Function at 0x426520
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42a32f
mov eax, dword fs:[0]
push eax
sub esp, 0x2f8
mov eax, dword [0x433300]
xor eax, ebp
mov dword [ebp - 0x1ac], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 0x14], 0x42e5ba
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x10], 7
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x14]
push ecx
lea edx, [ebp - 0x10]
push edx
push 0
mov ecx, dword [ebp + 0xc]
call fcn.00407080
push eax
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xea
je 0x426664
push 0x42e790
lea ecx, [ebp - 0x18c]
call fcn.0040aba0
mov dword [ebp - 0x2d8], eax
mov edx, dword [ebp - 0x2d8]
mov dword [ebp - 0x2dc], edx
mov dword [ebp - 4], 1
lea eax, [ebp - 0x18]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x2d4]
add edx, 4
push edx
mov ecx, dword [ebp - 0x2dc]
call fcn.0040ac90
mov ecx, eax
call fcn.0040ac90
mov ecx, eax
call fcn.0040acb0
push eax
lea eax, [ebp - 0x1a8]
push eax
call fcn.0040acd0
add esp, 8
mov dword [ebp - 0x2e0], eax
mov ecx, dword [ebp - 0x2e0]
mov dword [ebp - 0x2e4], ecx
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2e4]
push edx
lea ecx, [ebp - 0xcc]
call fcn.00406a50
push 0x430e20
lea eax, [ebp - 0xcc]
push eax
call fcn.00417fb7
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1a8]
call fcn.004070a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18c]
call fcn.00409930
mov eax, dword [ebp - 0x1c]
add eax, 2
call fcn.00420b10
mov dword [ebp - 0x2e8], esp
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp - 0x14], ecx
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x10]
push ecx
push 0
mov ecx, dword [ebp + 0xc]
call fcn.00407080
push eax
mov edx, dword [ebp - 0x2d4]
mov eax, dword [edx]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x42676c
push 0x42e7d0
lea ecx, [ebp - 0x294]
call fcn.0040aba0
mov dword [ebp - 0x2ec], eax
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp - 0x2f0], ecx
mov dword [ebp - 4], 3
lea edx, [ebp - 0x18]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x2d4]
add ecx, 4
push ecx
mov ecx, dword [ebp - 0x2f0]
call fcn.0040ac90
mov ecx, eax
call fcn.0040ac90
mov ecx, eax
call fcn.0040acb0
push eax
lea edx, [ebp - 0x2b0]
push edx
call fcn.0040acd0
add esp, 8
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f8], eax
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x2f8]
push ecx
lea ecx, [ebp - 0x1d4]
call fcn.00406a50
push 0x430e20
lea edx, [ebp - 0x1d4]
push edx
call fcn.00417fb7
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2b0]
call fcn.004070a0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x294]
call fcn.00409930
cmp dword [ebp - 0x10], 1
jne 0x4267b8
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
movsx ecx, byte [eax - 1]
test ecx, ecx
je 0x426789
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x1c]
mov byte [edx], 0
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp + 8]
call fcn.00406c40
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x2d0]
or ecx, 1
mov dword [ebp - 0x2d0], ecx
mov eax, dword [ebp + 8]
jmp 0x4268e8
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x1c]
movsx eax, byte [edx - 1]
test eax, eax
je 0x4267db
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x1c]
mov byte [ecx], 0
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x1c]
mov byte [edx + 1], 0
jmp 0x4267f2
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
movsx ecx, byte [eax - 2]
test ecx, ecx
je 0x4267f2
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x1c]
mov byte [edx], 0
push 1
push 3
lea ecx, [ebp - 0xa4]
call fcn.00409ad0
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x14]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4268b8
lea edx, [ebp - 0xa4]
test edx, edx
je 0x426831
lea eax, [ebp - 0xa4]
add eax, 8
mov dword [ebp - 0x2fc], eax
jmp 0x42683b
mov dword [ebp - 0x2fc], 0
mov ecx, dword [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x2cc]
call fcn.00406c40
mov dword [ebp - 0x300], eax
mov edx, dword [ebp - 0x300]
mov dword [ebp - 0x304], edx
mov byte [ebp - 4], 6
mov eax, dword [ebp - 0x304]
push eax
mov ecx, dword [ebp - 0x2fc]
push ecx
call fcn.0040ad00
add esp, 8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2cc]
call fcn.004070a0
push 0x407060
lea ecx, [ebp - 0x9c]
call fcn.004010c0
mov edx, dword [ebp - 0x14]
movsx eax, byte [edx]
test eax, eax
je 0x4268aa
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
jmp 0x426895
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x426808
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0xa4]
call fcn.00409c00
mov ecx, dword [ebp - 0x2d0]
or ecx, 1
mov dword [ebp - 0x2d0], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa4]
call fcn.004099c0
mov eax, dword [ebp + 8]
lea esp, [ebp - 0x308]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x1ac]
xor ecx, ebp
call fcn.00415ae3
mov esp, ebp
pop ebp
ret 8