Function at 0x484210
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e7250
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x130
mov eax, dword [0x52251c]
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], eax
mov edx, dword [ebp + 8]
add ecx, 0x10
push edx
mov byte [ebp - 4], 1
call fcn.004bff24
test eax, eax
je 0x4844e9
add eax, 8
lea ecx, [ebp - 0x14]
push eax
call fcn.004c58c0
mov ebx, 0xa000
push ebx
call fcn.004c5dbe
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov edi, eax
add esp, 4
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x28], ebx
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x3c]
push eax
push edi
push ecx
push 0
push 0x521bdc
push reloc.OLEAUT32.dll_SysReAllocStringLen
call esi
test eax, eax
je 0x4842d0
cmp eax, 0xea
jne 0x484343
mov edx, dword [ebp - 0x28]
push edi
add edx, ebx
mov dword [ebp - 0x28], edx
call fcn.004c5de7
mov edx, dword [ebp - 0x28]
add esp, 4
push edx
call fcn.004c5dbe
add esp, 4
mov dword [ebp - 0x20], eax
mov edi, eax
jmp 0x484286
push edi
call fcn.00484180
mov ebx, eax
add esp, 4
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x38]
mov ecx, dword [edi + 0x1c]
cmp eax, ecx
jge 0x4844e0
cmp dword [ebx + 0xc], 0x1fe
jne 0x4844c5
push ebx
mov dword [ebp - 0x2c], 0xffffffff
call fcn.004841a0
add esp, 4
xor esi, esi
cmp esi, dword [ebx + 0x20]
jge 0x484334
mov edx, dword [ebp - 0x34]
mov ecx, dword [eax + 4]
cmp ecx, dword [edx + 0x68]
jne 0x484328
mov ecx, dword [eax + 0x24]
mov dword [ebp - 0x2c], ecx
push eax
call fcn.00484190
add esp, 4
inc esi
jmp 0x484312
cmp dword [ebp - 0x2c], 0xffffffff
jne 0x484368
push edi
call fcn.004c5de7
add esp, 4
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.004c5787
fld qword [0x4f3f40]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push ebx
call fcn.004841b0
add esp, 4
mov edi, eax
mov dword [ebp - 0x24], 0
mov edx, dword [ebp - 0x24]
mov eax, dword [ebx + 0x28]
cmp edx, eax
jge 0x4844c2
mov esi, dword [edi + 0x10]
push edi
add esi, edi
call fcn.00484190
mov ebx, eax
lea eax, [ebp - 0x13c]
push 0xff
push eax
push esi
call fcn.004841e0
mov ecx, dword [0x52251c]
mov dword [ebp - 0x30], ecx
push eax
lea edx, [ebp - 0x30]
push 0x51cd48
push edx
mov byte [ebp - 4], 2
call fcn.004bdb29
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x24]
add esp, 0x1c
cmp ecx, dword [eax + 0x54]
jge 0x4843f0
test ecx, ecx
jl 0x4843f0
mov eax, dword [eax + 0x4c]
mov edx, ecx
dec ecx
test edx, edx
je 0x4843e3
mov eax, dword [eax]
jmp 0x4843d8
test eax, eax
je 0x4843f0
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ebx + ecx]
mov dword [eax + 8], ecx
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov dl, byte [eax]
mov cl, dl
cmp dl, byte [esi]
jne 0x48441a
test cl, cl
je 0x484416
mov dl, byte [eax + 1]
mov cl, dl
cmp dl, byte [esi + 1]
jne 0x48441a
add eax, 2
add esi, 2
test cl, cl
jne 0x4843f6
xor eax, eax
jmp 0x48441f
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x48449c
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x18], 0
mov eax, dword [ebx + eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x34]
fild qword [ebp - 0x1c]
cmp dword [eax + 0x64], ecx
je 0x484457
fstp qword [eax + 8]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [eax + 0x64], ecx
jmp 0x484462
fld st(0)
fsub qword [eax + 8]
fstp qword [ebp - 0x1c]
fstp qword [eax + 8]
mov ecx, dword [ebp - 0x20]
push ecx
call fcn.004c5de7
add esp, 4
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.004c5787
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.004c5787
fld qword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
push edi
call fcn.004841c0
add esp, 4
lea ecx, [ebp - 0x30]
mov edi, eax
mov byte [ebp - 4], 1
call fcn.004c5787
mov eax, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x24], eax
jmp 0x48437a
mov edi, dword [ebp - 0x20]
push ebx
call fcn.00484190
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x38]
mov ebx, dword [ebp - 0x18]
add esp, 4
inc eax
mov dword [ebp - 0x38], eax
jmp 0x4842e5
push edi
call fcn.004c5de7
add esp, 4
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0
call fcn.004c5787
mov ecx, dword [ebp - 0xc]
pop edi
fld qword [0x4f0a60]
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4