Function at 0x432688
Capabilities:
Query or enumerate registry key

Disassembly:
mov eax, 0x6bef1e
call fcn.006b9c3c
sub esp, 0x3a0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, ecx
mov dword [ebp - 0x34], edi
xor ebx, ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 4], 1
mov byte [ebp - 4], 2
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
mov byte [ebp - 4], 3
mov esi, ebx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x78], 0xf
mov dword [ebp - 0x7c], ebx
mov byte [ebp - 0x8c], bl
mov byte [ebp - 4], 4
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x60], 7
mov dword [ebp - 0x64], ebx
xor eax, eax
mov word [ebp - 0x74], ax
mov byte [ebp - 4], 5
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x73b7ec
call fcn.004a63fc
mov byte [ebp - 4], 6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x73bb00
call fcn.004a63fc
mov byte [ebp - 4], 7
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x24], esp
lea eax, [ebp + 8]
push eax
call fcn.004a6481
mov byte [ebp - 4], 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xa4]
call fcn.00460cfb
add esp, 0x48
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp + 8]
call fcn.004a638e
mov byte [ebp - 4], 5
push ebx
push 1
lea ecx, [ebp - 0xa4]
call fcn.004ab703
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov byte [ebp - 4], 0xa
push 1
sub esp, 0xc
mov dword [ebp - 0x1c], esp
mov edx, 0x73bb04
mov ecx, esp
call fcn.004b201b
mov byte [ebp - 4], 0xb
mov byte [ebp - 4], 0xa
lea edx, [ebp + 8]
lea ecx, [ebp - 0x50]
call fcn.004b20a2
add esp, 0x10
mov eax, dword [ebp - 0x50]
cmp dword [eax + 0x14], 8
jb 0x4327b0
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0xa4]
call fcn.004a63fc
mov byte [ebp - 4], 0xc
push ecx
lea ecx, [ebp - 0xa4]
call fcn.00422b9b
pop ecx
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0xa
push ebx
push 1
lea ecx, [ebp - 0xa4]
call fcn.004ab703
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1c], esp
push 0x73b808
call fcn.004a63fc
mov byte [ebp - 4], 0xd
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x28], esp
push 0x73b7ec
mov edx, dword [ebp - 0x50]
call fcn.004b1f44
mov byte [ebp - 4], 0xe
sub esp, 0x14
mov ecx, esp
mov dword [ebp - 0x18], esp
lea eax, [ebp + 8]
push eax
call fcn.004a6481
mov byte [ebp - 4], 0xf
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa4]
call fcn.00460cfb
add esp, 0x48
mov byte [ebp - 4], 0x10
push eax
lea ecx, [ebp - 0x74]
call fcn.004a638e
mov byte [ebp - 4], 0xa
push ebx
push 1
lea ecx, [ebp - 0xa4]
call fcn.004ab703
lea eax, [ebp - 0x74]
cmp dword [ebp - 0x60], 8
cmovae eax, dword [ebp - 0x74]
lea ecx, [ebp - 0x30]
push ecx
push 0x20119
push ebx
push eax
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
je 0x4328d7
push 0x73a9e8
mov ecx, edi
call fcn.00411aae
xor esi, esi
inc esi
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x50]
call fcn.004a9f73
mov byte [ebp - 4], 4
push ebx
push esi
lea ecx, [ebp - 0x74]
call fcn.004ab703
mov byte [ebp - 4], 3
push ebx
push esi
lea ecx, [ebp - 0x8c]
call fcn.00411bc8
mov byte [ebp - 4], bl
push ebx
push esi
lea ecx, [ebp + 8]
call fcn.004ab703
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x18], 0x7f
mov dword [ebp - 0x54], 0xff
lea eax, [ebp - 0x118]
push eax
push ebx
push ebx
push ebx
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x3ac]
push eax
push esi
push dword [ebp - 0x30]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x1c], eax
test eax, eax
jne 0x432b0c
lea eax, [ebp - 0x3ac]
push eax
lea ecx, [ebp - 0xf8]
call fcn.004a63fc
mov byte [ebp - 4], 0x11
push eax
lea edx, [ebp + 8]
lea ecx, [ebp - 0xe0]
call fcn.004b0852
pop ecx
mov byte [ebp - 4], 0x12
mov edx, eax
lea ecx, [ebp - 0xc8]
call fcn.00461197
mov byte [ebp - 4], 0x13
mov edx, eax
lea ecx, [ebp - 0x1a8]
call fcn.00460888
mov esi, eax
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0x3ac]
push eax
lea ecx, [ebp - 0x190]
call fcn.004a63fc
mov byte [ebp - 4], 0x15
mov edx, eax
lea ecx, [ebp - 0x178]
call fcn.00461197
mov byte [ebp - 4], 0x16
mov edx, eax
lea ecx, [ebp - 0x160]
call fcn.00460888
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0x17
xor eax, eax
mov word [ebp - 0x3c], ax
mov dword [ebp - 0x38], 0x7d
mov ecx, ebx
mov dword [ebp - 0x58], ecx
cmp ecx, 1
jae 0x4329cd
mov eax, dword [ebp + ecx*4 - 0x38]
sub eax, 0x21
imul eax, eax, 0x1f
cdq
idiv dword [ebp - 0x18]
push 0x7f
pop eax
add eax, edx
cdq
idiv dword [ebp - 0x18]
mov byte [ebp + ecx - 0x3c], dl
inc ecx
jmp 0x4329a7
mov byte [ebp - 0x3b], bl
lea eax, [ebp - 0x3c]
push eax
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x148]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x18
push esi
mov edx, eax
lea ecx, [ebp - 0x130]
call fcn.004b1821
pop ecx
mov esi, eax
mov byte [ebp - 4], 0x19
xor eax, eax
mov word [ebp - 0x44], ax
mov dword [ebp - 0x40], 0x53
mov ecx, ebx
mov dword [ebp - 0x5c], ecx
cmp ecx, 1
jae 0x432a31
mov eax, dword [ebp + ecx*4 - 0x40]
sub eax, 0x2a
imul eax, eax, 0x22
cdq
idiv dword [ebp - 0x18]
push 0x7f
pop eax
add eax, edx
cdq
idiv dword [ebp - 0x18]
mov byte [ebp + ecx - 0x44], dl
inc ecx
jmp 0x432a0b
mov byte [ebp - 0x43], bl
lea eax, [ebp - 0x44]
push eax
mov edx, esi
lea ecx, [ebp - 0xa4]
call fcn.0041cdde
pop ecx
mov byte [ebp - 4], 0x1a
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x8c]
call fcn.00411fef
mov byte [ebp - 4], 0x19
push ebx
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0xa4]
call fcn.00411bc8
mov byte [ebp - 4], 0x18
push ebx
push esi
lea ecx, [ebp - 0x130]
call fcn.00411bc8
mov byte [ebp - 4], 0x17
push ebx
push esi
lea ecx, [ebp - 0x148]
call fcn.00411bc8
mov byte [ebp - 4], 0x16
push ebx
push esi
lea ecx, [ebp - 0x160]
call fcn.00411bc8
mov byte [ebp - 4], 0x15
push ebx
push esi
lea ecx, [ebp - 0x178]
call fcn.00411bc8
mov byte [ebp - 4], 0x14
push ebx
push esi
lea ecx, [ebp - 0x190]
call fcn.004ab703
mov byte [ebp - 4], 0x13
push ebx
push esi
lea ecx, [ebp - 0x1a8]
call fcn.00411bc8
mov byte [ebp - 4], 0x12
push ebx
push esi
lea ecx, [ebp - 0xc8]
call fcn.00411bc8
mov byte [ebp - 4], 0x11
push ebx
push esi
lea ecx, [ebp - 0xe0]
call fcn.004ab703
mov byte [ebp - 4], 0xa
push ebx
push esi
lea ecx, [ebp - 0xf8]
call fcn.004ab703
mov esi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x2c], esi
test eax, eax
je 0x4328de
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1c], esp
lea eax, [ebp + 8]
push eax
call fcn.004a6481
mov byte [ebp - 4], 0x1b
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x110]
call fcn.00431a1e
add esp, 0x18
mov byte [ebp - 4], 0x1c
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x8c]
call fcn.00411fef
mov byte [ebp - 4], 0xa
push ebx
xor esi, esi
inc esi
push esi
lea ecx, [ebp - 0x110]
call fcn.00411bc8
push 0x73b7ec
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0xc8]
call fcn.004b1f44
pop ecx
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x74]
push ecx
mov edx, eax
lea ecx, [ebp - 0xe0]
call fcn.004b07fa
pop ecx
mov byte [ebp - 4], 0x1e
mov edx, eax
lea ecx, [ebp - 0xf8]
call fcn.00461197
mov byte [ebp - 4], 0x1f
mov edx, eax
lea ecx, [ebp - 0x110]
call fcn.004621c2
mov byte [ebp - 4], 0x20
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x8c]
call fcn.00411fef
mov byte [ebp - 4], 0x1f
push ebx
push esi
lea ecx, [ebp - 0x110]
call fcn.00411bc8
mov byte [ebp - 4], 0x1e
push ebx
push esi
lea ecx, [ebp - 0xf8]
call fcn.00411bc8
mov byte [ebp - 4], 0x1d
push ebx
push esi
lea ecx, [ebp - 0xe0]
call fcn.004ab703
mov byte [ebp - 4], 0xa
push ebx
push esi
lea ecx, [ebp - 0xc8]
call fcn.004ab703
push dword [ebp - 0x24]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
push dword [ebp - 0x30]
call esi
mov dword [edi + 0x10], ebx
mov dword [edi + 0x14], ebx
mov dword [edi + 0x14], 0xf
mov dword [edi + 0x10], ebx
cmp dword [edi + 0x14], 0x10
jb 0x432c33
mov eax, dword [edi]
jmp 0x432c35
mov eax, edi
mov byte [eax], bl
lea eax, [ebp - 0x8c]
push eax
mov ecx, edi
call fcn.0041208e
xor esi, esi
inc esi
mov dword [ebp - 0x20], esi
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x50]
call fcn.004a9f73
mov byte [ebp - 4], 4
push ebx
push esi
lea ecx, [ebp - 0x74]
call fcn.004ab703
mov byte [ebp - 4], 3
push ebx
push esi
lea ecx, [ebp - 0x8c]
call fcn.00411bc8
mov byte [ebp - 4], 2
test ebx, ebx
je 0x4328b7
mov ecx, ebx
call fcn.0040f5b8
jmp 0x4328b7