Function at 0x4033ab
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x408
push esi
lea eax, [ebp - 4]
push eax
push 1
push 0
push 0x403250
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x408]
push eax
push 0
push 0
push 0x403244
push dword [ebp - 4]
mov esi, 0x409
mov dword [ebp - 8], 0x400
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x403409
lea eax, [ebp - 0x408]
push eax
call dword [sym.imp.SHLWAPI.dll_StrToIntA]
mov esi, eax
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp esi, 0x402
jne 0x40344c
push 0x403210
push 0x4031c0
push 0x4031b8
push 0x403198
push 0x403180
push 0x403168
push 0x403158
push 0x403148
push 0x403130
jmp 0x403b62
cmp esi, 0x404
jne 0x403486
push 0x403108
push 0x4030d8
push 0x4030d0
push 0x4030b4
push 0x4030a8
push 0x40309c
push 0x403090
push 0x403084
push 0x403074
jmp 0x403b62
cmp esi, 0x405
jne 0x4034c0
push 0x403044
push 0x402ff0
push 0x402fe8
push 0x402fc8
push 0x402fb0
push 0x402f94
push 0x402f84
push 0x402f74
push 0x402f60
jmp 0x403b62
cmp esi, 0x406
jne 0x4034f2
push 0x402f2c
push 0x402ee0
push 0x402ed8
push 0x402ec0
push 0x402eb4
push 0x402e9c
push 0x402e90
push 0x402e84
jmp 0x403522
cmp esi, 0x407
jne 0x40352c
push 0x402e40
push 0x402dd8
push 0x402dcc
push 0x402da8
push 0x402eb4
push 0x402d90
push 0x402d7c
push 0x402d68
push 0x402d54
jmp 0x403b62
cmp esi, 0x40a
jne 0x403566
push 0x402d24
push 0x402cd8
push 0x402cd0
push 0x402cb4
push 0x402ca4
push 0x402c88
push 0x402c78
push 0x402c68
push 0x402c54
jmp 0x403b62
cmp esi, 0x40b
jne 0x40359b
push 0x402c1c
push 0x402bb8
push 0x402bac
push 0x402b88
push 0x402b6c
push 0x402b54
push 0x402b44
push 0x402b34
jmp 0x403b5d
cmp esi, 0x40c
jne 0x4035d0
push 0x402af8
push 0x402aa8
push 0x402aa0
push 0x402a80
push 0x402a68
push 0x402a40
push 0x402a30
push 0x402a20
jmp 0x403b5d
cmp esi, 0x40d
jne 0x40360a
push 0x402a00
push 0x4029c8
push 0x4029c0
push 0x4029a8
push 0x402998
push 0x402980
push 0x402970
push 0x402964
push 0x402954
jmp 0x403b62
cmp esi, 0x40e
jne 0x403644
push 0x40291c
push 0x4028d0
push 0x4028c8
push 0x4028a0
push 0x402eb4
push 0x40288c
push 0x40287c
push 0x40286c
push 0x40285c
jmp 0x403b62
cmp esi, 0x410
jne 0x40367e
push 0x402824
push 0x4027c0
push 0x4027b8
push 0x402798
push 0x402780
push 0x402754
push 0x402740
push 0x402730
push 0x402718
jmp 0x403b62
cmp esi, 0x411
jne 0x4036b8
push 0x4026e8
push 0x4026a0
push 0x402698
push 0x40267c
push 0x40266c
push 0x402654
push 0x402648
push 0x402638
push 0x402620
jmp 0x403b62
cmp esi, 0x412
jne 0x4036f2
push 0x4025f0
push 0x4025a0
push 0x402598
push 0x402584
push 0x402578
push 0x40256c
push 0x402560
push 0x402550
push 0x402540
jmp 0x403b62
cmp esi, 0x414
jne 0x40372c
push 0x402510
push 0x4024d0
push 0x4024c8
push 0x4024ac
push 0x402eb4
push 0x402490
push 0x402484
push 0x402478
push 0x402460
jmp 0x403b62
cmp esi, 0x415
jne 0x403766
push 0x402428
push 0x4023c8
push 0x4023bc
push 0x4023a0
push 0x402eb4
push 0x402388
push 0x40237c
push 0x402370
push 0x40235c
jmp 0x403b62
cmp esi, 0x418
jne 0x4037a0
push 0x402324
push 0x4022c8
push 0x4022c0
push 0x4022a4
push 0x402298
push 0x402284
push 0x402270
push 0x402260
push 0x40224c
jmp 0x403b62
cmp esi, 0x419
jne 0x4037da
push 0x402220
push 0x4021c8
push 0x4021bc
push 0x40219c
push 0x402190
push 0x402170
push 0x402160
push 0x402150
push 0x40213c
jmp 0x403b62
cmp esi, 0x41b
jne 0x403814
push 0x40210c
push 0x4020b8
push 0x4020ac
push 0x40208c
push 0x402080
push 0x402068
push 0x402058
push 0x40204c
push 0x402038
jmp 0x403b62
cmp esi, 0x41c
jne 0x40384e
push 0x401ffc
push 0x401fa0
push 0x401f94
push 0x401f78
push 0x401f6c
push 0x401f54
push 0x401f44
push 0x401f34
push 0x401f20
jmp 0x403b62
cmp esi, 0x41e
jne 0x403888
push 0x401eec
push 0x401ea8
push 0x401e98
push 0x401e70
push 0x401e60
push 0x401e4c
push 0x401e40
push 0x401e34
push 0x401e1c
jmp 0x403b62
cmp esi, 0x422
jne 0x4038c2
push 0x401de8
push 0x401da0
push 0x401d98
push 0x401d80
push 0x401d6c
push 0x401d54
push 0x401d44
push 0x401d34
push 0x401d20
jmp 0x403b62
cmp esi, 0x423
jne 0x4038fc
push 0x401cec
push 0x401c98
push 0x401c90
push 0x401c6c
push 0x401c60
push 0x401c48
push 0x401c3c
push 0x401c2c
push 0x401c18
jmp 0x403b62
cmp esi, 0x424
jne 0x403936
push 0x401be0
push 0x401ba0
push 0x401b94
push 0x401b78
push 0x401b68
push 0x401b54
push 0x401b44
push 0x401b38
push 0x401b20
jmp 0x403b62
cmp esi, 0x425
jne 0x403970
push 0x401af4
push 0x401ab4
push 0x401aac
push 0x401a90
push 0x401a7c
push 0x401a68
push 0x401a5c
push 0x401a4c
push 0x401a38
jmp 0x403b62
cmp esi, 0x427
jne 0x4039aa
push 0x401a08
push 0x4019c8
push 0x4019bc
push 0x4019a0
push 0x401990
push 0x40197c
push 0x401974
push 0x401960
push 0x40194c
jmp 0x403b62
cmp esi, 0x42d
jne 0x4039e4
push 0x401918
push 0x4018c0
push 0x4018b8
push 0x401890
push 0x40187c
push 0x401858
push 0x401840
push 0x401830
push 0x401818
jmp 0x403b62
cmp esi, 0x42f
jne 0x403a1e
push 0x4017c8
push 0x401750
push 0x401740
push 0x401710
push 0x4016e4
push 0x4016bc
push 0x4016a0
push 0x401688
push 0x40166c
jmp 0x403b62
cmp esi, 0x43e
jne 0x403a53
push 0x401634
push 0x4015b8
push 0x4015b0
push 0x401594
push 0x401580
push 0x40156c
push 0x40155c
push 0x401548
jmp 0x403b5d
cmp esi, 0x456
jne 0x403a8d
push 0x401510
push 0x4014a8
push 0x402cd0
push 0x401488
push 0x40147c
push 0x401460
push 0x401450
push 0x401440
push 0x401428
jmp 0x403b62
cmp esi, 0x804
jne 0x403ac7
push 0x401408
push 0x4013d8
push 0x4013d0
push 0x4013b8
push 0x4013ac
push 0x4013a0
push 0x401394
push 0x401388
push 0x401378
jmp 0x403b62
cmp esi, 0x81a
jne 0x403afe
push 0x40133c
push 0x401308
push 0x401300
push 0x4012e4
push 0x4012d8
push 0x4012c4
push 0x4012b4
push 0x4012a8
push 0x401294
jmp 0x403b62
cmp esi, 0x141a
jne 0x403b35
push 0x401264
push 0x401210
push 0x401300
push 0x4011f4
push 0x4011e8
push 0x4011d0
push 0x4011c0
push 0x4011b0
push 0x40119c
jmp 0x403b62
push 0x401168
push 0x401118
push 0x40110c
push 0x4010f0
push 0x402eb4
push 0x401b54
push 0x4010e0
push 0x4010d4
push 0x4010c0
mov ecx, 0x405008
call fcn.00403332
pop esi
leave
ret