Function at 0x48c000
Capabilities:
Query or enumerate registry value
Resolve function by parsing pe exports
Set registry value

Disassembly:
sub esp, 0x20c
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x10]
push 0x4ad4c4
push eax
call section..s388xe
add esp, 8
lea ecx, [esp + 0x2c]
push ecx
push dword [eax]
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyA]
mov edx, dword [esp + 0x10]
or edi, 0xffffffff
mov esi, eax
add edx, 0xfffffff0
mov ecx, edi
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x48c04e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test esi, esi
je 0x48c09a
lea eax, [esp + 0x10]
push 0x4ad4c4
push eax
call section..s388xe
add esp, 8
lea ecx, [esp + 0x2c]
push ecx
push dword [eax]
push reloc.WS2_32.dll_bind
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyA]
mov edx, dword [esp + 0x10]
test eax, eax
mov eax, edi
sete bl
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x48c096
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
test bl, bl
je 0x48c0a4
push dword [esp + 0x2c]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0x104
lea eax, [esp + 0x11c]
mov dword [esp + 0x18], 1
push 0
push eax
mov dword [esp + 0x6c], 0x104
call fcn.0044ebb0
lea eax, [esp + 0x1c]
push 0x4ad4c4
push eax
call section..s388xe
add esp, 0x14
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0x11c]
push ecx
lea ecx, [esp + 0x1c]
push ecx
push dword [esp + 0x230]
push dword [eax]
push reloc.WS2_32.dll_bind
call dword [sym.imp.SHLWAPI.dll_SHGetValueA]
mov edx, dword [esp + 0x10]
mov esi, eax
add edx, 0xfffffff0
mov ecx, edi
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x48c11d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
cmp esi, 2
jne 0x48c293
push 0
call fcn.004563e7
mov dword [esp + 0x1c], eax
xorps xmm0, xmm0
lea eax, [esp + 0x1c]
mov dword [esp + 0x20], edx
push eax
lea eax, [esp + 0x6c]
mov byte [esp + 0x48], 0
push eax
movups xmmword [esp + 0x4d], xmm0
mov dword [esp + 0x65], 0
movq qword [esp + 0x5d], xmm0
mov word [esp + 0x69], 0
mov byte [esp + 0x6b], 0
call fcn.00455e52
test eax, eax
mov ebx, edi
lea eax, [esp + 0x24]
cmove ebx, dword [esp + 0x74]
push eax
lea eax, [esp + 0x98]
push eax
call fcn.00455e52
test eax, eax
mov ebp, edi
lea eax, [esp + 0x2c]
cmove ebp, dword [esp + 0xa4]
push eax
lea eax, [esp + 0xc4]
push eax
call fcn.00455e52
xor ecx, ecx
test eax, eax
lea eax, [esp + 0x34]
cmove ecx, dword [esp + 0xd4]
push eax
lea eax, [esp + 0xf0]
mov dword [esp + 0x30], ecx
push eax
call fcn.00455e52
add esp, 0x24
test eax, eax
jne 0x48c1d7
mov esi, dword [esp + 0xe0]
inc esi
jmp 0x48c1d9
xor esi, esi
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0xf8]
push eax
call fcn.00455e52
add esp, 8
test eax, eax
jne 0x48c200
mov eax, dword [esp + 0x108]
add eax, 0x76c
jmp 0x48c202
xor eax, eax
push ebx
push ebp
push dword [esp + 0x18]
push esi
push eax
push str._4.4d_2.2d_2.2d_2.2d_2.2d
lea eax, [esp + 0x58]
push 0x20
push eax
call fcn.00409b90
lea esi, [esp + 0x60]
mov dword [esp + 0x34], 1
add esp, 0x20
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x48c230
lea eax, [esp + 0x10]
sub esi, ecx
push 0x4ad4c4
push eax
call section..s388xe
add esp, 8
lea ecx, [esp + 0x40]
push esi
push ecx
push dword [esp + 0x1c]
mov ecx, dword [esp + 0x230]
push ecx
push dword [eax]
push reloc.WS2_32.dll_bind
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov edx, dword [esp + 0x10]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], edi
dec edi
test edi, edi
jg 0x48c283
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x20c
ret
test esi, esi
jne 0x48c4d3
lea ecx, [esp + 0x118]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x48c2a5
sub ecx, edx
cmp ecx, 0xc
jb 0x48c4d3
mov eax, dword [esp + 0x118]
mov esi, dword [sym.imp.SHLWAPI.dll_StrToIntA]
mov dword [esp + 0x19], 0
mov dword [esp + 0x18], eax
xor eax, eax
mov word [esp + 0x11], ax
movzx eax, word [esp + 0x11c]
mov word [esp + 0x10], ax
xor eax, eax
mov word [esp + 0x29], ax
movzx eax, word [esp + 0x11e]
mov word [esp + 0x28], ax
xor eax, eax
mov word [esp + 0x25], ax
movzx eax, word [esp + 0x120]
mov word [esp + 0x24], ax
xor eax, eax
mov word [esp + 0x21], ax
movzx eax, word [esp + 0x122]
push 0xffffffffffffffff
mov word [esp + 0x24], ax
lea eax, [esp + 0x24]
push 0
push eax
call esi
push eax
lea eax, [esp + 0x30]
push eax
call esi
push eax
lea eax, [esp + 0x38]
push eax
call esi
push eax
lea eax, [esp + 0x24]
push eax
call esi
push eax
lea eax, [esp + 0x30]
push eax
call esi
push eax
lea ecx, [esp + 0x4c]
call fcn.00409360
push 0
call fcn.004563e7
mov esi, eax
mov ecx, edx
mov eax, dword [esp + 0x224]
mov edx, 0x3c
imul edx
add esp, 4
mov dword [esp + 0x38], esi
sub esi, eax
mov dword [esp + 0x3c], ecx
sbb ecx, edx
cmp ecx, dword [esp + 0x34]
jl 0x48c4d3
jg 0x48c393
cmp esi, dword [esp + 0x30]
jbe 0x48c4d3
lea eax, [esp + 0x38]
mov byte [esp + 0x40], 0
push eax
xorps xmm0, xmm0
mov dword [esp + 0x5d], 0
lea eax, [esp + 0xf8]
movq qword [esp + 0x55], xmm0
push eax
movups xmmword [esp + 0x49], xmm0
mov word [esp + 0x65], 0
mov byte [esp + 0x67], 0
call fcn.00455e52
test eax, eax
mov ebx, edi
lea eax, [esp + 0x40]
cmove ebx, dword [esp + 0x100]
push eax
lea eax, [esp + 0xdc]
push eax
call fcn.00455e52
test eax, eax
mov ebp, edi
lea eax, [esp + 0x48]
cmove ebp, dword [esp + 0xe8]
push eax
lea eax, [esp + 0xc0]
push eax
call fcn.00455e52
xor ecx, ecx
test eax, eax
lea eax, [esp + 0x50]
cmove ecx, dword [esp + 0xd0]
push eax
lea eax, [esp + 0xa4]
mov dword [esp + 0x4c], ecx
push eax
call fcn.00455e52
add esp, 0x20
test eax, eax
jne 0x48c43b
mov esi, dword [esp + 0x98]
inc esi
jmp 0x48c43d
xor esi, esi
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x68]
push eax
call fcn.00455e52
add esp, 8
test eax, eax
jne 0x48c45e
mov eax, dword [esp + 0x78]
add eax, 0x76c
jmp 0x48c460
xor eax, eax
push ebx
push ebp
push dword [esp + 0x38]
push esi
push eax
push str._4.4d_2.2d_2.2d_2.2d_2.2d
lea eax, [esp + 0x58]
push 0x20
push eax
call fcn.00409b90
lea esi, [esp + 0x60]
mov dword [esp + 0x34], 1
add esp, 0x20
lea ecx, [esi + 1]
nop dword [eax + eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x48c490
lea eax, [esp + 0x30]
sub esi, ecx
push 0x4ad4c4
push eax
call section..s388xe
add esp, 8
lea ecx, [esp + 0x40]
push esi
push ecx
push dword [esp + 0x1c]
mov ecx, dword [esp + 0x230]
push ecx
push dword [eax]
push reloc.WS2_32.dll_bind
call dword [sym.imp.SHLWAPI.dll_SHSetValueA]
mov edx, dword [esp + 0x30]
jmp 0x48c26e
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x20c
ret