Function at 0x42e000
Capabilities:
Query or enumerate registry value

Disassembly:
xor eax, eax
call dword [sym.imp.USER32.DLL_CreateMenu]
mov dword [0x4cc211], eax
mov dword [0x4cca42], 0
mov eax, dword [0x4cca42]
xor eax, eax
rol eax, 1
push eax
shr eax, 1
test dword [0x4cc601], eax
jne 0x42e02e
shl eax, 3
mov edi, 0x9ca
xor edi, eax
sub eax, 0x476
je 0x42e03c
pop dword [0x4ccbe9]
sub dword [0x4cc8c1], eax
mov esi, 0xe0d
add esi, dword [0x4cc195]
or esi, 0x93f
jne 0x42e062
mov eax, 0x1f09
sub esi, eax
rol esi, 1
test esi, 0x559
je 0x42e071
shr esi, 1
ror esi, 1
inc esi
rol esi, 5
mov eax, esi
mov dword [0x4cc766], eax
mov edi, 0x24
sub edi, 0xd5703d24
jne 0x42f636
mov dword [0x4cc857], eax
lea ebx, [ebx + esi + 0xf8d]
push ebx
inc ebx
test ebx, 0x134d
jne 0x42e0a8
sub ebx, 0x128
pop dword [0x4cc0a9]
add dword [0x4ccb8a], ebx
mov ebp, 0
sub ebp, dword [0x4ccb74]
mov edx, ebp
inc edx
or edx, 0x15c
je 0x42e0ca
ror edx, 1
test edx, 0x26bd
jne 0x42e0d4
sub dword [0x4cc1b8], edx
xor ebp, ebp
mov edi, 0x457
sub ebp, edi
or ebp, 0x1d9f
jne 0x42e0f7
add ebp, 0x167
sub ebp, 0x216
mov dword [0x4cc0a8], ebp
lea esi, [ebp + esi*2 + 0x1a99]
mov edi, 0x24f5
add esi, edi
or esi, 0xbfe
je 0x42e113
mov edi, 0xcc8
imul esi, edi, 0x55
add esi, 0x89b
jne 0x42e12f
add esi, 0x5c4
add esi, dword [0x4ccb78]
mov eax, 0x94c
xor eax, esi
test esi, 0xf9f
je 0x42e143
shr esi, 1
ror esi, 7
mov dword [0x4ccc94], esi
leave
ret
mov edx, 0x8f
lea esi, [esi + 0x4d]
or esi, 0x17
mov edx, 0
mov edi, 0xcc
imul edx, edi, 0x55
mov edi, edx
mov dword [str._TtdP_4], edi
mov ebx, 0xfc
shl ebx, 1
push ebx
add ebx, dword [0x4cc8df]
test ebx, 0x13bd
je 0x42ea98
dec ebx
add ebx, dword [0x4cc894]
inc ebx
mov edx, 0x111e
imul ebx, edx, 0x36
mov edx, ebx
pop dword [0x4cc340]
add dword [str._t_DLD__b], edx
ret
mov esi, 0x47
xor ebx, ebx
mov edi, ebx
mov dword [0x4ccd84], edi
mov ebx, 0
and ebx, 0xff
test dword [0x4cceef], ebx
jne 0x42ead3
ror ebx, 1
sub dword [0x4cca64], ebx
push eax
call 0x42eaaf
sub esi, ebx
mov edx, 0xec
inc ebx
push 0xc
push 0x35
push 0x69
push 1
push 0x44
push 0x65
push 0x40
push 0x26
push 6
push 0x6d
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
lea edx, [edx + ebp + 0xbe9]
test dword [0x4cc906], edx
je 0x42eb24
and edx, 0xfffff
add edx, 0x2a0
push edx
ror edx, 4
mov eax, edx
pop dword [0x4cc325]
sub dword [0x4cc2d4], eax
sub eax, 0xadacb5f7
cmp eax, 0x988219a8
loopne 0x42ebaa
jmp 0x42ebba
sub eax, 0xeb
je 0x42ebbe
sub eax, 0xa82
mov edi, 0xb6a
add byte [eax], al
or eax, edi
dec eax
test dword [ebp - 4], eax
jne 0x42ebc6
shr eax, 1
mov dword [ebp - 0x14], eax
push 0x32334c65
xor ebx, ebx
dec ebx
test ebx, 0x1681
jne 0x42ebe6
mov edi, 0xe86
or ebx, edi
add ebx, 0x8f8
sub dword [0x4cc905], ebx
lea eax, [edi + 0x87]
mov edi, 0x13b2
add eax, edi
test dword [0x4cc0d7], eax
jne 0x42ec0b
shr eax, 5
mov esi, 0xe2b
or eax, esi
dec eax
push eax
pop dword [0x4cc02a]
mov dword [ebp - 0x14], eax
push 0x4e72654b
push 0x258
pop esi
add esi, 0x1d2
je 0x42ec39
shr esi, 1
and esi, 0xfffffff
mov ebx, 0x1a97
imul esi, ebx, 0x36
ror esi, 7
mov ebx, esi
mov eax, 0x22d4
add ebx, eax
or ebx, dword [0x4cc5ec]
jne 0x42ec5d
mov eax, 0xd46
or ebx, eax
sub ebx, dword [0x4cca3a]
rol ebx, 4
mov dword [ebp - 0xc], ebx
push esp
push 0x977
pop ebx
add ebx, 0xda8
cmp ebx, 0x6c
je 0x42ec8a
mov eax, 0x1193
add ebx, eax
mov eax, 0x64c
imul ebx, eax, 0x2f
sub ebx, 0xad7
mov edi, 0x2191
or ebx, edi
mov edi, ebx
sub dword [0x4cc37b], edi
call dword [sym.imp.kernel32.dll_LoadLibraryA]
mov esi, 0x7b4
mov ebx, 0x1d3b
xor ebx, esi
cmp esi, 0xb0e
je 0x42ecb3
add esi, dword [0x4cc335]
mov ebx, esi
shl ebx, 4
push ebx
pop dword [0x4cc29e]
mov dword [0x4cc16c], ebx
add esp, 0xc
push 0x7845
lea esi, [eax + eax + 0x1ed7]
sub esi, 0x798
test dword [0x4cc55d], esi
je 0x42ecef
mov ebx, 0x1e95
add esi, ebx
shl esi, 4
mov edx, esi
mov ebx, 0xca6
or edx, ebx
push edx
pop dword [0x4cca11]
mov dword [ebp - 0x10], edx
push 0x636f6c6c
push 0x7dd
pop esi
mov ebx, 0x1103
sub esi, ebx
mov ebx, esi
mov edi, 0x1afc
imul ebx, edi, 2
test dword [0x4cccba], ebx
jne 0x42ed34
ror ebx, 1
rol ebx, 1
mov esi, 0x17a9
xor esi, ebx
mov dword [ebp - 0x10], ebx
push 0x416c6175
push 0xf5e
pop edi
add edi, 0xd50
push edi
pop dword [0x4cce6e]
mov dword [ebp - 8], edi
push 0x74726956
mov esi, 0
inc esi
or esi, 0x17a8
je 0x42ed6d
sub esi, 0x4fa
shl esi, 1
add dword [0x4cc3cc], esi
push esp
lea esi, [esi + ebp*4 + 0x18d3]
mov edi, 0x1870
or esi, edi
or dword [ebp - 0x10], esi
je 0x42ed8e
mov ebx, 0x1468
xor ebx, esi
mov edi, esi
mov ebx, 0x297
or edi, ebx
test edi, 0x6fd
je 0x42ed9f
mov dword [ebp - 0x18], edi
push 0x156
pop ebx
mov edi, 0x17f
xor edi, ebx
cmp ebx, 0x66e
jne 0x42edc6
mov edi, 0x182b
add ebx, edi
mov esi, 0x12b8
imul ebx, esi, 0xe
mov esi, 0x1b5a
xor esi, ebx
mov esi, ebx
shl esi, 1
test dword [ebp - 0x20], esi
je 0x42edde
dec esi
mov edi, 0x17e2
xor edi, esi
sub dword [0x4ccb68], esi
push eax
mov esi, edi
mov edi, 0x1245
add esi, edi
or dword [ebp - 8], esi
je 0x42edfc
shr esi, 1
mov edi, 0x1dc
xor edi, esi
and esi, 0xfffffff
push esi
or esi, dword [0x4ccd79]
je 0x42ee0c
dec esi
pop dword [0x4ccade]
add dword [0x4ccdfe], esi
call dword [sym.imp.kernel32.dll_GetProcAddress]
xor esi, esi
mov edi, 0x1c78
add esi, edi
test dword [ebp - 0xc], esi
je 0x42ee32
add esi, 0x8ce
add dword [str.__B__D______], esi
add esp, 0x10
xor ebx, ebx
ror ebx, 1
or dword [ebp - 4], ebx
jne 0x42ee44
mov dword [0x4cccc2], ebx
lea esi, [esi + 0xb6]
shr esi, 3
push esi
dec esi
or dword [ebp - 0xc], esi
jne 0x42ee61
mov ebx, 0x3df
sub esi, ebx
shl esi, 2
cmp esi, 0xcec
je 0x42ee76
and esi, 0xffff
rol esi, 8
dec esi
pop dword [0x4ccdd6]
sub dword [0x4cc34a], esi
mov dword [0x4cc22c], 0x40
mov edi, dword [0x4cc22c]
push edi
mov edi, ebx
ror edi, 3
add edi, 0xbdf
je 0x42eea3
shr edi, 2
mov dword [ebp - 0x10], edi
mov esi, 0
mov ebx, 0x521
xor ebx, esi
or esi, dword [0x4cc7bc]
jne 0x42eec0
add esi, dword [0x4cc597]
add dword [0x4ccd98], esi
push 0x3000
pop esi
push esi
mov ebx, esi
rol ebx, 1
or ebx, dword [0x4cc92b]
je 0x42eee0
mov edi, 0xe6f
add ebx, edi
shr ebx, 4
push ebx
mov edx, ebx
pop dword [0x4ccdf7]
mov dword [ebp - 4], edx
lea ebx, [edi + 0x9f]
mov esi, 0x330
sub ebx, esi
push ebx
pop dword [0x4cc1e1]
mov dword [0x4cc367], ebx
mov dword [ebp - 0x1c], 0x509a6
mov esi, dword [ebp - 0x1c]
push esi
mov ebx, 0xefd
ror ebx, 1
test dword [ebp - 0x18], ebx
jne 0x42ef2d
mov edi, 0x205d
add ebx, edi
add ebx, 0x23
mov dword [0x4cc126], ebx
push 0xd3c
pop edi
ror edi, 6
push edi
rol edi, 7
or edi, dword [0x4cc2a5]
jne 0x42ef4e
sub edi, dword [0x4cce2a]
pop dword [0x4cc364]
mov dword [0x4cc38f], edi
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x10]
push edx
xor ebx, ebx
test dword [0x4cc3c8], ebx
je 0x42ef7c
mov esi, 0x155
or ebx, esi
and ebx, 0xf
add dword [0x4ccb6c], ebx
mov edi, 0
mov esi, 0x134f
imul edi, esi, 0x57
push edi
pop dword [0x4ccf05]
add dword [0x4cc8d5], edi
mov ebx, 0xffffffff
mov ecx, ebx
push ecx
mov esi, ebx
add esi, dword [0x4ccde5]
mov edi, esi
add edi, 0x7ad
cmp edi, 0x14e
je 0x42efc3
mov esi, 0x19b0
xor esi, edi
and edi, 0xff
push edi
pop dword [0x4cc946]
sub dword [0x4cce80], edi
call eax
push 0xe31
pop ebx
dec ebx
mov edi, ebx
mov dword [0x4cc104], edi
mov esi, eax
sub esi, 0xfa6
jne 0x42eff8
mov edi, 0x1199
or esi, edi
sub esi, dword [0x4ccd8b]
or dword [ebp - 0x1c], esi
je 0x42f006
rol esi, 4
mov dword [ebp - 4], esi
mov esp, ebp
pop ebp
cmp ebx, dword [0x4f5337]
ret 4
push ebp
mov ebp, esp
sub esp, 0x14
push edi
push esi
lea esi, [esi + 0xb6]
inc esi
sub esi, 0xf91
je 0x42f65c
sub esi, 0xe7c
mov edi, 0x1816
xor edi, esi
rol esi, 1
mov dword [0x4cc281], esi
push 0
push 0
push 0x80000003
call dword [sym.imp.ADVAPI32.DLL_RegOpenKeyA]
or edi, 0x18
inc eax
push dword [0x4cca09]
call fcn.0042e2ae
test al, al
je 0x42f68d
test eax, edi
jne 0x42f689
dec esi
mov dword [ebp - 4], esi
inc ebx
lea ebx, [esi + 0x9e]
mov esi, 0xcc1
imul ebx, esi, 0x48
or dword [ebp - 0x14], ebx
je 0x42f6a9
rol ebx, 8
add ebx, dword [0x4cca6d]
add dword [0x4cc961], ebx
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.DLL_CreateDCA]
and eax, 0xffffff
cmp eax, 0x108
jne 0x42f6d0
mov ebx, 0x8af
or eax, ebx
sub eax, dword [0x4cc6fc]
mov esi, eax
add dword [0x4cc06a], esi
push dword [0x4cc275]
call fcn.0042e894
mov esi, edi
shr esi, 1
push esi
pop dword [0x4cc112]
mov dword [ebp - 4], esi
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.DLL_CreateDCA]
mov edi, 0xbcf
sub edi, 0x666
push edi
pop dword [0x4cce52]
mov dword [ebp - 0x14], edi
push 0x8eab
call fcn.0042e1e4
test al, al
je 0x42f72f
xor esi, dword [0x4e7504]
inc ebx
mov ebx, edi
shr ebx, 4
or ebx, dword [0x4cc127]
jne 0x42f73f
inc ebx
ror ebx, 1
add dword [0x4ccc67], ebx
mov edi, eax
inc edi
mov eax, edi
mov ebx, 0x26fe
add eax, ebx
or eax, 0x11c5
je 0x42f75f
inc eax
add eax, dword [0x4cc917]
add dword [0x4cc537], eax
shr eax, 1
sub eax, 0x6b2
je 0x42f780
add eax, 0xae3
add eax, dword [0x4cc99a]
add eax, 0xb03
ror eax, 6
mov esi, eax
mov eax, 0x1d47
or esi, eax
add esi, 0xa4c
jne 0x42f7a7
add esi, dword [0x4cce7a]
mov ebx, 0x16ff
add esi, ebx
sub esi, 0x918
sub dword [0x4cca12], esi
push 0
push 0
push 0x80000000
call dword [sym.imp.ADVAPI32.DLL_RegOpenKeyA]
mov edi, ebx
push edi
pop dword [0x4cc5b5]
mov dword [0x4cc632], edi
mov dword [ebp - 0x14], 0
mov ebx, dword [ebp - 0x14]
push ebx
mov ecx, 7
mov edi, ecx
push edi
call dword [sym.imp.GDI32.DLL_GetTextMetricsA]
or eax, eax
jne 0x42eae1
mov eax, edi
ror eax, 1
sub eax, 0xca1
je 0x42f7f9
shl eax, 1
mov esi, 0x151c
add eax, esi
push eax
pop dword [0x4cc17b]
sub dword [0x4cc2d0], eax
push esi
call fcn.0042e2ae
mov dword [ebp - 8], eax
mov ebx, 0
push ebx
mov dword [ebp - 4], 5
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.GDI32.DLL_GetTextMetricsA]
push 0x6af
pop edi
sub edi, dword [0x4cc6c2]
sub edi, 0x250
jne 0x42f84e
add edi, 0x2f5
mov eax, 0x1098
xor eax, edi
mov dword [ebp - 0xc], edi
mov edi, 0xf7ace77
mov ecx, edi
push ecx
push 0x136643
pop eax
mov dword [0x4cc1ac], 0x396143
add eax, dword [0x4cc1ac]
push eax
mov ecx, 0x35e99d
mov ebx, ecx
mov dword [ebp - 4], 0x16deb3
add ebx, dword [ebp - 4]
push ebx
xor eax, eax
push eax
mov ebx, 0x2f2a71
mov esi, ebx
mov dword [ebp - 4], 0x1d9cb2
add esi, dword [ebp - 4]
push esi
mov edi, 0x45d182
mov dword [ebp - 0x10], 0x6f7fa
add edi, dword [ebp - 0x10]
push edi
mov dword [ebp - 8], 0x67
mov esi, dword [ebp - 8]
push esi
mov dword [0x4cc255], 0
mov edx, dword [0x4cc255]
push edx
call dword [sym.imp.ADVAPI32.DLL_RegEnumValueA]
or eax, eax
je 0x42eaaf
mov eax, 9
mov edi, eax
push edi
call dword [sym.imp.kernel32.dll_GetFileType]
lea eax, [0x4cce6d]
push eax
call fcn.0042e894
push 0
push 0
call fcn.0042e77c
mov ecx, 0
mov esi, ecx
push esi
push 5
pop ebx
push ebx
call dword [sym.imp.GDI32.DLL_GetTextMetricsA]
mov esi, 0x145d
sub eax, esi
sub eax, 0x178
jne 0x42f91d
add eax, 0x303
mov ebx, 0x1a09
sub eax, ebx
push eax
mov edi, 0x17fa
add eax, edi
mov edx, eax
pop dword [0x4cc6c6]
mov dword [0x4ccb68], edx
mov eax, 0x94
push eax
push 7
pop edi
push edi
call dword [sym.imp.GDI32.DLL_GetNearestColor]
inc eax
jne 0x42ea5c
rol eax, 1
cmp eax, 0xa88
je 0x42f967
shl eax, 1
sub eax, dword [0x4ccc50]
ror eax, 1
mov ebx, 0x517
or eax, ebx
push eax
mov edi, 0x1a72
imul eax, edi, 1
or dword [ebp - 8], eax
je 0x42f97d
inc eax
pop dword [0x4cc3e6]
add dword [0x4cc266], eax
mov dword [0x4cc85e], 0
mov ebx, dword [0x4cc85e]
push ebx
mov dword [0x4cc394], 0
mov edi, dword [0x4cc394]
push edi
call dword [sym.imp.USER32.DLL_LoadIconW]
or eax, eax
jne 0x42eadf
lea eax, [0x4cca15]
push eax
push dword [0x4cc82c]
push esi
mov edi, 0xd0
lea eax, [0x4cc30d]
push eax
push 0x4cc089
push 0x4cc0ad
call fcn.0042e3d8
mov dword [0x4cce76], 0
mov edi, dword [0x4cce76]
push edi
mov ecx, 0x29
push ecx
push 0x98
pop edx
push edx
push 1
pop esi
push esi
call dword [sym.imp.GDI32.DLL_GetCharWidthFloatW]
lea eax, [ebp + esi + 0x1d01]
sub eax, dword [0x4cc05e]
or eax, dword [0x4ccb47]
je 0x42fa2d
sub eax, 0xf43
ror eax, 1
shr eax, 8
sub eax, 0x386
je 0x42fa3f
add eax, 0xc3f
and eax, 0xf
add dword [0x4cc891], eax
mov edx, 0xa7
inc edx
lea eax, [0x4cc4af]
push eax
push dword [0x4ccd54]
call fcn.0042e77c
or al, al
je 0x42fa67
sub edi, esi
sub esi, ebx
add edx, ebx
mov dword [0x4ccdec], eax
lea edi, [ebp + 0xbd]
add edi, dword [0x4ccb73]
sub edi, 0x941
jne 0x42fa8a
inc edi
mov esi, 0x332
add edi, esi
shr edi, 1
mov esi, 0x1daa
imul edi, esi, 0x45
or edi, dword [0x4ccef6]
je 0x42faa3
shl edi, 5
add edi, 0xd84
test dword [0x4cc2de], edi
jne 0x42fab3
shr edi, 1
add edi, dword [0x4cce09]
add dword [0x4ccec6], edi
lea eax, [0x4cc432]
push eax
push eax
call fcn.0042e157
mov dword [ebp - 0x14], eax
push 0x59de98b4
pop ebx
push ebx
call dword [sym.imp.kernel32.dll_SetEvent]
or eax, eax
jne 0x42eaaf
push 0x4cc14f
lea eax, [0x4cc409]
push eax
push 0
call fcn.0042e4ae
mov esi, 0x31c
inc esi
test dword [0x4cc9d4], esi
je 0x42fb0e
add esi, 0x8c4
sub esi, dword [0x4ccb2e]
rol esi, 3
mov dword [ebp - 0xc], esi
lea eax, [0x4cc90c]
push eax
lea eax, [0x4cc98a]
push eax
call fcn.0042e157
mov dword [ebp - 8], 0
mov edi, dword [ebp - 8]
push edi
call dword [sym.imp.GDI32.DLL_DeleteDC]
or eax, eax
jne 0x42eadf
push 0
push ebx
push edi
add eax, 1
lea eax, [0x4ccdfc]
push eax
push esi
push 0
call fcn.0042e5db
push 0
mov ebx, 0xf1d1e713
sub ebx, 0xf18efb79
call ebx
or eax, eax
je 0x42eae6
mov ebx, eax
mov eax, 0x655e8a01
mov ecx, eax
push ecx
mov ecx, 0x23ec71
mov eax, ecx
add eax, 0x28d534
push eax
mov esi, 0x13e985
mov ecx, esi
add ecx, 0x38e121
push ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 4]
push edx
push 0x365e4c
pop ecx
add ecx, 0x166e74
push ecx
mov dword [ebp - 0x14], 0x2f148
mov esi, dword [ebp - 0x14]
mov dword [0x4cc96a], 0x49d5b4
add esi, dword [0x4cc96a]
push esi
mov dword [ebp - 8], 0x74
mov esi, dword [ebp - 8]
push esi
mov ecx, 0
mov esi, ecx
push esi
call dword [sym.imp.ADVAPI32.DLL_RegEnumValueA]
or eax, eax
je 0x42ea57
lea eax, [0x4cc0c5]
push eax
push edi
call fcn.0042e77c
or al, al
je 0x42fbff
add esi, 1
sub eax, esi
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
push eax
mov eax, 1
mov edx, eax
push edx
call dword [sym.imp.GDI32.DLL_GetTextMetricsA]
lea eax, [0x4cca42]
push eax
call fcn.0042e1e4
test al, al
je 0x42fc31
lea eax, [6]
add edi, esi
inc esi
lea esi, [edi + esi*4 + 0x7a]
sub esi, dword [0x4cc984]
mov ecx, esi
push ecx
pop dword [0x4cc8b6]
sub dword [0x4cccc9], ecx
call fcn.0042e50d
mov ecx, 0
mov eax, ecx
push eax
push 0x4b
pop eax
push eax
mov edi, 3
push edi
call dword [sym.imp.GDI32.DLL_GetICMProfileW]
or eax, eax
jne 0x42eae1
mov esi, 0x102f
or eax, esi
test dword [0x4cc9c1], eax
je 0x42fc8f
mov edi, 0x1000
imul eax, edi, 0x11
sub eax, 0x5a6
mov dword [0x4cca26], eax
push dword [0x4ccd38]
push edi
lea eax, [0x4cc418]
push eax
push 0x4cc77f
xor eax, ebp
mov esi, ebx
lea eax, [0x4cceab]
push eax
push 0x8f6e
call fcn.0042e6cb
push 0x269
pop edi
shl edi, 3
mov ecx, edi
inc ecx
test dword [0x4ccc43], ecx
je 0x42fcdd
mov edi, 0x1206
xor edi, ecx
sub ecx, dword [0x4cce18]
mov edi, 0x1e3f
imul ecx, edi, 0x17
cmp ecx, 0x725
jne 0x42fcf4
mov eax, 0x24af
sub ecx, eax
add dword [0x4ccd1d], ecx
lea eax, [0x4cc142]
push eax
push eax
push 0x4cca79
push 0
push 0xcf8c
call fcn.0042e912
mov esi, 0x8e2
add esi, dword [0x4ccbb9]
sub esi, 0x14d
jne 0x42fd2f
shr esi, 1
mov edi, 0xf65
add esi, edi
mov eax, esi
mov edi, 0x24d6
or eax, edi
or eax, dword [0x4cc454]
jne 0x42fd56
mov esi, 0x212
imul eax, esi, 0x5f
add eax, 0x591
mov edi, 0x1c91
imul eax, edi, 0x25
add dword [0x4cc421], eax
mov edx, 0x49ae8ef7
mov eax, edx
push eax
mov dword [ebp - 0x10], 0x31f999
mov edx, dword [ebp - 0x10]
mov dword [str.tt__4], 0x1ac96a
add edx, dword [str.tt__4]
push edx
mov dword [ebp - 4], 0x304d10
mov eax, dword [ebp - 4]
mov dword [ebp - 0x14], 0x1c7f15
add eax, dword [ebp - 0x14]
push eax
mov dword [ebp - 8], 0
mov edi, dword [ebp - 8]
push edi
mov dword [ebp - 4], 0x140650
mov edi, dword [ebp - 4]
add edi, 0x38c68f
push edi
mov dword [ebp - 0xc], 0x581d
mov edi, dword [ebp - 0xc]
mov dword [0x4cc0a9], 0x4c71e0
add edi, dword [0x4cc0a9]
push edi
push 0x69
pop edi
push edi
mov dword [ebp - 4], 0
mov esi, dword [ebp - 4]
push esi
call dword [sym.imp.ADVAPI32.DLL_RegEnumValueA]
mov dword [ebp - 8], eax
call fcn.0042e50d
push 0x5e7d54e3
pop edx
push edx
call dword [sym.imp.kernel32.dll_SetEvent]
or eax, eax
jne 0x42eae6
and eax, 0xffff
mov edi, eax
mov eax, 0x1200
add edi, eax
or edi, 0x2509
jne 0x42fe18
shl edi, 1
mov dword [ebp - 0xc], edi
push 0x4ccd12
add edi, esi
mov edi, esi
sub esi, ebx
push 0
call fcn.0042e157
mov esi, 0
mov ecx, esi
push ecx
push 0xf0bda
pop eax
add eax, 0x3dba52
push eax
push 0x3585bc
pop eax
mov dword [0x4cc19d], 0x174156
add eax, dword [0x4cc19d]
push eax
call dword [sym.imp.shlwapi.dll_StrCmpNW]
push 0x4ccd56
push edi
push 0x10e5
inc eax
mov dword [ebp - 0x10], ebx
push esi
push 0
mov eax, 0xb8f6d
add eax, 0x3760e8
call eax
push esi
push edi
lea eax, [0x4cc6b3]
push eax
push edi
call fcn.0042e77c
test al, al
je 0x42fe96
mov ecx, edi
dec ecx
add edi, esi
dec ecx
sub eax, dword [0x4cc20c]
test eax, 0x1b58
je 0x42feb0
mov ebx, 0x1923
xor ebx, eax
add eax, 0x7a0
add dword [0x4ccbb4], eax
push dword [0x4cc8e7]
call fcn.0042e1e4
mov ebx, 0
mov eax, 0x1cbc
imul ebx, eax, 0x49
sub ebx, 0x5dc
je 0x42fedd
mov edi, 0x200b
or ebx, edi
sub ebx, 0xb97
or ebx, dword [0x4cc2a2]
je 0x42feee
shl ebx, 6
test dword [ebp - 4], ebx
je 0x42fef7
inc ebx
ror ebx, 3
mov dword [ebp - 8], ebx
push edi
lea eax, [0x4cc08e]
push eax
push 0
push 0x4cc087
lea eax, [0x4cc17b]
push eax
call fcn.0042e828
mov dword [ebp - 0x10], eax
mov edi, esi
shl edi, 7
test dword [0x4ccd21], edi
jne 0x42ff28
rol edi, 6
sub dword [0x4cc611], edi
push dword [0x4ccdc5]
push 0x9bf5
push 0x5fe4
call fcn.0042e4ae
xor esi, esi
dec esi
push esi
test dword [0x4cc4f1], esi
je 0x42ff63
mov eax, 0x265c
xor eax, esi
add esi, 0x275
mov ebx, 0x2390
xor ebx, esi
pop dword [0x4cc281]
mov dword [0x4cc4dd], esi
push 0x4cc4a9
push 0x4cc209
lea eax, [0x4cc813]
push eax
push ebx
lea eax, [0x4cc156]
push eax
call fcn.0042e912
test al, al
je 0x42ff97
sub eax, 1
ret