Function at 0x403c70
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Get common file path
Get system information on windows
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x448b20
mov eax, dword fs:[0]
push eax
sub esp, 0xc50
mov eax, dword [0x46200c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xb04], edi
xorps xmm0, xmm0
mov dword [ebp - 0x96c], 0
lea eax, [ebp - 0x98c]
push eax
movups xmmword [ebp - 0x98c], xmm0
movups xmmword [ebp - 0x97c], xmm0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
xor eax, eax
xorps xmm0, xmm0
cmp word [ebp - 0x98c], 9
movups xmmword [ebp - 0x368], xmm0
sete al
mov dword [ebp - 0x35c], 0
movq qword [ebp - 0x358], xmm0
mov dword [ebp - 0xb08], eax
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x354], 0
and eax, 0xfffffe00
mov dword [ebp - 0x360], eax
sub esp, 0x18
mov dword [ebp - 4], 1
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0x39
mov ecx, str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceslrtp
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x4591cb
push 0x4591c8
lea ecx, [ebp - 0x368]
mov byte [ebp - 4], 2
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x638], xmm0
mov dword [ebp - 0x62c], 0
movq qword [ebp - 0x628], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x624], 0
and eax, 0xfffffe00
mov dword [ebp - 0x630], eax
sub esp, 0x18
mov byte [ebp - 4], 4
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0xb
mov ecx, str.DisplayName
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x638]
mov byte [ebp - 4], 5
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.00411e40
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov edx, 6
mov dword [esi + 0xc], 0
mov ecx, str.REG_SZ
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x638]
mov byte [ebp - 4], 6
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.00411e40
sub esp, 0x18
mov edx, 4
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.lrtp
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x638]
mov byte [ebp - 4], 7
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x368]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x638]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 8
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 4
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x650], xmm0
mov dword [ebp - 0x644], 0
movq qword [ebp - 0x640], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x640], 0
mov dword [ebp - 0x63c], 0
and eax, 0xfffffe00
mov dword [ebp - 0x648], eax
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0xc
mov ecx, str.ErrorControl
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x650]
mov byte [ebp - 4], 0xb
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.00411e40
sub esp, 0x18
mov edx, 9
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_DWORD
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x650]
mov byte [ebp - 4], 0xc
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.00411e40
sub esp, 0x18
mov edx, 8
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.00000001
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x650]
mov byte [ebp - 4], 0xd
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x368]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x650]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0xe
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x668], xmm0
movq qword [ebp - 0x658], xmm0
psrldq xmm0, 8
movd eax, xmm0
and eax, 0xfffffe00
mov dword [ebp - 0x660], eax
mov dword [ebp - 0x65c], 0
mov dword [ebp - 0x658], 0
mov dword [ebp - 0x654], 0
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 9
mov ecx, str.ImagePath
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x668]
mov byte [ebp - 4], 0x11
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.00411e40
sub esp, 0x18
mov edx, 0xd
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_EXPAND_SZ
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x668]
mov byte [ebp - 4], 0x12
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.00411e40
sub esp, 0x18
mov edx, 0x19
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.system32DRIVERSlrtp.sys
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x668]
mov byte [ebp - 4], 0x13
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x368]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x668]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov byte [ebp - 4], 0x14
mov ecx, esi
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x680], xmm0
mov dword [ebp - 0x674], 0
movq qword [ebp - 0x670], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x670], 0
mov dword [ebp - 0x66c], 0
and eax, 0xfffffe00
mov dword [ebp - 0x678], eax
sub esp, 0x18
mov byte [ebp - 4], 0x16
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0xf
mov ecx, str.DependOnService
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x680]
mov byte [ebp - 4], 0x17
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.00411e40
sub esp, 0x18
mov edx, 0xc
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_MULTI_SZ
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x680]
mov byte [ebp - 4], 0x18
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.00411e40
mov eax, dword [ebp - 0xc24]
mov edx, 6
and eax, 0xffffff04
mov dword [ebp - 0xc20], 0
or eax, 0x104
mov dword [ebp - 0xc1c], 0
mov ecx, str.FltMgr
mov dword [ebp - 0xc24], eax
mov dword [ebp - 0xc18], 0
call fcn.00411360
mov dword [ebp - 0xc2c], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x680]
mov byte [ebp - 4], 0x19
call fcn.00412840
mov esi, eax
sub esp, 0x18
lea eax, [ebp - 0xc2c]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x1a
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x19
call fcn.00411e40
lea ecx, [ebp - 0xc2c]
mov byte [ebp - 4], 0x16
call fcn.00411d80
push 0x459241
push str.value
lea ecx, [ebp - 0x368]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x680]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x1b
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x698], xmm0
mov dword [ebp - 0x68c], 0
movq qword [ebp - 0x688], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x688], 0
mov dword [ebp - 0x684], 0
and eax, 0xfffffe00
mov dword [ebp - 0x690], eax
sub esp, 0x18
mov byte [ebp - 4], 0x1d
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 5
mov ecx, str.Start
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x698]
mov byte [ebp - 4], 0x1e
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.00411e40
sub esp, 0x18
mov edx, 9
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov ecx, str.REG_DWORD
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x698]
mov byte [ebp - 4], 0x1f
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.00411e40
sub esp, 0x18
mov edx, 8
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.00000001
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x698]
mov byte [ebp - 4], 0x20
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x368]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x698]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x21
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x578], xmm0
mov dword [ebp - 0x56c], 0
movq qword [ebp - 0x568], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x568], 0
mov dword [ebp - 0x564], 0
and eax, 0xfffffe00
mov dword [ebp - 0x570], eax
sub esp, 0x18
mov byte [ebp - 4], 0x23
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 4
mov ecx, str.Type
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
mov byte [ebp - 4], 0x24
push 0x45920c
push str.name
lea ecx, [ebp - 0x578]
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.00411e40
sub esp, 0x18
mov edx, 9
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_DWORD
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x25
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.00411e40
sub esp, 0x18
mov edx, 8
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.00000002
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 0x26
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x368]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x578]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x27
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x590], xmm0
mov dword [ebp - 0x584], 0
movq qword [ebp - 0x580], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x580], 0
mov dword [ebp - 0x57c], 0
and eax, 0xfffffe00
mov dword [ebp - 0x588], eax
mov byte [ebp - 4], 0x29
sub esp, 0x18
mov edx, 5
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.Group
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x2a
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.00411e40
sub esp, 0x18
mov edx, 6
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_SZ
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x2b
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.00411e40
sub esp, 0x18
mov edx, 0x19
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.FSFilter_Activity_Monitor
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], 0x2c
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x368]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x590]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x2d
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x5a8], xmm0
mov dword [ebp - 0x59c], 0
movq qword [ebp - 0x598], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x598], 0
mov dword [ebp - 0x594], 0
and eax, 0xfffffe00
mov dword [ebp - 0x5a0], eax
sub esp, 0x18
mov byte [ebp - 4], 0x2f
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 3
mov ecx, 0x45930c
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 0x30
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x2f
call fcn.00411e40
sub esp, 0x18
mov edx, 9
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_DWORD
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 0x31
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x2f
call fcn.00411e40
sub esp, 0x18
mov edx, 8
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.00000002
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 0x32
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x2f
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x368]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x5a8]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x33
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x2f
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x5c0], xmm0
mov dword [ebp - 0x5b4], 0
movq qword [ebp - 0x5b0], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x5b0], 0
mov dword [ebp - 0x5ac], 0
and eax, 0xfffffe00
mov dword [ebp - 0x5b8], eax
sub esp, 0x18
mov byte [ebp - 4], 0x35
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0x11
mov ecx, str.SupportedFeatures
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x36
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x35
call fcn.00411e40
sub esp, 0x18
mov edx, 9
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_DWORD
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x37
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x35
call fcn.00411e40
sub esp, 0x18
mov edx, 8
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov ecx, str.00000008
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0x38
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x35
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x368]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x5c0]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x39
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x35
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x6c8], xmm0
mov dword [ebp - 0x6bc], 0
movq qword [ebp - 0x6b8], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x6b8], 0
mov dword [ebp - 0x6b4], 0
and eax, 0xfffffe00
mov dword [ebp - 0x6c0], eax
sub esp, 0x18
mov byte [ebp - 4], 0x3b
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0x43
mov ecx, str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceslrtpInstances
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x4591cb
push 0x4591c8
lea ecx, [ebp - 0x6c8]
mov byte [ebp - 4], 0x3c
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x3b
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x5d8], xmm0
mov dword [ebp - 0x5cc], 0
movq qword [ebp - 0x5c8], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x5c8], 0
mov dword [ebp - 0x5c4], 0
and eax, 0xfffffe00
mov dword [ebp - 0x5d0], eax
sub esp, 0x18
mov byte [ebp - 4], 0x3e
mov dword [ebp - 0x9c8], esp
mov esi, esp
mov byte [esi + 8], 4
mov edx, 0xf
or dword [esi + 8], 0x100
mov ecx, str.DefaultInstance
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0x3f
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.00411e40
sub esp, 0x18
mov edx, 6
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_SZ
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0x40
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.00411e40
sub esp, 0x18
mov edx, 0xc
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.lrtpInstance
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0x41
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x6c8]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x5d8]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x42
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x3e
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x5f0], xmm0
mov dword [ebp - 0x5e4], 0
movq qword [ebp - 0x5e0], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x5e0], 0
mov dword [ebp - 0x5dc], 0
and eax, 0xfffffe00
mov dword [ebp - 0x5e8], eax
sub esp, 0x18
mov byte [ebp - 4], 0x44
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0x50
mov ecx, str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceslrtpInstanceslrtpInstance
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x4591cb
push 0x4591c8
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 0x45
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x44
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x608], xmm0
mov dword [ebp - 0x5fc], 0
movq qword [ebp - 0x5f8], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x5f8], 0
mov dword [ebp - 0x5f4], 0
and eax, 0xfffffe00
mov dword [ebp - 0x600], eax
sub esp, 0x18
mov byte [ebp - 4], 0x47
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 8
mov ecx, str.Altitude
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x48
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x47
call fcn.00411e40
sub esp, 0x18
mov edx, 6
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_SZ
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
mov byte [ebp - 4], 0x49
push 0x459220
push str.type
lea ecx, [ebp - 0x608]
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x47
call fcn.00411e40
sub esp, 0x18
mov edx, 6
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.389170
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x608]
mov byte [ebp - 4], 0x4a
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x47
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x5f0]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x608]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x4b
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x47
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x620], xmm0
mov dword [ebp - 0x614], 0
movq qword [ebp - 0x610], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x610], 0
mov dword [ebp - 0x60c], 0
and eax, 0xfffffe00
mov dword [ebp - 0x618], eax
sub esp, 0x18
mov byte [ebp - 4], 0x4d
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 5
mov ecx, str.Flags
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x4e
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x4d
call fcn.00411e40
sub esp, 0x18
mov edx, 9
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_DWORD
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x4f
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x4d
call fcn.00411e40
sub esp, 0x18
mov edx, 8
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.00000000
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x620]
mov byte [ebp - 4], 0x50
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x4d
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x5f0]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x620]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x51
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x4d
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x350], xmm0
mov dword [ebp - 0x344], 0
movq qword [ebp - 0x340], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 0
and eax, 0xfffffe00
mov dword [ebp - 0x348], eax
sub esp, 0x18
mov byte [ebp - 4], 0x53
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov edx, 0x3f
mov ecx, str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceslnvscenter
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x4591cb
push 0x4591c8
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0x54
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x53
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x3e0], xmm0
mov dword [ebp - 0x3d4], 0
movq qword [ebp - 0x3d0], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x3d0], 0
mov dword [ebp - 0x3cc], 0
and eax, 0xfffffe00
mov dword [ebp - 0x3d8], eax
sub esp, 0x18
mov byte [ebp - 4], 0x56
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0xb
mov ecx, str.DisplayName
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0x57
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x56
call fcn.00411e40
sub esp, 0x18
mov edx, 6
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_SZ
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0x58
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x56
call fcn.00411e40
sub esp, 0x18
mov edx, 0xa
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.lnvscenter
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0x59
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x56
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x350]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x3e0]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x5a
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x56
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x3f8], xmm0
mov dword [ebp - 0x3ec], 0
movq qword [ebp - 0x3e8], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 0x3e4], 0
and eax, 0xfffffe00
mov dword [ebp - 0x3f0], eax
sub esp, 0x18
mov byte [ebp - 4], 0x5c
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0xc
mov ecx, str.ErrorControl
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 0x5d
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x5c
call fcn.00411e40
sub esp, 0x18
mov edx, 9
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_DWORD
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 0x5e
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x5c
call fcn.00411e40
sub esp, 0x18
mov edx, 8
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.00000001
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x3f8]
mov byte [ebp - 4], 0x5f
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x5c
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x350]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x3f8]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x60
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x5c
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x410], xmm0
mov dword [ebp - 0x404], 0
movq qword [ebp - 0x400], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x400], 0
mov dword [ebp - 0x3fc], 0
and eax, 0xfffffe00
mov dword [ebp - 0x408], eax
sub esp, 0x18
mov byte [ebp - 4], 0x62
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 9
mov ecx, str.ImagePath
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0x63
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x62
call fcn.00411e40
sub esp, 0x18
mov dword [ebp - 0x9c8], esp
mov esi, esp
mov byte [esi + 8], 4
mov edx, 0xd
or dword [esi + 8], 0x100
mov ecx, str.REG_EXPAND_SZ
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0x64
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x62
call fcn.00411e40
sub esp, 0x18
mov edx, 0x1f
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.system32DRIVERSlnvscenter.sys
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x410]
mov byte [ebp - 4], 0x65
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x62
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x350]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x410]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x66
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x62
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x4a0], xmm0
mov dword [ebp - 0x494], 0
movq qword [ebp - 0x490], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x48c], 0
and eax, 0xfffffe00
mov dword [ebp - 0x498], eax
sub esp, 0x18
mov byte [ebp - 4], 0x68
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0xf
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov ecx, str.DependOnService
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x69
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x68
call fcn.00411e40
sub esp, 0x18
mov edx, 0xc
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_MULTI_SZ
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x6a
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x68
call fcn.00411e40
mov eax, dword [ebp - 0xc3c]
mov edx, 6
and eax, 0xffffff04
mov dword [ebp - 0xc38], 0
or eax, 0x104
mov dword [ebp - 0xc34], 0
mov ecx, str.FltMgr
mov dword [ebp - 0xc3c], eax
mov dword [ebp - 0xc30], 0
call fcn.00411360
mov dword [ebp - 0xc44], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x6b
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0xc44]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x6c
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x6b
call fcn.00411e40
lea ecx, [ebp - 0xc44]
mov byte [ebp - 4], 0x68
call fcn.00411d80
push 0x459241
push str.value
lea ecx, [ebp - 0x350]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x4a0]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x6d
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x68
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x428], xmm0
mov dword [ebp - 0x41c], 0
movq qword [ebp - 0x418], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x414], 0
and eax, 0xfffffe00
mov dword [ebp - 0x420], eax
sub esp, 0x18
mov byte [ebp - 4], 0x6f
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 5
mov ecx, str.Start
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x428]
mov byte [ebp - 4], 0x70
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x6f
call fcn.00411e40
sub esp, 0x18
mov edx, 9
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_DWORD
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x428]
mov byte [ebp - 4], 0x71
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x6f
call fcn.00411e40
sub esp, 0x18
mov edx, 8
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.00000001
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0x428]
push str.data
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x6f
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x350]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x428]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x73
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x6f
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x440], xmm0
mov dword [ebp - 0x434], 0
movq qword [ebp - 0x430], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x42c], 0
and eax, 0xfffffe00
mov dword [ebp - 0x438], eax
sub esp, 0x18
mov byte [ebp - 4], 0x75
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 4
mov ecx, str.Type
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x440]
mov byte [ebp - 4], 0x76
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x75
call fcn.00411e40
sub esp, 0x18
mov edx, 9
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_DWORD
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x440]
mov byte [ebp - 4], 0x77
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x75
call fcn.00411e40
sub esp, 0x18
mov dword [ebp - 0x9c8], esp
mov esi, esp
mov edx, 8
mov ecx, str.00000002
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x440]
mov byte [ebp - 4], 0x78
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x75
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x350]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x440]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x79
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x75
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x458], xmm0
mov dword [ebp - 0x44c], 0
movq qword [ebp - 0x448], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x444], 0
and eax, 0xfffffe00
mov dword [ebp - 0x450], eax
sub esp, 0x18
mov byte [ebp - 4], 0x7b
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 5
mov ecx, str.Group
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x7c
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x7b
call fcn.00411e40
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov edx, 6
mov ecx, str.REG_SZ
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x7d
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x7b
call fcn.00411e40
sub esp, 0x18
mov edx, 7
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.PNP_TDI
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x458]
mov byte [ebp - 4], 0x7e
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x7b
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x350]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x458]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x7f
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x7b
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x470], xmm0
mov dword [ebp - 0x464], 0
movq qword [ebp - 0x460], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x45c], 0
and eax, 0xfffffe00
mov dword [ebp - 0x468], eax
sub esp, 0x18
mov byte [ebp - 4], 0x81
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 3
mov ecx, 0x45930c
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
mov byte [ebp - 4], 0x82
push 0x45920c
push str.name
lea ecx, [ebp - 0x470]
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x81
call fcn.00411e40
sub esp, 0x18
mov edx, 9
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_DWORD
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x83
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x81
call fcn.00411e40
sub esp, 0x18
mov edx, 8
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.00000002
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x470]
mov byte [ebp - 4], 0x84
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x81
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x350]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x470]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x85
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x81
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x488], xmm0
mov dword [ebp - 0x47c], 0
movq qword [ebp - 0x478], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x474], 0
and eax, 0xfffffe00
mov dword [ebp - 0x480], eax
sub esp, 0x18
mov byte [ebp - 4], 0x87
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0x11
mov ecx, str.SupportedFeatures
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x88
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x87
call fcn.00411e40
sub esp, 0x18
mov edx, 9
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_DWORD
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x89
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x87
call fcn.00411e40
sub esp, 0x18
mov edx, 8
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.00000008
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x488]
mov byte [ebp - 4], 0x8a
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x87
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x350]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x488]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x8b
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x87
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x6e0], xmm0
mov dword [ebp - 0x6d4], 0
movq qword [ebp - 0x6d0], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x6d0], 0
mov dword [ebp - 0x6cc], 0
and eax, 0xfffffe00
mov dword [ebp - 0x6d8], eax
sub esp, 0x18
mov byte [ebp - 4], 0x8d
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0x49
mov ecx, str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceslnvscenterInstances
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x4591cb
push 0x4591c8
lea ecx, [ebp - 0x6e0]
mov byte [ebp - 4], 0x8e
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x8d
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x4b8], xmm0
mov dword [ebp - 0x4ac], 0
movq qword [ebp - 0x4a8], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x4a4], 0
and eax, 0xfffffe00
mov dword [ebp - 0x4b0], eax
sub esp, 0x18
mov byte [ebp - 4], 0x90
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0xf
mov ecx, str.DefaultInstance
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x91
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x90
call fcn.00411e40
sub esp, 0x18
mov edx, 6
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_SZ
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x92
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x90
call fcn.00411e40
sub esp, 0x18
mov edx, 0xa
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.lnvscenter
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x4b8]
mov byte [ebp - 4], 0x93
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x90
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x6e0]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x4b8]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x94
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x90
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x4d0], xmm0
mov dword [ebp - 0x4c4], 0
movq qword [ebp - 0x4c0], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x4c0], 0
mov dword [ebp - 0x4bc], 0
and eax, 0xfffffe00
mov dword [ebp - 0x4c8], eax
sub esp, 0x18
mov byte [ebp - 4], 0x96
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 0x54
mov ecx, str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceslnvscenterInstanceslnvscenter
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x4591cb
mov byte [ebp - 4], 0x97
lea ecx, [ebp - 0x4d0]
push 0x4591c8
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x96
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x4e8], xmm0
mov dword [ebp - 0x4dc], 0
movq qword [ebp - 0x4d8], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x4d8], 0
mov dword [ebp - 0x4d4], 0
and eax, 0xfffffe00
mov dword [ebp - 0x4e0], eax
sub esp, 0x18
mov byte [ebp - 4], 0x99
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 8
mov ecx, str.Altitude
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x9a
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x99
call fcn.00411e40
sub esp, 0x18
mov edx, 6
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_SZ
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x9b
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x99
call fcn.00411e40
sub esp, 0x18
mov edx, 6
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.328780
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x4e8]
mov byte [ebp - 4], 0x9c
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x99
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x4d0]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x4e8]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0x9d
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x99
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x500], xmm0
mov dword [ebp - 0x4f4], 0
movq qword [ebp - 0x4f0], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x4ec], 0
and eax, 0xfffffe00
mov dword [ebp - 0x4f8], eax
sub esp, 0x18
mov byte [ebp - 4], 0x9f
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov edx, 5
mov ecx, str.Flags
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0xa0
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x9f
call fcn.00411e40
sub esp, 0x18
mov edx, 9
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov ecx, str.REG_DWORD
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00411360
mov dword [esi], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0xa1
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x9f
call fcn.00411e40
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x9c8], esp
mov byte [esi + 8], 4
or dword [esi + 8], 0x100
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov edx, 8
mov ecx, str.00000000
call fcn.00411360
mov dword [esi], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x500]
mov byte [ebp - 4], 0xa2
call fcn.00412840
mov ecx, eax
mov byte [ebp - 4], 0x9f
call fcn.00411e40
push 0x459241
push str.value
lea ecx, [ebp - 0x4d0]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x500]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0xa3
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0x9f
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x398], xmm0
mov dword [ebp - 0x38c], 0
movq qword [ebp - 0x388], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x388], 0
mov dword [ebp - 0x384], 0
and eax, 0xfffffe00
mov dword [ebp - 0x390], eax
xorps xmm0, xmm0
movups xmmword [ebp - 0x3b0], xmm0
mov dword [ebp - 0x3a4], 0
movq qword [ebp - 0x3a0], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x3a0], 0
mov dword [ebp - 0x39c], 0
and eax, 0xfffffe00
mov dword [ebp - 0x3a8], eax
xorps xmm0, xmm0
movups xmmword [ebp - 0x3c8], xmm0
mov dword [ebp - 0x3bc], 0
movq qword [ebp - 0x3b8], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x3b8], 0
mov dword [ebp - 0x3b4], 0
and eax, 0xfffffe00
mov dword [ebp - 0x3c0], eax
xorps xmm0, xmm0
movups xmmword [ebp - 0x380], xmm0
mov dword [ebp - 0x374], 0
movq qword [ebp - 0x370], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x36c], 0
and eax, 0xfffffe00
mov dword [ebp - 0x378], eax
xorps xmm0, xmm0
movups xmmword [ebp - 0x6b0], xmm0
movq qword [ebp - 0x6a0], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x6a4], 0
mov dword [ebp - 0x6a0], 0
and eax, 0xfffffe00
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x6a8], eax
xorps xmm0, xmm0
movups xmmword [ebp - 0x518], xmm0
mov dword [ebp - 0x50c], 0
movq qword [ebp - 0x508], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x508], 0
mov dword [ebp - 0x504], 0
and eax, 0xfffffe00
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0xb08], 0
mov byte [ebp - 4], 0xaf
je 0x40983f
push 0x208
lea eax, [ebp - 0x320]
push 0
push eax
call fcn.00417760
add esp, 0xc
lea eax, [ebp - 0x320]
push 0x104
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
push str.LnvHelp64.dll
lea eax, [ebp - 0x320]
push 0x104
push eax
call fcn.0041bb51
lea ecx, [ebp - 0x320]
add esp, 0xc
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x406c36
sub ecx, edx
lea eax, [ebp - 0x118]
sar ecx, 1
xor edi, edi
push 0x100
push edi
push eax
lea esi, [ecx + ecx]
mov dword [ebp - 0x9c8], esi
call fcn.00417760
push edi
push 9
lea ecx, [ebp - 0x118]
call fcn.00402640
push edi
push esi
lea edx, [ebp - 0x320]
lea ecx, [ebp - 0x118]
call fcn.00402730
add esp, 0x1c
mov dword [ebp - 0x6e4], 0xf
mov dword [ebp - 0x6e8], edi
mov byte [ebp - 0x6f8], 0
mov byte [ebp - 4], 0xb0
xorps xmm0, xmm0
movlpd qword [ebp - 0xc14], xmm0
test edi, edi
jb 0x406d2d
ja 0x406cba
test esi, esi
je 0x406d2d
mov edi, dword [ebp - 0xc10]
mov esi, dword [ebp - 0xc14]
xor eax, eax
mov byte [ebp - 0x18], 0
mov dword [ebp - 0x17], eax
mov word [ebp - 0x13], ax
mov byte [ebp - 0x11], al
movzx eax, byte [ebp + esi - 0x320]
push eax
lea eax, [ebp - 0x18]
push str._02x
push eax
call fcn.0040bd50
add esp, 0xc
cmp byte [ebp - 0x18], 0
jne 0x406cfa
xor ecx, ecx
jmp 0x406d09
lea ecx, [ebp - 0x18]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406d00
sub ecx, edx
push ecx
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x6f8]
call fcn.0040b180
add esi, 1
adc edi, 0
test edi, edi
jb 0x406cc6
ja 0x406d2d
cmp esi, dword [ebp - 0x9c8]
jb 0x406cc6
mov byte [ebp - 0x9d8], 4
mov edx, 0x3c
or dword [ebp - 0x9d8], 0x100
mov ecx, str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesLnvHelp
mov dword [ebp - 0x9d4], 0
mov dword [ebp - 0x9d0], 0
mov dword [ebp - 0x9cc], 0
call fcn.00411360
mov dword [ebp - 0x9e0], eax
push 0x4591cb
push 0x4591c8
lea ecx, [ebp - 0x398]
mov byte [ebp - 4], 0xb1
call fcn.00412840
movzx ecx, byte [ebp - 0x9d8]
mov edi, eax
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0x9d8]
mov ecx, edx
xor ecx, esi
movzx ecx, cl
xor edx, ecx
mov dword [ebp - 0x9d8], edx
mov eax, dword [edi]
mov dword [ebp - 0xb5c], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb58], eax
mov eax, dword [ebp - 0x9e0]
mov dword [edi], eax
mov eax, dword [ebp - 0x9dc]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x9e0], eax
mov eax, dword [ebp - 0xb58]
mov dword [ebp - 0x9dc], eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0x9d8]
xor eax, edx
and eax, 0x100
xor eax, edx
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0x9d8]
mov eax, ecx
xor eax, edx
and eax, 0x100
xor ecx, eax
mov dword [ebp - 0x9d8], ecx
lea ecx, [ebp - 0x9e0]
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xb78], eax
mov eax, dword [ebp - 0x9d4]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xb78]
mov dword [ebp - 0x9d4], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xb80], eax
mov eax, dword [ebp - 0x9d0]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xb80]
mov dword [ebp - 0x9d0], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xb84], eax
mov eax, dword [ebp - 0x9cc]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0xb84]
mov dword [ebp - 0x9cc], eax
call fcn.00411d80
xorps xmm0, xmm0
movups xmmword [ebp - 0x530], xmm0
mov dword [ebp - 0x524], 0
movq qword [ebp - 0x520], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x520], 0
mov dword [ebp - 0x51c], 0
and eax, 0xfffffe00
mov dword [ebp - 0x528], eax
mov byte [ebp - 4], 0xb3
mov byte [ebp - 0xa20], 4
mov edx, 0xb
or dword [ebp - 0xa20], 0x100
mov ecx, str.DisplayName
mov dword [ebp - 0xa1c], 0
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa14], 0
call fcn.00411360
mov dword [ebp - 0xa28], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0xb4
call fcn.00412840
mov edi, eax
mov byte [ebp - 4], 0xb3
movzx ecx, byte [ebp - 0xa20]
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0xa20]
mov ecx, edx
xor ecx, esi
movzx eax, cl
xor edx, eax
mov dword [ebp - 0xa20], edx
mov eax, dword [edi]
mov dword [ebp - 0xb54], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb50], eax
mov eax, dword [ebp - 0xa28]
mov dword [edi], eax
mov eax, dword [ebp - 0xa24]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xb54]
mov dword [ebp - 0xa28], eax
mov eax, dword [ebp - 0xb50]
mov dword [ebp - 0xa24], eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0xa20]
xor eax, edx
and eax, 0x100
xor eax, edx
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0xa20]
mov eax, ecx
xor eax, edx
and eax, 0x100
xor ecx, eax
mov dword [ebp - 0xa20], ecx
lea ecx, [ebp - 0xa28]
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xb88], eax
mov eax, dword [ebp - 0xa1c]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xb88]
mov dword [ebp - 0xa1c], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xb8c], eax
mov eax, dword [ebp - 0xa18]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xb8c]
mov dword [ebp - 0xa18], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp - 0xa14]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0xb90]
mov dword [ebp - 0xa14], eax
call fcn.00411d80
mov byte [ebp - 0xa08], 4
mov edx, 6
or dword [ebp - 0xa08], 0x100
mov ecx, str.REG_SZ
mov dword [ebp - 0xa04], 0
mov dword [ebp - 0xa00], 0
mov dword [ebp - 0x9fc], 0
call fcn.00411360
mov dword [ebp - 0xa10], eax
mov byte [ebp - 4], 0xb5
push 0x459220
push str.type
lea ecx, [ebp - 0x530]
call fcn.00412840
mov edi, eax
mov byte [ebp - 4], 0xb3
movzx ecx, byte [ebp - 0xa08]
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0xa08]
mov ecx, edx
xor ecx, esi
movzx eax, cl
xor edx, eax
mov dword [ebp - 0xa08], edx
mov eax, dword [edi]
mov dword [ebp - 0xb4c], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb48], eax
mov eax, dword [ebp - 0xa10]
mov dword [edi], eax
mov eax, dword [ebp - 0xa0c]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0xa10], eax
mov eax, dword [ebp - 0xb48]
mov dword [ebp - 0xa0c], eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0xa08]
xor eax, edx
and eax, 0x100
xor eax, edx
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0xa08]
mov eax, ecx
xor eax, edx
and eax, 0x100
xor ecx, eax
mov dword [ebp - 0xa08], ecx
lea ecx, [ebp - 0xa10]
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xb94], eax
mov eax, dword [ebp - 0xa04]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xb94]
mov dword [ebp - 0xa04], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xb98], eax
mov eax, dword [ebp - 0xa00]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xb98]
mov dword [ebp - 0xa00], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xb9c], eax
mov eax, dword [ebp - 0x9fc]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0xb9c]
mov dword [ebp - 0x9fc], eax
call fcn.00411d80
mov byte [ebp - 0x9f0], 4
mov edx, 7
or dword [ebp - 0x9f0], 0x100
mov ecx, str.LnvHelp
mov dword [ebp - 0x9ec], 0
mov dword [ebp - 0x9e8], 0
mov dword [ebp - 0x9e4], 0
call fcn.00411360
mov dword [ebp - 0x9f8], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x530]
mov byte [ebp - 4], 0xb6
call fcn.00412840
mov edi, eax
mov byte [ebp - 4], 0xb3
movzx ecx, byte [ebp - 0x9f0]
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0x9f0]
mov ecx, edx
xor ecx, esi
movzx eax, cl
xor edx, eax
mov dword [ebp - 0x9f0], edx
mov eax, dword [edi]
mov dword [ebp - 0xb44], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb40], eax
mov eax, dword [ebp - 0x9f8]
mov dword [edi], eax
mov eax, dword [ebp - 0x9f4]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xb44]
mov dword [ebp - 0x9f8], eax
mov eax, dword [ebp - 0xb40]
mov dword [ebp - 0x9f4], eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0x9f0]
xor eax, edx
and eax, 0x100
xor eax, edx
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0x9f0]
mov eax, ecx
xor eax, edx
and eax, 0x100
xor ecx, eax
mov dword [ebp - 0x9f0], ecx
lea ecx, [ebp - 0x9f8]
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xba0], eax
mov eax, dword [ebp - 0x9ec]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xba0]
mov dword [ebp - 0x9ec], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xb34], eax
mov eax, dword [ebp - 0x9e8]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xb34]
mov dword [ebp - 0x9e8], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xba4], eax
mov eax, dword [ebp - 0x9e4]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0xba4]
mov dword [ebp - 0x9e4], eax
call fcn.00411d80
push 0x459241
push str.value
lea ecx, [ebp - 0x398]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x530]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0xb7
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0xb3
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x548], xmm0
mov dword [ebp - 0x53c], 0
movq qword [ebp - 0x538], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x538], 0
mov dword [ebp - 0x534], 0
and eax, 0xfffffe00
mov dword [ebp - 0x540], eax
mov byte [ebp - 4], 0xb9
mov byte [ebp - 0xab0], 4
mov edx, 0xd
or dword [ebp - 0xab0], 0x100
mov ecx, str.DllpathSecret
mov dword [ebp - 0xaac], 0
mov dword [ebp - 0xaa8], 0
mov dword [ebp - 0xaa4], 0
call fcn.00411360
mov dword [ebp - 0xab8], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0xba
call fcn.00412840
mov edi, eax
mov byte [ebp - 4], 0xb9
movzx ecx, byte [ebp - 0xab0]
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0xab0]
mov ecx, edx
xor ecx, esi
movzx eax, cl
xor edx, eax
mov dword [ebp - 0xab0], edx
mov eax, dword [edi]
mov dword [ebp - 0xb3c], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb38], eax
mov eax, dword [ebp - 0xab8]
mov dword [edi], eax
mov eax, dword [ebp - 0xab4]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0xab4], eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0xab0]
xor eax, edx
and eax, 0x100
xor eax, edx
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0xab0]
mov eax, ecx
xor eax, edx
and eax, 0x100
xor ecx, eax
mov dword [ebp - 0xab0], ecx
lea ecx, [ebp - 0xab8]
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xba8], eax
mov eax, dword [ebp - 0xaac]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xba8]
mov dword [ebp - 0xaac], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0xaa8]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xbac]
mov dword [ebp - 0xaa8], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xbb0], eax
mov eax, dword [ebp - 0xaa4]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0xbb0]
mov dword [ebp - 0xaa4], eax
call fcn.00411d80
mov byte [ebp - 0xa98], 4
mov edx, 0xa
or dword [ebp - 0xa98], 0x100
mov ecx, str.REG_BINARY
mov dword [ebp - 0xa94], 0
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa8c], 0
call fcn.00411360
mov dword [ebp - 0xaa0], eax
mov byte [ebp - 4], 0xbb
push 0x459220
push str.type
lea ecx, [ebp - 0x548]
call fcn.00412840
mov edi, eax
mov byte [ebp - 4], 0xb9
movzx ecx, byte [ebp - 0xa98]
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0xa98]
mov ecx, edx
xor ecx, esi
movzx eax, cl
xor edx, eax
mov dword [ebp - 0xa98], edx
mov eax, dword [edi]
mov dword [ebp - 0xbd8], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xbd4], eax
mov eax, dword [ebp - 0xaa0]
mov dword [edi], eax
mov eax, dword [ebp - 0xa9c]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ebp - 0xaa0], eax
mov eax, dword [ebp - 0xbd4]
mov dword [ebp - 0xa9c], eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0xa98]
xor eax, edx
and eax, 0x100
xor eax, edx
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0xa98]
mov eax, ecx
xor eax, edx
and eax, 0x100
xor ecx, eax
mov dword [ebp - 0xa98], ecx
lea ecx, [ebp - 0xaa0]
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xbb4], eax
mov eax, dword [ebp - 0xa94]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xbb4]
mov dword [ebp - 0xa94], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xbbc], eax
mov eax, dword [ebp - 0xa90]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xbbc]
mov dword [ebp - 0xa90], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xbb8], eax
mov eax, dword [ebp - 0xa8c]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0xbb8]
mov dword [ebp - 0xa8c], eax
call fcn.00411d80
cmp dword [ebp - 0x6e4], 0x10
lea ecx, [ebp - 0x6f8]
mov byte [ebp - 0xa80], 4
cmovae ecx, dword [ebp - 0x6f8]
or dword [ebp - 0xa80], 0x100
mov edx, ecx
mov dword [ebp - 0xa7c], 0
mov dword [ebp - 0xa78], 0
mov dword [ebp - 0xa74], 0
lea esi, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x407633
sub edx, esi
call fcn.00411360
mov dword [ebp - 0xa88], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0xbc
call fcn.00412840
mov edi, eax
mov byte [ebp - 4], 0xb9
movzx ecx, byte [ebp - 0xa80]
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0xa80]
mov ecx, edx
xor ecx, esi
movzx eax, cl
xor edx, eax
mov dword [ebp - 0xa80], edx
mov eax, dword [edi]
mov dword [ebp - 0xb30], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb2c], eax
mov eax, dword [ebp - 0xa88]
mov dword [edi], eax
mov eax, dword [ebp - 0xa84]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xb30]
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp - 0xb2c]
mov dword [ebp - 0xa84], eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0xa80]
xor eax, edx
and eax, 0x100
xor eax, edx
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0xa80]
mov eax, ecx
xor eax, edx
and eax, 0x100
xor ecx, eax
mov dword [ebp - 0xa80], ecx
lea ecx, [ebp - 0xa88]
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xbc0], eax
mov eax, dword [ebp - 0xa7c]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xbc0]
mov dword [ebp - 0xa7c], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xbc4], eax
mov eax, dword [ebp - 0xa78]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xbc4]
mov dword [ebp - 0xa78], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xbc8], eax
mov eax, dword [ebp - 0xa74]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0xbc8]
mov dword [ebp - 0xa74], eax
call fcn.00411d80
push 0x459241
push str.value
lea ecx, [ebp - 0x398]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x548]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0xbd
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0xb9
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x560], xmm0
mov dword [ebp - 0x554], 0
movq qword [ebp - 0x550], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x550], 0
mov dword [ebp - 0x54c], 0
and eax, 0xfffffe00
mov dword [ebp - 0x558], eax
mov byte [ebp - 4], 0xbf
mov edx, 9
mov byte [ebp - 0xaf8], 4
mov ecx, str.ImagePath
or dword [ebp - 0xaf8], 0x100
mov dword [ebp - 0xaf4], 0
mov dword [ebp - 0xaf0], 0
mov dword [ebp - 0xaec], 0
call fcn.00411360
mov dword [ebp - 0xb00], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0xc0
call fcn.00412840
mov edi, eax
mov byte [ebp - 4], 0xbf
movzx ecx, byte [ebp - 0xaf8]
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0xaf8]
mov ecx, edx
xor ecx, esi
movzx eax, cl
xor edx, eax
mov dword [ebp - 0xaf8], edx
mov eax, dword [edi]
mov dword [ebp - 0xb28], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0xb00]
mov dword [edi], eax
mov eax, dword [ebp - 0xafc]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xb28]
mov dword [ebp - 0xb00], eax
mov eax, dword [ebp - 0xb24]
mov dword [ebp - 0xafc], eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0xaf8]
xor eax, edx
and eax, 0x100
xor eax, edx
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0xaf8]
mov eax, ecx
xor eax, edx
and eax, 0x100
xor ecx, eax
mov dword [ebp - 0xaf8], ecx
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xbcc], eax
mov eax, dword [ebp - 0xaf4]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xbcc]
mov dword [ebp - 0xaf4], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xbd0], eax
mov eax, dword [ebp - 0xaf0]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xbd0]
mov dword [ebp - 0xaf0], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xbdc], eax
mov eax, dword [ebp - 0xaec]
mov dword [edi + 0x14], eax
lea ecx, [ebp - 0xb00]
mov eax, dword [ebp - 0xbdc]
mov dword [ebp - 0xaec], eax
call fcn.00411d80
mov byte [ebp - 0xa68], 4
mov edx, 0xd
or dword [ebp - 0xa68], 0x100
mov ecx, str.REG_EXPAND_SZ
mov dword [ebp - 0xa64], 0
mov dword [ebp - 0xa60], 0
mov dword [ebp - 0xa5c], 0
call fcn.00411360
mov dword [ebp - 0xa70], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0xc1
call fcn.00412840
mov edi, eax
mov byte [ebp - 4], 0xbf
movzx ecx, byte [ebp - 0xa68]
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0xa68]
mov ecx, edx
xor ecx, esi
movzx eax, cl
xor edx, eax
mov dword [ebp - 0xa68], edx
mov eax, dword [edi]
mov dword [ebp - 0xb20], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb1c], eax
mov eax, dword [ebp - 0xa70]
mov dword [edi], eax
mov eax, dword [ebp - 0xa6c]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xb20]
mov dword [ebp - 0xa70], eax
mov eax, dword [ebp - 0xb1c]
mov dword [ebp - 0xa6c], eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0xa68]
xor eax, edx
and eax, 0x100
xor eax, edx
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0xa68]
mov eax, ecx
xor eax, edx
and eax, 0x100
xor ecx, eax
mov dword [ebp - 0xa68], ecx
lea ecx, [ebp - 0xa70]
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xbe0], eax
mov eax, dword [ebp - 0xa64]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xbe0]
mov dword [ebp - 0xa64], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xbe4], eax
mov eax, dword [ebp - 0xa60]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xbe4]
mov dword [ebp - 0xa60], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xbe8], eax
mov eax, dword [ebp - 0xa5c]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0xbe8]
mov dword [ebp - 0xa5c], eax
call fcn.00411d80
mov byte [ebp - 0xa50], 4
mov edx, 0x1c
or dword [ebp - 0xa50], 0x100
mov dword [ebp - 0xa4c], 0
mov dword [ebp - 0xa48], 0
mov dword [ebp - 0xa44], 0
mov ecx, str.system32DRIVERSLnvHelp.sys
call fcn.00411360
mov dword [ebp - 0xa58], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0xc2
call fcn.00412840
mov edi, eax
mov byte [ebp - 4], 0xbf
movzx ecx, byte [ebp - 0xa50]
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0xa50]
mov ecx, edx
xor ecx, esi
movzx eax, cl
xor edx, eax
mov dword [ebp - 0xa50], edx
mov eax, dword [edi]
mov dword [ebp - 0xb10], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb0c], eax
mov eax, dword [ebp - 0xa58]
mov dword [edi], eax
mov eax, dword [ebp - 0xa54]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xb10]
mov dword [ebp - 0xa58], eax
mov eax, dword [ebp - 0xb0c]
mov dword [ebp - 0xa54], eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0xa50]
xor eax, edx
and eax, 0x100
xor eax, edx
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0xa50]
mov eax, ecx
xor eax, edx
and eax, 0x100
xor ecx, eax
mov dword [ebp - 0xa50], ecx
lea ecx, [ebp - 0xa58]
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0xa4c]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xbec]
mov dword [ebp - 0xa4c], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xbf0], eax
mov eax, dword [ebp - 0xa48]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xbf0]
mov dword [ebp - 0xa48], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0xa44]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0xbf4]
mov dword [ebp - 0xa44], eax
call fcn.00411d80
push 0x459241
push str.value
lea ecx, [ebp - 0x398]
call fcn.00412840
sub esp, 0x18
mov esi, eax
lea eax, [ebp - 0x560]
mov dword [ebp - 0x9c8], esp
mov ecx, esp
push eax
call fcn.00411be0
mov ecx, esi
mov byte [ebp - 4], 0xc3
call fcn.004124a0
push eax
mov ecx, esi
call fcn.00412530
mov ecx, eax
mov byte [ebp - 4], 0xbf
call fcn.00411e40
xorps xmm0, xmm0
movups xmmword [ebp - 0x338], xmm0
mov dword [ebp - 0x32c], 0
movq qword [ebp - 0x328], xmm0
psrldq xmm0, 8
movd eax, xmm0
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x324], 0
and eax, 0xfffffe00
mov dword [ebp - 0x330], eax
mov byte [ebp - 4], 0xc5
mov edx, 4
mov byte [ebp - 0xa38], 4
mov ecx, str.Type
or dword [ebp - 0xa38], 0x100
mov dword [ebp - 0xa34], 0
mov dword [ebp - 0xa30], 0
mov dword [ebp - 0xa2c], 0
call fcn.00411360
mov dword [ebp - 0xa40], eax
push 0x45920c
push str.name
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 0xc6
call fcn.00412840
mov edi, eax
mov byte [ebp - 4], 0xc5
movzx ecx, byte [ebp - 0xa38]
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0xa38]
mov ecx, edx
xor ecx, esi
movzx eax, cl
xor edx, eax
mov dword [ebp - 0xa38], edx
mov eax, dword [edi]
mov dword [ebp - 0xc0c], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xc08], eax
mov eax, dword [ebp - 0xa40]
mov dword [edi], eax
mov eax, dword [ebp - 0xa3c]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xc0c]
mov dword [ebp - 0xa40], eax
mov eax, dword [ebp - 0xc08]
mov dword [ebp - 0xa3c], eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0xa38]
xor eax, edx
and eax, 0x100
xor eax, edx
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0xa38]
mov eax, ecx
xor eax, edx
and eax, 0x100
xor ecx, eax
mov dword [ebp - 0xa38], ecx
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xbf8], eax
mov eax, dword [ebp - 0xa34]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xbf8]
mov dword [ebp - 0xa34], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0xa30]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xc04]
mov dword [ebp - 0xa30], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xb7c], eax
mov eax, dword [ebp - 0xa2c]
mov dword [edi + 0x14], eax
lea ecx, [ebp - 0xa40]
mov eax, dword [ebp - 0xb7c]
mov dword [ebp - 0xa2c], eax
call fcn.00411d80
mov byte [ebp - 0xae0], 4
mov edx, 9
or dword [ebp - 0xae0], 0x100
mov ecx, str.REG_DWORD
mov dword [ebp - 0xadc], 0
mov dword [ebp - 0xad8], 0
mov dword [ebp - 0xad4], 0
call fcn.00411360
mov dword [ebp - 0xae8], eax
push 0x459220
push str.type
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 0xc7
call fcn.00412840
mov edi, eax
mov byte [ebp - 4], 0xc5
movzx ecx, byte [ebp - 0xae0]
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0xae0]
mov ecx, edx
xor ecx, esi
movzx eax, cl
xor edx, eax
mov dword [ebp - 0xae0], edx
mov eax, dword [edi]
mov dword [ebp - 0xb18], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xb14], eax
mov eax, dword [ebp - 0xae8]
mov dword [edi], eax
mov eax, dword [ebp - 0xae4]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xb18]
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0xb14]
mov dword [ebp - 0xae4], eax
mov edx, dword [edi + 8]
mov eax, dword [ebp - 0xae0]
xor eax, edx
and eax, 0x100
xor eax, edx
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0xae0]
mov eax, ecx
xor eax, edx
and eax, 0x100
xor ecx, eax
mov dword [ebp - 0xae0], ecx
lea ecx, [ebp - 0xae8]
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xb74], eax
mov eax, dword [ebp - 0xadc]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xb74]
mov dword [ebp - 0xadc], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xb70], eax
mov eax, dword [ebp - 0xad8]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xb70]
mov dword [ebp - 0xad8], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xb6c], eax
mov eax, dword [ebp - 0xad4]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0xb6c]
mov dword [ebp - 0xad4], eax
call fcn.00411d80
mov byte [ebp - 0xac8], 4
mov edx, 8
or dword [ebp - 0xac8], 0x100
mov dword [ebp - 0xac4], 0
mov dword [ebp - 0xac0], 0
mov dword [ebp - 0xabc], 0
mov ecx, str.00000001
call fcn.00411360
mov dword [ebp - 0xad0], eax
push 0x459230
push str.data
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 0xc8
call fcn.00412840
mov edi, eax
mov byte [ebp - 4], 0xc5
movzx ecx, byte [ebp - 0xac8]
movsx esi, byte [edi + 8]
mov byte [edi + 8], cl
mov edx, dword [ebp - 0xac8]
mov ecx, edx
xor ecx, esi
movzx eax, cl
xor edx, eax
mov dword [ebp - 0xac8], edx
mov eax, dword [edi]
mov dword [ebp - 0xc00], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0xbfc], eax
mov eax, dword [ebp - 0xad0]
mov dword [edi], eax
mov eax, dword [ebp - 0xacc]
mov dword [edi + 4], eax
mov eax, dword [ebp - 0xc00]
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0xbfc]
mov dword [ebp - 0xacc], eax
mov ecx, dword [edi + 8]
mov eax, ecx
xor eax, dword [ebp - 0xac8]
and eax, 0x100
xor eax, ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0xac8]
xor ecx, eax
and ecx, 0x100
xor eax, ecx
lea ecx, [ebp - 0xad0]
mov dword [ebp - 0xac8], eax
mov eax, dword [edi + 0xc]
mov dword [ebp - 0xb68], eax
mov eax, dword [ebp - 0xac4]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xb68]
mov dword [ebp - 0xac4], eax
mov eax, dword [edi + 0x10]
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0xac0]
mov dword [edi + 0x10], eax
mov eax, dword [ebp - 0xb64]
mov dword [ebp - 0xac0], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp - 0xabc]
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0xb60]
mov dword [ebp - 0xabc], eax
call fcn.00411d80
lea eax, [ebp - 0x338]
push eax
push str.value
lea ecx, [ebp - 0x398]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x878]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xc9
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.Start
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x878]
mov byte [ebp - 4], 0xca
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xc9
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x878]
mov byte [ebp - 4], 0xcb
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xc9
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000001
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x878]
mov byte [ebp - 4], 0xcc
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xc9
call fcn.00411e40
lea eax, [ebp - 0x878]
push eax
push str.value
lea ecx, [ebp - 0x398]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x920]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xcd
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.ErrorControl
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 0xce
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xcd
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 0xcf
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xcd
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000001
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 0xd0
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xcd
call fcn.00411e40
lea eax, [ebp - 0x920]
push eax
push str.value
lea ecx, [ebp - 0x398]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x860]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xd1
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push 0x45930c
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x860]
mov byte [ebp - 4], 0xd2
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xd1
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x860]
mov byte [ebp - 4], 0xd3
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xd1
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000002
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x860]
mov byte [ebp - 4], 0xd4
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xd1
call fcn.00411e40
lea eax, [ebp - 0x860]
push eax
push str.value
lea ecx, [ebp - 0x398]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesIndexProtect
call fcn.00411b90
push 0x4591c8
lea ecx, [ebp - 0x3b0]
mov byte [ebp - 4], 0xd5
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xd1
call fcn.00411e40
push ecx
lea ecx, [ebp - 0x848]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xd6
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.DisplayName
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x848]
mov byte [ebp - 4], 0xd7
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xd6
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_SZ
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x848]
mov byte [ebp - 4], 0xd8
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xd6
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.IndexProtect
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x848]
mov byte [ebp - 4], 0xd9
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xd6
call fcn.00411e40
lea eax, [ebp - 0x848]
push eax
push str.value
lea ecx, [ebp - 0x3b0]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x818]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xda
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.ImagePath
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x818]
mov byte [ebp - 4], 0xdb
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xda
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_EXPAND_SZ
call fcn.00411b90
mov byte [ebp - 4], 0xdc
lea ecx, [ebp - 0x818]
push str.type
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xda
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.system32DRIVERSIndexProtect.sys
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x818]
mov byte [ebp - 4], 0xdd
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xda
call fcn.00411e40
lea eax, [ebp - 0x818]
push eax
push str.value
lea ecx, [ebp - 0x3b0]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x800]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xde
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.Type
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x800]
mov byte [ebp - 4], 0xdf
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xde
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x800]
mov byte [ebp - 4], 0xe0
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xde
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000001
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x800]
mov byte [ebp - 4], 0xe1
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xde
call fcn.00411e40
lea eax, [ebp - 0x800]
push eax
push str.value
lea ecx, [ebp - 0x3b0]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x830]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xe2
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.Start
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x830]
mov byte [ebp - 4], 0xe3
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xe2
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x830]
mov byte [ebp - 4], 0xe4
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xe2
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000001
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x830]
mov byte [ebp - 4], 0xe5
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xe2
call fcn.00411e40
lea eax, [ebp - 0x830]
push eax
push str.value
lea ecx, [ebp - 0x3b0]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x7e8]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xe6
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.ErrorControl
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x7e8]
mov byte [ebp - 4], 0xe7
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xe6
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x7e8]
mov byte [ebp - 4], 0xe8
call fcn.00412b90
mov byte [ebp - 4], 0xe6
mov ecx, eax
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000001
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x7e8]
mov byte [ebp - 4], 0xe9
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xe6
call fcn.00411e40
lea eax, [ebp - 0x7e8]
push eax
push str.value
lea ecx, [ebp - 0x3b0]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x7d0]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xea
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push 0x45930c
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x7d0]
mov byte [ebp - 4], 0xeb
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xea
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x7d0]
mov byte [ebp - 4], 0xec
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xea
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000002
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x7d0]
mov byte [ebp - 4], 0xed
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xea
call fcn.00411e40
lea eax, [ebp - 0x7d0]
push eax
push str.value
lea ecx, [ebp - 0x3b0]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesmsrep
call fcn.00411b90
mov byte [ebp - 4], 0xee
push 0x4591c8
lea ecx, [ebp - 0x3c8]
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xea
call fcn.00411e40
push ecx
lea ecx, [ebp - 0x7b8]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xef
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.DisplayName
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x7b8]
mov byte [ebp - 4], 0xf0
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xef
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_SZ
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x7b8]
mov byte [ebp - 4], 0xf1
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xef
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.msrep
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x7b8]
mov byte [ebp - 4], 0xf2
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xef
call fcn.00411e40
lea eax, [ebp - 0x7b8]
push eax
push str.value
lea ecx, [ebp - 0x3c8]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x7a0]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xf3
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.ImagePath
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x7a0]
mov byte [ebp - 4], 0xf4
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xf3
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_EXPAND_SZ
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x7a0]
mov byte [ebp - 4], 0xf5
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xf3
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.system32DRIVERSmsrep.sys
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x7a0]
mov byte [ebp - 4], 0xf6
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xf3
call fcn.00411e40
lea eax, [ebp - 0x7a0]
push eax
push str.value
lea ecx, [ebp - 0x3c8]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x770]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xf7
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.Type
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x770]
mov byte [ebp - 4], 0xf8
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xf7
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x770]
mov byte [ebp - 4], 0xf9
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xf7
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000001
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x770]
mov byte [ebp - 4], 0xfa
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xf7
call fcn.00411e40
lea eax, [ebp - 0x770]
push eax
push str.value
lea ecx, [ebp - 0x3c8]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x890]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xfb
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.Start
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 0xfc
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xfb
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 0xfd
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xfb
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000001
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x890]
mov byte [ebp - 4], 0xfe
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xfb
call fcn.00411e40
lea eax, [ebp - 0x890]
push eax
push str.value
lea ecx, [ebp - 0x3c8]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x758]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xff
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.ErrorControl
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x758]
mov dword [ebp - 4], 0x100
call fcn.00412b90
mov ecx, eax
mov dword [ebp - 4], 0xff
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x758]
mov dword [ebp - 4], 0x101
call fcn.00412b90
mov ecx, eax
mov dword [ebp - 4], 0xff
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000001
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x758]
mov dword [ebp - 4], 0x102
call fcn.00412b90
mov ecx, eax
mov dword [ebp - 4], 0xff
call fcn.00411e40
lea eax, [ebp - 0x758]
push eax
push str.value
lea ecx, [ebp - 0x3c8]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x740]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov dword [ebp - 4], 0x103
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.SupportedFeatures
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x740]
mov byte [ebp - 4], 4
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x740]
mov byte [ebp - 4], 5
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000008
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x740]
mov byte [ebp - 4], 6
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00411e40
lea eax, [ebp - 0x740]
push eax
push str.value
lea ecx, [ebp - 0x3c8]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesLnvDrvFdn
call fcn.00411b90
push 0x4591c8
lea ecx, [ebp - 0x380]
mov byte [ebp - 4], 7
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.00411e40
push ecx
lea ecx, [ebp - 0x728]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.DisplayName
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x728]
mov byte [ebp - 4], 9
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_SZ
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x728]
mov byte [ebp - 4], 0xa
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.LnvDrvFdn
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x728]
mov byte [ebp - 4], 0xb
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.00411e40
lea eax, [ebp - 0x728]
push eax
push str.value
lea ecx, [ebp - 0x380]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x710]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.ErrorControl
call fcn.00411b90
mov byte [ebp - 4], 0xd
push str.name
lea ecx, [ebp - 0x710]
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x710]
mov byte [ebp - 4], 0xe
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000001
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x710]
mov byte [ebp - 4], 0xf
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0xc
call fcn.00411e40
lea eax, [ebp - 0x710]
push eax
push str.value
lea ecx, [ebp - 0x380]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x968]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.ImagePath
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x968]
mov byte [ebp - 4], 0x11
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_EXPAND_SZ
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x968]
mov byte [ebp - 4], 0x12
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.system32DRIVERSLnvDrvFdn.sys
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x968]
mov byte [ebp - 4], 0x13
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.00411e40
lea eax, [ebp - 0x968]
push eax
push str.value
lea ecx, [ebp - 0x380]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x950]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0x14
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.DependOnService
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x950]
mov byte [ebp - 4], 0x15
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_MULTI_SZ
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x950]
mov byte [ebp - 4], 0x16
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.00411e40
push str.FltMgr
lea ecx, [ebp - 0xc5c]
call fcn.00411b90
push eax
push str.data
lea ecx, [ebp - 0x950]
mov byte [ebp - 4], 0x17
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea ecx, [ebp - 0xc5c]
mov byte [ebp - 4], 0x14
call fcn.00411d80
lea eax, [ebp - 0x950]
push eax
push str.value
lea ecx, [ebp - 0x380]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x938]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.Start
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x938]
mov byte [ebp - 4], 0x19
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x938]
mov byte [ebp - 4], 0x1a
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000001
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x938]
mov byte [ebp - 4], 0x1b
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x18
call fcn.00411e40
lea eax, [ebp - 0x938]
push eax
push str.value
lea ecx, [ebp - 0x380]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x788]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0x1c
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.Type
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x788]
mov byte [ebp - 4], 0x1d
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x1c
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x788]
mov byte [ebp - 4], 0x1e
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x1c
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000002
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x788]
mov byte [ebp - 4], 0x1f
call fcn.00412b90
mov byte [ebp - 4], 0x1c
mov ecx, eax
call fcn.00411e40
lea eax, [ebp - 0x788]
push eax
push str.value
lea ecx, [ebp - 0x380]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x908]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0x20
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.Group
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x21
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_SZ
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x22
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.FSFilter_Activity_Monitor
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x908]
mov byte [ebp - 4], 0x23
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.00411e40
lea eax, [ebp - 0x908]
push eax
push str.value
lea ecx, [ebp - 0x380]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x8f0]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0x24
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.SupportedFeatures
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x8f0]
mov byte [ebp - 4], 0x25
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x8f0]
mov byte [ebp - 4], 0x26
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000008
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x8f0]
mov byte [ebp - 4], 0x27
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.00411e40
lea eax, [ebp - 0x8f0]
push eax
push str.value
lea ecx, [ebp - 0x380]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesLnvDrvFdnInstances
call fcn.00411b90
push 0x4591c8
lea ecx, [ebp - 0x6b0]
mov byte [ebp - 4], 0x28
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x24
call fcn.00411e40
push ecx
lea ecx, [ebp - 0x8d8]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0x29
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.DefaultInstance
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x8d8]
mov byte [ebp - 4], 0x2a
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_SZ
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x8d8]
mov byte [ebp - 4], 0x2b
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.Instance
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x8d8]
mov byte [ebp - 4], 0x2c
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.00411e40
lea eax, [ebp - 0x8d8]
push eax
push str.value
lea ecx, [ebp - 0x6b0]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesLnvDrvFdnInstancesInstance
call fcn.00411b90
push 0x4591c8
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 0x2d
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x29
call fcn.00411e40
push ecx
lea ecx, [ebp - 0x8c0]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0x2e
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.Altitude
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x8c0]
mov byte [ebp - 4], 0x2f
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x2e
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_SZ
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x8c0]
mov byte [ebp - 4], 0x30
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x2e
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.370031
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x8c0]
mov byte [ebp - 4], 0x31
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x2e
call fcn.00411e40
lea eax, [ebp - 0x8c0]
push eax
push str.value
lea ecx, [ebp - 0x518]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
push ecx
lea ecx, [ebp - 0x8a8]
call fcn.00402080
push 0
call fcn.00411ab0
sub esp, 0x18
mov byte [ebp - 4], 0x32
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.Flags
call fcn.00411b90
push str.name
lea ecx, [ebp - 0x8a8]
mov byte [ebp - 4], 0x33
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x32
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.REG_DWORD
call fcn.00411b90
push str.type
lea ecx, [ebp - 0x8a8]
mov byte [ebp - 4], 0x34
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x32
call fcn.00411e40
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x9c8], esp
push str.00000000
call fcn.00411b90
push str.data
lea ecx, [ebp - 0x8a8]
mov byte [ebp - 4], 0x35
call fcn.00412b90
mov ecx, eax
mov byte [ebp - 4], 0x32
call fcn.00411e40
lea eax, [ebp - 0x8a8]
push eax
push str.value
lea ecx, [ebp - 0x518]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea ecx, [ebp - 0x8a8]
call fcn.00411d80
lea ecx, [ebp - 0x8c0]
call fcn.00411d80
lea ecx, [ebp - 0x8d8]
call fcn.00411d80
lea ecx, [ebp - 0x8f0]
call fcn.00411d80
lea ecx, [ebp - 0x908]
call fcn.00411d80
lea ecx, [ebp - 0x788]
call fcn.00411d80
lea ecx, [ebp - 0x938]
call fcn.00411d80
lea ecx, [ebp - 0x950]
call fcn.00411d80
lea ecx, [ebp - 0x968]
call fcn.00411d80
lea ecx, [ebp - 0x710]
call fcn.00411d80
lea ecx, [ebp - 0x728]
call fcn.00411d80
lea ecx, [ebp - 0x740]
mov dword [ebp - 4], 0xff
call fcn.00411d80
lea ecx, [ebp - 0x758]
call fcn.00411d80
lea ecx, [ebp - 0x890]
call fcn.00411d80
lea ecx, [ebp - 0x770]
call fcn.00411d80
lea ecx, [ebp - 0x7a0]
call fcn.00411d80
lea ecx, [ebp - 0x7b8]
call fcn.00411d80
lea ecx, [ebp - 0x7d0]
call fcn.00411d80
lea ecx, [ebp - 0x7e8]
call fcn.00411d80
lea ecx, [ebp - 0x830]
call fcn.00411d80
lea ecx, [ebp - 0x800]
call fcn.00411d80
lea ecx, [ebp - 0x818]
call fcn.00411d80
lea ecx, [ebp - 0x848]
call fcn.00411d80
lea ecx, [ebp - 0x860]
call fcn.00411d80
lea ecx, [ebp - 0x920]
call fcn.00411d80
lea ecx, [ebp - 0x878]
call fcn.00411d80
lea ecx, [ebp - 0x338]
call fcn.00411d80
lea ecx, [ebp - 0x560]
call fcn.00411d80
lea ecx, [ebp - 0x548]
call fcn.00411d80
lea ecx, [ebp - 0x530]
call fcn.00411d80
lea ecx, [ebp - 0x6f8]
mov byte [ebp - 4], 0xaf
call fcn.0040a850
mov edi, dword [ebp - 0xb04]
push ecx
lea ecx, [ebp - 0x338]
call fcn.00402080
push 0
call fcn.00411ab0
lea eax, [ebp - 0x368]
mov dword [ebp - 4], 0x136
push eax
push str.regrepair
lea ecx, [ebp - 0x338]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea eax, [ebp - 0x6c8]
push eax
push str.regrepair
lea ecx, [ebp - 0x338]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea eax, [ebp - 0x5f0]
push eax
push str.regrepair
lea ecx, [ebp - 0x338]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea eax, [ebp - 0x350]
push eax
push str.regrepair
lea ecx, [ebp - 0x338]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea eax, [ebp - 0x6e0]
push eax
push str.regrepair
lea ecx, [ebp - 0x338]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea eax, [ebp - 0x4d0]
push eax
push str.regrepair
lea ecx, [ebp - 0x338]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
cmp dword [ebp - 0xb08], 0
je 0x4099ce
lea eax, [ebp - 0x398]
push eax
push str.regrepair
lea ecx, [ebp - 0x338]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea eax, [ebp - 0x3b0]
push eax
push str.regrepair
lea ecx, [ebp - 0x338]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea eax, [ebp - 0x3c8]
push eax
push str.regrepair
lea ecx, [ebp - 0x338]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea eax, [ebp - 0x380]
push eax
push str.regrepair
lea ecx, [ebp - 0x338]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea eax, [ebp - 0x6b0]
push eax
push str.regrepair
lea ecx, [ebp - 0x338]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea eax, [ebp - 0x518]
push eax
push str.regrepair
lea ecx, [ebp - 0x338]
call fcn.00412b90
mov ecx, eax
call fcn.00412bc0
lea ecx, [ebp - 0x9c4]
call fcn.0040d510
lea eax, [ebp - 0x338]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x9a4]
push eax
call fcn.0040d540
lea ecx, [ebp - 0x9a4]
call fcn.0040a6a0
lea edx, [ebp - 0xb04]
mov ecx, eax
call fcn.00403bb0
mov esi, eax
test esi, esi
jne 0x409a15
mov edi, 0x8007000e
jmp 0x409a4c
cmp edi, 1
jne 0x409a2a
push esi
push 2
call dword [sym.imp.LenProtectDrvSDK.dll_SendProtectDrvCmd_AddRegistryRepairListJson]
add esp, 8
mov edi, eax
jmp 0x409a43
cmp edi, 2
jne 0x409a3e
push esi
push edi
call dword [sym.imp.LenProtectDrvSDK.dll_SendProtectDrvCmd_DelRegistryRepairListJson]
add esp, 8
mov edi, eax
jmp 0x409a43
mov edi, 0x80070057
push esi
call fcn.0041bed6
add esp, 4
lea ecx, [ebp - 0x9a4]
call fcn.0040a850
lea ecx, [ebp - 0x9c4]
call fcn.00402020
lea ecx, [ebp - 0x338]
call fcn.00411d80
lea ecx, [ebp - 0x518]
call fcn.00411d80
lea ecx, [ebp - 0x6b0]
call fcn.00411d80
lea ecx, [ebp - 0x380]
call fcn.00411d80
lea ecx, [ebp - 0x3c8]
call fcn.00411d80
lea ecx, [ebp - 0x3b0]
call fcn.00411d80
lea ecx, [ebp - 0x398]
call fcn.00411d80
lea ecx, [ebp - 0x500]
call fcn.00411d80
lea ecx, [ebp - 0x4e8]
call fcn.00411d80
lea ecx, [ebp - 0x4d0]
call fcn.00411d80
lea ecx, [ebp - 0x4b8]
call fcn.00411d80
lea ecx, [ebp - 0x6e0]
call fcn.00411d80
lea ecx, [ebp - 0x488]
call fcn.00411d80
lea ecx, [ebp - 0x470]
call fcn.00411d80
lea ecx, [ebp - 0x458]
call fcn.00411d80
lea ecx, [ebp - 0x440]
call fcn.00411d80
lea ecx, [ebp - 0x428]
call fcn.00411d80
lea ecx, [ebp - 0x4a0]
call fcn.00411d80
lea ecx, [ebp - 0x410]
call fcn.00411d80
lea ecx, [ebp - 0x3f8]
call fcn.00411d80
lea ecx, [ebp - 0x3e0]
call fcn.00411d80
lea ecx, [ebp - 0x350]
call fcn.00411d80
lea ecx, [ebp - 0x620]
call fcn.00411d80
lea ecx, [ebp - 0x608]
call fcn.00411d80
lea ecx, [ebp - 0x5f0]
call fcn.00411d80
lea ecx, [ebp - 0x5d8]
call fcn.00411d80
lea ecx, [ebp - 0x6c8]
call fcn.00411d80
lea ecx, [ebp - 0x5c0]
call fcn.00411d80
lea ecx, [ebp - 0x5a8]
call fcn.00411d80
lea ecx, [ebp - 0x590]
call fcn.00411d80
lea ecx, [ebp - 0x578]
call fcn.00411d80
lea ecx, [ebp - 0x698]
call fcn.00411d80
lea ecx, [ebp - 0x680]
call fcn.00411d80
lea ecx, [ebp - 0x668]
call fcn.00411d80
lea ecx, [ebp - 0x650]
call fcn.00411d80
lea ecx, [ebp - 0x638]
call fcn.00411d80
lea ecx, [ebp - 0x368]
call fcn.00411d80
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00414073
mov esp, ebp
pop ebp
ret