Function at 0x41e290
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4fc2c9
mov eax, dword fs:[0]
push eax
sub esp, 0xe50
mov eax, dword [0x53000c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0xcd0]
push eax
call fcn.004a1410
add esp, 4
lea ecx, [ebp - 0xcb8]
mov dword [ebp - 4], 0
call fcn.004813f0
lea eax, [ebp - 0xe5c]
mov byte [ebp - 4], 1
push eax
call fcn.004a1780
add esp, 4
push eax
lea eax, [ebp - 0xca0]
mov byte [ebp - 4], 2
push eax
call fcn.004a0e20
add esp, 8
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0xe48]
cmp edx, 8
jb 0x41e349
mov ecx, dword [ebp - 0xe5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e33f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea43
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov dword [ebp - 0xc60], 0
mov dword [ebp - 0xc5c], 0xf
mov byte [ebp - 0xc70], 0
push 0x800
lea eax, [ebp - 0xc20]
mov byte [ebp - 4], 5
push 0
push eax
mov dword [ebp - 0xc40], 1
call fcn.004bcaf0
add esp, 0xc
mov dword [ebp - 0xc3c], 0x800
lea eax, [ebp - 0xc3c]
push eax
lea eax, [ebp - 0xc20]
push eax
lea eax, [ebp - 0xc40]
push eax
push 0x51cad4
push str.SoftwareMicrosoftWindowsCurrentVersionFLYSVR
push 0x80000001
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
jne 0x41e4c5
lea ecx, [ebp - 0xc20]
mov dword [ebp - 0xe34], eax
mov dword [ebp - 0xe30], 7
lea edx, [ecx + 2]
mov word [ebp - 0xe44], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e3e4
sub ecx, edx
lea eax, [ebp - 0xc20]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xe44]
call fcn.0041a5b0
lea eax, [ebp - 0xe44]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0xe5c]
push eax
call fcn.004a0e20
add esp, 8
lea ecx, [ebp - 0xc70]
push eax
call fcn.0041f110
mov edx, dword [ebp - 0xe48]
cmp edx, 0x10
jb 0x41e466
mov ecx, dword [ebp - 0xe5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e45c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea48
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xe30]
mov dword [ebp - 0xe4c], 0
mov dword [ebp - 0xe48], 0xf
mov byte [ebp - 0xe5c], 0
cmp edx, 8
jb 0x41e4c5
mov ecx, dword [ebp - 0xe44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41e4bb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea4d
push edx
push ecx
call fcn.0048e9ad
add esp, 8
push 3
push 0x51cb68
lea ecx, [ebp - 0xc58]
mov dword [ebp - 0xc48], 0
mov dword [ebp - 0xc44], 0xf
mov byte [ebp - 0xc58], 0
call fcn.00420560
push 0x410
lea eax, [ebp - 0x420]
mov byte [ebp - 4], 7
push 0
push eax
call fcn.004bcaf0
add esp, 0xc
lea edi, [ebp - 0xc58]
cmp dword [ebp - 0xc44], 0x10
lea esi, [ebp - 0xc70]
lea edx, [ebp - 0xca0]
cmovae edi, dword [ebp - 0xc58]
lea ecx, [ebp - 0xcb8]
cmp dword [ebp - 0xc5c], 0x10
lea eax, [ebp - 0xcd0]
push edi
cmovae esi, dword [ebp - 0xc70]
cmp dword [ebp - 0xc8c], 0x10
push esi
cmovae edx, dword [ebp - 0xca0]
cmp dword [ebp - 0xca4], 0x10
push edx
cmovae ecx, dword [ebp - 0xcb8]
cmp dword [ebp - 0xcbc], 0x10
push ecx
cmovae eax, dword [ebp - 0xcd0]
push eax
lea eax, [ebp - 0x420]
push str._n_:__s___uid_:__s___v_:__s___ct_:__s___t_:__s_
push eax
call fcn.00420dd0
add esp, 0x1c
lea ecx, [ebp - 0xe28]
push 5
call fcn.0049df30
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x420]
mov dword [ebp - 0xe34], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xe30], 0xf
mov byte [ebp - 0xe44], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41e5c0
sub ecx, edx
lea eax, [ebp - 0x420]
push ecx
push eax
lea ecx, [ebp - 0xe44]
call fcn.00420560
lea eax, [ebp - 0xe44]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0xc88]
push eax
lea ecx, [ebp - 0xe28]
call fcn.0049fca0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0xe30]
cmp edx, 0x10
jb 0x41e637
mov ecx, dword [ebp - 0xe44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e62d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea52
push edx
push ecx
call fcn.0048e9ad
add esp, 8
push 6
push str.fg51
lea ecx, [ebp - 0xc38]
mov dword [ebp - 0xe34], 0
mov dword [ebp - 0xe30], 0xf
mov byte [ebp - 0xe44], 0
mov dword [ebp - 0xc28], 0
mov dword [ebp - 0xc24], 0xf
mov byte [ebp - 0xc38], 0
call fcn.00420560
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xc88]
cmp dword [ebp - 0xc74], 0x10
mov esi, dword [ebp - 0xc24]
mov eax, esi
cmovae ecx, dword [ebp - 0xc88]
mov edi, dword [ebp - 0xc78]
mov edx, dword [ebp - 0xc28]
sub eax, edx
push edi
push ecx
cmp edi, eax
ja 0x41e6de
lea eax, [edx + edi]
cmp esi, 0x10
mov dword [ebp - 0xc28], eax
lea eax, [ebp - 0xc38]
cmovae eax, dword [ebp - 0xc38]
lea esi, [eax + edx]
push esi
call fcn.004bd2e0
add esp, 0xc
mov byte [esi + edi], 0
jmp 0x41e6f7
mov byte [ebp - 0xe2c], 0
lea ecx, [ebp - 0xc38]
push dword [ebp - 0xe2c]
push edi
call fcn.00421080
push 0xa4
call fcn.0048e9bb
mov esi, eax
add esp, 4
mov dword [ebp - 0xe2c], esi
push 0xa4
push 0
push esi
mov byte [ebp - 4], 0xd
call fcn.004bcaf0
add esp, 0xc
mov ecx, esi
call fcn.004a1e10
mov dl, 1
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xe5c]
mov esi, eax
call fcn.00480e20
lea ecx, [esi + 0x10]
mov byte [ebp - 4], 0xe
cmp ecx, eax
je 0x41e758
cmp dword [eax + 0x14], 0x10
mov edx, eax
jb 0x41e74f
mov edx, dword [eax]
push dword [eax + 0x10]
push edx
call fcn.00420560
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0xe48]
cmp edx, 0x10
jb 0x41e796
mov ecx, dword [ebp - 0xe5c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e78c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea57
push edx
push ecx
call fcn.0048e9ad
add esp, 8
push 2
mov ecx, esi
call fcn.004a3450
cmp dword [ebp - 0xc24], 0x10
lea eax, [ebp - 0xc38]
push dword [ebp - 0xc28]
cmovae eax, dword [ebp - 0xc38]
mov ecx, esi
push eax
call fcn.004a2170
cmp dword [0x53be88], 8
mov eax, 0x53be74
push esi
cmovae eax, dword [0x53be74]
mov ecx, esi
push 0x41ea80
push eax
call fcn.004a33c0
mov ecx, esi
call fcn.004a2360
mov edx, dword [ebp - 0xc24]
cmp edx, 0x10
jb 0x41e823
mov ecx, dword [ebp - 0xc38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e819
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea5c
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov edx, dword [ebp - 0xc74]
mov dword [ebp - 0xc28], 0
mov dword [ebp - 0xc24], 0xf
mov byte [ebp - 0xc38], 0
cmp edx, 0x10
jb 0x41e878
mov ecx, dword [ebp - 0xc88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e86e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea61
push edx
push ecx
call fcn.0048e9ad
add esp, 8
lea ecx, [ebp - 0xe28]
mov dword [ebp - 0xc78], 0
mov dword [ebp - 0xc74], 0xf
mov byte [ebp - 0xc88], 0
call fcn.0041d4f0
mov edx, dword [ebp - 0xc44]
cmp edx, 0x10
jb 0x41e8d8
mov ecx, dword [ebp - 0xc58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e8ce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea66
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov edx, dword [ebp - 0xc5c]
mov dword [ebp - 0xc48], 0
mov dword [ebp - 0xc44], 0xf
mov byte [ebp - 0xc58], 0
cmp edx, 0x10
jb 0x41e92d
mov ecx, dword [ebp - 0xc70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e923
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea6b
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0xc60], 0
mov dword [ebp - 0xc5c], 0xf
mov byte [ebp - 0xc70], 0
cmp edx, 0x10
jb 0x41e982
mov ecx, dword [ebp - 0xca0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e978
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea70
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov edx, dword [ebp - 0xca4]
mov dword [ebp - 0xc90], 0
mov dword [ebp - 0xc8c], 0xf
mov byte [ebp - 0xca0], 0
cmp edx, 0x10
jb 0x41e9d7
mov ecx, dword [ebp - 0xcb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41e9cd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea75
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov edx, dword [ebp - 0xcbc]
mov dword [ebp - 0xca8], 0
mov dword [ebp - 0xca4], 0xf
mov byte [ebp - 0xcb8], 0
cmp edx, 0x10
jb 0x41ea28
mov ecx, dword [ebp - 0xcd0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41ea1e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41ea7a
push edx
push ecx
call fcn.0048e9ad
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0048e99c
mov esp, ebp
pop ebp
ret
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
call fcn.004c5929
int3