Function at 0x432da0
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x18a0
call fcn.0043f6a0
mov dword [ebp - 0x10], 0x81fa5c77
xor ebx, ebx
mov eax, dword [ebp - 0x10]
cmp eax, 0x12d405c5
jle 0x432e2a
cmp eax, 0x4162420d
jle 0x432ea4
cmp eax, 0x686a1596
jle 0x432f7a
cmp eax, 0x6f1ffd6a
jle 0x4330c9
cmp eax, 0x727d9e31
jle 0x433370
cmp eax, 0x744fc4cd
jg 0x43372b
cmp eax, 0x727d9e32
je 0x43381a
cmp eax, 0x7301b97c
jne 0x432db9
imul eax, dword [ebp - 0x18], 0x18e0
add eax, 0x108
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x2ca1adc8
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x4c], eax
jmp 0x432db9
cmp eax, 0xc889b022
jg 0x432f23
cmp eax, 0xa5c6a2a9
jle 0x432fc6
cmp eax, 0xb9cab83f
jle 0x433101
cmp eax, 0xc309d5c2
jle 0x4333a5
cmp eax, 0xc43f69a9
jg 0x43377a
cmp eax, 0xc309d5c3
je 0x433834
cmp eax, 0xc410ea73
jne 0x432db9
mov eax, dword [ebp - 0x14]
mov ecx, eax
shl ecx, 6
add ecx, eax
mov eax, ecx
shr eax, 0xa
mov dword [ebp - 0x14], eax
mov eax, 0xea7b87b1
cmp ecx, 0x17400
jae 0x433ee8
mov eax, 0x9413119a
jmp 0x433ee8
cmp eax, 0x216f6112
jle 0x43303a
cmp eax, 0x2ca1adc7
jle 0x433165
cmp eax, 0x3773f20e
jle 0x4333d2
cmp eax, 0x3910c13f
jg 0x4337b6
cmp eax, 0x3773f20f
je 0x433859
cmp eax, 0x380a7605
jne 0x432db9
mov esi, dword [ebp - 0x14]
mov eax, 0xfffffee4
add esi, eax
mov dword [ebp - 0x14], esi
push 0x3dc4
push 0x3273
push 0x4adf
push esi
call fcn.00434130
add esp, 0x10
mov eax, 0x16ccf7b2
cmp esi, 0x71
jl 0x433ee8
mov eax, 0xc43f69aa
jmp 0x433ee8
cmp eax, 0xf22e2b3c
jle 0x43307d
cmp eax, 0x4774cb4
jle 0x4331bb
cmp eax, 0x99aefd1
jle 0x4333ff
cmp eax, 0xe32c472
jg 0x4337d8
cmp eax, 0x99aefd2
je 0x43386c
cmp eax, 0xacde224
jne 0x432db9
push eax
sub esp, 0x64
mov eax, esp
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0xf402c2cf
jmp 0x432db9
cmp eax, 0x4d2f2d5a
jle 0x433232
cmp eax, 0x51b7edd9
jle 0x433437
cmp eax, 0x5f2129fc
jg 0x433803
cmp eax, 0x51b7edda
je 0x433878
cmp eax, 0x53958b14
jne 0x432db9
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x10], 0xf88e80a2
jmp 0x432db9
cmp eax, 0x9e2a8d5a
jg 0x43326a
cmp eax, 0x94131199
jg 0x43346b
cmp eax, 0x817a63f3
je 0x433884
cmp eax, 0x81fa5c77
je 0x433892
cmp eax, 0x8db0eb53
jne 0x432db9
mov eax, dword [ebp - 0x18]
mov ecx, 0xfffffe58
add eax, ecx
shr eax, 0xf
lea ecx, [eax + eax*8]
mov edx, eax
imul edx, eax
imul esi, edx, 0x4ec1
dec esi
lea eax, [ecx*4 + 0x189c]
mov dword [ebp - 0x18], eax
mov eax, 0x686a1597
cmp edx, esi
je 0x433ee8
mov eax, 0x3773f20f
jmp 0x433ee8
cmp eax, 0x16ccf7b1
jg 0x4332b3
cmp eax, 0x15e52e6d
jg 0x433498
cmp eax, 0x12d405c6
je 0x43389e
cmp eax, 0x14afc217
je 0x4338c2
cmp eax, 0x15670044
jne 0x432db9
mov dword [ebp - 0x10], 0xa4d39bfc
jmp 0x432db9
cmp eax, 0xd96e9fa2
jg 0x43332a
cmp eax, 0xd3a405e8
jg 0x4334ed
cmp eax, 0xc889b023
je 0x4338ce
cmp eax, 0xd17bb27d
je 0x433901
cmp eax, 0xd2e7206a
jne 0x432db9
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x71df35d
jmp 0x432db9
cmp eax, 0x6d6a4e8f
jg 0x433523
cmp eax, 0x686a1597
je 0x433934
cmp eax, 0x69262631
je 0x433965
cmp eax, 0x6c4a7760
jne 0x432db9
mov dword [ebp - 0x10], 0x6f1ffd6b
jmp 0x432db9
cmp eax, 0xb0c64cea
jg 0x433561
cmp eax, 0xa5c6a2aa
je 0x4339b1
cmp eax, 0xa792b3d7
je 0x4339d1
cmp eax, 0xacdf80aa
jne 0x432db9
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0xaa]
imul ecx, ecx
imul edx, ecx, 0x20c7
dec edx
imul eax, eax, 0x2f5f
add eax, 0x4e45f9
mov dword [ebp - 0x18], eax
mov eax, 0x6d8041ac
cmp ecx, edx
je 0x433ee8
mov eax, 0xbc15ecb5
jmp 0x433ee8
cmp eax, 0x27a97147
jg 0x4335cd
cmp eax, 0x216f6113
je 0x4339fd
cmp eax, 0x21a94854
je 0x433a16
cmp eax, 0x228425ff
jne 0x432db9
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x10aa]
push eax
push dword [ebp - 0x50]
push dword [ebp - 0x58]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0xacdf80aa
jmp 0x432db9
cmp eax, 0xf8648678
jg 0x43360e
cmp eax, 0xf22e2b3d
je 0x433a31
cmp eax, 0xf402c2cf
je 0x433a69
cmp eax, 0xf5632118
jne 0x432db9
lea eax, [ebp - 0x10aa]
push eax
push dword [ebp - 0x34]
push dword [ebp - 0x30]
lea esi, [ebp - 0x18aa]
push esi
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0x20]
push eax
push 0x20019
push 0
push esi
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0x9b6f65db
test eax, eax
je 0x43409b
mov ecx, 0x14afc217
jmp 0x43409b
cmp eax, 0x461a3d5c
jg 0x433651
cmp eax, 0x4162420e
je 0x433c60
cmp eax, 0x42455599
je 0x433aa3
cmp eax, 0x4443c68a
jne 0x432db9
mov dword [ebp - 0x10], 0x3cf3a764
jmp 0x432db9
cmp eax, 0xa4255ff9
jg 0x43367e
cmp eax, 0x9e2a8d5b
je 0x433f39
cmp eax, 0x9f55d049
je 0x433aaf
cmp eax, 0xa2362863
jne 0x432db9
push dword [ebp - 0x48]
call fcn.0044db0c
add esp, 4
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0x48ec64c0
jmp 0x432db9
cmp eax, 0x1bccc989
jg 0x4336b8
cmp eax, 0x16ccf7b2
je 0x433ae5
cmp eax, 0x18704591
je 0x433b1e
cmp eax, 0x1aeaaa3e
jne 0x432db9
mov edi, dword [ebp - 0x14]
shl edi, 9
add edi, 0xfffe3000
mov esi, edi
shr esi, 0xa
mov dword [ebp - 0x14], esi
push esi
call fcn.00432da0
add esp, 4
push 0x3b77
push 0x272
push esi
push 0x2dc
call fcn.00434130
add esp, 0x10
mov eax, 0x216f6113
cmp edi, 0x22400
jae 0x4339a7
jmp 0x433ee8
cmp eax, 0xe67b9926
jg 0x4336ec
cmp eax, 0xd96e9fa3
je 0x433b2a
cmp eax, 0xdb9c6041
je 0x433b84
cmp eax, 0xe65521be
jne 0x432db9
push dword [ebp - 0x28]
call fcn.0041f43b
add esp, 4
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x727d9e32
jmp 0x432db9
cmp eax, 0x6f1ffd6b
je 0x433b90
cmp eax, 0x7204a13c
je 0x433bcd
cmp eax, 0x72585e74
jne 0x432db9
mov eax, dword [ebp - 0x74]
mov word [eax], 0
mov dword [ebp - 0x10], 0xa4255ffa
jmp 0x432db9
cmp eax, 0xb9cab840
je 0x433bff
cmp eax, 0xbc15ecb5
je 0x433c30
cmp eax, 0xbdce7d44
jne 0x432db9
mov dword [ebp - 0x10], 0xefa0553
jmp 0x432db9
cmp eax, 0x2ca1adc8
