Function at 0x73f5a66d
Capabilities:
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xcac
mov eax, dword [0x73f6600c]
push ebx
push esi
push edi
mov esi, 0x73f201dc
lea edi, [ebp - 0x440]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push 0xe34
mov dword [ebp - 0xca8], eax
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xca0], 0x25e
call fcn.73f114ab
mov esi, eax
xor ebx, ebx
cmp esi, ebx
mov dword [ebp - 0xc98], esi
jne 0x73f5a6c4
push 8
jmp 0x73f5abb7
push ebx
push 0x84
push 0x73f67e30
mov dword [esi], 6
call fcn.73f11608
add esp, 0xc
call fcn.73f5942b
test eax, eax
jne 0x73f5a6ec
push esi
jmp 0x73f5abb0
mov eax, dword [0x73f67e78]
cmp eax, ebx
je 0x73f5a70d
push 0x12
push ebx
push ebx
lea ecx, [ebp - 0x440]
push ecx
call eax
cmp eax, 0xffffffff
mov dword [ebp - 0xc9c], eax
jne 0x73f5a714
call fcn.73f59b5b
jmp 0x73f5a6e6
push ebx
push 0x1c
pop esi
lea eax, [ebp - 0x45c]
push esi
push eax
call fcn.73f11608
push ebx
lea eax, [ebp - 0x430]
push esi
push eax
mov dword [ebp - 0x45c], esi
call fcn.73f11608
mov dword [ebp - 0x430], esi
mov esi, 0x73f201dc
lea edi, [ebp - 0x42c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add esp, 0x18
movsd dword es:[edi], dword [esi]
xor esi, esi
mov eax, dword [0x73f67ea8]
cmp eax, ebx
je 0x73f5a7c7
mov edi, dword [ebp - 0xc9c]
lea ecx, [ebp - 0x45c]
push ecx
push esi
lea ecx, [ebp - 0x440]
push ecx
push ebx
push edi
call eax
cmp eax, ebx
je 0x73f5a7c7
mov eax, dword [0x73f67eac]
cmp eax, ebx
je 0x73f5a7c7
lea ecx, [ebp - 0x430]
push ecx
lea ecx, [ebp - 0xcac]
push ecx
push dword [ebp - 0xca0]
lea ecx, [ebp - 0x45c]
push dword [ebp - 0xc98]
push ecx
push edi
call eax
cmp eax, ebx
je 0x73f5a7c7
push dword [ebp - 0xca8]
mov eax, dword [ebp - 0xc98]
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x73f5a7d2
inc esi
jmp 0x73f5a753
push dword [ebp - 0xc9c]
jmp 0x73f5aba0
mov eax, dword [0x73f67e74]
cmp eax, ebx
je 0x73f5ab9f
push ebx
push 0x104
lea ecx, [ebp - 0x20c]
push ecx
lea ecx, [ebp - 0x430]
push ecx
push edi
call eax
cmp eax, ebx
je 0x73f5ab9f
push edi
call fcn.73f593dd
push ebx
push ebx
call fcn.73f593c0
mov edi, eax
cmp edi, 0xffffffff
je 0x73f5aba5
push ebx
push 0x1c
pop esi
lea eax, [ebp - 0x430]
push esi
push eax
call fcn.73f11608
mov eax, dword [0x73f67e60]
add esp, 0xc
cmp eax, ebx
mov dword [ebp - 0x430], esi
je 0x73f5ab9f
lea ecx, [ebp - 0x430]
push ecx
push ebx
push ebx
lea ecx, [ebp - 0x20c]
push ecx
push edi
call eax
cmp eax, ebx
je 0x73f5ab9f
push ebx
mov esi, 0x22c
lea eax, [ebp - 0x688]
push esi
push eax
call fcn.73f11608
mov eax, dword [0x73f67e6c]
add esp, 0xc
cmp eax, ebx
mov dword [ebp - 0x688], esi
je 0x73f5ab9f
lea ecx, [ebp - 0x688]
push ecx
lea ecx, [ebp - 0x430]
push ecx
push edi
call eax
cmp eax, ebx
je 0x73f5ab9f
mov eax, dword [0x73f67e94]
cmp eax, ebx
je 0x73f5ab9f
push 0xf003f
push 2
push ebx
push 1
lea ecx, [ebp - 0x430]
push ecx
push edi
call eax
cmp eax, 0xffffffff
mov dword [ebp - 0xc9c], eax
je 0x73f5ab9f
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea ecx, [ebp - 0xca0]
push ecx
lea ecx, [ebp - 0x664]
push ecx
lea ecx, [ebp - 0xca4]
push ecx
push ebx
push 0x73f5ac2c
push eax
mov dword [ebp - 0xca0], 0x208
call esi
test eax, eax
je 0x73f5a90d
push dword [ebp - 0xc9c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x73f5ab9f
lea eax, [ebp - 0x664]
push eax
call fcn.73f5a1d1
lea eax, [ebp - 0xca0]
push eax
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0xca4]
push eax
push ebx
push 0x73f5ac14
push dword [ebp - 0xc9c]
mov dword [ebp - 0xca0], 0x208
call esi
test eax, eax
jne 0x73f5a8fc
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x664]
push eax
call fcn.73f5a4d7
test eax, eax
jne 0x73f5a972
push dword [ebp - 0xc9c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x73f5abcf
mov eax, dword [0x73f67e70]
or byte [ebp - 0x682], 1
cmp eax, ebx
je 0x73f5a8fc
lea ecx, [ebp - 0x688]
push ecx
lea ecx, [ebp - 0x430]
push ecx
push edi
call eax
cmp eax, ebx
je 0x73f5a8fc
mov eax, dword [0x73f67e90]
cmp eax, ebx
je 0x73f5a8fc
push 1
lea ecx, [ebp - 0x430]
push ecx
push edi
call eax
cmp eax, ebx
je 0x73f5a8fc
push ebx
lea eax, [ebp - 0xc94]
push 0x60c
push eax
call fcn.73f11608
add esp, 0xc
lea eax, [ebp - 0xca0]
push eax
lea eax, [ebp - 0x888]
push eax
lea eax, [ebp - 0xca4]
push eax
push ebx
push 0x73f5abf8
push dword [ebp - 0xc9c]
mov esi, 0x200
mov dword [ebp - 0xca0], esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
je 0x73f5aa12
mov word [ebp - 0x888], bx
mov eax, dword [0x73f67e68]
cmp eax, ebx
je 0x73f5a8fc
push ebx
push esi
lea ecx, [ebp - 0xa88]
push ecx
push ebx
push 0xb
lea ecx, [ebp - 0x430]
push ecx
push edi
call eax
cmp eax, ebx
je 0x73f5a8fc
mov eax, dword [0x73f67e68]
cmp eax, ebx
je 0x73f5a8fc
push ebx
push esi
lea ecx, [ebp - 0xc88]
push ecx
push ebx
push ebx
lea ecx, [ebp - 0x430]
push ecx
push edi
call eax
cmp eax, ebx
je 0x73f5a8fc
mov eax, dword [0x73f67e64]
cmp eax, ebx
mov dword [ebp - 0xc94], 0x60c
mov dword [ebp - 0xc90], 1
mov dword [ebp - 0xc8c], ebx
je 0x73f5a8fc
lea ecx, [ebp - 0xc94]
push ecx
lea ecx, [ebp - 0x430]
push ecx
push edi
call eax
cmp eax, ebx
je 0x73f5a8fc
push dword [ebp - 0xc9c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.73f593ac
cmp eax, 0xffffffff
mov dword [ebp - 0xc9c], eax
je 0x73f5ab9f
push ebx
mov esi, 0x22c
lea eax, [ebp - 0x688]
push esi
push eax
call fcn.73f11608
mov eax, dword [0x73f67e6c]
add esp, 0xc
cmp eax, ebx
mov dword [ebp - 0x688], esi
je 0x73f5ab01
lea ecx, [ebp - 0x688]
push ecx
lea ecx, [ebp - 0x430]
push ecx
push edi
call eax
cmp eax, ebx
jne 0x73f5ab24
push dword [ebp - 0xc9c]
call fcn.73f59392
push edi
call fcn.73f593dd
call fcn.73f59b5b
push 0x57
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x73f5abda
mov eax, dword [0x73f67e70]
or dword [ebp - 0x684], 8
cmp eax, ebx
mov esi, dword [ebp - 0xc9c]
mov dword [ebp - 0x670], esi
je 0x73f5ab99
lea ecx, [ebp - 0x688]
push ecx
lea ecx, [ebp - 0x430]
push ecx
push edi
call eax
cmp eax, ebx
je 0x73f5ab99
mov eax, dword [0x73f67e84]
cmp eax, ebx
je 0x73f5ab99
lea ecx, [ebp - 0x430]
push ecx
push edi
push 0x15
call eax
cmp eax, ebx
je 0x73f5ab99
mov eax, dword [0x73f67e70]
and dword [ebp - 0x684], 0xfffffff7
cmp eax, ebx
mov dword [ebp - 0x670], ebx
je 0x73f5ab99
lea ecx, [ebp - 0x688]
push ecx
lea ecx, [ebp - 0x430]
push ecx
push edi
call eax
cmp eax, ebx
jne 0x73f5abc1
push esi
call fcn.73f59392
push edi
call fcn.73f593dd
call fcn.73f59b5b
push dword [ebp - 0xc98]
call fcn.73f11f05
push 0x57
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
jmp 0x73f5abe7
push esi
call fcn.73f5a2fd
push esi
mov ebx, eax
call fcn.73f59392
push edi
call fcn.73f593dd
call fcn.73f59b5b
push dword [ebp - 0xc98]
call fcn.73f11f05
mov eax, ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.73f115cd
leave
ret 4