Function at 0x5b8990
Capabilities:
Query or enumerate registry value

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x62f656
push eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword fs:[0], esp
sub esp, 8
mov dword [0x6f3ed8], eax
mov dword [0x6f3e80], ecx
push ebx
push ebp
push esi
xor esi, esi
push edi
mov dword [0x6f3d74], esi
mov dword [0x6f3d44], esi
mov dword [0x6f3f10], esi
mov dword [0x6f3d3c], esi
mov dword [0x6f3f1c], esi
mov dword [0x6f3ee0], esi
mov dword [0x6f3da0], esi
mov dword [0x6f3ecc], esi
mov dword [0x6f3db0], esi
mov dword [0x6f3db4], esi
mov dword [0x6f3cb0], esi
mov dword [0x6f3ed0], esi
mov dword [0x6f3ea8], esi
mov dword [0x6f3eac], esi
mov dword [0x6f3cbc], esi
mov dword [0x6f3da4], esi
mov dword [0x6f3cf8], esi
mov dword [0x6f3cfc], esi
mov dword [0x6f3d40], esi
mov dword [0x6f3ca0], esi
mov dword [0x6f3d38], esi
mov dword [0x6f3e10], esi
mov dword [0x6f3e14], esi
mov dword [0x6f3eec], esi
mov dword [0x6f3ed4], esi
mov dword [0x6f3f20], esi
mov dword [0x6f3f24], esi
mov dword [0x6f3dd4], esi
mov dword [0x6f3edc], esi
mov dword [0x6f3da8], esi
mov dword [0x6f3e88], esi
mov dword [0x6f3e8c], esi
mov dword [0x6f3d78], esi
mov dword [0x6f3f0c], esi
mov dword [0x6f3d80], esi
mov dword [0x6f3d84], esi
mov dword [0x6f3cf4], esi
mov dword [0x6f3e38], esi
mov dword [0x6f3ec8], esi
mov dword [0x6f3d18], esi
mov dword [0x6f3d1c], esi
mov dword [0x6f3f44], esi
mov dword [0x6f3e48], esi
mov dword [0x6f3d50], esi
mov dword [0x6f3d54], esi
mov dword [0x6f3e08], esi
mov dword [0x6f3ca8], esi
mov dword [0x6f3cc4], esi
mov dword [0x6f3cd0], esi
mov dword [0x6f3cd4], esi
mov dword [0x6f3ef0], esi
mov dword [0x6f3ddc], esi
mov dword [0x6f3e34], esi
mov dword [0x6f3de8], esi
mov dword [0x6f3dec], esi
mov dword [0x6f3cf0], esi
mov dword [0x6f3f14], esi
mov dword [0x6f3e50], esi
mov dword [0x6f3e54], esi
mov dword [0x6f3d48], esi
mov edx, dword [ecx]
push 1
push str.Drawing_Markup_Tools
call dword [edx + 8]
mov dword [0x6f3d74], eax
cmp eax, esi
jne 0x5b8b62
mov ecx, dword [0x6f3e80]
push esi
push str.Drawing_Markup_Tools
push str.Drawing_Markup_Tools
mov eax, dword [ecx]
call dword [eax + 4]
mov dword [0x6f3d74], eax
mov edx, dword [eax]
push 1
mov ecx, eax
call dword [edx + 0x18]
mov eax, dword [0x6f3ed8]
mov edi, dword [sym.imp.USER32.dll_LoadImageA]
push esi
push esi
push esi
push 2
push 0x1773
push eax
call edi
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push 2
push 0x1770
push ecx
mov dword [0x6f3f10], eax
call edi
mov edx, dword [0x6f3ed8]
push esi
push esi
push esi
push 2
push 0x1771
push edx
mov dword [0x6f3d3c], eax
call edi
push esi
push esi
mov dword [0x6f3f1c], eax
mov eax, dword [0x6f3ed8]
push esi
push 2
push 0x1772
push eax
call edi
mov dword [0x6f3ee0], eax
call fcn.006061a0
mov ebx, dword [eax + 0xc]
mov ebp, dword [0x6f3ed8]
call fcn.006061a0
push 0x177c
mov ecx, 0x6f3e70
mov dword [eax + 0xc], ebp
call fcn.005eb550
push 0x177d
mov ecx, 0x6f3c9c
call fcn.005eb550
push 0x177e
mov ecx, 0x6f3ee8
call fcn.005eb550
push 0x177f
mov ecx, 0x6f3dd8
call fcn.005eb550
push 0x1780
mov ecx, 0x6f3c98
call fcn.005eb550
push 0x1781
mov ecx, 0x6f3e74
call fcn.005eb550
push 0x1782
mov ecx, 0x6f3cb8
call fcn.005eb550
push 0x1783
mov ecx, 0x6f3de0
call fcn.005eb550
push 0x1784
mov ecx, 0x6f3cc0
call fcn.005eb550
push 0x1785
mov ecx, 0x6f3e78
call fcn.005eb550
push 0x1786
mov ecx, 0x6f3ee4
call fcn.005eb550
push 0x1787
mov ecx, 0x6f3ef4
call fcn.005eb550
push 0x1788
mov ecx, 0x6f3d4c
call fcn.005eb550
push 0x1789
mov ecx, 0x6f3f18
call fcn.005eb550
push 0x178a
mov ecx, 0x6f3e7c
call fcn.005eb550
push 0x178b
mov ecx, 0x6f3d70
call fcn.005eb550
push 0x178c
mov ecx, 0x6f3e3c
call fcn.005eb550
push 0x178d
mov ecx, 0x6f3f40
call fcn.005eb550
push 0x178e
mov ecx, 0x6f3dd0
call fcn.005eb550
push 0x178f
mov ecx, 0x6f3cc8
call fcn.005eb550
push 0x1790
mov ecx, 0x6f3e30
call fcn.005eb550
push 0x1791
mov ecx, 0x6f3e40
call fcn.005eb550
push 0x1792
mov ecx, 0x6f3d7c
call fcn.005eb550
push 0x1793
mov ecx, 0x6f3e44
call fcn.005eb550
call fcn.006061a0
push 0x7c
mov dword [eax + 0xc], ebx
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], esi
je 0x5b8d6b
mov ecx, eax
call fcn.005c6380
jmp 0x5b8d6d
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3da0], eax
or ebx, 0xffffffff
push eax
mov edx, dword [ecx]
mov dword [esp + 0x24], ebx
call dword [edx + 0x10]
push 0x28
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 1
je 0x5b8da8
mov ecx, eax
call fcn.005c5d90
jmp 0x5b8daa
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3ecc], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1774
push eax
call edi
cmp eax, esi
mov dword [0x6f3db0], eax
jne 0x5b8dee
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1775
push ecx
call edi
cmp eax, esi
mov dword [0x6f3db4], eax
jne 0x5b8e1e
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov edx, dword [0x6f3e70]
mov eax, dword [0x6f3c9c]
mov ecx, dword [0x6f3d74]
mov ebp, 0xff00
mov dword [0x6f3db8], ebp
mov dword [0x6f3dbc], edx
mov dword [0x6f3dc0], eax
mov dword [0x6f3dc4], 1
mov dword [0x6f3dc8], esi
mov edx, dword [ecx]
push 0x6f3db0
call dword [edx + 0x30]
mov ecx, dword [0x6f3ecc]
mov dword [0x6f3cb0], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x28
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 2
je 0x5b8e95
mov ecx, eax
call fcn.005c5440
jmp 0x5b8e97
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3ed0], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1776
push eax
call edi
cmp eax, esi
mov dword [0x6f3ea8], eax
jne 0x5b8edb
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1777
push ecx
call edi
cmp eax, esi
mov dword [0x6f3eac], eax
jne 0x5b8f0b
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov edx, dword [0x6f3ee8]
mov eax, dword [0x6f3dd8]
mov ecx, dword [0x6f3d74]
mov dword [0x6f3eb0], ebp
mov dword [0x6f3eb4], edx
mov dword [0x6f3eb8], eax
mov dword [0x6f3ebc], 1
mov dword [0x6f3ec0], esi
mov edx, dword [ecx]
push 0x6f3ea8
call dword [edx + 0x30]
mov ecx, dword [0x6f3ed0]
mov dword [0x6f3cbc], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x28
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 3
je 0x5b8f7d
mov ecx, eax
call fcn.005c4e50
jmp 0x5b8f7f
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3da4], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1782
push eax
call edi
cmp eax, esi
mov dword [0x6f3cf8], eax
jne 0x5b8fc3
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1783
push ecx
call edi
cmp eax, esi
mov dword [0x6f3cfc], eax
jne 0x5b8ff3
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov edx, dword [0x6f3c98]
mov eax, dword [0x6f3e74]
mov ecx, dword [0x6f3d74]
mov dword [0x6f3d00], ebp
mov dword [0x6f3d04], edx
mov dword [0x6f3d08], eax
