Function at 0x43f934
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x244
push edi
mov dword [ebp - 0x21c], ecx
mov dword [ebp - 8], 0
cmp dword [ebp + 8], 0x80000002
jne 0x43f9d2
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x43f96c
mov dword [ebp - 0x220], 0
jmp 0x43f9ab
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shl eax, 1
add eax, 3
and al, 0xfc
call sub.ntdll.dll__alloca_probe
mov dword [ebp - 0x224], esp
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x224]
push ecx
call fcn.00415520
mov dword [ebp - 0x220], eax
mov edx, dword [ebp - 0x220]
push edx
push 0x50c2cc
push 0x104
mov eax, dword [ebp + 0x10]
push eax
call fcn.004155c0
add esp, 0x10
mov eax, 1
jmp 0x43fc69
cmp dword [ebp + 8], reloc.WSOCK32.dll_closesocket
jne 0x43fa59
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
jne 0x43f9f3
mov dword [ebp - 0x228], 0
jmp 0x43fa32
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shl eax, 1
add eax, 3
and al, 0xfc
call sub.ntdll.dll__alloca_probe
mov dword [ebp - 0x22c], esp
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
mov edx, dword [ebp - 0x22c]
push edx
call fcn.00415520
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
push eax
push str.RegistryUSER_ws
push 0x104
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.004155c0
add esp, 0x10
mov eax, 1
jmp 0x43fc69
cmp dword [ebp + 8], 0x80000000
jne 0x43fae0
mov edx, dword [ebp + 0xc]
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], 0
jne 0x43fa7a
mov dword [ebp - 0x230], 0
jmp 0x43fab9
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shl eax, 1
add eax, 3
and al, 0xfc
call sub.ntdll.dll__alloca_probe
mov dword [ebp - 0x234], esp
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp - 0xc]
push edx
mov eax, dword [ebp - 0x234]
push eax
call fcn.00415520
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x230]
push ecx
push str.RegistryMACHINESOFTWARECLASSES_ws
push 0x104
mov edx, dword [ebp + 0x10]
push edx
call fcn.004155c0
add esp, 0x10
mov eax, 1
jmp 0x43fc69
cmp dword [ebp + 8], 0x80000005
jne 0x43fb67
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x43fb01
mov dword [ebp - 0x238], 0
jmp 0x43fb40
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shl eax, 1
add eax, 3
and al, 0xfc
call sub.ntdll.dll__alloca_probe
mov dword [ebp - 0x23c], esp
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x23c]
push ecx
call fcn.00415520
mov dword [ebp - 0x238], eax
mov edx, dword [ebp - 0x238]
push edx
push str.RegistryMACHINESYSTEMCURRENTCONTROLSETHARDWARE_PROFILESCURRENT_ws
push 0x104
mov eax, dword [ebp + 0x10]
push eax
call fcn.004155c0
add esp, 0x10
mov eax, 1
jmp 0x43fc69
cmp dword [ebp + 8], 0x80000001
jne 0x43fc67
mov ecx, dword [ebp - 0x21c]
cmp dword [ecx + 0x28], 0
jne 0x43fb8b
mov ecx, dword [ebp - 0x21c]
call fcn.00440ade
mov edx, dword [ebp - 0x21c]
cmp dword [edx + 0x28], 0
jne 0x43fb9e
xor eax, eax
jmp 0x43fc69
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x43fbb6
mov dword [ebp - 0x240], 0
jmp 0x43fbf5
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
shl eax, 1
add eax, 3
and al, 0xfc
call sub.ntdll.dll__alloca_probe
mov dword [ebp - 0x244], esp
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp - 0x244]
push ecx
call fcn.00415520
mov dword [ebp - 0x240], eax
mov edx, dword [ebp - 0x240]
push edx
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax + 0x28]
push ecx
push str._ws_ws
push 0x104
mov edx, dword [ebp + 0x10]
push edx
call fcn.004155c0
add esp, 0x14
mov word [ebp - 0x218], 0
mov ecx, 0x81
xor eax, eax
lea edi, [ebp - 0x216]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [ebp + 0x10]
push eax
push 0x50c414
push 0x104
lea ecx, [ebp - 0x218]
push ecx
call fcn.00430820
add esp, 0x10
lea edx, [ebp - 0x218]
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, 1
jmp 0x43fc69
xor eax, eax
lea esp, [ebp - 0x248]
pop edi
mov esp, ebp
pop ebp
ret 0xc