Function at 0x5201b8
Capabilities:
Query or enumerate registry value

Disassembly:
mov eax, 0x6c72b8
call fcn.00692bd4
sub esp, 0x13c
mov eax, dword [0x721bb0]
push ebx
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x148], esi
call fcn.00436670
xor edi, edi
lea eax, [ebp - 0x128]
push eax
push 0xf
mov dword [esi], 0x6df0f8
mov dword [esi + 0x148], edi
mov dword [esi + 0x14c], edi
mov dword [esi + 0x150], edi
mov dword [esi + 0x154], edi
mov dword [esi + 0x158], edi
mov dword [esi + 0x15c], edi
mov dword [esi + 0x160], edi
mov dword [esi + 0x164], edi
mov ecx, dword [0x732128]
mov ebx, pe_nt_image_headers32
push ebx
mov dword [ebp - 4], edi
mov dword [ebp - 0x128], edi
call fcn.0043c95d
mov ecx, dword [ebp - 0x128]
push edi
call fcn.004349ab
push 0xf
push ebx
push edi
push edi
lea eax, [ebp - 0x144]
push eax
call dword [sym.imp.user32.dll_SetRect]
mov ecx, dword [0x732128]
push edi
push edi
push edi
push 3
call fcn.0043cb73
mov ecx, dword [ebp - 0x128]
push eax
push edi
push edi
lea eax, [ebp - 0x144]
push eax
call fcn.00435366
call fcn.0043bce8
mov ecx, eax
call fcn.0043beae
push dword [ebp - 0x128]
mov ecx, eax
mov dword [ebp - 0x12c], ecx
call fcn.00439b46
push dword [ebp - 0x12c]
mov ecx, dword [0x732100]
call fcn.0043aa67
push dword [ebp - 0x12c]
mov ecx, esi
call fcn.00436bf6
mov ecx, dword [ebp - 0x128]
cmp ecx, edi
je 0x5202d1
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [ebp - 0x128], edi
mov ecx, dword [0x732128]
lea eax, [ebp - 0x128]
push eax
push 0xb4
push ebx
call fcn.0043c95d
mov ecx, dword [ebp - 0x128]
push edi
call fcn.004349ab
mov dword [ebp - 0x12c], edi
push 0x2b
push ebx
push 0x26
push edi
lea eax, [ebp - 0x144]
push eax
call dword [sym.imp.user32.dll_SetRect]
mov ecx, dword [0x732128]
push edi
push edi
push edi
push 3
call fcn.0043cb73
mov ecx, dword [ebp - 0x128]
push eax
push dword [ebp - 0x12c]
lea eax, [ebp - 0x144]
push edi
push eax
call fcn.00435366
add dword [ebp - 0x12c], 5
cmp dword [ebp - 0x12c], 0xaf
jl 0x5202fb
push 0x34
push ebx
push 0x2a
push edi
lea eax, [ebp - 0x144]
push eax
call dword [sym.imp.user32.dll_SetRect]
mov ecx, dword [0x732128]
push edi
push edi
push edi
push 3
call fcn.0043cb73
mov ecx, dword [ebp - 0x128]
push eax
push 0xaa
push edi
lea eax, [ebp - 0x144]
push eax
call fcn.00435366
mov ecx, dword [ebp - 0x128]
push 0xc0000000
push 0x15
push 0xfc
push edi
push 2
call fcn.00434a28
mov ecx, dword [ebp - 0x128]
push 1
push 0xc0000000
push 0xff946b42
push 1
push 0xfc
push 0x14
push 2
call fcn.004352bf
mov ecx, dword [ebp - 0x128]
push 1
push 0x80000000
push 0xff959595
push 0x13
push 0x7d
push 0x26
push 0x56
call fcn.004352bf
mov ecx, dword [ebp - 0x128]
push 1
push 0x80000000
push 0xff959595
push 0x13
push 0x7d
push 0x46
push 0x56
call fcn.004352bf
call fcn.0043bce8
mov ecx, eax
call fcn.0043beae
push dword [ebp - 0x128]
mov ecx, eax
mov dword [ebp - 0x12c], ecx
call fcn.00439b46
push dword [ebp - 0x12c]
mov ecx, dword [0x732100]
call fcn.0043aa67
push dword [ebp - 0x12c]
mov ecx, esi
call fcn.00436c0b
mov ecx, dword [ebp - 0x128]
cmp ecx, edi
je 0x520454
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [ebp - 0x128], edi
push ebx
mov ecx, esi
call fcn.004234ee
push 0xc3
mov ecx, esi
call fcn.0042350a
call fcn.0042270c
mov eax, dword [eax + 0xc]
sub eax, dword [esi + 0x48]
cdq
sub eax, edx
sar eax, 1
mov dword [esi + 0x2c], eax
call fcn.0042270c
mov eax, dword [eax + 0x10]
sub eax, dword [esi + 0x4c]
xor ebx, ebx
cdq
sub eax, edx
sar eax, 1
inc ebx
push ebx
mov ecx, esi
mov dword [esi + 0x30], eax
call fcn.00436bd8
mov ecx, esi
mov dword [0x73de10], esi
call fcn.0051f996
mov eax, dword [0x73c270]
cmp dword [eax + 0x170], 5
lea eax, [ebp - 0x124]
jne 0x5204c1
push str.SoftwareGamaSoftNo_Limits_MY_
jmp 0x5204c6
push str.SoftwareGamaSoftNo_Limits
push eax
call fcn.006935d4
pop ecx
pop ecx
lea eax, [ebp - 0x130]
push eax
push 0x20019
push edi
lea eax, [ebp - 0x124]
push eax
push 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x5205a5
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x134]
push eax
push edi
push str.UserID
push dword [ebp - 0x130]
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x12c], 0x10
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
test eax, eax
mov eax, dword [0x73acd4]
jne 0x520557
mov dword [eax + 0x24d0], ebx
push dword [ebp - 0x12c]
lea eax, [ebp - 0x20]
push eax
mov eax, dword [0x73c270]
add eax, 0x11c
push eax
call fcn.006938f0
add esp, 0xc
jmp 0x520585
mov dword [eax + 0x24d0], edi
mov edx, dword [0x73c270]
mov ecx, dword [ebp - 0x12c]
add edx, 0x11c
cmp ecx, edi
jbe 0x520585
mov edi, edx
mov edx, ecx
shr ecx, 2
xor eax, eax
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [0x73c270]
push 8
add edi, 0x12c
pop ecx
xor eax, eax
rep stosd dword es:[edi], eax
stosb byte es:[edi], al
push dword [ebp - 0x130]
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, esi
pop esi
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
pop ebx
call fcn.00692fc7
leave
ret