je 0x433c3c
cmp eax, 0x30010aee
je 0x433c4e
cmp eax, 0x36c04364
jne 0x432db9
mov dword [ebp - 0x10], 0x4dedc3c3
jmp 0x432db9
cmp eax, 0x4774cb5
je 0x433c6c
cmp eax, 0x71df35d
je 0x433c7f
cmp eax, 0x8fe7f8d
jne 0x432db9
push dword [ebp - 0x28]
call fcn.0044db0c
add esp, 4
mov dword [ebp - 0x10], 0xa2362863
jmp 0x432db9
cmp eax, 0x4d2f2d5b
je 0x433ca8
cmp eax, 0x4d75da69
je 0x433ce0
cmp eax, 0x4dedc3c3
jne 0x432db9
mov dword [ebp - 0x44], 0x800
mov dword [ebp - 0x10], 0xe32c473
jmp 0x432db9
cmp eax, 0x9413119a
je 0x433cec
cmp eax, 0x98439b28
je 0x433d2f
cmp eax, 0x9b6f65db
jne 0x432db9
mov dword [ebp - 0x10], 0x36c04364
jmp 0x432db9
cmp eax, 0x15e52e6e
je 0x433d41
cmp eax, 0x1690da95
je 0x433d79
cmp eax, 0x16ae0529
jne 0x432db9
imul esi, dword [ebp - 0x14], 0xf9
add esi, 0xffff11b3
mov dword [ebp - 0x14], esi
push esi
call fcn.00432da0
add esp, 4
mov eax, 0x20baa0c4
cmp esi, 0xea
je 0x433ee8
mov eax, 0x228425ff
jmp 0x433ee8
cmp eax, 0xd3a405e9
je 0x433dc1
cmp eax, 0xd56e4003
je 0x433e13
cmp eax, 0xd9327505
jne 0x432db9
mov eax, dword [ebp - 0x40]
add eax, 0x18
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x72585e74
jmp 0x432db9
cmp eax, 0x6d6a4e90
je 0x433e1f
cmp eax, 0x6d8041ac
je 0x433e2b
cmp eax, 0x6e54c1dc
jne 0x432db9
mov eax, dword [ebp - 0x18]
lea eax, [eax*4 - 0x220]
and eax, 0xffffffe0
imul eax, eax, 0x87
add eax, 0x64b9
jmp 0x43363b
cmp eax, 0xb0c64ceb
je 0x433e5d
cmp eax, 0xb51aa46e
je 0x433e8f
cmp eax, 0xb54cdf44
jne 0x432db9
mov eax, dword [ebp - 0x14]
shr eax, 0xa
imul edi, eax, 0x3218
add edi, 0x16
mov dword [ebp - 0x14], edi
push 0x421d
push edi
push 0x26ea
push 0x3c2
call fcn.00434130
add esp, 0x10
push edi
call fcn.00432da0
add esp, 4
mov eax, 0xb9cab840
cmp edi, 0x3b
jge 0x433ee8
mov eax, 0xb0c64ceb
jmp 0x433ee8
cmp eax, 0x27a97148
je 0x433eab
cmp eax, 0x2af00f3c
je 0x433eb7
cmp eax, 0x2c3208a1
jne 0x432db9
push 6
push 0x466a36
push 0x33
push dword [ebp - 0x34]
call fcn.00434130
add esp, 0x10
mov dword [ebp - 0x10], 0xf5632118
jmp 0x432db9
cmp eax, 0xf8648679
je 0x433eca
cmp eax, 0xf88e80a2
je 0x433ef0
cmp eax, 0xff656b4b
jne 0x432db9
imul eax, dword [ebp - 0x18], 0x8f0
add eax, 0xffffff23
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x5f2129fd
mov dword [ebp - 0x1c], 0
jmp 0x432db9
cmp eax, 0x461a3d5d
je 0x433f2a
cmp eax, 0x46954575
je 0x433f45
cmp eax, 0x48ec64c0
jne 0x432db9
mov dword [ebp - 0x10], 0x53958b14
jmp 0x432db9
cmp eax, 0xa4255ffa
je 0x433f69
cmp eax, 0xa4d39bfc
je 0x433fca
cmp eax, 0xa5421aee
jne 0x432db9
cmp dword [ebp - 0x5c], 0
mov eax, 0xea7b87b1
je 0x433ee8
mov eax, 0xd56e4003
jmp 0x433ee8
cmp eax, 0x1bccc98a
je 0x43400e
cmp eax, 0x1bd97aa5
je 0x434049
cmp eax, 0x20baa0c4
jne 0x432db9
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x10], 0x9e2a8d5b
jmp 0x432db9
cmp eax, 0xe67b9927
je 0x43405e
cmp eax, 0xe95f12ee
je 0x43406a
cmp eax, 0xea7b87b1
jne 0x432db9
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
add eax, 0xa
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0xd17bb27d
jmp 0x432db9
cmp eax, 0x744fc4ce
je 0x4340a3
cmp eax, 0x7d360db5
jne 0x432db9
mov eax, dword [ebp - 0x18]
add eax, 0x7b
imul ecx, eax, 0x9f
imul eax, eax
imul edx, eax, 0x32d9
dec edx
add ecx, 0xffffff0d
shr ecx, 2
mov dword [ebp - 0x18], ecx
mov ecx, 0xd3a405e9
cmp eax, edx
je 0x43409b
mov ecx, 0x8fe7f8d
jmp 0x43409b
cmp eax, 0xc43f69aa
je 0x4340af
cmp eax, 0xc70dd2bd
jne 0x432db9
push 0x18
push dword [ebp - 0x38]
lea eax, [ebp - 0x90]
push eax
call fcn.00441d60
add esp, 0xc
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0xdb9c6041
jmp 0x432db9
cmp eax, 0x3910c140
je 0x4340e4
cmp eax, 0x3cf3a764
jne 0x432db9
mov dword [ebp - 0x10], 0x4162420e
jmp 0x432db9
cmp eax, 0xe32c473
je 0x4340ff
cmp eax, 0xefa0553
jne 0x432db9
push dword [ebp - 0x6c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x10], 0x8db0eb53
jmp 0x432db9
cmp eax, 0x62fdb108
jne 0x43411a
mov dword [ebp - 0x10], 0xd2e7206a
jmp 0x432db9
mov eax, dword [ebp - 0x18]
shl eax, 0x19
or eax, 0xa1
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x42455599
jmp 0x432db9
imul ecx, dword [ebp - 0x14], 0x1fa00
mov eax, 0x4774cb5
add ecx, 0xfe80a000
mov dword [ebp - 0x14], ecx
je 0x433ee8
mov eax, 0xa792b3d7
jmp 0x433ee8
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0x7301b97c
jmp 0x432db9
mov dword [ebp - 0x10], 0x228425ff
jmp 0x432db9
mov dword [ebp - 0x10], 0x62fdb108
jmp 0x432db9
mov eax, dword [ebp - 0x14]
shl eax, 0x17
or eax, 0xee
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x20baa0c4
jmp 0x432db9
mov eax, dword [ebp - 0x14]
shl eax, 0xa
add eax, 0x14c00
and eax, 0xff000000
or eax, 0x1d000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x9413119a
jmp 0x432db9
mov dword [ebp - 0x10], 0x21a94854
jmp 0x432db9
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff3
imul ecx, eax, 0x78
imul eax, eax
add ecx, 0xdb
imul edx, eax, 0x183
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0x4d2f2d5b
cmp edx, eax
je 0x43409b
mov ecx, 0x6d6a4e90
jmp 0x43409b
mov eax, dword [ebp - 0x60]
mov word [eax], 0
mov eax, dword [ebp - 0x30]
movzx ecx, word [0x4669b8]
mov word [eax + 8], cx
mov ecx, dword [0x4669b4]
mov dword [eax + 4], ecx
mov ecx, dword [0x4669b0]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x9413119a
jmp 0x432db9
lea eax, [ebp - 0x24]
push eax
push 0x20019
push ebx
push dword [ebp - 0x2c]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0x2ca1adc8
test eax, eax
je 0x43395a
mov ecx, 0x6e54c1dc
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x4c], ebx
jmp 0x432db9
mov eax, dword [ebp - 0x14]
lea eax, [eax + eax*4]
lea eax, [eax*8 + 0x7df]
shr eax, 0xd
imul esi, eax, 0xada2
mov dword [ebp - 0x14], esi
push 0x263f
push 0x41c6
push 0x56c3
push esi
call fcn.00434130
add esp, 0x10
mov eax, 0xea7b87b1
cmp esi, 0xde
jb 0x433ee8
mov eax, 0x20baa0c4
jmp 0x433ee8
mov ecx, dword [ebp - 0x14]
mov eax, 0xffffff26
add ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, 0xacde224
cmp ecx, 0x11
jl 0x433e53
jmp 0x433ee8
mov eax, dword [ebp - 0x14]
add eax, 0xffffffbd
shr eax, 4
imul ecx, eax, 0x37
shr ecx, 1
mov eax, 0x20baa0c4
and ecx, 0x7ffffc00
mov dword [ebp - 0x14], ecx
je 0x433ee8
mov eax, 0x4774cb5
jmp 0x433ee8
mov dword [ebp - 0x44], 0x800
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0x99aefd2
jmp 0x432db9
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0x7204a13c
jmp 0x432db9
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x8aa]
push eax
lea eax, [ebp - 0x54]
push eax
push 0
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, 0x15e52e6e
test eax, eax
je 0x43409b
mov ecx, 0x3910c140
jmp 0x43409b
mov eax, dword [ebp - 0x18]
shr eax, 8
imul eax, eax, 0xd9
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x4d27
shr eax, 0xf
dec edx
add eax, 0xffffff1a
mov dword [ebp - 0x18], eax
mov eax, 0xb9cab840
cmp edx, ecx
je 0x433ee8
mov eax, 0x1bccc98a
jmp 0x433ee8
mov dword [ebp - 0x10], 0x51b7edda
jmp 0x432db9
mov eax, dword [ebp - 0x18]
shr eax, 3
add eax, 0xffffff9d
imul ecx, eax, 0x4d2a
imul eax, eax
imul edx, eax, 0x7ead
dec edx
shr ecx, 0xa
mov dword [ebp - 0x18], ecx
mov ecx, 0x2af00f3c
cmp edx, eax
je 0x43409b
mov ecx, 0xb9cab840
jmp 0x43409b
imul esi, dword [ebp - 0x14], 0x8cf00000
mov dword [ebp - 0x14], esi
push esi
push 0x13ea
push 0x2605
push 0x513
call fcn.00434130
add esp, 0x10
mov eax, 0xc410ea73
test esi, esi
je 0x433ee8
mov eax, 0x69262631
jmp 0x433ee8
mov dword [ebp - 0x10], 0xe65521be
jmp 0x432db9
mov esi, dword [ebp - 0x14]
shl esi, 7
add esi, 0xffffc570
mov edi, esi
shr edi, 0xb
mov dword [ebp - 0x14], edi
push 0xb9e
push 0x1c55
push 0x5c63
push edi
call fcn.00434130
add esp, 0x10
push 0x449b
push 0x5d6c
push 0x293e
push edi
call fcn.00434130
add esp, 0x10
mov eax, 0x228425ff
cmp esi, 0x23800
jb 0x433ee3
jmp 0x433ee8
mov dword [ebp - 0x10], 0xf22e2b3d
jmp 0x432db9
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov word [eax + 0xa], 0
mov eax, dword [ebp - 0x3c]
movzx ecx, word [0x466a7a]
mov word [eax + 8], cx
mov ecx, dword [0x466a76]
mov dword [eax + 4], ecx
mov ecx, dword [0x466a72]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x4d2f2d5b
jmp 0x432db9
mov ecx, dword [ebp - 0x18]
mov eax, ecx
shr eax, 4
imul eax, eax
imul edx, eax, 0x4a65
dec edx
and ecx, 0xfffffff0
shl ecx, 0xd
mov dword [ebp - 0x18], ecx
mov ecx, 0x1690da95
cmp edx, eax
je 0x43409b
mov ecx, 0x1bd97aa5
jmp 0x43409b
push 2
push 0xc800
call fcn.0044d0d3
add esp, 8
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
mov eax, 0x5f2129fd
je 0x433c21
mov eax, 0x27a97148
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0
jmp 0x432db9
mov dword [ebp - 0x10], 0xa5421aee
jmp 0x432db9
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0x4d75da69
jmp 0x432db9
imul eax, dword [ebp - 0x14], 0x17800
shr eax, 5
add eax, 0xf6
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x2af00f3c
jmp 0x432db9
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x10], 0xe95f12ee
jmp 0x432db9
mov eax, dword [ebp - 0x18]
shr eax, 0xb
and eax, 0xfffffffc
lea eax, [eax + eax*2]
add eax, eax
add eax, 0x30
shr eax, 3
add eax, 0xffffffb2
shr eax, 0xc
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xd9327505
jmp 0x432db9
push 4
push 0x466a7c
push 5
push dword [ebp - 0x3c]
call fcn.00434130
add esp, 0x10
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x8aa]
push ecx
push eax
push dword [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0xc889b023
jmp 0x432db9
mov dword [ebp - 0x10], 0x216f6113
jmp 0x432db9
push 4
push 0x4669ba
push 5
push dword [ebp - 0x30]
call fcn.00434130
add esp, 0x10
sub esp, 0x68
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov word [eax + 0x66], 0
push 0x66
push 0x4669d0
push dword [ebp - 0x34]
call fcn.00441d60
add esp, 0xc
mov dword [ebp - 0x10], 0x2c3208a1
jmp 0x432db9
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0xbdce7d44
jmp 0x432db9
mov eax, dword [ebp - 0x18]
imul ecx, eax, 0xe3
imul ecx, ecx
imul edx, ecx, 0x67d3
dec edx
imul eax, eax, 0x7898
add eax, 0x2508
mov dword [ebp - 0x18], eax
mov eax, 0x1bccc98a
cmp edx, ecx
je 0x433ee8
mov eax, 0x6c4a7760
jmp 0x433ee8
imul edi, dword [ebp - 0x14], 0xa9
add edi, 0xffffdb08
mov eax, edi
shr eax, 0xa
mov dword [ebp - 0x14], eax
push 0x1a53
push 0x139
push 0x4ed6
push eax
call fcn.00434130
add esp, 0x10
mov eax, 0x216f6113
cmp edi, 0x15400
jae 0x433ee8
mov eax, 0x12d405c6
jmp 0x433ee8
mov eax, dword [ebp - 0x14]
lea edi, [eax + eax*4]
shl edi, 5
add edi, 0xfc
mov esi, edi
shr esi, 1
mov dword [ebp - 0x14], esi
push esi
call fcn.00432da0
add esp, 4
push 0x3a01
push 0x544d
push esi
push 0x14eb
call fcn.00434130
add esp, 0x10
mov eax, 0x1bccc98a
cmp edi, 0x15c
je 0x433ee8
mov eax, 0xf8648679
jmp 0x433ee8
mov dword [ebp - 0x10], 0x18704591
jmp 0x432db9
mov dword [ebp - 0x10], 0x98439b28
jmp 0x432db9
mov eax, dword [ebp - 0x14]
shl eax, 0xc
add eax, 0xffffff03
shr eax, 0xb
imul ecx, eax, 0xc7
mov dword [ebp - 0x14], ecx
mov eax, 0x46954575
cmp ecx, 0x84
jb 0x433ee8
mov eax, 0xb9cab840
jmp 0x433ee8
mov esi, dword [ebp - 0x14]
add esi, 0xffffff9a
mov dword [ebp - 0x14], esi
push 0xd4b
push 0xd33
push 0x3e6d
push esi
call fcn.00434130
add esp, 0x10
mov eax, 0x20baa0c4
cmp esi, 0x7d
jb 0x433ee8
mov eax, 0x686a1597
jmp 0x433ee8
mov eax, dword [ebp - 0x14]
shr eax, 0x13
lea eax, [eax*4 + 0xfc]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xa5c6a2aa
jmp 0x432db9
mov dword [ebp - 0x10], 0x744fc4ce
jmp 0x432db9
mov dword [ebp - 0x54], 0xf003f
mov dword [ebp - 0x10], 0x9f55d049
jmp 0x432db9
mov eax, dword [ebp - 0x14]
shr eax, 7
imul ecx, eax, 0x4a
add ecx, 0xffffffde
mov dword [ebp - 0x14], ecx
mov eax, 0xd96e9fa3
cmp ecx, 0x23
jl 0x433ee8
mov eax, 0xa5421aee
mov dword [ebp - 0x10], eax
jmp 0x432db9
mov eax, dword [ebp - 0x18]
add eax, 0xffffffbe
mov ecx, eax
imul ecx, eax
shl eax, 0xd
imul edx, ecx, 0x6aa3
dec edx
add eax, 0x6d80
mov dword [ebp - 0x18], eax
mov eax, 0xd9327505
cmp ecx, edx
je 0x433f1b
mov eax, 0x5f2129fd
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 1
jmp 0x432db9
imul eax, dword [ebp - 0x14], 0x506800
add eax, 0xfe4f32c8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x4774cb5
jmp 0x432db9
imul eax, dword [ebp - 0x14], 0x5b
shr eax, 5
add eax, 0x149
mov dword [ebp - 0x14], eax
push eax
call fcn.00432da0
add esp, 4
mov dword [ebp - 0x10], 0x16ae0529
jmp 0x432db9
push 0x18
push 0x466a90
push dword [ebp - 0x40]
call fcn.00441d60
add esp, 0xc
push 6
push 0x466aa8
push 0xc
push dword [ebp - 0x40]
call fcn.00434130
add esp, 0x10
push 0x1a
push dword [ebp - 0x40]
lea esi, [ebp - 0xaa]
push esi
call fcn.00441d60
add esp, 0xc
push dword [ebp - 0x48]
call fcn.0044e5a0
add esp, 4
push eax
push dword [ebp - 0x48]
push esi
push dword [ebp + 8]
call fcn.0041f934
add esp, 0x10
mov dword [ebp - 0x10], 0x7d360db5
jmp 0x432db9
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov word [eax + 0x16], 0
push 0x16
push 0x466a50
push dword [ebp - 0x38]
call fcn.00441d60
add esp, 0xc
push 6
push 0x466a66
push 0xb
push dword [ebp - 0x38]
call fcn.00434130
add esp, 0x10
mov dword [ebp - 0x10], 0xc70dd2bd
jmp 0x432db9
mov eax, dword [ebp - 0x2c]
mov word [eax + 0x66], 0
push 0x66
push 0x466940
push dword [ebp - 0x2c]
call fcn.00441d60
add esp, 0xc
push 5
push 0x4669a6
push 0x33
push dword [ebp - 0x2c]
call fcn.00434130
add esp, 0x10
mov dword [ebp - 0x10], 0x686a1597
jmp 0x432db9
push dword [ebp - 0x64]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x10], 0xff656b4b
jmp 0x432db9
mov dword [ebp - 0x10], 0x4443c68a
jmp 0x432db9
mov eax, dword [ebp - 0x18]
add eax, 0xffffffd0
imul ecx, eax, 0xa1
imul eax, eax
imul edx, eax, 0x3cbb
dec edx
shr ecx, 6
mov esi, ecx
shl esi, 5
sub esi, ecx
mov dword [ebp - 0x18], esi
mov ecx, 0x461a3d5d
cmp eax, edx
je 0x43409b
mov ecx, 0xe67b9927
mov dword [ebp - 0x10], ecx
jmp 0x432db9
mov dword [ebp - 0x10], 0xacde224
jmp 0x432db9
mov eax, dword [ebp - 0x14]
shl eax, 0x17
add eax, 0xffffff1a
shr eax, 0xd
mov dword [ebp - 0x14], eax
push eax
push 0x19a8
push 0x25ec
push 0x3ce5
call fcn.00434130
add esp, 0x10
mov dword [ebp - 0x10], 0x1aeaaa3e
jmp 0x432db9
imul eax, dword [ebp - 0x18], 0xa3b800
add eax, 0x6a294fdf
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x6d6a4e90
jmp 0x432db9
imul eax, dword [ebp - 0x18], 0x1ca0
add eax, 0xffffff43
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x15670044
jmp 0x432db9
cmp eax, 0x5f2129fd
jne 0x432db9
mov eax, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret