Function at 0x40fd78
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffaf0
lea eax, [ebp - 4]
push eax
push 0x6ee7bc
push SysReAllocStringLen
call sub.ADVAPI32.DLL_RegOpenKeyA
test eax, eax
jne 0x40fff6
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6ee7e3
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40fdde
push 0x6eb9d0
push 0x6ee7eb
lea edx, [ebp - 0x510]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6ee7ee
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40fe20
push 0x6eba20
push 0x6ee7f8
lea ecx, [ebp - 0x510]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6ee7fb
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40fe62
push 0x6eba24
push 0x6ee807
lea eax, [ebp - 0x510]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6ee80a
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40fea4
push 0x6eba28
push 0x6ee819
lea edx, [ebp - 0x510]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push 0x6ee81c
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40fee6
push 0x6eba2c
push 0x6ee82d
lea ecx, [ebp - 0x510]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6ee830
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ff28
push 0x80b134
push 0x6ee83c
lea eax, [ebp - 0x510]
push eax
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea edx, [ebp - 0xc]
push edx
lea ecx, [ebp - 0x510]
push ecx
lea eax, [ebp - 8]
push eax
push 0
push 0x6ee83f
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ff6a
push 0x80b138
push 0x6ee84c
lea edx, [ebp - 0x510]
push edx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea ecx, [ebp - 0xc]
push ecx
lea eax, [ebp - 0x510]
push eax
lea edx, [ebp - 8]
push edx
push 0
push str.UPlusV2Secret
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ffac
push 0x80b13c
push 0x6ee85d
lea ecx, [ebp - 0x510]
push ecx
call fcn.0067132c
add esp, 0xc
mov dword [ebp - 0xc], 0x100
lea eax, [ebp - 0xc]
push eax
lea edx, [ebp - 0x510]
push edx
lea ecx, [ebp - 8]
push ecx
push 0
push 0x6ee860
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegQueryValueExA
test eax, eax
jne 0x40ffee
push 0x80b170
push 0x6ee86b
lea eax, [ebp - 0x510]
push eax
call fcn.0067132c
add esp, 0xc
push dword [ebp - 4]
call sub.ADVAPI32.DLL_RegCloseKey
mov esp, ebp
pop ebp
ret