Function at 0x43c6a7
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4cf6d9
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x55f6c0]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov esi, ecx
call fcn.0040a6c0
call fcn.0048bbda
fld qword [0x53dd78]
mov eax, dword [eax + 0xc]
push ecx
push ecx
fstp qword [esp]
push 0x18e
push dword [esi + 0x20]
lea ecx, [esi + 0x34c]
mov edx, eax
call fcn.0040b5c6
push 1
push 0xfb
push 0x191
xor edi, edi
push edi
push edi
mov ecx, esi
call fcn.0048be4e
push edi
mov ecx, esi
call fcn.0048e907
push str.HKEY_LOCAL_MACHINE
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, 0x143
push ebx
push dword [esi + 0x310]
call edi
push str.HKEY_CURRENT_USER
push 0
push ebx
push dword [esi + 0x310]
call edi
push str.HKEY_CLASSES_ROOT
push 0
push ebx
push dword [esi + 0x310]
call edi
push str.HKEY_USERS
push 0
push ebx
push dword [esi + 0x310]
call edi
push 0
push 0
push 0x14e
push dword [esi + 0x310]
call edi
lea ecx, [esi + 0x29c]
call fcn.0048bef7
call fcn.0043c96f
mov ebx, 0x5229b8
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
mov edi, str.RESOURCESTRING
push edi
call fcn.0040253e
and dword [esp + 0x38], 0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x52f6f8
call fcn.0040253e
or dword [esp + 0x3c], 0xffffffff
lea eax, [esp + 0x20]
push eax
call fcn.00406e20
mov dword [esp + 0x30], 1
push dword [eax]
lea ecx, [esi + 0x360]
call fcn.0048bdec
or dword [esp + 0x30], 0xffffffff
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00402883
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push edi
call fcn.0040253e
push ecx
mov dword [esp + 0x3c], 2
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SAFEPC_A476
call fcn.0040253e
or dword [esp + 0x3c], 0xffffffff
lea eax, [esp + 0x20]
push eax
call fcn.00406e20
mov dword [esp + 0x30], 3
push dword [eax]
lea ecx, [esi + 0x3b4]
call fcn.0048bdec
or dword [esp + 0x30], 0xffffffff
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00402883
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push edi
call fcn.0040253e
push ecx
mov dword [esp + 0x3c], 4
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SAFEPC_A477
call fcn.0040253e
or dword [esp + 0x3c], 0xffffffff
lea eax, [esp + 0x20]
push eax
call fcn.00406e20
mov dword [esp + 0x30], 5
push dword [eax]
lea ecx, [esi + 0x408]
call fcn.0048bdec
or dword [esp + 0x30], 0xffffffff
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00402883
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push edi
call fcn.0040253e
push ecx
mov dword [esp + 0x3c], 6
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SAFEPC_A478
call fcn.0040253e
or dword [esp + 0x3c], 0xffffffff
lea eax, [esp + 0x20]
push eax
call fcn.00406e20
mov dword [esp + 0x30], 7
push dword [eax]
lea ecx, [esi + 0x45c]
call fcn.0048bdec
or dword [esp + 0x30], 0xffffffff
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00402883
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push edi
call fcn.0040253e
push ecx
mov dword [esp + 0x3c], 8
mov ecx, esp
mov dword [esp + 0x28], esp
push str.SAFEPC_A408
call fcn.0040253e
or dword [esp + 0x3c], 0xffffffff
lea eax, [esp + 0x24]
push eax
call fcn.00406e20
mov dword [esp + 0x30], 9
push dword [eax]
lea ecx, [esi + 0x4b0]
call fcn.0048bdec
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.00402883
xor eax, eax
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret