Function at 0x75a427cc
Capabilities:
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x68
mov eax, dword [0x75bc8d18]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp + 0x18]
push ebx
mov dword [ebp - 0x68], eax
mov eax, dword [ebp + 0x1c]
push esi
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp + 0x20]
xor ebx, ebx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x50], eax
mov esi, 0x759b7ff8
cmp dword [0x75bc8ca8], ebx
je 0x75a42833
push ebx
push ebx
push esi
push esi
push esi
push esi
push esi
push esi
push 0x75a42c00
push ebx
push ebx
push 0xa
call fcn.759c26bf
add esp, 0x30
mov eax, dword [edi]
push edi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x40], bl
mov byte [ebp - 0x21], bl
call dword [eax + 0x1c]
mov edi, eax
mov eax, dword [edi]
push edi
call dword [eax + 0x40]
mov dword [ebp - 0x2c], eax
mov eax, dword [edi]
push edi
call dword [eax + 8]
cmp dword [ebp - 0x2c], ebx
je 0x75a42966
cmp dword [0x75bc8ca8], ebx
je 0x75a42883
push ebx
push ebx
push esi
push esi
push esi
push esi
push esi
push esi
push 0x75a42bcc
push ebx
push ebx
push 0xa
call fcn.759c26bf
add esp, 0x30
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x21], 1
call fcn.759b3c2d
push 4
pop edi
push ebx
push ebx
lea eax, [ebp - 0x20]
push eax
push ebx
push dword [ebp - 0x68]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x64], edi
call fcn.75a6abe6
add esp, 0x14
test eax, eax
jne 0x75a42945
lea eax, [ebp - 0x2c]
push eax
push dword [0x75bc8b74]
push ebx
push 0x759f9f90
push dword [ebp - 0x20]
call fcn.759b3f15
add esp, 0x14
test eax, eax
jne 0x75a42945
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x5c]
push eax
push ebx
push 0x759f9f78
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x75a42945
cmp dword [ebp - 0x5c], edi
jne 0x75a42945
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x50]
mov dword [ecx], eax
cmp dword [0x75bc8ca8], ebx
je 0x75a42927
push ebx
push ebx
push esi
push esi
push esi
push esi
push eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
push eax
push 0x75a42b88
push ebx
push ebx
push 0xa
call fcn.759c26bf
add esp, 0x30
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x20]
call fcn.759b3c00
lea ecx, [ebp - 0x18]
call fcn.759b1681
jmp 0x75a42b14
cmp dword [ebp - 0x2c], ebx
je 0x75a42956
push dword [ebp - 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x20]
call fcn.759b3c00
lea ecx, [ebp - 0x18]
call fcn.759b1681
mov eax, dword [ebp - 0x54]
mov edi, dword [eax]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x34], 0x75bc8fe0
add edi, 0x3c
call fcn.759c6ee9
push eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
push eax
push dword [ebp - 0x54]
call dword [edi]
mov edi, eax
cmp edi, ebx
je 0x75a429c5
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x44]
call fcn.759ceb81
mov eax, dword [ebp - 0x38]
cmp eax, ebx
je 0x75a429b1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x75a429be
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x75a42b38
mov byte [ebp - 0x2d], 1
cmp byte [ebp - 0x21], bl
je 0x75a429e3
mov edi, dword [ebp - 0x4c]
mov eax, dword [edi]
push edi
call dword [eax + 0x14]
test eax, eax
je 0x75a429e3
mov eax, dword [edi]
push edi
call dword [eax + 0x20]
jmp 0x75a429ec
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x28]
mov edi, eax
call fcn.759c6f3c
push eax
push dword [ebp - 0x58]
push ebx
push edi
call fcn.75afa5b6
add esp, 0x1c
cmp eax, ebx
je 0x75a42a30
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x3c]
cmp eax, ebx
je 0x75a42b47
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x54]
push eax
lea ecx, [ebp - 0x28]
call fcn.759cbe5f
mov byte [ebp - 0x2d], bl
mov eax, dword [0x75bc8050]
cmp eax, 5
jg 0x75a42a50
jne 0x75a42aa0
mov eax, dword [0x75bc8030]
cmp eax, 2
jg 0x75a42a50
jne 0x75a42aa0
cmp dword [0x75bcca80], ebx
jl 0x75a42aa0
cmp byte [ebp - 0x21], bl
je 0x75a42aa0
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
test eax, eax
jne 0x75a42aa0
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x75a42aa3
cmp byte [ebp - 0x2d], bl
je 0x75a42aa3
mov dword [ebp - 0x2c], 0x75bc8fe0
mov edi, dword [eax]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
add edi, 0x44
call fcn.759c6ee9
push eax
push dword [ebp - 0x3c]
call dword [edi]
push ebx
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x44]
call fcn.75a21559
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
mov edi, dword [eax]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x3c], eax
add edi, 0x3c
call fcn.759c6f3c
push eax
push ebx
push dword [ebp - 0x3c]
call dword [edi]
mov edi, eax
cmp edi, ebx
jne 0x75a42993
mov edi, dword [ebp - 0x50]
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
push edi
push 0xf
push eax
call dword [ecx + 0x18]
test eax, eax
je 0x75a42b47
cmp dword [0x75bc8ca8], ebx
je 0x75a42b02
mov eax, dword [ebp - 0x48]
mov ecx, dword [eax]
push ebx
push ebx
push esi
push esi
push esi
push esi
push dword [edi]
push eax
call dword [ecx + 0x20]
push eax
push 0x75a42b88
push ebx
push ebx
push 0xa
call fcn.759c26bf
add esp, 0x30
push ebx
lea ecx, [ebp - 0x28]
call fcn.759cbe5f
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x44]
call fcn.759ceb81
mov eax, dword [ebp - 0x38]
cmp eax, ebx
je 0x75a42b29
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x75a42b36
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.759b1748
leave
ret
push dword [ebp - 0x34]
push 0x524
call fcn.75a204de
pop ecx
mov esi, eax
mov eax, dword [ebp - 0x34]
pop ecx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x44]
call fcn.759ceb81
mov eax, dword [ebp - 0x38]
cmp eax, ebx
je 0x75a42b76
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x28]
cmp eax, ebx
je 0x75a42b83
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x75a42b38