Function at 0x100305f0
Capabilities:
Enumerate processes
Get installed programs
Parse pe header
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x10040e7d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x160
push ebx
push ebp
push esi
push edi
xor ebx, ebx
lea ecx, [esp + 0x38]
mov dword [esp + 0x178], ebx
call fcn.100170f0
mov ecx, 0x4a
xor eax, eax
lea edi, [esp + 0x3c]
push ebx
rep stosd dword es:[edi], eax
push 2
mov byte [esp + 0x180], 1
mov dword [esp + 0x44], 0x128
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
lea ecx, [esp + 0x38]
mov esi, eax
call fcn.10017290
lea eax, [esp + 0x3c]
mov dword [esp + 0x38], esi
push eax
push esi
call sub.KERNEL32.dll_Process32First
test eax, eax
setne al
mov byte [esp + 0x164], al
mov esi, dword [sym.imp.SHLWAPI.dll_StrStrIA]
mov dword [esp + 0x178], 2
test al, al
je 0x10030ba8
push 0x45
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x1003069d
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [esp + 0x60]
push eax
push ecx
call esi
test eax, eax
jne 0x10030ffc
push 0x46
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x100306c5
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea edx, [esp + 0x60]
push eax
push edx
call esi
test eax, eax
jne 0x10030ffc
push 0x47
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x100306ed
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
lea eax, [esp + 0x64]
push eax
call esi
test eax, eax
jne 0x10030ffc
push 0x48
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030715
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [esp + 0x60]
push eax
push ecx
call esi
test eax, eax
jne 0x10030ffc
push 0x49
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x1003073d
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea edx, [esp + 0x60]
push eax
push edx
call esi
test eax, eax
jne 0x10030ffc
push 0x4a
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030765
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
lea eax, [esp + 0x64]
push eax
call esi
test eax, eax
jne 0x10030ffc
push 0x4b
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x1003078d
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [esp + 0x60]
push eax
push ecx
call esi
test eax, eax
jne 0x10030ffc
push 0x4c
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x100307b5
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea edx, [esp + 0x60]
push eax
push edx
call esi
test eax, eax
jne 0x10030ffc
push 0x4d
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x100307dd
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
lea eax, [esp + 0x64]
push eax
call esi
test eax, eax
jne 0x10030ffc
push 0x4e
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030805
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [esp + 0x60]
push eax
push ecx
call esi
test eax, eax
jne 0x10030ffc
push 0x4f
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x1003082d
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea edx, [esp + 0x60]
push eax
push edx
call esi
test eax, eax
jne 0x10030ffc
push 0x50
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030855
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
lea eax, [esp + 0x64]
push eax
call esi
test eax, eax
jne 0x10030ffc
push 0x51
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x1003087d
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [esp + 0x60]
push eax
push ecx
call esi
test eax, eax
jne 0x10030ffc
push 0x52
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x100308a5
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea edx, [esp + 0x60]
push eax
push edx
call esi
test eax, eax
jne 0x10030ffc
push 0x53
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x100308cd
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
lea eax, [esp + 0x64]
push eax
call esi
test eax, eax
jne 0x10030ffc
push 0x54
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x100308f5
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [esp + 0x60]
push eax
push ecx
call esi
test eax, eax
jne 0x10030ffc
push 0x55
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x1003091d
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea edx, [esp + 0x60]
push eax
push edx
call esi
test eax, eax
jne 0x10030ffc
push 0x56
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030945
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
lea eax, [esp + 0x64]
push eax
call esi
test eax, eax
jne 0x10030ffc
push 0x57
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x1003096d
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [esp + 0x60]
push eax
push ecx
call esi
test eax, eax
jne 0x10030ffc
push 0x58
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030995
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea edx, [esp + 0x60]
push eax
push edx
call esi
test eax, eax
jne 0x10030ffc
push 0x59
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x100309bd
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
lea eax, [esp + 0x64]
push eax
call esi
test eax, eax
jne 0x10030ffc
push 0x5a
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x100309e5
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [esp + 0x60]
push eax
push ecx
call esi
test eax, eax
jne 0x10030ffc
push 0x5b
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030a0d
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea edx, [esp + 0x60]
push eax
push edx
call esi
test eax, eax
jne 0x10030ffc
push 0x5c
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030a35
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
lea eax, [esp + 0x64]
push eax
call esi
test eax, eax
jne 0x10030ffc
push 0x5d
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030a5d
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [esp + 0x60]
push eax
push ecx
call esi
test eax, eax
jne 0x10030ffc
push 0x5e
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030a85
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea edx, [esp + 0x60]
push eax
push edx
call esi
test eax, eax
jne 0x10030ffc
push 0x5f
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030aad
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
lea eax, [esp + 0x64]
push eax
call esi
test eax, eax
jne 0x10030ffc
push 0x60
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030ad5
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [esp + 0x60]
push eax
push ecx
call esi
test eax, eax
jne 0x10030ffc
push 0x61
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030afd
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea edx, [esp + 0x60]
push eax
push edx
call esi
test eax, eax
jne 0x10030ffc
push 0x62
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030b25
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
lea eax, [esp + 0x64]
push eax
call esi
test eax, eax
jne 0x10030ffc
push 0x63
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030b4d
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea ecx, [esp + 0x60]
push eax
push ecx
call esi
test eax, eax
jne 0x10030ffc
push 0x64
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
cmp eax, ebx
jne 0x10030b75
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
lea edx, [esp + 0x60]
push eax
push edx
call esi
test eax, eax
jne 0x10030ffc
mov ecx, dword [esp + 0x38]
lea eax, [esp + 0x3c]
push eax
push ecx
call sub.KERNEL32.dll_Process32Next
test eax, eax
setne al
test al, al
mov byte [esp + 0x164], al
jne 0x10030685
mov dword [esp + 0x14], ebx
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall
lea ecx, [esp + 0x1c]
mov byte [esp + 0x17c], 3
call sub.MFC42.DLL_CString::CString_1
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x1c]
push edx
push 0x20019
push ebx
push eax
push reloc.OLEAUT32.dll_SysReAllocString
mov byte [esp + 0x18c], 4
mov dword [esp + 0x30], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x10030feb
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x14], esi
push 0x101
mov dword [esp + 0x2c], 0x100
call sub.MFC42.DLL_operatornew
add esp, 4
lea ecx, [esp + 0x168]
lea edx, [esp + 0x28]
mov ebp, eax
mov eax, dword [esp + 0x24]
push ecx
push ebx
push ebx
push ebx
push edx
push ebp
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
cmp eax, ebx
jne 0x1003107c
xor edi, edi
mov dword [esp + 0x30], edi
lea ecx, [esp + 0x18]
push 0x1005460c
lea edx, [esp + 0x30]
push ecx
push edx
mov byte [esp + 0x184], 5
call sub.MFC42.DLL_operator
push ebp
push eax
lea eax, [esp + 0x3c]
mov byte [esp + 0x180], 6
push eax
call sub.MFC42.DLL_operator
mov eax, dword [eax]
lea ecx, [esp + 0x10]
push ecx
push 0x20019
push ebx
push eax
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x24], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x10030c9a
mov edi, dword [esp + 0x10]
xor eax, eax
mov dword [esp + 0x30], edi
xor esi, esi
lea ecx, [esp + 0x34]
cmp eax, esi
setne bl
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x178], 5
call sub.MFC42.DLL_CString::CString
test bl, bl
jne 0x10031015
lea edx, [esp + 0x20]
lea eax, [esp + 0x10]
push edx
push esi
push eax
push esi
push str.DisplayName
push edi
mov dword [esp + 0x38], esi
mov dword [esp + 0x28], esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, esi
jne 0x1003101b
mov ecx, dword [esp + 0x20]
inc ecx
push ecx
call sub.MFC42.DLL_operatornew
add esp, 4
lea edx, [esp + 0x20]
mov esi, eax
lea eax, [esp + 0x10]
push edx
push esi
push eax
push 0
push str.DisplayName
push edi
mov dword [esp + 0x28], 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x10031036
push 0x65
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030d3c
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
mov ebx, dword [sym.imp.SHLWAPI.dll_StrStrIA]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x66
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030d66
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x67
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030d8a
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x68
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030dae
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x69
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030dd2
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x6a
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030df6
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x6b
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030e1a
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x6c
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030e3e
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x6d
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030e62
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x6e
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030e86
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x6f
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030eaa
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x70
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030ece
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x71
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030ef2
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x72
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030f16
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x73
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030f3a
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x74
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030f5e
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x75
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030f82
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x76
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030fa6
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push 0x77
mov ecx, 0x10056110
call fcn.1000b570
mov eax, dword [eax + 4]
test eax, eax
jne 0x10030fca
mov eax, dword [sym.imp.MSVCP60.dll_char_const__private:_static_char_const____cdecl_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::_Nullstr_void_::_2::_C]
push eax
push esi
call ebx
test eax, eax
jne 0x100310cb
push esi
call sub.MFC42.DLL_operatordelete
add esp, 4
mov byte [esp + 0x178], 4
test edi, edi
jmp 0x10031032
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x38]
mov dword [esp + 0x178], 0xffffffff
call fcn.10017270
jmp 0x10031136
cmp edi, esi
je 0x10031028
jmp 0x1003101f
cmp edi, esi
je 0x10031028
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
mov byte [esp + 0x178], 4
cmp edi, esi
je 0x1003105f
jmp 0x10031058
test edi, edi
je 0x10031043
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
push esi
call sub.MFC42.DLL_operatordelete
add esp, 4
mov byte [esp + 0x178], 4
test edi, edi
je 0x1003105f
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebp
call sub.MFC42.DLL_operatordelete
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x20]
add esp, 4
inc eax
mov dword [esp + 0x24], eax
xor ebx, ebx
jmp 0x10030bfd
push ebp
call sub.MFC42.DLL_operatordelete
add esp, 4
cmp esi, ebx
je 0x10031098
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor esi, esi
mov dword [esp + 0x14], esi
jmp 0x1003109c
mov esi, dword [esp + 0x14]
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 3
call sub.MFC42.DLL_CString::CString
cmp esi, ebx
je 0x100310b8
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x38]
cmp eax, ebx
je 0x100310c7
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor al, al
jmp 0x10031138
test edi, edi
je 0x100310dc
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push edi
call ebx
xor edi, edi
jmp 0x100310e2
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x100310f5
push eax
call ebx
mov dword [esp + 0x14], 0
push esi
call sub.MFC42.DLL_operatordelete
push ebp
call sub.MFC42.DLL_operatordelete
add esp, 8
test edi, edi
je 0x1003110b
push edi
call ebx
lea ecx, [esp + 0x18]
mov byte [esp + 0x178], 3
call sub.MFC42.DLL_CString::CString
mov eax, dword [esp + 0x14]
test eax, eax
je 0x10031127
push eax
call ebx
mov eax, dword [esp + 0x38]
test eax, eax
je 0x10031136
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 1
mov ecx, dword [esp + 0x170]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x16c
ret