Function at 0x40a940
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
sub esp, 0x110
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x40]
push 8
push eax
xor ebx, ebx
push 0x451eac
mov esi, ecx
push 0x4513dc
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], ebx
call fcn.00407540
test eax, eax
je 0x40a9a7
lea ecx, [esp + 0x20]
push ecx
call fcn.00410184
lea edx, [esp + 0x40]
lea ecx, [esp + 0x20]
push edx
call fcn.00410244
neg eax
sbb eax, eax
neg eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret 4
lea eax, [esp + 0x3c]
push 4
push eax
push 0x451ea4
push 0x4513dc
mov ecx, esi
call fcn.00407540
test eax, eax
je 0x40abae
lea ecx, [esp + 0x58]
push ecx
mov ecx, esi
call fcn.0040a620
lea edx, [esp + 0x10]
lea eax, [esp + 0x58]
push edx
push 0x20019
push ebx
push eax
push 0x80000002
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], ebx
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x24], ebx
xor esi, esi
xor edi, edi
call dword [0x44600c]
mov ebp, dword [0x446008]
test eax, eax
jne 0x40aa80
mov edi, dword [0x446004]
lea ecx, [esp + 0x38]
lea edx, [esp + 0x2c]
mov eax, 8
push ecx
push edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x18]
push ebx
push ebx
push str.Data1
push eax
call edi
lea ecx, [esp + 0x14]
lea edx, [esp + 0x20]
mov esi, eax
mov eax, dword [esp + 0x10]
push ecx
push edx
neg esi
push ebx
push ebx
sbb esi, esi
push str.Data2
push eax
inc esi
call edi
mov ecx, dword [esp + 0x10]
mov edi, eax
neg edi
sbb edi, edi
push ecx
inc edi
call ebp
cmp esi, ebx
je 0x40aacd
cmp edi, ebx
je 0x40aacd
lea edx, [esp + 0x14]
push edx
call fcn.00410184
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x14]
push eax
call fcn.00410244
test eax, eax
je 0x40abae
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x18]
call fcn.00410209
test eax, eax
je 0x40abae
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret 4
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], edx
lea eax, [esp + 0x4c]
fild qword [esp + 0x14]
push eax
mov dword [esp + 0x20], ebx
fstp qword [esp + 0x18]
call fcn.00410184
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], edx
mov eax, dword [eax + 8]
lea ecx, [esp + 0x14]
lea edx, [esp + 0x4c]
push ecx
push edx
lea ecx, [esp + 0x34]
mov dword [esp + 0x3c], eax
call fcn.0041027f
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], edx
mov eax, dword [eax + 8]
lea ecx, [esp + 0x10]
lea edx, [esp + 0x58]
push ecx
push edx
push 0x80000002
mov dword [esp + 0x34], eax
call dword [0x446010]
test eax, eax
jne 0x40ab9f
mov ecx, dword [esp + 0x10]
mov esi, dword [0x44601c]
lea eax, [esp + 0x2c]
push 8
push eax
push 3
push ebx
push str.Data1
push ecx
call esi
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x20]
push 8
push edx
push 3
push ebx
push str.Data2
push eax
call esi
mov edx, dword [esp + 0x124]
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
push ecx
mov ecx, dword [esp + 0x14]
push edx
push 1
push ebx
push str.Data3
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
call ebp
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x110
ret 4
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x110
ret 4