Function at 0x402bd0
Capabilities:
Query or enumerate registry value

Disassembly:
sub esp, 0x40
lea eax, [esp + 4]
push eax
push 0x20019
push 0
push str.SOFTWARENord_TecSnow_Flakes
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x402ee1
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea ecx, [esp + 4]
push edi
lea edx, [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
mov edi, 0x28
push str.FLOCKEN
push ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x28], 1
call esi
push 0x43b0cc
lea edx, [esp + 0x24]
push 0x43b158
push edx
call fcn.0040c9ce
add esp, 0xc
lea eax, [esp + 8]
lea ecx, [esp + 0x20]
lea edx, [esp + 0x10]
push eax
mov eax, dword [esp + 0x10]
push ecx
push edx
push 0
push str.GROESSE
push eax
mov dword [esp + 0x20], edi
call esi
push 0x43b0d0
lea ecx, [esp + 0x24]
push 0x43b158
push ecx
call fcn.0040c9ce
add esp, 0xc
lea edx, [esp + 8]
lea eax, [esp + 0x20]
lea ecx, [esp + 0x10]
push edx
mov edx, dword [esp + 0x10]
push eax
push ecx
push 0
push 0x43b144
push edx
mov dword [esp + 0x20], edi
call esi
push 0x43b0d4
lea eax, [esp + 0x24]
push 0x43b158
push eax
call fcn.0040c9ce
add esp, 0xc
lea ecx, [esp + 8]
lea edx, [esp + 0x20]
lea eax, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x10]
push edx
push eax
push 0
push 0x43b140
push ecx
mov dword [esp + 0x20], edi
call esi
lea edx, [esp + 0x1c]
lea eax, [esp + 0x20]
push edx
push 0x43b158
push eax
call fcn.0040c9ce
add esp, 0xc
lea ecx, [esp + 8]
mov dword [esp + 8], edi
push ecx
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x24]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push 0x43b13c
push ecx
call esi
lea edx, [esp + 0x18]
lea eax, [esp + 0x20]
push edx
push 0x43b158
push eax
call fcn.0040c9ce
add esp, 0xc
lea ecx, [esp + 8]
lea edx, [esp + 0x20]
lea eax, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x10]
push edx
push eax
push 0
push 0x43b138
push ecx
mov dword [esp + 0x20], edi
call esi
lea edx, [esp + 0x14]
lea eax, [esp + 0x20]
push edx
push 0x43b158
push eax
call fcn.0040c9ce
add esp, 0xc
lea ecx, [esp + 8]
lea edx, [esp + 0x20]
lea eax, [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x10]
push edx
push eax
push 0
push str.FENSTERBREITE
push ecx
mov dword [esp + 0x20], edi
call esi
push 0x43b0d8
lea edx, [esp + 0x24]
push 0x43b158
push edx
call fcn.0040c9ce
add esp, 0xc
lea eax, [esp + 8]
lea ecx, [esp + 0x20]
lea edx, [esp + 0x10]
push eax
mov eax, dword [esp + 0x10]
push ecx
push edx
push 0
push str.FENSTERHOEHE
push eax
mov dword [esp + 0x20], edi
call esi
push 0x43b0dc
lea ecx, [esp + 0x24]
push 0x43b158
push ecx
call fcn.0040c9ce
add esp, 0xc
lea edx, [esp + 8]
lea eax, [esp + 0x20]
lea ecx, [esp + 0x10]
push edx
mov edx, dword [esp + 0x10]
push eax
push ecx
push 0
mov dword [esp + 0x18], edi
push str.KRISTALLE
push edx
call esi
push 0x43b0e4
lea eax, [esp + 0x24]
push 0x43b158
push eax
call fcn.0040c9ce
mov eax, dword [0x43b0e4]
add esp, 0xc
test eax, eax
jne 0x402e17
mov dword [0x43b0e4], 0xa
lea ecx, [esp + 8]
lea edx, [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0x14]
push edx
push eax
push 0
push str.WACHSTUM
push ecx
mov dword [esp + 0x20], edi
call esi
push 0x43b0e8
lea edx, [esp + 0x24]
push 0x43b158
push edx
call fcn.0040c9ce
mov eax, dword [0x43b0e8]
add esp, 0xc
test eax, eax
jne 0x402e62
mov dword [0x43b0e8], 0xa
lea eax, [esp + 8]
lea ecx, [esp + 0x20]
push eax
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ecx
push edx
push 0
push str.NEUSTART
push eax
mov dword [esp + 0x20], edi
call esi
push 0x43b0ec
lea ecx, [esp + 0x24]
push 0x43b158
push ecx
call fcn.0040c9ce
mov eax, dword [0x43b0ec]
add esp, 0xc
test eax, eax
pop edi
pop esi
jne 0x402eaf
mov dword [0x43b0ec], 0x3c
mov edx, dword [esp + 4]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [esp + 0x14]
xor eax, eax
mov ah, byte [esp + 0xc]
and ecx, 0xff
mov al, byte [esp + 0x10]
shl eax, 8
or eax, ecx
mov dword [0x43b0e0], eax
call fcn.004033c0
add esp, 0x40
ret
mov eax, 0x3c
mov dword [0x43b0cc], 0x258
mov dword [0x43b0d0], 3
mov dword [0x43b0d4], 0xa
mov dword [0x43b0e0], 0xffffff
mov dword [0x43b0d8], eax
mov dword [0x43b0dc], eax
call fcn.004033c0
add esp, 0x40
ret