Function at 0x4067e8
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
push esi
mov dword [ebp - 0x114], 0
jmp 0x40680d
mov eax, dword [ebp - 0x114]
add eax, 1
mov dword [ebp - 0x114], eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 0x114]
cmp edx, dword [ecx + 0x2b0]
jge 0x406b94
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x114]
push ecx
mov edx, dword [str.EnumMF_]
push edx
push 0x40e79c
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x108]
push edx
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
je 0x40686b
jmp 0x406b94
mov dword [ebp - 0x10c], 4
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 4]
push ecx
push 0
push 0
mov edx, dword [str.Settings]
push edx
mov eax, dword [ebp - 0x11c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x4068a4
mov byte [ebp - 4], 2
mov byte [ebp - 2], 0
mov dword [ebp - 0x10c], 0x104
lea ecx, [ebp - 0x10c]
push ecx
push 0x4118f8
push 0
push 0
mov edx, dword [0x40de24]
push edx
mov eax, dword [ebp - 0x11c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jne 0x4068f3
push 0x4118f8
mov ecx, dword [ebp + 0xc]
add ecx, 0xc
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov dword [ebp - 0x120], 0
jmp 0x40690e
mov edx, dword [ebp - 0x120]
add edx, 1
mov dword [ebp - 0x120], edx
cmp dword [ebp - 0x120], 3
jge 0x4069f1
mov eax, dword [ebp - 0x120]
shl eax, 4
mov ecx, dword [eax + 0x40d618]
push ecx
mov edx, dword [ebp + 0xc]
add edx, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x4069ec
mov dword [ebp - 0x118], 0
jmp 0x40695b
mov eax, dword [ebp - 0x118]
add eax, 1
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0x120]
shl ecx, 4
mov edx, dword [ebp - 0x118]
cmp edx, dword [ecx + 0x40d61c]
jge 0x4069c1
mov eax, dword [ebp - 0x120]
shl eax, 4
mov ecx, dword [ebp - 0x118]
imul ecx, ecx, 0xc
mov edx, dword [eax + 0x40d620]
mov eax, dword [ebp - 0x114]
mov esi, dword [ebp + 0xc]
mov eax, dword [esi + eax*4 + 0x3b4]
cmp eax, dword [edx + ecx]
jne 0x4069bf
mov ecx, dword [ebp - 0x120]
shl ecx, 4
mov edx, dword [ebp - 0x118]
imul edx, edx, 0xc
mov eax, dword [ecx + 0x40d620]
mov cl, byte [eax + edx]
mov byte [ebp - 1], cl
jmp 0x4069c1
jmp 0x40694c
mov edx, dword [ebp - 0x120]
shl edx, 4
mov eax, dword [ebp - 0x118]
cmp eax, dword [edx + 0x40d61c]
jne 0x4069ea
mov ecx, dword [ebp - 0x120]
shl ecx, 4
mov dl, byte [ecx + 0x40d624]
mov byte [ebp - 1], dl
jmp 0x4069f1
jmp 0x4068ff
mov dword [ebp - 0x120], 0
jmp 0x406a0c
mov eax, dword [ebp - 0x120]
add eax, 1
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 3
jge 0x406aef
mov ecx, dword [ebp - 0x120]
shl ecx, 4
mov edx, dword [ecx + 0x40d5e8]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
jne 0x406aea
mov dword [ebp - 0x118], 0
jmp 0x406a59
mov ecx, dword [ebp - 0x118]
add ecx, 1
mov dword [ebp - 0x118], ecx
mov edx, dword [ebp - 0x120]
shl edx, 4
mov eax, dword [ebp - 0x118]
cmp eax, dword [edx + 0x40d5ec]
jge 0x406abf
mov ecx, dword [ebp - 0x120]
shl ecx, 4
mov edx, dword [ebp - 0x118]
imul edx, edx, 0xc
mov eax, dword [ecx + 0x40d5f0]
mov ecx, dword [ebp - 0x114]
mov esi, dword [ebp + 0xc]
mov ecx, dword [esi + ecx*4 + 0x3d4]
cmp ecx, dword [eax + edx]
jne 0x406abd
mov edx, dword [ebp - 0x120]
shl edx, 4
mov eax, dword [ebp - 0x118]
imul eax, eax, 0xc
mov ecx, dword [edx + 0x40d5f0]
mov dl, byte [ecx + eax]
mov byte [ebp - 3], dl
jmp 0x406abf
jmp 0x406a4a
mov eax, dword [ebp - 0x120]
shl eax, 4
mov ecx, dword [ebp - 0x118]
cmp ecx, dword [eax + 0x40d5ec]
jne 0x406ae8
mov edx, dword [ebp - 0x120]
shl edx, 4
mov al, byte [edx + 0x40d5f4]
mov byte [ebp - 3], al
jmp 0x406aef
jmp 0x4069fd
mov dword [ebp - 0x10c], 4
mov ecx, dword [ebp - 0x10c]
push ecx
lea edx, [ebp - 4]
push edx
push 3
push 0
mov eax, dword [str.Settings]
push eax
mov ecx, dword [ebp - 0x11c]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov edx, dword [ebp + 0xc]
cmp dword [edx + 8], 1
jne 0x406b56
mov eax, dword [ebp + 0xc]
add eax, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0xc
push ecx
push 1
push 0
mov edx, dword [0x40de24]
push edx
mov eax, dword [ebp - 0x11c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
jmp 0x406b82
push 0x40e7b0
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add eax, 1
push eax
push str.16550C
push 1
push 0
mov ecx, dword [0x40de24]
push ecx
mov edx, dword [ebp - 0x11c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov eax, dword [ebp - 0x11c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4067fe
pop esi
mov esp, ebp
pop ebp
ret