Function at 0x46f250
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x17b4
call fcn.00473e00
mov eax, dword [ebp + 8]
push eax
push 0x4e409c
lea ecx, [ebp - 0xdb4]
call fcn.0046e850
mov ecx, eax
call fcn.0046e900
push eax
lea ecx, [ebp - 0x404]
push ecx
call fcn.00473c05
add esp, 0xc
lea edx, [ebp - 4]
push edx
push 0x20019
push 0
lea eax, [ebp - 0x404]
push eax
push 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46f6b2
lea ecx, [ebp - 0x8a8]
call fcn.00470f30
mov dword [ebp - 0x808], 0x400
lea ecx, [ebp - 0x808]
push ecx
lea edx, [ebp - 0x804]
push edx
push 0
push 0
push 0x4e40d0
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
push 5
push 0x4e40d4
lea ecx, [ebp - 0xeb4]
call fcn.0046e850
mov ecx, eax
call fcn.0046e900
push eax
lea ecx, [ebp - 0x804]
push ecx
call fcn.0047dbd0
add esp, 0xc
test eax, eax
jne 0x46f374
push 0x5c
lea ecx, [ebp - 0x8a8]
call fcn.0046f6c0
lea edx, [ebp - 0x804]
push edx
lea ecx, [ebp - 0x8a8]
call fcn.00471020
lea ecx, [ebp - 0x8a8]
call fcn.0046f6e0
sub eax, 2
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x681], eax
push 0x4e40e0
push 1
lea ecx, [ebp - 0x8a8]
call fcn.0046f700
push eax
call fcn.0047dd20
add esp, 8
test eax, eax
jne 0x46f372
mov edx, dword [ebp + 0xc]
mov dword [edx + 0x685], 1
jmp 0x46f381
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x681], 0
push 0x100
lea ecx, [ebp - 0x804]
push ecx
mov edx, dword [ebp + 0xc]
add edx, 0x6d5
push edx
call fcn.00474ca0
add esp, 0xc
lea eax, [ebp - 0x804]
push eax
push 0x4e40ec
lea ecx, [ebp - 0xfb4]
call fcn.0046e850
mov ecx, eax
call fcn.0046e900
push eax
lea ecx, [ebp - 0x404]
push ecx
call fcn.00473c05
add esp, 0xc
push 3
push 0x4e4114
lea edx, [ebp - 0x804]
push edx
call fcn.00474180
add esp, 0xc
test eax, eax
jne 0x46f3f4
mov eax, dword [ebp + 0xc]
mov dword [eax + 0x68d], 1
lea ecx, [ebp - 0x8ac]
push ecx
push 0x20019
push 0
lea edx, [ebp - 0x404]
push edx
push 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46f69d
mov dword [ebp - 0x808], 0x40
lea eax, [ebp - 0x808]
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x695
push ecx
push 0
push 0
push 0x4e4118
lea ecx, [ebp - 0x10b4]
call fcn.0046e850
mov ecx, eax
call fcn.0046e900
push eax
mov edx, dword [ebp - 0x8ac]
push edx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0x808], 4
lea eax, [ebp - 0x808]
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x691
push ecx
push 0
push 0
push 0x4e4130
lea ecx, [ebp - 0x11b4]
call fcn.0046e850
mov ecx, eax
call fcn.0046e900
push eax
mov edx, dword [ebp - 0x8ac]
push edx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0xcb0], eax
mov dword [ebp - 0x808], 0x400
lea eax, [ebp - 0x808]
push eax
lea ecx, [ebp - 0x404]
push ecx
push 0
push 0
push 0x4e4140
lea ecx, [ebp - 0x12b4]
call fcn.0046e850
mov ecx, eax
call fcn.0046e900
push eax
mov edx, dword [ebp - 0x8ac]
push edx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0xcb0], eax
push 0x4e4150
lea eax, [ebp - 0x404]
push eax
call fcn.00474780
add esp, 8
test eax, eax
jne 0x46f516
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 0x685], 1
mov dword [ebp - 0x808], 0x400
lea edx, [ebp - 0x808]
push edx
lea eax, [ebp - 0xcac]
push eax
push 0
push 0
push 0x4e4178
lea ecx, [ebp - 0x13b4]
call fcn.0046e850
mov ecx, eax
call fcn.0046e900
push eax
mov ecx, dword [ebp - 0x8ac]
push ecx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
lea edx, [ebp - 0xcac]
push edx
push 0x4e4184
lea ecx, [ebp - 0x14b4]
call fcn.0046e850
mov ecx, eax
call fcn.0046e900
push eax
lea eax, [ebp - 0x404]
push eax
call fcn.00473c05
add esp, 0xc
lea ecx, [ebp - 0xcb4]
push ecx
push 0x20019
push 0
lea edx, [ebp - 0x404]
push edx
push 0x80000002
call dword [sym.imp.advapi32.dll_RegOpenKeyExA]
test eax, eax
jne 0x46f690
cmp dword [ebp + 0xc], 0
je 0x46f683
mov dword [ebp - 0x808], 0x100
lea eax, [ebp - 0x808]
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x481
push ecx
push 0
push 0
push 0x4e41b8
lea ecx, [ebp - 0x15b4]
call fcn.0046e850
mov ecx, eax
call fcn.0046e900
push eax
mov edx, dword [ebp - 0xcb4]
push edx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0x808], 0x100
lea eax, [ebp - 0x808]
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x581
push ecx
push 0
push 0
push 0x4e41c4
lea ecx, [ebp - 0x16b4]
call fcn.0046e850
mov ecx, eax
call fcn.0046e900
push eax
mov edx, dword [ebp - 0xcb4]
push edx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [ebp - 0x808], 0x100
lea eax, [ebp - 0x808]
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x181
push ecx
push 0
push 0
push 0x4e41d4
lea ecx, [ebp - 0x17b4]
call fcn.0046e850
mov ecx, eax
call fcn.0046e900
push eax
mov edx, dword [ebp - 0xcb4]
push edx
call dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov eax, dword [ebp - 0xcb4]
push eax
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x8ac]
push ecx
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.advapi32.dll_RegCloseKey]
lea ecx, [ebp - 0x8a8]
call fcn.00470fc0
xor eax, eax
mov esp, ebp
pop ebp
ret 8