Function at 0x430af0
Capabilities:
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x48a6c3
mov eax, dword fs:[0]
push eax
sub esp, 0xd4
mov eax, dword [0x4acab8]
xor eax, esp
mov dword [esp + 0xd0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4acab8]
xor eax, esp
push eax
lea eax, [esp + 0xe8]
mov dword fs:[0], eax
mov esi, dword [esp + 0xf8]
call fcn.004144f0
cmp dword [eax + 0x640], 6
jae 0x430bce
push 0x74
xor edi, edi
push str.SYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyStandardProfileAuthorizedApplicationsList
lea ecx, [esp + 0x40]
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], edi
mov byte [esp + 0x44], 0
call fcn.0040b580
push esi
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x5c]
push reloc.OLEAUT32.dll_SysReAllocString
push ecx
mov dword [esp + 0x100], edi
call fcn.004296f0
add esp, 0x10
cmp dword [eax + 0x14], edi
mov ebp, 0x10
setne bl
cmp dword [esp + 0x6c], ebp
jb 0x430ba4
mov edx, dword [esp + 0x58]
push edx
call fcn.0046fa18
add esp, 4
mov dword [esp + 0x6c], 0xf
mov dword [esp + 0x68], edi
mov byte [esp + 0x58], 0
cmp dword [esp + 0x50], ebp
jb 0x430e8b
mov eax, dword [esp + 0x3c]
push eax
call fcn.0046fa18
jmp 0x430e88
xor ebp, ebp
push 0x7d0
xor bl, bl
mov edi, 0x3e8
push ebp
mov byte [esp + 0x1f], bl
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], edi
call fcn.0046fe26
add esp, 8
mov dword [esp + 0x18], eax
push 0x56
push str.SYSTEMCurrentControlSet_servicesSharedAccessParametersFirewallPolicyFirewallRules
lea ecx, [esp + 0x40]
mov dword [esp + 0xf8], 1
mov dword [esp + 0x58], 0xf
mov dword [esp + 0x54], ebp
mov byte [esp + 0x44], 0
call fcn.0040b580
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x3c]
push edx
mov byte [esp + 0xf8], 2
call fcn.00427f10
mov ebp, 0x10
add esp, 8
mov byte [esp + 0xf0], 1
cmp dword [esp + 0x50], ebp
jb 0x430c5b
mov eax, dword [esp + 0x3c]
push eax
call fcn.0046fa18
add esp, 4
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x34]
push ecx
push 0x20019
push 0
push edx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x430e7a
push 0x7d0
push eax
mov dword [esp + 0x7c], edi
call fcn.0046fe26
mov edi, eax
mov dword [esp + 0x78], edi
lea eax, [esp + 0x5c]
push esi
push eax
mov byte [esp + 0x100], 3
call fcn.0042ba30
push eax
lea ecx, [esp + 0xdc]
push str.__i_
push ecx
mov byte [esp + 0x10c], 4
call fcn.0040bcf0
add esp, 0x1c
mov byte [esp + 0xf0], 6
cmp dword [esp + 0x6c], ebp
jb 0x430ce0
mov edx, dword [esp + 0x58]
push edx
call fcn.0046fa18
add esp, 4
xor esi, esi
mov dword [esp + 0x6c], 0xf
mov dword [esp + 0x68], esi
mov byte [esp + 0x58], 0
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x28]
push ecx
mov ecx, dword [esp + 0x1c]
push edi
lea edx, [esp + 0x38]
push edx
mov edx, dword [esp + 0x40]
push 0
mov dword [esp + 0x3c], eax
lea eax, [esp + 0x3c]
push eax
push ecx
push esi
push edx
mov dword [esp + 0x48], 0x3e8
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
test eax, eax
jne 0x430e22
cmp dword [esp + 0x30], 1
jne 0x430e29
lea eax, [esp + 0x78]
push edi
push eax
call fcn.00428bf0
add esp, 8
mov byte [esp + 0xf0], 7
cmp dword [eax + 0x18], ebp
jb 0x430d5d
mov ecx, dword [eax + 4]
mov dword [esp + 0x20], ecx
jmp 0x430d64
lea edx, [eax + 4]
mov dword [esp + 0x20], edx
mov eax, dword [eax + 0x14]
lea ecx, [esp + 0xc8]
push ecx
lea ecx, [esp + 0x98]
mov dword [esp + 0x28], eax
call fcn.0041db20
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
push 0x4ac8fc
lea edx, [esp + 0x60]
push edx
mov ecx, eax
mov byte [esp + 0x134], 8
call fcn.004631f0
lea ecx, [esp + 0x94]
mov bl, al
mov byte [esp + 0xf0], 7
call fcn.004639f0
mov byte [esp + 0xf0], 6
cmp dword [esp + 0x90], ebp
jb 0x430e17
mov eax, dword [esp + 0x7c]
push eax
call fcn.0046fa18
add esp, 4
test bl, bl
je 0x430e29
mov byte [esp + 0x17], 1
jmp 0x430e29
cmp eax, 0x103
je 0x430e36
mov bl, byte [esp + 0x17]
inc esi
test bl, bl
je 0x430cf3
cmp dword [esp + 0xe0], ebp
jb 0x430e4f
mov ecx, dword [esp + 0xcc]
push ecx
call fcn.0046fa18
add esp, 4
mov dword [esp + 0xe0], 0xf
mov dword [esp + 0xdc], 0
mov byte [esp + 0xcc], 0
test edi, edi
je 0x430e7a
push edi
call fcn.00470041
add esp, 4
mov eax, dword [esp + 0x18]
test eax, eax
je 0x430e8b
push eax
call fcn.00470041
add esp, 4
mov al, bl
mov ecx, dword [esp + 0xe8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xd0]
xor ecx, esp
call fcn.00470538
add esp, 0xe0
ret