Function at 0x43af48
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x1070
call fcn.00448580
mov dword [ebp - 0x10], 0x97ff4c87
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
mov eax, dword [ebp - 0x10]
cmp eax, 0xeb09f7
jg 0x43afc3
cmp eax, 0xaf376a66
jg 0x43b055
cmp eax, 0x97ffa162
jg 0x43b105
cmp eax, 0x8c2d7a0c
jle 0x43b240
cmp eax, 0x8d9b8c93
jle 0x43b485
cmp eax, 0x97d672a7
jg 0x43b8e5
cmp eax, 0x8d9b8c94
je 0x43ba49
cmp eax, 0x8fc45ff3
jne 0x43af67
mov dword [ebp - 0x10], 0x55e53d6
jmp 0x43af67
cmp eax, 0x3ee6d00f
jg 0x43b0b1
cmp eax, 0x1c1889e0
jg 0x43b148
cmp eax, 0x85c5cf6
jle 0x43b28b
cmp eax, 0x1347f9d3
jle 0x43b4d5
cmp eax, 0x1866a9ba
jg 0x43b91f
cmp eax, 0x1347f9d4
je 0x43ba9e
cmp eax, 0x1749ce0c
jne 0x43af67
mov esi, dword [ebp - 0x14]
add esi, 0x7b
mov dword [ebp - 0x14], esi
push esi
call fcn.0043af48
add esp, 4
push esi
push 0xff2
push 0x28d7
push 0x598c
call fcn.0043c4c0
add esp, 0x10
mov eax, 0xd463dc2f
cmp esi, 0xcf
jae 0x43c48f
mov eax, 0x9b03c4be
jmp 0x43c48f
cmp eax, 0xd0c2f2e6
jg 0x43b197
cmp eax, 0xbfbf37ad
jle 0x43b2c3
cmp eax, 0xcb85f81d
jle 0x43b53a
cmp eax, 0xce5130fe
jg 0x43b941
cmp eax, 0xcb85f81e
je 0x43bab9
cmp eax, 0xcc08c088
jne 0x43af67
mov eax, dword [ebp - 0x18]
shl eax, 7
and eax, 0xffff80
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x7e6487db
jmp 0x43af67
cmp eax, 0x6449d672
jle 0x43b1ee
cmp eax, 0x71f59ce5
jle 0x43b30a
cmp eax, 0x79c0952a
jle 0x43b567
cmp eax, 0x7d4c09df
jg 0x43b96d
cmp eax, 0x79c0952b
je 0x43bad9
cmp eax, 0x7a9f4da8
jne 0x43af67
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0xf6c53369
jmp 0x43af67
cmp eax, 0x9ba30f70
jle 0x43b342
cmp eax, 0xa38b3575
jle 0x43b5b0
cmp eax, 0xaa6cd37c
jg 0x43b98f
cmp eax, 0xa38b3576
je 0x43bae5
cmp eax, 0xa6bb1f9e
jne 0x43af67
mov dword [ebp - 0x10], 0xb8531cfc
jmp 0x43af67
cmp eax, 0x2bc3a87f
jle 0x43b383
cmp eax, 0x3517361a
jle 0x43b637
cmp eax, 0x3dde3baf
jg 0x43b9d9
cmp eax, 0x3517361b
je 0x43bb2d
cmp eax, 0x37798935
jne 0x43af67
mov eax, dword [ebp - 0x30]
mov dword [eax], 0xf003f
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x6c4ba64c
jmp 0x43af67
cmp eax, 0xeef09630
jle 0x43b3bb
cmp eax, 0xf6c53368
jle 0x43b671
cmp eax, 0xfb4e5550
jg 0x43b9ff
cmp eax, 0xf6c53369
je 0x43bb46
cmp eax, 0xf6c8217e
jne 0x43af67
mov eax, dword [ebp - 0x18]
shl eax, 9
and eax, 0xffffe00
add eax, 0xffffffac
shr eax, 0x16
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x1b599df1
jmp 0x43af67
cmp eax, 0x52bbfe73
jle 0x43b3fc
cmp eax, 0x5b64d411
jle 0x43b6ab
cmp eax, 0x5d210e9d
jle 0x43ba24
cmp eax, 0x5d210e9e
je 0x43bb7f
cmp eax, 0x622d6a01
jne 0x43af67
imul eax, dword [ebp - 0x14], 0xbd
add eax, 0xffff7487
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x994678c2
jmp 0x43af67
cmp eax, 0x8711ec9a
jg 0x43b724
cmp eax, 0x80bd0680
je 0x43bbbf
cmp eax, 0x80f48718
je 0x43bbdf
cmp eax, 0x86873a32
jne 0x43af67
cmp dword [ebp - 0x60], 0
mov eax, 0x26f93f81
je 0x43b27c
mov eax, 0x890b39ae
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x58], 0
jmp 0x43af67
cmp eax, 0x4425cdc
jg 0x43b777
cmp eax, 0xeb09f8
je 0x43bbf1
cmp eax, 0x2cdc033
je 0x43bc17
cmp eax, 0x3018cd3
jne 0x43af67
mov dword [ebp - 0x10], 0x995e198d
jmp 0x43af67
cmp eax, 0xbaaf962c
jg 0x43b7aa
cmp eax, 0xaf376a67
je 0x43bc66
cmp eax, 0xb20ab613
je 0x43bc72
cmp eax, 0xb8531cfc
jne 0x43af67
push dword [ebp - 0x74]
call ebx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0x8711ec9b
jmp 0x43af67
cmp eax, 0x6c4ba64b
jg 0x43b7ec
cmp eax, 0x6449d673
je 0x43bcad
cmp eax, 0x6710ffc4
je 0x43bcb9
cmp eax, 0x6b01529d
jne 0x43af67
mov dword [ebp - 0x10], 0x47a8eca5
jmp 0x43af67
cmp eax, 0x99ae35cc
jg 0x43b819
cmp eax, 0x97ffa163
je 0x43bcc5
cmp eax, 0x994678c2
je 0x43bcd6
cmp eax, 0x995e198d
jne 0x43af67
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0xf6c8217e
jmp 0x43af67
cmp eax, 0x26f93f80
jg 0x43b852
cmp eax, 0x1c1889e1
je 0x43bd2d
cmp eax, 0x1c9c7716
je 0x43bd3f
cmp eax, 0x201a69a6
jne 0x43af67
mov dword [ebp - 0x10], 0x3030874d
jmp 0x43af67
cmp eax, 0xdf54df60
jg 0x43b87f
cmp eax, 0xd0c2f2e7
je 0x43bd5c
cmp eax, 0xd463dc2f
je 0x43bdb1
cmp eax, 0xdb186948
jne 0x43af67
push eax
sub esp, 0x64
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x965590
jmp 0x43af67
cmp eax, 0x472e4a91
jg 0x43b8ac
cmp eax, 0x3ee6d010
je 0x43be05
cmp eax, 0x403530b5
je 0x43ba92
cmp eax, 0x4186aba2
jne 0x43af67
mov esi, dword [ebp - 0x14]
add esi, 0x5f
shr esi, 0xe
add esi, 0xffffff4f
mov dword [ebp - 0x14], esi
push esi
push 0x5504
push 0x2ed5
push 0x34bf
call fcn.0043c4c0
add esp, 0x10
push 0x48e8
push 0x5804
push 0x181a
push esi
call fcn.0043c4c0
add esp, 0x10
mov eax, 0xdb186948
cmp esi, 0x8f
jae 0x43c48f
mov eax, 0xeb09f8
jmp 0x43c48f
cmp eax, 0x8c2d7a0d
je 0x43be32
cmp eax, 0x8cb46b41
je 0x43be87
cmp eax, 0x8d797533
jne 0x43af67
mov eax, dword [ebp - 0x18]
add eax, 0xffffffc4
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x5a9f
dec edx
shr eax, 0xb
mov dword [ebp - 0x18], eax
mov eax, 0x9b505cb6
cmp edx, ecx
je 0x43c48f
mov eax, 0x403530b5
jmp 0x43c48f
cmp eax, 0x85c5cf7
je 0x43be93
cmp eax, 0xb591a97
je 0x43bed5
cmp eax, 0xf2b4d5a
jne 0x43af67
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov word [eax + 0x18], 0
push 0x18
push 0x471ea0
push dword [ebp - 0x50]
call fcn.0044ac30
add esp, 0xc
push 5
push 0x471eb8
push 0xc
push dword [ebp - 0x50]
call fcn.0043c4c0
add esp, 0x10
mov dword [ebp - 0x10], 0x8c2d7a0d
jmp 0x43af67
cmp eax, 0xbfbf37ae
je 0x43bf07
cmp eax, 0xbfe6e109
je 0x43bf49
cmp eax, 0xc8403266
jne 0x43af67
