Function at 0x5ee410
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x65dc86
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push ebp
push esi
mov dword [esp + 0x14], 0x6a515c
lea eax, [esp + 0x14]
xor ebx, ebx
push eax
mov dword [esp + 0x28], ebx
call fcn.0060f7b0
mov ecx, dword [esp + 0x30]
add esp, 4
mov dword [0x746ef0], ecx
mov ecx, dword [esp + 0x30]
mov ebp, 1
mov dword [0x746ef8], ebx
mov dword [0x746e4c], ebx
mov dword [0x746efc], ebx
mov dword [0x746f00], ebx
mov dword [0x746f08], ebx
mov dword [0x746f0c], ebx
mov dword [0x746e28], ebx
mov dword [0x746e2c], ebx
mov dword [0x746f10], ebx
mov dword [0x746f14], ebx
mov dword [0x746f18], ebx
mov dword [0x746e60], ebx
mov dword [0x746e64], ebx
mov dword [0x746f1c], ebx
mov dword [0x746f20], ebx
mov dword [0x746f24], ebx
mov dword [0x746ea8], ebx
mov dword [0x746eac], ebx
mov dword [0x746f28], ebx
mov dword [0x746f2c], ebx
mov dword [0x746f30], ebx
mov dword [0x746e88], ebx
mov dword [0x746e8c], ebx
mov dword [0x746f34], ebx
mov dword [0x746f38], ebx
mov dword [0x746f3c], ebx
mov dword [0x746ed0], ebx
mov dword [0x746ed4], ebx
mov dword [0x746f40], ebx
mov dword [0x746ef4], ecx
mov edx, dword [ecx]
push ebp
push 0x7203c8
mov esi, eax
call dword [edx + 0x18]
cmp eax, ebx
mov dword [0x746ef8], eax
jne 0x5ee546
mov ecx, dword [0x746ef4]
push ebx
push 0x7203c8
push 0x7203c8
mov eax, dword [ecx]
call dword [eax + 0x14]
mov dword [0x746ef8], eax
mov edx, dword [eax]
push ebp
mov ecx, eax
call dword [edx + 0x28]
mov eax, dword [esi]
push 0x2146
mov ecx, esi
call dword [eax + 0x38]
mov dword [0x746efc], eax
mov edx, dword [esi]
push 0x214b
mov ecx, esi
call dword [edx + 0x38]
mov dword [0x746f00], eax
mov eax, dword [esi]
push 0x2147
mov ecx, esi
call dword [eax + 0x38]
push 0x38
mov dword [0x746f04], eax
call fcn.006147b3
add esp, 4
mov dword [esp + 0x2c], eax
cmp eax, ebx
mov byte [esp + 0x24], 1
je 0x5ee599
mov ecx, eax
call fcn.005f3880
jmp 0x5ee59b
xor eax, eax
mov ecx, dword [0x746ef4]
mov dword [0x746f08], eax
push eax
mov byte [esp + 0x28], bl
mov edx, dword [ecx]
call dword [edx + 0x28]
push 0x18
call fcn.006147b3
add esp, 4
mov dword [esp + 0x2c], eax
cmp eax, ebx
mov byte [esp + 0x24], 2
je 0x5ee5d0
mov ecx, eax
call fcn.005f3380
jmp 0x5ee5d2
xor eax, eax
mov ecx, dword [0x746ef4]
mov dword [0x746f0c], eax
push edi
push eax
mov edx, dword [ecx]
mov byte [esp + 0x2c], bl
call dword [edx + 0x24]
mov eax, dword [esi]
push 0x215b
mov ecx, esi
call dword [eax + 0x30]
mov dword [0x746e28], eax
mov edx, dword [esi]
push 0x215a
mov ecx, esi
call dword [edx + 0x30]
mov ecx, dword [0x746ef4]
mov edi, 0xff00
mov dword [0x746e2c], eax
mov dword [0x746e30], edi
mov eax, dword [ecx]
push 0x219f
lea edx, [esp + 0x34]
push esi
push edx
call dword [eax + 0x94]
push eax
mov ecx, 0x746e54
mov byte [esp + 0x2c], 3
call fcn.004911b0
lea ecx, [esp + 0x30]
mov byte [esp + 0x28], bl
call fcn.00490f90
mov eax, dword [0x746e54]
cmp eax, ebx
je 0x5ee65e
