Function at 0x40d6c0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff5c4
lea eax, [ebp - 0xc]
push eax
push 0x6edf0b
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegOpenKeyA
test eax, eax
jne 0x40e2bd
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6edf32
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40d75d
push 0
lea edx, [ebp - 0x93c]
push edx
call fcn.0066ebe8
add esp, 8
test eax, eax
jne 0x40d75d
lea ecx, [ebp - 0x93c]
push ecx
push 0x830718
call fcn.0066ce08
add esp, 8
push 0x830718
call fcn.0066ce38
pop ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
movsx edx, byte [eax + 0x830717]
cmp edx, 0x5c
jne 0x40d75d
mov ecx, dword [ebp - 0x3c]
mov byte [ecx + 0x830717], 0
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6edf3c
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40d79f
push 0x6eba08
push 0x6edf45
lea eax, [ebp - 0x93c]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6edf48
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40d7e1
push 0x6ebc7c
push 0x6edf58
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6edf5b
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40d823
push 0x6ebc80
push 0x6edf6a
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6edf6d
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40d865
push 0x6ebd2c
push 0x6edf77
lea eax, [ebp - 0x93c]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6edf7a
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40d8a7
push 0x6eb9a8
push 0x6edf87
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6edf8a
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40d8e9
push 0x6fb2f0
push 0x6edf8e
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6edf91
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40d930
mov al, byte [ebp - 0x93c]
test al, al
je 0x40d930
lea edx, [ebp - 0x93c]
push edx
push 0x831fd7
call fcn.0066ce08
add esp, 8
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6edf9b
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40d9b4
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x43c]
push eax
call fcn.0066ce08
add esp, 8
push 0x5c
lea edx, [ebp - 0x43c]
push edx
call fcn.0066cf51
add esp, 8
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
test ecx, ecx
je 0x40d9b4
push 0x6edfa5
mov eax, dword [ebp - 4]
inc eax
push eax
call fcn.0066d004
add esp, 8
test eax, eax
je 0x40d9b4
lea edx, [ebp - 0x93c]
push edx
push 0x8320db
call fcn.0066ce08
add esp, 8
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6edfb2
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40d9fb
mov cl, byte [ebp - 0x93c]
test cl, cl
je 0x40d9fb
lea eax, [ebp - 0x93c]
push eax
push 0x8321df
call fcn.0066ce08
add esp, 8
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6edfb9
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40da3d
push 0x6ebcb0
push 0x6edfc8
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6edfcb
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40da7f
push 0x6ebc44
push 0x6edfd5
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6edfd8
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40dac1
push 0x6ebc64
push 0x6edfe3
lea eax, [ebp - 0x93c]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6edfe6
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40db03
push 0x6ebc9c
push 0x6edff3
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6edff6
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40db45
push 0x6ebca0
push 0x6ee001
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6ee004
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40db87
push 0x6ebca4
push 0x6ee00d
lea eax, [ebp - 0x93c]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6ee010
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40dbc9
push 0x6ebd10
push 0x6ee019
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6ee01c
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40dc0b
push 0x6ebd20
push 0x6ee027
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6ee02a
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40dc4d
push 0x6ebd24
push 0x6ee03b
lea eax, [ebp - 0x93c]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6ee03e
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40dc8f
push 0x6ebcac
push 0x6ee04f
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6ee052
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40dcd1
push 0x819be4
push 0x6ee05a
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6ee05d
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40dd13
push 0x819be8
push 0x6ee068
lea eax, [ebp - 0x93c]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6ee06b
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40dd55
push 0x6ebd30
push 0x6ee076
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6ee079
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40dd97
push 0x6ebd34
push 0x6ee082
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6ee085
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ddd9
push 0x6ebd40
push 0x6ee08c
lea eax, [ebp - 0x93c]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6ee08f
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40de1b
push 0x6ebd38
push 0x6ee09f
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6ee0a2
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40de5d
push 0x6ebd3c
push 0x6ee0ae
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6ee0b1
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40de9a
push 0x7707f8
lea eax, [ebp - 0x93c]
push eax
call fcn.0049e644
add esp, 8
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6ee0bb
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ded7
push 0xa27768
lea edx, [ebp - 0x93c]
push edx
call fcn.0049e818
add esp, 8
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6ee0c2
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40df19
push 0x6ebd00
push 0x6ee0cd
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6ee0d0
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40df5b
push 0x6fb160
push 0x6ee0df
lea eax, [ebp - 0x93c]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6ee0e2
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40df9d
push 0x6eb9ac
push 0x6ee0ec
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6ee0ef
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40dfdf
push 0x6ebc5c
push 0x6ee0fb
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6ee0fe
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40e021
push 0x6ebc60
push 0x6ee108
lea eax, [ebp - 0x93c]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6ee10b
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40e063
push 0x6eb9c4
push 0x6ee11d
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6ee120
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40e0a5
push 0x6eb9b8
push 0x6ee12e
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6ee131
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40e0e7
push 0x6eb9bc
push 0x6ee13e
lea eax, [ebp - 0x93c]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6ee141
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40e129
push 0x770958
push 0x6ee14c
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6ee14f
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40e16b
push 0x770954
push 0x6ee15b
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6ee15e
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40e1ad
push 0x770960
push 0x6ee169
lea eax, [ebp - 0x93c]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6ee16c
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40e1ef
push 0x6ebc6c
push 0x6ee179
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea ecx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x93c]
push eax
lea edx, [ebp - 0x10]
push edx
push 0
push 0x6ee17c
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40e231
push 0x6ebc70
push 0x6ee186
lea ecx, [ebp - 0x93c]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea eax, [ebp - 0x14]
push eax
lea edx, [ebp - 0x93c]
push edx
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0x6ee189
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40e273
push 0x6ebc74
push 0x6ee196
lea eax, [ebp - 0x93c]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0x14], 0x100
lea edx, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x93c]
push ecx
lea eax, [ebp - 0x10]
push eax
push 0
push 0x6ee199
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40e2b5
push 0x6ebee4
push 0x6ee1a2
lea edx, [ebp - 0x93c]
push edx
call fcn.0067132c
add esp, 0xc
push dword [ebp - 0xc]
call sub.ADVAPI32.DLL_RegCloseKey
call fcn.0049f0d0
mov esp, ebp
pop ebp
ret