Function at 0x40675b
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x2c4]
sub esp, 0x344
mov eax, dword [0x517490]
xor eax, ebp
mov dword [ebp + 0x2c0], eax
push esi
push edi
push edx
lea eax, [ebp + 0x38]
mov edi, ecx
push eax
call fcn.0040df82
push 0xfc712d6e
mov edx, 0x18047610
mov ecx, 0xba0935c6
call fcn.00401215
pop ecx
push eax
lea eax, [ebp + 0x38]
mov ecx, edi
push eax
call fcn.0041ff7c
lea eax, [ebp + 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx eax, word [ebp + 0x2e]
mov edx, 0xe8190469
push str.Xreveal_2.6.7.1__2024_06_30_
push eax
movzx eax, word [ebp + 0x2a]
mov ecx, 0x4a1447b9
push eax
movzx eax, word [ebp + 0x28]
push eax
push 0xc6c5f05
call fcn.004011f4
pop ecx
push eax
lea eax, [ebp + 0x38]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp + 0x38]
push eax
push 5
push edi
call fcn.0041ffc2
push 0x98
lea eax, [ebp - 0x70]
mov dword [ebp - 0x74], 0x9c
push 0
push eax
call fcn.004bea90
add esp, 0x30
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
lea eax, [ebp - 0x78]
mov edx, 0xe8ad4eab
push eax
push 0xcd815fa
mov ecx, 0x4aa00d65
lea esi, [ebp + 0x38]
call fcn.004011f4
pop ecx
push eax
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
test eax, eax
jne 0x406915
push ebx
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x80], 1
push eax
lea eax, [ebp + 0x240]
mov dword [ebp - 0x7c], 0x80
push eax
lea eax, [ebp - 0x80]
mov edx, 0xa2c73412
push eax
push 0
push 0x46b26f62
mov ecx, 0xca778c
call fcn.004011f4
pop ecx
push eax
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push dword [ebp - 0x78]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0xa
push 0x55092f45
mov edx, 0xb17c7432
lea ebx, [ebp + 0x240]
mov ecx, 0x137137b2
call fcn.004011f4
pop ecx
push eax
mov eax, ebx
push eax
call fcn.004baa70
add esp, 0xc
lea esi, [ebp + 0x24a]
test eax, eax
cmovne esi, ebx
cmp dword [ebp - 0x68], 0x55f0
pop ebx
jb 0x4068f2
push 0xa
push 0xaf1b53ac
mov edx, 0x4b6e08db
mov ecx, 0xe9634b69
call fcn.004011f4
pop ecx
push eax
push esi
call fcn.004baa70
add esp, 0xc
test eax, eax
jne 0x4068f2
mov byte [esi + 9], 0x31
lea ecx, [ebp + 0x38]
sub ecx, esi
mov al, byte [esi]
mov byte [ecx + esi], al
inc esi
test al, al
jne 0x4068f7
lea ecx, [ebp + 0x38]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406907
sub ecx, edx
lea esi, [ebp + 0x38]
add esi, ecx
cmp byte [ebp - 0x60], 0
je 0x406942
mov byte [esi], 0x5f
lea ecx, [ebp - 0x60]
inc esi
mov eax, ecx
mov edx, esi
sub edx, eax
mov al, byte [ecx]
mov byte [edx + ecx], al
inc ecx
test al, al
jne 0x406928
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406937
sub ecx, edx
add esi, ecx
push dword [ebp - 0x68]
mov edx, 0x514c867a
mov ecx, 0xf341c5de
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push 0xb539dd15
call fcn.004011f4
pop ecx
push eax
push esi
call fcn.004ba78c
lea eax, [ebp + 0x38]
push eax
push 5
push edi
call fcn.0041ffc2
push 0xbfd247a8
mov edx, 0x5ba71cd5
mov ecx, 0xf9aa5f8b
call fcn.004011f4
push eax
push 5
push edi
call fcn.0041ffc2
mov ecx, dword [ebp + 0x2c0]
add esp, 0x30
xor ecx, ebp
pop edi
pop esi
call fcn.004b94b6
lea esp, [ebp + 0x2c4]
pop ebp
ret