Function at 0x4a2e20
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x324
mov eax, dword [0x4f72bc]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x310], eax
mov eax, dword [0x506e0c]
test eax, eax
je 0x4a2e5d
mov edx, dword [0x4f8b78]
mov dword [ebp - 0x31c], edx
mov edx, dword [0x4f8b7c]
mov dword [ebp - 0x320], edx
xor edx, edx
cmp ecx, 0xa
setge dl
add ecx, 0xffffffec
mov dword [0x4f8b78], 0x20019
mov dword [0x4f8b7c], 0xf003f
mov dword [ebp - 0x30c], edx
cmp ecx, 8
ja 0x4a2e93
mov dword [ebp - 0x30c], 0
jmp 0x4a2eab
test eax, eax
je 0x4a2eab
mov dword [0x4f8b78], 0x20119
mov dword [0x4f8b7c], 0xf013f
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push esi
push 1
push 0x4ac
push edi
call ebx
mov esi, dword [sym.imp.USER32.dll_EnableWindow]
push eax
call esi
push 1
push 0x4a7
push edi
call ebx
push eax
call esi
push 1
push 0x4af
push edi
call ebx
push eax
call esi
mov ebx, dword [sym.imp.USER32.dll_SendDlgItemMessageA]
push 0
push 0
push 0x146
push 0x4a7
push edi
call ebx
test eax, eax
jne 0x4a30a0
push 0x4e8468
push eax
push 0x143
push 0x4a7
push edi
call ebx
push 0x4f1324
push 0
push 0x143
push 0x4a7
push edi
call ebx
push 0x4f1328
push 0
push 0x143
push 0x4a7
push edi
call ebx
push 0x4f0e2c
push 0
push 0x143
push 0x4a7
push edi
call ebx
push 0x4f132c
push 0
push 0x143
push 0x4a7
push edi
call ebx
push 0x4f1330
push 0
push 0x143
push 0x4a7
push edi
call ebx
xor esi, esi
jmp 0x4a2f80
push esi
lea eax, [ebp - 0x108]
push 0x4e8d64
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea ecx, [ebp - 0x108]
push ecx
push 0
push 0x143
push 0x4ac
push edi
call ebx
inc esi
cmp esi, 0x3d
jl 0x4a2f80
mov eax, dword [0x5016ac]
add eax, eax
mov edx, dword [eax + eax + 0x501878]
add eax, eax
push edx
xor esi, esi
mov dword [ebp - 0x318], eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x314], eax
test eax, eax
je 0x4a300c
push str.GetRunHWND
mov esi, 0x4f30f0
call fcn.0047da70
mov ecx, dword [ebp - 0x318]
mov edx, dword [ecx + 0x501878]
mov eax, dword [ebp - 0x314]
mov esi, dword [eax + 0x28c]
add esp, 4
push edx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov ecx, esi
test esi, esi
jns 0x4a3016
neg esi
mov ecx, esi
push 0
test ecx, ecx
je 0x4a3080
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, eax
shl edx, 4
sub edx, eax
push eax
add edx, edx
push 0x14e
add edx, edx
push 0x4ac
sub ecx, edx
push edi
mov esi, ecx
call ebx
test esi, esi
jle 0x4a3070
mov eax, 0x66666667
imul esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
push 0
add eax, edx
push eax
push 0x14e
push 0x4a7
jmp 0x4a309d
xor eax, eax
push eax
push eax
push 0x14e
push 0x4a7
jmp 0x4a309d
push 0
push 0x14e
push 0x4a7
push edi
call ebx
push 0
push 0
push 0x14e
push 0x4ac
push edi
call ebx
push 0x104
lea edx, [ebp - 0x108]
mov ecx, 0x472
call fcn.004ca1e0
add esp, 4
lea eax, [ebp - 0x108]
push eax
push 0
push 0x143
push 0x4af
push edi
call ebx
push 0x104
lea edx, [ebp - 0x108]
mov ecx, 0x473
call fcn.004ca1e0
add esp, 4
lea ecx, [ebp - 0x108]
push ecx
push 0
push 0x143
push 0x4af
push edi
call ebx
push 0x104
lea edx, [ebp - 0x108]
mov ecx, 0x474
call fcn.004ca1e0
add esp, 4
lea edx, [ebp - 0x108]
push edx
push 0
push 0x143
push 0x4af
push edi
call ebx
mov eax, dword [ebp - 0x310]
mov esi, dword [ebp - 0x30c]
mov edx, dword [esi*4 + 0x4f8434]
push 0x100
push eax
push str.SoftwareBillP_StudiosWinPatrolDelayOpenAs
lea ecx, [ebp - 0x108]
call fcn.004bff10
add esp, 0xc
test eax, eax
je 0x4a316e
lea ecx, [ebp - 0x108]
push ecx
call fcn.004cf355
add esp, 4
push 0
push eax
jmp 0x4a3172
push 0
push 0
push 0x14e
push 0x4af
push edi
call ebx
mov edx, dword [ebp - 0x310]
push 0x100
push edx
mov edx, dword [esi*4 + 0x4f8434]
push str.SoftwareBillP_StudiosWinPatrolDelayParameters
lea ecx, [ebp - 0x108]
call fcn.004bff10
add esp, 0xc
test eax, eax
je 0x4a31b2
lea eax, [ebp - 0x108]
push eax
jmp 0x4a31b7
push 0x4e27f8
push 0
push 0xc
push 0x4a9
push edi
call ebx
mov ecx, dword [ebp - 0x310]
mov edx, dword [esi*4 + 0x4f8434]
push 0x100
push ecx
push str.SoftwareBillP_StudiosWinPatrolDelayTitle
lea ecx, [ebp - 0x108]
call fcn.004bff10
add esp, 0xc
test eax, eax
je 0x4a31f6
lea edx, [ebp - 0x108]
push edx
jmp 0x4a31fb
push 0x4e27f8
push 0
push 0xc
push 0x4ab
push edi
call ebx
push 0x200
lea edx, [ebp - 0x308]
mov ecx, 0x551
call fcn.004ca1e0
add esp, 4
test eax, eax
je 0x4a3236
lea eax, [ebp - 0x308]
push eax
push 0x53b
push edi
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
mov edx, dword [0x4f8b78]
mov eax, dword [esi*4 + 0x4f8434]
lea ecx, [ebp - 0x30c]
push ecx
push edx
push 0
push str.SoftwareBillP_StudiosWinPatrolDelayRunAs
push eax
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x4a32a3
lea eax, [ebp - 0x318]
push eax
mov eax, dword [ebp - 0x310]
lea ecx, [ebp - 0x314]
push ecx
mov ecx, dword [ebp - 0x30c]
lea edx, [ebp - 0x324]
push edx
push 0
push eax
push ecx
mov dword [ebp - 0x318], 4
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
test eax, eax
je 0x4a32e5
mov edx, dword [ebp - 0x30c]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push 0
push 0
push 0xf1
push 0x53b
push edi
call ebx
cmp dword [0x506e0c], 0
pop esi
pop ebx
je 0x4a32d7
mov ecx, dword [ebp - 0x31c]
mov edx, dword [ebp - 0x320]
mov dword [0x4f8b78], ecx
mov dword [0x4f8b7c], edx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004cf2b6
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x30c]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x314], 0x31
jne 0x4a32a3
push 0
push 1
jmp 0x4a32a7