Function at 0x48ddb0
Capabilities:
Query or enumerate registry value

Disassembly:
mov eax, dword [esp + 8]
sub esp, 0x220
push esi
lea esi, [ebx + 4]
push esi
push eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
mov edx, esi
call fcn.0048dd70
test eax, eax
je 0x48dddd
xor eax, eax
pop esi
add esp, 0x220
ret 0x10
mov esi, dword [esp + 0x228]
push ebp
mov ebp, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
push edi
mov eax, 4
lea ecx, [esp + 0x10]
push ecx
lea edx, [ebx + 0x444]
push edx
xor edi, edi
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
push edi
push str.Access
push esi
mov dword [ebx + 0x478], edi
mov dword [ebx + 0x4b4], edi
mov dword [ebx + 0x4f0], edi
mov dword [ebx + 0x52c], edi
call ebp
mov eax, 4
lea ecx, [esp + 0x10]
push ecx
lea edx, [ebx + 0x440]
push edx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
push edi
push str.StreamType
push esi
call ebp
lea ecx, [esp + 0x10]
push ecx
lea eax, [ebx + 0x224]
push eax
lea edx, [esp + 0x14]
push edx
push edi
push 0x5e86c4
push esi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], 0x208
mov dword [esp + 0x24], 1
call ebp
test eax, eax
mov eax, 1
jne 0x48de95
cmp dword [esp + 0xc], eax
jne 0x48de95
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], eax
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x14]
push edx
push edi
push str.PreloadModules
push esi
mov dword [esp + 0x28], 0x208
mov word [esp + 0x3c], di
call ebp
test eax, eax
jne 0x48dee4
cmp dword [esp + 0xc], 1
jne 0x48dee4
lea edi, [esp + 0x24]
call fcn.0048d750
mov dword [ebx + 0x434], eax
mov dword [esp + 0x14], 1
xor edi, edi
jmp 0x48deee
cmp dword [esp + 0x14], edi
je 0x48e097
lea eax, [ebx + 0x224]
push eax
call sym.vidcap60.exe__SfDoesFileExist_4
test eax, eax
je 0x48e097
mov eax, 4
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], eax
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x14]
push edx
push edi
push str.AppLevel
push esi
mov dword [esp + 0x30], edi
mov dword [ebx + 0x448], 0xffffffff
call ebp
test eax, eax
mov eax, 4
jne 0x48df54
cmp dword [esp + 0xc], eax
jne 0x48df54
cmp dword [esp + 0x10], eax
jne 0x48df54
mov ecx, dword [esp + 0x18]
mov dword [ebx + 0x448], ecx
lea edx, [esp + 0x10]
push edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x14]
push ecx
push edi
push str.Flags
push esi
mov dword [esp + 0x38], edi
mov dword [ebx + 0x450], edi
call ebp
test eax, eax
jne 0x48df9f
mov ecx, dword [esp + 0xc]
mov eax, 4
cmp ecx, eax
jne 0x48df9f
cmp dword [esp + 0x10], eax
jne 0x48df9f
mov edx, dword [esp + 0x20]
mov dword [ebx + 0x450], edx
mov ecx, 5
mov edi, 0x5d3994
lea esi, [ebx + 4]
xor eax, eax
repe cmpsw word [esi], word es:[edi]
je 0x48dfdc
lea eax, [ebx + 4]
mov ecx, 5
mov edi, 0x5d3984
mov esi, eax
xor edx, edx
repe cmpsw word [esi], word es:[edi]
je 0x48dfdc
mov esi, eax
mov ecx, 5
mov edi, 0x5d3974
xor eax, eax
repe cmpsw word [esi], word es:[edi]
jne 0x48dfef
mov eax, dword [ebx + 0x450]
test al, 2
jne 0x48dfef
or eax, 1
mov dword [ebx + 0x450], eax
mov ecx, dword [ebx + 0x550]
xor eax, eax
cmp ecx, 2
mov esi, 4
mov dword [esp + 0x1c], eax
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], esi
mov dword [ebx + 0x44c], eax
jne 0x48e04c
lea ecx, [esp + 0x10]
push ecx
lea edx, [esp + 0x20]
push edx
mov edx, dword [esp + 0x238]
lea ecx, [esp + 0x14]
push ecx
push eax
push str.BetaBuild
push edx
call ebp
test eax, eax
jne 0x48e04c
cmp dword [esp + 0xc], esi
jne 0x48e04c
cmp dword [esp + 0x10], esi
jne 0x48e04c
mov eax, dword [esp + 0x1c]
mov dword [ebx + 0x44c], eax
mov ecx, dword [esp + 0x238]
mov edx, dword [esp + 0x234]
mov eax, dword [esp + 0x23c]
push ecx
push edx
mov ecx, ebx
call fcn.0048d860
test eax, eax
jne 0x48e087
mov ecx, dword [ebx + 0x450]
mov eax, 1
or ecx, eax
mov dword [ebx + 0x450], ecx
mov dword [ebx + 0x45c], eax
mov eax, dword [esp + 0x14]
pop edi
pop ebp
pop esi
add esp, 0x220
ret 0x10
mov eax, dword [ebx + 0x434]
cmp eax, edi
je 0x48e0b1
push eax
call dword [0x5d25a4]
add esp, 4
mov dword [ebx + 0x434], edi
pop edi
pop ebp
xor eax, eax
pop esi
add esp, 0x220
ret 0x10