Function at 0x40cb58
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x8a
push 0
push 0
dec ecx
jne 0x40cb60
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x40cf14
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00404b40
xor eax, eax
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x40cee4
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 8]
push eax
push 0x20019
push 0
push 0x40cf24
push 0x80000001
call sub.advapi32.dll_RegOpenKeyExA_1
test eax, eax
je 0x40ceaa
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x40ceee
xor eax, eax
push ebp
push 0x40cea0
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x410]
mov ecx, 0x400
call fcn.00404da8
push 0
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x418]
mov ecx, dword [ebp - 0x10]
mov edx, 0x40cf64
call fcn.00404e44
mov edx, dword [ebp - 0x418]
mov ecx, 0x40cfa4
mov eax, 0x80000001
call fcn.0040c470
cmp dword [ebp - 0x414], 0
je 0x40ce93
xor eax, eax
push ebp
push 0x40ce87
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40cfb8
push 0
lea eax, [ebp - 0x41c]
push eax
mov edx, 0x40cf64
lea eax, [ebp - 0x420]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov edx, dword [ebp - 0x420]
mov ecx, 0x40cfd0
mov eax, 0x80000001
call fcn.0040c470
push dword [ebp - 0x41c]
push 0x40cfe8
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40cff4
mov edx, 0x40cf64
lea eax, [ebp - 0x428]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov eax, dword [ebp - 0x428]
lea edx, [ebp - 0x424]
call fcn.0040c89c
push dword [ebp - 0x424]
push 0x40cfe8
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40d008
push 0
lea eax, [ebp - 0x42c]
push eax
mov edx, 0x40cf64
lea eax, [ebp - 0x430]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov edx, dword [ebp - 0x430]
mov ecx, 0x40cfa4
mov eax, 0x80000001
call fcn.0040c470
push dword [ebp - 0x42c]
push 0x40cfe8
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40d020
push 0
lea eax, [ebp - 0x434]
push eax
mov edx, 0x40cf64
lea eax, [ebp - 0x438]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov edx, dword [ebp - 0x438]
mov ecx, 0x40d03c
mov eax, 0x80000001
call fcn.0040c470
push dword [ebp - 0x434]
push 0x40cfe8
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40d054
push 0
lea eax, [ebp - 0x43c]
push eax
mov edx, 0x40cf64
lea eax, [ebp - 0x440]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov edx, dword [ebp - 0x440]
mov ecx, 0x40d070
mov eax, 0x80000001
call fcn.0040c470
push dword [ebp - 0x43c]
push 0x40cfe8
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40d08c
push 0
lea eax, [ebp - 0x444]
push eax
mov edx, 0x40cf64
lea eax, [ebp - 0x448]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov edx, dword [ebp - 0x448]
mov ecx, 0x40d0ac
mov eax, 0x80000001
call fcn.0040c470
push dword [ebp - 0x444]
push 0x40cfe8
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40d0c8
push 0
lea eax, [ebp - 0x44c]
push eax
mov edx, 0x40cf64
lea eax, [ebp - 0x450]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov edx, dword [ebp - 0x450]
mov ecx, 0x40d0e0
mov eax, 0x80000001
call fcn.0040c470
push dword [ebp - 0x44c]
push 0x40cfe8
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
mov edx, 0x40cfe8
call fcn.00404e00
mov eax, dword [ebp - 4]
inc dword [ebp - 0xc]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x40ce96
inc dword [ebp - 0xc]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x40ceaa
push 0x400
lea eax, [ebp - 0x410]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegEnumKeyA
test eax, eax
jne 0x40ced1
cmp dword [ebp - 0xc], 0x14
jle 0x40cbc5
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x40ceee
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40cf1b
lea eax, [ebp - 0x450]
mov edx, 0x10
call fcn.00404b64
lea eax, [ebp - 0x10]
call fcn.00404b40
ret