Function at 0x404ac0
Capabilities:
Query or enumerate registry value

Disassembly:
mov eax, dword fs:[0]
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x404e4a
push eax
mov dword fs:[0], esp
sub esp, 0x140
lea ecx, [ebp - 0x10]
push ebx
push esi
call sub.MFC40.DLL_CString::CString
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x24]
call sub.MFC40.DLL_CString::CString
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call sub.MFC40.DLL_CString::CString
mov byte [ebp - 4], 2
mov ecx, dword [ebp + 0xc]
call sub.MFC40.DLL_CString::Empty
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x1c]
push eax
call fcn.0041559a
push 0x419150
lea ecx, [ebp - 0x14]
call sub.MFC40.DLL_CString::CString_1
mov esi, eax
push 1
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
push eax
call sub.MFC40.DLL_CString::Right
mov byte [ebp - 4], 4
mov ecx, dword [esi]
mov eax, dword [eax]
push ecx
push eax
call dword [sym.imp.MSVCRT40.dll__mbscmp]
mov byte [ebp - 4], 3
add esp, 8
cmp eax, 1
sbb eax, eax
inc eax
mov dword [ebp - 0x4c], eax
call fcn.00404e2a
mov byte [ebp - 4], 2
call fcn.00404e32
cmp dword [ebp - 0x4c], 0
je 0x404b93
push 0x419150
lea ecx, [ebp - 0x14]
call sub.MFC40.DLL_CString::CString_1
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call sub.MFC40.DLL_CString::operator
mov byte [ebp - 4], 2
call fcn.00404c97
push 0x5a7
lea ecx, [ebp - 0x10]
call sub.MFC40.DLL_CString::LoadStringA
lea eax, [ebp - 0x10]
lea ecx, [ebp - 0x18]
push eax
push 0x4191bc
call sub.MFC40.DLL_CString::CString_1
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x14]
push eax
call sub.MFC40.DLL_operator
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 7
call fcn.0041559a
mov byte [ebp - 4], 6
call fcn.00404e22
mov byte [ebp - 4], 2
call fcn.00404e1a
push 0x5c0
lea ecx, [ebp - 0x24]
call sub.MFC40.DLL_CString::LoadStringA
lea eax, [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
push eax
push 0x20019
push 0
push ecx
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x404c53
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x14c]
push eax
lea edx, [ebp - 0x14]
push ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], 0x104
push edx
push 0
push str.cabdefaultopen
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x404c49
cmp dword [ebp - 0x14], 1
jne 0x404c49
lea eax, [ebp - 0x14c]
lea ecx, [ebp - 0x10]
push eax
call fcn.00415798
mov eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x20]
call sub.MFC40.DLL_CString::CString
push 0xa
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 8
call sub.MFC40.DLL_CStringList::CStringList
mov eax, dword [ebp - 0x10]
mov byte [ebp - 4], 9
cmp dword [eax - 8], 0
je 0x404d6a
push 0x7c
lea ecx, [ebp - 0x10]
call sub.MFC40.DLL_CString::Find
cmp eax, 0xffffffff
jne 0x404c9f
lea eax, [ebp - 0x10]
lea ecx, [ebp - 0x20]
push eax
call fcn.0041559a
jmp 0x404ccc
push 0x7c
lea ecx, [ebp - 0x10]
call sub.MFC40.DLL_CString::Find
push eax
lea ecx, [ebp - 0x10]
lea eax, [ebp - 0x14]
push eax
call sub.MFC40.DLL_CString::Left
push eax
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0xa
call fcn.0041559a
mov byte [ebp - 4], 9
call fcn.00404e02
lea ecx, [ebp - 0x48]
call sub.MFC40.DLL_CStringList::RemoveAll
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x20]
push ecx
push edx
call fcn.0040b5b0
add esp, 0xc
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x2c], ecx
test ecx, ecx
jne 0x404dac
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x20]
lea edx, [ebp - 0x18]
mov eax, dword [eax - 8]
sub eax, dword [ecx - 8]
lea ecx, [ebp - 0x10]
push eax
push edx
call sub.MFC40.DLL_CString::Right
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xb
call fcn.0041559a
mov byte [ebp - 4], 9
call fcn.00404dfa
push 0x7c
lea ecx, [ebp - 0x10]
call sub.MFC40.DLL_CString::Find
test eax, eax
jne 0x404d5d
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x4c]
mov eax, dword [eax - 8]
dec eax
push eax
push ecx
lea ecx, [ebp - 0x10]
call sub.MFC40.DLL_CString::Right
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 0xc
call fcn.0041559a
mov byte [ebp - 4], 9
call fcn.00404df2
mov eax, dword [ebp - 0x10]
cmp dword [eax - 8], 0
jne 0x404c7a
mov byte [ebp - 4], 8
call fcn.00404e0a
mov byte [ebp - 4], 2
call fcn.00404e12
mov byte [ebp - 4], 1
call fcn.00404e3a
mov byte [ebp - 4], 0
call fcn.00404e42
mov dword [ebp - 4], 0xffffffff
call fcn.00404e54
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + 0xc]
add eax, 8
push eax
call fcn.0041559a
mov byte [ebp - 4], 8
call fcn.00404e0a
mov byte [ebp - 4], 2
call fcn.00404e12
mov byte [ebp - 4], 1
call fcn.00404e3a
mov byte [ebp - 4], 0
call fcn.00404e42
mov dword [ebp - 4], 0xffffffff
call fcn.00404e54
mov eax, 1
jmp 0x404d9c