Function at 0x464050
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x508433
mov eax, dword fs:[0]
push eax
sub esp, 0x9ec
mov eax, dword [0x564690]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x9dc], 0
mov eax, dword [0x5641c0]
mov ecx, 0x5641c0
mov dword [ebp - 4], 0
mov dword [ebp - 0x9e4], ebx
mov dword [ebp - 0x9f8], ebx
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebx], eax
xor eax, eax
push 0x7fe
push eax
mov word [ebp - 0x810], ax
lea eax, [ebp - 0x80e]
mov ebx, 1
push eax
mov dword [ebp - 0x9dc], ebx
call fcn.004e6690
add esp, 0xc
call fcn.00465e20
test al, al
jne 0x464146
mov esi, dword [0x565ae0]
mov eax, 0x2e8ba2e9
imul esi
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x58
mov eax, esi
sub eax, ecx
xor edi, edi
cmp eax, 0x88
je 0x464140
lea esp, [esp]
mov eax, esi
or eax, 0xffffff9c
add esi, eax
mov eax, esi
imul eax, esi
inc edi
cmp edi, eax
jg 0x464140
mov eax, 0x2e8ba2e9
imul esi
sar edx, 4
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x58
mov eax, esi
sub eax, ecx
cmp eax, 0x88
jne 0x464110
mov dword [0x565ae0], edi
mov dword [ebp - 0x9f4], 0
mov dword [ebp - 0x9f0], 0
mov dword [ebp - 0x9ec], 0
push str.SOFTWAREWow6432NodeMicr
lea ecx, [ebp - 0x9e0]
mov dword [ebp - 4], 1
call fcn.00401b70
mov byte [ebp - 4], 2
call fcn.00465f00
test al, al
jne 0x4641bc
push 0x28
call fcn.004e3b54
add esp, 4
mov edi, eax
xor esi, esi
call fcn.004e5b54
add eax, dword [0x565ae0]
inc esi
mov dword [edi + esi*4 - 4], eax
cmp esi, 0xa
jl 0x464196
mov eax, dword [edi + 0x24]
push edi
mov dword [0x565ae0], eax
call fcn.004e5c83
add esp, 4
push 0x17
push str.osoftInternet_Explorer
lea ecx, [ebp - 0x9e0]
call fcn.00402ce0
mov eax, dword [ebp - 0x9e0]
mov edx, 1
sub edx, dword [eax - 4]
mov ecx, dword [eax - 8]
or ecx, edx
jge 0x4641f6
push 0
lea ecx, [ebp - 0x9e0]
call fcn.004077f0
mov eax, dword [ebp - 0x9e0]
push 1
push eax
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x9f4]
call fcn.0040b750
mov dword [ebp - 0x9d8], eax
call fcn.00465df0
test al, al
jne 0x4642ac
xor eax, eax
mov dword [ebp - 0x9d0], eax
lea esi, [ebp - 0x9c8]
lea ebx, [ebx]
xor ecx, ecx
mov dword [ebp - 0x9e8], ecx
mov dword [ebp - 0x9d4], esi
mov edi, edi
mov esi, dword [0x565ae0]
lea ebx, [ecx + 1]
lea ecx, [eax + 1]
mov eax, esi
cdq
idiv ecx
mov eax, esi
mov ecx, esi
sub ecx, dword [ebp - 0x9d0]
mov esi, dword [ebp - 0x9d4]
mov edi, edx
cdq
imul edi, ecx
idiv ebx
add edi, eax
sub edi, dword [ebp - 0x9e8]
push edi
push 0x516624
call fcn.004e65a9
mov eax, dword [ebp - 0x9d0]
mov ecx, ebx
add esi, 4
add esp, 8
mov dword [ebp - 0x9e8], ecx
mov dword [ebp - 0x9d4], esi
cmp ecx, 0xa
jl 0x464240
inc eax
mov dword [ebp - 0x9d0], eax
cmp eax, 0xb
jl 0x464230
mov ebx, 1
mov esi, dword [ebp - 0x9f4]
or ecx, 0xffffffff
cmp dword [ebp - 0x9d8], 0
jne 0x464566
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
lea eax, [ebp - 0x9d4]
push eax
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x9d8]
push eax
push 0
push str.svcVersion
push esi
mov dword [ebp - 0x9d4], 0x800
call edi
test eax, eax
jne 0x4643a9
mov eax, dword [ebp - 0x9d8]
cmp eax, 1
je 0x46430d
cmp eax, 2
jne 0x4643a9
mov eax, dword [ebp - 0x9d4]
test eax, eax
je 0x46432e
test al, 1
jne 0x4643a9
shr eax, 1
cmp word [ebp + eax*2 - 0x812], 0
je 0x464337
jmp 0x4643a9
xor eax, eax
mov word [ebp - 0x810], ax
mov eax, dword [0x5641c0]
mov ecx, 0x5641c0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x9d0], eax
lea eax, [ebp - 0x810]
mov byte [ebp - 4], 3
test eax, 0xffff0000
jne 0x464400
movzx edi, ax
push 0
push edi
call fcn.00402e50
add esp, 8
test eax, eax
je 0x464381
push edi
push eax
lea ecx, [ebp - 0x9d0]
call fcn.00407600
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov eax, dword [ebp - 0x9d0]
mov ebx, 3
cmp dword [eax - 0xc], 0
mov byte [ebp - 4], 2
mov dword [ebp - 0x9dc], ebx
mov byte [ebp - 0x9c9], 1
jne 0x4643b0
mov byte [ebp - 0x9c9], 0
test bl, 2
je 0x4643de
mov edx, dword [ebp - 0x9d0]
add edx, 0xfffffff0
and ebx, 0xfffffffd
mov dword [ebp - 0x9dc], ebx
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4643de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x9c9], 0
je 0x464437
lea ecx, [ebp - 0x810]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4643f0
jmp 0x46452b
lea ecx, [ebp - 0x810]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x464410
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0x9d0]
call fcn.00409890
jmp 0x464387
call fcn.00465d30
test al, al
jne 0x464446
dec dword [0x5666b8]
lea eax, [ebp - 0x9d4]
push eax
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x9d8]
push eax
push 0
push 0x518f5c
push esi
mov dword [ebp - 0x9d4], 0x800
call edi
test eax, eax
jne 0x4644d3
mov eax, dword [ebp - 0x9d8]
cmp eax, 1
je 0x464483
cmp eax, 2
jne 0x4644d3
mov eax, dword [ebp - 0x9d4]
test eax, eax
je 0x4644a0
test al, 1
jne 0x4644d3
shr eax, 1
cmp word [ebp + eax*2 - 0x812], 0
je 0x4644a9
jmp 0x4644d3
xor eax, eax
mov word [ebp - 0x810], ax
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0x9d8]
call fcn.00401b70
mov eax, dword [eax]
or ebx, 4
cmp dword [eax - 0xc], 0
mov dword [ebp - 0x9dc], ebx
mov byte [ebp - 0x9c9], 1
jne 0x4644da
mov byte [ebp - 0x9c9], 0
test bl, 4
je 0x464508
mov edx, dword [ebp - 0x9d8]
add edx, 0xfffffff0
and ebx, 0xfffffffb
mov dword [ebp - 0x9dc], ebx
lea eax, [edx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x464508
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp byte [ebp - 0x9c9], 0
je 0x464542
lea ecx, [ebp - 0x810]
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x464520
sub ecx, edx
sar ecx, 1
push ecx
mov ecx, dword [ebp - 0x9e4]
lea eax, [ebp - 0x810]
push eax
call fcn.00409890
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
je 0x464557
push esi
call ebx
xor esi, esi
mov dword [ebp - 0x9f4], esi
mov dword [ebp - 0x9f0], 0
or ecx, 0xffffffff
jmp 0x46456c
mov ebx, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp - 0x9e0]
add edi, 0xfffffff0
mov byte [ebp - 4], 1
lea eax, [edi + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x46458d
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
test esi, esi
je 0x464594
push esi
call ebx
mov eax, dword [ebp - 0x9e4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004e50b4
mov esp, ebp
pop ebp
ret