Function at 0x7d013865
Capabilities:
Check for software breakpoints
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
push ebx
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
push edi
lea eax, [ebp - 0x1c]
xor edi, edi
push eax
push edi
push reloc.SHLWAPI.dll_ParseURLA
call esi
test eax, eax
jne 0x7d013c6f
lea eax, [ebp - 0x14]
push eax
push 0x7cf456e4
push dword [ebp - 0x1c]
call esi
test eax, eax
je 0x7d0138aa
push dword [ebp - 0x1c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x7d013c6f
mov eax, dword [ebp + 8]
cmp eax, edi
je 0x7d013c5f
cmp dword [eax + 4], edi
je 0x7d013c5f
add eax, 0xb8
cmp word [eax], di
je 0x7d0138ed
push eax
call fcn.7d0135a2
mov ebx, eax
cmp ebx, edi
je 0x7d0138ed
lea eax, [ebp - 0xc]
push eax
push ebx
push dword [ebp - 0x14]
call esi
push ebx
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 4], edi
je 0x7d0138f3
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
push 4
lea eax, [ebp - 8]
pop esi
mov ebx, dword [sym.imp.SHLWAPI.dll_SHQueryValueExW]
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf456c8
push dword [ebp - 0xc]
mov dword [ebp - 8], esi
call ebx
test eax, eax
jne 0x7d013925
mov eax, dword [ebp + 8]
mov cx, word [ebp - 4]
mov eax, dword [eax + 4]
mov word [eax + 8], cx
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf456b0
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d01394e
mov eax, dword [ebp + 8]
mov cx, word [ebp - 4]
mov eax, dword [eax + 4]
mov word [eax + 0xa], cx
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x10], 0x8c
push dword [ebp - 0x18]
lea eax, [ebp - 0x5c]
push 0x7cf45690
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
lea eax, [ebp - 0x5c]
push edi
push eax
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013996
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 4]
mov dword [edx + eax], ecx
add dword [ebp - 0x10], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x10], 0xcc
jb 0x7d013958
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf45678
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d0139cf
mov ecx, dword [ebp + 8]
cmp dword [ebp - 4], edi
mov ecx, dword [ecx + 4]
setne al
mov dword [ecx + 0x78], eax
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf45664
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d0139f9
mov ecx, dword [ebp + 8]
cmp dword [ebp - 4], edi
mov ecx, dword [ecx + 4]
setne al
mov dword [ecx + 0x74], eax
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf4564c
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013a23
mov ecx, dword [ebp + 8]
cmp dword [ebp - 4], edi
mov ecx, dword [ecx + 4]
setne al
mov dword [ecx + 0x70], eax
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf45638
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013a4a
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 8]
mov dword [eax + 8], ecx
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf45614
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013a80
mov eax, dword [ebp + 8]
mov dx, word [ebp - 4]
mov ecx, dword [eax + 4]
mov word [ecx + 0xc], dx
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 4]
shr ecx, 0x10
mov word [eax + 0xe], cx
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf455fc
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013ab6
mov eax, dword [ebp + 8]
mov dx, word [ebp - 4]
mov ecx, dword [eax + 4]
mov word [ecx + 0x10], dx
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 4]
shr ecx, 0x10
mov word [eax + 0x12], cx
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf455dc
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013af2
mov eax, dword [ebp + 8]
mov dx, word [ebp - 4]
mov ecx, dword [eax + 4]
mov word [ecx + 0x14], dx
mov ecx, dword [ebp - 4]
mov edx, dword [eax + 4]
shr ecx, 0x10
mov word [edx + 0x16], cx
mov eax, dword [eax + 4]
mov dword [eax + 0x7c], edi
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf455c8
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013b28
mov eax, dword [ebp + 8]
mov dx, word [ebp - 4]
mov ecx, dword [eax + 4]
mov word [ecx + 0x20], dx
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 4]
shr ecx, 0x10
mov word [eax + 0x22], cx
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf455b0
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013b4f
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 4]
mov dword [eax + 0x24], ecx
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf45598
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013b76
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 4]
mov dword [eax + 0x28], ecx
lea eax, [ebp - 8]
mov dword [ebp - 8], 0x40
push eax
lea eax, [ebp - 0x5c]
push eax
push edi
push edi
push 0x7cf45584
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013bab
mov eax, dword [ebp + 8]
push 0x10
pop ecx
lea esi, [ebp - 0x5c]
mov edi, dword [eax + 0x98]
push 4
rep movsd dword es:[edi], dword [esi]
pop esi
xor edi, edi
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf4556c
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013bd2
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 4]
mov dword [eax + 0x6c], ecx
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf45548
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013bfc
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 4]
mov dword [eax + 0x80], ecx
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf45518
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013c26
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 4]
mov dword [eax + 0x84], ecx
lea eax, [ebp - 8]
mov dword [ebp - 8], esi
push eax
lea eax, [ebp - 4]
push eax
push edi
push edi
push 0x7cf454fc
push dword [ebp - 0xc]
call ebx
test eax, eax
jne 0x7d013c50
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
mov eax, dword [eax + 4]
mov dword [eax + 0x88], ecx
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x14]
je 0x7d013c5f
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x14]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
push dword [ebp - 0x1c]
call esi
pop edi
pop esi
pop ebx
leave
ret 4