Function at 0x438944
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x70
mov dword [ebp - 0x10], 0x97ff4c87
xor esi, esi
mov eax, dword [ebp - 0x10]
cmp eax, 0xf6c8217d
jg 0x4389c0
cmp eax, 0xaa6cd37c
jle 0x438a2c
cmp eax, 0xce5130fe
jg 0x438ad5
cmp eax, 0xbb98ae38
jle 0x438c45
cmp eax, 0xbfe6e108
jle 0x438e83
cmp eax, 0xcb85f81d
jle 0x439316
cmp eax, 0xcb85f81e
je 0x439334
cmp eax, 0xcc08c088
jne 0x438956
mov eax, dword [ebp - 0x18]
shl eax, 8
add eax, 0xb27e
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x7e6487db
jmp 0x438956
cmp eax, 0x3ea804d8
jg 0x438a87
cmp eax, 0x1866a9ba
jg 0x438b18
cmp eax, 0x75a5d0b
jg 0x438c89
cmp eax, 0x3018cd2
jg 0x438eb9
cmp eax, 0xf6c8217e
je 0x439340
cmp eax, 0x965590
je 0x43937d
cmp eax, 0xeb09f8
jne 0x438956
mov ecx, dword [ebp - 0x14]
shr ecx, 6
mov eax, 0x26f93f81
and ecx, 0x3ffff00
mov dword [ebp - 0x14], ecx
jne 0x439b52
jmp 0x439c26
cmp eax, 0x97ff4c86
jg 0x438b92
cmp eax, 0x8c2d7a0c
jg 0x438cd6
cmp eax, 0x8711ec9a
jg 0x438eef
cmp eax, 0x80bd0680
je 0x4393b0
cmp eax, 0x80f48718
je 0x4393ca
cmp eax, 0x86873a32
jne 0x438956
cmp dword [ebp - 0x44], 0
mov eax, 0x99ae35cd
je 0x439c26
mov eax, 0x7d4c09e0
jmp 0x439c26
cmp eax, 0x6449d672
jg 0x438bd5
cmp eax, 0x4d1d7094
jg 0x438d34
cmp eax, 0x4186aba1
jg 0x438f52
cmp eax, 0x3ea804d9
je 0x4393fc
cmp eax, 0x3ee6d010
je 0x43940d
cmp eax, 0x403530b5
jne 0x438956
mov dword [ebp - 0x10], 0x37798935
jmp 0x438956
cmp eax, 0xe6572b22
jg 0x438d82
cmp eax, 0xd463dc2e
jg 0x438f9d
cmp eax, 0xce5130ff
je 0x439419
cmp eax, 0xcfb13058
je 0x439434
cmp eax, 0xd0c2f2e7
jne 0x438956
mov dword [ebp - 0x10], 0x1347f9d4
jmp 0x438956
cmp eax, 0x28d9e977
jg 0x438dba
cmp eax, 0x1c9c7715
jg 0x438fd9
cmp eax, 0x1866a9bb
je 0x439479
cmp eax, 0x1b599df1
je 0x439485
cmp eax, 0x1c1889e1
jne 0x438956
mov ecx, dword [ebp - 0x18]
shr ecx, 7
and ecx, 0x1fffff
mov eax, ecx
shl eax, 7
sub eax, ecx
imul eax, eax
imul edx, eax, 0x3b99
dec edx
imul ecx, ecx, 0x7f0
add ecx, 0xc20
mov dword [ebp - 0x18], ecx
mov ecx, 0x58fb4800
cmp eax, edx
je 0x439a8e
mov ecx, 0xbfbf37ae
jmp 0x439a8e
cmp eax, 0x9b505cb5
jg 0x438dfb
cmp eax, 0x995e198c
jg 0x43900f
cmp eax, 0x97ff4c87
je 0x439497
cmp eax, 0x97ffa163
je 0x4394ba
cmp eax, 0x994678c2
jne 0x438956
mov dword [ebp - 0x10], 0x86873a32
jmp 0x438956
cmp eax, 0x71f59ce5
jg 0x438e3d
cmp eax, 0x6c4ba64b
jg 0x439072
cmp eax, 0x6449d673
je 0x4394d8
cmp eax, 0x6710ffc4
je 0x4394f8
cmp eax, 0x6b01529d
jne 0x438956
mov edi, dword [ebp - 0x14]
add edi, 0xffffffd5
mov dword [ebp - 0x14], edi
push 0x578c
push edi
push 0x57e0
push 0x2ad
call fcn.00439ca0
add esp, 0x10
mov eax, 0x47a8eca5
cmp edi, 0x10
jb 0x439c26
mov eax, 0xcfb13058
jmp 0x439c26
cmp eax, 0xb20ab612
jg 0x4390cd
cmp eax, 0xaa6cd37d
je 0x439504
cmp eax, 0xab37cb0b
je 0x43951e
cmp eax, 0xaf376a67
jne 0x438956
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xf003f
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x1866a9bb
jmp 0x438956
cmp eax, 0xf2b4d59
jg 0x439108
cmp eax, 0x75a5d0c
je 0x439539
cmp eax, 0x85c5cf7
je 0x4395ac
cmp eax, 0xb591a97
jne 0x438956
mov ecx, dword [ebp - 0x14]
add ecx, 0x74
mov dword [ebp - 0x14], ecx
mov eax, 0xbaaf962d
cmp ecx, 0x20
jb 0x439c26
mov eax, 0x86873a32
jmp 0x439c26
cmp eax, 0x8d9b8c93
jg 0x439159
cmp eax, 0x8c2d7a0d
je 0x4395d2
cmp eax, 0x8cb46b41
je 0x43960f
cmp eax, 0x8d797533
jne 0x438956
imul eax, dword [ebp - 0x18], 0x457b
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x6d0d
dec edx
add eax, 0xfffffecc
mov dword [ebp - 0x18], eax
mov eax, 0x97d672a8
cmp edx, ecx
je 0x439c26
mov eax, 0x403530b5
jmp 0x439c26
cmp eax, 0x5b64d411
jg 0x4391b8
cmp eax, 0x4d1d7095
je 0x43961b
cmp eax, 0x52bbfe74
je 0x439675
cmp eax, 0x58fb4800
jne 0x438956
mov eax, dword [ebp - 0x14]
add eax, 0xffffffcf
shr eax, 4
and eax, 0xffffc00
or eax, 0xd4
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x9b03c4be
jmp 0x438956
cmp eax, 0xf1e17778
jg 0x43921d
cmp eax, 0xe6572b23
je 0x439695
cmp eax, 0xeab2a06a
je 0x4396aa
cmp eax, 0xeef09631
jne 0x438956
mov dword [ebp - 0x10], 0x8cb46b41
jmp 0x438956
cmp eax, 0x31f71010
jg 0x439276
cmp eax, 0x28d9e978
je 0x4396bf
cmp eax, 0x2a6dfe1d
je 0x4396cb
cmp eax, 0x3030874d
jne 0x438956
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0xaa6cd37d
jmp 0x438956
cmp eax, 0x9f96bf60
jg 0x4392aa
cmp eax, 0x9b505cb6
je 0x4396de
cmp eax, 0x9ba30f71
je 0x4396f3
cmp eax, 0x9bcf1a36
jne 0x438956
imul eax, dword [ebp - 0x18], 0x687df000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x75a5d0c
jmp 0x438956
cmp eax, 0x7a9f4da7
jg 0x4392e0
cmp eax, 0x71f59ce6
je 0x43974c
cmp eax, 0x7476f3b5
je 0x439766
cmp eax, 0x79c0952b
jne 0x438956
mov eax, dword [ebp - 0x18]
shl eax, 0x15
add eax, 0xe340fe00
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x472e4a92
jmp 0x438956
cmp eax, 0xbb98ae39
je 0x43978a
cmp eax, 0xbd984fe6
je 0x4397c5
cmp eax, 0xbfbf37ae
jne 0x438956
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0xeab2a06a
jmp 0x438956
cmp eax, 0x3018cd3
je 0x43981d
cmp eax, 0x4425cdd
je 0x439836
cmp eax, 0x55e53d6
jne 0x438956
mov eax, dword [ebp - 0x48]
add eax, 0x66
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x5b64d412
jmp 0x438956
cmp eax, 0x8711ec9b
je 0x439855
cmp eax, 0x890b39ae
je 0x4398b7
cmp eax, 0x8bad9a29
jne 0x438956
mov eax, dword [ebp - 0x14]
lea edi, [eax + eax]
add edi, 0xf5
mov dword [ebp - 0x14], edi
push 0x319d
push 0x1b35
push 0x5836
push edi
call fcn.00439ca0
add esp, 0x10
mov eax, 0xf2b4d5a
cmp edi, 0xa2
jl 0x439c26
mov eax, 0x7e6487db
jmp 0x439c26
cmp eax, 0x4186aba2
je 0x4398e8
cmp eax, 0x472e4a92
je 0x43990d
cmp eax, 0x47a8eca5
jne 0x438956
mov edi, dword [ebp - 0x14]
shr edi, 7
and edi, 0xfffffff8
mov dword [ebp - 0x14], edi
push edi
call fcn.00438944
add esp, 4
push edi
call fcn.00438944
add esp, 4
mov dword [ebp - 0x10], 0x9b505cb6
jmp 0x438956
cmp eax, 0xd463dc2f
je 0x439922
cmp eax, 0xdb186948
je 0x439970
cmp eax, 0xdf54df61
jne 0x438956
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x800
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0xd0c2f2e7
jmp 0x438956
cmp eax, 0x1c9c7716
je 0x43998e
cmp eax, 0x201a69a6
je 0x4399b2
cmp eax, 0x26f93f81
jne 0x438956
push eax
sub esp, 0x64
mov eax, esp
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x8fc45ff3
jmp 0x438956
cmp eax, 0x995e198d
je 0x4399df
cmp eax, 0x99ae35cd
je 0x439a12
cmp eax, 0x9b03c4be
jne 0x438956
imul ebx, dword [ebp - 0x14], 0x122d1600
mov dword [ebp - 0x14], ebx
push ebx
call fcn.00438944
add esp, 4
push 0x5746
push 0x69a
push 0x48ec
push ebx
call fcn.00439ca0
add esp, 0x10
mov eax, 0x622d6a01
test ebx, ebx
je 0x439c26
mov eax, 0xdf54df61
jmp 0x439c26
cmp eax, 0x6c4ba64c
je 0x439a34
cmp eax, 0x71ad832a
je 0x439a69
cmp eax, 0x71c813f8
jne 0x438956
mov eax, dword [ebp - 0x68]
mov word [eax], 0
push 0x66
push 0x46ecc0
push dword [ebp - 0x48]
call fcn.00447850
add esp, 0xc
push 8
push 0x46ed26
push 0x33
push dword [ebp - 0x48]
call fcn.00439ca0
add esp, 0x10
mov dword [ebp - 0x10], 0x3517361b
jmp 0x438956
cmp eax, 0xb20ab613
je 0x439a96
cmp eax, 0xb8531cfc
je 0x439add
cmp eax, 0xbaaf962d
jne 0x438956
mov eax, dword [ebp - 0x14]
shr eax, 5
add eax, 0xfc
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x1c9c7716
jmp 0x438956
cmp eax, 0xf2b4d5a
je 0x439af2
cmp eax, 0x1347f9d4
je 0x439b13
cmp eax, 0x1749ce0c
jne 0x438956
mov eax, dword [ebp - 0x14]
shr eax, 0xe
imul ecx, eax, 0xa521d80
add ecx, 0x3ff19280
mov dword [ebp - 0x14], ecx
mov eax, 0x9b505cb6
cmp ecx, 0xb6
jge 0x439c26
mov eax, 0x8fc45ff3
jmp 0x439c26
cmp eax, 0x8d9b8c94
je 0x439b1f
cmp eax, 0x8fc45ff3
je 0x439b5c
cmp eax, 0x97d672a8
jne 0x438956
mov edi, dword [ebp - 0x14]
shr edi, 0xd
add edi, 0xffffff85
mov ebx, edi
shr ebx, 2
mov dword [ebp - 0x14], ebx
push ebx
call fcn.00438944
add esp, 4
push ebx
call fcn.00438944
add esp, 4
mov eax, 0x8bad9a29
cmp edi, 0x340
jae 0x439c26
mov eax, 0x8c2d7a0d
jmp 0x439c26
cmp eax, 0x5b64d412
je 0x439b68
cmp eax, 0x5bcfb7b5
je 0x439b82
cmp eax, 0x622d6a01
jne 0x438956
imul ebx, dword [ebp - 0x14], 0xd4
add ebx, 0xffffff45
shr ebx, 0xc
add ebx, 0xffffff6a
mov dword [ebp - 0x14], ebx
push 0x2c79
push 0x4d37
push 0x1628
push ebx
call fcn.00439ca0
add esp, 0x10
mov eax, 0x71ad832a
cmp ebx, 0x56
jne 0x4398de
jmp 0x439c26
cmp eax, 0xf1e17779
je 0x439bb2
cmp eax, 0xf4db464e
je 0x439bbe
cmp eax, 0xf6c53369
jne 0x438956
mov eax, dword [ebp - 0x18]
shr eax, 3
imul ecx, eax, 0x71
imul ecx, ecx
imul edx, ecx, 0x1a5b
dec edx
imul eax, eax, 0x41800000
add eax, 0x63800000
mov dword [ebp - 0x18], eax
mov eax, 0x86873a32
cmp edx, ecx
je 0x439c26
mov eax, 0x52bbfe74
jmp 0x439c26
cmp eax, 0x31f71011
je 0x439bcd
cmp eax, 0x3517361b
je 0x439bdc
cmp eax, 0x37798935
jne 0x438956
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x10], 0x6c4ba64c
jmp 0x438956
cmp eax, 0x9f96bf61
je 0x439c04
cmp eax, 0xa38b3576
je 0x439c2e
cmp eax, 0xa6bb1f9e
jne 0x438956
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x10], 0xb8531cfc
jmp 0x438956
cmp eax, 0x7a9f4da8
je 0x439c3a
cmp eax, 0x7d4c09e0
je 0x439c6e
cmp eax, 0x7e6487db
jne 0x438956
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x9b505cb6
jmp 0x438956
cmp eax, 0xbfe6e109
jne 0x439c7a
mov dword [ebp - 0x14], 0x4cff49
mov dword [ebp - 0x10], 0xb591a97
jmp 0x438956
mov dword [ebp - 0x10], 0xf1e17779
jmp 0x438956
mov eax, dword [ebp - 0x18]
add eax, 0xffffffaf
shr eax, 0xc
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x3505
dec edx
shl eax, 4
add eax, 0xfffff660
mov dword [ebp - 0x18], eax
mov eax, 0xbfe6e109
cmp ecx, edx
je 0x43936e
mov eax, 0x1b599df1
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x60], 0
jmp 0x438956
imul eax, dword [ebp - 0x18], 0x2b
shr eax, 0xa
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x3871
dec edx
shl eax, 3
lea eax, [eax + eax*4]
mov dword [ebp - 0x18], eax
mov eax, 0xdb186948
cmp edx, ecx
je 0x439c26
mov eax, 0x994678c2
jmp 0x439c26
mov eax, dword [ebp - 0x18]
shl eax, 7
add eax, 0xffffff25
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xcb85f81e
jmp 0x438956
push 0x18
push 0x46ee10
push dword [ebp - 0x58]
call fcn.00447850
add esp, 0xc
push 4
push 0x46ee28
push 0xc
push dword [ebp - 0x58]
call fcn.00439ca0
add esp, 0x10
mov dword [ebp - 0x10], 0x8711ec9b
jmp 0x438956
imul eax, dword [ebp - 0x18], 0x350000
add eax, 0x600e81f
jmp 0x439a1e
mov dword [ebp - 0x10], 0xf4db464e
jmp 0x438956
imul eax, dword [ebp - 0x18], 0x71000
add eax, 0x11754
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x71ad832a
jmp 0x438956
mov eax, dword [ebp - 0x14]
shr eax, 0xb
imul edi, eax, 0x13c00
add edi, 0xff902800
mov dword [ebp - 0x14], edi
push edi
push 0x2f0d
push 0x2b
push 0x4915
call fcn.00439ca0
add esp, 0x10
mov eax, 0x5bcfb7b5
cmp edi, 0x99
jge 0x439c26
mov eax, 0x97ff4c87
jmp 0x439c26
mov dword [ebp - 0x10], 0xdb186948
jmp 0x438956
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0xa38b3576
jmp 0x438956
push eax
sub esp, 0x7fc
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0x800
mov eax, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0x1c9c7716
jmp 0x438956
push eax
sub esp, 0x64
mov eax, esp
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
add eax, 0x66
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x9bcf1a36
jmp 0x438956
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x34]
push eax
push dword [ebp - 0x54]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0xab37cb0b
jmp 0x438956
mov dword [ebp - 0x10], 0x7a9f4da8
jmp 0x438956
mov eax, dword [ebp - 0x18]
shl eax, 2
and eax, 0x1fffffc
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x6710ffc4
jmp 0x438956
imul eax, dword [ebp - 0x18], 0x7a0c
add eax, 0xfffff7f9
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x4425cdd
jmp 0x438956
mov eax, dword [ebp - 0x74]
mov word [eax], 0
push 0x66
push 0x46ed50
push dword [ebp - 0x50]
call fcn.00447850
add esp, 0xc
push 8
push 0x46edb6
push 0x33
push dword [ebp - 0x50]
call fcn.00439ca0
add esp, 0x10
push dword [ebp - 0x2c]
push dword [ebp - 0x50]
push dword [ebp - 0x4c]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
lea eax, [ebp - 0x24]
push eax
push 0x20019
push 0
push dword [ebp - 0x30]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0xeef09631
test eax, eax
je 0x439a8e
mov ecx, 0xe6572b23
jmp 0x439a8e
mov ecx, dword [ebp - 0x14]
mov eax, ecx
shr eax, 0xa
mov dword [ebp - 0x14], eax
mov eax, 0x7476f3b5
cmp ecx, 0x6800
jae 0x439c26
mov eax, 0x9ba30f71
jmp 0x439c26
mov edi, dword [ebp - 0x14]
mov eax, 0xfffffe4a
add edi, eax
mov dword [ebp - 0x14], edi
push 0x267f
push edi
push 0x1f6d
push 0xacd
call fcn.00439ca0
add esp, 0x10
mov eax, 0x1c9c7716
cmp edi, 0x63
je 0x439c26
mov eax, 0x9b505cb6
jmp 0x439c26
mov dword [ebp - 0x10], 0x4d1d7095
jmp 0x438956
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x800
mov eax, dword [ebp - 0x3c]
push eax
sub esp, 0x14
mov ebx, esp
mov word [ebx + 0x16], 0
push 0x16
push 0x46edd0
push ebx
call fcn.00447850
add esp, 0xc
push 6
push 0x46ede6
push 0xb
push ebx
call fcn.00439ca0
add esp, 0x10
push 0x18
push ebx
push dword [ebp - 0x3c]
call fcn.00447850
add esp, 0xc
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0xce5130ff
jmp 0x438956
push 4
push 0x46ed40
push 5
push dword [ebp - 0x4c]
call fcn.00439ca0
add esp, 0x10
mov dword [ebp - 0x10], 0x97ffa163
jmp 0x438956
push dword [ebp - 0x24]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call edi
push dword [ebp - 0x28]
call edi
jmp 0x439a21
mov eax, dword [ebp - 0x54]
add eax, 0xa
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0xb20ab613
jmp 0x438956
mov dword [ebp - 0x10], 0xa6bb1f9e
jmp 0x438956
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x10], 0x79c0952b
jmp 0x438956
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x8d797533
jmp 0x438956
mov eax, dword [ebp - 0x14]
shr eax, 1
imul ebx, eax, 0x2e
add ebx, 0x22
mov edi, ebx
shr edi, 0xf
mov dword [ebp - 0x14], edi
push 0x1f1a
push 0xf58
push 0x400e
push edi
call fcn.00439ca0
add esp, 0x10
push edi
push 0xd92
push 0x3071
push 0x1289
call fcn.00439ca0
add esp, 0x10
mov eax, 0x97ff4c87
cmp ebx, 0x678000
jb 0x439a5f
jmp 0x439c26
push dword [ebp - 0x44]
call fcn.00423c5c
add esp, 4
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0x31f71011
jmp 0x438956
mov eax, dword [ebp - 0x14]
shr eax, 0xe
imul eax, eax, 0x47
shr eax, 0x14
mov dword [ebp - 0x14], eax
push eax
call fcn.00438944
add esp, 4
mov dword [ebp - 0x10], 0xaf376a67
jmp 0x438956
mov eax, dword [ebp - 0x18]
mov ecx, 0x89
add eax, ecx
mov ecx, eax
shr ecx, 0xe
imul ecx, ecx
imul edx, ecx, 0x8e5
dec edx
shr eax, 0x1b
add eax, 0xffffff34
mov dword [ebp - 0x18], eax
mov eax, 0xeab2a06a
cmp ecx, edx
je 0x439c26
mov eax, 0x6449d673
jmp 0x439c26
mov eax, dword [ebp - 0x14]
mov ebx, eax
shl ebx, 5
sub ebx, eax
mov edi, ebx
shr edi, 5
mov dword [ebp - 0x14], edi
push 0x4f5
push 0x5288
push 0x2fab
push edi
call fcn.00439ca0
add esp, 0x10
push edi
push 0x4fd4
push 0x4baa
push 0x1888
call fcn.00439ca0
add esp, 0x10
mov eax, 0x4186aba2
cmp ebx, 0xb00
jae 0x439a5f
jmp 0x439c26
cmp dword [ebp - 0x6c], 0
mov eax, 0xf6c8217e
je 0x439c26
mov eax, 0x3ea804d9
jmp 0x439c26
push dword [ebp - 0x24]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x10], 0x1b599df1
mov dword [ebp - 0x60], eax
jmp 0x438956
push 0x1a
push dword [ebp - 0x58]
push dword [ebp - 0x40]
call fcn.00447850
add esp, 0xc
push dword [ebp - 0x5c]
call fcn.00458b30
add esp, 4
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x40]
push dword [ebp + 8]
call fcn.00424263
add esp, 0x10
push dword [ebp - 0x44]
call fcn.0045809c
add esp, 4
push dword [ebp - 0x5c]
call fcn.0045809c
add esp, 4
push dword [ebp - 0x28]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0xc8403266
mov dword [ebp - 0x20], 1
jmp 0x438956
imul edi, dword [ebp - 0x14], 0xc6c000
shr edi, 0x15
mov dword [ebp - 0x14], edi
push edi
call fcn.00438944
add esp, 4
mov eax, 0x85c5cf7
cmp edi, 0xf1
je 0x439c26
mov eax, 0xdb186948
jmp 0x439c26
imul ecx, dword [ebp - 0x14], 0x1480
mov dword [ebp - 0x14], ecx
mov eax, 0xeb09f8
cmp ecx, 0xa7
jae 0x439c26
mov eax, 0x1749ce0c
jmp 0x439c26
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0x3ee6d010
jmp 0x438956
mov ebx, dword [ebp - 0x14]
add ebx, 0x2d
shr ebx, 0xd
add ebx, 0xffffff3e
mov dword [ebp - 0x14], ebx
push ebx
call fcn.00438944
add esp, 4
push 0x3541
push 0xe46
push 0x53bc
push ebx
call fcn.00439ca0
add esp, 0x10
mov eax, 0x8fc45ff3
cmp ebx, 0xc4
jae 0x439c26
mov eax, 0x3030874d
jmp 0x439c26
push 2
push 0xc800
call fcn.00457663
add esp, 8
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x965590
jmp 0x438956
push eax
sub esp, 0x7fc
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xcc08c088
jmp 0x438956
push esi
push esi
push esi
push esi
push dword [ebp - 0x1c]
push dword [ebp - 0x2c]
push dword [ebp - 0x64]
push dword [ebp - 0x70]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov ecx, 0x3030874d
test eax, eax
je 0x439a8e
mov ecx, 0x80bd0680
jmp 0x439a8e
mov eax, dword [ebp - 0x18]
mov ecx, 0xffffff13
add eax, ecx
mov ecx, eax
shl ecx, 0xf
imul eax, eax
imul edx, eax, 0x65db
or ecx, 0x4a
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0xdb186948
cmp edx, eax
je 0x439a8e
mov ecx, 0x3018cd3
jmp 0x439a8e
imul eax, dword [ebp - 0x18], 0xb000
add eax, 0x30cf30
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xc8403266
mov dword [ebp - 0x20], 0
jmp 0x438956
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0x10b]
imul ecx, ecx
imul edx, ecx, 0x1195
dec edx
imul eax, eax, 0x78
add eax, 0xd98
mov dword [ebp - 0x18], eax
mov eax, 0x6b01529d
cmp edx, ecx
je 0x439c26
mov eax, 0x2a6dfe1d
jmp 0x439c26
push dword [ebp - 0x1c]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0
push dword [ebp - 0x3c]
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, 0x1c1889e1
test eax, eax
je 0x439a8e
mov ecx, 0x4425cdd
mov dword [ebp - 0x10], ecx
jmp 0x438956
mov eax, dword [ebp - 0x7c]
mov word [eax], 0
mov eax, dword [ebp - 0x54]
movzx ecx, word [0x46edfa]
mov word [eax + 8], cx
mov ecx, dword [0x46edf6]
mov dword [eax + 4], ecx
mov ecx, dword [0x46edf2]
mov dword [eax], ecx
push 4
push 0x46edfc
push 5
push dword [ebp - 0x54]
call fcn.00439ca0
add esp, 0x10
mov dword [ebp - 0x10], 0xbb98ae39
jmp 0x438956
mov eax, dword [ebp - 0x58]
mov word [eax + 0x18], 0
mov dword [ebp - 0x10], 0x80f48718
jmp 0x438956
mov eax, dword [ebp - 0x14]
shl eax, 0x13
add eax, 0xffffffb9
mov dword [ebp - 0x14], eax
push eax
call fcn.00438944
add esp, 4
mov dword [ebp - 0x10], 0x1c9c7716
jmp 0x438956
mov dword [ebp - 0x10], 0x201a69a6
jmp 0x438956
mov ebx, dword [ebp - 0x14]
shr ebx, 2
add ebx, 0xffffff6a
mov eax, ebx
shr eax, 2
add eax, 0xfffffea5
mov dword [ebp - 0x14], eax
push eax
call fcn.00438944
add esp, 4
mov eax, 0x9f96bf61
cmp ebx, 0x650
jb 0x439c26
mov eax, 0x3517361b
jmp 0x439c26
mov dword [ebp - 0x10], 0x55e53d6
jmp 0x438956
mov eax, dword [ebp - 0x18]
shl eax, 6
add eax, 0xfffffec6
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x71c813f8
jmp 0x438956
imul eax, dword [ebp - 0x14], 0xc6
add eax, 0xffffff62
mov dword [ebp - 0x14], eax
push eax
push 0x6c
push 0x5e83
push 0x4340
call fcn.00439ca0
add esp, 0x10
mov dword [ebp - 0x10], 0x7e6487db
jmp 0x438956
mov dword [ebp - 0x10], 0x71f59ce6
jmp 0x438956
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0xaf376a67
jmp 0x438956
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0x28d9e978
jmp 0x438956
lea eax, [ebp - 0x28]
push eax
push 0x20019
push 0
push dword [ebp - 0x48]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0x995e198d
jmp 0x438956
imul edi, dword [ebp - 0x14], 0x5278
mov dword [ebp - 0x14], edi
push edi
call fcn.00438944
add esp, 4
mov eax, 0x86873a32
cmp edi, 0x21
jge 0x439c26
mov eax, 0x55e53d6
mov dword [ebp - 0x10], eax
jmp 0x438956
mov dword [ebp - 0x10], 0xdf54df61
jmp 0x438956
mov eax, dword [ebp - 0x4c]
mov word [eax + 0xa], 0
mov eax, dword [ebp - 0x4c]
movzx ecx, word [0x46ed3e]
mov word [eax + 8], cx
mov ecx, dword [0x46ed3a]
mov dword [eax + 4], ecx
mov ecx, dword [0x46ed36]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0xf6c53369
jmp 0x438956
mov dword [ebp - 0x10], 0x26f93f81
jmp 0x438956
cmp eax, 0xc8403266
jne 0x438956
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret