Function at 0x4064f0
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0xc
push ebx
push ebp
push esi
push edi
push 8
call fcn.00408b84
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
add esp, 4
mov ebx, eax
lea eax, [esp + 0x10]
push eax
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPolicies_system
push 0x80000001
mov dword [esp + 0x28], 4
mov dword [esp + 0x2c], 8
call esi
lea ecx, [esp + 0x10]
push ecx
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPolicies_system
push 0x80000001
call esi
mov ecx, dword [esp + 0x10]
mov ebp, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea edx, [esp + 0x18]
lea eax, [esp + 0x14]
push edx
push ebx
push eax
push 0
push str.disableregistrytools
push ecx
call ebp
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
test eax, eax
jne 0x4065ac
mov al, byte [ebx]
push 0
test al, al
je 0x406595
mov edx, dword [0x413d04]
push 1
push 0xf1
push 0x3e8
push edx
jmp 0x4065a7
mov eax, dword [0x413d04]
push 0
push 0xf1
push 0x3e8
push eax
call edi
push eax
call esi
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x18]
push ebx
push edx
push 0
push str.nodevmgrpage
push eax
call ebp
test eax, eax
jne 0x4065fe
mov al, byte [ebx]
push 0
test al, al
je 0x4065e6
mov ecx, dword [0x413d04]
push 1
push 0xf1
push 0x3f0
push ecx
jmp 0x4065f9
mov edx, dword [0x413d04]
push 0
push 0xf1
push 0x3f0
push edx
call edi
push eax
call esi
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push ebx
push ecx
push 0
push str.noconfigpage
push edx
call ebp
test eax, eax
jne 0x40664f
mov al, byte [ebx]
push 0
test al, al
je 0x406637
mov eax, dword [0x413d04]
push 1
push 0xf1
push 0x3f1
push eax
jmp 0x40664a
mov ecx, dword [0x413d04]
push 0
push 0xf1
push 0x3f1
push ecx
call edi
push eax
call esi
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push ebx
push eax
push 0
push str.nofilesyspage
push ecx
call ebp
test eax, eax
jne 0x4066a0
mov al, byte [ebx]
push 0
test al, al
je 0x406689
mov edx, dword [0x413d04]
push 1
push 0xf1
push 0x3f2
push edx
jmp 0x40669b
mov eax, dword [0x413d04]
push 0
push 0xf1
push 0x3f2
push eax
call edi
push eax
call esi
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x18]
push ebx
push edx
push 0
push str.novirtmempage
push eax
call ebp
test eax, eax
jne 0x4066f2
mov al, byte [ebx]
push 0
test al, al
je 0x4066da
mov ecx, dword [0x413d04]
push 1
push 0xf1
push 0x3f3
push ecx
jmp 0x4066ed
mov edx, dword [0x413d04]
push 0
push 0xf1
push 0x3f3
push edx
call edi
push eax
call esi
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push ebx
push ecx
push 0
push str.nodispcpl
push edx
call ebp
test eax, eax
jne 0x406743
mov al, byte [ebx]
push 0
test al, al
je 0x40672b
mov eax, dword [0x413d04]
push 1
push 0xf1
push 0x3f4
push eax
jmp 0x40673e
mov ecx, dword [0x413d04]
push 0
push 0xf1
push 0x3f4
push ecx
call edi
push eax
call esi
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push ebx
push eax
push 0
push str.nodispbackgroundpage
push ecx
call ebp
test eax, eax
jne 0x406794
mov al, byte [ebx]
push 0
test al, al
je 0x40677d
mov edx, dword [0x413d04]
push 1
push 0xf1
push 0x3f5
push edx
jmp 0x40678f
mov eax, dword [0x413d04]
push 0
push 0xf1
push 0x3f5
push eax
call edi
push eax
call esi
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x18]
push ebx
push edx
push 0
push str.NoDispSettingsPage
push eax
call ebp
test eax, eax
jne 0x4067e6
mov al, byte [ebx]
push 0
test al, al
je 0x4067ce
mov ecx, dword [0x413d04]
push 1
push 0xf1
push 0x457
push ecx
jmp 0x4067e1
mov edx, dword [0x413d04]
push 0
push 0xf1
push 0x457
push edx
call edi
push eax
call esi
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push ebx
push ecx
push 0
push str.nodispscrsavpage
push edx
call ebp
test eax, eax
jne 0x406837
mov al, byte [ebx]
push 0
test al, al
je 0x40681f
mov eax, dword [0x413d04]
push 1
push 0xf1
push 0x3f6
push eax
jmp 0x406832
mov ecx, dword [0x413d04]
push 0
push 0xf1
push 0x3f6
push ecx
call edi
push eax
call esi
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push ebx
push eax
push 0
push str.nodispappearancepage
push ecx
call ebp
test eax, eax
jne 0x406888
mov al, byte [ebx]
push 0
test al, al
je 0x406871
mov edx, dword [0x413d04]
push 1
push 0xf1
push 0x3f7
push edx
jmp 0x406883
mov eax, dword [0x413d04]
push 0
push 0xf1
push 0x3f7
push eax
call edi
push eax
call esi
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x18]
push ebx
push edx
push 0
push str.DisableTaskMgr
push eax
call ebp
test eax, eax
jne 0x4068da
mov al, byte [ebx]
push 0
test al, al
je 0x4068c2
mov ecx, dword [0x413d04]
push 1
push 0xf1
push 0x436
push ecx
jmp 0x4068d5
mov edx, dword [0x413d04]
push 0
push 0xf1
push 0x436
push edx
call edi
push eax
call esi
lea eax, [esp + 0x10]
push eax
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x18]
push ebx
push edx
push 0
push str.noclose
push eax
call ebp
test eax, eax
jne 0x406948
mov al, byte [ebx]
push 0
test al, al
je 0x406930
mov ecx, dword [0x413d04]
push 1
push 0xf1
push 0x3e9
push ecx
jmp 0x406943
mov edx, dword [0x413d04]
push 0
push 0xf1
push 0x3e9
push edx
call edi
push eax
call esi
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push ebx
push ecx
push 0
push str.norun
push edx
call ebp
test eax, eax
jne 0x406999
mov al, byte [ebx]
push 0
test al, al
je 0x406981
mov eax, dword [0x413d04]
push 1
push 0xf1
push 0x3ea
push eax
jmp 0x406994
mov ecx, dword [0x413d04]
push 0
push 0xf1
push 0x3ea
push ecx
call edi
push eax
call esi
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push ebx
push eax
push 0
push str.nofind
push ecx
call ebp
test eax, eax
jne 0x4069ea
mov al, byte [ebx]
push 0
test al, al
je 0x4069d3
mov edx, dword [0x413d04]
push 1
push 0xf1
push 0x3eb
push edx
jmp 0x4069e5
mov eax, dword [0x413d04]
push 0
push 0xf1
push 0x3eb
push eax
call edi
push eax
call esi
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x18]
push ebx
push edx
push 0
push str.nodesktop
push eax
call ebp
test eax, eax
jne 0x406a3c
mov al, byte [ebx]
push 0
test al, al
je 0x406a24
mov ecx, dword [0x413d04]
push 1
push 0xf1
push 0x3ec
push ecx
jmp 0x406a37
mov edx, dword [0x413d04]
push 0
push 0xf1
push 0x3ec
push edx
call edi
push eax
call esi
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push ebx
push ecx
push 0
push str.nosetfolders
push edx
call ebp
test eax, eax
jne 0x406a8d
mov al, byte [ebx]
push 0
test al, al
je 0x406a75
mov eax, dword [0x413d04]
push 1
push 0xf1
push 0x3ed
push eax
jmp 0x406a88
mov ecx, dword [0x413d04]
push 0
push 0xf1
push 0x3ed
push ecx
call edi
push eax
call esi
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push ebx
push eax
push 0
push str.nologoff
push ecx
call ebp
test eax, eax
jne 0x406ade
mov al, byte [ebx]
push 0
test al, al
je 0x406ac7
mov edx, dword [0x413d04]
push 1
push 0xf1
push 0x3ee
push edx
jmp 0x406ad9
mov eax, dword [0x413d04]
push 0
push 0xf1
push 0x3ee
push eax
call edi
push eax
call esi
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x18]
push ebx
push edx
push 0
push str.nofavoritesMenu
push eax
call ebp
test eax, eax
jne 0x406b30
mov al, byte [ebx]
push 0
test al, al
je 0x406b18
mov ecx, dword [0x413d04]
push 1
push 0xf1
push 0x3ef
push ecx
jmp 0x406b2b
mov edx, dword [0x413d04]
push 0
push 0xf1
push 0x3ef
push edx
call edi
push eax
call esi
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push ebx
push ecx
push 0
push str.NoTrayContextMenu
push edx
call ebp
test eax, eax
jne 0x406b81
mov al, byte [ebx]
push 0
test al, al
je 0x406b69
mov eax, dword [0x413d04]
push 1
push 0xf1
push 0x456
push eax
jmp 0x406b7c
mov ecx, dword [0x413d04]
push 0
push 0xf1
push 0x456
push ecx
call edi
push eax
call esi
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push ebx
push eax
push 0
push str.RestrictRun
push ecx
call ebp
test eax, eax
jne 0x406bd2
mov al, byte [ebx]
push 0
test al, al
je 0x406bbb
mov edx, dword [0x413d04]
push 1
push 0xf1
push 0x405
push edx
jmp 0x406bcd
mov eax, dword [0x413d04]
push 0
push 0xf1
push 0x405
push eax
call edi
push eax
call esi
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x18]
push ebx
push edx
push 0
push str.NoNetHood
push eax
call ebp
test eax, eax
jne 0x406c24
mov al, byte [ebx]
push 0
test al, al
je 0x406c0c
mov ecx, dword [0x413d04]
push 1
push 0xf1
push 0x435
push ecx
jmp 0x406c1f
mov edx, dword [0x413d04]
push 0
push 0xf1
push 0x435
push edx
call edi
push eax
call esi
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push ebx
push ecx
push 0
push str.NoViewContextMenu
push edx
mov dword [esp + 0x2c], 3
call ebp
test eax, eax
jne 0x406c7d
mov al, byte [ebx]
push 0
test al, al
je 0x406c65
mov eax, dword [0x413d04]
push 1
push 0xf1
push 0x407
push eax
jmp 0x406c78
mov ecx, dword [0x413d04]
push 0
push 0xf1
push 0x407
push ecx
call edi
push eax
call esi
lea edx, [esp + 0x10]
push edx
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesWinOldApp
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push ebx
push ecx
push 0
push str.disabled
push edx
call ebp
test eax, eax
jne 0x406cea
mov al, byte [ebx]
push 0
test al, al
je 0x406cd2
mov eax, dword [0x413d04]
push 1
push 0xf1
push 0x406
push eax
jmp 0x406ce5
mov ecx, dword [0x413d04]
push 0
push 0xf1
push 0x406
push ecx
call edi
push eax
call esi
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push ebx
push eax
push 0
push str.NoRealMode
push ecx
call ebp
test eax, eax
jne 0x406d46
mov al, byte [ebx]
push 0
test al, al
je 0x406d2f
mov edx, dword [0x413d04]
push 1
push 0xf1
push 0x434
push edx
call edi
push eax
call esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret
mov eax, dword [0x413d04]
push 0
push 0xf1
push 0x434
push eax
call edi
push eax
call esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret