Function at 0x40fd16
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x160c
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
push esi
mov edi, str.FindIncrediMailAccount
push edi
push str._s_:__Opening_account__s
call fcn.00449974
add esp, 0xc
lea eax, [ebp - 0x15fc]
xor ebx, ebx
push eax
push 0x20019
push ebx
push esi
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
je 0x40fd7d
push eax
push esi
push edi
push str._s_:_Failed_to_open_the_host_key___s___Error0x_.8x
call fcn.00449974
add esp, 0x10
xor eax, eax
jmp 0x410059
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x1608]
push eax
lea eax, [ebp - 0x1404]
mov dword [ebp - 0x1608], 0x400
push eax
lea eax, [ebp - 0x1604]
mov byte [ebp - 0x1404], bl
push eax
push ebx
push str.EmailAddress
push dword [ebp - 0x15fc]
call esi
test eax, eax
je 0x40fdce
push eax
push edi
push str._s_:_RegQueryValueEx_failed_to_find_email_address__Error0x_.8x
call fcn.00449974
add esp, 0xc
jmp 0x41004b
lea eax, [ebp - 0x160c]
mov byte [ebp - 0x804], bl
push eax
lea eax, [ebp - 0xc04]
mov byte [ebp - 0x1004], bl
push eax
lea eax, [ebp - 0x1604]
mov byte [ebp - 0xc04], bl
push eax
push ebx
push str.PopAccount
push dword [ebp - 0x15fc]
mov byte [ebp - 0x404], bl
mov dword [ebp - 0x160c], 0x400
call esi
lea eax, [ebp - 0x1600]
mov dword [ebp - 0x1600], 0x400
push eax
lea eax, [ebp - 0x804]
push eax
lea eax, [ebp - 0x1604]
push eax
push ebx
push str.PopPassword
push dword [ebp - 0x15fc]
call esi
lea eax, [ebp - 0x1608]
mov dword [ebp - 0x1608], 0x400
push eax
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x1604]
push eax
push ebx
push str.PopServer
push dword [ebp - 0x15fc]
call esi
cmp dword [ebp - 0x1600], ebx
jbe 0x40ff29
cmp dword [ebp - 0x160c], ebx
jbe 0x40ff29
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x804]
push eax
lea eax, [ebp - 0xc04]
push eax
lea eax, [ebp - 0x1404]
push eax
push edi
push str._s_:_Found_POP3_Account___Email__s__User_s__Pass_s__Server_s
call fcn.00449974
lea eax, [ebp - 0x1004]
push eax
push dword [ebp - 0x1600]
lea eax, [ebp - 0x804]
push eax
call fcn.0040b730
lea eax, [ebp - 0x404]
push str.imap
push eax
call fcn.00627320
test eax, eax
mov edx, str.IMAP
mov ecx, str.POP3
lea eax, [ebp - 0x15f8]
cmovne ecx, edx
push ecx
push 0x1f4
push eax
call fcn.006311ec
push 0xffffffffffffffff
push 0x66ae5d
lea eax, [ebp - 0x1004]
push eax
lea eax, [ebp - 0x1404]
push eax
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x15f8]
push eax
push 0xfe
push 2
call fcn.00412c85
add esp, 0x58
lea eax, [ebp - 0x160c]
mov byte [ebp - 0x804], bl
push eax
lea eax, [ebp - 0xc04]
mov byte [ebp - 0x1004], bl
push eax
lea eax, [ebp - 0x1604]
mov byte [ebp - 0xc04], bl
push eax
push ebx
push str.SmtpAccount
push dword [ebp - 0x15fc]
mov byte [ebp - 0x404], bl
mov dword [ebp - 0x160c], 0x400
call esi
lea eax, [ebp - 0x1600]
mov dword [ebp - 0x1600], 0x400
push eax
lea eax, [ebp - 0x804]
push eax
lea eax, [ebp - 0x1604]
push eax
push ebx
push str.SmtpPassword
push dword [ebp - 0x15fc]
call esi
lea eax, [ebp - 0x1608]
mov dword [ebp - 0x1608], 0x400
push eax
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x1604]
push eax
push ebx
push str.SmtpServer
push dword [ebp - 0x15fc]
call esi
cmp dword [ebp - 0x1600], ebx
jbe 0x410048
cmp dword [ebp - 0x160c], ebx
jbe 0x410048
lea eax, [ebp - 0x404]
push eax
lea eax, [ebp - 0x804]
push eax
lea eax, [ebp - 0xc04]
push eax
lea eax, [ebp - 0x1404]
push eax
push edi
push str._s_:_Found_SMTP_Account___Email__s__User_s__Pass_s__Server_s
call fcn.00449974
lea eax, [ebp - 0x1004]
push eax
push dword [ebp - 0x1600]
lea eax, [ebp - 0x804]
push eax
call fcn.0040b730
push 0xffffffffffffffff
push 0x66ae5d
lea eax, [ebp - 0x1004]
push eax
lea eax, [ebp - 0x1404]
push eax
lea eax, [ebp - 0x404]
push eax
push str.SMTP
push 0xfe
push 2
call fcn.00412c85
add esp, 0x44
xor ebx, ebx
inc ebx
push dword [ebp - 0x15fc]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, ebx
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret