Function at 0x7cf52e07
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x130
mov ecx, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0x1c]
push esi
push edi
mov eax, dword [ebx + 8]
mov dword [ebp - 0x24], eax
mov esi, eax
mov eax, dword [ecx]
mov dword [ebp - 8], esi
test eax, eax
jle 0x7cf52e39
dec eax
push eax
push ecx
call dword [sym.imp.COMCTL32.dll_DSA_GetItemPtr]
add esi, dword [eax + 8]
mov dword [ebp - 8], esi
push dword [ebp + 0x24]
call fcn.7cf52945
dec eax
mov dword [ebp - 0xc], eax
js 0x7cf530d9
mov ecx, dword [ebp + 0x20]
and ecx, 1
mov dword [ebp - 0x20], ecx
push eax
xor edi, edi
push dword [ebp + 0x24]
mov dword [ebp - 4], edi
mov dword [ebp + 0x1c], edi
call fcn.7cf5297c
mov esi, eax
lea eax, [ebp - 0x90]
push 0x27
push eax
push esi
mov dword [ebp - 0x28], esi
call dword [sym.imp.SHLWAPI.dll_Ordinal_24]
cmp dword [ebp - 0x20], edi
je 0x7cf52eca
cmp esi, edi
je 0x7cf52eca
push 0x10
mov edi, 0x7cf39ff0
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x7cf52eca
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x130]
push 0x7cf3ccf0
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x130]
push 0
push 0
push eax
push ParseURLA
call fcn.7cf5aef1
test eax, eax
jne 0x7cf530cc
xor edi, edi
cmp dword [ebp + 0x10], edi
mov dword [ebp - 0x14], edi
jle 0x7cf530b2
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x10], eax
jmp 0x7cf52ee2
xor edi, edi
push dword [ebp - 0x28]
push edi
call fcn.7d040f8d
cmp dword [ebp - 4], edi
mov dword [ebp - 0x1c], eax
jne 0x7cf52f0f
lea eax, [ebp - 4]
push eax
push 0x7cf398d0
push dword [ebp - 0xc]
push dword [ebp + 0x24]
call fcn.7cf5294e
test eax, eax
jl 0x7cf530b2
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
push dword [edx]
mov ecx, dword [eax]
push dword [ebp + 0xc]
push dword [ebp + 0x18]
push eax
call dword [ecx + 0xc]
cmp eax, edi
jl 0x7cf5309f
test byte [ebp - 0x1c], 0x80
jne 0x7cf52f3d
push dword [ebp + 0x28]
push dword [ebp - 4]
call dword [sym.imp.SHLWAPI.dll_IUnknown_SetSite]
cmp dword [ebp + 0x1c], edi
jne 0x7cf52f5b
mov eax, dword [ebp - 4]
lea edx, [ebp + 0x1c]
push edx
push 0x7cf39900
mov ecx, dword [eax]
push eax
call dword [ecx]
test eax, eax
jl 0x7cf5309f
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x130]
push 0x7cf3ccdc
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x30]
push 4
pop esi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x130]
push 0x7cf3ccd0
push eax
push ParseURLA
mov dword [ebp - 0x30], esi
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x7cf52feb
cmp dword [ebp - 0x2c], esi
jne 0x7cf52feb
mov eax, dword [ebx + 0x10]
cmp eax, edi
je 0x7cf52feb
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [eax]
jae 0x7cf52feb
push dword [ebp + 0x20]
mov edx, dword [ebp + 0x1c]
push dword [ebx + 0xc]
mov esi, dword [edx]
push dword [ebp - 8]
push dword [eax + ecx*8 + 4]
push dword [ebx]
call dword [sym.imp.SHLWAPI.dll_GetMenuPosFromID]
mov ecx, dword [ebx + 0x10]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ecx + edx*8 + 8]
and ecx, 1
add eax, ecx
push eax
push dword [ebx]
push dword [ebp + 0x1c]
call dword [esi + 0xc]
jmp 0x7cf53002
push dword [ebp + 0x20]
mov eax, dword [ebp + 0x1c]
push dword [ebx + 0xc]
mov ecx, dword [eax]
push dword [ebp - 8]
push dword [ebx + 4]
push dword [ebx]
push eax
call dword [ecx + 0xc]
cmp dword [ebx + 4], 0
mov edi, eax
jne 0x7cf5301d
push 0
push 1
push dword [ebx]
call dword [sym.imp.USER32.dll_GetMenuDefaultItem]
test eax, eax
jne 0x7cf5301d
inc dword [ebx + 4]
mov esi, edi
and esi, 0xffff
test edi, edi
jl 0x7cf5309f
test esi, esi
je 0x7cf5309f
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
add eax, esi
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x40]
push eax
push ParseURLA
push dword [ebp + 8]
call dword [sym.imp.COMCTL32.dll_DSA_InsertItem]
cmp eax, 0xffffffff
je 0x7cf53067
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 4]
push dword [ebp - 0xc]
add dword [ebp - 8], esi
push dword [ebp + 0x24]
call fcn.7cf5297c
push 0x10
mov esi, eax
pop ecx
mov edi, 0x7cf39ff0
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x7cf530b2
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 4]
and dword [ebp + 0x1c], 0
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
and dword [ebp - 4], 0
inc dword [ebp - 0x14]
add dword [ebp - 0x10], 4
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp + 0x10]
jl 0x7cf52ee0
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x7cf530bf
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
test eax, eax
je 0x7cf530cc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
jns 0x7cf52e54
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
leave
ret 0x24