Function at 0x412410
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x230
push ebx
lea eax, [ebp - 4]
push eax
push 0x20019
xor ebx, ebx
push ebx
push 0x4995f8
push 0x80000002
mov dword [ebp - 4], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x412648
mov eax, dword [ebp - 4]
cmp eax, ebx
je 0x412648
mov edx, dword [ebp + 0x10]
push esi
push edi
lea ecx, [ebp - 0x1c]
push ecx
push edx
lea ecx, [ebp - 0x14]
push ecx
push ebx
push ebx
push eax
mov dword [ebp - 0x1c], 0x104
mov dword [ebp - 0x14], ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov edx, dword [ebp + 0xc]
xor edi, edi
add edx, 0xfffffffc
mov dword [ebp + 0x10], edx
cmp edi, ebx
jl 0x4125d7
push 0x105
call fcn.004928c4
push 0x105
mov esi, eax
push ebx
push esi
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 4]
add esp, 0x10
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0xc]
push eax
push esi
push edi
push ecx
mov dword [ebp - 0xc], 0x104
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
cmp eax, ebx
jne 0x4125d7
mov edx, dword [ebp + 8]
add dword [ebp + 0x10], 4
push 0x104
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push ebx
mov dword [edx + edi*4], esi
push eax
inc edi
mov byte [ebp - 0x230], bl
call sub.MSVCR100.dll_memset
push esi
push str.SoftwareClientsStartMenuInternet_s_shellopencommand
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push 0x105
push ecx
call dword [sym.imp.MSVCR100.dll_sprintf_s]
add esp, 0x1c
lea edx, [ebp + 0xc]
push edx
push 0x20019
push ebx
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push eax
push 0x80000002
mov dword [ebp + 0xc], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4125ce
mov esi, dword [ebp + 0xc]
cmp esi, ebx
je 0x4125ce
push 0x104
lea ecx, reloc.NETAPI32.dll_NetApiBufferFree
push ebx
push ecx
mov byte [ebp - 0x128], bl
call sub.MSVCR100.dll_memset
add esp, 0xc
lea edx, [ebp - 0x18]
push edx
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push eax
push ebx
push ebx
push ebx
push esi
mov dword [ebp - 0x18], 0x104
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x412570
sub eax, edx
je 0x4125ce
cmp byte [ebp + eax - 0x129], 0x22
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
jne 0x41258e
mov byte [eax], bl
push 0x32
call fcn.004928c4
push 0x32
mov esi, eax
push ebx
push esi
call sub.MSVCR100.dll_memset
add esp, 0x10
cmp byte [ebp - 0x128], 0x22
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
je 0x4125b8
lea eax, reloc.NETAPI32.dll_NetApiBufferFree
push esi
push eax
call fcn.00412660
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
push edx
mov dword [ecx], esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp edi, 0x14
jl 0x412478
mov eax, dword [ebp - 4]
mov esi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push eax
call esi
lea ecx, [ebp - 8]
push ecx
push 0x20019
push ebx
push str.SOFTWAREMicrosoftInternet_Explorer
push 0x80000002
mov dword [ebp - 0x10], 0x104
mov dword [ebp - 8], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x41263c
mov eax, dword [ebp - 8]
cmp eax, ebx
je 0x41263c
mov ecx, dword [ebp + 0x14]
lea edx, [ebp - 0x10]
push edx
push ecx
lea edx, [ebp - 0x20]
push edx
push ebx
push str.Version
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov eax, dword [ebp - 8]
push eax
call esi
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
pop edi
pop esi
or eax, reloc.NETAPI32.dll_NetApiBufferFree
pop ebx
mov esp, ebp
pop ebp
ret 0x10
or eax, reloc.NETAPI32.dll_NetApiBufferFree
pop ebx
mov esp, ebp
pop ebp
ret 0x10