Function at 0x443960
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0x44
mov eax, dword [0x48aff4]
push ebx
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push ebp
mov dword [esp + 0x48], eax
lea eax, [esp + 0x1c]
push eax
push 0x20019
push 0
push str.Software
push 0x80000001
mov ebp, ecx
call ebx
test eax, eax
je 0x4439a3
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x40]
call fcn.00455418
add esp, 0x44
ret
mov edx, dword [esp + 0x1c]
push esi
lea ecx, [esp + 0x1c]
push ecx
push 0x20019
push 0
push 0x478694
push edx
call ebx
mov esi, eax
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
je 0x4439df
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x40]
call fcn.00455418
add esp, 0x44
ret
mov edx, dword [esp + 0x1c]
push edi
lea ecx, [esp + 0x10]
push ecx
push 0x20019
push 0
push str.Layout
push edx
call ebx
test eax, eax
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov esi, 4
jne 0x443b66
lea eax, [esp + 0x1c]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push edx
push 0
push str.CreateFilenameWidth
push eax
mov dword [esp + 0x34], esi
call edi
test eax, eax
jne 0x443a43
cmp dword [esp + 0x18], esi
jne 0x443a43
cmp dword [esp + 0x1c], esi
jne 0x443a43
mov ecx, dword [esp + 0x14]
mov dword [ebp + 0x50], ecx
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x20]
push ecx
push 0
push str.CreateFilesizeWidth
push edx
mov dword [esp + 0x34], esi
call edi
test eax, eax
jne 0x443a7b
cmp dword [esp + 0x18], esi
jne 0x443a7b
cmp dword [esp + 0x1c], esi
jne 0x443a7b
mov eax, dword [esp + 0x14]
mov dword [ebp + 0x54], eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x20]
push eax
push 0
push str.VerifyFilenameWidth
push ecx
mov dword [esp + 0x34], esi
call edi
test eax, eax
jne 0x443ab3
cmp dword [esp + 0x18], esi
jne 0x443ab3
cmp dword [esp + 0x1c], esi
jne 0x443ab3
mov edx, dword [esp + 0x14]
mov dword [ebp + 0x58], edx
lea eax, [esp + 0x1c]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push edx
push 0
push str.VerifyFilesizeWidth
push eax
mov dword [esp + 0x34], esi
call edi
test eax, eax
jne 0x443aeb
cmp dword [esp + 0x18], esi
jne 0x443aeb
cmp dword [esp + 0x1c], esi
jne 0x443aeb
mov ecx, dword [esp + 0x14]
mov dword [ebp + 0x5c], ecx
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x20]
push ecx
push 0
push str.OpenDialogueHeight
push edx
mov dword [esp + 0x34], esi
call edi
test eax, eax
jne 0x443b23
cmp dword [esp + 0x18], esi
jne 0x443b23
cmp dword [esp + 0x1c], esi
jne 0x443b23
mov eax, dword [esp + 0x14]
mov dword [ebp + 0x60], eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x20]
push eax
push 0
push str.CreateDialogueHeight
push ecx
mov dword [esp + 0x34], esi
call edi
test eax, eax
jne 0x443b5b
cmp dword [esp + 0x18], esi
jne 0x443b5b
cmp dword [esp + 0x1c], esi
jne 0x443b5b
mov edx, dword [esp + 0x14]
mov dword [ebp + 0x64], edx
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x1c]
push ecx
push 0x20019
push 0
push 0x4786a0
push edx
call ebx
test eax, eax
jne 0x444068
lea eax, [esp + 0x10]
push eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.BlockSizeChoice
push eax
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443bc3
cmp dword [esp + 0x14], esi
jne 0x443bc3
cmp dword [esp + 0x10], esi
jne 0x443bc3
mov eax, dword [esp + 0x18]
cmp eax, 2
ja 0x443bc3
mov dword [ebp], eax
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.ExactBlockSize
push ecx
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443c02
cmp dword [esp + 0x14], esi
jne 0x443c02
cmp dword [esp + 0x10], esi
jne 0x443c02
mov eax, dword [esp + 0x18]
cmp eax, esi
jb 0x443c02
and eax, 0xfffffffc
mov dword [ebp + 4], eax
lea edx, [esp + 0x10]
push edx
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.YEncLineCount
push edx
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443c3f
cmp dword [esp + 0x14], esi
jne 0x443c3f
cmp dword [esp + 0x10], esi
jne 0x443c3f
mov eax, dword [esp + 0x18]
cmp eax, 1
jb 0x443c3f
mov dword [ebp + 8], eax
lea eax, [esp + 0x10]
push eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.UUEncodeLineCount
push eax
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443c7e
cmp dword [esp + 0x14], esi
jne 0x443c7e
cmp dword [esp + 0x10], esi
jne 0x443c7e
mov eax, dword [esp + 0x18]
cmp eax, esi
jb 0x443c7e
and eax, 0xfffffffc
mov dword [ebp + 0xc], eax
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.RecoveryBlockFraction
push ecx
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443cc2
cmp dword [esp + 0x14], esi
jne 0x443cc2
cmp dword [esp + 0x10], esi
jne 0x443cc2
mov eax, dword [esp + 0x18]
cmp eax, 1
jb 0x443cc2
cmp eax, 0x2710
ja 0x443cc2
mov dword [ebp + 0x40], eax
lea edx, [esp + 0x10]
push edx
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.RecoveryFileSizeScheme
push edx
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443d04
cmp dword [esp + 0x14], esi
jne 0x443d04
cmp dword [esp + 0x10], esi
jne 0x443d04
mov eax, dword [esp + 0x18]
cmp eax, 1
jb 0x443d04
cmp eax, 3
ja 0x443d04
mov dword [ebp + 0x4c], eax
lea eax, [esp + 0x10]
push eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.Priority
push eax
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443d41
cmp dword [esp + 0x14], esi
jne 0x443d41
cmp dword [esp + 0x10], esi
jne 0x443d41
mov eax, dword [esp + 0x18]
cmp eax, 3
ja 0x443d41
mov dword [ebp + 0x18], eax
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.UniformRecoveryFiles
push ecx
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443d80
cmp dword [esp + 0x14], esi
jne 0x443d80
cmp dword [esp + 0x10], esi
jne 0x443d80
mov eax, dword [esp + 0x18]
xor edx, edx
test eax, eax
setne dl
mov dword [ebp + 0x44], edx
lea eax, [esp + 0x10]
push eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.NoPacketRepetition
push eax
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443dbf
cmp dword [esp + 0x14], esi
jne 0x443dbf
cmp dword [esp + 0x10], esi
jne 0x443dbf
mov eax, dword [esp + 0x18]
xor ecx, ecx
test eax, eax
setne cl
mov dword [ebp + 0x48], ecx
lea edx, [esp + 0x10]
push edx
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.RestrictBlockSize
push edx
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443dfe
cmp dword [esp + 0x14], esi
jne 0x443dfe
cmp dword [esp + 0x10], esi
jne 0x443dfe
mov ecx, dword [esp + 0x18]
xor eax, eax
test ecx, ecx
setne al
mov dword [ebp + 0x14], eax
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.SplitSourceFiles
push ecx
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443e3d
cmp dword [esp + 0x14], esi
jne 0x443e3d
cmp dword [esp + 0x10], esi
jne 0x443e3d
mov eax, dword [esp + 0x18]
xor edx, edx
test eax, eax
setne dl
mov dword [ebp + 0x28], edx
lea eax, [esp + 0x10]
push eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x2c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.SplitSourceLimit
mov ebx, 0x28
push eax
mov dword [esp + 0x28], ebx
call edi
test eax, eax
jne 0x443e9e
cmp dword [esp + 0x14], 1
jne 0x443e9e
cmp dword [esp + 0x10], ebx
ja 0x443e9e
lea ecx, [esp + 0x28]
push ecx
call fcn.00456ea3
mov dword [ebp + 0x20], eax
mov eax, edx
add esp, 4
test eax, eax
mov dword [ebp + 0x24], edx
ja 0x443e9e
jb 0x443e94
cmp dword [ebp + 0x20], esi
jae 0x443e9e
mov dword [ebp + 0x20], esi
mov dword [ebp + 0x24], 0
lea edx, [esp + 0x10]
push edx
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.RepairAutomatically
push edx
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443edd
cmp dword [esp + 0x14], esi
jne 0x443edd
cmp dword [esp + 0x10], esi
jne 0x443edd
mov ecx, dword [esp + 0x18]
xor eax, eax
test ecx, ecx
setne al
mov dword [ebp + 0x6c], eax
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.MonitorAutomatically
push ecx
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443f1c
cmp dword [esp + 0x14], esi
jne 0x443f1c
cmp dword [esp + 0x10], esi
jne 0x443f1c
mov eax, dword [esp + 0x18]
xor edx, edx
test eax, eax
setne dl
mov dword [ebp + 0x68], edx
lea eax, [esp + 0x10]
push eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.JoinSplitFiles
push eax
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443f5b
cmp dword [esp + 0x14], esi
jne 0x443f5b
cmp dword [esp + 0x10], esi
jne 0x443f5b
mov eax, dword [esp + 0x18]
xor ecx, ecx
test eax, eax
setne cl
mov dword [ebp + 0x70], ecx
lea edx, [esp + 0x10]
push edx
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.DeleteDamagedFiles
push edx
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443f9a
cmp dword [esp + 0x14], esi
jne 0x443f9a
cmp dword [esp + 0x10], esi
jne 0x443f9a
mov ecx, dword [esp + 0x18]
xor eax, eax
test ecx, ecx
setne al
mov dword [ebp + 0x74], eax
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x1c]
push edx
lea eax, [esp + 0x1c]
push eax
push 0
push str.DeleteRecoveryFiles
push ecx
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x443fd9
cmp dword [esp + 0x14], esi
jne 0x443fd9
cmp dword [esp + 0x10], esi
jne 0x443fd9
mov eax, dword [esp + 0x18]
xor edx, edx
test eax, eax
setne dl
mov dword [ebp + 0x78], edx
lea eax, [esp + 0x10]
push eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x1c]
push edx
push 0
push str.UseRecycleBin
push eax
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x444018
cmp dword [esp + 0x14], esi
jne 0x444018
cmp dword [esp + 0x10], esi
jne 0x444018
mov eax, dword [esp + 0x18]
xor ecx, ecx
test eax, eax
setne cl
mov dword [ebp + 0x7c], ecx
lea edx, [esp + 0x10]
push edx
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push str.Sounds
push edx
mov dword [esp + 0x28], esi
call edi
test eax, eax
jne 0x444057
cmp dword [esp + 0x14], esi
jne 0x444057
cmp dword [esp + 0x10], esi
jne 0x444057
mov ecx, dword [esp + 0x18]
xor eax, eax
test ecx, ecx
setne al
mov dword [ebp + 0x2c], eax
mov ecx, dword [esp + 0x1c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov eax, dword [ebp]
dec eax
je 0x444084
dec eax
je 0x444079
mov edx, dword [ebp + 4]
mov dword [ebp + 0x10], edx
jmp 0x44408d
mov eax, dword [ebp + 0xc]
imul eax, eax, 0x2d
mov dword [ebp + 0x10], eax
jmp 0x44408d
mov ecx, dword [ebp + 8]
shl ecx, 7
mov dword [ebp + 0x10], ecx
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x10]
push edx
push 0x20019
push 0
push str.Shell
push eax
call ebx
test eax, eax
jne 0x4441b4
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x20]
push eax
push 0
push str.ExplorerMenu
push ecx
mov dword [esp + 0x34], esi
call edi
test eax, eax
jne 0x4440ec
cmp dword [esp + 0x18], esi
jne 0x4440ec
cmp dword [esp + 0x1c], esi
jne 0x4440ec
mov eax, dword [esp + 0x14]
xor edx, edx
test eax, eax
setne dl
mov dword [ebp + 0x30], edx
lea eax, [esp + 0x1c]
push eax
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x20]
push edx
push 0
push str.PAR2Association
push eax
mov dword [esp + 0x34], esi
call edi
test eax, eax
jne 0x44412b
cmp dword [esp + 0x18], esi
jne 0x44412b
cmp dword [esp + 0x1c], esi
jne 0x44412b
mov eax, dword [esp + 0x14]
xor ecx, ecx
test eax, eax
setne cl
mov dword [ebp + 0x34], ecx
lea edx, [esp + 0x1c]
push edx
mov edx, dword [esp + 0x14]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x20]
push ecx
push 0
push str.PAR1Association
push edx
mov dword [esp + 0x34], esi
call edi
test eax, eax
jne 0x44416a
cmp dword [esp + 0x18], esi
jne 0x44416a
cmp dword [esp + 0x1c], esi
jne 0x44416a
mov ecx, dword [esp + 0x14]
xor eax, eax
test ecx, ecx
setne al
mov dword [ebp + 0x38], eax
lea ecx, [esp + 0x1c]
push ecx
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x20]
push eax
push 0
push str.SFVMD5Association
push ecx
mov dword [esp + 0x34], esi
call edi
test eax, eax
jne 0x4441a9
cmp dword [esp + 0x18], esi
jne 0x4441a9
cmp dword [esp + 0x1c], esi
jne 0x4441a9
mov eax, dword [esp + 0x14]
xor edx, edx
test eax, eax
setne dl
mov dword [ebp + 0x3c], edx
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x20]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x50]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
call fcn.00455418
add esp, 0x44
ret