Function at 0x526f00
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0x1c
mov eax, dword [0x597c40]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
xor edi, edi
push edi
lea eax, [esp + 0x1c]
push eax
push edi
push 0xf003f
push edi
push edi
push edi
push str.SOFTWAREDeathSoftWoWEmuHacker5
push reloc.OLEAUT32.dll_SysReAllocString
mov esi, ecx
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], edi
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
mov eax, dword [esp + 0x18]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
push edi
push edi
push str.CurrentLocOnOff
mov ebp, 0x32
push eax
mov dword [esp + 0x2c], ebp
call ebx
lea ecx, [esp + 0x1c]
push ecx
call fcn.00504e5c
mov edx, dword [esi + 0x7e0]
add esp, 4
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push eax
push 0xf1
push edx
call edi
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
push 0
push 0
push str.WallClimb
push edx
mov dword [esp + 0x2c], ebp
call ebx
lea eax, [esp + 0x1c]
push eax
call fcn.00504e5c
mov ecx, dword [esi + 0xb84]
add esp, 4
push 0
push eax
push 0xf1
push ecx
call edi
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
push 0
push 0
push str.NoFallDamage
push ecx
mov dword [esp + 0x2c], ebp
call ebx
lea edx, [esp + 0x1c]
push edx
call fcn.00504e5c
add esp, 4
push 0
push eax
mov eax, dword [esi + 0x1194]
push 0xf1
push eax
call edi
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
push 0
push 0
push str.TeleportToPlane
push eax
mov dword [esp + 0x2c], ebp
call ebx
lea ecx, [esp + 0x1c]
push ecx
call fcn.00504e5c
mov edx, dword [esi + 0x1010]
add esp, 4
push 0
push eax
push 0xf1
push edx
call edi
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
push 0
push 0
push 0x57517c
push edx
mov dword [esp + 0x2c], ebp
call ebx
lea eax, [esp + 0x1c]
push eax
call fcn.00504e5c
mov ecx, dword [esi + 0x185c]
add esp, 4
push 0
push eax
push 0xf1
push ecx
call edi
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
push 0
push 0
push str.WalkOnWater
push ecx
mov dword [esp + 0x2c], ebp
call ebx
lea edx, [esp + 0x1c]
push edx
call fcn.00504e5c
add esp, 4
push 0
push eax
mov eax, dword [esi + 0x19e0]
push 0xf1
push eax
call edi
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
push 0
push 0
push str.RosettaStone
push eax
mov dword [esp + 0x2c], ebp
call ebx
lea ecx, [esp + 0x1c]
push ecx
call fcn.00504e5c
mov edx, dword [esi + 0x7a10]
add esp, 4
push 0
push eax
push 0xf1
push edx
call edi
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
push 0
push 0
push str.BreathUWater
push edx
mov dword [esp + 0x2c], ebp
call ebx
lea eax, [esp + 0x1c]
push eax
call fcn.00504e5c
mov ecx, dword [esi + 0x1c7c]
add esp, 4
push 0
push eax
push 0xf1
push ecx
call edi
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
push 0
push 0
push str.HyperMode
push ecx
mov dword [esp + 0x2c], ebp
call ebx
lea edx, [esp + 0x1c]
push edx
call fcn.00504e5c
add esp, 4
push 0
push eax
mov eax, dword [esi + 0xe8c]
push 0xf1
push eax
call edi
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
push 0
push 0
push str.AirJump
push eax
mov dword [esp + 0x2c], ebp
call ebx
lea ecx, [esp + 0x1c]
push ecx
call fcn.00504e5c
mov edx, dword [esi + 0x3310]
add esp, 4
push 0
push eax
push 0xf1
push edx
call edi
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
push 0
push 0
push str.P2PointTeleport
push edx
mov dword [esp + 0x2c], ebp
call ebx
lea eax, [esp + 0x1c]
push eax
call fcn.00504e5c
mov ecx, dword [esi + 0x149c]
add esp, 4
push 0
push eax
push 0xf1
push ecx
call edi
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
push 0
push 0
push str.AllowModelHacks
push ecx
mov dword [esp + 0x2c], ebp
call ebx
lea edx, [esp + 0x1c]
push edx
call fcn.00504e5c
add esp, 4
push 0
push eax
mov eax, dword [esi + 0xd08]
push 0xf1
push eax
call edi
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
push 0
push 0
push str.HunterTracking
push eax
mov dword [esp + 0x2c], ebp
call ebx
lea ecx, [esp + 0x1c]
push ecx
call fcn.00504e5c
mov edx, dword [esi + 0x4c4]
add esp, 4
push 0
push eax
push 0x14e
push edx
call edi
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
push 0
push 0
push str.FindTracking
push edx
mov dword [esp + 0x2c], ebp
call ebx
lea eax, [esp + 0x1c]
push eax
call fcn.00504e5c
mov ecx, dword [esi + 0x538]
add esp, 4
push 0
push eax
push 0x14e
push ecx
call edi
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
push 0
push 0
mov dword [esp + 0x24], ebp
push str.SpeedBar
mov ecx, dword [esp + 0x2c]
push ecx
call ebx
test eax, eax
je 0x5272ca
mov edx, dword [esi + 0x16ac]
push 0x2bc
push 1
push 0x405
push edx
jmp 0x5272e6
lea eax, [esp + 0x1c]
push eax
call fcn.00504e5c
mov ecx, dword [esi + 0x16ac]
add esp, 4
push eax
push 1
push 0x405
push ecx
call edi
mov ecx, dword [esp + 0x18]
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x20]
push eax
push 0
push 0
push str.SpeedHackOnOff
push ecx
mov dword [esp + 0x2c], ebp
call ebx
lea edx, [esp + 0x1c]
push edx
call fcn.00504e5c
add esp, 4
push 0
push eax
mov eax, dword [esi + 0x1318]
push 0xf1
push eax
call edi
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
push 0
push 0
push str.GravityBar
push eax
mov dword [esp + 0x2c], ebp
call ebx
test eax, eax
je 0x52735b
mov ecx, dword [esi + 0x17c0]
push 0x789
push 1
push 0x405
push ecx
jmp 0x527377
lea edx, [esp + 0x1c]
push edx
call fcn.00504e5c
add esp, 4
push eax
mov eax, dword [esi + 0x17c0]
push 1
push 0x405
push eax
call edi
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
push 0
push 0
push str.ModelSizeBar
push eax
mov dword [esp + 0x2c], ebp
call ebx
test eax, eax
je 0x5273ad
mov ecx, dword [esi + 0x1b68]
push 0x64
push 1
push 0x405
push ecx
jmp 0x5273c9
lea edx, [esp + 0x1c]
push edx
call fcn.00504e5c
add esp, 4
push eax
mov eax, dword [esi + 0x1b68]
push 1
push 0x405
push eax
call edi
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x20]
push edx
push 0
push 0
push str.MyFaction
push eax
mov dword [esp + 0x2c], ebp
call ebx
lea ecx, [esp + 0x1c]
push ecx
call fcn.00504e5c
mov edx, dword [esi + 0x3494]
add esp, 4
push 0
push eax
push 0x14e
push edx
call edi
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
push 0
push 0
push str.FactionOnOff
push edx
mov dword [esp + 0x2c], ebp
call ebx
test eax, eax
je 0x52743b
mov eax, dword [esi + 0x3508]
push 0
push 0
push 0xf1
push eax
jmp 0x527457
lea ecx, [esp + 0x1c]
push ecx
call fcn.00504e5c
mov edx, dword [esi + 0x3508]
add esp, 4
push 0
push eax
push 0xf1
push edx
call edi
mov edx, dword [esp + 0x18]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x20]
push ecx
push 0
push 0
push str.ModelSizeOnOff
push edx
mov dword [esp + 0x2c], ebp
call ebx
test eax, eax
je 0x52748d
mov eax, dword [esi + 0x368c]
push 0
push 0
push 0xf1
push eax
jmp 0x5274a9
lea ecx, [esp + 0x1c]
push ecx
call fcn.00504e5c
mov edx, dword [esi + 0x368c]
add esp, 4
push 0
push eax
push 0xf1
push edx
call edi
mov eax, dword [esp + 0x18]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, esi
call fcn.005254b0
mov ecx, esi
call fcn.00524180
mov ecx, esi
call fcn.00523f70
mov ecx, esi
call fcn.00524bc0
mov ecx, esi
call fcn.00524b30
mov ecx, esi
call fcn.00525540
mov ecx, esi
call fcn.005251f0
mov ecx, esi
call fcn.00525e20
call fcn.00523dc0
mov ecx, esi
call fcn.00524f50
mov ecx, dword [esp + 0x28]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00504076
add esp, 0x1c
ret