Function at 0x696f80
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3e3c
call fcn.006d70a0
mov dword [ebp - 8], 0
mov eax, dword [ebp + 8]
push eax
push 0x7ad69c
lea ecx, [ebp - 0x123c]
call fcn.00686b30
mov ecx, eax
call fcn.00686b60
push eax
lea ecx, [ebp - 0x408]
push ecx
call fcn.006d6ef0
add esp, 0xc
lea edx, [ebp - 4]
push edx
push 0x20019
push 0
lea eax, [ebp - 0x408]
push eax
push 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x69744d
lea ecx, [ebp - 0xa30]
call fcn.00697b00
mov dword [ebp - 0x810], 4
lea ecx, [ebp - 0x810]
push ecx
lea edx, [ebp - 8]
push edx
push 0
push 0
push 0x7ad6d0
lea ecx, [ebp - 0x163c]
call fcn.00686b30
mov ecx, eax
call fcn.00686b60
push eax
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0x810], 0x400
lea ecx, [ebp - 0x810]
push ecx
lea edx, [ebp - 0x80c]
push edx
push 0
push 0
push 0xa
lea eax, [ebp - 0x40c]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.006e24eb
add esp, 0xc
push eax
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
push 5
push 0x7ad6dc
lea ecx, [ebp - 0x1a3c]
call fcn.00686b30
mov ecx, eax
call fcn.00686b60
push eax
lea eax, [ebp - 0x80c]
push eax
call fcn.006e23a0
add esp, 0xc
test eax, eax
jne 0x6970f7
push 0x5c
lea ecx, [ebp - 0xa30]
call fcn.00697460
lea ecx, [ebp - 0x80c]
push ecx
lea ecx, [ebp - 0xa30]
call fcn.00697bf0
lea ecx, [ebp - 0xa30]
call fcn.00697480
sub eax, 2
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x681], eax
push 0x7ad6e8
push 1
lea ecx, [ebp - 0xa30]
call fcn.006974a0
push eax
call fcn.006e2580
add esp, 8
test eax, eax
jne 0x6970f5
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x685], 1
jmp 0x697104
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x681], 0
push 0x100
lea edx, [ebp - 0x80c]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x6dd
push eax
call fcn.006d7560
add esp, 0xc
lea ecx, [ebp - 0x80c]
push ecx
push 0x7ad6f4
lea ecx, [ebp - 0x1e3c]
call fcn.00686b30
mov ecx, eax
call fcn.00686b60
push eax
lea edx, [ebp - 0x408]
push edx
call fcn.006d6ef0
add esp, 0xc
push 3
push 0x7ad71c
lea eax, [ebp - 0x80c]
push eax
call fcn.006d7370
add esp, 0xc
test eax, eax
jne 0x697176
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x68d], 1
lea edx, [ebp - 0xa34]
push edx
push 0x20019
push 0
lea eax, [ebp - 0x408]
push eax
push 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x697438
mov dword [ebp - 0x810], 0x40
lea ecx, [ebp - 0x810]
push ecx
mov edx, dword [ebp + 0xc]
add edx, 0x69d
push edx
push 0
push 0
push 0x7ad720
lea ecx, [ebp - 0x223c]
call fcn.00686b30
mov ecx, eax
call fcn.00686b60
push eax
mov eax, dword [ebp - 0xa34]
push eax
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0x810], 4
lea ecx, [ebp - 0x810]
push ecx
mov edx, dword [ebp + 0xc]
add edx, 0x691
push edx
push 0
push 0
push 0x7ad738
lea ecx, [ebp - 0x263c]
call fcn.00686b30
mov ecx, eax
call fcn.00686b60
push eax
mov eax, dword [ebp - 0xa34]
push eax
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0xe38], eax
mov dword [ebp - 0x810], 0x400
lea ecx, [ebp - 0x810]
push ecx
lea edx, [ebp - 0x408]
push edx
push 0
push 0
push 0x7ad748
lea ecx, [ebp - 0x2a3c]
call fcn.00686b30
mov ecx, eax
call fcn.00686b60
push eax
mov eax, dword [ebp - 0xa34]
push eax
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0xe38], eax
push 0x7ad758
lea ecx, [ebp - 0x408]
push ecx
call fcn.006d73b0
add esp, 8
test eax, eax
jne 0x697298
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x685], 1
push 0x7d0008
lea eax, [ebp - 0xe34]
push eax
call fcn.006d6e00
add esp, 8
mov dword [ebp - 0x810], 0x400
lea ecx, [ebp - 0x810]
push ecx
lea edx, [ebp - 0xe34]
push edx
push 0
push 0
push 0x7ad780
lea ecx, [ebp - 0x2e3c]
call fcn.00686b30
mov ecx, eax
call fcn.00686b60
push eax
mov eax, dword [ebp - 0xa34]
push eax
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
test eax, eax
jne 0x69742b
lea ecx, [ebp - 0xe34]
push ecx
push 0x7ad78c
lea ecx, [ebp - 0x323c]
call fcn.00686b30
mov ecx, eax
call fcn.00686b60
push eax
lea edx, [ebp - 0x408]
push edx
call fcn.006d6ef0
add esp, 0xc
lea eax, [ebp - 0xe3c]
push eax
push 0x20019
push 0
lea ecx, [ebp - 0x408]
push ecx
push 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x69742b
cmp dword [ebp + 0xc], 0
je 0x69741e
mov dword [ebp - 0x810], 0x100
lea edx, [ebp - 0x810]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x481
push eax
push 0
push 0
push 0x7ad7c0
lea ecx, [ebp - 0x363c]
call fcn.00686b30
mov ecx, eax
call fcn.00686b60
push eax
mov ecx, dword [ebp - 0xe3c]
push ecx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0x810], 0x100
lea edx, [ebp - 0x810]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x581
push eax
push 0
push 0
push 0x7ad7cc
lea ecx, [ebp - 0x3a3c]
call fcn.00686b30
mov ecx, eax
call fcn.00686b60
push eax
mov ecx, dword [ebp - 0xe3c]
push ecx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0x810], 0x100
lea edx, [ebp - 0x810]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x181
push eax
push 0
push 0
push 0x7ad7dc
lea ecx, [ebp - 0x3e3c]
call fcn.00686b30
mov ecx, eax
call fcn.00686b60
push eax
mov ecx, dword [ebp - 0xe3c]
push ecx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov edx, dword [ebp - 0xe3c]
push edx
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, dword [ebp - 0xa34]
push eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.advapi32.dll_RegCloseKey]
lea ecx, [ebp - 0xa30]
call fcn.00697b90
mov eax, dword [ebp - 8]
mov esp, ebp
pop ebp
ret