mov dword [0x6f3d0c], 1
mov dword [0x6f3d10], esi
mov edx, dword [ecx]
push 0x6f3cf8
call dword [edx + 0x30]
mov ecx, dword [0x6f3da4]
mov dword [0x6f3d40], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x68
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 4
je 0x5b9065
mov ecx, eax
call fcn.005c38f0
jmp 0x5b9067
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3ca0], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0x10]
push 0x38
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 5
je 0x5b909f
mov ecx, eax
call fcn.005c30e0
jmp 0x5b90a1
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3d38], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1778
push eax
call edi
cmp eax, esi
mov dword [0x6f3e10], eax
jne 0x5b90e5
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1779
push ecx
call edi
cmp eax, esi
mov dword [0x6f3e14], eax
jne 0x5b9115
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov edx, dword [0x6f3cb8]
mov eax, dword [0x6f3de0]
mov ecx, dword [0x6f3d74]
mov dword [0x6f3e18], ebp
mov dword [0x6f3e1c], edx
mov dword [0x6f3e20], eax
mov dword [0x6f3e24], 1
mov dword [0x6f3e28], esi
mov edx, dword [ecx]
push 0x6f3e10
call dword [edx + 0x30]
mov ecx, dword [0x6f3d38]
mov dword [0x6f3eec], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x38
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 6
je 0x5b9187
mov ecx, eax
call fcn.005c2760
jmp 0x5b9189
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3ed4], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1786
push eax
call edi
cmp eax, esi
mov dword [0x6f3f20], eax
jne 0x5b91cd
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1785
push ecx
call edi
cmp eax, esi
mov dword [0x6f3f24], eax
jne 0x5b91fd
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov edx, dword [0x6f3cc0]
mov eax, dword [0x6f3e78]
mov ecx, dword [0x6f3d74]
mov dword [0x6f3f28], ebp
mov dword [0x6f3f2c], edx
mov dword [0x6f3f30], eax
mov dword [0x6f3f34], 1
mov dword [0x6f3f38], esi
mov edx, dword [ecx]
push 0x6f3f20
call dword [edx + 0x30]
mov ecx, dword [0x6f3ed4]
mov dword [0x6f3dd4], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x68
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 7
je 0x5b926f
mov ecx, eax
call fcn.005c1600
jmp 0x5b9271
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3edc], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0x10]
push 0x38
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 8
je 0x5b92a9
mov ecx, eax
call fcn.005c0c90
jmp 0x5b92ab
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3da8], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x177a
push eax
call edi
cmp eax, esi
mov dword [0x6f3e88], eax
jne 0x5b92ef
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x177b
push ecx
call edi
cmp eax, esi
mov dword [0x6f3e8c], eax
jne 0x5b931f
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov edx, dword [0x6f3ee4]
mov eax, dword [0x6f3ef4]
mov ecx, dword [0x6f3d74]
mov dword [0x6f3e90], ebp
mov dword [0x6f3e94], edx
mov dword [0x6f3e98], eax
mov dword [0x6f3e9c], 1
mov dword [0x6f3ea0], esi
mov edx, dword [ecx]
push 0x6f3e88
call dword [edx + 0x30]
mov ecx, dword [0x6f3da8]
mov dword [0x6f3d78], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x38
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 9
je 0x5b9391
mov ecx, eax
call fcn.005c0460
jmp 0x5b9393
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3f0c], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1788
push eax
call edi
cmp eax, esi
mov dword [0x6f3d80], eax
jne 0x5b93d7
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1787
push ecx
call edi
cmp eax, esi
mov dword [0x6f3d84], eax
jne 0x5b9407
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov edx, dword [0x6f3d4c]
mov eax, dword [0x6f3f18]
mov ecx, dword [0x6f3d74]
mov dword [0x6f3d88], ebp
mov dword [0x6f3d8c], edx
mov dword [0x6f3d90], eax
mov dword [0x6f3d94], 1
mov dword [0x6f3d98], esi
mov edx, dword [ecx]
push 0x6f3d80
call dword [edx + 0x30]
mov ecx, dword [0x6f3f0c]
mov dword [0x6f3cf4], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x48
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 0xa
je 0x5b9479
mov ecx, eax
call fcn.005bf440
jmp 0x5b947b
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3e38], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0x10]
push 0x3c
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 0xb
je 0x5b94b3
mov ecx, eax
call fcn.005bea50
jmp 0x5b94b5
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3ec8], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x177d
push eax
call edi
cmp eax, esi
mov dword [0x6f3d18], eax
jne 0x5b94f9
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x177c
push ecx
call edi
cmp eax, esi
mov dword [0x6f3d1c], eax
jne 0x5b9529
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov edx, dword [0x6f3e7c]
mov eax, dword [0x6f3d70]
mov ecx, dword [0x6f3d74]
mov dword [0x6f3d20], ebp
mov dword [0x6f3d24], edx
mov dword [0x6f3d28], eax
mov dword [0x6f3d2c], 1
mov dword [0x6f3d30], esi
mov edx, dword [ecx]
push 0x6f3d18
call dword [edx + 0x30]
mov ecx, dword [0x6f3ec8]
mov dword [0x6f3f44], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x3c
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 0xc
je 0x5b959b
mov ecx, eax
call fcn.005be0e0
jmp 0x5b959d
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3e48], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1780
push eax
call edi
cmp eax, esi
mov dword [0x6f3d50], eax
jne 0x5b95e1
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1781
push ecx
call edi
cmp eax, esi
mov dword [0x6f3d54], eax
jne 0x5b9611
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov edx, dword [0x6f3e3c]
mov eax, dword [0x6f3f40]
mov ecx, dword [0x6f3d74]
mov dword [0x6f3d58], ebp
mov dword [0x6f3d5c], edx
mov dword [0x6f3d60], eax
mov dword [0x6f3d64], 1
mov dword [0x6f3d68], esi
mov edx, dword [ecx]
push 0x6f3d50
call dword [edx + 0x30]
mov ecx, dword [0x6f3e48]
mov dword [0x6f3e08], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x48
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 0xd
je 0x5b9683
mov ecx, eax
call fcn.005bd3b0
jmp 0x5b9685
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3ca8], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0x10]
push 0x3c
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 0xe
je 0x5b96bd
mov ecx, eax
call fcn.005bc7c0
jmp 0x5b96bf
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3cc4], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x177e
push eax
call edi
cmp eax, esi
mov dword [0x6f3cd0], eax
jne 0x5b9703
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x177f
push ecx
call edi
cmp eax, esi
mov dword [0x6f3cd4], eax
jne 0x5b9733
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov edx, dword [0x6f3dd0]
mov eax, dword [0x6f3cc8]
mov ecx, dword [0x6f3d74]
mov dword [0x6f3cd8], ebp
mov dword [0x6f3cdc], edx
mov dword [0x6f3ce0], eax
mov dword [0x6f3ce4], 1
mov dword [0x6f3ce8], esi
mov edx, dword [ecx]
push 0x6f3cd0
call dword [edx + 0x30]
mov ecx, dword [0x6f3cc4]
mov dword [0x6f3ef0], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x6c
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 0xf
je 0x5b97a5
mov ecx, eax
call fcn.005bac40
jmp 0x5b97a7
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3ddc], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0x10]
push 0x44
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 0x10
je 0x5b97df
mov ecx, eax
call fcn.005ba3c0
jmp 0x5b97e1
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3e34], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1771
push eax
call edi
cmp eax, esi
mov dword [0x6f3de8], eax
jne 0x5b9825
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1770
push ecx
call edi
cmp eax, esi
mov dword [0x6f3dec], eax
jne 0x5b9855
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov edx, dword [0x6f3e30]
mov eax, dword [0x6f3e40]
mov ecx, dword [0x6f3d74]
mov dword [0x6f3df0], ebp
mov dword [0x6f3df4], edx
mov dword [0x6f3df8], eax
mov dword [0x6f3dfc], 1
mov dword [0x6f3e00], esi
mov edx, dword [ecx]
push 0x6f3de8
call dword [edx + 0x30]
mov ecx, dword [0x6f3e34]
mov dword [0x6f3cf0], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
push 0x10
call fcn.005e6f29
add esp, 4
mov dword [esp + 0x14], eax
cmp eax, esi
mov dword [esp + 0x20], 0x11
je 0x5b98c7
mov ecx, eax
call fcn.005b9f40
jmp 0x5b98c9
xor eax, eax
mov ecx, dword [0x6f3e80]
mov dword [0x6f3f14], eax
push eax
mov dword [esp + 0x24], ebx
mov edx, dword [ecx]
call dword [edx + 0xc]
mov eax, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1772
push eax
call edi
cmp eax, esi
mov dword [0x6f3e50], eax
jne 0x5b990d
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov ecx, dword [0x6f3ed8]
push esi
push esi
push esi
push esi
push 0x1773
push ecx
call edi
cmp eax, esi
mov dword [0x6f3e54], eax
jne 0x5b993d
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret
mov edx, dword [0x6f3d7c]
mov eax, dword [0x6f3e44]
mov ecx, dword [0x6f3d74]
mov edi, 1
mov dword [0x6f3e58], ebp
mov dword [0x6f3e5c], edx
mov dword [0x6f3e60], eax
mov dword [0x6f3e64], edi
mov dword [0x6f3e68], esi
mov edx, dword [ecx]
push 0x6f3e50
call dword [edx + 0x30]
mov ecx, dword [0x6f3f14]
mov dword [0x6f3d48], eax
mov edx, dword [eax]
push ecx
mov ecx, eax
call dword [edx + 4]
lea edx, [esp + 0x28]
mov dword [esp + 0x28], esi
push edx
push edi
push esi
push str.SoftwareFoxit_SoftwareFoxit_ReaderAnnotation
push SysReAllocStringLen
mov dword [esp + 0x40], esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x5b99df
mov edx, dword [esp + 0x28]
lea eax, [esp + 0x10]
lea ecx, [esp + 0x2c]
push eax
push ecx
push esi
push esi
push str.SelectMode
push edx
mov dword [esp + 0x28], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [esp + 0x28]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x2c]
dec eax
je 0x5b99fd
dec eax
je 0x5b99f1
mov dword [0x6f3d44], esi
jmp 0x5b9a03
mov dword [0x6f3d44], 2
jmp 0x5b9a03
mov dword [0x6f3d44], edi
mov ecx, dword [esp + 0x18]
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x14
ret