Function at 0x670d709c
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x38
mov eax, 0x671b0e77
call fcn.671a2b02
mov esi, ecx
push dword [ebp + 0xc]
lea eax, [ebp - 0x1c]
push eax
call fcn.670d6dfe
push dword [ebp + 0xc]
lea eax, [ebp - 0x20]
xor ebx, ebx
push eax
mov dword [ebp - 4], ebx
call fcn.670d6eb9
push dword [esi + 0x5c]
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 1
push eax
push 0x20019
push dword [ebp + 8]
call fcn.670d7069
mov edi, eax
add esp, 0x20
test edi, edi
je 0x670d73e3
lea eax, [ebp - 0x10]
push eax
push ebx
lea eax, [ebp - 0x18]
push eax
push ebx
lea ecx, [ebp - 0x1c]
call sym.Qt5Core.dll_public:_unsigned_short_int_const____thiscall_QString::utf16_void_const
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x670d7116
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x670d73e3
cmp dword [ebp - 0x18], 1
je 0x670d7130
cmp dword [ebp - 0x18], 2
je 0x670d7130
cmp dword [ebp - 0x18], 7
mov eax, dword [ebp - 0x10]
jne 0x670d7139
add eax, 4
jmp 0x670d7136
mov eax, dword [ebp - 0x10]
add eax, 2
mov dword [ebp - 0x10], eax
push ebx
push eax
lea ecx, [ebp - 0x14]
call sym.Qt5Core.dll_public:_void___thiscall_QByteArray::constructor_int__char_
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
call sym.Qt5Core.dll_public:_void___thiscall_QByteArray::detach_void_
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x1c]
mov esi, dword [eax + 0xc]
add esi, eax
call sym.Qt5Core.dll_public:_unsigned_short_int_const____thiscall_QString::utf16_void_const
lea ecx, [ebp - 0x10]
push ecx
push esi
push ebx
push ebx
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x670d717e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x670d73db
mov eax, dword [ebp - 0x18]
cmp eax, 5
ja 0x670d7281
cmp eax, 4
jae 0x670d723a
test eax, eax
je 0x670d71a5
cmp eax, 2
jbe 0x670d71ca
cmp eax, 3
jne 0x670d728f
mov dword [ebp + 0xc], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
cmp dword [ebp - 0x10], 0
mov byte [ebp - 4], 8
je 0x670d7206
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 4]
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, dword [ecx + 0xc]
add eax, ecx
push eax
jmp 0x670d71e6
mov dword [ebp + 0xc], sym.Qt5Core.dll_struct_QArrayData_const__const_const_QArrayData::shared_null
cmp dword [ebp - 0x10], 0
mov byte [ebp - 4], 3
je 0x670d7206
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
mov ecx, dword [eax + 0xc]
add ecx, eax
push ecx
lea eax, [ebp + 8]
push eax
call sym.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromWCharArray_wchar_t_const___int_
mov ecx, dword [ebp + 0xc]
mov edx, eax
add esp, 0xc
mov eax, dword [edx]
mov dword [ebp + 0xc], eax
mov dword [edx], ecx
lea ecx, [ebp + 8]
call sym.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_
cmp dword [ebp + 0x10], 0
je 0x670d722d
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.670d45d5
push eax
push dword [ebp + 0x10]
call fcn.670096a5
add esp, 0x10
lea ecx, [ebp - 0x40]
call sym.Qt5Core.dll_public:_void___thiscall_QVariant::destructor_void_
lea ecx, [ebp + 0xc]
call sym.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_
jmp 0x670d73d2
mov eax, dword [ebp - 0x14]
push 4
mov ecx, dword [eax + 0xc]
add ecx, eax
lea eax, [ebp + 0xc]
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp + 0x10], 0
je 0x670d73d2
push dword [ebp + 0xc]
lea ecx, [ebp - 0x30]
call sym.Qt5Core.dll_public:_void___thiscall_QVariant::constructor_int_
lea eax, [ebp - 0x30]
push eax
push dword [ebp + 0x10]
call fcn.670096a5
pop ecx
pop ecx
lea ecx, [ebp - 0x30]
call sym.Qt5Core.dll_public:_void___thiscall_QVariant::destructor_void_
jmp 0x670d73d2
cmp eax, 7
je 0x670d730e
cmp eax, 0xb
je 0x670d72c9
movaps xmm0, xmmword [0x671be450]
push eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x34], 0x671bd654
push str.QSettings:_Unknown_data__d_type_in_Windows_registry
push eax
movups xmmword [ebp - 0x44], xmm0
call sym.Qt5Core.dll_public:_void___cdecl_QMessageLogger::warning_char_const__const
add esp, 0xc
cmp dword [ebp + 0x10], 0
je 0x670d73d2
mov dword [ebp - 0x28], 0x80000000
mov dword [ebp - 0x30], ebx
jmp 0x670d7266
mov eax, dword [ebp - 0x14]
push 8
mov ecx, dword [eax + 0xc]
add ecx, eax
lea eax, [ebp - 0x28]
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp dword [ebp + 0x10], 0
je 0x670d73d2
push dword [ebp - 0x24]
lea ecx, [ebp - 0x40]
push dword [ebp - 0x28]
call sym.Qt5Core.dll_public:_void___thiscall_QVariant::constructor_long_long___int64__
lea eax, [ebp - 0x40]
push eax
push dword [ebp + 0x10]
call fcn.670096a5
pop ecx
pop ecx
lea ecx, [ebp - 0x40]
jmp 0x670d7277
mov dword [ebp + 8], sym.Qt5Core.dll_struct_QListData::Data_const_QListData::shared_null
cmp dword [ebp - 0x10], 0
mov byte [ebp - 4], 4
je 0x670d7390
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
mov ecx, dword [eax + 0xc]
add ecx, eax
lea eax, [ebp + 0xc]
push ecx
push eax
call sym.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromWCharArray_wchar_t_const___int_
add esp, 0xc
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
lea esi, [eax + 1]
jmp 0x670d737c
lea eax, [ebp + 0xc]
push eax
lea ecx, [ebp + 8]
call fcn.67015291
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 4
call sym.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
mov ecx, dword [eax + 0xc]
add ecx, eax
lea eax, [ecx + esi*2]
push eax
lea eax, [ebp + 0xc]
push eax
call sym.Qt5Core.dll_public:_static_class_QString___cdecl_QString::fromWCharArray_wchar_t_const___int_
add esp, 0xc
mov eax, dword [ebp + 0xc]
inc esi
mov eax, dword [eax + 4]
add esi, eax
mov byte [ebp - 4], 5
test eax, eax
jne 0x670d7341
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 4
call sym.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_
cmp dword [ebp + 0x10], 0
je 0x670d73b7
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.670d4485
push eax
push dword [ebp + 0x10]
call fcn.670096a5
add esp, 0x10
lea ecx, [ebp - 0x40]
call sym.Qt5Core.dll_public:_void___thiscall_QVariant::destructor_void_
mov ecx, dword [ebp + 8]
mov byte [ebp - 4], 6
call fcn.6700346c
test al, al
jne 0x670d73d2
push dword [ebp + 8]
lea ecx, [ebp + 8]
call fcn.6701316b
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov bl, 1
lea ecx, [ebp - 0x14]
call sym.Qt5Core.dll_public:_void___thiscall_QByteArray::destructor_void_
lea ecx, [ebp - 0x20]
call sym.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_
lea ecx, [ebp - 0x1c]
call sym.Qt5Core.dll_public:_void___thiscall_QString::destructor_void_
mov al, bl
call fcn.671a2adc
ret 0xc