Function at 0x443aff
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x244
push edi
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 8], 0
cmp dword [ebp + 8], 0x80000002
jne 0x443b9d
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x443b37
mov dword [ebp - 0x220], 0
jmp 0x443b76
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shl eax, 1
add eax, 3
and al, 0xfc
call sub.ntdll.dll__alloca_probe
mov dword [ebp - 0x224], esp
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x224]
push ecx
call fcn.004154c0
mov dword [ebp - 0x220], eax
mov edx, dword [ebp - 0x220]
push edx
push 0x514f0c
push 0x104
mov eax, dword [ebp + 0x10]
push eax
call fcn.00415560
add esp, 0x10
mov eax, 1
jmp 0x443e34
cmp dword [ebp + 8], reloc.WSOCK32.dll_closesocket
jne 0x443c24
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
jne 0x443bbe
mov dword [ebp - 0x228], 0
jmp 0x443bfd
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shl eax, 1
add eax, 3
and al, 0xfc
call sub.ntdll.dll__alloca_probe
mov dword [ebp - 0x22c], esp
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0x22c]
push edx
call fcn.004154c0
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
push eax
push str.RegistryUSER_ws
push 0x104
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00415560
add esp, 0x10
mov eax, 1
jmp 0x443e34
cmp dword [ebp + 8], 0x80000000
jne 0x443cab
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
jne 0x443c45
mov dword [ebp - 0x230], 0
jmp 0x443c84
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shl eax, 1
add eax, 3
and al, 0xfc
call sub.ntdll.dll__alloca_probe
mov dword [ebp - 0x234], esp
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x234]
push eax
call fcn.004154c0
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x230]
push ecx
push str.RegistryMACHINESOFTWARECLASSES_ws
push 0x104
mov edx, dword [ebp + 0x10]
push edx
call fcn.00415560
add esp, 0x10
mov eax, 1
jmp 0x443e34
cmp dword [ebp + 8], 0x80000005
jne 0x443d32
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x443ccc
mov dword [ebp - 0x238], 0
jmp 0x443d0b
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shl eax, 1
add eax, 3
and al, 0xfc
call sub.ntdll.dll__alloca_probe
mov dword [ebp - 0x23c], esp
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x23c]
push ecx
call fcn.004154c0
mov dword [ebp - 0x238], eax
mov edx, dword [ebp - 0x238]
push edx
push str.RegistryMACHINESYSTEMCURRENTCONTROLSETHARDWARE_PROFILESCURRENT_ws
push 0x104
mov eax, dword [ebp + 0x10]
push eax
call fcn.00415560
add esp, 0x10
mov eax, 1
jmp 0x443e34
cmp dword [ebp + 8], 0x80000001
jne 0x443e32
mov ecx, dword [ebp - 0x21c]
cmp dword [ecx + 0x28], 0
jne 0x443d56
mov ecx, dword [ebp - 0x21c]
call fcn.00444ca9
mov edx, dword [ebp - 0x21c]
cmp dword [edx + 0x28], 0
jne 0x443d69
xor eax, eax
jmp 0x443e34
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x443d81
mov dword [ebp - 0x240], 0
jmp 0x443dc0
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shl eax, 1
add eax, 3
and al, 0xfc
call sub.ntdll.dll__alloca_probe
mov dword [ebp - 0x244], esp
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x244]
push ecx
call fcn.004154c0
mov dword [ebp - 0x240], eax
mov edx, dword [ebp - 0x240]
push edx
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax + 0x28]
push ecx
push str._ws_ws
push 0x104
mov edx, dword [ebp + 0x10]
push edx
call fcn.00415560
add esp, 0x14
mov word [ebp - 0x218], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x216]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp + 0x10]
push eax
push 0x515054
push 0x104
lea ecx, [ebp - 0x218]
push ecx
call fcn.00434a60
add esp, 0x10
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, 1
jmp 0x443e34
xor eax, eax
lea esp, [ebp - 0x248]
pop edi
mov esp, ebp
pop ebp
ret 0xc