Function at 0x404ea2
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 4]
push esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push edi
push eax
lea eax, [ebp - 0xc]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 8]
xor edi, edi
push eax
push edi
push str.Timeout
push ebx
mov dword [ebp - 0x10], edi
call esi
mov edx, eax
test edx, edx
jne 0x404eed
mov eax, dword [ebp - 0xc]
lea ecx, [eax - 3]
cmp ecx, 0x39
ja 0x404ef2
mov dword [0x42e888], eax
jmp 0x404f07
cmp edx, 2
je 0x404f07
movzx eax, dx
or eax, 0x80070000
test edx, edx
cmovle eax, edx
test eax, eax
js 0x40518b
lea eax, [ebp - 4]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 8]
push eax
push edi
push str.LogLevel
push ebx
call esi
cmp eax, 2
je 0x404f42
test eax, eax
je 0x404f42
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
test ecx, ecx
js 0x40518b
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp + 0xc]
push 3
pop ecx
cmp eax, ecx
cmova eax, ecx
cmp dword [edi], 0
mov dword [ebp - 0x10], eax
je 0x404f7b
test eax, eax
jne 0x404f71
xor esi, esi
inc esi
push esi
call fcn.00410fd9
push esi
push esi
call fcn.00410f20
and dword [edi], 0
jmp 0x404fa7
push 1
push eax
call fcn.00410f20
jmp 0x404fad
test eax, eax
je 0x404fad
xor esi, esi
inc esi
push esi
push eax
call fcn.00410f20
push esi
push 0
push 0x425ad8
push 0x425850
push 0
call fcn.00410e3d
test eax, eax
js 0x40518b
mov dword [edi], esi
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 4]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp + 8]
xor edi, edi
push eax
lea eax, [ebp - 8]
push eax
push edi
push str.CDBufferRead
push ebx
call esi
mov ecx, eax
test ecx, ecx
jne 0x404fde
cmp dword [ebp + 8], eax
setne al
mov dword [0x42e88c], eax
jmp 0x404ff8
cmp ecx, 2
je 0x404ff8
movzx eax, cx
or eax, 0x80070000
test ecx, ecx
cmovle eax, ecx
test eax, eax
js 0x40518b
lea eax, [ebp - 4]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push edi
push str.CDBufferSize
push ebx
call esi
mov ecx, eax
test ecx, ecx
jne 0x405028
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x40502d
mov dword [0x42e890], eax
jmp 0x405042
cmp ecx, 2
je 0x405042
movzx eax, cx
or eax, 0x80070000
test ecx, ecx
cmovle eax, ecx
test eax, eax
js 0x40518b
lea eax, [ebp - 4]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 8]
push eax
push edi
push str.NetworkBufferRead
push ebx
call esi
mov ecx, eax
test ecx, ecx
jne 0x405071
cmp dword [ebp + 8], eax
setne al
mov dword [0x42e894], eax
jmp 0x40508b
cmp ecx, 2
je 0x40508b
movzx eax, cx
or eax, 0x80070000
test ecx, ecx
cmovle eax, ecx
test eax, eax
js 0x40518b
lea eax, [ebp - 4]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push edi
push str.NetworkBufferSize
push ebx
call esi
mov ecx, eax
test ecx, ecx
jne 0x4050bb
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x4050c0
mov dword [0x42e898], eax
jmp 0x4050d5
cmp ecx, 2
je 0x4050d5
movzx eax, cx
or eax, 0x80070000
test ecx, ecx
cmovle eax, ecx
test eax, eax
js 0x40518b
lea eax, [ebp - 4]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 8]
push eax
push edi
push str.InternetBufferRead
push ebx
call esi
mov ecx, eax
test ecx, ecx
jne 0x405104
cmp dword [ebp + 8], eax
setne al
mov dword [0x42e89c], eax
jmp 0x40511a
cmp ecx, 2
je 0x40511a
movzx eax, cx
or eax, 0x80070000
test ecx, ecx
cmovle eax, ecx
test eax, eax
js 0x40518b
lea eax, [ebp - 4]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 8]
push eax
push edi
push str.InternetBufferSize
push ebx
call esi
mov ecx, eax
test ecx, ecx
jne 0x40514a
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x40514f
mov dword [0x42e8a0], eax
jmp 0x405160
cmp ecx, 2
je 0x405160
movzx eax, cx
or eax, 0x80070000
test ecx, ecx
cmovle eax, ecx
test eax, eax
js 0x40518b
lea eax, [ebp - 4]
mov dword [ebp - 4], 4
push eax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 8]
push eax
push edi
push str.BufferWrite
push ebx
call esi
test eax, eax
jne 0x40518b
cmp dword [ebp + 8], eax
setne al
mov dword [0x42e8a4], eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8