Function at 0x419cf5
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x378
mov eax, 0x49e7d0
call fcn.0047bb4d
mov eax, dword [ebp + 8]
mov esi, ecx
xor ebx, ebx
mov dword [ebp - 0x2e8], esi
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [ebp - 4], ebx
cmp dword [eax + 0x14], 8
mov dword [ebp - 0x2e4], ebx
jb 0x419d2a
mov eax, dword [eax]
lea ecx, [ebp - 0x2e4]
push ecx
push 0x20019
push ebx
push eax
push reloc.OLEAUT32.DLL_SysReAllocString
call dword [sym.imp.ADVAPI32.DLL_RegOpenKeyExW]
cmp eax, ebx
je 0x419ddf
push eax
lea ecx, [ebp - 0x2a4]
call fcn.00407d0d
pop ecx
mov ebx, eax
mov byte [ebp - 4], 1
lea eax, [ebp - 0x384]
push eax
call fcn.004090fb
mov edi, eax
mov byte [ebp - 4], 2
push 0x4b15d0
push edi
call fcn.0040b677
push edi
mov ecx, ebx
call fcn.0040b9a3
add esp, 0xc
lea ebx, [ebp - 0x2dc]
mov ecx, edi
call fcn.00409165
mov byte [ebp - 4], 3
cmp dword [ebp - 0x2c8], 8
mov eax, dword [ebp - 0x2dc]
jae 0x419da8
mov eax, ebx
push eax
push 2
pop ecx
call fcn.0040d57f
pop ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2dc]
call fcn.00403d16
mov byte [ebp - 4], 1
lea eax, [ebp - 0x384]
call fcn.00407bad
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2a4]
jmp 0x41a21c
lea ecx, [ebp - 0x288]
call fcn.00404c9b
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2dc]
call fcn.00404c9b
mov byte [ebp - 4], 5
lea eax, [ebp - 0x2a4]
push eax
mov eax, 0x4b162c
mov dword [ebp - 0x2e0], ebx
call fcn.00404cae
mov byte [ebp - 4], 6
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x2a4]
lea ecx, [ebp - 0x288]
call fcn.00404d40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00403d16
cmp dword [ebp - 0x274], 8
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x2e0], 0x258
jae 0x419e5a
lea eax, [ebp - 0x288]
mov edi, dword [sym.imp.ADVAPI32.DLL_RegQueryValueExW]
lea ecx, [ebp - 0x2e0]
push ecx
lea ecx, [ebp - 0x26c]
push ecx
push ebx
push ebx
push eax
push dword [ebp - 0x2e4]
call edi
cmp eax, ebx
jne 0x419ed7
push dword [ebp - 0x26c]
lea eax, [ebp - 0x2dc]
push 0x4afb7c
call fcn.0040cc9d
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0041a655
add esp, 0x14
mov byte [ebp - 4], 7
call fcn.0041a352
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2a4]
call fcn.00403d16
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c0]
call fcn.00403d16
lea eax, [ebp - 0x2a4]
push eax
mov eax, 0x4b1648
call fcn.00404cae
mov byte [ebp - 4], 0xb
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x2a4]
lea ecx, [ebp - 0x288]
call fcn.00404d40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00403d16
cmp dword [ebp - 0x274], 8
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x2e0], 0x258
jae 0x419f2e
lea eax, [ebp - 0x288]
lea ecx, [ebp - 0x2e0]
push ecx
lea ecx, [ebp - 0x26c]
push ecx
push ebx
push ebx
push eax
push dword [ebp - 0x2e4]
call edi
cmp eax, ebx
jne 0x419ff8
mov edx, dword [ebp - 0x2e0]
shr edx, 1
xor ecx, ecx
dec edx
cmp edx, ebx
jbe 0x419f7b
lea eax, [ebp + ecx*2 - 0x26c]
cmp word [eax], bx
jne 0x419f76
push 0x3b
pop esi
mov word [eax], si
mov esi, dword [ebp - 0x2e8]
inc ecx
cmp ecx, edx
jb 0x419f5e
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x26c]
call fcn.00404cae
mov byte [ebp - 4], 0xc
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x2a4]
lea ecx, [ebp - 0x2dc]
call fcn.00404d40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00403d16
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0041a655
add esp, 0xc
mov byte [ebp - 4], 0xd
call fcn.0041a352
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x2a4]
call fcn.00403d16
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c0]
call fcn.00403d16
lea eax, [ebp - 0x2a4]
push eax
mov eax, 0x4b1664
call fcn.00404cae
mov byte [ebp - 4], 0x11
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x2a4]
lea ecx, [ebp - 0x288]
call fcn.00404d40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00403d16
cmp dword [ebp - 0x274], 8
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x2e0], 0x258
jae 0x41a04f
lea eax, [ebp - 0x288]
lea ecx, [ebp - 0x2e0]
push ecx
lea ecx, [ebp - 0x26c]
push ecx
push ebx
push ebx
push eax
push dword [ebp - 0x2e4]
call edi
cmp eax, ebx
jne 0x41a0e9
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x26c]
call fcn.00404cae
mov byte [ebp - 4], 0x12
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x2a4]
lea ecx, [ebp - 0x2dc]
call fcn.00404d40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00403d16
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0041a655
add esp, 0xc
mov byte [ebp - 4], 0x13
call fcn.0041a352
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x2a4]
call fcn.00403d16
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c0]
call fcn.00403d16
lea eax, [ebp - 0x2a4]
push eax
mov eax, 0x4ad2d4
call fcn.00404cae
mov byte [ebp - 4], 0x17
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x2a4]
lea ecx, [ebp - 0x288]
call fcn.00404d40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00403d16
cmp dword [ebp - 0x274], 8
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x2e0], 0x258
jae 0x41a140
lea eax, [ebp - 0x288]
lea ecx, [ebp - 0x2e0]
push ecx
lea ecx, [ebp - 0x26c]
push ecx
push ebx
push ebx
push eax
push dword [ebp - 0x2e4]
call edi
cmp eax, ebx
jne 0x41a204
mov edx, dword [ebp - 0x2e0]
shr edx, 1
xor ecx, ecx
dec edx
cmp edx, ebx
jbe 0x41a187
lea eax, [ebp + ecx*2 - 0x26c]
cmp word [eax], bx
jne 0x41a182
push 0x3b
pop edi
mov word [eax], di
inc ecx
cmp ecx, edx
jb 0x41a170
lea eax, [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x26c]
call fcn.00404cae
mov byte [ebp - 4], 0x18
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x2a4]
lea ecx, [ebp - 0x2dc]
call fcn.00404d40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00403d16
lea eax, [ebp - 0x2dc]
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x2c0]
push eax
call fcn.0041a655
add esp, 0xc
mov byte [ebp - 4], 0x19
call fcn.0041a352
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x2a4]
call fcn.00403d16
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2c0]
call fcn.00403d16
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2dc]
call fcn.00403d16
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x288]
call fcn.00403d16
push dword [ebp - 0x2e4]
call dword [sym.imp.ADVAPI32.DLL_RegCloseKey]
or dword [ebp - 4], 0xffffffff
mov eax, esi
call fcn.0047bbd0
ret 4