add eax, 0xc
mov dword [0x746e34], eax
jmp 0x5ee668
mov dword [0x746e34], 0x730500
mov ecx, dword [0x746ef4]
push 0x21a0
lea edx, [esp + 0x34]
push esi
mov eax, dword [ecx]
push edx
call dword [eax + 0x94]
push eax
mov ecx, 0x746e48
mov byte [esp + 0x2c], 4
call fcn.004911b0
lea ecx, [esp + 0x30]
mov byte [esp + 0x28], bl
call fcn.00490f90
mov eax, dword [0x746e48]
cmp eax, ebx
je 0x5ee6b1
add eax, 0xc
mov dword [0x746e38], eax
jmp 0x5ee6bb
mov dword [0x746e38], 0x730500
mov ecx, dword [0x746ef8]
mov dword [0x746e3c], ebp
mov dword [0x746e40], ebx
push 0x746e28
mov eax, dword [ecx]
call dword [eax + 0x44]
mov ecx, dword [0x746f0c]
mov dword [0x746f10], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x38
call fcn.006147b3
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x28], 5
je 0x5ee70a
mov ecx, eax
call fcn.005f26b0
jmp 0x5ee70c
xor eax, eax
mov ecx, dword [0x746ef4]
mov dword [0x746f14], eax
push eax
mov byte [esp + 0x2c], bl
mov edx, dword [ecx]
call dword [edx + 0x28]
push 0x14
call fcn.006147b3
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x28], 6
je 0x5ee741
mov ecx, eax
call fcn.005f21b0
jmp 0x5ee743
xor eax, eax
mov ecx, dword [0x746ef4]
mov dword [0x746f18], eax
push eax
mov byte [esp + 0x2c], bl
mov edx, dword [ecx]
call dword [edx + 0x24]
mov eax, dword [esi]
push 0x215e
mov ecx, esi
call dword [eax + 0x30]
mov dword [0x746e60], eax
mov edx, dword [esi]
push 0x2159
mov ecx, esi
call dword [edx + 0x30]
mov ecx, dword [0x746ef4]
mov dword [0x746e64], eax
mov dword [0x746e68], edi
push 0x21a1
mov eax, dword [ecx]
lea edx, [esp + 0x34]
push esi
push edx
call dword [eax + 0x94]
push eax
mov ecx, 0x746e50
mov byte [esp + 0x2c], 7
call fcn.004911b0
lea ecx, [esp + 0x30]
mov byte [esp + 0x28], bl
call fcn.00490f90
mov eax, dword [0x746e50]
cmp eax, ebx
je 0x5ee7c9
add eax, 0xc
mov dword [0x746e6c], eax
jmp 0x5ee7d3
mov dword [0x746e6c], 0x730500
mov ecx, dword [0x746ef4]
push 0x21a2
lea edx, [esp + 0x34]
push esi
mov eax, dword [ecx]
push edx
call dword [eax + 0x94]
push eax
mov ecx, 0x746e1c
mov byte [esp + 0x2c], 8
call fcn.004911b0
lea ecx, [esp + 0x30]
mov byte [esp + 0x28], bl
call fcn.00490f90
mov eax, dword [0x746e1c]
cmp eax, ebx
je 0x5ee81c
add eax, 0xc
mov dword [0x746e70], eax
jmp 0x5ee826
mov dword [0x746e70], 0x730500
mov ecx, dword [0x746ef8]
mov dword [0x746e74], ebp
mov dword [0x746e78], ebx
push 0x746e60
mov eax, dword [ecx]
call dword [eax + 0x44]
mov ecx, dword [0x746f18]
mov dword [0x746f1c], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x38
call fcn.006147b3
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x28], 9
je 0x5ee875
mov ecx, eax
call fcn.005f14e0
jmp 0x5ee877
xor eax, eax
mov ecx, dword [0x746ef4]
mov dword [0x746f20], eax
push eax
mov byte [esp + 0x2c], bl
mov edx, dword [ecx]
call dword [edx + 0x28]
push 0x18
call fcn.006147b3
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x28], 0xa
je 0x5ee8ac
mov ecx, eax
call fcn.005f0fe0
jmp 0x5ee8ae
xor eax, eax
mov ecx, dword [0x746ef4]
mov dword [0x746f24], eax
push eax
mov byte [esp + 0x2c], bl
mov edx, dword [ecx]
call dword [edx + 0x24]
mov eax, dword [esi]
push 0x215d
mov ecx, esi
call dword [eax + 0x30]
mov dword [0x746ea8], eax
mov edx, dword [esi]
push 0x2158
mov ecx, esi
call dword [edx + 0x30]
mov ecx, dword [0x746ef4]
mov dword [0x746eac], eax
mov dword [0x746eb0], edi
push 0x21a3
mov eax, dword [ecx]
lea edx, [esp + 0x34]
push esi
push edx
call dword [eax + 0x94]
push eax
mov ecx, 0x746ec8
mov byte [esp + 0x2c], 0xb
call fcn.004911b0
lea ecx, [esp + 0x30]
mov byte [esp + 0x28], bl
call fcn.00490f90
mov eax, dword [0x746ec8]
cmp eax, ebx
je 0x5ee934
add eax, 0xc
mov dword [0x746eb4], eax
jmp 0x5ee93e
mov dword [0x746eb4], 0x730500
mov ecx, dword [0x746ef4]
push 0x21a4
lea edx, [esp + 0x34]
push esi
mov eax, dword [ecx]
push edx
call dword [eax + 0x94]
push eax
mov ecx, 0x746e84
mov byte [esp + 0x2c], 0xc
call fcn.004911b0
lea ecx, [esp + 0x30]
mov byte [esp + 0x28], bl
call fcn.00490f90
mov eax, dword [0x746e84]
cmp eax, ebx
je 0x5ee987
add eax, 0xc
mov dword [0x746eb8], eax
jmp 0x5ee991
mov dword [0x746eb8], 0x730500
mov ecx, dword [0x746ef8]
mov dword [0x746ebc], ebp
mov dword [0x746ec0], ebx
push 0x746ea8
mov eax, dword [ecx]
call dword [eax + 0x44]
mov ecx, dword [0x746f24]
mov dword [0x746f28], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x38
call fcn.006147b3
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x28], 0xd
je 0x5ee9e0
mov ecx, eax
call fcn.005f0260
jmp 0x5ee9e2
xor eax, eax
mov ecx, dword [0x746ef4]
mov dword [0x746f2c], eax
push eax
mov byte [esp + 0x2c], bl
mov edx, dword [ecx]
call dword [edx + 0x28]
push 0x18
call fcn.006147b3
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x28], 0xe
je 0x5eea17
mov ecx, eax
call fcn.005efd60
jmp 0x5eea19
xor eax, eax
mov ecx, dword [0x746ef4]
mov dword [0x746f30], eax
push eax
mov byte [esp + 0x2c], bl
mov edx, dword [ecx]
call dword [edx + 0x24]
mov eax, dword [esi]
push 0x2179
mov ecx, esi
call dword [eax + 0x30]
mov dword [0x746e88], eax
mov edx, dword [esi]
push 0x2178
mov ecx, esi
call dword [edx + 0x30]
mov ecx, dword [0x746ef4]
mov dword [0x746e8c], eax
mov dword [0x746e90], edi
push 0x21a5
mov eax, dword [ecx]
lea edx, [esp + 0x34]
push esi
push edx
call dword [eax + 0x94]
push eax
mov ecx, 0x746e58
mov byte [esp + 0x2c], 0xf
call fcn.004911b0
lea ecx, [esp + 0x30]
mov byte [esp + 0x28], bl
call fcn.00490f90
mov eax, dword [0x746e58]
cmp eax, ebx
je 0x5eea9f
add eax, 0xc
mov dword [0x746e94], eax
jmp 0x5eeaa9
mov dword [0x746e94], 0x730500
mov ecx, dword [0x746ef4]
push 0x21a6
lea edx, [esp + 0x34]
push esi
mov eax, dword [ecx]
push edx
call dword [eax + 0x94]
push eax
mov ecx, 0x746e20
mov byte [esp + 0x2c], 0x10
call fcn.004911b0
lea ecx, [esp + 0x30]
mov byte [esp + 0x28], bl
call fcn.00490f90
mov eax, dword [0x746e20]
cmp eax, ebx
je 0x5eeaf2
add eax, 0xc
mov dword [0x746e98], eax
jmp 0x5eeafc
mov dword [0x746e98], 0x730500
mov ecx, dword [0x746ef8]
mov dword [0x746e9c], ebp
mov dword [0x746ea0], ebx
push 0x746e88
mov eax, dword [ecx]
call dword [eax + 0x44]
mov ecx, dword [0x746f30]
mov dword [0x746f34], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x38
call fcn.006147b3
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x28], 0x11
je 0x5eeb4b
mov ecx, eax
call fcn.005ef4b0
jmp 0x5eeb4d
xor eax, eax
mov ecx, dword [0x746ef4]
mov dword [0x746f38], eax
push eax
mov byte [esp + 0x2c], bl
mov edx, dword [ecx]
call dword [edx + 0x28]
push 0x14
call fcn.006147b3
add esp, 4
mov dword [esp + 0x30], eax
cmp eax, ebx
mov byte [esp + 0x28], 0x12
je 0x5eeb82
mov ecx, eax
call fcn.005eefb0
jmp 0x5eeb84
xor eax, eax
mov ecx, dword [0x746ef4]
mov dword [0x746f3c], eax
push eax
mov byte [esp + 0x2c], bl
mov edx, dword [ecx]
call dword [edx + 0x24]
mov eax, dword [esi]
push 0x2144
mov ecx, esi
call dword [eax + 0x30]
mov dword [0x746ed0], eax
mov edx, dword [esi]
push 0x2145
mov ecx, esi
call dword [edx + 0x30]
mov ecx, dword [0x746ef4]
mov dword [0x746ed4], eax
mov dword [0x746ed8], edi
push 0x21a7
mov eax, dword [ecx]
lea edx, [esp + 0x34]
push esi
push edx
call dword [eax + 0x94]
push eax
mov ecx, 0x746e80
mov byte [esp + 0x2c], 0x13
call fcn.004911b0
lea ecx, [esp + 0x30]
mov byte [esp + 0x28], bl
call fcn.00490f90
mov eax, dword [0x746e80]
pop edi
cmp eax, ebx
je 0x5eec0b
add eax, 0xc
mov dword [0x746edc], eax
jmp 0x5eec15
mov dword [0x746edc], 0x730500
mov ecx, dword [0x746ef4]
push 0x21a8
lea edx, [esp + 0x30]
push esi
mov eax, dword [ecx]
push edx
call dword [eax + 0x94]
push eax
mov ecx, 0x746ecc
mov byte [esp + 0x28], 0x14
call fcn.004911b0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x24], bl
call fcn.00490f90
mov eax, dword [0x746ecc]
cmp eax, ebx
je 0x5eec5e
add eax, 0xc
mov dword [0x746ee0], eax
jmp 0x5eec68
mov dword [0x746ee0], 0x730500
mov ecx, dword [0x746ef8]
mov dword [0x746ee4], ebp
mov dword [0x746ee8], ebx
push 0x746ed0
mov eax, dword [ecx]
call dword [eax + 0x44]
mov ecx, dword [0x746f3c]
mov dword [0x746f40], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
lea edx, [esp + 0xc]
mov dword [esp + 0xc], ebx
push edx
push ebp
push ebx
push str.SoftwareFoxit_SoftwareFoxit_ReaderAnnotation
push SysReAllocStringLen
mov dword [esp + 0x24], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x5eece9
mov edx, dword [esp + 0xc]
lea eax, [esp + 0x18]
lea ecx, [esp + 0x10]
push eax
push ecx
push ebx
push ebx
push str.SelectMode
push edx
mov dword [esp + 0x30], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [esp + 0xc]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x10]
dec eax
je 0x5eed07
dec eax
je 0x5eecfb
mov dword [0x746e4c], ebx
jmp 0x5eed0d
mov dword [0x746e4c], 2
jmp 0x5eed0d
mov dword [0x746e4c], ebp
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 4]
mov ecx, dword [esp + 0x1c]
mov eax, ebp
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x1c
ret