Function at 0x40b5de
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push 0x3c
mov eax, 0x42b878
call fcn.00411bd6
mov dword [ebp - 0x40], edx
mov edi, ecx
mov dword [ebp - 0x14], edi
xor ebx, ebx
lea ecx, [ebp - 0x20]
mov esi, 0x104
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], esi
call fcn.0040c14b
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], esi
call fcn.0040c14b
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x3c]
mov byte [ebp - 4], 1
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov esi, eax
test esi, esi
je 0x40b654
push esi
push dword [ebp - 0x40]
push 0x4092d0
call fcn.0040a91c
add esp, 0xc
jmp 0x40b7f3
cmp dword [ebp - 0x3c], 0
jne 0x40b661
mov esi, ebx
jmp 0x40b7f3
push dword [ebp - 0x40]
push 0x409330
call fcn.0040a91c
pop ecx
pop ecx
push dword [ebp - 0x18]
lea ecx, [ebp - 0x10]
call fcn.0040c203
push ebx
push ebx
lea ecx, [ebp - 0x2c]
push ecx
push ebx
lea ecx, [ebp - 0x18]
push ecx
push eax
push dword [ebp - 0x24]
push dword [edi]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov edi, eax
cmp edi, 0xea
jne 0x40b6d1
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x10]
add eax, eax
push eax
mov dword [ebp - 0x18], eax
call fcn.0040c203
push ebx
push ebx
lea ecx, [ebp - 0x2c]
push ecx
push ebx
lea ecx, [ebp - 0x18]
push ecx
push eax
push dword [ebp - 0x24]
push dword [esi]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov edi, eax
cmp edi, 0xea
je 0x40b69f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x10]
call fcn.0040c1d8
test edi, edi
jne 0x40b7e7
mov eax, dword [ebp - 0x2c]
sub eax, 1
je 0x40b743
sub eax, 1
je 0x40b743
mov edi, dword [ebp - 0x14]
dec eax
sub eax, 1
jne 0x40b7df
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x30]
push eax
push esi
mov ecx, edi
mov dword [ebp - 0x30], ebx
call fcn.0040aba3
test eax, eax
jne 0x40b7df
cmp dword [esi - 0xc], eax
jne 0x40b72d
push 0x409174
lea ecx, [ebp - 0x10]
call fcn.0040c106
mov esi, dword [ebp - 0x10]
push dword [ebp - 0x30]
push esi
push 0x409338
call fcn.0040a91c
add esp, 0xc
jmp 0x40b7df
mov esi, 0x104
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x44], esi
call fcn.0040c14b
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x34]
push esi
mov dword [ebp - 0x30], esi
call fcn.0040c203
mov esi, dword [ebp - 0x10]
lea ecx, [ebp - 0x30]
mov edi, dword [ebp - 0x14]
push ecx
push eax
push esi
mov ecx, edi
call fcn.0040abdb
cmp eax, 0xea
jne 0x40b7a4
mov ebx, dword [ebp - 0x44]
add ebx, ebx
lea ecx, [ebp - 0x34]
push ebx
mov dword [ebp - 0x30], ebx
call fcn.0040c203
lea ecx, [ebp - 0x30]
push ecx
push eax
push esi
mov ecx, edi
call fcn.0040abdb
cmp eax, 0xea
je 0x40b780
xor ebx, ebx
mov edi, dword [ebp - 0x34]
test eax, eax
jne 0x40b7d0
cmp dword [esi - 0xc], 0
jne 0x40b7c1
push 0x409174
lea ecx, [ebp - 0x10]
call fcn.0040c106
mov esi, dword [ebp - 0x10]
push edi
push esi
push 0x409368
call fcn.0040a91c
add esp, 0xc
lea ecx, [edi - 0x10]
mov byte [ebp - 4], 1
call fcn.0040ae9d
mov edi, dword [ebp - 0x14]
inc dword [ebp - 0x24]
jmp 0x40b670
lea esi, [edi - 0x103]
neg esi
sbb esi, esi
and esi, edi
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff0
call fcn.0040ae9d
test esi, esi
jne 0x40b88d
cmp dword [ebp - 0x3c], esi
je 0x40b819
push 0x409398
call fcn.0040a91c
pop ecx
mov edi, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x20]
call fcn.0040c203
lea ecx, [ebp - 0x48]
jmp 0x40b840
mov eax, dword [ebp - 0x1c]
add eax, eax
push eax
mov dword [ebp - 0x1c], eax
call fcn.0040c203
lea ecx, [ebp - 0x38]
push ecx
push ebx
push ebx
push ebx
lea ecx, [ebp - 0x1c]
push ecx
push eax
mov eax, dword [ebp - 0x14]
push dword [ebp - 0x28]
push dword [eax]
call edi
mov esi, eax
lea ecx, [ebp - 0x20]
cmp esi, 0xea
je 0x40b82f
push dword [ebp - 0x1c]
call fcn.0040c1d8
test esi, esi
jne 0x40b884
push dword [ebp - 0x20]
push dword [ebp - 0x40]
push 0x40939c
call fcn.0040a91c
add esp, 0xc
inc dword [ebp - 0x28]
jmp 0x40b81f
cmp esi, 0x103
sete bl
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.0040ae9d
mov al, bl
call fcn.00411b9f
ret