Function at 0x437000
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f4f59
mov eax, dword fs:[0]
push eax
sub esp, 0x814
mov eax, dword [0x6b7e40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
lea eax, [ebp - 0x7f0]
push eax
push 0x20019
mov dword [ebp - 4], 0
push 0
mov dword [ebp - 0x818], 0
push str.SoftwareSolidWorksIM
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x81c], edi
mov dword [ebp - 0x804], 0
mov dword [ebp - 0x810], 4
mov dword [ebp - 0x814], 0x400
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4370cd
lea eax, [ebp - 0x814]
push eax
lea eax, [ebp - 0x804]
push eax
lea eax, [ebp - 0x810]
push eax
push 0
push str.UseInternalServer
push dword [ebp - 0x7f0]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x7f0]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x4370cd
cmp dword [ebp - 0x804], 1
sete bh
jmp 0x4370cf
xor bh, bh
call fcn.004a4516
xor ecx, ecx
mov edx, eax
test edx, edx
setne cl
test ecx, ecx
jne 0x4370eb
push 0x80004005
call fcn.00402040
mov eax, dword [edx]
mov ecx, edx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x7e4], eax
push str.WebDomain
lea ecx, [ebp - 0x7ec]
mov dword [ebp - 4], 5
call fcn.004021e0
push str.SoftwareSolidWorksIM
lea ecx, [ebp - 0x7f8]
mov byte [ebp - 4], 6
call fcn.004021e0
mov byte [ebp - 4], 7
xor eax, eax
mov word [ebp - 0x7e0], ax
lea eax, [ebp - 0x7f4]
push eax
push 0x20019
push 0
push dword [ebp - 0x7f8]
mov dword [ebp - 0x808], 0
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp - 0x7fc], 0x7d0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x4371d6
lea eax, [ebp - 0x7fc]
push eax
lea eax, [ebp - 0x7e0]
push eax
lea eax, [ebp - 0x808]
push eax
push 0
push dword [ebp - 0x7ec]
push dword [ebp - 0x7f4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x7f4]
mov esi, eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
jne 0x4371d6
lea ecx, [ebp - 0x7e0]
lea edx, [ecx + 2]
mov edi, edi
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4371b0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x7e0]
push eax
lea ecx, [ebp - 0x7e4]
call fcn.00402090
mov bl, 1
jmp 0x4371d8
xor bl, bl
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x7f8]
add edx, 0xfffffff0
or esi, 0xffffffff
lea ecx, [edx + 0xc]
mov eax, esi
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x4371fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x7ec]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x437221
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test bl, bl
jne 0x437262
push 0x19
push str.http:__im.solidworks.com_
lea ecx, [ebp - 0x7e4]
call fcn.00402090
test bh, bh
je 0x437262
lea ecx, [ebp - 0x80c]
call fcn.00437390
cmp dword [ebp - 0x80c], 0x7db
jl 0x437262
push str.http:__swimwebtest.solidworks.com_
lea ecx, [ebp - 0x7e4]
call fcn.00402190
push 0x63bfdc
mov ecx, edi
call fcn.004021e0
push str.XXXX_
push dword [ebp - 0x7e4]
mov dword [ebp - 0x818], 1
push 0x6408cc
push edi
call fcn.00404520
add esp, 0x10
lea ecx, [ebp - 0x800]
call fcn.00437390
push 0x63bfdc
lea ecx, [ebp - 0x7e8]
call fcn.004021e0
mov byte [ebp - 4], 8
cmp dword [ebp - 0x7fc], 1
jl 0x437300
lea eax, [ebp - 0x808]
push eax
lea ecx, [ebp - 0x800]
call fcn.00444aa0
push eax
lea ecx, [ebp - 0x7e8]
mov byte [ebp - 4], 9
call fcn.00404570
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x808]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x43731a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x43731a
push dword [ebp - 0x800]
lea eax, [ebp - 0x7e8]
push 0x64569c
push eax
call fcn.00404520
add esp, 0xc
push dword [ebp - 0x7e8]
mov ecx, edi
push str.XXXX
call fcn.00411ec0
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x7e8]
add edx, 0xfffffff0
mov ecx, esi
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x43734f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 0
mov ebx, dword [ebp - 0x7e4]
add ebx, 0xfffffff0
lea eax, [ebx + 0xc]
lock xadd dword [eax], esi
dec esi
test esi, esi
jg 0x437370
mov ecx, dword [ebx]
push ebx
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005bc16b
mov esp, ebp
pop ebp
ret