Function at 0x4367cf
Capabilities:
Create directory
Parse pe header

Disassembly:
push 0x3f4
mov eax, 0x451879
call fcn.0042db9a
and dword [ebp - 0x3d8], 0
lea eax, [ebp - 0x218]
push 0x208
push 0
push eax
call sub.VCRUNTIME140.dll_memset
pop ecx
pop ecx
push 0x23
lea edx, [ebp - 0x218]
call fcn.00492dbd
pop ecx
pop ecx
lea ecx, [ebp - 0x3e4]
call fcn.0042f8c4
and dword [ebp - 4], 0
lea ecx, [ebp - 0x218]
mov edx, dword [eax]
call fcn.00471eea
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e4]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x218]
call fcn.00456dad
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x43685d
push 0
lea eax, [ebp - 0x218]
push eax
call esi
test eax, eax
je 0x438bc2
mov edi, 0x4ba044
lea ecx, [ebp - 0x3e4]
mov edx, edi
call fcn.004142f5
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x218]
mov edx, dword [eax]
call fcn.00471eea
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e4]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x218]
call fcn.00456dad
test eax, eax
jne 0x4368b4
push eax
lea eax, [ebp - 0x218]
push eax
call esi
test eax, eax
je 0x438bc2
push 0x48
lea eax, [ebp - 0x3d4]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x3d4]
call fcn.00431ed8
push 0x50
mov dword [ebp - 4], 2
call dword [sym.imp.mfc140u.dll_operator_1]
mov esi, eax
pop ecx
mov dword [ebp - 0x3dc], esi
mov byte [ebp - 4], 3
test esi, esi
je 0x43692b
push 0x50
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x400]
mov edx, edi
call fcn.0049d3da
mov byte [ebp - 4], 4
mov ecx, esi
mov dword [ebp - 0x3d8], 1
push dword [eax]
call fcn.00431f5c
mov dword [ebp - 0x3e4], eax
jmp 0x436932
and dword [ebp - 0x3e4], 0
mov dword [ebp - 4], 2
test byte [ebp - 0x3d8], 1
je 0x43694e
lea ecx, [ebp - 0x400]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
cmp dword [0x4e49c4], 1
jne 0x436d5b
push ecx
push 0
mov ecx, 0x4f52d0
call fcn.00426dd2
xor esi, esi
cmp dword [0x4f5158], esi
jle 0x4369ef
push esi
call fcn.0042449f
push eax
lea ecx, [ebp - 0x358]
call fcn.0042372e
push 7
pop ecx
xor eax, eax
mov byte [ebp - 4], 6
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x24c]
call fcn.00484356
mov byte [ebp - 4], 7
lea eax, [ebp - 0x328]
cmp dword [ebp - 0x314], 8
push ecx
cmovae eax, dword [ebp - 0x328]
push eax
push ecx
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x24c]
call fcn.0048ef58
lea ecx, [ebp - 0x24c]
call fcn.0043e797
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 2
call fcn.004237e8
inc esi
cmp esi, dword [0x4f5158]
jl 0x436972
mov eax, dword [0x4f52d8]
xor edi, edi
test eax, eax
jle 0x436d5b
xor ecx, ecx
mov dword [ebp - 0x3d8], ecx
test ecx, ecx
js 0x43701e
cmp edi, eax
jge 0x43701e
mov esi, dword [0x4f52d4]
add esi, ecx
lea ecx, [ebp - 0x31c]
push esi
call fcn.0041d17f
lea eax, [esi + 0x18]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x304]
call fcn.0041d17f
lea eax, [esi + 0x30]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0041d17f
lea eax, [esi + 0x48]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0041d17f
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x2bc]
call fcn.0041d17f
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x2a4], eax
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0xc
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x29c]
push 0x4ba054
call fcn.00431f5c
mov esi, 0xfde9
mov byte [ebp - 4], 0xd
push esi
lea edx, [ebp - 0x31c]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0xe
cmp dword [eax + 0x14], 0x10
jb 0x436ace
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0xd
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x14], 0x10
jb 0x436b0d
mov eax, dword [eax]
push eax
push 0x4ba060
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0xd
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x2ec]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b5a20
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x3e0]
call fcn.0049d3da
mov byte [ebp - 4], 0x11
cmp dword [esi + 0x14], 0x10
jb 0x436b62
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0xd
call fcn.0041d9c8
mov esi, 0xfde9
lea edx, [ebp - 0x2d4]
push esi
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x12
cmp dword [eax + 0x14], 0x10
jb 0x436baf
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
call fcn.0041d9c8
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x13
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x436c2d
je 0x436c26
sub eax, 0
je 0x436c1f
sub eax, 1
je 0x436c18
sub eax, 1
je 0x436c11
sub eax, 1
jne 0x436c66
push str.REG_BINARY
jmp 0x436c5b
push str.REG_EXPAND_SZ
jmp 0x436c5b
push str.REG_SZ
jmp 0x436c5b
push str.REG_NONE
jmp 0x436c5b
push str.REG_DWORD
jmp 0x436c5b
sub eax, 5
je 0x436c56
sub eax, 1
je 0x436c4f
sub eax, 1
je 0x436c48
sub eax, 4
jne 0x436c66
push str.REG_QWORD
jmp 0x436c5b
push str.REG_MULTI_SZ
jmp 0x436c5b
push str.REG_LINK
jmp 0x436c5b
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.0041de1d
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x3dc]
call fcn.0049d3da
mov byte [ebp - 4], 0x15
cmp dword [esi + 0x14], 0x10
jb 0x436c9b
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3dc]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x13
call fcn.0041d9c8
push 0xfde9
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x16
cmp dword [eax + 0x14], 0x10
jb 0x436ce7
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x13
call fcn.0041d9c8
mov ecx, dword [ebp - 0x3e4]
lea eax, [ebp - 0x29c]
push eax
call fcn.0043205f
lea ecx, [ebp - 0x230]
call fcn.0041d1e9
lea ecx, [ebp - 0x29c]
call fcn.00431fda
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 2
call fcn.00423e45
mov ecx, dword [ebp - 0x3d8]
inc edi
mov eax, dword [0x4f52d8]
add ecx, 0x7c
mov dword [ebp - 0x3d8], ecx
cmp edi, eax
jl 0x436a06
cmp dword [0x4e49c8], 1
jne 0x43716e
push ecx
push 0
mov ecx, 0x4f52f0
call fcn.00426faf
xor esi, esi
cmp dword [0x4f5198], esi
jle 0x436dfc
push esi
call fcn.00424ab3
push eax
lea ecx, [ebp - 0x324]
call fcn.00423826
push 7
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x17
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x24c]
call fcn.00484356
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x30c]
cmp dword [ebp - 0x2f8], 8
push ecx
cmovae eax, dword [ebp - 0x30c]
push eax
push ecx
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x24c]
call fcn.004485e9
lea ecx, [ebp - 0x24c]
call fcn.0043e797
lea ecx, [ebp - 0x324]
mov byte [ebp - 4], 2
call fcn.004238a2
inc esi
cmp esi, dword [0x4f5198]
jl 0x436d7f
mov eax, dword [0x4f52f8]
xor edi, edi
test eax, eax
jle 0x43716e
xor ecx, ecx
mov dword [ebp - 0x3d8], ecx
test ecx, ecx
js 0x43701e
cmp edi, eax
jge 0x43701e
mov esi, dword [0x4f52f4]
add esi, ecx
lea ecx, [ebp - 0x31c]
push esi
call fcn.0041d17f
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0x19
push eax
lea ecx, [ebp - 0x304]
call fcn.0041d17f
lea eax, [esi + 0x30]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0041d17f
lea eax, [esi + 0x48]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0041d17f
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x2bc]
call fcn.0041d17f
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x2a4], eax
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x1d
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x29c]
push 0x4ba054
call fcn.00431f5c
mov esi, 0xfde9
mov byte [ebp - 4], 0x1e
push esi
lea edx, [ebp - 0x31c]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x1f
cmp dword [eax + 0x14], 0x10
jb 0x436edb
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x1e
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x20
cmp dword [eax + 0x14], 0x10
jb 0x436f1a
mov eax, dword [eax]
push eax
push 0x4ba060
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x1e
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x2ec]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b5a20
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x3dc]
call fcn.0049d3da
mov byte [ebp - 4], 0x22
cmp dword [esi + 0x14], 0x10
jb 0x436f6f
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3dc]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x1e
call fcn.0041d9c8
mov esi, 0xfde9
lea edx, [ebp - 0x2d4]
push esi
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x23
cmp dword [eax + 0x14], 0x10
jb 0x436fbc
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
call fcn.0041d9c8
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x437040
je 0x437039
sub eax, 0
je 0x437032
sub eax, 1
je 0x43702b
sub eax, 1
je 0x437024
sub eax, 1
jne 0x437079
push str.REG_BINARY
jmp 0x43706e
call dword [sym.imp.mfc140u.dll_AfxThrowInvalidArgException]
push str.REG_EXPAND_SZ
jmp 0x43706e
push str.REG_SZ
jmp 0x43706e
push str.REG_NONE
jmp 0x43706e
push str.REG_DWORD
jmp 0x43706e
sub eax, 5
je 0x437069
sub eax, 1
je 0x437062
sub eax, 1
je 0x43705b
sub eax, 4
jne 0x437079
push str.REG_QWORD
jmp 0x43706e
push str.REG_MULTI_SZ
jmp 0x43706e
push str.REG_LINK
jmp 0x43706e
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.0041de1d
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x3e0]
call fcn.0049d3da
mov byte [ebp - 4], 0x26
cmp dword [esi + 0x14], 0x10
jb 0x4370ae
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x24
call fcn.0041d9c8
push 0xfde9
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x27
cmp dword [eax + 0x14], 0x10
jb 0x4370fa
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x24
call fcn.0041d9c8
mov ecx, dword [ebp - 0x3e4]
lea eax, [ebp - 0x29c]
push eax
call fcn.0043205f
lea ecx, [ebp - 0x230]
call fcn.0041d1e9
lea ecx, [ebp - 0x29c]
call fcn.00431fda
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 2
call fcn.00423e70
mov ecx, dword [ebp - 0x3d8]
inc edi
mov eax, dword [0x4f52f8]
add ecx, 0x7c
mov dword [ebp - 0x3d8], ecx
cmp edi, eax
jl 0x436e13
cmp dword [0x4e49cc], 1
jne 0x437443
xor edi, edi
cmp dword [0x4f51b8], edi
jle 0x437443
push edi
call fcn.004245fd
push eax
lea ecx, [ebp - 0x354]
call fcn.004238cd
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x28
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x29c]
push 0x4ba054
call fcn.00431f5c
mov edx, 0x4ba080
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x3dc]
call fcn.0049d3da
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x29c]
push dword [eax]
push str.root
call fcn.00432031
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x29
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
push 0xfde9
lea edx, [ebp - 0x33c]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x2b
cmp dword [eax + 0x14], 0x10
jb 0x43721f
mov eax, dword [eax]
push eax
push 0x4ba060
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x29
call fcn.0041d9c8
push 0xfde9
lea edx, [ebp - 0x324]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b5a20
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x3e0]
call fcn.0049d3da
mov byte [ebp - 4], 0x2d
cmp dword [esi + 0x14], 0x10
jb 0x437278
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x29
call fcn.0041d9c8
mov esi, 0xfde9
lea edx, [ebp - 0x2bc]
push esi
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x2e
cmp dword [eax + 0x14], 0x10
jb 0x4372c5
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
call fcn.0041d9c8
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x2f
mov eax, dword [ebp - 0x2d8]
cmp eax, 4
ja 0x437343
je 0x43733c
sub eax, 0
je 0x437335
sub eax, 1
je 0x43732e
sub eax, 1
je 0x437327
sub eax, 1
jne 0x43737c
push str.REG_BINARY
jmp 0x437371
push str.REG_EXPAND_SZ
jmp 0x437371
push str.REG_SZ
jmp 0x437371
push str.REG_NONE
jmp 0x437371
push str.REG_DWORD
jmp 0x437371
sub eax, 5
je 0x43736c
sub eax, 1
je 0x437365
sub eax, 1
je 0x43735e
sub eax, 4
jne 0x43737c
push str.REG_QWORD
jmp 0x437371
push str.REG_MULTI_SZ
jmp 0x437371
push str.REG_LINK
jmp 0x437371
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.0041de1d
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x3d8]
call fcn.0049d3da
mov byte [ebp - 4], 0x31
cmp dword [esi + 0x14], 0x10
jb 0x4373b1
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3d8]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x2f
call fcn.0041d9c8
cmp dword [ebp - 0x2a4], 1
lea ecx, [ebp - 0x29c]
jne 0x4373f0
push 0x4b5854
jmp 0x4373f5
push 0x4ba2c4
push str.is64
call fcn.00432031
mov ecx, dword [ebp - 0x3e4]
lea eax, [ebp - 0x29c]
push eax
call fcn.0043205f
lea ecx, [ebp - 0x230]
call fcn.0041d1e9
lea ecx, [ebp - 0x29c]
call fcn.00431fda
lea ecx, [ebp - 0x354]
mov byte [ebp - 4], 2
call fcn.00423975
inc edi
cmp edi, dword [0x4f51b8]
jl 0x437189
cmp dword [0x4e49d0], 1
jne 0x43773d
xor edi, edi
cmp dword [0x4f51d8], edi
jle 0x43773d
mov esi, 0xfde9
push edi
call fcn.00424793
push eax
lea ecx, [ebp - 0x36c]
call fcn.004239b6
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x32
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x29c]
push 0x4ba054
call fcn.00431f5c
push esi
lea edx, [ebp - 0x2f4]
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x34
cmp dword [eax + 0x14], 0x10
jb 0x4374bf
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x33
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x354]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x35
cmp dword [eax + 0x14], 0x10
jb 0x4374fe
mov eax, dword [eax]
push eax
push 0x4ba060
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x33
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x33c]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b5a20
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x3dc]
call fcn.0049d3da
mov byte [ebp - 4], 0x37
cmp dword [esi + 0x14], 0x10
jb 0x437553
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3dc]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x33
call fcn.0041d9c8
mov esi, 0xfde9
lea edx, [ebp - 0x2c0]
push esi
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x38
cmp dword [eax + 0x14], 0x10
jb 0x4375a0
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
call fcn.0041d9c8
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x39
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x43761e
je 0x437617
sub eax, 0
je 0x437610
sub eax, 1
je 0x437609
sub eax, 1
je 0x437602
sub eax, 1
jne 0x437657
push str.REG_BINARY
jmp 0x43764c
push str.REG_EXPAND_SZ
jmp 0x43764c
push str.REG_SZ
jmp 0x43764c
push str.REG_NONE
jmp 0x43764c
push str.REG_DWORD
jmp 0x43764c
sub eax, 5
je 0x437647
sub eax, 1
je 0x437640
sub eax, 1
je 0x437639
sub eax, 4
jne 0x437657
push str.REG_QWORD
jmp 0x43764c
push str.REG_MULTI_SZ
jmp 0x43764c
push str.REG_LINK
jmp 0x43764c
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.0041de1d
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x3e0]
call fcn.0049d3da
mov byte [ebp - 4], 0x3b
cmp dword [esi + 0x14], 0x10
jb 0x43768c
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x39
call fcn.0041d9c8
mov esi, 0xfde9
lea edx, [ebp - 0x2dc]
push esi
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x3c
cmp dword [eax + 0x14], 0x10
jb 0x4376d9
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x39
call fcn.0041d9c8
mov ecx, dword [ebp - 0x3e4]
lea eax, [ebp - 0x29c]
push eax
call fcn.0043205f
lea ecx, [ebp - 0x230]
call fcn.0041d1e9
lea ecx, [ebp - 0x29c]
call fcn.00431fda
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 2
call fcn.00423a7a
inc edi
cmp edi, dword [0x4f51d8]
jl 0x437463
cmp dword [0x4e49d4], 1
jne 0x437b4a
push ecx
push 0
mov ecx, 0x4f5310
call fcn.0042718c
xor esi, esi
cmp dword [0x4f51f8], esi
jle 0x4377de
push esi
call fcn.004249ee
push eax
lea ecx, [ebp - 0x320]
call fcn.00423ac3
push 7
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x3d
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x24c]
call fcn.00484356
mov byte [ebp - 4], 0x3e
lea eax, [ebp - 0x308]
cmp dword [ebp - 0x2f4], 8
push ecx
cmovae eax, dword [ebp - 0x308]
push eax
push ecx
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x24c]
call fcn.0040a66b
lea ecx, [ebp - 0x24c]
call fcn.0043e797
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 2
call fcn.00423b33
inc esi
cmp esi, dword [0x4f51f8]
jl 0x437761
mov eax, dword [0x4f5318]
xor edi, edi
test eax, eax
jle 0x437b4a
xor ecx, ecx
mov dword [ebp - 0x3d8], ecx
test ecx, ecx
js 0x43701e
cmp edi, eax
jge 0x43701e
mov esi, dword [0x4f5314]
add esi, ecx
lea ecx, [ebp - 0x31c]
push esi
call fcn.0041d17f
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0x3f
push eax
lea ecx, [ebp - 0x304]
call fcn.0041d17f
lea eax, [esi + 0x30]
mov byte [ebp - 4], 0x40
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0041d17f
lea eax, [esi + 0x48]
mov byte [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0041d17f
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0x42
push eax
lea ecx, [ebp - 0x2bc]
call fcn.0041d17f
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x2a4], eax
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x43
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x29c]
push 0x4ba054
call fcn.00431f5c
mov esi, 0xfde9
mov byte [ebp - 4], 0x44
push esi
lea edx, [ebp - 0x31c]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x45
cmp dword [eax + 0x14], 0x10
jb 0x4378bd
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x44
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x46
cmp dword [eax + 0x14], 0x10
jb 0x4378fc
mov eax, dword [eax]
push eax
push 0x4ba060
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x44
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x2ec]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b5a20
mov byte [ebp - 4], 0x47
lea ecx, [ebp - 0x3dc]
call fcn.0049d3da
mov byte [ebp - 4], 0x48
cmp dword [esi + 0x14], 0x10
jb 0x437951
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3dc]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x44
call fcn.0041d9c8
mov esi, 0xfde9
lea edx, [ebp - 0x2d4]
push esi
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x49
cmp dword [eax + 0x14], 0x10
jb 0x43799e
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
call fcn.0041d9c8
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x4a
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x437a1c
je 0x437a15
sub eax, 0
je 0x437a0e
sub eax, 1
je 0x437a07
sub eax, 1
je 0x437a00
sub eax, 1
jne 0x437a55
push str.REG_BINARY
jmp 0x437a4a
push str.REG_EXPAND_SZ
jmp 0x437a4a
push str.REG_SZ
jmp 0x437a4a
push str.REG_NONE
jmp 0x437a4a
push str.REG_DWORD
jmp 0x437a4a
sub eax, 5
je 0x437a45
sub eax, 1
je 0x437a3e
sub eax, 1
je 0x437a37
sub eax, 4
jne 0x437a55
push str.REG_QWORD
jmp 0x437a4a
push str.REG_MULTI_SZ
jmp 0x437a4a
push str.REG_LINK
jmp 0x437a4a
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.0041de1d
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x4b
lea ecx, [ebp - 0x3e0]
call fcn.0049d3da
mov byte [ebp - 4], 0x4c
cmp dword [esi + 0x14], 0x10
jb 0x437a8a
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x4a
call fcn.0041d9c8
push 0xfde9
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x4d
cmp dword [eax + 0x14], 0x10
jb 0x437ad6
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x4a
call fcn.0041d9c8
mov ecx, dword [ebp - 0x3e4]
lea eax, [ebp - 0x29c]
push eax
call fcn.0043205f
lea ecx, [ebp - 0x230]
call fcn.0041d1e9
lea ecx, [ebp - 0x29c]
call fcn.00431fda
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 2
call fcn.00423e9b
mov ecx, dword [ebp - 0x3d8]
inc edi
mov eax, dword [0x4f5318]
add ecx, 0x7c
mov dword [ebp - 0x3d8], ecx
cmp edi, eax
jl 0x4377f5
cmp dword [0x4e49d8], 1
jne 0x437f57
push ecx
push 0
mov ecx, 0x4f5330
call fcn.00427369
xor esi, esi
cmp dword [0x4f5218], esi
jle 0x437beb
push esi
call fcn.00424923
push eax
lea ecx, [ebp - 0x338]
call fcn.00423b5e
push 7
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x4e
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x24c]
call fcn.00484356
mov byte [ebp - 4], 0x4f
lea eax, [ebp - 0x320]
cmp dword [ebp - 0x30c], 8
push ecx
cmovae eax, dword [ebp - 0x320]
push eax
push ecx
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0x24c]
call fcn.0041494a
lea ecx, [ebp - 0x24c]
call fcn.0043e797
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 2
call fcn.00423bea
inc esi
cmp esi, dword [0x4f5218]
jl 0x437b6e
mov eax, dword [0x4f5338]
xor edi, edi
test eax, eax
jle 0x437f57
xor ecx, ecx
mov dword [ebp - 0x3d8], ecx
test ecx, ecx
js 0x43701e
cmp edi, eax
jge 0x43701e
mov esi, dword [0x4f5334]
add esi, ecx
lea ecx, [ebp - 0x31c]
push esi
call fcn.0041d17f
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0x50
push eax
lea ecx, [ebp - 0x304]
call fcn.0041d17f
lea eax, [esi + 0x30]
mov byte [ebp - 4], 0x51
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0041d17f
lea eax, [esi + 0x48]
mov byte [ebp - 4], 0x52
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0041d17f
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0x53
push eax
lea ecx, [ebp - 0x2bc]
call fcn.0041d17f
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x2a4], eax
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x54
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x29c]
push 0x4ba054
call fcn.00431f5c
mov esi, 0xfde9
mov byte [ebp - 4], 0x55
push esi
lea edx, [ebp - 0x31c]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x56
cmp dword [eax + 0x14], 0x10
jb 0x437cca
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x55
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x57
cmp dword [eax + 0x14], 0x10
jb 0x437d09
mov eax, dword [eax]
push eax
push 0x4ba060
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x55
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x2ec]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b5a20
mov byte [ebp - 4], 0x58
lea ecx, [ebp - 0x3dc]
call fcn.0049d3da
mov byte [ebp - 4], 0x59
cmp dword [esi + 0x14], 0x10
jb 0x437d5e
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3dc]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x55
call fcn.0041d9c8
mov esi, 0xfde9
lea edx, [ebp - 0x2d4]
push esi
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x5a
cmp dword [eax + 0x14], 0x10
jb 0x437dab
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
call fcn.0041d9c8
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x5b
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x437e29
je 0x437e22
sub eax, 0
je 0x437e1b
sub eax, 1
je 0x437e14
sub eax, 1
je 0x437e0d
sub eax, 1
jne 0x437e62
push str.REG_BINARY
jmp 0x437e57
push str.REG_EXPAND_SZ
jmp 0x437e57
push str.REG_SZ
jmp 0x437e57
push str.REG_NONE
jmp 0x437e57
push str.REG_DWORD
jmp 0x437e57
sub eax, 5
je 0x437e52
sub eax, 1
je 0x437e4b
sub eax, 1
je 0x437e44
sub eax, 4
jne 0x437e62
push str.REG_QWORD
jmp 0x437e57
push str.REG_MULTI_SZ
jmp 0x437e57
push str.REG_LINK
jmp 0x437e57
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.0041de1d
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x5c
lea ecx, [ebp - 0x3e0]
call fcn.0049d3da
mov byte [ebp - 4], 0x5d
cmp dword [esi + 0x14], 0x10
jb 0x437e97
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x5b
call fcn.0041d9c8
push 0xfde9
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x5e
cmp dword [eax + 0x14], 0x10
jb 0x437ee3
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x5b
call fcn.0041d9c8
mov ecx, dword [ebp - 0x3e4]
lea eax, [ebp - 0x29c]
push eax
call fcn.0043205f
lea ecx, [ebp - 0x230]
call fcn.0041d1e9
lea ecx, [ebp - 0x29c]
call fcn.00431fda
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 2
call fcn.00423ec6
mov ecx, dword [ebp - 0x3d8]
inc edi
mov eax, dword [0x4f5338]
add ecx, 0x7c
mov dword [ebp - 0x3d8], ecx
cmp edi, eax
jl 0x437c02
cmp dword [0x4e49dc], 1
jne 0x438290
xor edi, edi
cmp dword [0x4f5238], edi
jle 0x438290
push edi
call fcn.004246c8
push eax
lea ecx, [ebp - 0x338]
call fcn.00423c1d
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x5f
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x29c]
push 0x4ba054
call fcn.00431f5c
mov edx, 0x4ba08c
mov byte [ebp - 4], 0x60
lea ecx, [ebp - 0x3dc]
call fcn.0049d3da
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x3fc]
push dword [eax]
call fcn.0041e76e
mov byte [ebp - 4], 0x62
cmp dword [eax + 0x14], 0x10
jb 0x437fdc
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
call fcn.0041d9c8
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x60
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
push 0xfde9
lea edx, [ebp - 0x320]
lea ecx, [ebp - 0x3fc]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x63
cmp dword [eax + 0x14], 0x10
jb 0x43802b
mov eax, dword [eax]
push eax
push 0x4ba060
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0x60
call fcn.0041d9c8
push 0xfde9
lea edx, [ebp - 0x308]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b5a20
mov byte [ebp - 4], 0x64
lea ecx, [ebp - 0x3e0]
call fcn.0049d3da
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x3fc]
push dword [eax]
call fcn.0041e76e
mov byte [ebp - 4], 0x66
cmp dword [esi + 0x14], 0x10
jb 0x438095
mov esi, dword [esi]
cmp dword [eax + 0x14], 0x10
jb 0x43809d
mov eax, dword [eax]
push esi
push eax
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3fc]
call fcn.0041d9c8
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x60
call fcn.0041d9c8
mov esi, 0xfde9
lea edx, [ebp - 0x2b8]
push esi
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x67
cmp dword [eax + 0x14], 0x10
jb 0x4380f4
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x248]
call fcn.0041d9c8
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x68
mov eax, dword [ebp - 0x2d4]
cmp eax, 4
ja 0x438172
je 0x43816b
sub eax, 0
je 0x438164
sub eax, 1
je 0x43815d
sub eax, 1
je 0x438156
sub eax, 1
jne 0x4381ab
push str.REG_BINARY
jmp 0x4381a0
push str.REG_EXPAND_SZ
jmp 0x4381a0
push str.REG_SZ
jmp 0x4381a0
push str.REG_NONE
jmp 0x4381a0
push str.REG_DWORD
jmp 0x4381a0
sub eax, 5
je 0x43819b
sub eax, 1
je 0x438194
sub eax, 1
je 0x43818d
sub eax, 4
jne 0x4381ab
push str.REG_QWORD
jmp 0x4381a0
push str.REG_MULTI_SZ
jmp 0x4381a0
push str.REG_LINK
jmp 0x4381a0
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.0041de1d
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x3d8]
call fcn.0049d3da
mov byte [ebp - 4], 0x6a
cmp dword [esi + 0x14], 0x10
jb 0x4381e0
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3d8]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x68
call fcn.0041d9c8
push 0xfde9
lea edx, [ebp - 0x2d0]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x6b
cmp dword [eax + 0x14], 0x10
jb 0x43822c
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x68
call fcn.0041d9c8
mov ecx, dword [ebp - 0x3e4]
lea eax, [ebp - 0x29c]
push eax
call fcn.0043205f
lea ecx, [ebp - 0x230]
call fcn.0041d1e9
lea ecx, [ebp - 0x29c]
call fcn.00431fda
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 2
call fcn.00423ca3
inc edi
cmp edi, dword [0x4f5238]
jl 0x437f72
cmp dword [0x4e49e0], 1
jne 0x43869d
push ecx
push 0
mov ecx, 0x4f5350
call fcn.00427546
xor esi, esi
cmp dword [0x4f5258], esi
jle 0x438331
push esi
call fcn.00424b7e
push eax
lea ecx, [ebp - 0x338]
call fcn.00423cd9
push 7
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x6c
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x24c]
call fcn.00484356
mov byte [ebp - 4], 0x6d
lea eax, [ebp - 0x320]
cmp dword [ebp - 0x30c], 8
push ecx
cmovae eax, dword [ebp - 0x320]
push eax
push ecx
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0x24c]
call fcn.00418ff8
lea ecx, [ebp - 0x24c]
call fcn.0043e797
lea ecx, [ebp - 0x338]
mov byte [ebp - 4], 2
call fcn.00423d65
inc esi
cmp esi, dword [0x4f5258]
jl 0x4382b4
mov eax, dword [0x4f5358]
xor edi, edi
test eax, eax
jle 0x43869d
xor ecx, ecx
mov dword [ebp - 0x3d8], ecx
test ecx, ecx
js 0x43701e
cmp edi, eax
jge 0x43701e
mov esi, dword [0x4f5354]
add esi, ecx
lea ecx, [ebp - 0x31c]
push esi
call fcn.0041d17f
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0x6e
push eax
lea ecx, [ebp - 0x304]
call fcn.0041d17f
lea eax, [esi + 0x30]
mov byte [ebp - 4], 0x6f
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0041d17f
lea eax, [esi + 0x48]
mov byte [ebp - 4], 0x70
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0041d17f
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0x71
push eax
lea ecx, [ebp - 0x2bc]
call fcn.0041d17f
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x2a4], eax
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x72
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x29c]
push 0x4ba054
call fcn.00431f5c
mov esi, 0xfde9
mov byte [ebp - 4], 0x73
push esi
lea edx, [ebp - 0x31c]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x74
cmp dword [eax + 0x14], 0x10
jb 0x438410
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x73
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x75
cmp dword [eax + 0x14], 0x10
jb 0x43844f
mov eax, dword [eax]
push eax
push 0x4ba060
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x73
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x2ec]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b5a20
mov byte [ebp - 4], 0x76
lea ecx, [ebp - 0x3dc]
call fcn.0049d3da
mov byte [ebp - 4], 0x77
cmp dword [esi + 0x14], 0x10
jb 0x4384a4
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3dc]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x73
call fcn.0041d9c8
mov esi, 0xfde9
lea edx, [ebp - 0x2d4]
push esi
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x78
cmp dword [eax + 0x14], 0x10
jb 0x4384f1
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x248]
call fcn.0041d9c8
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x79
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x43856f
je 0x438568
sub eax, 0
je 0x438561
sub eax, 1
je 0x43855a
sub eax, 1
je 0x438553
sub eax, 1
jne 0x4385a8
push str.REG_BINARY
jmp 0x43859d
push str.REG_EXPAND_SZ
jmp 0x43859d
push str.REG_SZ
jmp 0x43859d
push str.REG_NONE
jmp 0x43859d
push str.REG_DWORD
jmp 0x43859d
sub eax, 5
je 0x438598
sub eax, 1
je 0x438591
sub eax, 1
je 0x43858a
sub eax, 4
jne 0x4385a8
push str.REG_QWORD
jmp 0x43859d
push str.REG_MULTI_SZ
jmp 0x43859d
push str.REG_LINK
jmp 0x43859d
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.0041de1d
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x3e0]
call fcn.0049d3da
mov byte [ebp - 4], 0x7b
cmp dword [esi + 0x14], 0x10
jb 0x4385dd
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x79
call fcn.0041d9c8
push 0xfde9
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x7c
cmp dword [eax + 0x14], 0x10
jb 0x438629
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x79
call fcn.0041d9c8
mov ecx, dword [ebp - 0x3e4]
lea eax, [ebp - 0x29c]
push eax
call fcn.0043205f
lea ecx, [ebp - 0x230]
call fcn.0041d1e9
lea ecx, [ebp - 0x29c]
call fcn.00431fda
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 2
call fcn.00423ef1
mov ecx, dword [ebp - 0x3d8]
inc edi
mov eax, dword [0x4f5358]
add ecx, 0x7c
mov dword [ebp - 0x3d8], ecx
cmp edi, eax
jl 0x438348
cmp dword [0x4e49e4], 1
jne 0x438ab7
push ecx
push 0
mov ecx, 0x4f5370
call fcn.00427723
xor esi, esi
cmp dword [0x4f5278], esi
jle 0x43874b
push esi
call fcn.0042485e
push eax
lea ecx, [ebp - 0x320]
call fcn.00423d98
push 7
pop ecx
xor eax, eax
mov byte [ebp - 4], 0x7d
lea edi, [ebp - 0x24c]
rep stosd dword es:[edi], eax
lea ecx, [ebp - 0x24c]
call fcn.00484356
mov byte [ebp - 4], 0x7e
lea eax, [ebp - 0x308]
cmp dword [ebp - 0x2f4], 8
push ecx
cmovae eax, dword [ebp - 0x308]
lea ecx, [ebp - 0x24c]
push eax
push dword [ebp - 0x2c0]
push dword [ebp - 0x2a4]
call fcn.0049b420
lea ecx, [ebp - 0x24c]
call fcn.0043e797
lea ecx, [ebp - 0x320]
mov byte [ebp - 4], 2
call fcn.00423e08
inc esi
cmp esi, dword [0x4f5278]
jl 0x4386c5
mov eax, dword [0x4f5378]
xor edi, edi
test eax, eax
jle 0x438ab7
xor ecx, ecx
mov dword [ebp - 0x3d8], ecx
test ecx, ecx
js 0x43701e
cmp edi, eax
jge 0x43701e
mov esi, dword [0x4f5374]
add esi, ecx
lea ecx, [ebp - 0x31c]
push esi
call fcn.0041d17f
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0x7f
push eax
lea ecx, [ebp - 0x304]
call fcn.0041d17f
lea eax, [esi + 0x30]
mov byte [ebp - 4], 0x80
push eax
lea ecx, [ebp - 0x2ec]
call fcn.0041d17f
lea eax, [esi + 0x48]
mov byte [ebp - 4], 0x81
push eax
lea ecx, [ebp - 0x2d4]
call fcn.0041d17f
lea eax, [esi + 0x60]
mov byte [ebp - 4], 0x82
push eax
lea ecx, [ebp - 0x2bc]
call fcn.0041d17f
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x2a4], eax
push 0x50
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 0x83
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x29c]
push 0x4ba054
call fcn.00431f5c
mov esi, 0xfde9
mov byte [ebp - 4], 0x84
push esi
lea edx, [ebp - 0x31c]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x85
cmp dword [eax + 0x14], 0x10
jb 0x43882a
mov eax, dword [eax]
push eax
push str.root
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x84
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x304]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x86
cmp dword [eax + 0x14], 0x10
jb 0x438869
mov eax, dword [eax]
push eax
push 0x4ba060
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x84
call fcn.0041d9c8
push esi
lea edx, [ebp - 0x2ec]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b5a20
mov byte [ebp - 4], 0x87
lea ecx, [ebp - 0x3dc]
call fcn.0049d3da
mov byte [ebp - 4], 0x88
cmp dword [esi + 0x14], 0x10
jb 0x4388be
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3dc]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x84
call fcn.0041d9c8
mov esi, 0xfde9
lea edx, [ebp - 0x2d4]
push esi
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x89
cmp dword [eax + 0x14], 0x10
jb 0x43890b
mov eax, dword [eax]
push eax
push str.value
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x248]
call fcn.0041d9c8
and dword [ebp - 0x220], 0
xor eax, eax
mov dword [ebp - 0x21c], 7
mov word [ebp - 0x230], ax
mov byte [ebp - 4], 0x8a
mov eax, dword [ebp - 0x2a4]
cmp eax, 4
ja 0x438989
je 0x438982
sub eax, 0
je 0x43897b
sub eax, 1
je 0x438974
sub eax, 1
je 0x43896d
sub eax, 1
jne 0x4389c2
push str.REG_BINARY
jmp 0x4389b7
push str.REG_EXPAND_SZ
jmp 0x4389b7
push str.REG_SZ
jmp 0x4389b7
push str.REG_NONE
jmp 0x4389b7
push str.REG_DWORD
jmp 0x4389b7
sub eax, 5
je 0x4389b2
sub eax, 1
je 0x4389ab
sub eax, 1
je 0x4389a4
sub eax, 4
jne 0x4389c2
push str.REG_QWORD
jmp 0x4389b7
push str.REG_MULTI_SZ
jmp 0x4389b7
push str.REG_LINK
jmp 0x4389b7
push str.REG_DWORD_BIG_ENDIAN
lea ecx, [ebp - 0x230]
call fcn.0041de1d
push esi
lea edx, [ebp - 0x230]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov esi, eax
mov edx, 0x4b90ac
mov byte [ebp - 4], 0x8b
lea ecx, [ebp - 0x3e0]
call fcn.0049d3da
mov byte [ebp - 4], 0x8c
cmp dword [esi + 0x14], 0x10
jb 0x4389f7
mov esi, dword [esi]
push esi
push dword [eax]
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x3e0]
call dword [sym.imp.mfc140u.dll_Ordinal_1046]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x8a
call fcn.0041d9c8
push 0xfde9
lea edx, [ebp - 0x2bc]
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x8d
cmp dword [eax + 0x14], 0x10
jb 0x438a43
mov eax, dword [eax]
push eax
push str.is64
lea ecx, [ebp - 0x29c]
call fcn.00432031
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x8a
call fcn.0041d9c8
mov ecx, dword [ebp - 0x3e4]
lea eax, [ebp - 0x29c]
push eax
call fcn.0043205f
lea ecx, [ebp - 0x230]
call fcn.0041d1e9
lea ecx, [ebp - 0x29c]
call fcn.00431fda
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 2
call fcn.00423f1c
mov ecx, dword [ebp - 0x3d8]
inc edi
mov eax, dword [0x4f5378]
add ecx, 0x7c
mov dword [ebp - 0x3d8], ecx
cmp edi, eax
jl 0x438762
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0x3d4]
call fcn.004320c1
call fcn.0046560c
mov dword [ebp - 0x370], edx
lea ecx, [ebp - 0x3dc]
mov edx, 0x4ba2d0
mov dword [ebp - 0x374], eax
call fcn.004142f5
mov byte [ebp - 4], 0x8e
lea ecx, [ebp - 0x374]
push dword [eax]
lea eax, [ebp - 0x2a0]
push eax
call fcn.00421152
lea ecx, [ebp - 0x3dc]
mov byte [ebp - 4], 0x90
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0x38c]
call fcn.0041d3b9
mov byte [ebp - 4], 0x91
lea edx, [ebp - 0x38c]
cmp dword [ebp - 0x378], 8
lea ecx, [ebp - 0x218]
cmovae edx, dword [ebp - 0x38c]
call fcn.00471eea
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x230]
call fcn.0041d3b9
push 0xfde9
lea edx, [ebp - 0x230]
mov byte [ebp - 4], 0x92
lea ecx, [ebp - 0x248]
call fcn.0043a1d7
pop ecx
mov byte [ebp - 4], 0x93
cmp dword [eax + 0x14], 0x10
jb 0x438b7e
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x3d4]
call fcn.00432170
lea ecx, [ebp - 0x248]
call fcn.0041d9c8
lea ecx, [ebp - 0x230]
call fcn.0041d1e9
lea ecx, [ebp - 0x38c]
call fcn.0041d1e9
lea ecx, [ebp - 0x2a0]
call dword [sym.imp.mfc140u.dll_Ordinal_1045]
lea ecx, [ebp - 0x3d4]
call fcn.00429101
call fcn.0042db44
ret