Function at 0x4151c5
Capabilities:
Create directory

Disassembly:
push 0x3f8
mov eax, 0x460cbb
call fcn.00430a5a
and dword [ebp - 0x3d8], 0
lea eax, [ebp - 0x218]
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
pop ecx
pop ecx
push 0x23
lea edx, [ebp - 0x218]
call fcn.00488db6
pop ecx
pop ecx
lea ecx, [ebp - 0x3e8]
call fcn.00432784
and dword [ebp - 4], 0
lea ecx, [ebp - 0x218]
mov edx, dword [eax]
call fcn.0040979e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e8]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x218]
call fcn.0049b5a5
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x415253
push 0
lea eax, [ebp - 0x218]
push eax
call esi
test eax, eax
je 0x4176bd
mov edi, 0x4ba058
lea ecx, [ebp - 0x3e8]
mov edx, edi
call fcn.004a7a39
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x218]
mov edx, dword [eax]
call fcn.0040979e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e8]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x218]
call fcn.0049b5a5
test eax, eax
jne 0x4152aa
push eax
lea eax, [ebp - 0x218]
push eax
call esi
test eax, eax
je 0x4176bd
push 0x48
lea eax, [ebp - 0x3d4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3d4]
call fcn.00434d98
push 0x50
mov dword [ebp - 4], 2
call dword [sym.imp.mfc140u.dll_operator_2]
mov esi, eax
pop ecx
mov dword [ebp - 0x3dc], esi
mov byte [ebp - 4], 3
test esi, esi
je 0x415321
push 0x50
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x404]
mov edx, edi
call fcn.0041c3fd
mov byte [ebp - 4], 4
mov ecx, esi
mov dword [ebp - 0x3d8], 1
push dword [eax]
call fcn.00434e1c
mov dword [ebp - 0x3e8], eax
jmp 0x415328
and dword [ebp - 0x3e8], 0
mov dword [ebp - 4], 2
test byte [ebp - 0x3d8], 1
je 0x415344
lea ecx, [ebp - 0x404]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
cmp dword [0x4e59c4], 1
jne 0x41576e
push ecx
push 0
mov ecx, 0x4f62c0
call fcn.00429c92
xor esi, esi
cmp dword [0x4f6148], esi
jle 0x4153e5
push esi
call fcn.0042735f
push eax
lea ecx, [ebp - 0x358]
call fcn.004265ee
push 7
pop ecx
xor eax, eax
mov byte [ebp - 4], 6
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x24c]
call fcn.004147c5
mov byte [ebp - 4], 7
lea eax, [ebp - 0x328]
cmp dword [ebp - 0x314], 8
push ecx
cmovae eax, dword [ebp - 0x328]
push eax
push ecx
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x24c]
call fcn.00480e99
lea ecx, [ebp - 0x24c]
call fcn.0040da0c
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 2
call fcn.004266a8
inc esi
cmp esi, dword [0x4f6148]
jl 0x415368
mov eax, dword [0x4f62c8]
xor edi, edi
test eax, eax
jle 0x41576e
xor ecx, ecx
mov dword [ebp - 0x3d8], ecx
test ecx, ecx
js 0x415a4e
cmp edi, eax
jge 0x415a4e
mov esi, dword [0x4f62c4]
add esi, ecx
lea ecx, [ebp - 0x31c]
push esi
call fcn.0042003f
lea eax, [esi + 0x18]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x304]
call fcn.0042003f
lea eax, [esi + 0x30]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0042003f
lea eax, [esi + 0x48]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0042003f
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x2bc]
call fcn.0042003f
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x2a4], eax
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0xc
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3e0]
mov edx, 0x4ba068
call fcn.0041c3fd
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.00434e1c
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0xf
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
mov esi, 0xfde9
lea edx, [ebp - 0x31c]
push esi
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x14], 0x10
jb 0x4154e1
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0xf
call fcn.00420888
push esi
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x11
cmp dword [eax + 0x14], 0x10
jb 0x415520
mov eax, dword [eax]
push eax
push 0x4ba07c
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0xf
call fcn.00420888
push esi
lea edx, [ebp - 0x2ec]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b5a10
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x3e4]
call fcn.0041c3fd
mov byte [ebp - 4], 0x13
cmp dword [esi + 0x14], 0x10
jb 0x415575
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e4]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0xf
call fcn.00420888
mov esi, 0xfde9
lea edx, [ebp - 0x2d4]
push esi
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x14], 0x10
jb 0x4155c2
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
call fcn.00420888
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x415640
je 0x415639
sub eax, 0
je 0x415632
sub eax, 1
je 0x41562b
sub eax, 1
je 0x415624
sub eax, 1
jne 0x415679
push str.REG_BINARY
jmp 0x41566e
push str.REG_EXPAND_SZ
jmp 0x41566e
push str.REG_SZ
jmp 0x41566e
push str.REG_NONE
jmp 0x41566e
push str.REG_DWORD
jmp 0x41566e
sub eax, 5
je 0x415669
sub eax, 1
je 0x415662
sub eax, 1
je 0x41565b
sub eax, 4
jne 0x415679
push str.REG_QWORD
jmp 0x41566e
push str.REG_MULTI_SZ
jmp 0x41566e
push str.REG_LINK
jmp 0x41566e
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.00420cdd
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x3dc]
call fcn.0041c3fd
mov byte [ebp - 4], 0x17
cmp dword [esi + 0x14], 0x10
jb 0x4156ae
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3dc]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x15
call fcn.00420888
push 0xfde9
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x18
cmp dword [eax + 0x14], 0x10
jb 0x4156fa
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x15
call fcn.00420888
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x29c]
push eax
call fcn.00434f1f
lea ecx, [ebp - 0x230]
call fcn.004200a9
lea ecx, [ebp - 0x29c]
call fcn.00434e9a
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 2
call fcn.00426d05
mov ecx, dword [ebp - 0x3d8]
inc edi
mov eax, dword [0x4f62c8]
add ecx, 0x7c
mov dword [ebp - 0x3d8], ecx
cmp edi, eax
jl 0x4153fc
cmp dword [0x4e59c8], 1
jne 0x415b9e
push ecx
push 0
mov ecx, 0x4f62e0
call fcn.00429e6f
xor esi, esi
cmp dword [0x4f6168], esi
jle 0x41580f
push esi
call fcn.00427973
push eax
lea ecx, [ebp - 0x324]
call fcn.004266e6
push 7
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x19
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x24c]
call fcn.004147c5
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x30c]
cmp dword [ebp - 0x2f8], 8
push ecx
cmovae eax, dword [ebp - 0x30c]
push eax
push ecx
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x24c]
call fcn.00465e60
lea ecx, [ebp - 0x24c]
call fcn.0040da0c
lea ecx, [ebp - 0x324]
mov byte [ebp - 4], 2
call fcn.00426762
inc esi
cmp esi, dword [0x4f6168]
jl 0x415792
mov eax, dword [0x4f62e8]
xor edi, edi
test eax, eax
jle 0x415b9e
xor ecx, ecx
mov dword [ebp - 0x3d8], ecx
test ecx, ecx
js 0x415a4e
cmp edi, eax
jge 0x415a4e
mov esi, dword [0x4f62e4]
add esi, ecx
lea ecx, [ebp - 0x31c]
push esi
call fcn.0042003f
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x304]
call fcn.0042003f
lea eax, [esi + 0x30]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0042003f
lea eax, [esi + 0x48]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0042003f
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x2bc]
call fcn.0042003f
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x2a4], eax
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x1f
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3dc]
mov edx, 0x4ba068
call fcn.0041c3fd
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.00434e1c
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x22
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
mov esi, 0xfde9
lea edx, [ebp - 0x31c]
push esi
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x23
cmp dword [eax + 0x14], 0x10
jb 0x41590b
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x22
call fcn.00420888
push esi
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x24
cmp dword [eax + 0x14], 0x10
jb 0x41594a
mov eax, dword [eax]
push eax
push 0x4ba07c
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x22
call fcn.00420888
push esi
lea edx, [ebp - 0x2ec]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b5a10
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x3e4]
call fcn.0041c3fd
mov byte [ebp - 4], 0x26
cmp dword [esi + 0x14], 0x10
jb 0x41599f
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e4]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x22
call fcn.00420888
mov esi, 0xfde9
lea edx, [ebp - 0x2d4]
push esi
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x27
cmp dword [eax + 0x14], 0x10
jb 0x4159ec
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
call fcn.00420888
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x28
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x415a70
je 0x415a69
sub eax, 0
je 0x415a62
sub eax, 1
je 0x415a5b
sub eax, 1
je 0x415a54
sub eax, 1
jne 0x415aa9
push str.REG_BINARY
jmp 0x415a9e
call dword [sym.imp.mfc140u.dll_AfxThrowInvalidArgException]
push str.REG_EXPAND_SZ
jmp 0x415a9e
push str.REG_SZ
jmp 0x415a9e
push str.REG_NONE
jmp 0x415a9e
push str.REG_DWORD
jmp 0x415a9e
sub eax, 5
je 0x415a99
sub eax, 1
je 0x415a92
sub eax, 1
je 0x415a8b
sub eax, 4
jne 0x415aa9
push str.REG_QWORD
jmp 0x415a9e
push str.REG_MULTI_SZ
jmp 0x415a9e
push str.REG_LINK
jmp 0x415a9e
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.00420cdd
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x3e0]
call fcn.0041c3fd
mov byte [ebp - 4], 0x2a
cmp dword [esi + 0x14], 0x10
jb 0x415ade
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x28
call fcn.00420888
push 0xfde9
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x2b
cmp dword [eax + 0x14], 0x10
jb 0x415b2a
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x28
call fcn.00420888
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x29c]
push eax
call fcn.00434f1f
lea ecx, [ebp - 0x230]
call fcn.004200a9
lea ecx, [ebp - 0x29c]
call fcn.00434e9a
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 2
call fcn.00426d30
mov ecx, dword [ebp - 0x3d8]
inc edi
mov eax, dword [0x4f62e8]
add ecx, 0x7c
mov dword [ebp - 0x3d8], ecx
cmp edi, eax
jl 0x415826
cmp dword [0x4e59cc], 1
jne 0x415e90
xor edi, edi
cmp dword [0x4f61a8], edi
jle 0x415e90
push edi
call fcn.004274bd
push eax
lea ecx, [ebp - 0x354]
call fcn.0042678d
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x2c
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3dc]
mov edx, 0x4ba068
call fcn.0041c3fd
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.00434e1c
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x2f
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
mov edx, 0x4ba09c
lea ecx, [ebp - 0x3e4]
call fcn.0041c3fd
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x29c]
push dword [eax]
push str.root
call fcn.00434ef1
lea ecx, [ebp - 0x3e4]
mov byte [ebp - 4], 0x2f
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
push 0xfde9
lea edx, [ebp - 0x33c]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x31
cmp dword [eax + 0x14], 0x10
jb 0x415c6c
mov eax, dword [eax]
push eax
push 0x4ba07c
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x2f
call fcn.00420888
push 0xfde9
lea edx, [ebp - 0x324]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b5a10
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x3e0]
call fcn.0041c3fd
mov byte [ebp - 4], 0x33
cmp dword [esi + 0x14], 0x10
jb 0x415cc5
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x2f
call fcn.00420888
mov esi, 0xfde9
lea edx, [ebp - 0x2bc]
push esi
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x34
cmp dword [eax + 0x14], 0x10
jb 0x415d12
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
call fcn.00420888
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x35
mov eax, dword [ebp - 0x2d8]
cmp eax, 4
ja 0x415d90
je 0x415d89
sub eax, 0
je 0x415d82
sub eax, 1
je 0x415d7b
sub eax, 1
je 0x415d74
sub eax, 1
jne 0x415dc9
push str.REG_BINARY
jmp 0x415dbe
push str.REG_EXPAND_SZ
jmp 0x415dbe
push str.REG_SZ
jmp 0x415dbe
push str.REG_NONE
jmp 0x415dbe
push str.REG_DWORD
jmp 0x415dbe
sub eax, 5
je 0x415db9
sub eax, 1
je 0x415db2
sub eax, 1
je 0x415dab
sub eax, 4
jne 0x415dc9
push str.REG_QWORD
jmp 0x415dbe
push str.REG_MULTI_SZ
jmp 0x415dbe
push str.REG_LINK
jmp 0x415dbe
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.00420cdd
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x3d8]
call fcn.0041c3fd
mov byte [ebp - 4], 0x37
cmp dword [esi + 0x14], 0x10
jb 0x415dfe
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3d8]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x35
call fcn.00420888
cmp dword [ebp - 0x2a4], 1
lea ecx, [ebp - 0x29c]
jne 0x415e3d
push 0x4b5844
jmp 0x415e42
push 0x4ba2e4
push str.is64
call fcn.00434ef1
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x29c]
push eax
call fcn.00434f1f
lea ecx, [ebp - 0x230]
call fcn.004200a9
lea ecx, [ebp - 0x29c]
call fcn.00434e9a
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 2
call fcn.00426835
inc edi
cmp edi, dword [0x4f61a8]
jl 0x415bb9
cmp dword [0x4e59d0], 1
jne 0x4161a7
xor edi, edi
cmp dword [0x4f61c8], edi
jle 0x4161a7
mov esi, 0xfde9
push edi
call fcn.00427653
push eax
lea ecx, [ebp - 0x36c]
call fcn.00426876
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x38
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3dc]
mov edx, 0x4ba068
call fcn.0041c3fd
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.00434e1c
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x3b
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
push esi
lea edx, [ebp - 0x2f4]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x3c
cmp dword [eax + 0x14], 0x10
jb 0x415f29
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x3b
call fcn.00420888
push esi
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x3d
cmp dword [eax + 0x14], 0x10
jb 0x415f68
mov eax, dword [eax]
push eax
push 0x4ba07c
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x3b
call fcn.00420888
push esi
lea edx, [ebp - 0x33c]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b5a10
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x3e4]
call fcn.0041c3fd
mov byte [ebp - 4], 0x3f
cmp dword [esi + 0x14], 0x10
jb 0x415fbd
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e4]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x3b
call fcn.00420888
mov esi, 0xfde9
lea edx, [ebp - 0x2c0]
push esi
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x40
cmp dword [eax + 0x14], 0x10
jb 0x41600a
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
call fcn.00420888
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x41
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x416088
je 0x416081
sub eax, 0
je 0x41607a
sub eax, 1
je 0x416073
sub eax, 1
je 0x41606c
sub eax, 1
jne 0x4160c1
push str.REG_BINARY
jmp 0x4160b6
push str.REG_EXPAND_SZ
jmp 0x4160b6
push str.REG_SZ
jmp 0x4160b6
push str.REG_NONE
jmp 0x4160b6
push str.REG_DWORD
jmp 0x4160b6
sub eax, 5
je 0x4160b1
sub eax, 1
je 0x4160aa
sub eax, 1
je 0x4160a3
sub eax, 4
jne 0x4160c1
push str.REG_QWORD
jmp 0x4160b6
push str.REG_MULTI_SZ
jmp 0x4160b6
push str.REG_LINK
jmp 0x4160b6
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.00420cdd
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x3e0]
call fcn.0041c3fd
mov byte [ebp - 4], 0x43
cmp dword [esi + 0x14], 0x10
jb 0x4160f6
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x41
call fcn.00420888
mov esi, 0xfde9
lea edx, [ebp - 0x2dc]
push esi
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x44
cmp dword [eax + 0x14], 0x10
jb 0x416143
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x41
call fcn.00420888
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x29c]
push eax
call fcn.00434f1f
lea ecx, [ebp - 0x230]
call fcn.004200a9
lea ecx, [ebp - 0x29c]
call fcn.00434e9a
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 2
call fcn.0042693a
inc edi
cmp edi, dword [0x4f61c8]
jl 0x415eb0
cmp dword [0x4e59d4], 1
jne 0x4165d1
push ecx
push 0
mov ecx, 0x4f6300
call fcn.0042a04c
xor esi, esi
cmp dword [0x4f61e8], esi
jle 0x416248
push esi
call fcn.004278ae
push eax
lea ecx, [ebp - 0x320]
call fcn.00426983
push 7
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x45
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x24c]
call fcn.004147c5
mov byte [ebp - 4], 0x46
lea eax, [ebp - 0x308]
cmp dword [ebp - 0x2f4], 8
push ecx
cmovae eax, dword [ebp - 0x308]
push eax
push ecx
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x24c]
call fcn.0048d5fe
lea ecx, [ebp - 0x24c]
call fcn.0040da0c
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 2
call fcn.004269f3
inc esi
cmp esi, dword [0x4f61e8]
jl 0x4161cb
mov eax, dword [0x4f6308]
xor edi, edi
test eax, eax
jle 0x4165d1
xor ecx, ecx
mov dword [ebp - 0x3d8], ecx
test ecx, ecx
js 0x415a4e
cmp edi, eax
jge 0x415a4e
mov esi, dword [0x4f6304]
add esi, ecx
lea ecx, [ebp - 0x31c]
push esi
call fcn.0042003f
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0x47
push eax
lea ecx, [ebp - 0x304]
call fcn.0042003f
lea eax, [esi + 0x30]
mov byte [ebp - 4], 0x48
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0042003f
lea eax, [esi + 0x48]
mov byte [ebp - 4], 0x49
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0042003f
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0x4a
push eax
lea ecx, [ebp - 0x2bc]
call fcn.0042003f
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x2a4], eax
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x4b
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3dc]
mov edx, 0x4ba068
call fcn.0041c3fd
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.00434e1c
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x4e
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
mov esi, 0xfde9
lea edx, [ebp - 0x31c]
push esi
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x4f
cmp dword [eax + 0x14], 0x10
jb 0x416344
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x4e
call fcn.00420888
push esi
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x50
cmp dword [eax + 0x14], 0x10
jb 0x416383
mov eax, dword [eax]
push eax
push 0x4ba07c
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x4e
call fcn.00420888
push esi
lea edx, [ebp - 0x2ec]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b5a10
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x3e4]
call fcn.0041c3fd
mov byte [ebp - 4], 0x52
cmp dword [esi + 0x14], 0x10
jb 0x4163d8
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e4]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x4e
call fcn.00420888
mov esi, 0xfde9
lea edx, [ebp - 0x2d4]
push esi
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x53
cmp dword [eax + 0x14], 0x10
jb 0x416425
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
call fcn.00420888
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x54
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x4164a3
je 0x41649c
sub eax, 0
je 0x416495
sub eax, 1
je 0x41648e
sub eax, 1
je 0x416487
sub eax, 1
jne 0x4164dc
push str.REG_BINARY
jmp 0x4164d1
push str.REG_EXPAND_SZ
jmp 0x4164d1
push str.REG_SZ
jmp 0x4164d1
push str.REG_NONE
jmp 0x4164d1
push str.REG_DWORD
jmp 0x4164d1
sub eax, 5
je 0x4164cc
sub eax, 1
je 0x4164c5
sub eax, 1
je 0x4164be
sub eax, 4
jne 0x4164dc
push str.REG_QWORD
jmp 0x4164d1
push str.REG_MULTI_SZ
jmp 0x4164d1
push str.REG_LINK
jmp 0x4164d1
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.00420cdd
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x3e0]
call fcn.0041c3fd
mov byte [ebp - 4], 0x56
cmp dword [esi + 0x14], 0x10
jb 0x416511
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x54
call fcn.00420888
push 0xfde9
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x57
cmp dword [eax + 0x14], 0x10
jb 0x41655d
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x54
call fcn.00420888
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x29c]
push eax
call fcn.00434f1f
lea ecx, [ebp - 0x230]
call fcn.004200a9
lea ecx, [ebp - 0x29c]
call fcn.00434e9a
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 2
call fcn.00426d5b
mov ecx, dword [ebp - 0x3d8]
inc edi
mov eax, dword [0x4f6308]
add ecx, 0x7c
mov dword [ebp - 0x3d8], ecx
cmp edi, eax
jl 0x41625f
cmp dword [0x4e59d8], 1
jne 0x4169fb
push ecx
push 0
mov ecx, 0x4f6320
call fcn.0042a229
xor esi, esi
cmp dword [0x4f6208], esi
jle 0x416672
push esi
call fcn.004277e3
push eax
lea ecx, [ebp - 0x338]
call fcn.00426a1e
push 7
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x58
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x24c]
call fcn.004147c5
mov byte [ebp - 4], 0x59
lea eax, [ebp - 0x320]
cmp dword [ebp - 0x30c], 8
push ecx
cmovae eax, dword [ebp - 0x320]
push eax
push ecx
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x24c]
call fcn.00499c58
lea ecx, [ebp - 0x24c]
call fcn.0040da0c
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 2
call fcn.00426aaa
inc esi
cmp esi, dword [0x4f6208]
jl 0x4165f5
mov eax, dword [0x4f6328]
xor edi, edi
test eax, eax
jle 0x4169fb
xor ecx, ecx
mov dword [ebp - 0x3d8], ecx
test ecx, ecx
js 0x415a4e
cmp edi, eax
jge 0x415a4e
mov esi, dword [0x4f6324]
add esi, ecx
lea ecx, [ebp - 0x31c]
push esi
call fcn.0042003f
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0x5a
push eax
lea ecx, [ebp - 0x304]
call fcn.0042003f
lea eax, [esi + 0x30]
mov byte [ebp - 4], 0x5b
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0042003f
lea eax, [esi + 0x48]
mov byte [ebp - 4], 0x5c
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0042003f
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0x5d
push eax
lea ecx, [ebp - 0x2bc]
call fcn.0042003f
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x2a4], eax
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x5e
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3dc]
mov edx, 0x4ba068
call fcn.0041c3fd
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.00434e1c
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x61
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
mov esi, 0xfde9
lea edx, [ebp - 0x31c]
push esi
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x62
cmp dword [eax + 0x14], 0x10
jb 0x41676e
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x61
call fcn.00420888
push esi
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x63
cmp dword [eax + 0x14], 0x10
jb 0x4167ad
mov eax, dword [eax]
push eax
push 0x4ba07c
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x61
call fcn.00420888
push esi
lea edx, [ebp - 0x2ec]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b5a10
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x3e4]
call fcn.0041c3fd
mov byte [ebp - 4], 0x65
cmp dword [esi + 0x14], 0x10
jb 0x416802
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e4]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x61
call fcn.00420888
mov esi, 0xfde9
lea edx, [ebp - 0x2d4]
push esi
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x66
cmp dword [eax + 0x14], 0x10
jb 0x41684f
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
call fcn.00420888
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x67
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x4168cd
je 0x4168c6
sub eax, 0
je 0x4168bf
sub eax, 1
je 0x4168b8
sub eax, 1
je 0x4168b1
sub eax, 1
jne 0x416906
push str.REG_BINARY
jmp 0x4168fb
push str.REG_EXPAND_SZ
jmp 0x4168fb
push str.REG_SZ
jmp 0x4168fb
push str.REG_NONE
jmp 0x4168fb
push str.REG_DWORD
jmp 0x4168fb
sub eax, 5
je 0x4168f6
sub eax, 1
je 0x4168ef
sub eax, 1
je 0x4168e8
sub eax, 4
jne 0x416906
push str.REG_QWORD
jmp 0x4168fb
push str.REG_MULTI_SZ
jmp 0x4168fb
push str.REG_LINK
jmp 0x4168fb
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.00420cdd
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x68
lea ecx, [ebp - 0x3e0]
call fcn.0041c3fd
mov byte [ebp - 4], 0x69
cmp dword [esi + 0x14], 0x10
jb 0x41693b
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x67
call fcn.00420888
push 0xfde9
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x6a
cmp dword [eax + 0x14], 0x10
jb 0x416987
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x67
call fcn.00420888
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x29c]
push eax
call fcn.00434f1f
lea ecx, [ebp - 0x230]
call fcn.004200a9
lea ecx, [ebp - 0x29c]
call fcn.00434e9a
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 2
call fcn.00426d86
mov ecx, dword [ebp - 0x3d8]
inc edi
mov eax, dword [0x4f6328]
add ecx, 0x7c
mov dword [ebp - 0x3d8], ecx
cmp edi, eax
jl 0x416689
cmp dword [0x4e59dc], 1
jne 0x416d51
xor edi, edi
cmp dword [0x4f6228], edi
jle 0x416d51
push edi
call fcn.00427588
push eax
lea ecx, [ebp - 0x338]
call fcn.00426add
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x6b
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3dc]
mov edx, 0x4ba068
call fcn.0041c3fd
mov byte [ebp - 4], 0x6c
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.00434e1c
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x6e
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
mov edx, 0x4ba0a8
lea ecx, [ebp - 0x3e4]
call fcn.0041c3fd
mov byte [ebp - 4], 0x6f
lea ecx, [ebp - 0x400]
push dword [eax]
call fcn.0042162e
mov byte [ebp - 4], 0x70
cmp dword [eax + 0x14], 0x10
jb 0x416a9d
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
call fcn.00420888
lea ecx, [ebp - 0x3e4]
mov byte [ebp - 4], 0x6e
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
push 0xfde9
lea edx, [ebp - 0x320]
lea ecx, [ebp - 0x400]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x71
cmp dword [eax + 0x14], 0x10
jb 0x416aec
mov eax, dword [eax]
push eax
push 0x4ba07c
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
mov byte [ebp - 4], 0x6e
call fcn.00420888
push 0xfde9
lea edx, [ebp - 0x308]
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b5a10
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x3e0]
call fcn.0041c3fd
mov byte [ebp - 4], 0x73
lea ecx, [ebp - 0x400]
push dword [eax]
call fcn.0042162e
mov byte [ebp - 4], 0x74
cmp dword [esi + 0x14], 0x10
jb 0x416b56
mov esi, dword [esi]
cmp dword [eax + 0x14], 0x10
jb 0x416b5e
mov eax, dword [eax]
push esi
push eax
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x400]
call fcn.00420888
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x6e
call fcn.00420888
mov esi, 0xfde9
lea edx, [ebp - 0x2b8]
push esi
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x75
cmp dword [eax + 0x14], 0x10
jb 0x416bb5
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x248]
call fcn.00420888
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x76
mov eax, dword [ebp - 0x2d4]
cmp eax, 4
ja 0x416c33
je 0x416c2c
sub eax, 0
je 0x416c25
sub eax, 1
je 0x416c1e
sub eax, 1
je 0x416c17
sub eax, 1
jne 0x416c6c
push str.REG_BINARY
jmp 0x416c61
push str.REG_EXPAND_SZ
jmp 0x416c61
push str.REG_SZ
jmp 0x416c61
push str.REG_NONE
jmp 0x416c61
push str.REG_DWORD
jmp 0x416c61
sub eax, 5
je 0x416c5c
sub eax, 1
je 0x416c55
sub eax, 1
je 0x416c4e
sub eax, 4
jne 0x416c6c
push str.REG_QWORD
jmp 0x416c61
push str.REG_MULTI_SZ
jmp 0x416c61
push str.REG_LINK
jmp 0x416c61
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.00420cdd
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x77
lea ecx, [ebp - 0x3d8]
call fcn.0041c3fd
mov byte [ebp - 4], 0x78
cmp dword [esi + 0x14], 0x10
jb 0x416ca1
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3d8]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x76
call fcn.00420888
push 0xfde9
lea edx, [ebp - 0x2d0]
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x79
cmp dword [eax + 0x14], 0x10
jb 0x416ced
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x76
call fcn.00420888
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x29c]
push eax
call fcn.00434f1f
lea ecx, [ebp - 0x230]
call fcn.004200a9
lea ecx, [ebp - 0x29c]
call fcn.00434e9a
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 2
call fcn.00426b63
inc edi
cmp edi, dword [0x4f6228]
jl 0x416a16
cmp dword [0x4e59e0], 1
jne 0x41717b
push ecx
push 0
mov ecx, 0x4f6340
call fcn.0042a406
xor esi, esi
cmp dword [0x4f6248], esi
jle 0x416df2
push esi
call fcn.00427a3e
push eax
lea ecx, [ebp - 0x338]
call fcn.00426b99
push 7
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x7a
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x24c]
call fcn.004147c5
mov byte [ebp - 4], 0x7b
lea eax, [ebp - 0x320]
