Function at 0x40c320
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4212d7
mov eax, dword fs:[0]
push eax
sub esp, 0x20
mov eax, dword [0x42b730]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_316]
mov dword [ebp - 4], 0
push 0x423204
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_820]
push 0x42321c
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_945]
push 0x18
push 0
push 0x42b9e4
call sub.MSVCR90.dll_memset
add esp, 0xc
push 0x18
push 0
push 0x42b9fc
call sub.MSVCR90.dll_memset
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
push 0x20019
push 0
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_910]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x40c6df
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x1c]
push eax
push 0
push 0x423224
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x40c417
cmp dword [ebp - 0x24], 0
je 0x40c417
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov dword [edx + 0xe8], eax
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x1c]
push eax
push 0
push str.rproa
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x40c48c
cmp dword [ebp - 0x24], 0
je 0x40c48c
mov edx, dword [ebp - 0x24]
xor edx, 0xc27e695a
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x3b180000
mov dword [ebp - 0x24], eax
mov ecx, dword [0x42b9a4]
mov edx, dword [ebp - 0x24]
mov dword [ecx*4 + 0x42b9e4], edx
mov eax, dword [0x42b9a4]
add eax, 1
mov dword [0x42b9a4], eax
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x1c]
push eax
push 0
push str.rprob
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x40c501
cmp dword [ebp - 0x24], 0
je 0x40c501
mov edx, dword [ebp - 0x24]
xor edx, 0xc27e695a
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x3b180000
mov dword [ebp - 0x24], eax
mov ecx, dword [0x42b9a4]
mov edx, dword [ebp - 0x24]
mov dword [ecx*4 + 0x42b9e4], edx
mov eax, dword [0x42b9a4]
add eax, 1
mov dword [0x42b9a4], eax
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x1c]
push eax
push 0
push str.rproc
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x40c576
cmp dword [ebp - 0x24], 0
je 0x40c576
mov edx, dword [ebp - 0x24]
xor edx, 0xc27e695a
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x3b180000
mov dword [ebp - 0x24], eax
mov ecx, dword [0x42b9a4]
mov edx, dword [ebp - 0x24]
mov dword [ecx*4 + 0x42b9e4], edx
mov eax, dword [0x42b9a4]
add eax, 1
mov dword [0x42b9a4], eax
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x1c]
push eax
push 0
push str.rprod
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x40c5eb
cmp dword [ebp - 0x24], 0
je 0x40c5eb
mov edx, dword [ebp - 0x24]
xor edx, 0xc27e695a
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x3b180000
mov dword [ebp - 0x24], eax
mov ecx, dword [0x42b9a4]
mov edx, dword [ebp - 0x24]
mov dword [ecx*4 + 0x42b9e4], edx
mov eax, dword [0x42b9a4]
add eax, 1
mov dword [0x42b9a4], eax
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x1c]
push eax
push 0
push str.rproe
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x40c660
cmp dword [ebp - 0x24], 0
je 0x40c660
mov edx, dword [ebp - 0x24]
xor edx, 0xc27e695a
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x3b180000
mov dword [ebp - 0x24], eax
mov ecx, dword [0x42b9a4]
mov edx, dword [ebp - 0x24]
mov dword [ecx*4 + 0x42b9e4], edx
mov eax, dword [0x42b9a4]
add eax, 1
mov dword [0x42b9a4], eax
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x20], 4
mov dword [ebp - 0x24], 0
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x1c]
push eax
push 0
push str.rprof
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x40c6d5
cmp dword [ebp - 0x24], 0
je 0x40c6d5
mov edx, dword [ebp - 0x24]
xor edx, 0xc27e695a
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x3b180000
mov dword [ebp - 0x24], eax
mov ecx, dword [0x42b9a4]
mov edx, dword [ebp - 0x24]
mov dword [ecx*4 + 0x42b9e4], edx
mov eax, dword [0x42b9a4]
add eax, 1
mov dword [0x42b9a4], eax
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x28], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc90.dll_Ordinal_601]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret