Function at 0x500f30
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7a44f9
mov eax, dword fs:[0]
push eax
mov eax, 0x2a60
call fcn.006e6170
mov eax, dword [0x8cf144]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x34
mov eax, dword [ebp + 8]
mov esi, str.60M7eWlHmLcCFwYVeGbl75Rezu3Wjhc2SqOeysOjdXtuJCd2p1B0DlZHJEmiOTWyVbVjQf9D2vBHfXNafIdWYHJGQPpYWWUKSKXJvscDpcmSoKp1AHecGf3e1svbb4rQ90v2J73WJDWdaqrAnDqfIkQL7DN6nvvtHSzrFDyU4s8FN1XaM9xiZRCeWnxP4pqcRIh6mN5pOGmlcA6BBJ
mov ebx, dword [ebp + 0xc]
lea edi, [ebp - 0x4f4]
mov dword [ebp - 0x2a50], eax
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x51
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.EMepJYykBw6PgaHG1muj8RUunVOswcKfJHKhCwttfcjSBdAz64JPAlB3dogPwUvOEmiShIwzwGoj0DJrgE48zHMBBTqnvhXhU5ct36pWW5JZ4Srt8eUMt5nmfqfOwFXORYbu9wd8SPpfemhb3JUVwaHkpXYpZTjqY4obuQJlfpcyVuxrqhiRlgDF21gmSl4R4tg5fvJLEKaD7Umx8zbJxr2FScMHfbthKRU2P5XwuNDTbuF0Dlsp9XCLdsELO7WlFhOwsKYEDxy0kMde6dal3kgWSmr3RtIthfrZURCZSuF1cKFPmGiiEVVHbsKQ63wDpt0faa
lea edi, [ebp - 0xdac]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x5c
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.BMF98zdhtJLWoZ0d2Ic1fF6hvWPENQ9qTZr0PB38E8FfHTFg4lMldZfUdEdTx9maleQnpIuP0g6EZWaUngFx8uFvi63Mbh33nwBqEYNr8yTbz9lt8s9PZ9gRgjO6qMLV0TvAspgfM0X9G73PxF6AnJydlQtXCTce6Y9SfcNyuzpj2H7fUEbcH4c3IabBbBSztnEarScel2xIH6q7ZU2PT3AAxhmILFmrRmYFZ3VbpbLDS6OtW5fTcVPpEInI68WngbqOgeXa2Jx4rCm4gceahDFX1Kl59Qg7diT4Xw4U4bFAb7EU3AlE89zb6tq2EcmmKxPmUoYA4znzSVWMZpWNEQQjOWjJXtag7xXGqlcUEZ8cX5tiEm
lea edi, [ebp - 0x176c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x58
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.hgB8YPSjd135UtB6ZV1gtQDsJCwRSRYvpWaa93A4loJyVS7B2VhecVsbkXtWtOAVvCTeGitQRU08Gk2tftsOg7sgwWf1ITjhGXCYcp7c6VFDZFyi1Zwvq2kNHrGewfxFjliLqe7sv7VMdCPpfPqh8OqMaNXHszZdqgSZlNCg4PaDjHYHAYnuNPtRg07YIMSYIJqIapUJS23OuM3W14zkzddN1uYvvxgc2Yp3ZQzREybVn7NduCMPOZiIB19kQbmobpacfQTYLGfkmqnN4RjS8TdcrSVwyjr7emznX5GoAImAAIE3MsYZGbPXxVpNLVugjBxWL1ot5vIgGfCzIss6bujZpCBVXbz5wX
lea edi, [ebp - 0x15f8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6e
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.jSRFWXVtg0GqcnsZKIGKrmi6piojk48iGHNQDlle7nv3qmG6T5tkd2wFBDFqL36eKLdiwKBy0O9thks81nV443OY7GB4wmApwFo93yFEzAxppznoI9hLzn0XTgBhxne1R50SfOvOWxecXAprQxd6g0ehCCMAL0AMFW5MsbtYGc264pMjuuF595XMiXe5LC4hLZyzAHzzBAkWPMQySF2DIsWgypaMGe4i34sfe8clenL891M4rRS7T3t8Mht5uf1Guwrl4ayOY94aM7EclZh7mDGIGOGjoCVv08eLma4k9TSS2Na09vjTNVke9ihfIrgprdHKsHB3onUAh4IH4G8FAUPq8Vrk5fkHj4Rqe70mg18XeBagdJONrl9IWdEbypUkOjUCbXfWBaYnrGyeZpOR9x26xOTctc2d33SbDGgVCsloFsP5sJEGCzTt
lea edi, [ebp - 0x2200]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x42
movsb byte es:[edi], byte [esi]
mov esi, str.YwQYnSvUH3SOBsWCdFvV0rwsFU2uTWAIUR07ebCrjnBTGrGKtopP5xM1s3oiJrHWGEes0vNCWTvCalulW8xO3zpzlnLqgRX0IvwvYQZidNr3Kd3VArE3T9QOeatkyK3iyD0EcoXXVTA0QBBniC89k3xLsKl63QkGrSQXhfw1fs7v33hOx5zrEMEnUQGqp5ikY6u9keGfJWmzGWaKpgLuYI7Te6OD5Tm93ylMDJQvcPSeslLcXsY8HJ5DdG4KOaVjjK5qZsr
lea edi, [ebp - 0xa14]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x47
lea edi, [ebp - 0xb34]
mov esi, str.TXZciWoFmRY3IZ5ruZQkyh2WSpIBOYHT88zN82s1N1120Y4hK8611RE2lcdxIlxXu15PXzz4IcQ5N5ttctCQtrFrnMzrlPOHsCotYO2tcVoS8uSosuy7NLskbV7jBemgyn1guTekKgbV0HsMZlUcSgKbJJDgouYNwX6UCk8DLVaAb3ab27O6XMhHAULYfsZRpKUUC64Rcc8U5YqYupiZMAgk5eFZhszW50j1IMzKrNoj4YyL07dj8ssHa6wTmiUHr3xB9O7oLj6nzHSC837l8CoyzMNgR
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x52
movsw word es:[edi], word [esi]
mov esi, str.fajJx2RxtxHChFdQC7ZKyuLMlVeelp3gSu4Z7xbw53tqc12xsKC2mC8o3PP2C8jveRTvD2xJQZoYZVt2ukPN2eBdDBaQb3R8sny1RDRT23FamjcVFlRJwPlBcjFttAS9ng1kptUpYVhCu1AzKL7RNJxcMHXWIuRxx8FzwM5mFQqBVe9WbythDuy2zDx5T9RvVqo1K8Z6ZAtY9crxR9GjfcmEbG0bXD9EqQf9trDUJbDy5hME7pFCYjd2aGGJ5wrnAYUQmhyZS1CRSzQ9EpP9VKvw5nGxE8XEiCQ9br0kLOYxLHYhDK3zPlTrLsr9mopw1L0IcrVmR
lea edi, [ebp - 0xef8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x67
movsw word es:[edi], word [esi]
mov esi, str.SZNqKn8Yb14aVOhZXYE20ulJfXlH4sAOWOwNOOzpeefNMTHGxzL9MAFQ6V2rSeDR0tt8NqYVLk1mdsllsZJ3zndllI0ktmjp1pR41ZUwL4paKnURLs3EGSdkBcBKb7BA409dOnXxniqTsZOchZuYVVp5P3LbYTFAI8ufvaK4y04pgPJsRIDFiSL6x7B8WWs1wD2xTWwT5D3PNRO2x5jqgYP7UyKDvmVfTyU1IsKjcvopu9lX3sU3gTp6L55mFr4NbG7prQ3sskBBLeWxUqtc3vHGZlJpwmRlXN9NJWt4ucXtIq7caylj1TWeJGTQfHSfzAXXhy0tMzIQptYzXTdbIvsPdSHYCehhKdI2pJpf6M8oHjtw4EX0MR8RGtU9EoMqQFRgzzIBHKGdiHfFaHqKOF5LTl9
lea edi, [ebp - 0x1ea0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x75
lea edi, [ebp - 0x2778]
mov esi, str.k3k6dWk1JMhfUqBxVrFNLETSKFvy8SiTuJLfAGsA40YK28KYWy5ogdUhfgj8GTMYxgGoJpkTO07i4Hen8I094t4nYY4cKqOLwS5dlHSkIadoAXxk1cNC0cCSxfPbnnDLlIPstTzdBGsphdAShvHlw6JEv8wTYxSvlo8FEwtkgSwQMdWnzRc0tpiWlTKGlIn31U2oFTlGp9kmWJQAsIXoiysxktEfVkBiw5VAo2CbLXzbYTWk2QjrPgrlAyqeHJbjthu5z2VpvlMXYh3ksY9ffrrYsKE9b1HH4kAJORVyFy8Iz0MOuNWz1VvJZsE28fQEeKudsN3JcuKnlALM5WUwkFP4PFlgLjTxI3bdPFzpr7nHPFI0jNgG3FVDKdwDNLHgRmvNSRS59Bp631TWWF940axa7gPXhMD4lxpt0fzND0G45lu4AMt3K87EOlTpri3rTOMxFxlkj8xwFZ3dfyy90
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x39
movsw word es:[edi], word [esi]
mov esi, str.wRHzBpM7NfKKkK8RcweZiuSjTPDWMPwciZrDU3r9HGKVkKWImxVBfKhDu2jLdqpASH3TWLUgOwV5IfTuD6C4YW1djjwA5pjGtjAwEVYDcif2k4FzadkTvEnOVWCfSUKsHBr63ys82EQRK3VgWCI8yPyKuh4TJ7sfDbQFuMVprmo2TarTd79DaTO49UPKfzahop4VxdYtFfCDMN5wgseHmmbWX7Yzutr047Qy
lea edi, [ebp - 0x5dc]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x56
movsb byte es:[edi], byte [esi]
mov esi, str.lNEXhG4WcGcYgpQKtT66pQ7F86WGI5rVgfAmK170oHJiRpKqOBKxtP0XKac5W4XyDRnRE0FR5b5NpFpEZRQsmQFheIs05DiFW9Bxy5md1JWX590kMXtVAewhJ06iER4QWadciJQEFSeGZ0PiFU3YsZSgBIDVVJX6LZZTF5EJymHhnHaV3mz0kgWT939aEtZylTh9sFWK3hIgDtwRkkuAkCEzlpMIpAsQqx0o5k8D3tPupdoTeKMFy0qPTwiN9V8QMl25PnkVDN8nKLsLGsKzTWo5avyuO62zGw5p8xktUVqTUwZa45Y6mPbe0dMwi0fJgbTpEbXZ0Wv5prObeAsrF4o
lea edi, [ebp - 0x1338]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x4b
lea edi, [ebp - 0xc64]
mov esi, str.LsPieXadIgKWihjiJRpAEt5P2Cm4hK7wiFzdIB7Nq2JizoORGScp3uOVFwjUsGzCVRwH2SRufC408pfbv0U7gfX7vmTf9G6uoZzbeGnXJ77ZkVmeKzmrT7COQJr63tNCvtXzap3PmSHZOTy59jKHMC4l8wnC2Y5gKUsGWOmmRB0npfCVocurgNRH9mlxW7q47LGQtIRmen4ANyFqdDJfdhyWWcLOndDBx2fsfNjDyrvfQ0pyRLbu1Zg5BKDePDEe4IcWQgT8gP7VyM8hhBcgyco9EOkwVIt1AAMebcdBZMVwhH
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x63
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.9EV0Ud5WCCDmN3bxDgh2FEek3KXhJzsSCCa2dy28PVrNP5aixzwEAVumIeJTjIsCKUjw1df0nffF9do226JZO732TSNkUnXmuH2EhFr7daBwo96nkk3nWMoeZvvwfe6XxnO8cewVA0bl7cCdCdrRqDzAN9Oy7A28CXhmbMImQoeHvW1GHbJRFPWeWjd79sW7iMVhLZbimwDZS7W3ikWVQ5M8Ef6WmFCZLbGy0CrCT7jdYaCR8U0j9D2lMmMlEJdJT9qUCLHql3X2q5qJvBrDCxFjpiCsMDYFtKebe4D8byjg0oSNscVAjVDezD1hF5NqfrUMWdHB6gIkdyxUErBaebnVzxUTLcNyjle1jog4tddayHgCl5gHZJHcp8VoNOKnG4NvDKkvx7T7
lea edi, [ebp - 0x1088]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x42
movsb byte es:[edi], byte [esi]
mov esi, str.AhYEWnN3opTYbL8qD6DXd8d6JxIQWf2DaXiqgNn2FAigA1VHbFFkJC9Jt3JPU9Wn3L0CXJ3YLLtDrlVpSAiUpYr0Z2lyR1l932WZty1YELLeIwFeDIX2oJBHRllUu6BAPIuTpLCqTvqkexhtEAC7aFqkv8LbA6U6xIxnFqwMI5uTFhthZpKFCUPFPGtFdEgsW1laDSt3ciFsrHYksOCpUqWoGFGVBuv7A72cpbpAppMpvfMHzLXMdWhjG2GQlGIAGaUcfXOV
lea edi, [ebp - 0x90c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x56
movsb byte es:[edi], byte [esi]
mov esi, str.tnqv2TfB7PELcHil73MhJkDRhOFmwfji5OR5Vrf3OuAQZgsFwb0LS2XKKGMXnuysy4ufcQOJVahgQ6HoxzZTEzpNrWJx4nEA4L5X8vcJSBU3Hhs9yHfT6vyYFvX8Q8qgtpYLw6iHbfoqt5MojtXmoRZxuutLA94aQIZgn1VVWrfprjPn6fEEJvh0GJ74K3TqIwyTUHXZzboSSXwBvpjL0fndT818jrJdokEhNOl2UNk2JyuQC6L6wSn7RL05YBt5i8pWrEW61Yg7ziYUiKCRWTszrfcurmMQJ8VTTff1MCEyKCJvODyzmrIQthLUPLPib78enJumXvxQkd5rMsTpEMQzTJ
mov dword [ebp - 0x2a3c], 0
lea edi, [ebp - 0x1494]
mov dword [ebp - 0x2a38], 0
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x45
mov dword [ebp - 0x2a34], 0
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.o3WFyu9jgApa3XFiakBfTXbgzholgilJu0xQM6krrP9Gin2Hot7E92o3GZ5XSDMI2J11vLOgBPRVTGZq82vYRsSLyrlPmjWyokmRTZRl8Vw0M6zrErxmIcU7DDzu1plaGKqCgfC2KFuLP4ledZfhoQ6KyZXCRAL5kesnkMBFumdj5fv5hGLZTJG69UDQk0ZtHUUFnamc6vrQNxA3o4MvpICKndB2cMJbNtMBJYsHCSK50gs0QJWn2DldRrjzr1RhG0YYp3RzI4m6u2jby9XF
lea edi, [ebp - 0x6f4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x73
movsb byte es:[edi], byte [esi]
mov esi, str.h6bGdmcEDY8RIQe9Yx2roiXKFvbch2lWl1L8BwFlTCTiCfaVteCRfn8VnrKBN1FBwuaTIzuzARBbkLVZpWGYqP1RTnV83AZ77uL5lYaS3hwOnMwiDFvZ7yX7L9jzGQ8WQJBcDLe77gBCo0HA2EWo18KwqqOBbENoM5IBl67DOoFZ0cHDhasf512oBznr9kkfAGjzt8xyiQbbak57Wa9Y1yGySdlUHF83CF9RNv9qxZGyiwFoWI4FesQ4ztnMBGgvVeCBSBqmgOiaSjwbgdsiBVU7kiK48N7XaTlocg27pZiMRH3P48C2HNsIGNqUbtPpwarYaSOvJrphNcTwTyoWNkAsZACALHP6kNhn8NNdfeXfaYFf2bNTnvLTQ5pCBUOazf89SilMlfBjmlz511ujORRfaRBVbctF3kWrbV5YzwYMNlaWZKnp7D8uOqhP8JNRQnKbYY4LL57KA
lea edi, [ebp - 0x23d0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x69
movsw word es:[edi], word [esi]
mov esi, str.ZcCy2yuAh0A89sbBcWO6DsGwFeJMDFl8YOgIYg8euWZdbNEe7NFA5sw139D74Qlld2lcfq6zN2wibAqA5QSQxOiTMUnhvRnou0tTddnDAYAxddQEYxmtItt2jvkCxmh0D0OEZLkJh616fQBOZ9VfR2QTvKy6kJEralzNM8PVpRaLtN2aBOe6fIkcXsm1XXBoa5Nqp3jvedse1lrNcssz8HETMJcKrza1JAIBJY3LoexUugH317AVp6YR0Hax9ocaoh1eUXnvuBhDOSPwIZPfjW8ePVTI6nEBPlxqpIOMaIeZyuJAdvZyglrocJWCGZLKZs7XJoLvaDDJzkQt2HHHvCHv3ZBIZ9cq64l353ZhIkVxT2ngldOyhk3VdfL603T14lQjo75rCRo5fQ2P24OUyeRMGelMFm5xhUt
lea edi, [ebp - 0x2044]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x73
lea edi, [ebp - 0x25a0]
mov esi, str.eJlhzVTnia4m8mxq6Axn6WNY98Xk8an3b9YGRs77Eyv6sXxpzzUSgh8hq0ypqPsLOfjh6GJKw19xahOj6iVTy1pS2tW0mZhV91s4rEnAFms1JMkt7YpDGkNhAWd91P1svvGaHA87ElzzS36puoPicThSGDXDlF6ICJg6J2pAKwHt4agdXDnI1m1mcCTYjdItucVpCss9vVCKBFMBxpzxOYixMVxi6TzL0v0srGkE0awtsZv9DwpO8RhlIYMyqsmpDnRR0oKTzRhqUkbeXtBpKmIGPLXlEeQvikyd0134bPwJCmuIwisQs8mbbHh5DbZVOF7fu4AaosiLngGQDjJ8hOw2U8udS26oXs7y6MvfWkQMd5nKtOj98Czj96hXo1uAYK6YyyfD2SKJTDStBZ0hREx1hWl8ps0VCZXXuqPl7id6wT1ERtk6AM78xsWyil4Jsl3pIMC7jECqc
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
lea eax, [ebp - 0x4f4]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x2820]
call fcn.00405a00
lea eax, [ebp - 0x2820]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2820]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0xdac]
push eax
lea ecx, [ebp - 0x2838]
call fcn.00405a00
lea eax, [ebp - 0x2838]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2838]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x176c]
push eax
lea ecx, [ebp - 0x2850]
call fcn.00405a00
lea eax, [ebp - 0x2850]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2850]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x15f8]
push eax
lea ecx, [ebp - 0x2868]
call fcn.00405a00
lea eax, [ebp - 0x2868]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2868]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x2200]
push eax
lea ecx, [ebp - 0x2880]
call fcn.00405a00
lea eax, [ebp - 0x2880]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2880]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0xa14]
push eax
lea ecx, [ebp - 0x2898]
call fcn.00405a00
lea eax, [ebp - 0x2898]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2898]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0xb34]
push eax
lea ecx, [ebp - 0x28b0]
call fcn.00405a00
lea eax, [ebp - 0x28b0]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x28b0]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0xef8]
push eax
lea ecx, [ebp - 0x2808]
call fcn.00405a00
lea eax, [ebp - 0x2808]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2808]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x1ea0]
push eax
lea ecx, [ebp - 0x28c8]
call fcn.00405a00
lea eax, [ebp - 0x28c8]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x28c8]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x2778]
push eax
lea ecx, [ebp - 0x28e0]
call fcn.00405a00
lea eax, [ebp - 0x28e0]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x28e0]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x5dc]
push eax
lea ecx, [ebp - 0x28f8]
call fcn.00405a00
lea eax, [ebp - 0x28f8]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x28f8]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x1338]
push eax
lea ecx, [ebp - 0x2910]
call fcn.00405a00
lea eax, [ebp - 0x2910]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2910]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0xc64]
push eax
lea ecx, [ebp - 0x2928]
call fcn.00405a00
lea eax, [ebp - 0x2928]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2928]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x1088]
push eax
lea ecx, [ebp - 0x2940]
call fcn.00405a00
lea eax, [ebp - 0x2940]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2940]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x90c]
push eax
lea ecx, [ebp - 0x2958]
call fcn.00405a00
lea eax, [ebp - 0x2958]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2958]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x1494]
push eax
lea ecx, [ebp - 0x2970]
call fcn.00405a00
lea eax, [ebp - 0x2970]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2970]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x6f4]
push eax
lea ecx, [ebp - 0x27f0]
call fcn.00405a00
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0x27f0]
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x27f0]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x23d0]
push eax
lea ecx, [ebp - 0x2988]
call fcn.00405a00
lea eax, [ebp - 0x2988]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2988]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x2044]
push eax
lea ecx, [ebp - 0x29a0]
call fcn.00405a00
lea eax, [ebp - 0x29a0]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x29a0]
mov byte [ebp - 4], 0
call fcn.00405b60
lea eax, [ebp - 0x25a0]
push eax
lea ecx, [ebp - 0x2790]
call fcn.00405a00
lea eax, [ebp - 0x2790]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x2a3c]
call fcn.00407ea0
lea ecx, [ebp - 0x2790]
mov byte [ebp - 4], 0
call fcn.00405b60
mov edi, dword [ebp - 0x2a50]
test edi, edi
je 0x501ace
lea eax, [ebp - 0x29b8]
mov dword [ebp - 0x2a48], 0
push 0xf3
push eax
mov dword [ebp - 0x2a44], 0
mov dword [ebp - 0x2a40], 0
call fcn.00407660
mov ecx, eax
call fcn.00509f80
cmp dword [eax + 0x14], 8
jb 0x5015b4
mov eax, dword [eax]
lea ecx, [ebp - 0x2a48]
push ecx
push 0xf003f
push 0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [ebp - 0x29b8]
mov esi, eax
call fcn.00402680
test esi, esi
jne 0x501ace
lea eax, [ebp - 0x29d0]
push 0xf4
push eax
call fcn.00407660
mov ecx, eax
call fcn.00509f80
cmp dword [eax + 0x14], 8
jb 0x501603
mov eax, dword [eax]
lea ecx, [ebp - 0x2a44]
push ecx
push 0xf003f
push 0
push eax
push dword [ebp - 0x2a48]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [ebp - 0x29d0]
mov esi, eax
call fcn.00402680
test esi, esi
je 0x501714
mov dword [ebp - 0x2a68], 0
mov dword [ebp - 0x2a64], 0
mov dword [ebp - 0x2a60], 0
mov ecx, 0x55
mov byte [ebp - 4], 0x15
mov esi, str.MOpx5aWeTOiwDNE9PL2VCoGGIMiYgVnyPV1U5ZSTLFtLlwsobjgzD9raNWi5FZsfmuRpewS2muWt8eXxA3QrnOQ52pvi47Bx2cRMhXU8rqkChUDJWQCusAbDBavCXhtiSm9HaLSCMEuhwtTLrPRiG7DeD3bLdQeabh7nx0NewBKv5JAQFOvuroWCPK7Jw6Et04M8TavrphIKav0kzi9Iu8sanVNcSb1jZimYO4AKPTGp5YdBFEK9dz64dkFwIcBPLNj1Y5TpyG0rn1cLV0LOo5R9KlvAiVdQNZoLn6zftgqP0Npr9LWi6ZvSq6poOCNXTffqvmNpy2Vje8Ulj016gf
lea edi, [ebp - 0x11e0]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x11e0]
push eax
lea ecx, [ebp - 0x27a8]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00405a00
lea eax, [ebp - 0x27a8]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x2a68]
call fcn.00407ea0
lea ecx, [ebp - 0x27a8]
mov byte [ebp - 4], 0x15
call fcn.00405b60
lea eax, [ebp - 0x29e8]
push 0xf4
push eax
call fcn.00407660
mov ecx, eax
call fcn.00509f80
cmp dword [eax + 0x14], 8
jb 0x5016c1
mov eax, dword [eax]
push 0
lea ecx, [ebp - 0x2a44]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push eax
push dword [ebp - 0x2a48]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea ecx, [ebp - 0x29e8]
mov esi, eax
call fcn.00402680
lea ecx, [ebp - 0x2a68]
test esi, esi
je 0x501705
call fcn.00405ba0
jmp 0x501ace
mov byte [ebp - 4], 0
call fcn.00405ba0
mov edi, dword [ebp - 0x2a50]
lea eax, [ebp - 0x2a00]
push 0xf5
push eax
call fcn.00407660
mov ecx, eax
call fcn.00509f80
cmp dword [eax + 0x14], 8
jb 0x501734
mov eax, dword [eax]
lea ecx, [ebp - 0x2a40]
push ecx
push 0xf003f
push 0
push eax
push dword [ebp - 0x2a44]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [ebp - 0x2a00]
mov esi, eax
call fcn.00402680
test esi, esi
je 0x5017b8
lea eax, [ebp - 0x2a18]
push 0xf5
push eax
call fcn.00407660
mov ecx, eax
call fcn.00509f80
cmp dword [eax + 0x14], 8
jb 0x501780
mov eax, dword [eax]
push 0
lea ecx, [ebp - 0x2a40]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push eax
push dword [ebp - 0x2a44]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea ecx, [ebp - 0x2a18]
mov esi, eax
call fcn.00402680
test esi, esi
jne 0x501ace
push 0x104
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.007512b0
add esp, 0xc
cmp dword [edi + 0x14], 8
jb 0x5017d6
mov edi, dword [edi]
lea eax, [ebp - 0x218]
push eax
push edi
call fcn.007388d3
push 0x104
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.007512b0
add esp, 0x14
call fcn.006ec5ad
lea ecx, [ebp - 0x218]
mov dword [ebp - 0x2a4c], 0xbb8
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x501811
lea eax, [ebp - 0x2a4c]
sub ecx, edx
push eax
lea eax, [ebp - 0x420]
push eax
push ecx
lea eax, [ebp - 0x218]
push eax
call fcn.00732feb
call fcn.0073bfe6
push 0x208
mov dword [ebp - 0x2a6c], eax
lea eax, [ebp - 0x1afc]
push 0
push eax
call fcn.007512b0
lea eax, [ebp - 0x1afc]
push eax
lea eax, [ebp - 0x420]
push eax
call fcn.0073828c
add esp, 0x24
call fcn.006f231d
push 4
lea eax, [ebp - 0x2a6c]
push eax
push 4
push 0
lea eax, [ebp - 0x1afc]
push eax
push dword [ebp - 0x2a40]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
call fcn.006f124c
test ebx, ebx
je 0x501a2e
push 0x104
lea eax, [ebp - 0x31c]
push 0
push eax
call fcn.007512b0
push 0x208
lea eax, [ebp - 0x1d04]
push 0
push eax
call fcn.007512b0
push 0x104
lea eax, [ebp - 0x114]
push 0
push eax
call fcn.007512b0
add esp, 0x24
xor ecx, ecx
nop dword [eax]
mov al, byte [ebp + ecx - 0x218]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x115], al
test al, al
jne 0x5018e0
call fcn.006f2812
lea eax, [ebp - 0x2a30]
push 0xf6
push eax
call fcn.00407660
mov ecx, eax
call fcn.00509f00
cmp dword [eax + 0x14], 0x10
jb 0x50191a
mov eax, dword [eax]
mov esi, eax
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x501920
lea edi, [ebp - 0x114]
sub eax, esi
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x501930
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x2a30]
call fcn.00405b60
lea ecx, [ebp - 0x2a5c]
mov dword [ebp - 0x2a4c], 0xbb8
call fcn.00523ad0
mov ecx, 0x42
mov byte [ebp - 4], 0x17
mov esi, str.UtRPO3w7il7lmms5WsvG1QujQsriwG8DMQd4DheybOMmmnVdE2799xBILAYLjavPFY2Ychg1AeVDe4xqhO5M5E7OaDkNAOkLHDwRHHG7jUIWM9etTVCL1tm7tCIEAV5U4pR2CCB1wuWcfvi1o6aScXbIGour9mN18K4scxI9p528DHoEZJOGe0fWD5qd0BzxXAtQT2Vn88WOBQabwBD1x82rNm9ZWhu8zCgnJOXwocptEnzdFlzlXfgKOo9NWPBrh6Cl8m19jy
lea edi, [ebp - 0x800]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x800]
push eax
lea ecx, [ebp - 0x27c0]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00405a00
lea eax, [ebp - 0x27c0]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x2a5c]
call fcn.00407ea0
lea ecx, [ebp - 0x27c0]
mov byte [ebp - 4], 0x17
call fcn.00405b60
lea ecx, [ebp - 0x114]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5019c0
lea eax, [ebp - 0x2a4c]
sub ecx, edx
push eax
lea eax, [ebp - 0x31c]
push eax
push ecx
lea eax, [ebp - 0x114]
push eax
call fcn.00732feb
lea eax, [ebp - 0x1d04]
push eax
lea eax, [ebp - 0x31c]
push eax
call fcn.0073828c
add esp, 0x18
cmp dword [ebx + 0x14], 8
jb 0x501a02
mov ebx, dword [ebx]
push 0x104
push ebx
push 1
push 0
lea eax, [ebp - 0x1d04]
push eax
push dword [ebp - 0x2a40]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea ecx, [ebp - 0x2a5c]
mov byte [ebp - 4], 0
call fcn.00405ba0
cmp dword [ebp - 0x2a40], 0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
je 0x501a4a
call fcn.006ee260
push dword [ebp - 0x2a40]
call ebx
cmp dword [ebp - 0x2a44], 0
je 0x501ac1
lea ecx, [ebp - 0x2a5c]
call fcn.00523ad0
mov ecx, 0x61
mov byte [ebp - 4], 0x19
mov esi, str.v8LljPShNVZ9sTjb0wyxuHJpHCXD9SuJZCGg7gBJTONtzWYpn7vOY2vQOS4FceC3VbpxfQ9pZPFGQT5IowhYfIHcrpUL2D7VXvnYmb7hyQ0IMilVfQnpI1tdrhCAfPohQThGDl8VaIMaYdgojnHkvGFGtjPOnqZh3L9jeekVK7aCv7VjmpNkYzXoifVsNJKD9RAFKwCNX7jMBUL8nlgnML7hRpLnufKD70x6zVxfNOdYnseKkhCJjo4cU7QJEZNsDAzifmPcgEp7PsvBy1u7b6cehVUhsRd46pTcm9dq33mJ32fnbXjXwSxVxCWuVc5By1EAVWGZoIniS9yZhxrp8dwFIExMGWwg2hDk16Hwvxf4n8Elazv4APj1gLe31H7f45qJHh
lea edi, [ebp - 0x18f4]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x18f4]
push eax
lea ecx, [ebp - 0x27d8]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.00405a00
lea eax, [ebp - 0x27d8]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x2a5c]
call fcn.00407ea0
lea ecx, [ebp - 0x27d8]
call fcn.00405b60
push dword [ebp - 0x2a44]
call ebx
lea ecx, [ebp - 0x2a5c]
mov byte [ebp - 4], 0
call fcn.00405ba0
call fcn.00402330
push dword [ebp - 0x2a48]
call ebx
lea ecx, [ebp - 0x2a3c]
call fcn.00405ba0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006e615c
mov esp, ebp
pop ebp
ret 8