Function at 0xb60c40
Capabilities:
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xd8
mov eax, dword [0xd08954]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov edx, 0x113
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
xor ebx, ebx
mov dword [ebp - 0xd8], ebx
mov esi, ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0xd4], ecx
cmp edi, edx
jbe 0xb60d3e
mov eax, 0x2cc
cmp edi, eax
jbe 0xb60e58
mov eax, edi
sub eax, 0x318
je 0xb60d7a
dec eax
sub eax, 1
je 0xb60e29
sub eax, 0xf3
je 0xb60dc9
sub eax, 0x57
jne 0xb60e22
push 0xfffffffffffffff0
lea edi, [esi - 0x10]
push dword [edi + 0x14]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetWindowLongW]
test eax, 0x10000000
je 0xb60d29
mov ecx, dword [edi + 0x68]
push ecx
mov eax, dword [ecx]
mov esi, dword [eax + 0x54]
cmp esi, fcn.00b5f6a0
jne 0xbe4d47
call fcn.00b5f6a0
cmp eax, 5
je 0xbe4d7e
cmp eax, 4
je 0xbe4d7e
push 0xffffffffffffffec
push dword [edi + 0x14]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetWindowLongW]
test eax, 0x400000
jne 0xbe4d56
mov ebx, dword [edi + 0x20]
mov eax, dword [edi + 0x58]
cmp eax, 0xffffffff
je 0xbe4d5e
test al, 1
je 0xbe4d76
mov eax, dword [edi + 0x44]
add ebx, eax
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00bc0ea0
mov esp, ebp
pop ebp
ret 0x10
je 0xbe4ba9
cmp edi, 0x3d
ja 0xb60d84
je 0xbe4b1d
cmp edi, 0x14
je 0xb60ddc
ja 0xb60de4
cmp edi, 1
je 0xb60e36
cmp edi, 6
jbe 0xb60db4
cmp edi, 8
jbe 0xbe4af1
cmp edi, 0xf
jne 0xb60db4
lea ecx, [esi - 0x10]
call fcn.00b60ba6
jmp 0xb60d29
mov eax, edi
sub eax, 0x7b
je 0xbe4b75
sub eax, 6
je 0xb60e4f
sub eax, 1
je 0xbe4b68
dec eax
sub eax, 1
je 0xbe4b5a
sub eax, 0x7d
je 0xbe4b47
push ecx
push dword [ebp + 0x10]
push edi
push dword [esi + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_DefWindowProcW]
mov ebx, eax
jmp 0xb60d29
mov dword [esi + 0x48], ecx
push ebx
push ebx
push dword [esi + 4]
call dword [sym.imp.ext_ms_win_ntuser_draw_l1_1_0.dll_InvalidateRect]
jmp 0xb60d29
xor ebx, ebx
inc ebx
jmp 0xb60d29
cmp edi, 0x1a
jne 0xb60e41
test ecx, ecx
je 0xb60e01
push 0xb2bc24
push ecx
call dword [sym.imp.api_ms_win_core_shlwapi_obsolete_l1_1_0.dll_StrCmpICW]
test eax, eax
jne 0xb60d29
push 1
push ebx
push 0xb2d258
push 0xb28430
call dword [sym.imp.api_ms_win_core_registryuserspecific_l1_1_0.dll_SHRegGetBoolUSValueW]
neg eax
sbb al, al
inc al
mov byte [esi + 0x43], al
jmp 0xb60d29
sub eax, 0x154
jne 0xb60db4
lea ecx, [esi - 0x10]
call fcn.00bb9849
jmp 0xb60d29
push eax
lea ecx, [esi - 0x10]
call fcn.00bb9922
jmp 0xb60dc2
cmp edi, 0x2a
jbe 0xb60db4
jmp 0xbe4aff
lock inc dword [esi - 4]
jmp 0xb60db4
je 0xb60ddc
mov eax, edi
sub eax, 0x200
je 0xbe4d39
sub eax, 1
je 0xbe4d2c
sub eax, 1
je 0xbe4d1e
sub eax, 0xf
je 0xbe4d09
sub eax, 0x92
jne 0xb60db4
jmp 0xbe4cfc
cmp edi, 7
sete al
mov byte [esi + 0x44], al
jmp 0xb60dcc
cmp edi, 0x2c
ja 0xb60db4
push ecx
push ecx
push ecx
push dword [ebp + 0x10]
mov ecx, dword [esi + 4]
mov edx, edi
call fcn.00cba526
jmp 0xb60d29
cmp ecx, 0xfffffffc
jne 0xb60db4
lea eax, [ebp - 0xd8]
push eax
push dword [ebp + 0x10]
lea ecx, [esi - 0x10]
call fcn.00c56773
test eax, eax
je 0xbe4b4f
mov ebx, dword [ebp - 0xd8]
jmp 0xb60d29
push dword [ebp + 0x10]
call fcn.00c56819
mov ecx, dword [ebp - 0xd4]
jmp 0xb60db4
push ecx
lea ecx, [esi - 0x10]
call fcn.00c56c58
jmp 0xb60dc2
lea ecx, [esi - 0x10]
call fcn.00c56719
jmp 0xb60d29
mov edx, 0xd5
call fcn.00cddb3e
mov dword [esi + 0x24], eax
test eax, eax
je 0xb60d29
push dword [ebp - 0xd4]
lea ecx, [esi - 0x10]
call fcn.00c4be1f
push dword [esi + 0x24]
call dword [sym.imp.USER32.dll_DestroyMenu]
mov dword [esi + 0x24], ebx
jmp 0xb60d29
mov eax, dword [ebp + 0x10]
sub eax, 1
je 0xbe4cd7
sub eax, 1
jne 0xb60d29
cmp byte [esi + 0x40], bl
je 0xb60d29
push ecx
push 0xb3ec88
lea ecx, [ebp - 0xd0]
call fcn.00b80bc1
push 2
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xd0], 0xb164fc
call fcn.00c35476
cmp byte [esi + 0x40], bl
je 0xbe4c02
push 2
push dword [esi + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
mov byte [esi + 0x40], bl
push 6
push 1
lea ecx, [esi - 0x10]
call fcn.00c4bc22
mov byte [esi + 0x41], bl
jmp 0xbe4c4a
push ecx
push 0xb3ec88
lea ecx, [ebp - 0xd0]
call fcn.00b80bc1
push 5
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xd0], 0xb164fc
call fcn.00c35476
push 1
push 1
lea ecx, [esi - 0x10]
call fcn.00c4bc22
mov byte [esi + 0x42], bl
push ebx
lea ecx, [ebp - 0xd0]
call fcn.00b80b25
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xd0], 0xb164fc
call fcn.00b80a8a
lea ecx, [ebp - 0x18]
call fcn.00b84d89
lea ecx, [ebp - 0x24]
call fcn.00b845a1
lea ecx, [ebp - 0x8c]
call fcn.00b8458c
cmp dword [ebp - 0xb4], 1
jne 0xbe4cb1
push 0xc21420
mov dword [ebp - 0xb4], 2
call fcn.00b63419
lea edx, [ebp - 0xac]
mov ecx, dword [eax + 4]
call fcn.00c22b6a
mov dword [ebp - 0xb4], 3
cmp dword [ebp - 0xc0], ebx
je 0xb60d29
lea ecx, [ebp - 0xcc]
call fcn.00b54a44
jmp 0xb60d29
cmp byte [esi + 0x3f], bl
je 0xb60d29
push 1
push dword [esi + 4]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
mov byte [esi + 0x3f], bl
cmp byte [esi + 0x42], bl
je 0xb60d29
jmp 0xbe4c13
lea ecx, [esi - 0x10]
call fcn.00c56a87
jmp 0xb60d29
cmp byte [esi + 0x44], bl
je 0xb60db4
push ebx
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_SetFocus]
jmp 0xbe4b4f
push ecx
lea ecx, [esi - 0x10]
call fcn.00c56937
jmp 0xb60d29
lea ecx, [esi - 0x10]
call fcn.00c568fd
jmp 0xb60d29
push ecx
lea ecx, [esi - 0x10]
call fcn.00c56b7e
jmp 0xb60d29
mov ecx, esi
call dword [0xd0cffc]
call esi
jmp 0xb60ce5
mov ebx, dword [edi + 0x1c]
jmp 0xb60d10
mov eax, dword [edi + 0x68]
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x20]
mov ecx, esi
call dword [0xd0cffc]
call esi
jmp 0xb60d1c
mov eax, dword [edi + 0x48]
jmp 0xb60d27
mov ecx, dword [edi + 0x14]
call fcn.00b6043d
mov esi, eax
lea eax, [ebp - 0x14]
push eax
push esi
push 6
push 5
push ecx
push 1
mov ecx, edi
call fcn.00bb97e0
mov ecx, edi
call fcn.00b60a75
mov ecx, esi
test al, 1
je 0xbe4dbd
push 0x31
pop edx
call fcn.00b99296
mov ebx, eax
add ebx, dword [ebp - 0x10]
add ebx, dword [ebp - 0x14]
jmp 0xb60d29
push 0x32
pop edx
call fcn.00b99296
mov ebx, eax
add ebx, dword [ebp - 0xc]
add ebx, dword [ebp - 8]
jmp 0xb60d29