Function at 0x439340
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x80
mov dword [ebp - 0x10], 0xb9be0274
xor ebx, ebx
mov eax, dword [ebp - 0x10]
cmp eax, 0x46dbf1e
jg 0x4393d0
cmp eax, 0xc1669377
jg 0x439432
cmp eax, 0xa0987a72
jg 0x439557
cmp eax, 0x929cf1d6
jg 0x4396ea
cmp eax, 0x86bbd9fe
jle 0x4399ab
cmp eax, 0x8af531aa
jg 0x439e6a
cmp eax, 0x86bbd9ff
je 0x43a1e8
cmp eax, 0x89437d73
jne 0x439355
mov ecx, dword [ebp - 0x14]
shr ecx, 0xd
add ecx, 0x3f
shr ecx, 6
add ecx, 0xfffffebc
mov dword [ebp - 0x14], ecx
mov eax, 0xb9be0274
cmp ecx, 0x5f
jne 0x43a505
jmp 0x43aa02
cmp eax, 0x41dfdb79
jle 0x4394cc
cmp eax, 0x60a9cd51
jg 0x4395cb
cmp eax, 0x558f48b4
jg 0x439755
cmp eax, 0x4979ff2f
jle 0x4399f0
cmp eax, 0x4f2935d0
jg 0x439e9a
cmp eax, 0x4979ff30
je 0x43a220
cmp eax, 0x4be6d1fe
jne 0x439355
mov dword [ebp - 0x10], 0x30904810
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x64], eax
jmp 0x439355
cmp eax, 0xe107af36
jg 0x43963d
cmp eax, 0xceeb20c4
jg 0x4397ab
cmp eax, 0xc465bf15
jle 0x439a5f
cmp eax, 0xc9f1c1e3
jg 0x439ed4
cmp eax, 0xc465bf16
je 0x43a243
cmp eax, 0xc55de404
jne 0x439355
mov esi, dword [ebp - 0x14]
mov eax, 0xffffff37
add esi, eax
mov edi, esi
shr edi, 7
mov dword [ebp - 0x14], edi
push 0x25a
push 0x4d20
push 0x1aee
push edi
call fcn.0043aad0
add esp, 0x10
push 0xabd
push 0x3a9b
push edi
push 0x5dff
call fcn.0043aad0
add esp, 0x10
mov eax, 0x28d92f99
cmp esi, 0x4080
jae 0x43a7d7
jmp 0x43aa02
cmp eax, 0x28d92f98
jle 0x43968e
cmp eax, 0x3090480f
jg 0x43980b
cmp eax, 0x2f04d3b5
jle 0x439aae
cmp eax, 0x2f274303
jg 0x439eff
cmp eax, 0x2f04d3b6
je 0x43a278
cmp eax, 0x2f191a07
jne 0x439355
imul esi, dword [ebp - 0x14], 0xca
add esi, 0x1037
mov dword [ebp - 0x14], esi
push esi
push 0x1c8e
push 0x2104
push 0x12e0
call fcn.0043aad0
add esp, 0x10
push esi
call fcn.00439340
add esp, 4
mov eax, 0x70f09109
cmp esi, 0x17
jge 0x43a70f
mov eax, 0xb9be0274
jmp 0x43a70f
cmp eax, 0xb114a1e2
jg 0x439861
cmp eax, 0xa278fe7a
jle 0x439adb
cmp eax, 0xa82180f1
jg 0x439f36
cmp eax, 0xa278fe7b
je 0x43a2c8
cmp eax, 0xa5ce58a1
jne 0x439355
imul esi, dword [ebp - 0x14], 0xcc
add esi, 0xfffffc9b
mov dword [ebp - 0x14], esi
push esi
call fcn.00439340
add esp, 4
push esi
call fcn.00439340
add esp, 4
mov eax, 0x70f09109
cmp esi, 0x90
jge 0x43aa02
mov eax, 0x59fa0db5
jmp 0x43aa02
cmp eax, 0x70f09108
jg 0x4398ad
cmp eax, 0x6be48a11
jle 0x439b24
cmp eax, 0x6e025168
jg 0x439f6f
cmp eax, 0x6be48a12
je 0x43a2dc
cmp eax, 0x6bf08bb8
jne 0x439355
mov eax, dword [ebp - 0x5c]
mov word [eax + 0x18], 0
push 0x18
push 0x46fec0
push dword [ebp - 0x5c]
call fcn.00448eb0
add esp, 0xc
push 8
push 0x46fed8
push 0xc
push dword [ebp - 0x5c]
call fcn.0043aad0
add esp, 0x10
mov dword [ebp - 0x10], 0x839abb37
jmp 0x439355
cmp eax, 0xeb3a1bbc
jle 0x439903
cmp eax, 0xf60a9ff8
jle 0x439b64
cmp eax, 0x4fe690
jg 0x439fb9
cmp eax, 0xf60a9ff9
je 0x43a2f6
cmp eax, 0xfe2ecccb
jne 0x439355
mov eax, dword [ebp - 0x18]
shl eax, 0xe
add eax, 0x70000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x3f7e4af7
jmp 0x439355
cmp eax, 0x11e6c6f3
jle 0x43996a
cmp eax, 0x23bc4a88
jle 0x439bc4
cmp eax, 0x262c836c
jg 0x43a00c
cmp eax, 0x23bc4a89
je 0x43a33d
cmp eax, 0x24afbf80
jne 0x439355
imul ecx, dword [ebp - 0x14], 0x9b
add ecx, 0xffffffe8
mov dword [ebp - 0x14], ecx
mov eax, 0x7beaea4b
cmp ecx, 0x57
je 0x43aa02
mov eax, 0x41dfdb7a
jmp 0x43aa02
cmp eax, 0x97c373f7
jle 0x439bfd
cmp eax, 0x9d07d71f
jg 0x43a060
cmp eax, 0x97c373f8
je 0x43a352
cmp eax, 0x9b8b4ea6
jne 0x439355
mov eax, dword [ebp - 0x14]
shr eax, 0xa
imul esi, eax, 0x36a200
mov dword [ebp - 0x14], esi
push 0x56aa
push esi
push 0x6290
push 0x2803
call fcn.0043aad0
add esp, 0x10
mov eax, 0x5799f7e5
cmp esi, 9
jl 0x43aa02
mov eax, 0xe4fa5c7a
jmp 0x43aa02
cmp eax, 0x5be1fd6a
jle 0x439c4e
cmp eax, 0x5f981635
jg 0x43a085
cmp eax, 0x5be1fd6b
je 0x43a36f
cmp eax, 0x5f8156ed
jne 0x439355
mov eax, dword [ebp - 0x20]
mov dword [eax], 0x800
mov eax, dword [ebp - 0x3c]
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
add eax, 0x16
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0xceeb20c5
jmp 0x439355
cmp eax, 0xd4d2b733
jle 0x439ca0
cmp eax, 0xda3e6def
jg 0x43a0d1
cmp eax, 0xd4d2b734
je 0x43a37b
cmp eax, 0xd757abe3
jne 0x439355
mov eax, dword [ebp - 0x4c]
mov word [eax + 0xa], 0
mov eax, dword [ebp - 0x4c]
movzx ecx, word [0x46fdec]
mov word [eax + 8], cx
mov ecx, dword [0x46fde8]
mov dword [eax + 4], ecx
mov ecx, dword [0x46fde4]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0xa260c58f
jmp 0x439355
cmp eax, 0x3c8ab27b
jle 0x439cdf
cmp eax, 0x3f7e4af6
jg 0x43a0f3
cmp eax, 0x3c8ab27c
je 0x43a86e
cmp eax, 0x3def8ce3
jne 0x439355
imul eax, dword [ebp - 0x14], 0x33540
add eax, 0xffffffa6
mov dword [ebp - 0x14], eax
push eax
push 0x59d5
push 0x50d3
push 0x4382
call fcn.0043aad0
add esp, 0x10
jmp 0x43a1c5
cmp eax, 0xb6771f40
jle 0x439d15
cmp eax, 0xb9be0273
jg 0x43a126
cmp eax, 0xb6771f41
je 0x43a399
cmp eax, 0xb68fd440
jne 0x439355
imul eax, dword [ebp - 0x14], 0x12de0000
add eax, 0xa90a0000
shr eax, 7
mov dword [ebp - 0x14], eax
push eax
call fcn.00439340
add esp, 4
jmp 0x43a0e7
cmp eax, 0x7b338ee0
jle 0x439d5a
cmp eax, 0x7c7c378f
jg 0x43a182
cmp eax, 0x7b338ee1
je 0x43a3b6
cmp eax, 0x7beaea4b
jne 0x439355
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xf003f
mov eax, dword [ebp - 0x20]
push 2
push 0xc800
call fcn.00458cc3
add esp, 8
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0xc1669378
jmp 0x439355
cmp eax, 0xe5ceb191
jle 0x439dab
cmp eax, 0xe84db253
jg 0x43a1d1
cmp eax, 0xe5ceb192
je 0x43a3d5
cmp eax, 0xe773e138
jne 0x439355
mov eax, dword [ebp - 0x18]
mov ecx, 0xf5
add eax, ecx
mov ecx, eax
shr ecx, 0x15
imul ecx, ecx
imul edx, ecx, 0x7009
dec edx
shr eax, 0xf
and eax, 0x1f000
mov dword [ebp - 0x18], eax
mov eax, 0xd2b4ccbd
cmp ecx, edx
je 0x43aa02
mov eax, 0x5be1fd6b
jmp 0x43aa02
cmp eax, 0xd469e6b
jg 0x439e02
cmp eax, 0x46dbf1f
je 0x43a3fd
cmp eax, 0x8f0cc61
je 0x43a415
cmp eax, 0xd21419f
jne 0x439355
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0xd757abe3
jmp 0x439355
cmp eax, 0x839abb37
