Function at 0x75b0cda5
Capabilities:
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xa4
mov eax, dword [0x75bc8d18]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 0x10]
xor ebx, ebx
push edi
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x98], esi
cmp eax, ebx
je 0x75b0d053
cmp ecx, ebx
je 0x75b0d053
cmp dword [ebp + 0x14], 1
mov byte [ebp - 0x8d], bl
jne 0x75b0ce11
cmp esi, ebx
je 0x75b0ce11
cmp word [esi], bx
je 0x75b0ce11
push esi
call fcn.75b573a5
pop ecx
test al, al
jne 0x75b0ce11
mov byte [ebp - 0x8d], 1
lea ecx, [ebp - 0x3c]
call fcn.759b3c2d
lea ecx, [ebp - 0x20]
call fcn.759b3c2d
push 0x21
pop edi
lea eax, [ebp - 0x80]
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], eax
cmp byte [ebp - 0x8d], bl
jne 0x75b0cf7e
push ebx
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x9c]
push esi
push dword [ebp + 0x14]
call fcn.75a6338a
add esp, 0x14
test eax, eax
jne 0x75b0cf7e
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x94], eax
call fcn.759b3e2d
push eax
push dword [0x75bc8b74]
mov esi, 0x759fcbe0
push ebx
push esi
push dword [ebp - 0x94]
call fcn.759b3f15
add esp, 0x14
test eax, eax
jne 0x75b0cf78
push ebx
lea eax, [ebp - 0x8c]
push eax
push ebx
push ebx
push dword [ebp - 0xa0]
mov dword [ebp - 0x84], edi
push dword [ebp - 0x20]
call fcn.759b5885
add esp, 0x18
test eax, eax
jne 0x75b0cf78
cmp byte [ebp + 0x18], bl
jne 0x75b0cef5
mov bl, 1
lea ecx, [ebp - 0x8c]
call fcn.759b3f40
lea ecx, [ebp - 0x20]
call fcn.759b3c00
lea ecx, [ebp - 0x18]
call fcn.759b1681
lea ecx, [ebp - 0x3c]
call fcn.759b3c00
lea ecx, [ebp - 0x34]
call fcn.759b1681
mov al, bl
jmp 0x75b0d055
push ebx
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0xa4]
push eax
push ebx
push esi
push dword [ebp - 0x20]
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0x84], edi
call fcn.759b5885
add esp, 0x18
test eax, eax
jne 0x75b0cec3
cmp dword [ebp - 0xa4], 7
jne 0x75b0cec3
mov esi, dword [ebp - 0x8c]
cmp word [esi], bx
je 0x75b0cf78
lea eax, [ebp - 0x94]
push eax
push edi
push esi
mov dword [ebp - 0x94], ebx
call fcn.759b4220
test eax, eax
jl 0x75b0cec3
cmp dword [ebp - 0x94], 0x20
jne 0x75b0cec3
push dword [ebp - 0xa0]
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x75b0cec1
add esi, 0x42
jmp 0x75b0cf30
mov esi, dword [ebp - 0x98]
push ebx
lea eax, [ebp - 0x3c]
push eax
push esi
push dword [ebp + 0x14]
push dword [ebp - 0x9c]
call fcn.75b0cc97
add esp, 0x14
test eax, eax
jne 0x75b0d028
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x20]
call fcn.759b3e2d
push eax
push dword [0x75bc8b74]
push ebx
push dword [ebp - 0xa0]
push esi
call fcn.759b3f15
add esp, 0x14
test eax, eax
jne 0x75b0d028
cmp byte [ebp + 0x18], bl
je 0x75b0cec1
push 4
pop esi
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x9c]
push eax
push ebx
push 0x75b0d068
push dword [ebp - 0x20]
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x75b0cec3
cmp dword [ebp - 0x9c], esi
jne 0x75b0cec3
cmp dword [ebp - 0x98], 1
sete bl
jmp 0x75b0cec3
lea ecx, [ebp - 0x8c]
call fcn.759b3f40
lea ecx, [ebp - 0x20]
call fcn.759b3c00
lea ecx, [ebp - 0x18]
call fcn.759b1681
lea ecx, [ebp - 0x3c]
call fcn.759b3c00
lea ecx, [ebp - 0x34]
call fcn.759b1681
xor al, al
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.759b1748
leave
ret