Function at 0x40ec8b
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x1a8]
sub esp, 0x228
mov eax, dword [0x414050]
push ebx
push esi
push 0x406b98
push 0xa
pop esi
push esi
mov dword [ebp + 0x1a4], eax
call fcn.0040da55
xor ebx, ebx
cmp dword [0x414014], ebx
pop ecx
pop ecx
je 0x40ecd0
cmp dword [0x4140c0], ebx
je 0x40ecd0
push 0x406b48
push esi
jmp 0x40ecf9
mov eax, dword [ebp + 0x1b0]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40ecd9
sub eax, edx
add eax, 0x32
push eax
call sub.snmpapi.dll_SnmpUtilMemAlloc
cmp eax, ebx
mov dword [ebp - 0x6c], eax
jne 0x40ed13
push 0x406af0
push 0x14
call fcn.0040da55
push 0x406ab0
push esi
call fcn.0040da55
add esp, 0x10
xor eax, eax
jmp 0x40f15e
mov eax, dword [ebp + 0x1b0]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40ed1c
sub eax, edx
mov esi, eax
mov eax, dword [ebp + 0x1b4]
push edi
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40ed31
sub eax, edi
lea eax, [eax + esi + 0x33]
push eax
call sub.snmpapi.dll_SnmpUtilMemAlloc
cmp eax, ebx
mov dword [ebp - 0x80], eax
jne 0x40ed66
push 0x406a58
push 0x14
call fcn.0040da55
pop ecx
pop ecx
push dword [ebp - 0x6c]
call sub.snmpapi.dll_SnmpUtilMemFree
jmp 0x40eff8
mov edi, dword [ebp - 0x6c]
push 0xc
pop ecx
mov esi, 0x406a24
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x1b0]
movsb byte es:[edi], byte [esi]
mov esi, ecx
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x40ed7c
mov edi, dword [ebp - 0x6c]
sub ecx, esi
mov edx, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x40ed8b
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x6c]
mov esi, eax
sub esi, ecx
mov dl, byte [ecx]
mov byte [esi + ecx], dl
inc ecx
cmp dl, bl
jne 0x40eda8
mov edi, eax
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x40edb5
mov ecx, dword [ebp + 0x1b4]
mov esi, 0x406a20
movsw word es:[edi], word [esi]
mov esi, ecx
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x40edcc
sub ecx, esi
mov edi, eax
mov edx, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
cmp cl, bl
jne 0x40edda
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
push eax
mov ecx, edx
and ecx, 3
push 0x4069f0
push ebx
rep movsb byte es:[edi], byte [esi]
call fcn.0040da55
add esp, 0xc
lea eax, [ebp - 0x74]
push eax
push 9
push ebx
push dword [ebp - 0x80]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
je 0x40ee3a
push eax
push dword [ebp - 0x80]
push 0x4069a0
push ebx
call fcn.0040da55
add esp, 0x10
push dword [ebp - 0x6c]
call sub.snmpapi.dll_SnmpUtilMemFree
push dword [ebp - 0x80]
jmp 0x40ed5c
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
mov esi, 0x406994
push esi
push dword [ebp - 0x74]
mov dword [ebp - 0x70], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
mov edi, 0x4069a0
je 0x40ee80
push eax
push esi
push edi
push ebx
call fcn.0040da55
mov esi, dword [ebp + 0x1c0]
add esp, 0x10
mov dword [esi + 0x214], ebx
jmp 0x40ee9e
mov eax, dword [ebp - 0x78]
mov esi, dword [ebp + 0x1c0]
push eax
push 0x40696c
push ebx
mov dword [esi + 0x214], eax
call fcn.0040da55
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x405210
push dword [ebp - 0x74]
mov dword [ebp - 0x70], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
je 0x40eef2
push eax
push 0x405210
push edi
push ebx
call fcn.0040da55
push dword [0x414010]
push 0x406928
push ebx
call fcn.0040da55
mov eax, dword [0x414010]
add esp, 0x1c
mov dword [esi + 0x210], eax
jmp 0x40ef10
xor eax, eax
cmp dword [ebp - 0x78], 1
sete al
push eax
push 0x4068f4
push ebx
mov dword [esi + 0x210], eax
call fcn.0040da55
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x4068ec
push dword [ebp - 0x74]
mov dword [ebp - 0x70], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
je 0x40ef4e
push eax
push 0x4068ec
push edi
push ebx
call fcn.0040da55
add esp, 0x10
mov dword [esi + 0x218], ebx
jmp 0x40ef66
mov eax, dword [ebp - 0x78]
push eax
push 0x4068c4
push ebx
mov dword [esi + 0x218], eax
call fcn.0040da55
add esp, 0xc
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x80]
call sub.snmpapi.dll_SnmpUtilMemFree
push dword [ebp - 0x6c]
push 0x4069f0
push ebx
call fcn.0040da55
add esp, 0xc
lea eax, [ebp - 0x74]
push eax
push 9
push ebx
push dword [ebp - 0x6c]
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp eax, ebx
je 0x40efb4
push eax
push dword [ebp - 0x6c]
push edi
push ebx
call fcn.0040da55
add esp, 0x10
jmp 0x40ed59
lea eax, [ebp - 0x70]
push eax
push esi
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x4068b4
push dword [ebp - 0x74]
mov dword [ebp - 0x70], 0x208
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
je 0x40f00b
push eax
push 0x4068b4
push edi
push ebx
call fcn.0040da55
add esp, 0x10
push dword [ebp - 0x6c]
call sub.snmpapi.dll_SnmpUtilMemFree
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x406ab0
push 0xa
call fcn.0040da55
xor eax, eax
jmp 0x40f15b
push esi
push 0x406884
push ebx
call fcn.0040da55
add esp, 0xc
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x40687c
push dword [ebp - 0x74]
mov dword [ebp - 0x70], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
cmp eax, ebx
je 0x40f05c
push eax
push 0x40687c
push edi
push ebx
call fcn.0040da55
add esp, 0x10
mov dword [esi + 0x20c], 1
jmp 0x40f07a
xor eax, eax
cmp dword [ebp - 0x78], 1
sete al
push eax
push 0x406854
push ebx
mov dword [esi + 0x20c], eax
call fcn.0040da55
add esp, 0xc
push dword [ebp - 0x74]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push dword [ebp - 0x6c]
call sub.snmpapi.dll_SnmpUtilMemFree
cmp dword [esi + 0x20c], ebx
je 0x40f11c
push 0x208
lea eax, [ebp - 0x68]
push esi
push eax
mov byte [ebp + 0x1a0], bl
call dword [sym.imp.msvcrt.dll_strncpy]
mov edi, 0x4140c8
mov edx, esi
add esp, 0xc
mov eax, edi
sub edx, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
cmp cl, bl
jne 0x40f0bb
mov eax, edi
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x40f0ca
sub eax, edx
mov ecx, esi
mov word [eax + esi], 0x2e
lea eax, [ecx + 1]
mov dl, byte [ecx]
inc ecx
cmp dl, bl
jne 0x40f0de
sub ecx, eax
mov eax, edi
lea edi, [eax + 1]
mov dl, byte [eax]
inc eax
cmp dl, bl
jne 0x40f0ec
mov edx, 0x208
sub edx, ecx
push edx
sub eax, edi
lea ecx, [ebp - 0x68]
push ecx
lea eax, [eax + esi + 1]
push eax
call dword [sym.imp.msvcrt.dll_strncpy]
push esi
push 0x406820
push 0xa
call fcn.0040da55
add esp, 0x18
cmp dword [esi + 0x214], 1
ja 0x40f175
cmp dword [esi + 0x218], ebx
jne 0x40f175
push dword [ebp + 0x1b4]
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
push eax
push dword [ebp + 0x1b0]
push dword [ebp + 0x1b8]
call fcn.0040e7f5
push 0x4067e8
push 0xa
call fcn.0040da55
xor eax, eax
inc eax
pop ecx
pop ecx
pop edi
mov ecx, dword [ebp + 0x1a4]
pop esi
pop ebx
call fcn.00412af8
add ebp, 0x1a8
leave
ret 0x14
push 0x4067a0
push 0xa
call fcn.0040da55
cmp dword [esi + 0x214], ebx
pop ecx
pop ecx
jne 0x40f195
mov dword [esi + 0x214], 2
push esi
push dword [ebp + 0x1bc]
push dword [ebp + 0x1b4]
call dword [sym.imp.msvcrt.dll_atol]
pop ecx
push eax
push dword [ebp + 0x1b0]
push dword [ebp + 0x1b8]
call fcn.0040e927
test eax, eax
jne 0x40f14c
push 0x406760
push 0xa
call fcn.0040da55
push 0x406728
push 0xa
call fcn.0040da55
add esp, 0x10
xor eax, eax
jmp 0x40f15d