Function at 0x10003990
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push 0
push 0xf003f
push 0
push 0
push 0
push str.SOFTWAREWebzenMuConfig
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
jne 0x10003cb6
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 4]
push eax
push 0x10074b14
push 0
push 0
push 0x10033854
push dword [ebp - 8]
mov dword [ebp - 4], 0xb
call esi
test eax, eax
je 0x100039fd
xorps xmm0, xmm0
movups xmmword [0x10074b14], xmm0
movups xmmword [0x10074b24], xmm0
lea eax, [ebp - 4]
mov dword [ebp - 4], 0xb
push eax
push 0x10074b54
push 0
push 0
push 0x1003386c
push dword [ebp - 8]
call esi
test eax, eax
je 0x10003a30
xorps xmm0, xmm0
movups xmmword [0x10074b54], xmm0
movups xmmword [0x10074b64], xmm0
lea eax, [ebp - 4]
mov dword [ebp - 4], 0xb
push eax
push 0x10074b94
push 0
push 0
push 0x10033884
push dword [ebp - 8]
call esi
test eax, eax
je 0x10003a63
xorps xmm0, xmm0
movups xmmword [0x10074b94], xmm0
movups xmmword [0x10074ba4], xmm0
lea eax, [ebp - 4]
mov dword [ebp - 4], 0xb
push eax
push 0x10074bd4
push 0
push 0
push 0x1003389c
push dword [ebp - 8]
call esi
test eax, eax
je 0x10003a96
xorps xmm0, xmm0
movups xmmword [0x10074bd4], xmm0
movups xmmword [0x10074be4], xmm0
lea eax, [ebp - 4]
mov dword [ebp - 4], 0xb
push eax
push 0x10074c14
push 0
push 0
push 0x100338b4
push dword [ebp - 8]
call esi
test eax, eax
je 0x10003ac9
xorps xmm0, xmm0
movups xmmword [0x10074c14], xmm0
movups xmmword [0x10074c24], xmm0
lea eax, [ebp - 4]
mov dword [ebp - 4], 0xb
push eax
push 0x10074b34
push 0
push 0
push 0x10033858
push dword [ebp - 8]
call esi
test eax, eax
je 0x10003afc
xorps xmm0, xmm0
movups xmmword [0x10074b34], xmm0
movups xmmword [0x10074b44], xmm0
lea eax, [ebp - 4]
mov dword [ebp - 4], 0xb
push eax
push 0x10074b74
push 0
push 0
push 0x10033870
push dword [ebp - 8]
call esi
test eax, eax
je 0x10003b2f
xorps xmm0, xmm0
movups xmmword [0x10074b74], xmm0
movups xmmword [0x10074b84], xmm0
lea eax, [ebp - 4]
mov dword [ebp - 4], 0xb
push eax
push 0x10074bb4
push 0
push 0
push 0x10033888
push dword [ebp - 8]
call esi
test eax, eax
je 0x10003b62
xorps xmm0, xmm0
movups xmmword [0x10074bb4], xmm0
movups xmmword [0x10074bc4], xmm0
lea eax, [ebp - 4]
mov dword [ebp - 4], 0xb
push eax
push 0x10074bf4
push 0
push 0
push 0x100338a0
push dword [ebp - 8]
call esi
test eax, eax
je 0x10003b95
xorps xmm0, xmm0
movups xmmword [0x10074bf4], xmm0
movups xmmword [0x10074c04], xmm0
lea eax, [ebp - 4]
mov dword [ebp - 4], 0xb
push eax
push 0x10074c34
push 0
push 0
push 0x100338b8
push dword [ebp - 8]
call esi
test eax, eax
je 0x10003bc8
xorps xmm0, xmm0
movups xmmword [0x10074c34], xmm0
movups xmmword [0x10074c44], xmm0
lea eax, [ebp - 4]
mov dword [ebp - 4], 4
push eax
push 0x10074b00
push 0
push 0
push str.SavePass
push dword [ebp - 8]
call esi
mov ecx, dword [0x10074b00]
xor edx, edx
test eax, eax
mov dword [ebp - 4], 4
lea eax, [ebp - 4]
push eax
push 0x10074b00
push edx
push edx
push str.SavePass2
push dword [ebp - 8]
cmovne ecx, edx
mov dword [0x10074b00], ecx
call esi
mov ecx, dword [0x10074b04]
xor edx, edx
test eax, eax
mov dword [ebp - 4], 4
lea eax, [ebp - 4]
push eax
push 0x10074b00
push edx
push edx
push str.SavePass3
push dword [ebp - 8]
cmovne ecx, edx
mov dword [0x10074b04], ecx
call esi
mov ecx, dword [0x10074b08]
xor edx, edx
test eax, eax
mov dword [ebp - 4], 4
lea eax, [ebp - 4]
push eax
push 0x10074b00
push edx
push edx
push str.SavePass4
push dword [ebp - 8]
cmovne ecx, edx
mov dword [0x10074b08], ecx
call esi
mov ecx, dword [0x10074b0c]
xor edx, edx
test eax, eax
mov dword [ebp - 4], 4
lea eax, [ebp - 4]
push eax
push 0x10074b00
push edx
push edx
push str.SavePass5
push dword [ebp - 8]
cmovne ecx, edx
mov dword [0x10074b0c], ecx
call esi
mov ecx, dword [0x10074b10]
xor edx, edx
test eax, eax
pop esi
cmovne ecx, edx
mov dword [0x10074b10], ecx
push 0x100014b0
push 0x40b5a9
push 0xe8
call fcn.10018b80
push 0x10001370
push 0x40b306
push 0xe8
call fcn.10018b80
push 0x10001390
push 0x483711
push 0xe8
call fcn.10018b80
add esp, 0x24
mov esp, ebp
pop ebp
ret