Function at 0x435ec3
Capabilities:
Query or enumerate registry value

Disassembly:
mov eax, 0x607840
call fcn.00465b38
sub esp, 0x234
push ebx
push esi
xor ebx, ebx
mov esi, ecx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x2c], ebx
call fcn.005fb230
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x28]
push dword [eax + 0x7c]
call fcn.005ece05
push str.Software_
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], ebx
call fcn.005ece05
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 1
cmp dword [eax - 8], ebx
jne 0x435f1d
push str.SoftwareXComponentsXListCtrl_
lea ecx, [ebp - 0x10]
call fcn.005ecf28
jmp 0x435f36
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x10]
push eax
call fcn.005ed1be
push 0x66af18
lea ecx, [ebp - 0x10]
call fcn.005ed182
push edi
call fcn.005fb230
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x10]
push dword [eax + 0x78]
call fcn.005ed182
push str.Settings_
lea ecx, [ebp - 0x10]
call fcn.005ed182
push dword [esi + 0x1c]
call dword [sym.imp.USER32.dll_GetParent]
push eax
call fcn.005e8e81
mov edx, eax
mov eax, dword [0x682534]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x20], eax
push 0x7f
xor eax, eax
pop ecx
lea edi, [ebp - 0x23e]
mov word [ebp - 0x240], bx
cmp edx, ebx
rep stosd dword es:[edi], eax
mov byte [ebp - 4], 2
stosw word es:[edi], ax
jne 0x435f95
xor edx, edx
jmp 0x435f98
mov edx, dword [edx + 0x1c]
lea eax, [ebp - 0x240]
push 0x100
push eax
push edx
call dword [sym.imp.USER32.dll_GetClassNameW]
push str.Unknown
lea ecx, [ebp - 0x24]
mov edi, eax
call fcn.005ece05
cmp edi, ebx
mov byte [ebp - 4], 3
jle 0x435fea
lea eax, [ebp - 0x240]
lea ecx, [ebp - 0x1c]
push eax
call fcn.005ece05
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 4
call fcn.005eced8
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.005ecd91
mov ecx, esi
call fcn.005ec304
mov ecx, dword [ebp - 0x18]
push eax
call fcn.005ec304
push eax
lea eax, [ebp - 0x20]
push dword [ebp - 0x24]
push str._s__d_ID_d
push eax
call fcn.005e20b1
add esp, 0x14
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x10]
push eax
call fcn.005ed1be
lea ecx, [ebp - 0x40]
call fcn.005e624e
push 0xffffffffffffffff
push 4
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 5
call fcn.005e62ae
lea eax, [ebp - 0x14]
mov dword [ebp - 0x18], 0x10
push eax
push 0x20019
push ebx
mov dword [ebp - 0x1c], ebx
push dword [ebp - 0x10]
push reloc.WS2_32.dll_accept
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4360e9
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push dword [ebp - 0x3c]
push eax
push ebx
push str.ListInfo
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x4360e9
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp + 8]
push 0xffffffffffffffff
push ebx
mov ecx, dword [eax + 4]
mov edi, dword [eax]
mov dword [edx], ecx
mov edx, dword [ebp + 0xc]
mov ecx, dword [eax + 8]
mov dword [edx], ecx
mov eax, dword [eax + 0xc]
mov dword [esi + 0x118], eax
mov eax, edi
imul eax, eax, 0x210
lea ecx, [esi + 0x31c]
mov dword [ebp - 0x18], eax
call fcn.004372f8
push 0xffffffffffffffff
push edi
lea ecx, [esi + 0x31c]
call fcn.004372f8
mov eax, dword [esi + 0x320]
lea ecx, [ebp - 0x18]
push ecx
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
push str.ColInfo
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x4360e9
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x14], ebx
pop edi
je 0x4360f8
push dword [ebp - 0x14]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x2c], ebx
je 0x436104
mov ecx, esi
call fcn.00435a4b
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 3
call fcn.005e6281
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 2
call fcn.005ecd91
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.005ecd91
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], bl
call fcn.005ecd91
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.005ecd91
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x2c]
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc