Function at 0x40a355
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push edi
push 0x3c
pop edi
push edi
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push edi
call esi
push edi
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push edi
call esi
cmp byte [0x423c40], 0
jne 0x40aab3
push edi
mov byte [0x423c40], 1
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push edi
call esi
mov edi, str.0:db0:lk0:hs0:ld1:ll0:hb0:pj
push edi
call fcn.0040d4a3
pop ecx
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x12a0
push 0
push 0x422998
call fcn.0040cf80
add esp, 0xc
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x4229b6
push 0x41a5a4
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x422bb4
push 0x41a59c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x422bf0
push 0
push 0x41a594
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x422bf4
push 0x41a58c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x422df2
push 0x41a584
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x422e30
push 0
push 0x41a57c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x422e34
push 0x41a574
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x423032
push 0x41a56c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x423070
push 0
push 0x41a564
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x423074
push 0x41a55c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x4230b0
push 0x41a554
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x4230ec
push 0x41a54c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x423150
push 0x41a544
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x4231b4
push 0x41a53c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x423218
push 0
push 0x41a534
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x42321c
push 0
push 0x41a52c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x423220
push 0
push 0x41a524
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x423224
push 0
push 0x41a51c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x423228
push 0
push 0x41a514
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x42322c
push 0
push 0x41a50c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x423230
push 0
push 0x41a504
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x423234
push 0
push 0x41a4fc
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x3c
mov dword [ebp - 8], 3
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
and dword [ebp - 4], 0
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
lea eax, [ebp - 0xc]
push eax
push 0x20019
push 0
push str.Console
push connect
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40a84f
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
lea eax, [ebp - 4]
push eax
push 0
lea eax, [ebp - 8]
push eax
push 0
push 0x41a4dc
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [ebp - 4], 0xa
jbe 0x40aab3
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x32
call esi
push 0x3c
call esi
push 0x7d1
push 0
push edi
call fcn.0040cf80
add esp, 0xc
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
push 0x32
call esi
push 0x3c
call esi
lea eax, [ebp - 4]
push eax
push edi
lea eax, [ebp - 8]
push eax
push 0
push 0x41a4dc
push dword [ebp - 0xc]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x4229b6
push 0x41a5a4
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x422bb4
push 0x41a59c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
push 0x32
call esi
push 0x3c
call esi
push 0x422bf0
push 0
push 0x41a594
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x422bf4
push 0x41a58c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x422df2
push 0x41a584
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
push 0x32
call esi
push 0x3c
call esi
push 0x422e30
push 0
push 0x41a57c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x422e34
push 0x41a574
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
push 0x32
call esi
push 0x3c
call esi
push 0
push 0x423032
push 0x41a56c
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
push 0x32
call esi
push 0x3c
call esi
push 0x423070
push 0
push 0x41a564
push edi
call fcn.0040a288
add esp, 0x10
push 0x3c
call esi
push 0x32
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
inc eax
dec ebx
dec eax
inc ebx
push 0x3c
call esi
push 0x32
call esi
push 0x3c
call esi
pop edi
pop esi
pop ebx
leave
ret