je 0x43a450
cmp eax, 0x84469960
je 0x43a46c
cmp eax, 0x867303d0
jne 0x439355
mov eax, dword [ebp - 0x1c]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x10], 0x2f274304
jmp 0x439355
cmp eax, 0x41dfdb7a
je 0x43a478
cmp eax, 0x434d8672
je 0x43a4cb
cmp eax, 0x46b8f08f
jne 0x439355
push 0x66
push 0x46fd70
push dword [ebp - 0x48]
call fcn.00448eb0
add esp, 0xc
push 7
push 0x46fdd6
push 0x33
push dword [ebp - 0x48]
call fcn.0043aad0
add esp, 0x10
lea eax, [ebp - 0x28]
push eax
push 0x20019
push 0
push dword [ebp - 0x48]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0x5080623c
jmp 0x439355
cmp eax, 0xc1669378
je 0x43a4e0
cmp eax, 0xc23594ff
je 0x43a50f
cmp eax, 0xc45fd1d8
jne 0x439355
mov eax, dword [ebp - 0x20]
mov dword [eax], 0x800
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp - 0x68]
push dword [ebp - 0x28]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0x5f981636
jmp 0x439355
cmp eax, 0x28d92f99
je 0x43a541
cmp eax, 0x2bf5fa41
je 0x43a573
cmp eax, 0x2e4a7f70
jne 0x439355
mov dword [ebp - 0x10], 0x7d2825a7
jmp 0x439355
cmp eax, 0xa0987a73
je 0x43a57f
cmp eax, 0xa0eba314
je 0x43a5d3
cmp eax, 0xa260c58f
jne 0x439355
push 4
push 0x46fdee
push 5
push dword [ebp - 0x4c]
call fcn.0043aad0
add esp, 0x10
sub esp, 0x68
mov eax, esp
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x434d8672
jmp 0x439355
cmp eax, 0x60a9cd52
je 0x43a607
cmp eax, 0x619ba9b3
je 0x43a63b
cmp eax, 0x65bbaa71
jne 0x439355
cmp dword [ebp - 0x6c], 0
mov eax, 0x27bdab9a
je 0x439b55
mov eax, 0xe84db254
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0
jmp 0x439355
cmp eax, 0xeb3a1bbd
je 0x43a650
cmp eax, 0xebc0c12f
je 0x43a65f
cmp eax, 0xf4d8c38d
jne 0x439355
push eax
sub esp, 0x7fc
mov eax, esp
mov dword [ebp - 0x30], eax
sub esp, 0x800
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x3c], eax
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x8f0cc61
jmp 0x439355
cmp eax, 0x11e6c6f4
je 0x43a678
cmp eax, 0x13b9c9b0
je 0x43a6b5
cmp eax, 0x1a64fc57
jne 0x439355
mov eax, dword [ebp - 0x18]
shl eax, 0x10
add eax, 0xffffffe3
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xd4d2b734
jmp 0x439355
cmp eax, 0x929cf1d7
je 0x43a6f1
cmp eax, 0x949ea37e
je 0x43a717
cmp eax, 0x95ddfebf
jne 0x439355
imul ecx, dword [ebp - 0x14], 0xb0
add ecx, 0xfffeda70
mov eax, ecx
shr eax, 3
mov dword [ebp - 0x14], eax
mov eax, 0x929cf1d7
cmp ecx, 0x291
jae 0x43a70f
mov eax, 0x8dae7416
jmp 0x43a70f
cmp eax, 0x558f48b5
je 0x43a72c
cmp eax, 0x5799f7e5
je 0x43a74a
cmp eax, 0x59fa0db5
jne 0x439355
mov esi, dword [ebp - 0x14]
mov eax, 0xfffffeba
add esi, eax
mov eax, esi
shr eax, 0x12
mov dword [ebp - 0x14], eax
push eax
call fcn.00439340
add esp, 4
mov eax, 0xf60a9ff9
cmp esi, 0x29c0000
jae 0x43a7d7
jmp 0x43aa02
cmp eax, 0xceeb20c5
je 0x43a780
cmp eax, 0xcf350614
je 0x43a7b1
cmp eax, 0xd2b4ccbd
jne 0x439355
mov eax, dword [ebp - 0x14]
shl eax, 0xe
mov dword [ebp - 0x14], eax
mov eax, 0x95ddfebf
je 0x43a70f
mov eax, 0x304bf65
jmp 0x43a70f
cmp eax, 0x30904810
je 0x43a7e1
cmp eax, 0x326519ba
je 0x43a7f3
cmp eax, 0x37c82c73
jne 0x439355
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0x60a9cd52
jmp 0x439355
cmp eax, 0xb114a1e3
je 0x43a81d
cmp eax, 0xb3b593c5
je 0x43a838
cmp eax, 0xb5c6f61e
jne 0x439355
mov eax, dword [ebp - 0x18]
shr eax, 7
imul eax, eax, 0xaa
shr eax, 2
and eax, 0xffffffe0
add eax, 0x61
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xc23594ff
jmp 0x439355
cmp eax, 0x70f09109
je 0x43a87a
cmp eax, 0x72506788
je 0x43a893
cmp eax, 0x78623fa6
jne 0x439355
mov eax, dword [ebp - 0x18]
shr eax, 0x11
lea ecx, [eax - 3]
imul ecx, ecx
imul edx, ecx, 0x7307
dec edx
add eax, 0xa
mov dword [ebp - 0x18], eax
mov eax, 0xbb200e1b
cmp edx, ecx
je 0x43aa02
mov eax, 0x558f48b5
jmp 0x43aa02
cmp eax, 0xe107af37
je 0x43a8b3
cmp eax, 0xe3056842
je 0x43a8bf
cmp eax, 0xe4fa5c7a
jne 0x439355
mov eax, dword [ebp - 0x14]
shr eax, 1
imul esi, eax, 0x9e7
mov dword [ebp - 0x14], esi
push esi
call fcn.00439340
add esp, 4
push esi
call fcn.00439340
add esp, 4
mov eax, 0xb9be0274
cmp esi, 0xaa
jl 0x439faf
jmp 0x43aa02
cmp eax, 0xd469e6c
je 0x43a8cb
cmp eax, 0xe728405
je 0x43a8e3
cmp eax, 0xf510d64
jne 0x439355
imul eax, dword [ebp - 0x14], 0x3540
add eax, 0xffea5e00
shr eax, 1
imul esi, eax, 0xd7
mov dword [ebp - 0x14], esi
push 0x1d52
push esi
push 0xc04
push 0x4fde
call fcn.0043aad0
add esp, 0x10
mov eax, 0x13b9c9b0
cmp esi, 0x6d
jge 0x43a70f
mov eax, 0x72506788
jmp 0x43a70f
cmp eax, 0x8af531ab
je 0x43a8fd
cmp eax, 0x8dae7416
jne 0x439355
mov eax, dword [ebp - 0x14]
shr eax, 0x17
add eax, 0xfc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xf4d8c38d
jmp 0x439355
cmp eax, 0x4f2935d1
je 0x43a91a
cmp eax, 0x5080623c
jne 0x439355
imul eax, dword [ebp - 0x18], 0x410a
add eax, 0xfffff598
shr eax, 6
imul eax, eax, 0xbb
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x65bbaa71
jmp 0x439355
cmp eax, 0xc9f1c1e4
je 0x43a94a
cmp eax, 0xcde90dc9
jne 0x439355
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x10], 0x326519ba
jmp 0x439355
cmp eax, 0x2f274304
je 0x43a959
cmp eax, 0x305d3719
jne 0x439355
imul eax, dword [ebp - 0x18], 0x768000
add eax, 0xb0000
shr eax, 8
or eax, 0x32
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xd21419f
jmp 0x439355
cmp eax, 0xa82180f2
je 0x43a96f
cmp eax, 0xa8d16cde
jne 0x439355
mov eax, dword [ebp - 0x18]
shl eax, 9
and eax, 0x1ffffe00
imul eax, eax, 0x92
shr eax, 7
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xeb3a1bbd
jmp 0x439355
cmp eax, 0x6e025169
je 0x43a97b
cmp eax, 0x6f1ca5b1
jne 0x439355
imul ecx, dword [ebp - 0x14], 0x310000
mov eax, ecx
shr eax, 0xc
shr ecx, 8
add ecx, eax
mov eax, ecx
shr eax, 0xa
mov dword [ebp - 0x14], eax
mov eax, 0xe5ceb192
cmp ecx, 0x1f800
jb 0x43aa02
mov eax, 0x7beaea4b
jmp 0x43aa02
cmp eax, 0x4fe691
je 0x43a1c5
cmp eax, 0x304bf65
jne 0x439355
imul esi, dword [ebp - 0x14], 0x8200
add esi, 0x553fc
mov dword [ebp - 0x14], esi
push 0x32dc
push 0xad4
push esi
push 0x3cce
call fcn.0043aad0
add esp, 0x10
push esi
call fcn.00439340
add esp, 4
mov dword [ebp - 0x10], 0xb9be0274
jmp 0x439355
cmp eax, 0x262c836d
je 0x43a99f
cmp eax, 0x27bdab9a
jne 0x439355
mov eax, dword [ebp - 0x18]
shr eax, 0xd
lea ecx, [eax - 0xd4]
imul ecx, ecx
imul edx, ecx, 0x8887
imul eax, eax, 0x43
dec edx
add eax, 0xffffe749
mov dword [ebp - 0x18], eax
mov eax, 0xe3056842
cmp edx, ecx
je 0x43a051
mov eax, 0x30904810
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x64], 0
jmp 0x439355
cmp eax, 0x9d07d720
je 0x43a9f2
cmp eax, 0x9f79ae4b
jne 0x439355
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0xc9f1c1e4
jmp 0x439355
cmp eax, 0x5f981636
je 0x43aa0a
cmp eax, 0x5fe21574
jne 0x439355
imul esi, dword [ebp - 0x14], 0x6d
add esi, 0x2d62
mov eax, esi
shr eax, 0xa
mov dword [ebp - 0x14], eax
push eax
call fcn.00439340
add esp, 4
mov eax, 0x7beaea4b
cmp esi, 0x1e000
jae 0x43a70f
mov eax, 0xf4d8c38d
jmp 0x43a70f
cmp eax, 0xda3e6df0
je 0x43aa16
cmp eax, 0xdbd7bab4
jne 0x439355
mov dword [ebp - 0x10], 0x7beaea4b
jmp 0x439355
cmp eax, 0x3f7e4af7
je 0x43aa30
cmp eax, 0x4163c8ab
jne 0x439355
push dword [ebp - 0x60]
call fcn.0045a120
add esp, 4
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x10], 0xfe2ecccb
jmp 0x439355
cmp eax, 0xb9be0274
je 0x43aa69
cmp eax, 0xbb200e1b
jne 0x439355
imul esi, dword [ebp - 0x14], 0x202f
add esi, 0xffffffce
mov dword [ebp - 0x14], esi
push esi
call fcn.00439340
add esp, 4
push 0x4c1f
push 0x39d
push esi
push 0x380
call fcn.0043aad0
add esp, 0x10
mov eax, 0x8af531ab
cmp esi, 0x6a
jae 0x43a70f
mov eax, 0x619ba9b3
jmp 0x43a70f
cmp eax, 0x7c7c3790
je 0x43aa86
cmp eax, 0x7d2825a7
jne 0x439355
push dword [ebp - 0x20]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0
push dword [ebp - 0x3c]
push dword [ebp - 0x80]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, 0x78623fa6
test eax, eax
je 0x43a1bd
mov ecx, 0x86bbd9ff
mov dword [ebp - 0x10], ecx
jmp 0x439355
mov dword [ebp - 0x10], 0x5f8156ed
jmp 0x439355
cmp eax, 0xeafef8d8
jne 0x43aaa8
mov dword [ebp - 0x10], 0x23bc4a89
jmp 0x439355
mov eax, dword [ebp - 0x18]
shr eax, 0xc
lea ecx, [eax - 0xf3]
imul ecx, ecx
imul eax, eax, 0x4c
imul edx, ecx, 0x7969
dec edx
add eax, 0xffffd812
mov dword [ebp - 0x18], eax
mov eax, 0x2f191a07
cmp edx, ecx
je 0x43aa02
mov eax, 0x867303d0
jmp 0x43aa02
mov eax, dword [ebp - 0x14]
shr eax, 2
and eax, 0x3fffff00
mov dword [ebp - 0x14], eax
push 0x6312
push eax
push 0x5ac3
push 0x544e
jmp 0x43a89f
mov eax, dword [ebp - 0x18]
mov ecx, eax
shr ecx, 0xb
shr eax, 0x19
imul ecx, ecx
imul edx, ecx, 0x33d9
dec edx
imul eax, eax, 0xea0
mov dword [ebp - 0x18], eax
mov eax, 0xa260c58f
cmp edx, ecx
je 0x43aa02
mov eax, 0x262c836d
jmp 0x43aa02
mov esi, dword [ebp - 0x14]
shl esi, 4
mov edi, 0x24afbf80
and esi, 0xffffff80
mov dword [ebp - 0x14], esi
je 0x43a290
mov edi, 0x7beaea4b
push 0x2732
push 0x3dcd
push esi
push 0x49fa
call fcn.0043aad0
add esp, 0x10
push 0x4a4
push 0x4fc5
push esi
push 0x160d
call fcn.0043aad0
add esp, 0x10
mov dword [ebp - 0x10], edi
jmp 0x439355
mov eax, dword [ebp - 0x7c]
mov word [eax], 0
mov dword [ebp - 0x10], 0xb5c6f61e
jmp 0x439355
push dword [ebp - 0x44]
call fcn.00421fcc
add esp, 4
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0xa8d16cde
jmp 0x439355
mov eax, dword [ebp - 0x14]
shr eax, 2
and eax, 0xffffffc0
or eax, 8
imul esi, eax, 0xb63c
mov edi, esi
shr edi, 0xd
mov dword [ebp - 0x14], edi
push edi
call fcn.00439340
add esp, 4
push edi
call fcn.00439340
add esp, 4
mov eax, 0xe3056842
cmp esi, 0x18e000
jae 0x43aa02
mov eax, 0x65bbaa71
jmp 0x43aa02
push eax
sub esp, 0x64
mov eax, esp
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0xe3056842
jmp 0x439355
mov eax, dword [ebp - 0x14]
shr eax, 7
and eax, 0xfffff
add eax, 0x5a
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xa0eba314
jmp 0x439355
mov dword [ebp - 0x10], 0xb6771f41
jmp 0x439355
push 0x66
push 0x46fe00
push dword [ebp - 0x50]
call fcn.00448eb0
add esp, 0xc
mov dword [ebp - 0x10], 0x72506788
jmp 0x439355
mov eax, dword [ebp - 0x1c]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0x84469960
jmp 0x439355
imul eax, dword [ebp - 0x14], 0x70
add eax, 0xffffffba
mov dword [ebp - 0x14], eax
push eax
call fcn.00439340
add esp, 4
mov dword [ebp - 0x10], 0xa0987a73
jmp 0x439355
mov eax, dword [ebp - 0x14]
lea ecx, [eax*8 + 0x6d8]
mov eax, 0xb9be0274
and ecx, 0xfffffe00
mov dword [ebp - 0x14], ecx
je 0x43aa02
mov eax, 0x89437d73
jmp 0x43aa02
mov eax, dword [ebp - 0x14]
shl eax, 0xe
or eax, 0x35
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x70f09109
jmp 0x439355
mov eax, dword [ebp - 0x18]
add eax, 0xffffffe5
shr eax, 0xa
lea ecx, [eax + 0x5f]
imul ecx, ecx
imul edx, ecx, 0x699f
dec edx
imul eax, eax, 0xb5
add eax, 0x4ba7
mov dword [ebp - 0x18], eax
mov eax, 0xb9be0274
cmp edx, ecx
je 0x43aa02
mov eax, 0xe107af37
jmp 0x43aa02
push 0x1a
push dword [ebp - 0x5c]
push dword [ebp - 0x40]
call fcn.00448eb0
add esp, 0xc
mov dword [ebp - 0x10], 0x4163c8ab
jmp 0x439355
mov dword [ebp - 0x10], 0xcde90dc9
jmp 0x439355
mov esi, dword [ebp - 0x14]
add esi, 0xffffffa6
mov edi, esi
shr edi, 6
add edi, 0xc9
shr edi, 9
mov dword [ebp - 0x14], edi
push 0x5ca9
push 0x1a44
push edi
push 0x48b
call fcn.0043aad0
add esp, 0x10
push edi
call fcn.00439340
add esp, 4
mov eax, 0x70f09109
cmp esi, 0x1c4dc0
jae 0x43aa02
mov eax, 0x8af531ab
jmp 0x43aa02
mov eax, dword [ebp - 0x50]
mov word [eax + 0x66], 0
mov dword [ebp - 0x10], 0x1a64fc57
jmp 0x439355
mov eax, dword [ebp - 0x18]
add eax, 0x2e
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x71c7
dec edx
shl eax, 4
mov dword [ebp - 0x18], eax
mov eax, 0xf4d8c38d
cmp edx, ecx
je 0x43aa02
mov eax, 0x70f09109
jmp 0x43aa02
push 0x16
push 0x46fe80
push dword [ebp - 0x54]
call fcn.00448eb0
add esp, 0xc
push 5
push 0x46fe96
push 0xb
push dword [ebp - 0x54]
call fcn.0043aad0
add esp, 0x10
mov dword [ebp - 0x10], 0x6e025169
jmp 0x439355
imul esi, dword [ebp - 0x14], 0xbd0
mov eax, esi
shr eax, 1
add eax, 0x39
mov dword [ebp - 0x14], eax
push eax
call fcn.00439340
add esp, 4
mov eax, 0xf4d8c38d
cmp esi, 0xffffff8d
jae 0x43aa02
mov eax, 0xb9be0274
jmp 0x43aa02
mov dword [ebp - 0x10], 0x6be48a12
jmp 0x439355
mov esi, dword [ebp - 0x14]
shr esi, 0x15
mov dword [ebp - 0x14], esi
push 0x45e
push 0x5c3a
push esi
push 0x2cc3
call fcn.0043aad0
add esp, 0x10
push esi
push 0x16d0
push 0x42d2
push 0x2fde
call fcn.0043aad0
add esp, 0x10
mov eax, 0x3def8ce3
cmp esi, 0xa1
je 0x43a70f
mov eax, 0xc45fd1d8
jmp 0x43a70f
imul esi, dword [ebp - 0x14], 0xc8d37000
mov dword [ebp - 0x14], esi
push esi
call fcn.00439340
add esp, 4
push esi
call fcn.00439340
add esp, 4
mov eax, 0xb3b593c5
cmp esi, 0x2e
jge 0x43aa02
mov eax, 0xb68fd440
jmp 0x43aa02
mov eax, dword [ebp - 0x18]
shr eax, 0xf
mov ecx, eax
imul ecx, eax
add eax, 0xffffff4b
imul edx, ecx, 0x6b0d
shr eax, 8
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x65bbaa71
cmp edx, ecx
je 0x43aa02
mov eax, 0x6bf08bb8
jmp 0x43aa02
mov eax, dword [ebp - 0x48]
mov word [eax + 0x66], 0
mov dword [ebp - 0x10], 0x46b8f08f
jmp 0x439355
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0x37c82c73
jmp 0x439355
cmp dword [ebp - 0x70], 0
mov eax, 0x305d3719
je 0x43aa02
mov eax, 0x11e6c6f4
jmp 0x43aa02
mov eax, dword [ebp - 0x18]
mov ecx, 0xac
add eax, ecx
shr eax, 4
lea ecx, [eax - 0xa1]
imul ecx, ecx
add eax, 0xffffffe0
imul edx, ecx, 0x7cb9
shr eax, 2
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xa5ce58a1
cmp ecx, edx
je 0x43aa02
mov eax, 0x2bf5fa41
jmp 0x43aa02
push dword [ebp - 0x2c]
push dword [ebp - 0x50]
push dword [ebp - 0x4c]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push dword [ebp - 0x1c]
push 0x20019
push 0
push dword [ebp - 0x30]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x9d07d720
jmp 0x439355
imul ecx, dword [ebp - 0x14], 0x52
mov eax, ecx
shr eax, 2
mov dword [ebp - 0x14], eax
mov eax, 0x72506788
cmp ecx, 0x200
jae 0x43a70f
mov eax, 0xebc0c12f
mov dword [ebp - 0x10], eax
jmp 0x439355
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x10], 0xe728405
jmp 0x439355
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov word [eax + 0xa], 0
mov dword [ebp - 0x10], 0xc465bf16
jmp 0x439355
mov esi, dword [ebp - 0x14]
shl esi, 9
add esi, 0xffffff9f
mov dword [ebp - 0x14], esi
push esi
call fcn.00439340
add esp, 4
push esi
call fcn.00439340
add esp, 4
mov eax, 0x8af531ab
cmp esi, 0x72
jl 0x43aa02
mov eax, 0x23bc4a89
jmp 0x43aa02
mov ecx, dword [ebp - 0x18]
shr ecx, 0xa
lea eax, [ecx*4 + 0x39c]
imul ecx, ecx
imul edx, ecx, 0x16df
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x7b338ee1
cmp edx, ecx
je 0x43aa02
mov eax, 0xa278fe7b
jmp 0x43aa02
mov ecx, dword [ebp - 0x18]
add ecx, 0x78
imul eax, ecx, 0xc4000000
imul ecx, ecx
imul edx, ecx, 0x34ef
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xd469e6c
cmp edx, ecx
je 0x43aa02
mov eax, 0xf4d8c38d
jmp 0x43aa02
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x3c8ab27c
jmp 0x439355
imul eax, dword [ebp - 0x18], 0x144000
shr eax, 7
and eax, 0x1ffff00
add eax, 0xfffff300
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xe84db254
mov dword [ebp - 0x24], 0
jmp 0x439355
imul eax, dword [ebp - 0x18], 0x2cc0000
add eax, 0x3c800e9
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x867303d0
jmp 0x439355
mov eax, dword [ebp - 0x14]
shr eax, 0xa
imul esi, eax, 0x1bc178
add esi, 0x15936448
mov dword [ebp - 0x14], esi
push 0x3214
push esi
push 0x31cb
push 0x141c
call fcn.0043aad0
add esp, 0x10
push esi
call fcn.00439340
add esp, 4
mov dword [ebp - 0x10], 0xc45fd1d8
jmp 0x439355
cmp dword [ebp - 0x44], 0
mov eax, 0x4f2935d1
je 0x43aa02
mov eax, 0xda3e6df0
jmp 0x43aa02
push 8
push 0x46fe66
push 0x33
push dword [ebp - 0x50]
call fcn.0043aad0
add esp, 0x10
mov dword [ebp - 0x10], 0x13b9c9b0
jmp 0x439355
mov dword [ebp - 0x10], 0x8af531ab
jmp 0x439355
mov dword [ebp - 0x10], 0x619ba9b3
jmp 0x439355
mov eax, dword [ebp - 0x14]
shl eax, 8
add eax, 0xffffffbd
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xb9be0274
jmp 0x439355
mov eax, dword [ebp - 0x18]
shl eax, 0xe
add eax, 0x780ba
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x7c7c3790
jmp 0x439355
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [eax], ebx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], 0x9f79ae4b
jmp 0x439355
imul eax, dword [ebp - 0x18], 0xf3
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0xb97
dec edx
add eax, 0xfffffd9c
and eax, 0xfffffffc
mov dword [ebp - 0x18], eax
mov eax, 0xc55de404
cmp ecx, edx
jne 0x439b50
jmp 0x439b55
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0xdbd7bab4
jmp 0x439355
imul eax, dword [ebp - 0x18], 0x15b00000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x4be6d1fe
jmp 0x439355
mov dword [ebp - 0x10], 0x4fe691
jmp 0x439355
push 0x18
push dword [ebp - 0x54]
push dword [ebp - 0x3c]
call fcn.00448eb0
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x10], 0x2e4a7f70
jmp 0x439355
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x46fea8]
mov word [eax + 8], cx
mov ecx, dword [0x46fea4]
mov dword [eax + 4], ecx
mov ecx, dword [0x46fea0]
mov dword [eax], ecx
push 4
push 0x46feaa
push 5
push dword [ebp - 0x58]
call fcn.0043aad0
add esp, 0x10
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x34]
push eax
push dword [ebp - 0x58]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0xb114a1e3
jmp 0x439355
cmp dword [ebp - 0x74], 0
mov eax, 0xa82180f2
je 0x43aa02
mov eax, 0xe773e138
mov dword [ebp - 0x10], eax
jmp 0x439355
mov dword [ebp - 0x10], 0xebc0c12f
jmp 0x439355
mov eax, dword [ebp - 0x18]
shl eax, 0xc
or eax, 0x1f1
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xeafef8d8
jmp 0x439355
push dword [ebp - 0x88]
push dword [ebp - 0x60]
push dword [ebp - 0x40]
push dword [ebp + 8]
call fcn.0042245f
add esp, 0x10
push dword [ebp - 0x44]
call fcn.004596fc
add esp, 4
push dword [ebp - 0x60]
call fcn.004596fc
add esp, 4
mov dword [ebp - 0x10], 0x949ea37e
jmp 0x439355
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 0x800
mov eax, esp
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0xcf350614
jmp 0x439355
push dword [ebp - 0x8c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0xe84db254
mov dword [ebp - 0x24], 1
jmp 0x439355
cmp eax, 0xe84db254
jne 0x439355
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret