Function at 0x466570
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x647c78
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x755898]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x24], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
mov edi, dword [sym.imp.USER32.dll_CreatePopupMenu]
call edi
mov dword [esi + 0x20c], eax
mov ecx, dword [0x75be1c]
push ecx
push 0x2723
push 1
push eax
call fcn.004b8580
mov edx, dword [0x75c32c]
push edx
push 0x2732
push 1
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b8580
mov ecx, dword [0x75bfbc]
push ecx
push 0x2728
push 1
mov edx, dword [esi + 0x20c]
push edx
call fcn.004b8580
add esp, 0x30
cmp dword [0x74fd28], ebx
je 0x466661
push ebx
push ebx
push 0x800
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b8580
add esp, 0x10
lea ecx, [ebp - 0x14]
call fcn.00402500
mov byte [ebp - 4], 1
mov ecx, dword [0x75c650]
push ecx
push str._s__Ctrl_M_
lea edx, [ebp - 0x14]
push edx
call fcn.00402f70
mov eax, dword [ebp - 0x14]
push eax
push 0x2b46
push ebx
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b8580
add esp, 0x1c
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402570
push ebx
push ebx
push 0x800
mov edx, dword [esi + 0x20c]
push edx
call fcn.004b8580
mov eax, dword [0x75bfb8]
push eax
push 0x80f1
push 1
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b8580
push ebx
push ebx
push 0x800
mov edx, dword [esi + 0x20c]
push edx
call fcn.004b8580
mov eax, dword [0x75bda4]
push eax
push 0x271d
push ebx
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b8580
add esp, 0x40
mov edx, dword [0x75bd9c]
push edx
push 0x271b
push ebx
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b8580
push ebx
push ebx
push 0x800
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b8580
mov edx, dword [0x75c490]
push edx
push 0x2b40
push 1
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b8580
push ebx
push ebx
push 0x800
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b8580
add esp, 0x40
mov edx, dword [0x75bda0]
push edx
push 0x271c
push ebx
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b8580
push ebx
push ebx
push 0x800
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b8580
add esp, 0x20
call edi
mov dword [esi + 0x210], eax
mov edx, dword [0x75be0c]
push edx
push eax
push 0x10
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b8580
mov ecx, dword [0x75be10]
push ecx
push 0x2724
push 1
mov edx, dword [esi + 0x20c]
push edx
call fcn.004b8580
push ebx
push ebx
push 0x800
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b8580
add esp, 0x30
call edi
mov dword [esi + 0x214], eax
mov ecx, dword [0x75c728]
push ecx
push eax
push 0x10
mov edx, dword [esi + 0x20c]
push edx
call fcn.004b8580
mov eax, dword [0x75be1c]
push eax
push 0x299d
push ebx
mov ecx, dword [esi + 0x214]
push ecx
call fcn.004b8580
mov edx, dword [0x75bda8]
push edx
push 0x299e
push ebx
mov eax, dword [esi + 0x214]
push eax
call fcn.004b8580
add esp, 0x30
mov edi, 0x299e
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x18], 4
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x1c]
push edx
push ebx
push ebx
push str.nDblClick
mov eax, dword [0x75abd8]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x466822
cmp dword [ebp - 0x1c], 2
jne 0x466822
mov edi, 0x299d
mov dword [ebp - 0x20], edi
push ebx
push edi
push 0x299e
push 0x299d
mov ecx, dword [esi + 0x214]
push ecx
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
push ebx
push ebx
push 0x800
mov edx, dword [esi + 0x20c]
push edx
call fcn.004b8580
mov eax, dword [0x75bda8]
push eax
push 0x271e
push ebx
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b8580
add esp, 0x20
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret