Function at 0x404cf0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x748
mov eax, dword [0x427178]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 0xc]
xor eax, eax
push edi
push 0x206
push eax
mov word [ebp - 0x734], ax
mov ebx, edx
lea eax, [ebp - 0x732]
mov dword [ebp - 0x73c], ecx
push eax
mov dword [ebp - 0x748], esi
mov dword [ebp - 0x738], 0
call fcn.00418440
xor eax, eax
push 0xfe
push eax
mov word [ebp - 0x124], ax
lea eax, [ebp - 0x122]
push eax
call fcn.00418440
xor eax, eax
xorps xmm0, xmm0
push 0xfe
push eax
mov word [ebp - 0x24], ax
mov dword [ebp - 0xa], eax
mov word [ebp - 6], ax
mov word [ebp - 0x224], ax
lea eax, [ebp - 0x222]
push eax
movdqu xmmword [ebp - 0x22], xmm0
movq qword [ebp - 0x12], xmm0
call fcn.00418440
mov edi, dword [ebp + 8]
xor eax, eax
mov word [esi], ax
add esp, 0x24
xor esi, esi
mov dword [ebp - 0x744], 0
test edi, edi
je 0x404de3
cmp esi, 5
jne 0x404db1
movzx eax, byte [ebx + 5]
push eax
jmp 0x404db3
push 0
push str._02X
lea eax, [ebp - 0x24]
push 0x10
push eax
call fcn.0040fd8c
add esp, 0x10
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x124]
push 0x80
push eax
call fcn.00410165
inc esi
add esp, 0xc
cmp esi, edi
jb 0x404da5
mov ecx, dword [ebp - 0x73c]
movzx eax, byte [ecx + 0x417]
push eax
movzx eax, byte [ecx + 0x416]
push eax
movzx eax, byte [ecx + 0x415]
push eax
movzx eax, byte [ecx + 0x414]
push eax
movzx eax, byte [ecx + 0x413]
push eax
movzx eax, byte [ecx + 0x412]
push eax
push ecx
push str._s__02X_02X_02X_02X_02X_02X
lea eax, [ebp - 0x224]
push 0x80
push eax
call fcn.0040fd8c
add esp, 0x24
lea eax, [ebp - 0x734]
lea edx, [ebp - 0x738]
lea ecx, [ebp - 0x224]
push eax
call fcn.00403050
add esp, 8
test eax, eax
je 0x40501c
lea eax, [ebp - 0x740]
mov dword [ebp - 0x740], 0
push eax
push 0x20019
push 0
lea eax, [ebp - 0x734]
push eax
push dword [ebp - 0x738]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x40501c
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x738], eax
lea eax, [ebp - 0x73c]
push eax
lea eax, [ebp - 0x738]
mov dword [ebp - 0x73c], 4
push eax
push 0
push 0
push str.ButtonNum
push dword [ebp - 0x740]
call edi
mov ebx, dword [ebp - 0x738]
test ebx, ebx
je 0x404ff9
xor eax, eax
push 0x206
push eax
mov word [ebp - 0x52c], ax
lea eax, [ebp - 0x52a]
push eax
call fcn.00418440
xor eax, eax
push 0xfe
push eax
mov word [ebp - 0x324], ax
lea eax, [ebp - 0x322]
push eax
call fcn.00418440
add esp, 0x18
xor esi, esi
test ebx, ebx
je 0x404ff9
nop
inc esi
lea eax, [ebp - 0x324]
push esi
push str.PushButtonName_d
push 0x80
push eax
call fcn.0040fd8c
add esp, 0x10
mov dword [ebp - 0x73c], 0x208
lea eax, [ebp - 0x73c]
push eax
lea eax, [ebp - 0x52c]
push eax
push 0
push 0
lea eax, [ebp - 0x324]
push eax
push dword [ebp - 0x740]
call edi
test eax, eax
jne 0x404f9b
lea eax, [ebp - 0x124]
push 0x80
push eax
call fcn.0040f984
push eax
lea eax, [ebp - 0x52c]
push eax
lea eax, [ebp - 0x124]
push eax
call fcn.0040ff0b
add esp, 0x14
test eax, eax
jne 0x404f9b
lea eax, [ebp - 0x52c]
push 0x2c
push eax
call fcn.0040fcde
add esp, 8
test eax, eax
jne 0x404fca
cmp esi, dword [ebp - 0x738]
jb 0x404f10
push dword [ebp - 0x740]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x744]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040f324
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x52c]
push 0x2c
push eax
call fcn.0040fcde
add eax, 2
push eax
push 0x104
push dword [ebp - 0x748]
call fcn.00410465
add esp, 0x14
mov dword [ebp - 0x744], 1
push dword [ebp - 0x740]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x744]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040f324
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040f324
mov esp, ebp
pop ebp
ret