Function at 0x402220
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2478
call fcn.004d9280
mov eax, dword [0x4f72bc]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
lea eax, [ebp - 0x623]
push ebx
push eax
mov byte [ebp - 0x624], bl
call fcn.004d29c0
add esp, 0xc
mov dword [ebp - 0x244c], 0x104
mov dword [ebp - 0x2430], ebx
cmp dword [ebp + 8], ebx
jne 0x40227f
cmp dword [0x505890], ebx
je 0x402279
call fcn.004c2580
mov dword [0x505890], ebx
lea ecx, [ebp - 0x2434]
push ecx
push 0x20019
push ebx
push str.SoftwareMicrosoftWindowsCurrentVersionExtStats
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
jne 0x40267c
lea edx, [ebp - 0x2474]
push edx
lea eax, [ebp - 0x2454]
push eax
lea ecx, [ebp - 0x245c]
push ecx
lea edx, [ebp - 0x2464]
push edx
lea eax, [ebp - 0x2458]
push eax
lea ecx, [ebp - 0x2450]
push ecx
lea edx, [ebp - 0x2460]
push edx
lea eax, [ebp - 0x2430]
push eax
mov eax, dword [ebp - 0x2434]
push ebx
lea ecx, [ebp - 0x244c]
push ecx
lea edx, [ebp - 0x624]
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyA]
cmp dword [ebp - 0x2430], ebx
je 0x40267c
mov dword [ebp - 0x243c], ebx
mov dword [ebp - 0x2438], ebx
mov esi, dword [ebp - 0x243c]
mov eax, 0xff
lea ecx, [ebp - 0x246c]
push ecx
mov dword [ebp - 0x2448], eax
mov dword [ebp - 0x2444], eax
lea edx, [ebp - 0x2448]
push edx
lea eax, [ebp - 0xc2c]
push eax
mov eax, dword [ebp - 0x2434]
push 0
lea ecx, [ebp - 0x2444]
push ecx
lea edx, [ebp - 0x31c]
push edx
push esi
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov ecx, dword [ebp - 0x2438]
mov edx, ecx
inc esi
inc ecx
mov dword [ebp - 0x243c], esi
mov dword [ebp - 0x2438], ecx
cmp edx, dword [ebp - 0x2430]
ja 0x40267c
cmp eax, 0x103
je 0x40267c
test eax, eax
jne 0x402310
lea eax, [ebp - 0xb2c]
push eax
lea ecx, [ebp - 0x21c]
lea edx, [ebp - 0x31c]
call fcn.004c0d10
add esp, 4
test eax, eax
je 0x402310
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jle 0x402310
xor ebx, ebx
xor esi, esi
cmp dword [0x505890], ebx
jle 0x402402
nop
lea edi, [ebp - 0x72c]
call fcn.004c22f0
mov edx, edi
push edx
lea eax, [ebp - 0x21c]
push eax
call fcn.00483650
test eax, eax
jne 0x4023f1
lea esi, [eax + 1]
inc ebx
cmp ebx, dword [0x505890]
jl 0x4023d0
test esi, esi
jne 0x402310
push 0x1400
lea ecx, [ebp - 0x242c]
push 0
push ecx
call fcn.004d29c0
lea edx, [ebp - 0x114]
add esp, 0xc
push edx
lea ecx, [ebp - 0x21c]
call fcn.0047cea0
lea eax, [ebp - 0x114]
add esp, 4
push eax
lea ecx, [ebp - 0x242c]
call fcn.004c0890
add esp, 4
lea ecx, [ebp - 0x1c2c]
push ecx
mov edx, 0x7ffffffe
mov eax, 0x400
lea ecx, [ebp - 0x102c]
call fcn.004010b0
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
lea edx, [ebp - 0xb2c]
push edx
call esi
test eax, eax
jns 0x4024df
lea eax, [ebp - 0x182c]
push eax
mov edx, 0x7ffffffe
mov eax, 0x400
lea ecx, [ebp - 0xb2c]
call fcn.004010b0
lea ecx, [ebp - 0xb2c]
push ecx
call esi
test eax, eax
jns 0x4024df
lea edx, [ebp - 0x242c]
push edx
call esi
test eax, eax
jne 0x4024c3
lea eax, [ebp - 0x114]
push eax
call fcn.0047ce20
movzx ecx, ax
add esp, 4
lea edx, [ebp + ecx - 0x114]
push edx
jmp 0x4024ca
lea eax, [ebp - 0x242c]
push eax
mov edx, 0x7ffffffe
mov eax, 0x400
lea ecx, [ebp - 0xb2c]
call fcn.004010b0
lea ecx, [ebp - 0x21c]
push ecx
call esi
test eax, eax
jle 0x402310
push str.SoftwareMicrosoftWindowsCurrentVersionExtStats
mov edx, 0x7ffffffe
mov eax, 0x200
lea ecx, [ebp - 0x51c]
call fcn.004010b0
mov eax, 0x200
lea ecx, [ebp - 0x51c]
cmp byte [ecx], 0
je 0x402520
inc ecx
dec eax
jne 0x402515
jmp 0x402548
test eax, eax
je 0x402548
mov ecx, 0x200
sub ecx, eax
mov eax, 0x200
sub eax, ecx
push 0x4e28bc
lea ecx, [ebp + ecx - 0x51c]
mov edx, 0x7fffffff
call fcn.004010b0
mov edx, 0x200
lea eax, [ebp - 0x51c]
cmp byte [eax], 0
je 0x40255e
inc eax
dec edx
jne 0x402553
jmp 0x402588
test edx, edx
je 0x402588
mov ecx, 0x200
sub ecx, edx
lea edx, [ebp - 0x31c]
mov eax, 0x200
push edx
sub eax, ecx
lea ecx, [ebp + ecx - 0x51c]
mov edx, 0x7fffffff
call fcn.004010b0
mov eax, 0x200
lea ecx, [ebp - 0x51c]
cmp byte [ecx], 0
je 0x40259e
inc ecx
dec eax
jne 0x402593
jmp 0x4025c6
test eax, eax
je 0x4025c6
mov ecx, 0x200
sub ecx, eax
mov eax, 0x200
sub eax, ecx
push 0x4e2948
lea edx, [ebp - 0x75]
push ebp
mov ebp, esp
sub esp, 0x1fbc
push ebx
push esi
push edi
push eax
push eax
add esp, 4
sub eax, 0xa4dc
add al, 0x81
call 0x40caa9
jmp 0x4025d3
xor eax, 0xb6d6
pop eax
push edx
push ecx
add esp, 4
jmp 0x4025e8
pop edx
push edx
push ebx
add esp, 4
jmp 0x4025f3
pop edx
mov eax, 0x4d
mov word [ebp - 0x1ef4], ax
mov ecx, 0x42
mov word [ebp - 0x1ef2], cx
mov edx, 0x53
mov word [ebp - 0x1ef0], dx
mov eax, 0x65
mov word [ebp - 0x1eee], ax
mov ecx, 0x72
mov word [ebp - 0x1eec], cx
mov edx, 0x76
mov word [ebp - 0x1eea], dx
mov eax, 0x69
mov word [ebp - 0x1ee8], ax
mov ecx, 0x63
mov word [ebp - 0x1ee6], cx
mov edx, 0x65
mov word [ebp - 0x1ee4], dx
mov eax, 0x2e
mov word [ebp - 0x1ee2], ax
mov ecx, 0x65
mov word [ebp - 0x1ee0], cx
mov edx, 0x78
mov word [ebp - 0x1ede], dx
mov eax, 0x65
mov word [ebp - 0x1edc], ax
xor ecx, ecx
mov word [ebp - 0x1eda], cx
mov dword [ebp - 0xfac], 1
add byte [eax], al
add byte [ecx + 0x50], dl
add byte [esi - 0x77], ah
xchg ebp, eax
and ah, cl
invalid