Function at 0x40f920
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x423e3b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x214
mov edx, dword [esp + 0x224]
push ebx
push ebp
mov ebx, ecx
push esi
push edi
test edx, edx
mov dword [esp + 0x10], ebx
je 0x40fbad
mov esi, dword [esp + 0x238]
xor eax, eax
mov ecx, esi
mov edi, edx
mov ebp, ecx
push esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, ebp
push edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, ebx
call fcn.00411660
test eax, eax
jne 0x40fb77
mov eax, dword [0x42a2c0]
mov dword [esp + 0x14], eax
mov ebx, dword [sym.imp.SHLWAPI.dll_SHGetValueA]
mov dword [esp + 0x22c], 0
mov esi, 0x42d4fc
mov ebp, 0x104
mov ecx, dword [esi]
lea edx, [esp + 0x14]
push ecx
push str.SOFTWAREMicrosoftWindowsCurrentVersionUninstall
push 0x42a454
push edx
call fcn.00403550
mov ecx, 0x41
xor eax, eax
lea edi, [esp + 0x30]
add esp, 0x10
rep stosd dword es:[edi], eax
lea eax, [esp + 0x18]
lea ecx, [esp + 0x20]
push eax
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x20]
push ecx
push edx
push str.DisplayName
push eax
push reloc.OLEAUT32.dll_SysReAllocString
mov dword [esp + 0x34], 1
mov dword [esp + 0x30], ebp
call ebx
mov al, byte [esp + 0x20]
test al, al
jne 0x40fa61
add esi, 4
cmp esi, str.E3EFA461_EB83_4C3B_9C47_2C1D58A01555
jl 0x40f9a4
mov ecx, dword [esp + 0x10]
push 0
push 0
call fcn.0040fbd0
test eax, eax
je 0x40fb7e
mov eax, dword [0x42a2c0]
lea ecx, [esp + 0x124]
push 0x100
push ecx
push 0xe008
mov dword [esp + 0x1c], eax
call fcn.004032d0
mov edx, 0x100
sub edx, eax
cmp edx, 2
jle 0x40faa9
lea eax, [esp + 0x124]
lea ecx, [esp + 0x10]
push eax
call fcn.00402fd0
jmp 0x40faf7
mov edx, dword [esp + 0x238]
mov eax, dword [esp + 0x234]
lea ecx, [esp + 0x20]
dec edx
push ecx
push 0x42a954
push edx
push eax
call dword [sym.imp.MSVCRT.dll__snprintf]
mov eax, dword [esp + 0x24]
mov edx, dword [0x42a2c4]
add esp, 0x10
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x40fb77
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
jmp 0x40fb63
push 0x1ff
lea ecx, [esp + 0x14]
mov esi, 0x200
call fcn.004030a0
test eax, eax
je 0x40faec
push esi
push eax
push 0xe008
call fcn.004032d0
mov ecx, esi
sub ecx, eax
cmp ecx, 2
jg 0x40faec
add esi, 0x100
lea ecx, [esp + 0x10]
lea edx, [esi - 1]
push edx
call fcn.004030a0
test eax, eax
jne 0x40fac0
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
call fcn.00403150
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x238]
mov edx, dword [esp + 0x234]
push eax
dec ecx
push 0x42a954
push ecx
push edx
call dword [sym.imp.MSVCRT.dll__snprintf]
mov eax, dword [esp + 0x20]
mov edx, dword [0x42a2c4]
mov esi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
add esp, 0x10
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x40fb4c
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x40fb4c
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.00420d62
add esp, 4
mov eax, dword [esp + 0x14]
mov edx, dword [0x42a2c4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x40fb77
add eax, 0xfffffff4
push eax
call esi
test eax, eax
jg 0x40fb77
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.00420d62
add esp, 4
mov eax, 1
jmp 0x40fbaf
mov eax, dword [esp + 0x14]
mov edx, dword [0x42a2c4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x40fbad
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x40fbad
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.00420d62
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x224]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x220
ret 8