Function at 0x43b670
Capabilities:
Check os version
Hide graphical window
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53b88b
mov eax, dword fs:[0]
push eax
sub esp, 0x1f4
mov eax, dword [0x58d984]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1fc], ecx
mov eax, dword [ebp + 8]
add ecx, 4
mov ebx, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0xc
mov dword [ebp - 0x200], ecx
mov dword [ecx], eax
call ebx
push 0xb
mov esi, eax
call ebx
mov edi, dword [sym.imp.USER32.dll_LoadImageW]
push 0x8000
push esi
push eax
push 1
push 0xc9
push 0x400000
call edi
push eax
mov eax, dword [ebp - 0x200]
push 1
push 0x80
push dword [eax]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x32
call ebx
push 0x31
mov esi, eax
call ebx
push 0x8000
push esi
push eax
push 1
push 0xc9
push 0x400000
call edi
mov edi, dword [ebp - 0x200]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 0
push 0x80
push dword [edi]
call ebx
push str.tb_bottom
push 0
push 0x8002
push dword [edi]
call ebx
push 0
push 0x58f794
push 0x58f758
push 0
push eax
call fcn.0050e825
mov esi, dword [ebp - 0x1fc]
add esp, 0x14
push str.lb_desc
push 0
push 0x8002
mov dword [esi + 0x18], eax
push dword [edi]
call ebx
push 0
push 0x58f778
push 0x58f758
push 0
push eax
call fcn.0050e825
add esp, 0x14
mov dword [esi + 0x20], eax
push str.lb_insting
push 0
push 0x8002
push dword [edi]
call ebx
push 0
push 0x58f778
push 0x58f758
push 0
push eax
call fcn.0050e825
add esp, 0x14
mov dword [esi + 0x24], eax
push str.pg_insting
push 0
push 0x8002
push dword [edi]
call ebx
push 0
push 0x58f7b4
push 0x58f758
push 0
push eax
call fcn.0050e825
add esp, 0x14
mov dword [esi + 0x1c], eax
call fcn.00419df0
push str.lb_folder
push 0
push 0x8002
push dword [edi]
mov dword [ebp - 0x200], eax
call ebx
push 0
push 0x58f778
push 0x58f758
push 0
push eax
call fcn.0050e825
mov esi, eax
add esp, 0x14
test esi, esi
je 0x43b830
mov ecx, dword [esi]
mov ebx, dword [ebp - 0x200]
push ebx
mov edx, dword [ecx + 0x12c]
mov ecx, esi
call edx
mov ecx, dword [esi]
push ebx
mov eax, dword [ecx + 0xa8]
mov ecx, esi
call eax
call fcn.0041a000
test al, al
je 0x43b840
push str.vb_noinst
jmp 0x43b85b
call fcn.0041a1d0
test al, al
je 0x43b856
call fcn.0041a750
mov ebx, dword [ebp - 0x1fc]
jmp 0x43b86c
push str.vb_inst
mov ebx, dword [ebp - 0x1fc]
mov ecx, dword [ebx + 0x18]
mov eax, dword [ecx]
call dword [eax + 0x1a0]
push 0
mov ecx, edi
call fcn.0043ae00
push 5
push dword [edi]
call dword [sym.imp.USER32.dll_ShowWindow]
cmp byte [0x58ce68], 0
je 0x43b9d0
push 0x5979d0
mov dword [0x5979d0], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x43b957
push 0x40
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.0050ce60
add esp, 0xc
mov dword [ebp - 0x1fc], 1
lea eax, [ebp - 0x200]
mov dword [ebp - 0x200], 0x40
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x1fc]
push eax
push 0x5472d4
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x43b923
movsx eax, byte [ebp - 0x50]
sub eax, 0x30
mov dword [0x5979e0], 2
mov dword [0x5979d4], eax
lea eax, [ebp - 0x4e]
push eax
call fcn.0051745c
mov ecx, eax
add esp, 4
mov dword [0x5979d8], ecx
jmp 0x43b95d
call dword [sym.imp.KERNEL32.dll_GetVersion]
movzx ecx, ax
shr ecx, 8
mov byte [ebp - 0x1f5], 4
cmp byte [ebp - 0x1f5], al
movzx edx, al
sbb eax, eax
mov dword [0x5979d4], edx
neg eax
mov dword [0x5979d8], ecx
inc eax
mov dword [0x5979e0], eax
jmp 0x43b963
mov ecx, dword [0x5979d8]
mov edx, dword [0x5979d4]
cmp edx, 6
ja 0x43b96f
jne 0x43b9c9
cmp ecx, 2
jb 0x43b9c9
push 0x110
lea eax, [ebp - 0x188]
push 0
push eax
call fcn.0050ce60
add esp, 0xc
mov dword [ebp - 0x18c], 0x114
push str.RtlGetVersion
push str.ntdll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x43b9c9
lea ecx, [ebp - 0x18c]
push ecx
call eax
test eax, eax
jne 0x43b9c9
mov ecx, 0x45
lea esi, [ebp - 0x18c]
mov edi, 0x5979d0
rep movsd dword es:[edi], dword [esi]
mov byte [0x58ce68], 0
mov ecx, 0x45
lea edi, [ebp - 0x18c]
mov esi, 0x5979d0
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0x188], 5
jne 0x43bb86
cmp dword [ebp - 0x184], 1
jb 0x43bb86
xor eax, eax
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 7
mov word [ebp - 0x1f4], ax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1c8], 7
mov word [ebp - 0x1dc], ax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b0], 7
mov word [ebp - 0x1c4], ax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], 7
mov word [ebp - 0x1ac], ax
mov dword [ebp - 4], eax
mov ecx, 0x597d74
mov eax, dword [ebx + 4]
mov dword [ebp - 0x190], eax
lea eax, [ebp - 0x68]
push str.STRID_CONVERT_INST_OS_ERROR
push eax
mov byte [ebp - 0x194], 1
call fcn.0041eed0
mov esi, eax
lea eax, [ebp - 0x1dc]
cmp eax, esi
je 0x43badf
mov ecx, eax
call fcn.00403110
mov ecx, dword [esi]
mov dword [ebp - 0x1dc], ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0x1d8], ecx
mov eax, dword [esi + 8]
mov dword [ebp - 0x1d4], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x1d0], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x1cc], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x1c8], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x68]
call fcn.00403110
push str.STRID_CONVERT_KNOWN
lea eax, [ebp - 0x68]
mov ecx, 0x597d74
push eax
call fcn.0041eed0
mov esi, eax
lea eax, [ebp - 0x1ac]
cmp eax, esi
je 0x43bb55
mov ecx, eax
call fcn.00403110
mov ecx, dword [esi]
mov dword [ebp - 0x1ac], ecx
mov ecx, dword [esi + 4]
mov dword [ebp - 0x1a8], ecx
mov eax, dword [esi + 8]
mov dword [ebp - 0x1a4], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x1a0], eax
mov eax, dword [esi + 0x10]
mov dword [ebp - 0x19c], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x198], eax
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x68]
call fcn.00403110
lea eax, [ebp - 0x1f4]
push eax
call fcn.0043c8b0
add esp, 4
push 0
push 0
push 0x10
push dword [ebx + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
lea ecx, [ebp - 0x1f4]
call fcn.0043a450
lea eax, [ebp - 0x78]
mov dword [ebp - 0x78], vtable.std::_Func_impl_no_alloc_class__lambda_7c4c6ed5a0859dd5d31dc2ccccf54245___void__struct_tinyui::_Msg__.0
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x54], eax
push eax
push 0x25
push str.btn_instexit
mov ecx, ebx
mov dword [ebp - 4], 1
call fcn.0043ad10
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x43bbc3
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x78]
cmp ecx, eax
setne al
push eax
call edx
lea eax, [ebp - 0x78]
mov dword [ebp - 0x78], vtable.std::_Func_impl_no_alloc_class__lambda_0e4dcaa6d8d3a04b6232bf2d3bd84f2c___void__struct_tinyui::_Msg__.0
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x54], eax
push eax
push 0x25
push str.btn_inst
mov ecx, ebx
mov dword [ebp - 4], 2
call fcn.0043ad10
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x43bc00
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x78]
cmp ecx, eax
setne al
push eax
call edx
lea eax, [ebp - 0x78]
mov dword [ebp - 0x78], vtable.std::_Func_impl_no_alloc_class__lambda_bd44a7aa963cc08746c61b1ff90b1be1___void__struct_tinyui::_Msg__.0
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x54], eax
push eax
push 0x25
push str.btn_browse
mov ecx, ebx
mov dword [ebp - 4], 3
call fcn.0043ad10
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x43bc3d
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x78]
cmp ecx, eax
setne al
push eax
call edx
lea eax, [ebp - 0x78]
mov dword [ebp - 0x78], vtable.std::_Func_impl_no_alloc_class__lambda_55426f493057affdb39206470ef76222___void__struct_tinyui::_Msg__.0
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x54], eax
push eax
push 0x25
push str.btn_use_agreement
mov ecx, ebx
mov dword [ebp - 4], 4
call fcn.0043ad10
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x43bc7a
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x78]
cmp ecx, eax
setne al
push eax
call edx
lea eax, [ebp - 0x78]
mov dword [ebp - 0x78], vtable.std::_Func_impl_no_alloc_class__lambda_07602ba691e76741e5b950dae70fba10___void__struct_tinyui::_Msg__.0
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x54], eax
push eax
push 0x25
push str.btn_privacy
mov ecx, ebx
mov dword [ebp - 4], 5
call fcn.0043ad10
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x43bcb7
mov eax, dword [ecx]
mov edx, dword [eax + 0x10]
lea eax, [ebp - 0x78]
cmp ecx, eax
setne al
push eax
call edx
lea eax, [ebp - 0x78]
mov dword [ebp - 0x78], vtable.std::_Func_impl_no_alloc_class__lambda_a8caec076ee511328afbfc6e1b0aac9b___void__struct_tinyui::_Msg__.0
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x54], eax
push eax
push 0x25
push str.btn_inst_finishi_exit
mov ecx, ebx
mov dword [ebp - 4], 6
call fcn.0043ad10
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x43bcf5
mov edx, dword [ecx]
lea eax, [ebp - 0x78]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004eda39
mov esp, ebp
pop ebp
ret 4