Function at 0x4719ad
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1bc
push esi
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x471a19
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x118], eax
push dword [ebp - 0x118]
push 0x2670
push 0x1d2f
push dword [ebp - 0x140]
push 1
push dword [ebp - 0x148]
push 0x7cb0
push dword [ebp - 0x150]
call fcn.0047253d
add esp, 0x20
jmp 0x472538
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x13c], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x30], 0x9dada439
mov dword [ebp - 0x68], 0
jmp 0x471a66
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x471a7c
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x114], 1
jmp 0x471a5f
mov byte [ebp - 0x1a], 0
movzx eax, byte [ebp - 0x1a]
test eax, eax
je 0x471a9a
push 0x2633
push 0x1080
push 0
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
mov dword [ebp - 0x30], 0
jmp 0x471aaa
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x471bdd
xor eax, eax
je 0x471bb1
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x114], 0
je 0x471b98
mov dword [ebp - 0x44], 0xfffffff7
mov dword [ebp - 0x5c], 0
jmp 0x471ae4
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x471af7
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x78], 0
jmp 0x471add
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x78], 2
jmp 0x471b1c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x78], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x78], 0
jl 0x471b68
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x78]
mov eax, dword [ebp + eax*4 - 0x114]
mov dword [ebp + ecx*4 - 0x114], eax
mov byte [ebp - 0x18], 0
movzx eax, byte [ebp - 0x18]
test eax, eax
je 0x471b66
push 0
push 0
push 0x1c11
call dword [sym.imp.USER32.dll_SetPropA]
jmp 0x471b07
mov dword [ebp - 0x44], 2
jmp 0x471b78
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x471b96
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x471b94
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
jmp 0x471b71
jmp 0x471baf
mov dword [ebp - 0xa4], 0
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
jmp 0x471bc3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x114], 0
je 0x471bc3
jmp 0x471bdd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x114], 0
je 0x471bd8
jmp 0x471aa3
jmp 0x471aa3
mov eax, dword [ebp - 0x100]
movzx eax, byte [eax]
test eax, eax
je 0x4724c3
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x6c], 0
jmp 0x471c0a
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x471c20
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x120], 0
jmp 0x471c03
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x120], 0
je 0x471c55
mov dword [ebp - 0xf4], 0x98a59c17
mov dword [ebp - 0x128], 0xffffffff
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x128], eax
jmp 0x471d14
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x14], 0xffffffe4
jmp 0x471c6c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffee
je 0x471cd9
push 1
lea ecx, [ebp - 0x174]
call fcn.00422862
mov dword [ebp - 0x4c], 0
jmp 0x471c8f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x471ca8
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x174]
call fcn.00422927
and dword [eax], 0
jmp 0x471c88
push 0
lea ecx, [ebp - 0x174]
call fcn.00422927
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xd4]
mov dword [ecx], eax
lea ecx, [ebp - 0x174]
call fcn.00422922
jmp 0x471c65
mov dword [ebp - 0x14], 0
jmp 0x471ce9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 8
jle 0x471d14
mov byte [ebp - 0x16], 0
movzx eax, byte [ebp - 0x16]
test eax, eax
je 0x471d12
push 0
push 0x119e
push 0xe86
push 0x1dd7
call dword [sym.imp.KERNEL32.dll_RaiseException]
jmp 0x471ce2
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x34], 0x9b55bb2c
mov dword [ebp - 0x34], 0
jmp 0x471d37
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xf
je 0x471d66
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x64], 0xb
jmp 0x471d54
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xffffffed
je 0x471d64
cmp dword [ebp - 0x34], 0
je 0x471d62
jmp 0x471d64
jmp 0x471d4d
jmp 0x471d30
mov dword [ebp - 0x54], 0x928c176b
mov dword [ebp - 0x54], 0
jmp 0x471d7d
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x11
jl 0x471e53
mov dword [ebp - 0x3c], 8
push 4
lea ecx, [ebp - 0x168]
call fcn.00422862
mov dword [ebp - 0x38], 0
jmp 0x471dab
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x471dc7
push dword [ebp - 0x38]
lea ecx, [ebp - 0x168]
call fcn.00422927
mov dword [eax], 0xfffffffc
jmp 0x471da4
mov dword [ebp - 0x3c], 0x18
jmp 0x471dd7
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffffa
jg 0x471e43
push 1
lea ecx, [ebp - 0x180]
call fcn.00422862
mov dword [ebp - 0x40], 0
jmp 0x471dfa
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x471e16
push dword [ebp - 0x40]
lea ecx, [ebp - 0x180]
call fcn.00422927
mov dword [eax], 0x5d811f07
jmp 0x471df3
push 0
lea ecx, [ebp - 0x180]
call fcn.00422927
mov esi, eax
push 2
lea ecx, [ebp - 0x168]
call fcn.00422927
mov ecx, dword [esi]
mov dword [eax], ecx
lea ecx, [ebp - 0x180]
call fcn.00422922
jmp 0x471dd0
lea ecx, [ebp - 0x168]
call fcn.00422922
jmp 0x471d76
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x184], 0xfffffffb
push 4
lea ecx, [ebp - 0x1a8]
call fcn.00422862
mov dword [ebp - 0x48], 0
jmp 0x471e8d
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x471ea9
push dword [ebp - 0x48]
lea ecx, [ebp - 0x1a8]
call fcn.00422927
mov dword [eax], 0xfcfbce00
jmp 0x471e86
mov dword [ebp - 0x20], 0xffffffe2
jmp 0x471eb9
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x16
je 0x4720ac
push 2
lea ecx, [ebp - 0x15c]
call fcn.00422862
mov dword [ebp - 8], 0
jmp 0x471ee0
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x471ef6
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1bc], 0x9c3f
jmp 0x471ed9
mov dword [ebp - 8], 0
jmp 0x471f06
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x471f22
push dword [ebp - 8]
lea ecx, [ebp - 0x15c]
call fcn.00422927
mov dword [eax], 0x23371247
jmp 0x471eff
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1bc], 0
jne 0x471f40
or eax, 0xffffffff
jne 0x471f40
and dword [ebp - 0xcc], 0
jmp 0x471f4a
mov dword [ebp - 0xcc], 1
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0xdc], eax
push 0
lea ecx, [ebp - 0x15c]
call fcn.00422927
mov ecx, dword [ebp - 0xdc]
mov dword [eax], ecx
cmp dword [ebp - 0xdc], 0xfff6
ja 0x471f81
mov dword [ebp - 0xd8], 1
jmp 0x471f88
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0xd8]
jg 0x471fa2
mov dword [ebp - 0xa0], 1
jmp 0x471fa9
and dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0xa0]
je 0x471fde
mov byte [ebp - 0x17], 0
movzx eax, byte [ebp - 0x17]
test eax, eax
je 0x471fd9
push 0
push 0
push 0
push 0
push 0
push 0
push 0x9ee
push 0
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
jmp 0x472089
mov dword [ebp - 0x18c], 0xe012d2c8
mov dword [ebp - 0x1ac], 7
mov dword [ebp - 0x19c], 0xd40a1650
mov dword [ebp - 0x188], 0x1a7a81a8
push 3
lea ecx, [ebp - 0x198]
call fcn.00422862
mov dword [ebp - 0xc0], 0x25189d9e
mov dword [ebp - 0x50], 0
jmp 0x47202d
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x472049
push dword [ebp - 0x50]
lea ecx, [ebp - 0x198]
call fcn.00422927
mov dword [eax], 0xf84255eb
jmp 0x472026
mov byte [ebp - 0x19], 0
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x472071
push 0xfe0
push 0x835
push 0xa40
push 0xee5
push 0
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
lea ecx, [ebp - 0x198]
call fcn.00422922
cmp dword [ebp - 0x20], 0
je 0x47209c
lea ecx, [ebp - 0x15c]
call fcn.00422922
jmp 0x4720ac
lea ecx, [ebp - 0x15c]
call fcn.00422922
jmp 0x471eb2
lea ecx, [ebp - 0x1a8]
call fcn.00422922
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x134], eax
push 4
lea ecx, [ebp - 0x98]
call fcn.00422862
mov dword [ebp - 4], 0xfffffffb
mov dword [ebp - 0x10], 0xfffffffc
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x58], 0
jmp 0x4720fc
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x472118
push dword [ebp - 0x58]
lea ecx, [ebp - 0x98]
call fcn.00422927
mov dword [eax], 4
jmp 0x4720f5
mov dword [ebp - 4], 3
jmp 0x472128
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x4723bf
mov dword [ebp - 0x28], 0xd013d0bb
push 2
lea ecx, [ebp - 0x84]
call fcn.00422862
mov dword [ebp - 0x60], 0
jmp 0x472156
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x472172
push dword [ebp - 0x60]
lea ecx, [ebp - 0x84]
call fcn.00422927
mov dword [eax], 0xfffffffd
jmp 0x47214f
push dword [ebp - 4]
lea ecx, [ebp - 0x98]
call fcn.00422927
cmp dword [eax], 0
je 0x4722ec
push 0
lea ecx, [ebp - 0x98]
call fcn.00422927
push dword [ebp - 4]
lea ecx, [ebp - 0x98]
call fcn.00422927
mov dword [ebp - 0xa8], eax
push dword [ebp - 4]
lea ecx, [ebp - 0x98]
call fcn.00422927
mov ecx, dword [ebp - 0xa8]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa8]
cmp dword [eax], 0
je 0x472214
push dword [ebp - 4]
lea ecx, [ebp - 0x98]
call fcn.00422927
cmp dword [eax], 0
jne 0x4721ef
cmp dword [ebp - 4], 0
jne 0x4721ef
and dword [ebp - 0xd0], 0
jmp 0x4721f9
mov dword [ebp - 0xd0], 1
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x472214
mov dword [ebp - 0xb0], 1
jmp 0x47221b
and dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x28], eax
mov esi, dword [ebp - 0x28]
push 1
lea ecx, [ebp - 0x84]
call fcn.00422927
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x84]
call fcn.00422927
add esi, dword [eax]
cmp esi, dword [ebp - 4]
jg 0x472257
mov dword [ebp - 0xc8], 1
jmp 0x47225e
and dword [ebp - 0xc8], 0
push 0
lea ecx, [ebp - 0x84]
call fcn.00422927
mov ecx, dword [ebp - 0xc8]
add ecx, dword [eax]
jne 0x47227e
mov dword [ebp - 0x70], 1
jmp 0x472282
and dword [ebp - 0x70], 0
push 1
lea ecx, [ebp - 0x84]
call fcn.00422927
mov ecx, dword [ebp - 0x70]
mov dword [eax], ecx
cmp dword [ebp - 0x70], 0
je 0x47229e
cmp dword [ebp - 4], 0
cmp dword [ebp - 4], 0x4128
jne 0x4722b3
mov dword [ebp - 0xb8], 1
jmp 0x4722ba
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xb8]
cmp dword [ebp - 4], eax
jle 0x4722d4
mov dword [ebp - 0x8c], 1
jmp 0x4722db
and dword [ebp - 0x8c], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xc], eax
jne 0x472314
mov dword [ebp - 0xe0], 0xffffffff
cmp dword [ebp - 0xe0], 0
je 0x47230f
lea ecx, [ebp - 0x84]
call fcn.00422922
jmp 0x4723bf
jmp 0x4723af
mov dword [ebp - 0x108], 0xd37f4a1d
mov dword [ebp - 0x28], 1
jmp 0x47232e
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x4723a5
mov dword [ebp - 0xc], 1
jmp 0x472344
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x4723a3
push dword [ebp - 0x28]
lea ecx, [ebp - 0x84]
call fcn.00422927
cmp dword [eax], 0
je 0x47235f
jmp 0x4723a3
mov dword [ebp - 0x10], 3
jmp 0x47236f
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x4723a1
push dword [ebp - 0xc]
lea ecx, [ebp - 0x84]
call fcn.00422927
and dword [eax], 0
mov byte [ebp - 0x15], 0
movzx eax, byte [ebp - 0x15]
test eax, eax
je 0x47239f
push 0x1309
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
jmp 0x472368
jmp 0x47233d
jmp 0x472327
mov dword [ebp - 0x108], 0xfffffffe
lea ecx, [ebp - 0x84]
call fcn.00422922
jmp 0x472121
mov dword [ebp - 0x10], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x10], eax
jle 0x4723da
mov dword [ebp - 0x9c], 1
jmp 0x4723e1
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x9c], eax
jle 0x4723f8
mov dword [ebp - 0x88], 1
jmp 0x4723ff
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x88], eax
jne 0x472416
mov dword [ebp - 0xac], 1
jmp 0x47241d
and dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xac]
jne 0x47243d
cmp dword [ebp - 0x10], 0
jne 0x47243d
and dword [ebp - 0xb4], 0
jmp 0x472447
mov dword [ebp - 0xb4], 1
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0xb4]
jge 0x47246d
push 0
lea ecx, [ebp - 0x98]
call fcn.00422927
cmp dword [eax], 0
jne 0x47246d
and dword [ebp - 0xbc], 0
jmp 0x472477
mov dword [ebp - 0xbc], 1
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jne 0x472491
mov dword [ebp - 0xc4], 1
jmp 0x472498
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x98]
call fcn.00422922
mov eax, dword [ebp - 0x134]
movzx eax, word [eax]
push eax
mov ecx, dword [ebp - 0x11c]
call fcn.0047288b
jmp 0x472538
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe4]
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
push dword [ebp - 0xe8]
lea eax, [ebp - 0xf0]
push eax
mov ecx, dword [ebp - 0xf8]
call fcn.0047297d
mov ecx, eax
call fcn.004728f9
pop esi
mov esp, ebp
pop ebp
ret