Function at 0x432130
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov eax, 0x1864
call fcn.0043e2e0
mov dword [ebp - 0x10], 0x81fa5c77
lea edi, [ebp - 0x1870]
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
xor esi, esi
mov eax, dword [ebp - 0x10]
cmp eax, 0x15e52e6d
jg 0x4321f9
cmp eax, 0xd9327504
jg 0x432252
cmp eax, 0xa5421aed
jg 0x43231a
cmp eax, 0x9e2a8d5a
jg 0x432458
cmp eax, 0x94131199
jle 0x4326c3
cmp eax, 0x9413119a
je 0x432a2d
cmp eax, 0x98439b28
je 0x432a43
cmp eax, 0x9b6f65db
jne 0x432155
mov eax, dword [ebp - 0x40]
movzx ecx, word [0x465adc]
mov word [eax + 8], cx
mov ecx, dword [0x465ad8]
mov dword [eax + 4], ecx
mov ecx, dword [0x465ad4]
mov dword [eax], ecx
push 4
push 0x465ade
push 5
push dword [ebp - 0x40]
call fcn.00433260
add esp, 0x10
mov eax, dword [ebp - 0x30]
push edi
push eax
push dword [ebp - 0x40]
push eax
call ebx
add esp, 0x10
mov dword [ebp - 0x10], 0x15670044
jmp 0x432155
cmp eax, 0x461a3d5c
jle 0x4322a0
cmp eax, 0x6c4a775f
jg 0x432369
cmp eax, 0x51b7edd9
jg 0x432490
cmp eax, 0x4d2f2d5a
jle 0x43270f
cmp eax, 0x4d2f2d5b
je 0x432a79
cmp eax, 0x4d75da69
je 0x432a85
cmp eax, 0x4dedc3c3
jne 0x432155
mov dword [ebp - 0x10], 0xe32c473
jmp 0x432155
cmp eax, 0xff656b4a
jg 0x4323d9
cmp eax, 0xea7b87b0
jg 0x43251b
cmp eax, 0xe65521bd
jle 0x432748
cmp eax, 0xe65521be
je 0x432fb8
cmp eax, 0xe67b9927
je 0x432ab9
cmp eax, 0xe95f12ee
jne 0x432155
mov dword [ebp - 0x10], 0x4443c68a
jmp 0x432155
cmp eax, 0x2af00f3b
jle 0x43241c
cmp eax, 0x3910c13f
jg 0x43254c
cmp eax, 0x2ca1adc7
jle 0x432771
cmp eax, 0x2ca1adc8
je 0x432ae8
cmp eax, 0x36c04364
je 0x432b1e
cmp eax, 0x3773f20f
jne 0x432155
mov eax, dword [ebp - 0x18]
shr eax, 9
add eax, 0xffffffe6
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x66bd
shl eax, 9
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x216f6113
cmp ecx, edx
je 0x43230b
mov eax, 0xefa0553
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 1
jmp 0x432155
cmp eax, 0xc70dd2bc
jg 0x43258b
cmp eax, 0xb9cab83f
jle 0x432793
cmp eax, 0xb9cab840
je 0x432b55
cmp eax, 0xbc15ecb5
je 0x432b83
cmp eax, 0xbdce7d44
jne 0x432155
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0x3773f20f
jmp 0x432155
cmp eax, 0x72585e73
jg 0x4325fc
cmp eax, 0x6e54c1db
jle 0x4327fd
cmp eax, 0x6e54c1dc
je 0x432bd2
cmp eax, 0x6f1ffd6b
je 0x432bed
cmp eax, 0x7204a13c
jne 0x432155
imul eax, dword [ebp - 0x18], 0x71
add eax, 0xffffed76
imul ecx, eax, 0xcc
imul eax, eax
imul edx, eax, 0x6a45
dec edx
add ecx, 0x141
mov dword [ebp - 0x18], ecx
mov ecx, 0xa2362863
cmp eax, edx
je 0x432e79
mov ecx, 0x1bd97aa5
jmp 0x432e79
cmp eax, 0xacde223
jg 0x432647
cmp eax, 0x71df35c
jle 0x432822
cmp eax, 0x71df35d
je 0x433005
cmp eax, 0x8fe7f8d
je 0x433050
cmp eax, 0x99aefd2
jne 0x432155
mov dword [ebp - 0x10], 0x228425ff
jmp 0x432155
cmp eax, 0x20baa0c3
jle 0x43269d
cmp eax, 0x21a94853
jle 0x432844
cmp eax, 0x21a94854
je 0x432c07
cmp eax, 0x228425ff
je 0x432c25
cmp eax, 0x27a97148
je 0x432cc9
jmp 0x432155
cmp eax, 0xa2362862
jle 0x432893
cmp eax, 0xa2362863
je 0x432c43
cmp eax, 0xa4255ffa
je 0x43308c
cmp eax, 0xa4d39bfc
jne 0x432155
mov dword [ebp - 0x10], 0xc70dd2bd
jmp 0x432155
cmp eax, 0x5f2129fc
jle 0x4328b5
cmp eax, 0x5f2129fd
je 0x432c72
cmp eax, 0x62fdb108
je 0x432caa
cmp eax, 0x686a1597
jne 0x432155
mov eax, dword [ebp - 0x5c]
mov word [eax], 0
push 0x66
push 0x4659b0
push dword [ebp - 0x34]
call fcn.004409a0
add esp, 0xc
push 5
push 0x465a16
push 0x33
push dword [ebp - 0x34]
call fcn.00433260
add esp, 0x10
lea eax, [ebp - 0x24]
push eax
push 0x20019
push esi
push dword [ebp - 0x34]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0x7301b97c
test eax, eax
je 0x432510
mov ecx, 0xd56e4003
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x50], esi
jmp 0x432155
cmp eax, 0xf402c2ce
jle 0x4328f4
cmp eax, 0xf402c2cf
je 0x432cd5
cmp eax, 0xf5632118
je 0x432cf3
cmp eax, 0xf88e80a2
je 0x4330c0
jmp 0x432155
cmp eax, 0x4162420d
jle 0x432939
cmp eax, 0x4162420e
je 0x432d03
cmp eax, 0x42455599
je 0x432d16
cmp eax, 0x4443c68a
jne 0x432155
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x10], 0x3cf3a764
jmp 0x432155
cmp eax, 0xd17bb27c
jle 0x43295b
cmp eax, 0xd17bb27d
je 0x432d42
cmp eax, 0xd2e7206a
je 0x4330f9
cmp eax, 0xd56e4003
jne 0x432155
mov eax, dword [ebp - 0x18]
shr eax, 0xf
lea ecx, [eax + 0x8f]
imul eax, eax
imul edx, eax, 0xfcb
dec edx
shr ecx, 2
and ecx, 0xfc00
add ecx, 0x35400
mov dword [ebp - 0x18], ecx
mov ecx, 0x18704591
cmp eax, edx
je 0x4325ed
mov ecx, 0xefa0553
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x1c], 0
jmp 0x432155
cmp eax, 0x7301b97b
jle 0x4329a1
cmp eax, 0x7301b97c
je 0x432d4e
cmp eax, 0x744fc4ce
je 0x432d60
cmp eax, 0x7d360db5
jne 0x432155
mov ecx, dword [ebp - 0x14]
shl ecx, 0xf
mov eax, 0xacdf80aa
add ecx, 0x510000
mov dword [ebp - 0x14], ecx
jne 0x432e13
jmp 0x432ee2
cmp eax, 0xefa0552
jle 0x4329db
cmp eax, 0x14afc217
je 0x433145
cmp eax, 0x15670044
jne 0x432fa8
mov eax, dword [ebp - 0x18]
add eax, 0x1d
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x7a91
shr eax, 0xf
dec edx
imul eax, eax, 0xb1
mov dword [ebp - 0x18], eax
mov eax, 0x9b6f65db
cmp edx, ecx
je 0x432ee2
mov eax, 0x4dedc3c3
jmp 0x432ee2
cmp eax, 0x1bccc989
jg 0x432a03
cmp eax, 0x15e52e6e
je 0x432d98
cmp eax, 0x18704591
je 0x4331de
jmp 0x432155
cmp eax, 0x81fa5c77
je 0x432dd2
cmp eax, 0x8db0eb53
jne 0x432155
imul ecx, dword [ebp - 0x18], 0xef
add ecx, 0xffffff4c
mov eax, ecx
shr eax, 0x1d
imul ecx, ecx
imul edx, ecx, 0xd77
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xa4255ffa
cmp ecx, edx
je 0x432d89
mov eax, 0xefa0553
jmp 0x432d89
cmp eax, 0x461a3d5d
je 0x432de7
cmp eax, 0x48ec64c0
jne 0x432155
mov eax, dword [ebp - 0x14]
shr eax, 7
and eax, 0x1ffff
add eax, 0x2b
shr eax, 0xe
add eax, 0x3e
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x53958b14
jmp 0x432155
cmp eax, 0xd9327505
je 0x432e1d
cmp eax, 0xdb9c6041
jne 0x432155
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0x4d75da69
jmp 0x432155
cmp eax, 0x2af00f3c
je 0x432e42
cmp eax, 0x2c3208a1
jne 0x432155
mov dword [ebp - 0x10], 0x14afc217
jmp 0x432155
cmp eax, 0xa5421aee
je 0x432e4e
cmp eax, 0xacdf80aa
jne 0x432155
mov eax, dword [ebp - 0x3c]
mov word [eax + 0x66], 0
push 0x66
push 0x465a40
push dword [ebp - 0x3c]
call fcn.004409a0
add esp, 0xc
push 4
push 0x465aa6
push 0x33
push dword [ebp - 0x3c]
call fcn.00433260
add esp, 0x10
lea eax, [ebp - 0x1070]
push eax
push dword [ebp - 0x3c]
push dword [ebp - 0x38]
lea eax, [ebp - 0x870]
push eax
call ebx
add esp, 0x10
mov dword [ebp - 0x10], 0xa5421aee
jmp 0x432155
cmp eax, 0x6c4a7760
je 0x432e81
cmp eax, 0x6d6a4e90
jne 0x432155
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0xc889b023
jmp 0x432155
cmp eax, 0xff656b4b
je 0x432e8d
cmp eax, 0x4774cb5
jne 0x432155
mov dword [ebp - 0x10], 0xe95f12ee
jmp 0x432155
cmp eax, 0x20baa0c4
je 0x432ea7
cmp eax, 0x216f6113
jne 0x432155
mov dword [ebp - 0x48], 0x800
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x1070]
push eax
push dword [ebp - 0x54]
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov ecx, 0x99aefd2
test eax, eax
je 0x432e79
mov ecx, 0x15e52e6e
jmp 0x432e79
cmp eax, 0x9e2a8d5b
je 0x432ebc
cmp eax, 0x9f55d049
jne 0x432155
mov dword [ebp - 0x10], 0x27a97148
jmp 0x432155
cmp eax, 0x51b7edda
je 0x4331ae
cmp eax, 0x53958b14
jne 0x432155
mov esi, dword [ebp - 0x14]
shl esi, 0x1f
mov dword [ebp - 0x14], esi
push esi
call fcn.00432130
add esp, 4
push esi
xor esi, esi
call fcn.00432130
add esp, 4
mov dword [ebp - 0x10], 0xacdf80aa
jmp 0x432155
cmp eax, 0xea7b87b1
je 0x432eea
cmp eax, 0xf22e2b3d
jne 0x432155
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0x26]
imul ecx, ecx
add eax, 0xcf
imul edx, ecx, 0x55eb
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x5f2129fd
cmp ecx, edx
je 0x432ee2
mov eax, 0xdb9c6041
jmp 0x432ee2
cmp eax, 0x3910c140
je 0x432f08
cmp eax, 0x3cf3a764
jne 0x432155
mov dword [ebp - 0x10], 0x4162420e
jmp 0x432155
cmp eax, 0xc70dd2bd
je 0x432f46
cmp eax, 0xc889b023
jne 0x432155
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov word [eax + 0x18], 0
push 0x18
push 0x465af0
push dword [ebp - 0x44]
call fcn.004409a0
add esp, 0xc
mov dword [ebp - 0x10], 0x3910c140
jmp 0x432155
cmp eax, 0x72585e74
je 0x432f5e
cmp eax, 0x727d9e32
jne 0x432155
mov eax, dword [ebp - 0x14]
shr eax, 6
lea eax, [eax*8 - 0xed]
shr eax, 0xc
add eax, 0xfa
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x686a1597
jmp 0x432155
cmp eax, 0xacde224
je 0x432f90
cmp eax, 0xe32c473
jne 0x432155
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0xa4d39bfc
jmp 0x432155
cmp eax, 0x1bccc98a
je 0x432f9c
cmp eax, 0x1bd97aa5
jne 0x432155
mov eax, dword [ebp - 0x64]
mov word [eax], 0
mov dword [ebp - 0x10], 0x36c04364
jmp 0x432155
mov dword [ebp - 0x48], 0x800
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0xf5632118
jmp 0x432155
push dword [ebp - 0x70]
push dword [ebp - 0x4c]
push dword [ebp - 0x2c]
push dword [ebp + 8]
call fcn.0041eef6
add esp, 0x10
push dword [ebp - 0x30]
call fcn.0044c77c
add esp, 4
push dword [ebp - 0x4c]
call fcn.0044c77c
add esp, 4
mov dword [ebp - 0x10], 0xbdce7d44
jmp 0x432155
mov dword [ebp - 0x10], 0x6d6a4e90
jmp 0x432155
mov eax, dword [ebp - 0x18]
shr eax, 0xa
add eax, 0xffffffca
mov dword [ebp - 0x18], eax
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x6661
dec edx
mov eax, 0xf88e80a2
cmp edx, ecx
je 0x432aab
mov eax, 0x7301b97c
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x50], eax
jmp 0x432155
mov ecx, dword [ebp - 0x18]
shr ecx, 1
lea eax, [ecx + ecx]
lea eax, [eax + eax*2]
imul ecx, ecx
imul edx, ecx, 0x2e73
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x81fa5c77
cmp edx, ecx
je 0x432ee2
mov eax, 0x4774cb5
jmp 0x432ee2
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + 0x7d]
imul eax, eax
imul edx, eax, 0x24ab
dec edx
shl ecx, 4
add ecx, 0xfffffdb0
and ecx, 0xffffffc0
mov dword [ebp - 0x18], ecx
mov ecx, 0x20baa0c4
cmp eax, edx
je 0x432e79
mov ecx, 0x686a1597
jmp 0x432e79
mov eax, dword [ebp - 0x18]
mov ecx, 0xc8
add eax, ecx
imul ecx, eax, 0x1f20
imul eax, eax
imul edx, eax, 0x6807
dec edx
add ecx, 0x51
mov dword [ebp - 0x18], ecx
mov ecx, 0x744fc4ce
cmp edx, eax
je 0x432e79
mov ecx, 0x9b6f65db
jmp 0x432e79
mov eax, dword [ebp - 0x18]
mov ecx, eax
shr ecx, 1
imul ecx, ecx
imul edx, ecx, 0x20f
shr eax, 0x17
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x81fa5c77
cmp edx, ecx
je 0x432ee2
mov eax, 0x2af00f3c
jmp 0x432ee2
mov eax, dword [ebp - 0x60]
mov word [eax], 0
mov eax, dword [ebp - 0x38]
movzx ecx, word [0x465a28]
mov word [eax + 8], cx
mov ecx, dword [0x465a24]
mov dword [eax + 4], ecx
mov ecx, dword [0x465a20]
mov dword [eax], ecx
push 4
push 0x465a2a
push 5
push dword [ebp - 0x38]
call fcn.00433260
add esp, 0x10
sub esp, 0x68
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0xacdf80aa
jmp 0x432155
imul eax, dword [ebp - 0x14], 0x770000
add eax, 0xf5c60c75
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xdb9c6041
jmp 0x432155
push dword [ebp - 0x30]
call fcn.0041ea15
add esp, 4
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0x4d2f2d5b
jmp 0x432155
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
add eax, 0xa
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0x7204a13c
jmp 0x432155
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
add eax, 0xa
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x10], 0xbc15ecb5
jmp 0x432155
mov ecx, dword [ebp - 0x14]
shl ecx, 0xa
add ecx, 0xffff7000
mov eax, ecx
shr eax, 0xc
mov dword [ebp - 0x14], eax
mov eax, 0x48ec64c0
cmp ecx, 0xa8000
jae 0x432ee2
mov eax, 0xbc15ecb5
jmp 0x432ee2
mov eax, dword [ebp - 0x14]
shr eax, 9
imul eax, eax, 0xa1a6
add eax, 0xff8584e1
mov dword [ebp - 0x14], eax
push eax
push 0x2136
push 0x2ca8
push 0x54e8
call fcn.00433260
add esp, 0x10
mov dword [ebp - 0x10], 0xbc15ecb5
jmp 0x432155
mov eax, dword [ebp - 0x14]
lea ecx, [eax + eax*8]
lea eax, [eax + ecx*2]
add eax, 0x12c7
shr eax, 8
imul eax, eax, 0x5700
or eax, 0x94
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x744fc4ce
jmp 0x432155
push eax
sub esp, 0x64
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0x66
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0x2ca1adc8
jmp 0x432155
shl dword [ebp - 0x18], 0x14
mov dword [ebp - 0x10], 0x2c3208a1
jmp 0x432155
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x10], 0xb9cab840
jmp 0x432155
mov ecx, dword [ebp - 0x14]
mov eax, 0xd4
add ecx, eax
mov eax, ecx
shr eax, 1
mov dword [ebp - 0x14], eax
mov eax, 0x81fa5c77
cmp ecx, 0x96
jb 0x432ee2
mov eax, 0x686a1597
jmp 0x432ee2
mov dword [ebp - 0x10], 0x9413119a
jmp 0x432155
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0x216f6113
jmp 0x432155
mov dword [ebp - 0x58], 0xf003f
push 2
push 0xc800
call fcn.0044bd43
add esp, 8
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
mov eax, 0xefa0553
je 0x432d89
mov eax, 0xacde224
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0
jmp 0x432155
mov eax, dword [ebp - 0x18]
shr eax, 5
imul eax, eax, 0x78
shr eax, 3
mov ecx, eax
imul ecx, eax
add eax, 0xb2
imul edx, ecx, 0xb03
dec edx
shr eax, 5
mov dword [ebp - 0x18], eax
mov eax, 0xd2e7206a
cmp ecx, edx
je 0x432ee2
mov eax, 0x6c4a7760
jmp 0x432ee2
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0x9e2a8d5b
jmp 0x432155
mov eax, dword [ebp - 0x14]
add eax, 0x25
shr eax, 6
and eax, 0xfffffff0
imul ecx, eax, 0xc3
add ecx, 0xa5
mov dword [ebp - 0x14], ecx
mov eax, 0x81fa5c77
cmp ecx, 0xae
jge 0x432ee2
mov eax, 0xf402c2cf
jmp 0x432ee2
movzx ecx, byte [ebp - 0x11]
add ecx, 0xffffffb7
mov dword [ebp - 0x14], ecx
mov eax, 0x71df35d
cmp ecx, 0x89
jae 0x432ee2
mov eax, 0x72585e74
jmp 0x432ee2
mov dword [ebp - 0x10], 0x9f55d049
jmp 0x432155
lea eax, [ebp - 0x20]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x870]
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0xd17bb27d
test eax, eax
je 0x432e79
mov ecx, 0xea7b87b1
mov dword [ebp - 0x10], ecx
jmp 0x432155
mov dword [ebp - 0x10], 0x6f1ffd6b
jmp 0x432155
mov eax, dword [ebp - 0x14]
shl eax, 0xa
add eax, 0x1a352
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x6e54c1dc
jmp 0x432155
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0xe67b9927
jmp 0x432155
mov eax, dword [ebp - 0x18]
add eax, 0x6e
mov ecx, eax
imul ecx, eax
shl eax, 5
imul edx, ecx, 0x3973
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x81fa5c77
cmp edx, ecx
je 0x432ee2
mov eax, 0x20baa0c4
mov dword [ebp - 0x10], eax
jmp 0x432155
push dword [ebp - 0x20]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
push dword [ebp - 0x24]
call esi
xor esi, esi
mov dword [ebp - 0x10], 0x8db0eb53
jmp 0x432155
push 6
push 0x465b08
push 0xc
push dword [ebp - 0x44]
call fcn.00433260
add esp, 0x10
push 0x1a
push dword [ebp - 0x44]
push dword [ebp - 0x2c]
call fcn.004409a0
add esp, 0xc
push dword [ebp - 0x4c]
call fcn.0044d210
add esp, 4
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0x98439b28
jmp 0x432155
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], 0xf22e2b3d
jmp 0x432155
mov eax, dword [ebp - 0x14]
shr eax, 2
add eax, 0xdf
mov dword [ebp - 0x14], eax
push eax
push 0x1e4b
push 0x3a68
push 0x5841
call fcn.00433260
add esp, 0x10
mov dword [ebp - 0x10], 0x81fa5c77
jmp 0x432155
mov dword [ebp - 0x10], 0x1bccc98a
jmp 0x432155
mov dword [ebp - 0x10], 0xf402c2cf
jmp 0x432155
cmp eax, 0xefa0553
je 0x43324c
jmp 0x432155
imul eax, dword [ebp - 0x14], 0x5c
add eax, 0x89
shr eax, 0xd
imul esi, eax, 0xde
mov eax, esi
shr eax, 4
mov dword [ebp - 0x14], eax
push eax
push 0x2729
push 0x3c38
push 0x478c
call fcn.00433260
add esp, 0x10
mov eax, 0x42455599
cmp esi, 0x9f0
jae 0x4331d6
mov eax, 0x727d9e32
jmp 0x4331d6
mov esi, dword [ebp - 0x14]
shr esi, 8
add esi, 0xffffff5e
mov dword [ebp - 0x14], esi
push 0x458b
push 0x2c94
push esi
push 0x2c16
call fcn.00433260
add esp, 0x10
push esi
call fcn.00432130
add esp, 4
mov eax, 0xf402c2cf
cmp esi, 0x86
jae 0x4331d6
mov eax, 0x81fa5c77
jmp 0x4331d6
mov esi, dword [ebp - 0x14]
shr esi, 2
mov dword [ebp - 0x14], esi
push esi
push 0x6cd
push 0x2caa
push 0x3870
call fcn.00433260
add esp, 0x10
mov eax, 0x7d360db5
cmp esi, 0x86
je 0x4331d6
mov eax, 0xea7b87b1
jmp 0x4331d6
imul esi, dword [ebp - 0x14], 0x9b
add esi, 0x92
mov dword [ebp - 0x14], esi
push esi
call fcn.00432130
add esp, 4
mov eax, 0x8fe7f8d
cmp esi, 0xaf
jae 0x4331d6
mov eax, 0x4162420e
jmp 0x4331d6
mov esi, dword [ebp - 0x14]
mov eax, 0xfa
add esi, eax
mov eax, esi
shr eax, 0xc
add eax, 0xffffffd3
mov dword [ebp - 0x14], eax
push eax
call fcn.00432130
add esp, 4
mov eax, 0xff656b4b
cmp esi, 0xce000
jae 0x4331d6
mov eax, 0xdb9c6041
jmp 0x4331d6
mov eax, dword [ebp - 0x14]
shr eax, 5
and eax, 0xfffff
imul esi, eax, 0x61c5
mov eax, esi
shr eax, 8
mov dword [ebp - 0x14], eax
push eax
push 0x5a8b
push 0x49f5
push 0x101a
call fcn.00433260
add esp, 0x10
mov eax, 0x81fa5c77
cmp esi, 0x7200
jb 0x4331d6
mov eax, 0xd9327505
jmp 0x4331d6
push eax
sub esp, 0x14
mov esi, esp
mov word [esi + 0x16], 0
push 0x16
push 0x465ab0
push esi
call fcn.004409a0
add esp, 0xc
push 7
push 0x465ac6
push 0xb
push esi
call fcn.00433260
add esp, 0x10
push 0x18
push esi
push dword [ebp - 0x28]
call fcn.004409a0
add esp, 0xc
lea eax, [ebp - 0x48]
push eax
push edi
lea eax, [ebp - 0x58]
push eax
push 0
push dword [ebp - 0x28]
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, 0x21a94854
test eax, eax
je 0x4331a6
mov ecx, 0x4dedc3c3
mov dword [ebp - 0x10], ecx
jmp 0x432153
mov esi, dword [ebp - 0x14]
mov eax, 0x93
add esi, eax
mov dword [ebp - 0x14], esi
push esi
call fcn.00432130
add esp, 4
mov eax, 0x686a1597
cmp esi, 0xe0
jb 0x4331d6
mov eax, 0x62fdb108
mov dword [ebp - 0x10], eax
jmp 0x432153
mov ebx, edi
mov eax, dword [ebp - 0x14]
mov ecx, eax
shl ecx, 4
lea edi, [eax + ecx]
add edi, 0xffffff5b
shr edi, 6
and edi, 0xffffff80
add edi, 0xffffe500
mov esi, 0x51b7edda
and edi, 0xfffff800
mov dword [ebp - 0x14], edi
je 0x433212
mov esi, 0xe65521be
push 0x1f12
push 0x43a8
push 0x2b17
push edi
call fcn.00433260
add esp, 0x10
push 0x43fb
push 0x6206
push edi
push 0x91f
call fcn.00433260
add esp, 0x10
mov dword [ebp - 0x10], esi
mov edi, ebx
jmp 0x43214d
mov eax, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret