Function at 0x42b1d0
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x45ab01
push eax
mov eax, 0x3020
mov dword fs:[0], esp
call fcn.004581d0
mov eax, dword [0x4641a0]
push ebx
push ebp
xor ebp, ebp
push esi
push edi
mov dword [esp + 0x14], ebp
mov dword [esp + 0x10], eax
mov esi, dword [esp + 0x3044]
mov dword [esp + 0x3038], ebp
push esi
call dword [0x45d33c]
mov edi, eax
add esp, 4
cmp edi, ebp
je 0x42b46c
push 0x5c
push esi
call dword [0x45d2c4]
add esp, 8
test eax, eax
jne 0x42b46c
lea ecx, [esp + 0x1030]
push ebp
push ecx
push 0x1000
push str..exe
push esi
push ebp
call dword [0x45d0ec]
test eax, eax
je 0x42b2cc
lea edx, [esp + 0x1030]
push edx
call dword [0x45d3b4]
test eax, eax
jne 0x42b2cc
lea eax, [esp + 0x1030]
test eax, eax
jne 0x42b278
xor esi, esi
jmp 0x42b288
lea ecx, [esp + 0x1030]
push ecx
call dword [0x45d1cc]
mov esi, eax
push esi
lea ecx, [esp + 0x14]
call fcn.00401cb0
test eax, eax
je 0x42b433
mov ecx, dword [esp + 0x10]
lea edi, [esi + esi]
lea edx, [esp + 0x1030]
push edi
lea eax, [esi + esi + 2]
push edx
push eax
push ecx
call fcn.00401bc0
mov edx, dword [esp + 0x20]
add esp, 0x10
mov dword [edx - 8], esi
mov eax, dword [esp + 0x10]
mov word [edi + eax], bp
jmp 0x42b433
lea ecx, [esi + edi*2 - 8]
push str..exe
push ecx
call dword [0x45d2f8]
add esp, 8
lea edx, [esp + 0x1030]
neg eax
sbb eax, eax
and eax, str..exe
push eax
push esi
push 0x468048
push 0x2000
push edx
call fcn.004298f0
add esp, 0x14
push ebp
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x469dac
call fcn.0042a1f0
push ecx
lea eax, [esp + 0x103c]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
mov byte [esp + 0x3048], 1
call fcn.004171e0
push 0x80000002
lea ecx, [esp + 0x30]
mov byte [esp + 0x3048], 0
call fcn.00421240
mov esi, eax
mov edx, dword [esi + 0xc]
mov eax, dword [esi + 4]
lea ecx, [esp + 0x18]
or edx, 1
push ecx
push edx
push ebp
push eax
mov eax, dword [esi]
mov byte [esp + 0x3048], 2
push eax
mov dword [esp + 0x30], 0x1000
mov dword [esp + 0x2c], ebp
call dword [0x45d014]
test eax, eax
jne 0x42b3e8
mov esi, dword [esi + 8]
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x1c]
lea eax, [esp + 0x18]
push edx
push eax
push ebp
push esi
push ecx
call dword [0x45d018]
mov edx, dword [esp + 0x18]
mov esi, eax
neg esi
sbb esi, esi
push edx
inc esi
call dword [0x45d01c]
cmp esi, ebp
je 0x42b3e8
mov eax, dword [esp + 0x14]
cmp eax, 2
je 0x42b3bf
cmp eax, 1
jne 0x42b3e8
lea eax, [esp + 0x30]
test eax, eax
je 0x42b3d2
lea ecx, [esp + 0x30]
push ecx
call dword [0x45d1cc]
lea edx, [esp + 0x30]
lea ecx, [esp + 0x10]
push edx
push eax
call fcn.00408770
mov eax, 1
jmp 0x42b3ea
xor eax, eax
mov edx, dword [0x4641a4]
cmp eax, ebp
mov eax, dword [esp + 0x28]
mov byte [esp + 0x3038], 0
sete bl
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x42b426
add eax, 0xfffffff4
push eax
call dword [0x45d1b0]
test eax, eax
jg 0x42b426
mov edx, dword [esp + 0x28]
add edx, 0xfffffff4
push edx
call fcn.0044c87a
add esp, 4
lea ecx, [esp + 0x24]
call fcn.00401c80
test bl, bl
jne 0x42b46c
lea eax, [esp + 0x10]
push eax
call fcn.00420cb0
mov ecx, dword [0x4641a0]
mov esi, esp
mov dword [esp + 0x18], esp
push 1
mov dword [esi], ecx
mov ecx, esi
call fcn.00404720
test eax, eax
je 0x42b45f
mov edx, dword [esi]
mov word [edx], 0x22
lea eax, [esp + 0x14]
push eax
call fcn.00420aa0
add esp, 8
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x3040]
mov edx, dword [eax - 0xc]
lea ecx, [eax - 0xc]
cmp edx, ebp
jl 0x42b48c
push ecx
mov dword [esi], eax
call dword [0x45d1b4]
jmp 0x42b4d5
mov ecx, dword [0x4641a0]
cmp eax, ebp
mov dword [esi], ecx
mov ebx, eax
jne 0x42b49e
xor edi, edi
jmp 0x42b4a7
push eax
call dword [0x45d1cc]
mov edi, eax
push edi
mov ecx, esi
call fcn.00401cb0
test eax, eax
je 0x42b4d5
mov eax, dword [esi]
lea ebp, [edi + edi]
push ebp
lea edx, [edi + edi + 2]
push ebx
push edx
push eax
call fcn.00401bc0
mov ecx, dword [esi]
add esp, 0x10
mov dword [ecx - 8], edi
mov edx, dword [esi]
mov word [edx + ebp], 0
mov eax, dword [esp + 0x10]
mov edx, dword [0x4641a4]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x42b504
add eax, 0xfffffff4
push eax
call dword [0x45d1b0]
test eax, eax
jg 0x42b504
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.0044c87a
add esp, 4
mov ecx, dword [esp + 0x3030]
mov eax, esi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x302c
ret