Function at 0x467010
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x64abb8
mov eax, dword fs:[0]
push eax
sub esp, 0x18
push ebx
push esi
push edi
mov eax, dword [0x758898]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x24], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
mov edi, dword [sym.imp.USER32.dll_CreatePopupMenu]
call edi
mov dword [esi + 0x20c], eax
mov ecx, dword [0x75ee5c]
push ecx
push 0x2723
push 1
push eax
call fcn.004b96d0
mov edx, dword [0x75f36c]
push edx
push 0x2732
push 1
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b96d0
mov ecx, dword [0x75effc]
push ecx
push 0x2728
push 1
mov edx, dword [esi + 0x20c]
push edx
call fcn.004b96d0
add esp, 0x30
cmp dword [0x752d28], ebx
je 0x467101
push ebx
push ebx
push 0x800
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b96d0
add esp, 0x10
lea ecx, [ebp - 0x14]
call fcn.00402510
mov byte [ebp - 4], 1
mov ecx, dword [0x75f690]
push ecx
push str._s__Ctrl_M_
lea edx, [ebp - 0x14]
push edx
call fcn.00402f80
mov eax, dword [ebp - 0x14]
push eax
push 0x2b46
push ebx
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b96d0
add esp, 0x1c
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00402580
push ebx
push ebx
push 0x800
mov edx, dword [esi + 0x20c]
push edx
call fcn.004b96d0
mov eax, dword [0x75eff8]
push eax
push 0x80f1
push 1
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b96d0
push ebx
push ebx
push 0x800
mov edx, dword [esi + 0x20c]
push edx
call fcn.004b96d0
mov eax, dword [0x75ede4]
push eax
push 0x271d
push ebx
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b96d0
add esp, 0x40
mov edx, dword [0x75eddc]
push edx
push 0x271b
push ebx
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b96d0
push ebx
push ebx
push 0x800
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b96d0
mov edx, dword [0x75f4d0]
push edx
push 0x2b40
push 1
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b96d0
push ebx
push ebx
push 0x800
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b96d0
add esp, 0x40
mov edx, dword [0x75ede0]
push edx
push 0x271c
push ebx
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b96d0
push ebx
push ebx
push 0x800
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b96d0
add esp, 0x20
call edi
mov dword [esi + 0x210], eax
mov edx, dword [0x75ee4c]
push edx
push eax
push 0x10
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b96d0
mov ecx, dword [0x75ee50]
push ecx
push 0x2724
push 1
mov edx, dword [esi + 0x20c]
push edx
call fcn.004b96d0
push ebx
push ebx
push 0x800
mov eax, dword [esi + 0x20c]
push eax
call fcn.004b96d0
add esp, 0x30
call edi
mov dword [esi + 0x214], eax
mov ecx, dword [0x75f768]
push ecx
push eax
push 0x10
mov edx, dword [esi + 0x20c]
push edx
call fcn.004b96d0
mov eax, dword [0x75ee5c]
push eax
push 0x299d
push ebx
mov ecx, dword [esi + 0x214]
push ecx
call fcn.004b96d0
mov edx, dword [0x75ede8]
push edx
push 0x299e
push ebx
mov eax, dword [esi + 0x214]
push eax
call fcn.004b96d0
add esp, 0x30
mov edi, 0x299e
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x18], 4
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x1c]
push edx
push ebx
push ebx
push str.nDblClick
mov eax, dword [0x75dbe4]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
jne 0x4672c2
cmp dword [ebp - 0x1c], 2
jne 0x4672c2
mov edi, 0x299d
mov dword [ebp - 0x20], edi
push ebx
push edi
push 0x299e
push 0x299d
mov ecx, dword [esi + 0x214]
push ecx
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
push ebx
push ebx
push 0x800
mov edx, dword [esi + 0x20c]
push edx
call fcn.004b96d0
mov eax, dword [0x75ede8]
push eax
push 0x271e
push ebx
mov ecx, dword [esi + 0x20c]
push ecx
call fcn.004b96d0
add esp, 0x20
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret