Function at 0x43bb70
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59dd1d
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x639354]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 4], 0
push dword [eax]
lea eax, [ebp - 0x1c]
push dword [0x613098]
push eax
call fcn.00448a10
add esp, 0xc
mov byte [ebp - 4], 2
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x43bf21
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x1c]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov byte [ebp - 4], 3
test eax, eax
je 0x43bbf2
push eax
call ebx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0
push eax
push 0x20019
push 0
push edi
push dword [ebp + 8]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], 0
test eax, eax
je 0x43bcdd
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea ecx, [ebp - 0x18]
push ecx
push 0
lea ecx, [ebp - 0x20]
push ecx
push 0
push str.uifile
push eax
call edi
mov eax, dword [ebp - 0x20]
cmp eax, 1
je 0x43bc4b
cmp eax, 2
jne 0x43bcd3
lea ecx, [ebp - 0x14]
call fcn.00429c20
mov edx, dword [ebp - 0x18]
shr edx, 1
add edx, 1
js 0x43bf35
mov esi, dword [ebp - 0x14]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x43bc81
push edx
lea ecx, [ebp - 0x14]
call fcn.00429eb0
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x18]
push eax
push esi
lea eax, [ebp - 0x20]
push eax
push 0
push str.uifile
push dword [ebp - 0x10]
call edi
test eax, eax
jne 0x43bcd3
mov eax, dword [ebp - 0x18]
xor ecx, ecx
shr eax, 1
mov word [esi + eax*2], cx
test esi, esi
jne 0x43bcad
xor eax, eax
jmp 0x43bcc1
push dword [esi - 8]
push esi
call fcn.0056b163
add esp, 8
test eax, eax
js 0x43bf35
cmp eax, dword [esi - 8]
jg 0x43bf35
xor ecx, ecx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x43bcdd
push eax
call ebx
mov dword [ebp - 0x10], 0
mov byte [ebp - 4], 4
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x43bf2b
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x18], edi
lea eax, [esi - 0x10]
mov byte [ebp - 4], 5
or esi, 0xffffffff
mov dword [ebp - 0x24], eax
cmp dword [eax + 4], 0
jne 0x43bdbf
mov eax, dword [ebp + 0x10]
push dword [eax]
mov eax, dword [ebp + 0xc]
push dword [eax]
lea eax, [ebp - 0x18]
push str.res__s_s.kui
push eax
call fcn.0042c720
mov eax, dword [ebp - 0x10]
add esp, 0x10
mov edi, dword [ebp - 0x1c]
test eax, eax
je 0x43bd41
push eax
call ebx
push 0
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0
push eax
mov eax, dword [ebp + 8]
push 0
push 0xf003f
push 0
push 0
push 0
push edi
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x18]
test eax, eax
je 0x43bdb3
mov edx, edi
lea ecx, [edx + 2]
mov dword [ebp + 0xc], ecx
jmp 0x43bd80
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x43bd80
sub edx, dword [ebp + 0xc]
sar edx, 1
lea ecx, [edx*2 + 2]
push ecx
push edi
push 1
push 0
push str.uifile
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x43bdb3
push eax
call ebx
mov dword [ebp - 0x10], 0
jmp 0x43beba
mov byte [ebp - 4], 6
call fcn.00429250
mov ecx, eax
test ecx, ecx
je 0x43bf3f
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0xc]
mov byte [ebp - 4], 7
push dword [eax]
lea eax, [ebp - 0x20]
push str.res__sribbon.kui
push eax
call fcn.0042c720
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00438ec0
add esp, 0x14
test al, al
je 0x43bea0
mov eax, dword [ebp + 0xc]
push dword [eax]
lea eax, [ebp - 0x18]
push str.res__songmani.kui
push eax
call fcn.0042c720
mov eax, dword [ebp - 0x10]
add esp, 0xc
mov edi, dword [ebp - 0x1c]
test eax, eax
je 0x43be2f
push eax
call ebx
push 0
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0
push eax
mov eax, dword [ebp + 8]
push 0
push 0xf003f
push 0
push 0
push 0
push edi
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x18]
test eax, eax
je 0x43be99
mov edx, edi
lea ecx, [edx + 2]
mov dword [ebp + 0xc], ecx
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x43be66
sub edx, dword [ebp + 0xc]
sar edx, 1
lea ecx, [edx*2 + 2]
push ecx
push edi
push 1
push 0
push str.uifile
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x43be99
push eax
call ebx
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x20]
mov eax, esi
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43beba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
mov eax, esi
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x43bed1
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov eax, esi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x43bee8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1c]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], esi
dec esi
test esi, esi
jg 0x43bf00
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x43bf0a
push ecx
call ebx
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.00429b60
push 0x80004005
call fcn.00429b60
push 0x80070057
call fcn.00429b60
push 0x80004005
call fcn.00429b60
int3