Function at 0x4cf6d0
Capabilities:
Delete registry value
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59bf21
mov eax, dword fs:[0]
push eax
sub esp, 0x50
mov eax, dword [0x634384]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x44], vtable.Utils::ResourceHolders::resource_t_struct_HKEY_____struct_Utils::ResourceHolders::kh_dtor_t__struct_Utils::ResourceHolders::puredrop_and_null_t_struct_HKEY_____struct_Utils::ResourceHolders::kh_dtor_t__.0
mov dword [ebp - 0x40], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x44], 0x5b3ea4
mov dword [ebp - 4], 1
call fcn.004917e0
mov esi, dword [eax + 0x40]
or esi, 0xf003f
mov byte [ebp - 4], 2
cmp dword [0x633cd4], 0
jne 0x4cf7ad
mov eax, dword [0x633cdc]
mov ecx, 0x633cdc
mov dword [ebp - 0x4c], 0x5ade7c
mov dword [ebp - 0x48], 0x633cdc
call dword [eax]
mov byte [ebp - 4], 3
cmp dword [0x633cd4], 0
jne 0x4cf79c
push 0x24
push str.SOFTWAREDoctor_WebScanning_Engine_
mov ecx, 0x633cc4
call fcn.00413650
push 0xd
push str.SpIDer_Guard_
mov ecx, 0x633cc4
call fcn.00413780
push 9
push 0x5b57d8
mov ecx, 0x633cc4
call fcn.00413780
mov byte [ebp - 4], 2
mov ecx, 0x633cdc
mov eax, dword [0x633cdc]
call dword [eax + 4]
push 0x633cc4
lea ecx, [ebp - 0x28]
call fcn.004128b0
mov dword [ebp - 0x5c], 1
cmp dword [eax + 0x14], 0x10
jb 0x4cf7c9
mov eax, dword [eax]
push 0
lea ecx, [ebp - 0x40]
push ecx
push 0
push esi
push 0
push 0
push 0
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov ecx, 1
mov esi, eax
mov dword [ebp - 0x5c], ecx
and ecx, 0xfffffffe
mov dword [ebp - 0x5c], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.004100d0
test esi, esi
jne 0x4d10ca
push dword [ebp + 8]
mov ecx, edi
push dword [ebp - 0x40]
call fcn.004d3270
push 1
push 1
push 0x633b70
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d3130
push esi
push 2
push 0x633af8
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d3130
push esi
push 0x800
push 0x633b0c
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d3130
push esi
push 4
push 0x633b20
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d3130
push esi
push 0x4000
push 0x633b84
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d3130
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x34]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push esi
push esi
push ecx
push esi
push dword [0x633830]
mov dword [0x633838], 1
push eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], 4
call ebx
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test eax, eax
jne 0x4cf8d6
cmp dword [ebp - 0x34], 4
jne 0x4cf8d6
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633830]
push dword [ebp - 0x38]
call ebx
test eax, eax
jne 0x4cf8d6
cmp dword [ebp - 0x34], eax
setne cl
jmp 0x4cf8f9
push 4
lea eax, [ebp - 0x34]
mov byte [ebp - 0x55], 1
push eax
push 4
push 0
push dword [0x633830]
mov dword [ebp - 0x34], 1
push dword [ebp - 0x38]
call esi
mov cl, byte [ebp - 0x55]
movzx eax, cl
mov dword [0x633838], eax
test cl, cl
jne 0x4cf90e
or dword [edi + 0x28], 0x400
jmp 0x4cf915
and dword [edi + 0x28], 0xfffffbff
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x34]
push 0
push 0
push ecx
push 0
push dword [0x633bc8]
mov dword [ebp - 0x38], eax
push eax
mov dword [ebp - 0x3c], 4
call ebx
test eax, eax
jne 0x4cf962
cmp dword [ebp - 0x34], 4
jne 0x4cf962
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633bc8]
push dword [ebp - 0x38]
call ebx
test eax, eax
jne 0x4cf962
mov eax, dword [ebp - 0x34]
mov dword [edi + 0xc], eax
jmp 0x4cf980
mov eax, dword [edi + 0xc]
push 4
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633bc8]
push dword [ebp - 0x38]
call esi
mov eax, dword [ebp - 0x34]
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [0x633bd0], eax
mov eax, dword [ebp - 0x40]
push ecx
push 0
push dword [0x633bdc]
mov dword [ebp - 0x38], eax
push eax
mov dword [ebp - 0x3c], 4
call ebx
test eax, eax
jne 0x4cf9d2
cmp dword [ebp - 0x34], 4
jne 0x4cf9d2
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633bdc]
push dword [ebp - 0x38]
call ebx
test eax, eax
jne 0x4cf9d2
mov eax, dword [ebp - 0x34]
mov dword [edi + 0x10], eax
jmp 0x4cf9f0
mov eax, dword [edi + 0x10]
push 4
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633bdc]
push dword [ebp - 0x38]
call esi
mov eax, dword [ebp - 0x34]
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [0x633be4], eax
mov eax, dword [ebp - 0x40]
push ecx
push 0
push dword [0x633bf0]
mov dword [ebp - 0x38], eax
push eax
mov dword [ebp - 0x3c], 4
call ebx
test eax, eax
jne 0x4cfa42
cmp dword [ebp - 0x34], 4
jne 0x4cfa42
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633bf0]
push dword [ebp - 0x38]
call ebx
test eax, eax
jne 0x4cfa42
mov eax, dword [ebp - 0x34]
mov dword [edi + 0x14], eax
jmp 0x4cfa60
mov eax, dword [edi + 0x14]
push 4
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633bf0]
push dword [ebp - 0x38]
call esi
mov eax, dword [ebp - 0x34]
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [0x633bf8], eax
mov eax, dword [ebp - 0x40]
push ecx
push 0
push dword [0x633c04]
mov dword [ebp - 0x38], eax
push eax
mov dword [ebp - 0x3c], 4
call ebx
test eax, eax
jne 0x4cfab2
cmp dword [ebp - 0x34], 4
jne 0x4cfab2
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633c04]
push dword [ebp - 0x38]
call ebx
test eax, eax
jne 0x4cfab2
mov eax, dword [ebp - 0x34]
mov dword [edi + 0x18], eax
jmp 0x4cfad0
mov eax, dword [edi + 0x18]
push 4
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633c04]
push dword [ebp - 0x38]
call esi
mov eax, dword [ebp - 0x34]
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [0x633c0c], eax
mov eax, dword [ebp - 0x40]
push ecx
push 0
push dword [0x633c18]
mov dword [ebp - 0x38], eax
push eax
mov dword [ebp - 0x3c], 4
call ebx
test eax, eax
jne 0x4cfb22
cmp dword [ebp - 0x34], 4
jne 0x4cfb22
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633c18]
push dword [ebp - 0x38]
call ebx
test eax, eax
jne 0x4cfb22
mov eax, dword [ebp - 0x34]
mov dword [edi + 0x1c], eax
jmp 0x4cfb40
mov eax, dword [edi + 0x1c]
push 4
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633c18]
push dword [ebp - 0x38]
call esi
mov eax, dword [ebp - 0x34]
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [0x633c20], eax
mov eax, dword [ebp - 0x40]
push ecx
push 0
push dword [0x633c2c]
mov dword [ebp - 0x38], eax
push eax
mov dword [ebp - 0x3c], 4
call ebx
test eax, eax
jne 0x4cfb92
cmp dword [ebp - 0x34], 4
jne 0x4cfb92
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633c2c]
push dword [ebp - 0x38]
call ebx
test eax, eax
jne 0x4cfb92
mov eax, dword [ebp - 0x34]
mov dword [edi + 0x20], eax
jmp 0x4cfbb0
mov eax, dword [edi + 0x20]
push 4
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633c2c]
push dword [ebp - 0x38]
call esi
mov eax, dword [ebp - 0x34]
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [0x633c34], eax
mov eax, dword [ebp - 0x40]
push ecx
push 0
push dword [0x633c40]
mov dword [ebp - 0x38], eax
push eax
mov dword [ebp - 0x3c], 4
call ebx
test eax, eax
jne 0x4cfc02
cmp dword [ebp - 0x34], 4
jne 0x4cfc02
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633c40]
push dword [ebp - 0x38]
call ebx
test eax, eax
jne 0x4cfc02
mov eax, dword [ebp - 0x34]
mov dword [edi + 0x24], eax
jmp 0x4cfc20
mov eax, dword [edi + 0x24]
push 4
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633c40]
push dword [ebp - 0x38]
call esi
mov eax, dword [ebp - 0x34]
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [0x633c48], eax
mov eax, dword [ebp - 0x40]
push ecx
push 0
push dword [0x633c54]
mov dword [ebp - 0x38], eax
push eax
mov dword [ebp - 0x3c], 4
call ebx
test eax, eax
jne 0x4cfc72
cmp dword [ebp - 0x34], 4
jne 0x4cfc72
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633c54]
push dword [ebp - 0x38]
call ebx
test eax, eax
jne 0x4cfc72
mov eax, dword [ebp - 0x34]
mov dword [edi + 0x30], eax
jmp 0x4cfc90
mov eax, dword [edi + 0x30]
push 4
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633c54]
push dword [ebp - 0x38]
call esi
mov eax, dword [ebp - 0x34]
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [0x633c5c], eax
mov eax, dword [ebp - 0x40]
push ecx
push 0
push dword [0x633844]
mov dword [ebp - 0x38], eax
push eax
mov dword [ebp - 0x3c], 4
call ebx
test eax, eax
jne 0x4cfce6
cmp dword [ebp - 0x34], 4
jne 0x4cfce6
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633844]
push dword [ebp - 0x38]
call ebx
test eax, eax
jne 0x4cfce6
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x4cfce6
mov dword [edi + 0x44], eax
jmp 0x4cfd05
push 4
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0xa
push eax
push 4
push 0
push dword [0x633844]
push dword [ebp - 0x38]
call esi
mov eax, dword [ebp - 0x34]
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [0x63384c], eax
mov eax, dword [ebp - 0x40]
push ecx
push 0
push dword [0x633858]
mov dword [ebp - 0x38], eax
push eax
mov dword [ebp - 0x3c], 4
call ebx
test eax, eax
jne 0x4cfd5b
cmp dword [ebp - 0x34], 4
jne 0x4cfd5b
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633858]
push dword [ebp - 0x38]
call ebx
test eax, eax
jne 0x4cfd5b
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x4cfd5b
mov dword [edi + 0x48], eax
jmp 0x4cfd7a
push 4
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], 0x1e
push eax
push 4
push 0
push dword [0x633858]
push dword [ebp - 0x38]
call esi
mov eax, dword [ebp - 0x34]
mov dword [0x633860], eax
call fcn.004a0f60
push 0
push 0
push 0x64
add eax, 0x18
mov ecx, edi
push eax
push 0x633c60
push dword [ebp - 0x40]
call fcn.004d31e0
call fcn.004a0f60
push 0
push 0
push 0x64
add eax, 0x1c
mov ecx, edi
push eax
push 0x633c74
push dword [ebp - 0x40]
call fcn.004d31e0
call fcn.004a0f60
push 0x4b
push 0
push 0x64
add eax, 0x20
mov ecx, edi
push eax
push 0x633c88
push dword [ebp - 0x40]
call fcn.004d31e0
call fcn.004a0f60
push 0x64
push 0
push 0x64
add eax, 0x24
mov ecx, edi
push eax
push 0x633c9c
push dword [ebp - 0x40]
call fcn.004d31e0
push 0
push 0
push 0xffffffffffffffff
lea eax, [edi + 0x270]
mov ecx, edi
push eax
push 0x633698
push dword [ebp - 0x40]
call fcn.004d31e0
push 0xa
push 0
push 0xffffffffffffffff
lea esi, [edi + 0x274]
mov ecx, edi
push esi
push 0x6336c0
push dword [ebp - 0x40]
call fcn.004d31e0
imul eax, dword [esi], 0x3e8
mov ecx, edi
push 0
push 0
push 0xffffffffffffffff
mov dword [esi], eax
lea eax, [edi + 0x278]
push eax
push 0x633684
push dword [ebp - 0x40]
call fcn.004d31e0
push 0
push 0
push 0xffffffffffffffff
lea eax, [edi + 0x27c]
mov ecx, edi
push eax
push 0x633670
push dword [ebp - 0x40]
call fcn.004d31e0
mov esi, dword [ebp - 0x40]
mov dword [ebp - 0x3c], 4
push 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0
push dword [0x633600]
push esi
call ebx
test eax, eax
jne 0x4cfec3
cmp dword [ebp - 0x34], 4
jne 0x4cfec3
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633600]
push esi
call ebx
test eax, eax
jne 0x4cfec3
cmp dword [ebp - 0x34], eax
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
setne al
mov byte [edi + 0x280], al
jmp 0x4cfeea
push 4
lea eax, [ebp - 0x34]
mov byte [edi + 0x280], 1
push eax
push 4
push 0
push dword [0x633600]
mov dword [ebp - 0x34], 1
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
call esi
movzx eax, byte [edi + 0x280]
mov dword [0x633608], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x633b3c]
add eax, 4
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4cff53
cmp dword [ebp - 0x34], 4
jne 0x4cff53
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633b3c]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4cff53
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4cff7a
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 1
mov byte [eax], 1
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633b3c]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x633b44], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x633ba0]
add eax, 5
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4cffdf
cmp dword [ebp - 0x34], 4
jne 0x4cffdf
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633ba0]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4cffdf
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d0006
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 1
mov byte [eax], 1
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633ba0]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x633ba8], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x633aec]
add eax, 6
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d006b
cmp dword [ebp - 0x34], 4
jne 0x4d006b
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633aec]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d006b
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d0092
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 1
mov byte [eax], 1
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633aec]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x633af4], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x633bb4]
add eax, 7
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d00f7
cmp dword [ebp - 0x34], 4
jne 0x4d00f7
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633bb4]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d00f7
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d011e
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 0
mov byte [eax], 0
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633bb4]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x633bbc], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x633b64]
add eax, 8
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d0183
cmp dword [ebp - 0x34], 4
jne 0x4d0183
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633b64]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d0183
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d01aa
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 1
mov byte [eax], 1
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633b64]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x633b6c], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x633b50]
add eax, 9
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d020f
cmp dword [ebp - 0x34], 4
jne 0x4d020f
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633b50]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d020f
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d0236
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 0
mov byte [eax], 0
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633b50]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x633b58], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x6337cc]
add eax, 0xa
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d029b
cmp dword [ebp - 0x34], 4
jne 0x4d029b
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x6337cc]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d029b
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d02c2
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 1
mov byte [eax], 1
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x6337cc]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x6337d4], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x6337e0]
add eax, 0xb
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d0327
cmp dword [ebp - 0x34], 4
jne 0x4d0327
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x6337e0]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d0327
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d034e
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 1
mov byte [eax], 1
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x6337e0]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x6337e8], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x63381c]
add eax, 0xc
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d03b3
cmp dword [ebp - 0x34], 4
jne 0x4d03b3
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x63381c]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d03b3
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d03da
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 0
mov byte [eax], 0
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x63381c]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x633824], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x633704]
add eax, 0xd
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d043f
cmp dword [ebp - 0x34], 4
jne 0x4d043f
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633704]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d043f
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d0466
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 1
mov byte [eax], 1
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633704]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x63370c], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x6336dc]
add eax, 0xe
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d04cb
cmp dword [ebp - 0x34], 4
jne 0x4d04cb
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x6336dc]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d04cb
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d04f2
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 1
mov byte [eax], 1
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x6336dc]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x6336e4], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x6336f0]
add eax, 0xf
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d0557
cmp dword [ebp - 0x34], 4
jne 0x4d0557
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x6336f0]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d0557
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d057e
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 1
mov byte [eax], 1
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x6336f0]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x6336f8], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x633718]
add eax, 0x10
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d05e3
cmp dword [ebp - 0x34], 4
jne 0x4d05e3
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633718]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d05e3
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d060a
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 1
mov byte [eax], 1
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633718]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x633720], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x6336b4]
add eax, 0x12
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d066f
cmp dword [ebp - 0x34], 4
jne 0x4d066f
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x6336b4]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d066f
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d0696
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 0
mov byte [eax], 0
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x6336b4]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x6336bc], eax
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x3c], 4
push ecx
push 0
push dword [0x633cb8]
add eax, 0x13
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d06fb
cmp dword [ebp - 0x34], 4
jne 0x4d06fb
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x633cb8]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d06fb
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
setne cl
mov byte [eax], cl
jmp 0x4d0722
mov eax, dword [ebp - 0x38]
push 4
mov dword [ebp - 0x34], 1
mov byte [eax], 1
lea eax, [ebp - 0x34]
push eax
push 4
push 0
push dword [0x633cb8]
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov cl, byte [eax]
movzx eax, cl
mov dword [0x633cc0], eax
mov byte [ebp - 0x38], 0
call fcn.004917e0
lea ecx, [ebp - 0x3c]
push ecx
mov eax, dword [eax + 0x40]
or eax, 0x20019
push eax
push 0
push 0x5b5b54
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4d0954
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x34]
mov dword [ebp - 0x48], 4
push eax
lea eax, [ebp - 0x50]
push eax
push 0
push str.CompatibleVersion
push dword [ebp - 0x3c]
call ebx
test eax, eax
jne 0x4d079e
cmp dword [ebp - 0x50], 4
jne 0x4d079e
mov eax, dword [ebp - 0x38]
mov ecx, 1
cmp dword [ebp - 0x34], 8
movzx eax, al
cmovae eax, ecx
mov dword [ebp - 0x38], eax
push dword [ebp - 0x3c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp byte [ebp - 0x38], 0
je 0x4d0954
push 0
push 0
push 3
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
push 0x633724
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
cmp eax, 3
ja case.default.0x4d07d6
jmp dword [eax*4 + 0x4d1170]
call fcn.004a0f60
mov byte [eax], 0
and dword [edi + 0x28], 0xffffff7f
call fcn.004a0f60
mov byte [eax + 3], 0
and dword [edi + 0x28], 0xffffffbf
call fcn.004a0f60
mov byte [eax + 2], 0
call fcn.004a0f60
mov dword [eax + 0x28], 0x100000
mov dword [eax + 0x2c], 0
jmp case.default.0x4d07d6
call fcn.004a0f60
mov byte [eax], 1
or dword [edi + 0x28], 0x80
call fcn.004a0f60
mov byte [eax + 3], 1
or dword [edi + 0x28], 0x40
call fcn.004a0f60
mov byte [eax + 2], 0
call fcn.004a0f60
mov dword [eax + 0x28], 0x6400000
mov dword [eax + 0x2c], 0
jmp case.default.0x4d07d6
call fcn.004a0f60
mov byte [eax], 1
or dword [edi + 0x28], 0x80
call fcn.004a0f60
mov byte [eax + 3], 1
or dword [edi + 0x28], 0x40
call fcn.004a0f60
mov byte [eax + 2], 1
call fcn.004a0f60
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0
jmp case.default.0x4d07d6
push dword [0x63372c]
push dword [ebp - 0x40]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push 0x64
push 0x64
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
push 0x633788
push dword [ebp - 0x40]
call fcn.004d31e0
mov esi, dword [ebp - 0x48]
call fcn.004a0f60
mov dword [eax + 0x28], esi
mov dword [eax + 0x2c], 0
call fcn.004a0f60
cmp dword [eax + 0x28], 0xffffffff
jne 0x4d08f4
cmp dword [eax + 0x2c], 0
jne 0x4d08f4
call fcn.004a0f60
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0
jmp 0x4d090d
call fcn.004a0f60
mov ecx, dword [eax + 0x2c]
lea edx, [eax + 0x28]
mov eax, dword [edx]
shld ecx, eax, 0xa
shl eax, 0xa
mov dword [edx], eax
mov dword [edx + 4], ecx
push 0
push 0x40
push 0x6337b0
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d3130
push 0
push 0x80
push 0x633800
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d3130
call fcn.004a0f60
push 0xffffffffffffffff
push 1
push eax
push 0x63379c
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d3050
jmp 0x4d0a81
push dword [0x63372c]
push dword [ebp - 0x40]
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
push 0x64
push 0x64
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov ecx, edi
push eax
push 0x633788
push dword [ebp - 0x40]
call fcn.004d31e0
mov esi, dword [ebp - 0x48]
call fcn.004a0f60
mov dword [eax + 0x28], esi
mov dword [eax + 0x2c], 0
call fcn.004a0f60
cmp dword [eax + 0x28], 0xffffffff
jne 0x4d09b4
cmp dword [eax + 0x2c], 0
jne 0x4d09b4
call fcn.004a0f60
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0
jmp 0x4d09cd
call fcn.004a0f60
mov ecx, dword [eax + 0x2c]
lea edx, [eax + 0x28]
mov eax, dword [edx]
shld ecx, eax, 0xa
shl eax, 0xa
mov dword [edx], eax
mov dword [edx + 4], ecx
push 0
push 0x40
push 0x6337b0
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d3130
push 0
push 0x80
push 0x633800
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d3130
call fcn.004a0f60
push 0
push 0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x48], 4
push ecx
push 0
push dword [0x6337a4]
mov esi, eax
mov eax, dword [ebp - 0x40]
push eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x50], eax
call ebx
test eax, eax
jne 0x4d0a4f
cmp dword [ebp - 0x34], 4
jne 0x4d0a4f
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x34]
push eax
push 0
push 0
push dword [0x6337a4]
push dword [ebp - 0x50]
call ebx
test eax, eax
jne 0x4d0a4f
cmp dword [ebp - 0x34], eax
setne al
mov byte [esi], al
jmp 0x4d0a79
push 4
lea eax, [ebp - 0x34]
mov byte [esi], 1
mov esi, dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push eax
push 4
push 0
push dword [0x6337a4]
mov dword [ebp - 0x34], 1
push dword [ebp - 0x50]
call esi
mov eax, dword [ebp - 0x38]
mov al, byte [eax]
movzx eax, al
mov dword [0x6337ac], eax
call fcn.004a0f60
push 2
push 0
inc eax
mov ecx, edi
push eax
push 0x63379c
push dword [ebp - 0x40]
call fcn.004d3050
call fcn.004a0f60
push 0xffffffffffffffff
push 0
add eax, 2
mov ecx, edi
push eax
push 0x63374c
push dword [ebp - 0x40]
call fcn.004d3050
call fcn.004a0f60
push 0xffffffffffffffff
push 0
add eax, 3
mov ecx, edi
push eax
push 0x6337ec
push dword [ebp - 0x40]
call fcn.004d3050
call fcn.004a0f60
cmp byte [eax + 2], 0
je 0x4d0af0
call fcn.004a0f60
mov byte [eax + 0xa], 1
call fcn.004a0f60
mov byte [eax + 0xb], 1
call fcn.004a0f60
push 0xe10
push 0x3c
push 0xffffffffffffffff
add eax, 0x14
mov ecx, edi
push eax
push 0x63360c
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [0x633548]
mov ecx, edi
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
push eax
push 0x633954
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov esi, 0x400
mul esi
mov ecx, edi
mov dword [0x633450], eax
mov eax, dword [0x633550]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x633454], edx
push eax
push 0x633968
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x633458], eax
mov eax, dword [0x633558]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x63345c], edx
push eax
push 0x63397c
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x633460], eax
mov eax, dword [0x633560]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x633464], edx
push eax
push 0x633990
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x633468], eax
mov eax, dword [0x633568]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x63346c], edx
push eax
push 0x6339a4
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x633470], eax
mov eax, dword [0x633570]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x633474], edx
push eax
push 0x6339b8
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x633478], eax
mov eax, dword [0x633578]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x63347c], edx
push eax
push 0x6339cc
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x633480], eax
mov eax, dword [0x633580]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x633484], edx
push eax
push 0x6339e0
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x633488], eax
mov eax, dword [0x633588]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x63348c], edx
push eax
push 0x6339f4
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x633490], eax
mov eax, dword [0x633590]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x633494], edx
push eax
push 0x633a08
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mul esi
mov dword [0x633498], eax
mov eax, dword [0x633598]
mov dword [0x63349c], edx
shr eax, 0xa
mov ecx, edi
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
push eax
push 0x633a1c
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x6334a0], eax
mov eax, dword [0x6335a0]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x6334a4], edx
push eax
push 0x633a30
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x6334a8], eax
mov eax, dword [0x6335a8]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x6334ac], edx
push eax
push 0x633a44
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x6334b0], eax
mov eax, dword [0x6335b0]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x6334b4], edx
push eax
push 0x633a58
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x6334b8], eax
mov eax, dword [0x6335b8]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x6334bc], edx
push eax
push 0x633a6c
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mul esi
mov dword [0x6334c0], eax
mov eax, dword [0x6335c0]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x6334c4], edx
push eax
push 0x633a80
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x6334c8], eax
mov eax, dword [0x6335c8]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x6334cc], edx
push eax
push 0x633a94
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x6334d0], eax
mov eax, dword [0x6335d0]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x6334d4], edx
push eax
push 0x633aa8
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x6334d8], eax
mov eax, dword [0x6335d8]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x6334dc], edx
push eax
push 0x633abc
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
mul esi
mov dword [0x6334e0], eax
mov eax, dword [0x6335f0]
shr eax, 0xa
push eax
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x48]
mov dword [0x6334e4], edx
push eax
push 0x633ad0
push dword [ebp - 0x40]
call fcn.004d31e0
mov eax, dword [ebp - 0x48]
mov ecx, edi
push 0x17
mul esi
push 1
lea esi, [edi + 0x38]
mov dword [0x6334f8], eax
push esi
push 0x633864
push dword [ebp - 0x40]
mov dword [0x6334fc], edx
call fcn.004d2fb0
push 0x16
push 2
lea eax, [esi + 1]
push eax
push 0x633878
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d2fb0
push 0x1e
push 2
lea eax, [esi + 2]
mov ecx, edi
push eax
push 0x63388c
push dword [ebp - 0x40]
call fcn.004d2fb0
push 0x1e
push 2
lea eax, [esi + 3]
mov ecx, edi
push eax
push 0x6338a0
push dword [ebp - 0x40]
call fcn.004d2fb0
push 0x1a
push 2
lea eax, [esi + 4]
mov ecx, edi
push eax
push 0x6338b4
push dword [ebp - 0x40]
call fcn.004d2fb0
push 0x1e
push 2
lea eax, [esi + 5]
mov ecx, edi
push eax
push 0x6338c8
push dword [ebp - 0x40]
call fcn.004d2fb0
push 0x1e
push 2
lea eax, [esi + 6]
mov ecx, edi
push eax
push 0x6338dc
push dword [ebp - 0x40]
call fcn.004d2fb0
push 0x1e
push 2
lea eax, [esi + 7]
mov ecx, edi
push eax
push 0x6338f0
push dword [ebp - 0x40]
call fcn.004d2fb0
push 0x1e
push 8
lea eax, [esi + 8]
mov ecx, edi
push eax
push 0x633904
push dword [ebp - 0x40]
call fcn.004d2fb0
push 0x1e
push 8
lea eax, [esi + 9]
mov ecx, edi
push eax
push 0x633918
push dword [ebp - 0x40]
call fcn.004d2fb0
push 0x1e
push 8
lea eax, [esi + 0xa]
mov ecx, edi
push eax
push 0x63392c
push dword [ebp - 0x40]
call fcn.004d2fb0
push 8
push 0
lea eax, [esi + 0xb]
push eax
push 0x633940
push dword [ebp - 0x40]
mov ecx, edi
call fcn.004d2fb0
call fcn.004a0f60
mov dword [ebp - 0x54], 0x5ade7c
lea ebx, [eax + 0x30]
mov eax, dword [ebx]
mov ecx, ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x50], ebx
call dword [eax]
mov byte [ebp - 4], 4
call fcn.004a0f60
lea ecx, [eax + 0x54]
call fcn.004e1c40
call fcn.004a0f60
add eax, 0x54
mov ecx, edi
push eax
push 0x64cac0
push dword [ebp - 0x40]
call fcn.004d3490
call fcn.004a0f60
lea ecx, [eax + 0x78]
call fcn.004e1c40
call fcn.004a0f60
add eax, 0x78
mov ecx, edi
push eax
push 0x64ca9c
push dword [ebp - 0x40]
call fcn.004d3490
call fcn.004a0f60
lea ecx, [eax + 0x9c]
call fcn.004e1c40
call fcn.004a0f60
add eax, 0x9c
mov ecx, edi
push eax
push 0x64cae4
push dword [ebp - 0x40]
call fcn.004d3490
call fcn.004a0f60
cmp byte [eax + 0xd], 0
je 0x4d10bb
call fcn.004a0f60
mov esi, eax
call fcn.004a0f60
mov al, byte [eax + 0x10]
mov dword [ebp - 0x48], eax
call fcn.004a0f60
mov bl, byte [eax + 0xf]
call fcn.004a0f60
push edi
push dword [ebp - 0x48]
lea ecx, [esi + 0x54]
mov al, byte [eax + 0xe]
push ebx
push eax
call fcn.004e0da0
mov ebx, dword [ebp - 0x3c]
mov byte [ebp - 4], 1
mov ecx, ebx
mov eax, dword [ebx]
call dword [eax + 4]
mov bl, 1
jmp 0x4d112a
push esi
push 1
lea ecx, [ebp - 0x30]
call fcn.00447530
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00447590
push eax
push 1
push 0xfbe
push 3
push 0x6428b4
call fcn.00440860
add esp, 0x14
cmp byte [ebp + 8], 0
je 0x4d111c
call fcn.004c9e00
lea ecx, [ebp - 0x30]
mov esi, eax
call fcn.00447590
push eax
push str.SpIDer_Guard_is_not_configured___s_
push esi
call fcn.004e34f0
add esp, 0xc
xor bl, bl
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.004100d0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], vtable.Utils::ResourceHolders::resource_t_struct_HKEY_____struct_Utils::ResourceHolders::kh_dtor_t__struct_Utils::ResourceHolders::puredrop_and_null_t_struct_HKEY_____struct_Utils::ResourceHolders::kh_dtor_t__.0
test eax, eax
je 0x4d1146
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov al, bl
mov dword [ebp - 0x40], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005395e6
mov esp, ebp
pop ebp
ret 4