Function at 0x440230
Capabilities:
Delete file
Encode data using xor
Move file
Query or enumerate registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x474e83
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x408
mov eax, dword [0x49400c]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, edx
mov dword [ebp - 0x360], edi
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x154], ecx
mov eax, dword [ebx + 8]
mov dword [ebp - 4], 0
movaps xmm0, xmmword [0x48ab70]
movups xmmword [ebp - 0x3d8], xmm0
mov dword [ebp - 0x380], eax
movaps xmm0, xmmword [0x489a90]
mov eax, dword [ebx + 0xc]
movups xmmword [ebp - 0x3c8], xmm0
mov dword [ebp - 0x364], ecx
xor ecx, ecx
movaps xmm0, xmmword [0x4893c0]
mov dword [ebp - 0x384], eax
movups xmmword [ebp - 0x3b8], xmm0
mov dword [ebp - 0x3a8], 0x52011317
mov dword [ebp - 0x3a4], 0x2e1e1e33
mov dword [ebp - 0x3a0], 0x475c43
mov al, byte [ebp - 0x3d8]
xor byte [ebp + ecx - 0x3d7], al
inc ecx
cmp ecx, 0x3a
jb 0x4402f2
xorps xmm0, xmm0
mov byte [ebp - 0x39d], 0
lea ecx, [ebp - 0x3d7]
mov dword [ebp - 0x18c], 0
movups xmmword [ebp - 0x19c], xmm0
mov dword [ebp - 0x188], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440333
sub ecx, edx
lea eax, [ebp - 0x3d7]
push ecx
push eax
lea ecx, [ebp - 0x19c]
call fcn.00468c60
mov byte [ebp - 4], 1
xor ecx, ecx
movaps xmm0, xmmword [0x489ab0]
movups xmmword [ebp - 0x134], xmm0
mov word [ebp - 0x124], 0x1213
mov byte [ebp - 0x122], 0
nop dword [eax]
nop word [eax + eax]
mov al, byte [ebp - 0x134]
xor byte [ebp + ecx - 0x133], al
inc ecx
cmp ecx, 0x11
jb 0x440380
xorps xmm0, xmm0
mov byte [ebp - 0x122], 0
lea ecx, [ebp - 0x133]
mov dword [ebp - 0x15c], 0
movups xmmword [ebp - 0x16c], xmm0
mov dword [ebp - 0x158], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4403c1
sub ecx, edx
lea eax, [ebp - 0x133]
push ecx
push eax
lea ecx, [ebp - 0x16c]
call fcn.00468c60
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x30c]
cmp dword [ebp - 0x188], 0x10
lea eax, [ebp - 0x19c]
push ecx
cmovae eax, dword [ebp - 0x19c]
push 0x20019
push 0
push eax
push 0x80000002
mov dword [ebp - 0x154], pe_nt_image_headers32
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x440f6f
cmp dword [ebp - 0x158], 0x10
lea ecx, [ebp - 0x154]
push ecx
lea ecx, [ebp - 0x120]
push ecx
push 0
lea eax, [ebp - 0x16c]
cmovae eax, dword [ebp - 0x16c]
push 0
push eax
push dword [ebp - 0x30c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x440f63
movaps xmm0, xmmword [0x48b5a0]
xor ecx, ecx
movups xmmword [ebp - 0x350], xmm0
mov dword [ebp - 0x340], 0x7475797f
mov dword [ebp - 0x33c], 0x347d737c
mov dword [ebp - 0x338], 0x767762
nop word [eax + eax]
mov al, byte [ebp - 0x350]
xor byte [ebp + ecx - 0x34f], al
inc ecx
cmp ecx, 0x1a
jb 0x440490
xorps xmm0, xmm0
mov byte [ebp - 0x335], 0
lea ecx, [ebp - 0x34f]
mov dword [ebp - 0x174], 0
movups xmmword [ebp - 0x184], xmm0
mov dword [ebp - 0x170], 0
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4404d1
sub ecx, edx
lea eax, [ebp - 0x34f]
push ecx
push eax
lea ecx, [ebp - 0x184]
call fcn.00468c60
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 3
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440500
mov esi, 0x7fffffff
sub ecx, edx
mov edx, dword [ebp - 0x174]
mov eax, esi
sub eax, edx
cmp eax, ecx
jb 0x440f02
cmp dword [ebp - 0x170], 0x10
lea eax, [ebp - 0x184]
push edx
cmovae eax, dword [ebp - 0x184]
push eax
push ecx
lea eax, [ebp - 0x120]
push eax
push ecx
push dword [ebp - 0x320]
lea ecx, [ebp - 0x138]
call fcn.00469f50
xorps xmm0, xmm0
mov dword [ebp - 0x140], 0
movups xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
push 0xb8
lea eax, [ebp - 0x258]
mov byte [ebp - 4], 5
push 0
push eax
call sub.VCRUNTIME140.dll_memset
cmp dword [ebp - 0x124], 0x10
lea eax, [ebp - 0x138]
lea ecx, [ebp - 0x258]
cmovae eax, dword [ebp - 0x138]
push eax
call fcn.00465910
mov eax, dword [ebp - 0x258]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ifstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ifstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x258]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ebp + ecx - 0x25c], eax
mov byte [ebp - 4], 6
cmp dword [ebp - 0x1fc], 0
je 0x440f42
push 0xb0
lea eax, [ebp - 0x308]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov ch, 0x52
mov byte [ebp - 0x323], 0
mov cl, 0x26
mov byte [ebp - 0x328], ch
mov dl, 0x3f
mov byte [ebp - 0x323], 0
xor cl, ch
xor dl, ch
mov al, 0x7c
mov byte [ebp - 0x326], cl
xor al, ch
mov byte [ebp - 0x325], dl
mov ah, 0x22
mov byte [ebp - 0x327], al
add esp, 0xc
xor ah, ch
lea ecx, [ebp - 0x327]
mov byte [ebp - 0x324], ah
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440641
sub ecx, edx
mov eax, esi
mov edx, dword [ebp - 0x128]
sub eax, edx
cmp eax, ecx
jb 0x440f07
cmp dword [ebp - 0x124], 0x10
lea eax, [ebp - 0x138]
push ecx
cmovae eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x327]
push ecx
push edx
push eax
push ecx
push dword [ebp - 0x320]
lea ecx, [ebp - 0x39c]
call fcn.00469f50
mov byte [ebp - 4], 7
lea eax, [ebp - 0x39c]
cmp dword [ebp - 0x388], 0x10
lea ecx, [ebp - 0x308]
cmovae eax, dword [ebp - 0x39c]
sub esp, 0xc
push eax
call fcn.00464d20
mov eax, dword [ebp - 0x308]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x308]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x30c], eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x388]
cmp ecx, 0x10
jb 0x44071a
mov edx, dword [ebp - 0x39c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440710
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x440710
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004733de
add esp, 8
cmp dword [ebp - 0x2b8], 0
mov dword [ebp - 0x38c], 0
mov dword [ebp - 0x388], 0xf
mov byte [ebp - 0x39c], 0
je 0x440f16
mov eax, dword [ebp - 0x258]
lea ecx, [ebp - 0x258]
push 0xa
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
push eax
lea edx, [ebp - 0x150]
lea ecx, [ebp - 0x258]
call fcn.0046c4f0
mov edx, eax
add esp, 4
mov eax, dword [edx]
mov ecx, dword [eax + 4]
add ecx, edx
call dword [sym.imp.MSVCP140.dll_public:_bool___thiscall_std::ios_base::operator_bool_void_const]
test al, al
je 0x440a78
mov esi, dword [edi + 0x10]
mov eax, edi
mov edi, dword [edi + 0x14]
cmp edi, 0x10
jb 0x44079c
mov eax, dword [ebp - 0x360]
mov eax, dword [eax]
cmp dword [ebp - 0x13c], 0x10
lea ecx, [ebp - 0x150]
mov edx, dword [ebp - 0x140]
cmovae ecx, dword [ebp - 0x150]
push esi
push eax
push ecx
call fcn.00468b50
add esp, 0xc
cmp eax, 0xffffffff
je 0x440a38
mov al, 0x35
mov byte [ebp - 0x31c], 0x15
mov ah, al
mov byte [ebp - 0x313], 0
mov cl, al
mov byte [ebp - 0x30d], ah
xor cl, byte [ebp - 0x31c]
mov dl, al
xor al, byte [ebp - 0x31c]
mov ch, ah
mov byte [ebp - 0x31b], al
mov dh, ah
mov al, byte [ebp - 0x30d]
mov byte [ebp - 0x31a], cl
mov cl, byte [ebp - 0x31c]
xor al, cl
mov byte [ebp - 0x30e], ah
xor dl, cl
mov byte [ebp - 0x315], al
mov al, byte [ebp - 0x30e]
xor ch, cl
xor dh, cl
mov byte [ebp - 0x317], ch
xor ah, cl
mov byte [ebp - 0x319], dl
xor al, cl
mov byte [ebp - 0x316], dh
lea ecx, [ebp - 0x31b]
mov byte [ebp - 0x318], ah
mov byte [ebp - 0x314], al
lea edx, [ecx + 1]
mov byte [ebp - 0x313], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440860
mov eax, 0x7fffffff
sub ecx, edx
sub eax, esi
cmp eax, ecx
jb 0x440f0c
mov edx, dword [ebp - 0x360]
mov eax, edx
cmp edi, 0x10
jb 0x440887
mov eax, dword [edx]
push esi
push eax
push ecx
lea eax, [ebp - 0x31b]
push eax
push ecx
push dword [ebp - 0x320]
lea ecx, [ebp - 0x34c]
call fcn.00469f50
mov esi, dword [ebp - 0x380]
mov eax, esi
mov byte [ebp - 4], 0xa
cmp dword [esi + 0x14], 0x10
jb 0x4408b7
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x34c]
push eax
call fcn.00466460
mov dword [ebp - 0x36c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x37c], xmm0
mov dword [ebp - 0x368], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x37c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x36c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov esi, dword [ebp - 0x384]
mov eax, esi
mov byte [ebp - 4], 0xb
cmp dword [esi + 0x14], 0x10
jb 0x440920
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x37c]
push eax
call fcn.00466460
lea ecx, [ebp - 0x150]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x3f8], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x3f8]
push eax
movq qword [ebp - 0x3e8], xmm0
call fcn.00466620
mov ecx, dword [ebp - 0x3e4]
cmp ecx, 0x10
jb 0x4409a3
mov edx, dword [ebp - 0x3f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440999
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440a28
push ecx
push edx
call fcn.004733de
add esp, 8
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x368]
cmp ecx, 0x10
jb 0x4409dd
mov edx, dword [ebp - 0x37c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4409d3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440a28
push ecx
push edx
call fcn.004733de
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x338]
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x368], 0xf
mov byte [ebp - 0x37c], 0
cmp ecx, 0x10
jb 0x440a38
mov edx, dword [ebp - 0x34c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440a2e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x440a2e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004733de
add esp, 8
cmp dword [ebp - 0x13c], 0x10
lea edx, [ebp - 0x150]
push dword [ebp - 0x140]
cmovae edx, dword [ebp - 0x150]
lea ecx, [ebp - 0x308]
call fcn.0046c830
add esp, 4
mov ecx, eax
push 0x4681b0
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edi, dword [ebp - 0x360]
jmp 0x440742
lea ecx, [ebp - 0x304]
call fcn.00466cd0
test eax, eax
jne 0x440aa0
mov eax, dword [ebp - 0x308]
lea ecx, [ebp - 0x308]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea ecx, [ebp - 0x248]
call fcn.00466cd0
test eax, eax
jne 0x440ac8
mov eax, dword [ebp - 0x258]
lea ecx, [ebp - 0x258]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
cmp dword [ebp - 0x124], 0x10
lea eax, [ebp - 0x138]
cmovae eax, dword [ebp - 0x138]
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
mov edi, dword [ebp - 0x124]
lea esi, [ebp - 0x138]
mov ch, 0x50
mov byte [ebp - 0x32b], 0
add esp, 4
mov byte [ebp - 0x330], ch
cmp edi, 0x10
mov byte [ebp - 0x32b], 0
mov cl, 0x24
mov dl, 0x3d
cmovae esi, dword [ebp - 0x138]
mov al, 0x7e
xor cl, ch
xor dl, ch
xor al, ch
mov byte [ebp - 0x32e], cl
mov ah, 0x20
mov byte [ebp - 0x32d], dl
xor ah, ch
mov byte [ebp - 0x32f], al
lea ecx, [ebp - 0x32f]
mov byte [ebp - 0x32c], ah
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440b43
sub ecx, edx
mov eax, 0x7fffffff
mov edx, dword [ebp - 0x128]
sub eax, edx
cmp eax, ecx
jb 0x440f11
push ecx
lea ecx, [ebp - 0x32f]
cmp edi, 0x10
push ecx
push edx
lea eax, [ebp - 0x138]
cmovae eax, dword [ebp - 0x138]
push eax
push ecx
push dword [ebp - 0x320]
lea ecx, [ebp - 0x37c]
call fcn.00469f50
cmp dword [ebp - 0x368], 0x10
lea eax, [ebp - 0x37c]
push esi
cmovae eax, dword [ebp - 0x37c]
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_rename]
mov ecx, dword [ebp - 0x368]
add esp, 8
cmp ecx, 0x10
jb 0x440be8
mov edx, dword [ebp - 0x37c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440bde
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x440bde
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004733de
add esp, 8
movaps xmm0, xmmword [0x48afa0]
xor ecx, ecx
movups xmmword [ebp - 0x350], xmm0
mov dword [ebp - 0x340], 0x521f1d11
mov dword [ebp - 0x33c], 0x17110701
mov dword [ebp - 0x338], 0x531d0101
mov byte [ebp - 0x334], 0
nop dword [eax]
mov al, byte [ebp - 0x350]
xor byte [ebp + ecx - 0x34f], al
inc ecx
cmp ecx, 0x1b
jb 0x440c20
mov esi, dword [ebp - 0x320]
lea ecx, [ebp - 0x34f]
xorps xmm0, xmm0
mov byte [ebp - 0x334], 0
lea edx, [ecx + 1]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x440c60
sub ecx, edx
lea eax, [ebp - 0x34f]
push ecx
push eax
mov ecx, esi
call fcn.00468c60
lea ecx, [ebp - 0x308]
call fcn.00440fa0
lea ecx, [ebp - 0x258]
call fcn.0043cfc0
mov ecx, dword [ebp - 0x13c]
cmp ecx, 0x10
jb 0x440cc8
mov edx, dword [ebp - 0x150]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440cbe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440def
push ecx
push edx
call fcn.004733de
add esp, 8
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0xf
mov byte [ebp - 0x150], 0
cmp ecx, 0x10
jb 0x440d1d
mov edx, dword [ebp - 0x138]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440d13
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440def
push ecx
push edx
call fcn.004733de
add esp, 8
mov ecx, dword [ebp - 0x170]
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0xf
mov byte [ebp - 0x138], 0
cmp ecx, 0x10
jb 0x440d72
mov edx, dword [ebp - 0x184]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440d68
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440def
push ecx
push edx
call fcn.004733de
add esp, 8
mov ecx, dword [ebp - 0x158]
cmp ecx, 0x10
jb 0x440da8
mov edx, dword [ebp - 0x16c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440d9e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440def
push ecx
push edx
call fcn.004733de
add esp, 8
mov ecx, dword [ebp - 0x188]
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x158], 0xf
mov byte [ebp - 0x16c], 0
cmp ecx, 0x10
jb 0x440dff
mov edx, dword [ebp - 0x19c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x440df5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x440df5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.004733de
add esp, 8
mov eax, esi
jmp 0x440ee4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.00472e83
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0043c240
call fcn.0043c240
call fcn.0043c240
call fcn.0043c240
lea ecx, [ebp - 0x258]
call fcn.004658e0
push str.Erro_ao_abrir_o_arquivo_tempor
lea ecx, [ebp - 0x404]
call fcn.0043c3e0
push 0x490624
lea eax, [ebp - 0x404]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
push str.Erro_ao_abrir_o_arquivo.
lea ecx, [ebp - 0x410]
call fcn.0043c3e0
push 0x490624
lea eax, [ebp - 0x410]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
push dword [ebp - 0x30c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.Erro_ao_abrir_a_chave_do_registro.
lea ecx, [ebp - 0x41c]
call fcn.0043c3e0
push 0x490624
lea eax, [ebp - 0x41c]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3