mov byte [ebp - 0x888], 1
mov dword [ebp - 0x112c], 0
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42ab7c
cmp dword [ebp - 0x894], 7
lea eax, [ebp - 0x8a8]
jbe 0x42ab8b
mov eax, dword [ebp - 0x8a8]
jmp 0x42ab8b
lea ecx, [ebp - 0x8a8]
push ecx
lea ecx, [ebp - 0x8c8]
call eax
lea ecx, [ebp - 0x112c]
push ecx
push dword [ebp - 0x1130]
push 0
push eax
push dword [ebp - 0x8c4]
call edi
mov eax, dword [ebp - 0x8c8]
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42abc9
cmp dword [ebp - 0x8ac], 7
lea eax, [ebp - 0x8c0]
jbe 0x42abd8
mov eax, dword [ebp - 0x8c0]
jmp 0x42abd8
lea ecx, [ebp - 0x8c0]
push ecx
lea ecx, [ebp - 0x8c8]
call eax
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncSyncPairNoSync_d
push eax
call fcn.0042c270
xor eax, eax
lea ecx, [ebp - 0x468]
add esp, 0xc
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], eax
push eax
push 0x5c0630
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x454], eax
call fcn.004068c0
xor eax, eax
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
lea edx, [ecx + 2]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42ac70
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x72
push eax
lea ecx, [ebp - 0x950]
call fcn.004116e0
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x73
push eax
lea ecx, [ebp - 0x90c]
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8c8c
call fcn.0040db30
lea eax, [ebp - 0x468]
mov byte [ebp - 4], 0x74
push eax
lea ecx, [ebp - 0x8f4]
call fcn.0040db30
mov dword [ebp - 0x8d8], 0
mov dword [ebp - 0x8d4], 0
mov dword [ebp - 0x8d0], 0xffffffff
mov dword [ebp - 0x8cc], 0
mov dword [ebp - method.CRegDWORDCommon_class_CRegStdBase_.virtual_0], 0x5c8cac
mov byte [ebp - 4], 0x76
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x42ad5c
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42ad52
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
mov byte [ebp - 4], 0x77
mov ecx, dword [ebp - 0x454]
cmp ecx, 7
jbe 0x42adbd
mov edx, dword [ebp - 0x468]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42adb3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
add esp, 8
mov eax, dword [ebp - 0x914]
or eax, 0x20006
mov byte [ebp - 0x90e], 0
mov dword [ebp - 0x1130], eax
mov eax, dword [ebp - 0x950]
mov byte [ebp - 0x910], 1
mov dword [ebp - 0x112c], 0
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42ae0c
cmp dword [ebp - 0x91c], 7
lea eax, [ebp - 0x930]
jbe 0x42ae1b
mov eax, dword [ebp - 0x930]
jmp 0x42ae1b
lea ecx, [ebp - 0x930]
push ecx
lea ecx, [ebp - 0x950]
call eax
lea ecx, [ebp - 0x112c]
push ecx
push dword [ebp - 0x1130]
push 0
push eax
push dword [ebp - 0x94c]
call edi
mov eax, dword [ebp - 0x950]
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42ae59
cmp dword [ebp - 0x934], 7
lea eax, [ebp - 0x948]
jbe 0x42ae68
mov eax, dword [ebp - 0x948]
jmp 0x42ae68
lea ecx, [ebp - 0x948]
push ecx
lea ecx, [ebp - 0x950]
call eax
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncSyncPairEncnames_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x420]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42aec1
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x78
push eax
lea ecx, [ebp - 0x6a8]
call fcn.004116e0
mov ecx, vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov dword [ebp - 0x664], 0
mov dword [ebp - 0x660], 0
mov dword [ebp - 0x658], 0
mov dword [ebp - 0x654], 0
mov dword [ebp - 0x650], 0xffffffff
mov dword [ebp - 0x64c], 0
mov dword [ebp - 0x6a8], ecx
mov byte [ebp - 4], 0x7a
mov eax, dword [ebp - 0x43c]
cmp eax, 7
jbe 0x42af92
mov edx, dword [ebp - 0x450]
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42af82
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
mov ecx, dword [ebp - 0x6a8]
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
mov byte [ebp - 0x666], al
mov dword [ebp - 0x112c], eax
mov eax, dword [ebp - 0x66c]
or eax, 0x20006
mov dword [ebp - 0x43c], 7
mov dword [ebp - 0x1130], eax
mov eax, dword [ecx]
mov byte [ebp - 0x668], 1
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42aff3
cmp dword [ebp - 0x674], 7
lea eax, [ebp - 0x688]
jbe 0x42b002
mov eax, dword [ebp - 0x688]
jmp 0x42b002
lea ecx, [ebp - 0x688]
push ecx
lea ecx, [ebp - 0x6a8]
call eax
lea ecx, [ebp - 0x112c]
push ecx
push dword [ebp - 0x1130]
push 0
push eax
push dword [ebp - 0x6a4]
call edi
mov eax, dword [ebp - 0x6a8]
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42b040
cmp dword [ebp - 0x68c], 7
lea eax, [ebp - 0x6a0]
jbe 0x42b04f
mov eax, dword [ebp - 0x6a0]
jmp 0x42b04f
lea ecx, [ebp - 0x6a0]
push ecx
lea ecx, [ebp - 0x6a8]
call eax
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncSyncPairOneWay_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x420]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
jmp 0x42b0b0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42b0b0
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x7b
push eax
lea ecx, [ebp - 0x648]
call fcn.004116e0
mov ecx, vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov dword [ebp - 0x604], 0
mov dword [ebp - 0x600], 0
mov dword [ebp - 0x5f8], 0
mov dword [ebp - 0x5f4], 0
mov dword [ebp - 0x5f0], 0xffffffff
mov dword [ebp - 0x5ec], 0
mov dword [ebp - 0x648], ecx
mov byte [ebp - 4], 0x7d
mov eax, dword [ebp - 0x424]
cmp eax, 7
jbe 0x42b181
mov edx, dword [ebp - 0x438]
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42b171
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
mov ecx, dword [ebp - 0x648]
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
mov byte [ebp - 0x606], al
mov dword [ebp - 0x112c], eax
mov eax, dword [ebp - 0x60c]
or eax, 0x20006
mov dword [ebp - 0x424], 7
mov dword [ebp - 0x1130], eax
mov eax, dword [ecx]
mov byte [ebp - 0x608], 1
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42b1e2
cmp dword [ebp - 0x614], 7
lea eax, [ebp - 0x628]
jbe 0x42b1f1
mov eax, dword [ebp - 0x628]
jmp 0x42b1f1
lea ecx, [ebp - 0x628]
push ecx
lea ecx, [ebp - 0x648]
call eax
lea ecx, [ebp - 0x112c]
push ecx
push dword [ebp - 0x1130]
push 0
push eax
push dword [ebp - 0x644]
call edi
mov eax, dword [ebp - 0x648]
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42b22f
cmp dword [ebp - 0x62c], 7
lea eax, [ebp - 0x640]
jbe 0x42b23e
mov eax, dword [ebp - 0x640]
jmp 0x42b23e
lea ecx, [ebp - 0x640]
push ecx
lea ecx, [ebp - 0x648]
call eax
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncSyncPair7zExt_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x420]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42b297
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x7e
push eax
lea ecx, [ebp - 0x5e8]
call fcn.004116e0
mov ecx, vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov dword [ebp - 0x5a4], 0
mov dword [ebp - 0x5a0], 0
mov dword [ebp - 0x598], 0
mov dword [ebp - 0x594], 0
mov dword [ebp - 0x590], 0xffffffff
mov dword [ebp - 0x58c], 0
mov dword [ebp - 0x5e8], ecx
mov byte [ebp - 4], 0x80
mov eax, dword [ebp - 0x43c]
cmp eax, 7
jbe 0x42b368
mov edx, dword [ebp - 0x450]
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42b358
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
mov ecx, dword [ebp - 0x5e8]
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
mov byte [ebp - 0x5a6], al
mov dword [ebp - 0x112c], eax
mov eax, dword [ebp - 0x5ac]
or eax, 0x20006
mov dword [ebp - 0x43c], 7
mov dword [ebp - 0x1130], eax
mov eax, dword [ecx]
mov byte [ebp - 0x5a8], 1
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42b3c9
cmp dword [ebp - 0x5b4], 7
lea eax, [ebp - 0x5c8]
jbe 0x42b3d8
mov eax, dword [ebp - 0x5c8]
jmp 0x42b3d8
lea ecx, [ebp - 0x5c8]
push ecx
lea ecx, [ebp - 0x5e8]
call eax
lea ecx, [ebp - 0x112c]
push ecx
push dword [ebp - 0x1130]
push 0
push eax
push dword [ebp - 0x5e4]
call edi
mov eax, dword [ebp - 0x5e8]
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42b416
cmp dword [ebp - 0x5cc], 7
lea eax, [ebp - 0x5e0]
jbe 0x42b425
mov eax, dword [ebp - 0x5e0]
jmp 0x42b425
lea ecx, [ebp - 0x5e0]
push ecx
lea ecx, [ebp - 0x5e8]
call eax
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncUseGPG_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x420]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42b480
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x81
push eax
lea ecx, [ebp - 0xa38]
call fcn.004116e0
mov eax, vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov dword [ebp - 0x9f4], 0
mov dword [ebp - 0x9f0], 0
mov dword [ebp - 0x9e8], 0
mov dword [ebp - 0x9e4], 0
mov dword [ebp - 0x9e0], 0xffffffff
mov dword [ebp - 0x9dc], 0
mov dword [ebp - 0xa38], eax
mov byte [ebp - 4], 0x83
mov ecx, dword [ebp - 0x424]
cmp ecx, 7
jbe 0x42b551
mov edx, dword [ebp - 0x438]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42b541
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
mov eax, dword [ebp - 0xa38]
add esp, 8
mov esi, dword [ebp - 0x9fc]
xor ecx, ecx
mov word [ebp - 0x438], cx
or esi, 0x20006
mov byte [ebp - 0x9f6], cl
mov dword [ebp - 0x112c], ecx
lea ecx, [ebp - 0xa18]
push ecx
lea ecx, [ebp - 0xa38]
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x424], 7
mov byte [ebp - 0x9f8], 1
call dword [eax]
lea ecx, [ebp - 0x112c]
push ecx
push esi
push 0
push eax
push dword [ebp - 0xa34]
call edi
mov eax, dword [ebp - 0xa38]
lea ecx, [ebp - 0xa30]
push ecx
lea ecx, [ebp - 0xa38]
call dword [eax]
mov esi, dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncSyncDeleted_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x420]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42b623
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x84
push eax
lea ecx, [ebp - 0x588]
call fcn.004116e0
mov ecx, vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x540], 0
mov dword [ebp - 0x538], 0
mov dword [ebp - 0x534], 0
mov dword [ebp - 0x530], 0xffffffff
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x588], ecx
mov byte [ebp - 4], 0x86
mov eax, dword [ebp - 0x43c]
cmp eax, 7
jbe 0x42b6f4
mov edx, dword [ebp - 0x450]
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42b6e4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
mov ecx, dword [ebp - 0x588]
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
mov byte [ebp - 0x546], al
mov dword [ebp - 0x112c], eax
mov eax, dword [ebp - 0x54c]
or eax, 0x20006
mov dword [ebp - 0x43c], 7
mov dword [ebp - 0x1130], eax
mov eax, dword [ecx]
mov byte [ebp - 0x548], 1
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42b755
cmp dword [ebp - 0x554], 7
lea eax, [ebp - 0x568]
jbe 0x42b764
mov eax, dword [ebp - 0x568]
jmp 0x42b764
lea ecx, [ebp - 0x568]
push ecx
lea ecx, [ebp - 0x588]
call eax
lea ecx, [ebp - 0x112c]
push ecx
push dword [ebp - 0x1130]
push 0
push eax
push dword [ebp - 0x584]
call edi
mov eax, dword [ebp - 0x588]
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42b7a2
cmp dword [ebp - 0x56c], 7
lea eax, [ebp - 0x580]
jbe 0x42b7b1
mov eax, dword [ebp - 0x580]
jmp 0x42b7b1
lea ecx, [ebp - 0x580]
push ecx
lea ecx, [ebp - 0x588]
call eax
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncSyncPairFAT_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x420]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x424], eax
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42b810
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0x87
push eax
lea ecx, [ebp - 0x528]
call fcn.004116e0
mov ecx, vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov dword [ebp - 0x4e4], 0
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x4d0], 0xffffffff
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0x528], ecx
mov byte [ebp - 4], 0x89
mov eax, dword [ebp - 0x424]
cmp eax, 7
jbe 0x42b8e1
mov edx, dword [ebp - 0x438]
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42b8d1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
mov ecx, dword [ebp - 0x528]
add esp, 8
xor eax, eax
mov dword [ebp - 0x428], 0
mov word [ebp - 0x438], ax
mov byte [ebp - 0x4e6], al
mov dword [ebp - 0x112c], eax
mov eax, dword [ebp - 0x4ec]
or eax, 0x20006
mov dword [ebp - 0x424], 7
mov dword [ebp - 0x1130], eax
mov eax, dword [ecx]
mov byte [ebp - 0x4e8], 1
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42b942
cmp dword [ebp - 0x4f4], 7
lea eax, [ebp - 0x508]
jbe 0x42b951
mov eax, dword [ebp - 0x508]
jmp 0x42b951
lea ecx, [ebp - 0x508]
push ecx
lea ecx, [ebp - 0x528]
call eax
lea ecx, [ebp - 0x112c]
push ecx
push dword [ebp - 0x1130]
push 0
push eax
push dword [ebp - 0x524]
call edi
mov eax, dword [ebp - 0x528]
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42b98f
cmp dword [ebp - 0x50c], 7
lea eax, [ebp - 0x520]
jbe 0x42b99e
mov eax, dword [ebp - 0x520]
jmp 0x42b99e
lea ecx, [ebp - 0x520]
push ecx
lea ecx, [ebp - 0x528]
call eax
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
lea eax, [ebp - 0x420]
push str.SoftwareCryptSyncSyncPairCompressSize_d
push eax
call fcn.0042c270
add esp, 0xc
lea ecx, [ebp - 0x420]
xor eax, eax
lea edx, [ecx + 2]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x44c], eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x42b9f7
sub ecx, edx
lea eax, [ebp - 0x420]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x450]
call fcn.004068c0
push ecx
push SysReAllocString
push 0
lea eax, [ebp - 0x450]
mov byte [ebp - 4], 0x8a
push eax
lea ecx, [ebp - 0x4c8]
call fcn.004116e0
mov ecx, vtable.CRegDWORDCommon_class_CRegStdBase_.0
mov dword [ebp - 0x484], 0
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x474], 0
mov dword [ebp - 0x470], 0xffffffff
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x4c8], ecx
mov byte [ebp - 4], 0x8c
mov eax, dword [ebp - 0x43c]
cmp eax, 7
jbe 0x42bac8
mov edx, dword [ebp - 0x450]
lea ecx, [eax*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42bab8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42bd6c
push ecx
push edx
call fcn.00587dca
mov ecx, dword [ebp - 0x4c8]
add esp, 8
xor eax, eax
mov dword [ebp - 0x440], 0
mov word [ebp - 0x450], ax
mov byte [ebp - 0x486], al
mov dword [ebp - 0x112c], eax
mov eax, dword [ebp - 0x48c]
or eax, 0x20006
mov dword [ebp - 0x43c], 7
mov dword [ebp - 0x1130], eax
mov eax, dword [ecx]
mov byte [ebp - 0x488], 1
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42bb29
cmp dword [ebp - 0x494], 7
lea eax, [ebp - 0x4a8]
jbe 0x42bb38
mov eax, dword [ebp - 0x4a8]
jmp 0x42bb38
lea ecx, [ebp - 0x4a8]
push ecx
lea ecx, [ebp - 0x4c8]
call eax
lea ecx, [ebp - 0x112c]
push ecx
push dword [ebp - 0x1130]
push 0
push eax
push dword [ebp - 0x4c4]
call edi
mov eax, dword [ebp - 0x4c8]
mov eax, dword [eax]
cmp eax, method.CRegDWORDCommon_class_CRegStdBase_.virtual_0
jne 0x42bb76
cmp dword [ebp - 0x4ac], 7
lea eax, [ebp - 0x4c0]
jbe 0x42bb85
mov eax, dword [ebp - 0x4c0]
jmp 0x42bb85
lea ecx, [ebp - 0x4c0]
push ecx
lea ecx, [ebp - 0x4c8]
call eax
push eax
push dword [ebp - 0x112c]
call esi
push dword [ebp - 0x112c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x4a8]
inc ebx
call fcn.00406970
lea ecx, [ebp - 0x4c0]
call fcn.00406970
lea ecx, [ebp - 0x508]
call fcn.00406970
lea ecx, [ebp - 0x520]
call fcn.00406970
lea ecx, [ebp - 0x568]
call fcn.00406970
lea ecx, [ebp - 0x580]
call fcn.00406970
lea ecx, [ebp - 0xa18]
call fcn.00406970
lea ecx, [ebp - 0xa30]
call fcn.00406970
lea ecx, [ebp - 0x5c8]
call fcn.00406970
lea ecx, [ebp - 0x5e0]
call fcn.00406970
lea ecx, [ebp - 0x628]
call fcn.00406970
lea ecx, [ebp - 0x640]
call fcn.00406970
lea ecx, [ebp - 0x688]
call fcn.00406970
lea ecx, [ebp - 0x6a0]
call fcn.00406970
lea ecx, [ebp - 0x8f4]
call fcn.00406970
lea ecx, [ebp - 0x90c]
call fcn.00406970
lea ecx, [ebp - 0x930]
call fcn.00406970
lea ecx, [ebp - 0x948]
call fcn.00406970
lea ecx, [ebp - 0x86c]
call fcn.00406970
lea ecx, [ebp - 0x884]
call fcn.00406970
lea ecx, [ebp - 0x8a8]
call fcn.00406970
lea ecx, [ebp - 0x8c0]
call fcn.00406970
lea ecx, [ebp - 0x7e4]
call fcn.00406970
lea ecx, [ebp - 0x7fc]
call fcn.00406970
lea ecx, [ebp - 0x820]
call fcn.00406970
lea ecx, [ebp - 0x838]
call fcn.00406970
lea ecx, [ebp - 0x75c]
call fcn.00406970
lea ecx, [ebp - 0x774]
call fcn.00406970
lea ecx, [ebp - 0x798]
call fcn.00406970
lea ecx, [ebp - 0x7b0]
call fcn.00406970
lea ecx, [ebp - 0x6d4]
call fcn.00406970
lea ecx, [ebp - 0x6ec]
call fcn.00406970
lea ecx, [ebp - 0x710]
call fcn.00406970
lea ecx, [ebp - 0x728]
call fcn.00406970
lea ecx, [ebp - 0x97c]
mov dword [ebp - 4], 0xffffffff
call fcn.00406970
lea ecx, [ebp - 0x994]
call fcn.00406970
lea ecx, [ebp - 0x9b8]
call fcn.00406970
lea ecx, [ebp - 0x9d0]
call fcn.00406970
cmp ebx, 0xc8
jl 0x429f70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00587d99
mov esp, ebp
pop ebp
ret
call fcn.0058e18a
int3