Function at 0x48a630
Capabilities:
Query or enumerate registry value

Disassembly:
push 0xffffffffffffffff
push 0x5b8f60
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x110
push ebp
push esi
push edi
mov ecx, 0x3f
xor eax, eax
lea edi, [esp + 0x1c]
mov esi, dword [esp + 0x134]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov ecx, dword [esi - 8]
lea edi, [esp + 0x1c]
mov eax, ecx
mov edx, dword [esp + 0x130]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [esp + 0x12c]
and ecx, 3
mov ebp, 1
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x10]
mov dword [esp + 0x124], ebp
push ecx
push 0xf003f
push 0
push edx
push eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
lea ecx, [esp + 0x14]
lea edx, [esp + 0xc]
push ecx
lea eax, [esp + 0x1c]
push edx
mov edx, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x28]
push 0
push ecx
push edx
mov dword [esp + 0x24], 0
mov dword [esp + 0x2c], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x48ab63
mov eax, dword [esp + 0x134]
push 0x62a2d4
push eax
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a707
mov dword [esp + 0xc], 0x1c2
jmp 0x48ab63
mov ecx, dword [esp + 0x134]
push str.VOICEVOL
push ecx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a72d
mov dword [esp + 0xc], 8
jmp 0x48ab63
mov edx, dword [esp + 0x134]
push str.MinAutoRecordVoice
push edx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a753
mov dword [esp + 0xc], 0x1f4
jmp 0x48ab63
mov eax, dword [esp + 0x134]
push str.DISPLAYPM
push eax
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a775
mov dword [esp + 0xc], ebp
jmp 0x48ab63
push str.YWWIDTH
lea ecx, [esp + 0x138]
call fcn.00588181
cmp eax, 0xffffffff
je 0x48a798
mov dword [esp + 0xc], 0x64
jmp 0x48ab63
push str.CONTACTWIDTH
lea ecx, [esp + 0x138]
call fcn.00588181
cmp eax, 0xffffffff
je 0x48a7bb
mov dword [esp + 0xc], 0x64
jmp 0x48ab63
push str.RECVCALLIDDELAY
lea ecx, [esp + 0x138]
call fcn.00588181
cmp eax, 0xffffffff
je 0x48a7de
mov dword [esp + 0xc], 0xfa0
jmp 0x48ab63
mov ecx, dword [esp + 0x134]
push str.SMSCOMPORT
push ecx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a800
mov dword [esp + 0xc], ebp
jmp 0x48ab63
mov edx, dword [esp + 0x134]
push str.AutoRunDelay
push edx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a826
mov dword [esp + 0xc], 5
jmp 0x48ab63
mov eax, dword [esp + 0x134]
push str.TONGJIINSECOND
push eax
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a84c
mov dword [esp + 0xc], 0xa
jmp 0x48ab63
mov ecx, dword [esp + 0x134]
push str.TONGJIOUTSECOND
push ecx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a872
mov dword [esp + 0xc], 0x14
jmp 0x48ab63
mov edx, dword [esp + 0x134]
push str.DISPLAYYEWU
push edx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a894
mov dword [esp + 0xc], ebp
jmp 0x48ab63
mov eax, dword [esp + 0x134]
push str.DISPLAYPM
push eax
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a8b6
mov dword [esp + 0xc], ebp
jmp 0x48ab63
mov ecx, dword [esp + 0x134]
push str.DISPLAYMOBILEMSG
push ecx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a8d8
mov dword [esp + 0xc], ebp
jmp 0x48ab63
mov edx, dword [esp + 0x134]
push str.DISPLAYTASK
push edx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a8fa
mov dword [esp + 0xc], ebp
jmp 0x48ab63
mov eax, dword [esp + 0x134]
push str.CALLWIDTH1
push eax
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a922
mov ecx, dword [0x62821c]
mov dword [esp + 0xc], ecx
jmp 0x48ab63
mov edx, dword [esp + 0x134]
push str.CALLWIDTH2
push edx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a949
mov eax, dword [0x628220]
mov dword [esp + 0xc], eax
jmp 0x48ab63
mov ecx, dword [esp + 0x134]
push str.CALLWIDTH3
push ecx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a971
mov edx, dword [0x628224]
mov dword [esp + 0xc], edx
jmp 0x48ab63
mov eax, dword [esp + 0x134]
push str.CALLWIDTH4
push eax
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a999
mov ecx, dword [0x628228]
mov dword [esp + 0xc], ecx
jmp 0x48ab63
mov edx, dword [esp + 0x134]
push str.CALLWIDTH5
push edx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a9c0
mov eax, dword [0x62822c]
mov dword [esp + 0xc], eax
jmp 0x48ab63
mov ecx, dword [esp + 0x134]
push str.CALLWIDTH6
push ecx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48a9e8
mov edx, dword [0x628230]
mov dword [esp + 0xc], edx
jmp 0x48ab63
mov eax, dword [esp + 0x134]
push str.CALLWIDTH7
push eax
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48aa10
mov ecx, dword [0x628234]
mov dword [esp + 0xc], ecx
jmp 0x48ab63
mov edx, dword [esp + 0x134]
push str.CALLWIDTH8
push edx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48aa37
mov eax, dword [0x628238]
mov dword [esp + 0xc], eax
jmp 0x48ab63
mov ecx, dword [esp + 0x134]
push str.CALLWIDTH10
push ecx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48aa5f
mov edx, dword [0x628240]
mov dword [esp + 0xc], edx
jmp 0x48ab63
mov eax, dword [esp + 0x134]
push str.CALLWIDTH11
push eax
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48aa87
mov ecx, dword [0x628244]
mov dword [esp + 0xc], ecx
jmp 0x48ab63
mov edx, dword [esp + 0x134]
push str.CALLWIDTH12
push edx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48aaae
mov eax, dword [0x628248]
mov dword [esp + 0xc], eax
jmp 0x48ab63
mov ecx, dword [esp + 0x134]
push str.TASKSMSWARNING
push ecx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48aad0
mov dword [esp + 0xc], ebp
jmp 0x48ab63
push str.BigCard
lea ecx, [esp + 0x138]
call fcn.00588181
test eax, eax
jl 0x48aaef
mov dword [esp + 0xc], 0xffffd8f1
jmp 0x48ab63
push str.PSD_
lea ecx, [esp + 0x138]
call fcn.00588181
test eax, eax
jl 0x48ab0a
mov dword [esp + 0xc], ebp
jmp 0x48ab63
mov edx, dword [esp + 0x134]
push str.AUTORUNDELAYSEC
push edx
call fcn.00568a52
add esp, 8
test eax, eax
je 0x48ab5b
mov eax, dword [esp + 0x134]
push str.WARNING_DISCONNECTCALL
push eax
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48ab42
mov dword [esp + 0xc], ebp
jmp 0x48ab63
mov ecx, dword [esp + 0x134]
push str.SMSBACKSEC
push ecx
call fcn.00568a52
add esp, 8
test eax, eax
jne 0x48ab63
mov dword [esp + 0xc], 0x1e
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [esp + 0xc]
lea ecx, [esp + 0x130]
mov byte [esp + 0x124], 0
call fcn.0058df3f
lea ecx, [esp + 0x134]
mov dword [esp + 0x124], 0xffffffff
call fcn.0058df3f
mov ecx, dword [esp + 0x11c]
mov eax, esi
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x11c
ret