Function at 0x40ec28
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffaf0
lea eax, [ebp - 4]
push eax
push 0x6e9b77
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegOpenKeyA
test eax, eax
jne 0x40f48f
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6e9b9e
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ec8e
push 0x6f6b2c
push 0x6e9ba8
lea edx, [ebp - 0x510]
push edx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6e9bab
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ecd0
push 0x6f6b38
push 0x6e9bb2
lea ecx, [ebp - 0x510]
push ecx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6e9bb5
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ed12
push 0x6f6b34
push 0x6e9bbc
lea eax, [ebp - 0x510]
push eax
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6e9bbf
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ed54
push 0x6f6b58
push 0x6e9bc6
lea edx, [ebp - 0x510]
push edx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6e9bc9
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ed96
push 0x6f6b30
push 0x6e9bd2
lea ecx, [ebp - 0x510]
push ecx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6e9bd5
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40edd8
push 0x6f6b3c
push 0x6e9bdf
lea eax, [ebp - 0x510]
push eax
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6e9be2
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ee1a
push 0x6f6b40
push 0x6e9bec
lea edx, [ebp - 0x510]
push edx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6e9bef
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ee5c
push 0x6f6b54
push 0x6e9bfa
lea ecx, [ebp - 0x510]
push ecx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6e9bfd
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ee9e
push 0x6f6b44
push 0x6e9c06
lea eax, [ebp - 0x510]
push eax
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6e9c09
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40eee0
push 0x6f6b48
push 0x6e9c13
lea edx, [ebp - 0x510]
push edx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6e9c16
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ef22
push 0x6f6b4c
push 0x6e9c24
lea ecx, [ebp - 0x510]
push ecx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6e9c27
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ef64
push 0x6e73e4
push 0x6e9c38
lea eax, [ebp - 0x510]
push eax
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6e9c3b
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40efa6
push 0x80c210
push 0x6e9c43
lea edx, [ebp - 0x510]
push edx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6e9c46
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40efe8
push 0x80c214
push 0x6e9c51
lea ecx, [ebp - 0x510]
push ecx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6e9c54
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f02a
push 0x6e7468
push 0x6e9c5f
lea eax, [ebp - 0x510]
push eax
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6e9c62
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f06c
push 0x6e746c
push 0x6e9c6b
lea edx, [ebp - 0x510]
push edx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6e9c6e
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f0ae
push 0x6e7478
push 0x6e9c75
lea ecx, [ebp - 0x510]
push ecx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6e9c78
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f0f0
push 0x6e7470
push 0x6e9c88
lea eax, [ebp - 0x510]
push eax
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6e9c8b
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f132
push 0x6e7474
push 0x6e9c97
lea edx, [ebp - 0x510]
push edx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6e9c9a
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f16f
push 0x7676ec
lea ecx, [ebp - 0x510]
push ecx
call fcn.0049e35c
add esp, 8
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6e9ca4
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f1ac
push 0xa19d94
lea eax, [ebp - 0x510]
push eax
call fcn.0049e530
add esp, 8
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6e9cab
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f1ee
push 0x6e7408
push 0x6e9cb5
lea edx, [ebp - 0x510]
push edx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6e9cb8
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f230
push 0x6e743c
push 0x6e9cc2
lea ecx, [ebp - 0x510]
push ecx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6e9cc5
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f272
push 0x6e7444
push 0x6e9cd0
lea eax, [ebp - 0x510]
push eax
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6e9cd3
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f2b4
push 0x6e7440
push 0x6e9cdd
lea edx, [ebp - 0x510]
push edx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6e9ce0
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f2f6
push 0x6e7448
push 0x6e9ce9
lea ecx, [ebp - 0x510]
push ecx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6e9cec
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f338
push 0x6e744c
push 0x6e9cfa
lea eax, [ebp - 0x510]
push eax
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6e9cfd
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f37a
push 0x6e7450
push 0x6e9d0b
lea edx, [ebp - 0x510]
push edx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6e9d0e
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f3bc
push 0x6e7454
push 0x6e9d1d
lea ecx, [ebp - 0x510]
push ecx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6e9d20
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f3fe
push 0x6e7458
push 0x6e9d2b
lea eax, [ebp - 0x510]
push eax
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6e9d2e
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f440
push 0x6e745c
push 0x6e9d3f
lea edx, [ebp - 0x510]
push edx
call fcn.00670f10
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6e9d42
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40f482
push 0x6f6924
push 0x6e9d51
lea ecx, [ebp - 0x510]
push ecx
call fcn.00670f10
add esp, 0xc
call fcn.0044a800
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegCloseKey
mov esp, ebp
pop ebp
ret