Function at 0x40523c
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xc0
mov eax, 0x41acd6
call fcn.00407a16
mov ebx, ecx
mov dword [ebp - 0xc0], ebx
xor esi, esi
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc4], esi
mov dword [ebp - 4], 2
xor eax, eax
mov edi, ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [ebx + 0x10], esi
mov dword [ebx + 0x14], 7
mov word [ebx], ax
mov edx, 0x101
mov dword [ebp - 0xc4], 1
lea ecx, [ebp + 8]
call fcn.00406cd3
cmp dword [ebp + 0x34], 7
lea ecx, [ebp - 0xbc]
push ecx
push esi
mov edi, eax
lea ecx, [ebp - 0xc8]
push ecx
lea eax, [ebp + 0x20]
cmova eax, dword [ebp + 0x20]
push esi
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov esi, eax
test esi, esi
jne 0x405465
cmp dword [ebp - 0xc8], 1
je 0x40532f
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp + 8]
mov edx, str.Registry_value
push eax
lea ecx, [ebp - 0x88]
call fcn.00404b37
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x70]
mov edx, eax
mov dword [esp], 0x423bbc
call fcn.00401cbf
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 0xa
push ecx
mov edx, eax
lea ecx, [ebp - 0x58]
call fcn.00401d59
push str._has_wrong_type
mov edx, eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x40]
call fcn.00401cbf
add esp, 0xc
mov byte [ebp - 4], 0xc
jmp 0x4054e6
mov eax, dword [ebp - 0xbc]
xor ecx, ecx
shr eax, 1
push 2
inc eax
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00407506
cmp dword [ebp + 0x34], 7
mov esi, eax
pop ecx
lea ecx, [ebp - 0xbc]
push ecx
push esi
lea eax, [ebp + 0x20]
cmova eax, dword [ebp + 0x20]
xor ecx, ecx
push ecx
push ecx
push eax
push edi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push edi
mov dword [ebp - 0xc0], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp - 0xc0]
test edi, edi
je 0x40540c
push esi
call fcn.00407501
mov edx, edi
lea ecx, [ebp - 0x88]
call fcn.004071df
mov esi, eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xd
push eax
mov edx, 0x423bc0
lea ecx, [ebp - 0x70]
call fcn.00404b37
push 0x423bbc
mov edx, eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x58]
call fcn.00401cbf
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 0xf
push ecx
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.00401d59
push 0x423bb4
mov edx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb8]
call fcn.00401cbf
push esi
mov edx, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xa0]
call fcn.00406f8e
add esp, 0x18
mov byte [ebp - 4], 0x12
jmp 0x4054e6
mov ecx, dword [ebp - 0xbc]
xor edx, edx
mov eax, ecx
shr eax, 1
cmp word [esi + eax*2 - 2], dx
jne 0x40542a
push 2
pop eax
sub ecx, eax
mov dword [ebp - 0xbc], ecx
shr ecx, 1
push ecx
push esi
lea ecx, [ebp - 0x28]
call fcn.00406f64
push eax
mov ecx, ebx
call fcn.00401af2
lea ecx, [ebp - 0x28]
call fcn.00401c2d
push esi
call fcn.00407501
pop ecx
lea ecx, [ebp + 8]
call fcn.00401c2d
lea ecx, [ebp + 0x20]
call fcn.00401c2d
mov eax, ebx
call fcn.004079c5
ret
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, esi
lea ecx, [ebp - 0xa0]
call fcn.004071df
mov esi, eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 3
push eax
mov edx, 0x423bc0
lea ecx, [ebp - 0xb8]
call fcn.00404b37
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x40]
mov edx, eax
mov dword [esp], 0x423bbc
call fcn.00401cbf
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 5
push ecx
mov edx, eax
lea ecx, [ebp - 0x58]
call fcn.00401d59
push 0x423bb4
mov edx, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x70]
call fcn.00401cbf
push esi
mov edx, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x88]
call fcn.00406f8e
add esp, 0x10
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x28]
call fcn.00405223
push 0x4266b0
lea eax, [ebp - 0x28]
push eax
call fcn.004087f5
int3