Function at 0x4341f4
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x68
mov dword [ebp - 0x10], 0x81fa5c77
xor edi, edi
mov eax, dword [ebp - 0x10]
cmp eax, 0x15670043
jg 0x434276
cmp eax, 0xc70dd2bc
jle 0x4342f8
cmp eax, 0xf402c2ce
jle 0x4343e7
cmp eax, 0x8fe7f8c
jle 0x434542
cmp eax, 0xe32c472
jle 0x434897
cmp eax, 0x12d405c5
jg 0x434cff
cmp eax, 0xe32c473
je 0x434d7d
cmp eax, 0xefa0553
jne 0x434206
mov eax, dword [ebp - 0x44]
push dword [ebp - 0x34]
push eax
push dword [ebp - 0x58]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0x8db0eb53
jmp 0x434206
cmp eax, 0x42455598
jle 0x43436f
cmp eax, 0x686a1596
jle 0x434433
cmp eax, 0x6f1ffd6a
jle 0x4345a8
cmp eax, 0x7301b97b
jg 0x4348e2
cmp eax, 0x72585e73
jg 0x434d55
cmp eax, 0x6f1ffd6b
je 0x434d89
cmp eax, 0x7204a13c
jne 0x434206
push 8
push 0x468a36
push 0x33
push dword [ebp - 0x50]
call fcn.004356d0
add esp, 0x10
push dword [ebp - 0x2c]
push dword [ebp - 0x50]
push dword [ebp - 0x4c]
push dword [ebp - 0x30]
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
mov dword [ebp - 0x10], 0x9b6f65db
jmp 0x434206
cmp eax, 0xa5c6a2a9
jg 0x43449c
cmp eax, 0x9e2a8d5a
jg 0x4345f4
cmp eax, 0x94131199
jg 0x43493e
cmp eax, 0x817a63f3
je 0x434dad
cmp eax, 0x81fa5c77
je 0x434ded
cmp eax, 0x8db0eb53
jne 0x434206
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0xfe]
imul ecx, ecx
imul edx, ecx, 0x9b7
dec edx
add eax, 0xfffffeb3
shr eax, 0xc
mov dword [ebp - 0x18], eax
mov eax, 0xc43f69aa
cmp ecx, edx
je 0x435649
mov eax, 0x3773f20f
jmp 0x435649
cmp eax, 0x228425fe
jg 0x4344ee
cmp eax, 0x1aeaaa3d
jg 0x434664
cmp eax, 0x16ae0528
jg 0x43496b
cmp eax, 0x15670044
je 0x434dff
cmp eax, 0x15e52e6e
je 0x434e3b
cmp eax, 0x1690da95
jne 0x434206
mov esi, dword [ebp - 0x14]
shl esi, 3
and esi, 0x3fff8
lea eax, [esi - 0x5a]
mov dword [ebp - 0x14], eax
push eax
call fcn.004341f4
add esp, 4
mov eax, 0x216f6113
cmp esi, 0x84
jae 0x435649
mov eax, 0x9e2a8d5b
jmp 0x435649
cmp eax, 0xdb9c6040
jg 0x4346d3
cmp eax, 0xd2e72069
jg 0x434998
cmp eax, 0xc70dd2bd
je 0x434e70
cmp eax, 0xc889b023
je 0x434e85
cmp eax, 0xd17bb27d
jne 0x434206
mov eax, dword [ebp - 0x20]
mov dword [eax], 0x800
mov dword [ebp - 0x10], 0x9413119a
jmp 0x434206
cmp eax, 0x4d75da68
jg 0x434714
cmp eax, 0x46954574
jg 0x4349d8
cmp eax, 0x42455599
je 0x434eb3
cmp eax, 0x4443c68a
je 0x434ebf
cmp eax, 0x461a3d5d
jne 0x434206
mov eax, dword [ebp - 0x14]
shl eax, 0x1e
add eax, 0x400260ad
mov dword [ebp - 0x14], eax
push 0x32cf
push eax
push 0xd68
push 0x4141
call fcn.004356d0
add esp, 0x10
mov dword [ebp - 0x10], 0xc309d5c3
jmp 0x434206
cmp eax, 0xb9cab83f
jg 0x4347bb
cmp eax, 0xb0c64cea
jg 0x434a05
cmp eax, 0xa5c6a2aa
je 0x434ed4
cmp eax, 0xa792b3d7
je 0x434f06
cmp eax, 0xacdf80aa
jne 0x434206
imul eax, dword [ebp - 0x18], 0x3c80
add eax, 0x170ac
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xbc15ecb5
jmp 0x434206
cmp eax, 0x36c04363
jg 0x43482e
cmp eax, 0x2c3208a0
jg 0x434a72
cmp eax, 0x228425ff
je 0x434f40
cmp eax, 0x27a97148
je 0x434f74
cmp eax, 0x2af00f3c
jne 0x434206
mov eax, dword [ebp - 0x18]
shl eax, 0xf
add eax, 0x738000
shr eax, 0xb
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x4162420e
jmp 0x434206
cmp eax, 0xff656b4a
jg 0x434ac6
cmp eax, 0xf402c2cf
je 0x434f86
cmp eax, 0xf5632118
je 0x434f9f
cmp eax, 0xf88e80a2
jne 0x434206
mov ebx, dword [ebp - 0x14]
mov eax, 0xfffffde8
add ebx, eax
mov dword [ebp - 0x14], ebx
push ebx
call fcn.004341f4
add esp, 4
push ebx
call fcn.004341f4
add esp, 4
mov eax, 0xff656b4b
cmp ebx, 0x9f
jl 0x435649
mov eax, 0x6e54c1dc
jmp 0x435649
cmp eax, 0x6d6a4e8f
jg 0x434b02
cmp eax, 0x686a1597
je 0x434fd1
cmp eax, 0x69262631
je 0x434fdd
cmp eax, 0x6c4a7760
jne 0x434206
push 4
push 0x468a66
push 0xb
push dword [ebp - 0x54]
call fcn.004356d0
add esp, 0x10
mov dword [ebp - 0x10], 0x6f1ffd6b
jmp 0x434206
cmp eax, 0xa4255ff9
jg 0x434b4e
cmp eax, 0x9e2a8d5b
je 0x43501f
cmp eax, 0x9f55d049
je 0x435043
cmp eax, 0xa2362863
jne 0x434206
mov ebx, dword [ebp - 0x14]
shl ebx, 0x1f
add ebx, 0x82840000
mov dword [ebp - 0x14], ebx
push ebx
push 0x2c0a
push 0x17ef
push 0x5cd1
call fcn.004356d0
add esp, 0x10
push ebx
push 0x465a
push 0x4c18
push 0x3261
call fcn.004356d0
add esp, 0x10
jmp 0x434d49
cmp eax, 0x20baa0c3
jg 0x434b81
cmp eax, 0x1aeaaa3e
je 0x43504f
cmp eax, 0x1bccc98a
je 0x434d49
cmp eax, 0x1bd97aa5
jne 0x434206
push 4
push 0x4689c8
push 5
push dword [ebp - 0x4c]
call fcn.004356d0
add esp, 0x10
sub esp, 0x68
mov eax, esp
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov word [eax + 0x66], 0
push 0x66
push 0x4689d0
push dword [ebp - 0x50]
call fcn.004441d0
add esp, 0xc
mov dword [ebp - 0x10], 0x7204a13c
jmp 0x434206
cmp eax, 0xe95f12ed
jg 0x434bde
cmp eax, 0xdb9c6041
je 0x43508e
cmp eax, 0xe65521be
je 0x43509d
cmp eax, 0xe67b9927
jne 0x434206
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], 0x3cf3a764
jmp 0x434206
cmp eax, 0x53958b13
jg 0x434c2f
cmp eax, 0x4d75da69
je 0x4350bb
cmp eax, 0x4dedc3c3
je 0x4350ef
cmp eax, 0x51b7edda
jne 0x434206
push eax
sub esp, 0x18
mov ebx, esp
mov word [ebx + 0x18], 0
push 0x18
push 0x468a80
push ebx
call fcn.004441d0
add esp, 0xc
push 8
push 0x468a98
push 0xc
push ebx
call fcn.004356d0
add esp, 0x10
push 0x1a
push ebx
push dword [ebp - 0x40]
call fcn.004441d0
add esp, 0xc
push dword [ebp - 0x5c]
call fcn.00450770
add esp, 4
push eax
push dword [ebp - 0x5c]
push dword [ebp - 0x40]
push dword [ebp + 8]
call fcn.0041fbc8
add esp, 0x10
push dword [ebp - 0x44]
call fcn.0044fd4c
add esp, 4
push dword [ebp - 0x5c]
call fcn.0044fd4c
add esp, 4
mov dword [ebp - 0x10], 0xd2e7206a
jmp 0x434206
cmp eax, 0xc309d5c2
jg 0x434c85
cmp eax, 0xb9cab840
je 0x435114
cmp eax, 0xbc15ecb5
je 0x43512e
cmp eax, 0xbdce7d44
jne 0x434206
mov eax, dword [ebp - 0x6c]
mov word [eax], 0
mov eax, dword [ebp - 0x58]
movzx ecx, word [0x468a76]
mov word [eax + 8], cx
mov ecx, dword [0x468a72]
mov dword [eax + 4], ecx
mov ecx, dword [0x468a6e]
mov dword [eax], ecx
push 4
push 0x468a78
push 5
push dword [ebp - 0x58]
call fcn.004356d0
add esp, 0x10
mov dword [ebp - 0x10], 0xefa0553
jmp 0x434206
cmp eax, 0x3910c13f
jg 0x434cd2
cmp eax, 0x36c04364
je 0x43515e
cmp eax, 0x3773f20f
je 0x43518d
cmp eax, 0x380a7605
jne 0x434206
imul esi, dword [ebp - 0x14], 0x47b800
add esi, 0xe51b0000
mov dword [ebp - 0x14], esi
push esi
call fcn.004341f4
add esp, 4
push 0x466e
push 0x4eb7
push 0x3e76
push esi
call fcn.004356d0
add esp, 0x10
mov dword [ebp - 0x10], 0x81fa5c77
jmp 0x434206
cmp eax, 0x8fe7f8d
je 0x4351a1
cmp eax, 0x99aefd2
je 0x4351c1
cmp eax, 0xacde224
jne 0x434206
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xf003f
mov eax, dword [ebp - 0x20]
push 2
push 0xc800
call fcn.0044f313
add esp, 8
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x10], 0x1bccc98a
jmp 0x434206
cmp eax, 0x7301b97c
je 0x4351e1
cmp eax, 0x744fc4ce
je 0x4351f6
cmp eax, 0x7d360db5
jne 0x434206
mov ebx, dword [ebp - 0x14]
shl ebx, 5
add ebx, 0xec0
mov eax, ebx
shr eax, 6
add eax, 0xffffffa5
mov dword [ebp - 0x14], eax
push eax
call fcn.004341f4
add esp, 4
mov eax, 0xa2362863
cmp ebx, 0x3a40
jb 0x435649
mov eax, 0x48ec64c0
jmp 0x435649
cmp eax, 0x9413119a
je 0x435205
cmp eax, 0x98439b28
je 0x435232
cmp eax, 0x9b6f65db
jne 0x434206
mov dword [ebp - 0x10], 0x36c04364
jmp 0x434206
cmp eax, 0x16ae0529
je 0x435250
cmp eax, 0x16ccf7b2
je 0x435272
cmp eax, 0x18704591
jne 0x434206
mov dword [ebp - 0x10], 0x42455599
jmp 0x434206
cmp eax, 0xd2e7206a
je 0x435296
cmp eax, 0xd56e4003
je 0x4352a8
cmp eax, 0xd9327505
jne 0x434206
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0x72585e74
mov dword [ebp - 0x24], 1
jmp 0x434206
cmp eax, 0x46954575
je 0x4352c7
cmp eax, 0x48ec64c0
je 0x4352f1
cmp eax, 0x4d2f2d5b
jne 0x434206
mov dword [ebp - 0x10], 0xc889b023
jmp 0x434206
cmp eax, 0xb0c64ceb
je 0x43532a
cmp eax, 0xb51aa46e
je 0x435345
cmp eax, 0xb54cdf44
jne 0x434206
imul ebx, dword [ebp - 0x14], 0x15c00000
shr ebx, 5
or ebx, 4
mov dword [ebp - 0x14], ebx
push ebx
push 0x4dea
push 0x4ab8
push 0x4eb2
call fcn.004356d0
add esp, 0x10
push ebx
call fcn.004341f4
add esp, 4
mov eax, 0x9e2a8d5b
cmp ebx, 0xb1
jae 0x435649
mov eax, 0xbdce7d44
jmp 0x435649
cmp eax, 0x2c3208a1
je 0x435369
cmp eax, 0x2ca1adc8
je 0x43537e
cmp eax, 0x30010aee
jne 0x434206
mov ebx, dword [ebp - 0x14]
shr ebx, 0xd
add ebx, 0xffffff76
and ebx, 0xffffffc0
mov dword [ebp - 0x14], ebx
push ebx
call fcn.004341f4
add esp, 4
mov eax, 0x81fa5c77
cmp ebx, 0x70
jl 0x435649
mov eax, 0x1bd97aa5
jmp 0x435649
cmp eax, 0xff656b4b
je 0x435393
cmp eax, 0x4774cb5
je 0x4353b4
cmp eax, 0x71df35d
jne 0x434206
imul eax, dword [ebp - 0x18], 0x36400000
add eax, 0xfe17bf7c
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xd9327505
jmp 0x434206
cmp eax, 0x6d6a4e90
je 0x4353ca
cmp eax, 0x6d8041ac
je 0x4353e4
cmp eax, 0x6e54c1dc
jne 0x434206
mov eax, dword [ebp - 0x14]
shr eax, 0xf
mov ecx, eax
shl ecx, 4
sub ecx, eax
sub ecx, eax
shr ecx, 8
mov eax, 0xe67b9927
and ecx, 0x1e00
mov dword [ebp - 0x14], ecx
jne 0x4352e7
jmp 0x435649
cmp eax, 0xa4255ffa
je 0x435431
cmp eax, 0xa4d39bfc
je 0x435472
cmp eax, 0xa5421aee
jne 0x434206
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0xd17bb27d
jmp 0x434206
cmp eax, 0x20baa0c4
je 0x4354a3
cmp eax, 0x216f6113
je 0x4354c6
cmp eax, 0x21a94854
jne 0x434206
imul eax, dword [ebp - 0x18], 0x47
add eax, 0xffffc418
shr eax, 3
imul ecx, eax, 0x980
imul eax, eax
imul edx, eax, 0x5ef9
dec edx
add ecx, 0xfff72180
mov dword [ebp - 0x18], ecx
mov ecx, 0x16ae0529
cmp edx, eax
je 0x43549b
mov ecx, 0x14afc217
jmp 0x43549b
cmp eax, 0xe95f12ee
je 0x4354e4
cmp eax, 0xea7b87b1
je 0x435501
cmp eax, 0xf22e2b3d
jne 0x434206
push eax
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov word [eax + 0x16], 0
push 0x16
push 0x468a50
push dword [ebp - 0x54]
call fcn.004441d0
add esp, 0xc
mov dword [ebp - 0x10], 0x15e52e6e
jmp 0x434206
cmp eax, 0x53958b14
je 0x43553c
cmp eax, 0x5f2129fd
je 0x4355a1
cmp eax, 0x62fdb108
jne 0x434206
mov eax, dword [ebp - 0x18]
lea ecx, [eax + 0xc4]
imul ecx, ecx
imul edx, ecx, 0x279d
dec edx
shl eax, 0xc
add eax, 0xfffe5fa9
mov dword [ebp - 0x18], eax
mov eax, 0xb0c64ceb
cmp edx, ecx
je 0x435649
mov eax, 0x51b7edda
jmp 0x435649
cmp eax, 0xc309d5c3
je 0x4355d5
cmp eax, 0xc410ea73
je 0x4355f6
cmp eax, 0xc43f69aa
jne 0x434206
mov ecx, dword [ebp - 0x14]
shl ecx, 6
add ecx, 0x77
mov eax, ecx
shr eax, 4
mov dword [ebp - 0x14], eax
mov eax, 0x1aeaaa3e
cmp ecx, 0x240
jb 0x435649
mov eax, 0xa5c6a2aa
jmp 0x435649
cmp eax, 0x3910c140
je 0x435651
cmp eax, 0x3cf3a764
je 0x43565d
cmp eax, 0x4162420e
jne 0x434206
mov dword [ebp - 0x10], 0xb9cab840
jmp 0x434206
cmp eax, 0x12d405c6
je 0x43567d
cmp eax, 0x14afc217
jne 0x434206
mov eax, dword [ebp - 0x4c]
mov word [eax + 0xa], 0
mov eax, dword [ebp - 0x4c]
movzx ecx, word [0x4689c6]
mov word [eax + 8], cx
mov ecx, dword [0x4689c2]
mov dword [eax + 4], ecx
mov ecx, dword [0x4689be]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0x1bd97aa5
jmp 0x434206
mov dword [ebp - 0x10], 0xf402c2cf
jmp 0x434206
cmp eax, 0x727d9e32
jne 0x4356a1
push dword [ebp - 0x44]
call fcn.0041f6c6
add esp, 4
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], 0x62fdb108
jmp 0x434206
mov dword [ebp - 0x10], 0xc70dd2bd
jmp 0x434206
push 0x18
push dword [ebp - 0x54]
push dword [ebp - 0x3c]
call fcn.004441d0
add esp, 0xc
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x10], 0x6d6a4e90
jmp 0x434206
imul esi, dword [ebp - 0x14], 0xfcc00000
add esi, 0xfdd10400
mov dword [ebp - 0x14], esi
push 0x51a6
push 0x4b91
push esi
push 0x2463
call fcn.004356d0
add esp, 0x10
mov eax, 0xb9cab840
cmp esi, 0x10
jge 0x435649
mov eax, 0xc889b023
jmp 0x435649
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0x20baa0c4
jmp 0x434206
imul eax, dword [ebp - 0x18], 0xb1
add eax, 0x45
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x6753
dec edx
and eax, 0xfffff
lea eax, [eax*4 - 0x47]
mov dword [ebp - 0x18], eax
mov eax, 0x69262631
cmp ecx, edx
je 0x435649
mov eax, 0x4dedc3c3
jmp 0x435649
mov eax, dword [ebp - 0x18]
shr eax, 1
imul ecx, eax, 0x4b0
imul eax, eax
imul edx, eax, 0x4af5
dec edx
add ecx, 0x258
mov dword [ebp - 0x18], ecx
mov ecx, 0xe67b9927
cmp edx, eax
je 0x43549b
mov ecx, 0x6c4a7760
jmp 0x43549b
mov eax, dword [ebp - 0x20]
mov dword [eax], 0x800
mov dword [ebp - 0x10], 0xdb9c6041
jmp 0x434206
push dword [ebp - 0x20]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0
push dword [ebp - 0x3c]
push dword [ebp - 0x68]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ecx, 0x3910c140
test eax, eax
je 0x43549b
mov ecx, 0x3773f20f
jmp 0x43549b
mov dword [ebp - 0x10], 0x727d9e32
jmp 0x434206
push eax
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], 0x2af00f3c
jmp 0x434206
mov eax, dword [ebp - 0x14]
shr eax, 2
imul ecx, eax, 0xa4
mov eax, ecx
shr eax, 8
add eax, 0xd
mov dword [ebp - 0x14], eax
mov eax, 0x817a63f3
cmp ecx, 0xd100
jae 0x435649
mov eax, 0xb54cdf44
jmp 0x435649
mov eax, dword [ebp - 0x14]
shl eax, 9
mov ebx, 0x99aefd2
add eax, 0xffff2600
mov dword [ebp - 0x14], eax
je 0x434f20
mov ebx, 0xb9cab840
push 0x4f40
push eax
push 0xb08
push 0x3ca6
call fcn.004356d0
add esp, 0x10
mov dword [ebp - 0x10], ebx
jmp 0x434206
mov eax, dword [ebp - 0x18]
add eax, 0xffffffce
shr eax, 2
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x6abb
dec edx
add eax, 0xffffff34
mov dword [ebp - 0x18], eax
mov eax, 0x5f2129fd
cmp ecx, edx
je 0x435649
mov eax, 0x99aefd2
jmp 0x435649
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0x744fc4ce
jmp 0x434206
cmp dword [ebp - 0x44], 0
mov eax, 0x8fe7f8d
je 0x435649
mov eax, 0x686a1597
jmp 0x435649
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0xeb]
imul ecx, ecx
imul edx, ecx, 0x6a6b
add eax, 0xffffff63
dec edx
mov dword [ebp - 0x18], eax
mov eax, 0xf402c2cf
cmp ecx, edx
je 0x435649
mov eax, 0x2c3208a1
jmp 0x435649
mov dword [ebp - 0x10], 0x2ca1adc8
jmp 0x434206
mov ebx, dword [ebp - 0x14]
shl ebx, 0xb
add ebx, 0xfffb9800
mov dword [ebp - 0x14], ebx
push ebx
push 0x5b28
push 0x2463
push 0x1f14
call fcn.004356d0
add esp, 0x10
mov eax, 0x216f6113
cmp ebx, 0xea
jl 0x435649
mov eax, 0xd17bb27d
jmp 0x435649
push eax
sub esp, 0x7fc
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0xe95f12ee
jmp 0x434206
mov dword [ebp - 0x10], 0x27a97148
jmp 0x434206
mov eax, dword [ebp - 0x14]
lea esi, [eax + eax*2]
add esi, 0x2a1
mov dword [ebp - 0x14], esi
push esi
push 0x241d
push 0x180b
push 0x43b8
call fcn.004356d0
add esp, 0x10
mov eax, 0x30010aee
cmp esi, 0xd
jae 0x435649
mov eax, 0xb51aa46e
jmp 0x435649
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], 0xf22e2b3d
jmp 0x434206
mov eax, dword [ebp - 0x18]
shl eax, 0xd
add eax, 0xfffffff2
shr eax, 8
add eax, 0x2e
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x18704591
jmp 0x434206
mov eax, dword [ebp - 0x18]
shr eax, 5
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x2797
shl eax, 0xd
dec edx
add eax, 0x152000
mov dword [ebp - 0x18], eax
mov eax, 0x7d360db5
cmp edx, ecx
je 0x435649
mov eax, 0x7301b97c
jmp 0x435649
mov eax, dword [ebp - 0x1c]
push dword [eax]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
push dword [ebp - 0x28]
call esi
mov dword [ebp - 0x10], 0x72585e74
mov dword [ebp - 0x24], 0
jmp 0x434206
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [eax], edi
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0x9f55d049
jmp 0x434206
lea eax, [ebp - 0x28]
push eax
push 0x20019
push 0
push dword [ebp - 0x48]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0xea7b87b1
test eax, eax
je 0x43549b
mov ecx, 0xa4255ffa
jmp 0x43549b
push dword [ebp - 0x1c]
push 0x20019
push 0
push dword [ebp - 0x30]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov ecx, 0xa4d39bfc
test eax, eax
je 0x43549b
mov ecx, 0x15670044
jmp 0x43549b
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x10], 0xd56e4003
jmp 0x434206
mov eax, dword [ebp - 0x18]
shr eax, 1
imul ecx, eax, 0x33000
imul eax, eax
imul edx, eax, 0x7fb1
dec edx
add ecx, 0xffb9e07c
jmp 0x435452
push 4
push 0x4689b6
push 0x33
push dword [ebp - 0x48]
call fcn.004356d0
add esp, 0x10
mov dword [ebp - 0x10], 0xacdf80aa
jmp 0x434206
mov eax, dword [ebp - 0x48]
mov word [eax + 0x66], 0
mov dword [ebp - 0x10], 0x216f6113
jmp 0x434206
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], 0xacde224
jmp 0x434206
push edi
push edi
push edi
push edi
push dword [ebp - 0x20]
push dword [ebp - 0x2c]
push dword [ebp - 0x64]
push dword [ebp - 0x28]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov ecx, 0xf5632118
test eax, eax
je 0x43549b
mov ecx, 0xe65521be
jmp 0x43549b
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
add eax, 0xa
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x10], 0xbdce7d44
jmp 0x434206
imul eax, dword [ebp - 0x14], 0xf9d800
add eax, 0xffffffb1
mov dword [ebp - 0x14], eax
push eax
call fcn.004341f4
add esp, 4
mov dword [ebp - 0x10], 0x7301b97c
jmp 0x434206
mov ecx, dword [ebp - 0x14]
add ecx, 0x2c
mov eax, ecx
shr eax, 0xb
mov dword [ebp - 0x14], eax
mov eax, 0x7204a13c
cmp ecx, 0x2f000
jae 0x4353aa
jmp 0x435649
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x10], 0x71df35d
jmp 0x434206
push dword [ebp - 0x70]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x10], 0xa5421aee
mov dword [ebp - 0x60], eax
jmp 0x434206
mov ecx, dword [ebp - 0x14]
add ecx, 0x3e
shr ecx, 0xd
add ecx, 0xffffffcd
mov dword [ebp - 0x14], ecx
mov eax, 0x99aefd2
cmp ecx, 0xcf
jae 0x435649
mov eax, 0xacde224
jmp 0x435649
mov ebx, dword [ebp - 0x14]
add ebx, 0xffffffa5
shr ebx, 0xa
and ebx, 0xfffffff0
mov dword [ebp - 0x14], ebx
push ebx
call fcn.004341f4
add esp, 4
push ebx
call fcn.004341f4
add esp, 4
mov eax, 0xacde224
cmp ebx, 0x3d
jae 0x435649
mov eax, 0x53958b14
jmp 0x435649
imul eax, dword [ebp - 0x14], 0x251c
add eax, 0xfff7e1e0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xd17bb27d
jmp 0x434206
mov eax, dword [ebp - 0x14]
and eax, 0xffffffc0
shl eax, 0xb
lea eax, [eax + eax*2]
mov dword [ebp - 0x14], eax
push eax
call fcn.004341f4
add esp, 4
mov dword [ebp - 0x10], 0xacde224
jmp 0x434206
push eax
sub esp, 8
mov eax, esp
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0x21a94854
jmp 0x434206
push eax
sub esp, 0x64
mov eax, esp
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], 0x4d75da69
jmp 0x434206
imul ecx, dword [ebp - 0x14], 0x1d00
mov dword [ebp - 0x14], ecx
mov eax, 0x216f6113
test ecx, ecx
je 0x435649
mov eax, 0x2ca1adc8
jmp 0x435649
imul eax, dword [ebp - 0x18], 0xc4000000
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x9e2a8d5b
jmp 0x434206
mov eax, dword [ebp - 0x18]
shl eax, 9
add eax, 0x15800
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x4d2f2d5b
jmp 0x434206
mov ebx, dword [ebp - 0x14]
mov esi, ebx
shr esi, 0xf
add esi, 0xffffff64
mov dword [ebp - 0x14], esi
push esi
call fcn.004341f4
add esp, 4
push 0x16df
push 0x1c87
push esi
push 0x2916
call fcn.004356d0
add esp, 0x10
mov eax, 0xacde224
cmp ebx, 0x660000
jb 0x435649
mov eax, 0x4443c68a
jmp 0x435649
mov eax, dword [ebp - 0x18]
add eax, 0x70
mov ecx, eax
shr ecx, 0xe
imul eax, eax
imul edx, eax, 0x6363
dec edx
imul ecx, ecx, 0xbe5
add ecx, 0xfffa789c
mov dword [ebp - 0x18], ecx
mov ecx, 0x4443c68a
cmp edx, eax
je 0x435463
mov ecx, 0x72585e74
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x24], 0
jmp 0x434206
mov eax, dword [ebp - 0x18]
add eax, 0x5a
mov ecx, eax
shr ecx, 0xb
imul eax, eax
imul edx, eax, 0x2209
dec edx
add ecx, 0x63
mov dword [ebp - 0x18], ecx
mov ecx, 0x12d405c6
cmp eax, edx
je 0x43549b
mov ecx, 0xe32c473
mov dword [ebp - 0x10], ecx
jmp 0x434206
push eax
sub esp, 0x7fc
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0x800
mov eax, esp
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], 0x4774cb5
jmp 0x434206
push 0x66
push 0x468950
push dword [ebp - 0x48]
call fcn.004441d0
add esp, 0xc
mov dword [ebp - 0x10], 0x228425ff
jmp 0x434206
mov eax, dword [ebp - 0x18]
shl eax, 0xf
add eax, 0xff494000
shr eax, 5
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xe67b9927
jmp 0x434206
mov eax, dword [ebp - 0x18]
lea ecx, [eax - 0x34]
imul ecx, ecx
imul edx, ecx, 0x86ed
dec edx
imul eax, eax, 0x47b8
add eax, 0x36a128
mov dword [ebp - 0x18], eax
mov eax, 0x46954575
cmp edx, ecx
je 0x43552d
mov eax, 0xa5421aee
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x60], 0
jmp 0x434206
imul eax, dword [ebp - 0x14], 0x40a0
add eax, 0x4856
shr eax, 1
imul ebx, eax, 0x33
add ebx, 0xffffff20
mov dword [ebp - 0x14], ebx
push 0x5be9
push ebx
push 0x95a
push 0x145
call fcn.004356d0
add esp, 0x10
push 0x3c8e
push 0x4a21
push ebx
push 0x2799
call fcn.004356d0
add esp, 0x10
mov eax, 0x4443c68a
cmp ebx, 0xae
jb 0x435649
mov eax, 0x81fa5c77
jmp 0x435649
mov esi, dword [ebp - 0x14]
add esi, 0x2a
mov ebx, esi
shr ebx, 4
mov dword [ebp - 0x14], ebx
push ebx
call fcn.004341f4
add esp, 4
push ebx
call fcn.004341f4
add esp, 4
mov eax, 0x7301b97c
cmp esi, 0x500
jb 0x435649
mov eax, 0xf88e80a2
jmp 0x435649
imul ecx, dword [ebp - 0x14], 0xd7
add ecx, 0x26a2
mov dword [ebp - 0x14], ecx
mov eax, 0xa792b3d7
cmp ecx, 0x5f
jb 0x435649
mov eax, 0x6d8041ac
jmp 0x435649
mov eax, dword [ebp - 0x14]
shl eax, 2
and eax, 0x1ffffffc
imul ebx, eax, 0x67
add ebx, 0xffffffd9
mov dword [ebp - 0x14], ebx
push 0x8a9
push 0x1cdc
push 0x5743
push ebx
call fcn.004356d0
add esp, 0x10
push 0xfee
push 0x57c2
push 0x19d2
push ebx
call fcn.004356d0
add esp, 0x10
mov eax, 0x99aefd2
cmp ebx, 0x42
jge 0x435649
mov eax, 0xe67b9927
mov dword [ebp - 0x10], eax
jmp 0x434206
mov dword [ebp - 0x10], 0x98439b28
jmp 0x434206
mov eax, dword [ebp - 0x18]
shr eax, 4
imul eax, eax, 0x65b8
add eax, 0xffb9ca4c
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0x4443c68a
jmp 0x434206
imul eax, dword [ebp - 0x14], 0x166000
add eax, 0xffffff3c
mov dword [ebp - 0x14], eax
push eax
call fcn.004341f4
add esp, 4
mov dword [ebp - 0x10], 0x380a7605
jmp 0x434206
cmp eax, 0x72585e74
jne 0x434206
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret