Function at 0x403fec
Capabilities:
Query or enumerate registry value
Resolve function by parsing pe exports

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, dword [0x40700c]
sub esp, 0xc
push ebx
mov ebx, ecx
push esi
push edi
mov edi, edx
cmp eax, 0xffffffff
je 0x404016
push 0x4017c4
push 0xc
push eax
call dword [sym.imp.rtutils.dll_TracePrintfExA]
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 4]
push eax
mov edx, 0x4017d8
mov ecx, ebx
call fcn.00404d4d
mov eax, dword [ebp - 4]
xor ecx, ecx
cmp eax, 0xffffffff
je 0x40403c
mov dword [edi + 0x4c], eax
mov dword [ebp - 4], ecx
jmp 0x404043
mov dword [ebp - 4], 1
push edi
mov edx, 0x40157c
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 4]
mov edx, 0x4017f4
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 8]
mov edx, 0x40181c
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0xc]
mov edx, 0x401834
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x10]
mov edx, 0x40184c
push eax
mov ecx, ebx
call fcn.00404d4d
lea esi, [edi + 0x24]
mov edx, 0x401870
push esi
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x14]
mov edx, 0x401890
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x18]
mov edx, 0x4018a8
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x1c]
mov edx, 0x4018dc
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x20]
mov edx, 0x40190c
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x28]
mov edx, 0x401934
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x2c]
mov edx, 0x401954
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x30]
mov edx, 0x401970
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x34]
mov edx, 0x401994
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x38]
mov edx, 0x4019bc
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x3c]
mov edx, 0x4019ec
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x40]
push eax
mov edx, 0x401a14
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x60]
mov edx, 0x401a30
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x70]
mov edx, 0x401a54
push eax
mov ecx, ebx
call fcn.00404d4d
lea eax, [edi + 0x74]
mov edx, 0x401a64
push eax
mov ecx, ebx
call fcn.00404d4d
lea edx, [edi + 0x44]
mov dword [esi], 1
mov ecx, ebx
call fcn.00403b39
push ecx
lea eax, [edi + 0x58]
mov edx, 0x401a74
push eax
mov ecx, ebx
call fcn.00404d93
mov esi, eax
test esi, esi
jne 0x404350
push ecx
lea eax, [edi + 0x5c]
mov edx, 0x401a8c
push eax
mov ecx, ebx
call fcn.00404d93
mov esi, eax
test esi, esi
jne 0x404350
xor ecx, ecx
lea eax, [ebp - 8]
push eax
push ecx
lea eax, [ebp - 0xc]
mov dword [ebp - 8], ecx
push eax
push ecx
mov esi, 0x401aa0
push esi
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
test eax, eax
jne 0x4041fe
push ecx
lea eax, [edi + 0x64]
mov edx, esi
push eax
mov ecx, ebx
call fcn.00404d93
mov esi, eax
test esi, esi
jne 0x404350
push ecx
lea eax, [edi + 0x68]
mov edx, 0x401ab4
push eax
mov ecx, ebx
call fcn.00404d93
mov esi, eax
test esi, esi
jne 0x404350
lea edx, [edi + 0x6c]
mov ecx, ebx
call fcn.00403cdd
lea eax, [edi + 0x48]
mov edx, 0x401ac8
push eax
mov ecx, ebx
call fcn.00404e62
mov esi, eax
test esi, esi
jne 0x404350
lea eax, [ebp - 8]
mov edx, 0x401af4
push eax
mov ecx, ebx
call fcn.00404e62
mov esi, eax
test esi, esi
jne 0x404350
mov esi, dword [ebp - 8]
push esi
cmp word [esi], ax
jne 0x4042f7
call dword [sym.imp.KERNEL32.dll_GlobalFree]
lea eax, [edi + 0x50]
mov edx, 0x401b20
push eax
mov ecx, ebx
call fcn.00404e62
mov esi, eax
test esi, esi
jne 0x404350
lea eax, [edi + 0x54]
mov edx, 0x401b4c
push eax
mov ecx, ebx
call fcn.00404e62
mov esi, eax
test esi, esi
jne 0x404350
lea eax, [edi + 0x78]
mov edx, 0x401b7c
push eax
mov ecx, ebx
call fcn.00404e62
mov esi, eax
test esi, esi
jne 0x404350
cmp dword [ebp - 4], eax
je 0x404357
mov dword [ebp - 4], eax
mov edx, 0x401b98
lea eax, [ebp - 4]
mov ecx, ebx
push eax
call fcn.00404e62
mov esi, eax
test esi, esi
jne 0x404350
mov eax, dword [ebp - 4]
test eax, eax
je 0x404357
cmp word [eax], 0x31
jne 0x4042ee
mov dword [edi + 0x4c], 1
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x404357
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [esi + eax*2]
jmp 0x40431c
movzx ecx, word [eax]
cmp ecx, 0x5c
je 0x404322
cmp ecx, 0x2f
je 0x404322
cmp ecx, 0x3a
je 0x404322
push eax
push esi
call dword [sym.imp.USER32.dll_CharPrevW]
cmp eax, esi
ja 0x404302
jmp 0x404329
push eax
call dword [sym.imp.USER32.dll_CharNextW]
test eax, eax
je 0x404336
mov ecx, eax
call fcn.004036c6
jmp 0x404338
xor eax, eax
push esi
mov dword [edi + 0x50], eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
cmp dword [edi + 0x50], eax
jne 0x404284
push 8
pop esi
mov ecx, edi
call fcn.00403901
mov eax, dword [0x40700c]
cmp eax, 0xffffffff
je 0x404373
push esi
push 0x401bc4
push 0xc
push eax
call dword [sym.imp.rtutils.dll_TracePrintfExA]
add esp, 0x10
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret