Function at 0x4866c0
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3fc
mov eax, dword [0x581d10]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov dword [ebp - 0x3e8], ecx
push 0x1a8
push 0
lea eax, [ebp - 0x3b8]
push eax
call fcn.004f28b0
add esp, 0xc
mov dword [ebp - 0x3b8], 0x1a8
mov dword [ebp - 0x3f0], 0
lea ecx, [ebp - 0x3b8]
push ecx
mov ecx, dword [ebp - 0x3e8]
call fcn.004865c0
test eax, eax
je 0x486a17
mov edx, 0x5c
lea ecx, [ebp - 0x310]
call fcn.0043d7dc
add eax, 1
mov dword [ebp - 0x3d8], eax
mov edx, 0x5c
mov ecx, dword [ebp - 0x3d8]
call fcn.0043d7dc
sub eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 8
jb 0x486767
mov dword [ebp - 0x3d4], 7
mov edx, dword [ebp - 0x3d4]
push edx
mov eax, dword [ebp - 0x3d8]
push eax
lea ecx, [ebp - 0xc]
push ecx
call fcn.004873c0
add esp, 0xc
mov edx, 0x5c
lea ecx, [ebp - 0x310]
call fcn.0043d7dc
add eax, 1
mov dword [ebp - 0x3c0], eax
mov ecx, 9
mov esi, str.SYSTEMCurrentControlSetEnumDISPLAY_
lea edi, [ebp - 0x110]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push 0xdd
push 0
lea edx, [ebp - 0xe9]
push edx
call fcn.004f28b0
add esp, 0xc
mov edx, 0x5c
mov ecx, dword [ebp - 0x3c0]
call fcn.0043d7dc
sub eax, dword [ebp - 0x3c0]
push eax
mov eax, dword [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x110]
push ecx
call fcn.004873e0
add esp, 0xc
mov edx, 0x5c
mov ecx, dword [ebp - 0x3c0]
call fcn.0043d7dc
add eax, 1
mov dword [ebp - 0x3c0], eax
lea edx, [ebp - 0x3d0]
push edx
push 0x20019
push 0
lea eax, [ebp - 0x110]
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x486a17
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x3c4], 0x104
lea ecx, [ebp - 0x3fc]
push ecx
push 0
push 0
push 0
lea edx, [ebp - 0x3c4]
push edx
lea eax, [ebp - 0x110]
push eax
mov ecx, dword [ebp - 0x3dc]
push ecx
mov edx, dword [ebp - 0x3d0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
test eax, eax
jne 0x486a0a
lea eax, [ebp - 0x3e0]
push eax
push 0x20019
push 0
lea ecx, [ebp - 0x110]
push ecx
mov edx, dword [ebp - 0x3d0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4869f6
mov dword [ebp - 0x3c4], 0x104
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0x110]
push ecx
push 0
push 0
push str.Driver
mov edx, dword [ebp - 0x3e0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4869e9
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x3cc], eax
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x3c8], ecx
mov edx, dword [ebp - 0x3c8]
mov al, byte [edx]
mov byte [ebp - 0x3b9], al
mov ecx, dword [ebp - 0x3cc]
cmp al, byte [ecx]
jne 0x486954
cmp byte [ebp - 0x3b9], 0
je 0x486948
mov edx, dword [ebp - 0x3c8]
mov al, byte [edx + 1]
mov byte [ebp - 0x3ba], al
mov ecx, dword [ebp - 0x3cc]
cmp al, byte [ecx + 1]
jne 0x486954
add dword [ebp - 0x3c8], 2
add dword [ebp - 0x3cc], 2
cmp byte [ebp - 0x3ba], 0
jne 0x4868f6
mov dword [ebp - 0x3e4], 0
jmp 0x48695f
sbb edx, edx
or edx, 1
mov dword [ebp - 0x3e4], edx
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0
jne 0x4869e9
lea ecx, [ebp - 0x3ec]
push ecx
push 0x20019
push 0
push str.Device_Parameters
mov edx, dword [ebp - 0x3e0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4869e9
mov dword [ebp - 0x3c4], 0x100
lea eax, [ebp - 0x3c4]
push eax
lea ecx, [ebp - 0x210]
push ecx
push 0
push 0
push str.EDID
mov edx, dword [ebp - 0x3ec]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4869dc
lea eax, [ebp - 0x210]
push eax
mov ecx, dword [ebp - 0x3e8]
call fcn.00486a30
mov ecx, dword [ebp - 0x3ec]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edx, dword [ebp - 0x3e0]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x3dc]
add eax, 1
mov dword [ebp - 0x3dc], eax
jmp 0x486847
mov ecx, dword [ebp - 0x3d0]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x3f0]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004f1cdb
mov esp, ebp
pop ebp
ret