Function at 0x42d2e0
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 8
lea eax, [esp]
push esi
mov esi, ecx
mov ecx, dword [esp + 0x10]
push eax
push 0x20019
push 0
push ecx
push 0x80000001
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
je 0x42d30f
xor eax, eax
pop esi
add esp, 8
ret 4
push ebx
lea edx, [esp + 0x14]
push edi
mov edi, dword [sym.imp.advapi32.dll_RegQueryValueExA]
lea eax, [esi + 0x1c]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
mov ebx, 4
push 0x4ef750
push edx
mov dword [esp + 0x30], ebx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x134]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef744
push eax
mov dword [esp + 0x30], ebx
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x1d0]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x4ef73c
push ecx
mov dword [esp + 0x30], ebx
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x1d4]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef734
push edx
mov dword [esp + 0x30], ebx
call edi
mov edx, dword [esp + 0xc]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
push esi
push ecx
push 0
push 0x4ef728
push edx
mov dword [esp + 0x30], ebx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 8]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef71c
push eax
mov dword [esp + 0x30], ebx
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x168]
push ecx
mov dword [esp + 0x1c], ebx
push edx
lea eax, [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push 0
push 0x4ef710
push ecx
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x16c]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef700
push edx
mov dword [esp + 0x30], ebx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x170]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef6f4
push eax
mov dword [esp + 0x30], ebx
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x174]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x4ef6e8
push ecx
mov dword [esp + 0x30], ebx
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x178]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef6dc
push edx
mov dword [esp + 0x30], ebx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x17c]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef6d0
push eax
mov dword [esp + 0x30], ebx
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x180]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x4ef6c4
push ecx
mov dword [esp + 0x30], ebx
call edi
lea edx, [esp + 0x18]
mov dword [esp + 0x18], ebx
push edx
mov edx, dword [esp + 0x10]
lea eax, [esi + 0x184]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef6b8
push edx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x1d8]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef6a8
push eax
mov dword [esp + 0x30], 8
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x224]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x4ef698
push ecx
mov dword [esp + 0x30], ebx
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x228]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef688
push edx
mov dword [esp + 0x30], ebx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x22c]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef67c
push eax
mov dword [esp + 0x30], ebx
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x230]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x4ef66c
push ecx
mov dword [esp + 0x30], ebx
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x234]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef658
push edx
mov dword [esp + 0x30], ebx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x238]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef648
push eax
mov dword [esp + 0x30], ebx
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x23c]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x4ef634
push ecx
mov dword [esp + 0x30], ebx
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x218]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef624
push edx
mov dword [esp + 0x30], ebx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x21c]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef614
push eax
mov dword [esp + 0x30], ebx
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x220]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x4ef608
push ecx
mov dword [esp + 0x30], ebx
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x2bc]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef5f8
push edx
mov dword [esp + 0x30], ebx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x2b8]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
push 0
mov dword [esp + 0x28], ebx
push 0x4ef5e8
mov eax, dword [esp + 0x20]
push eax
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x2c5]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x4ef5dc
push ecx
mov dword [esp + 0x30], 0x30
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x2f8]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef5cc
push edx
mov dword [esp + 0x30], 0x3c
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x338]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef5bc
push eax
mov dword [esp + 0x30], ebx
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x33c]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x4ef5ac
push ecx
mov dword [esp + 0x30], ebx
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x560]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef59c
push edx
mov dword [esp + 0x30], ebx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x564]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef58c
push eax
mov dword [esp + 0x30], ebx
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x568]
push ecx
mov dword [esp + 0x1c], ebx
push edx
lea eax, [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push 0
push 0x4ef57c
push ecx
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x56c]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef568
push edx
mov dword [esp + 0x30], ebx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x578]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef558
push eax
mov dword [esp + 0x30], ebx
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x57c]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x4ef548
push ecx
mov dword [esp + 0x30], ebx
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x5c0]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef4cc
push edx
mov dword [esp + 0x30], ebx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x5c8]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef4c0
push eax
mov dword [esp + 0x30], 8
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x5e0]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x4ef53c
push ecx
mov dword [esp + 0x30], 0x10
call edi
lea edx, [esp + 0x18]
mov dword [esp + 0x18], 0xc
push edx
mov edx, dword [esp + 0x10]
lea eax, [esi + 0x5f4]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef530
push edx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x604]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef524
push eax
mov dword [esp + 0x30], ebx
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x1b8]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
mov ebx, 0x18
push 0x4ef518
push ecx
mov dword [esp + 0x30], ebx
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x188]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
push ecx
push 0
push 0x4ef508
push edx
mov dword [esp + 0x30], ebx
call edi
lea eax, [esp + 0x18]
lea ecx, [esi + 0x1a0]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push 0x4ef4fc
push eax
mov dword [esp + 0x30], ebx
call edi
lea ecx, [esp + 0x18]
lea edx, [esi + 0x290]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x4ef4f4
push ecx
mov dword [esp + 0x30], 0x28
call edi
lea edx, [esp + 0x18]
lea eax, [esi + 0x340]
push edx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push eax
mov ebx, 0x104
push ecx
push 0
mov dword [esp + 0x28], ebx
push 0x4ef4e8
push edx
call edi
mov eax, dword [esi + 0x24]
test eax, eax
je 0x42d9ae
mov dword [esp + 0x18], ebx
mov edx, dword [esp + 0xc]
lea eax, [esp + 0x18]
add esi, 0x28
push eax
lea ecx, [esp + 0x14]
push esi
push ecx
push 0
push 0x4ef4dc
push edx
call edi
mov eax, dword [esp + 0xc]
push eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
pop edi
pop ebx
mov eax, 1
pop esi
add esp, 8
ret 4