Function at 0x41091a
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x22308
call fcn.00612c90
mov eax, dword [0x6ffe74]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x222f4]
push edi
push eax
push 0x20019
xor ebx, ebx
mov dword [ebp - 0x22304], ecx
push ebx
push esi
push SysReAllocString
mov dword [ebp - 0x22308], esi
mov byte [ebp - 0x186ac], bl
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x41096f
xor eax, eax
jmp 0x4115cc
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
xor eax, eax
mov word [ebp - 0x222ec], ax
lea eax, [ebp - 0x222f0]
push eax
lea eax, [ebp - 0x222ec]
mov byte [ebp - 0x9c4c], bl
push eax
lea eax, [ebp - 0x222fc]
mov dword [ebp - 0x222f0], 0x2710
push eax
push ebx
push str.Email
push dword [ebp - 0x222f4]
call edi
test eax, eax
je 0x410a13
lea eax, [ebp - 0x222f0]
mov dword [ebp - 0x222f0], 0x2710
push eax
lea eax, [ebp - 0x222ec]
push eax
lea eax, [ebp - 0x222fc]
push eax
push ebx
push str.Account_Name
push dword [ebp - 0x222f4]
call edi
test eax, eax
je 0x410a13
lea eax, [ebp - 0x222f0]
mov dword [ebp - 0x222f0], 0x2710
push eax
lea eax, [ebp - 0x222ec]
push eax
lea eax, [ebp - 0x222fc]
push eax
push ebx
push str.Display_Name
push dword [ebp - 0x222f4]
call edi
cmp dword [ebp - 0x222f0], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jbe 0x410a6c
push 0
push 0
push 0x2710
lea eax, [ebp - 0x9c4c]
push eax
lea eax, [ebp - 0x222ec]
push eax
call fcn.00648cfd
pop ecx
push eax
lea eax, [ebp - 0x222ec]
push eax
push 0
push 0
call ebx
lea eax, [ebp - 0x222ec]
push eax
call fcn.00648cfd
pop ecx
cmp eax, 0x2710
jae 0x4115dd
mov byte [ebp + eax - 0x9c4c], 0
xor eax, eax
mov dword [ebp - 0x222f0], 0x2710
mov word [ebp - 0x1117c], ax
mov byte [ebp - 0x271c], al
mov byte [ebp - 0x753c], al
lea eax, [ebp - 0x222f0]
push eax
lea eax, [ebp - 0x1117c]
push eax
lea eax, [ebp - 0x222fc]
push eax
push 0
push str.IMAP_User
push dword [ebp - 0x222f4]
call edi
lea eax, [ebp - 0x222f8]
mov dword [ebp - 0x222f8], 0x2710
push eax
lea eax, [ebp - 0x186ac]
push eax
lea eax, [ebp - 0x222fc]
push eax
push 0
push str.IMAP_Password
push dword [ebp - 0x222f4]
call edi
test eax, eax
jne 0x410afc
push ecx
push ecx
lea eax, [ebp - 0x753c]
push eax
push dword [ebp - 0x222f8]
lea eax, [ebp - 0x186ac]
push eax
call fcn.0041081b
lea eax, [ebp - 0x1117c]
push eax
call fcn.00648cfd
pop ecx
test eax, eax
je 0x410b58
push 0
push 0
push 0x2710
lea eax, [ebp - 0x271c]
push eax
lea eax, [ebp - 0x1117c]
push eax
call fcn.00648cfd
pop ecx
push eax
lea eax, [ebp - 0x1117c]
push eax
push 0
push 0
call ebx
lea eax, [ebp - 0x1117c]
push eax
call fcn.00648cfd
pop ecx
cmp eax, 0x2710
jae 0x4115dd
mov byte [ebp + eax - 0x271c], 0
cmp byte [ebp - 0x271c], 0
mov al, byte [ebp - 0x753c]
jne 0x410b6f
test al, al
je 0x410d65
test al, al
jne 0x410b8c
push str._Password_is_empty_or_not_found_
lea eax, [ebp - 0x753c]
push 0x2710
push eax
call fcn.006494f3
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x222f0], 0x2710
mov word [ebp - 0x15f9c], ax
lea eax, [ebp - 0x222f0]
push eax
lea eax, [ebp - 0x15f9c]
push eax
lea eax, [ebp - 0x222fc]
push eax
push 0
push str.IMAP_Server
push dword [ebp - 0x222f4]
call edi
and dword [ebp - 0x22300], 0
mov esi, eax
lea eax, [ebp - 0x222f8]
mov dword [ebp - 0x222f8], 4
push eax
lea eax, [ebp - 0x22300]
push eax
lea eax, [ebp - 0x222fc]
push eax
push 0
push str.IMAP_Port
push dword [ebp - 0x222f4]
call edi
xor eax, eax
mov byte [ebp - 0x4e2c], al
test esi, esi
jne 0x410ca7
cmp dword [ebp - 0x222f0], eax
jbe 0x410ca7
push eax
push eax
mov esi, 0x2710
lea eax, [ebp - 0x4e2c]
push esi
push eax
lea eax, [ebp - 0x15f9c]
push eax
call fcn.00648cfd
pop ecx
push eax
lea eax, [ebp - 0x15f9c]
push eax
push 0
push 0
call ebx
lea eax, [ebp - 0x15f9c]
push eax
call fcn.00648cfd
pop ecx
cmp eax, esi
jae 0x4115dd
cmp dword [ebp - 0x22300], 0
mov byte [ebp + eax - 0x4e2c], 0
jbe 0x410ca7
push 0xa
push esi
lea eax, [ebp - 0x1adbc]
push eax
push dword [ebp - 0x22300]
call fcn.0064f993
push 0x6c8f1c
lea eax, [ebp - 0x4e2c]
push esi
push eax
call fcn.006500a8
add esp, 0x1c
lea eax, [ebp - 0x1adbc]
push eax
lea eax, [ebp - 0x4e2c]
push esi
push eax
call fcn.006500a8
add esp, 0xc
mov esi, dword [ebp - 0x22308]
lea eax, [ebp - 0x1d4cc]
push str.IMAP_Password
push esi
push str._s:_s
push 0x2710
push eax
call fcn.00402e0a
add esp, 0x14
cmp byte [ebp - 0x271c], 0
je 0x410d17
lea eax, [ebp - 0x271c]
push eax
lea eax, [ebp - 0x9c4c]
push eax
call fcn.0064fd85
pop ecx
pop ecx
test eax, eax
je 0x410d17
lea eax, [ebp - 0x9c4c]
push eax
lea eax, [ebp - 0x271c]
push eax
push str.User_s__Email_s
lea eax, [ebp - 0xc35c]
push 0x2710
push eax
call fcn.00402e0a
add esp, 0x14
jmp 0x410d32
lea eax, [ebp - 0x9c4c]
push eax
lea eax, [ebp - 0xc35c]
push 0x2710
push eax
call fcn.006494f3
add esp, 0xc
mov ecx, dword [ebp - 0x22304]
lea eax, [ebp - 0x753c]
push 0xffffffffffffffff
push 0x6c5bb9
push eax
lea eax, [ebp - 0xc35c]
push eax
lea eax, [ebp - 0x4e2c]
push eax
push str.IMAP
push 0xfc
push 2
call fcn.0043ee6b
xor eax, eax
mov dword [ebp - 0x222f0], 0x2710
mov word [ebp - 0x1117c], ax
xor ecx, ecx
lea eax, [ebp - 0x222f0]
mov byte [ebp - 0x271c], cl
push eax
lea eax, [ebp - 0x1117c]
mov byte [ebp - 0x753c], cl
push eax
lea eax, [ebp - 0x222fc]
push eax
push ecx
push str.POP3_User
push dword [ebp - 0x222f4]
call edi
lea eax, [ebp - 0x222f8]
mov dword [ebp - 0x222f8], 0x2710
push eax
lea eax, [ebp - 0x186ac]
push eax
lea eax, [ebp - 0x222fc]
push eax
push 0
push str.POP3_Password
push dword [ebp - 0x222f4]
call edi
test eax, eax
jne 0x410df6
push ecx
push ecx
lea eax, [ebp - 0x753c]
push eax
push dword [ebp - 0x222f8]
lea eax, [ebp - 0x186ac]
push eax
call fcn.0041081b
lea eax, [ebp - 0x1117c]
push eax
call fcn.00648cfd
pop ecx
test eax, eax
je 0x410e52
push 0
push 0
push 0x2710
lea eax, [ebp - 0x271c]
push eax
lea eax, [ebp - 0x1117c]
push eax
call fcn.00648cfd
pop ecx
push eax
lea eax, [ebp - 0x1117c]
push eax
push 0
push 0
call ebx
lea eax, [ebp - 0x1117c]
push eax
call fcn.00648cfd
pop ecx
cmp eax, 0x2710
jae 0x4115dd
mov byte [ebp + eax - 0x271c], 0
cmp byte [ebp - 0x271c], 0
mov al, byte [ebp - 0x753c]
jne 0x410e69
test al, al
je 0x41105f
test al, al
jne 0x410e86
push str._Password_is_empty_or_not_found_
lea eax, [ebp - 0x753c]
push 0x2710
push eax
call fcn.006494f3
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x222f0], 0x2710
mov word [ebp - 0x15f9c], ax
lea eax, [ebp - 0x222f0]
push eax
lea eax, [ebp - 0x15f9c]
push eax
lea eax, [ebp - 0x222fc]
push eax
push 0
push str.POP3_Server
push dword [ebp - 0x222f4]
call edi
and dword [ebp - 0x22300], 0
mov esi, eax
lea eax, [ebp - 0x222f8]
mov dword [ebp - 0x222f8], 4
push eax
lea eax, [ebp - 0x22300]
push eax
lea eax, [ebp - 0x222fc]
push eax
push 0
push str.POP3_Port
push dword [ebp - 0x222f4]
call edi
xor eax, eax
mov byte [ebp - 0x4e2c], al
test esi, esi
jne 0x410fa1
cmp dword [ebp - 0x222f0], eax
jbe 0x410fa1
push eax
push eax
mov esi, 0x2710
lea eax, [ebp - 0x4e2c]
push esi
push eax
lea eax, [ebp - 0x15f9c]
push eax
call fcn.00648cfd
pop ecx
push eax
lea eax, [ebp - 0x15f9c]
push eax
push 0
push 0
call ebx
lea eax, [ebp - 0x15f9c]
push eax
call fcn.00648cfd
pop ecx
cmp eax, esi
jae 0x4115dd
cmp dword [ebp - 0x22300], 0
mov byte [ebp + eax - 0x4e2c], 0
jbe 0x410fa1
push 0xa
push esi
lea eax, [ebp - 0x1adbc]
push eax
push dword [ebp - 0x22300]
call fcn.0064f993
push 0x6c8f1c
lea eax, [ebp - 0x4e2c]
push esi
push eax
call fcn.006500a8
add esp, 0x1c
lea eax, [ebp - 0x1adbc]
push eax
lea eax, [ebp - 0x4e2c]
push esi
push eax
call fcn.006500a8
add esp, 0xc
mov esi, dword [ebp - 0x22308]
lea eax, [ebp - 0x1d4cc]
push str.POP3_Password
push esi
push str._s:_s
push 0x2710
push eax
call fcn.00402e0a
add esp, 0x14
cmp byte [ebp - 0x271c], 0
je 0x411011
lea eax, [ebp - 0x271c]
push eax
lea eax, [ebp - 0x9c4c]
push eax
call fcn.0064fd85
pop ecx
pop ecx
test eax, eax
je 0x411011
lea eax, [ebp - 0x9c4c]
push eax
lea eax, [ebp - 0x271c]
push eax
push str.User_s__Email_s
lea eax, [ebp - 0xc35c]
push 0x2710
push eax
call fcn.00402e0a
add esp, 0x14
jmp 0x41102c
lea eax, [ebp - 0x9c4c]
push eax
lea eax, [ebp - 0xc35c]
push 0x2710
push eax
call fcn.006494f3
add esp, 0xc
mov ecx, dword [ebp - 0x22304]
lea eax, [ebp - 0x753c]
push 0xffffffffffffffff
push 0x6c5bb9
push eax
lea eax, [ebp - 0xc35c]
push eax
lea eax, [ebp - 0x4e2c]
push eax
push str.POP3
push 0xfc
push 2
call fcn.0043ee6b
xor eax, eax
mov dword [ebp - 0x222f0], 0x2710
mov word [ebp - 0x1117c], ax
xor ecx, ecx
lea eax, [ebp - 0x222f0]
mov byte [ebp - 0x271c], cl
push eax
lea eax, [ebp - 0x1117c]
mov byte [ebp - 0x753c], cl
push eax
lea eax, [ebp - 0x222fc]
push eax
push ecx
push str.SMTP_User
push dword [ebp - 0x222f4]
call edi
lea eax, [ebp - 0x222f8]
mov dword [ebp - 0x222f8], 0x2710
push eax
lea eax, [ebp - 0x186ac]
push eax
lea eax, [ebp - 0x222fc]
push eax
push 0
push str.SMTP_Password
push dword [ebp - 0x222f4]
call edi
test eax, eax
jne 0x4110f0
push ecx
push ecx
lea eax, [ebp - 0x753c]
push eax
push dword [ebp - 0x222f8]
lea eax, [ebp - 0x186ac]
push eax
call fcn.0041081b
lea eax, [ebp - 0x1117c]
push eax
call fcn.00648cfd
pop ecx
test eax, eax
je 0x41114c
push 0
push 0
push 0x2710
lea eax, [ebp - 0x271c]
push eax
lea eax, [ebp - 0x1117c]
push eax
call fcn.00648cfd
pop ecx
push eax
lea eax, [ebp - 0x1117c]
push eax
push 0
push 0
call ebx
lea eax, [ebp - 0x1117c]
push eax
call fcn.00648cfd
pop ecx
cmp eax, 0x2710
jae 0x4115dd
mov byte [ebp + eax - 0x271c], 0
cmp byte [ebp - 0x271c], 0
mov al, byte [ebp - 0x753c]
jne 0x411163
test al, al
je 0x411359
test al, al
jne 0x411180
push str._Password_is_empty_or_not_found_
lea eax, [ebp - 0x753c]
push 0x2710
push eax
call fcn.006494f3
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x222f0], 0x2710
mov word [ebp - 0x15f9c], ax
lea eax, [ebp - 0x222f0]
push eax
lea eax, [ebp - 0x15f9c]
push eax
lea eax, [ebp - 0x222fc]
push eax
push 0
push str.SMTP_Server
push dword [ebp - 0x222f4]
call edi
and dword [ebp - 0x22300], 0
mov esi, eax
lea eax, [ebp - 0x222f8]
mov dword [ebp - 0x222f8], 4
push eax
lea eax, [ebp - 0x22300]
push eax
lea eax, [ebp - 0x222fc]
push eax
push 0
push str.SMTP_Port
push dword [ebp - 0x222f4]
call edi
xor eax, eax
mov byte [ebp - 0x4e2c], al
test esi, esi
jne 0x41129b
cmp dword [ebp - 0x222f0], eax
jbe 0x41129b
push eax
push eax
mov esi, 0x2710
lea eax, [ebp - 0x4e2c]
push esi
push eax
lea eax, [ebp - 0x15f9c]
push eax
call fcn.00648cfd
pop ecx
push eax
lea eax, [ebp - 0x15f9c]
push eax
push 0
push 0
call ebx
lea eax, [ebp - 0x15f9c]
push eax
call fcn.00648cfd
pop ecx
cmp eax, esi
jae 0x4115dd
cmp dword [ebp - 0x22300], 0
mov byte [ebp + eax - 0x4e2c], 0
jbe 0x41129b
push 0xa
push esi
lea eax, [ebp - 0x1adbc]
push eax
push dword [ebp - 0x22300]
call fcn.0064f993
push 0x6c8f1c
lea eax, [ebp - 0x4e2c]
push esi
push eax
call fcn.006500a8
add esp, 0x1c
lea eax, [ebp - 0x1adbc]
push eax
lea eax, [ebp - 0x4e2c]
push esi
push eax
call fcn.006500a8
add esp, 0xc
mov esi, dword [ebp - 0x22308]
lea eax, [ebp - 0x1d4cc]
push str.SMTP_Password
push esi
push str._s:_s
push 0x2710
push eax
call fcn.00402e0a
add esp, 0x14
cmp byte [ebp - 0x271c], 0
je 0x41130b
lea eax, [ebp - 0x271c]
push eax
lea eax, [ebp - 0x9c4c]
push eax
call fcn.0064fd85
pop ecx
pop ecx
test eax, eax
je 0x41130b
lea eax, [ebp - 0x9c4c]
push eax
lea eax, [ebp - 0x271c]
push eax
push str.User_s__Email_s
lea eax, [ebp - 0xc35c]
push 0x2710
push eax
call fcn.00402e0a
add esp, 0x14
jmp 0x411326
lea eax, [ebp - 0x9c4c]
push eax
lea eax, [ebp - 0xc35c]
push 0x2710
push eax
call fcn.006494f3
add esp, 0xc
mov ecx, dword [ebp - 0x22304]
lea eax, [ebp - 0x753c]
push 0xffffffffffffffff
push 0x6c5bb9
push eax
lea eax, [ebp - 0xc35c]
push eax
lea eax, [ebp - 0x4e2c]
push eax
push str.SMTP
push 0xfc
push 2
call fcn.0043ee6b
xor eax, eax
mov dword [ebp - 0x222f0], 0x2710
mov word [ebp - 0x1117c], ax
xor ecx, ecx
lea eax, [ebp - 0x222f0]
mov byte [ebp - 0x271c], cl
push eax
lea eax, [ebp - 0x1117c]
mov byte [ebp - 0x753c], cl
push eax
lea eax, [ebp - 0x222fc]
push eax
push ecx
push str.HTTP_User
push dword [ebp - 0x222f4]
call edi
lea eax, [ebp - 0x222f8]
mov dword [ebp - 0x222f8], 0x2710
push eax
lea eax, [ebp - 0x186ac]
push eax
lea eax, [ebp - 0x222fc]
push eax
push 0
push str.HTTP_Password
push dword [ebp - 0x222f4]
call edi
test eax, eax
jne 0x4113ea
push ecx
push ecx
lea eax, [ebp - 0x753c]
push eax
push dword [ebp - 0x222f8]
lea eax, [ebp - 0x186ac]
push eax
call fcn.0041081b
lea eax, [ebp - 0x1117c]
push eax
call fcn.00648cfd
pop ecx
test eax, eax
je 0x411446
push 0
push 0
push 0x2710
lea eax, [ebp - 0x271c]
push eax
lea eax, [ebp - 0x1117c]
push eax
call fcn.00648cfd
pop ecx
push eax
lea eax, [ebp - 0x1117c]
push eax
push 0
push 0
call ebx
lea eax, [ebp - 0x1117c]
push eax
call fcn.00648cfd
pop ecx
cmp eax, 0x2710
jae 0x4115dd
mov byte [ebp + eax - 0x271c], 0
cmp byte [ebp - 0x271c], 0
mov al, byte [ebp - 0x753c]
jne 0x41145d
test al, al
je 0x4115bd
test al, al
jne 0x41147a
push str._Password_is_empty_or_not_found_
lea eax, [ebp - 0x753c]
push 0x2710
push eax
call fcn.006494f3
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x222f0], 0x2710
mov word [ebp - 0x15f9c], ax
lea eax, [ebp - 0x222f0]
push eax
lea eax, [ebp - 0x15f9c]
push eax
lea eax, [ebp - 0x222fc]
push eax
push 0
push str.HTTP_Server_URL
push dword [ebp - 0x222f4]
call edi
xor ecx, ecx
mov byte [ebp - 0x4e2c], cl
test eax, eax
jne 0x41150c
cmp dword [ebp - 0x222f0], ecx
jbe 0x41150c
push ecx
push ecx
mov edi, 0x2710
lea eax, [ebp - 0x4e2c]
push edi
push eax
lea eax, [ebp - 0x15f9c]
push eax
call fcn.00648cfd
pop ecx
push eax
lea eax, [ebp - 0x15f9c]
push eax
push 0
push 0
call ebx
lea eax, [ebp - 0x15f9c]
push eax
call fcn.00648cfd
pop ecx
cmp eax, edi
jae 0x4115dd
mov byte [ebp + eax - 0x4e2c], 0
push str.HTTP_Password
push esi
push str._s:_s
mov esi, 0x2710
lea eax, [ebp - 0x1d4cc]
push esi
push eax
call fcn.00402e0a
add esp, 0x14
cmp byte [ebp - 0x271c], 0
je 0x411573
lea eax, [ebp - 0x271c]
push eax
lea eax, [ebp - 0x9c4c]
push eax
call fcn.0064fd85
pop ecx
pop ecx
test eax, eax
je 0x411573
lea eax, [ebp - 0x9c4c]
push eax
lea eax, [ebp - 0x271c]
push eax
push str.User_s__Email_s
lea eax, [ebp - 0xc35c]
push esi
push eax
call fcn.00402e0a
add esp, 0x14
jmp 0x41158a
lea eax, [ebp - 0x9c4c]
push eax
lea eax, [ebp - 0xc35c]
push esi
push eax
call fcn.006494f3
add esp, 0xc
mov ecx, dword [ebp - 0x22304]
lea eax, [ebp - 0x753c]
push 0xffffffffffffffff
push 0x6c5bb9
push eax
lea eax, [ebp - 0xc35c]
push eax
lea eax, [ebp - 0x4e2c]
push eax
push str.HTTP
push 0xfc
push 2
call fcn.0043ee6b
push dword [ebp - 0x222f4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
inc eax
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.006122f0
leave
ret 4
call fcn.00612782
int3