Function at 0x40bf40
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x1a8]
sub esp, 0x228
mov eax, dword [0x414050]
push ebx
push esi
push 0x4020b0
push 0xa
pop esi
push esi
mov dword [ebp + 0x1a4], eax
call fcn.0040adfe
xor ebx, ebx
cmp dword [0x414040], ebx
pop ecx
pop ecx
je 0x40bf85
cmp dword [0x416468], ebx
je 0x40bf85
push 0x402060
push esi
jmp 0x40bfae
mov eax, dword [ebp + 0x1b0]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40bf8e
sub eax, edx
add eax, 0x32
push eax
call sub.snmpapi.dll_SnmpUtilMemAlloc
cmp eax, ebx
mov dword [ebp - 0x6c], eax
jne 0x40bfc8
push 0x402008
push 0x14
call fcn.0040adfe
push 0x401fc8
push esi
call fcn.0040adfe
add esp, 0x10
xor eax, eax
jmp 0x40c413
mov eax, dword [ebp + 0x1b0]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40bfd1
sub eax, edx
mov esi, eax
mov eax, dword [ebp + 0x1b4]
push edi
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40bfe6
sub eax, edi
lea eax, [eax + esi + 0x33]
push eax
call sub.snmpapi.dll_SnmpUtilMemAlloc
cmp eax, ebx
mov dword [ebp - 0x80], eax
jne 0x40c01b
push 0x401f70
push 0x14
call fcn.0040adfe
pop ecx
pop ecx
push dword [ebp - 0x6c]
call sub.snmpapi.dll_SnmpUtilMemFree
jmp 0x40c2ad
mov edi, dword [ebp - 0x6c]
push 0xc
pop ecx
mov esi, 0x401f3c
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x1b0]
movsb byte es:[edi], byte [esi]
mov esi, ecx
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x40c031
mov edi, dword [ebp - 0x6c]
sub ecx, esi
mov edx, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x40c040
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x6c]
mov esi, eax
sub esi, ecx
mov dl, byte [ecx]
mov byte [esi + ecx], dl
inc ecx
cmp dl, bl
jne 0x40c05d
mov edi, eax
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x40c06a
mov ecx, dword [ebp + 0x1b4]
mov esi, 0x401f38
movsw word es:[edi], word [esi]
mov esi, ecx
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x40c081
sub ecx, esi
mov edi, eax
mov edx, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x40c08f
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push eax
mov ecx, edx
and ecx, 3
push 0x401f08
push ebx
rep movsb byte es:[edi], byte [esi]
call fcn.0040adfe
add esp, 0xc
lea eax, [ebp - 0x74]
push eax
push 9
push ebx
push dword [ebp - 0x80]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
je 0x40c0ef
push eax
push dword [ebp - 0x80]
push 0x401eb8
push ebx
call fcn.0040adfe
add esp, 0x10
push dword [ebp - 0x6c]
call sub.snmpapi.dll_SnmpUtilMemFree
push dword [ebp - 0x80]
jmp 0x40c011
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
mov esi, 0x401eb0
push esi
push dword [ebp - 0x74]
mov dword [ebp - 0x70], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
mov edi, 0x401eb8
je 0x40c135
push eax
push esi
push edi
push ebx
call fcn.0040adfe
mov esi, dword [ebp + 0x1c0]
add esp, 0x10
mov dword [esi + 0x214], ebx
jmp 0x40c153
mov eax, dword [ebp - 0x78]
mov esi, dword [ebp + 0x1c0]
push eax
push 0x401e88
push ebx
mov dword [esi + 0x214], eax
call fcn.0040adfe
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x401e7c
push dword [ebp - 0x74]
mov dword [ebp - 0x70], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
je 0x40c1a7
push eax
push 0x401e7c
push edi
push ebx
call fcn.0040adfe
push dword [0x41403c]
push 0x401e38
push ebx
call fcn.0040adfe
mov eax, dword [0x41403c]
add esp, 0x1c
mov dword [esi + 0x210], eax
jmp 0x40c1c5
xor eax, eax
cmp dword [ebp - 0x78], 1
sete al
push eax
push 0x401e04
push ebx
mov dword [esi + 0x210], eax
call fcn.0040adfe
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x401dfc
push dword [ebp - 0x74]
mov dword [ebp - 0x70], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
je 0x40c203
push eax
push 0x401dfc
push edi
push ebx
call fcn.0040adfe
add esp, 0x10
mov dword [esi + 0x218], ebx
jmp 0x40c21b
mov eax, dword [ebp - 0x78]
push eax
push 0x401dd4
push ebx
mov dword [esi + 0x218], eax
call fcn.0040adfe
add esp, 0xc
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x80]
call sub.snmpapi.dll_SnmpUtilMemFree
push dword [ebp - 0x6c]
push 0x401f08
push ebx
call fcn.0040adfe
add esp, 0xc
lea eax, [ebp - 0x74]
push eax
push 9
push ebx
push dword [ebp - 0x6c]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
je 0x40c269
push eax
push dword [ebp - 0x6c]
push edi
push ebx
call fcn.0040adfe
add esp, 0x10
jmp 0x40c00e
lea eax, [ebp - 0x70]
push eax
push esi
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x401dc4
push dword [ebp - 0x74]
mov dword [ebp - 0x70], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
je 0x40c2c0
push eax
push 0x401dc4
push edi
push ebx
call fcn.0040adfe
add esp, 0x10
push dword [ebp - 0x6c]
call sub.snmpapi.dll_SnmpUtilMemFree
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x401fc8
push 0xa
call fcn.0040adfe
xor eax, eax
jmp 0x40c410
push esi
push 0x401d94
push ebx
call fcn.0040adfe
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x401d8c
push dword [ebp - 0x74]
mov dword [ebp - 0x70], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
je 0x40c311
push eax
push 0x401d8c
push edi
push ebx
call fcn.0040adfe
add esp, 0x10
mov dword [esi + 0x20c], 1
jmp 0x40c32f
xor eax, eax
cmp dword [ebp - 0x78], 1
sete al
push eax
push 0x401d64
push ebx
mov dword [esi + 0x20c], eax
call fcn.0040adfe
add esp, 0xc
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x6c]
call sub.snmpapi.dll_SnmpUtilMemFree
cmp dword [esi + 0x20c], ebx
je 0x40c3d1
push 0x208
lea eax, [ebp - 0x68]
push esi
push eax
mov byte [ebp + 0x1a0], bl
call dword [sym.imp.msvcrt.dll_strncpy]
mov edi, 0x416470
mov edx, esi
add esp, 0xc
mov eax, edi
sub edx, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x40c370
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40c37f
sub eax, edx
mov ecx, esi
mov word [eax + esi], 0x2e
lea eax, [ecx + 1]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x40c393
sub ecx, eax
mov eax, edi
lea edi, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x40c3a1
mov edx, 0x208
sub edx, ecx
push edx
sub eax, edi
lea ecx, [ebp - 0x68]
push ecx
lea eax, [eax + esi + 1]
push eax
call dword [sym.imp.msvcrt.dll_strncpy]
push esi
push 0x401d30
push 0xa
call fcn.0040adfe
add esp, 0x18
cmp dword [esi + 0x214], 1
ja 0x40c42a
cmp dword [esi + 0x218], ebx
jne 0x40c42a
push dword [ebp + 0x1b4]
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
push eax
push dword [ebp + 0x1b0]
push dword [ebp + 0x1b8]
call fcn.0040baaa
push 0x401cf8
push 0xa
call fcn.0040adfe
xor eax, eax
inc eax
pop ecx
pop ecx
pop edi
mov ecx, dword [ebp + 0x1a4]
pop esi
pop ebx
call fcn.00412b38
add ebp, 0x1a8
leave
ret 0x14
push 0x401cb0
push 0xa
call fcn.0040adfe
cmp dword [esi + 0x214], ebx
pop ecx
pop ecx
jne 0x40c44a
mov dword [esi + 0x214], 2
push esi
push dword [ebp + 0x1bc]
push dword [ebp + 0x1b4]
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
push eax
push dword [ebp + 0x1b0]
push dword [ebp + 0x1b8]
call fcn.0040bbdc
test eax, eax
jne 0x40c401
push 0x401c70
push 0xa
call fcn.0040adfe
push 0x401c38
push 0xa
call fcn.0040adfe
add esp, 0x10
xor eax, eax
jmp 0x40c412