Function at 0x403540
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x414229
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x44
mov eax, dword [0x465148]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], 0
mov dword [ebp - 4], 2
mov dword [ebp - 0x48], str.Bctu11XxW2jzCltY1Xfo1noM2xD82WcXWSeB98Cc3JV9lxp4uEfn10LQcD7S1xlps0szDKAFWDbUQl23tsMXn3MD3gAf1VLcPVonTVwYkOMzVGunqw3T9ISkJ4xoeXcBL8E1axdTiUqgGRuEO7AQ95EKWciW9QV706fnmixTycDAstsH7xnu01PuPs6Xs5UnhsAlfIA7hrQAQrpyQbJo4bkO7c5YbvLhnTrJibxqb3oLK21rwvq8t97FYkhXzjJT3a0lNRKot0u5iPAMF5xc7fnJanzl9YGx67QSMOGjTOfUeiRHY7SN3fm0H9VW4cJjgs9bFewyS9GnhP4FVhqxEu9s823MvHku3ebDqH930wcb6z9a6bTuR4ELPh0QFRsJHElm5Aedri7hU6KNjiEHYD2XPpg6djaqPdF34k0ANGp0jzJ9svY23Y6AJQQJ6jBT9GccBypgeMxXaQ9Rv67503pHKTagCLcxolT2N05LqCo1HoeyxJgeyTbTCL4psdxJpKGywAmcH5ljtjrTHtzBjKngGyUexPrU9WsxxkiaWWbflorybKa7DWDoTdtXauUuAi2xopCMDTatw06cgo4rL1jqRdAYlREgd7O1yaCxzQMBErtps4bycxQx0g6f7nr0gARlkizDsB350OhLTdMYFesAMxyqfiv5LV5oG2ets6FaDz0lx7QhM4m9RHfd3DLsksQAyrNEs6ATwGAgVVaUQRBJTeesyWIXYJTX5CDbidxqgHAy79S0luiipjr7werjdAjeBG9pLM72dG59xsujWNDaVUDjn4x7X8sIGJM8CTJaobLP8RLfAFS4WMoheviTDJ5p5V8uyrCmyfUkgBTRn0n5Rr6rXat362eTJpN5d3Qn9wneLeiPAHzK580i66sPDVftujYcjXzwkkRrCX5uD6hwTweN6K3X3JlWjdViTvflRl5F7MentF8b23Gy8iO9Edknp7f1HHOTGmzgFXbhEvmWXby4zqufeqHeXRBCr0Tb0h5YraAneSGqeao0gdD7qzO8rFjBQUu5JMzi8B0gzpxtgj80Lv0jpqT9z3lBF31uEr5lT7PXh1V5A18Fu1t7Ul7OmPhxF6eefAM2s5rYeVwuJK8zxg3t7fr63dosCNk5Kr4T2s2izMD9e4gdPCU4LDPqaExEk2SLf0nelNGhHseEBA110glh5C3Gv2fBzFQXu8kY6pnph4uMqxVRHKxsGkLs9CYbJsUnTWQnCaLmGE4Ft5iYShS6uIdi3h6lnnQjDcca2GVCa89ICM37DT85PV2IjN7MCK8cEN2j32X3Qm2SE6kmlSn60GNXVEbIzt6jYi1wY8oK9RhcuQfBbAllQBxvgUFrrQ7Cunv0JNe6PQAF6iPtcyxvMeJ7XmcdsysURSAsLLVKY7Tlv37lep6QPXkO5kvkXEkGDO189CoC26mgS93oXYU5z7FUSRA5oCVh9ihKsSYRGTitpXvxWczsbRBW5EEOeioHzxxCVVvU4gf6mkpvKk6HEOfgApnSyLe2cYOKxAjpxiAncl0wmANVQK495c2R6xpWrDVS0ScuQSvgjTszIDmRifJjvEtJvEnIC9f9fHML5hJh0yib0DssAH9E0U9Y4UUFgterB86Vs6gC2tdgzMS3gj18qA3Ywn9M3vu2nV4NVsAmB5hlYgxmQYTTiPKY3kwFVgFCNGnkc1Qsp4PB0ilvNrbfUipainOy0Ewf4JAByVJJxpyRB6l0y95yd8Kxmm9lAIQmjb4R7TxXzltBYVDKtjBpR363LnTzfqyPDR1vB74LwlVTu4o2SWDueflxsTv8ORH9QAB6VeoRBrXMejPmFoNxp9v8T0gwPIsPH1NT7kG2heXqLcFkOgoMm3texmfqLKTumqNT6190BYwSmbFimekza8oCHacTY3evJL74ryWVsfjOeAi6roMa1CqFeRdF0GIGGI7sqIPW8QjyKL808xLWMjnFmaG9zKIe2KWj3N60kQP2w3PBui6u5wBMP1kiEnHHy5BYYCFXhDwPlO8XvYsra324OFdOnGa5XHVYCs0ACPlbdsOu8KjE3dbsWCHY7NIJVnzV4cavsiBVmoNYgu05pRaPiExJpU1o7C0D7PfpbBsC1s48Mf5s7515ChaBtesxIyFhDqi60Ntij7wMkzdSe9G0HMLtiL3J2KJDejEFTRv6giexWKnCodJji6khOLWDvSDuEMGjIplg5AVGazuvI2JjT4ejj0Vt3NCpNwIY77sCCtUPKuCokKf6RLwlD9eGT191BCYoAS3sfiQPTA69tSKxlo1IeKv2BHPV4xK3tHYBWkSN3AoFrkIfkedf6gRu4DzOi9acUISoiHD70QdQDqwCDLihQ3UmsgojtFmRTd2Eot9rTnuCvQxOTB9FDjG9mEy6PMqQfBpMYxVFKKXGxme6blv9DgL2CJ3n1fvPg47w2WOqmQkFbStKVegFwPJJb3pADoRBMhGGHsY3Ug5V3Y7GaaEaNvCfbrWJe00ghizIQETmCobJsKs2rpKjSB24XObMAx9wcB6M6YP9obdheydyxdId6hqPxEcCYMUH9JHq1IUmP5iEB1mGsPKmKn5iBTG2bJdPXdTz9S55i4aNi2hvmybC8y7nB1UFjDjxGyixWe6yLB7AsLBGCGlgoer8E1H534L4ykw3SjA90I1KGClzRyJWIzPIzptHsOvm18mcjrWnoUjW4jNbQsRIrv23jKPMoRmKfuGfAME3y5qVf2y7MyEivLzLKUGlxGv88Q9H4NMEulE6vdXq4TC6EBePPNY52u2yw38HzsGNKbLw92bT6O41rsNaw6yPtf9aqVjuHBVde1ddCzVdBE2d038KasViDEEDIPEDFh4Eed8YuAwAacQc9g2FttrXq4Nhbum3nHJ0r5xxtzJQfG5Kkcn4DFbbRzqWv9SVkmvbWS7msIQpdPB2B82b8y16aYN3dtYSFS3ddRnLqTIfkLxvJASjTzxHCKLDMzCKd7Xc6czVwJESI6gX4hPRf9bOI7Fh
push 1
lea ecx, [ebp - 0x18]
call fcn.00405720
lea ecx, [ebp - 0x18]
call fcn.00401730
mov byte [ebp - 4], 3
mov byte [ebp - 4], 4
mov dword [ebp - 0x50], str.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
lea eax, [ebp - 0x24]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
lea edx, [ebp + 0x10]
push edx
call fcn.004015d0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx]
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x2c]
mov edx, dword [eax + 0xc]
call edx
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x403628
push 0x41973c
mov ecx, dword [ebp + 8]
call fcn.004016b0
mov eax, dword [ebp - 0x28]
or eax, 1
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00401ca0
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x10]
call fcn.00401ca0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x14]
call fcn.00401ca0
mov eax, dword [ebp + 8]
jmp 0x4037c8
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x44], str.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
mov dword [ebp - 0x4c], str.RcTWPofLqf9tiDPJXBRnRiEfS7S4wWkl0V5TN0EDMw3mIsR9DSi6Q3fY722IpKuOnYqomyy8yQAoGs4ollXdHYkQtzlKfONpndt9hOi2RPatcqB9QK0erdHQf1BG4UBMGKs1oHF1CTleIFxzddbS9SCTrrDKksa4c7d7u8OLvkMYh8NfI5T8SfFTTMuR5mCM87dHpaiSXclLnhdcW9e6JDPGcNhFPbY0UTzi0T1WcqYk4cwVKrR9Orv4E5kuD1b9hW6A8xlscKO5Twlndm8Of8sKo23n3x19d59tGm0TGM7bXuaWID1RaiQtiS24a3cpXpM5xF3HbTesOSouSj7fIxfRYIXYzmjI3qHGCV3fWkJtz7ijCKH75BzxRqIimTPngSdNPDQR29hsP84a6FFPqgc48IjQbFa8DVja9nKOeeHnLtLgJ7zXXnPVGbPcagwav0zFuMqn6iVR0fnhfpyhTUACfaAAWN66qRgsQCUIYT6jGaHjAhsKtUYygRYYJ3U2gDhOeHH0YooJwtwWYIJyUsT6Ymz3cjUx7K8jATDiX0fWG3rdU6u4vIFzpu4axtUAmW1E0dUFyI8nUjYza3tRvYVgjWjnu0DEEkIKsFd8arJdphzXKB3JeALobggsgVGCSjHM2qvDVPQkVvvMX6fEXVD9mL3TCUzSfC44MEd6MqpiIcXPmaJP2xpFREVRO8Edalw8NE8mrwvoz32qKNNENWk3yVjfEnfTlStKbNsglklBKqHjfkpHAP0k1qJCp0uFLXUP2wLyIPjC4cOEbn8MNUsuAMThUWrGEDvztl2YyQSOQP88bUcTN18vpwAdtI5ywhxiEQAdC2IjWqjP8gth01OgmWN7Wqdo7CXyKIeRpSBRFzSkb2siORIB6cCnHIAHvHl9VI4xfGs1VugCJajzFCpn3fi6ARPtWRTYnFDK9BlV5XL9vWOV3oRkoUe50Gs92PugjtR0Wztx2nDQp1pomot95OVQRAQCADCmV84JeqcqcFV5Fh9a8SYxPq4BAykeIAqPuIWllKYUvmEFL1JFPfx680rf784MKqGsflBap1t1oxGTrOxy0RGqdF2oTu7vl6OdtgvvivrsPTNtHCyD8jl16oSnTkt8o0ShrLxDEjMDiGEzPFoWM7QnzUgdBWYN2KA3seYJTmyHLKMQnxkJwYUVaRvC1dp7Gmh7P6t0drWtMvFo79irUED4dDa2EAma4aUgUU4vw9itkVBI9HOGxWu8KvQAx7nr7Mat2jclyR4VXAQPNN7k2LooFyn6dnSU3egXyWHwMRRNJEtcFk1qX5A8xGF8Lzb1mM78RCN1rdsHePwFDuYd2XLwKDOTKstCN6gzma6KwOI0wqSDQP9aPxXJr00ngoR3o7T6ruACOqIHclkTFfgU52DRv8BbVij6p9RIxCFrRzABp0wHMWImqJCYCi7FQEH0pMBE6D91WEF7Kt4K9ryxA185evaTGxMqb0fjzG939SpponpfUAsIhjO9wGwDADfwP3xiq1hgikpl0SSLzBKod9E5sv8keaASIyQsaVsi0PouJLJpQYnd993LMw18MUgzprdOgQ3JB7g5jp6FIAW4P0N106oUXjB5OWkAhdN9gG18WH0ytzH24q6ClqAh0jOm5GtdIAN2QUOglbktCrwnDjuiSv7rBr0NAzCk8BBP3YYRKUTkW3UClxWJndxq2Qbi2OmL7X6YhTU2Vzqqvv5q18OzpeFR4ed8k2UzdszOIwfwapsADlMHt9Rpj2obXRS5I7a03VJGmvEPedt3UmuxBJcM9YJryBRmDgCtelEPTm19qpQudGheh8mbMdTq7TJEQ3sFnHNvPoklAWP4COSimDf4QJcDuKU5llrq973QqLK13qAoxwEpKDbOKm6h1KLdno2NbKC1GsytDV7vBVBvnCQOBJcdy6v5uHi4bQc6pibHKcnUKwnHb6lnmlf4uvgcuaWENLK68TapguaAa4hi7I8JGs88Il2srXlhMTL1dJe0zIcWgFdN79673fSqCsKhFDvLQK2NG6eAAh4RMLLWbctGEDEE8obvL13dHRJmr89XJehDH89FjGWztrLdGb2qAifT9Svv4K6EXab3gRd5wAwQhfEffrRNhY3hTyi5WLmSKf5kXnqwOREyzwVygr9OeU03MEuNfLly3f7aAqWvgE9ECviEJVe95gj6A4RpRcBjmvmFb6wNT6e5vlDMbknSKvNw7KAxtjOsGUIr2MAjOruI0UXRzxICsuYAeKbOwcO2yY4wJecd61VqG1qxs9glEkXNJaANeMAM1M5p7v2PQeUYUcj8TdWw2xwRxb91xOe8BWq2hYrIcxg8NS4FrrA6BT3Fu5yVeS0dpIzNApnDgw5AcjeUb6SqBxAludX0MmiS1SVzGOtwdNX0LyyjG2pmyWPasYQyuvDFuPLDuAYyd7QXSwRY6EEagU7EjU6XmmHQuxiL8pN6re42JTbM0XYzJxow0A0vdOkl8wxa4ltG61lJghChzyGLkghGsEeoCBsO4TuuXIa7orOxa1tJrzSpAS2hGQPQTfaCsoYROgHmzwXQTk95NJCAnuvBEYi1a8IP0eKSQWyyRmI3Gfd0knRPNvhcnYrYhstdQirwyaO8x9lryDlQeopaeIuMRMvNRfYeK1yiFxeDS8xlgcoIedY2kcXj9r7tlmR2Unw8f7aQaEmVjrllxVbkYl9Si6iXPuVw60CoycDMIahr1IjeV8wqnU8RmXraj88fx04VbrlBQ78YrdyxE3n8X0EMrjmXqDyw2aV2UQyHU6bEpVtavr1HpX5oBuebFboiQMbrRIfHgK4uvHBGLFDSIzrC0XDyfK2hOMHlnIXofPMu6cEnhGgP7QoEIgyP9bXPdBeo4MYKh8LCiSqfl0Sb7bcOVWlG97Q5UkpHPe71KwOL05SYNHj0sjOFMIJJJ3sNgzMONGTz508MQX9X1rhOcfP0tjTzfgHv7yMKp7u2GAiuhtrkSvpCCmsIbzlJGVFnQ4IWlLDe3piD
lea ecx, [ebp - 0x20]
push ecx
push 0
lea edx, [ebp - 0x1c]
push edx
push 0
lea ecx, [ebp + 0x14]
call fcn.00402130
push eax
mov eax, dword [ebp - 0x24]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x54], str.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
lea ecx, [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x20]
push edx
lea ecx, [ebp - 0x18]
call fcn.004033b0
push eax
lea eax, [ebp - 0x1c]
push eax
push 0
lea ecx, [ebp + 0x14]
call fcn.00402130
push eax
mov ecx, dword [ebp - 0x24]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0xffffffffffffffff
lea ecx, [ebp - 0x18]
call fcn.00404880
cmp dword [ebp - 0x38], 0
je 0x4036f3
push 0x41a2fc
mov ecx, dword [ebp + 8]
call fcn.004016b0
mov eax, dword [ebp - 0x28]
or eax, 1
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00401ca0
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x10]
call fcn.00401ca0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x14]
call fcn.00401ca0
mov eax, dword [ebp + 8]
jmp 0x4037c8
lea ecx, [ebp - 0x18]
push ecx
mov ecx, dword [ebp + 8]
call fcn.004015d0
mov edx, dword [ebp - 0x28]
or edx, 1
mov dword [ebp - 0x28], edx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00401ca0
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x10]
call fcn.00401ca0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x14]
call fcn.00401ca0
mov eax, dword [ebp + 8]
jmp 0x4037c8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004098de
mov esp, ebp
pop ebp
ret 0x10