Function at 0x432b60
Capabilities:
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x48e883
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x4b1ae0]
xor eax, esp
mov dword [esp + 0xd0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4b1ae0]
xor eax, esp
push eax
lea eax, [esp + 0xe8]
mov dword fs:[0], eax
mov esi, dword [esp + 0xf8]
call fcn.00414ce0
cmp dword [eax + 0x640], 6
jae 0x432c3e
push 0x74
xor edi, edi
push str.SYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList
lea ecx, [esp + 0x40]
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], edi
mov byte [esp + 0x44], 0
call fcn.0040b5a0
push esi
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x5c]
push reloc.OLEAUT32.dll_SysReAllocString
push ecx
mov dword [esp + 0x100], edi
call fcn.0042b450
add esp, 0x10
cmp dword [eax + 0x14], edi
mov ebp, 0x10
setne bl
cmp dword [esp + 0x6c], ebp
jb 0x432c14
mov edx, dword [esp + 0x58]
push edx
call fcn.00473948
add esp, 4
mov dword [esp + 0x6c], 0xf
mov dword [esp + 0x68], edi
mov byte [esp + 0x58], 0
cmp dword [esp + 0x50], ebp
jb 0x432efb
mov eax, dword [esp + 0x3c]
push eax
call fcn.00473948
jmp 0x432ef8
xor ebp, ebp
push 0x7d0
xor bl, bl
mov edi, 0x3e8
push ebp
mov byte [esp + 0x1f], bl
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], edi
call fcn.00473d56
add esp, 8
mov dword [esp + 0x18], eax
push 0x56
push str.SYSTEMCurrentControlSet_servicesSharedAccessParametersFirewallPolicyFirewallRules
lea ecx, [esp + 0x40]
mov dword [esp + 0xf8], 1
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], ebp
mov byte [esp + 0x44], 0
call fcn.0040b5a0
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0xf8], 2
call fcn.00429c40
mov ebp, 0x10
add esp, 8
mov byte [esp + 0xf0], 1
cmp dword [esp + 0x50], ebp
jb 0x432ccb
mov eax, dword [esp + 0x3c]
push eax
call fcn.00473948
add esp, 4
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x34]
push ecx
push 0x20019
push 0
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x432eea
push 0x7d0
push eax
mov dword [esp + 0x7c], edi
call fcn.00473d56
mov edi, eax
mov dword [esp + 0x78], edi
lea eax, [esp + 0x5c]
push esi
push eax
mov byte [esp + 0x100], 3
call fcn.0042db90
push eax
lea ecx, [esp + 0xdc]
push str.__i_
push ecx
mov byte [esp + 0x10c], 4
call fcn.0040bcc0
add esp, 0x1c
mov byte [esp + 0xf0], 6
cmp dword [esp + 0x6c], ebp
jb 0x432d50
mov edx, dword [esp + 0x58]
push edx
call fcn.00473948
add esp, 4
xor esi, esi
mov dword [esp + 0x6c], 0xf
mov dword [esp + 0x68], esi
mov byte [esp + 0x58], 0
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x1c]
push edi
lea edx, [esp + 0x38]
push edx
mov edx, dword [esp + 0x40]
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x3c]
push eax
push ecx
push esi
push edx
mov dword [esp + 0x48], 0x3e8
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
jne 0x432e92
cmp dword [esp + 0x30], 1
jne 0x432e99
lea eax, [esp + 0x78]
push edi
push eax
call fcn.0042a950
add esp, 8
mov byte [esp + 0xf0], 7
cmp dword [eax + 0x18], ebp
jb 0x432dcd
mov ecx, dword [eax + 4]
mov dword [esp + 0x20], ecx
jmp 0x432dd4
lea edx, [eax + 4]
mov dword [esp + 0x20], edx
mov eax, dword [eax + 0x14]
lea ecx, [esp + 0xc8]
push ecx
lea ecx, [esp + 0x98]
mov dword [esp + 0x28], eax
call fcn.0041f840
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
push 0x4b1920
lea edx, [esp + 0x60]
push edx
mov ecx, eax
mov byte [esp + 0x134], 8
call fcn.00467110
lea ecx, [esp + 0x94]
mov bl, al
mov byte [esp + 0xf0], 7
call fcn.00467910
mov byte [esp + 0xf0], 6
cmp dword [esp + 0x90], ebp
jb 0x432e87
mov eax, dword [esp + 0x7c]
push eax
call fcn.00473948
add esp, 4
test bl, bl
je 0x432e99
mov byte [esp + 0x17], 1
jmp 0x432e99
cmp eax, 0x103
je 0x432ea6
mov bl, byte [esp + 0x17]
inc esi
test bl, bl
je 0x432d63
cmp dword [esp + 0xe0], ebp
jb 0x432ebf
mov ecx, dword [esp + 0xcc]
push ecx
call fcn.00473948
add esp, 4
mov dword [esp + 0xe0], 0xf
mov dword [esp + 0xdc], 0
mov byte [esp + 0xcc], 0
test edi, edi
je 0x432eea
push edi
call fcn.00473f71
add esp, 4
mov eax, dword [esp + 0x18]
test eax, eax
je 0x432efb
push eax
call fcn.00473f71
add esp, 4
mov al, bl
mov ecx, dword [esp + 0xe8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xd0]
xor ecx, esp
call fcn.00474468
add esp, 0xe0
ret