Function at 0x42ff10
Capabilities:
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x543faf
mov eax, dword fs:[0]
push eax
mov eax, 0x2a7c
call fcn.004741b0
mov eax, dword [0x672114]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, 0x55
mov eax, dword [ebp + 0xc]
mov esi, str.A8u6fndr8dhecnO9jYwQzKAq8AoeO3ydm6hfjIA1V99j4qc2GY7u7ZbOmxWnKkUClUyXiNlqZ1VRAoVBaHHN8QfB35Ap82dvqNrbdiqyZLkDu0Sz85Am634aeF69KWc5PLI9yPukbuYIhGrROEYAfhfwXxCBBUVue7uboV5D3kXr5uwkQua143oFsxbIbhKXHSBJQOvzxqQZcBkLPiK4ipjsC0GL4i4T4J3jV8c9CQhsdd5t9SSIycqgb058FfcnqNId4toyi6EKYGTONZ9ykmtV13tMoRKoca8cuVDkpXFurm6uzzbKmjfeR7vSxCAcvSq1H5aFkucs81WK9xi
mov ebx, dword [ebp + 8]
lea edi, [ebp - 0x614]
mov dword [ebp - 0x2a88], eax
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x60
lea edi, [ebp - 0x798]
mov esi, str.ihEXoqBbqujtlFTSnFY1Vq6ZxsMikfzMROo4SLPE8DZcD8GE1WgwUgFNAdWeJnFX9poZ085J3jqZFvlIdra1T8xzuIC88Fk1RoSStUyT7cKnxLHyJOpNKVgtoKdgXu9dm7zxLv6DYu8I0Fq1xi8GxYFd9vV0y7aagnv31WqUgXMYSTrHqzlrpiW7VJKpE3gl6Z2tGlJaYmgeTckKCztNcEdOT4iEQ3xIvcJLNibg69jX0JlR5hpnG6psRwjha5JgklF2p5kDkTwoMBeyRmba0vWKzCSDk6U6UzPp0XVl371SpVHeImTWoc8TwirHO9l0v0vthnbVFbo3ehZTl0C6GTvslkqEgZqMiukzXKPuckyzGc8Xs6YxW5NAHyG76jroll
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x71
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.5KvXvp1D6HtKwuNfRxllXuB9YPnUIZWHxNu0JPOBETk79Zq2D3fJQZQlsXZLIaFMvDK2cKC9zogEbi37iz0hz8wYaca3bcNKCJsNRvTP320JfOPBfJm2HHdwU30C5H7X8KeG7dnssUBECqjJLAZOIIkuB7fznlHpoad3YzemtMi4UYYMMyL3iCF0sGusQ96iy648JXkbWS1SCUpcB8z3Hb4GkAQk6ZNptPiWLT7yDGB3hAIvf9q0w9OTMNZeAJTGTVsOVVTFpmnIHoarAz0filLZKMcKVzT1mXos2TKf75tmrQqkyQdSesfY18a672JNg03YgexrXJgrKTJBQavTDF4k6k4yjH0CMyzAz3qpO6TILXa4BbdpG1eT332nzNDYiBBNNrq1PZLnGePbOPSXPrSMTjnI52WH84yCfyCo1uFEWnK9mynKObadDH0dpDolgR5Tx
lea edi, [ebp - 0xcc0]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6c
movsw word es:[edi], word [esi]
mov esi, str.zm8jXg0iKUKRzZhEQiC15keEABuNCgGI5wXsiFiLpctgqvtExK2IZJ9xce4GrGBjsafCtnKevr6zwQSjfH4wbSxjjfFJiyhwh2gyYhPesyLCfHZwQTnPUNPE9OcjM78TRzRjg5NlKANvzJFHE8YpbNHAkuP3smbmCYQcmcYR4LLUpt2qyS48zmoFeX3kAk5LOxn48lhVuFJxFxFwKUXZWVZxDR5m7WeKT3Y8Rr6Fh11SRMdN36YO0oQ7hporKtVIPkhWhe10qlnTntqxkGSbp6pbLnihoqjJWUelmzcj1S1iCapOULBcMWIF8nUBzhyh4iBrE73F3oyfZSw41ZiGN7XeYJtbm5kllQgTFbefPwiJIGbUfaaZSuO0mXOibIORs8koEZAUlGGL4owAcO6TgDWI3YE5EUO1vQtt9p2esCJskC7g
lea edi, [ebp - 0x94c]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x70
movsb byte es:[edi], byte [esi]
mov esi, str.rVhJLRHoG5kMK7Zxaqu4dKfhqa8fLGMumVlCVo65W2qj0NBHt4Pc93s7ebSQtMtkVNPDrenv6WuO2dOblVE1BOX1Do6k4cv6woZUEFMlDTZatmq2ZORyY4gtLwjjteS9iK3zDWlwuMwyRFfDHzqa8tb8iz3jgndhxU4MtuGLuAxqtLSodyaoUzBPo4QzH2LEdVQyQJqABgHQE0naFkj4UuWkCBYPwkbumwvoZADwugr29jz0vATMKEIoziHIHD0TmqgbXgFiWZ5yJ9DtQOJ823ZwYzCiZohQgLHrPoR6YS3PNe9Ywd7dELfR5Nnqqs0Fku41slXpHbJD1pUjpjx0LFZqZI8KGs6usgjvx3Di4Y3cpjelfH18JURFoaFBWi1w1riCGNxAVG9A2rrhyAMGWMOVgFF0YyRLHuVOhmVO21eh4KdEJTuD8MEtfYAKpSX7
lea edi, [ebp - 0xe84]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7c
movsb byte es:[edi], byte [esi]
mov esi, str.UH3H86OO1ofXQZBlR1jiBNoEzSxAtfYIsPbIka1T7js7iTk14dn2udKFo10MWTOjFmoAsn4BWWoFFbMxa6KkiEq8vHgZvMmAJzwy0qZgBv8Vxw8m2dur7JXmD3rHFmAdjMfbKXRg3EIDl8EEgw4Ze4Dzf5pYypzAAT9PdAXAk7ghIfTIZ3dSi1GozoPKhDrs4ht9E7NsPCXbLGz2FDcSXYMwWCb8Kqr3Mtj3UYiWhUTCfGp7o2VD6Prmant2HbgDTYwYaa4ypj4CEhR6LEbFuZdLJnMK3s2gSOrEdXHb2p2oPqnzfMRpAHFoe8XnABVuwTiTlJlSmTLqHWCt5P0ZI0tNs7LNVeQWTikBSfGAsjapq1fPQtDLdOO4VSNcFelAGDMKlNcWJyJY9QK0muSGkEEYYPJ2B1Eg4CInwfuIjH8OPwQ4WzsaRk6H6AuB4T05pMREKyv0ddqVfooprWOt4tOt6oFK2xxXqFu3VVL6c85XSiNaYH
lea edi, [ebp - 0x2a04]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x78
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.iSVaZEN1jyexGwdOF1oridIPqa3EOjjD1dbCvHl96zvcioMwz1S0FqXdkk21evqaVRqNPaVP6LriDDk0GEJjV8gOPXChOjyE9FBcrBuQjXroGR6dnZ0GQwt8KTW9xBSAKVk4RFQDPYbm3708jV5E3MW2PNlPN9xSYLbIGbLOuYsz8u8Q14uYzSJnqdrWJ1KN53zKUsZWzeax8sAJBZy3bfU6cFsxlIl2Tj1Z9fBGOVRV38fYLdY6NRCydB920pxLuBumLFMmSKScFVP04euVP2rnhzs83AuJPwKft0AR8WHg0uqV4tJNFFtT6x1KZq69Ypfp1UL9T5st0aTtBb5XaH1fTHsFIeCGFc3v9kiqmiuoiDYc73HDnBF4OdPeGfejs6pKO2Nqhaj7sOTEzAaceGjJlhvRxhkghOPNcEGJ4QwqAqO55w75b8xtgUcZbRWitJRgh6Zvx1aeRjjApOZV4ifBl1CBmzNK
lea edi, [ebp - 0x2438]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x60
movsb byte es:[edi], byte [esi]
mov esi, str.pFI945nVbzxpeh3VXvRBd8NL4MAfgJktroO4n2kddO1i0OfFznbXe0oz88LXgoBM4sVYDUiMAQEe2qnqOmt8I3vRQIE3KSg3n3jU3kEDUaYJCUHKbvxq1a4gFg2po1ou50jpxppMgQU87UzR1rST0XcosMs2G871uEqIEFIOTf4TUG5WBs8VwszKLTkWWxIpbVijcEhTyZW6toO799kfHttXj9hugLz6PvT3leb0P2psOOm4FVqjEsGLjMQ0U0uoeEDd1Sx3UBvcYi27Yzn7KKBGZ9HJzl7pNyoV35sml1clbylzDhBMmjpG2kXwl1xSJyMWoxnHXOS2DqQg6nsecTVXT95CLVHdZmuJfcIo5g3Y3s9xupwBNRVRjwqB7134Iz
lea edi, [ebp - 0x1578]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x75
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.K1tjOt34nh1VTcwB36Hg3HztZ4tzw4ckV4KjJyYLERUPRne9UvXfy7RcQCnkDoaP1bRC7jqGM70m7NsPNzDxyQFWOE5ylPqh2PENXcn2PT15X7J6Pe5vqB2UrNTBMl4BO0kExiTXzzEIf2NALXmx2Ua38F8ce7tVURdvlYPhsw81yg9Knloqv3CGvBs3l479kZPpyRykKpnjA4MfwRdjFgIHEz7sWpicNf97BJnEdzlO6fWU2Smk7d2TMhADtNwD4QdCuRMIrNTmVcHf9nLkjMDXVJL7AmxJeAnrgwe83ePSm2wvKyCzbqpJxMI2Ezzy5GjwjuAKotTxf1TlBBtx5HzQsHj6ZcDXfPVI14Nj2szDcQgMAlqqrjVj77hRDKdCSPTspmIrcGGywM2thFKxuZfQCv0trhYB8DKTt8jz7DFS2MfmmVXfiHcmxUSzjTT0zmcetUgYgDfT0oVQYc51g5
lea edi, [ebp - 0x2078]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x36
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.Wxa3loGl8KrbnUEhriB8uhdGQTgDIztdjI3fF3TbY8PUJKQYQ1yDUMCM620Z8ltcAGqvA7SlLlcZjH5CrOXsz1tithRN4w43TJbn1GyXqLF4btWNWcvh0jCc89d5Jg4fvvDbrsAjtoR5q0tJwMbCpfXOwvn5y9X1JG64D1NBRQl5lv3Lfzw0xSURAGsE5Rg1CDwEqBYxBVRsbavWVrqbahZ
lea edi, [ebp - 0xaf8]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x42
lea edi, [ebp - 0x107c]
mov esi, str.qu7UI6xKTgeVwtz4ahWmcxEYEY1fMzdg21VbyUI58T7WlVIS87REZh2vkJ61s2ecHRzYJ53poTGcD1oXusaidimJvd0HdYjXnEeNTC8ja4INFHXwb53A44lykj6Hq8Z6ycueBxak4O3p97srxSm4cHmscwBrgDmv5AwHPSLmrLGOIcwqY0lSV5VYnNujea7I7sVigY9h2zzn1a8n8VYIY9txWaN0IkPUsYFGWVpmPfUp8sU5N2O3IDTa0g7czFCBWhOP5vDhh
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x7b
movsw word es:[edi], word [esi]
mov esi, str.4Oa04g3Hdi7bL18IF7FwjJpdrlfORABC9UEzcIReTzwcXIZ8VkFwrwRaNhKBBL6tGOLAjOfrTfwAVgRBQ6NEJ8IotpfcHzfVxAsOFpFID82fqfB2fzHnYq6H4tE9AiieI0N7yRozpZa1rCMiNjtU2YMqjVtRwP4qVwtZ2Agfm9p0uikYLqcxYcVDiFx3vVoHlgng8uJD9U4EsMAGrZJOn87srQO9mjlQRhhG2MEEMhiqC0JVu13CcH1oAcQwFTupnxQGdPObEX2p5Iz69HZyVT2XWvV5E5pIEiBwarN2KNSA1wKpCOx3HwDnvGx67HySrJxcIQEPvyJZBzlXcE24tdawwPph49px7OBdTlGvdNoj6jw96mp8FE4tMmfIk2XJQjVlasGiVNXyRHGOj0lWj9AipL2x7qwkJAMiQroQe51JjuXnnrma929jcLkFYdpbrYHipU1dYr7MSDwavd1sJyuI4w2oRks2Qlc9cqUpYGND
lea edi, [ebp - 0x2810]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x79
movsb byte es:[edi], byte [esi]
mov esi, str.Razuk1NfX97KkGMt72ft9op8jNrbrsXzoOzNEODUivDHV0n5IzpSuwycDThglsbC6xATTGCkoDODbopibD9pOrxFA71iCR1vD1XWcD45Q5DUDp9hj0Tczo5bm0WpjlgDKD8fxnTq6CE838pqmFlJkJse8RroYCKoWAmpkK6b6hocPABq693wfV0GI6isqAQHJOC82pvRK7IYcgQM3bgtPVZWXMbnxjETHWw1DkQW4QDHA8kRtmli5baEjmE47PzFBhZvKSiEFjULRtjtvdQYiSTNEn0zsl6iXQopKidspr1H3gHFHWyFjPFxkbU6gdaWFWdwIQDPeg4BAbdo3QpwaZLthvQVSArQA5HwKnAGdMX3nZBKGsCYNmar0Ki9oT7LQMReU0seWmdD8fDmKIs1mfK3nEDto4woGmaLSXKjp6d1vzU7f5hoF7y52rj4ic9gjTFlOfEuGavBnPy0j84cAC91jXg1TQCtUE6thP
lea edi, [ebp - 0x2620]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x55
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.017VY6OGoiTxvSss2sKPErNRwtcW4hKHJBy63I2nNddaWvifCkGMWz1G8esghct3zmwO6f2AMaDmcrC4yAYXQIJTJVFkHFCCVqqlwFY2wYSe6tKTE7Iu4DuV0AylOaIEACZPOH3sFRxq7lfqg9qVb4geOUXwF5q9fKdQnhSmOw4WDhXPYBHJCN5WLfG8p8D01gFbnBuiU04uRycrBb3CcDapuT6mcbHzD8QOtg0fCw6tK4Q6ErEUEzLEMlUkxTdEAYmVz4iy1BTkDUtxJMprJ2obScH13g0WBVspT17whxKhdT6SzeNSN7CWv00cLemVyFZIJ3OsTELzCXZ3f9oBWh
lea edi, [ebp - 0x13f4]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x40
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.wIr0HAKF3CaCsSayZzGAiocKSh2pGjVt3h1hbkN3i4VNR5BFouiodAPApwfJQGrOvmjMnE1txAQ5CxS3WzZlBAGGXnuJbnXROneiayQWSq9tHuDYIVTUkZH3QjNXpiTFiLQ5X7ISrE6AE97TgASDt91sAmmmsy052UHIOJui2HxXXT8OlOPGEGiSJln16JSggB4W24jnRoKo4KWahDC095Ah2VHC3AFJm1l4kPgIJ3z0eRPu8Ufmj9m6VBCqEZCi
lea edi, [ebp - 0x129c]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov ecx, 0x35
mov esi, str.8mDGRAjzLCaRmn8Nu8xDxD8m0kgEUQk7BqXnCXXMVeibvhHAffSt4dpY48lwYBYEhj3QReJ2w9THCTxbSx9TskuPcIqsvJ4e6SIdLrTGG7sDrJ2bkqjZqseynM7fHcy9vsGKEhUQcAGyCOmV0IlKjI6g3IhuMyOmYMicbYHY34xaugMHtkGP6nOKPvfhXBN5rqX51kVobwAvSb1xFYH
mov dword [ebp - 0x2a70], 0
lea edi, [ebp - 0xa20]
mov dword [ebp - 0x2a6c], 0
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x6e
mov dword [ebp - 0x2a68], 0
mov esi, str.DLjZs9g5xkDm48SPDX97ldMmqneLBOOjDsAw5sQt1I4zromv2pNlYYfwFeQcO2PRPymr5PYnSYG3OEV9ADcSFqpoIXylkAfuhEQzAhdbcoyTRBgX8LDZJDjWEoEcITeu3pGzac9S4STS0lY3DvXaaCdbprWltJTxP6HvJDliXeKI6OLftnJ5LMRIQt7foemmqTmTSX8Hjpf3HHK4r01rfhSoewl0oB9VFByJDzfMdxhz4lcAsaVF1o9LScWoPcTmICNpfqPlqOzqASc339gD9wTB1PeVqdtnYknGQlBJFlLc7k50t4g6kzpIV93MmMOUM2MLh51NZ1hmALFbM74j7xGCrrexTGR47q7V6VhuAkyVKwv41sCEq9GpkHpAOPqvtzgYBDGWd2PCCUYhNnGkL5diYl6Duh2S3A6iwfgbVnQHKB4IEzrGuLtdqM
lea edi, [ebp - 0x1ccc]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x61
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.A6SorifEb9vjlwmb1NFeGrS2nZMV8B8HEnKtzKZmphfzzXoH3ER3RRrimwSfcNP37N02xzOp96YGrnHTVZlOd9FU9gfcJ1NwYNGyIMma7gbJsNBVvcXKxvP2db1f9lkObimUMc9cfu9KhKRZOtghBwNXPK0W65tYJarzfomi7V6kfQ7I2vgCyPlo5mnK27K6rc5FN41O3OB8qgLQdRMqFdx3uxmMsBoY0BYo4glf4S64ErZ8AB999nfDNALNM5tNCQutX8SmaMYZyC8INOsswtVUnEXq2Q01yEnQ0orh8Q9g3DiaM5vCs62zmFoFVvuOZHiWN5FVepQ7OVDlDpe6hQDxsisZPogXkqdk8LFBOkEnxJcGIEVRaAfnRWJnkEnLWiht
lea edi, [ebp - 0x1700]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x76
movsb byte es:[edi], byte [esi]
mov esi, str.LdaibKhfhdWEXKxL68ON0H7mIBuwto4ZEduId6uHt4GXv8tgg9sCRT4sZ7ZISVBWMHg7vQxV17m3fva5gd3N1JNodGp6MrNZWPX1YA6eTKpvq7eGiGKIHtpmfADFCRFgPp6a8q8obDMtgpk877rT8oO2kUdjtci9FKOC4MA8AhWr3uTdXhn9XsD6JPYE9zVApCrMdn0CewzVawiX42RssbfTtA7cbJKB8dW0mdHYBWkvTPIbXM1EIvorqgMO6VX1fCrOGzjUgWDiFd1xKaAPI4mJbBg4EbXUdd1hvt86FOOustEZ7OJpAhcx5Wo6A6AuGsYjeQWfea9ReOgREGCDeGzKm0x8lAvTRh0qovGhp8H9UwJRFbI7k1mjvhM28bIaLnPKpMbaYFnffPIoDX0Falhf5khJ4qHZvIx5uOoM27SNOmIq0UJ0qGkHGIjlNPj4S8Xx0BwijAEDMdgRWcsKBck1l
lea edi, [ebp - 0x2254]
rep movsd dword es:[edi], dword [esi]
mov ecx, 0x74
movsw word es:[edi], word [esi]
mov esi, str.DTuMnpE37tgLsMaRkK9GrsWRHJtboXCdHHax2EtlTLHP6c2IrwiQbVIcrxyRFltx6wewvU8HIBfEi7Lp7fWxNmcZycYL78GFJrAoo9tt8Stet5gQqj0EKTaW2nuZYBdctxx34OnATeWDHSgJkiye8qaL0w2BzK8qJ0gXCRumL7zDOqrG2dyeISLhubZXcVsiy4fFdZQ2QUWF4ni4FKp2Ljfg59Lq2R4nEdZXGTSjOZVAtsOi75zIMyswtgFzHaMilhHThWVkUjxkO3erPvGIKLlmYYgvMkH0IWMfcW0lpbR9xzjr0qs0jt7Eay9Ob7ILSTVreNEnLanA90pnZMdxcRDCPfZd55e2z6c2RttxDWPJbU9yOpphsHoCZvs0N1DklJiqGI6SWjNC1oUYIhNsJd9INB1DQVEpzDOJBQuHvpH5aOa08nMnEQwbP5xkVrS8VKimI86hDwuDy0e4jD
lea edi, [ebp - 0x1ea0]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x614], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x2a08], 0xf
mov dword [ebp - 0x2a0c], 0
mov byte [ebp - 0x2a1c], 0
jne 0x430127
xor ecx, ecx
jmp 0x430139
lea ecx, [ebp - 0x614]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430130
sub ecx, edx
push ecx
lea eax, [ebp - 0x614]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.00407f10
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430184
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
cmp byte [ebp - 0x798], 0
mov dword [ebp - 0x2a08], 0xf
mov dword [ebp - 0x2a0c], 0
mov byte [ebp - 0x2a1c], 0
jne 0x4301ac
xor ecx, ecx
jmp 0x4301be
lea ecx, [ebp - 0x798]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4301b5
sub ecx, edx
push ecx
lea eax, [ebp - 0x798]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.00407f10
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430209
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
cmp byte [ebp - 0xcc0], 0
mov dword [ebp - 0x2a08], 0xf
mov dword [ebp - 0x2a0c], 0
mov byte [ebp - 0x2a1c], 0
jne 0x430231
xor ecx, ecx
jmp 0x430249
lea ecx, [ebp - 0xcc0]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430240
sub ecx, edx
push ecx
lea eax, [ebp - 0xcc0]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.00407f10
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430294
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
cmp byte [ebp - 0x94c], 0
mov dword [ebp - 0x2a08], 0xf
mov dword [ebp - 0x2a0c], 0
mov byte [ebp - 0x2a1c], 0
jne 0x4302bc
xor ecx, ecx
jmp 0x4302ce
lea ecx, [ebp - 0x94c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4302c5
sub ecx, edx
push ecx
lea eax, [ebp - 0x94c]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.00407f10
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 4
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430319
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
cmp byte [ebp - 0xe84], 0
mov dword [ebp - 0x2a08], 0xf
mov dword [ebp - 0x2a0c], 0
mov byte [ebp - 0x2a1c], 0
jne 0x430341
xor ecx, ecx
jmp 0x430359
lea ecx, [ebp - 0xe84]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430350
sub ecx, edx
push ecx
lea eax, [ebp - 0xe84]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.00407f10
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4303a4
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
lea eax, [ebp - 0x2a04]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4303ee
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
lea eax, [ebp - 0x2438]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430438
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
lea eax, [ebp - 0x1578]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430482
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
lea eax, [ebp - 0x2078]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4304cc
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
lea eax, [ebp - 0xaf8]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430516
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
lea eax, [ebp - 0x107c]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x430560
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
lea eax, [ebp - 0x2810]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4305aa
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
lea eax, [ebp - 0x2620]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
mov eax, dword [ebp - 0x2a08]
mov byte [ebp - 4], 0
cmp eax, 0x10
jb 0x4305f4
inc eax
lea ecx, [ebp - 0x2a1c]
push eax
push dword [ebp - 0x2a1c]
call fcn.00408010
lea eax, [ebp - 0x13f4]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
lea ecx, [ebp - 0x2a1c]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0x129c]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
lea ecx, [ebp - 0x2a1c]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0xa20]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
lea ecx, [ebp - 0x2a1c]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0x1ccc]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
lea ecx, [ebp - 0x2a1c]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0x1700]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 0x12
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
lea ecx, [ebp - 0x2a1c]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0x2254]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
lea ecx, [ebp - 0x2a1c]
mov byte [ebp - 4], 0
call fcn.00405a30
lea eax, [ebp - 0x1ea0]
push eax
lea ecx, [ebp - 0x2a1c]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 0x14
push eax
lea ecx, [ebp - 0x2a70]
call fcn.00408170
lea ecx, [ebp - 0x2a1c]
mov byte [ebp - 4], 0
call fcn.00405a30
test ebx, ebx
je 0x430d62
mov dword [ebp - 0x2a7c], 0
mov dword [ebp - 0x2a78], 0
mov dword [ebp - 0x2a74], 0
call fcn.00402160
lea eax, [ebp - 0x2a34]
push 0xf3
push eax
call fcn.00407930
mov ecx, eax
call fcn.0043a7d0
cmp dword [eax + 0x14], 8
jb 0x4307c0
mov eax, dword [eax]
mov edi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [ebp - 0x2a7c]
push ecx
push 0xf003f
push 0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call edi
lea ecx, [ebp - 0x2a34]
mov esi, eax
call fcn.004024b0
test esi, esi
jne 0x430d62
call fcn.00402160
lea eax, [ebp - 0x2a34]
push 0xf4
push eax
call fcn.00407930
mov ecx, eax
call fcn.0043a7d0
cmp dword [eax + 0x14], 8
jb 0x430816
mov eax, dword [eax]
lea ecx, [ebp - 0x2a78]
push ecx
push 0xf003f
push 0
push eax
push dword [ebp - 0x2a7c]
call edi
lea ecx, [ebp - 0x2a34]
mov esi, eax
call fcn.004024b0
test esi, esi
je 0x430911
mov dword [ebp - 0x2a40], 0
mov dword [ebp - 0x2a3c], 0
mov dword [ebp - 0x2a38], 0
mov ecx, 0x4e
mov byte [ebp - 4], 0x15
mov esi, str.kSVmMUyKUxUtKyqVyeFY8hlpegdPQrOF8Xx1fpVvbmenxDkb5PkriJ2nL0wagJRAnAHFj8LAI1Unw1BhYWd8qOfIGadTIXA8cnx7Z8SJCYsnw5u5CoHtZ0lxHKB1JTfX42MzKfMq0jxjMJfN0sF0IN7ANMPamebhvlrQAT0mogEx1ryd90XqdReEfyBxX6NTilwQqb35yUCrkIqjkRERHpBaZgEAyzjZXHIVhnkBQGI0YWkovOT0r54JEIhDTXsjqGyMJJCxTFQYDDbYftBLYxxH3yJ0yGOT3anxNaTfr5yxPADJlfitr6Ts
lea edi, [ebp - 0x354]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x354]
push eax
lea ecx, [ebp - 0x2a1c]
movsb byte es:[edi], byte [esi]
call fcn.004057d0
lea eax, [ebp - 0x2a1c]
mov byte [ebp - 4], 0x16
push eax
lea ecx, [ebp - 0x2a40]
call fcn.00408170
lea ecx, [ebp - 0x2a1c]
mov byte [ebp - 4], 0x15
call fcn.00405a30
lea eax, [ebp - 0x2a34]
push 0xf4
push eax
call fcn.00407930
mov ecx, eax
call fcn.0043a7d0
cmp dword [eax + 0x14], 8
jb 0x4308ce
mov eax, dword [eax]
push 0
lea ecx, [ebp - 0x2a78]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push eax
push dword [ebp - 0x2a7c]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea ecx, [ebp - 0x2a34]
mov esi, eax
call fcn.004024b0
lea ecx, [ebp - 0x2a40]
call fcn.00405a70
test esi, esi
jne 0x430d62
mov dword [ebp - 0x2a10], 0
mov dword [ebp - 0x2a0c], 0
mov dword [ebp - 0x2a08], 0
mov ecx, 0x46
mov byte [ebp - 4], 0x17
mov esi, str.PKvOe73aZWyNVUmwcWroC8qHI3ntmmIDZOeul1FZb7qObZci3LC2iMvPLrpJNsqA4LAGbdkzc5GVYLCrKn9xTubpzOGRA09AQqxyxFtsMTARkvKe7InoLoTwIMcAJFqQdGuWVXgao8KmdEKyE3cdzBDk1zGbZ01iTCggbxRNK2AlKaes0vsFMV2pRpiwk2PZc2ZzWFKm40cY1GceJZJLIGItKPHKqEcERXvEEww5iZSYsprdAqpa4AzgUhJ2yOBUuitBl4bQiXpBWCS5YQ74YgJZ3
lea edi, [ebp - 0x1198]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1198]
push eax
lea ecx, [ebp - 0x2a64]
movsw word es:[edi], word [esi]
call fcn.004057d0
lea eax, [ebp - 0x2a64]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x2a10]
call fcn.00408170
lea ecx, [ebp - 0x2a64]
mov byte [ebp - 4], 0x17
call fcn.00405a30
lea eax, [ebp - 0x2a34]
push 0xf5
push eax
call fcn.00407930
mov ecx, eax
call fcn.0043a7d0
cmp dword [eax + 0x14], 8
jb 0x43099e
mov eax, dword [eax]
lea ecx, [ebp - 0x2a74]
push ecx
push 0xf003f
push 0
push eax
push dword [ebp - 0x2a78]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea ecx, [ebp - 0x2a34]
mov esi, eax
call fcn.004024b0
test esi, esi
je 0x430a22
lea eax, [ebp - 0x2a34]
push 0xf5
push eax
call fcn.00407930
mov ecx, eax
call fcn.0043a7d0
cmp dword [eax + 0x14], 8
jb 0x4309ea
mov eax, dword [eax]
push 0
lea ecx, [ebp - 0x2a74]
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push eax
push dword [ebp - 0x2a78]
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea ecx, [ebp - 0x2a34]
mov esi, eax
call fcn.004024b0
test esi, esi
jne 0x430d57
push 0x104
lea eax, [ebp - 0x114]
push 0
push eax
call fcn.004f0ae0
add esp, 0xc
cmp dword [ebx + 0x14], 8
jb 0x430a40
mov ebx, dword [ebx]
lea eax, [ebp - 0x114]
push eax
push ebx
call fcn.004da3ea
push 0x104
lea eax, [ebp - 0x4c0]
push 0
push eax
call fcn.004f0ae0
add esp, 0x14
call fcn.00402160
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x2a80], 0xbb8
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430a80
lea eax, [ebp - 0x2a80]
sub ecx, edx
push eax
lea eax, [ebp - 0x4c0]
push eax
push ecx
lea eax, [ebp - 0x114]
push eax
call fcn.004d5285
call fcn.004dc85c
push 0x208
mov dword [ebp - 0x2a84], eax
lea eax, [ebp - 0x1908]
push 0
push eax
call fcn.004f0ae0
lea eax, [ebp - 0x1908]
push eax
lea eax, [ebp - 0x4c0]
push eax
call fcn.004d9da3
add esp, 0x24
call fcn.00402160
push 4
lea eax, [ebp - 0x2a84]
push eax
push 4
push 0
lea eax, [ebp - 0x1908]
push eax
push dword [ebp - 0x2a74]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x2a58], 0
mov dword [ebp - 0x2a54], 0
mov dword [ebp - 0x2a50], 0
mov ecx, 0x3a
mov byte [ebp - 4], 0x19
mov esi, str.fnszzGdf286lG5kCAWfSEZYVeHVOHBg4RgpZphfiQ7AX9L8GKG5GhXECKoUelX62ZobUvPvTUgNZ6YskpqtBtmgyS2BOJnHuYizv3dZqscjPWPMXJU9isXOUBzcLapbFoeFmgH5Ka606PrDG5R8u4LKxhiqaWE2tk122MQOZH7lEpnUTtQdkZTx1gZ5WrNcJEXjTjbXt8WI2xpMEf5WRpRxE6ALlmoeswCTeQ9Q5
lea edi, [ebp - 0xf70]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0xf70]
push eax
lea ecx, [ebp - 0x2a4c]
movsb byte es:[edi], byte [esi]
call fcn.004057d0
lea eax, [ebp - 0x2a4c]
mov byte [ebp - 4], 0x1a
push eax
lea ecx, [ebp - 0x2a58]
call fcn.00408170
lea ecx, [ebp - 0x2a4c]
mov byte [ebp - 4], 0x19
call fcn.00405a30
mov ebx, dword [ebp - 0x2a88]
test ebx, ebx
je 0x430c9f
push 0x104
lea eax, [ebp - 0x320]
push 0
push eax
call fcn.004f0ae0
push 0x208
lea eax, [ebp - 0x1b10]
push 0
push eax
call fcn.004f0ae0
push 0x104
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.004f0ae0
add esp, 0x24
xor ecx, ecx
mov al, byte [ebp + ecx - 0x114]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x219], al
test al, al
jne 0x430bb5
call fcn.00402160
lea eax, [ebp - 0x2a34]
push 0xf6
push eax
call fcn.00407930
mov ecx, eax
call fcn.0043a750
mov edx, eax
cmp dword [edx + 0x14], 0x10
jb 0x430bf1
mov edx, dword [edx]
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x430bf3
lea edi, [ebp - 0x218]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x430c03
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x2a34]
call fcn.00405a30
mov dword [ebp - 0x2a80], 0xbb8
call fcn.00402160
lea ecx, [ebp - 0x218]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x430c40
lea eax, [ebp - 0x2a80]
sub ecx, edx
push eax
lea eax, [ebp - 0x320]
push eax
push ecx
lea eax, [ebp - 0x218]
push eax
call fcn.004d5285
lea eax, [ebp - 0x1b10]
push eax
lea eax, [ebp - 0x320]
push eax
call fcn.004d9da3
add esp, 0x18
cmp dword [ebx + 0x14], 8
jb 0x430c82
mov ebx, dword [ebx]
push 0x104
push ebx
push 1
push 0
lea eax, [ebp - 0x1b10]
push eax
push dword [ebp - 0x2a74]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
cmp dword [ebp - 0x2a74], 0
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
je 0x430d32
mov dword [ebp - 0x2a40], 0
mov dword [ebp - 0x2a3c], 0
mov dword [ebp - 0x2a38], 0
mov ecx, 0x68
mov byte [ebp - 4], 0x1b
mov esi, str.j9VSPKVsRg28z1xk5WEVkewXsErEkZIgwnOjBDMEaf7iXHerzoKt6OQutLsgzeMqcJ6rnHgMjDQLZmk24WnPcrSvzqtOnlA2e43YxDFZ8uFywEuMyQPAuDmh5tq0pcFt4iI4BhyxWesfDP4TjaVAfCpcHtVf3IkBrLh4mLpovUQkP8dlBzoeEQCenSxdApHm8psqxvWOsU4Oudg77cqM1y7WHi6ehR9TpPJn39NNFi6Ry0jEebinNItFoLRXaenQvtq3HuLgpyt0VufANnrlDBZYlLMSwgt55ykhNKk7ONC5rbNJgwe0mYceQr8TeAhocBJok6jlEQ4WT587KXvgF4negZt2dXg9bjjdyqbq1AFpeovviGtfG9GAc99ZaKmNOENRLStnrrKxTijUbSvzOjo3reKPFyDMQ
lea edi, [ebp - 0x3bc]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x3bc]
push eax
lea ecx, [ebp - 0x2a34]
movsw word es:[edi], word [esi]
call fcn.004057d0
lea eax, [ebp - 0x2a34]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0x2a40]
call fcn.00408170
lea ecx, [ebp - 0x2a34]
call fcn.00405a30
push dword [ebp - 0x2a74]
call ebx
lea ecx, [ebp - 0x2a40]
mov byte [ebp - 4], 0x19
call fcn.00405a70
mov eax, dword [ebp - 0x2a78]
test eax, eax
je 0x430d3f
push eax
call ebx
call fcn.0047ee3d
push dword [ebp - 0x2a7c]
call ebx
lea ecx, [ebp - 0x2a58]
call fcn.00405a70
lea ecx, [ebp - 0x2a10]
call fcn.00405a70
lea ecx, [ebp - 0x2a70]
call fcn.00405a70
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00474193
mov esp, ebp
pop ebp
ret 8