Function at 0x43c284
Capabilities:
Encode data using base64
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x78
mov dword [ebp - 0x10], 0xb9be0274
xor esi, esi
mov eax, dword [ebp - 0x10]
cmp eax, 0x304bf64
jg 0x43c306
cmp eax, 0xbb200e1a
jle 0x43c391
cmp eax, 0xdbd7bab3
jg 0x43c47f
cmp eax, 0xcde90dc8
jg 0x43c61f
cmp eax, 0xc45fd1d7
jle 0x43c8e3
cmp eax, 0xc55de403
jg 0x43ccf0
cmp eax, 0xc45fd1d8
je 0x43d00f
cmp eax, 0xc465bf16
jne 0x43c296
mov eax, dword [ebp - 0x14]
shl eax, 0xe
or eax, 0xe8
imul eax, eax, 0x13e00
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x262c836d
jmp 0x43c296
cmp eax, 0x41dfdb79
jle 0x43c3df
cmp eax, 0x60a9cd51
jg 0x43c4eb
cmp eax, 0x558f48b4
jg 0x43c692
cmp eax, 0x4979ff2f
jle 0x43c919
cmp eax, 0x4f2935d0
jg 0x43cd12
cmp eax, 0x4979ff30
je 0x43d024
cmp eax, 0x4be6d1fe
jne 0x43c296
mov eax, dword [ebp - 0x14]
shr eax, 5
and eax, 0x1ffff
mov ecx, eax
imul ecx, eax
shr eax, 1
imul edx, ecx, 0x55fd
dec edx
imul eax, eax, 0x7f00
add eax, 0x26b200
mov dword [ebp - 0x14], eax
mov eax, 0x5799f7e5
cmp edx, ecx
je 0x43d8a9
mov eax, 0x86bbd9ff
jmp 0x43d8a9
cmp eax, 0x9f79ae4a
jle 0x43c53a
cmp eax, 0xa8d16cdd
jg 0x43c6d5
cmp eax, 0xa260c58e
jle 0x43c94f
cmp eax, 0xa5ce58a0
jg 0x43cd4b
cmp eax, 0xa260c58f
je 0x43d057
cmp eax, 0xa278fe7b
jne 0x43c296
mov dword [ebp - 0x10], 0xc23594ff
jmp 0x43c296
cmp eax, 0x28d92f98
jle 0x43c5a1
cmp eax, 0x3090480f
jg 0x43c722
cmp eax, 0x2f04d3b5
jle 0x43c976
cmp eax, 0x2f274303
jg 0x43cd7e
cmp eax, 0x2f04d3b6
je 0x43d070
cmp eax, 0x2f191a07
jne 0x43c296
mov ebx, dword [ebp - 0x18]
shr ebx, 9
and ebx, 0x7ff000
lea eax, [ebx + ebx*8]
lea edi, [eax + eax*2]
add edi, ebx
mov dword [ebp - 0x18], edi
push 0x38d0
push 0x1351
push 0x3474
push edi
call fcn.0043d950
add esp, 0x10
push 0x1b0c
push edi
push 0xf20
push 0x3a5c
call fcn.0043d950
add esp, 0x10
mov eax, 0x3f7e4af7
test ebx, ebx
je 0x43d3b2
mov eax, 0xfe2ecccb
jmp 0x43d3b2
cmp eax, 0xeafef8d7
jg 0x43c776
cmp eax, 0xe4fa5c79
jle 0x43c9a3
cmp eax, 0xe773e137
jg 0x43cdb9
cmp eax, 0xe4fa5c7a
je 0x43d092
cmp eax, 0xe5ceb192
jne 0x43c296
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0x17]
imul ecx, ecx
add eax, 0xffffff37
imul edx, ecx, 0x190f
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x2f191a07
cmp ecx, edx
je 0x43c4dc
mov eax, 0x6f1ca5b1
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 1
jmp 0x43c296
cmp eax, 0x70f09108
jle 0x43c7fd
cmp eax, 0x7b338ee0
jle 0x43c9d0
cmp eax, 0x7c7c378f
jg 0x43ce07
cmp eax, 0x7b338ee1
je 0x43d0b2
cmp eax, 0x7beaea4b
jne 0x43c296
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xf003f
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xc1669378
jmp 0x43c296
cmp eax, 0x8dae7415
jle 0x43c843
cmp eax, 0x95ddfebe
jle 0x43ca26
cmp eax, 0x9b8b4ea5
jg 0x43ce3b
cmp eax, 0x95ddfebf
je 0x43d0f5
cmp eax, 0x97c373f8
jne 0x43c296
mov edi, dword [ebp - 0x18]
shr edi, 0xd
and edi, 0xfffffffc
mov dword [ebp - 0x18], edi
push edi
call fcn.0043c284
add esp, 4
mov eax, 0x46b8f08f
cmp edi, 0xf0
jae 0x43d8a9
mov eax, 0x70f09109
jmp 0x43d8a9
cmp eax, 0x11e6c6f3
jle 0x43c87b
cmp eax, 0x23bc4a88
jle 0x43ca62
cmp eax, 0x262c836c
jg 0x43ce6f
cmp eax, 0x23bc4a89
je 0x43d134
cmp eax, 0x24afbf80
jne 0x43c296
mov eax, dword [ebp - 0x18]
shr eax, 7
imul ebx, eax, 0x5f00
mov dword [ebp - 0x18], ebx
push ebx
call fcn.0043c284
add esp, 4
push ebx
push 0x25a5
push 0x2800
push 0x5ed7
call fcn.0043d950
add esp, 0x10
mov eax, 0x7beaea4b
test ebx, ebx
je 0x43d8a9
mov eax, 0xcf350614
jmp 0x43d8a9
cmp eax, 0xd2b4ccbc
jle 0x43ca98
cmp eax, 0xd757abe2
jg 0x43cebd
cmp eax, 0xd2b4ccbd
je 0x43d14d
cmp eax, 0xd4d2b734
jne 0x43c296
mov eax, dword [ebp - 0x4c]
movzx ecx, word [0x472e98]
mov word [eax + 8], cx
mov ecx, dword [0x472e94]
mov dword [eax + 4], ecx
mov ecx, dword [0x472e90]
mov dword [eax], ecx
push 4
push 0x472e9a
push 5
push dword [ebp - 0x4c]
call fcn.0043d950
add esp, 0x10
sub esp, 0x68
mov eax, esp
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x72506788
jmp 0x43c296
cmp eax, 0x5be1fd6a
jle 0x43cadb
cmp eax, 0x5f981635
jg 0x43cf00
cmp eax, 0x5be1fd6b
je 0x43d178
cmp eax, 0x5f8156ed
jne 0x43c296
mov eax, dword [ebp - 0x1c]
push dword [eax]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call edi
push dword [ebp - 0x28]
call edi
jmp 0x43d07f
cmp eax, 0xb5c6f61d
jle 0x43cb20
cmp eax, 0xb68fd43f
jg 0x43cf5c
cmp eax, 0xb5c6f61e
je 0x43d192
cmp eax, 0xb6771f41
jne 0x43c296
push dword [ebp - 0x2c]
push dword [ebp - 0x50]
push dword [ebp - 0x4c]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0xa82180f2
jmp 0x43c296
cmp eax, 0x3c8ab27b
jle 0x43cb76
cmp eax, 0x3f7e4af6
jg 0x43cf84
cmp eax, 0x3c8ab27c
je 0x43d1a1
cmp eax, 0x3def8ce3
jne 0x43c296
mov ecx, dword [ebp - 0x18]
mov eax, 0x118
add ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, 0x46dbf1f
cmp ecx, 0x8b
jl 0x43d3b2
mov eax, 0x8af531ab
jmp 0x43d3b2
cmp eax, 0xf4d8c38c
jle 0x43cbbc
cmp eax, 0xfe2eccca
jg 0x43cfa9
cmp eax, 0xf4d8c38d
je 0x43d1ad
cmp eax, 0xf60a9ff9
jne 0x43c296
mov eax, dword [ebp - 0x18]
shr eax, 0xb
lea ebx, [eax*4 - 0x134]
mov dword [ebp - 0x18], ebx
push 0x50d8
push 0x61ca
push 0x1a76
push ebx
call fcn.0043d950
add esp, 0x10
push 0x1995
push 0x5102
push 0x20a5
push ebx
call fcn.0043d950
add esp, 0x10
mov eax, 0x5f981636
cmp ebx, 0xa8
jae 0x43d8a9
mov eax, 0x23bc4a89
jmp 0x43d8a9
cmp eax, 0x6be48a11
jle 0x43cbe9
cmp eax, 0x6e025168
jg 0x43cfee
cmp eax, 0x6be48a12
je 0x43d1e2
cmp eax, 0x6bf08bb8
jne 0x43c296
push dword [ebp - 0x44]
call fcn.00424916
add esp, 4
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0x839abb37
jmp 0x43c296
cmp eax, 0x86bbd9fe
jg 0x43cc69
cmp eax, 0x839abb37
je 0x43d1f4
cmp eax, 0x84469960
je 0x43d20f
cmp eax, 0x867303d0
jne 0x43c296
mov dword [ebp - 0x10], 0xb114a1e3
jmp 0x43c296
cmp eax, 0xd21419e
jg 0x43cca4
cmp eax, 0x304bf65
je 0x43d249
cmp eax, 0x46dbf1f
je 0x43d288
cmp eax, 0x8f0cc61
jne 0x43c296
mov eax, dword [ebp - 0x14]
shr eax, 0x16
imul ecx, eax, 0x1660
imul eax, eax
imul edx, eax, 0x4cbd
dec edx
and ecx, 0x7f8000
add ecx, 0xffb40000
mov dword [ebp - 0x14], ecx
mov ecx, 0xf4d8c38d
cmp eax, edx
je 0x43d705
mov ecx, 0xe107af37
jmp 0x43d705
cmp eax, 0xbb200e1b
je 0x43d2cb
cmp eax, 0xc1669378
je 0x43d2f3
cmp eax, 0xc23594ff
jne 0x43c296
mov eax, dword [ebp - 0x20]
mov dword [eax], 0x800
mov dword [ebp - 0x10], 0x6e025169
jmp 0x43c296
cmp eax, 0x41dfdb7a
je 0x43d30e
cmp eax, 0x434d8672
je 0x43d358
cmp eax, 0x46b8f08f
jne 0x43c296
push eax
sub esp, 0x64
mov eax, esp
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x5080623c
jmp 0x43c296
cmp eax, 0x9f79ae4b
je 0x43d376
cmp eax, 0xa0987a73
je 0x43d388
cmp eax, 0xa0eba314
jne 0x43c296
shl dword [ebp - 0x18], 0x16
jmp 0x43c997
cmp eax, 0x28d92f99
je 0x43d3ba
cmp eax, 0x2bf5fa41
je 0x43d3d6
cmp eax, 0x2e4a7f70
jne 0x43c296
mov dword [ebp - 0x10], 0x7d2825a7
jmp 0x43c296
cmp eax, 0xdbd7bab4
je 0x43d407
cmp eax, 0xe107af37
je 0x43d416
cmp eax, 0xe3056842
jne 0x43c296
mov dword [ebp - 0x10], 0x619ba9b3
jmp 0x43c296
cmp eax, 0x70f09109
je 0x43d422
cmp eax, 0x72506788
je 0x43d440
cmp eax, 0x78623fa6
jne 0x43c296
mov eax, dword [ebp - 0x14]
lea ecx, [eax*8]
sub ecx, eax
mov edx, ecx
imul edx, ecx
shr ecx, 8
imul edi, edx, 0x25a1
dec edi
mov dword [ebp - 0x14], ecx
mov eax, 0xc45fd1d8
cmp edi, edx
je 0x43d8a9
mov eax, 0x558f48b5
jmp 0x43d8a9
cmp eax, 0x8dae7416
je 0x43d45b
cmp eax, 0x929cf1d7
je 0x43d475
cmp eax, 0x949ea37e
jne 0x43c296
imul eax, dword [ebp - 0x14], 0x972c
add eax, 0xffff17f8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xfe2ecccb
jmp 0x43c296
cmp eax, 0x11e6c6f4
je 0x43d4b9
cmp eax, 0x13b9c9b0
je 0x43d4da
cmp eax, 0x1a64fc57
jne 0x43c296
mov eax, dword [ebp - 0x50]
add eax, 0x66
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0x13b9c9b0
jmp 0x43c296
cmp eax, 0xcde90dc9
je 0x43d4ee
cmp eax, 0xceeb20c5
je 0x43d4fa
cmp eax, 0xcf350614
jne 0x43c296
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x3c], eax
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x8f0cc61
jmp 0x43c296
cmp eax, 0x558f48b5
je 0x43d53e
cmp eax, 0x5799f7e5
je 0x43d55c
cmp eax, 0x59fa0db5
jne 0x43c296
imul eax, dword [ebp - 0x18], 0x2300
add eax, 0x5280
mov dword [ebp - 0x18], eax
push eax
call fcn.0043c284
add esp, 4
mov dword [ebp - 0x10], 0xf60a9ff9
jmp 0x43c296
cmp eax, 0xa8d16cde
je 0x43d59f
cmp eax, 0xb114a1e3
je 0x43d5ab
cmp eax, 0xb3b593c5
jne 0x43c296
mov eax, dword [ebp - 0x18]
add eax, 0x15
and eax, 0x7ffff
imul edi, eax, 0x97
mov dword [ebp - 0x18], edi
push edi
call fcn.0043c284
add esp, 4
mov eax, 0xb68fd440
cmp edi, 0x39
jb 0x43d8a9
mov eax, 0xd2b4ccbd
jmp 0x43d8a9
cmp eax, 0x30904810
je 0x43d5d9
cmp eax, 0x326519ba
je 0x43d5eb
cmp eax, 0x37c82c73
jne 0x43c296
mov eax, dword [ebp - 0x14]
shl eax, 3
and eax, 0x1ffff8
lea ecx, [eax + eax*8]
lea ecx, [ecx + ecx*2]
add eax, ecx
add eax, 0xfffffff6
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xa8d16cde
jmp 0x43c296
cmp eax, 0xeafef8d8
je 0x43d602
cmp eax, 0xeb3a1bbd
je 0x43d60e
cmp eax, 0xebc0c12f
jne 0x43c296
mov dword [ebp - 0x10], 0x305d3719
jmp 0x43c296
cmp eax, 0x60a9cd52
je 0x43d62f
cmp eax, 0x619ba9b3
je 0x43d63b
cmp eax, 0x65bbaa71
jne 0x43c296
mov eax, dword [ebp - 0x48]
mov word [eax + 0x66], 0
push 0x66
push 0x472e20
push dword [ebp - 0x48]
call fcn.0044ce50
add esp, 0xc
push 5
push 0x472e86
push 0x33
push dword [ebp - 0x48]
call fcn.0043d950
add esp, 0x10
lea eax, [ebp - 0x28]
push eax
push 0x20019
push 0
push dword [ebp - 0x48]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0x27bdab9a
test eax, eax
je 0x43d705
mov ecx, 0x89437d73
jmp 0x43d705
cmp eax, 0x86bbd9ff
je 0x43d647
cmp eax, 0x89437d73
je 0x43d69d
cmp eax, 0x8af531ab
jne 0x43c296
mov dword [ebp - 0x28], esi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [eax], esi
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0x9f79ae4b
jmp 0x43c296
cmp eax, 0xd21419f
je 0x43d6dc
cmp eax, 0xd469e6c
je 0x43d70d
cmp eax, 0xe728405
jne 0x43c296
push dword [ebp - 0x80]
push dword [ebp - 0x5c]
push dword [ebp - 0x40]
push dword [ebp + 8]
call fcn.004250fe
add esp, 0x10
push dword [ebp - 0x44]
call fcn.0045d1bc
add esp, 4
mov dword [ebp - 0x10], 0x326519ba
jmp 0x43c296
cmp eax, 0xc55de404
je 0x43d72a
cmp eax, 0xc9f1c1e4
jne 0x43c296
mov dword [ebp - 0x10], 0xdbd7bab4
jmp 0x43c296
cmp eax, 0x4f2935d1
je 0x43d745
cmp eax, 0x5080623c
jne 0x43c296
imul eax, dword [ebp - 0x14], 0xe0
add eax, 0x1fff3cf7
shr eax, 4
and eax, 0x1ffffff
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x65bbaa71
jmp 0x43c296
cmp eax, 0xa5ce58a1
je 0x43d75a
cmp eax, 0xa82180f2
jne 0x43c296
mov eax, dword [ebp - 0x14]
shr eax, 2
and eax, 0xfffffff
add eax, 0xffffff8e
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xcde90dc9
jmp 0x43c296
cmp eax, 0x2f274304
je 0x43d782
cmp eax, 0x305d3719
jne 0x43c296
push esi
push esi
push esi
push esi
push dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp - 0x64]
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0xd757abe3
jmp 0x43c296
cmp eax, 0xe773e138
je 0x43d78e
cmp eax, 0xe84db254
jne 0x43c296
mov eax, dword [ebp - 0x14]
imul ecx, eax, 0xe3
imul ecx, ecx
imul edx, ecx, 0x4a19
imul eax, eax, 0xbf88000
dec edx
or eax, 0xd1
mov dword [ebp - 0x14], eax
mov eax, 0x3def8ce3
cmp ecx, edx
je 0x43d8a9
mov eax, 0xe728405
jmp 0x43d8a9
cmp eax, 0x7c7c3790
je 0x43d7ae
cmp eax, 0x7d2825a7
jne 0x43c296
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov word [eax + 0x16], 0
mov dword [ebp - 0x10], 0x78623fa6
jmp 0x43c296
cmp eax, 0x9b8b4ea6
je 0x43d7c8
cmp eax, 0x9d07d720
jne 0x43c296
push 0x66
push 0x472eb0
push dword [ebp - 0x50]
call fcn.0044ce50
add esp, 0xc
mov dword [ebp - 0x10], 0xe773e138
jmp 0x43c296
cmp eax, 0x262c836d
je 0x43d822
cmp eax, 0x27bdab9a
jne 0x43c296
mov eax, dword [ebp - 0x14]
shr eax, 0x10
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x7f3f
shl eax, 0xd
dec edx
or eax, 0x45
mov dword [ebp - 0x14], eax
mov eax, 0xf4d8c38d
cmp ecx, edx
je 0x43ceae
mov eax, 0x30904810
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x60], 0
jmp 0x43c296
cmp eax, 0xd757abe3
je 0x43d85a
cmp eax, 0xda3e6df0
jne 0x43c296
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0x1b]
imul ecx, ecx
imul edx, ecx, 0x25cf
dec edx
add eax, 0x3e
mov dword [ebp - 0x14], eax
mov eax, 0xb9be0274
cmp ecx, edx
je 0x43d8a9
mov eax, 0xeafef8d8
jmp 0x43d8a9
cmp eax, 0x5f981636
je 0x43d866
cmp eax, 0x5fe21574
jne 0x43c296
imul ebx, dword [ebp - 0x18], 0x70a9
mov dword [ebp - 0x18], ebx
push ebx
call fcn.0043c284
add esp, 4
push 0x2cd2
push 0x5748
push ebx
push 0xc79
call fcn.0043d950
add esp, 0x10
mov eax, 0x95ddfebf
cmp ebx, 0xf4
jb 0x43d8a9
mov eax, 0x6bf08bb8
jmp 0x43d8a9
cmp eax, 0xb68fd440
je 0x43d878
cmp eax, 0xb9be0274
jne 0x43c296
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xf4d8c38d
jmp 0x43c296
cmp eax, 0x3f7e4af7
je 0x43d8b1
cmp eax, 0x4163c8ab
jne 0x43c296
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0x3f7e4af7
jmp 0x43c296
cmp eax, 0xfe2ecccb
je 0x43d8cf
cmp eax, 0x4fe691
jne 0x43c296
push dword [ebp - 0x1c]
push 0x20019
push 0
push dword [ebp - 0x30]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0xceeb20c5
test eax, eax
je 0x43d705
mov ecx, 0x5f8156ed
jmp 0x43d705
cmp eax, 0x6e025169
jne 0x43d919
imul eax, dword [ebp - 0x14], 0x86
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xb5c6f61e
jmp 0x43c296
mov eax, dword [ebp - 0x20]
mov dword [eax], 0x800
mov dword [ebp - 0x10], 0x5f981636
jmp 0x43c296
imul eax, dword [ebp - 0x18], 0x1cc0
add eax, 0x104
mov dword [ebp - 0x18], eax
push 0x1402
push 0x4ddc
push 0x47ee
push eax
call fcn.0043d950
add esp, 0x10
mov dword [ebp - 0x10], 0xa0987a73
jmp 0x43c296
cmp dword [ebp - 0x6c], 0
mov eax, 0x434d8672
je 0x43d8a9
mov eax, 0x37c82c73
jmp 0x43d8a9
imul eax, dword [ebp - 0x14], 0xb80
add eax, 0xfffb14c0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x6f1ca5b1
mov dword [ebp - 0x24], 0
jmp 0x43c296
mov eax, dword [ebp - 0x18]
shl eax, 0x10
or eax, 0x84
imul eax, eax, 0x27c0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xa0eba314
jmp 0x43c296
imul edi, dword [ebp - 0x18], 0x1580
add edi, 0xeb
mov dword [ebp - 0x18], edi
push 0x627f
push 0x5f6
push edi
push 0x32a
call fcn.0043d950
add esp, 0x10
mov eax, 0x8af531ab
cmp edi, 0x9d
jl 0x43d3b2
mov eax, 0x305d3719
jmp 0x43d3b2
mov dword [ebp - 0x18], esi
push 0x59f9
push 0x76f
push esi
push 0x1d38
call fcn.0043d950
add esp, 0x10
push 0x826
push 0x2d03
push 0x38be
push esi
call fcn.0043d950
add esp, 0x10
mov dword [ebp - 0x10], 0x929cf1d7
jmp 0x43c296
cmp dword [ebp - 0x44], 0
mov eax, 0x2f04d3b6
je 0x43d8a9
mov eax, 0xe3056842
jmp 0x43d8a9
mov eax, dword [ebp - 0x18]
mov ecx, 0x195
add eax, ecx
shr eax, 0xb
imul ecx, eax, 0x4c
mov dword [ebp - 0x18], ecx
mov eax, 0xc23594ff
cmp ecx, 0x6c
jae 0x43d8a9
mov eax, 0x4fe691
jmp 0x43d8a9
mov eax, dword [ebp - 0x14]
shr eax, 7
and eax, 0x3fffff
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x9d07d720
jmp 0x43c296
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], 0x2e4a7f70
jmp 0x43c296
mov dword [ebp - 0x10], 0xc45fd1d8
jmp 0x43c296
push eax
sub esp, 0x7fc
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0x800
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
sub esp, 0x7fc
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xcf350614
jmp 0x43c296
mov dword [ebp - 0x10], 0x30904810
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x60], eax
jmp 0x43c296
imul eax, dword [ebp - 0x14], 0x6e00000
add eax, 0xffb45f86
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x60a9cd52
jmp 0x43c296
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff1b
add eax, ecx
imul ecx, eax, 0x1e20
imul eax, eax
imul edx, eax, 0xc5d
dec edx
add ecx, 0xffffff2f
mov dword [ebp - 0x14], ecx
mov ecx, 0xb9be0274
cmp edx, eax
je 0x43d705
mov ecx, 0xb6771f41
jmp 0x43d705
mov eax, dword [ebp - 0x18]
shr eax, 0xf
imul edi, eax, 0x5940
mov dword [ebp - 0x18], edi
push edi
push 0x5ac4
push 0x5532
push 0x582f
call fcn.0043d950
add esp, 0x10
mov eax, 0x70f09109
cmp edi, 0x19
jl 0x43d8a9
mov eax, 0x5f981636
jmp 0x43d8a9
mov eax, dword [ebp - 0x18]
mov ebx, eax
shl ebx, 5
sub ebx, eax
add ebx, 0x1fe
mov dword [ebp - 0x18], ebx
push ebx
push 0x381c
push 0x4180
push 0xcb1
call fcn.0043d950
add esp, 0x10
mov eax, 0x46b8f08f
cmp ebx, 0x11
jb 0x43d3b2
mov eax, 0xbb200e1b
jmp 0x43d3b2
mov eax, dword [ebp - 0x18]
lea ecx, [eax*4 - 0xe0]
mov dword [ebp - 0x18], ecx
mov eax, 0x305d3719
cmp ecx, 0xf6
jae 0x43d3b2
mov eax, 0x3f7e4af7
jmp 0x43d3b2
imul eax, dword [ebp - 0x14], 0x34800
add eax, 0x2c1ff78
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x70f09109
jmp 0x43c296
mov ebx, dword [ebp - 0x18]
shl ebx, 6
add ebx, 0xffffcec8
mov eax, ebx
shr eax, 7
add eax, 0xffffffb3
mov dword [ebp - 0x18], eax
push eax
push 0x2386
push 0x14f7
push 0xf4
call fcn.0043d950
add esp, 0x10
mov eax, 0x7beaea4b
cmp ebx, 0x6180
jae 0x43d8a9
mov eax, 0x46b8f08f
jmp 0x43d8a9
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov word [eax + 0xa], 0
mov dword [ebp - 0x10], 0xd4d2b734
jmp 0x43c296
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0xc9f1c1e4
jmp 0x43c296
mov eax, dword [ebp - 0x18]
shr eax, 3
imul edi, eax, 0x93
shr edi, 3
mov dword [ebp - 0x18], edi
push edi
call fcn.0043c284
add esp, 4
mov eax, 0x8af531ab
cmp edi, 0x15
je 0x43d3b2
mov eax, 0x23bc4a89
mov dword [ebp - 0x10], eax
jmp 0x43c296
mov eax, dword [ebp - 0x14]
lea eax, [eax*8 - 0xa8]
shr eax, 0xc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xc55de404
jmp 0x43c296
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0xa]
imul ecx, ecx
imul edx, ecx, 0x32c5
dec edx
add eax, eax
add eax, 0x277
mov dword [ebp - 0x14], eax
mov eax, 0x558f48b5
cmp ecx, edx
je 0x43d8a9
mov eax, 0x2f274304
jmp 0x43d8a9
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0x7beaea4b
jmp 0x43c296
mov dword [ebp - 0x10], 0x8af531ab
jmp 0x43c296
push 2
push 0xc800
call fcn.0045c783
add esp, 8
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0xda3e6df0
jmp 0x43c296
imul eax, dword [ebp - 0x14], 0xaaa
add eax, 0xfffffc45
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x1a64fc57
jmp 0x43c296
mov eax, dword [ebp - 0x18]
shl eax, 7
add eax, 0xffffc000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xb9be0274
jmp 0x43c296
mov ebx, dword [ebp - 0x18]
mov eax, 0xffffff72
add ebx, eax
mov eax, ebx
shr eax, 1
mov dword [ebp - 0x18], eax
push 0x13c1
push eax
push 0x210
push 0x1be1
call fcn.0043d950
add esp, 0x10
mov eax, 0x305d3719
cmp ebx, 0x14c
jae 0x43d8a9
mov eax, 0x7beaea4b
jmp 0x43d8a9
mov eax, dword [ebp - 0x1c]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0xeb3a1bbd
jmp 0x43c296
mov eax, dword [ebp - 0x70]
mov word [eax], 0
mov dword [ebp - 0x10], 0x5be1fd6b
jmp 0x43c296
mov dword [ebp - 0x10], 0x4fe691
jmp 0x43c296
mov ecx, dword [ebp - 0x14]
mov eax, ecx
shl eax, 6
add eax, ecx
add eax, 0xffffff68
imul eax, eax
imul edx, eax, 0x1db5
mov edi, ecx
shl edi, 9
dec edx
lea ecx, [edi + ecx*8]
add ecx, 0xfffffeda
shr ecx, 0xa
mov dword [ebp - 0x14], ecx
mov ecx, 0x9b8b4ea6
cmp edx, eax
je 0x43d705
mov ecx, 0xa278fe7b
jmp 0x43d705
push 0x16
push 0x472f20
push dword [ebp - 0x54]
call fcn.0044ce50
add esp, 0xc
mov dword [ebp - 0x10], 0xc465bf16
jmp 0x43c296
imul ebx, dword [ebp - 0x18], 0x32
shr ebx, 2
mov dword [ebp - 0x18], ebx
push 0x28d6
push 0x270f
push 0x4e95
push ebx
call fcn.0043d950
add esp, 0x10
push ebx
call fcn.0043c284
add esp, 4
mov eax, 0xb3b593c5
cmp ebx, 0x7c
je 0x43d8a9
mov eax, 0xe4fa5c7a
jmp 0x43d8a9
mov dword [ebp - 0x10], 0x6bf08bb8
jmp 0x43c296
push dword [ebp - 0x20]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0
push dword [ebp - 0x3c]
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, 0x4be6d1fe
test eax, eax
je 0x43d705
mov ecx, 0x2f274304
jmp 0x43d705
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0x3c8ab27c
jmp 0x43c296
push dword [ebp - 0x5c]
call fcn.0045d1bc
add esp, 4
mov dword [ebp - 0x10], 0xd469e6c
jmp 0x43c296
mov dword [ebp - 0x10], 0x23bc4a89
jmp 0x43c296
mov eax, dword [ebp - 0x14]
shr eax, 3
imul eax, eax, 0x1e800
shr eax, 2
add eax, 0xffffffac
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x6be48a12
jmp 0x43c296
mov dword [ebp - 0x10], 0x4163c8ab
jmp 0x43c296
mov dword [ebp - 0x10], 0x46b8f08f
jmp 0x43c296
push eax
sub esp, 8
mov ebx, esp
mov word [ebx + 0xa], 0
movzx eax, word [0x472f4c]
mov word [ebx + 8], ax
mov eax, dword [0x472f48]
mov dword [ebx + 4], eax
mov eax, dword [0x472f44]
mov dword [ebx], eax
push 4
push 0x472f4e
push 5
push ebx
call fcn.0043d950
add esp, 0x10
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x34]
push eax
push ebx
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0x2bf5fa41
jmp 0x43c296
mov eax, dword [ebp - 0x14]
shr eax, 0xc
imul ecx, eax, 0x3d
add ecx, 0xdb
imul eax, ecx, 0x1880
imul ecx, ecx
imul edx, ecx, 0x3d27
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x23bc4a89
cmp ecx, edx
je 0x43d6cd
mov eax, 0x6f1ca5b1
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0
jmp 0x43c296
mov ecx, dword [ebp - 0x14]
mov eax, ecx
shr eax, 7
shr ecx, 0x11
imul eax, eax
imul edx, eax, 0x2685
dec edx
add ecx, 0x3f
mov dword [ebp - 0x14], ecx
mov ecx, 0x41dfdb7a
cmp eax, edx
je 0x43d705
mov ecx, 0xebc0c12f
mov dword [ebp - 0x10], ecx
jmp 0x43c296
mov eax, dword [ebp - 0x14]
shl eax, 5
and eax, 0xfffffe0
or eax, 7
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x4f2935d1
jmp 0x43c296
push dword [ebp - 0x84]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0xe5ceb192
jmp 0x43c296
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x10], 0x28d92f99
jmp 0x43c296
imul ecx, dword [ebp - 0x18], 0x11e
add ecx, 0xffff82e0
mov dword [ebp - 0x18], ecx
mov eax, 0x59fa0db5
cmp ecx, 0x58
je 0x43d8a9
mov eax, 0xf4d8c38d
jmp 0x43d8a9
mov dword [ebp - 0x10], 0x11e6c6f4
jmp 0x43c296
push 5
push 0x472f16
push 0x33
push dword [ebp - 0x50]
call fcn.0043d950
add esp, 0x10
mov dword [ebp - 0x10], 0x84469960
jmp 0x43c296
push dword [ebp - 0x5c]
call fcn.0045dbe0
add esp, 4
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x10], 0xe84db254
jmp 0x43c296
mov ebx, dword [ebp - 0x18]
shl ebx, 0x11
add ebx, 0xffe38000
mov dword [ebp - 0x18], ebx
push 0x1460
push ebx
push 0x5bfa
push 0x5ff2
call fcn.0043d950
add esp, 0x10
push 0x2b26
push 0x9a6
push 0x2e31
push ebx
call fcn.0043d950
add esp, 0x10
mov eax, 0x65bbaa71
cmp ebx, 0x97
jge 0x43d8a9
mov eax, 0x13b9c9b0
jmp 0x43d8a9
push 7
push 0x472f36
push 0xb
push dword [ebp - 0x54]
call fcn.0043d950
add esp, 0x10
push 0x18
push dword [ebp - 0x54]
push dword [ebp - 0x3c]
call fcn.0044ce50
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x867303d0
jmp 0x43c296
mov dword [ebp - 0x10], 0xa260c58f
jmp 0x43c296
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0xd21419f
jmp 0x43c296
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffff3d
add eax, ecx
shr eax, 0xa
imul eax, eax, 0xb3
shr eax, 9
imul ecx, eax, 0xe400
mov dword [ebp - 0x18], ecx
mov eax, 0x9d07d720
cmp ecx, 0xd0
jl 0x43d8a9
mov eax, 0x434d8672
mov dword [ebp - 0x10], eax
jmp 0x43c296
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
add eax, 0x18
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0x949ea37e
jmp 0x43c296
mov eax, dword [ebp - 0x7c]
mov word [eax], 0
push 0x18
push 0x472f60
push dword [ebp - 0x58]
call fcn.0044ce50
add esp, 0xc
push 6
push 0x472f78
push 0xc
push dword [ebp - 0x58]
call fcn.0043d950
add esp, 0x10
push 0x1a
push dword [ebp - 0x58]
push dword [ebp - 0x40]
call fcn.0044ce50
add esp, 0xc
mov dword [ebp - 0x10], 0x7c7c3790
jmp 0x43c296
cmp eax, 0x6f1ca5b1
jne 0x43c296
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret