Function at 0x42c82a
Capabilities:
Query or enumerate registry value

Disassembly:
push 0x10
push 0xa8
mov eax, 0x4ab577
call fcn.004a7770
call fcn.0042cd60
push ecx
mov ecx, eax
call fcn.0042d522
test eax, eax
jne 0x42c854
push 0xd
pop eax
jmp 0x42cc7c
xor edi, edi
mov dword [ebp - 0xac], edi
lea ecx, [ebp - 0xb4]
mov dword [ebp - 4], edi
call fcn.0040d765
xor eax, eax
mov esi, 0xa835419e
inc eax
mov edx, 0x90be7df
mov byte [ebp - 4], al
mov dword [ebp - 0xa8], 0xedcf63cc
mov dword [ebp - 0xa4], 0x3bab236a
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa8], 0x9e4aa43f
mov dword [ebp - 0xa4], 0xa1de7b6b
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0xa8], 0x15dc4945
mov dword [ebp - 0xa4], 0x5a9b17af
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0xa8], 0x21fcb1ad
mov dword [ebp - 0xa4], 0x8135779c
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0xa8], 0x2d162a57
mov dword [ebp - 0xa4], 0xff284913
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0xa8], 0xaaeaac55
mov dword [ebp - 0xa4], 0xbe89cc09
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xa8], 0x12bf400c
mov dword [ebp - 0xa4], 0xf2dceaf6
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0xa8], 0xeda0639f
mov dword [ebp - 0xa4], 0x3bdf230c
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xa8], 0x9e2ba448
mov dword [ebp - 0xa4], 0xa1bb7b19
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xa8], 0x15b74919
mov dword [ebp - 0xa4], 0x5af517c6
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xa8], 0x218fb1ca
mov dword [ebp - 0x50], eax
mov dword [ebp - 0xa4], 0x815377f3
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xa8], 0x2d4a2a23
mov dword [ebp - 0xa4], 0xff7e4958
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xa8], 0xaa9aac3c
mov dword [ebp - 0xa4], 0xbeefcc55
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0xa8], 0x12cc406d
mov dword [ebp - 0xa4], 0xf2dcea82
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
movaps xmm1, xmmword [ebp - 0xa0]
pxor xmm1, xmmword [ebp - 0x60]
movaps xmmword [ebp - 0xa0], xmm1
movaps xmm1, xmmword [ebp - 0x90]
pxor xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x90], xmm1
movaps xmm1, xmmword [ebp - 0x80]
pxor xmm1, xmmword [ebp - 0x40]
movaps xmmword [ebp - 0x80], xmm1
movaps xmm1, xmmword [ebp - 0x70]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0xa0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xb0]
pxor xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0x70], xmm1
call fcn.0040d6dc
mov esi, dword [eax]
cmp dword [ebp - 0xac], edi
je 0x42cb4a
push dword [ebp - 0xac]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea eax, [ebp - 0xac]
mov dword [ebp - 0xac], edi
push eax
push esi
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
mov esi, edi
push 1
pop eax
cmove esi, eax
mov ecx, dword [ebp - 0xb0]
lea ecx, [ecx - 0x10]
call fcn.0040bb70
test esi, esi
je 0x42cc54
mov esi, edi
mov dword [ebp - 0xb0], edi
cmp dword [ebp - 0xac], esi
je 0x42cc54
lea eax, [ebp - 0xb0]
push eax
push edi
lea eax, [ebp - 0xb8]
push eax
push edi
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push str.user_history
push dword [ebp - 0xac]
call edi
xor eax, eax
inc eax
cmp dword [ebp - 0xb8], eax
je 0x42cbd2
cmp dword [ebp - 0xb8], 2
jne 0x42cc54
lea ecx, [ebp - 0xb4]
call fcn.0040d870
mov eax, dword [ebp - 0xb0]
lea ecx, [ebp - 0xb4]
shr eax, 1
inc eax
push eax
call fcn.0040e373
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xa4], eax
push ecx
push eax
lea eax, [ebp - 0xb8]
push eax
push 0
push str.user_history
push dword [ebp - 0xac]
call edi
test eax, eax
jne 0x42cc33
mov eax, dword [ebp - 0xb0]
xor edx, edx
mov ecx, dword [ebp - 0xa4]
shr eax, 1
mov word [ecx + eax*2], dx
xor eax, eax
lea esi, [eax + 1]
push 0xffffffffffffffff
lea ecx, [ebp - 0xb4]
call fcn.00412b02
test esi, esi
je 0x42cc54
mov eax, dword [ebp - 0xb4]
cmp dword [eax - 0xc], 0
je 0x42cc5a
push 0xd
jmp 0x42cc5c
mov eax, dword [ebp - 0xb4]
push 0x67
pop esi
lea ecx, [eax - 0x10]
call fcn.0040bb70
cmp dword [ebp - 0xac], 0
je 0x42cc7a
push dword [ebp - 0xac]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, esi
mov ecx, dword [ebp - 0x14]
call fcn.004a774e
ret