Function at 0x405255
Capabilities:
Query or enumerate registry value

Disassembly:
mov eax, 0x4289b8
call fcn.00410ccc
sub esp, 0x24
push ebx
push esi
mov esi, ecx
push edi
mov ecx, dword [ebp + 0x10]
mov edi, dword [ebp + 0x14]
xor ebx, ebx
mov dword [esi + 8], 1
mov dword [ecx], ebx
mov dword [edi], ebx
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x405463
push edi
push ebx
push ecx
push ebx
push dword [ebp + 8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
mov dword [ebp + 0x14], eax
je 0x405369
cmp eax, 2
jne 0x4052ac
cmp dword [ebp + 0xc], ebx
je 0x405463
push str.RegQueryValueEx_
lea ecx, [ebp - 0x1c]
call fcn.0041ee56
push dword [esi + 0xc]
mov dword [ebp - 4], ebx
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0041eff0
add esi, 0x10
mov byte [ebp - 4], 1
push esi
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0041ef8a
push 0x43487c
push eax
lea eax, [ebp - 0x10]
mov byte [ebp - 4], 2
push eax
call fcn.0041eff0
push dword [ebp + 8]
mov byte [ebp - 4], 3
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.0041eff0
push str.__NULL_
push eax
lea eax, [ebp + 0x10]
mov byte [ebp - 4], 4
push eax
call fcn.0041eff0
push dword [eax]
mov byte [ebp - 4], 5
push dword [ebp + 0x14]
call fcn.0040bc53
pop ecx
mov byte [ebp - 4], 4
pop ecx
lea ecx, [ebp + 0x10]
call fcn.0041ede8
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 3
call fcn.0041ede8
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 2
call fcn.0041ede8
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 1
call fcn.0041ede8
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], bl
call fcn.0041ede8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
jmp 0x40545e
push 1
pop eax
cmp dword [edi], eax
jae 0x405372
mov dword [edi], eax
push dword [edi]
call fcn.0041f286
pop ecx
mov dword [ebp + 0x14], eax
push edi
push eax
push dword [ebp + 0x10]
push ebx
push dword [ebp + 8]
push dword [esi + 4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov edi, eax
cmp edi, ebx
je 0x405467
push dword [ebp + 0x14]
call fcn.0041f2af
lea ecx, [ebp - 0x30]
mov dword [esp], str.RegQueryValueEx_
call fcn.0041ee56
push dword [esi + 0xc]
mov dword [ebp - 4], 6
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0041eff0
add esi, 0x10
mov byte [ebp - 4], 7
push esi
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.0041ef8a
push 0x43487c
push eax
lea eax, [ebp - 0x24]
mov byte [ebp - 4], 8
push eax
call fcn.0041eff0
push dword [ebp + 8]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0041eff0
push 0x4342a8
push eax
lea eax, [ebp + 0x14]
mov byte [ebp - 4], 0xa
push eax
call fcn.0041eff0
push dword [eax]
mov byte [ebp - 4], 0xb
push edi
call fcn.0040bc53
pop ecx
mov byte [ebp - 4], 0xa
pop ecx
lea ecx, [ebp + 0x14]
call fcn.0041ede8
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 9
call fcn.0041ede8
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 8
call fcn.0041ede8
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 7
call fcn.0041ede8
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.0041ede8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30]
call fcn.0041ede8
xor eax, eax
jmp 0x40546d
mov eax, dword [ebp + 0x14]
mov dword [esi + 8], ebx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0x10