Function at 0x40273d
Capabilities:
Get hostname
Get session user name
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4a4
push ebx
push esi
push edi
push 9
pop ecx
mov esi, 0x44f238
lea edi, [ebp - 0x7c]
push 0x12
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop ecx
mov esi, 0x44f1ec
lea edi, [ebp - 0x194]
lea eax, [ebp - 0x7c]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
xor ebx, ebx
push eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x1c], 0x64
mov dword [ebp - 0x2c], ebx
movsb byte es:[edi], byte [esi]
call fcn.00401fe8
lea eax, [ebp - 0x194]
push eax
call fcn.00401fe8
pop ecx
lea eax, [ebp - 0x18]
pop ecx
push eax
push 0xf003f
lea eax, [ebp - 0x7c]
push ebx
push eax
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4027b6
cmp dword [0x454f40], ebx
jne 0x4027bd
xor eax, eax
jmp 0x402a14
push 0x20
lea eax, [ebp - 8]
pop esi
push eax
lea eax, [ebp - 0xc0]
push eax
mov dword [ebp - 8], esi
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov eax, dword [ebp - 8]
mov dword [ebp - 8], esi
mov byte [ebp + eax - 0xc0], bl
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xe4]
push eax
call dword [sym.imp.KERNEL32.dll_GetComputerNameA]
mov eax, dword [ebp - 8]
mov byte [ebp + eax - 0xe4], bl
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.0043fec0
pop ecx
lea eax, [ebp - 0x1c]
pop ecx
push ebx
push ebx
push ebx
push ebx
push eax
lea eax, [ebp - 0x148]
push eax
push ebx
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x214]
push 0x44f1e4
push eax
call fcn.004404ee
add esp, 0x10
lea eax, [ebp - 0x20]
push eax
push 0xf003f
lea eax, [ebp - 0x214]
push ebx
push eax
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0x1f4
push eax
lea eax, [ebp - 0x4a4]
push eax
lea eax, [ebp - 0x2c]
push eax
push ebx
push 0x44f1e0
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4029cf
lea eax, [ebp - 0x54]
push 0x44f1cc
push eax
call fcn.0043feb0
lea eax, [ebp - 0xc0]
mov dword [ebp - 4], 0xba0da71d
push eax
xor esi, esi
mov dword [ebp - 0xc], ebx
call fcn.0043ffa0
add esp, 0xc
test eax, eax
jbe 0x40291a
cmp esi, 0x10
jne 0x4028c6
xor esi, esi
lea edi, [ebp + esi - 0x54]
push 4
lea eax, [ebp - 0x10]
push edi
push eax
call fcn.00440750
mov eax, dword [ebp - 0xc]
push 4
movsx eax, byte [ebp + eax - 0xc0]
imul eax, dword [ebp - 4]
xor dword [ebp - 0x10], eax
lea eax, [ebp - 0x10]
push eax
push edi
call fcn.00440750
mov eax, dword [ebp - 4]
add esi, 4
imul eax, eax, 0xbc8f
inc dword [ebp - 0xc]
mov dword [ebp - 4], eax
lea eax, [ebp - 0xc0]
push eax
call fcn.0043ffa0
add esp, 0x1c
cmp dword [ebp - 0xc], eax
jb 0x4028bf
lea eax, [ebp - 0x54]
push 4
push eax
lea eax, [ebp - 4]
push eax
call fcn.00440750
or dword [ebp - 4], 1
add esp, 0xc
xor esi, esi
mov al, byte [ebp + esi - 0x4a0]
mov cl, byte [ebp + esi - 0x49f]
add al, 0xf
sub cl, 0x21
shl al, 4
or al, cl
mov ecx, esi
sub al, byte [ebp - 4]
shr ecx, 1
mov byte [ebp + ecx - 0x2b0], al
mov eax, dword [ebp - 4]
imul eax, eax, 0x10ff5
inc esi
mov dword [ebp - 4], eax
inc esi
cmp esi, 0x135
jb 0x402932
lea eax, [ebp - 0x54]
mov dword [ebp - 0x38], 0x10
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x28]
push eax
push 1
push ebx
lea eax, [ebp - 0x38]
push ebx
push eax
lea eax, [ebp - 0x40]
push ebx
push eax
mov dword [ebp - 0x40], 0x9a
call dword [0x454f40]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
push 1
add ecx, eax
push ebx
push ecx
call fcn.00440a90
push dword [ebp - 0x24]
lea eax, [ebp - 0x148]
push eax
push 0x454f50
push 0x44f1c8
call fcn.0040596d
add esp, 0x1c
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
inc dword [ebp - 0x14]
push ebx
push ebx
push ebx
lea eax, [ebp - 0x1c]
push ebx
push eax
lea eax, [ebp - 0x148]
push eax
mov dword [ebp - 0x1c], 0x64
push dword [ebp - 0x14]
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
cmp eax, 0x103
jne 0x40282a
push dword [ebp - 0x18]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret