Function at 0x43b500
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x4c2316
push eax
mov eax, 0x2034
mov dword fs:[0], esp
call fcn.00475160
mov eax, dword [0x4f5b3c]
push ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x34], esi
mov dword [esp + 0x10], eax
xor edi, edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x204c], edi
mov dword [esp + 0x24], eax
lea ecx, [esp + 0xb0]
mov byte [esp + 0x204c], 2
call fcn.00446bc0
mov eax, dword [0x4f5b3c]
mov dword [esp + 0x28], edi
mov dword [esp + 0x1c], eax
mov ecx, esi
mov byte [esp + 0x204c], 4
call fcn.00439400
mov eax, dword [esi + 0x14]
lea ecx, [esp + 0x2c]
lea ebp, [esi + 0x10]
push ecx
mov ecx, ebp
mov dword [esp + 0x30], eax
call fcn.00410c00
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.004a9994
lea ecx, [esp + 0x14]
call fcn.0040cea0
cmp dword [0x4fef7c], edi
je 0x43b61e
push str.nouninstall
lea ecx, [esp + 0x14]
call fcn.00438770
test eax, eax
jle 0x43b61e
lea ecx, [esp + 0x1c]
mov byte [esp + 0x204c], 3
call fcn.004a9c1f
lea ecx, [esp + 0xb0]
mov byte [esp + 0x204c], 2
call fcn.00446d10
lea ecx, [esp + 0x24]
mov byte [esp + 0x204c], 1
call fcn.004a9c1f
lea ecx, [esp + 0x14]
mov byte [esp + 0x204c], 0
call fcn.004a9c1f
lea ecx, [esp + 0x10]
mov dword [esp + 0x204c], 0xffffffff
call fcn.004a9c1f
mov eax, 1
jmp 0x43c606
lea edx, [esp + 0x20]
mov ecx, ebp
push edx
call fcn.004a8160
lea ecx, [esp + 0x20]
call fcn.004a9c1f
mov eax, dword [esi + 0x14]
mov ebx, 1
test eax, eax
mov dword [esp + 0x2c], eax
je 0x43bb74
lea esi, [esp + 0xd0]
jmp 0x43b659
mov edi, dword [esp + 0x28]
mov ebx, 1
lea eax, [esp + 0x2c]
mov ecx, ebp
push eax
call fcn.00410c00
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.004a9994
lea ecx, [esp + 0x14]
call fcn.0040cea0
push str.rem
lea ecx, [esp + 0x14]
call fcn.00438770
test eax, eax
je 0x43bb64
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
je 0x43bb64
push str.KEY:
lea ecx, [esp + 0x14]
call fcn.00438770
cmp eax, 0xffffffff
jle 0x43b7b8
test edi, edi
jne 0x43c630
push ebx
push edi
lea edx, [esp + 0x1c]
push 0x3a
push edx
push edi
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ebx
call fcn.00437e10
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xb0]
push eax
call fcn.00447000
cmp word [esp + 0xbc], di
je 0x43c630
push ebx
push edi
lea ecx, [esp + 0x1c]
push 0x3a
push ecx
push ebx
lea ecx, [esp + 0x24]
call fcn.00437e10
push 0x3a
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push str.System
call fcn.004a9c8d
lea ecx, [esp + 0x18]
call fcn.00438180
test eax, eax
je 0x43b743
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.004a9994
mov ecx, 0x4fee30
call fcn.0043c6a0
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xb0]
push eax
call fcn.00446ec0
test eax, eax
je 0x43c630
cmp word [esp + 0xbc], 3
jne 0x43b795
push ebx
push 0
lea ecx, [esp + 0x1c]
push 0x3a
push ecx
push 2
lea ecx, [esp + 0x24]
call fcn.00437e10
test eax, eax
je 0x43c630
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0xb0]
push edx
call fcn.004470b0
mov eax, dword [0x4fef38]
lea ecx, [esp + 0x10]
push eax
call fcn.004a7309
test eax, eax
jle 0x43bb64
mov dword [esp + 0xcc], ebx
jmp 0x43bb64
push str.VALUE
lea ecx, [esp + 0x14]
call fcn.00438770
cmp eax, 0xffffffff
jle 0x43c630
test edi, edi
je 0x43c630
push ebx
push 0
lea ecx, [esp + 0x2c]
push 0x3a
push ecx
push 2
lea ecx, [esp + 0x24]
call fcn.00437e10
test eax, eax
je 0x43c630
mov edi, str.SYSTEMCurrentControlSetServices
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x48]
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
lea ecx, [esp + 0xcc]
call fcn.004a7219
mov eax, dword [eax]
push str.SYSTEMCurrentControlSetServices
push eax
call fcn.004751e6
add esp, 8
lea ecx, [esp + 0x48]
test eax, eax
sete bl
call fcn.004a9c1f
test bl, bl
je 0x43b961
mov edi, str.enum
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x3c]
push ecx
push eax
lea ecx, [esp + 0xcc]
call fcn.004a719d
mov eax, dword [eax]
push str.enum
push eax
call fcn.004751e6
add esp, 8
lea ecx, [esp + 0x3c]
test eax, eax
sete bl
call fcn.004a9c1f
test bl, bl
jne 0x43bb64
lea ecx, [esp + 0xb0]
call fcn.004447f0
push 1
push 0
lea ecx, [esp + 0x1c]
push 0x3a
push ecx
push 0
lea ecx, [esp + 0x24]
call fcn.00437e10
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0xb0]
push edx
call fcn.004448b0
mov eax, dword [esi]
xor ecx, ecx
cmp dword [eax], 0
sete cl
or edi, 0xffffffff
cmp ecx, edi
je 0x43bc76
push 1
push 0
lea edx, [esp + 0x1c]
push 0x3a
push edx
push 1
lea ecx, [esp + 0x24]
call fcn.00437e10
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xb0]
push eax
call fcn.00444ad0
mov ecx, dword [esi]
cmp word [ecx + 4], 0
je 0x43bc76
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0xb0]
push edx
call fcn.00444c70
mov eax, dword [esi]
cmp word [eax + 4], 6
je 0x43ba9a
push str.__UI
lea ecx, [esp + 0x14]
call fcn.004a7309
test eax, eax
jle 0x43b9f9
push ecx
dec eax
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
push ecx
lea ecx, [esp + 0x1c]
call fcn.004a7219
lea ecx, [esp + 0x20]
call fcn.0040cea0
push 0x4ee4f8
lea ecx, [esp + 0x20]
call fcn.004a9faf
jmp 0x43ba07
mov ecx, dword [esp + 0x24]
push str.DeviceReference
push ecx
call fcn.004751e6
add esp, 8
test eax, eax
jne 0x43b882
mov edi, str.SYSTEMCurrentControlSet
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edx, [esp + 0x44]
push ecx
push edx
lea ecx, [esp + 0xcc]
call fcn.004a7219
mov eax, dword [eax]
push str.SYSTEMCurrentControlSet
push eax
call fcn.004751e6
add esp, 8
lea ecx, [esp + 0x44]
test eax, eax
sete bl
call fcn.004a9c1f
test bl, bl
je 0x43b882
push str.Registry:_Skipping_DeviceReference_value
lea ecx, [esp + 0x24]
call fcn.004a9c8d
lea eax, [esp + 0x20]
mov byte [esp + 0x204c], 5
push eax
call fcn.0045db50
add esp, 4
lea ecx, [esp + 0x20]
mov byte [esp + 0x204c], 4
call fcn.004a9c1f
