Function at 0x403160
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x24ac
call fcn.00423810
mov eax, dword [0x442abc]
xor eax, esp
mov dword [esp + 0x24a8], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
push esi
push edi
lea edx, [esp + 0x30]
push edx
push 8
push 0
push str.SoftwareCreative_TechAudioMonitoringOutput
push 0x80000002
mov dword [esp + 0x38], eax
mov dword [esp + 0x30], ecx
call ebx
test eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
jne 0x4035c5
xor esi, esi
mov edx, dword [esp + 0x30]
push 0
push 0
push 0
push 0
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x1cc4]
push ecx
push esi
push edx
mov dword [esp + 0x48], 0x400
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x4035ab
push str.SoftwareCreative_TechAudioMonitoringOutput
lea eax, [esp + 0x10b4]
push eax
call edi
push 0x43b4b0
lea ecx, [esp + 0x10b4]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [esp + 0x1cb0]
push edx
lea eax, [esp + 0x10b4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov edx, dword [0x43bc80]
mov eax, dword [0x43bc84]
mov ecx, dword [0x43bc7c]
mov dword [esp + 0x4c], edx
lea edx, [esp + 0x20]
push edx
push 0x100
mov dword [esp + 0x50], ecx
mov ecx, dword [0x43bc88]
mov dword [esp + 0x58], eax
lea eax, [esp + 0xeb8]
push eax
mov dword [esp + 0x60], ecx
push 0x4372b8
lea ecx, [esp + 0x10c0]
push ecx
push 0x80000002
call fcn.00406860
add esp, 0x18
test eax, eax
jne 0x4035b2
lea edx, [esp + 0x20]
push edx
push 0x100
lea eax, [esp + 0xcb8]
push eax
push str.Dest
lea ecx, [esp + 0x10c0]
push ecx
push 0x80000002
call fcn.00406860
add esp, 0x18
test eax, eax
jne 0x4035b2
lea edx, [esp + 0x2c]
push edx
push 4
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x48]
push ecx
push 0x4372a4
lea edx, [esp + 0x10c4]
push edx
push 0x80000002
call fcn.00406740
add esp, 0x1c
test eax, eax
jne 0x4032e5
cmp dword [esp + 0x3c], 1
je 0x4032ed
mov dword [esp + 0x14], 0xffffffff
lea eax, [esp + 0x2c]
push eax
push 4
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x44]
push edx
push 0x43729c
lea eax, [esp + 0x10c4]
push eax
push 0x80000002
call fcn.00406740
add esp, 0x1c
test eax, eax
jne 0x403323
cmp dword [esp + 0x38], 1
je 0x40332b
mov dword [esp + 0x18], 0xffffffff
lea ecx, [esp + 0x2c]
push ecx
push 4
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x40]
push eax
push str.MonFlag
lea ecx, [esp + 0x10c4]
push ecx
push 0x80000002
call fcn.00406740
add esp, 0x1c
test eax, eax
jne 0x403368
cmp dword [esp + 0x34], 1
jne 0x403368
and dword [esp + 0x10], 0xfffffffd
jmp 0x403370
mov dword [esp + 0x10], 0
lea edx, [esp + 0x20]
push edx
push 0x200
lea eax, [esp + 0x18b8]
push eax
push str.AudEncoding
lea ecx, [esp + 0x10c0]
push ecx
push 0x80000002
call fcn.00406860
add esp, 0x18
test eax, eax
jne 0x4035b2
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x18b4]
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
cmp dword [ebp + 8], 0xffff0001
jne 0x403465
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4033eb
cmp word [eax], 0
je 0x4033eb
lea ecx, [esp + 0xeb0]
push ecx
mov edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x4035b2
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x403414
cmp word [eax], 0
je 0x403414
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0xcb0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x4035b2
lea eax, [esp + 0xeb0]
push eax
lea ecx, [esp + 0x64]
push ecx
mov dword [esp + 0x60], 0x850
mov dword [esp + 0x64], 4
call edi
lea edx, [esp + 0xcb0]
push edx
lea eax, [esp + 0x264]
push eax
call edi
cmp dword [ebp + 0x10], 0
je 0x40353e
mov ecx, dword [esp + 0x10]
or ecx, 0x10000
mov dword [esp + 0x464], ecx
jmp 0x403549
cmp dword [ebp + 8], 5
jne 0x4035b2
mov eax, dword [esp + 0x24]
test eax, eax
je 0x403494
cmp word [eax], 0
je 0x403494
lea edx, [esp + 0xeb0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x4035b2
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4034bb
cmp word [eax], 0
je 0x4034bb
lea ecx, [esp + 0xcb0]
push ecx
mov edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x4035b2
lea eax, [esp + 0xeb0]
push eax
lea ecx, [esp + 0x64]
push ecx
mov dword [esp + 0x60], 0x850
mov dword [esp + 0x64], 5
call edi
lea edx, [esp + 0xcb0]
push edx
lea eax, [esp + 0x264]
push eax
call edi
cmp dword [ebp + 0x10], 0
je 0x403505
mov ecx, dword [esp + 0x10]
or ecx, 0x10000
mov dword [esp + 0x464], ecx
jmp 0x403510
mov edx, dword [esp + 0x10]
mov dword [esp + 0x464], edx
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x58]
push edx
mov dword [esp + 0x464], eax
mov dword [esp + 0x4a0], ecx
call fcn.00402460
or esi, 0xffffffff
add esp, 4
add esi, 1
jmp 0x4031b7
mov edx, dword [esp + 0x10]
mov dword [esp + 0x464], edx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
mov dword [esp + 0x46c], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x478], eax
mov dword [esp + 0x470], ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x474], edx
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x58]
push eax
mov dword [esp + 0x464], ecx
mov dword [esp + 0x4a0], edx
mov dword [esp + 0x4a4], 0
call fcn.00402460
add esp, 4
add esi, 1
jmp 0x4031b7
cmp eax, 0x103
je 0x4035ba
add esi, 1
jmp 0x4031b7
mov ecx, dword [esp + 0x30]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea edx, [esp + 0x30]
push edx
push 8
push 0
push str.SoftwareCreative_TechAudioMonitoringInput
push 0x80000002
call ebx
test eax, eax
jne 0x403a1a
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
xor ebx, ebx
lea ebx, [ebx]
mov edx, dword [esp + 0x30]
push 0
push 0
push 0
push 0
lea eax, [esp + 0x44]
push eax
lea ecx, [esp + 0x1cc4]
push ecx
push ebx
push edx
mov dword [esp + 0x54], 0x400
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x4039fa
push str.SoftwareCreative_TechAudioMonitoringInput
lea eax, [esp + 0x10b4]
push eax
call edi
push 0x43b4b0
lea ecx, [esp + 0x10b4]
push ecx
call esi
lea edx, [esp + 0x1cb0]
push edx
lea eax, [esp + 0x10b4]
push eax
call esi
mov edx, dword [0x43bc80]
mov eax, dword [0x43bc84]
mov ecx, dword [0x43bc7c]
mov dword [esp + 0x4c], edx
lea edx, [esp + 0x14]
push edx
push 0x100
mov dword [esp + 0x50], ecx
mov ecx, dword [0x43bc88]
mov dword [esp + 0x58], eax
lea eax, [esp + 0xeb8]
push eax
mov dword [esp + 0x60], ecx
push 0x4372b8
lea ecx, [esp + 0x10c0]
push ecx
push 0x80000002
call fcn.00406860
add esp, 0x18
test eax, eax
jne 0x403a01
lea edx, [esp + 0x14]
push edx
push 0x100
lea eax, [esp + 0xcb8]
push eax
push str.Dest
lea ecx, [esp + 0x10c0]
