Function at 0x40e47d
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3bc
mov eax, dword [0x4ccbf8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x3b4]
mov esi, 0x20019
push eax
push esi
xor ebx, ebx
mov eax, str.Software_s
push ebx
push eax
push 0x4b3b4c
push eax
lea eax, [ebp - 0x398]
push 0x12b
push eax
call fcn.0041ff80
add esp, 0x14
push eax
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40e8d9
lea eax, [ebp - 0x3a0]
mov dword [ebp - 0x3a0], 4
push eax
mov eax, dword [0x5514ec]
add eax, 0x5e0
push eax
push ebx
push ebx
push str.Flags
push dword [ebp - 0x3b4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x3ac]
push eax
push esi
push ebx
push str.UidValues
push dword [ebp - 0x3b4]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40e8cd
mov edi, 0x12c
mov dword [ebp - 0x3b8], ebx
push edi
lea eax, [ebp - 0x268]
mov esi, ebx
push eax
push ebx
push dword [ebp - 0x3ac]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
jne 0x40e8c1
lea eax, [ebp - 0x3b0]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x268]
push eax
push dword [ebp - 0x3ac]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40e892
xor ebx, ebx
mov dword [ebp - 0x3a8], 0x3e8
push ebx
mov dword [ebp - 0x39c], edi
call fcn.0048cba0
mov eax, dword [ebp - 0x3a8]
pop ecx
xor ecx, ecx
add eax, 1
setb cl
neg ecx
or ecx, eax
push ecx
push esi
call fcn.00483b6d
pop ecx
pop ecx
mov edi, eax
call fcn.0048cb8d
cmp dword [eax], 0xc
jne 0x40e61a
call fcn.00435f20
test eax, eax
je 0x40e61c
call fcn.00435f20
cmp dword [eax], ebx
je 0x40e61c
mov eax, dword [0x4edee0]
test eax, eax
je 0x40e5de
mov edi, dword [eax + 0x190]
jmp 0x40e5e4
mov edi, dword [0x4edee4]
call fcn.00435f20
test eax, eax
je 0x40e5f6
call fcn.00435f20
mov eax, dword [eax]
jmp 0x40e5f8
mov eax, ebx
mov ecx, str.Error_allocating_memory__
push ecx
push ecx
push dword [0x4edee0]
push edi
push ebx
push 0x12b4
push str.D:MyProjectsProPilotTestMain.c
push 3
call eax
add esp, 0x20
jmp 0x40e61c
mov esi, edi
lea eax, [ebp - 0x3a8]
push eax
push esi
lea eax, [ebp - 0x3a4]
push eax
push 0
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x138]
push eax
push ebx
push dword [ebp - 0x3b0]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
je 0x40e72b
cmp eax, 0xea
jne 0x40e87b
push 0
call fcn.0048cba0
mov eax, dword [ebp - 0x3a8]
pop ecx
xor ecx, ecx
add eax, 1
setb cl
neg ecx
or ecx, eax
push ecx
push esi
call fcn.00483b6d
pop ecx
pop ecx
mov edi, eax
call fcn.0048cb8d
cmp dword [eax], 0xc
jne 0x40e6eb
call fcn.00435f20
test eax, eax
je 0x40e6ed
call fcn.00435f20
cmp dword [eax], 0
je 0x40e6ed
mov eax, dword [0x4edee0]
test eax, eax
je 0x40e6ae
mov edi, dword [eax + 0x190]
jmp 0x40e6b4
mov edi, dword [0x4edee4]
call fcn.00435f20
test eax, eax
je 0x40e6c6
call fcn.00435f20
mov eax, dword [eax]
jmp 0x40e6c8
xor eax, eax
mov ecx, str.Error_allocating_memory__
push ecx
push ecx
push dword [0x4edee0]
push edi
push 0
push 0x12b9
push str.D:MyProjectsProPilotTestMain.c
push 3
call eax
add esp, 0x20
jmp 0x40e6ed
mov esi, edi
lea eax, [ebp - 0x3a8]
mov dword [ebp - 0x39c], 0x12c
push eax
push esi
lea eax, [ebp - 0x3a4]
push eax
push 0
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x138]
push eax
push ebx
push dword [ebp - 0x3b0]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
jne 0x40e7dc
lea ecx, [ebp - 0x138]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40e734
sub ecx, edx
cmp ecx, 3
jle 0x40e7dc
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x40e7dc
mov byte [eax + esi], 0
lea eax, [ebp - 0x135]
push eax
call fcn.004877a2
lea edx, [ebp - 0x138]
cmp word [edx], 0x7473
pop ecx
mov ecx, eax
jne 0x40e77f
cmp byte [edx + 2], 0x72
jne 0x40e77f
push esi
push 1
jmp 0x40e796
lea edx, [ebp - 0x138]
cmp word [edx], 0x6e69
jne 0x40e7aa
cmp byte [edx + 2], 0x74
jne 0x40e7aa
push dword [esi]
push 0
push 2
push ecx
lea eax, [ebp - 0x268]
push eax
call fcn.0040db88
add esp, 0x14
jmp 0x40e7dc
lea edx, [ebp - 0x138]
cmp word [edx], 0x6264
jne 0x40e7dc
cmp byte [edx + 2], 0x6c
jne 0x40e7dc
movsd xmm0, qword [esi]
lea eax, [ebp - 0x268]
push ecx
push ecx
movsd qword [esp], xmm0
push 2
push 2
push ecx
push eax
call fcn.0040db88
add esp, 0x18
push 0
mov dword [ebp - 0x3a8], 0x3e8
mov dword [ebp - 0x39c], 0x12c
call fcn.0048cba0
pop ecx
push dword [ebp - 0x3a8]
push esi
call fcn.00483b6d
pop ecx
pop ecx
mov edi, eax
call fcn.0048cb8d
cmp dword [eax], 0xc
jne 0x40e873
call fcn.00435f20
test eax, eax
je 0x40e875
call fcn.00435f20
cmp dword [eax], 0
je 0x40e875
mov eax, dword [0x4edee0]
test eax, eax
je 0x40e836
mov edi, dword [eax + 0x190]
jmp 0x40e83c
mov edi, dword [0x4edee4]
call fcn.00435f20
test eax, eax
je 0x40e84e
call fcn.00435f20
mov eax, dword [eax]
jmp 0x40e850
xor eax, eax
mov ecx, str.Error_allocating_memory__
push ecx
push ecx
push dword [0x4edee0]
push edi
push 0
push 0x12ca
push str.D:MyProjectsProPilotTestMain.c
push 3
call eax
add esp, 0x20
jmp 0x40e875
mov esi, edi
inc ebx
jmp 0x40e61c
push dword [ebp - 0x3b0]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [ebp - 0x3b8]
mov edi, 0x12c
push edi
lea eax, [ebp - 0x268]
inc ebx
push eax
push ebx
push dword [ebp - 0x3ac]
mov dword [ebp - 0x3b8], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x40e552
test esi, esi
je 0x40e8c1
push esi
call fcn.0048690c
pop ecx
push dword [ebp - 0x3ac]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x3b4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
inc eax
pop ebx
call fcn.0047f41c
leave
ret