Function at 0x406298
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x222f8
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push ebx
mov esi, str.CheckForOutlookAccount
mov byte [ebp - 0x186a4], 0
push esi
push str._s_entered_with__s
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0x222f0]
push eax
push 0x20019
push 0
push ebx
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x406304
push eax
push ebx
push esi
push str._s_:_Failed_to_open__s_key__Error0x_.8x
call fcn.00449974
add esp, 0x10
xor eax, eax
jmp 0x406fb1
xor eax, eax
mov esi, 0x2710
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov word [ebp - 0x222e4], ax
mov byte [ebp - 0x9c44], al
lea eax, [ebp - 0x222e8]
push eax
lea eax, [ebp - 0x222e4]
mov dword [ebp - 0x222e8], esi
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.Email
push dword [ebp - 0x222f0]
call edi
test eax, eax
je 0x4063a5
lea eax, [ebp - 0x222e8]
mov dword [ebp - 0x222e8], esi
push eax
lea eax, [ebp - 0x222e4]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.Account_Name
push dword [ebp - 0x222f0]
call edi
test eax, eax
je 0x4063a5
lea eax, [ebp - 0x222e8]
mov dword [ebp - 0x222e8], esi
push eax
lea eax, [ebp - 0x222e4]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.Display_Name
push dword [ebp - 0x222f0]
call edi
cmp dword [ebp - 0x222e8], 0
jbe 0x406428
lea eax, [ebp - 0x222e4]
push eax
push dword [ebp - 0x222e8]
push str.CheckForOutlookAccount
push str._s_Found_account_name_email_of_size__d___S
call fcn.00449974
add esp, 0x10
lea eax, [ebp - 0x9c44]
push 0
push 0
push esi
push eax
lea eax, [ebp - 0x222e4]
push eax
call fcn.00630ba0
pop ecx
push eax
lea eax, [ebp - 0x222e4]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x222e4]
push eax
call fcn.00630ba0
pop ecx
cmp eax, esi
jae 0x406fbf
mov byte [ebp + eax - 0x9c44], 0
lea eax, [ebp - 0x9c44]
push eax
push str.Found_account_name_email___s
call fcn.00449974
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x222e8], esi
mov word [ebp - 0x11174], ax
xor ecx, ecx
lea eax, [ebp - 0x222e8]
mov byte [ebp - 0x2714], cl
push eax
lea eax, [ebp - 0x11174]
mov byte [ebp - 0x7534], cl
push eax
lea eax, [ebp - 0x222f4]
push eax
push ecx
push str.IMAP_User
push dword [ebp - 0x222f0]
call edi
lea eax, [ebp - 0x222ec]
mov dword [ebp - 0x222ec], esi
push eax
lea eax, [ebp - 0x186a4]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.IMAP_Password
push dword [ebp - 0x222f0]
call edi
test eax, eax
jne 0x4064c5
push dword [ebp - 0x222ec]
push str.Found_password_size_d
call fcn.00449974
push 1
push esi
lea eax, [ebp - 0x7534]
push eax
push dword [ebp - 0x222ec]
lea eax, [ebp - 0x186a4]
push eax
call fcn.0040ca69
add esp, 0x1c
lea eax, [ebp - 0x11174]
push eax
call fcn.00630ba0
pop ecx
test eax, eax
je 0x40651e
push 0
push 0
push esi
lea eax, [ebp - 0x2714]
push eax
lea eax, [ebp - 0x11174]
push eax
call fcn.00630ba0
pop ecx
push eax
lea eax, [ebp - 0x11174]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x11174]
push eax
call fcn.00630ba0
pop ecx
cmp eax, esi
jae 0x406fbf
mov byte [ebp + eax - 0x2714], 0
cmp byte [ebp - 0x2714], 0
mov al, byte [ebp - 0x7534]
jne 0x406535
test al, al
je 0x406729
test al, al
jne 0x40654e
push str._Password_is_empty_or_not_found_
lea eax, [ebp - 0x7534]
push esi
push eax
call fcn.006311ec
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x222e8], esi
mov word [ebp - 0x15f94], ax
lea eax, [ebp - 0x222e8]
push eax
lea eax, [ebp - 0x15f94]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.IMAP_Server
push dword [ebp - 0x222f0]
call edi
and dword [ebp - 0x222f8], 0
mov esi, eax
lea eax, [ebp - 0x222ec]
mov dword [ebp - 0x222ec], 4
push eax
lea eax, [ebp - 0x222f8]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.IMAP_Port
push dword [ebp - 0x222f0]
call edi
push dword [ebp - 0x222f8]
lea eax, [ebp - 0x15f94]
push eax
push str.Found_servername_S__port_d
call fcn.00449974
xor eax, eax
add esp, 0xc
test esi, esi
mov byte [ebp - 0x4e24], al
mov esi, 0x2710
jne 0x406680
cmp dword [ebp - 0x222e8], eax
jbe 0x406680
push eax
push eax
push esi
lea eax, [ebp - 0x4e24]
push eax
lea eax, [ebp - 0x15f94]
push eax
call fcn.00630ba0
pop ecx
push eax
lea eax, [ebp - 0x15f94]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x15f94]
push eax
call fcn.00630ba0
pop ecx
cmp eax, esi
jae 0x406fbf
cmp dword [ebp - 0x222f8], 0
mov byte [ebp + eax - 0x4e24], 0
jbe 0x406680
push 0xa
push esi
lea eax, [ebp - 0x1adb4]
push eax
push dword [ebp - 0x222f8]
call fcn.0063e2e7
push 0x67e61c
lea eax, [ebp - 0x4e24]
push esi
push eax
call fcn.00631246
lea eax, [ebp - 0x1adb4]
push eax
lea eax, [ebp - 0x4e24]
push esi
push eax
call fcn.00631246
add esp, 0x28
push str.IMAP_Password
push ebx
push str._s:_s
lea eax, [ebp - 0x1d4c4]
push esi
push eax
call fcn.00445d6d
add esp, 0x14
cmp byte [ebp - 0x2714], 0
je 0x4066e2
lea eax, [ebp - 0x2714]
push eax
lea eax, [ebp - 0x9c44]
push eax
call fcn.00631435
pop ecx
pop ecx
test eax, eax
je 0x4066e2
lea eax, [ebp - 0x9c44]
push eax
lea eax, [ebp - 0x2714]
push eax
push str.User_s__Email_s
lea eax, [ebp - 0xc354]
push esi
push eax
call fcn.00445d6d
add esp, 0x14
jmp 0x4066f9
lea eax, [ebp - 0x9c44]
push eax
lea eax, [ebp - 0xc354]
push esi
push eax
call fcn.006311ec
add esp, 0xc
push 0xffffffffffffffff
push 0x66ae5d
lea eax, [ebp - 0x7534]
push eax
lea eax, [ebp - 0xc354]
push eax
lea eax, [ebp - 0x4e24]
push eax
push str.IMAP
push 0xfc
push 2
call fcn.00412c85
add esp, 0x20
xor eax, eax
mov dword [ebp - 0x222e8], esi
mov word [ebp - 0x11174], ax
xor ecx, ecx
lea eax, [ebp - 0x222e8]
mov byte [ebp - 0x2714], cl
push eax
lea eax, [ebp - 0x11174]
mov byte [ebp - 0x7534], cl
push eax
lea eax, [ebp - 0x222f4]
push eax
push ecx
push str.POP3_User
push dword [ebp - 0x222f0]
call edi
lea eax, [ebp - 0x222ec]
mov dword [ebp - 0x222ec], esi
push eax
lea eax, [ebp - 0x186a4]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.POP3_Password
push dword [ebp - 0x222f0]
call edi
test eax, eax
jne 0x4067c6
push dword [ebp - 0x222ec]
push str.Found_password_size_d
call fcn.00449974
push 1
push esi
lea eax, [ebp - 0x7534]
push eax
push dword [ebp - 0x222ec]
lea eax, [ebp - 0x186a4]
push eax
call fcn.0040ca69
add esp, 0x1c
lea eax, [ebp - 0x11174]
push eax
