Function at 0x410e40
Capabilities:
Query or enumerate registry value

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5426b9
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ecx
mov eax, 0x2594
call fcn.004c70e0
mov eax, dword [0x57906c]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
push 0x55faaf
lea ecx, [ebp - 0x88]
call fcn.00407c10
mov dword [ebp - 4], 0
push 0x1250
push 0
lea eax, [ebp - 0x12f8]
push eax
call fcn.00516f30
add esp, 0xc
mov dword [ebp - 0x1300], 0
mov dword [ebp - 0x12fc], 0
lea eax, [ebp - 0x1300]
push eax
push 0x20019
push 0
push str.SOFTWAREVNPTES
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x41101c
lea eax, [ebp - 0x12fc]
push eax
push 0
push 0
push 0
push str.conf
push dword [ebp - 0x1300]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
call esi
test eax, eax
jne 0x41101c
xor ecx, ecx
mov eax, dword [ebp - 0x12fc]
add eax, 1
setb cl
neg ecx
or ecx, eax
push ecx
call fcn.00524e05
add esp, 4
mov edi, eax
lea eax, [ebp - 0x12fc]
push eax
push edi
push 0
push 0
push str.conf
push dword [ebp - 0x1300]
call esi
test eax, eax
jne 0x41101c
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x58], eax
xorps xmm0, xmm0
movups xmmword [ebp - 0x40], xmm0
movups xmmword [ebp - 0x30], xmm0
mov byte [ebp - 0x20], al
call fcn.004269d0
add eax, 0x42
push eax
push 0x21
lea eax, [ebp - 0x40]
push eax
call fcn.0052400a
add esp, 0xc
lea esi, [ebp - 0x40]
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x410f88
sub esi, ecx
call fcn.004269d0
push esi
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.00426a40
test eax, eax
je 0x41101c
mov dword [ebp - 0x1308], 0
call fcn.004269d0
push 0
push edi
lea eax, [ebp - 0x1308]
push eax
push dword [ebp - 0x58]
call fcn.00426b80
test eax, eax
je 0x41100c
mov esi, dword [ebp - 0x1308]
push esi
lea ecx, [ebp - 0x70]
call fcn.00407c10
mov byte [ebp - 4], 1
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x88]
call fcn.00411d70
test esi, esi
je 0x411000
push esi
call fcn.0051f38c
add esp, 4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x70]
call fcn.00407b50
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x41101c
push 0
push eax
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
lea ecx, [ebp - 0x88]
call fcn.00408f80
mov eax, dword [eax + 0x10]
test eax, eax
je 0x41191f
mov byte [ebp - 4], 2
sub esp, 0x28
mov dword [ebp - 0x130c], esp
mov eax, esp
mov dword [ebp - 0x54], eax
mov dword [eax + 0x24], 0
mov byte [ebp - 4], 3
mov byte [ebp - 4], 4
push 0
push 1
mov byte [ebp - 4], 2
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x50]
call fcn.00413c60
add esp, 0x30
mov byte [ebp - 4], 5
push 0x567b78
lea ecx, [ebp - 0x38]
call fcn.00407c10
mov byte [ebp - 4], 6
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411ad0
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411b60
push esi
mov ecx, eax
call fcn.004198a0
mov byte [ebp - 0x1301], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
cmp byte [ebp - 0x1301], 0
jne 0x41112e
lea eax, [ebp - 0x70]
push eax
push ecx
push 0x567b78
lea ecx, [ebp - 0x50]
call fcn.0040ac00
add esp, 4
mov ecx, eax
call fcn.00413dd0
mov byte [ebp - 4], 7
mov ecx, eax
call fcn.00407a60
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.00420f40
mov byte [ebp - 4], 8
mov ecx, eax
call fcn.00407890
push eax
push 0x104
lea eax, [ebp - 0xcd8]
push eax
call fcn.0051f2c4
add esp, 0xc
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x38]
call fcn.004078a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x70]
call fcn.00407b50
push str.logsrc
lea ecx, [ebp - 0x38]
call fcn.00407c10
mov byte [ebp - 4], 9
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411ad0
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411b60
push esi
mov ecx, eax
call fcn.004198a0
mov byte [ebp - 0x1301], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
cmp byte [ebp - 0x1301], 0
jne 0x4111ec
lea eax, [ebp - 0x70]
push eax
push ecx
push str.logsrc
lea ecx, [ebp - 0x50]
call fcn.0040ac00
add esp, 4
mov ecx, eax
call fcn.00413dd0
mov byte [ebp - 4], 0xa
mov ecx, eax
call fcn.00407a60
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.00420f40
mov byte [ebp - 4], 0xb
mov ecx, eax
call fcn.00407890
push eax
push 0x104
lea eax, [ebp - 0x4b8]
push eax
call fcn.0051f2c4
add esp, 0xc
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x38]
call fcn.004078a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x70]
call fcn.00407b50
push 0x567bc8
lea ecx, [ebp - 0x38]
call fcn.00407c10
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411ad0
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411b60
push esi
mov ecx, eax
call fcn.004198a0
mov byte [ebp - 0x1301], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
cmp byte [ebp - 0x1301], 0
jne 0x4112aa
lea eax, [ebp - 0x70]
push eax
push ecx
push 0x567bc8
lea ecx, [ebp - 0x50]
call fcn.0040ac00
add esp, 4
mov ecx, eax
call fcn.00413dd0
mov byte [ebp - 4], 0xd
mov ecx, eax
call fcn.00407a60
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.00420f40
mov byte [ebp - 4], 0xe
mov ecx, eax
call fcn.00407890
push eax
push 0x104
lea eax, [ebp - 0x12f8]
push eax
call fcn.0051f2c4
add esp, 0xc
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x38]
call fcn.004078a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x70]
call fcn.00407b50
push 0x567bcc
lea ecx, [ebp - 0x38]
call fcn.00407c10
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411ad0
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411b60
push esi
mov ecx, eax
call fcn.004198a0
mov byte [ebp - 0x1301], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
cmp byte [ebp - 0x1301], 0
jne 0x411368
lea eax, [ebp - 0x70]
push eax
push ecx
push 0x567bcc
lea ecx, [ebp - 0x50]
call fcn.0040ac00
add esp, 4
mov ecx, eax
call fcn.00413dd0
mov byte [ebp - 4], 0x10
mov ecx, eax
call fcn.00407a60
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.00420f40
mov byte [ebp - 4], 0x11
mov ecx, eax
call fcn.00407890
push eax
push 0x104
lea eax, [ebp - 0x10f0]
push eax
call fcn.0051f2c4
add esp, 0xc
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x38]
call fcn.004078a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x70]
call fcn.00407b50
push str.update
lea ecx, [ebp - 0x38]
call fcn.00407c10
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411ad0
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411b60
push esi
mov ecx, eax
call fcn.004198a0
mov byte [ebp - 0x1301], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
cmp byte [ebp - 0x1301], 0
jne 0x411426
lea eax, [ebp - 0x70]
push eax
push ecx
push str.update
lea ecx, [ebp - 0x50]
call fcn.0040ac00
add esp, 4
mov ecx, eax
call fcn.00413dd0
mov byte [ebp - 4], 0x13
mov ecx, eax
call fcn.00407a60
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.00420f40
mov byte [ebp - 4], 0x14
mov ecx, eax
call fcn.00407890
push eax
push 0x104
lea eax, [ebp - 0xee4]
push eax
call fcn.0051f2c4
add esp, 0xc
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x38]
call fcn.004078a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x70]
call fcn.00407b50
push str.iocs
