Function at 0x42202a
Capabilities:
Query or enumerate registry key

Disassembly:
push 0x284
mov eax, 0x458359
call fcn.00446f9b
xor ebx, ebx
lea eax, [ebp - 0x1a8]
mov dword [ebp - 4], ebx
mov edi, ecx
push eax
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x154], ebx
call fcn.0041980b
xor esi, esi
inc esi
push 0x46785c
mov ecx, edi
mov dword [ebp - 4], esi
call fcn.00401db9
lea eax, [ebp - 0x290]
push eax
mov dword [ebp - 0x154], esi
call fcn.0041c1a5
push ebx
push str.HKLMSOFTWAREMicrosoftNET_Framework_SetupNDP
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 2
call fcn.0041ffba
cmp eax, ebx
jne 0x42246b
mov esi, dword [ebp - 0x274]
xor eax, eax
push 0xfe
mov word [ebp - 0x118], ax
lea eax, [ebp - 0x116]
push ebx
push eax
mov dword [ebp - 0x150], esi
call fcn.00444550
add esp, 0xc
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x118]
push eax
push ebx
push esi
mov dword [ebp - 0x128], 0x80
mov dword [ebp - 0x12c], ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov esi, eax
cmp esi, ebx
jne 0x42246b
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x11c]
call fcn.00401db9
push 0x76
lea esi, [ebp - 0x11c]
mov byte [ebp - 4], 3
call fcn.00401f76
mov edi, eax
cmp edi, 0xffffffff
je 0x4223ed
push 0x467860
call fcn.00401f4b
cmp eax, 0xffffffff
jne 0x4224fc
push 0x467868
call fcn.00401f4b
cmp eax, 0xffffffff
jne 0x4224fc
push str.v3.5
call fcn.00401f4b
cmp eax, 0xffffffff
jne 0x4224fc
push 0x467890
mov eax, esi
push eax
call fcn.00401e56
test eax, eax
je 0x422272
push 0x467898
mov eax, esi
push eax
call fcn.00401e56
test eax, eax
je 0x422272
push 0x4678a0
mov eax, esi
push eax
call fcn.00401e56
test eax, eax
je 0x422272
push 0x4678a8
mov eax, esi
push eax
call fcn.00401e56
test eax, eax
je 0x422272
mov eax, dword [ebp - 0x11c]
mov eax, dword [eax - 0xc]
lea ecx, [ebp - 0x158]
sub eax, edi
push ecx
dec eax
mov ecx, esi
call fcn.00401ff6
push eax
mov ecx, esi
mov byte [ebp - 4], 0x12
call fcn.00402372
mov ecx, dword [ebp - 0x158]
add ecx, 0xfffffff0
call fcn.004034fb
push dword [ebp - 0x11c]
call fcn.00443891
pop ecx
push eax
push ecx
mov eax, esi
mov dword [ebp - 0x13c], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0x13
call fcn.0040234a
lea esi, [ebp - 0x188]
call fcn.00419ecb
pop ecx
pop ecx
mov esi, eax
push esi
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0x14
call fcn.0040234a
mov eax, dword [esi + 4]
mov dword [ebp - 0x140], eax
lea eax, [ebp - 0x144]
push eax
lea edi, [ebp - 0x20c]
lea ebx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x15
call fcn.0041ea5f
mov ecx, dword [ebp - 0x144]
add ecx, 0xfffffff0
call fcn.004034fb
mov ecx, dword [ebp - 0x188]
jmp 0x4223e3
push str.HKLMSOFTWAREMicrosoftNET_Framework_SetupNDP
lea ecx, [ebp - 0x120]
call fcn.00401db9
push 0x464fdc
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0xb
call fcn.00402555
mov eax, dword [ebp - 0x11c]
push dword [eax - 0xc]
lea ecx, [ebp - 0x120]
push eax
call fcn.00402963
push str.client
lea ecx, [ebp - 0x120]
call fcn.00402555
lea eax, [ebp - 0x200]
push eax
call fcn.0041fc2e
push ebx
mov byte [ebp - 4], 0xc
push dword [ebp - 0x120]
lea ecx, [ebp - 0x200]
call fcn.0041ffba
cmp eax, ebx
jne 0x422334
push str.Version
lea eax, [ebp - 0x200]
call fcn.00420078
mov ebx, eax
call fcn.0041fae6
push eax
lea ecx, [ebp - 0x170]
call fcn.00415bf3
push 8
pop eax
mov byte [ebp - 4], 0xd
cmp ax, word [ebp - 0x170]
jne 0x422325
push dword [ebp - 0x168]
lea ecx, [ebp - 0x120]
call fcn.0040257f
lea eax, [ebp - 0x170]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x422344
push str.error
lea ecx, [ebp - 0x120]
call fcn.0040257f
push dword [ebp - 0x120]
call fcn.00443891
pop ecx
push eax
push ecx
lea eax, [ebp - 0x120]
mov dword [ebp - 0x13c], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 0xe
call fcn.0040234a
lea esi, [ebp - 0x1b0]
call fcn.00419ecb
pop ecx
pop ecx
mov esi, eax
push esi
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0xf
call fcn.0040234a
mov eax, dword [esi + 4]
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x14c]
push eax
lea edi, [ebp - 0x224]
lea ebx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x10
call fcn.0041ea5f
mov ecx, dword [ebp - 0x14c]
add ecx, 0xfffffff0
call fcn.004034fb
mov ecx, dword [ebp - 0x1b0]
add ecx, 0xfffffff0
call fcn.004034fb
lea eax, [ebp - 0x200]
push eax
mov dword [ebp - 4], 0xb
call fcn.0041fc8d
mov ecx, dword [ebp - 0x120]
add ecx, 0xfffffff0
call fcn.004034fb
xor ebx, ebx
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x128]
add eax, eax
push eax
lea eax, [ebp - 0x118]
push ebx
push eax
call fcn.00444550
add esp, 0xc
inc dword [ebp - 0x12c]
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x128]
push eax
lea eax, [ebp - 0x118]
push eax
push dword [ebp - 0x12c]
mov dword [ebp - 0x128], 0x80
push dword [ebp - 0x150]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov esi, eax
cmp esi, ebx
jle 0x422451
and eax, 0xffff
or eax, 0x80070000
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x11c]
add ecx, 0xfffffff0
cmp eax, ebx
je 0x4226a6
call fcn.004034fb
cmp dword [ebp - 0x18c], ebx
je 0x4224a9
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x1a8]
lea esi, [ebp - 0x134]
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x130], eax
call fcn.0040867e
mov esi, eax
call fcn.00419ab4
mov ecx, dword [ebp - 0x138]
push eax
call fcn.00402372
lea eax, [ebp - 0x290]
push eax
mov byte [ebp - 4], 1
call fcn.0041c1d0
lea eax, [ebp - 0x1a8]
push eax
mov byte [ebp - 4], bl
call fcn.0042691e
mov eax, dword [ebp - 0x138]
call fcn.00446ff7
ret
push str.HKLMSOFTWAREMicrosoftNET_Framework_SetupNDP
lea ecx, [ebp - 0x124]
call fcn.00401db9
push 0x464fdc
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 4
call fcn.00402555
mov eax, dword [ebp - 0x11c]
push dword [eax - 0xc]
lea ecx, [ebp - 0x124]
push eax
call fcn.00402963
lea eax, [ebp - 0x200]
push eax
call fcn.0041fc2e
push ebx
mov byte [ebp - 4], 5
push dword [ebp - 0x124]
lea ecx, [ebp - 0x200]
call fcn.0041ffba
cmp eax, ebx
jne 0x4225ae
push str.Version
lea eax, [ebp - 0x200]
call fcn.00420078
mov ebx, eax
call fcn.0041fae6
push eax
lea ecx, [ebp - 0x180]
call fcn.00415bf3
push 8
pop eax
mov byte [ebp - 4], 6
cmp ax, word [ebp - 0x180]
jne 0x42259f
push dword [ebp - 0x178]
lea ecx, [ebp - 0x124]
call fcn.0040257f
lea eax, [ebp - 0x180]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x4225be
push str.error
lea ecx, [ebp - 0x124]
call fcn.0040257f
push dword [ebp - 0x124]
call fcn.00443891
pop ecx
push eax
push ecx
lea eax, [ebp - 0x124]
mov dword [ebp - 0x13c], esp
mov ecx, esp
push eax
mov byte [ebp - 4], 7
call fcn.0040234a
lea esi, [ebp - 0x160]
call fcn.00419ecb
pop ecx
pop ecx
mov esi, eax
push esi
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 8
call fcn.0040234a
mov eax, dword [esi + 4]
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x134]
push eax
lea edi, [ebp - 0x218]
lea ebx, [ebp - 0x1a8]
mov byte [ebp - 4], 9
call fcn.0041ea5f
mov ecx, dword [ebp - 0x134]
add ecx, 0xfffffff0
call fcn.004034fb
mov ecx, dword [ebp - 0x160]
add ecx, 0xfffffff0
call fcn.004034fb
lea eax, [ebp - 0x200]
push eax
mov dword [ebp - 4], 4
call fcn.0041fc8d
mov ecx, dword [ebp - 0x124]
jmp 0x4223e3
call fcn.004034fb
jmp 0x4220ef