Function at 0x4854f2
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push 0x470
mov eax, 0x4d4d9b
call fcn.004b6799
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0x10]
mov ebx, ecx
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x474], ebx
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x470], ecx
mov dword [ebp - 0x45c], edx
test eax, eax
jne 0x48552f
xor eax, eax
jmp 0x485a28
push ecx
lea ecx, [ebp - 0x430]
call fcn.004022fa
and dword [ebp - 4], 0
lea edi, [ebp - 0x430]
call fcn.00411ec6
push str.wow6432node
xor ecx, ecx
mov esi, edi
call fcn.00407898
test eax, eax
jle 0x48556c
mov ecx, dword [ebp - 0x430]
add ecx, 0xfffffff0
call fcn.00402845
jmp 0x485528
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
add ecx, 0xfffffff0
call fcn.00402845
push dword [ebp - 0x470]
xor esi, esi
lea eax, [ebp - 0x430]
push 0x54c100
push eax
mov dword [ebp - 0x44c], esi
mov dword [ebp - 0x450], esi
mov dword [ebp - 0x440], 0x400000
mov dword [ebp - 0x468], esi
mov dword [ebp - 0x478], esi
mov dword [ebp - 0x47c], esi
mov dword [ebp - 0x444], esi
mov dword [ebp - 0x448], esi
call fcn.0040c9b1
add esp, 0xc
push 0x54c0f8
push eax
lea eax, [ebp - 0x438]
push eax
mov dword [ebp - 4], 1
call fcn.0040217c
add esp, 0xc
lea edi, [ebx + 8]
mov byte [ebp - 4], 2
mov ecx, dword [edi + 8]
push eax
push ecx
mov ecx, edi
call fcn.0049d2c3
mov ecx, dword [ebp - 0x438]
add ecx, 0xfffffff0
call fcn.00402845
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
add ecx, 0xfffffff0
call fcn.00402845
push esi
push esi
lea eax, [ebp - 0x448]
push eax
lea eax, [ebp - 0x444]
push eax
lea eax, [ebp - 0x47c]
push eax
push esi
lea eax, [ebp - 0x478]
push eax
lea eax, [ebp - 0x468]
push eax
push esi
push esi
push esi
push dword [ebp - 0x434]
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov dword [ebp - 0x460], eax
mov eax, 0x4000
cmp dword [ebp - 0x444], eax
ja 0x48566b
mov eax, dword [ebp - 0x444]
lea ecx, [eax + 2]
mov eax, 0x400000
mov dword [ebp - 0x444], ecx
cmp dword [ebp - 0x448], eax
ja 0x485687
mov eax, dword [ebp - 0x448]
add eax, 2
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x440], eax
mov eax, dword [ebx + 4]
mov dword [ebp - 0x44c], ecx
mov byte [eax], 0
mov eax, dword [ebx]
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x440]
push eax
push dword [ebx + 4]
lea eax, [ebp - 0x450]
push eax
push esi
lea eax, [ebp - 0x44c]
push eax
push dword [ebx]
push esi
push dword [ebp - 0x434]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov dword [ebp - 0x438], 1
jmp 0x485839
cmp eax, esi
jne 0x485844
call fcn.0049219b
push eax
lea ecx, [ebp - 0x430]
call fcn.00402802
push 3
pop ecx
mov dword [ebp - 4], ecx
cmp dword [ebp - 0x44c], esi
jne 0x485717
mov eax, dword [ebx]
push 0x40
pop edx
mov word [eax], dx
mov eax, dword [ebx]
xor edx, edx
mov word [eax + 2], dx
mov eax, dword [ebp - 0x450]
dec eax
je 0x485785
sub eax, ecx
je 0x485754
lea eax, [ebp - 0x430]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x458], esp
push dword [ebx]
call fcn.0040254f
push dword [ebp - 0x450]
push dword [ebp - 0x440]
push dword [ebx + 4]
call fcn.00485e6c
add esp, 0x14
jmp 0x4857bd
mov eax, dword [ebx + 4]
movzx eax, byte [eax]
push ecx
mov ecx, esp
mov dword [ebp - 0x458], esp
push dword [ebx]
mov dword [ebp - 0x464], eax
call fcn.0040254f
push dword [ebp - 0x464]
lea ecx, [ebp - 0x430]
call fcn.00485be6
pop ecx
pop ecx
jmp 0x4857bd
lea eax, [ebp - 0x430]
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x458], esp
push dword [ebx]
call fcn.0040254f
push ecx
mov byte [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x46c], esp
push dword [ebx + 4]
call fcn.0040254f
mov byte [ebp - 4], 3
call fcn.00485d6a
add esp, 0xc
mov eax, dword [edi + 8]
lea ecx, [ebp - 0x430]
push ecx
push eax
mov ecx, edi
call fcn.0049d2c3
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x430]
add ecx, 0xfffffff0
call fcn.00402845
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x440], eax
mov eax, dword [ebx + 4]
mov byte [eax], 0
mov eax, dword [ebx]
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x440]
push eax
push dword [ebx + 4]
lea eax, [ebp - 0x450]
push eax
push esi
lea eax, [ebp - 0x44c]
push eax
push dword [ebx]
push dword [ebp - 0x438]
push dword [ebp - 0x434]
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
inc dword [ebp - 0x438]
cmp eax, 0x103
jne 0x4856e0
lea eax, [ebp - 0x454]
push eax
mov eax, dword [ebp - 0x45c]
mov eax, dword [eax]
or eax, 0x20019
push eax
push esi
push esi
push dword [ebp - 0x434]
mov dword [ebp - 0x454], esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
test eax, eax
jne 0x485a25
cmp dword [ebp - 0x460], esi
jne 0x485528
push 0x412
lea eax, [ebp - 0x42c]
push esi
push eax
call fcn.004b62d0
add esp, 0xc
mov dword [ebp - 0x434], esi
cmp dword [ebp - 0x468], esi
jbe 0x485a19
push 0x208
lea eax, [ebp - 0x42c]
push eax
push dword [ebp - 0x434]
push dword [ebp - 0x454]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
cmp eax, esi
jne 0x485a01
mov dword [ebp - 0x43c], esi
mov dword [ebp - 0x438], esi
lea eax, [ebp - 0x42c]
push eax
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 4], 5
push dword [ebp - 0x454]
mov eax, dword [eax]
lea edi, [ebp - 0x43c]
call fcn.0041236b
test eax, eax
jne 0x4859e9
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x460]
call fcn.0040254f
push 0x530c50
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.00411c99
test eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x460]
setne bl
add ecx, 0xfffffff0
call fcn.00402845
test bl, bl
je 0x4859de
cmp dword [ebp - 0x43c], esi
je 0x4859de
lea ebx, [ebp - 0x458]
call fcn.00434d04
push eax
push dword [ebp - 0x470]
lea eax, [ebp - 0x46c]
push eax
mov byte [ebp - 4], 7
call fcn.00402125
add esp, 0xc
lea ecx, [ebp - 0x42c]
push ecx
push eax
lea eax, [ebp - 0x464]
push eax
mov byte [ebp - 4], 8
call fcn.0040217c
add esp, 0xc
push dword [ebp - 0x45c]
mov ecx, dword [ebp - 0x474]
push eax
mov byte [ebp - 4], 9
push dword [ebp - 0x43c]
call fcn.004854f2
mov ecx, dword [ebp - 0x464]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x46c]
add ecx, 0xfffffff0
call fcn.00402845
mov ecx, dword [ebp - 0x458]
add ecx, 0xfffffff0
call fcn.00402845
xor esi, esi
lea ecx, [ebp - 0x43c]
call fcn.004123a7
or dword [ebp - 4], 0xffffffff
xor eax, eax
lea ecx, [ebp - 0x43c]
mov word [ebp - 0x42c], ax
call fcn.004123a7
inc dword [ebp - 0x434]
mov eax, dword [ebp - 0x434]
cmp eax, dword [ebp - 0x468]
jb 0x4858a8
push dword [ebp - 0x454]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
inc eax
call fcn.004b681c
ret 0xc