Function at 0x4a80b8f0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x78]
sub esp, 0x184
mov eax, dword [0x4a8a0518]
xor eax, ebp
mov dword [ebp + 0x74], eax
push esi
push edi
push 0xac
xor esi, esi
lea eax, [ebp - 0x98]
push esi
push eax
call sub.MSVCR80.dll_memset
push 0x2c
lea eax, [ebp - 0xe0]
push esi
push eax
call sub.MSVCR80.dll_memset
push 0x2c
lea eax, [ebp - 0x10c]
push esi
push eax
call sub.MSVCR80.dll_memset
add esp, 0x24
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xe0], eax
push 0x10
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xd4]
push eax
call sub.MSVCR80.dll_memcpy
push 0x10
lea eax, [ebp]
push eax
lea eax, [ebp - 0xc4]
push eax
call sub.MSVCR80.dll_memcpy
or dword [ebp - 0x9c], 0xffffffff
or dword [ebp - 0xa8], 0xffffffff
add esp, 0x18
xor edi, edi
cmp dword [str.Etc_GMT12], esi
je 0x4a80ba2b
xor eax, eax
mov edx, dword [eax + 0x4a851244]
lea ecx, [ebp - 0x10c]
push ecx
call fcn.4a80b84d
test eax, eax
pop ecx
jne 0x4a80ba0f
cmp dword [ebp - 0x9c], esi
jl 0x4a80b9c7
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0x10c]
jne 0x4a80ba21
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xd8], eax
push 0x2c
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0xe0]
push eax
call sub.MSVCR80.dll_memcmp
add esp, 0xc
test eax, eax
jne 0x4a80ba0f
cmp dword [ebp - 0x9c], esi
jge 0x4a80ba09
mov dword [ebp - 0x9c], edi
mov dword [ebp - 0xa8], edi
inc edi
mov eax, edi
shl eax, 3
cmp dword [eax + 0x4a851240], esi
jne 0x4a80b99a
mov eax, dword [ebp - 0x9c]
cmp eax, esi
jge 0x4a80ba32
xor eax, eax
jmp 0x4a80bb6b
cmp eax, dword [ebp - 0xa8]
push ebx
je 0x4a80bb5d
lea eax, [ebp - 0xa0]
push eax
push 1
push esi
push str.SYSTEMCurrentControlSetControlTimeZoneInformation_
push 0x80000002
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4a80bb51
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp + 0x54]
push eax
push esi
push esi
push str.StandardName
push dword [ebp - 0xa0]
mov dword [ebp - 0xac], 0x20
call edi
push dword [ebp - 0xa0]
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call ebx
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], eax
jmp 0x4a80bb35
mov eax, dword [ebp - 0xa4]
mov edx, dword [eax*8 + 0x4a851244]
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xb0], 0x40
call fcn.4a80b709
cmp eax, esi
mov dword [ebp - 0xb4], eax
jne 0x4a80baf6
lea eax, [ebp - 0xb0]
push eax
lea eax, [ebp + 0x14]
push eax
push esi
push esi
push 0x4a85122c
push dword [ebp - 0xa0]
call edi
mov dword [ebp - 0xb4], eax
push dword [ebp - 0xa0]
call ebx
cmp dword [ebp - 0xb4], esi
jne 0x4a80bb29
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xb0], eax
jne 0x4a80bb29
push eax
lea eax, [ebp + 0x14]
push eax
lea eax, [ebp + 0x54]
push eax
call sub.MSVCR80.dll_memcmp
add esp, 0xc
test eax, eax
je 0x4a80bb43
inc dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0xa8]
jle 0x4a80baaa
jmp 0x4a80bb5d
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x9c], eax
jmp 0x4a80bb5d
push dword [ebp - 0xa0]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x9c]
mov eax, dword [eax*8 + 0x4a851240]
pop ebx
mov ecx, dword [ebp + 0x74]
pop edi
xor ecx, ebp
pop esi
call fcn.4a846c49
add ebp, 0x78
leave
ret