Function at 0x10001d97
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1000d9bf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x20554
call fcn.1000d350
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x10174], 9
push 0x10100034
lea ecx, [ebp - 0x10170]
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 4], 0
mov byte [ebp - 0x20174], 0
mov ecx, 0x3fff
xor eax, eax
lea edi, [ebp - 0x20173]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x1016c], 0
mov ecx, 0x3fff
xor eax, eax
lea edi, [ebp - 0x1016b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x10100038
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::CString_2
mov byte [ebp - 4], 1
push 0x1010003c
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::CString_2
mov byte [ebp - 4], 2
push 0x10100040
lea ecx, [ebp - 0x20180]
call sub.MFC42.DLL_CString::CString_2
mov byte [ebp - 4], 3
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x2017c], 0
lea eax, [ebp - 0x164]
push eax
call fcn.10001000
add esp, 4
mov byte [ebp - 4], 4
push str.secedit__export__cfg
lea ecx, [ebp - 0x10170]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp - 0x16c]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x2044c], esp
lea edx, [ebp - 0x10170]
push edx
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0x2046c], eax
call fcn.100011b3
add esp, 8
lea ecx, [ebp - 0x16c]
call fcn.10003490
mov dword [ebp - 0x20470], eax
cmp dword [ebp - 0x20470], 0
jle 0x10002bd9
lea ecx, [ebp - 0x16c]
call fcn.10003490
mov dword [ebp - 0x20474], eax
mov eax, dword [ebp - 0x20474]
push eax
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::GetBuffer
mov dword [ebp - 0x20478], eax
push 0x10012190
mov ecx, dword [ebp - 0x20478]
push ecx
call dword [sym.imp.MSVCRT.dll_strtok]
add esp, 8
mov dword [ebp - 0x20410], eax
mov dword [ebp - 0x20388], 0
cmp dword [ebp - 0x20410], 0
je 0x10001f6a
cmp dword [ebp - 0x20388], 0x1e
jl 0x10001f30
jmp 0x10001f6a
mov edx, dword [ebp - 0x20388]
mov eax, dword [ebp - 0x20410]
mov dword [ebp + edx*4 - 0x20400], eax
push 0x10012194
push 0
call dword [sym.imp.MSVCRT.dll_strtok]
add esp, 8
mov dword [ebp - 0x20410], eax
mov ecx, dword [ebp - 0x20388]
add ecx, 1
mov dword [ebp - 0x20388], ecx
jmp 0x10001f1c
mov dword [ebp - 0x20388], 0x1e
push 0x10012198
lea edx, [ebp - 0xc4]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x100121a0
lea eax, [ebp - 0xa4]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
mov dword [ebp - 0x2040c], 0
jmp 0x10001fb7
mov ecx, dword [ebp - 0x2040c]
add ecx, 1
mov dword [ebp - 0x2040c], ecx
mov edx, dword [ebp - 0x2040c]
cmp edx, dword [ebp - 0x20388]
jge 0x10002479
push 0x10100044
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::operator_2
mov eax, dword [ebp - 0x2040c]
mov ecx, dword [ebp + eax*4 - 0x20400]
push ecx
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp - 0x16c]
call fcn.10003490
mov dword [ebp - 0x2047c], eax
push 0x100121a8
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x20480], eax
mov edx, dword [ebp - 0x2047c]
sub edx, dword [ebp - 0x20480]
sub edx, 3
push edx
lea eax, [ebp - 0x20450]
push eax
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::Right
mov dword [ebp - 0x20484], eax
mov ecx, dword [ebp - 0x20484]
mov dword [ebp - 0x20488], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x20488]
push edx
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x20450]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20178]
call fcn.10003490
mov dword [ebp - 0x2048c], eax
mov eax, dword [ebp - 0x2048c]
sub eax, 1
push eax
lea ecx, [ebp - 0x20454]
push ecx
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::Left
mov dword [ebp - 0x20490], eax
mov edx, dword [ebp - 0x20490]
mov dword [ebp - 0x20494], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x20494]
push eax
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x20454]
call sub.MFC42.DLL_CString::CString
push str.PasswordComplexity
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x20498], eax
cmp dword [ebp - 0x20498], 0xffffffff
je 0x10002155
mov dword [ebp - 0x168], 1
push 0x100121c0
lea ecx, [ebp - 0x20178]
push ecx
call fcn.10003430
mov byte [ebp - 0x2049c], al
mov edx, dword [ebp - 0x2049c]
and edx, 0xff
test edx, edx
je 0x1000213c
push 0x100121c4
lea eax, [ebp - 0x164]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10002150
push 0x100121cc
lea ecx, [ebp - 0x164]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10002474
push str.MinimumPasswordLength
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x204a0], eax
cmp dword [ebp - 0x204a0], 0xffffffff
je 0x100021ba
mov dword [ebp - 0x168], 1
push 0x100121ec
lea ecx, [ebp - 0x20178]
call fcn.1000d044
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x204a4], eax
mov edx, dword [ebp - 0x204a4]
push edx
lea eax, [ebp - 0x144]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10002474
push str.MaximumPasswordAge
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x204a8], eax
cmp dword [ebp - 0x204a8], 0xffffffff
je 0x1000221f
mov dword [ebp - 0x168], 1
push 0x10012208
lea ecx, [ebp - 0x20178]
call fcn.1000d044
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x204ac], eax
mov ecx, dword [ebp - 0x204ac]
push ecx
lea edx, [ebp - 0x124]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10002474
push str.MinimumPasswordAge
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x204b0], eax
cmp dword [ebp - 0x204b0], 0xffffffff
je 0x10002284
mov dword [ebp - 0x168], 1
push 0x10012220
lea ecx, [ebp - 0x20178]
call fcn.1000d044
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x204b4], eax
mov eax, dword [ebp - 0x204b4]
push eax
lea ecx, [ebp - 0x104]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10002474
push str.PasswordHistorySize
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x204b8], eax
cmp dword [ebp - 0x204b8], 0xffffffff
je 0x100022e9
mov dword [ebp - 0x168], 1
push 0x10012238
lea ecx, [ebp - 0x20178]
call fcn.1000d044
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x204bc], eax
mov edx, dword [ebp - 0x204bc]
push edx
lea eax, [ebp - 0xe4]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10002474
push str.LockoutDuration
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x204c0], eax
cmp dword [ebp - 0x204c0], 0xffffffff
je 0x1000233e
mov dword [ebp - 0x168], 1
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x204c4], eax
mov ecx, dword [ebp - 0x204c4]
push ecx
lea edx, [ebp - 0xc4]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10002474
push str.ResetLockoutCount
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x204c8], eax
cmp dword [ebp - 0x204c8], 0xffffffff
je 0x10002393
mov dword [ebp - 0x168], 1
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x204cc], eax
mov eax, dword [ebp - 0x204cc]
push eax
lea ecx, [ebp - 0xa4]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10002474
push str.LockoutBadCount
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x204d0], eax
cmp dword [ebp - 0x204d0], 0xffffffff
je 0x10002400
mov dword [ebp - 0x168], 1
mov edx, dword [ebp - 0x20178]
push edx
push 0x1001227c
lea eax, [ebp - 0x20180]
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
lea ecx, [ebp - 0x20180]
call fcn.10003420
mov dword [ebp - 0x204d4], eax
mov ecx, dword [ebp - 0x204d4]
push ecx
lea edx, [ebp - 0x84]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10002474
push str.EnableGuestAccount
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x204d8], eax
cmp dword [ebp - 0x204d8], 0xffffffff
je 0x10002474
mov dword [ebp - 0x168], 1
push 0x100122a0
lea eax, [ebp - 0x20178]
push eax
call fcn.10003430
mov byte [ebp - 0x204dc], al
mov ecx, dword [ebp - 0x204dc]
and ecx, 0xff
test ecx, ecx
je 0x10002463
push 0x100122a4
lea edx, [ebp - 0x64]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10002474
push 0x100122ac
lea eax, [ebp - 0x64]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10001fa8
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x10100048
lea ecx, [ebp - 0x2041c]
call sub.MFC42.DLL_CString::CString_2
mov dword [ebp - 0x204e0], eax
mov byte [ebp - 4], 7
push str.net_accounts__
lea ecx, [ebp - 0x10170]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp - 0x2041c]
push ecx
push ecx
mov ecx, esp
mov dword [ebp - 0x20458], esp
lea edx, [ebp - 0x10170]
push edx
call sub.MFC42.DLL_CString::CString_1
mov dword [ebp - 0x204e4], eax
call fcn.100011b3
add esp, 8
lea ecx, [ebp - 0x2041c]
call fcn.10003490
mov dword [ebp - 0x204e8], eax
cmp dword [ebp - 0x204e8], 0
jle 0x1000295d
lea ecx, [ebp - 0x2041c]
call fcn.10003490
mov dword [ebp - 0x204ec], eax
mov eax, dword [ebp - 0x204ec]
push eax
lea ecx, [ebp - 0x2041c]
call sub.MFC42.DLL_CString::GetBuffer
mov dword [ebp - 0x204f0], eax
push 0x100122c4
mov ecx, dword [ebp - 0x204f0]
push ecx
call dword [sym.imp.MSVCRT.dll_strtok]
add esp, 8
mov dword [ebp - 0x20448], eax
mov dword [ebp - 0x20388], 0
cmp dword [ebp - 0x20448], 0
je 0x10002590
cmp dword [ebp - 0x20388], 9
jge 0x10002590
mov edx, dword [ebp - 0x20388]
mov eax, dword [ebp - 0x20448]
mov dword [ebp + edx*4 - 0x20440], eax
push 0x100122c8
push 0
call dword [sym.imp.MSVCRT.dll_strtok]
add esp, 8
mov dword [ebp - 0x20448], eax
mov ecx, dword [ebp - 0x20388]
add ecx, 1
mov dword [ebp - 0x20388], ecx
jmp 0x10002544
mov dword [ebp - 0x20444], 0
jmp 0x100025ab
mov edx, dword [ebp - 0x20444]
add edx, 1
mov dword [ebp - 0x20444], edx
cmp dword [ebp - 0x20444], 9
jge 0x1000295d
mov eax, dword [ebp - 0x20444]
mov ecx, dword [ebp + eax*4 - 0x20440]
push ecx
lea ecx, [ebp - 0x20180]
call sub.MFC42.DLL_CString::operator_2
lea ecx, [ebp - 0x20180]
call fcn.10003490
mov dword [ebp - 0x204f4], eax
push 0x100122cc
lea ecx, [ebp - 0x20180]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x204f8], eax
mov edx, dword [ebp - 0x204f8]
add edx, 1
mov eax, dword [ebp - 0x204f4]
sub eax, edx
push eax
lea ecx, [ebp - 0x2045c]
push ecx
lea ecx, [ebp - 0x20180]
call sub.MFC42.DLL_CString::Right
mov dword [ebp - 0x204fc], eax
mov edx, dword [ebp - 0x204fc]
mov dword [ebp - 0x20500], edx
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x20500]
push eax
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2045c]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::TrimLeft
push 0x100122d0
lea ecx, [ebp - 0x20180]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x20504], eax
cmp dword [ebp - 0x20504], 0xffffffff
je 0x100026b4
push 0x100122e0
lea ecx, [ebp - 0x20178]
call fcn.1000d044
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x20508], eax
mov ecx, dword [ebp - 0x20508]
push ecx
lea edx, [ebp - 0x144]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x100122e8
lea ecx, [ebp - 0x20180]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x2050c], eax
cmp dword [ebp - 0x2050c], 0xffffffff
je 0x1000270a
push 0x100122fc
lea ecx, [ebp - 0x20178]
call fcn.1000d044
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x20510], eax
mov eax, dword [ebp - 0x20510]
push eax
lea ecx, [ebp - 0x124]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x10012300
lea ecx, [ebp - 0x20180]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x20514], eax
cmp dword [ebp - 0x20514], 0xffffffff
je 0x10002760
push 0x10012314
lea ecx, [ebp - 0x20178]
call fcn.1000d044
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x20518], eax
mov edx, dword [ebp - 0x20518]
push edx
lea eax, [ebp - 0x104]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x10012318
lea ecx, [ebp - 0x20180]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x2051c], eax
cmp dword [ebp - 0x2051c], 0xffffffff
je 0x100027e7
push str.None
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x20520], eax
cmp dword [ebp - 0x20520], 0xffffffff
je 0x100027b0
push 0x10012338
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::operator_2
jmp 0x100027c0
push 0x10012348
lea ecx, [ebp - 0x20178]
call fcn.1000d044
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x20524], eax
mov ecx, dword [ebp - 0x20524]
push ecx
lea edx, [ebp - 0xe4]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x10012358
lea ecx, [ebp - 0x20180]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x20528], eax
cmp dword [ebp - 0x20528], 0xffffffff
je 0x1000286e
push 0x10012364
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x2052c], eax
cmp dword [ebp - 0x2052c], 0xffffffff
je 0x10002837
push 0x1001236c
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::operator_2
jmp 0x10002847
push 0x1001237c
lea ecx, [ebp - 0x20178]
call fcn.1000d044
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x20530], eax
mov eax, dword [ebp - 0x20530]
push eax
lea ecx, [ebp - 0x84]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x10012388
lea ecx, [ebp - 0x20180]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x20534], eax
cmp dword [ebp - 0x20534], 0xffffffff
je 0x100028e3
push 0x10012398
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x20538], eax
cmp dword [ebp - 0x20538], 0xffffffff
jne 0x100028bc
push 0x100123a0
lea ecx, [ebp - 0x20178]
call fcn.1000d044
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x2053c], eax
mov edx, dword [ebp - 0x2053c]
push edx
lea eax, [ebp - 0xc4]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
push 0x100123a8
lea ecx, [ebp - 0x20180]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x20540], eax
cmp dword [ebp - 0x20540], 0xffffffff
je 0x10002958
push 0x100123b8
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::Find_1
mov dword [ebp - 0x20544], eax
cmp dword [ebp - 0x20544], 0xffffffff
jne 0x10002931
push 0x100123c0
lea ecx, [ebp - 0x20178]
call fcn.1000d044
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x20548], eax
mov ecx, dword [ebp - 0x20548]
push ecx
lea edx, [ebp - 0xa4]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x1000259c
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2041c]
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 9
mov eax, dword [ebp + 8]
cmp dword [eax + 0x10], 6
jge 0x10002a54
lea ecx, [ebp - 0x20460]
push ecx
call fcn.10001518
add esp, 4
mov dword [ebp - 0x2054c], eax
mov edx, dword [ebp - 0x2054c]
mov dword [ebp - 0x20550], edx
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x20550]
push eax
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x20460]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x20554], eax
mov ecx, dword [ebp - 0x20554]
push ecx
lea edx, [ebp - 0x64]
push edx
call sub.MSVCRT.dll_strcpy
add esp, 8
lea eax, [ebp - 0x20464]
push eax
call fcn.10001990
add esp, 4
mov dword [ebp - 0x20558], eax
mov ecx, dword [ebp - 0x20558]
mov dword [ebp - 0x2055c], ecx
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x2055c]
push edx
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::operator_1
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x20464]
call sub.MFC42.DLL_CString::CString
lea ecx, [ebp - 0x20178]
call fcn.10003420
mov dword [ebp - 0x20560], eax
mov eax, dword [ebp - 0x20560]
push eax
lea ecx, [ebp - 0x164]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10002a5c
mov dword [ebp - 4], 4
mov dword [ebp - 0x20418], 0
mov dword [ebp - 0x20384], 3
mov byte [ebp - 0x20380], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x2037f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
cmp dword [0x10102cf0], 0
je 0x10002abf
lea edx, [ebp - 0x20418]
push edx
push 0x20019
push 0
push str.SOFTWAREVXMicrosoftWindows_NTCurrentVersionWinlogon
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x20404], eax
jmp 0x10002ae3
lea eax, [ebp - 0x20418]
push eax
push 0x20019
push 0
push 0x10012404
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x20404], eax
cmp dword [ebp - 0x20404], 0
jne 0x10002ba9
push 0x200
push 0
lea ecx, [ebp - 0x20380]
push ecx
call sub.MSVCRT.dll_memset
add esp, 0xc
mov dword [ebp - 0x20408], 0x200
lea edx, [ebp - 0x20408]
push edx
lea eax, [ebp - 0x20380]
push eax
lea ecx, [ebp - 0x20384]
push ecx
push 0
push 0x1001243c
mov edx, dword [ebp - 0x20418]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x20414], eax
lea eax, [ebp - 0x20380]
push eax
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::operator_2
push 0x1001244c
lea ecx, [ebp - 0x20178]
push ecx
call fcn.10003430
mov byte [ebp - 0x20564], al
mov edx, dword [ebp - 0x20564]
and edx, 0xff
test edx, edx
je 0x10002b8b
push 0x10012450
lea eax, [ebp - 0x44]
push eax
call sub.MSVCRT.dll_strcpy
add esp, 8
jmp 0x10002b9c
push 0x10012458
lea ecx, [ebp - 0x44]
push ecx
call sub.MSVCRT.dll_strcpy
add esp, 8
mov edx, dword [ebp - 0x20418]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x18], ecx
push 0
lea edx, [ebp - 0x164]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [ebp + 8]
call dword [edx + 0x4c4]
jmp 0x10002be1
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x10174]
mov dword [ebp - 0x20468], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x20180]
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x20178]
call sub.MFC42.DLL_CString::CString
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x16c]
call sub.MFC42.DLL_CString::CString
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10170]
call sub.MFC42.DLL_CString::CString
mov eax, dword [ebp - 0x20468]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret