Function at 0x41316c
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 0x12
add esp, 0xfffff004
push eax
dec eax
jne 0x413175
mov eax, dword [ebp - 4]
add esp, 0xfffff804
mov eax, 0x5c9fa0
call fcn.00496c14
mov word [ebp - 0x30], 0x14
mov edx, 0x5c0889
lea eax, [ebp - 4]
call fcn.004a451c
inc dword [ebp - 0x24]
mov word [ebp - 0x30], 8
mov word [ebp - 0x30], 0x20
lea eax, [ebp - 8]
call fcn.00401ad8
push eax
inc dword [ebp - 0x24]
call fcn.0040de44
pop ecx
mov word [ebp - 0x30], 8
mov word [ebp - 0x30], 0x2c
lea eax, [ebp - 0x10]
call fcn.00401ad8
push eax
inc dword [ebp - 0x24]
mov edx, 0x5c08ca
lea eax, [ebp - 0xc]
call fcn.004a451c
inc dword [ebp - 0x24]
lea edx, [ebp - 0xc]
lea eax, [ebp - 8]
pop ecx
call fcn.004a4718
lea edx, [ebp - 0x10]
push edx
push dword [ebp - 4]
lea eax, [ebp - 0x14]
call fcn.00401ad8
push eax
inc dword [ebp - 0x24]
call fcn.004106c8
add esp, 8
lea edx, [ebp - 0x14]
push edx
lea eax, [ebp - 0x18]
call fcn.00401ad8
mov ecx, eax
inc dword [ebp - 0x24]
pop edx
pop eax
call fcn.004a4718
lea edx, [ebp - 0x18]
lea eax, [ebp - 8]
call fcn.004a46f0
dec dword [ebp - 0x24]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004a46c0
dec dword [ebp - 0x24]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004a46c0
dec dword [ebp - 0x24]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004a46c0
dec dword [ebp - 0x24]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004a46c0
xor ecx, ecx
mov dword [ebp - 0x5c], ecx
mov word [ebp - 0x30], 8
lea eax, [ebp - 0x48]
push eax
push 0xf003f
push 0
lea eax, [ebp - 8]
call fcn.00401b08
push eax
push reloc.WSOCK32.DLL_closesocket
call sub.ADVAPI32.DLL_RegOpenKeyExA
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x413337
mov dword [ebp - 0x4c], 0x12c
mov dword [ebp - 0x50], 3
xor edx, edx
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x4c], 0x64
mov dword [ebp - 0x50], 3
xor ecx, ecx
mov dword [ebp - 0x54], ecx
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x12768]
push edx
lea ecx, [ebp - 0x50]
push ecx
push 0
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x1266c]
push edx
push dword [ebp - 0x58]
push dword [ebp - 0x48]
call sub.ADVAPI32.DLL_RegEnumValueA
mov dword [ebp - 0x54], eax
inc dword [ebp - 0x58]
lea ecx, [ebp - 0x12768]
push ecx
call fcn.00412e3c
pop ecx
test eax, eax
jne 0x41332e
lea eax, [ebp - 0x12768]
push eax
imul edx, dword [ebp - 0x5c], 0x32
lea ecx, [ebp - 0x12570]
add edx, ecx
push edx
call sub.KERNEL32.DLL_lstrcpyA
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x54], 0x103
jne 0x4132d4
push dword [ebp - 0x48]
call sub.ADVAPI32.DLL_RegCloseKey
lea eax, [ebp - 0x48]
push eax
push 0xf003f
push 0
lea eax, [ebp - 8]
call fcn.00401b08
push eax
push reloc.WSOCK32.DLL_closesocket
call sub.ADVAPI32.DLL_RegOpenKeyExA
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jne 0x4133f3
mov dword [ebp - 0x4c], 0x12c
mov dword [ebp - 0x50], 3
xor edx, edx
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x4c], 0x64
mov dword [ebp - 0x50], 3
xor ecx, ecx
mov dword [ebp - 0x54], ecx
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x12768]
push edx
lea ecx, [ebp - 0x50]
push ecx
push 0
lea eax, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x1266c]
push edx
push dword [ebp - 0x58]
push dword [ebp - 0x48]
call sub.ADVAPI32.DLL_RegEnumValueA
mov dword [ebp - 0x54], eax
inc dword [ebp - 0x58]
lea ecx, [ebp - 0x12768]
push ecx
call fcn.00412e3c
pop ecx
test eax, eax
jne 0x4133ea
lea eax, [ebp - 0x12768]
push eax
imul edx, dword [ebp - 0x5c], 0x32
lea ecx, [ebp - 0x12570]
add edx, ecx
push edx
call sub.KERNEL32.DLL_lstrcpyA
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x54], 0x103
jne 0x413390
push dword [ebp - 0x48]
call sub.ADVAPI32.DLL_RegCloseKey
push dword [ebp - 0x5c]
push 0x5c08cc
lea eax, [ebp - 0x12800]
push eax
call sub.USER32.DLL_wsprintfA
add esp, 0xc
xor edx, edx
mov dword [ebp - 0x60], edx
mov word [ebp - 0x30], 8
jmp 0x4134b2
xor ecx, ecx
mov dword [ebp - 0x64], ecx
mov word [ebp - 0x30], 8
jmp 0x4134a6
imul eax, dword [ebp - 0x64], 0x32
lea edx, [ebp - 0x1253e]
add eax, edx
push eax
imul ecx, dword [ebp - 0x64], 0x32
lea eax, [ebp - 0x12570]
add ecx, eax
push ecx
call sub.KERNEL32.DLL_lstrcmpA
test eax, eax
jle 0x4134a3
imul edx, dword [ebp - 0x64], 0x32
lea ecx, [ebp - 0x12570]
add edx, ecx
push edx
lea eax, [ebp - 0x12800]
push eax
call sub.KERNEL32.DLL_lstrcpyA
imul edx, dword [ebp - 0x64], 0x32
lea ecx, [ebp - 0x1253e]
add edx, ecx
push edx
imul eax, dword [ebp - 0x64], 0x32
lea edx, [ebp - 0x12570]
add eax, edx
push eax
call sub.KERNEL32.DLL_lstrcpyA
lea ecx, [ebp - 0x12800]
push ecx
imul eax, dword [ebp - 0x64], 0x32
lea edx, [ebp - 0x1253e]
add eax, edx
push eax
call sub.KERNEL32.DLL_lstrcpyA
inc dword [ebp - 0x64]
mov ecx, dword [ebp - 0x5c]
dec ecx
cmp ecx, dword [ebp - 0x64]
jg 0x41342f
inc dword [ebp - 0x60]
mov eax, dword [ebp - 0x5c]
dec eax
cmp eax, dword [ebp - 0x60]
jg 0x413422
mov edx, dword [ebp - 0x5c]
dec edx
mov dword [ebp - 0x68], edx
mov word [ebp - 0x30], 8
mov dword [ebp - 0x6c], 1
jmp 0x41354d
mov dword [ebp - 0x70], 1
mov word [ebp - 0x30], 8
jmp 0x413541
imul ecx, dword [ebp - 0x70], 0x32
lea eax, [ebp - 0x1253e]
add ecx, eax
push ecx
imul edx, dword [ebp - 0x70], 0x32
lea ecx, [ebp - 0x12570]
add edx, ecx
push edx
call sub.KERNEL32.DLL_lstrcmpA
test eax, eax
jne 0x41353e
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x44], eax
jmp 0x413532
imul edx, dword [ebp - 0x44], 0x32
lea ecx, [ebp - 0x1253e]
add edx, ecx
push edx
imul eax, dword [ebp - 0x44], 0x32
lea edx, [ebp - 0x12570]
add eax, edx
push eax
call sub.KERNEL32.DLL_lstrcpyA
inc dword [ebp - 0x44]
mov ecx, dword [ebp - 0x68]
dec ecx
cmp ecx, dword [ebp - 0x44]
jge 0x413510
dec dword [ebp - 0x68]
inc dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
dec eax
cmp eax, dword [ebp - 0x70]
jge 0x4134e4
inc dword [ebp - 0x6c]
mov edx, dword [ebp - 0x68]
dec edx
cmp edx, dword [ebp - 0x6c]
jge 0x4134d5
mov dword [ebp - 0x74], 1
mov word [ebp - 0x30], 8
mov ecx, dword [ebp - 0x74]
cmp ecx, dword [ebp - 0x68]
jg 0x4135c7
mov eax, dword [0x5d8038]
mov edx, dword [eax + 0x2d4]
add edx, 0x208
mov dword [ebp - 0x78], edx
mov word [ebp - 0x30], 0x38
imul edx, dword [ebp - 0x74], 0x32
lea eax, [ebp - 0x12570]
add edx, eax
lea eax, [ebp - 0x1c]
call fcn.004a451c
inc dword [ebp - 0x24]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x78]
mov eax, dword [ecx]
mov ecx, dword [eax]
call dword [ecx + 0x34]
dec dword [ebp - 0x24]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.004a46c0
inc dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
cmp ecx, dword [ebp - 0x68]
jle 0x41356f
dec dword [ebp - 0x24]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004a46c0
dec dword [ebp - 0x24]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004a46c0
mov ecx, dword [ebp - 0x40]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret