Function at 0x40e40c
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff60
push ebx
push esi
push edi
mov esi, 0x510fd8
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov edx, dword [edx]
add edx, edx
lea edx, [edx + edx*2]
lea edx, [edx + edx*4]
add edx, 0xb1
mov dword [eax], edx
push edx
push 1
call fcn.004dffb4
add esp, 8
mov edi, eax
test edi, edi
jne 0x40e44d
xor eax, eax
jmp 0x40e9e5
mov edx, dword [ebp + 8]
mov cl, byte [edx]
mov byte [edi + 0xb0], cl
and byte [edi], 0xfe
lea eax, [ebp - 8]
lea edx, [esi + 0xdb]
push eax
push 1
push 0
push edx
push reloc.WS2_32.DLL_bind
call sub.ADVAPI32.DLL_RegOpenKeyExA
test eax, eax
jne 0x40e4b9
mov dword [ebp - 0x10], 4
xor ecx, ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], ecx
push eax
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x14]
push edx
push ecx
lea eax, [esi + 0xfb]
push 0
push eax
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov eax, dword [ebp - 0xc]
mov dl, byte [edi]
and dl, 0xfe
and al, 1
or al, dl
mov byte [edi], al
mov ecx, dword [ebp - 8]
push ecx
call sub.ADVAPI32.DLL_RegCloseKey
lea eax, [ebp - 8]
lea edx, [esi + 0x103]
push eax
push 1
push 0
push edx
push reloc.WS2_32.DLL_bind
call sub.ADVAPI32.DLL_RegOpenKeyExA
test eax, eax
jne 0x40e509
mov dword [ebp - 0x10], 4
xor ecx, ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], ecx
push eax
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x14]
push edx
push ecx
lea eax, [esi + 0x116]
push 0
push eax
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov cl, byte [ebp - 0xc]
mov byte [edi + 0x8f], cl
lea eax, [ebp - 8]
lea edx, [esi + 0x11f]
push eax
push 1
push 0
push edx
push reloc.WS2_32.DLL_bind
call sub.ADVAPI32.DLL_RegOpenKeyExA
test eax, eax
jne 0x40e5c3
mov dword [ebp - 0x10], 4
xor ecx, ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], ecx
push eax
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x14]
push edx
push ecx
lea eax, [esi + 0x13e]
push 0
push eax
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov cl, byte [ebp - 0xc]
lea eax, [ebp - 0x10]
mov byte [edi + 0x90], cl
lea edx, [ebp - 0xc]
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], 0x44
push eax
push edx
lea ecx, [ebp - 0x14]
lea eax, [esi + 0x14d]
push ecx
push 0
push eax
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov cl, byte [ebp - 0xc]
lea eax, [ebp - 0x10]
mov byte [edi + 0x91], cl
lea edx, [edi + 0x92]
mov dword [ebp - 0x10], 4
push eax
push edx
lea ecx, [ebp - 0x14]
lea eax, [esi + 0x15c]
push ecx
push 0
push eax
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov ecx, dword [ebp - 8]
push ecx
call sub.ADVAPI32.DLL_RegCloseKey
lea eax, [ebp - 8]
lea edx, [esi + 0x172]
push eax
push 1
push 0
push edx
push reloc.WS2_32.DLL_bind
call sub.ADVAPI32.DLL_RegOpenKeyExA
test eax, eax
jne 0x40e658
mov dword [ebp - 0x10], 0x21
lea ecx, [ebp - 0x10]
lea eax, [edi + 0x4a]
push ecx
push eax
lea edx, [ebp - 0x14]
lea ecx, [esi + 0x193]
push edx
push 0
push ecx
mov eax, dword [ebp - 8]
push eax
call sub.ADVAPI32.DLL_RegQueryValueExA
mov dword [ebp - 0x10], 0x21
lea edx, [ebp - 0x10]
lea ecx, [edi + 0x6b]
push edx
push ecx
lea eax, [ebp - 0x14]
lea edx, [esi + 0x1a6]
push eax
push 0
push edx
mov ecx, dword [ebp - 8]
push ecx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov dword [ebp - 0x10], 4
lea eax, [ebp - 0x10]
lea edx, [edi + 4]
push eax
push edx
lea ecx, [ebp - 0x14]
lea eax, [esi + 0x1b8]
push ecx
push 0
push eax
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov ecx, dword [ebp - 8]
push ecx
call sub.ADVAPI32.DLL_RegCloseKey
lea eax, [ebp - 8]
lea edx, [esi + 0x1c2]
push eax
push 1
push 0
push edx
push reloc.WS2_32.DLL_bind
call sub.ADVAPI32.DLL_RegOpenKeyExA
test eax, eax
jne 0x40e6e4
mov dword [ebp - 0x10], 4
xor ecx, ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], ecx
push eax
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x14]
push edx
push ecx
lea eax, [esi + 0x1e8]
push 0
push eax
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov cl, byte [ebp - 0xc]
xor eax, eax
mov byte [edi + 0x8d], cl
lea edx, [ebp - 0x10]
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], eax
push edx
lea ecx, [ebp - 0xc]
lea eax, [ebp - 0x14]
push ecx
push eax
lea edx, [esi + 0x1ee]
push 0
push edx
mov ecx, dword [ebp - 8]
push ecx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov al, byte [ebp - 0xc]
mov byte [edi + 0x8e], al
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegCloseKey
lea ecx, [ebp - 8]
lea eax, [esi + 0x1f5]
push ecx
push 1
push 0
push eax
push reloc.WS2_32.DLL_bind
call sub.ADVAPI32.DLL_RegOpenKeyExA
test eax, eax
jne 0x40e778
mov dword [ebp - 0x10], 4
xor edx, edx
lea ecx, [ebp - 0x10]
mov dword [ebp - 0xc], edx
push ecx
lea eax, [ebp - 0xc]
lea edx, [ebp - 0x14]
push eax
push edx
lea ecx, [esi + 0x21c]
push 0
push ecx
mov eax, dword [ebp - 8]
push eax
call sub.ADVAPI32.DLL_RegQueryValueExA
mov eax, dword [ebp - 0xc]
mov dl, byte [edi]
and al, 1
and dl, 0xef
shl eax, 4
or al, dl
xor ecx, ecx
mov byte [edi], al
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], ecx
push eax
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x14]
push edx
push ecx
lea eax, [esi + 0x224]
push 0
push eax
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov cl, byte [ebp - 0xc]
mov byte [edi + 0x96], cl
mov eax, dword [ebp - 8]
push eax
call sub.ADVAPI32.DLL_RegCloseKey
xor edx, edx
lea ebx, [edi + 0xb1]
mov dword [ebp - 4], edx
mov ecx, dword [ebp + 8]
lea eax, [ecx + 6]
mov dword [ebp - 0x20], eax
jmp 0x40e9d5
and byte [ebx], 0xfe
mov ecx, 8
mov byte [ebx + 0x1c], 0x64
mov byte [ebx + 0x1d], 0xc8
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
mov dword [ebx + 4], edx
push esi
push edi
lea edi, [ebp - 0xa0]
mov eax, edi
add esi, 0x22a
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
pop edi
pop esi
lea edx, [ebp - 0xa0]
push edx
call fcn.004e0ef8
pop ecx
xor edx, edx
lea ecx, [ebp - 0xa0]
add eax, ecx
mov dword [ebp - 0x18], eax
xor eax, eax
mov ecx, dword [ebx + 4]
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
mov al, byte [ebp - 0x19]
push eax
xor eax, eax
mov dl, byte [ebp - 0x1a]
push edx
lea edx, [esi + 0x24b]
mov cl, byte [ebp - 0x1b]
push ecx
mov al, byte [ebp - 0x1c]
push eax
push edx
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.004e3fec
add esp, 0x18
lea eax, [ebp - 8]
push eax
push 1
push 0
lea edx, [ebp - 0xa0]
push edx
push reloc.WS2_32.DLL_bind
call sub.ADVAPI32.DLL_RegOpenKeyExA
test eax, eax
jne 0x40e9cb
mov dword [ebp - 0x10], 4
xor ecx, ecx
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], ecx
push eax
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x14]
push edx
push ecx
lea eax, [esi + 0x257]
push 0
push eax
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov eax, ebx
mov edx, dword [ebp - 0xc]
and dl, 1
mov cl, byte [eax]
and cl, 0xfe
or dl, cl
lea ecx, [ebp - 0x10]
mov byte [eax], dl
lea eax, [ebp - 0xc]
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], 0x64
push ecx
push eax
lea edx, [ebp - 0x14]
lea ecx, [esi + 0x264]
push edx
push 0
push ecx
mov eax, dword [ebp - 8]
push eax
call sub.ADVAPI32.DLL_RegQueryValueExA
mov dl, byte [ebp - 0xc]
lea ecx, [ebp - 0x10]
mov byte [ebx + 0x1c], dl
lea eax, [ebp - 0xc]
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], 0xc8
push ecx
push eax
lea edx, [ebp - 0x14]
lea ecx, [esi + 0x271]
push edx
push 0
push ecx
mov eax, dword [ebp - 8]
push eax
call sub.ADVAPI32.DLL_RegQueryValueExA
mov dl, byte [ebp - 0xc]
lea eax, [ebp - 0x10]
mov byte [ebx + 0x1d], dl
lea edx, [ebp - 0xc]
mov dword [ebp - 0x10], 4
mov ecx, dword [ebx + 4]
mov dword [ebp - 0xc], ecx
push eax
push edx
lea ecx, [ebp - 0x14]
push ecx
lea eax, [esi + 0x27f]
push 0
push eax
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov ecx, dword [ebp - 0xc]
lea eax, [esi + 0x287]
mov dword [ebx + 8], ecx
mov dword [ebp - 0x10], 4
push eax
call sub.WS2_32.DLL_inet_addr
mov dword [ebp - 0xc], eax
lea edx, [ebp - 0x10]
push edx
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x14]
push eax
lea edx, [esi + 0x295]
push 0
push edx
mov ecx, dword [ebp - 8]
push ecx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov eax, dword [ebp - 0xc]
xor edx, edx
mov dword [ebx + 0xc], eax
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], edx
push ecx
lea eax, [ebp - 0xc]
lea edx, [ebp - 0x14]
push eax
push edx
lea ecx, [esi + 0x2a2]
push 0
push ecx
mov eax, dword [ebp - 8]
push eax
call sub.ADVAPI32.DLL_RegQueryValueExA
mov edx, dword [ebp - 0xc]
xor ecx, ecx
mov dword [ebx + 0x10], edx
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], ecx
push eax
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x14]
push edx
push ecx
lea eax, [esi + 0x2af]
push 0
push eax
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov ecx, dword [ebp - 0xc]
xor eax, eax
mov dword [ebx + 0x14], ecx
lea edx, [ebp - 0x10]
mov dword [ebp - 0x10], 4
mov dword [ebp - 0xc], eax
push edx
lea ecx, [ebp - 0xc]
lea eax, [ebp - 0x14]
push ecx
push eax
lea edx, [esi + 0x2bd]
push 0
push edx
mov ecx, dword [ebp - 8]
push ecx
call sub.ADVAPI32.DLL_RegQueryValueExA
mov eax, dword [ebp - 0xc]
mov dword [ebx + 0x18], eax
mov edx, dword [ebp - 8]
push edx
call sub.ADVAPI32.DLL_RegCloseKey
inc dword [ebp - 4]
add dword [ebp - 0x20], 8
add ebx, 0x1e
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
cmp eax, dword [ebp - 4]
jg 0x40e791
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret