Function at 0x40eaad
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3bc
mov eax, dword [0x4cdbf8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
lea eax, [ebp - 0x3b4]
mov esi, 0x20019
push eax
push esi
xor ebx, ebx
mov eax, str.Software_s
push ebx
push eax
push 0x4b3eec
push eax
lea eax, [ebp - 0x398]
push 0x12b
push eax
call fcn.00420ad0
add esp, 0x14
push eax
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40ef09
lea eax, [ebp - 0x3a0]
mov dword [ebp - 0x3a0], 4
push eax
mov eax, dword [0x5524ec]
add eax, 0x5e0
push eax
push ebx
push ebx
push str.Flags
push dword [ebp - 0x3b4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x3ac]
push eax
push esi
push ebx
push str.UidValues
push dword [ebp - 0x3b4]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40eefd
mov edi, 0x12c
mov dword [ebp - 0x3b8], ebx
push edi
lea eax, [ebp - 0x268]
mov esi, ebx
push eax
push ebx
push dword [ebp - 0x3ac]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
jne 0x40eef1
lea eax, [ebp - 0x3b0]
push eax
push 0x20019
push 0
lea eax, [ebp - 0x268]
push eax
push dword [ebp - 0x3ac]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40eec2
xor ebx, ebx
mov dword [ebp - 0x3a8], 0x3e8
push ebx
mov dword [ebp - 0x39c], edi
call fcn.0048d610
mov eax, dword [ebp - 0x3a8]
pop ecx
xor ecx, ecx
add eax, 1
setb cl
neg ecx
or ecx, eax
push ecx
push esi
call fcn.004845db
pop ecx
pop ecx
mov edi, eax
call fcn.0048d5fd
cmp dword [eax], 0xc
jne 0x40ec4a
call fcn.00436990
test eax, eax
je 0x40ec4c
call fcn.00436990
cmp dword [eax], ebx
je 0x40ec4c
mov eax, dword [0x4eeee0]
test eax, eax
je 0x40ec0e
mov edi, dword [eax + 0x190]
jmp 0x40ec14
mov edi, dword [0x4eeee4]
call fcn.00436990
test eax, eax
je 0x40ec26
call fcn.00436990
mov eax, dword [eax]
jmp 0x40ec28
mov eax, ebx
mov ecx, str.Error_allocating_memory__
push ecx
push ecx
push dword [0x4eeee0]
push edi
push ebx
push 0x130c
push str.D:MyProjectsProPilotTestMain.c
push 3
call eax
add esp, 0x20
jmp 0x40ec4c
mov esi, edi
lea eax, [ebp - 0x3a8]
push eax
push esi
lea eax, [ebp - 0x3a4]
push eax
push 0
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x138]
push eax
push ebx
push dword [ebp - 0x3b0]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
je 0x40ed5b
cmp eax, 0xea
jne 0x40eeab
push 0
call fcn.0048d610
mov eax, dword [ebp - 0x3a8]
pop ecx
xor ecx, ecx
add eax, 1
setb cl
neg ecx
or ecx, eax
push ecx
push esi
call fcn.004845db
pop ecx
pop ecx
mov edi, eax
call fcn.0048d5fd
cmp dword [eax], 0xc
jne 0x40ed1b
call fcn.00436990
test eax, eax
je 0x40ed1d
call fcn.00436990
cmp dword [eax], 0
je 0x40ed1d
mov eax, dword [0x4eeee0]
test eax, eax
je 0x40ecde
mov edi, dword [eax + 0x190]
jmp 0x40ece4
mov edi, dword [0x4eeee4]
call fcn.00436990
test eax, eax
je 0x40ecf6
call fcn.00436990
mov eax, dword [eax]
jmp 0x40ecf8
xor eax, eax
mov ecx, str.Error_allocating_memory__
push ecx
push ecx
push dword [0x4eeee0]
push edi
push 0
push 0x1311
push str.D:MyProjectsProPilotTestMain.c
push 3
call eax
add esp, 0x20
jmp 0x40ed1d
mov esi, edi
lea eax, [ebp - 0x3a8]
mov dword [ebp - 0x39c], 0x12c
push eax
push esi
lea eax, [ebp - 0x3a4]
push eax
push 0
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x138]
push eax
push ebx
push dword [ebp - 0x3b0]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueA]
test eax, eax
jne 0x40ee0c
lea ecx, [ebp - 0x138]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x40ed64
sub ecx, edx
cmp ecx, 3
jle 0x40ee0c
mov eax, dword [ebp - 0x3a8]
test eax, eax
je 0x40ee0c
mov byte [eax + esi], 0
lea eax, [ebp - 0x135]
push eax
call fcn.00488212
lea edx, [ebp - 0x138]
cmp word [edx], 0x7473
pop ecx
mov ecx, eax
jne 0x40edaf
cmp byte [edx + 2], 0x72
jne 0x40edaf
push esi
push 1
jmp 0x40edc6
lea edx, [ebp - 0x138]
cmp word [edx], 0x6e69
jne 0x40edda
cmp byte [edx + 2], 0x74
jne 0x40edda
push dword [esi]
push 0
push 2
push ecx
lea eax, [ebp - 0x268]
push eax
call fcn.0040e1b8
add esp, 0x14
jmp 0x40ee0c
lea edx, [ebp - 0x138]
cmp word [edx], 0x6264
jne 0x40ee0c
cmp byte [edx + 2], 0x6c
jne 0x40ee0c
movsd xmm0, qword [esi]
lea eax, [ebp - 0x268]
push ecx
push ecx
movsd qword [esp], xmm0
push 2
push 2
push ecx
push eax
call fcn.0040e1b8
add esp, 0x18
push 0
mov dword [ebp - 0x3a8], 0x3e8
mov dword [ebp - 0x39c], 0x12c
call fcn.0048d610
pop ecx
push dword [ebp - 0x3a8]
push esi
call fcn.004845db
pop ecx
pop ecx
mov edi, eax
call fcn.0048d5fd
cmp dword [eax], 0xc
jne 0x40eea3
call fcn.00436990
test eax, eax
je 0x40eea5
call fcn.00436990
cmp dword [eax], 0
je 0x40eea5
mov eax, dword [0x4eeee0]
test eax, eax
je 0x40ee66
mov edi, dword [eax + 0x190]
jmp 0x40ee6c
mov edi, dword [0x4eeee4]
call fcn.00436990
test eax, eax
je 0x40ee7e
call fcn.00436990
mov eax, dword [eax]
jmp 0x40ee80
xor eax, eax
mov ecx, str.Error_allocating_memory__
push ecx
push ecx
push dword [0x4eeee0]
push edi
push 0
push 0x1322
push str.D:MyProjectsProPilotTestMain.c
push 3
call eax
add esp, 0x20
jmp 0x40eea5
mov esi, edi
inc ebx
jmp 0x40ec4c
push dword [ebp - 0x3b0]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [ebp - 0x3b8]
mov edi, 0x12c
push edi
lea eax, [ebp - 0x268]
inc ebx
push eax
push ebx
push dword [ebp - 0x3ac]
mov dword [ebp - 0x3b8], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyA]
test eax, eax
je 0x40eb82
test esi, esi
je 0x40eef1
push esi
call fcn.0048737c
pop ecx
push dword [ebp - 0x3ac]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x3b4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
inc eax
pop ebx
call fcn.0047fe8c
leave
ret