Function at 0x405734
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xc8
mov eax, 0x41aeb0
call fcn.00407a16
mov edi, ecx
mov dword [ebp - 0xd0], edi
mov dword [ebp - 0xc8], edi
xor ebx, ebx
mov dword [ebp - 0xd4], edi
mov dword [ebp - 0xcc], ebx
push 2
pop eax
mov dword [ebp - 4], eax
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov edx, 0x101
mov dword [ebp - 0xcc], 1
lea ecx, [ebp + 8]
call fcn.00406cd3
cmp dword [ebp + 0x34], 7
lea ecx, [ebp - 0xc0]
push ecx
push ebx
mov esi, eax
lea ecx, [ebp - 0xc8]
push ecx
lea eax, [ebp + 0x20]
cmova eax, dword [ebp + 0x20]
push ebx
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov ebx, eax
test ebx, ebx
jne 0x405a14
cmp dword [ebp - 0xc8], 7
je 0x40581d
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp + 8]
mov edx, str.Registry_value
push eax
lea ecx, [ebp - 0x88]
call fcn.00404b37
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x70]
mov edx, eax
mov dword [esp], 0x423bbc
call fcn.00401cbf
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 0xa
push ecx
mov edx, eax
lea ecx, [ebp - 0x58]
call fcn.00401d59
push str._has_wrong_type
mov edx, eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x40]
call fcn.00401cbf
add esp, 0xc
mov byte [ebp - 4], 0xc
jmp 0x405a95
mov eax, dword [ebp - 0xc0]
xor ecx, ecx
shr eax, 1
push 2
inc eax
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00407506
cmp dword [ebp + 0x34], 7
mov ebx, eax
pop ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xc4], ebx
push ecx
push ebx
lea eax, [ebp + 0x20]
cmova eax, dword [ebp + 0x20]
xor ecx, ecx
push ecx
push ecx
push eax
push esi
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push esi
mov dword [ebp - 0xbc], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [ebp - 0xbc]
test esi, esi
je 0x405900
push ebx
call fcn.00407501
mov edx, esi
lea ecx, [ebp - 0x88]
call fcn.004071df
mov esi, eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 0xd
push eax
mov edx, 0x423bc0
lea ecx, [ebp - 0x70]
call fcn.00404b37
push 0x423bbc
mov edx, eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x58]
call fcn.00401cbf
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 0xf
push ecx
mov edx, eax
lea ecx, [ebp - 0x40]
call fcn.00401d59
push 0x423bb4
mov edx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb8]
call fcn.00401cbf
push esi
mov edx, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xa0]
call fcn.00406f8e
add esp, 0x18
mov byte [ebp - 4], 0x12
jmp 0x405a95
mov esi, dword [ebp - 0xc0]
shr esi, 1
je 0x405921
lea eax, [esi - 1]
xor ecx, ecx
push 2
lea eax, [ebx + eax*2]
pop edx
cmp word [eax], cx
jne 0x405921
sub eax, edx
sub esi, 1
jne 0x405915
xor eax, eax
mov ecx, eax
mov ebx, eax
test esi, esi
je 0x4059f0
mov edx, dword [ebp - 0xc4]
push 2
pop eax
mov dword [ebp - 0xbc], eax
xor edi, edi
cmp word [eax + edx - 2], di
mov edi, dword [ebp - 0xd0]
jne 0x4059a3
mov eax, ebx
sub eax, ecx
push eax
lea eax, [edx + ecx*2]
push eax
lea ecx, [ebp - 0x28]
call fcn.00406f64
mov ecx, eax
mov byte [ebp - 4], 0x13
mov eax, dword [edi + 4]
push ecx
cmp eax, dword [edi + 8]
je 0x40597a
mov ecx, eax
call fcn.00401b29
add dword [edi + 4], 0x18
jmp 0x405982
push eax
mov ecx, edi
call fcn.00404d34
push 2
pop eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], al
call fcn.00401c2d
mov edx, dword [ebp - 0xc4]
lea ecx, [ebx + 1]
mov eax, dword [ebp - 0xbc]
mov ebx, ecx
jmp 0x4059a4
inc ebx
add eax, 2
mov dword [ebp - 0xbc], eax
cmp ebx, esi
jb 0x40593e
cmp esi, ecx
jbe 0x4059f0
sub esi, ecx
lea eax, [edx + ecx*2]
push esi
push eax
lea ecx, [ebp - 0x28]
call fcn.00406f64
mov ecx, eax
mov byte [ebp - 4], 0x14
mov eax, dword [edi + 4]
push ecx
cmp eax, dword [edi + 8]
je 0x4059e0
mov ecx, eax
call fcn.00401b29
add dword [edi + 4], 0x18
jmp 0x4059e8
push eax
mov ecx, edi
call fcn.00404d34
lea ecx, [ebp - 0x28]
call fcn.00401c2d
push dword [ebp - 0xc4]
call fcn.00407501
pop ecx
lea ecx, [ebp + 8]
call fcn.00401c2d
lea ecx, [ebp + 0x20]
call fcn.00401c2d
mov eax, edi
call fcn.004079c5
ret
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, ebx
lea ecx, [ebp - 0xa0]
call fcn.004071df
mov esi, eax
lea eax, [ebp + 8]
mov byte [ebp - 4], 3
push eax
mov edx, 0x423bc0
lea ecx, [ebp - 0xb8]
call fcn.00404b37
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x40]
mov edx, eax
mov dword [esp], 0x423bbc
call fcn.00401cbf
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 5
push ecx
mov edx, eax
lea ecx, [ebp - 0x58]
call fcn.00401d59
push 0x423bb4
mov edx, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x70]
call fcn.00401cbf
push esi
mov edx, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x88]
call fcn.00406f8e
add esp, 0x10
mov byte [ebp - 4], 8
push eax
lea ecx, [ebp - 0x28]
call fcn.00405223
push 0x4266b0
lea eax, [ebp - 0x28]
push eax
call fcn.004087f5
int3