Function at 0x10047df0
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1238
call fcn.10212f90
mov eax, dword [0x10250150]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebp + 0xc]
push 0x14
mov dword [ebp - 0x1220], ebx
mov dword [ebp - 0x1238], esi
mov dword [ebx], 0
mov dword [ebx + 4], 0
call fcn.10213511
push 0x208
push 0
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebx], eax
lea eax, [ebp - 0x20c]
push eax
call fcn.102134e7
push 0x1000
lea eax, [ebp - 0x120c]
push 0
push eax
call fcn.102134e7
add esp, 0x1c
call fcn.10003980
mov ecx, eax
test ecx, ecx
je 0x100482f3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x1214], eax
mov eax, dword [0x10255438]
test eax, eax
jne 0x10047e8f
call fcn.1003be40
mov dword [0x10255438], eax
cmp dword [eax + 0x140], 2
jne 0x10047ed3
mov eax, dword [0x10255438]
test eax, eax
jne 0x10047eab
call fcn.1003be40
mov dword [0x10255438], eax
cmp dword [eax + 0x140], 2
jne 0x10047ebc
mov eax, dword [eax + 0xc8]
jmp 0x10047ebe
xor eax, eax
test eax, eax
je 0x10047ed3
lea ecx, [ebp - 0x121c]
push ecx
push str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser_Helper_Objects
push esi
call eax
jmp 0x10047ee6
lea eax, [ebp - 0x121c]
push eax
push str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerBrowser_Helper_Objects
push esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
push edi
or edi, 0xffffffff
test eax, eax
jne 0x100482c5
xor ebx, ebx
mov eax, dword [0x10255438]
mov esi, dword [ebp - 0x121c]
mov dword [ebp - 0x1218], ebx
test eax, eax
jne 0x10047f13
call fcn.1003be40
mov dword [0x10255438], eax
cmp dword [eax + 0x140], 2
jne 0x10047f58
mov eax, dword [0x10255438]
test eax, eax
jne 0x10047f2f
call fcn.1003be40
mov dword [0x10255438], eax
cmp dword [eax + 0x140], 2
jne 0x10047f40
mov eax, dword [eax + 0xf8]
jmp 0x10047f42
xor eax, eax
test eax, eax
je 0x10047f58
push 0x104
lea ecx, [ebp - 0x20c]
push ecx
push ebx
push esi
call eax
jmp 0x10047f6c
push 0x104
lea eax, [ebp - 0x20c]
push eax
push ebx
push esi
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
test eax, eax
jne 0x100482b4
push 0x1000
push eax
lea eax, [ebp - 0x120c]
push eax
call fcn.102134e7
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x1214]
push str.CLSID_s
push eax
call fcn.10004de0
push 0x20019
push 0x1000
lea eax, [ebp - 0x120c]
push eax
push 1
push 0x10219d7c
push dword [ebp - 0x1214]
push SysReAllocString
call fcn.10187690
push 0x1000
lea eax, [ebp - 0x120c]
push 0
push eax
call fcn.102134e7
add esp, 0x40
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x1214]
push str.CLSID_sInprocServer32
push eax
call fcn.10004de0
push 0x20019
push 0x1000
lea eax, [ebp - 0x120c]
push eax
push 1
push 0x10219d7c
push dword [ebp - 0x1214]
push SysReAllocString
call fcn.10187690
lea ecx, [ebp - 0x120c]
add esp, 0x28
lea edx, [ecx + 2]
jmp 0x10048030
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10048030
sub ecx, edx
sar ecx, 1
je 0x100482ae
call fcn.10003980
mov ecx, eax
test ecx, ecx
je 0x100482f3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x1210]
mov dword [ebp - 0x1210], eax
lea eax, [ebp - 0x120c]
push eax
call fcn.10004a70
test al, al
jne 0x100480a3
lea eax, [ebp - 0x120c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10048081
sub eax, edx
lea ecx, [ebp - 0x1210]
sar eax, 1
push eax
lea eax, [ebp - 0x120c]
push eax
call fcn.10004050
mov esi, dword [ebp - 0x1210]
lea eax, [ebp - 0x1234]
push esi
push eax
call fcn.10009f10
push eax
call fcn.10042410
mov edx, dword [ebp - 0x1234]
add esp, 0xc
add edx, 0xfffffff0
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100480dc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x10048297
mov eax, dword [0x10255438]
test eax, eax
jne 0x100480f7
call fcn.1003be40
mov dword [0x10255438], eax
cmp dword [eax + 0x140], 2
jne 0x10048132
mov eax, dword [0x10255438]
test eax, eax
jne 0x10048113
call fcn.1003be40
mov dword [0x10255438], eax
cmp dword [eax + 0x140], 2
jne 0x10048121
mov eax, dword [eax + 0x3c]
jmp 0x10048123
xor eax, eax
test eax, eax
je 0x10048132
mov esi, dword [ebp - 0x1210]
push esi
call eax
jmp 0x1004813f
mov esi, dword [ebp - 0x1210]
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x10048297
test al, 0x10
jne 0x10048297
push esi
call fcn.10042f30
add esp, 4
test al, al
je 0x10048297
call fcn.10003980
mov ecx, eax
test ecx, ecx
je 0x100482f3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x122c], eax
call fcn.10003980
mov ecx, eax
test ecx, ecx
je 0x100482f3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x1228], eax
lea edx, [ecx + 2]
mov eax, dword [ebp - 0x1238]
mov dword [ebp - 0x1230], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100481b0
sub ecx, edx
lea eax, [ebp - 0x20c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x122c]
call fcn.10004050
lea eax, [ebp - 0x1210]
push eax
lea ecx, [ebp - 0x1228]
call fcn.10004870
mov eax, dword [ebp - 0x1220]
cmp dword [eax + 4], 0xccccccc
mov edi, dword [eax]
je 0x100482fd
push 0x14
call fcn.10213511
mov ebx, eax
mov eax, dword [ebp - 0x1230]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x122c]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x1224], eax
call fcn.10004ba0
add eax, 0x10
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x1228]
add eax, 0xfffffff0
push eax
mov dword [ebp - 0x1210], eax
call fcn.10004ba0
mov edx, dword [ebp - 0x1210]
add eax, 0x10
mov dword [ebx + 0x10], eax
add esp, 0xc
mov eax, dword [edi + 4]
mov dword [ebx], edi
mov dword [ebx + 4], eax
mov dword [edi + 4], ebx
or edi, 0xffffffff
mov dword [eax], ebx
mov eax, dword [ebp - 0x1220]
inc dword [eax + 4]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10048277
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1224]
mov eax, edi
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10048291
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [ebp - 0x1218]
add esi, 0xfffffff0
mov eax, edi
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x100482ae
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
inc ebx
jmp 0x10047ef4
push dword [ebp - 0x121c]
call fcn.10034a70
mov ebx, dword [ebp - 0x1220]
mov eax, dword [ebp - 0x1214]
add eax, 0xfffffff0
lock xadd dword [eax + 0xc], edi
dec edi
test edi, edi
pop edi
jg 0x100482e1
mov ecx, dword [eax]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov ecx, dword [ebp - 4]
mov eax, ebx
pop esi
xor ecx, ebp
pop ebx
call fcn.10212f74
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.100030c0
push str.list_T__too_long
call fcn.101d9a10
int3