Function at 0x4493d0
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa3c
mov eax, dword [0x6aae14]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push edi
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0xa30], esi
mov dword [ebp - 0xa34], edi
mov dword [ebp - 0xa1c], ebx
mov dword [ebp - 0xa14], ebx
mov dword [ebp - 0xa10], ebx
cmp byte [0x734318], bl
jne 0x449426
push str.SOFTWAREMicroWorldeScan_for_WindowsMMCMon
push 0x734318
call fcn.005dfb23
add esp, 8
lea eax, [ebp - 0xa14]
push eax
push 9
push ebx
push 0x734318
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.004dc0a0
add esp, 0x14
test eax, eax
jne 0x44967c
mov edi, dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
lea ecx, [ebp - 0xa3c]
push ecx
mov ecx, dword [ebp - 0xa14]
push ebx
push ebx
push ebx
lea edx, [ebp - 0xa18]
push edx
lea eax, [ebp - 0xa0c]
push eax
push ebx
push ecx
mov dword [ebp - 0xa2c], ebx
mov byte [ebp - 0xa0c], bl
mov dword [ebp - 0xa18], 0x400
call edi
test eax, eax
jne 0x449669
mov ecx, dword [ebp - 0xa14]
lea edx, [ebp - 0xa10]
push edx
push 9
push ebx
lea eax, [ebp - 0xa0c]
push eax
push ecx
mov dword [ebp - 0xa10], ebx
call fcn.004dc0a0
add esp, 0x14
test eax, eax
jne 0x449622
mov dword [ebp - 0xa28], ebx
cmp esi, ebx
je 0x4494d7
cmp dword [esi + 0x6c], ebx
je 0x4494d7
mov dword [ebp - 0xa28], 1
lea edx, [ebp - 0xa3c]
push edx
mov edx, dword [ebp - 0xa10]
push ebx
push ebx
push ebx
lea eax, [ebp - 0xa20]
push eax
lea ecx, [ebp - 0x404]
push ecx
push ebx
push edx
xor esi, esi
mov byte [ebp - 0x404], bl
mov dword [ebp - 0xa20], 0x400
call edi
test eax, eax
jne 0x44960f
cmp dword [ebp - 0xa28], ebx
je 0x449537
mov ecx, dword [ebp - 0xa30]
push ebx
push ebx
lea eax, [ebp - 0x404]
push eax
call fcn.004f2f50
test eax, eax
jne 0x4495d4
mov eax, dword [ebp - 0xa10]
lea ecx, [ebp - 0xa24]
push ecx
push str.CommandRunSetToUpdateAgent
lea edx, [ebp - 0x404]
push edx
push eax
mov dword [ebp - 0xa24], ebx
call fcn.004d5820
cmp dword [ebp - 0xa24], ebx
je 0x4495d4
lea ecx, [ebp - 0x404]
push ecx
lea edx, [ebp - 0x60c]
push str._MMC__Force_Setting__s_to_update_from_PrimaryServer.
push edx
call fcn.005dfb23
push ebx
push 1
lea eax, [ebp - 0x60c]
push eax
push 0x6aec98
call fcn.004311c0
add esp, 0x1c
cmp dword [0x762354], ebx
je 0x4495b0
lea ecx, [ebp - 0x60c]
push ecx
push 0x60c800
push ebx
call fcn.004f0f30
add esp, 0xc
mov eax, dword [ebp - 0xa10]
push 1
push str.ForceSetToPrimaryServer
lea edx, [ebp - 0x404]
push edx
push eax
call fcn.004f48a0
mov dword [ebp - 0xa1c], 1
lea ecx, [ebp - 0xa3c]
push ecx
mov ecx, dword [ebp - 0xa10]
push ebx
push ebx
push ebx
lea edx, [ebp - 0xa20]
push edx
lea eax, [ebp - 0x404]
push eax
inc esi
push esi
push ecx
mov byte [ebp - 0x404], bl
mov dword [ebp - 0xa20], 0x400
call edi
test eax, eax
je 0x449513
mov edx, dword [ebp - 0xa10]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, dword [ebp - 0xa30]
mov eax, dword [ebp - 0xa2c]
lea ecx, [ebp - 0xa3c]
push ecx
push ebx
push ebx
push ebx
lea edx, [ebp - 0xa18]
push edx
mov edx, dword [ebp - 0xa14]
lea ecx, [ebp - 0xa0c]
inc eax
push ecx
push eax
push edx
mov dword [ebp - 0xa2c], eax
mov byte [ebp - 0xa0c], bl
mov dword [ebp - 0xa18], 0x400
call edi
test eax, eax
je 0x449490
mov eax, dword [ebp - 0xa14]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov edi, dword [ebp - 0xa34]
cmp edi, ebx
je 0x449688
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [edi], eax
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0xa1c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret