Function at 0x426cb0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffbe4
xor eax, eax
mov dword [ebp - 0x14], eax
lea edx, [ebp - 0x41c]
push edx
lea ecx, [ebp - 0x10]
push ecx
mov ecx, 0x6f01fd
mov edx, 0x6f01f8
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426ce8
mov dword [ebp - 0x14], 1
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov edx, dword [ebp - 0x14]
test edx, edx
jne 0x426d29
lea ecx, [ebp - 0x41c]
push ecx
lea eax, [ebp - 0x10]
push eax
mov edx, 0x6f0202
xor ecx, ecx
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426d29
mov edx, 1
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x426d65
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
jne 0x426d65
lea eax, [ebp - 0x41c]
push eax
lea edx, [ebp - 0x10]
push edx
mov edx, 0x6f0217
xor ecx, ecx
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426d65
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x426da1
mov edx, dword [ebp - 0x1c]
test edx, edx
jne 0x426da1
lea ecx, [ebp - 0x41c]
push ecx
lea eax, [ebp - 0x10]
push eax
mov edx, 0x6f0231
xor ecx, ecx
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426da1
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x14], 1
mov edx, dword [ebp - 0x14]
test edx, edx
jne 0x426ddd
mov ecx, dword [ebp - 0x18]
test ecx, ecx
jne 0x426ddd
lea eax, [ebp - 0x41c]
push eax
lea edx, [ebp - 0x10]
push edx
mov edx, 0x6f024b
xor ecx, ecx
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426ddd
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x426e41
mov edx, dword [ebp - 0x18]
test edx, edx
jne 0x426e41
lea ecx, [ebp - 0x41c]
push ecx
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x6f025f
mov edx, 0x6f025a
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426e17
mov dword [ebp - 0x14], 1
jmp 0x426e41
lea edx, [ebp - 0x41c]
push edx
lea ecx, [ebp - 0x10]
push ecx
mov ecx, 0x6f0269
mov edx, 0x6f0264
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426e41
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x426ea5
mov edx, dword [ebp - 0x1c]
test edx, edx
jne 0x426ea5
lea ecx, [ebp - 0x41c]
push ecx
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x6f0274
mov edx, 0x6f026f
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426e7b
mov dword [ebp - 0x14], 1
jmp 0x426ea5
lea edx, [ebp - 0x41c]
push edx
lea ecx, [ebp - 0x10]
push ecx
mov ecx, 0x6f027e
mov edx, 0x6f0279
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426ea5
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x426ed6
lea edx, [ebp - 0x41c]
push edx
lea ecx, [ebp - 0x10]
push ecx
mov ecx, 0x6f0287
mov edx, 0x6f0283
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426ed6
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x426f07
lea edx, [ebp - 0x41c]
push edx
lea ecx, [ebp - 0x10]
push ecx
mov ecx, 0x6f0295
mov edx, 0x6f0290
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426f07
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x426f38
lea edx, [ebp - 0x41c]
push edx
lea ecx, [ebp - 0x10]
push ecx
mov ecx, 0x6f029e
mov edx, 0x6f0299
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426f38
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x426f69
lea edx, [ebp - 0x41c]
push edx
lea ecx, [ebp - 0x10]
push ecx
mov ecx, 0x6f02a9
mov edx, 0x6f02a4
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x426f69
mov dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x426fef
lea edx, [ebp - 4]
push edx
push 0x6f02af
push SysStringLen
call sub.ADVAPI32.DLL_RegOpenKeyA
test eax, eax
jne 0x426fef
mov dword [ebp - 0xc], 0x400
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x41c]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6f02bc
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x426fe7
push 0
lea ecx, [ebp - 0x41c]
push ecx
call fcn.0066ebe8
add esp, 8
test eax, eax
jne 0x426fe7
push str.copytocd.exe
lea eax, [ebp - 0x41c]
push eax
call fcn.0066cd2c
add esp, 8
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x14], 1
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, dword [ebp - 0x14]
test edx, edx
jne 0x427020
lea ecx, [ebp - 0x41c]
push ecx
lea eax, [ebp - 0x10]
push eax
mov ecx, 0x6f02d8
mov edx, 0x6f02d3
mov eax, dword [sym.UltraISO.exe__frmMain]
call fcn.004268b8
test eax, eax
je 0x427020
mov dword [ebp - 0x14], 1
mov edx, dword [ebp - 0x14]
test edx, edx
je 0x427044
mov ecx, dword [ebp - 0x10]
mov dword [0x6ebc44], ecx
lea eax, [ebp - 0x41c]
push eax
push 0x8320db
call fcn.0066ce08
add esp, 8
mov eax, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret