Function at 0x43b480
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x80
mov dword [ebp - 0x10], 0xb9be0274
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
mov eax, dword [ebp - 0x10]
cmp eax, 0x4fe690
jle 0x43b516
cmp eax, 0x41dfdb79
jle 0x43b57e
cmp eax, 0x619ba9b2
jg 0x43b648
cmp eax, 0x558f48b4
jle 0x43b7b6
cmp eax, 0x5f8156ec
jg 0x43ba83
cmp eax, 0x59fa0db4
jg 0x43beb5
cmp eax, 0x558f48b5
je 0x43c398
cmp eax, 0x5799f7e5
jne 0x43b49b
mov ecx, dword [ebp - 0x14]
mov eax, 0xfffffe85
add ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, 0xe4fa5c7a
cmp ecx, 0x8b
jl 0x43cbe2
mov eax, 0x7beaea4b
jmp 0x43cbe2
cmp eax, 0xbb200e1a
jle 0x43b5d5
cmp eax, 0xda3e6def
jg 0x43b68e
cmp eax, 0xc9f1c1e3
jle 0x43b800
cmp eax, 0xd2b4ccbc
jg 0x43bae0
cmp eax, 0xceeb20c4
jg 0x43beff
cmp eax, 0xc9f1c1e4
je 0x43c3b5
cmp eax, 0xcde90dc9
jne 0x43b49b
imul eax, dword [ebp - 0x18], 0x6b00
add eax, 0xffffca15
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x84469960
jmp 0x43b49b
cmp eax, 0x27bdab99
jle 0x43b6e0
cmp eax, 0x305d3718
jle 0x43b838
cmp eax, 0x3c8ab27b
jg 0x43bb5a
cmp eax, 0x326519b9
jg 0x43bf2f
cmp eax, 0x305d3719
je 0x43c3c4
cmp eax, 0x30904810
jne 0x43b49b
mov eax, dword [ebp - 0x48]
add eax, 0x66
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0x3c8ab27c
jmp 0x43b49b
cmp eax, 0xa0987a72
jle 0x43b752
cmp eax, 0xa8d16cdd
jle 0x43b89d
cmp eax, 0xb5c6f61d
jg 0x43bba8
cmp eax, 0xb223582f
jg 0x43bf5a
cmp eax, 0xa8d16cde
je 0x43c3d6
cmp eax, 0xb114a1e3
jne 0x43b49b
push dword [ebp - 0x20]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0
push dword [ebp - 0x3c]
push dword [ebp - 0x84]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, 0x86bbd9ff
test eax, eax
je 0x43ca2b
mov ecx, 0xeb3a1bbd
jmp 0x43ca2b
cmp eax, 0x70c44a5f
jle 0x43b929
cmp eax, 0x7b338ee0
jg 0x43bbf1
cmp eax, 0x72506787
jg 0x43bf90
cmp eax, 0x70c44a60
je 0x43c3f6
cmp eax, 0x70f09109
jne 0x43b49b
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0xc1669378
jmp 0x43b49b
cmp eax, 0xeafef8d7
jg 0x43b973
cmp eax, 0xe4fa5c79
jg 0x43bc27
cmp eax, 0xe107af36
jg 0x43bfbb
cmp eax, 0xda3e6df0
je 0x43c427
cmp eax, 0xdbd7bab4
jne 0x43b49b
imul eax, dword [ebp - 0x18], 0x18400000
add eax, 0xf69a500
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xc9f1c1e4
jmp 0x43b49b
cmp eax, 0xf510d63
jg 0x43b9d0
cmp eax, 0x8f0cc60
jle 0x43bc68
cmp eax, 0xd469e6b
jg 0x43bfdd
cmp eax, 0x8f0cc61
je 0x43c433
cmp eax, 0xd21419f
jne 0x43b49b
mov eax, dword [ebp - 0x18]
mov ecx, 0xfffffe5c
add eax, ecx
mov ecx, eax
imul ecx, eax
shl eax, 0xd
imul edx, ecx, 0x323d
dec edx
add eax, 0xffffff2f
shr eax, 6
mov dword [ebp - 0x18], eax
mov eax, 0x5080623c
cmp edx, ecx
je 0x43cc14
mov eax, 0xebc0c12f
jmp 0x43cc14
cmp eax, 0x929cf1d6
jg 0x43ba14
cmp eax, 0x86bbd9fe
jle 0x43bca7
cmp eax, 0x8af531aa
jg 0x43c01c
cmp eax, 0x86bbd9ff
je 0x43c43f
cmp eax, 0x89437d73
jne 0x43b49b
mov eax, dword [ebp - 0x18]
shl eax, 9
add eax, 0xffff2c00
shr eax, 0xc
and eax, 0xfffffffe
imul eax, eax, 0x2139
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xe5ceb192
mov dword [ebp - 0x24], 0
jmp 0x43b49b
cmp eax, 0x4979ff2f
jle 0x43bcd4
cmp eax, 0x4f2935d0
jg 0x43c065
cmp eax, 0x4979ff30
je 0x43c44b
cmp eax, 0x4be6d1fe
jne 0x43b49b
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov word [eax + 0xa], 0
mov dword [ebp - 0x10], 0x2bf5fa41
jmp 0x43b49b
cmp eax, 0xc45fd1d7
jle 0x43bd01
cmp eax, 0xc55de403
jg 0x43c090
cmp eax, 0xc45fd1d8
je 0x43c46f
cmp eax, 0xc465bf16
jne 0x43b49b
mov dword [ebp - 0x10], 0x867303d0
jmp 0x43b49b
cmp eax, 0x2e4a7f6f
jle 0x43bd3a
cmp eax, 0x2f191a06
jg 0x43c0b9
cmp eax, 0x2e4a7f70
je 0x43c48d
cmp eax, 0x2f04d3b6
jne 0x43b49b
mov ecx, dword [ebp - 0x18]
mov eax, 0xffffff2f
add ecx, eax
mov eax, ecx
shl eax, 0xf
imul ecx, ecx
imul edx, ecx, 0x446f
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x30904810
cmp edx, ecx
je 0x43b88e
mov eax, 0xe5ceb192
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0
jmp 0x43b49b
cmp eax, 0xa278fe7a
jle 0x43bd78
cmp eax, 0xa5ce58a0
jg 0x43c10e
cmp eax, 0xa278fe7b
je 0x43c4a5
cmp eax, 0xa3136c98
jne 0x43b49b
mov eax, dword [ebp - 0x14]
shr eax, 0xd
imul esi, eax, 0x27b80
add esi, 0xe2
mov dword [ebp - 0x14], esi
push 0x3ad4
push 0x5dc0
push 0x1efb
push esi
call fcn.0043cc50
add esp, 0x10
push 0x44da
push esi
push 0x3504
push 0x48c2
call fcn.0043cc50
add esp, 0x10
mov eax, 0x4163c8ab
cmp esi, 0xfd
jb 0x43cbe2
mov eax, 0x70c44a60
jmp 0x43cbe2
cmp eax, 0x6bf08bb7
jle 0x43bdb4
cmp eax, 0x6e68db2d
jg 0x43c173
cmp eax, 0x6bf08bb8
je 0x43c4b1
cmp eax, 0x6e025169
jne 0x43b49b
imul eax, dword [ebp - 0x18], 0xe0000
add eax, 0xde9a000
shr eax, 6
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xb5c6f61e
jmp 0x43b49b
cmp eax, 0xf4d8c38c
jle 0x43bde1
cmp eax, 0xfe2eccca
jg 0x43c1a4
cmp eax, 0xf4d8c38d
je 0x43c4cc
cmp eax, 0xf60a9ff9
jne 0x43b49b
mov eax, dword [ebp - 0x14]
lea esi, [eax*4 - 0x384]
mov eax, esi
shr eax, 8
mov dword [ebp - 0x14], eax
push eax
call fcn.0043b480
add esp, 4
mov eax, 0xb9be0274
cmp esi, 0x2400
jae 0x43ba79
jmp 0x43cbe2
cmp eax, 0x1a64fc56
jle 0x43be21
cmp eax, 0x24afbf7f
jg 0x43c1e5
cmp eax, 0x1a64fc57
je 0x43c4de
cmp eax, 0x23bc4a89
jne 0x43b49b
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xf003f
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 0xe3056842
jmp 0x43b49b
cmp eax, 0x97c373f7
jle 0x43be5b
cmp eax, 0x9d07d71f
jg 0x43c251
cmp eax, 0x97c373f8
je 0x43c503
cmp eax, 0x9b8b4ea6
jne 0x43b49b
imul esi, dword [ebp - 0x14], 0xdb
add esi, 0xb3
mov dword [ebp - 0x14], esi
push 0x1530
push esi
push 0x2988
push 0x1c65
call fcn.0043cc50
add esp, 0x10
mov eax, 0xb9be0274
cmp esi, 0xef
jb 0x43cbe2
mov eax, 0x9f79ae4b
jmp 0x43cbe2
cmp eax, 0x5fe21573
jg 0x43c27a
cmp eax, 0x5f8156ed
je 0x43c52d
cmp eax, 0x5f981636
jne 0x43b49b
push 4
push 0x471d46
push 0x33
push dword [ebp - 0x48]
call fcn.0043cc50
add esp, 0x10
lea eax, [ebp - 0x28]
push eax
push 0x20019
push 0
push dword [ebp - 0x48]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0xd21419f
jmp 0x43b49b
cmp eax, 0xd4d2b733
jg 0x43c29c
cmp eax, 0xd2b4ccbd
je 0x43c546
cmp eax, 0xd302cd08
jne 0x43b49b
