Function at 0x4351f0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push esi
call fcn.00435000
add eax, 0x51615
mov dword [0x401788], eax
mov eax, dword [0x401788]
push eax
call fcn.004354f0
add esp, 4
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.00435510
add esp, 4
mov dword [0x401794], eax
mov dword [0x401798], 0
mov dword [0x40179c], 1
push 0x4cf
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
push 0x4cf
push 0
call dword [sym.imp.USER32.dll_LoadCursorW]
test eax, eax
je 0x43525f
call entry0
mov edx, dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov dword [0x4017a0], edx
push 0x401798
mov eax, dword [str.softwareclassesinterface00000610_0000_0010_8000_00aa006d2ea4proxystubclsid]
push eax
mov ecx, dword [0x401008]
push ecx
call dword [0x4017a0]
test eax, eax
je 0x43528e
xor eax, eax
jmp 0x4354eb
push 0x401014
push 0x4017a4
push 0x401018
push 0
push 0
mov edx, dword [0x401798]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x4352b9
xor eax, eax
jmp 0x4354eb
movzx eax, word [0x4017a4]
cmp eax, 0x7b
je 0x4352cc
xor eax, eax
jmp 0x4354eb
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 4], 0
mov dword [0x4019fc], 0
mov edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x1c]
jae 0x435352
mov eax, dword [ebp - 0x24]
push eax
mov ecx, dword [section..data]
push ecx
call fcn.00435a60
add esp, 8
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
push edx
mov eax, dword [0x401788]
add eax, dword [0x4019fc]
push eax
mov ecx, dword [0x401794]
add ecx, dword [ebp - 4]
push ecx
call fcn.00435ac0
add esp, 0xc
mov edx, dword [0x401004]
add edx, dword [section..data]
add edx, dword [0x4019fc]
mov dword [0x4019fc], edx
mov eax, dword [ebp - 4]
add eax, dword [section..data]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
jmp 0x4352e3
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [0x401794]
push eax
call fcn.00435550
add esp, 8
mov dword [0x40178c], ebp
push 0x5b000
call fcn.00435510
add esp, 4
mov dword [0x401a00], eax
mov dword [0x401798], 0
mov ecx, dword [0x401798]
mov dword [ebp - 4], ecx
mov edx, dword [0x401798]
mov dword [0x4019fc], edx
call fcn.00435090
mov eax, dword [0x401788]
push eax
call fcn.004354f0
add esp, 4
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.00435510
add esp, 4
mov dword [0x401a04], eax
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x1c]
jae 0x435436
mov ecx, dword [ebp - 0x24]
push ecx
mov edx, dword [section..data]
push edx
call fcn.00435a60
add esp, 8
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [0x401788]
add ecx, dword [0x4019fc]
push ecx
mov edx, dword [0x401a04]
add edx, dword [ebp - 4]
push edx
call fcn.00435ac0
add esp, 0xc
mov eax, dword [0x401004]
add eax, dword [section..data]
add eax, dword [0x4019fc]
mov dword [0x4019fc], eax
mov ecx, dword [ebp - 4]
add ecx, dword [section..data]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x24], edx
jmp 0x4353c8
mov eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [0x401a04]
push ecx
call fcn.00435550
add esp, 8
mov edx, dword [0x401794]
mov eax, dword [0x401a04]
mov dword [edx], eax
mov ecx, dword [0x401794]
push ecx
mov edx, dword [0x401a00]
add edx, 0x200
push edx
call fcn.004351d0
add esp, 8
call fcn.004351c0
mov dword [0x401a08], eax
mov eax, dword [0x401a00]
sub eax, dword [0x401a08]
push eax
mov ecx, dword [0x401a00]
push ecx
mov edx, dword [0x401a04]
push edx
call fcn.00435670
add esp, 0xc
mov eax, dword [0x401a00]
add eax, 0x28722
mov dword [0x401790], eax
mov ecx, dword [0x401790]
sub ecx, 2
mov dword [0x401790], ecx
mov dword [0x401a0c], 0x4351a0
mov esi, esi
mov esi, esi
push 0x1a5d261e
mov esi, esi
mov esi, esi
mov eax, dword [0x401a0c]
mov esi, esi
mov esi, esi
mov ecx, esp
mov edx, edx
mov dword [ecx], 0
add dword [ecx], eax
mov edx, edx
ret
pop esi
mov esp, ebp
pop ebp
ret