Function at 0x40bec9
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
lea eax, [ebp - 8]
push eax
push 0x20019
xor ebx, ebx
push ebx
push 0x41e1d8
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x40c386
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
push edi
lea eax, [ebp - 4]
push eax
push 0x42bc78
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e1c8
push dword [ebp - 8]
mov dword [ebp - 4], 0x104
call esi
push 4
pop edi
lea eax, [ebp - 4]
pop eax
push 0x42c5d8
test dword [ebp - 0xc], eax
push eax
push ebx
push 0x41e1bc
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x42c5d4
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e9b4
call dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x421038
lea eax, [ebp - 0xc]
push eax
adc ebp, dword [eax - 0x58]
loope 0x40bfa7
push 0x41e1a8
push dword [ebp - 8]
add bh, bh
jne 0x40bf62
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x42c5d8
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e19c
out dx, eax
jne 0x40bf7d
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x40c5e4
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e190
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
cld
push eax
push 0x421044
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x1041e184
out dx, eax
ja 0x40bfb3
mov dword [ebp - 4], edi
call dword [esi - 0x71]
inc ebp
cld
push eax
push 0x42c5ec
lea esp, [ebp - 0xc]
mov dword [ebp - 4], edi
push eax
push ebx
push 0x41e174
push dword [ebp - 8]
call esi
lea eax, [ebp - 4]
push eax
push 0x42c5f0
pop dword [ebp - 0xc]
push eax
push ebx
sub byte [ecx + 0x41], ch
add bh, bh
jne 0x40bfe9
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x4245dc
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e160
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x42c5e0
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e150
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x42103c
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e13c
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x42d828
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e138
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x421d70
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e128
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x429bf4
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e114
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x421014
lea eax, [ebp - 0xc]
push eax
mov dword [ebp - 4], edi
push ebx
push 0x41e0f8
push dword [ebp - 8]
call esi
lea eax, [ebp - 4]
push eax
push 0x421018
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e0ec
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x421024
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e0dc
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x421020
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e0cc
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x421040
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e0c0
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x42c5e8
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e0b0
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x421048
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e0a4
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x42c4a4
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e094
push dword [ebp - 8]
mov dword [ebp - 4], 0x10
call esi
lea eax, [ebp - 4]
push eax
push 0x426918
lea eax, [ebp - 0xc]
push eax
push ebx
mov dword [ebp - 4], 0x3c
push str.FontA
push dword [ebp - 8]
call esi
lea eax, [ebp - 4]
push eax
push 0x42c430
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e080
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x421028
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e070
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x42bfa4
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e064
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x421004
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e054
push dword [ebp - 8]
mov dword [ebp - 4], 0x10
call esi
cmp dword [0x42d828], ebx
je 0x40c25c
lea eax, [ebp - 4]
push eax
push 0x421ac4
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e048
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x42d844
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e03c
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push 0x421ac8
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e02c
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push str.__t_r_______._:_________
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e01c
push dword [ebp - 8]
mov dword [ebp - 4], 0x100
call esi
lea eax, [ebp - 4]
push eax
push 0x42c600
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41e00c
push dword [ebp - 8]
mov dword [ebp - 4], 0x400
call esi
lea eax, [ebp - 4]
push eax
push 0x42d200
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41dff8
push dword [ebp - 8]
mov dword [ebp - 4], 0x104
call esi
lea eax, [ebp - 4]
push eax
push 0x421158
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41dfe8
push dword [ebp - 8]
mov dword [ebp - 4], 0x104
call esi
lea eax, [ebp - 4]
push eax
push 0x421468
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41dfd8
push dword [ebp - 8]
mov dword [ebp - 4], 0x104
call esi
lea eax, [ebp - 4]
push eax
push 0x421778
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41dfc8
push dword [ebp - 8]
mov dword [ebp - 4], 0x104
call esi
lea eax, [ebp - 4]
push eax
push 0x42d820
lea eax, [ebp - 0xc]
push eax
push ebx
push 0x41dfb4
push dword [ebp - 8]
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 4]
push eax
push ebx
lea eax, [ebp - 0xc]
push eax
push ebx
mov edi, 0x41dfa4
push edi
push dword [ebp - 8]
call esi
test eax, eax
jne 0x40c37b
mov eax, dword [ebp - 4]
cmp eax, ebx
jbe 0x40c37b
inc eax
push eax
push ebx
push dword [0x428e78]
call fcn.0040b8a7
add esp, 0xc
cmp eax, ebx
mov dword [0x42bfb0], eax
je 0x40c37b
lea ecx, [ebp - 4]
push ecx
push eax
lea eax, [ebp - 0xc]
push eax
push ebx
push edi
push dword [ebp - 8]
call esi
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
pop edi
pop esi
pop ebx
leave
ret