Function at 0x4650b0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x128
mov eax, dword [0x4f5568]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
mov esi, dword [ebp + 8]
mov ebx, ecx
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x124], esi
mov eax, dword [ebx + 0x194]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x120], 4
push eax
lea eax, [ebp - 0x120]
mov dword [ebp - 0x11c], 4
push eax
push 0
push str.FileTransferEnabled
push esi
call edi
test eax, eax
je 0x46511f
mov eax, dword [ebp - 0x118]
jmp 0x465141
cmp dword [ebp - 0x120], 4
je 0x465130
mov eax, dword [ebp - 0x118]
jmp 0x465141
cmp dword [ebp - 0x11c], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x194], eax
mov eax, dword [ebx + 0x198]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.FTUserImpersonation
push esi
call edi
test eax, eax
je 0x46518f
mov eax, dword [ebp - 0x118]
jmp 0x4651b1
cmp dword [ebp - 0x11c], 4
je 0x4651a0
mov eax, dword [ebp - 0x118]
jmp 0x4651b1
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x198], eax
mov eax, dword [ebx + 0x19c]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.BlankMonitorEnabled
push esi
call edi
test eax, eax
je 0x4651ff
mov eax, dword [ebp - 0x118]
jmp 0x465221
cmp dword [ebp - 0x11c], 4
je 0x465210
mov eax, dword [ebp - 0x118]
jmp 0x465221
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x19c], eax
mov eax, dword [ebx + 0x1a0]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.BlankInputsOnly
push esi
call edi
test eax, eax
je 0x46526f
mov eax, dword [ebp - 0x118]
jmp 0x465291
cmp dword [ebp - 0x11c], 4
je 0x465280
mov eax, dword [ebp - 0x118]
jmp 0x465291
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x1a0], eax
mov eax, dword [ebx + 0x1a4]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.DefaultScale
push esi
call edi
test eax, eax
je 0x4652df
mov eax, dword [ebp - 0x118]
jmp 0x465301
cmp dword [ebp - 0x11c], 4
je 0x4652f0
mov eax, dword [ebp - 0x118]
jmp 0x465301
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x1a4], eax
mov eax, dword [ebx + 0xc60]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.primary
push esi
call edi
test eax, eax
je 0x46534f
mov eax, dword [ebp - 0x118]
jmp 0x465371
cmp dword [ebp - 0x11c], 4
je 0x465360
mov eax, dword [ebp - 0x118]
jmp 0x465371
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0xc60], eax
mov eax, dword [ebx + 0xc64]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.secondary
push esi
call edi
test eax, eax
je 0x4653bf
mov eax, dword [ebp - 0x118]
jmp 0x4653e1
cmp dword [ebp - 0x11c], 4
je 0x4653d0
mov eax, dword [ebp - 0x118]
jmp 0x4653e1
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0xc64], eax
mov eax, dword [ebx + 0x1b0]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.UseDSMPlugin
push esi
call edi
test eax, eax
je 0x46542f
mov eax, dword [ebp - 0x118]
jmp 0x465451
cmp dword [ebp - 0x11c], 4
je 0x465440
mov eax, dword [ebp - 0x118]
jmp 0x465451
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0xc]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x1b0], eax
lea eax, [ebp - 0x11c]
push eax
lea eax, [ebp - 0x114]
mov dword [ebp - 0xc], 3
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 0x11c], 0x100
push eax
push 0
push str.DSMPlugin
push esi
call edi
test eax, eax
jne 0x4654b3
cmp dword [ebp - 0x11c], 0x100
jg 0x4654b3
lea edi, [ebx + 0x1b4]
mov ecx, 0x40
lea esi, [ebp - 0x114]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebp - 0x124]
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [ebx + 0x134]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.SocketConnect
push esi
call edi
test eax, eax
je 0x4654fe
mov eax, dword [ebp - 0x118]
jmp 0x465523
cmp dword [ebp - 0x11c], 4
je 0x46550f
mov eax, dword [ebp - 0x118]
jmp 0x465523
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x134], eax
mov eax, dword [ebx + 0x138]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.HTTPConnect
push esi
call edi
test eax, eax
je 0x465574
mov eax, dword [ebp - 0x118]
jmp 0x465599
cmp dword [ebp - 0x11c], 4
je 0x465585
mov eax, dword [ebp - 0x118]
jmp 0x465599
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x138], eax
mov eax, dword [ebx + 0x13c]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.AutoPortSelect
push esi
call edi
test eax, eax
je 0x4655ea
mov eax, dword [ebp - 0x118]
jmp 0x46560f
cmp dword [ebp - 0x11c], 4
je 0x4655fb
mov eax, dword [ebp - 0x118]
jmp 0x46560f
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x13c], eax
mov eax, dword [ebx + 0x140]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.PortNumber
push esi
call edi
test eax, eax
je 0x465660
mov eax, dword [ebp - 0x118]
jmp 0x465685
cmp dword [ebp - 0x11c], 4
je 0x465671
mov eax, dword [ebp - 0x118]
jmp 0x465685
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x140], eax
add eax, 0xffffff9c
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.HTTPPortNumber
push esi
call edi
test eax, eax
je 0x4656d3
mov eax, dword [ebp - 0x118]
jmp 0x4656f8
cmp dword [ebp - 0x11c], 4
je 0x4656e4
mov eax, dword [ebp - 0x118]
jmp 0x4656f8
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x144], eax
mov eax, dword [ebx + 0x168]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.IdleTimeout
push esi
call edi
test eax, eax
je 0x465749
mov eax, dword [ebp - 0x118]
jmp 0x46576e
cmp dword [ebp - 0x11c], 4
je 0x46575a
mov eax, dword [ebp - 0x118]
jmp 0x46576e
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x168], eax
mov eax, dword [ebx + 0x16c]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.RemoveWallpaper
push esi
call edi
test eax, eax
je 0x4657bf
mov eax, dword [ebp - 0x118]
jmp 0x4657e4
cmp dword [ebp - 0x11c], 4
je 0x4657d0
mov eax, dword [ebp - 0x118]
jmp 0x4657e4
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x16c], eax
mov eax, dword [ebx + 0x170]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.RemoveEffects
push esi
call edi
test eax, eax
je 0x465835
mov eax, dword [ebp - 0x118]
jmp 0x46585a
cmp dword [ebp - 0x11c], 4
je 0x465846
mov eax, dword [ebp - 0x118]
jmp 0x46585a
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x170], eax
mov eax, dword [ebx + 0x174]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.RemoveFontSmoothing
push esi
call edi
test eax, eax
je 0x4658ab
mov eax, dword [ebp - 0x118]
jmp 0x4658d0
cmp dword [ebp - 0x11c], 4
je 0x4658bc
mov eax, dword [ebp - 0x118]
jmp 0x4658d0
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x174], eax
mov eax, dword [ebx + 0x178]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.RemoveAero
push esi
call edi
test eax, eax
je 0x465921
mov eax, dword [ebp - 0x118]
jmp 0x465946
cmp dword [ebp - 0x11c], 4
je 0x465932
mov eax, dword [ebp - 0x118]
jmp 0x465946
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x178], eax
mov eax, dword [ebx + 0x158]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.QuerySetting
push esi
call edi
test eax, eax
je 0x465997
mov edx, dword [ebp - 0x118]
jmp 0x4659bc
cmp dword [ebp - 0x11c], 4
je 0x4659a8
mov edx, dword [ebp - 0x118]
jmp 0x4659bc
cmp dword [ebp - 0x120], 4
mov edx, dword [ebp - 0x124]
cmovne edx, dword [ebp - 0x118]
mov ecx, dword [ebx + 0x10c]
mov dword [ebx + 0x158], edx
push edx
mov eax, dword [ecx]
call dword [eax + 0x1a4]
mov eax, dword [ebx + 0x164]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.QueryTimeout
push esi
call edi
test eax, eax
je 0x465a1c
mov edx, dword [ebp - 0x118]
jmp 0x465a41
cmp dword [ebp - 0x11c], 4
je 0x465a2d
mov edx, dword [ebp - 0x118]
jmp 0x465a41
cmp dword [ebp - 0x120], 4
mov edx, dword [ebp - 0x124]
cmovne edx, dword [ebp - 0x118]
mov ecx, dword [ebx + 0x10c]
mov dword [ebx + 0x164], edx
push edx
mov eax, dword [ecx]
call dword [eax + 0x1b8]
mov eax, dword [ebx + 0x160]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.QueryAccept
push esi
call edi
test eax, eax
je 0x465aa1
mov edx, dword [ebp - 0x118]
jmp 0x465ac6
cmp dword [ebp - 0x11c], 4
je 0x465ab2
mov edx, dword [ebp - 0x118]
jmp 0x465ac6
cmp dword [ebp - 0x120], 4
mov edx, dword [ebp - 0x124]
cmovne edx, dword [ebp - 0x118]
mov ecx, dword [ebx + 0x10c]
mov dword [ebx + 0x160], edx
push edx
mov eax, dword [ecx]
call dword [eax + 0x1ac]
mov eax, dword [ebx + 0x15c]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.QueryIfNoLogon
push esi
call edi
test eax, eax
je 0x465b26
mov edx, dword [ebp - 0x118]
jmp 0x465b4b
cmp dword [ebp - 0x11c], 4
je 0x465b37
mov edx, dword [ebp - 0x118]
jmp 0x465b4b
cmp dword [ebp - 0x120], 4
mov edx, dword [ebp - 0x124]
cmovne edx, dword [ebp - 0x118]
mov ecx, dword [ebx + 0x10c]
mov dword [ebx + 0x15c], edx
push edx
mov eax, dword [ecx]
call dword [eax + 0x1c0]
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x124], 3
push eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0x11c], 8
push eax
lea eax, [ebp - 0x124]
push eax
push 0
push str.Password
push esi
call edi
test eax, eax
jne 0x465baf
cmp dword [ebp - 0x11c], 8
jg 0x465baf
mov eax, dword [ebp - 0x10]
mov dword [ebx + 0x148], eax
mov eax, dword [ebp - 0xc]
mov dword [ebx + 0x14c], eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x124], 3
push eax
lea eax, [ebp - 0x10]
mov dword [ebp - 0x11c], 8
push eax
lea eax, [ebp - 0x124]
push eax
push 0
push str.Password2
push esi
call edi
test eax, eax
jne 0x465bfe
cmp dword [ebp - 0x11c], 8
jg 0x465bfe
mov eax, dword [ebp - 0x10]
mov dword [ebx + 0x150], eax
mov eax, dword [ebp - 0xc]
mov dword [ebx + 0x154], eax
mov eax, dword [ebx + 0x17c]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.InputsEnabled
push esi
call edi
test eax, eax
je 0x465c49
mov eax, dword [ebp - 0x118]
jmp 0x465c6e
cmp dword [ebp - 0x11c], 4
je 0x465c5a
mov eax, dword [ebp - 0x118]
jmp 0x465c6e
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x17c], eax
mov eax, dword [ebx + 0x180]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.LockSetting
push esi
call edi
test eax, eax
je 0x465cbf
mov eax, dword [ebp - 0x118]
jmp 0x465ce4
cmp dword [ebp - 0x11c], 4
je 0x465cd0
mov eax, dword [ebp - 0x118]
jmp 0x465ce4
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x180], eax
mov eax, dword [ebx + 0x184]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.LocalInputsDisabled
push esi
call edi
test eax, eax
je 0x465d35
mov eax, dword [ebp - 0x118]
jmp 0x465d5a
cmp dword [ebp - 0x11c], 4
je 0x465d46
mov eax, dword [ebp - 0x118]
jmp 0x465d5a
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x184], eax
mov eax, dword [ebx + 0x188]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.EnableJapInput
push esi
call edi
test eax, eax
je 0x465dab
mov eax, dword [ebp - 0x118]
jmp 0x465dd0
cmp dword [ebp - 0x11c], 4
je 0x465dbc
mov eax, dword [ebp - 0x118]
jmp 0x465dd0
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov dword [ebx + 0x188], eax
mov eax, dword [ebx + 0x18c]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x124]
mov dword [ebp - 0x11c], 4
push eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x120], 4
push eax
push 0
push str.clearconsole
push esi
call edi
test eax, eax
je 0x465e38
mov ecx, dword [ebp - 0x118]
mov dword [ebx + 0x18c], ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004aca59
mov esp, ebp
pop ebp
ret 4
cmp dword [ebp - 0x11c], 4
jne 0x465e19
cmp dword [ebp - 0x120], 4
mov eax, dword [ebp - 0x124]
cmovne eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 8]
pop edi
pop esi
mov dword [ebx + 0x18c], eax
xor ecx, ebp
pop ebx
call fcn.004aca59
mov esp, ebp
pop ebp
ret 4