Function at 0x59f770
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov ecx, 9
push 0
push 0
dec ecx
jne 0x59f778
push ebx
push esi
push edi
mov byte [ebp - 1], dl
mov edi, eax
xor eax, eax
push ebp
push 0x59fefd
push dword fs:[eax]
mov dword fs:[eax], esp
xor ebx, ebx
mov eax, edi
call fcn.0059b01c
test al, al
jne 0x59fecd
mov eax, dword [edi]
mov al, byte [eax + 0x116]
dec al
je 0x59fd51
dec al
je 0x59fabf
dec al
je 0x59f8b6
dec al
je 0x59f7cf
jmp 0x59fecd
mov dl, 1
mov eax, dword [0x41ca64]
call fcn.00403e50
mov esi, eax
mov dl, 1
mov eax, dword [0x41ca64]
call fcn.00403e50
mov dword [ebp - 0x1c], eax
mov dl, 1
mov eax, dword [0x41ca64]
call fcn.00403e50
mov dword [ebp - 0x20], eax
mov al, byte [ebp - 1]
sub al, 1
jb 0x59f82a
je 0x59f80b
dec eax
sub al, 2
jb 0x59f848
jmp 0x59f865
mov eax, dword [edi]
mov ecx, dword [eax + 8]
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x24]
call fcn.00404fcc
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x59f865
mov eax, dword [edi]
mov ecx, dword [eax + 8]
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x28]
call fcn.00404fcc
mov edx, dword [ebp - 0x28]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0x59f865
mov eax, dword [edi]
mov ecx, dword [eax + 8]
mov eax, dword [edi]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x2c]
call fcn.00404fcc
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jg 0x59f888
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jg 0x59f888
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0x59f89a
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov eax, esi
call fcn.00599b0c
test eax, eax
setg bl
mov eax, esi
call fcn.00403e80
mov eax, dword [ebp - 0x1c]
call fcn.00403e80
mov eax, dword [ebp - 0x20]
call fcn.00403e80
jmp 0x59fecd
mov eax, dword [edi]
cmp byte [eax + 0x122], 0
je 0x59f8c8
call fcn.0059c53c
mov esi, eax
mov al, byte [ebp - 1]
sub al, 1
jb 0x59f98f
je 0x59f8e3
dec eax
sub al, 2
jb 0x59fa44
jmp 0x59faa4
lea edx, [ebp - 0x30]
mov eax, dword [edi]
mov eax, dword [eax + 8]
call fcn.0040f8f8
mov edx, dword [ebp - 0x30]
mov eax, dword [edi]
mov ecx, dword [eax + 0xc]
lea eax, [ebp - 8]
call fcn.00404fcc
lea edx, [ebp - 0x18]
mov eax, dword [edi]
mov eax, dword [eax + 8]
call fcn.0059c4b4
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 0x18]
call fcn.0040f8f8
mov edx, dword [ebp - 0x34]
mov eax, dword [edi]
mov ecx, dword [eax + 0xc]
lea eax, [ebp - 0xc]
call fcn.00404fcc
mov eax, dword [ebp - 0x18]
call fcn.0059e4c0
mov edx, 2
mov eax, dword [ebp - 0x18]
call fcn.0059e5f4
mov eax, dword [ebp - 0xc]
call fcn.0040b3a0
test al, al
je 0x59f95d
mov eax, dword [ebp - 8]
call fcn.0040b3a0
test al, al
je 0x59f95d
mov eax, dword [ebp - 0xc]
call fcn.0059e344
mov eax, dword [ebp - 0xc]
call fcn.0040b3b0
test al, al
je 0x59f97d
mov eax, dword [ebp - 8]
call fcn.0040b3b0
test al, al
je 0x59f97d
mov eax, dword [ebp - 0xc]
call fcn.0059e400
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0059e578
mov ebx, eax
jmp 0x59faa4
lea edx, [ebp - 0x38]
mov eax, dword [edi]
mov eax, dword [eax + 8]
call fcn.0040f8f8
mov edx, dword [ebp - 0x38]
mov eax, dword [edi]
mov ecx, dword [eax + 0xc]
lea eax, [ebp - 8]
call fcn.00404fcc
lea edx, [ebp - 0x18]
mov eax, dword [edi]
mov eax, dword [eax + 8]
call fcn.0059c3d8
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
call fcn.0040f8f8
mov edx, dword [ebp - 0x3c]
mov eax, dword [edi]
mov ecx, dword [eax + 0xc]
lea eax, [ebp - 0xc]
call fcn.00404fcc
mov eax, dword [edi]
mov eax, dword [eax + 8]
call fcn.0059e4c0
mov eax, dword [ebp - 0xc]
call fcn.0040b3a0
test al, al
je 0x59fa08
xor edx, edx
mov eax, dword [ebp - 0xc]
call fcn.0059e5f4
mov eax, dword [ebp - 8]
call fcn.0040b3a0
test al, al
je 0x59fa08
mov eax, dword [ebp - 0xc]
call fcn.0059e344
mov eax, dword [ebp - 0xc]
call fcn.0040b3b0
test al, al
je 0x59fa35
mov edx, 0x10
mov eax, dword [ebp - 0xc]
call fcn.0059e5f4
mov eax, dword [ebp - 8]
call fcn.0040b3b0
test al, al
je 0x59fa35
mov eax, dword [ebp - 0xc]
call fcn.0059e400
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0059e578
mov ebx, eax
jmp 0x59faa4
lea edx, [ebp - 0x40]
mov eax, dword [edi]
mov eax, dword [eax + 8]
call fcn.0040f8f8
mov edx, dword [ebp - 0x40]
mov eax, dword [edi]
mov ecx, dword [eax + 0xc]
lea eax, [ebp - 8]
call fcn.00404fcc
mov eax, dword [ebp - 8]
call fcn.0040b3a0
test al, al
je 0x59fa81
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0059e5f4
mov eax, dword [ebp - 8]
call fcn.0059e344
mov ebx, eax
mov eax, dword [ebp - 8]
call fcn.0040b3b0
test al, al
je 0x59faa4
mov edx, 0x10
mov eax, dword [ebp - 8]
call fcn.0059e5f4
mov eax, dword [ebp - 8]
call fcn.0059e400
mov ebx, eax
mov eax, dword [edi]
cmp byte [eax + 0x122], 0
je 0x59fecd
mov eax, esi
call fcn.0059c570
jmp 0x59fecd
mov dl, 1
mov eax, dword [0x42d344]
call fcn.0042d4b0
mov esi, eax
mov eax, dword [edi]
cmp byte [eax + 0x121], 0
je 0x59fae1
mov dword [esi + 0x18], 0x20119
jmp 0x59fae8
mov dword [esi + 0x18], 0x20019
mov eax, dword [edi]
mov edx, dword [eax + 4]
mov eax, esi
call fcn.0042d58c
mov al, byte [ebp - 1]
sub al, 1
jb 0x59fb20
je 0x59fb04
dec eax
sub al, 2
jb 0x59fb3c
jmp 0x59fb51
lea eax, [ebp - 8]
mov edx, dword [edi]
mov edx, dword [edx + 8]
call fcn.00404d44
lea edx, [ebp - 0xc]
mov eax, dword [edi]
mov eax, dword [eax + 8]
call fcn.0059c4b4
jmp 0x59fb51
lea eax, [ebp - 8]
mov edx, dword [edi]
mov edx, dword [edx + 8]
call fcn.00404d44
lea edx, [ebp - 0xc]
mov eax, dword [edi]
mov eax, dword [eax + 8]
call fcn.0059c3d8
jmp 0x59fb51
lea eax, [ebp - 8]
mov edx, dword [edi]
mov edx, dword [edx + 8]
call fcn.00404d44
lea eax, [ebp - 0xc]
call fcn.00404cac
xor ecx, ecx
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.0042d6d0
test al, al
je 0x59fd45
xor eax, eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x10]
push eax
push 0
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
call fcn.00405178
push eax
mov eax, dword [esi + 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
mov eax, 0x6b4e28
xor ecx, ecx
mov edx, 0x10000
call fcn.0040359c
lea eax, [ebp - 0x14]
push eax
push 0x6b4e28
lea eax, [ebp - 0x10]
push eax
push 0
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
call fcn.00405178
push eax
mov eax, dword [esi + 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x59fd38
push 0x59ff18
lea eax, [ebp - 0x44]
push eax
mov eax, dword [edi]
movzx ecx, word [eax + 0x114]
mov eax, dword [edi]
add eax, 0x10
mov edx, 0x103
call fcn.0059f2a4
mov ecx, dword [ebp - 0x44]
mov eax, 0x6b4e28
mov edx, 0xffff
call fcn.0059f5ac
test al, al
je 0x59fd38
mov eax, dword [edi]
movzx eax, word [eax + 0x114]
sub dword [ebp - 0x14], eax
mov eax, esi
call fcn.0042d55c
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x14]
push eax
push 0x6b4e28
mov eax, dword [edi]
mov al, byte [eax + 0x121]
push eax
mov eax, dword [edi]
mov ecx, dword [eax + 0xc]
mov eax, dword [edi]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 8]
call fcn.0059e10c
mov ebx, eax
mov al, byte [ebp - 1]
sub al, 2
jae 0x59fd38
mov cl, 1
mov edx, dword [ebp - 0xc]
mov eax, esi
call fcn.0042d6d0
mov eax, 0x6b4e28
xor ecx, ecx
mov edx, 0x10000
call fcn.0040359c
xor eax, eax
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x10]
push eax
push 0
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
call fcn.00405178
push eax
mov eax, dword [esi + 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
lea eax, [ebp - 0x14]
push eax
push 0x6b4e28
lea eax, [ebp - 0x10]
push eax
push 0
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
call fcn.00405178
push eax
mov eax, dword [esi + 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
je 0x59fccd
mov eax, 0x6b4e28
xor ecx, ecx
mov edx, 0x10000
call fcn.0040359c
xor eax, eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x48]
push eax
mov eax, dword [edi]
movzx ecx, word [eax + 0x114]
mov eax, dword [edi]
add eax, 0x10
mov edx, 0x103
call fcn.0059f2a4
mov eax, dword [ebp - 0x48]
push eax
push 0x59ff24
mov eax, 0x6b4e28
mov ecx, dword [ebp - 0x14]
mov edx, 0xffff
call fcn.0059f3f8
mov eax, dword [edi]
movzx eax, word [eax + 0x114]
add dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x14]
push eax
push 0x6b4e28
mov eax, dword [edi]
mov al, byte [eax + 0x121]
push eax
mov eax, dword [edi]
mov ecx, dword [eax + 0xc]
mov eax, dword [edi]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0xc]
call fcn.0059e10c
cmp dword [esi + 4], 0
je 0x59fd45
mov eax, esi
call fcn.0042d55c
mov eax, esi
call fcn.00403e80
jmp 0x59fecd
mov al, byte [ebp - 1]
sub al, 1
jb 0x59fd7d
je 0x59fd61
dec eax
sub al, 2
jb 0x59fd99
jmp 0x59fdae
lea eax, [ebp - 8]
mov edx, dword [edi]
mov edx, dword [edx + 8]
call fcn.00404d44
lea edx, [ebp - 0xc]
mov eax, dword [edi]
mov eax, dword [eax + 8]
call fcn.0059c4b4
jmp 0x59fdae
lea eax, [ebp - 8]
mov edx, dword [edi]
mov edx, dword [edx + 8]
call fcn.00404d44
lea edx, [ebp - 0xc]
mov eax, dword [edi]
mov eax, dword [eax + 8]
call fcn.0059c3d8
jmp 0x59fdae
lea eax, [ebp - 8]
mov edx, dword [edi]
mov edx, dword [edx + 8]
call fcn.00404d44
lea eax, [ebp - 0xc]
call fcn.00404cac
mov al, byte [ebp - 1]
sub al, 2
jae 0x59feb0
mov dl, 1
mov eax, dword [0x42d344]
call fcn.0042d4b0
mov esi, eax
mov eax, dword [edi]
cmp byte [eax + 0x121], 0
je 0x59fddb
mov dword [esi + 0x18], 0x20119
jmp 0x59fde2
mov dword [esi + 0x18], 0x20019
mov eax, dword [edi]
mov edx, dword [eax + 4]
mov eax, esi
call fcn.0042d58c
xor eax, eax
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, 0x6b4e28
xor ecx, ecx
mov edx, 0x10000
call fcn.0040359c
xor ecx, ecx
mov edx, dword [ebp - 8]
mov eax, esi
call fcn.0042d6d0
test al, al
je 0x59fea9
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x10]
push eax
push 0
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
call fcn.00405178
push eax
mov eax, dword [esi + 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
lea eax, [ebp - 0x14]
push eax
push 0x6b4e28
lea eax, [ebp - 0x10]
push eax
push 0
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
call fcn.00405178
push eax
mov eax, dword [esi + 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
je 0x59fe7a
mov eax, 0x6b4e28
xor ecx, ecx
mov edx, 0x10000
call fcn.0040359c
xor eax, eax
mov dword [ebp - 0x14], eax
mov eax, esi
call fcn.0042d55c
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 0x14]
push eax
push 0x6b4e28
mov eax, dword [edi]
mov al, byte [eax + 0x121]
push eax
mov eax, dword [edi]
mov ecx, dword [eax + 0xc]
mov eax, dword [edi]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0xc]
call fcn.0059e10c
mov eax, esi
call fcn.00403e80
mov eax, dword [edi]
mov al, byte [eax + 0x121]
push eax
mov eax, dword [edi]
mov ecx, dword [eax + 0xc]
mov eax, dword [edi]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 8]
call fcn.0059e234
mov ebx, eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x59ff04
lea eax, [ebp - 0x48]
mov edx, 0xa
call fcn.00404cd0
lea eax, [ebp - 0x18]
call fcn.00404cac
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00404cd0
ret