Function at 0x4044c0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x5152d0
push 0x496320
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x527064]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov ebx, ecx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x30], 0
mov edi, dword [ebp + 0x14]
test edi, edi
je 0x404515
mov eax, dword [edi]
mov dword [ebp - 0x30], eax
mov eax, dword [ebx + 4]
test eax, eax
jne 0x4046e5
test dword [ebp + 0x18], 1
jne 0x404554
push edi
push dword [ebp + 0x10]
push dword [ebp + 0xc]
cmp dword [ebp + 0x1c], eax
je 0x404542
push dword [ebp + 8]
call fcn.00405960
jmp 0x4046e5
push 0
push dword [ebp + 8]
push dword [ebx]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
jmp 0x4046e5
mov esi, dword [ebp + 0xc]
test edi, edi
jne 0x404567
test esi, esi
jne 0x404567
lea eax, [esi + 0x57]
jmp 0x4046e5
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x20]
push eax
push 0
push dword [ebp + 8]
call fcn.00405710
test esi, esi
je 0x404582
mov ecx, dword [ebp - 0x28]
mov dword [esi], ecx
test eax, eax
jne 0x4046e5
test edi, edi
je 0x4046e5
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], eax
mov edx, dword [ebp - 0x20]
lea ecx, [edx + 8]
cmp edx, ecx
sbb eax, eax
test ecx, eax
je 0x404612
cmp edx, ecx
sbb eax, eax
and eax, ecx
cmp eax, 0x400
ja 0x4045e2
cmp edx, ecx
sbb eax, eax
and eax, ecx
call fcn.00491390
mov dword [ebp - 0x18], esp
mov esi, esp
mov dword [ebp - 0x34], esi
test esi, esi
je 0x404614
mov dword [esi], 0xcccc
add esi, 8
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 4], 0xfffffffe
jmp 0x40464b
cmp edx, ecx
sbb eax, eax
and eax, ecx
push eax
call fcn.004a3e8e
add esp, 4
mov esi, eax
mov dword [ebp - 0x38], esi
test esi, esi
je 0x404614
mov dword [esi], 0xdddd
add esi, 8
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 4], 0xfffffffe
jmp 0x40464b
xor esi, esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 4], 0xfffffffe
jmp 0x40464b
test esi, esi
jne 0x404657
lea eax, [esi + 0xe]
jmp 0x4046e5
push dword [ebp - 0x20]
push 0
push esi
call fcn.00496490
add esp, 0xc
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x20]
push eax
push esi
push dword [ebp + 8]
mov ecx, ebx
call fcn.00405710
mov dword [ebp - 0x24], eax
test eax, eax
je 0x40468a
push esi
call fcn.00402f60
mov eax, dword [ebp - 0x24]
jmp 0x4046e2
cmp dword [ebp + 0x1c], 0
je 0x4046b3
mov ecx, dword [ebp - 0x28]
cmp ecx, 1
je 0x40469d
cmp ecx, 7
jne 0x4046b3
mov eax, dword [ebp - 0x30]
mov dword [edi], eax
push edi
push dword [ebp + 0x10]
push esi
push ecx
mov ecx, ebx
call fcn.004056b0
mov edi, eax
jmp 0x4046da
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp - 0x20]
test eax, eax
je 0x4046d5
cmp ebx, dword [edi]
jbe 0x4046ca
mov dword [ebp - 0x24], 0xea
jmp 0x4046d5
push ebx
push esi
push eax
call fcn.00498140
add esp, 0xc
mov dword [edi], ebx
mov edi, dword [ebp - 0x24]
push esi
call fcn.00402f60
mov eax, edi
add esp, 4
lea esp, [ebp - 0x48]
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.004908ad
mov esp, ebp
pop ebp
ret 0x18