Function at 0x41318c
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 0x12
add esp, 0xfffff004
push eax
dec eax
jne 0x413195
mov eax, dword [ebp - 4]
add esp, 0xfffff804
mov eax, 0x5cc03c
call fcn.00496be4
mov word [ebp - 0x30], 0x14
mov edx, 0x5c292d
lea eax, [ebp - 4]
call fcn.004a44ec
inc dword [ebp - 0x24]
mov word [ebp - 0x30], 8
mov word [ebp - 0x30], 0x20
lea eax, [ebp - 8]
call fcn.00401af8
push eax
inc dword [ebp - 0x24]
call fcn.0040de64
pop ecx
mov word [ebp - 0x30], 8
mov word [ebp - 0x30], 0x2c
lea eax, [ebp - 0x10]
call fcn.00401af8
push eax
inc dword [ebp - 0x24]
mov edx, 0x5c296e
lea eax, [ebp - 0xc]
call fcn.004a44ec
inc dword [ebp - 0x24]
lea edx, [ebp - 0xc]
lea eax, [ebp - 8]
pop ecx
call fcn.004a46e8
lea edx, [ebp - 0x10]
push edx
push dword [ebp - 4]
lea eax, [ebp - 0x14]
call fcn.00401af8
push eax
inc dword [ebp - 0x24]
call fcn.004106e8
add esp, 8
lea edx, [ebp - 0x14]
push edx
lea eax, [ebp - 0x18]
call fcn.00401af8
mov ecx, eax
inc dword [ebp - 0x24]
pop edx
pop eax
call fcn.004a46e8
lea edx, [ebp - 0x18]
lea eax, [ebp - 8]
call fcn.004a46c0
dec dword [ebp - 0x24]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004a4690
dec dword [ebp - 0x24]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004a4690
dec dword [ebp - 0x24]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004a4690
dec dword [ebp - 0x24]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004a4690
xor ecx, ecx
mov dword [ebp - 0x5c], ecx
mov word [ebp - 0x30], 8
lea eax, [ebp - 0x48]
push eax
push 0xf003f
push 0
lea eax, [ebp - 8]
call fcn.00401b28
push eax
push reloc.WSOCK32.DLL_closesocket
call sub.ADVAPI32.DLL_RegOpenKeyExA
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x413357
mov dword [ebp - 0x4c], 0x12c
mov dword [ebp - 0x50], 3
xor edx, edx
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x4c], 0x64
mov dword [ebp - 0x50], 3
xor ecx, ecx
mov dword [ebp - 0x54], ecx
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x12768]
push edx
lea ecx, [ebp - 0x50]
push ecx
push 0
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x1266c]
push edx
push dword [ebp - 0x58]
push dword [ebp - 0x48]
call sub.ADVAPI32.DLL_RegEnumValueA
mov dword [ebp - 0x54], eax
inc dword [ebp - 0x58]
lea ecx, [ebp - 0x12768]
push ecx
call fcn.00412e5c
pop ecx
test eax, eax
jne 0x41334e
lea eax, [ebp - 0x12768]
push eax
imul edx, dword [ebp - 0x5c], 0x32
lea ecx, [ebp - 0x12570]
add edx, ecx
push edx
call sub.KERNEL32.DLL_lstrcpyA
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x54], 0x103
jne 0x4132f4
push dword [ebp - 0x48]
call sub.ADVAPI32.DLL_RegCloseKey
lea eax, [ebp - 0x48]
push eax
push 0xf003f
push 0
lea eax, [ebp - 8]
call fcn.00401b28
push eax
push reloc.WSOCK32.DLL_closesocket
call sub.ADVAPI32.DLL_RegOpenKeyExA
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x413413
mov dword [ebp - 0x4c], 0x12c
mov dword [ebp - 0x50], 3
xor edx, edx
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x4c], 0x64
mov dword [ebp - 0x50], 3
xor ecx, ecx
mov dword [ebp - 0x54], ecx
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x12768]
push edx
lea ecx, [ebp - 0x50]
push ecx
push 0
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x1266c]
push edx
push dword [ebp - 0x58]
push dword [ebp - 0x48]
call sub.ADVAPI32.DLL_RegEnumValueA
mov dword [ebp - 0x54], eax
inc dword [ebp - 0x58]
lea ecx, [ebp - 0x12768]
push ecx
call fcn.00412e5c
pop ecx
test eax, eax
jne 0x41340a
lea eax, [ebp - 0x12768]
push eax
imul edx, dword [ebp - 0x5c], 0x32
lea ecx, [ebp - 0x12570]
add edx, ecx
push edx
call sub.KERNEL32.DLL_lstrcpyA
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x54], 0x103
jne 0x4133b0
push dword [ebp - 0x48]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [ebp - 0x5c]
push 0x5c2970
lea eax, [ebp - 0x12800]
push eax
call sub.USER32.DLL_wsprintfA
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x60], edx
mov word [ebp - 0x30], 8
jmp 0x4134d2
xor ecx, ecx
mov dword [ebp - 0x64], ecx
mov word [ebp - 0x30], 8
jmp 0x4134c6
imul eax, dword [ebp - 0x64], 0x32
lea edx, [ebp - 0x1253e]
add eax, edx
push eax
imul ecx, dword [ebp - 0x64], 0x32
lea eax, [ebp - 0x12570]
add ecx, eax
push ecx
call sub.KERNEL32.DLL_lstrcmpA
test eax, eax
jle 0x4134c3
imul edx, dword [ebp - 0x64], 0x32
lea ecx, [ebp - 0x12570]
add edx, ecx
push edx
lea eax, [ebp - 0x12800]
push eax
call sub.KERNEL32.DLL_lstrcpyA
imul edx, dword [ebp - 0x64], 0x32
lea ecx, [ebp - 0x1253e]
add edx, ecx
push edx
imul eax, dword [ebp - 0x64], 0x32
lea edx, [ebp - 0x12570]
add eax, edx
push eax
call sub.KERNEL32.DLL_lstrcpyA
lea ecx, [ebp - 0x12800]
push ecx
imul eax, dword [ebp - 0x64], 0x32
lea edx, [ebp - 0x1253e]
add eax, edx
push eax
call sub.KERNEL32.DLL_lstrcpyA
inc dword [ebp - 0x64]
mov ecx, dword [ebp - 0x5c]
dec ecx
cmp ecx, dword [ebp - 0x64]
jg 0x41344f
inc dword [ebp - 0x60]
mov eax, dword [ebp - 0x5c]
dec eax
cmp eax, dword [ebp - 0x60]
jg 0x413442
mov edx, dword [ebp - 0x5c]
dec edx
mov dword [ebp - 0x68], edx
mov word [ebp - 0x30], 8
mov dword [ebp - 0x6c], 1
jmp 0x41356d
mov dword [ebp - 0x70], 1
mov word [ebp - 0x30], 8
jmp 0x413561
imul ecx, dword [ebp - 0x70], 0x32
lea eax, [ebp - 0x1253e]
add ecx, eax
push ecx
imul edx, dword [ebp - 0x70], 0x32
lea ecx, [ebp - 0x12570]
add edx, ecx
push edx
call sub.KERNEL32.DLL_lstrcmpA
test eax, eax
jne 0x41355e
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x44], eax
jmp 0x413552
imul edx, dword [ebp - 0x44], 0x32
lea ecx, [ebp - 0x1253e]
add edx, ecx
push edx
imul eax, dword [ebp - 0x44], 0x32
lea edx, [ebp - 0x12570]
add eax, edx
push eax
call sub.KERNEL32.DLL_lstrcpyA
inc dword [ebp - 0x44]
mov ecx, dword [ebp - 0x68]
dec ecx
cmp ecx, dword [ebp - 0x44]
jge 0x413530
dec dword [ebp - 0x68]
inc dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
dec eax
cmp eax, dword [ebp - 0x70]
jge 0x413504
inc dword [ebp - 0x6c]
mov edx, dword [ebp - 0x68]
dec edx
cmp edx, dword [ebp - 0x6c]
jge 0x4134f5
mov dword [ebp - 0x74], 1
mov word [ebp - 0x30], 8
mov ecx, dword [ebp - 0x74]
cmp ecx, dword [ebp - 0x68]
jg 0x4135e7
mov eax, dword [0x5da0b8]
mov edx, dword [eax + 0x2d4]
add edx, 0x208
mov dword [ebp - 0x78], edx
mov word [ebp - 0x30], 0x38
imul edx, dword [ebp - 0x74], 0x32
lea eax, [ebp - 0x12570]
add edx, eax
lea eax, [ebp - 0x1c]
call fcn.004a44ec
inc dword [ebp - 0x24]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x78]
mov eax, dword [ecx]
mov ecx, dword [eax]
call dword [ecx + 0x34]
dec dword [ebp - 0x24]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.004a4690
inc dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
cmp ecx, dword [ebp - 0x68]
jle 0x41358f
dec dword [ebp - 0x24]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004a4690
dec dword [ebp - 0x24]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004a4690
mov ecx, dword [ebp - 0x40]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret