Function at 0x40e0a0
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x4b95b5
mov eax, dword fs:[0]
push eax
sub esp, 0x160
mov eax, dword [0x4d437c]
xor eax, esp
mov dword [esp + 0x158], eax
push ebx
push esi
push edi
mov eax, dword [0x4d437c]
xor eax, esp
push eax
lea eax, [esp + 0x170]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
lea ecx, [esp + 0x20]
push ecx
push 0x20019
xor esi, esi
push esi
push str.SOFTWAREClientsStartMenuInternet
xor ebx, ebx
push 0x80000002
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov ecx, dword [esp + 0x20]
push esi
push esi
push esi
push esi
lea edx, [esp + 0x34]
push edx
lea eax, [esp + 0x78]
push eax
push esi
push ecx
mov dword [esp + 0x48], esi
mov dword [esp + 0x44], 0x100
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
jne 0x40e360
lea edx, [esp + 0x64]
push edx
lea ecx, [esp + 0x4c]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const__]
mov dword [esp + 0x178], esi
cmp dword [esp + 0x5c], 4
jb 0x40e18e
push 4
push esi
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x54]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::substr_unsigned_int__unsigned_int_]
push str.Fire
mov byte [esp + 0x17c], 1
or ebx, 1
push eax
mov dword [esp + 0x20], ebx
call dword [sym.imp.MSVCP80.dll_bool___cdecl_std::operator_char__struct_std::char_traits_char___class_std::allocator_char___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__]
add esp, 8
test al, al
mov byte [esp + 0x17], 1
jne 0x40e193
mov byte [esp + 0x17], 0
test bl, 1
mov dword [esp + 0x178], esi
je 0x40e1ac
lea ecx, [esp + 0x2c]
and ebx, 0xfffffffe
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
cmp byte [esp + 0x17], 0
je 0x40e1e6
mov ecx, dword [esp + 0x1c]
mov esi, dword [ecx + 4]
mov eax, dword [esi + 4]
lea edx, [esp + 0x18]
push edx
push eax
push esi
mov dword [esp + 0x24], 3
call fcn.00414830
mov ecx, dword [esp + 0x1c]
mov edi, eax
call fcn.00414870
mov dword [esi + 4], edi
mov eax, dword [edi + 4]
mov dword [eax], edi
xor esi, esi
cmp dword [esp + 0x5c], 6
jb 0x40e226
push 6
push esi
lea ecx, [esp + 0x34]
push ecx
lea ecx, [esp + 0x54]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::substr_unsigned_int__unsigned_int_]
push str.Google
mov byte [esp + 0x17c], 2
or ebx, 2
push eax
mov dword [esp + 0x20], ebx
call dword [sym.imp.MSVCP80.dll_bool___cdecl_std::operator_char__struct_std::char_traits_char___class_std::allocator_char___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__]
add esp, 8
test al, al
mov byte [esp + 0x17], 1
jne 0x40e22b
mov byte [esp + 0x17], 0
test bl, 2
mov dword [esp + 0x178], esi
je 0x40e244
lea ecx, [esp + 0x2c]
and ebx, 0xfffffffd
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
cmp byte [esp + 0x17], 0
je 0x40e27e
mov edx, dword [esp + 0x1c]
mov esi, dword [edx + 4]
mov ecx, dword [esi + 4]
lea eax, [esp + 0x18]
push eax
push ecx
push esi
mov dword [esp + 0x24], 1
call fcn.00414830
mov ecx, dword [esp + 0x1c]
mov edi, eax
call fcn.00414870
mov dword [esi + 4], edi
mov eax, dword [edi + 4]
mov dword [eax], edi
xor esi, esi
cmp dword [esp + 0x5c], 9
jb 0x40e2be
push 9
push esi
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x54]
call dword [sym.imp.MSVCP80.dll_public:_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::substr_unsigned_int__unsigned_int_]
push str.Microsoft
mov byte [esp + 0x17c], 3
or ebx, 4
push eax
mov dword [esp + 0x20], ebx
call dword [sym.imp.MSVCP80.dll_bool___cdecl_std::operator_char__struct_std::char_traits_char___class_std::allocator_char___class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const___char_const__]
add esp, 8
test al, al
mov byte [esp + 0x17], 1
jne 0x40e2c3
mov byte [esp + 0x17], 0
test bl, 4
mov dword [esp + 0x178], esi
je 0x40e2dc
lea ecx, [esp + 0x2c]
and ebx, 0xfffffffb
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
cmp byte [esp + 0x17], 0
je 0x40e316
mov eax, dword [esp + 0x1c]
mov esi, dword [eax + 4]
mov edx, dword [esi + 4]
lea ecx, [esp + 0x18]
push ecx
push edx
push esi
mov dword [esp + 0x24], 2
call fcn.00414830
mov ecx, dword [esp + 0x1c]
mov edi, eax
call fcn.00414870
mov dword [esi + 4], edi
mov eax, dword [edi + 4]
mov dword [eax], edi
xor esi, esi
mov edi, dword [esp + 0x28]
add edi, 1
lea ecx, [esp + 0x48]
mov dword [esp + 0x28], edi
mov dword [esp + 0x24], 0x100
mov dword [esp + 0x178], 0xffffffff
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov edx, dword [esp + 0x20]
push esi
push esi
push esi
push esi
lea eax, [esp + 0x34]
push eax
lea ecx, [esp + 0x78]
push ecx
push edi
push edx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
je 0x40e138
mov eax, dword [esp + 0x20]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x170]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x158]
xor ecx, esp
call fcn.004b76e6
mov esp, ebp
pop ebp
ret