Function at 0x43f7c8
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x186c
call fcn.0044d9b0
mov dword [ebp - 0x10], 0xb9be0274
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor esi, esi
mov eax, dword [ebp - 0x10]
cmp eax, 0xd469e6b
jle 0x43f84b
cmp eax, 0x434d8671
jg 0x43f8a4
cmp eax, 0x2e4a7f6f
jg 0x43f953
cmp eax, 0x23bc4a88
jle 0x43fae7
cmp eax, 0x27bdab99
jg 0x43fd8e
cmp eax, 0x23bc4a89
je 0x44015d
cmp eax, 0x24afbf80
je 0x440188
cmp eax, 0x262c836d
jne 0x43f7e7
push dword [ebp - 0x24]
call edi
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], 0x867303d0
jmp 0x43f7e7
cmp eax, 0xc55de403
jle 0x43f902
cmp eax, 0xe5ceb191
jg 0x43f9cd
cmp eax, 0xd4d2b733
jle 0x43fb2c
cmp eax, 0xdbd7bab3
jg 0x43fdc4
cmp eax, 0xd4d2b734
je 0x4401a0
cmp eax, 0xd757abe3
je 0x4401d6
cmp eax, 0xda3e6df0
jne 0x43f7e7
mov dword [ebp - 0x10], 0x23bc4a89
jmp 0x43f7e7
cmp eax, 0x65bbaa70
jg 0x43fa40
cmp eax, 0x558f48b4
jle 0x43fb64
cmp eax, 0x5f981635
jg 0x43fdf1
cmp eax, 0x558f48b5
je 0x4401e2
cmp eax, 0x5be1fd6b
je 0x4401ee
cmp eax, 0x5f8156ed
jne 0x43f7e7
mov eax, dword [ebp - 0x14]
and eax, 0xffffff80
lea eax, [eax*8 - 0x4c]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x4fe691
jmp 0x43f7e7
cmp eax, 0xa5ce58a0
jle 0x43faab
cmp eax, 0xb6771f40
jle 0x43fba4
cmp eax, 0xc23594fe
jg 0x43fe32
cmp eax, 0xb6771f41
je 0x4401fa
cmp eax, 0xb9be0274
je 0x44020b
cmp eax, 0xc1669378
jne 0x43f7e7
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0xeafef8d8
jmp 0x43f7e7
cmp eax, 0x326519b9
jle 0x43fc07
cmp eax, 0x3f7e4af6
jg 0x43fe66
cmp eax, 0x326519ba
je 0x440223
cmp eax, 0x37c82c73
je 0x440261
cmp eax, 0x3c8ab27c
jne 0x43f7e7
mov eax, dword [ebp - 0x14]
shr eax, 0x16
add eax, 0xea
mov ecx, eax
imul ecx, eax
shr eax, 8
imul edx, ecx, 0x3ae1
imul eax, eax, 0xdf
dec edx
shr eax, 5
mov dword [ebp - 0x14], eax
mov eax, 0x65bbaa71
cmp ecx, edx
je 0x43f9be
mov eax, 0x27bdab9a
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x58], 0
jmp 0x43f7e7
cmp eax, 0xebc0c12e
jle 0x43fc8a
cmp eax, 0x4fe690
jg 0x43feb7
cmp eax, 0xebc0c12f
je 0x440284
cmp eax, 0xf4d8c38d
je 0x440290
cmp eax, 0xfe2ecccb
jne 0x43f7e7
mov eax, dword [ebp - 0x18]
shr eax, 4
add eax, 0xffffff6a
shr eax, 9
lea eax, [eax*4 + 0x66]
mov dword [ebp - 0x18], eax
push eax
push 0x3d1b
push 0xe19
push 0xf46
call fcn.004409b0
add esp, 0x10
mov dword [ebp - 0x10], 0xb9be0274
jmp 0x43f7e7
cmp eax, 0x70f09108
jle 0x43fcef
cmp eax, 0x7beaea4a
jg 0x43ff09
cmp eax, 0x70f09109
je 0x4402ad
cmp eax, 0x72506788
je 0x4402b9
cmp eax, 0x78623fa6
jne 0x43f7e7
mov ecx, dword [ebp - 0x14]
mov eax, 0xab
add ecx, eax
imul eax, ecx, 0xdc0
imul ecx, ecx
imul edx, ecx, 0x5d69
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0xa82180f2
cmp ecx, edx
je 0x440981
mov eax, 0x558f48b5
jmp 0x440981
cmp eax, 0x949ea37d
jg 0x43fd44
cmp eax, 0x86bbd9fe
jle 0x43ff4e
cmp eax, 0x86bbd9ff
je 0x4402cb
cmp eax, 0x89437d73
je 0x4402e8
cmp eax, 0x8af531ab
je 0x440255
jmp 0x43f7e7
cmp eax, 0x11e6c6f3
jle 0x43ff9a
cmp eax, 0x11e6c6f4
je 0x44032a
cmp eax, 0x13b9c9b0
je 0x44033f
cmp eax, 0x1a64fc57
jne 0x43f7e7
cmp dword [ebp - 0x68], 0
mov eax, 0xcde90dc9
je 0x440981
mov eax, 0x72506788
jmp 0x440981
cmp eax, 0xcde90dc8
jle 0x43fff4
cmp eax, 0xcde90dc9
je 0x44034b
cmp eax, 0xceeb20c5
je 0x44036e
cmp eax, 0xcf350614
jne 0x43f7e7
mov dword [ebp - 0x10], 0x8f0cc61
jmp 0x43f7e7
cmp eax, 0x4be6d1fd
jle 0x44001d
cmp eax, 0x4be6d1fe
je 0x4403b8
cmp eax, 0x4f2935d1
je 0x4403c4
cmp eax, 0x5080623c
jne 0x43f7e7
mov eax, dword [ebp - 0x60]
mov word [eax], 0
mov dword [ebp - 0x10], 0x30904810
jmp 0x43f7e7
cmp eax, 0xa8d16cdd
jle 0x440048
cmp eax, 0xa8d16cde
je 0x4403f5
cmp eax, 0xb114a1e3
je 0x44045e
cmp eax, 0xb5c6f61e
jne 0x43f7e7
mov eax, dword [ebp - 0x14]
mov ecx, 0xfffffef8
add eax, ecx
imul ecx, eax, 0x34
imul eax, eax
imul edx, eax, 0x2923
add ecx, 0x9f
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0x24afbf80
cmp eax, edx
je 0x44069b
mov ecx, 0xc23594ff
jmp 0x44069b
cmp eax, 0x2f274303
jle 0x440073
cmp eax, 0x2f274304
je 0x44046a
cmp eax, 0x305d3719
je 0x44048a
cmp eax, 0x30904810
jne 0x43f7e7
push 0x66
push 0x477e20
push dword [ebp - 0x3c]
call fcn.00450060
add esp, 0xc
push 7
push 0x477e86
push 0x33
push dword [ebp - 0x3c]
call fcn.004409b0
add esp, 0x10
lea eax, [ebp - 0x28]
push eax
push 0x20019
push esi
push dword [ebp - 0x3c]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0x3c8ab27c
test eax, eax
je 0x43fc7f
mov ecx, 0x839abb37
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x20], esi
jmp 0x43f7e7
cmp eax, 0xe84db253
jle 0x4400b4
cmp eax, 0xe84db254
je 0x4404e3
cmp eax, 0xeafef8d8
je 0x440509
cmp eax, 0xeb3a1bbd
jne 0x43f7e7
mov eax, dword [ebp - 0x14]
mov ecx, 0xa8
add eax, ecx
shr eax, 0xe
lea ecx, [eax - 0x59]
imul ecx, ecx
add eax, 0xfffffef5
imul edx, ecx, 0x1073
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x86bbd9ff
cmp edx, ecx
je 0x440981
mov eax, 0x6be48a12
jmp 0x440981
cmp eax, 0x6bf08bb7
jle 0x4400fc
cmp eax, 0x6bf08bb8
je 0x440521
cmp eax, 0x6e025169
je 0x44052d
cmp eax, 0x6f1ca5b1
jne 0x43f7e7
mov ebx, dword [ebp - 0x18]
shl ebx, 8
mov dword [ebp - 0x18], ebx
push ebx
call fcn.0043f7c8
add esp, 4
mov eax, 0x65bbaa71
test ebx, ebx
je 0x440981
mov eax, 0xa82180f2
jmp 0x440981
cmp eax, 0x9f79ae4a
jle 0x440130
cmp eax, 0x9f79ae4b
je 0x44054b
cmp eax, 0xa260c58f
je 0x440585
cmp eax, 0xa278fe7b
jne 0x43f7e7
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
add eax, 0x16
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0xceeb20c5
jmp 0x43f7e7
cmp eax, 0x27bdab9a
je 0x4405bf
cmp eax, 0x28d92f99
je 0x4405d1
cmp eax, 0x2bf5fa41
jne 0x43f7e7
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x11e6c6f4
jmp 0x43f7e7
cmp eax, 0xdbd7bab4
je 0x4405fc
cmp eax, 0xe107af37
je 0x440608
cmp eax, 0xe3056842
jne 0x43f7e7
mov dword [ebp - 0x10], 0x46b8f08f
jmp 0x43f7e7
cmp eax, 0x5f981636
je 0x44063c
cmp eax, 0x60a9cd52
je 0x440657
cmp eax, 0x619ba9b3
jne 0x43f7e7
mov eax, dword [ebp - 0x14]
shr eax, 4
imul eax, eax, 0xe2000000
add eax, 0xfe000000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xe3056842
jmp 0x43f7e7
cmp eax, 0xc23594ff
je 0x440672
cmp eax, 0xc45fd1d8
je 0x4406a3
cmp eax, 0xc465bf16
jne 0x43f7e7
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x10], 0x27bdab9a
mov dword [ebp - 0x58], eax
jmp 0x43f7e7
cmp eax, 0x3f7e4af7
je 0x4406af
cmp eax, 0x4163c8ab
je 0x4406d6
cmp eax, 0x41dfdb7a
jne 0x43f7e7
mov ecx, dword [ebp - 0x18]
mov eax, 0x92
add ecx, eax
mov eax, ecx
shr eax, 0xe
add eax, 0x6e
mov dword [ebp - 0x18], eax
mov eax, 0xa5ce58a1
cmp ecx, 0x178000
jb 0x440981
mov eax, 0xa278fe7b
jmp 0x440981
cmp eax, 0x4fe691
je 0x440713
cmp eax, 0x8f0cc61
je 0x440722
cmp eax, 0xd21419f
jne 0x43f7e7
push esi
push esi
push esi
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x1078]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x64]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov ecx, 0x305d3719
test eax, eax
je 0x44069b
mov ecx, 0xb114a1e3
jmp 0x44069b
cmp eax, 0x7beaea4b
je 0x440735
cmp eax, 0x7c7c3790
je 0x440758
cmp eax, 0x7d2825a7
jne 0x43f7e7
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x878]
push ecx
push eax
push dword [ebp - 0x4c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0x78623fa6
jmp 0x43f7e7
cmp eax, 0x84469960
je 0x4407a4
cmp eax, 0x867303d0
jne 0x440989
mov eax, dword [ebp - 0x14]
imul ecx, eax, 0xd3
imul ecx, ecx
imul eax, eax, 0xab70
imul edx, ecx, 0x357d
dec edx
shr eax, 0xb
mov dword [ebp - 0x14], eax
mov eax, 0x434d8672
cmp edx, ecx
je 0x440981
mov eax, 0xc465bf16
jmp 0x440981
cmp eax, 0xd469e6c
je 0x4407b0
cmp eax, 0xe728405
jne 0x43f7e7
imul ebx, dword [ebp - 0x18], 0x4a
add ebx, 0x13ce
mov dword [ebp - 0x18], ebx
push ebx
call fcn.0043f7c8
add esp, 4
push ebx
push 0x5e42
push 0x4e62
push 0x50d
call fcn.004409b0
add esp, 0x10
mov eax, 0xc9f1c1e4
cmp ebx, 0xed
jl 0x44079a
jmp 0x440981
cmp eax, 0xc55de404
je 0x4407fc
cmp eax, 0xc9f1c1e4
jne 0x43f7e7
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x10], 0x7beaea4b
jmp 0x43f7e7
cmp eax, 0x434d8672
je 0x44081f
cmp eax, 0x46b8f08f
jne 0x43f7e7
push eax
sub esp, 0x64
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x65bbaa71
jmp 0x43f7e7
cmp eax, 0xa5ce58a1
je 0x440891
cmp eax, 0xa82180f2
jne 0x43f7e7
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x800
mov dword [ebp - 0x10], 0x5f8156ed
jmp 0x43f7e7
cmp eax, 0x2e4a7f70
je 0x4408c3
cmp eax, 0x2f04d3b6
jne 0x43f7e7
imul ebx, dword [ebp - 0x18], 0x1d80
mov dword [ebp - 0x18], ebx
push ebx
call fcn.0043f7c8
add esp, 4
mov eax, 0xf4d8c38d
cmp ebx, 0x7c
jge 0x440981
mov eax, 0x23bc4a89
jmp 0x440981
cmp eax, 0xe5ceb192
je 0x440902
cmp eax, 0xe773e138
jne 0x43f7e7
mov eax, dword [ebp - 0x14]
lea ecx, [eax - 0x56]
add eax, 0xffffff6f
imul ecx, ecx
imul edx, ecx, 0x5f5b
dec edx
shr eax, 0xb
mov dword [ebp - 0x14], eax
mov eax, 0xd469e6c
cmp ecx, edx
je 0x440981
mov eax, 0x5be1fd6b
jmp 0x440981
cmp eax, 0x65bbaa71
je 0x44092c
cmp eax, 0x6be48a12
jne 0x43f7e7
push 0x18
push str._n_vSo8
push dword [ebp - 0x50]
call fcn.00450060
add esp, 0xc
mov dword [ebp - 0x10], 0x37c82c73
jmp 0x43f7e7
cmp eax, 0x949ea37e
je 0x440941
cmp eax, 0x9d07d720
jne 0x43f7e7
push dword [ebp - 0x6c]
call edi
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0xe773e138
jmp 0x43f7e7
push 2
push 0xc800
call fcn.004600e3
add esp, 8
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
mov eax, 0x3f7e4af7
je 0x440981
mov eax, 0x619ba9b3
jmp 0x440981
mov eax, dword [ebp - 0x18]
shr eax, 0x1a
add eax, 0x4d
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xeafef8d8
jmp 0x43f7e7
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff1a
add eax, ecx
mov ecx, eax
imul ecx, eax
shr eax, 0x17
imul edx, ecx, 0x376f
dec edx
add eax, 0x34
mov dword [ebp - 0x14], eax
mov eax, 0xd21419f
cmp edx, ecx
je 0x440981
mov eax, 0x434d8672
jmp 0x440981
mov dword [ebp - 0x10], 0xd4d2b734
jmp 0x43f7e7
mov dword [ebp - 0x10], 0x262c836d
jmp 0x43f7e7
mov dword [ebp - 0x10], 0xb6771f41
jmp 0x43f7e7
push dword [ebp - 0x70]
call edi
mov dword [ebp - 0x10], 0x4163c8ab
jmp 0x43f7e7
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xf4d8c38d
jmp 0x43f7e7
mov eax, dword [ebp - 0x18]
shl eax, 0xf
or eax, 0x3b4
lea ebx, [eax + eax*4]
mov dword [ebp - 0x18], ebx
push ebx
call fcn.0043f7c8
add esp, 4
push 0x1a53
push 0x30fc
push ebx
push 0x5fac
call fcn.004409b0
add esp, 0x10
mov dword [ebp - 0x10], 0xc9f1c1e4
jmp 0x43f7e7
mov eax, dword [ebp - 0x14]
shl eax, 7
add eax, 0xffffab00
shr eax, 5
imul eax, eax, 0x1878
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xa8d16cde
jmp 0x43f7e7
mov dword [ebp - 0x10], 0xd21419f
jmp 0x43f7e7
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x30], eax
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0xe107af37
jmp 0x43f7e7
mov dword [ebp - 0x10], 0xc1669378
jmp 0x43f7e7
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0x13b9c9b0
jmp 0x43f7e7
push dword [ebp - 0x38]
call fcn.004281e4
add esp, 4
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0x2f274304
jmp 0x43f7e7
imul ebx, dword [ebp - 0x18], 0x19000
mov eax, ebx
shr eax, 7
mov dword [ebp - 0x18], eax
push 0x4a65
push eax
push 0xfc2
push 0x5331
call fcn.004409b0
add esp, 0x10
mov eax, 0xd21419f
cmp ebx, 0x6a01
jae 0x440981
mov eax, 0x2f04d3b6
jmp 0x440981
mov eax, dword [ebp - 0x50]
mov word [eax + 0x18], 0
mov dword [ebp - 0x10], 0xeb3a1bbd
jmp 0x43f7e7
mov dword [ebp - 0x10], 0x9d07d720
jmp 0x43f7e7
mov eax, dword [ebp - 0x14]
shr eax, 9
imul eax, eax, 0x3cc10000
shr eax, 1
imul eax, eax, 0xa8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x84469960
jmp 0x43f7e7
mov eax, dword [ebp - 0x74]
mov word [eax], 0
push 0x16
push 0x477f30
push dword [ebp - 0x48]
call fcn.00450060
add esp, 0xc
push 8
push 0x477f46
push 0xb
push dword [ebp - 0x48]
call fcn.004409b0
add esp, 0x10
push 0x18
push dword [ebp - 0x48]
push dword [ebp - 0x30]
call fcn.00450060
add esp, 0xc
mov dword [ebp - 0x10], 0xb5c6f61e
jmp 0x43f7e7
mov dword [ebp - 0x10], 0x2bf5fa41
jmp 0x43f7e7
imul ebx, dword [ebp - 0x18], 0x5580
add ebx, 0x939f
mov dword [ebp - 0x18], ebx
push ebx
call fcn.0043f7c8
add esp, 4
mov eax, 0x8f0cc61
cmp ebx, 0x5f
jae 0x440981
mov eax, 0x305d3719
jmp 0x440981
push 5
push str.YdA
push 0xc
push dword [ebp - 0x50]
call fcn.004409b0
add esp, 0x10
push 0x1a
push dword [ebp - 0x50]
push dword [ebp - 0x34]
call fcn.00450060
add esp, 0xc
push dword [ebp - 0x54]
call fcn.004615b0
add esp, 4
push eax
push dword [ebp - 0x54]
push dword [ebp - 0x34]
push dword [ebp + 8]
call fcn.00428681
add esp, 0x10
push dword [ebp - 0x38]
call fcn.00460b1c
add esp, 4
push dword [ebp - 0x54]
call fcn.00460b1c
add esp, 4
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0x6bf08bb8
jmp 0x43f7e7
mov dword [ebp - 0x10], 0x86bbd9ff
jmp 0x43f7e7
mov eax, dword [ebp - 0x14]
lea eax, [eax + eax*4]
add eax, eax
add eax, 0xffffff88
shr eax, 6
add eax, 6
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x4be6d1fe
jmp 0x43f7e7
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov word [eax + 0xa], 0
mov eax, dword [ebp - 0x40]
movzx ecx, word [0x477e9c]
mov word [eax + 8], cx
mov ecx, dword [0x477e98]
mov dword [eax + 4], ecx
mov ecx, dword [0x477e94]
mov dword [eax], ecx
push 4
push 0x477e9e
push 5
push dword [ebp - 0x40]
call fcn.004409b0
add esp, 0x10
sub esp, 0x68
mov eax, esp
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0xa260c58f
jmp 0x43f7e7
mov eax, dword [ebp - 0x18]
shl eax, 0xe
add eax, 0xffffff5d
shr eax, 6
mov dword [ebp - 0x18], eax
push eax
call fcn.0043f7c8
add esp, 4
mov dword [ebp - 0x10], 0xb9be0274
jmp 0x43f7e7
mov eax, dword [ebp - 0x2c]
mov dword [eax], 0xf003f
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0xda3e6df0
jmp 0x43f7e7
mov dword [ebp - 0x10], 0x60a9cd52
jmp 0x43f7e7
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov word [eax + 0xa], 0
mov dword [ebp - 0x10], 0x2e4a7f70
jmp 0x43f7e7
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff10
add eax, ecx
imul ecx, eax, 0x6b
imul eax, eax
add ecx, 0xffffff6c
imul edx, eax, 0x1d25
shr ecx, 0xd
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0xfe2ecccb
cmp edx, eax
je 0x44069b
mov ecx, 0x8af531ab
jmp 0x44069b
mov eax, dword [ebp - 0x14]
shr eax, 0xc
add eax, 0xffffff12
shr eax, 8
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x829
shl eax, 5
dec edx
add eax, 0xffffffad
mov dword [ebp - 0x14], eax
mov eax, 0x5080623c
cmp ecx, edx
je 0x440981
mov eax, 0xd757abe3
jmp 0x440981
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0xc45fd1d8
jmp 0x43f7e7
imul ebx, dword [ebp - 0x18], 0x198
mov dword [ebp - 0x18], ebx
push ebx
call fcn.0043f7c8
add esp, 4
mov eax, 0x6f1ca5b1
cmp ebx, 0x2f
jae 0x440981
mov eax, 0xe5ceb192
jmp 0x440981
mov dword [ebp - 0x10], 0x70f09109
jmp 0x43f7e7
imul eax, dword [ebp - 0x14], 0xcf
add eax, 0xffff4baf
mov ecx, eax
shl ecx, 0x15
imul eax, eax
imul edx, eax, 0x2bd5
dec edx
add ecx, 0xffc98000
mov dword [ebp - 0x14], ecx
mov ecx, 0xb9be0274
cmp eax, edx
je 0x44069b
mov ecx, 0xcf350614
jmp 0x44069b
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x800
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0xebc0c12f
jmp 0x43f7e7
push dword [ebp - 0x78]
call edi
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0x839abb37
mov dword [ebp - 0x20], 1
jmp 0x43f7e7
push dword [ebp - 0x1c]
lea eax, [ebp - 0x878]
push eax
push dword [ebp - 0x2c]
push 0
push dword [ebp - 0x30]
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, 0x6e025169
test eax, eax
je 0x44069b
mov ecx, 0x558f48b5
mov dword [ebp - 0x10], ecx
jmp 0x43f7e7
mov dword [ebp - 0x10], 0x5f981636
jmp 0x43f7e7
mov eax, dword [ebp - 0x14]
shr eax, 7
imul eax, eax, 0x408000
add eax, 0x4edf23
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x839abb37
mov dword [ebp - 0x20], 0
jmp 0x43f7e7
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff55
add eax, ecx
imul ecx, eax, 0xb13
imul eax, eax
imul edx, eax, 0x62ff
dec edx
shr ecx, 0xd
mov dword [ebp - 0x14], ecx
mov ecx, 0xb6771f41
cmp edx, eax
je 0x440704
mov ecx, 0x839abb37
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x20], 0
jmp 0x43f7e7
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], 0xa278fe7b
jmp 0x43f7e7
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x10], 0x9f79ae4b
jmp 0x43f7e7
mov eax, dword [ebp - 0x14]
movzx eax, ax
shl eax, 7
imul eax, eax, 0x6c00
add eax, 0xa2d800
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xdbd7bab4
jmp 0x43f7e7
imul ebx, dword [ebp - 0x18], 0xbbcce
add ebx, 0xffffff63
mov dword [ebp - 0x18], ebx
push ebx
call fcn.0043f7c8
add esp, 4
push 0x1be2
push 0x5300
push 0x53ae
push ebx
call fcn.004409b0
add esp, 0x10
mov eax, 0xe728405
cmp ebx, 0xb7
jge 0x440981
mov eax, 0xb9be0274
jmp 0x440981
mov dword [ebp - 0x10], 0xa82180f2
jmp 0x43f7e7
mov eax, dword [ebp - 0x18]
and eax, 0xffffff80
lea ebx, [eax*8 + 0xaf]
mov dword [ebp - 0x18], ebx
push ebx
push 0x571e
push 0x1ed3
push 0x59e0
call fcn.004409b0
add esp, 0x10
push 0x99d
push 0x393a
push 0x2b15
push ebx
call fcn.004409b0
add esp, 0x10
mov dword [ebp - 0x10], 0xd757abe3
jmp 0x43f7e7
mov eax, dword [ebp - 0x18]
shl eax, 0xd
lea ecx, [eax + eax*2]
mov dword [ebp - 0x18], ecx
mov eax, 0x28d92f99
test ecx, ecx
je 0x440981
mov eax, 0x89437d73
jmp 0x440981
mov eax, dword [ebp - 0x44]
mov word [eax + 0x66], 0
push 0x66
push 0x477eb0
push dword [ebp - 0x44]
call fcn.00450060
add esp, 0xc
push 7
push 0x477f16
push 0x33
push dword [ebp - 0x44]
call fcn.004409b0
add esp, 0x10
lea eax, [ebp - 0x1078]
push eax
push dword [ebp - 0x44]
push dword [ebp - 0x40]
lea ebx, [ebp - 0x1878]
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0x24]
push eax
push 0x20019
push 0
push ebx
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x1a64fc57
jmp 0x43f7e7
mov ebx, dword [ebp - 0x18]
add ebx, 0xffffffb4
mov eax, ebx
shr eax, 2
mov dword [ebp - 0x18], eax
push eax
call fcn.0043f7c8
add esp, 4
mov eax, 0x1a64fc57
cmp ebx, 0x23c
jb 0x440981
mov eax, 0x46b8f08f
jmp 0x440981
mov eax, dword [ebp - 0x4c]
movzx ecx, word [str.W_0L]
mov word [eax + 8], cx
mov ecx, dword [0x477f5a]
mov dword [eax + 4], ecx
mov ecx, dword [0x477f56]
mov dword [eax], ecx
push 4
push 0x477f60
push 5
push dword [ebp - 0x4c]
call fcn.004409b0
add esp, 0x10
mov dword [ebp - 0x10], 0x7d2825a7
jmp 0x43f7e7
mov ebx, dword [ebp - 0x18]
mov eax, 0xffffff70
add ebx, eax
shr ebx, 0xa
mov dword [ebp - 0x18], ebx
push ebx
call fcn.0043f7c8
add esp, 4
mov eax, 0x305d3719
cmp ebx, 6
je 0x440981
mov eax, 0x30904810
jmp 0x440981
mov eax, dword [ebp - 0x3c]
add eax, 0x66
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0x5080623c
jmp 0x43f7e7
imul ebx, dword [ebp - 0x18], 0x2d80
add ebx, 0x6c100
mov dword [ebp - 0x18], ebx
push 0x5700
push ebx
push 0x462a
push 0x488
call fcn.004409b0
add esp, 0x10
push ebx
call fcn.0043f7c8
add esp, 4
mov eax, 0x7c7c3790
cmp ebx, 0x7e
jge 0x440981
mov eax, 0xf4d8c38d
mov dword [ebp - 0x10], eax
jmp 0x43f7e7
cmp eax, 0x839abb37
jne 0x43f7e7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x2c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret