Function at 0x2001c6aa
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x74]
mov eax, 0x16a0
call fcn.200256d0
push ebx
push esi
push edi
xor ebx, ebx
mov esi, 0x7fe
push esi
lea eax, [ebp - 0x162a]
push ebx
push eax
mov dword [ebp + 0x70], ebx
mov word [ebp - 0x162c], bx
call sub.MSVCRT.dll_memset
push 0x206
lea eax, [ebp - 0x62a]
push ebx
push eax
mov word [ebp - 0x62c], bx
call sub.MSVCRT.dll_memset
push esi
lea eax, [ebp - 0xe2a]
push ebx
push eax
mov word [ebp - 0xe2c], bx
call sub.MSVCRT.dll_memset
push dword [ebp + 0x7c]
call fcn.2000c372
xor ecx, ecx
add esp, 0x28
cmp word [eax], 0x40
mov dword [ebp + 0x7c], eax
sete cl
cmp ecx, ebx
mov dword [ebp + 0x6c], ecx
je 0x2001c72c
inc eax
inc eax
mov dword [ebp + 0x7c], eax
mov esi, dword [sym.imp.SHLWAPI.dll_SHGetValueW]
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp + 0x64]
push eax
push 0x20003c3c
mov edi, 0x20002a44
push edi
push SysReAllocString
mov dword [ebp + 0x64], 1
mov dword [ebp + 0x68], 0x104
call esi
test eax, eax
je 0x2001c7de
lea eax, [ebp + 0x68]
push eax
lea eax, [ebp - 0x62c]
push eax
lea eax, [ebp + 0x64]
push eax
push 0x20003c34
push edi
push SysReAllocString
call esi
test eax, eax
je 0x2001c7de
cmp dword [ebp + 0x6c], ebx
jne 0x2001c7d6
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
push 0x50
lea eax, [ebp - 0x3c]
push eax
push 0x2718
push dword [0x2003f03c]
call esi
push 0x50
lea eax, [ebp - 0xdc]
push eax
push 0x2719
push dword [0x2003f03c]
call esi
push ebx
push ebx
push 0x10
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0x3c]
push eax
push dword [0x2002dd6c]
call fcn.2000f82c
add esp, 0x18
xor eax, eax
inc eax
jmp 0x2001ca56
push 0x400
lea eax, [ebp - 0x162c]
push eax
lea eax, [ebp - 0x62c]
push eax
call fcn.20007e9d
mov edi, dword [sym.imp.USER32.dll_LoadStringW]
add esp, 0xc
push 0x50
lea eax, [ebp - 0x424]
push eax
push 0x271a
push dword [0x2003f03c]
call edi
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x162c]
push eax
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0xe2c]
push eax
call esi
add esp, 0xc
push 0x20003c24
push dword [ebp + 0x7c]
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x2001c8d8
push 0x50
lea eax, [ebp - 0x3c]
push eax
push 0x271c
push dword [0x2003f03c]
call edi
push 0x50
lea eax, [ebp - 0xdc]
push eax
push 0x271d
push dword [0x2003f03c]
call edi
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xe2c]
push eax
call esi
cmp dword [ebp + 0x6c], ebx
jne 0x2001c8b5
push ebx
push ebx
push 0x24
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xe2c]
push eax
push dword [0x2002dd6c]
call fcn.2000f82c
add esp, 0x18
cmp eax, 6
jne 0x2001ca53
push 0x200038d4
lea eax, [ebp - 0x162c]
push eax
call esi
lea eax, [ebp - 0x162c]
push eax
call fcn.20013c88
pop ecx
mov dword [ebp + 0x70], eax
jmp 0x2001ca53
push 0x20003c14
push dword [ebp + 0x7c]
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x2001ca53
push 0x50
lea eax, [ebp - 0x3c]
push eax
push 0x271e
push dword [0x2003f03c]
call edi
push 0x50
lea eax, [ebp - 0xdc]
push eax
push 0x271f
push dword [0x2003f03c]
call edi
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0xe2c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push ebx
push ebx
push 0x24
lea eax, [ebp - 0xdc]
push eax
lea eax, [ebp - 0xe2c]
push eax
push dword [0x2002dd6c]
call fcn.2000f82c
add esp, 0x18
cmp eax, 6
jne 0x2001ca53
push 0x50
lea eax, [ebp - 0x384]
push eax
push 0x2720
push dword [0x2003f03c]
call edi
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x162c]
push ebx
push eax
call fcn.2001c07e
mov edi, eax
add esp, 0xc
cmp edi, ebx
mov dword [ebp + 0x7c], edi
je 0x2001ca53
push edi
call fcn.2000448d
test eax, eax
pop ecx
jne 0x2001c99d
push edi
call fcn.20004446
pop ecx
push edi
call fcn.2000448d
test eax, eax
pop ecx
je 0x2001ca53
push edi
mov edi, 0x20002a44
push edi
push 0x20002a2c
lea eax, [ebp - 0x2e4]
push 0x20003bf8
push eax
call esi
lea eax, [ebp - 0x2e4]
push eax
call fcn.2000d19e
push dword [ebp + 0x7c]
lea eax, [ebp - 0x2e4]
push edi
push 0x20002a2c
push 0x20003bdc
push eax
call esi
lea eax, [ebp - 0x2e4]
push eax
call fcn.2000d19e
push dword [ebp + 0x7c]
lea eax, [ebp - 0x2e4]
push 0x20003bcc
push eax
call esi
push ebx
push ebx
lea eax, [ebp - 0x2e4]
push 1
push eax
call fcn.2000d5ac
add esp, 0x4c
push dword [ebp + 0x7c]
mov dword [ebp + 0x70], eax
lea eax, [ebp - 0x2e4]
push 0x20003bbc
push eax
call esi
push ebx
push ebx
lea eax, [ebp - 0x2e4]
push 1
push eax
call fcn.2000d5ac
add dword [ebp + 0x70], eax
push ebx
push ebx
push ebx
push 0x200029e8
call fcn.2000d5ac
add esp, 0x2c
add dword [ebp + 0x70], eax
mov eax, dword [ebp + 0x70]
pop edi
pop esi
pop ebx
add ebp, 0x74
leave
ret