Function at 0x595f1f
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
mov dword [ebp - 0xc], 0x6a5ed4
push 4
call fcn.0066d496
add esp, 4
mov esi, eax
push 0x6a61c8
call fcn.00582b90
add esp, 4
mov ebx, eax
push esi
call fcn.0066d4f8
add esp, 4
push eax
push ebx
push 0x80000002
call sub.advapi32.dll_RegOpenKeyA
push ebx
call fcn.00584cc0
add esp, 4
push 0
push esi
call fcn.0066d640
add esp, 8
mov dword [ebp - 0x10], eax
push 0x64
call fcn.0066d496
add esp, 4
mov esi, eax
push 4
call fcn.0066d496
add esp, 4
mov dword [ebp - 4], eax
push 4
call fcn.0066d496
add esp, 4
mov edi, eax
push 0
push 0
push edi
call fcn.0066d659
add esp, 0xc
push 0x64
push 0
push dword [ebp - 4]
call fcn.0066d659
add esp, 0xc
push 0x6a6208
call fcn.00582b90
add esp, 4
mov ebx, eax
push dword [ebp - 4]
call fcn.0066d4f8
add esp, 4
push eax
push esi
call fcn.0066d4f8
add esp, 4
push eax
push edi
call fcn.0066d4f8
add esp, 4
push eax
push 0
push ebx
push dword [ebp - 0x10]
call sub.advapi32.dll_RegQueryValueExA
push ebx
call fcn.00584cc0
add esp, 4
mov edi, 0x6a5ed4
mov ebx, 0
push 0
push dword [ebp - 4]
call fcn.0066d640
add esp, 8
sub eax, 1
mov dword [ebp - 8], eax
jmp 0x59604c
push ebx
push esi
call fcn.0066d5ca
add esp, 8
cmp eax, 0
jne 0x59602a
jmp 0x596051
push ebx
push esi
call fcn.0066d5ca
add esp, 8
push eax
call fcn.005838f0
add esp, 4
push eax
push edi
call fcn.005839e0
add esp, 8
mov edi, eax
add ebx, 1
cmp ebx, dword [ebp - 8]
jle 0x596019
push dword [ebp - 0x10]
call sub.advapi32.dll_RegCloseKey
mov ebx, edi
push 0x6a6224
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x596243
push 0x6a6244
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x59624f
push 0x6a6268
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x59625b
push 0x6a6288
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x596267
push 0x6a62a8
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x596273
push 0x6a62cc
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x59627f
push 0x6a62f0
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x59628b
push 0x6a6314
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x596294
push 0x6a6338
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x59629d
push 0x6a635c
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x5962a6
push 0x6a6380
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x5962af
push 0x6a63a4
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x5962b8
push 0x6a63c8
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x5962c1
push 0x6a63ec
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x5962ca
push 0x6a6414
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x5962d3
push 0x6a6438
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x5962dc
push 0x6a6460
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x5962e5
push 0x6a6484
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x5962ee
push 0x6a64ac
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x5962f7
push 0x6a64d0
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x596300
push 0x6a64f4
push ebx
call fcn.00582790
add esp, 8
cmp eax, 0
je 0x596309
jmp 0x596312
mov dword [ebp - 0xc], 0x6a651c
jmp 0x596312
mov dword [ebp - 0xc], 0x6a6530
jmp 0x596312
mov dword [ebp - 0xc], 0x6a6544
jmp 0x596312
mov dword [ebp - 0xc], 0x6a6544
jmp 0x596312
mov dword [ebp - 0xc], 0x6a6558
jmp 0x596312
mov dword [ebp - 0xc], 0x6a6558
jmp 0x596312
mov dword [ebp - 0xc], 0x6a6558
jmp 0x596312
mov dword [ebp - 0xc], 0x6a656c
jmp 0x596312
mov dword [ebp - 0xc], 0x6a6580
jmp 0x596312
mov dword [ebp - 0xc], 0x6a6594
jmp 0x596312
mov dword [ebp - 0xc], 0x6a65a8
jmp 0x596312
mov dword [ebp - 0xc], 0x6a65bc
jmp 0x596312
mov dword [ebp - 0xc], 0x6a65bc
jmp 0x596312
mov dword [ebp - 0xc], 0x6a65d0
jmp 0x596312
mov dword [ebp - 0xc], 0x6a65d0
jmp 0x596312
mov dword [ebp - 0xc], 0x6a65e4
jmp 0x596312
mov dword [ebp - 0xc], 0x6a65e4
jmp 0x596312
mov dword [ebp - 0xc], 0x6a65f8
jmp 0x596312
mov dword [ebp - 0xc], 0x6a65f8
jmp 0x596312
mov dword [ebp - 0xc], 0x6a660c
jmp 0x596312
mov dword [ebp - 0xc], 0x6a660c
jmp 0x596312
mov eax, dword [ebp - 0xc]
jmp 0x596317
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret