Function at 0x40a194
Capabilities:
Query or enumerate registry value

Disassembly:
push ebx
mov edx, 0x15
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x40a19a
mov edx, dword [esp + 0x60]
lea ecx, [esp]
call fcn.0040a000
mov edx, dword [esp + 0x64]
lea ecx, [esp + 4]
call fcn.0040a000
mov edx, 0x465cfc
lea ecx, [0x46b1fc]
call fcn.0040a008
push dword [esp + 0x5c]
mov ebx, 0x80000001
cmp ebx, dword [esp]
jne 0x40a1e3
jmp 0x40a263
mov ebx, 0x80000002
cmp ebx, dword [esp]
jne 0x40a1ef
jmp 0x40a263
mov ebx, 0x80000000
cmp ebx, dword [esp]
jne 0x40a1fb
jmp 0x40a263
mov ebx, 0x80000005
cmp ebx, dword [esp]
jne 0x40a207
jmp 0x40a263
mov ebx, 0x80000003
cmp ebx, dword [esp]
jne 0x40a213
jmp 0x40a263
mov ebx, 0x80000006
cmp ebx, dword [esp]
jne 0x40a21f
jmp 0x40a263
mov ebx, 0x80000004
cmp ebx, dword [esp]
jne 0x40a22b
jmp 0x40a263
mov edx, str.ERROR__HKEY_is_empty
lea ecx, [0x46b1fc]
call fcn.0040a008
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
pop eax
push dword [esp]
mov edx, 0x465cfc
pop ecx
call fcn.00429a30
je 0x40a2a0
mov edx, str.ERROR__subkeyname_is_empty
lea ecx, [0x46b1fc]
call fcn.0040a008
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
jmp 0x40ad5f
push dword [esp]
push dword [esp + 0x60]
call fcn.0040c4a4
mov ebx, eax
cmp ebx, 1
je 0x40a2df
mov edx, str.ERROR__sub_key_dont_exist
lea ecx, [0x46b1fc]
call fcn.0040a008
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
jmp 0x40ad5f
mov edx, 0x465cfc
lea ecx, [esp + 0x44]
call fcn.0040a008
mov edx, dword [esp + 4]
push dword [0x46bdcc]
call fcn.00429950
lea eax, [esp + 0x30]
push eax
call fcn.004299b0
mov eax, dword [0x46bdcc]
push eax
push eax
push 1
push dword [esp + 0xc]
call fcn.00428e40
add dword [0x46bdcc], 2
mov edx, 0x466750
pop ecx
mov dword [0x46bdcc], ecx
add ecx, dword [0x465cec]
call fcn.00429a30
je 0x40a362
mov eax, dword [0x46bdcc]
push eax
push eax
push dword [esp + 8]
call fcn.00428b00
mov ebx, eax
dec ebx
push ebx
push dword [esp + 0xc]
call fcn.00428c10
lea eax, [esp + 4]
push eax
call fcn.004299b0
push dword [esp + 0x44]
mov edx, 0x465cfc
pop ecx
call fcn.00429a30
je 0x40a395
lea eax, [esp + 0xc]
push eax
push 0x20019
push 0
push dword [esp + 0xc]
push dword [esp + 0x6c]
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [esp + 8], eax
jmp 0x40a3cb
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x60]
push dword [esp + 0x4c]
call sub.ADVAPI32.DLL_RegConnectRegistryW
mov dword [esp + 0x1c], eax
lea eax, [esp + 0xc]
push eax
push 0x20019
push 0
push dword [esp + 0xc]
push dword [esp + 0x30]
call sub.ADVAPI32.DLL_RegOpenKeyExW
mov dword [esp + 8], eax
mov ebx, dword [esp + 8]
and ebx, ebx
jne 0x40ad01
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x14]
push eax
lea eax, [esp + 0x30]
push eax
push 0
push dword [esp + 0x3c]
push dword [esp + 0x20]
call sub.ADVAPI32.DLL_RegQueryValueExW
mov dword [esp + 8], eax
mov ebx, dword [esp + 8]
and ebx, ebx
jne 0x40ad01
push dword [esp + 0x28]
mov ebx, 7
cmp ebx, dword [esp]
jne 0x40a5fa
lea eax, [esp + 0x34]
push eax
push 0
lea eax, [esp + 0x34]
push eax
push 0
push dword [esp + 0x40]
push dword [esp + 0x24]
call sub.ADVAPI32.DLL_RegQueryValueExW
push dword [esp + 0x34]
call fcn.0041c720
mov dword [esp + 0x44], eax
cmp dword [esp + 0x44], 0
je 0x40a453
xor eax, eax
jmp 0x40a458
mov eax, 1
and eax, eax
je 0x40a4b9
mov edx, 0x465cfc
lea ecx, [esp + 0x14]
call fcn.0040a008
mov edx, 0x465cfc
lea ecx, [esp + 0x28]
call fcn.0040a008
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, 0x466344
lea ecx, [0x46b1fc]
call fcn.0040a008
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x48]
lea eax, [esp + 0x34]
push eax
push 0
push dword [esp + 0x40]
push dword [esp + 0x24]
call sub.ADVAPI32.DLL_RegQueryValueExW
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x40a58f
mov eax, dword [0x46bdcc]
push eax
push eax
mov ebx, dword [esp + 0x4c]
add ebx, dword [esp + 0x58]
push ebx
call fcn.0041c6c0
lea eax, [esp + 0x58]
push eax
call fcn.004299b0
mov edx, dword [esp + 0x28]
push dword [0x46bdcc]
call fcn.00429950
mov edx, dword [esp + 0x58]
call fcn.00429950
mov edx, 0x467e1c
call fcn.00429950
lea eax, [esp + 0x2c]
push eax
call fcn.004299b0
push dword [esp + 0x54]
call fcn.00429250
mov ebx, eax
add ebx, dword [esp + 0x50]
add ebx, 2
mov dword [esp + 0x50], ebx
mov ebx, dword [esp + 0x50]
cmp ebx, dword [esp + 0x34]
jne 0x40a4e9
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [esp + 0x44]
call fcn.0041c5b0
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, dword [esp + 0x28]
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
push dword [esp + 0x44]
call fcn.0041c5b0
mov edx, 0x465cfc
lea ecx, [esp + 0x14]
call fcn.0040a008
mov edx, 0x465cfc
lea ecx, [esp + 0x54]
call fcn.0040a008
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, str.ERROR__reading_key
lea ecx, [0x46b1fc]
call fcn.0040a008
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
mov ebx, 2
cmp ebx, dword [esp]
jne 0x40a7e7
lea eax, [esp + 0x34]
push eax
push 0
lea eax, [esp + 0x34]
push eax
push 0
push dword [esp + 0x40]
push dword [esp + 0x24]
call sub.ADVAPI32.DLL_RegQueryValueExW
push dword [esp + 0x34]
call fcn.0041c720
mov dword [esp + 0x44], eax
mov ebx, dword [esp + 0x44]
and ebx, ebx
jne 0x40a67f
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, 0x46630a
lea ecx, [0x46b1fc]
call fcn.0040a008
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x48]
lea eax, [esp + 0x34]
push eax
push 0
push dword [esp + 0x40]
push dword [esp + 0x24]
call sub.ADVAPI32.DLL_RegQueryValueExW
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x40a77c
mov edx, 0x465cfc
lea ecx, [esp + 0x3c]
call fcn.0040a008
mov dword [esp + 0x38], 0
mov ebx, dword [esp + 0x34]
dec ebx
cmp ebx, dword [esp + 0x38]
jl 0x40a70c
mov edx, dword [esp + 0x3c]
push dword [0x46bdcc]
call fcn.00429950
mov eax, dword [0x46bdcc]
push eax
push eax
mov ebx, dword [esp + 0x50]
add ebx, dword [esp + 0x44]
mov eax, ebx
call fcn.0041c860
push eax
call fcn.00429280
pop eax
lea eax, [esp + 0x40]
push eax
call fcn.004299b0
inc dword [esp + 0x38]
jno 0x40a6c5
mov edx, dword [esp + 0x3c]
push dword [0x46bdcc]
call fcn.00429950
lea eax, [esp + 0x2c]
push eax
call fcn.004299b0
push dword [esp + 0x44]
call fcn.0041c5b0
mov edx, 0x465cfc
lea ecx, [esp + 0x14]
call fcn.0040a008
mov edx, 0x465cfc
lea ecx, [esp + 0x3c]
call fcn.0040a008
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, dword [esp + 0x28]
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
push dword [esp + 0x44]
call fcn.0041c5b0
mov edx, 0x465cfc
lea ecx, [esp + 0x14]
call fcn.0040a008
mov edx, 0x465cfc
lea ecx, [esp + 0x3c]
call fcn.0040a008
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, str.ERROR__reading_key
lea ecx, [0x46b1fc]
call fcn.0040a008
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
mov ebx, 1
cmp ebx, dword [esp]
jne 0x40a9d4
lea eax, [esp + 0x34]
push eax
push 0
lea eax, [esp + 0x34]
push eax
push 0
push dword [esp + 0x40]
push dword [esp + 0x24]
call sub.ADVAPI32.DLL_RegQueryValueExW
push dword [esp + 0x34]
call fcn.0041c720
mov dword [esp + 0x44], eax
mov ebx, dword [esp + 0x44]
and ebx, ebx
jne 0x40a86c
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, 0x4662d0
lea ecx, [0x46b1fc]
call fcn.0040a008
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x48]
lea eax, [esp + 0x34]
push eax
push 0
push dword [esp + 0x40]
push dword [esp + 0x24]
call sub.ADVAPI32.DLL_RegQueryValueExW
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x40a969
mov edx, 0x465cfc
lea ecx, [esp + 0x3c]
call fcn.0040a008
mov dword [esp + 0x38], 0
mov ebx, dword [esp + 0x34]
dec ebx
cmp ebx, dword [esp + 0x38]
jl 0x40a8f9
mov edx, dword [esp + 0x3c]
push dword [0x46bdcc]
call fcn.00429950
mov eax, dword [0x46bdcc]
push eax
push eax
mov ebx, dword [esp + 0x50]
add ebx, dword [esp + 0x44]
mov eax, ebx
call fcn.0041c860
push eax
call fcn.00429280
pop eax
lea eax, [esp + 0x40]
push eax
call fcn.004299b0
inc dword [esp + 0x38]
jno 0x40a8b2
mov edx, dword [esp + 0x3c]
push dword [0x46bdcc]
call fcn.00429950
lea eax, [esp + 0x2c]
push eax
call fcn.004299b0
push dword [esp + 0x44]
call fcn.0041c5b0
mov edx, 0x465cfc
lea ecx, [esp + 0x14]
call fcn.0040a008
mov edx, 0x465cfc
lea ecx, [esp + 0x3c]
call fcn.0040a008
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, dword [esp + 0x28]
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
push dword [esp + 0x44]
call fcn.0041c5b0
mov edx, 0x465cfc
lea ecx, [esp + 0x14]
call fcn.0040a008
mov edx, 0x465cfc
lea ecx, [esp + 0x3c]
call fcn.0040a008
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, str.ERROR__reading_key
lea ecx, [0x46b1fc]
call fcn.0040a008
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
mov ebx, 4
cmp ebx, dword [esp]
jne 0x40aadc
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x54]
push eax
push 0
push dword [esp + 0x40]
push dword [esp + 0x24]
call sub.ADVAPI32.DLL_RegQueryValueExW
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x40aa7a
mov eax, dword [0x46bdcc]
push eax
push eax
mov eax, dword [esp + 0x20]
cdq
push edx
push eax
call fcn.004291b0
lea eax, [esp + 0x2c]
push eax
call fcn.004299b0
mov edx, 0x465cfc
lea ecx, [esp + 0x14]
call fcn.0040a008
mov edx, 0x465cfc
lea ecx, [esp + 0x3c]
call fcn.0040a008
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, dword [esp + 0x28]
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
mov edx, 0x465cfc
lea ecx, [esp + 0x14]
call fcn.0040a008
mov edx, 0x465cfc
lea ecx, [esp + 0x3c]
call fcn.0040a008
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, str.ERROR__reading_key
lea ecx, [0x46b1fc]
call fcn.0040a008
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
mov ebx, 3
cmp ebx, dword [esp]
jne 0x40ad00
lea eax, [esp + 0x34]
push eax
push 0
lea eax, [esp + 0x34]
push eax
push 0
push dword [esp + 0x40]
push dword [esp + 0x24]
call sub.ADVAPI32.DLL_RegQueryValueExW
push dword [esp + 0x34]
call fcn.0041c720
mov dword [esp + 0x44], eax
mov ebx, dword [esp + 0x44]
and ebx, ebx
jne 0x40ab61
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, 0x466296
lea ecx, [0x46b1fc]
call fcn.0040a008
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
lea eax, [esp + 0x34]
push eax
push dword [esp + 0x48]
lea eax, [esp + 0x34]
push eax
push 0
push dword [esp + 0x40]
push dword [esp + 0x24]
call sub.ADVAPI32.DLL_RegQueryValueExW
mov dword [esp + 0xc], eax
mov ebx, dword [esp + 0xc]
and ebx, ebx
jne 0x40ac9d
mov edx, 0x465cfc
lea ecx, [esp + 0x3c]
call fcn.0040a008
mov dword [esp + 0x38], 0
mov ebx, dword [esp + 0x34]
dec ebx
cmp ebx, dword [esp + 0x38]
jl 0x40ac2d
mov edx, dword [esp + 0x3c]
push dword [0x46bdcc]
call fcn.00429950
mov eax, dword [0x46bdcc]
push eax
push eax
push 0x4660f8
push 2
mov eax, dword [0x46bdcc]
push eax
push eax
mov ebx, dword [esp + 0x60]
add ebx, dword [esp + 0x54]
mov eax, ebx
call fcn.0041c860
cdq
push edx
push eax
and dword [esp], 0xff
and dword [esp + 4], 0
pop eax
pop edx
push edx
push eax
call fcn.00429370
mov edx, dword [0x465cec]
add dword [esp], edx
call fcn.004293f0
pop eax
mov edx, 0x46601a
call fcn.00429950
lea eax, [esp + 0x40]
push eax
call fcn.004299b0
inc dword [esp + 0x38]
jno 0x40aba7
push dword [esp + 0x44]
call fcn.0041c5b0
mov edx, dword [esp + 0x3c]
push dword [0x46bdcc]
call fcn.00429950
lea eax, [esp + 0x2c]
push eax
call fcn.004299b0
mov edx, 0x465cfc
lea ecx, [esp + 0x14]
call fcn.0040a008
mov edx, 0x465cfc
lea ecx, [esp + 0x3c]
call fcn.0040a008
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, dword [esp + 0x28]
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
push dword [esp + 0x44]
call fcn.0041c5b0
mov edx, 0x465cfc
lea ecx, [esp + 0x14]
call fcn.0040a008
mov edx, 0x465cfc
lea ecx, [esp + 0x3c]
call fcn.0040a008
push dword [esp + 0x10]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, str.ERROR__reading_key
lea ecx, [0x46b1fc]
call fcn.0040a008
mov eax, dword [esp + 0x6c]
mov dword [0x46bdcc], eax
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
add esp, 4
jmp 0x40ad5f
pop eax
mov edx, 0x465cfc
lea ecx, [esp + 0x10]
call fcn.0040a008
mov edx, 0x465cfc
lea ecx, [esp + 0x38]
call fcn.0040a008
push dword [esp + 0xc]
call sub.ADVAPI32.DLL_RegCloseKey
mov edx, str.ERROR__not_specified_message
lea ecx, [0x46b1fc]
call fcn.0040a008
mov edx, 0x465cfc
push dword [0x46bdcc]
call fcn.00429950
pop eax
add eax, dword [0x465cec]
jmp 0x40ad5f
push dword [esp]
call fcn.00429a70
push dword [esp + 4]
call fcn.00429a70
push dword [esp + 0x10]
call fcn.00429a70
push dword [esp + 0x24]
call fcn.00429a70
push dword [esp + 0x2c]
call fcn.00429a70
push dword [esp + 0x38]
call fcn.00429a70
push dword [esp + 0x44]
call fcn.00429a70
push dword [esp + 0x50]
call fcn.00429a70
add esp, 0x54
pop ebx
ret 0x10