Function at 0x4a8260
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0xce3c
call fcn.004e7170
mov dword [ebp - 8], 0
mov eax, dword [ebp + 8]
push eax
push 0x5cae4c
lea ecx, [ebp - 0x1e3c]
call fcn.00497e20
mov ecx, eax
call fcn.00497e50
push eax
lea ecx, [ebp - 0x408]
push ecx
call fcn.004e6fc0
add esp, 0xc
lea edx, [ebp - 4]
push edx
push 0x20019
push 0
lea eax, [ebp - 0x408]
push eax
push 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4a872d
lea ecx, [ebp - 0xa30]
call fcn.004a8de0
mov dword [ebp - 0x810], 4
lea ecx, [ebp - 0x810]
push ecx
lea edx, [ebp - 8]
push edx
push 0
push 0
push 0x5cae80
lea ecx, [ebp - 0x2e3c]
call fcn.00497e20
mov ecx, eax
call fcn.00497e50
push eax
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0x810], 0x400
lea ecx, [ebp - 0x810]
push ecx
lea edx, [ebp - 0x80c]
push edx
push 0
push 0
push 0xa
lea eax, [ebp - 0x40c]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.004f26fb
add esp, 0xc
push eax
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
push 5
push 0x5cae8c
lea ecx, [ebp - 0x3e3c]
call fcn.00497e20
mov ecx, eax
call fcn.00497e50
push eax
lea eax, [ebp - 0x80c]
push eax
call fcn.004f25b0
add esp, 0xc
test eax, eax
jne 0x4a83d7
push 0x5c
lea ecx, [ebp - 0xa30]
call fcn.004a8740
lea ecx, [ebp - 0x80c]
push ecx
lea ecx, [ebp - 0xa30]
call fcn.004a8ed0
lea ecx, [ebp - 0xa30]
call fcn.004a8760
sub eax, 2
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x681], eax
push 0x5cae98
push 1
lea ecx, [ebp - 0xa30]
call fcn.004a8780
push eax
call fcn.004f2790
add esp, 8
test eax, eax
jne 0x4a83d5
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x685], 1
jmp 0x4a83e4
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x681], 0
push 0x100
lea edx, [ebp - 0x80c]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x6dd
push eax
call fcn.004e7630
add esp, 0xc
lea ecx, [ebp - 0x80c]
push ecx
push 0x5caea4
lea ecx, [ebp - 0x4e3c]
call fcn.00497e20
mov ecx, eax
call fcn.00497e50
push eax
lea edx, [ebp - 0x408]
push edx
call fcn.004e6fc0
add esp, 0xc
push 3
push 0x5caecc
lea eax, [ebp - 0x80c]
push eax
call fcn.004e7440
add esp, 0xc
test eax, eax
jne 0x4a8456
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x68d], 1
lea edx, [ebp - 0xa34]
push edx
push 0x20019
push 0
lea eax, [ebp - 0x408]
push eax
push 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4a8718
mov dword [ebp - 0x810], 0x40
lea ecx, [ebp - 0x810]
push ecx
mov edx, dword [ebp + 0xc]
add edx, 0x69d
push edx
push 0
push 0
push 0x5caed0
lea ecx, [ebp - 0x5e3c]
call fcn.00497e20
mov ecx, eax
call fcn.00497e50
push eax
mov eax, dword [ebp - 0xa34]
push eax
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0x810], 4
lea ecx, [ebp - 0x810]
push ecx
mov edx, dword [ebp + 0xc]
add edx, 0x691
push edx
push 0
push 0
push 0x5caee8
lea ecx, [ebp - 0x6e3c]
call fcn.00497e20
mov ecx, eax
call fcn.00497e50
push eax
mov eax, dword [ebp - 0xa34]
push eax
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0xe38], eax
mov dword [ebp - 0x810], 0x400
lea ecx, [ebp - 0x810]
push ecx
lea edx, [ebp - 0x408]
push edx
push 0
push 0
push 0x5caef8
lea ecx, [ebp - 0x7e3c]
call fcn.00497e20
mov ecx, eax
call fcn.00497e50
push eax
mov eax, dword [ebp - 0xa34]
push eax
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0xe38], eax
push 0x5caf08
lea ecx, [ebp - 0x408]
push ecx
call fcn.004e7480
add esp, 8
test eax, eax
jne 0x4a8578
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x685], 1
push 0x5ee3c0
lea eax, [ebp - 0xe34]
push eax
call fcn.004e6ed0
add esp, 8
mov dword [ebp - 0x810], 0x400
lea ecx, [ebp - 0x810]
push ecx
lea edx, [ebp - 0xe34]
push edx
push 0
push 0
push 0x5caf30
lea ecx, [ebp - 0x8e3c]
call fcn.00497e20
mov ecx, eax
call fcn.00497e50
push eax
mov eax, dword [ebp - 0xa34]
push eax
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
test eax, eax
jne 0x4a870b
lea ecx, [ebp - 0xe34]
push ecx
push 0x5caf3c
lea ecx, [ebp - 0x9e3c]
call fcn.00497e20
mov ecx, eax
call fcn.00497e50
push eax
lea edx, [ebp - 0x408]
push edx
call fcn.004e6fc0
add esp, 0xc
lea eax, [ebp - 0xe3c]
push eax
push 0x20019
push 0
lea ecx, [ebp - 0x408]
push ecx
push 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4a870b
cmp dword [ebp + 0xc], 0
je 0x4a86fe
mov dword [ebp - 0x810], 0x100
lea edx, [ebp - 0x810]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x481
push eax
push 0
push 0
push 0x5caf70
lea ecx, [ebp - 0xae3c]
call fcn.00497e20
mov ecx, eax
call fcn.00497e50
push eax
mov ecx, dword [ebp - 0xe3c]
push ecx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0x810], 0x100
lea edx, [ebp - 0x810]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x581
push eax
push 0
push 0
push 0x5caf7c
lea ecx, [ebp - 0xbe3c]
call fcn.00497e20
mov ecx, eax
call fcn.00497e50
push eax
mov ecx, dword [ebp - 0xe3c]
push ecx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0x810], 0x100
lea edx, [ebp - 0x810]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x181
push eax
push 0
push 0
push 0x5caf8c
lea ecx, [ebp - 0xce3c]
call fcn.00497e20
mov ecx, eax
call fcn.00497e50
push eax
mov ecx, dword [ebp - 0xe3c]
push ecx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov edx, dword [ebp - 0xe3c]
push edx
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, dword [ebp - 0xa34]
push eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.advapi32.dll_RegCloseKey]
lea ecx, [ebp - 0xa30]
call fcn.004a8e70
mov eax, dword [ebp - 8]
mov esp, ebp
pop ebp
ret