Function at 0x10003c20
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x318
cmp dword [0x100632bc], 0
je 0x10003c38
xor eax, eax
mov esp, ebp
pop ebp
ret
mov dword [0x100632bc], 1
call fcn.10004ae0
test eax, eax
je 0x10003c52
mov byte [0x100632a4], 1
mov ecx, dword [ebp + 0x14]
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [ebx], 0
push ecx
lea edx, [ebp - 0x218]
mov dword [eax], 0
push edx
mov dword [edi], 0
call fcn.100033e0
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
add esp, 8
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xc]
push ecx
push 0
push 0x20006
push 0
push 0x10046540
push 0
lea edx, [ebp - 0x218]
push edx
push reloc.WS2_32.dll_bind
mov dword [ebp - 4], 0
call esi
test eax, eax
je 0x10003ce8
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0xc]
push ecx
push 0
push 0x20006
push 0
push 0x10046540
push 0
lea edx, [ebp - 0x218]
push edx
push connect
call esi
test eax, eax
jne 0x10003e69
mov edx, dword [str.MDT_v7__Geodesia_]
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0xc]
lea ecx, [ebp - 8]
push ecx
push 0
push 0x4001f
push 0
push 0x10046540
push 0
push edx
push eax
call esi
test eax, eax
jne 0x10003e5f
lea ecx, [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 8]
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0x18]
push eax
push 0
push str.Version
push ecx
mov dword [ebp - 0x14], 0x100
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x10003e73
cmp dword [ebp - 0x18], 1
jne 0x10003e55
mov edx, dword [ebp + 0xc]
push ebx
push edx
push edi
lea eax, [ebp - 0x118]
push str._d._d._d
push eax
call dword [sym.imp.MSVCR100.dll_sscanf]
add esp, 0x14
cmp eax, 3
jne 0x10003e55
mov ecx, dword [edi]
mov eax, dword [0x1005d02c]
mov edx, dword [0x1005d030]
mov esi, dword [0x1005d034]
cmp eax, ecx
jne 0x10003d9b
mov edi, dword [ebp + 0xc]
cmp edx, dword [edi]
jne 0x10003d9b
mov dword [ebp - 4], 0
cmp esi, dword [ebx]
je 0x10003da2
mov dword [ebp - 4], 1
cmp eax, ecx
jl 0x10003db1
mov edi, dword [ebp + 0xc]
cmp edx, dword [edi]
jl 0x10003db1
cmp esi, dword [ebx]
jge 0x10003e04
mov edi, dword [ebx]
push edi
mov edi, dword [ebp + 0xc]
mov edi, dword [edi]
push edi
push ecx
mov ecx, dword [str.GEODESIA7.ARX]
push ecx
push esi
push edx
push eax
push 1
push 0xb1
push 1
call fcn.10038620
add esp, 0xc
push eax
lea edx, [ebp - 0x318]
push edx
call dword [sym.imp.MSVCR100.dll_sprintf]
lea eax, [ebp - 0x318]
push eax
call fcn.100388c0
mov eax, dword [0x1005d02c]
mov edx, dword [0x1005d030]
mov esi, dword [0x1005d034]
add esp, 0x28
cmp dword [ebp - 4], 0
je 0x10003e55
push esi
push edx
push eax
lea ecx, [ebp - 0x118]
push str._d._02d._02d
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf]
lea eax, [ebp - 0x118]
add esp, 0x14
lea edx, [eax + 1]
jmp 0x10003e30
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10003e30
sub eax, edx
inc eax
push eax
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x118]
push edx
push 1
push 0
push str.Version
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x1005d02c]
mov edx, dword [0x1005d030]
mov esi, dword [0x1005d034]
mov dword [ebp - 4], 1
jmp 0x10003e0a