Function at 0x43e788
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x78
mov dword [ebp - 0x10], 0xb9be0274
xor esi, esi
mov eax, dword [ebp - 0x10]
cmp eax, 0x4fe690
jg 0x43e82b
cmp eax, 0xbc3cf862
jle 0x43e88d
cmp eax, 0xdbd7bab3
jle 0x43e97a
cmp eax, 0xeb3a1bbc
jle 0x43eb2d
cmp eax, 0xf4d8c38c
jle 0x43edc0
cmp eax, 0xfe2eccca
jle 0x43f1d7
cmp eax, 0xfe2ecccb
je 0x43f9a4
cmp eax, 0xffe97eef
je 0x43f9c2
cmp eax, 0x447e4a
jne 0x43e79a
mov ecx, dword [ebp - 0x14]
shr ecx, 9
add ecx, 0xfffffeb1
mov eax, ecx
shr eax, 0xb
mov dword [ebp - 0x14], eax
mov eax, 0xd4d2b734
cmp ecx, 0x16800
jae 0x4403e3
mov eax, 0xf4d8c38d
jmp 0x4403e3
cmp eax, 0x4163c8aa
jg 0x43e90a
cmp eax, 0x261181b0
jle 0x43e9d1
cmp eax, 0x305d3718
jg 0x43eb6b
cmp eax, 0x2e4a7f6f
jg 0x43edf3
cmp eax, 0x27bdab99
jle 0x43f21d
cmp eax, 0x27bdab9a
je 0x43fa1a
cmp eax, 0x2bf5fa41
jne 0x440502
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x10], 0x6be48a12
jmp 0x43e79a
cmp eax, 0xa0987a72
jg 0x43ea4b
cmp eax, 0x949ea37d
jg 0x43ebac
cmp eax, 0x89437d72
jg 0x43ee41
cmp eax, 0x867303cf
jg 0x43f268
cmp eax, 0x839abb37
je 0x43fa4f
cmp eax, 0x84469960
jne 0x43e79a
mov eax, dword [ebp - 0x18]
shr eax, 2
and eax, 0xffffff
imul ecx, eax, 0xa2
imul eax, eax
imul edx, eax, 0x63b9
dec edx
add ecx, 0xffffc5c8
mov dword [ebp - 0x18], ecx
mov ecx, 0x7b338ee1
cmp edx, eax
je 0x440366
mov ecx, 0xb6771f41
jmp 0x440366
cmp eax, 0x60a9cd51
jg 0x43eacb
cmp eax, 0x558f48b4
jg 0x43ec15
cmp eax, 0x4979ff2f
jg 0x43ee84
cmp eax, 0x434d8671
jg 0x43f2af
cmp eax, 0x4163c8ab
je 0x43fa5e
cmp eax, 0x41dfdb7a
jne 0x43e79a
mov edi, dword [ebp - 0x14]
mov eax, 0xffffff5f
add edi, eax
shr edi, 0xb
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
push edi
call fcn.0043e788
add esp, 4
mov dword [ebp - 0x10], 0xcf350614
jmp 0x43e79a
cmp eax, 0xcde90dc8
jg 0x43ec84
cmp eax, 0xc465bf15
jg 0x43eeb1
cmp eax, 0xc23594fe
jg 0x43f2d1
cmp eax, 0xbc3cf863
je 0x43fa7f
cmp eax, 0xc1669378
jne 0x43e79a
mov eax, dword [ebp - 0x18]
shl eax, 4
and eax, 0xffffc000
imul eax, eax, 0x399e
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x70f09109
jmp 0x43e79a
cmp eax, 0xe728404
jg 0x43ecbc
cmp eax, 0x99d5900
jg 0x43eef4
cmp eax, 0x46dbf1e
jg 0x43f33d
cmp eax, 0x4fe691
je 0x43faa5
cmp eax, 0x304bf65
jne 0x43e79a
mov edi, dword [ebp - 0x14]
shl edi, 6
add edi, 0xffffc900
mov eax, edi
shr eax, 2
mov dword [ebp - 0x14], eax
push eax
push 0x18f3
push 0x5513
push 0x45f8
call fcn.00440530
add esp, 0x10
mov eax, 0x5fe21574
test edi, edi
je 0x4403e3
mov eax, 0xc45fd1d8
jmp 0x4403e3
cmp eax, 0xb114a1e2
jg 0x43ed0e
cmp eax, 0xa3136c97
jg 0x43ef21
cmp eax, 0xa260c58e
jg 0x43f36e
cmp eax, 0xa0987a73
je 0x43fab1
cmp eax, 0xa0eba314
jne 0x43e79a
imul edi, dword [ebp - 0x14], 0x6b
add edi, 0xffffff65
mov dword [ebp - 0x14], edi
push edi
push 0x5564
push 0xc4d
push 0x19a9
call fcn.00440530
add esp, 0x10
push edi
call fcn.0043e788
add esp, 4
mov eax, 0xb3b593c5
cmp edi, 0xdf
jl 0x4403e3
mov eax, 0xe107af37
jmp 0x4403e3
cmp eax, 0x70c44a5f
jg 0x43ed85
cmp eax, 0x6bf08bb7
jg 0x43ef6a
cmp eax, 0x65bbaa70
jg 0x43f393
cmp eax, 0x60a9cd52
je 0x43faf0
cmp eax, 0x619ba9b3
jne 0x43e79a
push 2
push 0xc800
call fcn.0045d963
add esp, 8
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
mov eax, 0x89437d73
je 0x4400e9
mov eax, 0x46b8f08f
jmp 0x4400e9
cmp eax, 0xe5ceb191
jg 0x43ef97
cmp eax, 0xe3056841
jg 0x43f3d8
cmp eax, 0xdbd7bab4
je 0x43fb0a
cmp eax, 0xe107af37
jne 0x43e79a
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x8af531ab
jmp 0x43e79a
cmp eax, 0x37c82c72
jg 0x43efd3
cmp eax, 0x326519b9
jg 0x43f425
cmp eax, 0x305d3719
je 0x43fb16
cmp eax, 0x30904810
jne 0x43e79a
mov eax, dword [ebp - 0x48]
add eax, 0x66
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x3c8ab27c
jmp 0x43e79a
cmp eax, 0x97c373f7
jg 0x43f008
cmp eax, 0x95ddfebe
jg 0x43f465
cmp eax, 0x949ea37e
je 0x43fb33
cmp eax, 0x94de83ac
jne 0x43e79a
imul edi, dword [ebp - 0x14], 0x8a
add edi, 0x33c0
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
push edi
call fcn.0043e788
add esp, 4
mov eax, 0x34d511e7
cmp edi, 0xb9
jge 0x4403e3
mov eax, 0xee225a75
jmp 0x4403e3
cmp eax, 0x5dd17d5c
jg 0x43f06e
cmp eax, 0x59fa0db4
jg 0x43f4ab
cmp eax, 0x558f48b5
je 0x43fb7d
cmp eax, 0x5799f7e5
jne 0x43e79a
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff00
and eax, ecx
lea edi, [eax + eax]
add edi, 0xffffff54
mov dword [ebp - 0x14], edi
push 0x231f
push edi
push 0x52f0
push 0x1d54
call fcn.00440530
add esp, 0x10
push 0x2907
push edi
push 0x3987
push 0x3f25
jmp 0x43f209
cmp eax, 0xd302cd07
jg 0x43f0a4
cmp eax, 0xcf350613
jg 0x43f4f0
cmp eax, 0xcde90dc9
je 0x43fba3
cmp eax, 0xceeb20c5
jne 0x43e79a
mov dword [ebp - 0x10], 0xc23594ff
jmp 0x43e79a
cmp eax, 0x13b9c9af
jg 0x43f102
cmp eax, 0xffd291c
jg 0x43f549
cmp eax, 0xe728405
je 0x43fbba
cmp eax, 0xf510d64
jne 0x43e79a
mov ecx, dword [ebp - 0x14]
mov eax, ecx
shr eax, 0x17
mov dword [ebp - 0x14], eax
mov eax, 0x5be1fd6b
cmp ecx, 0x6a000000
jae 0x4403e3
mov eax, 0xc6b3ab54
jmp 0x4403e3
cmp eax, 0xb6771f40
jg 0x43f151
cmp eax, 0xb3b593c4
jg 0x43f56e
cmp eax, 0xb114a1e3
je 0x43fbf9
cmp eax, 0xb2235830
jne 0x43e79a
mov edi, dword [ebp - 0x14]
shl edi, 0x18
add edi, 0x12000000
mov dword [ebp - 0x14], edi
push 0x5796
push 0x621
push 0x47b3
push edi
call fcn.00440530
add esp, 0x10
push edi
call fcn.0043e788
add esp, 4
mov eax, 0x305d3719
cmp edi, 0xc2
jl 0x4403e3
mov eax, 0xc23594ff
jmp 0x4403e3
cmp eax, 0x7b338ee0
jg 0x43f194
cmp eax, 0x72506787
jg 0x43f5ce
cmp eax, 0x70c44a60
je 0x43fc0d
cmp eax, 0x70f09109
jne 0x43e79a
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0xeafef8d8
jmp 0x43e79a
cmp eax, 0xee225a74
jg 0x43f5fd
cmp eax, 0xeb3a1bbd
je 0x43fc51
cmp eax, 0xebc0c12f
jne 0x43e79a
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0xd21419f
jmp 0x43e79a
cmp eax, 0x2f191a06
jg 0x43f64d
cmp eax, 0x2e4a7f70
je 0x43fc64
cmp eax, 0x2f04d3b6
jne 0x43e79a
mov ecx, dword [ebp - 0x14]
mov eax, 0xffffff77
add ecx, eax
mov eax, ecx
shr eax, 8
mov dword [ebp - 0x14], eax
mov eax, 0x24afbf80
cmp ecx, 0x7e00
jae 0x4403e3
mov eax, 0xa5ce58a1
jmp 0x4403e3
cmp eax, 0x8dae7415
jg 0x43f67e
cmp eax, 0x89437d73
je 0x43fc83
cmp eax, 0x8af531ab
jne 0x43e79a
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x3c], eax
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0xc9f1c1e4
jmp 0x43e79a
cmp eax, 0x4f2935d0
jg 0x43f6de
cmp eax, 0x4979ff30
je 0x43fcb5
cmp eax, 0x4be6d1fe
jne 0x43e79a
mov dword [ebp - 0x10], 0x2bf5fa41
jmp 0x43e79a
cmp eax, 0xc6b3ab53
jg 0x43f709
cmp eax, 0xc465bf16
je 0x43fd01
cmp eax, 0xc55de404
jne 0x43e79a
push dword [ebp - 0x84]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0x28d92f99
mov dword [ebp - 0x28], 1
jmp 0x43e79a
cmp eax, 0xd469e6b
jg 0x43f73a
cmp eax, 0x99d5901
je 0x43fd57
cmp eax, 0xd21419f
jne 0x43e79a
mov dword [ebp - 0x10], 0x305d3719
jmp 0x43e79a
cmp eax, 0xa82180f1
jg 0x43f7ad
cmp eax, 0xa3136c98
je 0x43fd89
cmp eax, 0xa5ce58a1
jne 0x43e79a
mov ecx, dword [ebp - 0x14]
mov eax, 0x97
add ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, 0x59fa0db5
cmp ecx, 0xc0
jge 0x4403e3
mov eax, 0xf60a9ff9
jmp 0x4403e3
cmp eax, 0x6e68db2d
jg 0x43f7d5
cmp eax, 0x6bf08bb8
je 0x43fdbd
cmp eax, 0x6e025169
jne 0x43e79a
mov dword [ebp - 0x10], 0x7d2825a7
jmp 0x43e79a
cmp eax, 0xe84db253
jg 0x43f817
cmp eax, 0xe5ceb192
je 0x43fdc9
cmp eax, 0xe773e138
jne 0x43e79a
imul eax, dword [ebp - 0x18], 0xbd0
add eax, 0xfffdbd68
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x5be1fd6b
jmp 0x43e79a
cmp eax, 0x3def8ce2
jg 0x43f839
cmp eax, 0x37c82c73
je 0x43fe08
cmp eax, 0x3c8ab27c
jne 0x43e79a
mov eax, dword [ebp - 0x68]
mov word [eax], 0
mov dword [ebp - 0x10], 0x5f981636
jmp 0x43e79a
cmp eax, 0x9d07d71f
jg 0x43f85b
cmp eax, 0x97c373f8
je 0x43fe14
cmp eax, 0x9b8b4ea6
jne 0x43e79a
mov edi, dword [ebp - 0x14]
shl edi, 0xd
add edi, 0xfffff520
shr edi, 5
and edi, 0xffffff80
or edi, 3
mov dword [ebp - 0x14], edi
push 0x41fb
push 0x41ec
push 0x12a7
push edi
call fcn.00440530
add esp, 0x10
push edi
call fcn.0043e788
add esp, 4
mov dword [ebp - 0x10], 0x5799f7e5
jmp 0x43e79a
cmp eax, 0x5f981635
jg 0x43f880
cmp eax, 0x5dd17d5d
je 0x43fe75
cmp eax, 0x5f8156ed
jne 0x43e79a
mov eax, dword [ebp - 0x24]
mov dword [eax], 0x800
mov dword [ebp - 0x10], 0xa278fe7b
jmp 0x43e79a
cmp eax, 0xd757abe2
jg 0x43f8c1
cmp eax, 0xd302cd08
je 0x43feae
cmp eax, 0xd4d2b734
jne 0x43e79a
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov word [eax + 0xa], 0
mov eax, dword [ebp - 0x4c]
movzx ecx, word [0x474e18]
mov word [eax + 8], cx
mov ecx, dword [0x474e14]
mov dword [eax + 4], ecx
mov ecx, dword [0x474e10]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x72506788
jmp 0x43e79a
cmp eax, 0x23bc4a88
jg 0x43f8ef
cmp eax, 0x13b9c9b0
je 0x43fef6
cmp eax, 0x1a64fc57
jne 0x43e79a
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffff1c
add eax, ecx
mov ecx, eax
imul ecx, eax
shl eax, 8
imul edx, ecx, 0x48fd
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xe107af37
cmp edx, ecx
jne 0x43fea4
jmp 0x4403e3
cmp eax, 0xb9be0273
jg 0x43f939
cmp eax, 0xb6771f41
je 0x43ff1d
cmp eax, 0xb68fd440
jne 0x43e79a
imul ecx, dword [ebp - 0x14], 0xf0f48
mov dword [ebp - 0x14], ecx
mov eax, 0xe107af37
cmp ecx, 0x69
jge 0x4403e3
mov eax, 0xcf350614
jmp 0x4403e3
cmp eax, 0x7c7c378f
jg 0x43f982
cmp eax, 0x7b338ee1
je 0x43ff34
cmp eax, 0x7beaea4b
jne 0x43e79a
mov eax, dword [ebp - 0x1c]
mov dword [eax], esi
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [eax], esi
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0xc1669378
jmp 0x43e79a
cmp eax, 0xf4d8c38d
je 0x43ff6d
cmp eax, 0xf60a9ff9
jne 0x43e79a
imul eax, dword [ebp - 0x14], 0x4e
add eax, 0xfffff673
mov dword [ebp - 0x14], eax
push eax
push 0x46c6
push 0x3bf3
push 0x3982
call fcn.00440530
add esp, 0x10
mov dword [ebp - 0x10], 0xf4d8c38d
jmp 0x43e79a
cmp eax, 0x261181b1
je 0x43ff96
cmp eax, 0x262c836d
jne 0x43e79a
mov eax, dword [ebp - 0x18]
shr eax, 0xf
add eax, 0xffffff32
imul ecx, eax, 0xb7
imul eax, eax
imul edx, eax, 0x83f
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0xc45fd1d8
cmp eax, edx
je 0x440366
mov ecx, 0x78623fa6
jmp 0x440366
cmp eax, 0x867303d0
je 0x43ffc4
cmp eax, 0x86bbd9ff
jne 0x43e79a
imul eax, dword [ebp - 0x18], 0x69
add eax, 7
imul ecx, eax, 0x68
imul eax, eax
imul edx, eax, 0x57b7
add ecx, 0x44
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0xe67523a
cmp eax, edx
je 0x440366
mov ecx, 0xb114a1e3
jmp 0x440366
cmp eax, 0x434d8672
je 0x43fff3
cmp eax, 0x46b8f08f
jne 0x43e79a
mov dword [ebp - 0x10], 0x65bbaa71
jmp 0x43e79a
cmp eax, 0xc23594ff
je 0x440020
cmp eax, 0xc45fd1d8
jne 0x43e79a
push 0x66
push 0x474da0
push dword [ebp - 0x48]
call fcn.0044dac0
add esp, 0xc
push 5
push 0x474e06
push 0x33
push dword [ebp - 0x48]
call fcn.00440530
add esp, 0x10
push dword [ebp - 0x1c]
push 0x20019
push esi
push dword [ebp - 0x48]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0xebc0c12f
test eax, eax
je 0x43f332
mov ecx, 0xe5ceb192
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x60], esi
jmp 0x43e79a
cmp eax, 0x46dbf1f
je 0x44003e
cmp eax, 0x8f0cc61
jne 0x43e79a
imul eax, dword [ebp - 0x18], 0x299800
add eax, 0xfff31100
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xe107af37
jmp 0x43e79a
cmp eax, 0xa260c58f
je 0x44008c
cmp eax, 0xa278fe7b
jne 0x43e79a
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], 0xceeb20c5
jmp 0x43e79a
cmp eax, 0x65bbaa71
je 0x4400ae
cmp eax, 0x6be48a12
jne 0x43e79a
mov eax, dword [ebp - 0x18]
add eax, 0xffffff84
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x1343
dec edx
shr eax, 2
mov dword [ebp - 0x18], eax
mov eax, 0xe107af37
cmp ecx, edx
je 0x4403e3
mov eax, 0x11e6c6f4
jmp 0x4403e3
cmp eax, 0xe3056842
je 0x4400ba
cmp eax, 0xe4fa5c7a
jne 0x43e79a
mov eax, dword [ebp - 0x14]
shr eax, 0xb
and eax, 0x1ff800
add eax, 0xfff84000
mov dword [ebp - 0x14], eax
push 0x384f
push eax
push 0x5288
push 0xd39
call fcn.00440530
add esp, 0x10
mov dword [ebp - 0x10], 0xcf350614
jmp 0x43e79a
cmp eax, 0x326519ba
je 0x4400f1
cmp eax, 0x34d511e7
jne 0x43e79a
mov ecx, dword [ebp - 0x14]
shl ecx, 6
and ecx, 0x3fffffc0
mov dword [ebp - 0x14], ecx
mov eax, 0xffd291d
cmp ecx, 0x8b
jae 0x4403e3
mov eax, 0x261181b1
jmp 0x4403e3
cmp eax, 0x95ddfebf
je 0x440108
cmp eax, 0x96db9600
jne 0x43e79a
mov ecx, dword [ebp - 0x14]
shl ecx, 0xb
and ecx, 0xfe000000
add ecx, 0xffc3c093
mov dword [ebp - 0x14], ecx
mov eax, 0xffe97eef
cmp ecx, 0x87
jge 0x4403e3
mov eax, 0x619ba9b3
jmp 0x4403e3
cmp eax, 0x59fa0db5
je 0x440120
cmp eax, 0x5be1fd6b
jne 0x43e79a
push dword [ebp - 0x20]
push 0x20019
push 0
push dword [ebp - 0x30]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0x4fe691
test eax, eax
je 0x440366
mov ecx, 0x84469960
jmp 0x440366
cmp eax, 0xcf350614
je 0x44015a
cmp eax, 0xd2b4ccbd
jne 0x43e79a
imul edi, dword [ebp - 0x14], 0x7e000000
or edi, 0xef
mov dword [ebp - 0x14], edi
push 0x5b81
push 0x1c09
push 0x1589
push edi
call fcn.00440530
add esp, 0x10
mov eax, 0x7beaea4b
cmp edi, 0xbb
jge 0x4403e3
mov eax, 0x304bf65
jmp 0x4403e3
cmp eax, 0xffd291d
je 0x440172
cmp eax, 0x11e6c6f4
jne 0x43e79a
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], 0xeb3a1bbd
jmp 0x43e79a
cmp eax, 0xb3b593c5
je 0x4401c2
cmp eax, 0xb5c6f61e
jne 0x43e79a
push 0x16
push 0x474eb0
push dword [ebp - 0x54]
call fcn.0044dac0
add esp, 0xc
push 8
push 0x474ec6
push 0xb
push dword [ebp - 0x54]
call fcn.00440530
add esp, 0x10
push 0x18
push dword [ebp - 0x54]
push dword [ebp - 0x3c]
call fcn.0044dac0
add esp, 0xc
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0x2e4a7f70
jmp 0x43e79a
cmp eax, 0x72506788
je 0x440207
cmp eax, 0x78623fa6
jne 0x43e79a
cmp dword [ebp - 0x74], 0
mov eax, 0x867303d0
je 0x4403e3
mov eax, 0x86bbd9ff
jmp 0x4403e3
cmp eax, 0xee225a75
je 0x44022f
cmp eax, 0xf0a35099
jne 0x43e79a
imul edi, dword [ebp - 0x14], 0xbf0
add edi, 0x1d0000
and edi, 0xffffc000
add edi, 0xffffff76
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
push edi
call fcn.0043e788
add esp, 4
mov dword [ebp - 0x10], 0xf4d8c38d
jmp 0x43e79a
cmp eax, 0x2f191a07
je 0x44026b
cmp eax, 0x2f274304
jne 0x43e79a
imul eax, dword [ebp - 0x18], 0x20670000
add eax, 0x26bb8000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x4be6d1fe
jmp 0x43e79a
cmp eax, 0x8dae7416
je 0x4402ab
cmp eax, 0x929cf1d7
jne 0x43e79a
mov edi, dword [ebp - 0x14]
add edi, 0x3e
mov ebx, edi
shr ebx, 0xa
mov dword [ebp - 0x14], ebx
push 0x1a89
push 0x4d65
push 0x4f0
push ebx
call fcn.00440530
add esp, 0x10
push ebx
call fcn.0043e788
add esp, 4
mov eax, 0x8dae7416
cmp edi, 0x3b400
jb 0x4403e3
mov eax, 0x434d8672
jmp 0x4403e3
cmp eax, 0x4f2935d1
je 0x4402e2
cmp eax, 0x5080623c
jne 0x43e79a
push eax
sub esp, 0x64
mov eax, esp
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x27bdab9a
jmp 0x43e79a
cmp eax, 0xc6b3ab54
je 0x4402ee
cmp eax, 0xc9f1c1e4
jne 0x43e79a
imul eax, dword [ebp - 0x18], 0x2ac8
add eax, 0x1564
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x9f79ae4b
jmp 0x43e79a
cmp eax, 0xd469e6c
je 0x440331
cmp eax, 0xe67523a
jne 0x43e79a
mov edi, dword [ebp - 0x14]
mov eax, 0xc4
add edi, eax
mov ebx, edi
shr ebx, 9
mov dword [ebp - 0x14], ebx
push 0x15e5
push 0x11b0
push 0x45bb
push ebx
call fcn.00440530
add esp, 0x10
push 0x4f84
push 0x2963
push 0x6086
push ebx
call fcn.00440530
add esp, 0x10
mov eax, 0x5dd17d5d
cmp edi, 0x7c00
jb 0x4403e3
mov eax, 0x96db9600
jmp 0x4403e3
cmp eax, 0xa82180f2
je 0x44036e
cmp eax, 0xa8d16cde
jne 0x43e79a
mov dword [ebp - 0x10], 0xebc0c12f
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x60], eax
jmp 0x43e79a
cmp eax, 0x6e68db2e
je 0x440389
cmp eax, 0x6f1ca5b1
jne 0x43e79a
mov eax, dword [ebp - 0x18]
shr eax, 6
and eax, 0x3ffff00
imul eax, eax, 0xcd
add eax, 0xd836
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x28d92f99
mov dword [ebp - 0x28], 0
jmp 0x43e79a
cmp eax, 0xe84db254
je 0x4403eb
cmp eax, 0xeafef8d8
jne 0x43e79a
mov dword [ebp - 0x10], 0xda3e6df0
jmp 0x43e79a
cmp eax, 0x3def8ce3
je 0x44040e
cmp eax, 0x3f7e4af7
jne 0x43e79a
mov dword [ebp - 0x10], 0xfe2ecccb
jmp 0x43e79a
cmp eax, 0x9d07d720
je 0x440467
cmp eax, 0x9f79ae4b
jne 0x43e79a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0xdbd7bab4
jmp 0x43e79a
cmp eax, 0x5f981636
je 0x44049c
cmp eax, 0x5fe21574
jne 0x43e79a
mov edi, dword [ebp - 0x14]
shl edi, 9
and edi, 0xfff80000
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
mov eax, 0x619ba9b3
cmp edi, 0x53
jl 0x43fcf7
jmp 0x4403e3
cmp eax, 0xd757abe3
je 0x4404cb
cmp eax, 0xda3e6df0
jne 0x43e79a
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xf003f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xe3056842
jmp 0x43e79a
cmp eax, 0x23bc4a89
je 0x440325
cmp eax, 0x24afbf80
jne 0x43e79a
imul edi, dword [ebp - 0x14], 0xe5
add edi, 0xc88a
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
mov eax, 0xcf350614
cmp edi, 0xfa
je 0x4403e3
mov eax, 0x41dfdb7a
jmp 0x4403e3
cmp eax, 0xb9be0274
je 0x4404d7
cmp eax, 0xbb200e1b
jne 0x43e79a
mov eax, dword [ebp - 0x14]
shr eax, 5
and eax, 0xfffffffc
imul ecx, eax, 0xa6
add ecx, 0xfffffd68
mov eax, ecx
shr eax, 0xa
mov dword [ebp - 0x14], eax
mov eax, 0xc45fd1d8
cmp ecx, 0x32800
jb 0x43fea4
jmp 0x4403e3
cmp eax, 0x7c7c3790
je 0x4404e9
cmp eax, 0x7d2825a7
jne 0x43e79a
mov dword [ebp - 0x10], 0x558f48b5
jmp 0x43e79a
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
add eax, 0x18
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x10], 0x7c7c3790
jmp 0x43e79a
imul edi, dword [ebp - 0x14], 0x4b1c0000
add edi, 0x78eb6c30
mov dword [ebp - 0x14], edi
push 0x6316
push 0x5b0d
push edi
push 0x1f8a
call fcn.00440530
add esp, 0x10
push 0x239e
push 0x41a4
push edi
push 0x3645
call fcn.00440530
add esp, 0x10
mov eax, 0xb5c6f61e
cmp edi, 0x7c
jl 0x4403e3
mov eax, 0x7beaea4b
jmp 0x4403e3
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffff26
add eax, ecx
shr eax, 1
mov ecx, eax
imul ecx, eax
shl eax, 0x19
imul edx, ecx, 0x3c01
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x5080623c
cmp edx, ecx
je 0x4400e9
mov eax, 0x30904810
jmp 0x4400e9
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0x3f7e4af7
jmp 0x43e79a
imul eax, dword [ebp - 0x18], 0x3a32
shr eax, 0xb
add eax, 0xa8
shr eax, 0xa
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x839abb37
jmp 0x43e79a
mov eax, dword [ebp - 0x14]
shl eax, 0x12
add eax, 0x33be000
shr eax, 0xa
mov dword [ebp - 0x14], eax
push 0x10a9
push 0x1516
push eax
push 0x3d94
jmp 0x44031d
mov dword [ebp - 0x10], 0x5f8156ed
jmp 0x43e79a
imul edi, dword [ebp - 0x14], 0x10c8000
add edi, 0x9708000
mov dword [ebp - 0x14], edi
push 0x5f06
push 0x588c
push edi
push 0x28bd
call fcn.00440530
add esp, 0x10
mov eax, 0x434d8672
test edi, edi
jle 0x4403e3
mov eax, 0x3def8ce3
jmp 0x4403e3
push dword [ebp - 0x44]
call fcn.0042640c
add esp, 4
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0x4163c8ab
jmp 0x43e79a
mov dword [ebp - 0x10], 0x7beaea4b
jmp 0x43e79a
mov eax, dword [ebp - 0x24]
mov dword [eax], 0x800
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0xa260c58f
jmp 0x43e79a
mov eax, dword [ebp - 0x80]
mov word [eax], 0
push 0x18
push 0x474ef0
push dword [ebp - 0x58]
call fcn.0044dac0
add esp, 0xc
push 8
push 0x474f08
push 0xc
push dword [ebp - 0x58]
call fcn.00440530
add esp, 0x10
push 0x1a
push dword [ebp - 0x58]
push dword [ebp - 0x40]
call fcn.0044dac0
add esp, 0xc
mov dword [ebp - 0x10], 0xe84db254
jmp 0x43e79a
push dword [ebp - 0x24]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0
push dword [ebp - 0x3c]
push dword [ebp - 0x70]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x262c836d
jmp 0x43e79a
mov eax, dword [ebp - 0x1c]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x10], 0x6f1ca5b1
jmp 0x43e79a
push dword [ebp - 0x5c]
call fcn.0045eb00
add esp, 4
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x40]
push dword [ebp + 8]
call fcn.00426b63
add esp, 0x10
push dword [ebp - 0x44]
call fcn.0045e17d
add esp, 4
push dword [ebp - 0x5c]
call fcn.0045e17d
add esp, 4
mov dword [ebp - 0x10], 0x326519ba
jmp 0x43e79a
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0x2f274304
jmp 0x43e79a
mov eax, dword [ebp - 0x14]
shl eax, 3
and eax, 0xfffff8
mov edi, eax
shl edi, 6
sub edi, eax
sub edi, eax
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
push edi
call fcn.0043e788
add esp, 4
mov eax, 0xb2235830
cmp edi, 0x85
jb 0x4403e3
mov eax, 0x99d5901
jmp 0x4403e3
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0xa8d16cde
jmp 0x43e79a
mov eax, dword [ebp - 0x18]
shl eax, 0xe
add eax, 0x30000
and eax, 0x7c000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x6e025169
jmp 0x43e79a
imul ecx, dword [ebp - 0x18], 0xbf
add ecx, 0xffffff02
imul eax, ecx, 0x8d000
imul ecx, ecx
imul edx, ecx, 0x5f61
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xcf350614
cmp ecx, edx
jne 0x43fdf4
jmp 0x43fdf9
imul edi, dword [ebp - 0x14], 0xd4
add edi, 0xffff47c4
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
push 0x3a05
push 0x3a60
push edi
push 0x3a04
call fcn.00440530
add esp, 0x10
mov eax, 0xd4d2b734
cmp edi, 0xdd
jb 0x4403e3
mov eax, 0x30904810
jmp 0x4403e3
push eax
sub esp, 8
mov edi, esp
mov word [edi + 0xa], 0
movzx eax, word [0x474ede]
mov word [edi + 8], ax
mov eax, dword [0x474eda]
mov dword [edi + 4], eax
mov eax, dword [0x474ed6]
mov dword [edi], eax
push 4
push 0x474ee0
push 5
push edi
call fcn.00440530
add esp, 0x10
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x34]
push eax
push edi
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0xb114a1e3
jmp 0x43e79a
mov ecx, dword [ebp - 0x14]
shl ecx, 8
add ecx, 0xfffffe8c
mov eax, ecx
shr eax, 0xd
add eax, 0x22
mov dword [ebp - 0x14], eax
mov eax, 0x5be1fd6b
cmp ecx, 0x120000
jae 0x4403e3
mov eax, 0x5f8156ed
jmp 0x4403e3
mov eax, dword [ebp - 0x14]
shl eax, 0x17
not eax
and eax, 0x80000000
mov dword [ebp - 0x14], eax
push 0x1d7f
push eax
push 0x190c
push 0x168a
call fcn.00440530
add esp, 0x10
mov dword [ebp - 0x10], 0xe107af37
jmp 0x43e79a
mov dword [ebp - 0x10], 0x60a9cd52
jmp 0x43e79a
mov eax, dword [ebp - 0x18]
add eax, 0xffffffeb
shr eax, 0xa
lea ecx, [eax + eax*8]
mov edx, eax
imul edx, eax
imul edi, edx, 0x70c3
dec edi
lea eax, [ecx*8 - 0x3498]
mov dword [ebp - 0x18], eax
mov eax, 0xd2b4ccbd
cmp edx, edi
je 0x43fdf9
mov eax, 0x28d92f99
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x28], 0
jmp 0x43e79a
mov dword [ebp - 0x10], 0x6bf08bb8
jmp 0x43e79a
imul eax, dword [ebp - 0x14], 0xa3
shr eax, 0x1d
imul edi, eax, 0x47
lea ebx, [edi - 0xc6]
mov dword [ebp - 0x14], ebx
push 0x3b84
push 0xa09
push ebx
push 0x7d8
call fcn.00440530
add esp, 0x10
push 0xec3
push 0x313b
push ebx
push 0xdda
call fcn.00440530
add esp, 0x10
mov eax, 0x9b8b4ea6
cmp edi, 0x122
jae 0x4403e3
mov eax, 0xa0eba314
jmp 0x4403e3
mov edi, dword [ebp - 0x14]
shl edi, 6
add edi, 0x76
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
push edi
call fcn.0043e788
add esp, 4
mov eax, 0xbc3cf863
cmp edi, 0xd3
jl 0x4403e3
mov eax, 0xd4d2b734
jmp 0x4403e3
mov edi, dword [ebp - 0x14]
shl edi, 0xf
mov ebx, 0xe107af37
and edi, 0xf8000
mov dword [ebp - 0x14], edi
je 0x43fec9
mov ebx, 0x5be1fd6b
push 0x6149
push 0x1326
push 0x3dac
push edi
call fcn.00440530
add esp, 0x10
push edi
push 0x264a
push 0x1a9b
push 0x30be
jmp 0x440457
mov eax, dword [ebp - 0x50]
mov word [eax + 0x66], 0
push 0x66
push 0x474e30
push dword [ebp - 0x50]
call fcn.0044dac0
add esp, 0xc
mov dword [ebp - 0x10], 0x9d07d720
jmp 0x43e79a
mov eax, dword [ebp - 0x20]
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x10], 0xa82180f2
jmp 0x43e79a
mov edi, dword [ebp - 0x14]
add edi, 0x6b
shr edi, 0x1a
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
push 0x1e01
push 0xa9e
push 0x1e16
push edi
call fcn.00440530
add esp, 0x10
mov dword [ebp - 0x10], 0xa0987a73
jmp 0x43e79a
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
sub esp, 0x800
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
sub esp, 0x7fc
mov eax, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0xcf350614
jmp 0x43e79a
mov ecx, dword [ebp - 0x14]
mov eax, 0x7fffffff
and ecx, eax
lea eax, [ecx - 0x84]
mov dword [ebp - 0x14], eax
mov eax, 0x619ba9b3
cmp ecx, 0x13d
jb 0x4403e3
mov eax, 0x3c8ab27c
jmp 0x4403e3
mov eax, dword [ebp - 0x18]
add eax, 0xffffffed
mov ecx, eax
imul ecx, eax
shr eax, 3
imul edx, ecx, 0xff1
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xa3136c98
cmp ecx, edx
je 0x4403e3
mov eax, 0xc465bf16
jmp 0x4403e3
push esi
push esi
push esi
push esi
push dword [ebp - 0x24]
push dword [ebp - 0x2c]
push dword [ebp - 0x64]
push dword [ebp - 0x6c]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov ecx, 0x1a64fc57
test eax, eax
je 0x4404c3
mov ecx, 0x37c82c73
jmp 0x4404c3
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov word [eax + 0x16], 0
mov dword [ebp - 0x10], 0xb5c6f61e
jmp 0x43e79a
mov eax, dword [ebp - 0x14]
add eax, 0xffffff8d
shr eax, 4
imul edi, eax, 0x52
add edi, 0xffffffd4
mov dword [ebp - 0x14], edi
push 0x47c2
push 0x15af
push edi
push 0x2d2f
call fcn.00440530
add esp, 0x10
push edi
call fcn.0043e788
add esp, 4
mov eax, 0xcf350614
cmp edi, 0xc9
jb 0x4403e3
mov eax, 0xb6771f41
jmp 0x4403e3
mov eax, dword [ebp - 0x18]
shl eax, 0xf
add eax, 0xffffff33
shr eax, 8
add eax, 0x89
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xd757abe3
jmp 0x43e79a
mov dword [ebp - 0x10], 0x5080623c
jmp 0x43e79a
imul eax, dword [ebp - 0x18], 0x8603
add eax, 0xfffde7f4
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x53ed
dec edx
and eax, 0xffffffe0
shl eax, 6
mov dword [ebp - 0x18], eax
mov eax, 0xf4d8c38d
cmp ecx, edx
je 0x4400e9
mov eax, 0x23bc4a89
mov dword [ebp - 0x10], eax
jmp 0x43e79a
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x10], 0xd469e6c
jmp 0x43e79a
mov eax, dword [ebp - 0x14]
shl eax, 0x13
add eax, 0xffffff80
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xe107af37
jmp 0x43e79a
mov eax, dword [ebp - 0x14]
shl eax, 0xc
mov edi, 0xcf350614
add eax, 0x4f000
mov dword [ebp - 0x14], eax
je 0x44013a
mov edi, 0xf4d8c38d
push eax
push 0x2571
push 0x4ed
push 0x59df
call fcn.00440530
add esp, 0x10
mov dword [ebp - 0x10], edi
jmp 0x43e79a
push eax
sub esp, 0x7fc
mov eax, esp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0x8f0cc61
jmp 0x43e79a
mov eax, dword [ebp - 0x14]
mov ecx, eax
shl ecx, 6
lea edi, [ecx + eax*4]
add edi, 0xffffea38
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
push edi
push 0x5a67
push 0x21e0
push 0x2da3
call fcn.00440530
add esp, 0x10
mov eax, 0xfe2ecccb
cmp edi, 0x91
jl 0x4403e3
mov eax, 0x60a9cd52
jmp 0x4403e3
mov edi, dword [ebp - 0x14]
mov eax, 0xfffffea5
add edi, eax
mov eax, edi
shr eax, 3
mov dword [ebp - 0x14], eax
push eax
push 0x2a05
push 0x5bb5
push 0x10b9
call fcn.00440530
add esp, 0x10
mov eax, 0xcf350614
cmp edi, 0x2a0
jb 0x4403e3
mov eax, 0x8af531ab
jmp 0x4403e3
push 4
push 0x474e1a
push 5
push dword [ebp - 0x4c]
call fcn.00440530
add esp, 0x10
sub esp, 0x68
mov eax, esp
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x13b9c9b0
jmp 0x43e79a
mov edi, dword [ebp - 0x14]
shl edi, 0xd
add edi, 0x1ee000
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
push 0x5171
push 0x599b
push 0x4c76
push edi
call fcn.00440530
add esp, 0x10
mov dword [ebp - 0x10], 0xf0a35099
jmp 0x43e79a
imul eax, dword [ebp - 0x14], 0x3cb4
shr eax, 5
imul edi, eax, 0x37d0
mov dword [ebp - 0x14], edi
push 0x446e
push 0x4064
push edi
push 0x5f2e
call fcn.00440530
add esp, 0x10
push edi
call fcn.0043e788
add esp, 4
mov dword [ebp - 0x10], 0xf510d64
jmp 0x43e79a
imul edi, dword [ebp - 0x14], 0xc100000
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
push edi
call fcn.0043e788
add esp, 4
mov eax, 0xcf350614
cmp edi, 0x84
jge 0x4403e3
mov eax, 0x4979ff30
jmp 0x4403e3
mov dword [ebp - 0x10], 0xc55de404
jmp 0x43e79a
imul edi, dword [ebp - 0x14], 0x2700
add edi, 0x122100
shr edi, 0xf
add edi, 0x77
mov dword [ebp - 0x14], edi
push edi
call fcn.0043e788
add esp, 4
push 0x8d8
push 0x5ee0
push 0x310e
push edi
call fcn.00440530
add esp, 0x10
mov dword [ebp - 0x10], 0x619ba9b3
jmp 0x43e79a
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + ecx*2]
shl eax, 3
sub eax, ecx
imul eax, eax
imul ecx, ecx, 0x3c600
imul edx, eax, 0x2a7
shr ecx, 0xd
dec edx
add ecx, 0xffffff1a
mov dword [ebp - 0x18], ecx
mov ecx, 0x94de83ac
cmp edx, eax
je 0x440366
mov ecx, 0x4f2935d1
mov dword [ebp - 0x10], ecx
jmp 0x43e79a
imul eax, dword [ebp - 0x18], 0x78c
add eax, 0x3f348
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xcde90dc9
jmp 0x43e79a
imul edi, dword [ebp - 0x14], 0x8b
add edi, 0x4a63
mov ebx, edi
shr ebx, 8
add ebx, 0xffffffea
mov dword [ebp - 0x14], ebx
push 0x5d18
push 0x1a35
push 0x340
push ebx
call fcn.00440530
add esp, 0x10
push ebx
push 0x3707
push 0x53e9
push 0x22d0
call fcn.00440530
add esp, 0x10
mov eax, 0x447e4a
cmp edi, 0xa100
jae 0x4403e3
mov eax, 0xd302cd08
mov dword [ebp - 0x10], eax
jmp 0x43e79a
imul eax, dword [ebp - 0x18], 0x4c0e0
add eax, 0xffffd85c
shr eax, 2
add eax, 0xfffffefd
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xe728405
jmp 0x43e79a
mov edi, dword [ebp - 0x14]
shl edi, 0xd
add edi, 0x330000
mov ebx, 0x72506788
and edi, 0xffffc000
mov dword [ebp - 0x14], edi
je 0x44042f
mov ebx, 0x5be1fd6b
push 0x2dc1
push 0x376f
push edi
push 0x1b3
call fcn.00440530
add esp, 0x10
push 0x2f11
push edi
push 0x5ac
push 0x4d56
call fcn.00440530
add esp, 0x10
mov dword [ebp - 0x10], ebx
jmp 0x43e79a
push 8
push 0x474e96
push 0x33
push dword [ebp - 0x50]
call fcn.00440530
add esp, 0x10
push dword [ebp - 0x2c]
push dword [ebp - 0x50]
push dword [ebp - 0x4c]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0xe773e138
jmp 0x43e79a
mov eax, dword [ebp - 0x18]
shr eax, 7
imul ecx, eax, 0x76
imul eax, eax
imul edx, eax, 0xae3
dec edx
shr ecx, 0xb
mov dword [ebp - 0x18], ecx
mov ecx, 0xf4d8c38d
cmp eax, edx
je 0x4404c3
mov ecx, 0xc45fd1d8
mov dword [ebp - 0x10], ecx
jmp 0x43e79a
mov dword [ebp - 0x10], 0x434d8672
jmp 0x43e79a
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xf4d8c38d
jmp 0x43e79a
imul eax, dword [ebp - 0x18], 0xc38000
add eax, 0xffffff9c
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x949ea37e
jmp 0x43e79a
cmp eax, 0x28d92f99
jne 0x43e79a
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret