Function at 0x4ae829
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
push edi
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0x14], 0x4f05b8
push 0x64
call fcn.0047c917
add esp, 4
mov dword [ebp - 0xc], eax
push 4
call fcn.0047c917
add esp, 4
mov dword [ebp - 0x24], eax
push 0x64
call fcn.0047c917
add esp, 4
mov dword [ebp - 8], eax
push 4
call fcn.0047c917
add esp, 4
mov dword [ebp - 0x20], eax
push 4
call fcn.0047c917
add esp, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], 0
push ebx
push esi
call fcn.004af2e3
add esp, 8
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
je 0x4aeae1
push 0
push 0
push dword [ebp - 0x18]
call fcn.0047cada
add esp, 0xc
push 0x64
push 0
push dword [ebp - 0x20]
call fcn.0047cada
add esp, 0xc
push 0x64
push 0
push dword [ebp - 0x24]
call fcn.0047cada
add esp, 0xc
mov dword [ebp - 4], 0x4f05b8
mov edi, 0x4f05b8
push dword [ebp - 0x20]
call fcn.0047c979
add esp, 4
push eax
push dword [ebp - 8]
call fcn.0047c979
add esp, 4
push eax
push dword [ebp - 0x18]
call fcn.0047c979
add esp, 4
push eax
push 0
push dword [ebp - 0x24]
call fcn.0047c979
add esp, 4
push eax
push dword [ebp - 0xc]
call fcn.0047c979
add esp, 4
push eax
push dword [ebp - 0x1c]
push dword [ebp - 0x28]
call sub.ADVAPI32.DLL_RegEnumValueA
cmp eax, 0x103
je 0x4aeacb
push 0
push dword [ebp - 0x18]
call fcn.0047cac1
add esp, 8
mov dword [ebp - 0x10], eax
push 0x4f05b8
push dword [ebp - 0x14]
call fcn.00470c44
add esp, 8
cmp eax, 0
je 0x4ae961
push dword [ebp + 0x10]
push dword [ebp - 0x14]
call fcn.00470d96
add esp, 8
mov dword [ebp - 0x14], eax
mov ebx, 0
push 0
push dword [ebp - 0x24]
call fcn.0047cac1
add esp, 8
sub eax, 1
mov esi, eax
jmp 0x4ae9b4
push ebx
push dword [ebp - 0xc]
call fcn.0047ca4b
add esp, 8
cmp eax, 0
jne 0x4ae98d
jmp 0x4ae9b8
push ebx
push dword [ebp - 0xc]
call fcn.0047ca4b
add esp, 8
push eax
call fcn.004708c9
add esp, 4
push eax
push dword [ebp - 4]
call fcn.00470d96
add esp, 8
mov dword [ebp - 4], eax
add ebx, 1
cmp ebx, esi
jle 0x4ae97a
mov eax, dword [ebp - 0x10]
cmp eax, 1
je 0x4ae9d1
cmp eax, 7
je 0x4ae9d1
cmp eax, 3
je 0x4ae9d1
cmp eax, 4
je 0x4aea27
jmp 0x4aea41
mov ebx, 0
push 0
push dword [ebp - 0x20]
call fcn.0047cac1
add esp, 8
sub eax, 1
mov esi, eax
jmp 0x4aea21
push ebx
push dword [ebp - 8]
call fcn.0047ca4b
add esp, 8
cmp eax, 0
jne 0x4ae9fd
jmp 0x4aea25
push ebx
push dword [ebp - 8]
call fcn.0047ca4b
add esp, 8
push eax
call fcn.004708c9
add esp, 4
push eax
push edi
call fcn.00470d96
add esp, 8
mov edi, eax
add ebx, 1
cmp ebx, esi
jle 0x4ae9ea
jmp 0x4aea41
push 0
push dword [ebp - 8]
call fcn.0047cac1
add esp, 8
push eax
call fcn.00470915
add esp, 4
mov edi, eax
jmp 0x4aea41
cmp dword [ebp + 0x14], 0
je 0x4aeaa0
push edi
push 0x4f05c4
push dword [ebp - 4]
push 0x4f05d4
push 0
push dword [ebp - 0x18]
call fcn.0047cac1
add esp, 8
push eax
call fcn.00470915
add esp, 4
push eax
push dword [ebp - 0x14]
call fcn.00470d96
add esp, 8
push eax
call fcn.00470d96
add esp, 8
push eax
call fcn.00470d96
add esp, 8
push eax
call fcn.00470d96
add esp, 8
push eax
call fcn.00470d96
add esp, 8
mov dword [ebp - 0x14], eax
jmp 0x4aeac9
push edi
push 0x4f05c4
push dword [ebp - 4]
push dword [ebp - 0x14]
call fcn.00470d96
add esp, 8
push eax
call fcn.00470d96
add esp, 8
push eax
call fcn.00470d96
add esp, 8
mov dword [ebp - 0x14], eax
jmp 0x4aeacd
jmp 0x4aead6
add dword [ebp - 0x1c], 1
jmp 0x4ae89e
push dword [ebp - 0x28]
call fcn.004af35e
add esp, 4
mov eax, dword [ebp - 0x14]
jmp 0x4aeae6
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret