Function at 0x46bcb0
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
lea ebp, [esp - 0x84c]
sub esp, 0x8cc
mov eax, dword [0x4b1120]
xor eax, ebp
mov dword [ebp + 0x848], eax
mov eax, dword [ebp + 0x854]
mov ecx, dword [ebp + 0x860]
mov edx, dword [ebp + 0x864]
push ebx
mov ebx, dword [ebp + 0x85c]
push esi
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp + 0x858]
push edi
mov dword [ebp - 0x6c], ecx
mov ecx, dword [ebp + 0x868]
xor edi, edi
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x54], edi
test eax, eax
je 0x46c18e
test ebx, ebx
je 0x46c18e
lea edx, [ebp + 0x648]
sub edx, eax
mov edi, edi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x46bd20
lea edx, [ebp + 0x648]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
inc esi
lea eax, [esi + esi]
call fcn.0044a220
mov edi, esp
push esi
push edi
push 0xffffffffffffffff
xor eax, eax
lea ecx, [ebp + 0x648]
push ecx
push eax
push eax
mov word [edi], ax
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor eax, eax
mov edi, edi
movzx ecx, word [eax + str.SOFTWAREClassesCLSID_]
mov word [ebp + eax + 0x448], cx
add eax, 2
test cx, cx
jne 0x46bd60
mov eax, edi
mov edx, edi
jmp 0x46bd80
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x46bd80
sub eax, edx
lea edi, [ebp + 0x448]
add edi, 0xfffffffe
mov esi, edx
lea edx, [edi + 2]
jmp 0x46bda0
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x46bda0
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
lea eax, [ebp - 0x70]
rep movsb byte es:[edi], byte [esi]
push eax
lea ecx, [ebp - 0x74]
push ecx
push edx
call fcn.0046db30
add esp, 0xc
test eax, eax
jne 0x46c127
mov edi, dword [ebp + 0x86c]
test edi, edi
je 0x46be05
cmp dword [ebp - 0x70], 0x80000002
mov eax, str.HKEY_LOCAL_MACHINE
je 0x46bdf0
mov eax, str.HKEY_CURRENT_USER
lea edx, [ebp + 0x448]
push edx
push eax
push str._GetConfig__d
call fcn.00469110
add esp, 0xc
push 0x140
call fcn.004710a0
mov dword [ebp - 0x58], eax
add eax, 8
add esp, 4
cmp eax, 0x400
ja 0x46be38
call fcn.0044a220
mov eax, esp
test eax, eax
je 0x46be33
mov dword [eax], 0xcccc
add eax, 8
mov dword [ebp - 0x60], eax
jmp 0x46be51
push eax
call fcn.00448217
add esp, 4
test eax, eax
je 0x46be4e
mov dword [eax], 0xdddd
add eax, 8
mov dword [ebp - 0x60], eax
test eax, eax
je 0x46c120
mov edx, dword [ebp - 0x58]
lea ecx, [ebp - 0x58]
push ecx
push edx
push 0
push eax
call fcn.00447660
add esp, 0xc
push eax
mov eax, dword [ebp - 0x74]
push 0
push 0
push 0x49c19a
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov esi, eax
test esi, esi
jne 0x46c094
test edi, edi
je 0x46be9f
mov ecx, dword [ebp - 0x58]
push ecx
push str._GetConfig____R
call fcn.00469110
add esp, 8
cmp dword [ebp - 0x58], 0
jbe 0x46c094
mov edx, dword [ebp - 0x60]
push 0x140
push ebx
push edx
call fcn.00471650
add esp, 0xc
mov dword [ebp - 0x54], eax
test eax, eax
jbe 0x46c105
lea ecx, [ebp - 0x50]
call fcn.00468340
mov ecx, dword [ebp - 0x5c]
push edi
push 0
push 0
lea eax, [ebp - 0x50]
push eax
push ecx
call fcn.00469540
mov esi, eax
add esp, 0x14
test esi, esi
jne 0x46bf12
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x6c]
push edi
lea edx, [ebp - 0x50]
push edx
push eax
push ecx
push ebx
call fcn.00469750
add esp, 0x14
test edi, edi
je 0x46bf24
push 0x4a32d0
call fcn.00469110
add esp, 4
jmp 0x46bf24
test edi, edi
je 0x46bf24
push esi
push str._GetConfig____ReadGlobalPad_...______dwError___d
call fcn.00469110
add esp, 8
cmp dword [ebp - 0x70], 0x80000001
jne 0x46c094
mov ecx, dword [ebp - 0x5c]
push edi
lea edx, [ebp - 0x78]
push edx
push 0x80
lea eax, [ebp + 0x7c8]
push eax
push ecx
call fcn.0046b970
mov esi, eax
add esp, 0x14
mov dword [ebp - 0x64], esi
cmp esi, 2
jne 0x46bf5d
xor esi, esi
mov dword [ebp - 0x64], esi
cmp dword [ebp - 0x78], 0
jbe 0x46c094
lea edx, [ebp + 0x7c8]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea edi, [eax + eax + 2]
mov eax, edi
call fcn.0044a220
mov eax, esp
push edi
lea ecx, [ebp + 0x7c8]
push ecx
push eax
call fcn.00416bf0
push eax
lea edi, [ebx + 0xc0]
push edi
call fcn.0044d215
add esp, 8
test eax, eax
je 0x46c08e
xor esi, esi
cmp dword [ebp + 0x86c], esi
je 0x46bfbe
push str._GetConfig____Mise
call fcn.00469110
add esp, 4
xor eax, eax
mov dword [ebx + 0x14], esi
mov dword [ebx + 0xbc], esi
mov dword [ebx + 0xa0], eax
mov dword [ebx + 0xa4], eax
mov dword [ebx + 0xa8], eax
mov dword [ebx + 0xac], eax
mov dword [ebx + 0xb0], eax
push 0x80
mov dword [ebx + 0xb4], eax
lea edx, [ebx + 0x20]
push esi
mov word [ebx + 0xb8], ax
push edx
mov byte [ebx + 0xba], al
call fcn.00447660
add esp, 0xc
lea eax, [ebp + 0x7c8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax + eax + 2]
mov eax, esi
call fcn.0044a220
mov eax, esp
push esi
lea ecx, [ebp + 0x7c8]
push ecx
push eax
call fcn.00416bf0
mov edx, edi
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x46c036
mov eax, dword [ebp - 0x6c]
mov dword [ebx + 0x134], 0
test eax, eax
je 0x46c057
mov dword [eax], 0
mov esi, dword [ebp + 0x86c]
mov ecx, dword [ebp - 0x68]
push esi
lea edx, [ebp - 0x64]
push edx
mov edx, dword [ebp - 0x7c]
push ecx
push eax
mov eax, dword [ebp - 0x5c]
push ebx
push edx
push eax
call fcn.0046aa80
add esp, 0x1c
test esi, esi
mov esi, dword [ebp - 0x64]
je 0x46c08e
push esi
push eax
push str._GetConfig____SetConfig_...______uiCodedAPINFO___u__dwError___d
call fcn.00469110
add esp, 0xc
mov edi, dword [ebp + 0x86c]
mov eax, dword [ebp - 0x60]
add eax, 0xfffffff8
cmp dword [eax], 0xdddd
jne 0x46c0ab
push eax
call fcn.004482e1
add esp, 4
mov ecx, dword [ebp - 0x74]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
cmp dword [ebp - 0x54], 0
je 0x46c16c
mov edi, dword [ebp - 0x54]
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x46c0cb
mov dword [eax], esi
cmp dword [ebp + 0x86c], 0
je 0x46c0e3
push esi
push edi
push str._GetConfig__fin___uiSize___d__dwError___d
call fcn.00469110
add esp, 0xc
mov eax, edi
lea esp, [ebp - 0x8c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x848]
xor ecx, ebp
call fcn.00447645
add ebp, 0x84c
mov esp, ebp
pop ebp
ret
mov esi, 0xffffffed
test edi, edi
je 0x46c094
push str._GetConfig__ERROR_AP_DECRYPT___DecryptAPData_lpszData___LPBYTE_pApInfo__sizeof_APINFO_______uiSize__0
call fcn.00469110
add esp, 4
jmp 0x46c094
mov esi, 8
jmp 0x46c0ab
cmp dword [ebp + 0x86c], 0
je 0x46c166
lea edx, [ebp + 0x648]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
inc esi
lea eax, [esi + esi]
call fcn.0044a220
mov eax, esp
push esi
lea ecx, [ebp + 0x648]
push ecx
push eax
call fcn.0040a2d0
push eax
push 0x4a2eb8
call fcn.00469110
add esp, 8
mov edi, dword [ebp + 0x86c]
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x5c]
push edi
push edx
push eax
push ecx
push 0
push ebx
call fcn.00469850
add esp, 0x18
mov esi, 2
jmp 0x46c0bf
mov esi, 0xfffffffa
jmp 0x46c0c2