Function at 0x412a30
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x599599
mov eax, dword fs:[0]
push eax
sub esp, 0x204
mov eax, dword [0x6102d4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x114]
mov ebx, dword [ebp + 0xc]
push 0x104
push 0
push eax
call fcn.0056f980
add esp, 0xc
lea ecx, [ebp - 0x1d4]
push str.MySoft
call fcn.0040f5b0
push str.ZHGameBox
lea ecx, [ebp - 0x1bc]
mov dword [ebp - 4], 0
call fcn.0040f5b0
push 9
xor eax, eax
mov byte [ebp - 4], 1
push 0x5a1790
lea ecx, [ebp - 0x12c]
mov dword [ebp - 0x1e8], 0x104
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 7
mov word [ebp - 0x12c], ax
call fcn.00411630
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0x1a4]
push eax
call fcn.0044da86
add esp, 8
mov edx, dword [ebp - 0x118]
mov byte [ebp - 4], 4
cmp edx, 8
jb 0x412b3c
mov ecx, dword [ebp - 0x12c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x412b32
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41324f
push edx
push ecx
call fcn.0045ec62
add esp, 8
xor eax, eax
mov dword [ebp - 0x11c], 0
cmp dword [ebp - 0x1c0], 0x10
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [ebp - 0x114]
mov word [ebp - 0x12c], ax
push ecx
push dword [ebp - 0x1c4]
lea eax, [ebp - 0x1d4]
mov dword [ebp - 0x118], 7
cmovae eax, dword [ebp - 0x1d4]
push eax
call fcn.00450220
add esp, 0x10
lea eax, [ebp - 0x114]
lea ecx, [ebp - 0x144]
push eax
call fcn.0040f5b0
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.0044d796
add esp, 8
mov edx, dword [ebp - 0x130]
mov byte [ebp - 4], 7
cmp edx, 0x10
jb 0x412bf4
mov ecx, dword [ebp - 0x144]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x412bea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413254
push edx
push ecx
call fcn.0045ec62
add esp, 8
push 0x104
lea eax, [ebp - 0x114]
mov dword [ebp - 0x134], 0
push 0
push eax
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
call fcn.0056f980
cmp dword [ebp - 0x1a8], 0x10
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x1e8], 0x104
push ecx
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x1bc]
cmovae eax, dword [ebp - 0x1bc]
push eax
call fcn.00450220
add esp, 0x1c
lea eax, [ebp - 0x114]
lea ecx, [ebp - 0x12c]
push eax
call fcn.0040f5b0
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0x174]
push eax
call fcn.0044d796
add esp, 8
mov edx, dword [ebp - 0x118]
mov byte [ebp - 4], 0xa
cmp edx, 0x10
jb 0x412cc7
mov ecx, dword [ebp - 0x12c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x412cbd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413259
push edx
push ecx
call fcn.0045ec62
add esp, 8
push 0x104
lea eax, [ebp - 0x114]
mov dword [ebp - 0x11c], 0
push 0
push eax
mov dword [ebp - 0x118], 0xf
mov byte [ebp - 0x12c], 0
call fcn.0056f980
cmp dword [ebp - 0x190], 0x10
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x1e8], 0x104
push ecx
push dword [ebp - 0x194]
lea eax, [ebp - 0x1a4]
cmovae eax, dword [ebp - 0x1a4]
push eax
call fcn.00450220
add esp, 0x1c
lea eax, [ebp - 0x114]
lea ecx, [ebp - 0x144]
push eax
call fcn.0040f5b0
lea eax, [ebp - 0x144]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x15c]
push eax
call fcn.0044d796
add esp, 8
mov edx, dword [ebp - 0x130]
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x412d9a
mov ecx, dword [ebp - 0x144]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x412d90
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41325e
push edx
push ecx
call fcn.0045ec62
add esp, 8
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
mov dword [ebp - 0x1d8], 0
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1ec], 0x104
call fcn.0045048a
lea ecx, [ebp - 0x210]
mov byte [ebp - 4], 0xe
call fcn.004504be
test eax, eax
lea eax, [ebp - 0x1d8]
push eax
je 0x412f05
push 0xf013f
push 0
push str.SoftWare
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x41302f
cmp dword [ebp - 0x178], 8
lea ecx, [ebp - 0x1dc]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea eax, [ebp - 0x18c]
cmovae eax, dword [ebp - 0x18c]
push 0
push ecx
push 0
push 0xf013f
push 0
push 0
push 0
push eax
push dword [ebp - 0x1d8]
call esi
test eax, eax
je 0x412e7d
push dword [ebp - 0x1d8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x41302f
cmp dword [ebp - 0x160], 8
lea ecx, [ebp - 0x1e0]
push 0
push ecx
push 0
push 0xf013f
push 0
push 0
lea eax, [ebp - 0x174]
cmovae eax, dword [ebp - 0x174]
push 0
push eax
push dword [ebp - 0x1dc]
call esi
test eax, eax
je 0x412ebf
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x41301f
cmp dword [ebp - 0x148], 8
lea ecx, [ebp - 0x1e4]
push 0
push ecx
push 0
push 0xf013f
push 0
push 0
lea eax, [ebp - 0x15c]
cmovae eax, dword [ebp - 0x15c]
push 0
push eax
push dword [ebp - 0x1e0]
call esi
test eax, eax
je 0x412ff0
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x413017
push 0xf003f
push 0
push str.SoftWare
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x41302f
cmp dword [ebp - 0x178], 8
lea ecx, [ebp - 0x1dc]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCreateKeyExW]
lea eax, [ebp - 0x18c]
cmovae eax, dword [ebp - 0x18c]
push 0
push ecx
push 0
push 0xf003f
push 0
push 0
push 0
push eax
push dword [ebp - 0x1d8]
call esi
test eax, eax
je 0x412f72
push dword [ebp - 0x1d8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x41302f
cmp dword [ebp - 0x160], 8
lea ecx, [ebp - 0x1e0]
push 0
push ecx
push 0
push 0xf003f
push 0
push 0
lea eax, [ebp - 0x174]
cmovae eax, dword [ebp - 0x174]
push 0
push eax
push dword [ebp - 0x1dc]
call esi
test eax, eax
je 0x412fb1
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x41301f
cmp dword [ebp - 0x148], 8
lea ecx, [ebp - 0x1e4]
push 0
push ecx
push 0
push 0xf003f
push 0
push 0
lea eax, [ebp - 0x15c]
cmovae eax, dword [ebp - 0x15c]
push 0
push eax
push dword [ebp - 0x1e0]
call esi
test eax, eax
je 0x412ff0
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x413017
lea eax, [ebp - 0x1ec]
push eax
push ebx
push 0
push 0
push edi
push dword [ebp - 0x1e4]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push dword [ebp - 0x1e4]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call esi
push dword [ebp - 0x1e0]
call esi
push dword [ebp - 0x1dc]
call esi
push dword [ebp - 0x1d8]
call esi
lea ecx, [ebp - 0x210]
call fcn.0045049d
mov edx, dword [ebp - 0x148]
cmp edx, 8
jb 0x41307a
mov ecx, dword [ebp - 0x15c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x413070
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413263
push edx
push ecx
call fcn.0045ec62
add esp, 8
mov edx, dword [ebp - 0x160]
xor eax, eax
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 7
mov word [ebp - 0x15c], ax
cmp edx, 8
jb 0x4130d7
mov ecx, dword [ebp - 0x174]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4130cd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413268
push edx
push ecx
call fcn.0045ec62
add esp, 8
mov edx, dword [ebp - 0x178]
xor eax, eax
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 7
mov word [ebp - 0x174], ax
cmp edx, 8
jb 0x413134
mov ecx, dword [ebp - 0x18c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41312a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41326d
push edx
push ecx
call fcn.0045ec62
add esp, 8
mov edx, dword [ebp - 0x190]
xor eax, eax
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 7
mov word [ebp - 0x18c], ax
cmp edx, 0x10
jb 0x41318b
mov ecx, dword [ebp - 0x1a4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x413181
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413272
push edx
push ecx
call fcn.0045ec62
add esp, 8
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0xf
mov byte [ebp - 0x1a4], 0
cmp edx, 0x10
jb 0x4131e0
mov ecx, dword [ebp - 0x1bc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4131d6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x413277
push edx
push ecx
call fcn.0045ec62
add esp, 8
mov edx, dword [ebp - 0x1c0]
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0xf
mov byte [ebp - 0x1bc], 0
cmp edx, 0x10
jb 0x413231
mov ecx, dword [ebp - 0x1d4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x413227
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41327c
push edx
push ecx
call fcn.0045ec62
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045ef18
mov esp, ebp
pop ebp
ret 8
call fcn.00572b79
call fcn.00572b79
call fcn.00572b79
call fcn.00572b79
call fcn.00572b79
call fcn.00572b79
call fcn.00572b79
call fcn.00572b79
call fcn.00572b79
call fcn.00572b79
int3