jmp 0x43bb64
lea edx, [esp + 0x10]
lea ecx, [esp + 0x1c]
push edx
call fcn.004a9d0c
mov eax, dword [esi]
cmp word [eax + 4], 0xe
jne 0x43ba4f
push 1
push 0
lea ecx, [esp + 0x1c]
push 0x3a
push ecx
push 4
lea ecx, [esp + 0x30]
call fcn.00437e10
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0xb0]
push edx
call fcn.00444f70
push 1
push 0
lea eax, [esp + 0x1c]
push 0x3a
push eax
push 3
lea ecx, [esp + 0x30]
call fcn.00437e10
jmp 0x43ba6d
push 0
push 1
lea ecx, [esp + 0x1c]
push 0x3a
push ecx
push 3
lea ecx, [esp + 0x30]
call fcn.00437e10
test eax, eax
je 0x43bc76
mov edx, dword [esi]
cmp word [edx + 4], 7
jne 0x43ba89
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0xb0]
push eax
call fcn.00445070
jmp 0x43ba9a
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0xb4]
call fcn.00445020
mov edx, dword [0x4fef48]
lea ecx, [esp + 0x10]
push edx
call fcn.004a7309
test eax, eax
jle 0x43baed
mov eax, dword [0x4fef7c]
test eax, eax
je 0x43baed
lea eax, [esp + 0x14]
push 1
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x3c], esp
push 0x4fef48
call fcn.004a9994
lea ecx, [esp + 0x1c]
call fcn.00436ed0
mov ecx, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0xb4]
call fcn.00444cb0
push 1
jmp 0x43bb55
mov edx, dword [0x4fef44]
lea ecx, [esp + 0x10]
push edx
call fcn.004a7309
test eax, eax
jle 0x43bb0e
mov eax, dword [0x4fef7c]
test eax, eax
je 0x43bb0e
push 2
jmp 0x43bb55
mov eax, dword [0x4fef3c]
lea ecx, [esp + 0x10]
push eax
call fcn.004a7309
test eax, eax
jle 0x43bb2e
mov eax, dword [0x4fef7c]
test eax, eax
je 0x43bb2e
push 3
jmp 0x43bb55
mov ecx, dword [0x4fef40]
push ecx
lea ecx, [esp + 0x14]
call fcn.004a7309
test eax, eax
mov eax, dword [0x4fef7c]
jle 0x43bb4f
test eax, eax
je 0x43bb61
push 4
jmp 0x43bb55
test eax, eax
je 0x43bb61
push 0x64
lea ecx, [esp + 0xb4]
call fcn.00444890
add esi, 4
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x43b650
mov esi, dword [esp + 0x34]
lea ecx, [esp + 0xb0]
call fcn.00448410
mov edx, dword [0x4f5b3c]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x14]
mov dword [esp + 0x20], 0
mov dword [esp + 0x2c], eax
mov dword [esp + 0x18], edx
test eax, eax
mov byte [esp + 0x204c], 6
je 0x43c42b
lea edi, [esp + 0xd0]
lea ebx, [esp + 0x1074]
mov dword [esp + 0x28], edi
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x2014]
cmp ecx, edx
jl 0x43bbdc
mov ecx, dword [0x4fef80]
test ecx, ecx
jne 0x43c42b
mov esi, eax
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x2c]
push edx
lea ecx, [eax + 0x10]
call fcn.00410c00
push ecx
mov ecx, esp
mov dword [esp + 0x54], esp
push eax
call fcn.004a9994
lea ecx, [esp + 0x14]
call fcn.0040cea0
push str.rem
lea ecx, [esp + 0x14]
call fcn.00438770
test eax, eax
je 0x43c41f
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx - 8]
test eax, eax
je 0x43c41f
mov eax, dword [esp + 0x2014]
test eax, eax
jne 0x43bcd4
mov edx, dword [0x4fef28]
lea ecx, [esp + 0x10]
push edx
call fcn.004a7309
test eax, eax
jge 0x43bcd4
mov eax, dword [0x4fef7c]
test eax, eax
je 0x43bcd4
push str.VALUE:
lea ecx, [esp + 0x14]
call fcn.00438770
cmp eax, 0xffffffff
jle 0x43c41f
jmp 0x43c418
lea ecx, [esp + 0x1c]
mov byte [esp + 0x204c], 3
call fcn.004a9c1f
lea ecx, [esp + 0xb0]
mov byte [esp + 0x204c], 2
call fcn.00446d10
lea ecx, [esp + 0x24]
mov byte [esp + 0x204c], 1
call fcn.004a9c1f
lea ecx, [esp + 0x14]
mov byte [esp + 0x204c], 0
call fcn.004a9c1f
lea ecx, [esp + 0x10]
mov dword [esp + 0x204c], edi
call fcn.004a9c1f
xor eax, eax
jmp 0x43c606
push str.KEY:
lea ecx, [esp + 0x14]
call fcn.00438770
cmp eax, 0xffffffff
jle 0x43be68
mov eax, dword [0x4fef38]
lea ecx, [esp + 0x10]
push eax
call fcn.004a7309
test eax, eax
jle 0x43bdcf
mov eax, dword [esp + 0xcc]
test eax, eax
je 0x43c41f
mov ecx, dword [0x4fef38]
push ecx
lea ecx, [esp + 0x14]
call fcn.004a7309
mov edi, dword [0x4fef38]
mov ebp, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edx, [esp + 0x48]
add ecx, ebp
push ecx
push edx
lea ecx, [esp + 0x18]
call fcn.004a70e4
mov edi, eax
add ebp, 0xfffffffe
lea eax, [esp + 0x3c]
push ebp
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2054], 7
call fcn.004a7219
push edi
lea ecx, [esp + 0x48]
push eax
push ecx
mov byte [esp + 0x2058], 8
call fcn.004a9e02
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 9
call fcn.004a9d0c
lea ecx, [esp + 0x44]
mov byte [esp + 0x204c], 8
call fcn.004a9c1f
lea ecx, [esp + 0x3c]
mov byte [esp + 0x204c], 7
call fcn.004a9c1f
lea ecx, [esp + 0x48]
mov byte [esp + 0x204c], 6
call fcn.004a9c1f
lea edx, [esp + 0x18]
lea ecx, [esi + 8]
push edx
call fcn.004a9d0c
mov edi, dword [esp + 0x28]
jmp 0x43c41f
mov eax, dword [ebx]
mov ecx, dword [eax + 8]
test ecx, ecx
jne 0x43c41f
mov edx, dword [esp + 0x20]
push 0x4fef38
lea ecx, [esp + 0x60]
inc edx
push 0x4f06b8
push ecx
mov dword [esp + 0x2c], edx
add ebx, 4
call fcn.004a9edc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 0xa
call fcn.004a9d0c
lea ecx, [esp + 0x5c]
mov byte [esp + 0x204c], 6
call fcn.004a9c1f
lea edx, [esp + 0x18]
lea eax, [esp + 0x10]
push edx
lea ecx, [esp + 0x74]
push eax
push ecx
call fcn.004a9e02
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 0xb
call fcn.004a9d0c
lea ecx, [esp + 0x70]
mov byte [esp + 0x204c], 6
call fcn.004a9c1f
lea edx, [esp + 0x18]
lea ecx, [esi + 8]
push edx
call fcn.004a9d0c
jmp 0x43c41f
push str.VALUE
lea ecx, [esp + 0x14]
call fcn.00438770
cmp eax, 0xffffffff
jle 0x43c61f
mov eax, dword [0x4fef48]
lea ecx, [esp + 0x10]
push eax
call fcn.004a7309
test eax, eax
jle 0x43bf82
mov ecx, dword [edi]
cmp dword [ecx + 0x20], 1
jne 0x43c229
mov edx, dword [0x4fef48]
lea ecx, [esp + 0x10]
push edx
call fcn.004a7309
mov ebp, eax
lea eax, [esp + 0x14]
push 1
push eax
push ecx
mov ecx, esp
mov dword [esp + 0x5c], esp
push 0x4fef48
call fcn.004a9994
lea ecx, [esp + 0x1c]
call fcn.00436ed0
