Function at 0x4666d0
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x573c16
mov eax, dword fs:[0]
push eax
sub esp, 0x1a8
mov eax, dword [0x5e5e08]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x15c]
call fcn.0040c300
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
mov dword [ebp - 0x138], eax
lea ecx, [ebp + 0xc]
push ecx
lea ecx, [ebp - 0x30]
call fcn.00404910
mov byte [ebp - 4], 2
mov dword [ebp - 0x144], 0
push 0
lea edx, [ebp - 0x144]
push edx
push 0
push 0x2001f
push 0
push 0
push 0
lea ecx, [ebp - 0x30]
call fcn.004048a0
push eax
mov eax, dword [ebp - 0x138]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
test eax, eax
je 0x4667a0
mov byte [ebp - 0x1a1], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30]
call fcn.00404950
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x15c]
call fcn.0040c370
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00404950
mov al, byte [ebp - 0x1a1]
jmp 0x4669b7
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x14], 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x14]
push ecx
push 0
push 0
lea edx, [ebp - 0x140]
push edx
push 0
push 0
push 0
mov eax, dword [ebp - 0x144]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
test eax, eax
je 0x46681b
mov byte [ebp - 0x1a2], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30]
call fcn.00404950
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x15c]
call fcn.0040c370
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00404950
mov al, byte [ebp - 0x1a2]
jmp 0x4669b7
mov dword [ebp - 0x13c], 0x100
mov dword [ebp - 0x160], 0
jmp 0x466840
mov ecx, dword [ebp - 0x160]
add ecx, 1
mov dword [ebp - 0x160], ecx
mov edx, dword [ebp - 0x160]
cmp edx, dword [ebp - 0x140]
jae 0x4668c2
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x134]
push ecx
mov edx, dword [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x144]
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
jne 0x4668b3
lea ecx, [ebp - 0x134]
push ecx
lea ecx, [ebp - 0x17c]
call fcn.00405220
mov byte [ebp - 4], 3
lea edx, [ebp - 0x17c]
push edx
lea ecx, [ebp - 0x15c]
call fcn.0040c3f0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x17c]
call fcn.00404950
mov dword [ebp - 0x13c], 0x100
jmp 0x466831
mov eax, dword [ebp - 0x144]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x184]
push ecx
lea ecx, [ebp - 0x15c]
call fcn.0040c390
jmp 0x4668ee
lea ecx, [ebp - 0x184]
call fcn.0040c490
lea edx, [ebp - 0x1ac]
push edx
lea ecx, [ebp - 0x15c]
call fcn.0040c3c0
push eax
lea ecx, [ebp - 0x184]
call fcn.0040c4b0
movzx eax, al
test eax, eax
je 0x46698d
lea ecx, [ebp - 0x30]
push ecx
lea ecx, [ebp - 0x1a0]
call fcn.00404910
mov byte [ebp - 4], 4
push 0x58ad7c
lea ecx, [ebp - 0x1a0]
call fcn.00404000
lea ecx, [ebp - 0x184]
call fcn.0040c470
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00403fe0
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1b0], esp
lea edx, [ebp - 0x1a0]
push edx
call fcn.00404910
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x138]
push eax
call fcn.004665f0
add esp, 0x20
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x1a0]
call fcn.00404950
jmp 0x4668e3
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x30]
call fcn.00404950
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x15c]
call fcn.0040c370
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00404950
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b645d
mov esp, ebp
pop ebp
ret