Function at 0x40b3c0
Capabilities:
Print debug messages
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, dword [ebp + 8]
push ebx
xor ebx, ebx
mov dword [ebp - 4], ebx
push esi
push edi
test eax, eax
jne 0x40b459
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push str._n______________________________________________________________________________________________n
call edi
push 0x800
call fcn.005369fe
push 0x800
mov esi, eax
push ebx
push esi
call fcn.00537300
push 0x57
push str.ReadValueReg
push 0x4c
push str.c:devdragon_release_sync_srccore_newapiupdateservice_reg_api.cpp
push str.CD_Module
push str._s_____s____d____s___returned__d
push 0x800
push esi
call fcn.00406430
add esp, 0x30
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push esi
push 0x4c
push str.ReadValueReg
call fcn.00404610
add esp, 0xc
test esi, esi
je 0x40b446
push esi
call fcn.005369c6
add esp, 4
push str._n______________________________________________________________________________________________n
call edi
pop edi
pop esi
mov eax, 0x57
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp + 0xc]
test esi, esi
jne 0x40b4bb
mov edi, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push str._n______________________________________________________________________________________________n
call edi
push 0x800
call fcn.005369fe
push 0x800
mov esi, eax
push 0
push esi
call fcn.00537300
push 0x57
push str.ReadValueReg
push 0x4f
push str.c:devdragon_release_sync_srccore_newapiupdateservice_reg_api.cpp
push str.CD_Module
push str._s_____s____d____s___returned__d
push 0x800
push esi
call fcn.00406430
add esp, 0x30
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push esi
push 0x4f
jmp 0x40b42c
lea ecx, [ebp - 4]
push ecx
push 0x20019
push 0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov edi, eax
test edi, edi
je 0x40b532
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push str._n______________________________________________________________________________________________n
call ebx
push 0x800
call fcn.005369fe
push 0x800
mov esi, eax
push 0
push esi
call fcn.00537300
push edi
push str.ReadValueReg
push 0x59
push str.c:devdragon_release_sync_srccore_newapiupdateservice_reg_api.cpp
push str.CD_Module
push str._s_____s____d____s___returned__d
push 0x800
push esi
call fcn.00406430
add esp, 0x30
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push esi
push 0x59
jmp 0x40b5bf
mov eax, dword [ebp + 0x10]
cmp eax, 1
je 0x40b546
add eax, 0xfffffffd
cmp eax, 1
ja 0x40b5e0
mov eax, dword [ebp + 0x14]
push eax
cmp dword [eax], ebx
cmovne ebx, dword [ebp + 0x18]
push ebx
push 0
push 0
push esi
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov edi, eax
test edi, edi
je 0x40b5e0
cmp edi, 2
je 0x40b5e0
mov ebx, dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push str._n______________________________________________________________________________________________n
call ebx
push 0x800
call fcn.005369fe
push 0x800
mov esi, eax
push 0
push esi
call fcn.00537300
push edi
push str.ReadValueReg
push 0x6e
push str.c:devdragon_release_sync_srccore_newapiupdateservice_reg_api.cpp
push str.CD_Module
push str._s_____s____d____s___returned__d
push 0x800
push esi
call fcn.00406430
add esp, 0x30
push esi
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push esi
push 0x6e
push str.ReadValueReg
call fcn.00404610
add esp, 0xc
test esi, esi
je 0x40b5d9
push esi
call fcn.005369c6
add esp, 4
push str._n______________________________________________________________________________________________n
call ebx
mov eax, dword [ebp - 4]
test eax, eax
je 0x40b5ee
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret