Function at 0x426d40
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57b460
mov eax, dword fs:[0]
push eax
sub esp, 0x6c
push ebx
push esi
push edi
mov eax, dword [0x5d7ce0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor ebx, ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
call fcn.0044d418
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x426d8a
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], ebx
call fcn.0044d418
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x426db6
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov byte [ebp - 4], 1
call fcn.0044d418
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x426de3
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 2
call fcn.0044d418
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x426e10
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 3
call fcn.0044d418
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x426e3d
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x10], eax
mov byte [ebp - 4], 4
call fcn.0044d418
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x426e6a
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 5
call fcn.0044d418
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x426e97
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 6
call fcn.0044d418
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x426ec4
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x18], eax
push 1
lea ecx, [ebp - 0x40]
push ecx
push ecx
mov byte [ebp - 4], 7
mov edi, esp
mov dword [ebp - 0x50], esp
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x50], edi
call fcn.0044d418
xor ecx, ecx
cmp eax, ebx
setne cl
cmp ecx, ebx
jne 0x426f06
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov ecx, str.hRootKey
mov byte [ebp - 4], 8
test ecx, 0xffff0000
jne 0x426f3f
mov edx, ecx
movzx esi, dx
push esi
call fcn.0044d834
cmp eax, ebx
je 0x426f4d
push esi
push eax
mov ecx, edi
call fcn.004074b0
jmp 0x426f4d
push 8
push str.hRootKey
mov ecx, edi
call fcn.00407870
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0x14]
mov ebx, dword [ebp + 0xc]
push eax
mov byte [ebp - 4], 7
call fcn.0043b9d0
mov edi, eax
test edi, edi
jne 0x4270b7
mov ecx, 0xa0000001
lea esi, [ebp - 0x50]
call fcn.0041ae20
mov ecx, dword [ebp + 0x14]
push eax
mov byte [ebp - 4], 9
call fcn.0040d290
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x426fa7
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp + 0x10]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov dword [ecx], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x426fd3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x426ff6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427019
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42703c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42705f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427082
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4270a5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x40]
add eax, 0xfffffff0
jmp 0x428368
lea ecx, [ebp - 0x20]
push ecx
push ecx
mov edi, esp
mov dword [ebp - 0x50], esp
mov dword [ebp - 0x38], edi
call fcn.0044d418
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4270de
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov eax, str.DWORD
shr eax, 0x10
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x44], eax
test eax, eax
jne 0x42711c
mov ecx, str.DWORD
movzx ebx, cx
push ebx
call fcn.0044d834
test eax, eax
je 0x42712a
push ebx
push eax
mov ecx, edi
call fcn.004074b0
jmp 0x42712a
push 5
push str.DWORD
mov ecx, edi
call fcn.00407870
mov byte [ebp - 4], 0xb
mov ebx, dword [ebp - 0x40]
push ecx
mov ecx, dword [ebx - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add ebx, 0xfffffff0
mov dword [ebp - 0x38], esp
mov esi, esp
mov dword [ebp - 0x2c], ebx
call eax
cmp dword [ebx + 0xc], 0
lea ecx, [ebx + 0xc]
jl 0x427161
cmp eax, dword [ebx]
jne 0x427161
mov edi, ebx
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x42719d
mov ecx, dword [ebx + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
jne 0x42717a
call fcn.0043d450
mov eax, dword [ebx + 4]
mov dword [edi + 4], eax
mov eax, dword [ebx + 4]
lea ecx, [eax + eax + 2]
push ecx
add ebx, 0x10
lea edx, [eax + eax + 2]
push ebx
push edx
lea eax, [edi + 0x10]
push eax
call fcn.0054de82
add esp, 0x10
add edi, 0x10
mov dword [esi], edi
mov byte [ebp - 4], 7
call fcn.0044bce0
add esp, 0xc
push 1
lea ecx, [ebp - 0x1c]
push ecx
push ecx
mov edi, esp
mov dword [ebp - 0x50], esp
mov dword [ebp - 0x50], edi
call fcn.0044d418
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4271d7
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov ecx, str.strRegKey
mov byte [ebp - 4], 0xc
test ecx, 0xffff0000
jne 0x427210
mov edx, ecx
movzx ebx, dx
push ebx
call fcn.0044d834
test eax, eax
je 0x42721e
push ebx
push eax
mov ecx, edi
call fcn.004074b0
jmp 0x42721e
push 9
push str.strRegKey
mov ecx, edi
call fcn.00407870
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0x14]
mov ebx, dword [ebp + 0xc]
push eax
mov edi, esi
mov byte [ebp - 4], 7
call fcn.0043b9d0
mov edi, eax
test edi, edi
jne 0x427341
mov ecx, 0xa0000001
lea esi, [ebp - 0x50]
call fcn.0041ae20
mov ecx, dword [ebp + 0x14]
push eax
mov byte [ebp - 4], 0xd
call fcn.0040d290
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42727a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp + 0x10]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov dword [ecx], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4272a6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4272c9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4272ec
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42730f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427332
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
jmp 0x428322
push 1
lea ecx, [ebp - 0x14]
push ecx
push ecx
mov edi, esp
mov dword [ebp - 0x50], esp
mov dword [ebp - 0x50], edi
call fcn.0044d418
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x42736a
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov ecx, str.strRegValueName
mov byte [ebp - 4], 0xe
test ecx, 0xffff0000
jne 0x4273a3
mov edx, ecx
movzx ebx, dx
push ebx
call fcn.0044d834
test eax, eax
je 0x4273b1
push ebx
push eax
mov ecx, edi
call fcn.004074b0
jmp 0x4273b1
push 0xf
push str.strRegValueName
mov ecx, edi
call fcn.00407870
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
push eax
mov edi, esi
mov byte [ebp - 4], 7
call fcn.0043b9d0
mov edi, eax
test edi, edi
jne 0x4274d5
mov ecx, 0xa0000001
lea esi, [ebp - 0x50]
call fcn.0041ae20
mov ecx, dword [ebp + 0x14]
push eax
mov byte [ebp - 4], 0xf
call fcn.0040d290
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42740a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp + 0x10]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov dword [ecx], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x427436
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427459
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42747c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42749f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427332
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
jmp 0x428322
push 1
lea ecx, [ebp - 0x30]
push ecx
push ecx
mov edi, esp
mov dword [ebp - 0x50], esp
mov dword [ebp - 0x50], edi
call fcn.0044d418
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4274fe
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov ecx, str.iRegValueType
mov byte [ebp - 4], 0x10
test ecx, 0xffff0000
jne 0x427537
mov edx, ecx
movzx ebx, dx
push ebx
call fcn.0044d834
test eax, eax
je 0x427545
push ebx
push eax
mov ecx, edi
call fcn.004074b0
jmp 0x427545
push 0xd
push str.iRegValueType
mov ecx, edi
call fcn.00407870
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
push eax
mov edi, esi
mov byte [ebp - 4], 7
call fcn.0043b9d0
mov edi, eax
test edi, edi
jne 0x427669
mov ecx, 0xa0000001
lea esi, [ebp - 0x50]
call fcn.0041ae20
mov ecx, dword [ebp + 0x14]
push eax
mov byte [ebp - 4], 0x11
call fcn.0040d290
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42759e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp + 0x10]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov dword [ecx], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4275ca
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4275ed
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427610
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427633
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427332
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
jmp 0x428322
lea ecx, [ebp - 0x50]
push ecx
push ecx
mov edi, esp
mov dword [ebp - 0x50], esp
mov dword [ebp - 0x38], edi
call fcn.0044d418
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x427690
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x44], 0
jne 0x4276c5
mov ecx, str.DWORD
movzx esi, cx
push esi
call fcn.0044d834
test eax, eax
je 0x4276d3
push esi
push eax
mov ecx, edi
call fcn.004074b0
jmp 0x4276d3
push 5
push str.DWORD
mov ecx, edi
call fcn.00407870
mov byte [ebp - 4], 0x13
mov esi, dword [ebp - 0x30]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [ebp - 0x38], esp
mov ebx, esp
mov dword [ebp - 0x38], esi
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x42770a
cmp eax, dword [esi]
jne 0x42770a
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x427746
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
jne 0x427723
call fcn.0043d450
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
add esi, 0x10
lea edx, [eax + eax + 2]
push esi
push edx
lea eax, [edi + 0x10]
push eax
call fcn.0054de82
add esp, 0x10
add edi, 0x10
mov dword [ebx], edi
mov byte [ebp - 4], 7
call fcn.0044bce0
add esp, 0xc
push 1
lea ecx, [ebp - 0x10]
push ecx
push ecx
mov edi, esp
mov dword [ebp - 0x50], esp
mov dword [ebp - 0x50], edi
call fcn.0044d418
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x427780
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov esi, str.strRegValue
shr esi, 0x10
mov byte [ebp - 4], 0x14
test esi, esi
jne 0x4277bb
mov ecx, str.strRegValue
movzx ebx, cx
push ebx
call fcn.0044d834
test eax, eax
je 0x4277c9
push ebx
push eax
mov ecx, edi
call fcn.004074b0
jmp 0x4277c9
push 0xb
push str.strRegValue
mov ecx, edi
call fcn.00407870
mov edx, dword [ebp + 8]
mov edi, dword [ebp + 0x14]
mov ebx, dword [ebp + 0xc]
push edx
mov byte [ebp - 4], 7
call fcn.0043b9d0
mov edi, eax
test edi, edi
jne 0x4278eb
mov ecx, 0xa0000001
lea esi, [ebp - 0x50]
call fcn.0041ae20
mov ecx, dword [ebp + 0x14]
push eax
mov byte [ebp - 4], 0x15
call fcn.0040d290
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427823
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp + 0x10]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov dword [ecx], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x42784f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x38]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42786f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427892
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4278b5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427332
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
jmp 0x428322
mov ecx, dword [ebp + 0x14]
push ecx
lea edx, [ebp - 0x48]
push edx
push ecx
mov edi, esp
mov dword [ebp - 0x50], esp
mov dword [ebp - 0x50], edi
call fcn.0044d418
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x427916
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x16
test esi, esi
jne 0x427949
mov ecx, str.strRegValue
movzx esi, cx
push esi
call fcn.0044d834
test eax, eax
je 0x427957
push esi
push eax
mov ecx, edi
call fcn.004074b0
jmp 0x427957
push 0xb
push str.strRegValue
mov ecx, edi
call fcn.00407870
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov bl, 7
push edx
mov byte [ebp - 4], bl
call fcn.0043b8f0
mov edi, eax
test edi, edi
jne 0x427a76
mov ecx, 0xa0000001
lea esi, [ebp - 0x50]
call fcn.0041ae20
mov ecx, dword [ebp + 0x14]
push eax
mov byte [ebp - 4], 0x17
call fcn.0040d290
mov byte [ebp - 4], bl
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4279ae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp + 0x10]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov dword [ecx], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4279da
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x38]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4279fa
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427a1d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427a40
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427332
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
jmp 0x428322
push 1
lea ecx, [ebp - 0x28]
push ecx
push ecx
mov edi, esp
mov dword [ebp - 0x50], esp
mov dword [ebp - 0x50], edi
call fcn.0044d418
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x427a9f
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov ecx, str.WOW64
mov byte [ebp - 4], 0x18
test ecx, 0xffff0000
jne 0x427ad8
mov edx, ecx
movzx esi, dx
push esi
call fcn.0044d834
test eax, eax
je 0x427ae6
push esi
push eax
mov ecx, edi
call fcn.004074b0
jmp 0x427ae6
push 5
push str.WOW64
mov ecx, edi
call fcn.00407870
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0x14]
mov byte [ebp - 4], bl
mov ebx, dword [ebp + 0xc]
push eax
call fcn.0043b9d0
mov edi, eax
test edi, edi
jne 0x427c07
mov ecx, 0xa0000001
lea esi, [ebp - 0x50]
call fcn.0041ae20
mov ecx, dword [ebp + 0x14]
push eax
mov byte [ebp - 4], 0x19
call fcn.0040d290
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x50]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427b3f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp + 0x10]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov dword [ecx], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x427b6b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x38]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427b8b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427bae
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427bd1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427332
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x28]
add eax, 0xfffffff0
jmp 0x428322
lea ecx, [ebp - 0x3c]
push ecx
push ecx
mov edi, esp
mov dword [ebp - 0x54], esp
mov dword [ebp - 0x50], edi
call fcn.0044d418
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x427c2e
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x44], 0
jne 0x427c63
mov ecx, str.DWORD
movzx ebx, cx
push ebx
call fcn.0044d834
test eax, eax
je 0x427c71
push ebx
push eax
mov ecx, edi
call fcn.004074b0
jmp 0x427c71
push 5
push str.DWORD
mov ecx, edi
call fcn.00407870
mov byte [ebp - 4], 0x1b
mov esi, dword [ebp - 0x28]
push ecx
mov ecx, dword [esi - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
add esi, 0xfffffff0
mov dword [ebp - 0x50], esp
mov ebx, esp
mov dword [ebp - 0x50], esi
call eax
cmp dword [esi + 0xc], 0
lea ecx, [esi + 0xc]
jl 0x427ca8
cmp eax, dword [esi]
jne 0x427ca8
mov edi, esi
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x427ce4
mov ecx, dword [esi + 4]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
jne 0x427cc1
call fcn.0043d450
mov eax, dword [esi + 4]
mov dword [edi + 4], eax
mov eax, dword [esi + 4]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [esi + 0x10]
push edx
lea eax, [eax + eax + 2]
push eax
lea ecx, [edi + 0x10]
push ecx
call fcn.0054de82
add esp, 0x10
add edi, 0x10
mov dword [ebx], edi
mov byte [ebp - 4], 7
call fcn.0044bce0
add esp, 0xc
push 1
lea edx, [ebp - 0x18]
push edx
push ecx
mov edi, esp
mov dword [ebp - 0x54], esp
mov dword [ebp - 0x54], edi
call fcn.0044d418
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x427d1e
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov ecx, str.iSystemBits
mov byte [ebp - 4], 0x1c
test ecx, 0xffff0000
jne 0x427d57
mov edx, ecx
movzx ebx, dx
push ebx
call fcn.0044d834
test eax, eax
je 0x427d65
push ebx
push eax
mov ecx, edi
call fcn.004074b0
jmp 0x427d65
push 0xb
push str.iSystemBits
mov ecx, edi
call fcn.00407870
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0x14]
mov ebx, dword [ebp + 0xc]
push eax
mov byte [ebp - 4], 7
call fcn.0043b9d0
mov edi, eax
test edi, edi
jne 0x427de0
mov ecx, 0xa0000001
lea esi, [ebp - 0x4c]
call fcn.0041ae20
mov ecx, dword [ebp + 0x14]
push eax
mov byte [ebp - 4], 0x1d
call fcn.0040d290
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x4c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427dbb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp + 0x10]
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov dword [ecx], 0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x428286
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.0054df0d
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
mov eax, dword [0x5d9fb8]
add esp, 4
test eax, eax
je 0x427e3b
push str.GetNativeSystemInfo
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call ebx
test eax, eax
je 0x427e34
lea edx, [ebp - 0x78]
push edx
call eax
mov ax, word [ebp - 0x78]
cmp ax, 9
je 0x427e2a
cmp ax, 6
jne 0x427e34
mov dword [0x5e0c44], 1
xor eax, eax
mov dword [0x5d9fb8], eax
test edi, edi
je 0x427e4d
cmp edi, 1
jne 0x427ead
cmp dword [0x5e0c44], 0
jne 0x427ebb
mov dword [ebp - 0x34], 0
test eax, eax
je 0x427e99
push str.GetNativeSystemInfo
push str.kernel32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call ebx
test eax, eax
je 0x427e8f
lea ecx, [ebp - 0x78]
push ecx
call eax
mov ax, word [ebp - 0x78]
cmp ax, 9
je 0x427e85
cmp ax, 6
jne 0x427e8f
mov dword [0x5e0c44], 1
mov dword [0x5d9fb8], 0
cmp dword [0x5e0c44], 0
jne 0x427f92
xor eax, eax
jmp 0x427f95
cmp edi, 2
jne 0x427ebb
cmp dword [0x5e0c44], 0
jne 0x427e4d
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
mov edi, 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427ee3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x38]
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427f03
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427f26
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427f49
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x427f6c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
lea ecx, [esi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42833b
mov ecx, dword [esi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push esi
call edx
jmp 0x42833b
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x20]
lea edx, [ebp - 0x34]
push edx
or eax, 0x20019
push eax
mov eax, dword [ebp - 0x1c]
xor ebx, ebx
push ebx
push eax
push ecx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov esi, dword [ebp - 0x14]
mov edi, eax
cmp edi, ebx
jne 0x42810a
mov ecx, dword [ebp - 0x34]
lea edx, [ebp - 0x20]
push edx
push ebx
lea eax, [ebp - 0x3c]
push eax
push ebx
push esi
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x3c], ebx
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push ecx
call ebx
mov edi, eax
mov dword [ebp - 0x44], edi
test edi, edi
jne 0x428100
mov eax, dword [ebp - 0x3c]
cmp eax, 1
jne 0x428058
mov edx, dword [ebp - 0x20]
add edx, 2
push edx
call fcn.0044c904
mov edi, eax
mov eax, dword [ebp - 0x20]
add esp, 4
add eax, 2
push eax
push 0
push edi
call fcn.00550f40
mov eax, dword [ebp - 0x34]
add esp, 0xc
lea ecx, [ebp - 0x20]
push ecx
push edi
lea edx, [ebp - 0x3c]
push edx
push 0
push esi
push eax
call ebx
test edi, edi
jne 0x42802c
xor eax, eax
jmp 0x428040
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x428031
sub eax, edx
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x10]
call fcn.00407870
push edi
call fcn.0044c90f
add esp, 4
jmp 0x4280fd
cmp eax, 4
jne 0x4280ab
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.0044c904
mov edx, dword [ebp - 0x20]
add esp, 4
push edx
mov edi, eax
push 0
push edi
call fcn.00550f40
mov edx, dword [ebp - 0x34]
add esp, 0xc
lea eax, [ebp - 0x20]
push eax
push edi
lea ecx, [ebp - 0x3c]
push ecx
push 0
push esi
push edx
call ebx
mov eax, dword [edi]
push eax
lea ecx, [ebp - 0x10]
push 0x5ad2f8
push ecx
call fcn.00409220
add esp, 0xc
push edi
call fcn.0044c90f
add esp, 4
jmp 0x4280fd
cmp eax, 0xb
jne 0x428100
mov edx, dword [ebp - 0x20]
push edx
call fcn.0044c904
mov edi, eax
mov eax, dword [ebp - 0x20]
add esp, 4
push eax
push 0
push edi
call fcn.00550f40
mov eax, dword [ebp - 0x34]
add esp, 0xc
lea ecx, [ebp - 0x20]
push ecx
push edi
lea edx, [ebp - 0x3c]
push edx
push 0
push esi
push eax
call ebx
mov ecx, dword [edi + 4]
mov edx, dword [edi]
push ecx
push edx
lea eax, [ebp - 0x10]
push 0x5ad33c
push eax
call fcn.00409220
push edi
call fcn.0044c90f
add esp, 0x14
mov edi, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x34]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebx - 0xc]
test eax, eax
jne 0x428125
xor edx, edx
test edi, edi
sete dl
mov dword [ebp - 0x4c], edi
mov edi, edx
jmp 0x4281f1
call fcn.0044d418
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x42813f
push 0x80004005
call fcn.00407ad0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x1e
push ecx
push ecx
mov ecx, dword [ebx - 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x54], esp
mov esi, esp
call eax
cmp dword [ebx - 4], 0
lea ecx, [ebx - 4]
jl 0x428182
cmp eax, dword [ebx - 0x10]
jne 0x428182
lea edi, [ebx - 0x10]
mov edx, 1
lock xadd dword [ecx], edx
jmp 0x4281bb
mov ecx, dword [ebx - 0xc]
mov edx, dword [eax]
mov edx, dword [edx]
push 2
push ecx
mov ecx, eax
call edx
mov edi, eax
test edi, edi
jne 0x42819b
call fcn.0043d450
mov eax, dword [ebx - 0xc]
mov dword [edi + 4], eax
mov eax, dword [ebx - 0xc]
lea ecx, [eax + eax + 2]
push ecx
lea edx, [eax + eax + 2]
push ebx
push edx
lea eax, [edi + 0x10]
push eax
call fcn.0054de82
add esp, 0x10
mov ecx, dword [ebp - 0x48]
push ecx
mov ecx, dword [ebp + 0xc]
add edi, 0x10
mov dword [esi], edi
call fcn.0043c250
mov edi, eax
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x44]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x4281f1
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test edi, edi
jne 0x42824f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x4c]
lea esi, [ebp - 0x44]
mov dword [eax], edx
call fcn.0041ae20
mov ecx, dword [ebp + 8]
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x44]
mov eax, dword [ecx + 0x2c]
mov ecx, dword [ebp - 0x14]
push edx
mov edx, dword [ebp + 0x14]
push ecx
push eax
push edx
call fcn.00409220
mov byte [ebp - 4], 7
mov eax, dword [ebp - 0x44]
add eax, 0xfffffff0
add esp, 0x10
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42826f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x42826f
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 8]
mov dword [ecx], 2
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x30]
mov edx, dword [ebp + 0x14]
push ecx
push eax
push edx
call fcn.00409220
add esp, 0xc
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x428292
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 5
mov eax, dword [ebp - 0x38]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4282b2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4282d5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4282f8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42831b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x50]
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42833b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x42835e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 4], 0xffffffff
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x428381
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret