Function at 0x410e70
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ef114
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x488
mov dword [ebp - 4], 2
mov ecx, 0x52429a
call fcn.004c6bbd
lea eax, [ebp + 0x20]
push eax
lea ecx, [ebp - 0x31c]
call fcn.00406790
mov byte [ebp - 4], 3
lea ecx, [ebp + 0x20]
push ecx
lea ecx, [ebp - 0x334]
call fcn.00406790
mov byte [ebp - 4], 4
lea edx, [ebp + 0x20]
push edx
lea ecx, [ebp - 0x304]
call fcn.00406790
mov byte [ebp - 4], 5
mov dword [ebp - 0x10], 0
mov eax, 0x5c
mov word [ebp - 0x9c], ax
mov ecx, 0x41
mov word [ebp - 0x9a], cx
mov edx, 0x70
mov word [ebp - 0x98], dx
mov eax, 0x70
mov word [ebp - 0x96], ax
mov ecx, 0x6c
mov word [ebp - 0x94], cx
mov edx, 0x69
mov word [ebp - 0x92], dx
mov eax, 0x63
mov word [ebp - 0x90], ax
mov ecx, 0x61
mov word [ebp - 0x8e], cx
mov edx, 0x74
mov word [ebp - 0x8c], dx
mov eax, 0x69
mov word [ebp - 0x8a], ax
mov ecx, 0x6f
mov word [ebp - 0x88], cx
mov edx, 0x6e
mov word [ebp - 0x86], dx
xor eax, eax
mov word [ebp - 0x84], ax
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x10]
push edx
push 0
push 0xf003f
push 0
push 0
push 0
lea ecx, [ebp - 0x3f]
call fcn.004063b0
push eax
lea eax, [ebp - 0x82]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea ecx, [ebp - 0x464]
call fcn.00406b20
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3f4]
call fcn.00406d10
mov dword [ebp - 0x2b8], eax
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp - 0x2bc], ecx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x2bc]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x31c]
call fcn.00415990
mov ecx, eax
call fcn.00415bd0
push eax
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3f4]
call fcn.00407960
cmp dword [ebp - 0x14], 0
je 0x411072
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x304]
call fcn.004030c0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x334]
call fcn.004030c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x31c]
call fcn.004030c0
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.004030c0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x20]
call fcn.004030c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x38]
call fcn.004030c0
jmp 0x412424
mov edx, 0x20
mov word [ebp - 0x68], dx
mov eax, 0x41
mov word [ebp - 0x66], ax
mov ecx, 0x75
mov word [ebp - 0x64], cx
mov edx, 0x74
mov word [ebp - 0x62], dx
mov eax, 0x68
mov word [ebp - 0x60], ax
mov ecx, 0x6f
mov word [ebp - 0x5e], cx
mov edx, 0x72
mov word [ebp - 0x5c], dx
mov eax, 0x73
mov word [ebp - 0x5a], ax
xor ecx, ecx
mov word [ebp - 0x58], cx
mov edx, 0x47
mov word [ebp - 0xd8], dx
mov eax, 0x65
mov word [ebp - 0xd6], ax
mov ecx, 0x6d
mov word [ebp - 0xd4], cx
mov edx, 0x69
mov word [ebp - 0xd2], dx
mov eax, 0x6e
mov word [ebp - 0xd0], ax
mov ecx, 0x69
mov word [ebp - 0xce], cx
mov edx, 0x20
mov word [ebp - 0xcc], dx
mov eax, 0x43
mov word [ebp - 0xca], ax
mov ecx, 0x68
mov word [ebp - 0xc8], cx
mov edx, 0x72
mov word [ebp - 0xc6], dx
mov eax, 0x6f
mov word [ebp - 0xc4], ax
mov ecx, 0x6d
mov word [ebp - 0xc2], cx
mov edx, 0x65
mov word [ebp - 0xc0], dx
xor eax, eax
mov word [ebp - 0xbe], ax
mov ecx, 0x54
mov word [ebp - 0x54], cx
mov edx, 0x68
mov word [ebp - 0x52], dx
mov eax, 0x65
mov word [ebp - 0x50], ax
mov ecx, 0x20
mov word [ebp - 0x4e], cx
xor edx, edx
mov word [ebp - 0x4c], dx
lea ecx, [ebp - 0x40]
call fcn.004063b0
push eax
lea eax, [ebp - 0x56]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x3fc]
call fcn.00406b20
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x370]
call fcn.00406d10
mov dword [ebp - 0x2c0], eax
mov ecx, dword [ebp - 0x2c0]
mov dword [ebp - 0x2c4], ecx
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x2c4]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x41]
call fcn.004063b0
push eax
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0x404]
call fcn.00406b20
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x364]
call fcn.00406d10
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x2cc], eax
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x2cc]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x2ec]
call fcn.00406160
mov dword [ebp - 0x2d0], eax
mov ecx, dword [ebp - 0x2d0]
mov dword [ebp - 0x2d4], ecx
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x2d4]
push edx
lea ecx, [ebp - 0x42]
call fcn.004063b0
push eax
lea eax, [ebp - 0x4a]
push eax
lea ecx, [ebp - 0x54]
push ecx
lea ecx, [ebp - 0x40c]
call fcn.00406b20
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x358]
call fcn.00406d10
mov dword [ebp - 0x2d8], eax
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2dc], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x2dc]
call fcn.00415e30
push eax
lea edx, [ebp - 0x2e8]
push edx
call fcn.004086d0
add esp, 0xc
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x2e4], eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x2e4]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00408630
add esp, 0xc
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x2e8]
call fcn.00407640
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x358]
call fcn.00407960
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2ec]
call fcn.00407640
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x364]
call fcn.00407960
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x370]
call fcn.00407960
mov eax, 0x41
mov word [ebp - 0x188], ax
mov ecx, 0x70
mov word [ebp - 0x186], cx
mov edx, 0x70
mov word [ebp - 0x184], dx
mov eax, 0x6c
mov word [ebp - 0x182], ax
mov ecx, 0x69
mov word [ebp - 0x180], cx
mov edx, 0x63
mov word [ebp - 0x17e], dx
mov eax, 0x61
mov word [ebp - 0x17c], ax
mov ecx, 0x74
mov word [ebp - 0x17a], cx
mov edx, 0x69
mov word [ebp - 0x178], dx
mov eax, 0x6f
mov word [ebp - 0x176], ax
mov ecx, 0x6e
mov word [ebp - 0x174], cx
mov edx, 0x43
mov word [ebp - 0x172], dx
mov eax, 0x6f
mov word [ebp - 0x170], ax
mov ecx, 0x6d
mov word [ebp - 0x16e], cx
mov edx, 0x70
mov word [ebp - 0x16c], dx
mov eax, 0x61
mov word [ebp - 0x16a], ax
mov ecx, 0x6e
mov word [ebp - 0x168], cx
mov edx, 0x79
mov word [ebp - 0x166], dx
xor eax, eax
mov word [ebp - 0x164], ax
lea ecx, [ebp - 0x30]
call fcn.0040aee0
lea ecx, [eax + eax + 2]
push ecx
lea ecx, [ebp - 0x30]
call fcn.004084d0
push eax
push 1
push 0
lea ecx, [ebp - 0x43]
call fcn.004063b0
push eax
lea edx, [ebp - 0x162]
push edx
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x414]
call fcn.00406b20
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x37c]
call fcn.00406d10
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x21c], eax
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x21c]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x224]
call fcn.00406160
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x220]
call fcn.004084d0
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea ecx, [ebp - 0x224]
call fcn.00407640
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x37c]
call fcn.00407960
push 0x4f6a24
lea ecx, [ebp - 0x2c]
call fcn.00406160
mov byte [ebp - 4], 0x13
mov edx, 0x41
mov word [ebp - 0x214], dx
mov eax, 0x70
mov word [ebp - 0x212], ax
mov ecx, 0x70
mov word [ebp - 0x210], cx
mov edx, 0x6c
mov word [ebp - 0x20e], dx
mov eax, 0x69
mov word [ebp - 0x20c], ax
mov ecx, 0x63
mov word [ebp - 0x20a], cx
mov edx, 0x61
mov word [ebp - 0x208], dx
mov eax, 0x74
mov word [ebp - 0x206], ax
mov ecx, 0x69
mov word [ebp - 0x204], cx
mov edx, 0x6f
mov word [ebp - 0x202], dx
mov eax, 0x6e
mov word [ebp - 0x200], ax
mov ecx, 0x44
mov word [ebp - 0x1fe], cx
mov edx, 0x65
mov word [ebp - 0x1fc], dx
mov eax, 0x73
mov word [ebp - 0x1fa], ax
mov ecx, 0x63
mov word [ebp - 0x1f8], cx
mov edx, 0x72
mov word [ebp - 0x1f6], dx
mov eax, 0x69
mov word [ebp - 0x1f4], ax
mov ecx, 0x70
mov word [ebp - 0x1f2], cx
mov edx, 0x74
mov word [ebp - 0x1f0], dx
mov eax, 0x69
mov word [ebp - 0x1ee], ax
mov ecx, 0x6f
mov word [ebp - 0x1ec], cx
mov edx, 0x6e
mov word [ebp - 0x1ea], dx
xor eax, eax
mov word [ebp - 0x1e8], ax
lea ecx, [ebp - 0x2c]
call fcn.0040aee0
lea ecx, [eax + eax + 2]
push ecx
lea ecx, [ebp - 0x2c]
call fcn.004084d0
push eax
push 1
push 0
lea ecx, [ebp - 0x44]
call fcn.004063b0
push eax
lea edx, [ebp - 0x1e6]
push edx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x41c]
call fcn.00406b20
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x388]
call fcn.00406d10
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x22c], eax
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x22c]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x234]
call fcn.00406160
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x230]
call fcn.004084d0
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea ecx, [ebp - 0x234]
call fcn.00407640
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x388]
call fcn.00407960
lea ecx, [ebp + 8]
call fcn.00415bd0
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1c]
add edx, 2
mov dword [ebp - 0x238], edx
mov eax, dword [ebp - 0x1c]
mov cx, word [eax]
mov word [ebp - 0x3a], cx
add dword [ebp - 0x1c], 2
cmp word [ebp - 0x3a], 0
jne 0x4116ac
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x238]
sar edx, 1
mov dword [ebp - 0x23c], edx
mov eax, 0x41
mov word [ebp - 0x13c], ax
mov ecx, 0x70
mov word [ebp - 0x13a], cx
mov edx, 0x70
mov word [ebp - 0x138], dx
mov eax, 0x6c
mov word [ebp - 0x136], ax
mov ecx, 0x69
mov word [ebp - 0x134], cx
mov edx, 0x63
mov word [ebp - 0x132], dx
mov eax, 0x61
mov word [ebp - 0x130], ax
mov ecx, 0x74
mov word [ebp - 0x12e], cx
mov edx, 0x69
mov word [ebp - 0x12c], dx
mov eax, 0x6f
mov word [ebp - 0x12a], ax
mov ecx, 0x6e
mov word [ebp - 0x128], cx
mov edx, 0x49
mov word [ebp - 0x126], dx
mov eax, 0x63
mov word [ebp - 0x124], ax
mov ecx, 0x6f
mov word [ebp - 0x122], cx
mov edx, 0x6e
mov word [ebp - 0x120], dx
xor eax, eax
mov word [ebp - 0x11e], ax
mov ecx, dword [ebp - 0x23c]
lea edx, [ecx + ecx + 2]
push edx
lea ecx, [ebp + 8]
call fcn.00415bd0
push eax
push 1
push 0
lea ecx, [ebp - 0x31]
call fcn.004063b0
push eax
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x13c]
push ecx
lea ecx, [ebp - 0x424]
call fcn.00406b20
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x394]
call fcn.00406d10
mov dword [ebp - 0x240], eax
mov ecx, dword [ebp - 0x240]
mov dword [ebp - 0x244], ecx
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x244]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x24c]
call fcn.00406160
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x248]
call fcn.004084d0
push eax
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea ecx, [ebp - 0x24c]
call fcn.00407640
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x394]
call fcn.00407960
mov eax, 0x47
mov word [ebp - 0xf8], ax
mov ecx, 0x65
mov word [ebp - 0xf6], cx
mov edx, 0x6d
mov word [ebp - 0xf4], dx
mov eax, 0x69
mov word [ebp - 0xf2], ax
mov ecx, 0x6e
mov word [ebp - 0xf0], cx
mov edx, 0x69
mov word [ebp - 0xee], dx
mov eax, 0x20
mov word [ebp - 0xec], ax
mov ecx, 0x43
mov word [ebp - 0xea], cx
mov edx, 0x68
mov word [ebp - 0xe8], dx
mov eax, 0x72
mov word [ebp - 0xe6], ax
mov ecx, 0x6f
mov word [ebp - 0xe4], cx
mov edx, 0x6d
mov word [ebp - 0xe2], dx
mov eax, 0x65
mov word [ebp - 0xe0], ax
xor ecx, ecx
mov word [ebp - 0xde], cx
lea ecx, [ebp - 0x32]
call fcn.004063b0
push eax
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00406b20
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x3a0]
call fcn.00406d10
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x254], eax
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x254]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x28]
call fcn.00406160
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3a0]
call fcn.00407960
mov ecx, 0x41
mov word [ebp - 0x160], cx
mov edx, 0x70
mov word [ebp - 0x15e], dx
mov eax, 0x70
mov word [ebp - 0x15c], ax
mov ecx, 0x6c
mov word [ebp - 0x15a], cx
mov edx, 0x69
mov word [ebp - 0x158], dx
mov eax, 0x63
mov word [ebp - 0x156], ax
mov ecx, 0x61
mov word [ebp - 0x154], cx
mov edx, 0x74
mov word [ebp - 0x152], dx
mov eax, 0x69
mov word [ebp - 0x150], ax
mov ecx, 0x6f
mov word [ebp - 0x14e], cx
mov edx, 0x6e
mov word [ebp - 0x14c], dx
mov eax, 0x4e
mov word [ebp - 0x14a], ax
mov ecx, 0x61
mov word [ebp - 0x148], cx
mov edx, 0x6d
mov word [ebp - 0x146], dx
mov eax, 0x65
mov word [ebp - 0x144], ax
xor ecx, ecx
mov word [ebp - 0x142], cx
lea ecx, [ebp - 0x28]
call fcn.0040aee0
lea edx, [eax + eax + 2]
push edx
lea ecx, [ebp - 0x28]
call fcn.004084d0
push eax
push 1
push 0
lea ecx, [ebp - 0x33]
call fcn.004063b0
push eax
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x160]
push ecx
lea ecx, [ebp - 0x434]
call fcn.00406b20
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3ac]
call fcn.00406d10
mov dword [ebp - 0x258], eax
mov ecx, dword [ebp - 0x258]
mov dword [ebp - 0x25c], ecx
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x25c]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x264]
call fcn.00406160
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x260]
call fcn.004084d0
push eax
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea ecx, [ebp - 0x264]
call fcn.00407640
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3ac]
call fcn.00407960
mov eax, 0x54
mov word [ebp - 0x80], ax
mov ecx, 0x53
mov word [ebp - 0x7e], cx
mov edx, 0x42
mov word [ebp - 0x7c], dx
mov eax, 0x72
mov word [ebp - 0x7a], ax
mov ecx, 0x6f
mov word [ebp - 0x78], cx
mov edx, 0x77
mov word [ebp - 0x76], dx
mov eax, 0x73
mov word [ebp - 0x74], ax
mov ecx, 0x65
mov word [ebp - 0x72], cx
mov edx, 0x72
mov word [ebp - 0x70], dx
xor eax, eax
mov word [ebp - 0x6e], ax
lea ecx, [ebp - 0x34]
call fcn.004063b0
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x80]
push edx
lea ecx, [ebp - 0x43c]
call fcn.00406b20
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x3b8]
call fcn.00406d10
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x26c], eax
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x26c]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x24]
call fcn.00406160
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x3b8]
call fcn.00407960
mov ecx, 0x41
mov word [ebp - 0x118], cx
mov edx, 0x70
mov word [ebp - 0x116], dx
mov eax, 0x70
mov word [ebp - 0x114], ax
mov ecx, 0x55
mov word [ebp - 0x112], cx
mov edx, 0x73
mov word [ebp - 0x110], dx
mov eax, 0x65
mov word [ebp - 0x10e], ax
mov ecx, 0x72
mov word [ebp - 0x10c], cx
mov edx, 0x4d
mov word [ebp - 0x10a], dx
mov eax, 0x6f
mov word [ebp - 0x108], ax
mov ecx, 0x64
mov word [ebp - 0x106], cx
mov edx, 0x65
mov word [ebp - 0x104], dx
mov eax, 0x6c
mov word [ebp - 0x102], ax
mov ecx, 0x49
mov word [ebp - 0x100], cx
mov edx, 0x64
mov word [ebp - 0xfe], dx
xor eax, eax
mov word [ebp - 0xfc], ax
lea ecx, [ebp - 0x24]
call fcn.0040aee0
lea ecx, [eax + eax + 2]
push ecx
lea ecx, [ebp - 0x24]
call fcn.004084d0
push eax
push 1
push 0
lea ecx, [ebp - 0x35]
call fcn.004063b0
push eax
lea edx, [ebp - 0xfa]
push edx
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x444]
call fcn.00406b20
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x3c4]
call fcn.00406d10
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x274], eax
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0x274]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x27c]
call fcn.00406160
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x278]
call fcn.004084d0
push eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
lea ecx, [ebp - 0x27c]
call fcn.00407640
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x3c4]
call fcn.00407960
mov edx, 0x5c
mov word [ebp - 0xb8], dx
mov eax, 0x44
mov word [ebp - 0xb6], ax
mov ecx, 0x65
mov word [ebp - 0xb4], cx
mov edx, 0x66
mov word [ebp - 0xb2], dx
mov eax, 0x61
mov word [ebp - 0xb0], ax
mov ecx, 0x75
mov word [ebp - 0xae], cx
mov edx, 0x6c
mov word [ebp - 0xac], dx
mov eax, 0x74
mov word [ebp - 0xaa], ax
mov ecx, 0x49
mov word [ebp - 0xa8], cx
mov edx, 0x63
mov word [ebp - 0xa6], dx
mov eax, 0x6f
mov word [ebp - 0xa4], ax
mov ecx, 0x6e
mov word [ebp - 0xa2], cx
xor edx, edx
mov word [ebp - 0xa0], dx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
lea ecx, [ebp - 0x36]
call fcn.004063b0
push eax
lea edx, [ebp - 0x9e]
push edx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x44c]
call fcn.00406b20
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
lea ecx, [ebp - 0x3d0]
call fcn.00406d10
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x284], eax
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x284]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x334]
call fcn.00415990
mov ecx, eax
call fcn.00415bd0
push eax
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x3d0]
call fcn.00407960
cmp dword [ebp - 0x14], 0
je 0x411ea5
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x24]
call fcn.00407640
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x28]
call fcn.00407640
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2c]
call fcn.00407640
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00407640
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x304]
call fcn.004030c0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x334]
call fcn.004030c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x31c]
call fcn.004030c0
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.004030c0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x20]
call fcn.004030c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x38]
call fcn.004030c0
jmp 0x412424
lea ecx, [ebp + 8]
call fcn.00415bd0
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
add ecx, 2
mov dword [ebp - 0x288], ecx
mov edx, dword [ebp - 0x18]
mov ax, word [edx]
mov word [ebp - 0x3c], ax
add dword [ebp - 0x18], 2
cmp word [ebp - 0x3c], 0
jne 0x411ebc
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x288]
sar ecx, 1
mov dword [ebp - 0x28c], ecx
mov edx, dword [ebp - 0x28c]
lea eax, [edx + edx + 2]
push eax
lea ecx, [ebp + 8]
call fcn.00415bd0
push eax
push 1
push 0
push 0x4f6a30
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, 0x5c
mov word [ebp - 0x1b4], dx
mov eax, 0x73
mov word [ebp - 0x1b2], ax
mov ecx, 0x68
mov word [ebp - 0x1b0], cx
mov edx, 0x65
mov word [ebp - 0x1ae], dx
mov eax, 0x6c
mov word [ebp - 0x1ac], ax
mov ecx, 0x6c
mov word [ebp - 0x1aa], cx
mov edx, 0x5c
mov word [ebp - 0x1a8], dx
mov eax, 0x6f
mov word [ebp - 0x1a6], ax
mov ecx, 0x70
mov word [ebp - 0x1a4], cx
mov edx, 0x65
mov word [ebp - 0x1a2], dx
mov eax, 0x6e
mov word [ebp - 0x1a0], ax
mov ecx, 0x5c
mov word [ebp - 0x19e], cx
mov edx, 0x63
mov word [ebp - 0x19c], dx
mov eax, 0x6f
mov word [ebp - 0x19a], ax
mov ecx, 0x6d
mov word [ebp - 0x198], cx
mov edx, 0x6d
mov word [ebp - 0x196], dx
mov eax, 0x61
mov word [ebp - 0x194], ax
mov ecx, 0x6e
mov word [ebp - 0x192], cx
mov edx, 0x64
mov word [ebp - 0x190], dx
xor eax, eax
mov word [ebp - 0x18e], ax
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x10]
push edx
push 0
push 0xf003f
push 0
push 0
push 0
lea ecx, [ebp - 0x37]
call fcn.004063b0
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
lea ecx, [ebp - 0x454]
call fcn.00406b20
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3dc]
call fcn.00406d10
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x290]
mov dword [ebp - 0x294], ecx
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x294]
call fcn.00415e30
push eax
lea ecx, [ebp - 0x304]
call fcn.00415990
mov ecx, eax
call fcn.00415bd0
push eax
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov dword [ebp - 0x14], eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x3dc]
call fcn.00407960
cmp dword [ebp - 0x14], 0
je 0x412124
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x24]
call fcn.00407640
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x28]
call fcn.00407640
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2c]
call fcn.00407640
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00407640
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x304]
call fcn.004030c0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x334]
call fcn.004030c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x31c]
call fcn.004030c0
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.004030c0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x20]
call fcn.004030c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x38]
call fcn.004030c0
jmp 0x412424
mov edx, 0x20
mov word [ebp - 0x1e4], dx
mov eax, 0x2d
mov word [ebp - 0x1e2], ax
mov ecx, 0x2d
mov word [ebp - 0x1e0], cx
mov edx, 0x73
mov word [ebp - 0x1de], dx
mov eax, 0x69
mov word [ebp - 0x1dc], ax
mov ecx, 0x6e
mov word [ebp - 0x1da], cx
mov edx, 0x67
mov word [ebp - 0x1d8], dx
mov eax, 0x6c
mov word [ebp - 0x1d6], ax
mov ecx, 0x65
mov word [ebp - 0x1d4], cx
mov edx, 0x2d
mov word [ebp - 0x1d2], dx
mov eax, 0x61
mov word [ebp - 0x1d0], ax
mov ecx, 0x72
mov word [ebp - 0x1ce], cx
mov edx, 0x67
mov word [ebp - 0x1cc], dx
mov eax, 0x75
mov word [ebp - 0x1ca], ax
mov ecx, 0x6d
mov word [ebp - 0x1c8], cx
mov edx, 0x65
mov word [ebp - 0x1c6], dx
mov eax, 0x6e
mov word [ebp - 0x1c4], ax
mov ecx, 0x74
mov word [ebp - 0x1c2], cx
mov edx, 0x20
mov word [ebp - 0x1c0], dx
mov eax, 0x25
mov word [ebp - 0x1be], ax
mov ecx, 0x31
mov word [ebp - 0x1bc], cx
xor edx, edx
mov word [ebp - 0x1ba], dx
lea ecx, [ebp - 0x38]
call fcn.004063b0
push eax
lea eax, [ebp - 0x1b8]
push eax
lea ecx, [ebp - 0x1e4]
push ecx
lea ecx, [ebp - 0x45c]
call fcn.00406b20
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3e8]
call fcn.00406d10
mov dword [ebp - 0x298], eax
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x29c], ecx
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x29c]
call fcn.00415e30
push eax
push 0x4f6a34
lea edx, [ebp + 0x38]
push edx
push 0x4f6a38
lea eax, [ebp - 0x494]
push eax
call fcn.00403d50
add esp, 0xc
mov dword [ebp - 0x2a0], eax
mov ecx, dword [ebp - 0x2a0]
mov dword [ebp - 0x2a4], ecx
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x2a4]
push edx
lea eax, [ebp - 0x47c]
push eax
call fcn.00403d10
add esp, 0xc
mov dword [ebp - 0x2a8], eax
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp - 0x2ac], ecx
mov byte [ebp - 4], 0x22
mov edx, dword [ebp - 0x2ac]
push edx
lea eax, [ebp - 0x34c]
push eax
call fcn.00403d10
add esp, 0xc
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x47c]
call fcn.004030c0
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x494]
call fcn.004030c0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x3e8]
call fcn.00407960
lea ecx, [ebp - 0x34c]
call fcn.00415bd0
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
add ecx, 2
mov dword [ebp - 0x2b0], ecx
mov edx, dword [ebp - 0x20]
mov ax, word [edx]
mov word [ebp - 0x3e], ax
add dword [ebp - 0x20], 2
cmp word [ebp - 0x3e], 0
jne 0x41233b
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x2b0]
sar ecx, 1
mov dword [ebp - 0x2b4], ecx
mov edx, dword [ebp - 0x2b4]
lea eax, [edx + edx + 2]
push eax
lea ecx, [ebp - 0x34c]
call fcn.00415bd0
push eax
push 1
push 0
push 0x4f6a3c
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov edx, dword [ebp - 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x34c]
call fcn.004030c0
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x24]
call fcn.00407640
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x28]
call fcn.00407640
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x2c]
call fcn.00407640
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x30]
call fcn.00407640
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x304]
call fcn.004030c0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x334]
call fcn.004030c0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x31c]
call fcn.004030c0
mov byte [ebp - 4], 1
lea ecx, [ebp + 8]
call fcn.004030c0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x20]
call fcn.004030c0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x38]
call fcn.004030c0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret