Function at 0x4affa0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x180
mov eax, dword [0x5159c4]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x180], ecx
mov eax, dword [ebp - 0x180]
cmp dword [eax + 0x288], 0
jne 0x4affcf
xor eax, eax
jmp 0x4b0213
push 0x503170
lea ecx, [ebp - 0x40]
call fcn.004b13b0
mov ecx, dword [ebp - 0x180]
add ecx, 8
push ecx
lea ecx, [ebp - 0xe4]
call fcn.004b1330
lea edx, [ebp - 0xe4]
push edx
lea eax, [ebp - 0x100]
push eax
call fcn.004c16d0
add esp, 8
push eax
lea ecx, [ebp - 0x40]
call fcn.004aa340
lea ecx, [ebp - 0x100]
call fcn.004b1180
lea ecx, [ebp - 0xe4]
call fcn.004b11a0
mov dword [ebp - 0x24], 0x80
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0xc8]
push edx
push 0
push 0x5031f0
lea ecx, [ebp - 0x40]
call fcn.0043bfd0
push eax
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x4b0074
mov dword [ebp - 0x104], 0
lea ecx, [ebp - 0x40]
call fcn.004b1180
mov eax, dword [ebp - 0x104]
jmp 0x4b0213
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x120]
call fcn.004b13b0
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0x20]
push edx
call fcn.004c17a0
add esp, 8
lea ecx, [ebp - 0x120]
call fcn.004b1180
lea ecx, [ebp - 0x20]
call fcn.004b1250
movzx eax, al
test eax, eax
je 0x4b00d8
mov dword [ebp - 0x124], 0
lea ecx, [ebp - 0x20]
call fcn.004b11a0
lea ecx, [ebp - 0x40]
call fcn.004b1180
mov eax, dword [ebp - 0x124]
jmp 0x4b0213
push 0
push 0x2c
lea ecx, [ebp - 0x20]
call fcn.004b12d0
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffff
jne 0x4b0119
lea ecx, [ebp - 0x20]
push ecx
mov ecx, dword [ebp + 8]
call fcn.004b1380
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x180]
call fcn.004b1020
test eax, eax
jne 0x4b0114
mov ecx, dword [ebp + 8]
call fcn.004b11c0
jmp 0x4b01e5
mov eax, dword [ebp - 0x44]
push eax
push 0
lea ecx, [ebp - 0x140]
push ecx
lea ecx, [ebp - 0x20]
call fcn.004b12f0
push eax
mov ecx, dword [ebp + 8]
call fcn.004b1350
lea ecx, [ebp - 0x140]
call fcn.0041b5c0
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x180]
call fcn.004b1020
test eax, eax
je 0x4b019e
push 0xffffffffffffffff
mov eax, dword [ebp - 0x44]
add eax, 1
push eax
lea ecx, [ebp - 0x15c]
push ecx
lea ecx, [ebp - 0x20]
call fcn.004b12f0
push eax
mov ecx, dword [ebp + 0xc]
call fcn.004b1350
lea ecx, [ebp - 0x15c]
call fcn.0041b5c0
mov edx, dword [ebp + 0xc]
push edx
mov ecx, dword [ebp - 0x180]
call fcn.004b1020
test eax, eax
jne 0x4b019c
mov ecx, dword [ebp + 0xc]
call fcn.004b11c0
jmp 0x4b01e5
push 0xffffffffffffffff
mov eax, dword [ebp - 0x44]
add eax, 1
push eax
lea ecx, [ebp - 0x178]
push ecx
lea ecx, [ebp - 0x20]
call fcn.004b12f0
push eax
mov ecx, dword [ebp + 8]
call fcn.004b1350
lea ecx, [ebp - 0x178]
call fcn.0041b5c0
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x180]
call fcn.004b1020
test eax, eax
jne 0x4b01e5
mov ecx, dword [ebp + 8]
call fcn.004b11c0
mov ecx, dword [ebp + 8]
call fcn.004b1250
movzx eax, al
neg eax
sbb eax, eax
add eax, 1
mov dword [ebp - 0x17c], eax
lea ecx, [ebp - 0x20]
call fcn.004b11a0
lea ecx, [ebp - 0x40]
call fcn.004b1180
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004c62c9
mov esp, ebp
pop ebp
ret 8