Function at 0x4037f0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x414141
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x4c
mov eax, dword [0x469090]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x34], 0
mov dword [ebp - 4], 2
push 1
lea ecx, [ebp - 0x18]
call fcn.00402b10
lea ecx, [ebp - 0x18]
call fcn.00404540
mov byte [ebp - 4], 3
mov byte [ebp - 4], 4
mov dword [ebp - 0x50], str.pjGiuj8pThK8W28ssCtm3GCR2bnQGbE6bg5x7H8MunBcLomi8qvbdCkgPsSoANQke9a8gOwLjBI8OVujtReEmiV1A2Wv54z7CLHmk0LYpvOTEHzfQdFcwmvLlEg073fTvgriuG1Aox3G7oSMJ3M1CAMGKYYXXwtaad5LPs7gs43WoiSGCou5lSfq4xFJeS5pRAfod5DaniRq2ngF9DF8dk3c6LpVP9672HxwlpPYvo36PgTwYA8EB63Fd1Gr3YLO7jwiIuGWLmye0aQ0SpFUJxO5ptrnrHv3GwGAJrQMG7OljiSvsWDYWFA9Lb3Lb5tRAXiMoP8HUi8qOwnysiquWywA7b5Oo7quCMMRYKlWDIur8zI410QmIQySuiglYnR3CHYR0cGn38M4j58C6fELVs3eIQ9yDREbz4CPA7SWHOi7fSAnf659ETzMDBflVJl15aT5b9OBhrg7EUJ0yuLbemSOdE2rfgcei8rbzwEkw5Rr5jVBJjQQmEWvtvTjLPaXU1mYP9F6eagbSgfU4hTm2fX8v5fay3TVjKbBqwqUjyxcgbq7n2UdCfiWwDn2szMjjaVq5QDOIuK7hyWU75obMowdKSADcgTQrY25UVeOwAUlK5YwhPghx3qfyR6xf5YLHMqtkdlYPRY2owpHsBUNdf0lm5620bxNJ6rN4MknSJQ8HQMIOzajrEqPClIaBMJfKhTtcnI5U0pi17pj6PjBdz73WU3L5jrRxD5c7ofblOr1vygNBm6NRWDlXq9rgigWqkGXyORNzNJucy1Xg0Je2mN7rTYwNqskmoT0AjJ58U1JRz5awwQwF3CH9Kw9cx3jROlNzad8CuXvdhwbszxz6QiyYNGdKzIK2p69flP9HkciGsapGGovUje3UdimCDR1xVG4Coni9wiqB1uHqinK7x2EYBb0M0zXCY7Q6xNJMCNU82HrsGY0VlwNjV6l31FY74M4lDhIvydCcIHwa77b1aIX6AKj2eD1pCCyocasjDW6Bp6ntD9wi3PBBjPEcjHrvTWoBm2bhzqG0BdTUgSu1HjfdfWPO3LdX8zXETF8xrYxNU3yASBPNuLnkWG62psMVlJRye4AjJVvj8kkaf3zyp2wtlysLt587xa2DpmQSlvfC8sEU1oXx58fgK2HMtFINyYzAaYdFwUaF0AxGJgylLj6jSznILVzS9OWmOuY6UlreTwvQSJaQp1DpQyMXTkcOWJPjmHuIAS2SbMzrLnPjxStm8k0MtWBBvfb5pA58YBC3iDg0BaWhmKd4BbSgjFnSckdDem92TwHXR0DHwx486XpBsvaVPQsHjhj2QOba7KgJcAf29peG42iSnhRXCcJ4Dbr4aas0dvtWBehzIvwhcQcwfevzF4y0RW3vyoU5t7uhXsMqM4NWz49B8l5bsaUhpubsdqVcnzsnTXg0vrHw6sIhosHOtrpbLYmvG8vjUSFvXY9VLEQY80gvtyyie3zvBp9cMJByOiUtvjQUfVwIFiNej7szWSiD6GtaUeG9rv9V1tfllczMcHzpcA0sXz1vobxjaPelxe6kbFMclL5vQNN8QmvAKqDErGQVd0Jwi3eVNOp3rspArlKwmL7nXqD98w9CrlI6dyNTPxy2Hvc1mkGOc9G8mkWHeoqhQGHAfgP8m8bQ6Dj9FVSjgITWQx4xqtWc24fAGF6qBDNPuYVC5yFnOI8LtbXweoi
lea eax, [ebp - 0x2c]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x5c], esp
lea edx, [ebp + 0x10]
push edx
call fcn.004045a0
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp + 0xc]
push ecx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x3c]
call fcn.00403b00
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
je 0x4038cc
push 0x42eb7c
mov ecx, dword [ebp + 8]
call fcn.00404600
mov edx, dword [ebp - 0x34]
or edx, 1
mov dword [ebp - 0x34], edx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00404700
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x10]
call fcn.00404700
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x14]
call fcn.00404700
mov eax, dword [ebp + 8]
jmp 0x403adf
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x1c], 0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x30]
push eax
push 0
lea ecx, [ebp - 0x1c]
push ecx
push 0
lea ecx, [ebp + 0x14]
call fcn.00401680
push eax
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x30]
push eax
mov ecx, dword [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x18]
call fcn.004047c0
push eax
lea edx, [ebp - 0x1c]
push edx
push 0
lea ecx, [ebp + 0x14]
call fcn.00401680
push eax
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x58], str.LFrC4jvbOOypNAkyIAD9UWaiI77ddmTKPDkjk4CRXlXIL5CCtOkzk7mEU5ncLbcOdaFuTBUW2dYoRO4zwcOsMu9GsfNqKmzFslKP3CreOQCMOL9klnfJQaOlNj0gT2v8sS2366fdXQzNTHQ3HDVl9BEihbeAxdXgn89OsujgWSgP0mybIUnfmFQY0SxPALknK70SCAAr3OMNxkasPMirgDAEVzCSxxq5rrDY9CXBpDV7x5YQNqDUIaYfQzTeqbyfCpmRGajnXtgIC2MAJJvGFg7yoktLThuYNVCjWdo7uzW6XqNc2afL6n13Xqb0chpGPA85J8YYBnVdjqHrtQoc8kD3SBwT5zY1QyKYWHMSJpQz06Dn7AF4TlWzdHJYWnjUnGzQv5tv9n09VmajnL2qG0OqSLJfKQYxetTutNEiV6qvD4mM0sBmMi5dFVbe11Ymx1eLXNRr1yRE9VGF2mKYBCyf8unXQMM7M7ey9qFU8QJa8A74RM0pCKXEHRn2VXkKN9PHjowuRfd6Nv1jfH8MpQ1iBEUvxgXyHa88MMQEB862X7g5cL5hAtmOUyrYwgy3WQqJ192FC3W61Faf6d11SyCCxq6yislXlxfrtloAVE1STnsYEVid5skSbfJRPd6pYdhdMEedrLgwahmIUst34S0wobT3KMYFlrsXzKL5RmlGVlyad0kKKX7gzuRKblEkavTHAIezKvAwRq8hglPycc6yUzzaRUcdAiUpDYIKtt5HhgGh3XaGvviCs2HX8rat1j35DqmvdBAs0teEWXHqP93u4wBmPKysdK2Jxfcr2rzstAecD503tOCTrTm3syOOhqLpo5eYKDcVG1DT5HRPKBgo69Ji3sRtBLqalWqh50kEe3O4EPi65W9foncPfX3zXSj4AfGfwszRhTCfX9sbXHpxuQVVfsczpv0bpNSBq5bkyDkg3WKoX796oYOmNdyal1dCaLPMW79loeFdbcL6JOouWirrjoRlvpStjKi27U9HHySr2rjG2Qa7Nt6XF5hjVmdUlH0kHYAJVmzzxVowDBn3tmKgrcqB19v3SYCqpWyi9hQu2xd2qSXdfT8bGBoXtIl3AmMPHBQHYSil8KaBoULfhcB551IrlEt5eW5SSTWQEyTyLJRGzfBAyviPR5mk0aSmCj3A6R56VE7MggaI4SeoQdYPShMc86H4GmaLjI8mdmR0cL2c6cmDPPcYy3RQKXkrpoS1kOH2pLvpvkHzUUE1V38IPDWpeUkIP8AGJC854SSutDClTeK2rEHWhhPefIt98ECT2NpTgAg0H4p1tDdVuBx941LVOMK0wtivs5huHDlU6AR9a6zH00VhRPtqgckyirSc9o7kCHlxTP4fwUkaK2UP2z5QfDB8POyl1M5nRlSoI5dSfNSPl6eNoYdCLs91Aiu8Qr0aRY2jsgLE5SD2cIhHpHVsaDMz6SNwdHoIzWmkkTn7PDUOzwdy7hKi4Ot8Y2ydw2tyAuOOUcRSqV33yjRV86Emtfq3UALF43dK4ITn60iAO4gl31KSDv29EO3IGKqaRveRGCtQ7LUQ4HJ3OI8XoFMoh6Ww88rERhR0N6TouDclkREkoCWjJGe7ihUSbKGXMqbJhVXo7mLIO374c5QvByaAYaXeOY1Ab6UczOXwcjvEN3aVrAbFu8NoYekY9BcQrDv1IjAJfyuRF8OnbM0ssbQkeAoCkNYNMt8llRYcaKX5RR3Ais32cmqs0YNBA83igeDPDQNn6epYUjLxvvN2Td99SOnpfx3UJCAGnt60AWvmrORXkYpGpb30P77zGoA3UweAUSo5sv8X6e9m87KE6yDT6whAopcNjYyJa5FQU9lyEFnY7docWBRYhoiYUIp6i8eRD1mRrKsWWKkRjLA1uo9DgEMlSQEy3hCerskTQQVVUqDOxoloQVjzjTAd0GmEARNzd6V0lAulx3YnvRj4K8HI0mKa4xSxKtybdxWvmM01TlUSH5SjsI4gdUwNT7xddOnOffD0JRxO8s1qs48WOpDGb6lKurBntLqOHAFkBVsBtVKQV0RiiJ6Jt2RDO3ivPkCYANeCrHdheDBN8ey9SaxpYvW61KNStCwEr3Rf4yxINVVDRdqSc1yWS0DMeOewnXsGomGSyukRDt8xMxkknxcUKydoJSFdkLoqaFaqp9HDimvqlYSScRV7rU7BQ0auYz4M1Lh3oNX0n5iYRopqXYGz9p28YzHGN8Q9PprdBqDSAuIDsOTnBNREo4NFCpeT5fRr49vDvxrjHQXC7q4DA8jV3ux0lJCWWVV4JvOiRojgAN8VAvjE0Ckih0uQM7Ktljy0rP8pKOnJbpjivwKnrSEQAu80FzoP4EWFlqGwBiVLs5wek4eianvYOwaeMrkcGm25eq9obYyqxDK1iQfmWrwnaksk2wfsFYrIpTE3xCXIAjVHwK26akPU4H78lXNjhdtAOLNO7E6KQFW6VNvvMbYPnbpsMiDbAScdVTChC76CDKDMh8j8k20ygPQartiixXkCPYCe8HjpmTM691L0SNmOat86vPiBQzio9EIO2KigvUa8XVVHbhWBTtaag48R7Wfz8pko4fMiBWsMWpwirbcaCT1e3jcAJu1KyDiAfNKEkykFac1nx6S0Lp2eh4T3WK92PDVjXElxnGmex7w3SvjU9nH5tcyfNnU3TA0IVJV7wG7AKbUWtMeXRIKHd1t2ccfUjxHfbx5zFg8HowKeTbNro5659bRWPbMhbsHB4iy9JyQhPrgwiRFVsGQb2KVkgoUkcc8IgLj3M4HLgjq0pRWhdskYEbOhR6GHDtxROtyxSF3pJHUmx9aB4S4vVkCEPERDlXXv4tDReGed7l4OAukiLaNJOqo6dAUNL9SpEv9j5NvV62X42DSWp6rKo680Pz1tSreBCYRbN486cMnlTcKwq99zKlOwoo1ljanmhTMKLVf0KGMpOEiayofh7AlBpYwHcuahhV6ovh2HW1mx0pikQzhWLDyUdrNjgvR8Cobpzlz2
mov dword [ebp - 0x4c], str.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
jmp 0x40396f
mov dword [ebp - 4], 4
jmp 0x4039a7
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov dword [ebp - 0x54], str.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
push 0xffffffffffffffff
lea ecx, [ebp - 0x18]
call fcn.00404810
cmp dword [ebp - 0x38], 0
je 0x403a0a
push 0x43431c
mov ecx, dword [ebp + 8]
call fcn.00404600
mov eax, dword [ebp - 0x34]
or eax, 1
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00404700
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x10]
call fcn.00404700
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x14]
call fcn.00404700
mov eax, dword [ebp + 8]
jmp 0x403adf
lea ecx, [ebp - 0x18]
push ecx
mov ecx, dword [ebp + 8]
call fcn.004045a0
mov edx, dword [ebp - 0x34]
or edx, 1
mov dword [ebp - 0x34], edx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00404700
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x10]
call fcn.00404700
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x14]
call fcn.00404700
mov eax, dword [ebp + 8]
jmp 0x403adf
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00406c09
mov esp, ebp
pop ebp
ret 0x10