mov ecx, dword [esp + 0x14]
mov edi, dword [0x4fef48]
xor eax, eax
mov edx, dword [ecx - 8]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x88]
add ecx, edx
lea edx, [ecx + ebp + 3]
lea ecx, [esp + 0x10]
push edx
push eax
call fcn.004a70e4
mov edi, eax
add ebp, 0xfffffffe
lea ecx, [esp + 0x80]
push ebp
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x2054], 0xc
call fcn.004a7219
push edi
lea edx, [esp + 0x7c]
push eax
push edx
mov byte [esp + 0x2058], 0xd
call fcn.004a9e02
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 0xe
call fcn.004a9d0c
lea ecx, [esp + 0x78]
mov byte [esp + 0x204c], 0xd
call fcn.004a9c1f
lea ecx, [esp + 0x80]
mov byte [esp + 0x204c], 0xc
call fcn.004a9c1f
mov byte [esp + 0x204c], 6
lea ecx, [esp + 0x88]
jmp 0x43c213
mov ecx, dword [0x4fef44]
push ecx
lea ecx, [esp + 0x14]
call fcn.004a7309
test eax, eax
jle 0x43c063
mov edx, dword [edi]
cmp dword [edx + 0x20], 2
jne 0x43c229
mov eax, dword [0x4fef44]
lea ecx, [esp + 0x10]
push eax
call fcn.004a7309
mov edi, dword [0x4fef44]
mov ebp, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
add ecx, ebp
push ecx
lea ecx, [esp + 0x9c]
push ecx
lea ecx, [esp + 0x18]
call fcn.004a70e4
mov edi, eax
add ebp, 0xfffffffe
lea edx, [esp + 0x54]
push ebp
push edx
lea ecx, [esp + 0x18]
mov byte [esp + 0x2054], 0xf
call fcn.004a7219
push edi
push eax
lea eax, [esp + 0x98]
mov byte [esp + 0x2054], 0x10
push eax
call fcn.004a9e02
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 0x11
call fcn.004a9d0c
lea ecx, [esp + 0x90]
mov byte [esp + 0x204c], 0x10
call fcn.004a9c1f
lea ecx, [esp + 0x54]
mov byte [esp + 0x204c], 0xf
call fcn.004a9c1f
lea ecx, [esp + 0x98]
mov byte [esp + 0x204c], 6
call fcn.004a9c1f
lea ecx, [esp + 0x18]
push ecx
jmp 0x43c21d
mov edx, dword [0x4fef3c]
lea ecx, [esp + 0x10]
push edx
call fcn.004a7309
test eax, eax
jle 0x43c13f
mov eax, dword [edi]
cmp dword [eax + 0x20], 3
jne 0x43c229
mov ecx, dword [0x4fef3c]
push ecx
lea ecx, [esp + 0x14]
call fcn.004a7309
mov edi, dword [0x4fef3c]
mov ebp, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea edx, [esp + 0x6c]
add ecx, ebp
push ecx
push edx
lea ecx, [esp + 0x18]
call fcn.004a70e4
mov edi, eax
add ebp, 0xfffffffe
lea eax, [esp + 0x84]
push ebp
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2054], 0x12
call fcn.004a7219
push edi
lea ecx, [esp + 0x68]
push eax
push ecx
mov byte [esp + 0x2058], 0x13
call fcn.004a9e02
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 0x14
call fcn.004a9d0c
lea ecx, [esp + 0x64]
mov byte [esp + 0x204c], 0x13
call fcn.004a9c1f
lea ecx, [esp + 0x84]
mov byte [esp + 0x204c], 0x12
call fcn.004a9c1f
lea ecx, [esp + 0x6c]
mov byte [esp + 0x204c], 6
call fcn.004a9c1f
lea edx, [esp + 0x18]
push edx
jmp 0x43c21d
mov eax, dword [0x4fef40]
lea ecx, [esp + 0x10]
push eax
call fcn.004a7309
mov ecx, dword [edi]
test eax, eax
mov eax, dword [ecx + 0x20]
jle 0x43c232
cmp eax, 4
jne 0x43c229
mov edx, dword [0x4fef40]
lea ecx, [esp + 0x10]
push edx
call fcn.004a7309
mov edi, dword [0x4fef40]
mov ebp, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [esp + 0x8c]
add ecx, ebp
push ecx
push eax
lea ecx, [esp + 0x18]
call fcn.004a70e4
mov edi, eax
add ebp, 0xfffffffe
lea ecx, [esp + 0x74]
push ebp
push ecx
lea ecx, [esp + 0x18]
mov byte [esp + 0x2054], 0x15
call fcn.004a7219
push edi
lea edx, [esp + 0x98]
push eax
push edx
mov byte [esp + 0x2058], 0x16
call fcn.004a9e02
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 0x17
call fcn.004a9d0c
lea ecx, [esp + 0x94]
mov byte [esp + 0x204c], 0x16
call fcn.004a9c1f
lea ecx, [esp + 0x74]
mov byte [esp + 0x204c], 0x15
call fcn.004a9c1f
mov byte [esp + 0x204c], 6
lea ecx, [esp + 0x8c]
call fcn.004a9c1f
lea eax, [esp + 0x18]
push eax
lea ecx, [esi + 8]
call fcn.004a9d0c
mov edi, dword [esp + 0x28]
inc dword [esp + 0x20]
jmp 0x43c415
test eax, eax
je 0x43c418
mov eax, dword [ebx]
mov ecx, dword [ecx + 8]
add eax, 0x10
mov eax, dword [eax]
push eax
push ecx
call fcn.00474eb8
add esp, 8
test eax, eax
jne 0x43c418
mov eax, dword [ebx]
mov ecx, dword [edi]
add eax, 0x14
add ecx, 0xc
mov eax, dword [eax]
mov ecx, dword [ecx]
push eax
push ecx
call fcn.00474eb8
add esp, 8
test eax, eax
jne 0x43c418
mov ecx, dword [edi]
mov eax, dword [ecx + 0x20]
cmp eax, 1
jne 0x43c31f
push 0x4fef48
lea edx, [esp + 0x80]
push 0x4f06b8
push edx
call fcn.004a9edc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 0x18
call fcn.004a9d0c
lea ecx, [esp + 0x7c]
mov byte [esp + 0x204c], 6
call fcn.004a9c1f
mov eax, dword [ebx]
lea ecx, [esp + 0x60]
add eax, 0x18
push eax
push 0x4ee4fc
push ecx
call fcn.004a9edc
push 0x4ee4f8
lea edx, [esp + 0x5c]
push eax
push edx
mov byte [esp + 0x2058], 0x19
call fcn.004a9e68
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 0x1a
call fcn.004a9feb
lea ecx, [esp + 0x58]
mov byte [esp + 0x204c], 0x19
call fcn.004a9c1f
mov byte [esp + 0x204c], 6
lea ecx, [esp + 0x60]
jmp 0x43c3c8
cmp eax, 2
jne 0x43c358
push 0x4fef44
lea eax, [esp + 0x6c]
push 0x4f06b8
push eax
call fcn.004a9edc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 0x1b
call fcn.004a9d0c
mov byte [esp + 0x204c], 6
lea ecx, [esp + 0x68]
jmp 0x43c3c8
cmp eax, 3
jne 0x43c391
push 0x4fef3c
lea ecx, [esp + 0x3c]
push 0x4f06b8
push ecx
call fcn.004a9edc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 0x1c
call fcn.004a9d0c
mov byte [esp + 0x204c], 6
lea ecx, [esp + 0x38]
jmp 0x43c3c8
cmp eax, 4
jne 0x43c3cd
push 0x4fef40
lea edx, [esp + 0x44]
push 0x4f06b8
push edx
call fcn.004a9edc
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 0x1d
call fcn.004a9d0c
mov byte [esp + 0x204c], 6
lea ecx, [esp + 0x40]
call fcn.004a9c1f
lea eax, [esp + 0x18]
lea ecx, [esp + 0x10]
push eax
lea edx, [esp + 0x50]
push ecx
push edx
call fcn.004a9e02
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x2050], 0x1e
call fcn.004a9d0c
lea ecx, [esp + 0x4c]
mov byte [esp + 0x204c], 6
call fcn.004a9c1f
lea eax, [esp + 0x18]
lea ecx, [esi + 8]
push eax
call fcn.004a9d0c
inc dword [esp + 0x20]
add ebx, 4
add edi, 4
mov dword [esp + 0x28], edi
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x43bbbf
mov ecx, dword [esp + 0x2014]
lea eax, [ecx - 1]
test eax, eax
jl 0x43c58d
lea esi, [esp + eax*4 + 0x1074]
lea edi, [eax + 1]
mov bl, 0x20
push str.REGKEY:__
lea ecx, [esp + 0x18]
call fcn.004a9d5c
mov edx, dword [esi]
cmp dword [edx + 8], 0xffffffff
je 0x43c568
push 0x4f06b8
lea ecx, [esp + 0x18]
call fcn.004a9faf
mov ecx, dword [esi]
lea eax, [esp + 0x9c]
push 0xa
push eax
mov edx, dword [ecx + 8]
push edx
call fcn.0047656e
add esp, 0xc
lea eax, [esp + 0x9c]
lea ecx, [esp + 0x14]
push eax
call fcn.004a9faf
push 0x4f06b8
lea ecx, [esp + 0x18]
call fcn.004a9faf
mov edx, dword [esi]
lea ecx, [esp + 0x9c]
push 0xa
push ecx
mov eax, dword [edx + 0xc]
push eax
call fcn.0047656e
add esp, 0xc
lea ecx, [esp + 0x9c]
push ecx
lea ecx, [esp + 0x18]
call fcn.004a9faf
mov edx, dword [esi]
lea eax, [esp + 0x4c]
add edx, 0x10
push edx
push 0x4f1754
push eax
call fcn.004a9edc
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2050], 0x1f
call fcn.004a9feb
lea ecx, [esp + 0x4c]
mov byte [esp + 0x204c], 6
call fcn.004a9c1f
mov ecx, dword [esi]
lea edx, [esp + 0x38]
add ecx, 0x14
push ecx
push 0x4eea6c
push edx
call fcn.004a9edc
push 0x4ee4f8
push eax
lea eax, [esp + 0x48]
mov byte [esp + 0x2054], bl
push eax
call fcn.004a9e68
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x2050], 0x21
call fcn.004a9feb
lea ecx, [esp + 0x40]
mov byte [esp + 0x204c], bl
call fcn.004a9c1f
lea ecx, [esp + 0x38]
mov byte [esp + 0x204c], 6
call fcn.004a9c1f
push ecx
lea edx, [esp + 0x18]
mov ecx, esp
mov dword [esp + 0x54], esp
push edx
call fcn.004a9994
mov ecx, 0x4fee30
call fcn.00421b40
sub esi, 4
dec edi
jne 0x43c449
mov ecx, dword [esp + 0x34]
call fcn.0043aba0
lea ecx, [esp + 0x18]
mov byte [esp + 0x204c], 4
call fcn.004a9c1f
lea ecx, [esp + 0x1c]
mov byte [esp + 0x204c], 3
call fcn.004a9c1f
lea ecx, [esp + 0xb0]
mov byte [esp + 0x204c], 2
call fcn.00446d10
lea ecx, [esp + 0x24]
mov byte [esp + 0x204c], 1
call fcn.004a9c1f
lea ecx, [esp + 0x14]
mov byte [esp + 0x204c], 0
call fcn.004a9c1f
lea ecx, [esp + 0x10]
mov dword [esp + 0x204c], 0xffffffff
call fcn.004a9c1f
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x2044]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x2040
ret
lea ecx, [esp + 0x18]
mov byte [esp + 0x204c], 4
call fcn.004a9c1f
lea ecx, [esp + 0x1c]
mov byte [esp + 0x204c], 3
call fcn.004a9c1f
lea ecx, [esp + 0xb0]
mov byte [esp + 0x204c], 2
call fcn.00446d10
lea ecx, [esp + 0x24]
mov byte [esp + 0x204c], 1
call fcn.004a9c1f
lea ecx, [esp + 0x14]
mov byte [esp + 0x204c], 0
call fcn.004a9c1f
lea ecx, [esp + 0x10]
mov dword [esp + 0x204c], 0xffffffff
call fcn.004a9c1f
xor eax, eax
jmp 0x43c606