Function at 0x4056d7
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
sub esp, 0x800
lea ebp, [esp - 4]
mov eax, dword [0x4a3028]
xor eax, ebp
mov dword [ebp + 0x800], eax
push 0x20
mov eax, 0x44029f
call fcn.0043d0b2
mov edi, ecx
mov esi, edx
xor ebx, ebx
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x14]
call dword [0x474bb4]
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 2
call fcn.0040405b
lea ecx, [ebp - 0x18]
call dword [0x474bb4]
mov byte [ebp - 4], 4
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 0x80c]
mov dword [ebp - 0x28], 0x800
push esi
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
test eax, eax
jne 0x40583d
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp]
push eax
lea eax, [ebp - 0x2c]
push eax
push ebx
push dword [ebp + 0x810]
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x405834
push dword [ebp + 0x810]
mov esi, dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Format]
push dword [ebp + 0x80c]
lea eax, [ebp - 0x18]
push dword [ebp - 0x1c]
push 0x479050
push eax
call esi
mov al, byte [edi + 0x26e]
add esp, 0x14
cmp al, 1
je 0x40583d
push dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
lea ebx, [ebp - 0x14]
lea edi, [ebp]
call fcn.00405895
lea ecx, [ebp - 0x24]
call dword [0x474bb4]
lea ecx, [ebp - 0x10]
call dword [0x474bb4]
lea eax, [ebp + 0x810]
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 6
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator_2]
mov eax, dword [ebp - 0x24]
cmp dword [eax - 0xc], 0
lea eax, [ebp - 0x10]
jne 0x4057f1
push 0x479064
push eax
call esi
pop ecx
pop ecx
jmp 0x405802
push dword [ebp + 0x810]
push str.__s__
push eax
call esi
add esp, 0xc
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::operator]
push 0x479080
push 0x4786f8
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::Replace_1]
lea ecx, [ebp - 0x10]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x24]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
push dword [ebp - 0x20]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x18]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp - 0x14]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp + 0x80c]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
lea ecx, [ebp + 0x810]
call dword [sym.imp.mfc90u.dll_ATL::CStringT_wchar_t_class_StrTraitMFC_DLL_wchar_t_class_ATL::ChTraitsCRT_wchar_t_____::CStringT_wchar_t_clas]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x800]
xor ecx, ebp
call fcn.0043c4b0
add ebp, 0x804
leave
ret 8