Function at 0x43c6a2
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4d2667
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x55c6c0]
xor eax, esp
push eax
lea eax, [esp + 0x28]
mov dword fs:[0], eax
mov esi, ecx
call fcn.0040a6a7
call fcn.0048b4c4
fld qword [0x53a620]
mov eax, dword [eax + 0xc]
push ecx
push ecx
fstp qword [esp]
push 0x18e
push dword [esi + 0x20]
lea ecx, [esi + 0x34c]
mov edx, eax
call fcn.0040b5ad
push 1
push 0xfb
push 0x191
xor edi, edi
push edi
push edi
mov ecx, esi
call fcn.0048b738
push edi
mov ecx, esi
call fcn.0048e1fc
push str.HKEY_LOCAL_MACHINE
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov ebx, 0x143
push ebx
push dword [esi + 0x310]
call edi
push str.HKEY_CURRENT_USER
push 0
push ebx
push dword [esi + 0x310]
call edi
push str.HKEY_CLASSES_ROOT
push 0
push ebx
push dword [esi + 0x310]
call edi
push str.HKEY_USERS
push 0
push ebx
push dword [esi + 0x310]
call edi
push 0
push 0
push 0x14e
push dword [esi + 0x310]
call edi
lea ecx, [esi + 0x29c]
call fcn.0048b7e1
call fcn.0043c96a
mov ebx, 0x520938
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
mov edi, str.RESOURCESTRING
push edi
call fcn.0040255d
and dword [esp + 0x38], 0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x52d5b8
call fcn.0040255d
or dword [esp + 0x3c], 0xffffffff
lea eax, [esp + 0x20]
push eax
call fcn.00406e18
mov dword [esp + 0x30], 1
push dword [eax]
lea ecx, [esi + 0x360]
call fcn.0048b6d6
or dword [esp + 0x30], 0xffffffff
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00402883
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push edi
call fcn.0040255d
push ecx
mov dword [esp + 0x3c], 2
mov ecx, esp
mov dword [esp + 0x28], esp
push str.S9PT9_476
call fcn.0040255d
or dword [esp + 0x3c], 0xffffffff
lea eax, [esp + 0x20]
push eax
call fcn.00406e18
mov dword [esp + 0x30], 3
push dword [eax]
lea ecx, [esi + 0x3b4]
call fcn.0048b6d6
or dword [esp + 0x30], 0xffffffff
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00402883
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push edi
call fcn.0040255d
push ecx
mov dword [esp + 0x3c], 4
mov ecx, esp
mov dword [esp + 0x28], esp
push str.S9PT9_477
call fcn.0040255d
or dword [esp + 0x3c], 0xffffffff
lea eax, [esp + 0x20]
push eax
call fcn.00406e18
mov dword [esp + 0x30], 5
push dword [eax]
lea ecx, [esi + 0x408]
call fcn.0048b6d6
or dword [esp + 0x30], 0xffffffff
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00402883
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push edi
call fcn.0040255d
push ecx
mov dword [esp + 0x3c], 6
mov ecx, esp
mov dword [esp + 0x28], esp
push str.S9PT9_478
call fcn.0040255d
or dword [esp + 0x3c], 0xffffffff
lea eax, [esp + 0x20]
push eax
call fcn.00406e18
mov dword [esp + 0x30], 7
push dword [eax]
lea ecx, [esi + 0x45c]
call fcn.0048b6d6
or dword [esp + 0x30], 0xffffffff
mov ecx, dword [esp + 0x14]
add ecx, 0xfffffff0
call fcn.00402883
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push edi
call fcn.0040255d
push ecx
mov dword [esp + 0x3c], 8
mov ecx, esp
mov dword [esp + 0x28], esp
push str.S9PT9_408
call fcn.0040255d
or dword [esp + 0x3c], 0xffffffff
lea eax, [esp + 0x24]
push eax
call fcn.00406e18
mov dword [esp + 0x30], 9
push dword [eax]
lea ecx, [esi + 0x4b0]
call fcn.0048b6d6
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.00402883
xor eax, eax
mov ecx, dword [esp + 0x28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret