Function at 0x4c1eac
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 7
push 0
push 0
dec ecx
jne 0x4c1eb5
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov ebx, eax
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 4]
call fcn.004053f4
mov eax, dword [ebp - 8]
call fcn.004053f4
mov eax, dword [ebp + 0xc]
call fcn.004053f4
xor eax, eax
push ebp
push 0x4c225a
push dword fs:[eax]
mov dword fs:[eax], esp
cmp byte [ebx + 0x88], 0
je 0x4c2127
lea eax, [ebp - 0x10]
mov edx, dword [ebx + 0x74]
call fcn.00404fcc
mov byte [ebp - 9], 0
mov eax, esi
mov edx, dword [ebp + 0xc]
call fcn.00404f88
xor ecx, ecx
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.004c0c88
test al, al
je 0x4c2116
lea eax, [ebp - 0x14]
push eax
push 0
lea eax, [ebp - 0x18]
push eax
push 0
mov eax, dword [ebp - 8]
call fcn.00405404
push eax
mov eax, dword [ebx + 0x80]
mov eax, dword [eax + 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
jne 0x4c2116
cmp dword [ebp - 0x18], 1
je 0x4c1f66
cmp dword [ebp - 0x18], 2
jne 0x4c1fd3
cmp dword [ebp - 0x14], 1
jne 0x4c1f7c
mov eax, esi
call fcn.00404f34
mov byte [ebp - 9], 1
jmp 0x4c2116
mov eax, dword [ebp - 0x14]
call fcn.00402df4
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x1c]
push eax
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.00405404
push eax
mov eax, dword [ebx + 0x80]
mov eax, dword [eax + 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
sete byte [ebp - 9]
lea edx, [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
call fcn.0040ce40
mov edx, dword [ebp - 0x20]
mov eax, esi
call fcn.00404f88
mov eax, dword [ebp - 0x1c]
call fcn.00402e24
jmp 0x4c2116
cmp dword [ebp - 0x18], 7
jne 0x4c2074
cmp dword [ebp - 0x14], 1
jne 0x4c1ff3
mov eax, esi
call fcn.00404f34
mov byte [ebp - 9], 1
jmp 0x4c2116
lea ecx, [ebp - 0x24]
mov eax, dword [ebp - 0x14]
inc eax
mov edx, 0x4c2278
call fcn.004a9d0c
mov edx, dword [ebp - 0x24]
mov eax, esi
call fcn.00404f88
mov eax, dword [esi]
call fcn.00405404
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x1c]
push eax
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.00405404
push eax
mov eax, dword [ebx + 0x80]
mov eax, dword [eax + 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
sete byte [ebp - 9]
mov eax, esi
mov ecx, 0x4c2284
mov edx, 0x4c2278
call fcn.004a9f74
test al, al
jne 0x4c2042
mov eax, dword [esi]
call fcn.00405204
mov edx, eax
sub edx, 4
mov eax, esi
mov ecx, 4
call fcn.004054a4
jmp 0x4c2116
cmp dword [ebp - 0x18], 4
jne 0x4c20bb
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.00405404
push eax
mov eax, dword [ebx + 0x80]
mov eax, dword [eax + 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
sete byte [ebp - 9]
lea edx, [ebp - 0x28]
mov eax, dword [ebp - 0x18]
call fcn.0040c290
mov edx, dword [ebp - 0x28]
mov eax, esi
call fcn.00404f88
jmp 0x4c2116
cmp dword [ebp - 0x18], 3
jne 0x4c2116
mov eax, dword [ebp - 0x14]
call fcn.00402df4
mov edi, eax
lea eax, [ebp - 0x14]
push eax
push edi
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.00405404
push eax
mov eax, dword [ebx + 0x80]
mov eax, dword [eax + 4]
push eax
call sub.advapi32.dll_RegQueryValueExA_1
test eax, eax
sete byte [ebp - 9]
cmp byte [ebp - 9], 0
je 0x4c210f
lea ecx, [ebp - 0x2c]
mov edx, dword [ebp - 0x14]
mov eax, edi
call fcn.004bee2c
mov edx, dword [ebp - 0x2c]
mov eax, esi
call fcn.00404f88
mov eax, edi
call fcn.00402e24
xor ecx, ecx
mov edx, dword [ebp - 0x10]
mov eax, ebx
call fcn.004c0c88
jmp 0x4c2222
mov byte [ebp - 9], 0
mov eax, esi
mov edx, dword [ebp + 0xc]
call fcn.00404f88
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
mov eax, ebx
mov ebx, dword [eax]
call dword [ebx + 0x30]
mov ebx, eax
test ebx, ebx
je 0x4c2222
mov al, byte [ebx + 0x10]
cmp al, 4
jne 0x4c2171
lea edx, [ebp - 0x30]
mov eax, dword [ebx + 0x14]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov edx, dword [ebp - 0x30]
mov eax, esi
call fcn.00404f88
mov byte [ebp - 9], 1
jmp 0x4c2222
cmp al, 3
jne 0x4c2193
lea edx, [ebp - 0x34]
mov eax, dword [ebx + 0x14]
call fcn.0040ce40
mov edx, dword [ebp - 0x34]
mov eax, esi
call fcn.00404f88
mov byte [ebp - 9], 1
jmp 0x4c2222
cmp al, 2
jne 0x4c21b2
lea edx, [ebp - 0x38]
mov eax, dword [ebx + 0x14]
call fcn.0040c290
mov edx, dword [ebp - 0x38]
mov eax, esi
call fcn.00404f88
mov byte [ebp - 9], 1
jmp 0x4c2222
cmp al, 6
jne 0x4c21d8
fld qword [ebx + 0x18]
add esp, 0xfffffff4
fstp xword [esp]
wait
lea eax, [ebp - 0x3c]
call fcn.0040da8c
mov edx, dword [ebp - 0x3c]
mov eax, esi
call fcn.00404f88
mov byte [ebp - 9], 1
jmp 0x4c2222
cmp al, 1
jne 0x4c2202
cmp byte [ebx + 0x11], 0
je 0x4c21f0
mov eax, esi
mov edx, 0x4c2290
call fcn.00404f88
jmp 0x4c21fc
mov eax, esi
mov edx, 0x4c22a0
call fcn.00404f88
mov byte [ebp - 9], 1
jmp 0x4c2222
cmp al, 5
jne 0x4c2222
lea ecx, [ebp - 0x40]
mov edx, dword [ebx + 0x18]
mov eax, dword [ebx + 0x14]
call fcn.004bee2c
mov edx, dword [ebp - 0x40]
mov eax, esi
call fcn.00404f88
mov byte [ebp - 9], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c2261
lea eax, [ebp - 0x40]
mov edx, 9
call fcn.00404f58
lea eax, [ebp - 0x10]
call fcn.00404f34
lea eax, [ebp - 8]
mov edx, 2
call fcn.00404f58
lea eax, [ebp + 0xc]
call fcn.00404f34
ret