Function at 0x4797ee
Capabilities:
Check if file exists
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x56e7e0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x41490
call fcn.005374e0
push esi
push 0
mov eax, dword [0x5c3074]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x479828
jmp 0x47b655
call fcn.0055f60b
mov ecx, dword [eax + 4]
mov dword [ebp - 0x410a8], ecx
lea edx, [ebp - 0x28]
mov dword [ebp - 0x41264], edx
mov eax, dword [ebp - 0x41264]
mov ecx, dword [0x5be480]
mov dword [eax], ecx
lea edx, [ebp - 0x24]
mov dword [ebp - 0x41268], edx
mov eax, dword [ebp - 0x41268]
mov ecx, dword [0x5be480]
mov dword [eax], ecx
lea edx, [ebp - 0x20]
mov dword [ebp - 0x4126c], edx
mov eax, dword [ebp - 0x4126c]
mov ecx, dword [0x5be480]
mov dword [eax], ecx
lea edx, [ebp - 0x1c]
mov dword [ebp - 0x41270], edx
mov eax, dword [ebp - 0x41270]
mov ecx, dword [0x5be480]
mov dword [eax], ecx
lea edx, [ebp - 0x14]
mov dword [ebp - 0x41274], edx
mov eax, dword [ebp - 0x41274]
mov ecx, dword [0x5be480]
mov dword [eax], ecx
mov dword [ebp - 4], 0
push 0x5b175c
push 0x9a
mov ecx, dword [0x5c3070]
add ecx, 0x1338
call fcn.004b6118
test eax, eax
je 0x4798e0
mov ecx, dword [0x5c3070]
add ecx, 0x1338
call fcn.004b5e28
push 0x5b1764
mov ecx, dword [0x5c3070]
add ecx, 0x1870
call fcn.00551562
lea ecx, [ebp - 0x4109c]
call fcn.004e70a0
mov byte [ebp - 4], 1
push 0x5b1768
lea ecx, [ebp - 0x410a4]
call fcn.0054d39c
mov byte [ebp - 4], 2
mov dword [ebp - 0x410a0], 1
mov edx, dword [0x5be480]
mov dword [ebp - 0x10], edx
mov byte [ebp - 4], 3
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x4115c], esp
lea eax, [ebp - 0x410a4]
push eax
call fcn.0054d095
mov dword [ebp - 0x412d0], eax
push SysReAllocStringLen
lea ecx, [ebp - 0x4109c]
call fcn.004e75e4
mov dword [ebp - 0x412d4], eax
cmp dword [ebp - 0x412d4], 0
je 0x47a577
lea ecx, [ebp - 0x410bc]
call fcn.0054c3ab
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x410bc]
push ecx
lea ecx, [ebp - 0x4109c]
call fcn.004e7dd7
mov edx, dword [ebp - 0x410b4]
mov dword [ebp - 0x410c0], edx
mov dword [ebp - 0x410c4], 0
jmp 0x4799ba
mov eax, dword [ebp - 0x410c4]
add eax, 1
mov dword [ebp - 0x410c4], eax
mov ecx, dword [ebp - 0x410c4]
cmp ecx, dword [ebp - 0x410c0]
jge 0x47a568
push 0
mov edx, dword [0x5c3074]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x479a63
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x410bc]
call fcn.0054c3de
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x410a4]
call fcn.0054d328
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4109c]
call fcn.004e71cb
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x14]
call fcn.0054d328
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1c]
call fcn.0054d328
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x20]
call fcn.0054d328
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x24]
call fcn.0054d328
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.0054d328
jmp 0x47b655
lea eax, [ebp - 0x410a4]
push eax
lea ecx, [ebp - 0x410c8]
call fcn.0054d095
mov byte [ebp - 4], 9
push 0x5b17f8
lea ecx, [ebp - 0x410c8]
call fcn.0054d719
mov ecx, dword [ebp - 0x410c4]
push ecx
lea edx, [ebp - 0x41160]
push edx
lea ecx, [ebp - 0x410bc]
call fcn.00419890
mov dword [ebp - 0x412d8], eax
mov eax, dword [ebp - 0x412d8]
mov dword [ebp - 0x412dc], eax
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x412dc]
push ecx
lea ecx, [ebp - 0x410c8]
call fcn.0054d755
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x41160]
call fcn.0054d328
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41164], esp
lea edx, [ebp - 0x410c8]
push edx
call fcn.0054d095
mov dword [ebp - 0x412e0], eax
push SysReAllocStringLen
lea ecx, [ebp - 0x4109c]
call fcn.004e75e4
mov dword [ebp - 0x412e4], eax
cmp dword [ebp - 0x412e4], 0
je 0x47a554
mov eax, dword [ebp - 0x104c]
mov dword [ebp - 0x41278], eax
mov ecx, dword [ebp - 0x410c8]
push ecx
mov edx, dword [ebp - 0x41278]
push edx
lea eax, [ebp - 0x41168]
push eax
call fcn.00485900
add esp, 8
mov dword [ebp - 0x412e8], eax
mov ecx, dword [ebp - 0x412e8]
mov dword [ebp - 0x412ec], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x412ec]
mov eax, dword [edx]
push eax
push 0x5b17fc
lea ecx, [ebp - 0x10]
push ecx
call fcn.0054ab7c
add esp, 0x10
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x41168]
call fcn.0054d328
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [0x5c3070]
add ecx, 0xb14
call fcn.00551562
lea ecx, [ebp - 0x410dc]
call fcn.0054c3ab
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x410dc]
push eax
lea ecx, [ebp - 0x4109c]
call fcn.004e9b9e
mov ecx, dword [ebp - 0x410d4]
mov dword [ebp - 0x410e0], ecx
cmp dword [ebp - 0x410e0], 0
jle 0x47a230
mov dword [ebp - 0x410e4], 0
jmp 0x479bed
mov edx, dword [ebp - 0x410e4]
add edx, 1
mov dword [ebp - 0x410e4], edx
mov eax, dword [ebp - 0x410e4]
cmp eax, dword [ebp - 0x410e0]
jge 0x47a22b
mov ecx, dword [ebp - 0x410e4]
push ecx
lea edx, [ebp - 0x410e8]
push edx
lea ecx, [ebp - 0x410dc]
call fcn.00419890
mov byte [ebp - 4], 0xd
mov eax, dword [ebp - 0x410e8]
mov ecx, dword [eax - 8]
mov dword [ebp - 0x4127c], ecx
cmp dword [ebp - 0x4127c], 0
je 0x47a217
push str.MRUList
mov edx, dword [ebp - 0x410e8]
push edx
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41280], eax
xor eax, eax
cmp dword [ebp - 0x41280], 0
setne al
and eax, 0xff
test eax, eax
je 0x47a217
mov dword [ebp - 0x410ec], 0
lea ecx, [ebp - 0x410ec]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x4116c], esp
lea edx, [ebp - 0x410e8]
push edx
call fcn.0054d095
mov dword [ebp - 0x412f0], eax
lea ecx, [ebp - 0x4109c]
call fcn.004e99fe
mov dword [ebp - 0x412f4], eax
mov eax, dword [ebp - 0x412f4]
mov dword [ebp - 0x410f0], eax
cmp dword [ebp - 0x410f0], 1
jne 0x47a217
mov ecx, dword [0x5be480]
mov dword [ebp - 0x410f8], ecx
mov byte [ebp - 4], 0xe
mov edx, dword [0x5be480]
mov dword [ebp - 0x410f4], edx
mov byte [ebp - 4], 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0x41170], esp
push 0x5b1818
call fcn.0054d39c
mov dword [ebp - 0x412f8], eax
mov eax, dword [ebp - 0x412f8]
mov dword [ebp - 0x412fc], eax
mov byte [ebp - 4], 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x41174], esp
lea edx, [ebp - 0x410e8]
push edx
call fcn.0054d095
mov dword [ebp - 0x41300], eax
lea eax, [ebp - 0x41178]
push eax
lea ecx, [ebp - 0x4109c]
mov byte [ebp - 4], 0xf
call fcn.00425c70
mov dword [ebp - 0x41304], eax
mov ecx, dword [ebp - 0x41304]
mov dword [ebp - 0x41308], ecx
mov byte [ebp - 4], 0x11
mov edx, dword [ebp - 0x41308]
push edx
lea ecx, [ebp - 0x410f8]
call fcn.0054d46f
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x41178]
call fcn.0054d328
push 0x5b1820
mov eax, dword [ebp - 0x410f8]
push eax
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x41284], eax
xor ecx, ecx
cmp dword [ebp - 0x41284], 0
setne cl
and ecx, 0xff
test ecx, ecx
je 0x47a1f9
mov edx, dword [ebp - 0x410f8]
mov eax, dword [edx - 8]
mov dword [ebp - 0x41288], eax
cmp dword [ebp - 0x41288], 0
je 0x47a1f9
mov ecx, dword [0x5be480]
mov dword [ebp - 0x410fc], ecx
mov byte [ebp - 4], 0x12
lea edx, [ebp - 0x410f8]
push edx
lea ecx, [ebp - 0x410fc]
call fcn.004b257a
push 0x21f
lea ecx, [ebp - 0x410fc]
call fcn.004b204a
mov eax, dword [ebp - 0x410fc]
push eax
lea ecx, [ebp - 0x410f8]
call fcn.0054d4bf
push ecx
mov esi, esp
mov dword [ebp - 0x4117c], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x41180], esp
push 0x5b1828
call fcn.0054d39c
mov dword [ebp - 0x4130c], eax
mov ecx, dword [ebp - 0x4130c]
mov dword [ebp - 0x41310], ecx
mov byte [ebp - 4], 0x13
push ecx
mov ecx, esp
mov dword [ebp - 0x41184], esp
lea edx, [ebp - 0x410e8]
push edx
call fcn.0054d095
mov dword [ebp - 0x41314], eax
push esi
lea ecx, [ebp - 0x4109c]
mov byte [ebp - 4], 0x12
call fcn.00425c70
mov dword [ebp - 0x41318], eax
mov eax, dword [ebp - 0x41318]
mov dword [ebp - 0x4131c], eax
mov byte [ebp - 4], 0x14
push ecx
mov ecx, esp
mov dword [ebp - 0x41188], esp
lea edx, [ebp - 0x410e8]
push edx
call fcn.0054d095
mov dword [ebp - 0x41320], eax
mov eax, dword [ebp - 0x41320]
mov dword [ebp - 0x41324], eax
mov byte [ebp - 4], 0x15
push ecx
mov ecx, esp
mov dword [ebp - 0x4118c], esp
lea edx, [ebp - 0x410c8]
push edx
call fcn.0054d095
mov dword [ebp - 0x41328], eax
mov eax, dword [ebp - 0x41328]
mov dword [ebp - 0x4132c], eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x4109c]
call fcn.00486080
push eax
mov byte [ebp - 4], 0x12
call fcn.004859b9
add esp, 0x10
mov dword [ebp - 0x41330], eax
cmp dword [ebp - 0x41330], 0
jne 0x47a1ea
mov dword [ebp - 0x2c], 1
mov ecx, dword [ebp - 0x104c]
mov dword [ebp - 0x4128c], ecx
mov edx, dword [ebp - 0x410c8]
push edx
mov eax, dword [ebp - 0x4128c]
push eax
lea ecx, [ebp - 0x41190]
push ecx
call fcn.00485900
add esp, 8
mov dword [ebp - 0x41334], eax
mov edx, dword [ebp - 0x41334]
mov dword [ebp - 0x41338], edx
mov byte [ebp - 4], 0x17
mov eax, dword [ebp - 0x41338]
mov ecx, dword [eax]
push ecx
push 0x5b1830
lea edx, [ebp - 0x10]
push edx
call fcn.0054ab7c
add esp, 0x10
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x41190]
call fcn.0054d328
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
call fcn.0054d46f
lea ecx, [ebp - 0x410c8]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0054d46f
lea edx, [ebp - 0x410e8]
push edx
lea ecx, [ebp - 0x20]
call fcn.0054d46f
push ecx
mov ecx, esp
mov dword [ebp - 0x41194], esp
push 0x5b183c
call fcn.0054d39c
mov dword [ebp - 0x4133c], eax
mov eax, dword [ebp - 0x4133c]
mov dword [ebp - 0x41340], eax
mov byte [ebp - 4], 0x18
push ecx
mov ecx, esp
mov dword [ebp - 0x41198], esp
lea edx, [ebp - 0x410e8]
push edx
call fcn.0054d095
mov dword [ebp - 0x41344], eax
lea eax, [ebp - 0x4119c]
push eax
lea ecx, [ebp - 0x4109c]
mov byte [ebp - 4], 0x12
call fcn.00425c70
mov dword [ebp - 0x41348], eax
mov ecx, dword [ebp - 0x41348]
mov dword [ebp - 0x4134c], ecx
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x4134c]
push edx
lea ecx, [ebp - 0x1c]
call fcn.0054d46f
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x4119c]
call fcn.0054d328
mov dword [ebp - 0x18], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x411a0], esp
push 0x5b1844
call fcn.0054d39c
mov dword [ebp - 0x41350], eax
lea eax, [ebp - 0x411a4]
push eax
mov ecx, dword [ebp - 0x410a8]
call fcn.004be333
mov dword [ebp - 0x41354], eax
mov ecx, dword [ebp - 0x41354]
mov dword [ebp - 0x41358], ecx
mov byte [ebp - 4], 0x1a
mov edx, dword [ebp - 0x41358]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x411a4]
call fcn.0054d328
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x411a8], esp
mov dword [ebp - 0x41290], eax
mov ecx, dword [ebp - 0x41290]
mov edx, dword [ebp - 0x2c]
mov dword [ecx], edx
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x41290]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x24]
push ecx
mov ecx, dword [ebp - 0x41290]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x1c
lea edx, [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0x41290]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x1d
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x41290]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x41290]
mov edx, dword [ebp - 0x18]
mov dword [ecx + 0x14], edx
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x41290]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x41290]
mov dword [ebp - 0x4135c], ecx
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x288
call fcn.0045ada0
push 1
push 0xb
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x411ac], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0045ac60
mov dword [ebp - 0x41360], eax
call fcn.00484e85
add esp, 0x24
mov eax, dword [ebp - 0x410a0]
push eax
push 0x5b1868
lea ecx, [ebp - 0x10]
push ecx
call fcn.0054ab7c
add esp, 0xc
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [0x5c3070]
add ecx, 0x1870
call fcn.00551562
mov eax, dword [ebp - 0x410a8]
mov ecx, dword [eax + 0x588]
push ecx
push 0x5b1870
lea edx, [ebp - 0x10]
push edx
call fcn.0054ab7c
add esp, 0xc
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [0x5c3070]
add ecx, 0xaa4
call fcn.00412a69
mov ecx, dword [ebp - 0x410a8]
mov edx, dword [ecx + 0x588]
add edx, 1
mov eax, dword [ebp - 0x410a8]
mov dword [eax + 0x588], edx
mov ecx, dword [ebp - 0x410a0]
add ecx, 1
mov dword [ebp - 0x410a0], ecx
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x410fc]
call fcn.0054d328
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x410f4]
call fcn.0054d328
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x410f8]
call fcn.0054d328
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x410e8]
call fcn.0054d328
jmp 0x479bde
jmp 0x47a545
push ecx
mov ecx, esp
mov dword [ebp - 0x411b0], esp
push 0x5c3330
call fcn.0054d39c
mov dword [ebp - 0x41364], eax
mov edx, dword [ebp - 0x41364]
mov dword [ebp - 0x41368], edx
mov byte [ebp - 4], 0x1f
push ecx
mov ecx, esp
mov dword [ebp - 0x411b4], esp
push 0x5c3334
call fcn.0054d39c
mov dword [ebp - 0x4136c], eax
mov eax, dword [ebp - 0x4136c]
mov dword [ebp - 0x41370], eax
mov byte [ebp - 4], 0x20
push ecx
mov ecx, esp
mov dword [ebp - 0x411b8], esp
lea edx, [ebp - 0x410c8]
push edx
call fcn.0054d095
mov dword [ebp - 0x41374], eax
mov eax, dword [ebp - 0x41374]
mov dword [ebp - 0x41378], eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x4109c]
call fcn.00486080
push eax
mov byte [ebp - 4], 0xc
call fcn.004859b9
add esp, 0x10
mov dword [ebp - 0x4137c], eax
cmp dword [ebp - 0x4137c], 0
jne 0x47a545
mov dword [ebp - 0x2c], 0
mov ecx, dword [ebp - 0x104c]
mov dword [ebp - 0x41294], ecx
mov edx, dword [ebp - 0x410c8]
push edx
mov eax, dword [ebp - 0x41294]
push eax
lea ecx, [ebp - 0x411bc]
push ecx
call fcn.00485900
add esp, 8
mov dword [ebp - 0x41380], eax
mov edx, dword [ebp - 0x41380]
mov dword [ebp - 0x41384], edx
mov byte [ebp - 4], 0x22
mov eax, dword [ebp - 0x41384]
mov ecx, dword [eax]
push ecx
push 0x5b1878
lea edx, [ebp - 0x10]
push edx
call fcn.0054ab7c
add esp, 0x10
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x411bc]
call fcn.0054d328
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
call fcn.0054d46f
lea ecx, [ebp - 0x410c8]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0054d46f
push 0x5c3338
lea ecx, [ebp - 0x20]
call fcn.0054d4bf
push 0x5c333c
lea ecx, [ebp - 0x1c]
call fcn.0054d4bf
mov dword [ebp - 0x18], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x411c0], esp
push 0x5b1884
call fcn.0054d39c
mov dword [ebp - 0x41388], eax
lea edx, [ebp - 0x411c4]
push edx
mov ecx, dword [ebp - 0x410a8]
call fcn.004be333
mov dword [ebp - 0x4138c], eax
mov eax, dword [ebp - 0x4138c]
mov dword [ebp - 0x41390], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x41390]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x411c4]
call fcn.0054d328
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x411c8], esp
mov dword [ebp - 0x41298], edx
mov eax, dword [ebp - 0x41298]
mov ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
lea edx, [ebp - 0x28]
push edx
mov ecx, dword [ebp - 0x41298]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x41298]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x41298]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x26
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0x41298]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x27
mov eax, dword [ebp - 0x41298]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x41298]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0xc
mov eax, dword [ebp - 0x41298]
mov dword [ebp - 0x41394], eax
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x288
call fcn.0045ada0
push 1
push 0xb
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x411cc], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0045ac60
mov dword [ebp - 0x41398], eax
call fcn.00484e85
add esp, 0x24
mov eax, dword [ebp - 0x410a0]
push eax
push 0x5b18a8
lea ecx, [ebp - 0x10]
push ecx
call fcn.0054ab7c
add esp, 0xc
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [0x5c3070]
add ecx, 0x1870
call fcn.00551562
mov eax, dword [ebp - 0x410a8]
mov ecx, dword [eax + 0x588]
push ecx
push 0x5b18b0
lea edx, [ebp - 0x10]
push edx
call fcn.0054ab7c
add esp, 0xc
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [0x5c3070]
add ecx, 0xaa4
call fcn.00412a69
mov ecx, dword [ebp - 0x410a8]
mov edx, dword [ecx + 0x588]
add edx, 1
mov eax, dword [ebp - 0x410a8]
mov dword [eax + 0x588], edx
mov ecx, dword [ebp - 0x410a0]
add ecx, 1
mov dword [ebp - 0x410a0], ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x410dc]
call fcn.0054c3de
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x410c8]
call fcn.0054d328
jmp 0x4799ab
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x410bc]
call fcn.0054c3de
push str.SoftwareMicrosoftWindowsShellNoRoamMUICache
lea ecx, [ebp - 0x410a4]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x411d0], esp
lea edx, [ebp - 0x410a4]
push edx
call fcn.0054d095
mov dword [ebp - 0x4139c], eax
push SysReAllocStringLen
lea ecx, [ebp - 0x4109c]
call fcn.004e75e4
mov dword [ebp - 0x413a0], eax
cmp dword [ebp - 0x413a0], 0
je 0x47b049
lea ecx, [ebp - 0x41110]
call fcn.0054c3ab
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x41110]
push eax
lea ecx, [ebp - 0x4109c]
call fcn.004e9b9e
mov ecx, dword [ebp - 0x41108]
mov dword [ebp - 0x41114], ecx
cmp dword [ebp - 0x41114], 0
jle 0x47ad25
mov dword [ebp - 0x41118], 0
jmp 0x47a61e
mov edx, dword [ebp - 0x41118]
add edx, 1
mov dword [ebp - 0x41118], edx
mov eax, dword [ebp - 0x41118]
cmp eax, dword [ebp - 0x41114]
jge 0x47ad20
push 0
mov ecx, dword [0x5c3074]
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x47a6c7
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41110]
call fcn.0054c3de
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x410a4]
call fcn.0054d328
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4109c]
call fcn.004e71cb
mov dword [ebp - 4], 0x2c
lea ecx, [ebp - 0x14]
call fcn.0054d328
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1c]
call fcn.0054d328
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x20]
call fcn.0054d328
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x24]
call fcn.0054d328
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.0054d328
jmp 0x47b655
mov edx, dword [ebp - 0x41118]
push edx
lea eax, [ebp - 0x4111c]
push eax
lea ecx, [ebp - 0x41110]
call fcn.00419890
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x4111c]
mov edx, dword [ecx - 8]
mov dword [ebp - 0x4129c], edx
cmp dword [ebp - 0x4129c], 0
je 0x47ad0c
push 0x5b1918
lea ecx, [ebp - 0x4111c]
call fcn.0054a808
cmp eax, 0xffffffff
jne 0x47ad0c
push 0x5b191c
mov eax, dword [ebp - 0x4111c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x47ad0c
mov dword [ebp - 0x41120], 0
lea ecx, [ebp - 0x41120]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x411d4], esp
lea edx, [ebp - 0x4111c]
push edx
call fcn.0054d095
mov dword [ebp - 0x413a4], eax
lea ecx, [ebp - 0x4109c]
call fcn.004e99fe
mov dword [ebp - 0x413a8], eax
mov eax, dword [ebp - 0x413a8]
mov dword [ebp - 0x41124], eax
cmp dword [ebp - 0x41124], 1
jne 0x47ad0c
mov ecx, dword [0x5be480]
mov dword [ebp - 0x4112c], ecx
mov byte [ebp - 4], 0x2e
mov edx, dword [0x5be480]
mov dword [ebp - 0x41128], edx
mov byte [ebp - 4], 0x2f
push ecx
mov ecx, esp
mov dword [ebp - 0x411d8], esp
push 0x5b192c
call fcn.0054d39c
mov dword [ebp - 0x413ac], eax
mov eax, dword [ebp - 0x413ac]
mov dword [ebp - 0x413b0], eax
mov byte [ebp - 4], 0x30
push ecx
mov ecx, esp
mov dword [ebp - 0x411dc], esp
lea edx, [ebp - 0x4111c]
push edx
call fcn.0054d095
mov dword [ebp - 0x413b4], eax
lea eax, [ebp - 0x411e0]
push eax
lea ecx, [ebp - 0x4109c]
mov byte [ebp - 4], 0x2f
call fcn.00425c70
mov dword [ebp - 0x413b8], eax
mov ecx, dword [ebp - 0x413b8]
mov dword [ebp - 0x413bc], ecx
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x413bc]
push edx
lea ecx, [ebp - 0x4112c]
call fcn.0054d46f
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x411e0]
call fcn.0054d328
push 0x5b1934
mov eax, dword [ebp - 0x4112c]
push eax
call fcn.00537cf5
add esp, 8
mov dword [ebp - 0x412a0], eax
xor ecx, ecx
cmp dword [ebp - 0x412a0], 0
setne cl
and ecx, 0xff
test ecx, ecx
je 0x47acee
mov edx, dword [ebp - 0x4112c]
mov eax, dword [edx - 8]
mov dword [ebp - 0x412a4], eax
cmp dword [ebp - 0x412a4], 0
je 0x47acee
mov ecx, dword [ebp - 0x4112c]
push ecx
mov ecx, dword [0x5c3070]
add ecx, 0xb14
call fcn.00551562
mov edx, dword [0x5be480]
mov dword [ebp - 0x41130], edx
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x4111c]
push eax
lea ecx, [ebp - 0x41130]
call fcn.004b257a
push 0x21f
lea ecx, [ebp - 0x41130]
call fcn.004b204a
mov ecx, dword [ebp - 0x41130]
push ecx
lea ecx, [ebp - 0x4111c]
call fcn.0054d4bf
mov edx, dword [ebp - 0x4111c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x47acdf
push ecx
mov esi, esp
mov dword [ebp - 0x411e4], esp
push ecx
mov ecx, esp
mov dword [ebp - 0x411e8], esp
push 0x5b193c
call fcn.0054d39c
mov dword [ebp - 0x413c0], eax
mov eax, dword [ebp - 0x413c0]
mov dword [ebp - 0x413c4], eax
mov byte [ebp - 4], 0x33
push ecx
mov ecx, esp
mov dword [ebp - 0x411ec], esp
lea edx, [ebp - 0x4111c]
push edx
call fcn.0054d095
mov dword [ebp - 0x413c8], eax
push esi
lea ecx, [ebp - 0x4109c]
mov byte [ebp - 4], 0x32
call fcn.00425c70
mov dword [ebp - 0x413cc], eax
mov eax, dword [ebp - 0x413cc]
mov dword [ebp - 0x413d0], eax
mov byte [ebp - 4], 0x34
push ecx
mov ecx, esp
mov dword [ebp - 0x411f0], esp
lea edx, [ebp - 0x4111c]
push edx
call fcn.0054d095
mov dword [ebp - 0x413d4], eax
mov eax, dword [ebp - 0x413d4]
mov dword [ebp - 0x413d8], eax
mov byte [ebp - 4], 0x35
push ecx
mov ecx, esp
mov dword [ebp - 0x411f4], esp
lea edx, [ebp - 0x410a4]
push edx
call fcn.0054d095
mov dword [ebp - 0x413dc], eax
mov eax, dword [ebp - 0x413dc]
mov dword [ebp - 0x413e0], eax
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x4109c]
call fcn.00486080
push eax
mov byte [ebp - 4], 0x32
call fcn.004859b9
add esp, 0x10
mov dword [ebp - 0x413e4], eax
cmp dword [ebp - 0x413e4], 0
jne 0x47acdf
mov dword [ebp - 0x2c], 1
mov ecx, dword [ebp - 0x104c]
mov dword [ebp - 0x412a8], ecx
mov edx, dword [ebp - 0x410a4]
push edx
mov eax, dword [ebp - 0x412a8]
push eax
lea ecx, [ebp - 0x411f8]
push ecx
call fcn.00485900
add esp, 8
mov dword [ebp - 0x413e8], eax
mov edx, dword [ebp - 0x413e8]
mov dword [ebp - 0x413ec], edx
mov byte [ebp - 4], 0x37
mov eax, dword [ebp - 0x413ec]
mov ecx, dword [eax]
push ecx
push 0x5b1944
lea edx, [ebp - 0x10]
push edx
call fcn.0054ab7c
add esp, 0x10
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x411f8]
call fcn.0054d328
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
call fcn.0054d46f
lea ecx, [ebp - 0x410a4]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0054d46f
lea edx, [ebp - 0x4111c]
push edx
lea ecx, [ebp - 0x20]
call fcn.0054d46f
push ecx
mov ecx, esp
mov dword [ebp - 0x411fc], esp
push 0x5b1950
call fcn.0054d39c
mov dword [ebp - 0x413f0], eax
mov eax, dword [ebp - 0x413f0]
mov dword [ebp - 0x413f4], eax
mov byte [ebp - 4], 0x38
push ecx
mov ecx, esp
mov dword [ebp - 0x41200], esp
lea edx, [ebp - 0x4111c]
push edx
call fcn.0054d095
mov dword [ebp - 0x413f8], eax
lea eax, [ebp - 0x41204]
push eax
lea ecx, [ebp - 0x4109c]
mov byte [ebp - 4], 0x32
call fcn.00425c70
mov dword [ebp - 0x413fc], eax
mov ecx, dword [ebp - 0x413fc]
mov dword [ebp - 0x41400], ecx
mov byte [ebp - 4], 0x39
mov edx, dword [ebp - 0x41400]
push edx
lea ecx, [ebp - 0x1c]
call fcn.0054d46f
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x41204]
call fcn.0054d328
mov dword [ebp - 0x18], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x41208], esp
push 0x5b1958
call fcn.0054d39c
mov dword [ebp - 0x41404], eax
lea eax, [ebp - 0x4120c]
push eax
mov ecx, dword [ebp - 0x410a8]
call fcn.004be333
mov dword [ebp - 0x41408], eax
mov ecx, dword [ebp - 0x41408]
mov dword [ebp - 0x4140c], ecx
mov byte [ebp - 4], 0x3a
mov edx, dword [ebp - 0x4140c]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x4120c]
call fcn.0054d328
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x41210], esp
mov dword [ebp - 0x412ac], eax
mov ecx, dword [ebp - 0x412ac]
mov edx, dword [ebp - 0x2c]
mov dword [ecx], edx
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x412ac]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x24]
push ecx
mov ecx, dword [ebp - 0x412ac]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x3c
lea edx, [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0x412ac]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x412ac]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x412ac]
mov edx, dword [ebp - 0x18]
mov dword [ecx + 0x14], edx
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x412ac]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x32
mov ecx, dword [ebp - 0x412ac]
mov dword [ebp - 0x41410], ecx
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x288
call fcn.0045ada0
push 1
push 0xb
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x41214], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0045ac60
mov dword [ebp - 0x41414], eax
call fcn.00484e85
add esp, 0x24
mov eax, dword [ebp - 0x410a0]
push eax
push 0x5b197c
lea ecx, [ebp - 0x10]
push ecx
call fcn.0054ab7c
add esp, 0xc
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [0x5c3070]
add ecx, 0x1870
call fcn.00551562
mov eax, dword [ebp - 0x410a8]
mov ecx, dword [eax + 0x588]
push ecx
push 0x5b1984
lea edx, [ebp - 0x10]
push edx
call fcn.0054ab7c
add esp, 0xc
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [0x5c3070]
add ecx, 0xaa4
call fcn.00412a69
mov ecx, dword [ebp - 0x410a8]
mov edx, dword [ecx + 0x588]
add edx, 1
mov eax, dword [ebp - 0x410a8]
mov dword [eax + 0x588], edx
mov ecx, dword [ebp - 0x410a0]
add ecx, 1
mov dword [ebp - 0x410a0], ecx
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x41130]
call fcn.0054d328
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x41128]
call fcn.0054d328
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x4112c]
call fcn.0054d328
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4111c]
call fcn.0054d328
jmp 0x47a60f
jmp 0x47b03a
push ecx
mov ecx, esp
mov dword [ebp - 0x41218], esp
push 0x5c3340
call fcn.0054d39c
mov dword [ebp - 0x41418], eax
mov edx, dword [ebp - 0x41418]
mov dword [ebp - 0x4141c], edx
mov byte [ebp - 4], 0x3f
push ecx
mov ecx, esp
mov dword [ebp - 0x4121c], esp
push 0x5c3344
call fcn.0054d39c
mov dword [ebp - 0x41420], eax
mov eax, dword [ebp - 0x41420]
mov dword [ebp - 0x41424], eax
mov byte [ebp - 4], 0x40
push ecx
mov ecx, esp
mov dword [ebp - 0x41220], esp
lea edx, [ebp - 0x410a4]
push edx
call fcn.0054d095
mov dword [ebp - 0x41428], eax
mov eax, dword [ebp - 0x41428]
mov dword [ebp - 0x4142c], eax
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x4109c]
call fcn.00486080
push eax
mov byte [ebp - 4], 0x28
call fcn.004859b9
add esp, 0x10
mov dword [ebp - 0x41430], eax
cmp dword [ebp - 0x41430], 0
jne 0x47b03a
mov dword [ebp - 0x2c], 0
mov ecx, dword [ebp - 0x104c]
mov dword [ebp - 0x412b0], ecx
mov edx, dword [ebp - 0x410a4]
push edx
mov eax, dword [ebp - 0x412b0]
push eax
lea ecx, [ebp - 0x41224]
push ecx
call fcn.00485900
add esp, 8
mov dword [ebp - 0x41434], eax
mov edx, dword [ebp - 0x41434]
mov dword [ebp - 0x41438], edx
mov byte [ebp - 4], 0x42
mov eax, dword [ebp - 0x41438]
mov ecx, dword [eax]
push ecx
push 0x5b198c
lea edx, [ebp - 0x10]
push edx
call fcn.0054ab7c
add esp, 0x10
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x41224]
call fcn.0054d328
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
call fcn.0054d46f
lea ecx, [ebp - 0x410a4]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0054d46f
push 0x5c3348
lea ecx, [ebp - 0x20]
call fcn.0054d4bf
push 0x5c334c
lea ecx, [ebp - 0x1c]
call fcn.0054d4bf
mov dword [ebp - 0x18], 1
push ecx
mov ecx, esp
mov dword [ebp - 0x41228], esp
push 0x5b1998
call fcn.0054d39c
mov dword [ebp - 0x4143c], eax
lea edx, [ebp - 0x4122c]
push edx
mov ecx, dword [ebp - 0x410a8]
call fcn.004be333
mov dword [ebp - 0x41440], eax
mov eax, dword [ebp - 0x41440]
mov dword [ebp - 0x41444], eax
mov byte [ebp - 4], 0x43
mov ecx, dword [ebp - 0x41444]
push ecx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x4122c]
call fcn.0054d328
sub esp, 0x1c
mov edx, esp
mov dword [ebp - 0x41230], esp
mov dword [ebp - 0x412b4], edx
mov eax, dword [ebp - 0x412b4]
mov ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
lea edx, [ebp - 0x28]
push edx
mov ecx, dword [ebp - 0x412b4]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x44
lea eax, [ebp - 0x24]
push eax
mov ecx, dword [ebp - 0x412b4]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 0x412b4]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x46
lea edx, [ebp - 0x1c]
push edx
mov ecx, dword [ebp - 0x412b4]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x47
mov eax, dword [ebp - 0x412b4]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x14], ecx
lea edx, [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x412b4]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x412b4]
mov dword [ebp - 0x41448], eax
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x288
call fcn.0045ada0
push 1
push 0xb
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x41234], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0045ac60
mov dword [ebp - 0x4144c], eax
call fcn.00484e85
add esp, 0x24
mov eax, dword [ebp - 0x410a0]
push eax
push 0x5b19bc
lea ecx, [ebp - 0x10]
push ecx
call fcn.0054ab7c
add esp, 0xc
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [0x5c3070]
add ecx, 0x1870
call fcn.00551562
mov eax, dword [ebp - 0x410a8]
mov ecx, dword [eax + 0x588]
push ecx
push 0x5b19c4
lea edx, [ebp - 0x10]
push edx
call fcn.0054ab7c
add esp, 0xc
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [0x5c3070]
add ecx, 0xaa4
call fcn.00412a69
mov ecx, dword [ebp - 0x410a8]
mov edx, dword [ecx + 0x588]
add edx, 1
mov eax, dword [ebp - 0x410a8]
mov dword [eax + 0x588], edx
mov ecx, dword [ebp - 0x410a0]
add ecx, 1
mov dword [ebp - 0x410a0], ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41110]
call fcn.0054c3de
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerUserAssist75048700_EF1F_11D0_9888_006097DEACF9Count
lea ecx, [ebp - 0x410a4]
call fcn.0054d4bf
push 1
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x41238], esp
lea edx, [ebp - 0x410a4]
push edx
call fcn.0054d095
mov dword [ebp - 0x41450], eax
push SysReAllocStringLen
lea ecx, [ebp - 0x4109c]
call fcn.004e75e4
mov dword [ebp - 0x41454], eax
cmp dword [ebp - 0x41454], 0
je 0x47b507
lea eax, [ebp - 0x410a4]
push eax
push str.HKEY_CURRENT_USER_
lea ecx, [ebp - 0x4123c]
push ecx
call fcn.0054d641
mov dword [ebp - 0x41458], eax
mov edx, dword [ebp - 0x41458]
mov dword [ebp - 0x412b8], edx
mov byte [ebp - 4], 0x48
mov eax, dword [ebp - 0x412b8]
mov ecx, dword [eax]
mov dword [ebp - 0x412bc], ecx
mov edx, dword [ebp - 0x412bc]
push edx
mov ecx, dword [0x5c3070]
add ecx, 0xb14
call fcn.00551562
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x4123c]
call fcn.0054d328
lea ecx, [ebp - 0x41144]
call fcn.0054c3ab
mov byte [ebp - 4], 0x49
lea eax, [ebp - 0x41144]
push eax
lea ecx, [ebp - 0x4109c]
call fcn.004e9b9e
mov ecx, dword [ebp - 0x4113c]
mov dword [ebp - 0x41148], ecx
cmp dword [ebp - 0x41148], 0
jle 0x47b4f8
mov dword [ebp - 0x4114c], 0
jmp 0x47b153
mov edx, dword [ebp - 0x4114c]
add edx, 1
mov dword [ebp - 0x4114c], edx
mov eax, dword [ebp - 0x4114c]
cmp eax, dword [ebp - 0x41148]
jge 0x47b4f8
mov ecx, dword [ebp - 0x4114c]
push ecx
lea edx, [ebp - 0x41154]
push edx
lea ecx, [ebp - 0x41144]
call fcn.00419890
mov byte [ebp - 4], 0x4a
mov dword [ebp - 0x41150], 0
lea eax, [ebp - 0x41150]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x41240], esp
lea edx, [ebp - 0x41154]
push edx
call fcn.0054d095
mov dword [ebp - 0x4145c], eax
lea ecx, [ebp - 0x4109c]
call fcn.004e99fe
mov dword [ebp - 0x41460], eax
mov eax, dword [ebp - 0x41460]
mov dword [ebp - 0x41158], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x41244], esp
push 0x5c3350
call fcn.0054d39c
mov dword [ebp - 0x41464], eax
mov ecx, dword [ebp - 0x41464]
mov dword [ebp - 0x41468], ecx
mov byte [ebp - 4], 0x4b
push ecx
mov ecx, esp
mov dword [ebp - 0x41248], esp
lea edx, [ebp - 0x41154]
push edx
call fcn.0054d095
mov dword [ebp - 0x4146c], eax
mov eax, dword [ebp - 0x4146c]
mov dword [ebp - 0x41470], eax
mov byte [ebp - 4], 0x4c
push ecx
mov ecx, esp
mov dword [ebp - 0x4124c], esp
lea edx, [ebp - 0x410a4]
push edx
call fcn.0054d095
mov dword [ebp - 0x41474], eax
mov eax, dword [ebp - 0x41474]
mov dword [ebp - 0x41478], eax
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x4109c]
call fcn.00486080
push eax
mov byte [ebp - 4], 0x4a
call fcn.004859b9
add esp, 0x10
mov dword [ebp - 0x4147c], eax
cmp dword [ebp - 0x4147c], 0
jne 0x47b4e4
mov dword [ebp - 0x2c], 1
mov ecx, dword [ebp - 0x104c]
mov dword [ebp - 0x412c0], ecx
mov edx, dword [ebp - 0x410a4]
push edx
mov eax, dword [ebp - 0x412c0]
push eax
lea ecx, [ebp - 0x41250]
push ecx
call fcn.00485900
add esp, 8
mov dword [ebp - 0x41480], eax
mov edx, dword [ebp - 0x41480]
mov dword [ebp - 0x41484], edx
mov byte [ebp - 4], 0x4e
mov eax, dword [ebp - 0x41484]
mov ecx, dword [eax]
push ecx
push 0x5b1acc
lea edx, [ebp - 0x10]
push edx
call fcn.0054ab7c
add esp, 0x10
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x41250]
call fcn.0054d328
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
call fcn.0054d46f
lea ecx, [ebp - 0x410a4]
push ecx
lea ecx, [ebp - 0x28]
call fcn.0054d46f
lea edx, [ebp - 0x41154]
push edx
lea ecx, [ebp - 0x20]
call fcn.0054d46f
push 0x5c3354
lea ecx, [ebp - 0x1c]
call fcn.0054d4bf
mov dword [ebp - 0x18], 3
push ecx
mov ecx, esp
mov dword [ebp - 0x41254], esp
push str.REGISTRY_ERROR_11
call fcn.0054d39c
mov dword [ebp - 0x41488], eax
lea eax, [ebp - 0x41258]
push eax
mov ecx, dword [ebp - 0x410a8]
call fcn.004be333
mov dword [ebp - 0x4148c], eax
mov ecx, dword [ebp - 0x4148c]
mov dword [ebp - 0x41490], ecx
mov byte [ebp - 4], 0x4f
mov edx, dword [ebp - 0x41490]
push edx
lea ecx, [ebp - 0x14]
call fcn.0054d46f
mov byte [ebp - 4], 0x4a
lea ecx, [ebp - 0x41258]
call fcn.0054d328
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x4125c], esp
mov dword [ebp - 0x412c4], eax
mov ecx, dword [ebp - 0x412c4]
mov edx, dword [ebp - 0x2c]
mov dword [ecx], edx
lea eax, [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x412c4]
add ecx, 4
call fcn.0054d095
mov byte [ebp - 4], 0x50
lea ecx, [ebp - 0x24]
push ecx
mov ecx, dword [ebp - 0x412c4]
add ecx, 8
call fcn.0054d095
mov byte [ebp - 4], 0x51
lea edx, [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0x412c4]
add ecx, 0xc
call fcn.0054d095
mov byte [ebp - 4], 0x52
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x412c4]
add ecx, 0x10
call fcn.0054d095
mov byte [ebp - 4], 0x53
mov ecx, dword [ebp - 0x412c4]
mov edx, dword [ebp - 0x18]
mov dword [ecx + 0x14], edx
lea eax, [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x412c4]
add ecx, 0x18
call fcn.0054d095
mov byte [ebp - 4], 0x4a
mov ecx, dword [ebp - 0x412c4]
mov dword [ebp - 0x41494], ecx
mov ecx, dword [ebp - 0x410a8]
add ecx, 0x288
call fcn.0045ada0
push 1
push 0xb
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x41260], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.0045ac60
mov dword [ebp - 0x41498], eax
call fcn.00484e85
add esp, 0x24
mov eax, dword [ebp - 0x410a0]
push eax
push 0x5b1afc
lea ecx, [ebp - 0x10]
push ecx
call fcn.0054ab7c
add esp, 0xc
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [0x5c3070]
add ecx, 0x1870
call fcn.00551562
mov eax, dword [ebp - 0x410a8]
mov ecx, dword [eax + 0x588]
push ecx
push 0x5b1b04
lea edx, [ebp - 0x10]
push edx
call fcn.0054ab7c
add esp, 0xc
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [0x5c3070]
add ecx, 0xaa4
call fcn.00412a69
mov ecx, dword [ebp - 0x410a8]
mov edx, dword [ecx + 0x588]
add edx, 1
mov eax, dword [ebp - 0x410a8]
mov dword [eax + 0x588], edx
mov ecx, dword [ebp - 0x410a0]
add ecx, 1
mov dword [ebp - 0x410a0], ecx
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x41154]
call fcn.0054d328
jmp 0x47b144
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x41144]
call fcn.0054c3de
mov edx, dword [0x5c3070]
add edx, 0x1338
mov dword [ebp - 0x412c8], edx
cmp dword [ebp - 0x412c8], 0
jne 0x47b52e
mov dword [ebp - 0x4149c], 0
jmp 0x47b53d
mov eax, dword [ebp - 0x412c8]
mov ecx, dword [eax + 0x1c]
mov dword [ebp - 0x4149c], ecx
cmp dword [ebp - 0x4149c], 0
je 0x47b5e9
mov ecx, dword [0x5c3070]
add ecx, 0x1338
call fcn.004b7291
mov ecx, dword [0x5c3070]
add ecx, 0x1338
call fcn.004b5bcf
mov edx, dword [ebp - 0x410a8]
mov eax, dword [edx + 0x290]
mov dword [ebp - 0x412cc], eax
cmp dword [ebp - 0x412cc], 0
jne 0x47b5b9
push 0x5b1b0c
push 0x114
mov ecx, dword [0x5c3070]
add ecx, 0x1338
call fcn.004b6118
test eax, eax
je 0x47b5b7
mov ecx, dword [0x5c3070]
add ecx, 0x1338
call fcn.004b5e28
jmp 0x47b5e9
push 0x5b1b14
push 0x113
mov ecx, dword [0x5c3070]
add ecx, 0x1338
call fcn.004b6118
test eax, eax
je 0x47b5e9
mov ecx, dword [0x5c3070]
add ecx, 0x1338
call fcn.004b5e28
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x10]
call fcn.0054d328
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x410a4]
call fcn.0054d328
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4109c]
call fcn.004e71cb
mov dword [ebp - 4], 0x57
lea ecx, [ebp - 0x14]
call fcn.0054d328
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x1c]
call fcn.0054d328
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x20]
call fcn.0054d328
mov byte [ebp - 4], 0x54
lea ecx, [ebp - 0x24]
call fcn.0054d328
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.0054d328
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret