Function at 0x5bad23df
Capabilities:
Hide graphical window
Query or enumerate registry value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [ebp + 0x10]
push ebx
push esi
mov esi, dword [eax + 0x1c]
push edi
xor edi, edi
push 0xdc
mov dword [ebp - 4], edi
push dword [esi]
mov dword [ebp - 0x10], esi
call fcn.5ba5c71c
dec eax
je 0x5bad241c
dec eax
je 0x5bad2413
mov dword [ebp - 0xc], 0x8a0
jmp 0x5bad2423
mov dword [ebp - 0xc], 0x89f
jmp 0x5bad2423
mov dword [ebp - 0xc], 0x8a1
mov ebx, dword [ebp + 8]
push 1
push dword [ebp - 0xc]
push ebx
call dword [sym.imp.USER32.dll_CheckDlgButton]
push 0xdd
push esi
push 0x8a2
push ebx
call fcn.5bad1dd9
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
mov esi, 0x5ba4f77c
push esi
push 0x5ba44c94
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 0x10], 4
call sub.SHLWAPI.dll_SHGetValueA
test eax, eax
je 0x5bad2489
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
push esi
push edi
call fcn.5ba57361
test eax, eax
je 0x5bad2489
mov dword [ebp - 4], edi
cmp dword [ebp - 4], edi
mov edi, dword [sym.imp.USER32.dll_EnableWindow]
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
je 0x5bad24c1
push 0
push 0x8a1
push ebx
call esi
push eax
call edi
push 0
push 0x89f
push ebx
call esi
push eax
call edi
push 0
push 0x8a0
push ebx
call esi
push eax
call edi
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
push 0x5ba4f7a0
push 0x5ba44c94
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 0x10], 4
call sub.SHLWAPI.dll_SHGetValueA
test eax, eax
je 0x5bad250c
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
push 0x5ba4f7a0
push 0
call fcn.5ba57361
test eax, eax
je 0x5bad250c
and dword [ebp - 4], 0
cmp dword [ebp - 0xc], 0x8a1
jne 0x5bad251b
cmp dword [ebp - 4], 0
je 0x5bad2535
push 0
push 0x8a2
push ebx
call esi
push eax
call edi
push 0
push 0x8a3
push ebx
call esi
push eax
call edi
push 0xda
push dword [ebp - 0x10]
push 0x89d
push ebx
call fcn.5bad1dd9
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
push 0x5ba4f760
push 0x5ba44c94
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [ebp + 0x10], 4
call sub.SHLWAPI.dll_SHGetValueA
test eax, eax
je 0x5bad2593
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 8]
push eax
push 0x5ba4f760
push 0
call fcn.5ba57361
test eax, eax
je 0x5bad2593
and dword [ebp - 4], 0
cmp dword [ebp - 4], 0
je 0x5bad25a6
push 0
push 0x89d
push ebx
call esi
push eax
call edi
call fcn.5ba8cb40
test eax, eax
jne 0x5bad2616
push eax
push 0x8b8
push ebx
call esi
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
push eax
call ebx
push 0
push 0x8b9
push dword [ebp + 8]
call esi
push eax
call ebx
push 0
push 0x89e
push dword [ebp + 8]
call esi
push eax
call ebx
push 0
push 0x8ba
push dword [ebp + 8]
call esi
push eax
call ebx
push 0
push 0x89e
push dword [ebp + 8]
call esi
push eax
call edi
push 0
push 0x1c
push dword [ebp + 8]
call esi
push eax
call ebx
mov ebx, dword [ebp + 8]
mov edi, dword [ebp - 0x10]
mov esi, 0x172
jmp 0x5bad2651
test byte [0x5bb7381c], 1
je 0x5bad262c
push 0
push 0x89e
push ebx
call esi
push eax
call edi
mov edi, dword [ebp - 0x10]
push 1
push 0x1a
push dword [edi + 0x18]
call dword [0x5ba56044]
push eax
push 1
mov esi, 0x172
push esi
push 0x8c1
push ebx
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push 1
push 0x19
push dword [edi + 0x18]
call dword [0x5ba56044]
push eax
push 1
push esi
push 0x8a4
push ebx
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push 1
push 1
push dword [edi + 0x18]
call dword [0x5ba56044]
push eax
push 1
push esi
push 0x87c
push ebx
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push edi
push 8
push ebx
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 0
push ebx
push 0x46d
push ebx
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
pop edi
xor eax, eax
pop esi
inc eax
pop ebx
leave
ret 0xc