mov esi, dword [ebp - 0x14]
mov eax, 0x7ff37
add esi, eax
and esi, 0x7ffff
mov dword [ebp - 0x14], esi
push esi
push 0x4416
push 0x3386
push 0x4662
call fcn.0043cc50
add esp, 0x10
push esi
push 0x5ae6
push 0x2a0f
push 0x53a9
call fcn.0043cc50
add esp, 0x10
mov eax, 0x30904810
cmp esi, 0xef
jb 0x43c8e8
jmp 0x43cbe2
cmp eax, 0x3f7e4af6
jg 0x43c2be
cmp eax, 0x3c8ab27c
je 0x43c56e
cmp eax, 0x3def8ce3
jne 0x43b49b
mov eax, dword [ebp - 0x14]
add eax, 0x69
shr eax, 2
imul ecx, eax, 0xc7
add ecx, 0x3f
mov dword [ebp - 0x14], ecx
mov eax, 0xf4d8c38d
cmp ecx, 0x79
jb 0x43cbe2
mov eax, 0x27bdab9a
jmp 0x43cbe2
cmp eax, 0xb68fd43f
jg 0x43c2f1
cmp eax, 0xb5c6f61e
je 0x43c5a1
cmp eax, 0xb6771f41
jne 0x43b49b
push 4
push 0x471d58
push 5
push dword [ebp - 0x4c]
call fcn.0043cc50
add esp, 0x10
sub esp, 0x68
mov eax, esp
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0xcde90dc9
jmp 0x43b49b
cmp eax, 0x7c7c378f
jg 0x43c33b
cmp eax, 0x7b338ee1
je 0x43c5ad
cmp eax, 0x7beaea4b
jne 0x43b49b
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x70f09109
jmp 0x43b49b
cmp eax, 0xe773e137
jle 0x43c35d
cmp eax, 0xe773e138
je 0x43c5f0
cmp eax, 0xe84db254
jne 0x43b49b
push 4
push 0x471e38
push 0xc
push dword [ebp - 0x5c]
call fcn.0043cc50
add esp, 0x10
mov dword [ebp - 0x10], 0x4f2935d1
jmp 0x43b49b
cmp eax, 0x4fe691
je 0x43c625
cmp eax, 0x304bf65
je 0x43c64c
cmp eax, 0x46dbf1f
jne 0x43b49b
imul eax, dword [ebp - 0x14], 0xfa00000
add eax, 0xffffff7b
shr eax, 0xa
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xb6771f41
jmp 0x43b49b
cmp eax, 0x839abb37
je 0x43c68c
cmp eax, 0x84469960
je 0x43c698
cmp eax, 0x867303d0
jne 0x43b49b
mov dword [ebp - 0x10], 0xb114a1e3
jmp 0x43b49b
cmp eax, 0x41dfdb7a
je 0x43c6ad
cmp eax, 0x434d8672
je 0x43c6e9
cmp eax, 0x46b8f08f
jne 0x43b49b
mov dword [ebp - 0x10], 0x5080623c
jmp 0x43b49b
cmp eax, 0xbb200e1b
je 0x43c6f5
cmp eax, 0xc1669378
je 0x43c718
cmp eax, 0xc23594ff
jne 0x43b49b
mov eax, dword [ebp - 0x1c]
push dword [eax]
call ebx
push dword [ebp - 0x28]
call ebx
mov dword [ebp - 0x10], 0x89437d73
jmp 0x43b49b
cmp eax, 0x27bdab9a
je 0x43c72a
cmp eax, 0x28d92f99
je 0x43c73e
cmp eax, 0x2bf5fa41
jne 0x43b49b
mov eax, dword [ebp - 0x18]
shl eax, 9
and eax, 0x1ffffe00
add eax, 0xffffffce
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x2f274304
jmp 0x43b49b
cmp eax, 0xa0987a73
je 0x43c755
cmp eax, 0xa0eba314
je 0x43c792
cmp eax, 0xa260c58f
jne 0x43b49b
mov eax, dword [ebp - 0x20]
mov dword [eax], 0x800
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x434d8672
jmp 0x43b49b
cmp eax, 0x619ba9b3
je 0x43c7bd
cmp eax, 0x65bbaa71
je 0x43c7e8
cmp eax, 0x6be48a12
jne 0x43b49b
mov dword [ebp - 0x10], 0xa8d16cde
jmp 0x43b49b
cmp eax, 0xeafef8d8
je 0x43c80a
cmp eax, 0xeb3a1bbd
je 0x43c819
cmp eax, 0xebc0c12f
jne 0x43b49b
cmp dword [ebp - 0x70], 0
mov eax, 0x305d3719
je 0x43be12
mov eax, 0x2f04d3b6
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x64], 0
jmp 0x43b49b
cmp eax, 0xf510d64
je 0x43c83c
cmp eax, 0x11e6c6f4
je 0x43c890
cmp eax, 0x13b9c9b0
jne 0x43b49b
cmp dword [ebp - 0x78], 0
mov eax, 0x9d07d720
je 0x43cc14
mov eax, 0x60a9cd52
jmp 0x43cc14
cmp eax, 0x929cf1d7
je 0x43c8b0
cmp eax, 0x949ea37e
je 0x43c8f2
cmp eax, 0x95ddfebf
jne 0x43b49b
mov esi, dword [ebp - 0x14]
shr esi, 0x19
add esi, 0xfffffff4
mov dword [ebp - 0x14], esi
push esi
call fcn.0043b480
add esp, 4
push esi
call fcn.0043b480
add esp, 4
mov eax, 0x929cf1d7
cmp esi, 0xc6
je 0x43cbe2
mov eax, 0x5080623c
jmp 0x43cbe2
cmp eax, 0x59fa0db5
je 0x43c90a
cmp eax, 0x5be1fd6b
jne 0x43b49b
mov eax, dword [ebp - 0x4c]
mov word [eax + 0xa], 0
mov eax, dword [ebp - 0x4c]
movzx ecx, word [0x471d56]
mov word [eax + 8], cx
mov ecx, dword [0x471d52]
mov dword [eax + 4], ecx
mov ecx, dword [0x471d4e]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0xb6771f41
jmp 0x43b49b
cmp eax, 0xceeb20c5
je 0x43c92d
cmp eax, 0xcf350614
jne 0x43b49b
mov eax, dword [ebp - 0x18]
shr eax, 4
and eax, 0x1ffff
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xf4d8c38d
jmp 0x43b49b
cmp eax, 0x326519ba
je 0x43c948
cmp eax, 0x37c82c73
jne 0x43b49b
mov dword [ebp - 0x10], 0x305d3719
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x64], eax
jmp 0x43b49b
cmp eax, 0xb2235830
je 0x43c964
cmp eax, 0xb3b593c5
jne 0x43b49b
imul ecx, dword [ebp - 0x14], 0xd6
mov dword [ebp - 0x14], ecx
mov eax, 0x5080623c
cmp ecx, 0xda
jge 0x43c886
jmp 0x43cbe2
cmp eax, 0x72506788
je 0x43c997
cmp eax, 0x78623fa6
jne 0x43b49b
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0x262c836d
jmp 0x43b49b
cmp eax, 0xe107af37
je 0x43c9a3
cmp eax, 0xe3056842
jne 0x43b49b
mov dword [ebp - 0x10], 0x619ba9b3
jmp 0x43b49b
cmp eax, 0xd469e6c
je 0x43c9c5
cmp eax, 0xe728405
jne 0x43b49b
mov eax, dword [ebp - 0x8c]
mov word [eax], 0
push 0x18
push 0x471e20
push dword [ebp - 0x5c]
call fcn.0044a890
add esp, 0xc
mov dword [ebp - 0x10], 0xe84db254
jmp 0x43b49b
cmp eax, 0x8af531ab
je 0x43c9f9
cmp eax, 0x8dae7416
jne 0x43b49b
imul eax, dword [ebp - 0x14], 0x13c0000
or eax, 0x14a0
mov dword [ebp - 0x14], eax
push eax
push 0xf7d
push 0x6119
push 0x16ef
call fcn.0043cc50
add esp, 0x10
mov dword [ebp - 0x10], 0x5be1fd6b
jmp 0x43b49b
cmp eax, 0x4f2935d1
je 0x43ca33
cmp eax, 0x5080623c
jne 0x43b49b
push eax
sub esp, 0x64
mov eax, esp
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x30904810
jmp 0x43b49b
cmp eax, 0xc55de404
je 0x43ca62
cmp eax, 0xc6b3ab54
jne 0x43b49b
mov eax, dword [ebp - 0x14]
shl eax, 2
and eax, 0xffffc
mov dword [ebp - 0x14], eax
jmp 0x43c2b2
cmp eax, 0x2f191a07
je 0x43ca7d
cmp eax, 0x2f274304
jne 0x43b49b
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x471e08]
mov word [eax + 8], cx
mov ecx, dword [0x471e04]
mov dword [eax + 4], ecx
mov ecx, dword [0x471e00]
mov dword [eax], ecx
push 4
push 0x471e0a
push 5
push dword [ebp - 0x58]
call fcn.0043cc50
add esp, 0x10
mov dword [ebp - 0x10], 0x11e6c6f4
jmp 0x43b49b
cmp eax, 0xa5ce58a1
je 0x43ca98
cmp eax, 0xa82180f2
jne 0x43b49b
mov eax, dword [ebp - 0x7c]
mov word [eax], 0
push 0x66
push 0x471d60
push dword [ebp - 0x50]
call fcn.0044a890
add esp, 0xc
push 7
push 0x471dc6
push 0x33
push dword [ebp - 0x50]
call fcn.0043cc50
add esp, 0x10
push dword [ebp - 0x2c]
push dword [ebp - 0x50]
push dword [ebp - 0x4c]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0x4fe691
jmp 0x43b49b
cmp eax, 0x6e68db2e
je 0x43cac8
cmp eax, 0x6f1ca5b1
jne 0x43b49b
push dword [ebp - 0x28]
call ebx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0xe5ceb192
mov dword [ebp - 0x24], 1
jmp 0x43b49b
cmp eax, 0xfe2ecccb
je 0x43caf0
cmp eax, 0x447e4a
jne 0x43b49b
mov ecx, dword [ebp - 0x14]
mov eax, ecx
shr eax, 0xa
add eax, 0xffffff36
mov dword [ebp - 0x14], eax
mov eax, 0xd302cd08
cmp ecx, 0x6b800
jb 0x43cbe2
mov eax, 0x1a64fc57
jmp 0x43cbe2
cmp eax, 0x24afbf80
je 0x43cb25
cmp eax, 0x262c836d
jne 0x43b49b
mov eax, dword [ebp - 0x54]
mov word [eax + 0x16], 0
push 0x16
push str.1
push dword [ebp - 0x54]
call fcn.0044a890
add esp, 0xc
push 5
push str.u
push 0xb
push dword [ebp - 0x54]
call fcn.0043cc50
add esp, 0x10
push 0x18
push dword [ebp - 0x54]
push dword [ebp - 0x3c]
call fcn.0044a890
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x10], 0xc465bf16
jmp 0x43b49b
cmp eax, 0x9d07d720
je 0x43cb4f
cmp eax, 0x9f79ae4b
jne 0x43b49b
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x10], 0xdbd7bab4
jmp 0x43b49b
cmp eax, 0x5fe21574
je 0x43cb64
cmp eax, 0x60a9cd52
jne 0x43b49b
mov dword [ebp - 0x10], 0x839abb37
jmp 0x43b49b
cmp eax, 0xd4d2b734
je 0x43cb82
cmp eax, 0xd757abe3
jne 0x43b49b
mov dword [ebp - 0x10], 0xa260c58f
jmp 0x43b49b
cmp eax, 0x3f7e4af7
je 0x43cb8e
cmp eax, 0x4163c8ab
jne 0x43b49b
push dword [ebp - 0x44]
call fcn.00424284
add esp, 4
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0xfe2ecccb
jmp 0x43b49b
cmp eax, 0xb68fd440
je 0x43cba3
cmp eax, 0xb9be0274
jne 0x43b49b
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
sub esp, 0x800
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
sub esp, 0x7fc
mov eax, esp
mov dword [ebp - 0x30], eax
sub esp, 0x800
mov eax, esp
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], 0xcf350614
jmp 0x43b49b
cmp eax, 0x7c7c3790
je 0x43cbea
cmp eax, 0x7d2825a7
jne 0x43b49b
mov dword [ebp - 0x10], 0x78623fa6
jmp 0x43b49b
cmp eax, 0xe4fa5c7a
jne 0x43cc1c
mov eax, dword [ebp - 0x14]
add eax, 0x5e
shr eax, 0xb
imul ecx, eax, 0x3600
add ecx, 0xffc81a00
mov dword [ebp - 0x14], ecx
mov eax, 0xa0eba314
cmp ecx, 0x13
jl 0x43cbe2
mov eax, 0xb3b593c5
jmp 0x43cbe2
mov eax, dword [ebp - 0x18]
shl eax, 6
add eax, 0xffffdac0
shr eax, 0xa
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x7d2825a7
jmp 0x43b49b
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x7beaea4b
jmp 0x43b49b
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0xd757abe3
jmp 0x43b49b
mov eax, dword [ebp - 0x1c]
push dword [eax]
call ebx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x10], 0x6bf08bb8
jmp 0x43b49b
imul esi, dword [ebp - 0x14], 0xb2
add esi, 0x5f42
mov dword [ebp - 0x14], esi
push esi
call fcn.0043b480
add esp, 4
mov eax, 0x5f981636
cmp esi, 0x5c
jl 0x43cbe2
mov eax, 0xb2235830
jmp 0x43cbe2
mov dword [ebp - 0x10], 0x23bc4a89
jmp 0x43b49b
mov dword [ebp - 0x10], 0x9f79ae4b
jmp 0x43b49b
mov dword [ebp - 0x10], 0x4be6d1fe
jmp 0x43b49b
imul eax, dword [ebp - 0x14], 0x7c00
add eax, 0xffbcac00
mov dword [ebp - 0x14], eax
push eax
call fcn.0043b480
add esp, 4
mov dword [ebp - 0x10], 0xa0987a73
jmp 0x43b49b
push 0x66
push 0x471ce0
push dword [ebp - 0x48]
call fcn.0044a890
add esp, 0xc
mov dword [ebp - 0x10], 0x5f981636
jmp 0x43b49b
mov eax, dword [ebp - 0x20]
mov dword [eax], 0x800
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], 0x558f48b5
jmp 0x43b49b
mov dword [ebp - 0x10], 0xc23594ff
jmp 0x43b49b
imul eax, dword [ebp - 0x18], 0x3a800
add eax, 0x2490000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x37c82c73
jmp 0x43b49b
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0xe107af37
jmp 0x43b49b
push edi
push edi
push edi
push edi
push dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp - 0x68]
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x10], 0x72506788
jmp 0x43b49b
imul ecx, dword [ebp - 0x14], 0xa7
mov eax, ecx
shr eax, 0xa
mov dword [ebp - 0x14], eax
mov eax, 0xf4d8c38d
cmp ecx, 0x1dc00
jb 0x43cbe2
mov eax, 0x9b8b4ea6
jmp 0x43cbe2
cmp dword [ebp - 0x80], 0
mov eax, 0x6e025169
je 0x43cc14
mov eax, 0xceeb20c5
jmp 0x43cc14
imul ecx, dword [ebp - 0x14], 0x4f
add ecx, 0x4379
mov dword [ebp - 0x14], ecx
mov eax, 0xe107af37
cmp ecx, 0xa7
jb 0x43cbe2
mov eax, 0xa260c58f
jmp 0x43cbe2
mov eax, dword [ebp - 0x18]
add eax, 0xffffffd5
shr eax, 5
lea ecx, [eax - 0xc]
imul eax, eax
shr ecx, 0x19
imul edx, eax, 0x4385
dec edx
mov dword [ebp - 0x18], ecx
mov ecx, 0x5799f7e5
cmp eax, edx
je 0x43ca2b
mov ecx, 0x27bdab9a
jmp 0x43ca2b
mov dword [ebp - 0x10], 0x2e4a7f70
jmp 0x43b49b
imul esi, dword [ebp - 0x14], 0x52e0
add esi, 0x48840
shr esi, 0xb
add esi, 0xffffff28
mov dword [ebp - 0x14], esi
push esi
call fcn.0043b480
add esp, 4
push esi
call fcn.0043b480
add esp, 4
mov eax, 0x5be1fd6b
cmp esi, 0x6d
jae 0x43cbe2
mov eax, 0xa82180f2
jmp 0x43cbe2
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0xc6]
imul ecx, ecx
imul edx, ecx, 0x4a07
dec edx
shl eax, 5
add eax, 0xffffe700
mov dword [ebp - 0x18], eax
mov eax, 0xb68fd440
cmp ecx, edx
je 0x43cc14
mov eax, 0x5be1fd6b
jmp 0x43cc14
push dword [ebp - 0x1c]
push 0x20019
push 0
push dword [ebp - 0x30]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x10], 0x5f8156ed
jmp 0x43b49b
imul esi, dword [ebp - 0x14], 0x160
add esi, 0xffff68c0
mov dword [ebp - 0x14], esi
push esi
push 0x3334
push 0x3309
push 0x7e1
call fcn.0043cc50
add esp, 0x10
mov eax, 0x5f981636
cmp esi, 0x1a
jl 0x43cbe2
mov eax, 0x5fe21574
jmp 0x43cbe2
mov dword [ebp - 0x10], 0x4163c8ab
jmp 0x43b49b
mov eax, dword [ebp - 0x50]
add eax, 0x66
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x10], 0xa82180f2
jmp 0x43b49b
mov eax, dword [ebp - 0x14]
lea esi, [eax + eax]
add esi, 0xfffffe52
mov dword [ebp - 0x14], esi
push 0x1c81
push esi
push 0x1904
push 0x4c25
call fcn.0043cc50
add esp, 0x10
push esi
call fcn.0043b480
add esp, 4
mov dword [ebp - 0x10], 0xb9be0274
jmp 0x43b49b
mov dword [ebp - 0x10], 0xd4d2b734
jmp 0x43b49b
mov eax, dword [ebp - 0x14]
shl eax, 2
and eax, 0x1fff800
imul eax, eax, 0x5e80
shr eax, 8
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x2f191a07
jmp 0x43b49b
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0xeafef8d8
jmp 0x43b49b
mov eax, dword [ebp - 0x6c]
mov word [eax], 0
mov dword [ebp - 0x10], 0xc45fd1d8
jmp 0x43b49b
push dword [ebp - 0x60]
call fcn.0045b0dc
add esp, 4
mov dword [ebp - 0x10], 0x6f1ca5b1
jmp 0x43b49b
imul esi, dword [ebp - 0x14], 0xcb4c0000
add esi, 0x25ac0000
mov dword [ebp - 0x14], esi
push esi
call fcn.0043b480
add esp, 4
push esi
call fcn.0043b480
add esp, 4
mov eax, 0x3def8ce3
cmp esi, 0xa2
jge 0x43cbe2
mov eax, 0x46dbf1f
jmp 0x43cbe2
mov eax, dword [ebp - 0x14]
shr eax, 1
and eax, 0x3ffff
imul eax, eax, 0x1182
shr eax, 0xd
mov dword [ebp - 0x14], eax
push eax
call fcn.0043b480
add esp, 4
mov dword [ebp - 0x10], 0x30904810
jmp 0x43b49b
push 2
push 0xc800
call fcn.0045a6a3
add esp, 8
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
mov eax, 0x24afbf80
je 0x43cc14
mov eax, 0x65bbaa71
jmp 0x43cc14
imul eax, dword [ebp - 0x18], 0x4e
add eax, 0x4eea
and eax, 0x1fffe
add eax, 0xffffff75
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x46b8f08f
jmp 0x43b49b
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0xda3e6df0
jmp 0x43b49b
mov eax, dword [ebp - 0x18]
shl eax, 0x1b
lea eax, [eax + eax*8]
or eax, 0xeb
imul eax, eax, 0x77
add eax, 0xffffffec
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x6be48a12
jmp 0x43b49b
mov eax, dword [ebp - 0x14]
shr eax, 2
lea esi, [eax + eax*4]
shl esi, 0xa
add esi, 0xf400
and esi, 0xffff8000
mov dword [ebp - 0x14], esi
push 0x3712
push esi
push 0xae7
push 0x24bd
call fcn.0043cc50
add esp, 0x10
push esi
call fcn.0043b480
add esp, 4
mov eax, 0x4be6d1fe
cmp esi, 0x16
jl 0x43cbe2
mov eax, 0xb9be0274
jmp 0x43cbe2
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x34]
push eax
push dword [ebp - 0x58]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0x6be48a12
jmp 0x43b49b
mov eax, dword [ebp - 0x14]
lea esi, [eax + eax*8]
add esi, 0xfffffecc
mov dword [ebp - 0x14], esi
push 0x4e6a
push 0x3cc
push 0x368e
push esi
call fcn.0043cc50
add esp, 0x10
mov eax, 0x8dae7416
cmp esi, 0x82
jge 0x43cbe2
mov eax, 0xf4d8c38d
jmp 0x43cbe2
mov eax, dword [ebp - 0x5c]
add eax, 0x18
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x10], 0xe728405
jmp 0x43b49b
mov eax, dword [ebp - 0x14]
shr eax, 3
and eax, 0x1ffffe00
mov dword [ebp - 0x14], eax
push eax
call fcn.0043b480
add esp, 4
mov dword [ebp - 0x10], 0xf60a9ff9
jmp 0x43b49b
imul eax, dword [ebp - 0x18], 0xaaa00
add eax, 0xffff99ee
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xa278fe7b
jmp 0x43b49b
push 0x1a
push dword [ebp - 0x5c]
push dword [ebp - 0x40]
call fcn.0044a890
add esp, 0xc
mov dword [ebp - 0x10], 0xc55de404
jmp 0x43b49b
mov eax, dword [ebp - 0x14]
shr eax, 5
imul esi, eax, 0xa3
mov dword [ebp - 0x14], esi
push esi
call fcn.0043b480
add esp, 4
mov eax, 0x5080623c
cmp esi, 0xef
jb 0x43cbe2
mov eax, 0x13b9c9b0
jmp 0x43cbe2
mov dword [ebp - 0x10], 0x13b9c9b0
jmp 0x43b49b
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x3c], eax
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x8af531ab
jmp 0x43b49b
push dword [ebp - 0x60]
call fcn.0045bb70
add esp, 4
push eax
push dword [ebp - 0x60]
push dword [ebp - 0x40]
push dword [ebp + 8]
call fcn.0042466c
add esp, 0x10
push dword [ebp - 0x44]
call fcn.0045b0dc
add esp, 4
mov dword [ebp - 0x10], 0x28d92f99
jmp 0x43b49b
imul eax, dword [ebp - 0x18], 0x85
add eax, 0xe8
mov ecx, eax
shr ecx, 4
imul eax, eax
imul edx, eax, 0x33b9
dec edx
add ecx, 0xcc
mov dword [ebp - 0x18], ecx
mov ecx, 0xb9be0274
cmp eax, edx
je 0x43ca2b
mov ecx, 0x8f0cc61
mov dword [ebp - 0x10], ecx
jmp 0x43b49b
mov eax, dword [ebp - 0x18]
mov ecx, eax
shr ecx, 7
shr eax, 8
imul ecx, ecx
imul edx, ecx, 0x1f73
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xe107af37
cmp edx, ecx
je 0x43cc14
mov eax, 0x326519ba
jmp 0x43cc14
imul eax, dword [ebp - 0x18], 0xca0
add eax, 0xf8
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xd469e6c
jmp 0x43b49b
imul eax, dword [ebp - 0x14], 0x57000
add eax, 0xfceb9000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xf510d64
jmp 0x43b49b
mov eax, dword [ebp - 0x14]
lea esi, [eax + eax*4]
add esi, 0xffffffa2
mov dword [ebp - 0x14], esi
push esi
call fcn.0043b480
add esp, 4
mov eax, 0x59fa0db5
cmp esi, 0xe2
jb 0x43cc14
mov eax, 0xe107af37
jmp 0x43cc14
mov ecx, dword [ebp - 0x14]
mov eax, 0xffffff07
add ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, 0xebc0c12f
cmp ecx, 0xaf
jge 0x43cbe2
mov eax, 0x447e4a
jmp 0x43cbe2
mov eax, dword [ebp - 0x18]
shr eax, 0xf
lea ecx, [eax - 0xd2]
imul ecx, ecx
imul edx, ecx, 0x573d
dec edx
add eax, 0xffffff2f
mov dword [ebp - 0x18], eax
mov eax, 0x6e68db2e
cmp edx, ecx
je 0x43cc14
mov eax, 0x3f7e4af7
jmp 0x43cc14
mov eax, dword [ebp - 0x18]
add eax, 0x59
mov ecx, eax
imul ecx, eax
shr eax, 7
imul edx, ecx, 0x634d
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0x97c373f8
cmp ecx, edx
jne 0x43b889
jmp 0x43b88e
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0xe773e138
jmp 0x43b49b
mov ecx, dword [ebp - 0x14]
mov eax, 0xffffff22
add ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, 0xa260c58f
cmp ecx, 0xa
jge 0x43cbe2
mov eax, 0x619ba9b3
jmp 0x43cbe2
mov dword [ebp - 0x10], 0x1a64fc57
jmp 0x43b49b
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x10], 0x7c7c3790
jmp 0x43b49b
mov eax, dword [ebp - 0x14]
shr eax, 4
and eax, 0xfffffffe
imul eax, eax, 0x58
shr eax, 2
imul esi, eax, 0x37
mov dword [ebp - 0x14], esi
push 0x2b7
push 0x21f1
push esi
push 0x570b
call fcn.0043cc50
add esp, 0x10
mov eax, 0xd2b4ccbd
cmp esi, 0x8f
jae 0x43cbe2
mov eax, 0x304bf65
mov dword [ebp - 0x10], eax
jmp 0x43b49b
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0x90]
imul ecx, ecx
imul edx, ecx, 0x6195
dec edx
add eax, 0x4f
shr eax, 8
mov dword [ebp - 0x18], eax
mov eax, 0xa3136c98
cmp edx, ecx
je 0x43cc14
mov eax, 0x949ea37e
mov dword [ebp - 0x10], eax
jmp 0x43b49b
cmp eax, 0xe5ceb192
jne 0x43b49b
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret