Function at 0x46d08e
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
push ebx
mov edx, 8
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x46d095
call fcn.005423e0
call fcn.004801d0
push dword [0x72b4d8]
call fcn.0053a9ed
lea eax, [esp]
push eax
push 0x20019
push 0
mov eax, 0x6299a8
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call sub.ADVAPI32.dll_RegOpenKeyExW
mov ebx, eax
and ebx, ebx
jne 0x46d2ea
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 0x106
call fcn.005405f0
lea eax, [esp + 0xc]
push eax
call fcn.00542280
mov dword [esp + 4], 0x104
push 0
push 0
push 0
push 0
lea eax, [esp + 0x14]
push eax
mov eax, dword [esp + 0x1c]
push eax
movsx eax, word [esp + 0x30]
push eax
push dword [esp + 0x1c]
call sub.ADVAPI32.dll_RegEnumValueW
mov ebx, eax
and ebx, ebx
jne 0x46d2db
mov edx, dword [esp + 8]
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542310
lea eax, [esp + 0x10]
push eax
call fcn.00542280
push dword [esp + 0xc]
mov edx, 0x61f062
pop ecx
call fcn.004fa4a0
je 0x46d174
jmp 0x46d2e2
mov dword [esp + 4], 0x104
mov dword [esp + 0x14], 0
lea eax, [esp + 4]
push eax
mov eax, dword [esp + 0xc]
push eax
lea eax, [esp + 0x1c]
push eax
push 0
push dword [esp + 0x1c]
push dword [esp + 0x14]
call sub.ADVAPI32.dll_RegQueryValueExW
mov ebx, eax
and ebx, ebx
jne 0x46d2cc
mov edx, dword [esp + 8]
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542310
lea eax, [esp + 0x14]
push eax
call fcn.00542280
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 3
push dword [esp + 0x24]
call fcn.0053ffc0
call fcn.004fa482
add dword [esp], edx
call fcn.0053f5c0
call fcn.00542370
mov edx, 0x63667e
pop ecx
push ecx
call fcn.004fa4f0
mov ecx, eax
call fcn.004fa4a0
je 0x46d285
push edx
call fcn.00542240
pop edx
push eax
mov edx, 0x63667e
push edx
call fcn.00542310
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
mov eax, 0x620abe
push eax
push 3
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
mov eax, 0x63667e
push eax
push dword [esp + 0x30]
call fcn.0053fb20
call fcn.004fa482
add dword [esp], edx
call fcn.0053fed0
pop eax
lea eax, [esp + 0x14]
push eax
call fcn.00542280
push dword [0x72b4d8]
call fcn.0053a94f
mov edx, dword [esp + 0xc]
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542310
mov ebp, dword [0x72b4dc]
lea eax, [ebp + 8]
push eax
call fcn.00542280
mov edx, dword [esp + 0x10]
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542310
lea eax, [ebp + 0xc]
push eax
call fcn.00542280
movsx ebx, word [esp + 0x18]
inc ebx
push ebx
pop eax
mov word [esp + 0x18], ax
jmp 0x46d2dd
jmp 0x46d2e2
jmp 0x46d103
push dword [esp]
call sub.ADVAPI32.dll_RegCloseKey
push 8
push 4
push 0
push dword [0x72b4d8]
call fcn.004fce20
push dword [0x72b4d8]
call fcn.0053a906
push dword [0x72b4d8]
call fcn.0053a91b
or eax, eax
je 0x46d44a
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push 3
mov ebp, dword [0x72b4dc]
push dword [ebp + 0xc]
call fcn.0053ffc0
call fcn.004fa482
add dword [esp], edx
call fcn.0053f5c0
call fcn.00542370
mov edx, 0x63667e
pop ecx
push ecx
call fcn.004fa4f0
mov ecx, eax
call fcn.004fa4a0
je 0x46d3ee
push edx
call fcn.00542240
pop edx
push eax
mov edx, 0x63667e
push edx
call fcn.00542310
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
push edx
call fcn.00542240
pop edx
push eax
mov eax, 0x63667e
push eax
mov ebp, dword [0x72b4dc]
push dword [ebp + 0xc]
call fcn.0053fb20
call fcn.004fa482
add dword [esp], edx
call fcn.0053fc30
call fcn.004fa4e0
push edx
push eax
call fcn.0053f630
pop eax
lea eax, [ebp + 0xc]
push eax
call fcn.00542280
push 0x40
push 0x40
push 0
push 0x3f800000
push 8
push 0
push 0x2580
mov ebp, dword [0x72b4dc]
push dword [ebp + 0xc]
push 0xffffffff
call fcn.00502b56
mov dword [esp + 0x1c], eax
cmp dword [esp + 0x1c], 0
je 0x46d445
mov ebp, dword [0x72b4dc]
mov dword [ebp + 0x10], 1
push dword [esp + 0x1c]
call fcn.005029ce
jmp 0x46d30f
xor eax, eax
push dword [esp + 0xc]
call fcn.00542440
push dword [esp + 0x10]
call fcn.00542440
push dword [esp + 8]
call fcn.00542440
add esp, 0x20
pop ebx
pop ebp
ret