Function at 0x43bdb0
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59982d
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x63434c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 4], 0
push dword [eax]
lea eax, [ebp - 0x1c]
push dword [0x60e098]
push eax
call fcn.00448eb0
add esp, 0xc
mov byte [ebp - 4], 2
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x43c161
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x1c]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 3
test eax, eax
je 0x43be32
push eax
call ebx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0
push eax
push 0x20019
push 0
push edi
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], 0
test eax, eax
je 0x43bf1d
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea ecx, [ebp - 0x18]
push ecx
push 0
lea ecx, [ebp - 0x20]
push ecx
push 0
push str.uifile
push eax
call edi
mov eax, dword [ebp - 0x20]
cmp eax, 1
je 0x43be8b
cmp eax, 2
jne 0x43bf13
lea ecx, [ebp - 0x14]
call fcn.00429bc0
mov edx, dword [ebp - 0x18]
shr edx, 1
add edx, 1
js 0x43c175
mov esi, dword [ebp - 0x14]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x43bec1
push edx
lea ecx, [ebp - 0x14]
call fcn.00429e50
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x18]
push eax
push esi
lea eax, [ebp - 0x20]
push eax
push 0
push str.uifile
push dword [ebp - 0x10]
call edi
test eax, eax
jne 0x43bf13
mov eax, dword [ebp - 0x18]
xor ecx, ecx
shr eax, 1
mov word [esi + eax*2], cx
test esi, esi
jne 0x43beed
xor eax, eax
jmp 0x43bf01
push dword [esi - 8]
push esi
call fcn.00566c13
add esp, 8
test eax, eax
js 0x43c175
cmp eax, dword [esi - 8]
jg 0x43c175
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x43bf1d
push eax
call ebx
mov dword [ebp - 0x10], 0
mov byte [ebp - 4], 4
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x43c16b
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x18], edi
lea eax, [esi - 0x10]
mov byte [ebp - 4], 5
or esi, 0xffffffff
mov dword [ebp - 0x24], eax
cmp dword [eax + 4], 0
jne 0x43bfff
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 0xc]
push dword [eax]
lea eax, [ebp - 0x18]
push str.res__s_s.kui
push eax
call fcn.0042c6c0
mov eax, dword [ebp - 0x10]
add esp, 0x10
mov edi, dword [ebp - 0x1c]
test eax, eax
je 0x43bf81
push eax
call ebx
push 0
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0
push eax
mov eax, dword [ebp + 8]
push 0
push 0xf003f
push 0
push 0
push 0
push edi
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x18]
test eax, eax
je 0x43bff3
mov edx, edi
lea ecx, [edx + 2]
mov dword [ebp + 0xc], ecx
jmp 0x43bfc0
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x43bfc0
sub edx, dword [ebp + 0xc]
sar edx, 1
lea ecx, [edx*2 + 2]
push ecx
push edi
push 1
push 0
push str.uifile
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x43bff3
push eax
call ebx
mov dword [ebp - 0x10], 0
jmp 0x43c0fa
mov byte [ebp - 4], 6
call fcn.004291f0
mov ecx, eax
test ecx, ecx
je 0x43c17f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 7
push dword [eax]
lea eax, [ebp - 0x20]
push str.res__sribbon.kui
push eax
call fcn.0042c6c0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00438ee0
add esp, 0x14
test al, al
je 0x43c0e0
mov eax, dword [ebp + 0xc]
push dword [eax]
lea eax, [ebp - 0x18]
push str.res__songmani.kui
push eax
call fcn.0042c6c0
mov eax, dword [ebp - 0x10]
add esp, 0xc
mov edi, dword [ebp - 0x1c]
test eax, eax
je 0x43c06f
push eax
call ebx
push 0
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0
push eax
mov eax, dword [ebp + 8]
push 0
push 0xf003f
push 0
push 0
push 0
push edi
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x18]
test eax, eax
je 0x43c0d9
mov edx, edi
lea ecx, [edx + 2]
mov dword [ebp + 0xc], ecx
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x43c0a6
sub edx, dword [ebp + 0xc]
sar edx, 1
lea ecx, [edx*2 + 2]
push ecx
push edi
push 1
push 0
push str.uifile
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x43c0d9
push eax
call ebx
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x20]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c0fa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x43c111
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43c128
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x43c140
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x43c14a
push ecx
call ebx
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00429b00
push 0x80004005
call fcn.00429b00
push 0x80070057
call fcn.00429b00
push 0x80004005
call fcn.00429b00
int3