Function at 0xffc4331
Capabilities:
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x328
mov ecx, dword [ebp + 8]
mov eax, dword [0xffebc20]
push edi
xor edi, edi
cmp ecx, edi
mov dword [ebp - 4], eax
mov dword [ebp - 0x324], ecx
je 0xffc4677
lea eax, [ebp - 0x104]
mov dword [ebp - 0x30c], eax
mov eax, 0x80
push ebx
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], eax
lea eax, [ebp - 0x204]
push esi
mov dword [ebp - 0x31c], eax
lea eax, [ebp - 0x308]
push eax
push ecx
lea edx, [ebp - 0x84]
push 0x80000000
mov dword [ebp - 0x308], edi
mov dword [ebp - 0x310], edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0xffc4577
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueA]
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x104]
push eax
push edi
push dword [ebp - 0x308]
call esi
cmp eax, edi
mov ebx, 0xea
je 0xffc43de
cmp eax, ebx
jne 0xffc4577
cmp eax, ebx
jne 0xffc441f
inc dword [ebp - 0x318]
mov ecx, dword [ebp - 0x318]
call fcn.0ffb4893
cmp eax, edi
mov dword [ebp - 0x30c], eax
je 0xffc4577
lea eax, [ebp - 0x318]
push eax
push dword [ebp - 0x30c]
push edi
push dword [ebp - 0x308]
call esi
test eax, eax
jne 0xffc4577
mov eax, dword [ebp - 0x30c]
cmp byte [eax], 0
je 0xffc4577
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x84]
push eax
mov edi, str.protocolStdFileEditing_server
push edi
push dword [ebp - 0x308]
call esi
test eax, eax
je 0xffc4456
cmp eax, ebx
jne 0xffc4577
cmp eax, ebx
jne 0xffc4497
inc dword [ebp - 0x314]
mov ecx, dword [ebp - 0x314]
call fcn.0ffb4893
test eax, eax
mov dword [ebp - 0x310], eax
je 0xffc4577
lea eax, [ebp - 0x314]
push eax
push dword [ebp - 0x310]
push edi
push dword [ebp - 0x308]
call esi
test eax, eax
jne 0xffc4577
mov eax, dword [ebp - 0x310]
cmp byte [eax], 0
je 0xffc4577
push 0x100
lea eax, [ebp - 0x304]
push eax
push 0xffb1e5a
push dword [ebp - 0x324]
push str.embedding
call dword [sym.imp.KERNEL32.dll_GetProfileStringA]
test eax, eax
je 0xffc44fb
lea ebx, [ebp - 0x304]
xor esi, esi
mov al, byte [ebx]
cmp al, 0x2c
jne 0xffc44ec
mov byte [ebx], 0
inc ebx
inc esi
cmp esi, 3
jne 0xffc44d4
lea eax, [ebp - 0x304]
jmp 0xffc4506
test al, al
je 0xffc44fb
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov ebx, eax
jmp 0xffc44d4
mov eax, dword [ebp - 0x30c]
mov ebx, str.picture
mov dword [ebp - 0x320], eax
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0xffc450f
sub eax, edx
mov edi, eax
mov eax, dword [ebp - 0x30c]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0xffc4523
sub eax, ecx
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x310]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0xffc453b
sub eax, ecx
mov ecx, eax
mov eax, ebx
lea esi, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0xffc454b
sub eax, esi
add eax, ecx
add eax, dword [ebp - 0x328]
lea ecx, [eax + edi + 4]
cmp ecx, 0x100
jbe 0xffc45e3
call fcn.0ffb4893
test eax, eax
mov dword [ebp - 0x31c], eax
jne 0xffc45e3
cmp dword [ebp - 0x308], 0
je 0xffc458c
push dword [ebp - 0x308]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x30c]
lea eax, [ebp - 0x104]
cmp ecx, eax
je 0xffc45a1
call fcn.0ffb622b
mov ecx, dword [ebp - 0x310]
lea eax, [ebp - 0x84]
cmp ecx, eax
je 0xffc45b6
call fcn.0ffb622b
mov ecx, dword [ebp - 0x31c]
lea eax, [ebp - 0x204]
cmp ecx, eax
je 0xffc45cb
call fcn.0ffb622b
push 0
push dword [ebp - 0x324]
push str.embedding
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
jmp 0xffc4675
mov esi, dword [ebp - 0x31c]
push ebx
push dword [ebp - 0x310]
push dword [ebp - 0x30c]
push dword [ebp - 0x320]
push 0xffb201c
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
push esi
push dword [ebp - 0x324]
push str.embedding
call dword [sym.imp.KERNEL32.dll_WriteProfileStringA]
cmp dword [ebp - 0x308], 0
je 0xffc4632
push dword [ebp - 0x308]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x104]
cmp dword [ebp - 0x30c], eax
je 0xffc464b
mov ecx, dword [ebp - 0x30c]
call fcn.0ffb622b
lea eax, [ebp - 0x84]
cmp dword [ebp - 0x310], eax
je 0xffc4664
mov ecx, dword [ebp - 0x310]
call fcn.0ffb622b
lea eax, [ebp - 0x204]
cmp esi, eax
je 0xffc4675
mov ecx, esi
call fcn.0ffb622b
pop esi
pop ebx
mov ecx, dword [ebp - 4]
pop edi
call fcn.0ffe11f0
leave
ret 4