lea ecx, [ebp - 0x38]
call fcn.00407c10
mov byte [ebp - 4], 0x15
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411ad0
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411b60
push esi
mov ecx, eax
call fcn.004198a0
mov byte [ebp - 0x1301], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
cmp byte [ebp - 0x1301], 0
jne 0x4114c3
lea eax, [ebp - 0x38]
push eax
push ecx
push str.iocs
lea ecx, [ebp - 0x50]
call fcn.0040ac00
add esp, 4
mov ecx, eax
call fcn.00413dd0
mov byte [ebp - 4], 0x16
mov ecx, eax
call fcn.00407a60
push eax
push 0x104
lea eax, [ebp - 0x8c8]
push eax
call fcn.0052400a
add esp, 0xc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
push str.version
lea ecx, [ebp - 0x38]
call fcn.00407c10
mov byte [ebp - 4], 0x17
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411ad0
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411b60
push esi
mov ecx, eax
call fcn.004198a0
mov byte [ebp - 0x1301], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
cmp byte [ebp - 0x1301], 0
jne 0x411581
lea eax, [ebp - 0x70]
push eax
push ecx
push str.version
lea ecx, [ebp - 0x50]
call fcn.0040ac00
add esp, 4
mov ecx, eax
call fcn.00413dd0
mov byte [ebp - 4], 0x18
mov ecx, eax
call fcn.00407a60
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.00420f40
mov byte [ebp - 4], 0x19
mov ecx, eax
call fcn.00407890
push eax
push 0x104
lea eax, [ebp - 0xad0]
push eax
call fcn.0051f2c4
add esp, 0xc
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x38]
call fcn.004078a0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x70]
call fcn.00407b50
push str.apiport
lea ecx, [ebp - 0x38]
call fcn.00407c10
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411ad0
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411b60
push esi
mov ecx, eax
call fcn.004198a0
mov byte [ebp - 0x1301], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
cmp byte [ebp - 0x1301], 0
jne 0x41167c
push str.apiport
lea ecx, [ebp - 0x50]
call fcn.0040ac00
mov dword [ebp - 0x54], 0
mov ecx, eax
call fcn.00408f80
mov esi, eax
lea ecx, [ebp - 0x54]
call fcn.00408f80
mov edi, eax
mov dl, byte [esi]
movzx ecx, dl
add ecx, 0xfffffffc
cmp ecx, 3
ja case.default.0x411612
jmp dword [ecx*4 + 0x411a1c]
lea eax, [esi + 8]
xor ecx, ecx
cmp dl, 6
cmovne eax, ecx
mov eax, dword [eax]
jmp 0x411671
cmp dl, 5
je 0x411642
cmp dl, 6
je 0x411642
xor cl, cl
lea eax, [esi + 8]
xor edx, edx
test cl, cl
cmove eax, edx
mov eax, dword [eax]
jmp 0x411671
mov cl, 1
lea eax, [esi + 8]
xor edx, edx
test cl, cl
cmove eax, edx
mov eax, dword [eax]
jmp 0x411671
lea eax, [esi + 8]
xor ecx, ecx
cmp dl, 7
cmovne eax, ecx
cvttsd2si eax, qword [eax]
jmp 0x411671
lea eax, [esi + 8]
xor ecx, ecx
cmp dl, 4
cmovne eax, ecx
movzx eax, byte [eax]
mov dword [edi], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xee8], eax
push str.updport
lea ecx, [ebp - 0x38]
call fcn.00407c10
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411ad0
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411b60
push esi
mov ecx, eax
call fcn.004198a0
mov byte [ebp - 0x1301], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
cmp byte [ebp - 0x1301], 0
jne 0x411780
push str.updport
lea ecx, [ebp - 0x50]
call fcn.0040ac00
mov dword [ebp - 0x1308], 0
mov ecx, eax
call fcn.00408f80
mov esi, eax
lea ecx, [ebp - 0x1308]
call fcn.00408f80
mov edi, eax
mov dl, byte [esi]
movzx ecx, dl
add ecx, 0xfffffffc
cmp ecx, 3
ja case.default.0x411713
jmp dword [ecx*4 + 0x411a2c]
lea eax, [esi + 8]
xor ecx, ecx
cmp dl, 6
cmovne eax, ecx
mov eax, dword [eax]
jmp 0x411772
cmp dl, 5
je 0x411743
cmp dl, 6
je 0x411743
xor cl, cl
lea eax, [esi + 8]
xor edx, edx
test cl, cl
cmove eax, edx
mov eax, dword [eax]
jmp 0x411772
mov cl, 1
lea eax, [esi + 8]
xor edx, edx
test cl, cl
cmove eax, edx
mov eax, dword [eax]
jmp 0x411772
lea eax, [esi + 8]
xor ecx, ecx
cmp dl, 7
cmovne eax, ecx
cvttsd2si eax, qword [eax]
jmp 0x411772
lea eax, [esi + 8]
xor ecx, ecx
cmp dl, 4
cmovne eax, ecx
movzx eax, byte [eax]
mov dword [edi], eax
mov eax, dword [ebp - 0x1308]
mov dword [ebp - 0xcdc], eax
push str.mail
lea ecx, [ebp - 0x38]
call fcn.00407c10
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411ad0
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411b60
push esi
mov ecx, eax
call fcn.004198a0
mov byte [ebp - 0x1301], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
cmp byte [ebp - 0x1301], 0
jne 0x41181d
lea eax, [ebp - 0x38]
push eax
push ecx
push str.mail
lea ecx, [ebp - 0x50]
call fcn.0040ac00
add esp, 4
mov ecx, eax
call fcn.00413dd0
mov byte [ebp - 4], 0x1f
mov ecx, eax
call fcn.00407a60
push eax
push 0x104
lea eax, [ebp - 0x5bc]
push eax
call fcn.0052400a
add esp, 0xc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
push str.license
lea ecx, [ebp - 0x38]
call fcn.00407c10
mov byte [ebp - 4], 0x20
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411ad0
mov esi, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x131c]
push eax
lea ecx, [ebp - 0x50]
call fcn.00411b60
push esi
mov ecx, eax
call fcn.004198a0
mov byte [ebp - 0x1301], al
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
cmp byte [ebp - 0x1301], 0
jne 0x4118ba
lea eax, [ebp - 0x38]
push eax
push ecx
push str.license
lea ecx, [ebp - 0x50]
call fcn.0040ac00
add esp, 4
mov ecx, eax
call fcn.00413dd0
mov byte [ebp - 4], 0x21
mov ecx, eax
call fcn.00407a60
push eax
push 0x104
lea eax, [ebp - 0x5bc]
push eax
call fcn.0052400a
add esp, 0xc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x38]
call fcn.00407b50
push 0x1250
lea eax, [ebp - 0x12f8]
push eax
lea eax, [ebp - 0x25a8]
push eax
call fcn.00516430
add esp, 0xc
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x50]
call fcn.00407760
jmp 0x411941
mov dword [ebp - 4], 0
push 0x1250
lea eax, [ebp - 0x12f8]
push eax
lea eax, [ebp - 0x25a8]
push eax
call fcn.00516430
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.00407b50
push 0x1250
lea eax, [ebp - 0x25a8]
push eax
mov esi, dword [ebx + 8]
push esi
call fcn.00516430
add esp, 0xc
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.004c61ad
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov ecx, esi
call fcn.00408ef0
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push eax
mov edx, str.type_must_be_number__but_is
lea ecx, [ebp - 0x38]
call fcn.0040aef0
mov byte [ebp - 4], 0x1b
push eax
mov edx, 0x12e
lea ecx, [ebp - 0x1338]
call fcn.00414300
add esp, 8
push 0x576b64
lea eax, [ebp - 0x1338]
push eax
call fcn.005163b7
mov ecx, esi
call fcn.00408ef0
mov dword [ebp - 0x130c], eax
lea eax, [ebp - 0x130c]
push eax
mov edx, str.type_must_be_number__but_is
lea ecx, [ebp - 0x38]
call fcn.0040aef0
mov byte [ebp - 4], 0x1d
push eax
mov edx, 0x12e
lea ecx, [ebp - 0x1354]
call fcn.00414300
add esp, 8
push 0x576b64
lea eax, [ebp - 0x1354]
push eax
call fcn.005163b7
nop dword [eax]
arpl word [esi], dx
inc ecx
add byte [eax], ch
push ss
inc ecx
add byte [ecx], bl
push ss
inc ecx
add byte [edx + 0x16], dl
inc ecx
add byte [edi + edx + 0x41], ah
add byte [ecx], ch
pop ss
inc ecx
add byte [edx], bl
pop ss
inc ecx
add byte [ebx + 0x17], dl
inc ecx
add ah, cl
int3