Function at 0x40bcb4
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x4c4
mov eax, 0x4529b7
call fcn.00436cf5
mov ebx, ecx
call fcn.0041f7f6
mov eax, dword [eax + 4]
mov eax, dword [eax + 0xa8]
mov dword [ebx + 0x74], eax
call fcn.0041f7f6
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x4c4]
push ecx
mov ecx, eax
call fcn.0040800c
and dword [ebp - 4], 0
call fcn.0044e630
push dword [ebp - 0x4c4]
mov esi, dword [0x456320]
push 1
push str.autostart
mov edi, str.common
push edi
call esi
push dword [ebp - 0x4c4]
mov dword [ebp - 0x4d0], eax
push 1
push str.trayicon
push edi
call esi
push dword [ebp - 0x4c4]
mov dword [ebp - 0x4c8], eax
push 1
push 0x458d1c
push edi
call esi
push dword [ebp - 0x4c4]
mov dword [ebp - 0x4c0], eax
push 1
push str.shellext
push edi
call esi
push dword [ebp - 0x4c4]
xor edi, edi
push edi
push str.disable
push 0x458cec
mov dword [ebp - 0x4cc], eax
call esi
mov esi, eax
call fcn.0044e740
xor eax, eax
cmp dword [ebp - 0x4d0], 1
mov ecx, ebx
sete al
push eax
push 0x45e
call fcn.0041e31e
mov ecx, eax
call fcn.00409ffa
xor eax, eax
cmp dword [ebp - 0x4c8], 1
mov ecx, ebx
sete al
push eax
push 0x433
call fcn.0041e31e
mov ecx, eax
call fcn.00409ffa
xor eax, eax
cmp dword [ebp - 0x4c0], 1
mov ecx, ebx
sete al
push eax
push 0x408
call fcn.0041e31e
mov ecx, eax
call fcn.00409ffa
xor eax, eax
cmp dword [ebp - 0x4cc], edi
mov ecx, ebx
setne al
push eax
push 0x404
call fcn.0041e31e
mov ecx, eax
call fcn.00409ffa
xor eax, eax
cmp esi, edi
sete al
mov ecx, ebx
push eax
push 0x44b
call fcn.0041e31e
mov ecx, eax
call fcn.00409ffa
lea ecx, [ebx + 0x78]
push edi
call fcn.0041e4aa
call fcn.0041f7f6
mov eax, dword [eax + 4]
mov esi, 0x80
push esi
lea ecx, [ebp - 0x420]
push ecx
mov ecx, eax
call fcn.0040810e
xor eax, eax
mov edi, 0x1fe
push edi
push eax
mov word [ebp - 0x220], ax
lea eax, [ebp - 0x21e]
push eax
call fcn.00437730
add esp, 0xc
lea ecx, [ebp - 0x4bc]
call fcn.0040f678
mov byte [ebp - 4], 1
lea eax, [ebp - 0x220]
push eax
call fcn.0044ded0
test eax, eax
jne 0x40bfc6
push 0x457da4
push 0x457d58
lea eax, [ebp - 0x320]
push esi
push eax
mov dword [ebp - 0x4c0], 0x200
call fcn.00437f1b
add esp, 0x10
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x4c8]
push eax
push 0x457d4c
lea eax, [ebp - 0x320]
push eax
push 0x80000002
call dword [0x456430]
test eax, eax
je 0x40bfc6
push eax
call dword [0x456330]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4bc]
call fcn.0040ee9b
push 0x401
mov ecx, ebx
call fcn.0041e31e
push 0
push 1
push 0xf1
push dword [eax + 0x20]
call dword [0x456650]
push 1
push 0x40b
mov ecx, ebx
call fcn.0041e31e
mov ecx, eax
call fcn.0041e4ec
xor eax, eax
push edi
push eax
mov word [ebp - 0x220], ax
lea eax, [ebp - 0x21e]
push eax
call fcn.00437730
add esp, 0xc
lea ecx, [ebp - 0x4bc]
call fcn.0040f678
mov byte [ebp - 4], 2
lea eax, [ebp - 0x220]
push eax
call fcn.0044ded0
test eax, eax
jne 0x40c140
push 0x457da4
push 0x457d58
lea eax, [ebp - 0x320]
push esi
push eax
mov dword [ebp - 0x4c0], 0x200
call fcn.00437f1b
add esp, 0x10
lea eax, [ebp - 0x4c0]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x4c8]
push eax
push 0x457d4c
lea eax, [ebp - 0x320]
push eax
push 0x80000002
call dword [0x456430]
test eax, eax
je 0x40c140
push eax
call dword [0x456330]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4bc]
call fcn.0040ee9b
jmp 0x40c0d3
push str._BLANKPWD
lea eax, [ebp - 0x220]
push 0x100
push eax
call fcn.00437d7c
lea eax, [ebp - 0x220]
push eax
call fcn.00437158
add esp, 0x10
add eax, eax
push eax
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x4bc]
call fcn.0040f68a
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x4bc]
call fcn.0040f72f
movzx eax, byte [ebp - 0x11]
push eax
movzx eax, byte [ebp - 0x12]
push eax
movzx eax, byte [ebp - 0x13]
push eax
movzx eax, byte [ebp - 0x14]
push eax
movzx eax, byte [ebp - 0x15]
push eax
movzx eax, byte [ebp - 0x16]
push eax
movzx eax, byte [ebp - 0x17]
push eax
movzx eax, byte [ebp - 0x18]
push eax
movzx eax, byte [ebp - 0x19]
push eax
movzx eax, byte [ebp - 0x1a]
push eax
movzx eax, byte [ebp - 0x1b]
push eax
movzx eax, byte [ebp - 0x1c]
push eax
movzx eax, byte [ebp - 0x1d]
push eax
movzx eax, byte [ebp - 0x1e]
push eax
movzx eax, byte [ebp - 0x1f]
push eax
movzx eax, byte [ebp - 0x20]
push eax
push str._02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x
lea eax, [ebp - 0x220]
push 0x100
push eax
call fcn.00437f1b
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00437ee4
add esp, 0x54
test eax, eax
jne 0x40bed4
mov byte [ebp - 4], al
lea ecx, [ebp - 0x4bc]
call fcn.0040ee9b
push 0x401
mov ecx, ebx
call fcn.0041e31e
xor esi, esi
push esi
push esi
push 0xf1
push dword [eax + 0x20]
call dword [0x456650]
push esi
push 0x40b
mov ecx, ebx
call fcn.0041e31e
mov ecx, eax
call fcn.0041e4ec
push 0x404
mov ecx, ebx
call fcn.0041e31e
mov ecx, eax
call fcn.00404f76
test eax, eax
je 0x40c260
push 0x401
mov ecx, ebx
call fcn.0041e31e
mov ecx, eax
call fcn.00404f76
test eax, eax
je 0x40c260
push 1
mov esi, 0x44d
push esi
mov ecx, ebx
call fcn.0041e31e
mov ecx, eax
call fcn.0041e4ec
xor eax, eax
cmp dword [ebp - 0x4cc], 2
mov ecx, ebx
sete al
push eax
push esi
call fcn.0041e31e
mov ecx, eax
call fcn.00409ffa
jmp 0x40c275
push 0x4569b0
mov esi, 0x100
lea eax, [ebp - 0x220]
push esi
push eax
call fcn.00437d7c
lea eax, [ebp - 0x220]
push eax
call fcn.00437158
add esp, 0x10
add eax, eax
push eax
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x4bc]
call fcn.0040f68a
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x4bc]
call fcn.0040f72f
movzx eax, byte [ebp - 0x11]
push eax
movzx eax, byte [ebp - 0x12]
push eax
movzx eax, byte [ebp - 0x13]
push eax
movzx eax, byte [ebp - 0x14]
push eax
movzx eax, byte [ebp - 0x15]
push eax
movzx eax, byte [ebp - 0x16]
push eax
movzx eax, byte [ebp - 0x17]
push eax
movzx eax, byte [ebp - 0x18]
push eax
movzx eax, byte [ebp - 0x19]
push eax
movzx eax, byte [ebp - 0x1a]
push eax
movzx eax, byte [ebp - 0x1b]
push eax
movzx eax, byte [ebp - 0x1c]
push eax
movzx eax, byte [ebp - 0x1d]
push eax
movzx eax, byte [ebp - 0x1e]
push eax
movzx eax, byte [ebp - 0x1f]
push eax
movzx eax, byte [ebp - 0x20]
push eax
push str._02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x
lea eax, [ebp - 0x220]
push esi
push eax
call fcn.00437f1b
lea eax, [ebp - 0x420]
push eax
lea eax, [ebp - 0x220]
push eax
call fcn.00437ee4
add esp, 0x54
test eax, eax
jne 0x40bfb2
mov byte [ebp - 4], al
lea ecx, [ebp - 0x4bc]
call fcn.0040ee9b
call fcn.0041f7f6
mov eax, dword [eax + 4]
push 0xc356
lea ecx, [ebp - 0x4c0]
push ecx
mov ecx, eax
call fcn.00408299
mov byte [ebp - 4], 3
push dword [eax]
lea esi, [ebx + 0x78]
mov ecx, esi
call fcn.0041e408
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4c0]
call fcn.00401668
push 5
mov ecx, esi
call fcn.0041e4aa
jmp 0x40c0d3
push 0
push 0x44d
mov ecx, ebx
call fcn.0041e31e
mov ecx, eax
call fcn.0041e4ec
push 0x44b
mov ecx, ebx
call fcn.0041e31e
mov ecx, eax
call fcn.00404f76
test eax, eax
jne 0x40c2a0
push eax
push 0x453
mov ecx, ebx
call fcn.0041e31e
mov ecx, eax
call fcn.0041e4ec
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c4]
call fcn.00401668
call fcn.00436d78
ret 4