Function at 0x42c7fe
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1010
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, 0x3ff
lea eax, [ebp - 0xc03]
xor ebx, ebx
push esi
push ebx
push eax
mov byte [ebp - 0xc04], bl
call fcn.00626f50
push esi
lea eax, [ebp - 0x1003]
mov byte [ebp - 0x1004], bl
push ebx
push eax
call fcn.00626f50
push esi
lea eax, [ebp - 0x803]
mov byte [ebp - 0x804], bl
push ebx
push eax
call fcn.00626f50
push esi
lea eax, [ebp - 0x403]
mov byte [ebp - 0x404], bl
push ebx
push eax
call fcn.00626f50
mov ebx, str.RecoverFullTiltPasswords
push ebx
push 0x66c4b8
call fcn.00449974
add esp, 0x38
lea eax, [ebp - 0x100c]
push eax
push 0x20019
push 0
push str.SoftwareFull_Tilt_PokerUserInfo
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x42c8c8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
push str._s___Failed_to_find_the_Full_Tilt_Poker_registry_key___Error:_0x_.8x
call fcn.00449974
add esp, 0xc
xor eax, eax
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret
lea eax, [ebp - 0x1008]
mov dword [ebp - 0x1008], 0x400
push eax
lea eax, [ebp - 0xc04]
push eax
lea eax, [ebp - 0x1010]
push eax
push 0
push str.Username
push dword [ebp - 0x100c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x42c95f
push dword [ebp - 0x1008]
push ebx
push str._s___Found_the_encrypted_username__size_d___Now_decrypting_it...
call fcn.00449974
push 0x400
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x1008]
lea eax, [ebp - 0xc04]
push eax
call fcn.0040b39b
add esp, 0x1c
test eax, eax
je 0x42c949
lea eax, [ebp - 0x804]
push eax
push ebx
push str._s___Successfully_decrypted_the_username____s
jmp 0x42c968
push ebx
push str._s___Failed_to_decrypt_the_full_tilt_username
mov byte [ebp - 0x804], 0
call fcn.00449974
pop ecx
pop ecx
jmp 0x42c970
call esi
push eax
push ebx
push str._s___Failed_to_find_the__Full_Tilt_Poker_Username_registry_key___Error:_0x_.8x
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0x1008]
mov dword [ebp - 0x1008], 0x400
push eax
lea eax, [ebp - 0x1004]
push eax
lea eax, [ebp - 0x1010]
push eax
push 0
push str.Password
push dword [ebp - 0x100c]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x42c9f4
push dword [ebp - 0x1008]
push ebx
push str._s___Found_the_encrypted_password__size_d___Now_decrypting_it...
call fcn.00449974
push 0x400
lea eax, [ebp - 0x404]
push eax
push dword [ebp - 0x1008]
lea eax, [ebp - 0x1004]
push eax
call fcn.0040b39b
add esp, 0x1c
test eax, eax
je 0x42c9eb
lea eax, [ebp - 0x404]
push eax
push ebx
push str._s___Successfully_decrypted_the_password____s
jmp 0x42c9fd
mov byte [ebp - 0x404], 0
jmp 0x42ca05
call esi
push eax
push ebx
push str._s___Failed_to_find_the__Full_Tilt_Poker_Password_registry_key___Error:_0x_.8x
call fcn.00449974
add esp, 0xc
push dword [ebp - 0x100c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0x404]
push eax
call fcn.00631510
pop ecx
test eax, eax
je 0x42c8b8
push 0xffffffffffffffff
mov ecx, 0x66ae5d
lea eax, [ebp - 0x404]
push ecx
push eax
lea eax, [ebp - 0x804]
push eax
push ecx
push ecx
push 0x2d0
push 7
call fcn.00412c85
xor eax, eax
add esp, 0x20
inc eax
jmp 0x42c8ba