call fcn.00630ba0
pop ecx
test eax, eax
je 0x40681f
push 0
push 0
push esi
lea eax, [ebp - 0x2714]
push eax
lea eax, [ebp - 0x11174]
push eax
call fcn.00630ba0
pop ecx
push eax
lea eax, [ebp - 0x11174]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x11174]
push eax
call fcn.00630ba0
pop ecx
cmp eax, esi
jae 0x406fbf
mov byte [ebp + eax - 0x2714], 0
cmp byte [ebp - 0x2714], 0
mov al, byte [ebp - 0x7534]
jne 0x406836
test al, al
je 0x406a2a
test al, al
jne 0x40684f
push str._Password_is_empty_or_not_found_
lea eax, [ebp - 0x7534]
push esi
push eax
call fcn.006311ec
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x222e8], esi
mov word [ebp - 0x15f94], ax
lea eax, [ebp - 0x222e8]
push eax
lea eax, [ebp - 0x15f94]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.POP3_Server
push dword [ebp - 0x222f0]
call edi
and dword [ebp - 0x222f8], 0
mov esi, eax
lea eax, [ebp - 0x222ec]
mov dword [ebp - 0x222ec], 4
push eax
lea eax, [ebp - 0x222f8]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.POP3_Port
push dword [ebp - 0x222f0]
call edi
push dword [ebp - 0x222f8]
lea eax, [ebp - 0x15f94]
push eax
push str.Found_servername_S__port_d
call fcn.00449974
xor eax, eax
add esp, 0xc
test esi, esi
mov byte [ebp - 0x4e24], al
mov esi, 0x2710
jne 0x406981
cmp dword [ebp - 0x222e8], eax
jbe 0x406981
push eax
push eax
push esi
lea eax, [ebp - 0x4e24]
push eax
lea eax, [ebp - 0x15f94]
push eax
call fcn.00630ba0
pop ecx
push eax
lea eax, [ebp - 0x15f94]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x15f94]
push eax
call fcn.00630ba0
pop ecx
cmp eax, esi
jae 0x406fbf
cmp dword [ebp - 0x222f8], 0
mov byte [ebp + eax - 0x4e24], 0
jbe 0x406981
push 0xa
push esi
lea eax, [ebp - 0x1adb4]
push eax
push dword [ebp - 0x222f8]
call fcn.0063e2e7
push 0x67e61c
lea eax, [ebp - 0x4e24]
push esi
push eax
call fcn.00631246
lea eax, [ebp - 0x1adb4]
push eax
lea eax, [ebp - 0x4e24]
push esi
push eax
call fcn.00631246
add esp, 0x28
push str.POP3_Password
push ebx
push str._s:_s
lea eax, [ebp - 0x1d4c4]
push esi
push eax
call fcn.00445d6d
add esp, 0x14
cmp byte [ebp - 0x2714], 0
je 0x4069e3
lea eax, [ebp - 0x2714]
push eax
lea eax, [ebp - 0x9c44]
push eax
call fcn.00631435
pop ecx
pop ecx
test eax, eax
je 0x4069e3
lea eax, [ebp - 0x9c44]
push eax
lea eax, [ebp - 0x2714]
push eax
push str.User_s__Email_s
lea eax, [ebp - 0xc354]
push esi
push eax
call fcn.00445d6d
add esp, 0x14
jmp 0x4069fa
lea eax, [ebp - 0x9c44]
push eax
lea eax, [ebp - 0xc354]
push esi
push eax
call fcn.006311ec
add esp, 0xc
push 0xffffffffffffffff
push 0x66ae5d
lea eax, [ebp - 0x7534]
push eax
lea eax, [ebp - 0xc354]
push eax
lea eax, [ebp - 0x4e24]
push eax
push str.POP3
push 0xfc
push 2
call fcn.00412c85
add esp, 0x20
xor eax, eax
mov dword [ebp - 0x222e8], esi
mov word [ebp - 0x11174], ax
xor ecx, ecx
lea eax, [ebp - 0x222e8]
mov byte [ebp - 0x2714], cl
push eax
lea eax, [ebp - 0x11174]
mov byte [ebp - 0x7534], cl
push eax
lea eax, [ebp - 0x222f4]
push eax
push ecx
push str.SMTP_User
push dword [ebp - 0x222f0]
call edi
lea eax, [ebp - 0x222ec]
mov dword [ebp - 0x222ec], esi
push eax
lea eax, [ebp - 0x186a4]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.SMTP_Password
push dword [ebp - 0x222f0]
call edi
test eax, eax
jne 0x406ac7
push dword [ebp - 0x222ec]
push str.Found_password_size_d
call fcn.00449974
push 1
push esi
lea eax, [ebp - 0x7534]
push eax
push dword [ebp - 0x222ec]
lea eax, [ebp - 0x186a4]
push eax
call fcn.0040ca69
add esp, 0x1c
lea eax, [ebp - 0x11174]
push eax
call fcn.00630ba0
pop ecx
test eax, eax
je 0x406b20
push 0
push 0
push esi
lea eax, [ebp - 0x2714]
push eax
lea eax, [ebp - 0x11174]
push eax
call fcn.00630ba0
pop ecx
push eax
lea eax, [ebp - 0x11174]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x11174]
push eax
call fcn.00630ba0
pop ecx
cmp eax, esi
jae 0x406fbf
mov byte [ebp + eax - 0x2714], 0
cmp byte [ebp - 0x2714], 0
mov al, byte [ebp - 0x7534]
jne 0x406b37
test al, al
je 0x406d2b
test al, al
jne 0x406b50
push str._Password_is_empty_or_not_found_
lea eax, [ebp - 0x7534]
push esi
push eax
call fcn.006311ec
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x222e8], esi
mov word [ebp - 0x15f94], ax
lea eax, [ebp - 0x222e8]
push eax
lea eax, [ebp - 0x15f94]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.SMTP_Server
push dword [ebp - 0x222f0]
call edi
and dword [ebp - 0x222f8], 0
mov esi, eax
lea eax, [ebp - 0x222ec]
mov dword [ebp - 0x222ec], 4
push eax
lea eax, [ebp - 0x222f8]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.SMTP_Port
push dword [ebp - 0x222f0]
call edi
push dword [ebp - 0x222f8]
lea eax, [ebp - 0x15f94]
push eax
push str.Found_servername_S__port_d
call fcn.00449974
xor eax, eax
add esp, 0xc
test esi, esi
mov byte [ebp - 0x4e24], al
mov esi, 0x2710
jne 0x406c82
cmp dword [ebp - 0x222e8], eax
jbe 0x406c82
push eax
push eax
push esi
lea eax, [ebp - 0x4e24]
push eax
lea eax, [ebp - 0x15f94]
push eax
call fcn.00630ba0
pop ecx
push eax
lea eax, [ebp - 0x15f94]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x15f94]
push eax
call fcn.00630ba0
pop ecx
cmp eax, esi
jae 0x406fbf
cmp dword [ebp - 0x222f8], 0
mov byte [ebp + eax - 0x4e24], 0
jbe 0x406c82
push 0xa
push esi
lea eax, [ebp - 0x1adb4]
push eax
push dword [ebp - 0x222f8]
call fcn.0063e2e7
push 0x67e61c
lea eax, [ebp - 0x4e24]
push esi
push eax
call fcn.00631246
lea eax, [ebp - 0x1adb4]
push eax
lea eax, [ebp - 0x4e24]
push esi
push eax
call fcn.00631246
add esp, 0x28
push str.SMTP_Password
push ebx
push str._s:_s
lea eax, [ebp - 0x1d4c4]
push esi
push eax
call fcn.00445d6d
add esp, 0x14
cmp byte [ebp - 0x2714], 0
je 0x406ce4
lea eax, [ebp - 0x2714]
push eax
lea eax, [ebp - 0x9c44]
push eax
call fcn.00631435
pop ecx
pop ecx
test eax, eax
je 0x406ce4
lea eax, [ebp - 0x9c44]
push eax
lea eax, [ebp - 0x2714]
push eax
push str.User_s__Email_s
lea eax, [ebp - 0xc354]
push esi
push eax
call fcn.00445d6d
add esp, 0x14
jmp 0x406cfb
lea eax, [ebp - 0x9c44]
push eax
lea eax, [ebp - 0xc354]
push esi
push eax
call fcn.006311ec
add esp, 0xc
push 0xffffffffffffffff
push 0x66ae5d
lea eax, [ebp - 0x7534]
push eax
lea eax, [ebp - 0xc354]
push eax
lea eax, [ebp - 0x4e24]
push eax
push str.SMTP
push 0xfc
push 2
call fcn.00412c85
add esp, 0x20
xor eax, eax
mov dword [ebp - 0x222e8], esi
mov word [ebp - 0x11174], ax
xor ecx, ecx
lea eax, [ebp - 0x222e8]
mov byte [ebp - 0x2714], cl
push eax
lea eax, [ebp - 0x11174]
mov byte [ebp - 0x7534], cl
push eax
lea eax, [ebp - 0x222f4]
push eax
push ecx
push str.HTTP_User
push dword [ebp - 0x222f0]
call edi
lea eax, [ebp - 0x222ec]
mov dword [ebp - 0x222ec], esi
push eax
lea eax, [ebp - 0x186a4]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.HTTP_Password
push dword [ebp - 0x222f0]
call edi
test eax, eax
jne 0x406dc8
push dword [ebp - 0x222ec]
push str.Found_password_size_d
call fcn.00449974
push 1
push esi
lea eax, [ebp - 0x7534]
push eax
push dword [ebp - 0x222ec]
lea eax, [ebp - 0x186a4]
push eax
call fcn.0040ca69
add esp, 0x1c
lea eax, [ebp - 0x11174]
push eax
call fcn.00630ba0
pop ecx
test eax, eax
je 0x406e21
push 0
push 0
push esi
lea eax, [ebp - 0x2714]
push eax
lea eax, [ebp - 0x11174]
push eax
call fcn.00630ba0
pop ecx
push eax
lea eax, [ebp - 0x11174]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x11174]
push eax
call fcn.00630ba0
pop ecx
cmp eax, esi
jae 0x406fbf
mov byte [ebp + eax - 0x2714], 0
cmp byte [ebp - 0x2714], 0
mov al, byte [ebp - 0x7534]
jne 0x406e38
test al, al
je 0x406fa1
test al, al
jne 0x406e51
push str._Password_is_empty_or_not_found_
lea eax, [ebp - 0x7534]
push esi
push eax
call fcn.006311ec
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x222e8], esi
mov word [ebp - 0x15f94], ax
lea eax, [ebp - 0x222e8]
push eax
lea eax, [ebp - 0x15f94]
push eax
lea eax, [ebp - 0x222f4]
push eax
push 0
push str.HTTP_Server_URL
push dword [ebp - 0x222f0]
call edi
mov esi, eax
lea eax, [ebp - 0x15f94]
push eax
push str.Found_servername_S
call fcn.00449974
xor eax, eax
test esi, esi
pop ecx
pop ecx
mov byte [ebp - 0x4e24], al
mov esi, 0x2710
jne 0x406ef8
cmp dword [ebp - 0x222e8], eax
jbe 0x406ef8
push eax
push eax
push esi
lea eax, [ebp - 0x4e24]
push eax
lea eax, [ebp - 0x15f94]
push eax
call fcn.00630ba0
pop ecx
push eax
lea eax, [ebp - 0x15f94]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [ebp - 0x15f94]
push eax
call fcn.00630ba0
pop ecx
cmp eax, esi
jae 0x406fbf
mov byte [ebp + eax - 0x4e24], 0
push str.HTTP_Password
push ebx
push str._s:_s
lea eax, [ebp - 0x1d4c4]
push esi
push eax
call fcn.00445d6d
add esp, 0x14
cmp byte [ebp - 0x2714], 0
je 0x406f5a
lea eax, [ebp - 0x2714]
push eax
lea eax, [ebp - 0x9c44]
push eax
call fcn.00631435
pop ecx
pop ecx
test eax, eax
je 0x406f5a
lea eax, [ebp - 0x9c44]
push eax
lea eax, [ebp - 0x2714]
push eax
push str.User_s__Email_s
lea eax, [ebp - 0xc354]
push esi
push eax
call fcn.00445d6d
add esp, 0x14
jmp 0x406f71
lea eax, [ebp - 0x9c44]
push eax
lea eax, [ebp - 0xc354]
push esi
push eax
call fcn.006311ec
add esp, 0xc
push 0xffffffffffffffff
push 0x66ae5d
lea eax, [ebp - 0x7534]
push eax
lea eax, [ebp - 0xc354]
push eax
lea eax, [ebp - 0x4e24]
push eax
push str.HTTP
push 0xfc
push 2
call fcn.00412c85
add esp, 0x20
push dword [ebp - 0x222f0]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
inc eax
pop edi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret
call fcn.005fe87a
int3