Function at 0x40cb50
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x8a
push 0
push 0
dec ecx
jne 0x40cb58
push ebx
push esi
push edi
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x40cf0c
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
call fcn.00404b40
xor eax, eax
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x40cedc
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 8]
push eax
push 0x20019
push 0
push 0x40cf1c
push 0x80000001
call sub.advapi32.dll_RegOpenKeyExA_1
test eax, eax
je 0x40cea2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x40cee6
xor eax, eax
push ebp
push 0x40ce98
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x10]
lea edx, [ebp - 0x410]
mov ecx, 0x400
call fcn.00404da8
push 0
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x418]
mov ecx, dword [ebp - 0x10]
mov edx, 0x40cf5c
call fcn.00404e44
mov edx, dword [ebp - 0x418]
mov ecx, 0x40cf9c
mov eax, 0x80000001
call fcn.0040c468
cmp dword [ebp - 0x414], 0
je 0x40ce8b
xor eax, eax
push ebp
push 0x40ce7f
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40cfb0
push 0
lea eax, [ebp - 0x41c]
push eax
mov edx, 0x40cf5c
lea eax, [ebp - 0x420]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov edx, dword [ebp - 0x420]
mov ecx, 0x40cfc8
mov eax, 0x80000001
call fcn.0040c468
push dword [ebp - 0x41c]
push 0x40cfe0
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40cfec
mov edx, 0x40cf5c
lea eax, [ebp - 0x428]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov eax, dword [ebp - 0x428]
lea edx, [ebp - 0x424]
call fcn.0040c894
push dword [ebp - 0x424]
push 0x40cfe0
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40d000
push 0
lea eax, [ebp - 0x42c]
push eax
mov edx, 0x40cf5c
lea eax, [ebp - 0x430]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov edx, dword [ebp - 0x430]
mov ecx, 0x40cf9c
mov eax, 0x80000001
call fcn.0040c468
push dword [ebp - 0x42c]
push 0x40cfe0
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40d018
push 0
lea eax, [ebp - 0x434]
push eax
mov edx, 0x40cf5c
lea eax, [ebp - 0x438]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov edx, dword [ebp - 0x438]
mov ecx, 0x40d034
mov eax, 0x80000001
call fcn.0040c468
push dword [ebp - 0x434]
push 0x40cfe0
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40d04c
push 0
lea eax, [ebp - 0x43c]
push eax
mov edx, 0x40cf5c
lea eax, [ebp - 0x440]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov edx, dword [ebp - 0x440]
mov ecx, 0x40d068
mov eax, 0x80000001
call fcn.0040c468
push dword [ebp - 0x43c]
push 0x40cfe0
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40d084
push 0
lea eax, [ebp - 0x444]
push eax
mov edx, 0x40cf5c
lea eax, [ebp - 0x448]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov edx, dword [ebp - 0x448]
mov ecx, 0x40d0a4
mov eax, 0x80000001
call fcn.0040c468
push dword [ebp - 0x444]
push 0x40cfe0
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
push dword [eax]
push 0x40d0c0
push 0
lea eax, [ebp - 0x44c]
push eax
mov edx, 0x40cf5c
lea eax, [ebp - 0x450]
mov ecx, dword [ebp - 0x10]
call fcn.00404e44
mov edx, dword [ebp - 0x450]
mov ecx, 0x40d0d8
mov eax, 0x80000001
call fcn.0040c468
push dword [ebp - 0x44c]
push 0x40cfe0
mov eax, dword [ebp - 4]
mov edx, 4
call fcn.00404eb8
mov eax, dword [ebp - 4]
mov edx, 0x40cfe0
call fcn.00404e00
mov eax, dword [ebp - 4]
inc dword [ebp - 0xc]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x40ce8e
inc dword [ebp - 0xc]
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x40cea2
push 0x400
lea eax, [ebp - 0x410]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegEnumKeyA
test eax, eax
jne 0x40cec9
cmp dword [ebp - 0xc], 0x14
jle 0x40cbbd
mov eax, dword [ebp - 8]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x40cee6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x40cf13
lea eax, [ebp - 0x450]
mov edx, 0x10
call fcn.00404b64
lea eax, [ebp - 0x10]
call fcn.00404b40
ret