Function at 0x49b840
Capabilities:
Get session user name
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push esi
push edi
mov dword [ebp - 4], 0
cmp dword [ebp + 8], 0
jne 0x49b85f
mov eax, 0x1f5
jmp 0x49d3f3
mov eax, dword [ebp + 8]
push eax
call fcn.0040cf90
add esp, 4
test eax, eax
jne 0x49b879
mov eax, 0x1f5
jmp 0x49d3f3
push 0xc528
call fcn.0040d036
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x49b899
mov eax, 0x68
jmp 0x49d3f3
push 0xc528
push 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.00402610
add esp, 0xc
mov edx, dword [ebp + 8]
push edx
call fcn.0040cf90
add esp, 4
cmp eax, 0xffd
jbe 0x49b8d5
mov eax, dword [ebp - 4]
push eax
call fcn.0040d01b
add esp, 4
mov eax, 0x1f5
jmp 0x49d3f3
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 4]
add edx, 0x91bc
push edx
call fcn.0040ce90
add esp, 8
mov eax, dword [ebp - 4]
add eax, 0x91bc
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x91bc
push ecx
call fcn.004a0a10
add esp, 8
mov edx, dword [ebp - 4]
add edx, 0xb3db
push edx
mov eax, dword [ebp - 4]
add eax, 0xb2da
push eax
mov ecx, dword [ebp - 4]
add ecx, 0xb1d9
push ecx
mov edx, dword [ebp - 4]
add edx, 0xb1d5
push edx
mov eax, dword [ebp - 4]
add eax, 0x91bc
push eax
call fcn.0042d3f8
add esp, 0x14
mov ecx, dword [ebp - 4]
add ecx, 0xb3db
push ecx
mov edx, dword [ebp - 4]
add edx, 0xb3db
push edx
call fcn.0049e4f0
add esp, 8
push str..ini
mov eax, dword [ebp - 4]
add eax, 0xb3db
push eax
call fcn.00427390
add esp, 8
test eax, eax
je 0x49b9c0
push str..Ini
mov ecx, dword [ebp - 4]
add ecx, 0xb3db
push ecx
call fcn.00427390
add esp, 8
test eax, eax
je 0x49b9c0
push str..INI
mov edx, dword [ebp - 4]
add edx, 0xb3db
push edx
call fcn.00427390
add esp, 8
test eax, eax
je 0x49b9c0
mov eax, dword [ebp - 4]
push eax
call fcn.0040d01b
add esp, 4
mov eax, 0x1f6
jmp 0x49d3f3
push 0x58df5c
mov ecx, dword [ebp - 4]
add ecx, 0x91bc
push ecx
call fcn.0040d309
add esp, 8
mov edx, dword [ebp - 4]
mov dword [edx + 0x91b8], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x91b8], 0
jne 0x49ba02
mov ecx, dword [ebp - 4]
push ecx
call fcn.0040d01b
add esp, 4
mov eax, 0x1f5
jmp 0x49d3f3
push 0x104
mov edx, dword [ebp - 4]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push str.C:STREET_PERFECT_SRCRegistryControlManagerVCDEBUGRegistryControlManagerVC.exe
mov eax, dword [ebp - 4]
push eax
call fcn.00427390
add esp, 8
test eax, eax
jne 0x49bac5
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x108], 1
push 0x58df04
push str.StreetPerfectAddressAccuracyUnx.Env
call fcn.0040d309
add esp, 8
mov edx, dword [ebp - 4]
mov dword [edx + 0x10c], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x10c], 0
je 0x49ba7f
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10c]
push edx
call fcn.0040d693
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x10c], 0
push 0x58dedc
push str.StreetPerfectAddressAccuracyWin.Env
call fcn.0040d309
add esp, 8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x10c], eax
mov edx, dword [ebp - 4]
cmp dword [edx + 0x10c], 0
je 0x49bac5
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x10c]
push ecx
call fcn.0040d693
add esp, 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x10c], 0
push 0
push 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x91b8]
push ecx
call fcn.0042a416
add esp, 0xc
push 0x1001
push 0
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
call fcn.00402610
add esp, 0xc
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x91b8]
push ecx
push 0x1000
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
call fcn.0042ae1f
add esp, 0xc
push 0xa
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.004029e0
add esp, 8
test eax, eax
je 0x49bb43
push 0xa
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.004029e0
add esp, 8
mov byte [eax], 0
push 0x3b
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
call fcn.004029e0
add esp, 8
test eax, eax
je 0x49bb71
push 0x3b
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.004029e0
add esp, 8
mov byte [eax], 0
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
call fcn.004a0a10
add esp, 8
push str._Initialize_StreetPerfect_Registry_
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.00427390
add esp, 8
test eax, eax
je 0x49bbe8
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x91b8], 0
je 0x49bbd2
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x91b8]
push eax
call fcn.0040d693
add esp, 4
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x91b8], 0
mov edx, dword [ebp - 4]
push edx
call fcn.0040d01b
add esp, 4
mov eax, 0x1f7
jmp 0x49d3f3
push 0x1001
push 0
mov eax, dword [ebp - 4]
add eax, 0x112c
push eax
call fcn.00402610
add esp, 0xc
push 0x58de40
mov ecx, dword [ebp - 4]
add ecx, 0x112c
push ecx
call fcn.0040ce90
add esp, 8
push 0x58ddcc
mov edx, dword [ebp - 4]
add edx, 0x112c
push edx
call fcn.0040cea0
add esp, 8
mov eax, dword [ebp - 4]
add eax, 0xb2da
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x112c
push ecx
call fcn.0040cea0
add esp, 8
push 0x1001
push 0
mov edx, dword [ebp - 4]
add edx, 0x213c
push edx
call fcn.00402610
add esp, 0xc
push str.SOFTWARESun_Media_CorporationStreetPerfect_Address_AccuracyEnvironment_VariablesStreetPerfectEnvironment
mov eax, dword [ebp - 4]
add eax, 0x213c
push eax
call fcn.0040ce90
add esp, 8
mov ecx, dword [ebp - 4]
add ecx, 0x1128
push ecx
mov edx, dword [ebp - 4]
add edx, 0x1120
push edx
push 0
push 0xf003f
push 0
push 0
push 0
mov eax, dword [ebp - 4]
add eax, 0x112c
push eax
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x1124], eax
mov edx, dword [ebp - 4]
add edx, 0x2138
push edx
mov eax, dword [ebp - 4]
add eax, 0x2130
push eax
push 0
push 0xf003f
push 0
push 0
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x213c
push ecx
push reloc.WSOCK32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov edx, dword [ebp - 4]
mov dword [edx + 0x2134], eax
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1124], 0
jne 0x49bd19
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x2134], 0
jne 0x49bd19
mov edx, dword [ebp - 4]
mov dword [edx + 0x111c], 1
mov eax, dword [ebp - 4]
cmp dword [eax + 0x111c], 0
jne 0x49bd9e
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x1120], 0
je 0x49bd41
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1120]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x2130], 0
je 0x49bd5d
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x2130]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x91b8], 0
je 0x49bd88
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x91b8]
push eax
call fcn.0040d693
add esp, 4
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x91b8], 0
mov edx, dword [ebp - 4]
push edx
call fcn.0040d01b
add esp, 4
mov eax, 0x1f9
jmp 0x49d3f3
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1128], 2
jne 0x49bdbc
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1120]
push edx
call fcn.0049b6e0
add esp, 4
mov eax, dword [ebp - 4]
add eax, 0x419c
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x4150
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push 0x58dda8
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1120]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x4154], eax
mov edx, dword [ebp - 4]
cmp dword [edx + 0x4154], 0
je 0x49be7f
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1120], 0
je 0x49be22
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x1120]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 4]
cmp dword [eax + 0x2130], 0
je 0x49be3e
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x2130]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 4]
cmp dword [eax + 0x91b8], 0
je 0x49be69
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x91b8]
push edx
call fcn.0040d693
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x91b8], 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.0040d01b
add esp, 4
mov eax, 0x1f9
jmp 0x49d3f3
mov edx, dword [ebp - 4]
mov dword [edx + 0x4198], 1
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4198]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x4198]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x4198], eax
mov edx, dword [ebp - 8]
push edx
push str.LINE_06d
mov eax, dword [ebp - 4]
add eax, 0x4158
push eax
call fcn.004010f0
add esp, 0xc
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.0040cf90
add esp, 4
push eax
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
push 1
push 0
mov eax, dword [ebp - 4]
add eax, 0x4158
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x4150]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x4154], eax
push 0x58dd98
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
call fcn.0040ce90
add esp, 8
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4198]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x4198]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x4198], eax
mov edx, dword [ebp - 0xc]
push edx
push 0x58dd8c
mov eax, dword [ebp - 4]
add eax, 0x4158
push eax
call fcn.004010f0
add esp, 0xc
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.0040cf90
add esp, 4
push eax
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
push 1
push 0
mov eax, dword [ebp - 4]
add eax, 0x4158
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x4150]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x4154], eax
mov edx, dword [ebp - 4]
add edx, 0xa1c8
push edx
call fcn.0049ec70
add esp, 4
mov eax, dword [ebp - 4]
add eax, 0xa1c8
push eax
call fcn.0049ecb0
add esp, 4
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xa1c0], eax
mov edx, dword [ebp - 4]
mov dword [edx + 0xa1d0], 0x1000
mov eax, dword [ebp - 4]
add eax, 0xa1d0
push eax
mov ecx, dword [ebp - 4]
add ecx, 0xa1d4
push ecx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xa1c0]
push eax
call fcn.0042b93e
add esp, 4
push eax
mov ecx, dword [ebp - 4]
add ecx, 0xa1d4
push ecx
push str.__Imported_by__s_on__s
mov edx, dword [ebp - 4]
add edx, 0x81ab
push edx
call fcn.004010f0
add esp, 0x10
mov eax, dword [ebp - 4]
add eax, 0x81ab
push eax
call fcn.0040cf90
add esp, 4
mov ecx, dword [ebp - 4]
mov byte [ecx + eax + 0x81aa], 0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x4198]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x4198]
add edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x4198], edx
mov ecx, dword [ebp - 0x10]
push ecx
push 0x58dd68
mov edx, dword [ebp - 4]
add edx, 0x4158
push edx
call fcn.004010f0
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 0x81ab
push eax
call fcn.0040cf90
add esp, 4
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x81ab
push ecx
push 1
push 0
mov edx, dword [ebp - 4]
add edx, 0x4158
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4150]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 4]
mov dword [edx + 0x4154], eax
push 0x1001
push 0
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.00402610
add esp, 0xc
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x91b8]
push edx
push 0x1000
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.0042ae1f
add esp, 0xc
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x91b8]
push edx
call fcn.0042998c
add esp, 4
test eax, eax
jne 0x49c128
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x91b8]
push ecx
call fcn.004299b8
add esp, 4
test eax, eax
je 0x49c1bd
mov edx, dword [ebp - 4]
cmp dword [edx + 0x1120], 0
je 0x49c144
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1120]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x2130], 0
je 0x49c160
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x2130]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x4150], 0
je 0x49c17c
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4150]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x91b8], 0
je 0x49c1a7
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x91b8]
push ecx
call fcn.0040d693
add esp, 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x91b8], 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040d01b
add esp, 4
mov eax, 0x1f7
jmp 0x49d3f3
push 0xa
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.004029e0
add esp, 8
test eax, eax
je 0x49c1ec
push 0xa
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
call fcn.004029e0
add esp, 8
mov byte [eax], 0
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4198]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x4198]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x4198], eax
mov edx, dword [ebp - 0x14]
push edx
push 0x58dd5c
mov eax, dword [ebp - 4]
add eax, 0x4158
push eax
call fcn.004010f0
add esp, 0xc
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.0040cf90
add esp, 4
push eax
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
push 1
push 0
mov eax, dword [ebp - 4]
add eax, 0x4158
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x4150]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x4154], eax
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.004a0a10
add esp, 8
push 0x3b
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.004029e0
add esp, 8
test eax, eax
je 0x49c2b4
push 0x3b
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
call fcn.004029e0
add esp, 8
mov byte [eax], 0
mov eax, dword [ebp - 4]
add eax, 0xb4dc
push 0
push eax
call fcn.004f43e0
add esp, 8
test eax, eax
jne 0x49d02c
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x91b8]
push edx
call fcn.0042998c
add esp, 4
test eax, eax
jne 0x49d027
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x91b8]
push ecx
call fcn.004299b8
add esp, 4
test eax, eax
jne 0x49d027
mov edx, 1
imul eax, edx, 0
mov ecx, dword [ebp - 4]
movsx edx, byte [ecx + eax + 0x51a9]
cmp edx, 0x5b
je 0x49c484
push 0x1001
push 0
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.00402610
add esp, 0xc
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x91b8]
push edx
push 0x1000
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.0042ae1f
add esp, 0xc
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x91b8]
push edx
call fcn.0042998c
add esp, 4
test eax, eax
jne 0x49c383
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x91b8]
push ecx
call fcn.004299b8
add esp, 4
test eax, eax
je 0x49c388
jmp 0x49c484
push 0xa
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
call fcn.004029e0
add esp, 8
test eax, eax
je 0x49c3b6
push 0xa
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.004029e0
add esp, 8
mov byte [eax], 0
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x4198]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4198]
add ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0x4198], ecx
mov eax, dword [ebp - 0x18]
push eax
push 0x58dd50
mov ecx, dword [ebp - 4]
add ecx, 0x4158
push ecx
call fcn.004010f0
add esp, 0xc
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
call fcn.0040cf90
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
push 1
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x4158
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x4150]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x4154], eax
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.004a0a10
add esp, 8
push 0x3b
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.004029e0
add esp, 8
test eax, eax
je 0x49c47f
push 0x3b
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
call fcn.004029e0
add esp, 8
mov byte [eax], 0
jmp 0x49c303
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x91b8]
push ecx
call fcn.0042998c
add esp, 4
test eax, eax
jne 0x49c4b0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x91b8]
push eax
call fcn.004299b8
add esp, 4
test eax, eax
je 0x49c4b5
jmp 0x49d027
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
mov byte [eax + edx + 0x51a9], 0x20
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.0040cf90
add esp, 4
mov edx, dword [ebp - 4]
mov byte [edx + eax + 0x51a8], 0x20
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.004a0a10
add esp, 8
mov edx, dword [ebp - 4]
add edx, 0x314c
push edx
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.004a0a10
add esp, 8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x3140], 0
mov edx, dword [ebp - 4]
add edx, 0x3148
push edx
mov eax, dword [ebp - 4]
add eax, 0x3140
push eax
push 0
push 0xf003f
push 0
push 0
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x314c
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1120]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x49cec6
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
mov edx, dword [ebp - 4]
add edx, 0x41a8
push edx
call fcn.0040ce90
add esp, 8
mov eax, dword [ebp - 4]
mov dword [eax + 0x114], 0
push 0x1001
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x118
push ecx
call fcn.00402610
add esp, 0xc
push 0x1000
push 0
mov edx, dword [ebp - 4]
add edx, 0x71ab
push edx
call fcn.00402610
add esp, 0xc
push 0x1001
push 0
mov eax, dword [ebp - 4]
add eax, 0x81ab
push eax
call fcn.00402610
add esp, 0xc
push 0x1001
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.00402610
add esp, 0xc
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x91b8]
push eax
push 0x1000
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.0042ae1f
add esp, 0xc
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x91b8]
push eax
call fcn.0042998c
add esp, 4
test eax, eax
jne 0x49c643
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x91b8]
push edx
call fcn.004299b8
add esp, 4
test eax, eax
je 0x49c648
jmp 0x49d027
push 0xa
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.004029e0
add esp, 8
test eax, eax
je 0x49c676
push 0xa
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.004029e0
add esp, 8
mov byte [eax], 0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x4198]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x4198]
add edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x4198], edx
mov ecx, dword [ebp - 0x1c]
push ecx
push 0x58dd44
mov edx, dword [ebp - 4]
add edx, 0x4158
push edx
call fcn.004010f0
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.0040cf90
add esp, 4
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
push 1
push 0
mov edx, dword [ebp - 4]
add edx, 0x4158
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4150]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 4]
mov dword [edx + 0x4154], eax
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.004a0a10
add esp, 8
push 0x3b
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
call fcn.004029e0
add esp, 8
test eax, eax
je 0x49c73e
push 0x3b
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.004029e0
add esp, 8
mov byte [eax], 0
mov ecx, 1
imul edx, ecx, 0
mov eax, dword [ebp - 4]
movsx ecx, byte [eax + edx + 0x51a9]
cmp ecx, 0x5b
jne 0x49c937
mov edx, dword [ebp - 4]
cmp dword [edx + 0x114], 0
je 0x49c908
mov eax, dword [ebp - 4]
add eax, 0x118
push eax
call fcn.0040cf90
add esp, 4
test eax, eax
je 0x49c908
mov ecx, dword [ebp - 4]
add ecx, 0x118
push ecx
call fcn.0040cf90
add esp, 4
push eax
mov edx, dword [ebp - 4]
add edx, 0x118
push edx
push 1
push 0
mov eax, dword [ebp - 4]
add eax, 0x41a8
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x2130]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x2134], eax
mov edx, dword [ebp - 4]
cmp dword [edx + 0x2134], 0
je 0x49c7f7
mov eax, dword [ebp - 4]
mov dword [eax + 0xb51c], 3
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xb51c]
push edx
mov eax, dword [ebp - 4]
add eax, 0xb4dc
push eax
call fcn.00403084
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x108], 1
jne 0x49c908
push 0x58dd40
push 0x58dd1c
call fcn.0040d309
add esp, 8
mov edx, dword [ebp - 4]
mov dword [edx + 0x10c], eax
mov eax, dword [ebp - 4]
add eax, 0x118
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x41a8
push ecx
push str.SPAA__s__s__n
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x10c]
push eax
call fcn.00401040
add esp, 0x10
mov ecx, dword [ebp - 4]
add ecx, 0x41a8
push ecx
push str.export_SPAA__s_n
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x10c]
push eax
call fcn.00401040
add esp, 0xc
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x10c], 0
je 0x49c898
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x10c]
push eax
call fcn.0040d693
add esp, 4
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x10c], 0
push 0x58dcf8
push 0x58dcd4
call fcn.0040d309
add esp, 8
mov edx, dword [ebp - 4]
mov dword [edx + 0x10c], eax
mov eax, dword [ebp - 4]
add eax, 0x118
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x41a8
push ecx
push str.SET_SPAA__s__s__n
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x10c]
push eax
call fcn.00401040
add esp, 0x10
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x10c], 0
je 0x49c908
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x10c]
push eax
call fcn.0040d693
add esp, 4
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x10c], 0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x3140]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x114], 0
mov edx, dword [ebp - 4]
mov dword [edx + 0x3140], 0
jmp 0x49cec1
push str._CreateEnvironmentStringYes
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.00427390
add esp, 8
test eax, eax
jne 0x49c96d
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x110], 0
mov edx, dword [ebp - 4]
mov dword [edx + 0x114], 1
jmp 0x49c97a
mov eax, dword [ebp - 4]
mov dword [eax + 0x110], 1
push 0x3d
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.004029e0
add esp, 8
test eax, eax
je 0x49cd2a
mov edx, dword [ebp - 4]
add edx, 0x51a9
mov eax, dword [ebp - 4]
mov dword [eax + 0x41a4], edx
push 0x58dc9c
mov ecx, dword [ebp - 4]
add ecx, 0x41a4
push ecx
mov edx, dword [ebp - 4]
add edx, 0x41a0
push edx
call fcn.004a0410
add esp, 0xc
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x41a0], eax
mov edx, dword [ebp - 4]
cmp dword [edx + 0x41a0], 0
je 0x49cd2a
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x41a0]
push ecx
mov edx, dword [ebp - 4]
add edx, 0x71ab
push edx
call fcn.0040ce90
add esp, 8
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x41a4]
push ecx
mov edx, dword [ebp - 4]
add edx, 0x81ab
push edx
call fcn.0040ce90
add esp, 8
mov eax, dword [ebp - 4]
add eax, 0x71ab
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x71ab
push ecx
call fcn.004a0a10
add esp, 8
mov edx, dword [ebp - 4]
add edx, 0x81ab
push edx
mov eax, dword [ebp - 4]
add eax, 0x81ab
push eax
call fcn.004a0a10
add esp, 8
mov ecx, dword [ebp - 4]
add ecx, 0x81ab
push ecx
call fcn.0040cf90
add esp, 4
push eax
mov edx, dword [ebp - 4]
add edx, 0x81ab
push edx
push 1
push 0
mov eax, dword [ebp - 4]
add eax, 0x71ab
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x3140]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x3144], eax
mov edx, dword [ebp - 4]
cmp dword [edx + 0x3144], 0
je 0x49cac4
mov eax, dword [ebp - 4]
mov dword [eax + 0xb51c], 2
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0xb51c]
push edx
mov eax, dword [ebp - 4]
add eax, 0xb4dc
push eax
call fcn.00403084
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x114], 0
jne 0x49cc38
mov edx, dword [ebp - 4]
cmp dword [edx + 0x108], 0
je 0x49cc38
push 0x58dc88
mov eax, dword [ebp - 4]
add eax, 0x314c
push eax
call fcn.00427390
add esp, 8
test eax, eax
je 0x49cb38
push str.StreetPerfectService
mov ecx, dword [ebp - 4]
add ecx, 0x314c
push ecx
call fcn.00427390
add esp, 8
test eax, eax
je 0x49cb38
push 0x58dc50
mov edx, dword [ebp - 4]
add edx, 0x314c
push edx
call fcn.00427390
add esp, 8
test eax, eax
jne 0x49cc38
push 0x58dc4c
push 0x58dc28
call fcn.0040d309
add esp, 8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x10c], eax
mov edx, dword [ebp - 4]
add edx, 0x81ab
push edx
mov eax, dword [ebp - 4]
add eax, 0x71ab
push eax
push 0x58dc18
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10c]
push edx
call fcn.00401040
add esp, 0x10
mov eax, dword [ebp - 4]
add eax, 0x71ab
push eax
push 0x58dc08
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10c]
push edx
call fcn.00401040
add esp, 0xc
mov eax, dword [ebp - 4]
cmp dword [eax + 0x10c], 0
je 0x49cbc8
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10c]
push edx
call fcn.0040d693
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x10c], 0
push 0x58dc04
push 0x58dbe0
call fcn.0040d309
add esp, 8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x10c], eax
mov edx, dword [ebp - 4]
add edx, 0x81ab
push edx
mov eax, dword [ebp - 4]
add eax, 0x71ab
push eax
push 0x58dbcc
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10c]
push edx
call fcn.00401040
add esp, 0x10
mov eax, dword [ebp - 4]
cmp dword [eax + 0x10c], 0
je 0x49cc38
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10c]
push edx
call fcn.0040d693
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x10c], 0
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x110], 0
je 0x49cd2a
mov edx, dword [ebp - 4]
cmp dword [edx + 0x114], 0
je 0x49cd2a
mov eax, dword [ebp - 4]
add eax, 0x118
push eax
call fcn.0040cf90
add esp, 4
mov esi, 0x1000
sub esi, eax
mov ecx, dword [ebp - 4]
add ecx, 0x71ab
push ecx
call fcn.0040cf90
add esp, 4
mov edi, eax
mov edx, dword [ebp - 4]
add edx, 0x81ab
push edx
call fcn.0040cf90
add esp, 4
lea eax, [edi + eax + 2]
cmp esi, eax
jbe 0x49cd04
mov ecx, dword [ebp - 4]
add ecx, 0x71ab
push ecx
mov edx, dword [ebp - 4]
add edx, 0x118
push edx
call fcn.0040cea0
add esp, 8
push 0x58dbc8
mov eax, dword [ebp - 4]
add eax, 0x118
push eax
call fcn.0040cea0
add esp, 8
mov ecx, dword [ebp - 4]
add ecx, 0x81ab
push ecx
mov edx, dword [ebp - 4]
add edx, 0x118
push edx
call fcn.0040cea0
add esp, 8
push 0x58dbc4
mov eax, dword [ebp - 4]
add eax, 0x118
push eax
call fcn.0040cea0
add esp, 8
jmp 0x49cd2a
mov ecx, dword [ebp - 4]
mov dword [ecx + 0xb51c], 5
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xb51c]
push eax
mov ecx, dword [ebp - 4]
add ecx, 0xb4dc
push ecx
call fcn.00403084
push 0x1000
push 0
mov edx, dword [ebp - 4]
add edx, 0x71ab
push edx
call fcn.00402610
add esp, 0xc
push 0x1001
push 0
mov eax, dword [ebp - 4]
add eax, 0x81ab
push eax
call fcn.00402610
add esp, 0xc
push 0x1001
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.00402610
add esp, 0xc
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x91b8]
push eax
push 0x1000
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.0042ae1f
add esp, 0xc
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x91b8]
push eax
call fcn.0042998c
add esp, 4
test eax, eax
jne 0x49cdc1
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x91b8]
push edx
call fcn.004299b8
add esp, 4
test eax, eax
je 0x49cdc6
jmp 0x49cec1
push 0xa
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.004029e0
add esp, 8
test eax, eax
je 0x49cdf4
push 0xa
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.004029e0
add esp, 8
mov byte [eax], 0
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x4198]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x4198]
add edx, 1
mov eax, dword [ebp - 4]
mov dword [eax + 0x4198], edx
mov ecx, dword [ebp - 0x20]
push ecx
push 0x58dbb8
mov edx, dword [ebp - 4]
add edx, 0x4158
push edx
call fcn.004010f0
add esp, 0xc
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.0040cf90
add esp, 4
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
push 1
push 0
mov edx, dword [ebp - 4]
add edx, 0x4158
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4150]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 4]
mov dword [edx + 0x4154], eax
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x51a9
push ecx
call fcn.004a0a10
add esp, 8
push 0x3b
mov edx, dword [ebp - 4]
add edx, 0x51a9
push edx
call fcn.004029e0
add esp, 8
test eax, eax
je 0x49cebc
push 0x3b
mov eax, dword [ebp - 4]
add eax, 0x51a9
push eax
call fcn.004029e0
add esp, 8
mov byte [eax], 0
jmp 0x49c73e
jmp 0x49d022
mov ecx, dword [ebp - 4]
add ecx, 0x314c
push ecx
push str.Error_Processing_Section_Header______s_
mov edx, dword [ebp - 4]
add edx, 0x61aa
push edx
call fcn.004010f0
add esp, 0xc
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4198]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x4198]
add eax, 1
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x4198], eax
mov edx, dword [ebp - 0x24]
push edx
push 0x58db84
mov eax, dword [ebp - 4]
add eax, 0x4158
push eax
call fcn.004010f0
add esp, 0xc
mov ecx, dword [ebp - 4]
add ecx, 0x61aa
push ecx
call fcn.0040cf90
add esp, 4
push eax
mov edx, dword [ebp - 4]
add edx, 0x61aa
push edx
push 1
push 0
mov eax, dword [ebp - 4]
add eax, 0x4158
push eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x4150]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x4154], eax
mov edx, dword [ebp - 4]
cmp dword [edx + 0x1120], 0
je 0x49cf81
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1120]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x2130], 0
je 0x49cf9d
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x2130]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x3140], 0
je 0x49cfb9
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x3140]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x4150], 0
je 0x49cfd5
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4150]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x91b8], 0
je 0x49d00c
mov eax, dword [ebp - 4]
cmp dword [eax + 0x91b8], 0
je 0x49d00c
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x91b8]
push edx
call fcn.0040d693
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x91b8], 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.0040d01b
add esp, 4
mov eax, 0x1f9
jmp 0x49d3f3
jmp 0x49c2cf
jmp 0x49d1da
mov edx, dword [ebp - 4]
cmp dword [edx + 0xb51c], 1
jle 0x49d11d
mov eax, dword [ebp - 4]
cmp dword [eax + 0xb51c], 5
jne 0x49d074
mov ecx, dword [ebp - 4]
add ecx, 0x71ab
push ecx
mov edx, dword [ebp - 4]
add edx, 0x314c
push edx
push str.Buffer_Overflow_Processing_Section:___s__Parameter:__s
mov eax, dword [ebp - 4]
add eax, 0x61aa
push eax
call fcn.004010f0
add esp, 0x10
jmp 0x49d09e
mov ecx, dword [ebp - 4]
add ecx, 0x71ab
push ecx
mov edx, dword [ebp - 4]
add edx, 0x314c
push edx
push str.Error_Processing_Section:___s__Parameter:__s
mov eax, dword [ebp - 4]
add eax, 0x61aa
push eax
call fcn.004010f0
add esp, 0x10
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x4198]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4198]
add ecx, 1
mov edx, dword [ebp - 4]
mov dword [edx + 0x4198], ecx
mov eax, dword [ebp - 0x28]
push eax
push 0x58db10
mov ecx, dword [ebp - 4]
add ecx, 0x4158
push ecx
call fcn.004010f0
add esp, 0xc
mov edx, dword [ebp - 4]
add edx, 0x61aa
push edx
call fcn.0040cf90
add esp, 4
push eax
mov eax, dword [ebp - 4]
add eax, 0x61aa
push eax
push 1
push 0
mov ecx, dword [ebp - 4]
add ecx, 0x4158
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x4150]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x4154], eax
mov edx, dword [ebp - 4]
cmp dword [edx + 0x1120], 0
je 0x49d139
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1120]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x2130], 0
je 0x49d155
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x2130]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x3140], 0
je 0x49d171
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x3140]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x4150], 0
je 0x49d18d
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x4150]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x91b8], 0
je 0x49d1c4
mov eax, dword [ebp - 4]
cmp dword [eax + 0x91b8], 0
je 0x49d1c4
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x91b8]
push edx
call fcn.0040d693
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x91b8], 0
mov ecx, dword [ebp - 4]
push ecx
call fcn.0040d01b
add esp, 4
mov eax, 0x1f9
jmp 0x49d3f3
mov edx, dword [ebp - 4]
add edx, 0x118
push edx
call fcn.0040cf90
add esp, 4
test eax, eax
je 0x49d33e
mov eax, dword [ebp - 4]
add eax, 0x118
push eax
call fcn.0040cf90
add esp, 4
push eax
mov ecx, dword [ebp - 4]
add ecx, 0x118
push ecx
push 1
push 0
mov edx, dword [ebp - 4]
add edx, 0x41a8
push edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x2130]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp - 4]
cmp dword [edx + 0x108], 1
jne 0x49d33e
push 0x58db0c
push 0x58dae8
call fcn.0040d309
add esp, 8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x10c], eax
mov edx, dword [ebp - 4]
add edx, 0x118
push edx
mov eax, dword [ebp - 4]
add eax, 0x41a8
push eax
push 0x58dad8
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10c]
push edx
call fcn.00401040
add esp, 0x10
mov eax, dword [ebp - 4]
add eax, 0x41a8
push eax
push 0x58dac8
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10c]
push edx
call fcn.00401040
add esp, 0xc
mov eax, dword [ebp - 4]
cmp dword [eax + 0x10c], 0
je 0x49d2ce
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10c]
push edx
call fcn.0040d693
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x10c], 0
push 0x58dac4
push 0x58daa0
call fcn.0040d309
add esp, 8
mov ecx, dword [ebp - 4]
mov dword [ecx + 0x10c], eax
mov edx, dword [ebp - 4]
add edx, 0x118
push edx
mov eax, dword [ebp - 4]
add eax, 0x41a8
push eax
push 0x58da8c
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10c]
push edx
call fcn.00401040
add esp, 0x10
mov eax, dword [ebp - 4]
cmp dword [eax + 0x10c], 0
je 0x49d33e
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x10c]
push edx
call fcn.0040d693
add esp, 4
mov eax, dword [ebp - 4]
mov dword [eax + 0x10c], 0
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x1120], 0
je 0x49d35a
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x1120]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x2130], 0
je 0x49d376
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x2130]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x3140], 0
je 0x49d392
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x3140]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x4150], 0
je 0x49d3ae
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x4150]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
cmp dword [ecx + 0x91b8], 0
je 0x49d3e5
mov edx, dword [ebp - 4]
cmp dword [edx + 0x91b8], 0
je 0x49d3e5
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x91b8]
push ecx
call fcn.0040d693
add esp, 4
mov edx, dword [ebp - 4]
mov dword [edx + 0x91b8], 0
mov eax, dword [ebp - 4]
push eax
call fcn.0040d01b
add esp, 4
xor eax, eax
pop edi
pop esi
mov esp, ebp
pop ebp
ret