mov dword [ebp - 0x10], 0x99ae35cd
jmp 0x43af67
cmp eax, 0x71f59ce6
je 0x43bfa0
cmp eax, 0x7476f3b5
je 0x43bfb2
cmp eax, 0x754acc42
jne 0x43af67
imul ecx, dword [ebp - 0x14], 0xf8
add ecx, 0x45
shr ecx, 0xb
mov dword [ebp - 0x14], ecx
mov eax, 0x55e53d6
cmp ecx, 0x5f
je 0x43c48f
mov eax, 0xdb186948
jmp 0x43c48f
cmp eax, 0x9ba30f71
je 0x43bfe9
cmp eax, 0x9bcf1a36
je 0x43c01c
cmp eax, 0x9f96bf61
jne 0x43af67
mov eax, dword [ebp - 0x14]
shr eax, 6
and eax, 0x1ffffff
imul ebx, eax, 0xa3
mov esi, ebx
shr esi, 0xc
mov dword [ebp - 0x14], esi
push 0x44ca
push esi
push 0x28f8
push 0x3d6a
call fcn.0043c4c0
add esp, 0x10
push 0x4fd9
push esi
push 0x59
push 0x49b5
call fcn.0043c4c0
add esp, 0x10
mov eax, 0x37798935
cmp ebx, 0x98000
jb 0x43b629
mov eax, 0x472e4a92
mov dword [ebp - 0x10], eax
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x43af67
cmp eax, 0x2bc3a880
je 0x43c04a
cmp eax, 0x3030874d
je 0x43c076
cmp eax, 0x31f71011
jne 0x43af67
imul eax, dword [ebp - 0x18], 0x3d00
shr eax, 0x1a
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x71f59ce6
jmp 0x43af67
cmp eax, 0xeef09631
je 0x43c0aa
cmp eax, 0xf1e17779
je 0x43c0e7
cmp eax, 0xf4db464e
jne 0x43af67
cmp dword [ebp - 0x3c], 0
mov eax, 0x5bcfb7b5
je 0x43c1bd
mov eax, 0xaf376a67
jmp 0x43c1bd
cmp eax, 0x52bbfe74
je 0x43c102
cmp eax, 0x560652fe
je 0x43c10e
cmp eax, 0x58fb4800
jne 0x43af67
mov esi, dword [ebp - 0x14]
mov eax, 0xffffff75
add esi, eax
mov ebx, esi
shr ebx, 7
mov dword [ebp - 0x14], ebx
push ebx
push 0x4c45
push 0x53fb
push 0x3b1f
call fcn.0043c4c0
add esp, 0x10
push 0xab2
push ebx
push 0x5957
push 0xaa1
call fcn.0043c4c0
add esp, 0x10
mov eax, 0xf4db464e
cmp esi, 0x1f00
jb 0x43b624
jmp 0x43b629
cmp eax, 0x8711ec9b
je 0x43c163
cmp eax, 0x890b39ae
je 0x43c192
cmp eax, 0x8bad9a29
jne 0x43af67
mov eax, dword [ebp - 0x18]
add eax, 0x50
mov ecx, eax
imul ecx, eax
shr eax, 6
imul edx, ecx, 0xe9f
dec edx
imul eax, eax, 0x78
mov dword [ebp - 0x18], eax
mov eax, 0xfb4e5551
cmp edx, ecx
je 0x43c48f
mov eax, 0x97d672a8
jmp 0x43c48f
cmp eax, 0x4425cdd
je 0x43c1cc
cmp eax, 0x55e53d6
je 0x43c1e1
cmp eax, 0x75a5d0c
jne 0x43af67
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0xeef09631
jmp 0x43af67
cmp eax, 0xbaaf962d
je 0x43c213
cmp eax, 0xbb98ae39
je 0x43c25c
cmp eax, 0xbd984fe6
jne 0x43af67
mov eax, dword [ebp - 0x14]
shl eax, 0xa
add eax, 0xfffffff7
mov dword [ebp - 0x14], eax
push eax
call fcn.0043af48
add esp, 4
mov dword [ebp - 0x10], 0x4186aba2
jmp 0x43af67
cmp eax, 0x6c4ba64c
je 0x43c28a
cmp eax, 0x71ad832a
je 0x43c2bf
cmp eax, 0x71c813f8
jne 0x43af67
mov dword [ebp - 0x10], 0x3517361b
jmp 0x43af67
cmp eax, 0x99ae35cd
je 0x43c2cb
cmp eax, 0x9b03c4be
je 0x43c2e5
cmp eax, 0x9b505cb6
jne 0x43af67
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], 0x8d797533
jmp 0x43af67
cmp eax, 0x26f93f81
je 0x43c315
cmp eax, 0x28d9e978
je 0x43c327
cmp eax, 0x2a6dfe1d
jne 0x43af67
mov dword [ebp - 0x10], 0x472e4a92
jmp 0x43af67
cmp eax, 0xdf54df61
je 0x43c35c
cmp eax, 0xe6572b23
je 0x43c394
cmp eax, 0xeab2a06a
jne 0x43af67
mov dword [ebp - 0x10], 0x6449d673
jmp 0x43af67
cmp eax, 0x472e4a92
je 0x43c3ac
cmp eax, 0x47a8eca5
je 0x43c3ca
cmp eax, 0x4d1d7095
jne 0x43af67
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x800
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0x71ad832a
jmp 0x43af67
cmp eax, 0x97d672a8
je 0x43c3db
cmp eax, 0x97ff4c87
jne 0x43af67
push eax
sub esp, 0x7fc
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0x1c9c7716
jmp 0x43af67
cmp eax, 0x1866a9bb
je 0x43c3ea
cmp eax, 0x1b599df1
jne 0x43af67
mov dword [ebp - 0x10], 0xdf54df61
jmp 0x43af67
cmp eax, 0xce5130ff
je 0x43c3f6
cmp eax, 0xcfb13058
jne 0x43af67
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0x5bcfb7b5
mov dword [ebp - 0x20], 1
jmp 0x43af67
cmp eax, 0x7d4c09e0
je 0x43c414
cmp eax, 0x7e6487db
jne 0x43af67
mov dword [ebp - 0x10], 0x9b505cb6
jmp 0x43af67
cmp eax, 0xaa6cd37d
je 0x43c439
cmp eax, 0xab37cb0b
jne 0x43af67
mov eax, dword [ebp - 0x4c]
mov word [eax + 0xa], 0
mov eax, dword [ebp - 0x4c]
movzx ecx, word [0x471e8a]
mov word [eax + 8], cx
mov ecx, dword [0x471e86]
mov dword [eax + 4], ecx
mov ecx, dword [0x471e82]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0xcb85f81e
jmp 0x43af67
cmp eax, 0x3dde3bb0
je 0x43c453
cmp eax, 0x3ea804d9
jne 0x43af67
shl dword [ebp - 0x18], 0x13
mov dword [ebp - 0x10], 0xc8403266
jmp 0x43af67
cmp eax, 0xfb4e5551
je 0x43c46e
cmp eax, 0x965590
jne 0x43af67
shl dword [ebp - 0x18], 1
mov dword [ebp - 0x10], 0x994678c2
jmp 0x43af67
cmp eax, 0x5b64d412
jne 0x43c497
mov eax, dword [ebp - 0x18]
shl eax, 0xd
add eax, 0xffffff2e
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x71c813f8
jmp 0x43af67
imul eax, dword [ebp - 0x14], 0xad
shr eax, 0xf
imul esi, eax, 0x8c
add esi, 0x7e54
mov dword [ebp - 0x14], esi
push 0x48af
push esi
push 0x1f6
push 0x2898
call fcn.0043c4c0
add esp, 0x10
push 0x36b
push 0x444
push 0x28da
push esi
call fcn.0043c4c0
add esp, 0x10
mov dword [ebp - 0x10], 0x37798935
jmp 0x43af67
imul eax, dword [ebp - 0x18], 0x3d98
add eax, 0xc45ab
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xd0c2f2e7
jmp 0x43af67
push 4
push 0x471e8c
push 5
push dword [ebp - 0x4c]
call fcn.0043c4c0
add esp, 0x10
mov dword [ebp - 0x10], 0xf1e17779
jmp 0x43af67
mov dword [ebp - 0x10], 0xf4db464e
jmp 0x43af67
mov eax, dword [ebp - 0x44]
mov word [eax + 0xa], 0
mov eax, dword [ebp - 0x44]
movzx ecx, word [0x471dca]
mov word [eax + 8], cx
mov ecx, dword [0x471dc6]
mov dword [eax + 4], ecx
mov ecx, dword [0x471dc2]
mov dword [eax], ecx
push 4
push 0x471dcc
push 5
push dword [ebp - 0x44]
call fcn.0043c4c0
add esp, 0x10
mov dword [ebp - 0x10], 0x1347f9d4
jmp 0x43af67
cmp dword [ebp - 0x64], 0
mov eax, 0x3018cd3
je 0x43c48f
mov eax, 0x3ea804d9
jmp 0x43c48f
mov ecx, dword [ebp - 0x18]
lea eax, [ecx - 0xa0]
imul eax, eax
imul ecx, ecx, 0x3d
add ecx, 0xffffe32b
imul edx, eax, 0x589
dec edx
shr ecx, 6
mov dword [ebp - 0x18], ecx
mov ecx, 0x3030874d
cmp eax, edx
je 0x43c38c
mov ecx, 0x52bbfe74
jmp 0x43c38c
mov esi, dword [ebp - 0x14]
shl esi, 0x1e
or esi, 0x5e
mov dword [ebp - 0x14], esi
push esi
call fcn.0043af48
add esp, 4
push 0xedf
push esi
push 0x2ba7
push 0x616d
call fcn.0043c4c0
add esp, 0x10
mov eax, 0x472e4a92
cmp esi, 0x45
jge 0x43c159
jmp 0x43c48f
mov eax, dword [ebp - 0x3c]
push dword [ebp - 0x2c]
push eax
push dword [ebp - 0x4c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0x31f71011
jmp 0x43af67
mov dword [ebp - 0x10], 0x26f93f81
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x58], eax
jmp 0x43af67
imul ecx, dword [ebp - 0x14], 0x11940
add ecx, 0xfee8e380
mov dword [ebp - 0x14], ecx
mov eax, 0x9b505cb6
cmp ecx, 0xa5
jae 0x43bdfb
jmp 0x43c48f
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff2a
add eax, ecx
shr eax, 9
imul esi, eax, 0x2d00
shr esi, 0xf
add esi, 0xffffff98
mov dword [ebp - 0x14], esi
push 0x2fab
push 0x2191
push 0x4212
push esi
call fcn.0043c4c0
add esp, 0x10
mov eax, 0x3030874d
cmp esi, 0x93
jae 0x43c48f
mov eax, 0x2bc3a880
jmp 0x43c48f
mov dword [ebp - 0x10], 0x1866a9bb
jmp 0x43af67
mov ecx, dword [ebp - 0x18]
shr ecx, 8
mov eax, ecx
imul eax, ecx
shl ecx, 0xc
add ecx, 0xfffbc000
imul edx, eax, 0x5045
dec edx
shr ecx, 8
lea ecx, [ecx + ecx*2]
mov dword [ebp - 0x18], ecx
mov ecx, 0x2cdc033
cmp eax, edx
je 0x43c38c
mov ecx, 0xeab2a06a
jmp 0x43c38c
mov dword [ebp - 0x10], 0xbb98ae39
jmp 0x43af67
mov dword [ebp - 0x10], 0x7a9f4da8
jmp 0x43af67
push dword [ebp - 0x68]
call ebx
mov dword [ebp - 0x10], 0x9bcf1a36
jmp 0x43af67
mov eax, dword [ebp - 0x40]
mov word [eax + 0x66], 0
push 0x66
push 0x471d50
push dword [ebp - 0x40]
call fcn.0044ac30
add esp, 0xc
push 6
push 0x471db6
push 0x33
push dword [ebp - 0x40]
call fcn.0043c4c0
add esp, 0x10
lea eax, [ebp - 0x28]
push eax
push 0x20019
push 0
push dword [ebp - 0x40]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0x7d4c09e0
jmp 0x43af67
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0xb20ab613
jmp 0x43af67
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x34], eax
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xcc08c088
jmp 0x43af67
push eax
sub esp, 0x64
mov esi, esp
mov word [esi + 0x66], 0
push 0x66
push str.__H
push esi
call fcn.0044ac30
add esp, 0xc
push 8
push 0x471e46
push 0x33
push esi
call fcn.0043c4c0
add esp, 0x10
lea eax, [ebp - 0x107c]
push eax
push esi
push dword [ebp - 0x44]
lea eax, [ebp - 0x87c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0x201a69a6
jmp 0x43af67
mov esi, dword [ebp - 0x14]
shl esi, 0xc
mov dword [ebp - 0x14], esi
push esi
push 0x37c9
push 0x4d06
push 0x3bf2
call fcn.0043c4c0
add esp, 0x10
push 0x58cd
push 0x1a75
push 0x1ffa
push esi
call fcn.0043c4c0
add esp, 0x10
mov eax, 0x58fb4800
cmp esi, 0xfd
jge 0x43c48f
mov eax, 0x472e4a92
jmp 0x43c48f
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x15]
add eax, 0xffffff83
imul ecx, ecx
imul edx, ecx, 0x405
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xbfe6e109
cmp edx, ecx
je 0x43c48f
mov eax, 0x79c0952b
jmp 0x43c48f
push 0x1a
push dword [ebp - 0x50]
push dword [ebp - 0x38]
call fcn.0044ac30
add esp, 0xc
push dword [ebp - 0x54]
call fcn.0045bd00
add esp, 4
push eax
push dword [ebp - 0x54]
push dword [ebp - 0x38]
push dword [ebp + 8]
call fcn.00423cc8
add esp, 0x10
push dword [ebp - 0x3c]
call fcn.0045b269
add esp, 4
push dword [ebp - 0x54]
call fcn.0045b269
add esp, 4
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0x6b01529d
jmp 0x43af67
mov dword [ebp - 0x10], 0x4d1d7095
jmp 0x43af67
mov eax, dword [ebp - 0x14]
add eax, 0xffffffbd
and eax, 0xfffffffc
imul esi, eax, 0xc3
mov dword [ebp - 0x14], esi
push esi
push 0x5bab
push 0x3a73
push 0x612d
call fcn.0043c4c0
add esp, 0x10
mov eax, 0x97ff4c87
cmp esi, 0x60
jae 0x43c48f
mov eax, 0x7476f3b5
jmp 0x43c48f
imul esi, dword [ebp - 0x14], 0x1de
mov dword [ebp - 0x14], esi
push esi
call fcn.0043af48
add esp, 4
push esi
call fcn.0043af48
add esp, 4
mov eax, 0xbaaf962d
cmp esi, 0xf2
jb 0x43c252
jmp 0x43c48f
push 0x16
push 0x471e60
push dword [ebp - 0x48]
call fcn.0044ac30
add esp, 0xc
push 6
push 0x471e76
push 0xb
push dword [ebp - 0x48]
call fcn.0043c4c0
add esp, 0x10
push 0x18
push dword [ebp - 0x48]
push dword [ebp - 0x34]
call fcn.0044ac30
add esp, 0xc
mov dword [ebp - 0x10], 0x1c1889e1
jmp 0x43af67
mov esi, dword [ebp - 0x14]
add esi, 0xffffff88
shr esi, 8
add esi, 0xffffff8f
mov dword [ebp - 0x14], esi
push 0x5902
push esi
push 0x1da
push 0x40a9
call fcn.0043c4c0
add esp, 0x10
push 0x3697
push 0x4349
push esi
push 0x48dd
call fcn.0043c4c0
add esp, 0x10
mov eax, 0x8d9b8c94
cmp esi, 0x6c
je 0x43c48f
mov eax, 0xb591a97
jmp 0x43c48f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0xa6bb1f9e
jmp 0x43af67
mov eax, dword [ebp - 0x14]
mov ecx, 0xfffffe00
and eax, ecx
lea esi, [eax + eax]
add esi, 0xffffff8b
mov dword [ebp - 0x14], esi
push esi
call fcn.0043af48
add esp, 4
push esi
call fcn.0043af48
add esp, 4
mov eax, 0x9ba30f71
cmp esi, 0x83
jge 0x43c012
jmp 0x43c48f
mov esi, dword [ebp - 0x14]
shl esi, 0xe
or esi, 0x30c0
mov dword [ebp - 0x14], esi
push esi
call fcn.0043af48
add esp, 4
mov eax, 0x1c9c7716
cmp esi, 0xfb
jl 0x43c48f
mov eax, 0x97ff4c87
jmp 0x43c48f
mov eax, dword [ebp - 0x18]
shr eax, 0xc
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x6837
dec edx
add eax, eax
mov dword [ebp - 0x18], eax
mov eax, 0x3517361b
cmp edx, ecx
je 0x43c48f
mov eax, 0x75a5d0c
jmp 0x43c48f
imul eax, dword [ebp - 0x14], 0x8a000
mov esi, 0x5d210e9e
add eax, 0x49da000
mov dword [ebp - 0x14], eax
je 0x43c065
mov esi, 0xdb186948
push eax
call fcn.0043af48
add esp, 4
mov dword [ebp - 0x10], esi
jmp 0x43af67
lea eax, [ebp - 0x24]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x87c]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0x8cb46b41
test eax, eax
je 0x43c38c
mov ecx, 0xaa6cd37d
jmp 0x43c38c
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffff73
add eax, ecx
shr eax, 4
imul ecx, eax, 0x39000
imul eax, eax
imul edx, eax, 0x1cd1
dec edx
add ecx, 0x35000
mov dword [ebp - 0x18], ecx
mov ecx, 0x3dde3bb0
cmp edx, eax
je 0x43c38c
mov ecx, 0xe6572b23
jmp 0x43c38c
imul eax, dword [ebp - 0x18], 0x168b9f00
add eax, 0x184e80
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x80bd0680
jmp 0x43af67
mov dword [ebp - 0x10], 0x97ffa163
jmp 0x43af67
imul esi, dword [ebp - 0x14], 0x6c
add esi, 0x4aac
mov dword [ebp - 0x14], esi
push 0x6003
push 0x4d5d
push esi
push 0x2287
call fcn.0043c4c0
add esp, 0x10
push esi
push 0x1a34
push 0x4aef
push 0x2ff
call fcn.0043c4c0
add esp, 0x10
mov eax, 0x994678c2
cmp esi, 0x45
jb 0x43c48f
mov eax, 0xf4db464e
jmp 0x43c48f
mov eax, dword [ebp - 0x18]
shr eax, 9
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x7db5
shl eax, 0xb
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x560652fe
cmp ecx, edx
je 0x43c48f
mov eax, 0x80f48718
jmp 0x43c48f
mov eax, dword [ebp - 0x18]
add eax, 0x5d
mov ecx, eax
imul ecx, eax
shl eax, 4
and eax, 0x1ffffff0
imul edx, ecx, 0x6233
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x1749ce0c
cmp edx, ecx
je 0x43c1bd
mov eax, 0x5bcfb7b5
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x20], 0
jmp 0x43af67
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0xab37cb0b
jmp 0x43af67
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x800
push edi
push edi
push edi
push edi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x107c]
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x28]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0x5b64d412
jmp 0x43af67
mov eax, dword [ebp - 0x14]
lea esi, [eax*4 - 0x2e]
mov dword [ebp - 0x14], esi
push 0x43a4
push 0x5215
push 0x3f18
push esi
call fcn.0043c4c0
add esp, 0x10
push esi
call fcn.0043af48
add esp, 4
mov eax, 0x472e4a92
cmp esi, 0xfa
jb 0x43c48f
mov eax, 0x37798935
jmp 0x43c48f
push dword [ebp - 0x1c]
push dword [ebp - 0x2c]
push dword [ebp - 0x30]
push 0
push dword [ebp - 0x34]
push dword [ebp - 0x70]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, 0x4425cdd
test eax, eax
je 0x43c38c
mov ecx, 0x28d9e978
jmp 0x43c38c
imul ecx, dword [ebp - 0x18], 0xdb
mov eax, ecx
imul eax, ecx
imul edx, eax, 0x5eaf
add ecx, 0xffffffed
dec edx
shr ecx, 1
add ecx, 0xa
mov dword [ebp - 0x18], ecx
mov ecx, 0x85c5cf7
cmp eax, edx
je 0x43c38c
mov ecx, 0x2a6dfe1d
jmp 0x43c38c
mov dword [ebp - 0x10], 0xce5130ff
jmp 0x43af67
push dword [ebp - 0x3c]
call fcn.004237dc
add esp, 4
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0x8bad9a29
jmp 0x43af67
mov eax, dword [ebp - 0x14]
shr eax, 0xe
imul ecx, eax, 0xa1
lea eax, [ecx - 0xb2]
mov dword [ebp - 0x14], eax
mov eax, 0x1c9c7716
cmp ecx, 0x115
jae 0x43c48f
mov eax, 0x9b505cb6
jmp 0x43c48f
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0x8fc45ff3
jmp 0x43af67
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + 0xda]
imul eax, eax
imul ecx, ecx, 0xae
add ecx, 0xa93e
imul edx, eax, 0x5b97
dec edx
shr ecx, 7
mov dword [ebp - 0x18], ecx
mov ecx, 0x995e198d
cmp edx, eax
je 0x43c38c
mov ecx, 0x71f59ce6
jmp 0x43c38c
mov eax, dword [ebp - 0x18]
mov ecx, 0x133
add eax, ecx
mov ecx, eax
shl ecx, 0x17
imul eax, eax
imul edx, eax, 0x3d35
or ecx, 0x11000
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0x994678c2
cmp edx, eax
je 0x43c38c
mov ecx, 0xa38b3576
mov dword [ebp - 0x10], ecx
jmp 0x43af67
push dword [ebp - 0x6c]
call ebx
mov dword [ebp - 0x10], 0x5bcfb7b5
mov dword [ebp - 0x20], 0
jmp 0x43af67
push 2
push 0xc800
call fcn.0045aa23
add esp, 8
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x3ee6d010
jmp 0x43af67
push dword [ebp - 0x7c]
call ebx
mov dword [ebp - 0x10], 0xcfb13058
jmp 0x43af67
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0xf2b4d5a
jmp 0x43af67
mov dword [ebp - 0x10], 0xdb186948
jmp 0x43af67
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov word [eax + 0x16], 0
mov dword [ebp - 0x10], 0xbfbf37ae
jmp 0x43af67
mov eax, dword [ebp - 0x18]
add eax, 0x50
mov dword [ebp - 0x18], eax
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x5c79
dec edx
mov eax, 0x97ff4c87
cmp edx, ecx
je 0x43c48f
mov eax, 0x86873a32
jmp 0x43c48f
mov eax, dword [ebp - 0x18]
shl eax, 7
add eax, 0xffffff22
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x6710ffc4
jmp 0x43af67
imul ecx, dword [ebp - 0x14], 0x4480
mov dword [ebp - 0x14], ecx
mov eax, 0x995e198d
cmp ecx, 0x3d
jl 0x43c48f
mov eax, 0x3517361b
jmp 0x43c48f
mov eax, dword [ebp - 0x14]
lea ecx, [eax + eax]
add ecx, 0xffffff3d
mov dword [ebp - 0x14], ecx
mov eax, 0x3517361b
cmp ecx, 0xd3
jge 0x43c48f
mov eax, 0x55e53d6
mov dword [ebp - 0x10], eax
jmp 0x43af67
cmp eax, 0x5bcfb7b5
jne 0x43af67
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret