Function at 0x4bef30
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1278
call fcn.004f23a0
mov eax, dword [0x5552b0]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push 0xffe
xor ebx, ebx
lea edx, [ebp - 0x1262]
xor ecx, ecx
push ebx
push edx
mov dword [ebp - 0x1274], eax
mov word [ebp - 0x1264], cx
call fcn.004e8ba0
add esp, 0xc
mov ecx, 0x12
mov esi, str.SOFTWAREMicrosoftInternet_Explorer
lea edi, [ebp - 0x5c]
rep movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x1268]
push eax
push 0x20019
push ebx
lea ecx, [ebp - 0x5c]
push ecx
push reloc.WS2_32.dll_bind
movsw word es:[edi], word [esi]
mov dword [ebp - 0x1268], ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x4bf1cf
push 0x206
lea eax, [ebp - 0x262]
xor edx, edx
push ebx
push eax
mov dword [ebp - 0x126c], ebx
mov word [ebp - 0x264], dx
call fcn.004e8ba0
mov edi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
add esp, 0xc
lea ecx, [ebp - 0x1270]
push ecx
mov ecx, dword [ebp - 0x1268]
lea edx, [ebp - 0x264]
push edx
lea eax, [ebp - 0x126c]
push eax
push ebx
push str.svcVersion
push ecx
mov dword [ebp - 0x1270], 0x208
call edi
mov esi, eax
cmp esi, ebx
je 0x4bf0a1
mov ebx, dword [sym.imp.KERNEL32.dll_GetLastError]
call ebx
push eax
push esi
lea edx, [ebp - 0x1264]
push str.Open_svcVersion_Fail___Error_Code:_l__GetLastError:_d____try_Version.
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x1264]
push eax
push 0x54a0bc
xor edx, edx
xor ecx, ecx
call fcn.004a3a40
add esp, 0x18
lea ecx, [ebp - 0x1270]
push ecx
mov ecx, dword [ebp - 0x1268]
lea edx, [ebp - 0x264]
push edx
lea eax, [ebp - 0x126c]
push eax
push 0
push 0x526680
push ecx
call edi
mov esi, eax
test esi, esi
je 0x4bf0a1
call ebx
push eax
push esi
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea edx, [ebp - 0x1264]
push str.Open_Version_Fail___Error_Code:_l__GetLastError:_d____Cant_Query_IE_Version.
push edx
call esi
lea eax, [ebp - 0x1264]
push eax
push 0x54a0bc
xor edx, edx
xor ecx, ecx
call fcn.004a3a40
add esp, 0x18
jmp 0x4bf0a7
mov esi, dword [sym.imp.USER32.dll_wsprintfW]
lea ecx, [ebp - 0x264]
push 0x2e
push ecx
call fcn.004e53f9
add esp, 8
lea edx, [ebp - 0x264]
test eax, eax
je 0x4bf196
push 0x2e
push edx
call fcn.004e53f9
add esp, 8
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x264]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4bf0e0
sub eax, edx
sar eax, 1
lea edx, [eax - 1]
cmp edx, 1
ja 0x4bf190
xor ecx, ecx
test eax, eax
jle 0x4bf118
movzx edx, word [ebp + ecx*2 - 0x264]
cmp edx, 0x30
jb 0x4bf16f
cmp edx, 0x39
ja 0x4bf16f
inc ecx
cmp ecx, eax
jl 0x4bf101
lea eax, [ebp - 0x264]
push eax
call fcn.004e517a
mov ecx, dword [ebp - 0x1274]
add esp, 4
push eax
lea edx, [ebp - 0x264]
push edx
mov dword [ecx], eax
lea eax, [ebp - 0x1264]
push str.Get_IE_Version___s_____02u
push eax
call esi
lea ecx, [ebp - 0x1264]
push ecx
push 0x54a0bc
xor edx, edx
xor ecx, ecx
call fcn.004a3a40
mov edx, dword [ebp - 0x1268]
add esp, 0x18
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4bf215
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x1264]
push str.IE_Version___s__Error.
push ecx
call esi
add esp, 0xc
lea edx, [ebp - 0x1264]
push edx
jmp 0x4bf1af
lea edx, [ebp - 0x264]
push edx
lea eax, [ebp - 0x1264]
push str.IE_Version___s__Error.
push eax
call esi
add esp, 0xc
lea ecx, [ebp - 0x1264]
push ecx
push 0x54a0bc
xor edx, edx
xor ecx, ecx
call fcn.004a3a40
mov edx, dword [ebp - 0x1268]
add esp, 8
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x4bf215
cmp eax, 2
jne 0x4bf1db
push str.Internet_Explorer
jmp 0x4bf204
cmp eax, 5
jne 0x4bf1e7
push 0x54b048
jmp 0x4bf204
push eax
lea eax, [ebp - 0x1264]
push 0x54b088
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea ecx, [ebp - 0x1264]
push ecx
push 0x54a0bc
xor edx, edx
xor ecx, ecx
call fcn.004a3a40
add esp, 8
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.004e4746
mov esp, ebp
pop ebp
ret