Function at 0x43be883c
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x158
mov eax, 0x43c1a8f1
call fcn.43bfae59
mov dword [ebp - 0x164], ecx
mov eax, dword [ebp + 0xc]
mov edi, 0xfe
mov esi, dword [ebp + 8]
push edi
mov dword [ebp - 0x15c], eax
lea eax, [ebp - 0x113]
push 0
push eax
mov dword [ebp - 0x160], esi
mov byte [ebp - 0x114], 0
call fcn.43bfa2b0
add esp, 0xc
mov dword [ebp - 0x138], edi
mov ebx, 0x400
lea ecx, [ebp - 0x144]
push ebx
call fcn.43be8369
xor edx, edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x158], edx
mov dword [ebp - 0x154], edx
mov dword [ebp - 0x150], edx
mov byte [ebp - 4], 1
mov eax, edx
mov edi, dword [ebp - 0x144]
mov dword [ebp - 0x148], edx
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x130], ebx
push ecx
push edi
lea ecx, [ebp - 0x14c]
push ecx
push edx
lea ecx, [ebp - 0x138]
push ecx
lea ecx, [ebp - 0x114]
push ecx
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mov esi, eax
cmp esi, 0xea
jne 0x43be8965
mov ebx, dword [ebp - 0x130]
cmp ebx, dword [ebp - 0x13c]
jbe 0x43be8919
push ebx
lea ecx, [ebp - 0x144]
call fcn.43be83b8
mov edi, dword [ebp - 0x144]
jmp 0x43be8922
xor eax, eax
mov dword [ebp - 0x140], ebx
inc eax
test edi, edi
je 0x43be8b3e
test eax, eax
je 0x43be8b3e
lea eax, [ebp - 0x130]
push eax
push edi
lea eax, [ebp - 0x14c]
push eax
push 0
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x114]
push eax
push dword [ebp - 0x148]
push dword [ebp - 0x160]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
mov esi, eax
test esi, esi
jne 0x43be8b33
mov eax, dword [ebp - 0x138]
cmp eax, 0xff
jae 0x43be8b2e
cmp byte [ebp + 0x10], 0
mov byte [ebp + eax - 0x114], 0
je 0x43be89b0
call fcn.43bd2660
lea ecx, [ebp - 0x114]
push ecx
mov ecx, dword [ebp - 0x164]
mov edx, dword [eax]
push dword [ecx + 4]
mov ecx, eax
call dword [edx + 0x78]
test al, al
je 0x43be8b0a
mov eax, dword [ebp - 0x14c]
dec eax
je 0x43be8a1b
dec eax
dec eax
je 0x43be89c5
dec eax
je 0x43be89ce
sub eax, 7
je 0x43be89ca
push 2
pop edi
jmp 0x43be8a1e
push 4
jmp 0x43be89d0
push 3
pop esi
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x12c]
call fcn.43bc6497
mov ecx, dword [ebp - 0x15c]
lea eax, [ebp - 0x12c]
push 0
push esi
mov byte [ebp - 4], 3
push dword [ebp - 0x130]
push edi
push eax
call fcn.43be8760
push 0
push 1
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 1
call fcn.43bc2382
jmp 0x43be8b0a
xor edi, edi
inc edi
mov edx, dword [ebp - 0x130]
lea eax, [edx + 1]
mov dword [ebp - 0x134], eax
cmp eax, dword [ebp - 0x150]
jbe 0x43be8a49
push eax
lea ecx, [ebp - 0x158]
call fcn.43be83b8
mov edx, dword [ebp - 0x130]
jmp 0x43be8a52
mov dword [ebp - 0x154], eax
xor eax, eax
inc eax
test eax, eax
je 0x43be8b04
mov ecx, dword [ebp - 0x144]
lea eax, [ebp - 0x134]
push eax
push dword [ebp - 0x158]
call fcn.43bebb6e
pop ecx
pop ecx
test eax, eax
jne 0x43be8b04
mov esi, dword [ebp - 0x134]
push 4
pop ecx
cmp esi, ecx
jle 0x43be8b04
and dword [ebp - 0x134], eax
sub esi, ecx
mov eax, dword [ebp - 0x158]
push ecx
add eax, esi
push eax
push ecx
lea eax, [ebp - 0x134]
push eax
call fcn.43bfa224
add esp, 0x10
cmp dword [ebp - 0x134], esi
jne 0x43be8b04
cmp dword [ebp - 0x14c], 1
jne 0x43be8abf
shr esi, 1
dec esi
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x12c]
call fcn.43bc6497
mov ecx, dword [ebp - 0x15c]
lea eax, [ebp - 0x12c]
push 0
push edi
push esi
mov byte [ebp - 4], 2
push dword [ebp - 0x158]
push eax
call fcn.43be8760
push 0
push 1
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 1
call fcn.43bc2382
mov edi, dword [ebp - 0x144]
mov eax, dword [ebp - 0x148]
mov esi, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x148], eax
xor edx, edx
mov dword [ebp - 0x138], 0xff
jmp 0x43be88c1
call fcn.43bfdffb
xor eax, eax
cmp esi, 0x103
cmove esi, eax
lea ecx, [ebp - 0x158]
call fcn.43be839c
lea ecx, [ebp - 0x144]
call fcn.43be839c
mov eax, esi
call fcn.43bfae08
ret 0xc