push ecx
push 0x80000002
call fcn.00406860
add esp, 0x18
test eax, eax
jne 0x403a01
lea edx, [esp + 0x2c]
push edx
push 4
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x44]
push ecx
push 0x4372a4
lea edx, [esp + 0x10c4]
push edx
push 0x80000002
call fcn.00406740
add esp, 0x1c
test eax, eax
jne 0x403716
cmp dword [esp + 0x38], 1
je 0x40371e
mov dword [esp + 0x18], 0xffffffff
lea eax, [esp + 0x2c]
push eax
push 4
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x48]
push edx
push 0x43729c
lea eax, [esp + 0x10c4]
push eax
push 0x80000002
call fcn.00406740
add esp, 0x1c
test eax, eax
jne 0x403754
cmp dword [esp + 0x3c], 1
je 0x40375c
mov dword [esp + 0x20], 0xffffffff
lea ecx, [esp + 0x2c]
push ecx
push 4
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x34]
push eax
push str.MonFlag
lea ecx, [esp + 0x10c4]
push ecx
push 0x80000002
call fcn.00406740
add esp, 0x1c
test eax, eax
jne 0x403799
cmp dword [esp + 0x28], 1
jne 0x403799
and dword [esp + 0x10], 0xfffffffd
jmp 0x4037a1
mov dword [esp + 0x10], 0
lea edx, [esp + 0x14]
push edx
push 0x200
lea eax, [esp + 0x18b8]
push eax
push str.AudEncoding
lea ecx, [esp + 0x10c0]
push ecx
push 0x80000002
call fcn.00406860
add esp, 0x18
test eax, eax
jne 0x403a01
lea edx, [esp + 0x48]
push edx
lea eax, [esp + 0x18b4]
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
lea ecx, [esp + 0x2c]
push ecx
push 0x404
lea edx, [esp + 0x8b0]
push edx
lea eax, [esp + 0x4c]
push eax
push 0x43b46c
lea ecx, [esp + 0x10c4]
push ecx
push 0x80000002
call fcn.00406740
add esp, 0x1c
test eax, eax
jne 0x403a01
mov eax, dword [ebp + 8]
cmp eax, 0xffff0001
jne 0x4038cc
mov eax, dword [esp + 0x24]
test eax, eax
je 0x403854
cmp word [eax], 0
je 0x403854
lea edx, [esp + 0xeb0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x403a01
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x40387b
cmp word [eax], 0
je 0x40387b
lea ecx, [esp + 0xcb0]
push ecx
mov edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x403a01
lea ecx, [esp + 0xeb0]
push ecx
lea edx, [esp + 0x64]
push edx
mov dword [esp + 0x60], 0x850
mov dword [esp + 0x64], 1
call edi
lea eax, [esp + 0xcb0]
push eax
lea ecx, [esp + 0x264]
push ecx
call edi
cmp dword [ebp + 0x10], 0
je 0x403977
mov edx, dword [esp + 0x10]
or edx, 0x10000
mov dword [esp + 0x464], edx
jmp 0x403982
cmp eax, 2
jne 0x403a01
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4038fe
cmp word [eax], 0
je 0x4038fe
mov ecx, dword [esp + 0x24]
lea eax, [esp + 0xeb0]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x403a01
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x403923
cmp word [eax], 0
je 0x403923
lea edx, [esp + 0xcb0]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x403a01
lea ecx, [esp + 0xeb0]
push ecx
lea edx, [esp + 0x64]
push edx
mov dword [esp + 0x60], 0x850
mov dword [esp + 0x64], 2
call edi
lea eax, [esp + 0xcb0]
push eax
lea ecx, [esp + 0x264]
push ecx
call edi
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x58]
push eax
mov dword [esp + 0x464], edx
call fcn.00402460
or ebx, 0xffffffff
add esp, 4
add ebx, 1
jmp 0x4035f0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x464], eax
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov dword [esp + 0x46c], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x470], edx
mov edx, dword [esp + 0x18]
mov dword [esp + 0x474], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x478], ecx
mov dword [esp + 0x460], edx
mov dword [esp + 0x49c], eax
mov ecx, 0x101
lea esi, [esp + 0x8a8]
lea edi, [esp + 0x4a0]
rep movsd dword es:[edi], dword [esi]
lea ecx, [esp + 0x58]
push ecx
call fcn.00402460
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
add esp, 4
add ebx, 1
jmp 0x4035f0
cmp eax, 0x103
je 0x403a09
add ebx, 1
jmp 0x4035f0
mov edx, dword [esp + 0x30]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
lea eax, [esp + 0x30]
push eax
push 8
push 0
push str.SoftwareCreative_TechAudioMonitoringInput_A_
push 0x80000002
call ebx
test eax, eax
jne 0x403ee9
mov dword [esp + 0x14], eax
jmp 0x403a40
mov eax, dword [esp + 0x14]
push 0
push 0
push 0
push 0
lea ecx, [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x44]
lea edx, [esp + 0x1cc4]
push edx
push eax
push ecx
mov dword [esp + 0x54], 0x400
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
test eax, eax
jne 0x403ecd
push str.SoftwareCreative_TechAudioMonitoringInput_A_
lea edx, [esp + 0x10b4]
push edx
call edi
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x43b4b0
lea eax, [esp + 0x10b4]
push eax
call esi
lea ecx, [esp + 0x1cb0]
push ecx
lea edx, [esp + 0x10b4]
push edx
call esi
mov ecx, dword [0x43bc80]
mov edx, dword [0x43bc84]
mov eax, dword [0x43bc7c]
mov dword [esp + 0x4c], ecx
lea ecx, [esp + 0x28]
push ecx
push 0x100
mov dword [esp + 0x50], eax
mov eax, dword [0x43bc88]
mov dword [esp + 0x58], edx
lea edx, [esp + 0xcb8]
push edx
mov dword [esp + 0x60], eax
push 0x4372b8
lea eax, [esp + 0x10c0]
push eax
push 0x80000002
call fcn.00406860
mov esi, eax
add esp, 0x18
test esi, esi
jne 0x403c3e
lea ecx, [esp + 0x28]
push ecx
push 0x100
lea edx, [esp + 0xeb8]
push edx
push str.Dest
lea eax, [esp + 0x10c0]
push eax
push 0x80000002
call fcn.00406860
mov esi, eax
add esp, 0x18
test esi, esi
jne 0x403c3e
lea ecx, [esp + 0x28]
push ecx
push 4
lea edx, [esp + 0x20]
push edx
lea eax, [esp + 0x44]
push eax
push 0x4372a4
lea ecx, [esp + 0x10c4]
push ecx
push 0x80000002
call fcn.00406740
lea ebx, [esi + 1]
add esp, 0x1c
or esi, 0xffffffff
test eax, eax
jne 0x403b78
cmp dword [esp + 0x38], ebx
je 0x403b7c
mov dword [esp + 0x18], esi
lea edx, [esp + 0x28]
push edx
push 4
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x48]
push ecx
push 0x43729c
lea edx, [esp + 0x10c4]
push edx
push 0x80000002
call fcn.00406740
add esp, 0x1c
test eax, eax
jne 0x403bb1
cmp dword [esp + 0x3c], ebx
je 0x403bb5
mov dword [esp + 0x20], esi
lea eax, [esp + 0x28]
push eax
push 4
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x50]
push edx
push str.MonFlag
lea eax, [esp + 0x10c4]
push eax
push 0x80000002
call fcn.00406740
add esp, 0x1c
test eax, eax
jne 0x403bf1
cmp dword [esp + 0x44], ebx
jne 0x403bf1
and dword [esp + 0x10], 0xfffffffd
jmp 0x403bf9
mov dword [esp + 0x10], 0
lea ecx, [esp + 0x28]
push ecx
push 0x200
lea edx, [esp + 0x18b8]
push edx
push str.AudEncoding
lea eax, [esp + 0x10c0]
push eax
push 0x80000002
call fcn.00406860
mov esi, eax
add esp, 0x18
test esi, esi
jne 0x403c3e
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x18b4]
push edx
call dword [sym.imp.ole32.dll_CLSIDFromString]
mov eax, dword [ebp + 8]
cmp eax, 0xffff0001
je 0x403c4d
cmp eax, 0x33
jne 0x403cb6
test esi, esi
jne 0x403ed4
lea eax, [esp + 0x28]
push eax
push 4
lea ecx, [esp + 0x34]
push ecx
lea edx, [esp + 0x4c]
push edx
push esi
lea eax, [esp + 0x10c4]
push eax
push 0x80000002
call fcn.00406740
add esp, 0x1c
test eax, eax
jne 0x403ed4
cmp dword [esp + 0x40], 1
jne 0x403ed4
lea ecx, [esp + 0xcb0]
push ecx
lea esi, [esp + 0xeb4]
call fcn.00401370
add esp, 4
cmp eax, dword [esp + 0x2c]
je 0x403cbe
add dword [esp + 0x14], 1
jmp 0x403a40
test esi, esi
jne 0x403ed4
mov eax, dword [ebp + 8]
cmp eax, 0xffff0001
je 0x403cd1
cmp eax, 0x33
jne 0x403d64
mov ebx, dword [esp + 0x24]
test ebx, ebx
je 0x403cf2
cmp word [ebx], 0
je 0x403cf2
lea edx, [esp + 0xcb0]
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x403d68
mov esi, dword [esp + 0x1c]
test esi, esi
je 0x403d13
cmp word [esi], 0
je 0x403d13
lea eax, [esp + 0xeb0]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x403d6c
lea eax, [esp + 0xcb0]
push eax
lea ecx, [esp + 0x64]
push ecx
mov dword [esp + 0x60], 0x850
mov dword [esp + 0x64], 0x33
call edi
lea edx, [esp + 0xeb0]
push edx
lea eax, [esp + 0x264]
push eax
call edi
cmp dword [ebp + 0x10], 0
je 0x403e5e
mov ecx, dword [esp + 0x10]
or ecx, 0x10000
mov dword [esp + 0x464], ecx
jmp 0x403e69
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
cmp dword [ebp + 8], 0x34
jne 0x403ed4
test ebx, ebx
je 0x403d97
cmp word [ebx], 0
je 0x403d97
lea ecx, [esp + 0xcb0]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x403ed4
test esi, esi
je 0x403db8
cmp word [esi], 0
je 0x403db8
lea edx, [esp + 0xeb0]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x403ed4
lea eax, [esp + 0xcb0]
push eax
lea ecx, [esp + 0x64]
push ecx
mov dword [esp + 0x60], 0x850
mov dword [esp + 0x64], 0x34
call edi
lea edx, [esp + 0xeb0]
push edx
lea eax, [esp + 0x264]
push eax
call edi
cmp dword [ebp + 0x10], 0
je 0x403e02
mov ecx, dword [esp + 0x10]
or ecx, 0x10000
mov dword [esp + 0x464], ecx
jmp 0x403e0d
mov edx, dword [esp + 0x10]
mov dword [esp + 0x464], edx
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x58]
push edx
mov dword [esp + 0x464], eax
mov dword [esp + 0x4a0], ecx
call fcn.00402460
add esp, 4
test dword [esp + 0x464], 0x10000
je 0x403e4c
add dword [esp + 0x14], 1
add dword [esp + 0x14], 1
jmp 0x403a40
mov dword [esp + 0x14], 0xffffffff
add dword [esp + 0x14], 1
jmp 0x403a40
mov edx, dword [esp + 0x10]
mov dword [esp + 0x464], edx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x50]
mov dword [esp + 0x46c], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x478], eax
mov dword [esp + 0x470], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x474], edx
mov edx, dword [esp + 0x20]
lea eax, [esp + 0x58]
push eax
mov dword [esp + 0x464], ecx
mov dword [esp + 0x4a0], edx
mov dword [esp + 0x4a4], 0
call fcn.00402460
add esp, 4
add dword [esp + 0x14], 1
jmp 0x403a40
cmp eax, 0x103
je 0x403ede
add dword [esp + 0x14], 1
jmp 0x403a40
mov ecx, dword [esp + 0x30]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x24b4]
pop edi
pop esi
pop ebx
xor ecx, esp
xor eax, eax
call fcn.004217dd
mov esp, ebp
pop ebp
ret