Function at 0x43b8a2
Capabilities:
Query or enumerate registry value

Disassembly:
push ebx
mov edx, 0x12
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x43b8a8
call fcn.00486110
push dword [esp + 0x5c]
call fcn.004416d0
mov edx, dword [esp + 0x50]
lea ecx, [esp]
call fcn.00441000
mov edx, dword [esp + 0x54]
lea ecx, [esp + 4]
call fcn.00441000
mov edx, dword [esp + 0x58]
lea ecx, [esp + 8]
call fcn.00441000
push dword [esp]
call fcn.0043cfdf
push dword [esp + 8]
mov edx, 0x55e3e6
pop ecx
call fcn.00441660
je 0x43b955
cmp dword [0xb2cd0c], 0
je 0x43b939
lea eax, [esp + 0x10]
push eax
mov ebx, dword [0xb2cd24]
or ebx, 0xf003f
push ebx
push 0
push dword [0xb2ccec]
push dword [0xb2cd08]
call sub.ADVAPI32.dll_RegOpenKeyExW
mov dword [esp + 0xc], eax
jmp 0x43b953
lea eax, [esp + 0x10]
push eax
push dword [0xb2ccec]
push dword [0xb2cd08]
call sub.ADVAPI32.dll_RegOpenKeyW
mov dword [esp + 0xc], eax
jmp 0x43b9ba
lea eax, [esp + 0x18]
push eax
push dword [0xb2cd08]
push dword [esp + 0x10]
call sub.ADVAPI32.dll_RegConnectRegistryW
mov dword [esp + 0x14], eax
cmp dword [0xb2cd0c], 0
je 0x43b9a2
lea eax, [esp + 0x10]
push eax
mov ebx, dword [0xb2cd24]
or ebx, 0xf003f
push ebx
push 0
push dword [0xb2ccec]
push dword [esp + 0x28]
call sub.ADVAPI32.dll_RegOpenKeyExW
mov dword [esp + 0xc], eax
jmp 0x43b9ba
lea eax, [esp + 0x10]
push eax
push dword [0xb2ccec]
push dword [esp + 0x20]
call sub.ADVAPI32.dll_RegOpenKeyW
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x43bc94
mov dword [esp + 0x1c], 0x400
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
push dword [esp + 0x24]
call fcn.004835b0
lea eax, [esp + 0x24]
push eax
call fcn.00486010
lea eax, [esp + 0x1c]
push eax
mov eax, dword [esp + 0x24]
push eax
lea eax, [esp + 0x2c]
push eax
push 0
push dword [esp + 0x14]
push dword [esp + 0x24]
call sub.ADVAPI32.dll_RegQueryValueExW
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x43bc94
push dword [esp + 0x24]
mov ebx, 1
cmp ebx, dword [esp]
jne 0x43ba9b
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x28]
push eax
lea eax, [esp + 0x30]
push eax
push 0
push dword [esp + 0x18]
push dword [esp + 0x28]
call sub.ADVAPI32.dll_RegQueryValueExW
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x10]
and ebx, ebx
jne 0x43ba88
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov ebx, dword [esp + 0x28]
dec ebx
push ebx
push dword [esp + 0x30]
call fcn.00483ee0
lea eax, [esp + 0x30]
push eax
call fcn.00486010
jmp 0x43ba96
mov edx, 0x55d09e
lea ecx, [esp + 0x2c]
call fcn.00441008
jmp 0x43bc93
mov ebx, 2
cmp ebx, dword [esp]
jne 0x43bb10
lea eax, [esp + 0x20]
push eax
mov eax, dword [esp + 0x28]
push eax
lea eax, [esp + 0x30]
push eax
push 0
push dword [esp + 0x18]
push dword [esp + 0x28]
call sub.ADVAPI32.dll_RegQueryValueExW
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x10]
and ebx, ebx
jne 0x43bafd
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov ebx, dword [esp + 0x28]
dec ebx
push ebx
push dword [esp + 0x30]
call fcn.00483ee0
lea eax, [esp + 0x30]
push eax
call fcn.00486010
jmp 0x43bb0b
mov edx, 0x55d09e
lea ecx, [esp + 0x2c]
call fcn.00441008
jmp 0x43bc93
mov ebx, 4
cmp ebx, dword [esp]
jne 0x43bb82
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x38]
push eax
push 0
push dword [esp + 0x18]
push dword [esp + 0x28]
call sub.ADVAPI32.dll_RegQueryValueExW
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x10]
and ebx, ebx
jne 0x43bb6f
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov eax, dword [esp + 0x3c]
cdq
push edx
push eax
call fcn.004839a0
lea eax, [esp + 0x30]
push eax
call fcn.00486010
jmp 0x43bb7d
mov edx, 0x55e4aa
lea ecx, [esp + 0x2c]
call fcn.00441008
jmp 0x43bc93
mov ebx, 3
cmp ebx, dword [esp]
jne 0x43bc93
mov dword [esp + 0x38], 0x400
push dword [esp + 0x38]
call fcn.00484d90
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x38]
push eax
push dword [esp + 0x40]
lea eax, [esp + 0x48]
push eax
push 0
push dword [esp + 0x18]
push dword [esp + 0x28]
call sub.ADVAPI32.dll_RegQueryValueExW
mov dword [esp + 0x10], eax
mov ebx, dword [esp + 0x10]
and ebx, ebx
jne 0x43bc93
mov edx, 0x55d09e
lea ecx, [esp + 0x2c]
call fcn.00441008
mov dword [esp + 0x44], 0
jmp 0x43bbed
mov ebx, dword [esp + 0x38]
dec ebx
cmp ebx, dword [esp + 0x44]
jl 0x43bc8a
mov ebx, dword [esp + 0x3c]
add ebx, dword [esp + 0x44]
push ebx
pop eax
call fcn.00441610
mov ebx, eax
and ebx, 0xff
mov dword [esp + 0x48], ebx
mov ebx, dword [esp + 0x48]
cmp ebx, 0x10
jge 0x43bc47
mov edx, dword [esp + 0x2c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
mov edx, 0x55e4aa
push edx
call fcn.00485fb0
lea eax, [esp + 0x30]
push eax
call fcn.00486010
mov edx, dword [esp + 0x2c]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485f70
pop edx
push eax
mov eax, dword [esp + 0x54]
cdq
push edx
push eax
call fcn.00484640
pop eax
lea eax, [esp + 0x30]
push eax
call fcn.00486010
inc dword [esp + 0x44]
jno 0x43bbed
push dword [esp + 0x3c]
call fcn.00484db0
pop eax
push dword [esp + 0x10]
call sub.ADVAPI32.dll_RegCloseKey
mov edx, dword [esp + 0x28]
push edx
call fcn.00485f70
pop edx
push eax
push edx
call fcn.00485fb0
pop eax
push eax
call fcn.004416a0
pop edx
add eax, edx
jmp 0x43bcc5
push dword [esp + 8]
call fcn.00486170
push dword [esp + 0x20]
call fcn.00486170
push dword [esp]
call fcn.00486170
push dword [esp + 4]
call fcn.00486170
push dword [esp + 0x28]
call fcn.00486170
add esp, 0x48
pop ebx
ret 0xc