Function at 0x40ecd9
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
add esp, reloc.gdi32.dll_SetWorldTransform
lea eax, [ebp - 4]
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call sub.advapi32.dll_RegOpenKeyA
and eax, eax
jne reloc.gdi32.dll_SetWorldTransform
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0x7ff
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x80c]
push eax
push dword [ebp - 8]
push dword [ebp - 4]
call sub.advapi32.dll_RegEnumKeyExA
and eax, eax
je reloc.gdi32.dll_SetWorldTransform
jmp reloc.gdi32.dll_SetWorldTransform
push reloc.shlwapi.dll_PathIsUNCServerShareW
push dword [ebp + 0xc]
call fcn.00401db1
mov edx, eax
lea eax, [ebp - 0x80c]
push eax
push edx
call fcn.00401e05
mov dword [ebp - 0x810], eax
push 0
push reloc.shlwapi.dll_PathRenameExtensionW
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 8]
call fcn.00401d2a
mov dword [ebp - 0x814], eax
push 0
push reloc.shlwapi.dll_PathIsPrefixA
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 8]
call fcn.00401d2a
mov dword [ebp - 0x818], eax
push 0
push reloc.shlwapi.dll_SHRegGetBoolUSValueA
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 8]
call fcn.00401d2a
mov dword [ebp - 0x81c], eax
lea eax, [ebp - 0x824]
push eax
push reloc.shlwapi.dll_SHRegGetBoolUSValueA
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 8]
call fcn.00401d2a
mov dword [ebp - 0x820], eax
push 0
push reloc.shlwapi.dll_SHRegGetBoolUSValueA
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 8]
call fcn.00401d2a
mov dword [ebp - 0x828], eax
lea eax, [ebp - 0x830]
push eax
push reloc.shlwapi.dll_SHRegGetBoolUSValueA
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 8]
call fcn.00401d2a
mov dword [ebp - 0x82c], eax
push 0
push reloc.shlwapi.dll_PathBuildRootA
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 8]
call fcn.00401d2a
mov dword [ebp - 0x834], eax
lea eax, [ebp - 0x83c]
push eax
push reloc.shlwapi.dll_PathBuildRootA
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 8]
call fcn.00401d2a
mov dword [ebp - 0x838], eax
push 0
push reloc.shlwapi.dll_PathBuildRootA
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 8]
call fcn.00401d2a
mov dword [ebp - 0x840], eax
lea eax, [ebp - 0x848]
push eax
push reloc.shlwapi.dll_PathBuildRootA
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 8]
call fcn.00401d2a
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x814], 0
je reloc.gdi32.dll_SetWorldTransform
cmp dword [ebp - 0x830], 0
jne reloc.gdi32.dll_SetWorldTransform
cmp dword [ebp - 0x848], 0
je reloc.gdi32.dll_SetWorldTransform
push reloc.gdi32.dll_SetWorldTransform
push dword [ebp + 0x10]
call fcn.00401522
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 0x10]
call fcn.00401584
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 0x10]
call fcn.00401584
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 0x10]
call fcn.00401584
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 0x10]
call fcn.00401558
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 0x10]
call fcn.00401584
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 0x10]
call fcn.00401558
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 0x10]
call fcn.00401584
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 0x10]
call fcn.00401558
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 0x10]
call fcn.00401584
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 0x10]
call fcn.00401558
push dword [ebp + 0x10]
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
push dword [ebp + 8]
call fcn.0040ecd9
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
call fcn.00401871
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
call fcn.00401871
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
call fcn.00401871
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
call fcn.00401871
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
call fcn.00401871
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
call fcn.00401871
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
call fcn.00401871
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
call fcn.00401871
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
call fcn.00401871
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
call fcn.00401871
push dword [ebp - reloc.gdi32.dll_SetWorldTransform]
call fcn.00401871
inc dword [ebp - 8]
jmp reloc.gdi32.dll_SetWorldTransform
push dword [ebp - 4]
call sub.advapi32.dll_RegCloseKey
leave
ret 0xc