Function at 0x7833d599
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x1c
mov eax, 0x783aca81
call fcn.783a76f8
mov esi, ecx
mov edi, 0x783c8d10
push edi
lea ecx, [ebp - 0x24]
call sym.MFC80U.DLL_Ordinal_269
and dword [ebp - 4], 0
push edi
lea ecx, [ebp - 0x10]
call sym.MFC80U.DLL_Ordinal_269
mov byte [ebp - 4], 1
call sym.MFC80U.DLL_Ordinal_1079
mov eax, dword [eax + 8]
lea ecx, [ebp - 0x24]
push ecx
push eax
call sym.MFC80U.DLL_Ordinal_1078
mov eax, dword [esi + 8]
test eax, eax
je 0x7833d807
mov ebx, 0x782f05cc
jmp 0x7833d5ed
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x7833d823
mov ecx, dword [eax]
mov esi, dword [eax + 8]
mov dword [ebp - 0x20], ecx
push edi
lea ecx, [ebp - 0x18]
call sym.MFC80U.DLL_Ordinal_269
push edi
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
call sym.MFC80U.DLL_Ordinal_269
push edi
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call sym.MFC80U.DLL_Ordinal_269
push 5
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 4
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x6c]
test eax, eax
je 0x7833d7d8
mov eax, dword [ebp - 0x14]
cmp dword [eax - 0xc], 0
je 0x7833d7d8
mov eax, dword [esi]
push 6
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, esi
call dword [eax + 0x6c]
test eax, eax
jne 0x7833d663
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x1c]
call sym.MFC80U.DLL_Ordinal_766
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push 0x782f058c
push eax
call sym.MFC80U.DLL_Ordinal_2311
add esp, 0xc
push dword [ebp - 0x10]
call sym.MFC80U.DLL_Ordinal_908
mov eax, dword [esi]
push 0
lea ecx, [ebp - 0x10]
push ecx
mov ecx, esi
call dword [eax + 0x6c]
test eax, eax
je 0x7833d699
mov eax, dword [ebp - 0x10]
cmp dword [eax - 0xc], 0
jne 0x7833d6fc
push 0x782f063c
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push 0x782f051c
push eax
call sym.MFC80U.DLL_Ordinal_2311
add esp, 0x10
push dword [ebp - 0x10]
call sym.MFC80U.DLL_Ordinal_908
push 0x782f063c
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push 0x782f0540
push eax
call sym.MFC80U.DLL_Ordinal_2311
add esp, 0x10
push dword [ebp - 0x10]
call sym.MFC80U.DLL_Ordinal_908
push 0x782f063c
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push 0x782f0564
push eax
call sym.MFC80U.DLL_Ordinal_2311
add esp, 0x10
push dword [ebp - 0x10]
call sym.MFC80U.DLL_Ordinal_908
push ebx
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push 0x782f051c
push eax
call sym.MFC80U.DLL_Ordinal_2311
add esp, 0x10
push dword [ebp - 0x10]
call sym.MFC80U.DLL_Ordinal_908
push ebx
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push 0x782f0540
push eax
call sym.MFC80U.DLL_Ordinal_2311
add esp, 0x10
push dword [ebp - 0x10]
call sym.MFC80U.DLL_Ordinal_908
push ebx
push dword [ebp - 0x14]
lea eax, [ebp - 0x10]
push 0x782f0564
push eax
call sym.MFC80U.DLL_Ordinal_2311
add esp, 0x10
push dword [ebp - 0x10]
call sym.MFC80U.DLL_Ordinal_908
mov eax, dword [esi]
push 4
lea ecx, [ebp - 0x18]
push ecx
mov ecx, esi
call dword [eax + 0x6c]
mov eax, dword [ebp - 0x18]
cmp dword [eax - 0xc], 0
je 0x7833d7d8
mov eax, 0x208
push eax
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x28], eax
call sym.MFC80U.DLL_Ordinal_5190
lea ecx, [ebp - 0x28]
push ecx
push eax
push dword [ebp - 0x18]
push 0x80000000
call dword [sym.imp.ADVAPI32.dll_RegQueryValueW]
push 0xffffffffffffffff
lea ecx, [ebp - 0x10]
mov esi, eax
call sym.MFC80U.DLL_Ordinal_5398
test esi, esi
jne 0x7833d7b4
mov eax, dword [ebp - 0x10]
cmp dword [eax - 0xc], esi
je 0x7833d7b4
push dword [ebp - 0x14]
lea ecx, [ebp - 0x10]
call sym.MFC80U.DLL_Ordinal_1472
test eax, eax
jne 0x7833d7d8
push dword [ebp - 0x18]
lea eax, [ebp - 0x10]
push 0x782f05ac
push eax
call sym.MFC80U.DLL_Ordinal_2311
add esp, 0xc
push dword [ebp - 0x10]
call sym.MFC80U.DLL_Ordinal_908
push dword [ebp - 0x18]
call sym.MFC80U.DLL_Ordinal_908
mov eax, dword [ebp - 0x1c]
add eax, 0xfffffff0
call fcn.78303c47
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
call fcn.78303c47
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.78303c47
cmp dword [ebp - 0x20], 0
jne 0x7833d5ea
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
call fcn.78303c47
mov eax, dword [ebp - 0x24]
add eax, 0xfffffff0
call fcn.78303c47
call fcn.783a77d0
ret
jmp sym.MFC80U.DLL_Ordinal_1176