cmp dword [ebp - 0x30c], 8
push ecx
cmovae eax, dword [ebp - 0x320]
push eax
push ecx
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0x24c]
call fcn.00411f19
lea ecx, [ebp - 0x24c]
call fcn.0040da0c
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 2
call fcn.00426c25
inc esi
cmp esi, dword [0x4f6248]
jl 0x416d75
mov eax, dword [0x4f6348]
xor edi, edi
test eax, eax
jle 0x41717b
xor ecx, ecx
mov dword [ebp - 0x3d8], ecx
test ecx, ecx
js 0x415a4e
cmp edi, eax
jge 0x415a4e
mov esi, dword [0x4f6344]
add esi, ecx
lea ecx, [ebp - 0x31c]
push esi
call fcn.0042003f
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0x7c
push eax
lea ecx, [ebp - 0x304]
call fcn.0042003f
lea eax, [esi + 0x30]
mov byte [ebp - 4], 0x7d
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0042003f
lea eax, [esi + 0x48]
mov byte [ebp - 4], 0x7e
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0042003f
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0x7f
push eax
lea ecx, [ebp - 0x2bc]
call fcn.0042003f
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x2a4], eax
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x80
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3dc]
mov edx, 0x4ba068
call fcn.0041c3fd
mov byte [ebp - 4], 0x81
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.00434e1c
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x83
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
mov esi, 0xfde9
lea edx, [ebp - 0x31c]
push esi
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x84
cmp dword [eax + 0x14], 0x10
jb 0x416eee
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x83
call fcn.00420888
push esi
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x85
cmp dword [eax + 0x14], 0x10
jb 0x416f2d
mov eax, dword [eax]
push eax
push 0x4ba07c
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x83
call fcn.00420888
push esi
lea edx, [ebp - 0x2ec]
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b5a10
mov byte [ebp - 4], 0x86
lea ecx, [ebp - 0x3e4]
call fcn.0041c3fd
mov byte [ebp - 4], 0x87
cmp dword [esi + 0x14], 0x10
jb 0x416f82
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e4]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x83
call fcn.00420888
mov esi, 0xfde9
lea edx, [ebp - 0x2d4]
push esi
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x88
cmp dword [eax + 0x14], 0x10
jb 0x416fcf
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x248]
call fcn.00420888
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x89
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x41704d
je 0x417046
sub eax, 0
je 0x41703f
sub eax, 1
je 0x417038
sub eax, 1
je 0x417031
sub eax, 1
jne 0x417086
push str.REG_BINARY
jmp 0x41707b
push str.REG_EXPAND_SZ
jmp 0x41707b
push str.REG_SZ
jmp 0x41707b
push str.REG_NONE
jmp 0x41707b
push str.REG_DWORD
jmp 0x41707b
sub eax, 5
je 0x417076
sub eax, 1
je 0x41706f
sub eax, 1
je 0x417068
sub eax, 4
jne 0x417086
push str.REG_QWORD
jmp 0x41707b
push str.REG_MULTI_SZ
jmp 0x41707b
push str.REG_LINK
jmp 0x41707b
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.00420cdd
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x3e0]
call fcn.0041c3fd
mov byte [ebp - 4], 0x8b
cmp dword [esi + 0x14], 0x10
jb 0x4170bb
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x89
call fcn.00420888
push 0xfde9
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x8c
cmp dword [eax + 0x14], 0x10
jb 0x417107
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x89
call fcn.00420888
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x29c]
push eax
call fcn.00434f1f
lea ecx, [ebp - 0x230]
call fcn.004200a9
lea ecx, [ebp - 0x29c]
call fcn.00434e9a
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 2
call fcn.00426db1
mov ecx, dword [ebp - 0x3d8]
inc edi
mov eax, dword [0x4f6348]
add ecx, 0x7c
mov dword [ebp - 0x3d8], ecx
cmp edi, eax
jl 0x416e09
cmp dword [0x4e59e4], 1
jne 0x4175b2
push ecx
push 0
mov ecx, 0x4f6360
call fcn.0042a5e3
xor esi, esi
cmp dword [0x4f6268], esi
jle 0x417229
push esi
call fcn.0042771e
push eax
lea ecx, [ebp - 0x320]
call fcn.00426c58
push 7
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x8d
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x24c]
call fcn.004147c5
mov byte [ebp - 4], 0x8e
lea eax, [ebp - 0x308]
cmp dword [ebp - 0x2f4], 8
push ecx
cmovae eax, dword [ebp - 0x308]
lea ecx, [ebp - 0x24c]
push eax
push dword [ebp - 0x2c0]
push dword [ebp - 0x2a4]
call fcn.004a5bdc
lea ecx, [ebp - 0x24c]
call fcn.0040da0c
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 2
call fcn.00426cc8
inc esi
cmp esi, dword [0x4f6268]
jl 0x4171a3
mov eax, dword [0x4f6368]
xor edi, edi
test eax, eax
jle 0x4175b2
xor ecx, ecx
mov dword [ebp - 0x3d8], ecx
test ecx, ecx
js 0x415a4e
cmp edi, eax
jge 0x415a4e
mov esi, dword [0x4f6364]
add esi, ecx
lea ecx, [ebp - 0x31c]
push esi
call fcn.0042003f
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0x8f
push eax
lea ecx, [ebp - 0x304]
call fcn.0042003f
lea eax, [esi + 0x30]
mov byte [ebp - 4], 0x90
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0042003f
lea eax, [esi + 0x48]
mov byte [ebp - 4], 0x91
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0042003f
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0x92
push eax
lea ecx, [ebp - 0x2bc]
call fcn.0042003f
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x2a4], eax
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x93
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3dc]
mov edx, 0x4ba068
call fcn.0041c3fd
mov byte [ebp - 4], 0x94
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.00434e1c
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x96
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
mov esi, 0xfde9
lea edx, [ebp - 0x31c]
push esi
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x97
cmp dword [eax + 0x14], 0x10
jb 0x417325
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x96
call fcn.00420888
push esi
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x98
cmp dword [eax + 0x14], 0x10
jb 0x417364
mov eax, dword [eax]
push eax
push 0x4ba07c
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x96
call fcn.00420888
push esi
lea edx, [ebp - 0x2ec]
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b5a10
mov byte [ebp - 4], 0x99
lea ecx, [ebp - 0x3e4]
call fcn.0041c3fd
mov byte [ebp - 4], 0x9a
cmp dword [esi + 0x14], 0x10
jb 0x4173b9
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e4]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x96
call fcn.00420888
mov esi, 0xfde9
lea edx, [ebp - 0x2d4]
push esi
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x9b
cmp dword [eax + 0x14], 0x10
jb 0x417406
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x248]
call fcn.00420888
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x9c
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x417484
je 0x41747d
sub eax, 0
je 0x417476
sub eax, 1
je 0x41746f
sub eax, 1
je 0x417468
sub eax, 1
jne 0x4174bd
push str.REG_BINARY
jmp 0x4174b2
push str.REG_EXPAND_SZ
jmp 0x4174b2
push str.REG_SZ
jmp 0x4174b2
push str.REG_NONE
jmp 0x4174b2
push str.REG_DWORD
jmp 0x4174b2
sub eax, 5
je 0x4174ad
sub eax, 1
je 0x4174a6
sub eax, 1
je 0x41749f
sub eax, 4
jne 0x4174bd
push str.REG_QWORD
jmp 0x4174b2
push str.REG_MULTI_SZ
jmp 0x4174b2
push str.REG_LINK
jmp 0x4174b2
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.00420cdd
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x9d
lea ecx, [ebp - 0x3e0]
call fcn.0041c3fd
mov byte [ebp - 4], 0x9e
cmp dword [esi + 0x14], 0x10
jb 0x4174f2
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x9c
call fcn.00420888
push 0xfde9
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0x9f
cmp dword [eax + 0x14], 0x10
jb 0x41753e
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00434ef1
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x9c
call fcn.00420888
mov ecx, dword [ebp - 0x3e8]
lea eax, [ebp - 0x29c]
push eax
call fcn.00434f1f
lea ecx, [ebp - 0x230]
call fcn.004200a9
lea ecx, [ebp - 0x29c]
call fcn.00434e9a
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 2
call fcn.00426ddc
mov ecx, dword [ebp - 0x3d8]
inc edi
mov eax, dword [0x4f6368]
add ecx, 0x7c
mov dword [ebp - 0x3d8], ecx
cmp edi, eax
jl 0x417240
push dword [ebp - 0x3e8]
lea ecx, [ebp - 0x3d4]
call fcn.00434f81
call fcn.00438a73
mov dword [ebp - 0x370], edx
lea ecx, [ebp - 0x3dc]
mov edx, 0x4ba2f0
mov dword [ebp - 0x374], eax
call fcn.004a7a39
mov byte [ebp - 4], 0xa0
lea ecx, [ebp - 0x374]
push dword [eax]
lea eax, [ebp - 0x2a0]
push eax
call fcn.00424012
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0xa2
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0x38c]
call fcn.00420279
mov byte [ebp - 4], 0xa3
lea edx, [ebp - 0x38c]
cmp dword [ebp - 0x378], 8
lea ecx, [ebp - 0x218]
cmovae edx, dword [ebp - 0x38c]
call fcn.0040979e
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x230]
call fcn.00420279
push 0xfde9
lea edx, [ebp - 0x230]
mov byte [ebp - 4], 0xa4
lea ecx, [ebp - 0x248]
call fcn.00410eab
pop ecx
mov byte [ebp - 4], 0xa5
cmp dword [eax + 0x14], 0x10
jb 0x417679
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3d4]
call fcn.00435030
lea ecx, [ebp - 0x248]
call fcn.00420888
lea ecx, [ebp - 0x230]
call fcn.004200a9
lea ecx, [ebp - 0x38c]
call fcn.004200a9
lea ecx, [ebp - 0x2a0]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x3d4]
call fcn.0042bfc1
call fcn.00430a04
ret